Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-06-2017
- Ran by HxC (04-06-2017 14:11:45)
- Running from C:\Users\Blake\Downloads
- Windows 10 Education Version 1607 (X64) (2016-11-06 09:34:05)
- Boot Mode: Normal
- ==========================================================
- ==================== Accounts: =============================
- Administrator (S-1-5-21-4026273077-4069470158-3539046228-500 - Administrator - Disabled)
- DefaultAccount (S-1-5-21-4026273077-4069470158-3539046228-503 - Limited - Disabled)
- Guest (S-1-5-21-4026273077-4069470158-3539046228-501 - Limited - Enabled)
- HxC (S-1-5-21-4026273077-4069470158-3539046228-1002 - Administrator - Enabled) => C:\Users\Blake
- ==================== Security Center ========================
- (If an entry is included in the fixlist, it will be removed.)
- AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
- AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
- ==================== Installed Programs ======================
- (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
- µTorrent (HKU\S-1-5-21-4026273077-4069470158-3539046228-1002\...\uTorrent) (Version: 3.5.0.43580 - BitTorrent Inc.)
- Adobe Acrobat DC (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)
- Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.0 - Adobe Systems Incorporated)
- AMD Settings (HKLM\...\WUCCCApp) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.)
- AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.8 - Advanced Micro Devices, Inc.)
- Android Studio (HKLM\...\Android Studio) (Version: 1.0 - Google Inc.)
- ApowerPDF (HKLM-x32\...\8691C793-7B2C-46C5-9AB2-AB80D129A5EC_is1) (Version: 3.0.1.1013 - APOWERSOFT LIMITED)
- Application Profiles (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
- ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)
- Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
- Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
- Call of Duty: Ghosts - Multiplayer (HKLM\...\Steam App 209170) (Version: - Infinity Ward)
- Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - )
- Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.1 - Canon Inc.)
- Canon MX410 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX410_series) (Version: - Canon Inc.)
- Catalyst Control Center Next Localization BR (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
- Catalyst Control Center Next Localization CHS (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
- Catalyst Control Center Next Localization CHT (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
- Catalyst Control Center Next Localization CS (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
- Catalyst Control Center Next Localization DA (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
- Catalyst Control Center Next Localization DE (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
- Catalyst Control Center Next Localization EL (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
- Catalyst Control Center Next Localization ES (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
- Catalyst Control Center Next Localization FI (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
- Catalyst Control Center Next Localization FR (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
- Catalyst Control Center Next Localization HU (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
- Catalyst Control Center Next Localization IT (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
- Catalyst Control Center Next Localization JA (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
- Catalyst Control Center Next Localization KO (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
- Catalyst Control Center Next Localization NL (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
- Catalyst Control Center Next Localization NO (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
- Catalyst Control Center Next Localization PL (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
- Catalyst Control Center Next Localization RU (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
- Catalyst Control Center Next Localization SV (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
- Catalyst Control Center Next Localization TH (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
- Catalyst Control Center Next Localization TR (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
- CCleaner (HKLM\...\CCleaner) (Version: 5.27 - Piriform)
- Cisco Packet Tracer 6.2 Student (HKLM-x32\...\Cisco Packet Tracer 6.2 Student_is1) (Version: - Cisco Systems, Inc.)
- Core Temp 1.6 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.6 - ALCPU)
- Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version: - Valve)
- Counter-Strike: Source (HKLM\...\Steam App 240) (Version: - Valve)
- CPUID HWMonitor 1.30 (HKLM\...\CPUID HWMonitor_is1) (Version: - )
- DOOM (HKLM-x32\...\DOOM_is1) (Version: - )
- e5 Secure Download Manager (HKLM-x32\...\{E846EAD1-CA01-458A-B16B-8F9B08D86270}) (Version: 3.2.249.0 - Kivuto Solutions Inc.)
- Epic Games Launcher (HKLM-x32\...\{2DE76AAC-8061-4D9B-B7BA-A7CFBE0F8048}) (Version: 1.1.86.0 - Epic Games, Inc.)
- Epic Games Launcher Prerequisites (x64) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
- Exodus (HKU\S-1-5-21-4026273077-4069470158-3539046228-1002\...\exodus) (Version: 1.21.0 - Exodus Movement Inc)
- FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version: - Image-Line)
- FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version: - Image-Line)
- FlowStone FL 3.0 (HKLM-x32\...\FlowStone) (Version: - )
- Freestyle GunZ version 7.0 (HKLM-x32\...\{B46FB5E0-11F2-4C63-A2A5-32E30106CD0C}_is1) (Version: 7.0 - FreestylersWorld)
- Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.110 - Google Inc.)
- Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden
- Gpg4win (2.3.3) (HKLM-x32\...\GPG4Win) (Version: 2.3.3 - The Gpg4win Project)
- Grand Theft Auto V Update (HKLM-x32\...\R3JhbmRUaGVmdEF1dG9W_is1) (Version: 1 - )
- GunZ 2: The Second Duel (HKLM\...\Steam App 242720) (Version: - Masangsoft, Inc.)
- Halo (HKLM-x32\...\4game_halo) (Version: - Innova Systems)
- Halo 2 for Windows Vista (HKLM-x32\...\Halo 2) (Version: - Microsoft Game Studios)
- Halo 2 for Windows Vista (x32 Version: 1.0.0.0 - Microsoft Corporation) Hidden
- Hola™ 1.34.855 - Better Internet (HKLM\...\Hola) (Version: 1.34.855 - Hola Networks Ltd.) <==== ATTENTION
- ICQ (version 10.0.12156) (HKU\S-1-5-21-4026273077-4069470158-3539046228-1002\...\icq.desktop) (Version: 10.0.12156 - ICQ)
- IL Download Manager (HKLM-x32\...\IL Download Manager) (Version: - Image-Line)
- Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
- Kingo ROOT version 1.4.9.2848 (HKLM-x32\...\{AE7675D6-0B31-494F-ABFA-822E1A0FDF17}_is1) (Version: 1.4.9.2848 - Kingosoft Technology Ltd.)
- Launcher Prerequisites (x64) (x32 Version: 1.0.0.0 - Epic Games, Inc.) Hidden
- LIVE gaming on Windows Runtime Version 1.0.6027 (HKLM-x32\...\{839916F4-D8B5-4407-BE6D-6D4EB9D96AF4}) (Version: 1.0.6027 - Microsoft Corporation)
- M2O Gaming - GunZ The Last Duel (HKLM-x32\...\M2O Gaming - GunZ The Last Duel) (Version: - )
- Malwarebytes version 3.0.4.1269 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.4.1269 - Malwarebytes)
- Microsoft Office Professional Plus 2016 - en-us (HKLM\...\ProPlusRetail - en-us) (Version: 16.0.8067.2115 - Microsoft Corporation)
- Microsoft OneDrive (HKU\S-1-5-21-4026273077-4069470158-3539046228-1002\...\OneDriveSetup.exe) (Version: 17.3.6799.0327 - Microsoft Corporation)
- Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
- Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
- Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
- Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
- Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
- Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
- Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
- Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
- Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
- Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24123 (HKLM-x32\...\{2cbcedbb-f38c-48a3-a3e1-6c6fd821a7f4}) (Version: 14.0.24123.0 - Microsoft Corporation)
- Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24123 (HKLM-x32\...\{206898cc-4b41-4d98-ac28-9f9ae57f91fe}) (Version: 14.0.24123.0 - Microsoft Corporation)
- MinerGate (HKLM-x32\...\MinerGate) (Version: 6.6 - Minergate Inc)
- Mozilla Firefox 53.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 53.0 (x86 en-US)) (Version: 53.0 - Mozilla)
- Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 53.0.0.6312 - Mozilla)
- Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version: 2.1.0.183 - Native Instruments)
- Native Instruments Drum Lab (HKLM-x32\...\Native Instruments Drum Lab) (Version: 1.2.0.6 - Native Instruments)
- Native Instruments Komplete Kontrol (HKLM-x32\...\Native Instruments Komplete Kontrol) (Version: 1.8.1.5 - Native Instruments)
- Native Instruments Komplete Kontrol Driver (HKLM-x32\...\Native Instruments Komplete Kontrol Driver) (Version: - Native Instruments)
- Native Instruments Kontakt 5 (HKLM-x32\...\Native Instruments Kontakt 5) (Version: 5.6.6.16 - Native Instruments)
- Native Instruments Maschine 2 (HKLM-x32\...\Native Instruments Maschine 2) (Version: 2.6.2.1 - Native Instruments)
- Native Instruments Maschine 2 Factory Library (HKLM-x32\...\Native Instruments Maschine 2 Factory Library) (Version: 1.3.0.10 - Native Instruments)
- Native Instruments Maschine Controller Driver (HKLM-x32\...\Native Instruments Maschine Controller Driver) (Version: - Native Instruments)
- Native Instruments Maschine Controller MK2 Driver (HKLM-x32\...\Native Instruments Maschine Controller MK2 Driver) (Version: - Native Instruments)
- Native Instruments Maschine Jam Driver (HKLM-x32\...\Native Instruments Maschine Jam Driver) (Version: - Native Instruments)
- Native Instruments Maschine Mikro Driver (HKLM-x32\...\Native Instruments Maschine Mikro Driver) (Version: - Native Instruments)
- Native Instruments Maschine Mikro MK2 Driver (HKLM-x32\...\Native Instruments Maschine Mikro MK2 Driver) (Version: - Native Instruments)
- Native Instruments Maschine Studio Driver (HKLM-x32\...\Native Instruments Maschine Studio Driver) (Version: - Native Instruments)
- Native Instruments Massive (HKLM-x32\...\Native Instruments Massive) (Version: 1.5.1.637 - Native Instruments)
- Native Instruments Monark (HKLM-x32\...\Native Instruments Monark) (Version: 1.3.0.3 - Native Instruments)
- Native Instruments Native Access (HKLM-x32\...\Native Instruments Native Access) (Version: 1.0.24.30 - Native Instruments)
- Native Instruments Queensbridge Story (HKLM-x32\...\Native Instruments Queensbridge Story) (Version: 1.0.0.8 - Native Instruments)
- Native Instruments Reaktor 5 (HKLM-x32\...\Native Instruments Reaktor 5) (Version: 5.9.4.1512 - Native Instruments)
- Native Instruments Reaktor 6 (HKLM-x32\...\Native Instruments Reaktor 6) (Version: 6.0.4.23 - Native Instruments)
- Native Instruments Reaktor Prism (HKLM-x32\...\Native Instruments Reaktor Prism) (Version: 1.6.0.2 - Native Instruments)
- Native Instruments Retro Machines Mk2 (HKLM-x32\...\Native Instruments Retro Machines Mk2) (Version: 1.3.0.4 - Native Instruments)
- Native Instruments Scarbee Mark I (HKLM-x32\...\Native Instruments Scarbee Mark I) (Version: 1.4.0.15 - Native Instruments)
- Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.6.0.137 - Native Instruments)
- Native Instruments Solid Bus Comp FX (HKLM-x32\...\Native Instruments Solid Bus Comp FX) (Version: 1.3.1.45 - Native Instruments)
- Native Instruments The Gentleman (HKLM-x32\...\Native Instruments The Gentleman) (Version: 1.2.0.3 - Native Instruments)
- Native Instruments Vintage Organs (HKLM-x32\...\Native Instruments Vintage Organs) (Version: 1.4.0.6 - Native Instruments)
- Native Instruments West Africa (HKLM-x32\...\Native Instruments West Africa) (Version: 1.3.0.3 - Native Instruments)
- NordVPN (HKLM-x32\...\NordVPN 6.0.0) (Version: 6.0.0 - NordVPN)
- NordVPN (x32 Version: 6.0.0 - NordVPN) Hidden
- Nox APP Player (HKLM-x32\...\Nox) (Version: 3.8.0.5 - Duodian Technology Co. Ltd.)
- NVIDIA PhysX (HKLM-x32\...\{80407BA7-7763-4395-AB98-5233F1B34E65}) (Version: 9.13.1220 - NVIDIA Corporation)
- OBS Studio (HKLM-x32\...\OBS Studio) (Version: 0.16.6 - OBS Project)
- Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.8067.2115 - Microsoft Corporation) Hidden
- Office 16 Click-to-Run Extensibility Component 64-bit Registration (Version: 16.0.8067.2115 - Microsoft Corporation) Hidden
- Office 16 Click-to-Run Licensing Component (Version: 16.0.8067.2115 - Microsoft Corporation) Hidden
- Office 16 Click-to-Run Localization Component (x32 Version: 16.0.7967.2073 - Microsoft Corporation) Hidden
- OpenIV (HKU\S-1-5-21-4026273077-4069470158-3539046228-1002\...\OpenIV) (Version: 2.9.903 - .black/OpenIV Team)
- Oracle VM VirtualBox 5.1.14 (HKLM\...\{6AE61854-0F78-49E3-ABCC-586FB43CE709}) (Version: 5.1.14 - Oracle Corporation)
- Origin (HKLM-x32\...\Origin) (Version: 10.4.11.52733 - Electronic Arts, Inc.)
- Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
- ParkControl (HKLM-x32\...\ParkControl) (Version: 1.1.8.2 - Bitsum)
- PAYDAY 2 (HKLM\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.)
- Process Lasso (HKLM-x32\...\ProcessLasso) (Version: 8.9.8.94 - Bitsum)
- Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
- Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.8 - Rockstar Games)
- RuneMate (HKLM-x32\...\5153-2584-1271-2038) (Version: 2.21.0.0 - Team RuneMate)
- RuneScape Launcher 1.2.7 (HKLM-x32\...\{FA52A2D0-298E-4D40-8BB7-39928627EA6A}) (Version: 1.2.7 - Jagex Ltd)
- RuneScape Launcher 2.2.4 (HKLM\...\RuneScape Launcher_is1) (Version: 2.2.4 - Jagex Ltd)
- SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.24.0 - SAMSUNG Electronics Co., Ltd.)
- Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
- Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
- Soundcloud Manager version 3.314 (HKLM-x32\...\{858CE085-3225-43FD-ACDA-FB672C31ECDC}_is1) (Version: 3.314 - Rootjazz)
- Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
- SumatraPDF (HKLM\...\SumatraPDF) (Version: 3.1.2 - Krzysztof Kowalczyk)
- TAP-Windows 9.21.1 (HKLM\...\TAP-Windows) (Version: 9.21.1 - )
- TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.77242 - TeamViewer)
- Technitium MAC Address Changer v6.0 (HKLM-x32\...\TMACv6.0) (Version: 6.0 - Technitium)
- Telerik Fiddler (HKLM-x32\...\Fiddler2) (Version: 4.6.3.50306 - Telerik)
- Titanfall™ 2 (HKLM-x32\...\{4BD80373-FEE7-45B6-8249-6E8E98717405}) (Version: 1.0.0.4 - Electronic Arts, Inc.)
- Usenet.nl (HKLM-x32\...\Usenet.nl_is1) (Version: - )
- Visual CertExam Suite (HKLM-x32\...\Visual CertExam Suite_is1) (Version: - Avanset)
- VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
- VMware Workstation (HKLM\...\{F4C0A853-FA3B-4404-954B-799299EB5A98}) (Version: 12.1.1 - VMware, Inc.)
- Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0-7) (Version: 1.0.26.0 - LunarG, Inc.)
- Vulkan Run Time Libraries 1.0.26.0 (Version: 1.0.26.0 - LunarG, Inc.) Hidden
- Vulkan Run Time Libraries 1.0.37.0 (HKLM\...\VulkanRT1.0.37.0-2) (Version: 1.0.37.0 - LunarG, Inc.)
- Vulkan Run Time Libraries 1.0.37.0 (Version: 1.0.37.0 - LunarG, Inc.) Hidden
- Vulkan Run Time Libraries 1.0.39.1 (HKLM\...\VulkanRT1.0.39.1) (Version: 1.0.39.1 - LunarG, Inc.)
- Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
- Windows Driver Package - BigNox Corporation YSDrv System (01/20/2017 4.3.12) (HKLM\...\1FF524CF3E58304F349D809470EC4A689914A4D5) (Version: 01/20/2017 4.3.12 - BigNox Corporation)
- WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
- Xamarin Android Player (HKLM-x32\...\{eeddf5cb-ef7e-4e3e-9575-4c64b88296ab}) (Version: 0.6.5 - Xamarin)
- Xamarin Android Player (Version: 0.6.5 - Xamarin) Hidden
- Yahoo Search Set (HKLM-x32\...\Yahoo! SearchSet) (Version: - Yahoo Inc.)
- ==================== Custom CLSID (Whitelisted): ==========================
- (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
- CustomCLSID: HKU\S-1-5-21-4026273077-4069470158-3539046228-1002_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
- CustomCLSID: HKU\S-1-5-21-4026273077-4069470158-3539046228-1002_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
- CustomCLSID: HKU\S-1-5-21-4026273077-4069470158-3539046228-1002_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
- CustomCLSID: HKU\S-1-5-21-4026273077-4069470158-3539046228-1002_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
- CustomCLSID: HKU\S-1-5-21-4026273077-4069470158-3539046228-1002_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
- CustomCLSID: HKU\S-1-5-21-4026273077-4069470158-3539046228-1002_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
- ==================== Scheduled Tasks (Whitelisted) =============
- (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
- Task: {1C4B82EA-BC24-47B0-BF50-65C1E4854761} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-05-28] (Microsoft Corporation)
- Task: {229F0634-8FF8-4B6D-B5D2-6D8AA058F8F6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-17] (Google Inc.)
- Task: {31E5D161-2A74-4742-8476-02A734190B9F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-25] (Adobe Systems Incorporated)
- Task: {398AA07B-1477-4FBD-9852-8EAE3BF5D27A} - System32\Tasks\NordVPN => C:\Program Files (x86)\NordVPN\NordVPN.exe [2017-03-02] (NordVPN)
- Task: {3B676A6E-AB7E-4412-B488-3E43A3601EA7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-05-28] (Microsoft Corporation)
- Task: {4F523269-E753-4ED3-AA45-90D6750337BE} - System32\Tasks\NordVPN Client auto-start => C:\Program Files\NordVPN\NordVPN Client.exe [2017-01-28] (NordVPN Inc.)
- Task: {55E10F2F-C77F-47C4-B464-7269F03111FD} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-17] (Google Inc.)
- Task: {6B19F9B4-EF2D-4981-B333-854D8AD2A0BA} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-05-14] (Microsoft Corporation)
- Task: {6B4C7C7F-F2BA-4669-9942-266997F2BAE0} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-02-07] (Piriform Ltd)
- Task: {81F76551-B565-41FD-8EF0-C3864F42BCF3} - System32\Tasks\[email protected] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated)
- Task: {939F985A-6D68-4BCA-B5EF-9E286210A99A} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-05-28] ()
- Task: {957F4845-EB20-48B5-82CC-B34FFDC216EB} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [2017-04-24] (Advanced Micro Devices, Inc.)
- Task: {9D8EE20D-7C98-4AB1-B139-6CDAF888F25A} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-05-28] ()
- Task: {B8779293-28E9-4DF2-BA95-AC065395B22D} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Blake\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
- Task: {BDABC407-0189-4623-BDDA-2ED2DE1CC292} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2017-05-23] (Microsoft Corporation)
- Task: {C10F0A2D-DE4F-47FC-9B0B-C15F6F222AA0} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-05-14] (Microsoft Corporation)
- (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
- ==================== Shortcuts =============================
- (The entries could be listed to be restored or removed.)
- ShortcutWithArgument: C:\Users\Blake\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\b8da4a38624bbb1e\Feedback.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=gfdkimpbcpahaombhbimeihdjnejgicl
- ==================== Loaded Modules (Whitelisted) ==============
- 2016-07-16 07:42 - 2016-07-16 07:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
- 2017-05-10 12:08 - 2017-04-27 20:49 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
- 2016-08-18 04:27 - 2016-08-18 04:27 - 00216576 _____ () C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
- 2017-01-18 20:39 - 2016-10-19 11:23 - 00017376 _____ () C:\Users\Blake\AppData\Local\Kingosoft\Kingo Root\update_27205\bin\KingoSoftService.exe
- 2017-01-28 21:49 - 2017-03-23 19:06 - 02259232 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
- 2016-04-14 17:16 - 2016-04-14 17:16 - 12471368 _____ () C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
- 2016-11-03 08:44 - 2017-05-28 05:07 - 08931008 _____ () C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\1033\GrooveIntlResource.dll
- 2016-11-06 07:57 - 2016-11-06 07:57 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
- 2017-03-15 05:11 - 2017-03-04 02:31 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
- 2017-03-15 05:11 - 2017-03-04 02:30 - 00693248 _____ () C:\Windows\ShellExperiences\MtcUvc.dll
- 2017-05-17 02:56 - 2017-05-17 02:56 - 18441216 _____ () C:\Program Files\WindowsApps\Microsoft.3DBuilder_14.1.1302.0_x64__8wekyb3d8bbwe\Builder3D.exe
- 2017-05-17 02:56 - 2017-05-17 02:56 - 00204800 _____ () C:\Program Files\WindowsApps\Microsoft.3DBuilder_14.1.1302.0_x64__8wekyb3d8bbwe\Lib3mfUAP.dll
- 2017-03-02 10:25 - 2017-03-02 10:25 - 00411312 _____ () C:\Program Files (x86)\NordVPN\nordvpn-service.exe
- 2017-05-03 16:39 - 2017-05-03 16:40 - 00020480 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.425.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
- 2017-05-03 16:39 - 2017-05-03 16:40 - 26322944 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.425.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
- 2017-05-03 16:39 - 2017-05-03 16:40 - 00441856 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.425.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.AGM.Native.Windows.dll
- 2017-05-03 16:39 - 2017-05-03 16:40 - 02139648 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.425.10010.0_x64__8wekyb3d8bbwe\MediaEngine.dll
- 2017-05-03 16:39 - 2017-05-03 16:40 - 02901928 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.425.10010.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
- 2017-05-03 16:39 - 2017-05-03 16:40 - 00046080 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.425.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.Edit.Services.dll
- 2016-11-03 07:46 - 2016-11-03 07:46 - 00680448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.425.10010.0_x64__8wekyb3d8bbwe\Microsoft.DesignCore.dll
- 2017-05-03 16:39 - 2017-05-03 16:40 - 00641024 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.425.10010.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll
- 2017-05-03 16:39 - 2017-05-03 16:40 - 01062400 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.425.10010.0_x64__8wekyb3d8bbwe\Microsoft.Sharing.dll
- 2017-05-23 15:25 - 2017-05-23 15:25 - 03918848 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1705.1301.0_x64__8wekyb3d8bbwe\Calculator.exe
- 2017-05-24 15:06 - 2017-05-24 15:06 - 13096136 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8218.40507.0_x64__8wekyb3d8bbwe\Office.UI.Xaml.Core.dll
- 2017-05-25 16:00 - 2017-05-25 16:00 - 00074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.16.595.0_x64__kzf8qxf38zg5c\SkypeHost.exe
- 2017-05-25 16:00 - 2017-05-25 16:00 - 00201728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.16.595.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
- 2017-04-07 07:08 - 2017-04-07 07:08 - 01695440 _____ () C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.8241.57621.0_x64__8wekyb3d8bbwe\Microsoft.Applications.Telemetry.Windows.dll
- 2017-05-26 14:22 - 2017-05-26 14:22 - 13207240 _____ () C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.8241.57621.0_x64__8wekyb3d8bbwe\Office.UI.Xaml.Core.dll
- 2017-03-05 20:05 - 2017-03-05 20:05 - 01032960 _____ () C:\Program Files (x86)\Nox\bin\MultiPlayerManager.exe
- 2017-05-15 23:11 - 2017-05-09 05:13 - 03767640 _____ () C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\libglesv2.dll
- 2017-05-15 23:11 - 2017-05-09 05:13 - 00100696 _____ () C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\libegl.dll
- 2017-05-08 01:18 - 2017-05-08 01:18 - 10601984 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11703.1001.45.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
- 2017-05-08 01:18 - 2017-05-08 01:18 - 02640384 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11703.1001.45.0_x64__8wekyb3d8bbwe\MS.Entertainment.Common.Mobile.dll
- 2017-05-08 01:18 - 2017-05-08 01:18 - 00765440 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11703.1001.45.0_x64__8wekyb3d8bbwe\WinStore.Vui.dll
- 2017-05-31 22:32 - 2017-05-31 22:32 - 23661056 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17042.14211.0_x64__8wekyb3d8bbwe\Video.UI.exe
- 2017-05-31 22:32 - 2017-05-31 22:32 - 09016320 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17042.14211.0_x64__8wekyb3d8bbwe\EntCommon.dll
- 2017-05-31 22:32 - 2017-05-31 22:32 - 03140520 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17042.14211.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
- 2017-03-15 05:11 - 2017-03-04 02:12 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
- 2017-03-15 05:11 - 2017-03-04 02:05 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
- 2017-03-15 05:11 - 2017-03-04 02:05 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
- 2017-05-10 12:08 - 2017-04-27 19:36 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
- 2017-05-10 12:08 - 2017-04-27 19:37 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
- 2017-06-01 23:49 - 2017-06-01 23:49 - 00016896 _____ () C:\Program Files\WindowsApps\Microsoft.XboxApp_29.29.31001.0_x64__8wekyb3d8bbwe\XboxApp.exe
- 2017-06-01 23:49 - 2017-06-01 23:49 - 33855488 _____ () C:\Program Files\WindowsApps\Microsoft.XboxApp_29.29.31001.0_x64__8wekyb3d8bbwe\XboxApp.dll
- 2016-11-03 07:46 - 2016-11-03 07:46 - 01651112 _____ () C:\Program Files\WindowsApps\Microsoft.XboxApp_29.29.31001.0_x64__8wekyb3d8bbwe\winsdkfb.dll
- 2017-03-05 20:05 - 2017-03-05 20:36 - 00367104 _____ () C:\Program Files (x86)\Bignox\BigNoxVM\RT\VBoxDDU.dll
- 2017-03-05 20:05 - 2017-03-05 20:36 - 03585536 _____ () C:\Program Files (x86)\Bignox\BigNoxVM\RT\VBoxRT.dll
- 2017-03-05 20:05 - 2017-03-05 20:05 - 00815104 _____ () C:\Program Files (x86)\Nox\bin\nox_adb.exe
- 2017-03-05 20:05 - 2017-03-05 20:36 - 00169392 _____ () C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe
- 2017-03-05 20:05 - 2017-03-05 20:36 - 02460160 _____ () C:\Program Files (x86)\Bignox\BigNoxVM\RT\VBoxVMM.DLL
- 2017-03-05 20:05 - 2017-03-05 20:36 - 00662016 _____ () C:\Program Files (x86)\Bignox\BigNoxVM\RT\VBoxREM.dll
- 2017-03-05 20:05 - 2017-03-05 20:36 - 00021504 _____ () C:\Program Files (x86)\Bignox\BigNoxVM\RT\VBoxSharedClipboard.DLL
- 2017-03-05 20:05 - 2017-03-05 20:36 - 00038400 _____ () C:\Program Files (x86)\Bignox\BigNoxVM\RT\VBoxDragAndDropSvc.DLL
- 2017-03-05 20:05 - 2017-03-05 20:36 - 00039936 _____ () C:\Program Files (x86)\Bignox\BigNoxVM\RT\VBoxGuestPropSvc.DLL
- 2017-03-05 20:05 - 2017-03-05 20:36 - 00037376 _____ () C:\Program Files (x86)\Bignox\BigNoxVM\RT\VBoxGuestControlSvc.DLL
- 2017-03-05 20:05 - 2017-03-05 20:36 - 01480192 _____ () C:\Program Files (x86)\Bignox\BigNoxVM\RT\VBoxDD.DLL
- 2017-03-05 20:05 - 2017-03-05 20:36 - 00192512 _____ () C:\Program Files (x86)\Bignox\BigNoxVM\RT\VBoxDD2.dll
- 2017-03-05 20:05 - 2017-03-05 20:36 - 00031232 _____ () C:\Program Files (x86)\Bignox\BigNoxVM\RT\NOXa.dll
- 2017-03-05 20:05 - 2017-03-05 20:36 - 00032256 _____ () C:\Program Files (x86)\Bignox\BigNoxVM\RT\VBoxSharedFolders.DLL
- 2015-01-17 05:27 - 2015-01-17 05:27 - 34734712 _____ () C:\Program Files (x86)\Image-Line\Shared\dsp_ipp_x64.dll
- 2015-03-18 12:18 - 2015-03-18 12:18 - 00872056 _____ () C:\Program Files (x86)\Image-Line\Shared\QuickFontCache_x64.dll
- 2014-12-02 15:32 - 2014-12-02 15:32 - 00607352 _____ () C:\Program Files (x86)\Image-Line\Shared\freetype_x64.dll
- 2015-04-26 14:28 - 2015-04-26 14:28 - 04608312 _____ () C:\Program Files (x86)\Image-Line\FL Studio 12\Plugins\Fruity\Effects\Soundgoodizer\Soundgoodizer_x64.dll
- 2015-04-26 14:34 - 2015-04-26 14:34 - 02442520 _____ () C:\Program Files (x86)\Image-Line\FL Studio 12\Plugins\Fruity\Effects\Fruity Parametric EQ 2\Fruity Parametric EQ 2_x64.dll
- 2015-04-26 14:28 - 2015-04-26 14:28 - 02446648 _____ () C:\Program Files (x86)\Image-Line\FL Studio 12\Plugins\Fruity\Effects\Fruity Limiter\Fruity Limiter_x64.dll
- 2015-04-26 14:28 - 2015-04-26 14:28 - 02442040 _____ () C:\Program Files (x86)\Image-Line\FL Studio 12\Plugins\Fruity\Effects\Fruity Reeverb 2\Fruity Reeverb 2_x64.dll
- 2014-12-02 15:32 - 2014-12-02 15:32 - 00076408 _____ () C:\Program Files (x86)\Image-Line\Shared\Reverb_x64.dll
- 2016-08-18 04:14 - 2016-08-18 04:14 - 00222720 _____ () C:\Program Files (x86)\GNU\GnuPG\libksba-8.dll
- 2016-08-18 04:03 - 2016-08-18 04:03 - 00050176 _____ () C:\Program Files (x86)\GNU\GnuPG\libw32pth-0.dll
- 2016-08-18 04:14 - 2016-08-18 04:14 - 00073728 _____ () C:\Program Files (x86)\GNU\GnuPG\libassuan-0.dll
- 2016-08-18 04:17 - 2016-08-18 04:17 - 00751104 _____ () C:\Program Files (x86)\GNU\GnuPG\libgcrypt-20.dll
- 2016-08-18 04:09 - 2016-08-18 04:09 - 00103424 _____ () C:\Program Files (x86)\GNU\GnuPG\libgpg-error-0.dll
- 2016-04-14 17:16 - 2016-04-14 17:16 - 01309768 _____ () C:\Program Files (x86)\VMware\VMware Workstation\libxml2.dll
- 2016-04-14 17:16 - 2016-04-14 17:16 - 00173128 _____ () C:\Program Files (x86)\VMware\VMware Workstation\nfc-types.dll
- 2016-04-14 17:16 - 2016-04-14 17:16 - 00199752 _____ () C:\Program Files (x86)\VMware\VMware Workstation\LIBEXPAT.dll
- 2016-04-14 17:16 - 2016-04-14 17:16 - 00396872 _____ () C:\Program Files (x86)\VMware\VMware Workstation\ssoClient.dll
- 2017-05-15 11:27 - 2017-04-20 04:53 - 02493440 _____ () C:\Program Files (x86)\Origin\libGLESv2.dll
- 2017-03-05 20:05 - 2017-03-05 20:05 - 00277504 _____ () C:\Program Files (x86)\Nox\bin\VBoxApi.dll
- 2017-03-05 20:05 - 2017-03-05 20:05 - 00117262 _____ () C:\Program Files (x86)\Nox\bin\libgcc_s_dw2-1.dll
- 2017-03-05 20:05 - 2017-03-05 20:05 - 01026574 _____ () C:\Program Files (x86)\Nox\bin\libstdc++-6.dll
- 2017-03-05 20:05 - 2017-03-05 20:05 - 03758827 _____ () C:\Program Files (x86)\Nox\bin\icuin53.dll
- 2017-03-05 20:05 - 2017-03-05 20:05 - 02093901 _____ () C:\Program Files (x86)\Nox\bin\icuuc53.dll
- 2017-03-05 20:05 - 2017-03-05 20:05 - 03327416 _____ () C:\Program Files (x86)\Nox\bin\icudt53.dll
- 2017-03-05 20:05 - 2017-03-05 20:05 - 00019456 _____ () C:\Program Files (x86)\Nox\bin\QtQuick.2\qtquick2plugin.dll
- 2017-03-05 20:05 - 2017-03-05 20:05 - 00900608 _____ () C:\Program Files (x86)\Nox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll
- 2017-03-05 20:05 - 2017-03-05 20:05 - 00007168 _____ () C:\Program Files (x86)\Nox\bin\firewall_mgr.dll
- 2017-03-05 20:05 - 2017-03-05 20:05 - 00169984 _____ () C:\Program Files (x86)\Nox\bin\glut32.dll
- 2017-03-05 20:05 - 2017-03-05 20:05 - 00199168 _____ () C:\Program Files (x86)\Nox\bin\NoxCommon.dll
- 2017-03-05 20:05 - 2017-03-05 20:05 - 00498688 _____ () C:\Program Files (x86)\Nox\bin\hlog4qt1.dll
- 2017-03-05 20:05 - 2017-03-05 20:05 - 00039424 _____ () C:\Program Files (x86)\Nox\bin\QtWebKit\qmlwebkitplugin.dll
- ==================== Alternate Data Streams (Whitelisted) =========
- (If an entry is included in the fixlist, only the ADS will be removed.)
- ==================== Safe Mode (Whitelisted) ===================
- (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
- HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
- HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec => ""="Service"
- HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
- HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PAexec => ""="Service"
- ==================== Association (Whitelisted) ===============
- (If an entry is included in the fixlist, the registry item will be restored to default or removed.)
- ==================== Internet Explorer trusted/restricted ===============
- (If an entry is included in the fixlist, it will be removed from the registry.)
- IE trusted site: HKU\S-1-5-21-4026273077-4069470158-3539046228-1002\...\hola.org -> hxxp://hola.org
- ==================== Hosts content: ===============================
- (If needed Hosts: directive could be included in the fixlist to reset Hosts.)
- 2017-03-17 17:44 - 2017-04-11 14:16 - 00001074 _____ C:\WINDOWS\system32\Drivers\etc\hosts
- ==================== Other Areas ============================
- (Currently there is no automatic fix for this section.)
- HKU\S-1-5-21-4026273077-4069470158-3539046228-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Blake\Desktop\aXPHKyr.jpg
- DNS Servers: 78.46.223.24 - 162.242.211.137
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
- Windows Firewall is enabled.
- ==================== MSCONFIG/TASK MANAGER disabled items ==
- HKLM\...\StartupApproved\Run: => "hola"
- HKLM\...\StartupApproved\Run: => "MacDrive 10 helper"
- HKLM\...\StartupApproved\Run: => "WindowsDefender"
- HKLM\...\StartupApproved\Run: => "Malwarebytes TrayApp"
- HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
- HKU\S-1-5-21-4026273077-4069470158-3539046228-1002\...\StartupApproved\StartupFolder: => "AutoMoparscape.lnk"
- HKU\S-1-5-21-4026273077-4069470158-3539046228-1002\...\StartupApproved\Run: => "BingSvc"
- HKU\S-1-5-21-4026273077-4069470158-3539046228-1002\...\StartupApproved\Run: => "OneDrive"
- HKU\S-1-5-21-4026273077-4069470158-3539046228-1002\...\StartupApproved\Run: => "Skype"
- HKU\S-1-5-21-4026273077-4069470158-3539046228-1002\...\StartupApproved\Run: => "Steam"
- HKU\S-1-5-21-4026273077-4069470158-3539046228-1002\...\StartupApproved\Run: => "BlueStacks Agent"
- HKU\S-1-5-21-4026273077-4069470158-3539046228-1002\...\StartupApproved\Run: => "MinerGateGui"
- ==================== FirewallRules (Whitelisted) ===============
- (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
- FirewallRules: [{6B647266-B7D6-4BAB-80E9-69E6F9145732}] => (Block) %ProgramFiles% (x86)\Image-Line\FL Studio 11\FL.exe
- FirewallRules: [{FB123C77-A6D0-4481-9D24-67115E9CF6B2}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe
- FirewallRules: [{F19F118D-6217-490E-B625-4B4FF76F4E57}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe
- FirewallRules: [{55CE4715-8E43-4091-8E63-407099B6016F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
- FirewallRules: [{97FECB77-9BC5-4D57-9F2A-4B5EA14B5C29}] => (Allow) C:\Users\Blake\AppData\Roaming\uTorrent\uTorrent.exe
- FirewallRules: [{4C773217-CD21-4A62-9523-3EC388229550}] => (Allow) C:\Users\Blake\AppData\Roaming\uTorrent\uTorrent.exe
- FirewallRules: [{D49D9397-5C1D-49BF-A6F9-EF078658F348}] => (Allow) C:\Users\Blake\AppData\Roaming\uTorrent\uTorrent.exe
- FirewallRules: [{2339734E-3F6C-4D22-AB36-44924DE55A40}] => (Allow) C:\Users\Blake\AppData\Roaming\uTorrent\uTorrent.exe
- FirewallRules: [{8696E579-E1AF-4434-A796-926F0831FF46}] => (Allow) C:\Users\Blake\AppData\Roaming\uTorrent\uTorrent.exe
- FirewallRules: [{D295B754-1D52-4559-9E4B-F6DE45F761BD}] => (Allow) C:\Users\Blake\AppData\Roaming\uTorrent\uTorrent.exe
- FirewallRules: [{98D53E5C-BC90-41C2-9160-3404E43044CE}] => (Block) C:\games\halo\halo_online.exe
- FirewallRules: [{EBBB1C7B-BA56-42F2-8FBD-20400B573343}] => (Block) C:\games\halo\halo_online.exe
- FirewallRules: [UDP Query User{5523CFE3-B576-456B-8884-743A24E40ADD}C:\games\halo\halo_online.exe] => (Allow) C:\games\halo\halo_online.exe
- FirewallRules: [TCP Query User{6DAB3CF9-7906-4F08-AE7A-CEBF2698C28E}C:\games\halo\halo_online.exe] => (Allow) C:\games\halo\halo_online.exe
- FirewallRules: [{DCF0D6D2-57BF-41E7-A76A-6183453F946F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
- FirewallRules: [{5D4AD684-5F75-4F74-A6F3-64484C06195E}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
- FirewallRules: [{A4339E15-A114-47C6-A387-6C07ABDC5C8F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Source\hl2.exe
- FirewallRules: [{372D0FFB-3617-4EAC-9B82-FEF4C0D9D1B9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Source\hl2.exe
- FirewallRules: [{8831A76F-6432-4F0B-A8BF-FC24B8E3C118}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
- FirewallRules: [{78606DB9-8B5A-4ED9-BFC8-CCC7FE209AA3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
- FirewallRules: [{11D72E2F-9640-410C-8844-8C11AA37022F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GunZ 2 The Second Duel\Gunz2_Steam.exe
- FirewallRules: [{78396FA6-919E-4C1C-9C3F-6FB7819E3AF0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GunZ 2 The Second Duel\Gunz2_Steam.exe
- FirewallRules: [{39DFEABD-B6A8-40C5-821D-049427566FE8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
- FirewallRules: [{EBB0E094-B161-4E03-A6AF-FB4E3A820B08}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
- FirewallRules: [TCP Query User{28A201D8-982F-4CD7-97AC-004EEC9B2F4B}C:\program files (x86)\freestyle gunz\gunz.exe] => (Allow) C:\program files (x86)\freestyle gunz\gunz.exe
- FirewallRules: [UDP Query User{E6FC41A2-53D2-46E9-842F-3CE18B64FA76}C:\program files (x86)\freestyle gunz\gunz.exe] => (Allow) C:\program files (x86)\freestyle gunz\gunz.exe
- FirewallRules: [{7730E185-E63B-4531-9F0E-68C972B1CB19}] => (Block) %ProgramFiles% (x86)\Grand Theft Auto V\GTAVLauncher.exe
- FirewallRules: [{EEC44B3F-02C1-4238-AA05-0F50FF257CEA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Ghosts\iw6mp64_ship.exe
- FirewallRules: [{12BA1C42-3602-4A9B-A910-1CA853E9CEE4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Ghosts\iw6mp64_ship.exe
- FirewallRules: [TCP Query User{4FF5F692-F379-457F-B29A-31151CE6EB6C}C:\games\doom\doomx64vk.exe] => (Block) C:\games\doom\doomx64vk.exe
- FirewallRules: [UDP Query User{3F3170E1-AC55-4BD8-A0D9-E07CF93F0047}C:\games\doom\doomx64vk.exe] => (Block) C:\games\doom\doomx64vk.exe
- FirewallRules: [TCP Query User{5600085A-021E-4E8F-99BB-FEBCABEC0F37}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
- FirewallRules: [UDP Query User{A7AF4E68-19E7-4670-ADBC-C789DC83442E}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
- FirewallRules: [TCP Query User{147D3C2A-5FB9-4B12-AEC4-8378622053C2}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
- FirewallRules: [UDP Query User{8583155A-6896-4700-B6D1-71347E993F7A}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
- FirewallRules: [{6EB709C2-6FB8-47C4-B015-1C21696F4FBD}] => (Allow) C:\Program Files (x86)\Fiddler2\Fiddler.exe
- FirewallRules: [TCP Query User{F9C08B63-9C42-404E-AFBD-913EC7C4F77B}C:\users\blake\desktop\halo online\eldorado.exe] => (Allow) C:\users\blake\desktop\halo online\eldorado.exe
- FirewallRules: [UDP Query User{378D027E-A123-42BC-9FA7-FC13B952EAF0}C:\users\blake\desktop\halo online\eldorado.exe] => (Allow) C:\users\blake\desktop\halo online\eldorado.exe
- FirewallRules: [{DBDA5BCC-A0AB-4D08-983B-5F8760B47DC6}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
- FirewallRules: [{5347F075-0DBE-4B11-BF14-6FB6B62ACCE1}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
- FirewallRules: [{1EB43ED7-F37E-4A4B-9FE9-3B5E100C8F2C}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
- FirewallRules: [{46D104B4-9C31-417F-9F11-E3D3EC917DF4}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
- FirewallRules: [{6879B191-A591-4531-9C3E-CB95585147C4}] => (Allow) C:\Program Files (x86)\Microsoft Games\Halo 2\halo2.exe
- FirewallRules: [{63519163-0071-495A-9542-CFC15F6B7FFC}] => (Allow) C:\Program Files (x86)\Microsoft Games\Halo 2\halo2.exe
- FirewallRules: [{01DAC17C-0D64-4A95-826D-C44F4711F600}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
- FirewallRules: [{0A8DC552-F872-4014-A0A9-1A130EF05F72}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
- FirewallRules: [{26541420-7CE9-4C02-AD22-2FB6798C7CF3}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
- FirewallRules: [{C0E7E16A-A372-43AD-8E67-808F7E4FB522}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
- FirewallRules: [{5C4A5C21-B775-4AFA-91FA-9F5F5DF499B5}] => (Allow) C:\Program Files (x86)\Nox\bin\Nox.exe
- FirewallRules: [{03A659DC-347E-46C9-BD0C-9E92FBA4CA28}] => (Allow) C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe
- FirewallRules: [VIRT-MIGL-In-TCP-NoScope] => (Allow) %systemroot%\system32\vmms.exe
- FirewallRules: [VIRT-REMOTEDESKTOP-In-TCP-NoScope] => (Allow) %systemroot%\system32\vmms.exe
- FirewallRules: [{9175D818-922A-44A6-91B7-B8CCAC40DE74}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
- FirewallRules: [{9C0C2F76-9480-4463-9F53-B26D0F62B152}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
- FirewallRules: [{F604D9CB-0328-4617-A848-2871629E78C7}] => (Allow) C:\Program Files\Xamarin Android Player\AndroidPlayer.exe
- FirewallRules: [{5642DFEE-F9F0-4DFA-BD60-42CF90D11382}] => (Allow) C:\Program Files\Xamarin Android Player\minimal_adb\adb.exe
- FirewallRules: [TCP Query User{B6939031-0812-4955-A790-BE6816F143C2}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
- FirewallRules: [UDP Query User{8716F13F-9B53-4129-BFA1-27C30DA00635}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
- FirewallRules: [TCP Query User{91C55DCB-AC7C-477F-8505-D10BBA9AD609}C:\program files (x86)\cisco packet tracer 6.2sv\bin\packettracer6.exe] => (Allow) C:\program files (x86)\cisco packet tracer 6.2sv\bin\packettracer6.exe
- FirewallRules: [UDP Query User{71447708-9784-4C97-B8D3-6D1BA47FC6FD}C:\program files (x86)\cisco packet tracer 6.2sv\bin\packettracer6.exe] => (Allow) C:\program files (x86)\cisco packet tracer 6.2sv\bin\packettracer6.exe
- FirewallRules: [{D97F4061-676A-4E0D-99F7-547CFCECA7E6}] => (Allow) C:\Program Files (x86)\Origin Games\Titanfall2\Titanfall2.exe
- FirewallRules: [{05904208-288B-488F-BB69-545E1C6EA4DB}] => (Allow) C:\Program Files (x86)\Origin Games\Titanfall2\Titanfall2.exe
- FirewallRules: [{8E3EF8D8-D82F-43D0-AB9E-97D0107DDA7B}] => (Allow) C:\Program Files (x86)\Origin Games\Titanfall2\Titanfall2_trial.exe
- FirewallRules: [{F6040D5E-486A-4CB3-8B4B-AB24D5C2055D}] => (Allow) C:\Program Files (x86)\Origin Games\Titanfall2\Titanfall2_trial.exe
- FirewallRules: [TCP Query User{68BAF093-5636-4BE7-BB88-32CEA4787581}C:\users\blake\desktop\stratis-qt-v2.0.0.2-win\stratis-qt.exe] => (Allow) C:\users\blake\desktop\stratis-qt-v2.0.0.2-win\stratis-qt.exe
- FirewallRules: [UDP Query User{14A51133-DBE0-4A56-876C-9A6EA3B785A9}C:\users\blake\desktop\stratis-qt-v2.0.0.2-win\stratis-qt.exe] => (Allow) C:\users\blake\desktop\stratis-qt-v2.0.0.2-win\stratis-qt.exe
- FirewallRules: [{45D6DF74-4ED1-4C54-B15F-0541A9D5E79C}] => (Block) %ProgramFiles%\Adobe\Adobe Photoshop CC 2015\Photoshop.exe
- FirewallRules: [{260D6F75-C435-4449-AD2F-7558DD064BEF}] => (Block) %ProgramFiles%\Adobe\Adobe Photoshop CC 2015\Photoshop.exe
- FirewallRules: [{88E9FC0A-D7B4-4144-92AE-CBF71FEA89FF}] => (Block) %ProgramFiles% (x86)\Grand Theft Auto V\GTA5.exe
- FirewallRules: [{B0AB6713-6EA9-4678-8DC1-68A6672CEB76}] => (Block) %ProgramFiles% (x86)\Grand Theft Auto V\GTAVLauncher.exe
- FirewallRules: [{FE4B95F7-801F-4B6E-99A5-2EEBE5A74ACF}] => (Block) %ProgramFiles% (x86)\Grand Theft Auto V\GTA5.exe
- FirewallRules: [{7CEA2A1B-3C7D-4F91-8203-CF5146C44C91}] => (Block) %ProgramFiles% (x86)\Grand Theft Auto V\GTAVLauncher.exe
- FirewallRules: [{1613F673-721F-4945-9FF4-FA433F6E0785}] => (Allow) C:\Program Files (x86)\Grand Theft Auto V\GTA5.exe
- FirewallRules: [{D3B46EE7-67A5-40A9-8791-681CF9FF1A6D}] => (Allow) C:\Program Files (x86)\Grand Theft Auto V\GTA5.exe
- FirewallRules: [TCP Query User{5CA65507-0623-4029-9A86-53C6CBF93EB4}C:\users\blake\jagexcache\jagexlauncher\bin\jagexlauncher.exe] => (Allow) C:\users\blake\jagexcache\jagexlauncher\bin\jagexlauncher.exe
- FirewallRules: [UDP Query User{BD8F05DA-746F-4BA9-B9EB-844B7273B36F}C:\users\blake\jagexcache\jagexlauncher\bin\jagexlauncher.exe] => (Allow) C:\users\blake\jagexcache\jagexlauncher\bin\jagexlauncher.exe
- FirewallRules: [{01ACAF2E-DB1A-4052-8073-E97D41D3747D}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
- FirewallRules: [{3D8D893A-B4DE-4522-A85B-B0B311ACFE9B}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
- FirewallRules: [{E9F8E3A0-4016-4C44-926C-F762AC4006CC}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
- FirewallRules: [{DBED781E-E83F-48F7-9229-3220054ADF1C}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
- FirewallRules: [TCP Query User{8F0BB3A4-7863-4D8D-9D7B-169B485DC420}C:\program files (x86)\image-line\fl studio 11\system\tools\bridge\64bit\ilbridge.exe] => (Allow) C:\program files (x86)\image-line\fl studio 11\system\tools\bridge\64bit\ilbridge.exe
- FirewallRules: [UDP Query User{8C37AADA-A04A-436B-8ACE-C0F9D7A61DA9}C:\program files (x86)\image-line\fl studio 11\system\tools\bridge\64bit\ilbridge.exe] => (Allow) C:\program files (x86)\image-line\fl studio 11\system\tools\bridge\64bit\ilbridge.exe
- FirewallRules: [TCP Query User{7A3AE05C-8D93-4F4F-8DB7-1B7E09599409}C:\program files\common files\native instruments\maschine 2\scanpluginsapp_win32.exe] => (Allow) C:\program files\common files\native instruments\maschine 2\scanpluginsapp_win32.exe
- FirewallRules: [UDP Query User{10197ABA-2E9D-419F-8D06-ECD36091848E}C:\program files\common files\native instruments\maschine 2\scanpluginsapp_win32.exe] => (Allow) C:\program files\common files\native instruments\maschine 2\scanpluginsapp_win32.exe
- FirewallRules: [TCP Query User{B8D75636-5898-474A-8EF3-D70A964F211C}C:\program files\common files\native instruments\maschine 2\scanpluginsapp_x64.exe] => (Allow) C:\program files\common files\native instruments\maschine 2\scanpluginsapp_x64.exe
- FirewallRules: [UDP Query User{53703A91-6324-43E8-8EA6-0AE4D181897C}C:\program files\common files\native instruments\maschine 2\scanpluginsapp_x64.exe] => (Allow) C:\program files\common files\native instruments\maschine 2\scanpluginsapp_x64.exe
- FirewallRules: [TCP Query User{A6141DFD-F8AC-45CA-9242-E79D90558E35}C:\program files\native instruments\maschine 2\maschine 2.exe] => (Allow) C:\program files\native instruments\maschine 2\maschine 2.exe
- FirewallRules: [UDP Query User{9E772CBB-281B-40E4-956A-3E2436BF1026}C:\program files\native instruments\maschine 2\maschine 2.exe] => (Allow) C:\program files\native instruments\maschine 2\maschine 2.exe
- FirewallRules: [TCP Query User{22529DAD-5FEA-47D9-B693-78D7AB437085}C:\program files (x86)\image-line\fl studio 12\fl64.exe] => (Allow) C:\program files (x86)\image-line\fl studio 12\fl64.exe
- FirewallRules: [UDP Query User{B9A562F8-FA01-4998-86E1-DF523E7064AE}C:\program files (x86)\image-line\fl studio 12\fl64.exe] => (Allow) C:\program files (x86)\image-line\fl studio 12\fl64.exe
- FirewallRules: [TCP Query User{AEEB7CDC-73E2-4666-8F33-3E1771F37D06}C:\program files (x86)\image-line\fl studio 12\fl.exe] => (Allow) C:\program files (x86)\image-line\fl studio 12\fl.exe
- FirewallRules: [UDP Query User{F45494EB-CA02-49C5-8D39-EE29713E7D76}C:\program files (x86)\image-line\fl studio 12\fl.exe] => (Allow) C:\program files (x86)\image-line\fl studio 12\fl.exe
- FirewallRules: [{6CD89160-F104-4B93-80F4-AB14F87585C0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
- FirewallRules: [{6685B03A-6C8F-488F-9B9C-6FBA626392C9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
- FirewallRules: [{F85DECC9-3CFE-4C4A-BE57-C5572A0C93B0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
- FirewallRules: [{314DB701-3518-4408-BB1F-F5D0E7E1A3C7}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
- FirewallRules: [{EFECD620-5F33-478C-848C-9A89365971D0}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- FirewallRules: [{5722A432-B384-49E2-8CED-5B06ED50EEC4}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
- ==================== Restore Points =========================
- 23-05-2017 08:22:05 Windows Update
- 31-05-2017 10:55:42 Windows Update
- ==================== Faulty Device Manager Devices =============
- Name: Hyper-V Virtual Switch Extension Adapter
- Description: Hyper-V Virtual Switch Extension Adapter
- Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
- Manufacturer: Microsoft
- Service: VMSMP
- Problem: : This device cannot start. (Code10)
- Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
- On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
- Name: Hyper-V Virtual Ethernet Adapter
- Description: Hyper-V Virtual Ethernet Adapter
- Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
- Manufacturer: Microsoft
- Service: VMSMP
- Problem: : This device is disabled. (Code 22)
- Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
- Name:
- Description:
- Class Guid:
- Manufacturer:
- Service:
- Problem: : The drivers for this device are not installed. (Code 28)
- Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
- ==================== Event log errors: =========================
- Application errors:
- ==================
- Error: (06/04/2017 04:49:05 AM) (Source: SideBySide) (EventID: 33) (User: )
- Description: Activation context generation failed for "c:\program files\amd\cim\bin64\SetACL64.exe".
- Dependent Assembly Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
- Please use sxstrace.exe for detailed diagnosis.
- Error: (06/04/2017 04:48:45 AM) (Source: SideBySide) (EventID: 35) (User: )
- Description: Activation context generation failed for "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest".Error in manifest or policy file "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL" on line 1.
- Component identity found in manifest does not match the identity of the component requested.
- Reference is UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
- Definition is UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
- Please use sxstrace.exe for detailed diagnosis.
- Error: (06/04/2017 04:48:28 AM) (Source: SideBySide) (EventID: 33) (User: )
- Description: Activation context generation failed for "c:\program files\amd\cim\bin64\SetACL64.exe".
- Dependent Assembly Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
- Please use sxstrace.exe for detailed diagnosis.
- Error: (06/03/2017 11:03:29 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Client application registered 2 identical instances of service Blake._omni-live._tcp.local. port 1582.
- Error: (06/03/2017 10:52:05 AM) (Source: Application Hang) (EventID: 1002) (User: )
- Description: The program FL.exe version 1.1.5.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
- Process ID: 9a0
- Start Time: 01d2dc6edeb2633b
- Termination Time: 18
- Application Path: C:\Program Files (x86)\Image-Line\FL Studio 12\FL.exe
- Report Id: 31e18f53-486c-11e7-9c20-021f2cc83acd
- Faulting package full name:
- Faulting package-relative application ID:
- Error: (06/03/2017 09:40:41 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Client application registered 2 identical instances of service Blake._omni-live._tcp.local. port 1582.
- Error: (06/03/2017 09:40:40 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Client application registered 2 identical instances of service Blake._omni-live._tcp.local. port 1582.
- Error: (06/03/2017 09:39:54 AM) (Source: Bonjour Service) (EventID: 100) (User: )
- Description: Client application registered 2 identical instances of service Blake._omni-live._tcp.local. port 1582.
- Error: (06/03/2017 07:30:22 AM) (Source: Application Hang) (EventID: 1002) (User: )
- Description: The program FL64.exe version 1.1.5.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
- Process ID: 2214
- Start Time: 01d2dbea8cfb8d21
- Termination Time: 35
- Application Path: C:\Program Files (x86)\Image-Line\FL Studio 12\FL64.exe
- Report Id: 0177ea58-4850-11e7-9c20-021f2cc83acd
- Faulting package full name:
- Faulting package-relative application ID:
- Error: (06/03/2017 04:02:32 AM) (Source: SideBySide) (EventID: 33) (User: )
- Description: Activation context generation failed for "c:\program files\amd\cim\bin64\SetACL64.exe".
- Dependent Assembly Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found.
- Please use sxstrace.exe for detailed diagnosis.
- System errors:
- =============
- Error: (06/01/2017 05:35:37 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
- Description: The VMware Authorization Service service terminated unexpectedly. It has done this 1 time(s).
- Error: (05/31/2017 08:13:55 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
- Description: The Adobe Genuine Software Integrity Service service terminated unexpectedly. It has done this 1 time(s).
- Error: (05/24/2017 11:08:58 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
- Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {D63B10C5-BB46-4990-A94F-E40B9D520160}
- and APPID
- {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
- to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Error: (05/15/2017 11:27:15 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
- Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
- and APPID
- {F72671A9-012C-4725-9D2F-2A4D32D65169}
- to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- Error: (05/15/2017 11:21:56 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
- Description: The nordvpn-service service failed to start due to the following error:
- The service did not respond to the start or control request in a timely fashion.
- Error: (05/15/2017 11:21:56 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
- Description: A timeout was reached (30000 milliseconds) while waiting for the nordvpn-service service to connect.
- Error: (05/15/2017 11:21:55 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
- Description: The Origin Web Helper Service service failed to start due to the following error:
- The service did not respond to the start or control request in a timely fashion.
- Error: (05/15/2017 11:21:55 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
- Description: A timeout was reached (30000 milliseconds) while waiting for the Origin Web Helper Service service to connect.
- Error: (05/15/2017 11:21:03 AM) (Source: EventLog) (EventID: 6008) (User: )
- Description: The previous system shutdown at 6:10:32 AM on 5/15/2017 was unexpected.
- Error: (05/15/2017 05:22:29 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
- Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
- {8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
- and APPID
- {F72671A9-012C-4725-9D2F-2A4D32D65169}
- to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
- CodeIntegrity:
- ===================================
- Date: 2017-04-19 15:31:41.797
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\amdihk64.dll that did not meet the Store signing level requirements.
- Date: 2017-04-18 10:41:41.198
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\amdihk64.dll that did not meet the Store signing level requirements.
- Date: 2017-04-17 15:34:44.043
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\amdihk64.dll that did not meet the Store signing level requirements.
- Date: 2017-03-28 14:50:03.453
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\amdihk64.dll that did not meet the Store signing level requirements.
- Date: 2017-03-28 14:50:02.631
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\amdihk64.dll that did not meet the Store signing level requirements.
- Date: 2017-03-28 14:49:27.708
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\amdihk64.dll that did not meet the Store signing level requirements.
- Date: 2017-03-20 04:44:32.235
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\amdihk64.dll that did not meet the Store signing level requirements.
- Date: 2017-03-19 13:27:25.975
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\amdihk64.dll that did not meet the Store signing level requirements.
- Date: 2017-02-06 12:36:38.725
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\amdihk64.dll that did not meet the Store signing level requirements.
- Date: 2017-02-06 12:36:33.157
- Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\amdihk64.dll that did not meet the Store signing level requirements.
- ==================== Memory info ===========================
- Processor: Intel(R) Core(TM) i5-2500 CPU @ 3.30GHz
- Percentage of memory in use: 80%
- Total physical RAM: 8174.28 MB
- Available physical RAM: 1611.72 MB
- Total Virtual: 17211.1 MB
- Available Virtual: 4459.63 MB
- ==================== Drives ================================
- Drive c: () (Fixed) (Total:1388.74 GB) (Free:334.07 GB) NTFS
- Drive i: (Blakes HDD) (Fixed) (Total:931.48 GB) (Free:819.85 GB) NTFS
- ==================== MBR & Partition Table ==================
- ========================================================
- Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: F3CD8237)
- Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
- ==================== End of Addition.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement