Publicité
Publicité
Format du document : text/plain
Prévisualisation
Resultado do exame Adicional Farbar Recovery Scan Tool (x86) Versão: 09-12-2017
Executado por Kelia (09-12-2017 21:33:49)
Executando a partir de C:\Users\Kelia\Downloads
Microsoft Windows 7 Ultimate (X86) (2015-11-11 18:54:18)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-1125590694-2817841431-2760037150-500 - Administrator - Disabled)
Convidado (S-1-5-21-1125590694-2817841431-2760037150-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1125590694-2817841431-2760037150-1002 - Limited - Enabled)
Kelia (S-1-5-21-1125590694-2817841431-2760037150-1000 - Administrator - Enabled) => C:\Users\Kelia
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.3.183.5 - Adobe Systems Incorporated)
Adobe Flash Player 10 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 10.3.183.5 - Adobe Systems Incorporated)
Adobe Reader X - Português (HKLM\...\{AC76BA86-7AD7-1046-7B44-AA0000000001}) (Version: 10.0.0 - Adobe Systems Incorporated)
Apple Mobile Device Support (HKLM\...\{9A629DCB-415D-4A50-85B9-5C2E4F8F74A8}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 17.8.2318 - AVAST Software)
Bonjour (HKLM\...\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.)
Brother MFL-Pro Suite MFC-7860DW (HKLM\...\{3ACCCFB3-7B17-4E9F-ACB0-46868FCD4487}) (Version: 1.1.3.0 - Brother Industries, Ltd.)
CCleaner (HKLM\...\CCleaner) (Version: 3.08 - Piriform)
DLL-Files.com Client (HKLM\...\DA71BA65-680A-4212-9150-6239217B53DC_DLL-Files.c~79141F26_is1) (Version: 2.3.0.4908 - DLL-Files.com Client)
Facebook Gameroom 1.3.1.3 (HKLM\...\{7E155A45-DE1A-46E0-A6B2-10FE1D8501FC}) (Version: 1.3.1.3 - Facebook)
Google Chrome (HKLM\...\Google Chrome) (Version: 62.0.3202.94 - Google Inc.)
Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
Google Update Helper (HKLM\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.2.183.39 - Google Inc.) Hidden
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation)
Intel(R) TV Wizard (HKLM\...\TVWiz) (Version: - Intel Corporation)
IRPF2016 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País (HKLM\...\IRPF2016) (Version: 1.2 - Receita Federal do Brasil)
Java 8 Update 91 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.14 - Oracle Corporation)
Java(TM) 6 Update 26 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216026FF}) (Version: 6.0.260 - Oracle)
K-Lite Mega Codec Pack 7.6.0 (HKLM\...\KLiteCodecPack_is1) (Version: 7.6.0 - )
ManyCam 5.0.4 (HKLM\...\ManyCam) (Version: 5.0.4 - Visicom Media Inc.)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.11.25325 (HKLM\...\{404c9c27-8377-4fd1-b607-7ca635db4e49}) (Version: 14.11.25325.0 - Microsoft Corporation)
Mozilla Firefox 6.0 (x86 pt-BR) (HKLM\...\Mozilla Firefox 6.0 (x86 pt-BR)) (Version: 6.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 7 Premium (HKLM\...\{293C9DF5-7669-4826-BBB2-E1F182D71046}) (Version: 7.02.8631 - Nero AG)
Origin (HKLM\...\Origin) (Version: 10.5.8.11002 - Electronic Arts, Inc.)
Pacote de Idiomas do Microsoft .NET Framework 4 Client Profile - Português (Brasil) (HKLM\...\Microsoft .NET Framework 4 Client Profile PTB Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Receitanet (HKLM\...\ECC16E3C-16D1-4DC2-9D8A-6AC06B3005A5) (Version: 1.07 - Serpro - Serviço Federal de Processamento de Dados)
SafeZone Stable 4.58.2552.909 (HKLM\...\SafeZone 4.58.2552.909) (Version: 4.58.2552.909 - Avast Software) Hidden
Spotify (HKU\S-1-5-21-1125590694-2817841431-2760037150-1000\...\Spotify) (Version: 1.0.65.320.gac7a8e02 - Spotify AB)
Suporte para Aplicativos Apple (32-bit) (HKLM\...\{C5815ACF-FD34-4553-8A22-C7411B7E662B}) (Version: 4.1.1 - Apple Inc.)
The Sims™ 3 (HKLM\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.69.42.024017 - Electronic Arts Inc.)
The Sims™ 3 Ambições (HKLM\...\{910F4A29-1134-49E0-AD8B-56E4A3152BD1}) (Version: 4.0.87 - Electronic Arts)
The Sims™ 3 Estações (HKLM\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}_The Sims 3 Seasons) (Version: 1.0.0.0 - Electronic Arts Inc.)
The Sims™ 3 Ilha Paradisíaca (HKLM\...\{DB21639E-FE55-432C-BCA2-0C5249E3F79E}) (Version: 19.0.101 - Electronic Arts)
The Sims™ 3 Vida Universitária (HKLM\...\{F26DE8EF-F2CF-40DC-8CDA-CC0D82D11B36}) (Version: 18.0.126 - Electronic Arts)
The Sims™ 3 Vida Urbana Coleção de Objetos (HKLM\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}_The Sims 3 Town Life Stuff) (Version: 1.0.0.0 - Electronic Arts Inc.)
The Sims™ 3 Volta ao Mundo (HKLM\...\{BA26FFA5-6D47-47DB-BE56-34C357B5F8CC}) (Version: 2.0.86 - Electronic Arts)
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{00B7E0AB-817A-44AD-A04B-D1148D524136}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{7C6E29BC-8B8B-4C3D-859E-AF6CD158BE0F}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{88D969C0-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{88D969C1-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{88D969C2-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{88D969C3-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{88D969C4-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{88D969C5-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{88D969C6-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{88D969C8-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{88D969C9-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{88D969CA-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{88D969D6-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-11-26] (AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-11-26] (AVAST Software)
ContextMenuHandlers1: [Cover Designer] -> {73FCA462-9BD5-4065-A73F-A8E5F6904EF7} => C:\Program Files\Nero\Nero 7\Nero CoverDesigner\CoverEdExtension.dll [2007-05-04] (Nero AG)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-11-26] (AVAST Software)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2009-09-23] (Intel Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-11-26] (AVAST Software)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {0D752237-867F-4FBE-8423-04C8782000A9} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2017-12-09] (AVAST Software)
Task: {601E3459-71CA-4191-BB73-77DFB3AF1D10} - System32\Tasks\SafeZone scheduled Autoupdate 1479894933 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-08-04] (Avast Software)
Task: {60FDCE8B-2C58-4494-8E3F-B8507D147F6E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-11-13] (Google Inc.)
Task: {6EDFA6EA-AA96-4D55-A394-D73A711D09A7} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.)
Task: {77045889-A5BD-4C10-BC39-8153E77B7D32} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {79371374-895B-4DCB-B0B9-B62BFD67FCE5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-11-13] (Google Inc.)
Task: {B50F41E9-3CAC-4934-9B2A-FEA8A58889E2} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-11-26] (AVAST Software)
Task: {C7134740-A8ED-48C9-B3B5-EE3334F8B1B4} - System32\Tasks\{C90AC1BD-1C19-4F45-9184-DB916779D72D} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\InstallShield Installation Information\{C12631C6-804D-4B32-B0DD-8A496462F106}\Sims3EP05Setup.exe" -c -runfromtemp -l0x0416 -removeonly
Task: {F61DCB7A-A112-435A-8B71-323557E265BF} - System32\Tasks\Microsoft\Windows\Setup\EOSNotify => C:\Windows\system32\EOSNotify.exe [2016-06-25] (Microsoft Corporation)
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
==================== Atalhos & WMI ========================
(As entradas podem ser listadas para serem restauradas ou removidas.)
==================== Módulos Carregados (Whitelisted) ==============
2017-11-26 21:10 - 2017-11-26 21:10 - 000059040 _____ () C:\Program Files\AVAST Software\Avast\module_lifetime.dll
2017-11-26 21:10 - 2017-11-26 21:10 - 000167096 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-11-26 21:10 - 2017-11-26 21:10 - 000237808 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-11-26 21:10 - 2017-11-26 21:10 - 000244584 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-11-26 21:10 - 2017-11-26 21:10 - 000151104 _____ () C:\Program Files\AVAST Software\Avast\network_notifications.dll
2017-12-09 17:36 - 2017-12-09 17:36 - 005892848 _____ () C:\Program Files\AVAST Software\Avast\defs\17120900\algo.dll
2017-11-26 21:10 - 2017-11-26 21:10 - 000710056 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2017-11-26 21:10 - 2017-11-26 21:10 - 000245608 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll
2015-11-20 15:57 - 2015-11-20 15:57 - 000073512 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-11-20 15:57 - 2015-11-20 15:57 - 001040144 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2017-02-21 18:05 - 2009-02-27 17:38 - 000139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2017-11-26 21:10 - 2017-11-26 21:10 - 000142792 _____ () c:\Program Files\AVAST Software\Avast\vaarclient.dll
2017-07-07 22:14 - 2017-07-07 22:14 - 067109376 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-11-26 21:10 - 2017-11-26 21:10 - 000235816 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2014-10-01 07:23 - 2014-10-01 07:23 - 002140672 _____ () C:\Program Files\ManyCam\opencv_core2410.dll
2014-10-01 07:24 - 2014-10-01 07:24 - 001891840 _____ () C:\Program Files\ManyCam\opencv_imgproc2410.dll
2014-10-01 07:25 - 2014-10-01 07:25 - 000654848 _____ () C:\Program Files\ManyCam\opencv_objdetect2410.dll
2014-10-01 07:24 - 2014-10-01 07:24 - 002147840 _____ () C:\Program Files\ManyCam\opencv_highgui2410.dll
2014-10-01 07:24 - 2014-10-01 07:24 - 000360960 _____ () C:\Program Files\ManyCam\opencv_video2410.dll
2017-02-15 18:58 - 2017-02-15 18:58 - 001162752 _____ () C:\Users\Kelia\AppData\Local\Facebook\Games\CefSharp.Core.dll
2017-02-15 18:58 - 2017-02-15 18:58 - 067197440 _____ () C:\Users\Kelia\AppData\Local\Facebook\Games\libcef.dll
2017-11-26 21:16 - 2017-11-10 07:21 - 003075928 _____ () C:\Program Files\Google\Chrome\Application\62.0.3202.94\libglesv2.dll
2017-11-26 21:16 - 2017-11-10 07:21 - 000086872 _____ () C:\Program Files\Google\Chrome\Application\62.0.3202.94\libegl.dll
2017-02-15 18:58 - 2017-02-15 18:58 - 000752640 _____ () C:\Users\Kelia\AppData\Local\Facebook\Games\CefSharp.BrowserSubprocess.Core.dll
2017-02-15 18:58 - 2017-02-15 18:58 - 001886208 _____ () C:\Users\Kelia\AppData\Local\Facebook\Games\libglesv2.dll
2017-02-15 18:58 - 2017-02-15 18:58 - 000078848 _____ () C:\Users\Kelia\AppData\Local\Facebook\Games\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
==================== Hosts Conteúdo: ===============================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2009-07-14 00:04 - 2009-06-10 19:39 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-1125590694-2817841431-2760037150-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 189.6.0.180 - 189.6.0.172
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [{4423C4EF-7D35-45D7-BD57-52233294A97E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{41480755-77D6-4EC3-88F3-499C9D1ADA02}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{3D5BDBAF-A1DC-4443-82CC-ECB52D570E89}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => (Block) C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [UDP Query User{1633CA7F-5AE6-47A4-A056-73694999B285}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => (Block) C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [TCP Query User{9D72AA3C-728F-4270-AACE-A6ABB30DA6FB}C:\users\kelia\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\kelia\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{B5F6BED3-6FCA-41AD-B369-BE06B19A5953}C:\users\kelia\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\kelia\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{55D6E668-1474-4283-B1E9-CF10E6ED4E0A}C:\users\kelia\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\kelia\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{03F90219-609D-40D6-A74D-CD9F0C1AA9B8}C:\users\kelia\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\kelia\appdata\roaming\spotify\spotify.exe
FirewallRules: [{6AB47C9A-1AC1-4702-8F17-72525E8B499B}] => (Allow) C:\Program Files\Brother\Brmfl10f\FAXRX.exe
FirewallRules: [{B2EE29A7-4D66-41C9-8C5A-09BD00459593}] => (Allow) C:\Program Files\Brother\Brmfl10f\FAXRX.exe
FirewallRules: [{D42403A0-5FC8-413B-999C-7F91EA2B6B53}] => (Allow) LPort=54925
FirewallRules: [{8276768C-BE5C-4722-8FAF-AAA75300B39B}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\4.58.2552.909\SZBrowser.exe
FirewallRules: [{80E9DBFB-55E8-4FEC-AF5F-0407CE7F2A63}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\4.58.2552.909_0\SZBrowser.exe
FirewallRules: [{5BFE2C60-4A30-4A46-8307-327E618F1680}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Pontos de Restauração =========================
09-12-2017 18:02:51 Windows Update
09-12-2017 18:12:17 Windows Update
09-12-2017 20:47:43 Microsoft Visual C++ 2017 Redistributable (x86) - 14.11.25325
09-12-2017 21:20:40 Microsoft Visual C++ 2017 Redistributable (x86) - 14.11.25325
==================== Dispositivos Apresentando Falhas No Gerenciador =============
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (10/12/2017 06:49:58 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6365
Error: (10/12/2017 06:49:58 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 6365
Error: (10/12/2017 06:49:58 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (10/12/2017 06:49:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5085
Error: (10/12/2017 06:49:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5085
Error: (10/12/2017 06:49:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (10/12/2017 06:49:56 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4087
Error: (10/12/2017 06:49:56 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4087
Error: (10/12/2017 06:49:56 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (10/12/2017 06:49:55 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1497
Erros de Sistema:
=============
Error: (12/09/2017 08:56:56 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão Específico do aplicativo não concedem permissãoLocal Iniciar para o aplicativo de Servidor COM com CLSID
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
e APPID
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
ao usuárioAUTORIDADE NT\SISTEMA SID (S-1-5-18) do endereço LocalHost (Usando LRPC). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (12/09/2017 08:56:45 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão Específico do aplicativo não concedem permissãoLocal Iniciar para o aplicativo de Servidor COM com CLSID
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
e APPID
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
ao usuárioAUTORIDADE NT\SERVIÇO LOCAL SID (S-1-5-19) do endereço LocalHost (Usando LRPC). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (12/09/2017 08:55:16 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 35) (User: AUTORIDADE NT)
Description: Recursos de gerenciamento do consumo de energia em desempenho no processador 0 no grupo 0 estão desabilitados devido a um problema de firmware. Verifique com o fabricante do computador se há um firmware atualizado.
Error: (12/09/2017 08:36:10 PM) (Source: Schannel) (EventID: 4120) (User: AUTORIDADE NT)
Description: O seguinte alerta fatal foi gerado: 40. O estado do erro interno é 252.
Error: (12/09/2017 08:28:10 PM) (Source: Schannel) (EventID: 4120) (User: AUTORIDADE NT)
Description: O seguinte alerta fatal foi gerado: 40. O estado do erro interno é 252.
Error: (12/09/2017 08:24:09 PM) (Source: Schannel) (EventID: 4120) (User: AUTORIDADE NT)
Description: O seguinte alerta fatal foi gerado: 40. O estado do erro interno é 252.
Error: (12/09/2017 08:22:09 PM) (Source: Schannel) (EventID: 4120) (User: AUTORIDADE NT)
Description: O seguinte alerta fatal foi gerado: 40. O estado do erro interno é 252.
Error: (12/09/2017 08:21:08 PM) (Source: Schannel) (EventID: 4120) (User: AUTORIDADE NT)
Description: O seguinte alerta fatal foi gerado: 40. O estado do erro interno é 252.
Error: (12/09/2017 07:22:03 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão Específico do aplicativo não concedem permissãoLocal Iniciar para o aplicativo de Servidor COM com CLSID
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
e APPID
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
ao usuárioAUTORIDADE NT\SISTEMA SID (S-1-5-18) do endereço LocalHost (Usando LRPC). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (12/09/2017 07:21:52 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão Específico do aplicativo não concedem permissãoLocal Iniciar para o aplicativo de Servidor COM com CLSID
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
e APPID
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
ao usuárioAUTORIDADE NT\SERVIÇO LOCAL SID (S-1-5-19) do endereço LocalHost (Usando LRPC). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
==================== Informações da Memória ===========================
Processador: Intel(R) Celeron(R) CPU 570 @ 2.26GHz
Percentagem de memória em uso: 75%
RAM física total: 2038.43 MB
RAM física disponível: 504.13 MB
Virtual Total: 4076.86 MB
Virtual disponível: 2223.68 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:97.8 GB) (Free:18.57 GB) NTFS
Drive d: () (Fixed) (Total:200.19 GB) (Free:180.68 GB) NTFS
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 55034FE3)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=97.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=200.2 GB) - (Type=07 NTFS)
==================== Fim de Addition.txt ============================
Executado por Kelia (09-12-2017 21:33:49)
Executando a partir de C:\Users\Kelia\Downloads
Microsoft Windows 7 Ultimate (X86) (2015-11-11 18:54:18)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-1125590694-2817841431-2760037150-500 - Administrator - Disabled)
Convidado (S-1-5-21-1125590694-2817841431-2760037150-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1125590694-2817841431-2760037150-1002 - Limited - Enabled)
Kelia (S-1-5-21-1125590694-2817841431-2760037150-1000 - Administrator - Enabled) => C:\Users\Kelia
==================== Central de Segurança ========================
(Se uma entrada for incluída na fixlist, será removida.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.3.183.5 - Adobe Systems Incorporated)
Adobe Flash Player 10 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 10.3.183.5 - Adobe Systems Incorporated)
Adobe Reader X - Português (HKLM\...\{AC76BA86-7AD7-1046-7B44-AA0000000001}) (Version: 10.0.0 - Adobe Systems Incorporated)
Apple Mobile Device Support (HKLM\...\{9A629DCB-415D-4A50-85B9-5C2E4F8F74A8}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 17.8.2318 - AVAST Software)
Bonjour (HKLM\...\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.)
Brother MFL-Pro Suite MFC-7860DW (HKLM\...\{3ACCCFB3-7B17-4E9F-ACB0-46868FCD4487}) (Version: 1.1.3.0 - Brother Industries, Ltd.)
CCleaner (HKLM\...\CCleaner) (Version: 3.08 - Piriform)
DLL-Files.com Client (HKLM\...\DA71BA65-680A-4212-9150-6239217B53DC_DLL-Files.c~79141F26_is1) (Version: 2.3.0.4908 - DLL-Files.com Client)
Facebook Gameroom 1.3.1.3 (HKLM\...\{7E155A45-DE1A-46E0-A6B2-10FE1D8501FC}) (Version: 1.3.1.3 - Facebook)
Google Chrome (HKLM\...\Google Chrome) (Version: 62.0.3202.94 - Google Inc.)
Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
Google Update Helper (HKLM\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.2.183.39 - Google Inc.) Hidden
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation)
Intel(R) TV Wizard (HKLM\...\TVWiz) (Version: - Intel Corporation)
IRPF2016 - Declaração de Ajuste Anual, Final de Espólio e Saída Definitiva do País (HKLM\...\IRPF2016) (Version: 1.2 - Receita Federal do Brasil)
Java 8 Update 91 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.14 - Oracle Corporation)
Java(TM) 6 Update 26 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216026FF}) (Version: 6.0.260 - Oracle)
K-Lite Mega Codec Pack 7.6.0 (HKLM\...\KLiteCodecPack_is1) (Version: 7.6.0 - )
ManyCam 5.0.4 (HKLM\...\ManyCam) (Version: 5.0.4 - Visicom Media Inc.)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.11.25325 (HKLM\...\{404c9c27-8377-4fd1-b607-7ca635db4e49}) (Version: 14.11.25325.0 - Microsoft Corporation)
Mozilla Firefox 6.0 (x86 pt-BR) (HKLM\...\Mozilla Firefox 6.0 (x86 pt-BR)) (Version: 6.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 7 Premium (HKLM\...\{293C9DF5-7669-4826-BBB2-E1F182D71046}) (Version: 7.02.8631 - Nero AG)
Origin (HKLM\...\Origin) (Version: 10.5.8.11002 - Electronic Arts, Inc.)
Pacote de Idiomas do Microsoft .NET Framework 4 Client Profile - Português (Brasil) (HKLM\...\Microsoft .NET Framework 4 Client Profile PTB Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Receitanet (HKLM\...\ECC16E3C-16D1-4DC2-9D8A-6AC06B3005A5) (Version: 1.07 - Serpro - Serviço Federal de Processamento de Dados)
SafeZone Stable 4.58.2552.909 (HKLM\...\SafeZone 4.58.2552.909) (Version: 4.58.2552.909 - Avast Software) Hidden
Spotify (HKU\S-1-5-21-1125590694-2817841431-2760037150-1000\...\Spotify) (Version: 1.0.65.320.gac7a8e02 - Spotify AB)
Suporte para Aplicativos Apple (32-bit) (HKLM\...\{C5815ACF-FD34-4553-8A22-C7411B7E662B}) (Version: 4.1.1 - Apple Inc.)
The Sims™ 3 (HKLM\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.69.42.024017 - Electronic Arts Inc.)
The Sims™ 3 Ambições (HKLM\...\{910F4A29-1134-49E0-AD8B-56E4A3152BD1}) (Version: 4.0.87 - Electronic Arts)
The Sims™ 3 Estações (HKLM\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}_The Sims 3 Seasons) (Version: 1.0.0.0 - Electronic Arts Inc.)
The Sims™ 3 Ilha Paradisíaca (HKLM\...\{DB21639E-FE55-432C-BCA2-0C5249E3F79E}) (Version: 19.0.101 - Electronic Arts)
The Sims™ 3 Vida Universitária (HKLM\...\{F26DE8EF-F2CF-40DC-8CDA-CC0D82D11B36}) (Version: 18.0.126 - Electronic Arts)
The Sims™ 3 Vida Urbana Coleção de Objetos (HKLM\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}_The Sims 3 Town Life Stuff) (Version: 1.0.0.0 - Electronic Arts Inc.)
The Sims™ 3 Volta ao Mundo (HKLM\...\{BA26FFA5-6D47-47DB-BE56-34C357B5F8CC}) (Version: 2.0.86 - Electronic Arts)
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{00B7E0AB-817A-44AD-A04B-D1148D524136}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{7C6E29BC-8B8B-4C3D-859E-AF6CD158BE0F}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{88D969C0-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{88D969C1-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{88D969C2-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{88D969C3-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{88D969C4-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{88D969C5-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{88D969C6-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{88D969C8-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{88D969C9-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{88D969CA-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1125590694-2817841431-2760037150-1000_Classes\CLSID\{88D969D6-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-11-26] (AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-11-26] (AVAST Software)
ContextMenuHandlers1: [Cover Designer] -> {73FCA462-9BD5-4065-A73F-A8E5F6904EF7} => C:\Program Files\Nero\Nero 7\Nero CoverDesigner\CoverEdExtension.dll [2007-05-04] (Nero AG)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-11-26] (AVAST Software)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2009-09-23] (Intel Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2017-11-26] (AVAST Software)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {0D752237-867F-4FBE-8423-04C8782000A9} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2017-12-09] (AVAST Software)
Task: {601E3459-71CA-4191-BB73-77DFB3AF1D10} - System32\Tasks\SafeZone scheduled Autoupdate 1479894933 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-08-04] (Avast Software)
Task: {60FDCE8B-2C58-4494-8E3F-B8507D147F6E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-11-13] (Google Inc.)
Task: {6EDFA6EA-AA96-4D55-A394-D73A711D09A7} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.)
Task: {77045889-A5BD-4C10-BC39-8153E77B7D32} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {79371374-895B-4DCB-B0B9-B62BFD67FCE5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-11-13] (Google Inc.)
Task: {B50F41E9-3CAC-4934-9B2A-FEA8A58889E2} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-11-26] (AVAST Software)
Task: {C7134740-A8ED-48C9-B3B5-EE3334F8B1B4} - System32\Tasks\{C90AC1BD-1C19-4F45-9184-DB916779D72D} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\InstallShield Installation Information\{C12631C6-804D-4B32-B0DD-8A496462F106}\Sims3EP05Setup.exe" -c -runfromtemp -l0x0416 -removeonly
Task: {F61DCB7A-A112-435A-8B71-323557E265BF} - System32\Tasks\Microsoft\Windows\Setup\EOSNotify => C:\Windows\system32\EOSNotify.exe [2016-06-25] (Microsoft Corporation)
(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
==================== Atalhos & WMI ========================
(As entradas podem ser listadas para serem restauradas ou removidas.)
==================== Módulos Carregados (Whitelisted) ==============
2017-11-26 21:10 - 2017-11-26 21:10 - 000059040 _____ () C:\Program Files\AVAST Software\Avast\module_lifetime.dll
2017-11-26 21:10 - 2017-11-26 21:10 - 000167096 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-11-26 21:10 - 2017-11-26 21:10 - 000237808 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-11-26 21:10 - 2017-11-26 21:10 - 000244584 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-11-26 21:10 - 2017-11-26 21:10 - 000151104 _____ () C:\Program Files\AVAST Software\Avast\network_notifications.dll
2017-12-09 17:36 - 2017-12-09 17:36 - 005892848 _____ () C:\Program Files\AVAST Software\Avast\defs\17120900\algo.dll
2017-11-26 21:10 - 2017-11-26 21:10 - 000710056 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2017-11-26 21:10 - 2017-11-26 21:10 - 000245608 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll
2015-11-20 15:57 - 2015-11-20 15:57 - 000073512 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-11-20 15:57 - 2015-11-20 15:57 - 001040144 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2017-02-21 18:05 - 2009-02-27 17:38 - 000139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2017-11-26 21:10 - 2017-11-26 21:10 - 000142792 _____ () c:\Program Files\AVAST Software\Avast\vaarclient.dll
2017-07-07 22:14 - 2017-07-07 22:14 - 067109376 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-11-26 21:10 - 2017-11-26 21:10 - 000235816 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2014-10-01 07:23 - 2014-10-01 07:23 - 002140672 _____ () C:\Program Files\ManyCam\opencv_core2410.dll
2014-10-01 07:24 - 2014-10-01 07:24 - 001891840 _____ () C:\Program Files\ManyCam\opencv_imgproc2410.dll
2014-10-01 07:25 - 2014-10-01 07:25 - 000654848 _____ () C:\Program Files\ManyCam\opencv_objdetect2410.dll
2014-10-01 07:24 - 2014-10-01 07:24 - 002147840 _____ () C:\Program Files\ManyCam\opencv_highgui2410.dll
2014-10-01 07:24 - 2014-10-01 07:24 - 000360960 _____ () C:\Program Files\ManyCam\opencv_video2410.dll
2017-02-15 18:58 - 2017-02-15 18:58 - 001162752 _____ () C:\Users\Kelia\AppData\Local\Facebook\Games\CefSharp.Core.dll
2017-02-15 18:58 - 2017-02-15 18:58 - 067197440 _____ () C:\Users\Kelia\AppData\Local\Facebook\Games\libcef.dll
2017-11-26 21:16 - 2017-11-10 07:21 - 003075928 _____ () C:\Program Files\Google\Chrome\Application\62.0.3202.94\libglesv2.dll
2017-11-26 21:16 - 2017-11-10 07:21 - 000086872 _____ () C:\Program Files\Google\Chrome\Application\62.0.3202.94\libegl.dll
2017-02-15 18:58 - 2017-02-15 18:58 - 000752640 _____ () C:\Users\Kelia\AppData\Local\Facebook\Games\CefSharp.BrowserSubprocess.Core.dll
2017-02-15 18:58 - 2017-02-15 18:58 - 001886208 _____ () C:\Users\Kelia\AppData\Local\Facebook\Games\libglesv2.dll
2017-02-15 18:58 - 2017-02-15 18:58 - 000078848 _____ () C:\Users\Kelia\AppData\Local\Facebook\Games\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluída na fixlist, somente o ADS será removido.)
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== Associação (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluída na fixlist, será removida do Registro.)
==================== Hosts Conteúdo: ===============================
(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)
2009-07-14 00:04 - 2009-06-10 19:39 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts
==================== Outras Áreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-1125590694-2817841431-2760037150-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 189.6.0.180 - 189.6.0.172
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER ítens desabilitados ==
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [{4423C4EF-7D35-45D7-BD57-52233294A97E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{41480755-77D6-4EC3-88F3-499C9D1ADA02}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{3D5BDBAF-A1DC-4443-82CC-ECB52D570E89}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => (Block) C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [UDP Query User{1633CA7F-5AE6-47A4-A056-73694999B285}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => (Block) C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [TCP Query User{9D72AA3C-728F-4270-AACE-A6ABB30DA6FB}C:\users\kelia\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\kelia\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{B5F6BED3-6FCA-41AD-B369-BE06B19A5953}C:\users\kelia\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\kelia\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{55D6E668-1474-4283-B1E9-CF10E6ED4E0A}C:\users\kelia\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\kelia\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{03F90219-609D-40D6-A74D-CD9F0C1AA9B8}C:\users\kelia\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\kelia\appdata\roaming\spotify\spotify.exe
FirewallRules: [{6AB47C9A-1AC1-4702-8F17-72525E8B499B}] => (Allow) C:\Program Files\Brother\Brmfl10f\FAXRX.exe
FirewallRules: [{B2EE29A7-4D66-41C9-8C5A-09BD00459593}] => (Allow) C:\Program Files\Brother\Brmfl10f\FAXRX.exe
FirewallRules: [{D42403A0-5FC8-413B-999C-7F91EA2B6B53}] => (Allow) LPort=54925
FirewallRules: [{8276768C-BE5C-4722-8FAF-AAA75300B39B}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\4.58.2552.909\SZBrowser.exe
FirewallRules: [{80E9DBFB-55E8-4FEC-AF5F-0407CE7F2A63}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\4.58.2552.909_0\SZBrowser.exe
FirewallRules: [{5BFE2C60-4A30-4A46-8307-327E618F1680}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Pontos de Restauração =========================
09-12-2017 18:02:51 Windows Update
09-12-2017 18:12:17 Windows Update
09-12-2017 20:47:43 Microsoft Visual C++ 2017 Redistributable (x86) - 14.11.25325
09-12-2017 21:20:40 Microsoft Visual C++ 2017 Redistributable (x86) - 14.11.25325
==================== Dispositivos Apresentando Falhas No Gerenciador =============
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (10/12/2017 06:49:58 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6365
Error: (10/12/2017 06:49:58 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 6365
Error: (10/12/2017 06:49:58 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (10/12/2017 06:49:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5085
Error: (10/12/2017 06:49:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5085
Error: (10/12/2017 06:49:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (10/12/2017 06:49:56 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4087
Error: (10/12/2017 06:49:56 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4087
Error: (10/12/2017 06:49:56 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (10/12/2017 06:49:55 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1497
Erros de Sistema:
=============
Error: (12/09/2017 08:56:56 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão Específico do aplicativo não concedem permissãoLocal Iniciar para o aplicativo de Servidor COM com CLSID
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
e APPID
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
ao usuárioAUTORIDADE NT\SISTEMA SID (S-1-5-18) do endereço LocalHost (Usando LRPC). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (12/09/2017 08:56:45 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão Específico do aplicativo não concedem permissãoLocal Iniciar para o aplicativo de Servidor COM com CLSID
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
e APPID
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
ao usuárioAUTORIDADE NT\SERVIÇO LOCAL SID (S-1-5-19) do endereço LocalHost (Usando LRPC). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (12/09/2017 08:55:16 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 35) (User: AUTORIDADE NT)
Description: Recursos de gerenciamento do consumo de energia em desempenho no processador 0 no grupo 0 estão desabilitados devido a um problema de firmware. Verifique com o fabricante do computador se há um firmware atualizado.
Error: (12/09/2017 08:36:10 PM) (Source: Schannel) (EventID: 4120) (User: AUTORIDADE NT)
Description: O seguinte alerta fatal foi gerado: 40. O estado do erro interno é 252.
Error: (12/09/2017 08:28:10 PM) (Source: Schannel) (EventID: 4120) (User: AUTORIDADE NT)
Description: O seguinte alerta fatal foi gerado: 40. O estado do erro interno é 252.
Error: (12/09/2017 08:24:09 PM) (Source: Schannel) (EventID: 4120) (User: AUTORIDADE NT)
Description: O seguinte alerta fatal foi gerado: 40. O estado do erro interno é 252.
Error: (12/09/2017 08:22:09 PM) (Source: Schannel) (EventID: 4120) (User: AUTORIDADE NT)
Description: O seguinte alerta fatal foi gerado: 40. O estado do erro interno é 252.
Error: (12/09/2017 08:21:08 PM) (Source: Schannel) (EventID: 4120) (User: AUTORIDADE NT)
Description: O seguinte alerta fatal foi gerado: 40. O estado do erro interno é 252.
Error: (12/09/2017 07:22:03 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão Específico do aplicativo não concedem permissãoLocal Iniciar para o aplicativo de Servidor COM com CLSID
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
e APPID
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
ao usuárioAUTORIDADE NT\SISTEMA SID (S-1-5-18) do endereço LocalHost (Usando LRPC). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (12/09/2017 07:21:52 PM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão Específico do aplicativo não concedem permissãoLocal Iniciar para o aplicativo de Servidor COM com CLSID
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
e APPID
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
ao usuárioAUTORIDADE NT\SERVIÇO LOCAL SID (S-1-5-19) do endereço LocalHost (Usando LRPC). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
==================== Informações da Memória ===========================
Processador: Intel(R) Celeron(R) CPU 570 @ 2.26GHz
Percentagem de memória em uso: 75%
RAM física total: 2038.43 MB
RAM física disponível: 504.13 MB
Virtual Total: 4076.86 MB
Virtual disponível: 2223.68 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:97.8 GB) (Free:18.57 GB) NTFS
Drive d: () (Fixed) (Total:200.19 GB) (Free:180.68 GB) NTFS
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 55034FE3)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=97.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=200.2 GB) - (Type=07 NTFS)
==================== Fim de Addition.txt ============================