Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão: 15-03-2017
Executado por User (05-04-2017 13:02:17)
Executando a partir de C:\Users\User
Windows 7 Professional Service Pack 1 (X64) (2016-10-26 20:34:05)
Modo da Inicialização: Normal
==========================================================


==================== Contas: =============================

Administrador (S-1-5-21-3798610884-877956647-1653073716-500 - Administrator - Disabled)
Convidado (S-1-5-21-3798610884-877956647-1653073716-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3798610884-877956647-1653073716-1003 - Limited - Enabled)
postgres (S-1-5-21-3798610884-877956647-1653073716-1001 - Limited - Enabled) => C:\Users\postgres
User (S-1-5-21-3798610884-877956647-1653073716-1000 - Administrator - Enabled) => C:\Users\User

==================== Central de Segurança ========================

(Se uma entrada for incluída na fixlist, será removida.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Programas Instalados ======================

(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)

Acrobat.com (HKLM-x32\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1.377 - Adobe Systems Incorporated)
Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.0.4990 - Adobe Systems Inc.)
Adobe Flash Player 11 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 11.9.900.152 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.19) - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AB0000000001}) (Version: 11.0.19 - Adobe Systems Incorporated)
Alterdata IShop 6.1320.2 - 1st Build (HKLM-x32\...\{B12B17DC-CEBB-4C61-9DAB-9167212A1C2D}_is1) (Version: Alterdata IShop - Alterdata Software)
Android Studio (HKLM\...\Android Studio) (Version: 1.0 - Google Inc.)
APP Shop v1.0.24 (HKLM-x32\...\{90242E9B-BC60-46E3-8EE7-8E953F702280}_is1) (Version: 1.0.24 - ASRock Inc.)
Apple Mobile Device Support (HKLM\...\{DB18F1C0-846F-46F5-A074-5B97C8AF5C8E}) (Version: 10.3.1.2 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{52D87F32-70E4-4348-8148-C0B9F35B1314}) (Version: 2.3.0.177 - Apple Inc.)
ASRock App Charger v1.0.6 (HKLM\...\ASRock App Charger_is1) (Version: 1.0.6 - ASRock Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 17.2.2288 - AVAST Software)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
DLL-Files.com Client (HKLM-x32\...\DA71BA65-680A-4212-9150-6239217B53DC_DLL-Files.c~79141F26_is1) (Version: 2.3.0.4908 - DLL-Files.com Client)
dr.fone toolkit para Android (Version 8.1.0) (HKLM-x32\...\{7B08A1E1-3644-4237-B39D-762B5F5564D0}_is1) (Version: 8.1.0.47 - Wondershare Software Co.,Ltd.)
Evernote v. 6.4.2 (HKLM-x32\...\{E74F0DCA-9FC8-11E6-9D98-005056950253}) (Version: 6.4.2.3788 - Evernote Corp.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 56.0.2924.87 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1153 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4280 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.5.0.1081 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 4.0.4.51 - Intel Corporation)
iTunes (HKLM\...\{6C01A0A7-7440-4D48-93C6-2927A1E93FE6}) (Version: 12.6.0.100 - Apple Inc.)
Java(TM) 6 Update 3 (HKLM-x32\...\{3248F0A8-6813-11D6-A77B-00B0D0160030}) (Version: 1.6.0.30 - Sun Microsystems, Inc.)
MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Minimal ADB and Fastboot version 1.1.3 (HKLM-x32\...\{DE46417A-9E9E-4BCD-BBDD-DA21943193BB}_is1) (Version: 1.1.3 - )
Minimal ADB and Fastboot version 1.4.2 (HKLM-x32\...\{1901BAF7-7E78-4041-BC88-D0EE5DD1DFD9}_is1) (Version: 1.4.2 - Sam Rodberg)
Motorola Device Manager (HKLM-x32\...\{28DB8373-C1BB-444F-A427-A55585A12ED7}) (Version: 2.5.4 - Motorola Mobility)
Motorola Device Software Update (x32 Version: 13.09.3001 - Motorola Mobility) Hidden
Motorola Mobile Drivers Installation 6.4.0 (HKLM\...\{27986EDD-C9EC-4B52-B92F-06D073F0AA52}) (Version: 6.4.0 - Motorola Mobility LLC)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
Pacote de Driver do Windows - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/28/2014 11.0.0000.00000) (HKLM\...\092555911492C6959D2596D612F52DCA71881CA2) (Version: 08/28/2014 11.0.0000.00000 - Google, Inc.)
PostgreSQL 9.0 (HKLM\...\PostgreSQL 9.0) (Version: 9.0 - PostgreSQL Global Development Group)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.86.508.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7614 - Realtek Semiconductor Corp.)
Revisores de Texto do Microsoft Office 2013 – Português do Brasil (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
RSDLite (HKLM-x32\...\{2540D9B6-1D17-4D7B-972F-067FE5DC8C5A}) (Version: 6.1.5 - Motorola)
SafeZone Stable 3.55.2393.590 (x32 Version: 3.55.2393.590 - Avast Software) Hidden
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.2.13021_10 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.5.2.13021_10 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.18.0 - SAMSUNG Electronics Co., Ltd.)
Software de dispositivo do Chipset Intel® (x32 Version: 10.1.1.8 - Intel(R) Corporation) Hidden
Suporte para Aplicativos Apple (32-bit) (HKLM-x32\...\{05E07D23-91E9-4E70-A4CC-EF505088F967}) (Version: 5.4.1 - Apple Inc.)
Suporte para Aplicativos Apple Apple (64-bit) (HKLM\...\{741291DA-2B34-4D44-8FB6-58EDE21261D8}) (Version: 5.4.1 - Apple Inc.)
VIVO INTERNET (HKLM-x32\...\VIVO INTERNET) (Version: 22.001.26.00.149 - Huawei Technologies Co.,Ltd)
WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

==================== Exame Personalizado CLSID (Whitelisted): ==========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

CustomCLSID: HKU\S-1-5-21-3798610884-877956647-1653073716-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)

==================== Tarefas Agendadas (Whitelisted) =============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

Task: {2379272B-EB50-4471-89A7-0A70F2EAECCD} - System32\Tasks\Motorola Device Manager Initial Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2014-10-30] ()
Task: {2CB7466E-5328-4018-8379-F481D5471D88} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {2D418951-9274-4BDD-B852-70A978C6A96E} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-03-09] (AVAST Software)
Task: {41EDC2E7-4ADD-4340-B0A7-C389DA000B97} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-26] (Google Inc.)
Task: {45D79725-2CFB-4FC8-AD25-72853344AD2B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {50216F5E-A0AA-4C4E-9953-6BDF8BBC6DF4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-26] (Google Inc.)
Task: {52700ED9-836A-4306-A903-B7E4DE8F6289} - System32\Tasks\At1 => C:\Program Files (x86)\Alterdata\Shop\Alt_AgenteBackup.exe [2015-11-25] (Alterdata Software) <==== ATENÇÃO
Task: {780DAE2D-0354-42D5-8F7C-98A31DBA4004} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {78EA228C-0BAA-492A-8C0D-22095EBD881F} - System32\Tasks\SafeZone scheduled Autoupdate 1477518634 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-03-03] (Avast Software)
Task: {87C568A1-302D-4C3E-8357-71CCA4F69CD7} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-03-09] (AVAST Software)
Task: {9F209564-418B-411F-B8AE-D5DCF8C4B4ED} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-02-14] (Apple Inc.)
Task: {A943E836-7153-4F38-BD0C-E8F220EAE736} - System32\Tasks\Motorola Device Manager Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2014-10-30] ()
Task: {FF9481C6-1445-43BB-9902-5C826536B4C9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)

(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)

Task: C:\Windows\Tasks\At1.job => C:\Program Files (x86)\Alterdata\Shop\Alt_AgenteBackup.exe

==================== Atalhos =============================

(As entradas podem ser listadas para serem restauradas ou removidas.)

==================== Módulos Carregados (Whitelisted) ==============

2016-10-31 19:45 - 2016-10-31 19:45 - 00592384 _____ () C:\ProgramData\MEGAsync\ShellExtX64.dll
2017-03-16 16:08 - 2017-03-16 16:08 - 01354040 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-10-05 18:17 - 2016-10-05 18:17 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-12-27 12:01 - 2014-08-20 07:27 - 00242256 _____ () C:\ProgramData\MobileBrServ\mbbservice.exe
2016-10-28 13:17 - 2015-10-06 11:54 - 00220672 _____ () C:\Program Files\PostgreSQL\9.0\bin\LIBPQ.dll
2016-10-28 13:17 - 2012-08-14 12:02 - 02258432 _____ () C:\Program Files\PostgreSQL\9.0\bin\libxml2.dll
2016-10-26 20:53 - 2015-09-04 03:40 - 00393320 _____ () C:\Windows\system32\igfxTray.exe
2017-03-09 16:37 - 2017-03-09 16:37 - 00162600 _____ () c:\Program Files\AVAST Software\Avast\x64\vaarclient.dll
2017-03-09 16:38 - 2017-03-09 16:38 - 00792656 _____ () C:\Program Files\AVAST Software\Avast\x64\ffl2.dll
2017-03-27 12:20 - 2017-03-27 12:20 - 01354040 _____ () C:\Program Files\iTunes\libxml2.dll
2017-03-27 12:20 - 2017-03-27 12:20 - 00092472 _____ () C:\Program Files\iTunes\zlib1.dll
2017-03-09 16:38 - 2017-03-09 16:38 - 00170216 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-04-05 11:58 - 2017-04-05 11:58 - 05908480 _____ () C:\Program Files\AVAST Software\Avast\defs\17040500\algo.dll
2017-03-09 16:38 - 2017-03-09 16:38 - 00655056 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-10-28 13:20 - 2016-04-15 12:57 - 00036840 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_fastmm4_613.bpl
2016-10-28 13:20 - 2016-04-15 13:01 - 00065000 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_qualityassurance_613.bpl
2016-10-28 13:20 - 2016-04-15 12:55 - 00072160 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_databaseini_613.bpl
2016-10-28 13:20 - 2016-03-14 13:27 - 00216064 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\VCLZipD7_3.bpl
2016-10-28 13:20 - 2016-06-23 18:31 - 00288744 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_setuptable_613.bpl
2016-10-28 13:20 - 2016-04-15 12:58 - 03121120 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_loadingprogress_613.bpl
2016-10-28 13:20 - 2016-04-15 12:58 - 00200160 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_interface_613.bpl
2016-10-28 13:20 - 2016-04-15 13:03 - 00031200 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_vcltranslator_613.bpl
2016-10-28 13:20 - 2016-04-15 12:56 - 00100328 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_databasestart_613.bpl
2016-10-28 13:20 - 2016-04-15 12:56 - 00082408 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_dialogforms_613.bpl
2016-10-28 13:20 - 2016-04-15 13:19 - 00070120 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\dxThemeD7_613.bpl
2016-10-28 13:20 - 2016-04-15 12:56 - 00073696 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_database_613.bpl
2016-10-28 13:20 - 2016-04-15 12:53 - 00126952 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_acessorestrito_613.bpl
2016-10-28 13:20 - 2016-04-15 12:58 - 00035816 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_livechat_613.bpl
2016-10-28 13:20 - 2016-04-15 12:58 - 00055776 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\AltLib_LocalD7.bpl
2016-10-28 13:20 - 2016-04-15 13:22 - 00246248 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\IndyCore70_613.bpl
2016-10-28 13:20 - 2016-04-15 13:22 - 00116704 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\IndySystem70_613.bpl
2016-10-28 13:20 - 2016-04-15 12:54 - 00169440 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_auditoreventos_613.bpl
2016-10-28 13:20 - 2016-04-15 13:01 - 00176608 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_progresswindow_613.bpl
2016-10-28 13:20 - 2016-04-15 13:00 - 00370664 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_paineis_613.bpl
2016-10-28 13:20 - 2016-04-15 13:26 - 01942504 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\rbIDE147.bpl
2016-10-28 13:20 - 2016-04-15 13:03 - 00044000 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\AltLib_WMailD7.bpl
2016-10-28 13:20 - 2016-04-15 13:27 - 00136672 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\rbTC147_613.bpl
2016-10-28 13:20 - 2016-04-15 13:01 - 00096224 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\AltLib_raAlterdata_613.bpl
2016-10-28 13:20 - 2016-04-15 13:28 - 00137696 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\TeeDB97_613.bpl
2016-10-28 13:20 - 2016-04-15 13:29 - 00794088 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\TeeUI97_613.bpl
2016-10-28 13:20 - 2016-04-15 13:27 - 00121824 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\rbTDBC147_613.bpl
2016-10-28 13:20 - 2016-04-15 13:27 - 00115680 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\rbTCUI147_613.bpl
2016-10-28 13:20 - 2016-03-31 18:41 - 00199680 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\XFormat7_613.bpl
2016-10-28 13:20 - 2016-03-31 18:41 - 00119808 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\XDevice7_613.bpl
2016-10-28 13:20 - 2016-04-15 13:22 - 01678304 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\IndyProtocols70_613.bpl
2016-10-28 13:20 - 2016-04-15 12:56 - 00088040 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_datasetsearch_613.bpl
2016-10-28 13:20 - 2016-04-15 13:00 - 00082408 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_pesquisageral_613.bpl
2016-10-28 13:20 - 2016-04-15 12:55 - 00084968 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_controlutils_613.bpl
2016-10-28 13:20 - 2016-04-15 12:56 - 00030688 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_dbreg_613.bpl
2016-10-28 13:20 - 2016-04-15 13:02 - 00686560 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_skin_613.bpl
2016-10-28 13:20 - 2016-03-31 18:39 - 00310272 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\WinSkinD7R_613.bpl
2016-10-28 13:20 - 2016-04-15 12:53 - 00637416 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_acessos_613.bpl
2016-10-28 13:20 - 2016-04-15 12:57 - 00178664 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_edits_613.bpl
2016-10-28 13:20 - 2016-04-15 13:01 - 00113128 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_resources_613.bpl
2016-10-28 13:20 - 2016-04-15 12:58 - 00066024 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_lockdatabase_613.bpl
2016-10-28 13:20 - 2016-04-15 13:02 - 00043496 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_status_613.bpl
2016-10-28 13:20 - 2016-04-15 12:54 - 00057832 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\AltLib_AssinaturaDigital_613.bpl
2016-10-28 13:20 - 2016-01-14 10:08 - 00061440 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_codigos_613.bpl
2016-10-28 13:20 - 2016-04-15 13:00 - 00051176 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_msnpopup_613.bpl
2016-10-28 13:20 - 2016-04-15 12:54 - 03632096 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_backup_613.bpl
2016-10-28 13:20 - 2016-04-15 13:03 - 00163296 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\Alt_AgendadorTarefas_613.bpl
2016-10-28 13:20 - 2016-04-15 13:03 - 00019936 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_windowsversion_613.bpl
2016-10-28 13:20 - 2016-04-15 12:56 - 00052192 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_databaseskin_613.bpl
2016-10-28 13:20 - 2016-04-15 12:54 - 00042472 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\altlib_checkdep_613.bpl
2016-10-28 13:20 - 2016-04-15 12:55 - 00054240 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\AltLib_CheckMessage_613.bpl
2016-10-31 19:43 - 2016-10-31 19:43 - 00564736 _____ () C:\ProgramData\MEGAsync\ShellExtX32.dll
2016-10-28 13:20 - 2014-02-27 18:26 - 00873984 _____ () C:\Program Files (x86)\Alterdata\Biblioteca\AltLib_CardsCheck.DLL
2014-04-07 14:31 - 2014-04-07 14:31 - 00172032 _____ () C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\css_core.dll
2016-04-13 08:38 - 2016-04-13 08:38 - 00482304 _____ () C:\ProgramData\MEGAsync\libsodium.dll
2016-10-26 21:48 - 2016-10-26 21:48 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-03-09 16:37 - 2017-03-09 16:37 - 00290352 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2016-10-28 13:08 - 2017-03-14 15:44 - 00853088 _____ () C:\Program Files (x86)\Alterdata\Updater\bin\System.Data.SQLite.dll
2017-03-09 16:40 - 2017-02-01 09:01 - 01870168 _____ () C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\libglesv2.dll
2017-03-09 16:40 - 2017-02-01 09:01 - 00085848 _____ () C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(Se uma entrada for incluída na fixlist, somente o ADS será removido.)


==================== Modo de Segurança (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)


==================== Associação (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)


==================== Internet Explorer confiável/restrito ===============

(Se uma entrada for incluída na fixlist, será removida do Registro.)

IE trusted site: HKU\S-1-5-21-3798610884-877956647-1653073716-1000\...\fazenda.gov.br -> hxxp://www.cte.fazenda.gov.br
IE trusted site: HKU\S-1-5-21-3798610884-877956647-1653073716-1000\...\rs.gov.br -> hxxps://www.sefaz.rs.gov.br

==================== Hosts Conteúdo: ===============================

(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)

2009-07-14 02:34 - 2016-11-06 23:23 - 00000907 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.2 www.facebook.com
127.0.0.3 www.netflix.com

==================== Outras Áreas ============================

(Atualmente não há nenhuma correção automática para esta seção.)

HKU\S-1-5-21-3798610884-877956647-1653073716-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\User\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.15.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Firewall do Windows está desabilitado.

==================== MSCONFIG/TASK MANAGER ítens desabilitados ==


==================== Regras do Firewall (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{6BF19B27-9704-40CF-BBCD-58DD4631F041}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{E1D35D03-50B3-40B0-B864-523EC770780B}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{16572C35-F13D-48DD-B33B-7E6A1B910A34}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{172A8FB7-E02E-4770-9F75-50E805F19E82}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{EA2F9989-9979-4029-A86C-D895D6794DB7}] => (Allow) LPort=5432
FirewallRules: [{BC29A111-505F-4A9A-81BD-619E2B17F2EA}] => (Allow) LPort=5432
FirewallRules: [{2B240EF4-BBD7-4185-A2C4-CB2B7D3838E4}] => (Allow) LPort=8766
FirewallRules: [{ACEC0E93-B681-4073-9B7C-D5E641F3DB04}] => (Allow) LPort=8766
FirewallRules: [{722B37F7-F760-44C7-857F-9F52B9421231}] => (Allow) LPort=8766
FirewallRules: [{1EE5A44C-9C3F-4DF5-B1AE-95A004337228}] => (Allow) LPort=8766
FirewallRules: [{77D7B98E-8F80-4394-AE94-D5CB3D783EC3}] => (Allow) LPort=8767
FirewallRules: [{E592A30C-1812-49EC-92B3-4D8D09D89EA4}] => (Allow) LPort=8767
FirewallRules: [{4BF3267B-CF36-4664-82AC-016FB634A1DC}] => (Allow) LPort=8767
FirewallRules: [{6C6B6752-7281-4AF1-BFD9-F6B5B0B8D884}] => (Allow) LPort=8767
FirewallRules: [{67847482-185A-49EA-A9BD-3EBC07ED4489}] => (Allow) LPort=5353
FirewallRules: [{5371CD67-9FC4-408E-8472-1491A2DF8F46}] => (Allow) LPort=5353
FirewallRules: [{7192DA35-D0B6-4583-A47F-B1ACAB76F53E}] => (Allow) C:\Program Files (x86)\Alterdata\Shop\ishop.exe
FirewallRules: [{84CEC839-72BE-4530-93AF-5001A1691684}] => (Allow) C:\Program Files (x86)\Alterdata\Shop\ishop.exe
FirewallRules: [{0EFCCA42-AB78-4455-8325-657F0E573039}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{1A315866-3340-4CE1-865B-EE1A9A911B55}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{24049DBC-B700-4A5E-A378-F68C25463BA7}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{A6CEB5A7-BD13-4911-85B9-4955B516E6EE}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{4DA4FFEB-4311-4885-A4B5-8E35B644D66F}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{189D884E-7CC1-4647-A1F3-FDF323CB8B28}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.561\SZBrowser.exe
FirewallRules: [{F1BDAE83-DE16-4A3F-B605-E937B12E68BC}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.590\SZBrowser.exe
FirewallRules: [{2AF603AC-6056-4A90-B766-19F406D42CA2}] => (Allow) C:\Program Files\iTunes\iTunes.exe

==================== Pontos de Restauração =========================

09-03-2017 21:42:14 Ponto de Verificação Agendado
11-03-2017 12:40:01 Instalação de Pacote de Driver de Dispositivo: Google, Inc.
11-03-2017 14:10:28 Installed Samsung Kies
11-03-2017 14:37:19 Installed RSDLite
11-03-2017 14:51:43 Instalado Motorola Device Manager
13-03-2017 16:33:46 Configurado Motorola Device Manager
16-03-2017 13:02:13 Configurado Motorola Device Manager
05-04-2017 12:13:50 Removed iTunes
05-04-2017 12:18:18 Installed iTunes
05-04-2017 12:35:02 Installed iTunes
05-04-2017 12:43:41 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918

==================== Dispositivos Apresentando Falhas No Gerenciador =============

Name: Android ADB Interface
Description: Android ADB Interface
Class Guid: {3f966bd9-fa04-4ec5-991c-d326973b5128}
Manufacturer: Google, Inc.
Service: WinUSB
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Erros no Log de eventos: =========================

Erros em Aplicativos:
==================
Error: (04/05/2017 12:37:04 PM) (Source: MsiInstaller) (EventID: 10005) (User: User-PC)
Description: Produto: iTunes -- Uma versão mais recente do iTunes já está instalada neste computador.

Error: (04/05/2017 12:13:52 PM) (Source: Updater-Guardian) (EventID: 1003) (User: AUTORIDADE NT)
Description: Event-ID 1003

Error: (04/05/2017 01:54:55 PM) (Source: Updater-Guardian) (EventID: 1003) (User: AUTORIDADE NT)
Description: Event-ID 1003

Error: (04/05/2017 01:54:33 PM) (Source: Updater-Guardian) (EventID: 1003) (User: AUTORIDADE NT)
Description: Event-ID 1003

Error: (04/05/2017 11:57:29 AM) (Source: Updater-Guardian) (EventID: 1003) (User: AUTORIDADE NT)
Description: Event-ID 1003

Error: (03/23/2017 01:49:19 PM) (Source: Updater-Guardian) (EventID: 1003) (User: AUTORIDADE NT)
Description: Event-ID 1003

Error: (03/23/2017 01:49:03 PM) (Source: Updater-Guardian) (EventID: 1003) (User: AUTORIDADE NT)
Description: Event-ID 1003

Error: (03/16/2017 06:24:33 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Falha na geração de contexto de ativação para "C:\Users\User\Downloads\KiesSetup (1).exe".
Assembly dependente Microsoft.VC90.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8" não pôde ser localizado.
Use o arquivo sxstrace.exe para obter um diagnóstico detalhado.

Error: (03/16/2017 04:06:57 PM) (Source: AlterdataAutoUpdate) (EventID: 0) (User: )
Description: Title: Erro na rotina de verificação de acesso ao WebService no endereço: http://updatecenter.alterdata.com.br/api/comunicacao

Current Domain: Name:AlterdataAutoUpdate.exe
There are no context policies.

Current Process: System.Diagnostics.Process (AlterdataAutoUpdate)
Virtual Memory Size: 275775488
Memory Working Set: 15179776
Entry Assembly: AlterdataAutoUpdate, Version=2.11.7.2, Culture=neutral, PublicKeyToken=null
Current Process CPU Time: 00:00:06.4116411
Current Thread Name: ThreadCheckMasterStatus

Error: System.Net.WebException: The underlying connection was closed: An unexpected error occurred on a receive. ---> System.IO.IOException: Unable to read data from the transport connection: Foi forçado o cancelamento de uma conexão existente pelo host remoto. ---> System.Net.Sockets.SocketException: Foi forçado o cancelamento de uma conexão existente pelo host remoto
at System.Net.Sockets.Socket.Receive(Byte[] buffer, Int32 offset, Int32 size, SocketFlags socketFlags)
at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size)
--- End of inner exception stack trace ---
at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.PooledStream.Read(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.Connection.SyncRead(HttpWebRequest request, Boolean userRetrievedStream, Boolean probeRead)
--- End of inner exception stack trace ---
at System.Net.HttpWebRequest.GetResponse()
at Alterdata.Updater.Commom.Geral.ComputadorTemAcessoAoWebService() in C:\dsn\update-center\net\updater\tags\2.11.7.0\Commom\Geral.cs:line 134
Inner exception [1]
System.IO.IOException: Unable to read data from the transport connection: Foi forçado o cancelamento de uma conexão existente pelo host remoto. ---> System.Net.Sockets.SocketException: Foi forçado o cancelamento de uma conexão existente pelo host remoto
at System.Net.Sockets.Socket.Receive(Byte[] buffer, Int32 offset, Int32 size, SocketFlags socketFlags)
at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size)
--- End of inner exception stack trace ---
at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.PooledStream.Read(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.Connection.SyncRead(HttpWebRequest request, Boolean userRetrievedStream, Boolean probeRead)

Inner exception [2]
System.Net.Sockets.SocketException (0x80004005): Foi forçado o cancelamento de uma conexão existente pelo host remoto
at System.Net.Sockets.Socket.Receive(Byte[] buffer, Int32 offset, Int32 size, SocketFlags socketFlags)
at System.Net.Sockets.NetworkStream.Read(Byte[] buffer, Int32 offset, Int32 size)

Error: (03/16/2017 03:13:08 PM) (Source: AlterdataAutoUpdate) (EventID: 0) (User: )
Description: Title: Erro na rotina de verificação de acesso ao WebService no endereço: http://updatecenter.alterdata.com.br/api/comunicacao

Current Domain: Name:AlterdataAutoUpdate.exe
There are no context policies.

Current Process: System.Diagnostics.Process (AlterdataAutoUpdate)
Virtual Memory Size: 272629760
Memory Working Set: 11501568
Entry Assembly: AlterdataAutoUpdate, Version=2.11.7.2, Culture=neutral, PublicKeyToken=null
Current Process CPU Time: 00:00:04.9296316
Current Thread Name: ThreadCheckMasterStatus

Error: System.Net.WebException: The remote name could not be resolved: 'updatecenter.alterdata.com.br'
at System.Net.HttpWebRequest.GetResponse()
at Alterdata.Updater.Commom.Geral.ComputadorTemAcessoAoWebService() in C:\dsn\update-center\net\updater\tags\2.11.7.0\Commom\Geral.cs:line 134


Erros de Sistema:
=============
Error: (04/05/2017 12:23:11 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
cdrom

Error: (04/05/2017 12:21:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Alterdata Updater devido ao seguinte erro:
O serviço não respondeu à requisição de início ou controle em tempo hábil.

Error: (04/05/2017 12:21:39 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço Alterdata Updater.

Error: (04/05/2017 12:13:10 PM) (Source: Schannel) (EventID: 4119) (User: AUTORIDADE NT)
Description: O seguinte alerta fatal foi recebido: 70.

Error: (04/05/2017 12:12:41 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Falha ao carregar o(s) seguinte(s) driver(s) de início do sistema ou de inicialização:
cdrom

Error: (04/05/2017 12:12:38 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Wondershare Driver Install Service devido ao seguinte erro:
O serviço não respondeu à requisição de início ou controle em tempo hábil.

Error: (04/05/2017 12:12:38 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço Wondershare Driver Install Service.

Error: (04/05/2017 12:12:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Wondershare Application Framework Service devido ao seguinte erro:
O serviço não respondeu à requisição de início ou controle em tempo hábil.

Error: (04/05/2017 12:12:02 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço Wondershare Application Framework Service.

Error: (04/05/2017 12:11:53 PM) (Source: Schannel) (EventID: 4119) (User: AUTORIDADE NT)
Description: O seguinte alerta fatal foi recebido: 70.


==================== Informações da Memória ===========================

Processador: Intel(R) Celeron(R) CPU G1820 @ 2.70GHz
Percentagem de memória em uso: 73%
RAM física total: 3772.29 MB
RAM física disponível: 1003.77 MB
Virtual Total: 7542.77 MB
Virtual disponível: 4778.97 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.27 GB) (Free:369.21 GB) NTFS

==================== MBR & Tabela de Partições ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: A57C05AB)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.3 GB) - (Type=07 NTFS)

==================== Fim de Addition.txt ============================