Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão: 08-08-2016
Executado por Paula Souza (2016-08-08 16:10:05)
Executando a partir de C:\Users\user\Downloads
Windows 8.1 Pro (X64) (2015-11-02 15:35:20)
Modo da Inicialização: Normal
==========================================================


==================== Contas: =============================

Administrador (S-1-5-21-4263908865-4150902347-1559481974-500 - Administrator - Disabled)
Convidado (S-1-5-21-4263908865-4150902347-1559481974-501 - Limited - Disabled)
Paula Souza (S-1-5-21-4263908865-4150902347-1559481974-1001 - Administrator - Enabled) => C:\Users\user

==================== Central de Segurança ========================

(Se uma entrada for incluída na fixlist, será removida.)

AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Programas Instalados ======================

(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AC0F074E4100}) (Version: 15.017.20053 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKU\S-1-5-21-4263908865-4150902347-1559481974-1001\...\Akamai) (Version: - Akamai Technologies, Inc)
AutoCAD 2010 - English (HKLM\...\AutoCAD 2010 - English) (Version: 18.0.55.0 - Autodesk)
AutoCAD 2010 - English (Version: 18.0.55.0 - Autodesk) Hidden
AutoCAD 2010 Language Pack - English (Version: 18.0.55.0 - Autodesk) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CutePDF Writer 3.0 (HKLM\...\CutePDF Writer Installation) (Version: 3.0 - Acro Software Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 51.0.2704.103 - Google Inc.)
Google Earth Pro (HKLM-x32\...\{35DAA04C-1720-4BE3-A920-A03731EC6A1D}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Insyde Airplane Mode HID Mini-Driver (HKLM\...\AirplaneModeHid) (Version: 1.3.0.0 - Insyde Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3368 - Intel Corporation)
KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version: - )
KMSpico v9.0.6.20131120 (HKLM\...\KMSpico_is1) (Version: 9.0.6.20131120 - )
McAfee LiveSafe (HKLM-x32\...\MSC) (Version: 14.0.9029 - McAfee, Inc.)
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.0.233 - McAfee, Inc.)
Microsoft Office Professional Plus 2016 - pt-br (HKLM\...\ProPlusRetail - pt-br) (Version: 16.0.7070.2033 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4263908865-4150902347-1559481974-1001\...\OneDriveSetup.exe) (Version: 17.3.6390.0509 - Microsoft Corporation)
Microsoft SQL Server 2008 Native Client (HKLM\...\{BBDE8A3D-64A2-43A6-95F3-C27B87DF7AC1}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.7030.1021 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.7030.1021 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (x32 Version: 16.0.7030.1021 - Microsoft Corporation) Hidden
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.780.780.110713 - REALTEK Semiconductor Corp.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9600.21240 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7095 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.0231 - REALTEK Semiconductor Corp.)
SafeZone Stable 1.51.2220.47 (x32 Version: 1.51.2220.47 - Avast Software) Hidden
Suporte para Aplicativos Apple (32-bit) (HKLM-x32\...\{7FA9ECCF-A2DE-4DA1-BFF3-81260DBDA68F}) (Version: 4.1.2 - Apple Inc.)
Suporte para Aplicativos Apple Apple (64-bit) (HKLM\...\{691F30EB-9009-475A-B8A9-E1BF39598FD5}) (Version: 4.1.2 - Apple Inc.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 18.0.5.0 - Synaptics Incorporated)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
WinThruster (HKLM-x32\...\WinThruster_is1) (Version: 1.79 - solvusoft Corporation) <==== ATENÇÃO

==================== Exame Personalizado CLSID (Whitelisted): ==========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

CustomCLSID: HKU\S-1-5-21-4263908865-4150902347-1559481974-1001_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\user\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\FileCoAuthLib64.dll ()
CustomCLSID: HKU\S-1-5-21-4263908865-4150902347-1559481974-1001_Classes\CLSID\{6D7AE628-FF41-4CD3-91DD-34825BB1A251}\localserver32 -> C:\Program Files\AutoCAD 2010\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-4263908865-4150902347-1559481974-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\user\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4263908865-4150902347-1559481974-1001_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\AutoCAD 2010\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-4263908865-4150902347-1559481974-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\AutoCAD 2010\acadficn.dll (Autodesk, Inc.)

==================== Tarefas Agendadas (Whitelisted) =============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

Task: {00E27641-E9A9-4B94-9843-7998A2C40B62} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-07-31] (AVAST Software)
Task: {04ECBEB3-3344-44DD-AAD4-76BECFCEA4B0} - System32\Tasks\McAfee\McAfee Auto Maintenance Task Agent
Task: {058C7314-C3AE-419A-AC67-EA86F9AA6D0D} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [2015-08-30] (@ByELDI)
Task: {07FFEBFA-A0DE-4939-BB6C-60D7CA300882} - System32\Tasks\{1F281B23-79B8-49CC-935C-8DFAAA79C03D} => pcalua.exe -a "C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Office Setup Controller\setup.exe" -c /uninstall PROPLUS /dll OSETUP.DLL
Task: {314C3505-281C-4908-8900-A9B2FD59BC80} - System32\Tasks\McAfee\McAfee Idle Detection Task
Task: {352DC789-C62C-4248-9810-5265C4D2CA64} - System32\Tasks\WinThruster_UPDATES => C:\Program Files (x86)\WinThruster\WinThruster.exe [2015-11-25] (Solvusoft Corporation) <==== ATENÇÃO
Task: {3AFA6FF3-4026-410C-94F7-605AE5D1338B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2016-07-25] (Microsoft Corporation)
Task: {3E3FA679-0CDB-4B45-98D0-7EAC8C8E5D2D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2016-07-25] (Microsoft Corporation)
Task: {498711C7-7672-4712-8789-E1D6E360A9C8} - System32\Tasks\Reimage Reminder => C:\Program Files\Reimage\Reimage Repair\ReimageReminder.exe [2016-07-24] (Reimage ltd.) <==== ATENÇÃO
Task: {4E5D6797-2820-4DC7-BCD4-197E55D23346} - System32\Tasks\WinThruster_DEFAULT => C:\Program Files (x86)\WinThruster\WinThruster.exe [2015-11-25] (Solvusoft Corporation) <==== ATENÇÃO
Task: {5193CD18-4E2B-4B57-B392-5790831B9BE9} - System32\Tasks\SafeZone scheduled Autoupdate 1469941664 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-07-25] (Avast Software)
Task: {7B6984A3-8B95-48A7-9F8D-C5FE85202DA3} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-07-25] (Microsoft Corporation)
Task: {865923B5-3D36-4B83-A984-3C729A2192B1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-02] (Google Inc.)
Task: {893F77B7-B0B7-4644-8591-EABCCD4A1AA4} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-07-25] (Microsoft Corporation)
Task: {8D95E740-4B69-462B-A882-39360093BDF0} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-06-25] (Adobe Systems Incorporated)
Task: {9D8EB7CD-1D11-4DE4-B491-F89364180D0B} - System32\Tasks\McAfeeLogon => C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe [2016-04-23] (McAfee, Inc.)
Task: {BD79700F-3DFF-4993-9BD4-14CA3BE082CB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-02] (Google Inc.)
Task: {D973035B-CA27-4F7B-AFEA-D5DB62EA8D2E} - System32\Tasks\WinThruster => C:\Program Files (x86)\WinThruster\WinThruster.exe [2015-11-25] (Solvusoft Corporation) <==== ATENÇÃO
Task: {E823C8F2-291D-4E72-8F9D-424F7FDC8E7A} - System32\Tasks\ReimageUpdater => C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [2016-05-27] (Reimage®) <==== ATENÇÃO
Task: {F93AFDEB-1048-4005-BADD-A5C065BF3885} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-4263908865-4150902347-1559481974-1001 => C:\Users\user\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2016-08-05] (Microsoft Corporation)
Task: {FAA35DEA-705F-4629-ABCD-3C18FC708C0B} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe

(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\WinThruster_DEFAULT.job => C:\Program Files (x86)\WinThruster\WinThruster.exe <==== ATENÇÃO
Task: C:\Windows\Tasks\WinThruster_UPDATES.job => C:\Program Files (x86)\WinThruster\WinThruster.exe <==== ATENÇÃO

==================== Atalhos =============================

(As entradas podem ser listadas para serem restauradas ou removidas.)

==================== Módulos Carregados (Whitelisted) ==============

2015-11-02 13:26 - 2013-10-23 14:24 - 00087600 _____ () C:\Windows\System32\cpwmon64.dll
2015-11-02 12:57 - 2013-11-06 20:24 - 00066560 _____ () C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
2016-08-05 14:57 - 2016-08-05 14:57 - 00959168 _____ () C:\Users\user\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll
2015-11-02 12:57 - 2013-05-29 09:41 - 00265728 _____ () C:\Program Files (x86)\REALTEK\Realtek Bluetooth\SkypePlugin.exe
2016-08-08 15:27 - 2016-08-08 15:27 - 01162872 _____ () C:\Users\user\AppData\Local\Temp\is-19JB7.tmp\WinThruster_2016_Setup (1).tmp
2016-08-08 15:27 - 2016-08-08 15:27 - 01162872 _____ () C:\Users\user\AppData\Local\Temp\is-9SEE5.tmp\WinThruster_2016_Setup (1).tmp
2016-07-31 01:44 - 2016-07-31 01:44 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-08-08 00:19 - 2016-08-08 00:19 - 03012096 _____ () C:\Program Files\AVAST Software\Avast\defs\16080700\algo.dll
2016-07-31 01:44 - 2016-07-31 01:44 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-07-31 01:44 - 2016-07-31 01:45 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-06-18 23:11 - 2016-06-15 06:15 - 01745560 _____ () C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.103\libglesv2.dll
2016-06-18 23:11 - 2016-06-15 06:15 - 00091288 _____ () C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.103\libegl.dll
2016-08-08 15:27 - 2016-08-08 15:27 - 00002560 _____ () C:\Users\user\AppData\Local\Temp\is-VC68E.tmp\_isetup\_iscrypt.dll

==================== Alternate Data Streams (Whitelisted) =========

(Se uma entrada for incluída na fixlist, somente o ADS será removido.)


==================== Modo de Segurança (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcapexe => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfemms => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Service"

==================== Associação (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)

HKU\S-1-5-21-4263908865-4150902347-1559481974-1001\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"

==================== Internet Explorer confiável/restrito ===============

(Se uma entrada for incluída na fixlist, será removida do Registro.)


==================== Hosts Conteúdo: ===============================

(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)

2013-08-22 10:25 - 2013-08-22 10:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Outras Áreas ============================

(Atualmente não há nenhuma correção automática para esta seção.)

HKU\S-1-5-21-4263908865-4150902347-1559481974-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\user\Pictures\Eu.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.

==================== MSCONFIG/TASK MANAGER ítens desabilitados ==

(Atualmente não há nenhuma correção automática para esta seção.)


==================== Regras do Firewall (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{1D3ACF16-078A-4072-90B5-BC347A0AE895}] => (Allow) C:\Program Files\KMSpico\KMSServer.exe
FirewallRules: [{00E4CB2C-E887-4B91-82EB-F064CF12525A}] => (Allow) C:\Program Files\KMSpico\KMSServer.exe
FirewallRules: [TCP Query User{BE7C2E34-3EA3-42DB-B0D9-2C9F46764850}C:\users\user\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\user\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{50D09B10-F4EA-4D63-8382-FAB95166C1F4}C:\users\user\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\user\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{D288EDEC-B79A-4980-A8F9-0877ACEC159B}C:\users\user\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\user\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{2248E5A2-F2AB-4C98-A6FF-DDF76B054218}C:\users\user\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\user\appdata\local\akamai\netsession_win.exe
FirewallRules: [{BCC2561A-2F6B-4B9D-ABDE-EFB2618CA0DD}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{46D261A2-E6E8-4EB5-8B00-6FAE90CD248C}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{3527A2D5-9776-46D1-995C-933D16CC6117}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{310CA3DD-8A4C-4B82-B5A0-E247EB947567}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{912E2811-4BF8-4859-B60E-CCBD3AF0F134}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{A48C86A5-9814-46F8-B132-0E6C1E76AA50}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{C5D6E055-09F4-4CF1-BC93-25C89A869F33}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{E3FC5855-9CCE-4656-982F-2F540B0BB218}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{1F877C28-2F0B-4792-9866-52075CDA75ED}] => (Allow) C:\Users\user\AppData\Local\Microsoft\OneDrive\OneDrive.exe
FirewallRules: [{02519436-3090-4B40-AEED-571CF302612C}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{5CAD448E-7CB5-4D87-8DBA-ED8F84E9F798}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{BDB9D6E6-CD56-4D23-8BB8-7634D9DBB415}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe

==================== Pontos de Restauração =========================

28-06-2016 15:25:29 Ponto de Verificação Agendado
25-07-2016 18:00:20 Ponto de Verificação Agendado
05-08-2016 15:20:15 Ponto de Verificação Agendado
08-08-2016 15:37:03 WinThruster seg, ago 08, 16 15:36

==================== Dispositivos Apresentando Falhas No Gerenciador =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Erros no Log de eventos: =========================

Erros em Aplicativos:
==================
Error: (08/08/2016 03:58:54 PM) (Source: MsiInstaller) (EventID: 10005) (User: positivo)
Description: Product: Microsoft Visual C++ 2015 x64 Additional Runtime - 14.0.23026 -- The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2203. The arguments are: C:\Windows\Installer\inprogressinstallinfo.ipi, -2147287008,

Error: (08/08/2016 03:35:02 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Falha na geração de contexto de ativação para "UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0"1". Erro no arquivo de manifesto ou de política UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0"2", na linha UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0"3.
Identidade do componente localizado no manifesto não corresponde à identidade do componente solicitado.
A referência é UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
A definição é UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Use o arquivo sxstrace.exe para obter um dignóstico detalhado.

Error: (08/08/2016 03:08:37 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: positivo)
Description: Falha na ativação do aplicativo Microsoft.BingWeather_8wekyb3d8bbwe!App com o erro: -2144927148. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais.

Error: (08/08/2016 03:04:30 PM) (Source: Software Protection Platform Service) (EventID: 1017) (User: )
Description: Falha na instalação do Comprovante da Compra. 0xC004F069
Pkey Parcial=MG8K9
ACID=?
Erro Detalhado[?]

Error: (08/08/2016 02:57:16 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 67000

Error: (08/08/2016 02:57:16 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 67000

Error: (08/08/2016 02:57:15 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/08/2016 02:53:30 PM) (Source: Windows Search Service) (EventID: 3083) (User: )
Description: Não é possível carregar o identificador de protocolo Mapi16. Descrição do erro: Não foi possível encontrar o módulo especificado. (HRESULT : 0x8007007e).

Error: (08/08/2016 02:53:22 PM) (Source: Software Protection Platform Service) (EventID: 1017) (User: )
Description: Falha na instalação do Comprovante da Compra. 0xC004F069
Pkey Parcial=MG8K9
ACID=?
Erro Detalhado[?]

Error: (08/08/2016 12:36:47 AM) (Source: Windows Search Service) (EventID: 3083) (User: )
Description: Não é possível carregar o identificador de protocolo Mapi16. Descrição do erro: Não foi possível encontrar o módulo especificado. (HRESULT : 0x8007007e).


Erros de Sistema:
=============
Error: (08/08/2016 03:35:44 PM) (Source: DCOM) (EventID: 10010) (User: positivo)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (08/08/2016 03:35:13 PM) (Source: DCOM) (EventID: 10010) (User: positivo)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (08/08/2016 03:34:47 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: O serviço Detecção de Serviços Interativos terminou com o erro:
%%1 = Função incorreta.

Error: (08/08/2016 02:59:01 PM) (Source: DCOM) (EventID: 10010) (User: positivo)
Description: {0006F03A-0000-0000-C000-000000000046}

Error: (08/08/2016 02:58:31 PM) (Source: DCOM) (EventID: 10010) (User: positivo)
Description: {0006F03A-0000-0000-C000-000000000046}

Error: (08/08/2016 02:58:00 PM) (Source: DCOM) (EventID: 10010) (User: positivo)
Description: {0006F03A-0000-0000-C000-000000000046}

Error: (08/08/2016 02:57:26 PM) (Source: DCOM) (EventID: 10010) (User: positivo)
Description: {0006F03A-0000-0000-C000-000000000046}

Error: (08/08/2016 02:56:00 PM) (Source: DCOM) (EventID: 10010) (User: positivo)
Description: {0006F03A-0000-0000-C000-000000000046}

Error: (08/08/2016 02:55:29 PM) (Source: DCOM) (EventID: 10010) (User: positivo)
Description: {0006F03A-0000-0000-C000-000000000046}

Error: (08/08/2016 02:54:59 PM) (Source: DCOM) (EventID: 10010) (User: positivo)
Description: {0006F03A-0000-0000-C000-000000000046}


==================== Informações da Memória ===========================

Processador: Intel(R) Core(TM) i3-4005U CPU @ 1.70GHz
Percentagem de memória em uso: 71%
RAM física total: 1940.87 MB
RAM física disponível: 554.33 MB
Virtual Total: 3924.87 MB
Virtual disponível: 1893.46 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:440.03 GB) (Free:372.35 GB) NTFS

==================== MBR & Tabela de Partições ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 58B48C2E)
Partition 1: (Not Active) - (Size=25.3 GB) - (Type=OF Extended)
Partition 2: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=440 GB) - (Type=07 NTFS)

==================== Fim de Addition.txt ============================