Hi,
Every time Premium MB runs it finds multiple instances of PUP.Optional.Conduit. I quarantine them, however they are found every single day without fail, sometimes multiple times each day.
I have ran FRST scan & the results are:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 08-07-2020 01
Ran by CHOPPER (administrator) on OFFICE-PC-01 (MSI MS-7816) (08-07-2020 19:58:52)
Running from C:\Users\CHOPPER\OneDrive\OneDrive - Andrew Reid & Partners\Data\Maleware Bytes
Loaded Profiles: CHOPPER
Platform: Windows 10 Pro Version 1909 18363.900 (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Inc. -> Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AcroCEF\AcroCEF.exe <2>
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Systems Incorporated) C:\Program Files\WindowsApps\AcrobatNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe
(Adobe Systems Incorporated) C:\Program Files\WindowsApps\AdobeNotificationClient_1.0.1.22_x86__enpm4xejd91yc\AdobeNotificationClient.exe
(Amazon.com Services LLC -> Amazon.com Services LLC) C:\Users\CHOPPER\AppData\Local\Amazon Music\Amazon Music Helper.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Box, Inc. -> Box, Inc.) C:\Users\CHOPPER\AppData\Local\Box\Box Edit\Box Edit.exe
(Box, Inc. -> Box, Inc.) C:\Users\CHOPPER\AppData\Local\Box\Box Local Com Server\Box Local Com Service.exe
(devolo AG -> devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
(Fitbit, Inc. -> Fitbit, Inc.) [File not signed] C:\Program Files (x86)\Fitbit Connect\FitbitConnectService.exe
(Golden Frog, GmbH.) [File not signed] C:\Program Files (x86)\VyprVPN\VyprVPNService.exe
(Google Inc -> Google Inc.) C:\Users\CHOPPER\AppData\Local\Google\Update\GoogleUpdate.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <48>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe
(Google LLC -> Google LLC) C:\Users\CHOPPER\AppData\Local\Google\Update\1.3.35.452\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Users\CHOPPER\AppData\Local\Google\Update\1.3.35.452\GoogleCrashHandler64.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(Intel(R) Software -> Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\PowerToys\modules\launcher\PowerLauncher.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\PowerToys\PowerToys.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe <2>
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.2005.1675.0_x64__8wekyb3d8bbwe\Time.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2005.23.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.320.6242.0_x64__8wekyb3d8bbwe\GameBar.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\fodhelper.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\hvsimgr.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\hvsirdpclient.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\hvsirpcd.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.18362.892_none_5efe5b5a590f76dc\TiWorker.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\System32\vmwp.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\MSI\MSIRegister\MSIRegisterService.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\Live Update.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO.,LTD.) C:\Program Files (x86)\MSI\Fast Boot\FastBoot.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe <2>
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(RayShare Co.,Ltd -> ) C:\Program Files (x86)\Aiseesoft Studio\FoneLab\AppService.exe
(Realtek Semiconductor) [File not signed] C:\Program Files (x86)\MSI\NetworkGenie\NetworkGenie.exe
(Safer Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\RAPID\CacheFilter\SamsungRapidApp.exe
(Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Windows\System32\RAPID\SamsungRapidSvc.exe
(Telegram FZ-LLC -> Telegram FZ-LLC) C:\Users\CHOPPER\AppData\Roaming\Telegram Desktop\Telegram.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SamsungRapidApp] => C:\Program Files (x86)\Samsung\RAPID\CacheFilter\SamsungRapidApp.exe [281776 2014-09-16] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1096480 2013-11-29] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3325520 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [IntelliPoint] => C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2417032 2011-08-01] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [302392 2020-05-20] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [296216 2015-03-24] (Intel Corporation - Software and Firmware Products -> Intel Corporation)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2042424 2020-03-16] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [5641776 2020-05-04] (Adobe Inc. -> Adobe Systems Inc.)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe [1178400 2015-07-10] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation)
HKLM-x32\...\Run: [Command Center] => C:\Program Files (x86)\MSI\Command Center\StartCommandCenter.exe [835680 2016-06-14] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
HKLM-x32\...\Run: [Super Charger] => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [1028280 2017-11-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
HKLM-x32\...\Run: [Fast Boot] => C:\Program Files (x86)\MSI\Fast Boot\StartFastBoot.exe [759120 2015-04-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
HKLM-x32\...\Run: [Live Update] => C:\Program Files (x86)\MSI\Live Update\Live Update.exe [26310800 2020-05-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
HKLM-x32\...\Run: [MSIRegister] => C:\MSI\MSIRegister\MSIRegister.exe [1266872 2019-03-08] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [FoneLabAppService] => C:\Program Files (x86)\Aiseesoft Studio\FoneLab\AppService.exe [83920 2020-03-03] (RayShare Co.,Ltd -> )
HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\Run: [Google Update] => C:\Users\CHOPPER\AppData\Local\Google\Update\1.3.35.452\GoogleUpdateCore.exe [217544 2020-03-21] (Google LLC -> Google LLC)
HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2020-05-07] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [5417008 2020-05-04] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\Run: [CCXProcess] => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [648328 2020-03-09] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [29072568 2020-05-22] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2020-05-07] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\Run: [Amazon Music Helper] => C:\Users\CHOPPER\AppData\Local\Amazon Music\Amazon Music Helper.exe [2107848 2020-05-23] (Amazon.com Services LLC -> Amazon.com Services LLC)
HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\Run: [Amazon Music] => C:\Users\CHOPPER\AppData\Local\Amazon Music\Amazon Music.exe [20373448 2020-05-23] (Amazon.com Services LLC -> Amazon.com Services LLC)
HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\Run: [Box Local Com Server] => C:\Users\CHOPPER\AppData\Local\Box\Box Local Com Server\Box Local Com Service.exe [86096 2020-06-01] (Box, Inc. -> Box, Inc.)
HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\Run: [Box Edit] => C:\Users\CHOPPER\AppData\Local\Box\Box Edit\Box Edit.exe [211536 2020-06-01] (Box, Inc. -> Box, Inc.)
HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\Policies\Explorer: []
HKLM\...\Windows x64\Print Processors\hpzppw72: C:\Windows\System32\spool\prtprocs\x64\hpzppw72.dll [257024 2009-07-14] (Hewlett-Packard Corporation) [File not signed]
HKLM\...\Windows x64\Print Processors\LMADKQ4C: C:\Windows\System32\spool\prtprocs\x64\LMADKQ4C.DLL [230912 2012-09-19] (Microsoft Windows Hardware Compatibility Publisher -> Lexmark International Inc.)
HKLM\...\Windows x64\Print Processors\LMFX1N4C: C:\Windows\System32\spool\prtprocs\x64\LMFX1N4C.DLL [230912 2012-08-23] (Microsoft Windows Hardware Compatibility Publisher -> Lexmark International Inc.)
HKLM\...\Windows x64\Print Processors\ssa3mPC: C:\Windows\System32\spool\prtprocs\x64\ssa3mpc.dll [41984 2013-07-26] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Codename Longhorn DDK provider)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\WINDOWS\system32\AdobePDF.dll [65488 2020-03-05] (Adobe Inc. -> Adobe Systems Inc)
HKLM\...\Print\Monitors\LM_LMADKQ: C:\WINDOWS\system32\LMADKQLANG.DLL [2945024 2012-09-06] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\...\Print\Monitors\LM_LMFX1N: C:\WINDOWS\system32\LMFX1NLANG.DLL [2887680 2012-08-13] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\...\Print\Monitors\PCL hpz3lw72: C:\WINDOWS\system32\hpz3lw72.dll [46080 2009-07-14] (Hewlett-Packard Corporation) [File not signed]
HKLM\...\Print\Monitors\pdfcmon: C:\WINDOWS\system32\pdfcmon.dll [110264 2014-04-25] (pdfforge GmbH -> pdfforge GmbH)
HKLM\...\Print\Monitors\ssa3m Langmon: C:\WINDOWS\system32\ssa3mlm.dll [34304 2013-07-26] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.116\Installer\chrmstp.exe [2020-06-23] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => No File
Startup: C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Telegram.lnk [2020-04-03]
ShortcutTarget: Telegram.lnk -> C:\Users\CHOPPER\AppData\Roaming\Telegram Desktop\Telegram.exe (Telegram FZ-LLC -> Telegram FZ-LLC)
GroupPolicy: Restriction ? <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0406C10E-7704-4605-94CC-D04B4D1127B3} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1779790193-764520171-1829944638-1000Core => C:\Users\CHOPPER\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-09-08] (Google Inc -> Google Inc.)
Task: {045B8EF3-E698-4075-AD47-C36AD9B6FCBB} - System32\Tasks\{24FB38E1-703A-4414-9EA4-3364A3109FB5} => C:\Users\CHOPPER\Desktop\Applications\x-exe\492320324.exe
Task: {065CCB36-7F02-4FD7-8BA2-EA8D117B3F61} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {082BDBE8-0BD3-49B0-965C-18099365B813} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {09671D8F-EE93-42E1-9159-DF52770EB104} - System32\Tasks\{4404516C-94B7-425E-9533-14E7EBA95A6E} => C:\Windows\system32\pcalua.exe -a D:\Data\vc2010redist_x86.exe -d D:\Data
Task: {0A563591-197F-4975-B6CD-73F4298E8D8E} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe [4838816 2014-09-28] (Samsung Electronics Co., Ltd. -> Samsung Electronics.)
Task: {0B61E682-A87C-4046-84B0-7564140E5303} - System32\Tasks\{8775D614-D8B7-4003-88B0-34C149AEF072} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=7.11.0.102&LastError=404
Task: {0D0EE04D-FFBB-4E69-96FD-337F17E7B238} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1779790193-764520171-1829944638-1000UA => C:\Users\CHOPPER\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-09-08] (Google Inc -> Google Inc.)
Task: {0DC59744-6707-40B8-9C18-5AF81B549E54} - System32\Tasks\{D319B447-2B29-4937-A4C3-DB85823DB306} => C:\Windows\system32\pcalua.exe -a "G:\From Old PC Drive\My Documents\mw9791enu.exe" -d "G:\From Old PC Drive\My Documents"
Task: {13EE32D1-485E-4A23-B79D-6E8F11959437} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [67896 2020-05-07] (Apple Inc. -> Apple Inc.)
Task: {13F52768-8236-44F0-A05D-2DB8BCDE1118} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {15655BEF-E972-4D74-9286-89D082E6A887} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2167696 2020-06-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {166FBB5C-EE52-4F00-B778-7073AA079965} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [3907304 2013-09-20] (Safer Networking Ltd. -> Safer-Networking Ltd.)
Task: {16F8794B-A3EB-4967-9B20-9EA41FC531DF} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)
Task: {1B9958D6-23B1-4F80-AC46-F21636ACBF47} - System32\Tasks\{0F912A31-9558-4A42-AA29-D399C56FF76F} => C:\Windows\system32\pcalua.exe -a L:\SomVer.exe -d L:\
Task: {1FE41246-ED0D-4F22-A245-605B94D6698F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-09] (Adobe Inc. -> Adobe)
Task: {22527D0E-AFAE-465A-A50F-D9F71B44F84E} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2341458D-403A-4CFA-8249-2447C731FDB0} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {2A330369-FBFE-4D62-8568-F0F559F8864C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2CDD07C5-A4CC-40EC-9694-B4FA9FEDA6B1} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27369344 2020-06-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {2D2F7AFD-5A2D-455B-B7C5-18505E79CBAB} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2F4A0154-1EF6-4971-83A7-276990E33A7D} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {325E9186-7C91-4AC9-AA88-3D1FB9DC0DF3} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {32B539F1-AF79-4B0C-AF93-2CD18757792A} - System32\Tasks\ParetoLogic Update Version3 => C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe [1987216 2013-06-18] (Paretologic Inc. -> ) <==== ATTENTION
Task: {3351D9B8-DBF8-41DA-A6E4-9C9BAB0EBAC9} - System32\Tasks\{F605FAA3-E886-423A-9F2F-FAFB9A197DEB} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.18.0.112/en/go/help.faq.installer?source=lightinstaller&LastError=1603
Task: {336D81CD-B6B0-4CB8-A897-DD12995DA726} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [3633312 2013-09-20] (Safer Networking Ltd. -> Safer-Networking Ltd.)
Task: {3E80F20F-4B6A-41B0-B381-5367E47A90CE} - System32\Tasks\Microsoft_Hardware_Launch_rundll32_exe => rundll32.exe url.dll,OpenURL hxxp://go.microsoft.com/fwlink/?LinkID=230628
Task: {3EB5D36A-673F-4AB4-B78C-587036EA4580} - System32\Tasks\ParetoLogic Update Version3 Startup Task => C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe [1987216 2013-06-18] (Paretologic Inc. -> ) <==== ATTENTION
Task: {40A121E2-B6EF-4562-B06E-DB3E8356CCA9} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4f47-879B-29A80C355D61}
Task: {44B2C3FE-4180-40D7-BC6C-2EBCA55DF8E7} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {461FFC86-D285-4DA8-B652-83B19CC905B2} - System32\Tasks\{10177C89-09A9-4A1A-B857-17205F536EA4} => D:\Data\The Day You Were Born\YEAR.EXE
Task: {467038AF-59FE-42C8-B6BF-363F46280721} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2349952 2020-06-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47c2-B62A-B7C4CED925CB}
Task: {4A11ADC5-F985-47D9-A71C-C8E6F7681D3A} - System32\Tasks\G2MUpdateTask-S-1-5-21-1779790193-764520171-1829944638-1000 => C:\Users\CHOPPER\AppData\Local\GoToMeeting\17359\g2mupdate.exe [32256 2020-04-08] (LogMeIn, Inc. -> LogMeIn, Inc.)
Task: {4D83D0EC-CE58-45F6-86D6-9CBC4B4880D6} - System32\Tasks\{AB86353D-F26D-4558-B753-9572C7DD6301} => D:\setup.exe
Task: {4D91782C-01A5-4F7D-B452-379A9C164034} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {5223A3AF-6375-4997-89B6-C417917566E8} - System32\Tasks\{4A6C1254-B0F7-4A72-9B67-1A8AC318B9FF} => D:\setup.exe
Task: {56209EDB-386A-484D-B109-654FB35011D8} - System32\Tasks\{40516DC4-87EF-4223-B256-2FC10811BE4B} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.18.0.112/en/go/help.faq.installer?source=lightinstaller&LastError=1603
Task: {5649200D-7DA8-4020-A620-DBCFEE2C4865} - System32\Tasks\{6C69D214-6C15-4AA1-8FD2-71B3D98A6CA7} => D:\setup.exe
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {5B4D3304-C990-4C40-A193-66EB5A32C49E} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5CB3A4B7-7936-4C2F-96F9-1E1FCB818D89} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2417032 2011-08-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {5DBA43E3-0154-4EDC-AD1D-224F724E7E56} - System32\Tasks\{874B1732-7B49-4F01-A058-7679835879B5} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.8.64.102/en/go/help.faq.installer?LastError=1603
Task: {5F8B2F00-6672-4931-8D7C-5F027D9C1D7D} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [149840 2020-06-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {5F8D0ECA-5F16-410E-A047-F06B39214522} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\MpCmdRun.exe
Task: {60B16F80-1677-4D7C-BAB9-C1EDBE372C89} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)
Task: {61C512D3-D3B7-4F93-80EF-0770DBFC7A24} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [3885120 2013-09-20] (Safer Networking Ltd. -> Safer-Networking Ltd.)
Task: {627E356A-2F7D-432A-B285-151836DC581D} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1779790193-764520171-1829944638-1000 => C:\Users\CHOPPER\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task: {63D82BF0-DA8C-453F-B250-5B51685AC192} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [24690360 2020-05-22] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {65BC7F99-FD46-4668-AB4B-E63A3981CEAB} - System32\Tasks\{7B24ECC2-379A-4AF6-8994-C42D13D85527} => C:\Users\CHOPPER\Desktop\Applications\x-exe\555776744.exe
Task: {66AC6021-7E33-4964-B2B2-58B6109BA6A0} - System32\Tasks\PowerToys\Autorun for CHOPPER => C:\Program Files\PowerToys\PowerToys.exe [896392 2020-06-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {69057D1F-15D1-46ED-88F5-A9813F8CFF79} - \ParetoLogic Registration3 -> No File <==== ATTENTION
Task: {69DE61E3-E8AD-42B3-ADBC-DCC908F645B4} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {6D4AB21B-9EFB-437B-B9A9-2CCAB40D04F9} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)
Task: {6FD90F95-7A2F-46F6-A9A8-8C3A5340CB1B} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {70DB35D8-1117-4922-A134-C13A07B9244B} - System32\Tasks\{90912DC9-58AC-4022-B7F2-2D86BFEC77F7} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.18.0.109/en/go/help.faq.installer?LastError=1603
Task: {70EE63A5-A848-4496-B055-04376C6F9D1A} - System32\Tasks\RtlNetworkGenieVistaStart => C:\Program Files (x86)\MSI\NetworkGenie\NetworkGenie.exe [2035712 2014-04-23] (Realtek Semiconductor) [File not signed]
Task: {73872D82-062E-414F-B253-D538F2EBFD04} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {7AEF96BA-82D1-4BF1-86FA-9F2D3CB6A702} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {80BBD714-5598-4191-BE00-7475FF629995} - System32\Tasks\{041F44A1-4C96-4E29-9D09-B2FC77DC9928} => D:\setup.exe
Task: {86013081-8B5D-474E-B2F2-7E88DDD2D31D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616832 2019-09-04] (Apple Inc. -> Apple Inc.)
Task: {87260B86-FC0E-4BD7-8759-1E24884F97DA} - System32\Tasks\{D01976BA-F1CF-417F-89B2-2CD75DD7A4F5} => D:\Data\The Day You Were Born\YEAR.EXE
Task: {8CCFF016-F8E2-4787-B2BD-ADA6886F7AD9} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27369344 2020-06-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {8CF891F0-3B23-4CB1-BB4B-8904F3C7FCC1} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe
Task: {8E504334-1FE3-435B-B665-66EFF0263146} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {90AF1215-D329-4186-8081-AA6AD9AA3D5D} - System32\Tasks\{B6FE1A84-B28A-45E8-B1D4-C31B293BE22D} => C:\Windows\system32\pcalua.exe -a C:\Users\CHOPPER\AppData\Local\Temp\jre-8u65-windows-au.exe -d C:\Windows\SysWOW64 -c /installmethod=jau FAMILYUPGRADE=1 <==== ATTENTION
Task: {926AF912-104C-43ED-AE06-C546AAA4E3FF} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43da-BFD7-FBEEA2180A1E}
Task: {928C1172-3E14-4E04-A6D4-362FD0921357} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {95C0F4C8-0970-4804-979F-8A74DE90A3BC} - System32\Tasks\{52A9175A-3AFD-4DB8-9BA2-507D1A77C3E5} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=5.5.0.124.259&LastError=404
Task: {996B3F04-2C4C-4B32-8D5D-8F5EA074F803} - System32\Tasks\{44026E1B-631D-49B6-ABC0-69FF387A5A06} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.11.0.102/en/go/help.faq.installer?source=lightinstaller&LastError=1603
Task: {999C1DD1-9A80-48C2-82D6-FAA6CC24ECAC} - System32\Tasks\Microsoft_Hardware_Launch_IType_exe => C:\Program Files\Microsoft IntelliType Pro\IType.exe
Task: {9D2AA802-C841-48FB-8058-1FFE3DEBCBBB} - System32\Tasks\{AE65714E-4985-4B66-81F8-83D514FE7221} => C:\Windows\system32\pcalua.exe -a "C:\Users\CHOPPER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\15NX20YF\startuplite-setup-1.07.exe" -d C:\Users\CHOPPER\Desktop
Task: {9E803F0C-85B2-4FF8-9553-C4A8F0F39A10} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDfE067B1}
Task: {9E8F4407-8C9B-494B-AC82-CF677CB270CD} - System32\Tasks\Intel\Intel Telemetry 2 (x86) => C:\Program Files (x86)\Intel\Telemetry 2.0\lrio.exe [1328392 2015-11-20] (Intel(R) Software -> Intel Corporation)
Task: {9EB2BD7C-0611-43AA-8DA6-4F9181E737E8} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6291352 2020-06-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {A06D182D-C63D-4283-AAF1-65D2FB0557D3} - System32\Tasks\{3E149F60-1780-4460-80A4-AEDF38F7B419} => D:\setup.exe
Task: {A0B4DDF9-DD03-4358-8360-14A3E92DB2E8} - System32\Tasks\{4A325657-AF79-42BB-AE82-FCC1EA35FB68} => C:\Windows\system32\pcalua.exe -a D:\Quake3\Setup.exe -d D:\Quake3
Task: {A22A79FA-F9F3-4FDF-A84C-050F7050112C} - System32\Tasks\{67C9D5F2-C851-4294-B0B1-9C796DE4680C} => C:\Users\CHOPPER\Desktop\Applications\x-exe\555776744.exe
Task: {A4B05B63-D491-4AEA-82D6-B5257E0AB7C9} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [149840 2020-06-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {A6FABEAB-346F-4A2A-AB16-602F4A90D7A9} - System32\Tasks\{00A759C0-E826-4E67-B854-9767F6F67DB4} => L:\setup.exe
Task: {A7221682-6703-4DCE-A05F-DA9D70F66DDE} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A79844B3-8B7F-43EE-806D-BDD349E7E925} - System32\Tasks\{2F81DA69-A9A5-4344-8806-B010310EAC85} => D:\Data\The Day You Were Born\YEAR.EXE
Task: {AE07928C-AD2F-4BA8-8CFB-DC0EB962014F} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40b4-8963-D3C761B18371}
Task: {B0EF2333-AFB2-42B9-A081-24A66CF68FA5} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3325520 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {B444E73A-54C8-4A61-B10D-CFA848533153} - System32\Tasks\{A7EAF1CC-7F3D-4598-B660-CC509C5F54D4} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\NICEIC\The NICEIC Technical Manual\niceic.exe" -d L:\web\setup
Task: {B549CCCA-FDCA-41DC-90B2-3BBC949D3E48} - System32\Tasks\{5EC1320B-FE7A-428A-9EFB-5B51401731E8} => C:\Windows\system32\pcalua.exe -a C:\Users\CHOPPER\AppData\Local\Temp\Temp1_ENG_FP28495_Zeppelin_Firmware_Win.zip\SetupZeppelinProgrammer_2_1.exe <==== ATTENTION
Task: {BC8B6506-FBCC-4B1E-BE2E-9E8B38CECB63} - System32\Tasks\{864FF03A-23F7-42BA-B58D-A835D8C5D232} => L:\setup.exe
Task: {BFC2A5C2-5C78-43B2-B518-3FDB5CED54C3} - System32\Tasks\{C59C591B-11A2-46C4-91F3-85C5487B652E} => C:\Windows\system32\pcalua.exe -a C:\Users\CHOPPER\Downloads\f5d8051v2_ww_2.02.04(1).exe -d C:\Users\CHOPPER\Downloads
Task: {C076979B-99B5-4F66-AA7F-4E81D5FE2830} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-05-22] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {C1369B03-5B74-440B-AE34-1D3BB3261DBF} - System32\Tasks\LexmarkPUDCTask => C:\Program Files\Lexmark\ProductUpdate\LMprodupdate.exe [838832 2012-09-11] (Lexmark International, Inc. -> )
Task: {C2F88E79-0220-46CE-B5CE-03635574EC9C} - System32\Tasks\{C082C7BC-E1BD-43CF-BB43-DD3081719560} => L:\setup.exe
Task: {C87E6B70-4DE4-4BA9-8CFE-45747EC8F63C} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {C9AE94B0-8D55-405C-9723-4ACDC8381B3B} - System32\Tasks\{6FD49DA1-4909-4041-8DED-8E9DB69E94BC} => C:\Users\CHOPPER\Desktop\Applications\x-exe\492320324.exe
Task: {CE4BCE04-E80A-4FEB-8036-4148591A55F9} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D0FE2AA2-4D20-4AFF-A139-948F9AC88579} - System32\Tasks\{5D5CF29E-2609-4E0F-874E-206D34724B71} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.18.0.112/en/go/help.faq.installer?source=lightinstaller&LastError=1603
Task: {D3354280-3352-437C-AD60-2B35F9094E7F} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {D8D01679-6A7D-4513-98E7-2FE52FFBBFF5} - System32\Tasks\{DB3FB1EF-67D2-4290-A18C-FCC30A2C675A} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\KaZaA Lite\unins000.exe"
Task: {E2F91F6C-0D15-4462-BCAA-2447B210F006} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E74EAEDD-A48E-4523-BC6C-9F931D50145E} - System32\Tasks\{CB9FAD53-8A73-44C7-8F30-FD73F5BC598A} => C:\Windows\system32\pcalua.exe -a "E:\Data\Philips webcam spc900nc_00_dw7_eng.exe" -d E:\Data
Task: {ED727AD0-3689-43B2-9204-32784BA6C3C2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {F09D3375-17A6-462B-AEEE-D2297E42F799} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {F5A50968-8124-4315-A235-895DFF7408B7} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_387_Plugin.exe [1459256 2020-06-09] (Adobe Inc. -> Adobe)
Task: {F62435F0-8C1C-4608-9ED8-6F603E6D12F5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6291352 2020-06-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {FBC72C49-DBD3-4B59-808D-9CC2213B872F} - System32\Tasks\G2MUploadTask-S-1-5-21-1779790193-764520171-1829944638-1000 => C:\Users\CHOPPER\AppData\Local\GoToMeeting\17359\g2mupload.exe [32256 2020-04-08] (LogMeIn, Inc. -> LogMeIn, Inc.)
Task: {FCEBB87D-F589-4FDF-861F-AFABA9589167} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FF4623E5-2284-4661-941C-EBF884EE0588} - System32\Tasks\{BF49E41A-5847-4E36-B5B8-7DE9A3E4FB35} => D:\setup.exe
Task: {FF90C348-F2D0-4BC3-8D20-FC9C3D3F9154} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2167696 2020-06-14] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-1779790193-764520171-1829944638-1000.job => C:\Users\CHOPPER\AppData\Local\GoToMeeting\18068\g2mupdate.exe
Task: C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-1779790193-764520171-1829944638-1000.job => C:\Users\CHOPPER\AppData\Local\GoToMeeting\18068\g2mupload.exe
Task: C:\WINDOWS\Tasks\ParetoLogic Update Version3 Startup Task.job => C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\ParetoLogic Update Version3.job => C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\RtlNetworkGenieVistaStart.job => C:\Program Files (x86)\MSI\NetworkGenie\NetworkGenie.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
ProxyServer: [S-1-5-21-1779790193-764520171-1829944638-1000] => localhost:21320
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 194.168.4.100 194.168.8.100
Tcpip\..\Interfaces\{2ea36367-ca07-4baa-a631-57e157dc96fe}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{2F3E7A45-E7D8-4AAF-81E5-052C4C82C419}: [DhcpNameServer] 194.168.4.100 194.168.8.100
Tcpip\..\Interfaces\{d9b22ff9-5741-4664-b574-ebe645ff4113}: [DhcpNameServer] 10.2.2.1
Internet Explorer:
==================
HKU\S-1-5-21-1779790193-764520171-1829944638-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
SearchScopes: HKLM -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM-x32 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-1779790193-764520171-1829944638-1000 -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-1779790193-764520171-1829944638-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2020-03-09] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_71\bin\ssv.dll [2016-01-21] (Oracle America, Inc. -> Oracle Corporation)
BHO: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2014-04-11] (LastPass -> LastPass)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-05-30] (Google Inc -> Google Inc.)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2020-03-05] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_71\bin\jp2ssv.dll [2016-01-21] (Oracle America, Inc. -> Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2020-03-05] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2020-03-09] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\ssv.dll [2016-01-21] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar.dll [2014-04-11] (LastPass -> LastPass)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-05-30] (Google Inc -> Google Inc.)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2020-03-05] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\jp2ssv.dll [2016-01-21] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2020-03-05] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2014-04-11] (LastPass -> LastPass)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-05-30] (Google Inc -> Google Inc.)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2020-03-05] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll [2014-04-11] (LastPass -> LastPass)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-05-30] (Google Inc -> Google Inc.)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2020-03-05] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-1779790193-764520171-1829944638-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-05-30] (Google Inc -> Google Inc.)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-03-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-03-09] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-03-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-03-09] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2019-06-12] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-03-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-03-09] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-03-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-03-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2017-04-05] (Skype Software Sarl -> Skype Technologies)
Edge:
======
Edge DefaultProfile: Default
Edge Profile: C:\Users\CHOPPER\AppData\Local\Microsoft\Edge\User Data\Default [2020-06-27]
Edge HomePage: Default -> hxxp://www.msn.com/?pc=MSSE
Edge Profile: C:\Users\CHOPPER\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2020-06-11]
FireFox:
========
FF ProfilePath: C:\Users\CHOPPER\AppData\Roaming\Mozilla\Firefox\Profiles\kbw4zd8v.default-1493677265404 [2020-07-08]
FF Extension: (IBM Security Rapport) - C:\Users\CHOPPER\AppData\Roaming\Mozilla\Firefox\Profiles\kbw4zd8v.default-1493677265404\Extensions\rapportext@trusteer.com.xpi [2020-03-22] [UpdateUrl:hxxps://clients2.google.com/service/update2/crx]
FF Extension: (Skype Click to Call) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2017-05-03] [Legacy] [not signed]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2020-03-05]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_387.dll [2020-06-09] (Adobe Inc. -> )
FF Plugin: @java.com/DTPlugin,version=11.71.2 -> C:\Program Files\Java\jre1.8.0_71\bin\dtplugin\npDeployJava1.dll [2016-01-21] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.71.2 -> C:\Program Files\Java\jre1.8.0_71\bin\plugin2\npjp2.dll [2016-01-21] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll [2014-04-11] (LastPass -> LastPass)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-03-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2020-03-16] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_387.dll [2020-06-09] (Adobe Inc. -> )
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google Inc -> Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.71.2 -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\dtplugin\npDeployJava1.dll [2016-01-21] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.71.2 -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\plugin2\npjp2.dll [2016-01-21] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass.dll [2014-04-11] (LastPass -> LastPass)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2020-03-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2020-03-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> C:\Program Files (x86)\Winamp Detect\npwachk.dll [2013-07-23] (Nullsoft, Inc.) [File not signed]
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-05-29] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2020-05-04] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-05-04] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2020-03-16] (Adobe Inc. -> Adobe Systems)
FF Plugin HKU\S-1-5-21-1779790193-764520171-1829944638-1000: SkypeForBusinessPlugin-16.2 -> C:\Users\CHOPPER\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.485\npGatewayNpapi.dll [2019-03-26] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-1779790193-764520171-1829944638-1000: SkypeForBusinessPlugin64-16.2 -> C:\Users\CHOPPER\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.485\npGatewayNpapi-x64.dll [2019-03-26] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default [2020-07-08]
CHR Notifications: Default -> hxxp://192.168.178.85; hxxp://www.toytowngermany.com; hxxps://adoddleak.asite.com; hxxps://calendar.google.com; hxxps://drdemartini.com; hxxps://drive.google.com; hxxps://eep.pushengage.com; hxxps://electrical-engineering-portal.com; hxxps://expertise.tv; hxxps://mail.google.com; hxxps://play.google.com; hxxps://plus.google.com; hxxps://progressiveproperty.pushassist.com; hxxps://push.tiendeo.com; hxxps://twitter.com; hxxps://web.skype.com; hxxps://web.whatsapp.com; hxxps://www.entertainmentbox.com; hxxps://www.thesun.co.uk; hxxps://www.totaljobs.com; hxxps://www.tradingview.com; hxxps://www.youtube.com
CHR StartupUrls: Default -> "hxxps://mail.google.com/mail/ca/u/0/#inbox","hxxps://www.facebook.com/groups/300584140402891","hxxps://portal.therealistictrader.com/?inf_contact_key=20b0e085fa5de636e43c49fb985e766d146437019ad6b4861df238230f9c1069","hxxps://pro.coinbase.com/trade/BTC-EUR","hxxps://www.telegraph.co.uk/#source=refresh","hxxps://www.bbc.co.uk/news/business","hxxps://duckduckgo.com/"
CHR Extension: (Google Translate) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2020-03-19]
CHR Extension: (Property Tracker) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\abgkpdjomdmemeefdefalbeogkmlmand [2020-06-22]
CHR Extension: (Entanglement Web App) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aciahcmjmecflokailenpkdchphgkefd [2015-11-24]
CHR Extension: (Learn German with Yabla) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\acmjefkljncffhgiknomdbmohhkkoobc [2015-07-26]
CHR Extension: (Learn German - Wie Geht's) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aglfgpioobpcmdheljepehachdjeopad [2015-07-26]
CHR Extension: (Docs) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-15]
CHR Extension: (Google Drive) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-07-02]
CHR Extension: (Language Immersion for Chrome) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\bedbecnakfcpmkpddjfnfihogkaggkhl [2015-11-24]
CHR Extension: (Ledger Manager) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\beimhnaefocolcplfimocfiaiefpkgbf [2018-08-09]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-11-24]
CHR Extension: (DuckDuckGo) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkdgflcldnnnapblkhphbgpggdiikppg [2020-07-08]
CHR Extension: (Add to Amazon Wish List) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciagpekplgpbepdgggflgmahnjgiaced [2016-06-06]
CHR Extension: (Google Tips) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnhacgcmhcgppboemgoobibkhlpglejb [2015-11-24]
CHR Extension: (20 Things I Learned About Browsers & the Web) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfdlnlenokgjjchimonbekcmnofmlibg [2015-11-24]
CHR Extension: (Lingvo TV) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgeiagkojabjccafojhokcceakmehpbb [2019-04-13]
CHR Extension: (Chrome Connectivity Diagnostics) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\eemlkeanncmjljgehlbplemhmdmalhdc [2016-01-14]
CHR Extension: (Adobe Acrobat) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-06-11]
CHR Extension: (Gmail Offline) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk [2015-11-24]
CHR Extension: (Google Calendar) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2017-01-29]
CHR Extension: (Google Play Music) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2020-04-22]
CHR Extension: (Google Finance) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcgckldmmjdbpdejkclmfnnnehhocbfp [2015-11-24]
CHR Extension: (Radioplayer UK) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcppdfelojakeahklfgkjegnpbgndoch [2017-12-18]
CHR Extension: (Sheets) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-15]
CHR Extension: (iCloud Bookmarks) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkepacicchenbjecpbpbclokcabebhah [2017-10-10]
CHR Extension: (German Spelling Dictionary) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfckdjgepohoofinlndlmgbchnkllbj [2016-01-30]
CHR Extension: (Chrome Remote Desktop) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2019-08-10]
CHR Extension: (Office Editing for Docs, Sheets & Slides) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbkeegbaiigmenfmjfclcdgdpimamgkj [2020-03-09]
CHR Extension: (Google Play Movies & TV) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdijeikdkaembjbdobgfkoidjkpbmlkd [2016-02-18]
CHR Extension: (The Economist) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gebjgjhbjedcomcajgpodjgfjgkepgpl [2015-07-26]
CHR Extension: (Google Docs Offline) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-05-27]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-07-04]
CHR Extension: (Google Calendar) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmbgaklkmjakoegficnlkhebmhkjfich [2020-06-11]
CHR Extension: (Save to Google Drive) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmbmikajjgmnabiglmofipeabaddhgne [2015-11-24]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2020-07-02]
CHR Extension: (TuneIn Radio) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhkolpgedpldcfmkgbdokgiljfbblpfj [2015-11-24]
CHR Extension: (Google Keep - Notes and Lists) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki [2020-07-02]
CHR Extension: (Clock) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\hoihofapbdnldlhecnhefifbcddgdkhm [2015-11-24]
CHR Extension: (Web Quake) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibkbfanmkmadbbgggonficloplenbefh [2016-10-28]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2020-07-02]
CHR Extension: (German Flashcards) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijecamokjmiajijbajfnlbkfknpplkdf [2015-11-24]
CHR Extension: (Voice Recognition) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikjmfindklfaonkodbnidahohdfbdhkn [2015-11-24]
CHR Extension: (Web Messenger) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\infelompnbbancffeibkenmdbbmpoged [2019-02-24]
CHR Extension: (Dropbox) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl [2018-06-01]
CHR Extension: (keevio) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\jffdpcaeodbmgppmhiniaeddolgenelm [2017-11-01]
CHR Extension: (Google Voice (by Google)) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcnhkahnjcbndmmehfkdnkjomaanaooo [2020-05-03]
CHR Extension: (Google Hangouts) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\knipolnnllmklapflnccelgolnpehhpl [2020-04-17]
CHR Extension: (QuizCards: German) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhjipgfbpbjcmndmdhjhpoeapdadfhmk [2015-07-26]
CHR Extension: (Learn German) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmacpldehdibnhlbodlgjgebflojnonb [2015-07-26]
CHR Extension: (Google Maps) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2015-11-24]
CHR Extension: (Poppit!) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbkbpnkkkipelfledbfocopglifcfmi [2015-11-24]
CHR Extension: (Google Drawings) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkaakpdehdafacodkgkpghoibnmamcme [2015-11-24]
CHR Extension: (Firing Rage - Shooting Game!) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfbnajlkodkbdljddpmcpicfddnjehhe [2015-11-24]
CHR Extension: (Genusly) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmffepbfehaggnekgkookagkcklaieji [2015-07-26]
CHR Extension: (Google I/O 2013) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmligjdignkpnaafpmjlabndeipgegcg [2015-11-24]
CHR Extension: (Chrome Web Store Payments) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-12-30]
CHR Extension: (ImTranslator: Translator, Dictionary, TTS) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\noaijdpnepcgjemiklgfkcfbkokogabh [2020-07-02]
CHR Extension: (German Dictionary) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocgecifdaddioahhhdbdblbkabanlbkc [2015-11-24]
CHR Extension: (Real-Debrid extension) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\oefkkgfcahbeccgckjgbnfclcmnjgidg [2019-08-10]
CHR Extension: (Fusion Tables (experimental)) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfoeakahkgllhkommkfeehmkfcloagkl [2015-11-24]
CHR Extension: (Inbox by Gmail) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkclgpgponpjmpfokoepglboejdobkpl [2015-11-24]
CHR Extension: (Chrome Media Router) - C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-06-03]
CHR Profile: C:\Users\CHOPPER\AppData\Local\Google\Chrome\User Data\System Profile [2020-06-11]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl]
StartMenuInternet: Google Chrome Canary.R6FI76D2USRTH6J657PBRUNN2E - C:\Users\CHOPPER\AppData\Local\Google\Chrome SxS\Application\chrome.exe
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-06-09] (Adobe Inc. -> Adobe)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [820280 2020-03-16] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3673680 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3406416 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2020-05-20] (Apple Inc. -> Apple Inc.)
S3 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\84.0.4147.39\remoting_host.exe [73200 2020-06-08] (Google LLC -> Google Inc.)
S4 CLHNServiceForPowerDVD; C:\Program Files (x86)\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe [83240 2011-08-24] (CyberLink -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11600760 2020-06-03] (Microsoft Corporation -> Microsoft Corporation)
S4 Cloud Station Drive VSS Service x64; C:\Program Files (x86)\Synology\CloudStation\bin\vss-service-x64.exe [287256 2016-12-28] (Synology Inc. -> ) [File not signed]
S4 CyberLink PowerDVD 11.0 Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe [75048 2011-09-02] (CyberLink -> CyberLink)
S4 CyberLink PowerDVD 11.0 Service; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe [292136 2011-09-02] (CyberLink -> CyberLink)
R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [6274224 2020-04-09] (devolo AG -> devolo AG)
S4 FileZilla Server; C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe [777728 2014-10-30] (FileZilla Project) [File not signed]
R2 Fitbit Connect; C:\Program Files (x86)\Fitbit Connect\FitbitConnectService.exe [5911720 2016-08-12] (Fitbit, Inc. -> Fitbit, Inc.) [File not signed]
S3 GSService; C:\Windows\SysWOW64\GSService.exe [444640 2014-07-28] (cyan soft ltd -> )
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [File not signed]
S4 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [54976 2014-03-27] (Intel Corporation - Business Client Platform Division -> Intel Corporation)
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [File not signed]
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)
S4 MacriumService; C:\Program Files\Macrium\Common\MacriumService.exe [6447328 2019-12-24] (Paramount Software UK Ltd -> Paramount Software UK Ltd)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6933272 2020-03-04] (Malwarebytes Inc -> Malwarebytes)
S3 MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\MSIClockService.exe [4163680 2016-09-09] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\MSICommService.exe [2206304 2017-01-06] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\MSICPUService.exe [4172896 2017-02-24] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 MSICTL_CC; C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe [2102880 2017-02-15] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe [2330296 2017-09-07] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 MSIREGISTER_MR; C:\MSI\MSIRegister\MSIRegisterService.exe [2020024 2019-01-03] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
S3 MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\MSISMBService.exe [2076768 2016-12-05] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe [611936 2017-02-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 MSI_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe [113336 2017-12-21] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2333328 2020-05-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [183472 2020-03-09] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-03-20] (MICRO-STAR INTERNATIONAL CO., LTD. -> MICRO-STAR INTERNATIONAL CO., LTD.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation -> NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation -> NVIDIA Corporation)
R2 SamsungRapidSvc; C:\WINDOWS\System32\RAPID\SamsungRapidSvc.exe [28848 2014-09-16] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer Networking Ltd. -> Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer Networking Ltd. -> Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer Networking Ltd. -> Safer-Networking Ltd.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5930136 2020-04-17] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 SuperRAIDSvc; C:\MSI\Smart Utilities\SuperRAIDSvc.exe [29648 2015-02-09] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
S4 SynoDrService; C:\Program Files (x86)\Synology Data Replicator 3\SynoDrServicex64.exe [384072 2013-10-09] (Synology Inc. -> )
S4 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [11458560 2019-12-04] (TeamViewer GmbH -> TeamViewer GmbH)
S4 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [248840 2016-03-18] (Synology Inc. -> ) [File not signed]
R2 VyprVPN; C:\Program Files (x86)\VyprVPN\VyprVPNService.exe [404992 2020-06-02] (Golden Frog, GmbH.) [File not signed]
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\NisSrv.exe [2484256 2020-06-04] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MsMpEng.exe [103168 2020-06-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe [19192 2016-05-04] (Intel(R) Software -> Intel(R) Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
R3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [231936 2020-01-09] (Microsoft Corporation) [File not signed]
R3 busenum; C:\WINDOWS\System32\drivers\busenum.sys [55776 2012-08-03] (Synology Inc. -> Windows (R) Win 7 DDK provider)
R3 camdrv42; C:\WINDOWS\System32\drivers\camdrv42.sys [1533952 2007-05-04] (Microsoft Windows Hardware Compatibility Publisher -> )
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153312 2020-04-21] (Malwarebytes Corporation -> Malwarebytes)
R1 FNETURPX; C:\WINDOWS\System32\drivers\FNETURPX.SYS [15936 2015-03-17] (FNet Co., Ltd. -> FNet Co., Ltd.)
R3 ikbevent; C:\WINDOWS\System32\DRIVERS\ikbevent.sys [22216 2014-05-27] (Intel CASE -> )
R3 imsevent; C:\WINDOWS\System32\DRIVERS\imsevent.sys [22728 2014-05-27] (Intel CASE -> )
R2 iocbios2; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [29264 2016-03-08] (Intel(R) Extreme Tuning Utility -> Intel Corporation)
R3 ipadtst2; C:\Program Files (x86)\MSI\Super Charger\ipadtst2_64.sys [26824 2020-02-27] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 ISCT; C:\WINDOWS\System32\drivers\ISCTD.sys [44744 2014-05-27] (Intel CASE -> )
R0 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [216056 2020-07-05] (Malwarebytes Inc -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-06-03] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [196456 2020-07-05] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [73368 2020-07-05] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-06-03] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [131728 2020-07-05] (Malwarebytes Inc -> Malwarebytes)
R1 ndisrd; C:\WINDOWS\system32\DRIVERS\ndisrd.sys [32360 2011-09-14] (Realtek Semiconductor Corp -> NT Kernel Resources)
S3 Netaapl; C:\WINDOWS\System32\drivers\netaapl64.sys [23040 2013-07-25] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
R2 NPF_devolo; C:\WINDOWS\sysWOW64\drivers\npf_devolo.sys [36496 2019-11-26] (devolo AG -> Riverbed Technology, Inc.)
R3 NTIOLib_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys [14288 2017-03-29] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 NTIOLib_MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\NTIOLib_X64.sys [13368 2012-11-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 NTIOLib_MSI_RAID; C:\MSI\Smart Utilities\NTIOLib_X64.sys [13808 2014-03-17] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation -> NVIDIA Corporation)
R0 SamsungRapidDiskFltr; C:\WINDOWS\System32\DRIVERS\SamsungRapidDiskFltr.sys [268976 2014-09-16] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R0 SamsungRapidFSFltr; C:\WINDOWS\System32\DRIVERS\SamsungRapidFSFltr.sys [111280 2014-09-16] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 SndTAudio; C:\WINDOWS\System32\drivers\SndTAudio.sys [36064 2014-07-28] (cyan soft ltd -> Windows (R) Win 7 DDK provider)
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [28160 2019-10-18] (OpenVPN Inc. -> The OpenVPN Project)
S3 tapvyprvpn; C:\WINDOWS\System32\drivers\tapvyprvpn.sys [44896 2016-10-07] (Golden Frog, GmbH -> The OpenVPN Project)
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2015-06-10] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [45960 2020-06-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [401120 2020-06-04] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [64224 2020-06-04] (Microsoft Windows -> Microsoft Corporation)
R3 XtuAcpiDriver; C:\WINDOWS\System32\drivers\XtuAcpiDriver.sys [63840 2015-07-10] (Intel(R) Software -> Intel Corporation)
R2 {329F96B6-DF1E-4328-BFDA-39EA953C1312}; C:\Program Files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [148976 2011-09-02] (CyberLink -> CyberLink Corp.)
U3 idsvc; no ImagePath
S3 ipadtst; \??\C:\Program Files (x86)\MSI\Super Charger\ipadtst_64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ===================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-07-08 19:57 - 2020-07-08 19:59 - 000000000 ____D C:\FRST
2020-07-06 02:15 - 2020-07-06 02:15 - 000853992 _____ C:\Users\CHOPPER\Desktop\a0b3e165b859fa81eeeb6fa548c05689.pdf
2020-07-03 16:07 - 2020-07-03 16:07 - 000031461 _____ C:\Users\CHOPPER\Desktop\EmployersletterCOVID.pdf
2020-07-02 20:11 - 2020-07-02 21:01 - 000000000 ____D C:\WINDOWS\system32\Tasks\PowerToys
2020-07-02 20:11 - 2020-07-02 20:11 - 000002719 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerToys (Preview).lnk
2020-07-02 20:11 - 2020-07-02 20:11 - 000000000 ____D C:\Program Files\PowerToys
2020-06-29 21:23 - 2020-06-29 21:23 - 000000165 ____H C:\Users\CHOPPER\Desktop\~$Expenses.xlsx
2020-06-29 21:22 - 2020-06-29 23:05 - 000044250 _____ C:\Users\CHOPPER\Desktop\Expenses.xlsx
2020-06-25 14:29 - 2020-06-25 15:24 - 000009934 _____ C:\Users\CHOPPER\Desktop\Malewarebytes Report.xlsx
2020-06-23 03:29 - 2020-06-23 03:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kodi
2020-06-23 03:28 - 2020-06-23 03:29 - 000000000 ____D C:\Program Files\Kodi
2020-06-16 15:44 - 2020-06-16 15:41 - 001376759 _____ C:\Users\CHOPPER\Desktop\script.kodi.windows.update-1.1.1.zip
2020-06-15 13:11 - 2020-06-15 13:11 - 000000000 ____D C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2020-06-15 04:11 - 2020-06-15 04:19 - 000000000 ____D C:\Users\CHOPPER\Desktop\Photos to Send to Mark - Ascot
2020-06-12 04:04 - 2020-06-12 04:04 - 000001189 _____ C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon Music.lnk
2020-06-12 04:04 - 2020-06-12 04:04 - 000000000 ____D C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon Music
2020-06-12 04:03 - 2020-06-12 04:04 - 000000000 ____D C:\Users\CHOPPER\AppData\Local\Amazon Music
2020-06-11 14:17 - 2020-06-11 14:17 - 000083486 _____ C:\Users\CHOPPER\Documents\cc_20200611_141713.reg
2020-06-11 14:09 - 2020-07-05 21:27 - 000216056 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2020-06-11 14:09 - 2020-07-05 21:27 - 000196456 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2020-06-11 14:09 - 2020-07-05 21:27 - 000131728 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2020-06-11 14:09 - 2020-07-05 21:27 - 000073368 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2020-06-11 03:41 - 2020-06-11 03:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Golden Frog, GmbH
2020-06-10 18:33 - 2020-06-10 18:33 - 025902080 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 019851776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 019812864 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 018029056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 011608064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 009931576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 009712640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 008015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 007911176 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 007760384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 007604592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 007268864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 007266080 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 007012864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 006526448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 006435840 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 006292480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 006091048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 006066808 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 005909504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 005765144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 005283264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 005195432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 005111808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 005004344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 004858880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 004610560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 004565248 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 004470272 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 004129416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 004012032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Service.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 003822592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 003726848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-06-10 18:33 - 2020-06-10 18:33 - 003712000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 003581240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-06-10 18:33 - 2020-06-10 18:33 - 003525608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 003515392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 003398656 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 003368104 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 003365376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 003187200 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 002831872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 002798592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2020-06-10 18:33 - 2020-06-10 18:33 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2020-06-10 18:33 - 2020-06-10 18:33 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-06-10 18:33 - 2020-06-10 18:33 - 002716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-06-10 18:33 - 2020-06-10 18:33 - 002656256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 002583496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 002494744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 002289664 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 002281472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcndmgr.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 002235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 002230240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 002204160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 002190648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 002184504 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001942528 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001919488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001803776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 001751040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001743680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001704448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcndmgr.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001683968 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001654960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001649152 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskFlowDataEngine.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001583104 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001539072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 001497400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001486336 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 001467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001447424 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 001416224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001410048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmc.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 001397560 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 001393952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001344512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMNetMgr.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001316352 _____ (Microsoft Corporation) C:\WINDOWS\system32\srmclient.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001314304 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagperf.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001284608 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001283072 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001274128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryPS.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001272160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001261568 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001260744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001250816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001215488 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 001193984 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001158144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001155944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 001153024 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowsperformancerecordercontrol.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001151824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001138688 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001112576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMNetMgr.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001100288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001099608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001077048 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 001073664 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001066496 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdosys.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001055184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001007104 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 001003832 _____ (Microsoft Corporation) C:\WINDOWS\system32\DismApi.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000994304 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000992256 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2fs.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapi3.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000940544 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srmclient.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000932256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000931840 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkObjCore.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000929280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000902456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsSandbox.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000899584 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnostics.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000897536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000894024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000893952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000892416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000892048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-06-10 18:33 - 2020-06-10 18:33 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windowsperformancerecordercontrol.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000868352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2fs.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapi3.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000832512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdosys.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000826368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000797464 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000783496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000782336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000777216 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000760296 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000747832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000740664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DismApi.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000740352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000739840 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscsvc.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000722072 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000716320 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BTAGService.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000696832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000694784 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000692224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000690176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkObjCore.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000686080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000684856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000674304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaaut.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000666624 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000651776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000648192 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\srmscan.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000632320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000628408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000619008 _____ (Microsoft Corporation) C:\WINDOWS\system32\azroles.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000614400 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\psisdecd.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000593424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msra.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000575488 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\system32\wvc.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\msTextPrediction.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000572200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000571904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaaut.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2020-06-10 18:33 - 2020-06-10 18:33 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpprefcl.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000564496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StateRepository.Core.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000561464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2020-06-10 18:33 - 2020-06-10 18:33 - 000557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000555520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-06-10 18:33 - 2020-06-10 18:33 - 000549376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000548984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000522240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000518456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000513536 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000508720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000508216 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizeng.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSCOMEX.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2020-06-10 18:33 - 2020-06-10 18:33 - 000498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\azroles.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000498176 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000484864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psisdecd.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000478208 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\SysWOW64\wvc.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedRealitySvc.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000467952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000466944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srmscan.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassdo.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000461112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000453944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000451864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-06-10 18:33 - 2020-06-10 18:33 - 000440832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprt.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\WalletService.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\termmgr.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000425056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000423424 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswmdm.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000420352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000407864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwizeng.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000405936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000398336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMM.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000398336 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000394752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000384512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000380728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000361472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\termmgr.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassdo.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000357176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswmdm.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpr.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Feedback.Analog.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000338944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpviewerax.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-06-10 18:33 - 2020-06-10 18:33 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2020-06-10 18:33 - 2020-06-10 18:33 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\RASMM.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000299832 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsif.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WlanMM.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\CXHProvisioningServer.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000291848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationVdev.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000287232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Preview.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000280376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dism.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000271360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpviewerax.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000267776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000260096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wavemsp.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000259776 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg2splt.ax
2020-06-10 18:33 - 2020-06-10 18:33 - 000255800 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvsirdpclient.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\FileHistory.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000248320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VAN.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000242688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkEd.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpRelayTransport.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\psr.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wavemsp.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000223544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Dism.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000221496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000211256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000209216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSM.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\cic.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpg2splt.ax
2020-06-10 18:33 - 2020-06-10 18:33 - 000204008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityCenterBroker.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000201528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SIUF.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000199992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmidx.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000196096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000194560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psr.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000193592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000190048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000186368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdigest.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasrecst.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprofm.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3mm.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000179512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2020-06-10 18:33 - 2020-06-10 18:33 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaatext.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000165832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000165296 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000165192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cic.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSM.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000150328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasnap.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000146944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmidx.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleprn.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000133120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasrecst.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000132424 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000130112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000129600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkStatus.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000128312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkspbrokerAx.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000127064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMM.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000121856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaatext.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000118600 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsifcore.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleprn.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000108856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasnap.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFolders.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000104248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000099712 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkspbrokerAx.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000093448 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000090952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000089344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwanRadioManager.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2020-06-10 18:33 - 2020-06-10 18:33 - 000083600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcEpMap.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasads.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2020-06-10 18:33 - 2020-06-10 18:33 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanRadioManager.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxGipRadioManager.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollCtrl.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000063288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasads.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\NfcRadioMedia.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeUISrv.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnosticsTool.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollCtrl.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000041864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityCenterBrokerPS.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\atlthunk.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlthunk.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryCore.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000028472 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsifproxystub.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000028368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SecurityCenterBrokerPS.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2020-06-10 18:33 - 2020-06-10 18:33 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DMAlertListener.ProxyStub.dll
2020-06-10 18:33 - 2020-06-10 18:33 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-06-10 18:33 - 2020-06-10 18:33 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-06-10 18:33 - 2020-06-10 18:33 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-06-10 18:33 - 2020-06-10 18:33 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-06-10 18:33 - 2020-06-10 18:33 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-06-10 18:33 - 2020-06-10 18:33 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-06-10 18:33 - 2020-06-10 18:33 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-06-10 18:33 - 2020-06-10 18:33 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-06-10 18:33 - 2020-06-10 18:33 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-06-10 18:33 - 2020-06-10 18:33 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-06-10 18:33 - 2020-06-10 18:33 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-06-10 18:33 - 2020-06-10 18:33 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-06-10 18:32 - 2020-06-10 18:32 - 000531768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2020-06-10 18:32 - 2020-06-10 18:32 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpdMtp.dll
2020-06-10 18:32 - 2020-06-10 18:32 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpdMtpUS.dll
2020-06-10 18:28 - 2020-05-15 05:29 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-06-10 18:28 - 2020-05-15 05:10 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-06-10 15:55 - 2020-06-10 15:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FXCM MetaTrader4
2020-06-10 15:55 - 2020-06-10 15:55 - 000000000 ____D C:\ProgramData\MetaQuotes
2020-06-10 15:55 - 2020-06-10 15:55 - 000000000 ____D C:\Program Files (x86)\FXCM MetaTrader4
2020-06-10 15:54 - 2020-06-10 15:55 - 000000000 ____D C:\Users\CHOPPER\AppData\Roaming\MetaQuotes
2020-06-10 02:17 - 2020-06-10 02:17 - 000001443 _____ C:\Users\CHOPPER\Desktop\CV - One Drive.lnk
2020-06-08 16:00 - 2020-06-08 16:00 - 005755538 _____ C:\Users\CHOPPER\Desktop\67-reasons-not-to-be-gay.pdf.pdf.pdf
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-07-08 19:58 - 2013-12-15 16:11 - 000000000 ____D C:\Users\CHOPPER\Documents\Outlook Files
2020-07-08 19:53 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-07-08 19:41 - 2020-04-17 19:19 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2020-07-08 19:41 - 2020-04-17 19:19 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData
2020-07-08 19:41 - 2020-04-17 04:03 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-07-08 16:52 - 2020-03-05 03:07 - 000000000 ____D C:\Users\CHOPPER\AppData\LocalLow\IGDump
2020-07-08 13:18 - 2014-06-03 22:34 - 000002575 _____ C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome Canary.lnk
2020-07-07 20:33 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-07-05 22:49 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-07-02 19:53 - 2020-04-17 04:08 - 000976896 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-07-02 19:53 - 2019-03-19 05:50 - 000000000 ____D C:\WINDOWS\INF
2020-07-02 19:48 - 2020-04-17 04:08 - 000000000 ____D C:\Users\CHOPPER
2020-07-02 19:48 - 2020-03-03 01:44 - 000000534 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2020-07-02 19:48 - 2015-12-21 14:37 - 000000000 ____D C:\Users\CHOPPER\AppData\Roaming\Telegram Desktop
2020-07-02 19:47 - 2020-05-14 23:15 - 000001134 _____ C:\WINDOWS\system32\config\VSMIDK
2020-07-02 19:47 - 2020-04-17 04:13 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-07-02 19:47 - 2017-03-12 20:58 - 000000672 _____ C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-1779790193-764520171-1829944638-1000.job
2020-07-02 19:47 - 2017-03-12 20:58 - 000000576 _____ C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-1779790193-764520171-1829944638-1000.job
2020-07-02 19:46 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2020-07-02 19:45 - 2019-08-10 18:22 - 000000000 ____D C:\Users\CHOPPER\AppData\Roaming\Recap
2020-07-02 16:48 - 2020-03-09 16:46 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-06-29 18:25 - 2015-03-09 13:35 - 000000000 ____D C:\Users\CHOPPER\AppData\Local\ElevatedDiagnostics
2020-06-28 22:46 - 2015-12-21 17:20 - 000000000 ____D C:\Users\CHOPPER\AppData\Roaming\Kodi
2020-06-28 21:03 - 2017-07-15 23:42 - 000000000 ____D C:\Users\CHOPPER\AppData\Local\GoToMeeting
2020-06-26 14:49 - 2020-04-17 04:14 - 000000000 ____D C:\Users\CHOPPER\AppData\Local\Packages
2020-06-25 21:02 - 2019-06-06 10:29 - 000000000 ____D C:\Users\CHOPPER\AppData\Roaming\Box
2020-06-25 14:30 - 2020-04-21 21:09 - 000000000 ____D C:\Users\CHOPPER\AppData\Roaming\obs-studio
2020-06-25 14:28 - 2020-04-21 21:08 - 000000000 ____D C:\Program Files\obs-studio
2020-06-25 14:11 - 2019-03-19 05:52 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2020-06-25 14:09 - 2014-12-18 01:17 - 000000000 ____D C:\Program Files\Microsoft Office
2020-06-23 01:09 - 2015-03-16 19:49 - 000002318 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-06-23 01:09 - 2013-10-12 20:28 - 000000000 ____D C:\Program Files (x86)\Google
2020-06-15 15:51 - 2015-03-23 01:27 - 000000000 ____D C:\ProgramData\Rosetta Stone
2020-06-15 13:11 - 2019-06-06 08:39 - 000000000 ____D C:\Users\CHOPPER\AppData\Roaming\Zoom
2020-06-11 17:11 - 2013-10-19 17:16 - 000000000 ____D C:\Users\CHOPPER\AppData\Roaming\vlc
2020-06-11 14:09 - 2020-04-17 04:14 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-06-11 14:09 - 2020-04-17 04:14 - 000000000 ___RD C:\Users\CHOPPER\3D Objects
2020-06-11 14:09 - 2020-04-17 04:03 - 000511312 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-06-11 03:44 - 2020-05-14 23:14 - 000000000 ____D C:\Program Files\Hyper-V
2020-06-11 03:44 - 2019-03-19 07:23 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2020-06-11 03:44 - 2019-03-19 07:23 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2020-06-11 03:44 - 2019-03-19 05:52 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2020-06-11 03:44 - 2019-03-19 05:52 - 000000000 ___SD C:\WINDOWS\system32\F12
2020-06-11 03:44 - 2019-03-19 05:52 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2020-06-11 03:44 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-06-11 03:44 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2020-06-11 03:44 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2020-06-11 03:44 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SystemResources
2020-06-11 03:44 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-06-11 03:44 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-06-11 03:44 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Com
2020-06-11 03:44 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2020-06-11 03:44 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-06-11 03:44 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-06-11 03:44 - 2019-03-19 05:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2020-06-11 03:41 - 2017-07-17 16:44 - 000000000 ____D C:\Program Files (x86)\VyprVPN
2020-06-10 18:35 - 2019-03-19 05:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-06-10 18:33 - 2020-04-15 22:54 - 000410840 __RSH C:\bootmgr
2020-06-10 18:32 - 2020-04-17 04:05 - 002876416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2020-06-09 13:46 - 2020-04-17 04:13 - 000004586 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player NPAPI Notifier
2020-06-09 13:46 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2020-06-09 13:46 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Macromed
==================== Files in the root of some directories ========
2014-04-11 17:04 - 2014-04-11 17:04 - 014883840 _____ (LastPass) C:\Program Files (x86)\Common Files\lpuninstall.exe
2014-01-06 01:08 - 2014-01-14 02:55 - 000014603 _____ () C:\Users\CHOPPER\AppData\Roaming\01_01_2014_MP3
2014-02-17 22:58 - 2014-02-18 00:44 - 000004882 _____ () C:\Users\CHOPPER\AppData\Roaming\01_02_2014_MP3
2013-12-17 05:08 - 2013-12-20 13:30 - 000003724 _____ () C:\Users\CHOPPER\AppData\Roaming\09_2013_2brain
2013-11-04 16:15 - 2013-11-10 23:56 - 000006870 _____ () C:\Users\CHOPPER\AppData\Roaming\24_10_2013_mp3
2010-11-21 04:24 - 2010-11-21 04:24 - 001169224 _____ (Microsoft Corporation) C:\Users\CHOPPER\AppData\Roaming\luxware.exe
2013-10-20 22:30 - 2014-05-18 22:16 - 000000976 _____ () C:\Users\CHOPPER\AppData\Local\7F68A003.il
2013-10-20 22:30 - 2014-05-18 22:16 - 000000320 _____ () C:\Users\CHOPPER\AppData\Local\IndexIE_7F68A003.il
2020-04-15 15:04 - 2020-04-15 15:04 - 000000410 _____ () C:\Users\CHOPPER\AppData\Local\oobelibMkey.log
2016-01-30 17:25 - 2016-01-30 18:50 - 000000600 _____ () C:\Users\CHOPPER\AppData\Local\PUTTY.RND
2015-07-26 16:56 - 2020-04-22 19:53 - 000007602 _____ () C:\Users\CHOPPER\AppData\Local\Resmon.ResmonCfg
2020-03-12 19:16 - 2020-03-12 19:16 - 000000000 _____ () C:\Users\CHOPPER\AppData\Local\{894D712D-F836-4630-A7FD-6EE69946D3C7}
2016-09-02 19:21 - 2016-09-02 19:21 - 000000000 _____ () C:\Users\CHOPPER\AppData\Local\{A34EA8CB-158C-408D-B587-119A26CECC5A}
2020-03-17 11:26 - 2020-03-17 11:26 - 000000000 _____ () C:\Users\CHOPPER\AppData\Local\{FFAD518B-23C4-4EE3-8369-B68265924B2A}
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
The Addition Results are:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-07-2020 01
Ran by CHOPPER (08-07-2020 20:00:36)
Running from C:\Users\CHOPPER\OneDrive\OneDrive - Andrew Reid & Partners\Data\Maleware Bytes
Windows 10 Pro Version 1909 18363.900 (X64) (2020-04-17 03:14:01)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1779790193-764520171-1829944638-500 - Administrator - Disabled)
CHOPPER (S-1-5-21-1779790193-764520171-1829944638-1000 - Administrator - Enabled) => C:\Users\CHOPPER
DefaultAccount (S-1-5-21-1779790193-764520171-1829944638-503 - Limited - Disabled)
Guest (S-1-5-21-1779790193-764520171-1829944638-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1779790193-764520171-1829944638-1002 - Limited - Enabled)
WDAGUtilityAccount (S-1-5-21-1779790193-764520171-1829944638-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Microsoft Security Essentials (Enabled - Up to date) {CDE0C533-D3CD-62A1-E772-AFADDF863628}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat DC (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 20.009.20067 - Adobe Systems Incorporated)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 20.009.20067 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 5.1.0.407 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.387 - Adobe)
Amazon Kindle (HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\Amazon Kindle) (Version: - Amazon)
Amazon Music (HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\Amazon Amazon Music) (Version: 7.12.0.2203 - Amazon.com Services LLC)
Apple Application Support (32-bit) (HKLM-x32\...\{11C4575B-4B32-44D2-A097-D59A00BA60DE}) (Version: 8.5 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{D39B163A-9E12-442C-95E9-33FA5746AB21}) (Version: 8.5 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C788AE25-3D4E-4D18-811B-3219F778487E}) (Version: 13.5.1.2 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A3985C05-7386-411F-A4BF-32A73F37EB44}) (Version: 2.6.3.1 - Apple Inc.)
Asoftech Data Recovery (HKLM-x32\...\{1AED6EB7-8FEA-4021-B8FD-EBAA6B21679F}) (Version: 1.00 - )
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Audible Download Manager (HKLM-x32\...\AudibleDownloadManager) (Version: 6.6.0.19 - Audible, Inc.)
Autodesk App Manager (HKLM-x32\...\{C8125548-F2D5-4059-823F-1F3C5BBD9F19}) (Version: 1.2.0 - Autodesk)
Autodesk AutoCAD Performance Feedback Tool Version 1.2.2 (HKLM-x32\...\{85735431-6CD3-4B16-BEC8-95332034E53B}) (Version: 1.2.2.0 - Autodesk)
Autodesk Featured Apps (HKLM-x32\...\{EDDEE94B-214D-4B07-9727-A3E46F3E379A}) (Version: 1.2.0 - Autodesk)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Box Tools (HKLM-x32\...\{193EEF8F-283B-478E-B9B7-5C0CCCEB7EC8}) (Version: 4.10.2.808 - Box)
CCleaner (HKLM\...\CCleaner) (Version: 5.67 - Piriform)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5000 - CDBurnerXP)
Chrome Remote Desktop Host (HKLM-x32\...\{FEA4124F-FABE-440B-BA03-489722A59439}) (Version: 84.0.4147.39 - Google Inc.)
CloneDrive (HKLM-x32\...\CloneDrive) (Version: - )
CyberLink PowerDVD 11 (HKLM-x32\...\InstallShield_{F232C87C-6E92-4775-8210-DFE90B7777D9}) (Version: 11.0.2114.53 - CyberLink Corp.)
Data Recovery Pro (HKLM-x32\...\{B1C2398C-6FAB-46D1-806C-5942F0829994}) (Version: 2.1.1.0 - ParetoLogic, Inc.)
Data Rescue PC3 v110714 (HKLM-x32\...\Data Rescue PC3_is1) (Version: v110714 - Prosoft Engineering, Inc.)
devolo Cockpit (HKLM-x32\...\dlancockpit) (Version: 5.1.3.0 - devolo AG)
Discord (HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\Discord) (Version: 0.0.305 - Discord Inc.)
Dropbox (HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\Dropbox) (Version: 2.6.25 - Dropbox, Inc.)
EaseUS Data Recovery Wizard (HKLM\...\EaseUS Data Recovery Wizard_is1) (Version: - EaseUS)
eyeQ (HKLM-x32\...\{B33CD700-6738-11D4-87FE-0080C6F974A2}) (Version: - )
FileZilla Server (HKLM-x32\...\FileZilla Server) (Version: beta 0.9.48 - FileZilla Project)
Fitbit Connect (HKLM-x32\...\{3EFA7006-AFA8-4A75-8FFA-5A43FC797A90}) (Version: 2.0.1.6782 - Fitbit Inc.)
FoneLab 10.1.96 (HKLM-x32\...\{CA7ED0B0-3CD4-4254-A9D2-2D7F78C5E3C5}_is1) (Version: 10.1.96 - Aiseesoft Studio)
Free Alarm Clock (HKLM-x32\...\{8ED5A2F1-338F-4608-8AF7-BCD1ADC1E1F7}_is1) (Version: 4.0.1.0 - Comfort Software Group)
FreeMind (HKLM-x32\...\B991B020-2968-11D8-AF23-444553540000_is1) (Version: 1.0.0 - )
FXCM MetaTrader4 (HKLM-x32\...\FXCM MetaTrader4) (Version: 4.00 - MetaQuotes Software Corp.)
FXCM Trading Station Desktop (HKLM-x32\...\FXTS2) (Version: - Forex Capital Markets, LLC ("FXCM LLC"))
GeForce Experience NvStream Client Components (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamC) (Version: 1.6.28 - NVIDIA Corporation) Hidden
GetDataBack for NTFS (HKLM-x32\...\{56582EEA-3AEF-4D84-8B9D-C87A3CD9250F}) (Version: 4.10.000 - Runtime Software)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 83.0.4103.116 - Google LLC)
Google Chrome Canary (HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\Google Chrome SxS) (Version: 86.0.4196.2 - Google LLC)
Google Drive (HKLM-x32\...\{A8DC81F2-D365-4248-892A-FA3B5951F731}) (Version: 2.34.9392.7803 - Google, Inc.)
Google Earth Pro (HKLM\...\{B6EAFE41-5723-40EB-869B-4AF44CA17B35}) (Version: 7.3.3.7699 - Google)
Google Photos Backup (HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\Google Photos Backup) (Version: 1.1.4.11 - Google, Inc.)
Google Talk (remove only) (HKLM-x32\...\{226b64e8-dc75-4eea-a6c8-abcb496320f2}-Google Talk) (Version: - )
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
GoTo Opener (HKLM-x32\...\{8B2D47CC-1558-4939-B27F-41E30530072A}) (Version: 1.0.467 - LogMeIn, Inc.)
GoToMeeting 10.11.1.18068 (HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\GoToMeeting) (Version: 10.11.1.18068 - LogMeIn, Inc.)
HDD Regenerator (HKLM-x32\...\{9064B17E-9FC9-439D-A4A0-668EC6AAFDEC}) (Version: 1.51.0000 - Dmitriy Primochenko)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (HKLM-x32\...\{B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D}) (Version: 1.00.0001 - Microsoft) Hidden
iCloud (HKLM\...\{F0AD317D-AE18-45D0-BE5B-30074AFE6740}) (Version: 7.19.0.10 - Apple Inc.)
InstallWintun (HKLM\...\{FE2AA480-D491-4272-92BC-EAE2101B8B94}) (Version: 1.0.0 - WireGuard LLC) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{44ded3eb-1686-46a6-9770-fd79096c29f7}) (Version: 10.1.1.45 - Intel(R) Corporation) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1011 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1158 - Intel Corporation)
Intel(R) Small Business Advantage (HKLM-x32\...\{6A6D86CD-B004-46b7-8951-7BB75A776F8C}) (Version: 2.2.51.8439 - Intel(R) Corporation)
Intel(R) Smart Connect Technology (HKLM\...\{3CC1CC76-AB3A-4360-AB6F-1355D05A2A17}) (Version: 5.0.10.2907 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{608E1B9B-A2E8-4A1F-8BAB-874EB0DD25E3}) (Version: 1.0.0.36888 - Intel Corporation) Hidden
Intel(R) Update Manager (HKLM-x32\...\{7224B7CE-196C-4E2A-A1AE-1D7BF259FD36}) (Version: 3.4.1942 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.5.69 - Intel Corporation)
Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation)
iPT Browser (HKLM-x32\...\{422C397A-46C1-45DB-8B58-02DA837D42FE}) (Version: 3.6 - iPTorrents.com)
iTunes (HKLM\...\{586EAA79-8D11-4BF4-99B5-2C8A638218C7}) (Version: 12.10.7.3 - Apple Inc.)
Java 8 Update 71 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418071F0}) (Version: 8.0.710.15 - Oracle Corporation)
Java 8 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218071F0}) (Version: 8.0.710.15 - Oracle Corporation)
Jawbone Updater (HKLM-x32\...\Jawbone Updater) (Version: 0.1 - Jawbone)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
KaZaA Lite 1.7.2 (HKLM-x32\...\kazaalite172_is1) (Version: - )
Kodi (HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\Kodi) (Version: - XBMC Foundation)
LastPass (uninstall only) (HKLM-x32\...\LastPass) (Version: - LastPass)
LenovoUsbDriver 1.0.10 (HKLM-x32\...\LenovoUsbDriver) (Version: 1.0.10 - Lenovo)
Macrium Reflect Free Edition (HKLM\...\{A69180CE-2BC8-4CDD-85E1-88A849828F05}) (Version: 7.2.4601 - Paramount Software (UK) Ltd.) Hidden
Macrium Reflect Free Edition (HKLM\...\MacriumReflect) (Version: 7.2 - Paramount Software (UK) Ltd.)
Magic ISO Maker v5.5 (build 0281) (HKLM-x32\...\Magic ISO Maker v5.5 (build 0281)) (Version: - )
Malwarebytes version 4.1.0.56 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.1.0.56 - Malwarebytes)
Mavis Beacon Teaches Typing Deluxe Version 11 (HKLM-x32\...\Mavis Beacon Teaches Typing Deluxe Version 11) (Version: - )
Microsoft ASP.NET Core 3.1.4 - Shared Framework (HKLM-x32\...\{57d52952-c1f6-4e95-a22b-9d76a3f2b467}) (Version: 3.1.4.20222 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 83.0.478.58 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.129.31 - )
Microsoft IntelliPoint 8.2 (HKLM\...\Microsoft IntelliPoint 8.2) (Version: 8.20.468.0 - Microsoft Corporation)
Microsoft Office 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.11929.20838 - Microsoft Corporation)
Microsoft Office 365 Business - en-us (HKLM\...\O365BusinessRetail - en-us) (Version: 16.0.11929.20838 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\OneDriveSetup.exe) (Version: 19.232.1124.0012 - Microsoft Corporation)
Microsoft Project Professional 2016 - en-us (HKLM\...\ProjectProRetail - en-us) (Version: 16.0.11929.20838 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\Teams) (Version: 1.3.00.4461 - Microsoft Corporation)
Microsoft Visio Professional 2013 (HKLM\...\Office15.VISPRO) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 (HKLM-x32\...\{6913e92a-b64e-41c9-a5e6-cef39207fe89}) (Version: 14.25.28508.3 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\...\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 3.1.4 (x64) (HKLM-x32\...\{6ea49e83-4bd6-41b7-85ee-aa6a433739bd}) (Version: 3.1.4.28821 - Microsoft Corporation)
Mozilla Firefox 47.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 47.0.2 (x86 en-US)) (Version: 47.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0.2.6148 - Mozilla)
MSI Command Center (HKLM-x32\...\{85A2564E-9ED9-448A-91E4-B9211EE58A08}_is1) (Version: 1.0.1.24 - MSI)
MSI Fast Boot (HKLM-x32\...\{0F212E7A-65EB-4668-A8D7-749026A64F8E}_is1) (Version: 1.0.1.15 - MSI)
MSI Kombustor 4.1.5.0 (64-bit) (HKLM\...\{F3D3CC6B-9AD7-4F43-8C69-40D5902FDC5C}}_is1) (Version: - MSI / Geeks3D)
MSI Live Update 6 (HKLM-x32\...\{4F46CF54-47D2-41F4-B230-B0954C544420}}_is1) (Version: 6.2.0.69 - MSI)
MSI Smart Tool (HKLM-x32\...\{DDCCA038-DAB1-4D09-B85C-848020AA75D6}}_is1) (Version: 1.0.0.43 - MSI)
MSI Smart Utilities (HKLM-x32\...\{009E5DF2-3F97-480B-89DA-F2D5E672E14A}_is1) (Version: 2.0.0.11 - MSI)
MSI Super Charger (HKLM-x32\...\{7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1) (Version: 1.3.0.29 - MSI)
MSI(R) Intel(R) Extreme Tuning Utility (HKLM-x32\...\{7c9eb269-ff57-45ff-b548-b7408d1a6f6a}) (Version: 6.1.2.121 - Intel Corporation)
MSI(R) Intel(R) Extreme Tuning Utility (HKLM-x32\...\{B527413C-069C-424A-92CB-44D9819E2F0F}) (Version: 6.1.2.121 - Intel Corporation) Hidden
MSIRegister (HKLM-x32\...\{80B995A4-3A86-4690-98A6-563F1A788835}_is1) (Version: 2.0.0.19 - MSI)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Music Manager (HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\MusicManager) (Version: - Google, Inc.)
MyHarmony (HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\036a0e4fc6a247ec) (Version: 1.0.1.257 - Logitech)
NetworkGenie (HKLM-x32\...\{B416A23D-C2BD-4956-8BAE-5C3BAFF1AC1E}) (Version: 1.0.0.8 - MSI)
NewsLeecher v3.91 Beta 2 (HKLM-x32\...\NewsLeecher_is1) (Version: - )
NVIDIA 3D Vision Controller Driver 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 331.82 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA Virtual Audio 1.2.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.12 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.11929.20838 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.11929.20838 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.11929.20838 - Microsoft Corporation) Hidden
OffScrub_O15msi_OFFICE15.00BD (HKLM\...\OFFICE15.00BD) (Version: 15.0.4569.1506 - )
OffScrub_O15msi_OFFICE15.Proof (HKLM\...\OFFICE15.Proof) (Version: 15.0.4569.1506 - )
Ontrack EasyRecovery Enterprise (HKLM-x32\...\{AE695CA4-8847-4462-98CC-023874D29E72}_is1) (Version: 11.5.0.2 - Kroll Ontrack Inc.)
Outils de vérification linguistique 2013 de Microsoft Office - Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
OVPN (HKLM-x32\...\{e6e8b9ef-0da7-411a-a26d-0031d8319f67}) (Version: 1.1.6.888 - OVPN Integritet AB)
OVPN (HKLM-x32\...\{EC2D21D8-F7EF-48B0-A427-C4B923CC4096}) (Version: 1.1.6.888 - OVPN Integritet AB) Hidden
paint.net (HKLM\...\{F509C1F4-0029-49F9-B145-A4C4E8DF481A}) (Version: 4.0.3 - dotPDN LLC)
PcCloneEX (HKLM-x32\...\PcCloneEX) (Version: - )
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
Philips SPC 900NC PC Camera (HKLM-x32\...\{220F6386-5D1F-4DA5-94DB-F12133C3AE2C}) (Version: - )
Philips SPC 900NC PC Camera (HKLM-x32\...\{51E13E14-F72A-4C97-8FD7-04322D995E2F}) (Version: 1.00.000 - Philips)
Photo Station Uploader (remove only) (HKLM-x32\...\Photo Station Uploader) (Version: - Synology)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PowerToys (Preview) (HKLM\...\{C9EA6CF4-135E-416A-9D43-48AB00212CBB}) (Version: 0.19.0 - Microsoft)
PuTTY release 0.66 (HKLM-x32\...\PuTTY_is1) (Version: 0.66 - Simon Tatham)
QuickPar 0.9 (HKLM-x32\...\QuickPar) (Version: 0.9 - Peter B. Clements)
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
RAPID Mode (HKLM\...\{34EF1328-6F71-4077-99AA-E44690F42043}) (Version: 1.0.1.81 - Samsung Electronics Co., Ltd.) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.38.1118.2019 - Realtek)
Recap 1.10.6 (HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\7cd78b73-d4fe-5d3a-8fbb-15b66213844f) (Version: 1.10.6 - Recap Technologies Limited)
RocketDock 1.3.5 (HKLM-x32\...\RocketDock_is1) (Version: - Punk Software)
Rosetta Stone Version 3 (HKLM-x32\...\{80F7CA44-F3A5-4853-8BA6-DDF57CD4F078}) (Version: 3.4.7.0 - Rosetta Stone Ltd.)
Samsung Data Migration (HKLM-x32\...\{3B304604-0BF5-488E-AB95-F2F2E31206F3}) (Version: 3.1 - Samsung)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.5.1 - Samsung Electronics)
Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.)
Seagate Recovery Suite (HKLM-x32\...\{8512E96C-D851-410B-99DA-F3409743425D}) (Version: 2.1.4.0 - Seagate)
SeaTools for Windows 1.4.0.4 (HKLM-x32\...\SeaTools for Windows) (Version: 1.4.0.4 - Seagate Technology)
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 1.6.75 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype Meetings App (HKLM-x32\...\{3C66E71B-4243-46FF-8C4A-29A926968FBC}) (Version: 16.2.0.485 - Microsoft Corporation)
Skype Meetings App (HKLM-x32\...\{7AB48459-9283-4A92-B241-41316D413593}) (Version: 16.2.0.242 - Microsoft Corporation)
Skype™ 7.36 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.36.101 - Skype Technologies S.A.)
SoundTaxi Media Suite 4.5.4 (HKLM-x32\...\{EF4C657F-632F-4CED-A220-F4C1C724241C}_is1) (Version: 4.5.4 - cyan soft ltd)
Speccy (HKLM\...\Speccy) (Version: 1.29 - Piriform)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.2.25 - Safer-Networking Ltd.)
Starry Night Celestron 8 (HKLM-x32\...\{4D133931-DEF6-4321-A736-B8E58F608EFB}) (Version: 8.0.6.1988 - Simulation Curriculum Corp.)
Subliminal blaster (HKLM-x32\...\Subliminal blaster) (Version: - )
Synology Assistant (remove only) (HKLM-x32\...\Synology Assistant) (Version: - )
Synology Cloud Station Drive (HKLM-x32\...\{2C8D6EFF-78EE-4284-8A29-50CC43FA07E5}) (Version: 4.2.2.4379 - Synology)
Synology Data Replicator 3 (HKLM-x32\...\{8E310838-457C-4269-B177-3EFB300CBDDC}) (Version: 1.0.0.0 - Synology Inc.)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.3.0.362 - Microsoft Corporation)
TeamViewer 13 (HKLM-x32\...\TeamViewer) (Version: 13.2.36217 - TeamViewer)
Telegram Desktop version 2.1.12 (HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 2.1.12 - Telegram FZ-LLC)
TuneGet 4.5.4 (HKLM-x32\...\{050A0D31-6B33-4137-ADE5-C0896E5FA98D}_is1) (Version: 4.5.4 - cyan soft ltd)
Update for Skype for Business 2015 (KB4484289) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.VISPRO_{1C76EBD9-0A70-4094-A543-00CAA3B62113}) (Version: - Microsoft)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.8 - VideoLAN)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.3 - VideoLAN)
VyprVPN (HKLM\...\{526B3DDC-6891-4F43-8F64-8B83DC9E4848}) (Version: 4.0.0.10453 - Golden Frog, GmbH.)
Winamp (HKLM-x32\...\Winamp) (Version: 5.65 - Nullsoft, Inc)
Winamp Detector Plug-in (HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
WinRAR 5.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
WinZip 18.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240E1}) (Version: 18.0.11023 - WinZip Computing, S.L. )
Xilisoft Video Converter Ultimate (HKLM-x32\...\Xilisoft Video Converter Ultimate) (Version: 7.2.0.20120420 - Xilisoft)
Zeppelin tool package 2.1.0.0 (HKLM-x32\...\Zeppelin Programmer_is1) (Version: 2.1.0.0 - Bowers & Wilkins)
Zoom (HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\ZoomUMX) (Version: 5.1 - Zoom Video Communications, Inc.)
Packages:
=========
Acrobat Notification Client -> C:\Program Files\WindowsApps\AcrobatNotificationClient_1.0.4.0_x86__e1rzdqpraam7r [2020-04-17] (Adobe Systems Incorporated)
Adobe Notification Client -> C:\Program Files\WindowsApps\AdobeNotificationClient_1.0.1.22_x86__enpm4xejd91yc [2020-04-17] (Adobe Systems Incorporated)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-04-17] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-04-17] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.5012.0_x64__8wekyb3d8bbwe [2020-05-04] (Microsoft Studios) [MS Ad]
MPEG-2 Video Extension -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.22661.0_x64__8wekyb3d8bbwe [2020-04-19] (Microsoft Corporation)
MSN Weather -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-04-17] (Microsoft Corporation) [MS Ad]
Photos Media Engine Add-on -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-04-17] (Microsoft Corporation)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1779790193-764520171-1829944638-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\CHOPPER\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1779790193-764520171-1829944638-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} -> [OneDrive - Personal] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}0
CustomCLSID: HKU\S-1-5-21-1779790193-764520171-1829944638-1000_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\CHOPPER\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20031.2\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1779790193-764520171-1829944638-1000_Classes\CLSID\{2C4A5D61-009C-4561-9A33-6AFD542FD237}\InprocServer32 -> C:\Users\CHOPPER\AppData\Local\CloudStation\CloudStation.app\icon-overlay\18\x64\ContextMenu.dll () [File not signed]
CustomCLSID: HKU\S-1-5-21-1779790193-764520171-1829944638-1000_Classes\CLSID\{3E3AD4BD-346A-460A-80E8-90699B75C00B}\InprocServer32 -> C:\Users\CHOPPER\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.485\GatewayActiveX-x64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1779790193-764520171-1829944638-1000_Classes\CLSID\{472CE1AD-5D53-4BCF-A1FB-3982A5F55138}\InprocServer32 -> C:\Users\CHOPPER\AppData\Local\CloudStation\CloudStation.app\icon-overlay\18\x64\iconOverlay.dll (TODO: <Company name>) [File not signed]
CustomCLSID: HKU\S-1-5-21-1779790193-764520171-1829944638-1000_Classes\CLSID\{48AB5ADA-36B1-4137-99C9-2BD97F8788AB}\InprocServer32 -> C:\Users\CHOPPER\AppData\Local\CloudStation\CloudStation.app\icon-overlay\18\x64\iconOverlay.dll (TODO: <Company name>) [File not signed]
CustomCLSID: HKU\S-1-5-21-1779790193-764520171-1829944638-1000_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\CHOPPER\AppData\Local\GoToMeeting\16786\G2MOutlookAddin64.dll => No File
CustomCLSID: HKU\S-1-5-21-1779790193-764520171-1829944638-1000_Classes\CLSID\{A433C3E0-8B24-40EB-93C3-4B10D9959F58}\InprocServer32 -> C:\Users\CHOPPER\AppData\Local\CloudStation\CloudStation.app\icon-overlay\18\x64\iconOverlay.dll (TODO: <Company name>) [File not signed]
CustomCLSID: HKU\S-1-5-21-1779790193-764520171-1829944638-1000_Classes\CLSID\{AEB16659-2125-4ADA-A4AB-45EE21E86469}\InprocServer32 -> C:\Users\CHOPPER\AppData\Local\CloudStation\CloudStation.app\icon-overlay\18\x64\iconOverlay.dll (TODO: <Company name>) [File not signed]
CustomCLSID: HKU\S-1-5-21-1779790193-764520171-1829944638-1000_Classes\CLSID\{BA58190A-A733-4982-8AE2-E2021F0DD503}\localserver32 -> C:\Users\CHOPPER\AppData\Local\Box\Box Local Com Server\Box.Tools.ActiveX.exe (Box, Inc. -> Box, Inc.)
CustomCLSID: HKU\S-1-5-21-1779790193-764520171-1829944638-1000_Classes\CLSID\{C701AD67-3DF0-47C9-89CB-DFA6207BE229}\InprocServer32 -> C:\Users\CHOPPER\AppData\Local\CloudStation\CloudStation.app\icon-overlay\18\x64\iconOverlay.dll (TODO: <Company name>) [File not signed]
CustomCLSID: HKU\S-1-5-21-1779790193-764520171-1829944638-1000_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\CHOPPER\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20031.2\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1779790193-764520171-1829944638-1000_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Inc. -> Adobe Systems)
CustomCLSID: HKU\S-1-5-21-1779790193-764520171-1829944638-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\CHOPPER\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-1779790193-764520171-1829944638-1000_Classes\CLSID\{E9E7529D-7F09-410B-AF2A-CC154473B19C}\InprocServer32 -> C:\Users\CHOPPER\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-1779790193-764520171-1829944638-1000_Classes\CLSID\{FA372A6E-149F-4E95-832D-8F698D40AD7F}\localserver32 -> C:\Users\CHOPPER\AppData\Local\Google\Chrome SxS\Application\86.0.4196.2\notification_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-1779790193-764520171-1829944638-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\CHOPPER\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1779790193-764520171-1829944638-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\CHOPPER\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1779790193-764520171-1829944638-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\CHOPPER\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1779790193-764520171-1829944638-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\CHOPPER\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ 01UnsuppModule] -> {AEB16659-2125-4ADA-A4AB-45EE21E86469} => C:\Users\CHOPPER\AppData\Local\CloudStation\CloudStation.app\icon-overlay\18\x64\iconOverlay.dll [2017-03-05] (TODO: <Company name>) [File not signed]
ShellIconOverlayIdentifiers: [ 02SyncingModule] -> {48AB5ADA-36B1-4137-99C9-2BD97F8788AB} => C:\Users\CHOPPER\AppData\Local\CloudStation\CloudStation.app\icon-overlay\18\x64\iconOverlay.dll [2017-03-05] (TODO: <Company name>) [File not signed]
ShellIconOverlayIdentifiers: [ 03SyncedModule] -> {472CE1AD-5D53-4BCF-A1FB-3982A5F55138} => C:\Users\CHOPPER\AppData\Local\CloudStation\CloudStation.app\icon-overlay\18\x64\iconOverlay.dll [2017-03-05] (TODO: <Company name>) [File not signed]
ShellIconOverlayIdentifiers: [ 04ReadOnlyModule] -> {A433C3E0-8B24-40EB-93C3-4B10D9959F58} => C:\Users\CHOPPER\AppData\Local\CloudStation\CloudStation.app\icon-overlay\18\x64\iconOverlay.dll [2017-03-05] (TODO: <Company name>) [File not signed]
ShellIconOverlayIdentifiers: [ 05NoPermModule] -> {C701AD67-3DF0-47C9-89CB-DFA6207BE229} => C:\Users\CHOPPER\AppData\Local\CloudStation\CloudStation.app\icon-overlay\18\x64\iconOverlay.dll [2017-03-05] (TODO: <Company name>) [File not signed]
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2018-04-23] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2018-04-23] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2018-04-23] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\CHOPPER\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\CHOPPER\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\CHOPPER\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\CHOPPER\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [WDAGOfficeShellIconOverlayExtension] -> {1C7A13D2-F5E5-4807-A19B-E4CCEC814B3D} => C:\WINDOWS\System32\hvsiofficeiconoverlayshellextension.dll [2020-05-14] (Microsoft Windows -> )
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\CHOPPER\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\CHOPPER\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\CHOPPER\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [WDAGOfficeShellIconOverlayExtension] -> {1C7A13D2-F5E5-4807-A19B-E4CCEC814B3D} => C:\WINDOWS\System32\hvsiofficeiconoverlayshellextension.dll [2020-05-14] (Microsoft Windows -> )
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2020-03-05] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2018-04-23] (Google Inc -> Google)
ContextMenuHandlers1: [MagicISO] -> {DB85C504-C730-49DD-BEC1-7B39C6103B7A} => C:\Program Files (x86)\MagicISO\misosh64.dll [2008-05-22] (MagicISO, Inc.) [File not signed]
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2020-05-07] (Apple Inc. -> Apple Inc.)
ContextMenuHandlers1: [ReflectShellExt] -> {DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611} => C:\Program Files\Macrium\Reflect\RContextMenu.dll [2019-09-20] (Paramount Software UK Ltd -> Paramount Software UK Ltd)
ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2013-05-16] (Safer-Networking Ltd.) [File not signed]
ContextMenuHandlers1: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2013-05-16] (Safer-Networking Ltd.) [File not signed]
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2014-08-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2014-08-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2014-01-27] (WinZip Computing -> WinZip Computing, S.L.)
ContextMenuHandlers2: [ReflectShellExt] -> {DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611} => C:\Program Files\Macrium\Reflect\RContextMenu.dll [2019-09-20] (Paramount Software UK Ltd -> Paramount Software UK Ltd)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers3: [PowerRenameExt] -> {0440049F-D1DC-4E46-B27B-98393D79486B} => C:\Program Files\PowerToys\modules\PowerRename\PowerRenameExt.dll [2020-06-29] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) [File not signed]
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2018-04-23] (Google Inc -> Google)
ContextMenuHandlers4: [MagicISO] -> {DB85C504-C730-49DD-BEC1-7B39C6103B7A} => C:\Program Files (x86)\MagicISO\misosh64.dll [2008-05-22] (MagicISO, Inc.) [File not signed]
ContextMenuHandlers4: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2014-01-27] (WinZip Computing -> WinZip Computing, S.L.)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> No File
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-01-29] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2020-03-05] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers6: [MagicISO] -> {DB85C504-C730-49DD-BEC1-7B39C6103B7A} => C:\Program Files (x86)\MagicISO\misosh64.dll [2008-05-22] (MagicISO, Inc.) [File not signed]
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2013-05-16] (Safer-Networking Ltd.) [File not signed]
ContextMenuHandlers6: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2013-05-16] (Safer-Networking Ltd.) [File not signed]
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2014-08-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2014-08-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2014-01-27] (WinZip Computing -> WinZip Computing, S.L.)
ContextMenuHandlers1_S-1-5-21-1779790193-764520171-1829944638-1000: [CloudStation.SyncFolderContextMenu] -> {2C4A5D61-009C-4561-9A33-6AFD542FD237} => C:\Users\CHOPPER\AppData\Local\CloudStation\CloudStation.app\icon-overlay\18\x64\ContextMenu.dll [2017-03-05] () [File not signed]
ContextMenuHandlers1_S-1-5-21-1779790193-764520171-1829944638-1000: [DropboxExt] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\CHOPPER\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox -> Dropbox, Inc.)
ContextMenuHandlers4_S-1-5-21-1779790193-764520171-1829944638-1000: [DropboxExt] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\CHOPPER\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox -> Dropbox, Inc.)
ContextMenuHandlers5_S-1-5-21-1779790193-764520171-1829944638-1000: [DropboxExt] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\CHOPPER\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll [2013-09-11] (Dropbox -> Dropbox, Inc.)
ContextMenuHandlers6_S-1-5-21-1779790193-764520171-1829944638-1000: [CloudStation.SyncFolderContextMenu] -> {2C4A5D61-009C-4561-9A33-6AFD542FD237} => C:\Users\CHOPPER\AppData\Local\CloudStation\CloudStation.app\icon-overlay\18\x64\ContextMenu.dll [2017-03-05] () [File not signed]
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::
WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]
WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]
ShortcutWithArgument: C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Canary Apps\Chrome Connectivity Diagnostics.lnk -> C:\Users\CHOPPER\AppData\Local\Google\Chrome SxS\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=eemlkeanncmjljgehlbplemhmdmalhdc
ShortcutWithArgument: C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Canary Apps\Google Hangouts.lnk -> C:\Users\CHOPPER\AppData\Local\Google\Chrome SxS\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=knipolnnllmklapflnccelgolnpehhpl
ShortcutWithArgument: C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Canary Apps\Google Keep - Notes and Lists.lnk -> C:\Users\CHOPPER\AppData\Local\Google\Chrome SxS\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=hmjkmjkepdijhoojdojkdfohbdgmmhki
ShortcutWithArgument: C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Canary Apps\Google Play Movies & TV.lnk -> C:\Users\CHOPPER\AppData\Local\Google\Chrome SxS\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=gdijeikdkaembjbdobgfkoidjkpbmlkd
ShortcutWithArgument: C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Canary Apps\Google Play Music.lnk -> C:\Users\CHOPPER\AppData\Local\Google\Chrome SxS\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=fahmaaghhglfmonjliepjlchgpgfmobi
ShortcutWithArgument: C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Canary Apps\Ledger Manager.lnk -> C:\Users\CHOPPER\AppData\Local\Google\Chrome SxS\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=beimhnaefocolcplfimocfiaiefpkgbf
ShortcutWithArgument: C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Canary Apps\Messenger for WhatsApp™.lnk -> C:\Users\CHOPPER\AppData\Local\Google\Chrome SxS\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=infelompnbbancffeibkenmdbbmpoged
ShortcutWithArgument: C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Canary Apps\The Economist.lnk -> C:\Users\CHOPPER\AppData\Local\Google\Chrome SxS\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=gebjgjhbjedcomcajgpodjgfjgkepgpl
ShortcutWithArgument: C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Canary Apps\Web Quake.lnk -> C:\Users\CHOPPER\AppData\Local\Google\Chrome SxS\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=ibkbfanmkmadbbgggonficloplenbefh
ShortcutWithArgument: C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Chrome Connectivity Diagnostics.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=eemlkeanncmjljgehlbplemhmdmalhdc
ShortcutWithArgument: C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Chrome Remote Desktop.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp
ShortcutWithArgument: C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Hangouts.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=knipolnnllmklapflnccelgolnpehhpl
ShortcutWithArgument: C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Keep - Notes and Lists.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=hmjkmjkepdijhoojdojkdfohbdgmmhki
ShortcutWithArgument: C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Play Movies & TV.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=gdijeikdkaembjbdobgfkoidjkpbmlkd
ShortcutWithArgument: C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Play Music.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=fahmaaghhglfmonjliepjlchgpgfmobi
ShortcutWithArgument: C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Ledger Manager.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=beimhnaefocolcplfimocfiaiefpkgbf
ShortcutWithArgument: C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Messenger for WhatsApp™.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=infelompnbbancffeibkenmdbbmpoged
ShortcutWithArgument: C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\The Economist.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=gebjgjhbjedcomcajgpodjgfjgkepgpl
ShortcutWithArgument: C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Web Quake.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=ibkbfanmkmadbbgggonficloplenbefh
ShortcutWithArgument: C:\Users\CHOPPER\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\45a4b0557a8c430b\Radioplayer.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=fcppdfelojakeahklfgkjegnpbgndoch
==================== Loaded Modules (Whitelisted) =============
2020-06-02 15:06 - 2020-06-02 15:06 - 000101888 _____ () [File not signed] [File is in use] C:\Program Files (x86)\VyprVPN\GoldenFrogWFP.dll
2020-06-02 15:06 - 2020-06-02 15:06 - 000142336 _____ () [File not signed] [File is in use] C:\Program Files (x86)\VyprVPN\ManagedCO.dll
2020-05-13 14:03 - 2005-07-18 13:43 - 000160256 _____ () [File not signed] C:\Program Files (x86)\MSI\Live Update\unrar.dll
2016-07-17 23:43 - 2014-04-21 15:09 - 000150528 _____ () [File not signed] C:\Program Files (x86)\MSI\NetworkGenie\gep.dll
2014-11-25 04:22 - 2014-11-25 04:22 - 000035328 _____ () [File not signed] C:\Program Files (x86)\Synology\Photo Station Uploader\ShellExtHandler.dll
2017-03-05 18:05 - 2017-03-05 18:05 - 001253376 _____ () [File not signed] C:\Users\CHOPPER\AppData\Local\CloudStation\CloudStation.app\icon-overlay\18\x64\ContextMenu.dll
2020-06-12 04:04 - 2018-03-08 02:48 - 002286592 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:\Users\CHOPPER\AppData\Local\Amazon Music\QtCore4.dll
2020-06-12 04:04 - 2018-03-08 02:52 - 006324224 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:\Users\CHOPPER\AppData\Local\Amazon Music\QtGui4.dll
2020-06-12 04:04 - 2018-03-08 02:49 - 000808448 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:\Users\CHOPPER\AppData\Local\Amazon Music\QtNetwork4.dll
2009-07-14 02:20 - 2009-07-14 02:41 - 000046080 _____ (Hewlett-Packard Corporation) [File not signed] C:\WINDOWS\System32\hpz3lw72.dll
2013-10-12 20:20 - 2009-07-14 02:41 - 000257024 _____ (Hewlett-Packard Corporation) [File not signed] C:\WINDOWS\system32\spool\PRTPROCS\x64\hpzppw72.dll
2016-04-24 00:44 - 2016-04-24 00:44 - 000015872 _____ (hyjiacan.com) [File not signed] [File is in use] C:\Program Files\PowerToys\modules\launcher\Pinyin4Net.dll
2010-11-18 21:08 - 2010-11-18 21:08 - 000086016 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll
2013-10-12 21:03 - 2015-03-24 00:34 - 000074240 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.dll
2015-11-25 13:43 - 2008-05-22 23:25 - 000043520 _____ (MagicISO, Inc.) [File not signed] C:\Program Files (x86)\MagicISO\misosh64.dll
2013-12-12 11:46 - 2013-12-12 11:46 - 000022528 _____ (michaelnoonan) [File not signed] [File is in use] C:\Program Files\PowerToys\modules\launcher\WindowsInput.dll
2020-06-29 20:56 - 2020-06-29 20:56 - 000005120 _____ (Microsoft Corporation) [File not signed] [File is in use] C:\Program Files\PowerToys\modules\launcher\ManagedCommon.dll
2020-06-29 21:23 - 2020-06-29 21:23 - 000293888 _____ (Microsoft Corporation) [File not signed] C:\Program Files\PowerToys\modules\Launcher\Microsoft.Launcher.dll
2017-04-14 21:03 - 2017-04-14 21:03 - 000000000 ____L (Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\AppVIsvSubsystems64.dll
2017-04-14 21:03 - 2017-04-14 21:03 - 000000000 ____L (Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\c2r64.dll
2019-11-04 21:13 - 2019-11-04 21:13 - 000781824 _____ (NLog) [File not signed] [File is in use] C:\Program Files\PowerToys\modules\launcher\NLog.dll
2020-03-16 22:13 - 2020-03-16 22:13 - 000045056 _____ (NLog) [File not signed] [File is in use] C:\Program Files\PowerToys\modules\launcher\NLog.Extensions.Logging.dll
2016-07-17 23:43 - 2013-04-12 14:05 - 000057344 _____ (NT Kernel Resources) [File not signed] C:\Program Files (x86)\MSI\NetworkGenie\ndisapi.dll
2018-07-08 22:12 - 2018-07-08 22:12 - 000198144 _____ (Polytrope) [File not signed] [File is in use] C:\Program Files\PowerToys\modules\launcher\Mages.Core.dll
2013-10-22 22:58 - 2013-05-16 10:55 - 000467456 _____ (Safer-Networking Ltd.) [File not signed] C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll
2016-08-11 19:52 - 2016-08-11 19:52 - 001427968 ____R (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\Fitbit Connect\LIBEAY32.dll
2017-03-05 18:05 - 2017-03-05 18:05 - 002768896 _____ (TODO: <Company name>) [File not signed] C:\Users\CHOPPER\AppData\Local\CloudStation\CloudStation.app\icon-overlay\18\x64\iconOverlay.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer trusted/restricted ==========
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\sharepoint.com -> hxxps://arandp-files.sharepoint.com
IE restricted site: HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\123simsen.com -> www.123simsen.com
There are 7872 more sites.
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2015-05-27 23:05 - 000450771 ____R C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
127.0.0.1 www.123moviedownload.com
There are 15465 more lines.
2020-03-03 01:44 - 2020-07-02 19:48 - 000000534 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
192.168.124.242 f7c19a4d-40d2-4bbe-8e37-891569d21533.mshome.net # 2020 7 4 9 18 48 10 444
192.168.233.113 OFFICE-PC-01.mshome.net # 2025 7 2 1 18 48 10 444
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\QuickTime\QTSystem\;C:\Program Files (x86)\Skype\Phone\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\dotnet\
HKU\S-1-5-21-1779790193-764520171-1829944638-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\CHOPPER\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 194.168.4.100 - 194.168.8.100
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
Windows Firewall is enabled.
Network Binding:
=============
vEthernet (HvsiIcs): WinpkFilter LightWeight Filter -> nt_ndisrd (enabled)
Ethernet 4: WinpkFilter LightWeight Filter -> nt_ndisrd (enabled)
vEthernet (Default Switch): WinpkFilter LightWeight Filter -> nt_ndisrd (enabled)
Local Area Connection: WinpkFilter LightWeight Filter -> nt_ndisrd (enabled)
Ethernet: WinpkFilter LightWeight Filter -> nt_ndisrd (enabled)
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
MSCONFIG\Services: AdAppMgrSvc => 2
MSCONFIG\Services: Autodesk Content Service => 2
MSCONFIG\Services: CLHNServiceForPowerDVD => 2
MSCONFIG\Services: Cloud Station Drive VSS Service x64 => 2
MSCONFIG\Services: CyberLink PowerDVD 11.0 Monitor Service => 2
MSCONFIG\Services: CyberLink PowerDVD 11.0 Service => 2
MSCONFIG\Services: FileZilla Server => 2
MSCONFIG\Services: FLEXnet Licensing Service => 3
MSCONFIG\Services: FlexNet Licensing Service 64 => 3
MSCONFIG\Services: ICProxy => 3
MSCONFIG\Services: intelsba => 3
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: ISCTAgent => 2
MSCONFIG\Services: MacriumService => 2
MSCONFIG\Services: OpenVPNService => 3
MSCONFIG\Services: seclogon => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: SuperRAIDSvc => 2
MSCONFIG\Services: SynoDrService => 2
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\Services: TeamViewer9 => 2
MSCONFIG\Services: UsbClientService => 2
MSCONFIG\Services: VMAuthdService => 2
MSCONFIG\Services: VMnetDHCP => 2
MSCONFIG\Services: VMUSBArbService => 2
MSCONFIG\Services: VMware NAT Service => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Audible Download Manager.lnk => C:\Windows\pss\Audible Download Manager.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Belkin Wireless Networking Utility.lnk => C:\Windows\pss\Belkin Wireless Networking Utility.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^CloneDrive.LNK => C:\Windows\pss\CloneDrive.LNK.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Install LastPass FF RunOnce.lnk => C:\Windows\pss\Install LastPass FF RunOnce.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Install LastPass IE RunOnce.lnk => C:\Windows\pss\Install LastPass IE RunOnce.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^iSCTsysTray.lnk => C:\Windows\pss\iSCTsysTray.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Mavis Beacon Teaches Typing Deluxe Version 11.lnk => C:\Windows\pss\Mavis Beacon Teaches Typing Deluxe Version 11.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^MiniEYE-MiniREAD Launch.lnk => C:\Windows\pss\MiniEYE-MiniREAD Launch.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^PC Clone EX.LNK => C:\Windows\pss\PC Clone EX.LNK.CommonStartup
MSCONFIG\startupfolder: C:^Users^CHOPPER^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^EvernoteClipper.lnk => C:\Windows\pss\EvernoteClipper.lnk.Startup
MSCONFIG\startupfolder: C:^Users^CHOPPER^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MagicDisc.lnk => C:\Windows\pss\MagicDisc.lnk.Startup
MSCONFIG\startupfolder: C:^Users^CHOPPER^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Send to OneNote.lnk => C:\Windows\pss\Send to OneNote.lnk.Startup
MSCONFIG\startupfolder: C:^Users^CHOPPER^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Synology Cloud Station Drive.lnk => C:\Windows\pss\Synology Cloud Station Drive.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: ADSKAppManager => "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
MSCONFIG\startupreg: ApplePhotoStreams => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
MSCONFIG\startupreg: Application Restart #6 => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --flag-switches-begin --flag-switches-end --restore-last-session --flag-switches-begin --flag-switches-end --flag-switches-begin --flag-switches-end -- https://www.warez-bb.org/viewtopic.php?t=12243608&highlight=
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: Audials => C:\Users\CHOPPER\AppData\Local\Temp\MediaService.exe
MSCONFIG\startupreg: BCSSync => "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: BrowserSafeguard => C:\Program Files (x86)\Browsersafeguard\Browsersafeguard.exe
MSCONFIG\startupreg: CCXProcess => "C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe"
MSCONFIG\startupreg: com.squirrel.Teams.Teams => C:\Users\CHOPPER\AppData\Local\Microsoft\Teams\Update.exe --processStart "Teams.exe" --process-start-args "--system-initiated"
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: Discord => C:\Users\CHOPPER\AppData\Local\Discord\app-0.0.305\Discord.exe
MSCONFIG\startupreg: electron.app.Recap => C:\Users\CHOPPER\AppData\Local\Programs\recap\Recap.exe
MSCONFIG\startupreg: FileZilla Server Interface => "C:\Program Files (x86)\FileZilla Server\FileZilla Server Interface.exe"
MSCONFIG\startupreg: Fitbit Connect => "C:\Program Files (x86)\Fitbit Connect\Fitbit Connect.exe" /autorun
MSCONFIG\startupreg: FreeAC => C:\Program Files (x86)\FreeAlarmClock\FreeAlarmClock.exe -autorun
MSCONFIG\startupreg: Google Update => C:\Users\CHOPPER\AppData\Local\Google\Update\1.3.32.7\GoogleUpdateCore.exe
MSCONFIG\startupreg: GoogleChromeAutoLaunch_BD4129D46292D5525543A19FE052E554 => "C:\Users\CHOPPER\AppData\Local\Google\Chrome SxS\Application\chrome.exe" --no-startup-window
MSCONFIG\startupreg: googletalk => C:\Program Files (x86)\Google\Google Talk\googletalk.exe /autostart
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: hpqSRMon => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
MSCONFIG\startupreg: iCloudDrive => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
MSCONFIG\startupreg: iCloudServices => "C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"
MSCONFIG\startupreg: ISCT Tray => C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Live Update => C:\Program Files (x86)\MSI\Live Update\Live Update.exe /REMINDER
MSCONFIG\startupreg: LMab1err => "C:\Program Files\Lexmark\ErrorApp\LMab1err.exe"
MSCONFIG\startupreg: LMADKmon => "C:\Program Files (x86)\Lexmark Pro4000 Series\LMADKmon.exe"
MSCONFIG\startupreg: Logitech Download Assistant => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
MSCONFIG\startupreg: Lync => "C:\Program Files\Microsoft Office\root\Office16\lync.exe" /fromrunkey
MSCONFIG\startupreg: MusicManager => "C:\Users\CHOPPER\AppData\Local\Programs\Google\MusicManager\MusicManager.exe"
MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
MSCONFIG\startupreg: Nvtmru => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
MSCONFIG\startupreg: OneDrive => "C:\Users\CHOPPER\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
MSCONFIG\startupreg: PhiBtn => C:\Windows\System32\Drivers\PhiBtn.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Reflect UI => C:\Program Files\Macrium\Common\ReflectUI.exe
MSCONFIG\startupreg: RemoteControl11 => C:\Program Files (x86)\CyberLink\PowerDVD11\PDVD11Serv.exe
MSCONFIG\startupreg: SDTray => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
MSCONFIG\startupreg: SkyDrive => "C:\Users\CHOPPER\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Speech Recognition => "C:\Windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
MSCONFIG\startupreg: Spybot-S&D Cleaning => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean
MSCONFIG\startupreg: SpybotPostWindows10UpgradeReInstall => "C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe"
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: Super-Charger => C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
MSCONFIG\startupreg: swg => "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
MSCONFIG\startupreg: TrayMin900 => C:\Windows\System32\Drivers\Tray900.exe
MSCONFIG\startupreg: vmware-tray.exe => "C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe"
MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKLM\...\StartupApproved\Run32: => "MSIRegister"
HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\StartupApproved\Run: => "CCXProcess"
HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\StartupApproved\Run: => "iCloudDrive"
HKU\S-1-5-21-1779790193-764520171-1829944638-1000\...\StartupApproved\Run: => "Sidebar"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{FDD1CBA5-453A-49D4-91FA-CAC5F26B9CD9}] => (Block) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{6F2F2327-288E-48F5-9817-985370CFDF3B}] => (Block) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{A64315C5-3E65-446F-A817-2BAC6BEA2114}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [TCP Query User{A79EDFBA-D637-4A33-ABF5-11E2A8219410}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{048B2803-B972-41C4-B8A5-B357F4FD8F64}C:\program files (x86)\kazaa lite\kazaa.exe] => (Block) C:\program files (x86)\kazaa lite\kazaa.exe () [File not signed]
FirewallRules: [TCP Query User{5C73847F-3611-421B-A466-BA2CCE4B761F}C:\program files (x86)\kazaa lite\kazaa.exe] => (Block) C:\program files (x86)\kazaa lite\kazaa.exe () [File not signed]
FirewallRules: [{77B2E01F-B717-41E8-87FD-FAB53291F277}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{DB176382-7B14-4E8D-B0B5-70CCEE6C07B6}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{5EFC582D-4341-4B6E-B98E-627DAFAD3F48}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2F8945EE-6FB0-49C1-BD98-2586A45DCDBE}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{0DCAF89E-5EC8-4BA1-8B90-15BD7BFB6D67}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{FB7E7A34-4FD3-40EA-9722-2810D0CA142E}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{1CECBE1A-A989-4742-B4DD-66E9C87885D3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{C0CC9FA2-CB51-4130-BEF7-6AD7B1DA8457}] => (Block) C:\users\chopper\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E45DE9D1-2E3F-4D3B-9DAC-6F5FBE37B26D}] => (Block) C:\users\chopper\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{D7E57737-DA30-465E-A3EE-060AC9295B8D}C:\users\chopper\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\chopper\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{8DE425C4-D99D-47F5-B800-07C716C22B24}C:\users\chopper\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\chopper\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{82560479-B625-4954-8075-A7C88E699615}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe (devolo AG -> devolo AG)
FirewallRules: [{A0D08574-F0EC-466D-AA89-D81749654837}] => (Block) C:\users\chopper\appdata\local\microsoft\skypeforbusinessplugin\16.2.0.242\pluginhost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6FA4F362-723E-43B1-9EAD-9B39DF61943C}] => (Block) C:\users\chopper\appdata\local\microsoft\skypeforbusinessplugin\16.2.0.242\pluginhost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{AA69215D-9169-4555-AB3E-27EDCA6F78C7}C:\users\chopper\appdata\local\microsoft\skypeforbusinessplugin\16.2.0.242\pluginhost.exe] => (Allow) C:\users\chopper\appdata\local\microsoft\skypeforbusinessplugin\16.2.0.242\pluginhost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{8A04F099-5010-4CF6-9523-20B38A946C23}C:\users\chopper\appdata\local\microsoft\skypeforbusinessplugin\16.2.0.242\pluginhost.exe] => (Allow) C:\users\chopper\appdata\local\microsoft\skypeforbusinessplugin\16.2.0.242\pluginhost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E8594A02-DC16-4035-B2D4-247343584E1D}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{CB2242BD-6D2D-41F5-9B54-5DC1842DC2C1}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4C5D5AEE-2858-470B-8A3B-1DE6F19BBD2D}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{75E92B8A-0817-4D45-A460-2FEADA2FB906}] => (Block) C:\users\chopper\appdata\local\cloudstation\cloudstation.app\bin\cloud-drive-connect.exe (Synology Inc. -> Synology Inc.) [File not signed]
FirewallRules: [{C579FB7B-64B5-4590-B43E-AF9761AB52BE}] => (Block) C:\users\chopper\appdata\local\cloudstation\cloudstation.app\bin\cloud-drive-connect.exe (Synology Inc. -> Synology Inc.) [File not signed]
FirewallRules: [UDP Query User{FF0D9FC0-2D1D-4BD4-B40E-356BFBF251FD}C:\users\chopper\appdata\local\cloudstation\cloudstation.app\bin\cloud-drive-connect.exe] => (Allow) C:\users\chopper\appdata\local\cloudstation\cloudstation.app\bin\cloud-drive-connect.exe (Synology Inc. -> Synology Inc.) [File not signed]
FirewallRules: [TCP Query User{18E41BD1-353E-4B89-8EB6-67FE1F5323BB}C:\users\chopper\appdata\local\cloudstation\cloudstation.app\bin\cloud-drive-connect.exe] => (Allow) C:\users\chopper\appdata\local\cloudstation\cloudstation.app\bin\cloud-drive-connect.exe (Synology Inc. -> Synology Inc.) [File not signed]
FirewallRules: [{23B37D30-0EE5-4297-A6E1-1CBBD061A0F1}] => (Allow) C:\Program Files (x86)\Jawbone\JawboneUpdater.exe (AliphCom -> )
FirewallRules: [{CCEB5A01-1244-4BA3-AEB7-FC254F325D23}] => (Allow) C:\Program Files (x86)\Jawbone\JawboneUpdater.exe (AliphCom -> )
FirewallRules: [{90E4A117-6A5F-4A8A-BFC4-166143BB1F46}] => (Allow) C:\Windows\twain_32\Lexmark\NetworkTwain\lexnetworkds.ds () [File not signed]
FirewallRules: [{C68EA30F-BD3A-491A-AB7E-C9986553E4F0}] => (Allow) C:\Windows\twain_32\Lexmark\NetworkTwain\lexnetworkds.ds () [File not signed]
FirewallRules: [{E2E61308-2FC2-497D-A884-E76BB145D321}] => (Allow) C:\Windows\twain_32\Lexmark\NetworkTwain\lexnetworkds.ds () [File not signed]
FirewallRules: [{A2FAB430-781E-49B8-9DF3-4CE3B81A5A68}] => (Allow) C:\Windows\twain_32\Lexmark\NetworkTwain\lexnetworkds.ds () [File not signed]
FirewallRules: [{D44B13A5-B2D2-4BFD-A502-080AE303C9F7}] => (Allow) C:\Program Files (x86)\Lexmark\NetworkTwain\lextwprotocol.dll () [File not signed]
FirewallRules: [{2F2D03E2-5BA5-4317-BB20-6331F07BE2FB}] => (Allow) C:\Program Files (x86)\Lexmark\NetworkTwain\lextwprotocol.dll () [File not signed]
FirewallRules: [{5B5091F3-6628-46DD-8B47-D093F3218427}] => (Allow) C:\Program Files (x86)\Lexmark\NetworkTwain\lextwprotocol.dll () [File not signed]
FirewallRules: [{14126AF6-019E-4303-B569-F87E7C49CE6E}] => (Allow) C:\Program Files (x86)\Lexmark\NetworkTwain\lextwprotocol.dll () [File not signed]
FirewallRules: [{7D4F3070-CA07-4E39-88AB-613BD67DE63F}] => (Allow) C:\Program Files (x86)\Lexmark\NetworkTwain\LMzzz_32serv.dll (Microsoft Windows Hardware Compatibility Publisher -> )
FirewallRules: [{C92A5884-DD71-4B39-B8B8-EB8D0ABFFD91}] => (Allow) C:\Program Files (x86)\Lexmark\NetworkTwain\LMzzz_32serv.dll (Microsoft Windows Hardware Compatibility Publisher -> )
FirewallRules: [{090F55AC-D9FB-4FE6-9D15-EC660418D996}] => (Allow) C:\Program Files (x86)\Lexmark\NetworkTwain\LMzzz_32serv.dll (Microsoft Windows Hardware Compatibility Publisher -> )
FirewallRules: [{E5D66DBE-6ECE-400E-B5CF-CA6A85D2650A}] => (Allow) C:\Program Files (x86)\Lexmark\NetworkTwain\LMzzz_32serv.dll (Microsoft Windows Hardware Compatibility Publisher -> )
FirewallRules: [{91B4B168-7F9A-4FF2-A335-17E307801F3D}] => (Allow) C:\Program Files (x86)\Lexmark\NetworkTwain\LMZZZ_32__bc.dll () [File not signed]
FirewallRules: [{FDED9D1F-1BBA-422E-9B2E-BE64FF20F62B}] => (Allow) C:\Program Files (x86)\Lexmark\NetworkTwain\LMZZZ_32__bc.dll () [File not signed]
FirewallRules: [{A244947D-13CB-4E66-BFDA-118B34BC9B09}] => (Allow) C:\Program Files (x86)\Lexmark\NetworkTwain\LMZZZ_32__bc.dll () [File not signed]
FirewallRules: [{4F12D61C-2574-4620-B07C-4EBFAF24F3D4}] => (Allow) C:\Program Files (x86)\Lexmark\NetworkTwain\LMZZZ_32__bc.dll () [File not signed]
FirewallRules: [{7D125A05-FB28-4802-A267-3641D18A985F}] => (Allow) C:\Program Files (x86)\Lexmark Pro4000 Series\LMabscw.dll () [File not signed]
FirewallRules: [{151463FF-6899-4E50-8E1F-D2206353E958}] => (Allow) C:\Program Files (x86)\Lexmark Pro4000 Series\LMabscw.dll () [File not signed]
FirewallRules: [{E8DE6358-5A67-4291-BBB4-9291D1AF3578}] => (Allow) C:\Program Files (x86)\Lexmark Pro4000 Series\LMabscw.dll () [File not signed]
FirewallRules: [{BEFC2319-1B23-4E3D-9E6D-9D8F1164BA58}] => (Allow) C:\Program Files (x86)\Lexmark Pro4000 Series\LMabscw.dll () [File not signed]
FirewallRules: [{5C3ADB76-E695-4981-AD32-3EE240D064DF}] => (Allow) C:\Program Files (x86)\Lexmark Pro4000 Series\LMADKlscn.exe (Lexmark International, Inc. -> )
FirewallRules: [{6DBDB03B-F1AF-4FEF-B165-3F4FEAF55115}] => (Allow) C:\Program Files (x86)\Lexmark Pro4000 Series\LMADKlscn.exe (Lexmark International, Inc. -> )
FirewallRules: [{951C5026-7681-4EF5-BD9D-C2940D8607AC}] => (Allow) C:\Program Files (x86)\Lexmark Pro4000 Series\LMADKlscn.exe (Lexmark International, Inc. -> )
FirewallRules: [{8D8F554C-A02D-4431-8460-808590C6E6F3}] => (Allow) C:\Program Files (x86)\Lexmark Pro4000 Series\LMADKlscn.exe (Lexmark International, Inc. -> )
FirewallRules: [{1868CF6F-B5C5-4814-A53F-B05CB6FC04B1}] => (Allow) C:\Program Files (x86)\Lexmark Pro4000 Series\LMADKmon.exe (Lexmark International, Inc. -> )
FirewallRules: [{7D466813-1175-4197-BA5A-32ED5719E9C7}] => (Allow) C:\Program Files (x86)\Lexmark Pro4000 Series\LMADKmon.exe (Lexmark International, Inc. -> )
FirewallRules: [{2C8D00A2-0251-492C-B088-1D1B798F1F9B}] => (Allow) C:\Program Files (x86)\Lexmark Pro4000 Series\LMADKmon.exe (Lexmark International, Inc. -> )
FirewallRules: [{47E803FA-AD7E-45A0-8A57-28F21C5BFEC0}] => (Allow) C:\Program Files (x86)\Lexmark Pro4000 Series\LMADKmon.exe (Lexmark International, Inc. -> )
FirewallRules: [{FF32EDF2-BA17-4249-885D-1F6A19D145FA}] => (Allow) C:\Program Files (x86)\Lexmark\WirelessSetup\LMwpss.exe (Lexmark International, Inc. -> )
FirewallRules: [{87115066-788D-4B68-8B48-08F1AF57020E}] => (Allow) C:\Program Files (x86)\Lexmark\WirelessSetup\LMwpss.exe (Lexmark International, Inc. -> )
FirewallRules: [{675210AB-29A1-4232-9DA1-A5DA4161DA4A}] => (Allow) C:\Program Files (x86)\Lexmark\WirelessSetup\LMwpss.exe (Lexmark International, Inc. -> )
FirewallRules: [{774BB48F-304C-43AB-9EE2-3D4EEE20E1E3}] => (Allow) C:\Program Files (x86)\Lexmark\WirelessSetup\LMwpss.exe (Lexmark International, Inc. -> )
FirewallRules: [{FE4F1E79-2A1C-4395-A582-62819CF02ED5}] => (Allow) C:\Program Files (x86)\Lexmark\PSU\lmpsu.exe (Lexmark International, Inc. -> )
FirewallRules: [{8626FE3E-5FE1-482F-9064-0A70B514F99A}] => (Allow) C:\Program Files (x86)\Lexmark\PSU\lmpsu.exe (Lexmark International, Inc. -> )
FirewallRules: [{C6DA5F12-940C-4453-B343-DDA71ABA0256}] => (Allow) C:\Program Files (x86)\Lexmark\PSU\lmpsu.exe (Lexmark International, Inc. -> )
FirewallRules: [{5907FDE3-0F75-4376-836D-82DBEF6ABA87}] => (Allow) C:\Program Files (x86)\Lexmark\PSU\lmpsu.exe (Lexmark International, Inc. -> )
FirewallRules: [{7AA53BB4-9005-44FE-A273-FC1BD63BA702}] => (Allow) C:\Program Files\Lexmark\Status Center\lmsmc.exe (Lexmark International, Inc. -> )
FirewallRules: [{9012CCE4-4046-49AE-AAF7-30EA1A71E68C}] => (Allow) C:\Program Files\Lexmark\Status Center\lmsmc.exe (Lexmark International, Inc. -> )
FirewallRules: [{5C20B10A-0907-4BC0-9B74-ADDD7CC500CE}] => (Allow) C:\Program Files\Lexmark\Status Center\lmsmc.exe (Lexmark International, Inc. -> )
FirewallRules: [{E74942E9-043E-4DD1-AB03-BACD9C45BC46}] => (Allow) C:\Program Files\Lexmark\Status Center\lmsmc.exe (Lexmark International, Inc. -> )
FirewallRules: [{45284644-A50C-412A-BE57-91FCEB3D287D}] => (Allow) C:\Users\CHOPPER\AppData\Local\Google\Chrome SxS\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{B0B87337-3D8F-4A1E-97E3-ECE0CF66C70C}] => (Block) C:\users\chopper\appdata\local\jdownloader v2.0\jdownloader2.exe (Appwork GmbH -> AppWork GmbH)
FirewallRules: [{C2E814F2-BA05-4B7A-8F90-09EFB340D9D7}] => (Block) C:\users\chopper\appdata\local\jdownloader v2.0\jdownloader2.exe (Appwork GmbH -> AppWork GmbH)
FirewallRules: [UDP Query User{E59DBF1F-5105-4FA9-93BD-295FA6342D26}C:\users\chopper\appdata\local\jdownloader v2.0\jdownloader2.exe] => (Allow) C:\users\chopper\appdata\local\jdownloader v2.0\jdownloader2.exe (Appwork GmbH -> AppWork GmbH)
FirewallRules: [TCP Query User{424DDF5D-1EDB-4051-BC01-386BA4E94227}C:\users\chopper\appdata\local\jdownloader v2.0\jdownloader2.exe] => (Allow) C:\users\chopper\appdata\local\jdownloader v2.0\jdownloader2.exe (Appwork GmbH -> AppWork GmbH)
FirewallRules: [{C6B5DE23-DD2B-41AC-A39E-D7299391E69D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{119C0317-F4B3-4BCA-8C56-E54A8FA600F6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{9A312F6D-1063-4F26-A40B-BEFB310BA113}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{9843AB5E-3C18-4141-91A4-81745425366A}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe (CyberLink -> CyberLink)
FirewallRules: [{75C47915-4E13-4441-B5E0-72F0872D7862}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD11\PDVD11Serv.exe (CyberLink -> CyberLink Corp.)
FirewallRules: [{F8F1AC3F-E889-44D7-896C-75129B99E10C}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD11\PowerDVD11.exe (CyberLink -> CyberLink Corp.)
FirewallRules: [{06D29887-0332-4F9A-AB15-780EAF34D1A3}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD11\Movie\PowerDVD Cinema\PowerDVDCinema11.exe (CyberLink -> CyberLink Corp.)
FirewallRules: [{F7636EFC-4A4E-4726-8B85-B17C0DA68096}] => (Allow) C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe (Synology Inc. -> Synology Inc.)
FirewallRules: [{529D1095-60A1-4C3C-B410-998DA8B9FC19}] => (Allow) C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe (Synology Inc. -> Synology Inc.)
FirewallRules: [{4AD6C3E1-E717-47B4-8741-227BEE66F23D}] => (Allow) C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe (Synology Inc. -> Synology Inc.)
FirewallRules: [{CE2BF6C4-07A5-4E05-AD7C-178912C5C0FB}] => (Allow) C:\Program Files (x86)\Synology Data Replicator 3\Backup.exe (Synology Inc. -> Synology Inc.)
FirewallRules: [{80BE3EDC-11DC-4E8E-A7BB-3DC01F6D761C}] => (Block) C:\users\chopper\appdata\local\cloudstation\cloudstation.app\bin\cloud-drive-ui.exe (Synology Inc. -> Synology Inc.) [File not signed]
FirewallRules: [{35D639D9-2EDC-4C20-A7DE-5854163AB101}] => (Block) C:\users\chopper\appdata\local\cloudstation\cloudstation.app\bin\cloud-drive-ui.exe (Synology Inc. -> Synology Inc.) [File not signed]
FirewallRules: [UDP Query User{3582DF03-58B7-4CE6-9234-3048BE38E2AF}C:\users\chopper\appdata\local\cloudstation\cloudstation.app\bin\cloud-drive-ui.exe] => (Allow) C:\users\chopper\appdata\local\cloudstation\cloudstation.app\bin\cloud-drive-ui.exe (Synology Inc. -> Synology Inc.) [File not signed]
FirewallRules: [TCP Query User{F355DE75-309A-44C2-A837-61CE90F36A36}C:\users\chopper\appdata\local\cloudstation\cloudstation.app\bin\cloud-drive-ui.exe] => (Allow) C:\users\chopper\appdata\local\cloudstation\cloudstation.app\bin\cloud-drive-ui.exe (Synology Inc. -> Synology Inc.) [File not signed]
FirewallRules: [{09FC4AD5-4998-4124-914B-B9829402B6F8}] => (Block) C:\program files (x86)\kodi\kodi.exe => No File
FirewallRules: [{D9BAC0A3-EE68-4E63-8186-E7973212B881}] => (Block) C:\program files (x86)\kodi\kodi.exe => No File
FirewallRules: [UDP Query User{1907C11A-338E-424C-8DC6-11023894D1E9}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe => No File
FirewallRules: [TCP Query User{3E238C12-D7EF-49BF-AB39-021D9F81D106}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe => No File
FirewallRules: [{63190929-DB1F-45F6-BAE0-0E282F564ECC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{012AD0C5-5795-4E0D-95C1-456363DAC22C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F3CC62A0-F212-4370-B0AD-0D4ABD8155B6}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0431D6B8-9F14-4A51-B8B3-757EBCB2E17E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [UDP Query User{811CFF40-F825-40B9-979F-7607528ACE84}C:\program files (x86)\synology\assistant\dsassistant.exe] => (Allow) C:\program files (x86)\synology\assistant\dsassistant.exe (Synology Inc. -> ) [File not signed]
FirewallRules: [TCP Query User{4DD7C182-5D0D-4B48-919C-73AF2319E567}C:\program files (x86)\synology\assistant\dsassistant.exe] => (Allow) C:\program files (x86)\synology\assistant\dsassistant.exe (Synology Inc. -> ) [File not signed]
FirewallRules: [{B37CCD79-A8C0-4175-8851-6F932A87B3B9}] => (Allow) C:\Program Files (x86)\Rosetta Stone\Rosetta Stone Version 3\support\bin\win\RosettaStoneLtdServices.exe (Rosetta Stone, Ltd -> Rosetta Stone Ltd.)
FirewallRules: [{33272577-B58A-457E-A682-33D2F5532C37}] => (Allow) C:\Program Files (x86)\Rosetta Stone\Rosetta Stone Version 3\support\bin\win\RosettaStoneLtdServices.exe (Rosetta Stone, Ltd -> Rosetta Stone Ltd.)
FirewallRules: [{9A7749D1-B101-4ACA-8BB2-354FEDF6D003}] => (Allow) C:\Program Files (x86)\Rosetta Stone\Rosetta Stone Version 3\RosettaStoneVersion3.exe (Multidmedia Limited) [File not signed]
FirewallRules: [{B704FEB2-89FE-4E5D-BAF0-481DCB54CCB8}] => (Allow) C:\Program Files (x86)\Rosetta Stone\Rosetta Stone Version 3\RosettaStoneVersion3.exe (Multidmedia Limited) [File not signed]
FirewallRules: [{A2E105D0-64B0-4008-ADD6-6F20CD46EF3D}] => (Block) C:\users\chopper\appdata\local\google\chrome sxs\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{5C8DDE5A-B57C-4774-8611-60DD31739B81}] => (Block) C:\users\chopper\appdata\local\google\chrome sxs\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [UDP Query User{6ECDB0AE-5E08-4D21-8315-281EC00E8BF6}C:\users\chopper\appdata\local\google\chrome sxs\application\chrome.exe] => (Allow) C:\users\chopper\appdata\local\google\chrome sxs\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{3CADD8FB-146C-4643-9113-4F59416BCCB0}C:\users\chopper\appdata\local\google\chrome sxs\application\chrome.exe] => (Allow) C:\users\chopper\appdata\local\google\chrome sxs\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{E39BB12D-B621-4EB9-A2AE-D1368321EA35}] => (Block) C:\program files (x86)\spybot - search & destroy 2\sdupdate.exe (Safer Networking Ltd. -> Safer-Networking Ltd.)
FirewallRules: [{D28CEF7F-B3FA-4C50-BFDA-5A8944911EB4}] => (Block) C:\program files (x86)\spybot - search & destroy 2\sdupdate.exe (Safer Networking Ltd. -> Safer-Networking Ltd.)
FirewallRules: [UDP Query User{2442CA31-0268-4295-AFDF-4E0A0CFD721C}C:\program files (x86)\spybot - search & destroy 2\sdupdate.exe] => (Allow) C:\program files (x86)\spybot - search & destroy 2\sdupdate.exe (Safer Networking Ltd. -> Safer-Networking Ltd.)
FirewallRules: [TCP Query User{0BCD3654-2EF2-4D8C-BAF4-8B58CE52FFDC}C:\program files (x86)\spybot - search & destroy 2\sdupdate.exe] => (Allow) C:\program files (x86)\spybot - search & destroy 2\sdupdate.exe (Safer Networking Ltd. -> Safer-Networking Ltd.)
FirewallRules: [{3F346F8A-00BA-4446-B78C-D70ACB25EEEA}] => (Allow) C:\Users\CHOPPER\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox -> Dropbox, Inc.)
FirewallRules: [{10A3B919-2765-4170-A742-10A3D03A5099}] => (Allow) C:\Users\CHOPPER\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox -> Dropbox, Inc.)
FirewallRules: [{46C31DBA-37BD-477B-8325-09016D7B7EDB}] => (Allow) C:\Users\CHOPPER\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox -> Dropbox, Inc.)
FirewallRules: [{1E838E35-FA04-4C68-8964-5FB4AEBFB6E3}] => (Allow) C:\Users\CHOPPER\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox -> Dropbox, Inc.)
FirewallRules: [{014DBD31-5A1E-4855-A924-2AAD9D4921D7}] => (Allow) C:\Program Files (x86)\Google\Google Talk\googletalk.exe (Google) [File not signed]
FirewallRules: [{54166D14-584B-423F-931E-7B7773753D86}] => (Allow) C:\Program Files (x86)\Google\Google Talk\googletalk.exe (Google) [File not signed]
FirewallRules: [{5F646A4B-A1B6-4816-845E-9DA103DC74CD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{EEC5677F-0250-4AED-9B1E-93F8C8B3354C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{8F50AC9A-A475-4ECB-9FED-8EBEEBC8B004}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{28910D19-8E87-49B8-B642-347FF224CF6A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{588CACBA-049E-46B8-9F6A-327844AA01A8}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{C8FBFF94-5C69-4939-929C-1A5517CFF6A8}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{7E5E9716-1E9E-4811-AE70-529B291F9B6A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{9C1854D0-5715-4956-8728-92553F9F25C5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{3BBB6131-E266-4742-8B67-CD52DF4E2EF6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{5E731681-34FF-4A64-8582-2CC06C73B147}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{2B439374-380F-4835-9835-DEBA4350B28F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{676935A0-4A0A-41D1-B22C-6D956FF16C5E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{39170125-8777-41FE-B670-3E5BE482977C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{1A2FB057-E988-48E1-8B2E-C393492B5853}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{372EFE54-0CA2-4F55-8592-23AEA03CF748}] => (Block) C:\program files (x86)\spybot - search & destroy 2\sdfiles.exe (Safer Networking Ltd. -> Safer-Networking Ltd.)
FirewallRules: [{BE427785-0385-43DC-9B8C-C4E19CC2643B}] => (Block) C:\program files (x86)\spybot - search & destroy 2\sdfiles.exe (Safer Networking Ltd. -> Safer-Networking Ltd.)
FirewallRules: [UDP Query User{450771BC-32F1-42A2-95CB-8BF138F09459}C:\program files (x86)\spybot - search & destroy 2\sdfiles.exe] => (Allow) C:\program files (x86)\spybot - search & destroy 2\sdfiles.exe (Safer Networking Ltd. -> Safer-Networking Ltd.)
FirewallRules: [TCP Query User{34414784-203C-4352-9069-264A94FAE277}C:\program files (x86)\spybot - search & destroy 2\sdfiles.exe] => (Allow) C:\program files (x86)\spybot - search & destroy 2\sdfiles.exe (Safer Networking Ltd. -> Safer-Networking Ltd.)
FirewallRules: [{1598EA29-14B1-46BB-819C-291340CFC6EA}] => (Allow) LPort=6130
FirewallRules: [{5C37D5CB-6921-47E7-B65A-4D0AAA7C6A37}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{D2F09D9C-A19E-40FE-BCF9-69B03D9CC08A}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{19568A6A-CC86-443D-93DA-D97026D6F1E6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{29069865-4BA3-4246-A0D1-BDC6AD54B9D1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{D6761F66-F98A-459C-92CC-E220BEB22ECA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{C87B16FF-442E-44B1-842C-E21236DEB9A2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{508BDE7E-8118-48D7-AA29-E42458D75DB0}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe (Hewlett-Packard Company -> Hewlett-Packard)
FirewallRules: [{4C4983E4-C956-4DD3-A55E-A67773F3A4C8}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{3149B11B-6CE2-4F22-B282-CA05EF3EC418}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{B4E47645-EE10-4413-A4C0-951D3E35302B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{38E069D6-BB8A-4627-BF7F-1E6913651326}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{D052A9AE-4D83-4E12-AC5C-DAA718D72C2E}F:\quake3\quake3.exe] => (Allow) F:\quake3\quake3.exe => No File
FirewallRules: [UDP Query User{D45E29CC-E5F2-483D-B671-941BFEE715A7}F:\quake3\quake3.exe] => (Allow) F:\quake3\quake3.exe => No File
FirewallRules: [{5A99927B-FFE5-42E9-95B2-C46C2D3A3451}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe (devolo AG -> devolo AG)
FirewallRules: [{77B9EEA9-C7EC-437E-9C69-8DCF23838FDB}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe (devolo AG -> devolo AG)
FirewallRules: [{F828D57E-C1B7-45A8-8622-9881E8103E88}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{24121877-C264-4EAC-B2E4-92D422B8838E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{737E8AFA-A716-4597-91D3-3A4AA3EE4CA3}] => (Allow) C:\Program Files (x86)\Google\Chrome Remote Desktop\84.0.4147.39\remoting_host.exe (Google LLC -> Google Inc.)
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot-S&D 2 Tray Icon
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
==================== Restore Points =========================
08-07-2020 13:20:24 Windows Backup
==================== Faulty Device Manager Devices ============
Name: TAP-Windows Adapter V9
Description: TAP-Windows Adapter V9
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Windows Provider V9
Service: tap0901
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: TAP-VyprVPN Adapter V9
Description: TAP-VyprVPN Adapter V9
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-VyprVPN Provider V9
Service: tapvyprvpn
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Standard PS/2 Keyboard
Description: Standard PS/2 Keyboard
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard keyboards)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: ========================
Application errors:
==================
Error: (07/08/2020 07:47:54 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (13764,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (07/08/2020 05:58:25 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (15560,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (07/08/2020 05:18:07 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (12268,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (07/08/2020 04:15:24 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (23268,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (07/08/2020 03:24:10 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (15752,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (07/08/2020 03:14:16 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (21712,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (07/08/2020 03:01:51 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (20200,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (07/08/2020 02:18:07 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (23284,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
System errors:
=============
Error: (07/08/2020 07:41:43 PM) (Source: DCOM) (EventID: 10010) (User: OFFICE-PC-01)
Description: The server Microsoft.MicrosoftOfficeHub_18.2005.1191.0_x64__8wekyb3d8bbwe!Microsoft.MicrosoftOfficeHub.AppXt4mh7c9swwc5cmd5jgmtmwcfmvkddpn1.mca did not register with DCOM within the required timeout.
Error: (07/08/2020 07:41:43 PM) (Source: DCOM) (EventID: 10010) (User: OFFICE-PC-01)
Description: The server Microsoft.OneConnect_5.2006.1691.0_x64__8wekyb3d8bbwe!App.AppXe8pdgw5syxe8pgccbk3mcn5hanwamr0e.mca did not register with DCOM within the required timeout.
Error: (07/08/2020 07:41:42 PM) (Source: DCOM) (EventID: 10010) (User: OFFICE-PC-01)
Description: The server Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe!App.AppXsdjy3vfbpyyren487rr1k4k8g5t1k844.mca did not register with DCOM within the required timeout.
Error: (07/07/2020 08:34:02 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80073d02: 9NMPJ99VJBWV-Microsoft.YourPhone.
Error: (07/07/2020 02:49:38 PM) (Source: DCOM) (EventID: 10010) (User: OFFICE-PC-01)
Description: The server microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe!microsoft.windowslive.calendar.AppXwkn9j84yh1kvnt49k5r8h6y1ecsv09hs.mca did not register with DCOM within the required timeout.
Error: (07/05/2020 10:49:07 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80073d02: 9NMPJ99VJBWV-Microsoft.YourPhone.
Error: (07/05/2020 04:06:17 AM) (Source: volsnap) (EventID: 36) (User: )
Description: The shadow copies of volume 😄 were aborted because the shadow copy storage could not grow due to a user imposed limit.
Error: (07/04/2020 08:06:08 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80073d02: 9NMPJ99VJBWV-Microsoft.YourPhone.
Windows Defender:
===================================
Date: 2020-05-27 15:09:00.344
Description:
Windows Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.285.74.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.15600.4
Error code: 0x8007045b
Error description: A system shutdown is in progress.
Date: 2020-05-27 02:09:17.439
Description:
Windows Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.285.74.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.15600.4
Error code: 0x8007045b
Error description: A system shutdown is in progress.
Date: 2020-05-14 23:40:09.539
Description:
Windows Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.285.74.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.15600.4
Error code: 0x8007045b
Error description: A system shutdown is in progress.
Date: 2020-05-13 13:51:21.066
Description:
Windows Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.285.74.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.15600.4
Error code: 0x80072ee7
Error description: The server name or address could not be resolved
Date: 2020-05-13 13:51:21.066
Description:
Windows Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.285.74.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiSpyware
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.15600.4
Error code: 0x80072ee7
Error description: The server name or address could not be resolved
CodeIntegrity:
===================================
Date: 2020-07-04 21:50:11.210
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.
Date: 2020-07-04 21:50:11.192
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
Date: 2020-07-04 21:50:11.167
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.
Date: 2020-07-04 21:50:11.073
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.
Date: 2020-07-04 21:50:11.067
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
Date: 2020-07-04 21:50:11.057
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.
Date: 2020-07-04 21:50:10.234
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.
Date: 2020-07-04 21:50:10.093
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume1\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. V3.10 04/01/2015
Motherboard: MSI B85-G43 (MS-7816)
Processor: Intel(R) Core(TM) i5-4570 CPU @ 3.20GHz
Percentage of memory in use: 45%
Total physical RAM: 24500.5 MB
Available physical RAM: 13459.26 MB
Total Virtual: 49076.5 MB
Available Virtual: 33960.08 MB
==================== Drives ================================
Drive 😄 (SSD OS & Programs) (Fixed) (Total:465.19 GB) (Free:31.51 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: (DataMusaePhotoMovie3DropboxBakup) (Fixed) (Total:465.76 GB) (Free:0.15 GB) NTFS
Drive e: (Movies1) (Fixed) (Total:465.76 GB) (Free:143.56 GB) NTFS
Drive g: (DocsDownloadsMovies2) (Fixed) (Total:465.76 GB) (Free:82.73 GB) NTFS
\\?\Volume{629458e4-0000-0000-0000-010000000000}\ (PortableBaseLayer) (Fixed) (Total:8 GB) (Free:7.6 GB) NTFS
\\?\Volume{61bfa10f-0000-0000-0000-304c74000000}\ () (Fixed) (Total:0.57 GB) (Free:0.08 GB) NTFS
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 61BFA10F)
Partition 1: (Active) - (Size=465.2 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=582 MB) - (Type=27)
==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 0CCE0B3E)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)
==========================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 0099377C)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)
==========================================================
Disk: 3 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: E98324C8)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)
==========================================================
Disk: 4 (MBR Code: Windows 7/8/10) (Size: 8 GB) (Disk ID: 629458E4)
Partition 1: (Not Active) - (Size=8 GB) - (Type=07 NTFS)
==================== End of Addition.txt =======================
Can you please assist further?
Thanks
Ian
