Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão: 05-02-2017
Executado por Filipe (06-02-2017 16:36:25)
Executando a partir de C:\Users\Filipe\Downloads
Windows 7 Home Basic Service Pack 1 (X64) (2016-03-26 03:27:37)
Modo da Inicialização: Normal
==========================================================


==================== Contas: =============================

Administrador (S-1-5-21-2150723438-2749410326-2359130848-500 - Administrator - Disabled)
Convidado (S-1-5-21-2150723438-2749410326-2359130848-501 - Limited - Disabled)
Filipe (S-1-5-21-2150723438-2749410326-2359130848-1000 - Administrator - Enabled) => C:\Users\Filipe

==================== Central de Segurança ========================

(Se uma entrada for incluída na fixlist, será removida.)

AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Programas Instalados ======================

(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)

µTorrent (HKU\S-1-5-21-2150723438-2749410326-2359130848-1000\...\uTorrent) (Version: 3.4.6.42094 - BitTorrent Inc.)
A3Launcher version 0.1.3.2 (HKLM-x32\...\{1E29A86E-9AE2-4CD8-74C8-6B170ED3C4D2}_is1) (Version: 0.1.3.2 - Maca134)
ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)
ABBYY FineReader 9.0 Sprint (x32 Version: 9.01.513.58212 - ABBYY) Hidden
Adobe Flash Player 24 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Andy OS (HKLM\...\Andy OS) (Version: 46.10 - Andy OS, Inc)
Ansel (Version: 378.49 - NVIDIA Corporation) Hidden
Arma 3 (HKLM\...\Steam App 107410) (Version: - Bohemia Interactive)
Atualizações da NVIDIA 23.23.0.0 (Version: 23.23.0.0 - NVIDIA Corporation) Hidden
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software)
Banished (HKLM-x32\...\1207660783_is1) (Version: 2.3.0.7 - GOG.com)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Call to Arms (HKLM\...\Steam App 302670) (Version: - Digitalmindsoft)
Cheat Engine 6.5.1 (HKLM-x32\...\Cheat Engine 6.5.1_is1) (Version: - Cheat Engine)
Cities Skylines After Dark (HKLM-x32\...\Cities Skylines After Dark_is1) (Version: - )
Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version: - Valve)
Driver San Francisco (HKLM-x32\...\Driver San Francisco) (Version: 1.1.0.0 - Ubisoft)
DriverDoc (HKLM-x32\...\DriverDoc) (Version: 1.3.2 - Solvusoft Corporation)
DriverDoc (x32 Version: 1.3.2 - Solvusoft Corporation) Hidden
DriverIdentifier 5.1 (HKLM-x32\...\{40A3E5DB-5EF8-4F04-BF3E-7AB87C4AE85A}_is1) (Version: - DriverIdentifier)
DriverToolkit version 8.5.0.0 (HKLM-x32\...\{D66BF89F-B0A2-48F5-A2E4-242EB645AB76}_is1) (Version: 8.5.0.0 - Megaify Software)
EasyBCD 1.7.2 (HKLM-x32\...\EasyBCD) (Version: 1.7.2 - NeoSmart Technologies)
Epson Customer Participation (HKLM\...\{814FA673-A085-403C-9545-747FC1495069}) (Version: 1.4.0.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print 2 (HKLM-x32\...\{79D0F056-39DE-4FDD-83FD-1554CE2C6443}) (Version: 2.4.0.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION2)
Epson Easy Photo Print Plug-in for Windows Live Photo Gallery (HKLM-x32\...\EEPPPlugIn) (Version: - SEIKO EPSON Corporation)
Epson Easy Photo Print Plug-in for Windows Live Photo Gallery Setup (x32 Version: 1.00.0000 - SEIKO EPSON Corporation) Hidden
Epson Event Manager (HKLM-x32\...\{44F72193-F59C-4303-BAE8-E3E4BC1C122C}) (Version: 3.01.0003 - Seiko Epson Corporation)
Epson E-Web Print (HKLM-x32\...\{6BF9F374-EC67-4808-A90C-F127DE6D989D}) (Version: 1.23.0000 - SEIKO EPSON CORPORATION)
EPSON L355 Series Printer Uninstall (HKLM\...\EPSON L355 Series) (Version: - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.5.00 - SEIKO EPSON CORPORATION)
GIMP 2.8.18 (HKLM\...\GIMP-2_is1) (Version: 2.8.18 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
GTA San Andreas (HKLM-x32\...\{E0303B6A-C675-4102-95DA-C013625BFA99}) (Version: 1.00.00001 - Rockstar Games)
Java 8 Update 121 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version: - )
Lightshot-5.4.0.1 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.1 - Skillbrains)
MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
Mercenaries 2: World in Flames(tm) (HKLM-x32\...\{26FDF89A-FA65-4FA2-8522-37CC84DFDCEE}) (Version: 2.0.1.0 - Electronic Arts)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (Português do Brasil) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1046) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM-x32\...\Office15.PROPLUSR) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
MTA:SA v1.5.2 (HKLM-x32\...\MTA:SA 1.5) (Version: v1.5.2 - Multi Theft Auto)
NVIDIA Driver de áudio HD 1.3.34.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.21 - NVIDIA Corporation)
NVIDIA Driver de controle do 3D Vision 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA Driver de gráficos 378.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 378.49 - NVIDIA Corporation)
NVIDIA Driver do 3D Vision 378.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 378.49 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.3.0.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.3.0.95 - NVIDIA Corporation)
NVIDIA Software do sistema PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (Version: 3.3.0.95 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 2.3.5.0 - NVIDIA Corporation) Hidden
NvvHci (Version: 2.02.0.5 - NVIDIA Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 10.0.1.31806 - Electronic Arts, Inc.)
Painel de controle da NVIDIA 378.49 (Version: 378.49 - NVIDIA Corporation) Hidden
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PlanetSide 2 (HKU\S-1-5-21-2150723438-2749410326-2359130848-1000\...\DG0-PlanetSide 2) (Version: - Sony Online Entertainment)
PowerISO (HKLM-x32\...\PowerISO) (Version: 5.6 - Power Software Ltd)
Pro Evolution Soccer 2017 (HKLM\...\Steam App 456610) (Version: - Konami Digital Entertainment)
RaidCall (HKLM-x32\...\RaidCall) (Version: 8.2.0-1.0.3231.155 - raidcall.com.ru)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7503 - Realtek Semiconductor Corp.)
Revisores de Texto do Microsoft Office 2013 – Português do Brasil (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Riders of Icarus (HKLM\...\Steam App 442080) (Version: - WeMade)
SafeZone Stable 1.51.2220.62 (x32 Version: 1.51.2220.62 - Avast Software) Hidden
SHIELD Streaming (Version: 7.1.0351 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.3.0.95 - NVIDIA Corporation) Hidden
SimCity versão 10.1.0.0 (HKLM-x32\...\SimCity_is1) (Version: 10.1.0.0 - Maxis)
Skype™ 7.32 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.32.103 - Skype Technologies S.A.)
Software Updater (HKLM-x32\...\{8DBC5A0A-31C4-46C7-B252-6B593EA11A87}) (Version: 4.3.7 - SEIKO EPSON CORPORATION)
Street Fighter V (HKLM\...\c3RyZWV0ZmlnaHRlcnY_is1) (Version: 1 - )
Stronghold Legends: Steam Edition (HKLM-x32\...\Stronghold Legends: Steam Edition_is1) (Version: - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version: - Ubisoft)
The Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.0.625.10 - Electronic Arts Inc.)
The Universim versão 0.0.8 (HKLM-x32\...\{BDC8D61B-9A53-4234-9075-28897E46D888}_is1) (Version: 0.0.8 - Trackeroc.Ru)
TransOcean2 Rivals (HKLM-x32\...\TransOcean2 Rivals_is1) (Version: - )
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Uplay (HKLM-x32\...\Uplay) (Version: 22.2 - Ubisoft)
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.8.0 - Elaborate Bytes)
VMware Player (HKLM\...\{537B7F85-2B95-44ED-8D90-765F6F36D666}) (Version: 12.1.1 - VMware, Inc.)
Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.37.0 (HKLM\...\VulkanRT1.0.37.0) (Version: 1.0.37.0 - LunarG, Inc.)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
WinRAR 5.31 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
Zombies Monsters Robots (HKLM\...\Steam App 306830) (Version: - Yingpei Games)

==================== Exame Personalizado CLSID (Whitelisted): ==========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Tarefas Agendadas (Whitelisted) =============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

Task: {091A0E7A-F752-4769-AF44-6AD0C47153E1} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-01-20] (NVIDIA Corporation)
Task: {107856CD-661A-4BE3-BA61-20C006757FA9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {4BF76A61-4F01-4EC1-A4CF-06C4D664941E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-11-12] (Adobe Systems Incorporated)
Task: {559BABA4-3BA0-49C6-AF45-338FD7320AB2} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-01-20] (NVIDIA Corporation)
Task: {5764B164-84C1-4CE9-8185-F06F33D39D70} - System32\Tasks\{40198ACB-CB9F-40D6-846B-CBE895CCAE49} => pcalua.exe -a "D:\Jogos\The Sims 4\EASetup.exe" -d "D:\Jogos\The Sims 4"
Task: {5D46D3FF-2A37-40AB-8A01-B74E7AA59073} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-01-20] (NVIDIA Corporation)
Task: {6C2A5D69-9312-44A8-9517-A65223994C42} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-26] (Google Inc.)
Task: {7CB86C8B-3348-4AEE-BF6A-2B4A42BDA9EC} - System32\Tasks\SafeZone scheduled Autoupdate 1459005466 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-09-06] (Avast Software)
Task: {81BD64D1-44C2-400F-96E4-A1FC8479337E} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-01-20] (NVIDIA Corporation)
Task: {85584A10-28CF-4D6C-99F3-069D671FDDCF} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {A329AF99-DF56-44F5-BA6F-725863FE2180} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-01-20] (NVIDIA Corporation)
Task: {A72283D2-3955-4856-813A-5FE96F3A864C} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-01-20] (NVIDIA Corporation)
Task: {BD1FA774-3BF7-4791-8688-B817BCEF1F9A} - System32\Tasks\update-S-1-5-21-2150723438-2749410326-2359130848-1000 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()
Task: {C5E79983-DF90-468B-B55B-E8FD2905DA7C} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
Task: {D2D4420D-3E48-4321-9F68-A4FBDDC62784} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-26] (Google Inc.)
Task: {D6FCF37B-9647-4D82-89AC-68C516D4C3F2} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-01-20] (NVIDIA Corporation)
Task: {DA04C692-148F-40A4-A79C-F084F9D9EBE4} - System32\Tasks\DriverDoc Auto Start => C:\Program Files (x86)\Solvusoft\DriverDoc\DriverDoc.exe [2015-12-06] (Solvusoft Corporation)
Task: {DAEC76BC-32F6-41D4-87F4-7719490C9752} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()
Task: {E3EEF476-5748-4BB2-88F7-FCE7EB8AB4DB} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-09-09] (AVAST Software)
Task: {E9ADB418-E208-45DF-8844-ACB9496DC244} - System32\Tasks\DriverToolkit Autorun => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe [2015-07-01] (Megaify Software Co., Ltd.)
Task: {EF9C29F5-49F1-49FD-A10D-CE85BCEB57C9} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-01-27] (AVAST Software)
Task: {F453D74D-2EA2-42F9-9715-5055449BAE07} - \AutoPico Daily Restart -> Nenhum Arquivo <==== ATENÇÃO

(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DriverDoc Auto Start.job => C:\Program Files (x86)\Solvusoft\DriverDoc\DriverDoc.exe
Task: C:\Windows\Tasks\DriverToolkit Autorun.job => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe
Task: C:\Windows\Tasks\update-S-1-5-21-2150723438-2749410326-2359130848-1000.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Atalhos =============================

(As entradas podem ser listadas para serem restauradas ou removidas.)

==================== Módulos Carregados (Whitelisted) ==============

2016-10-31 17:45 - 2016-10-31 17:45 - 00592384 _____ () C:\Users\Filipe\AppData\Local\MEGAsync\ShellExtX64.dll
2016-10-21 14:20 - 2017-01-20 16:39 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-10-21 14:20 - 2017-01-20 16:39 - 04489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2016-03-26 01:50 - 2017-01-20 13:13 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-04-21 19:31 - 2016-04-28 17:20 - 14386176 _____ () D:\Jogos\Gta Sa\GTA San Andreas Original\gta_sa.exe
2016-09-09 02:27 - 2016-09-09 02:27 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-02-06 15:16 - 2017-02-06 15:16 - 05833192 _____ () C:\Program Files\AVAST Software\Avast\defs\17020600\algo.dll
2016-09-09 02:27 - 2016-09-09 02:27 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-10-21 14:20 - 2017-01-20 16:39 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-10-21 14:20 - 2017-01-20 16:39 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-10-21 14:20 - 2017-01-20 16:39 - 03774400 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2016-10-31 17:43 - 2016-10-31 17:43 - 00564736 _____ () C:\Users\Filipe\AppData\Local\MEGAsync\ShellExtX32.dll
2016-06-30 14:35 - 2016-06-30 14:35 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-12-14 22:47 - 2016-12-08 05:29 - 01829208 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libglesv2.dll
2016-12-14 22:47 - 2016-12-08 05:29 - 00085848 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libegl.dll
2016-10-21 14:20 - 2017-01-20 11:36 - 00338488 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2016-10-21 14:20 - 2017-01-20 11:36 - 00254008 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2016-10-21 14:20 - 2017-01-20 11:36 - 02808888 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2016-10-21 14:20 - 2017-01-20 11:36 - 00384568 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2016-10-21 14:20 - 2017-01-20 11:36 - 00537656 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2016-10-21 14:20 - 2017-01-20 11:36 - 00468024 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
2016-10-21 14:20 - 2017-01-20 11:36 - 01066552 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node
2016-12-15 02:18 - 2017-01-20 11:36 - 01014840 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSDKAPINode.node
2016-09-10 01:31 - 2016-09-14 13:54 - 02493440 _____ () C:\Program Files (x86)\Origin\libGLESv2.dll
2016-04-24 14:46 - 2017-02-05 16:55 - 00452736 _____ () D:\MTA 1.5\mta\libcurl.dll
2016-04-21 19:31 - 2003-11-16 11:48 - 00065536 _____ () D:\Jogos\Gta Sa\GTA San Andreas Original\vorbisfile.dll
2016-04-21 19:31 - 2003-11-15 18:54 - 00036864 _____ () D:\Jogos\Gta Sa\GTA San Andreas Original\ogg.dll
2016-04-21 19:31 - 2003-11-16 11:48 - 01060864 _____ () D:\Jogos\Gta Sa\GTA San Andreas Original\vorbis.dll
2016-04-24 14:46 - 2017-02-05 16:55 - 00452736 _____ () D:\MTA 1.5\MTA\libcurl.dll
2016-02-20 23:38 - 2016-02-20 23:38 - 00110592 _____ () D:\MTA 1.5\MTA\tags.dll
2016-04-17 20:02 - 2017-02-05 14:32 - 66165888 _____ () D:\MTA 1.5\MTA\libcef.dll
2015-12-02 14:58 - 2015-11-16 16:32 - 00919040 _____ () C:\Windows\mod_frst.exe

==================== Alternate Data Streams (Whitelisted) =========

(Se uma entrada for incluída na fixlist, somente o ADS será removido.)

AlternateDataStreams: C:\ProgramData:NT [40]
AlternateDataStreams: C:\ProgramData:NT2 [432]
AlternateDataStreams: C:\Users\All Users:NT [40]
AlternateDataStreams: C:\Users\All Users:NT2 [432]
AlternateDataStreams: C:\Users\Filipe:Heroes & Generals [38]
AlternateDataStreams: C:\Users\Todos os Usuários:NT [40]
AlternateDataStreams: C:\Users\Todos os Usuários:NT2 [432]
AlternateDataStreams: C:\ProgramData\Application Data:NT [40]
AlternateDataStreams: C:\ProgramData\Application Data:NT2 [432]
AlternateDataStreams: C:\ProgramData\Dados de aplicativos:NT [40]
AlternateDataStreams: C:\ProgramData\Dados de aplicativos:NT2 [432]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT [40]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2 [432]
AlternateDataStreams: C:\Users\Filipe\Dados de aplicativos:NT [40]
AlternateDataStreams: C:\Users\Filipe\Dados de aplicativos:NT2 [432]
AlternateDataStreams: C:\Users\Filipe\AppData\Roaming:NT [40]
AlternateDataStreams: C:\Users\Filipe\AppData\Roaming:NT2 [432]
AlternateDataStreams: C:\Users\Public\Desktop\Stronghold Legends: Steam Edition.lnk [1920]
AlternateDataStreams: C:\Users\Todos os Usuários\Application Data:NT [40]
AlternateDataStreams: C:\Users\Todos os Usuários\Application Data:NT2 [432]
AlternateDataStreams: C:\Users\Todos os Usuários\Dados de aplicativos:NT [40]
AlternateDataStreams: C:\Users\Todos os Usuários\Dados de aplicativos:NT2 [432]
AlternateDataStreams: C:\Users\Todos os Usuários\MTA San Andreas All:NT [40]
AlternateDataStreams: C:\Users\Todos os Usuários\MTA San Andreas All:NT2 [432]

==================== Modo de Segurança (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\99C5769E.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\99C5769E.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PAexec => ""="Service"

==================== Associação (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)


==================== Internet Explorer confiável/restrito ===============

(Se uma entrada for incluída na fixlist, será removida do Registro.)


==================== Hosts Conteúdo: ===============================

(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)

2009-07-14 00:34 - 2016-03-30 19:12 - 00000864 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 validation.sls.microsoft.com

==================== Outras Áreas ============================

(Atualmente não há nenhuma correção automática para esta seção.)

HKU\S-1-5-21-2150723438-2749410326-2359130848-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.

==================== MSCONFIG/TASK MANAGER ítens desabilitados ==


==================== Regras do Firewall (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

FirewallRules: [{9C359BC5-E09C-4F07-B4B8-BC640ABC8B91}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{CDEF77DD-F239-497A-8B34-EB2B308B2E1B}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{052177B2-449A-48EB-A1FA-4EEF4FA266FA}] => D:\Steam\Steam.exe
FirewallRules: [{DE276BA8-3A49-40D4-85B5-4AF63EF717B7}] => D:\Steam\Steam.exe
FirewallRules: [{A98117AA-F182-4624-8AC9-7C9F6EDD7D43}] => D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{EDB1EA5A-8EA5-4793-9904-C8FC27F04580}] => D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{FF66AD73-2827-4ADE-B45F-703AD792C763}] => D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{D31B4FDA-1064-4E04-94A3-ED63D32E1A09}] => D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{F7A2F49E-0D29-44EB-918B-5682D9FD0CCB}D:\steam\steamapps\common\planetside 2\planetside2_x64.exe] => D:\steam\steamapps\common\planetside 2\planetside2_x64.exe
FirewallRules: [UDP Query User{CE324261-9E5D-4F93-9CC3-A780A92D27AA}D:\steam\steamapps\common\planetside 2\planetside2_x64.exe] => D:\steam\steamapps\common\planetside 2\planetside2_x64.exe
FirewallRules: [{37C23C82-73A5-4C1F-93DC-A63FC2FDACF2}] => D:\Steam\steamapps\common\Stranded Deep\Stranded_Deep_x64.exe
FirewallRules: [{B9D3A8E9-D844-4298-B0FE-6DC0E7400515}] => D:\Steam\steamapps\common\Stranded Deep\Stranded_Deep_x64.exe
FirewallRules: [{AD214EEB-560C-44DF-A40A-9DCD84D8B518}] => C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
FirewallRules: [{B339FDD7-FEAC-413E-B70E-1DB73F811B17}] => C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
FirewallRules: [{6B5E6F64-B436-4147-86B6-7A5C8760433F}] => E:\Common\EpsonNet Setup\ENEasyApp.exe
FirewallRules: [{C7C42199-3737-4BE0-8BF0-62AB80DDA581}] => E:\Common\EpsonNet Setup\ENEasyApp.exe
FirewallRules: [{D43A4F20-26F2-4A6C-BA2D-192725434D07}] => D:\Steam\steamapps\common\Premium Pool\PremiumPool.exe
FirewallRules: [{92397B4C-BEB1-4CC3-B6EE-1E602469077D}] => D:\Steam\steamapps\common\Premium Pool\PremiumPool.exe
FirewallRules: [{615CB62D-8925-41DA-AC89-1AB9D4D1D7CF}] => D:\Steam\steamapps\common\Heroes & Generals\hngsteamlauncher.exe
FirewallRules: [{A543B5EC-3230-46B1-8DE1-253F8DF0D377}] => D:\Steam\steamapps\common\Heroes & Generals\hngsteamlauncher.exe
FirewallRules: [TCP Query User{5FDC702C-6810-43E1-8B60-AC1F638F0CAD}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [UDP Query User{ADB17704-2C3B-4AF0-B7D1-555B3C43DC6F}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [{16EAA3B6-DD82-40C6-BF44-79819E274453}] => D:\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [{58730CBB-6F34-46CA-B3A8-36B665BF9776}] => D:\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [TCP Query User{D7D72D3E-1861-4434-B415-84DBE486AF11}C:\users\filipe\appdata\roaming\utorrent\utorrent.exe] => C:\users\filipe\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{2C4BACBE-C0B6-47A2-BA75-B79E47294276}C:\users\filipe\appdata\roaming\utorrent\utorrent.exe] => C:\users\filipe\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [TCP Query User{638049B9-3BCA-4C8A-B62E-E5B261BC2060}D:\jogos\igg-rctw.deluxe.edition.fixed\rollercoaster tycoon world.exe] => D:\jogos\igg-rctw.deluxe.edition.fixed\rollercoaster tycoon world.exe
FirewallRules: [UDP Query User{FE4CB28B-8216-4A07-A00C-37E1CCCDA674}D:\jogos\igg-rctw.deluxe.edition.fixed\rollercoaster tycoon world.exe] => D:\jogos\igg-rctw.deluxe.edition.fixed\rollercoaster tycoon world.exe
FirewallRules: [{B467E67A-F9C5-4818-BFBF-14699D03D4F9}] => D:\Steam\steamapps\common\Sega Classics\SEGAGameRoom.exe
FirewallRules: [{86488224-218E-4F92-B4B1-7B0FE598F764}] => D:\Steam\steamapps\common\Sega Classics\SEGAGameRoom.exe
FirewallRules: [{D48E011B-AD73-4256-91F7-7235366FF2E9}] => D:\Steam\steamapps\common\Sega Classics\SEGAGenesisClassics.exe
FirewallRules: [{BE6122AB-716A-4742-A8DD-9E31EF900F5C}] => D:\Steam\steamapps\common\Sega Classics\SEGAGenesisClassics.exe
FirewallRules: [{371896DA-6FB6-44EB-89A7-235B661716CC}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{A3A1599A-AADF-4DD3-95E6-8AC0ABE22DC7}D:\jogos\the universim\the universim.exe] => D:\jogos\the universim\the universim.exe
FirewallRules: [UDP Query User{397B08E1-77A5-4F7A-B7E9-9BF7167FF3DD}D:\jogos\the universim\the universim.exe] => D:\jogos\the universim\the universim.exe
FirewallRules: [TCP Query User{E65661D6-9AD0-49FE-B59C-AC923534FDD1}C:\users\filipe\appdata\roaming\utorrent\updates\3.4.7_42330.exe] => C:\users\filipe\appdata\roaming\utorrent\updates\3.4.7_42330.exe
FirewallRules: [UDP Query User{3DF81B45-28BD-40FF-B8C1-3726A4BBD8B9}C:\users\filipe\appdata\roaming\utorrent\updates\3.4.7_42330.exe] => C:\users\filipe\appdata\roaming\utorrent\updates\3.4.7_42330.exe
FirewallRules: [{7EF98CDF-C2DC-452D-AEFD-8CF3BC28B357}] => D:\Jogos\Drive San Fran\Driver.exe
FirewallRules: [{24470A14-329F-4786-BCEA-2BEDCE3B65B9}] => D:\Jogos\Drive San Fran\Driver.exe
FirewallRules: [{452C21E4-098A-4925-B9D8-DCB0D0107DA7}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{F33B758D-FA86-4113-87E0-9E971D1BD4A4}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [TCP Query User{458F6F82-529B-44A9-BA9B-D64E02312F5D}D:\steam\steamapps\common\half-life\hl.exe] => D:\steam\steamapps\common\half-life\hl.exe
FirewallRules: [UDP Query User{1D530F39-6342-4933-B123-15D001682BD3}D:\steam\steamapps\common\half-life\hl.exe] => D:\steam\steamapps\common\half-life\hl.exe
FirewallRules: [{9E9F4754-5B0C-4787-B67E-5339A3C6264E}] => D:\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{B7F10520-9E4C-4C56-8897-0B08AAD612DC}] => D:\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [TCP Query User{969AE774-85CB-4AA7-BADA-4522917A9D91}D:\steam\steamapps\common\arma 3\arma3.exe] => D:\steam\steamapps\common\arma 3\arma3.exe
FirewallRules: [UDP Query User{204E6032-A81B-4356-AB64-3FD2A9E84662}D:\steam\steamapps\common\arma 3\arma3.exe] => D:\steam\steamapps\common\arma 3\arma3.exe
FirewallRules: [{E31D107F-166F-4CC4-B4FA-AF6FD8F1E4CB}] => D:\Steam\steamapps\common\Riders of Icarus\Bin32\nxsteam.exe
FirewallRules: [{C9006DC2-98E6-40FD-800B-2CC76FBD2C35}] => D:\Steam\steamapps\common\Riders of Icarus\Bin32\nxsteam.exe
FirewallRules: [{670B8DBC-6869-4C0A-B4E9-C33DBA47BA97}] => D:\Steam\steamapps\common\Marvel Heroes\UnrealEngine3\Binaries\Win64\MarvelHeroes2016.exe
FirewallRules: [{079B2EA6-9105-4B9F-9559-6C565FCB8402}] => D:\Steam\steamapps\common\Marvel Heroes\UnrealEngine3\Binaries\Win64\MarvelHeroes2016.exe
FirewallRules: [TCP Query User{B36BE6E2-EC08-4125-B719-339060B948DC}D:\steam\steamapps\common\riders of icarus\bin64\launcher.exe] => D:\steam\steamapps\common\riders of icarus\bin64\launcher.exe
FirewallRules: [UDP Query User{F750D93E-2427-494A-9F04-645C38BFD05D}D:\steam\steamapps\common\riders of icarus\bin64\launcher.exe] => D:\steam\steamapps\common\riders of icarus\bin64\launcher.exe
FirewallRules: [TCP Query User{48C48A6E-004E-45D0-8C40-673F8369B477}E:\easysetupassistant\easysetupassistant.exe] => E:\easysetupassistant\easysetupassistant.exe
FirewallRules: [UDP Query User{23287B39-CC21-4A3A-A7EC-70AC9BC419D3}E:\easysetupassistant\easysetupassistant.exe] => E:\easysetupassistant\easysetupassistant.exe
FirewallRules: [TCP Query User{3297F1F9-7539-4E88-B7B1-39E1E5420346}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [UDP Query User{A93206EC-C9BB-407E-81AC-E8FB396AC817}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [{53544ACC-BB0A-4287-BD8D-D0D42DEA455D}] => C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
FirewallRules: [{E68AFC3D-BBF4-4B3F-ACC4-6E2359E74B27}] => C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
FirewallRules: [{298C244D-A30A-4007-8D7F-55B3CBEBB59A}] => C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{6A3962CB-8794-44AC-A80E-D9DC5AA0A48A}] => C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [TCP Query User{A70CB8F9-38A9-4D2D-8051-4E8519C2B4C7}D:\jogos\simcity\simcity\simcity.exe] => D:\jogos\simcity\simcity\simcity.exe
FirewallRules: [UDP Query User{D1DC601C-EE79-4EEB-9767-40FBC2CAEB98}D:\jogos\simcity\simcity\simcity.exe] => D:\jogos\simcity\simcity\simcity.exe
FirewallRules: [{C85F1DAB-B955-4E99-81CC-66A67AE9E0EB}] => C:\Users\Filipe\AppData\Local\Temp\andy-x64\Setup.exe
FirewallRules: [{6DF6E815-D64B-4C99-9182-EC68DA2CC388}] => C:\Users\Filipe\AppData\Local\Temp\andy-x64\Setup.exe
FirewallRules: [{FD04DE73-16C4-45BC-9207-EFA76871E27F}] => C:\Program Files\Andy\andy.exe
FirewallRules: [{CA6CA144-9D62-4604-AE47-C250F1BD4646}] => C:\Program Files\Andy\andy.exe
FirewallRules: [{C4580A76-B369-4FC1-9354-57147F933AAC}] => C:\Program Files\Andy\AndyConsole.exe
FirewallRules: [{B99FC5AD-8794-45D6-9190-87AACD4EF99A}] => C:\Program Files\Andy\AndyConsole.exe
FirewallRules: [{48464415-6A40-4F2D-8DCD-588E91D630A9}] => C:\Program Files\Andy\HandyAndy.exe
FirewallRules: [{FBCBB621-913A-4807-94D8-A17EE0701225}] => C:\Program Files\Andy\HandyAndy.exe
FirewallRules: [{7DB74AC2-4386-440D-A8D0-5A9F30EAD773}] => C:\Program Files\Andy\SetupFiles\Uninstall.exe
FirewallRules: [{9FCD0A83-0165-4154-8004-A63520373F86}] => C:\Program Files\Andy\SetupFiles\Uninstall.exe
FirewallRules: [{BD90F555-EF94-4B6E-ACE8-36CF5032B4E5}] => C:\Users\Filipe\AppData\Local\Temp\RemoveTemp.exe
FirewallRules: [{2102A1D6-8493-4D1D-9AFD-95C7FB4B26DB}] => C:\Users\Filipe\AppData\Local\Temp\RemoveTemp.exe
FirewallRules: [{D762F48A-6A9B-4335-839F-5A16FA1A0FC6}] => C:\Program Files\Andy\SetupFiles\VMwareCheck.exe
FirewallRules: [{8D4DDE74-5509-476C-9129-9A1F1E3DDB32}] => C:\Program Files\Andy\SetupFiles\VMwareCheck.exe
FirewallRules: [{EBFAF9A2-2A62-4F7C-838A-0C1688263DC2}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2333F908-F613-460F-946A-692478B28CC4}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{F13A7BF2-B79D-427C-9FFB-EDE48F11B130}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{AC5EDD5E-65B6-4CB6-A648-E5F9786D0E8C}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{B24F2B5A-9490-48C7-8477-EDEE97C7C42A}] => C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
FirewallRules: [{6400EE5C-207B-4B46-9866-6BF3F2763904}] => C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
FirewallRules: [TCP Query User{092B6206-D4C2-4A19-995E-E78EA77DCE1E}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe
FirewallRules: [UDP Query User{32075838-E65C-4DEF-B0D9-E663122C6695}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe
FirewallRules: [{B7C505DA-5FF3-4A77-AF92-908112A528BD}] => D:\Steam\steamapps\common\ZMR\ZMR-Launcher.exe
FirewallRules: [{F547B86E-DD2E-42A1-9AF5-C020E6DC38AF}] => D:\Steam\steamapps\common\ZMR\ZMR-Launcher.exe
FirewallRules: [{E85AD9D3-19E0-401A-B467-5581625CCF16}] => D:\Steam\steamapps\common\EndWar Online\EndWarOnlineLauncher.exe
FirewallRules: [{2AB98845-BC76-490F-920F-E6172FF274E5}] => D:\Steam\steamapps\common\EndWar Online\EndWarOnlineLauncher.exe
FirewallRules: [TCP Query User{BD58CDBB-BE33-4406-AB51-4679CCECC4BD}D:\jogos\gta sa\gta san andreas original\gta_sa.exe] => D:\jogos\gta sa\gta san andreas original\gta_sa.exe
FirewallRules: [UDP Query User{51C7562F-ADE6-4854-9493-DB47E34324F5}D:\jogos\gta sa\gta san andreas original\gta_sa.exe] => D:\jogos\gta sa\gta san andreas original\gta_sa.exe
FirewallRules: [{AB37BFBC-6F27-4077-8718-7199B5F35C18}] => D:\UPlay\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{A495AE25-C81F-47A1-A219-C4C701594378}] => D:\UPlay\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{EFC14649-D195-4DD5-86C2-FA8C50F6C507}] => LPort=1688
FirewallRules: [TCP Query User{E1E47A8D-54DC-43B0-89F1-C12F0A221CA1}C:\users\filipe\appdata\roaming\utorrent\updates\3.4.9_42606.exe] => C:\users\filipe\appdata\roaming\utorrent\updates\3.4.9_42606.exe
FirewallRules: [UDP Query User{BEEDCF60-7FE8-48D8-A7C6-252390C31F24}C:\users\filipe\appdata\roaming\utorrent\updates\3.4.9_42606.exe] => C:\users\filipe\appdata\roaming\utorrent\updates\3.4.9_42606.exe
FirewallRules: [{D8141F0A-F7C8-4A95-9196-F3E9B1F291FD}] => C:\Program Files (x86)\RaidCall.RU\rcplugin.exe
FirewallRules: [{A34ABC25-E69C-4F70-BCF4-0CFDBDD295B0}] => C:\Program Files (x86)\RaidCall.RU\rcplugin.exe
FirewallRules: [{DAC41463-2C3E-4AFE-B069-B6DBC1534DE4}] => D:\Steam\steamapps\common\Call to Arms\call_to_arms.exe
FirewallRules: [{13F28D08-AA7C-4195-A062-3E6355EF896A}] => D:\Steam\steamapps\common\Call to Arms\call_to_arms.exe
FirewallRules: [{442C986B-846C-4D75-8D48-06C3D982E23E}] => D:\Steam\steamapps\common\Call to Arms\call_to_arms_ed.exe
FirewallRules: [{D6456482-928C-46D4-801F-628C67417879}] => D:\Steam\steamapps\common\Call to Arms\call_to_arms_ed.exe
FirewallRules: [{A07BA6CB-078D-418C-A9A4-001744F89663}] => D:\Steam\steamapps\common\Pro Evolution Soccer 2017\PES2017.exe
FirewallRules: [{D4CD480E-DE3B-4DA6-8C8F-741124BC61A1}] => D:\Steam\steamapps\common\Pro Evolution Soccer 2017\PES2017.exe
FirewallRules: [TCP Query User{775DAFDF-C983-4064-B74B-721015657A52}C:\users\filipe\appdata\roaming\utorrent\updates\3.4.9_42973.exe] => C:\users\filipe\appdata\roaming\utorrent\updates\3.4.9_42973.exe
FirewallRules: [UDP Query User{DBB7A29C-F354-4F1C-B71D-26B64B191099}C:\users\filipe\appdata\roaming\utorrent\updates\3.4.9_42973.exe] => C:\users\filipe\appdata\roaming\utorrent\updates\3.4.9_42973.exe
FirewallRules: [{6AC77A8C-3BA7-44E8-B516-AD4029C09D9E}] => D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{45A63F17-C081-4294-A0E1-ED2285EC4160}] => D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{B49A76F7-041A-451B-8F53-87E064762036}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{2640F270-C187-4266-A320-8BFBD424A4A9}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{AE5A65A9-2E2B-4EFB-9E70-DAF61798C7E6}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{FBD81BE6-6B90-4C6D-B266-1FEF6F8C7B14}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{8FF38365-F7A2-42BC-95DF-9EBB46629A19}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{EBBF4ACD-F28F-456F-9294-D53DDB54E398}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

==================== Pontos de Restauração =========================


==================== Dispositivos Apresentando Falhas No Gerenciador =============

Name: Dispositivo Periférico Bluetooth
Description: Dispositivo Periférico Bluetooth
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: VMware Virtual Ethernet Adapter for VMnet8
Description: VMware Virtual Ethernet Adapter for VMnet8
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: VMware, Inc.
Service: VMnetAdapter
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Dispositivo Bluetooth (Rede Pessoal)
Description: Dispositivo Bluetooth (Rede Pessoal)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: BthPan
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Dispositivo Periférico Bluetooth
Description: Dispositivo Periférico Bluetooth
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Dispositivo Periférico Bluetooth
Description: Dispositivo Periférico Bluetooth
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: VMware Virtual Ethernet Adapter for VMnet1
Description: VMware Virtual Ethernet Adapter for VMnet1
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: VMware, Inc.
Service: VMnetAdapter
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Erros no Log de eventos: =========================

Erros em Aplicativos:
==================
Error: (02/06/2017 04:37:27 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Erro do serviço de cópias de sombra de volume: erro inesperado ao chamar a rotina CoCreateInstance. hr = 0x80070422, O serviço não pode ser iniciado porque está desativado ou não tem dispositivos ativados associados.
.


Operação:
Inscrevendo Gravador

Contexto:
Id de Classe de Gravador: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Nome do Gravador: Shadow Copy Optimization Writer
ID de Instância de Gravador: {138b131d-6f7f-4985-845a-d4646a47da32}

Error: (02/06/2017 04:37:27 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informações sobre o Serviço de Cópias de Sombra de Volume: não é possível iniciar o Servidor COM com CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} e nome CEventSystem. [0x80070422, O serviço não pode ser iniciado porque está desativado ou não tem dispositivos ativados associados.
]


Operação:
Inscrevendo Gravador

Contexto:
Id de Classe de Gravador: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Nome do Gravador: Shadow Copy Optimization Writer
ID de Instância de Gravador: {138b131d-6f7f-4985-845a-d4646a47da32}

Error: (02/06/2017 04:37:27 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Erro do serviço de cópias de sombra de volume: erro inesperado ao chamar a rotina CoCreateInstance. hr = 0x80070422, O serviço não pode ser iniciado porque está desativado ou não tem dispositivos ativados associados.
.


Operação:
Inscrevendo Gravador

Contexto:
Id de Classe de Gravador: {be000cbe-11fe-4426-9c58-531aa6355fc4}
Nome do Gravador: ASR Writer
ID de Instância de Gravador: {bbfb38a8-259f-4563-9d55-e1e59fd0f844}

Error: (02/06/2017 04:37:27 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informações sobre o Serviço de Cópias de Sombra de Volume: não é possível iniciar o Servidor COM com CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} e nome CEventSystem. [0x80070422, O serviço não pode ser iniciado porque está desativado ou não tem dispositivos ativados associados.
]


Operação:
Inscrevendo Gravador

Contexto:
Id de Classe de Gravador: {be000cbe-11fe-4426-9c58-531aa6355fc4}
Nome do Gravador: ASR Writer
ID de Instância de Gravador: {bbfb38a8-259f-4563-9d55-e1e59fd0f844}

Error: (02/06/2017 04:37:27 PM) (Source: VSS) (EventID: 12346) (User: )
Description: Erro de Cópia de Sombra de Volume: um erro 0x80042302, O componente Serviço de Cópias de Sombra de Volume encontrou um erro inesperado.
Verifique o log de eventos do aplicativo para obter mais informações.
foi encontrado ao tentar inicializar o Gravador do Registro. Isso pode provocar falha
nas criações de cópia de sombra futuras.

Error: (02/06/2017 04:37:27 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Erro do serviço de cópias de sombra de volume: erro inesperado ao chamar a rotina CoCreateInstance. hr = 0x80070422, O serviço não pode ser iniciado porque está desativado ou não tem dispositivos ativados associados.
.


Operação:
Inscrevendo Gravador

Contexto:
Id de Classe de Gravador: {542da469-d3e1-473c-9f4f-7847f01fc64f}
Nome do Gravador: COM+ REGDB Writer
ID de Instância de Gravador: {919dbbfc-61df-46e9-8868-80b2513787fb}

Error: (02/06/2017 04:37:27 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informações sobre o Serviço de Cópias de Sombra de Volume: não é possível iniciar o Servidor COM com CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} e nome CEventSystem. [0x80070422, O serviço não pode ser iniciado porque está desativado ou não tem dispositivos ativados associados.
]


Operação:
Inscrevendo Gravador

Contexto:
Id de Classe de Gravador: {542da469-d3e1-473c-9f4f-7847f01fc64f}
Nome do Gravador: COM+ REGDB Writer
ID de Instância de Gravador: {919dbbfc-61df-46e9-8868-80b2513787fb}

Error: (02/06/2017 04:37:27 PM) (Source: VSS) (EventID: 12342) (User: )
Description: Erro de Cópia de Sombra de Volume: um erro 0x80042302, O componente Serviço de Cópias de Sombra de Volume encontrou um erro inesperado.
Verifique o log de eventos do aplicativo para obter mais informações.
foi encontrado ao tentar inicializar o Gravador do Registro. Isso pode provocar falha
nas criações de cópia de sombra futuras.

Error: (02/06/2017 04:37:27 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Erro do serviço de cópias de sombra de volume: erro inesperado ao chamar a rotina Subscribing the Registry server writer failed. hr = 8004230208lx. hr = 0x80042302, O componente Serviço de Cópias de Sombra de Volume encontrou um erro inesperado.
Verifique o log de eventos do aplicativo para obter mais informações.
.

Error: (02/06/2017 04:37:27 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Erro do serviço de cópias de sombra de volume: erro inesperado ao chamar a rotina CoCreateInstance. hr = 0x80070422, O serviço não pode ser iniciado porque está desativado ou não tem dispositivos ativados associados.
.


Operação:
Inscrevendo Gravador

Contexto:
Id de Classe de Gravador: {afbab4a2-367d-4d15-a586-71dbb18f8485}
Nome do Gravador: Registry Writer
ID de Instância de Gravador: {5561d8b4-523f-4daf-901f-0873e44a0399}


Erros de Sistema:
=============
Error: (02/06/2017 03:16:54 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: O serviço Provedor do Grupo Doméstico depende do serviço Host de Provedor da Descoberta de Função, mas não foi possível iniciá-lo devido ao seguinte erro:
O serviço não pode ser iniciado porque está desativado ou não tem dispositivos ativados associados.

Error: (02/06/2017 03:16:49 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: O serviço Pesquisador de Computadores depende do serviço Server, mas não foi possível iniciá-lo devido ao seguinte erro:
O serviço não pode ser iniciado porque está desativado ou não tem dispositivos ativados associados.

Error: (02/06/2017 03:16:49 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: O serviço Pesquisador de Computadores depende do serviço Server, mas não foi possível iniciá-lo devido ao seguinte erro:
O serviço não pode ser iniciado porque está desativado ou não tem dispositivos ativados associados.

Error: (02/06/2017 03:16:46 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: O serviço Serviço de transferência inteligente de plano de fundo depende do serviço COM+ evento do sistema, mas não foi possível iniciá-lo devido ao seguinte erro:
O serviço não pode ser iniciado porque está desativado ou não tem dispositivos ativados associados.

Error: (02/06/2017 03:16:46 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: O DCOM obteve o erro "1068" ao tentar iniciar o serviço BITS com argumentos "" para executar o servidor:
{4991D34B-80A1-4291-83B6-3328366B9097}

Error: (02/06/2017 03:16:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço VMware Authorization Service devido ao seguinte erro:
O sistema não pode encontrar o arquivo especificado.

Error: (02/06/2017 03:16:24 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Origin Web Helper Service devido ao seguinte erro:
O serviço não respondeu à requisição de início ou controle em tempo hábil.

Error: (02/06/2017 03:16:24 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço Origin Web Helper Service.

Error: (02/06/2017 03:15:33 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: O serviço Serviço de Notificação de Eventos do Sistema depende do serviço COM+ evento do sistema, mas não foi possível iniciá-lo devido ao seguinte erro:
O serviço não pode ser iniciado porque está desativado ou não tem dispositivos ativados associados.

Error: (02/06/2017 01:38:06 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: O servidor {F9717507-6651-4EDB-BFF7-AE615179BCCF} não se registrou com o DCOM dentro do tempo limite requerido.


CodeIntegrity:
===================================
Date: 2016-09-08 21:24:05.089
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-08 21:22:13.272
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-08 21:22:12.897
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-07 12:48:57.944
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-07 12:48:57.772
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-06 12:37:07.833
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-06 12:37:07.474
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-05 13:13:58.786
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-05 13:13:58.677
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.

Date: 2016-09-04 10:48:37.724
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.


==================== Informações da Memória ===========================

Processador: Intel(R) Core(TM) i3 CPU 540 @ 3.07GHz
Percentagem de memória em uso: 81%
RAM física total: 3958.99 MB
RAM física disponível: 745.44 MB
Virtual Total: 7916.19 MB
Virtual disponível: 3781.3 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:487.74 GB) (Free:347.41 GB) NTFS
Drive d: (Filipe Azevedo) (Fixed) (Total:443.23 GB) (Free:79.34 GB) NTFS

==================== MBR & Tabela de Partições ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 6A594A47)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=487.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
Partition 4: (Not Active) - (Size=443.2 GB) - (Type=07 NTFS)

==================== Fim de Addition.txt ============================