Publicité
Publicité
Format du document : text/plain
Prévisualisation
Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão:27-01-2016
Executado por User (2016-01-30 15:12:54)
Executando a partir de C:\Users\User\Desktop
Windows 10 Pro (X64) (2016-01-09 21:25:38)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-1388445924-3286991114-2444111617-500 - Administrator - Disabled)
Convidado (S-1-5-21-1388445924-3286991114-2444111617-501 - Limited - Disabled)
DefaultAccount (S-1-5-21-1388445924-3286991114-2444111617-503 - Limited - Disabled)
User (S-1-5-21-1388445924-3286991114-2444111617-1001 - Administrator - Enabled) => C:\Users\User
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
µTorrent (HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\uTorrent) (Version: 3.4.5.41628 - BitTorrent Inc.)
Adobe Acrobat Reader DC - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AC0F074E4100}) (Version: 15.010.20056 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.286 - Adobe Systems Incorporated)
Estudo de aprimoramento de produto para HP Deskjet 2540 series (HKLM\...\{44FE0FDF-E044-4EA9-AC22-325CDD4C3241}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 48.0.2564.97 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{F9B579C2-D854-300A-BE62-A09EB9D722E4}) (Version: 5.41.3.0 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
HP Deskjet 2540 series Ajuda (HKLM-x32\...\{70B5D5B2-8014-4C22-9963-361B1F07B81A}) (Version: 30.0.0 - Hewlett Packard)
HP Deskjet 2540 series Software básico do dispositivo (HKLM\...\{A4BA74B3-3DCB-47CC-9C80-C2CBAC26C6EB}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3517 - Intel Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
K-Lite Mega Codec Pack 10.6.5 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.6.5 - )
Malwarebytes Anti-Malware versão 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{2af972c7-13b0-4978-92a8-fee26a4fb4e9}) (Version: 12.0.21005.1 - Корпорация Майкрософт)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Módulo de Proteção - Banco Santander (Brasil) S.A. (HKLM-x32\...\{83033d93-48d0-48fc-9c5b-82e57e7e0dd6}_is1) (Version: 3.12.1.2 - )
Mozilla Firefox 39.0 (x86 pt-BR) (HKLM-x32\...\Mozilla Firefox 39.0 (x86 pt-BR)) (Version: 39.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 38.0.5 - Mozilla)
Pacote de Idiomas do Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - Português (Brasil) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PTB) (Version: 10.0.50903 - Microsoft Corporation)
Popcorn Time (HKLM-x32\...\Popcorn Time_is1) (Version: 5.4.1.0 - Popcorn Time)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.26.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.26.0 - Renesas Electronics Corporation) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden
Skype™ 7.7 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.7.103 - Skype Technologies S.A.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.13.0 - Synaptics Incorporated)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
CustomCLSID: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001_Classes\CLSID\{0783EB25-59F8-4F02-B6B0-F1D4349F0001}\InprocServer32 -> C:\Users\User\AppData\Local\GAS Tecnologia\GBBD\npsf_abn_64.dll (GAS Tecnologia)
CustomCLSID: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001_Classes\CLSID\{0783EB25-59F8-4F02-B6B1-F1D4349F0001}\InprocServer32 -> C:\Users\User\AppData\Local\GAS Tecnologia\GBBD\npsf_abn_64.dll (GAS Tecnologia)
CustomCLSID: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\User\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.28.13\psuser_64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll (Google Inc.)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {0205CCAF-044A-4CDD-9799-C155B4462BD7} - \ShopperPro3 -> Nenhum Arquivo <==== ATENÇÃO
Task: {04BD5B4B-2F04-4D0F-885E-5C4EF9B5F919} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {08F53B12-27D2-498A-88D0-07A56EDEF9D0} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {0AB9A3EC-69CC-472E-9B22-6A9DBDA8BEA8} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {0CFE2E40-6A97-48C5-9F38-DE82315CF1B0} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {1281B228-AC7C-4861-9500-783928A5BD6B} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Nenhum Arquivo <==== ATENÇÃO
Task: {133843A8-BC4B-413B-9AF2-47CB01B24FAD} - System32\Tasks\Viproost => C:\ProgramData\Viproost\1.0.7.1\emwaosoo.exe
Task: {1578E711-578E-4B7D-816C-2CD8DE6C70E2} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {203211EB-5A3E-414F-9FBB-FDD1CB7BE95F} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Nenhum Arquivo <==== ATENÇÃO
Task: {22D0B74D-9C2E-48E0-934A-A98EF17246DB} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {23D7E35E-D023-47C6-829E-36D0CBAF8DCB} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {25AD0D3E-EA29-4963-BAF5-12F3BC3C5BA0} - System32\Tasks\{DBB40D07-D69A-45BF-A7A7-508B3052388D} => pcalua.exe -a "C:\Program Files (x86)\MPC Cleaner\Uninstall.exe"
Task: {27E9555B-F5CB-4C99-9CCE-5E94BCBFC2A7} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {2DA8420A-C9CF-4961-BCFA-E93D2CE27B80} - System32\Tasks\{9966AAC8-F6E1-46A7-A8FD-94CCF93AD9D5} => pcalua.exe -a "C:\Program Files\WebBar\unins000.exe"
Task: {2E90DC9E-1ADE-4B21-903C-82FF7450AEC7} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Nenhum Arquivo <==== ATENÇÃO
Task: {37B1EA4C-1695-4F21-9A88-3A444FDE9D1B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1388445924-3286991114-2444111617-1001UA => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe [2015-05-15] (Google Inc.)
Task: {3D4F2BB3-8D41-4F3A-848F-29591BDB7B83} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {4231D7DE-79C0-432E-9D3E-4CAAF4FE31C0} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {4404B6D7-2BA6-4767-A9BA-533AD5C96000} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Nenhum Arquivo <==== ATENÇÃO
Task: {46C9660F-02BD-40C5-8C5C-6F6C858C0E42} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-01-18] (Microsoft Corporation)
Task: {489AFEEA-E217-4289-A9A4-C3971562C29D} - System32\Tasks\osTip => C:\ProgramData\WindowsMsg\osmsg.exe [2016-01-20] ()
Task: {4AFAA463-D1E7-4C42-BF0E-776F9D9142BB} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {4C2DE2B1-F126-4DDA-BD70-C750A96252A8} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {4D5A3EED-5398-4182-BFF9-990FBF632EC2} - \SPBIW_UpdateTask_Time_313634363136333735332d3437415a556c2a3223346c41 -> Nenhum Arquivo <==== ATENÇÃO
Task: {4DB97B27-38F4-47A3-977F-82902E0C2DA8} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {54F81722-9D31-47A0-9DC8-FDA9A115B42E} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Nenhum Arquivo <==== ATENÇÃO
Task: {5AAC5E6E-E1A5-4BA5-B70F-9C9CB8E1A721} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {5D478429-3692-4DE1-83F8-7DC0F749FB05} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {5FA67480-9B76-4D8A-BEFE-45E19F14EFD2} - System32\Tasks\{9C617DE1-C108-45F1-BACD-754CC979D47D} => pcalua.exe -a C:\Users\User\AppData\Local\02DC3B9D-1454114638-E011-A64C-000418411445\Uninstall.exe
Task: {67A23605-EC51-4867-8A18-CC27072A469B} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {6AFEC017-4660-4A91-B7B1-F03B098CBBE4} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {6D5329EC-3594-4777-9B69-47B98DF7E5A1} - System32\Tasks\SpeedUpMyPC Startup => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATENÇÃO
Task: {6D97D492-C971-49A6-89C3-BC85D8CCA8F8} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {80375738-25DF-4260-B2D2-268C7AF5E0BA} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {82D060E0-10CF-4F06-97DC-6B321EB1F756} - System32\Tasks\Pritc => C:\Users\User\AppData\Local\Temp\00009971\casrss.exe [2016-01-30] (VLOME) <==== ATENÇÃO
Task: {96282EBB-FF8D-43E1-8570-DDF4283BDDC4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-13] (Google Inc.)
Task: {9670CAF2-350D-46A8-BF4A-87BA293ECEA8} - System32\Tasks\HPCustParticipation HP Deskjet 2540 series => C:\Program Files\HP\HP Deskjet 2540 series\Bin\HPCustPartic.exe [2014-03-06] (Hewlett-Packard Co.)
Task: {9B5F8AE6-5507-40C0-BE77-7834173FC190} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {A98B5D9C-F4BA-4815-AD78-6E564F348A87} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {B13084BA-C32F-4F49-97E1-A0F4879AA94F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Nenhum Arquivo <==== ATENÇÃO
Task: {B2C66954-0D2D-48EC-B03E-843E8A2271DA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-13] (Google Inc.)
Task: {B2C68A59-9792-444A-B8F4-5BCA33B1D721} - System32\Tasks\Hybrid3 => taskkill
Task: {B5723171-4EC1-4C2E-B2BF-B1A3AAC0C855} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Nenhum Arquivo <==== ATENÇÃO
Task: {B7C7905D-4DE8-4507-BFF9-8880A2CC7761} - \SPDriver -> Nenhum Arquivo <==== ATENÇÃO
Task: {BEDFE04F-2673-4E21-AB79-69BC27E4F5E3} - System32\Tasks\{26B575E9-C5E4-4EA1-B31D-880118EA66E5} => pcalua.exe -a "C:\Program Files (x86)\ttwifi\unins000.exe"
Task: {C58683FF-742C-4C9D-ADD1-74948FA1C118} - System32\Tasks\IR7 => cmd.exe /c cscript.exe /b C:\Windows\System32\slmgr.vbs /rearm && net stop sppsvc && net start sppsvc
Task: {C762A505-29D5-4977-8B70-AD90B84AB17F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-20] (Adobe Systems Incorporated)
Task: {CD0AABFA-3772-4BE7-9796-0267DB614F59} - System32\Tasks\SpeedUpMyPC Maintenance => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATENÇÃO
Task: {CEF634E7-40F9-4A27-B717-9632C9EA3A8D} - System32\Tasks\Hybrid4 => taskkill
Task: {D6C81CC1-83AD-43AA-9A6B-7215D4B6FFDA} - System32\Tasks\CreateExplorerShellUnelevatedTask => /NOUACCHECK
Task: {D8954E65-F936-482E-8779-EBE2580ADD95} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {DBCCB28F-879C-442F-8CDF-47A03C3AA264} - \ShopperProJSUpd -> Nenhum Arquivo <==== ATENÇÃO
Task: {E7056038-95BD-4BB1-BED6-37A73A4B7D6D} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {E7228441-6A20-45D8-B80B-FCDD6A2A9D42} - System32\Tasks\Hybrid2 => C:\Trial\IR7\IR7.vbs [2014-12-16] ()
Task: {ECA5856A-7D3C-4742-9260-454C2BC20531} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1388445924-3286991114-2444111617-1001Core => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe [2015-05-15] (Google Inc.)
Task: {EE8C1D67-0AF9-4B1C-8616-76F3064BFA47} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {F0EF91CB-49D2-48C2-BDCE-2DAAEBC57A63} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe
Task: {F18B494C-20B6-46B6-9261-7D9BC90862D5} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Nenhum Arquivo <==== ATENÇÃO
Task: {F4FDF594-95C2-4CAF-A17F-7884C4CD38E7} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {FFEDB6FA-0B2C-469E-9224-60B21D438FB6} - System32\Tasks\ttwifi => C:\Program Files (x86)\ttwifi\tiantianwifi.exe
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1388445924-3286991114-2444111617-1001Core.job => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1388445924-3286991114-2444111617-1001UA.job => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\SpeedUpMyPC Maintenance.job => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATENÇÃO
Task: C:\WINDOWS\Tasks\SpeedUpMyPC Startup.job => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATENÇÃO
==================== Atalhos =============================
(As entradas podem ser listadas para serem restauradas ou removidas.)
==================== Módulos Carregados (Whitelisted) ==============
2015-10-30 05:17 - 2015-10-30 05:17 - 00028672 _____ () C:\WINDOWS\SYSTEM32\efsext.dll
2015-10-30 05:18 - 2015-10-30 05:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-01-09 19:42 - 2016-01-09 19:42 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-01-09 19:42 - 2016-01-09 19:42 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2016-01-21 18:27 - 2016-01-21 18:28 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2016-01-09 19:43 - 2016-01-09 19:43 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-01-09 19:43 - 2016-01-09 19:43 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-01-14 03:36 - 2016-01-04 23:29 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-01-14 03:36 - 2016-01-04 23:23 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-01-28 21:21 - 2016-01-16 03:10 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-01-28 21:21 - 2016-01-16 03:13 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-06-01 22:00 - 2015-06-01 22:00 - 00102912 _____ () C:\Windows\System32\IccLibDll_x64.dll
2016-01-30 00:53 - 2016-01-20 23:42 - 01907200 _____ () C:\ProgramData\WindowsMsg\osmsg.exe
2016-01-21 18:25 - 2016-01-21 18:25 - 03746816 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1601.49020.0_x64__8wekyb3d8bbwe\Calculator.exe
2016-01-02 12:17 - 2016-01-02 12:17 - 00258560 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1601.49020.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2016-01-21 18:27 - 2016-01-21 18:28 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-01-21 18:27 - 2016-01-21 18:28 - 22330368 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2016-01-28 21:15 - 2016-01-27 15:39 - 01632584 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.97\libglesv2.dll
2016-01-28 21:15 - 2016-01-27 15:39 - 00087880 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.97\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== EXE Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\bancoreal.com.br -> hxxp://www.bancoreal.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\bancosantander.com.br -> hxxp://www.bancosantander.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\bancosantander.com.br -> hxxps://www.bancosantander.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\realsecureweb.com.br -> hxxps://www.realsecureweb.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\santander.com.br -> hxxp://www.santander.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\santander.com.br -> www.santander.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\santanderempresarial.com.br -> hxxp://www.santanderempresarial.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\santanderempresarial.com.br -> www.santanderempresarial.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\santandernet.com.br -> hxxps://www.santandernet.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\santandernet.com.br -> www.santandernet.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\santandernetibe.com.br -> hxxps://www.santandernetibe.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\santandernetibe.com.br -> www.santandernetibe.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\secureweb.com.br -> hxxps://www.secureweb.com.br
==================== Hosts Conteúdo: ==========================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2009-07-14 00:34 - 2016-01-30 00:41 - 00000965 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\User\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\papers.co-vb49-wallpaper-gplay-real-blue-pattern-15-wallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\StartupApproved\Run: => "Google Update"
HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\StartupApproved\Run: => "Skype"
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{639E77D1-51C5-4714-9FCB-BA87ECF9195B}] => (Allow) C:\Program Files (x86)\Popcorn Time\chromecast\node.exe
FirewallRules: [{B65EEC95-B1A0-48CF-AEA2-BDC7E1BE847F}] => (Allow) C:\Program Files (x86)\Popcorn Time\chromecast\node.exe
FirewallRules: [{5F3541C5-26E3-46DA-AF66-DC6784E67D1C}] => (Allow) C:\Program Files (x86)\Popcorn Time\PopcornTimeDesktop.exe
FirewallRules: [{997290C2-3A49-4575-A4AE-5376C3AD96BB}] => (Allow) C:\Program Files (x86)\Popcorn Time\PopcornTimeDesktop.exe
FirewallRules: [{1D3662E0-A909-465E-92ED-76162C36FCD2}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe
FirewallRules: [{2C122FB7-74BD-4A21-953D-FC636A5E7B93}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe
FirewallRules: [{7706B0FA-EF7B-4409-AFA8-6FA4BE2C8F29}] => (Allow) C:\Program Files\HP\HP Deskjet 2540 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{3690263B-AB1F-48EA-A410-34DF1DA9568B}] => (Allow) LPort=5357
FirewallRules: [{3B362E70-3CD3-428A-95F7-6F70A99C373F}] => (Allow) C:\Program Files\HP\HP Deskjet 2540 series\Bin\DeviceSetup.exe
FirewallRules: [UDP Query User{C37B3E82-4D5E-46FF-A798-2019DBA039D4}C:\users\user\appdata\local\popcorn time\nw.exe] => (Allow) C:\users\user\appdata\local\popcorn time\nw.exe
FirewallRules: [TCP Query User{C65BCBED-F0E0-4E8C-9468-635D1CA3AD51}C:\users\user\appdata\local\popcorn time\nw.exe] => (Allow) C:\users\user\appdata\local\popcorn time\nw.exe
FirewallRules: [UDP Query User{C2DAAA85-E89E-47D5-918D-98677E1EBF5E}C:\users\user\appdata\local\popcorn time\node-webkit\popcorn time.exe] => (Allow) C:\users\user\appdata\local\popcorn time\node-webkit\popcorn time.exe
FirewallRules: [TCP Query User{B4B9AA86-C7F5-41EF-AE59-B395CBB0B182}C:\users\user\appdata\local\popcorn time\node-webkit\popcorn time.exe] => (Allow) C:\users\user\appdata\local\popcorn time\node-webkit\popcorn time.exe
FirewallRules: [TCP Query User{574CEF84-4D2D-48A1-9946-C2CA55565164}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [UDP Query User{9B316268-FDF9-447A-86D8-A1486B7E16D5}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [TCP Query User{BF35A805-1658-487C-AE3D-01BCFFCFA47A}C:\users\user\appdata\local\popcorn time\node-webkit\popcorn time.exe] => (Allow) C:\users\user\appdata\local\popcorn time\node-webkit\popcorn time.exe
FirewallRules: [UDP Query User{5A2AEE15-214C-4E49-B392-C0B5F69F1321}C:\users\user\appdata\local\popcorn time\node-webkit\popcorn time.exe] => (Allow) C:\users\user\appdata\local\popcorn time\node-webkit\popcorn time.exe
FirewallRules: [{4A8E0DAB-D934-4FF7-B29A-C77D1BFE9472}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BB903CC2-448F-4BA0-AA4D-497CC92A11C7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BDCA9C9D-D66B-4E7B-B285-6971AEEE1CCC}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C1F3B5B1-6D59-4BB1-AD79-58320645175C}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{008BBFB9-D6BB-48E9-83DF-B3FD8D85D53F}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{F1E741E6-7E9E-4FB3-B6D0-E9C4B5E4DA00}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{DE6B9875-A103-4F12-8581-42DB2873AC84}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{89A70494-5C01-4D94-81C2-5622E2F43632}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{0867FE0C-4828-4A0D-839F-259262E2BBAD}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{48F42EB6-0EAC-4774-802B-D74B70377791}C:\program files (x86)\popcorn time\chromecast\node.exe] => (Allow) C:\program files (x86)\popcorn time\chromecast\node.exe
FirewallRules: [UDP Query User{99A60AD8-5006-4E1C-8BC1-0A1EC858368E}C:\program files (x86)\popcorn time\chromecast\node.exe] => (Allow) C:\program files (x86)\popcorn time\chromecast\node.exe
FirewallRules: [{4C507207-A564-4FDF-B403-4D3643184586}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Pontos de Restauração =========================
14-01-2016 03:52:40 Windows Update
16-01-2016 20:52:29 Instalador de Módulos do Windows
26-01-2016 14:12:06 Ponto de Verificação Agendado
30-01-2016 00:56:07 Uniblue SpeedUpMyPC installation
==================== Dispositivos Apresentando Falhas No Gerenciador =============
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (01/30/2016 04:37:30 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GABRIELLE)
Description: Falha na ativação do aplicativo Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge com o erro: -2147023170. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais.
Error: (01/30/2016 04:37:30 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: GABRIELLE)
Description: O pacote Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe+MicrosoftEdge foi terminado porque levou muito tempo para ser suspenso.
Error: (01/30/2016 03:12:45 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: AppMgr.exe, versão: 1.0.5872.35383, carimbo de data/hora: 0x56ac3078
Nome do módulo com falha: AppMgr.exe, versão: 1.0.5872.35383, carimbo de data/hora: 0x56ac3078
Código de exceção: 0xc0000005
Deslocamento da falha: 0x000105e9
ID do processo com falha: 0x838
Hora de início do aplicativo com falha: 0xAppMgr.exe0
Caminho do aplicativo com falha: AppMgr.exe1
Caminho do módulo com falha: AppMgr.exe2
ID do Relatório: AppMgr.exe3
Nome completo do pacote com falha: AppMgr.exe4
ID do aplicativo relativo ao pacote com falha: AppMgr.exe5
Error: (01/30/2016 02:25:41 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: spbia.exe, versão: 1.0.0.4, carimbo de data/hora: 0x569c935a
Nome do módulo com falha: spbia.exe, versão: 1.0.0.4, carimbo de data/hora: 0x569c935a
Código de exceção: 0xc0000005
Deslocamento da falha: 0x0000000000003f81
ID do processo com falha: 0x1d84
Hora de início do aplicativo com falha: 0xspbia.exe0
Caminho do aplicativo com falha: spbia.exe1
Caminho do módulo com falha: spbia.exe2
ID do Relatório: spbia.exe3
Nome completo do pacote com falha: spbia.exe4
ID do aplicativo relativo ao pacote com falha: spbia.exe5
Error: (01/30/2016 02:14:22 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: Explorer.EXE, versão: 10.0.10586.0, carimbo de data/hora: 0x5632d4c0
Nome do módulo com falha: ntdll.dll, versão: 10.0.10586.20, carimbo de data/hora: 0x56540c3b
Código de exceção: 0xc0000005
Deslocamento da falha: 0x000000000002fae4
ID do processo com falha: 0x1268
Hora de início do aplicativo com falha: 0xExplorer.EXE0
Caminho do aplicativo com falha: Explorer.EXE1
Caminho do módulo com falha: Explorer.EXE2
ID do Relatório: Explorer.EXE3
Nome completo do pacote com falha: Explorer.EXE4
ID do aplicativo relativo ao pacote com falha: Explorer.EXE5
Error: (01/30/2016 02:12:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: spbia.exe, versão: 1.0.0.4, carimbo de data/hora: 0x569c935a
Nome do módulo com falha: spbia.exe, versão: 1.0.0.4, carimbo de data/hora: 0x569c935a
Código de exceção: 0xc0000005
Deslocamento da falha: 0x0000000000003f81
ID do processo com falha: 0xa38
Hora de início do aplicativo com falha: 0xspbia.exe0
Caminho do aplicativo com falha: spbia.exe1
Caminho do módulo com falha: spbia.exe2
ID do Relatório: spbia.exe3
Nome completo do pacote com falha: spbia.exe4
ID do aplicativo relativo ao pacote com falha: spbia.exe5
Error: (01/30/2016 01:14:35 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..
Details:
AddLegacyDriverFiles: Unable to back up image of binary Protocolo Microsoft LLDP.
System Error:
Acesso negado.
.
Error: (01/30/2016 01:13:13 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: spbia.exe, versão: 1.0.0.4, carimbo de data/hora: 0x569c935a
Nome do módulo com falha: spbia.exe, versão: 1.0.0.4, carimbo de data/hora: 0x569c935a
Código de exceção: 0xc0000005
Deslocamento da falha: 0x0000000000003f81
ID do processo com falha: 0x90c
Hora de início do aplicativo com falha: 0xspbia.exe0
Caminho do aplicativo com falha: spbia.exe1
Caminho do módulo com falha: spbia.exe2
ID do Relatório: spbia.exe3
Nome completo do pacote com falha: spbia.exe4
ID do aplicativo relativo ao pacote com falha: spbia.exe5
Error: (01/30/2016 01:02:33 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..
Details:
AddLegacyDriverFiles: Unable to back up image of binary Protocolo Microsoft LLDP.
System Error:
Acesso negado.
.
Error: (01/26/2016 10:51:54 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GABRIELLE)
Description: Falha na ativação do aplicativo microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 com o erro: -2144927142. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais.
Erros de Sistema:
=============
Error: (01/30/2016 05:18:14 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Acesso a Dados de Usuário_e70ca foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 10000 milissegundos: Reiniciar o serviço.
Error: (01/30/2016 05:18:14 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Armazenamento de Dados de Usuário_e70ca foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 10000 milissegundos: Reiniciar o serviço.
Error: (01/30/2016 05:18:14 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Dados de Contato_e70ca foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 10000 milissegundos: Reiniciar o serviço.
Error: (01/30/2016 05:18:14 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Host de Sincronização_e70ca foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 10000 milissegundos: Reiniciar o serviço.
Error: (01/30/2016 05:04:30 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: O serviço NetTcpActivator depende do serviço NetTcpPortSharing, mas não foi possível iniciá-lo devido ao seguinte erro:
%%1058
Error: (01/30/2016 05:04:30 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço pucufecozbt devido ao seguinte erro:
%%2
Error: (01/30/2016 05:03:50 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORIDADE NT)
Description: Falha na Instalação: o Windows não pôde instalar a seguinte atualização com o erro 0x8024001e: Atualização de Definição Windows Defender – KB2267602 (Definição 1.213.4968.0).
Error: (01/30/2016 05:03:16 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço Host de Sincronização_c3f3f.
Error: (01/30/2016 05:03:15 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço Armazenamento de Dados de Usuário_c3f3f.
Error: (01/30/2016 05:03:05 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Acesso a Dados de Usuário_c3f3f foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 10000 milissegundos: Reiniciar o serviço.
CodeIntegrity:
===================================
Date: 2016-01-30 04:03:09.164
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-30 04:03:09.019
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-30 03:47:15.095
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-30 03:47:14.665
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-30 02:17:36.471
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-30 02:17:36.457
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-30 02:17:36.435
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-30 02:17:26.864
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-30 02:17:26.603
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-30 02:17:26.412
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Informações da Memória ===========================
Processador: Intel(R) Core(TM) i3-2310M CPU @ 2.10GHz
Percentagem de memória em uso: 83%
RAM física total: 1899.86 MB
RAM física disponível: 321.93 MB
Virtual Total: 4331.86 MB
Virtual disponível: 2100.77 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:232.05 GB) (Free:168.83 GB) NTFS
Drive d: () (Fixed) (Total:232.88 GB) (Free:206.2 GB) NTFS
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=232.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=498 MB) - (Type=27)
Partition 4: (Not Active) - (Size=232.9 GB) - (Type=07 NTFS)
==================== Fim de Addition.txt ============================
Executado por User (2016-01-30 15:12:54)
Executando a partir de C:\Users\User\Desktop
Windows 10 Pro (X64) (2016-01-09 21:25:38)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-1388445924-3286991114-2444111617-500 - Administrator - Disabled)
Convidado (S-1-5-21-1388445924-3286991114-2444111617-501 - Limited - Disabled)
DefaultAccount (S-1-5-21-1388445924-3286991114-2444111617-503 - Limited - Disabled)
User (S-1-5-21-1388445924-3286991114-2444111617-1001 - Administrator - Enabled) => C:\Users\User
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
µTorrent (HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\uTorrent) (Version: 3.4.5.41628 - BitTorrent Inc.)
Adobe Acrobat Reader DC - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AC0F074E4100}) (Version: 15.010.20056 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.286 - Adobe Systems Incorporated)
Estudo de aprimoramento de produto para HP Deskjet 2540 series (HKLM\...\{44FE0FDF-E044-4EA9-AC22-325CDD4C3241}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 48.0.2564.97 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{F9B579C2-D854-300A-BE62-A09EB9D722E4}) (Version: 5.41.3.0 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
HP Deskjet 2540 series Ajuda (HKLM-x32\...\{70B5D5B2-8014-4C22-9963-361B1F07B81A}) (Version: 30.0.0 - Hewlett Packard)
HP Deskjet 2540 series Software básico do dispositivo (HKLM\...\{A4BA74B3-3DCB-47CC-9C80-C2CBAC26C6EB}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3517 - Intel Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
K-Lite Mega Codec Pack 10.6.5 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.6.5 - )
Malwarebytes Anti-Malware versão 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{2af972c7-13b0-4978-92a8-fee26a4fb4e9}) (Version: 12.0.21005.1 - Корпорация Майкрософт)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Módulo de Proteção - Banco Santander (Brasil) S.A. (HKLM-x32\...\{83033d93-48d0-48fc-9c5b-82e57e7e0dd6}_is1) (Version: 3.12.1.2 - )
Mozilla Firefox 39.0 (x86 pt-BR) (HKLM-x32\...\Mozilla Firefox 39.0 (x86 pt-BR)) (Version: 39.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 38.0.5 - Mozilla)
Pacote de Idiomas do Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - Português (Brasil) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PTB) (Version: 10.0.50903 - Microsoft Corporation)
Popcorn Time (HKLM-x32\...\Popcorn Time_is1) (Version: 5.4.1.0 - Popcorn Time)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.26.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.26.0 - Renesas Electronics Corporation) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden
Skype™ 7.7 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.7.103 - Skype Technologies S.A.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.13.0 - Synaptics Incorporated)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
CustomCLSID: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001_Classes\CLSID\{0783EB25-59F8-4F02-B6B0-F1D4349F0001}\InprocServer32 -> C:\Users\User\AppData\Local\GAS Tecnologia\GBBD\npsf_abn_64.dll (GAS Tecnologia)
CustomCLSID: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001_Classes\CLSID\{0783EB25-59F8-4F02-B6B1-F1D4349F0001}\InprocServer32 -> C:\Users\User\AppData\Local\GAS Tecnologia\GBBD\npsf_abn_64.dll (GAS Tecnologia)
CustomCLSID: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\User\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.28.13\psuser_64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\User\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll (Google Inc.)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {0205CCAF-044A-4CDD-9799-C155B4462BD7} - \ShopperPro3 -> Nenhum Arquivo <==== ATENÇÃO
Task: {04BD5B4B-2F04-4D0F-885E-5C4EF9B5F919} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {08F53B12-27D2-498A-88D0-07A56EDEF9D0} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {0AB9A3EC-69CC-472E-9B22-6A9DBDA8BEA8} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {0CFE2E40-6A97-48C5-9F38-DE82315CF1B0} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {1281B228-AC7C-4861-9500-783928A5BD6B} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Nenhum Arquivo <==== ATENÇÃO
Task: {133843A8-BC4B-413B-9AF2-47CB01B24FAD} - System32\Tasks\Viproost => C:\ProgramData\Viproost\1.0.7.1\emwaosoo.exe
Task: {1578E711-578E-4B7D-816C-2CD8DE6C70E2} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {203211EB-5A3E-414F-9FBB-FDD1CB7BE95F} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Nenhum Arquivo <==== ATENÇÃO
Task: {22D0B74D-9C2E-48E0-934A-A98EF17246DB} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {23D7E35E-D023-47C6-829E-36D0CBAF8DCB} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {25AD0D3E-EA29-4963-BAF5-12F3BC3C5BA0} - System32\Tasks\{DBB40D07-D69A-45BF-A7A7-508B3052388D} => pcalua.exe -a "C:\Program Files (x86)\MPC Cleaner\Uninstall.exe"
Task: {27E9555B-F5CB-4C99-9CCE-5E94BCBFC2A7} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {2DA8420A-C9CF-4961-BCFA-E93D2CE27B80} - System32\Tasks\{9966AAC8-F6E1-46A7-A8FD-94CCF93AD9D5} => pcalua.exe -a "C:\Program Files\WebBar\unins000.exe"
Task: {2E90DC9E-1ADE-4B21-903C-82FF7450AEC7} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Nenhum Arquivo <==== ATENÇÃO
Task: {37B1EA4C-1695-4F21-9A88-3A444FDE9D1B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1388445924-3286991114-2444111617-1001UA => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe [2015-05-15] (Google Inc.)
Task: {3D4F2BB3-8D41-4F3A-848F-29591BDB7B83} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {4231D7DE-79C0-432E-9D3E-4CAAF4FE31C0} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {4404B6D7-2BA6-4767-A9BA-533AD5C96000} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Nenhum Arquivo <==== ATENÇÃO
Task: {46C9660F-02BD-40C5-8C5C-6F6C858C0E42} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-01-18] (Microsoft Corporation)
Task: {489AFEEA-E217-4289-A9A4-C3971562C29D} - System32\Tasks\osTip => C:\ProgramData\WindowsMsg\osmsg.exe [2016-01-20] ()
Task: {4AFAA463-D1E7-4C42-BF0E-776F9D9142BB} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {4C2DE2B1-F126-4DDA-BD70-C750A96252A8} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {4D5A3EED-5398-4182-BFF9-990FBF632EC2} - \SPBIW_UpdateTask_Time_313634363136333735332d3437415a556c2a3223346c41 -> Nenhum Arquivo <==== ATENÇÃO
Task: {4DB97B27-38F4-47A3-977F-82902E0C2DA8} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {54F81722-9D31-47A0-9DC8-FDA9A115B42E} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Nenhum Arquivo <==== ATENÇÃO
Task: {5AAC5E6E-E1A5-4BA5-B70F-9C9CB8E1A721} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {5D478429-3692-4DE1-83F8-7DC0F749FB05} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {5FA67480-9B76-4D8A-BEFE-45E19F14EFD2} - System32\Tasks\{9C617DE1-C108-45F1-BACD-754CC979D47D} => pcalua.exe -a C:\Users\User\AppData\Local\02DC3B9D-1454114638-E011-A64C-000418411445\Uninstall.exe
Task: {67A23605-EC51-4867-8A18-CC27072A469B} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {6AFEC017-4660-4A91-B7B1-F03B098CBBE4} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {6D5329EC-3594-4777-9B69-47B98DF7E5A1} - System32\Tasks\SpeedUpMyPC Startup => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATENÇÃO
Task: {6D97D492-C971-49A6-89C3-BC85D8CCA8F8} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {80375738-25DF-4260-B2D2-268C7AF5E0BA} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {82D060E0-10CF-4F06-97DC-6B321EB1F756} - System32\Tasks\Pritc => C:\Users\User\AppData\Local\Temp\00009971\casrss.exe [2016-01-30] (VLOME) <==== ATENÇÃO
Task: {96282EBB-FF8D-43E1-8570-DDF4283BDDC4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-13] (Google Inc.)
Task: {9670CAF2-350D-46A8-BF4A-87BA293ECEA8} - System32\Tasks\HPCustParticipation HP Deskjet 2540 series => C:\Program Files\HP\HP Deskjet 2540 series\Bin\HPCustPartic.exe [2014-03-06] (Hewlett-Packard Co.)
Task: {9B5F8AE6-5507-40C0-BE77-7834173FC190} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {A98B5D9C-F4BA-4815-AD78-6E564F348A87} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {B13084BA-C32F-4F49-97E1-A0F4879AA94F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Nenhum Arquivo <==== ATENÇÃO
Task: {B2C66954-0D2D-48EC-B03E-843E8A2271DA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-13] (Google Inc.)
Task: {B2C68A59-9792-444A-B8F4-5BCA33B1D721} - System32\Tasks\Hybrid3 => taskkill
Task: {B5723171-4EC1-4C2E-B2BF-B1A3AAC0C855} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Nenhum Arquivo <==== ATENÇÃO
Task: {B7C7905D-4DE8-4507-BFF9-8880A2CC7761} - \SPDriver -> Nenhum Arquivo <==== ATENÇÃO
Task: {BEDFE04F-2673-4E21-AB79-69BC27E4F5E3} - System32\Tasks\{26B575E9-C5E4-4EA1-B31D-880118EA66E5} => pcalua.exe -a "C:\Program Files (x86)\ttwifi\unins000.exe"
Task: {C58683FF-742C-4C9D-ADD1-74948FA1C118} - System32\Tasks\IR7 => cmd.exe /c cscript.exe /b C:\Windows\System32\slmgr.vbs /rearm && net stop sppsvc && net start sppsvc
Task: {C762A505-29D5-4977-8B70-AD90B84AB17F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-20] (Adobe Systems Incorporated)
Task: {CD0AABFA-3772-4BE7-9796-0267DB614F59} - System32\Tasks\SpeedUpMyPC Maintenance => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATENÇÃO
Task: {CEF634E7-40F9-4A27-B717-9632C9EA3A8D} - System32\Tasks\Hybrid4 => taskkill
Task: {D6C81CC1-83AD-43AA-9A6B-7215D4B6FFDA} - System32\Tasks\CreateExplorerShellUnelevatedTask => /NOUACCHECK
Task: {D8954E65-F936-482E-8779-EBE2580ADD95} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {DBCCB28F-879C-442F-8CDF-47A03C3AA264} - \ShopperProJSUpd -> Nenhum Arquivo <==== ATENÇÃO
Task: {E7056038-95BD-4BB1-BED6-37A73A4B7D6D} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {E7228441-6A20-45D8-B80B-FCDD6A2A9D42} - System32\Tasks\Hybrid2 => C:\Trial\IR7\IR7.vbs [2014-12-16] ()
Task: {ECA5856A-7D3C-4742-9260-454C2BC20531} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1388445924-3286991114-2444111617-1001Core => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe [2015-05-15] (Google Inc.)
Task: {EE8C1D67-0AF9-4B1C-8616-76F3064BFA47} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {F0EF91CB-49D2-48C2-BDCE-2DAAEBC57A63} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe
Task: {F18B494C-20B6-46B6-9261-7D9BC90862D5} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Nenhum Arquivo <==== ATENÇÃO
Task: {F4FDF594-95C2-4CAF-A17F-7884C4CD38E7} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {FFEDB6FA-0B2C-469E-9224-60B21D438FB6} - System32\Tasks\ttwifi => C:\Program Files (x86)\ttwifi\tiantianwifi.exe
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1388445924-3286991114-2444111617-1001Core.job => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1388445924-3286991114-2444111617-1001UA.job => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\SpeedUpMyPC Maintenance.job => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATENÇÃO
Task: C:\WINDOWS\Tasks\SpeedUpMyPC Startup.job => C:\Program Files (x86)\Uniblue\SpeedUpMyPC\speedupmypc.exe <==== ATENÇÃO
==================== Atalhos =============================
(As entradas podem ser listadas para serem restauradas ou removidas.)
==================== Módulos Carregados (Whitelisted) ==============
2015-10-30 05:17 - 2015-10-30 05:17 - 00028672 _____ () C:\WINDOWS\SYSTEM32\efsext.dll
2015-10-30 05:18 - 2015-10-30 05:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-01-09 19:42 - 2016-01-09 19:42 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-01-09 19:42 - 2016-01-09 19:42 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2016-01-21 18:27 - 2016-01-21 18:28 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2016-01-09 19:43 - 2016-01-09 19:43 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-01-09 19:43 - 2016-01-09 19:43 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-01-14 03:36 - 2016-01-04 23:29 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-01-14 03:36 - 2016-01-04 23:23 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-01-28 21:21 - 2016-01-16 03:10 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-01-28 21:21 - 2016-01-16 03:13 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-06-01 22:00 - 2015-06-01 22:00 - 00102912 _____ () C:\Windows\System32\IccLibDll_x64.dll
2016-01-30 00:53 - 2016-01-20 23:42 - 01907200 _____ () C:\ProgramData\WindowsMsg\osmsg.exe
2016-01-21 18:25 - 2016-01-21 18:25 - 03746816 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1601.49020.0_x64__8wekyb3d8bbwe\Calculator.exe
2016-01-02 12:17 - 2016-01-02 12:17 - 00258560 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1601.49020.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2016-01-21 18:27 - 2016-01-21 18:28 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-01-21 18:27 - 2016-01-21 18:28 - 22330368 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2016-01-28 21:15 - 2016-01-27 15:39 - 01632584 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.97\libglesv2.dll
2016-01-28 21:15 - 2016-01-27 15:39 - 00087880 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.97\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== EXE Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\bancoreal.com.br -> hxxp://www.bancoreal.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\bancosantander.com.br -> hxxp://www.bancosantander.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\bancosantander.com.br -> hxxps://www.bancosantander.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\realsecureweb.com.br -> hxxps://www.realsecureweb.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\santander.com.br -> hxxp://www.santander.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\santander.com.br -> www.santander.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\santanderempresarial.com.br -> hxxp://www.santanderempresarial.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\santanderempresarial.com.br -> www.santanderempresarial.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\santandernet.com.br -> hxxps://www.santandernet.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\santandernet.com.br -> www.santandernet.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\santandernetibe.com.br -> hxxps://www.santandernetibe.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\santandernetibe.com.br -> www.santandernetibe.com.br
IE trusted site: HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\secureweb.com.br -> hxxps://www.secureweb.com.br
==================== Hosts Conteúdo: ==========================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2009-07-14 00:34 - 2016-01-30 00:41 - 00000965 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\User\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\papers.co-vb49-wallpaper-gplay-real-blue-pattern-15-wallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\StartupApproved\Run: => "Google Update"
HKU\S-1-5-21-1388445924-3286991114-2444111617-1001\...\StartupApproved\Run: => "Skype"
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{639E77D1-51C5-4714-9FCB-BA87ECF9195B}] => (Allow) C:\Program Files (x86)\Popcorn Time\chromecast\node.exe
FirewallRules: [{B65EEC95-B1A0-48CF-AEA2-BDC7E1BE847F}] => (Allow) C:\Program Files (x86)\Popcorn Time\chromecast\node.exe
FirewallRules: [{5F3541C5-26E3-46DA-AF66-DC6784E67D1C}] => (Allow) C:\Program Files (x86)\Popcorn Time\PopcornTimeDesktop.exe
FirewallRules: [{997290C2-3A49-4575-A4AE-5376C3AD96BB}] => (Allow) C:\Program Files (x86)\Popcorn Time\PopcornTimeDesktop.exe
FirewallRules: [{1D3662E0-A909-465E-92ED-76162C36FCD2}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe
FirewallRules: [{2C122FB7-74BD-4A21-953D-FC636A5E7B93}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe
FirewallRules: [{7706B0FA-EF7B-4409-AFA8-6FA4BE2C8F29}] => (Allow) C:\Program Files\HP\HP Deskjet 2540 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{3690263B-AB1F-48EA-A410-34DF1DA9568B}] => (Allow) LPort=5357
FirewallRules: [{3B362E70-3CD3-428A-95F7-6F70A99C373F}] => (Allow) C:\Program Files\HP\HP Deskjet 2540 series\Bin\DeviceSetup.exe
FirewallRules: [UDP Query User{C37B3E82-4D5E-46FF-A798-2019DBA039D4}C:\users\user\appdata\local\popcorn time\nw.exe] => (Allow) C:\users\user\appdata\local\popcorn time\nw.exe
FirewallRules: [TCP Query User{C65BCBED-F0E0-4E8C-9468-635D1CA3AD51}C:\users\user\appdata\local\popcorn time\nw.exe] => (Allow) C:\users\user\appdata\local\popcorn time\nw.exe
FirewallRules: [UDP Query User{C2DAAA85-E89E-47D5-918D-98677E1EBF5E}C:\users\user\appdata\local\popcorn time\node-webkit\popcorn time.exe] => (Allow) C:\users\user\appdata\local\popcorn time\node-webkit\popcorn time.exe
FirewallRules: [TCP Query User{B4B9AA86-C7F5-41EF-AE59-B395CBB0B182}C:\users\user\appdata\local\popcorn time\node-webkit\popcorn time.exe] => (Allow) C:\users\user\appdata\local\popcorn time\node-webkit\popcorn time.exe
FirewallRules: [TCP Query User{574CEF84-4D2D-48A1-9946-C2CA55565164}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [UDP Query User{9B316268-FDF9-447A-86D8-A1486B7E16D5}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [TCP Query User{BF35A805-1658-487C-AE3D-01BCFFCFA47A}C:\users\user\appdata\local\popcorn time\node-webkit\popcorn time.exe] => (Allow) C:\users\user\appdata\local\popcorn time\node-webkit\popcorn time.exe
FirewallRules: [UDP Query User{5A2AEE15-214C-4E49-B392-C0B5F69F1321}C:\users\user\appdata\local\popcorn time\node-webkit\popcorn time.exe] => (Allow) C:\users\user\appdata\local\popcorn time\node-webkit\popcorn time.exe
FirewallRules: [{4A8E0DAB-D934-4FF7-B29A-C77D1BFE9472}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BB903CC2-448F-4BA0-AA4D-497CC92A11C7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BDCA9C9D-D66B-4E7B-B285-6971AEEE1CCC}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C1F3B5B1-6D59-4BB1-AD79-58320645175C}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{008BBFB9-D6BB-48E9-83DF-B3FD8D85D53F}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{F1E741E6-7E9E-4FB3-B6D0-E9C4B5E4DA00}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{DE6B9875-A103-4F12-8581-42DB2873AC84}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{89A70494-5C01-4D94-81C2-5622E2F43632}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{0867FE0C-4828-4A0D-839F-259262E2BBAD}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{48F42EB6-0EAC-4774-802B-D74B70377791}C:\program files (x86)\popcorn time\chromecast\node.exe] => (Allow) C:\program files (x86)\popcorn time\chromecast\node.exe
FirewallRules: [UDP Query User{99A60AD8-5006-4E1C-8BC1-0A1EC858368E}C:\program files (x86)\popcorn time\chromecast\node.exe] => (Allow) C:\program files (x86)\popcorn time\chromecast\node.exe
FirewallRules: [{4C507207-A564-4FDF-B403-4D3643184586}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Pontos de Restauração =========================
14-01-2016 03:52:40 Windows Update
16-01-2016 20:52:29 Instalador de Módulos do Windows
26-01-2016 14:12:06 Ponto de Verificação Agendado
30-01-2016 00:56:07 Uniblue SpeedUpMyPC installation
==================== Dispositivos Apresentando Falhas No Gerenciador =============
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (01/30/2016 04:37:30 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GABRIELLE)
Description: Falha na ativação do aplicativo Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge com o erro: -2147023170. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais.
Error: (01/30/2016 04:37:30 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: GABRIELLE)
Description: O pacote Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe+MicrosoftEdge foi terminado porque levou muito tempo para ser suspenso.
Error: (01/30/2016 03:12:45 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: AppMgr.exe, versão: 1.0.5872.35383, carimbo de data/hora: 0x56ac3078
Nome do módulo com falha: AppMgr.exe, versão: 1.0.5872.35383, carimbo de data/hora: 0x56ac3078
Código de exceção: 0xc0000005
Deslocamento da falha: 0x000105e9
ID do processo com falha: 0x838
Hora de início do aplicativo com falha: 0xAppMgr.exe0
Caminho do aplicativo com falha: AppMgr.exe1
Caminho do módulo com falha: AppMgr.exe2
ID do Relatório: AppMgr.exe3
Nome completo do pacote com falha: AppMgr.exe4
ID do aplicativo relativo ao pacote com falha: AppMgr.exe5
Error: (01/30/2016 02:25:41 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: spbia.exe, versão: 1.0.0.4, carimbo de data/hora: 0x569c935a
Nome do módulo com falha: spbia.exe, versão: 1.0.0.4, carimbo de data/hora: 0x569c935a
Código de exceção: 0xc0000005
Deslocamento da falha: 0x0000000000003f81
ID do processo com falha: 0x1d84
Hora de início do aplicativo com falha: 0xspbia.exe0
Caminho do aplicativo com falha: spbia.exe1
Caminho do módulo com falha: spbia.exe2
ID do Relatório: spbia.exe3
Nome completo do pacote com falha: spbia.exe4
ID do aplicativo relativo ao pacote com falha: spbia.exe5
Error: (01/30/2016 02:14:22 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: Explorer.EXE, versão: 10.0.10586.0, carimbo de data/hora: 0x5632d4c0
Nome do módulo com falha: ntdll.dll, versão: 10.0.10586.20, carimbo de data/hora: 0x56540c3b
Código de exceção: 0xc0000005
Deslocamento da falha: 0x000000000002fae4
ID do processo com falha: 0x1268
Hora de início do aplicativo com falha: 0xExplorer.EXE0
Caminho do aplicativo com falha: Explorer.EXE1
Caminho do módulo com falha: Explorer.EXE2
ID do Relatório: Explorer.EXE3
Nome completo do pacote com falha: Explorer.EXE4
ID do aplicativo relativo ao pacote com falha: Explorer.EXE5
Error: (01/30/2016 02:12:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: spbia.exe, versão: 1.0.0.4, carimbo de data/hora: 0x569c935a
Nome do módulo com falha: spbia.exe, versão: 1.0.0.4, carimbo de data/hora: 0x569c935a
Código de exceção: 0xc0000005
Deslocamento da falha: 0x0000000000003f81
ID do processo com falha: 0xa38
Hora de início do aplicativo com falha: 0xspbia.exe0
Caminho do aplicativo com falha: spbia.exe1
Caminho do módulo com falha: spbia.exe2
ID do Relatório: spbia.exe3
Nome completo do pacote com falha: spbia.exe4
ID do aplicativo relativo ao pacote com falha: spbia.exe5
Error: (01/30/2016 01:14:35 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..
Details:
AddLegacyDriverFiles: Unable to back up image of binary Protocolo Microsoft LLDP.
System Error:
Acesso negado.
.
Error: (01/30/2016 01:13:13 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome do aplicativo com falha: spbia.exe, versão: 1.0.0.4, carimbo de data/hora: 0x569c935a
Nome do módulo com falha: spbia.exe, versão: 1.0.0.4, carimbo de data/hora: 0x569c935a
Código de exceção: 0xc0000005
Deslocamento da falha: 0x0000000000003f81
ID do processo com falha: 0x90c
Hora de início do aplicativo com falha: 0xspbia.exe0
Caminho do aplicativo com falha: spbia.exe1
Caminho do módulo com falha: spbia.exe2
ID do Relatório: spbia.exe3
Nome completo do pacote com falha: spbia.exe4
ID do aplicativo relativo ao pacote com falha: spbia.exe5
Error: (01/30/2016 01:02:33 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..
Details:
AddLegacyDriverFiles: Unable to back up image of binary Protocolo Microsoft LLDP.
System Error:
Acesso negado.
.
Error: (01/26/2016 10:51:54 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GABRIELLE)
Description: Falha na ativação do aplicativo microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 com o erro: -2144927142. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais.
Erros de Sistema:
=============
Error: (01/30/2016 05:18:14 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Acesso a Dados de Usuário_e70ca foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 10000 milissegundos: Reiniciar o serviço.
Error: (01/30/2016 05:18:14 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Armazenamento de Dados de Usuário_e70ca foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 10000 milissegundos: Reiniciar o serviço.
Error: (01/30/2016 05:18:14 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Dados de Contato_e70ca foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 10000 milissegundos: Reiniciar o serviço.
Error: (01/30/2016 05:18:14 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Host de Sincronização_e70ca foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 10000 milissegundos: Reiniciar o serviço.
Error: (01/30/2016 05:04:30 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: O serviço NetTcpActivator depende do serviço NetTcpPortSharing, mas não foi possível iniciá-lo devido ao seguinte erro:
%%1058
Error: (01/30/2016 05:04:30 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço pucufecozbt devido ao seguinte erro:
%%2
Error: (01/30/2016 05:03:50 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORIDADE NT)
Description: Falha na Instalação: o Windows não pôde instalar a seguinte atualização com o erro 0x8024001e: Atualização de Definição Windows Defender – KB2267602 (Definição 1.213.4968.0).
Error: (01/30/2016 05:03:16 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço Host de Sincronização_c3f3f.
Error: (01/30/2016 05:03:15 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço Armazenamento de Dados de Usuário_c3f3f.
Error: (01/30/2016 05:03:05 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço Acesso a Dados de Usuário_c3f3f foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 10000 milissegundos: Reiniciar o serviço.
CodeIntegrity:
===================================
Date: 2016-01-30 04:03:09.164
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-30 04:03:09.019
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-30 03:47:15.095
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-30 03:47:14.665
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-30 02:17:36.471
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-30 02:17:36.457
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-30 02:17:36.435
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-30 02:17:26.864
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-30 02:17:26.603
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-30 02:17:26.412
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Informações da Memória ===========================
Processador: Intel(R) Core(TM) i3-2310M CPU @ 2.10GHz
Percentagem de memória em uso: 83%
RAM física total: 1899.86 MB
RAM física disponível: 321.93 MB
Virtual Total: 4331.86 MB
Virtual disponível: 2100.77 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:232.05 GB) (Free:168.83 GB) NTFS
Drive d: () (Fixed) (Total:232.88 GB) (Free:206.2 GB) NTFS
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=232.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=498 MB) - (Type=27)
Partition 4: (Not Active) - (Size=232.9 GB) - (Type=07 NTFS)
==================== Fim de Addition.txt ============================