Publicité
Publicité
Format du document : text/plain
Prévisualisation
Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão: 05-03-2017
Executado por EGD Engenharia (06-03-2017 15:57:14)
Executando a partir de C:\Users\EGD Engenharia\Downloads
Windows 7 Ultimate Service Pack 1 (X64) (2016-07-13 15:02:51)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-1726747603-1438285420-2724128483-500 - Administrator - Disabled)
Convidado (S-1-5-21-1726747603-1438285420-2724128483-501 - Limited - Disabled)
EGD Engenharia (S-1-5-21-1726747603-1438285420-2724128483-1000 - Administrator - Enabled) => C:\Users\EGD Engenharia
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
64 Bit HP BiDi Channel Components Installer (Version: 1.2.0.2 - Hewlett-Packard) Hidden
Adobe Flash Player 24 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 24.0.0.221 - Adobe Systems Incorporated)
Assistente Pimaco + (HKLM-x32\...\Assistente Pimaco +) (Version: 2.2.0.0 - Pimaco Autoadesivos Ltda)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software)
Brother MFL-Pro Suite DCP-8112DN (HKLM-x32\...\{37372D85-4945-4B6B-AC87-7BC5D1AB9F5C}) (Version: 2.0.1.0 - Brother Industries, Ltd.)
Componente de Segurança Bradesco (HKLM-x32\...\scpbrad) (Version: 1.0.0 - Banco Bradesco S.A.)
Doro 2.06 (HKLM-x32\...\Doro_is1) (Version: - CompSoft)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 8.1.0.1013 - Foxit Software Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 56.0.2924.87 - Google Inc.)
Google Earth (HKLM-x32\...\{F6430171-B86B-4639-839E-374913E7911D}) (Version: 7.1.8.3036 - Google)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2226 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Network Connections 16.3.48.0 (HKLM\...\PROSetDX) (Version: 16.3.48.0 - Intel)
Malwarebytes Anti-Malware versão 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 51.0.1 (x86 pt-BR) (HKLM-x32\...\Mozilla Firefox 51.0.1 (x86 pt-BR)) (Version: 51.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 51.0.1 - Mozilla)
Pacote de Idiomas do Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - Português (Brasil) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PTB) (Version: 10.0.50903 - Microsoft Corporation)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6363 - Realtek Semiconductor Corp.)
SafeZone Stable 1.51.2220.53 (x32 Version: 1.51.2220.53 - Avast Software) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Skype™ 7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.104 - Skype Technologies S.A.)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.73909 - TeamViewer)
Warsaw 1.14.2.35 64 bits (HKLM\...\{20E60725-16C8-4FB9-8BC2-AF92C5F8D06D}_is1) (Version: 1.14.2.35 - GAS Tecnologia)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {02F3D1AE-D29C-4805-AC2B-19531B965D2D} - System32\Tasks\{60117284-5C29-488E-9BCE-A57A105F865A} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2017-02-14] (Skype Technologies S.A.)
Task: {210FBC15-7B5F-485B-BC13-4770F638AD01} - System32\Tasks\Microsoft\Windows\Setup\EOSNotify => C:\Windows\system32\EOSNotify.exe [2016-06-25] (Microsoft Corporation)
Task: {452106CB-BEAC-489E-8B13-527F70CE3A81} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-07-13] (Google Inc.)
Task: {65EAAB7A-E5DB-4CE1-8305-6D7BEA7D5F11} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-02-15] (Adobe Systems Incorporated)
Task: {81ABF389-F713-433A-8FD3-E50D3FBEA8AE} - System32\Tasks\SafeZone scheduled Autoupdate 1468429771 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-08-09] (Avast Software)
Task: {8A40A5C2-698E-445F-B565-EA35C4120804} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-09-09] (AVAST Software)
Task: {A3A999E1-24F6-4E78-A6AA-CA67781C28E0} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe [2016-07-13] ()
Task: {AFF2BBD2-B8B2-4468-B983-E3681C078D5D} - System32\Tasks\{E53D06E3-5F74-4369-9C06-4BEEB37EE117} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.24.0.104/pt/go/help.faq.installer?source=lightinstaller&LastError=1618
Task: {D491B783-0807-4F73-915D-78AA48AC964F} - System32\Tasks\{3D38E9EE-BDE6-428E-8EA1-9DB5461EFD1D} => Chrome.exe hxxps://ui.skype.com/ui/0/7.30.64.105/pt/go/help.faq.installer?LastError=1618
Task: {F176AFC9-F492-40F3-A9D8-3393504B2454} - System32\Tasks\{5D39397E-1F8A-42CF-A1AC-DADA5DC50F20} => Chrome.exe hxxp://ui.skype.com/ui/0/7.24.0.104/pt/go/help.faq.installer?source=lightinstaller&LastError=1618
Task: {FAD83748-41C9-4619-82DD-C852DDD3E7E6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-07-13] (Google Inc.)
Task: {FB4943AD-1993-4477-9968-7EB0B21CAECB} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-01-27] (AVAST Software)
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS.exe
==================== Atalhos =============================
(As entradas podem ser listadas para serem restauradas ou removidas.)
ShortcutWithArgument: C:\Users\EGD Engenharia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativos do Google Chrome\Simet.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=nnokjffnngdgfplfmimjioknefmkjfgc
==================== Módulos Carregados (Whitelisted) ==============
2016-07-13 14:06 - 2014-06-26 19:10 - 00595456 _____ () C:\Program Files (x86)\DoroPDFWriter\Doro.dll
2016-07-13 15:10 - 2008-01-16 18:51 - 00134144 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\hpzpi5k4.dll
2016-07-13 15:27 - 2005-04-22 01:36 - 00143360 ____N () C:\Windows\system32\BrSNMP64.dll
2016-09-09 11:42 - 2016-09-09 11:42 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-03-06 06:59 - 2017-03-06 06:59 - 05881856 _____ () C:\Program Files\AVAST Software\Avast\defs\17030600\algo.dll
2016-09-09 11:42 - 2016-09-09 11:42 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-07-13 14:06 - 2016-07-13 14:06 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-07-13 15:26 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2017-02-07 06:06 - 2017-02-01 06:01 - 01870168 _____ () C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\libglesv2.dll
2017-02-07 06:06 - 2017-02-01 06:01 - 00085848 _____ () C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\libegl.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\office14\Cultures\office.odf
2015-11-11 02:42 - 2015-11-11 02:42 - 01045672 _____ () C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
AlternateDataStreams: C:\Program Files (x86)\GbPlugin:IncompleteStartProcessProtection.cnt [10]
AlternateDataStreams: C:\Program Files (x86)\GbPlugin:u6eBQrM0Z2K3FKLVBMG8dY3IkKT2rqFO+Sf68h8fDg== [32]
AlternateDataStreams: C:\Windows\System32:923D440B_Bb.gbp [2]
AlternateDataStreams: C:\Windows\system32\Drivers\gbpddfac64.sys:X5ZN8aGvT4 [2262]
AlternateDataStreams: C:\Windows\system32\Drivers\gbpddreg64.sys:X5ZN8aGvT4 [686]
AlternateDataStreams: C:\Windows\system32\Drivers\wsddfac.sys:X5ZN8aGXs4 [2410]
AlternateDataStreams: C:\ProgramData\GbPlugin:IncompleteStartGbprcm.cnt [10]
AlternateDataStreams: C:\Users\Todos os Usuários\GbPlugin:IncompleteStartGbprcm.cnt [10]
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
IE trusted site: HKU\S-1-5-21-1726747603-1438285420-2724128483-1000\...\bancobrasil.com.br -> www.bancobrasil.com.br
IE trusted site: HKU\S-1-5-21-1726747603-1438285420-2724128483-1000\...\bb.com.br -> aapj.bb.com.br
IE trusted site: HKU\S-1-5-21-1726747603-1438285420-2724128483-1000\...\gastecnologia.com.br -> cloud.gastecnologia.com.br
==================== Hosts Conteúdo: ===============================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2009-07-13 23:34 - 2009-06-10 18:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-1726747603-1438285420-2724128483-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\EGD Engenharia\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [TCP Query User{7AA59D13-D944-40D1-AAD1-BE457155214F}C:\windows\kmsemulator.exe] => (Allow) C:\windows\kmsemulator.exe
FirewallRules: [UDP Query User{3F5146D4-614F-4787-9272-B02DF4606061}C:\windows\kmsemulator.exe] => (Allow) C:\windows\kmsemulator.exe
FirewallRules: [{E324271E-5A1C-49DF-B7F6-BAF1174198B2}] => (Allow) LPort=54925
FirewallRules: [{CC18229E-BF97-4B11-9215-C9CD2707EA6C}] => (Allow) C:\Program Files\Diebold\Warsaw\core.exe
FirewallRules: [{1CFE7217-7AB2-4A28-B1A5-D520A94DDEC1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{442E37E0-D0EF-47DB-9B43-11CA4FE71566}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{841D61F1-A41B-4679-8318-B7BBD2B82136}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{E485554F-AF12-4485-89B5-ADD4F0C0BED5}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{075E12CC-A719-49E6-A6E6-54A22C25C598}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{E3F937D5-5DCE-43CA-9736-CF3812A85A32}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{B47C222F-90DE-4064-806E-5B7EB3D27BD9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{41350DC1-9798-4FE4-83DA-1240E1DBF1F0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
==================== Pontos de Restauração =========================
23-11-2016 06:18:43 ASU_MSI_TRAN
23-11-2016 14:22:46 ASU_MSI_TRAN
28-12-2016 06:16:04 Instalação de Pacote de Driver de Dispositivo: Diebold Network Monitor Serviço de Rede
16-01-2017 05:55:50 ASU_MSI_TRAN
03-03-2017 07:46:29 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215
03-03-2017 07:49:25 Removed Skype™ 7.33
03-03-2017 07:50:22 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215
03-03-2017 07:53:28 Removed Skype™ 7.33
==================== Dispositivos Apresentando Falhas No Gerenciador =============
Name: Controlador de rede
Description: Controlador de rede
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (03/06/2017 03:13:50 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Falha ao criar ponto de restauração (Processo = C:\Users\EGDENG~1\AppData\Local\Temp\vc_redist.x86.exe /install /quiet /norestart; Descrição = Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215; Erro = 0x80070514).
Error: (03/03/2017 07:08:29 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Falha ao criar ponto de restauração (Processo = C:\Users\EGDENG~1\AppData\Local\Temp\vc_redist.x86.exe /install /quiet /norestart; Descrição = Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215; Erro = 0x80070514).
Error: (02/13/2017 06:04:47 AM) (Source: Microsoft Office 14) (EventID: 2001) (User: )
Description: Microsoft Outlook: Rejected Safe Mode action : O Outlook não pôde ser iniciado corretamente na última tentativa. O modo de segurança o ajudará a corrigir ou isolar o problema de inicialização. Parte da funcionalidade do aplicativo poderá ser desativada neste modo.
Deseja iniciar o Outlook no modo de segurança?.
Rejected Safe Mode action : Microsoft Outlook.
Error: (02/01/2017 01:27:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: FoxitReader.exe, versão: 8.1.0.1013, carimbo de hora: 0x57ff70b1
Nome do módulo de falhas: unknown, versão: 0.0.0.0, carimbo de hora: 0x00000000
Código de exceção: 0xc0000005
Deslocamento com falha: 0x65006500
Identificação do processo com falha: 0x16a0
Hora de início do aplicativo com falha: 0x01d27ca7cca65999
Caminho do aplicativo com falha: C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe
FCaminho do módulo de falhas: unknown
Identificação do Relatório: 5ffddd6c-e89b-11e6-a415-7071bca9fa53
Error: (02/01/2017 01:27:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: FoxitReader.exe, versão: 8.1.0.1013, carimbo de hora: 0x57ff70b1
Nome do módulo de falhas: unknown, versão: 0.0.0.0, carimbo de hora: 0x00000000
Código de exceção: 0xc0000005
Deslocamento com falha: 0x65006500
Identificação do processo com falha: 0x16a0
Hora de início do aplicativo com falha: 0x01d27ca7cca65999
Caminho do aplicativo com falha: C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe
FCaminho do módulo de falhas: unknown
Identificação do Relatório: 5b809236-e89b-11e6-a415-7071bca9fa53
Error: (02/01/2017 01:25:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: FoxitReader.exe, versão: 8.1.0.1013, carimbo de hora: 0x57ff70b1
Nome do módulo de falhas: FoxitReader.exe, versão: 8.1.0.1013, carimbo de hora: 0x57ff70b1
Código de exceção: 0xc0000005
Deslocamento com falha: 0x008b9521
Identificação do processo com falha: 0xe44
Hora de início do aplicativo com falha: 0x01d27ca7b1f6243f
Caminho do aplicativo com falha: C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe
FCaminho do módulo de falhas: C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe
Identificação do Relatório: 0936f8a9-e89b-11e6-a415-7071bca9fa53
Error: (02/01/2017 01:24:44 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa FoxitReader.exe versão 8.1.0.1013 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.
ID de Processo: 17b4
Hora de Início: 01d27ca79dfdd983
Hora de Término: 132
Caminho do Aplicativo: C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe
Id do Relatório:
Error: (02/01/2017 01:24:07 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa FoxitReader.exe versão 8.1.0.1013 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.
ID de Processo: 1768
Hora de Início: 01d27ca78141edfe
Hora de Término: 16
Caminho do Aplicativo: C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe
Id do Relatório:
Error: (02/01/2017 01:23:09 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa FoxitReader.exe versão 8.1.0.1013 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.
ID de Processo: 1538
Hora de Início: 01d27ca0c4212802
Hora de Término: 29
Caminho do Aplicativo: C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe
Id do Relatório: b0bc4ad2-e89a-11e6-a415-7071bca9fa53
Error: (02/01/2017 12:35:06 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa FoxitReader.exe versão 8.1.0.1013 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.
ID de Processo: 52c
Hora de Início: 01d27ca0671d1078
Hora de Término: 18
Caminho do Aplicativo: C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe
Id do Relatório: fa58edc9-e893-11e6-a415-7071bca9fa53
Erros de Sistema:
=============
Error: (03/06/2017 03:10:20 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: O desligamento anterior do sistema em 15:08:15 às 06/03/2017 não era esperado.
Error: (03/06/2017 10:19:46 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: O serviço 'WMPNetworkSvc' não foi iniciado corretamente porque CoCreateInstance(CLSID_UPnPDeviceFinder) encontrou o erro '0x80004005'. Verifique se o serviço UPnPHost está sendo executado e se o componente UPnPHost do Windows foi instalado adequadamente.
Error: (03/06/2017 06:58:00 AM) (Source: Schannel) (EventID: 4119) (User: AUTORIDADE NT)
Description: O seguinte alerta fatal foi recebido: 70.
Error: (02/24/2017 05:24:19 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: O servidor {3FCB7074-EC9E-4AAF-9BE3-C0E356942366} não se registrou com o DCOM dentro do tempo limite requerido.
Error: (02/22/2017 07:00:25 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: O serviço 'WMPNetworkSvc' não foi iniciado corretamente porque CoCreateInstance(CLSID_UPnPDeviceFinder) encontrou o erro '0x80004005'. Verifique se o serviço UPnPHost está sendo executado e se o componente UPnPHost do Windows foi instalado adequadamente.
Error: (02/21/2017 05:13:52 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: O servidor {3FCB7074-EC9E-4AAF-9BE3-C0E356942366} não se registrou com o DCOM dentro do tempo limite requerido.
Error: (02/21/2017 07:00:07 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: O serviço 'WMPNetworkSvc' não foi iniciado corretamente porque CoCreateInstance(CLSID_UPnPDeviceFinder) encontrou o erro '0x80004005'. Verifique se o serviço UPnPHost está sendo executado e se o componente UPnPHost do Windows foi instalado adequadamente.
Error: (02/20/2017 05:12:52 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: O servidor {3FCB7074-EC9E-4AAF-9BE3-C0E356942366} não se registrou com o DCOM dentro do tempo limite requerido.
Error: (02/14/2017 04:12:41 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: O servidor {3FCB7074-EC9E-4AAF-9BE3-C0E356942366} não se registrou com o DCOM dentro do tempo limite requerido.
Error: (02/14/2017 06:02:55 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Intel(R) Management & Security Application User Notification Service devido ao seguinte erro:
O serviço não respondeu à requisição de início ou controle em tempo hábil.
CodeIntegrity:
===================================
Date: 2016-09-21 07:43:26.318
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswHdsKe.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-09-21 07:43:26.317
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswHdsKe.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-09-09 07:38:05.475
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\GbPlugin\gbprcm64.sys because the set of per-page image hashes could not be found on the system.
Date: 2016-09-09 07:38:04.710
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\PROGRA~2\GbPlugin\wsftprp64.sys because the set of per-page image hashes could not be found on the system.
Date: 2016-09-09 07:37:40.374
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\wsddpp.sys because the set of per-page image hashes could not be found on the system.
Date: 2016-09-09 07:37:36.896
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.
Date: 2016-09-09 07:37:36.646
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.
Date: 2016-09-08 07:29:09.372
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\GbPlugin\gbprcm64.sys because the set of per-page image hashes could not be found on the system.
Date: 2016-09-08 07:29:07.812
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\PROGRA~2\GbPlugin\wsftprp64.sys because the set of per-page image hashes could not be found on the system.
Date: 2016-09-08 07:28:38.515
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\wsddpp.sys because the set of per-page image hashes could not be found on the system.
==================== Informações da Memória ===========================
Processador: Intel(R) Core(TM) i3 CPU 540 @ 3.07GHz
Percentagem de memória em uso: 75%
RAM física total: 3831.12 MB
RAM física disponível: 941.01 MB
Virtual Total: 7660.41 MB
Virtual disponível: 4311.5 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:146.48 GB) (Free:79.06 GB) NTFS ==>[drive com componentes de inicialização (obtido através de BCD)]
Drive d: () (Fixed) (Total:319.27 GB) (Free:318.37 GB) NTFS
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 000157E7)
Partition 1: (Active) - (Size=146.5 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=319.3 GB) - (Type=OF Extended)
==================== Fim de Addition.txt ============================
Executado por EGD Engenharia (06-03-2017 15:57:14)
Executando a partir de C:\Users\EGD Engenharia\Downloads
Windows 7 Ultimate Service Pack 1 (X64) (2016-07-13 15:02:51)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-1726747603-1438285420-2724128483-500 - Administrator - Disabled)
Convidado (S-1-5-21-1726747603-1438285420-2724128483-501 - Limited - Disabled)
EGD Engenharia (S-1-5-21-1726747603-1438285420-2724128483-1000 - Administrator - Enabled) => C:\Users\EGD Engenharia
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
64 Bit HP BiDi Channel Components Installer (Version: 1.2.0.2 - Hewlett-Packard) Hidden
Adobe Flash Player 24 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 24.0.0.221 - Adobe Systems Incorporated)
Assistente Pimaco + (HKLM-x32\...\Assistente Pimaco +) (Version: 2.2.0.0 - Pimaco Autoadesivos Ltda)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software)
Brother MFL-Pro Suite DCP-8112DN (HKLM-x32\...\{37372D85-4945-4B6B-AC87-7BC5D1AB9F5C}) (Version: 2.0.1.0 - Brother Industries, Ltd.)
Componente de Segurança Bradesco (HKLM-x32\...\scpbrad) (Version: 1.0.0 - Banco Bradesco S.A.)
Doro 2.06 (HKLM-x32\...\Doro_is1) (Version: - CompSoft)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 8.1.0.1013 - Foxit Software Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 56.0.2924.87 - Google Inc.)
Google Earth (HKLM-x32\...\{F6430171-B86B-4639-839E-374913E7911D}) (Version: 7.1.8.3036 - Google)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2226 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Network Connections 16.3.48.0 (HKLM\...\PROSetDX) (Version: 16.3.48.0 - Intel)
Malwarebytes Anti-Malware versão 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 51.0.1 (x86 pt-BR) (HKLM-x32\...\Mozilla Firefox 51.0.1 (x86 pt-BR)) (Version: 51.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 51.0.1 - Mozilla)
Pacote de Idiomas do Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - Português (Brasil) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PTB) (Version: 10.0.50903 - Microsoft Corporation)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6363 - Realtek Semiconductor Corp.)
SafeZone Stable 1.51.2220.53 (x32 Version: 1.51.2220.53 - Avast Software) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Skype™ 7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.104 - Skype Technologies S.A.)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.73909 - TeamViewer)
Warsaw 1.14.2.35 64 bits (HKLM\...\{20E60725-16C8-4FB9-8BC2-AF92C5F8D06D}_is1) (Version: 1.14.2.35 - GAS Tecnologia)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {02F3D1AE-D29C-4805-AC2B-19531B965D2D} - System32\Tasks\{60117284-5C29-488E-9BCE-A57A105F865A} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2017-02-14] (Skype Technologies S.A.)
Task: {210FBC15-7B5F-485B-BC13-4770F638AD01} - System32\Tasks\Microsoft\Windows\Setup\EOSNotify => C:\Windows\system32\EOSNotify.exe [2016-06-25] (Microsoft Corporation)
Task: {452106CB-BEAC-489E-8B13-527F70CE3A81} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-07-13] (Google Inc.)
Task: {65EAAB7A-E5DB-4CE1-8305-6D7BEA7D5F11} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-02-15] (Adobe Systems Incorporated)
Task: {81ABF389-F713-433A-8FD3-E50D3FBEA8AE} - System32\Tasks\SafeZone scheduled Autoupdate 1468429771 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-08-09] (Avast Software)
Task: {8A40A5C2-698E-445F-B565-EA35C4120804} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-09-09] (AVAST Software)
Task: {A3A999E1-24F6-4E78-A6AA-CA67781C28E0} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe [2016-07-13] ()
Task: {AFF2BBD2-B8B2-4468-B983-E3681C078D5D} - System32\Tasks\{E53D06E3-5F74-4369-9C06-4BEEB37EE117} => Iexplore.exe hxxp://ui.skype.com/ui/0/7.24.0.104/pt/go/help.faq.installer?source=lightinstaller&LastError=1618
Task: {D491B783-0807-4F73-915D-78AA48AC964F} - System32\Tasks\{3D38E9EE-BDE6-428E-8EA1-9DB5461EFD1D} => Chrome.exe hxxps://ui.skype.com/ui/0/7.30.64.105/pt/go/help.faq.installer?LastError=1618
Task: {F176AFC9-F492-40F3-A9D8-3393504B2454} - System32\Tasks\{5D39397E-1F8A-42CF-A1AC-DADA5DC50F20} => Chrome.exe hxxp://ui.skype.com/ui/0/7.24.0.104/pt/go/help.faq.installer?source=lightinstaller&LastError=1618
Task: {FAD83748-41C9-4619-82DD-C852DDD3E7E6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-07-13] (Google Inc.)
Task: {FB4943AD-1993-4477-9968-7EB0B21CAECB} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-01-27] (AVAST Software)
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS.exe
==================== Atalhos =============================
(As entradas podem ser listadas para serem restauradas ou removidas.)
ShortcutWithArgument: C:\Users\EGD Engenharia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativos do Google Chrome\Simet.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=nnokjffnngdgfplfmimjioknefmkjfgc
==================== Módulos Carregados (Whitelisted) ==============
2016-07-13 14:06 - 2014-06-26 19:10 - 00595456 _____ () C:\Program Files (x86)\DoroPDFWriter\Doro.dll
2016-07-13 15:10 - 2008-01-16 18:51 - 00134144 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\hpzpi5k4.dll
2016-07-13 15:27 - 2005-04-22 01:36 - 00143360 ____N () C:\Windows\system32\BrSNMP64.dll
2016-09-09 11:42 - 2016-09-09 11:42 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-03-06 06:59 - 2017-03-06 06:59 - 05881856 _____ () C:\Program Files\AVAST Software\Avast\defs\17030600\algo.dll
2016-09-09 11:42 - 2016-09-09 11:42 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-07-13 14:06 - 2016-07-13 14:06 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-07-13 15:26 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2017-02-07 06:06 - 2017-02-01 06:01 - 01870168 _____ () C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\libglesv2.dll
2017-02-07 06:06 - 2017-02-01 06:01 - 00085848 _____ () C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\libegl.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\office14\Cultures\office.odf
2015-11-11 02:42 - 2015-11-11 02:42 - 01045672 _____ () C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
AlternateDataStreams: C:\Program Files (x86)\GbPlugin:IncompleteStartProcessProtection.cnt [10]
AlternateDataStreams: C:\Program Files (x86)\GbPlugin:u6eBQrM0Z2K3FKLVBMG8dY3IkKT2rqFO+Sf68h8fDg== [32]
AlternateDataStreams: C:\Windows\System32:923D440B_Bb.gbp [2]
AlternateDataStreams: C:\Windows\system32\Drivers\gbpddfac64.sys:X5ZN8aGvT4 [2262]
AlternateDataStreams: C:\Windows\system32\Drivers\gbpddreg64.sys:X5ZN8aGvT4 [686]
AlternateDataStreams: C:\Windows\system32\Drivers\wsddfac.sys:X5ZN8aGXs4 [2410]
AlternateDataStreams: C:\ProgramData\GbPlugin:IncompleteStartGbprcm.cnt [10]
AlternateDataStreams: C:\Users\Todos os Usuários\GbPlugin:IncompleteStartGbprcm.cnt [10]
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
IE trusted site: HKU\S-1-5-21-1726747603-1438285420-2724128483-1000\...\bancobrasil.com.br -> www.bancobrasil.com.br
IE trusted site: HKU\S-1-5-21-1726747603-1438285420-2724128483-1000\...\bb.com.br -> aapj.bb.com.br
IE trusted site: HKU\S-1-5-21-1726747603-1438285420-2724128483-1000\...\gastecnologia.com.br -> cloud.gastecnologia.com.br
==================== Hosts Conteúdo: ===============================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2009-07-13 23:34 - 2009-06-10 18:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-1726747603-1438285420-2724128483-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\EGD Engenharia\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [TCP Query User{7AA59D13-D944-40D1-AAD1-BE457155214F}C:\windows\kmsemulator.exe] => (Allow) C:\windows\kmsemulator.exe
FirewallRules: [UDP Query User{3F5146D4-614F-4787-9272-B02DF4606061}C:\windows\kmsemulator.exe] => (Allow) C:\windows\kmsemulator.exe
FirewallRules: [{E324271E-5A1C-49DF-B7F6-BAF1174198B2}] => (Allow) LPort=54925
FirewallRules: [{CC18229E-BF97-4B11-9215-C9CD2707EA6C}] => (Allow) C:\Program Files\Diebold\Warsaw\core.exe
FirewallRules: [{1CFE7217-7AB2-4A28-B1A5-D520A94DDEC1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{442E37E0-D0EF-47DB-9B43-11CA4FE71566}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{841D61F1-A41B-4679-8318-B7BBD2B82136}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{E485554F-AF12-4485-89B5-ADD4F0C0BED5}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{075E12CC-A719-49E6-A6E6-54A22C25C598}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{E3F937D5-5DCE-43CA-9736-CF3812A85A32}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{B47C222F-90DE-4064-806E-5B7EB3D27BD9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{41350DC1-9798-4FE4-83DA-1240E1DBF1F0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
==================== Pontos de Restauração =========================
23-11-2016 06:18:43 ASU_MSI_TRAN
23-11-2016 14:22:46 ASU_MSI_TRAN
28-12-2016 06:16:04 Instalação de Pacote de Driver de Dispositivo: Diebold Network Monitor Serviço de Rede
16-01-2017 05:55:50 ASU_MSI_TRAN
03-03-2017 07:46:29 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215
03-03-2017 07:49:25 Removed Skype™ 7.33
03-03-2017 07:50:22 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215
03-03-2017 07:53:28 Removed Skype™ 7.33
==================== Dispositivos Apresentando Falhas No Gerenciador =============
Name: Controlador de rede
Description: Controlador de rede
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (03/06/2017 03:13:50 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Falha ao criar ponto de restauração (Processo = C:\Users\EGDENG~1\AppData\Local\Temp\vc_redist.x86.exe /install /quiet /norestart; Descrição = Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215; Erro = 0x80070514).
Error: (03/03/2017 07:08:29 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Falha ao criar ponto de restauração (Processo = C:\Users\EGDENG~1\AppData\Local\Temp\vc_redist.x86.exe /install /quiet /norestart; Descrição = Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215; Erro = 0x80070514).
Error: (02/13/2017 06:04:47 AM) (Source: Microsoft Office 14) (EventID: 2001) (User: )
Description: Microsoft Outlook: Rejected Safe Mode action : O Outlook não pôde ser iniciado corretamente na última tentativa. O modo de segurança o ajudará a corrigir ou isolar o problema de inicialização. Parte da funcionalidade do aplicativo poderá ser desativada neste modo.
Deseja iniciar o Outlook no modo de segurança?.
Rejected Safe Mode action : Microsoft Outlook.
Error: (02/01/2017 01:27:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: FoxitReader.exe, versão: 8.1.0.1013, carimbo de hora: 0x57ff70b1
Nome do módulo de falhas: unknown, versão: 0.0.0.0, carimbo de hora: 0x00000000
Código de exceção: 0xc0000005
Deslocamento com falha: 0x65006500
Identificação do processo com falha: 0x16a0
Hora de início do aplicativo com falha: 0x01d27ca7cca65999
Caminho do aplicativo com falha: C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe
FCaminho do módulo de falhas: unknown
Identificação do Relatório: 5ffddd6c-e89b-11e6-a415-7071bca9fa53
Error: (02/01/2017 01:27:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: FoxitReader.exe, versão: 8.1.0.1013, carimbo de hora: 0x57ff70b1
Nome do módulo de falhas: unknown, versão: 0.0.0.0, carimbo de hora: 0x00000000
Código de exceção: 0xc0000005
Deslocamento com falha: 0x65006500
Identificação do processo com falha: 0x16a0
Hora de início do aplicativo com falha: 0x01d27ca7cca65999
Caminho do aplicativo com falha: C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe
FCaminho do módulo de falhas: unknown
Identificação do Relatório: 5b809236-e89b-11e6-a415-7071bca9fa53
Error: (02/01/2017 01:25:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: FoxitReader.exe, versão: 8.1.0.1013, carimbo de hora: 0x57ff70b1
Nome do módulo de falhas: FoxitReader.exe, versão: 8.1.0.1013, carimbo de hora: 0x57ff70b1
Código de exceção: 0xc0000005
Deslocamento com falha: 0x008b9521
Identificação do processo com falha: 0xe44
Hora de início do aplicativo com falha: 0x01d27ca7b1f6243f
Caminho do aplicativo com falha: C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe
FCaminho do módulo de falhas: C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe
Identificação do Relatório: 0936f8a9-e89b-11e6-a415-7071bca9fa53
Error: (02/01/2017 01:24:44 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa FoxitReader.exe versão 8.1.0.1013 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.
ID de Processo: 17b4
Hora de Início: 01d27ca79dfdd983
Hora de Término: 132
Caminho do Aplicativo: C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe
Id do Relatório:
Error: (02/01/2017 01:24:07 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa FoxitReader.exe versão 8.1.0.1013 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.
ID de Processo: 1768
Hora de Início: 01d27ca78141edfe
Hora de Término: 16
Caminho do Aplicativo: C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe
Id do Relatório:
Error: (02/01/2017 01:23:09 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa FoxitReader.exe versão 8.1.0.1013 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.
ID de Processo: 1538
Hora de Início: 01d27ca0c4212802
Hora de Término: 29
Caminho do Aplicativo: C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe
Id do Relatório: b0bc4ad2-e89a-11e6-a415-7071bca9fa53
Error: (02/01/2017 12:35:06 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa FoxitReader.exe versão 8.1.0.1013 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.
ID de Processo: 52c
Hora de Início: 01d27ca0671d1078
Hora de Término: 18
Caminho do Aplicativo: C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe
Id do Relatório: fa58edc9-e893-11e6-a415-7071bca9fa53
Erros de Sistema:
=============
Error: (03/06/2017 03:10:20 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: O desligamento anterior do sistema em 15:08:15 às 06/03/2017 não era esperado.
Error: (03/06/2017 10:19:46 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: O serviço 'WMPNetworkSvc' não foi iniciado corretamente porque CoCreateInstance(CLSID_UPnPDeviceFinder) encontrou o erro '0x80004005'. Verifique se o serviço UPnPHost está sendo executado e se o componente UPnPHost do Windows foi instalado adequadamente.
Error: (03/06/2017 06:58:00 AM) (Source: Schannel) (EventID: 4119) (User: AUTORIDADE NT)
Description: O seguinte alerta fatal foi recebido: 70.
Error: (02/24/2017 05:24:19 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: O servidor {3FCB7074-EC9E-4AAF-9BE3-C0E356942366} não se registrou com o DCOM dentro do tempo limite requerido.
Error: (02/22/2017 07:00:25 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: O serviço 'WMPNetworkSvc' não foi iniciado corretamente porque CoCreateInstance(CLSID_UPnPDeviceFinder) encontrou o erro '0x80004005'. Verifique se o serviço UPnPHost está sendo executado e se o componente UPnPHost do Windows foi instalado adequadamente.
Error: (02/21/2017 05:13:52 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: O servidor {3FCB7074-EC9E-4AAF-9BE3-C0E356942366} não se registrou com o DCOM dentro do tempo limite requerido.
Error: (02/21/2017 07:00:07 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: O serviço 'WMPNetworkSvc' não foi iniciado corretamente porque CoCreateInstance(CLSID_UPnPDeviceFinder) encontrou o erro '0x80004005'. Verifique se o serviço UPnPHost está sendo executado e se o componente UPnPHost do Windows foi instalado adequadamente.
Error: (02/20/2017 05:12:52 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: O servidor {3FCB7074-EC9E-4AAF-9BE3-C0E356942366} não se registrou com o DCOM dentro do tempo limite requerido.
Error: (02/14/2017 04:12:41 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: O servidor {3FCB7074-EC9E-4AAF-9BE3-C0E356942366} não se registrou com o DCOM dentro do tempo limite requerido.
Error: (02/14/2017 06:02:55 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Intel(R) Management & Security Application User Notification Service devido ao seguinte erro:
O serviço não respondeu à requisição de início ou controle em tempo hábil.
CodeIntegrity:
===================================
Date: 2016-09-21 07:43:26.318
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswHdsKe.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-09-21 07:43:26.317
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswHdsKe.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-09-09 07:38:05.475
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\GbPlugin\gbprcm64.sys because the set of per-page image hashes could not be found on the system.
Date: 2016-09-09 07:38:04.710
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\PROGRA~2\GbPlugin\wsftprp64.sys because the set of per-page image hashes could not be found on the system.
Date: 2016-09-09 07:37:40.374
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\wsddpp.sys because the set of per-page image hashes could not be found on the system.
Date: 2016-09-09 07:37:36.896
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswKbd.sys because the set of per-page image hashes could not be found on the system.
Date: 2016-09-09 07:37:36.646
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\aswSnx.sys because the set of per-page image hashes could not be found on the system.
Date: 2016-09-08 07:29:09.372
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files (x86)\GbPlugin\gbprcm64.sys because the set of per-page image hashes could not be found on the system.
Date: 2016-09-08 07:29:07.812
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\PROGRA~2\GbPlugin\wsftprp64.sys because the set of per-page image hashes could not be found on the system.
Date: 2016-09-08 07:28:38.515
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\drivers\wsddpp.sys because the set of per-page image hashes could not be found on the system.
==================== Informações da Memória ===========================
Processador: Intel(R) Core(TM) i3 CPU 540 @ 3.07GHz
Percentagem de memória em uso: 75%
RAM física total: 3831.12 MB
RAM física disponível: 941.01 MB
Virtual Total: 7660.41 MB
Virtual disponível: 4311.5 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:146.48 GB) (Free:79.06 GB) NTFS ==>[drive com componentes de inicialização (obtido através de BCD)]
Drive d: () (Fixed) (Total:319.27 GB) (Free:318.37 GB) NTFS
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 000157E7)
Partition 1: (Active) - (Size=146.5 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=319.3 GB) - (Type=OF Extended)
==================== Fim de Addition.txt ============================