Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Additional scan result of Farbar Recovery Scan Tool (x64) Version:17-01-2015
- Ran by Jack (2016-01-18 10:16:12)
- Running from C:\Users\Jack\Desktop
- Windows 10 Pro (X64) (2015-09-02 01:12:49)
- Boot Mode: Normal
- ==========================================================
- ==================== Accounts: =============================
- Administrator (S-1-5-21-4270532649-2185237214-901248356-500 - Administrator - Disabled)
- ASPNET (S-1-5-21-4270532649-2185237214-901248356-1002 - Limited - Enabled)
- DefaultAccount (S-1-5-21-4270532649-2185237214-901248356-503 - Limited - Disabled)
- Guest (S-1-5-21-4270532649-2185237214-901248356-501 - Limited - Disabled)
- Jack (S-1-5-21-4270532649-2185237214-901248356-1001 - Administrator - Enabled) => C:\Users\Jack
- ==================== Security Center ========================
- (If an entry is included in the fixlist, it will be removed.)
- AV: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
- AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
- ==================== Installed Programs ======================
- (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
- .NET Reactor (HKLM-x32\...\.NET Reactor) (Version: 4.9.9.0 - Eziriz)
- .NET Reactor (x32 Version: 4.9.9.0 - Eziriz) Hidden
- Action! (HKLM-x32\...\Mirillis Action!) (Version: 1.29.0 - Mirillis)
- Adobe Flash Player 10 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 10.3.183.18 - Adobe Systems Incorporated)
- Adobe Flash Player 11 Plugin (x64) (HKLM\...\{F7090575-8BDC-4A14-8D00-C0FB2BC914BD}) (Version: 11.1.102.63 - Adobe Systems Incorporated)
- Adobe Illustrator CC 2015 (HKLM-x32\...\{5680D629-B263-49CC-821E-3CEBD4507B51}) (Version: 19.0 - Adobe Systems Incorporated)
- Amazon Kindle (HKU\S-1-5-21-4270532649-2185237214-901248356-1001\...\Amazon Kindle) (Version: - Amazon)
- AppHelper (HKLM-x32\...\AppHelper) (Version: 1.0 - AppHelper)
- Apple Application Support (32-bit) (HKLM-x32\...\{3540ADD5-822B-47FB-B1C2-CD7B2C8E9FEC}) (Version: 4.0.2 - Apple Inc.)
- Apple Application Support (64-bit) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.)
- Apple Mobile Device Support (HKLM\...\{316BFAA9-B213-4A4C-AF39-AC4D7EA99B54}) (Version: 9.0.0.26 - Apple Inc.)
- Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
- Application Insights Tools for Visual Studio 2015 (HKLM-x32\...\{903D0F33-D3CF-48D6-967D-84004089428A}) (Version: 4.0.51203.1 - Microsoft Corporation)
- Aurora 2 (HKLM-x32\...\{FCBB56F9-D88E-45DB-8EB6-50C14928DDB8}) (Version: 2.00.0000 - Kak Abbas)
- AutoIt v3.3.14.2 (HKLM-x32\...\AutoItv3) (Version: 3.3.14.2 - AutoIt Team)
- Azure AD Authentication Connected Service (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
- AzureTools.Notifications (x32 Version: 2.7.30611.1601 - Microsoft Corporation) Hidden
- Bandicam (HKLM-x32\...\Bandicam) (Version: 3.0.1.1003 - Bandisoft.com)
- Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandisoft.com)
- Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
- BitTorrent (HKU\S-1-5-21-4270532649-2185237214-901248356-1001\...\BitTorrent) (Version: 7.9.5.41203 - BitTorrent Inc.)
- Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
- BlueStacks App Player (HKLM-x32\...\{EFA0FC40-7D96-4515-9715-7C0C5D872326}) (Version: 2.0.2.5623 - BlueStack Systems, Inc.)
- Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
- Brackets (HKLM-x32\...\{D20AE926-9B7C-45F2-9201-B161CD30350D}) (Version: 1.4 - brackets.io)
- Cain & Abel 4.9.56 (HKLM-x32\...\Cain & Abel 4.9.56) (Version: - )
- Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
- DevExtras - CodeReflect (HKLM-x32\...\{D3F9A17B-0655-45B9-899D-7B46DC1CD2CC}) (Version: 1.0.8 - DevExtras)
- Dotfuscator and Analytics Community Edition 5.19.0 (x32 Version: 5.19.0.2930 - PreEmptive Solutions) Hidden
- Driver Booster 2.3 (HKLM-x32\...\Driver Booster_is1) (Version: 2.3 - IObit)
- Droid4X (HKLM-x32\...\Droid4X) (Version: 0.8.7 - Haiyu Dongxiang Co.,Ltd.)
- Dropbox (HKLM-x32\...\Dropbox) (Version: 3.12.5 - Dropbox, Inc.)
- Dropbox Update Helper (x32 Version: 1.3.27.35 - Dropbox, Inc.) Hidden
- Entity Framework 6.1.3 Tools for Visual Studio 2015 Update 1 (HKLM-x32\...\{2A56910C-69C8-495D-8ED8-9080F0A14E58}) (Version: 14.0.41103.0 - Microsoft Corporation)
- Fiddler (HKLM-x32\...\Fiddler2) (Version: 4.6.2.0 - Telerik)
- FileZilla Client 3.14.1 (HKLM-x32\...\FileZilla Client) (Version: 3.14.1 - Tim Kosse)
- Genymotion version 2.6.0 (HKLM\...\{6D180286-D4DF-40EF-9227-923B9C07C08A}_is1) (Version: 2.6.0 - Genymobile)
- Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.111 - Google Inc.)
- Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
- Gyazo 3.1.6 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version: - Nota Inc.)
- Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment)
- Icecream Screen Recorder version 2.66 (HKLM-x32\...\{7ADEC622-3230-4C9A-9DCE-9BD462B74095}_is1) (Version: 2.66 - Icecream Apps)
- IIS 10.0 Express (HKLM\...\{7A28A2B0-458B-4A58-84AC-C90D2D4B79FB}) (Version: 10.0.1735 - Microsoft Corporation)
- IIS Express Application Compatibility Database for x64 (HKLM\...\{08274920-8908-45c2-9258-8ad67ff77b09}.sdb) (Version: - )
- IIS Express Application Compatibility Database for x86 (HKLM\...\{ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb) (Version: - )
- ImageMagick 7.0.0-0 Q16 (64-bit) (2015-12-05) (HKLM\...\ImageMagick 7.0.0 Q16 (64-bit)_is1) (Version: 7.0.0 - ImageMagick Studio LLC)
- iTunes (HKLM\...\{F7A14985-3CDF-4AF8-8CD8-050B7045EB6F}) (Version: 12.3.0.44 - Apple Inc.)
- Java 8 Update 60 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418060F0}) (Version: 8.0.600.27 - Oracle Corporation)
- Java SE Development Kit 8 Update 60 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180600}) (Version: 8.0.600.27 - Oracle Corporation)
- League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
- League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden
- Macro Recorder 5.7.8 (HKLM-x32\...\Macro Recorder_is1) (Version: 5.7.8 - Jitbit Software)
- ManyCam 3.1.43 (HKLM-x32\...\ManyCam) (Version: 3.1.43 - ManyCam LLC)
- MassPlanner2 (HKLM-x32\...\{E1461793-BECC-43D3-AB79-6E96C46EE084}) (Version: 8.0.6 - PentaPlanner)
- Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
- Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
- Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
- Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
- Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
- Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (ENU) (HKLM-x32\...\{290FC320-2F5A-329E-8840-C4193BD7A9EE}) (Version: 4.5.51209 - Microsoft Corporation)
- Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{19E8AE59-4D4A-3534-B567-6CC08FA4102E}) (Version: 4.5.51651 - Microsoft Corporation)
- Microsoft .NET Framework 4.6 SDK (HKLM-x32\...\{B5915D37-0637-4A26-A3AA-C5DC9F856370}) (Version: 4.6.00081 - Microsoft Corporation)
- Microsoft .NET Framework 4.6 Targeting Pack (ENU) (HKLM-x32\...\{034547E9-D8FA-49E7-8B9C-4C9861FB9146}) (Version: 4.6.00127 - Microsoft Corporation)
- Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation)
- Microsoft .NET Framework 4.6.1 SDK (HKLM-x32\...\{2F0ECC80-B9E4-4485-8083-CD32F22ABD92}) (Version: 4.6.01055 - Microsoft Corporation)
- Microsoft .NET Framework 4.6.1 Targeting Pack (ENU) (HKLM-x32\...\{8EEB28EE-5141-411C-9CF0-9952264FE4AF}) (Version: 4.6.01055 - Microsoft Corporation)
- Microsoft .NET Framework 4.6.1 Targeting Pack (HKLM-x32\...\{8BC3EEC9-090F-4C53-A8DA-1BEC913040F9}) (Version: 4.6.01055 - Microsoft Corporation)
- Microsoft .NET Version Manager (x64) 1.0.0-beta5 (HKLM\...\{c5a4aba3-1aba-3ef8-b2d5-c3fa37f59738}) (Version: 1.0.10609.0 - Microsoft Corporation)
- Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.24720 - Microsoft Corporation)
- Microsoft Office Professional Plus 2016 - en-us (HKLM\...\ProplusRetail - en-us) (Version: 16.0.6366.2056 - Microsoft Corporation)
- Microsoft Project Professional 2016 - en-us (HKLM\...\ProjectProRetail - en-us) (Version: 16.0.6366.2056 - Microsoft Corporation)
- Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20513.0 - Microsoft Corporation)
- Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation)
- Microsoft SQL Server 2012 Native Client (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)
- Microsoft SQL Server 2014 Express LocalDB (HKLM\...\{AB8DE9BA-19E1-446A-BCFA-6B3DA9751E21}) (Version: 12.0.2000.8 - Microsoft Corporation)
- Microsoft SQL Server 2014 Management Objects (HKLM-x32\...\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation)
- Microsoft SQL Server 2014 Management Objects (x64) (HKLM\...\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}) (Version: 12.0.2000.8 - Microsoft Corporation)
- Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\...\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation)
- Microsoft SQL Server 2014 T-SQL Language Service (HKLM-x32\...\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation)
- Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
- Microsoft SQL Server Data Tools - enu (14.0.50616.0) (HKLM-x32\...\{58246C80-3941-4B69-AE31-264644E2ADB8}) (Version: 14.0.50616.0 - Microsoft Corporation)
- Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{FC3BB979-AA54-4B60-BBA3-2C4DA6E08D80}) (Version: 12.0.2402.29 - Microsoft Corporation)
- Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\...\{091CE6AA-2753-4F6E-AD1C-0E875744EB54}) (Version: 12.0.2402.29 - Microsoft Corporation)
- Microsoft Visio Professional 2016 - en-us (HKLM\...\VisioProRetail - en-us) (Version: 16.0.6366.2056 - Microsoft Corporation)
- Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
- Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
- Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
- Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
- Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
- Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
- Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
- Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
- Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
- Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
- Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
- Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
- Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
- Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
- Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
- Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
- Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
- Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)
- Microsoft Visual Studio Community 2015 with Update 1 (HKLM-x32\...\{5642384f-2a89-46d3-acd5-bfe8bf6e8b2f}) (Version: 14.0.24720.0 - Microsoft Corporation)
- Microsoft Web Deploy 3.6 (HKLM\...\{ED4CC1E5-043E-4157-8452-B5E533FE2BA1}) (Version: 3.1238.1955 - Microsoft Corporation)
- Mozilla Firefox 43.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 43.0.1 (x86 en-US)) (Version: 43.0.1 - Mozilla)
- Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.1.5828 - Mozilla)
- MSBuild/NuGet Integration 14.0 (x86) (x32 Version: 14.0.24720 - Microsoft Corporation) Hidden
- Multi-Device Hybrid Apps using C# - Templates - ENU (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
- NetBeans IDE 8.0.2 (HKLM\...\nbi-nb-base-8.0.2.0.201411181905) (Version: 8.0.2 - NetBeans.org)
- NETGEAR WNDA4100 (x32 Version: 1.2.0.13 - NETGEAR) Hidden
- NetStream 1.0 (HKU\S-1-5-21-4270532649-2185237214-901248356-1001\...\NetStream 1.0) (Version: - )
- NewInternet (HKLM\...\FastIn) (Version: - yoyo)
- NirSoft Volumouse (HKLM-x32\...\Volumouse) (Version: - )
- Note-up (HKLM-x32\...\Note-up) (Version: - Note-up)
- Note-UP (HKLM-x32\...\NUIns) (Version: - QUAHOG LIMITED)
- NVIDIA 3D Vision Controller Driver 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
- NVIDIA 3D Vision Driver 361.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 361.43 - NVIDIA Corporation)
- NVIDIA GeForce Experience 2.8.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.8.1.21 - NVIDIA Corporation)
- NVIDIA Graphics Driver 361.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 361.43 - NVIDIA Corporation)
- NVIDIA HD Audio Driver 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
- NVIDIA PhysX System Software 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
- Office 16 Click-to-Run Extensibility Component (Version: 16.0.6326.1019 - Microsoft Corporation) Hidden
- Office 16 Click-to-Run Licensing Component (Version: 16.0.6326.1019 - Microsoft Corporation) Hidden
- Office 16 Click-to-Run Localization Component (Version: 16.0.6326.1019 - Microsoft Corporation) Hidden
- Office 2016 KMS Activator Ultimate v1.1 Final (HKLM\...\Office 2016 KMS Activator Ultimate v1.1 Final_is1) (Version: v1.1 Final - )
- Oracle VM VirtualBox 5.0.12 (HKLM\...\{6F93731D-89E1-4A8F-BDA9-D104860DDB02}) (Version: 5.0.12 - Oracle Corporation)
- PDFMate PDF Converter Professional 1.7.5 (HKLM-x32\...\PDFMate PDF Converter Professional_is1) (Version: - pdfmate.com)
- PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.5134.1 - PreEmptive Solutions) Hidden
- Prerequisites for SSDT (HKLM-x32\...\{21373064-AD95-48DB-A32E-0D9E08EF7355}) (Version: 12.0.2000.8 - Microsoft Corporation)
- Pulover's Macro Creator version 4.1.3 (HKLM\...\{223FFB42-2D49-4AF6-9EF2-82B7D0CAF8B4}_is1) (Version: 4.1.3 - Rodolfo U. Batista)
- qTox (HKLM-x32\...\qTox) (Version: 1.0 - The qTox Project)
- RaidCall (HKLM-x32\...\RaidCall) (Version: 8.1.8-1.0.3112.146 - raidcall.com.ru)
- Razer Core (HKLM-x32\...\Razer Core) (Version: 1.0.1.66 - Razer Inc)
- Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.21.27405 - Razer Inc.)
- Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7553 - Realtek Semiconductor Corp.)
- Realtek PC Camera Driver (HKLM-x32\...\{E399A5B3-ED53-4DEA-AF04-8011E1EB1EAC}) (Version: 6.3.9600.11073 - Realtek Semiconductor Corp.)
- Roslyn Language Services - x86 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
- Roslyn Language Services - x86 (x32 Version: 14.0.24723 - Microsoft Corporation) Hidden
- RuneScape Launcher 1.2.6 (HKLM-x32\...\{B49A8622-40E7-4F77-827A-A43E250FADB1}) (Version: 1.2.6 - Jagex Ltd)
- SciTE4AutoIt3 15.920.938.0 (HKLM-x32\...\SciTE4AutoIt3) (Version: 15.920.938.0 - Jos van der Zande)
- Setup (HKLM-x32\...\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}) (Version: - ) <==== ATTENTION
- SHIELD Streaming (Version: 4.1.0250 - NVIDIA Corporation) Hidden
- SHIELD Wireless Controller Driver (Version: 2.8.1.21 - NVIDIA Corporation) Hidden
- Skype™ 7.17 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.17.105 - Skype Technologies S.A.)
- Splashtop Software Updater (HKLM-x32\...\Splashtop Software Updater) (Version: 1.5.6.15 - Splashtop Inc.)
- Splashtop Streamer (HKLM-x32\...\{B7C5EA94-B96A-41F5-BE95-25D78B486678}) (Version: 2.6.5.12 - Splashtop Inc.)
- Spotify (HKU\S-1-5-21-4270532649-2185237214-901248356-1001\...\Spotify) (Version: 1.0.20.101.ge6957e14 - Spotify AB)
- Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
- SunnyDay (HKLM-x32\...\SunnyDay5_is1) (Version: - SUNNYDAY)
- SushiLeads (HKLM-x32\...\sushileads) (Version: 2.6.0.0 - SushiLeads)
- Team Explorer for Microsoft Visual Studio 2015 (x32 Version: 14.0.24712 - Microsoft Corporation) Hidden
- TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.53254 - TeamViewer)
- TEAR version 3.0.6 (HKLM-x32\...\{F695A930-3F57-407E-9129-D1686A33AED0}_is1) (Version: 3.0.6 - TEAR)
- Telerik Control Panel (HKLM-x32\...\{8FF7D6BE-217A-4D20-BEA9-06A3259D7672}) (Version: 15.10.1221.0 - Telerik AD)
- Telerik JustDecompile Q3 2015 SP1 (HKLM-x32\...\{FFA6F594-E1C1-45FD-8C12-E36DFBDA020A}) (Version: 15.3.1116.0 - Telerik AD)
- Test Tools for Microsoft Visual Studio 2015 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
- TI Connect™ (HKLM-x32\...\{D06BA64C-4447-49B4-B99D-E85BEA9E1035}) (Version: 4.0.0.218 - Texas Instruments Inc.)
- TI NoteFolio Creator (HKLM-x32\...\{F07AE5AB-516C-4CEB-A0AA-AD083B9182C6}) (Version: 1.1.0.276 - Texas Instruments Incorporated)
- TrailerTime - TrailerTime for Desktop (HKLM-x32\...\TrailerTime) (Version: 5.2.1amt - TrailerTime)
- TypeScript Power Tool (x32 Version: 1.7.4.0 - Microsoft Corporation) Hidden
- TypeScript Tools for Microsoft Visual Studio 2015 (x32 Version: 1.7.4.0 - Microsoft Corporation) Hidden
- TypeScript Tools for Microsoft Visual Studio 2015 1.7.4.0 (HKLM-x32\...\{33e2204a-4ec6-4458-895a-47e2a404d990}) (Version: 1.7.24720.0 - Microsoft Corporation)
- Universal CRT Extension SDK (x32 Version: 10.0.10150 - Microsoft Corporation) Hidden
- Universal CRT Extension SDK (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
- Universal CRT Headers Libraries and Sources (x32 Version: 10.0.10150 - Microsoft Corporation) Hidden
- Universal CRT Headers Libraries and Sources (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
- Universal CRT Redistributable (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
- Universal CRT Tools x64 (Version: 10.0.26624 - Microsoft Corporation) Hidden
- Universal CRT Tools x86 (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
- Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
- Visual Command Line 1.1.25 (HKLM-x32\...\Visual Command Line) (Version: 1.1.25 - CodeCaged, Inc.)
- Visual Studio 2015 Update 1 (KB3022398) (HKLM-x32\...\{fcaa9dba-9438-48b6-ad91-4e9b4cc7084a}) (Version: 14.0.24720 - Microsoft Corporation)
- VS Update core components (x32 Version: 14.0.24720 - Microsoft Corporation) Hidden
- WCF Data Services 5.6.4 Runtime (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
- WCF Data Services Tools for Microsoft Visual Studio 2015 (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
- WebM Project Directshow Filters (HKU\S-1-5-21-4270532649-2185237214-901248356-1001\...\webmdshow) (Version: 1.0.4.1 - WebM Project)
- Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
- Windows Driver Package - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/28/2014 11.0.0000.00000) (HKLM\...\092555911492C6959D2596D612F52DCA71881CA2) (Version: 08/28/2014 11.0.0000.00000 - Google, Inc.)
- Windows Driver Package - Texas Instruments Inc. (SilvrLnk) USB (06/11/2009 1.0.0.0) (HKLM\...\EC3E466026556D3EB760B01C4772277614354E11) (Version: 06/11/2009 1.0.0.0 - Texas Instruments Inc.)
- Windows Driver Package - Texas Instruments Inc. (TIEHDUSB) USB (09/02/2009 1.0.0.1) (HKLM\...\7511B29C86C398B4D11A0B0E4176CAD68D1B7057) (Version: 09/02/2009 1.0.0.1 - Texas Instruments Inc.)
- WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
- WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
- Wondershare DVD Creator(Build 3.2.0) (HKLM-x32\...\Wondershare DVD Creator_is1) (Version: - Wondershare Software)
- Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)
- ==================== Custom CLSID (Whitelisted): ==========================
- (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
- CustomCLSID: HKU\S-1-5-21-4270532649-2185237214-901248356-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Jack\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation)
- ==================== Scheduled Tasks (Whitelisted) =============
- (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
- Task: {0B89EC13-6CC0-43D1-8387-3500A9B59C90} - \GyazoUpdateTaskMachine -> No File <==== ATTENTION
- Task: {18850801-F66F-477D-8097-23F5525B0334} - \GoogleUpdateTaskMachineUA -> No File <==== ATTENTION
- Task: {1A084167-DA3E-4824-B41E-9899FDCAD72F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-26] (Apple Inc.)
- Task: {1BF6104B-9A2F-4C75-AC2E-9A5DE3BE6727} - \Driver Booster Update -> No File <==== ATTENTION
- Task: {38D5EF26-FDFF-4B0C-A832-3C9D2C02B031} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-01-07] (Microsoft Corporation)
- Task: {47B3A8DB-F5ED-4652-85C7-11ECCE1C07FD} - \Uninstaller_SkipUac_Jack -> No File <==== ATTENTION
- Task: {6279A869-733B-41A9-ABE0-2D70F562EE03} - \{4C8A06ED-6224-4DA4-8310-1D67EF029021} -> No File <==== ATTENTION
- Task: {627BBDBB-92AD-4699-A62A-9253D8DB93C8} - System32\Tasks\3146774314677431467743146774 => C:\Program Files (x86)\teeth\zonked.exe [2016-01-16] (windows 99) <==== ATTENTION
- Task: {6DE30D67-5787-4466-96E0-719A62762E19} - \Driver Booster SkipUAC (Jack) -> No File <==== ATTENTION
- Task: {6EAE708E-655E-4C99-9ABF-B809981E8DE7} - System32\Tasks\SushiLeads => C:\Program Files (x86)\sushileads\ScheduledTask.exe [2015-10-11] ()
- Task: {712462BD-E97E-483A-9504-499B73BD65CA} - \[email protected] -> No File <==== ATTENTION
- Task: {7FA7504B-D7B8-4EB0-87C0-26F8766078B1} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2016-01-08] (Microsoft Corporation)
- Task: {8092B44D-35FA-4467-A528-E7D30C71F3EB} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2016-01-08] (Microsoft Corporation)
- Task: {8A92819F-7E4A-457C-8141-304CA005C76B} - System32\Tasks\281847184 => C:\Program Files (x86)\nutritious\raspy.exe [2016-01-16] (likeable) <==== ATTENTION
- Task: {941B9E6E-F9E3-4261-B11B-A4FD12566AAA} - System32\Tasks\181847184 => C:\Program Files (x86)\nutritious\raspy.exe [2016-01-16] (likeable) <==== ATTENTION
- Task: {97F1D027-DD57-475C-A908-757BB413ECC3} - System32\Tasks\667475153059593546 => C:\Program Files (x86)\teeth\zonked.exe [2016-01-16] (windows 99) <==== ATTENTION
- Task: {A20B2CAE-96B0-4388-B8C9-A8AC43E1FEAA} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
- Task: {A8268242-452A-4D8F-A758-39192FCCC9FF} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-01-18] (Microsoft Corporation)
- Task: {A99D729E-7849-455F-BEFE-A37025D030C8} - \Telerik Control Panel Notifier WIN-HBBVHMEMD8B_Jack -> No File <==== ATTENTION
- Task: {BE51CBAC-5D5A-43A9-8D4C-51F88DBA73ED} - System32\Tasks\0otOgcx0LoTaRkvTUvfs-ni-2016-01-16-ni-10924-ni-1 => C:\Program Files (x86)\teeth\zonked.exe [2016-01-16] (windows 99)
- Task: {C38C2227-5CE7-40EF-AA1D-CEEE7CE5D9A8} - \DropboxUpdateTaskMachineUA -> No File <==== ATTENTION
- Task: {DD3736DB-984C-477D-ADEE-EA5954970A42} - \GyazoUpdateTaskMachineDaily -> No File <==== ATTENTION
- Task: {F0CD3B4B-D1D3-45B3-8939-EC102A16F767} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-01-07] (Microsoft Corporation)
- Task: {F12CBD61-BEF6-4613-874D-E172D1BCAF67} - \DropboxUpdateTaskMachineCore -> No File <==== ATTENTION
- Task: {F8D385BA-05F9-41B3-A7E4-A8C152C8B982} - \GoogleUpdateTaskMachineCore -> No File <==== ATTENTION
- Task: {F9D87DFA-FF49-436D-8FC5-4E2D218291B6} - System32\Tasks\56504825 => C:\Program Files (x86)\cent\class.exe [2016-01-16] () <==== ATTENTION
- Task: {FAC68BCD-C8A9-48DC-A15A-E0CAEFB385F4} - \Driver Booster Scan -> No File <==== ATTENTION
- (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
- Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
- Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
- Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
- Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
- Task: C:\WINDOWS\Tasks\Uninstaller_SkipUac_Jack.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
- ==================== Shortcuts =============================
- (The entries could be listed to be restored or removed.)
- ==================== Loaded Modules (Whitelisted) ==============
- 2015-09-01 15:28 - 2015-09-01 15:28 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
- 2015-11-06 18:17 - 2015-12-16 09:54 - 00126256 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
- 2015-09-01 15:28 - 2015-09-01 15:28 - 00404480 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll
- 2015-09-01 11:31 - 2015-07-01 22:06 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
- 2015-12-19 17:21 - 2015-12-08 20:52 - 00217720 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
- 2015-06-23 14:11 - 2015-06-23 14:11 - 00187048 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
- 2015-07-10 01:06 - 2015-06-09 19:00 - 00019968 _____ () C:\WINDOWS\SysWOW64\TearWinService.exe
- 2015-10-01 17:40 - 2015-09-17 01:48 - 02494712 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
- 2016-01-16 01:43 - 2016-01-16 01:43 - 00012288 _____ () C:\Program Files (x86)\cent\class.exe
- 2015-10-01 17:40 - 2015-09-17 01:48 - 02494712 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
- 2016-01-16 03:12 - 2016-01-15 05:07 - 03282096 _____ () C:\Users\Jack\AppData\Local\SunnyDay5\usun.exe
- 2015-10-01 17:40 - 2015-09-17 00:48 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
- 2015-10-01 17:39 - 2015-09-17 01:04 - 00642048 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\MtcUvc.dll
- 2015-07-10 05:59 - 2015-07-10 05:59 - 00143360 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\XamlTileRendering.dll
- 2016-01-16 01:43 - 2016-01-16 01:43 - 00042734 _____ () C:\Program Files (x86)\teeth\industry.exe
- 2015-12-10 07:19 - 2015-12-10 07:20 - 00012800 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
- 2015-12-10 07:19 - 2015-12-10 07:20 - 11542016 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
- 2015-11-19 18:44 - 2015-11-19 18:44 - 00258560 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
- 2016-01-08 09:02 - 2016-01-08 09:02 - 09737216 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.25.15.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
- 2015-09-29 18:43 - 2016-01-07 06:13 - 00162472 _____ () C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll
- 2015-07-08 01:58 - 2015-07-08 01:58 - 00292352 _____ () C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
- 2015-09-09 15:01 - 2016-01-16 05:08 - 00108672 _____ () C:\Users\Jack\AppData\Roaming\MassPlanner2\MassPlannerNew.ControlCenter.exe
- 2016-01-09 05:28 - 2016-01-09 05:28 - 03563008 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1601.6020.0_x64__8wekyb3d8bbwe\Calculator.exe
- 2015-12-15 08:42 - 2015-12-15 08:42 - 00258560 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1601.6020.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
- 2015-12-08 18:25 - 2015-11-24 23:20 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
- 2015-12-08 18:25 - 2015-11-24 23:17 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
- 2015-12-08 18:25 - 2015-11-24 23:24 - 00884736 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
- 2015-12-08 18:25 - 2015-11-24 23:17 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
- 2015-10-01 17:40 - 2015-09-17 00:43 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
- 2015-07-10 06:00 - 2015-07-10 08:14 - 00210432 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.ProxyStub.dll
- 2015-12-08 18:25 - 2015-11-24 23:18 - 00928768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RulesBackgroundTasks.dll
- 2015-10-01 17:40 - 2015-09-17 00:43 - 02028544 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RulesService.dll
- 2015-12-08 18:25 - 2015-11-24 23:17 - 00619008 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SignalsManager.dll
- 2015-09-01 11:31 - 2016-01-16 19:29 - 00035984 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\PEbiosinterface32.dll
- 2015-09-01 11:31 - 2015-07-01 22:06 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\ATKEX.dll
- 2015-10-28 15:06 - 2014-10-16 09:26 - 00622880 _____ () C:\Program Files (x86)\IObit\LiveUpdate\ProductStatistics.dll
- 2015-02-02 00:40 - 2014-10-11 00:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
- 2015-09-15 13:25 - 2015-09-15 13:25 - 01040144 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
- 2015-07-01 22:39 - 2015-12-08 20:53 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
- 2016-01-16 19:31 - 2016-01-16 19:31 - 00011264 _____ () C:\Users\Jack\AppData\Local\Temp\nsx8E0E.tmp\System.dll
- 2015-12-11 16:04 - 2015-10-30 19:59 - 00034768 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
- 2015-12-11 16:04 - 2015-10-30 20:00 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00022848 _____ () C:\Program Files (x86)\Dropbox\Client\Crypto.Random.OSRNG.winrandom.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00023352 _____ () C:\Program Files (x86)\Dropbox\Client\Crypto.Util._counter.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00042296 _____ () C:\Program Files (x86)\Dropbox\Client\Crypto.Cipher._AES.pyd
- 2015-12-11 16:04 - 2015-10-30 19:59 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
- 2015-12-11 16:04 - 2015-10-30 19:59 - 00093640 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
- 2015-12-11 16:04 - 2015-10-30 19:59 - 00018376 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00019760 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
- 2015-12-11 16:04 - 2015-10-30 20:00 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
- 2015-12-11 16:04 - 2015-10-30 19:59 - 00392144 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00381752 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
- 2015-12-11 16:04 - 2015-10-30 19:59 - 00692688 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
- 2015-12-11 16:04 - 2015-10-30 20:00 - 00109520 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 01737032 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00020808 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_python_x66cf7a7cx17a72769.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00021840 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_unicode_environ_win32_x8bf8e68bx9968e850.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00038696 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
- 2015-12-11 16:04 - 2015-10-30 20:00 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
- 2015-12-11 16:04 - 2015-10-30 20:00 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
- 2015-12-11 16:04 - 2015-10-30 20:00 - 00114640 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00021320 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_pywin_kernel32_xde9e4433x360333f0.pyd
- 2015-12-11 16:04 - 2015-10-30 20:00 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
- 2015-12-11 16:04 - 2015-10-30 20:00 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
- 2015-12-11 16:04 - 2015-10-30 20:00 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
- 2015-12-11 16:04 - 2015-10-30 20:00 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
- 2015-12-11 16:04 - 2015-10-30 20:00 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
- 2015-12-11 16:04 - 2015-10-30 20:00 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
- 2015-12-11 16:04 - 2015-10-30 20:00 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00024392 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
- 2015-12-11 16:04 - 2015-10-30 20:00 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
- 2015-12-11 16:04 - 2015-10-30 20:00 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00117056 _____ () C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00031568 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd
- 2015-10-02 00:56 - 2015-11-04 19:04 - 00293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00023376 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
- 2015-12-11 16:04 - 2015-10-30 19:59 - 00134608 _____ () C:\Program Files (x86)\Dropbox\Client\_elementtree.pyd
- 2015-12-11 16:04 - 2015-10-30 19:59 - 00134088 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
- 2015-12-11 16:04 - 2015-10-30 20:00 - 00240584 _____ () C:\Program Files (x86)\Dropbox\Client\jpegtran.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00020280 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00052024 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00021304 _____ () C:\Program Files (x86)\Dropbox\Client\Crypto.Util.strxor.pyd
- 2015-12-11 16:04 - 2015-10-30 20:00 - 00350152 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00084792 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
- 2015-12-11 16:04 - 2015-12-08 16:36 - 01826608 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
- 2015-12-11 16:04 - 2015-10-30 20:00 - 00083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 03891504 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 01950000 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00519984 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00133936 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00225080 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00207672 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00486704 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
- 2015-12-11 16:04 - 2015-12-08 16:36 - 00357680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
- 2015-07-29 19:59 - 2015-10-30 20:01 - 00019920 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick.2\qtquick2plugin.dll
- 2015-07-29 19:59 - 2015-10-30 20:00 - 00786904 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick\Controls\qtquickcontrolsplugin.dll
- 2015-07-29 19:59 - 2015-10-30 20:00 - 00063448 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick\Layouts\qquicklayoutsplugin.dll
- 2015-07-29 19:59 - 2015-10-30 20:00 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\QtQuick\Window.2\windowplugin.dll
- 2015-12-05 10:21 - 2015-12-05 10:21 - 00933056 ____R () C:\Program Files (x86)\Skype\Phone\ssScreenVVS2.dll
- 2013-02-12 03:31 - 2013-02-12 03:31 - 01241088 _____ () C:\Program Files (x86)\ManyCam\Bin\opencv_imgproc220.dll
- 2013-02-12 03:31 - 2013-02-12 03:31 - 02010624 _____ () C:\Program Files (x86)\ManyCam\Bin\opencv_core220.dll
- 2016-01-14 20:51 - 2016-01-12 11:35 - 01590088 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.111\libglesv2.dll
- 2016-01-14 20:51 - 2016-01-12 11:35 - 00087880 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.111\libegl.dll
- 2015-09-04 20:42 - 2015-09-04 20:42 - 00137728 _____ () C:\ProgramData\Razer\Synapse\CrashReporter\CrashRpt1402.dll
- 2015-09-15 11:44 - 2014-11-25 20:12 - 40622592 _____ () C:\Users\Jack\AppData\Local\razer\InGameEngine\cache\RzSynapse\cef\libcef.dll
- 2015-09-15 11:44 - 2014-11-25 20:12 - 40622592 _____ () C:\Users\Jack\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libcef.dll
- 2015-09-15 11:44 - 2014-11-25 20:12 - 00911360 _____ () C:\Users\Jack\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libglesv2.dll
- 2015-09-15 11:44 - 2014-11-25 20:12 - 00134144 _____ () C:\Users\Jack\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libegl.dll
- 2015-09-15 11:44 - 2014-11-25 20:12 - 00911360 _____ () C:\Users\Jack\AppData\Local\razer\InGameEngine\cache\RzSynapse\cef\libglesv2.dll
- 2015-09-15 11:44 - 2014-11-25 20:12 - 00134144 _____ () C:\Users\Jack\AppData\Local\razer\InGameEngine\cache\RzSynapse\cef\libegl.dll
- ==================== Alternate Data Streams (Whitelisted) =========
- (If an entry is included in the fixlist, only the ADS will be removed.)
- ==================== Safe Mode (Whitelisted) ===================
- (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
- ==================== EXE Association (Whitelisted) ===============
- (If an entry is included in the fixlist, the registry item will be restored to default or removed.)
- ==================== Internet Explorer trusted/restricted ===============
- (If an entry is included in the fixlist, it will be removed from the registry.)
- IE trusted site: HKU\S-1-5-21-4270532649-2185237214-901248356-1001\...\blank -> blank
- ==================== Hosts content: ==========================
- (If needed Hosts: directive could be included in the fixlist to reset Hosts.)
- 2015-05-23 08:06 - 2016-01-16 03:11 - 00000967 ____A C:\WINDOWS\system32\Drivers\etc\hosts
- 127.0.0.1 down.baidu2016.com
- 127.0.0.1 123.sogou.com
- 127.0.0.1 www.czzsyzgm.com
- 127.0.0.1 www.czzsyzxl.com
- ==================== Other Areas ============================
- (Currently there is no automatic fix for this section.)
- HKU\S-1-5-21-4270532649-2185237214-901248356-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Jack\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img13.jpg
- DNS Servers: 137.49.1.2 - 137.49.1.3
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
- Windows Firewall is enabled.
- ==================== MSCONFIG/TASK MANAGER disabled items ==
- (Currently there is no automatic fix for this section.)
- HKU\S-1-5-21-4270532649-2185237214-901248356-1001\...\StartupApproved\Run: => "Advanced SystemCare 8"
- HKU\S-1-5-21-4270532649-2185237214-901248356-1001\...\StartupApproved\Run: => "Icecream_Screen_Recorder_Prefetcher"
- ==================== FirewallRules (Whitelisted) ===============
- (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
- FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
- FirewallRules: [{EDC3061E-76D9-4955-B5B8-B29812304B2A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
- FirewallRules: [{803390E4-4AE3-4F32-95DA-65AA3AF90817}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
- FirewallRules: [{5FA29277-83A3-473F-9B51-A744F1F7DF9C}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
- FirewallRules: [{0D428439-076B-4F26-A663-0D417309627D}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
- FirewallRules: [{2BEE8F34-3923-4826-966D-6CC62F9E267D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
- FirewallRules: [{2A11DAEF-9670-47B8-8624-661CDD28925D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
- FirewallRules: [{CF33C3B0-E238-45FE-AD3C-E16E8A158611}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
- FirewallRules: [{038C888B-C4AA-4F40-9073-B246A1CC1AB3}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
- FirewallRules: [{BFDA45B1-1E43-401B-B81F-07374851BAC2}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
- FirewallRules: [{249A484E-B5B9-4DF1-9377-E52E37007AF7}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
- FirewallRules: [TCP Query User{60B7384D-CA5E-448C-9535-C99EE9EBF9D0}C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe
- FirewallRules: [UDP Query User{573ED8B9-8333-4F97-95F6-86152705EAB9}C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe
- FirewallRules: [{7594B7EC-C83D-448C-A1D1-46B9F10DD5E1}] => (Allow) C:\Users\Jack\AppData\Roaming\BitTorrent\BitTorrent.exe
- FirewallRules: [{41564F14-FE0E-4757-8935-6866AE06195A}] => (Allow) C:\Users\Jack\AppData\Roaming\BitTorrent\BitTorrent.exe
- FirewallRules: [{93D58FBF-CBFC-4ED7-B2C5-88E266C30B18}] => (Allow) C:\Users\Jack\AppData\Roaming\BitTorrent\BitTorrent.exe
- FirewallRules: [{E2C34F3F-8EFA-4B66-8F64-6377C8969D2F}] => (Allow) C:\Users\Jack\AppData\Roaming\BitTorrent\BitTorrent.exe
- FirewallRules: [{A600211A-0306-4B03-9363-483BE08AF666}] => (Allow) C:\Users\Jack\AppData\Roaming\BitTorrent\BitTorrent.exe
- FirewallRules: [{BAA4D9AC-B142-4A00-9A11-AB8AA1455C29}] => (Allow) C:\Users\Jack\AppData\Roaming\BitTorrent\BitTorrent.exe
- FirewallRules: [{45830B09-EF82-4DFD-85C2-955E0D80E0A6}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
- FirewallRules: [TCP Query User{AA2CE94C-4617-4FAC-A19F-58E1D4C673F2}C:\program files (x86)\brackets\node.exe] => (Allow) C:\program files (x86)\brackets\node.exe
- FirewallRules: [UDP Query User{65A1FC56-B447-4B8F-84DD-708270D80AE9}C:\program files (x86)\brackets\node.exe] => (Allow) C:\program files (x86)\brackets\node.exe
- FirewallRules: [{0430F3E9-F055-4470-BFAE-0D9F9A6A9DF9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
- FirewallRules: [{0467BBB3-DA14-4902-BA6C-37E97793FA4E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
- FirewallRules: [{9B5950FE-11B6-4F84-996F-BBCE48393FAE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
- FirewallRules: [{0605C0FD-711E-475F-BBE1-B032DF881ECD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
- FirewallRules: [{D4E45E7A-E057-4056-9F04-3765877D5803}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
- FirewallRules: [TCP Query User{91CB4875-6E79-4690-AB43-A72D3C48AD41}C:\program files (x86)\heroes of the storm\versions\base37569\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base37569\heroesofthestorm_x64.exe
- FirewallRules: [UDP Query User{3D2EBA90-C82F-41BF-A2D8-43A10DA2A094}C:\program files (x86)\heroes of the storm\versions\base37569\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base37569\heroesofthestorm_x64.exe
- FirewallRules: [{60687179-C024-41B7-B647-2971294BB06E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
- FirewallRules: [{985B3F45-0926-4DAF-B50B-AC28EA9C503A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
- FirewallRules: [{874C65B3-E5FF-4464-8371-D133532793CA}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
- FirewallRules: [{91E17B57-6C0D-4BAE-A339-86632698DEA0}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
- FirewallRules: [{5A9884DB-DE26-4C5F-A13C-F9265AB537D0}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
- FirewallRules: [TCP Query User{7960131E-7F22-47D8-8BD7-9BEF99A74FD6}C:\users\jack\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jack\appdata\roaming\spotify\spotify.exe
- FirewallRules: [UDP Query User{AF9AA6A7-B803-4535-BC14-0439356E7CE8}C:\users\jack\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jack\appdata\roaming\spotify\spotify.exe
- FirewallRules: [TCP Query User{F49B980C-D65E-466E-B979-D844CE9849AD}C:\users\jack\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jack\appdata\roaming\spotify\spotify.exe
- FirewallRules: [UDP Query User{DBDC2192-4BEA-4A57-B0C4-52074A5EB811}C:\users\jack\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jack\appdata\roaming\spotify\spotify.exe
- FirewallRules: [TCP Query User{1D8118AA-DDC5-4FEE-A895-F1D9788C53BF}C:\program files (x86)\brackets\node.exe] => (Allow) C:\program files (x86)\brackets\node.exe
- FirewallRules: [UDP Query User{1023E6C2-FA5E-4882-9A74-DAA8C7D27B48}C:\program files (x86)\brackets\node.exe] => (Allow) C:\program files (x86)\brackets\node.exe
- FirewallRules: [TCP Query User{27F30295-1B68-4108-A9E6-7282BD3B7876}C:\program files (x86)\heroes of the storm\versions\base37795\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base37795\heroesofthestorm_x64.exe
- FirewallRules: [UDP Query User{2B07C4D5-FD63-4282-A28A-589443798A53}C:\program files (x86)\heroes of the storm\versions\base37795\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base37795\heroesofthestorm_x64.exe
- FirewallRules: [{31319B96-9DA0-48AF-8A6E-CD7C0216342E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe
- FirewallRules: [{C019811D-FDDA-4B63-B810-45BDDD4D4EC9}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
- FirewallRules: [{78E2B55F-8B11-4A80-A880-C469DA7D1FC9}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
- FirewallRules: [{7B08BD59-6D6C-484A-8345-5CE7F96AEAF3}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
- FirewallRules: [{E6A4E9E0-B49A-4376-A0B3-E2D7FDC9759F}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
- FirewallRules: [{C8FE332C-8C51-4146-B4E4-383D5A4953E5}] => (Allow) J:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe
- FirewallRules: [{97775B89-B046-4BB2-B16D-AC35FFA2D15D}] => (Allow) J:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe
- FirewallRules: [TCP Query User{58525417-3FA8-4C49-A0F6-BCFDBE8F8EFD}C:\program files (x86)\heroes of the storm\versions\base38793\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base38793\heroesofthestorm_x64.exe
- FirewallRules: [UDP Query User{0AAC4A3F-F2E7-43DC-A982-1D2B86B94834}C:\program files (x86)\heroes of the storm\versions\base38793\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base38793\heroesofthestorm_x64.exe
- FirewallRules: [{E1176879-9E34-41B4-8C6C-F5FB4AE376D7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
- FirewallRules: [{4CBA5352-D74D-41F0-A78A-FE09FEECA84D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
- FirewallRules: [TCP Query User{A4D66EC8-7576-4DBF-BDB0-1B4AEC6D51BF}C:\program files (x86)\robotask\robotask.exe] => (Allow) C:\program files (x86)\robotask\robotask.exe
- FirewallRules: [UDP Query User{2C260757-9FE6-4F27-AB80-5D15C74EA652}C:\program files (x86)\robotask\robotask.exe] => (Allow) C:\program files (x86)\robotask\robotask.exe
- FirewallRules: [{06CAFB7B-D521-4E50-BEE8-4005470F4B46}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
- FirewallRules: [{38DEB134-3475-4591-A3FB-2CE513D034EB}] => (Allow) J:\Visual Studio\Common7\IDE\devenv.exe
- FirewallRules: [TCP Query User{67B04B20-DF24-4E45-BEF4-A857A9E4F65E}C:\users\jack\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe] => (Allow) C:\users\jack\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe
- FirewallRules: [{B72BA10C-7B46-4307-B265-5CA98E0D5CD4}] => (Allow) J:\Droid4X\Droid4X.exe
- FirewallRules: [{E38E6D46-DF4E-42B0-A80B-6CD569A7E11E}] => (Allow) J:\Droid4X\download\MiniThunderPlatform.exe
- FirewallRules: [{55D74584-B9AF-4B21-988E-2BACE243D93E}] => (Allow) J:\Droid4X\download\MiniThunderPlatform.exe
- FirewallRules: [{FC00BDBE-9890-429E-AC89-BE1BAB3346AE}] => (Allow) C:\Program Files\Oracle\VirtualBox\vboxheadless.exe
- FirewallRules: [TCP Query User{61EF61D5-A710-4572-8861-2C75017ACCE8}C:\program files\qtox\bin\qtox.exe] => (Allow) C:\program files\qtox\bin\qtox.exe
- FirewallRules: [UDP Query User{BB42A21D-788B-452B-958B-E7CB161C6865}C:\program files\qtox\bin\qtox.exe] => (Allow) C:\program files\qtox\bin\qtox.exe
- FirewallRules: [TCP Query User{811EADE9-13F1-4124-887D-B0ED9B89C09D}C:\program files (x86)\robotask\robotask.exe] => (Allow) C:\program files (x86)\robotask\robotask.exe
- FirewallRules: [UDP Query User{478EFDF2-0181-4295-BB9F-B342D2B416B6}C:\program files (x86)\robotask\robotask.exe] => (Allow) C:\program files (x86)\robotask\robotask.exe
- FirewallRules: [TCP Query User{B8CD351C-5BBC-4C0A-B43E-9441633DF2B4}C:\program files\qtox\bin\qtox.exe] => (Allow) C:\program files\qtox\bin\qtox.exe
- FirewallRules: [UDP Query User{3DEA5D4F-FF92-4D03-AC6B-1739BFF705A6}C:\program files\qtox\bin\qtox.exe] => (Allow) C:\program files\qtox\bin\qtox.exe
- FirewallRules: [{E8658F10-997D-4217-BC55-BBF6D85F8193}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
- FirewallRules: [{0B9EE630-E588-47D0-AC16-C8B444709AB4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
- FirewallRules: [{CAAFC026-4DE2-48E2-B41E-A4D945F3FEE3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
- FirewallRules: [{F8BAB901-051D-4313-9419-2CF69E5B146A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
- FirewallRules: [TCP Query User{FC5B9D08-295A-4C77-8B52-045F4B41E326}C:\program files (x86)\heroes of the storm\versions\base39709\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base39709\heroesofthestorm_x64.exe
- FirewallRules: [UDP Query User{152E19DD-8149-4FAC-B16C-C822F8E46BEE}C:\program files (x86)\heroes of the storm\versions\base39709\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base39709\heroesofthestorm_x64.exe
- FirewallRules: [{35DFAF47-488E-4DC7-99A7-A4B5F6B1AE98}] => (Allow) C:\Program Files (x86)\RaidCall.RU\rcplugin.exe
- FirewallRules: [{8640F11F-169A-48F5-8499-7ACC11E7D952}] => (Allow) C:\Program Files (x86)\RaidCall.RU\rcplugin.exe
- FirewallRules: [TCP Query User{EFC231C6-DAA6-44C3-AD59-41F076F199F8}J:\games\heroes of the storm\versions\base39709\heroesofthestorm_x64.exe] => (Allow) J:\games\heroes of the storm\versions\base39709\heroesofthestorm_x64.exe
- FirewallRules: [UDP Query User{5D9D8D71-74BF-45CF-BDBA-C106DE18506D}J:\games\heroes of the storm\versions\base39709\heroesofthestorm_x64.exe] => (Allow) J:\games\heroes of the storm\versions\base39709\heroesofthestorm_x64.exe
- FirewallRules: [{F940B9F4-0085-40C6-8CAE-4B1263B6D117}] => (Allow) C:\Program Files (x86)\Fiddler2\Fiddler.exe
- FirewallRules: [{C4B598C4-ADCC-4B29-8880-66F8808974A5}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- FirewallRules: [TCP Query User{B6061002-0292-4218-82FC-8483CF26F415}C:\users\jack\appdata\local\temp\joie8dc.tmp\join.me.exe] => (Allow) C:\users\jack\appdata\local\temp\joie8dc.tmp\join.me.exe
- FirewallRules: [UDP Query User{54D1E19D-06BC-4D78-991A-5FFD2AFB3543}C:\users\jack\appdata\local\temp\joie8dc.tmp\join.me.exe] => (Allow) C:\users\jack\appdata\local\temp\joie8dc.tmp\join.me.exe
- FirewallRules: [{29B0D23A-CFE4-4D8E-99FB-572667EC2216}] => (Allow) C:\WINDOWS\system32\rundll32.exe
- FirewallRules: [{6CAC85D1-2E4E-4171-9711-33EBAD5FF341}] => (Allow) C:\Program Files (x86)\teeth\zonked.exe
- FirewallRules: [{80ED1D79-E224-4FC9-ABBD-82C49BF8E147}] => (Allow) C:\Program Files (x86)\teeth\zonked.exe
- FirewallRules: [{0C264D62-8A4B-4CFD-9AE6-A0691CCF3BFF}] => (Allow) C:\Program Files (x86)\teeth\getcap.exe
- FirewallRules: [{AB093EA0-2241-41F7-9FFD-3FAE5B6FC069}] => (Allow) C:\Program Files (x86)\teeth\getcap.exe
- FirewallRules: [{7D49E2B6-6057-40E7-871A-B5AA85811B88}] => (Allow) C:\a\winonit.exe
- FirewallRules: [{36E217DF-3A14-42C7-A2BB-BBC8528E8E79}] => (Allow) C:\a\winonit.exe
- FirewallRules: [{BF67187D-47AD-44BA-B0DD-251B425C9C4B}] => (Allow) C:\Program Files (x86)\teeth\industry.exe
- FirewallRules: [{C30EDC6B-9EAC-49B7-A667-A1201E0A865D}] => (Allow) C:\Program Files (x86)\teeth\industry.exe
- FirewallRules: [{BBD7E13C-2D40-46E9-A785-A5215AD18299}] => (Allow) C:\a\vchk.exe
- FirewallRules: [{E2CE3C29-B074-47B3-8007-97A0E59DD10E}] => (Allow) C:\a\vchk.exe
- FirewallRules: [{426425C4-BECF-4C72-A7BF-4ACFE92FEAD7}] => (Allow) C:\a\0otOgcx0LoTaRkvTUvfs-ni-2016-01-16-ni-10924-ni-1.exe
- FirewallRules: [{B3DF3EEF-4471-4A9A-9B29-CF32FFDDAF5F}] => (Allow) C:\a\0otOgcx0LoTaRkvTUvfs-ni-2016-01-16-ni-10924-ni-1.exe
- FirewallRules: [{B7BC96DD-1055-4093-8E75-5A30ABB7BE7F}] => (Allow) C:\Program Files (x86)\nutritious\raspy.exe
- FirewallRules: [{EC03514C-AC42-437E-ACB8-8FF3D2D9D8F3}] => (Allow) C:\Program Files (x86)\nutritious\raspy.exe
- FirewallRules: [{DC0A7DA1-0B77-4CA4-A9D7-74E23D59BAD6}] => (Allow) C:\Program Files (x86)\cent\class.exe
- FirewallRules: [{4B6B42B4-BC26-4386-B637-01A6E98D4B97}] => (Allow) C:\Program Files (x86)\cent\class.exe
- FirewallRules: [{DB71DF95-1F6A-40DA-8868-A49993A07342}] => (Allow) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRServer.exe
- FirewallRules: [{F52D336B-6D70-4FBA-A1D1-B640CB8E72CD}] => (Allow) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRFeature.exe
- FirewallRules: [{B5E88BE8-5C24-4CFD-B52F-2E5B0B768379}] => (Allow) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\DataProxy.exe
- ==================== Restore Points =========================
- 18-01-2016 08:52:47 Windows Update
- ==================== Faulty Device Manager Devices =============
- ==================== Event log errors: =========================
- Application errors:
- ==================
- Error: (01/18/2016 08:52:48 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
- Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.
- Details:
- AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.
- System Error:
- Access is denied.
- .
- Error: (01/17/2016 06:12:15 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: WIN-HBBVHMEMD8B)
- Description: Activation of app Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information.
- Error: (01/17/2016 05:31:51 PM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: m->NextScheduledSPRetry 1312
- Error: (01/17/2016 05:31:51 PM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: m->NextScheduledEvent 1312
- Error: (01/17/2016 05:31:51 PM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: Continuously busy for more than a second
- Error: (01/17/2016 05:21:03 PM) (Source: ESENT) (EventID: 413) (User: )
- Description: SettingSyncHost (1476) Unable to create a new logfile because the database cannot write to the log drive. The drive may be read-only, out of disk space, misconfigured, or corrupted. Error -1032.
- Error: (01/17/2016 05:21:03 PM) (Source: ESENT) (EventID: 488) (User: )
- Description: SettingSyncHost (1476) An attempt to create the file "C:\WINDOWS\system32\edbtmp.log" failed with system error 5 (0x00000005): "Access is denied. ". The create file operation will fail with error -1032 (0xfffffbf8).
- Error: (01/17/2016 05:20:53 PM) (Source: ESENT) (EventID: 413) (User: )
- Description: SettingSyncHost (1476) Unable to create a new logfile because the database cannot write to the log drive. The drive may be read-only, out of disk space, misconfigured, or corrupted. Error -1032.
- Error: (01/17/2016 05:20:53 PM) (Source: ESENT) (EventID: 488) (User: )
- Description: SettingSyncHost (1476) An attempt to create the file "C:\WINDOWS\system32\edbtmp.log" failed with system error 5 (0x00000005): "Access is denied. ". The create file operation will fail with error -1032 (0xfffffbf8).
- Error: (01/17/2016 05:20:42 PM) (Source: ESENT) (EventID: 413) (User: )
- Description: SettingSyncHost (1476) Unable to create a new logfile because the database cannot write to the log drive. The drive may be read-only, out of disk space, misconfigured, or corrupted. Error -1032.
- System errors:
- =============
- Error: (01/18/2016 09:27:32 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
- Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 10.
- Error: (01/18/2016 09:27:31 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
- Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 10.
- Error: (01/18/2016 09:09:01 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
- Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 10.
- Error: (01/18/2016 09:09:01 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
- Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 10.
- Error: (01/18/2016 07:37:01 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
- Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 10.
- Error: (01/18/2016 07:37:01 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
- Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 10.
- Error: (01/18/2016 07:27:40 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
- Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 10.
- Error: (01/18/2016 07:27:40 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
- Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 10.
- Error: (01/18/2016 07:26:15 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
- Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 10.
- Error: (01/18/2016 07:26:15 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
- Description: A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 10.
- CodeIntegrity:
- ===================================
- Date: 2015-12-28 15:59:38.381
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
- Date: 2015-12-28 15:59:38.367
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
- Date: 2015-12-24 01:06:30.700
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
- Date: 2015-12-24 01:06:30.683
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
- Date: 2015-12-24 00:44:35.750
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
- Date: 2015-12-24 00:44:35.735
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
- Date: 2015-12-23 15:52:22.232
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
- Date: 2015-12-23 15:52:22.217
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
- Date: 2015-12-23 03:54:58.697
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
- Date: 2015-12-23 03:54:58.682
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
- ==================== Memory info ===========================
- Processor: Intel(R) Core(TM) i5-4460 CPU @ 3.20GHz
- Percentage of memory in use: 45%
- Total physical RAM: 16327.19 MB
- Available physical RAM: 8916.36 MB
- Total Virtual: 22912.07 MB
- Available Virtual: 6413.56 MB
- ==================== Drives ================================
- Drive c: () (Fixed) (Total:111.01 GB) (Free:4.19 GB) NTFS
- Drive e: (User Guide) (CDROM) (Total:0.32 GB) (Free:0 GB) CDFS
- Drive j: (pancakes) (Fixed) (Total:232.88 GB) (Free:190.73 GB) NTFS
- ==================== MBR & Partition Table ==================
- ========================================================
- Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 883B339F)
- Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
- Partition 2: (Not Active) - (Size=111 GB) - (Type=07 NTFS)
- Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
- ========================================================
- Disk: 1 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 5AE8977F)
- Partition 1: (Active) - (Size=232.9 GB) - (Type=07 NTFS)
- ==================== End of Addition.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment