Publicité
Publicité
Format du document : text/plain
Prévisualisation
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-01-2017
Ran by Cloud (09-01-2017 04:03:43)
Running from C:\Users\Cloud\Downloads
Windows 7 Ultimate Service Pack 1 (X64) (2016-12-03 05:50:08)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-3076387224-3557301491-2673967665-500 - Administrator - Disabled)
Cloud (S-1-5-21-3076387224-3557301491-2673967665-1000 - Administrator - Enabled) => C:\Users\Cloud
Guest (S-1-5-21-3076387224-3557301491-2673967665-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3076387224-3557301491-2673967665-1002 - Limited - Enabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-3076387224-3557301491-2673967665-1000\...\uTorrent) (Version: 3.4.9.43085 - BitTorrent Inc.)
Adobe Flash Player 23 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Ansel (Version: 376.33 - NVIDIA Corporation) Hidden
Antares Autotune Evo VST RTAS v6.0.9 (HKLM-x32\...\Antares Autotune Evo VST RTAS_is1) (Version: - )
Atualizações da NVIDIA 23.1.0.0 (Version: 23.1.0.0 - NVIDIA Corporation) Hidden
Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 4.0.69.0 - Autodesk)
Autodesk SketchBook Pro 2016 (HKLM\...\Autodesk SketchBook Pro 2016) (Version: 7.2.0.0 - Autodesk)
Autodesk SketchBook Pro 2016 (Version: 7.2.0.0 - Autodesk) Hidden
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.70.1080 - AB Team, d.o.o.)
Driver Booster 4.0 (HKLM-x32\...\Driver Booster_is1) (Version: 4.0.3 - IObit)
FireStorm version V1.0.45.000 (HKLM-x32\...\FireStorm_is1) (Version: V1.0.45.000 - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Grand Theft Auto V (HKLM\...\Steam App 271590) (Version: - Rockstar North)
H1Z1: King of the Kill (HKLM\...\Steam App 433850) (Version: - Daybreak Game Company)
HiPatch (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000}) (Version: 5.0.7.7 - Hi-Rez Studios)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
Infestation: The New Z (HKLM\...\Steam App 555570) (Version: - Fredaikis AB)
Java 8 Update 111 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
Killing Floor 2 (HKLM\...\Steam App 232090) (Version: - Tripwire Interactive)
LADSPA_plugins-win-0.4.15 (HKLM-x32\...\LADSPA_plugins-win_is1) (Version: - Audacity Team)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.541 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.541 - LogMeIn, Inc.) Hidden
Manticore Gaming Keyboard (HKLM-x32\...\{0DAEFA4F-E394-4D1F-8F1A-6A2180561290}}_is1) (Version: - )
Mesa Gráfica Wacom (HKLM\...\Wacom Tablet Driver) (Version: 6.3.8-6 - Wacom Technology Corp.)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (Português do Brasil) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1046) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM-x32\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
Middle-earth: Shadow of Mordor (HKLM\...\Steam App 241930) (Version: - Monolith Productions, Inc.)
Mozilla Firefox 50.1.0 (x86 pt-BR) (HKLM-x32\...\Mozilla Firefox 50.1.0 (x86 pt-BR)) (Version: 50.1.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.1.0.6186 - Mozilla)
NetLimiter 3 (HKLM-x32\...\NetLimiter 3 3.0.0.11) (Version: 3.0.0.11 - Locktime Software)
NetLimiter 3 (Version: 3.0.0.11 - Locktime Software) Hidden
NVIDIA Driver de áudio HD 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA Driver de controle do 3D Vision 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA Driver de gráficos 376.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.33 - NVIDIA Corporation)
NVIDIA Driver do 3D Vision 376.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 376.33 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.2.0.96 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.2.0.96 - NVIDIA Corporation)
NVIDIA Software do sistema PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (Version: 3.2.0.96 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 2.0.0.0 - NVIDIA Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 10.3.3.1921 - Electronic Arts, Inc.)
Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
Painel de controle da NVIDIA 376.33 (Version: 376.33 - NVIDIA Corporation) Hidden
paint.net (HKLM\...\{6AC1101E-7561-43C9-BEEA-4AB1D220D8FF}) (Version: 4.0.13 - dotPDN LLC)
Planet Explorers (HKLM\...\Steam App 237870) (Version: - Pathea Games)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.49.927.2011 - Realtek)
Realtek Ethernet Diagnostic Utility (HKLM-x32\...\{DADC7AB0-E554-4705-9F6A-83EA82ED708E}) (Version: 1.00.0000 - Realtek)
Remote Mouse version 3.002 (HKLM-x32\...\{01E4BC6D-3ACC-45E1-8928-C2FF626F63F3}_is1) (Version: 3.002 - Remote Mouse)
Revisores de Texto do Microsoft Office 2013 – Português do Brasil (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Rocket League (HKLM\...\Steam App 252950) (Version: - Psyonix, Inc.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.1.0 - Rockstar Games)
SafeZone Stable 1.51.2220.62 (x32 Version: 1.51.2220.62 - Avast Software) Hidden
Save Jesus (HKLM\...\Steam App 509220) (Version: - Almighty Games)
SHIELD Streaming (Version: 7.1.0350 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.2.0.96 - NVIDIA Corporation) Hidden
Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)
SMITE (HKLM\...\Steam App 386360) (Version: - Hi-Rez Studios)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
The Elder Scrolls V: Skyrim Special Edition (HKLM\...\Steam App 489830) (Version: - Bethesda Game Studios)
Uplay (HKLM-x32\...\Uplay) (Version: 26.0 - Ubisoft)
Vegas Pro 13.0 (64-bit) (HKLM\...\{1EEE0BEE-0BC8-11E5-A19E-F04DA23A5C58}) (Version: 13.0.453 - Sony)
VST Bridge 1.1 (HKLM-x32\...\VST Bridge_is1) (Version: - )
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Warframe (HKLM\...\Steam App 230410) (Version: - Digital Extremes)
WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
WinRAR 5.40 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {12554779-A7DC-4943-AD1A-AD1D6C3F3A4A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-12-03] (Adobe Systems Incorporated)
Task: {1A9C5112-7DA8-403F-BE11-BDD401AA3A6F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {1BA1FD1B-0B38-4591-AD0B-84D3AFF35A6F} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-12-12] (NVIDIA Corporation)
Task: {1BC40A13-D3EE-49B1-85D2-6D6B694F09DD} - System32\Tasks\Driver Booster SkipUAC (Cloud) => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\DriverBooster.exe [2016-09-22] (IObit)
Task: {2B11CB94-F714-4F82-84C9-328B34381D42} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-12-03] (AVAST Software)
Task: {2BFEC462-38EE-445E-88F1-641AD2F40680} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-12-03] (Google Inc.)
Task: {2E616055-7EFF-425F-A56E-9F4A369EA312} - System32\Tasks\Driver Booster Scheduler => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\Scheduler.exe [2016-09-20] (IObit)
Task: {373ABECE-0B25-4CA7-A6E4-FA53BD2BC2A5} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-12-12] (NVIDIA Corporation)
Task: {54664EC6-D9CB-4BBD-8935-C115B480B115} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-12-03] (AVAST Software)
Task: {559E4B7A-EE25-4C8A-809C-AD3CD92D55F7} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-12-12] (NVIDIA Corporation)
Task: {55B5590C-9EAC-4AD8-80D4-75B7161AA3E2} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-12-12] (NVIDIA Corporation)
Task: {579D5D8C-504E-4716-9F27-1F5A4B710F96} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-12-12] (NVIDIA Corporation)
Task: {78F9930F-E597-4CDB-8D81-FB1D5E79C57F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-12-03] (Google Inc.)
Task: {B0E048B8-E33E-409E-BED7-6016FE58ADA3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {CE425FF0-5F49-4FC5-B0F5-ADC6500C2F0A} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2016-12-12] (NVIDIA Corporation)
Task: {E0A551DC-CD0C-4613-9543-CD60F1485B7B} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-12-12] (NVIDIA Corporation)
Task: {E6AFAC03-46C8-4F8C-A6FE-F7F2E4FE7197} - System32\Tasks\SafeZone scheduled Autoupdate 1480746512 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-09-06] (Avast Software)
Task: {F19FBA18-228B-428F-A490-C25C7C910D01} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2016-12-03 05:06 - 2016-12-12 21:35 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-12-03 05:06 - 2016-12-12 21:36 - 04489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2016-12-03 03:58 - 2016-12-11 16:47 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2017-01-04 05:49 - 2016-06-25 08:52 - 00018432 _____ () C:\Program Files (x86)\Remote Mouse\RemoteMouseService.exe
2017-01-03 18:48 - 2014-05-21 14:14 - 01356568 ____N () C:\Program Files\Tablet\Wacom\libxml2.dll
2016-12-14 23:09 - 2016-12-08 06:03 - 02412888 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libglesv2.dll
2016-12-14 23:09 - 2016-12-08 06:03 - 00099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libegl.dll
2016-12-03 04:27 - 2016-12-03 04:27 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-01-08 14:59 - 2017-01-08 14:59 - 03138056 _____ () C:\Program Files\AVAST Software\Avast\defs\17010801\algo.dll
2016-12-03 04:27 - 2016-12-03 04:27 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2017-01-03 19:07 - 2014-12-05 00:27 - 00055688 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\QtSolutions_Service-head.dll
2017-01-03 19:07 - 2014-12-05 00:27 - 00104328 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\qjson0.dll
2016-12-03 05:06 - 2016-12-12 21:35 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-12-03 05:06 - 2016-12-12 21:35 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-12-03 05:06 - 2016-12-12 21:35 - 03774400 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2016-12-03 04:27 - 2016-12-03 04:27 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-12-03 17:15 - 2013-01-15 17:06 - 00061952 _____ () C:\Program Files (x86)\Genius\Manticore\HidDevice.dll
2016-12-03 17:15 - 2011-10-11 17:32 - 00054784 _____ () C:\Program Files (x86)\Genius\Manticore\KBHook1.dll
2016-12-03 05:07 - 2016-12-12 21:33 - 64245184 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
2016-12-03 05:25 - 2016-12-08 13:13 - 00656160 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2016-12-03 05:25 - 2016-08-31 23:02 - 04969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2016-12-03 05:25 - 2016-08-31 23:02 - 01563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2016-12-03 05:25 - 2016-08-31 23:02 - 01195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2016-12-03 05:25 - 2016-12-20 00:25 - 02322720 _____ () C:\Program Files (x86)\Steam\video.dll
2016-12-03 05:25 - 2016-01-27 05:49 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2016-12-03 05:25 - 2016-01-27 05:49 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2016-12-03 05:25 - 2016-01-27 05:49 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2016-12-03 05:25 - 2016-01-27 05:49 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2016-12-03 05:25 - 2016-01-27 05:49 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2016-12-03 05:25 - 2016-12-20 00:25 - 00838944 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-12-03 05:25 - 2016-07-04 20:17 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2016-12-03 05:07 - 2016-12-12 12:36 - 00525760 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2016-12-03 05:07 - 2016-12-12 12:36 - 00254008 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2016-12-03 05:07 - 2016-12-12 12:36 - 02808888 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2016-12-03 05:07 - 2016-12-12 12:36 - 00384568 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2016-12-03 05:07 - 2016-12-12 12:36 - 00447424 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
2016-12-03 05:07 - 2016-12-12 12:36 - 00336832 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2016-12-03 05:07 - 2016-12-12 12:36 - 01003456 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node
2016-12-23 17:16 - 2016-12-12 12:36 - 00956472 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSDKAPINode.node
2016-12-12 18:52 - 2016-12-05 14:21 - 67304736 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2016-12-03 05:25 - 2016-12-20 00:25 - 00388384 _____ () C:\Program Files (x86)\Steam\steam.dll
2016-12-03 05:25 - 2015-09-24 21:52 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\Cloud\Documents\Tales of Heroes previa.mp3:com.dropbox.attributes [168]
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 00:34 - 2009-06-10 19:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-3076387224-3557301491-2673967665-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Cloud\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.108
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SketchBook Snapshot.lnk => C:\Windows\pss\SketchBook Snapshot.lnk.CommonStartup
MSCONFIG\startupreg: ADSKAppManager => "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
MSCONFIG\startupreg: EADM => "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: NetLimiter => C:\Program Files\NetLimiter 3\NLClientApp.exe /tray
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{44651DA7-D12A-48A2-9A2B-9D6E5C1D2CD4}] => C:\Users\Cloud\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{350122CD-73BF-49C1-92CC-A4501EF94223}] => C:\Users\Cloud\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{64A9629A-0B6B-47A6-BE0F-52F947B6CFBC}] => C:\Users\Cloud\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{5DCC6BCC-D1A8-40FC-9CD2-8C4A3A6E6163}] => C:\Users\Cloud\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{5D3FD756-DC36-4E36-81DA-E908F503A56D}] => C:\Users\Cloud\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{780E9CD9-D13B-4649-A156-9563C566CED0}] => C:\Users\Cloud\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{370D981D-938C-4BE1-BE3F-C63A718F5994}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{59CC1408-CD61-445E-BE7D-69235752DAD8}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B25AEDB7-1E3F-43D1-86F7-479C39124ED7}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{5A19243A-6F3C-4E1D-ADC3-1716824AAF0F}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{15A51D92-8972-49D9-B60F-95917030A363}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{AB6C15B3-3DA2-488F-98BB-16FD403C37F6}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{9198E11A-88EF-4A3C-8C79-C989833D12C5}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{92B0878F-A2DE-4449-8307-026BED957E88}] => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\DriverBooster.exe
FirewallRules: [{D32EA287-23A6-4D66-AB4E-A8DED65C0860}] => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\DriverBooster.exe
FirewallRules: [{0B5414A6-7A79-410D-B2FC-1447ABAB9535}] => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\DBDownloader.exe
FirewallRules: [{A0B873EE-40CE-41BA-9D87-286AD7E74268}] => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\DBDownloader.exe
FirewallRules: [{175D5D22-E69C-4018-8F6C-14C1B6E79FD0}] => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\AutoUpdate.exe
FirewallRules: [{3A072A7A-6AF4-4830-9386-6A9778957111}] => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\AutoUpdate.exe
FirewallRules: [{6C62EBEC-5B9A-4751-AE01-598FB53D7CF0}] => C:\Program Files (x86)\Steam\steamapps\common\Skyrim Special Edition\SkyrimSELauncher.exe
FirewallRules: [{406A009D-153D-4C50-B449-6979E2A6424B}] => C:\Program Files (x86)\Steam\steamapps\common\Skyrim Special Edition\SkyrimSELauncher.exe
FirewallRules: [{35A9BC2C-51C3-4F56-A3D3-6E496CBD1D8E}] => C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{4568FAC5-A57C-42E9-A79A-E91913813D7F}] => C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{984F5189-1C35-44CC-AA83-57FAB870B36E}] => C:\Program Files (x86)\Steam\steamapps\common\SMITE\Binaries\Win32\HirezBridge.exe
FirewallRules: [{86D8FACF-B82C-4F57-9C05-77CEA3C937DD}] => C:\Program Files (x86)\Steam\steamapps\common\SMITE\Binaries\Win32\HirezBridge.exe
FirewallRules: [{0462B27B-030C-4F7E-B52B-D6A58AF71C4F}] => C:\Program Files (x86)\Steam\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe
FirewallRules: [{E85C6919-619C-428F-8707-B76B964DE28D}] => C:\Program Files (x86)\Steam\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe
FirewallRules: [{FC2784E2-6FF5-4D14-9FF7-612A3AAD81D1}] => C:\Program Files (x86)\Steam\steamapps\common\NewZ\NewZLauncher.exe
FirewallRules: [{C6CB8EA1-9615-4085-980A-AD9BF79A950A}] => C:\Program Files (x86)\Steam\steamapps\common\NewZ\NewZLauncher.exe
FirewallRules: [{A91939B8-EEF3-43D9-8409-DF474CCE604E}] => C:\Program Files\KMSpico\KMSELDI.exe
FirewallRules: [{70529458-D98A-4A4F-A1A5-55FE5E53ED85}] => C:\Program Files\KMSpico\KMSELDI.exe
FirewallRules: [{B2C6CFC0-3C83-4D6C-93B4-DDED4CDB6C45}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{A77B1349-69A7-4D33-A96C-DA9F647C1EC5}C:\program files (x86)\steam\steamapps\common\newz\thenewz.exe] => C:\program files (x86)\steam\steamapps\common\newz\thenewz.exe
FirewallRules: [UDP Query User{5BDD78EB-0725-4F8F-B068-BA42838E6354}C:\program files (x86)\steam\steamapps\common\newz\thenewz.exe] => C:\program files (x86)\steam\steamapps\common\newz\thenewz.exe
FirewallRules: [TCP Query User{8496AE6D-7F88-49B5-94DB-D55CC3A6D187}C:\program files (x86)\steam\steamapps\common\smite\binaries\win32\smite.exe] => C:\program files (x86)\steam\steamapps\common\smite\binaries\win32\smite.exe
FirewallRules: [UDP Query User{612086E5-42C2-4ECF-ACF7-AD529EDA9F53}C:\program files (x86)\steam\steamapps\common\smite\binaries\win32\smite.exe] => C:\program files (x86)\steam\steamapps\common\smite\binaries\win32\smite.exe
FirewallRules: [TCP Query User{9D49C7A9-436F-4326-91C4-42293F760504}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{0C90E317-34A5-402A-9AD6-C268AF520BE6}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{041DAA36-E74D-4A43-B370-A2849B2BC6A4}] => C:\Program Files (x86)\Steam\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{F61DC231-0973-4092-BE7E-4E1BE7C9020C}] => C:\Program Files (x86)\Steam\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [TCP Query User{96E46980-2085-4D52-958A-5A270751C20D}C:\program files (x86)\overwatch\overwatch.exe] => C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [UDP Query User{E309731D-C99E-4B08-A77B-C014514B3D92}C:\program files (x86)\overwatch\overwatch.exe] => C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [{6E41A105-A3F0-4154-BFE2-F2890473E0BD}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{9DD54D92-D7B2-4455-BCB8-0C1153FF1F22}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{11F9D83B-5961-4FDB-B10D-7CE50F1FD8E1}C:\users\cloud\appdata\local\shatteredskies\launcher.exe] => C:\users\cloud\appdata\local\shatteredskies\launcher.exe
FirewallRules: [UDP Query User{DFE612AE-86F7-46F0-A3A4-844CFE3A3F9A}C:\users\cloud\appdata\local\shatteredskies\launcher.exe] => C:\users\cloud\appdata\local\shatteredskies\launcher.exe
FirewallRules: [TCP Query User{EFC72C16-7A05-4B85-971A-70AD97443EF0}C:\users\cloud\appdata\local\shatteredskies\launcher.exe.new.exe] => C:\users\cloud\appdata\local\shatteredskies\launcher.exe.new.exe
FirewallRules: [UDP Query User{DB63F070-15CA-46EC-8CDB-795C70E8B342}C:\users\cloud\appdata\local\shatteredskies\launcher.exe.new.exe] => C:\users\cloud\appdata\local\shatteredskies\launcher.exe.new.exe
FirewallRules: [{F75606D3-5002-4105-A7FF-12A8DE4D7148}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{35DF1B05-DC31-46D3-836B-FD23FDDCC783}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{67DCBAC7-5E98-4B4D-8F0D-ACD50F1E0EC8}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{7B73A922-B09A-4AC6-9ED6-1273FB0FC700}] => C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{F06F3FF5-3877-4D67-A63A-67FD0A7280DF}] => C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [TCP Query User{F7168BB5-55B2-4284-A27D-FDC345A0C6BF}C:\program files (x86)\heroes of the storm\versions\base49008\heroesofthestorm_x64.exe] => C:\program files (x86)\heroes of the storm\versions\base49008\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{4D0484E6-334B-44DC-B0D8-59A975A7483E}C:\program files (x86)\heroes of the storm\versions\base49008\heroesofthestorm_x64.exe] => C:\program files (x86)\heroes of the storm\versions\base49008\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{B7184E3D-19F9-4F2B-87E3-CD9B84F05226}C:\program files\java\jre1.8.0_111\bin\javaw.exe] => C:\program files\java\jre1.8.0_111\bin\javaw.exe
FirewallRules: [UDP Query User{5E02908D-42EA-435F-833F-2C8585729E90}C:\program files\java\jre1.8.0_111\bin\javaw.exe] => C:\program files\java\jre1.8.0_111\bin\javaw.exe
FirewallRules: [{E38F373D-86DC-42A0-8559-DC87DFE6539B}] => C:\Program Files (x86)\Steam\steamapps\common\Planet Explorers\PE_Launcher.exe
FirewallRules: [{71594FA0-70E8-4F6C-9838-DB24F83159C8}] => C:\Program Files (x86)\Steam\steamapps\common\Planet Explorers\PE_Launcher.exe
FirewallRules: [{BAD95342-DD61-4CFB-A605-A72F4CB44C97}] => C:\Program Files (x86)\Steam\steamapps\common\Save Jesus\Save Jesus.exe
FirewallRules: [{F1E086C8-B41E-46C0-B1DF-EDCABD286183}] => C:\Program Files (x86)\Steam\steamapps\common\Save Jesus\Save Jesus.exe
FirewallRules: [TCP Query User{9612048A-8030-4732-91FF-18881935D1FC}C:\program files (x86)\steam\steamapps\common\planet explorers\pe_client.exe] => C:\program files (x86)\steam\steamapps\common\planet explorers\pe_client.exe
FirewallRules: [UDP Query User{1AB9AFEF-19E2-4A70-8B61-1BA5DA33E34A}C:\program files (x86)\steam\steamapps\common\planet explorers\pe_client.exe] => C:\program files (x86)\steam\steamapps\common\planet explorers\pe_client.exe
FirewallRules: [TCP Query User{24299A14-0BFB-4858-AB55-ED2CA4B16A9C}C:\program files\java\jre1.8.0_111\bin\java.exe] => C:\program files\java\jre1.8.0_111\bin\java.exe
FirewallRules: [UDP Query User{9BD8960B-26C0-4989-BE40-075E44445F97}C:\program files\java\jre1.8.0_111\bin\java.exe] => C:\program files\java\jre1.8.0_111\bin\java.exe
FirewallRules: [{EBE378EC-F741-4420-8AEA-E606108347AB}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{82B236F2-631C-49C0-878A-D062499F8593}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{BC6B906C-36DF-404E-B43D-4B32F4057D2A}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{0EA4725C-0243-490D-AAAC-1A6C31B71823}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{71AF9E00-6274-4DC6-AE01-C0BD9E3B0293}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{BE40A3AE-D441-434B-BFDC-B6E74267CC02}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{49DD9D99-0101-4910-9306-947583D529DE}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{97D7622E-ED8A-4068-A319-03A7D6ECBF1B}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{3709E81A-4E72-44AB-924B-45E370987944}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{71785651-1516-46B1-A803-F2E11F87EEDD}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{EB22B093-7CB1-4337-BCCB-9008A337933A}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{3C4DAC27-FED1-4029-9259-0ACFD47CEC9B}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{28649368-4E47-4A77-84A3-24C62A4E969D}] => C:\Program Files\Autodesk\Autodesk SketchBook Pro 2016\SketchBookPro.exe
FirewallRules: [{ED451CF6-B9B7-4717-A682-2C2BFD47C418}] => C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe
FirewallRules: [{668933CC-7F2D-482D-8C96-5459EB175485}] => C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe
FirewallRules: [{1D6F10DC-704F-40DA-8F72-5682B92B5E69}] => C:\Program Files (x86)\Remote Mouse\RemoteMouseCore.exe
FirewallRules: [{325E42A6-92BB-42D0-AB53-D7D8F17389E8}] => C:\Program Files (x86)\Remote Mouse\RemoteMouseCore.exe
FirewallRules: [{8F29E040-D3D7-4DD0-8B9E-18B25A188E22}] => C:\Program Files (x86)\Steam\steamapps\common\H1Z1 King of the Kill\LaunchPad.exe
FirewallRules: [{36880145-B3E8-4258-A6F8-27CF21585D55}] => C:\Program Files (x86)\Steam\steamapps\common\H1Z1 King of the Kill\LaunchPad.exe
==================== Restore Points =========================
07-01-2017 23:35:57 Removed LogMeIn Hamachi
07-01-2017 23:39:10 Installed LogMeIn Hamachi
07-01-2017 23:44:40 Removed LogMeIn Hamachi
07-01-2017 23:52:27 Installed LogMeIn Hamachi
09-01-2017 03:10:28 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210
09-01-2017 03:20:28 Windows Update
09-01-2017 03:22:44 Windows Update
09-01-2017 03:24:26 Windows Update
09-01-2017 03:28:24 Windows Update
==================== Faulty Device Manager Devices =============
Name: Controlador de comunicação PCI simples
Description: Controlador de comunicação PCI simples
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (01/09/2017 03:59:05 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa explorer.exe versão 6.1.7601.17514 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.
ID de Processo: 15e4
Hora de Início: 01d26a3b6861d700
Hora de Término: 0
Caminho do Aplicativo: C:\Windows\explorer.exe
Id do Relatório:
Error: (01/09/2017 03:37:09 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (01/08/2017 03:10:48 PM) (Source: WTabletServicePro) (EventID: 1) (User: )
Description: Event-ID 1
Error: (01/08/2017 03:10:03 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (01/08/2017 03:06:27 PM) (Source: WTabletServicePro) (EventID: 1) (User: )
Description: Event-ID 1
Error: (01/08/2017 02:57:19 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (01/08/2017 01:05:26 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (01/08/2017 12:06:24 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa explorer.exe versão 6.1.7601.17514 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.
ID de Processo: 1abc
Hora de Início: 01d26953c0f2572e
Hora de Término: 10
Caminho do Aplicativo: C:\Windows\explorer.exe
Id do Relatório: 0d2962da-d547-11e6-9a9d-e03f49e43dc6
Error: (01/08/2017 12:04:01 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa explorer.exe versão 6.1.7601.17514 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.
ID de Processo: 1b38
Hora de Início: 01d26953624ac2af
Hora de Término: 13
Caminho do Aplicativo: C:\Windows\explorer.exe
Id do Relatório: b7abac84-d546-11e6-9a9d-e03f49e43dc6
Error: (01/08/2017 12:01:45 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa explorer.exe versão 6.1.7601.17514 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.
ID de Processo: 7c8
Hora de Início: 01d2695137276fd0
Hora de Término: 15
Caminho do Aplicativo: C:\Windows\explorer.exe
Id do Relatório: 66576429-d546-11e6-9a9d-e03f49e43dc6
System errors:
=============
Error: (01/09/2017 04:01:43 AM) (Source: Microsoft-Windows-Service Pack Installer) (EventID: 8) (User: Cloud-PC)
Description: Falha na instalação do Service Pack com o código de erro 0x800f0a03.
Error: (01/09/2017 03:36:30 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Origin Web Helper Service devido ao seguinte erro:
O serviço não respondeu à requisição de início ou controle em tempo hábil.
Error: (01/09/2017 03:36:30 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço Origin Web Helper Service.
Error: (01/09/2017 03:34:14 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: O serviço Windows Update não foi desligado corretamente após receber um controle de pré-desligamento.
Error: (01/09/2017 03:32:43 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Falha na Instalação: o Windows não pôde instalar a seguinte atualização com o erro 0x80070020: Atualização para o Windows (KB2670838).
Error: (01/08/2017 03:09:05 PM) (Source: DCOM) (EventID: 10001) (User: )
Description: Não é possível iniciar o servidor DCOM: {5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C} como /. O erro:
"5"
Aconteceu ao iniciar este comando:
"C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe" -Embedding
Error: (01/08/2017 03:09:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Origin Web Helper Service devido ao seguinte erro:
O serviço não respondeu à requisição de início ou controle em tempo hábil.
Error: (01/08/2017 03:09:03 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço Origin Web Helper Service.
Error: (01/08/2017 02:57:36 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: O servidor {5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C} não se registrou com o DCOM dentro do tempo limite requerido.
Error: (01/08/2017 02:57:26 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço NVIDIA Telemetry Container foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 1000 milissegundos: Restart the service.
CodeIntegrity:
===================================
Date: 2017-01-09 03:35:21.857
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-01-09 03:35:21.826
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-01-08 15:07:43.012
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-01-08 15:07:42.981
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-01-08 14:55:04.276
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-01-08 14:55:04.260
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-01-08 01:03:39.867
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-01-08 01:03:39.852
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-01-07 23:40:24.297
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-01-07 23:40:24.279
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i3-3240 CPU @ 3.40GHz
Percentage of memory in use: 43%
Total physical RAM: 8136.62 MB
Available physical RAM: 4581.83 MB
Total Virtual: 16271.44 MB
Available Virtual: 12386.6 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:1862.92 GB) (Free:1532.85 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 836E014D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=1862.9 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================
Ran by Cloud (09-01-2017 04:03:43)
Running from C:\Users\Cloud\Downloads
Windows 7 Ultimate Service Pack 1 (X64) (2016-12-03 05:50:08)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-3076387224-3557301491-2673967665-500 - Administrator - Disabled)
Cloud (S-1-5-21-3076387224-3557301491-2673967665-1000 - Administrator - Enabled) => C:\Users\Cloud
Guest (S-1-5-21-3076387224-3557301491-2673967665-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3076387224-3557301491-2673967665-1002 - Limited - Enabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-3076387224-3557301491-2673967665-1000\...\uTorrent) (Version: 3.4.9.43085 - BitTorrent Inc.)
Adobe Flash Player 23 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Ansel (Version: 376.33 - NVIDIA Corporation) Hidden
Antares Autotune Evo VST RTAS v6.0.9 (HKLM-x32\...\Antares Autotune Evo VST RTAS_is1) (Version: - )
Atualizações da NVIDIA 23.1.0.0 (Version: 23.1.0.0 - NVIDIA Corporation) Hidden
Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 4.0.69.0 - Autodesk)
Autodesk SketchBook Pro 2016 (HKLM\...\Autodesk SketchBook Pro 2016) (Version: 7.2.0.0 - Autodesk)
Autodesk SketchBook Pro 2016 (Version: 7.2.0.0 - Autodesk) Hidden
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.70.1080 - AB Team, d.o.o.)
Driver Booster 4.0 (HKLM-x32\...\Driver Booster_is1) (Version: 4.0.3 - IObit)
FireStorm version V1.0.45.000 (HKLM-x32\...\FireStorm_is1) (Version: V1.0.45.000 - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Grand Theft Auto V (HKLM\...\Steam App 271590) (Version: - Rockstar North)
H1Z1: King of the Kill (HKLM\...\Steam App 433850) (Version: - Daybreak Game Company)
HiPatch (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000}) (Version: 5.0.7.7 - Hi-Rez Studios)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
Infestation: The New Z (HKLM\...\Steam App 555570) (Version: - Fredaikis AB)
Java 8 Update 111 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
Killing Floor 2 (HKLM\...\Steam App 232090) (Version: - Tripwire Interactive)
LADSPA_plugins-win-0.4.15 (HKLM-x32\...\LADSPA_plugins-win_is1) (Version: - Audacity Team)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.541 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.541 - LogMeIn, Inc.) Hidden
Manticore Gaming Keyboard (HKLM-x32\...\{0DAEFA4F-E394-4D1F-8F1A-6A2180561290}}_is1) (Version: - )
Mesa Gráfica Wacom (HKLM\...\Wacom Tablet Driver) (Version: 6.3.8-6 - Wacom Technology Corp.)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (Português do Brasil) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1046) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM-x32\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
Middle-earth: Shadow of Mordor (HKLM\...\Steam App 241930) (Version: - Monolith Productions, Inc.)
Mozilla Firefox 50.1.0 (x86 pt-BR) (HKLM-x32\...\Mozilla Firefox 50.1.0 (x86 pt-BR)) (Version: 50.1.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.1.0.6186 - Mozilla)
NetLimiter 3 (HKLM-x32\...\NetLimiter 3 3.0.0.11) (Version: 3.0.0.11 - Locktime Software)
NetLimiter 3 (Version: 3.0.0.11 - Locktime Software) Hidden
NVIDIA Driver de áudio HD 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA Driver de controle do 3D Vision 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA Driver de gráficos 376.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.33 - NVIDIA Corporation)
NVIDIA Driver do 3D Vision 376.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 376.33 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.2.0.96 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.2.0.96 - NVIDIA Corporation)
NVIDIA Software do sistema PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (Version: 3.2.0.96 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 2.0.0.0 - NVIDIA Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 10.3.3.1921 - Electronic Arts, Inc.)
Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
Painel de controle da NVIDIA 376.33 (Version: 376.33 - NVIDIA Corporation) Hidden
paint.net (HKLM\...\{6AC1101E-7561-43C9-BEEA-4AB1D220D8FF}) (Version: 4.0.13 - dotPDN LLC)
Planet Explorers (HKLM\...\Steam App 237870) (Version: - Pathea Games)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.49.927.2011 - Realtek)
Realtek Ethernet Diagnostic Utility (HKLM-x32\...\{DADC7AB0-E554-4705-9F6A-83EA82ED708E}) (Version: 1.00.0000 - Realtek)
Remote Mouse version 3.002 (HKLM-x32\...\{01E4BC6D-3ACC-45E1-8928-C2FF626F63F3}_is1) (Version: 3.002 - Remote Mouse)
Revisores de Texto do Microsoft Office 2013 – Português do Brasil (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Rocket League (HKLM\...\Steam App 252950) (Version: - Psyonix, Inc.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.1.0 - Rockstar Games)
SafeZone Stable 1.51.2220.62 (x32 Version: 1.51.2220.62 - Avast Software) Hidden
Save Jesus (HKLM\...\Steam App 509220) (Version: - Almighty Games)
SHIELD Streaming (Version: 7.1.0350 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.2.0.96 - NVIDIA Corporation) Hidden
Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)
SMITE (HKLM\...\Steam App 386360) (Version: - Hi-Rez Studios)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
The Elder Scrolls V: Skyrim Special Edition (HKLM\...\Steam App 489830) (Version: - Bethesda Game Studios)
Uplay (HKLM-x32\...\Uplay) (Version: 26.0 - Ubisoft)
Vegas Pro 13.0 (64-bit) (HKLM\...\{1EEE0BEE-0BC8-11E5-A19E-F04DA23A5C58}) (Version: 13.0.453 - Sony)
VST Bridge 1.1 (HKLM-x32\...\VST Bridge_is1) (Version: - )
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Warframe (HKLM\...\Steam App 230410) (Version: - Digital Extremes)
WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
WinRAR 5.40 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {12554779-A7DC-4943-AD1A-AD1D6C3F3A4A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-12-03] (Adobe Systems Incorporated)
Task: {1A9C5112-7DA8-403F-BE11-BDD401AA3A6F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {1BA1FD1B-0B38-4591-AD0B-84D3AFF35A6F} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-12-12] (NVIDIA Corporation)
Task: {1BC40A13-D3EE-49B1-85D2-6D6B694F09DD} - System32\Tasks\Driver Booster SkipUAC (Cloud) => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\DriverBooster.exe [2016-09-22] (IObit)
Task: {2B11CB94-F714-4F82-84C9-328B34381D42} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-12-03] (AVAST Software)
Task: {2BFEC462-38EE-445E-88F1-641AD2F40680} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-12-03] (Google Inc.)
Task: {2E616055-7EFF-425F-A56E-9F4A369EA312} - System32\Tasks\Driver Booster Scheduler => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\Scheduler.exe [2016-09-20] (IObit)
Task: {373ABECE-0B25-4CA7-A6E4-FA53BD2BC2A5} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-12-12] (NVIDIA Corporation)
Task: {54664EC6-D9CB-4BBD-8935-C115B480B115} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-12-03] (AVAST Software)
Task: {559E4B7A-EE25-4C8A-809C-AD3CD92D55F7} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-12-12] (NVIDIA Corporation)
Task: {55B5590C-9EAC-4AD8-80D4-75B7161AA3E2} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-12-12] (NVIDIA Corporation)
Task: {579D5D8C-504E-4716-9F27-1F5A4B710F96} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-12-12] (NVIDIA Corporation)
Task: {78F9930F-E597-4CDB-8D81-FB1D5E79C57F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-12-03] (Google Inc.)
Task: {B0E048B8-E33E-409E-BED7-6016FE58ADA3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {CE425FF0-5F49-4FC5-B0F5-ADC6500C2F0A} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2016-12-12] (NVIDIA Corporation)
Task: {E0A551DC-CD0C-4613-9543-CD60F1485B7B} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-12-12] (NVIDIA Corporation)
Task: {E6AFAC03-46C8-4F8C-A6FE-F7F2E4FE7197} - System32\Tasks\SafeZone scheduled Autoupdate 1480746512 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-09-06] (Avast Software)
Task: {F19FBA18-228B-428F-A490-C25C7C910D01} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2016-12-03 05:06 - 2016-12-12 21:35 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-12-03 05:06 - 2016-12-12 21:36 - 04489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2016-12-03 03:58 - 2016-12-11 16:47 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2017-01-04 05:49 - 2016-06-25 08:52 - 00018432 _____ () C:\Program Files (x86)\Remote Mouse\RemoteMouseService.exe
2017-01-03 18:48 - 2014-05-21 14:14 - 01356568 ____N () C:\Program Files\Tablet\Wacom\libxml2.dll
2016-12-14 23:09 - 2016-12-08 06:03 - 02412888 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libglesv2.dll
2016-12-14 23:09 - 2016-12-08 06:03 - 00099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libegl.dll
2016-12-03 04:27 - 2016-12-03 04:27 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-01-08 14:59 - 2017-01-08 14:59 - 03138056 _____ () C:\Program Files\AVAST Software\Avast\defs\17010801\algo.dll
2016-12-03 04:27 - 2016-12-03 04:27 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2017-01-03 19:07 - 2014-12-05 00:27 - 00055688 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\QtSolutions_Service-head.dll
2017-01-03 19:07 - 2014-12-05 00:27 - 00104328 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\qjson0.dll
2016-12-03 05:06 - 2016-12-12 21:35 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-12-03 05:06 - 2016-12-12 21:35 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-12-03 05:06 - 2016-12-12 21:35 - 03774400 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2016-12-03 04:27 - 2016-12-03 04:27 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-12-03 17:15 - 2013-01-15 17:06 - 00061952 _____ () C:\Program Files (x86)\Genius\Manticore\HidDevice.dll
2016-12-03 17:15 - 2011-10-11 17:32 - 00054784 _____ () C:\Program Files (x86)\Genius\Manticore\KBHook1.dll
2016-12-03 05:07 - 2016-12-12 21:33 - 64245184 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
2016-12-03 05:25 - 2016-12-08 13:13 - 00656160 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2016-12-03 05:25 - 2016-08-31 23:02 - 04969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2016-12-03 05:25 - 2016-08-31 23:02 - 01563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2016-12-03 05:25 - 2016-08-31 23:02 - 01195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2016-12-03 05:25 - 2016-12-20 00:25 - 02322720 _____ () C:\Program Files (x86)\Steam\video.dll
2016-12-03 05:25 - 2016-01-27 05:49 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2016-12-03 05:25 - 2016-01-27 05:49 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2016-12-03 05:25 - 2016-01-27 05:49 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2016-12-03 05:25 - 2016-01-27 05:49 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2016-12-03 05:25 - 2016-01-27 05:49 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2016-12-03 05:25 - 2016-12-20 00:25 - 00838944 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-12-03 05:25 - 2016-07-04 20:17 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2016-12-03 05:07 - 2016-12-12 12:36 - 00525760 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2016-12-03 05:07 - 2016-12-12 12:36 - 00254008 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2016-12-03 05:07 - 2016-12-12 12:36 - 02808888 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2016-12-03 05:07 - 2016-12-12 12:36 - 00384568 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2016-12-03 05:07 - 2016-12-12 12:36 - 00447424 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
2016-12-03 05:07 - 2016-12-12 12:36 - 00336832 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2016-12-03 05:07 - 2016-12-12 12:36 - 01003456 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node
2016-12-23 17:16 - 2016-12-12 12:36 - 00956472 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSDKAPINode.node
2016-12-12 18:52 - 2016-12-05 14:21 - 67304736 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2016-12-03 05:25 - 2016-12-20 00:25 - 00388384 _____ () C:\Program Files (x86)\Steam\steam.dll
2016-12-03 05:25 - 2015-09-24 21:52 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\Cloud\Documents\Tales of Heroes previa.mp3:com.dropbox.attributes [168]
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 00:34 - 2009-06-10 19:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-3076387224-3557301491-2673967665-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Cloud\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.108
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SketchBook Snapshot.lnk => C:\Windows\pss\SketchBook Snapshot.lnk.CommonStartup
MSCONFIG\startupreg: ADSKAppManager => "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
MSCONFIG\startupreg: EADM => "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: NetLimiter => C:\Program Files\NetLimiter 3\NLClientApp.exe /tray
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{44651DA7-D12A-48A2-9A2B-9D6E5C1D2CD4}] => C:\Users\Cloud\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{350122CD-73BF-49C1-92CC-A4501EF94223}] => C:\Users\Cloud\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{64A9629A-0B6B-47A6-BE0F-52F947B6CFBC}] => C:\Users\Cloud\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{5DCC6BCC-D1A8-40FC-9CD2-8C4A3A6E6163}] => C:\Users\Cloud\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{5D3FD756-DC36-4E36-81DA-E908F503A56D}] => C:\Users\Cloud\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{780E9CD9-D13B-4649-A156-9563C566CED0}] => C:\Users\Cloud\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{370D981D-938C-4BE1-BE3F-C63A718F5994}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{59CC1408-CD61-445E-BE7D-69235752DAD8}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B25AEDB7-1E3F-43D1-86F7-479C39124ED7}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{5A19243A-6F3C-4E1D-ADC3-1716824AAF0F}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{15A51D92-8972-49D9-B60F-95917030A363}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{AB6C15B3-3DA2-488F-98BB-16FD403C37F6}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{9198E11A-88EF-4A3C-8C79-C989833D12C5}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{92B0878F-A2DE-4449-8307-026BED957E88}] => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\DriverBooster.exe
FirewallRules: [{D32EA287-23A6-4D66-AB4E-A8DED65C0860}] => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\DriverBooster.exe
FirewallRules: [{0B5414A6-7A79-410D-B2FC-1447ABAB9535}] => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\DBDownloader.exe
FirewallRules: [{A0B873EE-40CE-41BA-9D87-286AD7E74268}] => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\DBDownloader.exe
FirewallRules: [{175D5D22-E69C-4018-8F6C-14C1B6E79FD0}] => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\AutoUpdate.exe
FirewallRules: [{3A072A7A-6AF4-4830-9386-6A9778957111}] => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\AutoUpdate.exe
FirewallRules: [{6C62EBEC-5B9A-4751-AE01-598FB53D7CF0}] => C:\Program Files (x86)\Steam\steamapps\common\Skyrim Special Edition\SkyrimSELauncher.exe
FirewallRules: [{406A009D-153D-4C50-B449-6979E2A6424B}] => C:\Program Files (x86)\Steam\steamapps\common\Skyrim Special Edition\SkyrimSELauncher.exe
FirewallRules: [{35A9BC2C-51C3-4F56-A3D3-6E496CBD1D8E}] => C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{4568FAC5-A57C-42E9-A79A-E91913813D7F}] => C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{984F5189-1C35-44CC-AA83-57FAB870B36E}] => C:\Program Files (x86)\Steam\steamapps\common\SMITE\Binaries\Win32\HirezBridge.exe
FirewallRules: [{86D8FACF-B82C-4F57-9C05-77CEA3C937DD}] => C:\Program Files (x86)\Steam\steamapps\common\SMITE\Binaries\Win32\HirezBridge.exe
FirewallRules: [{0462B27B-030C-4F7E-B52B-D6A58AF71C4F}] => C:\Program Files (x86)\Steam\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe
FirewallRules: [{E85C6919-619C-428F-8707-B76B964DE28D}] => C:\Program Files (x86)\Steam\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe
FirewallRules: [{FC2784E2-6FF5-4D14-9FF7-612A3AAD81D1}] => C:\Program Files (x86)\Steam\steamapps\common\NewZ\NewZLauncher.exe
FirewallRules: [{C6CB8EA1-9615-4085-980A-AD9BF79A950A}] => C:\Program Files (x86)\Steam\steamapps\common\NewZ\NewZLauncher.exe
FirewallRules: [{A91939B8-EEF3-43D9-8409-DF474CCE604E}] => C:\Program Files\KMSpico\KMSELDI.exe
FirewallRules: [{70529458-D98A-4A4F-A1A5-55FE5E53ED85}] => C:\Program Files\KMSpico\KMSELDI.exe
FirewallRules: [{B2C6CFC0-3C83-4D6C-93B4-DDED4CDB6C45}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{A77B1349-69A7-4D33-A96C-DA9F647C1EC5}C:\program files (x86)\steam\steamapps\common\newz\thenewz.exe] => C:\program files (x86)\steam\steamapps\common\newz\thenewz.exe
FirewallRules: [UDP Query User{5BDD78EB-0725-4F8F-B068-BA42838E6354}C:\program files (x86)\steam\steamapps\common\newz\thenewz.exe] => C:\program files (x86)\steam\steamapps\common\newz\thenewz.exe
FirewallRules: [TCP Query User{8496AE6D-7F88-49B5-94DB-D55CC3A6D187}C:\program files (x86)\steam\steamapps\common\smite\binaries\win32\smite.exe] => C:\program files (x86)\steam\steamapps\common\smite\binaries\win32\smite.exe
FirewallRules: [UDP Query User{612086E5-42C2-4ECF-ACF7-AD529EDA9F53}C:\program files (x86)\steam\steamapps\common\smite\binaries\win32\smite.exe] => C:\program files (x86)\steam\steamapps\common\smite\binaries\win32\smite.exe
FirewallRules: [TCP Query User{9D49C7A9-436F-4326-91C4-42293F760504}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{0C90E317-34A5-402A-9AD6-C268AF520BE6}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{041DAA36-E74D-4A43-B370-A2849B2BC6A4}] => C:\Program Files (x86)\Steam\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{F61DC231-0973-4092-BE7E-4E1BE7C9020C}] => C:\Program Files (x86)\Steam\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [TCP Query User{96E46980-2085-4D52-958A-5A270751C20D}C:\program files (x86)\overwatch\overwatch.exe] => C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [UDP Query User{E309731D-C99E-4B08-A77B-C014514B3D92}C:\program files (x86)\overwatch\overwatch.exe] => C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [{6E41A105-A3F0-4154-BFE2-F2890473E0BD}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{9DD54D92-D7B2-4455-BCB8-0C1153FF1F22}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{11F9D83B-5961-4FDB-B10D-7CE50F1FD8E1}C:\users\cloud\appdata\local\shatteredskies\launcher.exe] => C:\users\cloud\appdata\local\shatteredskies\launcher.exe
FirewallRules: [UDP Query User{DFE612AE-86F7-46F0-A3A4-844CFE3A3F9A}C:\users\cloud\appdata\local\shatteredskies\launcher.exe] => C:\users\cloud\appdata\local\shatteredskies\launcher.exe
FirewallRules: [TCP Query User{EFC72C16-7A05-4B85-971A-70AD97443EF0}C:\users\cloud\appdata\local\shatteredskies\launcher.exe.new.exe] => C:\users\cloud\appdata\local\shatteredskies\launcher.exe.new.exe
FirewallRules: [UDP Query User{DB63F070-15CA-46EC-8CDB-795C70E8B342}C:\users\cloud\appdata\local\shatteredskies\launcher.exe.new.exe] => C:\users\cloud\appdata\local\shatteredskies\launcher.exe.new.exe
FirewallRules: [{F75606D3-5002-4105-A7FF-12A8DE4D7148}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{35DF1B05-DC31-46D3-836B-FD23FDDCC783}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{67DCBAC7-5E98-4B4D-8F0D-ACD50F1E0EC8}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{7B73A922-B09A-4AC6-9ED6-1273FB0FC700}] => C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{F06F3FF5-3877-4D67-A63A-67FD0A7280DF}] => C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [TCP Query User{F7168BB5-55B2-4284-A27D-FDC345A0C6BF}C:\program files (x86)\heroes of the storm\versions\base49008\heroesofthestorm_x64.exe] => C:\program files (x86)\heroes of the storm\versions\base49008\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{4D0484E6-334B-44DC-B0D8-59A975A7483E}C:\program files (x86)\heroes of the storm\versions\base49008\heroesofthestorm_x64.exe] => C:\program files (x86)\heroes of the storm\versions\base49008\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{B7184E3D-19F9-4F2B-87E3-CD9B84F05226}C:\program files\java\jre1.8.0_111\bin\javaw.exe] => C:\program files\java\jre1.8.0_111\bin\javaw.exe
FirewallRules: [UDP Query User{5E02908D-42EA-435F-833F-2C8585729E90}C:\program files\java\jre1.8.0_111\bin\javaw.exe] => C:\program files\java\jre1.8.0_111\bin\javaw.exe
FirewallRules: [{E38F373D-86DC-42A0-8559-DC87DFE6539B}] => C:\Program Files (x86)\Steam\steamapps\common\Planet Explorers\PE_Launcher.exe
FirewallRules: [{71594FA0-70E8-4F6C-9838-DB24F83159C8}] => C:\Program Files (x86)\Steam\steamapps\common\Planet Explorers\PE_Launcher.exe
FirewallRules: [{BAD95342-DD61-4CFB-A605-A72F4CB44C97}] => C:\Program Files (x86)\Steam\steamapps\common\Save Jesus\Save Jesus.exe
FirewallRules: [{F1E086C8-B41E-46C0-B1DF-EDCABD286183}] => C:\Program Files (x86)\Steam\steamapps\common\Save Jesus\Save Jesus.exe
FirewallRules: [TCP Query User{9612048A-8030-4732-91FF-18881935D1FC}C:\program files (x86)\steam\steamapps\common\planet explorers\pe_client.exe] => C:\program files (x86)\steam\steamapps\common\planet explorers\pe_client.exe
FirewallRules: [UDP Query User{1AB9AFEF-19E2-4A70-8B61-1BA5DA33E34A}C:\program files (x86)\steam\steamapps\common\planet explorers\pe_client.exe] => C:\program files (x86)\steam\steamapps\common\planet explorers\pe_client.exe
FirewallRules: [TCP Query User{24299A14-0BFB-4858-AB55-ED2CA4B16A9C}C:\program files\java\jre1.8.0_111\bin\java.exe] => C:\program files\java\jre1.8.0_111\bin\java.exe
FirewallRules: [UDP Query User{9BD8960B-26C0-4989-BE40-075E44445F97}C:\program files\java\jre1.8.0_111\bin\java.exe] => C:\program files\java\jre1.8.0_111\bin\java.exe
FirewallRules: [{EBE378EC-F741-4420-8AEA-E606108347AB}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{82B236F2-631C-49C0-878A-D062499F8593}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{BC6B906C-36DF-404E-B43D-4B32F4057D2A}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{0EA4725C-0243-490D-AAAC-1A6C31B71823}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{71AF9E00-6274-4DC6-AE01-C0BD9E3B0293}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{BE40A3AE-D441-434B-BFDC-B6E74267CC02}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{49DD9D99-0101-4910-9306-947583D529DE}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{97D7622E-ED8A-4068-A319-03A7D6ECBF1B}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{3709E81A-4E72-44AB-924B-45E370987944}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{71785651-1516-46B1-A803-F2E11F87EEDD}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{EB22B093-7CB1-4337-BCCB-9008A337933A}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{3C4DAC27-FED1-4029-9259-0ACFD47CEC9B}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{28649368-4E47-4A77-84A3-24C62A4E969D}] => C:\Program Files\Autodesk\Autodesk SketchBook Pro 2016\SketchBookPro.exe
FirewallRules: [{ED451CF6-B9B7-4717-A682-2C2BFD47C418}] => C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe
FirewallRules: [{668933CC-7F2D-482D-8C96-5459EB175485}] => C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe
FirewallRules: [{1D6F10DC-704F-40DA-8F72-5682B92B5E69}] => C:\Program Files (x86)\Remote Mouse\RemoteMouseCore.exe
FirewallRules: [{325E42A6-92BB-42D0-AB53-D7D8F17389E8}] => C:\Program Files (x86)\Remote Mouse\RemoteMouseCore.exe
FirewallRules: [{8F29E040-D3D7-4DD0-8B9E-18B25A188E22}] => C:\Program Files (x86)\Steam\steamapps\common\H1Z1 King of the Kill\LaunchPad.exe
FirewallRules: [{36880145-B3E8-4258-A6F8-27CF21585D55}] => C:\Program Files (x86)\Steam\steamapps\common\H1Z1 King of the Kill\LaunchPad.exe
==================== Restore Points =========================
07-01-2017 23:35:57 Removed LogMeIn Hamachi
07-01-2017 23:39:10 Installed LogMeIn Hamachi
07-01-2017 23:44:40 Removed LogMeIn Hamachi
07-01-2017 23:52:27 Installed LogMeIn Hamachi
09-01-2017 03:10:28 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210
09-01-2017 03:20:28 Windows Update
09-01-2017 03:22:44 Windows Update
09-01-2017 03:24:26 Windows Update
09-01-2017 03:28:24 Windows Update
==================== Faulty Device Manager Devices =============
Name: Controlador de comunicação PCI simples
Description: Controlador de comunicação PCI simples
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (01/09/2017 03:59:05 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa explorer.exe versão 6.1.7601.17514 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.
ID de Processo: 15e4
Hora de Início: 01d26a3b6861d700
Hora de Término: 0
Caminho do Aplicativo: C:\Windows\explorer.exe
Id do Relatório:
Error: (01/09/2017 03:37:09 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (01/08/2017 03:10:48 PM) (Source: WTabletServicePro) (EventID: 1) (User: )
Description: Event-ID 1
Error: (01/08/2017 03:10:03 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (01/08/2017 03:06:27 PM) (Source: WTabletServicePro) (EventID: 1) (User: )
Description: Event-ID 1
Error: (01/08/2017 02:57:19 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (01/08/2017 01:05:26 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (01/08/2017 12:06:24 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa explorer.exe versão 6.1.7601.17514 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.
ID de Processo: 1abc
Hora de Início: 01d26953c0f2572e
Hora de Término: 10
Caminho do Aplicativo: C:\Windows\explorer.exe
Id do Relatório: 0d2962da-d547-11e6-9a9d-e03f49e43dc6
Error: (01/08/2017 12:04:01 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa explorer.exe versão 6.1.7601.17514 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.
ID de Processo: 1b38
Hora de Início: 01d26953624ac2af
Hora de Término: 13
Caminho do Aplicativo: C:\Windows\explorer.exe
Id do Relatório: b7abac84-d546-11e6-9a9d-e03f49e43dc6
Error: (01/08/2017 12:01:45 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: O programa explorer.exe versão 6.1.7601.17514 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações.
ID de Processo: 7c8
Hora de Início: 01d2695137276fd0
Hora de Término: 15
Caminho do Aplicativo: C:\Windows\explorer.exe
Id do Relatório: 66576429-d546-11e6-9a9d-e03f49e43dc6
System errors:
=============
Error: (01/09/2017 04:01:43 AM) (Source: Microsoft-Windows-Service Pack Installer) (EventID: 8) (User: Cloud-PC)
Description: Falha na instalação do Service Pack com o código de erro 0x800f0a03.
Error: (01/09/2017 03:36:30 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Origin Web Helper Service devido ao seguinte erro:
O serviço não respondeu à requisição de início ou controle em tempo hábil.
Error: (01/09/2017 03:36:30 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço Origin Web Helper Service.
Error: (01/09/2017 03:34:14 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: O serviço Windows Update não foi desligado corretamente após receber um controle de pré-desligamento.
Error: (01/09/2017 03:32:43 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Falha na Instalação: o Windows não pôde instalar a seguinte atualização com o erro 0x80070020: Atualização para o Windows (KB2670838).
Error: (01/08/2017 03:09:05 PM) (Source: DCOM) (EventID: 10001) (User: )
Description: Não é possível iniciar o servidor DCOM: {5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C} como /. O erro:
"5"
Aconteceu ao iniciar este comando:
"C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe" -Embedding
Error: (01/08/2017 03:09:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Não foi possível iniciar o serviço Origin Web Helper Service devido ao seguinte erro:
O serviço não respondeu à requisição de início ou controle em tempo hábil.
Error: (01/08/2017 03:09:03 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço Origin Web Helper Service.
Error: (01/08/2017 02:57:36 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: O servidor {5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C} não se registrou com o DCOM dentro do tempo limite requerido.
Error: (01/08/2017 02:57:26 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: O serviço NVIDIA Telemetry Container foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 1000 milissegundos: Restart the service.
CodeIntegrity:
===================================
Date: 2017-01-09 03:35:21.857
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-01-09 03:35:21.826
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-01-08 15:07:43.012
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-01-08 15:07:42.981
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-01-08 14:55:04.276
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-01-08 14:55:04.260
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-01-08 01:03:39.867
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-01-08 01:03:39.852
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-01-07 23:40:24.297
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-01-07 23:40:24.279
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i3-3240 CPU @ 3.40GHz
Percentage of memory in use: 43%
Total physical RAM: 8136.62 MB
Available physical RAM: 4581.83 MB
Total Virtual: 16271.44 MB
Available Virtual: 12386.6 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:1862.92 GB) (Free:1532.85 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 836E014D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=1862.9 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================