API tools faq
paste
Guest User

addition

a guest
Oct 12th, 2017
81
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 50.76 KB | None | 0 0
raw download clone embed print report
  1. Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-10-2017
  2. Ran by richh (12-10-2017 16:25:52)
  3. Running from C:\Users\richh\Downloads
  4. Windows 10 Pro Version 1703 170317-1834 (X64) (2017-07-05 20:30:49)
  5. Boot Mode: Normal
  6. ==========================================================
  7.  
  8.  
  9. ==================== Accounts: =============================
  10.  
  11. Administrator (S-1-5-21-2936657135-2552198426-1408488734-500 - Administrator - Disabled)
  12. DefaultAccount (S-1-5-21-2936657135-2552198426-1408488734-503 - Limited - Disabled)
  13. Guest (S-1-5-21-2936657135-2552198426-1408488734-501 - Limited - Disabled)
  14. richh (S-1-5-21-2936657135-2552198426-1408488734-1001 - Administrator - Enabled) => C:\Users\richh
  15.  
  16. ==================== Security Center ========================
  17.  
  18. (If an entry is included in the fixlist, it will be removed.)
  19.  
  20. AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  21. AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  22.  
  23. ==================== Installed Programs ======================
  24.  
  25. (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
  26.  
  27. Adobe After Effects CC 2017 (HKLM-x32\...\AEFT_14_2_1) (Version: 14.2.1 - Adobe Systems Incorporated)
  28. Adobe Character Animator CC (Beta) (HKLM-x32\...\ANMLBETA_1_0_6) (Version: 1.0.6 - Adobe Systems Incorporated)
  29. Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.3.0.256 - Adobe Systems Incorporated)
  30. Adobe Illustrator CC 2017 (HKLM-x32\...\ILST_21_1_0) (Version: 21.1.0 - Adobe Systems Incorporated)
  31. Adobe Media Encoder CC 2017 (HKLM-x32\...\AME_11_1_2) (Version: 11.1.2 - Adobe Systems Incorporated)
  32. Adobe Photoshop CC 2017 (HKLM-x32\...\PHSP_18_1_1) (Version: 18.1.1 - Adobe Systems Incorporated)
  33. Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 387.92 - NVIDIA Corporation) Hidden
  34. Apple Application Support (32-bit) (HKLM-x32\...\{D2FE6376-E549-4F63-A2C5-CA24DA035DE4}) (Version: 5.6 - Apple Inc.)
  35. Apple Application Support (64-bit) (HKLM\...\{BB109E24-EE90-485B-A28B-ADDEFB40540B}) (Version: 5.6 - Apple Inc.)
  36. Apple Mobile Device Support (HKLM\...\{0A596141-97D5-45FA-9281-98DFAF48D579}) (Version: 10.3.2.3 - Apple Inc.)
  37. Apple Software Update (HKLM-x32\...\{52D87F32-70E4-4348-8148-C0B9F35B1314}) (Version: 2.3.0.177 - Apple Inc.)
  38. ArtRage Lite (HKLM\...\{F9D1F820-4AF5-47CD-9A76-DFC81C5C7A48}) (Version: 5.0.4 - Ambient Design) Hidden
  39. ArtRage Lite (HKLM-x32\...\ArtRage Lite 5.0.4) (Version: 5.0.4 - Ambient Design)
  40. Audacity 2.1.3 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.3 - Audacity Team)
  41. Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
  42. Brackets (HKLM-x32\...\{1E8FE8D5-B532-4320-83D8-DA83B8E7F608}) (Version: 1.10 - brackets.io)
  43. Catalyst Control Center Next Localization BR (HKLM\...\{E7AA1A02-575C-14C6-FBEF-4BE6D46A5B74}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
  44. Catalyst Control Center Next Localization CHS (HKLM\...\{EB6C44F1-0F78-FE10-BC63-90BA50AB0CE9}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
  45. Catalyst Control Center Next Localization CHT (HKLM\...\{B26D75B8-FAB7-6F8B-767F-BAF975383D91}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
  46. Catalyst Control Center Next Localization CS (HKLM\...\{36EDC500-E4C0-371C-9865-08450415C1E9}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
  47. Catalyst Control Center Next Localization DA (HKLM\...\{4C2FB7FD-89FD-BA5C-585A-3811F326AD34}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
  48. Catalyst Control Center Next Localization DE (HKLM\...\{D74218A3-C503-57EF-AC9F-2220082E7ADE}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
  49. Catalyst Control Center Next Localization EL (HKLM\...\{DA433FCF-90A1-19A5-65A7-FDF82DE4826D}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
  50. Catalyst Control Center Next Localization ES (HKLM\...\{949F125B-A6CC-5A5E-EEE7-4AC50305C1FA}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
  51. Catalyst Control Center Next Localization FI (HKLM\...\{20D46801-147B-30AD-7C5A-AC4560A79096}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
  52. Catalyst Control Center Next Localization FR (HKLM\...\{22C39711-2747-D264-319A-1550BEEAAEC6}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
  53. Catalyst Control Center Next Localization HU (HKLM\...\{1DBACFDB-5E43-7882-36BD-53526D34BD22}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
  54. Catalyst Control Center Next Localization IT (HKLM\...\{A91FC4BF-C1EC-ADCA-79D1-F4F0671F1D60}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
  55. Catalyst Control Center Next Localization JA (HKLM\...\{ED75A775-03A7-F214-868D-497748707968}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
  56. Catalyst Control Center Next Localization KO (HKLM\...\{07BFBD5C-2F63-6828-1B61-B41A44113F3B}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
  57. Catalyst Control Center Next Localization NL (HKLM\...\{E6038D3E-5D87-8DF7-6D05-BE7532C3E73E}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
  58. Catalyst Control Center Next Localization NO (HKLM\...\{DFAD9DAC-4768-C8BB-4E0E-5239605A9BEA}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
  59. Catalyst Control Center Next Localization PL (HKLM\...\{FFBFBD1F-B160-A119-7C43-8584FA2E5665}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
  60. Catalyst Control Center Next Localization RU (HKLM\...\{4D1D5407-9B69-6422-629C-8518A26004A4}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
  61. Catalyst Control Center Next Localization SV (HKLM\...\{A8379BAB-59A9-C0A3-8BCC-4852EA403692}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
  62. Catalyst Control Center Next Localization TH (HKLM\...\{24DF617A-CD23-6E6A-126B-23630D2781CE}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
  63. Catalyst Control Center Next Localization TR (HKLM\...\{83DDDFD8-AD42-72F9-E4F1-5456FDB304C9}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
  64. CyberGhost 6 (HKLM\...\CyberGhost 6_is1) (Version: - CyberGhost S.R.L.)
  65. Discord (HKU\S-1-5-21-2936657135-2552198426-1408488734-1001\...\Discord) (Version: 0.0.298 - Discord Inc.)
  66. Exodus (HKU\S-1-5-21-2936657135-2552198426-1408488734-1001\...\exodus) (Version: 1.34.1 - Exodus Movement Inc)
  67. FileZilla Server (HKLM-x32\...\FileZilla Server) (Version: beta 0.9.60 - FileZilla Project)
  68. Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.)
  69. Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
  70. Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
  71. Gyazo 3.3.2 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version: - Nota Inc.)
  72. InputMapper (HKLM-x32\...\{026D2025-A7FA-4F5C-AF8C-A6F7A9B917FC}) (Version: 1.6.10.19991 - DSDCS)
  73. Instant Eyedropper 1.9.1.0 (HKLM-x32\...\Instant Eyedropper_is1) (Version: - Spicebrains)
  74. Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{F70BCE36-25F2-4475-A918-6209B3D85BF3}) (Version: 15.0.179 - Intel Corporation)
  75. Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4534 - Intel Corporation)
  76. iTunes (HKLM\...\{02F95875-9527-49CC-B32F-970ADAEBD1EF}) (Version: 12.6.2.20 - Apple Inc.)
  77. Java 8 Update 131 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180131F0}) (Version: 8.0.1310.11 - Oracle Corporation)
  78. Lightshot-5.4.0.10 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.10 - Skillbrains)
  79. Microsoft Office 365 ProPlus - en-us (HKLM\...\O365ProPlusRetail - en-us) (Version: 16.0.8431.2079 - Microsoft Corporation)
  80. Microsoft OneDrive (HKU\S-1-5-21-2936657135-2552198426-1408488734-1001\...\OneDriveSetup.exe) (Version: 17.3.6998.0830 - Microsoft Corporation)
  81. Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
  82. Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
  83. Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
  84. Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
  85. Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
  86. Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
  87. Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
  88. Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
  89. Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
  90. Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
  91. Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
  92. Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
  93. Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.4.2 - Notepad++ Team)
  94. NVIDIA 3D Vision Controller Driver 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
  95. NVIDIA 3D Vision Driver 387.92 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 387.92 - NVIDIA Corporation)
  96. NVIDIA GeForce Experience 3.9.0.97 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.9.0.97 - NVIDIA Corporation)
  97. NVIDIA Graphics Driver 387.92 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 387.92 - NVIDIA Corporation)
  98. NVIDIA HD Audio Driver 1.3.35.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.35.1 - NVIDIA Corporation)
  99. NVIDIA PhysX System Software 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
  100. Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden
  101. Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden
  102. Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden
  103. Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden
  104. Popcorn Time (HKLM-x32\...\Popcorn Time_is1) (Version: 5.6.1.0 - Popcorn Time) <==== ATTENTION
  105. Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.2.0 - Rockstar Games)
  106. RogueKiller version 12.11.18.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 12.11.18.0 - Adlice Software)
  107. Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.103 - Skype Technologies S.A.)
  108. Spotify (HKU\S-1-5-21-2936657135-2552198426-1408488734-1001\...\Spotify) (Version: 1.0.65.320.gac7a8e02 - Spotify AB)
  109. Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
  110. Stremio (HKU\S-1-5-21-2936657135-2552198426-1408488734-1001\...\Stremio) (Version: 4.0.0-beta.29 - Smart Code Ltd.)
  111. TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
  112. Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
  113. Wacom Tablet (HKLM\...\Wacom Tablet Driver) (Version: 6.3.23-1 - Wacom Technology Corp.)
  114. Wallpaper Engine (HKLM\...\Steam App 431960) (Version: - Kristjan Skutta)
  115. WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
  116. WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
  117. WinHTTrack Website Copier 3.49-2 (x64) (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.49.2 - HTTrack)
  118. WinRAR 5.50 beta 5 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.5 - win.rar GmbH)
  119.  
  120. ==================== Custom CLSID (Whitelisted): ==========================
  121.  
  122. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  123.  
  124. CustomCLSID: HKU\S-1-5-21-2936657135-2552198426-1408488734-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-AC40C8EF505A}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => No File
  125. CustomCLSID: HKU\S-1-5-21-2936657135-2552198426-1408488734-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
  126. ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
  127. ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
  128. ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
  129. ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
  130. ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2017-06-18] ()
  131. ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-07-08] (Alexander Roshal)
  132. ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-07-08] (Alexander Roshal)
  133. ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
  134. ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_0745f11ce6fc197c\igfxDTCM.dll [2016-11-01] (Intel Corporation)
  135. ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2017-10-06] (NVIDIA Corporation)
  136. ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
  137. ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-07-08] (Alexander Roshal)
  138. ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-07-08] (Alexander Roshal)
  139.  
  140. ==================== Scheduled Tasks (Whitelisted) =============
  141.  
  142. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  143.  
  144. Task: {103EDA18-9D25-49A8-B40D-4C760AD1D36C} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-29] ()
  145. Task: {2802CB63-2F79-4D91-AA73-CBA53A987C72} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation)
  146. Task: {2B2D99F4-81E1-4C13-B6A5-894D26CAB048} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-09-19] (NVIDIA Corporation)
  147. Task: {4289D31B-2A82-4727-963B-D2F7D4DFE3D7} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-02-14] (Apple Inc.)
  148. Task: {4C46BBB9-C858-4AEF-9D99-958884AAA496} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation)
  149. Task: {5320A2B1-CDE4-4494-B03A-EFA6921A88AF} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-09-19] (NVIDIA Corporation)
  150. Task: {563EFA46-B7A3-494A-BF5F-CB442E5E78F3} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2017-05-16] ()
  151. Task: {5B135D37-5AA2-452F-AD2B-29E1F01A0928} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-09-19] (NVIDIA Corporation)
  152. Task: {5D65390F-C8CE-4D9D-9369-33E881C03042} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-09-19] (NVIDIA Corporation)
  153. Task: {5E16946A-BC20-449E-9C83-B86A6367E97A} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-09-19] (NVIDIA Corporation)
  154. Task: {6E1DBB63-ADD4-4690-93C5-B8422261D25E} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2017-09-29] (Microsoft Corporation)
  155. Task: {7D99D667-5FA1-479A-9DC5-495BBAE07C10} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-09-19] (NVIDIA Corporation)
  156. Task: {80D218FD-9F6E-48F8-8106-E29DFB86C4E0} - System32\Tasks\[email protected] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated)
  157. Task: {8BC59986-81A3-45B7-A08E-617A39881BED} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-09-19] (NVIDIA Corporation)
  158. Task: {A22DCFEB-C01A-472E-8000-08CD25C34A03} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-09-29] (Microsoft Corporation)
  159. Task: {A60AE751-9AE0-47FD-BA39-14F9A9DBF18D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-09-29] (Microsoft Corporation)
  160. Task: {B18BFE95-FB03-40E0-AFF7-7775C56697BE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-07-05] (Google Inc.)
  161. Task: {BCC054CA-2C2D-440E-B7A7-6DD4F40571EE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-07-05] (Google Inc.)
  162. Task: {C3BD6C5B-B088-4687-8D1F-46536578A905} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2017-05-16] ()
  163. Task: {DAD2BA48-3856-4DBB-AC21-DFFB10A6BD48} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-29] ()
  164. Task: {E6A27711-1FE4-4B3F-9190-502CD1EAE5C4} - System32\Tasks\ExclusiveTool => C:\Program Files (x86)\DSDCS\InputMapper\ExclusiveModeTool.exe [2016-10-04] (InputMapper)
  165. Task: {E79AB405-2934-4704-B90D-B54B3AD04762} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-09-19] (NVIDIA Corporation)
  166.  
  167. (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
  168.  
  169.  
  170. ==================== Shortcuts & WMI ========================
  171.  
  172. (The entries could be listed to be restored or removed.)
  173.  
  174.  
  175. Shortcut: C:\Users\richh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Stremio\Stremio web.lnk -> C:\Users\richh\AppData\Local\Programs\LNV\Stremio-4\stremio web.bat ()
  176.  
  177. ShortcutWithArgument: C:\Users\richh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\SaferVPN - FREE VPN _ Privacy & Unblock Sites.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=iamifmhbkeeccbjkaenolpghohlpnioi
  178. ShortcutWithArgument: C:\Users\richh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Web Server for Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=ofhbbkphhbklhfoeikjpcbhemlocgigb
  179.  
  180. ==================== Loaded Modules (Whitelisted) ==============
  181.  
  182. 2017-07-13 20:50 - 2017-07-13 20:50 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
  183. 2017-07-13 20:50 - 2017-07-13 20:50 - 001354040 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
  184. 2017-07-21 12:46 - 2017-09-19 03:23 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
  185. 2017-09-26 02:52 - 2017-09-26 02:52 - 000491600 _____ () C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll
  186. 2017-08-18 07:28 - 2017-09-29 07:50 - 008929480 _____ () C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\1033\GrooveIntlResource.dll
  187. 2017-06-18 17:44 - 2017-06-18 17:44 - 000230064 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
  188. 2017-08-25 18:07 - 2017-06-28 19:43 - 001658312 _____ () C:\Program Files\Tablet\Wacom\libxml2.dll
  189. 2017-03-18 16:58 - 2017-03-18 16:58 - 000138000 _____ () C:\Windows\SYSTEM32\inputhost.dll
  190. 2017-03-18 16:59 - 2017-03-18 22:30 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
  191. 2017-07-14 10:27 - 2017-07-14 10:27 - 000092472 _____ () C:\Program Files\iTunes\zlib1.dll
  192. 2017-07-14 10:26 - 2017-07-14 10:26 - 001354040 _____ () C:\Program Files\iTunes\libxml2.dll
  193. 2017-07-05 17:27 - 2017-07-11 00:01 - 001257984 _____ () C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\wallpaper32.exe
  194. 2017-09-26 02:52 - 2017-09-26 02:52 - 034879568 _____ () C:\Program Files (x86)\Adobe\Adobe Sync\Coresync\Coresync.exe
  195. 2017-10-10 10:52 - 2017-10-10 10:53 - 000244736 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.4.716.0_x64__kzf8qxf38zg5c\Microsoft.Skype.ImageTool.dll
  196. 2017-10-10 10:52 - 2017-10-10 10:53 - 000041472 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.4.716.0_x64__kzf8qxf38zg5c\TraceProvider.dll
  197. 2017-10-10 10:52 - 2017-10-10 10:53 - 000132608 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.4.716.0_x64__kzf8qxf38zg5c\SkypeHost.Proxies.dll
  198. 2017-10-10 10:52 - 2017-10-10 10:53 - 000922624 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.4.716.0_x64__kzf8qxf38zg5c\VideoN.dll
  199. 2017-10-10 10:52 - 2017-10-10 10:53 - 000087552 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.4.716.0_x64__kzf8qxf38zg5c\SkypeHost.exe
  200. 2017-10-10 10:52 - 2017-10-10 10:53 - 000206336 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.4.716.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
  201. 2017-10-10 10:52 - 2017-10-10 10:53 - 028779520 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.4.716.0_x64__kzf8qxf38zg5c\SkyWrap.dll
  202. 2017-10-10 10:52 - 2017-10-10 10:53 - 002515968 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.4.716.0_x64__kzf8qxf38zg5c\skypert.dll
  203. 2017-09-16 00:12 - 2017-09-16 00:12 - 002263352 _____ () C:\Users\richh\AppData\Local\exodus\app-1.34.1\ffmpeg.dll
  204. 2017-09-16 00:12 - 2017-09-16 00:12 - 002920760 _____ () C:\Users\richh\AppData\Local\exodus\app-1.34.1\libglesv2.dll
  205. 2017-09-16 00:12 - 2017-09-16 00:12 - 000098616 _____ () C:\Users\richh\AppData\Local\exodus\app-1.34.1\libegl.dll
  206. 2017-07-05 17:27 - 2017-07-11 00:01 - 000803328 _____ () C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\webwallpaper32.exe
  207. 2017-09-26 21:05 - 2017-09-21 03:29 - 004022616 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libglesv2.dll
  208. 2017-09-26 21:05 - 2017-09-21 03:29 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libegl.dll
  209. 2017-09-12 16:49 - 2017-09-05 01:19 - 004125088 _____ () C:\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentDeliveryManager.Background.dll
  210. 2017-08-08 19:27 - 2017-08-08 15:13 - 001893880 _____ () C:\Users\richh\AppData\Local\Discord\app-0.0.298\ffmpeg.dll
  211. 2017-08-09 08:09 - 2017-08-09 08:09 - 001577976 _____ () \\?\C:\Users\richh\AppData\Roaming\discord\0.0.298\modules\discord_toaster\discord_toaster.node
  212. 2017-08-18 07:28 - 2017-09-29 07:50 - 008928968 _____ () C:\Program Files (x86)\Microsoft Office\root\Office16\1033\GrooveIntlResource.dll
  213. 2017-09-29 07:51 - 2017-09-29 07:51 - 000094920 _____ () C:\Program Files (x86)\Microsoft Office\root\Office16\officevoicemanager.dll
  214. 2017-09-20 02:42 - 2017-09-20 02:42 - 067115616 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\libcef.dll
  215. 2017-07-21 12:46 - 2017-09-19 03:23 - 069807552 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
  216. 2017-08-08 19:27 - 2017-08-08 15:13 - 001938424 _____ () C:\Users\richh\AppData\Local\Discord\app-0.0.298\libglesv2.dll
  217. 2017-08-08 19:27 - 2017-08-08 15:13 - 000095736 _____ () C:\Users\richh\AppData\Local\Discord\app-0.0.298\libegl.dll
  218. 2017-07-07 15:11 - 2017-10-11 11:06 - 068211824 _____ () C:\Users\richh\AppData\Roaming\Spotify\libcef.dll
  219. 2017-07-07 15:11 - 2017-10-11 11:06 - 003110512 _____ () C:\Users\richh\AppData\Roaming\Spotify\libglesv2.dll
  220. 2017-07-07 15:11 - 2017-10-11 11:06 - 000087152 _____ () C:\Users\richh\AppData\Roaming\Spotify\libegl.dll
  221. 2017-07-21 12:46 - 2017-09-19 03:23 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
  222. 2017-09-06 18:11 - 2017-09-06 18:11 - 000118272 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\fs-ext\build\Release\fs-ext.node
  223. 2017-09-06 18:11 - 2017-09-06 18:11 - 000214528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
  224. 2017-09-06 18:11 - 2017-09-06 18:11 - 000117248 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ref\build\Release\binding.node
  225. 2017-09-06 18:11 - 2017-09-06 18:11 - 000125952 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ffi\build\Release\ffi_bindings.node
  226. 2017-09-20 03:04 - 2017-09-20 03:04 - 000099424 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin.dll
  227. 2017-09-06 18:11 - 2017-09-06 18:11 - 000086528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\idle-gc\build\Release\idle-gc.node
  228. 2017-08-09 08:09 - 2017-10-07 10:35 - 009722360 _____ () \\?\C:\Users\richh\AppData\Roaming\discord\0.0.298\modules\discord_voice\discord_voice.node
  229. 2017-08-09 08:09 - 2017-08-09 08:09 - 001440248 _____ () \\?\C:\Users\richh\AppData\Roaming\discord\0.0.298\modules\discord_utils\discord_utils.node
  230. 2017-10-11 11:08 - 2017-10-11 11:08 - 000148992 _____ () \\?\C:\Users\richh\AppData\Local\Temp\3449.tmp.node
  231. 2017-08-09 08:09 - 2017-08-09 08:09 - 002658296 _____ () \\?\C:\Users\richh\AppData\Roaming\discord\0.0.298\modules\discord_rpc\discord_rpc.node
  232. 2017-08-09 08:10 - 2017-08-09 08:10 - 002673656 _____ () \\?\C:\Users\richh\AppData\Roaming\discord\0.0.298\modules\discord_contact_import\discord_contact_import.node
  233. 2017-09-12 20:11 - 2017-09-12 20:11 - 000118272 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\fs-ext\build\Release\fs-ext.node
  234. 2017-09-12 20:10 - 2017-09-12 20:10 - 000117760 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ref\build\Release\binding.node
  235. 2017-09-12 20:11 - 2017-09-12 20:11 - 000125440 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ffi\build\Release\ffi_bindings.node
  236. 2017-09-12 20:11 - 2017-09-12 20:11 - 000214528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
  237. 2017-09-20 02:59 - 2017-09-20 02:59 - 000099424 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin.dll
  238. 2017-09-12 20:11 - 2017-09-12 20:11 - 000098816 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\bufferutil\build\Release\bufferutil.node
  239. 2017-09-12 20:11 - 2017-09-12 20:11 - 000086528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\idle-gc\build\Release\idle-gc.node
  240. 2017-07-05 17:27 - 2017-07-05 17:28 - 067717632 _____ () C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\libcef.dll
  241. 2017-07-05 17:27 - 2017-07-05 17:28 - 001922560 _____ () C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\libglesv2.dll
  242. 2017-07-05 17:28 - 2017-07-05 17:28 - 000079872 _____ () C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\libegl.dll
  243.  
  244. ==================== Alternate Data Streams (Whitelisted) =========
  245.  
  246. (If an entry is included in the fixlist, only the ADS will be removed.)
  247.  
  248.  
  249. ==================== Safe Mode (Whitelisted) ===================
  250.  
  251. (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
  252.  
  253.  
  254. ==================== Association (Whitelisted) ===============
  255.  
  256. (If an entry is included in the fixlist, the registry item will be restored to default or removed.)
  257.  
  258.  
  259. ==================== Internet Explorer trusted/restricted ===============
  260.  
  261. (If an entry is included in the fixlist, it will be removed from the registry.)
  262.  
  263. IE trusted site: HKU\S-1-5-21-2936657135-2552198426-1408488734-1001\...\sharepoint.com -> hxxps://wvk12-files.sharepoint.com
  264.  
  265. ==================== Hosts content: ===============================
  266.  
  267. (If needed Hosts: directive could be included in the fixlist to reset Hosts.)
  268.  
  269. 2017-03-18 17:03 - 2017-09-25 20:34 - 000000862 _____ C:\Windows\system32\Drivers\etc\hosts
  270.  
  271. 127.0.0.1 api.rsbuddy.com
  272.  
  273. ==================== Other Areas ============================
  274.  
  275. (Currently there is no automatic fix for this section.)
  276.  
  277. HKU\S-1-5-21-2936657135-2552198426-1408488734-1001\Control Panel\Desktop\\Wallpaper -> c:\users\richh\appdata\local\microsoft\windows\themes\roamedthemefiles\desktopbackground\5cf8b62b.jpg
  278. DNS Servers: 208.180.42.68 - 208.180.42.100
  279. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
  280. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
  281. Windows Firewall is enabled.
  282.  
  283. ==================== MSCONFIG/TASK MANAGER disabled items ==
  284.  
  285. HKU\S-1-5-21-2936657135-2552198426-1408488734-1001\...\StartupApproved\Run: => "CyberGhost"
  286. HKU\S-1-5-21-2936657135-2552198426-1408488734-1001\...\StartupApproved\Run: => "Spotify"
  287. HKU\S-1-5-21-2936657135-2552198426-1408488734-1001\...\StartupApproved\Run: => "Spotify Web Helper"
  288. HKU\S-1-5-21-2936657135-2552198426-1408488734-1001\...\StartupApproved\Run: => "Steam"
  289.  
  290. ==================== FirewallRules (Whitelisted) ===============
  291.  
  292. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  293.  
  294. FirewallRules: [{A6CB2A39-A1C6-4A2D-AB7A-24B684271B02}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
  295. FirewallRules: [{ADF756CF-A765-442C-A9D4-081D541DF976}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
  296. FirewallRules: [{EB945D87-A2F6-4E2F-9050-0B8295558ECC}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
  297. FirewallRules: [{F556684F-645E-42BD-A32A-18F6D152C503}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
  298. FirewallRules: [{13A6F8CC-D9ED-411F-8348-C0D2861FFAB2}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
  299. FirewallRules: [{626ADCE2-C44C-4716-B310-E3E24261D44E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\launcher.exe
  300. FirewallRules: [{9B3A9F90-FCB6-45CC-AF5A-D4306B4FE585}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\launcher.exe
  301. FirewallRules: [TCP Query User{ED377F7C-1A3A-4E16-BF15-551878B12361}C:\users\richh\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\richh\appdata\roaming\spotify\spotify.exe
  302. FirewallRules: [UDP Query User{D6461C1C-1BFF-4285-A891-83E0F971CE4F}C:\users\richh\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\richh\appdata\roaming\spotify\spotify.exe
  303. FirewallRules: [{0D07FEED-85C2-4687-B4B3-F9BE374EA985}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
  304. FirewallRules: [{713E1BE6-4333-4523-B258-82978EDD6277}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
  305. FirewallRules: [{CEA45C9C-3B85-4DFD-B5AF-06F3A21820DD}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
  306. FirewallRules: [{D58BDD6F-0907-4DF3-9A78-C0EEDA49D651}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
  307. FirewallRules: [{F5557B5C-F59D-433B-B4DB-B3F70A6C045D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
  308. FirewallRules: [{791A3447-25A5-483A-A466-9B4D40B09AF7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
  309. FirewallRules: [{328EC201-677E-4EF2-8225-0C35AEB85AE0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
  310. FirewallRules: [{009CB91C-B74B-456F-9C73-019BDE70CED0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
  311. FirewallRules: [{646ED53B-28D3-4B60-9A4A-2F93BCC12536}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
  312. FirewallRules: [{B9047938-0551-4444-B951-A17509CE1277}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
  313. FirewallRules: [{E1228108-FF7A-4728-96A1-A3D6971DE1D9}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
  314. FirewallRules: [{9750BD54-CD02-44D6-BF49-11C8E3AB3D2B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
  315. FirewallRules: [{40D01F47-FBAC-498B-B9DF-2AE75E3F5D70}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
  316. FirewallRules: [{9EC1E1E7-8023-4CBC-9D46-56D7F5EA6F5E}] => (Allow) C:\Program Files\iTunes\iTunes.exe
  317. FirewallRules: [TCP Query User{A770FDFD-B327-44CA-8B78-546D718E46CA}C:\program files (x86)\brackets\node.exe] => (Allow) C:\program files (x86)\brackets\node.exe
  318. FirewallRules: [UDP Query User{34EABD42-D172-43F4-A3AC-2F8367BEB0F9}C:\program files (x86)\brackets\node.exe] => (Allow) C:\program files (x86)\brackets\node.exe
  319. FirewallRules: [{67AE13F1-13A1-45C0-84A1-ECAB7A6ED06B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  320. FirewallRules: [{EF454DEA-BDA0-448B-BEB5-3AC52F3ACE88}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  321. FirewallRules: [{56530C64-E887-48AD-94D9-67A5B187305D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
  322. FirewallRules: [{5DAA43FB-6623-4F0A-AA98-7BB8D5530A32}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
  323. FirewallRules: [{759830CE-DF66-4573-98E0-C4D94E4BBF57}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
  324. FirewallRules: [{0CAB78FF-B0E1-4C52-8B5C-842790050E2C}] => (Allow) C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe
  325. FirewallRules: [{AD3C4C0A-D65B-43F0-9AAD-C2A8E1C0764C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  326. FirewallRules: [TCP Query User{5F54EB0C-8DE3-4466-A00E-30D13C8EF21F}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
  327. FirewallRules: [UDP Query User{A951BD28-DFDC-4F4C-AC51-90932B1715A5}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
  328. FirewallRules: [{C85F66D7-2E1D-49ED-B5D8-97A8CEC44C4E}] => (Allow) C:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe
  329. FirewallRules: [{F74BF94A-7981-4398-B40F-4ABD6E5A294A}] => (Allow) C:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe
  330. FirewallRules: [TCP Query User{74D39E30-024E-4764-9A0D-B02FA6B0A9FE}C:\users\richh\appdata\local\programs\lnv\stremio-4\node.exe] => (Allow) C:\users\richh\appdata\local\programs\lnv\stremio-4\node.exe
  331. FirewallRules: [UDP Query User{DF7E2B60-B02F-4667-82E6-B4B45F41EC44}C:\users\richh\appdata\local\programs\lnv\stremio-4\node.exe] => (Allow) C:\users\richh\appdata\local\programs\lnv\stremio-4\node.exe
  332. FirewallRules: [TCP Query User{5E7C0530-6D5C-4527-B414-EBFCAB8C4542}C:\users\richh\appdata\local\webtorrent\app-0.18.0\webtorrent.exe] => (Allow) C:\users\richh\appdata\local\webtorrent\app-0.18.0\webtorrent.exe
  333. FirewallRules: [UDP Query User{EA1AAC01-3C1E-4356-A742-A03C82559C87}C:\users\richh\appdata\local\webtorrent\app-0.18.0\webtorrent.exe] => (Allow) C:\users\richh\appdata\local\webtorrent\app-0.18.0\webtorrent.exe
  334. FirewallRules: [{166D23C7-429B-4926-8096-6AEDA9DEA5D2}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe
  335. FirewallRules: [{F80D9462-C57C-42E8-BD63-ABE41E30F4EA}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe
  336. FirewallRules: [{24CE236D-5711-4872-9366-BCDC267586F0}] => (Allow) C:\Program Files (x86)\Popcorn Time\PopcornTimeDesktop.exe
  337. FirewallRules: [{E121F115-C380-483A-ABEC-1342AE5E4627}] => (Allow) C:\Program Files (x86)\Popcorn Time\PopcornTimeDesktop.exe
  338. FirewallRules: [{C60DE574-2A21-4538-9A96-3A9473191CF5}] => (Allow) C:\Program Files (x86)\Popcorn Time\chromecast\node.exe
  339. FirewallRules: [{5F1BA8DC-D325-446B-A81C-4011D159A4B1}] => (Allow) C:\Program Files (x86)\Popcorn Time\chromecast\node.exe
  340. FirewallRules: [{490DCC2B-18A1-4EC0-A90E-3151B1C49D0A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  341.  
  342. ==================== Restore Points =========================
  343.  
  344. 08-10-2017 21:25:10 Scheduled Checkpoint
  345. 12-10-2017 16:04:38 Removed Grand Theft Auto V - The Manual
  346.  
  347. ==================== Faulty Device Manager Devices =============
  348.  
  349.  
  350. ==================== Event log errors: =========================
  351.  
  352. Application errors:
  353. ==================
  354. Error: (10/12/2017 04:50:10 AM) (Source: SideBySide) (EventID: 35) (User: )
  355. Description: Activation context generation failed for "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest".Error in manifest or policy file "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL" on line 1.
  356. Component identity found in manifest does not match the identity of the component requested.
  357. Reference is UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
  358. Definition is UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
  359. Please use sxstrace.exe for detailed diagnosis.
  360.  
  361. Error: (10/12/2017 04:50:08 AM) (Source: SideBySide) (EventID: 78) (User: )
  362. Description: Activation context generation failed for "C:\Program Files (x86)\Audacity\audacity.exe".Error in manifest or policy file "" on line .
  363. A component version required by the application conflicts with another component version already active.
  364. Conflicting components are:.
  365. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.483_none_26002d27e7c744a2.manifest.
  366. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.483_none_6dad63fefc436da8.manifest.
  367.  
  368. Error: (10/12/2017 02:53:16 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-7FD9RFA)
  369. Description: Activation of app Microsoft.Windows.Photos_8wekyb3d8bbwe!App failed with error: -2147023170 See the Microsoft-Windows-TWinUI/Operational log for additional information.
  370.  
  371. Error: (10/12/2017 01:23:38 AM) (Source: Bonjour Service) (EventID: 100) (User: )
  372. Description: Task Scheduling Error: m->NextScheduledSPRetry 2406
  373.  
  374. Error: (10/12/2017 01:23:38 AM) (Source: Bonjour Service) (EventID: 100) (User: )
  375. Description: Task Scheduling Error: m->NextScheduledEvent 2406
  376.  
  377. Error: (10/12/2017 01:23:38 AM) (Source: Bonjour Service) (EventID: 100) (User: )
  378. Description: Task Scheduling Error: Continuously busy for more than a second
  379.  
  380. Error: (10/12/2017 01:23:37 AM) (Source: Bonjour Service) (EventID: 100) (User: )
  381. Description: Task Scheduling Error: m->NextScheduledSPRetry 1188
  382.  
  383. Error: (10/12/2017 01:23:37 AM) (Source: Bonjour Service) (EventID: 100) (User: )
  384. Description: Task Scheduling Error: m->NextScheduledEvent 1188
  385.  
  386. Error: (10/12/2017 01:23:37 AM) (Source: Bonjour Service) (EventID: 100) (User: )
  387. Description: Task Scheduling Error: Continuously busy for more than a second
  388.  
  389. Error: (10/11/2017 11:09:43 AM) (Source: SideBySide) (EventID: 35) (User: )
  390. Description: Activation context generation failed for "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest".Error in manifest or policy file "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL" on line 1.
  391. Component identity found in manifest does not match the identity of the component requested.
  392. Reference is UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
  393. Definition is UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
  394. Please use sxstrace.exe for detailed diagnosis.
  395.  
  396.  
  397. System errors:
  398. =============
  399. Error: (10/12/2017 08:15:52 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
  400. Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
  401. {D63B10C5-BB46-4990-A94F-E40B9D520160}
  402. and APPID
  403. {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
  404. to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
  405.  
  406. Error: (10/11/2017 11:06:44 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-7FD9RFA)
  407. Description: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
  408. {5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C}
  409. and APPID
  410. {CE79BC8B-2980-4CA9-9570-6E0BF5B93BF2}
  411. to the user DESKTOP-7FD9RFA\richh SID (S-1-5-21-2936657135-2552198426-1408488734-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
  412.  
  413. Error: (10/11/2017 02:15:11 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
  414. Description: The CldFlt service failed to start due to the following error:
  415. The request is not supported.
  416.  
  417. Error: (10/11/2017 02:12:30 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
  418. Description: The Update Orchestrator Service service did not shut down properly after receiving a preshutdown control.
  419.  
  420. Error: (10/11/2017 02:11:42 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
  421. Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
  422. {D63B10C5-BB46-4990-A94F-E40B9D520160}
  423. and APPID
  424. {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
  425. to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
  426.  
  427. Error: (10/10/2017 10:58:17 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-7FD9RFA)
  428. Description: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
  429. {C2F03A33-21F5-47FA-B4BB-156362A2F239}
  430. and APPID
  431. {316CDED5-E4AE-4B15-9113-7055D84DCC97}
  432. to the user DESKTOP-7FD9RFA\richh SID (S-1-5-21-2936657135-2552198426-1408488734-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742). This security permission can be modified using the Component Services administrative tool.
  433.  
  434. Error: (10/10/2017 10:54:44 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-7FD9RFA)
  435. Description: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
  436. {C2F03A33-21F5-47FA-B4BB-156362A2F239}
  437. and APPID
  438. {316CDED5-E4AE-4B15-9113-7055D84DCC97}
  439. to the user DESKTOP-7FD9RFA\richh SID (S-1-5-21-2936657135-2552198426-1408488734-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742). This security permission can be modified using the Component Services administrative tool.
  440.  
  441. Error: (10/09/2017 08:20:30 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
  442. Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
  443. {D63B10C5-BB46-4990-A94F-E40B9D520160}
  444. and APPID
  445. {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
  446. to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
  447.  
  448. Error: (10/08/2017 09:16:58 PM) (Source: volsnap) (EventID: 36) (User: )
  449. Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.
  450.  
  451. Error: (10/08/2017 11:37:57 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
  452. Description: The NVIDIA LocalSystem Container service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 6000 milliseconds: Restart the service.
  453.  
  454.  
  455. CodeIntegrity:
  456. ===================================
  457. Date: 2017-10-12 16:23:21.083
  458. Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
  459.  
  460. Date: 2017-10-12 16:23:21.079
  461. Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
  462.  
  463. Date: 2017-10-12 16:23:00.537
  464. Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
  465.  
  466. Date: 2017-10-12 16:23:00.534
  467. Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
  468.  
  469. Date: 2017-10-12 12:51:49.936
  470. Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
  471.  
  472. Date: 2017-10-12 12:51:49.933
  473. Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
  474.  
  475. Date: 2017-10-12 11:13:56.039
  476. Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
  477.  
  478. Date: 2017-10-12 11:13:56.037
  479. Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
  480.  
  481. Date: 2017-10-12 00:12:32.310
  482. Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
  483.  
  484. Date: 2017-10-12 00:12:32.304
  485. Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
  486.  
  487.  
  488. ==================== Memory info ===========================
  489.  
  490. Processor: Intel(R) Pentium(R) CPU G4560 @ 3.50GHz
  491. Percentage of memory in use: 54%
  492. Total physical RAM: 8122.16 MB
  493. Available physical RAM: 3665.25 MB
  494. Total Virtual: 17850.16 MB
  495. Available Virtual: 9529.05 MB
  496.  
  497. ==================== Drives ================================
  498.  
  499. Drive c: () (Fixed) (Total:930.96 GB) (Free:739.19 GB) NTFS
  500. Drive d: (ESD-USB) (Removable) (Total:28.62 GB) (Free:22.12 GB) FAT32
  501.  
  502. ==================== MBR & Partition Table ==================
  503.  
  504. ========================================================
  505. Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 00000000)
  506.  
  507. Partition: GPT.
  508.  
  509. ========================================================
  510. Disk: 1 (MBR Code: Windows 7 or 8) (Size: 28.6 GB) (Disk ID: 567B9397)
  511. Partition 1: (Active) - (Size=28.6 GB) - (Type=0C)
  512.  
  513. ==================== End of Addition.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!