Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão:09-05-2016
Executado por Gustavo (2016-05-12 23:18:05)
Executando a partir de C:\Users\Gustavo\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2012-03-24 21:40:54)
Modo da Inicialização: Normal
==========================================================


==================== Contas: =============================

Administrador (S-1-5-21-804455452-1931677120-3478059188-500 - Administrator - Disabled)
Convidado (S-1-5-21-804455452-1931677120-3478059188-501 - Limited - Disabled)
Gustavo (S-1-5-21-804455452-1931677120-3478059188-1001 - Administrator - Enabled) => C:\Users\Gustavo
HomeGroupUser$ (S-1-5-21-804455452-1931677120-3478059188-1005 - Limited - Enabled)
Mcx1-GUSTAVO-LAPTOP (S-1-5-21-804455452-1931677120-3478059188-1004 - Limited - Enabled) => C:\Users\Mcx1-GUSTAVO-LAPTOP
VUSR_GUSTAVO-LAPTOP (S-1-5-21-804455452-1931677120-3478059188-1084 - Limited - Enabled)

==================== Central de Segurança ========================

(Se uma entrada for incluída na fixlist, será removida.)

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Programas Instalados ======================

(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)

µTorrent (HKU\S-1-5-21-804455452-1931677120-3478059188-1001\...\uTorrent) (Version: 3.4.6.42094 - BitTorrent Inc.)
64 Bit HP CIO Components Installer (Version: 1.2.0 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 6.2.2 - Hewlett-Packard) Hidden
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.016.20039 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.7.0.1530 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.5 - Adobe Systems Incorporated)
Adobe Flash Player 21 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 21.0.0.213 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 4 64-bit (HKLM\...\{669A82E0-43E2-4645-8A2E-1A3DE78F8312}) (Version: 4.0.1 - Adobe)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 7.0 - Atheros)
aTube Catcher versão 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2215 - AVAST Software)
BufferChm (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.04 - Piriform)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Control Center (HKLM-x32\...\{A09AB2EA-4E3B-48A8-A716-CD4FB3529548}) (Version: 1.0 - TPS)
Corel Graphics - Windows Shell Extension (HKLM\...\_{4DC318F5-1640-4417-A218-912ED9905FAA}) (Version: 17.1.0.572 - )
CorelDRAW Graphics Suite X8 - BR (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Capture (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Common (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Connect (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Custom Data (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Draw (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Filters (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Font Manager (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - IPM Content (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - IPM T (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - PHOTO-PAINT (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Redist (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Setup Files (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - VBA (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - VideoBrowser (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Workspaces (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Writing Tools (x64) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 (64-Bit) (HKLM\...\_{4B3FC55D-E999-4BEC-AF29-1091E574961F}) (Version: 18.0.0.448 - Corel Corporation)
CorelDRAW Graphics Suite X8 (Version: 18.0 - Corel Corporation) Hidden
D1600 (x32 Version: 140.0.690.000 - Hewlett-Packard) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DJ_SF_06_D1600_SW_Min (x32 Version: 140.0.690.000 - Hewlett-Packard) Hidden
Dropbox (HKU\S-1-5-21-804455452-1931677120-3478059188-1001\...\Dropbox) (Version: 3.20.1 - Dropbox, Inc.)
Entity Framework Tools for Visual Studio 2013 (HKLM-x32\...\{08AEF86A-1956-4846-B906-B01350E96E30}) (Version: 12.0.20912.0 - Microsoft Corporation)
FormatFactory 3.6.0.0 (HKLM-x32\...\FormatFactory) (Version: 3.6.0.0 - Format Factory)
Galeria de Fotos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
GBBD Caixa Economica Federal (HKLM-x32\...\{5d01f486-f32d-462e-8830-cc1d116e8ece}_is1) (Version: 3.12.0.2 - )
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\_{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation)
Ghostscript GPL 8.64 (Msi Setup) (x32 Version: 8.64 - Corel Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 50.0.2661.102 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden
GoPro App (x32 Version: 5.7.549 - GoPro, Inc.) Hidden
GoPro Studio 2.5.7 (HKLM-x32\...\{b996dca2-156c-4d2c-b9a3-59fac08cef33}) (Version: 2.5.7.549 - GoPro, Inc.)
High-Definition Video Playback (x32 Version: 11.1.10400.2.65 - Nero AG) Hidden
HP Deskjet 3050 J610 series Software básico do dispositivo (HKLM\...\{E6E28DE7-446E-4E27-BE37-4B6D925A385B}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Deskjet D1600 Printer Driver Software 14.0 Rel. 6 (HKLM\...\{96178C0A-BAF9-4E49-A2A5-CDE76722105B}) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version: - )
IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version: - )
Image Resizer for Windows (64 bit) (Version: 3.0.4442.6002 - Brice Lambson) Hidden
Image Resizer for Windows (HKLM-x32\...\{9dfff2f7-5cd7-4fd4-9b75-7d53b042d94b}) (Version: 3.0.4442.6002 - Brice Lambson)
Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1118 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2246 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.0.1004 - Intel Corporation)
IPM_Installer (Version: 2.1 - Your Company Name) Hidden
IRPF2012 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País (HKLM-x32\...\IRPF2012) (Version: 1.0 - Receita Federal do Brasil)
IRPF2013 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País (HKLM-x32\...\IRPF2013) (Version: 1.0 - Receita Federal do Brasil)
IRPF2014 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País (HKLM-x32\...\IRPF2014) (Version: 1.0 - Receita Federal do Brasil)
IRPF2015 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País (HKLM-x32\...\IRPF2015) (Version: 1.2 - Receita Federal do Brasil)
IRPF2016 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País (HKLM-x32\...\IRPF2016) (Version: 1.1 - Receita Federal do Brasil)
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
KnockOut 2 (HKLM-x32\...\KnockOut 2) (Version: - )
Matroska Pack (HKLM-x32\...\Matroska Pack) (Version: - )
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK - PTB Lang Pack (HKLM-x32\...\{DC372AEA-8483-4785-B291-62F67EBFF02F}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{AD808004-719D-3045-B1FA-C0C845BB7C63}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (ENU) (HKLM-x32\...\{8EBF82FA-BD9E-4154-94DB-0946B48C346B}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.6 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 (Português do Brasil) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1046) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation)
Microsoft Office 2010 Service Pack 1 (SP1) (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{7BC9B5EB-125A-4E9B-97E1-8D85B5E960B8}) (Version: - Microsoft)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-804455452-1931677120-3478059188-1001\...\OneDriveSetup.exe) (Version: 17.3.4604.0120 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{58FED865-4F13-408D-A5BF-996019C4B936}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 PTB (HKLM\...\{E451FC79-21BE-4BDA-86DB-9F3B34DE181D}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (12.0.30919.1) (HKLM-x32\...\{0D7FCBFB-F478-4D32-901C-83F0BF5A3501}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - PTB (12.0.30919.1) (HKLM-x32\...\{78524AD4-5444-4E78-9008-C14DEFBE33BB}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - PTB (12.0.30919.1) (HKLM-x32\...\{6CF636F7-1C41-4CC4-B985-386ADF2707EF}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft Visio Professional 2016 - pt-br (HKLM\...\VisioProRetail - pt-br) (Version: 16.0.4266.1003 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.40820 - Microsoft Corporation)
Microsoft Visual Studio 6.0 Enterprise Edition (HKLM-x32\...\Visual Studio 6.0 Enterprise Edition) (Version: - )
Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2012 (HKLM-x32\...\{89ca2a32-2b52-4595-8dfd-6fe4757958d0}) (Version: 11.0.51108 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2015 (HKLM-x32\...\{dd8b09df-3ef8-49f1-bd1a-65278435860b}) (Version: 14.0.23217 - Microsoft Corporation)
Microsoft Web Deploy 3.5 (HKLM\...\{3674F088-9B90-473A-AAC3-20A00D8D810C}) (Version: 3.1237.1762 - Microsoft Corporation)
Microsoft Web Publishing Wizard 1.53 (HKLM-x32\...\WebPost) (Version: - )
Módulo de Proteção - Banco Santander (Brasil) S.A. (HKLM-x32\...\{83033d93-48d0-48fc-9c5b-82e57e7e0dd6}_is1) (Version: 3.11.0.1 - )
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 46.0.1 (x86 pt-BR) (HKLM-x32\...\Mozilla Firefox 46.0.1 (x86 pt-BR)) (Version: 46.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 46.0.1.5966 - Mozilla)
Mp3tag v2.54 (HKLM-x32\...\Mp3tag) (Version: v2.54 - Florian Heidenreich)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
Nero 11 (HKLM-x32\...\{8A7ABBD4-A617-4AE8-9C6D-1510DE46EC35}) (Version: 11.0.15500 - Nero AG)
Nero Backup Drivers (HKLM\...\{D600D357-5CB9-4DE9-8FD4-14E208BD1970}) (Version: 1.0.10000.1.0 - Nero AG)
Office 16 Click-to-Run Extensibility Component (Version: 16.0.4266.1003 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.4266.1003 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (Version: 16.0.4266.1003 - Microsoft Corporation) Hidden
Open XML SDK 2.5 for Microsoft Office (x32 Version: 2.5.5631 - Microsoft Corporation) Hidden
Pacote de Driver do Windows - TPS (tpsacpi) System (05/13/2010 1.00.00.0005) (HKLM\...\5B99C8D4700391A365AE093C558669E158FEB4AA) (Version: 05/13/2010 1.00.00.0005 - TPS)
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - PTB (Version: 11.0.51108 - Microsoft Corporation) Hidden
Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - PTB (x32 Version: 11.0.51108 - Microsoft Corporation) Hidden
Pacote de Idiomas do Visualizador de Ajuda Microsoft 2.1 - PTB (HKLM-x32\...\Pacote de Idiomas do Visualizador de Ajuda Microsoft 2.1 - PTB) (Version: 2.1.21005 - Microsoft Corporation)
Pacote de Idiomas do Visualizador de Ajuda Microsoft 2.1 - PTB (x32 Version: 2.1.21005 - Microsoft Corporation) Hidden
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.5.1 - Frank Heindörfer, Philip Chinery)
Photodex Presenter (HKLM-x32\...\Photodex Presenter) (Version: - Photodex Corporation)
Prerequisites for SSDT (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation)
ProShow Gold (HKLM-x32\...\ProShow Gold) (Version: - Photodex Corporation)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.31.1025.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5978 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4fed-B2B9-173F09590E16}) (Version: 1.00.0145 - REALTEK Semiconductor Corp.)
Receitanet (HKLM-x32\...\ECC16E3C-16D1-4DC2-9D8A-6AC06B3005A5) (Version: 1.07 - Serpro - Serviço Federal de Processamento de Dados)
SharePoint Client Components (Version: 15.0.4481.1505 - Microsoft Corporation) Hidden
SpyHunter (HKLM-x32\...\{4FC9DA9D-F608-454E-8191-D7EFFDCC5726}) (Version: 4.1.11 - Enigma Software Group USA, LLC)
Suporte para Aplicativos Apple (HKLM-x32\...\{F5266D28-E0B2-4130-BFC5-EE155AD514DC}) (Version: 2.3 - Apple Inc.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Toolbox (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
Topaz Adjust 5 (HKLM-x32\...\Topaz Adjust 5) (Version: 5.0.1 - Topaz Labs, LLC)
Topaz B&W Effects (HKLM-x32\...\Topaz BW Effects 2) (Version: 2.1.0 - Topaz Labs, LLC)
Topaz Clarity (HKLM-x32\...\Topaz Clarity) (Version: 1.0.0 - Topaz Labs, LLC)
Topaz Clean 3 (HKLM-x32\...\Topaz Clean 3) (Version: 3.1.0 - Topaz Labs, LLC)
Topaz DeJpeg 4 (HKLM-x32\...\Topaz DeJpeg 4) (Version: 4.0.2 - Topaz Labs, LLC)
Topaz DeNoise 5 (HKLM-x32\...\Topaz DeNoise 5) (Version: 5.1.0 - Topaz Labs, LLC)
Topaz Detail 3 (HKLM-x32\...\Topaz Detail 3) (Version: 3.2.0 - Topaz Labs, LLC)
Topaz Fusion Express 2 (HKLM-x32\...\Topaz Fusion Express 2) (Version: 2.1.3 - Topaz Labs, LLC)
Topaz InFocus (HKLM-x32\...\Topaz InFocus) (Version: 1.0.0 - Topaz Labs, LLC)
Topaz Lens Effects (HKLM-x32\...\Topaz Lens Effects) (Version: 1.2.0 - Topaz Labs, LLC)
Topaz ReMask 3 (HKLM-x32\...\Topaz ReMask 3) (Version: 3.2.1 - Topaz Labs, LLC)
Topaz ReMask 4 (HKLM-x32\...\Topaz ReMask 4) (Version: 4.0.0 - Topaz Labs, LLC)
Topaz ReStyle (HKLM-x32\...\Topaz ReStyle) (Version: 1.0.0 - Topaz Labs, LLC)
Topaz Simplify 4 (HKLM-x32\...\Topaz Simplify 4) (Version: 4.1.1 - Topaz Labs, LLC)
Topaz Star Effects (HKLM-x32\...\Topaz Star Effects) (Version: 1.1.0 - Topaz Labs, LLC)
Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VFW_Codec32 (x32 Version: 0.1.160.0 - GoPro, Inc.) Hidden
VFW_Codec64 (Version: 0.1.160.0 - GoPro, Inc.) Hidden
WCF RIA Services V1.0 SP2 (HKLM-x32\...\{5D8DD6A8-C4D7-4554-93F9-F1CC28C72600}) (Version: 4.1.62812.0 - Microsoft Corporation)
WebReg (x32 Version: 140.0.212.017 - Hewlett-Packard) Hidden
welcome (x32 Version: 11.0.21500.0.4 - Nero AG) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Windows Mobile Device Center (HKLM\...\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation)
WinRAR archiver (HKLM-x32\...\WinRAR archiver) (Version: - )
Wondershare Video Converter Ultimate(Build 6.0.0.18) (HKLM-x32\...\Wondershare Video Converter Ultimate_is1) (Version: 6.0.0.18 - Wondershare Software)
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x64) - RUS (Version: 11.0.51108 - Microsoft Corporation) Hidden
Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x86) - RUS (x32 Version: 11.0.51108 - Microsoft Corporation) Hidden

==================== Exame Personalizado CLSID (Whitelisted): ==========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

CustomCLSID: HKU\S-1-5-21-804455452-1931677120-3478059188-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Gustavo\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-804455452-1931677120-3478059188-1001_Classes\CLSID\{0783EB25-59F8-4F02-B6B0-F1D4349F0001}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\GAS Tecnologia\GBBD\npsf_abn_64.dll (GAS Tecnologia)
CustomCLSID: HKU\S-1-5-21-804455452-1931677120-3478059188-1001_Classes\CLSID\{0783EB25-59F8-4F02-B6B0-F1D4349F0007}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\GAS Tecnologia\GBBD\npsf_cef_64.dll (GAS Tecnologia)
CustomCLSID: HKU\S-1-5-21-804455452-1931677120-3478059188-1001_Classes\CLSID\{0783EB25-59F8-4F02-B6B1-F1D4349F0001}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\GAS Tecnologia\GBBD\npsf_abn_64.dll (GAS Tecnologia)
CustomCLSID: HKU\S-1-5-21-804455452-1931677120-3478059188-1001_Classes\CLSID\{0783EB25-59F8-4F02-B6B1-F1D4349F0007}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\GAS Tecnologia\GBBD\npsf_cef_64.dll (GAS Tecnologia)
CustomCLSID: HKU\S-1-5-21-804455452-1931677120-3478059188-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Gustavo\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-804455452-1931677120-3478059188-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gustavo\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-804455452-1931677120-3478059188-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gustavo\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-804455452-1931677120-3478059188-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gustavo\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-804455452-1931677120-3478059188-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gustavo\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-804455452-1931677120-3478059188-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gustavo\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-804455452-1931677120-3478059188-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gustavo\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-804455452-1931677120-3478059188-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gustavo\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-804455452-1931677120-3478059188-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Gustavo\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-804455452-1931677120-3478059188-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Gustavo\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)

==================== Tarefas Agendadas (Whitelisted) =============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

Task: {0DFFE8C0-0825-42BD-9543-2A2D11FBBBD3} - System32\Tasks\{D5310772-FBEC-48A3-AD06-DFF16573C196} => pcalua.exe -a "C:\Users\Gustavo\Desktop\Dialogys 4.8\Dialogys 4.8 CD1\Dialogys_64bit.exe" -d "C:\Users\Gustavo\Desktop\Dialogys 4.8\Dialogys 4.8 CD1"
Task: {11C14A3F-7CB6-48F2-8A21-D540F32B848B} - System32\Tasks\{56AF6F7A-D834-4E2D-8B36-0A2564E38D7E} => pcalua.exe -a C:\Users\Gustavo\AppData\Local\Temp\GLF60EA.tmp\DIALOG~1.EXE -d "C:\Users\Gustavo\Desktop\Dialogys 4.2\Dialogys 4.00 DVD0 v7.0.5" -c /awm "C:\Users\Gustavo\AppData\Local\Temp\GLF60EA.tmp\settings.ini" <==== ATENÇÃO
Task: {165868B7-94EE-4B88-B7BF-3CCB74757D77} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {1A72C7F8-5734-4703-BF4A-464C76EE7DA8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-09] (Adobe Systems Incorporated)
Task: {1C31A803-86B4-4A21-B72F-E78E516EC266} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-804455452-1931677120-3478059188-1001Core => C:\Users\Gustavo\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16] (Dropbox, Inc.)
Task: {2E9DE8B2-1E37-4084-8442-6A95F45C5C92} - System32\Tasks\{01E35394-5AE9-43C5-8C13-89E99ABC82E6} => pcalua.exe -a "C:\Users\Gustavo\Desktop\Dialogys 4.8\Dialogys.v7.1.5_DVD0\DialogysInstall.EXE" -d "C:\Users\Gustavo\Desktop\Dialogys 4.8\Dialogys.v7.1.5_DVD0"
Task: {3D5E06E8-ACC2-462E-99C9-8D7D170166CB} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-09-26] (Oracle Corporation)
Task: {3F702BE6-9367-4A38-821A-302A515F3898} - System32\Tasks\SpyHunter4Startup => C:\Program Files (x86)\Enigma Software Group\SpyHunter\Spyhunter4.exe [2014-11-29] (Enigma Software Group USA, LLC.)
Task: {4474202E-6CB1-412F-81AF-5B999A5C8BA6} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-804455452-1931677120-3478059188-1001UA => C:\Users\Gustavo\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16] (Dropbox, Inc.)
Task: {46405C73-EFD1-40F5-A99A-2E46FFFC0403} - System32\Tasks\{ACD14412-42C9-4A23-A611-2B2666365A47} => C:\Users\Gustavo\Desktop\Renault Dialogys 4.6 MULTi-WhO\Dialogys.v7.1.5_DVD0\DialogysInstall.EXE
Task: {4B667D59-88B5-4646-B8CA-AA42ACD0CDA9} - System32\Tasks\Microsoft\Windows\Media Center\Extender\Update media permissions for Mcx1-GUSTAVO-LAPTOP => C:\Windows\ehome\McxTask.exe [2009-07-13] (Microsoft Corporation)
Task: {595F57E1-760A-45A7-9013-21B434323426} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-04-18] (AVAST Software)
Task: {5F44C5AF-3092-4C2C-9552-F2BA5E0B21CF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {72BA2D2F-7530-476E-812A-7CE24CA8B08F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-07-22] (Piriform Ltd)
Task: {8176CF3B-874A-43F5-A1A7-7188C3AA0ABC} - System32\Tasks\{F0B1C80B-F5C5-4706-A0B2-6DA22AD399EF} => pcalua.exe -a "C:\Users\Gustavo\Desktop\Renault Dialogys\executavel\Dialogys v4.1\5-Dialogys-CD4-4.1\Dialogys_64bit.exe" -d "C:\Users\Gustavo\Desktop\Renault Dialogys\executavel\Dialogys v4.1\5-Dialogys-CD4-4.1"
Task: {8504C90D-4986-4D14-BE40-D7BCF6292EC9} - System32\Tasks\{3636B4AD-3A2B-4635-B8CB-E736609F94DD} => pcalua.exe -a "C:\Users\Gustavo\Desktop\Renault Dialogys 4.6 MULTi-WhO\Dialogys.v7.1.5_DVD0\DialogysInstall.EXE" -d "C:\Users\Gustavo\Desktop\Renault Dialogys 4.6 MULTi-WhO\Dialogys.v7.1.5_DVD0"
Task: {87A110B9-A7D8-4745-9149-CB12FC4EE08D} - System32\Tasks\YourFile DownloaderUpdate => C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe <==== ATENÇÃO
Task: {92E8F000-425C-4FE2-B5B5-400845FB04E1} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-03-17] (Avast Software s.r.o.)
Task: {9D95E1FE-5938-4D09-AFB6-069ECD420F07} - System32\Tasks\{9AA1348F-05AB-4058-8227-6B7C91180A35} => pcalua.exe -a "C:\Users\Gustavo\Desktop\Dialogys 4.2\Dialogys 4.00 DVD0 v7.0.5\Dialogys_32bit\FILEPATH1\DialogysInstall.EXE" -d "C:\Users\Gustavo\Desktop\Dialogys 4.2\Dialogys 4.00 DVD0 v7.0.5"
Task: {A392D4AE-4A9B-4C8C-8B4F-0B1285B09D25} - System32\Tasks\CorelUpdateHelperTaskCore => c:\Program Files (x86)\Corel\CUH\v2\CUH.exe [2016-02-26] (Corel Corporation)
Task: {AAD9362F-C485-4D3E-9AF2-1F18DAC022B9} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2015-08-16] (Microsoft Corporation)
Task: {B3AA62A4-05BB-43B2-9D7B-7BBF3B8177BB} - System32\Tasks\{DC784C4B-04D7-4820-A99C-C987BF6C6AFC} => pcalua.exe -a "C:\Users\Gustavo\Desktop\Renault Dialogys\Dialogys v4.1\2-Dialogys-DVD1-4.1\Dialogys_64bit.exe" -d "C:\Users\Gustavo\Desktop\Renault Dialogys\Dialogys v4.1\2-Dialogys-DVD1-4.1"
Task: {B692F630-D78D-40A5-9131-6F841E6A1782} - System32\Tasks\{6C01181B-0751-4FC1-98A7-1D74AFBED67C} => pcalua.exe -a C:\Users\Gustavo\Desktop\DIALOG~1.2\DIALOG~1.5\DIALOG~1.EXE -d "C:\Users\Gustavo\Desktop\Dialogys 4.2\Dialogys 4.00 DVD0 v7.0.5"
Task: {B837CD26-6E27-48EC-9979-372962356F1D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
Task: {BC45B065-46DC-405B-ABA1-5FC913470436} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe
Task: {C6213E25-3EC6-4A39-BCDB-A81BF31B71AD} - System32\Tasks\{775C8E99-32A5-476B-AF93-0D519089BEFA} => pcalua.exe -a "C:\Users\Gustavo\Desktop\Adobe Acrobat XI Pro 11.0.1 Multilanguage [ChingLiu]\Adobe Acrobat XI\Setup.exe" -d "C:\Users\Gustavo\Desktop\Adobe Acrobat XI Pro 11.0.1 Multilanguage [ChingLiu]\Adobe Acrobat XI"
Task: {C6A4B437-8824-4EC7-8B49-B6B78C551D63} - System32\Tasks\avastBCLRestartS-1-5-21-804455452-1931677120-3478059188-1001 => Firefox.exe
Task: {CB8E7F87-B6ED-4AA4-A55D-524A7F3483E8} - System32\Tasks\{1493FB4F-9CD2-40CD-B045-4BFC212C912D} => pcalua.exe -a "C:\Users\Gustavo\Desktop\Renault Dialogys\1-Dialogys-DVD0-7.0.5\Dialogys_64bit\FILEPATH1\DialogysInstall.EXE" -d "C:\Users\Gustavo\Desktop\Renault Dialogys\1-Dialogys-DVD0-7.0.5\Dialogys_64bit\FILEPATH1"
Task: {D361ED5F-2470-4208-AE55-D918DED6D4FD} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2016-05-11] (Microsoft Corporation)
Task: {D5B247E1-6399-4CB8-9F69-60C32430F492} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2016-05-11] (Microsoft Corporation)
Task: {DDDA5436-27C0-465E-B6CA-B77199666007} - System32\Tasks\{D751C9CD-52DA-4B0B-8617-E08DEFAF0390} => pcalua.exe -a C:\Users\Gustavo\AppData\Local\Temp\GLF60EA.tmp\WISEPR~1.EXE -d "C:\Users\Gustavo\Desktop\Dialogys 4.2\Dialogys 4.00 DVD0 v7.0.5" -c "C:\Users\Gustavo\Desktop\Dialogys 4.2\Dialogys 4.00 DVD0 v7.0.5\Dialogys_64bit.msi" InstallUISequence
Task: {DE4DBCC0-1368-45D0-92C1-9B43DC0EA16E} - System32\Tasks\{BE36868B-0F79-4713-980D-266D224E43EC} => C:\Users\Gustavo\Desktop\Renault Dialogys 4.6 MULTi-WhO\Dialogys.v7.1.5_DVD0\DialogysInstall.EXE
Task: {ED7CE2D5-99D2-45C5-8638-A44A86F21661} - System32\Tasks\{DEA3C19D-FEA2-43DF-9818-9B251A33D37C} => msiexec.exe /package "C:\Users\Gustavo\Desktop\Adobe Acrobat X Professional 10.1.4 Multilingual By bobiras2009\Adobe Acrobat X Professional 10.1.4 Multilingual By bobiras2009 Install.msi"
Task: {EFE37804-BB5B-448F-B789-3E4CC4BA15BB} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2015-08-16] (Microsoft Corporation)

(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-804455452-1931677120-3478059188-1001Core.job => C:\Users\Gustavo\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-804455452-1931677120-3478059188-1001UA.job => C:\Users\Gustavo\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Atalhos =============================

(As entradas podem ser listadas para serem restauradas ou removidas.)

ShortcutWithArgument: C:\Users\Gustavo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.mystartsearch.com/?type=sc&ts=1435939466&z=d1e2208e06202661acf42d5gaz8cfw8tbc5t3z4w3c&from=ima&uid=TOSHIBAXMK7559GSXF_21AHC8X2TXX21AHC8X2T
ShortcutWithArgument: C:\Users\Gustavo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.mystartsearch.com/?type=sc&ts=1435939466&z=d1e2208e06202661acf42d5gaz8cfw8tbc5t3z4w3c&from=ima&uid=TOSHIBAXMK7559GSXF_21AHC8X2TXX21AHC8X2T
ShortcutWithArgument: C:\Users\Gustavo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.mystartsearch.com/?type=sc&ts=1435939466&z=d1e2208e06202661acf42d5gaz8cfw8tbc5t3z4w3c&from=ima&uid=TOSHIBAXMK7559GSXF_21AHC8X2TXX21AHC8X2T
ShortcutWithArgument: C:\Users\Gustavo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.mystartsearch.com/?type=sc&ts=1435939466&z=d1e2208e06202661acf42d5gaz8cfw8tbc5t3z4w3c&from=ima&uid=TOSHIBAXMK7559GSXF_21AHC8X2TXX21AHC8X2T
ShortcutWithArgument: C:\Users\Gustavo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.mystartsearch.com/?type=sc&ts=1435939466&z=d1e2208e06202661acf42d5gaz8cfw8tbc5t3z4w3c&from=ima&uid=TOSHIBAXMK7559GSXF_21AHC8X2TXX21AHC8X2T
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.mystartsearch.com/?type=sc&ts=1435939466&z=d1e2208e06202661acf42d5gaz8cfw8tbc5t3z4w3c&from=ima&uid=TOSHIBAXMK7559GSXF_21AHC8X2TXX21AHC8X2T

==================== Módulos Carregados (Whitelisted) ==============

2013-07-23 23:28 - 2008-06-20 00:41 - 00062464 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2012-09-21 19:26 - 2012-09-06 18:40 - 00727952 _____ () C:\Windows\SysWOW64\WSCM64.dll
2016-05-10 23:15 - 2011-03-16 23:07 - 04297568 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2016-05-11 00:00 - 2015-08-16 00:21 - 00162880 _____ () C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll
2012-07-23 23:17 - 2012-11-28 15:06 - 00008192 _____ () C:\Windows\SysWOW64\srvany.exe
2012-11-28 15:06 - 2012-11-28 15:06 - 00151622 _____ () C:\Windows\kmsem\KMService.exe
2013-04-26 21:52 - 2013-04-26 21:52 - 00186760 _____ () C:\Program Files (x86)\Photodex\ProShow Gold\ScsiAccess.exe
2011-02-01 09:21 - 2010-11-12 02:08 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-02-01 09:35 - 2010-06-23 13:15 - 00800256 _____ () C:\Program Files (x86)\Control Center\CCenter.exe
2015-04-12 12:55 - 2015-04-12 12:55 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-04-12 12:55 - 2015-04-12 12:55 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-05-12 20:38 - 2016-05-12 20:38 - 02905088 _____ () C:\Program Files\AVAST Software\Avast\defs\16051201\algo.dll
2012-11-28 15:06 - 2012-11-28 15:06 - 00032768 _____ () C:\Windows\kmsem\Shadow.KMS
2010-05-18 15:54 - 2010-05-18 15:54 - 00395776 _____ () C:\Program Files (x86)\Enigma Software Group\SpyHunter\ExecutionGuard.dll
2015-04-12 12:55 - 2015-04-12 12:56 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-01-21 17:24 - 2013-01-21 17:24 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\8fa8f8d299df978acb85dbddf29f405b\IsdiInterop.ni.dll
2011-02-01 09:39 - 2010-10-20 08:28 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2011-02-01 09:35 - 2007-09-24 11:12 - 00088576 _____ () C:\Program Files (x86)\Control Center\AcpiRwDll.dll
2011-02-01 09:35 - 2008-03-07 13:55 - 00088576 _____ () C:\Program Files (x86)\Control Center\ShowIcoOSD.dll
2011-02-01 09:35 - 2007-09-24 11:12 - 00089088 _____ () C:\Program Files (x86)\Control Center\ShowProgressOSD.dll
2011-02-01 09:35 - 2008-01-28 09:46 - 00089088 _____ () C:\Program Files (x86)\Control Center\ShowDisplaySwitchOSD.dll

==================== Alternate Data Streams (Whitelisted) =========

(Se uma entrada for incluída na fixlist, somente o ADS será removido.)

AlternateDataStreams: C:\Windows\System32:D51CB9E0_Abn.gbp [2]

==================== Modo de Segurança (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)


==================== Associação (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)


==================== Internet Explorer confiável/restrito ===============

(Se uma entrada for incluída na fixlist, será removida do Registro.)

IE trusted site: HKU\.DEFAULT\...\bancoreal.com.br -> hxxp://www.bancoreal.com.br
IE trusted site: HKU\.DEFAULT\...\bancosantander.com.br -> hxxp://www.bancosantander.com.br
IE trusted site: HKU\.DEFAULT\...\bancosantander.com.br -> hxxps://www.bancosantander.com.br
IE trusted site: HKU\.DEFAULT\...\realsecureweb.com.br -> hxxps://www.realsecureweb.com.br
IE trusted site: HKU\.DEFAULT\...\santander.com.br -> hxxp://www.santander.com.br
IE trusted site: HKU\.DEFAULT\...\santanderempresarial.com.br -> hxxp://www.santanderempresarial.com.br
IE trusted site: HKU\.DEFAULT\...\santandernet.com.br -> hxxps://www.santandernet.com.br
IE trusted site: HKU\.DEFAULT\...\santandernetibe.com.br -> hxxps://www.santandernetibe.com.br
IE trusted site: HKU\.DEFAULT\...\secureweb.com.br -> hxxps://www.secureweb.com.br
IE trusted site: HKU\S-1-5-21-804455452-1931677120-3478059188-1001\...\bancoreal.com.br -> hxxp://www.bancoreal.com.br
IE trusted site: HKU\S-1-5-21-804455452-1931677120-3478059188-1001\...\bancosantander.com.br -> hxxp://www.bancosantander.com.br
IE trusted site: HKU\S-1-5-21-804455452-1931677120-3478059188-1001\...\bancosantander.com.br -> hxxps://www.bancosantander.com.br
IE trusted site: HKU\S-1-5-21-804455452-1931677120-3478059188-1001\...\realsecureweb.com.br -> hxxps://www.realsecureweb.com.br
IE trusted site: HKU\S-1-5-21-804455452-1931677120-3478059188-1001\...\santander.com.br -> hxxp://www.santander.com.br
IE trusted site: HKU\S-1-5-21-804455452-1931677120-3478059188-1001\...\santander.com.br -> www.santander.com.br
IE trusted site: HKU\S-1-5-21-804455452-1931677120-3478059188-1001\...\santanderempresarial.com.br -> hxxp://www.santanderempresarial.com.br
IE trusted site: HKU\S-1-5-21-804455452-1931677120-3478059188-1001\...\santanderempresarial.com.br -> www.santanderempresarial.com.br
IE trusted site: HKU\S-1-5-21-804455452-1931677120-3478059188-1001\...\santandernet.com.br -> hxxps://www.santandernet.com.br
IE trusted site: HKU\S-1-5-21-804455452-1931677120-3478059188-1001\...\santandernet.com.br -> www.santandernet.com.br
IE trusted site: HKU\S-1-5-21-804455452-1931677120-3478059188-1001\...\santandernetibe.com.br -> hxxps://www.santandernetibe.com.br
IE trusted site: HKU\S-1-5-21-804455452-1931677120-3478059188-1001\...\santandernetibe.com.br -> www.santandernetibe.com.br
IE trusted site: HKU\S-1-5-21-804455452-1931677120-3478059188-1001\...\secureweb.com.br -> www.secureweb.com.br
IE trusted site: HKU\S-1-5-21-804455452-1931677120-3478059188-1001\...\secureweb.com.br -> hxxps://www.secureweb.com.br

==================== Hosts Conteúdo: ==========================

(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)

2009-07-13 23:34 - 2016-05-12 22:27 - 00001006 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com

==================== Outras Áreas ============================

(Atualmente não há nenhuma correção automática para esta seção.)

HKU\S-1-5-21-804455452-1931677120-3478059188-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Gustavo\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 201.17.1.93 - 201.17.1.115
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Firewall do Windows está habilitado.

==================== MSCONFIG/TASK MANAGER ítens desabilitados ==

(Atualmente não há nenhuma correção automática para esta seção.)

MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: NAUpdate => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: SwitchBoard => 3
MSCONFIG\startupfolder: C:^Users^Gustavo^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Gustavo^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^PowerReg Scheduler.exe => C:\Windows\pss\PowerReg Scheduler.exe.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: BCSSync => "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: Browser Infrastructure Helper => C:\Users\Gustavo\AppData\Local\Smartbar\Application\QuickShare.exe startup
MSCONFIG\startupreg: BrowserPlugInHelper => C:\Program Files (x86)\Wondershare\Video Converter Ultimate\BrowserPlugInHelper.exe
MSCONFIG\startupreg: Control Center => C:\Program Files (x86)\Control Center\CCenter.exe
MSCONFIG\startupreg: Dropbox Update => "C:\Users\Gustavo\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
MSCONFIG\startupreg: GoPro Studio Importer => C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe
MSCONFIG\startupreg: HP Deskjet 3050 J610 series (NET) => "C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN232433YV05HX:NW" -scfn "HP Deskjet 3050 J610 series (NET)" -AutoStart 1
MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
MSCONFIG\startupreg: NBAgent => "C:\Program Files (x86)\Nero\Nero 11\Nero BackItUp\NBAgent.exe" /WinStart
MSCONFIG\startupreg: PDF Seven => C:\Program Files\PDFSeven\PDF.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: ROC_roc_ssl_v12 => "C:\Program Files (x86)\AVG Secure Search\ROC_roc_ssl_v12.exe" / /PROMPT /CMPID=roc_ssl_v12
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: Sweetpacks Communicator => C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
MSCONFIG\startupreg: vProt => "C:\Program Files (x86)\AVG Secure Search\vprot.exe"
MSCONFIG\startupreg: Windows Mobile Device Center => %windir%\WindowsMobile\wmdc.exe

==================== Regras do Firewall (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

FirewallRules: [{A3A10C25-68FA-49A2-B668-3EB011A39148}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{B2F74671-8653-4C10-9D41-441F6BFC0C0E}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe
FirewallRules: [{FEF99F0B-F2AD-4893-BFF9-B117A58A3BCD}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe
FirewallRules: [{B746DD69-F536-4CC0-A717-024CCA418262}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [{4711EB1B-6092-4C79-9C4E-5A3F63F4B701}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [TCP Query User{53465FD5-71BA-4E3B-AAFA-DF9D1189BA63}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{BBEF3713-626D-4B4F-B80A-6E8931C8B6CB}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{95524B87-5C35-46CF-B87B-42B5BC4DC5C9}] => (Allow) C:\Users\Gustavo\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{FFAABC06-1F93-4060-993B-B9958C4CC4E8}] => (Allow) C:\Users\Gustavo\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{34F93ABE-1E1F-4A78-BE07-8D9C194218F0}C:\users\gustavo\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\gustavo\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{22F9ADBA-E611-43CE-AD52-D21F4150E521}C:\users\gustavo\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\gustavo\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{58D377D8-0DD3-446F-A58A-9F269A1BC02B}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{458C9611-A563-416A-9243-ADAFF4D029AC}] => (Allow) LPort=2869
FirewallRules: [{D3C8B002-3853-4E5B-9324-1D68D4C4A891}] => (Allow) LPort=1900
FirewallRules: [{83B92860-D0D7-4197-B568-03918141CEA1}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{9DA0DAB1-B556-4F49-BD7D-43E20BFC2BD2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{1A154D4D-0034-4870-AD01-4136CAAB9245}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{C59EA1A9-4F13-492A-8AF4-498EAEB8C36F}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{676ABB53-A474-4D4A-905A-A17677D9EA25}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{3479159C-9F50-43B9-9EBE-0C34B4C0AFD3}] => (Allow) C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\DeviceSetup.exe
FirewallRules: [{34CCE671-0C52-400C-B05F-7EEF39DED8F4}] => (Allow) C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{4A8D08ED-6343-465E-B3CC-D373941AFC0B}] => (Allow) C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [TCP Query User{79BCA872-9F1C-4F2D-9916-CCFEE2827832}C:\program files (x86)\freetime\formatfactory\formatfactory.exe] => (Allow) C:\program files (x86)\freetime\formatfactory\formatfactory.exe
FirewallRules: [UDP Query User{3D630CD9-52F3-4CF6-A95A-D664CA4FEBB3}C:\program files (x86)\freetime\formatfactory\formatfactory.exe] => (Allow) C:\program files (x86)\freetime\formatfactory\formatfactory.exe
FirewallRules: [{E736D986-6CC7-48DA-9526-3A1F260443A1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{66E52D4C-22AA-4BBC-BADE-0E0BE4A258E9}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{C3F670D5-D0A6-4BBF-B12B-B3A604AE87EF}C:\program files (x86)\microsoft visual studio\common\tools\vs-ent98\vanalyzr\varpc.exe] => (Allow) C:\program files (x86)\microsoft visual studio\common\tools\vs-ent98\vanalyzr\varpc.exe
FirewallRules: [UDP Query User{BEAE050D-296F-4B24-83A3-EC6DBE644017}C:\program files (x86)\microsoft visual studio\common\tools\vs-ent98\vanalyzr\varpc.exe] => (Allow) C:\program files (x86)\microsoft visual studio\common\tools\vs-ent98\vanalyzr\varpc.exe
FirewallRules: [{75101E81-9E23-4DBE-B184-E5649CA3A902}] => (Allow) C:\Users\Gustavo\AppData\Local\Microsoft\OneDrive\OneDrive.exe
FirewallRules: [{31F77B58-17E6-4C80-BD48-E78BDDF80B78}] => (Allow) C:\Users\Gustavo\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{A401328E-E5A3-47C7-A66F-6180C594F74F}] => (Allow) C:\Users\Gustavo\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{523C6B1D-5EE0-42F2-9621-AED91B2BD30E}] => (Allow) C:\Users\Gustavo\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{B07C4165-6E6F-4686-A0CE-8BB8D81E66E6}] => (Allow) C:\Users\Gustavo\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{C293F020-A086-42CF-B120-D15320CEF4A9}] => (Allow) C:\Users\Gustavo\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{567FA71B-4A79-4F9E-8EAD-950651507E84}] => (Allow) C:\Users\Gustavo\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{BFAF2194-7FA3-4710-82C8-4B0BF43375A2}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{CD3E0050-F650-4493-B299-1EDBCF269491}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs64\CorelDrw.exe
FirewallRules: [{7C95564A-472C-4F5C-8707-1E99B962CC6A}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs64\CorelPP.exe

==================== Pontos de Restauração =========================

10-05-2016 23:09:31 Configured Microsoft Office Professional Plus 2010
11-05-2016 22:48:48 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506
11-05-2016 23:37:26 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506
11-05-2016 23:43:53 Microsoft Visual Studio Tools for Applications 2015
12-05-2016 22:06:35 Removed Corel Graphics - Windows Shell Extension.
12-05-2016 22:07:47 Removed Corel Graphics - Windows Shell Extension 32 Bit Keys.
12-05-2016 22:45:07 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506
12-05-2016 23:01:58 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506

==================== Dispositivos Apresentando Falhas No Gerenciador =============

Name: avast! Firewall NDIS Filter Miniport
Description: avast! Firewall NDIS Filter Miniport
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: ALWIL Software
Service: aswNdis
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.

Name: Teredo Tunneling Pseudo-Interface
Description: Adaptador de Túnel Teredo da Microsoft
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Erros no Log de eventos: =========================

Erros em Aplicativos:
==================
Error: (05/12/2016 11:01:59 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..

Details:
TraverseDir : Unable to push subdirectory.

System Error:
Erro não especificado
.

Error: (05/12/2016 10:54:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: Connect.exe, versão: 5.0.0.448, carimbo de hora: 0x56da654b
Nome do módulo de falhas: KERNELBASE.dll, versão: 6.1.7601.18015, carimbo de hora: 0x50b8479b
Código de exceção: 0xe0434352
Deslocamento com falha: 0x0000000000009e5d
Identificação do processo com falha: 0x15ac
Hora de início do aplicativo com falha: 0xConnect.exe0
Caminho do aplicativo com falha: Connect.exe1
FCaminho do módulo de falhas: Connect.exe2
Identificação do Relatório: Connect.exe3

Error: (05/12/2016 10:54:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: Connect.exe, versão: 5.0.0.448, carimbo de hora: 0x56da654b
Nome do módulo de falhas: KERNELBASE.dll, versão: 6.1.7601.18015, carimbo de hora: 0x50b8479b
Código de exceção: 0xe0434352
Deslocamento com falha: 0x0000000000009e5d
Identificação do processo com falha: 0x1338
Hora de início do aplicativo com falha: 0xConnect.exe0
Caminho do aplicativo com falha: Connect.exe1
FCaminho do módulo de falhas: Connect.exe2
Identificação do Relatório: Connect.exe3

Error: (05/12/2016 10:54:48 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplicativo: Connect.exe
Versão do Framework: v4.0.30319
Descrição: O processo foi terminado devido a uma exceção sem tratamento.
Informações da Exceção: System.DllNotFoundException
Pilha:
em Connect.App.Main()

Error: (05/12/2016 10:54:46 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplicativo: Connect.exe
Versão do Framework: v4.0.30319
Descrição: O processo foi terminado devido a uma exceção sem tratamento.
Informações da Exceção: System.DllNotFoundException
Pilha:
em Connect.App.Main()

Error: (05/12/2016 10:45:26 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..

Details:
TraverseDir : Unable to push subdirectory.

System Error:
Erro não especificado
.

Error: (05/12/2016 10:35:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: DllHost.exe, versão: 6.1.7600.16385, carimbo de hora: 0x4a5bca54
Nome do módulo de falhas: igdumd64.dll, versão: 8.15.10.2653, carimbo de hora: 0x4f3aac44
Código de exceção: 0xc000041d
Deslocamento com falha: 0x000000000030eb06
Identificação do processo com falha: 0xd94
Hora de início do aplicativo com falha: 0xDllHost.exe0
Caminho do aplicativo com falha: DllHost.exe1
FCaminho do módulo de falhas: DllHost.exe2
Identificação do Relatório: DllHost.exe3

Error: (05/12/2016 10:35:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: DllHost.exe, versão: 6.1.7600.16385, carimbo de hora: 0x4a5bca54
Nome do módulo de falhas: igdumd64.dll, versão: 8.15.10.2653, carimbo de hora: 0x4f3aac44
Código de exceção: 0xc0000005
Deslocamento com falha: 0x000000000030eb06
Identificação do processo com falha: 0xd94
Hora de início do aplicativo com falha: 0xDllHost.exe0
Caminho do aplicativo com falha: DllHost.exe1
FCaminho do módulo de falhas: DllHost.exe2
Identificação do Relatório: DllHost.exe3

Error: (05/12/2016 10:35:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: DllHost.exe, versão: 6.1.7600.16385, carimbo de hora: 0x4a5bca54
Nome do módulo de falhas: igdumd64.dll, versão: 8.15.10.2653, carimbo de hora: 0x4f3aac44
Código de exceção: 0xc0000005
Deslocamento com falha: 0x000000000030eb06
Identificação do processo com falha: 0x1108
Hora de início do aplicativo com falha: 0xDllHost.exe0
Caminho do aplicativo com falha: DllHost.exe1
FCaminho do módulo de falhas: DllHost.exe2
Identificação do Relatório: DllHost.exe3

Error: (05/12/2016 10:24:59 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: O serviço Pesquisa do Windows está sendo interrompido devido a um problema no indexador:The catalog is corrupt.

Detalhes:
O catálogo do índice de conteúdo está corrompido. (HRESULT : 0xc0041801) (0xc0041801)


Erros de Sistema:
=============
Error: (05/12/2016 10:24:59 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Windows Search foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 30000 milissegundos: Reiniciar o serviço.

Error: (05/12/2016 10:24:59 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: O serviço Windows Search terminou com o erro específico de serviço %%-1073473535.

Error: (05/12/2016 10:14:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: O serviço Serviço da Lista de Redes depende do serviço Reconhecimento de Locais de Rede, mas não foi possível iniciá-lo devido ao seguinte erro:
%%1068

Error: (05/12/2016 10:14:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: O serviço Serviço da Lista de Redes depende do serviço Reconhecimento de Locais de Rede, mas não foi possível iniciá-lo devido ao seguinte erro:
%%1068

Error: (05/12/2016 10:14:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: O serviço Serviço da Lista de Redes depende do serviço Reconhecimento de Locais de Rede, mas não foi possível iniciá-lo devido ao seguinte erro:
%%1068

Error: (05/12/2016 10:14:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: O serviço Serviço da Lista de Redes depende do serviço Reconhecimento de Locais de Rede, mas não foi possível iniciá-lo devido ao seguinte erro:
%%1068

Error: (05/12/2016 10:14:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: O serviço Serviço da Lista de Redes depende do serviço Reconhecimento de Locais de Rede, mas não foi possível iniciá-lo devido ao seguinte erro:
%%1068

Error: (05/12/2016 10:14:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: O serviço Serviço da Lista de Redes depende do serviço Reconhecimento de Locais de Rede, mas não foi possível iniciá-lo devido ao seguinte erro:
%%1068

Error: (05/12/2016 10:14:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: O serviço Serviço da Lista de Redes depende do serviço Reconhecimento de Locais de Rede, mas não foi possível iniciá-lo devido ao seguinte erro:
%%1068

Error: (05/12/2016 10:14:05 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: O serviço Enumerador de Barramento PnP-X IP depende do serviço Host de Provedor da Descoberta de Função, mas não foi possível iniciá-lo devido ao seguinte erro:
%%1068


CodeIntegrity:
===================================
Date: 2016-05-12 22:02:17.985
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2016-05-12 22:02:17.922
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2016-03-21 00:17:02.585
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Common Files\Intel\Media SDK\s1\2.0\mfx_mft_vpp_64.dll because the set of per-page image hashes could not be found on the system.

Date: 2016-03-21 00:09:53.169
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Common Files\Intel\Media SDK\s1\2.0\mfx_mft_vpp_64.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-07-04 10:01:25.170
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-07-04 10:01:25.092
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-07-04 10:01:21.301
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-07-04 10:01:21.239
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-05-11 20:14:45.716
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2015-05-11 20:14:45.654
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Informações da Memória ===========================

Processador: Intel(R) Core(TM) i7-2670QM CPU @ 2.20GHz
Percentagem de memória em uso: 53%
RAM física total: 8105.99 MB
RAM física disponível: 3760.64 MB
Virtual Total: 16210.17 MB
Virtual disponível: 11525.62 MB

==================== Drives ================================

Drive c: (Windows7) (Fixed) (Total:688.77 GB) (Free:249.03 GB) NTFS ==>[sistema com componentes de inicialização (obtido através de drive)]
Drive d: (Recuperar) (Fixed) (Total:9.77 GB) (Free:4.16 GB) NTFS

==================== MBR & Tabela de Partições ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 96661A81)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=9.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=688.8 GB) - (Type=07 NTFS)

==================== Fim de Addition.txt ============================