Publicité
Publicité
Format du document : text/plain
Prévisualisation
Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão:09-12-2015
Executado por João Cascimiro (2015-12-11 22:13:57)
Executando a partir de C:\Users\João Cascimiro\Desktop
Windows 7 Home Basic Service Pack 1 (X64) (2012-08-28 22:29:06)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-3922755168-1862369084-2486531989-500 - Administrator - Disabled)
Convidado (S-1-5-21-3922755168-1862369084-2486531989-501 - Limited - Enabled)
João Cascimiro (S-1-5-21-3922755168-1862369084-2486531989-1000 - Administrator - Enabled) => C:\Users\João Cascimiro
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation)
Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 1.0.1904 - CyberLink Corp.)
Acer Crystal Eye Webcam (x32 Version: 1.0.1904 - CyberLink Corp.) Hidden
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3008 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3504 - Acer Incorporated)
Acer Games (HKLM-x32\...\WildTangent acer Master Uninstall) (Version: 1.0.2.5 - WildTangent)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3504 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0517.2011 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3500 - Acer Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.8.0.1280 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.3 - Adobe Systems Incorporated)
Adobe Dreamweaver CS6 (HKLM-x32\...\{A4ED5E53-7AA0-11E1-BF04-B2D4D4A5360E}) (Version: 12 - Adobe Systems Incorporated)
Adobe Fireworks CS6 (HKLM-x32\...\{CA7C485C-7A89-11E1-B2C8-CD54B377BC52}) (Version: 12.0.0 - Adobe Systems Incorporated)
Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.7.700.202 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Reader X (10.1.16) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.16 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.7.637 - Adobe Systems, Inc.)
Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.)
Advanced Calendar 2.0 (HKLM\...\{D9BAB2C9-5236-48c3-AF02-67E799F09BBD}) (Version: 2.0.0.11061 - TopTools100) <==== ATENÇÃO
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
Any Video Converter 5.5.9 (HKLM-x32\...\Any Video Converter_is1) (Version: - Any-Video-Converter.com)
AppInventor Setup (HKLM-x32\...\AppInventor Setup) (Version: 1.1 - Google Inc.)
Astah Community 6.8 (HKLM\...\astah* community_is1) (Version: - Change Vision, Inc.)
Auslogics DiskDefrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 4.3.1.0 - Auslogics Labs Pty Ltd)
Avast License by ZeNiX [2012-06-29] (HKLM-x32\...\Avast_2050_ZeNiX [2012-06-29]_is1) (Version: - )
Backup Manager V3 (x32 Version: 3.0.0.99 - NTI Corporation) Hidden
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Broadcom Gigabit NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 14.6.1.2 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Cisco Packet Tracer 5.3.3 (HKLM-x32\...\Cisco Packet Tracer 5.3.3_is1) (Version: - Cisco Systems, Inc.)
clear.fi (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 1.0.2024.00 - CyberLink Corp.)
clear.fi (x32 Version: 1.0.1517_36458 - CyberLink Corp.) Hidden
clear.fi (x32 Version: 1.0.2024.00 - CyberLink Corp.) Hidden
clear.fi (x32 Version: 9.0.8026 - CyberLink Corp.) Hidden
clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.00.3500 - Acer Incorporated)
Crazy Chicken Kart 2 (x32 Version: 2.2.0.97 - WildTangent) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DealPly (HKU\.DEFAULT\...\DealPly) (Version: - ) <==== ATENÇÃO
Dev-C++ 5 beta 9 release (4.9.9.2) (HKLM-x32\...\Dev-C++) (Version: - )
ETDWare PS/2-X64 8.0.6.3_WHQL (HKLM\...\Elantech) (Version: 8.0.6.3 - ELAN Microelectronic Corp.)
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Fooz Kids (HKLM-x32\...\FoozKids) (Version: 3.0.8 - FUHU, Inc.)
Fooz Kids (x32 Version: 3.0.8 - FUHU, Inc.) Hidden
Fooz Kids Platform (HKLM-x32\...\{8D68CE08-9A14-4B7B-9857-3C646A2F34C7}) (Version: 2.1 - FUHU, Inc.)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKU\S-1-5-21-3922755168-1862369084-2486531989-1000\...\Google Chrome) (Version: 47.0.2526.80 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{CA3DD97D-1FD7-37A7-BD5C-FC4430C8B8E6}) (Version: 5.41.2.0 - Google)
IB Updater Service (HKLM-x32\...\WNLT) (Version: 3.0.5.4 - ) <==== ATENÇÃO
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2182 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.2.1001 - Intel Corporation)
Java 7 Update 21 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417021FF}) (Version: 7.0.210 - Oracle)
Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.600 - Oracle)
Java 8 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418000FF}) (Version: 8.0.0 - Oracle Corporation)
Java SE Development Kit 7 Update 10 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170100}) (Version: 1.7.0.100 - Oracle)
Java SE Development Kit 8 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180000}) (Version: 8.0.0 - Oracle Corporation)
Jewel Match 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
Jewel Quest Solitaire (x32 Version: 2.2.0.95 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.7 - Acer Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Português do Brasil) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1046) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 365 - pt-br (HKLM\...\O365HomePremRetail - pt-br) (Version: 15.0.4771.1004 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 - pt-br (HKLM\...\ProPlusRetail - pt-br) (Version: 15.0.4771.1004 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
MyFreeCodec (HKU\S-1-5-21-3922755168-1862369084-2486531989-1000\...\MyFreeCodec) (Version: - )
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98 - WildTangent) Hidden
MyWinLocker (Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.19 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.19 - Egis Technology Inc.) Hidden
newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.)
newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.3 - )
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9002 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.9002 - NTI Corporation) Hidden
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4771.1004 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4771.1004 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4771.1004 - Microsoft Corporation) Hidden
Oracle VM VirtualBox 4.2.16 (HKLM\...\{4CC3444D-7279-4E83-984F-18E9A7B2E803}) (Version: 4.2.16 - Oracle Corporation)
Pacote de Idiomas do Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - Português (Brasil) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PTB) (Version: 10.0.50903 - Microsoft Corporation)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6564 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30124 - Realtek Semiconductor Corp.)
Samsung Story Album Viewer (HKLM-x32\...\InstallShield_{698BBAD8-B116-495D-B879-0F07A533E57F}) (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.)
Samsung Story Album Viewer (x32 Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.)
Setup (HKLM-x32\...\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}) (Version: - ) <==== ATENÇÃO
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.41110 - TeamViewer)
The Desktop Weather 2.0 (HKLM\...\WeatherTool) (Version: 2.0.0.10998 - ShenZhen Enode Techology co,.Ltd) <==== ATENÇÃO
Torchlight (x32 Version: 2.2.0.97 - WildTangent) Hidden
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden
Vivo - Guia Vivo Internet versão 1.0 (HKLM-x32\...\{C2E8B9C9-677A-46E6-AEC7-9435B5BCA765}_is1) (Version: 1.0 - Vivo)
VIVO INTERNET (HKLM-x32\...\VIVO INTERNET) (Version: 16.002.10.15.149 - Huawei Technologies Co.,Ltd)
Warsaw 1.8.0.10356 64 bits (HKLM\...\{20E60725-16C8-4FB9-8BC2-AF92C5F8D06D}_is1) (Version: 1.8.0.10356 - GAS Tecnologia)
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3504 - Acer Incorporated)
WildTangent Games App (x32 Version: 4.0.10.16 - WildTangent) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
WinRAR 4.20 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
CustomCLSID: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000_Classes\CLSID\{0783EB25-59F8-4F02-B6B0-F1D4349F0013}\InprocServer32 -> C:\Users\João Cascimiro\AppData\Local\GAS Tecnologia\GBBD\npsf_uni_64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000_Classes\CLSID\{0783EB25-59F8-4F02-B6B1-F1D4349F0013}\InprocServer32 -> C:\Users\João Cascimiro\AppData\Local\GAS Tecnologia\GBBD\npsf_uni_64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000_Classes\CLSID\{724FE766-71C2-4E6E-8379-CD0EF5E51BDD}\InprocServer32 -> C:\Users\João Cascimiro\AppData\Local\Google\Update\1.3.28.17\psuser_64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\João Cascimiro\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\João Cascimiro\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll (Google Inc.)
==================== Pontos de Restauração =========================
02-12-2015 22:08:48 Windows Update
03-12-2015 11:56:28 Windows Update
04-12-2015 10:09:25 Windows Update
04-12-2015 10:23:01 Windows Update
05-12-2015 02:57:44 Windows Update
05-12-2015 15:39:29 Windows Update
06-12-2015 03:00:17 Windows Update
07-12-2015 02:59:06 Windows Update
08-12-2015 01:41:42 Windows Update
09-12-2015 03:00:20 Windows Update
10-12-2015 03:00:16 Windows Update
11-12-2015 07:40:02 Windows Update
07-06-2016 18:32:54 Windows Update
07-06-2016 19:00:42 Removed Microsoft Silverlight
==================== Hosts Conteúdo: ===============================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2009-07-14 00:34 - 2015-09-27 20:02 - 00000851 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {1BD87950-B027-4F03-B538-207D6EA8EC6B} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe [2014-09-14] ()
Task: {1E3802DF-C76E-4EA5-982D-CF12C8091081} - System32\Tasks\clear.fi => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe [2011-08-24] (Acer Incorporated)
Task: {26DC6C72-A38A-4C57-817D-4D8B34B22561} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {29697219-5E5E-4883-ACF6-7394EB90D6AC} - System32\Tasks\svchost => C:\Users\João Cascimiro\AppData\Local\Temp\setup.exe <==== ATENÇÃO
Task: {31BB8073-40AF-4A91-B46C-46303D28A361} - System32\Tasks\DMREngine => C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe [2011-08-24] (CyberLink)
Task: {408C2AF9-EB1C-450A-AFF8-BA57FEE11945} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3922755168-1862369084-2486531989-1000UA => C:\Users\João Cascimiro\AppData\Local\Google\Update\GoogleUpdate.exe [2015-10-07] (Google Inc.)
Task: {41CD6AB4-C9FA-41AD-A295-AC83D658C96D} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3922755168-1862369084-2486531989-1000Core => C:\Users\João Cascimiro\AppData\Local\Google\Update\GoogleUpdate.exe [2015-10-07] (Google Inc.)
Task: {44CC1AA3-2379-4D77-B5B7-486BE21FA8C3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-10-28] (Microsoft Corporation)
Task: {5ACBFD40-9AF0-4CCD-B0F1-3713DA1955A5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3922755168-1862369084-2486531989-1000Core1d10143e5280872 => C:\Users\João Cascimiro\AppData\Local\Google\Update\GoogleUpdate.exe [2015-10-07] (Google Inc.)
Task: {664D77C9-A9E0-424B-91C9-92BD785E9BEF} - System32\Tasks\{994DD33F-F840-437C-BA6A-1E84C1BBD39B} => C:\Riot Games\League of Legends\lol.launcher.exe
Task: {677B3915-1F6C-46F6-943A-E84710F249F9} - System32\Tasks\clear.fiAgent => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe [2011-08-24] (CyberLink Corp.)
Task: {82618020-788F-4589-ACE1-8C4A90895DE7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-18] (Adobe Systems Incorporated)
Task: {880E0A7F-10E0-43EE-B555-FA2598637DDA} - System32\Tasks\{1076E5AF-74F2-4057-8F43-7B9B64172C7F} => pcalua.exe -a "C:\Users\João Cascimiro\AppData\Roaming\omniboxes\UninstallManager.exe" -c -ptid=amt
Task: {8852E801-4AE8-4E55-8B48-EADAB8921510} - System32\Tasks\crash_service => C:\Users\João Cascimiro\AppData\Local\BoBrowser\Application\crash_service.exe <==== ATENÇÃO
Task: {889DFA27-4B30-4ED2-B3E9-9E9EA452EFB8} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-10-13] (Microsoft Corporation)
Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - System32\Tasks\Microsoft\Windows\Application Experience\AitAgent => aitagent.exe
Task: {AE4411CA-D7A4-4F5C-AD89-B53106D7AC63} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-10-13] (Microsoft Corporation)
Task: {AFBD2EE3-5E63-42E3-B8D0-FCF4A58B2B9C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3922755168-1862369084-2486531989-1000UA1d10143febacb85 => C:\Users\João Cascimiro\AppData\Local\Google\Update\GoogleUpdate.exe [2015-10-07] (Google Inc.)
Task: {B59A83C9-1EFA-41DC-81E3-984BC3492F34} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2011-03-29] (Egis Technology Inc.)
Task: {BB2A2925-05AC-42B4-B041-1766E74FC515} - System32\Tasks\AutoKMSCustom => C:\Windows\AutoKMS\AutoKMS.exe
Task: {C391D3FC-B623-4050-8951-0093015DA37B} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-10-13] (Microsoft Corporation)
Task: {C4DA0466-A238-4A78-9588-AA903FBDE987} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd)
Task: {D7B00A7F-2A91-42A6-B222-838BD61671D5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-10-28] (Microsoft Corporation)
Task: {DAB9B319-C461-426B-83DE-F95056E6601C} - System32\Tasks\AdobeAAMUpdater-1.0-JoãoCascimiro-João Cascimiro => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {E3163C33-301D-4730-A266-5518C5ED3967} - System32\Tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask => BthUdTask.exe
Task: {E5A8BD64-11EE-4DED-9AF8-D1B4C945DAF7} - System32\Tasks\Go for FilesUpdate => C:\Program Files (x86)\GoforFiles\GFFUpdater.exe <==== ATENÇÃO
Task: {E92AE8FC-4B90-4CE9-B7E5-BDFBA3CC0FED} - System32\Tasks\{A03CCFC6-6BEC-4B49-87E9-A0F4A903CEF9} => C:\Riot Games\League of Legends\lol.launcher.exe
Task: {F3402258-6FF8-479E-BFCD-E68BAFF14146} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2011-03-29] (Egis Technology Inc.)
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS.exe
Task: C:\Windows\Tasks\AutoKMSCustom.job => C:\Windows\AutoKMS\AutoKMS.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3922755168-1862369084-2486531989-1000Core.job => C:\Users\João Cascimiro\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3922755168-1862369084-2486531989-1000Core1d10143e5280872.job => C:\Users\João Cascimiro\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3922755168-1862369084-2486531989-1000UA.job => C:\Users\João Cascimiro\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3922755168-1862369084-2486531989-1000UA1d10143febacb85.job => C:\Users\João Cascimiro\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Atalhos =============================
(As entradas podem ser listadas para serem restauradas ou removidas.)
ShortcutWithArgument: C:\Users\João Cascimiro\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yeabests.cc/ <==== ATENÇÃO
ShortcutWithArgument: C:\Users\João Cascimiro\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome (2).lnk -> C:\Users\João Cascimiro\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yeabests.cc/ <==== ATENÇÃO
ShortcutWithArgument: C:\Users\João Cascimiro\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Users\João Cascimiro\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yeabests.cc/ <==== ATENÇÃO
ShortcutWithArgument: C:\Users\João Cascimiro\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yeabeats Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yeabests.cc/ <==== ATENÇÃO
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Widget Browser.lnk -> C:\Program Files (x86)\Adobe\Adobe Widget Browser\Adobe Widget Browser.exe () -> hxxp://www.yeabests.cc/ <==== ATENÇÃO
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://nav.brotlab.net?uid={dddb4e8e517840adbdb8c15056f4ebad}&r=102br <==== ATENÇÃO
ShortcutWithArgument: C:\Users\Public\Desktop\Netflix.lnk -> C:\ProgramData\OEM_E471269A730D\Netflix\StartURL.exe () -> hxxps://www.netflix.com/?mqso=80031250 <==== ATENÇÃO
==================== Módulos Carregados (Whitelisted) ==============
2014-11-08 16:33 - 2015-10-13 04:34 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2011-03-14 13:27 - 2011-03-14 13:27 - 00346976 _____ () C:\ProgramData\DatacardService\HWDeviceService64.exe
2015-11-23 06:41 - 2015-11-23 06:41 - 00151688 _____ () C:\Program Files (x86)\CalendarTool\2.0.0.11061\CalendarServ.exe
2015-11-05 07:21 - 2015-12-08 10:24 - 07142328 _____ () C:\Users\João Cascimiro\AppData\Roaming\XBox\XBLive.exe
2015-11-23 06:42 - 2015-11-23 06:42 - 03999880 _____ () C:\Program Files (x86)\CalendarTool\2.0.0.11061\Calendar.exe
2015-11-23 06:42 - 2015-11-23 06:42 - 00158344 _____ () C:\Program Files (x86)\CalendarTool\2.0.0.11061\CalendarEntry.dll
2015-11-01 23:48 - 2015-11-01 23:48 - 01049032 _____ () C:\Program Files (x86)\WeatherTool\2.0.0.10998\WeatherEntryDll.dll
2014-12-12 20:25 - 2014-12-12 20:25 - 00050688 _____ () C:\Program Files\CCleaner\lang\lang-1046.dll
2015-12-10 16:52 - 2015-12-10 16:52 - 01923584 ____N () C:\Users\João Cascimiro\AppData\Local\Temp\carssn.exe
2015-11-01 23:48 - 2015-11-01 23:48 - 00152008 _____ () C:\Program Files (x86)\WeatherTool\2.0.0.10998\WeatherService.exe
2011-04-24 00:29 - 2011-04-24 00:29 - 00465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2011-04-24 00:29 - 2011-04-24 00:29 - 01081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2011-04-24 00:29 - 2011-04-24 00:29 - 00125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2015-10-27 08:40 - 2015-11-30 10:08 - 00256440 _____ () C:\Users\João Cascimiro\AppData\Roaming\XBox\Xbox.Live.dll
2011-08-24 19:03 - 2011-08-24 19:03 - 00206216 _____ () C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLNetMediaDMA.dll
2014-11-18 00:42 - 2014-11-18 00:42 - 00316576 _____ () C:\Program Files\Microsoft Office 15\root\office15\AppVIsvStream32.dll
2012-02-21 08:08 - 2010-04-13 15:52 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2015-12-10 02:13 - 2015-12-04 19:32 - 01583432 _____ () C:\Users\João Cascimiro\AppData\Local\Google\Chrome\Application\47.0.2526.80\libglesv2.dll
2015-12-10 02:13 - 2015-12-04 19:32 - 00081224 _____ () C:\Users\João Cascimiro\AppData\Local\Google\Chrome\Application\47.0.2526.80\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
AlternateDataStreams: C:\Windows\System32:1577F0F1_Uni.gbp
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== EXE Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
IE trusted site: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000\...\google.com -> www.google.com
IE trusted site: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000\...\google.com.br -> www.google.com.br
IE trusted site: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000\...\itau.b.br -> www.itau.b.br
IE trusted site: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000\...\itau.com.br -> bankline.itau.com.br
IE trusted site: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000\...\itau.com.br -> hxxps://bankline.itau.com.br
IE trusted site: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000\...\itaupersonnalite.com.br -> www.itaupersonnalite.com.br
IE trusted site: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000\...\itaupersonnalite.com.br -> hxxp://www.itaupersonnalite.com.br
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-3922755168-1862369084-2486531989-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\João Cascimiro\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 80.82.64.136 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
(Atualmente não há nenhuma correção automática para esta seção.)
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: Google Update => "C:\Users\João Cascimiro\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: HW_OPENEYE_OUC_VIVO INTERNET => "C:\Program Files (x86)\VIVO INTERNET\UpdateDog\ouc.exe"
MSCONFIG\startupreg: Spotify => "C:\Users\João Cascimiro\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\João Cascimiro\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [{2D81DC6C-3E10-4855-B21D-C55E009926E4}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FBC929C3-70B9-4C66-AC91-BBA5F957993C}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{5850028F-F2B1-4395-ACF8-70FFFB58C56C}] => (Allow) LPort=2869
FirewallRules: [{6CC02524-5D6C-4D24-8256-D4FB3B470A0E}] => (Allow) LPort=1900
FirewallRules: [{09CB5ADD-D6A6-41F1-9E91-0CEC29F5357C}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{0EB3C025-DDFF-4E04-BCC8-A379917E412C}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{8FD66E8F-170A-42FA-9A0C-5D70221B1A91}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe
FirewallRules: [{A9D0F61F-0E03-4C3A-B854-FFA5601426B4}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
FirewallRules: [{2E1E971E-C30C-4737-AFFB-41A22177BF8C}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\CLML\CLMLSvc.exe
FirewallRules: [{BE67CAE7-0579-46AD-A468-E4CCF65E6983}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
FirewallRules: [{3BBF652D-1C64-4D1C-A1A4-457FABBDD336}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
FirewallRules: [{04B37F41-FE40-43DE-9F2F-953B038B0CA4}] => (Block) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
FirewallRules: [TCP Query User{6559817C-CB84-4FA9-980C-CCE56EE11A04}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{C7756428-C888-4389-B05D-F0DD2A13D060}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{A6ABF6D4-129F-4774-A222-3FFF8A0ADE63}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [{6624BFC1-28C1-42B4-9936-D4A346D35722}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [TCP Query User{D49F2B26-0174-45A6-8C4D-5616B2A1D31E}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [UDP Query User{2E894F69-EB46-4E55-AE27-8D013B99D60C}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [TCP Query User{4271CB87-036C-4E5F-AAB9-823C8D52BFB9}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{E1E8B18F-5A2C-4FF2-856D-9B60F5770B8F}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{62D71044-211F-40F3-B945-2FBC104B5A38}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{3353DA47-ACFF-4650-98D2-F2F2052F1DA2}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{239D760F-C4A2-4468-8364-D1A1FC948F8E}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [UDP Query User{4A736F5D-F758-42B6-9F8B-E3B134D28AD5}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [TCP Query User{6EA726B1-0CC0-4016-B1BF-DF689743D4A0}C:\wamp\bin\apache\apache2.2.17\bin\httpd.exe] => (Allow) C:\wamp\bin\apache\apache2.2.17\bin\httpd.exe
FirewallRules: [UDP Query User{48B0CB0D-BA7A-4501-8460-1C853FD2ECA4}C:\wamp\bin\apache\apache2.2.17\bin\httpd.exe] => (Allow) C:\wamp\bin\apache\apache2.2.17\bin\httpd.exe
FirewallRules: [{3668527A-B782-4154-AE47-6FEC8EC86819}] => (Block) C:\wamp\bin\apache\apache2.2.17\bin\httpd.exe
FirewallRules: [{F172DE49-BDF9-466F-ABB8-9A445AA84A2E}] => (Block) C:\wamp\bin\apache\apache2.2.17\bin\httpd.exe
FirewallRules: [TCP Query User{EC6F712C-4510-4A1A-8489-81B0F789D3BD}C:\cisco packet tracer 5.3\bin\packettracer5.exe] => (Allow) C:\cisco packet tracer 5.3\bin\packettracer5.exe
FirewallRules: [UDP Query User{19679F57-DBC1-45A2-9BB7-076412CF527C}C:\cisco packet tracer 5.3\bin\packettracer5.exe] => (Allow) C:\cisco packet tracer 5.3\bin\packettracer5.exe
FirewallRules: [TCP Query User{981238B6-F455-45C4-88EA-FDC72DFC9EA6}C:\program files (x86)\cisco packet tracer 5.3.3\bin\packettracer5.exe] => (Allow) C:\program files (x86)\cisco packet tracer 5.3.3\bin\packettracer5.exe
FirewallRules: [UDP Query User{3FD2A668-2001-4859-B160-939598DCB4C5}C:\program files (x86)\cisco packet tracer 5.3.3\bin\packettracer5.exe] => (Allow) C:\program files (x86)\cisco packet tracer 5.3.3\bin\packettracer5.exe
FirewallRules: [TCP Query User{4ECAE514-DEAE-4BBC-ABBA-FC6D37A4571D}C:\program files (x86)\cisco packet tracer 5.3.3\bin\packettracer5.exe] => (Allow) C:\program files (x86)\cisco packet tracer 5.3.3\bin\packettracer5.exe
FirewallRules: [UDP Query User{C987E0FF-B4B7-4185-BCF3-0AD4B5308E5E}C:\program files (x86)\cisco packet tracer 5.3.3\bin\packettracer5.exe] => (Allow) C:\program files (x86)\cisco packet tracer 5.3.3\bin\packettracer5.exe
FirewallRules: [TCP Query User{9004103D-7A5A-4A61-82CA-289D048443E6}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [UDP Query User{B9F1F518-A926-4298-BE70-DD3C5FDAE6D0}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [TCP Query User{6CDD6851-E8F2-4B46-99A4-F496EBFF38B4}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{B7404A8E-2225-45E6-B60C-9CAC4D1AF7E3}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{1AD64273-4612-477A-A1AB-B4496DD79D8B}] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{C588B717-96E6-466F-BCA3-98410041F1C4}] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{DAC2F5AC-B5CD-41EA-8203-F13F17E0B8CD}C:\program files\java\jdk1.7.0_10\bin\javaw.exe] => (Allow) C:\program files\java\jdk1.7.0_10\bin\javaw.exe
FirewallRules: [UDP Query User{2942A35C-F4EC-43C1-A327-F610317C30F0}C:\program files\java\jdk1.7.0_10\bin\javaw.exe] => (Allow) C:\program files\java\jdk1.7.0_10\bin\javaw.exe
FirewallRules: [{7DDD8EC1-E7F1-43C4-ABE6-5A3CF2ED518D}] => (Block) C:\program files\java\jdk1.7.0_10\bin\javaw.exe
FirewallRules: [{A047258A-0153-44E1-8E98-6030DA08A5D8}] => (Block) C:\program files\java\jdk1.7.0_10\bin\javaw.exe
FirewallRules: [{7E2DCEB7-DD9D-412C-9A24-ADAB58BA83FA}] => (Allow) C:\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe
FirewallRules: [{C1B330ED-5FB9-4AA3-8983-77B097663D7E}] => (Allow) C:\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe
FirewallRules: [{DD7391A1-04D1-468E-ADE5-F7AC23DAED15}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{47AD3AF4-DD0B-40CC-87A8-4ABF302C31DE}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{C5966177-D690-4AD6-994B-8424EA6D031C}] => (Allow) C:\Users\João Cascimiro\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{C3B4E836-B2DF-42D4-81C8-5982CC79D2A5}] => (Allow) C:\Users\João Cascimiro\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{40CCBCF1-AA42-4B04-82F1-6AD9EAD910ED}] => (Allow) C:\Users\João Cascimiro\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{17F0F6D0-B02F-4B3C-BC4B-D9033DF05E0F}] => (Allow) C:\Users\João Cascimiro\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{FD2F10FD-E926-4FD7-9B6B-3F06B6549B23}C:\users\joão cascimiro\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\joão cascimiro\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{65797F69-90FA-48B3-86AB-582CE025E52D}C:\users\joão cascimiro\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\joão cascimiro\appdata\roaming\spotify\spotify.exe
FirewallRules: [{E9E9B164-A51A-485B-A5E8-2BBA870B4153}] => (Block) C:\users\joão cascimiro\appdata\roaming\spotify\spotify.exe
FirewallRules: [{F7FEB6D2-3762-4C60-8348-FC32FA1A4649}] => (Block) C:\users\joão cascimiro\appdata\roaming\spotify\spotify.exe
FirewallRules: [{A30B6951-3EEB-454E-9109-65410341FD00}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{9D0C9F8F-D241-4DE1-8782-1BC134CB21AE}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{22C9EE3F-901A-4B6D-B889-153E52AD6805}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{6A7C4E81-3EDE-4AE5-80FC-BC47EB9E6250}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{F3BF18B6-84CB-4ADC-9EE1-7CAC7725C806}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{433C6C84-F86B-4AD9-8F22-68360FC96C65}] => (Allow) C:\Program Files\Diebold\Warsaw\core.exe
FirewallRules: [{7F1870DF-7AE6-4FE8-B9B4-DE7CBA1A69A9}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{868325A7-B5AF-401C-A2AD-E97E6A74F41F}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{588056CA-4C0B-47DB-9595-7B360B62740C}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{086A14BC-9C68-4780-A8F9-5CF9755E2A3C}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{56E1FDE6-5981-4A97-92D8-E295621E4A93}] => (Allow) C:\Users\João Cascimiro\AppData\Local\BoBrowser\Application\bobrowser.exe
==================== Dispositivos Apresentando Falhas No Gerenciador =============
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (12/11/2015 10:11:34 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418231
Error: (12/11/2015 09:30:31 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/11/2015 04:32:03 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Falha na geração de contexto de ativação para "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Erro no arquivo de manifesto ou de diretiva "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2", na linhaC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Uma versão de componente exigida pelo aplicativo está em conflito com outra versão de componente já ativa.
Os componentes conflitantes são:.
Componente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Componente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (12/11/2015 04:32:02 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Falha na geração de contexto de ativação para "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Erro no arquivo de manifesto ou de diretiva "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2", na linhaC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Uma versão de componente exigida pelo aplicativo está em conflito com outra versão de componente já ativa.
Os componentes conflitantes são:.
Componente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Componente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (12/11/2015 04:12:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/11/2015 03:24:44 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/11/2015 11:01:16 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/11/2015 10:57:57 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: notepad.exe, versão: 6.1.7600.16385, carimbo de hora: 0x4a5bc9b3
Nome do módulo de falhas: ntdll.dll, versão: 6.1.7601.18247, carimbo de hora: 0x521eaf24
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00000000000986ea
Identificação do processo com falha: 0x1120
Hora de início do aplicativo com falha: 0xnotepad.exe0
Caminho do aplicativo com falha: notepad.exe1
FCaminho do módulo de falhas: notepad.exe2
Identificação do Relatório: notepad.exe3
Error: (12/11/2015 10:45:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: cmd.exe, versão: 6.1.7601.17514, carimbo de hora: 0x4ce798e5
Nome do módulo de falhas: ntdll.dll, versão: 6.1.7601.18247, carimbo de hora: 0x521eaf24
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00000000000986ea
Identificação do processo com falha: 0x8fc
Hora de início do aplicativo com falha: 0xcmd.exe0
Caminho do aplicativo com falha: cmd.exe1
FCaminho do módulo de falhas: cmd.exe2
Identificação do Relatório: cmd.exe3
Error: (12/11/2015 10:03:15 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Falha na geração de contexto de ativação para "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Erro no arquivo de manifesto ou de diretiva "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2", na linhaC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Uma versão de componente exigida pelo aplicativo está em conflito com outra versão de componente já ativa.
Os componentes conflitantes são:.
Componente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Componente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Erros de Sistema:
=============
Error: (12/11/2015 09:35:11 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: O serviço Windows Defender terminou com o erro:
%%-2147023113
Error: (12/11/2015 09:29:09 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: O desligamento anterior do sistema em 16:41:51 às 11/12/2015 não era esperado.
Error: (12/11/2015 04:14:52 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: O serviço Windows Defender terminou com o erro:
%%-2147023113
Error: (12/11/2015 04:12:09 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: O desligamento anterior do sistema em 16:10:51 às 11/12/2015 não era esperado.
Error: (12/11/2015 03:26:06 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: O serviço Windows Defender terminou com o erro:
%%-2147023113
Error: (12/11/2015 11:10:46 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: O serviço Windows Update não foi desligado corretamente após receber um controle de pré-desligamento.
Error: (12/11/2015 11:00:47 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: O desligamento anterior do sistema em 10:59:53 às 11/12/2015 não era esperado.
Error: (12/11/2015 10:20:55 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a resposta de uma transação do serviço defragsvc.
Error: (12/11/2015 10:03:52 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: O serviço Windows Defender terminou com o erro:
%%-2147023113
Error: (12/11/2015 10:00:54 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: O desligamento anterior do sistema em 09:59:30 às 11/12/2015 não era esperado.
==================== Informações da Memória ===========================
Processador: Intel(R) Core(TM) i3 CPU M 380 @ 2.53GHz
Percentagem de memória em uso: 89%
RAM física total: 1782.7 MB
RAM física disponível: 180.92 MB
Virtual Total: 3565.41 MB
Virtual disponível: 1080.76 MB
==================== Drives ================================
Drive c: (Acer) (Fixed) (Total:279.99 GB) (Free:188.81 GB) NTFS
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 23F45B99)
Partition 1: (Not Active) - (Size=18 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=280 GB) - (Type=07 NTFS)
==================== Fim de Addition.txt ============================
Executado por João Cascimiro (2015-12-11 22:13:57)
Executando a partir de C:\Users\João Cascimiro\Desktop
Windows 7 Home Basic Service Pack 1 (X64) (2012-08-28 22:29:06)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-3922755168-1862369084-2486531989-500 - Administrator - Disabled)
Convidado (S-1-5-21-3922755168-1862369084-2486531989-501 - Limited - Enabled)
João Cascimiro (S-1-5-21-3922755168-1862369084-2486531989-1000 - Administrator - Enabled) => C:\Users\João Cascimiro
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation)
Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 1.0.1904 - CyberLink Corp.)
Acer Crystal Eye Webcam (x32 Version: 1.0.1904 - CyberLink Corp.) Hidden
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3008 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3504 - Acer Incorporated)
Acer Games (HKLM-x32\...\WildTangent acer Master Uninstall) (Version: 1.0.2.5 - WildTangent)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3504 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0517.2011 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3500 - Acer Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.8.0.1280 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.3 - Adobe Systems Incorporated)
Adobe Dreamweaver CS6 (HKLM-x32\...\{A4ED5E53-7AA0-11E1-BF04-B2D4D4A5360E}) (Version: 12 - Adobe Systems Incorporated)
Adobe Fireworks CS6 (HKLM-x32\...\{CA7C485C-7A89-11E1-B2C8-CD54B377BC52}) (Version: 12.0.0 - Adobe Systems Incorporated)
Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.7.700.202 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Reader X (10.1.16) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.16 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.7.637 - Adobe Systems, Inc.)
Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.)
Advanced Calendar 2.0 (HKLM\...\{D9BAB2C9-5236-48c3-AF02-67E799F09BBD}) (Version: 2.0.0.11061 - TopTools100) <==== ATENÇÃO
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
Any Video Converter 5.5.9 (HKLM-x32\...\Any Video Converter_is1) (Version: - Any-Video-Converter.com)
AppInventor Setup (HKLM-x32\...\AppInventor Setup) (Version: 1.1 - Google Inc.)
Astah Community 6.8 (HKLM\...\astah* community_is1) (Version: - Change Vision, Inc.)
Auslogics DiskDefrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 4.3.1.0 - Auslogics Labs Pty Ltd)
Avast License by ZeNiX [2012-06-29] (HKLM-x32\...\Avast_2050_ZeNiX [2012-06-29]_is1) (Version: - )
Backup Manager V3 (x32 Version: 3.0.0.99 - NTI Corporation) Hidden
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Broadcom Gigabit NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 14.6.1.2 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Cisco Packet Tracer 5.3.3 (HKLM-x32\...\Cisco Packet Tracer 5.3.3_is1) (Version: - Cisco Systems, Inc.)
clear.fi (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 1.0.2024.00 - CyberLink Corp.)
clear.fi (x32 Version: 1.0.1517_36458 - CyberLink Corp.) Hidden
clear.fi (x32 Version: 1.0.2024.00 - CyberLink Corp.) Hidden
clear.fi (x32 Version: 9.0.8026 - CyberLink Corp.) Hidden
clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.00.3500 - Acer Incorporated)
Crazy Chicken Kart 2 (x32 Version: 2.2.0.97 - WildTangent) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DealPly (HKU\.DEFAULT\...\DealPly) (Version: - ) <==== ATENÇÃO
Dev-C++ 5 beta 9 release (4.9.9.2) (HKLM-x32\...\Dev-C++) (Version: - )
ETDWare PS/2-X64 8.0.6.3_WHQL (HKLM\...\Elantech) (Version: 8.0.6.3 - ELAN Microelectronic Corp.)
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Fooz Kids (HKLM-x32\...\FoozKids) (Version: 3.0.8 - FUHU, Inc.)
Fooz Kids (x32 Version: 3.0.8 - FUHU, Inc.) Hidden
Fooz Kids Platform (HKLM-x32\...\{8D68CE08-9A14-4B7B-9857-3C646A2F34C7}) (Version: 2.1 - FUHU, Inc.)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKU\S-1-5-21-3922755168-1862369084-2486531989-1000\...\Google Chrome) (Version: 47.0.2526.80 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{CA3DD97D-1FD7-37A7-BD5C-FC4430C8B8E6}) (Version: 5.41.2.0 - Google)
IB Updater Service (HKLM-x32\...\WNLT) (Version: 3.0.5.4 - ) <==== ATENÇÃO
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2182 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.2.1001 - Intel Corporation)
Java 7 Update 21 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417021FF}) (Version: 7.0.210 - Oracle)
Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.600 - Oracle)
Java 8 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418000FF}) (Version: 8.0.0 - Oracle Corporation)
Java SE Development Kit 7 Update 10 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170100}) (Version: 1.7.0.100 - Oracle)
Java SE Development Kit 8 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180000}) (Version: 8.0.0 - Oracle Corporation)
Jewel Match 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
Jewel Quest Solitaire (x32 Version: 2.2.0.95 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.7 - Acer Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Português do Brasil) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1046) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 365 - pt-br (HKLM\...\O365HomePremRetail - pt-br) (Version: 15.0.4771.1004 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 - pt-br (HKLM\...\ProPlusRetail - pt-br) (Version: 15.0.4771.1004 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
MyFreeCodec (HKU\S-1-5-21-3922755168-1862369084-2486531989-1000\...\MyFreeCodec) (Version: - )
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98 - WildTangent) Hidden
MyWinLocker (Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.19 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.19 - Egis Technology Inc.) Hidden
newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.)
newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.3 - )
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9002 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.9002 - NTI Corporation) Hidden
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4771.1004 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4771.1004 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4771.1004 - Microsoft Corporation) Hidden
Oracle VM VirtualBox 4.2.16 (HKLM\...\{4CC3444D-7279-4E83-984F-18E9A7B2E803}) (Version: 4.2.16 - Oracle Corporation)
Pacote de Idiomas do Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - Português (Brasil) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PTB) (Version: 10.0.50903 - Microsoft Corporation)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6564 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30124 - Realtek Semiconductor Corp.)
Samsung Story Album Viewer (HKLM-x32\...\InstallShield_{698BBAD8-B116-495D-B879-0F07A533E57F}) (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.)
Samsung Story Album Viewer (x32 Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.)
Setup (HKLM-x32\...\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}) (Version: - ) <==== ATENÇÃO
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.41110 - TeamViewer)
The Desktop Weather 2.0 (HKLM\...\WeatherTool) (Version: 2.0.0.10998 - ShenZhen Enode Techology co,.Ltd) <==== ATENÇÃO
Torchlight (x32 Version: 2.2.0.97 - WildTangent) Hidden
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden
Vivo - Guia Vivo Internet versão 1.0 (HKLM-x32\...\{C2E8B9C9-677A-46E6-AEC7-9435B5BCA765}_is1) (Version: 1.0 - Vivo)
VIVO INTERNET (HKLM-x32\...\VIVO INTERNET) (Version: 16.002.10.15.149 - Huawei Technologies Co.,Ltd)
Warsaw 1.8.0.10356 64 bits (HKLM\...\{20E60725-16C8-4FB9-8BC2-AF92C5F8D06D}_is1) (Version: 1.8.0.10356 - GAS Tecnologia)
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3504 - Acer Incorporated)
WildTangent Games App (x32 Version: 4.0.10.16 - WildTangent) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
WinRAR 4.20 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
CustomCLSID: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000_Classes\CLSID\{0783EB25-59F8-4F02-B6B0-F1D4349F0013}\InprocServer32 -> C:\Users\João Cascimiro\AppData\Local\GAS Tecnologia\GBBD\npsf_uni_64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000_Classes\CLSID\{0783EB25-59F8-4F02-B6B1-F1D4349F0013}\InprocServer32 -> C:\Users\João Cascimiro\AppData\Local\GAS Tecnologia\GBBD\npsf_uni_64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000_Classes\CLSID\{724FE766-71C2-4E6E-8379-CD0EF5E51BDD}\InprocServer32 -> C:\Users\João Cascimiro\AppData\Local\Google\Update\1.3.28.17\psuser_64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\João Cascimiro\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\João Cascimiro\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll (Google Inc.)
==================== Pontos de Restauração =========================
02-12-2015 22:08:48 Windows Update
03-12-2015 11:56:28 Windows Update
04-12-2015 10:09:25 Windows Update
04-12-2015 10:23:01 Windows Update
05-12-2015 02:57:44 Windows Update
05-12-2015 15:39:29 Windows Update
06-12-2015 03:00:17 Windows Update
07-12-2015 02:59:06 Windows Update
08-12-2015 01:41:42 Windows Update
09-12-2015 03:00:20 Windows Update
10-12-2015 03:00:16 Windows Update
11-12-2015 07:40:02 Windows Update
07-06-2016 18:32:54 Windows Update
07-06-2016 19:00:42 Removed Microsoft Silverlight
==================== Hosts Conteúdo: ===============================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2009-07-14 00:34 - 2015-09-27 20:02 - 00000851 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {1BD87950-B027-4F03-B538-207D6EA8EC6B} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe [2014-09-14] ()
Task: {1E3802DF-C76E-4EA5-982D-CF12C8091081} - System32\Tasks\clear.fi => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe [2011-08-24] (Acer Incorporated)
Task: {26DC6C72-A38A-4C57-817D-4D8B34B22561} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {29697219-5E5E-4883-ACF6-7394EB90D6AC} - System32\Tasks\svchost => C:\Users\João Cascimiro\AppData\Local\Temp\setup.exe <==== ATENÇÃO
Task: {31BB8073-40AF-4A91-B46C-46303D28A361} - System32\Tasks\DMREngine => C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe [2011-08-24] (CyberLink)
Task: {408C2AF9-EB1C-450A-AFF8-BA57FEE11945} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3922755168-1862369084-2486531989-1000UA => C:\Users\João Cascimiro\AppData\Local\Google\Update\GoogleUpdate.exe [2015-10-07] (Google Inc.)
Task: {41CD6AB4-C9FA-41AD-A295-AC83D658C96D} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3922755168-1862369084-2486531989-1000Core => C:\Users\João Cascimiro\AppData\Local\Google\Update\GoogleUpdate.exe [2015-10-07] (Google Inc.)
Task: {44CC1AA3-2379-4D77-B5B7-486BE21FA8C3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-10-28] (Microsoft Corporation)
Task: {5ACBFD40-9AF0-4CCD-B0F1-3713DA1955A5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3922755168-1862369084-2486531989-1000Core1d10143e5280872 => C:\Users\João Cascimiro\AppData\Local\Google\Update\GoogleUpdate.exe [2015-10-07] (Google Inc.)
Task: {664D77C9-A9E0-424B-91C9-92BD785E9BEF} - System32\Tasks\{994DD33F-F840-437C-BA6A-1E84C1BBD39B} => C:\Riot Games\League of Legends\lol.launcher.exe
Task: {677B3915-1F6C-46F6-943A-E84710F249F9} - System32\Tasks\clear.fiAgent => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe [2011-08-24] (CyberLink Corp.)
Task: {82618020-788F-4589-ACE1-8C4A90895DE7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-18] (Adobe Systems Incorporated)
Task: {880E0A7F-10E0-43EE-B555-FA2598637DDA} - System32\Tasks\{1076E5AF-74F2-4057-8F43-7B9B64172C7F} => pcalua.exe -a "C:\Users\João Cascimiro\AppData\Roaming\omniboxes\UninstallManager.exe" -c -ptid=amt
Task: {8852E801-4AE8-4E55-8B48-EADAB8921510} - System32\Tasks\crash_service => C:\Users\João Cascimiro\AppData\Local\BoBrowser\Application\crash_service.exe <==== ATENÇÃO
Task: {889DFA27-4B30-4ED2-B3E9-9E9EA452EFB8} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-10-13] (Microsoft Corporation)
Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - System32\Tasks\Microsoft\Windows\Application Experience\AitAgent => aitagent.exe
Task: {AE4411CA-D7A4-4F5C-AD89-B53106D7AC63} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-10-13] (Microsoft Corporation)
Task: {AFBD2EE3-5E63-42E3-B8D0-FCF4A58B2B9C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3922755168-1862369084-2486531989-1000UA1d10143febacb85 => C:\Users\João Cascimiro\AppData\Local\Google\Update\GoogleUpdate.exe [2015-10-07] (Google Inc.)
Task: {B59A83C9-1EFA-41DC-81E3-984BC3492F34} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2011-03-29] (Egis Technology Inc.)
Task: {BB2A2925-05AC-42B4-B041-1766E74FC515} - System32\Tasks\AutoKMSCustom => C:\Windows\AutoKMS\AutoKMS.exe
Task: {C391D3FC-B623-4050-8951-0093015DA37B} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-10-13] (Microsoft Corporation)
Task: {C4DA0466-A238-4A78-9588-AA903FBDE987} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd)
Task: {D7B00A7F-2A91-42A6-B222-838BD61671D5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-10-28] (Microsoft Corporation)
Task: {DAB9B319-C461-426B-83DE-F95056E6601C} - System32\Tasks\AdobeAAMUpdater-1.0-JoãoCascimiro-João Cascimiro => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {E3163C33-301D-4730-A266-5518C5ED3967} - System32\Tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask => BthUdTask.exe
Task: {E5A8BD64-11EE-4DED-9AF8-D1B4C945DAF7} - System32\Tasks\Go for FilesUpdate => C:\Program Files (x86)\GoforFiles\GFFUpdater.exe <==== ATENÇÃO
Task: {E92AE8FC-4B90-4CE9-B7E5-BDFBA3CC0FED} - System32\Tasks\{A03CCFC6-6BEC-4B49-87E9-A0F4A903CEF9} => C:\Riot Games\League of Legends\lol.launcher.exe
Task: {F3402258-6FF8-479E-BFCD-E68BAFF14146} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2011-03-29] (Egis Technology Inc.)
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS.exe
Task: C:\Windows\Tasks\AutoKMSCustom.job => C:\Windows\AutoKMS\AutoKMS.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3922755168-1862369084-2486531989-1000Core.job => C:\Users\João Cascimiro\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3922755168-1862369084-2486531989-1000Core1d10143e5280872.job => C:\Users\João Cascimiro\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3922755168-1862369084-2486531989-1000UA.job => C:\Users\João Cascimiro\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3922755168-1862369084-2486531989-1000UA1d10143febacb85.job => C:\Users\João Cascimiro\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Atalhos =============================
(As entradas podem ser listadas para serem restauradas ou removidas.)
ShortcutWithArgument: C:\Users\João Cascimiro\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yeabests.cc/ <==== ATENÇÃO
ShortcutWithArgument: C:\Users\João Cascimiro\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome (2).lnk -> C:\Users\João Cascimiro\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yeabests.cc/ <==== ATENÇÃO
ShortcutWithArgument: C:\Users\João Cascimiro\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Users\João Cascimiro\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.yeabests.cc/ <==== ATENÇÃO
ShortcutWithArgument: C:\Users\João Cascimiro\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Yeabeats Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.yeabests.cc/ <==== ATENÇÃO
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Widget Browser.lnk -> C:\Program Files (x86)\Adobe\Adobe Widget Browser\Adobe Widget Browser.exe () -> hxxp://www.yeabests.cc/ <==== ATENÇÃO
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://nav.brotlab.net?uid={dddb4e8e517840adbdb8c15056f4ebad}&r=102br <==== ATENÇÃO
ShortcutWithArgument: C:\Users\Public\Desktop\Netflix.lnk -> C:\ProgramData\OEM_E471269A730D\Netflix\StartURL.exe () -> hxxps://www.netflix.com/?mqso=80031250 <==== ATENÇÃO
==================== Módulos Carregados (Whitelisted) ==============
2014-11-08 16:33 - 2015-10-13 04:34 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2011-03-14 13:27 - 2011-03-14 13:27 - 00346976 _____ () C:\ProgramData\DatacardService\HWDeviceService64.exe
2015-11-23 06:41 - 2015-11-23 06:41 - 00151688 _____ () C:\Program Files (x86)\CalendarTool\2.0.0.11061\CalendarServ.exe
2015-11-05 07:21 - 2015-12-08 10:24 - 07142328 _____ () C:\Users\João Cascimiro\AppData\Roaming\XBox\XBLive.exe
2015-11-23 06:42 - 2015-11-23 06:42 - 03999880 _____ () C:\Program Files (x86)\CalendarTool\2.0.0.11061\Calendar.exe
2015-11-23 06:42 - 2015-11-23 06:42 - 00158344 _____ () C:\Program Files (x86)\CalendarTool\2.0.0.11061\CalendarEntry.dll
2015-11-01 23:48 - 2015-11-01 23:48 - 01049032 _____ () C:\Program Files (x86)\WeatherTool\2.0.0.10998\WeatherEntryDll.dll
2014-12-12 20:25 - 2014-12-12 20:25 - 00050688 _____ () C:\Program Files\CCleaner\lang\lang-1046.dll
2015-12-10 16:52 - 2015-12-10 16:52 - 01923584 ____N () C:\Users\João Cascimiro\AppData\Local\Temp\carssn.exe
2015-11-01 23:48 - 2015-11-01 23:48 - 00152008 _____ () C:\Program Files (x86)\WeatherTool\2.0.0.10998\WeatherService.exe
2011-04-24 00:29 - 2011-04-24 00:29 - 00465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2011-04-24 00:29 - 2011-04-24 00:29 - 01081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2011-04-24 00:29 - 2011-04-24 00:29 - 00125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2015-10-27 08:40 - 2015-11-30 10:08 - 00256440 _____ () C:\Users\João Cascimiro\AppData\Roaming\XBox\Xbox.Live.dll
2011-08-24 19:03 - 2011-08-24 19:03 - 00206216 _____ () C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLNetMediaDMA.dll
2014-11-18 00:42 - 2014-11-18 00:42 - 00316576 _____ () C:\Program Files\Microsoft Office 15\root\office15\AppVIsvStream32.dll
2012-02-21 08:08 - 2010-04-13 15:52 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2015-12-10 02:13 - 2015-12-04 19:32 - 01583432 _____ () C:\Users\João Cascimiro\AppData\Local\Google\Chrome\Application\47.0.2526.80\libglesv2.dll
2015-12-10 02:13 - 2015-12-04 19:32 - 00081224 _____ () C:\Users\João Cascimiro\AppData\Local\Google\Chrome\Application\47.0.2526.80\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
AlternateDataStreams: C:\Windows\System32:1577F0F1_Uni.gbp
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== EXE Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
IE trusted site: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000\...\google.com -> www.google.com
IE trusted site: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000\...\google.com.br -> www.google.com.br
IE trusted site: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000\...\itau.b.br -> www.itau.b.br
IE trusted site: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000\...\itau.com.br -> bankline.itau.com.br
IE trusted site: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000\...\itau.com.br -> hxxps://bankline.itau.com.br
IE trusted site: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000\...\itaupersonnalite.com.br -> www.itaupersonnalite.com.br
IE trusted site: HKU\S-1-5-21-3922755168-1862369084-2486531989-1000\...\itaupersonnalite.com.br -> hxxp://www.itaupersonnalite.com.br
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-3922755168-1862369084-2486531989-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\João Cascimiro\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 80.82.64.136 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
(Atualmente não há nenhuma correção automática para esta seção.)
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: Google Update => "C:\Users\João Cascimiro\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: HW_OPENEYE_OUC_VIVO INTERNET => "C:\Program Files (x86)\VIVO INTERNET\UpdateDog\ouc.exe"
MSCONFIG\startupreg: Spotify => "C:\Users\João Cascimiro\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\João Cascimiro\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [{2D81DC6C-3E10-4855-B21D-C55E009926E4}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FBC929C3-70B9-4C66-AC91-BBA5F957993C}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{5850028F-F2B1-4395-ACF8-70FFFB58C56C}] => (Allow) LPort=2869
FirewallRules: [{6CC02524-5D6C-4D24-8256-D4FB3B470A0E}] => (Allow) LPort=1900
FirewallRules: [{09CB5ADD-D6A6-41F1-9E91-0CEC29F5357C}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{0EB3C025-DDFF-4E04-BCC8-A379917E412C}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{8FD66E8F-170A-42FA-9A0C-5D70221B1A91}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe
FirewallRules: [{A9D0F61F-0E03-4C3A-B854-FFA5601426B4}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
FirewallRules: [{2E1E971E-C30C-4737-AFFB-41A22177BF8C}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\CLML\CLMLSvc.exe
FirewallRules: [{BE67CAE7-0579-46AD-A468-E4CCF65E6983}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
FirewallRules: [{3BBF652D-1C64-4D1C-A1A4-457FABBDD336}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
FirewallRules: [{04B37F41-FE40-43DE-9F2F-953B038B0CA4}] => (Block) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
FirewallRules: [TCP Query User{6559817C-CB84-4FA9-980C-CCE56EE11A04}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{C7756428-C888-4389-B05D-F0DD2A13D060}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{A6ABF6D4-129F-4774-A222-3FFF8A0ADE63}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [{6624BFC1-28C1-42B4-9936-D4A346D35722}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [TCP Query User{D49F2B26-0174-45A6-8C4D-5616B2A1D31E}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [UDP Query User{2E894F69-EB46-4E55-AE27-8D013B99D60C}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [TCP Query User{4271CB87-036C-4E5F-AAB9-823C8D52BFB9}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{E1E8B18F-5A2C-4FF2-856D-9B60F5770B8F}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{62D71044-211F-40F3-B945-2FBC104B5A38}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{3353DA47-ACFF-4650-98D2-F2F2052F1DA2}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{239D760F-C4A2-4468-8364-D1A1FC948F8E}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [UDP Query User{4A736F5D-F758-42B6-9F8B-E3B134D28AD5}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [TCP Query User{6EA726B1-0CC0-4016-B1BF-DF689743D4A0}C:\wamp\bin\apache\apache2.2.17\bin\httpd.exe] => (Allow) C:\wamp\bin\apache\apache2.2.17\bin\httpd.exe
FirewallRules: [UDP Query User{48B0CB0D-BA7A-4501-8460-1C853FD2ECA4}C:\wamp\bin\apache\apache2.2.17\bin\httpd.exe] => (Allow) C:\wamp\bin\apache\apache2.2.17\bin\httpd.exe
FirewallRules: [{3668527A-B782-4154-AE47-6FEC8EC86819}] => (Block) C:\wamp\bin\apache\apache2.2.17\bin\httpd.exe
FirewallRules: [{F172DE49-BDF9-466F-ABB8-9A445AA84A2E}] => (Block) C:\wamp\bin\apache\apache2.2.17\bin\httpd.exe
FirewallRules: [TCP Query User{EC6F712C-4510-4A1A-8489-81B0F789D3BD}C:\cisco packet tracer 5.3\bin\packettracer5.exe] => (Allow) C:\cisco packet tracer 5.3\bin\packettracer5.exe
FirewallRules: [UDP Query User{19679F57-DBC1-45A2-9BB7-076412CF527C}C:\cisco packet tracer 5.3\bin\packettracer5.exe] => (Allow) C:\cisco packet tracer 5.3\bin\packettracer5.exe
FirewallRules: [TCP Query User{981238B6-F455-45C4-88EA-FDC72DFC9EA6}C:\program files (x86)\cisco packet tracer 5.3.3\bin\packettracer5.exe] => (Allow) C:\program files (x86)\cisco packet tracer 5.3.3\bin\packettracer5.exe
FirewallRules: [UDP Query User{3FD2A668-2001-4859-B160-939598DCB4C5}C:\program files (x86)\cisco packet tracer 5.3.3\bin\packettracer5.exe] => (Allow) C:\program files (x86)\cisco packet tracer 5.3.3\bin\packettracer5.exe
FirewallRules: [TCP Query User{4ECAE514-DEAE-4BBC-ABBA-FC6D37A4571D}C:\program files (x86)\cisco packet tracer 5.3.3\bin\packettracer5.exe] => (Allow) C:\program files (x86)\cisco packet tracer 5.3.3\bin\packettracer5.exe
FirewallRules: [UDP Query User{C987E0FF-B4B7-4185-BCF3-0AD4B5308E5E}C:\program files (x86)\cisco packet tracer 5.3.3\bin\packettracer5.exe] => (Allow) C:\program files (x86)\cisco packet tracer 5.3.3\bin\packettracer5.exe
FirewallRules: [TCP Query User{9004103D-7A5A-4A61-82CA-289D048443E6}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [UDP Query User{B9F1F518-A926-4298-BE70-DD3C5FDAE6D0}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [TCP Query User{6CDD6851-E8F2-4B46-99A4-F496EBFF38B4}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{B7404A8E-2225-45E6-B60C-9CAC4D1AF7E3}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{1AD64273-4612-477A-A1AB-B4496DD79D8B}] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{C588B717-96E6-466F-BCA3-98410041F1C4}] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{DAC2F5AC-B5CD-41EA-8203-F13F17E0B8CD}C:\program files\java\jdk1.7.0_10\bin\javaw.exe] => (Allow) C:\program files\java\jdk1.7.0_10\bin\javaw.exe
FirewallRules: [UDP Query User{2942A35C-F4EC-43C1-A327-F610317C30F0}C:\program files\java\jdk1.7.0_10\bin\javaw.exe] => (Allow) C:\program files\java\jdk1.7.0_10\bin\javaw.exe
FirewallRules: [{7DDD8EC1-E7F1-43C4-ABE6-5A3CF2ED518D}] => (Block) C:\program files\java\jdk1.7.0_10\bin\javaw.exe
FirewallRules: [{A047258A-0153-44E1-8E98-6030DA08A5D8}] => (Block) C:\program files\java\jdk1.7.0_10\bin\javaw.exe
FirewallRules: [{7E2DCEB7-DD9D-412C-9A24-ADAB58BA83FA}] => (Allow) C:\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe
FirewallRules: [{C1B330ED-5FB9-4AA3-8983-77B097663D7E}] => (Allow) C:\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe
FirewallRules: [{DD7391A1-04D1-468E-ADE5-F7AC23DAED15}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{47AD3AF4-DD0B-40CC-87A8-4ABF302C31DE}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{C5966177-D690-4AD6-994B-8424EA6D031C}] => (Allow) C:\Users\João Cascimiro\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{C3B4E836-B2DF-42D4-81C8-5982CC79D2A5}] => (Allow) C:\Users\João Cascimiro\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{40CCBCF1-AA42-4B04-82F1-6AD9EAD910ED}] => (Allow) C:\Users\João Cascimiro\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{17F0F6D0-B02F-4B3C-BC4B-D9033DF05E0F}] => (Allow) C:\Users\João Cascimiro\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{FD2F10FD-E926-4FD7-9B6B-3F06B6549B23}C:\users\joão cascimiro\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\joão cascimiro\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{65797F69-90FA-48B3-86AB-582CE025E52D}C:\users\joão cascimiro\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\joão cascimiro\appdata\roaming\spotify\spotify.exe
FirewallRules: [{E9E9B164-A51A-485B-A5E8-2BBA870B4153}] => (Block) C:\users\joão cascimiro\appdata\roaming\spotify\spotify.exe
FirewallRules: [{F7FEB6D2-3762-4C60-8348-FC32FA1A4649}] => (Block) C:\users\joão cascimiro\appdata\roaming\spotify\spotify.exe
FirewallRules: [{A30B6951-3EEB-454E-9109-65410341FD00}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{9D0C9F8F-D241-4DE1-8782-1BC134CB21AE}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{22C9EE3F-901A-4B6D-B889-153E52AD6805}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{6A7C4E81-3EDE-4AE5-80FC-BC47EB9E6250}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{F3BF18B6-84CB-4ADC-9EE1-7CAC7725C806}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{433C6C84-F86B-4AD9-8F22-68360FC96C65}] => (Allow) C:\Program Files\Diebold\Warsaw\core.exe
FirewallRules: [{7F1870DF-7AE6-4FE8-B9B4-DE7CBA1A69A9}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{868325A7-B5AF-401C-A2AD-E97E6A74F41F}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{588056CA-4C0B-47DB-9595-7B360B62740C}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{086A14BC-9C68-4780-A8F9-5CF9755E2A3C}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{56E1FDE6-5981-4A97-92D8-E295621E4A93}] => (Allow) C:\Users\João Cascimiro\AppData\Local\BoBrowser\Application\bobrowser.exe
==================== Dispositivos Apresentando Falhas No Gerenciador =============
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (12/11/2015 10:11:34 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418231
Error: (12/11/2015 09:30:31 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/11/2015 04:32:03 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Falha na geração de contexto de ativação para "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Erro no arquivo de manifesto ou de diretiva "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2", na linhaC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Uma versão de componente exigida pelo aplicativo está em conflito com outra versão de componente já ativa.
Os componentes conflitantes são:.
Componente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Componente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (12/11/2015 04:32:02 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Falha na geração de contexto de ativação para "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Erro no arquivo de manifesto ou de diretiva "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2", na linhaC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Uma versão de componente exigida pelo aplicativo está em conflito com outra versão de componente já ativa.
Os componentes conflitantes são:.
Componente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Componente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (12/11/2015 04:12:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/11/2015 03:24:44 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/11/2015 11:01:16 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/11/2015 10:57:57 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: notepad.exe, versão: 6.1.7600.16385, carimbo de hora: 0x4a5bc9b3
Nome do módulo de falhas: ntdll.dll, versão: 6.1.7601.18247, carimbo de hora: 0x521eaf24
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00000000000986ea
Identificação do processo com falha: 0x1120
Hora de início do aplicativo com falha: 0xnotepad.exe0
Caminho do aplicativo com falha: notepad.exe1
FCaminho do módulo de falhas: notepad.exe2
Identificação do Relatório: notepad.exe3
Error: (12/11/2015 10:45:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: cmd.exe, versão: 6.1.7601.17514, carimbo de hora: 0x4ce798e5
Nome do módulo de falhas: ntdll.dll, versão: 6.1.7601.18247, carimbo de hora: 0x521eaf24
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00000000000986ea
Identificação do processo com falha: 0x8fc
Hora de início do aplicativo com falha: 0xcmd.exe0
Caminho do aplicativo com falha: cmd.exe1
FCaminho do módulo de falhas: cmd.exe2
Identificação do Relatório: cmd.exe3
Error: (12/11/2015 10:03:15 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Falha na geração de contexto de ativação para "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Erro no arquivo de manifesto ou de diretiva "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2", na linhaC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Uma versão de componente exigida pelo aplicativo está em conflito com outra versão de componente já ativa.
Os componentes conflitantes são:.
Componente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Componente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Erros de Sistema:
=============
Error: (12/11/2015 09:35:11 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: O serviço Windows Defender terminou com o erro:
%%-2147023113
Error: (12/11/2015 09:29:09 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: O desligamento anterior do sistema em 16:41:51 às 11/12/2015 não era esperado.
Error: (12/11/2015 04:14:52 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: O serviço Windows Defender terminou com o erro:
%%-2147023113
Error: (12/11/2015 04:12:09 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: O desligamento anterior do sistema em 16:10:51 às 11/12/2015 não era esperado.
Error: (12/11/2015 03:26:06 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: O serviço Windows Defender terminou com o erro:
%%-2147023113
Error: (12/11/2015 11:10:46 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: O serviço Windows Update não foi desligado corretamente após receber um controle de pré-desligamento.
Error: (12/11/2015 11:00:47 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: O desligamento anterior do sistema em 10:59:53 às 11/12/2015 não era esperado.
Error: (12/11/2015 10:20:55 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a resposta de uma transação do serviço defragsvc.
Error: (12/11/2015 10:03:52 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: O serviço Windows Defender terminou com o erro:
%%-2147023113
Error: (12/11/2015 10:00:54 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: O desligamento anterior do sistema em 09:59:30 às 11/12/2015 não era esperado.
==================== Informações da Memória ===========================
Processador: Intel(R) Core(TM) i3 CPU M 380 @ 2.53GHz
Percentagem de memória em uso: 89%
RAM física total: 1782.7 MB
RAM física disponível: 180.92 MB
Virtual Total: 3565.41 MB
Virtual disponível: 1080.76 MB
==================== Drives ================================
Drive c: (Acer) (Fixed) (Total:279.99 GB) (Free:188.81 GB) NTFS
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 23F45B99)
Partition 1: (Not Active) - (Size=18 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=280 GB) - (Type=07 NTFS)
==================== Fim de Addition.txt ============================