Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão: 13-07-2017
Executado por Tadeu (14-07-2017 16:07:43)
Executando a partir de C:\Users\Tadeu\Downloads
Windows 7 Home Basic (X64) (2013-10-28 20:41:37)
Modo da Inicialização: Normal
==========================================================


==================== Contas: =============================

Administrador (S-1-5-21-50200193-3648072811-1416514059-500 - Administrator - Disabled)
Convidado (S-1-5-21-50200193-3648072811-1416514059-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-50200193-3648072811-1416514059-1245 - Limited - Enabled)
Tadeu (S-1-5-21-50200193-3648072811-1416514059-1000 - Administrator - Enabled) => C:\Users\Tadeu

==================== Central de Segurança ========================

(Se uma entrada for incluída na fixlist, será removida.)

AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Programas Instalados ======================

(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)

µTorrent (HKU\S-1-5-21-50200193-3648072811-1416514059-1000\...\uTorrent) (Version: 3.5.0.43916 - BitTorrent Inc.)
64 Bit HP CIO Components Installer (HKLM\...\{BE930E38-7BB3-45B6-85B2-5251F374F844}) (Version: 6.2.2 - Hewlett-Packard) Hidden
A360 Desktop (HKLM\...\{7758802D-9486-4883-9927-CCAC366A3BA4}) (Version: 7.2.3.1800 - Autodesk)
ACA & MEP 2017 Object Enabler (HKLM\...\{28B89EEF-0004-0000-5102-CF3F3A09B77D}) (Version: 7.9.45.0 - Autodesk) Hidden
ACAD Private (HKLM\...\{28B89EEF-0001-0000-3102-CF3F3A09B77D}) (Version: 21.0.52.0 - Autodesk) Hidden
Adobe Flash Player 26 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 26.0.0.137 - Adobe Systems Incorporated)
Adobe Photoshop 7.0 (HKLM-x32\...\Adobe Photoshop 7.0) (Version: 7.0 - Adobe Systems, Inc.)
Adobe Photoshop CS4 (HKLM-x32\...\Adobe_faf656ef605427ee2f42989c3ad31b8) (Version: 11.0 - Adobe Systems Incorporated)
Adobe Reader 9.1 - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-A91000000001}) (Version: 9.1.0 - Adobe Systems Incorporated)
Aplicativo da área de trabalho Autodesk (HKLM-x32\...\Autodesk Desktop App) (Version: 7.0.6.378 - Autodesk)
Aplicativos da Autodesk em destaque 2016-2017 (HKLM-x32\...\{27C15055-713B-4D0E-881F-19598A2DFD59}) (Version: 2.2.0 - Autodesk)
Arquivo do WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - )
AutoCAD 2017 - English (HKLM\...\{28B89EEF-0001-0409-2102-CF3F3A09B77D}) (Version: 21.0.52.0 - Autodesk) Hidden
AutoCAD 2017 (HKLM\...\{28B89EEF-0001-0000-0102-CF3F3A09B77D}) (Version: 21.0.52.0 - Autodesk) Hidden
AutoCAD 2017 Language Pack - English (HKLM\...\{28B89EEF-0001-0409-1102-CF3F3A09B77D}) (Version: 21.0.52.0 - Autodesk) Hidden
Autodesk Advanced Material Library Image Library 2017 (HKLM-x32\...\{8ED2ED41-4455-449D-993C-751C039089B9}) (Version: 15.11.3.0 - Autodesk)
Autodesk App Manager 2016-2017 (HKLM-x32\...\{C0954809-F5DC-426C-847E-8409DE14E4C0}) (Version: 2.2.0 - Autodesk)
Autodesk AutoCAD 2017 - English (HKLM\...\AutoCAD 2017 - English) (Version: 21.0.52.0 - Autodesk)
Autodesk AutoCAD Performance Feedback Tool 1.2.5 (HKLM-x32\...\{8600F844-9AA5-412E-B6F2-F9C6CBCFD268}) (Version: 1.2.5.0 - Autodesk)
Autodesk BIM 360 Glue AutoCAD 2017 Add-in 64 bit (HKLM\...\{276A67E0-71EB-4827-B5F7-2ACF02BC1A5B}) (Version: 4.37.6853 - Autodesk)
Autodesk License Service (x64) - 3.1 (HKLM\...\{EB6FE58F-8576-4272-BB9C-6B47D9EDFA4D}) (Version: 3.1.26.0 - Autodesk)
Autodesk Material Library 2017 (HKLM-x32\...\{8FB9F735-D64C-4991-8D91-4CDDAB1ABDEE}) (Version: 15.11.3.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2017 (HKLM-x32\...\{3FBFBC43-9882-43FA-B979-2D53896747B3}) (Version: 15.11.3.0 - Autodesk)
Autodesk ReCap 360 (HKLM\...\{5F0F7049-0000-1033-0102-73A6DA3D7FA6}) (Version: 3.0.0.52 - Autodesk) Hidden
Autodesk ReCap 360 (HKLM\...\Autodesk ReCap 360) (Version: 3.0.0.52 - Autodesk)
B209a-m (HKLM-x32\...\{E617721F-B66C-4D5A-AA2A-B2D60820CDC3}) (Version: 140.0.690.000 - Hewlett-Packard) Hidden
BufferChm (HKLM-x32\...\{FA0FF682-CC70-4C57-93CD-E276F3E7537E}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden
CyberLink DVD Suite Deluxe (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 7.0.2823 - CyberLink Corp.)
Destinations (HKLM-x32\...\{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}) (Version: 140.0.77.000 - Hewlett-Packard) Hidden
DeviceDiscovery (HKLM-x32\...\{1458BB78-1DC5-4BC0-B9A3-2B644F5A8105}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden
DVD Menu Pack for HP MediaSmart Video (HKLM-x32\...\{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}) (Version: 4.1.4030 - Hewlett-Packard) Hidden
DVD Menu Pack for HP MediaSmart Video (HKLM-x32\...\InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}) (Version: 4.1.4030 - Hewlett-Packard)
eMule (HKLM-x32\...\eMule) (Version: - )
EPSON L1300 Series Printer Uninstall (HKLM\...\EPSON L1300 Series) (Version: - SEIKO EPSON Corporation)
FARO LS 1.1.505.0 (64bit) (HKLM-x32\...\{8834451B-6209-4E02-9EF4-4EF9E3C1F70F}) (Version: 5.5.0.44203 - FARO Scanner Production)
Ferramenta de Carregamento do Windows Live (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 59.0.3071.115 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.23.0 - BonanzaDeals) Hidden <==== ATENÇÃO
GPBaseService2 (HKLM-x32\...\{BB3447F6-9553-4AA9-960E-0DB5310C5779}) (Version: 140.0.211.000 - Hewlett-Packard) Hidden
Hewlett-Packard ACLM.NET v1.2.2.3 (HKLM-x32\...\{6F340107-F9AA-47C6-B54C-C3A19F11553F}) (Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Odometer (HKLM-x32\...\{B8AC1A89-FFD1-4F97-8051-E505A160F562}) (Version: 2.10.0000 - Hewlett-Packard)
HP Photosmart Plus B209a-m All-in-One Driver Software 14.0 Rel. 6 (HKLM\...\{B2DAB009-8236-48A0-AD7F-E940F5AB1578}) (Version: 14.0 - HP)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Support Assistant (HKLM-x32\...\{4780AF24-213D-4187-86F2-0014A6D6077B}) (Version: 8.4.19.3 - HP Inc.)
HP Support Information (HKLM-x32\...\{B9A03B7B-E0FF-4FB3-BA83-762E58A1B0AA}) (Version: 10.1.0002 - Hewlett-Packard)
HP Support Solutions Framework (HKLM-x32\...\{86EF78FF-2551-4144-A4C4-37ECEA451F88}) (Version: 12.7.22.13 - HP Inc.)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HP Vision Hardware Diagnostics (HKLM\...\{D79A02E9-6713-4335-9668-AAC7474C0C0E}) (Version: 2.1.2.27173 - Hewlett-Packard)
HPPhotoGadget (HKLM-x32\...\{CAE4213F-F797-439D-BD9E-79B71D115BE3}) (Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (HKLM-x32\...\{150B6201-E9E6-4DFB-960E-CCBD53FBDDED}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden
HPSSupply (HKLM-x32\...\{AC35A885-0F8F-4857-B7DA-6E8DFB43E6B3}) (Version: 140.0.211.000 - Hewlett-Packard) Hidden
Importação do SketchUp 2016-2017 (HKLM-x32\...\{063925DB-9D8C-48E2-8F04-1B7038B6C783}) (Version: 2.2.0 - Autodesk)
Instalação do DivX (HKLM-x32\...\DivX Setup) (Version: 2.6.1.8 - DivX, LLC)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.5.0.1026 - Intel Corporation)
Internet Speed Tracker Internet Explorer Toolbar (HKLM-x32\...\InternetSpeedTracker_9tbar Uninstall Internet Explorer) (Version: - Mindspark Interactive Network) <==== ATENÇÃO
IRPF2014 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País (HKLM-x32\...\IRPF2014) (Version: 1.0 - Receita Federal do Brasil)
IRPF2015 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País (HKLM-x32\...\IRPF2015) (Version: 1.2 - Receita Federal do Brasil)
IRPF2016 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País (HKLM-x32\...\IRPF2016) (Version: 1.2 - Receita Federal do Brasil)
IRPF2017 (HKLM-x32\...\IRPF2017) (Version: 1.1 - Receita Federal do Brasil)
Java 8 Update 77 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218077F0}) (Version: 8.0.770.3 - Oracle Corporation)
Java technology allows you to work and play in a secure computing environment. Packages (HKU\S-1-5-21-50200193-3648072811-1416514059-1000\...\Java technology allows you to work and play in a secure computing environment. Packages) (Version: - ) <==== ATENÇÃO
Junk Mail filter update (HKLM-x32\...\{E2DFE069-083E-4631-9B6C-43C48E991DE5}) (Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Malwarebytes versão 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
MarketResearch (HKLM-x32\...\{D360FA88-17C8-4F14-B67F-13AAF9607B12}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.60310.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Movie Theme Pack for HP MediaSmart Video (HKLM-x32\...\{3023EBDA-BF1B-4831-B347-E5018555F26E}) (Version: 4.1.4030 - Hewlett-Packard) Hidden
Movie Theme Pack for HP MediaSmart Video (HKLM-x32\...\InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}) (Version: 4.1.4030 - Hewlett-Packard)
Mozilla Firefox 32.0.3 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 32.0.3 (x86 en-US)) (Version: 32.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 7 Premium (HKLM-x32\...\{A20A58C4-6784-4B4B-86CC-94E2E3671046}) (Version: 7.02.8637 - Nero AG)
Network64 (HKLM\...\{48C0866E-57EB-444C-8371-8E4321066BC3}) (Version: 140.0.215.000 - Hewlett-Packard) Hidden
PDF Complete Special Edition (HKLM-x32\...\PDF Complete) (Version: 3.5.111 - PDF Complete, Inc)
PS_AIO_06_B209a-m_SW_Min (HKLM-x32\...\{CDC8DBA8-37FF-4C82-84FF-DEBEDF93BEC4}) (Version: 140.0.690.000 - Hewlett-Packard) Hidden
QuickTransfer (HKLM-x32\...\{E517094C-06B6-419F-8FFD-EF4F57972130}) (Version: 140.0.98.000 - Hewlett-Packard) Hidden
RealNetworks - Microsoft Visual C++ 2005 Runtime (HKLM-x32\...\{026C3D27-9BE1-46BE-BEAE-6DE38A0F4FBE}) (Version: 8.0 - RealNetworks) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6132 - Realtek Semiconductor Corp.)
Receitanet (HKLM-x32\...\ECC16E3C-16D1-4DC2-9D8A-6AC06B3005A5) (Version: 1.04 - Serpro - Serviço Federal de Processamento de Dados)
Recovery Manager (HKLM-x32\...\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.5.2926 - CyberLink Corp.) Hidden
Revo Uninstaller 1.94 (HKLM-x32\...\Revo Uninstaller) (Version: 1.94 - VS Revo Group)
Samsung Drive Manager (HKLM-x32\...\{9F1A6A24-4901-42F6-A355-5DD2B82E62AE}) (Version: 1.0.148 - Clarus)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.6.0 - SAMSUNG Electronics Co., Ltd.)
Scan (HKLM-x32\...\{06A1D88C-E102-4527-AF70-29FFD7AF215A}) (Version: 140.0.80.000 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
SmartWebPrinting (HKLM-x32\...\{8FF6F5CA-4E30-4E3B-B951-204CAAA2716A}) (Version: 140.0.186.000 - Hewlett-Packard) Hidden
SolutionCenter (HKLM-x32\...\{5DCF0E4B-F8EA-4229-A0BD-5CA6D4AFB749}) (Version: 140.0.213.000 - Hewlett-Packard) Hidden
Status (HKLM-x32\...\{2FB9EA69-51D4-4913-9AD5-762C034DE811}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Suite Shared Configuration CS4 (HKLM-x32\...\{842B4B72-9E8F-4962-B3C1-1C422A5C4434}) (Version: 1.0 - Adobe Systems Incorporated) Hidden
Toolbox (HKLM-x32\...\{292F0F52-B62D-4E71-921B-89A682402201}) (Version: 140.0.428.000 - Hewlett-Packard) Hidden
TrayApp (HKLM-x32\...\{CD31E63D-47FD-491C-8117-CF201D0AFAB5}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Ultimate Codecs Packages (HKU\S-1-5-21-50200193-3648072811-1416514059-1000\...\Ultimate Codecs Packages) (Version: - ) <==== ATENÇÃO
VC80CRTRedist - 8.0.50727.6195 (HKLM-x32\...\{933B4015-4618-4716-A828-5289FC03165F}) (Version: 1.2.0 - DivX, Inc) Hidden
Video Converter (HKU\S-1-5-21-50200193-3648072811-1416514059-1000\...\Video Converter) (Version: - )
Video Converter Packages (HKU\S-1-5-21-50200193-3648072811-1416514059-1000\...\Video Converter Packages) (Version: - ) <==== ATENÇÃO
VideoDownloadConverter Internet Explorer Toolbar (HKLM-x32\...\VideoDownloadConverter_4zbar Uninstall Internet Explorer) (Version: - Mindspark Interactive Network) <==== ATENÇÃO
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
WebReg (HKLM-x32\...\{8EE94FD8-5F52-4463-A340-185D16328158}) (Version: 140.0.212.017 - Hewlett-Packard) Hidden
WiFi Protector (HKLM\...\wifiProt-SL_is1) (Version: 3.0.20.138 - Optimal Software s.r.o)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{9E2EE2F7-33BD-4D30-9E5D-8469A9F32009}) (Version: 14.0.8089.726 - Microsoft Corporation)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
WinZip (HKLM-x32\...\WinZip) (Version: 9.0 SR-1 (6224) - WinZip Computing, Inc.)
WPM18.8.0.212 (HKLM-x32\...\WPM) (Version: 18.8.0.212 - Cherished Technololgy LIMITED) <==== ATENÇÃO
Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team)

==================== Exame Personalizado CLSID (Whitelisted): ==========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

CustomCLSID: HKU\S-1-5-21-50200193-3648072811-1416514059-1000_Classes\CLSID\{6D7AE628-FF41-4CD3-91DD-34825BB1A251}\localserver32 -> C:\Program Files\AutoCAD 2010\acad.exe /Automation => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-50200193-3648072811-1416514059-1000_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\AutoCAD 2010\acad.exe => Nenhum Arquivo
CustomCLSID: HKU\S-1-5-21-50200193-3648072811-1416514059-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\AutoCAD 2010\acadficn.dll => Nenhum Arquivo
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Nenhum Arquivo
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2016-02-07] (Autodesk, Inc.)
ContextMenuHandlers01: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2016-02-07] (Autodesk)
ContextMenuHandlers01: [Cover Designer] -> {73FCA462-9BD5-4065-A73F-A8E5F6904EF7} => -> Nenhum Arquivo
ContextMenuHandlers01: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-15] (Alexander Roshal)
ContextMenuHandlers01: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => -> Nenhum Arquivo
ContextMenuHandlers01: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => -> Nenhum Arquivo
ContextMenuHandlers03: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Nenhum Arquivo
ContextMenuHandlers03: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers04: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => -> Nenhum Arquivo
ContextMenuHandlers04: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => -> Nenhum Arquivo
ContextMenuHandlers05: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2010-08-25] (Intel Corporation)
ContextMenuHandlers06: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers06: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-15] (Alexander Roshal)
ContextMenuHandlers06: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => -> Nenhum Arquivo
ContextMenuHandlers06: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => -> Nenhum Arquivo

==================== Tarefas Agendadas (Whitelisted) =============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

Task: {05BBB3B4-5F07-416C-A53D-A9B0F6553D59} - System32\Tasks\AutoKMSDaily => C:\WINDOWS\AutoKMS\AutoKMS.exe [2013-10-28] ()
Task: {34EA407D-F53A-4BAF-A96F-03A90A769C57} - System32\Tasks\Games\UpdateCheck_S-1-5-21-50200193-3648072811-1416514059-1000
Task: {4796C077-4DF2-4F44-94D4-0C47795AE7A4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {4AC37961-A78B-484F-AB9E-A1231F281CF5} - System32\Tasks\{2197E4A9-BA7E-462F-9344-A7FC05D1B39F} => pcalua.exe -a "C:\Program Files (x86)\eMule\Uninstall.exe"
Task: {577CF881-F0F4-4158-8E89-E3C1C2B067A3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2017-06-22] (HP Inc.)
Task: {609AA1E3-0AC2-444F-976D-458C5227F293} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-07-11] (Adobe Systems Incorporated)
Task: {6103C5BB-93BE-4600-8C6D-F011B531A3A8} - System32\Tasks\EPSON L1300 Series Invitation {67E2F4A3-1FD1-4228-B1EE-CEF93F9DBF72} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSLVE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {7C72DF99-0B56-4F81-B131-856E7D54D91D} - System32\Tasks\Baidu PC Faster Update => $szInstallingDir\Updater.exe
Task: {9301137A-C8D0-4676-9B44-A66140034A5C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-04-07] (HP Inc.)
Task: {A0082F2D-C0E4-4356-A195-161BDA2E155A} - System32\Tasks\HPCeeScheduleForTadeu => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2016-05-12] (HP Development Company, L.P.)
Task: {A29D68B4-4C19-401D-BB5B-2F490199115C} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-07-14] (AVAST Software)
Task: {A3C2A7E5-E55A-4CCD-AABF-2A2C12D6C0CE} - System32\Tasks\AppCloudUpdater => C:\Users\Tadeu\AppData\Roaming\APPCLO~1\UPDATE~1\UPDATE~1.EXE <==== ATENÇÃO
Task: {A9D32B1A-DEEE-4FE4-84DF-3ED2001C2CF4} - System32\Tasks\{F56DFEB6-12B1-4FF9-9A97-8BEC8C2C5FB2} => pcalua.exe -a "C:\Arquivos de Programas RFB\IRPF2017\IRPF2017.exe" -d "C:\Arquivos de Programas RFB\IRPF2017"
Task: {B0F84451-F785-4291-BBD2-5C1B5374194D} - System32\Tasks\{75753087-D8AE-4C23-B41C-562481779E59} => pcalua.exe -a "C:\Arquivos de Programas RFB\IRPF2016\IRPF2016.exe" -d "C:\Arquivos de Programas RFB\IRPF2016"
Task: {B6A35B3D-59BF-42B9-AEA1-A11BB059DA9D} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-12-06] (HP Inc.)
Task: {BC28B1BB-F15D-4C69-A81A-8AE3D067BD8E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-04-07] (HP Inc.)
Task: {BEFADD7C-8965-41DA-B8F7-D2AB8C17D87D} - System32\Tasks\AutoKMS => C:\WINDOWS\AutoKMS\AutoKMS.exe [2013-10-28] ()
Task: {C6A5C48F-785C-4077-A0D2-40DA382DB103} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {C849E78A-FFBC-4119-9380-3C2D29B6E13E} - System32\Tasks\WiFiProtLauncher => C:\Program Files (x86)\WiFi Protector\wifiProtService.exe [2013-10-18] ()
Task: {DEEE9EA5-D611-4734-BFF2-EC9A7992C5ED} - System32\Tasks\EPSON L1300 Series Update {67E2F4A3-1FD1-4228-B1EE-CEF93F9DBF72} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSLVE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {EA3EADAC-5EE2-4BF6-B542-7226BC4FD223} - System32\Tasks\RecoveryCDWin7 => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe
Task: {ECCF5AA4-3E9B-4190-85B3-440B4725C215} - \gameo_update -> Nenhum Arquivo <==== ATENÇÃO
Task: {F10189F8-F40E-4D59-B5FF-AAB08E0B8DE4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-06] (HP Inc.)
Task: {FAC764CF-804A-41AF-92F3-0AE8D319EBB4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2017-05-25] (HP Inc.)

(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)

Task: C:\Windows\Tasks\AppCloudUpdater.job => C:\Users\Tadeu\AppData\Roaming\APPCLO~1\UPDATE~1\UPDATE~1.EXE <==== ATENÇÃO
Task: C:\Windows\Tasks\AutoKMS.job => C:\WINDOWS\AutoKMS\AutoKMS.exe
Task: C:\Windows\Tasks\AutoKMSDaily.job => C:\WINDOWS\AutoKMS\AutoKMS.exe
Task: C:\Windows\Tasks\EPSON L1300 Series Invitation {67E2F4A3-1FD1-4228-B1EE-CEF93F9DBF72}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSLVE.EXE
Task: C:\Windows\Tasks\EPSON L1300 Series Update {67E2F4A3-1FD1-4228-B1EE-CEF93F9DBF72}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSLVE.EXE:/EXE:{67E2F4A3-1FD1-4228-B1EE-CEF93F9DBF72} /F:UpdateSISTEMAĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\Windows\Tasks\HPCeeScheduleForTadeu.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Atalhos & WMI ========================

(As entradas podem ser listadas para serem restauradas ou removidas.)


==================== Módulos Carregados (Whitelisted) ==============

2010-01-30 01:40 - 2010-01-30 01:40 - 04254560 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2017-07-03 09:37 - 2017-06-23 00:21 - 03807064 _____ () C:\Program Files (x86)\Google\Chrome\Application\59.0.3071.115\libglesv2.dll
2017-07-03 09:37 - 2017-06-23 00:21 - 00100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\59.0.3071.115\libegl.dll
2017-07-14 15:35 - 2017-06-15 11:16 - 00061944 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\QtSolutions_Service-head.dll
2017-07-14 15:35 - 2017-06-15 11:15 - 00110584 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qjson0.dll
2010-01-30 01:41 - 2010-01-30 01:41 - 04254560 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2017-07-14 15:35 - 2017-04-04 16:11 - 00052224 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qoauth_Ad_1.dll
2017-07-14 15:35 - 2017-04-04 16:11 - 00742400 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qca_Ad_2.dll
2017-07-14 15:35 - 2017-04-04 16:11 - 00195584 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\qjson_Ad_0.dll
2017-07-14 15:35 - 2017-04-04 16:11 - 00043912 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\QtSolutions_MFCMigrationFramework_Ad_2.dll
2017-07-14 15:35 - 2017-06-15 10:49 - 00279976 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\pt-BR\AdWingManRes.dll
2017-07-14 15:35 - 2017-02-14 03:39 - 40640808 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\libcef.dll
2017-07-14 15:35 - 2017-02-14 03:39 - 00912384 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\libglesv2.dll
2017-07-14 15:35 - 2017-02-14 03:39 - 00134144 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\libegl.dll
2017-07-14 15:35 - 2017-02-14 03:39 - 00950272 _____ () C:\Program Files (x86)\Autodesk\Autodesk Desktop App\acwebbrowser\ffmpegsumo.dll
2014-04-30 09:32 - 2014-04-30 09:32 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\33da89e47cf89e3cb7e50b71ad851c31\IsdiInterop.ni.dll
2010-10-01 15:53 - 2011-04-30 00:28 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

==================== Alternate Data Streams (Whitelisted) =========

(Se uma entrada for incluída na fixlist, somente o ADS será removido.)


==================== Modo de Segurança (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Associação (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)

HKU\S-1-5-21-50200193-3648072811-1416514059-1000\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"

==================== Internet Explorer confiável/restrito ===============

(Se uma entrada for incluída na fixlist, será removida do Registro.)


==================== Hosts Conteúdo: ===============================

(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)

2009-07-13 23:34 - 2009-06-10 18:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts


==================== Outras Áreas ============================

(Atualmente não há nenhuma correção automática para esta seção.)

HKU\S-1-5-21-50200193-3648072811-1416514059-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Tadeu\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.

==================== MSCONFIG/TASK MANAGER ítens desabilitados ==

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk => C:\Windows\pss\Adobe Gamma Loader.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^RealTimes.lnk => C:\Windows\pss\RealTimes.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Samsung Drive Manager Real-Time.lnk => C:\Windows\pss\Samsung Drive Manager Real-Time.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WinZip Quick Pick.lnk => C:\Windows\pss\WinZip Quick Pick.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Tadeu^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2010 Screen Clipper and Launcher.lnk => C:\Windows\pss\OneNote 2010 Screen Clipper and Launcher.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Tadeu^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^PC App Store Uninstall 3.8.8.1435.lnk => C:\Windows\pss\PC App Store Uninstall 3.8.8.1435.lnk.Startup
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: AdobeCS4ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: AnyProtect => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe
MSCONFIG\startupreg: BCSSync => "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} => "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
MSCONFIG\startupreg: ConvertAd => C:\Users\Tadeu\AppData\Local\ConvertAd\ConvertAd.exe
MSCONFIG\startupreg: DivXMediaServer => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
MSCONFIG\startupreg: eMuleAutoStart => C:\Program Files (x86)\eMule\emule.exe -AutoStart
MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: hpsysdrv => c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
MSCONFIG\startupreg: mobilegeni daemon => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
MSCONFIG\startupreg: PDF Complete => C:\Program Files (x86)\PDF Complete\pdfsty.exe
MSCONFIG\startupreg: Persistence => C:\Windows\system32\igfxpers.exe
MSCONFIG\startupreg: RealDownloader => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
MSCONFIG\startupreg: Samsung Drive Manager => C:\Program Files (x86)\Clarus\Samsung Drive Manager\Drive Manager.exe -Hide
MSCONFIG\startupreg: SmartMenu => C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe /background
MSCONFIG\startupreg: swg => "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
MSCONFIG\startupreg: WiFi Protector => C:\Program Files (x86)\WiFi Protector\WiFiProtLauncher.exe

==================== Regras do Firewall (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

FirewallRules: [{DA560020-957F-4614-8836-CDB3B2FB51DC}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartMusic.exe
FirewallRules: [{520AEBA6-6F54-49F8-A8A4-6441B285C90F}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartPhoto.exe
FirewallRules: [{7C0EE91C-A642-4694-9128-89BEED62C663}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartVideo.exe
FirewallRules: [{8CE36394-805A-47C2-ADB1-1C5B99A49482}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\Media\DVD\TSMAgent.exe
FirewallRules: [{4DD738CA-F5A4-45FF-A950-BD4AE30FBE20}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\Media\DVD\Kernel\CLML\CLMLSvc.exe
FirewallRules: [{D781A492-395D-40E0-93C2-4436A1A2E160}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPDVDSmart.exe
FirewallRules: [{85A706CB-27DC-4B3D-8627-98A2DD4DB812}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Music\HPTouchSmartMusic.exe
FirewallRules: [{03AED2CC-B578-4ACE-AABC-AA1F567F9B3A}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\wlcsdk.exe
FirewallRules: [{836C6B6D-4A6E-49B8-A8EE-0A90598B42A4}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{286976F9-DC7D-48E3-A33E-3D5C7EF300FE}] => (Allow) svchost.exe
FirewallRules: [{88CF3154-0196-487C-AE15-EE5B665B5E6E}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [TCP Query User{4B00DFC2-3834-481A-BA54-925BACDB5C3F}C:\windows\kmsemulator.exe] => (Allow) C:\windows\kmsemulator.exe
FirewallRules: [UDP Query User{AF6CDAB8-5991-4908-99E0-75F8081B907A}C:\windows\kmsemulator.exe] => (Allow) C:\windows\kmsemulator.exe
FirewallRules: [TCP Query User{709C2748-7D75-4954-9A8A-DBF0D4F9DAE2}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe
FirewallRules: [UDP Query User{7511A552-D7CA-4AB3-9DDF-95F0AACAF9F5}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe
FirewallRules: [{1815519C-3F6A-418D-8A7D-4C46BC6E353C}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{4396240B-7979-4B02-A3FD-53D19433983E}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{467F779A-F550-4CED-B413-110E85820651}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{B5068533-B6D6-4E1D-B5B0-54E3BFF265C4}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{DB661CEA-70F0-47BB-A023-B88589584B7C}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{7A51C225-603C-44BE-BB83-25388A282225}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{6776F1A9-E0AB-403B-AC46-EA29B34F1421}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{04005B46-826D-4491-8B24-FC3457309967}] => (Allow) C:\Program Files (x86)\common files\hp\digital imaging\bin\hpqphotocrm.exe
FirewallRules: [{CD089B71-EBD5-49F6-9BA8-BE005A73C9C5}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{89A44A3C-7921-410D-86A7-B0C0A48F4650}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{43A2A75E-6C0C-4E14-878A-0979D6BE910A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{B9CA5511-8A83-4D06-A320-B9A3B4D0CCB7}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{B2613C7F-E608-48BC-BE04-6B8DF9E3D15D}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [{AAF3FF5D-0B1E-462B-B21B-71EC88010E51}] => (Allow) C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [{A0FB7A56-1E46-4860-94FE-49E07E395962}] => (Allow) LPort=5353
FirewallRules: [{BE3E4D83-EDB6-4D9D-BD1B-F5E0BCAEC8D2}] => (Allow) C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe
FirewallRules: [{4BE29ACB-66F9-45E1-9E86-2FB423D2D5A7}] => (Allow) C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe
FirewallRules: [TCP Query User{E860F9B2-EB70-4304-9862-2C9C439AA61F}F:\backup\c\tadeu - diversos\emulenovo\emule.exe] => (Allow) F:\backup\c\tadeu - diversos\emulenovo\emule.exe
FirewallRules: [UDP Query User{E68D4420-43ED-426F-B8FB-BE0AC2A1EFC9}F:\backup\c\tadeu - diversos\emulenovo\emule.exe] => (Allow) F:\backup\c\tadeu - diversos\emulenovo\emule.exe
FirewallRules: [TCP Query User{6971638A-0389-4834-8005-F8C0B649BD9E}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe
FirewallRules: [UDP Query User{B2FF4696-101C-4A0C-839F-F149FDE81451}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe
FirewallRules: [{F35DCFEF-78FC-463D-AE6C-0666AB799183}] => (Allow) C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\dtuser.exe
FirewallRules: [{BE889C0A-9C4A-40C8-8E1C-9A28951E0AE0}] => (Allow) C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\dtuser.exe
FirewallRules: [{D35533E7-B0C1-4D0D-8EE8-48DB164F4FDA}] => (Allow) C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~2\IE\dtuser.exe
FirewallRules: [{CE1AB9D3-9793-43EC-A61A-564A7A8E9632}] => (Allow) C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~2\IE\dtuser.exe
FirewallRules: [{35FFF66C-0E54-433A-8EA6-3F48E3122016}] => (Allow) C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~3\IE\dtuser.exe
FirewallRules: [{93096A5F-822B-4C20-8BFD-637F22A2F99F}] => (Allow) C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~3\IE\dtuser.exe
FirewallRules: [TCP Query User{3F91E412-AE01-493C-9489-F61863697978}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{0B20DB67-44B2-40F8-8B78-2CD5BC6D173F}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{BABE253A-FC36-4191-996A-20EDD01E468A}] => (Allow) C:\Users\Tadeu\AppData\Local\iLivid\iLivid.exe
FirewallRules: [{35542431-1ED0-4E65-883F-92B9C614B65C}] => (Allow) C:\Users\Tadeu\AppData\Local\iLivid\iLivid.exe
FirewallRules: [{65FF5A53-C740-4F24-BF33-DE92EDB905EE}] => (Allow) C:\Users\Tadeu\AppData\Roaming\Allmyapps\Allmyapps.exe
FirewallRules: [{1BE06A9C-DDB6-4471-B06C-5731E063EB5F}] => (Allow) C:\Program Files (x86)\baidu\Baidu Browser\Spark.exe
FirewallRules: [{1B0B93D3-C828-4869-A367-69626E5D6395}] => (Allow) C:\Program Files (x86)\baidu\Baidu Browser\Spark.exe
FirewallRules: [TCP Query User{04D58361-A476-44F0-B0EE-CD1CA609DA84}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe
FirewallRules: [UDP Query User{3AF2991E-E770-4098-8CEB-FD9E484A1C86}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe
FirewallRules: [TCP Query User{95A61E72-8D9A-4B3E-BB0D-C24B8882B15D}C:\program files (x86)\java\jre1.8.0_77\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_77\bin\javaw.exe
FirewallRules: [UDP Query User{F676651E-5D2F-4620-8B45-EC7209DD22C4}C:\program files (x86)\java\jre1.8.0_77\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_77\bin\javaw.exe
FirewallRules: [TCP Query User{B32CE8AD-92B6-4D3A-B295-64961CDEAD82}C:\program files (x86)\java\jre1.8.0_77\launch4j-tmp\irpf2017.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_77\launch4j-tmp\irpf2017.exe
FirewallRules: [UDP Query User{A6ED3095-2CB4-4D1A-AE62-9F9AC7BFE79C}C:\program files (x86)\java\jre1.8.0_77\launch4j-tmp\irpf2017.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_77\launch4j-tmp\irpf2017.exe
FirewallRules: [TCP Query User{D430E2AB-ED2C-4FE5-A68F-6B980B315359}C:\program files (x86)\java\jre1.8.0_77\launch4j-tmp\irpf2017.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_77\launch4j-tmp\irpf2017.exe
FirewallRules: [UDP Query User{51CD2F14-9980-4826-897C-B4615BEAE52C}C:\program files (x86)\java\jre1.8.0_77\launch4j-tmp\irpf2017.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_77\launch4j-tmp\irpf2017.exe
FirewallRules: [{005EC2CF-2B27-42F9-A0FC-E01E17BAF629}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{1CFB3F7A-900C-4C1C-B1A5-A04B9C144C05}] => (Allow) C:\Users\Tadeu\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{4D13E4B9-48CA-4BC4-8415-8CCC9E8A4226}] => (Allow) C:\Users\Tadeu\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{A86FEEF2-B481-44FC-B341-EAF18E0FD262}] => (Allow) C:\Users\Tadeu\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{986AA9D4-313B-4BEC-A41E-5E90D57349CD}] => (Allow) C:\Users\Tadeu\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{FFB00B7D-8349-416E-B874-A6FE33835A5B}] => (Allow) C:\Users\Tadeu\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{24B52E87-615D-4F31-B301-118C56370F70}] => (Allow) C:\Users\Tadeu\AppData\Roaming\uTorrent\uTorrent.exe

==================== Pontos de Restauração =========================

30-05-2017 09:49:19 Ponto de Verificação Agendado
06-06-2017 12:56:10 Ponto de Verificação Agendado
20-06-2017 14:25:59 Ponto de Verificação Agendado
03-07-2017 10:02:12 Ponto de Verificação Agendado
10-07-2017 10:08:49 Ponto de Verificação Agendado
14-07-2017 15:12:19 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
14-07-2017 15:13:20 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
14-07-2017 15:14:55 Instalador de Módulos do Windows
14-07-2017 15:16:43 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026
14-07-2017 15:17:29 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026
14-07-2017 15:18:28 DirectX instalado

==================== Dispositivos Apresentando Falhas No Gerenciador =============

Name: Adaptador de Túnel Teredo da Microsoft
Description: Adaptador de Túnel Teredo da Microsoft
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Erros no Log de eventos: =========================

Erros em Aplicativos:
==================
Error: (07/14/2017 04:02:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: AdMigrator.exe, versão: 21.0.52.0, carimbo de hora: 0x56b6c01f
Nome do módulo de falhas: KERNELBASE.dll, versão: 6.1.7600.17206, carimbo de hora: 0x50e669a2
Código de exceção: 0xe0434352
Deslocamento com falha: 0x000000000000ac3d
Identificação do processo com falha: 0x8bc
Hora de início do aplicativo com falha: 0x01d2fcd3b5a4fc94
Caminho do aplicativo com falha: C:\Program Files\Autodesk\AutoCAD 2017\AdMigrator.exe
FCaminho do módulo de falhas: C:\Windows\system32\KERNELBASE.dll
Identificação do Relatório: f36baf2f-68c6-11e7-9003-643150f4b270

Error: (07/14/2017 04:02:16 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: AdMigrator.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.IO.FileNotFoundException
Stack:
at Autodesk.AutoCAD.ADMigrator.Program.Main(System.String[])

Error: (07/14/2017 04:00:54 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: AdMigrator.exe, versão: 21.0.52.0, carimbo de hora: 0x56b6c01f
Nome do módulo de falhas: KERNELBASE.dll, versão: 6.1.7600.17206, carimbo de hora: 0x50e669a2
Código de exceção: 0xe0434352
Deslocamento com falha: 0x000000000000ac3d
Identificação do processo com falha: 0x127c
Hora de início do aplicativo com falha: 0x01d2fcd38280f5b2
Caminho do aplicativo com falha: C:\Program Files\Autodesk\AutoCAD 2017\AdMigrator.exe
FCaminho do módulo de falhas: C:\Windows\system32\KERNELBASE.dll
Identificação do Relatório: c282faaa-68c6-11e7-9003-643150f4b270

Error: (07/14/2017 04:00:52 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: AdMigrator.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.IO.FileNotFoundException
Stack:
at Autodesk.AutoCAD.ADMigrator.Program.Main(System.String[])

Error: (07/14/2017 03:27:37 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Failed to compile C:\Program Files\Autodesk\AutoCAD 2017\acmgd.dll because this image is a 64bit assembly; try using 64bit ngen instead.

Error: (07/14/2017 03:27:20 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Failed to compile C:\Program Files\Autodesk\AutoCAD 2017\accoremgd.dll because this image is a 64bit assembly; try using 64bit ngen instead.

Error: (07/14/2017 02:33:51 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: Tadeu-HP)
Description: O aplicativo ou serviço 'Malwarebytes Service' não pôde ser encerrado.

Error: (07/12/2017 09:01:03 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: DllHost.exe, versão: 6.1.7600.16385, carimbo de hora: 0x4a5bc6b7
Nome do módulo de falhas: xvidcore.dll, versão: 0.0.0.0, carimbo de hora: 0x4dda10d7
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00042d88
Identificação do processo com falha: 0xb30
Hora de início do aplicativo com falha: 0x01d2fb0688777339
Caminho do aplicativo com falha: C:\Windows\SysWOW64\DllHost.exe
FCaminho do módulo de falhas: C:\Windows\SysWOW64\xvidcore.dll
Identificação do Relatório: c6eba66e-66f9-11e7-a50f-643150f4b270

Error: (07/12/2017 08:58:51 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: DllHost.exe, versão: 6.1.7600.16385, carimbo de hora: 0x4a5bca54
Nome do módulo de falhas: xvidcore.dll, versão: 0.0.0.0, carimbo de hora: 0x4dda10a3
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00000000000072c3
Identificação do processo com falha: 0x1700
Hora de início do aplicativo com falha: 0x01d2fb063a0d5d6a
Caminho do aplicativo com falha: C:\Windows\system32\DllHost.exe
FCaminho do módulo de falhas: C:\Windows\system32\xvidcore.dll
Identificação do Relatório: 77d6cf2f-66f9-11e7-a50f-643150f4b270

Error: (07/12/2017 08:58:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome de aplicativo com falha: DllHost.exe, versão: 6.1.7600.16385, carimbo de hora: 0x4a5bca54
Nome do módulo de falhas: xvidcore.dll, versão: 0.0.0.0, carimbo de hora: 0x4dda10a3
Código de exceção: 0xc0000005
Deslocamento com falha: 0x00000000000072c3
Identificação do processo com falha: 0x1668
Hora de início do aplicativo com falha: 0x01d2fb0638bdce10
Caminho do aplicativo com falha: C:\Windows\system32\DllHost.exe
FCaminho do módulo de falhas: C:\Windows\system32\xvidcore.dll
Identificação do Relatório: 7689149c-66f9-11e7-a50f-643150f4b270


Erros de Sistema:
=============
Error: (07/14/2017 03:38:19 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço WiFi Protector Service devido ao seguinte erro:
O serviço não respondeu à requisição de início ou controle em tempo hábil.

Error: (07/14/2017 03:38:19 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço WiFi Protector Service.

Error: (07/14/2017 02:29:38 PM) (Source: Disk) (EventID: 11) (User: )
Description: O driver detectou um erro de controlador em \Device\Harddisk2\DR3.

Error: (07/14/2017 02:25:59 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço WiFi Protector Service devido ao seguinte erro:
O serviço não respondeu à requisição de início ou controle em tempo hábil.

Error: (07/14/2017 02:25:59 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço WiFi Protector Service.

Error: (07/13/2017 12:05:04 PM) (Source: Disk) (EventID: 11) (User: )
Description: O driver detectou um erro de controlador em \Device\Harddisk2\DR3.

Error: (07/13/2017 12:05:03 PM) (Source: Disk) (EventID: 11) (User: )
Description: O driver detectou um erro de controlador em \Device\Harddisk2\DR3.

Error: (07/13/2017 08:52:28 AM) (Source: Disk) (EventID: 11) (User: )
Description: O driver detectou um erro de controlador em \Device\Harddisk2\DR2.

Error: (07/13/2017 08:44:41 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço WiFi Protector Service devido ao seguinte erro:
O serviço não respondeu à requisição de início ou controle em tempo hábil.

Error: (07/13/2017 08:44:41 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço WiFi Protector Service.


==================== Informações da Memória ===========================

Processador: Intel(R) Core(TM) i3 CPU 550 @ 3.20GHz
Percentagem de memória em uso: 78%
RAM física total: 3767.08 MB
RAM física disponível: 825.28 MB
Virtual Total: 7532.3 MB
Virtual disponível: 4389.61 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:918.98 GB) (Free:597.9 GB) NTFS ==>[sistema com componentes de inicialização (obtido através de drive)]
Drive d: (HP_RECOVERY) (Fixed) (Total:12.44 GB) (Free:1.52 GB) NTFS ==>[sistema com componentes de inicialização (obtido através de drive)]
Drive f: (PAULA MOREL) (Removable) (Total:3.73 GB) (Free:0.73 GB) FAT32

==================== MBR & Tabela de Partições ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 995800BD)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=919 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=12.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 3.7 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Fim de Addition.txt ============================