Guest User

Addition

a guest
Oct 23rd, 2017
190
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 64.12 KB | None | 0 0
  1. Additional scan result of Farbar Recovery Scan Tool (x64) Version: 23-10-2017 01
  2. Ran by justi (24-10-2017 00:50:46)
  3. Running from D:\Downloads
  4. Windows 10 Pro Version 1703 15063.674 (X64) (2017-06-03 18:39:43)
  5. Boot Mode: Normal
  6. ==========================================================
  7.  
  8.  
  9. ==================== Accounts: =============================
  10.  
  11. Administrator (S-1-5-21-3695887035-1542476804-3675477037-500 - Administrator - Disabled)
  12. DefaultAccount (S-1-5-21-3695887035-1542476804-3675477037-503 - Limited - Disabled)
  13. Guest (S-1-5-21-3695887035-1542476804-3675477037-501 - Limited - Disabled)
  14. justi (S-1-5-21-3695887035-1542476804-3675477037-1001 - Administrator - Enabled) => C:\Users\justi
  15.  
  16. ==================== Security Center ========================
  17.  
  18. (If an entry is included in the fixlist, it will be removed.)
  19.  
  20. AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  21. AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  22.  
  23. ==================== Installed Programs ======================
  24.  
  25. (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
  26.  
  27. .NET Core SDK 1.0.4 (x64) (HKLM\...\{11ACCE3C-C179-472C-A8CA-0F467702B2DA}) (Version: 4.1.5012 - Microsoft Corporation) Hidden
  28. .NET Core SDK 1.0.4 (x64) (HKLM-x32\...\{c56e80af-58a4-490b-a1cd-5718290133b9}) (Version: 1.0.4 - Microsoft Corporation)
  29. @BIOS B15.0630.1 (HKLM-x32\...\{C9D46F25-5F9D-4E25-B24F-BC00E9EDF529}) (Version: 3.00.0000 - GIGABYTE) Hidden
  30. @BIOS B15.0630.1 (HKLM-x32\...\InstallShield_{C9D46F25-5F9D-4E25-B24F-BC00E9EDF529}) (Version: 3.00.0000 - GIGABYTE)
  31. Active Directory Authentication Library for SQL Server (HKLM\...\{32C0D7B2-1046-43AC-98AD-B748E1910916}) (Version: 13.0.1601.5 - Microsoft Corporation) Hidden
  32. Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.3.0.256 - Adobe Systems Incorporated)
  33. Adobe Illustrator CC 2017 (HKLM-x32\...\ILST_21_1_0) (Version: 21.1.0 - Adobe Systems Incorporated)
  34. Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.0 - Adobe Systems Incorporated)
  35. Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 385.41 - NVIDIA Corporation) Hidden
  36. Apple Application Support (32-bit) (HKLM-x32\...\{D2FE6376-E549-4F63-A2C5-CA24DA035DE4}) (Version: 5.6 - Apple Inc.)
  37. Apple Application Support (64-bit) (HKLM\...\{BB109E24-EE90-485B-A28B-ADDEFB40540B}) (Version: 5.6 - Apple Inc.)
  38. Apple Mobile Device Support (HKLM\...\{0A596141-97D5-45FA-9281-98DFAF48D579}) (Version: 10.3.2.3 - Apple Inc.)
  39. Apple Software Update (HKLM-x32\...\{52D87F32-70E4-4348-8148-C0B9F35B1314}) (Version: 2.3.0.177 - Apple Inc.)
  40. Application Verifier x64 External Package (HKLM\...\{01C2C51F-B0CF-BB5E-A010-E927D44F7720}) (Version: 10.1.15063.137 - Microsoft) Hidden
  41. Blizzard App (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
  42. Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
  43. ClickOnce Bootstrapper Package for Microsoft .NET Framework (HKLM-x32\...\{E598B692-764A-413C-8530-59163D6B4AE3}) (Version: 4.6.01590 - Microsoft Corporation) Hidden
  44. CPUID HWMonitor 1.31 (HKLM\...\CPUID HWMonitor_is1) (Version: - )
  45. DiagnosticsHub_CollectionService (HKLM\...\{90A561D7-0C29-464D-94E1-2A7E1C553230}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
  46. Discord (HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\...\Discord) (Version: 0.0.298 - Discord Inc.)
  47. Electrum (HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\...\Electrum) (Version: 2.8.3 - Electrum Technologies GmbH)
  48. Entity Framework 6.1.3 Tools for Visual Studio 15 (HKLM-x32\...\{F8C0447E-D45C-4E52-94E8-C6340AAC9DB8}) (Version: 6.1.60104.0 - Microsoft Corporation) Hidden
  49. f.lux (HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\...\Flux) (Version: - f.lux Software LLC)
  50. FileZilla Client 3.27.0.1 (HKLM-x32\...\FileZilla Client) (Version: 3.27.0.1 - Tim Kosse)
  51. Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.)
  52. Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
  53. icecap_collection_neutral (HKLM-x32\...\{64F3E6FC-68E3-4062-9C2C-ABD93FDFF309}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
  54. icecap_collection_x64 (HKLM\...\{0AD162D1-4973-4315-97E9-5DE9A92B4049}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
  55. icecap_collectionresources (HKLM-x32\...\{12C50688-5919-4A7A-8784-B26A7238FCEE}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
  56. icecap_collectionresourcesx64 (HKLM-x32\...\{400E7885-8851-43F1-849C-5A720CB4F001}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
  57. IIS 10.0 Express (HKLM\...\{0148E8AA-4A50-4673-B532-DB9F30F804BE}) (Version: 10.0.1737 - Microsoft Corporation)
  58. IIS Express Application Compatibility Database for x64 (HKLM\...\{08274920-8908-45c2-9258-8ad67ff77b09}.sdb) (Version: - ) Hidden
  59. IIS Express Application Compatibility Database for x86 (HKLM\...\{ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb) (Version: - ) Hidden
  60. Intellisense Lang Pack Mobile Extension SDK 10.0.15063.0 (HKLM-x32\...\{A0007ADE-F6F6-410F-822F-7522B4F0BFDE}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
  61. IntelliTraceProfilerProxy (HKLM-x32\...\{51783942-DFB0-4452-97CC-BDF2D4AB3A48}) (Version: 15.0.24.0 - Microsoft Corporation) Hidden
  62. iTunes (HKLM\...\{02F95875-9527-49CC-B32F-970ADAEBD1EF}) (Version: 12.6.2.20 - Apple Inc.)
  63. Java 8 Update 144 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180144F0}) (Version: 8.0.1440.1 - Oracle Corporation)
  64. join.me (HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\...\JoinMe) (Version: 3.3.0.5340 - LogMeIn, Inc.)
  65. Kits Configuration Installer (HKLM-x32\...\{0C05DE52-2C77-D6FA-A561-D508CF5FC96E}) (Version: 10.1.15063.137 - Microsoft) Hidden
  66. MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
  67. Microsoft Azure Authoring Tools - v2.9.5.3 (HKLM\...\{086C537B-DE1A-4A11-8441-6AAF076174B8}) (Version: 2.9.8699.20 - Microsoft Corporation)
  68. Microsoft Azure Compute Emulator - v2.9.5.3 (HKLM\...\Microsoft Azure Compute Emulator - v2.9.5.3) (Version: 2.9.8699.20 - Microsoft Corporation)
  69. Microsoft Azure Libraries for .NET – v2.9 (HKLM\...\{C5C91AA6-3E83-430E-8B7A-6B790083F28D}) (Version: 3.0.0127.060 - Microsoft Corporation)
  70. Microsoft Azure Mobile App SDK V2.0 (HKLM-x32\...\{829D812B-3F25-4E8B-B1DF-1AD09164684C}) (Version: 2.0.50130.0 - Microsoft Corporation)
  71. Microsoft Azure PowerShell - September 2016 (HKLM-x32\...\{CB3F8A12-1570-4964-8206-17274AB9EF4D}) (Version: 2.1.0 - Microsoft Corporation)
  72. Microsoft Azure Storage Emulator - v5.1 (HKLM-x32\...\Microsoft Azure Storage Emulator - v5.1) (Version: 5.1.1760.1722 - Microsoft Corporation)
  73. Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)
  74. Microsoft ODBC Driver 11 for SQL Server (HKLM\...\{BF5ABBDB-D3AA-4BCB-8D10-FCD4A4BB7F93}) (Version: 12.1.4100.1 - Microsoft Corporation)
  75. Microsoft Office Professional Plus 2016 - en-us (HKLM\...\ProPlusRetail - en-us) (Version: 16.0.8528.2139 - Microsoft Corporation)
  76. Microsoft Report Viewer 2014 Runtime (HKLM-x32\...\{327E9C0D-1687-414F-923E-F5979E549548}) (Version: 12.0.2000.8 - Microsoft Corporation)
  77. Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{83F2B8F4-5CF3-4BE9-9772-9543EAE4AC5F}) (Version: 10.51.2500.0 - Microsoft Corporation)
  78. Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{6292D514-17A4-403F-98F9-E150F10C043D}) (Version: 10.3.5500.0 - Microsoft Corporation)
  79. Microsoft SQL Server 2012 Native Client (HKLM\...\{1385D3DB-8E80-427B-91D2-B7535862B8E4}) (Version: 11.3.6518.0 - Microsoft Corporation)
  80. Microsoft SQL Server 2014 (64-bit) (HKLM\...\Microsoft SQL Server SQLServer2014) (Version: - Microsoft Corporation)
  81. Microsoft SQL Server 2014 Policies (HKLM-x32\...\{1C30FE7E-8A8C-4492-89D6-10CB20C3B0EB}) (Version: 12.0.2000.8 - Microsoft Corporation)
  82. Microsoft SQL Server 2014 Setup (English) (HKLM\...\{C7E2483C-10A4-41E3-A2F6-240186FE3E41}) (Version: 12.1.4100.1 - Microsoft Corporation)
  83. Microsoft SQL Server 2014 Transact-SQL Compiler Service (HKLM\...\{1A73AF5D-69EE-4AE0-917C-2429CE593A86}) (Version: 12.1.4100.1 - Microsoft Corporation)
  84. Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\...\{FF7DDA05-6EA7-4C01-B44A-3E57F8B9B97B}) (Version: 12.1.4100.1 - Microsoft Corporation)
  85. Microsoft SQL Server 2016 LocalDB (HKLM\...\{E359515A-92E6-4FA3-A2C9-E1BA02D8DE6E}) (Version: 13.0.1601.5 - Microsoft Corporation)
  86. Microsoft SQL Server System CLR Types (HKLM-x32\...\{C3F6F200-6D7B-4879-B9EE-700C0CE1FCDA}) (Version: 10.51.2500.0 - Microsoft Corporation)
  87. Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{E3F613C1-105F-4717-BFE7-007729A95D67}) (Version: 12.1.4100.1 - Microsoft Corporation)
  88. Microsoft System CLR Types for SQL Server 2016 (HKLM\...\{96EB5054-C775-4BEF-B7B9-AA96A295EDCD}) (Version: 13.0.1601.5 - Microsoft Corporation)
  89. Microsoft System CLR Types for SQL Server 2016 (HKLM-x32\...\{84C23ECA-FE4D-494F-9247-3EBAD57E7F0C}) (Version: 13.0.1601.5 - Microsoft Corporation)
  90. Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
  91. Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
  92. Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
  93. Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
  94. Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
  95. Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
  96. Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
  97. Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
  98. Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)
  99. Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
  100. Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
  101. Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
  102. Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
  103. Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f1e7e313-06df-4c56-96a9-99fdfd149c51}) (Version: 14.10.25008.0 - Microsoft Corporation)
  104. Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)
  105. Microsoft Visual Studio 2010 Shell (Isolated) - ENU (HKLM-x32\...\{D64B6984-242F-32BC-B008-752806E5FC44}) (Version: 10.0.40219 - Microsoft Corporation)
  106. Microsoft Visual Studio 2017 (HKLM-x32\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 1.10.30640.0 - Microsoft Corporation)
  107. Microsoft Web Deploy 3.6 (HKLM\...\{5CB4DD27-6252-4C08-BFCF-22F6A110CBFA}) (Version: 10.0.1972 - Microsoft Corporation)
  108. Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
  109. Nexon Launcher (HKLM-x32\...\Nexon Nexon Launcher) (Version: 2.0.0 - Nexon)
  110. NVIDIA 3D Vision Controller Driver 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
  111. NVIDIA 3D Vision Driver 385.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 385.41 - NVIDIA Corporation)
  112. NVIDIA GeForce Experience 3.10.0.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.10.0.95 - NVIDIA Corporation)
  113. NVIDIA Graphics Driver 385.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 385.41 - NVIDIA Corporation)
  114. NVIDIA HD Audio Driver 1.3.34.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.27 - NVIDIA Corporation)
  115. NVIDIA PhysX System Software 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
  116. OBS Studio (HKLM-x32\...\OBS Studio) (Version: 20.0.1 - OBS Project)
  117. Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8528.2139 - Microsoft Corporation) Hidden
  118. Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8528.2139 - Microsoft Corporation) Hidden
  119. Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8528.2139 - Microsoft Corporation) Hidden
  120. Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden
  121. Python 2.7.13 (HKLM-x32\...\{4A656C6C-D24A-473F-9747-3A8D00907A03}) (Version: 2.7.13150 - Python Software Foundation)
  122. Python 3.6.0 (64-bit) (HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\...\{37a4e38b-baf7-4500-97f1-0f7c51d9a395}) (Version: 3.6.150.0 - Python Software Foundation)
  123. Python 3.6.0 Core Interpreter (64-bit symbols) (HKLM\...\{DFAA81ED-540F-47B5-9113-814CC427CFD8}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
  124. Python 3.6.0 Core Interpreter (64-bit) (HKLM\...\{1944B5D6-0FFB-47C0-BFEC-5C7A2F013FA7}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
  125. Python 3.6.0 Development Libraries (64-bit) (HKLM\...\{A6A3184B-748E-46F4-9E28-6B5889506170}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
  126. Python 3.6.0 Documentation (64-bit) (HKLM\...\{5D83032F-36B5-42E4-A114-D310119C6F51}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
  127. Python 3.6.0 Executables (64-bit symbols) (HKLM\...\{4A928E09-6798-46AB-A4F7-1B52CD164B3B}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
  128. Python 3.6.0 Executables (64-bit) (HKLM\...\{C0016766-8F63-4992-9E6F-ECFB2CB12BA6}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
  129. Python 3.6.0 pip Bootstrap (64-bit) (HKLM\...\{F9C1C892-4908-41F4-900C-7B0DAAF2387B}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
  130. Python 3.6.0 Standard Library (64-bit symbols) (HKLM\...\{90676013-5216-48EE-AC8D-07AC0C16DA50}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
  131. Python 3.6.0 Standard Library (64-bit) (HKLM\...\{F3CB2257-C4C7-4C84-AF63-BADCED1E3273}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
  132. Python 3.6.0 Tcl/Tk Support (64-bit symbols) (HKLM\...\{96C2F083-44B8-4388-B2A5-F48B75A25188}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
  133. Python 3.6.0 Tcl/Tk Support (64-bit) (HKLM\...\{E24AA157-AD52-42ED-B484-CA5979D4A728}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
  134. Python 3.6.0 Test Suite (64-bit symbols) (HKLM\...\{CFF9C3A7-86C3-410B-9DD1-F1617767D2D6}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
  135. Python 3.6.0 Test Suite (64-bit) (HKLM\...\{631C7E77-5832-40D1-9D6D-7B3766D79BDF}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
  136. Python 3.6.0 Utility Scripts (64-bit) (HKLM\...\{FE905DA4-0F23-4F99-9284-50BB4913CEB4}) (Version: 3.6.150.0 - Python Software Foundation) Hidden
  137. Python Launcher (HKLM-x32\...\{A674B2CB-13CA-437B-A215-9DD257959A49}) (Version: 3.6.5835.0 - Python Software Foundation)
  138. qBittorrent 3.3.13 (HKLM-x32\...\qBittorrent) (Version: 3.3.13 - The qBittorrent project)
  139. Service Pack 1 for SQL Server 2014 (KB3058865) (64-bit) (HKLM\...\KB3058865) (Version: 12.1.4100.1 - Microsoft Corporation)
  140. ShareX (HKLM\...\82E6AC09-0FEF-4390-AD9F-0DD3F5561EFC_is1) (Version: 11.9.1 - ShareX Team)
  141. Sid Meier's Civilization 5 (HKLM-x32\...\Sid Meier's Civilization 5_R.G. Mechanics_is1) (Version: - R.G. Mechanics, Panky)
  142. Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.103 - Skype Technologies S.A.)
  143. SoftEther VPN Client (HKLM\...\softether_sevpnclient) (Version: 4.23.9647 - SoftEther VPN Project)
  144. SQL Server 2014 Client Tools (HKLM\...\{2BA1811B-44C0-4C50-8C5A-CE68AB25ED71}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden
  145. SQL Server 2014 Client Tools (HKLM\...\{B5ECFA5C-AC4F-45A4-A12E-A76ABDD9CCBA}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden
  146. SQL Server 2014 Common Files (HKLM\...\{BD1CD96B-FE4B-4EAE-83D4-6EF55AB5779C}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden
  147. SQL Server 2014 Common Files (HKLM\...\{F7012F84-80F5-4C25-852E-B1BA03276FE6}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden
  148. SQL Server 2014 Management Studio (HKLM\...\{75A54138-3B98-4705-92E4-F619825B121F}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden
  149. SQL Server 2014 Management Studio (HKLM\...\{839EF29A-3055-43DC-ADCE-8E84893798D5}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden
  150. Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
  151. Sublime Text Build 3126 (HKLM\...\Sublime Text 3_is1) (Version: - Sublime HQ Pty Ltd)
  152. TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.1.6 - TeamSpeak Systems GmbH)
  153. TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.83369 - TeamViewer)
  154. TypeScript Power Tool (HKLM-x32\...\{F0B4CA92-9642-4BE6-8449-A786AD4FA628}) (Version: 2.2.3.0 - Microsoft Corporation) Hidden
  155. Universal CRT Extension SDK (HKLM-x32\...\{ADD45F52-630A-4F45-8879-A8DB80DF921B}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
  156. Universal CRT Headers Libraries and Sources (HKLM-x32\...\{919D63C5-565C-F1C3-67D9-353FE902EF11}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
  157. Universal CRT Redistributable (HKLM-x32\...\{0AAB833E-034D-430B-D3E4-39C5753B14AC}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
  158. Universal CRT Tools x64 (HKLM\...\{D29934EC-24B6-0F5D-C6BB-E9ECCF220C12}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
  159. Universal CRT Tools x86 (HKLM-x32\...\{2410D879-0C8F-B254-C207-455E119075B6}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
  160. Universal General MIDI DLS Extension SDK (HKLM-x32\...\{485209AE-37CE-2208-59CB-7BB59AA85BE7}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
  161. Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
  162. vcpp_crt.redist.clickonce (HKLM-x32\...\{93FDC294-0726-48EA-989D-50E89C67ABF0}) (Version: 14.10.25008 - Microsoft Corporation) Hidden
  163. Visual Studio 2010 Prerequisites - English (HKLM\...\{662014D2-0450-37ED-ABAE-157C88127BEB}) (Version: 10.0.40219 - Microsoft Corporation)
  164. VS Immersive Activate Helper (HKLM-x32\...\{D8A4EA2B-1A97-45A5-BF96-7493183F8524}) (Version: 16.0.59.0 - Microsoft Corporation) Hidden
  165. VS Script Debugging Common (HKLM\...\{3B64C68E-14E0-4214-A53D-502E9FBD32E7}) (Version: 16.0.59.0 - Microsoft Corporation) Hidden
  166. VS WCF Debugging (HKLM\...\{9E1EF6F7-ED70-4BD8-A1AE-83C5DEF0DA91}) (Version: 16.0.59.0 - Microsoft Corporation) Hidden
  167. vs_BlendMsi (HKLM-x32\...\{1070C8E8-4DFB-419F-984A-5C835828897E}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
  168. vs_clickoncebootstrappermsi (HKLM-x32\...\{B9F4AA09-F4AC-4108-ADA0-27CDD45FCEC3}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
  169. vs_clickoncebootstrappermsires (HKLM-x32\...\{AEF5E0F2-31D1-454A-A992-C523C0007B4D}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
  170. vs_clickoncesigntoolmsi (HKLM-x32\...\{DE8B48BF-82B9-434A-B254-1EA2306E5FBA}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
  171. vs_communitymsi (HKLM-x32\...\{A041943F-C97B-48F6-8F23-C5078F99BB3A}) (Version: 15.0.26323 - Microsoft Corporation) Hidden
  172. vs_communitymsires (HKLM-x32\...\{1210EE60-E253-407D-B537-D36898049CF0}) (Version: 15.0.26228 - Microsoft Corporation) Hidden
  173. vs_devenvmsi (HKLM-x32\...\{581E5656-26E2-4A02-9711-48C8E4998310}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
  174. vs_filehandler_amd64 (HKLM-x32\...\{15D591B0-7B40-4957-B6C0-EB7452B5AAB6}) (Version: 15.0.26228 - Microsoft Corporation) Hidden
  175. vs_filehandler_x86 (HKLM-x32\...\{DC296244-0701-4EDE-9696-05B9C1D017B3}) (Version: 15.0.26228 - Microsoft Corporation) Hidden
  176. vs_FileTracker_Singleton (HKLM-x32\...\{11230C85-1813-4BC3-9C24-E0B74B59653E}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
  177. vs_Graphics_Singletonx64 (HKLM\...\{F3217611-B414-4A3A-81BF-6A3A4DB7E743}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
  178. vs_Graphics_Singletonx86 (HKLM-x32\...\{D4DCEC6A-BC59-43D5-866A-AB057E64F73F}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
  179. vs_minshellinteropmsi (HKLM-x32\...\{9477F337-FD16-4ACA-8217-E2D7A0F92603}) (Version: 15.0.26301 - Microsoft Corporation) Hidden
  180. vs_minshellmsi (HKLM-x32\...\{497A5ACE-DA03-4412-A110-910B2C450720}) (Version: 15.0.26424 - Microsoft Corporation) Hidden
  181. vs_minshellmsires (HKLM-x32\...\{A8B77523-13AB-46B9-B54F-5483E09668F9}) (Version: 15.0.26228 - Microsoft Corporation) Hidden
  182. vs_SQLClickOnceBootstrappermsi (HKLM-x32\...\{D396CF10-5F2B-417D-9571-0B669B99440E}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
  183. vs_tipsmsi (HKLM-x32\...\{A32A9CF6-E7AA-48B8-A3D3-50C157E69F53}) (Version: 15.0.26208 - Microsoft Corporation) Hidden
  184. Vulkan Run Time Libraries 1.0.51.0 (HKLM\...\VulkanRT1.0.51.0) (Version: 1.0.51.0 - LunarG, Inc.)
  185. WinAppDeploy (HKLM-x32\...\{80859F5A-D13C-AB8E-4659-B630CFE2599D}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
  186. Windows SDK AddOn (HKLM-x32\...\{30DCCFB4-068F-4C5C-BC10-5ECDCAEE55D4}) (Version: 10.1.0.0 - Microsoft Corporation)
  187. Windows Software Development Kit - Windows 10.0.15063.137 (HKLM-x32\...\{a07b4a01-ca27-4e28-9353-f325a308f128}) (Version: 10.1.15063.137 - Microsoft Corporation)
  188. WinRAR 5.50 beta 3 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.3 - win.rar GmbH)
  189. WinRT Intellisense Desktop - en-us (HKLM-x32\...\{45B6202F-A716-C68A-199E-43B106B56A7E}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
  190. WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{357D0CD4-8B72-8D65-7015-81DFB2BF9150}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
  191. WinRT Intellisense IoT - en-us (HKLM-x32\...\{3E5375A1-0E4C-34E3-6294-C1C8BDA823E4}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
  192. WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{E2F78B92-04DE-5350-14C0-7C281BF87D9E}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
  193. WinRT Intellisense PPI - en-us (HKLM-x32\...\{6CE744AE-7E0F-00AF-F1BD-077D9AFCBEC6}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
  194. WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{81A0EC8C-9462-BC98-0E5C-301DD7A46792}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
  195. WinRT Intellisense UAP - en-us (HKLM-x32\...\{FAD08838-3937-0F6C-8787-FDFDFBF63502}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
  196. WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{D089A695-49F0-D3B2-0EBF-2BBC33A05CD6}) (Version: 10.1.15063.137 - Microsoft Corporation) Hidden
  197.  
  198. ==================== Custom CLSID (Whitelisted): ==========================
  199.  
  200. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  201.  
  202. CustomCLSID: HKU\S-1-5-21-3695887035-1542476804-3675477037-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-17AD6CE4A66E}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => No File
  203. CustomCLSID: HKU\S-1-5-21-3695887035-1542476804-3675477037-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\justi\AppData\Local\Microsoft\OneDrive\17.3.6816.0313\amd64\FileSyncShell64.dll => No File
  204. CustomCLSID: HKU\S-1-5-21-3695887035-1542476804-3675477037-1001_Classes\CLSID\{5D09DD40-CDC4-4C56-B615-0D1E3B357C2B}\InprocServer32 -> C:\Program Files (x86)\AliWangWang\9.07.03C\AliIMX_64.dll => No File
  205. CustomCLSID: HKU\S-1-5-21-3695887035-1542476804-3675477037-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\justi\AppData\Local\Microsoft\OneDrive\17.3.6816.0313\amd64\FileSyncShell64.dll => No File
  206. CustomCLSID: HKU\S-1-5-21-3695887035-1542476804-3675477037-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\justi\AppData\Local\Microsoft\OneDrive\17.3.6816.0313\amd64\FileSyncShell64.dll => No File
  207. CustomCLSID: HKU\S-1-5-21-3695887035-1542476804-3675477037-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
  208. ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
  209. ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
  210. ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
  211. ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
  212. ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
  213. ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
  214. ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
  215. ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
  216. ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
  217. ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
  218. ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
  219. ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Users\justi\rarext.dll [2017-05-31] (Alexander Roshal)
  220. ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Users\justi\rarext32.dll [2017-05-31] (Alexander Roshal)
  221. ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
  222. ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
  223. ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-08] ()
  224. ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2017-08-22] (NVIDIA Corporation)
  225. ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] ()
  226. ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Users\justi\rarext.dll [2017-05-31] (Alexander Roshal)
  227. ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Users\justi\rarext32.dll [2017-05-31] (Alexander Roshal)
  228.  
  229. ==================== Scheduled Tasks (Whitelisted) =============
  230.  
  231. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  232.  
  233. Task: {040F2B12-179F-4E0F-9C47-7E4A7D0280F8} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-10-11] (NVIDIA Corporation)
  234. Task: {0EA8CDEA-1E69-4D87-853B-F3B8156ECAE0} - System32\Tasks\Microsoft\VisualStudio\VSIX Auto Update 15.0.26430.15 => D:\Program Files\Visual Studio\Common7\IDE\VSIXAutoUpdate.exe [2017-07-09] (Microsoft Corporation)
  235. Task: {0FDD5BCD-006C-4840-80F1-CE5C532EEF77} - System32\Tasks\AliUpdater{13F48D5A-AF3B-4953-A887-77E2E479AF4D} => C:\Program Files (x86)\AliWangWang\AliTask.exe
  236. Task: {11061F0F-F8F1-4396-B603-244361431314} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-10-12] (Microsoft Corporation)
  237. Task: {1E862D15-8166-44D8-AC1F-102FD665F883} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-06-03] (Google Inc.)
  238. Task: {2F07F46D-A341-4DDA-BC09-5C7AD6F1E987} - System32\Tasks\AutoPico Daily Restart => C:\Users\justi\Desktop\KMSpico [Argument = 10.1.8 FINAL + Portable (Office and Windows 10 Activator) [TechTools.net]\Portable\AutoPico.exe /silent]
  239. Task: {311188D4-AB94-4568-9708-6D7B9F085D70} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-28] ()
  240. Task: {381E14CD-F838-463B-8824-70764994F8B6} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-10-11] (NVIDIA Corporation)
  241. Task: {3E96EF0E-F426-40DF-843E-063B61243C6D} - System32\Tasks\KMSAutoNet => C:\ProgramData\KMSAutoS\KMSAuto Net.exe [2015-08-10] (MSFree Inc.)
  242. Task: {47E8AF72-37D2-4F19-8798-A9136D6FA48B} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-10-11] (NVIDIA Corporation)
  243. Task: {53F94377-0DDE-4163-9D16-7D4AC71DD8A4} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-10-11] (NVIDIA Corporation)
  244. Task: {566AD73E-F634-4226-BCE7-E5D19E4924D5} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-28] ()
  245. Task: {5D71A98E-0E26-4CB5-8CEA-69D5C40F17B7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-10-21] (Microsoft Corporation)
  246. Task: {68011F2D-E67B-4641-A5E6-AF026F8BDCBC} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-10-11] (NVIDIA Corporation)
  247. Task: {85F00F4E-B244-468A-9974-4C72DE1E20CF} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-10-21] (Microsoft Corporation)
  248. Task: {A48F9558-DD43-47A9-8CBC-7CFAF30118B8} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-10-12] (Microsoft Corporation)
  249. Task: {A5710A68-BAA6-4613-9FF8-45AC1764561B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-06-03] (Google Inc.)
  250. Task: {B2694EBD-8289-4C00-8D93-181BCA3EEA5F} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-10-11] (NVIDIA Corporation)
  251. Task: {CBD94D9A-D8E0-413B-9956-F4BAABE781AD} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-10-11] (NVIDIA Corporation)
  252. Task: {D46BBE71-A246-4449-97DD-304F90800F6E} - System32\Tasks\[email protected] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated)
  253. Task: {DFFCCB4D-AF15-4F0E-A63E-9B2A7E861A4B} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-10-11] (NVIDIA Corporation)
  254.  
  255. (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
  256.  
  257. Task: C:\Windows\Tasks\AliUpdater{13F48D5A-AF3B-4953-A887-77E2E479AF4D}.job => C:\Program Files (x86)\AliWangWang\AliTask.exe
  258.  
  259. ==================== Shortcuts & WMI ========================
  260.  
  261. (The entries could be listed to be restored or removed.)
  262.  
  263.  
  264. ==================== Loaded Modules (Whitelisted) ==============
  265.  
  266. 2017-07-13 20:50 - 2017-07-13 20:50 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
  267. 2017-07-13 20:50 - 2017-07-13 20:50 - 001354040 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
  268. 2017-06-03 12:07 - 2017-10-11 09:05 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
  269. 2017-06-03 11:44 - 2017-08-22 07:10 - 000133752 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
  270. 2017-03-19 04:58 - 2017-03-19 04:58 - 000138000 _____ () C:\Windows\SYSTEM32\inputhost.dll
  271. 2017-06-08 04:09 - 2017-06-08 04:09 - 000598528 _____ () C:\Users\justi\AppData\Local\MEGAsync\ShellExtX64.dll
  272. 2017-09-26 02:52 - 2017-09-26 02:52 - 000491600 _____ () C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll
  273. 2017-06-05 14:32 - 2017-10-21 18:11 - 008929464 _____ () C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\1033\GrooveIntlResource.dll
  274. 2017-07-20 00:18 - 2017-07-20 00:18 - 000076456 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll
  275. 2017-03-19 04:59 - 2017-03-19 10:30 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
  276. 2017-09-26 15:16 - 2017-09-21 15:29 - 004022616 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libglesv2.dll
  277. 2017-09-26 15:16 - 2017-09-21 15:29 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libegl.dll
  278. 2017-08-24 13:12 - 2017-08-24 13:13 - 000074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe
  279. 2017-08-24 13:12 - 2017-08-24 13:13 - 000203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
  280. 2017-08-24 13:12 - 2017-08-24 13:13 - 036162048 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkyWrap.dll
  281. 2017-08-24 13:12 - 2017-08-24 13:13 - 002237952 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\skypert.dll
  282. 2017-09-26 02:52 - 2017-09-26 02:52 - 034879568 _____ () C:\Program Files (x86)\Adobe\Adobe Sync\Coresync\Coresync.exe
  283. 2015-05-29 02:32 - 2015-05-29 02:32 - 053302472 _____ () C:\Program Files\Adobe\Adobe Photoshop CC 2015\Required\Plug-Ins\Spaces\libcef.dll
  284. 2015-05-29 02:29 - 2015-05-29 02:29 - 004062408 _____ () C:\Program Files\Adobe\Adobe Photoshop CC 2015\aif.dll
  285. 2017-06-03 12:07 - 2017-10-11 09:05 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
  286. 2017-06-03 12:01 - 2017-09-10 03:25 - 000688416 _____ () C:\Program Files (x86)\Steam\SDL2.dll
  287. 2017-06-03 12:01 - 2017-10-18 05:24 - 002546976 _____ () C:\Program Files (x86)\Steam\video.dll
  288. 2017-06-03 12:01 - 2016-09-01 09:02 - 004969248 _____ () C:\Program Files (x86)\Steam\v8.dll
  289. 2017-06-03 12:01 - 2016-01-27 15:49 - 000491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
  290. 2017-06-03 12:01 - 2016-01-27 15:49 - 000332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
  291. 2017-06-03 12:01 - 2016-01-27 15:49 - 000442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
  292. 2017-06-03 12:01 - 2016-01-27 15:49 - 002549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
  293. 2017-06-03 12:01 - 2016-01-27 15:49 - 000485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
  294. 2017-06-03 12:01 - 2016-09-01 09:02 - 001195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
  295. 2017-06-03 12:01 - 2016-09-01 09:02 - 001563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
  296. 2017-06-03 12:01 - 2017-10-18 05:24 - 000901408 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
  297. 2017-06-03 12:01 - 2016-07-05 06:17 - 000266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
  298. 2017-06-09 20:04 - 2017-09-07 10:04 - 000678400 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\SDL2.dll
  299. 2017-06-03 12:02 - 2017-08-17 06:28 - 073130272 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
  300. 2017-06-03 12:01 - 2015-09-25 07:52 - 000119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
  301. 2017-08-09 14:48 - 2017-08-08 15:13 - 001893880 _____ () C:\Users\justi\AppData\Local\Discord\app-0.0.298\ffmpeg.dll
  302. 2017-08-09 14:48 - 2017-08-09 14:48 - 001577976 _____ () \\?\C:\Users\justi\AppData\Roaming\discord\0.0.298\modules\discord_toaster\discord_toaster.node
  303. 2017-08-09 14:48 - 2017-08-08 15:13 - 001938424 _____ () C:\Users\justi\AppData\Local\Discord\app-0.0.298\libglesv2.dll
  304. 2017-08-09 14:48 - 2017-08-08 15:13 - 000095736 _____ () C:\Users\justi\AppData\Local\Discord\app-0.0.298\libegl.dll
  305. 2017-08-17 16:51 - 2017-08-17 16:51 - 001993184 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll
  306. 2017-08-09 14:48 - 2017-10-08 21:24 - 009722360 _____ () \\?\C:\Users\justi\AppData\Roaming\discord\0.0.298\modules\discord_voice\discord_voice.node
  307. 2017-08-09 14:48 - 2017-08-09 14:48 - 001440248 _____ () \\?\C:\Users\justi\AppData\Roaming\discord\0.0.298\modules\discord_utils\discord_utils.node
  308. 2017-10-24 00:34 - 2017-10-24 00:34 - 000148992 _____ () \\?\C:\Users\justi\AppData\Local\Temp\8E.tmp.node
  309. 2017-08-09 14:48 - 2017-08-09 14:48 - 002658296 _____ () \\?\C:\Users\justi\AppData\Roaming\discord\0.0.298\modules\discord_rpc\discord_rpc.node
  310. 2017-08-09 14:48 - 2017-08-09 14:48 - 002673656 _____ () \\?\C:\Users\justi\AppData\Roaming\discord\0.0.298\modules\discord_contact_import\discord_contact_import.node
  311. 2017-09-20 02:42 - 2017-09-20 02:42 - 067115616 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\libcef.dll
  312. 2016-04-13 16:38 - 2016-04-13 16:38 - 000482304 _____ () C:\Users\justi\AppData\Local\MEGAsync\libsodium.dll
  313. 2017-07-20 00:18 - 2017-07-20 00:18 - 000073384 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll
  314. 2017-09-06 18:11 - 2017-09-06 18:11 - 000118272 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\fs-ext\build\Release\fs-ext.node
  315. 2017-09-06 18:11 - 2017-09-06 18:11 - 000214528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
  316. 2017-09-06 18:11 - 2017-09-06 18:11 - 000117248 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ref\build\Release\binding.node
  317. 2017-09-06 18:11 - 2017-09-06 18:11 - 000125952 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ffi\build\Release\ffi_bindings.node
  318. 2017-09-20 03:04 - 2017-09-20 03:04 - 000099424 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin.dll
  319. 2017-09-06 18:11 - 2017-09-06 18:11 - 000086528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\idle-gc\build\Release\idle-gc.node
  320. 2017-09-12 20:11 - 2017-09-12 20:11 - 000118272 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\fs-ext\build\Release\fs-ext.node
  321. 2017-09-12 20:10 - 2017-09-12 20:10 - 000117760 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ref\build\Release\binding.node
  322. 2017-09-12 20:11 - 2017-09-12 20:11 - 000125440 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ffi\build\Release\ffi_bindings.node
  323. 2017-09-12 20:11 - 2017-09-12 20:11 - 000214528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
  324. 2017-09-20 02:59 - 2017-09-20 02:59 - 000099424 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin.dll
  325. 2017-09-12 20:11 - 2017-09-12 20:11 - 000098816 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\bufferutil\build\Release\bufferutil.node
  326. 2017-09-12 20:11 - 2017-09-12 20:11 - 000086528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\idle-gc\build\Release\idle-gc.node
  327. 2017-06-03 12:07 - 2017-10-11 09:05 - 070805952 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
  328. 2015-05-29 02:32 - 2015-05-29 02:32 - 036732616 _____ () C:\Program Files\Adobe\Adobe Photoshop CC 2015\Required\CEP\CEPHtmlEngine\libcef.dll
  329. 2015-05-29 02:32 - 2015-05-29 02:32 - 001746632 _____ () C:\Program Files\Adobe\Adobe Photoshop CC 2015\Required\CEP\CEPHtmlEngine\ffmpegsumo.dll
  330.  
  331. ==================== Alternate Data Streams (Whitelisted) =========
  332.  
  333. (If an entry is included in the fixlist, only the ADS will be removed.)
  334.  
  335.  
  336. ==================== Safe Mode (Whitelisted) ===================
  337.  
  338. (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
  339.  
  340.  
  341. ==================== Association (Whitelisted) ===============
  342.  
  343. (If an entry is included in the fixlist, the registry item will be restored to default or removed.)
  344.  
  345.  
  346. ==================== Internet Explorer trusted/restricted ===============
  347.  
  348. (If an entry is included in the fixlist, it will be removed from the registry.)
  349.  
  350.  
  351. ==================== Other Areas ============================
  352.  
  353. (Currently there is no automatic fix for this section.)
  354.  
  355. HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\Control Panel\Desktop\\Wallpaper -> d:\downloads\rdq6bea.jpg
  356. DNS Servers: 8.8.8.8 - 8.8.4.4
  357. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
  358. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
  359. Windows Firewall is enabled.
  360.  
  361. ==================== MSCONFIG/TASK MANAGER disabled items ==
  362.  
  363. HKLM\...\StartupApproved\StartupFolder: => "SoftEther VPN Client Manager Startup.lnk"
  364. HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
  365. HKLM\...\StartupApproved\Run: => "iTunesHelper"
  366. HKLM\...\StartupApproved\Run: => "SoftEther VPN Client UI Helper"
  367. HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\...\StartupApproved\Run: => "BingSvc"
  368. HKU\S-1-5-21-3695887035-1542476804-3675477037-1001\...\StartupApproved\Run: => "OneDrive"
  369.  
  370. ==================== FirewallRules (Whitelisted) ===============
  371.  
  372. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  373.  
  374. FirewallRules: [{E017E938-01E4-49E4-AFF4-FD70D80C3789}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
  375. FirewallRules: [{6840A587-3DDE-4052-B519-31A535147400}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
  376. FirewallRules: [{7CD4F6B6-9F31-453B-82EB-AA54433861DE}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
  377. FirewallRules: [{A0B293A1-47AF-40A5-8A06-470A57AB81A2}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
  378. FirewallRules: [{2A770DB2-8308-4BAF-BD65-6609065A4114}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  379. FirewallRules: [{237E8D31-2673-4674-9DE7-78825480C98F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  380. FirewallRules: [{C46C6552-CC73-449D-95AF-DF11BC6E33F3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
  381. FirewallRules: [{7F742643-C870-4B25-9149-7CDFD7A208E4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
  382. FirewallRules: [{FD73B0C9-F050-49E3-9080-ED8E8AAB00C4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
  383. FirewallRules: [{691634CB-37F2-46C3-B178-4AEB692A69FB}] => (Allow) D:\Program Files\qBittorrent\qbittorrent.exe
  384. FirewallRules: [{89CDC718-44E7-4925-AC7B-15BEEE06CDBF}] => (Allow) D:\Program Files\qBittorrent\qbittorrent.exe
  385. FirewallRules: [TCP Query User{5F316F28-4219-4230-8250-15175B236DF6}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
  386. FirewallRules: [UDP Query User{FE05C098-B032-4445-BB48-BB99CF50517B}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
  387. FirewallRules: [TCP Query User{D310A76D-2835-4358-A6FE-8FA566620850}C:\program files (x86)\gigabyte\appcenter\gbupdate.exe] => (Allow) C:\program files (x86)\gigabyte\appcenter\gbupdate.exe
  388. FirewallRules: [UDP Query User{32CD3436-FB18-41E0-8766-A44251A0EF77}C:\program files (x86)\gigabyte\appcenter\gbupdate.exe] => (Allow) C:\program files (x86)\gigabyte\appcenter\gbupdate.exe
  389. FirewallRules: [TCP Query User{F269186C-DFB1-48D4-AC93-487EFD000CDE}C:\program files (x86)\gigabyte\@bios\flashbios.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\flashbios.exe
  390. FirewallRules: [UDP Query User{D02D51B4-E1CC-4CCA-A44D-58368AB48DA2}C:\program files (x86)\gigabyte\@bios\flashbios.exe] => (Allow) C:\program files (x86)\gigabyte\@bios\flashbios.exe
  391. FirewallRules: [TCP Query User{5B2A7582-932C-4A9E-AF0D-A5D1FE8EBBF8}C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe
  392. FirewallRules: [UDP Query User{7C153CA2-7090-4D7E-A0B4-DF72F209B6A6}C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe
  393. FirewallRules: [{DAF495DD-02DD-4430-B3DC-44B3DD2B3A2E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
  394. FirewallRules: [TCP Query User{A425A59E-F5EA-4A4F-A9C7-D880D004183A}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
  395. FirewallRules: [UDP Query User{448CD3CB-BFBF-454A-8C8F-E80E9867E504}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
  396. FirewallRules: [{0FBB73F0-48B2-45D6-8D92-44B03C3A8BB1}] => (Allow) C:\Program Files (x86)\AliWangWang\AliIM.exe
  397. FirewallRules: [{84916D42-7F81-440B-AAF2-E71D8E282296}] => (Allow) C:\Program Files (x86)\AliWangWang\AliIM.exe
  398. FirewallRules: [TCP Query User{A22DB0B2-33C2-4F37-8A3B-8761E8307388}C:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe
  399. FirewallRules: [UDP Query User{B5993628-F336-4CBE-B68D-691D1E408740}C:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo.exe
  400. FirewallRules: [{3DC917D2-2053-4DC2-934A-AB87686A295D}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
  401. FirewallRules: [{B19A6174-BCE9-4D1B-967E-A9775D3FB21A}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
  402. FirewallRules: [{0D5061A7-8D75-4506-93FB-B1EA527F1EE7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
  403. FirewallRules: [{FA8CD9FF-EC25-4999-8D44-D8EDD28A9315}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
  404. FirewallRules: [{BCD91A1C-EE3D-4988-9C24-441205143717}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
  405. FirewallRules: [{8B7EE046-7847-424A-8CA8-98FF6FDCAC9D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
  406. FirewallRules: [{6C2A8B70-842A-41D0-9C42-FBDF81B4B433}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
  407. FirewallRules: [{8A2C3D8E-512A-4C40-9859-A2EA809CAC28}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
  408. FirewallRules: [TCP Query User{12091714-B8BB-4066-A83A-92C96B06B7D2}D:\program files\ellinia v162.4\khaini.exe] => (Allow) D:\program files\ellinia v162.4\khaini.exe
  409. FirewallRules: [UDP Query User{81C37F2A-D7AA-4FE9-8B97-78A589F46AEE}D:\program files\ellinia v162.4\khaini.exe] => (Allow) D:\program files\ellinia v162.4\khaini.exe
  410. FirewallRules: [TCP Query User{9529C29A-1A38-4F04-A4A9-CED0EA4FE014}D:\program files\nexon launcher\maplestory\appdata\aries.exe] => (Allow) D:\program files\nexon launcher\maplestory\appdata\aries.exe
  411. FirewallRules: [UDP Query User{4157EB61-A96C-4B4C-8D3D-30FB23D43088}D:\program files\nexon launcher\maplestory\appdata\aries.exe] => (Allow) D:\program files\nexon launcher\maplestory\appdata\aries.exe
  412. FirewallRules: [{271EB7FA-39F1-4411-A431-789CC53151D7}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe
  413. FirewallRules: [{B31E7EE0-1B3A-464A-B7F1-EB65948F8DC4}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe
  414. FirewallRules: [TCP Query User{9F4492B0-E6C0-408E-A779-634FC6A77D04}D:\program files\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
  415. FirewallRules: [UDP Query User{23450E6B-F943-4011-A27C-BE05E6A08520}D:\program files\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
  416. FirewallRules: [{D8069FD8-E739-4843-82C7-AB21BA3D99C4}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Rust\Rust.exe
  417. FirewallRules: [{CA6B4BA8-75E2-4A64-9A37-E7E58E417BAB}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Rust\Rust.exe
  418. FirewallRules: [{6884BDDE-6976-41E5-8B8B-43DC3B76CF60}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  419. FirewallRules: [{E127C5DC-0B59-47B3-8AE5-984B22053071}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  420. FirewallRules: [{CD9BA5C9-F440-4B5A-933C-1D6B553B1E98}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
  421. FirewallRules: [{F7F5D3DD-1367-4FFE-BDE9-A7C86CBCB6D2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
  422. FirewallRules: [{E1862240-CA7C-4E08-9653-2E15700E29C4}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Foxhole\War.exe
  423. FirewallRules: [{85662EA1-2C2E-4DAD-BCEA-485EF51523DB}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Foxhole\War.exe
  424. FirewallRules: [TCP Query User{419FDE51-F769-4334-8A8D-2031F2FCA4FE}D:\program files\steamlibrary\steamapps\common\foxhole\war\binaries\win64\war-win64-shipping.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\foxhole\war\binaries\win64\war-win64-shipping.exe
  425. FirewallRules: [UDP Query User{68B5764E-2CBB-4D40-BDF5-2CF1E145D9A9}D:\program files\steamlibrary\steamapps\common\foxhole\war\binaries\win64\war-win64-shipping.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\foxhole\war\binaries\win64\war-win64-shipping.exe
  426. FirewallRules: [{242CF9ED-D756-4638-8367-E3E2ECF2A4BE}] => (Allow) C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe
  427. FirewallRules: [{86325F89-5BEB-41D7-893F-CEA218D61F2A}] => (Allow) D:\Program Files\Softether\SoftEther VPN Client\vpnclient.exe
  428. FirewallRules: [{3550FCDC-3EDD-432A-8948-39A0636C7E41}] => (Allow) D:\Program Files\Softether\SoftEther VPN Client\vpnclient_x64.exe
  429. FirewallRules: [{1EB558A7-783C-43DA-AF93-3A97995A9C80}] => (Allow) D:\Program Files\Softether\SoftEther VPN Client\vpncmgr.exe
  430. FirewallRules: [{F92D115C-2FB9-4F90-94D1-671DFC0E2D61}] => (Allow) D:\Program Files\Softether\SoftEther VPN Client\vpncmgr_x64.exe
  431. FirewallRules: [{EF6AC0B4-2ABD-42F7-87F3-F51DC7C2ADF1}] => (Allow) D:\Program Files\Softether\SoftEther VPN Client\vpncmd.exe
  432. FirewallRules: [{CD7AB0F7-6BD0-45CD-ABF4-B4A24FC99669}] => (Allow) D:\Program Files\Softether\SoftEther VPN Client\vpncmd_x64.exe
  433. FirewallRules: [{7CDD9530-BF69-4C92-A689-4DA5FB8EFD75}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
  434. FirewallRules: [{6FC14BF1-6C5C-4B63-9E02-EC4C0365AAB6}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
  435. FirewallRules: [{210999E1-216B-4008-8CDD-FA2EE52D7C14}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
  436. FirewallRules: [{DC4353AD-B217-4148-BDC1-61543EA80D6C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
  437. FirewallRules: [{A25FE8E5-1FAD-4BB2-AA2A-31BAD0C1C7C3}] => (Allow) D:\Program Files\iTunes\iTunes.exe
  438. FirewallRules: [{A12D01EB-7E44-4AD7-BE4E-ACEB97A5CAEB}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
  439. FirewallRules: [TCP Query User{0D1B3561-E39C-451A-A58D-0CA16AE32691}D:\program files\steamlibrary\steamapps\common\dayz\dayz_x64.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\dayz\dayz_x64.exe
  440. FirewallRules: [UDP Query User{CA672630-2662-406F-83DA-CC8D1D5FC712}D:\program files\steamlibrary\steamapps\common\dayz\dayz_x64.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\dayz\dayz_x64.exe
  441. FirewallRules: [TCP Query User{FCF0DD55-E42C-4706-A727-44F5CCBFB7E0}D:\program files\steamlibrary\steamapps\common\dayz\dayz.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\dayz\dayz.exe
  442. FirewallRules: [UDP Query User{055D06D6-B8B2-43E9-8B03-DA134DC3111E}D:\program files\steamlibrary\steamapps\common\dayz\dayz.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\dayz\dayz.exe
  443. FirewallRules: [{FE84212B-0BD6-449D-B552-DC40FB05B486}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
  444. FirewallRules: [{CB7286F8-E3ED-4383-B116-F6E22E3DA899}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
  445. FirewallRules: [{4021E4CB-77F9-460C-8532-31FA56F3BA02}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
  446. FirewallRules: [{27FF6C00-88B5-4A0E-B4C8-33D4C1BDC52A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
  447. FirewallRules: [{4463C441-536F-409F-8710-355A52FC47F2}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
  448. FirewallRules: [{0B968082-FC52-4D5B-81D1-2986E025A0AE}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
  449. FirewallRules: [{9276669B-70E2-41F2-ADDE-07460FD1C3E6}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  450. FirewallRules: [TCP Query User{023643E6-A790-4335-96BA-D81BC3FC8BCC}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
  451. FirewallRules: [UDP Query User{D02DF510-7008-4E47-8A90-AA6633F95B57}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
  452. FirewallRules: [{DA05CEF9-1D09-49A2-A2D2-240CDE01AD4E}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe
  453. FirewallRules: [{9F8FFCCD-69EC-4633-8DEF-52DD3B9F3131}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe
  454. FirewallRules: [{72A324C3-6EC1-48EC-BB77-1E63B3888187}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Arma 3\arma3launcher.exe
  455. FirewallRules: [{E3DB0436-6D95-4880-9197-DA6A44A4D0AA}] => (Allow) D:\Program Files\SteamLibrary\steamapps\common\Arma 3\arma3launcher.exe
  456. FirewallRules: [TCP Query User{92B88E33-9C9A-4F29-B7C2-6EA063099121}D:\program files\steamlibrary\steamapps\common\arma 3\arma3_x64.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\arma 3\arma3_x64.exe
  457. FirewallRules: [UDP Query User{80CBABC1-FE26-40A1-9404-1E1A9A91D23A}D:\program files\steamlibrary\steamapps\common\arma 3\arma3_x64.exe] => (Allow) D:\program files\steamlibrary\steamapps\common\arma 3\arma3_x64.exe
  458. FirewallRules: [{9B9BE0BA-05E9-484F-9162-688B33DB7024}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  459. FirewallRules: [{C6F5EDDB-699A-4A33-8519-2F2B1E89879A}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmgr_x64.exe
  460. FirewallRules: [{94C10ECE-CB71-4F27-9DF9-04FE478B68B7}] => (Allow) C:\Program Files\SoftEther VPN Client\vpnclient.exe
  461. FirewallRules: [{FE98F08A-1326-4FC1-B7D4-DB431AF28A2A}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmgr.exe
  462. FirewallRules: [{CC0E23A8-EA2F-431B-B80B-2F1E01C4AB90}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmd.exe
  463. FirewallRules: [{E29A9008-B6FE-4EAD-82E9-17E8B1A0CC38}] => (Allow) C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe
  464. FirewallRules: [{1CF9757D-DBA6-409F-93F8-37347EC7AB43}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmd_x64.exe
  465.  
  466. ==================== Restore Points =========================
  467.  
  468. 16-10-2017 23:57:10 Installed Minecraft
  469.  
  470. ==================== Faulty Device Manager Devices =============
  471.  
  472.  
  473. ==================== Event log errors: =========================
  474.  
  475. Application errors:
  476. ==================
  477. Error: (10/24/2017 12:46:39 AM) (Source: VsJITDebugger) (EventID: 4096) (User: JUSTIN)
  478. Description: An unhandled exception ('System.IndexOutOfRangeException') occurred in 4h6f6awmv7wz.exe [11492]. Just-In-Time debugging this exception failed with the following error: The remote procedure call failed.
  479.  
  480. Check the documentation index for 'Just-in-time debugging, errors' for more information.
  481.  
  482. Error: (10/24/2017 12:46:39 AM) (Source: Application Hang) (EventID: 1002) (User: )
  483. Description: The program vsjitdebugger.exe version 10.0.30319.1 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
  484.  
  485. Process ID: 1eec
  486.  
  487. Start Time: 01d34c1e6d5f7f5a
  488.  
  489. Termination Time: 2
  490.  
  491. Application Path: C:\Windows\System32\vsjitdebugger.exe
  492.  
  493. Report Id: ba41f90f-b010-4021-98df-cb24735070de
  494.  
  495. Faulting package full name:
  496.  
  497. Faulting package-relative application ID:
  498.  
  499. Error: (10/24/2017 12:34:21 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
  500. Description: License Activation (slui.exe) failed with the following error code:
  501. hr=0x8007232B
  502. Command-line arguments:
  503. RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=6
  504.  
  505. Error: (10/24/2017 12:26:42 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
  506. Description: License Activation (slui.exe) failed with the following error code:
  507. hr=0x8007139F
  508. Command-line arguments:
  509. RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable
  510.  
  511. Error: (10/24/2017 12:24:23 AM) (Source: Bonjour Service) (EventID: 100) (User: )
  512. Description: Task Scheduling Error: m->NextScheduledSPRetry 2219
  513.  
  514. Error: (10/24/2017 12:24:23 AM) (Source: Bonjour Service) (EventID: 100) (User: )
  515. Description: Task Scheduling Error: m->NextScheduledEvent 2219
  516.  
  517. Error: (10/24/2017 12:24:23 AM) (Source: Bonjour Service) (EventID: 100) (User: )
  518. Description: Task Scheduling Error: Continuously busy for more than a second
  519.  
  520. Error: (10/24/2017 12:24:22 AM) (Source: Bonjour Service) (EventID: 100) (User: )
  521. Description: Task Scheduling Error: m->NextScheduledSPRetry 1094
  522.  
  523. Error: (10/24/2017 12:24:22 AM) (Source: Bonjour Service) (EventID: 100) (User: )
  524. Description: Task Scheduling Error: m->NextScheduledEvent 1094
  525.  
  526. Error: (10/24/2017 12:24:22 AM) (Source: Bonjour Service) (EventID: 100) (User: )
  527. Description: Task Scheduling Error: Continuously busy for more than a second
  528.  
  529.  
  530. System errors:
  531. =============
  532. Error: (10/24/2017 12:46:51 AM) (Source: DCOM) (EventID: 10010) (User: JUSTIN)
  533. Description: The server {6F5BF5E0-D729-46DD-891C-167FE3851574} did not register with DCOM within the required timeout.
  534.  
  535. Error: (10/24/2017 12:07:48 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
  536. Description: There was an error while attempting to read the local hosts file.
  537.  
  538. Error: (10/24/2017 12:07:48 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
  539. Description: There was an error while attempting to read the local hosts file.
  540.  
  541. Error: (10/24/2017 12:04:13 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
  542. Description: There was an error while attempting to read the local hosts file.
  543.  
  544. Error: (10/24/2017 12:04:12 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
  545. Description: There was an error while attempting to read the local hosts file.
  546.  
  547. Error: (10/24/2017 12:04:11 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
  548. Description: There was an error while attempting to read the local hosts file.
  549.  
  550. Error: (10/24/2017 12:02:48 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
  551. Description: There was an error while attempting to read the local hosts file.
  552.  
  553. Error: (10/24/2017 12:02:48 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
  554. Description: There was an error while attempting to read the local hosts file.
  555.  
  556. Error: (10/24/2017 12:02:14 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
  557. Description: There was an error while attempting to read the local hosts file.
  558.  
  559. Error: (10/24/2017 12:02:14 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT AUTHORITY)
  560. Description: There was an error while attempting to read the local hosts file.
  561.  
  562.  
  563. CodeIntegrity:
  564. ===================================
  565. Date: 2017-08-04 15:24:59.609
  566. Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
  567.  
  568. Date: 2017-08-01 17:15:13.398
  569. Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
  570.  
  571. Date: 2017-06-03 14:48:10.342
  572. Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
  573.  
  574.  
  575. ==================== Memory info ===========================
  576.  
  577. Processor: AMD Ryzen 7 1700 Eight-Core Processor
  578. Percentage of memory in use: 38%
  579. Total physical RAM: 16335.46 MB
  580. Available physical RAM: 10093.9 MB
  581. Total Virtual: 18767.46 MB
  582. Available Virtual: 9928.54 MB
  583.  
  584. ==================== Drives ================================
  585.  
  586. Drive c: () (Fixed) (Total:232.33 GB) (Free:45.7 GB) NTFS
  587. Drive d: (New Volume) (Fixed) (Total:931.39 GB) (Free:805.57 GB) NTFS
  588. Drive e: () (Removable) (Total:0.05 GB) (Free:0.04 GB) FAT
  589. Drive f: () (Removable) (Total:0.1 GB) (Free:0.09 GB) FAT
  590.  
  591. ==================== MBR & Partition Table ==================
  592.  
  593. ========================================================
  594. Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 00000000)
  595.  
  596. Partition: GPT.
  597.  
  598. ========================================================
  599. Disk: 1 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 00000000)
  600.  
  601. Partition: GPT.
  602.  
  603. ========================================================
  604. Disk: 2 (Size: 14.4 GB) (Disk ID: 00000000)
  605.  
  606. Partition: GPT.
  607.  
  608. ==================== End of Addition.txt ============================
Add Comment
Please, Sign In to add comment