Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Additional scan result of Farbar Recovery Scan Tool (x64) Version: 23-10-2017 01
- Ran by justi (24-10-2017 00:50:46)
- Running from D:\Downloads
- Windows 10 Pro Version 1703 15063.674 (X64) (2017-06-03 18:39:43)
- Boot Mode: Normal
- ==========================================================
- ==================== Accounts: =============================
- Administrator (S-1-5-21-3695887035-1542476804-3675477037-500 - Administrator - Disabled)
- DefaultAccount (S-1-5-21-3695887035-1542476804-3675477037-503 - Limited - Disabled)
- Guest (S-1-5-21-3695887035-1542476804-3675477037-501 - Limited - Disabled)
- justi (S-1-5-21-3695887035-1542476804-3675477037-1001 - Administrator - Enabled) => C:\Users\justi
- ==================== Security Center ========================
- (If an entry is included in the fixlist, it will be removed.)
- AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
- AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
- ==================== Installed Programs ======================
- (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
- .NET Core SDK 1.0.4 (x64) (HKLM\...\{11ACCE3C-C179-472C-A8CA-0F467702B2DA}) (Version: 4.1.5012 - Microsoft Corporation) Hidden
- .NET Core SDK 1.0.4 (x64) (HKLM-x32\...\{c56e80af-58a4-490b-a1cd-5718290133b9}) (Version: 1.0.4 - Microsoft Corporation)
- @BIOS B15.0630.1 (HKLM-x32\...\{C9D46F25-5F9D-4E25-B24F-BC00E9EDF529}) (Version: 3.00.0000 - GIGABYTE) Hidden
- @BIOS B15.0630.1 (HKLM-x32\...\InstallShield_{C9D46F25-5F9D-4E25-B24F-BC00E9EDF529}) (Version: 3.00.0000 - GIGABYTE)
- Active Directory Authentication Library for SQL Server (HKLM\...\{32C0D7B2-1046-43AC-98AD-B748E1910916}) (Version: 13.0.1601.5 - Microsoft Corporation) Hidden
- Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.3.0.256 - Adobe Systems Incorporated)
- Adobe Illustrator CC 2017 (HKLM-x32\...\ILST_21_1_0) (Version: 21.1.0 - Adobe Systems Incorporated)
- Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.0 - Adobe Systems Incorporated)
- Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 385.41 - NVIDIA Corporation) Hidden
- Apple Application Support (32-bit) (HKLM-x32\...\{D2FE6376-E549-4F63-A2C5-CA24DA035DE4}) (Version: 5.6 - Apple Inc.)
- Apple Application Support (64-bit) (HKLM\...\{BB109E24-EE90-485B-A28B-ADDEFB40540B}) (Version: 5.6 - Apple Inc.)
- Apple Mobile Device Support (HKLM\...\{0A596141-97D5-45FA-9281-98DFAF48D579}) (Version: 10.3.2.3 - Apple Inc.)
- Apple Software Update (HKLM-x32\...\{52D87F32-70E4-4348-8148-C0B9F35B1314}) (Version: 2.3.0.177 - Apple Inc.)
- Application Verifier x64 External Package (HKLM\...\{01C2C51F-B0CF-BB5E-A010-E927D44F7720}) (Version: 10.1.15063.137 - Microsoft) Hidden
- Blizzard App (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
- Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
- ClickOnce Bootstrapper Package for Microsoft .NET Framework (HKLM-x32\...\{E598B692-764A-413C-8530-59163D6B4AE3}) (Version: 4.6.01590 - Microsoft Corporation) Hidden
- CPUID HWMonitor 1.31 (HKLM\...\CPUID HWMonitor_is1) (Version: - )
- DiagnosticsHub_CollectionService (HKLM\...\{90A561D7-0C29-464D-94E1-2A7E1C553230}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- Discord (HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\...\Discord) (Version: 0.0.298 - Discord Inc.)
- Electrum (HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\...\Electrum) (Version: 2.8.3 - Electrum Technologies GmbH)
- Entity Framework 6.1.3 Tools for Visual Studio 15 (HKLM-x32\...\{F8C0447E-D45C-4E52-94E8-C6340AAC9DB8}) (Version: 6.1.60104.0 - Microsoft Corporation) Hidden
- f.lux (HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\...\Flux) (Version: - f.lux Software LLC)
- FileZilla Client 3.27.0.1 (HKLM-x32\...\FileZilla Client) (Version: 3.27.0.1 - Tim Kosse)
- Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.)
- Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
- icecap_collection_neutral (HKLM-x32\...\{64F3E6FC-68E3-4062-9C2C-ABD93FDFF309}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- icecap_collection_x64 (HKLM\...\{0AD162D1-4973-4315-97E9-5DE9A92B4049}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- icecap_collectionresources (HKLM-x32\...\{12C50688-5919-4A7A-8784-B26A7238FCEE}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- icecap_collectionresourcesx64 (HKLM-x32\...\{400E7885-8851-43F1-849C-5A720CB4F001}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- IIS 10.0 Express (HKLM\...\{0148E8AA-4A50-4673-B532-DB9F30F804BE}) (Version: 10.0.1737 - Microsoft Corporation)
- IIS Express Application Compatibility Database for x64 (HKLM\...\{08274920-8908-45c2-9258-8ad67ff77b09}.sdb) (Version: - ) Hidden
- IIS Express Application Compatibility Database for x86 (HKLM\...\{ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb) (Version: - ) Hidden
- Intellisense Lang Pack Mobile Extension SDK 10.0.15063.0 (HKLM-x32\...\{A0007ADE-F6F6-410F-822F-7522B4F0BFDE}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- IntelliTraceProfilerProxy (HKLM-x32\...\{51783942-DFB0-4452-97CC-BDF2D4AB3A48}) (Version: 15.0.24.0 - Microsoft Corporation) Hidden
- iTunes (HKLM\...\{02F95875-9527-49CC-B32F-970ADAEBD1EF}) (Version: 12.6.2.20 - Apple Inc.)
- Java 8 Update 144 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180144F0}) (Version: 8.0.1440.1 - Oracle Corporation)
- join.me (HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\...\JoinMe) (Version: 3.3.0.5340 - LogMeIn, Inc.)
- Kits Configuration Installer (HKLM-x32\...\{0C05DE52-2C77-D6FA-A561-D508CF5FC96E}) (Version: 10.1.15063.137 - Microsoft) Hidden
- MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
- Microsoft Azure Authoring Tools - v2.9.5.3 (HKLM\...\{086C537B-DE1A-4A11-8441-6AAF076174B8}) (Version: 2.9.8699.20 - Microsoft Corporation)
- Microsoft Azure Compute Emulator - v2.9.5.3 (HKLM\...\Microsoft Azure Compute Emulator - v2.9.5.3) (Version: 2.9.8699.20 - Microsoft Corporation)
- Microsoft Azure Libraries for .NET – v2.9 (HKLM\...\{C5C91AA6-3E83-430E-8B7A-6B790083F28D}) (Version: 3.0.0127.060 - Microsoft Corporation)
- Microsoft Azure Mobile App SDK V2.0 (HKLM-x32\...\{829D812B-3F25-4E8B-B1DF-1AD09164684C}) (Version: 2.0.50130.0 - Microsoft Corporation)
- Microsoft Azure PowerShell - September 2016 (HKLM-x32\...\{CB3F8A12-1570-4964-8206-17274AB9EF4D}) (Version: 2.1.0 - Microsoft Corporation)
- Microsoft Azure Storage Emulator - v5.1 (HKLM-x32\...\Microsoft Azure Storage Emulator - v5.1) (Version: 5.1.1760.1722 - Microsoft Corporation)
- Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)
- Microsoft ODBC Driver 11 for SQL Server (HKLM\...\{BF5ABBDB-D3AA-4BCB-8D10-FCD4A4BB7F93}) (Version: 12.1.4100.1 - Microsoft Corporation)
- Microsoft Office Professional Plus 2016 - en-us (HKLM\...\ProPlusRetail - en-us) (Version: 16.0.8528.2139 - Microsoft Corporation)
- Microsoft Report Viewer 2014 Runtime (HKLM-x32\...\{327E9C0D-1687-414F-923E-F5979E549548}) (Version: 12.0.2000.8 - Microsoft Corporation)
- Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{83F2B8F4-5CF3-4BE9-9772-9543EAE4AC5F}) (Version: 10.51.2500.0 - Microsoft Corporation)
- Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{6292D514-17A4-403F-98F9-E150F10C043D}) (Version: 10.3.5500.0 - Microsoft Corporation)
- Microsoft SQL Server 2012 Native Client (HKLM\...\{1385D3DB-8E80-427B-91D2-B7535862B8E4}) (Version: 11.3.6518.0 - Microsoft Corporation)
- Microsoft SQL Server 2014 (64-bit) (HKLM\...\Microsoft SQL Server SQLServer2014) (Version: - Microsoft Corporation)
- Microsoft SQL Server 2014 Policies (HKLM-x32\...\{1C30FE7E-8A8C-4492-89D6-10CB20C3B0EB}) (Version: 12.0.2000.8 - Microsoft Corporation)
- Microsoft SQL Server 2014 Setup (English) (HKLM\...\{C7E2483C-10A4-41E3-A2F6-240186FE3E41}) (Version: 12.1.4100.1 - Microsoft Corporation)
- Microsoft SQL Server 2014 Transact-SQL Compiler Service (HKLM\...\{1A73AF5D-69EE-4AE0-917C-2429CE593A86}) (Version: 12.1.4100.1 - Microsoft Corporation)
- Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\...\{FF7DDA05-6EA7-4C01-B44A-3E57F8B9B97B}) (Version: 12.1.4100.1 - Microsoft Corporation)
- Microsoft SQL Server 2016 LocalDB (HKLM\...\{E359515A-92E6-4FA3-A2C9-E1BA02D8DE6E}) (Version: 13.0.1601.5 - Microsoft Corporation)
- Microsoft SQL Server System CLR Types (HKLM-x32\...\{C3F6F200-6D7B-4879-B9EE-700C0CE1FCDA}) (Version: 10.51.2500.0 - Microsoft Corporation)
- Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{E3F613C1-105F-4717-BFE7-007729A95D67}) (Version: 12.1.4100.1 - Microsoft Corporation)
- Microsoft System CLR Types for SQL Server 2016 (HKLM\...\{96EB5054-C775-4BEF-B7B9-AA96A295EDCD}) (Version: 13.0.1601.5 - Microsoft Corporation)
- Microsoft System CLR Types for SQL Server 2016 (HKLM-x32\...\{84C23ECA-FE4D-494F-9247-3EBAD57E7F0C}) (Version: 13.0.1601.5 - Microsoft Corporation)
- Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
- Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
- Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
- Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
- Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
- Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
- Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
- Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
- Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)
- Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
- Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
- Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
- Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
- Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f1e7e313-06df-4c56-96a9-99fdfd149c51}) (Version: 14.10.25008.0 - Microsoft Corporation)
- Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)
- Microsoft Visual Studio 2010 Shell (Isolated) - ENU (HKLM-x32\...\{D64B6984-242F-32BC-B008-752806E5FC44}) (Version: 10.0.40219 - Microsoft Corporation)
- Microsoft Visual Studio 2017 (HKLM-x32\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 1.10.30640.0 - Microsoft Corporation)
- Microsoft Web Deploy 3.6 (HKLM\...\{5CB4DD27-6252-4C08-BFCF-22F6A110CBFA}) (Version: 10.0.1972 - Microsoft Corporation)
- Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
- Nexon Launcher (HKLM-x32\...\Nexon Nexon Launcher) (Version: 2.0.0 - Nexon)
- NVIDIA 3D Vision Controller Driver 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
- NVIDIA 3D Vision Driver 385.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 385.41 - NVIDIA Corporation)
- NVIDIA GeForce Experience 3.10.0.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.10.0.95 - NVIDIA Corporation)
- NVIDIA Graphics Driver 385.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 385.41 - NVIDIA Corporation)
- NVIDIA HD Audio Driver 1.3.34.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.27 - NVIDIA Corporation)
- NVIDIA PhysX System Software 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
- OBS Studio (HKLM-x32\...\OBS Studio) (Version: 20.0.1 - OBS Project)
- Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8528.2139 - Microsoft Corporation) Hidden
- Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8528.2139 - Microsoft Corporation) Hidden
- Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8528.2139 - Microsoft Corporation) Hidden
- Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden
- Python 2.7.13 (HKLM-x32\...\{4A656C6C-D24A-473F-9747-3A8D00907A03}) (Version: 2.7.13150 - Python Software Foundation)
- Python 3.6.0 (64-bit) (HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\...\{37a4e38b-baf7-4500-97f1-0f7c51d9a395}) (Version: 3.6.150.0 - Python Software Foundation)
- Python 3.6.0 Core Interpreter (64-bit symbols) (HKLM\...\{DFAA81ED-540F-47B5-9113-814CC427CFD8}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Core Interpreter (64-bit) (HKLM\...\{1944B5D6-0FFB-47C0-BFEC-5C7A2F013FA7}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Development Libraries (64-bit) (HKLM\...\{A6A3184B-748E-46F4-9E28-6B5889506170}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Documentation (64-bit) (HKLM\...\{5D83032F-36B5-42E4-A114-D310119C6F51}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Executables (64-bit symbols) (HKLM\...\{4A928E09-6798-46AB-A4F7-1B52CD164B3B}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Executables (64-bit) (HKLM\...\{C0016766-8F63-4992-9E6F-ECFB2CB12BA6}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 pip Bootstrap (64-bit) (HKLM\...\{F9C1C892-4908-41F4-900C-7B0DAAF2387B}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Standard Library (64-bit symbols) (HKLM\...\{90676013-5216-48EE-AC8D-07AC0C16DA50}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Standard Library (64-bit) (HKLM\...\{F3CB2257-C4C7-4C84-AF63-BADCED1E3273}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Tcl/Tk Support (64-bit symbols) (HKLM\...\{96C2F083-44B8-4388-B2A5-F48B75A25188}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Tcl/Tk Support (64-bit) (HKLM\...\{E24AA157-AD52-42ED-B484-CA5979D4A728}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Test Suite (64-bit symbols) (HKLM\...\{CFF9C3A7-86C3-410B-9DD1-F1617767D2D6}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Test Suite (64-bit) (HKLM\...\{631C7E77-5832-40D1-9D6D-7B3766D79BDF}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python 3.6.0 Utility Scripts (64-bit) (HKLM\...\{FE905DA4-0F23-4F99-9284-50BB4913CEB4}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
- Python Launcher (HKLM-x32\...\{A674B2CB-13CA-437B-A215-9DD257959A49}) (Version: 3.6.5835.0 - Python Software Foundation)
- qBittorrent 3.3.13 (HKLM-x32\...\qBittorrent) (Version: 3.3.13 - The qBittorrent project)
- Service Pack 1 for SQL Server 2014 (KB3058865) (64-bit) (HKLM\...\KB3058865) (Version: 12.1.4100.1 - Microsoft Corporation)
- ShareX (HKLM\...\82E6AC09-0FEF-4390-AD9F-0DD3F5561EFC_is1) (Version: 11.9.1 - ShareX Team)
- Sid Meier's Civilization 5 (HKLM-x32\...\Sid Meier's Civilization 5_R.G. Mechanics_is1) (Version: - R.G. Mechanics, Panky)
- Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.103 - Skype Technologies S.A.)
- SoftEther VPN Client (HKLM\...\softether_sevpnclient) (Version: 4.23.9647 - SoftEther VPN Project)
- SQL Server 2014 Client Tools (HKLM\...\{2BA1811B-44C0-4C50-8C5A-CE68AB25ED71}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden
- SQL Server 2014 Client Tools (HKLM\...\{B5ECFA5C-AC4F-45A4-A12E-A76ABDD9CCBA}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden
- SQL Server 2014 Common Files (HKLM\...\{BD1CD96B-FE4B-4EAE-83D4-6EF55AB5779C}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden
- SQL Server 2014 Common Files (HKLM\...\{F7012F84-80F5-4C25-852E-B1BA03276FE6}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden
- SQL Server 2014 Management Studio (HKLM\...\{75A54138-3B98-4705-92E4-F619825B121F}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden
- SQL Server 2014 Management Studio (HKLM\...\{839EF29A-3055-43DC-ADCE-8E84893798D5}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden
- Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
- Sublime Text Build 3126 (HKLM\...\Sublime Text 3_is1) (Version: - Sublime HQ Pty Ltd)
- TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.1.6 - TeamSpeak Systems GmbH)
- TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.83369 - TeamViewer)
- TypeScript Power Tool (HKLM-x32\...\{F0B4CA92-9642-4BE6-8449-A786AD4FA628}) (Version: 2.2.3.0 - Microsoft Corporation) Hidden
- Universal CRT Extension SDK (HKLM-x32\...\{ADD45F52-630A-4F45-8879-A8DB80DF921B}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- Universal CRT Headers Libraries and Sources (HKLM-x32\...\{919D63C5-565C-F1C3-67D9-353FE902EF11}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- Universal CRT Redistributable (HKLM-x32\...\{0AAB833E-034D-430B-D3E4-39C5753B14AC}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- Universal CRT Tools x64 (HKLM\...\{D29934EC-24B6-0F5D-C6BB-E9ECCF220C12}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- Universal CRT Tools x86 (HKLM-x32\...\{2410D879-0C8F-B254-C207-455E119075B6}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- Universal General MIDI DLS Extension SDK (HKLM-x32\...\{485209AE-37CE-2208-59CB-7BB59AA85BE7}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
- vcpp_crt.redist.clickonce (HKLM-x32\...\{93FDC294-0726-48EA-989D-50E89C67ABF0}) (Version: 14.10.25008 - Microsoft Corporation) Hidden
- Visual Studio 2010 Prerequisites - English (HKLM\...\{662014D2-0450-37ED-ABAE-157C88127BEB}) (Version: 10.0.40219 - Microsoft Corporation)
- VS Immersive Activate Helper (HKLM-x32\...\{D8A4EA2B-1A97-45A5-BF96-7493183F8524}) (Version: 16.0.59.0 - Microsoft Corporation) Hidden
- VS Script Debugging Common (HKLM\...\{3B64C68E-14E0-4214-A53D-502E9FBD32E7}) (Version: 16.0.59.0 - Microsoft Corporation) Hidden
- VS WCF Debugging (HKLM\...\{9E1EF6F7-ED70-4BD8-A1AE-83C5DEF0DA91}) (Version: 16.0.59.0 - Microsoft Corporation) Hidden
- vs_BlendMsi (HKLM-x32\...\{1070C8E8-4DFB-419F-984A-5C835828897E}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- vs_clickoncebootstrappermsi (HKLM-x32\...\{B9F4AA09-F4AC-4108-ADA0-27CDD45FCEC3}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- vs_clickoncebootstrappermsires (HKLM-x32\...\{AEF5E0F2-31D1-454A-A992-C523C0007B4D}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- vs_clickoncesigntoolmsi (HKLM-x32\...\{DE8B48BF-82B9-434A-B254-1EA2306E5FBA}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- vs_communitymsi (HKLM-x32\...\{A041943F-C97B-48F6-8F23-C5078F99BB3A}) (Version: 15.0.26323 - Microsoft Corporation) Hidden
- vs_communitymsires (HKLM-x32\...\{1210EE60-E253-407D-B537-D36898049CF0}) (Version: 15.0.26228 - Microsoft Corporation) Hidden
- vs_devenvmsi (HKLM-x32\...\{581E5656-26E2-4A02-9711-48C8E4998310}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- vs_filehandler_amd64 (HKLM-x32\...\{15D591B0-7B40-4957-B6C0-EB7452B5AAB6}) (Version: 15.0.26228 - Microsoft Corporation) Hidden
- vs_filehandler_x86 (HKLM-x32\...\{DC296244-0701-4EDE-9696-05B9C1D017B3}) (Version: 15.0.26228 - Microsoft Corporation) Hidden
- vs_FileTracker_Singleton (HKLM-x32\...\{11230C85-1813-4BC3-9C24-E0B74B59653E}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- vs_Graphics_Singletonx64 (HKLM\...\{F3217611-B414-4A3A-81BF-6A3A4DB7E743}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- vs_Graphics_Singletonx86 (HKLM-x32\...\{D4DCEC6A-BC59-43D5-866A-AB057E64F73F}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- vs_minshellinteropmsi (HKLM-x32\...\{9477F337-FD16-4ACA-8217-E2D7A0F92603}) (Version: 15.0.26301 - Microsoft Corporation) Hidden
- vs_minshellmsi (HKLM-x32\...\{497A5ACE-DA03-4412-A110-910B2C450720}) (Version: 15.0.26424 - Microsoft Corporation) Hidden
- vs_minshellmsires (HKLM-x32\...\{A8B77523-13AB-46B9-B54F-5483E09668F9}) (Version: 15.0.26228 - Microsoft Corporation) Hidden
- vs_SQLClickOnceBootstrappermsi (HKLM-x32\...\{D396CF10-5F2B-417D-9571-0B669B99440E}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- vs_tipsmsi (HKLM-x32\...\{A32A9CF6-E7AA-48B8-A3D3-50C157E69F53}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
- Vulkan Run Time Libraries 1.0.51.0 (HKLM\...\VulkanRT1.0.51.0) (Version: 1.0.51.0 - LunarG, Inc.)
- WinAppDeploy (HKLM-x32\...\{80859F5A-D13C-AB8E-4659-B630CFE2599D}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- Windows SDK AddOn (HKLM-x32\...\{30DCCFB4-068F-4C5C-BC10-5ECDCAEE55D4}) (Version: 10.1.0.0 - Microsoft Corporation)
- Windows Software Development Kit - Windows 10.0.15063.137 (HKLM-x32\...\{a07b4a01-ca27-4e28-9353-f325a308f128}) (Version: 10.1.15063.137 - Microsoft Corporation)
- WinRAR 5.50 beta 3 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.3 - win.rar GmbH)
- WinRT Intellisense Desktop - en-us (HKLM-x32\...\{45B6202F-A716-C68A-199E-43B106B56A7E}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{357D0CD4-8B72-8D65-7015-81DFB2BF9150}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- WinRT Intellisense IoT - en-us (HKLM-x32\...\{3E5375A1-0E4C-34E3-6294-C1C8BDA823E4}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{E2F78B92-04DE-5350-14C0-7C281BF87D9E}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- WinRT Intellisense PPI - en-us (HKLM-x32\...\{6CE744AE-7E0F-00AF-F1BD-077D9AFCBEC6}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{81A0EC8C-9462-BC98-0E5C-301DD7A46792}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- WinRT Intellisense UAP - en-us (HKLM-x32\...\{FAD08838-3937-0F6C-8787-FDFDFBF63502}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{D089A695-49F0-D3B2-0EBF-2BBC33A05CD6}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
- ==================== Custom CLSID (Whitelisted): ==========================
- (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
- CustomCLSID: HKU\S-1-5-21-3695887035-1542476804-3675477037-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-17AD6CE4A66E}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => No File
- CustomCLSID: HKU\S-1-5-21-3695887035-1542476804-3675477037-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\justi\AppData\Local\Microsoft\OneDrive\17.3.6816.0313\amd64\FileSyncShell64.dll => No File
- CustomCLSID: HKU\S-1-5-21-3695887035-1542476804-3675477037-1001_Classes\CLSID\{5D09DD40-CDC4-4C56-B615-0D1E3B357C2B}\InprocServer32 -> C:\Program Files (x86)\AliWangWang\9.07.03C\AliIMX_64.dll => No File
- CustomCLSID: HKU\S-1-5-21-3695887035-1542476804-3675477037-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\justi\AppData\Local\Microsoft\OneDrive\17.3.6816.0313\amd64\FileSyncShell64.dll => No File
- CustomCLSID: HKU\S-1-5-21-3695887035-1542476804-3675477037-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\justi\AppData\Local\Microsoft\OneDrive\17.3.6816.0313\amd64\FileSyncShell64.dll => No File
- CustomCLSID: HKU\S-1-5-21-3695887035-1542476804-3675477037-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
- ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
- ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
- ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
- ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
- ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
- ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
- ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
- ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
- ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
- ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
- ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
- ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Users\justi\rarext.dll [2017-05-31] (Alexander Roshal)
- ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Users\justi\rarext32.dll [2017-05-31] (Alexander Roshal)
- ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
- ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
- ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
- ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2017-08-22] (NVIDIA Corporation)
- ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
- ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Users\justi\rarext.dll [2017-05-31] (Alexander Roshal)
- ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Users\justi\rarext32.dll [2017-05-31] (Alexander Roshal)
- ==================== Scheduled Tasks (Whitelisted) =============
- (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
- Task: {040F2B12-179F-4E0F-9C47-7E4A7D0280F8} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-10-11] (NVIDIA Corporation)
- Task: {0EA8CDEA-1E69-4D87-853B-F3B8156ECAE0} - System32\Tasks\Microsoft\VisualStudio\VSIX Auto Update 15.0.26430.15 => D:\Program Files\Visual Studio\Common7\IDE\VSIXAutoUpdate.exe [2017-07-09] (Microsoft Corporation)
- Task: {0FDD5BCD-006C-4840-80F1-CE5C532EEF77} - System32\Tasks\AliUpdater{13F48D5A-AF3B-4953-A887-77E2E479AF4D} => C:\Program Files (x86)\AliWangWang\AliTask.exe
- Task: {11061F0F-F8F1-4396-B603-244361431314} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-10-12] (Microsoft Corporation)
- Task: {1E862D15-8166-44D8-AC1F-102FD665F883} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-06-03] (Google Inc.)
- Task: {2F07F46D-A341-4DDA-BC09-5C7AD6F1E987} - System32\Tasks\AutoPico Daily Restart => C:\Users\justi\Desktop\KMSpico [Argument = 10.1.8 FINAL + Portable (Office and Windows 10 Activator) [TechTools.net]\Portable\AutoPico.exe /silent]
- Task: {311188D4-AB94-4568-9708-6D7B9F085D70} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-28] ()
- Task: {381E14CD-F838-463B-8824-70764994F8B6} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-10-11] (NVIDIA Corporation)
- Task: {3E96EF0E-F426-40DF-843E-063B61243C6D} - System32\Tasks\KMSAutoNet => C:\ProgramData\KMSAutoS\KMSAuto Net.exe [2015-08-10] (MSFree Inc.)
- Task: {47E8AF72-37D2-4F19-8798-A9136D6FA48B} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-10-11] (NVIDIA Corporation)
- Task: {53F94377-0DDE-4163-9D16-7D4AC71DD8A4} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-10-11] (NVIDIA Corporation)
- Task: {566AD73E-F634-4226-BCE7-E5D19E4924D5} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-28] ()
- Task: {5D71A98E-0E26-4CB5-8CEA-69D5C40F17B7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-10-21] (Microsoft Corporation)
- Task: {68011F2D-E67B-4641-A5E6-AF026F8BDCBC} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-10-11] (NVIDIA Corporation)
- Task: {85F00F4E-B244-468A-9974-4C72DE1E20CF} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-10-21] (Microsoft Corporation)
- Task: {A48F9558-DD43-47A9-8CBC-7CFAF30118B8} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-10-12] (Microsoft Corporation)
- Task: {A5710A68-BAA6-4613-9FF8-45AC1764561B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-06-03] (Google Inc.)
- Task: {B2694EBD-8289-4C00-8D93-181BCA3EEA5F} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-10-11] (NVIDIA Corporation)
- Task: {CBD94D9A-D8E0-413B-9956-F4BAABE781AD} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-10-11] (NVIDIA Corporation)
- Task: {D46BBE71-A246-4449-97DD-304F90800F6E} - System32\Tasks\[email protected] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated)
- Task: {DFFCCB4D-AF15-4F0E-A63E-9B2A7E861A4B} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-10-11] (NVIDIA Corporation)
- (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
- Task: C:\Windows\Tasks\AliUpdater{13F48D5A-AF3B-4953-A887-77E2E479AF4D}.job => C:\Program Files (x86)\AliWangWang\AliTask.exe
- ==================== Shortcuts & WMI ========================
- (The entries could be listed to be restored or removed.)
- ==================== Loaded Modules (Whitelisted) ==============
- 2017-07-13 20:50 - 2017-07-13 20:50 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
- 2017-07-13 20:50 - 2017-07-13 20:50 - 001354040 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
- 2017-06-03 12:07 - 2017-10-11 09:05 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
- 2017-06-03 11:44 - 2017-08-22 07:10 - 000133752 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
- 2017-03-19 04:58 - 2017-03-19 04:58 - 000138000 _____ () C:\Windows\SYSTEM32\inputhost.dll
- 2017-06-08 04:09 - 2017-06-08 04:09 - 000598528 _____ () C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll
- 2017-09-26 02:52 - 2017-09-26 02:52 - 000491600 _____ () C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll
- 2017-06-05 14:32 - 2017-10-21 18:11 - 008929464 _____ () C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\1033\GrooveIntlResource.dll
- 2017-07-20 00:18 - 2017-07-20 00:18 - 000076456 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll
- 2017-03-19 04:59 - 2017-03-19 10:30 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
- 2017-09-26 15:16 - 2017-09-21 15:29 - 004022616 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libglesv2.dll
- 2017-09-26 15:16 - 2017-09-21 15:29 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libegl.dll
- 2017-08-24 13:12 - 2017-08-24 13:13 - 000074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe
- 2017-08-24 13:12 - 2017-08-24 13:13 - 000203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
- 2017-08-24 13:12 - 2017-08-24 13:13 - 036162048 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkyWrap.dll
- 2017-08-24 13:12 - 2017-08-24 13:13 - 002237952 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\skypert.dll
- 2017-09-26 02:52 - 2017-09-26 02:52 - 034879568 _____ () C:\Program Files (x86)\Adobe\Adobe Sync\Coresync\Coresync.exe
- 2015-05-29 02:32 - 2015-05-29 02:32 - 053302472 _____ () C:\Program Files\Adobe\Adobe Photoshop CC 2015\Required\Plug-Ins\Spaces\libcef.dll
- 2015-05-29 02:29 - 2015-05-29 02:29 - 004062408 _____ () C:\Program Files\Adobe\Adobe Photoshop CC 2015\aif.dll
- 2017-06-03 12:07 - 2017-10-11 09:05 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
- 2017-06-03 12:01 - 2017-09-10 03:25 - 000688416 _____ () C:\Program Files (x86)\Steam\SDL2.dll
- 2017-06-03 12:01 - 2017-10-18 05:24 - 002546976 _____ () C:\Program Files (x86)\Steam\video.dll
- 2017-06-03 12:01 - 2016-09-01 09:02 - 004969248 _____ () C:\Program Files (x86)\Steam\v8.dll
- 2017-06-03 12:01 - 2016-01-27 15:49 - 000491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
- 2017-06-03 12:01 - 2016-01-27 15:49 - 000332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
- 2017-06-03 12:01 - 2016-01-27 15:49 - 000442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
- 2017-06-03 12:01 - 2016-01-27 15:49 - 002549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
- 2017-06-03 12:01 - 2016-01-27 15:49 - 000485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
- 2017-06-03 12:01 - 2016-09-01 09:02 - 001195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
- 2017-06-03 12:01 - 2016-09-01 09:02 - 001563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
- 2017-06-03 12:01 - 2017-10-18 05:24 - 000901408 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
- 2017-06-03 12:01 - 2016-07-05 06:17 - 000266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
- 2017-06-09 20:04 - 2017-09-07 10:04 - 000678400 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\SDL2.dll
- 2017-06-03 12:02 - 2017-08-17 06:28 - 073130272 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
- 2017-06-03 12:01 - 2015-09-25 07:52 - 000119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
- 2017-08-09 14:48 - 2017-08-08 15:13 - 001893880 _____ () C:\Users\justi\AppData\Local\Discord\app-0.0.298\ffmpeg.dll
- 2017-08-09 14:48 - 2017-08-09 14:48 - 001577976 _____ () \\?\C:\Users\justi\AppData\Roaming\discord\0.0.298\modules\discord_toaster\discord_toaster.node
- 2017-08-09 14:48 - 2017-08-08 15:13 - 001938424 _____ () C:\Users\justi\AppData\Local\Discord\app-0.0.298\libglesv2.dll
- 2017-08-09 14:48 - 2017-08-08 15:13 - 000095736 _____ () C:\Users\justi\AppData\Local\Discord\app-0.0.298\libegl.dll
- 2017-08-17 16:51 - 2017-08-17 16:51 - 001993184 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll
- 2017-08-09 14:48 - 2017-10-08 21:24 - 009722360 _____ () \\?\C:\Users\justi\AppData\Roaming\discord\0.0.298\modules\discord_voice\discord_voice.node
- 2017-08-09 14:48 - 2017-08-09 14:48 - 001440248 _____ () \\?\C:\Users\justi\AppData\Roaming\discord\0.0.298\modules\discord_utils\discord_utils.node
- 2017-10-24 00:34 - 2017-10-24 00:34 - 000148992 _____ () \\?\C:\Users\justi\AppData\Local\Temp\8E.tmp.node
- 2017-08-09 14:48 - 2017-08-09 14:48 - 002658296 _____ () \\?\C:\Users\justi\AppData\Roaming\discord\0.0.298\modules\discord_rpc\discord_rpc.node
- 2017-08-09 14:48 - 2017-08-09 14:48 - 002673656 _____ () \\?\C:\Users\justi\AppData\Roaming\discord\0.0.298\modules\discord_contact_import\discord_contact_import.node
- 2017-09-20 02:42 - 2017-09-20 02:42 - 067115616 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\libcef.dll
- 2016-04-13 16:38 - 2016-04-13 16:38 - 000482304 _____ () C:\Users\justi\AppData\Local\MEGAsync\libsodium.dll
- 2017-07-20 00:18 - 2017-07-20 00:18 - 000073384 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll
- 2017-09-06 18:11 - 2017-09-06 18:11 - 000118272 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\fs-ext\build\Release\fs-ext.node
- 2017-09-06 18:11 - 2017-09-06 18:11 - 000214528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
- 2017-09-06 18:11 - 2017-09-06 18:11 - 000117248 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ref\build\Release\binding.node
- 2017-09-06 18:11 - 2017-09-06 18:11 - 000125952 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ffi\build\Release\ffi_bindings.node
- 2017-09-20 03:04 - 2017-09-20 03:04 - 000099424 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin.dll
- 2017-09-06 18:11 - 2017-09-06 18:11 - 000086528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\idle-gc\build\Release\idle-gc.node
- 2017-09-12 20:11 - 2017-09-12 20:11 - 000118272 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\fs-ext\build\Release\fs-ext.node
- 2017-09-12 20:10 - 2017-09-12 20:10 - 000117760 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ref\build\Release\binding.node
- 2017-09-12 20:11 - 2017-09-12 20:11 - 000125440 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ffi\build\Release\ffi_bindings.node
- 2017-09-12 20:11 - 2017-09-12 20:11 - 000214528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
- 2017-09-20 02:59 - 2017-09-20 02:59 - 000099424 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin.dll
- 2017-09-12 20:11 - 2017-09-12 20:11 - 000098816 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\bufferutil\build\Release\bufferutil.node
- 2017-09-12 20:11 - 2017-09-12 20:11 - 000086528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\idle-gc\build\Release\idle-gc.node
- 2017-06-03 12:07 - 2017-10-11 09:05 - 070805952 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
- 2015-05-29 02:32 - 2015-05-29 02:32 - 036732616 _____ () C:\Program Files\Adobe\Adobe Photoshop CC 2015\Required\CEP\CEPHtmlEngine\libcef.dll
- 2015-05-29 02:32 - 2015-05-29 02:32 - 001746632 _____ () C:\Program Files\Adobe\Adobe Photoshop CC 2015\Required\CEP\CEPHtmlEngine\ffmpegsumo.dll
- ==================== Alternate Data Streams (Whitelisted) =========
- (If an entry is included in the fixlist, only the ADS will be removed.)
- ==================== Safe Mode (Whitelisted) ===================
- (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
- ==================== Association (Whitelisted) ===============
- (If an entry is included in the fixlist, the registry item will be restored to default or removed.)
- ==================== Internet Explorer trusted/restricted ===============
- (If an entry is included in the fixlist, it will be removed from the registry.)
- ==================== Other Areas ============================
- (Currently there is no automatic fix for this section.)
- HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\Control Panel\Desktop\\Wallpaper -> d:\downloads\rdq6bea.jpg
- DNS Servers: 8.8.8.8 - 8.8.4.4
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
- Windows Firewall is enabled.
- ==================== MSCONFIG/TASK MANAGER disabled items ==
- HKLM\...\StartupApproved\StartupFolder: => "SoftEther VPN Client Manager Startup.lnk"
- HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
- HKLM\...\StartupApproved\Run: => "iTunesHelper"
- HKLM\...\StartupApproved\Run: => "SoftEther VPN Client UI Helper"
- HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\...\StartupApproved\Run: => "BingSvc"
- HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\...\StartupApproved\Run: => "OneDrive"
- ==================== FirewallRules (Whitelisted) ===============
- (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
- FirewallRules: [{E017E938-01E4-49E4-AFF4-FD70D80C3789}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
- FirewallRules: [{6840A587-3DDE-4052-B519-31A535147400}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
- FirewallRules: [{7CD4F6B6-9F31-453B-82EB-AA54433861DE}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
- FirewallRules: [{A0B293A1-47AF-40A5-8A06-470A57AB81A2}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
- FirewallRules: [{2A770DB2-8308-4BAF-BD65-6609065A4114}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
- FirewallRules: [{237E8D31-2673-4674-9DE7-78825480C98F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
- FirewallRules: [{C46C6552-CC73-449D-95AF-DF11BC6E33F3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
- FirewallRules: [{7F742643-C870-4B25-9149-7CDFD7A208E4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
- FirewallRules: [{FD73B0C9-F050-49E3-9080-ED8E8AAB00C4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
- FirewallRules: [{691634CB-37F2-46C3-B178-4AEB692A69FB}] => (Allow) D:\Program Files\qBittorrent\qbittorrent.exe
- FirewallRules: [{89CDC718-44E7-4925-AC7B-15BEEE06CDBF}] => (Allow) D:\Program Files\qBittorrent\qbittorrent.exe
- FirewallRules: [TCP Query User{5F316F28-4219-4230-8250-15175B236DF6}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
- FirewallRules: [UDP Query User{FE05C098-B032-4445-BB48-BB99CF50517B}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
- FirewallRules: [TCP Query User{D310A76D-2835-4358-A6FE-8FA566620850}C:\program files (x86)\gigabyte\appcenter\gbupdate.exe] => (Allow) C:\program files (x86)\gigabyte\appcenter\gbupdate.exe
- FirewallRules: [UDP Query User{32CD3436-FB18-41E0-8766-A44251A0EF77}C:\program files (x86)\gigabyte\appcenter\gbupdate.exe] => (Allow) C:\program files (x86)\gigabyte\appcenter\gbupdate.exe
- FirewallRules: [TCP Query User{F269186C-DFB1-48D4-AC93-487EFD000CDE}C:\program files (x86)\gigabyte\@bios\flashbios.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\flashbios.exe
- FirewallRules: [UDP Query User{D02D51B4-E1CC-4CCA-A44D-58368AB48DA2}C:\program files (x86)\gigabyte\@bios\flashbios.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\flashbios.exe
- FirewallRules: [TCP Query User{5B2A7582-932C-4A9E-AF0D-A5D1FE8EBBF8}C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe
- FirewallRules: [UDP Query User{7C153CA2-7090-4D7E-A0B4-DF72F209B6A6}C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe
- FirewallRules: [{DAF495DD-02DD-4430-B3DC-44B3DD2B3A2E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
- FirewallRules: [TCP Query User{A425A59E-F5EA-4A4F-A9C7-D880D004183A}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
- FirewallRules: [UDP Query User{448CD3CB-BFBF-454A-8C8F-E80E9867E504}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
- FirewallRules: [{0FBB73F0-48B2-45D6-8D92-44B03C3A8BB1}] => (Allow) C:\Program Files (x86)\AliWangWang\AliIM.exe
- FirewallRules: [{84916D42-7F81-440B-AAF2-E71D8E282296}] => (Allow) C:\Program Files (x86)\AliWangWang\AliIM.exe
- FirewallRules: [TCP Query User{A22DB0B2-33C2-4F37-8A3B-8761E8307388}C:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe
- FirewallRules: [UDP Query User{B5993628-F336-4CBE-B68D-691D1E408740}C:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe
- FirewallRules: [{3DC917D2-2053-4DC2-934A-AB87686A295D}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
- FirewallRules: [{B19A6174-BCE9-4D1B-967E-A9775D3FB21A}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
- FirewallRules: [{0D5061A7-8D75-4506-93FB-B1EA527F1EE7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
- FirewallRules: [{FA8CD9FF-EC25-4999-8D44-D8EDD28A9315}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
- FirewallRules: [{BCD91A1C-EE3D-4988-9C24-441205143717}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
- FirewallRules: [{8B7EE046-7847-424A-8CA8-98FF6FDCAC9D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
- FirewallRules: [{6C2A8B70-842A-41D0-9C42-FBDF81B4B433}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
- FirewallRules: [{8A2C3D8E-512A-4C40-9859-A2EA809CAC28}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
- FirewallRules: [TCP Query User{12091714-B8BB-4066-A83A-92C96B06B7D2}D:\program files\ellinia v162.4\khaini.exe] => (Allow) D:\program files\ellinia v162.4\khaini.exe
- FirewallRules: [UDP Query User{81C37F2A-D7AA-4FE9-8B97-78A589F46AEE}D:\program files\ellinia v162.4\khaini.exe] => (Allow) D:\program files\ellinia v162.4\khaini.exe
- FirewallRules: [TCP Query User{9529C29A-1A38-4F04-A4A9-CED0EA4FE014}D:\program files\nexon launcher\maplestory\appdata\aries.exe] => (Allow) D:\program files\nexon launcher\maplestory\appdata\aries.exe
- FirewallRules: [UDP Query User{4157EB61-A96C-4B4C-8D3D-30FB23D43088}D:\program files\nexon launcher\maplestory\appdata\aries.exe] => (Allow) D:\program files\nexon launcher\maplestory\appdata\aries.exe
- FirewallRules: [{271EB7FA-39F1-4411-A431-789CC53151D7}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe
- FirewallRules: [{B31E7EE0-1B3A-464A-B7F1-EB65948F8DC4}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe
- FirewallRules: [TCP Query User{9F4492B0-E6C0-408E-A779-634FC6A77D04}D:\program files\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
- FirewallRules: [UDP Query User{23450E6B-F943-4011-A27C-BE05E6A08520}D:\program files\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
- FirewallRules: [{D8069FD8-E739-4843-82C7-AB21BA3D99C4}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Rust\Rust.exe
- FirewallRules: [{CA6B4BA8-75E2-4A64-9A37-E7E58E417BAB}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Rust\Rust.exe
- FirewallRules: [{6884BDDE-6976-41E5-8B8B-43DC3B76CF60}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
- FirewallRules: [{E127C5DC-0B59-47B3-8AE5-984B22053071}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
- FirewallRules: [{CD9BA5C9-F440-4B5A-933C-1D6B553B1E98}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
- FirewallRules: [{F7F5D3DD-1367-4FFE-BDE9-A7C86CBCB6D2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
- FirewallRules: [{E1862240-CA7C-4E08-9653-2E15700E29C4}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Foxhole\War.exe
- FirewallRules: [{85662EA1-2C2E-4DAD-BCEA-485EF51523DB}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Foxhole\War.exe
- FirewallRules: [TCP Query User{419FDE51-F769-4334-8A8D-2031F2FCA4FE}D:\program files\steamlibrary\steamapps\common\foxhole\war\binaries\win64\war-win64-shipping.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\foxhole\war\binaries\win64\war-win64-shipping.exe
- FirewallRules: [UDP Query User{68B5764E-2CBB-4D40-BDF5-2CF1E145D9A9}D:\program files\steamlibrary\steamapps\common\foxhole\war\binaries\win64\war-win64-shipping.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\foxhole\war\binaries\win64\war-win64-shipping.exe
- FirewallRules: [{242CF9ED-D756-4638-8367-E3E2ECF2A4BE}] => (Allow) C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe
- FirewallRules: [{86325F89-5BEB-41D7-893F-CEA218D61F2A}] => (Allow) D:\Program Files\Softether\SoftEther VPN Client\vpnclient.exe
- FirewallRules: [{3550FCDC-3EDD-432A-8948-39A0636C7E41}] => (Allow) D:\Program Files\Softether\SoftEther VPN Client\vpnclient_x64.exe
- FirewallRules: [{1EB558A7-783C-43DA-AF93-3A97995A9C80}] => (Allow) D:\Program Files\Softether\SoftEther VPN Client\vpncmgr.exe
- FirewallRules: [{F92D115C-2FB9-4F90-94D1-671DFC0E2D61}] => (Allow) D:\Program Files\Softether\SoftEther VPN Client\vpncmgr_x64.exe
- FirewallRules: [{EF6AC0B4-2ABD-42F7-87F3-F51DC7C2ADF1}] => (Allow) D:\Program Files\Softether\SoftEther VPN Client\vpncmd.exe
- FirewallRules: [{CD7AB0F7-6BD0-45CD-ABF4-B4A24FC99669}] => (Allow) D:\Program Files\Softether\SoftEther VPN Client\vpncmd_x64.exe
- FirewallRules: [{7CDD9530-BF69-4C92-A689-4DA5FB8EFD75}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
- FirewallRules: [{6FC14BF1-6C5C-4B63-9E02-EC4C0365AAB6}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
- FirewallRules: [{210999E1-216B-4008-8CDD-FA2EE52D7C14}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
- FirewallRules: [{DC4353AD-B217-4148-BDC1-61543EA80D6C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
- FirewallRules: [{A25FE8E5-1FAD-4BB2-AA2A-31BAD0C1C7C3}] => (Allow) D:\Program Files\iTunes\iTunes.exe
- FirewallRules: [{A12D01EB-7E44-4AD7-BE4E-ACEB97A5CAEB}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
- FirewallRules: [TCP Query User{0D1B3561-E39C-451A-A58D-0CA16AE32691}D:\program files\steamlibrary\steamapps\common\dayz\dayz_x64.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\dayz\dayz_x64.exe
- FirewallRules: [UDP Query User{CA672630-2662-406F-83DA-CC8D1D5FC712}D:\program files\steamlibrary\steamapps\common\dayz\dayz_x64.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\dayz\dayz_x64.exe
- FirewallRules: [TCP Query User{FCF0DD55-E42C-4706-A727-44F5CCBFB7E0}D:\program files\steamlibrary\steamapps\common\dayz\dayz.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\dayz\dayz.exe
- FirewallRules: [UDP Query User{055D06D6-B8B2-43E9-8B03-DA134DC3111E}D:\program files\steamlibrary\steamapps\common\dayz\dayz.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\dayz\dayz.exe
- FirewallRules: [{FE84212B-0BD6-449D-B552-DC40FB05B486}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
- FirewallRules: [{CB7286F8-E3ED-4383-B116-F6E22E3DA899}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
- FirewallRules: [{4021E4CB-77F9-460C-8532-31FA56F3BA02}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
- FirewallRules: [{27FF6C00-88B5-4A0E-B4C8-33D4C1BDC52A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
- FirewallRules: [{4463C441-536F-409F-8710-355A52FC47F2}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
- FirewallRules: [{0B968082-FC52-4D5B-81D1-2986E025A0AE}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
- FirewallRules: [{9276669B-70E2-41F2-ADDE-07460FD1C3E6}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- FirewallRules: [TCP Query User{023643E6-A790-4335-96BA-D81BC3FC8BCC}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
- FirewallRules: [UDP Query User{D02DF510-7008-4E47-8A90-AA6633F95B57}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
- FirewallRules: [{DA05CEF9-1D09-49A2-A2D2-240CDE01AD4E}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe
- FirewallRules: [{9F8FFCCD-69EC-4633-8DEF-52DD3B9F3131}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe
- FirewallRules: [{72A324C3-6EC1-48EC-BB77-1E63B3888187}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Arma 3\arma3launcher.exe
- FirewallRules: [{E3DB0436-6D95-4880-9197-DA6A44A4D0AA}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Arma 3\arma3launcher.exe
- FirewallRules: [TCP Query User{92B88E33-9C9A-4F29-B7C2-6EA063099121}D:\program files\steamlibrary\steamapps\common\arma 3\arma3_x64.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\arma 3\arma3_x64.exe
- FirewallRules: [UDP Query User{80CBABC1-FE26-40A1-9404-1E1A9A91D23A}D:\program files\steamlibrary\steamapps\common\arma 3\arma3_x64.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\arma 3\arma3_x64.exe
- FirewallRules: [{9B9BE0BA-05E9-484F-9162-688B33DB7024}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
- FirewallRules: [{C6F5EDDB-699A-4A33-8519-2F2B1E89879A}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmgr_x64.exe
- FirewallRules: [{94C10ECE-CB71-4F27-9DF9-04FE478B68B7}] => (Allow) C:\Program Files\SoftEther VPN Client\vpnclient.exe
- FirewallRules: [{FE98F08A-1326-4FC1-B7D4-DB431AF28A2A}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmgr.exe
- FirewallRules: [{CC0E23A8-EA2F-431B-B80B-2F1E01C4AB90}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmd.exe
- FirewallRules: [{E29A9008-B6FE-4EAD-82E9-17E8B1A0CC38}] => (Allow) C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe
- FirewallRules: [{1CF9757D-DBA6-409F-93F8-37347EC7AB43}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmd_x64.exe
- ==================== Restore Points =========================
- 16-10-2017 23:57:10 Installed Minecraft
- ==================== Faulty Device Manager Devices =============
- ==================== Event log errors: =========================
- Application errors:
- ==================
- Error: (10/24/2017 12:46:39 AM) (Source: VsJITDebugger) (EventID: 4096) (User: JUSTIN)
- Description: An unhandled exception ('System.IndexOutOfRangeException') occurred in 4h6f6awmv7wz.exe [11492]. Just-In-Time debugging this exception failed with the following error: The remote procedure call failed.
- Check the documentation index for 'Just-in-time debugging, errors' for more information.
- Error: (10/24/2017 12:46:39 AM) (Source: Application Hang) (EventID: 1002) (User: )
- Description: The program vsjitdebugger.exe version 10.0.30319.1 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
- Process ID: 1eec
- Start Time: 01d34c1e6d5f7f5a
- Termination Time: 2
- Application Path: C:\Windows\System32\vsjitdebugger.exe
- Report Id: ba41f90f-b010-4021-98df-cb24735070de
- Faulting package full name:
- Faulting package-relative application ID:
- Error: (10/24/2017 12:34:21 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
- Description: License Activation (slui.exe) failed with the following error code:
- hr=0x8007232B
- Command-line arguments:
- RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=6
- Error: (10/24/2017 12:26:42 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
- Description: License Activation (slui.exe) failed with the following error code:
- hr=0x8007139F
- Command-line arguments:
- RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable
- Error: (10/24/2017 12:24:23 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: m->NextScheduledSPRetry 2219
- Error: (10/24/2017 12:24:23 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: m->NextScheduledEvent 2219
- Error: (10/24/2017 12:24:23 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: Continuously busy for more than a second
- Error: (10/24/2017 12:24:22 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: m->NextScheduledSPRetry 1094
- Error: (10/24/2017 12:24:22 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: m->NextScheduledEvent 1094
- Error: (10/24/2017 12:24:22 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Task Scheduling Error: Continuously busy for more than a second
- System errors:
- =============
- Error: (10/24/2017 12:46:51 AM) (Source: DCOM) (EventID: 10010) (User: JUSTIN)
- Description: The server {6F5BF5E0-D729-46DD-891C-167FE3851574} did not register with DCOM within the required timeout.
- Error: (10/24/2017 12:07:48 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
- Description: There was an error while attempting to read the local hosts file.
- Error: (10/24/2017 12:07:48 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
- Description: There was an error while attempting to read the local hosts file.
- Error: (10/24/2017 12:04:13 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
- Description: There was an error while attempting to read the local hosts file.
- Error: (10/24/2017 12:04:12 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
- Description: There was an error while attempting to read the local hosts file.
- Error: (10/24/2017 12:04:11 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
- Description: There was an error while attempting to read the local hosts file.
- Error: (10/24/2017 12:02:48 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
- Description: There was an error while attempting to read the local hosts file.
- Error: (10/24/2017 12:02:48 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
- Description: There was an error while attempting to read the local hosts file.
- Error: (10/24/2017 12:02:14 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
- Description: There was an error while attempting to read the local hosts file.
- Error: (10/24/2017 12:02:14 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
- Description: There was an error while attempting to read the local hosts file.
- CodeIntegrity:
- ===================================
- Date: 2017-08-04 15:24:59.609
- Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
- Date: 2017-08-01 17:15:13.398
- Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
- Date: 2017-06-03 14:48:10.342
- Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
- ==================== Memory info ===========================
- Processor: AMD Ryzen 7 1700 Eight-Core Processor
- Percentage of memory in use: 38%
- Total physical RAM: 16335.46 MB
- Available physical RAM: 10093.9 MB
- Total Virtual: 18767.46 MB
- Available Virtual: 9928.54 MB
- ==================== Drives ================================
- Drive c: () (Fixed) (Total:232.33 GB) (Free:45.7 GB) NTFS
- Drive d: (New Volume) (Fixed) (Total:931.39 GB) (Free:805.57 GB) NTFS
- Drive e: () (Removable) (Total:0.05 GB) (Free:0.04 GB) FAT
- Drive f: () (Removable) (Total:0.1 GB) (Free:0.09 GB) FAT
- ==================== MBR & Partition Table ==================
- ========================================================
- Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 00000000)
- Partition: GPT.
- ========================================================
- Disk: 1 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 00000000)
- Partition: GPT.
- ========================================================
- Disk: 2 (Size: 14.4 GB) (Disk ID: 00000000)
- Partition: GPT.
- ==================== End of Addition.txt ============================
Add Comment
Please, Sign In to add comment