Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão: 13-05.2019 01 Executado por raffa (14-05-2019 12:40:19) Executando a partir de C:\Users\raffa\Downloads\3. PROGRAMAS Windows 10 Home Single Language Versão 1809 17763.475 (X64) (2019-01-11 19:13:35) Modo da Inicialização: Normal ========================================================== ==================== Contas: ============================= Administrador (S-1-5-21-1393153216-7794777-2559616340-500 - Administrator - Disabled) Convidado (S-1-5-21-1393153216-7794777-2559616340-501 - Limited - Enabled) DefaultAccount (S-1-5-21-1393153216-7794777-2559616340-503 - Limited - Disabled) raffa (S-1-5-21-1393153216-7794777-2559616340-1001 - Administrator - Enabled) => C:\Users\raffa WDAGUtilityAccount (S-1-5-21-1393153216-7794777-2559616340-504 - Limited - Disabled) ==================== Central de Segurança ======================== (Se uma entrada for incluída na fixlist, será removida.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Kaspersky Free (Disabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8} AS: Kaspersky Free (Disabled - Up to date) {B1D2E896-6D96-7460-F17A-838B9D00DD65} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Programas Instalados ====================== (Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.) . . (HKLM\...\{E24348A6-82E6-4FC7-BE14-189265418B30}) (Version: 7.1 - Intel) Hidden . . . (HKLM-x32\...\{0F58DF31-E2D8-45BE-AD43-D31D8707ACA1}) (Version: 3.7.0.8 - Intel) Hidden AAS - Strum GS-2 (HKLM-x32\...\Strum GS-2) (Version: - Applied Acoustics Systems) Ableton Live 10 Suite (HKLM\...\{BF5B0440-80C4-4F3B-B0FD-AB43B2CC106D}) (Version: 10.0.0.0 - Ableton) Accusonus Regroover Pro (HKLM\...\Regroover Pro_is1) (Version: 1.7.8 - Accusonus) Admiral Quality Poly-Ana (HKLM\...\Poly-Ana_is1) (Version: 1.3.4 - Admiral Quality & Team V.R) Admiral Quality Stunning Phaser (HKLM\...\Stunning Phaser_is1) (Version: 0.5.2 - Admiral Quality) Adobe Acrobat Reader DC - Português (HKLM-x32\...\{AC76BA86-7AD7-1046-7B44-AC0F074E4100}) (Version: 19.010.20099 - Adobe Systems Incorporated) Adobe Dreamweaver 2019 (HKLM-x32\...\DRWV_19_1) (Version: 19.1 - Adobe Systems Incorporated) Adobe Photoshop CC 2019 (HKLM-x32\...\PHSP_20_0_4) (Version: 20.0.4 - Adobe Systems Incorporated) Adobe Premiere Pro 2019 (HKLM-x32\...\PPRO_13_1_1) (Version: 13.1.1 - Adobe Systems Incorporated) Adobe Premiere Pro CC 13.1.1.11 (HKLM-x32\...\Adobe Premiere Pro CC 13.1.1.11) (Version: 13.1.1.11 - Adobe Premiere Pro CC) Altiverb 7 Uninstaller (HKLM\...\{367662CA-394A-4095-9549-973FC3807B9B}_is1) (Version: 7.2 - Audio Ease BV) ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.14 - Michael Tippach) ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 4.7.17 - ASUS) Audiority Deleight (HKLM\...\Deleight_is1) (Version: 1.1.1 - Audiority) Audiority GrainSpace (HKLM\...\{03C1C628-EE76-414C-B8A2-8E2993E71B01}_is1) (Version: v2.0.0 - ProgSound & Team V.R) Audiority Polaris (HKLM\...\Polaris_is1) (Version: 1.6.1 - Audiority) BeatSkillz ReeLight (HKLM\...\ReeLight_is1) (Version: 2.0.0 - BeatSkillz) BeatSkillz That Thing (HKLM\...\That Thing_is1) (Version: 1.3.0 - BeatSkillz) Behringer BCD3000 Driver v1.3.4 (HKLM-x32\...\Behringer BCD3000 Driver v1.3.4) (Version: 1.3.4 - Behringer) BitTorrent (HKU\S-1-5-21-1393153216-7794777-2559616340-1001\...\BitTorrent) (Version: 7.10.5.44995 - BitTorrent Inc.) Cities Skylines Industries (HKLM-x32\...\Cities Skylines Industries_is1) (Version: - ) ColourCopy (HKLM\...\u-he ColourCopy_is1) (Version: 1.0.0.7675 - Team V.R) Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.66.29.53 - Conexant) D16 Group Repeater (HKLM\...\Repeater_is1) (Version: 1.1.5 - D16 Group) DarkKZ 1.00 (HKLM-x32\...\DarkKZ 1.00) (Version: 1.00 - Beatskillz) Denise Bass XL version 1.0.0 (HKLM\...\Denise Bass XL_is1) (Version: 1.0.0 - ) Dolby Digital Plus Advanced Audio (HKLM\...\{B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}) (Version: 7.6.5.1 - Dolby Laboratories Inc) ELAN Touchpad 11.15.0.18_X64 (HKLM\...\Elantech) (Version: 11.15.0.18 - ELAN Microelectronic Corp.) Eventide Ensemble Bundle (HKLM\...\Eventide Ensemble Bundle_is1) (Version: 2.0.14 - Eventide) Eventide Newfangled Elevate Bundle (HKLM\...\Newfangled Elevate Bundle_is1) (Version: 1.5.7 - Eventide) FileZilla Client 3.41.2 (HKLM-x32\...\FileZilla Client) (Version: 3.41.2 - Tim Kosse) FL Studio 20 (HKLM-x32\...\FL Studio 20) (Version: - Image-Line) FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version: - Image-Line) Flux Spat Revolution (HKLM\...\Spat Revolution_is1) (Version: 1.1.0.48000 - Flux) Funky Fingers version 1.0.0 (HKLM\...\{9484160E-6E61-4A54-85A8-3A84858554E7}_is1) (Version: 1.0.0 - StudioLinkedVST) FXpansion Cypher2 (HKLM-x32\...\FXpansion Cypher2) (Version: 1.1.0 - FXpansion Audio UK Ltd) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 74.0.3729.131 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.7 - Google LLC) Hidden Heart Of Noise GalaXynth (HKLM\...\GalaXynth_is1) (Version: 1.2.1 - Heart Of Noise) HoRNet AutoGain Pro MK2 (HKLM\...\AutoGain Pro MK2_is1) (Version: 2.0.5 - HoRNet) IK Multimedia Authorization Manager version 1.0.18 (HKLM\...\{85BC0DCB-69E5-4279-AA25-F108EF896588}_is1) (Version: 1.0.18 - IK Multimedia) Instachord version 1.2.0 (HKLM\...\Instachord_is1) (Version: 1.2.0 - ) Intel(R) C++ Redistributables for Windows* on IA-32 (HKLM-x32\...\{7D1B2BB4-6D2E-42AD-8DD4-0F7A4F72FAA7}) (Version: 11.1.072 - Intel Corporation) Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{9B7D5CA0-5521-458D-88D9-AF7D9A06E753}) (Version: 11.1.072 - Intel Corporation) Intel(R) Computing Improvement Program (HKLM\...\{93FE134F-7678-4D90-A849-6FF6EB28CCDF}) (Version: 2.4.04289 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 15.9.0.1015 - Intel Corporation) Intel® Driver & Support Assistant (HKLM-x32\...\{e03c7229-07fa-483d-a64f-55e545a2e21d}) (Version: 3.7.0.8 - Intel) iZotope Meter Tap 3 (HKLM\...\Meter Tap 3_is1) (Version: 1.0.2 - iZotope) iZotope Nectar 3 Elements (HKLM\...\Nectar 3 Elements_is1) (Version: 3.00 - iZotope & Team V.R) iZotope Ozone 8 (HKLM\...\Ozone 8_is1) (Version: 8.0.2 - iZotope) iZotope VocalSynth 2 (HKLM\...\VocalSynth 2_is1) (Version: 2.0.1 - iZotope) Java 8 Update 201 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180201F0}) (Version: 8.0.2010.9 - Oracle Corporation) Julez Jadon Saucey Distortion version v1.0 (HKLM\...\{05855820-B52A-4C10-8647-C3B01D69C4A5}_is1) (Version: v1.0 - Julez Jadon) Julez Jadon Saucey Filter version v1.0 (HKLM\...\{B505F047-F8F7-48C3-B98C-8A0BEC996334}_is1) (Version: v1.0 - Julez Jadon) Kaspersky Free (HKLM-x32\...\{718613F4-492D-4272-ACC3-D04A8EF0F883}) (Version: 19.0.0.1088 - Kaspersky Lab) Hidden Kaspersky Free (HKLM-x32\...\InstallWIX_{718613F4-492D-4272-ACC3-D04A8EF0F883}) (Version: 19.0.0.1088 - Kaspersky Lab) Kaspersky Secure Connection (HKLM-x32\...\{F10AA188-7166-430E-8810-FEAB2AD73DE3}) (Version: 19.0.0.1088 - Kaspersky Lab) Hidden Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{F10AA188-7166-430E-8810-FEAB2AD73DE3}) (Version: 19.0.0.1088 - Kaspersky Lab) Kontakt 6 PORTABLE (HKLM\...\{9380734D-6F66-4F76-A7D3-6D117FAA4773}_is1) (Version: 6.0.3.54 - Native Instruments) Lenovo EasyCamera (HKLM-x32\...\{E399A5B3-ED53-4DEA-AF04-8011E1EB1EAC}) (Version: 6.3.9600.11103 - Realtek Semiconductor Corp.) LinPlug Organ 3 (HKU\S-1-5-21-1393153216-7794777-2559616340-1001\...\LinPlug Organ 3) (Version: - ) Little Clipper version 1.0.0 (HKLM\...\Little Clipper_is1) (Version: 1.0.0 - Boz Digital Labs) Lurssen Mastering Console version 1.1.0 (HKLM\...\{9F525466-89DA-4B7B-BD8C-BBFDC4432DFB}_is1) (Version: 1.1.0 - IK Multimedia) Microsoft Office Professional Plus 2019 - pt-br (HKLM\...\ProPlus2019Retail - pt-br) (Version: 16.0.11601.20178 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-1393153216-7794777-2559616340-1001\...\OneDriveSetup.exe) (Version: 19.062.0331.0006 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x64) - 14.15.26706 (HKLM-x32\...\{95ac1cfa-f4fb-4d1b-8912-7f9d5fbb140d}) (Version: 14.15.26706.0 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x86) - 14.15.26706 (HKLM-x32\...\{7e9fae12-5bbf-47fb-b944-09c49e75c061}) (Version: 14.15.26706.0 - Microsoft Corporation) MusicLab RealGuitar 5 (HKLM\...\RealGuitar 5_is1) (Version: 5.0.2.7424 - MusicLab) MusicLab RealStrat 5 (HKLM\...\RealStrat 5_is1) (Version: 5.0.2.7424 - MusicLab) Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version: 2.3.3.421 - Native Instruments) Native Instruments Traktor Pro 3 (HKLM-x32\...\Native Instruments Traktor Pro 3) (Version: 3.0.2.10 - Native Instruments) Nektar Technology Bolt (HKLM\...\Bolt_is1) (Version: 1.0.1 - Nektar Technology) Neutron 2 Advanced (HKLM-x32\...\Neutron 2) (Version: 2.00 - iZotope, Inc.) Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.11601.20144 - Microsoft Corporation) Hidden Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.11601.20144 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.11601.20144 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0416-0000-0000000FF1CE}) (Version: 16.0.11601.20144 - Microsoft Corporation) Hidden Ozone 8 Advanced (HKLM-x32\...\Ozone 8) (Version: 8.00 - iZotope, Inc.) Pacote de Driver do Windows - ASUS Tek. Corporation (ATP) Mouse (09/25/2015 7.0.0.9) (HKLM\...\6C3F8C7AFD19C7A76AF857BA7CD35E4CFAA9F3F0) (Version: 09/25/2015 7.0.0.9 - ASUS Tek. Corporation) Plugin Boutique Carbon Electra (HKLM\...\Carbon Electra_is1) (Version: 1.5.0 - Plugin Boutique) Project64 version 2.3.2.202 (HKLM-x32\...\{BEB5FB69-4080-466F-96C4-F15DF271718B}_is1) (Version: 2.3.2.202 - ) Radmin Server 3.5.2 (HKLM-x32\...\{1B704FD1-C00F-482F-8997-82F2F19E10E7}) (Version: 3.52.1.0000 - Famatech) Radmin Viewer 3.5.2 (HKLM-x32\...\{9F9073EA-5DCE-4B23-8A0C-C7D2C89AEADC}) (Version: 3.52.1.0000 - Famatech) Radmin VPN 1.0.5 (HKLM-x32\...\{6BCC43BC-084F-4D97-ACF6-8807851773C4}) (Version: 1.0.3723 - Famatech) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10586.31222 - Realtek Semiconduct Corp.) Reimage Repair (HKLM\...\Reimage Repair) (Version: 1.8.9.1 - Reimage) <==== ATENÇÃO RetroArch 1.7.6 (HKU\S-1-5-21-1393153216-7794777-2559616340-1001\...\RetroArch) (Version: 1.7.6 - libretro) RetroHit version 1.5 (HKLM-x32\...\{F9D8AFE3-313A-4469-990E-6BE93B4D6540}_is1) (Version: 1.5 - Beatskillz Plugins) Reverse (HKLM-x32\...\{Reverse-InitialAudio}) (Version: 1.0.3 - Initial Audio) Roland VS JX-3P (HKLM\...\JX-3P_is1) (Version: 1.0.0 - Roland VS) SlowMo (HKLM-x32\...\{SlowMo-InitialAudio}) (Version: 1.0.1 - Initial Audio) Sonible smartEQ2 (HKLM\...\smartEQ2_is1) (Version: 1.0.1 - Sonible) Sound Radix POWAIR (HKLM\...\POWAIR_is1) (Version: 1.1.0 - Sound Radix) Sound Radix SurferEQ (HKLM\...\SurferEQ_is1) (Version: 2.0.3 - Sound Radix) STL Tones STL Tonality - Howard Benson (HKLM\...\STL Tonality - Howard Benson_is1) (Version: 1.0.2b - STL Tones) Storch Expansion 1 version 1.0.0 (HKLM\...\{8C4C3233-1E56-49A6-B484-510C1D743BEE}_is1) (Version: 1.0.0 - StudioLinked) Storch Sound Content 2 version 1.0.0 (HKLM\...\{74D360DE-3AE3-4CC6-9EF1-B89227EE28EE}_is1) (Version: 1.0.0 - StudioLinked) Storch Sound Content 4 version 1.0.0 (HKLM\...\{6B2E3664-3396-4B44-8B98-48019C589A87}_is1) (Version: 1.0.0 - StudioLinked) Storch version 1.0.0 (HKLM\...\{5B4A2EC3-279F-4025-B976-6CC54FCC1823}_is1) (Version: 1.0.0 - StudioLinkedVST) Sugar Bytes Effectrix 1.4.3 (HKLM\...\Effectrix_is1) (Version: 1.4.3 - Sugar Bytes) The Legend version 1.28 (HKLM\...\The Legend_is1) (Version: 1.28 - Synapse Audio Software) Thorn Virtual Synthesizer version 1.10 (HKLM\...\Thorn Virtual Synthesizer_is1) (Version: 1.10 - ) Togu Audio Line TAL-Mod (HKLM\...\TAL-Mod_is1) (Version: 1.1.8 - Togu Audio Line) Togu Audio Line TAL-Sampler (HKLM\...\TAL-Sampler_is1) (Version: 2.8.0 - Togu Audio Line) Togu Audio Line TAL-U-NO-LX (HKLM\...\TAL-U-NO-LX_is1) (Version: 3.2.4 - Togu Audio Line) Tone Empire Goliath (HKLM\...\Goliath_is1) (Version: 1.1.0 - Tone Empire) Ueberschall Elastik 3 (HKLM\...\Elastik 3_is1) (Version: 3.0.0.20136 - Ueberschall) Unfiltered Audio Sandman Pro (HKLM\...\Unfiltered Audio Sandman Pro_is1) (Version: 1.1.1 - Unfiltered Audio & Team V.R) Urban Flame VST 64bit version 1.0 (HKLM-x32\...\{70d8654e7-68cb-45de-8503-1ah7f632500c}_is1) (Version: 1.0 - Industry Kits) UVI Plate (HKLM\...\Plate_is1) (Version: 1.0.4 - UVI) Valhalla DSP ValhallaDelay (HKLM\...\ValhallaDelay_is1) (Version: 1.0.6.0 - Valhalla DSP) Vaporizer2 (HKLM\...\VAST Dynamics Vaporizer2 2.3.5 Demo and Full Version_is1) (Version: 2.3.5 - VAST Dynamics GbR) VirtualDJ 2018 (HKLM-x32\...\{2336DCE6-27C3-4C33-BBF0-D2BCF7917222}) (Version: 8.3.4514.0 - Atomix Productions) VLC media player (HKLM\...\VLC media player) (Version: 3.0.6 - VideoLAN) VOCALOID Amy (HKLM-x32\...\{D388A186-C294-4384-AC21-D310CDA10A81}) (Version: 5.2.0 - Yamaha Corporation) VOCALOID Deactivation Tool (HKLM-x32\...\{C28C630B-3D18-4815-94D9-554D121016D6}) (Version: 4.2.0 - Yamaha Corporation) VOCALOID4.5 Editor for Cubase (HKLM\...\{B318E473-B948-47E6-B39A-A480E9FE5855}) (Version: 4.5.0 - Yamaha Corporation) VOCALOID5 Editor (HKLM\...\{BA28650F-9AFC-4086-BAB7-77DB904DE9F6}) (Version: 5.2.0 - Yamaha Corporation) Warsaw 2.8.2.1 64 bits (HKLM\...\{20E60725-16C8-4FB9-8BC2-AF92C5F8D06D}_is1) (Version: 2.8.2.1 - GAS Tecnologia) Waves Complete (HKLM\...\Complete_is1) (Version: 2018.10.16 - Waves) WhiteClick LLC (HKLM-x32\...\{C443A4A4-EA71-432E-AA2B-1A06C60A5A3F}) (Version: 4.1.3 - White) <==== ATENÇÃO WinRAR 5.61 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.61.0 - win.rar GmbH) Packages: ========= Fitbit Coach -> C:\Program Files\WindowsApps\Fitbit.FitbitCoach_4.4.133.0_x64__6mqt6hf9g46tw [2019-01-11] (Fitbit) Pacote de Experiência Local em Português (Brasil) -> C:\Program Files\WindowsApps\Microsoft.LanguageExperiencePackpt-BR_17763.12.34.0_neutral__8wekyb3d8bbwe [2019-05-07] (Microsoft Corporation) Phototastic Collage -> C:\Program Files\WindowsApps\ThumbmunkeysLtd.PhototasticCollage_2.2.9.0_x64__nfy108tqq3p12 [2019-01-11] (Thumbmunkeys Ltd) Plex -> C:\Program Files\WindowsApps\CAF9E577.Plex_3.2.20.0_x64__aam28m9va5cke [2019-01-11] (Plex) ==================== Exame Personalizado CLSID (Whitelisted): ========================== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) ContextMenuHandlers1: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\ShellEx.dll [2019-04-15] (Kaspersky Lab -> AO Kaspersky Lab) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers2: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\ShellEx.dll [2019-04-15] (Kaspersky Lab -> AO Kaspersky Lab) ContextMenuHandlers4: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\ShellEx.dll [2019-04-15] (Kaspersky Lab -> AO Kaspersky Lab) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Nenhum Arquivo ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_6d34ac0763025a06\igfxDTCM.dll [2018-09-06] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) ContextMenuHandlers6: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 19.0.0\x64\ShellEx.dll [2019-04-15] (Kaspersky Lab -> AO Kaspersky Lab) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal) ==================== Atalhos & WMI ======================== (As entradas podem ser listadas para serem restauradas ou removidas.) ==================== Módulos Carregados (Whitelisted) ============== 2019-04-17 15:50 - 2019-04-17 15:50 - 002550784 _____ () [Arquivo não assinado] C:\Windows\wmu3\wlanext.exe 2014-08-31 12:34 - 2014-08-31 12:34 - 000329728 _____ () [Arquivo não assinado] C:\Windows\wmu3\ZeroConfigService.exe 2019-01-11 17:38 - 2010-06-18 14:29 - 000548864 _____ (Behringer Spezielle Studiotechnik GmbH) [Arquivo não assinado] C:\Program Files\Behringer\BCD3000\Drivers\bcd3kcpan.exe ==================== Alternate Data Streams (Whitelisted) ========= (Se uma entrada for incluída na fixlist, somente o ADS será removido.) AlternateDataStreams: C:\WINDOWS\system32\Drivers\wsddfac.sys:X5ZN8aGXs4 [2410] ==================== Modo de Segurança (Whitelisted) =================== (Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Associação (Whitelisted) =============== (Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.) ==================== Internet Explorer confiável/restrito =============== (Se uma entrada for incluída na fixlist, será removida do Registro.) ==================== Hosts Conteúdo: ========================== (Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.) 2019-01-11 16:23 - 2019-05-08 13:31 - 002097296 _____ C:\WINDOWS\system32\drivers\etc\hosts 127.0.0.1 api.beatskillz.com 127.0.0.1 beatskillz-prod.us-west-1.elasticbeanstalk.com 127.0.0.1 stagecraft-prod.us-west-1.elasticbeanstalk.com ==================== Outras Áreas ============================ (Atualmente não há nenhuma correção automática para esta seção.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%C_EM64T_REDIST11%bin\Intel64;%C_IA32_REDIST11%bin\ia32;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\ HKU\S-1-5-21-1393153216-7794777-2559616340-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\raffa\Documents\1. Documentos Oficiais\Raffab Ajá - Artes gráficas\parque2.jpg DNS Servers: 201.6.2.180 - 201.6.2.80 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off) Firewall do Windows está desabilitado. ==================== MSCONFIG/TASK MANAGER ítens desabilitados == Se uma entrada for incluída na fixlist, será removida. HKLM\...\StartupApproved\Run: => "SecurityHealth" HKLM\...\StartupApproved\Run: => "IAStorIcon" HKLM\...\StartupApproved\Run: => "AdobeGCInvoker-1.0" HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0" HKLM\...\StartupApproved\Run32: => "DSATray" HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched" HKLM\...\StartupApproved\Run32: => "RadminVPN" HKU\S-1-5-21-1393153216-7794777-2559616340-1001\...\StartupApproved\StartupFolder: => "Shortcut to Primary output from Start (Active).lnk" HKU\S-1-5-21-1393153216-7794777-2559616340-1001\...\StartupApproved\Run: => "OneDrive" ==================== Regras do Firewall (Whitelisted) =============== (Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.) FirewallRules: [{4293E869-273D-4AA9-92DB-F49FAAB7075B}] => (Allow) C:\Users\raffa\AppData\Roaming\BitTorrent\BitTorrent.exe (BitTorrent Inc -> BitTorrent Inc.) FirewallRules: [{437C510B-1C77-4A3C-9813-251D5D5ECF28}] => (Allow) C:\Users\raffa\AppData\Roaming\BitTorrent\BitTorrent.exe (BitTorrent Inc -> BitTorrent Inc.) FirewallRules: [{08C3CB38-F942-4745-B1E8-0C9982C01323}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (Intel(R) Software Development Products -> ) FirewallRules: [{CE91B516-6978-4AE7-883E-5E0668FE7242}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (Intel(R) Software Development Products -> ) FirewallRules: [{67857B8B-02FA-48CE-8577-276B0D33814D}] => (Allow) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (Intel(R) Software Development Products -> ) FirewallRules: [{11154E68-BC6E-4508-BAF9-BC8B11BBA6F5}] => (Allow) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe (Intel(R) Software Development Products -> ) FirewallRules: [{94B4EC60-0664-4080-81B2-8C43E00040ED}] => (Block) %ProgramFiles% (x86)\VirtualDJ\virtualdj8.exe Nenhum Arquivo FirewallRules: [{6D0CDA83-0EE8-4629-A303-A1C0564D8604}] => (Block) %ProgramFiles% (x86)\VirtualDJ\virtualdj8.exe Nenhum Arquivo FirewallRules: [{7DF66DCB-1876-41EC-877F-C68E401881EC}] => (Block) C:\Program Files (x86)\Image-Line\FL Studio 20\FL64.exe (Image Line -> Image-Line) FirewallRules: [{1C149971-7B65-498A-A547-1935E6163860}] => (Block) C:\Program Files (x86)\Image-Line\FL Studio 20\FL64.exe (Image Line -> Image-Line) FirewallRules: [{74D7A653-E7E4-4914-A8C7-4DE7A7F8D35C}] => (Allow) C:\Program Files (x86)\Image-Line\FL Studio 20\FL64.exe (Image Line -> Image-Line) FirewallRules: [{86452A32-467F-47EB-998F-D3BC3D335C24}] => (Allow) C:\Program Files (x86)\Image-Line\FL Studio 20\FL64.exe (Image Line -> Image-Line) FirewallRules: [{F2970F46-4FDD-42C5-B479-31A5A0DE3503}] => (Block) %ProgramFiles% (x86)\Image-Line\FL Studio 20\FL64.exe Nenhum Arquivo FirewallRules: [{E555DADB-3403-424A-A447-D2D7624BDB8A}] => (Block) %ProgramFiles% (x86)\Image-Line\FL Studio 20\FL64 (scaled).exe Nenhum Arquivo FirewallRules: [{69FDE636-02B5-45BB-993D-6223D1507CC0}] => (Block) %ProgramFiles% (x86)\Image-Line\FL Studio 20\FL (scaled).exe Nenhum Arquivo FirewallRules: [{173658BA-E1D7-47BE-ACE5-541D63B91986}] => (Block) %ProgramFiles% (x86)\Image-Line\FL Studio 20\FL.exe Nenhum Arquivo FirewallRules: [{3D9CA7F3-9EAE-4438-A6EA-764115927678}] => (Block) %ProgramFiles% (x86)\Image-Line\FL Studio 20\FL (scaled).exe Nenhum Arquivo FirewallRules: [{ADD4930B-1034-413C-B3A1-96A215BC6EAD}] => (Block) %ProgramFiles% (x86)\Image-Line\FL Studio 20\FL.exe Nenhum Arquivo FirewallRules: [{717ABF43-7A7C-4B69-B2A1-9B13C79F0FA8}] => (Block) %ProgramFiles% (x86)\Image-Line\FL Studio 20\FL64 (scaled).exe Nenhum Arquivo FirewallRules: [{D620BE88-7ADE-45EF-8AB6-EC47A056B725}] => (Block) %ProgramFiles% (x86)\Image-Line\FL Studio 20\FL64.exe Nenhum Arquivo FirewallRules: [{48CA549F-8CAC-4C5E-9E84-2EFD2E263213}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{1F25AD5A-3871-4651-B575-A8163E560FD6}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{59345E13-EE9D-4971-8171-764E29F56B10}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{635A7545-C248-4159-A7D6-7D78B1FCF810}] => (Allow) C:\Program Files\Diebold\Warsaw\core.exe (Gas Informatica Ltda -> GAS Tecnologia LTDA) FirewallRules: [{66D07891-1479-408D-9457-FD3FC56A56B4}] => (Block) %ProgramFiles%\Adobe\Adobe Photoshop CC 2019\Photoshop.exe Nenhum Arquivo FirewallRules: [{B488774E-CE4F-41D8-88EB-3F3D5B42A293}] => (Block) %ProgramFiles%\Adobe\Adobe Photoshop CC 2019\Photoshop.exe Nenhum Arquivo FirewallRules: [{26976A6D-2AEC-4686-9761-3C6D39C00EF2}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe Nenhum Arquivo FirewallRules: [{70364F12-3ADE-433A-B341-4FF5FBD17BD1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe Nenhum Arquivo FirewallRules: [{F90096C3-7622-4095-AAE1-B15300594C02}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe Nenhum Arquivo FirewallRules: [{75CCA650-A87A-4000-99EA-4959BC63F92A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe Nenhum Arquivo FirewallRules: [{D99A3659-904F-4C25-99FA-2DD604414425}] => (Allow) C:\Users\raffa\Downloads\Nova pasta (7)\Project64k\Project64k.EXE Nenhum Arquivo FirewallRules: [{31EB2956-E5E2-43F1-A632-56ECC080F42C}] => (Allow) C:\Users\raffa\Downloads\Nova pasta (7)\Project64k\Project64k.EXE Nenhum Arquivo FirewallRules: [{7A1975A8-64AA-4C95-B065-48CAED6D9C8B}] => (Allow) C:\Users\raffa\Downloads\Nova pasta (7)\Project64k\Project64k.EXE Nenhum Arquivo FirewallRules: [{B9C30415-3431-4748-B86C-9FE66A092357}] => (Allow) C:\Users\raffa\Downloads\Nova pasta (7)\Project64k\Project64k.EXE Nenhum Arquivo FirewallRules: [{DECF0D65-A6BD-4A33-B55B-1A125B59432A}] => (Allow) %SystemDrive%\Users\raffa\Downloads\Project64k\Project64k.EXE Nenhum Arquivo FirewallRules: [{3D7777D5-9440-4B92-BD3A-4E1B83F5AA32}] => (Allow) %SystemDrive%\Users\raffa\Downloads\Project64k\Project64k.EXE Nenhum Arquivo FirewallRules: [{6ACBF874-01E4-4F10-A641-C6C02BA382B8}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{9EA9F1B8-2A15-4BCA-9127-4BEA70768DB5}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{6BDC4C77-64E6-4716-93E3-254D336B36EC}] => (Allow) C:\Program Files (x86)\Radmin VPN\RvControlSvc.exe (Famatech Corp. -> Famatech Corp.) FirewallRules: [{B756B543-072C-44FA-A0C9-6E0DF6EFB336}] => (Allow) C:\WINDOWS\SysWOW64\rserver30\rserver3.exe (Famatech Corp. -> Famatech Corp.) FirewallRules: [{690E2552-4873-4FC0-A1E0-B58676248F05}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) ==================== Pontos de Restauração ========================= 06-05-2019 15:03:00 Installed MusicLab Virtual Midi Driver (64-bit) 10-05-2019 14:28:04 Installed Ableton Live 10 Suite 10-05-2019 15:02:33 Installed Ableton Live 10 Suite 14-05-2019 11:57:44 Removed Radmin Viewer 3.5.2. ==================== Dispositivos Apresentando Falhas No Gerenciador ============= ==================== Erros no Log de eventos: ========================= Erros em Aplicativos: ================== Error: (05/14/2019 10:30:58 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: SearchUI.exe, versão: 10.0.17763.404, carimbo de data/hora: 0x5c9da6ae Nome do módulo com falha: CortanaApi.dll, versão: 10.0.17763.348, carimbo de data/hora: 0x5c73b0a0 Código de exceção: 0x80000003 Deslocamento da falha: 0x00000000001e2dc3 ID do processo com falha: 0x2490 Hora de início do aplicativo com falha: 0x01d50a5857a751d9 Caminho do aplicativo com falha: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe Caminho do módulo com falha: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll ID do Relatório: c3db9d97-cc49-441f-9066-537b7eb48056 Nome completo do pacote com falha: Microsoft.Windows.Cortana_1.11.5.17763_neutral_neutral_cw5n1h2txyewy ID do aplicativo relativo ao pacote com falha: CortanaUI Error: (05/14/2019 10:25:59 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: O programa LockApp.exe versão 10.0.17763.1 parou de interagir com o Windows e foi fechado. Para ver se mais informações sobre o problema estão disponíveis, verifique o histórico de problemas no painel de controle Segurança e Manutenção. ID do Processo: 2e20 Hora de Início: 01d50a586b2eae14 Hora de Término: 4294967295 Caminho do Aplicativo: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe ID do Relatório: bd597b00-6f65-4edb-b2ea-7ff15b9bc6f8 Nome completo do pacote com falha: Microsoft.LockApp_10.0.17763.1_neutral__cw5n1h2txyewy ID do aplicativo relativo ao pacote com falha: WindowsDefaultLockScreen Tipo com falha: Cross-process Error: (05/13/2019 05:45:37 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: igfxEM.exe, versão: 6.15.100.6286, carimbo de data/hora: 0x5b751c2e Nome do módulo com falha: ntdll.dll, versão: 10.0.17763.475, carimbo de data/hora: 0x3230aa04 Código de exceção: 0xc0000409 Deslocamento da falha: 0x000000000008fb5f ID do processo com falha: 0x314c Hora de início do aplicativo com falha: 0x01d509cca92b43a6 Caminho do aplicativo com falha: C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_6d34ac0763025a06\igfxEM.exe Caminho do módulo com falha: C:\WINDOWS\SYSTEM32\ntdll.dll ID do Relatório: 4541d856-139e-4325-b03e-7510ff42276e Nome completo do pacote com falha: ID do aplicativo relativo ao pacote com falha: Error: (05/13/2019 10:37:42 AM) (Source: SideBySide) (EventID: 35) (User: ) Description: Falha na geração de contexto de ativação para "C:\Program Files (x86)\Waves\SoundGrid Studio\SoundGrid Studio.exe". Erro no arquivo de manifesto ou de política C:\Program Files (x86)\Waves\SoundGrid Studio\Modules\Modules.MANIFEST", na linha 8. Identidade do componente localizado no manifesto não corresponde à identidade do componente solicitado. A referência é Modules,processorArchitecture="AMD64",type="win32",version="1.0.0.0". A definição é Modules,processorArchitecture="x86",type="win32",version="1.0.0.0". Use o arquivo sxstrace.exe para obter um dignóstico detalhado. Error: (05/13/2019 10:36:26 AM) (Source: SideBySide) (EventID: 35) (User: ) Description: Falha na geração de contexto de ativação para "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Erro no arquivo de manifesto ou de política C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL", na linha 1. Identidade do componente localizado no manifesto não corresponde à identidade do componente solicitado. A referência é UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0". A definição é UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0". Use o arquivo sxstrace.exe para obter um dignóstico detalhado. Error: (05/11/2019 08:03:33 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: AsusSGPlusBTServer64.exe, versão: 1.1.2.13, carimbo de data/hora: 0x57e38ee3 Nome do módulo com falha: ntdll.dll, versão: 10.0.17763.475, carimbo de data/hora: 0x3230aa04 Código de exceção: 0xc0000005 Deslocamento da falha: 0x000000000004df23 ID do processo com falha: 0x6c8 Hora de início do aplicativo com falha: 0x01d508030ff61be5 Caminho do aplicativo com falha: C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSGPlusBTServer64.exe Caminho do módulo com falha: C:\WINDOWS\SYSTEM32\ntdll.dll ID do Relatório: 6b3fe142-7a70-4c12-87f3-60cd1aec8ad4 Nome completo do pacote com falha: ID do aplicativo relativo ao pacote com falha: Error: (05/09/2019 04:42:46 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: mbamservice.exe, versão: 3.2.0.765, carimbo de data/hora: 0x5c508d96 Nome do módulo com falha: ScanControllerImpl.dll, versão: 3.2.0.951, carimbo de data/hora: 0x5c6d974e Código de exceção: 0xc0000005 Deslocamento da falha: 0x00000000000f5a00 ID do processo com falha: 0x1340 Hora de início do aplicativo com falha: 0x01d5069ebc6e3dcd Caminho do aplicativo com falha: C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe Caminho do módulo com falha: C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ScanControllerImpl.dll ID do Relatório: 829387e6-1868-4dd4-b20b-3413a3654f5c Nome completo do pacote com falha: ID do aplicativo relativo ao pacote com falha: Error: (05/09/2019 04:06:21 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome do aplicativo com falha: FL64.exe, versão: 1.1.50.0, carimbo de data/hora: 0x5c19105a Nome do módulo com falha: bcd3kasio_x64.dll, versão: 1.3.4.0, carimbo de data/hora: 0x4c5ade1a Código de exceção: 0xc0000005 Deslocamento da falha: 0x0000000000002a1e ID do processo com falha: 0x2c24 Hora de início do aplicativo com falha: 0x01d5066e695fde8f Caminho do aplicativo com falha: C:\Program Files (x86)\Image-Line\FL Studio 20\FL64.exe Caminho do módulo com falha: c:\program files\behringer\bcd3000\drivers\bcd3kasio_x64.dll ID do Relatório: 239d6ba2-ece4-48f1-990b-67b440e92ee6 Nome completo do pacote com falha: ID do aplicativo relativo ao pacote com falha: Erros de Sistema: ============= Error: (05/14/2019 11:55:18 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: O serviço Reimage Real Time Protector foi encerrado inesperadamente. Isso aconteceu 1 vez(es). Error: (05/14/2019 11:18:19 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-G126425) Description: As configurações de permissão específico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} e APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} ao usuário DESKTOP-G126425\raffa SID (S-1-5-21-1393153216-7794777-2559616340-1001) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não Disponível SID (Não Disponível). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes. Error: (05/14/2019 11:11:23 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: O serviço Служба Microsoft Office "Нажми и работай" foi encerrado inesperadamente. Isso aconteceu 3 vez(es). Error: (05/14/2019 11:11:19 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: O serviço Kaspersky Secure Connection Service 3.0.0 foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 10000 milissegundos: Reiniciar o serviço. Error: (05/14/2019 11:10:13 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: O serviço Adobe Acrobat Update Service foi encerrado inesperadamente. Isso aconteceu 1 vez(es). Error: (05/14/2019 11:10:01 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: O serviço Служба Microsoft Office "Нажми и работай" foi finalizado inesperadamente. Isto aconteceu 2 vez(es). A seguinte ação corretiva será tomada em 0 milissegundos: Reiniciar o serviço. Error: (05/14/2019 11:08:50 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: O serviço Служба Microsoft Office "Нажми и работай" foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 0 milissegundos: Reiniciar o serviço. Error: (05/14/2019 11:05:43 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Não foi possível iniciar o serviço Windows Presentation Foundation Font Cache 3.0.0.0 devido ao seguinte erro: O serviço não respondeu à requisição de início ou controle em tempo hábil. Windows Defender: =================================== Date: 2019-03-31 11:38:17.148 Description: O exame do Windows Defender Antivirus foi interrompido antes da conclusão. ID do Exame: {54DEABA1-1477-4234-80B5-A94A5FBA48A0} Tipo de Exame: Antimalware Parâmetros do Exame: Verificação Rápida Usuário: AUTORIDADE NT\SISTEMA Date: 2019-03-31 03:11:05.268 Description: O exame do Windows Defender Antivirus foi interrompido antes da conclusão. ID do Exame: {D393C628-B3F3-493B-9945-83CF7F180B4A} Tipo de Exame: Antimalware Parâmetros do Exame: Verificação Rápida Usuário: AUTORIDADE NT\SISTEMA Date: 2019-03-30 23:01:49.772 Description: O exame do Windows Defender Antivirus foi interrompido antes da conclusão. ID do Exame: {81AD48FC-2EF3-44E7-BE3B-A826F2AB9EC3} Tipo de Exame: Antimalware Parâmetros do Exame: Verificação Rápida Usuário: AUTORIDADE NT\SISTEMA Date: 2019-03-30 21:49:59.431 Description: O exame do Windows Defender Antivirus foi interrompido antes da conclusão. ID do Exame: {A4233965-48CA-4B0C-9C9C-0011C7B8D0EA} Tipo de Exame: Antimalware Parâmetros do Exame: Verificação Rápida Usuário: AUTORIDADE NT\SISTEMA Date: 2019-03-30 21:10:07.082 Description: O exame do Windows Defender Antivirus foi interrompido antes da conclusão. ID do Exame: {2029CDA6-C265-4AD9-8BD2-3106119B75CA} Tipo de Exame: Antimalware Parâmetros do Exame: Verificação Rápida Usuário: AUTORIDADE NT\SISTEMA CodeIntegrity: =================================== Date: 2019-05-09 16:43:01.617 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\FlightSettings.dll because the set of per-page image hashes could not be found on the system. Date: 2019-05-09 16:43:01.600 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\FlightSettings.dll because the set of per-page image hashes could not be found on the system. Date: 2019-05-09 16:42:56.868 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\FlightSettings.dll because the set of per-page image hashes could not be found on the system. Date: 2019-05-09 16:42:56.836 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\FlightSettings.dll because the set of per-page image hashes could not be found on the system. Date: 2019-05-09 16:42:56.790 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\dsreg.dll because the set of per-page image hashes could not be found on the system. Date: 2019-05-09 16:42:56.770 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\dsreg.dll because the set of per-page image hashes could not be found on the system. Date: 2019-05-09 16:42:47.135 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system. Date: 2019-05-09 16:42:46.840 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system. ==================== Informações da Memória =========================== BIOS: LENOVO D5CN47WW 08/26/2016 Motherboard: LENOVO Paris 5A8 Processador: Intel(R) Core(TM) i5-6200U CPU @ 2.30GHz Percentagem de memória em uso: 58% RAM física total: 8051.91 MB RAM física disponível: 3366.6 MB Virtual Total: 9331.91 MB Virtual disponível: 4101.52 MB ==================== Drives ================================ Drive c: (Raffab Ajá) (Fixed) (Total:886.75 GB) (Free:149.59 GB) NTFS \\?\Volume{a57d0354-984b-42b6-87ea-1801e0d4dfc7}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.51 GB) NTFS \\?\Volume{a88ee9ea-d4ac-4267-b247-68423b8b381a}\ (LENOVO_PART) (Fixed) (Total:17.54 GB) (Free:6.06 GB) NTFS \\?\Volume{8d78c78c-33cf-49e1-be8f-914221ec4074}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32 ==================== MBR & Tabela de Partições ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: 917A51C6) Partition: GPT. ==================== Fim de Addition.txt ============================