Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão: 27-04-2017
Executado por CaL (28-04-2017 01:07:11)
Executando a partir de C:\Users\CaL\Downloads
Windows 8.1 Single Language (X64) (2014-02-01 14:19:20)
Modo da Inicialização: Normal
==========================================================


==================== Contas: =============================

Administrador (S-1-5-21-2306114891-2529335588-2597740447-500 - Administrator - Disabled)
CaL (S-1-5-21-2306114891-2529335588-2597740447-1001 - Administrator - Enabled) => C:\Users\CaL
Convidado (S-1-5-21-2306114891-2529335588-2597740447-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2306114891-2529335588-2597740447-1006 - Limited - Enabled)
miuky_000 (S-1-5-21-2306114891-2529335588-2597740447-1004 - Limited - Enabled)

==================== Central de Segurança ========================

(Se uma entrada for incluída na fixlist, será removida.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Programas Instalados ======================

(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)

µTorrent (HKU\S-1-5-21-2306114891-2529335588-2597740447-1001\...\uTorrent) (Version: 3.4.5.41865 - BitTorrent Inc.)
2007 Microsoft Office Suite Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
3D Ultra TrainTown Deluxe (HKLM-x32\...\{BD2CB6C9-0906-47B8-977B-01B08C42728A}) (Version: - )
AccelerateTab (HKLM-x32\...\AccelerateTab_is1) (Version: 2.0 - AccelerateTab)
Adobe Flash Player 25 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 25.0.0.148 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.7.148 - Adobe Systems, Inc.)
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.3.7 - Sereby Corporation)
Atualização do produto Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0416-0000-0000000FF1CE}_ENTERPRISE_{717C9095-8AAE-41CB-B046-BD6E8399F4F3}) (Version: - Microsoft)
Atualização do produto Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0416-0000-0000000FF1CE}_ENTERPRISE_{5016CB22-B9A7-44FB-AA72-AF28B27B15EA}) (Version: - Microsoft)
Atualização do produto Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0416-0000-0000000FF1CE}_ENTERPRISE_{BE3A7C0C-0081-4694-B5F9-980DD66BDDF8}) (Version: - Microsoft)
Atualização do produto Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0416-0000-0000000FF1CE}_ENTERPRISE_{7297E3A9-FCD4-4E0E-A306-7A90359E50E3}) (Version: - Microsoft)
AutoCAD 2012 - English (HKLM\...\AutoCAD 2012 - English) (Version: 18.2.51.0 - Autodesk)
AutoCAD 2012 - English (Version: 18.2.51.0 - Autodesk) Hidden
AutoCAD 2012 Language Pack - English (Version: 18.2.51.0 - Autodesk) Hidden
Autodesk App Manager (HKLM-x32\...\{C070121A-C8C5-4D52-9A7D-D240631BD433}) (Version: 1.1.0 - Autodesk)
Autodesk Content Service (HKLM-x32\...\{086F9A69-CD39-4893-A9FB-D3A0634CE3F7}) (Version: 2.0.90 - Autodesk)
Autodesk Featured Apps (HKLM-x32\...\{F732FEDA-7713-4428-934B-EF83B8DD65D0}) (Version: 1.1.0 - Autodesk)
Autodesk Inventor Fusion plug-in for AutoCAD 2012 (HKLM\...\Autodesk Inventor Fusion plug-in for AutoCAD 2012) (Version: 0.0.1.138 - Autodesk)
Autodesk Inventor Fusion plug-in for AutoCAD 2012 (Version: 0.0.1.138 - Autodesk) Hidden
Autodesk Inventor Fusion plug-in language pack for AutoCAD 2012 (Version: 0.0.1.138 - Autodesk) Hidden
Autodesk Material Library 2012 (HKLM-x32\...\{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}) (Version: 2.5.0.8 - Autodesk)
Autodesk Material Library 2014 (HKLM-x32\...\{644F9B19-A462-499C-BF4D-300ABC2A28B1}) (Version: 4.0.19.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2012 (HKLM-x32\...\{65420DC9-306E-4371-905F-F4DC3B418E52}) (Version: 2.5.0.8 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2014 (HKLM-x32\...\{51BF3210-B825-4092-8E0D-66D689916E02}) (Version: 4.0.19.0 - Autodesk)
Autodesk ReCap (HKLM\...\Autodesk ReCap) (Version: 1.0.43.13 - Autodesk)
Autodesk ReCap (Version: 1.0.43.13 - Autodesk) Hidden
Autodesk ReCap Language Pack-English (Version: 1.0.43.13 - Autodesk) Hidden
Bejeweled(R) 3 (remove only) (HKLM-x32\...\Bejeweled(R) 3) (Version: - )
Blend for Visual Studio 2012 (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden
Blend for Visual Studio 2012 ENU resources (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden
BlueStacks App Player (HKLM-x32\...\{EFA0FC40-7D96-4515-9715-7C0C5D872326}) (Version: 2.0.2.5623 - BlueStack Systems, Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.13 - Piriform)
Delicious - Emily's Childhood Memories Premium Edition (remove only) (HKLM-x32\...\Delicious - Emily's Childhood Memories Premium Edition) (Version: - )
Edificius (x32 Version: 6.00 - ACCA) Hidden
FARO LS 1.1.406.58 (HKLM-x32\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production)
FARO LS 1.1.501.0 (64bit) (HKLM-x32\...\{8A470330-70B2-49AD-86AF-79885EF9898A}) (Version: 5.1.0.30630 - FARO Scanner Production)
Free YouTube to MP3 WMA Converter 4.4.9 (HKLM-x32\...\Free YouTube to MP3 WMA Converter_is1) (Version: - FreeAudioVideoSoftTech, Inc.)
Gadwin PrintScreen (HKLM-x32\...\Gadwin PrintScreen) (Version: 4.2 - Gadwin Systems, Inc.)
GBBD Caixa Economica Federal (HKLM-x32\...\{5d01f486-f32d-462e-8830-cc1d116e8ece}_is1) (Version: 3.12.0.2 - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.81 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden
Haunted Past - Realm of Ghosts Deluxe (remove only) (HKLM-x32\...\Haunted Past - Realm of Ghosts Deluxe) (Version: - )
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.0.1207 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® CCF Manager (HKLM-x32\...\{0f3d8dd5-54af-4404-a01c-4967e485a065}) (Version: 3.0.13.2211 - Intel Corporation)
Java 8 Update 131 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180131F0}) (Version: 8.0.1310.11 - Oracle Corporation)
Java 8 Update 131 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180131F0}) (Version: 8.0.1310.11 - Oracle Corporation)
Luxor (remove only) (HKLM-x32\...\Luxor) (Version: - )
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM-x32\...\M2698023) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM-x32\...\M2833941) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM-x32\...\M979906) (Version: - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D}) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{1948E039-EC79-4591-951D-9867A8C14C90}) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50906.0 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60830 (HKLM-x32\...\{9dba0447-b749-41ea-90bc-2aa19a9eb580}) (Version: 11.0.60830.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Express 2012 for Windows 8 - ENU (HKLM-x32\...\{b6391d7a-479c-494c-a76f-cad96a8a73ac}) (Version: 11.0.50727.1 - Microsoft Corporation)
Módulo de Segurança - Banco do Brasil (HKLM-x32\...\{36386dc9-8543-4b12-ae6b-220fd52f19f3}_is1) (Version: 3.11.0.1 - )
Mozilla Firefox 43.0.4 (x86 pt-BR) (HKLM-x32\...\Mozilla Firefox 43.0.4 (x86 pt-BR)) (Version: 43.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.4.5848 - Mozilla)
MP3 Rocket (HKLM-x32\...\MP3 Rocket) (Version: 7.3.1 - MP3 Rocket Inc)
Mundo Positivo Gerenciador de Inicialização (HKLM\...\{E365D4D7-BD51-4A7F-8ECA-0B6C0C42D3CF}_is1) (Version: 1.1.2.0 - Positivo Informática S.A.)
Mystery Legends - Beauty and the Beast (remove only) (HKLM-x32\...\Mystery Legends - Beauty and the Beast) (Version: - )
Nero 7 Essentials (HKLM-x32\...\{92749312-65D4-4697-85CC-EBA67A2E1046}) (Version: 7.03.0497 - Nero AG)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )
Pacote de Compatibilidade para o sistema Office 2007 (HKLM-x32\...\{90120000-0020-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Pacote de Idiomas do Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - Português (Brasil) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PTB) (Version: 10.0.50903 - Microsoft Corporation)
Pandemonium for Windows (HKLM-x32\...\Pandemonium) (Version: - )
PhotoScape (HKLM-x32\...\PhotoScape) (Version: - )
Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden
Positivo Aplicativos (HKLM\...\{AAB13E97-449B-4D5B-BDE2-AB47B938B722}_is1) (Version: 1.3.10.4 - Positivo Informática S.A.)
Positivo Backup (HKLM-x32\...\PSafe) (Version: 3.0.1208.24401 - PSafe)
Positivo Conecta (HKLM-x32\...\{4F23361B-2B38-46E2-BA1A-D920F270D5FB}_is1) (Version: 1.3.23.0 - Positivo Informática S.A.)
Remote Desktop Access (VuuPC) (HKLM-x32\...\VOPackage) (Version: 1.0.0.0 - CMI Limited) <==== ATENÇÃO
Sally's Studio(TM) (remove only) (HKLM-x32\...\Sally's Studio(TM)) (Version: - )
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
SketchUp Import for AutoCAD 2014 (HKLM-x32\...\{644E9589-F73A-49A4-AC61-A953B9DE5669}) (Version: 1.1.0 - Autodesk)
Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)
SlimCleaner (HKLM-x32\...\{6B8D6199-EE44-4FD7-813A-6D8C62C9B384}) (Version: 4.0.30878 - SlimWare Utilities, Inc.)
STCServ (Version: 3.0.0.1783 - Intel Corporation) Hidden
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.1.1 - TeamSpeak Systems GmbH)
The Desktop Weather 2.0.1.11178 (HKLM\...\WeatherTool) (Version: 2.0.1.11178 - ShenZhen Enode Techology co,.Ltd) <==== ATENÇÃO
Tibia (HKLM-x32\...\Tibia_is1) (Version: 10.00 - CipSoft GmbH)
Tibia (HKU\S-1-5-21-2306114891-2529335588-2597740447-1001\...\Tibia) (Version: - CipSoft GmbH)
Tools Update Platform (HKLM-x32\...\{6A128791-4857-4484-9BB2-71D4C1257200}) (Version: 1.1.0.15773 - Beijing Zhihuimen Techology co,.Ltd) <==== ATENÇÃO
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
VIA Gerenciador de dispositivo de plataforma (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)
VLC media player 2.0.3 (HKLM-x32\...\VLC media player) (Version: 2.0.3 - VideoLAN)
vSnapshot 1.0.0.0 (HKLM\...\{F772C08D-9F61-45c6-982F-ADDEEE0D92C6}) (Version: 1.0.0.0 - ShenZhen Zhihuimen Techology co,.Ltd)
Warsaw 1.15.1.61 64 bits (HKLM\...\{20E60725-16C8-4FB9-8BC2-AF92C5F8D06D}_is1) (Version: 1.15.1.61 - GAS Tecnologia)
Web-Cake 3.00 (HKLM\...\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}) (Version: 3.00 - Web Cake LLC) <==== ATENÇÃO
Wind Client Addons version 1.3.9 (HKLM-x32\...\{B161100A-6112-40CC-89F8-8D4A0F583BC9}_is1) (Version: 1.3.9 - Lucas Terra, WindBot)
WindBot versão 2.7.4 (HKLM-x32\...\{93F2CDEB-F828-463F-9B69-2D8FB38BF089}_is1) (Version: 2.7.4 - Lucas Terra, WindBot)
WinRAR 5.20 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
Wondershare Helper Compact 2.5.2 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.2 - Wondershare)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)
X-Mouse Button Control 1.47.0 (HKLM-x32\...\X-Mouse Button Control) (Version: 1.47.0 - Highresolution Enterprises)
XSplit Broadcaster (HKLM-x32\...\{5D784566-059B-4AC0-9B76-8F6B3E909EFE}) (Version: 2.9.1701.1636 - SplitmediaLabs)
Zuma's Revenge!(TM) (remove only) (HKLM-x32\...\Zuma's Revenge!(TM)) (Version: - )

==================== Exame Personalizado CLSID (Whitelisted): ==========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

CustomCLSID: HKU\S-1-5-21-2306114891-2529335588-2597740447-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2306114891-2529335588-2597740447-1001_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2306114891-2529335588-2597740447-1001_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2306114891-2529335588-2597740447-1001_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2306114891-2529335588-2597740447-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2306114891-2529335588-2597740447-1001_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2306114891-2529335588-2597740447-1001_Classes\CLSID\{0783EB25-59F8-4F02-B6B0-F1D4349F0000}\InprocServer32 -> C:\Users\CaL\AppData\Local\GAS Tecnologia\GBBD\npsf_bb_64.dll (GAS Tecnologia)
CustomCLSID: HKU\S-1-5-21-2306114891-2529335588-2597740447-1001_Classes\CLSID\{0783EB25-59F8-4F02-B6B0-F1D4349F0007}\InprocServer32 -> C:\Users\CaL\AppData\Local\GAS Tecnologia\GBBD\npsf_cef_64.dll (GAS Tecnologia)
CustomCLSID: HKU\S-1-5-21-2306114891-2529335588-2597740447-1001_Classes\CLSID\{0783EB25-59F8-4F02-B6B1-F1D4349F0000}\InprocServer32 -> C:\Users\CaL\AppData\Local\GAS Tecnologia\GBBD\npsf_bb_64.dll (GAS Tecnologia)
CustomCLSID: HKU\S-1-5-21-2306114891-2529335588-2597740447-1001_Classes\CLSID\{0783EB25-59F8-4F02-B6B1-F1D4349F0007}\InprocServer32 -> C:\Users\CaL\AppData\Local\GAS Tecnologia\GBBD\npsf_cef_64.dll (GAS Tecnologia)
CustomCLSID: HKU\S-1-5-21-2306114891-2529335588-2597740447-1001_Classes\CLSID\{6D7AE628-FF41-4CD3-91DD-34825BB1A251}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-2306114891-2529335588-2597740447-1001_Classes\CLSID\{B77E471C-FBF3-4CB5-880F-D7528AD4B349}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-2306114891-2529335588-2597740447-1001_Classes\CLSID\{C92FB640-AD4D-498A-9979-A51A2540C977}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-2306114891-2529335588-2597740447-1001_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-2306114891-2529335588-2597740447-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acadficn.dll (Autodesk, Inc.)

==================== Tarefas Agendadas (Whitelisted) =============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

Task: {01D80072-6406-492F-8C47-01FE71B46D27} - System32\Tasks\{2A6A6C0A-6DF1-4478-807F-2FF9BF46B935} => C:\Users\CaL\AppData\Roaming\{2F3AA0F6-976C-4b02-A66A-5D1DEA00811F}\InstallHelp.exe [2015-05-15] () <==== ATENÇÃO
Task: {078579BB-E734-46B0-B0EB-0F1D240E71C5} - System32\Tasks\{A06213F0-BA74-406C-8DF8-2C29F891985A} => pcalua.exe -a C:\Users\CaL\Downloads\Pandemonium\SETUP.EXE -d C:\Users\CaL\Downloads\Pandemonium
Task: {258FF00C-7EA6-4161-8980-0010EE37C0EB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-04-11] (Adobe Systems Incorporated)
Task: {6467C537-8E65-4004-92C0-50B79C539F4B} - System32\Tasks\SaveSenseLiveUpdateTaskMachineUA => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [2014-02-11] (SaveSense) <==== ATENÇÃO
Task: {66AB8D14-8EE0-4F8B-9A3C-F29D2AD0DE6C} - System32\Tasks\{3B7FD029-D932-411b-AF15-C96CF8EF0C18}{19F8DB95-4D78-4ddb-AC71-C610654FE37F} => C:\Program Files (x86)\WeatherTool\1.2.3.9736\InstallHelper.exe <==== ATENÇÃO
Task: {74E8258C-8620-409E-8445-5E7677F94287} - System32\Tasks\Plus-HD-4.1-firefoxinstaller => C:\Program Files (x86)\Plus-HD-4.1\Plus-HD-4.1-firefoxinstaller.exe
Task: {78232D60-669A-4DAC-8DEA-E791E7189671} - System32\Tasks\Plus-HD-4.1-codedownloader => C:\Program Files (x86)\Plus-HD-4.1\Plus-HD-4.1-codedownloader.exe [2013-11-16] (Plus HD)
Task: {7E34938E-2923-44C5-81ED-8AEC397843AF} - System32\Tasks\ToolsUpdatePlatform_ScheduledTask => C:\Program Files (x86)\ToolsUpdatePlatform\UpdatePlatform.exe [2015-07-07] () <==== ATENÇÃO
Task: {836643DB-A267-4F20-9E34-55F86A111974} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {8663FA83-B73D-47C6-8A47-D70987E773BB} - System32\Tasks\{1F1373D3-4B4C-466F-8E4E-1DE2892D923B} => pcalua.exe -a C:\Users\CaL\Downloads\Download\Audition_Downloader.exe -d C:\Users\CaL\Downloads\Download
Task: {BA5AFAE9-3DCE-4669-A6A0-C47198F16279} - System32\Tasks\SaveSenseLiveUpdateTaskMachineCore => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe [2014-02-11] (SaveSense) <==== ATENÇÃO
Task: {C3CFC6D4-60D2-4F43-B81B-9374ACD3567D} - System32\Tasks\Plus-HD-4.1-chromeinstaller => C:\Program Files (x86)\Plus-HD-4.1\Plus-HD-4.1-chromeinstaller.exe [2013-11-16] (Plus HD)
Task: {C453697A-3A5D-4532-AA7C-952D1520DCBC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {E08EEE61-4B75-4BF3-ABB1-1BFD60ADA4C1} - System32\Tasks\Tools_Update_{CFAC34AB-5DB5-4dea-94EC-1D42E3942873} => C:\Program Files (x86)\tools\update\tools_update.exe [2016-07-04] ()
Task: {E4845822-6F7D-4F0F-B36D-E0D3594A7D1D} - System32\Tasks\IntelBootstrapCCDashExe => C:\Program Files\Intel\ConnectCenter\bin\ICCLauncher.exe [2015-03-16] (Intel® Corporation)
Task: {EA4986FF-352D-48F1-931B-CA63247A5C28} - System32\Tasks\SaveSense => C:\Users\CaL\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.EXE <==== ATENÇÃO
Task: {F42AB06C-47F6-4AD9-AC1E-ACE31C299561} - System32\Tasks\SlimCleaner Run => C:\Program Files (x86)\SlimCleaner\SlimCleaner.exe [2013-07-10] (SlimWare Utilities, Inc.)
Task: {FCC4B840-77D3-40A5-88AD-A01794B23A54} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-12-08] (Piriform Ltd)

(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)

Task: C:\WINDOWS\Tasks\Plus-HD-4.1-chromeinstaller.job => C:\Program Files (x86)\Plus-HD-4.1\Plus-HD-4.1-chromeinstaller.exe ̑/installcrx /agentregpath='Plus-HD-4.1' /extensionfilepath C:\Program Files (x86)\Plus-HD-4.1\39200.crx' /appid=39200 /srcid='000557' /subid='0' /zdata='0' /bic=DFF699FE390445C58AC3FD1D7183FB4DIE /verifier=4beb5edc604e5519151eddeeb8cf3ea6 /installerversion=1_30_153 /installerfullversion=1.30.153.0 /installationtime=1384615334 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com <==== ATENÇÃO
Task: C:\WINDOWS\Tasks\Plus-HD-4.1-codedownloader.job => C:\Program Files (x86)\Plus-HD-4.1\Plus-HD-4.1-codedownloader.exe ư/reinstallapp /agentregpath='Plus-HD-4.1' /appid=39200 /srcid='000557' /subid='0' /zdata='0' /bic=DFF699FE390445C58AC3FD1D7183FB4DIE /verifier=4beb5edc604e5519151eddeeb8cf3ea6 /installerversion=1_30_153 /installerfullversion=1.30.153.0 /installationtime=1384615334 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com /codedownloaddomain=hxxp:/app-static.crossrider.com <==== ATENÇÃO
Task: C:\WINDOWS\Tasks\Plus-HD-4.1-firefoxinstaller.job => C:\Program Files (x86)\Plus-HD-4.1\Plus-HD-4.1-firefoxinstaller.exe ˪/installxpi /agentregpath='Plus-HD-4.1' /extensionfilepath C:\Program Files (x86)\Plus-HD-4.1\39200.xpi' /appid=39200 /srcid='000557' /subid='0' /zdata='0' /bic=DFF699FE390445C58AC3FD1D7183FB4DIE /verifier=4beb5edc604e5519151eddeeb8cf3ea6 /installerversion=1_30_153 /installerfullversion=1.30.153.0 /installationtime=1384615334 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com /waitforbrowser=300 /extensionid=1c4760d9-6efb-48d1-b650-e82623c8612e@982da7d4-d829-4a76-8b83-32a7fa75255f.com /extensionversion=0.93 /prefsbranch=a1c4760d96efb48d1b650e82623c8612e982da7d4d8294a768b8332a7fa75255fcom39200 /updateurl=hxxps:/w9u6a2p6.ssl.hwcdn.net/plugin/ff/update/39200.rdf <==== ATENÇÃO
Task: C:\WINDOWS\Tasks\Plus-HD-4.1-updater.job => C:\Program Files (x86)\Plus-HD-4.1\Plus-HD-4.1-updater.exe Ǩ/runupdater /agentregpath='Plus-HD-4.1' /appid=39200 /srcid='000557' /subid='0' /zdata='0' /bic=DFF699FE390445C58AC3FD1D7183FB4DIE /verifier=4beb5edc604e5519151eddeeb8cf3ea6 /installerversion=1_30_153 /installationtime=1384615334 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com /monetizationdomain=hxxp:/stats.syncstatsdata.com /geoserviceurl=hxxp:/ipgeoapi.com/ /updatejsondomain=hxxp:/update.srvstatsdata.com <==== ATENÇÃO
Task: C:\WINDOWS\Tasks\SaveSense.job => C:\Users\CaL\AppData\Roaming\SAVESE~1\UPDATE~1\UPDATE~1.EXE <==== ATENÇÃO
Task: C:\WINDOWS\Tasks\SaveSenseLiveUpdateTaskMachineCore.job => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATENÇÃO
Task: C:\WINDOWS\Tasks\SaveSenseLiveUpdateTaskMachineUA.job => C:\Program Files (x86)\SaveSenseLive\Update\SaveSenseLive.exe <==== ATENÇÃO
Task: C:\WINDOWS\Tasks\ToolsUpdatePlatform_ScheduledTask.job => C:\Program Files (x86)\ToolsUpdatePlatform\UpdatePlatform.exe <==== ATENÇÃO
Task: C:\WINDOWS\Tasks\Tools_Update_{CFAC34AB-5DB5-4dea-94EC-1D42E3942873}.job => C:\Program Files (x86)\tools\update\tools_update.exe
Task: C:\WINDOWS\Tasks\{2A6A6C0A-6DF1-4478-807F-2FF9BF46B935}.job => C:\Users\CaL\AppData\Roaming\{2F3AA0F6-976C-4b02-A66A-5D1DEA00811F}\InstallHelp.exe –-RunCheckUpdate C:\Users\CaL\AppData\Roaming\{2F3AA0F6-976C-4b02-A66A-5D1DEA00811F}\CheckUpdate.exe <==== ATENÇÃO
Task: C:\WINDOWS\Tasks\{3B7FD029-D932-411b-AF15-C96CF8EF0C18}{19F8DB95-4D78-4ddb-AC71-C610654FE37F}.job => C:\Program Files (x86)\WeatherTool\1.2.3.9736\InstallHelper.exe n-RunCloudOPTClient C:\Program Files (x86)\WeatherTool\1.2.3.9736\CloudOPTClient\CloudOPTClient.exe <==== ATENÇÃO

==================== Atalhos =============================

(As entradas podem ser listadas para serem restauradas ou removidas.)

ShortcutWithArgument: C:\Users\CaL\AppData\Local\Google\Chrome\User Data\Inicializador de aplicativos do Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --show-app-list
ShortcutWithArgument: C:\Users\CaL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativos do Google Chrome\Authy.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --user-data-dir="C:\Users\CaL\AppData\Local\Google\Chrome\User Data" --profile-directory="Profile 1" --app-id=gaedmjdfmmahhbjefcbgaolhhanlaolb
ShortcutWithArgument: C:\Users\CaL\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\953ec563059761b8\Primeiro usuário - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1"
ShortcutWithArgument: C:\Users\CaL\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Primeiro usuário - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1"

==================== Módulos Carregados (Whitelisted) ==============

2015-12-17 03:18 - 2015-12-17 03:18 - 00142280 _____ () C:\Program Files (x86)\WeatherTool\2.0.1.11178\WeatherService.exe
2016-12-24 00:30 - 2016-12-24 00:30 - 00152264 _____ () C:\Program Files (x86)\vSnapshot\1.0.0.0\vSnapshotServ.exe
2015-12-17 03:18 - 2015-12-17 03:18 - 01050056 _____ () C:\Program Files (x86)\WeatherTool\2.0.1.11178\WeatherEntryDll.dll
2015-07-07 03:49 - 2015-07-07 03:49 - 00635128 _____ () C:\Program Files (x86)\ToolsUpdatePlatform\UpdatePlatform.exe
2014-01-29 22:02 - 2015-06-01 21:00 - 00102912 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-09-21 00:22 - 2012-07-11 15:51 - 00078480 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll
2012-09-21 00:22 - 2012-07-11 15:51 - 00386192 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll
2015-03-16 13:19 - 2015-03-16 13:19 - 00053248 _____ () C:\Program Files\Intel\ConnectCenter\bin\pt-BR\CCFManager.resources.dll
2015-03-16 13:19 - 2015-03-16 13:19 - 00053248 _____ () C:\Program Files\Intel\ConnectCenter\bin\pt-BR\ICCCommon.resources.dll
2015-03-16 12:58 - 2015-03-16 12:58 - 00127200 _____ () C:\Program Files\Intel\ConnectCenter\bin\Interop.STCServLib.dll
2012-09-21 00:34 - 2012-08-24 11:32 - 00468232 _____ () C:\Program Files (x86)\PSafe\PSafeWCFClient.dll
2012-09-21 00:34 - 2012-08-24 11:32 - 00062216 _____ () C:\Program Files (x86)\PSafe\CrashLib.dll
2015-12-17 03:17 - 2015-12-17 03:17 - 00543688 _____ () C:\Program Files (x86)\WeatherTool\2.0.1.11178\EVPTask.dll
2015-12-17 03:17 - 2015-12-17 03:17 - 00406984 _____ () C:\Program Files (x86)\WeatherTool\2.0.1.11178\EVPNet.dll
2015-12-17 03:17 - 2015-12-17 03:17 - 00429000 _____ () C:\Program Files (x86)\WeatherTool\2.0.1.11178\EVPDR.dll
2016-12-24 00:30 - 2016-12-24 00:30 - 00574152 _____ () C:\Program Files (x86)\vSnapshot\1.0.0.0\Updata.dll
2014-02-03 11:33 - 2014-02-03 11:33 - 00016384 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PSIClient\06b95eda481d77daac1e10d1a7f48696\PSIClient.ni.dll
2012-09-21 00:23 - 2012-06-24 23:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2017-03-04 10:20 - 2016-10-08 16:48 - 01506304 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2017-03-04 10:20 - 2016-07-21 10:54 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2017-04-26 21:52 - 2017-04-19 01:04 - 02864984 _____ () C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.81\libglesv2.dll
2017-04-26 21:52 - 2017-04-19 01:04 - 00087384 _____ () C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.81\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(Se uma entrada for incluída na fixlist, somente o ADS será removido.)

AlternateDataStreams: C:\Program Files (x86)\GbPlugin:IncompleteStartProcessProtection.cnt [10]
AlternateDataStreams: C:\Program Files (x86)\GbPlugin:u6eBQrM0Z2K3FKLVBMG8dY3IkKT2rqFO+Sf68h8fDg== [32]
AlternateDataStreams: C:\WINDOWS\System32:1BAED81E_Bb.gbp [2]
AlternateDataStreams: C:\WINDOWS\System32:1BAED81E_Cef.gbp [2]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\wsddfac.sys:X5ZN8aGXs4 [2410]
AlternateDataStreams: C:\ProgramData\GbPlugin:IncompleteStartGbprcm.cnt [10]
AlternateDataStreams: C:\Users\Todos os Usuários\GbPlugin:IncompleteStartGbprcm.cnt [10]

==================== Modo de Segurança (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)


==================== Associação (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)

HKU\S-1-5-21-2306114891-2529335588-2597740447-1001\Software\Classes\.scr: AutoCADScriptFile => C:\WINDOWS\system32\notepad.exe "%1"

==================== Internet Explorer confiável/restrito ===============

(Se uma entrada for incluída na fixlist, será removida do Registro.)

IE trusted site: HKU\S-1-5-21-2306114891-2529335588-2597740447-1001\...\bancobrasil.com.br -> www.bancobrasil.com.br
IE trusted site: HKU\S-1-5-21-2306114891-2529335588-2597740447-1001\...\bb.com.br -> hxxps://seg.bb.com.br
IE trusted site: HKU\S-1-5-21-2306114891-2529335588-2597740447-1001\...\caixa.gov.br -> hxxps://imagem.caixa.gov.br
IE trusted site: HKU\S-1-5-21-2306114891-2529335588-2597740447-1001\...\caixa.gov.br -> imagem.caixa.gov.br

==================== Hosts Conteúdo: ===============================

(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)

2013-08-22 10:25 - 2013-08-22 10:25 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts


==================== Outras Áreas ============================

(Atualmente não há nenhuma correção automática para esta seção.)

HKU\S-1-5-21-2306114891-2529335588-2597740447-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\CaL\Desktop\Mary\Fotos\aracaju\IMG-20150825-WA0007.jpeg
DNS Servers: 189.7.112.61 - 189.7.112.66
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.

==================== MSCONFIG/TASK MANAGER ítens desabilitados ==

HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"
HKU\S-1-5-21-2306114891-2529335588-2597740447-1001\...\StartupApproved\Run: => "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"
HKU\S-1-5-21-2306114891-2529335588-2597740447-1001\...\StartupApproved\Run: => "Autodesk Sync"
HKU\S-1-5-21-2306114891-2529335588-2597740447-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-2306114891-2529335588-2597740447-1001\...\StartupApproved\Run: => "Chromium"

==================== Regras do Firewall (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{D18CA664-CC0F-4264-B47E-E15856115D9B}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\VSWinExpress.exe
FirewallRules: [{AEEC3585-4C0D-4A68-90FB-59B8449EE7ED}] => (Allow) C:\Program Files (x86)\PSafe\PSRsync.exe
FirewallRules: [{E6B293CB-782C-4458-A341-2FA0F6CC5550}] => (Allow) C:\Program Files (x86)\PSafe\PSRsync.exe
FirewallRules: [{8814BDD7-5000-4F47-9980-C538BE8BD13E}] => (Allow) C:\Program Files\Diebold\Warsaw\core.exe
FirewallRules: [TCP Query User{ABA1A688-AA1C-4E0B-8F77-4B548782B541}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{1F3BF247-36B0-477C-B514-C2DA9A05AE90}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{3F1508B7-47AE-4929-AA8A-C1703D1ACDBB}] => (Allow) C:\Users\CaL\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{A145DACE-47CE-4C02-B31E-36C72535ED9D}] => (Allow) C:\Users\CaL\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{F21CCE2E-09E7-429E-B169-99F13B66D70D}] => (Allow) C:\Users\CaL\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{B0C26105-E715-440E-9BD2-4757EC0280F1}] => (Allow) C:\Users\CaL\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{95803F58-625D-4C39-BF93-B0331890C712}] => (Allow) C:\Users\CaL\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{38140154-7ABF-4102-B20A-2A23CBEC42D6}] => (Allow) C:\Users\CaL\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{13A14005-BDFD-48E0-B66A-57F296DD2EF7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{9DA76ECA-FC41-44DE-950C-C888C2AE10CD}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{C4C50B1A-6634-431F-A904-F8F5B7FE6157}] => (Allow) C:\Program Files\Intel\STCServ\STCServ.exe
FirewallRules: [{F3CADEE9-E77F-48FE-A0BF-39F4CC072F10}] => (Allow) C:\Program Files\Intel\STCServ\STCServ.exe
FirewallRules: [{B7A67E15-6CBA-4D31-BED8-CF2BC5AF7E16}] => (Allow) C:\Program Files\Intel\STCServ\STCServ.exe
FirewallRules: [{E27202C6-4D83-48C3-9EF6-2216D6D0B248}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{69FDFBD1-C1A5-4674-8447-01792A620DB3}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\XSplit.Core.exe
FirewallRules: [{96BE4F03-5B07-4ADE-B2EE-0F4CF3A21A80}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\XSplit.cam.exe
FirewallRules: [{FBE908A5-E8EB-40DF-AC84-A844D8429E68}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\XSplit.Core.exe
FirewallRules: [{36062CFC-21A6-4349-B2E2-B59E025DA0A5}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\XSplit.cam.exe

==================== Pontos de Restauração =========================

10-04-2017 11:54:22 Windows Update
13-04-2017 11:56:28 Windows Update
16-04-2017 12:42:43 Windows Update
19-04-2017 13:30:07 Windows Update
22-04-2017 13:38:40 Windows Update
26-04-2017 12:49:45 Windows Update
27-04-2017 17:14:07 Installed XSplit Broadcaster

==================== Dispositivos Apresentando Falhas No Gerenciador =============


==================== Erros no Log de eventos: =========================

Erros em Aplicativos:
==================
Error: (04/28/2017 12:49:38 AM) (Source: MsiInstaller) (EventID: 1023) (User: AUTORIDADE NT)
Description: Produto: Microsoft Office Office 64-bit Components 2007 - A atualização 'Microsoft Office 2007 Service Pack 3 (SP3)' não pôde ser instalada. Código de erro 1603. Informações adicionais disponíveis no arquivo de log C:\WINDOWS\TEMP\MSI95e14.LOG.

Error: (04/28/2017 12:49:36 AM) (Source: MsiInstaller) (EventID: 11935) (User: AUTORIDADE NT)
Description: Produto: Microsoft Office Office 64-bit Components 2007 -- Erro 1935.Erro durante a instalação do componente de assembly {837BF1EB-D770-94EB-A01F-C8B3B9A1E18E}. HRESULT: 0x80073712. interface do assembly: IAssemblyCacheItem, função: Commit, nome do assembly: Microsoft.VC80.ATL,version="8.0.50727.762",type="win32",processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b"

Error: (04/27/2017 05:25:49 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa LiveComm.exe versão 17.5.9600.20911 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.

ID do Processo: fa0

Hora de Início: 01d2bf93548aca61

Hora de Término: 4294967295

Caminho do Aplicativo: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe

ID do Relatório: 4906a1cb-2b87-11e7-800a-eca86bb1f981

Nome completo do pacote com falha: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe

ID do aplicativo relativo ao pacote com falha: ppleae38af2e007f4358a809ac99a64a67c1

Error: (04/27/2017 05:17:54 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MARY)
Description: Falha na ativação do aplicativo Microsoft.SkypeApp_kzf8qxf38zg5c!App com o erro: -2147023170. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais.

Error: (04/27/2017 04:56:58 PM) (Source: MsiInstaller) (EventID: 1023) (User: AUTORIDADE NT)
Description: Produto: Microsoft Office Office 64-bit Components 2007 - A atualização 'Microsoft Office 2007 Service Pack 3 (SP3)' não pôde ser instalada. Código de erro 1603. Informações adicionais disponíveis no arquivo de log C:\WINDOWS\TEMP\MSI91807.LOG.

Error: (04/27/2017 04:56:56 PM) (Source: MsiInstaller) (EventID: 11935) (User: AUTORIDADE NT)
Description: Produto: Microsoft Office Office 64-bit Components 2007 -- Erro 1935.Erro durante a instalação do componente de assembly {837BF1EB-D770-94EB-A01F-C8B3B9A1E18E}. HRESULT: 0x80073712. interface do assembly: IAssemblyCacheItem, função: Commit, nome do assembly: Microsoft.VC80.ATL,version="8.0.50727.762",type="win32",processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b"

Error: (04/27/2017 01:38:24 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Falha na geração de contexto de ativação para "c:\program files (x86)\vsnapshot\1.0.0.0\vSnapshot.exe". Erro no arquivo de manifesto ou de política "", na linha .
Uma versão de componente exigida pelo aplicativo está em conflito com outra versão de componente já ativa.
Os componentes conflitantes são:
Componente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest.
Componente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09.manifest.

Error: (04/27/2017 01:35:45 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Falha na geração de contexto de ativação para "c:\program files (x86)\vsnapshot\1.0.0.0\vSnapshot.exe". Erro no arquivo de manifesto ou de política "", na linha .
Uma versão de componente exigida pelo aplicativo está em conflito com outra versão de componente já ativa.
Os componentes conflitantes são:
Componente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_62475f7becb72503.manifest.
Componente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.16384_none_a9f4965301334e09.manifest.

Error: (04/27/2017 01:33:37 PM) (Source: MsiInstaller) (EventID: 1023) (User: AUTORIDADE NT)
Description: Produto: Microsoft Office Office 64-bit Components 2007 - A atualização 'Microsoft Office 2007 Service Pack 3 (SP3)' não pôde ser instalada. Código de erro 1603. Informações adicionais disponíveis no arquivo de log C:\WINDOWS\TEMP\MSIee4fa.LOG.

Error: (04/27/2017 01:33:35 PM) (Source: MsiInstaller) (EventID: 11935) (User: AUTORIDADE NT)
Description: Produto: Microsoft Office Office 64-bit Components 2007 -- Erro 1935.Erro durante a instalação do componente de assembly {837BF1EB-D770-94EB-A01F-C8B3B9A1E18E}. HRESULT: 0x80073712. interface do assembly: IAssemblyCacheItem, função: Commit, nome do assembly: Microsoft.VC80.ATL,version="8.0.50727.762",type="win32",processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b"


Erros de Sistema:
=============
Error: (04/28/2017 12:49:44 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORIDADE NT)
Description: Falha na Instalação: o Windows não pôde instalar a seguinte atualização com o erro 0x80070643: 2007 Microsoft Office Suite Service Pack 3 (SP3).

Error: (04/27/2017 04:57:04 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORIDADE NT)
Description: Falha na Instalação: o Windows não pôde instalar a seguinte atualização com o erro 0x80070643: 2007 Microsoft Office Suite Service Pack 3 (SP3).

Error: (04/27/2017 01:33:45 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORIDADE NT)
Description: Falha na Instalação: o Windows não pôde instalar a seguinte atualização com o erro 0x80070643: 2007 Microsoft Office Suite Service Pack 3 (SP3).

Error: (04/27/2017 12:52:01 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORIDADE NT)
Description: Falha na Instalação: o Windows não pôde instalar a seguinte atualização com o erro 0x80070643: 2007 Microsoft Office Suite Service Pack 3 (SP3).

Error: (04/27/2017 11:55:09 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORIDADE NT)
Description: Falha na Instalação: o Windows não pôde instalar a seguinte atualização com o erro 0x80070643: 2007 Microsoft Office Suite Service Pack 3 (SP3).

Error: (04/27/2017 11:49:58 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Gbpddreg svc devido ao seguinte erro:
O sistema não pode encontrar o arquivo especificado.

Error: (04/27/2017 11:49:58 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Gbpddreg svc devido ao seguinte erro:
%%2 = O sistema não pode encontrar o arquivo especificado.

Error: (04/27/2017 11:45:16 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORIDADE NT)
Description: Falha na Instalação: o Windows não pôde instalar a seguinte atualização com o erro 0x80070643: 2007 Microsoft Office Suite Service Pack 3 (SP3).

Error: (04/27/2017 11:33:55 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Gbpddreg svc devido ao seguinte erro:
%%2 = O sistema não pode encontrar o arquivo especificado.

Error: (04/27/2017 11:33:55 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Warsaw File Access svc devido ao seguinte erro:
%%2 = O sistema não pode encontrar o arquivo especificado.


CodeIntegrity:
===================================
Date: 2016-01-05 15:34:39.225
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\GbPlugin\gbpinj.dll that did not meet the Store signing level requirements.

Date: 2016-01-05 15:34:38.944
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\GbPlugin\gbpinj.dll that did not meet the Store signing level requirements.

Date: 2016-01-05 15:34:38.022
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\GbPlugin\gbpinj.dll that did not meet the Store signing level requirements.

Date: 2016-01-05 15:34:37.272
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\GbPlugin\gbpinj.dll that did not meet the Store signing level requirements.

Date: 2016-01-05 15:34:36.069
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\GbPlugin\gbpinj.dll that did not meet the Store signing level requirements.

Date: 2016-01-05 15:34:36.069
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\GbPlugin\gbpinj.dll that did not meet the Store signing level requirements.

Date: 2016-01-04 17:42:26.707
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\GbPlugin\gbpinj.dll that did not meet the Store signing level requirements.

Date: 2016-01-04 17:42:26.301
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\GbPlugin\gbpinj.dll that did not meet the Store signing level requirements.

Date: 2016-01-04 17:42:25.556
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\GbPlugin\gbpinj.dll that did not meet the Store signing level requirements.

Date: 2016-01-04 17:42:24.698
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\GbPlugin\gbpinj.dll that did not meet the Store signing level requirements.


==================== Informações da Memória ===========================

Processador: Intel(R) Core(TM) i3-2120 CPU @ 3.30GHz
Percentagem de memória em uso: 60%
RAM física total: 3948.88 MB
RAM física disponível: 1579.55 MB
Virtual Total: 7916.88 MB
Virtual disponível: 4518.62 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:455.14 GB) (Free:320.07 GB) NTFS

==================== MBR & Tabela de Partições ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 02FC9A22)

Partition: GPT.

==================== Fim de Addition.txt ============================