API tools faq
paste
Guest User

Untitled

a guest
Oct 22nd, 2024
162
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 83.25 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-09-2024
  2. Ran by User (ATTENTION: The user is not administrator) on DESKTOP-DOMRM6I (Micro-Star International Co., Ltd. MS-7D15) (23-10-2024 09:51:45)
  3. Running from C:\Users\User\Downloads\FRST64.exe
  4. Loaded Profiles: User
  5. Platform: Microsoft Windows 11 IoT Enterprise LTSC Version 24H2 26100.2033 (X64) Language: English (United States)
  6. Default browser: "C:\Program Files\Waterfox\waterfox.exe" -osint -url "%1"
  7. Boot Mode: Normal
  8.  
  9. ==================== Processes (Whitelisted) =================
  10.  
  11. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  12.  
  13. (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2440.9.0_x64__cv1g1gvanyjgm\WhatsApp.exe
  14. (AnyDesk Software GmbH -> AnyDesk Software GmbH) C:\Program Files\AnyDesk\AnyDesk.exe
  15. (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security App\bdagent.exe
  16. (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security App\seccenter.exe
  17. (Broadcom Inc -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe
  18. (BrowserWorks Ltd -> BrowserWorks Ltd) C:\Program Files\Waterfox\waterfox.exe <33>
  19. (C:\Program Files\LGHUB\lghub_agent.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\logi_crashpad_handler.exe
  20. (C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_agent.exe
  21. (C:\Program Files\WindowsApps\MSTeams_24257.205.3165.2029_x64__8wekyb3d8bbwe\ms-teams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\129.0.2792.89\msedgewebview2.exe <9>
  22. (Cisco Systems, Inc. -> Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
  23. (Discord Inc. -> Discord Inc.) C:\Users\User\AppData\Local\Discord\app-1.0.9168\Discord.exe <6>
  24. (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5635.0_x64__8j3eq9eme6ctt\IGCC.exe
  25. (explorer.exe ->) () [File not signed] C:\Program Files (x86)\OpenDNS Updater\OpenDNSUpdater.exe
  26. (explorer.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
  27. (explorer.exe ->) (Brave Software, Inc. -> Brave Software, Inc.) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe <16>
  28. (explorer.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe
  29. (explorer.exe ->) (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\ReflectMonitor.exe
  30. (explorer.exe ->) (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\ReflectUI.exe
  31. (explorer.exe ->) (Private Internet Access, Inc. -> Private Internet Access Incorporated) C:\Program Files\Private Internet Access\pia-client.exe
  32. (explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_1803724721d1a34c\RtkAudUService64.exe
  33. (explorer.exe ->) (Simnet Bilgisayar Yazılım Hiz. San. ve Tic. Ltd. Şti. -> Simnet Ltd.) C:\Program Files (x86)\Simnet\Simple Sticky Notes\ssn.exe
  34. (explorer.exe ->) (SoftEther Corporation -> SoftEther VPN Project at University of Tsukuba, Japan.) C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe
  35. (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_c136a13c1e179573\igfxEMN.exe
  36. (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
  37. (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
  38. (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\MSTeams_24257.205.3165.2029_x64__8wekyb3d8bbwe\ms-teams.exe <2>
  39. (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
  40. (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
  41. (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\InputMethod\CHS\ChsIME.exe
  42. (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
  43. (Razer USA Ltd. -> ) C:\Program Files (x86)\Razer\Synapse3\UserProcess\Razer Synapse Service Process.exe
  44. (Reason Software Company Inc. -> Reason Software Company Inc.) C:\Program Files (x86)\Unchecky\bin\unchecky_bg.exe
  45. (Safer-Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
  46. (sihost.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5635.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe
  47. (sihost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\ShellHost.exe
  48. (式恕堂) [File not signed] C:\Program Files (x86)\Rime\weasel-0.15.0\WeaselServer.exe
  49. Failed to access process -> AggregatorHost.exe
  50. Failed to access process -> AppleMobileDeviceService.exe
  51. Failed to access process -> armsvc.exe
  52. Failed to access process -> bdntwrk.exe
  53. Failed to access process -> bdredline.exe
  54. Failed to access process -> bdredline.exe
  55. Failed to access process -> bdservicehost.exe
  56. Failed to access process -> bdservicehost.exe
  57. Failed to access process -> bdservicehost.exe
  58. Failed to access process -> bdservicehost.exe
  59. Failed to access process -> bdservicehost.exe
  60. Failed to access process -> BraveCrashHandler.exe
  61. Failed to access process -> BraveCrashHandler64.exe
  62. Failed to access process -> conhost.exe
  63. Failed to access process -> csrss.exe
  64. Failed to access process -> csrss.exe
  65. Failed to access process -> dasHost.exe
  66. Failed to access process -> dasHost.exe
  67. Failed to access process -> DiscoverySrv.exe
  68. Failed to access process -> dwm.exe
  69. Failed to access process -> fontdrvhost.exe
  70. Failed to access process -> fontdrvhost.exe
  71. Failed to access process -> GameManagerService.exe
  72. Failed to access process -> helperservice.exe
  73. Failed to access process -> igfxCUIServiceN.exe
  74. Failed to access process -> IntelCpHDCPSvc.exe
  75. Failed to access process -> iPodService.exe
  76. Failed to access process -> IPROSetMonitor.exe
  77. Failed to access process -> jhi_service.exe
  78. Failed to access process -> lghub_updater.exe
  79. Failed to access process -> logi_crashpad_handler.exe
  80. Failed to access process -> logi_lamparray_service.exe
  81. Failed to access process -> LsaIso.exe
  82. Failed to access process -> lsass.exe
  83. Failed to access process -> MacriumService.exe
  84. Failed to access process -> MBAMService.exe
  85. Failed to access process -> mDNSResponder.exe
  86. Failed to access process -> MoUsoCoreWorker.exe
  87. Failed to access process -> NovabenchService.exe
  88. Failed to access process -> OfficeClickToRun.exe
  89. Failed to access process -> OneApp.IGCC.WinService.exe
  90. Failed to access process -> pia-service.exe
  91. Failed to access process -> PresentationFontCache.exe
  92. Failed to access process -> ProductAgentService.exe
  93. Failed to access process -> Razer Synapse Service.exe
  94. Failed to access process -> RazerCentralService.exe
  95. Failed to access process -> RtkAudUService64.exe
  96. Failed to access process -> SASCore64.exe
  97. Failed to access process -> SbieSvc.exe
  98. Failed to access process -> SDFSSvc.exe
  99. Failed to access process -> SDUpdSvc.exe
  100. Failed to access process -> SearchIndexer.exe
  101. Failed to access process -> SearchProtocolHost.exe
  102. Failed to access process -> services.exe
  103. Failed to access process -> smss.exe
  104. Failed to access process -> spoolsv.exe
  105. Failed to access process -> ss_conn_service.exe
  106. Failed to access process -> ss_conn_service2.exe
  107. Failed to access process -> svchost.exe
  108. Failed to access process -> svchost.exe
  109. Failed to access process -> svchost.exe
  110. Failed to access process -> svchost.exe
  111. Failed to access process -> svchost.exe
  112. Failed to access process -> svchost.exe
  113. Failed to access process -> svchost.exe
  114. Failed to access process -> svchost.exe
  115. Failed to access process -> svchost.exe
  116. Failed to access process -> svchost.exe
  117. Failed to access process -> svchost.exe
  118. Failed to access process -> svchost.exe
  119. Failed to access process -> svchost.exe
  120. Failed to access process -> svchost.exe
  121. Failed to access process -> svchost.exe
  122. Failed to access process -> svchost.exe
  123. Failed to access process -> svchost.exe
  124. Failed to access process -> svchost.exe
  125. Failed to access process -> svchost.exe
  126. Failed to access process -> svchost.exe
  127. Failed to access process -> svchost.exe
  128. Failed to access process -> svchost.exe
  129. Failed to access process -> svchost.exe
  130. Failed to access process -> svchost.exe
  131. Failed to access process -> svchost.exe
  132. Failed to access process -> svchost.exe
  133. Failed to access process -> svchost.exe
  134. Failed to access process -> svchost.exe
  135. Failed to access process -> svchost.exe
  136. Failed to access process -> svchost.exe
  137. Failed to access process -> svchost.exe
  138. Failed to access process -> svchost.exe
  139. Failed to access process -> svchost.exe
  140. Failed to access process -> svchost.exe
  141. Failed to access process -> svchost.exe
  142. Failed to access process -> svchost.exe
  143. Failed to access process -> svchost.exe
  144. Failed to access process -> svchost.exe
  145. Failed to access process -> svchost.exe
  146. Failed to access process -> svchost.exe
  147. Failed to access process -> svchost.exe
  148. Failed to access process -> svchost.exe
  149. Failed to access process -> svchost.exe
  150. Failed to access process -> svchost.exe
  151. Failed to access process -> svchost.exe
  152. Failed to access process -> svchost.exe
  153. Failed to access process -> svchost.exe
  154. Failed to access process -> svchost.exe
  155. Failed to access process -> svchost.exe
  156. Failed to access process -> svchost.exe
  157. Failed to access process -> svchost.exe
  158. Failed to access process -> svchost.exe
  159. Failed to access process -> svchost.exe
  160. Failed to access process -> svchost.exe
  161. Failed to access process -> svchost.exe
  162. Failed to access process -> svchost.exe
  163. Failed to access process -> svchost.exe
  164. Failed to access process -> svchost.exe
  165. Failed to access process -> svchost.exe
  166. Failed to access process -> svchost.exe
  167. Failed to access process -> svchost.exe
  168. Failed to access process -> svchost.exe
  169. Failed to access process -> svchost.exe
  170. Failed to access process -> svchost.exe
  171. Failed to access process -> svchost.exe
  172. Failed to access process -> svchost.exe
  173. Failed to access process -> svchost.exe
  174. Failed to access process -> svchost.exe
  175. Failed to access process -> svchost.exe
  176. Failed to access process -> svchost.exe
  177. Failed to access process -> TeamViewer_Service.exe
  178. Failed to access process -> TeraCopyService.exe
  179. Failed to access process -> unchecky_svc.exe
  180. Failed to access process -> updatesrv.exe
  181. Failed to access process -> vmnat.exe
  182. Failed to access process -> vmnetdhcp.exe
  183. Failed to access process -> vmware-authd.exe
  184. Failed to access process -> vmware-usbarbitrator64.exe
  185. Failed to access process -> vpnagent.exe
  186. Failed to access process -> vpnclient_x64.exe
  187. Failed to access process -> wininit.exe
  188. Failed to access process -> winlogon.exe
  189. Failed to access process -> WmiPrvSE.exe
  190. Failed to access process -> WMIRegistrationService.exe
  191. Failed to access process -> wsccommunicator.exe
  192. Failed to access process -> wslservice.exe
  193.  
  194. ==================== Registry (Whitelisted) ===================
  195.  
  196. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  197.  
  198. HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
  199. HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_1803724721d1a34c\RtkAudUService64.exe [1945544 2024-02-28] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
  200. HKLM\...\Run: [SoftEther VPN Client UI Helper] => C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe [6018112 2022-01-30] (SoftEther Corporation -> SoftEther VPN Project at University of Tsukuba, Japan.)
  201. HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender Security App\bdagent.exe [1088224 2024-10-22] (Bitdefender SRL -> Bitdefender)
  202. HKLM\...\Run: [Reflect UI] => C:\Program Files\Macrium\Common\ReflectUI.exe [11859680 2023-11-30] (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd)
  203. HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [369504 2024-08-21] (Apple Inc. -> Apple Inc.)
  204. HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [5267168 2021-10-05] (Adobe Inc. -> Adobe Systems Inc.)
  205. HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [1711896 2021-07-21] (Cisco Systems, Inc. -> Cisco Systems, Inc.)
  206. HKLM-x32\...\Run: [WeaselServer] => C:\Program Files (x86)\Rime\weasel-0.15.0\WeaselServer.exe [2342400 2023-06-07] (式恕堂) [File not signed]
  207. HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752216 2024-06-05] (Oracle America, Inc. -> Oracle Corporation)
  208. HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5109624 2023-01-23] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
  209. HKLM-x32\...\Run: [vmware-tray.exe] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [114040 2024-10-03] (Broadcom Inc -> VMware, Inc.)
  210. HKLM\...\RunOnce: [msedge_cleanup_{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}] => C:\Program Files (x86)\Microsoft\EdgeWebView\Application\129.0.2792.89\Installer\setup.exe [6927952 2024-10-12] (Microsoft Corporation -> Microsoft Corporation)
  211. HKLM-x32\...\RunOnce: [CleanUp RzS3Wizard] => C:\Program Files (x86)\Razer\RzS3WizardS3\RzInstallerDeletionS3.vbs [973 2020-02-17] () [File not signed]
  212. HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
  213. HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
  214. HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\Run: [LGHUB] => C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe [46525336 2024-09-24] (Logitech Inc -> Logitech, Inc.)
  215. HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\Run: [Simple Sticky Notes] => C:\Program Files (x86)\Simnet\Simple Sticky Notes\ssn.exe [852632 2024-09-15] (Simnet Bilgisayar Yazılım Hiz. San. ve Tic. Ltd. Şti. -> Simnet Ltd.)
  216. HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\Run: [OpenDNS Updater] => C:\Program Files (x86)\OpenDNS Updater\OpenDNSUpdater.exe [839680 2010-06-17] () [File not signed]
  217. HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\Run: [MicrosoftEdgeAutoLaunch_C46CFC0629905CC775E70B50EA8A519C] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3865656 2024-10-17] (Microsoft Corporation -> Microsoft Corporation)
  218. HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\Run: [Microsoft.Lists] => C:\Users\User\AppData\Local\Microsoft\OneDrive\24.192.0923.0006\Microsoft.SharePoint.exe [1025568 2024-10-19] (Microsoft Corporation -> Microsoft Corporation)
  219. HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [11587104 2024-09-27] (RealDefense LLC -> SUPERAntiSpyware)
  220. HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\Run: [Private Internet Access] => C:\Program Files\Private Internet Access\pia-client.exe [5281984 2024-03-27] (Private Internet Access, Inc. -> Private Internet Access Incorporated)
  221. HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\Run: [Synapse3] => [X]
  222. HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\Mystify.scr [176128 2024-07-29] (Microsoft Windows -> Microsoft Corporation)
  223. HKU\S-1-5-18\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3595016 2024-08-13] (Razer USA Ltd. -> Razer Inc.)
  224. HKLM\...\Windows x64\Print Processors\Canon TS3100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDDR.DLL [482816 2017-03-13] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
  225. HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\system32\AdobePDF.dll [65160 2021-10-05] (Adobe Inc. -> Adobe Systems Inc)
  226. HKLM\...\Print\Monitors\Virtual Port Monitor: C:\Windows\system32\VirtualMon.dll [225280 2024-10-17] (Microsoft Windows -> Microsoft Corporation)
  227. HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\129.0.6668.101\Installer\chrmstp.exe [2024-10-16] (Google LLC -> Google LLC)
  228. HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\130.1.71.114\Installer\chrmstp.exe [2024-10-18] (Brave Software, Inc. -> Brave Software, Inc.)
  229. HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
  230. HKLM\Software\...\Winlogon\GPExtensions: [{9F02E2F5-5A41-4D1A-B473-4617E84BC957}] -> C:\WINDOWS\system32\WindowsProtectedPrintConfiguration.dll [2024-10-17] (Microsoft Windows -> Microsoft Corporation)
  231. Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DeepL auto-start.lnk [2022-06-16]
  232. ShortcutTarget: DeepL auto-start.lnk -> C:\Users\User\AppData\Roaming\0install.net\desktop-integration\stubs\1eae01f3cdb5ff0ecf683b15a60a1489573c1188cb34abc205fcf7a924b4e54d\auto-start.exe () [File not signed]
  233. Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\pia-client.exe - Shortcut.lnk [2024-04-03]
  234. ShortcutTarget: pia-client.exe - Shortcut.lnk -> C:\Program Files\Private Internet Access\pia-client.exe (Private Internet Access, Inc. -> Private Internet Access Incorporated)
  235. Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2024-05-28]
  236. ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
  237. Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk [2023-01-22]
  238. ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) [File not signed]
  239. Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk [2022-04-03]
  240. ShortcutTarget: AnyDesk.lnk -> C:\Program Files\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
  241. BootExecute: autocheck autochk * sdnclean64.exe
  242. GroupPolicy: Restriction ? <==== ATTENTION
  243.  
  244. ==================== Scheduled Tasks (Whitelisted) =================
  245.  
  246. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  247.  
  248.  
  249. (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
  250.  
  251. Task: C:\WINDOWS\Tasks\MATLAB R2023a Startup Accelerator.job =>
  252.  
  253. ==================== Internet (Whitelisted) ====================
  254.  
  255. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  256.  
  257. Winsock: Catalog5 06 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
  258. Winsock: Catalog9 15 C:\WINDOWS\SysWOW64\vsocklib.dll [27688 2024-07-17] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom Inc.)
  259. Winsock: Catalog9 16 C:\WINDOWS\SysWOW64\vsocklib.dll [27688 2024-07-17] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom Inc.)
  260. Winsock: Catalog5-x64 06 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
  261. Winsock: Catalog9-x64 15 C:\Windows\system32\vsocklib.dll [31784 2024-07-17] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom Inc.)
  262. Winsock: Catalog9-x64 16 C:\Windows\system32\vsocklib.dll [31784 2024-07-17] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom Inc.)
  263. Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
  264. Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
  265. Tcpip\..\Interfaces\{0c295ba2-4678-44bf-9b3e-e3aef0f54f3b}: [NameServer] 8.8.8.8,8.8.4.4
  266. Tcpip\..\Interfaces\{0c295ba2-4678-44bf-9b3e-e3aef0f54f3b}: [DhcpNameServer] 192.168.0.1
  267. Tcpip\..\Interfaces\{2c883db3-d2a3-47f4-95f5-8af29fddb1b2}: [DhcpNameServer] 172.20.10.1
  268. Tcpip\..\Interfaces\{383524cd-95de-4ce2-9a75-fc21e877c6f7}: [NameServer] 8.8.8.8,8.8.4.4
  269. Tcpip\..\Interfaces\{383524cd-95de-4ce2-9a75-fc21e877c6f7}: [DhcpNameServer] 192.168.0.1
  270. Tcpip\..\Interfaces\{383524cd-95de-4ce2-9a75-fc21e877c6f7}: [DhcpDomain] home
  271.  
  272. Edge:
  273. =======
  274. Edge DefaultProfile: Default
  275. Edge Profile: C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default [2024-10-23]
  276. Edge DefaultSearchURL: Default -> {bing:baseURL}search?q={searchTerms}&{bing:cvid}{bing:msb}{google:assistedQueryStats}
  277. Edge Extension: (Flagmoji) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bnnhpohpnamnjhajbkgpmblleljodlhd [2023-08-08]
  278. Edge Extension: (Microsoft Rewards) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bnplfnhcidhhdapmblniehfaaompjlck [2024-06-26]
  279. Edge Extension: (View Background Image) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cegndknljaapfbnmfnagomhhgbajjibd [2024-07-05]
  280. Edge Extension: (Location Guard) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cfohepagpmnodfdmjliccbbigdkfcgia [2023-08-12]
  281. Edge Extension: (Picture-in-Picture Everywhere) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cmnlinjalaieggoebkmamaphjghpafhn [2023-08-08]
  282. Edge Extension: (Return YouTube Dislike) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gebbhagfogifgggkldgodflihgfeippi [2024-10-18]
  283. Edge Extension: (Google Docs Offline) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-10-11]
  284. Edge Extension: (Tampermonkey) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\iikmkjmpaadaobahmlepeloendndfphd [2024-05-11]
  285. Edge Extension: (Edge relevant text changes) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
  286. Edge Extension: (Video DownloadHelper) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmkaglaafmhbcpleggkmaliipiilhldn [2024-10-18]
  287. Edge Extension: (RevEye Reverse Image Search) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\keaaclcjhehbbapnphnmpiklalfhelgf [2024-09-02]
  288. Edge Extension: (Microsoft Edge DevTools Enhancements) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\kfbdpdaobnofkbopebjglnaadopfikhh [2023-12-15]
  289. Edge Extension: (ChatGPT) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\klailhpanlicjnhfkpngehoblknjamdg [2024-07-17]
  290. Edge Extension: (The cleaner - delete cookies and cache) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ogfjgagnmkiigilnoiabkbbajinanlbn [2023-08-08]
  291. Edge Extension: (Wandering Fields) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\opciacmmajmekmbihaheajbbhngilnci [2023-08-12]
  292. Edge Extension: (Auto Clicker - AutoFill [DEV]) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\pmckiknbinanfnmbichcncmfpbcfpocn [2024-01-25]
  293. Edge Profile: C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Guest Profile [2023-08-27]
  294. Edge Profile: C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2024-10-23]
  295. Edge Extension: (LibKey Nomad) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\aegommgkkknipcpebmcbepdapjdojiji [2024-10-22]
  296. Edge Extension: (Google Scholar PDF Reader) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\dahenjhkoodjbpjheillcadbppiidmhp [2024-10-19]
  297. Edge Extension: (Google Docs Offline) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-10-10]
  298. Edge Extension: (Edge relevant text changes) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-26]
  299.  
  300. FireFox:
  301. ========
  302. FF ProfilePath: C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User [2024-10-23]
  303. FF Homepage: Waterfox\Profiles\9xmptgoc.Default User -> chrome://browser/content/blanktab.html
  304. FF NetworkProxy: Waterfox\Profiles\9xmptgoc.Default User -> socks_remote_dns", true
  305. FF Notifications: Waterfox\Profiles\9xmptgoc.Default User -> hxxps://tinder.com; hxxps://web.whatsapp.com; hxxps://truthsocial.com
  306. FF Extension: (Chillaxing) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\[email protected] [2023-10-22]
  307. FF Extension: (Activate Reader View) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\@activatereaderview.xpi [2023-03-21]
  308. FF Extension: (Activist – Balanced) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\[email protected] [2024-10-21]
  309. FF Extension: (Ant Video downloader) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\[email protected] [2024-02-09]
  310. FF Extension: (Clear Site Cookies) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\[email protected] [2023-06-11]
  311. FF Extension: (Location Guard) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\[email protected] [2023-01-21]
  312. FF Extension: (Copy Selected Links) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\[email protected] [2022-12-12]
  313. FF Extension: (Bypass Paywalls Clean (c)) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\[email protected] [2024-04-08] [UpdateUrl:hxxps://gitlab.com/magnolia1234/bypass-paywalls-firefox-clean/-/raw/master/updates_custom.json]
  314. FF Extension: (Offline QR Code Generator) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\[email protected] [2024-09-13]
  315. FF Extension: (Simple Translate) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\[email protected] [2024-05-16]
  316. FF Extension: (No Name) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\tmp [2023-11-05] [not signed]
  317. FF Extension: (Video Background Play Fix) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\[email protected] [2023-07-26]
  318. FF Extension: (Wayback Machine) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\[email protected] [2023-07-17]
  319. FF Extension: (Flagfox) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2024-10-08]
  320. FF Extension: (Search by Image) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\{2e5ff8c8-32fe-46d0-9fc8-6b8986621f3c}.xpi [2024-07-01]
  321. FF Extension: (Private Internet Access) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\{3e4d2037-d300-4e95-859d-3cba866f46d3}.xpi [2024-10-07]
  322. FF Extension: (Last.fm Scrobbler for YouTube™) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\{4e09fe4d-835f-4d58-a7ec-0bbc19f0aeab}.xpi [2023-02-16]
  323. FF Extension: (Archive Page) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\{5b22cb75-8e43-4f2a-bb9b-1da0655ae564}.xpi [2023-11-13]
  324. FF Extension: (Return YouTube Dislike) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\{762f9885-5a13-4abd-9c77-433dcd38b8fd}.xpi [2024-08-29]
  325. FF Extension: (Absolute Right Click) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\{9350bc42-47fb-4598-ae0f-825e3dd9ceba}.xpi [2024-06-29]
  326. FF Extension: (User-Agent Switcher and Manager) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\{a6c4a591-f1b2-4f03-b3ff-767e5bedf4e7}.xpi [2024-06-01]
  327. FF Extension: (Auto Tab Discard) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\{c2c003ee-bd69-42a2-b0e9-6f34222cb046}.xpi [2022-12-20]
  328. FF Extension: (British English Dictionary (Darmeth)) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\{d187b435-812e-4813-a93e-edccc4118f9d}.xpi [2024-08-19]
  329. FF Extension: (Greasemonkey) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2024-08-08]
  330. FF Extension: (Copy Unicode URLs) - C:\Users\User\AppData\Roaming\Waterfox\Profiles\9xmptgoc.Default User\Extensions\{ec113e08-3560-4792-a123-26355ac2d26d}.xpi [2024-03-22]
  331. FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
  332. FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2021-02-14]
  333. FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
  334. FF Plugin: @java.com/DTPlugin,version=11.421.2 -> C:\Program Files\Java\jre1.8.0_421\bin\dtplugin\npDeployJava1.dll [2024-06-05] (Oracle America, Inc. -> Oracle Corporation)
  335. FF Plugin: @java.com/JavaPlugin,version=11.421.2 -> C:\Program Files\Java\jre1.8.0_421\bin\plugin2\npjp2.dll [2024-06-05] (Oracle America, Inc. -> Oracle Corporation)
  336. FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-08-17] (Microsoft Corporation -> Microsoft Corporation)
  337. FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-09] (VideoLAN -> VideoLAN)
  338. FF Plugin: @videolan.org/vlc,version=3.0.17.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-09] (VideoLAN -> VideoLAN)
  339. FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-09] (VideoLAN -> VideoLAN)
  340. FF Plugin: @videolan.org/vlc,version=3.0.19 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-09] (VideoLAN -> VideoLAN)
  341. FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-09] (VideoLAN -> VideoLAN)
  342. FF Plugin: @videolan.org/vlc,version=3.0.21 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-09] (VideoLAN -> VideoLAN)
  343. FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [No File]
  344. FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-08-17] (Microsoft Corporation -> Microsoft Corporation)
  345. FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
  346. FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2021-10-05] (Adobe Inc. -> Adobe Systems Inc.)
  347.  
  348. Chrome:
  349. =======
  350. CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2024-06-02]
  351. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-06-02]
  352. CHR Extension: (Google Docs Offline) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-02-29]
  353. CHR Extension: (Chrome Web Store Payments) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-07-22]
  354. CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
  355.  
  356. Opera:
  357. =======
  358. OPR DefaultProfile: Default
  359.  
  360. Brave:
  361. =======
  362. BRA DefaultProfile: Default
  363. BRA Profile: C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2024-10-23]
  364. BRA DefaultSearchKeyword: Default -> :g
  365. BRA Extension: (Google Translate) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2024-09-06]
  366. BRA Extension: (QR Code Generator) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\afpbjjgbdimpioenaedcjgkaigggcdpp [2024-06-06]
  367. BRA Extension: (View Background Image) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\cegndknljaapfbnmfnagomhhgbajjibd [2024-07-04]
  368. BRA Extension: (Location Guard) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\cfohepagpmnodfdmjliccbbigdkfcgia [2023-01-17]
  369. BRA Extension: (Tampermonkey) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2024-10-19]
  370. BRA Extension: (User-Agent Switcher for Chrome) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\djflhoibgkdhkhhcedjiklpkjnoahfmg [2024-06-06]
  371. BRA Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-10-13]
  372. BRA Extension: (Return YouTube Dislike) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\gebbhagfogifgggkldgodflihgfeippi [2024-10-18]
  373. BRA Extension: (Google Docs Offline) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-10-10]
  374. BRA Extension: (Web Scrobbler) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\hhinaapppaileiechjoiifaancjggfjm [2024-09-17]
  375. BRA Extension: (Clear Cookies, Storage, and Reload Page) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\ibmecniinmokioelonobooffbpgkeifm [2024-02-20]
  376. BRA Extension: (Private Internet Access) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\jplnlifepflhkbkgonidnobkakhmpnmh [2024-10-04]
  377. BRA Extension: (RevEye Reverse Image Search) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\keaaclcjhehbbapnphnmpiklalfhelgf [2024-09-02]
  378. BRA Extension: (Shazam: Find song names from your browser) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\mmioliijnhnoblpgimnlajmefafdfilb [2024-06-07]
  379. BRA Extension: (Bypass Paywalls Clean) - C:\Users\User\Downloads\bypass-paywalls-chrome-clean-master\bypass-paywalls-chrome-clean-master [2024-08-05] [UpdateUrl:hxxps://github.com/bpc-clone/bypass-paywalls-chrome-clean/raw/master/updates.xml] <==== ATTENTION
  380. BRA Profile: C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\Guest Profile [2023-06-07]
  381. BRA Extension: (Brave Ad Block Updater (Brave Ad Block First Party Filters (plaintext))) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2024-10-22]
  382. BRA Extension: (Brave Local Data Files Updater) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2024-10-23]
  383. BRA Extension: (Brave NTP background images) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2024-09-11]
  384. BRA Extension: (Brave Ad Block Updater (uBlock Annoyances List (used with Fanboy Annoyances List))) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfoofkaohomljmodljoameijbaichadj [2022-12-02]
  385. BRA Extension: (Brave Ad Block Updater (Fanboy's Mobile Notifications (plaintext))) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2024-10-23]
  386. BRA Extension: (Wallet Data Files Updater) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2024-01-23]
  387. BRA Extension: (Brave Ad Block Updater (EasyList Cookie (plaintext))) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2024-10-23]
  388. BRA Extension: (Brave Ad Block Updater (Default)) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2022-12-02]
  389. BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2024-07-21]
  390. BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2024-09-19]
  391. BRA Extension: (Brave NTP sponsored images) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\hlcinbnbfgoealjpgmoacabdkapmjjfj [2024-10-23]
  392. BRA Extension: (Brave Ad Block Updater (Brave Ad Block Updater (plaintext))) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2024-10-23]
  393. BRA Extension: (Brave SpeedReader Updater) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\jicbkmdloagakknpihibphagfckhjdih [2022-03-11]
  394. BRA Extension: (Brave Ads Resources) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\kklfafolbojbonkjgifmmkdmaaimminj [2024-09-11]
  395. BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2024-10-02]
  396. BRA Extension: (Brave Ad Block Updater (Brave Twitch Adblock Rules (plaintext))) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\mhccgcegedfkhdbfbgllfkkcjhgkoinc [2024-09-18]
  397. BRA Extension: (Brave Ads Resources) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\ocilmpijebaopmdifcomolmpigakocmo [2024-04-06]
  398. BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2023-10-26]
  399. BRA Extension: (Brave Ad Block Updater (uBlock Annoyances (used with Fanboy's Annoyances) (plaintext))) - C:\Users\User\AppData\Local\BraveSoftware\Brave-Browser\User Data\pnoagbonokhdnppohfeemefhjbbofplk [2024-05-17]
  400.  
  401. ==================== Services (Whitelisted) ===================
  402.  
  403. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  404.  
  405. R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [231456 2024-08-23] (RealDefense LLC -> SUPERAntiSpyware.com)
  406. R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-07-31] (Adobe Inc. -> Adobe Inc.)
  407. R2 AnyDesk; C:\Program Files\AnyDesk\AnyDesk.exe [4993864 2024-09-27] (AnyDesk Software GmbH -> AnyDesk Software GmbH)
  408. R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [103776 2024-08-27] (Apple Inc. -> Apple Inc.)
  409. S3 ApxSvc; C:\WINDOWS\System32\ApxSvc.dll [73728 2024-10-17] (Microsoft Windows -> Microsoft Corporation)
  410. R2 BDAppSrv; C:\Program Files\Bitdefender\Bitdefender Security App\bdservicehost.exe [851640 2024-10-22] (Bitdefender SRL -> Bitdefender)
  411. R2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [851640 2024-10-22] (Bitdefender SRL -> Bitdefender)
  412. R2 BDProtSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [851640 2024-10-22] (Bitdefender SRL -> Bitdefender)
  413. R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2946088 2023-07-20] (Bitdefender SRL -> Bitdefender)
  414. R2 bdredline_agent; C:\Program Files\Bitdefender Agent\redline\bdredline.exe [2574864 2023-07-20] (Bitdefender SRL -> Bitdefender)
  415. R2 BDSafepaySrv; C:\Program Files\Bitdefender\Bitdefender Security App\Safepay\bdservicehost.exe [851640 2024-10-22] (Bitdefender SRL -> Bitdefender)
  416. S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162456 2022-01-04] (Brave Software, Inc. -> BraveSoftware Inc.)
  417. S3 BraveElevationService; C:\Program Files\BraveSoftware\Brave-Browser\Application\130.1.71.114\elevation_service.exe [2730000 2024-10-17] (Brave Software, Inc. -> Brave Software, Inc.)
  418. S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162456 2022-01-04] (Brave Software, Inc. -> BraveSoftware Inc.)
  419. R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [14023760 2024-08-09] (Microsoft Corporation -> Microsoft Corporation)
  420. S3 EPMVssEaseusProvider; C:\Windows\system32\dllhost.exe /Processid:{FBA04F11-B49C-4E74-A63E-BCB06D52384D} [50504 2024-07-29] (Microsoft Windows -> Microsoft Corporation)
  421. R2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [11335576 2024-09-24] (Logitech Inc -> Logitech, Inc.)
  422. R3 lmhosts; C:\WINDOWS\System32\svchost.exe [88152 2024-07-29] (Microsoft Windows Publisher -> Microsoft Corporation)
  423. R3 lmhosts; C:\WINDOWS\SysWOW64\svchost.exe [53296 2024-04-01] (Microsoft Windows Publisher -> Microsoft Corporation)
  424. S3 LocalKdc; C:\WINDOWS\system32\localkdcsvc.dll [794624 2024-10-17] (Microsoft Windows -> Microsoft Corporation)
  425. R2 logi_lamparray_service; C:\WINDOWS\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_98f357adcde2292d\logi_lamparray_service.exe [10150392 2024-09-18] (Logitech Inc -> Logitech, Inc.)
  426. R2 MacriumService; C:\Program Files\Macrium\Common\MacriumService.exe [13004248 2023-11-30] (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd)
  427. R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9319296 2024-10-20] (Malwarebytes Inc. -> Malwarebytes)
  428. S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [3073888 2024-06-14] (Malwarebytes Inc. -> Malwarebytes)
  429. S3 NlaSvc; C:\WINDOWS\System32\svchost.exe [88152 2024-07-29] (Microsoft Windows Publisher -> Microsoft Corporation)
  430. S3 NlaSvc; C:\WINDOWS\SysWOW64\svchost.exe [53296 2024-04-01] (Microsoft Windows Publisher -> Microsoft Corporation)
  431. R2 NovabenchService; C:\Program Files\Novawave\Novabench\NovabenchService.exe [1229808 2020-08-30] (Novawave Inc. -> Novawave Inc.)
  432. R2 nsi; C:\WINDOWS\system32\svchost.exe [88152 2024-07-29] (Microsoft Windows Publisher -> Microsoft Corporation)
  433. R2 nsi; C:\WINDOWS\SysWOW64\svchost.exe [53296 2024-04-01] (Microsoft Windows Publisher -> Microsoft Corporation)
  434. S3 PrintDeviceConfigurationService; C:\WINDOWS\System32\PrintDeviceConfigurationService.dll [192512 2024-10-17] (Microsoft Windows -> Microsoft Corporation)
  435. S3 PrintScanBrokerService; C:\WINDOWS\System32\PrintScanBrokerService.dll [180224 2024-10-17] (Microsoft Windows -> Microsoft Corporation)
  436. R2 PrivateInternetAccessService; C:\Program Files\Private Internet Access\pia-service.exe [1397472 2024-03-27] (Private Internet Access, Inc. -> )
  437. S3 PrivateInternetAccessWireguard; C:\Program Files\Private Internet Access\pia-wgservice.exe [4455000 2024-03-27] (Private Internet Access, Inc. -> )
  438. R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [701808 2024-08-23] (Bitdefender SRL -> Bitdefender)
  439. R2 Razer Game Manager Service; C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [256264 2023-02-10] (Razer USA Ltd. -> Razer Inc)
  440. R2 Razer Synapse Service; C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe [298248 2024-08-13] (Razer USA Ltd. -> Razer Inc.)
  441. S3 refsdedupsvc; C:\WINDOWS\System32\ReFsDedupSvc.exe [2195456 2024-10-17] (Microsoft Windows -> Microsoft Corporation)
  442. R2 RzActionSvc; C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe [538424 2024-05-15] (Razer USA Ltd. -> Razer Inc.)
  443. R2 SbieSvc; C:\Program Files\Sandboxie-Plus\SbieSvc.exe [414672 2024-09-19] (Tonalio GmbH -> Sandboxie-Plus.com)
  444. R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2737016 2023-02-14] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
  445. R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [4588408 2023-02-14] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
  446. S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [505608 2024-04-01] (Microsoft Windows Publisher -> Microsoft Corporation)
  447. R2 SEVPNCLIENT; C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe [6018112 2022-01-30] (SoftEther Corporation -> SoftEther VPN Project at University of Tsukuba, Japan.)
  448. R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2022-10-04] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
  449. R2 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [920768 2022-10-04] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
  450. R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [17734456 2023-05-23] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
  451. R2 TeraCopyService.exe; C:\Program Files\TeraCopy\TeraCopyService.exe [315720 2023-06-29] (Code Sector -> )
  452. R2 unchecky; C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe [297240 2022-01-14] (Reason Software Company Inc. -> Reason Software Company Inc.)
  453. R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [291224 2024-10-22] (Bitdefender SRL -> Bitdefender)
  454. S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [794544 2024-07-10] (Oracle America, Inc. -> Oracle and/or its affiliates)
  455. R2 VMAuthdService; C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe [77176 2024-10-03] (Broadcom Inc -> VMware, Inc.)
  456. R2 VMnetDHCP; C:\WINDOWS\SysWOW64\vmnetdhcp.exe [373112 2024-10-03] (Broadcom Inc -> VMware, Inc.)
  457. R2 VMUSBArbService; C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe [1009112 2024-07-19] (Broadcom Inc -> VMware, Inc.)
  458. R2 VMware NAT Service; C:\WINDOWS\SysWOW64\vmnat.exe [420216 2024-10-03] (Broadcom Inc -> VMware, Inc.)
  459. S3 VmwareAutostartService; C:\Program Files (x86)\VMware\VMware Workstation\vmware-autostart.exe [64888 2024-10-03] (Broadcom Inc -> )
  460. R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [851640 2024-10-22] (Bitdefender SRL -> Bitdefender)
  461. S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe [3174840 2023-12-12] (Microsoft Windows Publisher -> Microsoft Corporation)
  462. S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe [133592 2023-12-12] (Microsoft Windows Publisher -> Microsoft Corporation)
  463.  
  464. ===================== Drivers (Whitelisted) ===================
  465.  
  466. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  467.  
  468. R3 acpipagr; C:\WINDOWS\System32\DriverStore\FileRepository\acpipagr.inf_amd64_d1093347a27ff89c\acpipagr.sys [49152 2024-07-29] (Microsoft Windows -> Microsoft Corporation)
  469. S3 AcpiPmi; C:\WINDOWS\System32\DriverStore\FileRepository\acpipmi.inf_amd64_3ced06eb61dcc792\acpipmi.sys [53248 2024-07-29] (Microsoft Windows -> Microsoft Corporation)
  470. S3 acsock; C:\WINDOWS\system32\DRIVERS\acsock64.sys [300456 2021-07-21] (Microsoft Windows Hardware Compatibility Publisher -> Cisco Systems, Inc.)
  471. R3 AcxHdAudio; C:\WINDOWS\System32\drivers\AcxHdAudio.sys [581632 2024-07-29] (Microsoft Windows -> Microsoft Corporation)
  472. R0 amdwps; C:\WINDOWS\System32\drivers\amdwps.sys [67144 2024-07-29] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation)
  473. S3 AppleIPod; C:\WINDOWS\System32\drivers\AppleIPod.sys [30096 2021-07-22] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
  474. S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [39272 2023-06-27] (Apple Inc. -> Apple Inc.)
  475. S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [55608 2023-06-27] (Apple Inc. -> Apple Inc.)
  476. R1 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [7505856 2024-09-21] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender S.R.L. Bucharest, ROMANIA)
  477. R2 BdDci4; C:\WINDOWS\system32\DRIVERS\bddci4.sys [933424 2024-09-21] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
  478. S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [24568 2023-11-16] (Microsoft Windows Early Launch Anti-malware Publisher -> Bitdefender)
  479. S3 bdprivmon; C:\WINDOWS\system32\DRIVERS\bdprivmon.sys [49200 2023-08-09] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender SRL)
  480. S3 bduefiscan; C:\WINDOWS\system32\DRIVERS\bduefiscan.sys [42432 2024-09-06] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
  481. S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [565248 2024-04-01] (Microsoft Corporation) [File not signed]
  482. S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [188416 2024-04-01] (Microsoft Corporation) [File not signed]
  483. S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [106496 2024-04-01] (Microsoft Corporation) [File not signed]
  484. R3 CDD; C:\WINDOWS\System32\cdd.dll [331776 2024-10-17] (Microsoft Windows -> Microsoft Corporation)
  485. S3 devmap; C:\WINDOWS\System32\DriverStore\FileRepository\devmap.inf_amd64_1993197f4612e967\devmap.sys [53248 2024-07-29] (Microsoft Windows -> Microsoft Corporation)
  486. S3 DisplayMux; C:\WINDOWS\System32\DriverStore\FileRepository\displaymux.inf_amd64_da65a70f0c3ce0f3\DisplayMux.sys [57344 2024-07-29] (Microsoft Windows -> Microsoft Corporation)
  487. S1 EneTechIo; C:\Windows\system32\drivers\ene.sys [19968 2019-10-17] (Microsoft Windows Hardware Compatibility Publisher -> )
  488. S3 epmdkdrv; C:\WINDOWS\system32\epmdkdrv.sys [36280 2020-02-23] (CHENGDU YIWO Tech Development Co., Ltd. -> )
  489. R0 EPMVolFl; C:\WINDOWS\System32\drivers\EPMVolFl.sys [30136 2020-02-23] (CHENGDU YIWO Tech Development Co., Ltd. -> Windows (R) Codename Longhorn DDK provider)
  490. R0 EUDCPEPM; C:\WINDOWS\System32\drivers\EUDCPEPM.sys [76344 2020-12-08] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd)
  491. R1 EUEDKEPM; C:\Windows\system32\drivers\EUEDKEPM.sys [33712 2020-02-23] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd)
  492. R0 fse; C:\WINDOWS\System32\drivers\fse.sys [222528 2024-07-29] (Microsoft Windows -> Microsoft Corporation)
  493. R1 Gemma; C:\WINDOWS\System32\DRIVERS\gemma.sys [1490896 2024-09-06] (Microsoft Windows Hardware Compatibility Publisher -> BitDefender S.R.L. Bucharest, ROMANIA)
  494. R2 hcmon; C:\WINDOWS\system32\DRIVERS\hcmon.sys [72144 2024-07-19] (Microsoft Windows Hardware Compatibility Publisher -> VMware, Inc.)
  495. S3 I3CHost; C:\WINDOWS\System32\DriverStore\FileRepository\i3chost.inf_amd64_71fb35d9ebcbe45b\I3CHost.sys [296240 2024-10-17] (Microsoft Windows -> Microsoft Corporation)
  496. R3 iaLPSS2_GPIO2_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_tgl.inf_amd64_c330c09d72f3e083\iaLPSS2_GPIO2_TGL.sys [128664 2021-01-27] (Intel Corporation -> Intel Corporation)
  497. S3 Ignisv2; C:\WINDOWS\system32\DRIVERS\ignisv2.sys [849968 2024-05-31] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
  498. S3 kdnic_legacy; C:\WINDOWS\System32\drivers\kdnic_legacy.sys [70976 2024-07-29] (Microsoft Windows -> Microsoft Corporation)
  499. S2 l1vhlwf; C:\WINDOWS\System32\drivers\l1vhlwf.sys [132512 2024-10-17] (Microsoft Windows -> Microsoft Corporation)
  500. R3 logi_joy_bus_enum; C:\WINDOWS\system32\drivers\logi_joy_bus_enum.sys [44880 2024-09-18] (Logitech Inc -> Logitech)
  501. R3 logi_joy_vir_hid; C:\WINDOWS\system32\drivers\logi_joy_vir_hid.sys [32080 2022-09-22] (Logitech Inc -> Logitech)
  502. R3 logi_joy_xlcore; C:\WINDOWS\system32\drivers\logi_joy_xlcore.sys [73040 2024-09-18] (Logitech Inc -> Logitech)
  503. R3 logi_lamparray; C:\WINDOWS\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_98f357adcde2292d\logi_lamparray.sys [89192 2024-09-18] (Logitech Inc -> Logitech, Inc.)
  504. S3 ManyCam; C:\WINDOWS\system32\DRIVERS\mcvidrv.sys [66952 2018-07-30] (ManyCam (VISICOM MÉDIA INC.) -> Visicom Media Inc.)
  505. R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [231504 2024-10-23] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
  506. S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2023-09-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
  507. R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239568 2024-10-21] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
  508. S3 mcaudrv_simple; C:\WINDOWS\system32\drivers\mcaudrv_x64.sys [35960 2014-12-29] (ManyCam -> Visicom Media Inc.)
  509. S3 MsQuicPrev; C:\WINDOWS\System32\drivers\msquicprev.sys [458032 2024-10-17] (Microsoft Windows -> Microsoft Corporation)
  510. R3 Neo_VPN; C:\WINDOWS\System32\drivers\Neo6_x64_VPN.sys [37824 2022-01-30] (SoftEther Corporation -> SoftEther Corporation)
  511. S3 Netaapl; C:\WINDOWS\System32\drivers\netaapl64.sys [23040 2022-01-06] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
  512. S2 NetworkPrivacyPolicy; C:\WINDOWS\System32\DriverStore\FileRepository\networkprivacypolicy.inf_amd64_f3940973e0444eec\NetworkPrivacyPolicy.sys [102400 2024-10-17] (Microsoft Windows -> )
  513. R3 NovabenchDriver; C:\Program Files\Novawave\Novabench\NovabenchDriverWin10.sys [28216 2018-03-28] (Microsoft Windows Hardware Compatibility Publisher -> )
  514. R1 npcap; C:\WINDOWS\system32\DRIVERS\npcap.sys [77336 2022-08-20] (Insecure.Com LLC -> Insecure.Com LLC.)
  515. S3 PiaWFPCallout; C:\WINDOWS\system32\DRIVERS\PiaWFPCallout.sys [34264 2024-03-27] (Private Internet Access (London Trust Media Incorporated) -> )
  516. S3 PktMonApi; C:\WINDOWS\System32\drivers\PktMonApi.sys [61440 2024-10-17] (Microsoft Windows -> Microsoft Corporation)
  517. S3 PlutonHeci; C:\WINDOWS\System32\DriverStore\FileRepository\pluton-heci.inf_amd64_9aaa7a8c15ac7e9a\pluton-heci.sys [58784 2024-07-29] (Microsoft Windows -> )
  518. S3 PlutonHsp2; C:\WINDOWS\System32\DriverStore\FileRepository\plutonhsp2.inf_amd64_0b3fdc25d1dc1c6e\PlutonHsp2.sys [58672 2024-07-29] (Microsoft Windows -> )
  519. U5 PROCMON24; C:\Windows\System32\Drivers\PROCMON24.sys [82344 2024-08-22] (Microsoft Windows Hardware Compatibility Publisher -> Sysinternals - www.sysinternals.com)
  520. S3 PSMounterEx; C:\Windows\system32\drivers\psmounterex.sys [140720 2023-10-02] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
  521. S3 RevoProcessDetector; C:\WINDOWS\System32\DRIVERS\RevoProcessDetector.sys [19504 2024-03-28] (Microsoft Windows Hardware Compatibility Publisher -> VS Revo Group)
  522. S1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [23072 2024-08-23] (RealDefense LLC -> SUPERAdBlocker.com and SUPERAntiSpyware.com)
  523. S1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [15600 2023-08-26] (RealDefense, LLC -> SUPERAdBlocker.com and SUPERAntiSpyware.com)
  524. R3 SbieDrv; C:\Program Files\Sandboxie-Plus\SbieDrv.sys [250520 2024-09-19] (Microsoft Windows Hardware Compatibility Publisher -> Sandboxie-Plus.com)
  525. R1 SeLow; C:\WINDOWS\system32\DRIVERS\SeLow_x64.sys [50624 2022-01-30] (SoftEther Corporation -> SoftEther Corporation)
  526. R2 speedfan; C:\Windows\SysWOW64\speedfan.sys [28664 2012-12-30] (SOKNO S.R.L. -> Almico Software)
  527. R3 tap-pia-0901; C:\WINDOWS\System32\drivers\tap-pia-0901.sys [39944 2023-12-13] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
  528. S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [39920 2019-10-23] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
  529. R2 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [629184 2023-11-16] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
  530. S1 uiomap; C:\WINDOWS\System32\DriverStore\FileRepository\uiomap.inf_amd64_11efbd9b4c5f482e\uiomap.sys [69632 2024-07-29] (Microsoft Windows -> Microsoft Corporation)
  531. S3 UmPass; C:\WINDOWS\System32\DriverStore\FileRepository\umpass.inf_amd64_06e016c9ffecbf73\umpass.sys [53248 2024-07-29] (Microsoft Windows -> Microsoft Corporation)
  532. R2 UnionFS; C:\WINDOWS\system32\drivers\UnionFS.sys [497072 2024-10-17] (Microsoft Windows -> Microsoft Corporation)
  533. S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2021-02-23] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
  534. R3 VBoxNetAdp; C:\WINDOWS\System32\drivers\VBoxNetAdp6.sys [254344 2024-07-10] (Oracle Corporation -> Oracle and/or its affiliates)
  535. R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [265216 2024-07-10] (Oracle Corporation -> Oracle and/or its affiliates)
  536. R1 VBoxSup; C:\WINDOWS\system32\DRIVERS\VBoxSup.sys [1063736 2024-07-10] (Oracle Corporation -> Oracle and/or its affiliates)
  537. R0 vlflt; C:\WINDOWS\System32\DRIVERS\vlflt.sys [1403448 2024-09-21] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
  538. S3 vmbusproxy; C:\WINDOWS\system32\drivers\vmbusproxy.sys [98304 2024-07-29] (Microsoft Windows -> Microsoft Corporation)
  539. R0 vmci; C:\WINDOWS\System32\drivers\vmci.sys [106424 2024-07-17] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom Inc.)
  540. R3 VMnetAdapter; C:\WINDOWS\System32\drivers\vmnetadapter.sys [31288 2024-08-25] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom Inc.)
  541. R2 VMnetBridge; C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys [53704 2024-10-03] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom Inc.)
  542. R2 VMnetuserif; C:\WINDOWS\system32\DRIVERS\vmnetuserif.sys [30664 2024-10-03] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom Inc.)
  543. R2 vmx86; C:\WINDOWS\system32\DRIVERS\vmx86.sys [100920 2024-10-03] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom Inc.)
  544. S3 vpnva; C:\WINDOWS\System32\drivers\vpnva64-6.sys [74064 2021-07-21] (Cisco Systems, Inc. -> Cisco Systems, Inc.)
  545. R0 vsock; C:\WINDOWS\System32\DRIVERS\vsock.sys [91176 2024-07-17] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom Inc.)
  546. S3 vwifibus; C:\WINDOWS\System32\DriverStore\FileRepository\netvwifibus.inf_amd64_ab4e111fe8221178\vwifibus.sys [65536 2024-07-29] (Microsoft Windows -> Microsoft Corporation)
  547. S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [55856 2023-12-12] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
  548. S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
  549. S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [594304 2023-12-12] (Microsoft Windows -> Microsoft Corporation)
  550. S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105856 2023-12-12] (Microsoft Windows -> Microsoft Corporation)
  551. S3 WinAccelCx0101; C:\WINDOWS\System32\drivers\WinAccelCx.sys [144704 2024-07-29] (Microsoft Windows -> Microsoft Corporation)
  552. S3 WinI3C; C:\WINDOWS\System32\DriverStore\FileRepository\wini3c.inf_amd64_a7ed04bfcdb83650\WinI3C.sys [75208 2024-10-17] (Microsoft Windows -> Microsoft Corporation)
  553. S3 wintun; C:\WINDOWS\system32\DRIVERS\wintun.sys [38176 2024-02-08] (WireGuard LLC -> WireGuard LLC)
  554. S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2024-07-29] (Microsoft Windows -> Microsoft Corporation)
  555. R3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_971c769b103df369\WSDScan.sys [61440 2024-07-29] (Microsoft Windows -> Microsoft Corporation)
  556. S3 XSpltVid; C:\WINDOWS\system32\DRIVERS\XSpltVid.sys [122376 2021-08-24] (Microsoft Windows Hardware Compatibility Publisher -> SplitmediaLabs Limited)
  557. U3 ZTDNS; C:\WINDOWS\System32\drivers\ztdns.sys [107960 2024-10-17] (Microsoft Windows -> Microsoft Corporation)
  558.  
  559. ==================== NetSvcs (Whitelisted) ===================
  560.  
  561. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  562.  
  563.  
  564. ==================== One month (created) (Whitelisted) =========
  565.  
  566. (If an entry is included in the fixlist, the file/folder will be moved.)
  567.  
  568. 2024-10-23 09:51 - 2024-10-23 09:52 - 000060764 _____ C:\Users\User\Downloads\FRST.txt
  569. 2024-10-23 09:51 - 2024-10-23 09:51 - 002397696 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
  570. 2024-10-22 19:17 - 2024-10-23 09:52 - 000000000 ____D C:\FRST
  571. 2024-10-21 22:26 - 2024-10-21 22:28 - 006669556 _____ C:\Users\User\Downloads\Michael Street - Lucky 13. Solitaire Games for Kids-Chronicle Books (March 1, 2001).pdf
  572. 2024-10-21 22:24 - 2024-10-21 22:25 - 000404402 _____ C:\Users\User\Downloads\Tim Ander - How to Play Solitaire_ A Beginner's Guide to Learning Solitaire Games including Solitaire, Nestor, Pounce, Pyramid, Russian Bank, Golf, and Yukon-CRB Publishing (2018).epub
  573. 2024-10-20 23:23 - 2024-10-20 23:24 - 007757374 _____ C:\Users\User\Downloads\The Politics of Congressional Elections (Gary C. Jacobson, Jamie L. Carson) (Z-Library).epub
  574. 2024-10-19 22:34 - 2024-10-19 22:34 - 000538802 _____ C:\Users\User\Downloads\Thats Not English (Moore Erin) (Z-Library).epub
  575. 2024-10-19 22:04 - 2024-10-19 22:04 - 012738930 _____ C:\Users\User\Downloads\Hacking Windows XP (Steve Sinchak) (Z-Library).pdf
  576. 2024-10-17 23:30 - 2024-10-17 23:30 - 000000000 ____D C:\Users\User\Desktop\New folder
  577. 2024-10-17 23:29 - 2024-10-17 23:29 - 006895388 _____ C:\Users\User\Downloads\On the Edge The Art of Risking Everything (Nate Silver) (Z-Library).epub
  578. 2024-10-17 23:17 - 2024-10-17 23:17 - 001815116 _____ C:\Users\User\Downloads\The Anxious Achiever Turn Your Biggest Fears into Your Leadership Superpower (Morra Aarons-Mele) (Z-Library).epub
  579. 2024-10-17 22:40 - 2024-10-17 22:40 - 003660444 _____ C:\Users\User\Downloads\Why We Want You to Be Rich Two Men, One Message (Robert Kiyosaki, Donald Trump) (Z-Library).epub
  580. 2024-10-17 19:49 - 2024-10-17 19:49 - 000027278 _____ C:\Users\User\Downloads\Untitled.webp
  581. 2024-10-17 19:32 - 2024-10-22 15:28 - 000000000 ____D C:\WINDOWS\CbsTemp
  582. 2024-10-17 19:24 - 2024-10-17 19:24 - 000000773 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
  583. 2024-10-13 17:11 - 2024-10-13 17:11 - 000001279 _____ C:\Users\Public\Desktop\VMware Workstation Pro.lnk
  584. 2024-10-13 17:11 - 2024-10-13 17:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware
  585. 2024-10-13 17:11 - 2024-10-13 17:11 - 000000000 ____D C:\Program Files\Common Files\VMware
  586. 2024-10-13 17:11 - 2024-10-03 04:49 - 000420216 _____ (VMware, Inc.) C:\WINDOWS\SysWOW64\vmnat.exe
  587. 2024-10-13 17:11 - 2024-10-03 04:48 - 001307512 _____ (VMware, Inc.) C:\WINDOWS\system32\vnetlib64.dll
  588. 2024-10-13 17:11 - 2024-10-03 04:48 - 000373112 _____ (VMware, Inc.) C:\WINDOWS\SysWOW64\vmnetdhcp.exe
  589. 2024-10-13 17:07 - 2024-10-13 17:07 - 000000000 ____D C:\Users\User\Downloads\VMware-workstation-17.6.1-24319023.exe
  590. 2024-10-13 16:45 - 2024-10-13 16:45 - 257372160 _____ C:\Users\User\Downloads\VMware-workstation-17.6.1-24319023.exe.tar
  591. 2024-10-12 12:50 - 2024-10-12 12:50 - 007105378 _____ C:\Users\User\Downloads\Melania_2.epub
  592. 2024-10-12 12:38 - 2024-10-12 12:45 - 118474734 _____ C:\Users\User\Downloads\Melania (Melania Trump) (Z-Library).epub
  593. 2024-10-09 12:02 - 2024-10-09 12:02 - 006366461 _____ C:\Users\User\Downloads\SDIO_1.13.4.771.zip
  594. 2024-10-08 15:48 - 2024-10-08 15:48 - 000026568 _____ C:\Users\User\Downloads\results.json
  595. 2024-10-05 19:27 - 2024-10-05 19:27 - 069791536 _____ (Waterfox Limited) C:\Users\User\Downloads\Waterfox Setup G6.0.19.exe
  596. 2024-09-30 23:46 - 2024-09-30 23:54 - 000000000 ____D C:\Program Files (x86)\nLite
  597. 2024-09-30 23:46 - 2024-09-30 23:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\nLite
  598. 2024-09-29 14:55 - 2024-09-29 14:55 - 000005316 _____ C:\Users\User\Downloads\RecognizingAdultADHD_9781094234465_5067029.odm
  599. 2024-09-29 14:55 - 2024-09-29 14:55 - 000000000 ____D C:\Users\User\Documents\My Media
  600. 2024-09-29 14:55 - 2024-09-29 14:55 - 000000000 ____D C:\Users\User\AppData\Roaming\OverDrive
  601. 2024-09-29 14:53 - 2024-09-29 14:53 - 000002537 _____ C:\Users\Public\Desktop\OverDrive for Windows.lnk
  602. 2024-09-29 14:53 - 2024-09-29 14:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OverDrive for Windows
  603. 2024-09-29 14:53 - 2024-09-29 14:53 - 000000000 ____D C:\Program Files (x86)\OverDrive for Windows
  604. 2024-09-29 14:52 - 2024-09-29 14:52 - 004404224 _____ C:\Users\User\Downloads\ODMediaConsoleSetup.msi
  605. 2024-09-29 00:29 - 2024-09-29 00:31 - 097502720 _____ C:\Users\User\Downloads\U.S. Immigration Made Easy (Ilona Bray) (Z-Library).pdf
  606. 2024-09-27 14:52 - 2024-09-27 14:52 - 000001819 _____ C:\Users\Public\Desktop\iTunes.lnk
  607. 2024-09-27 14:52 - 2024-09-27 14:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
  608. 2024-09-27 14:51 - 2024-09-27 14:51 - 000000000 ____D C:\Program Files\Bonjour
  609. 2024-09-27 14:51 - 2024-09-27 14:51 - 000000000 ____D C:\Program Files (x86)\Bonjour
  610. 2024-09-27 14:47 - 2024-09-27 14:47 - 000000000 ____D C:\Users\User\AppData\Local\VS Revo Group
  611. 2024-09-27 14:47 - 2024-09-27 14:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent
  612. 2024-09-27 14:47 - 2024-09-27 14:47 - 000000000 ____D C:\Program Files\qBittorrent
  613. 2024-09-27 14:46 - 2024-09-27 14:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Git
  614. 2024-09-25 22:39 - 2024-09-25 22:39 - 000000000 ____D C:\Users\User\AppData\Local\YTPD
  615. 2024-09-25 22:35 - 2024-09-25 22:35 - 002243104 _____ (Krehn Solutions ) C:\Users\User\Downloads\ytad.exe
  616. 2024-09-25 22:35 - 2024-09-25 22:35 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YouTube Album Downloader
  617. 2024-09-25 19:38 - 2024-09-25 19:39 - 121041356 _____ (Igor Pavlov) C:\Users\User\Downloads\supermium_126_64_setup.exe
  618. 2024-09-25 16:43 - 2024-09-25 16:46 - 000000000 ____D C:\Users\User\Downloads\VMAudioBackHost_1.0.0
  619. 2024-09-25 16:43 - 2024-09-25 16:43 - 000085607 _____ C:\Users\User\Downloads\VMAudioBackHost_1.0.0.zip
  620. 2024-09-25 11:53 - 2024-09-25 11:53 - 000000856 _____ C:\Users\Public\Desktop\Logitech G HUB.lnk
  621. 2024-09-25 11:53 - 2024-09-25 11:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi
  622. 2024-09-25 11:53 - 2024-09-25 11:53 - 000000000 ____D C:\Program Files\LGHUB
  623. 2024-09-23 16:50 - 2024-09-23 16:50 - 075537880 _____ (Waterfox Limited) C:\Users\User\Downloads\Waterfox Setup 6.5.0-beta-1.exe
  624.  
  625. ==================== One month (modified) ==================
  626.  
  627. (If an entry is included in the fixlist, the file/folder will be moved.)
  628.  
  629. 2024-10-23 09:46 - 2023-09-10 23:56 - 000000000 ____D C:\Users\User\AppData\Local\Malwarebytes
  630. 2024-10-23 09:40 - 2022-03-03 08:20 - 000000000 ____D C:\Users\User\AppData\Local\Discord
  631. 2024-10-23 09:20 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\SystemTemp
  632. 2024-10-23 09:03 - 2024-07-29 14:27 - 000000130 _____ C:\Users\User\AppData\LocalLow\a53c918fdff2e9a2247c5bd0035226b8ef030242353f1ce4b4e7d5f62033849e
  633. 2024-10-23 09:02 - 2024-07-29 14:27 - 000022311 _____ C:\Users\User\AppData\LocalLow\636778f5472d940fd7e99bd03ce3fea57628d638c330ad5d976f806934a81f74
  634. 2024-10-23 08:53 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\AppReadiness
  635. 2024-10-23 08:48 - 2024-04-01 18:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
  636. 2024-10-23 08:41 - 2024-07-29 15:08 - 000840882 _____ C:\WINDOWS\system32\PerfStringBackup.INI
  637. 2024-10-23 08:41 - 2024-04-01 18:24 - 000000000 ____D C:\WINDOWS\INF
  638. 2024-10-23 08:41 - 2022-03-03 08:20 - 000000000 ____D C:\Users\User\AppData\Roaming\discord
  639. 2024-10-23 08:40 - 2021-12-31 08:43 - 000000000 ____D C:\Users\User\AppData\Local\D3DSCache
  640. 2024-10-23 08:39 - 2024-07-29 14:27 - 000000130 _____ C:\Users\User\AppData\LocalLow\01133130f9892b44a0d8972a541ff21cbaad6c8231ec557ec8c0e1f13f69e3f2
  641. 2024-10-23 08:38 - 2024-03-30 22:04 - 000034335 _____ C:\Users\User\AppData\LocalLow\2cbe7e0329776f2a482ffdc2b19038bcb5c1f46e40a2e41a4ecd7ace4ad77dfc
  642. 2024-10-23 08:37 - 2024-07-29 14:27 - 000439636 _____ C:\Users\User\AppData\LocalLow\315c9469078310878bd1e23ba9b7b2bfecd03cc4485f038ea3a0c10a6a62e225
  643. 2024-10-23 08:37 - 2024-04-11 11:01 - 000000000 ___RD C:\Users\User\OneDrive - Swinburne University
  644. 2024-10-23 08:37 - 2021-12-31 08:43 - 000000000 ____D C:\Users\User\AppData\Local\Packages
  645. 2024-10-23 08:36 - 2024-07-29 15:05 - 000121976 _____ C:\Users\User\AppData\LocalLow\b080589fd13e48f6075ac2e3c3f078d1033786e6ea1358ac540ae3323d02564e
  646. 2024-10-23 08:36 - 2021-12-31 09:11 - 000000000 __SHD C:\Users\User\IntelGraphicsProfiles
  647. 2024-10-23 08:35 - 2024-07-29 15:06 - 000028470 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
  648. 2024-10-23 08:35 - 2022-01-30 23:19 - 000000000 ____D C:\Program Files\SoftEther VPN Client
  649. 2024-10-23 08:35 - 2021-12-30 23:17 - 000000000 ____D C:\ProgramData\VMware
  650. 2024-10-23 08:35 - 2021-12-30 21:07 - 000000000 ____D C:\Program Files (x86)\TeamViewer
  651. 2024-10-23 08:34 - 2024-07-29 15:04 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
  652. 2024-10-23 08:34 - 2024-07-29 14:12 - 000012288 ___SH C:\DumpStack.log.tmp
  653. 2024-10-23 08:34 - 2021-12-31 09:11 - 000000000 ____D C:\Intel
  654. 2024-10-23 01:03 - 2021-12-30 22:19 - 000000000 ____D C:\Users\User\AppData\Roaming\Signal
  655. 2024-10-23 01:02 - 2022-01-07 20:58 - 000000000 ____D C:\Users\User\AppData\Roaming\Bitwarden
  656. 2024-10-23 01:02 - 2021-12-31 08:22 - 000000000 ____D C:\Users\User\AppData\Roaming\VMware
  657. 2024-10-23 01:02 - 2021-12-31 08:22 - 000000000 ____D C:\Users\User\AppData\Local\VMware
  658. 2024-10-22 21:01 - 2021-12-31 08:23 - 000000000 ____D C:\Users\User\Documents\Virtual Machines
  659. 2024-10-22 17:26 - 2021-12-30 19:39 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Word
  660. 2024-10-22 15:29 - 2024-07-29 14:59 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
  661. 2024-10-22 14:06 - 2022-11-06 11:30 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Skype for Desktop
  662. 2024-10-22 09:45 - 2022-01-06 15:01 - 000000000 ____D C:\Program Files\Bitwarden
  663. 2024-10-22 09:02 - 2024-04-01 18:26 - 000000000 ___HD C:\Program Files\WindowsApps
  664. 2024-10-22 08:46 - 2021-12-31 09:11 - 000000000 ____D C:\Users\User\AppData\Local\LGHUB
  665. 2024-10-21 22:42 - 2022-01-11 22:32 - 000000000 ____D C:\Users\User\AppData\Roaming\SolSuite
  666. 2024-10-21 20:02 - 2021-12-30 22:13 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Excel
  667. 2024-10-21 18:02 - 2022-07-03 20:49 - 000000000 ____D C:\Users\User\.dbus-keyrings
  668. 2024-10-21 17:52 - 2023-10-27 08:17 - 000239568 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
  669. 2024-10-21 15:08 - 2024-09-18 17:05 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
  670. 2024-10-20 15:51 - 2024-08-08 10:16 - 000000000 ____D C:\Users\User\Cisco Packet Tracer 8.2.2
  671. 2024-10-20 15:27 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\Registration
  672. 2024-10-20 12:53 - 2022-01-06 19:42 - 000000344 _____ C:\Users\User\.packettracer
  673. 2024-10-19 23:56 - 2022-01-28 08:50 - 000000000 ____D C:\Users\User\AppData\Local\calibre-cache
  674. 2024-10-19 23:56 - 2022-01-28 08:48 - 000000000 ____D C:\Users\User\AppData\Roaming\calibre
  675. 2024-10-19 23:56 - 2021-12-31 10:54 - 000000000 ____D C:\Users\User\Documents\My Digital Editions
  676. 2024-10-19 14:53 - 2021-12-30 20:52 - 000000000 ____D C:\Users\User\AppData\Roaming\TeraCopy
  677. 2024-10-19 12:03 - 2023-08-08 12:47 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
  678. 2024-10-19 12:01 - 2021-12-30 19:39 - 000002383 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
  679. 2024-10-19 00:33 - 2022-01-06 12:36 - 000000000 ____D C:\Users\User\AppData\Roaming\avidemux
  680. 2024-10-19 00:33 - 2022-01-01 15:52 - 000000000 ____D C:\Users\User\AppData\Local\CrashDumps
  681. 2024-10-18 22:44 - 2022-01-05 19:21 - 000000000 ____D C:\Users\User\AppData\Roaming\audacity
  682. 2024-10-18 21:50 - 2022-01-05 19:21 - 000000000 ____D C:\Program Files\Audacity
  683. 2024-10-18 21:45 - 2022-02-25 22:13 - 000000000 ____D C:\Users\User\AppData\Roaming\youtube-dl-gui
  684. 2024-10-18 21:43 - 2023-01-08 21:58 - 000000000 ____D C:\Users\User\AppData\Roaming\yt-dlg
  685. 2024-10-18 17:28 - 2024-04-01 18:26 - 000000000 ____D C:\ProgramData\USOPrivate
  686. 2024-10-18 17:13 - 2024-07-29 14:59 - 000558864 _____ C:\WINDOWS\system32\FNTCACHE.DAT
  687. 2024-10-18 12:28 - 2024-04-01 19:10 - 000000000 ___SD C:\WINDOWS\system32\AppV
  688. 2024-10-18 12:28 - 2024-04-01 19:10 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
  689. 2024-10-18 12:28 - 2024-04-01 18:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
  690. 2024-10-18 12:28 - 2024-04-01 18:26 - 000000000 ___SD C:\WINDOWS\system32\UNP
  691. 2024-10-18 12:28 - 2024-04-01 18:26 - 000000000 ___SD C:\WINDOWS\system32\F12
  692. 2024-10-18 12:28 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\UUS
  693. 2024-10-18 12:28 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
  694. 2024-10-18 12:28 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
  695. 2024-10-18 12:28 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
  696. 2024-10-18 12:28 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
  697. 2024-10-18 12:28 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\SystemResources
  698. 2024-10-18 12:28 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
  699. 2024-10-18 12:28 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
  700. 2024-10-18 12:28 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
  701. 2024-10-18 12:28 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
  702. 2024-10-18 12:28 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\system32\Sgrm
  703. 2024-10-18 12:28 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\system32\setup
  704. 2024-10-18 12:28 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
  705. 2024-10-18 12:28 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\system32\oobe
  706. 2024-10-18 12:28 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
  707. 2024-10-18 12:28 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
  708. 2024-10-18 12:28 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\system32\Dism
  709. 2024-10-18 12:28 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
  710. 2024-10-18 12:27 - 2024-04-01 19:10 - 000000000 ____D C:\Program Files\Windows Photo Viewer
  711. 2024-10-18 12:27 - 2024-04-01 19:10 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
  712. 2024-10-18 12:27 - 2024-04-01 18:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
  713. 2024-10-18 12:27 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\SystemApps
  714. 2024-10-18 12:27 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
  715. 2024-10-18 12:27 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\ShellComponents
  716. 2024-10-18 12:27 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\Provisioning
  717. 2024-10-18 12:27 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
  718. 2024-10-18 12:27 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\IME
  719. 2024-10-18 12:27 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\BrowserCore
  720. 2024-10-18 12:27 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\bcastdvr
  721. 2024-10-18 12:27 - 2024-04-01 18:26 - 000000000 ____D C:\Program Files\Common Files\System
  722. 2024-10-18 12:27 - 2024-04-01 18:21 - 000000000 ____D C:\WINDOWS\servicing
  723. 2024-10-18 11:24 - 2022-01-04 21:27 - 000002367 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
  724. 2024-10-18 11:24 - 2022-01-04 21:27 - 000002326 _____ C:\Users\Public\Desktop\Brave.lnk
  725. 2024-10-17 19:38 - 2024-04-01 18:26 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
  726. 2024-10-17 19:38 - 2024-04-01 18:26 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
  727. 2024-10-17 19:24 - 2024-07-29 15:01 - 003323392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
  728. 2024-10-17 19:23 - 2021-12-31 09:04 - 000000000 ____D C:\WINDOWS\system32\MRT
  729. 2024-10-17 19:19 - 2022-02-11 11:01 - 000000000 ____D C:\Program Files\dotnet
  730. 2024-10-17 19:19 - 2021-12-31 09:04 - 201324920 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
  731. 2024-10-17 19:19 - 2021-12-30 19:27 - 000000000 ____D C:\ProgramData\Package Cache
  732. 2024-10-17 00:02 - 2024-08-07 00:43 - 000000130 _____ C:\Users\User\AppData\LocalLow\398da93bb7201f03906f29aff0f1322facb3e32c4cbc6f12882abe0874d920fc
  733. 2024-10-16 17:00 - 2024-08-07 00:43 - 000036763 _____ C:\Users\User\AppData\LocalLow\3ece48033804a7a357891e119d56d13ad4d4a2ddf059e7d7ce4f27109ce5dd78
  734. 2024-10-16 11:14 - 2021-12-30 21:04 - 000000000 ____D C:\Program Files (x86)\foobar2000
  735. 2024-10-16 10:18 - 2023-08-03 11:32 - 000002250 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
  736. 2024-10-16 10:18 - 2023-08-03 11:32 - 000002209 _____ C:\Users\Public\Desktop\Google Chrome.lnk
  737. 2024-10-15 18:22 - 2019-12-07 20:49 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
  738. 2024-10-13 20:47 - 2021-12-31 14:40 - 000000000 ____D C:\Users\User\.VirtualBox
  739. 2024-10-13 17:11 - 2021-12-30 23:17 - 000854890 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
  740. 2024-10-13 17:11 - 2021-12-30 23:17 - 000000000 ____D C:\Program Files (x86)\VMware
  741. 2024-10-12 01:27 - 2022-01-30 12:41 - 000000000 ____D C:\Users\User\AppData\Roaming\flashpoint-launcher
  742. 2024-10-08 22:46 - 2023-12-31 21:28 - 000000000 ____D C:\Users\User\Downloads\We Were Yahoo! [2018]
  743. 2024-10-06 18:55 - 2022-03-09 21:01 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\PowerPoint
  744. 2024-10-06 17:19 - 2024-05-18 12:04 - 000000000 ____D C:\Program Files\Waterfox
  745. 2024-10-06 17:19 - 2021-12-31 09:04 - 000000975 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Waterfox.lnk
  746. 2024-10-03 23:41 - 2021-12-30 22:03 - 000000000 ____D C:\Users\User\AppData\Roaming\vlc
  747. 2024-10-03 04:46 - 2024-08-25 05:23 - 000031688 _____ (Broadcom Inc.) C:\WINDOWS\system32\Drivers\vmnet.sys
  748. 2024-10-03 00:01 - 2022-04-24 09:54 - 000000000 ____D C:\Users\User\Documents\Simple Sticky Notes
  749. 2024-10-01 11:39 - 2021-12-31 14:40 - 000000000 ____D C:\Users\User\VirtualBox VMs
  750. 2024-09-28 11:12 - 2024-04-01 18:26 - 000000000 ____D C:\WINDOWS\ServiceState
  751. 2024-09-27 14:53 - 2024-05-21 21:09 - 000000000 ____D C:\Program Files\SUPERAntiSpyware
  752. 2024-09-27 14:53 - 2022-04-03 12:33 - 000000000 ____D C:\Program Files\AnyDesk
  753. 2024-09-27 14:52 - 2022-06-25 13:56 - 000000000 ____D C:\Program Files\iTunes
  754. 2024-09-27 14:49 - 2023-10-12 14:34 - 000001133 _____ C:\Users\Public\Desktop\WinSCP.lnk
  755. 2024-09-27 14:49 - 2023-02-24 20:51 - 000001145 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinSCP.lnk
  756. 2024-09-27 14:49 - 2023-02-24 20:51 - 000000000 ____D C:\Program Files (x86)\WinSCP
  757. 2024-09-27 14:49 - 2021-12-30 21:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio Code
  758. 2024-09-27 14:49 - 2021-12-30 21:06 - 000000000 ____D C:\Program Files\Microsoft VS Code
  759. 2024-09-27 14:48 - 2024-05-21 21:14 - 000001852 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
  760. 2024-09-27 14:48 - 2022-02-10 10:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie-Plus
  761. 2024-09-27 14:48 - 2022-02-10 10:03 - 000000000 ____D C:\Program Files\Sandboxie-Plus
  762. 2024-09-27 14:47 - 2023-03-29 22:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
  763. 2024-09-27 14:47 - 2021-12-30 21:04 - 000000880 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk
  764. 2024-09-27 14:46 - 2024-07-11 17:56 - 000000917 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk
  765. 2024-09-27 14:46 - 2024-03-01 14:31 - 000000000 ____D C:\Program Files\Git
  766. 2024-09-27 14:46 - 2023-05-02 18:23 - 000000000 ____D C:\Program Files\foobar2000
  767. 2024-09-27 14:45 - 2023-12-02 12:07 - 000001110 _____ C:\Users\Public\Desktop\calibre 64bit - E-book management.lnk
  768. 2024-09-27 14:45 - 2023-12-02 12:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre 64bit - E-book Management
  769. 2024-09-27 14:45 - 2022-01-28 08:48 - 000000000 ____D C:\Program Files\Calibre2
  770. 2024-09-27 14:44 - 2022-01-05 19:21 - 000000868 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
  771. 2024-09-27 14:44 - 2022-01-05 19:21 - 000000856 _____ C:\Users\Public\Desktop\Audacity.lnk
  772. 2024-09-25 23:41 - 2022-08-19 22:27 - 000000000 ____D C:\Users\User\AppData\Roaming\youtube-music-desktop-app
  773. 2024-09-25 12:58 - 2023-09-02 12:03 - 000000000 ____D C:\Users\User\AppData\Roaming\G HUB
  774. 2024-09-23 17:04 - 2021-12-31 09:11 - 000000000 ____D C:\ProgramData\Packages
  775.  
  776. ==================== Files in the root of some directories ========
  777.  
  778. 2022-01-06 10:14 - 2022-05-05 13:33 - 000000016 _____ () C:\Users\User\AppData\Roaming\obs-virtualcam.txt
  779. 2022-03-09 20:07 - 2023-12-25 13:22 - 000000054 _____ () C:\Users\User\AppData\Roaming\Plants vs. Zombies user file editor.dat
  780. 2024-03-26 23:38 - 2024-03-26 23:38 - 000000000 _____ () C:\Users\User\AppData\Roaming\Requiem.log
  781. 2023-02-24 20:53 - 2023-05-26 21:37 - 000000128 _____ () C:\Users\User\AppData\Roaming\winscp.rnd
  782. 2022-01-31 22:29 - 2022-01-31 22:29 - 000000193 _____ () C:\Users\User\AppData\Roaming\ytdlp-interface.json
  783. 2023-10-27 18:07 - 2023-10-27 18:07 - 000002374 _____ () C:\Users\User\AppData\Roaming\Microsoft\6921e641-c156-411e-8f20-5397def2840c.tmp
  784. 2024-08-07 01:38 - 2024-08-07 01:38 - 000002209 _____ () C:\Users\User\AppData\Roaming\Microsoft\bbd82832-bc75-4cf3-b1c1-8fc69df83343.tmp
  785. 2022-08-21 16:47 - 2023-05-20 13:26 - 000000035 _____ () C:\Users\User\AppData\Local\kdeconnect-indicatorrc
  786. 2022-08-21 16:50 - 2023-03-16 19:20 - 000000035 _____ () C:\Users\User\AppData\Local\kdeconnect.apprc
  787. 2022-01-10 22:09 - 2022-01-10 22:09 - 000008337 _____ () C:\Users\User\AppData\Local\kdenlive-layoutsrc
  788. 2022-01-10 22:09 - 2024-01-21 15:50 - 000005147 _____ () C:\Users\User\AppData\Local\kdenliverc
  789. 2023-05-17 17:00 - 2023-05-28 02:48 - 000000128 _____ () C:\Users\User\AppData\Local\PUTTY.RND
  790. 2024-01-22 11:00 - 2024-01-22 11:00 - 000000218 _____ () C:\Users\User\AppData\Local\recently-used.xbel
  791. 2023-11-25 14:40 - 2023-11-25 14:40 - 000000017 _____ () C:\Users\User\AppData\Local\resmon.resmoncfg
  792. 2022-01-10 22:09 - 2022-01-10 22:09 - 000006389 _____ () C:\Users\User\AppData\Local\user-places.xbel
  793. 2022-01-10 22:09 - 2022-01-10 22:09 - 000005708 _____ () C:\Users\User\AppData\Local\user-places.xbel.bak
  794. 2022-01-10 22:09 - 2022-01-10 22:09 - 000000000 _____ () C:\Users\User\AppData\Local\user-places.xbel.tbcache
  795.  
  796. ==================== FLock ==============================
  797.  
  798. 2024-10-18 10:46 C:\Config.Msi
  799. 2024-04-01 18:26 C:\PerfLogs
  800. 2024-10-22 20:11 C:\WINDOWS\system32\config
  801. 2024-04-01 18:34 C:\WINDOWS\system32\Configuration
  802. 2023-09-11 00:04 C:\WINDOWS\system32\ctc.json
  803. 2024-04-01 18:26 C:\WINDOWS\system32\DriverState
  804. 2024-10-15 18:22 C:\WINDOWS\system32\FxsTmp
  805. 2023-09-11 00:04 C:\WINDOWS\system32\httpproxy.json
  806. 2024-04-01 18:26 C:\WINDOWS\system32\ias
  807. 2024-07-30 08:59 C:\WINDOWS\system32\MsDtc
  808. 2024-04-01 18:26 C:\WINDOWS\system32\networklist
  809. 2024-10-22 15:29 C:\WINDOWS\system32\SleepStudy
  810. 2024-10-23 09:36 C:\WINDOWS\system32\sru
  811. 2024-10-19 12:01 C:\WINDOWS\system32\Tasks
  812. 2024-07-30 08:59 C:\WINDOWS\system32\Tasks_Migrated
  813. 2024-08-27 19:54 C:\WINDOWS\system32\WDI
  814. 2024-10-22 09:02 C:\Program Files\WindowsApps
  815. 2024-08-25 23:31 C:\WINDOWS\LiveKernelReports
  816. 2024-04-01 18:26 C:\WINDOWS\ModemLogs
  817. 2024-09-28 11:12 C:\WINDOWS\ServiceState
  818. 2024-10-23 09:20 C:\WINDOWS\SystemTemp
  819. 2024-10-23 08:51 C:\WINDOWS\Temp
  820. 2024-09-11 16:45 C:\WINDOWS\WUModels
  821. 2024-04-01 18:34 C:\WINDOWS\SysWOW64\config
  822. 2024-04-01 18:34 C:\WINDOWS\SysWOW64\Configuration
  823. 2019-12-07 20:49 C:\WINDOWS\SysWOW64\FxsTmp
  824. 2024-04-01 18:26 C:\WINDOWS\SysWOW64\Msdtc
  825. 2024-04-01 18:26 C:\WINDOWS\SysWOW64\NetworkList
  826. 2024-04-01 18:26 C:\WINDOWS\SysWOW64\sru
  827. 2024-04-01 18:34 C:\WINDOWS\SysWOW64\Tasks
  828. 2024-07-29 15:01 C:\WINDOWS\system32\Drivers\DriverData
  829. 2024-05-06 22:35 C:\WINDOWS\Tasks\MATLAB R2023a Startup Accelerator.job
  830. 2024-07-29 15:07 C:\Users\Administrator
  831. 2024-07-30 09:39 C:\ProgramData\ntuser.pol
  832. 2024-09-23 17:04 C:\ProgramData\Packages
  833.  
  834. ==================== SigCheck ============================
  835.  
  836. (There is no automatic fix for files that do not pass verification.)
  837.  
  838.  
  839.  
  840. ATTENTION: ==> Could not access BCD. The user is not administrator -> The boot configuration data store could not be opened.
  841. Access is denied.
  842.  
  843. ==================== End of FRST.txt ========================
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!