Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-09-2024
- Ran by User (23-10-2024 09:54:22)
- Running from C:\Users\User\Downloads
- Microsoft Windows 11 IoT Enterprise LTSC Version 24H2 26100.2033 (X64) (2024-07-29 04:04:37)
- Boot Mode: Normal
- ==========================================================
- ==================== Accounts: =============================
- (If an entry is included in the fixlist, it will be removed.)
- Administrator (S-1-5-21-1048007778-3054934571-2141486015-500 - Administrator - Enabled) => C:\Users\Administrator
- DefaultAccount (S-1-5-21-1048007778-3054934571-2141486015-503 - Limited - Disabled)
- Guest (S-1-5-21-1048007778-3054934571-2141486015-501 - Limited - Disabled)
- User (S-1-5-21-1048007778-3054934571-2141486015-1001 - Limited - Enabled) => C:\Users\User
- WDAGUtilityAccount (S-1-5-21-1048007778-3054934571-2141486015-504 - Limited - Disabled)
- ==================== Security Center ========================
- (If an entry is included in the fixlist, it will be removed.)
- AV: Bitdefender Antivirus (Enabled - Up to date) {0F59B032-EA77-E3A8-2382-74A4346E5522}
- AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
- AS: Bitdefender Antispyware (Enabled - Up to date) {B43851D6-CC4D-EC26-1932-4FD64FE91F9F}
- AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
- ==================== Installed Programs ======================
- (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
- 7-Zip 24.08 (x64) (HKLM\...\7-Zip) (Version: 24.08 - Igor Pavlov)
- AAC Audiobook Creator (HKLM-x32\...\{EE8CC3CD-8F6C-4F7F-8139-1A04B5993F93}) (Version: 3.0.2001 - Peter Tondl)
- Adobe Acrobat DC (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 21.007.20099 - Adobe Systems Incorporated)
- Adobe Digital Editions 4.5 (HKLM-x32\...\Adobe Digital Editions 4.5) (Version: 4.5.11 - Adobe Systems Incorporated)
- Adobe Photoshop CS (HKLM-x32\...\{EFB21DE7-8C19-4A88-BB28-A766E16493BC}) (Version: CS - Adobe Systems, Inc.)
- Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601091}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
- Angry Birds (HKLM-x32\...\{01509AB1-84BB-4AB9-A142-38AFA0BBDA25}) (Version: 4.0.0 - Rovio Entertainment Ltd.)
- Angry Birds Rio (HKLM-x32\...\{B4C29016-8195-4D07-80F1-6DFB5437C0B6}) (Version: 2.2.0 - Rovio Entertainment Ltd.)
- Angry Birds Space (HKLM-x32\...\{FA4E4BC2-335B-4453-A381-0D111937E748}) (Version: 2.0.0 - Rovio Entertainment Ltd.)
- Ant Video downloader (Native messaging host) (HKLM-x32\...\{3CF7B02A-4304-4B22-B1B5-48C0CE014BA3}) (Version: 4.18 - Ant.com)
- Any Video Converter 7.1.6 (HKLM-x32\...\Any Video Converter) (Version: 7.1.6 - Anvsoft)
- AnyDesk (HKLM-x32\...\AnyDesk) (Version: ad 8.1.0 - AnyDesk Software GmbH)
- Apple Mobile Device Support (HKLM\...\{AF0C3D84-6909-4B48-A335-2EC35087BAB0}) (Version: 18.0.0.32 - Apple Inc.)
- Apple Software Update (HKLM-x32\...\{B292D163-23D2-4523-A699-1ABEC1875609}) (Version: 2.7.0.3 - Apple Inc.)
- Ashampoo Burning Studio FREE (HKLM-x32\...\{91B33C97-91F8-FFB3-581B-BC952C901685}_is1) (Version: 1.23.9 - Ashampoo GmbH & Co. KG)
- Audacity 3.6.4 (HKLM\...\Audacity_is1) (Version: 3.6.4 - Audacity Team)
- BilibiliVideoDownload 3.3.3 (HKLM\...\50e0c43e-f321-5932-8e13-ae1413facecd) (Version: 3.3.3 - wangyu)
- Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 27.0.1.286 - Bitdefender)
- Bitdefender Antivirus Free (HKLM\...\Bitdefender) (Version: 27.0.18.96 - Bitdefender)
- Bitwarden (HKLM\...\173a9bac-6f0d-50c4-8202-4744c69d091a) (Version: 2024.10.1 - Bitwarden Inc.)
- BleachBit (HKLM-x32\...\BleachBit) (Version: 4.6.0.2537 - BleachBit)
- Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
- Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 130.1.71.114 - Brave Software Inc)
- Bumble (HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\b39112d52f010923f9de419033e1be46) (Version: 1.0 - BraveSoftware\Brave-Browser)
- BurnAware Free 15.6 (HKLM-x32\...\BurnAware Free_is1) (Version: - Burnaware)
- calibre 64bit (HKLM\...\{A9956B3C-5D7A-4CAA-B257-66CA2AEAFC30}) (Version: 7.18.0 - Kovid Goyal)
- Cheat Engine 7.4 (HKLM\...\Cheat Engine_is1) (Version: - Cheat Engine)
- Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 4.10.02086 - Cisco Systems, Inc.)
- Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\{703B5A06-CCE1-466B-AAC4-49B9FE780A1E}) (Version: 4.10.02086 - Cisco Systems, Inc.) Hidden
- Cisco Packet Tracer 8.1.0 64Bit (HKLM\...\Cisco Packet Tracer 8.1.0 64Bit_is1) (Version: - Cisco Systems, Inc.)
- Cisco Packet Tracer 8.2.2 64Bit (HKLM\...\Cisco Packet Tracer 8.2.2 64Bit_is1) (Version: 8.2.2.400 - Cisco Systems, Inc.)
- Core Temp 1.17.1 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.17.1 - ALCPU)
- CPUID CPU-Z 2.11 (HKLM\...\CPUID CPU-Z_is1) (Version: 2.11 - CPUID, Inc.)
- CrystalDiskInfo 9.4.4 (HKLM\...\CrystalDiskInfo_is1) (Version: 9.4.4 - Crystal Dew World)
- CrystalDiskMark 8.0.5 (HKLM\...\CrystalDiskMark8_is1) (Version: 8.0.5 - Crystal Dew World)
- D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
- Dashboard (HKLM-x32\...\Western Digital SSD Dashboard) (Version: 3.4.2.9 - Western Digital Corporation)
- deemix-gui (HKLM\...\7ea5d267-de32-53ab-b27a-3748ad144b22) (Version: 2022.5.28-r206.a752a63e0e - RemixDev)
- DeepL (HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\https%3a##appdownload.deepl.com#windows#0install#deepl.xml) (Version: - )
- Discord (HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\Discord) (Version: 1.0.9004 - Discord Inc.)
- DownloadHelper CoApp (HKLM-x32\...\DownloadHelper CoApp) (Version: 2.0.19.0 - ACLAP)
- draw.io 22.0.2 (HKLM\...\27a75bf3-be48-5c35-934f-8491cf108abe) (Version: 22.0.2 - JGraph)
- DVDStyler (HKLM\...\DVDStyler_is1) (Version: 3.3.0 beta 3 - Thüring IT-Consulting)
- EaseUS Partition Master (HKLM-x32\...\EaseUS Partition Master_is1) (Version: - EaseUS)
- Eclipse Temurin JDK with Hotspot 11.0.20.1+1 (x64) (HKLM\...\{0E103F4D-775A-4358-A5BF-19D1CAD013A9}) (Version: 11.0.20.101 - Eclipse Adoptium)
- eMule (HKLM-x32\...\eMule) (Version: - )
- ENE_DRAM_RGB_AURA42 (HKLM\...\{BC5E0A82-C638-44CB-8129-20C8ED70DE7A}) (Version: 1.00.02 - Ene Tech.) Hidden
- ENE_DRAM_RGB_AURA42 (HKLM-x32\...\{f3d7fb09-b93f-4c01-a765-0b0adc5bc746}) (Version: 1.00.02 - Ene Tech.) Hidden
- ENE_QSI_Loki_HAL (HKLM\...\{BDE43F26-5917-44F8-B86A-F1D9A6B80B32}) (Version: 1.0.3.0 - ENE TECHNOLOGY INC.) Hidden
- ENE_QSI_Loki_HAL (HKLM-x32\...\{205ef3a8-937b-43cb-90fc-2f58f71408d8}) (Version: 1.0.3.0 - ENE TECHNOLOGY INC.) Hidden
- FileZilla 3.67.1 (HKLM-x32\...\FileZilla Client) (Version: 3.67.1 - Tim Kosse)
- foobar2000 v2.1.6 (x64) (HKLM\...\foobar2000 (x64)) (Version: 2.1.6 - Peter Pawlowski)
- FormatFactory 5.12.2.0 (HKLM-x32\...\FormatFactory) (Version: 5.12.2.0 - Free Time)
- fre:ac v1.1.6 (HKLM\...\fre:ac v1.1.6) (Version: 1.1.6 - )
- Free Download Manager (HKLM\...\{0C1D4CF2-5575-4786-834C-B0FC977E9714}}_is1) (Version: 6.16.2.4586 - Softdeluxe)
- freedomgpt (HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\FreedomGPT) (Version: 1.1.3 - Age of AI, LLC)
- Gaupol 1.3.1 (HKLM-x32\...\Gaupol_is1) (Version: - Osmo Salomaa)
- Git (HKLM\...\Git_is1) (Version: 2.46.2 - The Git Development Community)
- Google Chrome (HKLM-x32\...\Google Chrome) (Version: 129.0.6668.101 - Google LLC)
- Google Earth Pro (HKLM\...\{3470AD08-85F2-4B1D-8487-FC4750732087}) (Version: 7.3.6.9796 - Google)
- Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.101.0 - Google LLC) Hidden
- GSmartControl (HKLM\...\GSmartControl) (Version: 1.1.4 - Alexander Shaduri)
- HandBrake 1.8.2 (HKLM-x32\...\HandBrake) (Version: 1.8.2 - )
- Hold 'Em, InkBall and Tinker (Microsoft Games) (HKLM-x32\...\VistaGames-HoldEm-Inkball-Tinker) (Version: 1.0.0 - )
- Intel(R) Chipset Device Software (HKLM\...\{8E7A81EF-0B97-4CD2-94E5-CD9E5A2767F4}) (Version: 10.1.18698.8258 - Intel Corporation) Hidden
- Intel(R) Chipset Device Software (HKLM-x32\...\{80ec5470-ac51-4956-b2dc-87dc2cdaa04b}) (Version: 10.1.18698.8258 - Intel(R) Corporation)
- Intel(R) Graphics Driver Software (HKLM-x32\...\{c49f9463-8ca3-4422-82b0-c06c7a9640ed}) (Version: 3.11.1.0 - Intel) Hidden
- Intel(R) Network Connections 26.2.0.1 (HKLM\...\{AC44C09E-6D45-4F0F-8749-C3DF69A55FDE}) (Version: 26.2.0.1 - Intel) Hidden
- Intel(R) Network Connections 26.2.0.1 (HKLM\...\PROSetDX) (Version: 26.2.0.1 - Intel)
- Intel(R) Serial IO (HKLM\...\{43A88DDF-D337-4F85-A622-836D9B4BDC36}) (Version: 30.100.2104.1 - Intel Corporation) Hidden
- Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.2104.1 - Intel Corporation)
- iPod Support (HKLM\...\{DEC0F5DF-216B-4D66-B3DD-B1BDDC7A5BF8}) (Version: 12.11.3.7 - Apple Inc.)
- IrfanView 4.67 (64-bit) (HKLM\...\IrfanView64) (Version: 4.67 - Irfan Skiljan)
- iTunes (HKLM\...\{9525F9AD-AC2D-4282-9E46-CF6998B7D7F3}) (Version: 12.13.3.2 - Apple Inc.)
- Java 8 Update 421 (64-bit) (HKLM\...\{77924AE4-039E-4CA4-87B4-2F64180421F0}) (Version: 8.0.4210.9 - Oracle Corporation)
- KDE Connect (HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\KDE Connect) (Version: 21.12.3 - KDE e.V.)
- Kobo (HKLM-x32\...\Kobo) (Version: 4.30.16653 - Rakuten Kobo Inc.)
- Libgen Desktop 1.4.1 (64-bit) (HKLM\...\{88846ABC-26D2-4038-B51A-94A0920E73D2}) (Version: 1.4.1 - Libgen Apps)
- LockHunter 3.4, 32/64 bit (HKLM\...\LockHunter_is1) (Version: 3.4.3.146 - Crystal Rich Ltd)
- Logitech G HUB (HKLM\...\{521c89be-637f-4274-a840-baaf7460c2b2}) (Version: 2024.7.625196 - Logitech)
- LonelyScreen 1.2 (HKLM-x32\...\LonelyScreen AirPlay Receiver_is1) (Version: 1.2 - IMTIGER Technologies Inc.)
- LonelyScreen 1.2.16 (HKLM-x32\...\LonelyScreen_is1) (Version: 1.2.16 - IMTIGER Technologies Inc.)
- Macrium Reflect Free (HKLM\...\{A302C59F-C733-4DA0-9611-1286A9051D15}) (Version: 8.0.7783 - Paramount Software (UK) Ltd.) Hidden
- Macrium Reflect Free (HKLM\...\MacriumReflect) (Version: v8.0.7783 - Paramount Software (UK) Ltd.)
- Magic ISO Maker v5.5 (build 0281) (HKLM-x32\...\Magic ISO Maker v5.5 (build 0281)) (Version: - )
- Malwarebytes version 5.1.11.139 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.1.11.139 - Malwarebytes)
- MATLAB R2023a (HKLM\...\MATLAB R2023a) (Version: 9.14 - MathWorks)
- MDF to ISO version 1.0 (HKLM-x32\...\{79DDA36F-B19E-4293-A4F2-FA3EC1C06E6E}_is1) (Version: 1.0 - mdftoiso.com)
- MediaInfo 24.06 (HKLM\...\MediaInfo) (Version: 24.06 - MediaArea.net)
- Mendix 10.0.0 (HKLM\...\ae5092253728523c0a2c2bc1f2d7ab43ed8d26b3_is1) (Version: 10.0.0.9976 - Mendix)
- Mendix Version Selector (HKLM\...\{31547454-38A5-4CAF-B870-F68CE5DEDBC0}) (Version: 46.0 - Mendix)
- Microsoft .NET Host - 6.0.35 (x64) (HKLM\...\{C59601A1-771B-426B-A9F7-6CACCAC4DB4E}) (Version: 48.140.21458 - Microsoft Corporation) Hidden
- Microsoft .NET Host - 8.0.10 (x64) (HKLM\...\{3A80EBC5-6B68-49B9-BEBD-E1A6C966B416}) (Version: 64.40.21578 - Microsoft Corporation) Hidden
- Microsoft .NET Host FX Resolver - 6.0.35 (x64) (HKLM\...\{E91F8AC1-4917-455E-AACA-B40B193C7A62}) (Version: 48.140.21458 - Microsoft Corporation) Hidden
- Microsoft .NET Host FX Resolver - 8.0.10 (x64) (HKLM\...\{062CD1ED-0A3C-483C-A871-50173240C545}) (Version: 64.40.21578 - Microsoft Corporation) Hidden
- Microsoft .NET Runtime - 6.0.35 (x64) (HKLM\...\{C79F6EEC-3A2B-487D-A3B6-EDF4057B4E4B}) (Version: 48.140.21458 - Microsoft Corporation) Hidden
- Microsoft .NET Runtime - 8.0.10 (x64) (HKLM\...\{15B7D0C2-F209-4C28-AF1C-FD8326F4D58A}) (Version: 64.40.21578 - Microsoft Corporation) Hidden
- Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 130.0.2849.46 - Microsoft Corporation)
- Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 129.0.2792.89 - Microsoft Corporation)
- Microsoft Office Professional Plus 2019 - en-us (HKLM\...\ProPlus2019Retail - en-us) (Version: 16.0.17726.20206 - Microsoft Corporation)
- Microsoft Office 专业增强版 2019 - zh-cn (HKLM\...\ProPlus2019Retail - zh-cn) (Version: 16.0.17726.20206 - Microsoft Corporation)
- Microsoft Office 專業增強版 2019 - zh-tw (HKLM\...\ProPlus2019Retail - zh-tw) (Version: 16.0.17726.20206 - Microsoft Corporation)
- Microsoft OneDrive (HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\OneDriveSetup.exe) (Version: 24.192.0923.0006 - Microsoft Corporation)
- Microsoft Project - en-us (HKLM\...\ProjectStd2019Retail - en-us) (Version: 16.0.17726.20206 - Microsoft Corporation)
- Microsoft Project - zh-cn (HKLM\...\ProjectStd2019Retail - zh-cn) (Version: 16.0.17726.20206 - Microsoft Corporation)
- Microsoft Project - zh-tw (HKLM\...\ProjectStd2019Retail - zh-tw) (Version: 16.0.17726.20206 - Microsoft Corporation)
- Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
- Microsoft Sync Framework 2.0 Core Components (x64) ENU (HKLM\...\{8CCBEC22-D2DB-4DC9-A58A-E1A1F3A38C8A}) (Version: 2.0.1578.0 - Microsoft Corporation)
- Microsoft Sync Framework 2.0 Provider Services (x64) ENU (HKLM\...\{03AC245F-4C64-425C-89CF-7783C1D3AB2C}) (Version: 2.0.1578.0 - Microsoft Corporation)
- Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.24.25506 - Microsoft)
- Microsoft Visio - en-us (HKLM\...\VisioStd2019Retail - en-us) (Version: 16.0.17726.20206 - Microsoft Corporation)
- Microsoft Visio - zh-cn (HKLM\...\VisioStd2019Retail - zh-cn) (Version: 16.0.17726.20206 - Microsoft Corporation)
- Microsoft Visio - zh-tw (HKLM\...\VisioStd2019Retail - zh-tw) (Version: 16.0.17726.20206 - Microsoft Corporation)
- Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
- Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
- Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
- Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
- Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
- Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
- Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
- Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
- Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
- Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
- Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.40.33810 (HKLM-x32\...\{5af95fd8-a22e-458f-acee-c61bd787178e}) (Version: 14.40.33810.0 - Microsoft Corporation)
- Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.40.33810 (HKLM-x32\...\{47109d57-d746-4f8b-9618-ed6a17cc922b}) (Version: 14.40.33810.0 - Microsoft Corporation)
- Microsoft Visual C++ 2022 X64 Additional Runtime - 14.40.33810 (HKLM\...\{59CED48F-EBFE-480C-8A38-FC079C2BEC0F}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
- Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.40.33810 (HKLM\...\{B8B3BB4A-A10D-4F51-91B7-A64FFAC31EA7}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
- Microsoft Visual C++ 2022 X86 Additional Runtime - 14.40.33810 (HKLM-x32\...\{5EA6C998-D5AC-4ED9-89C3-9F25B17CCD3D}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
- Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.40.33810 (HKLM-x32\...\{0C3457A0-3DCE-4A33-BEF0-9B528C557771}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
- Microsoft Visual Studio Code (HKLM\...\{EA457B21-F73E-494C-ACAB-524FDE069978}_is1) (Version: 1.93.1 - Microsoft Corporation)
- Microsoft Windows Desktop Runtime - 6.0.35 (x64) (HKLM\...\{8AA69679-CCD6-42D9-BCDA-99BE386D57B7}) (Version: 48.140.21525 - Microsoft Corporation) Hidden
- Microsoft Windows Desktop Runtime - 6.0.35 (x64) (HKLM-x32\...\{ed3bbfea-cc20-425e-b845-bc087d129675}) (Version: 6.0.35.34113 - Microsoft Corporation)
- Microsoft Windows Desktop Runtime - 8.0.10 (x64) (HKLM\...\{614C9740-3FD4-4788-A277-7C35CB4C323B}) (Version: 64.40.21605 - Microsoft Corporation) Hidden
- Microsoft Windows Desktop Runtime - 8.0.10 (x64) (HKLM-x32\...\{d990096d-6282-42c5-8d16-71272c5be274}) (Version: 8.0.10.34118 - Microsoft Corporation)
- Movie Maker (HKLM-x32\...\{38F03569-A636-4CF3-BDDE-032C8C251304}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
- Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
- Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 115.15.0 - Mozilla)
- Mozilla Thunderbird (x64 en-US) (HKLM\...\Mozilla Thunderbird 115.15.0 (x64 en-US)) (Version: 115.15.0 - Mozilla)
- Mp3tag v3.27 (HKLM\...\Mp3tag) (Version: 3.27 - Florian Heidenreich)
- MP4Tools v3.8 (HKLM-x32\...\MP4Tools_is1) (Version: - Thüring IT-Consulting)
- MSVCRT (HKLM-x32\...\{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}) (Version: 15.4.2862.0708 - Microsoft) Hidden
- MSVCRT110 (HKLM-x32\...\{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}) (Version: 16.4.1108.0727 - Microsoft) Hidden
- MSVCRT110_amd64 (HKLM\...\{E9FA781F-3E80-4399-825A-AD3E11C28C77}) (Version: 16.4.1109.0912 - Microsoft) Hidden
- MuseScore 3 (HKLM\...\{FF67E071-104C-4C42-9301-184442745671}) (Version: 3.6.2.548021803 - Werner Schweer and Others)
- MusicBrainz Picard (HKLM-x32\...\MusicBrainz Picard) (Version: 2.12.3 - MusicBrainz)
- Nicotine+ (HKLM\...\{075970AD-1904-4A56-BDE6-D0816649C558}) (Version: 3.2.2 - Nicotine+ Team)
- nLite 1.4.9.3 (HKLM-x32\...\nLite_is1) (Version: 1.4.9.3 - Dino Nuhagic (nuhi))
- Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.7 - Notepad++ Team)
- Novabench (HKLM\...\{32D01ECE-310C-4220-B2E9-AC4B1B34BAC7}) (Version: 4.0.9 - Novawave Inc.)
- Npcap (HKLM-x32\...\NpcapInst) (Version: 1.71 - Nmap Project)
- OBS Studio (HKLM-x32\...\OBS Studio) (Version: 30.2.3 - OBS Project)
- Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.17628.20110 - Microsoft Corporation) Hidden
- Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.17726.20206 - Microsoft Corporation) Hidden
- Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0404-1000-0000000FF1CE}) (Version: 16.0.17628.20110 - Microsoft Corporation) Hidden
- Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0804-1000-0000000FF1CE}) (Version: 16.0.17628.20110 - Microsoft Corporation) Hidden
- OpenDNS Updater 2.2.1 (HKLM-x32\...\OpenDNS Updater) (Version: 2.2.1 - )
- OpenShot Video Editor 3.2.1 (HKLM\...\{4BB0DCDC-BC24-49EC-8937-72956C33A470}_is1) (Version: 3.2.1 - OpenShot Studios, LLC)
- Oracle VM VirtualBox 7.0.20 (HKLM\...\{95DEBF01-7029-4E37-BDB1-94EFEA3B263C}) (Version: 7.0.20 - Oracle and/or its affiliates)
- OverDrive for Windows (HKLM-x32\...\{FF27E73D-C30A-4F32-B2D7-22069F01DDB9}) (Version: 3.6.0 - OverDrive, Inc.)
- PDF ePub DRM Removal (HKLM-x32\...\PDFDRM) (Version: 1.4.1 - eBook Converter)
- PerformanceTest v10.1 (HKLM\...\PerformanceTest 10_is1) (Version: 10.2.1001.0 - Passmark Software)
- Photo Common (HKLM-x32\...\{CAA0F57A-BA8C-4AD8-AA03-F32B0E4F5623}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
- Photo Gallery (HKLM-x32\...\{07AAB66E-4718-422D-9218-4AFB3C922A71}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
- Photo Gallery (HKLM-x32\...\{C992FFE0-AC32-4FA9-BC9A-F1637B9E655D}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
- Poe (HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\Poe) (Version: 1.1.13 - Quora, Inc.)
- PotPlayer-64 bit (HKLM\...\PotPlayer64) (Version: 24.08.27.0 - Kakao Corp.)
- Pretty Good Solitaire version 14.3.0 (HKLM-x32\...\Pretty Good Solitaire_is1) (Version: 14.3.0 - Goodsol Development Inc.)
- Private Internet Access (HKLM\...\{33023371-7761-4F81-BBB1-0E0D0D175ACF}) (Version: 3.5.7+08120 - Private Internet Access, Inc.)
- Private Internet Access WinTUN Driver (HKLM\...\{0419A0C0-4CC8-459E-9BAE-F3BF5D2E2CCB}) (Version: 1.0 - Private Internet Access, Inc.) Hidden
- PySol Fan Club edition v.2.14.1 (HKLM-x32\...\PySol Fan Club edition_is1) (Version: - )
- Python 3.10.1 (64-bit) (HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\{af822d5e-759c-4e77-9696-3cc835cd54a9}) (Version: 3.10.1150.0 - Python Software Foundation)
- Python 3.10.1 Core Interpreter (64-bit) (HKLM\...\{862831D8-A2FD-4ED5-B9B9-C8C3ECA1CAE8}) (Version: 3.10.1150.0 - Python Software Foundation) Hidden
- Python 3.10.1 Development Libraries (64-bit) (HKLM\...\{A17FBEFC-ABDD-4E5E-AAA5-CC503ACF648F}) (Version: 3.10.1150.0 - Python Software Foundation) Hidden
- Python 3.10.1 Documentation (64-bit) (HKLM\...\{DD75DEC5-89C0-4E54-88A2-83DCCA026F3A}) (Version: 3.10.1150.0 - Python Software Foundation) Hidden
- Python 3.10.1 Executables (64-bit) (HKLM\...\{4F07CBC9-1051-41FC-978D-EECA76E4D547}) (Version: 3.10.1150.0 - Python Software Foundation) Hidden
- Python 3.10.1 pip Bootstrap (64-bit) (HKLM\...\{167746E3-B9B3-4964-803A-F893F1FC56C9}) (Version: 3.10.1150.0 - Python Software Foundation) Hidden
- Python 3.10.1 Standard Library (64-bit) (HKLM\...\{98A2C72D-7929-414D-995B-4E47D8307C93}) (Version: 3.10.1150.0 - Python Software Foundation) Hidden
- Python 3.10.1 Tcl/Tk Support (64-bit) (HKLM\...\{5A807757-F64E-46D3-ABD1-B4907BB75B72}) (Version: 3.10.1150.0 - Python Software Foundation) Hidden
- Python 3.10.1 Test Suite (64-bit) (HKLM\...\{0393EBB7-8F16-42DC-9B63-F1552F481B92}) (Version: 3.10.1150.0 - Python Software Foundation) Hidden
- Python 3.10.1 Utility Scripts (64-bit) (HKLM\...\{FD9B0798-B88D-4148-9159-6206EACD7C47}) (Version: 3.10.1150.0 - Python Software Foundation) Hidden
- Python 3.11.1 (64-bit) (HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\{fca95908-8c70-405d-9e72-cd746e2f7786}) (Version: 3.11.1150.0 - Python Software Foundation)
- Python 3.11.1 Core Interpreter (64-bit) (HKLM\...\{5D1EFF51-4740-4E62-8E49-11C13DEC34C3}) (Version: 3.11.1150.0 - Python Software Foundation) Hidden
- Python 3.11.1 Development Libraries (64-bit) (HKLM\...\{988799D6-A7CE-4F51-89AF-1E4A64FA7ECA}) (Version: 3.11.1150.0 - Python Software Foundation) Hidden
- Python 3.11.1 Documentation (64-bit) (HKLM\...\{5EB7FFE8-5B05-4DD3-9DE0-D0F20D93FA6C}) (Version: 3.11.1150.0 - Python Software Foundation) Hidden
- Python 3.11.1 Executables (64-bit) (HKLM\...\{A7DE96A8-2F75-44B2-B46E-5D50DE5B1B80}) (Version: 3.11.1150.0 - Python Software Foundation) Hidden
- Python 3.11.1 pip Bootstrap (64-bit) (HKLM\...\{C5FAF3D9-A03D-4F6A-AAC9-87735DDA5DCF}) (Version: 3.11.1150.0 - Python Software Foundation) Hidden
- Python 3.11.1 Standard Library (64-bit) (HKLM\...\{21EEFB31-6A96-4CAE-9A3B-B7FD6374C155}) (Version: 3.11.1150.0 - Python Software Foundation) Hidden
- Python 3.11.1 Tcl/Tk Support (64-bit) (HKLM\...\{66CA643F-68B2-4063-8F87-34D48A2C49ED}) (Version: 3.11.1150.0 - Python Software Foundation) Hidden
- Python 3.11.1 Test Suite (64-bit) (HKLM\...\{EFFC2C23-AEE2-4867-998C-5F5A902496C0}) (Version: 3.11.1150.0 - Python Software Foundation) Hidden
- Python 3.11.1 Utility Scripts (64-bit) (HKLM\...\{E63D4F21-1B1F-43DC-9347-4FB51A71704C}) (Version: 3.11.1150.0 - Python Software Foundation) Hidden
- Python Launcher (HKLM-x32\...\{8A19B72D-62A8-4198-BEBD-CAEF117194C8}) (Version: 3.11.8009.0 - Python Software Foundation)
- qBittorrent (HKLM-x32\...\qBittorrent) (Version: 4.6.7 - The qBittorrent project)
- Razer Synapse (HKLM-x32\...\Razer Synapse) (Version: 3.9.0806.081316 - Razer Inc.)
- Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9279.1 - Realtek Semiconductor Corp.)
- Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.051.0811.2021 - Realtek)
- Revo Uninstaller 2.5.0 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.5.0 - VS Revo Group, Ltd.)
- Ruby 2.7.5-1-x64-msvcrt with MSYS2 (HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\RubyInstaller-2.7-x64-mingw32_is1) (Version: 2.7.5-1 - RubyInstaller Team)
- Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.7.59.0 - Samsung Electronics Co., Ltd.)
- Sandboxie-Plus v1.14.9 (HKLM\...\Sandboxie-Plus_is1) (Version: 1.14.9 - hxxp://xanasoft.com/)
- SeaTools for Windows 1.4.0.7 (HKLM-x32\...\SeaTools for Windows) (Version: 1.4.0.7 - Seagate Technology)
- Shark007 ADVANCED x64Components (HKLM\...\ADVANCED x64Components_is1) (Version: 16.2.0.0 - Shark007)
- Shotcut (HKLM\...\Shotcut) (Version: 22.12.21 - Meltytech, LLC)
- Sigil 2.0.2 (HKLM\...\Sigil_is1) (Version: 2.0.2 - Sigil-Ebook)
- Signal 7.22.2 (HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\7d96caee-06e6-597c-9f2f-c7bb2e0948b4) (Version: 7.22.2 - Signal Messenger, LLC)
- Simple Sticky Notes 6.6 (HKLM-x32\...\Simple Sticky Notes_is1) (Version: - Simnet Ltd.)
- SMPlayer 24.5.0 (x64) (HKLM\...\SMPlayer) (Version: 24.5.0 - Ricardo Villalba)
- SoftEther VPN Client (HKLM\...\softether_sevpnclient) (Version: 4.38.9760 - SoftEther VPN Project)
- Software Update 5.53.0.52 (HKLM-x32\...\Software Update) (Version: 5.53.0.52 - Glarysoft Ltd)
- SoftwareUpdater 1.19.1220.69 (HKLM-x32\...\{84DEE841-D842-45F5-A638-CDE2C38E0A48}_is1) (Version: 1.19.1220.69 - eSupport.com, Inc.)
- SolSuite 2021 2021.5 (HKLM-x32\...\SolSuite 2021_is1) (Version: 2021.5 - LRepacks)
- SoulseekQt version 2019.7.22 (HKLM-x32\...\{8A4E1646-488C-4E5B-AC31-F784400E8D2D}_is1) (Version: 2019.7.22 - Soulseek LLC)
- Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform)
- SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
- Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.9.85.5 - Safer-Networking Ltd.)
- SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 10.0.1268 - SUPERAntiSpyware.com)
- SymMover (HKLM-x32\...\SymMover) (Version: - )
- SyncToy 2.1 (x64) (HKLM\...\{88DAAF05-5A72-46D2-A7C5-C3759697E943}) (Version: 2.1.0 - Microsoft)
- TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.42.5 - TeamViewer)
- TED Notepad (HKLM-x32\...\TED Notepad) (Version: 6.3.1 - Medvedik, Juraj Simlovic)
- Telegram Desktop (HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 4.15.2 - Telegram FZ-LLC)
- Tera Term version 5.0 r11000-20231015_192624 (HKLM-x32\...\{07A7E17A-F6D6-44A7-82E6-6BEE528CCA2A}_is1) (Version: 5.0 r11000-20231015_192624 - TeraTerm Project)
- TeraCopy (HKLM\...\{DF5325DF-1F43-4282-85D5-1CA3353E6B13}) (Version: 3.17 - Code Sector)
- TreeSize Free V4.7.3 (64 bit) (HKLM\...\TreeSize Free_is1) (Version: 4.7.3 - JAM Software)
- Unchecky v1.2 (HKLM-x32\...\Unchecky) (Version: 1.2 - Reason Software Company Inc.)
- Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
- VdhCoApp 1.6.3 (HKLM\...\weh-iss-net.downloadhelper.coapp_is1) (Version: - DownloadHelper)
- Vividl (HKLM\...\{D050F0D8-5C8E-4273-BA11-78063C45A873}) (Version: 0.8.0 - Bluegrams)
- VLC media player (HKLM\...\VLC media player) (Version: 3.0.21 - VideoLAN)
- Waterfox (x64 en-US) (HKLM\...\Waterfox 128.3.0 (x64 en-US)) (Version: 6.5.0-beta-2 - BrowserWorks)
- Weasel (HKLM-x32\...\Weasel) (Version: 0.15.0.0 - 式恕堂)
- Winaero Tweaker (HKLM\...\Winaero Tweaker_is1) (Version: 1.63.0.0 - Winaero)
- WinBox for 86Box version 1.1.0.352 (HKLM-x32\...\{D3D646C1-1D59-4F32-B244-C41F695BC8E9}_is1) (Version: 1.1.0.352 - Laci bá')
- WinDjView 2.1 (HKLM\...\WinDjView) (Version: 2.1 - Andrew Zhezherun)
- Windows 10 Update Assistant (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.19041.2183 - Microsoft Corporation)
- Windows 7 Games for Windows 11, 10 and 8 (HKLM\...\Win7Games) (Version: 3.1 - hxxp://winaero.com)
- Windows Live Communications Platform (HKLM-x32\...\{41C61308-6CFD-4D54-AB6A-7136ED08A18E}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
- Windows Live Essentials (HKLM-x32\...\{66B5819D-DE70-42BE-B40F-978FBA12452E}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
- Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
- Windows Live Installer (HKLM-x32\...\{659CB81C-B54E-4DF1-B618-F35777393A54}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
- Windows Live Photo Common (HKLM-x32\...\{1D6432B4-E24D-405E-A4AB-D7E6D088CBC9}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
- Windows Live PIMT Platform (HKLM-x32\...\{B2611F8A-EFE7-4E88-875D-19F0EFAE87E4}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
- Windows Live SOXE (HKLM-x32\...\{CDC1AB00-01FF-4FC7-816A-16C67F0923C0}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
- Windows Live SOXE Definitions (HKLM-x32\...\{D1893000-EA77-493C-8DDD-E262436E959B}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
- Windows Live UX Platform (HKLM-x32\...\{00F9DB8C-65D7-4D47-AB5F-F698EE38580D}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
- Windows Live UX Platform Language Pack (HKLM-x32\...\{6522F5F9-411B-4513-A75B-CEA00395F032}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
- Windows Subsystem for Linux (HKLM\...\{57CD6412-C4AC-431F-8753-46A620EF3A4E}) (Version: 2.2.4.0 - Microsoft Corporation) Hidden
- Windows Subsystem for Linux Update (HKLM\...\{F8474A47-8B5D-4466-ACE3-78EAB3BF21A8}) (Version: 5.10.102.1 - Microsoft Corporation)
- WinImage (HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\WinImage) (Version: - )
- WinRAR 7.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 7.01.0 - win.rar GmbH)
- WinSCP 6.3.5 (HKLM-x32\...\winscp3_is1) (Version: 6.3.5 - Martin Prikryl)
- Wireshark 4.4.0 x64 (HKLM-x32\...\Wireshark) (Version: 4.4.0 - The Wireshark developer community, hxxps://www.wireshark.org)
- YouTube Album Downloader version 1.7 (HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\{0B1509C3-099B-478F-89D9-9E12713773C7}_is1) (Version: 1.7 - Krehn Solutions)
- YouTube Music (HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\6e4e93d54f6fc73bd681bcba0009027e) (Version: 1.0 - BraveSoftware\Brave-Browser)
- YouTube Music Desktop App 1.13.0 (HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\afca255d-79c9-539f-84c6-b3a7619889d5) (Version: 1.13.0 - Adler Luiz)
- yt-dlg (HKLM\...\{D4456EC7-2BFF-42FF-BDDB-8EC77CEA4808}) (Version: 1.8.4 - yt-dlg)
- 谷歌拼音输入法 2.7 (HKLM\...\GooglePinyin2) (Version: - Google Inc.)
- Packages:
- =========
- @{MicrosoftWindows.Client.AIX_1000.26100.17.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.AIX/resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.AIX_cw5n1h2txyewy [2024-10-18] (Microsoft Windows)
- @{MicrosoftWindows.Client.AIX_1000.26100.20.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.AIX/resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.AIX_cw5n1h2txyewy [2024-10-18] (Microsoft Windows)
- @{MicrosoftWindows.Client.AIX_1000.26100.29.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.AIX/resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.AIX_cw5n1h2txyewy [2024-10-18] (Microsoft Windows)
- @{MicrosoftWindows.Client.AIX_1000.26100.3.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.AIX/resources/ProductPkgDisplayName} -> C:\Windows\SystemApps\MicrosoftWindows.Client.AIX_cw5n1h2txyewy [2024-10-18] (Microsoft Windows)
- @{MicrosoftWindows.Client.OOBE_1000.26100.1.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.OOBE/resources/ProductPkgDisplayName} -> C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy [2024-10-18] (Microsoft Windows)
- @{MicrosoftWindows.Client.Photon_1000.26100.1.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/resources/ProductPkgDisplayName} -> C:\Windows\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy [2024-10-18] (Microsoft Windows)
- @{MicrosoftWindows.Client.Photon_1000.26100.2.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy [2024-10-18] (Microsoft Windows)
- @{MicrosoftWindows.Client.Photon_1000.26100.3.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy [2024-10-18] (Microsoft Windows)
- @{MicrosoftWindows.Client.Photon_1000.26100.4.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.Photon/resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy [2024-10-18] (Microsoft Windows)
- @{MicrosoftWindows.LKG.AccountsService_1000.26100.1742.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.LKG.AccountsService/resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\LKG\MicrosoftWindows.LKG.AccountsService_cw5n1h2txyewy [2024-10-18] (Microsoft Windows)
- @{MicrosoftWindows.LKG.IrisService_1000.26100.1742.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.LKG.IrisService/resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\LKG\MicrosoftWindows.LKG.IrisService_cw5n1h2txyewy [2024-10-18] (Microsoft Windows)
- AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5635.0_x64__8j3eq9eme6ctt [0000-00-00] (INTEL CORP) [Startup Task]
- Bitdefender CL Contextual Menu -> C:\Program Files\Bitdefender\Bitdefender Security App [2024-10-23] (Bitdefender)
- Debian -> C:\Program Files\WindowsApps\TheDebianProject.DebianGNULinux_1.16.0.0_x64__76v4gfsz19hv4 [0000-00-00] (The Debian Project)
- Microsoft Advertising SDK for JavaScript -> C:\Program Files\WindowsApps\Microsoft.Advertising.JavaScript_10.1805.2.0_x64__8wekyb3d8bbwe [0000-00-00] (Microsoft Corporation) [MS Ad]
- Microsoft Advertising SDK for JavaScript -> C:\Program Files\WindowsApps\Microsoft.Advertising.JavaScript_10.1805.2.0_x86__8wekyb3d8bbwe [0000-00-00] (Microsoft Corporation) [MS Ad]
- Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [0000-00-00] (Microsoft Corporation) [MS Ad]
- Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [0000-00-00] (Microsoft Corporation) [MS Ad]
- Microsoft Teams -> C:\Program Files\WindowsApps\MSTeams_24257.205.3165.2029_x64__8wekyb3d8bbwe [0000-00-00] (Microsoft) [Startup Task]
- Microsoft.AV1VideoExtension -> C:\Program Files\WindowsApps\Microsoft.AV1VideoExtension_1.2.2331.0_x64__8wekyb3d8bbwe [0000-00-00] (Microsoft Corporation)
- Microsoft.Windows.AugLoop.CBS -> C:\Windows\SystemApps\Microsoft.Windows.AugLoop.CBS_8wekyb3d8bbwe [2024-07-29] (Microsoft Corporation)
- Mp3tag -> C:\Program Files\Mp3tag [2024-08-11] (Florian Heidenreich)
- Notepad++ -> C:\Program Files\Notepad++\contextMenu [2024-09-27] (Notepad++)
- Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.51.324.0_x64__dt26b99r8h8gj [0000-00-00] (Realtek Semiconductor Corp)
- WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2440.9.0_x64__cv1g1gvanyjgm [0000-00-00] (WhatsApp Inc.) [Startup Task]
- Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\LKG\MicrosoftWindows.LKG.AccountsService_cw5n1h2txyewy [2024-10-18] (Microsoft Windows)
- Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\LKG\MicrosoftWindows.LKG.IrisService_cw5n1h2txyewy [2024-10-18] (Microsoft Windows)
- Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\LKG\MicrosoftWindows.LKG.TwinSxS_cw5n1h2txyewy [2024-10-18] (Microsoft Windows)
- Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.AIX_cw5n1h2txyewy [2024-10-18] (Microsoft Windows)
- Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy [2024-10-18] (Microsoft Windows)
- Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Photon_cw5n1h2txyewy [2024-10-18] (Microsoft Windows)
- Windows Package Manager Source (platform) V2 -> C:\Program Files\WindowsApps\Microsoft.Winget.Platform.Source_2024.619.2424.30_neutral__8wekyb3d8bbwe [0000-00-00] (Microsoft Corporation)
- WinRAR -> C:\Program Files\WinRAR [2024-07-29] (win.rar GmbH)
- ==================== Custom CLSID (Whitelisted): ==============
- (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
- CustomCLSID: HKU\S-1-5-21-1048007778-3054934571-2141486015-1001_Classes\CLSID\{04271989-C4D2-BB4E-D55B-EFE29F961D86} -> [OneDrive - Swinburne University] => C:\Users\User\OneDrive - Swinburne University [2024-04-11 11:01]
- CustomCLSID: HKU\S-1-5-21-1048007778-3054934571-2141486015-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\User\AppData\Local\Microsoft\TeamsMeetingAdd-in\1.24.25506\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
- CustomCLSID: HKU\S-1-5-21-1048007778-3054934571-2141486015-1001_Classes\CLSID\{1a46400f-4c81-802a-c2c1-1e9a687a9340}\localserver32 -> C:\Program Files\HandBrake\HandBrake.exe (HandBrake Team) [File not signed]
- CustomCLSID: HKU\S-1-5-21-1048007778-3054934571-2141486015-1001_Classes\CLSID\{227C9E8F-71A1-4B23-9076-682A1A8EAAED}\localserver32 -> c:\program files\macrium\common\reflectmonitor.exe (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd)
- CustomCLSID: HKU\S-1-5-21-1048007778-3054934571-2141486015-1001_Classes\CLSID\{3B864B7E-881A-41D6-B3F5-5DDE7A9A0151}\InprocServer32 -> C:\Program Files\Waterfox\notificationserver.dll (BrowserWorks Ltd -> Mozilla Foundation)
- CustomCLSID: HKU\S-1-5-21-1048007778-3054934571-2141486015-1001_Classes\CLSID\{b72e6f5e-f6e0-a9eb-461b-6118363bd15c}\localserver32 -> "C:\Users\User\AppData\Local\0install.net\implementations\sha256new_7ATQFYMYISD5LU42STURHNI33TRSMJBHVQPLEAO3EX4R5WPI6GTQ\DeepL.exe" -ToastActivated => No File
- CustomCLSID: HKU\S-1-5-21-1048007778-3054934571-2141486015-1001_Classes\CLSID\{d1b22d3d-8585-53a6-acb3-0e803c7e8d2a}\localserver32 -> "C:\Users\User\AppData\Local\Microsoft\Teams\current\Teams.exe" --toast => No File
- CustomCLSID: HKU\S-1-5-21-1048007778-3054934571-2141486015-1001_Classes\CLSID\{eb1fdd5b-8f70-4b5a-b230-998a2dc19303}\localserver32 -> C:\Users\User\AppData\Local\KDE Connect\bin\SnoreToast.exe (K Desktop Environment e.V. -> )
- ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2024-08-12] (Igor Pavlov) [File not signed]
- ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2021-10-05] (Adobe Inc. -> Adobe Systems Inc.)
- ContextMenuHandlers1: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx_108.dll [2022-04-19] (Free Time) [File not signed]
- ContextMenuHandlers1: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => C:\Program Files\LockHunter\LHShellExt64.dll [2021-06-24] (Crystal Rich Ltd -> Crystal Rich Ltd)
- ContextMenuHandlers1: [MagicISO] -> {DB85C504-C730-49DD-BEC1-7B39C6103B7A} => C:\Program Files (x86)\MagicISO\misosh64.dll [2008-05-23] (MagicISO, Inc.) [File not signed]
- ContextMenuHandlers1: [ReflectShellExt] -> {DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611} => C:\Program Files\Macrium\Reflect\RContextMenu.dll [2023-11-30] (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd)
- ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
- ContextMenuHandlers1: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
- ContextMenuHandlers1: [TeraCopy] -> {2386CB87-96FF-473D-A009-957E3BFE6F88} => C:\Program Files\TeraCopy\Context.dll [2021-04-22] (Code Sector -> Code Sector)
- ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2024-05-12] (win.rar GmbH -> Alexander Roshal)
- ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2024-05-12] (win.rar GmbH -> Alexander Roshal)
- ContextMenuHandlers2: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => C:\Program Files\LockHunter\LHShellExt64.dll [2021-06-24] (Crystal Rich Ltd -> Crystal Rich Ltd)
- ContextMenuHandlers2: [ReflectShellExt] -> {DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611} => C:\Program Files\Macrium\Reflect\RContextMenu.dll [2023-11-30] (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd)
- ContextMenuHandlers2: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
- ContextMenuHandlers2: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
- ContextMenuHandlers2: [TeraCopy] -> {2386CB87-96FF-473D-A009-957E3BFE6F88} => C:\Program Files\TeraCopy\Context.dll [2021-04-22] (Code Sector -> Code Sector)
- ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-09-10] (Malwarebytes Inc. -> Malwarebytes)
- ContextMenuHandlers3: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
- ContextMenuHandlers3: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
- ContextMenuHandlers3: [UnlockerShellExtension] -> {DDE4BEEB-DDE6-48fd-8EB5-035C09923F83} => C:\Program Files\Unlocker\UnlockerCOM.dll [2010-07-15] (Empty Loop -> )
- ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2024-08-12] (Igor Pavlov) [File not signed]
- ContextMenuHandlers4: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx_108.dll [2022-04-19] (Free Time) [File not signed]
- ContextMenuHandlers4: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => C:\Program Files\LockHunter\LHShellExt64.dll [2021-06-24] (Crystal Rich Ltd -> Crystal Rich Ltd)
- ContextMenuHandlers4: [MagicISO] -> {DB85C504-C730-49DD-BEC1-7B39C6103B7A} => C:\Program Files (x86)\MagicISO\misosh64.dll [2008-05-23] (MagicISO, Inc.) [File not signed]
- ContextMenuHandlers4: [TeraCopy] -> {2386CB87-96FF-473D-A009-957E3BFE6F88} => C:\Program Files\TeraCopy\Context.dll [2021-04-22] (Code Sector -> Code Sector)
- ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2024-08-12] (Igor Pavlov) [File not signed]
- ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2021-10-05] (Adobe Inc. -> Adobe Systems Inc.)
- ContextMenuHandlers6: [MagicISO] -> {DB85C504-C730-49DD-BEC1-7B39C6103B7A} => C:\Program Files (x86)\MagicISO\misosh64.dll [2008-05-23] (MagicISO, Inc.) [File not signed]
- ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-09-10] (Malwarebytes Inc. -> Malwarebytes)
- ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
- ContextMenuHandlers6: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
- ContextMenuHandlers6: [TeraCopy] -> {2386CB87-96FF-473D-A009-957E3BFE6F88} => C:\Program Files\TeraCopy\Context.dll [2021-04-22] (Code Sector -> Code Sector)
- ContextMenuHandlers6: [UnlockerShellExtension] -> {DDE4BEEB-DDE6-48fd-8EB5-035C09923F83} => C:\Program Files\Unlocker\UnlockerCOM.dll [2010-07-15] (Empty Loop -> )
- ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2024-05-12] (win.rar GmbH -> Alexander Roshal)
- ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2024-05-12] (win.rar GmbH -> Alexander Roshal)
- ==================== Codecs (Whitelisted) ====================
- ==================== Shortcuts & WMI ========================
- (The entries could be listed to be restored or removed.)
- Shortcut: C:\Users\User\Desktop\Tartube.lnk -> C:\Users\User\AppData\Local\Tartube\msys64\home\user\tartube\tartube_64bit.bat ()
- Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tartube\Tartube.lnk -> C:\Users\User\AppData\Local\Tartube\msys64\home\user\tartube\tartube_64bit.bat ()
- ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\188f5ec9d11ded56\Profile 2 - Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) -> --profile-directory="Profile 1"
- ==================== Loaded Modules (Whitelisted) =============
- 2023-02-06 04:24 - 2023-02-06 04:24 - 003047424 _____ () [File not signed] C:\Program Files (x86)\Rime\weasel-0.15.0\rime.dll
- 2021-12-30 19:37 - 2021-12-30 19:37 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\Root\Office16\AppVIsvSubsystems64.dll
- 2021-12-30 19:37 - 2021-12-30 19:37 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\Root\Office16\c2r64.dll
- 2024-04-13 15:13 - 2024-03-27 23:03 - 000170472 _____ (Private Internet Access, Inc. -> ) [File not signed] C:\Program Files\Private Internet Access\kapps_core.dll
- 2024-04-13 15:13 - 2024-03-27 23:03 - 000386536 _____ (Private Internet Access, Inc. -> ) [File not signed] C:\Program Files\Private Internet Access\kapps_regions.dll
- 2024-04-13 15:13 - 2024-03-27 23:03 - 000307688 _____ (Private Internet Access, Inc. -> ) [File not signed] C:\Program Files\Private Internet Access\pia-clientlib.dll
- 2024-04-13 15:13 - 2024-03-27 23:03 - 001129960 _____ (Private Internet Access, Inc. -> ) [File not signed] C:\Program Files\Private Internet Access\pia-commonlib.dll
- 2024-04-13 15:13 - 2024-03-27 23:03 - 000066536 _____ (Private Internet Access, Inc. -> ) [File not signed] C:\Program Files\Private Internet Access\pia-winrtsupport.dll
- 2024-04-13 15:13 - 2024-03-27 23:03 - 000566248 _____ (Private Internet Access, Inc. -> Microsoft Corporation) [File not signed] C:\Program Files\Private Internet Access\MSVCP140.dll
- 2024-04-13 15:13 - 2024-03-27 23:03 - 000024040 _____ (Private Internet Access, Inc. -> Microsoft Corporation) [File not signed] C:\Program Files\Private Internet Access\MSVCP140_1.dll
- 2024-04-13 15:13 - 2024-03-27 23:03 - 000097256 _____ (Private Internet Access, Inc. -> Microsoft Corporation) [File not signed] C:\Program Files\Private Internet Access\VCRUNTIME140.dll
- 2024-04-13 15:13 - 2024-03-27 23:03 - 000037352 _____ (Private Internet Access, Inc. -> Microsoft Corporation) [File not signed] C:\Program Files\Private Internet Access\VCRUNTIME140_1.dll
- 2024-04-13 15:13 - 2024-03-27 23:03 - 006025704 _____ (Private Internet Access, Inc. -> The Qt Company Ltd.) [File not signed] C:\Program Files\Private Internet Access\Qt5Core.dll
- 2024-04-13 15:13 - 2024-03-27 23:03 - 007010280 _____ (Private Internet Access, Inc. -> The Qt Company Ltd.) [File not signed] C:\Program Files\Private Internet Access\Qt5Gui.dll
- 2024-04-13 15:13 - 2024-03-27 23:03 - 001342440 _____ (Private Internet Access, Inc. -> The Qt Company Ltd.) [File not signed] C:\Program Files\Private Internet Access\Qt5Network.dll
- 2024-04-13 15:13 - 2024-03-27 23:03 - 003593704 _____ (Private Internet Access, Inc. -> The Qt Company Ltd.) [File not signed] C:\Program Files\Private Internet Access\Qt5Qml.dll
- 2024-04-13 15:13 - 2024-03-27 23:03 - 000440808 _____ (Private Internet Access, Inc. -> The Qt Company Ltd.) [File not signed] C:\Program Files\Private Internet Access\Qt5QmlModels.dll
- 2024-04-13 15:13 - 2024-03-27 23:03 - 000059368 _____ (Private Internet Access, Inc. -> The Qt Company Ltd.) [File not signed] C:\Program Files\Private Internet Access\Qt5QmlWorkerScript.dll
- 2024-04-13 15:13 - 2024-03-27 23:03 - 004150760 _____ (Private Internet Access, Inc. -> The Qt Company Ltd.) [File not signed] C:\Program Files\Private Internet Access\Qt5Quick.dll
- 2024-04-13 15:13 - 2024-03-27 23:03 - 000175592 _____ (Private Internet Access, Inc. -> The Qt Company Ltd.) [File not signed] C:\Program Files\Private Internet Access\Qt5QuickControls2.dll
- 2024-04-13 15:13 - 2024-03-27 23:03 - 001115624 _____ (Private Internet Access, Inc. -> The Qt Company Ltd.) [File not signed] C:\Program Files\Private Internet Access\Qt5QuickTemplates2.dll
- 2024-04-13 15:13 - 2024-03-27 23:03 - 000332776 _____ (Private Internet Access, Inc. -> The Qt Company Ltd.) [File not signed] C:\Program Files\Private Internet Access\Qt5Svg.dll
- 2024-04-13 15:13 - 2024-03-27 23:03 - 005500392 _____ (Private Internet Access, Inc. -> The Qt Company Ltd.) [File not signed] C:\Program Files\Private Internet Access\Qt5Widgets.dll
- 2024-04-13 15:13 - 2024-03-27 23:03 - 000239080 _____ (Private Internet Access, Inc. -> The Qt Company Ltd.) [File not signed] C:\Program Files\Private Internet Access\Qt5WinExtras.dll
- 2022-04-24 09:54 - 2024-05-23 18:00 - 002489856 _____ (SQLite Development Team) [File not signed] C:\Program Files (x86)\Simnet\Simple Sticky Notes\sqlite3.dll
- 2024-09-18 17:05 - 2019-12-21 12:55 - 001380864 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\Spybot - Search & Destroy 2\libeay32.dll
- 2024-09-18 17:05 - 2019-12-21 12:55 - 000337920 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\Spybot - Search & Destroy 2\ssleay32.dll
- 2023-06-07 00:19 - 2023-06-07 00:19 - 001930240 _____ (winsparkle.org) [File not signed] C:\Program Files (x86)\Rime\weasel-0.15.0\WinSparkle.dll
- ==================== Alternate Data Streams (Whitelisted) ========
- (If an entry is included in the fixlist, only the ADS will be removed.)
- AlternateDataStreams: C:\Users\User\Downloads\00031183-68bc-4b0c-ae53-32f685d9169b.tmp:BDU [0]
- AlternateDataStreams: C:\Users\User\Downloads\Mendix-10.0.0.9976-Setup.exe:BDU [0]
- AlternateDataStreams: C:\Users\User\Downloads\Mendix-10.8.0.28569-Setup.exe:BDU [0]
- AlternateDataStreams: C:\Users\User\Downloads\supermium_126_64_setup.exe:BDU [0]
- ==================== Safe Mode (Whitelisted) ==================
- (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
- HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\cdd.dll => ""="Driver"
- HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{13cfe1b1-6b17-424c-ac3f-16ace8733898} => ""="I3C devices"
- HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\cdd.dll => ""="Driver"
- HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ExecutionContext.sys => ""="Driver"
- HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\netadaptercx.sys => ""="Driver"
- HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WinHttpAutoProxySvc => ""="Service"
- HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{13cfe1b1-6b17-424c-ac3f-16ace8733898} => ""="I3C devices"
- ==================== Association (Whitelisted) =================
- ==================== Internet Explorer (Whitelisted) =============
- HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
- HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
- HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
- HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
- HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
- HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
- BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_421\bin\ssv.dll [2024-06-05] (Oracle America, Inc. -> Oracle Corporation)
- BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2021-02-15] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
- BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_421\bin\jp2ssv.dll [2024-06-05] (Oracle America, Inc. -> Oracle Corporation)
- BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2021-02-15] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
- BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-08-17] (Microsoft Corporation -> Microsoft Corporation)
- BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2021-02-15] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
- BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2021-02-15] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
- Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2021-02-15] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
- Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2021-02-15] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
- Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-17] (Microsoft Corporation -> Microsoft Corporation)
- Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-17] (Microsoft Corporation -> Microsoft Corporation)
- Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-17] (Microsoft Corporation -> Microsoft Corporation)
- Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-17] (Microsoft Corporation -> Microsoft Corporation)
- Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-17] (Microsoft Corporation -> Microsoft Corporation)
- Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-17] (Microsoft Corporation -> Microsoft Corporation)
- Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-17] (Microsoft Corporation -> Microsoft Corporation)
- Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-17] (Microsoft Corporation -> Microsoft Corporation)
- (If an entry is included in the fixlist, it will be removed from the registry.)
- IE trusted site: HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\sharepoint.com -> hxxps://liveswinburneeduau-files.sharepoint.com
- ==================== Hosts content: =========================
- (If needed Hosts: directive could be included in the fixlist to reset Hosts.)
- 2018-09-15 18:31 - 2024-10-23 08:35 - 000002940 _____ C:\WINDOWS\system32\drivers\etc\hosts
- 127.0.0.1 loopback.int
- 127.0.0.1 www.loopback.int
- 127.0.0.1 na1r.services.adobe.com
- 127.0.0.1 hlrcv.stage.adobe.com
- 127.0.0.1 lmlicenses.wip4.adobe.com
- 127.0.0.1 lm.licenses.adobe.com
- 127.0.0.1 activate.adobe.com
- 127.0.0.1 practivate.adobe.com
- 127.0.0.1 genuine.adobe.com
- 127.0.0.1 prod.adobegenuine.com
- 127.0.0.1 23.74.204.49
- 127.0.0.1 2.20.235.247
- 127.0.0.1 216.58.214.40
- 127.0.0.1 151.101.12.143
- 127.0.0.1 66.117.29.4
- 127.0.0.1 63.140.41.167
- 127.0.0.1 13.80.12.54
- 127.0.0.1 239.255.255.250
- 0.0.0.0
- 0.0.0.0 browser.events.data.msn.com
- 0.0.0.0 bzib.nelreports.net
- 0.0.0.0 deff.nelreports.net
- 127.0.0.1 qvdt3feo.com
- 0.0.0.0 0.0.0.0 # fix for traceroute and netstat display anomaly
- 0.0.0.0 tracking.opencandy.com.s3.amazonaws.com
- 0.0.0.0 media.opencandy.com
- 0.0.0.0 cdn.opencandy.com
- ==================== Other Areas ===========================
- (Currently there is no automatic fix for this section.)
- HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\VMware\VMware Workstation\bin\;C:\Program Files (x86)\Common Files\Oracle\Java\java8path;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ffmpeg\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files\Microsoft VS Code\bin;C:\Program Files\dotnet\;C:\Program Files (x86)\Windows Live\Shared;C:\Users\Administrator\AppData\Local\Microsoft\WindowsApps;C:\Program Files\Calibre2\;C:\Program Files\MATLAB\R2023a\bin;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\Git\cmd
- HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\User\AppData\Roaming\Waterfox\Desktop Background.bmp
- DNS Servers: 8.8.8.8 - 8.8.4.4
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
- Windows Firewall is enabled.
- Network Binding:
- =============
- Ethernet 4: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 -> vpnva64-6.sys
- VMware Network Adapter VMnet1: VMware Virtual Ethernet Adapter for VMnet1 -> vmnetadapter.sys
- VPN - VPN Client: VPN Client Adapter - VPN -> Neo6_x64_VPN.sys
- Ethernet 2: Intel(R) Ethernet Connection (10) I219-V -> e1d68x64.sys
- VirtualBox Host-Only Network: VirtualBox Host-Only Ethernet Adapter -> VBoxNetAdp6.sys
- Local Area Connection: Private Internet Access Network Adapter -> tap-pia-0901.sys
- VMware Network Adapter VMnet8: VMware Virtual Ethernet Adapter for VMnet8 -> vmnetadapter.sys
- Ethernet: Realtek PCIe 2.5GbE Family Controller -> rt640x64.sys
- vmware_bridge: VMware Bridge Protocol
- vms_vsf: Hyper-V Virtual Switch Extension Filter
- oracle_VBoxNetLwf: VirtualBox NDIS6 Bridged Networking Driver
- INSECURE_NPCAP: Npcap Packet Driver (NPCAP)
- ms_l1vhlwf: Nested Network Virtualization
- SeLow: SoftEther Lightweight Network Protocol
- vms_vsp: Hyper-V Virtual Switch Extension Protocol
- ==================== MSCONFIG/TASK MANAGER disabled items ==
- (If an entry is included in the fixlist, it will be removed.)
- HKLM\...\StartupApproved\StartupFolder: => "AnyDesk.lnk"
- HKLM\...\StartupApproved\StartupFolder: => "Adobe Gamma Loader.lnk"
- HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
- HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"
- HKLM\...\StartupApproved\Run32: => "IseUI"
- HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
- HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\StartupApproved\StartupFolder: => "Send to OneNote.lnk"
- HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\StartupApproved\StartupFolder: => "DeepL auto-start.lnk"
- HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\StartupApproved\StartupFolder: => "KDE Connect.lnk"
- HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\StartupApproved\StartupFolder: => "pia-client.exe - Shortcut.lnk"
- HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\StartupApproved\Run: => "Discord"
- HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_C46CFC0629905CC775E70B50EA8A519C"
- HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\StartupApproved\Run: => "com.squirrel.Poe.Poe"
- HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\StartupApproved\Run: => "Microsoft.Lists"
- HKU\S-1-5-21-1048007778-3054934571-2141486015-1001\...\StartupApproved\Run: => "SUPERAntiSpyware"
- ==================== FirewallRules (Whitelisted) ================
- (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
- FirewallRules: [{6AEBE693-393A-47FD-86BC-CFAE836E0057}] => (Allow) C:\Program Files\WindowsApps\MSTeams_24060.2623.2790.8046_x64__8wekyb3d8bbwe\ms-teams.exe => No File
- FirewallRules: [{FE493C9A-3EE9-4358-8D69-47BACB17AC03}] => (Allow) C:\Program Files\WindowsApps\MSTeams_24060.2623.2790.8046_x64__8wekyb3d8bbwe\ms-teams.exe => No File
- FirewallRules: [{F9B1F3E8-32AA-4B87-881B-F086AE48D638}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe => No File
- FirewallRules: [{5DEAC677-70FF-4F18-B48A-D991C179AC28}] => (Allow) C:\Program Files\Waterfox\waterfox.exe (BrowserWorks Ltd -> BrowserWorks Ltd)
- FirewallRules: [{A6CE19CA-BEB2-4C48-A6F0-E7DCE719C9DD}] => (Allow) C:\Program Files\Waterfox\waterfox.exe (BrowserWorks Ltd -> BrowserWorks Ltd)
- FirewallRules: [{9AFAC10C-49E4-48AE-9AE2-F1397D2CC532}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe (The qBittorrent Project) [File not signed]
- FirewallRules: [{7AD6CDEC-71C4-4969-8D64-B892209E3B25}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe (The qBittorrent Project) [File not signed]
- FirewallRules: [{4D9DD1C9-CEDA-4789-8B9D-AA747419CA86}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
- FirewallRules: [{8DE35394-E9AB-4EF7-888E-EBA89B529541}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
- FirewallRules: [{F670F570-BD6C-4B10-9B15-51C661F6B50A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
- FirewallRules: [{A66771E4-E465-4F9E-93AA-C616284C5380}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
- FirewallRules: [{191D5B42-EA65-49C0-8221-855C9AB5A26D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
- FirewallRules: [{7D3DE7B6-08FE-4C1F-B614-4779BFAE3F29}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
- FirewallRules: [{1BD0F755-8BEB-4403-B1A8-3A07628A7B30}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
- FirewallRules: [{D592E67C-616C-4DEE-BCC3-8E0745FD38CC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
- FirewallRules: [TCP Query User{4D3B50F2-658D-40CD-B5FF-366B745409CB}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
- FirewallRules: [UDP Query User{411C0CB6-97EB-4798-87DE-4F48243F3BCF}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
- FirewallRules: [{6B5A937F-C341-4B67-99CD-7F920DDDD169}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => No File
- FirewallRules: [{0DCA6780-8871-4EAC-AE09-6D575F861C0A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => No File
- FirewallRules: [TCP Query User{972ACA05-1F49-40EE-91AD-3623BCC9BD77}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
- FirewallRules: [UDP Query User{C1338672-110C-4783-9611-7497E98AFCE8}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
- FirewallRules: [TCP Query User{AFA4A8A3-ED60-4F66-AABE-2292AD822412}C:\program files\kdenlive\bin\kdenlive.exe] => (Allow) C:\program files\kdenlive\bin\kdenlive.exe => No File
- FirewallRules: [UDP Query User{79EDF960-608F-44EA-9C34-C632FBD9BC58}C:\program files\kdenlive\bin\kdenlive.exe] => (Allow) C:\program files\kdenlive\bin\kdenlive.exe => No File
- FirewallRules: [TCP Query User{7EF04B9A-6EF3-4003-B9D2-B924D08A7872}E:\hfs.exe] => (Allow) E:\hfs.exe (rejetto) [File not signed]
- FirewallRules: [UDP Query User{2E3F3AD1-4F11-4411-9252-1E1F8E8D896E}E:\hfs.exe] => (Allow) E:\hfs.exe (rejetto) [File not signed]
- FirewallRules: [{C5467F41-1CFE-43CF-8D6E-369FAE8F02D9}] => (Allow) LPort=26822
- FirewallRules: [TCP Query User{14A62398-F05C-464F-9622-2EEA16627056}C:\users\user\downloads\malwarebytes premium v4.2.0.82 + fix (lifetime activation) {crackshash}\activator fix\activator fix\licensemalwarebytes.exe] => (Allow) C:\users\user\downloads\malwarebytes premium v4.2.0.82 + fix (lifetime activation) {crackshash}\activator fix\activator fix\licensemalwarebytes.exe => No File
- FirewallRules: [UDP Query User{A57932F1-CF3D-45A7-91ED-3EDC097B7325}C:\users\user\downloads\malwarebytes premium v4.2.0.82 + fix (lifetime activation) {crackshash}\activator fix\activator fix\licensemalwarebytes.exe] => (Allow) C:\users\user\downloads\malwarebytes premium v4.2.0.82 + fix (lifetime activation) {crackshash}\activator fix\activator fix\licensemalwarebytes.exe => No File
- FirewallRules: [TCP Query User{F95E12FD-D78A-4A2A-9D91-07509BEC9715}C:\program files (x86)\soulseekqt\soulseekqt.exe] => (Allow) C:\program files (x86)\soulseekqt\soulseekqt.exe () [File not signed]
- FirewallRules: [UDP Query User{A77592AC-5FBC-4041-8591-EB656386397A}C:\program files (x86)\soulseekqt\soulseekqt.exe] => (Allow) C:\program files (x86)\soulseekqt\soulseekqt.exe () [File not signed]
- FirewallRules: [{3ADE0449-C108-4164-A19A-AF98008DD2D7}] => (Allow) C:\Program Files\SoftEther VPN Client\vpnclient.exe (SoftEther Corporation -> SoftEther VPN Project at University of Tsukuba, Japan.)
- FirewallRules: [{BD6F0E3B-3D41-41BE-86B6-B33E0FF29E75}] => (Allow) C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe (SoftEther Corporation -> SoftEther VPN Project at University of Tsukuba, Japan.)
- FirewallRules: [{7BC7CBC7-6B5B-4765-A75B-4442F5EAE8FB}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmgr.exe (SoftEther Corporation -> SoftEther VPN Project at University of Tsukuba, Japan.)
- FirewallRules: [{D4C170B1-5053-42CC-88F4-8916C917B92F}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmgr_x64.exe (SoftEther Corporation -> SoftEther VPN Project at University of Tsukuba, Japan.)
- FirewallRules: [{F8E311CF-E727-4F81-95AD-F8DF94D60241}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmd.exe (SoftEther Corporation -> SoftEther VPN Project at University of Tsukuba, Japan.)
- FirewallRules: [{44FD8F17-135A-41F3-A306-243C459E8F83}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmd_x64.exe (SoftEther Corporation -> SoftEther VPN Project at University of Tsukuba, Japan.)
- FirewallRules: [{18FE32AA-8467-41F1-A489-D549DD0B01E2}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
- FirewallRules: [{E38D27E8-8965-4F4C-921F-864D92CF1974}] => (Allow) LPort=2869
- FirewallRules: [{6B76EFA9-9674-4695-B498-26318E89A461}] => (Allow) LPort=1900
- FirewallRules: [TCP Query User{4AC3717E-56D5-4232-9613-3A6AF5FB00F3}C:\users\user\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\user\appdata\local\microsoft\teams\current\teams.exe => No File
- FirewallRules: [UDP Query User{F563CD14-381B-44F5-A962-B94BFE28263B}C:\users\user\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\user\appdata\local\microsoft\teams\current\teams.exe => No File
- FirewallRules: [TCP Query User{25468E1E-410A-4367-B66C-D2D7B82CF21B}C:\users\user\appdata\roaming\zoom\bin\zoom.exe] => (Allow) C:\users\user\appdata\roaming\zoom\bin\zoom.exe => No File
- FirewallRules: [UDP Query User{9376D149-7E06-4C8B-8523-59750AF3423C}C:\users\user\appdata\roaming\zoom\bin\zoom.exe] => (Allow) C:\users\user\appdata\roaming\zoom\bin\zoom.exe => No File
- FirewallRules: [{2F2BC3E0-4186-4708-8327-7DFE99F6F704}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)
- FirewallRules: [{EF2B02E0-D717-4423-8C0F-13206A40FFA7}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)
- FirewallRules: [{4CAE9C6C-B7AE-4A00-A894-F614D359F0BE}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)
- FirewallRules: [{A0AF6B5C-440B-4496-9752-B552A34775A6}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)
- FirewallRules: [{189E54E6-AE5E-42C2-8E83-7C85449E5B87}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)
- FirewallRules: [{849032C0-9698-4727-B675-1A063B2A91D4}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)
- FirewallRules: [TCP Query User{B96FF8BC-3571-43FC-8892-5F554CAB0E22}C:\program files\emule\emule.exe] => (Allow) C:\program files\emule\emule.exe (hxxps://www.emule-project.net) [File not signed]
- FirewallRules: [UDP Query User{92573A2F-E9B1-4ADA-AB70-2B40CA4E1ECA}C:\program files\emule\emule.exe] => (Allow) C:\program files\emule\emule.exe (hxxps://www.emule-project.net) [File not signed]
- FirewallRules: [TCP Query User{FE8316EF-6DF5-4E3F-A442-306E7925040A}E:\hfs.exe] => (Allow) E:\hfs.exe (rejetto) [File not signed]
- FirewallRules: [UDP Query User{17BFE6AD-A29D-4353-8A6F-03FC847249F0}E:\hfs.exe] => (Allow) E:\hfs.exe (rejetto) [File not signed]
- FirewallRules: [TCP Query User{F54C15AE-F846-435D-B43F-AE4F41A2ADF4}C:\program files\microsoft vs code\code.exe] => (Allow) C:\program files\microsoft vs code\code.exe (Microsoft Corporation -> Microsoft Corporation)
- FirewallRules: [UDP Query User{7B1858B6-7CA4-4946-97AD-1FF9263C7DFA}C:\program files\microsoft vs code\code.exe] => (Allow) C:\program files\microsoft vs code\code.exe (Microsoft Corporation -> Microsoft Corporation)
- FirewallRules: [TCP Query User{8C8126BE-DFED-41D0-9ABF-E5110F331A5E}C:\program files\videolan\vlc\vlc.exe] => (Block) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
- FirewallRules: [UDP Query User{76D0AEBD-2CC6-471E-8393-9EB458FC0761}C:\program files\videolan\vlc\vlc.exe] => (Block) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
- FirewallRules: [{58C70DD6-BCFC-4500-A38C-DFC0DDE8BCB3}] => (Allow) C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe (Softdeluxe) [File not signed]
- FirewallRules: [{93CB8A55-1A6C-4165-919A-282E154D986F}] => (Allow) C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe (Softdeluxe) [File not signed]
- FirewallRules: [{95C9F439-05A1-4F5D-87C9-9C9700805CB6}] => (Allow) C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe (Softdeluxe) [File not signed]
- FirewallRules: [{F8A82E75-CD2A-452E-B124-71BD249296CC}] => (Allow) C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe (Softdeluxe) [File not signed]
- FirewallRules: [TCP Query User{7A253B54-3CD1-4E69-B766-D2E56A2B620D}C:\program files\nicotine+\nicotine+.exe] => (Allow) C:\program files\nicotine+\nicotine+.exe (Nicotine+ Team) [File not signed]
- FirewallRules: [UDP Query User{70DC978F-F340-4204-A795-992270E9329D}C:\program files\nicotine+\nicotine+.exe] => (Allow) C:\program files\nicotine+\nicotine+.exe (Nicotine+ Team) [File not signed]
- FirewallRules: [TCP Query User{71B05AB4-F1F4-4AFB-B723-DD410AA2986E}C:\users\user\appdata\local\discord\app-1.0.9005\discord.exe] => (Allow) C:\users\user\appdata\local\discord\app-1.0.9005\discord.exe => No File
- FirewallRules: [UDP Query User{D2950010-1D75-472C-ABE3-8799B9BD4187}C:\users\user\appdata\local\discord\app-1.0.9005\discord.exe] => (Allow) C:\users\user\appdata\local\discord\app-1.0.9005\discord.exe => No File
- FirewallRules: [TCP Query User{330A642E-1414-42AD-9FD4-EEBBE049596F}C:\users\user\appdata\local\kde connect\bin\kdeconnectd.exe] => (Allow) C:\users\user\appdata\local\kde connect\bin\kdeconnectd.exe (K Desktop Environment e.V. -> )
- FirewallRules: [UDP Query User{661C95CE-04B7-46A9-A4B2-6766D0E45460}C:\users\user\appdata\local\kde connect\bin\kdeconnectd.exe] => (Allow) C:\users\user\appdata\local\kde connect\bin\kdeconnectd.exe (K Desktop Environment e.V. -> )
- FirewallRules: [TCP Query User{7272B0CB-13F3-4942-ADBF-F42D92B4E9D7}C:\users\user\appdata\local\discord\app-1.0.9006\discord.exe] => (Allow) C:\users\user\appdata\local\discord\app-1.0.9006\discord.exe => No File
- FirewallRules: [UDP Query User{275046D0-3A58-433E-B911-E80B0158610D}C:\users\user\appdata\local\discord\app-1.0.9006\discord.exe] => (Allow) C:\users\user\appdata\local\discord\app-1.0.9006\discord.exe => No File
- FirewallRules: [{A5B53868-F98F-4618-A786-479440500061}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (Free Time Software Technology Co., Ltd. -> Free Time Co., Ltd.)
- FirewallRules: [TCP Query User{A0900A3E-B38D-4353-B7DE-D40EB027112E}C:\users\user\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\user\appdata\local\microsoft\teams\current\teams.exe => No File
- FirewallRules: [UDP Query User{9C247D3B-3BDA-42E9-A06E-CB3B345FA115}C:\users\user\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\user\appdata\local\microsoft\teams\current\teams.exe => No File
- FirewallRules: [TCP Query User{DE782795-2DE5-46FA-B4BC-9C7B728D4A88}C:\users\user\appdata\local\programs\youtube-music-desktop-app\youtube music desktop app.exe] => (Allow) C:\users\user\appdata\local\programs\youtube-music-desktop-app\youtube music desktop app.exe (Adler Luiz) [File not signed]
- FirewallRules: [UDP Query User{5907245F-478C-494E-977D-CC65BD6A2378}C:\users\user\appdata\local\programs\youtube-music-desktop-app\youtube music desktop app.exe] => (Allow) C:\users\user\appdata\local\programs\youtube-music-desktop-app\youtube music desktop app.exe (Adler Luiz) [File not signed]
- FirewallRules: [TCP Query User{D76922B2-E4CD-4742-A70F-4636B5FCB36A}C:\program files (x86)\manycam\manycam.exe] => (Allow) C:\program files (x86)\manycam\manycam.exe => No File
- FirewallRules: [UDP Query User{EA619DA3-4B20-4673-8A53-025DD7C98933}C:\program files (x86)\manycam\manycam.exe] => (Allow) C:\program files (x86)\manycam\manycam.exe => No File
- FirewallRules: [TCP Query User{1347F3F9-D666-4698-95F9-C1E6ACC6CBA0}C:\users\user\portapps\skype-portable\app\skype.exe] => (Allow) C:\users\user\portapps\skype-portable\app\skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
- FirewallRules: [UDP Query User{3D82679A-D330-4FD6-8545-D4E91C52687D}C:\users\user\portapps\skype-portable\app\skype.exe] => (Allow) C:\users\user\portapps\skype-portable\app\skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
- FirewallRules: [TCP Query User{49A1DFE2-1270-45FC-9F78-338623563910}C:\users\user\appdata\local\discord\app-1.0.9008\discord.exe] => (Allow) C:\users\user\appdata\local\discord\app-1.0.9008\discord.exe => No File
- FirewallRules: [UDP Query User{F77E0ABF-2BE0-4421-B390-8E04536DD23D}C:\users\user\appdata\local\discord\app-1.0.9008\discord.exe] => (Allow) C:\users\user\appdata\local\discord\app-1.0.9008\discord.exe => No File
- FirewallRules: [{23B1F12E-040B-49E2-B7FA-F8AC89B860E3}] => (Allow) C:\Program Files (x86)\3uTools\libXunlei\Download\MiniThunderPlatform.exe => No File
- FirewallRules: [{302B6595-4F21-4F17-B68B-3165CCE00CB3}] => (Allow) C:\Program Files (x86)\3uTools\libXunlei\Download\MiniThunderPlatform.exe => No File
- FirewallRules: [{D26EE46B-D8E5-4D8A-AE0E-49E196F92B26}] => (Allow) LPort=80
- FirewallRules: [TCP Query User{02B701AF-FB75-4F9C-A977-AD1574F7673F}C:\users\user\appdata\roaming\telegram desktop\telegram.exe] => (Block) C:\users\user\appdata\roaming\telegram desktop\telegram.exe (Telegram FZ-LLC -> Telegram FZ-LLC)
- FirewallRules: [UDP Query User{9329DDBA-7677-46ED-A6FF-EF15097888D9}C:\users\user\appdata\roaming\telegram desktop\telegram.exe] => (Block) C:\users\user\appdata\roaming\telegram desktop\telegram.exe (Telegram FZ-LLC -> Telegram FZ-LLC)
- FirewallRules: [TCP Query User{BB13BB80-1887-4BF5-A9AF-D022B55D10A2}C:\users\user\downloads\hitomi_downloader_gui\hitomi_downloader_gui.exe] => (Allow) C:\users\user\downloads\hitomi_downloader_gui\hitomi_downloader_gui.exe => No File
- FirewallRules: [UDP Query User{99105BCB-5306-4490-83B8-CF9E89C59604}C:\users\user\downloads\hitomi_downloader_gui\hitomi_downloader_gui.exe] => (Allow) C:\users\user\downloads\hitomi_downloader_gui\hitomi_downloader_gui.exe => No File
- FirewallRules: [TCP Query User{EFD4941F-4E16-4D40-813F-E883A7E3B4D4}C:\users\user\appdata\local\kde connect\bin\kdeconnectd.exe] => (Block) C:\users\user\appdata\local\kde connect\bin\kdeconnectd.exe (K Desktop Environment e.V. -> )
- FirewallRules: [UDP Query User{3113F007-42F7-4711-B1CD-088B0184B302}C:\users\user\appdata\local\kde connect\bin\kdeconnectd.exe] => (Block) C:\users\user\appdata\local\kde connect\bin\kdeconnectd.exe (K Desktop Environment e.V. -> )
- FirewallRules: [TCP Query User{C209957A-14C8-4A9E-AC7C-17244B254572}C:\users\user\appdata\local\discord\app-1.0.9011\discord.exe] => (Allow) C:\users\user\appdata\local\discord\app-1.0.9011\discord.exe => No File
- FirewallRules: [UDP Query User{DA927C3A-4D23-4E88-9A8F-09378353DEDF}C:\users\user\appdata\local\discord\app-1.0.9011\discord.exe] => (Allow) C:\users\user\appdata\local\discord\app-1.0.9011\discord.exe => No File
- FirewallRules: [TCP Query User{43644C62-3966-4890-A12F-2BCDE6BEA406}C:\users\user\appdata\local\freedomgpt\app-1.1.2\freedomgpt.exe] => (Block) C:\users\user\appdata\local\freedomgpt\app-1.1.2\freedomgpt.exe => No File
- FirewallRules: [UDP Query User{9552A0FA-C3CF-45B4-9CE1-C54CCD86140E}C:\users\user\appdata\local\freedomgpt\app-1.1.2\freedomgpt.exe] => (Block) C:\users\user\appdata\local\freedomgpt\app-1.1.2\freedomgpt.exe => No File
- FirewallRules: [TCP Query User{FAEA27B5-9CE1-41C3-9402-DBB675E716F5}C:\program files (x86)\lonelyscreen\lonelyscreen.exe] => (Allow) C:\program files (x86)\lonelyscreen\lonelyscreen.exe () [File not signed]
- FirewallRules: [UDP Query User{9B69B8C0-151B-49BC-9971-04B59E836069}C:\program files (x86)\lonelyscreen\lonelyscreen.exe] => (Allow) C:\program files (x86)\lonelyscreen\lonelyscreen.exe () [File not signed]
- FirewallRules: [TCP Query User{425D25A7-8554-4CDF-9667-146B15B729D4}C:\users\user\appdata\local\discord\app-1.0.9013\discord.exe] => (Allow) C:\users\user\appdata\local\discord\app-1.0.9013\discord.exe => No File
- FirewallRules: [UDP Query User{1FFDD63D-7A0A-47E8-BE61-1BCDA75D618D}C:\users\user\appdata\local\discord\app-1.0.9013\discord.exe] => (Allow) C:\users\user\appdata\local\discord\app-1.0.9013\discord.exe => No File
- FirewallRules: [{C108DBFA-2E42-4645-B85A-29DFB2B75823}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
- FirewallRules: [{C16D86EB-EFBE-4AD9-82CA-AFCD7C6CDB72}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
- FirewallRules: [{44B9AFA8-4206-4D82-BEEB-38F26692DDFB}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
- FirewallRules: [{F16C8E3A-5568-4AFE-988F-983E2A65085A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
- FirewallRules: [{307860E0-EA78-48C4-BD23-42A9D56C149E}] => (Allow) C:\Program Files\Nox\bin\Nox.exe => No File
- FirewallRules: [{67C7C50B-D1B2-472A-A959-2FC726C0FBFD}] => (Allow) C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe => No File
- FirewallRules: [TCP Query User{E7DCA403-AF88-4487-8284-4EFEAF998C61}C:\users\user\downloads\minetest-5.7.0-win64\minetest-5.7.0-win64\bin\minetest.exe] => (Allow) C:\users\user\downloads\minetest-5.7.0-win64\minetest-5.7.0-win64\bin\minetest.exe => No File
- FirewallRules: [UDP Query User{FC8A5002-DD7F-4C5D-B705-A1755400E6F5}C:\users\user\downloads\minetest-5.7.0-win64\minetest-5.7.0-win64\bin\minetest.exe] => (Allow) C:\users\user\downloads\minetest-5.7.0-win64\minetest-5.7.0-win64\bin\minetest.exe => No File
- FirewallRules: [TCP Query User{263591EB-AA16-4837-913C-959363744469}C:\users\user\appdata\local\discord\app-1.0.9016\discord.exe] => (Allow) C:\users\user\appdata\local\discord\app-1.0.9016\discord.exe => No File
- FirewallRules: [UDP Query User{52A3EC0A-DCF0-4092-A31E-C3E1650107EC}C:\users\user\appdata\local\discord\app-1.0.9016\discord.exe] => (Allow) C:\users\user\appdata\local\discord\app-1.0.9016\discord.exe => No File
- FirewallRules: [{3DA5D636-E026-46AC-AF34-BDD40DFBC5D0}] => (Allow) C:\Program Files\Bitdefender\Bitdefender Security\bdntwrk.exe (Bitdefender SRL -> Bitdefender)
- FirewallRules: [{E349F8E1-D5EA-48B6-AC25-FB629B1844E4}] => (Allow) C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe => No File
- FirewallRules: [{6BB94A0C-AEC6-476F-A6EF-74381B6A85FF}] => (Allow) C:\Program Files (x86)\BlueStacks X\Cloud Game.exe => No File
- FirewallRules: [{2236F9CA-62CD-4BC4-9897-FE9246ED6E01}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe => No File
- FirewallRules: [{3E80BB78-8E10-4653-9CB4-03403D16E4BC}] => (Allow) C:\Program Files\BlueStacks_nxt\BlueStacksAppplayerWeb.exe => No File
- FirewallRules: [TCP Query User{425429D6-AC00-4B15-8472-034282769F0C}C:\users\user\appdata\local\freedomgpt\app-1.1.3\freedomgpt.exe] => (Block) C:\users\user\appdata\local\freedomgpt\app-1.1.3\freedomgpt.exe (Age of AI, LLC -> ohmplatform)
- FirewallRules: [UDP Query User{B4C4864F-D97F-4874-A321-76E13C9A3768}C:\users\user\appdata\local\freedomgpt\app-1.1.3\freedomgpt.exe] => (Block) C:\users\user\appdata\local\freedomgpt\app-1.1.3\freedomgpt.exe (Age of AI, LLC -> ohmplatform)
- FirewallRules: [TCP Query User{678150D2-DE30-48A3-A2EA-14B84CFCB384}E:\symmover\c\users\user\appdata\local\freedomgpt\app-1.1.3\freedomgpt.exe] => (Allow) E:\symmover\c\users\user\appdata\local\freedomgpt\app-1.1.3\freedomgpt.exe => No File
- FirewallRules: [UDP Query User{F95A27BA-590D-4B52-968B-3BE2D6BA1ACF}E:\symmover\c\users\user\appdata\local\freedomgpt\app-1.1.3\freedomgpt.exe] => (Allow) E:\symmover\c\users\user\appdata\local\freedomgpt\app-1.1.3\freedomgpt.exe => No File
- FirewallRules: [{E9357FCF-8190-4F7C-B0FD-10A3FB1E3454}] => (Allow) C:\Program Files\OpenShot Video Editor\openshot-qt.exe (OpenShot Studios, LLC) [File not signed]
- FirewallRules: [TCP Query User{5B058154-DBB2-469C-82BB-E03E925632A6}C:\users\user\downloads\fg799p.exe] => (Allow) C:\users\user\downloads\fg799p.exe => No File
- FirewallRules: [UDP Query User{87B47FCF-5726-4CFC-AA30-6D64C78EE864}C:\users\user\downloads\fg799p.exe] => (Allow) C:\users\user\downloads\fg799p.exe => No File
- FirewallRules: [TCP Query User{E12A457D-E835-45D9-970D-17BE822DF21E}C:\program files\eclipse adoptium\jdk-11.0.20.101-hotspot\bin\javaw.exe] => (Allow) C:\program files\eclipse adoptium\jdk-11.0.20.101-hotspot\bin\javaw.exe
- FirewallRules: [UDP Query User{AF90A4E0-E8DE-41A2-B06C-5E8CC0D6652F}C:\program files\eclipse adoptium\jdk-11.0.20.101-hotspot\bin\javaw.exe] => (Allow) C:\program files\eclipse adoptium\jdk-11.0.20.101-hotspot\bin\javaw.exe
- FirewallRules: [{EDE17BB2-FC1E-497D-926E-BC5103FFAF86}] => (Allow) C:\Program Files\Mendix\10.0.0.9976\modeler\tools\node\win-x64\node.exe (OpenJS Foundation -> Node.js)
- FirewallRules: [{78C59BC4-A25C-479F-8D29-CAE65430B2A7}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.0.9.exe => No File
- FirewallRules: [{47EC085C-9FC4-43E9-836E-4BB2DBD24F54}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.0.9.exe => No File
- FirewallRules: [{E71A1BF3-49BC-44DA-AD43-EC724767A268}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.0.9.exe => No File
- FirewallRules: [{8407E15A-3DBB-4C55-A76E-B03546BB99E3}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.0.9.exe => No File
- FirewallRules: [{37B3EF37-ACDA-4366-B7C7-FAD4BF422B83}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.0.10.exe => No File
- FirewallRules: [{50B8FB58-5A9B-4D37-9F21-EA9D092CA5FC}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.0.10.exe => No File
- FirewallRules: [{96FA88C5-5AF2-4A51-AC6D-1AB410478268}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.0.10.exe => No File
- FirewallRules: [{FF0A26F8-565B-4918-9B5F-1E2EFDF9AB46}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.0.10.exe => No File
- FirewallRules: [TCP Query User{43C6E227-E6C5-4C4F-A698-35BAD4AA2F8E}C:\users\user\appdata\local\bravesoftware\brave-browser\user data\lnbclahgobmjphilkalbhebakmblnbij\1.0.35\go-ipfs_v0.27.0_windows-amd64] => (Allow) C:\users\user\appdata\local\bravesoftware\brave-browser\user data\lnbclahgobmjphilkalbhebakmblnbij\1.0.35\go-ipfs_v0.27.0_windows-amd64 => No File
- FirewallRules: [UDP Query User{8AD44D10-1C15-4153-97CE-70E0FAE1E946}C:\users\user\appdata\local\bravesoftware\brave-browser\user data\lnbclahgobmjphilkalbhebakmblnbij\1.0.35\go-ipfs_v0.27.0_windows-amd64] => (Allow) C:\users\user\appdata\local\bravesoftware\brave-browser\user data\lnbclahgobmjphilkalbhebakmblnbij\1.0.35\go-ipfs_v0.27.0_windows-amd64 => No File
- FirewallRules: [TCP Query User{31774E43-0571-4FAF-A502-68B3296ADB65}C:\users\user\appdata\local\bravesoftware\brave-browser\user data\lnbclahgobmjphilkalbhebakmblnbij\1.0.35\go-ipfs_v0.27.0_windows-amd64] => (Block) C:\users\user\appdata\local\bravesoftware\brave-browser\user data\lnbclahgobmjphilkalbhebakmblnbij\1.0.35\go-ipfs_v0.27.0_windows-amd64 => No File
- FirewallRules: [UDP Query User{076F832C-0C32-44D2-9F7D-13F119CCB7ED}C:\users\user\appdata\local\bravesoftware\brave-browser\user data\lnbclahgobmjphilkalbhebakmblnbij\1.0.35\go-ipfs_v0.27.0_windows-amd64] => (Block) C:\users\user\appdata\local\bravesoftware\brave-browser\user data\lnbclahgobmjphilkalbhebakmblnbij\1.0.35\go-ipfs_v0.27.0_windows-amd64 => No File
- FirewallRules: [TCP Query User{90DA30C5-4A9D-4AA3-AD5E-BB07370FC793}C:\users\user\appdata\local\bravesoftware\brave-browser\user data\lnbclahgobmjphilkalbhebakmblnbij\1.0.36\go-ipfs_v0.29.0_windows-amd64] => (Block) C:\users\user\appdata\local\bravesoftware\brave-browser\user data\lnbclahgobmjphilkalbhebakmblnbij\1.0.36\go-ipfs_v0.29.0_windows-amd64 => No File
- FirewallRules: [UDP Query User{50F365B7-C2C1-4E02-B5E5-A00EEF2F65C3}C:\users\user\appdata\local\bravesoftware\brave-browser\user data\lnbclahgobmjphilkalbhebakmblnbij\1.0.36\go-ipfs_v0.29.0_windows-amd64] => (Block) C:\users\user\appdata\local\bravesoftware\brave-browser\user data\lnbclahgobmjphilkalbhebakmblnbij\1.0.36\go-ipfs_v0.29.0_windows-amd64 => No File
- FirewallRules: [TCP Query User{1810A613-F3CF-4913-80D0-AF29EA8E8287}C:\users\user\appdata\local\bravesoftware\brave-browser\user data\lnbclahgobmjphilkalbhebakmblnbij\1.0.37\go-ipfs_v0.29.0_windows-amd64] => (Block) C:\users\user\appdata\local\bravesoftware\brave-browser\user data\lnbclahgobmjphilkalbhebakmblnbij\1.0.37\go-ipfs_v0.29.0_windows-amd64 => No File
- FirewallRules: [UDP Query User{2EED1B53-5B3F-4C06-AF35-8428B81D5D5F}C:\users\user\appdata\local\bravesoftware\brave-browser\user data\lnbclahgobmjphilkalbhebakmblnbij\1.0.37\go-ipfs_v0.29.0_windows-amd64] => (Block) C:\users\user\appdata\local\bravesoftware\brave-browser\user data\lnbclahgobmjphilkalbhebakmblnbij\1.0.37\go-ipfs_v0.29.0_windows-amd64 => No File
- FirewallRules: [TCP Query User{5AC92B4E-1DAC-4B32-8B33-0F42D1C692C0}C:\users\user\appdata\local\bravesoftware\brave-browser\user data\lnbclahgobmjphilkalbhebakmblnbij\1.0.37\go-ipfs_v0.29.0_windows-amd64] => (Block) C:\users\user\appdata\local\bravesoftware\brave-browser\user data\lnbclahgobmjphilkalbhebakmblnbij\1.0.37\go-ipfs_v0.29.0_windows-amd64 => No File
- FirewallRules: [UDP Query User{B8925B9D-83FA-451A-A6A4-F8F9FCB73261}C:\users\user\appdata\local\bravesoftware\brave-browser\user data\lnbclahgobmjphilkalbhebakmblnbij\1.0.37\go-ipfs_v0.29.0_windows-amd64] => (Block) C:\users\user\appdata\local\bravesoftware\brave-browser\user data\lnbclahgobmjphilkalbhebakmblnbij\1.0.37\go-ipfs_v0.29.0_windows-amd64 => No File
- FirewallRules: [{BB4BD9EA-CB76-4D57-8B54-4381F8F9972F}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.0.11.exe => No File
- FirewallRules: [{5BFB055B-8AFD-4339-B43A-7BBC727805DB}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.0.11.exe => No File
- FirewallRules: [{93B42A6D-7B5C-4DC1-B2C5-B6D57C434ECC}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.0.11.exe => No File
- FirewallRules: [{9291A681-0910-4B34-9340-79550A5DE277}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.0.11.exe => No File
- FirewallRules: [{74ACB9E6-96E2-4779-A74B-79988281ED44}] => (Allow) C:\Program Files\OpenShot Video Editor\openshot-qt.exe (OpenShot Studios, LLC) [File not signed]
- FirewallRules: [TCP Query User{280FCFAE-F336-4D0D-B8F1-65DE51C9AB51}C:\users\user\appdata\local\discord\app-1.0.9155\discord.exe] => (Allow) C:\users\user\appdata\local\discord\app-1.0.9155\discord.exe => No File
- FirewallRules: [UDP Query User{2C3114F4-6B3C-4757-BE9D-47C51D0B325C}C:\users\user\appdata\local\discord\app-1.0.9155\discord.exe] => (Allow) C:\users\user\appdata\local\discord\app-1.0.9155\discord.exe => No File
- FirewallRules: [TCP Query User{8AC3E37A-3147-479F-AABC-F8415BA95011}C:\program files\cisco packet tracer 8.2.2\bin\packettracer.exe] => (Allow) C:\program files\cisco packet tracer 8.2.2\bin\packettracer.exe (Cisco Systems Inc. -> Cisco Systems, Inc)
- FirewallRules: [UDP Query User{F0879649-78C2-41DD-A589-99BC01C2345E}C:\program files\cisco packet tracer 8.2.2\bin\packettracer.exe] => (Allow) C:\program files\cisco packet tracer 8.2.2\bin\packettracer.exe (Cisco Systems Inc. -> Cisco Systems, Inc)
- FirewallRules: [TCP Query User{4BBAA86C-9E98-475E-B258-B6392C32E317}C:\users\user\appdata\local\discord\app-1.0.9157\discord.exe] => (Allow) C:\users\user\appdata\local\discord\app-1.0.9157\discord.exe => No File
- FirewallRules: [UDP Query User{2EB60A5E-2703-4F76-9730-FDC61061C29D}C:\users\user\appdata\local\discord\app-1.0.9157\discord.exe] => (Allow) C:\users\user\appdata\local\discord\app-1.0.9157\discord.exe => No File
- FirewallRules: [{00FAD8D5-FD34-4E87-BF81-84E1F821BE0A}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.0.12.exe => No File
- FirewallRules: [{AD93D0B8-0786-4586-A73C-8A84545510FC}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.0.12.exe => No File
- FirewallRules: [{22245375-12CC-4BEC-9A09-2BCBA11909BE}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.0.12.exe => No File
- FirewallRules: [{64B1EE0A-3D95-47E8-A917-0BDE1607590B}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.0.12.exe => No File
- FirewallRules: [{9177AAFD-9200-4955-AA5B-59B16675F248}] => (Allow) C:\Program Files\OpenShot Video Editor\openshot-qt.exe (OpenShot Studios, LLC) [File not signed]
- FirewallRules: [{97ED1B2C-60CA-429A-A372-3B88581CAC43}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
- FirewallRules: [TCP Query User{CF6410A1-5876-41BA-B6EC-A4DCAFF035C4}C:\users\user\appdata\local\discord\app-1.0.9159\discord.exe] => (Allow) C:\users\user\appdata\local\discord\app-1.0.9159\discord.exe => No File
- FirewallRules: [UDP Query User{183E8861-E1FD-489C-8B39-2B39743DFD45}C:\users\user\appdata\local\discord\app-1.0.9159\discord.exe] => (Allow) C:\users\user\appdata\local\discord\app-1.0.9159\discord.exe => No File
- FirewallRules: [{886469A8-9790-4E4E-9BFA-DFE6B3CD22A5}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.0.14.exe => No File
- FirewallRules: [{2A745CAF-A472-4C83-8A58-AC54F479D9B2}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.0.14.exe => No File
- FirewallRules: [{FA1E845C-9A8D-4378-A079-12954DA57631}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.0.14.exe => No File
- FirewallRules: [{A1BCD2AE-8A7E-4566-8B07-5BE629DE5B94}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.0.14.exe => No File
- FirewallRules: [{1881889C-1E26-470A-B281-83D82BBF2C82}] => (Allow) C:\Users\Administrator\AppData\Local\Programs\Opera\opera.exe => No File
- FirewallRules: [{D94DD907-6524-414F-A57C-CD221741EE4B}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.1.exe => No File
- FirewallRules: [{D46A710D-BF64-4D47-B7AB-B7C29049E3D2}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.1.exe => No File
- FirewallRules: [{54594FB3-6DC9-4F76-B4B4-D730FD152108}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.1.exe => No File
- FirewallRules: [{CA5F7189-4951-4C63-B9A4-0DB6FB6C6FE1}] => (Allow) C:\PatchMyPCUpdates\AnyDesk 8.1.exe => No File
- FirewallRules: [{31BC547B-A31C-4B8E-95E3-F287BF0AD5E1}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe (The qBittorrent Project) [File not signed]
- FirewallRules: [{45640184-0B48-4B38-98F6-9D8663C2B3B4}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe (The qBittorrent Project) [File not signed]
- FirewallRules: [{8DE18FCF-1894-4727-A3A4-B3304064F0AE}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
- FirewallRules: [{F288BB7F-1CBD-4087-B013-189BB33B46AA}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
- FirewallRules: [{1F38320D-0D5A-4113-974C-29D61B23A14B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
- FirewallRules: [{49347999-6DF4-4A63-8072-D016ECCD13F7}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
- FirewallRules: [{9EB15539-9B1D-4117-8080-16FBC1785781}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
- FirewallRules: [{C4F9465B-4527-4FBB-95E2-9407950EC45C}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\129.0.2792.79\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
- FirewallRules: [{87DC3468-12C6-4439-B5EE-311B44D743C6}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\129.0.2792.89\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
- FirewallRules: [{5FFFD05D-878D-4C64-895D-F09F16FA2626}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe (Broadcom Inc -> VMware, Inc.)
- FirewallRules: [{0FE775EB-EAF0-4BBD-A227-7CB11A7944B6}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe (Broadcom Inc -> VMware, Inc.)
- FirewallRules: [{A7318348-2A88-4145-B087-C98115679C1D}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
- FirewallRules: [{4D03C7B8-51EF-4588-A35D-4A135C6EED98}] => (Allow) C:\Program Files\WindowsApps\MSTeams_24257.205.3165.2029_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
- FirewallRules: [{CB79D52F-2480-413D-9865-D8EC0ED1690F}] => (Allow) C:\Program Files\WindowsApps\MSTeams_24257.205.3165.2029_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
- FirewallRules: [{CE8CFF4C-7D11-421E-9039-88755C6B131E}] => (Allow) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)
- FirewallRules: [{84069A72-F2CD-495B-9D84-418065DA4312}] => (Allow) C:\Program Files\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
- FirewallRules: [{26CA7B13-4F44-40B7-9F5C-9A6E8C7982B7}] => (Allow) C:\Program Files\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
- FirewallRules: [{5EB7153C-5840-436D-9CFE-3E6845D2C1C3}] => (Allow) C:\Program Files\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
- FirewallRules: [{EB4B62B9-2EFC-4F95-8F8A-BFFDFC79745A}] => (Allow) C:\Program Files\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
- FirewallRules: [{75834B34-F50B-4B25-8A61-26D1A514AF9B}] => (Allow) C:\Program Files\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
- FirewallRules: [{C84E9C8E-6550-4CBA-8807-7CF8B6760357}] => (Allow) C:\Program Files\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
- StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
- StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
- StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
- StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
- ==================== Restore Points =========================
- ATTENTION: System Restore is disabled (Total:930.3 GB) (Free:601.58 GB) (65%)
- Check "VSS" service
- ==================== Faulty Device Manager Devices ============
- Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
- Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
- Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
- Manufacturer: Cisco Systems
- Service: vpnva
- Problem: : This device is disabled. (Code 22)
- Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
- ==================== Event log errors: ========================
- Application errors:
- ==================
- Error: (10/23/2024 08:35:22 AM) (Source: Universal Print) (EventID: 1) (User: )
- Description: Failed to GetUserSid. hr: 0x8001012d
- Error: (10/23/2024 01:03:59 AM) (Source: Application Error) (EventID: 1000) (User: NT AUTHORITY)
- Description: Faulting application name: SDFSSvc.exe, version: 2.9.85.231, time stamp: 0x63ebb1a4
- Faulting module name: KERNELBASE.dll, version: 10.0.26100.2033, time stamp: 0xe767443a
- Exception code: 0x0eedfade
- Fault offset: 0x00159b44
- Faulting process id: 0x1a18
- Faulting application start time: 0x1db2402840ea84c
- Faulting application path: C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
- Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
- Report Id: df2c89e7-f058-4d41-913a-3510e508c2a0
- Faulting package full name:
- Faulting package-relative application ID:
- Error: (10/23/2024 01:03:59 AM) (Source: VSS) (EventID: 13) (User: )
- Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.]
- Error: (10/22/2024 04:47:10 PM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Client application bug: DNSServiceResolve(24:e3:14:6f:aa:16@fe80::26e3:14ff:fe6f:aa16._apple-mobdev2._tcp.local.) active for over two minutes. This places considerable burden on the network.
- Error: (10/22/2024 04:44:47 PM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: ERROR: handle_resolve_request bad interfaceIndex 25
- Error: (10/22/2024 04:44:47 PM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: ERROR: handle_resolve_request bad interfaceIndex 24
- Error: (10/22/2024 04:44:47 PM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: ERROR: handle_resolve_request bad interfaceIndex 23
- Error: (10/22/2024 04:44:47 PM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: ERROR: handle_resolve_request bad interfaceIndex 22
- System errors:
- =============
- Error: (10/23/2024 08:44:11 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT AUTHORITY)
- Description: The Secure Boot update failed to update a Secure Boot variable with error -2147020471. For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931
- Error: (10/23/2024 08:43:23 AM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
- Description: The server {2D15188C-D298-4E10-83B2-64666CCBEBBD} did not register with DCOM within the required timeout.
- Error: (10/23/2024 08:41:23 AM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
- Description: The server {2D15188C-D298-4E10-83B2-64666CCBEBBD} did not register with DCOM within the required timeout.
- Error: (10/23/2024 08:39:23 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-DOMRM6I)
- Description: The server {F99A566C-42AE-4DE2-AD4D-D297A04C5433} did not register with DCOM within the required timeout.
- Error: (10/23/2024 08:36:59 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT AUTHORITY)
- Description: The Secure Boot update failed to update a Secure Boot variable with error -2147020471. For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931
- Error: (10/23/2024 08:34:59 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
- Description: The l1vhlwf service failed to start due to the following error:
- A hypervisor feature is not available to the user.
- Error: (10/23/2024 08:34:56 AM) (Source: VBoxNetLwf) (EventID: 12) (User: )
- Description: The driver detected an internal driver error on \Device\VBoxNetLwf.
- Error: (10/23/2024 08:34:56 AM) (Source: VBoxNetLwf) (EventID: 12) (User: )
- Description: The driver detected an internal driver error on \Device\VBoxNetLwf.
- CodeIntegrity:
- ===============
- Date: 2024-10-23 09:50:02
- Description:
- Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume6\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.
- Date: 2024-10-23 08:51:02
- Description:
- Code Integrity determined that a process (\Device\HarddiskVolume6\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume6\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
- ==================== Memory info ===========================
- BIOS: American Megatrends International, LLC. A.00 03/04/2021
- Motherboard: Micro-Star International Co., Ltd. MAG B560 TORPEDO (MS-7D15)
- Processor: 11th Gen Intel(R) Core(TM) i5-11400 @ 2.60GHz
- Percentage of memory in use: 81%
- Total physical RAM: 16209.61 MB
- Available physical RAM: 3026.77 MB
- Total Virtual: 33617.61 MB
- Available Virtual: 17624.38 MB
- ==================== Drives ================================
- Drive c: (SSD) (Fixed) (Total:930.3 GB) (Free:601.58 GB) (Model: WDC WDS100T2B0C-00PXH0) NTFS
- Drive e: (4TB) (Fixed) (Total:3726.01 GB) (Free:2693.99 GB) (Model: ST4000DM004-2CV104) NTFS
- \\?\Volume{37a91028-da3d-4f6e-a00f-c0bd4dd7a7fe}\ (Recovery) (Fixed) (Total:0.49 GB) (Free:0.47 GB) NTFS
- \\?\Volume{82f3d65b-2b05-4dcc-bfac-4feb32ac320d}\ () (Fixed) (Total:0.61 GB) (Free:0.08 GB) NTFS
- \\?\Volume{b395c717-6488-428b-833d-0da9669dea0d}\ () (Fixed) (Total:0.09 GB) (Free:0.06 GB) FAT32
- ==================== MBR & Partition Table ====================
- ==================== End of Addition.txt =======================
Add Comment
Please, Sign In to add comment