API tools faq
paste
Guest User

Untitled

a guest
Aug 11th, 2017
376
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 64.95 KB | None | 0 0
raw download clone embed print report
  1. Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-08-2017
  2. Ran by mike (11-08-2017 01:07:40)
  3. Running from C:\Users\mike\Downloads
  4. Windows 10 Pro Version 1703 (X64) (2017-06-11 13:38:28)
  5. Boot Mode: Normal
  6. ==========================================================
  7.  
  8.  
  9. ==================== Accounts: =============================
  10.  
  11. Administrator (S-1-5-21-44541308-3757633745-1958273574-500 - Administrator - Disabled)
  12. DefaultAccount (S-1-5-21-44541308-3757633745-1958273574-503 - Limited - Disabled)
  13. Guest (S-1-5-21-44541308-3757633745-1958273574-501 - Limited - Disabled)
  14. mike (S-1-5-21-44541308-3757633745-1958273574-1001 - Administrator - Enabled) => C:\Users\mike
  15.  
  16. ==================== Security Center ========================
  17.  
  18. (If an entry is included in the fixlist, it will be removed.)
  19.  
  20. AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  21. AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  22.  
  23. ==================== Installed Programs ======================
  24.  
  25. (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
  26.  
  27. . . (HKLM\...\{7565710A-C97D-44A4-A030-768957F9F2C1}) (Version: 7.1 - Intel) Hidden
  28. . . . (HKLM-x32\...\{F3B4320C-C72B-46B3-96D7-0C38E37388B8}) (Version: 2.8.0.7 - Intel) Hidden
  29. Ableton Live 9 Suite (HKLM\...\{7597F2DC-003A-476E-9281-774AB112B7BE}) (Version: 9.0.0.0 - Ableton)
  30. Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.0 - Adobe Systems Incorporated)
  31. Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 384.76 - NVIDIA Corporation) Hidden
  32. Apple Application Support (32-bit) (HKLM-x32\...\{D2FE6376-E549-4F63-A2C5-CA24DA035DE4}) (Version: 5.6 - Apple Inc.)
  33. Apple Application Support (64-bit) (HKLM\...\{BB109E24-EE90-485B-A28B-ADDEFB40540B}) (Version: 5.6 - Apple Inc.)
  34. Apple Mobile Device Support (HKLM\...\{0A596141-97D5-45FA-9281-98DFAF48D579}) (Version: 10.3.2.3 - Apple Inc.)
  35. Apple Software Update (HKLM-x32\...\{52D87F32-70E4-4348-8148-C0B9F35B1314}) (Version: 2.3.0.177 - Apple Inc.)
  36. Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team)
  37. Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
  38. Brackets (HKLM-x32\...\{B2F571A7-E9D3-4030-B167-57373D2D61D7}) (Version: 1.9 - brackets.io)
  39. Brave (HKU\S-1-5-21-44541308-3757633745-1958273574-1001\...\Brave) (Version: 0.18.14 - Brave Software)
  40. CCleaner (HKLM\...\CCleaner) (Version: 5.30 - Piriform)
  41. Classic Shell (HKLM\...\{383BB30A-B4A7-4666-9A83-22CFA8640097}) (Version: 4.3.0 - IvoSoft)
  42. Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version: - Valve)
  43. Discord (HKU\S-1-5-21-44541308-3757633745-1958273574-1001\...\Discord) (Version: 0.0.298 - Discord Inc.)
  44. Electrum (HKU\S-1-5-21-44541308-3757633745-1958273574-1001\...\Electrum) (Version: 2.8.3 - Electrum Technologies GmbH)
  45. FileZilla Client 3.26.1 (HKLM-x32\...\FileZilla Client) (Version: 3.26.1 - Tim Kosse)
  46. Google Chrome (HKLM\...\{98305915-759E-39B2-A385-5818CDBB9F5B}) (Version: 60.0.3112.90 - Google, Inc.)
  47. Google Play Music Desktop Player (HKU\S-1-5-21-44541308-3757633745-1958273574-1001\...\GPMDP_3) (Version: 4.4.0 - Samuel Attard)
  48. Gpg4win (2.3.4) (HKLM-x32\...\GPG4Win) (Version: 2.3.4 - The Gpg4win Project)
  49. GTK2-Runtime (HKLM-x32\...\GTK2-Runtime) (Version: 2.24.10-2012-10-10-ash - Alexander Shaduri)
  50. Gyazo 3.3.2 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version: - Nota Inc.)
  51. Intel(R) Chipset Device Software (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel(R) Corporation) Hidden
  52. Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.6.0.1035 - Intel Corporation)
  53. Intel® Driver Update Utility (HKLM-x32\...\{b480f6cc-fa56-482b-b0a3-49d69a32db6d}) (Version: 2.8.0.7 - Intel)
  54. InternetOff 3.0, 32\64 bit edition (HKLM-x32\...\InternetOff_is1) (Version: - Crystal Rich, Ltd)
  55. iTunes (HKLM\...\{02F95875-9527-49CC-B32F-970ADAEBD1EF}) (Version: 12.6.2.20 - Apple Inc.)
  56. Java 8 Update 141 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180141F0}) (Version: 8.0.1410.15 - Oracle Corporation)
  57. KMSpico v9.1.3 (HKLM\...\KMSpico_is1) (Version: 9.1.3 - )
  58. Logitech SetPoint 6.67 (HKLM\...\sp6) (Version: 6.67.83 - Logitech)
  59. Macro Recorder 5.8.0 (HKLM-x32\...\Macro Recorder_is1) (Version: 5.8.0 - Jitbit Software)
  60. MEmu (HKLM-x32\...\MEmu) (Version: 3.1.2.4 - Microvirt Software Technology Co. Ltd.)
  61. Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50906.0 - Microsoft Corporation)
  62. Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
  63. Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{CA8A885F-E95B-3FC6-BB91-F4D9377C7686}) (Version: 9.0.30729 - Microsoft Corporation)
  64. Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
  65. Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
  66. Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
  67. Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
  68. Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
  69. Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
  70. Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
  71. Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
  72. Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
  73. Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
  74. NBA 2K16 (HKLM-x32\...\NBA 2K16_is1) (Version: - )
  75. Novation USB Audio Driver 2.7 (HKLM\...\Novation USB Audio Driver_is1) (Version: 2.7 - Novation DMS Ltd.)
  76. NVIDIA 3D Vision Controller Driver 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
  77. NVIDIA 3D Vision Driver 384.76 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 384.76 - NVIDIA Corporation)
  78. NVIDIA GeForce Experience 3.8.0.89 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.8.0.89 - NVIDIA Corporation)
  79. NVIDIA Graphics Driver 384.76 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 384.76 - NVIDIA Corporation)
  80. NVIDIA HD Audio Driver 1.3.34.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.27 - NVIDIA Corporation)
  81. NVIDIA PhysX System Software 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
  82. Pidgin (HKLM-x32\...\Pidgin) (Version: 2.12.0 - )
  83. pidgin-otr 4.0.2 (HKLM-x32\...\pidgin-otr) (Version: 4.0.2 - Cypherpunks CA)
  84. PLAYERUNKNOWN'S BATTLEGROUNDS (HKLM\...\Steam App 578080) (Version: - Bluehole, Inc.)
  85. PLAYERUNKNOWN'S BATTLEGROUNDS (Test Server) (HKLM\...\Steam App 622590) (Version: - )
  86. PowerISO (HKLM-x32\...\PowerISO) (Version: 6.9 - Power Software Ltd)
  87. Private Internet Access Support Files (HKLM-x32\...\{7D72DAFF-DCB2-437B-BC22-4B2ABF21462B}) (Version: 1.0.0.0 - Private Internet Access)
  88. qBittorrent 3.3.13 (HKLM-x32\...\qBittorrent) (Version: 3.3.13 - The qBittorrent project)
  89. Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8105 - Realtek Semiconductor Corp.)
  90. REALTEK Wireless LAN Driver and Utility (HKLM-x32\...\{9C049509-055C-4CFF-A116-1D12312225EB}) (Version: 1.00.0265 - )
  91. Skype™ 7.37 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.37.103 - Skype Technologies S.A.)
  92. Spotify (HKU\S-1-5-21-44541308-3757633745-1958273574-1001\...\Spotify) (Version: 1.0.55.487.g256699aa - Spotify AB)
  93. Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
  94. Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)
  95. WinHTTrack Website Copier 3.49-2 (x64) (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.49.2 - HTTrack)
  96. WinRAR 5.50 beta 6 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.6 - win.rar GmbH)
  97.  
  98. ==================== Custom CLSID (Whitelisted): ==========================
  99.  
  100. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  101.  
  102. CustomCLSID: HKU\S-1-5-21-44541308-3757633745-1958273574-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\mike\AppData\Local\Microsoft\OneDrive\17.3.6816.0313\amd64\FileSyncShell64.dll => No File
  103. CustomCLSID: HKU\S-1-5-21-44541308-3757633745-1958273574-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\mike\AppData\Local\Microsoft\OneDrive\17.3.6816.0313\amd64\FileSyncShell64.dll => No File
  104. CustomCLSID: HKU\S-1-5-21-44541308-3757633745-1958273574-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\mike\AppData\Local\Microsoft\OneDrive\17.3.6816.0313\amd64\FileSyncShell64.dll => No File
  105. ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)
  106. ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)
  107. ContextMenuHandlers1: [GpgEX] -> {CCD955E4-5C16-4A33-AFDA-A8947A94946B} => C:\Program Files (x86)\GNU\GnuPG\bin\gpgex.dll [2017-07-06] (g10 Code GmbH)
  108. ContextMenuHandlers1: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files\PowerISO\PWRISOSH.DLL [2017-07-05] (Power Software Ltd)
  109. ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-07-25] (Alexander Roshal)
  110. ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-07-25] (Alexander Roshal)
  111. ContextMenuHandlers4: [GpgEX] -> {CCD955E4-5C16-4A33-AFDA-A8947A94946B} => C:\Program Files (x86)\GNU\GnuPG\bin\gpgex.dll [2017-07-06] (g10 Code GmbH)
  112. ContextMenuHandlers4: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files\PowerISO\PWRISOSH.DLL [2017-07-05] (Power Software Ltd)
  113. ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
  114. ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_6d1fd205efa7f979\igfxDTCM.dll [2017-05-30] (Intel Corporation)
  115. ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-06-27] (NVIDIA Corporation)
  116. ContextMenuHandlers6: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files\PowerISO\PWRISOSH.DLL [2017-07-05] (Power Software Ltd)
  117. ContextMenuHandlers6: [StartMenuExt] -> {E595F05F-903F-4318-8B0A-7F633B520D2B} => C:\WINDOWS\system32\StartMenuHelper64.dll [2016-07-30] (IvoSoft)
  118. ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-07-25] (Alexander Roshal)
  119. ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-07-25] (Alexander Roshal)
  120.  
  121. ==================== Scheduled Tasks (Whitelisted) =============
  122.  
  123. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  124.  
  125. Task: {10E69D99-3CAC-42C7-9521-4CB91635FCB0} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-02-14] (Apple Inc.)
  126. Task: {155E5C38-6B8B-491F-AD3B-8D1BC65BD7EB} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-07-26] (NVIDIA Corporation)
  127. Task: {265DFFDC-2054-4C7C-AE2F-352405429625} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-07-26] (NVIDIA Corporation)
  128. Task: {3C2F8530-8810-4F54-A2A7-2800EFDC109C} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-07-26] (NVIDIA Corporation)
  129. Task: {51EA4514-6024-4072-887C-603AED2F7950} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2017-05-16] ()
  130. Task: {562DBB03-4152-475B-AA33-786B5DE5DD23} - System32\Tasks\Private Internet Access Startup => C:\Program Files\pia_manager\pia_manager.exe [2017-07-02] ()
  131. Task: {62AD68A4-6A82-4E92-9587-92B309674DB3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-06-11] (Google Inc.)
  132. Task: {65A7F707-9E04-4134-B613-D53443290C9A} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [2013-12-11] ()
  133. Task: {8B2972FF-03AB-4867-9312-B7040682EB23} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2016-07-26] (Intel(R) Corporation)
  134. Task: {9138C170-B72E-492F-9467-638806BEF459} - System32\Tasks\Intel\Intel Telemetry 2 => C:\Program Files\Intel\Telemetry 2.0\lrio.exe [2016-03-17] (Intel Corporation)
  135. Task: {95234F22-3FCC-483F-B56A-87CC35BBEA82} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-07-26] (NVIDIA Corporation)
  136. Task: {98C3176C-FC48-4622-A762-94F95DEC4704} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-07-26] (NVIDIA Corporation)
  137. Task: {9ADE26BC-1BFD-4888-AC44-F58DFFD1F809} - System32\Tasks\AdobeAAMUpdater-1.0-MikePC-mike => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-05-26] (Adobe Systems Incorporated)
  138. Task: {A1206A56-2069-471E-9B24-B0AA9C8B9FFF} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\WINDOWS\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\task.vbs"
  139. Task: {A58ADBAC-E2B4-499C-A514-BBE1E3E5662D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-06-11] (Google Inc.)
  140. Task: {A9F808B7-6775-43C6-841C-E541AE34122C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-05-19] (Piriform Ltd)
  141. Task: {D2BBB6A2-96F3-4E62-8397-83A6ABF5FA82} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2017-05-16] ()
  142. Task: {D5AC4013-5ECB-45F6-AB1D-85421671801E} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-07-26] (NVIDIA Corporation)
  143. Task: {D773C041-78F2-4929-B7D4-451B64E86C43} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-07-26] (NVIDIA Corporation)
  144. Task: {D79B2C4E-149E-436F-B1BB-9CFF720969E6} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-07-26] (NVIDIA Corporation)
  145.  
  146. (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
  147.  
  148.  
  149. ==================== Shortcuts & WMI ========================
  150.  
  151. (The entries could be listed to be restored or removed.)
  152.  
  153.  
  154. ShortcutWithArgument: C:\Users\mike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Play Music.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=fahmaaghhglfmonjliepjlchgpgfmobi
  155.  
  156. ==================== Loaded Modules (Whitelisted) ==============
  157.  
  158. 2017-07-05 00:05 - 2016-05-25 11:53 - 001634072 _____ () C:\Program Files (x86)\InternetOff\IOffSvc.exe
  159. 2017-06-12 14:39 - 2017-06-27 17:03 - 000133568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
  160. 2017-06-11 08:22 - 2014-12-12 20:24 - 000044760 _____ () C:\Windows\runSW.exe
  161. 2017-03-07 19:04 - 2017-03-07 19:04 - 000157456 _____ () C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe
  162. 2017-07-06 08:46 - 2017-07-06 08:46 - 000216576 _____ () C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
  163. 2017-07-13 20:50 - 2017-07-13 20:50 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
  164. 2017-07-13 20:50 - 2017-07-13 20:50 - 001354040 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
  165. 2017-03-18 16:58 - 2017-03-18 16:58 - 000138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
  166. 2017-03-18 16:59 - 2017-03-18 22:30 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
  167. 2017-07-14 10:27 - 2017-07-14 10:27 - 000092472 _____ () C:\Program Files\iTunes\zlib1.dll
  168. 2017-07-14 10:26 - 2017-07-14 10:26 - 001354040 _____ () C:\Program Files\iTunes\libxml2.dll
  169. 2017-06-12 14:39 - 2017-07-26 13:09 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
  170. 2017-07-02 19:40 - 2017-07-02 19:40 - 008928105 _____ () C:\Program Files\pia_manager\pia_manager.exe
  171. 2017-08-07 18:18 - 2017-08-02 03:39 - 003824472 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.90\libglesv2.dll
  172. 2017-08-07 18:18 - 2017-08-02 03:39 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.90\libegl.dll
  173. 2017-07-06 08:21 - 2017-07-06 08:21 - 000050176 _____ () C:\Program Files (x86)\GNU\GnuPG\libw32pth-0.dll
  174. 2017-07-06 08:36 - 2017-07-06 08:36 - 000890880 _____ () C:\Program Files (x86)\GNU\GnuPG\libgcrypt-20.dll
  175. 2017-07-06 08:33 - 2017-07-06 08:33 - 000222720 _____ () C:\Program Files (x86)\GNU\GnuPG\libksba-8.dll
  176. 2017-07-06 08:33 - 2017-07-06 08:33 - 000073728 _____ () C:\Program Files (x86)\GNU\GnuPG\libassuan-0.dll
  177. 2017-07-06 08:27 - 2017-07-06 08:27 - 000103424 _____ () C:\Program Files (x86)\GNU\GnuPG\libgpg-error-0.dll
  178. 2017-06-11 08:22 - 2013-02-27 20:17 - 000221184 _____ () C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\EnumDevLib.dll
  179. 2017-06-13 12:50 - 2017-01-04 15:28 - 001958912 _____ () C:\Users\mike\AppData\Local\Discord\app-0.0.297\ffmpeg.dll
  180. 2017-06-13 12:50 - 2017-06-13 12:50 - 001082880 _____ () \\?\C:\Users\mike\AppData\Roaming\discord\0.0.297\modules\discord_voice\discord_voice.node
  181. 2017-06-13 12:50 - 2017-06-13 12:50 - 003750400 _____ () \\?\C:\Users\mike\AppData\Roaming\discord\0.0.297\modules\discord_voice\libdiscord.dll
  182. 2017-06-13 12:50 - 2017-06-13 12:50 - 000914432 _____ () \\?\C:\Users\mike\AppData\Roaming\discord\0.0.297\modules\discord_utils\discord_utils.node
  183. 2017-06-13 12:50 - 2017-06-13 12:50 - 001127424 _____ () \\?\C:\Users\mike\AppData\Roaming\discord\0.0.297\modules\discord_toaster\discord_toaster.node
  184. 2017-06-10 19:02 - 2017-05-16 21:54 - 000678176 _____ () C:\Program Files (x86)\Steam\SDL2.dll
  185. 2017-06-10 19:02 - 2017-07-17 20:33 - 002497824 _____ () C:\Program Files (x86)\Steam\video.dll
  186. 2017-06-10 19:02 - 2016-08-31 21:02 - 004969248 _____ () C:\Program Files (x86)\Steam\v8.dll
  187. 2017-06-10 19:01 - 2016-01-27 03:49 - 000491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
  188. 2017-06-10 19:01 - 2016-01-27 03:49 - 002549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
  189. 2017-06-10 19:01 - 2016-01-27 03:49 - 000332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
  190. 2017-06-10 19:01 - 2016-01-27 03:49 - 000442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
  191. 2017-06-10 19:01 - 2016-01-27 03:49 - 000485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
  192. 2017-06-10 19:02 - 2016-08-31 21:02 - 001195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
  193. 2017-06-10 19:02 - 2016-08-31 21:02 - 001563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
  194. 2017-06-10 19:02 - 2017-07-17 20:33 - 000884512 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
  195. 2017-06-10 19:01 - 2016-07-04 18:17 - 000266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
  196. 2017-08-01 14:53 - 2017-08-01 14:53 - 000148992 _____ () \\?\C:\Users\mike\AppData\Local\Temp\E6A2.tmp.node
  197. 2017-06-13 12:50 - 2017-06-13 12:50 - 002658296 _____ () \\?\C:\Users\mike\AppData\Roaming\discord\0.0.297\modules\discord_rpc\discord_rpc.node
  198. 2017-06-13 12:50 - 2017-06-13 12:50 - 002665976 _____ () \\?\C:\Users\mike\AppData\Roaming\discord\0.0.297\modules\discord_contact_import\discord_contact_import.node
  199. 2017-06-10 19:03 - 2017-05-16 21:54 - 000678176 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\SDL2.dll
  200. 2017-06-10 19:03 - 2017-07-06 13:58 - 073088800 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
  201. 2017-06-10 19:02 - 2017-07-17 20:33 - 000384288 _____ () C:\Program Files (x86)\Steam\steam.dll
  202. 2016-10-05 21:17 - 2016-10-05 21:17 - 001243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
  203. 2017-06-12 14:39 - 2017-07-26 13:09 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
  204. 2017-06-12 14:40 - 2017-07-26 13:08 - 069820864 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
  205. 2017-08-01 17:59 - 2017-08-01 17:59 - 000012800 _____ () C:\Users\mike\AppData\Local\Temp\ocrB179.tmp\lib\ruby\1.9.1\i386-mingw32\enc\encdb.so
  206. 2017-08-01 17:59 - 2017-08-01 17:59 - 000010240 _____ () C:\Users\mike\AppData\Local\Temp\ocrB179.tmp\lib\ruby\1.9.1\i386-mingw32\enc\iso_8859_1.so
  207. 2017-08-01 17:59 - 2017-08-01 17:59 - 000014848 _____ () C:\Users\mike\AppData\Local\Temp\ocrB179.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\transdb.so
  208. 2017-08-01 17:59 - 2017-08-01 17:59 - 000028672 _____ () C:\Users\mike\AppData\Local\Temp\ocrB179.tmp\lib\ruby\1.9.1\i386-mingw32\stringio.so
  209. 2017-08-01 17:59 - 2017-08-01 17:59 - 000094208 _____ () C:\Users\mike\AppData\Local\Temp\ocrB179.tmp\src\rgloader\rgloader193.mswin.so
  210. 2017-08-01 17:59 - 2017-08-01 17:59 - 000009216 _____ () C:\Users\mike\AppData\Local\Temp\ocrB179.tmp\lib\ruby\1.9.1\i386-mingw32\etc.so
  211. 2017-08-01 17:59 - 2017-08-01 17:59 - 000094208 _____ () C:\Users\mike\AppData\Local\Temp\ocrB179.tmp\lib\ruby\site_ruby\1.9.1\rgloader\rgloader193.mswin.so
  212. 2017-08-01 17:59 - 2017-08-01 17:59 - 000131584 _____ () C:\Users\mike\AppData\Local\Temp\ocrB179.tmp\lib\ruby\1.9.1\i386-mingw32\win32ole.so
  213. 2017-08-01 17:59 - 2017-08-01 17:59 - 000088576 _____ () C:\Users\mike\AppData\Local\Temp\ocrB179.tmp\lib\ruby\1.9.1\i386-mingw32\dl.so
  214. 2017-08-01 17:59 - 2017-08-01 17:59 - 000016896 _____ () C:\Users\mike\AppData\Local\Temp\ocrB179.tmp\lib\ruby\1.9.1\i386-mingw32\fiddle.so
  215. 2017-08-01 17:59 - 2017-08-01 17:59 - 000127316 _____ () C:\Users\mike\AppData\Local\Temp\ocrB179.tmp\bin\libffi-6.dll
  216. 2017-08-01 17:59 - 2017-08-01 17:59 - 000009216 _____ () C:\Users\mike\AppData\Local\Temp\ocrB179.tmp\lib\ruby\1.9.1\i386-mingw32\enc\utf_16le.so
  217. 2017-08-01 17:59 - 2017-08-01 17:59 - 000013824 _____ () C:\Users\mike\AppData\Local\Temp\ocrB179.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\utf_16_32.so
  218. 2017-08-01 17:59 - 2017-08-01 17:59 - 000095744 _____ () C:\Users\mike\AppData\Local\Temp\ocrB179.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\single_byte.so
  219. 2017-08-01 17:59 - 2017-08-01 17:59 - 000028672 _____ () C:\Users\mike\AppData\Local\Temp\ocrB179.tmp\lib\ruby\gems\1.9.1\gems\win32-api-1.5.3-universal-mingw32\lib\win32\ruby19\win32\api.so
  220. 2017-08-01 18:00 - 2017-08-01 18:00 - 000012800 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\lib\ruby\1.9.1\i386-mingw32\enc\encdb.so
  221. 2017-08-01 18:00 - 2017-08-01 18:00 - 000010240 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\lib\ruby\1.9.1\i386-mingw32\enc\iso_8859_1.so
  222. 2017-08-01 18:00 - 2017-08-01 18:00 - 000014848 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\transdb.so
  223. 2017-08-01 18:00 - 2017-08-01 18:00 - 000028672 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\lib\ruby\1.9.1\i386-mingw32\stringio.so
  224. 2017-08-01 18:00 - 2017-08-01 18:00 - 000094208 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\src\rgloader\rgloader193.mswin.so
  225. 2017-08-01 18:00 - 2017-08-01 18:00 - 000094208 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\lib\ruby\site_ruby\1.9.1\rgloader\rgloader193.mswin.so
  226. 2017-08-01 18:00 - 2017-08-01 18:00 - 000124416 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\lib\ruby\1.9.1\i386-mingw32\socket.so
  227. 2017-08-01 18:00 - 2017-08-01 18:00 - 000071680 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\lib\ruby\1.9.1\i386-mingw32\zlib.so
  228. 2017-08-01 18:00 - 2017-08-01 18:00 - 000091648 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\bin\zlib1.dll
  229. 2017-08-01 18:00 - 2017-08-01 18:00 - 000287744 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\lib\ruby\1.9.1\i386-mingw32\openssl.so
  230. 2017-08-01 18:00 - 2017-08-01 18:00 - 000016384 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\lib\ruby\1.9.1\i386-mingw32\digest.so
  231. 2017-08-01 18:00 - 2017-08-01 18:00 - 000008192 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\lib\ruby\1.9.1\i386-mingw32\fcntl.so
  232. 2017-08-01 18:00 - 2017-08-01 18:00 - 000009216 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\lib\ruby\1.9.1\i386-mingw32\etc.so
  233. 2017-08-01 18:00 - 2017-08-01 18:00 - 000024576 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\lib\ruby\1.9.1\i386-mingw32\json\ext\parser.so
  234. 2017-08-01 18:00 - 2017-08-01 18:00 - 000009216 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\lib\ruby\1.9.1\i386-mingw32\enc\utf_16be.so
  235. 2017-08-01 18:00 - 2017-08-01 18:00 - 000009216 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\lib\ruby\1.9.1\i386-mingw32\enc\utf_16le.so
  236. 2017-08-01 18:00 - 2017-08-01 18:00 - 000008704 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\lib\ruby\1.9.1\i386-mingw32\enc\utf_32be.so
  237. 2017-08-01 18:00 - 2017-08-01 18:00 - 000008704 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\lib\ruby\1.9.1\i386-mingw32\enc\utf_32le.so
  238. 2017-08-01 18:00 - 2017-08-01 18:00 - 000040960 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\lib\ruby\1.9.1\i386-mingw32\json\ext\generator.so
  239. 2017-08-01 18:00 - 2017-08-01 18:00 - 000131584 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\lib\ruby\1.9.1\i386-mingw32\win32ole.so
  240. 2017-08-01 18:00 - 2017-08-01 18:00 - 000088576 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\lib\ruby\1.9.1\i386-mingw32\dl.so
  241. 2017-08-01 18:00 - 2017-08-01 18:00 - 000016896 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\lib\ruby\1.9.1\i386-mingw32\fiddle.so
  242. 2017-08-01 18:00 - 2017-08-01 18:00 - 000127316 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\bin\libffi-6.dll
  243. 2017-08-01 18:00 - 2017-08-01 18:00 - 000013824 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\utf_16_32.so
  244. 2017-08-01 18:00 - 2017-08-01 18:00 - 000095744 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\single_byte.so
  245. 2017-08-01 18:00 - 2017-08-01 18:00 - 000028672 _____ () C:\Users\mike\AppData\Local\Temp\ocrE77D.tmp\lib\ruby\gems\1.9.1\gems\win32-api-1.5.3-universal-mingw32\lib\win32\ruby19\win32\api.so
  246. 2017-07-02 19:40 - 2017-07-02 19:40 - 000939520 _____ () C:\Program Files\pia_manager\pia_tray_bin\nw-win\ffmpeg.dll
  247. 2017-07-02 19:40 - 2017-07-02 19:40 - 003115520 _____ () C:\Program Files\pia_manager\pia_tray_bin\nw-win\node.dll
  248. 2017-03-09 22:11 - 2017-03-09 22:11 - 000036878 _____ () C:\Program Files (x86)\Pidgin\libssp-0.dll
  249. 2017-03-09 22:11 - 2017-03-09 22:11 - 000671031 _____ () C:\Program Files (x86)\Pidgin\exchndl.dll
  250. 2017-07-24 00:41 - 2017-07-24 00:41 - 000904525 _____ () C:\Program Files (x86)\Pidgin\Gtk\bin\libcairo-2.dll
  251. 2017-07-24 00:41 - 2017-07-24 00:41 - 000118272 _____ () C:\Program Files (x86)\Pidgin\Gtk\bin\zlib1.dll
  252. 2017-07-24 00:41 - 2017-07-24 00:41 - 000279059 _____ () C:\Program Files (x86)\Pidgin\Gtk\bin\libfontconfig-1.dll
  253. 2017-07-24 00:41 - 2017-07-24 00:41 - 000553382 _____ () C:\Program Files (x86)\Pidgin\Gtk\bin\freetype6.dll
  254. 2017-07-24 00:41 - 2017-07-24 00:41 - 000177586 _____ () C:\Program Files (x86)\Pidgin\Gtk\bin\libexpat-1.dll
  255. 2017-03-09 22:11 - 2017-03-09 22:11 - 001136034 _____ () C:\Program Files (x86)\Pidgin\libxml2-2.dll
  256. 2017-07-24 00:41 - 2017-07-24 00:41 - 000216992 _____ () C:\Program Files (x86)\Pidgin\Gtk\bin\libpng14-14.dll
  257. 2017-03-09 22:11 - 2017-03-09 22:11 - 000475580 _____ () C:\Program Files (x86)\Pidgin\spellcheck\libgtkspell-0.dll
  258. 2017-03-09 22:11 - 2017-03-09 22:11 - 000020997 _____ () C:\Program Files (x86)\Pidgin\plugins\autoaccept.dll
  259. 2017-03-09 22:11 - 2017-03-09 22:11 - 000013253 _____ () C:\Program Files (x86)\Pidgin\plugins\buddynote.dll
  260. 2017-03-09 22:11 - 2017-03-09 22:11 - 000024924 _____ () C:\Program Files (x86)\Pidgin\plugins\convcolors.dll
  261. 2017-03-09 22:11 - 2017-03-09 22:11 - 000015702 _____ () C:\Program Files (x86)\Pidgin\plugins\extplacement.dll
  262. 2017-03-09 22:11 - 2017-03-09 22:11 - 000014147 _____ () C:\Program Files (x86)\Pidgin\plugins\gtkbuddynote.dll
  263. 2017-03-09 22:11 - 2017-03-09 22:11 - 000018882 _____ () C:\Program Files (x86)\Pidgin\plugins\history.dll
  264. 2017-03-09 22:11 - 2017-03-09 22:11 - 000012865 _____ () C:\Program Files (x86)\Pidgin\plugins\iconaway.dll
  265. 2017-03-09 22:11 - 2017-03-09 22:11 - 000019043 _____ () C:\Program Files (x86)\Pidgin\plugins\idle.dll
  266. 2017-03-09 22:11 - 2017-03-09 22:11 - 000018555 _____ () C:\Program Files (x86)\Pidgin\plugins\joinpart.dll
  267. 2017-03-09 22:11 - 2017-03-09 22:11 - 000015074 _____ () C:\Program Files (x86)\Pidgin\plugins\libaim.dll
  268. 2017-03-09 22:11 - 2017-03-09 22:11 - 000315843 _____ () C:\Program Files (x86)\Pidgin\liboscar.dll
  269. 2017-03-09 22:11 - 2017-03-09 22:11 - 000093066 _____ () C:\Program Files (x86)\Pidgin\plugins\libbonjour.dll
  270. 2017-03-09 22:11 - 2017-03-09 22:11 - 000332178 _____ () C:\Program Files (x86)\Pidgin\plugins\libgg.dll
  271. 2017-03-09 22:11 - 2017-03-09 22:11 - 000016005 _____ () C:\Program Files (x86)\Pidgin\plugins\libicq.dll
  272. 2017-03-09 22:11 - 2017-03-09 22:11 - 000108441 _____ () C:\Program Files (x86)\Pidgin\plugins\libirc.dll
  273. 2017-03-09 22:11 - 2017-03-09 22:11 - 000128694 _____ () C:\Program Files (x86)\Pidgin\libsasl2-3.dll
  274. 2017-03-09 22:11 - 2017-03-09 22:11 - 000123540 _____ () C:\Program Files (x86)\Pidgin\plugins\libnovell.dll
  275. 2017-03-09 22:11 - 2017-03-09 22:11 - 000116071 _____ () C:\Program Files (x86)\Pidgin\plugins\libsametime.dll
  276. 2017-03-09 22:11 - 2017-03-09 22:11 - 000152852 _____ () C:\Program Files (x86)\Pidgin\libmeanwhile-1.dll
  277. 2017-03-09 22:11 - 2017-03-09 22:11 - 000171123 _____ () C:\Program Files (x86)\Pidgin\plugins\libsilc.dll
  278. 2017-03-09 22:11 - 2017-03-09 22:11 - 000868705 _____ () C:\Program Files (x86)\Pidgin\libsilc-1-1-4.dll
  279. 2017-03-09 22:11 - 2017-03-09 22:11 - 000225616 _____ () C:\Program Files (x86)\Pidgin\libsilcclient-1-1-4.dll
  280. 2017-03-09 22:11 - 2017-03-09 22:11 - 000055880 _____ () C:\Program Files (x86)\Pidgin\plugins\libsimple.dll
  281. 2017-03-09 22:11 - 2017-03-09 22:11 - 000021337 _____ () C:\Program Files (x86)\Pidgin\plugins\libxmpp.dll
  282. 2017-03-09 22:11 - 2017-03-09 22:11 - 000416644 _____ () C:\Program Files (x86)\Pidgin\libjabber.dll
  283. 2017-03-09 22:11 - 2017-03-09 22:11 - 000047934 _____ () C:\Program Files (x86)\Pidgin\plugins\log_reader.dll
  284. 2017-03-09 22:11 - 2017-03-09 22:11 - 000021795 _____ () C:\Program Files (x86)\Pidgin\plugins\markerline.dll
  285. 2017-03-09 22:11 - 2017-03-09 22:11 - 000013456 _____ () C:\Program Files (x86)\Pidgin\plugins\newline.dll
  286. 2017-03-09 22:11 - 2017-03-09 22:11 - 000029737 _____ () C:\Program Files (x86)\Pidgin\plugins\notify.dll
  287. 2017-03-09 22:11 - 2017-03-09 22:11 - 000021075 _____ () C:\Program Files (x86)\Pidgin\plugins\nss-prefs.dll
  288. 2017-03-09 22:11 - 2017-03-09 22:11 - 000017023 _____ () C:\Program Files (x86)\Pidgin\plugins\offlinemsg.dll
  289. 2016-03-07 18:49 - 2016-03-07 18:49 - 000848384 _____ () C:\Program Files (x86)\Pidgin\plugins\pidgin-otr.dll
  290. 2017-03-09 22:11 - 2017-03-09 22:11 - 000029256 _____ () C:\Program Files (x86)\Pidgin\plugins\pidginrc.dll
  291. 2017-03-09 22:11 - 2017-03-09 22:11 - 000015380 _____ () C:\Program Files (x86)\Pidgin\plugins\psychic.dll
  292. 2017-03-09 22:11 - 2017-03-09 22:11 - 000015429 _____ () C:\Program Files (x86)\Pidgin\plugins\relnot.dll
  293. 2017-03-09 22:11 - 2017-03-09 22:11 - 000015045 _____ () C:\Program Files (x86)\Pidgin\plugins\sendbutton.dll
  294. 2017-03-09 22:11 - 2017-03-09 22:11 - 000069625 _____ () C:\Program Files (x86)\Pidgin\plugins\spellchk.dll
  295. 2017-03-09 22:11 - 2017-03-09 22:11 - 000031993 _____ () C:\Program Files (x86)\Pidgin\plugins\ssl-nss.dll
  296. 2017-03-09 22:11 - 2017-03-09 22:11 - 000012004 _____ () C:\Program Files (x86)\Pidgin\plugins\ssl.dll
  297. 2017-03-09 22:11 - 2017-03-09 22:11 - 000015978 _____ () C:\Program Files (x86)\Pidgin\plugins\statenotify.dll
  298. 2017-03-09 22:11 - 2017-03-09 22:11 - 000030353 _____ () C:\Program Files (x86)\Pidgin\plugins\themeedit.dll
  299. 2017-03-09 22:11 - 2017-03-09 22:11 - 000032020 _____ () C:\Program Files (x86)\Pidgin\plugins\ticker.dll
  300. 2017-03-09 22:12 - 2017-03-09 22:12 - 000018399 _____ () C:\Program Files (x86)\Pidgin\plugins\timestamp.dll
  301. 2017-03-09 22:12 - 2017-03-09 22:12 - 000023851 _____ () C:\Program Files (x86)\Pidgin\plugins\timestamp_format.dll
  302. 2017-03-09 22:12 - 2017-03-09 22:12 - 000029791 _____ () C:\Program Files (x86)\Pidgin\plugins\win2ktrans.dll
  303. 2017-03-09 22:12 - 2017-03-09 22:12 - 000030771 _____ () C:\Program Files (x86)\Pidgin\plugins\winprefs.dll
  304. 2017-03-09 22:12 - 2017-03-09 22:12 - 000037191 _____ () C:\Program Files (x86)\Pidgin\plugins\xmppconsole.dll
  305. 2017-03-09 22:12 - 2017-03-09 22:12 - 000044494 _____ () C:\Program Files (x86)\Pidgin\plugins\xmppdisco.dll
  306. 2017-03-09 22:12 - 2017-03-09 22:12 - 000048402 _____ () C:\Program Files (x86)\Pidgin\sasl2\libanonymous-3.dll
  307. 2017-03-09 22:12 - 2017-03-09 22:12 - 000049962 _____ () C:\Program Files (x86)\Pidgin\sasl2\libcrammd5-3.dll
  308. 2017-03-09 22:12 - 2017-03-09 22:12 - 000079858 _____ () C:\Program Files (x86)\Pidgin\sasl2\libdigestmd5-3.dll
  309. 2017-03-09 22:12 - 2017-03-09 22:12 - 000048907 _____ () C:\Program Files (x86)\Pidgin\sasl2\libplain-3.dll
  310. 2017-03-09 22:11 - 2017-03-09 22:11 - 000554496 _____ () C:\Program Files (x86)\Pidgin\sqlite3.dll
  311. 2017-07-24 00:41 - 2017-07-24 00:41 - 000090496 _____ () C:\Program Files (x86)\Pidgin\Gtk\lib\gtk-2.0\2.10.0\engines\libwimp.dll
  312. 2017-06-10 19:01 - 2015-09-24 19:52 - 000119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
  313. 2017-08-07 20:00 - 2017-08-07 20:00 - 001877504 _____ () C:\Users\mike\AppData\Local\GPMDP_3\app-4.4.0\ffmpeg.dll
  314. 2017-08-07 20:00 - 2017-08-07 20:00 - 000193024 _____ () \\?\C:\Users\mike\AppData\Local\Temp\3FFD.tmp.node
  315. 2017-08-07 20:00 - 2017-08-07 20:00 - 000118272 _____ () \\?\C:\Users\mike\AppData\Local\Temp\40F8.tmp.node
  316. 2017-08-07 20:00 - 2017-08-07 20:00 - 000252416 _____ () \\?\C:\Users\mike\AppData\Local\Temp\40F9.tmp.node
  317. 2017-08-07 20:01 - 2017-08-07 20:01 - 000252416 _____ () \\?\C:\Users\mike\AppData\Local\Temp\17ED.tmp.node
  318. 2017-06-13 12:50 - 2017-01-04 15:28 - 002278912 _____ () C:\Users\mike\AppData\Local\Discord\app-0.0.297\libglesv2.dll
  319. 2017-06-13 12:50 - 2017-01-04 15:28 - 000096768 _____ () C:\Users\mike\AppData\Local\Discord\app-0.0.297\libegl.dll
  320.  
  321. ==================== Alternate Data Streams (Whitelisted) =========
  322.  
  323. (If an entry is included in the fixlist, only the ADS will be removed.)
  324.  
  325.  
  326. ==================== Safe Mode (Whitelisted) ===================
  327.  
  328. (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
  329.  
  330. HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
  331. HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
  332.  
  333. ==================== Association (Whitelisted) ===============
  334.  
  335. (If an entry is included in the fixlist, the registry item will be restored to default or removed.)
  336.  
  337.  
  338. ==================== Internet Explorer trusted/restricted ===============
  339.  
  340. (If an entry is included in the fixlist, it will be removed from the registry.)
  341.  
  342.  
  343. ==================== Hosts content: ==========================
  344.  
  345. (If needed Hosts: directive could be included in the fixlist to reset Hosts.)
  346.  
  347. 2017-07-05 00:15 - 2017-07-05 00:15 - 000004899 _____ C:\WINDOWS\system32\Drivers\etc\hosts
  348.  
  349. 0.0.0.0 nullroute
  350. 0.0.0.0 statsfe2.update.microsoft.com.akadns.net
  351. 0.0.0.0 fe2.update.microsoft.com.akadns.net
  352. 0.0.0.0 survey.watson.microsoft.com
  353. 0.0.0.0 watson.microsoft.com
  354. 0.0.0.0 watson.ppe.telemetry.microsoft.com
  355. 0.0.0.0 vortex.data.microsoft.com
  356. 0.0.0.0 vortex-win.data.microsoft.com
  357. 0.0.0.0 telecommand.telemetry.microsoft.com
  358. 0.0.0.0 telecommand.telemetry.microsoft.com.nsatc.net
  359. 0.0.0.0 oca.telemetry.microsoft.com
  360. 0.0.0.0 sqm.telemetry.microsoft.com
  361. 0.0.0.0 sqm.telemetry.microsoft.com.nsatc.net
  362. 0.0.0.0 watson.telemetry.microsoft.com
  363. 0.0.0.0 watson.telemetry.microsoft.com.nsatc.net
  364. 0.0.0.0 redir.metaservices.microsoft.com
  365. 0.0.0.0 choice.microsoft.com
  366. 0.0.0.0 choice.microsoft.com.nsatc.net
  367. 0.0.0.0 wes.df.telemetry.microsoft.com
  368. 0.0.0.0 services.wes.df.telemetry.microsoft.com
  369. 0.0.0.0 sqm.df.telemetry.microsoft.com
  370. 0.0.0.0 telemetry.microsoft.com
  371. 0.0.0.0 telemetry.appex.bing.net
  372. 0.0.0.0 telemetry.urs.microsoft.com
  373. 0.0.0.0 settings-sandbox.data.microsoft.com
  374. 0.0.0.0 watson.live.com
  375. 0.0.0.0 statsfe2.ws.microsoft.com
  376. 0.0.0.0 corpext.msitadfs.glbdns2.microsoft.com
  377. 0.0.0.0 www.windowssearch.com
  378. 0.0.0.0 ssw.live.com
  379.  
  380. There are 84 more lines.
  381.  
  382.  
  383. ==================== Other Areas ============================
  384.  
  385. (Currently there is no automatic fix for this section.)
  386.  
  387. HKU\S-1-5-21-44541308-3757633745-1958273574-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\mike\Pictures\Screenshots\free-wallpaper-5.jpg
  388. DNS Servers: 192.168.1.1
  389. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
  390. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
  391. Windows Firewall is enabled.
  392.  
  393. ==================== MSCONFIG/TASK MANAGER disabled items ==
  394.  
  395. HKLM\...\StartupApproved\Run: => "Malwarebytes TrayApp"
  396. HKLM\...\StartupApproved\Run: => "RTHDVCPL"
  397. HKLM\...\StartupApproved\Run: => "EvtMgr6"
  398. HKLM\...\StartupApproved\Run32: => "DSATray"
  399. HKU\S-1-5-21-44541308-3757633745-1958273574-1001\...\StartupApproved\Run: => "OneDrive"
  400. HKU\S-1-5-21-44541308-3757633745-1958273574-1001\...\StartupApproved\Run: => "Skype"
  401. HKU\S-1-5-21-44541308-3757633745-1958273574-1001\...\StartupApproved\Run: => "Spotify"
  402. HKU\S-1-5-21-44541308-3757633745-1958273574-1001\...\StartupApproved\Run: => "Discord"
  403.  
  404. ==================== FirewallRules (Whitelisted) ===============
  405.  
  406. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  407.  
  408. FirewallRules: [{0BF66FD8-A22D-441F-ACD6-A4AF7DF9B698}] => (Allow) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe
  409. FirewallRules: [{19A22906-DB45-4376-B1CB-BB9E0708748D}] => (Allow) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe
  410. FirewallRules: [{CAC5A823-45DA-4E2B-8179-DE957C4F67C4}] => (Allow) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe
  411. FirewallRules: [{9609E0DF-3A42-44D3-BD2F-4C2BC16F9BA8}] => (Allow) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe
  412. FirewallRules: [{B1196C4A-B3BF-4BBB-9322-3F6E2FBDB17F}] => (Allow) LPort=53
  413. FirewallRules: [{DB301346-45DE-4C4C-AC6E-03C84F167AF2}] => (Allow) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe
  414. FirewallRules: [{4A34254C-6C7C-4F51-8542-F47C2C139182}] => (Allow) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe
  415. FirewallRules: [{BFCCACA4-52F2-474C-8E44-D99441C636A8}] => (Allow) C:\PROGRA~2\REALTEK\USBWIR~1\Rtldhcp.exe
  416. FirewallRules: [{4B73304F-3844-42CC-91E7-94E98B9149B7}] => (Allow) LPort=53
  417. FirewallRules: [{71ED4937-D0F6-4217-A1F1-06276C1D764F}] => (Allow) LPort=1542
  418. FirewallRules: [{FC69D9BC-8EF0-4414-AAA2-DB118C190F0F}] => (Allow) LPort=1542
  419. FirewallRules: [{289497CD-4234-440A-94F0-B45612194A22}] => (Allow) C:\PROGRA~2\REALTEK\USBWIR~1\RtWlan.exe
  420. FirewallRules: [{819BD16E-D81E-4CA0-9EA2-DCFF3FE21DCA}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
  421. FirewallRules: [{E3A054DC-EDBB-4C30-9905-F70748AC9751}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
  422. FirewallRules: [{AD74AFFF-D6FF-4BD9-8851-E4D6523739A5}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
  423. FirewallRules: [{81CF3B2C-5A7A-4847-A4A2-11439E11A6B4}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
  424. FirewallRules: [{4E31828F-AD1E-422A-94D0-14643EBE2366}] => (Allow) C:\Program Files\KMSpico\KMSELDI.exe
  425. FirewallRules: [{422B05CE-2347-435F-BF67-CE69B9C4A53E}] => (Allow) C:\Program Files\KMSpico\KMSELDI.exe
  426. FirewallRules: [{CC41C173-30C0-473A-B2B4-0B7FCF1C3121}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
  427. FirewallRules: [{598243E9-7CCD-46E4-908C-22635415C3E3}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
  428. FirewallRules: [{8468B663-F2AD-483F-B1ED-5F1ADC02A194}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
  429. FirewallRules: [{495B71A8-A5BD-494C-B17C-D9ED83643381}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe
  430. FirewallRules: [{1BD3DFDB-6756-4198-BD28-1547DF74D695}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
  431. FirewallRules: [{290954DE-99D8-49C5-B489-9B6377C946E2}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
  432. FirewallRules: [{2CC383D1-00B2-4298-95F1-F33CCEDAF316}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
  433. FirewallRules: [{6F030659-AD46-4C62-A249-DB41674925DF}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
  434. FirewallRules: [{49C8D54A-BE0F-4EA0-9C52-EAE2AFA5B3DA}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
  435. FirewallRules: [TCP Query User{82ED88D8-CC48-42FC-AF65-9478E1C91684}C:\users\mike\appdata\local\temp\rar$exa0.213\sdi_r1751.exe] => (Allow) C:\users\mike\appdata\local\temp\rar$exa0.213\sdi_r1751.exe
  436. FirewallRules: [UDP Query User{B98D3459-7010-4790-A0C7-1934296A32BE}C:\users\mike\appdata\local\temp\rar$exa0.213\sdi_r1751.exe] => (Allow) C:\users\mike\appdata\local\temp\rar$exa0.213\sdi_r1751.exe
  437. FirewallRules: [{E5478416-FCB0-49E8-ABF5-414EA2166257}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
  438. FirewallRules: [{EF79CDC0-41A8-4D2E-B2A6-7259FB1DBA56}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
  439. FirewallRules: [TCP Query User{05D95DD2-219C-43C7-A1C0-CF667DC64FC0}C:\users\mike\appdata\local\temp\rar$exa0.528\sdi_r1751.exe] => (Allow) C:\users\mike\appdata\local\temp\rar$exa0.528\sdi_r1751.exe
  440. FirewallRules: [UDP Query User{822228A3-1AD3-4831-82EA-7926C174051E}C:\users\mike\appdata\local\temp\rar$exa0.528\sdi_r1751.exe] => (Allow) C:\users\mike\appdata\local\temp\rar$exa0.528\sdi_r1751.exe
  441. FirewallRules: [TCP Query User{A64793D3-A608-4262-9869-FD64DF3A5014}C:\users\mike\documents\sdi_r1751.exe] => (Allow) C:\users\mike\documents\sdi_r1751.exe
  442. FirewallRules: [UDP Query User{DF500ED8-D803-459E-A978-912ECA649E63}C:\users\mike\documents\sdi_r1751.exe] => (Allow) C:\users\mike\documents\sdi_r1751.exe
  443. FirewallRules: [{5C218E03-C881-484D-8C74-C8F1996FA3FB}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
  444. FirewallRules: [{E0B64807-DC92-4483-8375-EFA3A72673DB}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
  445. FirewallRules: [{701B3AAC-2A64-4866-B827-9E259A696018}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  446. FirewallRules: [{C2DDCBA8-9334-437E-9B40-2743FD7B762D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  447. FirewallRules: [{D74C672D-4135-48E1-99C0-BFF6743FC2CB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
  448. FirewallRules: [{99CD03F7-A054-4D70-8213-BEC0E4EE1C8D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
  449. FirewallRules: [{F62BE307-3903-44B4-98A8-AD1C2E22520A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
  450. FirewallRules: [TCP Query User{F1C3C9B7-62E7-401B-B3C2-3F4D866ABB75}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
  451. FirewallRules: [UDP Query User{CCFBE3E7-785E-493B-964C-74D44749FED2}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
  452. FirewallRules: [TCP Query User{A5CEB93E-2464-408C-80CB-4315804BDBA6}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
  453. FirewallRules: [UDP Query User{F08DDEEF-AA77-4986-A8EE-87D585705B6F}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
  454. FirewallRules: [{1E6A684A-78BE-48C3-A576-D492B9F09BD5}] => (Block) C:\WINDOWS\System32\svchost.exe
  455. FirewallRules: [{F2A451C8-B67D-4AFA-90F9-0BB4A34F792F}] => (Block) C:\WINDOWS\System32\svchost.exe
  456. FirewallRules: [{19B7237E-5A78-4018-BFC7-8829B027CB63}] => (Block) C:\WINDOWS\System32\svchost.exe
  457. FirewallRules: [{15646AAE-6211-45F0-B3E7-40A4C20939DF}] => (Block) C:\WINDOWS\System32\svchost.exe
  458. FirewallRules: [{B6F821CF-E55C-44AC-AB1D-721FD9698843}] => (Block) C:\Windows\explorer.exe
  459. FirewallRules: [{B3F86679-20F6-4F2D-9B6A-5F568ECB30C4}] => (Block) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
  460. FirewallRules: [{3E5B757C-A38C-44DD-ABFC-38FED7BD3EBA}] => (Block) C:\Windows\System32\backgroundTaskHost.exe
  461. FirewallRules: [{7DEC1837-3CBA-4E7E-B1E0-F3F46AAE683F}] => (Block) C:\Windows\System32\BackgroundTransferHost.exe
  462. FirewallRules: [{5D9E1981-12CE-4B50-B17B-745B8BC8B43C}] => (Block) C:\Windows\System32\browser_broker.exe
  463. FirewallRules: [{76C9B8FD-A29F-41E1-8BE0-3F89AA40B2A2}] => (Block) C:\Windows\System32\CompatTelRunner.exe
  464. FirewallRules: [{0655EFB4-EB86-46CF-A241-6F4C62437D82}] => (Block) C:\Windows\System32\dmclient.exe
  465. FirewallRules: [{B84F582B-9DAD-4790-97DC-8FA65F6537A3}] => (Block) C:\Windows\System32\InstallAgentUserBroker.exe
  466. FirewallRules: [{A02C4BDB-B297-4669-87F0-020523D64C7F}] => (Block) C:\Windows\System32\lsass.exe
  467. FirewallRules: [{43E81A69-1BE7-48DC-B7FD-B8F7E6E131B5}] => (Block) C:\Windows\System32\msfeedssync.exe
  468. FirewallRules: [{9F0D60BF-B561-4B34-B0E6-5D814245C548}] => (Block) C:\Windows\System32\rundll32.exe
  469. FirewallRules: [{B8668674-C9FC-4A35-B550-2C2D0C3ED6A7}] => (Block) C:\Windows\System32\SettingSyncHost.exe
  470. FirewallRules: [{2E5F6ABC-6AF2-41C4-8B2D-F7D5587C00F7}] => (Block) C:\Windows\System32\SIHClient.exe
  471. FirewallRules: [{49F0A400-EC32-4DBA-8238-32D272761534}] => (Block) C:\Windows\System32\smartscreen.exe
  472. FirewallRules: [{3BAD7102-184B-4F0F-94DE-EDD01435C714}] => (Block) C:\Windows\System32\taskhostw.exe
  473. FirewallRules: [{5EA4BE07-E49F-4D47-98CC-9691CB45EF91}] => (Block) C:\Windows\System32\wbem\WmiPrvSE.exe
  474. FirewallRules: [{63750AA8-B134-45EF-964C-F9E936E1AE64}] => (Block) C:\Windows\System32\WerFault.exe
  475. FirewallRules: [{A6C46D6F-D584-4931-A4F9-280217E51E66}] => (Block) C:\Windows\System32\wermgr.exe
  476. FirewallRules: [{B17298D6-2C02-40EF-A52E-5EBB7DC812D7}] => (Block) C:\Windows\System32\wsqmcons.exe
  477. FirewallRules: [{A792F329-92CA-4CF8-BD81-0AD488D02474}] => (Block) C:\Windows\System32\WWAHost.exe
  478. FirewallRules: [{B52C0198-F925-4A3E-A84A-ED12861243F4}] => (Block) C:\Windows\SystemApps\ContactSupport_cw5n1h2txyewy\ContactSupport.exe
  479. FirewallRules: [{B058EF38-4FB0-4E22-B789-6AB2FA3F199C}] => (Block) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
  480. FirewallRules: [{F993EE63-EA0E-48D9-9B81-B775ED0FC9CF}] => (Block) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
  481. FirewallRules: [{30E188FD-1F36-4453-84C4-2F49E4BCE6ED}] => (Block) C:\Windows\SysWOW64\backgroundTaskHost.exe
  482. FirewallRules: [{B3BFDE07-C320-4FBF-B337-CC58DAF53A28}] => (Block) C:\Windows\SysWOW64\BackgroundTransferHost.exe
  483. FirewallRules: [{EA5951D1-4035-4065-B8B5-F7C5CCC77CA8}] => (Block) C:\Windows\SysWOW64\InstallAgentUserBroker.exe
  484. FirewallRules: [{40061286-DFB4-4455-B64B-C0E24211646A}] => (Block) C:\Windows\SysWOW64\msfeedssync.exe
  485. FirewallRules: [{2AAA3CB2-4685-410E-BC92-4870FF763AD3}] => (Block) C:\Windows\SysWOW64\rundll32.exe
  486. FirewallRules: [{0D9B9365-666D-4690-B003-A83FE34B60E7}] => (Block) C:\Windows\SysWOW64\SettingSyncHost.exe
  487. FirewallRules: [{80E47E2D-E5E6-4F15-B482-A959780CF56B}] => (Block) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
  488. FirewallRules: [{D5016E81-C82B-4CA4-A5DA-2CE81779E74F}] => (Block) C:\Windows\SysWOW64\WerFault.exe
  489. FirewallRules: [{1CC82151-F8C5-4B73-B5F2-141747C44053}] => (Block) C:\Windows\SysWOW64\wermgr.exe
  490. FirewallRules: [{20487594-9F79-43B3-A7BF-85CADE24DD06}] => (Block) C:\Windows\SysWOW64\WWAHost.exe
  491. FirewallRules: [TCP Query User{49C30CE6-0113-4A9F-BBFC-24D08183B17E}C:\program files (x86)\brackets\node.exe] => (Allow) C:\program files (x86)\brackets\node.exe
  492. FirewallRules: [UDP Query User{29DCD8AF-96FB-460F-9C25-EACA50B0E24B}C:\program files (x86)\brackets\node.exe] => (Allow) C:\program files (x86)\brackets\node.exe
  493. FirewallRules: [TCP Query User{B362A98F-30E5-4052-A240-31DCEEA3634A}C:\program files (x86)\brackets\node.exe] => (Allow) C:\program files (x86)\brackets\node.exe
  494. FirewallRules: [UDP Query User{49F784C1-E039-4516-8478-1FC43343B778}C:\program files (x86)\brackets\node.exe] => (Allow) C:\program files (x86)\brackets\node.exe
  495. FirewallRules: [TCP Query User{F3185174-13BB-4EC0-8231-8E051788936C}C:\program files (x86)\manycam\manycam.exe] => (Allow) C:\program files (x86)\manycam\manycam.exe
  496. FirewallRules: [UDP Query User{B4ED2B46-23EE-4175-9E04-AC2CAC0E688C}C:\program files (x86)\manycam\manycam.exe] => (Allow) C:\program files (x86)\manycam\manycam.exe
  497. FirewallRules: [{EFAF9368-BB38-4F64-BB67-6D76CDE320D0}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
  498. FirewallRules: [{BCDA849E-1BEF-4310-AF89-D38E58EB2EFA}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
  499. FirewallRules: [{1AF9DD39-BE5F-4AF2-AFCB-F6AE2CD2C553}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
  500. FirewallRules: [{3D269F3A-D5D6-4F7C-974C-82B757FBF8C1}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
  501. FirewallRules: [{3397BDE0-804C-4337-BFAE-96E61537DEED}] => (Allow) C:\Program Files\iTunes\iTunes.exe
  502. FirewallRules: [{A0CE6794-3AD3-4BEB-8338-DED25A165A38}] => (Allow) LPort=1688
  503. FirewallRules: [TCP Query User{84429BCC-2F10-4CB7-97B6-E136DD791A9C}C:\programdata\ableton\live 9 suite\program\ableton live 9 suite.exe] => (Block) C:\programdata\ableton\live 9 suite\program\ableton live 9 suite.exe
  504. FirewallRules: [UDP Query User{294FF7A2-1919-4908-9BF4-4D3941B67CC0}C:\programdata\ableton\live 9 suite\program\ableton live 9 suite.exe] => (Block) C:\programdata\ableton\live 9 suite\program\ableton live 9 suite.exe
  505. FirewallRules: [{2FFD5D67-9896-4AA5-BA83-4184E1E3EF42}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  506. FirewallRules: [{FBCCD96F-8DB7-41BD-8BB8-CC020786BD81}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  507. FirewallRules: [{BD92D364-6D54-4579-ADA0-03043033F3B1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  508. FirewallRules: [{6DEF2AF0-12F6-4658-B1A4-60E2255A2C11}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
  509. FirewallRules: [{3D91ADD6-B299-44F7-BAC1-67321E89A2E6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
  510. FirewallRules: [{0CE9942F-44AD-4CDE-B987-9D475543FC9E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  511. FirewallRules: [{F0934972-BCB4-40ED-98AE-C3F869AC37D2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
  512. FirewallRules: [{DB1C8386-7CFA-4437-9A47-30281D353E2A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
  513. FirewallRules: [{CA40639D-B81F-40AE-8583-06CC164DAD4E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  514. FirewallRules: [{45B0DACC-DB88-488D-B468-E6CF31BFEEFC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
  515. FirewallRules: [{B0C6C765-FA6A-4C2A-A7E2-7E83EBA4AC7E}] => (Block) C:\Program Files (x86)\NBA 2K16\NBA2K16.exe
  516. FirewallRules: [{78DCE40D-E63A-456C-AC41-0677795B7275}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  517.  
  518. ==================== Restore Points =========================
  519.  
  520. 22-07-2017 15:19:39 Installed iTunes
  521. 30-07-2017 17:10:51 Scheduled Checkpoint
  522. 30-07-2017 17:41:03 Installed Ableton Live 9 Suite
  523. 08-08-2017 13:29:09 Scheduled Checkpoint
  524.  
  525. ==================== Faulty Device Manager Devices =============
  526.  
  527.  
  528. ==================== Event log errors: =========================
  529.  
  530. Application errors:
  531. ==================
  532. Error: (08/11/2017 12:08:15 AM) (Source: Application Error) (EventID: 1000) (User: )
  533. Description: Faulting application name: IntelCpHDCPSvc.exe, version: 1.0.0.1, time stamp: 0x591d42cd
  534. Faulting module name: IntelCpHDCPSvc.exe, version: 1.0.0.1, time stamp: 0x591d42cd
  535. Exception code: 0xc0000005
  536. Fault offset: 0x000000000001c75f
  537. Faulting process id: 0xbe8
  538. Faulting application start time: 0x01d30af732bd2f6f
  539. Faulting application path: C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_6d1fd205efa7f979\IntelCpHDCPSvc.exe
  540. Faulting module path: C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_6d1fd205efa7f979\IntelCpHDCPSvc.exe
  541. Report Id: 0a866c9b-c8ad-4b04-af07-cfd7c2b7ff03
  542. Faulting package full name:
  543. Faulting package-relative application ID:
  544.  
  545. Error: (08/10/2017 11:41:45 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
  546. Description: License Activation (slui.exe) failed with the following error code:
  547. hr=0xC004C003
  548. Command-line arguments:
  549. RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=49cd895b-53b2-4dc4-a5f7-b18aa019ad37;NotificationInterval=1440;Trigger=NetworkAvailable
  550.  
  551. Error: (08/10/2017 11:41:43 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
  552. Description: Acquisition of End User License failed. hr=0xC004C003
  553. Sku Id=49cd895b-53b2-4dc4-a5f7-b18aa019ad37
  554.  
  555. Error: (08/10/2017 11:41:43 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
  556. Description: License acquisition failure details.
  557. hr=0xC004C003
  558.  
  559. Error: (08/10/2017 11:41:40 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
  560. Description: Acquisition of End User License failed. hr=0xC004C003
  561. Sku Id=49cd895b-53b2-4dc4-a5f7-b18aa019ad37
  562.  
  563. Error: (08/10/2017 11:41:40 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
  564. Description: License acquisition failure details.
  565. hr=0xC004C003
  566.  
  567. Error: (08/10/2017 11:41:17 PM) (Source: Bonjour Service) (EventID: 100) (User: )
  568. Description: Task Scheduling Error: m->NextScheduledSPRetry 80291906
  569.  
  570. Error: (08/10/2017 11:41:17 PM) (Source: Bonjour Service) (EventID: 100) (User: )
  571. Description: Task Scheduling Error: m->NextScheduledEvent 80291906
  572.  
  573. Error: (08/10/2017 11:41:17 PM) (Source: Bonjour Service) (EventID: 100) (User: )
  574. Description: Task Scheduling Error: Continuously busy for more than a second
  575.  
  576. Error: (08/10/2017 01:23:06 AM) (Source: Bonjour Service) (EventID: 100) (User: )
  577. Description: Task Scheduling Error: m->NextScheduledSPRetry 1015
  578.  
  579.  
  580. System errors:
  581. =============
  582. Error: (08/11/2017 01:01:15 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
  583. Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
  584. {D63B10C5-BB46-4990-A94F-E40B9D520160}
  585. and APPID
  586. {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
  587. to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
  588.  
  589. Error: (08/11/2017 12:07:20 AM) (Source: DCOM) (EventID: 10016) (User: MikePC)
  590. Description: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
  591. {5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C}
  592. and APPID
  593. {CE79BC8B-2980-4CA9-9570-6E0BF5B93BF2}
  594. to the user MikePC\mike SID (S-1-5-21-44541308-3757633745-1958273574-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
  595.  
  596. Error: (08/10/2017 11:41:24 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
  597. Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
  598. {D63B10C5-BB46-4990-A94F-E40B9D520160}
  599. and APPID
  600. {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
  601. to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
  602.  
  603. Error: (08/09/2017 11:46:17 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
  604. Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
  605. {D63B10C5-BB46-4990-A94F-E40B9D520160}
  606. and APPID
  607. {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
  608. to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
  609.  
  610. Error: (08/09/2017 10:21:21 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
  611. Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
  612. {D63B10C5-BB46-4990-A94F-E40B9D520160}
  613. and APPID
  614. {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
  615. to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
  616.  
  617. Error: (08/09/2017 12:58:16 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
  618. Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
  619. {D63B10C5-BB46-4990-A94F-E40B9D520160}
  620. and APPID
  621. {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
  622. to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
  623.  
  624. Error: (08/09/2017 12:05:50 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
  625. Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
  626. {D63B10C5-BB46-4990-A94F-E40B9D520160}
  627. and APPID
  628. {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
  629. to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
  630.  
  631. Error: (08/08/2017 11:21:49 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
  632. Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
  633. {D63B10C5-BB46-4990-A94F-E40B9D520160}
  634. and APPID
  635. {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
  636. to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
  637.  
  638. Error: (08/08/2017 08:24:34 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
  639. Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
  640. {D63B10C5-BB46-4990-A94F-E40B9D520160}
  641. and APPID
  642. {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
  643. to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
  644.  
  645. Error: (08/08/2017 07:11:18 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
  646. Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
  647. {D63B10C5-BB46-4990-A94F-E40B9D520160}
  648. and APPID
  649. {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
  650. to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
  651.  
  652.  
  653. CodeIntegrity:
  654. ===================================
  655. Date: 2017-06-10 20:43:45.741
  656. Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
  657.  
  658. Date: 2017-06-10 20:43:45.422
  659. Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
  660.  
  661. Date: 2017-06-11 09:52:00.008
  662. Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
  663.  
  664. Date: 2017-06-11 09:52:00.008
  665. Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
  666.  
  667. Date: 2017-06-11 09:52:00.007
  668. Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
  669.  
  670. Date: 2017-06-11 09:52:00.006
  671. Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
  672.  
  673. Date: 2017-06-11 09:52:00.005
  674. Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
  675.  
  676. Date: 2017-06-11 09:51:59.989
  677. Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
  678.  
  679.  
  680. ==================== Memory info ===========================
  681.  
  682. Processor: Intel(R) Pentium(R) CPU G4560 @ 3.50GHz
  683. Percentage of memory in use: 75%
  684. Total physical RAM: 8151.91 MB
  685. Available physical RAM: 1982.23 MB
  686. Total Virtual: 16564.1 MB
  687. Available Virtual: 7963.02 MB
  688.  
  689. ==================== Drives ================================
  690.  
  691. Drive c: () (Fixed) (Total:930.73 GB) (Free:752.17 GB) NTFS
  692.  
  693. ==================== MBR & Partition Table ==================
  694.  
  695. ========================================================
  696. Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 6BC70B25)
  697. Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
  698. Partition 2: (Not Active) - (Size=930.7 GB) - (Type=07 NTFS)
  699. Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
  700.  
  701. ==================== End of Addition.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!