Resultado do exame Adicional Farbar Recovery Scan Tool (x86) Versão: 02.08.2018
Executado por fran (06-08-2018 22:06:37)
Executando a partir de C:\Users\fran\Desktop
Microsoft Windows 7 Ultimate  Service Pack 1 (X86) (2017-05-25 17:22:43)
Modo da Inicialização: Safe Mode (with Networking)
==========================================================


==================== Contas: =============================

Administrador (S-1-5-21-3837961420-2562891052-3601350365-500 - Administrator - Disabled)
Convidado (S-1-5-21-3837961420-2562891052-3601350365-501 - Limited - Disabled)
fran (S-1-5-21-3837961420-2562891052-3601350365-1000 - Administrator - Enabled) => C:\Users\fran

==================== Central de Segurança ========================

(Se uma entrada for incluída na fixlist, será removida.)

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Programas Instalados ======================

(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)

7-Zip 18.05 (HKLM\...\7-Zip) (Version: 18.05 - Igor Pavlov)
Adobe Flash Player 26 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 26.0.0.151 - Adobe Systems Incorporated)
Adobe Flash Player 26 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)
Adobe Flash Player 28 PPAPI (HKLM\...\Adobe Flash Player PPAPI) (Version: 28.0.0.137 - Adobe Systems Incorporated)
Adobe Photoshop CC 2015 (32 Bit) (HKLM\...\{2614BC86-757D-4293-9E25-E4E16F370A9E}) (Version: 16.0 - Adobe Systems Incorporated)
Adobe Reader 9.1 - Português (HKLM\...\{AC76BA86-7AD7-1046-7B44-A91000000001}) (Version: 9.1.0 - Adobe Systems Incorporated)
Apple Mobile Device Support (HKLM\...\{A0BE60AA-7470-4F16-A5C5-D9F4A575B606}) (Version: 11.0.2.4 - Apple Inc.)
Apple Software Update (HKLM\...\{C1BBFD2A-BCDD-45B3-8C0B-66BD434970A8}) (Version: 2.4.8.1 - Apple Inc.)
Audacity 2.1.3 (HKLM\...\Audacity®_is1) (Version: 2.1.3 - Audacity Team)
AviSynth+ 2506 (HKLM\...\{AC78780F-BACA-4805-8D4F-AE1B52B7E7D3}_is1) (Version: 2506.0 - The Public)
BYOND (HKLM\...\BYOND) (Version: 511.1385 - BYOND)
CCleaner (HKLM\...\CCleaner) (Version: 5.35 - Piriform)
CLEO 4.3 (HKLM\...\{A8F37EB0-C741-41D7-8CAB-5B40ECEEF094}_is1) (Version: 4.3 - Seemann, Deji, Alien)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.6.0.0283 - Disc Soft Ltd)
Defraggler (HKLM\...\Defraggler) (Version: 2.21 - Piriform)
DEVIL MAY CRY 4 (HKLM\...\{D4E5A687-797D-44B1-8F96-4FD7A24166A9}) (Version: 1.00.000 - CAPCOM CO., LTD.)
Discord (HKU\S-1-5-21-3837961420-2562891052-3601350365-1000\...\Discord) (Version: 0.0.301 - Discord Inc.)
Dungeon Crawl Stone Soup (HKLM\...\Crawl) (Version: 0.20-a0-1126-g0f15420 - )
Dynasty Warriors 4 Hyper (HKU\S-1-5-21-3837961420-2562891052-3601350365-1000\...\{DBFF7A38-F460-419A-A2E7-2D55BD2D9AD4}) (Version:  - )
Editor de Vídeo da Apowersoft V1.1.9 (HKLM\...\{3089CCCD-BC5F-4309-A3C1-45B5ACA7A5E7}_is1) (Version: 1.1.9 - APOWERSOFT LIMITED)
FFmpeg (Windows) for Audacity versão 2.2.2 (HKLM\...\{9C7E31E3-017F-434C-AC40-24431A354A1E}_is1) (Version: 2.2.2 - )
foobar2000 v1.3.16 (HKLM\...\foobar2000) (Version: 1.3.16 - Peter Pawlowski)
FormatFactory 4.1.0.0 (HKLM\...\FormatFactory) (Version: 4.1.0.0 - Free Time)
Fraps (remove only) (HKLM\...\Fraps) (Version:  - )
FreeMouseAutoClicker 3.8.2 (HKLM\...\{292F00C5-25EF-4FBE-9873-13EF1F69DEED}_is1) (Version:  - Advanced Mouse Auto Clicker ltd.)
GIMP 2.8.22 (HKLM\...\GIMP-2_is1) (Version: 2.8.22 - The GIMP Team)
Git version 2.17.0 (HKLM\...\Git_is1) (Version: 2.17.0 - The Git Development Community)
GoldWave v5.70 (HKLM\...\GoldWave v5.70) (Version: 5.70 - GoldWave Inc.)
Google Chrome (HKLM\...\Google Chrome) (Version: 68.0.3440.84 - Google Inc.)
Google Chrome Dev (HKLM\...\Google Chrome Dev) (Version: 70.0.3510.2 - Google Inc.)
Google Drive (HKLM\...\{A8DC81F2-D365-4248-892A-FA3B5951F731}) (Version: 2.34.9392.7803 - Google, Inc.)
Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
GTA San Andreas SA-MP Addon version 2.3 (HKLM\...\{47E4F6A3-F01C-4538-9925-CAE42C1CF7216}_is1) (Version: 2.3 - Absolute Play www.gta-samp.ru)
HandBrake 1.0.7 (HKLM\...\HandBrake) (Version: 1.0.7 - )
HF pAppLoc version 1.2 (HKLM\...\{9143B17E-BBDE-4EA7-A4E3-20D384D9C8A5}_is1) (Version: 1.2 - Inquisitor)
HP DeskJet 2130 series Basic Device Software (HKLM\...\{8924FA1E-8649-4DD7-A21E-C643AF642AD0}) (Version: 40.11.1124.17107 - HP Inc.)
HP DeskJet 2130 series Help (HKLM\...\{1CDFD3C9-BDF8-4DDC-BDA2-EBC53F938B5F}) (Version: 35.0.0 - Hewlett Packard)
HP Dropbox Plugin (HKLM\...\{D12BC084-97D6-438A-AA7C-5962608D17A0}) (Version: 36.0.41.58587 - HP)
HP Google Drive Plugin (HKLM\...\{BFA42100-DB54-467A-BB87-CF70732B4065}) (Version: 36.0.41.58587 - HP)
HP Photo Creations (HKLM\...\HP Photo Creations) (Version: 1.0.0.9572 - HP)
ImgBurn (HKLM\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.49.06.2016 - Intel Corporation)
Internet Download Manager (HKLM\...\Internet Download Manager) (Version:  - Tonec Inc.)
iTunes (HKLM\...\{6CDC2E7D-E1E5-4E35-B77F-1310F014B99A}) (Version: 12.6.3.6 - Apple Inc.)
Java 8 Update 162 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180162F0}) (Version: 8.0.1620.12 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
K-Lite Mega Codec Pack 14.2.5 (HKLM\...\KLiteCodecPack_is1) (Version: 14.2.5 - KLCP)
LAME v3.99.3 (for Windows) (HKLM\...\LAME_is1) (Version:  - )
LogMeIn Hamachi (HKLM\...\{892DB406-ADF8-4C30-9840-8438AF5B8763}) (Version: 2.2.0.607 - LogMeIn, Inc.) Hidden
LogMeIn Hamachi (HKLM\...\LogMeIn Hamachi) (Version: 2.2.0.607 - LogMeIn, Inc.)
Malwarebytes version 3.5.1.2522 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.5.1.2522 - Malwarebytes)
MegaDownloader 1.7 (HKLM\...\{C12C2297-65A4-4E64-9AE1-29F0D947FDA0}}_is1) (Version: 1.7 - AppsForMega.info)
Metal Gear Solid (HKLM\...\Metal Gear Solid) (Version:  - )
Microsoft .NET Framework 4.7.1 (Português (Brasil)) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1046) (Version: 4.7.02558 - Microsoft Corporation)
Microsoft .NET Framework 4.7.1 (日本語) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1041) (Version: 4.7.02558 - Microsoft Corporation)
Microsoft .NET Framework 4.7.1 (简体中文) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 2052) (Version: 4.7.02558 - Microsoft Corporation)
Microsoft .NET Framework 4.7.1(한국어) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1042) (Version: 4.7.02558 - Microsoft Corporation)
Microsoft .NET Framework 4.7.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.11.25325 (HKLM\...\{404c9c27-8377-4fd1-b607-7ca635db4e49}) (Version: 14.11.25325.0 - Microsoft Corporation)
Microsoft Windows Application Compatibility Database (HKLM\...\{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb) (Version:  - )
Microsoft XNA Framework Redistributable 3.0 (HKLM\...\{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}) (Version: 3.0.11010.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Minecraft (HKLM\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Mono for Windows (x86) (HKLM\...\{21B7070B-BE60-417A-BB93-7B46275FF97A}) (Version: 5.2.0 - Xamarin, Inc.)
Motorola Device Manager (HKLM\...\{28DB8373-C1BB-444F-A427-A55585A12ED7}) (Version: 2.5.4 - Motorola Mobility)
Motorola Device Software Update (HKLM\...\{894AB83D-A9AF-4E54-BFF3-A7262A0A6C13}) (Version: 13.09.3001 - Motorola Mobility) Hidden
Motorola Mobile Drivers Installation 6.4.0 (HKLM\...\{BA562260-B4FA-4D87-ADC5-963783028C68}) (Version: 6.4.0 - Motorola Mobility LLC)
Mozilla Firefox 56.0 (x86 pt-BR) (HKLM\...\Mozilla Firefox 56.0 (x86 pt-BR)) (Version: 56.0 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Need for Speed™ Carbon (HKLM\...\{259C0ABB-A3B2-4D70-008F-BF7EE491B70B}) (Version:  - )
Notepad++ (32-bit x86) (HKLM\...\Notepad++) (Version: 7.5.8 - Notepad++ Team)
NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
OpenAL (HKLM\...\OpenAL) (Version:  - )
OpenTTD 1.8.0 (HKLM\...\OpenTTD) (Version: 1.8.0 - OpenTTD)
OpenVPN 2.4.2-I601  (HKLM\...\OpenVPN) (Version: 2.4.2-I601 - OpenVPN Technologies, Inc.)
Opera Stable 54.0.2952.64 (HKLM\...\Opera 54.0.2952.64) (Version: 54.0.2952.64 - Opera Software)
osu! (HKLM\...\{53df25cb-834a-454d-858f-9f18a44a3006}) (Version: latest - ppy Pty Ltd)
ParkControl (HKLM\...\ParkControl) (Version: 1.2.7.6 - Bitsum)
piaip AppLocale (HKLM\...\{394BE3D9-7F57-4638-A8D1-1D88671913B7}) (Version: 1.0.0 - MS)
Process Lasso (HKLM\...\ProcessLasso) (Version: 9.0.0.456 - Bitsum)
Project64 1.6 (HKLM\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64)
Python 3.7.0 (32-bit) (HKU\S-1-5-21-3837961420-2562891052-3601350365-1000\...\{ece37911-ffeb-4f29-95d6-abcf555d7364}) (Version: 3.7.150.0 - Python Software Foundation)
Python 3.7.0 Add to Path (32-bit) (HKLM\...\{1960E5AE-BA13-4FA1-B0CE-55B9F0291903}) (Version: 3.7.150.0 - Python Software Foundation) Hidden
Python 3.7.0 Core Interpreter (32-bit) (HKLM\...\{13BB06D9-FD38-47E5-946E-C2606C554030}) (Version: 3.7.150.0 - Python Software Foundation) Hidden
Python 3.7.0 Development Libraries (32-bit) (HKLM\...\{B424BE74-3C96-4974-8754-9D6442286112}) (Version: 3.7.150.0 - Python Software Foundation) Hidden
Python 3.7.0 Documentation (32-bit) (HKLM\...\{ABEE159E-FE5B-4E58-BDD7-1DED2F10AAEB}) (Version: 3.7.150.0 - Python Software Foundation) Hidden
Python 3.7.0 Executables (32-bit) (HKLM\...\{4642A126-F999-4407-801B-C1C89BDA58C5}) (Version: 3.7.150.0 - Python Software Foundation) Hidden
Python 3.7.0 pip Bootstrap (32-bit) (HKLM\...\{69CFC76B-3434-4919-8885-BA7960725137}) (Version: 3.7.150.0 - Python Software Foundation) Hidden
Python 3.7.0 Standard Library (32-bit) (HKLM\...\{09160A5D-8B99-4A89-9E9D-8A6D8E9C7EC1}) (Version: 3.7.150.0 - Python Software Foundation) Hidden
Python 3.7.0 Tcl/Tk Support (32-bit) (HKLM\...\{8A09EA6B-C86C-4ECA-8742-C4C1BCA96845}) (Version: 3.7.150.0 - Python Software Foundation) Hidden
Python 3.7.0 Test Suite (32-bit) (HKLM\...\{717DB3B4-C457-447B-A8A6-6921A4D917EF}) (Version: 3.7.150.0 - Python Software Foundation) Hidden
Python 3.7.0 Utility Scripts (32-bit) (HKLM\...\{FC756D1E-1252-406E-8414-E11FAF97F3C7}) (Version: 3.7.150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM\...\{D6BDDB48-938A-4384-A7BE-2B4E4931B111}) (Version: 3.7.6386.0 - Python Software Foundation)
qBittorrent 4.1.1 (HKLM\...\qBittorrent) (Version: 4.1.1 - The qBittorrent project)
Razer Cortex (HKLM\...\Razer Cortex_is1) (Version: 8.2.14.487 - Razer Inc.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8186 - Realtek Semiconductor Corp.)
Riot - Radical Image Optimization Tool (HKLM\...\Riot) (Version:  - )
Riot plugin (HKLM\...\Riot-plugin) (Version:  - )
RivaTuner Statistics Server 7.0.0 Beta 19 (HKLM\...\RTSS) (Version: 7.0.0 Beta 19 - Unwinder)
ROBLOX Player for fran (HKU\S-1-5-21-3837961420-2562891052-3601350365-1000\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version:  - ROBLOX Corporation)
ROBLOX Studio for fran (HKU\S-1-5-21-3837961420-2562891052-3601350365-1000\...\{2922D6F1-2865-4EFA-97A9-94EEAB3AFA14}) (Version:  - ROBLOX Corporation)
ShareX (HKLM\...\82E6AC09-0FEF-4390-AD9F-0DD3F5561EFC_is1) (Version: 12.0.0 - ShareX Team)
SlimDX Runtime .NET 4.0 x86 (January 2012) (HKLM\...\{7EBD0E43-6AC0-4CA8-9990-00E50069AD29}) (Version: 2.0.13.43 - SlimDX Group)
Speccy (HKLM\...\Speccy) (Version: 1.30 - Piriform)
Steam (HKLM\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SteamLink (HKU\S-1-5-21-3837961420-2562891052-3601350365-1000\...\SteamLink) (Version: 1.5 - Ryan Finnie)
Streamlink (HKLM\...\Streamlink) (Version: 0.14.2 - Streamlink)
Streamlink Twitch GUI (HKLM\...\streamlink-twitch-gui) (Version: 1.5.0 - Sebastian Meyer)
Super Smash Flash 2 Beta (HKLM\...\{7603695C-A9FF-48D5-BE83-CD07DB80E957}_is1) (Version: 1.0.3.2 - McLeodGaming, Inc.)
Suporte para Aplicativos Apple (32-bit) (HKLM\...\{BC7C46A4-D7A7-48EC-A98C-32A7762B5EFA}) (Version: 6.2.1 - Apple Inc.)
SVP 4 Free (HKU\S-1-5-21-3837961420-2562891052-3601350365-1000\...\{9cca87ef-7223-45ae-b9c3-437bf31d50ca}) (Version: 4.1 - SVP Team)
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
TeamViewer 13 (HKLM\...\TeamViewer) (Version: 13.2.5287 - TeamViewer)
TortoiseGit 2.6.0.0 (32 bit) (HKLM\...\{C3E531C0-890A-47EB-AE45-8DC7D19595B5}) (Version: 2.6.0.0 - TortoiseGit)
Twitch (HKU\S-1-5-21-3837961420-2562891052-3601350365-1000\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 7.0.0.0 - Twitch Interactive, Inc.)
URL Helper (HKLM\...\URL Helper_is1) (Version:  - )
USB Disk Storage Format Tool 5.3 (HKLM\...\USB Disk Storage Format Tool_is1) (Version:  - Authorsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.3 - VideoLAN)
WinDirStat 1.1.2 (HKU\S-1-5-21-3837961420-2562891052-3601350365-1000\...\WinDirStat) (Version:  - )
Windscribe (HKLM\...\{fa690e90-ddb0-4f0c-b3f1-136c084e5fc7}_is1) (Version: 1.80 Build 33 - Windscribe Limited)
WinPcap 4.1.1 (HKLM\...\WinPcapInst) (Version: 4.1.0.1753 - CACE Technologies)
Wondershare Data Recovery(Build 5.0.0.5) (HKLM\...\{FEA3976F-D621-45F3-AFBD-E812A1F2F00D}_is1) (Version: 5.0.0.5 - Wondershare Software Co.,Ltd.)
XnConvert 1.76 (HKLM\...\XnConvert_is1) (Version: 1.76 - Gougelet Pierre-e)
XnView 2.41 (HKLM\...\XnView_is1) (Version: 2.41 - Gougelet Pierre-e)
Yahoo! Powered (HKLM\...\{A91E41DE-F99E-905E-481E-E0DE989E335E}) (Version:  - ) <==== ATENÇÃO
ZeroTier One (HKLM\...\{0AF2DC73-6629-41A1-B0C6-B110582FEE29}) (Version: 1.2.4 - ZeroTier, Inc.) Hidden
ZeroTier One (HKLM\...\ZeroTier One 1.2.4) (Version: 1.2.4 - ZeroTier, Inc.)
ZeroTier One Virtual Network Port (HKLM\...\{75F0AFE9-A004-428A-89DB-9BB9ACC4489E}) (Version: 1.0.0 - ZeroTier) Hidden

==================== Exame Personalizado CLSID (Whitelisted): ==========================

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

HKU\S-1-5-21-3837961420-2562891052-3601350365-1000\...\ChromeHTML: ->  <==== ATENÇÃO
CustomCLSID: HKU\S-1-5-21-3837961420-2562891052-3601350365-1000_Classes\CLSID\{FBEB8A05-BEEE-4442-804E-409D6C4515E9}\InprocServer32 -> C:\Users\fran\AppData\Local\Ugzmedia\czstiskf.dll => Nenhum Arquivo
ShellIconOverlayIdentifiers: [			IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files\Internet Download Manager\IDMShellExt.dll [2018-05-12] (Tonec Inc.)
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll [2018-04-23] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll [2018-04-23] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll [2018-04-23] (Google)
ShellIconOverlayIdentifiers: [  Tortoise1Normal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [  Tortoise2Modified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [  Tortoise3Conflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [  Tortoise4Locked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [  Tortoise5ReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [  Tortoise6Deleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [  Tortoise7Added] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [  Tortoise8Ignored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [  Tortoise9Unversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov)
ContextMenuHandlers1: [ANotepad++] -> {00F3C2EC-A6EE-11DE-A03A-EF8F55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2018-07-22] ()
ContextMenuHandlers1: [DefragglerShellExtension] -> {4380C993-0C43-4E02-9A7A-0D40B6EA7590} => C:\Program Files\Defraggler\DefragglerShell.dll [2016-03-08] (Piriform Ltd)
ContextMenuHandlers1: [FormatFactoryShell] -> {A3777921-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files\FormatFactory\ShellEx_103.dll [2013-06-17] (Free Time)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu32.dll [2018-04-23] (Google)
ContextMenuHandlers1: [JsZipShlExt] -> {5C551008-A347-4DB3-AF48-014076FD2B46} =>  -> Nenhum Arquivo
ContextMenuHandlers1: [JZContextMenuExt] -> {5C551008-A347-4DB3-AF48-014076FD2B46} =>  -> Nenhum Arquivo
ContextMenuHandlers1: [TortoiseGit] -> {10A0FDD2-B0C0-4CD4-A7AE-E594CE3B91C8} => C:\Program Files\TortoiseGit\bin\TortoiseGitStub32.dll [2018-02-17] (hxxps://tortoisegit.org/)
ContextMenuHandlers2: [JsZipShlExt] -> {5C551008-A347-4DB3-AF48-014076FD2B46} =>  -> Nenhum Arquivo
ContextMenuHandlers2: [TortoiseGit] -> {10A0FDD2-B0C0-4CD4-A7AE-E594CE3B91C8} => C:\Program Files\TortoiseGit\bin\TortoiseGitStub32.dll [2018-02-17] (hxxps://tortoisegit.org/)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov)
ContextMenuHandlers4: [FormatFactoryShell] -> {A3777921-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files\FormatFactory\ShellEx_103.dll [2013-06-17] (Free Time)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu32.dll [2018-04-23] (Google)
ContextMenuHandlers4: [JsZipShlExt] -> {5C551008-A347-4DB3-AF48-014076FD2B46} =>  -> Nenhum Arquivo
ContextMenuHandlers4: [TortoiseGit] -> {10A0FDD2-B0C0-4CD4-A7AE-E594CE3B91C8} => C:\Program Files\TortoiseGit\bin\TortoiseGitStub32.dll [2018-02-17] (hxxps://tortoisegit.org/)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2009-12-14] (Intel Corporation)
ContextMenuHandlers5: [TortoiseGit] -> {10A0FDD2-B0C0-4CD4-A7AE-E594CE3B91C8} => C:\Program Files\TortoiseGit\bin\TortoiseGitStub32.dll [2018-02-17] (hxxps://tortoisegit.org/)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov)
ContextMenuHandlers6: [DefragglerShellExtension] -> {4380C993-0C43-4E02-9A7A-0D40B6EA7590} => C:\Program Files\Defraggler\DefragglerShell.dll [2016-03-08] (Piriform Ltd)
ContextMenuHandlers6: [TortoiseGit] -> {10A0FDD2-B0C0-4CD4-A7AE-E594CE3B91C8} => C:\Program Files\TortoiseGit\bin\TortoiseGitStub32.dll [2018-02-17] (hxxps://tortoisegit.org/)
FolderExtensions: [ShellFolder for CD Burning] -> {fbeb8a05-beee-4442-804e-409d6c4515e9} => C:\Users\fran\AppData\Local\Ugzmedia\czstiskf.dll -> Nenhum Arquivo

==================== Tarefas Agendadas (Whitelisted) =============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)

Task: {07BB557C-81F8-4812-8145-61F191B25D91} - System32\Tasks\Opera scheduled Autoupdate 1503010056 => C:\Program Files\Opera\launcher.exe [2018-07-25] (Opera Software)
Task: {14BE45A5-F253-4324-91FA-E9B4C38EB834} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2017-06-04] (Google Inc.)
Task: {199A278F-29CA-4636-B975-FC0A1334F499} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2018-01-14] (Adobe Systems Incorporated)
Task: {27C6DD3A-9547-49BE-B035-AD98BFD3837F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-09-20] (Piriform Ltd)
Task: {27CDD583-3C4E-46F1-9424-39BA8A54F794} - System32\Tasks\HP AR Program Upload - 6cb5788e1c164dc7abe9100a5d7d7cec00a8d64dfb6c41e0b81927bd7c260c19 => C:\Program Files\HP\HP DeskJet 2130 series\bin\HPRewards.exe [2017-04-17] (HP Inc.)
Task: {3CF6CAAD-8CBD-49C1-8AAE-8F570CD17BB5} - System32\Tasks\cFos\Registration Tasks\Open Browser => c:\program files\google\chrome\application\chrome.exe "hxxp://localhost:1487/cfosspeed/preferences.htm"
Task: {46210B3C-5F77-4270-81B2-EBCF9101D815} - System32\Tasks\Motorola Device Manager Initial Update => C:\Program Files\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2014-10-30] ()
Task: {488633F2-5F4B-4E7E-A002-A29FDB8EA42E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-02-09] (Adobe Systems Incorporated)
Task: {66279906-621C-44F2-89BF-AF5597EC15AE} - System32\Tasks\Motorola Device Manager Update => C:\Program Files\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2014-10-30] ()
Task: {66EA0F30-3C70-4E9F-8A5D-A31F804A03C1} - System32\Tasks\Process Lasso Management Console (GUI) => C:\Program Files\Process Lasso\processlasso.exe [2018-07-12] (Bitsum LLC)
Task: {6BDD5D17-8A3D-4561-8C82-CD278306220E} - System32\Tasks\klcp_update => CodecTweakTool.exe
Task: {72EDE7F3-C4C9-4704-A5FF-7AF788546917} - System32\Tasks\{BE3F49DE-8EDC-8B04-32AF-F3E336153703} => C:\Program Files\Common Files\otywqnE.exe [1601-01-03] (Microsoft Corporation)
Task: {89AACCB5-D01F-4A1A-8B82-21B0919741CB} - System32\Tasks\{A371E701-134A-403C-A102-13614D01AEF3} => C:\Users\fran\Downloads\Compressed\DeSmuME\DeSmuME_git#1e0e7f5_x86.exe [2018-07-25] ()
Task: {94F9C92E-0A48-480B-8CB8-1A303B439538} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\system32\Macromed\Flash\FlashUtil32_28_0_0_137_pepper.exe [2018-01-14] (Adobe Systems Incorporated)
Task: {9BAF29AB-1D7E-47C4-BFA9-1CF1E2829A28} - System32\Tasks\{3E8E2CB0-0E56-9CC0-5439-004F55370099} => C:\Users\fran\AppData\Roaming\BecoTWugo.exe <==== ATENÇÃO
Task: {9C7CB417-A0E6-4DED-AB84-132E5088849D} - System32\Tasks\{1D0D40FE-667C-18AF-36B9-F4D51EDC666A} => C:\Windows\system32\zYFXe.exe [1601-01-03] (Microsoft Corporation)
Task: {A1999C9E-06EE-4CF7-B121-C45A419E413B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2017-06-04] (Google Inc.)
Task: {BD097926-16BB-4A6C-91C3-3C6172786016} - System32\Tasks\{E02EC176-B3F6-403E-A00A-5B1A2CB693D8} => D:\Arquivos de programas\Steam\steamapps\common\Monaco\MONACO.exe
Task: {BEF4B9F6-7797-45ED-9488-FA65FFD9525E} - System32\Tasks\{F1AA7BC7-434B-5518-13E7-DBE4F994206E} => C:\Users\fran\AppData\Local\wATegEbaiHvJ.exe
Task: {D43FF741-88B7-4133-A157-0C59AA1C73A8} - System32\Tasks\{B6916F14-36B8-499E-923B-DC103D42AEAE} => D:\Arquivos de programas\Steam\steamapps\common\Monaco\MONACO.exe
Task: {D7DB4FA0-269F-4F2C-A968-DBFC9ECFA009} - System32\Tasks\{5192F7D9-D72F-47D8-AEE5-E4882259DD21} => C:\Windows\system32\pcalua.exe -a C:\Users\fran\Downloads\win7_1512754.exe -d C:\Users\fran\Downloads
Task: {DF16D865-B959-43E2-9BAC-B00A8EF3EEE6} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2017-07-24] (Apple Inc.)
Task: {E0A26670-40C8-4DEE-BEF5-12CA95C6ABE3} - System32\Tasks\Rerun Warsaw's CoreFixer => C:\Windows\TEMP\is-SD3R8.tmp\corefixer.exe <==== ATENÇÃO
Task: {EBD7698A-34E9-4264-96CD-5A8D61D0C5DC} - System32\Tasks\{C7013A7F-37A2-4D94-B17C-8116EBB1D392} => E:\Nao Apague\Driv3r (Driver 3)\Driv3r.exe
Task: {F76FAF05-4505-475C-94CC-40ED153BCB5E} - System32\Tasks\Process Lasso Core Engine Only => C:\Program Files\Process Lasso\processgovernor.exe [2018-07-12] (Bitsum LLC)

(Se uma entrada for incluída na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)


==================== Atalhos & WMI ========================

(As entradas podem ser listadas para serem restauradas ou removidas.)


==================== Módulos Carregados (Whitelisted) ==============

2018-02-17 16:43 - 2018-02-17 16:43 - 000776352 _____ () C:\Program Files\TortoiseGit\bin\libgit232_tgit.dll
2018-02-17 16:43 - 2018-02-17 16:43 - 000093856 _____ () C:\Program Files\TortoiseGit\bin\zlib132_tgit.dll
2018-07-22 21:14 - 2018-07-22 21:14 - 000267952 _____ () C:\Program Files\Notepad++\NppShell_06.dll
2018-06-08 21:56 - 2018-06-07 03:43 - 002260824 _____ () C:\Program Files\Google\Chrome Dev\Application\69.0.3452.0\swiftshader\libglesv2.dll
2018-06-08 21:56 - 2018-06-07 03:43 - 000124248 _____ () C:\Program Files\Google\Chrome Dev\Application\69.0.3452.0\swiftshader\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(Se uma entrada for incluída na fixlist, somente o ADS será removido.)

AlternateDataStreams: C:\ProgramData:NT [40]
AlternateDataStreams: C:\ProgramData:NT2 [432]
AlternateDataStreams: C:\Windows\system32\drivers:ucdrv-x86.sys [84370]
AlternateDataStreams: C:\Users\All Users:NT [40]
AlternateDataStreams: C:\Users\All Users:NT2 [432]
AlternateDataStreams: C:\Users\Todos os Usuários:NT [40]
AlternateDataStreams: C:\Users\Todos os Usuários:NT2 [432]
AlternateDataStreams: C:\ProgramData\Application Data:NT [40]
AlternateDataStreams: C:\ProgramData\Application Data:NT2 [432]
AlternateDataStreams: C:\ProgramData\Dados de aplicativos:NT [40]
AlternateDataStreams: C:\ProgramData\Dados de aplicativos:NT2 [432]
AlternateDataStreams: C:\Users\fran\Dados de aplicativos:NT [40]
AlternateDataStreams: C:\Users\fran\Dados de aplicativos:NT2 [432]
AlternateDataStreams: C:\Users\fran\AppData\Roaming:NT [40]
AlternateDataStreams: C:\Users\fran\AppData\Roaming:NT2 [432]
AlternateDataStreams: C:\Users\Todos os Usuários\Application Data:NT [40]
AlternateDataStreams: C:\Users\Todos os Usuários\Application Data:NT2 [432]
AlternateDataStreams: C:\Users\Todos os Usuários\Dados de aplicativos:NT [40]
AlternateDataStreams: C:\Users\Todos os Usuários\Dados de aplicativos:NT2 [432]

==================== Modo de Segurança (Whitelisted) ===================

(Se uma entrada for incluída na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"

==================== Associação (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, o ítem no Registro será restaurado para o padrão ou removido.)


==================== Internet Explorer confiável/restrito ===============

(Se uma entrada for incluída na fixlist, será removida do Registro.)

IE trusted site: HKU\S-1-5-21-3837961420-2562891052-3601350365-1000\...\bancobrasil.com.br -> www.bancobrasil.com.br
IE trusted site: HKU\S-1-5-21-3837961420-2562891052-3601350365-1000\...\bb.com.br -> aapj.bb.com.br
IE trusted site: HKU\S-1-5-21-3837961420-2562891052-3601350365-1000\...\gastecnologia.com.br -> cloud.gastecnologia.com.br

==================== Hosts Conteúdo: ==========================

(Se necessário, a diretiva Hosts: pode ser incluída na fixlist para redefinir o Hosts.)

2017-08-25 16:39 - 2018-06-14 13:49 - 000002069 _____ C:\Windows\system32\Drivers\etc\hosts

0.0.0.0 0.0.0.0 # fix for traceroute and netstat display anomaly
0.0.0.0 tracking.opencandy.com.s3.amazonaws.com
0.0.0.0 media.opencandy.com
0.0.0.0 cdn.opencandy.com
0.0.0.0 tracking.opencandy.com
0.0.0.0 api.opencandy.com
0.0.0.0 api.recommendedsw.com
0.0.0.0 rp.yefeneri2.com
0.0.0.0 os.yefeneri2.com
0.0.0.0 os2.yefeneri2.com
0.0.0.0 installer.betterinstaller.com
0.0.0.0 installer.filebulldog.com
0.0.0.0 d3oxtn1x3b8d7i.cloudfront.net
0.0.0.0 inno.bisrv.com
0.0.0.0 nsis.bisrv.com
0.0.0.0 cdn.file2desktop.com
0.0.0.0 cdn.goateastcach.us
0.0.0.0 cdn.guttastatdk.us
0.0.0.0 cdn.inskinmedia.com
0.0.0.0 cdn.insta.oibundles2.com
0.0.0.0 cdn.insta.playbryte.com
0.0.0.0 cdn.llogetfastcach.us
0.0.0.0 cdn.montiera.com
0.0.0.0 cdn.msdwnld.com
0.0.0.0 cdn.mypcbackup.com
0.0.0.0 cdn.ppdownload.com
0.0.0.0 cdn.riceateastcach.us
0.0.0.0 cdn.shyapotato.us
0.0.0.0 cdn.solimba.com
0.0.0.0 cdn.tuto4pc.com

==================== Outras Áreas ============================

(Atualmente não há nenhuma correção automática para esta seção.)

HKU\S-1-5-21-3837961420-2562891052-3601350365-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\fran\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 1.1.1.1 - 1.0.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Firewall do Windows está habilitado.

==================== MSCONFIG/TASK MANAGER ítens desabilitados ==

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: Apple Mobile Device => 2
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: Disc Soft Lite Bus Service => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: HmaProVpn => 2
MSCONFIG\Services: idsvc => 3
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: Motorola Device Manager => 3
MSCONFIG\Services: OpenVPNService => 2
MSCONFIG\Services: OpenVPNServiceInteractive => 2
MSCONFIG\Services: OpenVPNServiceLegacy => 2
MSCONFIG\Services: PST Service => 2
MSCONFIG\Services: Razer Game Manager Service => 2
MSCONFIG\Services: rpcapd => 3
MSCONFIG\Services: RzActionSvc => 2
MSCONFIG\Services: RzKLService => 2
MSCONFIG\Services: SysMain => 2
MSCONFIG\Services: TapiSrv => 3
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\Services: TunngleService => 3
MSCONFIG\Services: Wallpaper Engine Service => 2
MSCONFIG\Services: WinDefend => 2
MSCONFIG\Services: WindscribeService => 2
MSCONFIG\Services: WSearch => 2
MSCONFIG\Services: ZeroTierOneService => 2
MSCONFIG\startupfolder: C:^Users^fran^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Monitorar alertas de tinta - HP DeskJet 2130 series.lnk => C:\Windows\pss\Monitorar alertas de tinta - HP DeskJet 2130 series.lnk.Startup
MSCONFIG\startupfolder: C:^Users^fran^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Recorte de tela e Iniciador do OneNote 2007.lnk => C:\Windows\pss\Recorte de tela e Iniciador do OneNote 2007.lnk.Startup
MSCONFIG\startupfolder: C:^Users^fran^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Shortcut to Primary output from Start (Active).lnk => C:\Windows\pss\Shortcut to Primary output from Start (Active).lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
MSCONFIG\startupreg: DAEMON Tools Lite Automount => "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
MSCONFIG\startupreg: Discord =>
MSCONFIG\startupreg: DiscordCanary => C:\Users\fran\AppData\Local\DiscordCanary\app-0.0.201\DiscordCanary.exe
MSCONFIG\startupreg: Gaijin.Net Agent => "C:\Users\fran\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe"
MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: MinerGateGui => C:\Program Files\MinerGate\minergate.exe --auto
MSCONFIG\startupreg: Ohrkics => C:\Windows\System32\regsvr32.exe C:\Users\fran\AppData\Local\Ugzmedia\phkdarvd.dll
MSCONFIG\startupreg: OPENVPN-GUI => C:\Program Files\OpenVPN\bin\openvpn-gui.exe
MSCONFIG\startupreg: SDfgsdf => C:\Users\fran\AppData\Local\Temp\RarSFX0\testvnc.exe
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: TaskbarBlurToggle => "C:\Users\fran\Downloads\Compressed\no blur on the taskbar damnit\TaskbarBlurToggle.exe" /startup
MSCONFIG\startupreg: UDPAWZ7YQ9OEC7I => "C:\Program Files\0nz5npzlvqv\P0DOW.exe"
MSCONFIG\startupreg: Ugzmedia =>
MSCONFIG\startupreg: WallpaperEngine => "E:\Steam Games\steamapps\common\wallpaper_engine\wallpaper32.exe" -silent
MSCONFIG\startupreg: {B4E39E3C-C49A-0F65-C6F2-AB550D98D0D9} =>

==================== Regras do Firewall (Whitelisted) ===============

(Se uma entrada for incluída na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)


==================== Pontos de Restauração =========================


==================== Dispositivos Apresentando Falhas No Gerenciador =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft Teredo Tunneling Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: PS/2 Compatible Mouse
Description: PS/2 Compatible Mouse
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: ZeroTier One Virtual Port
Description: ZeroTier One Virtual Port
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: ZeroTier Networks LLC
Service: zttap300
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Erros no Log de eventos: =========================

Erros em Aplicativos:
==================
Error: (08/06/2018 09:18:31 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Failed to create restore point (Process = C:\Users\fran\AppData\Local\Temp\jrt\CreateRestorePoint.exe  "JRT Pre-Junkware Removal"; Description = JRT Pre-Junkware Removal; Error = 0x8007043c).

Error: (08/06/2018 09:16:19 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (08/06/2018 08:53:07 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (08/06/2018 07:17:03 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (08/06/2018 03:18:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (08/06/2018 02:41:08 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Error: (08/06/2018 07:47:01 AM) (Source: System Restore) (EventID: 8211) (User: )
Description: The scheduled restore point could not be created.  Additional information: (0x81000101).

Error: (08/06/2018 07:47:00 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation; Description = Ponto de Verificação Agendado; Error = 0x81000101).


Erros de Sistema:
=============
Error: (08/06/2018 09:32:09 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: DCOM got error "1068" attempting to start the service BITS with arguments "" in order to run the server:
{4991D34B-80A1-4291-83B6-3328366B9097}

Error: (08/06/2018 09:25:55 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: The server {ABC01078-F197-4B0B-ADBC-CFE684B39C82} did not register with DCOM within the required timeout.

Error: (08/06/2018 09:15:59 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Provedor do Grupo Doméstico service depends on the Host de Provedor da Descoberta de Função service which failed to start because of the following error:
The dependency service or group failed to start.

Error: (08/06/2018 09:15:52 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Pesquisador de Computadores service depends on the Server service which failed to start because of the following error:
The dependency service or group failed to start.

Error: (08/06/2018 09:15:52 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Pesquisador de Computadores service depends on the Server service which failed to start because of the following error:
The dependency service or group failed to start.

Error: (08/06/2018 09:15:52 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Pesquisador de Computadores service depends on the Server service which failed to start because of the following error:
The dependency service or group failed to start.

Error: (08/06/2018 09:15:52 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Pesquisador de Computadores service depends on the Server service which failed to start because of the following error:
The dependency service or group failed to start.

Error: (08/06/2018 09:15:51 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Pesquisador de Computadores service depends on the Server service which failed to start because of the following error:
The dependency service or group failed to start.


Windows Defender:
===================================
Date: 2017-05-25 17:08:58.733
Description:
Windows Defender has detected spyware or other potentially unwanted software.
For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=37020&name=SoftwareBundler:Win32/Prepscram&threatid=226289
Name:SoftwareBundler:Win32/Prepscram
ID:226289
Severity:Alto
Category:Software Embarcado
Path Found:file:C:\Program Files\KMSPico\Registrypatch.exe;process:pid:4028
Detection Type:Concrete
Detection Source:Real-Time Protection
Status:Unknown
Process Name:

CodeIntegrity:
===================================

Date: 2017-12-09 12:02:58.745
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\EqualizerAPO\EqualizerAPO.dll because the set of per-page image hashes could not be found on the system.

Date: 2017-12-09 12:02:50.617
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\EqualizerAPO\EqualizerAPO.dll because the set of per-page image hashes could not be found on the system.

Date: 2017-12-09 11:49:16.426
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\EqualizerAPO\EqualizerAPO.dll because the set of per-page image hashes could not be found on the system.

Date: 2017-12-09 11:49:03.112
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\EqualizerAPO\EqualizerAPO.dll because the set of per-page image hashes could not be found on the system.

Date: 2017-12-09 11:49:02.751
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\EqualizerAPO\EqualizerAPO.dll because the set of per-page image hashes could not be found on the system.

Date: 2017-11-18 15:05:09.905
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\EqualizerAPO\EqualizerAPO.dll because the set of per-page image hashes could not be found on the system.

Date: 2017-11-18 15:04:49.245
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\EqualizerAPO\EqualizerAPO.dll because the set of per-page image hashes could not be found on the system.

Date: 2017-11-18 15:02:45.688
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\EqualizerAPO\EqualizerAPO.dll because the set of per-page image hashes could not be found on the system.

==================== Informações da Memória ===========================

Processador: Intel(R) Celeron(R) CPU 430 @ 1.80GHz
Percentagem de memória em uso: 48%
RAM física total: 1527.37 MB
RAM física disponível: 788.11 MB
Virtual Total: 4527.37 MB
Virtual disponível: 3823.38 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:74.04 GB) (Free:13.84 GB) NTFS
Drive d: () (Fixed) (Total:74.51 GB) (Free:19.8 GB) NTFS
Drive e: () (Fixed) (Total:74.53 GB) (Free:11.02 GB) NTFS

\\?\Volume{a82aa8a5-416a-11e7-ac0e-806e6f6e6963}\ (Reservado pelo Sistema) (Fixed) (Total:0.49 GB) (Free:0.46 GB) NTFS

==================== MBR & Tabela de Partições ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 74.5 GB) (Disk ID: 6E59354B)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=74 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 149 GB) (Disk ID: 43DFC09E)
Partition 1: (Active) - (Size=74.5 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=74.5 GB) - (Type=0F Extended)

==================== Fim de Addition.txt ============================