Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-10-2017
- Ran by justi (25-10-2017 23:54:50)
- Running from D:\Downloads
- Windows 10 Pro Version 1703 15063.674 (X64) (2017-06-03 18:39:43)
- Boot Mode: Normal
- ==========================================================
- ==================== Accounts: =============================
- Administrator (S-1-5-21-3695887035-1542476804-3675477037-500 - Administrator - Disabled)
- DefaultAccount (S-1-5-21-3695887035-1542476804-3675477037-503 - Limited - Disabled)
- Guest (S-1-5-21-3695887035-1542476804-3675477037-501 - Limited - Disabled)
- justi (S-1-5-21-3695887035-1542476804-3675477037-1001 - Administrator - Enabled) => C:\Users\justi
- ==================== Security Center ========================
- (If an entry is included in the fixlist, it will be removed.)
- AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
- AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
- ==================== Installed Programs ======================
- (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
- .NET Core SDK 1.0.4 (x64) (HKLM\...\{11ACCE3C-C179-472C-A8CA-0F467702B2DA}) (Version: 4.1.5012 - Microsoft Corporation) Hidden
- .NET Core SDK 1.0.4 (x64) (HKLM-x32\...\{c56e80af-58a4-490b-a1cd-5718290133b9}) (Version: 1.0.4 - Microsoft Corporation)
- @BIOS B15.0630.1 (HKLM-x32\...\{C9D46F25-5F9D-4E25-B24F-BC00E9EDF529}) (Version: 3.00.0000 - GIGABYTE) Hidden
- @BIOS B15.0630.1 (HKLM-x32\...\InstallShield_{C9D46F25-5F9D-4E25-B24F-BC00E9EDF529}) (Version: 3.00.0000 - GIGABYTE)
- Active Directory Authentication Library for SQL Server (HKLM\...\{32C0D7B2-1046-43AC-98AD-B748E1910916}) (Version: 13.0.1601.5 - Microsoft Corporation) Hidden
- Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.3.0.256 - Adobe Systems Incorporated)
- Adobe Illustrator CC 2018 (HKLM-x32\...\ILST_22_0_0) (Version: 22.0.0 - Adobe Systems Incorporated)
- Adobe Media Encoder CC 2018 (HKLM-x32\...\AME_12_0_0) (Version: 12.0.0 - Adobe Systems Incorporated)
- Adobe Photoshop CC 2018 (HKLM-x32\...\PHSP_19_0) (Version: 19.0 - Adobe Systems Incorporated)
- Adobe Premiere Pro CC 2018 (HKLM-x32\...\PPRO_12_0_0) (Version: 12.0.0 - Adobe Systems Incorporated)
- Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 385.41 - NVIDIA Corporation) Hidden
- Apple Application Support (32-bit) (HKLM-x32\...\{D2FE6376-E549-4F63-A2C5-CA24DA035DE4}) (Version: 5.6 - Apple Inc.)
- Apple Application Support (64-bit) (HKLM\...\{BB109E24-EE90-485B-A28B-ADDEFB40540B}) (Version: 5.6 - Apple Inc.)
- Apple Mobile Device Support (HKLM\...\{0A596141-97D5-45FA-9281-98DFAF48D579}) (Version: 10.3.2.3 - Apple Inc.)
- Apple Software Update (HKLM-x32\...\{52D87F32-70E4-4348-8148-C0B9F35B1314}) (Version: 2.3.0.177 - Apple Inc.)
- Application Verifier x64 External Package (HKLM\...\{01C2C51F-B0CF-BB5E-A010-E927D44F7720}) (Version: 10.1.15063.137 - Microsoft) Hidden
- Blizzard App (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
- Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
- ClickOnce Bootstrapper Package for Microsoft .NET Framework (HKLM-x32\...\{E598B692-764A-413C-8530-59163D6B4AE3}) (Version: 4.6.01590 - Microsoft Corporation) Hidden
- CPUID HWMonitor 1.31 (HKLM\...\CPUID HWMonitor_is1) (Version: - )
- DiagnosticsHub_CollectionService (HKLM\...\{90A561D7-0C29-464D-94E1-2A7E1C553230}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- Discord (HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\...\Discord) (Version: 0.0.298 - Discord Inc.)
- Electrum (HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\...\Electrum) (Version: 2.8.3 - Electrum Technologies GmbH)
- Entity Framework 6.1.3 Tools for Visual Studio 15 (HKLM-x32\...\{F8C0447E-D45C-4E52-94E8-C6340AAC9DB8}) (Version: 6.1.60104.0 - Microsoft Corporation) Hidden
- f.lux (HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\...\Flux) (Version: - f.lux Software LLC)
- FileZilla Client 3.27.0.1 (HKLM-x32\...\FileZilla Client) (Version: 3.27.0.1 - Tim Kosse)
- Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.)
- Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
- icecap_collection_neutral (HKLM-x32\...\{64F3E6FC-68E3-4062-9C2C-ABD93FDFF309}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- icecap_collection_x64 (HKLM\...\{0AD162D1-4973-4315-97E9-5DE9A92B4049}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- icecap_collectionresources (HKLM-x32\...\{12C50688-5919-4A7A-8784-B26A7238FCEE}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- icecap_collectionresourcesx64 (HKLM-x32\...\{400E7885-8851-43F1-849C-5A720CB4F001}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- IIS 10.0 Express (HKLM\...\{0148E8AA-4A50-4673-B532-DB9F30F804BE}) (Version: 10.0.1737 - Microsoft Corporation)
- IIS Express Application Compatibility Database for x64 (HKLM\...\{08274920-8908-45c2-9258-8ad67ff77b09}.sdb) (Version: - ) Hidden
- IIS Express Application Compatibility Database for x86 (HKLM\...\{ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb) (Version: - ) Hidden
- Intellisense Lang Pack Mobile Extension SDK 10.0.15063.0 (HKLM-x32\...\{A0007ADE-F6F6-410F-822F-7522B4F0BFDE}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- IntelliTraceProfilerProxy (HKLM-x32\...\{51783942-DFB0-4452-97CC-BDF2D4AB3A48}) (Version: 15.0.24.0 - Microsoft Corporation) Hidden
- iTunes (HKLM\...\{02F95875-9527-49CC-B32F-970ADAEBD1EF}) (Version: 12.6.2.20 - Apple Inc.)
- Java 8 Update 151 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180151F0}) (Version: 8.0.1510.12 - Oracle Corporation)
- join.me (HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\...\JoinMe) (Version: 3.3.0.5340 - LogMeIn, Inc.)
- Kits Configuration Installer (HKLM-x32\...\{0C05DE52-2C77-D6FA-A561-D508CF5FC96E}) (Version: 10.1.15063.137 - Microsoft) Hidden
- MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
- Microsoft Azure Authoring Tools - v2.9.5.3 (HKLM\...\{086C537B-DE1A-4A11-8441-6AAF076174B8}) (Version: 2.9.8699.20 - Microsoft Corporation)
- Microsoft Azure Compute Emulator - v2.9.5.3 (HKLM\...\Microsoft Azure Compute Emulator - v2.9.5.3) (Version: 2.9.8699.20 - Microsoft Corporation)
- Microsoft Azure Libraries for .NET – v2.9 (HKLM\...\{C5C91AA6-3E83-430E-8B7A-6B790083F28D}) (Version: 3.0.0127.060 - Microsoft Corporation)
- Microsoft Azure Mobile App SDK V2.0 (HKLM-x32\...\{829D812B-3F25-4E8B-B1DF-1AD09164684C}) (Version: 2.0.50130.0 - Microsoft Corporation)
- Microsoft Azure PowerShell - September 2016 (HKLM-x32\...\{CB3F8A12-1570-4964-8206-17274AB9EF4D}) (Version: 2.1.0 - Microsoft Corporation)
- Microsoft Azure Storage Emulator - v5.1 (HKLM-x32\...\Microsoft Azure Storage Emulator - v5.1) (Version: 5.1.1760.1722 - Microsoft Corporation)
- Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)
- Microsoft ODBC Driver 11 for SQL Server (HKLM\...\{BF5ABBDB-D3AA-4BCB-8D10-FCD4A4BB7F93}) (Version: 12.1.4100.1 - Microsoft Corporation)
- Microsoft Office Professional Plus 2016 - en-us (HKLM\...\ProPlusRetail - en-us) (Version: 16.0.8528.2139 - Microsoft Corporation)
- Microsoft Report Viewer 2014 Runtime (HKLM-x32\...\{327E9C0D-1687-414F-923E-F5979E549548}) (Version: 12.0.2000.8 - Microsoft Corporation)
- Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{83F2B8F4-5CF3-4BE9-9772-9543EAE4AC5F}) (Version: 10.51.2500.0 - Microsoft Corporation)
- Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{6292D514-17A4-403F-98F9-E150F10C043D}) (Version: 10.3.5500.0 - Microsoft Corporation)
- Microsoft SQL Server 2012 Native Client (HKLM\...\{1385D3DB-8E80-427B-91D2-B7535862B8E4}) (Version: 11.3.6518.0 - Microsoft Corporation)
- Microsoft SQL Server 2014 (64-bit) (HKLM\...\Microsoft SQL Server SQLServer2014) (Version: - Microsoft Corporation)
- Microsoft SQL Server 2014 Policies (HKLM-x32\...\{1C30FE7E-8A8C-4492-89D6-10CB20C3B0EB}) (Version: 12.0.2000.8 - Microsoft Corporation)
- Microsoft SQL Server 2014 Setup (English) (HKLM\...\{C7E2483C-10A4-41E3-A2F6-240186FE3E41}) (Version: 12.1.4100.1 - Microsoft Corporation)
- Microsoft SQL Server 2014 Transact-SQL Compiler Service (HKLM\...\{1A73AF5D-69EE-4AE0-917C-2429CE593A86}) (Version: 12.1.4100.1 - Microsoft Corporation)
- Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\...\{FF7DDA05-6EA7-4C01-B44A-3E57F8B9B97B}) (Version: 12.1.4100.1 - Microsoft Corporation)
- Microsoft SQL Server 2016 LocalDB (HKLM\...\{E359515A-92E6-4FA3-A2C9-E1BA02D8DE6E}) (Version: 13.0.1601.5 - Microsoft Corporation)
- Microsoft SQL Server System CLR Types (HKLM-x32\...\{C3F6F200-6D7B-4879-B9EE-700C0CE1FCDA}) (Version: 10.51.2500.0 - Microsoft Corporation)
- Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{E3F613C1-105F-4717-BFE7-007729A95D67}) (Version: 12.1.4100.1 - Microsoft Corporation)
- Microsoft System CLR Types for SQL Server 2016 (HKLM\...\{96EB5054-C775-4BEF-B7B9-AA96A295EDCD}) (Version: 13.0.1601.5 - Microsoft Corporation)
- Microsoft System CLR Types for SQL Server 2016 (HKLM-x32\...\{84C23ECA-FE4D-494F-9247-3EBAD57E7F0C}) (Version: 13.0.1601.5 - Microsoft Corporation)
- Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
- Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
- Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
- Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
- Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
- Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
- Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
- Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
- Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)
- Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
- Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
- Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
- Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
- Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f1e7e313-06df-4c56-96a9-99fdfd149c51}) (Version: 14.10.25008.0 - Microsoft Corporation)
- Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)
- Microsoft Visual Studio 2010 Shell (Isolated) - ENU (HKLM-x32\...\{D64B6984-242F-32BC-B008-752806E5FC44}) (Version: 10.0.40219 - Microsoft Corporation)
- Microsoft Visual Studio 2017 (HKLM-x32\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 1.10.30640.0 - Microsoft Corporation)
- Microsoft Web Deploy 3.6 (HKLM\...\{5CB4DD27-6252-4C08-BFCF-22F6A110CBFA}) (Version: 10.0.1972 - Microsoft Corporation)
- Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
- Nexon Launcher (HKLM-x32\...\Nexon Nexon Launcher) (Version: 2.0.0 - Nexon)
- NVIDIA 3D Vision Controller Driver 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
- NVIDIA 3D Vision Driver 385.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 385.41 - NVIDIA Corporation)
- NVIDIA GeForce Experience 3.10.0.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.10.0.95 - NVIDIA Corporation)
- NVIDIA Graphics Driver 385.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 385.41 - NVIDIA Corporation)
- NVIDIA HD Audio Driver 1.3.34.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.27 - NVIDIA Corporation)
- NVIDIA PhysX System Software 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
- OBS Studio (HKLM-x32\...\OBS Studio) (Version: 20.0.1 - OBS Project)
- Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8528.2139 - Microsoft Corporation) Hidden
- Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8528.2139 - Microsoft Corporation) Hidden
- Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8528.2139 - Microsoft Corporation) Hidden
- Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden
- Python 2.7.13 (HKLM-x32\...\{4A656C6C-D24A-473F-9747-3A8D00907A03}) (Version: 2.7.13150 - Python Software Foundation)
- Python 3.6.0 (64-bit) (HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\...\{37a4e38b-baf7-4500-97f1-0f7c51d9a395}) (Version: 3.6.150.0 - Python Software Foundation)
- Python 3.6.0 Core Interpreter (64-bit symbols) (HKLM\...\{DFAA81ED-540F-47B5-9113-814CC427CFD8}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Core Interpreter (64-bit) (HKLM\...\{1944B5D6-0FFB-47C0-BFEC-5C7A2F013FA7}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Development Libraries (64-bit) (HKLM\...\{A6A3184B-748E-46F4-9E28-6B5889506170}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Documentation (64-bit) (HKLM\...\{5D83032F-36B5-42E4-A114-D310119C6F51}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Executables (64-bit symbols) (HKLM\...\{4A928E09-6798-46AB-A4F7-1B52CD164B3B}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Executables (64-bit) (HKLM\...\{C0016766-8F63-4992-9E6F-ECFB2CB12BA6}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 pip Bootstrap (64-bit) (HKLM\...\{F9C1C892-4908-41F4-900C-7B0DAAF2387B}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Standard Library (64-bit symbols) (HKLM\...\{90676013-5216-48EE-AC8D-07AC0C16DA50}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Standard Library (64-bit) (HKLM\...\{F3CB2257-C4C7-4C84-AF63-BADCED1E3273}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Tcl/Tk Support (64-bit symbols) (HKLM\...\{96C2F083-44B8-4388-B2A5-F48B75A25188}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Tcl/Tk Support (64-bit) (HKLM\...\{E24AA157-AD52-42ED-B484-CA5979D4A728}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Test Suite (64-bit symbols) (HKLM\...\{CFF9C3A7-86C3-410B-9DD1-F1617767D2D6}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Test Suite (64-bit) (HKLM\...\{631C7E77-5832-40D1-9D6D-7B3766D79BDF}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Utility Scripts (64-bit) (HKLM\...\{FE905DA4-0F23-4F99-9284-50BB4913CEB4}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python Launcher (HKLM-x32\...\{A674B2CB-13CA-437B-A215-9DD257959A49}) (Version: 3.6.5835.0 - Python Software Foundation)
- qBittorrent 3.3.13 (HKLM-x32\...\qBittorrent) (Version: 3.3.13 - The qBittorrent project)
- RogueKiller version 12.11.21.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 12.11.21.0 - Adlice Software)
- Service Pack 1 for SQL Server 2014 (KB3058865) (64-bit) (HKLM\...\KB3058865) (Version: 12.1.4100.1 - Microsoft Corporation)
- ShareX (HKLM\...\82E6AC09-0FEF-4390-AD9F-0DD3F5561EFC_is1) (Version: 11.9.1 - ShareX Team)
- Sid Meier's Civilization 5 (HKLM-x32\...\Sid Meier's Civilization 5_R.G. Mechanics_is1) (Version: - R.G. Mechanics, Panky)
- Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.103 - Skype Technologies S.A.)
- SoftEther VPN Client (HKLM\...\softether_sevpnclient) (Version: 4.23.9647 - SoftEther VPN Project)
- SQL Server 2014 Client Tools (HKLM\...\{2BA1811B-44C0-4C50-8C5A-CE68AB25ED71}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden
- SQL Server 2014 Client Tools (HKLM\...\{B5ECFA5C-AC4F-45A4-A12E-A76ABDD9CCBA}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden
- SQL Server 2014 Common Files (HKLM\...\{BD1CD96B-FE4B-4EAE-83D4-6EF55AB5779C}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden
- SQL Server 2014 Common Files (HKLM\...\{F7012F84-80F5-4C25-852E-B1BA03276FE6}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden
- SQL Server 2014 Management Studio (HKLM\...\{75A54138-3B98-4705-92E4-F619825B121F}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden
- SQL Server 2014 Management Studio (HKLM\...\{839EF29A-3055-43DC-ADCE-8E84893798D5}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden
- Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
- Sublime Text Build 3126 (HKLM\...\Sublime Text 3_is1) (Version: - Sublime HQ Pty Ltd)
- TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.1.6 - TeamSpeak Systems GmbH)
- TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.83369 - TeamViewer)
- TypeScript Power Tool (HKLM-x32\...\{F0B4CA92-9642-4BE6-8449-A786AD4FA628}) (Version: 2.2.3.0 - Microsoft Corporation) Hidden
- Universal CRT Extension SDK (HKLM-x32\...\{ADD45F52-630A-4F45-8879-A8DB80DF921B}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- Universal CRT Headers Libraries and Sources (HKLM-x32\...\{919D63C5-565C-F1C3-67D9-353FE902EF11}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- Universal CRT Redistributable (HKLM-x32\...\{0AAB833E-034D-430B-D3E4-39C5753B14AC}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- Universal CRT Tools x64 (HKLM\...\{D29934EC-24B6-0F5D-C6BB-E9ECCF220C12}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- Universal CRT Tools x86 (HKLM-x32\...\{2410D879-0C8F-B254-C207-455E119075B6}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- Universal General MIDI DLS Extension SDK (HKLM-x32\...\{485209AE-37CE-2208-59CB-7BB59AA85BE7}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
- vcpp_crt.redist.clickonce (HKLM-x32\...\{93FDC294-0726-48EA-989D-50E89C67ABF0}) (Version: 14.10.25008 - Microsoft Corporation) Hidden
- Visual Studio 2010 Prerequisites - English (HKLM\...\{662014D2-0450-37ED-ABAE-157C88127BEB}) (Version: 10.0.40219 - Microsoft Corporation)
- VS Immersive Activate Helper (HKLM-x32\...\{D8A4EA2B-1A97-45A5-BF96-7493183F8524}) (Version: 16.0.59.0 - Microsoft Corporation) Hidden
- VS Script Debugging Common (HKLM\...\{3B64C68E-14E0-4214-A53D-502E9FBD32E7}) (Version: 16.0.59.0 - Microsoft Corporation) Hidden
- VS WCF Debugging (HKLM\...\{9E1EF6F7-ED70-4BD8-A1AE-83C5DEF0DA91}) (Version: 16.0.59.0 - Microsoft Corporation) Hidden
- vs_BlendMsi (HKLM-x32\...\{1070C8E8-4DFB-419F-984A-5C835828897E}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- vs_clickoncebootstrappermsi (HKLM-x32\...\{B9F4AA09-F4AC-4108-ADA0-27CDD45FCEC3}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- vs_clickoncebootstrappermsires (HKLM-x32\...\{AEF5E0F2-31D1-454A-A992-C523C0007B4D}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- vs_clickoncesigntoolmsi (HKLM-x32\...\{DE8B48BF-82B9-434A-B254-1EA2306E5FBA}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- vs_communitymsi (HKLM-x32\...\{A041943F-C97B-48F6-8F23-C5078F99BB3A}) (Version: 15.0.26323 - Microsoft Corporation) Hidden
- vs_communitymsires (HKLM-x32\...\{1210EE60-E253-407D-B537-D36898049CF0}) (Version: 15.0.26228 - Microsoft Corporation) Hidden
- vs_devenvmsi (HKLM-x32\...\{581E5656-26E2-4A02-9711-48C8E4998310}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- vs_filehandler_amd64 (HKLM-x32\...\{15D591B0-7B40-4957-B6C0-EB7452B5AAB6}) (Version: 15.0.26228 - Microsoft Corporation) Hidden
- vs_filehandler_x86 (HKLM-x32\...\{DC296244-0701-4EDE-9696-05B9C1D017B3}) (Version: 15.0.26228 - Microsoft Corporation) Hidden
- vs_FileTracker_Singleton (HKLM-x32\...\{11230C85-1813-4BC3-9C24-E0B74B59653E}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- vs_Graphics_Singletonx64 (HKLM\...\{F3217611-B414-4A3A-81BF-6A3A4DB7E743}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- vs_Graphics_Singletonx86 (HKLM-x32\...\{D4DCEC6A-BC59-43D5-866A-AB057E64F73F}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- vs_minshellinteropmsi (HKLM-x32\...\{9477F337-FD16-4ACA-8217-E2D7A0F92603}) (Version: 15.0.26301 - Microsoft Corporation) Hidden
- vs_minshellmsi (HKLM-x32\...\{497A5ACE-DA03-4412-A110-910B2C450720}) (Version: 15.0.26424 - Microsoft Corporation) Hidden
- vs_minshellmsires (HKLM-x32\...\{A8B77523-13AB-46B9-B54F-5483E09668F9}) (Version: 15.0.26228 - Microsoft Corporation) Hidden
- vs_SQLClickOnceBootstrappermsi (HKLM-x32\...\{D396CF10-5F2B-417D-9571-0B669B99440E}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- vs_tipsmsi (HKLM-x32\...\{A32A9CF6-E7AA-48B8-A3D3-50C157E69F53}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- Vulkan Run Time Libraries 1.0.51.0 (HKLM\...\VulkanRT1.0.51.0) (Version: 1.0.51.0 - LunarG, Inc.)
- WinAppDeploy (HKLM-x32\...\{80859F5A-D13C-AB8E-4659-B630CFE2599D}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- Windows SDK AddOn (HKLM-x32\...\{30DCCFB4-068F-4C5C-BC10-5ECDCAEE55D4}) (Version: 10.1.0.0 - Microsoft Corporation)
- Windows Software Development Kit - Windows 10.0.15063.137 (HKLM-x32\...\{a07b4a01-ca27-4e28-9353-f325a308f128}) (Version: 10.1.15063.137 - Microsoft Corporation)
- WinRAR 5.50 beta 3 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.3 - win.rar GmbH)
- WinRT Intellisense Desktop - en-us (HKLM-x32\...\{45B6202F-A716-C68A-199E-43B106B56A7E}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{357D0CD4-8B72-8D65-7015-81DFB2BF9150}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- WinRT Intellisense IoT - en-us (HKLM-x32\...\{3E5375A1-0E4C-34E3-6294-C1C8BDA823E4}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{E2F78B92-04DE-5350-14C0-7C281BF87D9E}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- WinRT Intellisense PPI - en-us (HKLM-x32\...\{6CE744AE-7E0F-00AF-F1BD-077D9AFCBEC6}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{81A0EC8C-9462-BC98-0E5C-301DD7A46792}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- WinRT Intellisense UAP - en-us (HKLM-x32\...\{FAD08838-3937-0F6C-8787-FDFDFBF63502}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{D089A695-49F0-D3B2-0EBF-2BBC33A05CD6}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- ==================== Custom CLSID (Whitelisted): ==========================
- (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
- CustomCLSID: HKU\S-1-5-21-3695887035-1542476804-3675477037-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-17AD6CE4A66E}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => No File
- CustomCLSID: HKU\S-1-5-21-3695887035-1542476804-3675477037-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\justi\AppData\Local\Microsoft\OneDrive\17.3.6816.0313\amd64\FileSyncShell64.dll => No File
- CustomCLSID: HKU\S-1-5-21-3695887035-1542476804-3675477037-1001_Classes\CLSID\{5D09DD40-CDC4-4C56-B615-0D1E3B357C2B}\InprocServer32 -> C:\Program Files (x86)\AliWangWang\9.07.03C\AliIMX_64.dll => No File
- CustomCLSID: HKU\S-1-5-21-3695887035-1542476804-3675477037-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\justi\AppData\Local\Microsoft\OneDrive\17.3.6816.0313\amd64\FileSyncShell64.dll => No File
- CustomCLSID: HKU\S-1-5-21-3695887035-1542476804-3675477037-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\justi\AppData\Local\Microsoft\OneDrive\17.3.6816.0313\amd64\FileSyncShell64.dll => No File
- CustomCLSID: HKU\S-1-5-21-3695887035-1542476804-3675477037-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
- ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
- ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
- ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
- ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
- ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
- ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
- ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
- ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
- ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
- ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
- ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
- ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Users\justi\rarext.dll [2017-05-31] (Alexander Roshal)
- ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Users\justi\rarext32.dll [2017-05-31] (Alexander Roshal)
- ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
- ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
- ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
- ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2017-08-22] (NVIDIA Corporation)
- ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
- ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Users\justi\rarext.dll [2017-05-31] (Alexander Roshal)
- ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Users\justi\rarext32.dll [2017-05-31] (Alexander Roshal)
- ==================== Scheduled Tasks (Whitelisted) =============
- (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
- Task: {040F2B12-179F-4E0F-9C47-7E4A7D0280F8} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-10-11] (NVIDIA Corporation)
- Task: {0EA8CDEA-1E69-4D87-853B-F3B8156ECAE0} - System32\Tasks\Microsoft\VisualStudio\VSIX Auto Update 15.0.26430.15 => D:\Program Files\Visual Studio\Common7\IDE\VSIXAutoUpdate.exe [2017-07-09] (Microsoft Corporation)
- Task: {0FDD5BCD-006C-4840-80F1-CE5C532EEF77} - System32\Tasks\AliUpdater{13F48D5A-AF3B-4953-A887-77E2E479AF4D} => C:\Program Files (x86)\AliWangWang\AliTask.exe
- Task: {11061F0F-F8F1-4396-B603-244361431314} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-10-12] (Microsoft Corporation)
- Task: {1E862D15-8166-44D8-AC1F-102FD665F883} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-06-03] (Google Inc.)
- Task: {2F07F46D-A341-4DDA-BC09-5C7AD6F1E987} - System32\Tasks\AutoPico Daily Restart => C:\Users\justi\Desktop\KMSpico [Argument = 10.1.8 FINAL + Portable (Office and Windows 10 Activator) [TechTools.net]\Portable\AutoPico.exe /silent]
- Task: {311188D4-AB94-4568-9708-6D7B9F085D70} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-28] ()
- Task: {381E14CD-F838-463B-8824-70764994F8B6} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-10-11] (NVIDIA Corporation)
- Task: {3E96EF0E-F426-40DF-843E-063B61243C6D} - System32\Tasks\KMSAutoNet => C:\ProgramData\KMSAutoS\KMSAuto Net.exe [2015-08-10] (MSFree Inc.)
- Task: {47E8AF72-37D2-4F19-8798-A9136D6FA48B} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-10-11] (NVIDIA Corporation)
- Task: {53F94377-0DDE-4163-9D16-7D4AC71DD8A4} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-10-11] (NVIDIA Corporation)
- Task: {566AD73E-F634-4226-BCE7-E5D19E4924D5} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-28] ()
- Task: {5D71A98E-0E26-4CB5-8CEA-69D5C40F17B7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-10-21] (Microsoft Corporation)
- Task: {68011F2D-E67B-4641-A5E6-AF026F8BDCBC} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-10-11] (NVIDIA Corporation)
- Task: {85F00F4E-B244-468A-9974-4C72DE1E20CF} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-10-21] (Microsoft Corporation)
- Task: {A48F9558-DD43-47A9-8CBC-7CFAF30118B8} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-10-12] (Microsoft Corporation)
- Task: {A5710A68-BAA6-4613-9FF8-45AC1764561B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-06-03] (Google Inc.)
- Task: {B2694EBD-8289-4C00-8D93-181BCA3EEA5F} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-10-11] (NVIDIA Corporation)
- Task: {CBD94D9A-D8E0-413B-9956-F4BAABE781AD} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-10-11] (NVIDIA Corporation)
- Task: {D46BBE71-A246-4449-97DD-304F90800F6E} - System32\Tasks\[email protected] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated)
- Task: {DFFCCB4D-AF15-4F0E-A63E-9B2A7E861A4B} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-10-11] (NVIDIA Corporation)
- (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
- Task: C:\Windows\Tasks\AliUpdater{13F48D5A-AF3B-4953-A887-77E2E479AF4D}.job => C:\Program Files (x86)\AliWangWang\AliTask.exe
- ==================== Shortcuts & WMI ========================
- (The entries could be listed to be restored or removed.)
- ==================== Loaded Modules (Whitelisted) ==============
- 2017-07-13 20:50 - 2017-07-13 20:50 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
- 2017-07-13 20:50 - 2017-07-13 20:50 - 001354040 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
- 2017-06-03 12:07 - 2017-10-11 09:05 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
- 2017-03-19 04:58 - 2017-03-19 04:58 - 000138000 _____ () C:\Windows\SYSTEM32\inputhost.dll
- 2017-06-08 04:09 - 2017-06-08 04:09 - 000598528 _____ () C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll
- 2017-09-26 02:52 - 2017-09-26 02:52 - 000491600 _____ () C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll
- 2017-06-05 14:32 - 2017-10-21 18:11 - 008929464 _____ () C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\1033\GrooveIntlResource.dll
- 2017-07-20 00:18 - 2017-07-20 00:18 - 000076456 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll
- 2017-09-26 15:16 - 2017-09-21 15:29 - 004022616 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libglesv2.dll
- 2017-09-26 15:16 - 2017-09-21 15:29 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libegl.dll
- 2017-08-24 13:12 - 2017-08-24 13:13 - 000074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe
- 2017-08-24 13:12 - 2017-08-24 13:13 - 000203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
- 2017-08-24 13:12 - 2017-08-24 13:13 - 036162048 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkyWrap.dll
- 2017-08-24 13:12 - 2017-08-24 13:13 - 002237952 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\skypert.dll
- 2017-09-26 02:52 - 2017-09-26 02:52 - 034879568 _____ () C:\Program Files (x86)\Adobe\Adobe Sync\Coresync\Coresync.exe
- 2017-10-03 20:52 - 2017-10-03 20:53 - 000021504 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39081.15820.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
- 2017-10-03 20:52 - 2017-10-03 20:53 - 048839168 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39081.15820.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
- 2017-09-30 14:47 - 2017-09-30 14:47 - 002523136 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39081.15820.0_x64__8wekyb3d8bbwe\UnityEngineDelegates.dll
- 2017-10-03 20:52 - 2017-10-03 20:53 - 000164352 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39081.15820.0_x64__8wekyb3d8bbwe\VideoPlugin.dll
- 2017-09-30 14:47 - 2017-09-30 14:47 - 000675328 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39081.15820.0_x64__8wekyb3d8bbwe\IPPNativePlugin.dll
- 2017-09-30 14:47 - 2017-09-30 14:47 - 000352256 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39081.15820.0_x64__8wekyb3d8bbwe\Microsoft.Photos.AGM.Native.Windows.dll
- 2017-09-30 14:47 - 2017-09-30 14:47 - 002836480 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39081.15820.0_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll
- 2017-10-03 20:52 - 2017-10-03 20:53 - 020559872 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39081.15820.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll
- 2017-09-30 14:47 - 2017-09-30 14:47 - 002705408 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39081.15820.0_x64__8wekyb3d8bbwe\MediaEngine.dll
- 2017-10-03 20:52 - 2017-10-03 20:53 - 003128320 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39081.15820.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll
- 2017-08-29 13:30 - 2017-08-29 13:30 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39081.15820.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
- 2017-10-03 20:52 - 2017-10-03 20:53 - 000118784 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39081.15820.0_x64__8wekyb3d8bbwe\ExploreModel.dll
- 2017-09-30 14:47 - 2017-09-30 14:47 - 000046080 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39081.15820.0_x64__8wekyb3d8bbwe\Microsoft.Photos.Edit.Services.dll
- 2017-09-30 14:47 - 2017-09-30 14:47 - 001380864 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39081.15820.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll
- 2017-10-03 20:52 - 2017-10-03 20:53 - 000367616 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.39081.15820.0_x64__8wekyb3d8bbwe\AnimatedGIF.dll
- 2017-10-19 23:20 - 2017-10-19 23:21 - 025741312 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17092.13511.0_x64__8wekyb3d8bbwe\Video.UI.exe
- 2017-10-19 23:20 - 2017-10-19 23:21 - 009257984 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17092.13511.0_x64__8wekyb3d8bbwe\EntCommon.dll
- 2017-09-26 17:50 - 2017-09-26 17:50 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17092.13511.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
- 2017-10-10 21:16 - 2017-10-10 21:16 - 004252672 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1709.2703.0_x64__8wekyb3d8bbwe\Calculator.exe
- 2017-09-26 17:50 - 2017-09-26 17:50 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1709.2703.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
- 2017-03-19 04:59 - 2017-03-19 10:30 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
- 2017-06-03 12:07 - 2017-10-11 09:05 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
- 2017-06-03 12:01 - 2017-09-10 03:25 - 000688416 _____ () C:\Program Files (x86)\Steam\SDL2.dll
- 2017-06-03 12:01 - 2017-10-18 05:24 - 002546976 _____ () C:\Program Files (x86)\Steam\video.dll
- 2017-06-03 12:01 - 2016-09-01 09:02 - 004969248 _____ () C:\Program Files (x86)\Steam\v8.dll
- 2017-06-03 12:01 - 2016-01-27 15:49 - 000491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
- 2017-06-03 12:01 - 2016-01-27 15:49 - 000332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
- 2017-06-03 12:01 - 2016-01-27 15:49 - 002549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
- 2017-06-03 12:01 - 2016-01-27 15:49 - 000442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
- 2017-06-03 12:01 - 2016-01-27 15:49 - 000485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
- 2017-06-03 12:01 - 2016-09-01 09:02 - 001195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
- 2017-06-03 12:01 - 2016-09-01 09:02 - 001563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
- 2017-06-03 12:01 - 2017-10-18 05:24 - 000901408 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
- 2017-06-03 12:01 - 2016-07-05 06:17 - 000266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
- 2017-08-09 14:48 - 2017-08-08 15:13 - 001893880 _____ () C:\Users\justi\AppData\Local\Discord\app-0.0.298\ffmpeg.dll
- 2017-08-09 14:48 - 2017-08-09 14:48 - 001577976 _____ () \\?\C:\Users\justi\AppData\Roaming\discord\0.0.298\modules\discord_toaster\discord_toaster.node
- 2017-06-09 20:04 - 2017-09-07 10:04 - 000678400 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\SDL2.dll
- 2017-06-03 12:02 - 2017-08-17 06:28 - 073130272 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
- 2017-06-03 12:01 - 2015-09-25 07:52 - 000119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
- 2017-08-09 14:48 - 2017-08-08 15:13 - 001938424 _____ () C:\Users\justi\AppData\Local\Discord\app-0.0.298\libglesv2.dll
- 2017-08-09 14:48 - 2017-08-08 15:13 - 000095736 _____ () C:\Users\justi\AppData\Local\Discord\app-0.0.298\libegl.dll
- 2017-08-09 14:48 - 2017-10-08 21:24 - 009722360 _____ () \\?\C:\Users\justi\AppData\Roaming\discord\0.0.298\modules\discord_voice\discord_voice.node
- 2017-08-09 14:48 - 2017-08-09 14:48 - 001440248 _____ () \\?\C:\Users\justi\AppData\Roaming\discord\0.0.298\modules\discord_utils\discord_utils.node
- 2017-10-25 19:04 - 2017-10-25 19:04 - 000148992 _____ () \\?\C:\Users\justi\AppData\Local\Temp\B57E.tmp.node
- 2017-08-09 14:48 - 2017-08-09 14:48 - 002658296 _____ () \\?\C:\Users\justi\AppData\Roaming\discord\0.0.298\modules\discord_rpc\discord_rpc.node
- 2017-08-09 14:48 - 2017-08-09 14:48 - 002673656 _____ () \\?\C:\Users\justi\AppData\Roaming\discord\0.0.298\modules\discord_contact_import\discord_contact_import.node
- 2017-08-17 16:51 - 2017-08-17 16:51 - 001993184 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll
- 2016-04-13 16:38 - 2016-04-13 16:38 - 000482304 _____ () C:\Users\justi\AppData\Local\MEGAsync\libsodium.dll
- 2017-09-20 02:42 - 2017-09-20 02:42 - 067115616 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\libcef.dll
- 2017-07-20 00:18 - 2017-07-20 00:18 - 000073384 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll
- 2017-09-06 18:11 - 2017-09-06 18:11 - 000118272 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\fs-ext\build\Release\fs-ext.node
- 2017-09-06 18:11 - 2017-09-06 18:11 - 000214528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
- 2017-09-06 18:11 - 2017-09-06 18:11 - 000117248 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ref\build\Release\binding.node
- 2017-09-06 18:11 - 2017-09-06 18:11 - 000125952 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ffi\build\Release\ffi_bindings.node
- 2017-09-20 03:04 - 2017-09-20 03:04 - 000099424 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin.dll
- 2017-09-06 18:11 - 2017-09-06 18:11 - 000086528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\idle-gc\build\Release\idle-gc.node
- 2017-09-12 20:11 - 2017-09-12 20:11 - 000118272 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\fs-ext\build\Release\fs-ext.node
- 2017-09-12 20:10 - 2017-09-12 20:10 - 000117760 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ref\build\Release\binding.node
- 2017-09-12 20:11 - 2017-09-12 20:11 - 000125440 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ffi\build\Release\ffi_bindings.node
- 2017-09-12 20:11 - 2017-09-12 20:11 - 000214528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
- 2017-09-20 02:59 - 2017-09-20 02:59 - 000099424 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin.dll
- 2017-09-12 20:11 - 2017-09-12 20:11 - 000098816 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\bufferutil\build\Release\bufferutil.node
- 2017-09-12 20:11 - 2017-09-12 20:11 - 000086528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\idle-gc\build\Release\idle-gc.node
- 2017-06-03 12:07 - 2017-10-11 09:05 - 070805952 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
- ==================== Alternate Data Streams (Whitelisted) =========
- (If an entry is included in the fixlist, only the ADS will be removed.)
- ==================== Safe Mode (Whitelisted) ===================
- (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
- HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
- HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
- ==================== Association (Whitelisted) ===============
- (If an entry is included in the fixlist, the registry item will be restored to default or removed.)
- ==================== Internet Explorer trusted/restricted ===============
- (If an entry is included in the fixlist, it will be removed from the registry.)
- ==================== Other Areas ============================
- (Currently there is no automatic fix for this section.)
- HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\Control Panel\Desktop\\Wallpaper -> d:\downloads\rdq6bea.jpg
- DNS Servers: 8.8.8.8 - 8.8.4.4
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
- Windows Firewall is enabled.
- ==================== MSCONFIG/TASK MANAGER disabled items ==
- HKLM\...\StartupApproved\StartupFolder: => "SoftEther VPN Client Manager Startup.lnk"
- HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
- HKLM\...\StartupApproved\Run: => "iTunesHelper"
- HKLM\...\StartupApproved\Run: => "SoftEther VPN Client UI Helper"
- HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\...\StartupApproved\Run: => "BingSvc"
- HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\...\StartupApproved\Run: => "OneDrive"
- ==================== FirewallRules (Whitelisted) ===============
- (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
- FirewallRules: [{E017E938-01E4-49E4-AFF4-FD70D80C3789}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
- FirewallRules: [{6840A587-3DDE-4052-B519-31A535147400}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
- FirewallRules: [{7CD4F6B6-9F31-453B-82EB-AA54433861DE}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
- FirewallRules: [{A0B293A1-47AF-40A5-8A06-470A57AB81A2}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
- FirewallRules: [{2A770DB2-8308-4BAF-BD65-6609065A4114}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
- FirewallRules: [{237E8D31-2673-4674-9DE7-78825480C98F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
- FirewallRules: [{C46C6552-CC73-449D-95AF-DF11BC6E33F3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
- FirewallRules: [{7F742643-C870-4B25-9149-7CDFD7A208E4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
- FirewallRules: [{FD73B0C9-F050-49E3-9080-ED8E8AAB00C4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
- FirewallRules: [{691634CB-37F2-46C3-B178-4AEB692A69FB}] => (Allow) D:\Program Files\qBittorrent\qbittorrent.exe
- FirewallRules: [{89CDC718-44E7-4925-AC7B-15BEEE06CDBF}] => (Allow) D:\Program Files\qBittorrent\qbittorrent.exe
- FirewallRules: [TCP Query User{5F316F28-4219-4230-8250-15175B236DF6}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
- FirewallRules: [UDP Query User{FE05C098-B032-4445-BB48-BB99CF50517B}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
- FirewallRules: [TCP Query User{D310A76D-2835-4358-A6FE-8FA566620850}C:\program files (x86)\gigabyte\appcenter\gbupdate.exe] => (Allow) C:\program files (x86)\gigabyte\appcenter\gbupdate.exe
- FirewallRules: [UDP Query User{32CD3436-FB18-41E0-8766-A44251A0EF77}C:\program files (x86)\gigabyte\appcenter\gbupdate.exe] => (Allow) C:\program files (x86)\gigabyte\appcenter\gbupdate.exe
- FirewallRules: [TCP Query User{F269186C-DFB1-48D4-AC93-487EFD000CDE}C:\program files (x86)\gigabyte\@bios\flashbios.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\flashbios.exe
- FirewallRules: [UDP Query User{D02D51B4-E1CC-4CCA-A44D-58368AB48DA2}C:\program files (x86)\gigabyte\@bios\flashbios.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\flashbios.exe
- FirewallRules: [TCP Query User{5B2A7582-932C-4A9E-AF0D-A5D1FE8EBBF8}C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe
- FirewallRules: [UDP Query User{7C153CA2-7090-4D7E-A0B4-DF72F209B6A6}C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe
- FirewallRules: [{DAF495DD-02DD-4430-B3DC-44B3DD2B3A2E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
- FirewallRules: [TCP Query User{A425A59E-F5EA-4A4F-A9C7-D880D004183A}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
- FirewallRules: [UDP Query User{448CD3CB-BFBF-454A-8C8F-E80E9867E504}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
- FirewallRules: [{0FBB73F0-48B2-45D6-8D92-44B03C3A8BB1}] => (Allow) C:\Program Files (x86)\AliWangWang\AliIM.exe
- FirewallRules: [{84916D42-7F81-440B-AAF2-E71D8E282296}] => (Allow) C:\Program Files (x86)\AliWangWang\AliIM.exe
- FirewallRules: [TCP Query User{A22DB0B2-33C2-4F37-8A3B-8761E8307388}C:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe
- FirewallRules: [UDP Query User{B5993628-F336-4CBE-B68D-691D1E408740}C:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe
- FirewallRules: [{3DC917D2-2053-4DC2-934A-AB87686A295D}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
- FirewallRules: [{B19A6174-BCE9-4D1B-967E-A9775D3FB21A}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
- FirewallRules: [{0D5061A7-8D75-4506-93FB-B1EA527F1EE7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
- FirewallRules: [{FA8CD9FF-EC25-4999-8D44-D8EDD28A9315}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
- FirewallRules: [{BCD91A1C-EE3D-4988-9C24-441205143717}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
- FirewallRules: [{8B7EE046-7847-424A-8CA8-98FF6FDCAC9D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
- FirewallRules: [{6C2A8B70-842A-41D0-9C42-FBDF81B4B433}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
- FirewallRules: [{8A2C3D8E-512A-4C40-9859-A2EA809CAC28}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
- FirewallRules: [TCP Query User{12091714-B8BB-4066-A83A-92C96B06B7D2}D:\program files\ellinia v162.4\khaini.exe] => (Allow) D:\program files\ellinia v162.4\khaini.exe
- FirewallRules: [UDP Query User{81C37F2A-D7AA-4FE9-8B97-78A589F46AEE}D:\program files\ellinia v162.4\khaini.exe] => (Allow) D:\program files\ellinia v162.4\khaini.exe
- FirewallRules: [TCP Query User{9529C29A-1A38-4F04-A4A9-CED0EA4FE014}D:\program files\nexon launcher\maplestory\appdata\aries.exe] => (Allow) D:\program files\nexon launcher\maplestory\appdata\aries.exe
- FirewallRules: [UDP Query User{4157EB61-A96C-4B4C-8D3D-30FB23D43088}D:\program files\nexon launcher\maplestory\appdata\aries.exe] => (Allow) D:\program files\nexon launcher\maplestory\appdata\aries.exe
- FirewallRules: [{271EB7FA-39F1-4411-A431-789CC53151D7}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe
- FirewallRules: [{B31E7EE0-1B3A-464A-B7F1-EB65948F8DC4}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe
- FirewallRules: [TCP Query User{9F4492B0-E6C0-408E-A779-634FC6A77D04}D:\program files\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
- FirewallRules: [UDP Query User{23450E6B-F943-4011-A27C-BE05E6A08520}D:\program files\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
- FirewallRules: [{D8069FD8-E739-4843-82C7-AB21BA3D99C4}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Rust\Rust.exe
- FirewallRules: [{CA6B4BA8-75E2-4A64-9A37-E7E58E417BAB}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Rust\Rust.exe
- FirewallRules: [{6884BDDE-6976-41E5-8B8B-43DC3B76CF60}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
- FirewallRules: [{E127C5DC-0B59-47B3-8AE5-984B22053071}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
- FirewallRules: [{CD9BA5C9-F440-4B5A-933C-1D6B553B1E98}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
- FirewallRules: [{F7F5D3DD-1367-4FFE-BDE9-A7C86CBCB6D2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
- FirewallRules: [{E1862240-CA7C-4E08-9653-2E15700E29C4}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Foxhole\War.exe
- FirewallRules: [{85662EA1-2C2E-4DAD-BCEA-485EF51523DB}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Foxhole\War.exe
- FirewallRules: [TCP Query User{419FDE51-F769-4334-8A8D-2031F2FCA4FE}D:\program files\steamlibrary\steamapps\common\foxhole\war\binaries\win64\war-win64-shipping.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\foxhole\war\binaries\win64\war-win64-shipping.exe
- FirewallRules: [UDP Query User{68B5764E-2CBB-4D40-BDF5-2CF1E145D9A9}D:\program files\steamlibrary\steamapps\common\foxhole\war\binaries\win64\war-win64-shipping.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\foxhole\war\binaries\win64\war-win64-shipping.exe
- FirewallRules: [{242CF9ED-D756-4638-8367-E3E2ECF2A4BE}] => (Allow) C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe
- FirewallRules: [{86325F89-5BEB-41D7-893F-CEA218D61F2A}] => (Allow) D:\Program Files\Softether\SoftEther VPN Client\vpnclient.exe
- FirewallRules: [{3550FCDC-3EDD-432A-8948-39A0636C7E41}] => (Allow) D:\Program Files\Softether\SoftEther VPN Client\vpnclient_x64.exe
- FirewallRules: [{1EB558A7-783C-43DA-AF93-3A97995A9C80}] => (Allow) D:\Program Files\Softether\SoftEther VPN Client\vpncmgr.exe
- FirewallRules: [{F92D115C-2FB9-4F90-94D1-671DFC0E2D61}] => (Allow) D:\Program Files\Softether\SoftEther VPN Client\vpncmgr_x64.exe
- FirewallRules: [{EF6AC0B4-2ABD-42F7-87F3-F51DC7C2ADF1}] => (Allow) D:\Program Files\Softether\SoftEther VPN Client\vpncmd.exe
- FirewallRules: [{CD7AB0F7-6BD0-45CD-ABF4-B4A24FC99669}] => (Allow) D:\Program Files\Softether\SoftEther VPN Client\vpncmd_x64.exe
- FirewallRules: [{7CDD9530-BF69-4C92-A689-4DA5FB8EFD75}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
- FirewallRules: [{6FC14BF1-6C5C-4B63-9E02-EC4C0365AAB6}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
- FirewallRules: [{210999E1-216B-4008-8CDD-FA2EE52D7C14}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
- FirewallRules: [{DC4353AD-B217-4148-BDC1-61543EA80D6C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
- FirewallRules: [{A25FE8E5-1FAD-4BB2-AA2A-31BAD0C1C7C3}] => (Allow) D:\Program Files\iTunes\iTunes.exe
- FirewallRules: [{A12D01EB-7E44-4AD7-BE4E-ACEB97A5CAEB}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
- FirewallRules: [TCP Query User{0D1B3561-E39C-451A-A58D-0CA16AE32691}D:\program files\steamlibrary\steamapps\common\dayz\dayz_x64.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\dayz\dayz_x64.exe
- FirewallRules: [UDP Query User{CA672630-2662-406F-83DA-CC8D1D5FC712}D:\program files\steamlibrary\steamapps\common\dayz\dayz_x64.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\dayz\dayz_x64.exe
- FirewallRules: [TCP Query User{FCF0DD55-E42C-4706-A727-44F5CCBFB7E0}D:\program files\steamlibrary\steamapps\common\dayz\dayz.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\dayz\dayz.exe
- FirewallRules: [UDP Query User{055D06D6-B8B2-43E9-8B03-DA134DC3111E}D:\program files\steamlibrary\steamapps\common\dayz\dayz.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\dayz\dayz.exe
- FirewallRules: [{FE84212B-0BD6-449D-B552-DC40FB05B486}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
- FirewallRules: [{CB7286F8-E3ED-4383-B116-F6E22E3DA899}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
- FirewallRules: [{4021E4CB-77F9-460C-8532-31FA56F3BA02}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
- FirewallRules: [{27FF6C00-88B5-4A0E-B4C8-33D4C1BDC52A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
- FirewallRules: [{4463C441-536F-409F-8710-355A52FC47F2}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
- FirewallRules: [{0B968082-FC52-4D5B-81D1-2986E025A0AE}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
- FirewallRules: [{9276669B-70E2-41F2-ADDE-07460FD1C3E6}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- FirewallRules: [TCP Query User{023643E6-A790-4335-96BA-D81BC3FC8BCC}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
- FirewallRules: [UDP Query User{D02DF510-7008-4E47-8A90-AA6633F95B57}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
- FirewallRules: [{DA05CEF9-1D09-49A2-A2D2-240CDE01AD4E}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe
- FirewallRules: [{9F8FFCCD-69EC-4633-8DEF-52DD3B9F3131}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe
- FirewallRules: [{72A324C3-6EC1-48EC-BB77-1E63B3888187}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Arma 3\arma3launcher.exe
- FirewallRules: [{E3DB0436-6D95-4880-9197-DA6A44A4D0AA}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Arma 3\arma3launcher.exe
- FirewallRules: [TCP Query User{92B88E33-9C9A-4F29-B7C2-6EA063099121}D:\program files\steamlibrary\steamapps\common\arma 3\arma3_x64.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\arma 3\arma3_x64.exe
- FirewallRules: [UDP Query User{80CBABC1-FE26-40A1-9404-1E1A9A91D23A}D:\program files\steamlibrary\steamapps\common\arma 3\arma3_x64.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\arma 3\arma3_x64.exe
- FirewallRules: [{9B9BE0BA-05E9-484F-9162-688B33DB7024}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
- FirewallRules: [{C6F5EDDB-699A-4A33-8519-2F2B1E89879A}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmgr_x64.exe
- FirewallRules: [{94C10ECE-CB71-4F27-9DF9-04FE478B68B7}] => (Allow) C:\Program Files\SoftEther VPN Client\vpnclient.exe
- FirewallRules: [{FE98F08A-1326-4FC1-B7D4-DB431AF28A2A}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmgr.exe
- FirewallRules: [{CC0E23A8-EA2F-431B-B80B-2F1E01C4AB90}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmd.exe
- FirewallRules: [{E29A9008-B6FE-4EAD-82E9-17E8B1A0CC38}] => (Allow) C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe
- FirewallRules: [{1CF9757D-DBA6-409F-93F8-37347EC7AB43}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmd_x64.exe
- ==================== Restore Points =========================
- 24-10-2017 20:35:37 Scheduled Checkpoint
- ==================== Faulty Device Manager Devices =============
- ==================== Event log errors: =========================
- Application errors:
- ==================
- Error: (10/25/2017 10:40:39 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
- Description: License Activation (slui.exe) failed with the following error code:
- hr=0x8007232B
- Command-line arguments:
- RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable
- Error: (10/25/2017 07:07:25 PM) (Source: SideBySide) (EventID: 63) (User: )
- Description: Activation context generation failed for "C:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\ManagementStudio\CopyDatabaseWizard.exe".Error in manifest or policy file "C:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\ManagementStudio\CopyDatabaseWizard.exe" on line 8.
- The value "1.0" of attribute "version" in element "assemblyIdentity" is invalid.
- Error: (10/25/2017 07:06:54 PM) (Source: SideBySide) (EventID: 33) (User: )
- Description: Activation context generation failed for "C:\Program Files (x86)\Windows Kits\10\bin\10.0.15063.0\arm\signtool.exe.Manifest".
- Dependent Assembly Microsoft.Windows.Build.Signing.wintrust.dll,version="0.0.0.0" could not be found.
- Please use sxstrace.exe for detailed diagnosis.
- Error: (10/25/2017 07:06:54 PM) (Source: SideBySide) (EventID: 33) (User: )
- Description: Activation context generation failed for "C:\Program Files (x86)\Windows Kits\10\bin\10.0.15063.0\arm64\signtool.exe.Manifest".
- Dependent Assembly Microsoft.Windows.Build.Appx.AppxSip.dll,version="0.0.0.0" could not be found.
- Please use sxstrace.exe for detailed diagnosis.
- Error: (10/25/2017 07:06:34 PM) (Source: SideBySide) (EventID: 35) (User: )
- Description: Activation context generation failed for "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest".Error in manifest or policy file "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL" on line 1.
- Component identity found in manifest does not match the identity of the component requested.
- Reference is UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
- Definition is UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
- Please use sxstrace.exe for detailed diagnosis.
- Error: (10/25/2017 07:04:24 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
- Description: License Activation (slui.exe) failed with the following error code:
- hr=0x8007232B
- Command-line arguments:
- RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=3
- Error: (10/25/2017 07:03:37 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
- Description: License Activation (slui.exe) failed with the following error code:
- hr=0x8007139F
- Command-line arguments:
- RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable
- Error: (10/25/2017 07:03:37 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
- Description: License Activation (slui.exe) failed with the following error code:
- hr=0x8007139F
- Command-line arguments:
- RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable
- Error: (10/25/2017 12:32:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: m->NextScheduledSPRetry 1094
- Error: (10/25/2017 12:32:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: m->NextScheduledEvent 1094
- System errors:
- =============
- Error: (10/25/2017 10:40:30 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
- Description: There was an error while attempting to read the local hosts file.
- Error: (10/25/2017 12:32:30 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
- Description: There was an error while attempting to read the local hosts file.
- Error: (10/25/2017 12:07:48 AM) (Source: DCOM) (EventID: 10010) (User: JUSTIN)
- Description: The server {3FCB7074-EC9E-4AAF-9BE3-C0E356942366} did not register with DCOM within the required timeout.
- Error: (10/24/2017 11:27:31 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
- Description: There was an error while attempting to read the local hosts file.
- Error: (10/24/2017 11:27:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
- Description: The wwbizsrv service failed to start due to the following error:
- The system cannot find the file specified.
- Error: (10/24/2017 11:27:26 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
- Description: There was an error while attempting to read the local hosts file.
- Error: (10/24/2017 11:27:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
- Description: The CldFlt service failed to start due to the following error:
- The request is not supported.
- Error: (10/24/2017 11:26:06 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
- Description: There was an error while attempting to read the local hosts file.
- Error: (10/24/2017 08:31:36 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
- Description: There was an error while attempting to read the local hosts file.
- Error: (10/24/2017 08:40:38 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
- Description: There was an error while attempting to read the local hosts file.
- CodeIntegrity:
- ===================================
- Date: 2017-08-04 15:24:59.609
- Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
- Date: 2017-08-01 17:15:13.398
- Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
- Date: 2017-06-03 14:48:10.342
- Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
- ==================== Memory info ===========================
- Processor: AMD Ryzen 7 1700 Eight-Core Processor
- Percentage of memory in use: 39%
- Total physical RAM: 16335.46 MB
- Available physical RAM: 9918.7 MB
- Total Virtual: 18767.46 MB
- Available Virtual: 11827.95 MB
- ==================== Drives ================================
- Drive c: () (Fixed) (Total:232.33 GB) (Free:53.78 GB) NTFS
- Drive d: (New Volume) (Fixed) (Total:931.39 GB) (Free:805.44 GB) NTFS
- Drive e: () (Removable) (Total:0.05 GB) (Free:0.04 GB) FAT
- Drive f: () (Removable) (Total:0.1 GB) (Free:0.09 GB) FAT
- ==================== MBR & Partition Table ==================
- ========================================================
- Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 00000000)
- Partition: GPT.
- ========================================================
- Disk: 1 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 00000000)
- Partition: GPT.
- ========================================================
- Disk: 2 (Size: 14.4 GB) (Disk ID: 00000000)
- Partition: GPT.
- ==================== End of Addition.txt ============================
Add Comment
Please, Sign In to add comment