Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão: 21-10-2017 Executado por graci (21-10-2017 17:03:18) Executando a partir de C:\Users\graci\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\TempState\Downloads Windows 10 Home Single Language Versão 1703 15063.674 (X64) (2017-04-25 22:22:33) Modo da Inicialização: Normal ========================================================== ==================== Contas: ============================= Administrador (S-1-5-21-1075289712-1307527022-1004541857-500 - Administrator - Disabled) Convidado (S-1-5-21-1075289712-1307527022-1004541857-501 - Limited - Disabled) DefaultAccount (S-1-5-21-1075289712-1307527022-1004541857-503 - Limited - Disabled) defaultuser0 (S-1-5-21-1075289712-1307527022-1004541857-1000 - Limited - Enabled) => C:\Users\defaultuser0 graci (S-1-5-21-1075289712-1307527022-1004541857-1001 - Administrator - Enabled) => C:\Users\graci ==================== Central de Segurança ======================== (Se uma entrada for incluída na fixlist, será removida.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Bitdefender Antivirus Free Edition (Disabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371} AS: Bitdefender Antivirus Free Edition (Disabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Programas Instalados ====================== (Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.) aTube Catcher versão 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp) Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 1.0.1 - Bitdefender) Bitdefender Antivirus Free Edition (HKLM\...\BitDefender Gonzales) (Version: 1.0.21.1109 - Bitdefender) ByteFence Anti-Malware (HKLM-x32\...\ByteFence) (Version: 3.14.0.10 - Byte Technologies LLC) <==== ATENÇÃO Canal Positivo (HKLM-x32\...\Canal Positivo_is1) (Version: 1.0.0.83 - Positivo Informática) CCleaner (HKLM\...\CCleaner) (Version: 5.35 - Piriform) Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.) Driver 1.3.8 (HKLM\...\{BA56CD60-1D9F-4BE6-AC2F-B7C4A5437C35}) (Version: 1.3.8 - OEM) GfK Digital Trends App (HKLM-x32\...\39992AD7-103F-4308-8BB7-3F65F543604D) (Version: 16.1.7.5 - GfK SE) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden HP Support Solutions Framework (HKLM-x32\...\{86EF78FF-2551-4144-A4C4-37ECEA451F88}) (Version: 12.8.37.11 - HP Inc.) IHMC CmapTools v6.01.01 (HKLM-x32\...\IHMC CmapTools v6.01.01) (Version: 6.0.1.1 - Institute for Human & Machine Cognition) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4364 - Intel Corporation) IRPF2017 (HKLM-x32\...\IRPF2017) (Version: 1.1 - Receita Federal do Brasil) Java 8 Update 141 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180141F0}) (Version: 8.0.1410.15 - Oracle Corporation) McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.0.161 - McAfee, Inc.) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-1075289712-1307527022-1004541857-1001\...\OneDriveSetup.exe) (Version: 17.3.7073.1013 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Mozilla Firefox 56.0 (x86 pt-BR) (HKLM-x32\...\Mozilla Firefox 56.0 (x86 pt-BR)) (Version: 56.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 56.0.0.6478 - Mozilla) Pacote de Idiomas do Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - Português (Brasil) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PTB) (Version: 10.0.50903 - Microsoft Corporation) REALTEK Bluetooth (HKLM-x32\...\{192979A0-37F4-4703-B1BB-62052142CE44}) (Version: 1.0.103.50731 - Nome de sua empresa:) Hidden REALTEK Bluetooth (HKLM-x32\...\InstallShield_{192979A0-37F4-4703-B1BB-62052142CE44}) (Version: 1.0.103.50731 - Nome de sua empresa:) Realtek I2S Audio (HKLM-x32\...\{89A448AA-3301-46AA-AFC3-34F2D7C670E8}) (Version: 10.0.10586.4382 - Realtek Semiconductor Corp.) REALTEK Wireless LAN Driver (HKLM-x32\...\{33AABC60-A52F-41FF-B2B9-17321240CD5}) (Version: 1.00.0280 - REALTEK Semiconductor Corp.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft) SoftwareEC (HKLM\...\{63C43FFB-4401-4512-B525-E23A6081A8C2}) (Version: 1.0.5 - OEM) Warsaw 1.15.1.61 64 bits (HKLM\...\{20E60725-16C8-4FB9-8BC2-AF92C5F8D06D}_is1) (Version: 1.15.1.61 - GAS Tecnologia) Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation) Yahoo Search Set (HKLM-x32\...\Yahoo! SearchSet) (Version: - Yahoo Inc.) ==================== Exame Personalizado CLSID (Whitelisted): ========================== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) CustomCLSID: HKU\S-1-5-21-1075289712-1307527022-1004541857-1001_Classes\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InprocServer32 -> C:\Users\graci\AppData\Local\Microsoft\OneDrive\17.3.7073.1013\amd64\FileCoAuthLib64.dll (Microsoft Corporation) ContextMenuHandlers1: [Gonzales] -> {A50F8401-953F-4C11-8B77-1278C6C7C3F4} => C:\Program Files\Bitdefender\Antivirus Free Edition\GzShellIntegration.dll [2016-03-02] (Bitdefender) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Nenhum Arquivo ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2016-05-27] (Intel Corporation) ContextMenuHandlers6: [Gonzales] -> {A50F8401-953F-4C11-8B77-1278C6C7C3F4} => C:\Program Files\Bitdefender\Antivirus Free Edition\GzShellIntegration.dll [2016-03-02] (Bitdefender) ==================== Tarefas Agendadas (Whitelisted) ============= (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) Task: {095A6C6B-6E4C-477A-BC58-A73C07AAB32D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.) Task: {1088B8C3-EC74-4459-BD3C-637002E55DC7} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] (HP Inc.) Task: {1EBA8B8E-8B1A-4F12-9A15-4B870BCCD025} - System32\Tasks\PosiService Startup => C:\Positivo\Deskmedia\start.bat [2016-01-20] () <==== ATENÇÃO Task: {2E8FF441-736A-45E6-97B0-64F6AE188D50} - System32\Tasks\PosiSystem Startup => C:\Positivo\Deskmedia\GerenciadorLocal.exe [2017-01-19] (Positivo Informática) Task: {3FD401A4-8031-4D79-8C09-358B85484055} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-16] (Google Inc.) Task: {5A19A530-E4E0-4211-B354-8A39AE9B544A} - System32\Tasks\ByteFence => C:\Program Files\ByteFence\ByteFence.exe [2017-07-20] (Byte Technologies LLC) <==== ATENÇÃO Task: {7094A985-2F55-4A61-A40A-90BC86463893} - System32\Tasks\S-1-5-21-1075289712-1307527022-1004541857-1001\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe [2017-03-18] (Microsoft Corporation) Task: {79C2506B-6E3D-4863-96B9-49F738C8F28E} - System32\Tasks\ByteFence Scan => C:\Program Files\ByteFence\ByteFence.exe [2017-07-20] (Byte Technologies LLC) <==== ATENÇÃO Task: {8BCDC76C-ADE7-45B0-809B-9504612566AA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner64.exe [2017-09-20] (Piriform Ltd) Task: {9CC413AC-EE47-4FF8-8206-FF9804D51447} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.) Task: {A6F18202-446B-4502-8A20-B58340029249} - System32\Tasks\HPCeeScheduleForgraci => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2016-05-12] (HP Development Company, L.P.) Task: {BFCE6B8F-AF7F-4277-819D-C5303B3A34A6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.) Task: {C958F4F2-0AF6-4FD8-A3B6-80C31AB88565} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2017-04-11] (Bitdefender) Task: {CABC1CF2-1A2B-427D-A76C-18D4FDDF0DD1} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.) Task: {DE753292-E9C2-4046-9710-14E45856EBC3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2017-06-22] (HP Inc.) Task: {E7EC96DE-DA44-4ED6-A180-C4F053AD6003} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2017-10-11] (HP Inc.) Task: {FE58B4BF-9D3A-404D-A75E-1CDD9DE9747E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-16] (Google Inc.) (Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.) Task: C:\WINDOWS\Tasks\HPCeeScheduleForgraci.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe ==================== Atalhos & WMI ======================== (As entradas podem ser listadas para serem restauradas ou removidas.) ==================== Módulos Carregados (Whitelisted) ============== 2017-03-22 12:40 - 2013-03-19 12:07 - 000712288 _____ () C:\Program Files\Bitdefender\Antivirus Free Edition\sqlite3.dll 2017-03-22 12:39 - 2013-09-03 14:29 - 000111832 _____ () C:\Program Files\Bitdefender\Antivirus Free Edition\BDMetrics.dll 2017-09-03 01:30 - 2017-09-03 01:36 - 000302920 _____ () C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe 2017-09-03 01:29 - 2017-09-03 01:36 - 000620872 _____ () C:\Program Files\ByteFence\rtop\bin\rtop_bg.exe 2017-03-18 18:58 - 2017-03-18 18:58 - 000138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll 2016-05-27 16:50 - 2016-05-27 16:50 - 000402520 _____ () C:\WINDOWS\system32\igfxTray.exe 2013-09-05 01:17 - 2013-09-05 01:17 - 004300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2017-03-18 18:59 - 2017-03-20 02:02 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2017-09-01 16:51 - 2017-09-01 16:51 - 000074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2017-09-01 16:51 - 2017-09-01 16:51 - 000203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2017-09-01 16:51 - 2017-09-01 16:52 - 036162048 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkyWrap.dll 2017-09-01 16:51 - 2017-09-01 16:51 - 002237952 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\skypert.dll 2017-09-07 14:12 - 2017-09-07 14:12 - 000073728 _____ () C:\Program Files\CCleaner\lang\lang-1046.dll 2016-11-03 10:48 - 2016-01-20 11:30 - 010803712 _____ () C:\Positivo\Deskmedia\Posibar\libcef.dll ==================== Alternate Data Streams (Whitelisted) ========= (Se uma entrada for incluída na fixlist, somente o ADS será removido.) AlternateDataStreams: C:\WINDOWS\system32\Drivers\wsddfac.sys:X5ZN8aGXs4 [2410] ==================== Modo de Segurança (Whitelisted) =================== (Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iaspie.sys => ""="Driver" ==================== Associação (Whitelisted) =============== (Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.) ==================== Internet Explorer confiável/restrito =============== (Se uma entrada for incluída na fixlist, será removida do Registro.) ==================== Hosts Conteúdo: ========================== (Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.) 2016-07-16 09:47 - 2017-10-21 16:42 - 000002103 _____ C:\WINDOWS\system32\Drivers\etc\hosts 0.0.0.0 0.0.0.0 # fix for traceroute and netstat display anomaly 0.0.0.0 tracking.opencandy.com.s3.amazonaws.com 0.0.0.0 media.opencandy.com 0.0.0.0 cdn.opencandy.com 0.0.0.0 tracking.opencandy.com 0.0.0.0 api.opencandy.com 0.0.0.0 api.recommendedsw.com 0.0.0.0 rp.yefeneri2.com 0.0.0.0 os.yefeneri2.com 0.0.0.0 os2.yefeneri2.com 0.0.0.0 installer.betterinstaller.com 0.0.0.0 installer.filebulldog.com 0.0.0.0 d3oxtn1x3b8d7i.cloudfront.net 0.0.0.0 inno.bisrv.com 0.0.0.0 nsis.bisrv.com 0.0.0.0 cdn.file2desktop.com 0.0.0.0 cdn.goateastcach.us 0.0.0.0 cdn.guttastatdk.us 0.0.0.0 cdn.inskinmedia.com 0.0.0.0 cdn.insta.oibundles2.com 0.0.0.0 cdn.insta.playbryte.com 0.0.0.0 cdn.llogetfastcach.us 0.0.0.0 cdn.montiera.com 0.0.0.0 cdn.msdwnld.com 0.0.0.0 cdn.mypcbackup.com 0.0.0.0 cdn.ppdownload.com 0.0.0.0 cdn.riceateastcach.us 0.0.0.0 cdn.shyapotato.us 0.0.0.0 cdn.solimba.com 0.0.0.0 cdn.tuto4pc.com ==================== Outras Áreas ============================ (Atualmente não há nenhuma correção automática para esta seção.) HKU\S-1-5-21-1075289712-1307527022-1004541857-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\graci\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{62e4455b-3feb-40fa-85ae-0a37a0f1bfa5}.JPG DNS Servers: 168.232.252.12 - 168.232.252.13 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off) Firewall do Windows está habilitado. ==================== MSCONFIG/TASK MANAGER ítens desabilitados == MSCONFIG\Services: BTDevManager => 2 MSCONFIG\Services: cphs => 3 MSCONFIG\Services: DeskmediaService => 3 MSCONFIG\Services: gupdate => 2 MSCONFIG\Services: gupdatem => 3 MSCONFIG\Services: HPSupportSolutionsFrameworkService => 2 MSCONFIG\Services: MozillaMaintenance => 3 MSCONFIG\Services: ProductAgentService => 2 MSCONFIG\Services: ServiceRegisterProduct => 2 MSCONFIG\Services: SWECService => 2 HKLM\...\StartupApproved\StartupFolder: => "SunflowerOSD.lnk" HKLM\...\StartupApproved\StartupFolder: => "SoftwareEC.lnk" ==================== Regras do Firewall (Whitelisted) =============== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) FirewallRules: [{F9924C75-2F06-47AB-A47C-B71A241719D5}] => (Allow) LPort=1688 FirewallRules: [{23F81C9F-2355-4A69-996A-3C7DB97E385E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{95E06CEA-9635-46F8-B81E-F1C2A44DB80C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{BA499976-41AB-406E-9D54-8FA6721C7B5B}] => (Allow) C:\Program Files\Diebold\Warsaw\core.exe FirewallRules: [TCP Query User{AFC0CD26-82F8-4506-BB0C-5AA585611E47}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{9FF8DDD9-A5CB-4E75-A67B-A29021AD5591}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [TCP Query User{285923F2-6CFF-4C6F-8FAF-718A02BF308C}C:\program files (x86)\ihmc cmaptools\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\ihmc cmaptools\jre\bin\javaw.exe FirewallRules: [UDP Query User{51773BC2-CB09-4E79-ADAB-1CE3E7464F08}C:\program files (x86)\ihmc cmaptools\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\ihmc cmaptools\jre\bin\javaw.exe FirewallRules: [TCP Query User{4A451B71-C585-40E9-B419-47A4C5CB0B70}D:\mapas conceituais-2017\mapas conceituais\jre\bin\javaw.exe] => (Allow) D:\mapas conceituais-2017\mapas conceituais\jre\bin\javaw.exe FirewallRules: [UDP Query User{C55EB5EE-F7DB-4A3D-8BB5-F5ED19D251C4}D:\mapas conceituais-2017\mapas conceituais\jre\bin\javaw.exe] => (Allow) D:\mapas conceituais-2017\mapas conceituais\jre\bin\javaw.exe FirewallRules: [{C83FD8BA-01D1-4C46-8A86-AB3ED41C1CA9}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Pontos de Restauração ========================= ATENÇÃO: A Restauração do Sistema está desabilitada ==================== Dispositivos Apresentando Falhas No Gerenciador ============= ==================== Erros no Log de eventos: ========================= Erros em Aplicativos: ================== Error: (10/21/2017 04:51:00 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: Falha no Procedimento Open para o serviço "BITS" na DLL "C:\Windows\System32\bitsperf.dll". Os dados de desempenho para este serviço não estarão disponíveis. Os primeiros quatro bytes (DWORD) da seção de Dados contêm o código do erro. Error: (10/21/2017 12:29:31 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: MicrosoftEdgeCP.exe, versão: 11.0.15063.674, carimbo de data/hora: 0x59cdf479 Nome do módulo com falha: win32u.dll, versão: 10.0.15063.608, carimbo de data/hora: 0xd9592a17 Código de exceção: 0xcfffffff Deslocamento da falha: 0x0000000000001144 ID do processo com falha: 0x21ac Hora de início do aplicativo com falha: 0x01d34a78c17338c2 Caminho do aplicativo com falha: C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe Caminho do módulo com falha: C:\WINDOWS\System32\win32u.dll ID do Relatório: 6c2c70fb-1801-4c3e-8434-88cf4e75dba0 Nome completo do pacote com falha: Microsoft.MicrosoftEdge_40.15063.674.0_neutral__8wekyb3d8bbwe ID do aplicativo relativo ao pacote com falha: ContentProcess Error: (10/20/2017 11:02:50 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-TTAS34U) Description: Falha na ativação do aplicativo Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App com o erro: -2144927141. Veja o log Microsoft-Windows-TWinUI/Operational para obter informações adicionais. Error: (10/20/2017 09:31:17 PM) (Source: SecurityCenter) (EventID: 16) (User: ) Description: Erro ao atualizar o status Bitdefender Antivirus Free Edition para SECURITY_PRODUCT_STATE_ON. Error: (10/20/2017 09:31:17 PM) (Source: SecurityCenter) (EventID: 16) (User: ) Description: Erro ao atualizar o status Bitdefender Antivirus Free Edition para SECURITY_PRODUCT_STATE_ON. Error: (10/20/2017 09:31:17 PM) (Source: SecurityCenter) (EventID: 16) (User: ) Description: Erro ao atualizar o status Bitdefender Antivirus Free Edition para SECURITY_PRODUCT_STATE_ON. Error: (10/20/2017 09:31:17 PM) (Source: SecurityCenter) (EventID: 16) (User: ) Description: Erro ao atualizar o status Bitdefender Antivirus Free Edition para SECURITY_PRODUCT_STATE_ON. Error: (10/20/2017 09:31:17 PM) (Source: SecurityCenter) (EventID: 16) (User: ) Description: Erro ao atualizar o status Bitdefender Antivirus Free Edition para SECURITY_PRODUCT_STATE_ON. Error: (10/20/2017 09:31:17 PM) (Source: SecurityCenter) (EventID: 16) (User: ) Description: Erro ao atualizar o status Bitdefender Antivirus Free Edition para SECURITY_PRODUCT_STATE_ON. Error: (10/20/2017 09:31:17 PM) (Source: SecurityCenter) (EventID: 16) (User: ) Description: Erro ao atualizar o status Bitdefender Antivirus Free Edition para SECURITY_PRODUCT_STATE_ON. Erros de Sistema: ============= Error: (10/21/2017 04:47:08 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Serviço Gerenciador de Mapas Baixados suspenso ao iniciar. Error: (10/21/2017 04:42:19 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Não foi possível iniciar o serviço CldFlt devido ao seguinte erro: Não há suporte para o pedido. Error: (10/21/2017 12:22:32 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Não foi possível iniciar o serviço CldFlt devido ao seguinte erro: Não há suporte para o pedido. Error: (10/20/2017 11:02:52 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-TTAS34U) Description: O servidor {0002DF02-0000-0000-C000-000000000046} não se registrou no DCOM dentro do tempo limite necessário. Error: (10/20/2017 11:02:52 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-TTAS34U) Description: O servidor {0002DF02-0000-0000-C000-000000000046} não se registrou no DCOM dentro do tempo limite necessário. Error: (10/20/2017 11:02:51 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-TTAS34U) Description: O servidor {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} não se registrou no DCOM dentro do tempo limite necessário. Error: (10/20/2017 11:02:50 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-TTAS34U) Description: O servidor {0002DF02-0000-0000-C000-000000000046} não se registrou no DCOM dentro do tempo limite necessário. Error: (10/20/2017 11:02:50 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-TTAS34U) Description: O servidor {0002DF02-0000-0000-C000-000000000046} não se registrou no DCOM dentro do tempo limite necessário. Error: (10/20/2017 11:02:50 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-TTAS34U) Description: O servidor Microsoft.Windows.ContentDeliveryManager_10.0.15063.0_neutral_neutral_cw5n1h2txyewy!App.AppXwdz8g2fxr36xz0tdtagygnvemf85s7gg.mca não se registrou no DCOM dentro do tempo limite necessário. Error: (10/20/2017 10:17:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Não foi possível iniciar o serviço CldFlt devido ao seguinte erro: Não há suporte para o pedido. CodeIntegrity: =================================== Date: 2017-10-21 16:57:26.866 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\GfK Digital Trends App\NetworkMeter\1.1.3\Hook64.dll that did not meet the Store signing level requirements. Date: 2017-10-21 16:56:45.720 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\GfK Digital Trends App\NetworkMeter\1.1.3\Hook64.dll that did not meet the Store signing level requirements. Date: 2017-10-21 16:54:10.173 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\GfK Digital Trends App\NetworkMeter\1.1.3\Hook64.dll that did not meet the Store signing level requirements. Date: 2017-10-21 16:48:34.290 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\GfK Digital Trends App\NetworkMeter\1.1.3\Hook64.dll that did not meet the Store signing level requirements. Date: 2017-10-21 16:47:24.660 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\GfK Digital Trends App\NetworkMeter\1.1.3\Hook64.dll that did not meet the Store signing level requirements. Date: 2017-10-21 16:46:22.910 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\GfK Digital Trends App\NetworkMeter\1.1.3\Hook64.dll that did not meet the Store signing level requirements. Date: 2017-10-21 16:46:17.210 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\GfK Digital Trends App\NetworkMeter\1.1.3\Hook64.dll that did not meet the Store signing level requirements. Date: 2017-10-21 16:45:55.580 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\GfK Digital Trends App\NetworkMeter\1.1.3\Hook64.dll that did not meet the Store signing level requirements. Date: 2017-10-21 16:45:26.028 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\GfK Digital Trends App\NetworkMeter\1.1.3\Hook64.dll that did not meet the Store signing level requirements. Date: 2017-10-21 16:43:57.909 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\GfK Digital Trends App\NetworkMeter\1.1.3\Hook64.dll that did not meet the Store signing level requirements. ==================== Informações da Memória =========================== Processador: Intel(R) Atom(TM) x5-Z8300 CPU @ 1.44GHz Percentagem de memória em uso: 85% RAM física total: 1892.06 MB RAM física disponível: 278.36 MB Virtual Total: 3901.97 MB Virtual disponível: 1167.93 MB ==================== Drives ================================ Drive c: (Windows) (Fixed) (Total:27.95 GB) (Free:5.64 GB) NTFS Drive d: () (Removable) (Total:29.71 GB) (Free:29.62 GB) FAT32 ==================== MBR & Tabela de Partições ================== ======================================================== Disk: 0 (Size: 28.5 GB) (Disk ID: 80EE7D71) Partition: GPT. ======================================================== Disk: 1 (Size: 29.7 GB) (Disk ID: 00000000) Partition: GPT. ==================== Fim de Addition.txt ============================