Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06.06.2018 01 Ran by deckx (16-06-2018 19:06:47) Running from C:\Users\Safe\Desktop Windows 7 Ultimate Service Pack 1 (X64) (2014-11-15 16:18:51) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-3377807318-2724434003-2614323792-500 - Administrator - Disabled) deckx (S-1-5-21-3377807318-2724434003-2614323792-1000 - Administrator - Enabled) => C:\Users\deckx Guest (S-1-5-21-3377807318-2724434003-2614323792-501 - Limited - Disabled) Safe (S-1-5-21-3377807318-2724434003-2614323792-1005 - Limited - Enabled) => C:\Users\Safe test (S-1-5-21-3377807318-2724434003-2614323792-1276 - Limited - Enabled) => C:\Users\test ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) .NET Core SDK 1.1.0 (x64) (HKLM\...\{DF68596E-0F41-41CC-BAD9-9F30A9662D90}) (Version: 4.16.5124 - Microsoft Corporation) Hidden .NET Core SDK 1.1.0 (x64) (HKLM-x32\...\{67d148ca-6fe2-47ec-bf5c-fbd64345d511}) (Version: 1.1.0 - Microsoft Corporation) µTorrent (HKU\S-1-5-21-3377807318-2724434003-2614323792-1000\...\uTorrent) (Version: 3.4.8.42449 - BitTorrent Inc.) 7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - ) Active Directory Authentication Library for SQL Server (HKLM\...\{52D1FCFD-1052-4D75-B3FB-9906901AFD98}) (Version: 13.1.4001.0 - Microsoft Corporation) Hidden Active Directory Authentication Library for SQL Server (x86) (HKLM-x32\...\{44DC843A-C591-4064-BE1F-2BDC177AF50C}) (Version: 13.0.1100.286 - Microsoft Corporation) Hidden Adobe Acrobat Reader DC - Nederlands (HKLM-x32\...\{AC76BA86-7AD7-1043-7B44-AC0F074E4100}) (Version: 18.011.20040 - Adobe Systems Incorporated) Adobe Flash Player 30 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 30.0.0.113 - Adobe Systems Incorporated) Adobe Flash Player 30 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 30.0.0.113 - Adobe Systems Incorporated) Aeria Ignite (HKLM-x32\...\{FE2D627E-D7E0-46EA-93A6-8583420285FA}) (Version: 1.13.3296 - Aeria Games & Entertainment) Hidden Aeria Ignite (HKLM-x32\...\Aeria Ignite 1.13.3296) (Version: 1.13.3296 - Aeria Games & Entertainment) Aeria Ignite (HKLM-x32\...\Aeria Ignite) (Version: 1.13.3296 - Aeria Games & Entertainment) Akamai NetSession Interface (HKU\S-1-5-21-3377807318-2724434003-2614323792-1005\...\Akamai) (Version: - Akamai Technologies, Inc) Alliance of Valiant Arms (HKLM-x32\...\Alliance of Valiant Arms) (Version: - ) AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.8 - Advanced Micro Devices, Inc.) Application Insights Tools for Visual Studio 2015 (HKLM-x32\...\{981F324E-98F4-4784-B76F-04E92039F3F6}) (Version: 5.2.60328.3 - Microsoft Corporation) Application Verifier x64 External Package (HKLM\...\{2D7C1671-6F3D-2AA7-DAA3-91C96B60B919}) (Version: 10.1.15063.468 - Microsoft) Hidden Audacity 2.2.2 (HKLM-x32\...\Audacity_is1) (Version: 2.2.2 - Audacity Team) Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 18.4.2338 - AVAST Software) Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 65.1.470.182 - AVAST Software) Azure AD Authentication Connected Service (HKLM-x32\...\{3FEAC561-1CF6-41D6-B0F3-BECDD9C88A1B}) (Version: 14.0.23107 - Microsoft Corporation) Hidden AzureTools.Notifications (HKLM-x32\...\{1E5CA362-39B6-4BD0-B9C0-69CF15F0FEA2}) (Version: 2.7.30611.1601 - Microsoft Corporation) Hidden AzureTools.Notifications (HKLM-x32\...\{3FBFCF2C-392A-4632-9442-14C305B44D5E}) (Version: 2.1.10731.1602 - Microsoft Corporation) Hidden Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Behaviors SDK (XAML) for Visual Studio (HKLM-x32\...\{0B5E43C7-965D-4AF4-A33E-5FA35B6660C8}) (Version: 12.0.41002.1 - Microsoft Corporation) Hidden Belfius Smart Card Reader Chrome-App (HKLM-x32\...\{3A2575B9-5F74-4357-9B96-3EB102030300}) (Version: 2.3.3.0 - VASCO Data Security) Hidden Belfius Smart Card Reader Chrome-App (HKU\S-1-5-21-3377807318-2724434003-2614323792-1005\...\{a0c67901-ec44-4d21-b576-214f3f9b4d21}) (Version: 2.3.3.0 - VASCO Data Security) Blend for Visual Studio 2013 (HKLM-x32\...\{EBC890A6-DE7C-44B4-AA03-119B6190D3E1}) (Version: 12.0.41002.1 - Microsoft Corporation) Hidden Blend for Visual Studio 2013 ENU resources (HKLM-x32\...\{9ED1634C-4E71-4992-A1BA-7C4BE6EE39E1}) (Version: 12.0.41002.1 - Microsoft Corporation) Hidden Blend for Visual Studio SDK for .NET 4.5 (HKLM-x32\...\{37E53780-3944-4A6A-842F-727128E8616E}) (Version: 3.0.40218.0 - Microsoft Corporation) Hidden Blend for Visual Studio SDK for Silverlight 5 (HKLM-x32\...\{0C03A66F-1FF0-45F9-8D67-0D806EBFFBA1}) (Version: 3.0.40218.0 - Microsoft Corporation) Hidden Build Tools - amd64 (HKLM\...\{F74753A3-C93C-34F5-A199-993CAF602B7D}) (Version: 12.0.21005 - Microsoft Corporation) Hidden Build Tools - x86 (HKLM-x32\...\{FB3A15FD-FC67-3A2F-892B-6890B0C56EA9}) (Version: 12.0.21005 - Microsoft Corporation) Hidden Build Tools Language Resources - amd64 (HKLM\...\{05198C22-FFCE-374A-B190-9F18CC99DAEA}) (Version: 12.0.21005 - Microsoft Corporation) Hidden Build Tools Language Resources - x86 (HKLM-x32\...\{9347889B-C22A-3905-901F-C05D8F73C929}) (Version: 12.0.21005 - Microsoft Corporation) Hidden CADdy++ - SEE Electrical schoolversie (HKLM-x32\...\{E040012F-A895-482E-87EF-D747ABB0F1D6}) (Version: - ) Catalyst Control Center Next Localization BR (HKLM\...\{5181A89F-09DD-E67D-46F8-C49E025FBFD2}) (Version: 2017.0210.908.16431 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHS (HKLM\...\{37312517-1DD8-48E3-DC08-789E901A9020}) (Version: 2017.0210.908.16431 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHT (HKLM\...\{31ACE608-9780-2E6C-A657-D4738BBE7DAD}) (Version: 2017.0210.908.16431 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CS (HKLM\...\{D7888ADE-31D6-A417-8321-04CCF570BA35}) (Version: 2017.0210.908.16431 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DA (HKLM\...\{A2D7A75C-02A6-FC84-967D-B9894393971E}) (Version: 2017.0210.908.16431 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DE (HKLM\...\{8D97FC65-8356-E742-D0F0-72B1FF8743D5}) (Version: 2017.0210.908.16431 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization EL (HKLM\...\{68A252A3-6775-0955-452F-10F6C2DA6111}) (Version: 2017.0210.908.16431 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization ES (HKLM\...\{ABAD4EB3-DF39-E1EF-BF30-B4E62E8F6A66}) (Version: 2017.0210.908.16431 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FI (HKLM\...\{9F12D721-8755-C3F7-25CD-DC3E7D72CDF4}) (Version: 2017.0210.908.16431 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FR (HKLM\...\{E56983F1-03EF-85BC-86CA-2E5A6A6FD4FE}) (Version: 2017.0210.908.16431 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization HU (HKLM\...\{43EA9A21-C95E-6DF9-9892-9283B2CFAF89}) (Version: 2017.0210.908.16431 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization IT (HKLM\...\{49D2F54E-D0A0-A447-B9D0-7A479D12A106}) (Version: 2017.0210.908.16431 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization JA (HKLM\...\{FC4539F0-4063-5F68-0EB0-6B0FAD3A438B}) (Version: 2017.0210.908.16431 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization KO (HKLM\...\{2F05B3F3-9195-573C-6D8A-A978AFBDB1D6}) (Version: 2017.0210.908.16431 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NL (HKLM\...\{7720E621-9FA2-505C-6E6D-A81A245659A6}) (Version: 2017.0210.908.16431 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NO (HKLM\...\{E14554F1-13B4-BF54-1A1C-1A5D3BBD187E}) (Version: 2017.0210.908.16431 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization PL (HKLM\...\{AF7D189E-B7D5-DA70-3B76-74011BD2C72C}) (Version: 2017.0210.908.16431 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization RU (HKLM\...\{8628C260-8FE6-3A83-723C-3B980B57F2D2}) (Version: 2017.0210.908.16431 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization SV (HKLM\...\{BD750833-856E-0F37-DFEA-FC35B76C699C}) (Version: 2017.0210.908.16431 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TH (HKLM\...\{E9AE0D04-4F2D-901B-DA30-B8CC43270E89}) (Version: 2017.0210.908.16431 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TR (HKLM\...\{F315CF1D-1B8F-7BE3-7EBB-E236D07E7E97}) (Version: 2017.0210.908.16431 - Advanced Micro Devices, Inc.) Hidden Citrix Receiver (HKU\S-1-5-21-3377807318-2724434003-2614323792-1005\...\CitrixOnlinePluginPackWeb) (Version: 13.1.0.89 - Citrix Systems, Inc.) ClickOnce Bootstrapper Package for Microsoft .NET Framework (HKLM-x32\...\{E598B692-764A-413C-8530-59163D6B4AE3}) (Version: 4.6.01590 - Microsoft Corporation) Hidden CPUID HWMonitor 1.28 (HKLM\...\CPUID HWMonitor_is1) (Version: - ) CutePDF Writer 3.1 (HKLM\...\CutePDF Writer Installation) (Version: 3.1 - Acro Software Inc.) DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.6.0.0283 - Disc Soft Ltd) DB Browser for SQLite (HKLM-x32\...\SqliteBrowser3) (Version: 3.8.0 - oldsch00l) De Sims 2 (HKLM-x32\...\{6E7DD182-9FC6-4651-0095-2E666CC6AF35}) (Version: - ) De Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.67.2 - Electronic Arts) DiagnosticsHub_CollectionService (HKLM\...\{37385261-BB10-4DE0-8822-84E1C4997ED2}) (Version: 15.0.26730 - Microsoft Corporation) Hidden DIGIPASS Native Bridge 2.2.2 (HKLM-x32\...\{28A6E867-4D45-4023-8DD0-09FC196C2892}) (Version: 2.2.2 - VASCO Data Security) Hidden DIGIPASS Native Bridge 2.2.2 (HKU\S-1-5-21-3377807318-2724434003-2614323792-1005\...\{9ba9a46c-c5ee-4711-9d40-15adb327bdd0}) (Version: 2.2.2 - VASCO Data Security) Discord (HKU\S-1-5-21-3377807318-2724434003-2614323792-1005\...\Discord) (Version: 0.0.301 - Discord Inc.) Dotfuscator and Analytics Community Edition (HKLM-x32\...\{2386192E-D6DB-4AD2-9564-65586A0AE53E}) (Version: 5.5.4954.46574 - PreEmptive Solutions) Hidden Dotfuscator and Analytics Community Edition 5.19.1 (HKLM-x32\...\{2A7F99F6-88A4-4B44-B350-41C0B147A39C}) (Version: 5.19.1.3091 - PreEmptive Solutions) Hidden Entity Framework 6.1.3 Tools for Visual Studio 15 (HKLM-x32\...\{F8C0447E-D45C-4E52-94E8-C6340AAC9DB8}) (Version: 6.1.60104.0 - Microsoft Corporation) Hidden Entity Framework 6.1.3 Tools for Visual Studio 2015 Update 1 (HKLM-x32\...\{2A56910C-69C8-495D-8ED8-9080F0A14E58}) (Version: 14.0.41103.0 - Microsoft Corporation) Entity Framework Tools for Visual Studio 2013 (HKLM-x32\...\{08AEF86A-1956-4846-B906-B01350E96E30}) (Version: 12.0.20912.0 - Microsoft Corporation) Epic Games Launcher (HKLM-x32\...\{B2FF9400-A012-44F7-99CE-37C216A6CD70}) (Version: 1.1.131.0 - Epic Games, Inc.) Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden f.lux (HKU\S-1-5-21-3377807318-2724434003-2614323792-1005\...\Flux) (Version: - f.lux Software LLC) Farming Simulator 15 (HKLM-x32\...\FarmingSimulator2015INT_is1) (Version: 1.4.0.0 - GIANTS Software) FileZilla Client 3.21.0 (HKLM-x32\...\FileZilla Client) (Version: 3.21.0 - Tim Kosse) Fraps (HKLM-x32\...\Fraps) (Version: - ) GD Hardware Scan (HKU\S-1-5-21-3377807318-2724434003-2614323792-1000\...\GD Hardware Scan) (Version: 00.00.00.01 - Social Web Tech LTD) GDR 2269 for SQL Server 2014 (KB3045324) (64-bit) (HKLM\...\KB3045324) (Version: 12.0.2269.0 - Microsoft Corporation) Geeks3D.com FurMark 1.9.1 (HKLM-x32\...\{2397CAD4-2263-4CD0-96BE-E43A980B9C9A}_is1) (Version: - Geeks3D.com) Git version 2.8.3 (HKU\S-1-5-21-3377807318-2724434003-2614323792-1005\...\Git_is1) (Version: 2.8.3 - The Git Development Community) GitHub (HKU\S-1-5-21-3377807318-2724434003-2614323792-1005\...\5f7eb300e2ea4ebf) (Version: 3.3.4.0 - GitHub, Inc.) GitHub Desktop (HKU\S-1-5-21-3377807318-2724434003-2614323792-1000\...\GitHubDesktop) (Version: 1.0.4 - GitHub, Inc.) GlassFish Server Open Source Edition 4.1.1 (HKLM\...\nbi-glassfish-mod-4.1.1.0.1) (Version: - ) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 67.0.3396.87 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden Governor of Poker 2 (HKLM-x32\...\Governor of Poker 21.0) (Version: 1.0 - Foxy Games) Grand Theft Auto IV (HKLM-x32\...\{579BA58C-F33D-4970-9953-B94B43768AC3}) (Version: 1.00.0000 - Rockstar Games) GTA San Andreas (HKLM-x32\...\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}) (Version: 1.00.00001 - Rockstar Games) HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version: - EFD Software) Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment) HiPatch (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000}) (Version: 6.0.3.0 - Hi-Rez Studios) Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios) icecap_collection_neutral (HKLM-x32\...\{743913D7-41D9-48C0-977D-FC87743A9BEC}) (Version: 15.0.26621 - Microsoft Corporation) Hidden icecap_collection_x64 (HKLM\...\{6BC73140-3CB6-486A-8350-BF35F54EFA19}) (Version: 15.0.26621 - Microsoft Corporation) Hidden icecap_collectionresources (HKLM-x32\...\{67941F0C-2930-4C3F-983C-1089D2759B42}) (Version: 15.0.26621 - Microsoft Corporation) Hidden icecap_collectionresourcesx64 (HKLM-x32\...\{304B71E2-BA3A-419C-B632-3DFBB4AFE42B}) (Version: 15.0.26621 - Microsoft Corporation) Hidden IIS 10.0 Express (HKLM\...\{A54DCC30-E1EA-4912-A7F9-6C5A3AF1FB3A}) (Version: 10.0.1738 - Microsoft Corporation) IIS Express Application Compatibility Database for x64 (HKLM\...\{08274920-8908-45c2-9258-8ad67ff77b09}.sdb) (Version: - ) Hidden Intellisense Lang Pack Mobile Extension SDK 10.0.15063.0 (HKLM-x32\...\{955DB066-D013-43F3-908C-CBC851E3D4FF}) (Version: 10.1.15063.468 - Microsoft Corporation) Hidden IntelliTraceProfilerProxy (HKLM-x32\...\{0A2EDF2C-9A71-43D7-964A-696BB7CEAC65}) (Version: 15.0.25.0 - Microsoft Corporation) Hidden ISO2Disc 1.10 (HKLM-x32\...\ISO2Disc_is1) (Version: - Top Password Software, Inc.) Java 8 Update 91 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418091F0}) (Version: 8.0.910.14 - Oracle Corporation) Java 8 Update 91 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.14 - Oracle Corporation) Java SE Development Kit 8 Update 91 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180910}) (Version: 8.0.910.14 - Oracle Corporation) JavaScript Tooling (HKLM\...\{2044FC4C-4EA3-4113-BC1E-962DF568D201}) (Version: 12.0.21005 - Microsoft Corporation) Hidden Kits Configuration Installer (HKLM-x32\...\{1704C439-1501-3446-7932-33DA822E8597}) (Version: 10.1.15063.468 - Microsoft) Hidden Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden League of Legends (HKLM-x32\...\{79BF4901-1EC4-4726-B3C2-A7859706C6E7}) (Version: 3.0.1 - Riot Games) Hidden League of Legends (HKLM-x32\...\League of Legends 1.0) (Version: 1.0 - Riot Games, Inc) League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games) LocalESPC Dev12 (HKLM-x32\...\{492498A3-F88C-FE2F-755C-9B1B91724CA5}) (Version: 8.100.25984 - Microsoft Corporation) Hidden LocalESPCui for en-us Dev12 (HKLM-x32\...\{B1C38F27-D377-8C98-D98D-29B67C0B978D}) (Version: 8.100.25984 - Microsoft) Hidden Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (ENU) (HKLM-x32\...\{290FC320-2F5A-329E-8840-C4193BD7A9EE}) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{19E8AE59-4D4A-3534-B567-6CC08FA4102E}) (Version: 4.5.51651 - Microsoft Corporation) Microsoft .NET Framework 4.6 SDK (HKLM-x32\...\{B5915D37-0637-4A26-A3AA-C5DC9F856370}) (Version: 4.6.00081 - Microsoft Corporation) Microsoft .NET Framework 4.6 Targeting Pack (ENU) (HKLM-x32\...\{034547E9-D8FA-49E7-8B9C-4C9861FB9146}) (Version: 4.6.00127 - Microsoft Corporation) Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation) Microsoft .NET Framework 4.6.1 SDK (HKLM-x32\...\{2F0ECC80-B9E4-4485-8083-CD32F22ABD92}) (Version: 4.6.01055 - Microsoft Corporation) Microsoft .NET Framework 4.6.1 Targeting Pack (ENU) (HKLM-x32\...\{8EEB28EE-5141-411C-9CF0-9952264FE4AF}) (Version: 4.6.01055 - Microsoft Corporation) Microsoft .NET Framework 4.6.1 Targeting Pack (HKLM-x32\...\{8BC3EEC9-090F-4C53-A8DA-1BEC913040F9}) (Version: 4.6.01055 - Microsoft Corporation) Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation) Microsoft .NET Version Manager (x64) 1.0.0-beta5 (HKLM\...\{c5a4aba3-1aba-3ef8-b2d5-c3fa37f59738}) (Version: 1.0.10609.0 - Microsoft Corporation) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Azure Authoring Tools - v2.9.5.3 (HKLM\...\{086C537B-DE1A-4A11-8441-6AAF076174B8}) (Version: 2.9.8699.20 - Microsoft Corporation) Microsoft Azure Compute Emulator - v2.9.5.3 (HKLM\...\Microsoft Azure Compute Emulator - v2.9.5.3) (Version: 2.9.8699.20 - Microsoft Corporation) Microsoft Azure Libraries for .NET – v2.9 (HKLM\...\{C5C91AA6-3E83-430E-8B7A-6B790083F28D}) (Version: 3.0.0127.060 - Microsoft Corporation) Microsoft Azure Storage Emulator - v5.1 (HKLM-x32\...\Microsoft Azure Storage Emulator - v5.1) (Version: 5.1.1760.1722 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{59E4543A-D49D-4489-B445-473D763C79AF}) (Version: 2.0.672.0 - Microsoft Corporation) Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation) Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation) Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.25123 - Microsoft Corporation) Microsoft ODBC Driver 11 for SQL Server (HKLM\...\{A106FA6F-E94C-44C9-8A0F-C34BD82C9FE6}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft redistributable runtime DLLs VS2005 SP1(x86) (HKLM-x32\...\{CEC7A786-A9C8-4EF7-BB59-6518E3B3C878}) (Version: 8.0.50727.4053 - SAP) Microsoft redistributable runtime DLLs VS2010 SP1 (x86) (HKLM-x32\...\{2385C070-EC26-4AB9-8718-E605C977C0ED}) (Version: 10.0.40219.1 - SAP) Microsoft Report Viewer 2014 Runtime (HKLM-x32\...\{327E9C0D-1687-414F-923E-F5979E549548}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation) Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation) Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{83F2B8F4-5CF3-4BE9-9772-9543EAE4AC5F}) (Version: 10.51.2500.0 - Microsoft Corporation) Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{6292D514-17A4-403F-98F9-E150F10C043D}) (Version: 10.3.5500.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation) Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (HKLM\...\{1385D3DB-8E80-427B-91D2-B7535862B8E4}) (Version: 11.3.6518.0 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation) Microsoft SQL Server 2014 (64-bit) (HKLM\...\Microsoft SQL Server SQLServer2014) (Version: - Microsoft Corporation) Microsoft SQL Server 2014 Setup (English) (HKLM\...\{37C44B5C-E839-4A9D-9E20-A93E1B2FD35A}) (Version: 12.0.2269.0 - Microsoft Corporation) Microsoft SQL Server 2014 Transact-SQL Compiler Service (HKLM\...\{537203CB-708E-43A3-BA16-3D5C14A587BB}) (Version: 12.0.2269.0 - Microsoft Corporation) Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\...\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server 2014 T-SQL Language Service (HKLM-x32\...\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server 2016 LocalDB (HKLM\...\{9097BF1A-13A0-4A4A-A1F8-473E2A669863}) (Version: 13.1.4001.0 - Microsoft Corporation) Microsoft SQL Server 2016 Management Objects RC0 (HKLM-x32\...\{948B5F49-A57E-46B4-9F1E-145D7A9E66D7}) (Version: 13.0.1100.286 - Microsoft Corporation) Microsoft SQL Server 2016 T-SQL Language Service RC0 (HKLM-x32\...\{1852BD30-570B-4E47-8752-461448E8E250}) (Version: 13.0.12000.52 - Microsoft Corporation) Microsoft SQL Server 2016 T-SQL ScriptDom RC0 (HKLM\...\{D9F55D00-A8AB-4518-A56E-D9D5E615542A}) (Version: 13.0.1100.286 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - enu (12.0.30919.1) (HKLM-x32\...\{0D7FCBFB-F478-4D32-901C-83F0BF5A3501}) (Version: 12.0.30919.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - enu (14.0.60311.1) (HKLM-x32\...\{28292CA9-8D65-4E37-95A3-753EEB38F122}) (Version: 14.0.60311.1 - Microsoft Corporation) Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation) Microsoft SQL Server System CLR Types (HKLM-x32\...\{C3F6F200-6D7B-4879-B9EE-700C0CE1FCDA}) (Version: 10.51.2500.0 - Microsoft Corporation) Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{FC3BB979-AA54-4B60-BBA3-2C4DA6E08D80}) (Version: 12.0.2402.29 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\...\{091CE6AA-2753-4F6E-AD1C-0E875744EB54}) (Version: 12.0.2402.29 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2016 RC0 (HKLM\...\{495CC0B4-D4C3-4D87-8317-F66BA48C5552}) (Version: 13.0.1100.286 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2016 RC0 (HKLM-x32\...\{3A87F9F2-D65D-4BA9-8459-E5BBE31EA64D}) (Version: 13.0.1100.286 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2017 CTP2.1 (HKLM\...\{9BAD8F82-A221-42CE-AFF0-7CAB825790C9}) (Version: 14.0.600.250 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2017 CTP2.1 (HKLM-x32\...\{F0DD1AA8-44D7-4ACE-AF65-7378EA5D884C}) (Version: 14.0.600.250 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x64) - 14.11.25325 (HKLM-x32\...\{6c6356fe-cbfa-4944-9bed-a9e99f45cb7a}) (Version: 14.11.25325.0 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x86) - 14.11.25325 (HKLM-x32\...\{404c9c27-8377-4fd1-b607-7ca635db4e49}) (Version: 14.11.25325.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Shell (Isolated) - ENU (HKLM-x32\...\{D64B6984-242F-32BC-B008-752806E5FC44}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio 2017 (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 1.12.111.1002 - Microsoft Corporation) Microsoft Visual Studio Enterprise 2015 with Update 2 (HKLM-x32\...\{675a5109-38d6-406c-9e75-d0e922f87a58}) (Version: 14.0.25123.0 - Microsoft Corporation) Microsoft Visual Studio Professional 2013 (HKLM-x32\...\{02a877fe-5dac-4ac0-b869-4b9da00f651c}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual Studio Professional 2015 with Update 2 (HKLM-x32\...\{fff81b2c-ab2d-44ff-a04a-a516a29e3e81}) (Version: 14.0.25123.0 - Microsoft Corporation) Microsoft VSS Writer for SQL Server 2014 (HKLM\...\{366CD715-2FF4-40B4-A8B4-A05E5D21A945}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft Web Deploy 3.6 (HKLM\...\{65C71B09-C33D-4F60-93EA-DF3AD1D40600}) (Version: 10.0.1981 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Minecraft 1.8.1 version 1.8.1 (HKLM-x32\...\Minecraft 1.8.1_is1) (Version: 1.8.1 - ) Mozilla Firefox 47.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 47.0.2 (x86 en-US)) (Version: 47.0.2 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0.2.6148 - Mozilla) MSBuild/NuGet Integration 14.0 (x86) (HKLM-x32\...\{13FE8B50-B340-4FDA-BB6E-AA1F5FAB8205}) (Version: 14.0.25123 - Microsoft Corporation) Hidden Multi-Device Hybrid Apps using C# - Templates - ENU (HKLM-x32\...\{12D99739-FFD3-3761-8AA6-F929E0FE407E}) (Version: 14.0.23107 - Microsoft Corporation) Hidden Need for Speed - Rivals (HKLM-x32\...\Need for Speed - Rivals_R.G. Mechanics_is1) (Version: - R.G. Mechanics, markfiter) NetBeans IDE 8.1 (HKLM\...\nbi-nb-base-8.1.0.0.201510222201) (Version: 8.1 - NetBeans.org) NirSoft BlueScreenView (HKLM-x32\...\NirSoft BlueScreenView) (Version: - ) Online Plug-in (HKLM-x32\...\{739A6D0C-CA8D-4955-8E3D-58D1847327AC}) (Version: 13.1.0.89 - Citrix Systems, Inc.) Hidden Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - ) Open XML SDK 2.5 for Microsoft Office (HKLM-x32\...\{3EA16E23-14D2-466A-8268-D7CD40DC46B6}) (Version: 2.5.5631 - Microsoft Corporation) Hidden OpenTTD 1.5.2 (HKLM-x32\...\OpenTTD) (Version: 1.5.2 - OpenTTD) OpenTTD Manager 1.0.5 (HKLM-x32\...\{185BB21A-C992-42B7-A353-9A38A53610C9}_is1) (Version: - Andrés Zsögön) Oracle VM VirtualBox 5.0.28 (HKLM\...\{912B13BA-9046-4917-815F-B0060362228C}) (Version: 5.0.28 - Oracle Corporation) PlanetSide 2 (HKU\S-1-5-21-3377807318-2724434003-2614323792-1000\...\SOE-PlanetSide 2) (Version: 1.0.3.183 - Sony Online Entertainment) PlanetSide 2 (HKU\S-1-5-21-3377807318-2724434003-2614323792-1005\...\DG0-PlanetSide 2) (Version: - Sony Online Entertainment) PlaysTV (HKLM-x32\...\PlaysTV) (Version: 1.9.2-r111395-release - Plays.tv, LLC) Popcorn-Time (HKU\S-1-5-21-3377807318-2724434003-2614323792-1005\...\Popcorn-Time) (Version: 0.3.9 - Popcorn Time) PowerISO (HKLM-x32\...\PowerISO) (Version: 6.6 - Power Software Ltd) PreEmptive Analytics Visual Studio Components (HKLM-x32\...\{436A18DD-5F2C-4B3C-985E-AD3C13B0CC25}) (Version: 1.2.5134.1 - PreEmptive Solutions) Hidden PreEmptive Analytics Visual Studio Components (HKLM-x32\...\{943F3FB1-3F9C-4FB7-A4E2-6D53617068C3}) (Version: 1.2.3197.1 - PreEmptive Solutions) Hidden Prerequisites for SSDT (HKLM-x32\...\{21373064-AD95-48DB-A32E-0D9E08EF7355}) (Version: 12.0.2000.8 - Microsoft Corporation) Prerequisites for SSDT (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation) Prerequisites for SSDT RC0 (HKLM-x32\...\{AB72EB1C-9CF4-4274-984D-5EDA8BF37A08}) (Version: 13.0.1100.286 - Microsoft Corporation) Prison Architect (HKLM-x32\...\1441974651_is1) (Version: 2.1.0.3 - GOG.com) Python 2.7.11 (HKLM-x32\...\{16E52445-1392-469F-9ADB-FC03AF00CD61}) (Version: 2.7.11150 - Python Software Foundation) Python Tools Redirection Template (HKLM-x32\...\{EE541DCE-3018-4A12-B0A3-7C55D62B3D01}) (Version: 1.1 - Microsoft Corporation) Hidden Raptr (HKLM-x32\...\Raptr) (Version: 5.2.10-r123135-release - Raptr, Inc) Real Time Stat Tracker (HKLM-x32\...\{E8E4D4FD-D449-4CF2-AA23-2191B76AE3B4}) (Version: 0.9.2.8 - Recursion) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.53.216.2012 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6782 - Realtek Semiconductor Corp.) Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\{17528CE4-C333-48FB-A9E4-D841E795CDCE}) (Version: 3.0.12.0 - Renesas Electronics Corporation) Hidden Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{17528CE4-C333-48FB-A9E4-D841E795CDCE}) (Version: 3.0.12.0 - Renesas Electronics Corporation) Rockstar Games Social Club (HKLM-x32\...\{08B3869E-D282-424C-9AFC-870E04A4BA14}) (Version: 1.00.0000 - Rockstar Games) Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.3.8 - Rockstar Games) Roslyn Language Services - x86 (HKLM-x32\...\{263EF873-F5D0-3134-A962-356C21A3510F}) (Version: 14.0.25126 - Microsoft Corporation) Hidden Roslyn Language Services - x86 (HKLM-x32\...\{6C1985E7-E1C5-3A95-86EF-2C62465F15C3}) (Version: 14.0.23107 - Microsoft Corporation) Hidden S4 League (HKLM-x32\...\S4 League) (Version: - ) SAP GUI for Windows 7.40 (Patch 8) (HKLM-x32\...\SAPGUI) (Version: 7.40 Compilation 3 - SAP SE) Self-service Plug-in (HKLM-x32\...\{F605992E-FD5B-46D7-AFDA-FDB1AB00F829}) (Version: 3.1.0.21744 - Citrix Systems, Inc.) Hidden Shaiya (HKLM-x32\...\Shaiya) (Version: - ) SharePoint Client Components (HKLM\...\{95150001-1163-0409-1000-0000000FF1CE}) (Version: 15.0.4481.1505 - Microsoft Corporation) Hidden Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation) Skype Web Plugin (HKLM-x32\...\{A51A9885-30AA-4736-BECA-5DB4BCB1A2EA}) (Version: 7.17.0.43 - Skype Technologies S.A.) Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.103 - Skype Technologies S.A.) SlimDX Runtime .NET 4.0 x64 (January 2012) (HKLM\...\{A2199A06-89C4-4187-AA4A-3A9676FB799D}) (Version: 2.0.13.43 - SlimDX Group) Spotify (HKU\S-1-5-21-3377807318-2724434003-2614323792-1000\...\Spotify) (Version: 1.0.66.478.g1296534d - Spotify AB) Spotify (HKU\S-1-5-21-3377807318-2724434003-2614323792-1005\...\Spotify) (Version: 1.0.82.447.g975ad224 - Spotify AB) SQL Server 2014 Common Files (HKLM\...\{BD1CD96B-FE4B-4EAE-83D4-6EF55AB5779C}) (Version: 12.0.2000.8 - Microsoft Corporation) Hidden SQL Server 2014 Common Files (HKLM\...\{F7012F84-80F5-4C25-852E-B1BA03276FE6}) (Version: 12.0.2000.8 - Microsoft Corporation) Hidden SQL Server 2014 Database Engine Services (HKLM\...\{17531BCD-C627-46A2-9F1E-7CC920E0E94A}) (Version: 12.0.2000.8 - Microsoft Corporation) Hidden SQL Server 2014 Database Engine Services (HKLM\...\{5082A9F3-AEE5-4639-9BA7-C19661BA7331}) (Version: 12.0.2000.8 - Microsoft Corporation) Hidden SQL Server 2014 Database Engine Shared (HKLM\...\{ACC530B8-B6B4-40D6-B59B-152468CF47D0}) (Version: 12.0.2000.8 - Microsoft Corporation) Hidden SQL Server 2014 Database Engine Shared (HKLM\...\{D1B847A9-B06B-4264-9EF0-78E6E1571E65}) (Version: 12.0.2000.8 - Microsoft Corporation) Hidden SQL Server 2014 Management Studio (HKLM\...\{75A54138-3B98-4705-92E4-F619825B121F}) (Version: 12.0.2000.8 - Microsoft Corporation) Hidden SQL Server 2014 Management Studio (HKLM\...\{839EF29A-3055-43DC-ADCE-8E84893798D5}) (Version: 12.0.2000.8 - Microsoft Corporation) Hidden SQL Server Browser for SQL Server 2014 (HKLM-x32\...\{3204DE95-97D2-4261-A286-98A262E171D4}) (Version: 12.0.2000.8 - Microsoft Corporation) Sql Server Customer Experience Improvement Program (HKLM\...\{6476DB81-F263-4C04-8574-AAD31136C304}) (Version: 12.0.2000.8 - Microsoft Corporation) Hidden Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Stranded II 1.0.0.1 (HKLM-x32\...\{CE0900ED-C76A-40C0-8DB4-0F68D825B283}_is1) (Version: - Unreal Software) StreamLabels 0.2.1 (only current user) (HKU\S-1-5-21-3377807318-2724434003-2614323792-1005\...\8000d50a-fcb7-5b38-8a3b-a02a0ec79daa) (Version: 0.2.1 - ActionBa5tard) System Requirements Lab Detection (HKLM-x32\...\{3707AD31-8966-42C6-8FEE-003E16ABD706}) (Version: 6.1.1.0 - Husdawg, LLC) Teach2000 versie 8.53 (HKLM-x32\...\Teach2000.7 XP - The Troolean Edition_is1) (Version: 8.53 - basement.nl) Team Explorer for Microsoft Visual Studio 2013 (HKLM-x32\...\{C9E7751E-88ED-36CF-B610-71A1D262E906}) (Version: 12.0.21005 - Microsoft Corporation) Hidden Team Explorer for Microsoft Visual Studio 2015 Update 2 (HKLM-x32\...\{7932CD6F-86D3-3EE4-8A02-B954404D1FFC}) (Version: 14.95.25118 - Microsoft) Hidden TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH) TeamViewer 13 (HKLM-x32\...\TeamViewer) (Version: 13.1.3629 - TeamViewer) Test Tools for Microsoft Visual Studio 2015 (HKLM-x32\...\{9EABBFE1-7EED-47D9-8FB8-21D7E4808057}) (Version: 14.0.23107 - Microsoft Corporation) Hidden The Walking Dead (HKLM-x32\...\The Walking Dead) (Version: 1.0.0.34 - Telltale Games) TypeScript Power Tool (HKLM-x32\...\{60890089-588B-4362-B9C5-A9C11D6E5DD1}) (Version: 1.8.9.0 - Microsoft Corporation) Hidden TypeScript SDK (HKLM-x32\...\{CFA1F87E-EF2B-4785-812C-4BEEA22CFD06}) (Version: 2.3.5.0 - Microsoft Corporation) Hidden TypeScript Tools for Microsoft Visual Studio 2015 (HKLM-x32\...\{DD51688B-194A-4A10-83D8-40AD1D9954A1}) (Version: 1.8.30.0 - Microsoft Corporation) Hidden Unity Web Player (HKU\S-1-5-21-3377807318-2724434003-2614323792-1005\...\UnityWebPlayer) (Version: 5.2.0f3 - Unity Technologies ApS) Universal CRT Extension SDK (HKLM-x32\...\{D23DC9CD-5870-9D26-5DE9-6273CAC7DD5B}) (Version: 10.1.15063.468 - Microsoft Corporation) Hidden Universal CRT Headers Libraries and Sources (HKLM-x32\...\{51523D5B-FC32-CAB4-E54E-E41C0E4C1726}) (Version: 10.1.15063.468 - Microsoft Corporation) Hidden Universal CRT Redistributable (HKLM-x32\...\{573C4B4F-B9B9-28DA-0243-D118DD3EE574}) (Version: 10.1.15063.468 - Microsoft Corporation) Hidden Universal CRT Tools x64 (HKLM\...\{3C75FFD3-00CF-1974-2935-7BED20381899}) (Version: 10.1.15063.468 - Microsoft Corporation) Hidden Universal CRT Tools x86 (HKLM-x32\...\{812954B8-9658-EFE2-FB5F-B422048AA053}) (Version: 10.1.15063.468 - Microsoft Corporation) Hidden Universal General MIDI DLS Extension SDK (HKLM-x32\...\{05086CEC-62C1-B12C-2FEC-C58E166FA7E8}) (Version: 10.1.15063.468 - Microsoft Corporation) Hidden Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Uplay (HKLM-x32\...\Uplay) (Version: 25.0.2 - Ubisoft) vcpp_crt.redist.clickonce (HKLM-x32\...\{C36E80D0-EED5-481F-9852-1EBB0DD122B6}) (Version: 14.11.25325 - Microsoft Corporation) Hidden Visual Paradigm CE 14.2 (HKU\S-1-5-21-3377807318-2724434003-2614323792-1005\...\1106-5897-7327-6550) (Version: 14.2 - Visual Paradigm International Ltd.) Visual Studio 2010 Prerequisites - English (HKLM\...\{662014D2-0450-37ED-ABAE-157C88127BEB}) (Version: 10.0.40219 - Microsoft Corporation) Visual Studio 2015 Update 2 (KB3022398) (HKLM-x32\...\{78c1b501-a6eb-4f29-88c5-84189564827e}) (Version: 14.0.25123 - Microsoft Corporation) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.2 - VideoLAN) VMware Player (HKLM\...\{646FD2AF-74E5-462C-82EE-1860DD252BF6}) (Version: 12.5.1 - VMware, Inc.) VS Immersive Activate Helper (HKLM-x32\...\{FD1039C3-228B-43BB-820A-ACAED580A9D5}) (Version: 16.0.71.0 - Microsoft Corporation) Hidden VS JIT Debugger (HKLM\...\{75068E51-7C37-4003-84C2-C67461C8D60A}) (Version: 16.0.71.0 - Microsoft Corporation) Hidden VS Script Debugging Common (HKLM\...\{A9ED1B56-3819-4B14-A929-89DD3E16E216}) (Version: 16.0.71.0 - Microsoft Corporation) Hidden VS Update core components (HKLM-x32\...\{6A878817-D626-305A-BE8D-94C93F70E27A}) (Version: 14.0.25123 - Microsoft Corporation) Hidden VS WCF Debugging (HKLM\...\{EF9A8134-DF80-46A8-85AF-7FBD1E848C12}) (Version: 16.0.71.0 - Microsoft Corporation) Hidden vs_BlendMsi (HKLM-x32\...\{028492D7-855B-4018-B0A8-B5411EED541A}) (Version: 15.0.26621 - Microsoft Corporation) Hidden vs_clickoncebootstrappermsi (HKLM-x32\...\{DCAD4F0C-21F2-4955-9C0A-2B7CEA610A74}) (Version: 15.0.26621 - Microsoft Corporation) Hidden vs_clickoncebootstrappermsires (HKLM-x32\...\{C32010D8-3E5A-4E2F-874E-9AAEB2384006}) (Version: 15.0.26621 - Microsoft Corporation) Hidden vs_clickoncesigntoolmsi (HKLM-x32\...\{440B670C-9862-487A-A381-57173D344039}) (Version: 15.0.26621 - Microsoft Corporation) Hidden vs_codecoveragemsi (HKLM-x32\...\{4047FD10-8010-453A-A110-EA2CF71591B9}) (Version: 15.0.26621 - Microsoft Corporation) Hidden vs_codeduitestframeworkmsi (HKLM-x32\...\{768725FE-C24E-4D48-BB07-6046761C2A00}) (Version: 15.0.26621 - Microsoft Corporation) Hidden vs_communitymsi (HKLM-x32\...\{52100697-9C66-44F3-BA20-68F8148CDF9B}) (Version: 15.0.26711 - Microsoft Corporation) Hidden vs_communitymsires (HKLM-x32\...\{40040E64-50EB-4FCF-B209-DA0B20821759}) (Version: 15.0.26621 - Microsoft Corporation) Hidden vs_cuitcommoncoremsi (HKLM-x32\...\{35804EBF-56A5-4847-848B-1A067AC6DE56}) (Version: 15.0.26621 - Microsoft Corporation) Hidden vs_cuitextensionmsi (HKLM-x32\...\{C356AA66-C6D7-43C5-9D31-9D58DFB0FE2F}) (Version: 15.0.26621 - Microsoft Corporation) Hidden vs_cuitextensionmsi_x64 (HKLM-x32\...\{EA12406A-8EED-49AB-A47B-FFA47D4F9ADE}) (Version: 15.0.26621 - Microsoft Corporation) Hidden vs_devenvmsi (HKLM-x32\...\{BFFA2FFB-1095-4ADD-A352-368806D2412B}) (Version: 15.0.26621 - Microsoft Corporation) Hidden vs_enterprisemsi (HKLM-x32\...\{6E0FB913-0E76-44B5-B0D4-2B71A7984BD2}) (Version: 15.0.26621 - Microsoft Corporation) Hidden vs_filehandler_amd64 (HKLM-x32\...\{DDEF2BD0-F728-4D04-A085-B5ACC9ADC311}) (Version: 15.0.26711 - Microsoft Corporation) Hidden vs_filehandler_x86 (HKLM-x32\...\{2512A3CE-E1E4-46D5-8B40-28DA3AE2261E}) (Version: 15.0.26711 - Microsoft Corporation) Hidden vs_FileTracker_Singleton (HKLM-x32\...\{384F31FB-B99D-48A7-9D72-E1FEBEC2201A}) (Version: 15.0.26621 - Microsoft Corporation) Hidden vs_minshellinteropmsi (HKLM-x32\...\{D0772A03-7FC2-4B20-AC1F-B278299AA9C7}) (Version: 15.0.26621 - Microsoft Corporation) Hidden vs_minshellmsi (HKLM-x32\...\{0F2742A7-6A64-46A2-94AE-22F19808BE2F}) (Version: 15.0.26711 - Microsoft Corporation) Hidden vs_minshellmsires (HKLM-x32\...\{6DFE6F8D-B61D-4348-AB70-4ABF1210DFD5}) (Version: 15.0.26621 - Microsoft Corporation) Hidden vs_networkemulationmsi_x64 (HKLM-x32\...\{DC5A810D-6264-4280-8475-4CB6B36D84AE}) (Version: 15.0.26621 - Microsoft Corporation) Hidden vs_professionalmsi (HKLM-x32\...\{C135A30B-7258-4E11-8660-87C5642A4AAE}) (Version: 15.0.26621 - Microsoft Corporation) Hidden vs_SQLClickOnceBootstrappermsi (HKLM-x32\...\{5C682D5E-7168-47C6-87CD-53E2103B08AC}) (Version: 15.0.26621 - Microsoft Corporation) Hidden vs_tipsmsi (HKLM-x32\...\{032E21D1-556F-49D6-9518-CF53202AF63B}) (Version: 15.0.26621 - Microsoft Corporation) Hidden Vulkan Run Time Libraries 1.0.17.0 (HKLM\...\VulkanRT1.0.17.0) (Version: 1.0.17.0 - LunarG, Inc.) Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.) Vulkan Run Time Libraries 1.0.3.1 (HKLM\...\VulkanRT1.0.3.1) (Version: 1.0.3.1 - LunarG, Inc.) Vulkan Run Time Libraries 1.0.37.0 (HKLM\...\VulkanRT1.0.37.0) (Version: 1.0.37.0 - LunarG, Inc.) WCF Data Services 5.6.0 Runtime (HKLM-x32\...\{46910786-E4AC-41E4-A4A0-C086EA85242D}) (Version: 5.6.61587.0 - Microsoft Corporation) Hidden WCF Data Services 5.6.4 Runtime (HKLM-x32\...\{DB85E7BD-B2DD-43D4-B3C0-23D7B527B597}) (Version: 5.6.62175.4 - Microsoft Corporation) Hidden WCF Data Services Tools for Microsoft Visual Studio 2013 (HKLM-x32\...\{BF3E2194-F89B-44FB-A801-464BF787599F}) (Version: 5.6.61587.0 - Microsoft Corporation) Hidden WCF Data Services Tools for Microsoft Visual Studio 2015 (HKLM-x32\...\{0A3B508E-5638-4471-BCC9-954E1868CB86}) (Version: 5.6.62175.4 - Microsoft Corporation) Hidden WCF RIA Services V1.0 SP2 (HKLM-x32\...\{5D8DD6A8-C4D7-4554-93F9-F1CC28C72600}) (Version: 4.1.62812.0 - Microsoft Corporation) WinAppDeploy (HKLM-x32\...\{1AD35036-0E71-1C38-E4F8-14F6ED75EA98}) (Version: 10.1.15063.468 - Microsoft Corporation) Hidden WinDirStat 1.1.2 (HKU\S-1-5-21-3377807318-2724434003-2614323792-1000\...\WinDirStat) (Version: - ) Windows SDK AddOn (HKLM-x32\...\{E1C6F438-7C50-41F5-8B47-3CC96D397CA3}) (Version: 10.1.0.0 - Microsoft Corporation) Windows Software Development Kit - Windows 10.0.15063.468 (HKLM-x32\...\{0a829ae9-ca13-4f58-a168-648e80cf6739}) (Version: 10.1.15063.468 - Microsoft Corporation) WinRAR 5.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH) WinRT Intellisense Desktop - en-us (HKLM-x32\...\{3E1718A0-E5A4-04EB-E85C-DF94790FCCF4}) (Version: 10.1.15063.468 - Microsoft Corporation) Hidden WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{26FD6F7E-30DF-16AB-9F3B-2EC665C36498}) (Version: 10.1.15063.468 - Microsoft Corporation) Hidden WinRT Intellisense IoT - en-us (HKLM-x32\...\{B3E6FE24-A4E4-0454-5004-D8A3CCC9B0F6}) (Version: 10.1.15063.468 - Microsoft Corporation) Hidden WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{CC57D696-D6B5-DB4D-7ABC-C373CF7E6D73}) (Version: 10.1.15063.468 - Microsoft Corporation) Hidden WinRT Intellisense PPI - en-us (HKLM-x32\...\{891DDA6A-C9D4-9C57-BC4E-B77CE28BAFC3}) (Version: 10.1.15063.468 - Microsoft Corporation) Hidden WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{C22B0226-A0C4-B973-C0BF-24A3D66B8C3E}) (Version: 10.1.15063.468 - Microsoft Corporation) Hidden WinRT Intellisense UAP - en-us (HKLM-x32\...\{F3F1C906-9349-1B25-3680-65015218BD99}) (Version: 10.1.15063.468 - Microsoft Corporation) Hidden WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{CB8253BF-62B4-A504-7E06-BA102F48C02B}) (Version: 10.1.15063.468 - Microsoft Corporation) Hidden Workflow Manager Client 1.0 (HKLM\...\{199C6892-5DED-409B-88B2-3BE6421552B2}) (Version: 2.0.30813.2 - Microsoft Corporation) Hidden Workflow Manager Tools 1.0 for Visual Studio (HKLM\...\{E1F79421-EC32-437F-8525-ABE902C85AC5}) (Version: 2.0.30725.1 - Microsoft Corporation) Hidden World of Tanks (HKU\S-1-5-21-3377807318-2724434003-2614323792-1005\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812eu}_is1) (Version: - Wargaming.net) XAMPP (HKLM-x32\...\xampp) (Version: 5.5.35-0 - Bitnami) XSplit Gamecaster (HKLM-x32\...\{5AADA165-FB60-41C0-8825-3E5B6C5F244C}) (Version: 2.1.1412.1628 - SplitmediaLabs) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-3377807318-2724434003-2614323792-1000_Classes\CLSID\{56FDF344-FD6D-11d0-958A-006097C9A090}\InprocServer32 -> C:\Users\deckx\AppData\Roaming\inminet\sencolny.dll => No File <==== ATTENTION CustomCLSID: HKU\S-1-5-21-3377807318-2724434003-2614323792-1005_Classes\CLSID\{8CE9991C-CC9B-42FA-85CF-BEFCB1F5DC30}\InprocServer32 -> C:\Users\Safe\AppData\Local\SkypePlugin\7.17.0.43\GatewayActiveX-x64.dll (Skype Technologies S.A.) CustomCLSID: HKU\S-1-5-21-3377807318-2724434003-2614323792-1005_Classes\CLSID\{AFD4369B-8A38-4407-882D-8297641DCFDF}\localserver32 -> C:\Users\Safe\AppData\Local\SkypePlugin\7.17.0.43\GatewayVersion-x64.exe (Skype Technologies S.A.) CustomCLSID: HKU\S-1-5-21-3377807318-2724434003-2614323792-1005_Classes\CLSID\{CBF9CD8C-2714-4F36-B76A-43E6C7547BC2}\localserver32 -> C:\Users\Safe\AppData\Local\SkypePlugin\7.17.0.43\EdgeCalling.exe (Skype Technologies S.A.) ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMGCShellExt64.dll -> No File ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-05-17] (AVAST Software) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-05-17] (AVAST Software) ContextMenuHandlers1-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) ContextMenuHandlers1-x32: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-05-17] (AVAST Software) ContextMenuHandlers1-x32: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files\PowerISO\PWRISOSH.DLL [2016-06-07] (Power Software Ltd) ContextMenuHandlers1-x32: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2014-12-02] (Alexander Roshal) ContextMenuHandlers1-x32-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2014-12-02] (Alexander Roshal) ContextMenuHandlers2-x32: [VMDiskMenuHandler] -> {271DC252-6FE1-4D59-9053-E4CF50AB99DE} => C:\Program Files (x86)\VMware\VMware Player\vmdkShellExt.dll [2016-10-21] (VMware, Inc.) ContextMenuHandlers2-x32: [VMDiskMenuHandler64] -> {E4D28EDC-8C0B-43EE-9E7D-C8A8682334DC} => C:\Program Files (x86)\VMware\VMware Player\x64\vmdkShellExt64.dll [2016-10-21] (VMware, Inc.) ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-05-17] (AVAST Software) ContextMenuHandlers3: [QMSoftExt] -> {754DF2CE-51E8-4895-B53C-6381418B84AE} => C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\plugins\FileSmash\QMSoftExt64.dll -> No File ContextMenuHandlers4-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) ContextMenuHandlers4-x32: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files\PowerISO\PWRISOSH.DLL [2016-06-07] (Power Software Ltd) ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2017-02-10] (Advanced Micro Devices, Inc.) ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-05-17] (AVAST Software) ContextMenuHandlers6: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files\PowerISO\PWRISOSH.DLL [2016-06-07] (Power Software Ltd) ContextMenuHandlers6: [QMSoftExt] -> {754DF2CE-51E8-4895-B53C-6381418B84AE} => C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\plugins\FileSmash\QMSoftExt64.dll -> No File ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2014-12-02] (Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2014-12-02] (Alexander Roshal) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {1F50FF00-29C2-4E27-82CD-C44B11DD3EF4} - System32\Tasks\{C0D68CA8-984B-408C-A1BB-55CC30E9C653} => C:\Program Files (x86)\Call of Duty- Modern Warfare 3\iw5sp.exe [2011-11-08] () Task: {3209CC58-B468-4AE3-9202-33B867F487BD} - System32\Tasks\{6D14CE76-F58C-4DF9-AFFF-B96CBEB5FD99} => C:\Windows\system32\pcalua.exe -a E:\SETUP.EXE -d E:\ Task: {3E4B8DB8-F305-48AA-8115-04FB36F55515} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe Task: {4720B4A9-55A3-423B-AC31-C29DD0B4CA53} - System32\Tasks\MailRuUpdater => C:\Users\deckx\AppData\Local\Mail.Ru\MailRuUpdater.exe <==== ATTENTION Task: {529C265C-12A1-443C-8C54-031C67E6E53B} - \ProPCCleaner_Start -> No File <==== ATTENTION Task: {58B64F10-5EEA-438C-89E5-F34898406258} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2018-05-17] (AVAST Software) Task: {6CC184B3-C788-4CC8-9735-5A9A6678B302} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-02-09] (Adobe Systems Incorporated) Task: {75B0DAC0-EAF3-470C-8E7B-7FDBE52157D2} - \osTip -> No File <==== ATTENTION Task: {798159E1-D9E0-4D02-AF28-A01CE0563108} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.) Task: {7DD79FAE-A97C-4389-A4D2-E847F23E2E8B} - System32\Tasks\Minecraft Checksum Validator => C:\Program [Argument = Files (x86)\.minecraft\MinecraftChecksumValidator.exe] Task: {8228353B-DF06-4843-8CD4-658859262DF9} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-05-04] (AVAST Software) Task: {83B62C9D-8023-471D-A310-F4CD23813609} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.) Task: {849CCA81-FE05-41E8-A553-E320BD12AA19} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-06-08] (Adobe Systems Incorporated) Task: {8F180F90-B4F1-41B6-9F41-28818DEFC190} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-05-04] (AVAST Software) Task: {950629B3-A83D-4004-BBB9-92E263D3BA20} - System32\Tasks\Microsoft\VisualStudio\VSIX Auto Update 14 => C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\VSIXAutoUpdate.exe [2016-03-22] (Microsoft Corporation) Task: {98923B31-D77D-4603-B0F1-B6FCED0E3601} - \ProPCCleaner_Popup -> No File <==== ATTENTION Task: {A78A012A-2FC0-4B10-8810-6BCACE735D7D} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [2017-02-10] (Advanced Micro Devices, Inc.) Task: {AFAED888-E5F1-4301-BD6D-B617645920BE} - System32\Tasks\AMD ThankingURL => C:\Program Files\AMD\CIM\Bin64\Setup.exe [2017-02-10] (Advanced Micro Devices, Inc.) Task: {C47D7E56-7DF1-4C67-B2A5-1BE8A06FB72C} - System32\Tasks\{015D44F5-2E15-43B1-B934-1C9090AFA537} => C:\Program Files (x86)\Call of Duty- Modern Warfare 3\iw5sp.exe [2011-11-08] () Task: {CA5760CC-10AE-4536-BB49-D2C5E23AD438} - \Pwtyfemuk Cache -> No File <==== ATTENTION Task: {EC590795-FFBC-46B1-957E-DC5C56722987} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_30_0_0_113_pepper.exe [2018-06-08] (Adobe Systems Incorporated) Task: {FC4D847D-158B-4317-8D3F-E4FFC6063F45} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2018-06-05] (AVAST Software) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) ==================== Shortcuts & WMI ======================== (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2017-01-26 13:15 - 2016-01-22 18:57 - 000089008 _____ () C:\Windows\System32\cpwmon64.dll 2015-08-04 00:25 - 2015-08-04 00:25 - 000214528 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll 2014-02-11 07:08 - 2014-02-11 07:08 - 000817152 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Device.dll 2014-02-11 07:08 - 2014-02-11 07:08 - 003650560 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Platform.dll 2016-08-23 15:05 - 2016-08-23 15:05 - 000052400 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll 2016-06-29 20:13 - 2016-06-29 20:13 - 000014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll 2016-06-29 20:13 - 2016-06-29 20:13 - 000739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll 2016-06-29 20:13 - 2016-06-29 20:13 - 000014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll 2016-06-29 20:13 - 2016-06-29 20:13 - 000071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll 2016-06-29 20:13 - 2016-06-29 20:13 - 000011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll 2016-06-29 20:13 - 2016-06-29 20:13 - 002013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll 2016-06-29 20:13 - 2016-06-29 20:13 - 000191488 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Dialogs\dialogplugin.dll 2018-06-13 23:45 - 2018-06-12 07:36 - 004608856 _____ () C:\Program Files (x86)\Google\Chrome\Application\67.0.3396.87\libglesv2.dll 2018-06-13 23:45 - 2018-06-12 07:36 - 000099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\67.0.3396.87\libegl.dll 2018-05-17 14:12 - 2018-05-17 14:12 - 000736984 _____ () c:\Program Files\AVAST Software\Avast\x64\vaarclient.dll 2018-05-17 14:12 - 2018-05-17 14:12 - 001069784 _____ () C:\Program Files\AVAST Software\Avast\x64\ffl2.dll 2018-05-17 14:12 - 2018-05-17 14:12 - 000598232 _____ () c:\Program Files\AVAST Software\Avast\x64\StreamBack.dll 2018-05-17 14:12 - 2018-05-17 14:12 - 000482520 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll 2018-05-17 14:12 - 2018-05-17 14:12 - 000889048 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll 2018-05-17 14:12 - 2018-05-17 14:12 - 000924888 _____ () C:\Program Files\AVAST Software\Avast\anen.dll 2018-05-17 14:12 - 2018-05-17 14:12 - 000150744 _____ () C:\Program Files\AVAST Software\Avast\hns_tools.dll 2018-05-17 14:12 - 2018-05-17 14:12 - 000982744 _____ () C:\Program Files\AVAST Software\Avast\shepherdsync.dll 2018-05-17 14:12 - 2018-05-17 14:12 - 000519896 _____ () C:\Program Files\AVAST Software\Avast\gui_cache.dll 2018-06-16 18:42 - 2018-06-16 18:42 - 005841040 _____ () C:\Program Files\AVAST Software\Avast\defs\18061604\algo.dll 2015-11-24 22:48 - 2015-11-24 22:48 - 000028160 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\servicemanager.pyd 2015-11-24 22:46 - 2015-11-24 22:46 - 000110592 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\pywintypes26.dll 2015-11-24 22:48 - 2015-11-24 22:48 - 000041472 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32service.pyd 2015-11-24 22:48 - 2015-11-24 22:48 - 000096256 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32api.pyd 2015-11-24 22:43 - 2015-11-24 22:43 - 000356864 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\_hashlib.pyd 2015-11-24 22:48 - 2015-11-24 22:48 - 000017920 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32event.pyd 2015-11-24 22:48 - 2015-11-24 22:48 - 000019968 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32evtlog.pyd 2015-11-24 22:48 - 2015-11-24 22:48 - 000036352 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32process.pyd 2015-11-24 22:43 - 2015-11-24 22:43 - 000043008 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\_socket.pyd 2015-11-24 22:43 - 2015-11-24 22:43 - 000805376 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\_ssl.pyd 2015-11-24 22:43 - 2015-11-24 22:43 - 000087040 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\_ctypes.pyd 2015-11-24 22:46 - 2015-11-24 22:46 - 000354304 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\pythoncom26.dll 2015-11-24 22:48 - 2015-11-24 22:48 - 000167936 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32gui.pyd 2015-11-24 22:47 - 2015-11-24 22:47 - 001980928 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtGui.pyd 2015-12-07 22:57 - 2015-12-07 22:57 - 000077824 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\sip.pyd 2015-11-24 22:47 - 2015-11-24 22:47 - 001862144 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtCore.pyd 2015-11-24 22:47 - 2015-11-24 22:47 - 000516608 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtNetwork.pyd 2015-11-24 22:47 - 2015-11-24 22:47 - 004060160 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtWidgets.pyd 2015-11-24 22:43 - 2015-11-24 22:43 - 000010240 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\select.pyd 2018-03-12 22:33 - 2018-03-12 22:34 - 067126928 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2018-05-17 14:12 - 2018-05-17 14:12 - 000293592 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll 2017-02-10 16:23 - 2017-02-10 16:23 - 000240008 _____ () C:\Windows\SysWOW64\GameManager32.dll 2014-12-04 20:49 - 2018-06-08 23:38 - 000788256 _____ () C:\Program Files (x86)\Steam\SDL2.dll 2015-01-20 01:52 - 2018-06-08 23:42 - 004969248 _____ () C:\Program Files (x86)\Steam\v8.dll 2015-01-20 01:52 - 2018-06-08 23:40 - 001563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll 2015-01-20 01:52 - 2018-06-08 23:40 - 001195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll 2014-12-04 20:49 - 2018-06-09 01:39 - 002632992 _____ () C:\Program Files (x86)\Steam\video.dll 2017-12-15 18:54 - 2018-06-08 23:40 - 005137696 _____ () C:\Program Files (x86)\Steam\libavcodec-57.dll 2017-12-15 18:54 - 2018-06-08 23:40 - 000847136 _____ () C:\Program Files (x86)\Steam\libavutil-55.dll 2017-12-15 18:54 - 2018-06-08 23:40 - 000695584 _____ () C:\Program Files (x86)\Steam\libavformat-57.dll 2017-12-15 18:54 - 2018-06-08 23:40 - 000351520 _____ () C:\Program Files (x86)\Steam\libavresample-3.dll 2017-12-15 18:54 - 2018-06-08 23:40 - 000783648 _____ () C:\Program Files (x86)\Steam\libswscale-4.dll 2014-12-04 20:49 - 2018-06-09 01:38 - 000979744 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL 2016-03-09 10:13 - 2018-06-08 23:40 - 000266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll 2017-06-08 21:38 - 2018-06-08 23:39 - 000788256 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\SDL2.dll 2016-12-13 14:06 - 2018-06-08 23:39 - 083524384 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll 2015-01-20 01:52 - 2018-06-08 23:42 - 000119208 _____ () C:\Program Files (x86)\Steam\winh264.dll 2017-07-11 12:44 - 2018-06-08 23:39 - 002253600 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\swiftshader\libglesv2.dll 2017-07-11 12:43 - 2018-06-08 23:39 - 000109856 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\swiftshader\libegl.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\Users\Public\AppData:CSM [476] ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE trusted site: HKU\.DEFAULT\...\clonewarsadventures.com -> clonewarsadventures.com IE trusted site: HKU\.DEFAULT\...\freerealms.com -> freerealms.com IE trusted site: HKU\.DEFAULT\...\soe.com -> soe.com IE trusted site: HKU\.DEFAULT\...\sony.com -> sony.com IE trusted site: HKU\S-1-5-19\...\clonewarsadventures.com -> clonewarsadventures.com IE trusted site: HKU\S-1-5-19\...\freerealms.com -> freerealms.com IE trusted site: HKU\S-1-5-19\...\soe.com -> soe.com IE trusted site: HKU\S-1-5-19\...\sony.com -> sony.com IE trusted site: HKU\S-1-5-20\...\clonewarsadventures.com -> clonewarsadventures.com IE trusted site: HKU\S-1-5-20\...\freerealms.com -> freerealms.com IE trusted site: HKU\S-1-5-20\...\soe.com -> soe.com IE trusted site: HKU\S-1-5-20\...\sony.com -> sony.com IE trusted site: HKU\S-1-5-21-3377807318-2724434003-2614323792-1005\...\aeriagames.com -> hxxps://aeriagames.com IE trusted site: HKU\S-1-5-21-3377807318-2724434003-2614323792-1005\...\aeriagames.com -> hxxp://aeriagames.com IE trusted site: HKU\S-1-5-21-3377807318-2724434003-2614323792-1005\...\clonewarsadventures.com -> clonewarsadventures.com IE trusted site: HKU\S-1-5-21-3377807318-2724434003-2614323792-1005\...\freerealms.com -> freerealms.com IE trusted site: HKU\S-1-5-21-3377807318-2724434003-2614323792-1005\...\soe.com -> soe.com IE trusted site: HKU\S-1-5-21-3377807318-2724434003-2614323792-1005\...\sony.com -> sony.com ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2017-11-15 13:16 - 000001008 _____ C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 down.baidu2016.com 127.0.0.1 123.sogou.com 127.0.0.1 www.czzsyzgm.com 127.0.0.1 www.czzsyzxl.com 127.0.0.1 union.baidu2019.com ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3377807318-2724434003-2614323792-1000\Control Panel\Desktop\\Wallpaper -> %windir%\web\wallpaper\windows\img0.jpg HKU\S-1-5-21-3377807318-2724434003-2614323792-1005\Control Panel\Desktop\\Wallpaper -> C:\Users\Safe\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.0.1 - 192.168.220.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe" silent MSCONFIG\startupreg: DAEMON Tools Lite Automount => "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun MSCONFIG\startupreg: EA Core => "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent MSCONFIG\startupreg: PlaysTV => "C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe" --startup MSCONFIG\startupreg: PWRISOVM.EXE => C:\Program Files\PowerISO\PWRISOVM.EXE -startup MSCONFIG\startupreg: Raptr => "C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe" --startup MSCONFIG\startupreg: RGSC => C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [TCP Query User{75AFC00E-B5BF-48BA-8A7D-22D014212197}C:\users\public\sony online entertainment\installed games\planetside 2\planetside2_x64.exe] => (Allow) C:\users\public\sony online entertainment\installed games\planetside 2\planetside2_x64.exe FirewallRules: [UDP Query User{52319B67-8F16-41A1-9A05-141A314C1437}C:\users\public\sony online entertainment\installed games\planetside 2\planetside2_x64.exe] => (Allow) C:\users\public\sony online entertainment\installed games\planetside 2\planetside2_x64.exe FirewallRules: [{9DE55365-03AA-44BC-A4BF-7174F06612E8}] => (Allow) C:\Users\deckx\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{0C190ED4-0994-4A2E-AB18-6ABDAB1850CF}] => (Allow) C:\Users\deckx\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [TCP Query User{E0053363-D133-4B7A-8526-CC43B9E9634E}C:\users\deckx\downloads\utorrent.exe] => (Allow) C:\users\deckx\downloads\utorrent.exe FirewallRules: [UDP Query User{F58577E1-8901-437B-B2CF-A00C6FE0761E}C:\users\deckx\downloads\utorrent.exe] => (Allow) C:\users\deckx\downloads\utorrent.exe FirewallRules: [{6C63EF59-92E1-4F28-A604-4C407CD617FD}] => (Allow) C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe FirewallRules: [{152EABFC-B959-4F51-A6F9-D33345F48BF3}] => (Allow) C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe FirewallRules: [{667982F1-D3F9-40B0-BDB0-880A0A5A06F8}] => (Allow) C:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe FirewallRules: [{6E6295D6-6E30-4391-8462-25A5385B9A3D}] => (Allow) C:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe FirewallRules: [{F93B650F-6752-447E-A7A6-B52610C70BB3}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{5403F337-6EF3-4C63-B077-52000107E955}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{3E9B0FBA-622F-4883-BF07-1A0FEAA00E68}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{3285AEF4-6880-42DA-BAAE-4F2BE98405A6}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{9E0D252C-152C-4210-AB40-8501554A881C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{9800B55F-182B-44D0-8FF3-A9B0A9CCA7FE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\dota.exe FirewallRules: [{64109355-7751-48DD-AF45-DCE4AD4854E9}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [TCP Query User{400F2907-5CCC-4015-843F-9B4EDF51B60B}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe FirewallRules: [UDP Query User{437B66D8-E3F4-4B6D-9C5F-AAA7CAACBB6E}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe FirewallRules: [TCP Query User{595768F6-F850-48EF-A59E-7E7872CC9ACE}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe FirewallRules: [UDP Query User{97CE6732-0E68-40D4-8155-CACB5E172BB2}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe FirewallRules: [{AB5BF077-77C0-487E-9B0C-C3CEAC66A495}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\OMSI 2\Omsi.exe FirewallRules: [{B614DC3D-782B-42AD-961E-EE5BF9A47D52}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\OMSI 2\Omsi.exe FirewallRules: [TCP Query User{5F78F50B-F820-45DB-A1BF-553D9B0AF903}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe FirewallRules: [UDP Query User{1E98E320-BE9B-4613-9D73-CB07F8D4C8D9}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe FirewallRules: [TCP Query User{37F8C74E-0202-4BC7-86BE-C59283AFCB0A}C:\users\safe\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\safe\appdata\local\akamai\netsession_win.exe FirewallRules: [UDP Query User{C2C3DB72-9F43-41B2-B978-95E139A0ED1A}C:\users\safe\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\safe\appdata\local\akamai\netsession_win.exe FirewallRules: [{27BC9547-AF6D-4B3C-95B2-E5981820A534}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe FirewallRules: [{928C02F9-0D5F-4F69-9B06-46A7EFB96713}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe FirewallRules: [{EBA5865F-B156-4BCB-910F-08C6A6B6CEA0}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe FirewallRules: [{73A786ED-2FAA-4C29-9920-272681A56F9F}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe FirewallRules: [TCP Query User{EE08E713-AAED-42DE-8DE9-5E681FD0FDF8}C:\program files (x86)\steam\steamapps\common\dota 2 beta\dota_ugc\game\bin\win64\dota2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dota 2 beta\dota_ugc\game\bin\win64\dota2.exe FirewallRules: [UDP Query User{035CF7C3-5EF0-45C0-BD5E-02BC6117D922}C:\program files (x86)\steam\steamapps\common\dota 2 beta\dota_ugc\game\bin\win64\dota2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dota 2 beta\dota_ugc\game\bin\win64\dota2.exe FirewallRules: [{5F6136AB-B6C3-4EB2-91FB-5B0A39285B35}] => (Allow) C:\Users\deckx\AppData\Local\Temp\java.exe FirewallRules: [{99DFD5FF-5D9E-4736-953C-A050EF064125}] => (Allow) C:\Users\deckx\AppData\Local\Temp\java.exe FirewallRules: [TCP Query User{D39349DA-7A07-4D2D-B4E5-D7CAD7C70FEB}C:\users\safe\appdata\local\warthunder\launcher.exe] => (Allow) C:\users\safe\appdata\local\warthunder\launcher.exe FirewallRules: [UDP Query User{E7CD1D84-74A9-452D-8007-038DA514759C}C:\users\safe\appdata\local\warthunder\launcher.exe] => (Allow) C:\users\safe\appdata\local\warthunder\launcher.exe FirewallRules: [TCP Query User{DF37AF0A-B348-4F75-A57E-DFF863441DE0}C:\users\safe\appdata\local\warthunder\aces.exe] => (Allow) C:\users\safe\appdata\local\warthunder\aces.exe FirewallRules: [UDP Query User{F98EDEAD-25CA-42EE-85FD-749D3EC5F880}C:\users\safe\appdata\local\warthunder\aces.exe] => (Allow) C:\users\safe\appdata\local\warthunder\aces.exe FirewallRules: [{D1CD2526-3193-4256-A3FA-AF8B540FEC00}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win32\dota2.exe FirewallRules: [{8DA0F1FF-B4E4-4E03-A6DF-D3339CE25ED5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win32\dota2.exe FirewallRules: [{26774203-1A88-4BC8-8017-5B3730306191}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe FirewallRules: [{281B8B11-D831-43BF-89A3-CEA284CD60C5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe FirewallRules: [{85A813D2-71FE-4054-8A4E-CBD257FD4515}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe FirewallRules: [{CF2427FE-F130-44CF-B3B3-409631461C68}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe FirewallRules: [{70F452DC-B9A5-48DA-8910-A7C21EB84385}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe FirewallRules: [{E4DBAB29-01F4-429B-8963-A1FCD7B3C31D}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe FirewallRules: [{4910A5BA-54F2-49D6-A635-36B38704EDDF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{400F8B26-691B-4894-B291-39D955D01AE6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{A3D9E849-5DEB-4F3C-9801-C2DA7467D39E}] => (Allow) C:\Program Files (x86)\Farming Simulator 2015\FarmingSimulator2015.exe FirewallRules: [{F2FFE286-5C86-4273-AEB6-49C56CEB3C76}] => (Allow) C:\Program Files (x86)\Farming Simulator 2015\FarmingSimulator2015.exe FirewallRules: [{5D796E1D-B84D-4EC0-92AE-703137B3A1F3}] => (Allow) C:\Program Files (x86)\Farming Simulator 2015\x86\FarmingSimulator2015Game.exe FirewallRules: [{4C017A41-CAF6-4ADB-9559-B639F511BDC6}] => (Allow) C:\Program Files (x86)\Farming Simulator 2015\x86\FarmingSimulator2015Game.exe FirewallRules: [{F1641788-CF8B-4501-AFEA-2598697FE1F7}] => (Allow) C:\Program Files (x86)\Farming Simulator 2015\x64\FarmingSimulator2015Game.exe FirewallRules: [{1ECCA029-8006-43AE-A888-D6831A99CED1}] => (Allow) C:\Program Files (x86)\Farming Simulator 2015\x64\FarmingSimulator2015Game.exe FirewallRules: [TCP Query User{E51B6043-CF76-430F-855A-F12E43FC4A0B}C:\program files\oracle\virtualbox\virtualbox.exe] => (Allow) C:\program files\oracle\virtualbox\virtualbox.exe FirewallRules: [UDP Query User{995F646F-3D22-4D74-BF37-73001E2F4E9E}C:\program files\oracle\virtualbox\virtualbox.exe] => (Allow) C:\program files\oracle\virtualbox\virtualbox.exe FirewallRules: [{35C61AB3-437A-42C9-B797-EED05A191B43}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe FirewallRules: [{DE490620-46DC-4268-9292-E6DE72E2E4D0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe FirewallRules: [TCP Query User{A097FC18-9883-46D7-A7CD-2D1FACD56281}C:\users\deckx\appdata\roaming\utorrent\updates\3.4.5_41372.exe] => (Allow) C:\users\deckx\appdata\roaming\utorrent\updates\3.4.5_41372.exe FirewallRules: [UDP Query User{4A048336-5AC5-4B04-9C2D-3C2A39EFF7E7}C:\users\deckx\appdata\roaming\utorrent\updates\3.4.5_41372.exe] => (Allow) C:\users\deckx\appdata\roaming\utorrent\updates\3.4.5_41372.exe FirewallRules: [TCP Query User{9B956437-05AF-4A27-9580-AE498BF9D7A1}C:\program files (x86)\electronic arts\eadm\core.exe] => (Allow) C:\program files (x86)\electronic arts\eadm\core.exe FirewallRules: [UDP Query User{92CFB42A-EEE4-488C-93D0-935C5768272F}C:\program files (x86)\electronic arts\eadm\core.exe] => (Allow) C:\program files (x86)\electronic arts\eadm\core.exe FirewallRules: [TCP Query User{74564905-DF1F-4E9C-8EC6-A4A105CE3CB3}C:\users\safe\appdata\local\skypeplugin\7.17.0.43\pluginhost.exe] => (Allow) C:\users\safe\appdata\local\skypeplugin\7.17.0.43\pluginhost.exe FirewallRules: [UDP Query User{99A9DCAD-99EE-49D6-A004-6158A1D3B217}C:\users\safe\appdata\local\skypeplugin\7.17.0.43\pluginhost.exe] => (Allow) C:\users\safe\appdata\local\skypeplugin\7.17.0.43\pluginhost.exe FirewallRules: [{4726765E-F9FD-427A-BA85-3A88F42A8641}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe FirewallRules: [{9B3895A0-0E92-41CD-BD8D-1CE84E46A39F}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe FirewallRules: [TCP Query User{93F21D55-9FCB-448D-87A5-CDED161B24BB}C:\users\safe\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\safe\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{2AE6595D-B9D6-43BD-9F62-90ABCDA5B98D}C:\users\safe\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\safe\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{19EEEEDB-1391-4870-A720-4FF7BA459682}C:\users\deckx\appdata\roaming\utorrent\updates\3.4.6_42094.exe] => (Allow) C:\users\deckx\appdata\roaming\utorrent\updates\3.4.6_42094.exe FirewallRules: [UDP Query User{DEE3418A-3C51-475B-9B52-6BD48F96D958}C:\users\deckx\appdata\roaming\utorrent\updates\3.4.6_42094.exe] => (Allow) C:\users\deckx\appdata\roaming\utorrent\updates\3.4.6_42094.exe FirewallRules: [TCP Query User{E0468C53-5C36-4025-B043-781A6FF0EA52}C:\program files\call of duty black ops iii\blackops3.exe] => (Allow) C:\program files\call of duty black ops iii\blackops3.exe FirewallRules: [UDP Query User{8A107B0F-5206-4B0A-9AD7-1B96EE428D01}C:\program files\call of duty black ops iii\blackops3.exe] => (Allow) C:\program files\call of duty black ops iii\blackops3.exe FirewallRules: [{868F346C-CAA7-4942-ADA4-DDE42F681222}] => (Allow) C:\Windows\Temp\download\MiniThunderPlatform.exe FirewallRules: [{CDE0C5D6-7266-4DD7-8DB9-84D8C45E4C1A}] => (Allow) C:\Windows\Temp\download\MiniThunderPlatform.exe FirewallRules: [{5C8392CB-853D-46AA-A75A-FD66B119F480}] => (Allow) C:\Users\deckx\AppData\Roaming\UPUpdata\download\MiniThunderPlatform.exe FirewallRules: [{6FBEE467-8749-469C-81FE-5589323CDD8D}] => (Allow) C:\Users\deckx\AppData\Roaming\UPUpdata\download\MiniThunderPlatform.exe FirewallRules: [{9F202A1A-5C73-47DC-A6C5-2B7B250C6D63}] => (Allow) C:\Users\deckx\AppData\Local\Temp\18194\download\MiniThunderPlatform.exe FirewallRules: [{9C6AB2DE-B4BA-4995-A0E6-66D1AD9358F6}] => (Allow) C:\Users\deckx\AppData\Local\Temp\18194\download\MiniThunderPlatform.exe FirewallRules: [TCP Query User{45DC7EEE-D696-439D-93C6-C27B34E8DC90}C:\program files\netbeans 8.1\bin\netbeans64.exe] => (Allow) C:\program files\netbeans 8.1\bin\netbeans64.exe FirewallRules: [UDP Query User{DC71CD65-F724-4259-AFEE-4E924D801C46}C:\program files\netbeans 8.1\bin\netbeans64.exe] => (Allow) C:\program files\netbeans 8.1\bin\netbeans64.exe FirewallRules: [{CD3CB8FC-15FB-4AD4-9A30-4682E51BC337}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe FirewallRules: [{882F3DEF-6147-4603-8D70-8AE3047761B2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{6186CBEE-A956-4A9F-93FE-BD340D98EE5C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{45D48312-42BF-44F3-9AD5-5D62E4C8CDA8}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe FirewallRules: [UDP Query User{55E8E67C-507D-48A5-88EF-BBBDB939F9D7}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe FirewallRules: [TCP Query User{65EC3C39-E863-4C3E-A9D4-20CDF47AF05F}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe FirewallRules: [UDP Query User{8805F811-76D2-4EB9-9D2B-F52B80056651}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe FirewallRules: [TCP Query User{C6B8F80E-A68E-4F5E-8C7C-89A875911413}C:\Program Files\Java\jdk1.8.0_91\bin\java.exe] => (Allow) C:\Program Files\Java\jdk1.8.0_91\bin\java.exe FirewallRules: [UDP Query User{5B97ADBA-6EF3-4FC3-A5DC-57423B2309D1}C:\Program Files\Java\jdk1.8.0_91\bin\java.exe] => (Allow) C:\Program Files\Java\jdk1.8.0_91\bin\java.exe FirewallRules: [TCP Query User{456328AA-03C5-46D3-887F-31E56BD6BBFE}C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe FirewallRules: [UDP Query User{CA092719-3C5A-4961-886C-10591B8273D7}C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe FirewallRules: [{9955F2DD-D424-471B-BAD8-478C53920BC5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rome Total War Gold\RomeTW.exe FirewallRules: [{6E574DAB-3EE3-4C37-B8AD-BBC3DE7414BC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rome Total War Gold\RomeTW.exe FirewallRules: [{F2CA9604-E97A-477D-BDE3-F418496D3479}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rome Total War Gold\RomeTW-BI.exe FirewallRules: [{17601D9A-A775-4296-B396-CD8D042FE29D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rome Total War Gold\RomeTW-BI.exe FirewallRules: [{BAF051BA-4B72-485E-9328-7DA01BBC02E1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Pro Gamer Manager\PGM.exe FirewallRules: [{BBC6FCF0-F83B-444C-907B-810091F13519}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Pro Gamer Manager\PGM.exe FirewallRules: [{EF3EC621-7E19-4CE7-A1F5-80C34274784D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect.exe FirewallRules: [{408E7D3B-1032-4D33-BAC8-7859FF7CAE76}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect.exe FirewallRules: [{22160E70-9924-48AA-830B-E708064536D9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect Safe Mode.exe FirewallRules: [{DB7DBB29-7C7E-4520-8A1D-61D52471DC86}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect Safe Mode.exe FirewallRules: [TCP Query User{828BBA24-1557-43A6-BDB1-D665B69261FC}C:\users\safe\appdata\local\popcorn-time\nw.exe] => (Block) C:\users\safe\appdata\local\popcorn-time\nw.exe FirewallRules: [UDP Query User{2A4E0B2A-27A4-4837-8F47-E31B571461C4}C:\users\safe\appdata\local\popcorn-time\nw.exe] => (Block) C:\users\safe\appdata\local\popcorn-time\nw.exe FirewallRules: [{38C2BBE1-86AE-48AF-B83B-52E75D7B8797}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe FirewallRules: [{1B8939A6-C10A-4155-83D1-EBCABE94699F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe FirewallRules: [{A9799C8A-5718-487C-9035-D45464B5E22F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe FirewallRules: [{2B523BE2-01D9-48C5-8B33-5CF489748CBD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe FirewallRules: [{097382D7-30F4-43CB-B371-209857C6F070}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\War Thunder\launcher.exe FirewallRules: [{7A53A86C-2C74-43B7-BE0F-2EF1A308AEEA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\War Thunder\launcher.exe FirewallRules: [{891B971F-92B7-4D5F-92A9-D1DE6016FC36}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe FirewallRules: [{4E979F4D-411E-4995-8E12-5A719928254D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe FirewallRules: [{1190F831-14C4-4CB3-A126-B79CF2F757C9}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe FirewallRules: [{7E6C17E9-375A-4F5B-9237-D7D958916207}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe FirewallRules: [{98A33787-144C-4119-A3A1-1A3785A186EE}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe FirewallRules: [{2F03B109-FF43-4850-83B3-C967E4621B08}] => (Allow) LPort=12292 FirewallRules: [{9DAD3D05-88FC-4607-A6CF-829C67CC0740}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{F5751E81-C7F3-44BA-95CB-8EDD1927AFDE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{C0BEAB47-EF69-4508-B76F-5E3DA3F25FAB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 4\bin\FarCry4.exe FirewallRules: [{022597B1-EF08-442E-BAAD-6C1B82740A52}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 4\bin\FarCry4.exe FirewallRules: [{CF20B1A9-62B5-4252-B511-45C1C6B1DFE5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 4\bin\IGE_WPF64.exe FirewallRules: [{5189A971-D5CB-4EEE-95B9-D3019D8697C0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 4\bin\IGE_WPF64.exe FirewallRules: [{59657339-AE2B-4CA7-AFF0-B1D26769A3C5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{94C825D8-48A0-4ACA-9F43-0DD5E8E4A1CC}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{B1478F3D-B9BC-4E5A-96A8-9A12B822BB57}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK SOTF\ShooterGame\Binaries\Win64\ShooterGame_BE.exe FirewallRules: [{2BF35BAC-72BA-47DC-A2DA-93B6D37E41B3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK SOTF\ShooterGame\Binaries\Win64\ShooterGame_BE.exe FirewallRules: [TCP Query User{A5EB8951-51E8-4AA6-85E1-700A124D6F4D}C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe FirewallRules: [UDP Query User{D4576439-38D1-4E6C-BFEE-F0D0C76557FD}C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe FirewallRules: [TCP Query User{46466B1E-05A3-4B5E-B45E-68096B725B00}C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe FirewallRules: [UDP Query User{5AD79B42-7EAD-4B4A-B1A3-627A0FF7FB28}C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe FirewallRules: [{5E009D0D-170A-4090-BE16-535BEA65DE6A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Empire Total War\Empire.exe FirewallRules: [{4FC06E7C-D0DC-4F07-9B81-245B93025B5B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Empire Total War\Empire.exe FirewallRules: [{05FB0C0B-F2EC-403B-A353-09A5994CA24B}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe FirewallRules: [{9EBBD3DE-670A-481A-A555-1A341C5C0650}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe FirewallRules: [{BDA33236-8F3E-457D-8076-233308B8C102}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe FirewallRules: [{A4E81D2A-E28A-4884-BCF8-0ED4553BC532}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe FirewallRules: [TCP Query User{0263056B-450D-4D83-A0BB-E82961E7BADD}C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe FirewallRules: [UDP Query User{0F2B0C82-98E0-492E-85CF-8209DDD2D811}C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3_x64.exe FirewallRules: [{A03B3EF3-E3A0-4845-9164-5427B50F19CD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe FirewallRules: [{6D9B201F-C4C3-4628-AE2B-4BCBF20E9112}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe FirewallRules: [TCP Query User{28ADDA62-4048-42C3-AB27-F4291B3EFDF0}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe FirewallRules: [UDP Query User{01E9BC03-0508-4613-9CCF-B087437321D5}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe FirewallRules: [{EBC701E3-0C82-45D4-A832-92F03C08D1E1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Space\spacegame\Binaries\Win64\Fractured Space.exe FirewallRules: [{545A42E0-2AAF-4311-9836-44B704BB2699}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Space\spacegame\Binaries\Win64\Fractured Space.exe FirewallRules: [{80D41FD3-8E83-4805-B29A-036768F0C87F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Ben and Ed - Blood Party\BaEBloodParty.exe FirewallRules: [{AA8CABCF-9B09-4232-814B-6A7FDF0FF626}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Ben and Ed - Blood Party\BaEBloodParty.exe FirewallRules: [TCP Query User{AC2EC945-EFCB-46C9-BB0A-40EF8EB2BEB1}C:\program files (x86)\steam\steamapps\common\ben and ed - blood party\baebloodparty\binaries\win32\baebloodparty-win32-debuggame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\ben and ed - blood party\baebloodparty\binaries\win32\baebloodparty-win32-debuggame.exe FirewallRules: [UDP Query User{38EBC1FC-7C5D-407F-98AD-74E8FBA54AFC}C:\program files (x86)\steam\steamapps\common\ben and ed - blood party\baebloodparty\binaries\win32\baebloodparty-win32-debuggame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\ben and ed - blood party\baebloodparty\binaries\win32\baebloodparty-win32-debuggame.exe FirewallRules: [{41742CCF-18C7-430D-9832-4CED8B1FAABB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Free to Play\FTP.exe FirewallRules: [{7D1E4C73-D6C4-475D-A39E-E6B4AA5CDE50}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Free to Play\FTP.exe FirewallRules: [TCP Query User{DDAB6610-65D7-4A72-8928-7BCB1BBB7C28}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_91\bin\javaw.exe FirewallRules: [UDP Query User{85C2F419-8CA2-47D2-AC62-5C284504070E}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_91\bin\javaw.exe FirewallRules: [TCP Query User{C6522C58-6FCB-4BB2-9829-6B51A8F60375}C:\users\deckx\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\deckx\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{7132722B-5F2A-46E2-BF25-2E2AD536986F}C:\users\deckx\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\deckx\appdata\roaming\spotify\spotify.exe FirewallRules: [{84089D71-BA21-4A9C-AA12-8C008AB4E701}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GemCraft Chasing Shadows\GemCraft Chasing Shadows.exe FirewallRules: [{E11A0452-2934-439F-928F-14573F399CC3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GemCraft Chasing Shadows\GemCraft Chasing Shadows.exe FirewallRules: [{EF36319C-5045-44DB-9258-EC01F6753A02}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Sims 3\Game\Bin\Sims3Launcher.exe FirewallRules: [{ABFF9509-AA81-4490-8055-267E5C42D850}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Sims 3\Game\Bin\Sims3Launcher.exe FirewallRules: [{CC99C7F8-7B5A-4207-8351-DA84CC783FA6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PlanetSide 2\LaunchPad.exe FirewallRules: [{F9E6BE5E-1BF9-455C-A3D2-1B5FE3C00EED}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PlanetSide 2\LaunchPad.exe FirewallRules: [TCP Query User{C62D5F6D-0F1A-4139-87E4-DD30E5CCAB54}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe FirewallRules: [UDP Query User{08E776B0-24AA-41D2-B490-6AA739964DE3}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe FirewallRules: [TCP Query User{8555AA17-B197-4294-ADBA-C0D74DEC155D}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe FirewallRules: [UDP Query User{9A4EA452-5444-44DB-A5C8-6D63BB22314B}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe FirewallRules: [TCP Query User{44595A6D-B8D0-4EFC-BDBA-6920BCE4BD21}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe FirewallRules: [UDP Query User{B5BAC2C5-67A7-414F-AF36-1FD3E127DD98}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe FirewallRules: [{91870A8D-2D42-4EC0-90C7-FE07BE0DE0D4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Farming Simulator 17\x64\FarmingSimulator2017Game.exe FirewallRules: [{A7EE42D0-041A-48C9-9FFB-9624FFC88793}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Farming Simulator 17\x64\FarmingSimulator2017Game.exe FirewallRules: [{458F005D-8BB7-4EB3-8646-BD77629867BD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Farming Simulator 17\x86\FarmingSimulator2017Game.exe FirewallRules: [{DDC6094E-721F-4622-8A6F-89EEF1EF5A73}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Farming Simulator 17\x86\FarmingSimulator2017Game.exe FirewallRules: [{98038B69-40F5-40BD-B181-1C76F2A391A5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 4\bin\FarCry4.exe FirewallRules: [{1ED1B000-8D6F-400A-A5AB-986C34C238BB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 4\bin\FarCry4.exe FirewallRules: [{847F37DB-BB6F-423A-B358-7A71ADF3E880}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Farming Simulator 17\x64\FarmingSimulator2017Game.exe FirewallRules: [{1880029B-038D-47AD-8F27-66F61CE0A02A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Farming Simulator 17\x64\FarmingSimulator2017Game.exe FirewallRules: [{D5730A13-1388-4F0B-95BE-92179CAE382B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\They Are Billions\TheyAreBillions.exe FirewallRules: [{40CB5165-5794-4082-9315-48B87668BCC6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\They Are Billions\TheyAreBillions.exe FirewallRules: [{4367B338-BF4D-4D6F-9AF0-14CAB62628C4}] => (Allow) C:\Program Files (x86)\Alawar.co.nl\Governor of Poker 2\GovernorofPoker2_SE_Alawar.wrp.exe FirewallRules: [{D1275D1C-FAE0-4540-AC49-26C13ADCB794}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Walking Dead Season Two\TheWalkingDead2.exe FirewallRules: [{42FD838B-5BFC-4E64-A7A4-953BEC30C2CE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Walking Dead Season Two\TheWalkingDead2.exe FirewallRules: [{5CDCECCB-5387-4B2E-AC7C-1DF54D0CFF49}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Total War Rome II\launcher\launcher.exe FirewallRules: [{4D4399D9-53A5-4A2C-ADE7-F316FE2BEC1D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Total War Rome II\launcher\launcher.exe FirewallRules: [TCP Query User{9F0F01C2-7DE0-441D-8A63-0228B5FDA1F2}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.137\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.137\deploy\leagueclient.exe FirewallRules: [UDP Query User{A01B5B2E-D1C7-4500-991E-D90D1832832D}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.137\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.137\deploy\leagueclient.exe FirewallRules: [TCP Query User{6F84BECF-43A9-4D4F-9EC0-685D1975C75C}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.138\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.138\deploy\leagueclient.exe FirewallRules: [UDP Query User{CA5EFD54-75B5-4342-AB0C-32EE98258CE4}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.138\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.138\deploy\leagueclient.exe FirewallRules: [{008E1776-31CD-4835-9D7C-4FA81A933CE4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect64.exe FirewallRules: [{99A144D1-CB7D-4B3C-B15B-132BA753D5A3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect64.exe FirewallRules: [{C5B610FB-6A5A-4CB7-96EE-E86DBBA183BA}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe FirewallRules: [{905A965A-A32E-46F5-9C24-6B5E67EE4EB1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Paladins\Binaries\Win32\HirezBridge.exe FirewallRules: [{010A91A4-98CE-4077-89F7-E9037A336288}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Paladins\Binaries\Win32\HirezBridge.exe FirewallRules: [TCP Query User{46C6C4C5-F4DA-4367-98E4-993BF31211B3}C:\program files (x86)\steam\steamapps\common\paladins\binaries\win64\paladins.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\paladins\binaries\win64\paladins.exe FirewallRules: [UDP Query User{9BC698F0-92D1-4A91-878A-DC139B8B66F8}C:\program files (x86)\steam\steamapps\common\paladins\binaries\win64\paladins.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\paladins\binaries\win64\paladins.exe FirewallRules: [{568218D0-FD9A-485B-AB1F-25F45762FE37}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Space\launcher\launcher.exe FirewallRules: [{771563A2-389E-441F-8D59-501172C50841}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Space\launcher\launcher.exe FirewallRules: [{8CE283DC-1A93-4343-9232-1402D8E22465}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{19C525F3-1E13-462F-BF7C-01524958CD30}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{01E684CE-DC28-4CF7-B482-89FA74DAD4AA}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{8B0AB45C-C100-4454-95D4-EBC3BA07B4EB}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{9C0FBA2E-3637-44BC-9752-86C4A8B6EDD2}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Restore Points ========================= 14-06-2018 20:20:36 Scheduled Checkpoint ==================== Faulty Device Manager Devices ============= Name: Teredo Tunneling Pseudo-Interface Description: Microsoft Teredo Tunneling Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: AODDriver4.1 Description: AODDriver4.1 Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: AODDriver4.1 Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (06/16/2018 06:40:21 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3002) (User: NT AUTHORITY) Description: The performance counter explain text string value in the registry is not formatted correctly. The malformed string is . The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values. Error: (06/16/2018 06:40:18 PM) (Source: vmauthd) (EventID: 1000) (User: ) Description: Cannot find perfmon object in array returned by perfDLL, index=0 Error: (06/16/2018 06:39:21 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (06/16/2018 06:26:09 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY) Description: Product: Avast Update Helper -- Error 1316. The specified account already exists. Error: (06/16/2018 06:21:53 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3002) (User: NT AUTHORITY) Description: The performance counter explain text string value in the registry is not formatted correctly. The malformed string is . The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values. Error: (06/16/2018 06:21:48 PM) (Source: vmauthd) (EventID: 1000) (User: ) Description: Cannot find perfmon object in array returned by perfDLL, index=0 Error: (06/16/2018 06:21:48 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (06/16/2018 06:02:45 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3002) (User: NT AUTHORITY) Description: The performance counter explain text string value in the registry is not formatted correctly. The malformed string is . The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values. System errors: ============= Error: (06/16/2018 06:40:24 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: The WMI Performance Adapter service terminated with the following error: Unspecified error Error: (06/16/2018 06:38:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The MPC Core Protect Service service failed to start due to the following error: The system cannot find the file specified. Error: (06/16/2018 06:38:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The Hardlock service failed to start due to the following error: This driver has been blocked from loading Error: (06/16/2018 06:38:39 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Windows\SysWow64\drivers\hardlock.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver. Error: (06/16/2018 06:38:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The AODDriver4.1 service failed to start due to the following error: The system cannot find the path specified. Error: (06/16/2018 06:38:36 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: The previous system shutdown at 18:36:50 on ‎16/‎06/‎2018 was unexpected. Error: (06/16/2018 06:21:56 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: The WMI Performance Adapter service terminated with the following error: Unspecified error Error: (06/16/2018 06:20:23 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The MPC Core Protect Service service failed to start due to the following error: The system cannot find the file specified. Windows Defender: =================================== Date: 2016-04-29 16:49:31.853 Description: Windows Defender has detected spyware or other potentially unwanted software. For more information please see the following: http://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/Sasquor&threatid=226763 Name:BrowserModifier:Win32/Sasquor ID:226763 Severity:High Category:Browser Modifier Path Found:file:C:\Program Files (x86)\hohobnd_1cd45e\cihech.exe;file:C:\Program Files (x86)\Pwtyfemuk\Pwtcchsrv.exe;file:C:\Program Files (x86)\Pwtyfemuk\Pwtcchsrv.exe1890014;file:C:\Program Files (x86)\Pwtyfemuk\Pwtcchtsk.exe;file:C:\Program Files (x86)\Pwtyfemuk\Pwtcchtsk.exe1890014;file:C:\Windows\System32\Tasks\Pwtyfemuk Cache;folder:C:\Program Files (x86)\Pwtyfemuk\;service:BugreportW;service:Pwtcchsrv;taskscheduler:C:\Windows\System32\Tasks\Pwtyfemuk Cache Detection Type:Concrete Detection Source:Real-Time Protection Status:Unknown Process Name: Date: 2016-04-29 16:44:57.408 Description: Windows Defender has detected spyware or other potentially unwanted software. For more information please see the following: http://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/Sasquor&threatid=226763 Name:BrowserModifier:Win32/Sasquor ID:226763 Severity:High Category:Browser Modifier Path Found:file:C:\Program Files (x86)\hohobnd_1cd45e\cihech.exe;file:C:\Program Files (x86)\Pwtyfemuk\Pwtcchsrv.exe Detection Type:Concrete Detection Source:Real-Time Protection Status:Unknown Process Name: Date: 2016-04-29 16:44:56.784 Description: Windows Defender has detected spyware or other potentially unwanted software. For more information please see the following: http://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/Sasquor&threatid=226763 Name:BrowserModifier:Win32/Sasquor ID:226763 Severity:High Category:Browser Modifier Path Found:file:C:\Program Files (x86)\Pwtyfemuk\Pwtcchsrv.exe Detection Type:Concrete Detection Source:Real-Time Protection Status:Unknown Process Name: Date: 2016-04-29 15:22:06.061 Description: Windows Defender has detected spyware or other potentially unwanted software. For more information please see the following: http://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/Neobar&threatid=225451 Name:BrowserModifier:Win32/Neobar ID:225451 Severity:High Category:Browser Modifier Path Found:bho:HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{6E727987-C8EA-44DA-8749-310C0FBE3C3E};bho:HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{6E727987-C8EA-44DA-8749-310C0FBE3C3E};clsid:HKLM\SOFTWARE\CLASSES\CLSID\{03AE1B7B-A9E7-4D5A-9D34-89999C31B659};clsid:HKLM\SOFTWARE\CLASSES\CLSID\{6E727987-C8EA-44DA-8749-310C0FBE3C3E};clsid:HKLM\SOFTWARE\CLASSES\Wow6432Node\CLSID\{03AE1B7B-A9E7-4D5A-9D34-89999C31B659};clsid:HKLM\SOFTWARE\CLASSES\Wow6432Node\CLSID\{6E727987-C8EA-44DA-8749-310C0FBE3C3E};clsid:HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{03AE1B7B-A9E7-4D5A-9D34-89999C31B659};clsid:HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{6E727987-C8EA-44DA-8749-310C0FBE3C3E};clsid:HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{DCFCC2EC-3F33-45A8-8ADF-A6C81F11232F};file:C:\Program Files (x86)\Torrent Search\emYdFg1.exe;file:C:\Program Files (x86)\Torrent Search\IEEF\0HpBDfsazwtr.dll;file:C:\Program Files (x86)\Torrent Search\IEEF\38w9icVLckkY.dll;file:C:\Pro Detection Type:Concrete Detection Source:Real-Time Protection Status:Unknown Process Name: Date: 2016-04-29 15:21:16.728 Description: Windows Defender has detected spyware or other potentially unwanted software. For more information please see the following: http://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/Neobar&threatid=225451 Name:BrowserModifier:Win32/Neobar ID:225451 Severity:High Category:Browser Modifier Path Found:file:C:\Program Files (x86)\Torrent Search\IEEF\INFoanSeSFZQ.exe;process:pid:4080 Detection Type:Concrete Detection Source:Real-Time Protection Status:Unknown Process Name: CodeIntegrity: =================================== Date: 2018-06-02 20:21:01.814 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\gpapi.dll because the set of per-page image hashes could not be found on the system. Date: 2018-06-02 20:21:01.671 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\gpapi.dll because the set of per-page image hashes could not be found on the system. Date: 2018-06-02 20:21:01.382 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\FWPUCLNT.DLL because the set of per-page image hashes could not be found on the system. Date: 2018-06-02 20:21:01.197 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\NapiNSP.dll because the set of per-page image hashes could not be found on the system. Date: 2018-06-02 20:21:01.058 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\nlaapi.dll because the set of per-page image hashes could not be found on the system. Date: 2018-05-31 12:01:08.178 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\gpapi.dll because the set of per-page image hashes could not be found on the system. Date: 2018-05-31 12:01:08.020 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\gpapi.dll because the set of per-page image hashes could not be found on the system. Date: 2018-05-31 12:01:07.777 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\FWPUCLNT.DLL because the set of per-page image hashes could not be found on the system. ==================== Memory info =========================== Processor: AMD FX(tm)-6300 Six-Core Processor Percentage of memory in use: 43% Total physical RAM: 8140.05 MB Available physical RAM: 4596.93 MB Total Virtual: 16278.29 MB Available Virtual: 12590.84 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:931.41 GB) (Free:96.73 GB) NTFS Drive d: (Sims2) (CDROM) (Total:2.73 GB) (Free:0 GB) UDF \\?\Volume{4da46f5e-6ce2-11e4-ab46-806e6f6e6963}\ () (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 79997AC5) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================