Losing wired connectivity. Can allowing Port 9009 be causing this???

justpassinthru2k · May 6, 2021

I have been having an issue with my Windows 10 64 bit self built machine where by I loose wired network connectivity. I get the error "Gateway resolution failed on interface {8de9a8e7-50f1-4266-944b-668ac50effe5} for 192.168.1.1 with error: 0x43" and I am forced to bounce my Optimum wireless router and modem to get back connectivity. This issue does not present itself if connected wirelessly not does it affect TV or Telephone. I began poking around my firewall settings and noticed MANY inbound rules allowing port 9009. Could this be allowing something into my private network causing my issue? If you think the fix to my issue is something else, please share. This is driving me and my wife nuts because she works from home and bouncing the network causes her to lose a video conference or such. Thank you in advance.

Ray

Malwarebytes · May 6, 2021

This is an automated reply

Hi,

Thanks for posting in the Malwarebytes for Windows Help forum.

If you are having technical issues with our Windows product, please do the following:

Malwarebytes Support Tool - Advanced Options

This feature is designed for the following reasons:

For use when you are on the forums and need to provide logs for assistance
For use when you don't need or want to create a ticket with Malwarebytes
For use when you want to perform local troubleshooting on your own

How to use the Advanced Options:

Spoiler

Download Malwarebytes Support Tool
Double-click mb-support-X.X.X.XXXX.exe to run the program
- You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
Place a checkmark next to Accept License Agreement and click Next
Navigate to the Advanced tab
The Advanced menu page contains four categories:
- Gather Logs: Collects troubleshooting information from the computer. As part of this process, Farbar Recovery Scan Tool (FRST) is run to perform a complete diagnosis. The information is saved to a file on the Desktop named mbst-grab-results.zip and can be added as an email attachment or uploaded to a forum post to assist with troubleshooting the issue at hand.
- Clean: Performs an automated uninstallation of all Malwarebytes products installed to the computer and prompts to install the latest version of Malwarebytes for Windows afterwards. The Premium license key is backed up and reinstated. All user configurations and other data are removed. This process requires a reboot.
- Repair System: Includes various system-related repairs in case a Windows service is not functioning correctly that Malwarebytes for Windows is dependent on. It is not recommended to use any Repair System options unless instructed by a Malwarebytes Support agent.
- Anonymously help the community by providing usage and threat statistics: Unchecking this option will prevent Malwarebytes Support Tool from sending anonymous telemetry data on usage of the program.
To provide logs for review click the Gather Logs button
Upon completion, click OK
A file named mbst-grab-results.zip will be saved to your Desktop
Please attach the file in your next reply.
To uninstall all Malwarebytes Products, click the Clean button.
Click the Yes button to proceed.
Save all your work and click OK when you are ready to reboot.
After the reboot, you will have the option to re-install the latest version of Malwarebytes for Windows.
Select Yes to install Malwarebytes.
Malwarebytes for Windows will open once the installation completes successfully.

Screenshots:

Spoiler

If you are having licensing issues, please do the following:

Spoiler

For any of these issues:

Renewals
Refunds (including double billing)
Cancellations
Update Billing Info
Multiple Transactions
Consumer Purchases
Transaction Receipt

Please contact our support team at https://support.malwarebytes.com/hc/en-us/requests/new to get help

If you need help looking up your license details, please head here: Find my premium license key

Thanks in advance for your patience.

-The Malwarebytes Forum Team

Porthos · May 6, 2021

:welcome:

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system.
You can check here if you're not sure if your computer is 32-bit or 64-bit

Double-click to run it. When the tool opens click Yes to disclaimer.
Press the Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
The first time the tool is run, it also makes another log (Addition.txt). Please attach it to your reply as well.

Thank you

justpassinthru2k · May 6, 2021

Attached please find requested FRST.TXT and ADDITION.TXT

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28-04-2021
Ran by Ray (administrator) on WINDOWS10 (Gigabyte Technology Co., Ltd. Z270P-D3) (06-05-2021 14:04:55)
Running from C:\Users\Ray\Desktop\BLEEPING
Loaded Profiles: Ray
Platform: Windows 10 Pro Version 20H2 19042.928 (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() [File not signed] C:\Program Files (x86)\GIGABYTE\AppCenter\AdjustService.exe
(ABBYY SOLUTIONS LIMITED -> ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
(CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\EBCClient.exe
(CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe
(CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\Loader.exe
(CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe <8>
(CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) D:\Program Files (x86)\EaseUS\Todo Backup\bin\AutoUpdate.exe
(Chongqing Yifei Technology Co., Ltd. -> Efficient Software) D:\Program Files (x86)\Efficient Reminder Free\EfficientReminderFree.exe
(Cisco WebEx LLC -> Cisco Webex LLC) C:\Users\Ray\AppData\Local\WebEx\ciscowebexstart.exe
(Cisco WebEx LLC -> Cisco Webex LLC) C:\Users\Ray\AppData\Local\WebEx\WebEx\Meetings\atmgr.exe
(Discord Inc. -> Discord Inc.) C:\Users\Ray\AppData\Local\Discord\app-1.0.9001\Discord.exe <6>
(Evernote Corporation -> Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) D:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(GIGA-BYTE TECHNOLOGY CO., LTD. -> ) C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe
(GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe
(GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\GraphicsCardEngine.exe
(GIGA-BYTE TECHNOLOGY CO., LTD. -> Microsoft) C:\Program Files (x86)\GIGABYTE\GService\GCloud.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <78>
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intuit, Inc. -> Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\MKCHelper.exe
(Microsoft Corporation -> Microsoft Corporation) D:\Program Files (x86)\Microsoft Office\OFFICE11\WINWORD.EXE
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12104.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vds.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.7-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.7-0\NisSrv.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(Paramount Software UK Ltd -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\MacriumService.exe
(Paramount Software UK Ltd -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\ReflectMonitor.exe
(Paramount Software UK Ltd -> Paramount Software UK Ltd) C:\Program Files\Macrium\Common\ReflectUI.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Download Navigator\EPSDNMON.EXE
(SEIKO EPSON Corporation -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIIUE.EXE <2>
(SurfRight B.V. -> SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.4.3.225\WsAppService.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-01-07] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [856288 2019-10-30] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [321112 2019-07-29] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [Reflect UI] => C:\Program Files\Macrium\Common\ReflectUI.exe [7580488 2021-04-30] (Paramount Software UK Ltd -> Paramount Software UK Ltd)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [340440 2021-04-16] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => D:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [37232 2008-06-12] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => D:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3500056 2017-11-01] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058400 2012-01-26] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502912 2012-02-29] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863360 2012-02-29] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
HKLM-x32\...\RunOnce: [PreRun] => C:\Program Files (x86)\GIGABYTE\AppCenter\PreRun.exe [14632 2016-02-26] (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\Run: [Adobe Acrobat Synchronizer] => D:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\AdobeCollabSync.exe [763416 2017-11-01] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [33698888 2021-04-22] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\Run: [CiscoMeetingDaemon] => C:\Users\Ray\AppData\Local\WebEx\ciscowebexstart.exe [2841816 2021-04-16] (Cisco WebEx LLC -> Cisco Webex LLC)
HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\Run: [Discord] => C:\Users\Ray\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub)
HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\Run: [EPLTarget\P0000000000000001] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIIUE.EXE [283232 2012-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIIUE.EXE [283232 2012-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\Run: [EPSDNMON] => C:\Program Files (x86)\Epson Software\Download Navigator\EPSDNMON.EXE [346712 2020-07-27] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-1518913155-1093821880-4198188267-1003\...\RunOnce: [Application Restart #0] => C:\Program Files\Macrium\Common\ReflectUI.exe [7580488 2021-04-30] (Paramount Software UK Ltd -> Paramount Software UK Ltd)
HKU\S-1-5-21-1518913155-1093821880-4198188267-1003\...\RunOnce: [Application Restart #1] => C:\Program Files\Macrium\Common\ReflectMonitor.exe [26096528 2021-04-30] (Paramount Software UK Ltd -> Paramount Software UK Ltd)
HKU\S-1-5-21-1518913155-1093821880-4198188267-1003\...\RunOnce: [Application Restart #2] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --restore-last-session
HKLM\...\Windows x64\Print Processors\HP1100PrintProc: C:\Windows\System32\spool\prtprocs\x64\HP1100PP.DLL [74240 2010-10-14] () [File not signed]
HKLM\...\Windows x64\Print Processors\hpzpplhn: C:\Windows\System32\spool\prtprocs\x64\hpzpplhn.dll [109288 2018-10-12] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\system32\AdobePDF.dll [55432 2012-09-23] (Adobe Systems, Incorporated -> Adobe Systems Inc)
HKLM\...\Print\Monitors\EPSON WF-2540 Series 64MonitorBE: C:\Windows\system32\E_YLMIUE.DLL [120320 2011-04-19] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\Windows\system32\enppmon.dll [558080 2011-08-30] (SEIKO EPSON CORPORATION) [File not signed]
HKLM\...\Print\Monitors\HP1100LM: HP1100LM.DLL
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\90.0.4430.93\Installer\chrmstp.exe [2021-04-26] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{052EB454-9F19-CB42-7875-807F79F311C4}] -> "C:\Program Files (x86)\CCleaner Browser\Application\80.0.3625.135\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{73FA19D0-2D75-11D2-995D-00C04F98BBC9}] ->
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.exe.lnk [2019-02-01]
ShortcutTarget: Adobe Gamma Loader.exe.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) [File not signed]
Startup: C:\Users\Ray\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Efficient Reminder Free.lnk [2021-03-26]
ShortcutTarget: Efficient Reminder Free.lnk -> D:\Program Files (x86)\Efficient Reminder Free\EfficientReminderFree.exe (Chongqing Yifei Technology Co., Ltd. -> Efficient Software)
Startup: C:\Users\Ray\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2019-01-10]
ShortcutTarget: EvernoteClipper.lnk -> D:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corporation -> Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {06ACA499-0294-4D0A-9FED-8500F48A37B8} - System32\Tasks\Microsoft_MKC_Logon_Task_ceip.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ceip.exe [32696 2019-11-15] (Microsoft Corporation -> Microsoft)
Task: {0C1F18D0-C8A8-49A3-A65B-606470761594} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2646152 2019-11-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {1CD14ECB-4BE6-4DC8-83E3-AA362DC05BD5} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\Windows\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs"
Task: {530051EB-9D51-4C50-BA5C-4B463C606D40} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [28082760 2021-04-22] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {5342A13A-6024-4C40-B390-D71338DDF4D0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2019-01-10] (Google Inc -> Google Inc.)
Task: {5363DC7B-F1D6-4715-A0E9-E4E629A619D8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.7-0\MpCmdRun.exe [566368 2021-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5C1A6FD8-DC57-4ACB-8F18-F9FB06BFF765} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [668464 2017-02-24] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {5F8E1491-3843-4294-A002-4533C85044A1} - System32\Tasks\Weekly Backup => D:\Program Files (x86)\EaseUS\Todo Backup\bin\Loader.exe [641680 2018-10-10] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed]
Task: {62A92EDD-10F9-4610-8B2B-00F1325C8E33} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18168 2017-07-13] (Intel(R) Software Asset Manager -> Intel Corporation)
Task: {675D7610-D492-45D0-9AEF-0E97A23282F5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.7-0\MpCmdRun.exe [566368 2021-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {69A13CD6-3AC1-4C27-B3CA-80955C9D9A0B} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906480 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {786D677C-7DE5-46D1-9994-FA96D00E72EB} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2646152 2019-11-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {7B675E09-CE28-4E55-93AF-C0A8B617EE10} - System32\Tasks\BlueStacksHelper => C:\ProgramData\BlueStacks\Client\Helper\BlueStacksHelper.exe [752136 2020-10-16] (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
Task: {7C38819B-37CC-4412-9BDC-337DE8184876} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
Task: {8961B8A3-B9E5-42DE-B6D0-239235DD7AA8} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616832 2019-09-04] (Apple Inc. -> Apple Inc.)
Task: {8CAC8CC9-3865-4AE6-B1E0-7F197848482D} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe
Task: {8EF2A1A1-D813-447D-B59B-A749D2D13E09} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-04-22] (Piriform Software Ltd -> Piriform)
Task: {95E7603E-9166-434B-91D2-0BC8A2DDC7E6} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1195544 2018-12-16] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Task: {9AD22EE2-B52F-45C8-B471-492866E3913B} - System32\Tasks\Backup Daily => D:\Program Files (x86)\EaseUS\Todo Backup\bin\Loader.exe [641680 2018-10-10] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed]
Task: {A4FF33AB-F2B0-4A3A-BB06-7FC5E60BC6DF} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {A596D541-6ADE-4875-A3E1-D5D78DB1208A} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2043016 2019-11-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {AA4AC6AF-1B67-44FA-9B2D-2985CBE8FF4F} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2043016 2019-11-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {BE8F6545-E32A-4EC2-88DF-2A15D885A000} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2019-01-10] (Google Inc -> Google Inc.)
Task: {C011DF74-0057-4D78-A9F0-D84C5EACC608} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2177464 2019-11-15] (Microsoft Corporation -> Microsoft)
Task: {C09C789D-9FFE-44AA-BABA-E16566918EED} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18168 2017-07-13] (Intel(R) Software Asset Manager -> Intel Corporation)
Task: {CC58EBE7-2EF8-44C5-ABA2-BF0F2A1B90D5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.7-0\MpCmdRun.exe [566368 2021-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DDD5671F-7F2E-4194-834B-0F67FC740E4B} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {F6098BF0-90ED-4492-9044-44877C877AB8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.7-0\MpCmdRun.exe [566368 2021-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FBA3EA31-21FD-4730-B465-13D1A040566B} - System32\Tasks\GraphicsCardEngine => C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\GraphicsCardEngineStarter.exe [232880 2018-09-10] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
Task: {FC82C83A-716F-4309-9030-2AD4AD0EE34B} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906480 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FCABE7A8-EFB1-446D-995C-E873B36A908B} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe [3047944 2020-10-12] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{34595ff9-ac77-42e7-ad0e-58cb9ff0df3f}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{8de9a8e7-50f1-4266-944b-668ac50effe5}: [DhcpNameServer] 192.168.1.1

Edge:
=======
DownloadDir: C:\Users\Ray\Downloads
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Ray\AppData\Local\Microsoft\Edge\User Data\Default [2021-05-05]
Edge DownloadDir: C:\Users\Ray\Downloads

FireFox:
========
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - D:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - D:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2017-11-01]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - D:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: (E-Web Print) - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2019-08-24] [Legacy] [not signed]
FF Plugin: @videolan.org/vlc,version=3.0.10 -> d:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> d:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> d:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> d:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> d:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> d:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-07-29] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: Adobe Acrobat -> D:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2017-11-01] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-07-29] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin HKU\S-1-5-21-1518913155-1093821880-4198188267-1002: tdameritrade.com/thinkorswim -> C:\Program Files\thinkorswim\npthinkorswim.dll [2021-05-04] (TD Ameritrade -> TD Ameritrade)
FF Plugin HKU\S-1-5-21-1518913155-1093821880-4198188267-1002: tdameritrade.com/tossc -> C:\Program Files\thinkorswim\nptossc.dll [2021-05-04] (TD Ameritrade -> TD Ameritrade)

Chrome:
=======
CHR Profile: C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default [2021-05-06]
CHR Notifications: Default -> hxxps://employermatchonline.com; hxxps://forums.wyzecam.com; hxxps://patch.com; hxxps://racingnews.co; hxxps://surveydeet.com; hxxps://topcaptchasolver.com; hxxps://update.easeus.com; hxxps://www.123greetings.com; hxxps://www.allrecipes.com; hxxps://www.bestbuy.com; hxxps://www.bestdeals.today; hxxps://www.bestreviews.guide; hxxps://www.bulksupplements.com; hxxps://www.easeus.com; hxxps://www.facebook.com; hxxps://www.intelius.com; hxxps://www.lightinthebox.com; hxxps://www.marketbeat.com; hxxps://www.mdxers.org; hxxps://www.menuwithprice.com; hxxps://www.netflix.com; hxxps://www.newsbreak.com; hxxps://www.newsday.com; hxxps://www.nola.com; hxxps://www.nydailynews.com; hxxps://www.reddit.com; hxxps://www.spokeo.com; hxxps://www.truthfinder.com; hxxps://www.us.hsbc.com; hxxps://www.youtube.com
CHR HomePage: Default -> hxxps://www.google.com/
CHR StartupUrls: Default -> "hxxps://www.google.com/","hxxps://www.google.com/"
CHR DefaultSearchURL: Default -> hxxps://duckduckgo.com/?q={searchTerms}
CHR DefaultSearchKeyword: Default -> duckduckgo.com
CHR DefaultSuggestURL: Default -> hxxps://duckduckgo.com/ac/?q={searchTerms}&type=list
CHR Session Restore: Default -> is enabled.
CHR Extension: (TV) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\beobeededemalmllhkmnkinmfembdimh [2021-01-11]
CHR Extension: (DuckDuckGo) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkdgflcldnnnapblkhphbgpggdiikppg [2021-05-06]
CHR Extension: (Honey) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj [2021-04-29]
CHR Extension: (eBay) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnadbgmffcofipfljniafanjcafjlbom [2021-01-11]
CHR Extension: (Rakuten: Get Cash Back For Shopping) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\chhjbpecpncaggjpdakmflnfcopglcmi [2021-04-29]
CHR Extension: (Stylus) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\clngdbkpkpeebahjckkjfobafhncgmne [2021-03-01]
CHR Extension: (Logitech Smooth Scrolling) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2021-01-11]
CHR Extension: (iCloud Bookmarks) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkepacicchenbjecpbpbclokcabebhah [2021-01-11]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2021-05-06]
CHR Extension: (Flash Control) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\hloblpeplfiajnfdengendhdnpmdgagn [2021-01-11]
CHR Extension: (Google Play Music) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\icppfcnhkcmnfdhfhphakoifcfokfdhg [2021-01-11]
CHR Extension: (RetailMeNot Deal Finder™️) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjfblogammkiefalfpafidabbnamoknm [2021-04-29]
CHR Extension: (Slickdeals: Automatic Coupons and Deals) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpdapbcmfllbpojmkefcikllfeoahglb [2021-04-25]
CHR Extension: (Google Hangouts) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\knipolnnllmklapflnccelgolnpehhpl [2021-01-11]
CHR Extension: (Until AM Web App) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\kodigjkcpaoeodlnmcnekemakpnmegnk [2021-01-11]
CHR Extension: (Webcam Toy) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfbgimoladefibpklnfmkpknadbklade [2021-01-11]
CHR Extension: (Planner 5D - Interior Design) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcafejemebbngbglfoinpoaannbihjna [2021-01-11]
CHR Extension: (Rain Alarm) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\meaikaglpfemjncbioflellmppndgmok [2021-01-11]
CHR Extension: (Guitar Chords) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\megglpjmadjmghjegnallnhiknjnnjhh [2021-01-11]
CHR Extension: (Google Hangouts) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2021-01-11]
CHR Extension: (Capital One Shopping: Save in seconds) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\nenlahapcbofgnanklpelkaejcehkggg [2021-04-30]
CHR Extension: (OneDrive) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\nffchahhjecejoiigmnhhicpoabngedk [2021-01-11]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-30]
CHR Extension: (Ultimate Mp3 Music Search) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\pddlnfginfgejmncfhgljdddjlhhedmp [2021-01-11]
CHR Extension: (Gmail) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-01-11]
CHR Extension: (Chrome Media Router) - C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-04-29]
CHR Profile: C:\Users\Ray\AppData\Local\Google\Chrome\User Data\Guest Profile [2021-04-13]
CHR Profile: C:\Users\Ray\AppData\Local\Google\Chrome\User Data\System Profile [2021-04-13]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - D:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2017-11-01]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY SOLUTIONS LIMITED -> ABBYY)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [83984 2018-12-16] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3780296 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3548360 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [99104 2021-03-16] (Apple Inc. -> Apple Inc.)
R2 EaseUS Agent; D:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [40080 2018-10-10] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed]
R2 EasyTuneEngineService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe [142792 2018-10-19] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 EBC Client; D:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\EBCClient.exe [93328 2018-10-10] (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed]
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (SEIKO EPSON Corporation -> Seiko Epson Corporation)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2019-03-03] (Macrovision Corporation -> Macrovision Europe Ltd.) [File not signed]
S3 FvSvc; C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe [410864 2021-01-24] (NVIDIA Corporation -> NVIDIA)
R2 gadjservice; C:\Program Files (x86)\GIGABYTE\AppCenter\AdjustService.exe [17920 2015-06-25] () [File not signed]
R2 Gservice; C:\Program Files (x86)\GIGABYTE\GService\GCloud.exe [19888 2016-12-02] (GIGA-BYTE TECHNOLOGY CO., LTD. -> Microsoft)
R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [151496 2021-04-14] (SurfRight B.V. -> SurfRight B.V.)
S2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [136704 2009-06-24] (HP) [File not signed]
R2 MacriumService; C:\Program Files\Macrium\Common\MacriumService.exe [8929608 2021-04-30] (Paramount Software UK Ltd -> Paramount Software UK Ltd)
S2 OcButtonService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\OcButtonService.exe [123824 2018-09-10] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [69864 2018-10-12] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5361256 2021-04-13] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.7-0\NisSrv.exe [2624104 2021-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.7-0\MsMpEng.exe [128376 2021-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.225\WsAppService.exe [473824 2017-05-05] (Wondershare Technology Co.,Ltd -> Wondershare)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R2 BlueStacksDrv; C:\Program Files\BlueStacks\BstkDrv_bgp.sys [315976 2020-10-04] (Bluestack Systems, Inc -> Bluestack System Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [146856 2015-03-10] (BoiseTest -> Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [21928 2015-03-10] (BoiseTest -> Windows (R) Win 7 DDK provider)
S3 dot4usb; C:\WINDOWS\system32\DRIVERS\dot4usb.sys [43944 2015-03-10] (BoiseTest -> Microsoft Corporation)
R0 EUBAKUP; C:\WINDOWS\System32\drivers\eubakup.sys [73448 2018-10-08] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd)
S3 EUBAKUP0; C:\Windows\system32\drivers\EUBAKUP0.sys [73448 2018-10-08] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd)
R0 EUBKMON; C:\WINDOWS\System32\drivers\EUBKMON.sys [53504 2018-10-08] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 EUBKMON0; C:\Windows\system32\drivers\EUBKMON0.sys [53504 2018-10-08] (Microsoft Windows Hardware Compatibility Publisher -> )
R1 EUDSKACS; C:\Windows\system32\drivers\eudskacs.sys [22784 2018-10-08] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd)
R1 EUFDDISK; C:\Windows\system32\drivers\EuFdDisk.sys [341760 2018-10-08] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd)
S3 EUFDDISK0; C:\Windows\system32\drivers\EUFDDISK0.sys [341760 2018-10-08] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd)
S3 EuFdMount; d:\Program Files (x86)\EaseUS\Todo Backup\drv\EuFdMount.sys [21760 2018-10-08] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd)
S3 gdrv; C:\Windows\gdrv.sys [26192 2020-07-29] (Giga-Byte Technology -> Windows (R) Server 2003 DDK provider)
R3 gdrv2; C:\Windows\gdrv2.sys [32600 2021-01-27] (GIGA-BYTE Technology Co., Ltd. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R3 LifeCamTrueColor; C:\WINDOWS\system32\DRIVERS\LifeCamTrueColor.sys [37928 2016-07-27] (Microsoft Corporation -> Microsoft Corporation)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [216056 2020-07-05] (Malwarebytes Inc -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-07-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-07-16] (Malwarebytes Inc -> Malwarebytes)
R3 MpKsl877aee9f; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{F7F0A98E-EC4C-46FE-AE4F-5C3F66022ED3}\MpKslDrv.sys [107744 2021-05-06] (Microsoft Windows -> Microsoft Corporation)
S3 mvusbews; C:\WINDOWS\System32\Drivers\mvusbews.sys [20480 2010-10-14] (Microsoft Windows Hardware Compatibility Publisher -> Marvell Semiconductor, Inc.)
S3 Netaapl; C:\WINDOWS\System32\drivers\netaapl64.sys [32352 2017-11-28] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2019-11-08] (MiniTool Solution Ltd -> )
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2019-11-08] (MiniTool Solution Ltd -> )
S3 RtNdPt640; C:\WINDOWS\system32\DRIVERS\RtNdPt640.sys [58152 2019-05-22] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
S3 RTTEAMPT640; C:\WINDOWS\system32\DRIVERS\RtTeam640.sys [80168 2019-05-22] (Realtek Semiconductor Corp. -> Realtek Corporation)
S3 RTVLANPT640; C:\WINDOWS\system32\DRIVERS\RtVlan640.sys [55592 2019-05-22] (Realtek Semiconductor Corp. -> Realtek Corporation)
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2015-11-05] (Apple, Inc.) [File not signed]
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49560 2021-04-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [421088 2021-04-11] (Microsoft Windows -> Microsoft Corporation)
S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [151184 2016-07-15] (NGO -> MBB)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [72928 2021-04-11] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-05-06 11:40 - 2021-05-06 11:40 - 000000000 ____D C:\Users\Ray\AppData\Local\Apple Inc
2021-05-04 18:04 - 2021-05-04 18:04 - 000000000 ____D C:\Users\Ray\Documents\Zoom
2021-05-04 18:04 - 2021-05-04 18:04 - 000000000 ____D C:\Users\Ray\AppData\Roaming\Zoom
2021-05-04 18:04 - 2021-05-04 18:04 - 000000000 ____D C:\Users\Ray\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2021-05-04 12:52 - 2021-05-04 12:59 - 000011935 _____ C:\WINDOWS\Macrium Reflect Patch Log.txt
2021-05-04 12:17 - 2021-05-04 15:11 - 000000000 ____D C:\Users\Ray\Desktop\RE-OPEN 5-4-2021
2021-05-03 14:32 - 2021-05-03 14:36 - 000001382 _____ C:\Users\Ray\Desktop\SndVol.exe.lnk
2021-05-01 21:48 - 2021-05-01 21:48 - 000002529 _____ C:\Users\Public\Desktop\TurboTax 2020.lnk
2021-05-01 21:48 - 2021-05-01 21:48 - 000002529 _____ C:\ProgramData\Desktop\TurboTax 2020.lnk
2021-05-01 21:48 - 2021-05-01 21:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TurboTax 2020
2021-04-30 14:57 - 2021-04-30 14:57 - 000001861 _____ C:\Users\Public\Desktop\iTunes.lnk
2021-04-30 14:57 - 2021-04-30 14:57 - 000001861 _____ C:\ProgramData\Desktop\iTunes.lnk
2021-04-30 14:57 - 2021-04-30 14:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2021-04-30 14:57 - 2021-04-30 14:57 - 000000000 ____D C:\Program Files\iTunes
2021-04-30 14:54 - 2021-04-30 14:55 - 000000000 ____D C:\Users\Ray\Documents\Geico Paid Receipts
2021-04-24 14:54 - 2021-04-24 14:55 - 000000000 ____D C:\Users\Ray\Documents\National Grid Payment Receipts
2021-04-22 12:10 - 2021-04-22 12:11 - 000000000 ____D C:\Users\Ray\Documents\Optimum Payments
2021-04-20 19:14 - 2021-04-20 19:15 - 000000115 _____ C:\Users\Ray\Desktop\BENZINGA.url
2021-04-20 13:44 - 2021-04-20 13:45 - 000000000 ____D C:\Users\Ray\Documents\AC LICHAMP 4 way manifold guage set
2021-04-18 21:42 - 2021-05-06 12:51 - 000000000 ____D C:\Users\Ray\Desktop\Network Issue
2021-04-13 22:06 - 2021-04-13 22:06 - 001823304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-04-13 22:06 - 2021-04-13 22:06 - 000011357 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-04-13 22:05 - 2021-04-13 22:05 - 000231248 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2021-04-06 15:42 - 2021-04-06 16:04 - 000000000 ____D C:\Users\Ray\Desktop\Aprilaire Filters
2021-04-06 13:53 - 2021-04-06 13:54 - 000000000 ____D C:\Users\Ray\Desktop\Used Tires

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-05-06 14:05 - 2016-07-23 12:42 - 000000000 ____D C:\FRST
2021-05-06 14:04 - 2020-09-01 12:22 - 000000000 ____D C:\Users\Ray\Desktop\BLEEPING
2021-05-06 13:56 - 2019-12-07 05:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-05-06 13:11 - 2021-03-27 16:52 - 000000000 ____D C:\Users\Ray\AppData\Roaming\discord
2021-05-06 13:11 - 2021-03-27 16:52 - 000000000 ____D C:\Users\Ray\AppData\Local\Discord
2021-05-06 12:49 - 2020-11-19 03:43 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-05-06 12:29 - 2020-11-25 14:48 - 000000000 ____D C:\Users\Ray\AppData\Local\WebEx
2021-05-06 11:59 - 2021-03-29 18:08 - 000000000 ____D C:\Users\Ray\Desktop\DAY TRADING
2021-05-06 11:59 - 2019-10-02 14:14 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2021-05-06 11:59 - 2019-10-02 14:14 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData
2021-05-06 11:52 - 2020-03-30 21:14 - 000000000 ____D C:\Program Files\CCleaner
2021-05-06 10:52 - 2021-01-27 18:53 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2021-05-06 10:50 - 2019-12-07 05:13 - 000000000 ____D C:\WINDOWS\INF
2021-05-06 10:49 - 2019-01-10 23:25 - 000000000 ____D C:\ProgramData\firebird
2021-05-06 10:48 - 2019-02-15 20:53 - 000000000 ____D C:\ProgramData\NVIDIA
2021-05-06 10:36 - 2020-12-15 18:09 - 000000000 ____D C:\Program Files\thinkorswim
2021-05-05 20:12 - 2019-12-07 05:51 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2021-05-05 12:50 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-05-05 12:34 - 2020-12-15 18:10 - 000000000 ____D C:\Users\Ray\.thinkorswim
2021-05-04 14:58 - 2019-04-28 13:38 - 000000000 ____D C:\Users\Ray\Desktop\Things To Do On Long Island
2021-05-03 17:40 - 2019-12-07 05:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-05-02 18:31 - 2020-03-17 17:53 - 000000000 ____D C:\Users\conzz\AppData\Local\Packages
2021-05-01 23:42 - 2019-01-30 10:17 - 000000000 ____D C:\Users\Ray\Documents\TurboTax
2021-05-01 21:48 - 2019-03-30 10:44 - 000000934 _____ C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2021-05-01 21:45 - 2019-03-30 10:43 - 000000000 ____D C:\Program Files (x86)\TurboTax
2021-05-01 21:44 - 2019-03-30 10:45 - 000000000 ____D C:\Users\Ray\AppData\Roaming\Intuit
2021-05-01 12:10 - 2020-11-25 14:48 - 000000000 ____D C:\Users\Ray\AppData\LocalLow\WebEx
2021-05-01 12:08 - 2020-11-19 03:46 - 000002483 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-05-01 12:08 - 2020-11-19 03:46 - 000002321 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-05-01 12:08 - 2020-11-19 03:46 - 000002321 _____ C:\ProgramData\Desktop\Microsoft Edge.lnk
2021-04-30 10:30 - 2020-11-19 03:54 - 000842750 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-04-30 10:23 - 2021-01-27 18:39 - 000008192 ___SH C:\DumpStack.log.tmp
2021-04-30 10:23 - 2020-11-19 03:43 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-04-30 10:23 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-04-30 10:23 - 2019-12-07 05:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2021-04-29 11:04 - 2020-09-01 12:17 - 000000000 ____D C:\Users\Ray\Desktop\APPLE
2021-04-29 08:43 - 2020-09-30 14:09 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-04-28 17:24 - 2021-01-27 18:45 - 000002412 _____ C:\Users\Ray\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-04-28 17:24 - 2019-01-10 14:45 - 000000000 ___RD C:\Users\Ray\OneDrive
2021-04-28 14:00 - 2019-01-11 00:29 - 000000000 ____D C:\Users\Ray\AppData\Roaming\vlc
2021-04-26 21:52 - 2019-01-30 10:07 - 000000000 ____D C:\Users\Ray\Documents\Honda Accord
2021-04-26 21:12 - 2019-01-30 10:17 - 000000000 ____D C:\Users\Ray\Documents\Acura MDX
2021-04-26 16:58 - 2019-01-10 14:45 - 000002346 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-04-25 23:57 - 2020-11-19 03:46 - 000003480 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-04-25 23:57 - 2020-11-19 03:46 - 000003356 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-04-24 16:48 - 2020-06-17 20:12 - 000000000 ____D C:\Users\Ray\Desktop\FOLDERS
2021-04-20 23:52 - 2021-01-27 18:53 - 000003418 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-04-20 23:52 - 2021-01-27 18:53 - 000003294 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-04-20 12:55 - 2019-01-30 10:17 - 000000000 ____D C:\Users\Ray\Documents\Andersen Slider
2021-04-18 23:59 - 2020-08-27 13:03 - 000000000 ____D C:\Users\Ray\Documents\Apple Air Conditioning
2021-04-18 21:41 - 2021-01-15 13:12 - 000000000 ____D C:\Users\Ray\Desktop\COVID-19
2021-04-16 10:43 - 2021-01-27 18:45 - 000000000 ____D C:\Users\Ray
2021-04-14 09:27 - 2020-11-19 03:43 - 004958712 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-04-14 09:26 - 2019-12-07 05:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-04-14 09:26 - 2019-12-07 05:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2021-04-14 09:26 - 2019-12-07 05:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-04-14 09:26 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-04-14 09:26 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-04-14 09:26 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-04-14 09:26 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2021-04-14 09:26 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2021-04-14 09:26 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2021-04-14 09:26 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2021-04-14 09:26 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-04-14 09:26 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-04-14 09:26 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-04-13 22:07 - 2019-12-07 05:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-04-13 22:05 - 2020-11-19 03:45 - 002877440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2021-04-13 21:58 - 2019-01-10 11:23 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-04-13 21:56 - 2019-01-10 11:22 - 131963968 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-04-13 18:25 - 2019-04-27 10:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
2021-04-13 18:25 - 2019-04-27 10:38 - 000000000 ____D C:\ProgramData\EPSON
2021-04-13 10:20 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2021-04-13 10:14 - 2019-04-19 08:37 - 000000000 ____D C:\Users\Ray\AppData\Local\CrashDumps
2021-04-12 18:05 - 2019-01-30 10:17 - 000000000 ____D C:\Users\Ray\Documents\Samsung TVs
2021-04-12 11:54 - 2019-01-10 18:17 - 000000000 ____D C:\Users\Ray\AppData\Local\D3DSCache
2021-04-11 12:00 - 2020-11-19 03:43 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd

==================== Files in the root of some directories ========

2021-01-26 01:25 - 2021-01-26 01:25 - 000000001 _____ () C:\Users\Ray\AppData\Local\llftool.4.40.agreement
2019-03-23 11:46 - 2019-03-23 11:46 - 000000000 _____ () C:\Users\Ray\AppData\Local\oobelibMkey.log
2019-12-22 16:30 - 2019-12-22 16:30 - 000000000 _____ () C:\Users\Ray\AppData\Local\{39291058-22C2-4C52-9658-1CC3D58883D1}

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

ADDITION.TEXT

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-04-2021
Ran by Ray (06-05-2021 14:06:03)
Running from C:\Users\Ray\Desktop\BLEEPING
Windows 10 Pro Version 20H2 19042.928 (X64) (2021-01-27 22:53:15)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Admin (S-1-5-21-1518913155-1093821880-4198188267-1003 - Administrator - Enabled) => C:\Users\Admin
Administrator (S-1-5-21-1518913155-1093821880-4198188267-500 - Administrator - Enabled) => C:\Users\Administrator
carld (S-1-5-21-1518913155-1093821880-4198188267-1005 - Limited - Disabled)
conzz (S-1-5-21-1518913155-1093821880-4198188267-1006 - Administrator - Enabled) => C:\Users\conzz
DefaultAccount (S-1-5-21-1518913155-1093821880-4198188267-503 - Limited - Disabled)
Guest (S-1-5-21-1518913155-1093821880-4198188267-501 - Limited - Disabled)
justp (S-1-5-21-1518913155-1093821880-4198188267-1001 - Administrator - Enabled) => C:\Users\justp
micki (S-1-5-21-1518913155-1093821880-4198188267-1004 - Administrator - Enabled) => C:\Users\micki
Ray (S-1-5-21-1518913155-1093821880-4198188267-1002 - Administrator - Enabled) => C:\Users\Ray
WDAGUtilityAccount (S-1-5-21-1518913155-1093821880-4198188267-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

@BIOS (HKLM-x32\...\{C9D46F25-5F9D-4E25-B24F-BC00E9EDF529}) (Version: 3.17.0710.1 - GIGABYTE) Hidden
@BIOS (HKLM-x32\...\InstallShield_{C9D46F25-5F9D-4E25-B24F-BC00E9EDF529}) (Version: 3.17.0710.1 - GIGABYTE)
7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov)
ABBYY FineReader 9.0 Sprint (HKLM-x32\...\{F9000000-0018-0000-0000-074957833700}) (Version: 9.00.15.58233 - ABBYY) Hidden
ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.00.15.58233 - ABBYY)
Adobe Acrobat 9 Pro (HKLM-x32\...\{AC76BA86-1033-0000-7760-000000000004}{AC76BA86-1033-0000-7760-000000000004}) (Version: 9.0.0 - Adobe Systems)
Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.23 - Adobe Systems)
Adobe Genuine Service (HKLM-x32\...\AdobeGenuineService) (Version: - Adobe)
Adobe Photoshop 5.5 (HKLM-x32\...\Adobe Photoshop 5.5) (Version: 5.5 - Adobe Systems, Inc.)
APP Center (HKLM-x32\...\{D50BEE9A-0EC6-4A58-BF90-35BDC6D6495D}) (Version: 3.21.0317.1 - GIGABYTE) Hidden
APP Center (HKLM-x32\...\InstallShield_{D50BEE9A-0EC6-4A58-BF90-35BDC6D6495D}) (Version: 3.21.0317.1 - GIGABYTE)
Apple Mobile Device Support (HKLM\...\{74CC99EB-7DC0-4CB0-847A-F8C2FE39690C}) (Version: 14.5.0.7 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A3985C05-7386-411F-A4BF-32A73F37EB44}) (Version: 2.6.3.1 - Apple Inc.)
Audacity 2.3.0 (HKLM-x32\...\Audacity_is1) (Version: 2.3.0 - Audacity Team)
bl (HKLM-x32\...\{2A075BB4-E976-4278-BF3F-E5C6945D84C0}) (Version: 1.0.0 - Your Company Name) Hidden
BlueStacks App Player (HKLM\...\BlueStacks) (Version: 4.240.30.1002 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
BurnAware Free 12.6 (HKLM-x32\...\BurnAware Free_is1) (Version: - Burnaware)
CCleaner (HKLM\...\CCleaner) (Version: 5.79 - Piriform)
CCleaner Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.5.21.0 - Piriform Software) Hidden
Cisco Webex Meetings (HKLM-x32\...\ActiveTouchMeetingClient) (Version: 40.11.4 - Cisco Webex LLC)
CopyTrans Control Center Uninstall Only (HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\CopyTrans Suite) (Version: 4.100 - WindSolutions)
CopyTrans HEIC for Windows (HKLM\...\CopyTrans HEIC for Windows_is1) (Version: 1.0.0.8 - Ursa Minor Ltd)
Crucial Storage Executive (HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\Crucial Storage Executive 3.60.082018.04) (Version: 3.60.082018.04 - Crucial)
Crucial Storage Executive (HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\Crucial Storage Executive 6.09.092020.06) (Version: 6.09.092020.06 - Crucial)
CrystalDiskInfo 8.3.1 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 8.3.1 - Crystal Dew World)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DetectorTools (HKLM-x32\...\{E8F0431A-A158-49F6-96AC-7C1380D9AF21}) (Version: 1.11.131 - Escort)
Discord (HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\Discord) (Version: 0.0.309 - Discord Inc.)
Dot4 (HKLM\...\{3EEDA265-C6F3-4EC1-A317-1C9315DEDDDE}) (Version: 1.0.0.0 - HP)
EaseUS Todo Backup 11.6 (HKLM-x32\...\EaseUS Todo Backup_is1) (Version: 11.6 - CHENGDU YIWO Tech Development Co., Ltd)
EasyRecovery Professional (HKLM-x32\...\InstallShield_{A8BB9906-E618-406A-B161-7383AFF46C39}) (Version: 6.03.04 - Ontrack Data International, Inc.)
EasyTuneEngineService (HKLM-x32\...\{964575C3-5820-4642-A89A-754255B5EFE1}) (Version: 1.18.1019.2 - GIGABYTE) Hidden
EasyTuneEngineService (HKLM-x32\...\InstallShield_{964575C3-5820-4642-A89A-754255B5EFE1}) (Version: 1.18.1019.2 - GIGABYTE)
Efficient Reminder Free 5.60 (HKLM-x32\...\Efficient Reminder Free_is1) (Version: - Efficient Software)
Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.4.3 - Seiko Epson Corporation)
EPSON Connect version 1.0 (HKLM-x32\...\EPSON Connect_is1) (Version: 1.0 - Epson America Inc.)
Epson Customer Participation (HKLM\...\{814FA673-A085-403C-9545-747FC1495069}) (Version: 1.4.0.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{44F72193-F59C-4303-BAE8-E3E4BC1C122C}) (Version: 3.01.0003 - Seiko Epson Corporation)
Epson E-Web Print (HKLM-x32\...\{6BF9F374-EC67-4808-A90C-F127DE6D989D}) (Version: 1.23.0000 - SEIKO EPSON CORPORATION)
Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.30.00 - SEIKO EPSON CORPORATION)
EPSON Printer Finder (HKLM-x32\...\{B8ECD0D3-AE08-4891-B6C7-32F96B75EB6C}) (Version: 1.0.0 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
Epson Software Updater (HKLM-x32\...\{28C66F35-69BF-4376-BC80-4D5F4808FF3C}) (Version: 4.6.1 - Seiko Epson Corporation)
EPSON WF-2540 Series Printer Uninstall (HKLM\...\EPSON WF-2540 Series) (Version: - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.5.00 - SEIKO EPSON CORPORATION)
Evernote v. 6.21.2 (HKLM-x32\...\{50BD5F92-DB34-11E9-A489-005056951CAD}) (Version: 6.21.2.8716 - Evernote Corp.)
FileZilla Client 3.45.1 (HKLM-x32\...\FileZilla Client) (Version: 3.45.1 - Tim Kosse)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 90.0.4430.93 - Google LLC)
GService (HKLM-x32\...\{D9CB4282-7B2A-4840-AD1D-9DA72B973DD9}) (Version: 1.16.1202.1 - GIGABYTE)
HitmanPro 3.8 (HKLM\...\HitmanPro38) (Version: 3.8.22.316 - SurfRight B.V.)
iCloud (HKLM\...\{8808B208-87D1-4725-8192-76D257E9DEAE}) (Version: 7.21.0.23 - Apple Inc.)
Intel(R) Chipset Device Software (HKLM-x32\...\{49bc1e38-39b4-4728-9e75-cbe67ba9a329}) (Version: 10.1.1.42 - Intel(R) Corporation) Hidden
Intel(R) Computing Improvement Program (HKLM\...\{D40D4164-EEDB-4F0F-85C6-2058A9E34CC7}) (Version: 2.4.04370 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1017 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 25.20.100.6519 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 16.8.3.1003 - Intel Corporation)
Intel® Processor Identification Utility (HKLM-x32\...\{DC548262-9351-4FF8-BB12-0D2BF0A2F3B7}) (Version: 6.5.115.0105 - Intel Corporation)
iTunes (HKLM\...\{653C59E1-B78D-4D82-9259-C14DFD9F6EFC}) (Version: 12.11.3.17 - Apple Inc.)
Junk Mail filter update (HKLM-x32\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Macrium Reflect Free Edition (HKLM\...\{E10EA502-8814-4DA4-8989-A8B1B38600A5}) (Version: 7.3.5321 - Paramount Software (UK) Ltd.) Hidden
Macrium Reflect Free Edition (HKLM\...\MacriumReflect) (Version: 7.3 - Paramount Software (UK) Ltd.)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 90.0.818.51 - Microsoft Corporation)
Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 12.181.137.0 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1518913155-1093821880-4198188267-1001\...\OneDriveSetup.exe) (Version: 20.201.1005.0009 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\OneDriveSetup.exe) (Version: 21.062.0328.0001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1518913155-1093821880-4198188267-1003\...\OneDriveSetup.exe) (Version: 20.201.1005.0009 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1518913155-1093821880-4198188267-1004\...\OneDriveSetup.exe) (Version: 20.201.1005.0009 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1518913155-1093821880-4198188267-1006\...\OneDriveSetup.exe) (Version: 20.201.1005.0009 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1518913155-1093821880-4198188267-500\...\OneDriveSetup.exe) (Version: 20.114.0607.0002 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{A0E1B43D-5F4A-46AF-9925-ABA3423325DC}) (Version: 2.77.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{3994d355-238a-4612-af93-26d13deddef1}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.22.27821 (HKLM-x32\...\{5bfc1380-fd35-4b85-9715-7351535d077e}) (Version: 14.22.27821.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.13.26020 (HKLM-x32\...\{7474cd6e-76cc-4257-837e-5b9261e526af}) (Version: 14.13.26020.0 - Microsoft Corporation)
NVIDIA 3D Vision Controller Driver 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA FrameView SDK 1.1.4923.29548709 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29548709 - NVIDIA Corporation)
NVIDIA Graphics Driver 456.71 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 456.71 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.38.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.35 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
ph (HKLM-x32\...\{185F9795-9663-4F13-9EF9-307A282ADB5A}) (Version: 1.0.0 - Your Company Name) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.46.1231.2020 - Realtek)
Realtek Ethernet Diagnostic Utility (HKLM-x32\...\{DADC7AB0-E554-4705-9F6A-83EA82ED708E}) (Version: 2.0.4.2 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8228 - Realtek Semiconductor Corp.)
Realtek Management Console (HKLM-x32\...\{9315EF8D-FA6D-4814-BCBF-F524671E2E5E}) (Version: 0.5.9.503 - Realtek)
Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)
Revo Uninstaller 2.2.5 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.2.5 - VS Revo Group, Ltd.)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 6.2.1.260 - Samsung Electronics)
Security Task Manager 2.3d (HKLM-x32\...\Security Task Manager) (Version: 2.3d - Neuber Software)
Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform)
thinkorswim (HKLM\...\9968-4488-2169-7623) (Version: desktop - thinkorswim, Inc)
TurboTax 2018 (HKLM-x32\...\TurboTax 2018) (Version: 2018.0 - Intuit, Inc)
TurboTax 2019 (HKLM-x32\...\TurboTax 2019) (Version: 2019.0 - Intuit, Inc)
TurboTax 2020 (HKLM-x32\...\TurboTax 2020) (Version: 2020.0 - Intuit, Inc)
Unlocker (HKLM\...\{5993C960-4E90-4A00-A2F3-D0C4020A6992}) (Version: 1.9.2 - ajua Custom Installers)
Unlocker (HKLM-x32\...\{5577A25D-E4FE-4BFB-A660-E0D766BC4EDD}) (Version: 1.9.2 - ajua Custom Installers)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.12 - VideoLAN)
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1-2) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
Windows 10 Update Assistant (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.23258 - Microsoft Corporation)
Windows Driver Package - Apple, Inc. (USBAAPL) USB (05/19/2017 6.0.9999.69) (HKLM\...\7771A0176A543725D7BBF70A546C096A4EE2DD40) (Version: 05/19/2017 6.0.9999.69 - Apple, Inc.)
Windows Driver Package - ESCORT Inc. (WinUSB) MyDeviceClass (05/21/2013 ) (HKLM\...\339B7A8F3F3C10AA41030B876159242270CF93F9) (Version: 05/21/2013 - ESCORT Inc.)
Windows Driver Package - ESCORT, Inc. (usbser) Ports (04/24/2013 1.0.0.0) (HKLM\...\81CF09C262F2AF50FED94F55B77F731D76C948F2) (Version: 04/24/2013 1.0.0.0 - ESCORT, Inc.)
Windows Driver Package - ESCORT, Inc. (usbser) Ports (04/24/2013 1.0.0.0) (HKLM\...\C0FE710F55BB86720128BB31B4B2340F22E6F61D) (Version: 04/24/2013 1.0.0.0 - ESCORT, Inc.)
Windows Driver Package - ESCORT, Inc. (WinUSB) MyDeviceClass (07/17/2018 3.0.0.9) (HKLM\...\079CFFC83C32321522F661C1127DAE74DC7A462C) (Version: 07/17/2018 3.0.0.9 - ESCORT, Inc.)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Zoom (HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\ZoomUMX) (Version: 5.6.5 (823) - Zoom Video Communications, Inc.)

Packages:
=========
HEIC to JPEG (FREE) -> C:\Program Files\WindowsApps\53354DuckheadSoftware.HEICtoJPEGFREE_6.2.29.0_x64__2gc4m0bggm024 [2021-04-15] (Duckhead Software)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_126.2.222.0_x64__v10z8vjag6ke6 [2021-04-15] (HP Inc.)
Intel® Graphics Control Panel -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsControlPanel_3.3.0.0_x64__8j3eq9eme6ctt [2020-02-18] (INTEL CORP)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-02-06] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-02-06] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.9.4213.0_x64__8wekyb3d8bbwe [2021-05-02] (Microsoft Studios) [MS Ad]
Photos Add-on -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2021-03-13] (Microsoft Corporation)
Photos Media Engine Add-on -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-10-29] (Microsoft Corporation)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.3.180.0_x64__dt26b99r8h8gj [2019-11-27] (Realtek Semiconductor Corp)
WiFi Analyzer -> C:\Program Files\WindowsApps\19965MATTHAFNER.WIFIANALYZER_2.6.1.0_x64__gs5k5vmxr2ste [2021-04-15] (Matt Hafner)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => D:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2020-09-08] (Apple Inc. -> Apple Inc.)
ContextMenuHandlers1: [ReflectShellExt] -> {DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611} => D:\Program Files\Macrium\Reflect\RContextMenu.dll [2019-09-20] (Paramount Software UK Ltd -> Paramount Software UK Ltd)
ContextMenuHandlers1: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => D:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2018-10-10] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd) [File not signed]
ContextMenuHandlers2: [ReflectShellExt] -> {DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611} => D:\Program Files\Macrium\Reflect\RContextMenu.dll [2019-09-20] (Paramount Software UK Ltd -> Paramount Software UK Ltd)
ContextMenuHandlers2: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => D:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2018-10-10] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd) [File not signed]
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd)
ContextMenuHandlers4: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => D:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2018-10-10] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd) [File not signed]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2020-10-01] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => D:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\Ray\Documents\WD My Passport\My Passport\Extras\Adobe Reader Download.lnk -> hxxp://get.adobe.com/reader
Shortcut: C:\Users\Ray\Documents\My WD Passport\My Passport\Extras\Adobe Reader Download.lnk -> hxxp://get.adobe.com/reader
ShortcutWithArgument: C:\Users\Ray\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Hangouts.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=knipolnnllmklapflnccelgolnpehhpl

==================== Loaded Modules (Whitelisted) =============

2021-03-10 19:53 - 2021-03-10 19:53 - 001868288 _____ () [File not signed] C:\Program Files (x86)\GIGABYTE\AppCenter\BDR_info.dll
2019-04-24 12:51 - 2010-10-14 10:05 - 000074240 _____ () [File not signed] C:\WINDOWS\system32\spool\PRTPROCS\x64\HP1100PP.DLL
2021-02-05 12:48 - 2016-03-07 19:08 - 001291264 _____ () [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\libxml2.dll
2021-02-05 12:48 - 2004-10-05 04:08 - 000055808 _____ () [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\zlib1.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000026768 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\AccountManager.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000058000 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\ActivationOnline.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000021648 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\ActiveOnline.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000264336 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\AuthorizedMng.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000089232 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\BootDriver.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000112272 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\CalcScheduleTime.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000026256 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\CallbackOperator.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000075408 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\CheckImg.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000078992 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\CloudOperator.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000195728 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCAdapt.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000163472 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCAdapt_RTTO.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000018064 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCNetTokenProxy.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000188560 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCPipeCenter.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000024720 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\CmcTbProxy.dll
2021-02-05 12:48 - 2018-10-10 12:01 - 000109712 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\CodeLog.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000091792 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\Common.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000019600 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\CompressFile.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000024720 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\CorrectMbr.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000142992 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\Device.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000029328 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\DeviceAdapter.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000367760 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\DeviceManager.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000032912 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\DiskSearchImg.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000538256 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\DsImgFile.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000269968 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\EmailBackupSize.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000296080 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\EmailBrowser.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000162960 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\EnumDisk.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000034448 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\EnumTapeDevice.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000704144 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\EuActiveOnline.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 001382544 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\EuDownload.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000487568 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\EULicenseDLL.DLL
2021-02-05 12:48 - 2018-10-10 12:04 - 000260752 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\EuUpdate.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000301712 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\ExchBackupSize.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000479376 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\ExchBackupSizeEx.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 002464400 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\ExImage.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000064144 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\FATFileSystemAnalyser.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000078480 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\FatLib.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000120464 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\FileSearch.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000130704 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\FileStorage.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000052368 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\FileSystemAnalyser.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000021648 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\fsclog.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000026768 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\GetDriverInfo.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000169104 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\ImgFile.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000035472 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\LibraryManager.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000031888 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\License.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000091280 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\logsys.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000070800 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\MountImg.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000072848 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\NasOperator.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000089232 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\NetDrive.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000058512 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\NTFSFileSystemAnalyser.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000211088 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\NTFSLib.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000318608 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\NTFSUtil.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000149136 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\Partition.dll
2021-02-05 12:48 - 2018-10-10 12:09 - 000929936 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\QtLib.dll
2021-02-05 12:48 - 2018-10-10 12:05 - 000066192 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\RegLib.dll
2021-02-05 12:48 - 2018-10-10 12:05 - 000219792 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\SmartBackup.dll
2021-02-05 12:48 - 2018-10-10 12:05 - 000075408 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\SqlExBrowser.dll
2021-02-05 12:48 - 2018-10-10 12:05 - 000585872 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\SqlSMOCPlusPlus.dll
2021-02-05 12:48 - 2018-10-10 12:05 - 000045200 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\TbDataSwap.dll
2021-02-05 12:48 - 2018-10-10 12:09 - 002056336 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\TBFileBrower.dll
2021-02-05 12:48 - 2018-10-10 12:05 - 000055952 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\TBInfo.dll
2021-02-05 12:48 - 2018-10-10 12:05 - 000054928 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\TbTapeBrowse.dll
2021-02-05 12:48 - 2018-10-10 12:09 - 001503888 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\UIBackupRecoveryFrame.dll
2021-02-05 12:48 - 2018-10-10 12:09 - 000953488 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\UIDiskBackup.dll
2021-02-05 12:48 - 2018-10-10 12:09 - 001158800 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\UIExchangeBackup.dll
2021-02-05 12:48 - 2018-10-10 12:09 - 001143952 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\UIFileBackup.dll
2021-02-05 12:48 - 2018-10-10 12:09 - 001164432 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\UIMailBackup.dll
2021-02-05 12:48 - 2018-10-10 12:09 - 000634512 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\UIManager.dll
2021-02-05 12:48 - 2018-10-10 12:09 - 001158800 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\UISQLBackup.dll
2021-02-05 12:48 - 2018-10-10 12:09 - 001199248 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\UITaskMgr.dll
2021-02-05 12:48 - 2018-10-10 12:09 - 001904272 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\UITools.dll
2021-02-05 12:48 - 2018-10-10 12:05 - 000149136 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\vhdvmdk.dll
2021-02-05 12:48 - 2018-10-10 12:05 - 000144528 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\VMConfig.dll
2021-02-05 12:48 - 2018-10-10 12:10 - 000024720 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\CMCInit.dll
2021-02-05 12:48 - 2018-10-10 12:10 - 000126608 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\CMCLogCli.dll
2021-02-05 12:48 - 2018-10-10 12:10 - 000208016 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\CMCMsgCenter.dll
2021-02-05 12:48 - 2018-10-10 12:10 - 000045712 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\CMCNetToken.dll
2021-02-05 12:48 - 2018-10-10 12:10 - 000151184 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\CMCTaskCli.dll
2021-02-05 12:48 - 2018-10-10 12:10 - 000021648 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\fsclog.dll
2021-02-05 12:48 - 2018-10-10 12:10 - 000855184 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\HostMgr.dll
2021-02-05 12:48 - 2018-10-10 12:10 - 000037520 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\LocalDB.dll
2021-02-05 12:48 - 2018-10-10 12:10 - 000196240 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\NetComm.dll
2021-02-05 12:48 - 2018-10-10 12:10 - 000114320 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\RemoteInstall.dll
2021-02-05 12:48 - 2018-10-10 12:10 - 000122000 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\RTTOMgr.dll
2021-02-05 12:48 - 2018-10-10 12:10 - 000536208 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\sqlite.dll
2021-02-05 12:48 - 2018-10-10 12:10 - 000048272 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\TBActivation.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000600208 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\Boot.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000730768 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\CmdManager.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000075920 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\CmdPack.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000022160 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\ControlPxe.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000732816 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\EMail.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000046736 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\EuPipe.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000431248 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\ExFunction.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000235152 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\FlBackup.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000103056 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\FlBackupSize.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000603280 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\FlImgFile.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000046224 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\FlSearchImg.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000161424 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\Ftp.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000019600 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\FTPTest.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000120976 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\ImageFileInfo.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000263312 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\ImgFileHlp.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000153232 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\MatchStr.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000028816 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\Options.dll
2021-02-05 12:48 - 2018-10-10 12:04 - 000095376 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\PolicyManage.dll
2021-02-05 12:48 - 2018-10-10 12:05 - 000124048 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\Thread.dll
2021-02-05 12:48 - 2018-10-10 12:05 - 000113296 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\Transmit.dll
2021-02-05 12:48 - 2018-10-10 12:05 - 002437264 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\UILogic.dll
2021-02-05 12:48 - 2018-10-10 12:05 - 000044688 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\XmlWrapper.dll
2021-02-05 12:48 - 2018-10-10 12:01 - 000046736 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\EuPipe.dll
2021-02-05 12:48 - 2018-10-10 12:05 - 000105104 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU Yiwo Tech Development Co., Ltd.) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\UpdateInfo.dll
2021-02-05 12:48 - 2018-10-10 20:01 - 000382096 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000071824 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> EaseUS Todo Backup Boot Dynamic Link Library) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\EFIBoot.dll
2021-02-05 12:48 - 2018-10-10 12:05 - 000616080 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> Easeus) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\uexper.dll
2021-02-05 12:48 - 2018-10-10 12:03 - 000288400 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> TODO: <Company name>) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\BuyNow.dll
2019-01-10 23:25 - 2015-03-27 11:11 - 003850240 _____ (Firebird Project) [File not signed] D:\Program Files (x86)\Efficient Reminder Free\gds32.dll
2021-02-05 12:48 - 2008-11-25 18:18 - 000892928 _____ (Free Software Foundation) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\iconv.dll
2019-04-15 16:24 - 2019-04-15 16:24 - 000155648 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) [File not signed] C:\Program Files (x86)\GIGABYTE\AppCenter\yccV2.dll
2018-04-20 19:45 - 2018-04-20 19:45 - 000080896 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) [File not signed] C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\yccV2.dll
2019-01-10 23:25 - 2015-03-27 10:59 - 001568768 _____ (IBM Corporation and others) [File not signed] D:\Program Files (x86)\Efficient Reminder Free\icudt30.dll
2019-01-10 23:25 - 2015-03-27 10:59 - 000675840 _____ (IBM Corporation and others) [File not signed] D:\Program Files (x86)\Efficient Reminder Free\icuuc30.dll
2019-01-10 21:02 - 2019-02-21 12:00 - 000078336 _____ (Igor Pavlov) [File not signed] D:\Program Files\7-Zip\7-zip.dll
2021-03-03 01:40 - 2021-03-03 01:40 - 000453632 _____ (Intuit Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Intuit.Spc.09f690bd#\e1da89eee97f477f2bad15c2b4f11031\Intuit.Spc.Esd.Client.BusinessLogic.ni.dll
2021-03-03 01:40 - 2021-03-03 01:40 - 000223744 _____ (Intuit Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Intuit.Spc.618c5f21#\1701bc147116e525f4d476cd179bdc15\Intuit.Spc.Esd.Client.DataAccess.ni.dll
2021-03-03 01:40 - 2021-03-03 01:40 - 000166400 _____ (Intuit Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Intuit.Spc.820cb8f8#\6d7917947741104af602d80784d91af8\Intuit.Spc.Esd.Client.Common.ni.dll
2021-03-03 01:40 - 2021-03-03 01:40 - 001137152 _____ (Intuit Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Intuit.Spc.8e5e058c#\486bfc89fbfff6993054e55c9eeb2cf7\Intuit.Spc.Esd.WinClient.Api.Net.ni.dll
2021-03-03 01:40 - 2021-03-03 01:40 - 000749568 _____ (Intuit Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Intuit.Spc.e37652b5#\ebbfe4b89c1138a59af862b2ceb3760f\Intuit.Spc.Map.Reporter.ni.dll
2021-03-03 01:40 - 2021-03-03 01:40 - 001146368 _____ (Intuit Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Intuit.Spc.Esd.Core\552ac0bf4f882234b23ad84fe716b281\Intuit.Spc.Esd.Core.ni.dll
2021-03-03 01:40 - 2021-03-03 01:40 - 001112576 _____ (Intuit) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Intuit.Spc.fecc593b#\a7b7b131787da702d71cab376287a4fc\Intuit.Spc.Map.WindowsFirewallUtilities.ni.dll
2008-04-11 12:54 - 2008-04-11 12:54 - 000348160 _____ (Microsoft Corporation) [File not signed] C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\MSVCR71.dll
2004-10-04 22:27 - 2004-10-04 22:27 - 003166208 _____ (Microsoft Corporation) [File not signed] C:\Program Files (x86)\Common Files\Microsoft Shared\PROOF\1033\MSGR3EN.DLL
2002-02-17 17:26 - 2002-02-17 17:26 - 000086016 _____ (Microsoft Corporation) [File not signed] C:\Program Files (x86)\Common Files\Microsoft Shared\PROOF\MSSPELL3.DLL
2020-12-28 20:09 - 2015-02-27 11:35 - 000489984 _____ (Newtonsoft) [File not signed] [File is in use] C:\Program Files (x86)\Wondershare\WAF\2.4.3.225\Newtonsoft.Json.dll
2021-01-13 18:54 - 2015-07-23 00:02 - 001165192 _____ (NVIDIA Corporation PE Sign v2014 -> NVIDIA Corporation) [File not signed] C:\WINDOWS\SYSTEM32\nvumdshimx.dll
2019-04-27 10:50 - 2011-08-30 13:38 - 000558080 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\WINDOWS\System32\enppmon.dll
2019-04-27 10:50 - 2011-08-01 18:24 - 000250880 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\WINDOWS\System32\enpres.dll
2021-02-05 12:48 - 2016-01-26 09:38 - 001150464 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\LIBEAY32.dll
2021-02-05 12:48 - 2018-08-22 03:00 - 000024576 _____ (The Qt Company Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\imageformats\qgif.dll
2021-02-05 12:48 - 2018-08-22 03:00 - 000025088 _____ (The Qt Company Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\imageformats\qico.dll
2021-02-05 12:48 - 2018-08-22 03:00 - 001012224 _____ (The Qt Company Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\platforms\qwindows.dll
2021-02-05 12:48 - 2018-08-22 03:00 - 004679168 _____ (The Qt Company Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\Qt5Core.dll
2021-02-05 12:48 - 2018-08-22 03:00 - 005026816 _____ (The Qt Company Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\Qt5Gui.dll
2021-02-05 12:48 - 2018-08-22 03:00 - 004480512 _____ (The Qt Company Ltd) [File not signed] D:\Program Files (x86)\EaseUS\Todo Backup\bin\Qt5Widgets.dll
2015-10-14 01:15 - 2015-10-14 01:15 - 002042368 _____ (TODO: <Company name>) [File not signed] C:\Program Files (x86)\GIGABYTE\AppCenter\osvi.dll
2018-10-18 12:44 - 2018-10-18 12:44 - 002069504 _____ (TODO: <Company name>) [File not signed] C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\GbtNvGpuLib.dll
2020-12-28 20:09 - 2017-05-05 18:49 - 000087552 _____ (Wondershare) [File not signed] [File is in use] C:\Program Files (x86)\Wondershare\WAF\2.4.3.225\WsAppCollect.dll
2020-12-28 20:09 - 2017-05-05 18:49 - 000198144 _____ (Wondershare) [File not signed] [File is in use] C:\Program Files (x86)\Wondershare\WAF\2.4.3.225\WsAppCommon.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2017-03-28] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2017-03-28] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> D:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2020-06-24] (Evernote Corporation -> Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2017-03-28] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2017-03-28] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2017-03-28] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2017-03-28] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
Toolbar: HKU\S-1-5-21-1518913155-1093821880-4198188267-1002 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2017-03-28] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\download.microsoft.com -> hxxp://download.microsoft.com
IE trusted site: HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\download.windowsupdate.com -> hxxp://download.windowsupdate.com
IE trusted site: HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\download.windowsupdate.com -> hxxps://download.windowsupdate.com
IE trusted site: HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\microsoft.com -> hxxp://ntservicepack.microsoft.com
IE trusted site: HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\ntservicepack.microsoft.com -> hxxp://ntservicepack.microsoft.com
IE trusted site: HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\update.microsoft.com -> hxxp://update.microsoft.com
IE trusted site: HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\update.microsoft.com -> hxxps://update.microsoft.com
IE trusted site: HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\windows.com -> hxxp://wustat.windows.com
IE trusted site: HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\windowsupdate.com -> hxxp://download.windowsupdate.com
IE trusted site: HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\windowsupdate.com -> hxxps://download.windowsupdate.com
IE trusted site: HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\windowsupdate.microsoft.com -> hxxp://windowsupdate.microsoft.com
IE trusted site: HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\ws.microsoft.com -> hxxp://ws.microsoft.com
IE trusted site: HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\ws.microsoft.com -> hxxps://ws.microsoft.com
IE trusted site: HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\wustat.windows.com -> hxxp://wustat.windows.com

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2018-09-15 03:31 - 2020-08-30 17:32 - 000000852 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\Windows Live\Shared;D:\Program Files\Crucial\Crucial Storage Executive;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;D:\Program Files (x86)\EaseUS\Todo Backup\bin;C:\Program Files\Crucial\Crucial Storage Executive
HKU\S-1-5-21-1518913155-1093821880-4198188267-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Ray\Pictures\Desktop.jpg
HKU\S-1-5-21-1518913155-1093821880-4198188267-1003\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
HKU\S-1-5-21-1518913155-1093821880-4198188267-1004\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
HKU\S-1-5-21-1518913155-1093821880-4198188267-1006\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
HKU\S-1-5-21-1518913155-1093821880-4198188267-500\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

Network Binding:
=============
OPTIMUM: Realtek Vlan Protocol Driver (NDIS 6.40) -> rtk_vlanpt (enabled)
OPTIMUM: Realtek Teaming Protocol Driver (NDIS 6.40) -> rtk_teampt (enabled)
OPTIMUM: Realtek NDIS Protocol Driver (NDIS 6.40) -> rtk_ndisprot (enabled)

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

MSCONFIG\Services: EpsonCustomerParticipation => 2
MSCONFIG\Services: SystemUsageReportSvc_QUEENCREEK => 2
MSCONFIG\Services: USER_ESRV_SVC_QUEENCREEK => 3
HKLM\...\StartupApproved\StartupFolder: => "Adobe Gamma Loader.exe.lnk"
HKLM\...\StartupApproved\Run: => "AdobeGCInvoker-1.0"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "IAStorIcon"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"
HKLM\...\StartupApproved\Run32: => "Adobe Acrobat Speed Launcher"
HKLM\...\StartupApproved\Run32: => "FUFAXRCV"
HKLM\...\StartupApproved\Run32: => "FUFAXSTM"
HKLM\...\StartupApproved\Run32: => "EEventManager"
HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\StartupApproved\Run: => "Adobe Acrobat Synchronizer"
HKU\S-1-5-21-1518913155-1093821880-4198188267-1002\...\StartupApproved\Run: => "SUPERAntiSpyware"
HKU\S-1-5-21-1518913155-1093821880-4198188267-500\...\StartupApproved\Run: => "OneDrive"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{95E0A9C6-CAED-4A80-85BB-011A4443935D}] => (Allow) LPort=9009
FirewallRules: [{3587C9A6-411E-4D76-8922-A0DF2B96D855}] => (Allow) LPort=9009
FirewallRules: [{44AF810A-8120-4EC5-9003-5D7C5300A6F5}] => (Allow) LPort=9009
FirewallRules: [{E092E0D7-834B-48C7-B354-3B7D4AF368BC}] => (Allow) LPort=9009
FirewallRules: [{72202E3F-5FF9-4AD7-BE88-C7EADACF4163}] => (Allow) LPort=9009
FirewallRules: [{A617263F-8B9E-448D-AA09-E76AC9C3F2E2}] => (Allow) LPort=9009
FirewallRules: [{07731666-B8CC-4E8A-967F-54FB1BD9E515}] => (Allow) LPort=9009
FirewallRules: [{9C7A6759-81DD-4894-A36D-49EFB0AF69DF}] => (Allow) LPort=9009
FirewallRules: [{101C93F2-E797-400D-B649-BA6AC87EB63B}] => (Allow) LPort=9009
FirewallRules: [UDP Query User{E32F4B5F-19E1-4DE5-A1F6-4661A4CACE49}D:\program files\crucial\crucial storage executive\java\bin\javaw.exe] => (Allow) D:\program files\crucial\crucial storage executive\java\bin\javaw.exe
FirewallRules: [TCP Query User{02E580F4-17D2-4C0C-9980-63CD75F38DA4}D:\program files\crucial\crucial storage executive\java\bin\javaw.exe] => (Allow) D:\program files\crucial\crucial storage executive\java\bin\javaw.exe
FirewallRules: [{354ADC30-7C71-480B-888A-0E7246969E36}] => (Allow) LPort=9009
FirewallRules: [{2CA9814A-A582-40CB-874C-23632E03225E}] => (Allow) LPort=9009
FirewallRules: [{5D8ACCFF-2B88-482A-94E5-162EA1199F97}] => (Allow) LPort=9009
FirewallRules: [{35C6D964-A7A6-4033-BA74-567EF9677F90}] => (Allow) LPort=9009
FirewallRules: [{FB1A2096-1C79-432C-97D0-74E5CB800B62}] => (Allow) LPort=9009
FirewallRules: [{C23F2B0B-BDBE-4983-8B91-74EFF5DBD7C0}] => (Allow) LPort=9009
FirewallRules: [{78726717-9C1D-46E9-8316-22FC013689C8}] => (Allow) LPort=9009
FirewallRules: [UDP Query User{D609F131-C8F6-4DAF-A3B1-0B46B393C155}C:\program files (x86)\microsoft\edge\application\msedge.exe] => (Block) C:\program files (x86)\microsoft\edge\application\msedge.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{DF74B9A6-730F-48BC-82A1-CB23B24BB2E2}C:\program files (x86)\microsoft\edge\application\msedge.exe] => (Block) C:\program files (x86)\microsoft\edge\application\msedge.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{B8E9418C-B46D-4596-A3AB-49F8A1B27549}C:\program files (x86)\google\chrome\application\chrome.exe] => (Block) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{3FF0F88E-A01E-4B09-8F08-C0C865AEA5B4}C:\program files (x86)\google\chrome\application\chrome.exe] => (Block) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{8AB8DE68-F9CB-46BE-BF7C-FC608A2D0CA3}] => (Allow) LPort=9009
FirewallRules: [{8F5EA0EB-7034-4590-A6B0-E6205381D357}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{C566751A-47C1-4F2F-B50C-8FF7B8D42027}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{DDE0511F-F87C-414D-9931-601C8A856F37}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{5538B981-CA87-4901-85D2-BF1AEE80E202}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{6F9E410B-922A-49FC-B878-178F7D9CF024}] => (Allow) LPort=9009
FirewallRules: [{55076232-BF38-4EEF-88CB-D494E070AF69}] => (Allow) LPort=9009
FirewallRules: [{73F41B67-D6BF-48EC-9DB1-6BD997AFE6BC}] => (Allow) LPort=9009
FirewallRules: [{AD5CEF69-BDA3-472B-84BE-0DBD0378D67E}] => (Allow) LPort=9009
FirewallRules: [{7B9F9D1C-8785-4463-BFC9-6E845F9FDAA0}] => (Allow) LPort=9009
FirewallRules: [{9B362436-40C7-405E-AF04-534D4C34F61D}] => (Allow) LPort=9009
FirewallRules: [{9EDB1E94-5009-44BF-BF0A-1DD1BE6CFDD5}] => (Allow) LPort=9009
FirewallRules: [{654EA351-5992-49A2-80FC-40F5A9161BAC}] => (Allow) D:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\EBCClient.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed]
FirewallRules: [{6F572CF5-0B4B-4E6A-B1FC-DEC578D8D577}] => (Allow) D:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed]
FirewallRules: [{E269F26D-4880-4541-AB30-AF2301520743}] => (Allow) D:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed]
FirewallRules: [{454C04B4-6EA2-46AA-9F8A-BAB23A78F257}] => (Allow) D:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed]
FirewallRules: [{33125BD7-2A52-43B8-9B76-59F72C2C759D}] => (Allow) D:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [File not signed]
FirewallRules: [{18241200-7CF7-40A9-92C9-7E4FE99EFD4C}] => (Allow) D:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed]
FirewallRules: [{77379878-2D15-4C03-A1CF-F7D5B82E5B3C}] => (Allow) D:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed]
FirewallRules: [{4B8A4D7B-899F-40B2-92C5-233F68B33F14}] => (Allow) LPort=9009
FirewallRules: [{DF74502D-960D-486D-9EBD-1A8EE7DA3F3A}] => (Allow) LPort=9009
FirewallRules: [TCP Query User{3007DE4F-839D-4B26-B383-1F7C56A2AC76}C:\program files\itunes\itunes.exe] => (Allow) C:\program files\itunes\itunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [UDP Query User{42BF4768-6AF3-4120-A3A2-B82709E3F353}C:\program files\itunes\itunes.exe] => (Allow) C:\program files\itunes\itunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{FF209D7A-9C35-4222-B229-857E99F80562}] => (Allow) LPort=9009
FirewallRules: [{B479D746-EFEF-42BB-B809-1A557A1FECDF}] => (Allow) LPort=9009
FirewallRules: [{1DF44B8C-FF28-46F9-84E8-87FCA579133D}] => (Allow) LPort=9009
FirewallRules: [{62BBED2B-E952-4F56-9A97-09913834852D}] => (Allow) LPort=9009
FirewallRules: [{B205AAA3-B319-4358-8EEF-C262F8C38350}] => (Allow) LPort=9009
FirewallRules: [{501D6934-CA07-48D2-9167-5D454C13EB90}] => (Allow) LPort=9009
FirewallRules: [{35917989-328D-4CDE-A73E-54B31746FA2E}] => (Allow) LPort=9009
FirewallRules: [{70191F0D-4F3B-4184-87E1-6D12CC6241AA}] => (Allow) LPort=9009
FirewallRules: [{A1C46AD1-EB14-48EF-B767-7C0A956D86F2}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
FirewallRules: [{69CCC755-5CE1-4DB7-B2CC-3A44AD370D40}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\gcupd.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
FirewallRules: [{26B5CFAF-4476-4BB6-ABC4-8AAF8B86AD08}] => (Allow) LPort=9009
FirewallRules: [{E7D981BE-1CCF-4F6D-BF34-A498BBC8CC3D}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
FirewallRules: [{84ADD011-E8CF-47E9-8EF7-55551B061557}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\gcupd.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
FirewallRules: [{AF058C93-2EF5-4CAE-BD8E-1973E47BEF9F}] => (Allow) LPort=9009
FirewallRules: [{AFDEB616-9604-4121-BA04-04A8A724791F}] => (Allow) LPort=9009
FirewallRules: [{C52222DC-16FD-4F0F-8513-61F704A36E28}] => (Allow) LPort=9009
FirewallRules: [TCP Query User{C0744EC3-D1EA-40B3-AD7F-380890D5C2E7}C:\program files\crucial\crucial storage executive\java\bin\javaw.exe] => (Allow) C:\program files\crucial\crucial storage executive\java\bin\javaw.exe
FirewallRules: [UDP Query User{1D5050A4-8785-412C-BDF7-D129B288A45D}C:\program files\crucial\crucial storage executive\java\bin\javaw.exe] => (Allow) C:\program files\crucial\crucial storage executive\java\bin\javaw.exe
FirewallRules: [{FE3EFC1F-1C5C-4004-AE56-525410408E0D}] => (Allow) LPort=9009
FirewallRules: [{52AC3D5A-7B09-4E6B-929A-5C813CA0FF2E}] => (Allow) LPort=9009
FirewallRules: [{EECB9029-7208-4A90-A35B-304164D4934A}] => (Allow) D:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed]
FirewallRules: [{F5C3E5D2-C5F8-42C0-AF2E-BAD50B8FEF83}] => (Allow) D:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed]
FirewallRules: [{387EC60B-5807-4C02-AFA4-E611F5A72020}] => (Allow) LPort=9009
FirewallRules: [{ADA479A7-17F9-4F40-9166-FBEA784111F1}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{349AACC1-EE95-4A28-997B-D31FFAFA7328}] => (Allow) LPort=9009
FirewallRules: [{BED62281-FDD3-4079-9E45-9778104F8AF5}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{672A6CE4-7785-4E7B-823F-15BB9EEBB1CC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.158.820.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{64D115A7-1674-4D11-9974-63262B9E4A41}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.158.820.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{D11DA9F9-D254-4651-AD69-75FCAA0C0F7B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.158.820.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{3E72B403-8DA9-459F-8EFE-F1E24A2584D9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.158.820.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{AE26F048-5E85-4B55-A0FD-B159DFDCE743}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.158.820.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A95ECD70-DD7B-46FD-AFCA-62390350A07B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.158.820.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B2276395-B4D5-4A69-BC97-14696F389189}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.158.820.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{E5F3DDEF-837B-442C-858D-50760C8AE52F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.158.820.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{9D1EADDA-6F39-499D-9E7D-64D376D92E96}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdater.exe (Intuit, Inc. -> Intuit Inc.)
FirewallRules: [{460F92C7-8B69-4CD0-A1C2-A8D87694CACA}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe (Intuit, Inc. -> Intuit Inc.)
FirewallRules: [{0873B452-3C0F-434D-AE4E-38685BB6A386}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe (Intuit, Inc. -> Intuit Inc.)
FirewallRules: [{198D4469-6A9A-4134-89E0-8031E69C0321}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe (Intuit, Inc. -> Intuit Inc.)
FirewallRules: [{69E57EE4-9C55-49DC-BF92-E64A66BE71B7}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe (Intuit, Inc. -> Intuit Inc.)
FirewallRules: [{4F118A52-4D1A-4E5A-A807-02D6902F5241}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe (Intuit, Inc. -> Intuit Inc.)
FirewallRules: [{52FA4733-768D-4ED6-8DED-8E07509E4394}] => (Allow) C:\Users\Ray\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{309E742C-F700-443E-9EAA-B7655227B518}] => (Allow) C:\Users\Ray\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{877D75A2-6B9F-498C-92C0-9153578F25B5}] => (Allow) C:\Users\Ray\AppData\Roaming\Zoom\bin\airhost.exe => No File

==================== Restore Points =========================

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (05/05/2021 03:58:02 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname WINDOWS10.local already in use; will try WINDOWS10-2.local instead

Error: (05/05/2021 03:58:02 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister 4 WINDOWS10.local. Addr 192.168.1.17

Error: (05/05/2021 03:58:02 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.1.17:5353 16 WINDOWS10.local. AAAA FDAD:E41C:6031:0001:1185:7BB1:01DC:0240

Error: (05/04/2021 03:00:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: thinkorswim.exe, version: 0.0.0.0, time stamp: 0x5e0e28a5
Faulting module name: jvm.dll, version: 11.45.0.28, time stamp: 0x5feceb47
Exception code: 0xc000041d
Fault offset: 0x000000000012fd1a
Faulting process id: 0x630
Faulting application start time: 0x01d73dcd0de30fcf
Faulting application path: C:\Program Files\thinkorswim\thinkorswim.exe
Faulting module path: c:\program files\thinkorswim\jre_1968.2.0\bin\server\jvm.dll
Report Id: de6c6890-68fb-48cd-b434-24805ec382b5
Faulting package full name:
Faulting package-relative application ID:

Error: (05/04/2021 03:00:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: thinkorswim.exe, version: 0.0.0.0, time stamp: 0x5e0e28a5
Faulting module name: jvm.dll, version: 11.45.0.28, time stamp: 0x5feceb47
Exception code: 0xc0000005
Fault offset: 0x000000000012fd1a
Faulting process id: 0x630
Faulting application start time: 0x01d73dcd0de30fcf
Faulting application path: C:\Program Files\thinkorswim\thinkorswim.exe
Faulting module path: c:\program files\thinkorswim\jre_1968.2.0\bin\server\jvm.dll
Report Id: 7c697781-15d1-43e8-909b-4c6bab4f41bc
Faulting package full name:
Faulting package-relative application ID:

Error: (05/01/2021 12:00:15 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname WINDOWS10.local already in use; will try WINDOWS10-2.local instead

Error: (05/01/2021 12:00:15 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister 16 WINDOWS10.local. AAAA FE80:0000:0000:0000:1185:7BB1:01DC:0240

Error: (05/01/2021 12:00:15 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from FE80:0000:0000:0000:1185:7BB1:01DC:0240:5353 16 WINDOWS10.local. AAAA FDAD:E41C:6031:0001:1185:7BB1:01DC:0240

System errors:
=============
Error: (05/06/2021 10:48:30 AM) (Source: DCOM) (EventID: 10010) (User: WINDOWS10)
Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout.

Error: (05/06/2021 10:48:30 AM) (Source: DCOM) (EventID: 10010) (User: WINDOWS10)
Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout.

Error: (05/06/2021 09:13:32 AM) (Source: DCOM) (EventID: 10010) (User: WINDOWS10)
Description: The server Microsoft.MicrosoftOfficeHub_18.2008.12711.0_x64__8wekyb3d8bbwe!Microsoft.MicrosoftOfficeHub.AppXt4mh7c9swwc5cmd5jgmtmwcfmvkddpn1.mca did not register with DCOM within the required timeout.

Error: (05/06/2021 06:36:02 AM) (Source: DCOM) (EventID: 10010) (User: WINDOWS10)
Description: The server Microsoft.MicrosoftOfficeHub_18.2008.12711.0_x64__8wekyb3d8bbwe!Microsoft.MicrosoftOfficeHub.AppXt4mh7c9swwc5cmd5jgmtmwcfmvkddpn1.mca did not register with DCOM within the required timeout.

Error: (05/06/2021 05:33:58 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80240017: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.339.21.0).

Error: (05/06/2021 12:02:19 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x8024200b: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.339.21.0).

Error: (05/05/2021 06:02:33 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x8024200b: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.339.21.0).

Windows Defender:
================
Date: 2021-05-06 12:35:28
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2021-05-05 12:49:52
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2021-05-04 16:00:39
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2021-05-03 13:33:04
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2021-05-02 12:24:00
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2021-05-06 07:15:21
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.339.42.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.18100.6
Error code: 0x80240438
Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.

Date: 2021-05-06 00:02:19
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version: 1.339.21.0
Previous security intelligence Version: 1.337.623.0
Update Source: User
Security intelligence Type: AntiSpyware
Update Type: Delta
Current Engine Version: 1.1.18100.6
Previous Engine Version: 1.1.18100.5
Error code: 0x80070666
Error description: Another version of this product is already installed. Installation of this version cannot continue. To configure or remove the existing version of this product, use Add/Remove Programs on the Control Panel.

Date: 2021-05-06 00:02:19
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version: 1.339.21.0
Previous security intelligence Version: 1.337.623.0
Update Source: User
Security intelligence Type: AntiVirus
Update Type: Delta
Current Engine Version: 1.1.18100.6
Previous Engine Version: 1.1.18100.5
Error code: 0x80070666
Error description: Another version of this product is already installed. Installation of this version cannot continue. To configure or remove the existing version of this product, use Add/Remove Programs on the Control Panel.

Date: 2021-05-06 00:02:19
Description:
Microsoft Defender Antivirus has encountered an error trying to update the engine.
New Engine Version: 1.1.18100.6
Previous Engine Version: 1.1.18100.5
Error Code: 0x80070666
Error description: Another version of this product is already installed. Installation of this version cannot continue. To configure or remove the existing version of this product, use Add/Remove Programs on the Control Panel.

Date: 2021-05-05 18:02:32
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version: 1.339.21.0
Previous security intelligence Version: 1.337.623.0
Update Source: User
Security intelligence Type: AntiSpyware
Update Type: Delta
Current Engine Version: 1.1.18100.6
Previous Engine Version: 1.1.18100.5
Error code: 0x80070666
Error description: Another version of this product is already installed. Installation of this version cannot continue. To configure or remove the existing version of this product, use Add/Remove Programs on the Control Panel.

==================== Memory info ===========================

BIOS: American Megatrends Inc. F8 04/10/2018
Motherboard: Gigabyte Technology Co., Ltd. Z270P-D3-CF
Processor: Intel(R) Core(TM) i5-7600 CPU @ 3.50GHz
Percentage of memory in use: 52%
Total physical RAM: 16344.02 MB
Available physical RAM: 7745.63 MB
Total Virtual: 34776.02 MB
Available Virtual: 20006.26 MB

==================== Drives ================================

Drive c: (WINDOWS SSD) (Fixed) (Total:464.78 GB) (Free:236.14 GB) NTFS
Drive d: (D Drive) (Fixed) (Total:931.51 GB) (Free:495.69 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive e: (E Drive) (Fixed) (Total:931.51 GB) (Free:405.33 GB) NTFS
Drive f: (Backup Disk 1) (Fixed) (Total:2794.39 GB) (Free:1546.2 GB) NTFS
Drive g: (Backup Disk 2) (Fixed) (Total:2794.39 GB) (Free:777.01 GB) NTFS
Drive h: (Extra Storage) (Fixed) (Total:931.51 GB) (Free:331.55 GB) NTFS

\\?\Volume{37bc1a99-6384-465d-bc0e-9c9f3a40feb3}\ () (Fixed) (Total:0.49 GB) (Free:0.08 GB) NTFS
\\?\Volume{b59db32c-d806-43a6-9397-6b7df91f6b0d}\ (SYSTEM) (Fixed) (Total:0.19 GB) (Free:0.16 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 5FFD1F63)

Partition: GPT.

==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 1CB687D9)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

==========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 5CEE4027)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

==========================================================
Disk: 3 (Size: 2794.5 GB) (Disk ID: 0C45598A)

Partition: GPT.

==========================================================
Disk: 4 (Size: 2794.5 GB) (Disk ID: 0738CDA9)

Partition: GPT.

==========================================================
Disk: 5 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 8CC0E589)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================

justpassinthru2k · May 6, 2021

Attached

Addition.txt FRST.txt

AdvancedSetup · May 6, 2021

Hello @justpassinthru2k

Please go to Control Panel, Programs, Programs and Features and uninstall the following

Bonjour

Then follow the directions below to clean up Google Chrome and see if that helps with your issue.

Now, that said. Why do you have all those ports open on your Firewall?

Maybe you want to try doing a full factory reset of the firewall?

justpassinthru2k · May 6, 2021

Thank you. I have completed what you had directed me to do pertaining to Google Chrome but I have a question. Must I also perform this cleaning function on any IPhone or Tablet that I access Google Chrome from?

AdvancedSetup · May 6, 2021

In theory yes, but for this purpose just don't re-enable the Sync yet and test the computer out first before turning sync back on.

AdvancedSetup · May 6, 2021

If you want to reset the Firewall back to normal you can open an Elevated Admin command prompt and run the following

netsh advfirewall reset

Then restart the computer

justpassinthru2k · May 6, 2021

I will hold up on the Firewall Reset for now. I have removed Bonjour from my system, I have run Malwarebytes with zero detections and I have completed the cleaning of Google Chrome. Please allow me a week of testing for me to feel confident enough to post a "fixed" remark. 70% of the time this issue occurs daily so a week of testing may be necessary. I will test and update this page with the results. Thank you for your help so far!! I greatly appreciate it.

AdvancedSetup · May 6, 2021

You're quite welcome

Take care

justpassinthru2k · May 7, 2021

UPDATE:

Lost network connection again this morning.

AdvancedSetup · May 7, 2021

I would recommend doing the factory reset of your firewall as the next step

justpassinthru2k · May 9, 2021

Factory reset of firewall completed Friday night. This morning, Sunday, lost network connection again. Driving me nuts!! Any other suggestions?

AdvancedSetup · May 10, 2021

If you have a wired connection try pulling the connector on both ends out of the plugin port. Then reinsert it.

Have you tried updating your Network drivers ?

justpassinthru2k · May 12, 2021

Network cable has been replaced when this issue had first started. Drivers seem to be the most current available. This issue has remained constant even thru a fresh re-installation of Windows 10 Pro. Just so you know, I am a retired Desktop Support Tech with many years of experience. I have seen my share of strange issues and this one rates in the top 3 for sure. I accidentally came across a possible solution for which the fix I recently implemented so I am in the testing stages now. See this link: https://www.youtube.com/watch?v=UEE0UD_tgLQ&ab_channel=MDTechVideosInternational

I will update this thread in a few days.

Thank you,

Ray

AdvancedSetup · May 12, 2021

https://itectec.com/superuser/optimal-setting-for-advanced-parameters-for-realtek-pci-e-gbe-family-network-card/

https://packetlosstest.com/

If the above does not help you might consider doing a factory reset on your router

How To Reset Your Router
https://setuprouter.com/networking/how-to-reset-your-router/

justpassinthru2k · May 25, 2021

As of today, May 25 2021, I have not experienced the issue of losing internet/network connectivity again. It is safe to assume that the fix implemented above on May 11. See here: https://www.youtube.com/watch?v=UEE0UD_tgLQ&ab_channel=MDTechVideosInternational was the proper fix. I thank you for all your assistance in trying to solve this issue. Bleeping Computer is a blessing to all of us. Please keep up the terrific work, we all appreciate it very much! Have a great day!

Ray

AdvancedSetup · May 25, 2021

It very well could have been your issue. Seems to make sense if the issue has not returned.

Glad to hear it's working well again.

Take care

Losing wired connectivity. Can allowing Port 9009 be causing this???

Recommended Posts

Link to post

Share on other sites

***This is an automated reply***

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Create an account or sign in to comment

Create an account

Sign in

Recently Browsing 0 members

Important Information

This is an automated reply