Publicité
Publicité
Format du document : text/plain
Prévisualisation
Resultado do exame Adicional Farbar Recovery Scan Tool (x64) Versão: 01-01-2017
Executado por Invasion (02-01-2017 10:17:03)
Executando a partir de C:\Users\Invasion\Desktop
Windows 10 Pro Versão 1607 (X64) (2016-08-13 01:04:00)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-4038462754-2495381737-3900046349-500 - Administrator - Disabled)
Convidado (S-1-5-21-4038462754-2495381737-3900046349-501 - Limited - Disabled)
DefaultAccount (S-1-5-21-4038462754-2495381737-3900046349-503 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-4038462754-2495381737-3900046349-1002 - Limited - Enabled)
Invasion (S-1-5-21-4038462754-2495381737-3900046349-1000 - Administrator - Enabled) => C:\Users\Invasion
==================== Central de Segurança ========================
(Se uma entrada for incluÃda na fixlist, será removida.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
µTorrent (HKU\S-1-5-21-4038462754-2495381737-3900046349-1000\...\uTorrent) (Version: 3.4.5.41372 - BitTorrent Inc.)
Ansel (Version: 375.70 - NVIDIA Corporation) Hidden
ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.020 - ASUSTek Computer Inc.)
Atualizações da NVIDIA 2.13.0.21 (Version: 2.13.0.21 - NVIDIA Corporation) Hidden
Battlefield 4⢠(HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.7.2.45672 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)
Bloody6 (HKLM-x32\...\Bloody3) (Version: 16.09.0013 - Bloody)
CPUID CPU-Z 1.77 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
Dropbox (HKLM-x32\...\Dropbox) (Version: 16.4.30 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.59.1 - Dropbox, Inc.) Hidden
Dxtory version 2.0.139 (HKLM-x32\...\Dxtory2.0_is1) (Version: 2.0.139 - ExKode Co. Ltd.)
Epson Customer Research Participation (HKLM\...\{B26449A6-6007-4460-B4FE-C4776115BCEA}) (Version: 1.80.0000 - Seiko Epson Corporation)
Epson Event Manager (HKLM-x32\...\{10144CFE-D76C-4CFA-81A1-37A1642349A3}) (Version: 3.01.0013 - Seiko Epson Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EPSON XP-211 214 216 Series Printer Uninstall (HKLM\...\EPSON XP-211 214 216 Series) (Version: - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 8.0.2.805 - Foxit Software Inc.)
GIGABYTE OC_GURU II (HKLM-x32\...\InstallShield_{EA298EC1-2B8F-4DA9-8C5B-BC1FCBBAD72F}) (Version: 2.05.0000 - GIGABYTE Technology Co.,Ltd.)
GIGABYTE OC_GURU II (x32 Version: 2.05.0000 - GIGABYTE Technology Co.,Ltd.) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version: - Rockstar North)
HTML-Kit Tools (HKLM-x32\...\HTMLKitTools_is1) (Version: 1.0 - HTML-Kit.com)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1011 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
K-Lite Mega Codec Pack 12.3.5 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 12.3.5 - KLCP)
LogicCircuit (HKLM-x32\...\{C92AE391-6F9F-49C8-B19A-BA3E191C9CB9}) (Version: 2.16.0603 - LogicCircuit)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4038462754-2495381737-3900046349-1000\...\OneDriveSetup.exe) (Version: 17.3.6720.1207 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
NVIDIA Driver de áudio HD 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA Driver de controle do 3D Vision 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA Driver de gráficos 375.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 375.70 - NVIDIA Corporation)
NVIDIA Driver do 3D Vision 375.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 375.70 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.1.2.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.1.2.31 - NVIDIA Corporation)
NVIDIA Software do sistema PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (Version: 3.1.2.31 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 1.2.0.0 - NVIDIA Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 10.2.1.38915 - Electronic Arts, Inc.)
Pacote de Idiomas do Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - Português (Brasil) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PTB) (Version: 10.0.50903 - Microsoft Corporation)
Painel de controle da NVIDIA 375.70 (Version: 375.70 - NVIDIA Corporation) Hidden
Plano de Negócio (HKLM-x32\...\{D233EC4A-EF4B-4CCA-AE37-7994A3E1A483}) (Version: 2.0.4 - SEBRAE)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.19.726.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
Revisores de Texto do Microsoft Office 2013 â Português do Brasil (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.1.0 - Rockstar Games)
Screen Split (HKLM-x32\...\{7F0C2357-33B0-4408-A9AD-A7623FAA22B1}) (Version: 6.57 - LG Electronics Inc.)
SHIELD Streaming (Version: 7.1.0340 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.1.2.31 - NVIDIA Corporation) Hidden
Skype⢠7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-4038462754-2495381737-3900046349-1000\...\Spotify) (Version: 1.0.45.186.g3b5036d6 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Suplemento Microsoft Salvar como PDF ou XPS para programas do Microsoft Office 2007 (HKLM-x32\...\{90120000-00B2-0416-0000-0000000FF1CE}) (Version: 12.0.4518.1019 - Microsoft Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.53254 - TeamViewer)
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0416-1000-0000000FF1CE}_Office15.PROPLUS_{2BA6245D-FBB9-42F6-AFD9-C0DC52763AD5}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3127976) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{E0107125-62C7-43B6-8E66-0582F397469E}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3127976) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{E0107125-62C7-43B6-8E66-0582F397469E}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3127976) 64-Bit Edition (HKLM\...\{90150000-012B-0416-1000-0000000FF1CE}_Office15.PROPLUS_{E0107125-62C7-43B6-8E66-0582F397469E}) (Version: - Microsoft)
Virtual Audio Cable 4.10 (HKLM\...\Virtual Audio Cable 4.10) (Version: - )
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
Warface (HKU\S-1-5-21-4038462754-2495381737-3900046349-1000\...\{094FAADD-5A39-4C64-911A-B4C9AD818484}_is1) (Version: 1.1.367.81 - Level Up! Games)
Warsaw 1.14.2.35 64 bits (HKLM\...\{20E60725-16C8-4FB9-8BC2-AF92C5F8D06D}_is1) (Version: 1.14.2.35 - GAS Tecnologia)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
WTFast 4.2 (HKLM-x32\...\{12B4121D-5221-4AFC-9EDC-63B0CA139856}_is1) (Version: 4.2.4.824 - Initex & AAA Internet Publishing)
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluÃda na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluÃda na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {02D09F81-05AE-49B7-A0EA-5CD1546069FC} - System32\Tasks\EPSON XP-211 214 216 Series Invitation {B1C81A72-D0D0-4FD2-81DC-92AA0BB68EAE} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE [2015-09-08] (SEIKO EPSON CORPORATION)
Task: {03281269-6688-4D18-BE88-C1F0586CF7B0} - System32\Tasks\{80A99326-711E-4C7F-ADD1-94D528AE6F1E} => Chrome.exe hxxp://ui.skype.com/ui/0/7.17.0.105/pt/abandoninstall?source=lightinstaller&page=tsMain
Task: {0345D2FB-5D02-48D2-9C4F-735E7140D693} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-11-26] (Dropbox, Inc.)
Task: {19607069-D42B-49E1-B7BA-34A84B8A5F08} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Nenhum Arquivo <==== ATENÃÃO
Task: {1F0B9EA5-6F37-442C-B4DA-B69C3E561483} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {20AFCE7E-E42B-477D-ADF4-CBE5982930BD} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {26C9388B-E59C-401D-93A0-F4BD00C6F4AD} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-17] (NVIDIA Corporation)
Task: {2794DB3C-7818-44BC-AD8C-3F7EDC952927} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {2B2AEEA1-97F2-4E8B-AF51-5D2B3B72BBEB} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2BE2C30F-EDEB-484C-83F9-53164A78817D} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {2E5D348A-75CB-432C-9067-16E68CEBA6B3} - System32\Tasks\GIGABYTE OC GURU => C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe [2016-09-19] (GIGABYTE Technology Co.,Ltd.)
Task: {3695E597-2A06-4C01-9EDE-F72CF9E67D21} - System32\Tasks\EPSON XP-211 214 216 Series Invitation {43648E16-6305-4360-9683-502EB170B5DB} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE [2015-09-08] (SEIKO EPSON CORPORATION)
Task: {3FD67E42-4745-4555-92EA-64DE24B4599E} - System32\Tasks\{D7089E35-8834-45C3-B748-708621C63BBE} => pcalua.exe -a "C:\Users\Invasion\Desktop\Virtual Audio Cable 4.10 - vac410full\setup.exe" -d "C:\Users\Invasion\Desktop\Virtual Audio Cable 4.10 - vac410full"
Task: {43075613-9A00-4D6D-BF8E-315F2C88D0A6} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {44F99C75-E0DC-4E5C-B7BF-6FE51323D7F5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-05] (Google Inc.)
Task: {48023BAA-551C-4A6B-B8E2-3EA32C71BEA1} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {4B5115B2-1DD1-4C91-B10C-849F98C9A1F9} - System32\Tasks\EPSON XP-211 214 216 Series Update {AA39FD3E-743B-4F2C-823E-2B6728ECDC4B} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE [2015-09-08] (SEIKO EPSON CORPORATION)
Task: {4F4A100F-8388-4E0F-BC7B-1767CABE3CFD} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Nenhum Arquivo <==== ATENÃÃO
Task: {4F6915C1-AEE5-4019-B1E9-9C559EC630D7} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-17] (NVIDIA Corporation)
Task: {508523F0-D26B-41E1-A389-3F087A882E26} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Nenhum Arquivo <==== ATENÃÃO
Task: {5537E3AB-5F3D-4FA2-AB69-895409FE63B4} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-11-17] (NVIDIA Corporation)
Task: {56A63A84-206D-48DD-8027-D55A544954FE} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {5B34021E-E163-4D99-BACC-9ED5F01E03AA} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2013-01-25] (ASUSTek Computer Inc.)
Task: {5B371940-8325-46B3-91AF-A6F4E804BF60} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2016-08-15] ()
Task: {5FDA51A4-4F9F-410A-97AC-5D5BA55716C7} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6806E315-63C6-4389-BB62-263188142C02} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {685F12BD-EF39-44B0-A667-8558F09FA722} - System32\Tasks\EPSON XP-211 214 216 Series Invitation {BC5F1E0D-592E-4BA7-9FB9-E315699D5FB3} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE [2015-09-08] (SEIKO EPSON CORPORATION)
Task: {6A2A0275-F8AF-4455-ADB0-E48D23638F61} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6BB3B83D-AA99-4DAB-9A37-7CBEDEFF3222} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6FCDE27B-B61B-4E4C-9C83-04AB50702AFD} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-11-17] (NVIDIA Corporation)
Task: {759CAC9B-406B-4151-82D5-FDA213BB0B34} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {7A12D84A-7603-4541-B3DE-A2C9FA49A22F} - System32\Tasks\EPSON XP-211 214 216 Series Update {BC5F1E0D-592E-4BA7-9FB9-E315699D5FB3} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE [2015-09-08] (SEIKO EPSON CORPORATION)
Task: {7A4AAC5F-E257-4693-BBE6-F77A39148288} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-11-26] (Dropbox, Inc.)
Task: {7D0B8DB5-F994-4D09-905E-A45286607F31} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {7DB819BE-6244-4FD2-B8CD-6EC29498CD6D} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {7F838C3A-1AAF-4D2C-A63A-5576060C4AEB} - System32\Tasks\EPSON XP-211 214 216 Series Update {B1C81A72-D0D0-4FD2-81DC-92AA0BB68EAE} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE [2015-09-08] (SEIKO EPSON CORPORATION)
Task: {8778A380-CE3F-483D-80E6-D9DAD6CA9336} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-17] (NVIDIA Corporation)
Task: {87981730-61A4-44F0-8AA1-B159DE2651A8} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Nenhum Arquivo <==== ATENÃÃO
Task: {8A766D1C-6100-4917-B637-11F99D1A9381} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {8CDECE0F-536C-4DD2-86A6-C4950FB5AAE6} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {9451357E-4378-40A5-8B99-297774E61602} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {959E8C92-3ED0-4910-AE12-059AD4A2FB0D} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {98297410-64E9-412A-B1D0-3A51DA4B8AA9} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {9961F253-E400-405E-B0BD-A6F903348C65} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-12-17] (Microsoft Corporation)
Task: {A23EA0B1-B5C5-4EEE-B343-ED116C8D2583} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A7BA5C7A-3E8C-46EF-8ECB-F8600F6EB008} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A7E36A2A-15C4-4BEF-A3A0-F1937DA8307F} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {A8E5422D-39C6-4658-BF74-B66524373193} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Nenhum Arquivo <==== ATENÃÃO
Task: {BDA3FC62-FC00-4413-A229-E8DD190DCEBE} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C34B3E49-AB2D-4FF1-9269-C3EEDD22021C} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Nenhum Arquivo <==== ATENÃÃO
Task: {C5741926-C9BB-4BAE-8D16-273B2798FEA5} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {D575E600-0BA3-4189-98CC-580B03ACA06D} - \Perducult Verfier -> Nenhum Arquivo <==== ATENÃÃO
Task: {D6CA8996-9068-4ECF-9F27-F9CD71929568} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-17] (NVIDIA Corporation)
Task: {DE7FF76B-7F31-48D0-BDFD-29950F1D1B28} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Nenhum Arquivo <==== ATENÃÃO
Task: {DEA15EC9-5939-4A01-BB19-496270EC20CC} - System32\Tasks\EPSON XP-211 214 216 Series Invitation {AA39FD3E-743B-4F2C-823E-2B6728ECDC4B} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE [2015-09-08] (SEIKO EPSON CORPORATION)
Task: {E4921C39-1003-4494-854B-5B3D53A250C0} - System32\Tasks\{27ABC386-BFF8-4D47-842F-3709A83566D6} => pcalua.exe -a "C:\Users\Invasion\Desktop\Office 2013\setup.exe" -d "C:\Users\Invasion\Desktop\Office 2013"
Task: {E4CA90F9-9248-44BF-BA17-D2B1A3E8AC06} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Nenhum Arquivo <==== ATENÃÃO
Task: {E4E5FE9E-7B7C-4101-843F-65460515968A} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {E75A7934-6843-44CA-926E-99E71E1FCA38} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {F0D82108-1DEC-48C5-82BF-1AA267D776CB} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {F29EACDD-4822-4DC4-ACD8-F30D4EEEE3CF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-05] (Google Inc.)
Task: {F4E231A1-E39A-4276-9427-E4086F5D61E4} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F4F8E4FA-C91F-4790-BA1A-1B8A34976B49} - System32\Tasks\AutoKMS => C:\WINDOWS\AutoKMS.exe
Task: {F734E3B4-885B-4FEA-BF2A-1C07D20F77C5} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {F8FFA6D2-7E70-4F30-906E-FFFC631AF07A} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {FEDB059B-F10D-4922-BEE4-927DB8824BAF} - System32\Tasks\EPSON XP-211 214 216 Series Update {43648E16-6305-4360-9683-502EB170B5DB} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE [2015-09-08] (SEIKO EPSON CORPORATION)
(Se uma entrada for incluÃda na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\EPSON XP-211 214 216 Series Invitation {43648E16-6305-4360-9683-502EB170B5DB}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-211 214 216 Series Invitation {AA39FD3E-743B-4F2C-823E-2B6728ECDC4B}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-211 214 216 Series Invitation {B1C81A72-D0D0-4FD2-81DC-92AA0BB68EAE}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-211 214 216 Series Invitation {BC5F1E0D-592E-4BA7-9FB9-E315699D5FB3}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-211 214 216 Series Update {43648E16-6305-4360-9683-502EB170B5DB}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE :/EXE:{43648E16-6305-4360-9683-502EB170B5DB} /F:Update SISTEMA ÄSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON XP-211 214 216 Series Update {AA39FD3E-743B-4F2C-823E-2B6728ECDC4B}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE :/EXE:{AA39FD3E-743B-4F2C-823E-2B6728ECDC4B} /F:Update WORKGROUP\INVASION-PC$ ÄSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON XP-211 214 216 Series Update {B1C81A72-D0D0-4FD2-81DC-92AA0BB68EAE}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE :/EXE:{B1C81A72-D0D0-4FD2-81DC-92AA0BB68EAE} /F:Update WORKGROUP\INVASION-PC$ ÄSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON XP-211 214 216 Series Update {BC5F1E0D-592E-4BA7-9FB9-E315699D5FB3}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE :/EXE:{BC5F1E0D-592E-4BA7-9FB9-E315699D5FB3} /F:Update WORKGROUP\INVASION-PC$ ÄSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
==================== Atalhos =============================
(As entradas podem ser listadas para serem restauradas ou removidas.)
ShortcutWithArgument: C:\Users\Invasion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativos do Google Chrome\Google Play Filmes (1).lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1" --app-id=gdijeikdkaembjbdobgfkoidjkpbmlkd
ShortcutWithArgument: C:\Users\Invasion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativos do Google Chrome\Google Play Filmes.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=gdijeikdkaembjbdobgfkoidjkpbmlkd
ShortcutWithArgument: C:\Users\Invasion\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1"
ShortcutWithArgument: C:\Users\Invasion\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=ChromeDefaultData
==================== Módulos Carregados (Whitelisted) ==============
2016-08-12 22:58 - 2013-07-04 04:32 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
2016-06-15 23:29 - 2016-11-02 14:53 - 00076152 _____ () C:\WINDOWS\system32\PnkBstrA.exe
2016-10-01 14:43 - 2016-11-17 11:45 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-10-01 14:43 - 2016-11-17 11:45 - 04489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2016-10-01 14:43 - 2016-11-17 11:45 - 00418752 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\_nvspserviceplugin64.dll
2016-12-31 17:52 - 2016-12-14 15:05 - 00102912 _____ () C:\Program Files (x86)\WTFast\service\WTFast.Service.exe
2016-07-16 09:42 - 2016-07-16 09:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-12-17 10:52 - 2016-12-09 08:29 - 02681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-08-12 22:58 - 2016-10-25 18:17 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-12-17 10:52 - 2016-12-09 08:29 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-08-16 09:01 - 2015-04-13 16:07 - 00066048 _____ () C:\Program Files (x86)\LG Electronics\Screen Split\bin\ScreenSplitterHook64.dll
2016-12-17 10:52 - 2016-12-09 08:29 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-12-09 08:50 - 2016-12-09 08:50 - 01678560 _____ () C:\Users\Invasion\AppData\Local\Microsoft\OneDrive\17.3.6720.1207\amd64\ClientTelemetry.dll
2016-09-15 22:38 - 2016-09-07 02:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-12-17 10:52 - 2016-12-09 07:41 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-11-18 12:29 - 2016-11-02 08:21 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-11-18 12:29 - 2016-11-02 08:15 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-11-18 12:29 - 2016-11-02 08:14 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-11-18 12:29 - 2016-11-02 08:15 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-11-18 12:29 - 2016-11-02 08:16 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-11-18 12:29 - 2016-11-02 08:17 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-11-15 10:56 - 2016-09-22 10:05 - 19276288 _____ () C:\Program Files (x86)\Bloody6\Bloody6\Bloody6.exe
2016-11-23 05:38 - 2016-11-23 05:42 - 00019456 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2016-11-23 05:38 - 2016-11-23 05:42 - 20433408 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2016-06-03 08:32 - 2016-06-03 08:36 - 00680448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.DesignCore.dll
2016-11-23 05:38 - 2016-11-23 05:42 - 01046528 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Sharing.dll
2016-11-23 05:38 - 2016-11-23 05:42 - 00353792 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Photos.Inking.dll
2016-12-14 22:53 - 2016-12-15 06:03 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-12-14 22:53 - 2016-12-15 06:03 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-12-14 22:53 - 2016-12-15 06:03 - 42130432 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2016-12-14 22:53 - 2016-12-15 06:03 - 02216448 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\roottools.dll
2015-09-29 11:57 - 2015-09-29 11:57 - 02210480 _____ () C:\Program Files\Microsoft Office\Office15\tmpod.dll
2015-10-13 15:10 - 2015-10-13 15:10 - 01428648 _____ () C:\Program Files\Microsoft Office\Office15\ADDINS\UmOutlookAddin.dll
2016-12-13 14:18 - 2016-12-13 14:19 - 03810816 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1612.3341.0_x64__8wekyb3d8bbwe\Calculator.exe
2016-08-12 22:58 - 2016-12-31 10:11 - 00032912 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\PEbiosinterface32.dll
2016-08-12 22:58 - 2013-07-04 04:32 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\ATKEX.dll
2016-09-13 22:36 - 2016-10-06 08:28 - 02493440 _____ () C:\Program Files (x86)\Origin\libGLESv2.dll
2015-12-05 00:10 - 2013-09-16 02:19 - 01242584 ____R () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-12-05 10:07 - 2016-11-17 11:45 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-10-01 14:43 - 2016-11-17 11:45 - 03774400 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2016-10-01 14:43 - 2016-11-17 11:45 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-08-16 09:01 - 2015-04-13 16:07 - 00063488 _____ () C:\Program Files (x86)\LG Electronics\Screen Split\bin\ScreenSplitterHook.dll
2016-10-01 14:43 - 2016-11-17 08:20 - 00506424 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2016-10-01 14:43 - 2016-11-17 08:20 - 00252352 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2016-10-01 14:43 - 2016-11-17 08:20 - 02809912 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2016-10-01 14:43 - 2016-11-17 08:20 - 00245184 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2016-10-01 14:43 - 2016-11-17 08:20 - 00436792 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
2016-10-01 14:43 - 2016-11-17 08:20 - 00338488 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2016-10-01 14:43 - 2016-11-17 08:20 - 00968248 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node
2016-12-09 08:50 - 2016-12-09 08:50 - 01244376 _____ () C:\Users\Invasion\AppData\Local\Microsoft\OneDrive\17.3.6720.1207\ClientTelemetry.dll
2015-12-29 09:14 - 2016-12-08 13:13 - 00656160 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-12-29 09:14 - 2016-08-31 23:02 - 04969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-12-29 09:14 - 2016-12-20 00:25 - 02322720 _____ () C:\Program Files (x86)\Steam\video.dll
2015-12-29 09:14 - 2016-01-27 05:49 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2015-12-29 09:14 - 2016-01-27 05:49 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2015-12-29 09:14 - 2016-01-27 05:49 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2015-12-29 09:14 - 2016-01-27 05:49 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2015-12-29 09:14 - 2016-01-27 05:49 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2015-12-29 09:14 - 2016-08-31 23:02 - 01563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-12-29 09:14 - 2016-08-31 23:02 - 01195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2015-12-29 09:14 - 2016-12-20 00:25 - 00838944 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-03-09 22:39 - 2016-07-04 20:17 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2016-10-01 14:43 - 2016-11-17 11:44 - 60817344 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
2016-12-13 14:08 - 2016-12-05 14:21 - 67304736 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2015-12-29 09:14 - 2016-12-20 00:25 - 00388384 _____ () C:\Program Files (x86)\Steam\steam.dll
2015-12-29 09:14 - 2015-09-24 21:52 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
2016-08-16 09:01 - 2015-04-13 16:07 - 06296064 _____ () C:\Program Files (x86)\LG Electronics\Screen Split\bin\SoftwareAutoUpdates.dll
2016-08-16 09:01 - 2015-04-13 16:07 - 00005632 _____ () C:\Program Files (x86)\LG Electronics\Screen Split\bin\PorBraz.dll
2016-11-15 10:56 - 2013-10-11 10:43 - 00085504 _____ () C:\Program Files (x86)\Bloody6\Bloody6\DLL\DLL_ZoomControl.dll
2016-11-15 10:56 - 2016-05-26 16:28 - 04672512 _____ () C:\Program Files (x86)\Bloody6\Bloody6\Data\RES\Forms\Internet_Advertisement\Internet_Advertisement_DLL.dll
2015-03-24 18:01 - 2015-03-24 18:01 - 00192512 _____ () C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GvVGAConfig.dll
2016-11-26 23:19 - 2016-11-11 18:36 - 00035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
2016-11-26 23:19 - 2016-11-11 18:36 - 00100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
2016-11-26 23:19 - 2016-11-11 18:36 - 00018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00019760 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
2016-11-26 23:19 - 2016-11-11 18:36 - 00694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2016-11-26 23:19 - 2016-11-11 18:37 - 00123856 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 01682760 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00020808 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2016-12-22 06:07 - 2016-11-11 18:36 - 00145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
2016-12-22 06:07 - 2016-11-11 18:37 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd
2016-12-22 06:07 - 2016-11-11 18:36 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
2016-11-26 23:19 - 2016-11-11 18:38 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00021312 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00052024 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00038696 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
2016-12-22 06:07 - 2016-11-11 18:36 - 00392144 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
2016-12-22 06:07 - 2016-11-11 18:38 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
2016-11-26 23:19 - 2016-11-11 18:38 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
2016-11-26 23:19 - 2016-11-11 18:39 - 00116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00381752 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
2016-11-26 23:19 - 2016-11-11 18:38 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00025424 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
2016-11-26 23:19 - 2016-11-11 18:38 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
2016-11-26 23:19 - 2016-11-11 18:38 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
2016-11-26 23:19 - 2016-11-11 18:38 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
2016-11-26 23:19 - 2016-11-11 18:39 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
2016-11-26 23:19 - 2016-11-11 18:39 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
2016-11-26 23:19 - 2016-11-11 18:38 - 00057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
2016-11-26 23:19 - 2016-11-11 18:39 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00246592 _____ () C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
2016-11-26 23:19 - 2016-11-11 18:37 - 00241104 _____ () C:\Program Files (x86)\Dropbox\Client\_jpegtran.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00020280 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
2016-11-26 23:19 - 2016-11-11 18:39 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00023376 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi._winffi_iphlpapi.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00019776 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror._winffi_winerror.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet._winffi_wininet.pyd
2016-11-26 23:19 - 2016-11-11 18:39 - 00350152 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00022352 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00024392 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2016-12-22 06:07 - 2016-11-11 18:35 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2016-12-22 06:07 - 2016-12-21 16:26 - 00031568 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd
2016-12-22 06:07 - 2016-12-03 06:13 - 00293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll
2016-12-22 06:07 - 2016-12-21 16:26 - 00084280 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2016-12-22 06:07 - 2016-12-21 16:26 - 01826096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
2016-11-26 23:19 - 2016-11-11 18:37 - 00083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00531248 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 03928880 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 01972528 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00133424 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00224056 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00207672 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00020288 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32._winffi_user32.pyd
2016-12-22 06:07 - 2016-11-11 18:42 - 00017864 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.dll
2016-12-22 06:07 - 2016-11-11 18:42 - 01631184 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
2016-12-22 06:07 - 2016-12-21 16:26 - 00042808 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00171320 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00357680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00037192 _____ () C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00024904 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd
2016-11-26 23:19 - 2016-11-11 18:39 - 00060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00546096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
2016-12-14 22:57 - 2016-12-08 05:29 - 01829208 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libglesv2.dll
2016-12-14 22:57 - 2016-12-08 05:29 - 00085848 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libegl.dll
2016-12-12 18:53 - 2016-12-12 18:53 - 17833560 _____ () C:\Users\Invasion\AppData\Local\Google\Chrome\User Data\PepperFlash\24.0.0.186\pepflashplayer.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluÃda na fixlist, somente o ADS será removido.)
AlternateDataStreams: C:\Program Files (x86)\GbPlugin:IncompleteStartProcessProtection.cnt [10]
AlternateDataStreams: C:\Program Files (x86)\GbPlugin:u6eBQrM0Z2K3FKLVBMG8dY3IkKT2rqFO+Sf68h8fDg== [32]
AlternateDataStreams: C:\WINDOWS\System32:BE5044FD_Bb.gbp [2]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\gbpddfac64.sys:r0d3jo5 [20]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\gbpddfac64.sys:X5ZN8aGvT4 [2262]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\gbpddreg64.sys:X5ZN8aGvT4 [686]
AlternateDataStreams: C:\ProgramData\GbPlugin:IncompleteStartGbprcm.cnt [10]
AlternateDataStreams: C:\Users\Todos os Usuários\GbPlugin:IncompleteStartGbprcm.cnt [10]
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluÃda na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== Associação (Whitelisted) ===============
(Se uma entrada for incluÃda na fixlist, o Ãtem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluÃda na fixlist, será removida do Registro.)
IE trusted site: HKU\S-1-5-21-4038462754-2495381737-3900046349-1000\...\bancobrasil.com.br -> www.bancobrasil.com.br
IE trusted site: HKU\S-1-5-21-4038462754-2495381737-3900046349-1000\...\bb.com.br -> hxxps://seg.bb.com.br
==================== Hosts Conteúdo: ===============================
(Se necessário, a diretiva Hosts: pode ser incluÃda na fixlist para redefinir o Hosts.)
2009-07-14 00:34 - 2009-06-10 19:00 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts
==================== Outras Ãreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-4038462754-2495381737-3900046349-1000\Control Panel\Desktop\\Wallpaper -> c:\users\invasion\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\localstate\photosappbackground\{18a6b761-3791-45a0-bffe-30f5f23ae170}.jpg
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER Ãtens desabilitados ==
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluÃda na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [MSMQ-In-TCP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => LPort=808
FirewallRules: [UDP Query User{DBE8D4E1-DF98-43FA-AA82-0D01C41A286D}C:\users\invasion\appdata\local\temp\keygen.exe] => C:\users\invasion\appdata\local\temp\keygen.exe
FirewallRules: [TCP Query User{B4BDEC53-847C-4FEA-85A4-A9B6CFDDEF29}C:\users\invasion\appdata\local\temp\keygen.exe] => C:\users\invasion\appdata\local\temp\keygen.exe
FirewallRules: [UDP Query User{74AEF27B-65A3-46F2-8972-6685119D6583}C:\windows\keygen.exe] => C:\windows\keygen.exe
FirewallRules: [TCP Query User{856AE7AF-8E80-4442-A733-F45C02F74311}C:\windows\keygen.exe] => C:\windows\keygen.exe
FirewallRules: [{78691639-F181-475E-A914-40A3547CF714}] => C:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{F8EAE92C-6464-4598-8647-EFA39E8C7B6D}] => C:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{F4ACAA6E-7176-4357-90C2-1A4ED1E2D0D9}] => C:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{E9D8E933-FAE3-4B44-B816-327E5536AD64}] => C:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [UDP Query User{17D5FD48-47E4-43FE-9358-DFFAAD9E37FB}C:\program files (x86)\origin games\battlefield 4\bf4.exe] => C:\program files (x86)\origin games\battlefield 4\bf4.exe
FirewallRules: [TCP Query User{224D2156-E0AE-460A-B2BE-0A50F2B47B7F}C:\program files (x86)\origin games\battlefield 4\bf4.exe] => C:\program files (x86)\origin games\battlefield 4\bf4.exe
FirewallRules: [UDP Query User{0D5B8471-8150-490B-BB8D-5ED0E40664CC}C:\program files (x86)\origin games\battlefield 4\bf4.exe] => C:\program files (x86)\origin games\battlefield 4\bf4.exe
FirewallRules: [TCP Query User{EEDC8BB3-B018-4751-A327-10CD5D8DC90C}C:\program files (x86)\origin games\battlefield 4\bf4.exe] => C:\program files (x86)\origin games\battlefield 4\bf4.exe
FirewallRules: [{9F0272BC-1BD1-4AFF-A982-9D9A010826E4}] => C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{2015000B-D8BA-4070-B923-4A974ABB90BE}] => C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{E26D2815-3781-4895-BF2A-3A26DD115E37}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{97D21928-071F-4242-88B7-3494D9EC3BB6}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{1342EFC7-86A5-4722-A724-3D89CDC49171}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{598FB939-559D-4330-9398-1E90B3F700A4}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{19958722-88C2-48BB-9D8D-26B7B6B61EDE}] => C:\Program Files\Diebold\Warsaw\core.exe
FirewallRules: [UDP Query User{F41E4F3B-44A8-4B7B-A3A5-7D7FCF3034D4}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{C34E696E-CF87-46DD-9B1A-EFA8CB2077A3}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{6AEFCC19-4A53-428C-BD06-68794BC9C5CC}] => C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{2B888220-6B7F-4B61-A69C-5202428B95FF}] => C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{0708300D-7E11-4C79-9606-FB2E4451306D}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{CC844C12-BD3B-49EB-9617-4D132E24AE49}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{61ECE489-F570-4919-B40B-444E8A7EB7BC}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{FDDB54E0-E889-45FD-AF4F-4D55B005B491}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{0229B6DE-8F4C-47BC-8BD3-D8D633D829CE}] => D:\Common\EpsonNet Setup\ENEasyApp.exe
FirewallRules: [{41FFF511-6ABE-41A9-B208-ADAA7C33F89A}] => D:\Common\EpsonNet Setup\ENEasyApp.exe
FirewallRules: [{5F0F663E-0A67-4786-A1DD-977676DDE028}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{11C3543A-BC78-49E1-9878-73B8AEFF3562}] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
FirewallRules: [{A0C0911D-88FD-46B5-AA60-BF242F168A59}] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
FirewallRules: [{87C39288-33C5-48FE-A1D2-4B30181C59B0}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{F565F6C6-4F0D-4013-B627-0BCD0900476F}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{63E4CA69-519F-4AD2-928B-C5E250F54722}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{7F5FF9A9-B84C-4FBC-83E9-481E7739617B}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{85453C64-3BA3-47C6-9632-4223D78B7786}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [UDP Query User{E3A3D501-41E3-459D-8E85-493305DABC88}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [{574444F3-E9E8-491A-A924-18328DF9EBE3}] => C:\Users\Invasion\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{5F215949-A456-481D-9BD3-E4106FA54097}] => C:\Users\Invasion\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{2E510BCA-07DF-4E56-AE1F-EAD498CD4BB7}] => C:\Users\Invasion\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{3D422383-24A0-4FDF-A4EC-B83369E4A3C1}] => C:\Users\Invasion\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{C6942BCA-610C-45BE-A4C0-6CD797779B0F}] => C:\Users\Invasion\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{BB754231-239B-4AE3-AA93-606A7FC8B322}] => C:\Users\Invasion\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{122204C9-A299-491B-A5DF-7DE2DB40828F}] => C:\Users\Invasion\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{34D3D456-0525-4B6F-B8EF-7271FEA543FE}] => C:\Users\Invasion\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{E05AC2CD-45B6-4E5E-BF08-D6AF8E55F082}C:\level up\warface\2b3f2740-f442-489f-a2cb-8f7153924698\c4671e0070fc31ea2c40e9a15d0dbdb4\aria2c.exe] => C:\level up\warface\2b3f2740-f442-489f-a2cb-8f7153924698\c4671e0070fc31ea2c40e9a15d0dbdb4\aria2c.exe
FirewallRules: [UDP Query User{376549C9-C1D7-4031-A2EB-702EE5CD3E19}C:\level up\warface\2b3f2740-f442-489f-a2cb-8f7153924698\c4671e0070fc31ea2c40e9a15d0dbdb4\aria2c.exe] => C:\level up\warface\2b3f2740-f442-489f-a2cb-8f7153924698\c4671e0070fc31ea2c40e9a15d0dbdb4\aria2c.exe
FirewallRules: [TCP Query User{2DE23836-F3F7-47DA-B26B-1469FAFE4E2A}C:\users\invasion\appdata\roaming\spotify\spotify.exe] => C:\users\invasion\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{26C6BD79-C71C-4E27-9349-68664C6A7090}C:\users\invasion\appdata\roaming\spotify\spotify.exe] => C:\users\invasion\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{5008DA21-2C16-4468-844F-4C9450140498}C:\users\invasion\appdata\roaming\spotify\spotify.exe] => C:\users\invasion\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{87BBD973-FFD8-473C-A006-CFF4EB447637}C:\users\invasion\appdata\roaming\spotify\spotify.exe] => C:\users\invasion\appdata\roaming\spotify\spotify.exe
FirewallRules: [{A966BF23-CD7C-4188-9779-3E74B06DE78D}] => C:\Users\Invasion\AppData\Local\Temp\svchost.exe
FirewallRules: [{DC033EF3-55FD-4E05-8222-9B03F284ED72}] => C:\Users\Invasion\AppData\Local\Temp\svchost.exe
FirewallRules: [{055C9432-8E38-4562-AE09-07B8AD226048}] => C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F805DCC0-2F3C-49C5-9DC5-764D1B3DB9CC}] => C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{CE2998F3-AEA8-4771-8BFC-2B8D607FCEA5}] => C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{99E2013A-1633-44A7-BF50-7138E81A73CE}] => C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{5B2DEFA2-D4F6-4999-95ED-27B00FC36AA9}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [TCP Query User{A8EEA584-A9FE-43AF-AE67-D8E320CF347A}C:\level up\warface\2b3f2740-f442-489f-a2cb-8f7153924698\c4671e0070fc31ea2c40e9a15d0dbdb4\aria2c.exe] => C:\level up\warface\2b3f2740-f442-489f-a2cb-8f7153924698\c4671e0070fc31ea2c40e9a15d0dbdb4\aria2c.exe
FirewallRules: [UDP Query User{85D3A309-F420-4A3E-84C2-DBFA9F4824DE}C:\level up\warface\2b3f2740-f442-489f-a2cb-8f7153924698\c4671e0070fc31ea2c40e9a15d0dbdb4\aria2c.exe] => C:\level up\warface\2b3f2740-f442-489f-a2cb-8f7153924698\c4671e0070fc31ea2c40e9a15d0dbdb4\aria2c.exe
FirewallRules: [{96686FE1-AB41-4841-B0A0-B635AA069620}] => C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{C7221A41-0795-4AB8-A378-99CC537CF16F}] => C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{24D9D8EE-A699-4821-AC74-928C328A9B72}] => C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{799E5A0B-3726-41C5-BCA9-E97EFDFEA181}] => C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{00A2BDB3-9405-4862-B64C-9945AF5A201E}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{A151E6EE-4CED-4876-AC6C-979F7FC41049}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{C1F37712-1D82-4315-926C-1B5331E631C1}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{EC410D4C-2F99-46EB-BDE6-55FE69991665}] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [TCP Query User{288B3A93-C88C-4AAB-AE46-F311DC1EB191}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{BC703C8C-3173-49B3-984A-AA91E060EBA0}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{A0F1E8BF-74C0-4483-9AF5-B16F38D867C0}C:\windows\system32\rundll32.exe] => C:\windows\system32\rundll32.exe
FirewallRules: [UDP Query User{3C26993F-D6BD-4D8E-878A-0CBAC5C6A6D2}C:\windows\system32\rundll32.exe] => C:\windows\system32\rundll32.exe
FirewallRules: [{786575E5-F4F7-4161-8A09-089FD1357CC1}] => C:\Program Files (x86)\WTFast\WTFast.exe
FirewallRules: [{54C826A8-313E-497D-8394-88C26E87F0C2}] => %ProgramFiles% (x86)\WTFast\WTFast.exe
FirewallRules: [{B101AF33-D16C-45EB-8850-22F4351A2E7C}] => %ProgramFiles% (x86)\WTFast\WTFast.exe
FirewallRules: [{E208B18C-B249-4431-BE2C-766648A76485}] => %SystemDrive%\Level Up\Warface\Bin32Release\Game.exe
FirewallRules: [{1743A2DE-D9CF-4C12-9455-46F1FA2A8DA8}] => %SystemDrive%\Level Up\Warface\Bin32Release\Game.exe
FirewallRules: [{92E7762A-8CEE-4CB6-88E6-6C5A36C704EC}] => %SystemDrive%\Level Up\Warface\Bin32Release\Game.exe
FirewallRules: [{5837B30D-7B20-48A1-A815-7D2E4895C5B4}] => %SystemDrive%\Level Up\Warface\Bin32Release\Game.exe
FirewallRules: [{A9EC4454-D1F9-4C7B-B181-C8DECE8F7568}] => C:\Program Files\KMSpico\KMSELDI.exe
FirewallRules: [{331767F7-BC26-4F03-876C-10E13DB5316F}] => C:\Program Files\KMSpico\KMSELDI.exe
FirewallRules: [{2A714756-016E-4552-BD43-6DD2451240E9}] => C:\Program Files\KMSpico\AutoPico.exe
FirewallRules: [{CB0689E8-F6B6-48DE-93BF-1B8ED95E4602}] => C:\Program Files\KMSpico\AutoPico.exe
==================== Pontos de Restauração =========================
26-12-2016 13:53:17 Ponto de Verificação Agendado
==================== Dispositivos Apresentando Falhas No Gerenciador =============
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (01/01/2017 06:24:54 PM) (Source: MsiInstaller) (EventID: 1002) (User: Invasion-PC)
Description: Valor inesperado ou ausente (nome: 'PackageName', valor: '') na chave 'HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList'
Error: (01/01/2017 06:22:50 PM) (Source: MsiInstaller) (EventID: 1002) (User: Invasion-PC)
Description: Valor inesperado ou ausente (nome: 'PackageName', valor: '') na chave 'HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList'
Error: (01/01/2017 10:56:03 AM) (Source: MsiInstaller) (EventID: 1002) (User: Invasion-PC)
Description: Valor inesperado ou ausente (nome: 'PackageName', valor: '') na chave 'HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList'
Error: (12/31/2016 09:22:10 PM) (Source: MsiInstaller) (EventID: 1002) (User: Invasion-PC)
Description: Valor inesperado ou ausente (nome: 'PackageName', valor: '') na chave 'HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList'
Error: (12/31/2016 08:18:08 PM) (Source: MsiInstaller) (EventID: 1002) (User: Invasion-PC)
Description: Valor inesperado ou ausente (nome: 'PackageName', valor: '') na chave 'HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList'
Error: (12/31/2016 08:09:11 PM) (Source: MsiInstaller) (EventID: 1002) (User: Invasion-PC)
Description: Valor inesperado ou ausente (nome: 'PackageName', valor: '') na chave 'HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList'
Error: (12/31/2016 07:56:23 PM) (Source: MsiInstaller) (EventID: 1002) (User: Invasion-PC)
Description: Valor inesperado ou ausente (nome: 'PackageName', valor: '') na chave 'HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList'
Error: (12/31/2016 07:51:32 PM) (Source: MsiInstaller) (EventID: 1002) (User: Invasion-PC)
Description: Valor inesperado ou ausente (nome: 'PackageName', valor: '') na chave 'HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList'
Error: (12/31/2016 07:50:34 PM) (Source: MsiInstaller) (EventID: 1002) (User: Invasion-PC)
Description: Valor inesperado ou ausente (nome: 'PackageName', valor: '') na chave 'HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList'
Error: (12/31/2016 07:48:54 PM) (Source: MsiInstaller) (EventID: 1002) (User: Invasion-PC)
Description: Valor inesperado ou ausente (nome: 'PackageName', valor: '') na chave 'HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList'
Erros de Sistema:
=============
Error: (01/02/2017 09:28:53 AM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão especÃfico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
e APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
ao usuário AUTORIDADE NT\SISTEMA SID (S-1-5-18) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não DisponÃvel SID (Não DisponÃvel). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (01/01/2017 10:43:43 AM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão especÃfico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
e APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
ao usuário AUTORIDADE NT\SISTEMA SID (S-1-5-18) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não DisponÃvel SID (Não DisponÃvel). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (01/01/2017 10:43:43 AM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: AUTORIDADE NT)
Description: 0x8000002a66\??\C:\Users\Invasion\AppData\Local\Microsoft\Windows\UsrClass.dat
Error: (12/31/2016 10:11:48 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possÃvel iniciar o serviço Warsaw File Access svc devido ao seguinte erro:
O driver não foi carregado porque houve falha na chamada de inicialização.
Error: (12/31/2016 10:11:48 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possÃvel iniciar o serviço Warsaw File Access svc devido ao seguinte erro:
O driver não foi carregado porque houve falha na chamada de inicialização.
Error: (12/31/2016 10:11:26 AM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão especÃfico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
e APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
ao usuário AUTORIDADE NT\SISTEMA SID (S-1-5-18) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não DisponÃvel SID (Não DisponÃvel). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (12/31/2016 10:11:26 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possÃvel iniciar o serviço Warsaw File Access svc devido ao seguinte erro:
O driver não foi carregado porque houve falha na chamada de inicialização.
Error: (12/31/2016 10:11:17 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: O serviço NetTcpActivator depende do serviço NetTcpPortSharing, mas não foi possÃvel iniciá-lo devido ao seguinte erro:
O serviço não pode ser iniciado porque está desativado ou não tem dispositivos ativados associados.
Error: (12/31/2016 10:11:15 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: O desligamento do sistema que ocorreu à s 23:52:17 do dia â30/â12/â2016 não era esperado.
Error: (12/31/2016 10:11:08 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: AUTORIDADE NT)
Description: 32212256845915853595149280
CodeIntegrity:
===================================
Date: 2016-12-31 11:36:52.977
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-12-30 22:42:39.351
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-12-26 10:04:56.519
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-12-25 12:56:42.989
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-12-21 22:09:00.469
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
Date: 2016-12-21 05:48:52.257
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-12-18 10:17:52.376
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-12-17 11:41:19.610
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.stdformat.dll that did not meet the Microsoft signing level requirements.
Date: 2016-12-17 11:41:19.590
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\adodb.dll that did not meet the Microsoft signing level requirements.
Date: 2016-12-17 11:41:19.572
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\msdatasrc.dll that did not meet the Microsoft signing level requirements.
==================== Informações da Memória ===========================
Processador: Intel(R) Core(TM) i5-4690 CPU @ 3.50GHz
Percentagem de memória em uso: 36%
RAM física total: 12193.54 MB
RAM física disponível: 7783.94 MB
Virtual Total: 24481.54 MB
Virtual disponível: 19112.86 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:223.03 GB) (Free:16.81 GB) NTFS
Drive e: (Reservado pelo Sistema) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[sistema com componentes de inicialização (obtido através de drive)]
Drive f: () (Fixed) (Total:465.66 GB) (Free:427.19 GB) NTFS
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 223.6 GB) (Disk ID: 447A0B4B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=223 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
==================== Fim de Addition.txt ============================
Executado por Invasion (02-01-2017 10:17:03)
Executando a partir de C:\Users\Invasion\Desktop
Windows 10 Pro Versão 1607 (X64) (2016-08-13 01:04:00)
Modo da Inicialização: Normal
==========================================================
==================== Contas: =============================
Administrador (S-1-5-21-4038462754-2495381737-3900046349-500 - Administrator - Disabled)
Convidado (S-1-5-21-4038462754-2495381737-3900046349-501 - Limited - Disabled)
DefaultAccount (S-1-5-21-4038462754-2495381737-3900046349-503 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-4038462754-2495381737-3900046349-1002 - Limited - Enabled)
Invasion (S-1-5-21-4038462754-2495381737-3900046349-1000 - Administrator - Enabled) => C:\Users\Invasion
==================== Central de Segurança ========================
(Se uma entrada for incluÃda na fixlist, será removida.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programas Instalados ======================
(Somente os programas adwares com a indicação "Oculto" podem ser adicionados à fixlist para desocultá-los. Os programas adwares devem ser desinstalados manualmente.)
µTorrent (HKU\S-1-5-21-4038462754-2495381737-3900046349-1000\...\uTorrent) (Version: 3.4.5.41372 - BitTorrent Inc.)
Ansel (Version: 375.70 - NVIDIA Corporation) Hidden
ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.020 - ASUSTek Computer Inc.)
Atualizações da NVIDIA 2.13.0.21 (Version: 2.13.0.21 - NVIDIA Corporation) Hidden
Battlefield 4⢠(HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.7.2.45672 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)
Bloody6 (HKLM-x32\...\Bloody3) (Version: 16.09.0013 - Bloody)
CPUID CPU-Z 1.77 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
Dropbox (HKLM-x32\...\Dropbox) (Version: 16.4.30 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.59.1 - Dropbox, Inc.) Hidden
Dxtory version 2.0.139 (HKLM-x32\...\Dxtory2.0_is1) (Version: 2.0.139 - ExKode Co. Ltd.)
Epson Customer Research Participation (HKLM\...\{B26449A6-6007-4460-B4FE-C4776115BCEA}) (Version: 1.80.0000 - Seiko Epson Corporation)
Epson Event Manager (HKLM-x32\...\{10144CFE-D76C-4CFA-81A1-37A1642349A3}) (Version: 3.01.0013 - Seiko Epson Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EPSON XP-211 214 216 Series Printer Uninstall (HKLM\...\EPSON XP-211 214 216 Series) (Version: - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 8.0.2.805 - Foxit Software Inc.)
GIGABYTE OC_GURU II (HKLM-x32\...\InstallShield_{EA298EC1-2B8F-4DA9-8C5B-BC1FCBBAD72F}) (Version: 2.05.0000 - GIGABYTE Technology Co.,Ltd.)
GIGABYTE OC_GURU II (x32 Version: 2.05.0000 - GIGABYTE Technology Co.,Ltd.) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version: - Rockstar North)
HTML-Kit Tools (HKLM-x32\...\HTMLKitTools_is1) (Version: 1.0 - HTML-Kit.com)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1011 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
K-Lite Mega Codec Pack 12.3.5 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 12.3.5 - KLCP)
LogicCircuit (HKLM-x32\...\{C92AE391-6F9F-49C8-B19A-BA3E191C9CB9}) (Version: 2.16.0603 - LogicCircuit)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4038462754-2495381737-3900046349-1000\...\OneDriveSetup.exe) (Version: 17.3.6720.1207 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
NVIDIA Driver de áudio HD 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA Driver de controle do 3D Vision 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA Driver de gráficos 375.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 375.70 - NVIDIA Corporation)
NVIDIA Driver do 3D Vision 375.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 375.70 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.1.2.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.1.2.31 - NVIDIA Corporation)
NVIDIA Software do sistema PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (Version: 3.1.2.31 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 1.2.0.0 - NVIDIA Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 10.2.1.38915 - Electronic Arts, Inc.)
Pacote de Idiomas do Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - Português (Brasil) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PTB) (Version: 10.0.50903 - Microsoft Corporation)
Painel de controle da NVIDIA 375.70 (Version: 375.70 - NVIDIA Corporation) Hidden
Plano de Negócio (HKLM-x32\...\{D233EC4A-EF4B-4CCA-AE37-7994A3E1A483}) (Version: 2.0.4 - SEBRAE)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.19.726.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
Revisores de Texto do Microsoft Office 2013 â Português do Brasil (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.1.0 - Rockstar Games)
Screen Split (HKLM-x32\...\{7F0C2357-33B0-4408-A9AD-A7623FAA22B1}) (Version: 6.57 - LG Electronics Inc.)
SHIELD Streaming (Version: 7.1.0340 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.1.2.31 - NVIDIA Corporation) Hidden
Skype⢠7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-4038462754-2495381737-3900046349-1000\...\Spotify) (Version: 1.0.45.186.g3b5036d6 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Suplemento Microsoft Salvar como PDF ou XPS para programas do Microsoft Office 2007 (HKLM-x32\...\{90120000-00B2-0416-0000-0000000FF1CE}) (Version: 12.0.4518.1019 - Microsoft Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.53254 - TeamViewer)
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0416-1000-0000000FF1CE}_Office15.PROPLUS_{2BA6245D-FBB9-42F6-AFD9-C0DC52763AD5}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3127976) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{E0107125-62C7-43B6-8E66-0582F397469E}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3127976) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{E0107125-62C7-43B6-8E66-0582F397469E}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3127976) 64-Bit Edition (HKLM\...\{90150000-012B-0416-1000-0000000FF1CE}_Office15.PROPLUS_{E0107125-62C7-43B6-8E66-0582F397469E}) (Version: - Microsoft)
Virtual Audio Cable 4.10 (HKLM\...\Virtual Audio Cable 4.10) (Version: - )
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
Warface (HKU\S-1-5-21-4038462754-2495381737-3900046349-1000\...\{094FAADD-5A39-4C64-911A-B4C9AD818484}_is1) (Version: 1.1.367.81 - Level Up! Games)
Warsaw 1.14.2.35 64 bits (HKLM\...\{20E60725-16C8-4FB9-8BC2-AF92C5F8D06D}_is1) (Version: 1.14.2.35 - GAS Tecnologia)
WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
WTFast 4.2 (HKLM-x32\...\{12B4121D-5221-4AFC-9EDC-63B0CA139856}_is1) (Version: 4.2.4.824 - Initex & AAA Internet Publishing)
==================== Exame Personalizado CLSID (Whitelisted): ==========================
(Se uma entrada for incluÃda na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
==================== Tarefas Agendadas (Whitelisted) =============
(Se uma entrada for incluÃda na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
Task: {02D09F81-05AE-49B7-A0EA-5CD1546069FC} - System32\Tasks\EPSON XP-211 214 216 Series Invitation {B1C81A72-D0D0-4FD2-81DC-92AA0BB68EAE} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE [2015-09-08] (SEIKO EPSON CORPORATION)
Task: {03281269-6688-4D18-BE88-C1F0586CF7B0} - System32\Tasks\{80A99326-711E-4C7F-ADD1-94D528AE6F1E} => Chrome.exe hxxp://ui.skype.com/ui/0/7.17.0.105/pt/abandoninstall?source=lightinstaller&page=tsMain
Task: {0345D2FB-5D02-48D2-9C4F-735E7140D693} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-11-26] (Dropbox, Inc.)
Task: {19607069-D42B-49E1-B7BA-34A84B8A5F08} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Nenhum Arquivo <==== ATENÃÃO
Task: {1F0B9EA5-6F37-442C-B4DA-B69C3E561483} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {20AFCE7E-E42B-477D-ADF4-CBE5982930BD} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {26C9388B-E59C-401D-93A0-F4BD00C6F4AD} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-17] (NVIDIA Corporation)
Task: {2794DB3C-7818-44BC-AD8C-3F7EDC952927} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {2B2AEEA1-97F2-4E8B-AF51-5D2B3B72BBEB} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2BE2C30F-EDEB-484C-83F9-53164A78817D} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {2E5D348A-75CB-432C-9067-16E68CEBA6B3} - System32\Tasks\GIGABYTE OC GURU => C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe [2016-09-19] (GIGABYTE Technology Co.,Ltd.)
Task: {3695E597-2A06-4C01-9EDE-F72CF9E67D21} - System32\Tasks\EPSON XP-211 214 216 Series Invitation {43648E16-6305-4360-9683-502EB170B5DB} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE [2015-09-08] (SEIKO EPSON CORPORATION)
Task: {3FD67E42-4745-4555-92EA-64DE24B4599E} - System32\Tasks\{D7089E35-8834-45C3-B748-708621C63BBE} => pcalua.exe -a "C:\Users\Invasion\Desktop\Virtual Audio Cable 4.10 - vac410full\setup.exe" -d "C:\Users\Invasion\Desktop\Virtual Audio Cable 4.10 - vac410full"
Task: {43075613-9A00-4D6D-BF8E-315F2C88D0A6} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {44F99C75-E0DC-4E5C-B7BF-6FE51323D7F5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-05] (Google Inc.)
Task: {48023BAA-551C-4A6B-B8E2-3EA32C71BEA1} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {4B5115B2-1DD1-4C91-B10C-849F98C9A1F9} - System32\Tasks\EPSON XP-211 214 216 Series Update {AA39FD3E-743B-4F2C-823E-2B6728ECDC4B} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE [2015-09-08] (SEIKO EPSON CORPORATION)
Task: {4F4A100F-8388-4E0F-BC7B-1767CABE3CFD} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Nenhum Arquivo <==== ATENÃÃO
Task: {4F6915C1-AEE5-4019-B1E9-9C559EC630D7} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-17] (NVIDIA Corporation)
Task: {508523F0-D26B-41E1-A389-3F087A882E26} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Nenhum Arquivo <==== ATENÃÃO
Task: {5537E3AB-5F3D-4FA2-AB69-895409FE63B4} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-11-17] (NVIDIA Corporation)
Task: {56A63A84-206D-48DD-8027-D55A544954FE} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {5B34021E-E163-4D99-BACC-9ED5F01E03AA} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2013-01-25] (ASUSTek Computer Inc.)
Task: {5B371940-8325-46B3-91AF-A6F4E804BF60} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2016-08-15] ()
Task: {5FDA51A4-4F9F-410A-97AC-5D5BA55716C7} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6806E315-63C6-4389-BB62-263188142C02} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {685F12BD-EF39-44B0-A667-8558F09FA722} - System32\Tasks\EPSON XP-211 214 216 Series Invitation {BC5F1E0D-592E-4BA7-9FB9-E315699D5FB3} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE [2015-09-08] (SEIKO EPSON CORPORATION)
Task: {6A2A0275-F8AF-4455-ADB0-E48D23638F61} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6BB3B83D-AA99-4DAB-9A37-7CBEDEFF3222} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6FCDE27B-B61B-4E4C-9C83-04AB50702AFD} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-11-17] (NVIDIA Corporation)
Task: {759CAC9B-406B-4151-82D5-FDA213BB0B34} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {7A12D84A-7603-4541-B3DE-A2C9FA49A22F} - System32\Tasks\EPSON XP-211 214 216 Series Update {BC5F1E0D-592E-4BA7-9FB9-E315699D5FB3} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE [2015-09-08] (SEIKO EPSON CORPORATION)
Task: {7A4AAC5F-E257-4693-BBE6-F77A39148288} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-11-26] (Dropbox, Inc.)
Task: {7D0B8DB5-F994-4D09-905E-A45286607F31} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {7DB819BE-6244-4FD2-B8CD-6EC29498CD6D} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {7F838C3A-1AAF-4D2C-A63A-5576060C4AEB} - System32\Tasks\EPSON XP-211 214 216 Series Update {B1C81A72-D0D0-4FD2-81DC-92AA0BB68EAE} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE [2015-09-08] (SEIKO EPSON CORPORATION)
Task: {8778A380-CE3F-483D-80E6-D9DAD6CA9336} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-17] (NVIDIA Corporation)
Task: {87981730-61A4-44F0-8AA1-B159DE2651A8} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Nenhum Arquivo <==== ATENÃÃO
Task: {8A766D1C-6100-4917-B637-11F99D1A9381} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {8CDECE0F-536C-4DD2-86A6-C4950FB5AAE6} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {9451357E-4378-40A5-8B99-297774E61602} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {959E8C92-3ED0-4910-AE12-059AD4A2FB0D} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {98297410-64E9-412A-B1D0-3A51DA4B8AA9} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {9961F253-E400-405E-B0BD-A6F903348C65} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-12-17] (Microsoft Corporation)
Task: {A23EA0B1-B5C5-4EEE-B343-ED116C8D2583} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A7BA5C7A-3E8C-46EF-8ECB-F8600F6EB008} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A7E36A2A-15C4-4BEF-A3A0-F1937DA8307F} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {A8E5422D-39C6-4658-BF74-B66524373193} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Nenhum Arquivo <==== ATENÃÃO
Task: {BDA3FC62-FC00-4413-A229-E8DD190DCEBE} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C34B3E49-AB2D-4FF1-9269-C3EEDD22021C} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Nenhum Arquivo <==== ATENÃÃO
Task: {C5741926-C9BB-4BAE-8D16-273B2798FEA5} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {D575E600-0BA3-4189-98CC-580B03ACA06D} - \Perducult Verfier -> Nenhum Arquivo <==== ATENÃÃO
Task: {D6CA8996-9068-4ECF-9F27-F9CD71929568} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-17] (NVIDIA Corporation)
Task: {DE7FF76B-7F31-48D0-BDFD-29950F1D1B28} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Nenhum Arquivo <==== ATENÃÃO
Task: {DEA15EC9-5939-4A01-BB19-496270EC20CC} - System32\Tasks\EPSON XP-211 214 216 Series Invitation {AA39FD3E-743B-4F2C-823E-2B6728ECDC4B} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE [2015-09-08] (SEIKO EPSON CORPORATION)
Task: {E4921C39-1003-4494-854B-5B3D53A250C0} - System32\Tasks\{27ABC386-BFF8-4D47-842F-3709A83566D6} => pcalua.exe -a "C:\Users\Invasion\Desktop\Office 2013\setup.exe" -d "C:\Users\Invasion\Desktop\Office 2013"
Task: {E4CA90F9-9248-44BF-BA17-D2B1A3E8AC06} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Nenhum Arquivo <==== ATENÃÃO
Task: {E4E5FE9E-7B7C-4101-843F-65460515968A} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {E75A7934-6843-44CA-926E-99E71E1FCA38} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {F0D82108-1DEC-48C5-82BF-1AA267D776CB} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {F29EACDD-4822-4DC4-ACD8-F30D4EEEE3CF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-05] (Google Inc.)
Task: {F4E231A1-E39A-4276-9427-E4086F5D61E4} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F4F8E4FA-C91F-4790-BA1A-1B8A34976B49} - System32\Tasks\AutoKMS => C:\WINDOWS\AutoKMS.exe
Task: {F734E3B4-885B-4FEA-BF2A-1C07D20F77C5} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {F8FFA6D2-7E70-4F30-906E-FFFC631AF07A} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Nenhum Arquivo <==== ATENÃÃO
Task: {FEDB059B-F10D-4922-BEE4-927DB8824BAF} - System32\Tasks\EPSON XP-211 214 216 Series Update {43648E16-6305-4360-9683-502EB170B5DB} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE [2015-09-08] (SEIKO EPSON CORPORATION)
(Se uma entrada for incluÃda na fixlist, o arquivo da tarefa (.job) será movido. O arquivo que está sendo executado pela tarefa não será movido.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\EPSON XP-211 214 216 Series Invitation {43648E16-6305-4360-9683-502EB170B5DB}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-211 214 216 Series Invitation {AA39FD3E-743B-4F2C-823E-2B6728ECDC4B}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-211 214 216 Series Invitation {B1C81A72-D0D0-4FD2-81DC-92AA0BB68EAE}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-211 214 216 Series Invitation {BC5F1E0D-592E-4BA7-9FB9-E315699D5FB3}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE
Task: C:\WINDOWS\Tasks\EPSON XP-211 214 216 Series Update {43648E16-6305-4360-9683-502EB170B5DB}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE :/EXE:{43648E16-6305-4360-9683-502EB170B5DB} /F:Update SISTEMA ÄSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON XP-211 214 216 Series Update {AA39FD3E-743B-4F2C-823E-2B6728ECDC4B}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE :/EXE:{AA39FD3E-743B-4F2C-823E-2B6728ECDC4B} /F:Update WORKGROUP\INVASION-PC$ ÄSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON XP-211 214 216 Series Update {B1C81A72-D0D0-4FD2-81DC-92AA0BB68EAE}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE :/EXE:{B1C81A72-D0D0-4FD2-81DC-92AA0BB68EAE} /F:Update WORKGROUP\INVASION-PC$ ÄSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON XP-211 214 216 Series Update {BC5F1E0D-592E-4BA7-9FB9-E315699D5FB3}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLDE.EXE :/EXE:{BC5F1E0D-592E-4BA7-9FB9-E315699D5FB3} /F:Update WORKGROUP\INVASION-PC$ ÄSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
==================== Atalhos =============================
(As entradas podem ser listadas para serem restauradas ou removidas.)
ShortcutWithArgument: C:\Users\Invasion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativos do Google Chrome\Google Play Filmes (1).lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1" --app-id=gdijeikdkaembjbdobgfkoidjkpbmlkd
ShortcutWithArgument: C:\Users\Invasion\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicativos do Google Chrome\Google Play Filmes.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=gdijeikdkaembjbdobgfkoidjkpbmlkd
ShortcutWithArgument: C:\Users\Invasion\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1"
ShortcutWithArgument: C:\Users\Invasion\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=ChromeDefaultData
==================== Módulos Carregados (Whitelisted) ==============
2016-08-12 22:58 - 2013-07-04 04:32 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
2016-06-15 23:29 - 2016-11-02 14:53 - 00076152 _____ () C:\WINDOWS\system32\PnkBstrA.exe
2016-10-01 14:43 - 2016-11-17 11:45 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-10-01 14:43 - 2016-11-17 11:45 - 04489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2016-10-01 14:43 - 2016-11-17 11:45 - 00418752 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\_nvspserviceplugin64.dll
2016-12-31 17:52 - 2016-12-14 15:05 - 00102912 _____ () C:\Program Files (x86)\WTFast\service\WTFast.Service.exe
2016-07-16 09:42 - 2016-07-16 09:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-12-17 10:52 - 2016-12-09 08:29 - 02681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-08-12 22:58 - 2016-10-25 18:17 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-12-17 10:52 - 2016-12-09 08:29 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-08-16 09:01 - 2015-04-13 16:07 - 00066048 _____ () C:\Program Files (x86)\LG Electronics\Screen Split\bin\ScreenSplitterHook64.dll
2016-12-17 10:52 - 2016-12-09 08:29 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-12-09 08:50 - 2016-12-09 08:50 - 01678560 _____ () C:\Users\Invasion\AppData\Local\Microsoft\OneDrive\17.3.6720.1207\amd64\ClientTelemetry.dll
2016-09-15 22:38 - 2016-09-07 02:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-12-17 10:52 - 2016-12-09 07:41 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-11-18 12:29 - 2016-11-02 08:21 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-11-18 12:29 - 2016-11-02 08:15 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-11-18 12:29 - 2016-11-02 08:14 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-11-18 12:29 - 2016-11-02 08:15 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-11-18 12:29 - 2016-11-02 08:16 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-11-18 12:29 - 2016-11-02 08:17 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-11-15 10:56 - 2016-09-22 10:05 - 19276288 _____ () C:\Program Files (x86)\Bloody6\Bloody6\Bloody6.exe
2016-11-23 05:38 - 2016-11-23 05:42 - 00019456 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2016-11-23 05:38 - 2016-11-23 05:42 - 20433408 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2016-06-03 08:32 - 2016-06-03 08:36 - 00680448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.DesignCore.dll
2016-11-23 05:38 - 2016-11-23 05:42 - 01046528 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Sharing.dll
2016-11-23 05:38 - 2016-11-23 05:42 - 00353792 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Photos.Inking.dll
2016-12-14 22:53 - 2016-12-15 06:03 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-12-14 22:53 - 2016-12-15 06:03 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-12-14 22:53 - 2016-12-15 06:03 - 42130432 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2016-12-14 22:53 - 2016-12-15 06:03 - 02216448 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\roottools.dll
2015-09-29 11:57 - 2015-09-29 11:57 - 02210480 _____ () C:\Program Files\Microsoft Office\Office15\tmpod.dll
2015-10-13 15:10 - 2015-10-13 15:10 - 01428648 _____ () C:\Program Files\Microsoft Office\Office15\ADDINS\UmOutlookAddin.dll
2016-12-13 14:18 - 2016-12-13 14:19 - 03810816 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1612.3341.0_x64__8wekyb3d8bbwe\Calculator.exe
2016-08-12 22:58 - 2016-12-31 10:11 - 00032912 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\PEbiosinterface32.dll
2016-08-12 22:58 - 2013-07-04 04:32 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\ATKEX.dll
2016-09-13 22:36 - 2016-10-06 08:28 - 02493440 _____ () C:\Program Files (x86)\Origin\libGLESv2.dll
2015-12-05 00:10 - 2013-09-16 02:19 - 01242584 ____R () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-12-05 10:07 - 2016-11-17 11:45 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-10-01 14:43 - 2016-11-17 11:45 - 03774400 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2016-10-01 14:43 - 2016-11-17 11:45 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-08-16 09:01 - 2015-04-13 16:07 - 00063488 _____ () C:\Program Files (x86)\LG Electronics\Screen Split\bin\ScreenSplitterHook.dll
2016-10-01 14:43 - 2016-11-17 08:20 - 00506424 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2016-10-01 14:43 - 2016-11-17 08:20 - 00252352 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2016-10-01 14:43 - 2016-11-17 08:20 - 02809912 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2016-10-01 14:43 - 2016-11-17 08:20 - 00245184 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2016-10-01 14:43 - 2016-11-17 08:20 - 00436792 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
2016-10-01 14:43 - 2016-11-17 08:20 - 00338488 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2016-10-01 14:43 - 2016-11-17 08:20 - 00968248 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node
2016-12-09 08:50 - 2016-12-09 08:50 - 01244376 _____ () C:\Users\Invasion\AppData\Local\Microsoft\OneDrive\17.3.6720.1207\ClientTelemetry.dll
2015-12-29 09:14 - 2016-12-08 13:13 - 00656160 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-12-29 09:14 - 2016-08-31 23:02 - 04969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-12-29 09:14 - 2016-12-20 00:25 - 02322720 _____ () C:\Program Files (x86)\Steam\video.dll
2015-12-29 09:14 - 2016-01-27 05:49 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2015-12-29 09:14 - 2016-01-27 05:49 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2015-12-29 09:14 - 2016-01-27 05:49 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2015-12-29 09:14 - 2016-01-27 05:49 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2015-12-29 09:14 - 2016-01-27 05:49 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2015-12-29 09:14 - 2016-08-31 23:02 - 01563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-12-29 09:14 - 2016-08-31 23:02 - 01195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2015-12-29 09:14 - 2016-12-20 00:25 - 00838944 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-03-09 22:39 - 2016-07-04 20:17 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2016-10-01 14:43 - 2016-11-17 11:44 - 60817344 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
2016-12-13 14:08 - 2016-12-05 14:21 - 67304736 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2015-12-29 09:14 - 2016-12-20 00:25 - 00388384 _____ () C:\Program Files (x86)\Steam\steam.dll
2015-12-29 09:14 - 2015-09-24 21:52 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
2016-08-16 09:01 - 2015-04-13 16:07 - 06296064 _____ () C:\Program Files (x86)\LG Electronics\Screen Split\bin\SoftwareAutoUpdates.dll
2016-08-16 09:01 - 2015-04-13 16:07 - 00005632 _____ () C:\Program Files (x86)\LG Electronics\Screen Split\bin\PorBraz.dll
2016-11-15 10:56 - 2013-10-11 10:43 - 00085504 _____ () C:\Program Files (x86)\Bloody6\Bloody6\DLL\DLL_ZoomControl.dll
2016-11-15 10:56 - 2016-05-26 16:28 - 04672512 _____ () C:\Program Files (x86)\Bloody6\Bloody6\Data\RES\Forms\Internet_Advertisement\Internet_Advertisement_DLL.dll
2015-03-24 18:01 - 2015-03-24 18:01 - 00192512 _____ () C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GvVGAConfig.dll
2016-11-26 23:19 - 2016-11-11 18:36 - 00035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
2016-11-26 23:19 - 2016-11-11 18:36 - 00100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
2016-11-26 23:19 - 2016-11-11 18:36 - 00018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00019760 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
2016-11-26 23:19 - 2016-11-11 18:36 - 00694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2016-11-26 23:19 - 2016-11-11 18:37 - 00123856 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 01682760 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00020808 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2016-12-22 06:07 - 2016-11-11 18:36 - 00145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
2016-12-22 06:07 - 2016-11-11 18:37 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd
2016-12-22 06:07 - 2016-11-11 18:36 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
2016-11-26 23:19 - 2016-11-11 18:38 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00021312 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00052024 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00038696 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
2016-12-22 06:07 - 2016-11-11 18:36 - 00392144 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
2016-12-22 06:07 - 2016-11-11 18:38 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
2016-11-26 23:19 - 2016-11-11 18:38 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
2016-11-26 23:19 - 2016-11-11 18:39 - 00116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00381752 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
2016-11-26 23:19 - 2016-11-11 18:38 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00025424 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
2016-11-26 23:19 - 2016-11-11 18:38 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
2016-11-26 23:19 - 2016-11-11 18:38 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
2016-11-26 23:19 - 2016-11-11 18:38 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
2016-11-26 23:19 - 2016-11-11 18:39 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
2016-11-26 23:19 - 2016-11-11 18:39 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
2016-11-26 23:19 - 2016-11-11 18:38 - 00057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
2016-11-26 23:19 - 2016-11-11 18:39 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00246592 _____ () C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
2016-11-26 23:19 - 2016-11-11 18:37 - 00241104 _____ () C:\Program Files (x86)\Dropbox\Client\_jpegtran.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00020280 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
2016-11-26 23:19 - 2016-11-11 18:39 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00023376 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi._winffi_iphlpapi.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00019776 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror._winffi_winerror.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet._winffi_wininet.pyd
2016-11-26 23:19 - 2016-11-11 18:39 - 00350152 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00022352 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00024392 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2016-12-22 06:07 - 2016-11-11 18:35 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2016-12-22 06:07 - 2016-12-21 16:26 - 00031568 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd
2016-12-22 06:07 - 2016-12-03 06:13 - 00293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll
2016-12-22 06:07 - 2016-12-21 16:26 - 00084280 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2016-12-22 06:07 - 2016-12-21 16:26 - 01826096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
2016-11-26 23:19 - 2016-11-11 18:37 - 00083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00531248 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 03928880 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 01972528 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00133424 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00224056 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00207672 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00020288 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32._winffi_user32.pyd
2016-12-22 06:07 - 2016-11-11 18:42 - 00017864 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.dll
2016-12-22 06:07 - 2016-11-11 18:42 - 01631184 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
2016-12-22 06:07 - 2016-12-21 16:26 - 00042808 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00171320 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00357680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00037192 _____ () C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd
2016-11-26 23:19 - 2016-12-21 16:26 - 00024904 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd
2016-11-26 23:19 - 2016-11-11 18:39 - 00060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
2016-12-22 06:07 - 2016-12-21 16:26 - 00546096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
2016-12-14 22:57 - 2016-12-08 05:29 - 01829208 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libglesv2.dll
2016-12-14 22:57 - 2016-12-08 05:29 - 00085848 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libegl.dll
2016-12-12 18:53 - 2016-12-12 18:53 - 17833560 _____ () C:\Users\Invasion\AppData\Local\Google\Chrome\User Data\PepperFlash\24.0.0.186\pepflashplayer.dll
==================== Alternate Data Streams (Whitelisted) =========
(Se uma entrada for incluÃda na fixlist, somente o ADS será removido.)
AlternateDataStreams: C:\Program Files (x86)\GbPlugin:IncompleteStartProcessProtection.cnt [10]
AlternateDataStreams: C:\Program Files (x86)\GbPlugin:u6eBQrM0Z2K3FKLVBMG8dY3IkKT2rqFO+Sf68h8fDg== [32]
AlternateDataStreams: C:\WINDOWS\System32:BE5044FD_Bb.gbp [2]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\gbpddfac64.sys:r0d3jo5 [20]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\gbpddfac64.sys:X5ZN8aGvT4 [2262]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\gbpddreg64.sys:X5ZN8aGvT4 [686]
AlternateDataStreams: C:\ProgramData\GbPlugin:IncompleteStartGbprcm.cnt [10]
AlternateDataStreams: C:\Users\Todos os Usuários\GbPlugin:IncompleteStartGbprcm.cnt [10]
==================== Modo de Segurança (Whitelisted) ===================
(Se uma entrada for incluÃda na fixlist, será removida do Registro. O valor "AlternateShell" será restaurado.)
==================== Associação (Whitelisted) ===============
(Se uma entrada for incluÃda na fixlist, o Ãtem no Registro será restaurado para o padrão ou removido.)
==================== Internet Explorer confiável/restrito ===============
(Se uma entrada for incluÃda na fixlist, será removida do Registro.)
IE trusted site: HKU\S-1-5-21-4038462754-2495381737-3900046349-1000\...\bancobrasil.com.br -> www.bancobrasil.com.br
IE trusted site: HKU\S-1-5-21-4038462754-2495381737-3900046349-1000\...\bb.com.br -> hxxps://seg.bb.com.br
==================== Hosts Conteúdo: ===============================
(Se necessário, a diretiva Hosts: pode ser incluÃda na fixlist para redefinir o Hosts.)
2009-07-14 00:34 - 2009-06-10 19:00 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts
==================== Outras Ãreas ============================
(Atualmente não há nenhuma correção automática para esta seção.)
HKU\S-1-5-21-4038462754-2495381737-3900046349-1000\Control Panel\Desktop\\Wallpaper -> c:\users\invasion\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\localstate\photosappbackground\{18a6b761-3791-45a0-bffe-30f5f23ae170}.jpg
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall do Windows está habilitado.
==================== MSCONFIG/TASK MANAGER Ãtens desabilitados ==
==================== Regras do Firewall (Whitelisted) ===============
(Se uma entrada for incluÃda na fixlist, será removida do Registro. O arquivo não será movido, a menos que seja colocado separadamente.)
FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [MSMQ-In-TCP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => LPort=808
FirewallRules: [UDP Query User{DBE8D4E1-DF98-43FA-AA82-0D01C41A286D}C:\users\invasion\appdata\local\temp\keygen.exe] => C:\users\invasion\appdata\local\temp\keygen.exe
FirewallRules: [TCP Query User{B4BDEC53-847C-4FEA-85A4-A9B6CFDDEF29}C:\users\invasion\appdata\local\temp\keygen.exe] => C:\users\invasion\appdata\local\temp\keygen.exe
FirewallRules: [UDP Query User{74AEF27B-65A3-46F2-8972-6685119D6583}C:\windows\keygen.exe] => C:\windows\keygen.exe
FirewallRules: [TCP Query User{856AE7AF-8E80-4442-A733-F45C02F74311}C:\windows\keygen.exe] => C:\windows\keygen.exe
FirewallRules: [{78691639-F181-475E-A914-40A3547CF714}] => C:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{F8EAE92C-6464-4598-8647-EFA39E8C7B6D}] => C:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{F4ACAA6E-7176-4357-90C2-1A4ED1E2D0D9}] => C:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{E9D8E933-FAE3-4B44-B816-327E5536AD64}] => C:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [UDP Query User{17D5FD48-47E4-43FE-9358-DFFAAD9E37FB}C:\program files (x86)\origin games\battlefield 4\bf4.exe] => C:\program files (x86)\origin games\battlefield 4\bf4.exe
FirewallRules: [TCP Query User{224D2156-E0AE-460A-B2BE-0A50F2B47B7F}C:\program files (x86)\origin games\battlefield 4\bf4.exe] => C:\program files (x86)\origin games\battlefield 4\bf4.exe
FirewallRules: [UDP Query User{0D5B8471-8150-490B-BB8D-5ED0E40664CC}C:\program files (x86)\origin games\battlefield 4\bf4.exe] => C:\program files (x86)\origin games\battlefield 4\bf4.exe
FirewallRules: [TCP Query User{EEDC8BB3-B018-4751-A327-10CD5D8DC90C}C:\program files (x86)\origin games\battlefield 4\bf4.exe] => C:\program files (x86)\origin games\battlefield 4\bf4.exe
FirewallRules: [{9F0272BC-1BD1-4AFF-A982-9D9A010826E4}] => C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{2015000B-D8BA-4070-B923-4A974ABB90BE}] => C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{E26D2815-3781-4895-BF2A-3A26DD115E37}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{97D21928-071F-4242-88B7-3494D9EC3BB6}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{1342EFC7-86A5-4722-A724-3D89CDC49171}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{598FB939-559D-4330-9398-1E90B3F700A4}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{19958722-88C2-48BB-9D8D-26B7B6B61EDE}] => C:\Program Files\Diebold\Warsaw\core.exe
FirewallRules: [UDP Query User{F41E4F3B-44A8-4B7B-A3A5-7D7FCF3034D4}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{C34E696E-CF87-46DD-9B1A-EFA8CB2077A3}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{6AEFCC19-4A53-428C-BD06-68794BC9C5CC}] => C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{2B888220-6B7F-4B61-A69C-5202428B95FF}] => C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{0708300D-7E11-4C79-9606-FB2E4451306D}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{CC844C12-BD3B-49EB-9617-4D132E24AE49}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{61ECE489-F570-4919-B40B-444E8A7EB7BC}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{FDDB54E0-E889-45FD-AF4F-4D55B005B491}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{0229B6DE-8F4C-47BC-8BD3-D8D633D829CE}] => D:\Common\EpsonNet Setup\ENEasyApp.exe
FirewallRules: [{41FFF511-6ABE-41A9-B208-ADAA7C33F89A}] => D:\Common\EpsonNet Setup\ENEasyApp.exe
FirewallRules: [{5F0F663E-0A67-4786-A1DD-977676DDE028}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{11C3543A-BC78-49E1-9878-73B8AEFF3562}] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
FirewallRules: [{A0C0911D-88FD-46B5-AA60-BF242F168A59}] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
FirewallRules: [{87C39288-33C5-48FE-A1D2-4B30181C59B0}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{F565F6C6-4F0D-4013-B627-0BCD0900476F}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{63E4CA69-519F-4AD2-928B-C5E250F54722}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{7F5FF9A9-B84C-4FBC-83E9-481E7739617B}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{85453C64-3BA3-47C6-9632-4223D78B7786}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [UDP Query User{E3A3D501-41E3-459D-8E85-493305DABC88}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [{574444F3-E9E8-491A-A924-18328DF9EBE3}] => C:\Users\Invasion\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{5F215949-A456-481D-9BD3-E4106FA54097}] => C:\Users\Invasion\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{2E510BCA-07DF-4E56-AE1F-EAD498CD4BB7}] => C:\Users\Invasion\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{3D422383-24A0-4FDF-A4EC-B83369E4A3C1}] => C:\Users\Invasion\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{C6942BCA-610C-45BE-A4C0-6CD797779B0F}] => C:\Users\Invasion\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{BB754231-239B-4AE3-AA93-606A7FC8B322}] => C:\Users\Invasion\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{122204C9-A299-491B-A5DF-7DE2DB40828F}] => C:\Users\Invasion\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{34D3D456-0525-4B6F-B8EF-7271FEA543FE}] => C:\Users\Invasion\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{E05AC2CD-45B6-4E5E-BF08-D6AF8E55F082}C:\level up\warface\2b3f2740-f442-489f-a2cb-8f7153924698\c4671e0070fc31ea2c40e9a15d0dbdb4\aria2c.exe] => C:\level up\warface\2b3f2740-f442-489f-a2cb-8f7153924698\c4671e0070fc31ea2c40e9a15d0dbdb4\aria2c.exe
FirewallRules: [UDP Query User{376549C9-C1D7-4031-A2EB-702EE5CD3E19}C:\level up\warface\2b3f2740-f442-489f-a2cb-8f7153924698\c4671e0070fc31ea2c40e9a15d0dbdb4\aria2c.exe] => C:\level up\warface\2b3f2740-f442-489f-a2cb-8f7153924698\c4671e0070fc31ea2c40e9a15d0dbdb4\aria2c.exe
FirewallRules: [TCP Query User{2DE23836-F3F7-47DA-B26B-1469FAFE4E2A}C:\users\invasion\appdata\roaming\spotify\spotify.exe] => C:\users\invasion\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{26C6BD79-C71C-4E27-9349-68664C6A7090}C:\users\invasion\appdata\roaming\spotify\spotify.exe] => C:\users\invasion\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{5008DA21-2C16-4468-844F-4C9450140498}C:\users\invasion\appdata\roaming\spotify\spotify.exe] => C:\users\invasion\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{87BBD973-FFD8-473C-A006-CFF4EB447637}C:\users\invasion\appdata\roaming\spotify\spotify.exe] => C:\users\invasion\appdata\roaming\spotify\spotify.exe
FirewallRules: [{A966BF23-CD7C-4188-9779-3E74B06DE78D}] => C:\Users\Invasion\AppData\Local\Temp\svchost.exe
FirewallRules: [{DC033EF3-55FD-4E05-8222-9B03F284ED72}] => C:\Users\Invasion\AppData\Local\Temp\svchost.exe
FirewallRules: [{055C9432-8E38-4562-AE09-07B8AD226048}] => C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F805DCC0-2F3C-49C5-9DC5-764D1B3DB9CC}] => C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{CE2998F3-AEA8-4771-8BFC-2B8D607FCEA5}] => C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{99E2013A-1633-44A7-BF50-7138E81A73CE}] => C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{5B2DEFA2-D4F6-4999-95ED-27B00FC36AA9}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [TCP Query User{A8EEA584-A9FE-43AF-AE67-D8E320CF347A}C:\level up\warface\2b3f2740-f442-489f-a2cb-8f7153924698\c4671e0070fc31ea2c40e9a15d0dbdb4\aria2c.exe] => C:\level up\warface\2b3f2740-f442-489f-a2cb-8f7153924698\c4671e0070fc31ea2c40e9a15d0dbdb4\aria2c.exe
FirewallRules: [UDP Query User{85D3A309-F420-4A3E-84C2-DBFA9F4824DE}C:\level up\warface\2b3f2740-f442-489f-a2cb-8f7153924698\c4671e0070fc31ea2c40e9a15d0dbdb4\aria2c.exe] => C:\level up\warface\2b3f2740-f442-489f-a2cb-8f7153924698\c4671e0070fc31ea2c40e9a15d0dbdb4\aria2c.exe
FirewallRules: [{96686FE1-AB41-4841-B0A0-B635AA069620}] => C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{C7221A41-0795-4AB8-A378-99CC537CF16F}] => C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{24D9D8EE-A699-4821-AC74-928C328A9B72}] => C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{799E5A0B-3726-41C5-BCA9-E97EFDFEA181}] => C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{00A2BDB3-9405-4862-B64C-9945AF5A201E}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{A151E6EE-4CED-4876-AC6C-979F7FC41049}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{C1F37712-1D82-4315-926C-1B5331E631C1}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{EC410D4C-2F99-46EB-BDE6-55FE69991665}] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [TCP Query User{288B3A93-C88C-4AAB-AE46-F311DC1EB191}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{BC703C8C-3173-49B3-984A-AA91E060EBA0}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{A0F1E8BF-74C0-4483-9AF5-B16F38D867C0}C:\windows\system32\rundll32.exe] => C:\windows\system32\rundll32.exe
FirewallRules: [UDP Query User{3C26993F-D6BD-4D8E-878A-0CBAC5C6A6D2}C:\windows\system32\rundll32.exe] => C:\windows\system32\rundll32.exe
FirewallRules: [{786575E5-F4F7-4161-8A09-089FD1357CC1}] => C:\Program Files (x86)\WTFast\WTFast.exe
FirewallRules: [{54C826A8-313E-497D-8394-88C26E87F0C2}] => %ProgramFiles% (x86)\WTFast\WTFast.exe
FirewallRules: [{B101AF33-D16C-45EB-8850-22F4351A2E7C}] => %ProgramFiles% (x86)\WTFast\WTFast.exe
FirewallRules: [{E208B18C-B249-4431-BE2C-766648A76485}] => %SystemDrive%\Level Up\Warface\Bin32Release\Game.exe
FirewallRules: [{1743A2DE-D9CF-4C12-9455-46F1FA2A8DA8}] => %SystemDrive%\Level Up\Warface\Bin32Release\Game.exe
FirewallRules: [{92E7762A-8CEE-4CB6-88E6-6C5A36C704EC}] => %SystemDrive%\Level Up\Warface\Bin32Release\Game.exe
FirewallRules: [{5837B30D-7B20-48A1-A815-7D2E4895C5B4}] => %SystemDrive%\Level Up\Warface\Bin32Release\Game.exe
FirewallRules: [{A9EC4454-D1F9-4C7B-B181-C8DECE8F7568}] => C:\Program Files\KMSpico\KMSELDI.exe
FirewallRules: [{331767F7-BC26-4F03-876C-10E13DB5316F}] => C:\Program Files\KMSpico\KMSELDI.exe
FirewallRules: [{2A714756-016E-4552-BD43-6DD2451240E9}] => C:\Program Files\KMSpico\AutoPico.exe
FirewallRules: [{CB0689E8-F6B6-48DE-93BF-1B8ED95E4602}] => C:\Program Files\KMSpico\AutoPico.exe
==================== Pontos de Restauração =========================
26-12-2016 13:53:17 Ponto de Verificação Agendado
==================== Dispositivos Apresentando Falhas No Gerenciador =============
==================== Erros no Log de eventos: =========================
Erros em Aplicativos:
==================
Error: (01/01/2017 06:24:54 PM) (Source: MsiInstaller) (EventID: 1002) (User: Invasion-PC)
Description: Valor inesperado ou ausente (nome: 'PackageName', valor: '') na chave 'HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList'
Error: (01/01/2017 06:22:50 PM) (Source: MsiInstaller) (EventID: 1002) (User: Invasion-PC)
Description: Valor inesperado ou ausente (nome: 'PackageName', valor: '') na chave 'HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList'
Error: (01/01/2017 10:56:03 AM) (Source: MsiInstaller) (EventID: 1002) (User: Invasion-PC)
Description: Valor inesperado ou ausente (nome: 'PackageName', valor: '') na chave 'HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList'
Error: (12/31/2016 09:22:10 PM) (Source: MsiInstaller) (EventID: 1002) (User: Invasion-PC)
Description: Valor inesperado ou ausente (nome: 'PackageName', valor: '') na chave 'HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList'
Error: (12/31/2016 08:18:08 PM) (Source: MsiInstaller) (EventID: 1002) (User: Invasion-PC)
Description: Valor inesperado ou ausente (nome: 'PackageName', valor: '') na chave 'HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList'
Error: (12/31/2016 08:09:11 PM) (Source: MsiInstaller) (EventID: 1002) (User: Invasion-PC)
Description: Valor inesperado ou ausente (nome: 'PackageName', valor: '') na chave 'HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList'
Error: (12/31/2016 07:56:23 PM) (Source: MsiInstaller) (EventID: 1002) (User: Invasion-PC)
Description: Valor inesperado ou ausente (nome: 'PackageName', valor: '') na chave 'HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList'
Error: (12/31/2016 07:51:32 PM) (Source: MsiInstaller) (EventID: 1002) (User: Invasion-PC)
Description: Valor inesperado ou ausente (nome: 'PackageName', valor: '') na chave 'HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList'
Error: (12/31/2016 07:50:34 PM) (Source: MsiInstaller) (EventID: 1002) (User: Invasion-PC)
Description: Valor inesperado ou ausente (nome: 'PackageName', valor: '') na chave 'HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList'
Error: (12/31/2016 07:48:54 PM) (Source: MsiInstaller) (EventID: 1002) (User: Invasion-PC)
Description: Valor inesperado ou ausente (nome: 'PackageName', valor: '') na chave 'HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList'
Erros de Sistema:
=============
Error: (01/02/2017 09:28:53 AM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão especÃfico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
e APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
ao usuário AUTORIDADE NT\SISTEMA SID (S-1-5-18) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não DisponÃvel SID (Não DisponÃvel). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (01/01/2017 10:43:43 AM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão especÃfico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
e APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
ao usuário AUTORIDADE NT\SISTEMA SID (S-1-5-18) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não DisponÃvel SID (Não DisponÃvel). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (01/01/2017 10:43:43 AM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: AUTORIDADE NT)
Description: 0x8000002a66\??\C:\Users\Invasion\AppData\Local\Microsoft\Windows\UsrClass.dat
Error: (12/31/2016 10:11:48 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possÃvel iniciar o serviço Warsaw File Access svc devido ao seguinte erro:
O driver não foi carregado porque houve falha na chamada de inicialização.
Error: (12/31/2016 10:11:48 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possÃvel iniciar o serviço Warsaw File Access svc devido ao seguinte erro:
O driver não foi carregado porque houve falha na chamada de inicialização.
Error: (12/31/2016 10:11:26 AM) (Source: DCOM) (EventID: 10016) (User: AUTORIDADE NT)
Description: As configurações de permissão especÃfico do aplicativo não concedem permissão Local Ativação para o aplicativo de Servidor COM com CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
e APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
ao usuário AUTORIDADE NT\SISTEMA SID (S-1-5-18) do endereço LocalHost (Usando LRPC) que está sendo executado no contêiner de aplicativos Não DisponÃvel SID (Não DisponÃvel). Essa permissão de segurança pode ser modificada com a ferramenta administrativa Serviços de Componentes.
Error: (12/31/2016 10:11:26 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possÃvel iniciar o serviço Warsaw File Access svc devido ao seguinte erro:
O driver não foi carregado porque houve falha na chamada de inicialização.
Error: (12/31/2016 10:11:17 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: O serviço NetTcpActivator depende do serviço NetTcpPortSharing, mas não foi possÃvel iniciá-lo devido ao seguinte erro:
O serviço não pode ser iniciado porque está desativado ou não tem dispositivos ativados associados.
Error: (12/31/2016 10:11:15 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: O desligamento do sistema que ocorreu à s 23:52:17 do dia â30/â12/â2016 não era esperado.
Error: (12/31/2016 10:11:08 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: AUTORIDADE NT)
Description: 32212256845915853595149280
CodeIntegrity:
===================================
Date: 2016-12-31 11:36:52.977
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-12-30 22:42:39.351
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-12-26 10:04:56.519
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-12-25 12:56:42.989
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-12-21 22:09:00.469
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
Date: 2016-12-21 05:48:52.257
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-12-18 10:17:52.376
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-12-17 11:41:19.610
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.stdformat.dll that did not meet the Microsoft signing level requirements.
Date: 2016-12-17 11:41:19.590
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\adodb.dll that did not meet the Microsoft signing level requirements.
Date: 2016-12-17 11:41:19.572
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\msdatasrc.dll that did not meet the Microsoft signing level requirements.
==================== Informações da Memória ===========================
Processador: Intel(R) Core(TM) i5-4690 CPU @ 3.50GHz
Percentagem de memória em uso: 36%
RAM física total: 12193.54 MB
RAM física disponível: 7783.94 MB
Virtual Total: 24481.54 MB
Virtual disponível: 19112.86 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:223.03 GB) (Free:16.81 GB) NTFS
Drive e: (Reservado pelo Sistema) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[sistema com componentes de inicialização (obtido através de drive)]
Drive f: () (Fixed) (Total:465.66 GB) (Free:427.19 GB) NTFS
==================== MBR & Tabela de Partições ==================
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 223.6 GB) (Disk ID: 447A0B4B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=223 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
==================== Fim de Addition.txt ============================