Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-01-2017 Ran by Cloud (09-01-2017 04:03:43) Running from C:\Users\Cloud\Downloads Windows 7 Ultimate Service Pack 1 (X64) (2016-12-03 05:50:08) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-3076387224-3557301491-2673967665-500 - Administrator - Disabled) Cloud (S-1-5-21-3076387224-3557301491-2673967665-1000 - Administrator - Enabled) => C:\Users\Cloud Guest (S-1-5-21-3076387224-3557301491-2673967665-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-3076387224-3557301491-2673967665-1002 - Limited - Enabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-3076387224-3557301491-2673967665-1000\...\uTorrent) (Version: 3.4.9.43085 - BitTorrent Inc.) Adobe Flash Player 23 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 23.0.0.207 - Adobe Systems Incorporated) Ansel (Version: 376.33 - NVIDIA Corporation) Hidden Antares Autotune Evo VST RTAS v6.0.9 (HKLM-x32\...\Antares Autotune Evo VST RTAS_is1) (Version: - ) Atualizações da NVIDIA 23.1.0.0 (Version: 23.1.0.0 - NVIDIA Corporation) Hidden Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team) Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 4.0.69.0 - Autodesk) Autodesk SketchBook Pro 2016 (HKLM\...\Autodesk SketchBook Pro 2016) (Version: 7.2.0.0 - Autodesk) Autodesk SketchBook Pro 2016 (Version: 7.2.0.0 - Autodesk) Hidden Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.70.1080 - AB Team, d.o.o.) Driver Booster 4.0 (HKLM-x32\...\Driver Booster_is1) (Version: 4.0.3 - IObit) FireStorm version V1.0.45.000 (HKLM-x32\...\FireStorm_is1) (Version: V1.0.45.000 - ) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.) Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden Grand Theft Auto V (HKLM\...\Steam App 271590) (Version: - Rockstar North) H1Z1: King of the Kill (HKLM\...\Steam App 433850) (Version: - Daybreak Game Company) HiPatch (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000}) (Version: 5.0.7.7 - Hi-Rez Studios) Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios) Infestation: The New Z (HKLM\...\Steam App 555570) (Version: - Fredaikis AB) Java 8 Update 111 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180111F0}) (Version: 8.0.1110.14 - Oracle Corporation) Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation) Killing Floor 2 (HKLM\...\Steam App 232090) (Version: - Tripwire Interactive) LADSPA_plugins-win-0.4.15 (HKLM-x32\...\LADSPA_plugins-win_is1) (Version: - Audacity Team) LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - ) LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.541 - LogMeIn, Inc.) LogMeIn Hamachi (x32 Version: 2.2.0.541 - LogMeIn, Inc.) Hidden Manticore Gaming Keyboard (HKLM-x32\...\{0DAEFA4F-E394-4D1F-8F1A-6A2180561290}}_is1) (Version: - ) Mesa Gráfica Wacom (HKLM\...\Wacom Tablet Driver) (Version: 6.3.8-6 - Wacom Technology Corp.) Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation) Microsoft .NET Framework 4.6.1 (Português do Brasil) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1046) (Version: 4.6.01055 - Microsoft Corporation) Microsoft Office Professional Plus 2013 (HKLM-x32\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation) Middle-earth: Shadow of Mordor (HKLM\...\Steam App 241930) (Version: - Monolith Productions, Inc.) Mozilla Firefox 50.1.0 (x86 pt-BR) (HKLM-x32\...\Mozilla Firefox 50.1.0 (x86 pt-BR)) (Version: 50.1.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.1.0.6186 - Mozilla) NetLimiter 3 (HKLM-x32\...\NetLimiter 3 3.0.0.11) (Version: 3.0.0.11 - Locktime Software) NetLimiter 3 (Version: 3.0.0.11 - Locktime Software) Hidden NVIDIA Driver de áudio HD 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation) NVIDIA Driver de controle do 3D Vision 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation) NVIDIA Driver de gráficos 376.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.33 - NVIDIA Corporation) NVIDIA Driver do 3D Vision 376.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 376.33 - NVIDIA Corporation) NVIDIA GeForce Experience 3.2.0.96 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.2.0.96 - NVIDIA Corporation) NVIDIA Software do sistema PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation) NvNodejs (Version: 3.2.0.96 - NVIDIA Corporation) Hidden NvTelemetry (Version: 2.0.0.0 - NVIDIA Corporation) Hidden Origin (HKLM-x32\...\Origin) (Version: 10.3.3.1921 - Electronic Arts, Inc.) Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment) Painel de controle da NVIDIA 376.33 (Version: 376.33 - NVIDIA Corporation) Hidden paint.net (HKLM\...\{6AC1101E-7561-43C9-BEEA-4AB1D220D8FF}) (Version: 4.0.13 - dotPDN LLC) Planet Explorers (HKLM\...\Steam App 237870) (Version: - Pathea Games) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.49.927.2011 - Realtek) Realtek Ethernet Diagnostic Utility (HKLM-x32\...\{DADC7AB0-E554-4705-9F6A-83EA82ED708E}) (Version: 1.00.0000 - Realtek) Remote Mouse version 3.002 (HKLM-x32\...\{01E4BC6D-3ACC-45E1-8928-C2FF626F63F3}_is1) (Version: 3.002 - Remote Mouse) Revisores de Texto do Microsoft Office 2013 – Português do Brasil (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Rocket League (HKLM\...\Steam App 252950) (Version: - Psyonix, Inc.) Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.1.0 - Rockstar Games) SafeZone Stable 1.51.2220.62 (x32 Version: 1.51.2220.62 - Avast Software) Hidden Save Jesus (HKLM\...\Steam App 509220) (Version: - Almighty Games) SHIELD Streaming (Version: 7.1.0350 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 3.2.0.96 - NVIDIA Corporation) Hidden Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.) SMITE (HKLM\...\Steam App 386360) (Version: - Hi-Rez Studios) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) The Elder Scrolls V: Skyrim Special Edition (HKLM\...\Steam App 489830) (Version: - Bethesda Game Studios) Uplay (HKLM-x32\...\Uplay) (Version: 26.0 - Ubisoft) Vegas Pro 13.0 (64-bit) (HKLM\...\{1EEE0BEE-0BC8-11E5-A19E-F04DA23A5C58}) (Version: 13.0.453 - Sony) VST Bridge 1.1 (HKLM-x32\...\VST Bridge_is1) (Version: - ) Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.) Warframe (HKLM\...\Steam App 230410) (Version: - Digital Extremes) WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.) WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.) WinRAR 5.40 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {12554779-A7DC-4943-AD1A-AD1D6C3F3A4A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-12-03] (Adobe Systems Incorporated) Task: {1A9C5112-7DA8-403F-BE11-BDD401AA3A6F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {1BA1FD1B-0B38-4591-AD0B-84D3AFF35A6F} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-12-12] (NVIDIA Corporation) Task: {1BC40A13-D3EE-49B1-85D2-6D6B694F09DD} - System32\Tasks\Driver Booster SkipUAC (Cloud) => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\DriverBooster.exe [2016-09-22] (IObit) Task: {2B11CB94-F714-4F82-84C9-328B34381D42} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-12-03] (AVAST Software) Task: {2BFEC462-38EE-445E-88F1-641AD2F40680} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-12-03] (Google Inc.) Task: {2E616055-7EFF-425F-A56E-9F4A369EA312} - System32\Tasks\Driver Booster Scheduler => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\Scheduler.exe [2016-09-20] (IObit) Task: {373ABECE-0B25-4CA7-A6E4-FA53BD2BC2A5} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-12-12] (NVIDIA Corporation) Task: {54664EC6-D9CB-4BBD-8935-C115B480B115} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-12-03] (AVAST Software) Task: {559E4B7A-EE25-4C8A-809C-AD3CD92D55F7} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-12-12] (NVIDIA Corporation) Task: {55B5590C-9EAC-4AD8-80D4-75B7161AA3E2} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-12-12] (NVIDIA Corporation) Task: {579D5D8C-504E-4716-9F27-1F5A4B710F96} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-12-12] (NVIDIA Corporation) Task: {78F9930F-E597-4CDB-8D81-FB1D5E79C57F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-12-03] (Google Inc.) Task: {B0E048B8-E33E-409E-BED7-6016FE58ADA3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {CE425FF0-5F49-4FC5-B0F5-ADC6500C2F0A} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2016-12-12] (NVIDIA Corporation) Task: {E0A551DC-CD0C-4613-9543-CD60F1485B7B} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-12-12] (NVIDIA Corporation) Task: {E6AFAC03-46C8-4F8C-A6FE-F7F2E4FE7197} - System32\Tasks\SafeZone scheduled Autoupdate 1480746512 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-09-06] (Avast Software) Task: {F19FBA18-228B-428F-A490-C25C7C910D01} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2016-12-03 05:06 - 2016-12-12 21:35 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll 2016-12-03 05:06 - 2016-12-12 21:36 - 04489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll 2016-12-03 03:58 - 2016-12-11 16:47 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2017-01-04 05:49 - 2016-06-25 08:52 - 00018432 _____ () C:\Program Files (x86)\Remote Mouse\RemoteMouseService.exe 2017-01-03 18:48 - 2014-05-21 14:14 - 01356568 ____N () C:\Program Files\Tablet\Wacom\libxml2.dll 2016-12-14 23:09 - 2016-12-08 06:03 - 02412888 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libglesv2.dll 2016-12-14 23:09 - 2016-12-08 06:03 - 00099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libegl.dll 2016-12-03 04:27 - 2016-12-03 04:27 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2017-01-08 14:59 - 2017-01-08 14:59 - 03138056 _____ () C:\Program Files\AVAST Software\Avast\defs\17010801\algo.dll 2016-12-03 04:27 - 2016-12-03 04:27 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll 2017-01-03 19:07 - 2014-12-05 00:27 - 00055688 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\QtSolutions_Service-head.dll 2017-01-03 19:07 - 2014-12-05 00:27 - 00104328 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\qjson0.dll 2016-12-03 05:06 - 2016-12-12 21:35 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2016-12-03 05:06 - 2016-12-12 21:35 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll 2016-12-03 05:06 - 2016-12-12 21:35 - 03774400 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll 2016-12-03 04:27 - 2016-12-03 04:27 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2016-12-03 17:15 - 2013-01-15 17:06 - 00061952 _____ () C:\Program Files (x86)\Genius\Manticore\HidDevice.dll 2016-12-03 17:15 - 2011-10-11 17:32 - 00054784 _____ () C:\Program Files (x86)\Genius\Manticore\KBHook1.dll 2016-12-03 05:07 - 2016-12-12 21:33 - 64245184 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll 2016-12-03 05:25 - 2016-12-08 13:13 - 00656160 _____ () C:\Program Files (x86)\Steam\SDL2.dll 2016-12-03 05:25 - 2016-08-31 23:02 - 04969248 _____ () C:\Program Files (x86)\Steam\v8.dll 2016-12-03 05:25 - 2016-08-31 23:02 - 01563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll 2016-12-03 05:25 - 2016-08-31 23:02 - 01195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll 2016-12-03 05:25 - 2016-12-20 00:25 - 02322720 _____ () C:\Program Files (x86)\Steam\video.dll 2016-12-03 05:25 - 2016-01-27 05:49 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll 2016-12-03 05:25 - 2016-01-27 05:49 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll 2016-12-03 05:25 - 2016-01-27 05:49 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll 2016-12-03 05:25 - 2016-01-27 05:49 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll 2016-12-03 05:25 - 2016-01-27 05:49 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll 2016-12-03 05:25 - 2016-12-20 00:25 - 00838944 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL 2016-12-03 05:25 - 2016-07-04 20:17 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll 2016-12-03 05:07 - 2016-12-12 12:36 - 00525760 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node 2016-12-03 05:07 - 2016-12-12 12:36 - 00254008 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node 2016-12-03 05:07 - 2016-12-12 12:36 - 02808888 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node 2016-12-03 05:07 - 2016-12-12 12:36 - 00384568 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node 2016-12-03 05:07 - 2016-12-12 12:36 - 00447424 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node 2016-12-03 05:07 - 2016-12-12 12:36 - 00336832 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node 2016-12-03 05:07 - 2016-12-12 12:36 - 01003456 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node 2016-12-23 17:16 - 2016-12-12 12:36 - 00956472 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSDKAPINode.node 2016-12-12 18:52 - 2016-12-05 14:21 - 67304736 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll 2016-12-03 05:25 - 2016-12-20 00:25 - 00388384 _____ () C:\Program Files (x86)\Steam\steam.dll 2016-12-03 05:25 - 2015-09-24 21:52 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\Users\Cloud\Documents\Tales of Heroes previa.mp3:com.dropbox.attributes [168] ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 00:34 - 2009-06-10 19:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3076387224-3557301491-2673967665-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Cloud\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.0.108 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SketchBook Snapshot.lnk => C:\Windows\pss\SketchBook Snapshot.lnk.CommonStartup MSCONFIG\startupreg: ADSKAppManager => "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun MSCONFIG\startupreg: EADM => "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start MSCONFIG\startupreg: NetLimiter => C:\Program Files\NetLimiter 3\NLClientApp.exe /tray MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{44651DA7-D12A-48A2-9A2B-9D6E5C1D2CD4}] => C:\Users\Cloud\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{350122CD-73BF-49C1-92CC-A4501EF94223}] => C:\Users\Cloud\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{64A9629A-0B6B-47A6-BE0F-52F947B6CFBC}] => C:\Users\Cloud\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{5DCC6BCC-D1A8-40FC-9CD2-8C4A3A6E6163}] => C:\Users\Cloud\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{5D3FD756-DC36-4E36-81DA-E908F503A56D}] => C:\Users\Cloud\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{780E9CD9-D13B-4649-A156-9563C566CED0}] => C:\Users\Cloud\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{370D981D-938C-4BE1-BE3F-C63A718F5994}] => C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{59CC1408-CD61-445E-BE7D-69235752DAD8}] => C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{B25AEDB7-1E3F-43D1-86F7-479C39124ED7}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe FirewallRules: [{5A19243A-6F3C-4E1D-ADC3-1716824AAF0F}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe FirewallRules: [{15A51D92-8972-49D9-B60F-95917030A363}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{AB6C15B3-3DA2-488F-98BB-16FD403C37F6}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{9198E11A-88EF-4A3C-8C79-C989833D12C5}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{92B0878F-A2DE-4449-8307-026BED957E88}] => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\DriverBooster.exe FirewallRules: [{D32EA287-23A6-4D66-AB4E-A8DED65C0860}] => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\DriverBooster.exe FirewallRules: [{0B5414A6-7A79-410D-B2FC-1447ABAB9535}] => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\DBDownloader.exe FirewallRules: [{A0B873EE-40CE-41BA-9D87-286AD7E74268}] => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\DBDownloader.exe FirewallRules: [{175D5D22-E69C-4018-8F6C-14C1B6E79FD0}] => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\AutoUpdate.exe FirewallRules: [{3A072A7A-6AF4-4830-9386-6A9778957111}] => C:\Program Files (x86)\IObit\Driver Booster\4.0.3\AutoUpdate.exe FirewallRules: [{6C62EBEC-5B9A-4751-AE01-598FB53D7CF0}] => C:\Program Files (x86)\Steam\steamapps\common\Skyrim Special Edition\SkyrimSELauncher.exe FirewallRules: [{406A009D-153D-4C50-B449-6979E2A6424B}] => C:\Program Files (x86)\Steam\steamapps\common\Skyrim Special Edition\SkyrimSELauncher.exe FirewallRules: [{35A9BC2C-51C3-4F56-A3D3-6E496CBD1D8E}] => C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe FirewallRules: [{4568FAC5-A57C-42E9-A79A-E91913813D7F}] => C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe FirewallRules: [{984F5189-1C35-44CC-AA83-57FAB870B36E}] => C:\Program Files (x86)\Steam\steamapps\common\SMITE\Binaries\Win32\HirezBridge.exe FirewallRules: [{86D8FACF-B82C-4F57-9C05-77CEA3C937DD}] => C:\Program Files (x86)\Steam\steamapps\common\SMITE\Binaries\Win32\HirezBridge.exe FirewallRules: [{0462B27B-030C-4F7E-B52B-D6A58AF71C4F}] => C:\Program Files (x86)\Steam\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe FirewallRules: [{E85C6919-619C-428F-8707-B76B964DE28D}] => C:\Program Files (x86)\Steam\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe FirewallRules: [{FC2784E2-6FF5-4D14-9FF7-612A3AAD81D1}] => C:\Program Files (x86)\Steam\steamapps\common\NewZ\NewZLauncher.exe FirewallRules: [{C6CB8EA1-9615-4085-980A-AD9BF79A950A}] => C:\Program Files (x86)\Steam\steamapps\common\NewZ\NewZLauncher.exe FirewallRules: [{A91939B8-EEF3-43D9-8409-DF474CCE604E}] => C:\Program Files\KMSpico\KMSELDI.exe FirewallRules: [{70529458-D98A-4A4F-A1A5-55FE5E53ED85}] => C:\Program Files\KMSpico\KMSELDI.exe FirewallRules: [{B2C6CFC0-3C83-4D6C-93B4-DDED4CDB6C45}] => C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [TCP Query User{A77B1349-69A7-4D33-A96C-DA9F647C1EC5}C:\program files (x86)\steam\steamapps\common\newz\thenewz.exe] => C:\program files (x86)\steam\steamapps\common\newz\thenewz.exe FirewallRules: [UDP Query User{5BDD78EB-0725-4F8F-B068-BA42838E6354}C:\program files (x86)\steam\steamapps\common\newz\thenewz.exe] => C:\program files (x86)\steam\steamapps\common\newz\thenewz.exe FirewallRules: [TCP Query User{8496AE6D-7F88-49B5-94DB-D55CC3A6D187}C:\program files (x86)\steam\steamapps\common\smite\binaries\win32\smite.exe] => C:\program files (x86)\steam\steamapps\common\smite\binaries\win32\smite.exe FirewallRules: [UDP Query User{612086E5-42C2-4ECF-ACF7-AD529EDA9F53}C:\program files (x86)\steam\steamapps\common\smite\binaries\win32\smite.exe] => C:\program files (x86)\steam\steamapps\common\smite\binaries\win32\smite.exe FirewallRules: [TCP Query User{9D49C7A9-436F-4326-91C4-42293F760504}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe FirewallRules: [UDP Query User{0C90E317-34A5-402A-9AD6-C268AF520BE6}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe FirewallRules: [{041DAA36-E74D-4A43-B370-A2849B2BC6A4}] => C:\Program Files (x86)\Steam\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe FirewallRules: [{F61DC231-0973-4092-BE7E-4E1BE7C9020C}] => C:\Program Files (x86)\Steam\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe FirewallRules: [TCP Query User{96E46980-2085-4D52-958A-5A270751C20D}C:\program files (x86)\overwatch\overwatch.exe] => C:\program files (x86)\overwatch\overwatch.exe FirewallRules: [UDP Query User{E309731D-C99E-4B08-A77B-C014514B3D92}C:\program files (x86)\overwatch\overwatch.exe] => C:\program files (x86)\overwatch\overwatch.exe FirewallRules: [{6E41A105-A3F0-4154-BFE2-F2890473E0BD}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{9DD54D92-D7B2-4455-BCB8-0C1153FF1F22}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{11F9D83B-5961-4FDB-B10D-7CE50F1FD8E1}C:\users\cloud\appdata\local\shatteredskies\launcher.exe] => C:\users\cloud\appdata\local\shatteredskies\launcher.exe FirewallRules: [UDP Query User{DFE612AE-86F7-46F0-A3A4-844CFE3A3F9A}C:\users\cloud\appdata\local\shatteredskies\launcher.exe] => C:\users\cloud\appdata\local\shatteredskies\launcher.exe FirewallRules: [TCP Query User{EFC72C16-7A05-4B85-971A-70AD97443EF0}C:\users\cloud\appdata\local\shatteredskies\launcher.exe.new.exe] => C:\users\cloud\appdata\local\shatteredskies\launcher.exe.new.exe FirewallRules: [UDP Query User{DB63F070-15CA-46EC-8CDB-795C70E8B342}C:\users\cloud\appdata\local\shatteredskies\launcher.exe.new.exe] => C:\users\cloud\appdata\local\shatteredskies\launcher.exe.new.exe FirewallRules: [{F75606D3-5002-4105-A7FF-12A8DE4D7148}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{35DF1B05-DC31-46D3-836B-FD23FDDCC783}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{67DCBAC7-5E98-4B4D-8F0D-ACD50F1E0EC8}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{7B73A922-B09A-4AC6-9ED6-1273FB0FC700}] => C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe FirewallRules: [{F06F3FF5-3877-4D67-A63A-67FD0A7280DF}] => C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe FirewallRules: [TCP Query User{F7168BB5-55B2-4284-A27D-FDC345A0C6BF}C:\program files (x86)\heroes of the storm\versions\base49008\heroesofthestorm_x64.exe] => C:\program files (x86)\heroes of the storm\versions\base49008\heroesofthestorm_x64.exe FirewallRules: [UDP Query User{4D0484E6-334B-44DC-B0D8-59A975A7483E}C:\program files (x86)\heroes of the storm\versions\base49008\heroesofthestorm_x64.exe] => C:\program files (x86)\heroes of the storm\versions\base49008\heroesofthestorm_x64.exe FirewallRules: [TCP Query User{B7184E3D-19F9-4F2B-87E3-CD9B84F05226}C:\program files\java\jre1.8.0_111\bin\javaw.exe] => C:\program files\java\jre1.8.0_111\bin\javaw.exe FirewallRules: [UDP Query User{5E02908D-42EA-435F-833F-2C8585729E90}C:\program files\java\jre1.8.0_111\bin\javaw.exe] => C:\program files\java\jre1.8.0_111\bin\javaw.exe FirewallRules: [{E38F373D-86DC-42A0-8559-DC87DFE6539B}] => C:\Program Files (x86)\Steam\steamapps\common\Planet Explorers\PE_Launcher.exe FirewallRules: [{71594FA0-70E8-4F6C-9838-DB24F83159C8}] => C:\Program Files (x86)\Steam\steamapps\common\Planet Explorers\PE_Launcher.exe FirewallRules: [{BAD95342-DD61-4CFB-A605-A72F4CB44C97}] => C:\Program Files (x86)\Steam\steamapps\common\Save Jesus\Save Jesus.exe FirewallRules: [{F1E086C8-B41E-46C0-B1DF-EDCABD286183}] => C:\Program Files (x86)\Steam\steamapps\common\Save Jesus\Save Jesus.exe FirewallRules: [TCP Query User{9612048A-8030-4732-91FF-18881935D1FC}C:\program files (x86)\steam\steamapps\common\planet explorers\pe_client.exe] => C:\program files (x86)\steam\steamapps\common\planet explorers\pe_client.exe FirewallRules: [UDP Query User{1AB9AFEF-19E2-4A70-8B61-1BA5DA33E34A}C:\program files (x86)\steam\steamapps\common\planet explorers\pe_client.exe] => C:\program files (x86)\steam\steamapps\common\planet explorers\pe_client.exe FirewallRules: [TCP Query User{24299A14-0BFB-4858-AB55-ED2CA4B16A9C}C:\program files\java\jre1.8.0_111\bin\java.exe] => C:\program files\java\jre1.8.0_111\bin\java.exe FirewallRules: [UDP Query User{9BD8960B-26C0-4989-BE40-075E44445F97}C:\program files\java\jre1.8.0_111\bin\java.exe] => C:\program files\java\jre1.8.0_111\bin\java.exe FirewallRules: [{EBE378EC-F741-4420-8AEA-E606108347AB}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe FirewallRules: [{82B236F2-631C-49C0-878A-D062499F8593}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{BC6B906C-36DF-404E-B43D-4B32F4057D2A}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe FirewallRules: [{0EA4725C-0243-490D-AAAC-1A6C31B71823}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{71AF9E00-6274-4DC6-AE01-C0BD9E3B0293}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe FirewallRules: [{BE40A3AE-D441-434B-BFDC-B6E74267CC02}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe FirewallRules: [{49DD9D99-0101-4910-9306-947583D529DE}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe FirewallRules: [{97D7622E-ED8A-4068-A319-03A7D6ECBF1B}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{3709E81A-4E72-44AB-924B-45E370987944}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe FirewallRules: [{71785651-1516-46B1-A803-F2E11F87EEDD}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{EB22B093-7CB1-4337-BCCB-9008A337933A}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe FirewallRules: [{3C4DAC27-FED1-4029-9259-0ACFD47CEC9B}] => C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe FirewallRules: [{28649368-4E47-4A77-84A3-24C62A4E969D}] => C:\Program Files\Autodesk\Autodesk SketchBook Pro 2016\SketchBookPro.exe FirewallRules: [{ED451CF6-B9B7-4717-A682-2C2BFD47C418}] => C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe FirewallRules: [{668933CC-7F2D-482D-8C96-5459EB175485}] => C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe FirewallRules: [{1D6F10DC-704F-40DA-8F72-5682B92B5E69}] => C:\Program Files (x86)\Remote Mouse\RemoteMouseCore.exe FirewallRules: [{325E42A6-92BB-42D0-AB53-D7D8F17389E8}] => C:\Program Files (x86)\Remote Mouse\RemoteMouseCore.exe FirewallRules: [{8F29E040-D3D7-4DD0-8B9E-18B25A188E22}] => C:\Program Files (x86)\Steam\steamapps\common\H1Z1 King of the Kill\LaunchPad.exe FirewallRules: [{36880145-B3E8-4258-A6F8-27CF21585D55}] => C:\Program Files (x86)\Steam\steamapps\common\H1Z1 King of the Kill\LaunchPad.exe ==================== Restore Points ========================= 07-01-2017 23:35:57 Removed LogMeIn Hamachi 07-01-2017 23:39:10 Installed LogMeIn Hamachi 07-01-2017 23:44:40 Removed LogMeIn Hamachi 07-01-2017 23:52:27 Installed LogMeIn Hamachi 09-01-2017 03:10:28 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 09-01-2017 03:20:28 Windows Update 09-01-2017 03:22:44 Windows Update 09-01-2017 03:24:26 Windows Update 09-01-2017 03:28:24 Windows Update ==================== Faulty Device Manager Devices ============= Name: Controlador de comunicação PCI simples Description: Controlador de comunicação PCI simples Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (01/09/2017 03:59:05 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: O programa explorer.exe versão 6.1.7601.17514 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações. ID de Processo: 15e4 Hora de Início: 01d26a3b6861d700 Hora de Término: 0 Caminho do Aplicativo: C:\Windows\explorer.exe Id do Relatório: Error: (01/09/2017 03:37:09 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (01/08/2017 03:10:48 PM) (Source: WTabletServicePro) (EventID: 1) (User: ) Description: Event-ID 1 Error: (01/08/2017 03:10:03 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (01/08/2017 03:06:27 PM) (Source: WTabletServicePro) (EventID: 1) (User: ) Description: Event-ID 1 Error: (01/08/2017 02:57:19 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (01/08/2017 01:05:26 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (01/08/2017 12:06:24 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: O programa explorer.exe versão 6.1.7601.17514 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações. ID de Processo: 1abc Hora de Início: 01d26953c0f2572e Hora de Término: 10 Caminho do Aplicativo: C:\Windows\explorer.exe Id do Relatório: 0d2962da-d547-11e6-9a9d-e03f49e43dc6 Error: (01/08/2017 12:04:01 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: O programa explorer.exe versão 6.1.7601.17514 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações. ID de Processo: 1b38 Hora de Início: 01d26953624ac2af Hora de Término: 13 Caminho do Aplicativo: C:\Windows\explorer.exe Id do Relatório: b7abac84-d546-11e6-9a9d-e03f49e43dc6 Error: (01/08/2017 12:01:45 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: O programa explorer.exe versão 6.1.7601.17514 parou de interagir com o Windows e foi fechado. Para ver se há mais informações disponíveis sobre o problema, verifique o histórico de problemas no painel de controle da Central de Ações. ID de Processo: 7c8 Hora de Início: 01d2695137276fd0 Hora de Término: 15 Caminho do Aplicativo: C:\Windows\explorer.exe Id do Relatório: 66576429-d546-11e6-9a9d-e03f49e43dc6 System errors: ============= Error: (01/09/2017 04:01:43 AM) (Source: Microsoft-Windows-Service Pack Installer) (EventID: 8) (User: Cloud-PC) Description: Falha na instalação do Service Pack com o código de erro 0x800f0a03. Error: (01/09/2017 03:36:30 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Não foi possível iniciar o serviço Origin Web Helper Service devido ao seguinte erro: O serviço não respondeu à requisição de início ou controle em tempo hábil. Error: (01/09/2017 03:36:30 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço Origin Web Helper Service. Error: (01/09/2017 03:34:14 AM) (Source: Service Control Manager) (EventID: 7043) (User: ) Description: O serviço Windows Update não foi desligado corretamente após receber um controle de pré-desligamento. Error: (01/09/2017 03:32:43 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Falha na Instalação: o Windows não pôde instalar a seguinte atualização com o erro 0x80070020: Atualização para o Windows (KB2670838). Error: (01/08/2017 03:09:05 PM) (Source: DCOM) (EventID: 10001) (User: ) Description: Não é possível iniciar o servidor DCOM: {5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C} como /. O erro: "5" Aconteceu ao iniciar este comando: "C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe" -Embedding Error: (01/08/2017 03:09:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Não foi possível iniciar o serviço Origin Web Helper Service devido ao seguinte erro: O serviço não respondeu à requisição de início ou controle em tempo hábil. Error: (01/08/2017 03:09:03 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Tempo limite esgotado (30000 milissegundos) ao aguardar a conexão do serviço Origin Web Helper Service. Error: (01/08/2017 02:57:36 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: O servidor {5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C} não se registrou com o DCOM dentro do tempo limite requerido. Error: (01/08/2017 02:57:26 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: O serviço NVIDIA Telemetry Container foi finalizado inesperadamente. Isto aconteceu 1 vez(es). A seguinte ação corretiva será tomada em 1000 milissegundos: Restart the service. CodeIntegrity: =================================== Date: 2017-01-09 03:35:21.857 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2017-01-09 03:35:21.826 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2017-01-08 15:07:43.012 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2017-01-08 15:07:42.981 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2017-01-08 14:55:04.276 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2017-01-08 14:55:04.260 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2017-01-08 01:03:39.867 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2017-01-08 01:03:39.852 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2017-01-07 23:40:24.297 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2017-01-07 23:40:24.279 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\hamachi.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i3-3240 CPU @ 3.40GHz Percentage of memory in use: 43% Total physical RAM: 8136.62 MB Available physical RAM: 4581.83 MB Total Virtual: 16271.44 MB Available Virtual: 12386.6 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:1862.92 GB) (Free:1532.85 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 836E014D) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=1862.9 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================