Resultado do exame Adicional Farbar Recovery Scan Tool (x86) Versão: 17-04-2021
Executado por Emerson (25-04-2021 16:38:22)
Executando a partir de C:\Users\Emerson\Desktop
Microsoft Windows 10 Pro Versão 20H2 19042.928 (X86) (2021-04-25 05:14:21)
Modo da Inicialização: Normal
==========================================================


==================== Contas: =============================

Administrador (S-1-5-21-2035471905-1055283875-1215384205-500 - Administrator - Disabled)
Convidado (S-1-5-21-2035471905-1055283875-1215384205-501 - Limited - Disabled)
DefaultAccount (S-1-5-21-2035471905-1055283875-1215384205-503 - Limited - Disabled)
Emerson (S-1-5-21-2035471905-1055283875-1215384205-1001 - Administrator - Enabled) => C:\Users\Emerson
WDAGUtilityAccount (S-1-5-21-2035471905-1055283875-1215384205-504 - Limited - Disabled)

==================== Central de Segurança ========================

(Se uma entrada for incluída na fixlist, será removida.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: COMODO Antivirus (Disabled - Out of date) {05BC7AB5-FF0E-71EC-1054-15DA19B62DC7}

==================== Programas Instalados ======================

(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)

µTorrent (HKU\S-1-5-21-2035471905-1055283875-1215384205-1001\...\uTorrent) (Version: 3.5.5.45988 - BitTorrent Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.76 - Piriform)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.8.7128 - CDBurnerXP)
COMODO Antivirus (HKLM\...\{0E9AFD45-C3BA-41D1-B54B-495A22CB3409}) (Version: 12.2.2.7098 - COMODO Security Solutions Inc.) Hidden
COMODO Antivirus (HKLM\...\COMODO Internet Security) (Version: 12.2.2.7098 - COMODO Security Solutions Inc.)
DVD Flick 1.3.0.7 (HKLM\...\DVD Flick_is1) (Version: 1.3.0.7 - Dennis Meuwissen)
Google Drive (HKLM\...\{6BBAE539-2232-434A-A4E5-9A33560C6283}) (Version: 47.0.19.0 - Google LLC)
HP Deskjet 3050 J610 series Ajuda (HKLM\...\{F7632A9B-661E-4FD9-B1A4-3B86BC99847F}) (Version: 140.0.63.63 - Hewlett Packard)
HP Deskjet 3050 J610 series Estudo de aprimoramento de produtos (HKLM\...\{57661627-CDB4-4D53-88A7-A2122AB5265E}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Deskjet 3050 J610 series Software básico do dispositivo (HKLM\...\{15242A89-4D9E-4CD1-B3BC-3B402485B5D6}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
Internet Security Essentials (HKLM\...\ComodoIse) (Version: 1.6.472587.185 - Comodo)
Java 8 Update 281 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180281F0}) (Version: 8.0.2810.9 - Oracle Corporation)
KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version:  - )
LibreOffice 7.1.0.3 (HKLM\...\{94597A85-20E2-45EC-84D0-E959A0872421}) (Version: 7.1.0.3 - The Document Foundation)
Microsoft Edge (HKLM\...\Microsoft Edge) (Version: 90.0.818.46 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2035471905-1055283875-1215384205-1001\...\OneDriveSetup.exe) (Version: 21.002.0104.0005 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-2035471905-1055283875-1215384205-1001\...\Teams) (Version: 1.3.00.28779 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{8C5A86C3-6E11-46CF-9DE2-7B7DABB5AC77}) (Version: 2.77.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.14.26429 (HKLM\...\{2019b6a0-8533-4a04-ac0e-b2c10bdb9841}) (Version: 14.14.26429.4 - Microsoft Corporation)
Movavi Video Converter 21 Premium (HKU\S-1-5-21-2035471905-1055283875-1215384205-1001\...\Movavi Video Converter 21 Premium) (Version: 21.2.0 - Movavi)
Mozilla Firefox 88.0 (x86 pt-BR) (HKLM\...\Mozilla Firefox 88.0 (x86 pt-BR)) (Version: 88.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 88.0.0.7775 - Mozilla)
Mozilla Thunderbird 68.8.1 (x86 pt-BR) (HKLM\...\Mozilla Thunderbird 68.8.1 (x86 pt-BR)) (Version: 68.8.1 - Mozilla)
Opera Stable 75.0.3969.218 (HKU\S-1-5-21-2035471905-1055283875-1215384205-1001\...\Opera 75.0.3969.218) (Version: 75.0.3969.218 - Opera Software)
PhotoScape (HKLM\...\PhotoScape) (Version:  - )
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.7.28.0 - Samsung Electronics Co., Ltd.)
Smart Switch (HKLM\...\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.20042.6 - Samsung Electronics Co., Ltd.) Hidden
Smart Switch (HKLM\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.20042.6 - Samsung Electronics Co., Ltd.)
SumatraPDF (HKLM\...\SumatraPDF) (Version: 3.2 - Krzysztof Kowalczyk)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.12 - VideoLAN)
WhatsApp (HKU\S-1-5-21-2035471905-1055283875-1215384205-1001\...\WhatsApp) (Version: 2.2112.10 - WhatsApp)
WinRAR 6.00 (32-bit) (HKLM\...\WinRAR archiver) (Version: 6.00.0 - win.rar GmbH)
WinX DVD Author 6.3.10 (HKLM\...\WinX DVD Author_is1) (Version:  - DigiartySoft, Inc.)
WinX DVD Ripper Platinum 8.20.6 (HKLM\...\WinX DVD Ripper Platinum_is1) (Version:  - Digiarty Software, Inc.)
Zoom (HKU\S-1-5-21-2035471905-1055283875-1215384205-1001\...\ZoomUMX) (Version: 5.5.1 (12488.0202) - Zoom Video Communications, Inc.)

Packages:
=========
Complemento do Mecanismo de Mídia de Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x86__8wekyb3d8bbwe [2020-09-08] (Microsoft Corporation)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_126.2.222.0_x86__v10z8vjag6ke6 [2021-04-10] (HP Inc.)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-04-25] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.9.4072.0_x86__8wekyb3d8bbwe [2021-04-25] (Microsoft Studios) [MS Ad]
Xbox 360 SmartGlass -> C:\Program Files\WindowsApps\Microsoft.XboxCompanion_1.4.3.0_x86__8wekyb3d8bbwe [2020-08-12] (Microsoft Corporation) [MS Ad]

==================== Exame Personalizado CLSID (Whitelisted): ==============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

CustomCLSID: HKU\S-1-5-21-2035471905-1055283875-1215384205-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\Emerson\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x86\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2035471905-1055283875-1215384205-1001_Classes\CLSID\{3D3B1846-CC43-42AE-BFF9-D914083C2BA3}\InprocServer32 -> C:\Users\Emerson\AppData\Local\SumatraPDF\PdfPreview.dll () [Arquivo não assinado]
CustomCLSID: HKU\S-1-5-21-2035471905-1055283875-1215384205-1001_Classes\CLSID\{55808EA8-81FE-43c6-AAE8-1D8149F941D3}\InprocServer32 -> C:\Users\Emerson\AppData\Local\SumatraPDF\PdfFilter.dll () [Arquivo não assinado]
CustomCLSID: HKU\S-1-5-21-2035471905-1055283875-1215384205-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\Emerson\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x86\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2035471905-1055283875-1215384205-1001_Classes\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\localserver32 -> C:\Users\Emerson\AppData\Local\Programs\Opera\75.0.3969.218\notification_helper.exe (Opera Software AS -> The Chromium Authors)
ShellIconOverlayIdentifiers: [    GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\47.0.19.0\drivefsext.dll [2021-04-14] (Google LLC -> Google, Inc.)
ShellIconOverlayIdentifiers: [    GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\47.0.19.0\drivefsext.dll [2021-04-14] (Google LLC -> Google, Inc.)
ShellIconOverlayIdentifiers: [    GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\47.0.19.0\drivefsext.dll [2021-04-14] (Google LLC -> Google, Inc.)
ShellIconOverlayIdentifiers: [    GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\47.0.19.0\drivefsext.dll [2021-04-14] (Google LLC -> Google, Inc.)
ContextMenuHandlers1: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2020-12-24] (Comodo Security Solutions, Inc. -> COMODO)
ContextMenuHandlers1: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\47.0.19.0\drivefsext.dll [2021-04-14] (Google LLC -> Google, Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [AlcoholShellEx] -> {32020A01-506E-484D-A2A8-BE3CF17601C3} => C:\Program Files\Alcohol Soft\Alcohol 120\AxShlex.dll [2014-09-06] (Alcohol Soft -> Alcohol Soft Development Team)
ContextMenuHandlers2: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2020-12-24] (Comodo Security Solutions, Inc. -> COMODO)
ContextMenuHandlers4: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\47.0.19.0\drivefsext.dll [2021-04-14] (Google LLC -> Google, Inc.)
ContextMenuHandlers5: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\47.0.19.0\drivefsext.dll [2021-04-14] (Google LLC -> Google, Inc.)
ContextMenuHandlers6: [Comodo Antivirus] -> {4255A182-CAD9-4214-A19B-7BA7FB633BBD} => C:\Program Files\COMODO\COMODO Internet Security\cavshell.dll [2020-12-24] (Comodo Security Solutions, Inc. -> COMODO)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-12-01] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Atalhos & WMI ========================

==================== Módulos Carregados (Whitelisted) =============

==================== Alternate Data Streams (Whitelisted) ========

==================== Modo de Segurança (Whitelisted) ==================

==================== Associação (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_281\bin\ssv.dll [2021-02-15] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_281\bin\jp2ssv.dll [2021-02-15] (Oracle America, Inc. -> Oracle Corporation)

==================== Hosts Conteúdo: =========================

(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)

2019-03-18 23:43 - 2019-03-18 23:43 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Outras Áreas ===========================

(Atualmente não há nenhuma correção automática para esta seção.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-2035471905-1055283875-1215384205-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Emerson\AppData\Roaming\PhotoScape\Wallpaper.bmp
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Firewall do Windows está habilitado.

==================== MSCONFIG/TASK MANAGER ítens desabilitados ==

(Se uma entrada for incluída na fixlist, será removida.)

HKLM\...\StartupApproved\Run: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run: => "Wondershare Helper Compact.exe"
HKU\S-1-5-21-2035471905-1055283875-1215384205-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2035471905-1055283875-1215384205-1001\...\StartupApproved\Run: => "Opera Browser Assistant"
HKU\S-1-5-21-2035471905-1055283875-1215384205-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
HKU\S-1-5-21-2035471905-1055283875-1215384205-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-2035471905-1055283875-1215384205-1001\...\StartupApproved\Run: => "AlcoholAutomount"
HKU\S-1-5-21-2035471905-1055283875-1215384205-1001\...\StartupApproved\Run: => "GoogleDriveFS"

==================== Regras do Firewall (Whitelisted) ================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

FirewallRules: [{7AFD51BD-188A-49E5-89FC-9C4CDFC4EC2B}] => (Allow) C:\Users\Emerson\AppData\Local\Programs\Opera\75.0.3969.218\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{DFAC80CA-48D1-4D3D-8E18-02F1AB237C72}] => (Allow) C:\Program Files\Apowersoft\Video Converter Studio\Video Converter Studio.exe => Nenhum Arquivo
FirewallRules: [{83A67A9B-052C-4DFB-97E1-D5C127ABEDE5}] => (Allow) C:\Program Files\Apowersoft\Video Converter Studio\Video Converter Studio.exe => Nenhum Arquivo
FirewallRules: [{8376FC9F-4AC8-4C27-A55B-52D1A0C7455C}] => (Allow) C:\Users\Emerson\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [UDP Query User{54F09303-F606-407E-974F-CB9A14CE3FF2}C:\users\emerson\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\emerson\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{28D5D792-9C4F-4871-A819-A751DAF16331}C:\users\emerson\appdata\local\microsoft\teams\current\teams.exe] => (Block) C:\users\emerson\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{DBFC3B58-1719-45A1-A151-956B94D4A167}] => (Allow) C:\Users\Emerson\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{679CE134-4CCE-4E11-9DF5-B5BEDFE3D354}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{FEF1F864-FF7A-4113-8503-86BE74A83E39}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{CB8DFE77-53AB-4358-B080-52954835654E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{9824ECD9-71EE-47B7-B9B5-04B8D1DC49EF}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [UDP Query User{1C0D5695-67E4-4770-B61F-5496333A0BC6}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [TCP Query User{180CE81C-34B7-46A6-8678-F1EFA09A2186}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{E0918F5D-22DE-4447-B75D-A35044E25D28}] => (Allow) C:\Users\Emerson\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{DBD4C9C0-C936-419F-84AB-355DE46711AC}] => (Allow) C:\Users\Emerson\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{DE4164E3-1032-4E4B-82D4-997E075F96D5}] => (Allow) C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{B7CE9868-E3B7-43BE-AAA9-9EDAE9F9F626}] => (Allow) C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\HPNetworkCommunicator.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{091757DB-9593-4587-92BD-E706C1EB171B}] => (Allow) C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\DeviceSetup.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{47A774F3-B5D9-4BC5-8E57-54407EA9DD72}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{8E5A7165-73D7-41A2-AA6A-3871177A8393}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

==================== Pontos de Restauração =========================

25-04-2021 04:32:04 Instalador de Módulos do Windows

==================== Dispositivos Apresentando Falhas No Gerenciador ============


==================== Erros no Log de eventos: ========================

Erros em Aplicativos:
==================
Error: (04/25/2021 04:40:33 AM) (Source: MsiInstaller) (EventID: 10005) (User: AUTORIDADE NT)
Description: Produto: Microsoft Update Health Tools -- A later version of Microsoft Update Health Tools is already installed. Setup will now exit.

Error: (04/25/2021 04:34:30 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Falha dos Serviços de Criptografia ao processar a chamada de OnIdentity() no Objeto de Gravador do Sistema..

Details:
AddLegacyDriverFiles: Unable to back up image of binary Protocolo Microsoft LLDP.

System Error:
Acesso negado.
.

Error: (04/25/2021 01:52:46 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: AUTORIDADE NT)
Description: O provedor de eventos CisWmi tentou registrar a consulta "SELECT * FROM CisFileRatingChange" cuja classe de destino "CisFileRatingChange" no namespace //./ROOT/cis não existe. A consulta será ignorada.

Error: (04/25/2021 01:52:46 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: AUTORIDADE NT)
Description: O provedor de eventos CisWmi tentou registrar a consulta "SELECT * FROM CisStatusChange" cuja classe de destino "CisStatusChange" no namespace //./ROOT/cis não existe. A consulta será ignorada.

Error: (04/25/2021 01:52:46 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: AUTORIDADE NT)
Description: O provedor de eventos CisWmi tentou registrar a consulta "SELECT * FROM CisNotification" cuja classe de destino "CisNotification" no namespace //./ROOT/cis não existe. A consulta será ignorada.

Error: (04/25/2021 01:52:46 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: AUTORIDADE NT)
Description: O provedor de eventos CisWmi tentou registrar a consulta "SELECT * FROM FwAlert" cuja classe de destino "FwAlert" no namespace //./ROOT/cis não existe. A consulta será ignorada.

Error: (04/25/2021 01:52:46 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: AUTORIDADE NT)
Description: O provedor de eventos CisWmi tentou registrar a consulta "SELECT * FROM DfAlert" cuja classe de destino "DfAlert" no namespace //./ROOT/cis não existe. A consulta será ignorada.

Error: (04/25/2021 01:52:46 AM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: AUTORIDADE NT)
Description: O provedor de eventos CisWmi tentou registrar a consulta "SELECT * FROM AvAlert" cuja classe de destino "AvAlert" no namespace //./ROOT/cis não existe. A consulta será ignorada.


Erros de Sistema:
=============
Error: (04/25/2021 03:26:18 PM) (Source: DCOM) (EventID: 10010) (User: ZALACHENK0)
Description: O servidor Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca não se registrou no DCOM dentro do tempo limite necessário.

Error: (04/25/2021 10:58:28 AM) (Source: DCOM) (EventID: 10010) (User: ZALACHENK0)
Description: O servidor Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca não se registrou no DCOM dentro do tempo limite necessário.

Error: (04/25/2021 05:51:37 AM) (Source: DCOM) (EventID: 10010) (User: ZALACHENK0)
Description: O servidor {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474} não se registrou no DCOM dentro do tempo limite necessário.

Error: (04/25/2021 05:51:37 AM) (Source: DCOM) (EventID: 10010) (User: AUTORIDADE NT)
Description: O servidor {D4872B74-3AFC-47CD-B8A2-9E4F998539BC} não se registrou no DCOM dentro do tempo limite necessário.

Error: (04/25/2021 01:42:21 AM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 35) (User: AUTORIDADE NT)
Description: Recursos de gerenciamento do consumo de energia em desempenho no processador lógico 0 Hyper-V estão desabilitados devido a um problema de firmware. Verifique com o fabricante do computador se há um firmware atualizado.

Error: (04/25/2021 01:41:23 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: O serviço Serviço da Lista de Redes terminou com o erro: 
O dispositivo não está pronto.

Error: (04/25/2021 01:41:23 AM) (Source: DCOM) (EventID: 10010) (User: AUTORIDADE NT)
Description: O servidor {A47979D2-C419-11D9-A5B4-001185AD2B89} não se registrou no DCOM dentro do tempo limite necessário.

Error: (04/25/2021 01:39:23 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: O serviço Serviço da Lista de Redes terminou com o erro: 
O dispositivo não está pronto.


Windows Defender:
================
Date: 2021-04-25 13:59:09
Description: 
O Acesso Controlado a Pastas impediu C:\Program Files\CDBurnerXP\cdbxpp.exe de fazer alterações na memória.
Hora da detecção: 2021-04-25T16:59:09.804Z
Usuário: ZALACHENK0\Emerson
Caminho: \Device\CdRom0
Nome do Processo: C:\Program Files\CDBurnerXP\cdbxpp.exe
Versão da Inteligência de Segurança: 1.335.1629.0
Versão do Mecanismo: 1.1.18000.5
Versão do Produto: 4.18.2103.7

Date: 2021-04-25 13:41:46
Description: 
C:\Program Files\DVD Flick\delaycut\delaycut.exe foi impedido de modificar %userprofile%\Videos\nasce\ pelo Acesso Controlado a Pastas.
Hora da detecção: 2021-04-25T16:41:46.048Z
Usuário: ZALACHENK0\Emerson
Caminho: %userprofile%\Videos\nasce\
Nome do Processo: C:\Program Files\DVD Flick\delaycut\delaycut.exe
Versão da Inteligência de Segurança: 1.335.1629.0
Versão do Mecanismo: 1.1.18000.5
Versão do Produto: 4.18.2103.7

Date: 2021-04-25 11:08:35
Description: 
C:\Program Files\DVD Flick\bin\ffmpeg.exe foi impedido de modificar %userprofile%\Videos\nasce\ pelo Acesso Controlado a Pastas.
Hora da detecção: 2021-04-25T14:08:35.888Z
Usuário: ZALACHENK0\Emerson
Caminho: %userprofile%\Videos\nasce\
Nome do Processo: C:\Program Files\DVD Flick\bin\ffmpeg.exe
Versão da Inteligência de Segurança: 1.335.1629.0
Versão do Mecanismo: 1.1.18000.5
Versão do Produto: 4.18.2103.7

Date: 2021-04-25 11:04:53
Description: 
O Acesso Controlado a Pastas impediu C:\Program Files\DVD Flick\dvdflick.exe de fazer alterações na memória.
Hora da detecção: 2021-04-25T14:04:53.659Z
Usuário: ZALACHENK0\Emerson
Caminho: \Device\CdRom0
Nome do Processo: C:\Program Files\DVD Flick\dvdflick.exe
Versão da Inteligência de Segurança: 1.335.1629.0
Versão do Mecanismo: 1.1.18000.5
Versão do Produto: 4.18.2103.7

CodeIntegrity:
===============
Date: 2021-04-25 16:35:56
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\guard32.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Informações da Memória =========================== 

BIOS: Dell Inc. A10 07/17/2009
placa-mãe: Dell Inc. 0U315R
Processador: Intel(R) Celeron(R) CPU 900 @ 2.20GHz
Percentagem de memória em uso: 72%
RAM física total: 3544.36 MB
RAM física disponível: 962.92 MB
Virtual Total: 4376.36 MB
Virtual disponível: 1434.62 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:133.53 GB) (Free:60.38 GB) NTFS ==>[drive com componentes de inicialização (obtido através de BCD)]
Drive d: (Apoio) (Fixed) (Total:15 GB) (Free:14.94 GB) NTFS
Drive e: (KODAK) (Removable) (Total:0.95 GB) (Free:0 GB) FAT
Drive f: () (CDROM) (Total:0 GB) (Free:0 GB) 

\\?\Volume{f0000000-0000-0000-0000-002725000000}\ () (Fixed) (Total:0.44 GB) (Free:0.15 GB) NTFS

==================== MBR & Tabela de Partições ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 149.1 GB) (Disk ID: F0000000)
Partition 1: (Not Active) - (Size=78 MB) - (Type=DE)
Partition 2: (Not Active) - (Size=15 GB) - (Type=0F Extended)
Partition 3: (Active) - (Size=133.5 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=450 MB) - (Type=27)

==========================================================
Disk: 1 (Size: 974.5 MB) (Disk ID: 841DAC06)
Partition 1: (Active) - (Size=974 MB) - (Type=0E)

==================== Fim de Addition.txt =======================