Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-08-2016 Ran by Main (2016-08-07 09:03:47) Running from C:\Users\Main\Downloads Windows 10 Pro Version 1511 (X64) (2016-07-02 18:43:54) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-517480369-4133510133-2013949132-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-517480369-4133510133-2013949132-503 - Limited - Disabled) Guest (S-1-5-21-517480369-4133510133-2013949132-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-517480369-4133510133-2013949132-1007 - Limited - Enabled) Main (S-1-5-21-517480369-4133510133-2013949132-1000 - Administrator - Enabled) => C:\Users\Main UpdatusUser (S-1-5-21-517480369-4133510133-2013949132-1005 - Limited - Enabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\uTorrent) (Version: 3.4.6.42042 - BitTorrent Inc.) 1979 Revolution - Black Friday (HKLM-x32\...\1459441475_is1) (Version: 2.0.0.1 - GOG.com) 7 Grand Steps, Step 1: What Ancients Begat (HKLM-x32\...\Steam App 238930) (Version: - Mousechief) 7-Zip 16.02 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1602-000001000000}) (Version: 16.02.00.0 - Igor Pavlov) A2A Accu-Sim P-51 (HKLM-x32\...\A2A Accu-Sim P-51) (Version: - ) A2A C172 Trainer (HKLM-x32\...\A2A C172 Trainer) (Version: - ) A2A Wings of POWER 3 P-51 (HKLM-x32\...\A2A Wings of POWER 3 P-51) (Version: - ) ACA & MEP 2016 Object Enabler (Version: 7.8.44.0 - Autodesk) Hidden Accu-Feel (HKLM-x32\...\Accu-Feel) (Version: - ) Accu-Feel Air, Land, and Sea (HKLM-x32\...\Accu-Feel Air, Land, and Sea) (Version: - ) Accu-Sim Comanche 250 for FSX (HKLM-x32\...\Accu-Sim Comanche 250 for FSX) (Version: - ) Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.09 - Adobe Systems) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 22.0.0.153 - Adobe Systems Incorporated) Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated) Adobe Flash Player 23 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 23.0.0.126 - Adobe Systems Incorporated) Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated) Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.4.194 - Adobe Systems, Inc.) Aerosoft's - MyTraffic 2013 (HKLM-x32\...\{37F50C53-EDED-4FFE-9877-532A335C5C18}) (Version: 1.00 - Aerosoft) Agatha Christie - The ABC Murders (HKLM-x32\...\1452691186_is1) (Version: 2.0.0.3 - GOG.com) Agisoft PhotoScan Professional (HKLM\...\{C47F6FE9-07B1-4D2D-A68E-D21904CAB554}) (Version: 1.2.5 - Agisoft) AirMech (HKLM\...\Steam App 206500) (Version: - Carbon Games) Akamai NetSession Interface (HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\Akamai) (Version: - Akamai Technologies, Inc) Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ARK: Survival Evolved (HKLM-x32\...\Steam App 346110) (Version: - Studio Wildcard) ARK: Survival Of The Fittest (HKLM\...\Steam App 407530) (Version: - Studio Wildcard) Arma 3 (HKLM-x32\...\Steam App 107410) (Version: - Bohemia Interactive) Ashes of the Singularity (HKLM-x32\...\Ashes of the Singularity_is1) (Version: - ) Assassin's Creed Rogue (HKLM-x32\...\Uplay Install 895) (Version: - Ubisoft) Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team) AutoCAD 2010 - English (HKLM\...\AutoCAD 2010 - English) (Version: 18.0.55.0 - Autodesk) AutoCAD 2010 - English (Version: 18.0.55.0 - Autodesk) Hidden AutoCAD 2010 Language Pack - English (Version: 18.0.55.0 - Autodesk) Hidden AutoCAD 2016 (Version: 20.1.49.0 - Autodesk) Hidden AutoCAD 2016 Language Pack - English (Version: 20.1.49.0 - Autodesk) Hidden AutoCAD Architecture 2016 - English (Version: 7.8.44.0 - Autodesk) Hidden AutoCAD Architecture 2016 (Version: 7.8.44.0 - Autodesk) Hidden AutoCAD Architecture 2016 Core (Version: 7.8.44.0 - Autodesk) Hidden AutoCAD Architecture 2016 Language Core - English (Version: 7.8.44.0 - Autodesk) Hidden AutoCAD Architecture 2016 Language Shared - English (Version: 7.8.44.0 - Autodesk) Hidden AutoCAD Architecture 2016 Shared (Version: 7.8.44.0 - Autodesk) Hidden AutoCAD Civil 3D Matterhorn Private Pack (Version: 10.5.604.0 - Autodesk) Hidden Autodesk A360 Collaboration for Revit 2017 (HKLM\...\Autodesk A360 Collaboration for Revit 2017) (Version: 17.0.416.0 - Autodesk) Autodesk A360 Collaboration for Revit 2017 (Version: 17.0.416.0 - Autodesk) Hidden Autodesk Advanced Material Library Image Library 2016 (HKLM-x32\...\{94AD53E7-493B-4291-8714-7A3B761D2783}) (Version: 6.3.0.15 - Autodesk) Autodesk App Manager 2016 (HKLM-x32\...\{4ECF9E00-2978-46AF-BD80-455EFEAB7A93}) (Version: 2.0.0 - Autodesk) Autodesk AutoCAD Architecture 2016 - English (HKLM\...\AutoCAD Architecture 2016 - English) (Version: 7.8.44.0 - Autodesk) Autodesk AutoCAD Civil 3D 2016 - English (HKLM\...\Autodesk AutoCAD Civil 3D 2016 - English) (Version: 10.5.604.0 - Autodesk) Autodesk AutoCAD Civil 3D 2016 - English (Version: 10.5.604.0 - Autodesk) Hidden Autodesk AutoCAD Civil 3D 2016 (Version: 10.5.604.0 - Autodesk) Hidden Autodesk AutoCAD Civil 3D 2016 32 Bit Object Enabler on Autodesk Storm and Sanitary Analysis 2016 - Language Neutral (HKLM-x32\...\{E35F56AB-84A6-4E3E-81C4-638D286965ED}) (Version: 604.0 - Autodesk, Inc.) Autodesk AutoCAD Civil 3D 2016 64 Bit Object Enabler on AutoCAD Architecture 2016 - English - English (United States) (HKLM\...\{A22961BD-C2C9-4978-B4F1-E652E109296C}) (Version: 604.0 - Autodesk, Inc.) Autodesk AutoCAD Civil 3D 2016 64 Bit Object Enabler on Revit 2016 - Language Neutral (HKLM\...\{B796305D-22DA-4FD6-98CA-9D825F5D4872}) (Version: 604.0 - Autodesk, Inc.) Autodesk AutoCAD Civil 3D 2016 Language Pack - English (Version: 10.5.604.0 - Autodesk) Hidden Autodesk AutoCAD Map 3D 2016 (Version: 19.0.020.16 - Autodesk) Hidden Autodesk AutoCAD Map 3D 2016 Language Pack - English (Version: 19.0.020.16 - Autodesk) Hidden Autodesk AutoCAD Performance Feedback Tool 1.2.4 (HKLM-x32\...\{4E20873D-BC20-495C-AFD9-B18877B7F9BB}) (Version: 1.2.4.0 - Autodesk) Autodesk BIM 360 Glue AutoCAD 2016 Add-in 64 bit (HKLM\...\{4BEE127E-95C4-434D-ABAC-65155192BB24}) (Version: 4.35.1742 - Autodesk) Autodesk BIM 360 Revit 2016 Add-in 64 bit (HKLM\...\{C5A83116-8654-47A3-A3B1-B76905C8A198}) (Version: 4.35.3969 - Autodesk) Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.1.3.0 - Autodesk) Autodesk Content Service (x32 Version: 3.1.3.0 - Autodesk) Hidden Autodesk Content Service (x32 Version: 3.2.0.0 - Autodesk) Hidden Autodesk Content Service Language Pack (x32 Version: 3.1.3.0 - Autodesk) Hidden Autodesk Content Service Language Pack (x32 Version: 3.2.0.0 - Autodesk) Hidden Autodesk Featured Apps 2016 (HKLM-x32\...\{D42F37CD-9AF9-4435-A474-B387C5BB6B47}) (Version: 2.0.0 - Autodesk) Autodesk License Service (x64) - 3.1 (HKLM\...\{EB6FE58F-8576-4272-BB9C-6B47D9EDFA4D}) (Version: 3.1.26.0 - Autodesk) Autodesk Material Library 2017 (HKLM-x32\...\{8FB9F735-D64C-4991-8D91-4CDDAB1ABDEE}) (Version: 15.11.3.0 - Autodesk) Autodesk Material Library Base Resolution Image Library 2016 (HKLM-x32\...\{6B4CFC6E-ECB0-47FE-95D3-65C680ED0687}) (Version: 6.3.0.15 - Autodesk) Autodesk Material Library Base Resolution Image Library 2017 (HKLM-x32\...\{3FBFBC43-9882-43FA-B979-2D53896747B3}) (Version: 15.11.3.0 - Autodesk) Autodesk Material Library Low Resolution Image Library 2017 (HKLM-x32\...\{360AC116-6CD4-4E7D-8174-28D47B05E898}) (Version: 15.11.3.0 - Autodesk) Autodesk Material Library Medium Resolution Image Library 2017 (HKLM-x32\...\{CB6E007E-701D-42CD-AF0E-4BE9C36C7F7C}) (Version: 15.11.3.0 - Autodesk) Autodesk Revit 2017 (HKLM\...\Autodesk Revit 2017) (Version: 17.0.416.0 - Autodesk) Autodesk Revit 2017 (HKLM\...\Revit 2017) (Version: - ) Autodesk Revit Content Libraries 2017 (HKLM\...\Autodesk Revit Content Libraries 2017) (Version: 17.0.416.0 - Autodesk) Autodesk Revit Content Libraries 2017 (HKLM\...\Revit Content Libraries 2017) (Version: - ) Autodesk Storm and Sanitary Analysis 2016 (HKLM-x32\...\{5681035C-291C-4BE3-B20E-0F0472834883}) (Version: 10.1.53 - Autodesk, Inc.) Autodesk Storm and Sanitary Analysis 2016 (HKLM-x32\...\Autodesk Storm and Sanitary Analysis 2016) (Version: - ) Autodesk Storm and Sanitary Analysis 2016 x64 Plug-in (HKLM\...\{A225C652-5B4B-433D-8E22-AC0F77C2842E}) (Version: 10.1.53 - Autodesk, Inc.) Autodesk Subassembly Composer on Autodesk AutoCAD Civil 3D 2016 - English - English (United States) (HKLM\...\{FAEDEC37-6C81-4F33-84A2-28E8D493EDA0}) (Version: 604.0 - Autodesk, Inc.) Autodesk Workflows 2016 (HKLM\...\{535CDED0-D690-4738-83EE-09056A365BAC}) (Version: 6.3.0.18 - Autodesk, Inc.) Autodesk Workflows 2017 (HKLM\...\{23A13F78-5B67-441A-ABF9-48BE8B5455DB}) (Version: 15.11.13.0 - Autodesk, Inc.) Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.2.2276 - AVAST Software) Batman - The Telltale Series (HKLM-x32\...\2140144872_is1) (Version: 2.0.0.3 - GOG.com) Batman Arkham Knight v.1.0.4.5 (HKLM-x32\...\Batman Arkham Knight_is1) (Version: - ) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.7.2.45672 - Electronic Arts) Battlefleet Gothic: Armada (HKLM-x32\...\Battlefleet Gothic: Armada_is1) (Version: - ) Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB) BattlEye for Iron Front Uninstall (HKLM-x32\...\BattlEye for Iron Front) (Version: - ) Battlezone 98 Redux (HKLM-x32\...\Battlezone 98 Redux_is1) (Version: - ) Beavis And Butt-head (HKLM-x32\...\Beavis And Butt-head) (Version: - ) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) CAM (HKLM-x32\...\{B6CB1018-1191-4170-A33F-786E17AF1913}) (Version: 3.1.20 - NZXT) Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - Canon Inc.) Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.2.0 - Canon Inc.) Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.) Canon MX520 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX520_series) (Version: 1.00 - Canon Inc.) Canon MX520 series On-screen Manual (HKLM-x32\...\Canon MX520 series On-screen Manual) (Version: 7.6.0 - Canon Inc.) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.) Carenado Hawker850XP v1.1 (HKLM-x32\...\Carenado Hawker850XP v1.1) (Version: - Carenado) Carenado TBM850 HD SERIES FSX/P3D (HKLM-x32\...\Carenado TBM850 HD SERIES FSX/P3D) (Version: 1.00.00.00 - Carenado) CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.6059 - CDBurnerXP) Chrome Remote Desktop Host (HKLM-x32\...\{159AA592-31AA-4EAC-A6CB-B47AB2CB1476}) (Version: 52.0.2743.48 - Google Inc.) Cities in Motion 2 (HKLM-x32\...\Steam App 225420) (Version: - ) Cities Skylines - Deluxe Edition v.1.4.0-f3 (HKLM-x32\...\Cities Skylines - Deluxe Edition_is1) (Version: - ) Command & Conquer™ and The Covert Operations™ (HKLM-x32\...\{050E298D-C9B8-4582-A332-26201268A297}) (Version: 1.0.0.0 - Electronic Arts, Inc.) Commandos 2: Men of Courage (HKLM-x32\...\Steam App 6830) (Version: - Pyro Studios) CONSORTIUM (HKLM-x32\...\Q09OU09SVElVTQ==_is1) (Version: 1 - ) Cradle (HKLM-x32\...\Cradle_is1) (Version: - ) Crazy Machines 2 (HKLM-x32\...\Steam App 18400) (Version: - Fakt Software) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.46.1.0327 - DT Soft Ltd) Data Access Objects (DAO) 3.5 (HKLM-x32\...\Data Access Objects (DAO) 3.5) (Version: - ) Day of the Tentacle Remastered (HKLM-x32\...\1456922969_is1) (Version: 2.0.0.4 - GOG.com) DCS World (HKLM-x32\...\Steam App 223750) (Version: - Eagle Dynamics) Descent and Descent 2 (HKLM-x32\...\GOGPACKDESCENTGP_is1) (Version: 2.0.0.7 - GOG.com) Deus Ex: Game of the Year Edition (HKLM-x32\...\Steam App 6910) (Version: - Ion Storm) Deus Ex: Revision (HKLM-x32\...\Steam App 397550) (Version: - Ion Storm) DGE-530T Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{3DA3BCBA-191C-47FB-9710-2B2DD9A5C257}) (Version: 7.17.304.2010 - D-Link) Digital Radio - Version 1.0.4 (HKLM-x32\...\Digital Radio_is1) (Version: - Stefano Grassi Software) DiRT Rally (HKLM\...\ZGlydHJhbGx5_is1) (Version: 1 - ) Discord (HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\Discord) (Version: 0.0.290 - Hammer & Chisel, Inc.) Distance (HKLM-x32\...\Distance_is1) (Version: Build 4019 - Refract Studios) Dragons Dogma Dark Arisen (HKLM-x32\...\Dragons Dogma Dark Arisen_is1) (Version: - ) Dreamfall - The Longest Journey (HKLM-x32\...\GOGPACKDREAMFALL_is1) (Version: 2.0.0.12 - GOG.com) Dropbox (HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\Dropbox) (Version: 7.4.30 - Dropbox, Inc.) Dropsy (HKLM-x32\...\1441869560_is1) (Version: 2.1.0.3 - GOG.com) DVDFab 9.1.7.4 (12/11/2014) (HKLM-x32\...\DVDFab 9_is1) (Version: - Fengtao Software Inc.) Dynamo 0.9.1 (HKLM\...\{85626FB3-CAF9-49C1-AA28-E3C75164BD6F}) (Version: 0.9.1.4062 - Autodesk) ElsaWin (HKLM-x32\...\ElsaWin) (Version: 4.10 - ) Equalizer APO (HKLM\...\EqualizerAPO) (Version: 1.1.1 - ) ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB) ESRI MapObjects 2 Runtime (HKLM-x32\...\MapObjects 2.1 Runtime) (Version: - ) Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version: - SCS Software) Falcon 4.0 (HKLM-x32\...\Falcon 4.0) (Version: - ) Falcon BMS 4.32 (HKLM-x32\...\Falcon BMS 4.32) (Version: 4.32 - Benchmark Sims) Fallout 4 (HKLM-x32\...\Fallout 4_is1) (Version: - ) FARO LS 1.1.406.58 (HKLM-x32\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production) FARO LS 1.1.501.0 (64bit) (HKLM-x32\...\{8A470330-70B2-49AD-86AF-79885EF9898A}) (Version: 5.1.0.30630 - FARO Scanner Production) FARO LS 1.1.502.0 (64bit) (HKLM-x32\...\{66D83FE0-D798-4B38-86FE-FB48151E5AEF}) (Version: 5.2.0.35213 - FARO Scanner Production) Feature Extraction (HKLM-x32\...\{E6C35896-CFCF-4361-A28F-C60A3AA51859}) (Version: 1.0.1 - Autodesk, Inc.) FileZilla Client 3.10.1.1 (HKLM-x32\...\FileZilla Client) (Version: 3.10.1.1 - Tim Kosse) Final Fantasy X X-2 HD Remaster (HKLM-x32\...\Final Fantasy X X-2 HD Remaster_is1) (Version: - ) Flawless Widescreen version 1.0.15 (HKLM-x32\...\{7348D82E-8C68-48FF-BA2D-8C97B5B4B3D8}_is1) (Version: 1.0.15 - Flawless Widescreen) Flight One Software - 177 Cardinal (HKLM-x32\...\177cardinal) (Version: 1.1 - Flight One Software) Flight One Software Pilatus PC-12 fsx (HKLM-x32\...\pc12_FSX) (Version: - ) Flight Simulator X (HKLM-x32\...\RTMshadow_{A9729B90-D37B-4A69-B66A-7436AC1F7274}) (Version: - ) Flight Simulator X Service Pack 1 (HKLM-x32\...\SP1shadow_{A9729B90-D37B-4A69-B66A-7436AC1F7274}) (Version: - ) foobar2000 v1.3.10 (HKLM-x32\...\foobar2000) (Version: 1.3.10 - Peter Pawlowski) Fractured Space (HKLM-x32\...\Steam App 310380) (Version: - Edge Case Games Ltd.) Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - ) Free Allegiance 1.2 - Application Compatibility Database (HKLM\...\{20b5d199-5e1a-0d41-9d28-4e40b5ba0e7a}.sdb) (Version: - ) Free Allegiance 1.2 (HKLM-x32\...\Free Allegiance 1.2) (Version: 1.2 - The Free Allegiance Organization) FSFDT FSCopilot (HKLM-x32\...\FSFDT FSCopilot) (Version: - ) FSFDT FSInn (HKLM-x32\...\FSFDT FSInn) (Version: - ) FSX Eagle Rotorcraft Simulations Piaggio P-180 (HKLM-x32\...\FSX Eagle Rotorcraft Simulations Piaggio P-180) (Version: - ) Futuremark SystemInfo (HKLM-x32\...\{70690D9E-3D00-47D6-9CE9-BC3B6F900447}) (Version: 4.41.563.0 - Futuremark) Games (HKLM\...\{55956d7b-35e0-49fa-8343-7adc8e1eb34b}.sdb) (Version: - ) GDR 4042 for SQL Server 2008 R2 (KB3045313) (64-bit) (HKLM\...\KB3045313) (Version: 10.52.4042.0 - Microsoft Corporation) GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team) GlobalMapper 17 (64-bit) (HKLM\...\{37B1A75B-0AFC-430E-B77E-599F616670F0}) (Version: 17.02.1000 - Blue Marble Geographics) GOG.com Unreal Tournament GOTY (HKLM\...\{fa491d91-322c-4059-a1f7-4a79782edee8}.sdb) (Version: - ) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 51.0.2704.103 - Google Inc.) Google Drive (HKLM-x32\...\{709316AD-161C-4D5C-9AE7-0B3A822DA271}) (Version: 1.30.2170.0459 - Google, Inc.) Google Earth Pro (HKLM-x32\...\{44FC61F0-2F8A-11E3-8CAE-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games) Grim Fandango Remastered (HKLM-x32\...\1207667183_is1) (Version: 2.0.0.2 - GOG.com) Ground Environment X USA-Canada (HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\Ground Environment X USA-Canada) (Version: - ) Hard Reset (HKLM\...\Steam App 98400) (Version: - Flying Wild Hog) Hard Reset Redux (HKLM\...\Steam App 407810) (Version: - Flying Wild Hog) HAWKEN (HKLM-x32\...\Steam App 271290) (Version: - Adhesive Games) Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment) Heaven Benchmark version 4.0 (HKLM-x32\...\Unigine Heaven Benchmark (Basic Edition)_is1) (Version: 4.0 - Unigine Corp.) HL-2270DW (HKLM-x32\...\{E2A97415-BD97-4867-B906-05E39E9EE51F}) (Version: 1.1.6.0 - Brother Industries, Ltd.) Homeworld Deserts of Kharak (HKLM-x32\...\Homeworld Deserts of Kharak_is1) (Version: - ) Homeworld Remastered Collection (HKLM-x32\...\SG9tZXdvcmxkUmVtYXN0ZXJlZENvbGxlY3Rpb24=_is1) (Version: 1 - ) Hyper Light Drifter (HKLM-x32\...\1452863689_is1) (Version: 2.0.0.2 - GOG.com) IdleMaster (HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\1d85483b1c982d8c) (Version: 0.8.0.2 - IdleMaster) Image Resizer for Windows (64 bit) (Version: 3.0.4802.35565 - Brice Lambson) Hidden Image Resizer for Windows (HKLM-x32\...\{69d72156-6582-4556-8637-06f40aa7f85b}) (Version: 3.0.4802.35565 - Brice Lambson) InstallFont (x32 Version: 1.0.0 - Graitec) Hidden Insurgency (HKLM-x32\...\Steam App 222880) (Version: - New World Interactive) Intel(R) IPP Run-Time Installer 5.3 Update 4 for Windows* on IA-32 (HKLM-x32\...\{754854DC-2E0A-49D8-A1A1-426C1F9B1459}) (Version: 5.3.4.087 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation) Interplanetary (HKLM-x32\...\Interplanetary_is1) (Version: - ) Interstate '76 Arsenal (HKLM-x32\...\Interstate '76 Arsenal_is1) (Version: - GOG.com) iPhone Configuration Utility (HKLM-x32\...\{B90FCEB7-2B0C-4D27-95B5-54238DF059ED}) (Version: 3.6.2.300 - Apple Inc.) Iron Front : Liberation 1944 (HKLM-x32\...\Steam App 91330) (Version: - X1 Software) IronPython 2.7.3 (HKLM-x32\...\{1EBADAEA-1A0F-40E3-848C-0DD8C5E5A10D}) (Version: 2.7.31000.0 - IronPython Team) iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.) Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation) Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Kerbal Space Program (HKLM-x32\...\1429864849_is1) (Version: 2.2.0.4 - GOG.com) King's Quest 4+5+6 (HKLM-x32\...\King's Quest 4+5+6_is1) (Version: - GOG.com) K-Lite Codec Pack 10.9.0 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.9.0 - ) L.A. Noire (HKLM-x32\...\{915726DF-7891-444A-AA03-0DF1D64F561A}) (Version: 1.00.0000 - Rockstar Games) Lords of the Realm II (HKLM-x32\...\Steam App 397350) (Version: - Impressions Games) Mark of the Ninja (HKLM-x32\...\Steam App 214560) (Version: - Klei Entertainment) Max Payne 3 (HKLM-x32\...\Steam App 204100) (Version: - Rockstar Studios) Merchants of Kaidan (HKLM-x32\...\Steam App 294020) (Version: - Forever Entertainment S. A.) MeshLab_64b 1.3.3 (HKLM-x32\...\MeshLab_64b) (Version: 1.3.3 - Paolo Cignoni - Guido Ranzuglia VCG - ISTI - CNR) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft ESP SimConnect Client v1.0.20.0 (HKLM-x32\...\{C0A9FCC1-9725-4679-8AC2-FE501B139B63}) (Version: 1.0.20.0 - Microsoft Corporation) Microsoft Flight Simulator X SDK (HKLM-x32\...\InstallShield_{33571E15-3EB4-4190-BA74-C6CA97288461}) (Version: 1.00.0000 - Microsoft Game Studios) Microsoft Flight Simulator X: Acceleration (HKLM-x32\...\FlightSim_{A9729B90-D37B-4A69-B66A-7436AC1F7274}) (Version: 10.0.61637.0 - Microsoft Game Studios) Microsoft Games for Windows - LIVE (HKLM-x32\...\{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}) (Version: 3.1.186.0 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation) Microsoft Garage Mouse without Borders (HKLM-x32\...\{D3BC954F-D661-474C-B367-30EB6E56542E}) (Version: 2.1.2.1212 - Microsoft Garage) Microsoft LifeCam (HKLM\...\{6965A8D2-465D-4F98-9FAA-0E9E2348F329}) (Version: 3.22.270.0 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Report Viewer Redistributable 2008 SP1 (HKLM-x32\...\Microsoft Report Viewer Redistributable 2008 (KB971119)) (Version: - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server 2008 R2 (64-bit) (HKLM\...\Microsoft SQL Server 2008 R2) (Version: - Microsoft Corporation) Microsoft SQL Server 2008 R2 Native Client (HKLM\...\{49860BCD-24D6-44C1-922E-AC12FE32234E}) (Version: 10.52.4042.0 - Microsoft Corporation) Microsoft SQL Server 2008 R2 Policies (HKLM-x32\...\{D21BC5B2-CBAC-48FA-A701-B5A63C1CA7B8}) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft SQL Server 2008 R2 Setup (English) (HKLM\...\{B2213E4E-F502-4D36-BE95-9293C866EF3F}) (Version: 10.52.4042.0 - Microsoft Corporation) Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{B40EE88B-400A-4266-A17B-E3DE64E94431}) (Version: 10.1.2731.0 - Microsoft Corporation) Microsoft SQL Server Browser (HKLM-x32\...\{BF9BF038-FE03-429D-9B26-2FA0FD756052}) (Version: 10.52.4000.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 Query Tools ENU (HKLM-x32\...\{DDFD8348-058C-4F4B-85E5-6D740D4AB3FE}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{288D79EE-A2D1-42AF-9597-B0ADCC23A8ED}) (Version: 10.52.4000.0 - Microsoft Corporation) Microsoft Visual Basic Power Packs 3.0 (HKLM-x32\...\{7B4D193B-D76D-308B-8B12-5D9BB1CBCE6C}) (Version: 9.0.30214 - Microsoft) Microsoft Visual Basic PowerPacks 10.0 (HKLM-x32\...\{2D9F8079-7D50-3EFD-B3BD-ED642E4EE756}) (Version: 10.0.20911 - Microsoft) Microsoft Visual Basic PowerPacks 2.0 (HKLM-x32\...\{5FF8BC50-FBE4-4DD0-93A9-FA2DE2E170D5}) (Version: 2.0.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{4ECF4BDC-8387-329A-ABE9-CF5798F84BB2}) (Version: 9.0.35191 - Microsoft Corporation) Microsoft Works 6-9 Converter (HKLM-x32\...\{95140000-0137-0409-0000-0000000FF1CE}) (Version: 14.0.6120.5002 - Microsoft Corporation) Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft) Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation) Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation) Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation) Mind Path to Thalamus (HKLM-x32\...\Mind Path to Thalamus_is1) (Version: - ) mIRC (HKLM-x32\...\mIRC) (Version: 7.32 - mIRC Co. Ltd.) Moto Racer (HKLM-x32\...\1207658895_is1) (Version: 2.1.0.11 - GOG.com) Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Mozilla Firefox 43.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 43.0.1 (x86 en-US)) (Version: 43.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0.0.5780 - Mozilla) MSI Afterburner 4.1.1 (HKLM-x32\...\Afterburner) (Version: 4.1.1 - MSI Co., LTD) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation) Mumble 1.2.8 (HKLM-x32\...\{A9DBD31A-A09F-4C7E-86D1-3B21C59000D1}) (Version: 1.2.8 - Thorvald Natvig) My Game Long Name (HKLM\...\UDK-6c274d86-806f-4910-ac61-bcb3afcd5a84) (Version: - Epic Games, Inc.) My Game Long Name (HKLM\...\UDK-ab00101f-1bd8-49c6-bd4b-764b9324adb1) (Version: - Epic Games, Inc.) My Game Long Name (HKLM\...\UDK-e9a8d542-e9cd-4bd2-a0ba-112222a2a13b) (Version: - Epic Games, Inc.) Need for Speed™ Most Wanted (HKLM-x32\...\{FB0127F3-985B-44CE-AE29-378CAF60B361}) (Version: 1.5.0.0 - Electronic Arts) Nexus: The Jupiter Incident (HKLM-x32\...\{CDE46766-A2BC-44FF-A781-D2C718336F65}) (Version: 1.00.0000 - Your Company Name) Nomad Fleet (HKLM-x32\...\Nomad Fleet_is1) (Version: - ) nQuake (HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\nQuake) (Version: 2.9 - Empezar (empezar@quake.world)) NVIDIA 3D Vision Controller Driver 364.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 364.44 - NVIDIA Corporation) NVIDIA 3D Vision Driver 368.39 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 368.39 - NVIDIA Corporation) NVIDIA GeForce Experience 2.11.3.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.3.5 - NVIDIA Corporation) NVIDIA Graphics Driver 368.39 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 368.39 - NVIDIA Corporation) NVIDIA HD Audio Driver 1.3.34.14 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.14 - NVIDIA Corporation) NVIDIA PhysX (Legacy) (HKLM-x32\...\{FAAC26AD-73BA-40CE-86AA-C9213F9E064A}) (Version: 9.13.0604 - NVIDIA Corporation) NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) OpenOffice.org 3.4.1 (HKLM-x32\...\{9F1F2AEA-C72A-4DD6-991E-C5506A5625E4}) (Version: 3.41.9593 - Apache Software Foundation) Orcs Must Die! 2 (HKLM-x32\...\Steam App 201790) (Version: - Robot Entertainment) Ori and the Blind Forest (HKLM-x32\...\Ori and the Blind Forest_is1) (Version: - ) Origin (HKLM-x32\...\Origin) (Version: 9.0.15.65 - Electronic Arts, Inc.) Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment) Paint.NET v3.5.10 (HKLM\...\{529125EF-E3AC-4B74-97E6-F688A7C0F1C0}) (Version: 3.60.0 - dotPDN LLC) PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r5875) (Version: - ) PDF Report Writer (novaPDF 6.4 printer) (HKLM\...\PDF Report Writer_is1) (Version: - Softland) Personal Accelerator for Revit (HKLM\...\Personal Accelerator for Revit) (Version: 16.0.1109.0 - Autodesk) Personal Accelerator for Revit (Version: 16.0.1109.0 - Autodesk) Hidden Phoenix R/C® (HKLM-x32\...\PhoenixRC) (Version: 5.0.a - Runtime Games Ltd) PL-2303 USB-to-Serial (HKLM-x32\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.3.0 - Prolific Technology INC) Planetary Annihilation (HKLM-x32\...\Steam App 233250) (Version: - Uber Entertainment) PlanetSide 2 (HKLM-x32\...\Steam App 218230) (Version: - Sony Online Entertainment) Police Quest 1+2+3+4 (HKLM-x32\...\Police Quest 1+2+3+4_is1) (Version: - GOG.com) Pool Nation (HKLM-x32\...\Steam App 254440) (Version: - Cherry Pop Games) Prepar3D v2 Professional Bundle (x32 Version: 2.2.10437.0 - Lockheed Martin) Hidden Project 64 version 2.1.0.1 (HKLM-x32\...\Project 64_is1) (Version: 2.1.0.1 - ) Project CARS (HKLM-x32\...\Project CARS_is1) (Version: v1.2 - Slightly Mad Studios) Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64) pstoedit and importps 3.50 (HKLM-x32\...\pstoedit and importps_is1) (Version: 3.50 - H&W Glunz) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.) QGIS Lyon 2.12.2 Lyon (HKLM\...\QGIS Lyon) (Version: - QGIS Development Team) Quake II (HKLM-x32\...\Steam App 2320) (Version: - id Software) Quake Live (HKLM-x32\...\Steam App 282440) (Version: - id Software) QuickTime (HKLM-x32\...\{E7004147-2CCA-431C-AA05-2AB166B9785D}) (Version: 7.68.75.0 - Apple Inc.) Raiden IV - OverKill (HKLM-x32\...\1445524380_is1) (Version: 2.0.0.6 - GOG.com) Rainbow Six 1.04 \ 1.50 (HKLM-x32\...\Rainbow Six_is1) (Version: 1.04 \ 1.50 - Red Storm Entertainment) RAPID Mode (Version: 1.0.1.81 - Samsung Electronics Co., Ltd.) Hidden Real Environment Xtreme (HKLM-x32\...\{4CFCC6FD-AEA2-4208-99A6-45CBF9DFFD82}) (Version: 1.0.2008.1128 - Real Environment Xtreme) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7865 - Realtek Semiconductor Corp.) Revit 2017 (Version: 17.0.416.0 - Autodesk) Hidden Revit Content Libraries 2017 (Version: 17.0.416.0 - Autodesk) Hidden RivaTuner Statistics Server 6.3.0 (HKLM-x32\...\RTSS) (Version: 6.3.0 - Unwinder) Rocket League (HKLM-x32\...\Steam App 252950) (Version: - Psyonix) Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.8 - Rockstar Games) Samorost 3 (HKLM-x32\...\1452686647_is1) (Version: 2.0.0.4 - GOG.com) Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.5.1 - Samsung Electronics) Satellite Reign (HKLM-x32\...\1428054996_is1) (Version: 2.2.0.5 - GOG.com) Screamer 4x4 (HKLM-x32\...\GOGPACKSCREAMER4X4_is1) (Version: 2.0.0.6 - GOG.com) Screamer 4x4 (HKLM-x32\...\Screamer 4x4) (Version: - ) ScummVM 0.10.0 (HKLM-x32\...\ScummVM_is1) (Version: - ) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden Service Pack 2 for SQL Server 2008 R2 (KB2630458) (64-bit) (HKLM\...\KB2630458) (Version: 10.52.4000.0 - Microsoft Corporation) Shardlight (HKLM-x32\...\1454499527_is1) (Version: 2.0.0.2 - GOG.com) Shatter (HKLM-x32\...\Steam App 20820) (Version: - Sidhe) SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.11.3.5 - NVIDIA Corporation) Hidden Silicon Laboratories CP210x USB to UART Bridge (Driver Removal) (HKLM-x32\...\SLABCOMM&10C4&EA60) (Version: - Silicon Laboratories) Silicon Laboratories CP210x VCP Drivers for Windows XP/2003 Server/Vista/7 (HKLM-x32\...\{32B905D6-DB3D-475F-B975-A56DBB11F3F6}) (Version: 6.5 - Silicon Laboratories, Inc.) SimCity 4 Deluxe (HKLM-x32\...\{A7A34FC9-DF24-4A36-00AD-D4EFE94CC116}) (Version: - ) SketchUp 2015 (HKLM\...\{319CD380-1AAB-4CAD-BE1D-59189A780FA6}) (Version: 15.2.685 - Trimble Navigation Limited) SketchUp Import 2016 (HKLM-x32\...\{C769FB7C-1F55-4B31-9A2A-21CEC50F4F92}) (Version: 2.0.0 - Autodesk) SketchUp Import for AutoCAD 2014 (HKLM-x32\...\{644E9589-F73A-49A4-AC61-A953B9DE5669}) (Version: 1.1.0 - Autodesk) SoftEther VPN Client (HKLM\...\softether_sevpnclient) (Version: 4.19.9605 - SoftEther VPN Project) Sonic & All-Stars Racing Transformed (HKLM-x32\...\Steam App 212480) (Version: - Sumo Digital) Sonic Lost World (HKLM-x32\...\Sonic Lost World_is1) (Version: - ) Sound Blaster Audigy 2 (HKLM-x32\...\{18F11181-EA1A-42AE-AF89-4867C7F7A6FA}) (Version: 1.0 - Creative Technology Limited) SpaceEngine version 0.9.7.1 (HKLM-x32\...\{53E413B3-2417-4BD1-984D-8C92C81C231F}_is1) (Version: 0.9.7.1 - SpaceEngine) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.0.12 - Safer-Networking Ltd.) SQL Server 2008 R2 SP2 Common Files (Version: 10.52.4000.0 - Microsoft Corporation) Hidden SQL Server 2008 R2 SP2 Database Engine Services (Version: 10.52.4000.0 - Microsoft Corporation) Hidden SQL Server 2008 R2 SP2 Database Engine Shared (Version: 10.52.4000.0 - Microsoft Corporation) Hidden SQL Server 2008 R2 SP2 Management Studio (Version: 10.52.4000.0 - Microsoft Corporation) Hidden Sql Server Customer Experience Improvement Program (Version: 10.50.1600.1 - Microsoft Corporation) Hidden Star Trek -- Starfleet Academy (HKLM-x32\...\Star Trek -- Starfleet Academy) (Version: - ) Star Trek™ - 25th Anniversary (HKLM-x32\...\1427108887_is1) (Version: 2.0.0.5 - GOG.com) Star Trek™ - Judgment Rites Limited Collector's Edition (HKLM-x32\...\1429089605_is1) (Version: 2.0.0.6 - GOG.com) Star Trek™ - Starfleet Academy (HKLM-x32\...\1429170550_is1) (Version: 2.0.0.4 - GOG.com) Star Trek™ - Starfleet Command Gold Edition (HKLM-x32\...\1429172763_is1) (Version: 2.0.0.6 - GOG.com) STAR WARS® - X-Wing vs TIE Fighter + Balance of Power (HKLM-x32\...\1421404508_is1) (Version: 2.0.0.3 - GOG.com) STAR WARS™ Jedi Knight™ II - Jedi Outcast™ (HKLM-x32\...\1428935917_is1) (Version: 2.0.0.3 - GOG.com) StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment) Stardew Valley (HKLM-x32\...\1453375253_is1) (Version: 2.3.0.5 - GOG.com) Starpoint Gemini 2 Origins (HKLM-x32\...\Starpoint Gemini 2 Origins_is1) (Version: - ) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Stellaris (HKLM-x32\...\Stellaris_is1) (Version: - ) Street Fighter V (HKLM-x32\...\Street Fighter V_is1) (Version: - ) SUPERHOT (HKLM-x32\...\1456141688_is1) (Version: 2.0.0.4 - GOG.com) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Sync Windows client (HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\syncbeta) (Version: 1.0.1300.1 - SIX Networks GmbH) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH) Technobabylon (HKLM-x32\...\1430234218_is1) (Version: 2.0.0.1 - GOG.com) Tesla Effect (HKLM\...\Steam App 261510) (Version: - Big Finish Games) The Fall 1.43 (HKLM-x32\...\The Fall_is1) (Version: - ) The Flame in the Flood (HKLM-x32\...\1452692111_is1) (Version: 2.0.0.2 - GOG.com) THE KING OF FIGHTERS XIII STEAM EDITION (HKLM\...\Steam App 222940) (Version: - SNK Playmore) The Solus Project (HKLM-x32\...\1455617752_is1) (Version: 2.8.0.11 - GOG.com) The Testament of Sherlock Holmes (HKLM-x32\...\Steam App 205650) (Version: - Frogwares) The Way (HKLM-x32\...\1207667163_is1) (Version: 2.0.0.2 - GOG.com) theHunter (HKLM-x32\...\Steam App 253710) (Version: - Expansive Worlds) Theme Hospital (HKLM-x32\...\{5118A4C2-C8A4-4CE5-AC37-F3E51C25402F}) (Version: 3.0.0.5 - Electronic Arts) This Is the Police (HKLM-x32\...\This Is the Police_is1) (Version: - ) Thrustmaster FFB Wheel driver (HKLM-x32\...\{57F9C8E9-A9B8-4E19-9AC2-F21EC5094B84}) (Version: 2.FFJ.2007 - Thrustmaster) Tom Clancy's Ghost Recon Phantoms - NA (HKLM-x32\...\Steam App 243870) (Version: - Ubisoft Singapore) TrackMania² Stadium (HKLM-x32\...\Steam App 232910) (Version: - Nadeo) Train Fever (HKLM-x32\...\1424258777_is1) (Version: 2.4.0.7 - GOG.com) Transistor (HKLM-x32\...\Transistor_is1) (Version: - ) Trine (HKLM-x32\...\Steam App 35700) (Version: - Frozenbyte) Trine 2 (HKLM-x32\...\Steam App 35720) (Version: - Frozenbyte) Tropico 4 (HKLM-x32\...\Steam App 57690) (Version: - Haemimont Games) Tropico 5 (HKLM-x32\...\Tropico 5_is1) (Version: - ) UE4 Prerequisites (x64) (Version: 1.0.11.0 - Epic Games, Inc.) Hidden UE4 Prerequisites (x64) (x32 Version: 1.0.13.0 - Epic Games, Inc.) Hidden Ultimate Terrain X - Canada (HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\Ultimate Terrain X - Canada) (Version: - ) Ultimate Terrain X - USA (HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\Ultimate Terrain X - USA) (Version: - ) Unity Web Player (HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\UnityWebPlayer) (Version: 5.1.2f1 - Unity Technologies ApS) Unreal Gold 2.26 (HKLM-x32\...\Unreal Gold 2.26) (Version: - ) Unreal Tournament GOTY (HKLM-x32\...\GOGPACKUT_is1) (Version: 2.0.0.5 - GOG.com) Uplay (HKLM-x32\...\Uplay) (Version: 13.0 - Ubisoft) Valiant Hearts (HKLM-x32\...\Valiant Hearts_is1) (Version: - ) VectPDF version 3.2 (HKLM-x32\...\{FF778892-0901-4A1A-827F-0B06AA031672}_is1) (Version: 3.2 - Paul Venour) Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{6DA2B636-698A-3294-BF4A-B5E11B238CDD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{8CCEA24C-51AE-3B71-9092-7D0C44DDA2DF}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{C3A57BB3-9AA6-3F6F-9395-6C062BDD5FC4}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{F6F09DD8-F39B-3A16-ADB9-C9E6B56903F9}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{14866AAD-1F23-39AC-A62B-7091ED1ADE64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN) Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.) Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.) Wargame: European Escalation (HKLM-x32\...\Steam App 58610) (Version: - Eugen Systems) Watchtower Library 2015 - English (HKLM-x32\...\{F0D4F127-987D-4345-AA96-5699CF14AF35}) (Version: 17.0 - Watchtower Bible and Tract Society of Pennsylvania, Inc.) WestwoodChat (HKLM-x32\...\{7CAE6A67-AF7B-4A6A-8705-8AFACA45BB60}) (Version: 1.0.0.0 - WestwoodChat) WestwoodOnline (HKLM-x32\...\{BBCD6D56-8A26-4DDE-9482-DBC9C7B7341D}) (Version: 1.0.0.0 - WestwoodOnline) Windows Driver Package - Silicon Laboratories Inc. (silabser) Ports (11/20/2015 6.7.2.200) (HKLM\...\F189C013BFD9D0C73BEC97AD2CFF0CF7CAD1E670) (Version: 11/20/2015 6.7.2.200 - Silicon Laboratories Inc.) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) Wing Commander III (HKLM-x32\...\{F96B9930-E22A-44D6-81B5-6C8E92C21B4B}) (Version: 2.0.0.2 - Electronic Arts) WinRAR 5.31 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH) WizTree v1.07 (HKLM-x32\...\WizTree_is1) (Version: - Antibody Software) Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-517480369-4133510133-2013949132-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Main\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-517480369-4133510133-2013949132-1000_Classes\CLSID\{0B628DE4-07AD-4284-81CA-5B439F67C5E6}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2016\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-517480369-4133510133-2013949132-1000_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2016\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-517480369-4133510133-2013949132-1000_Classes\CLSID\{49E0BE0A-39E0-4932-B7BE-F249D56ACD31}\InprocServer32 -> csp16.dll => No File CustomCLSID: HKU\S-1-5-21-517480369-4133510133-2013949132-1000_Classes\CLSID\{5370C727-1451-4700-A960-77630950AF6D}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2016\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-517480369-4133510133-2013949132-1000_Classes\CLSID\{6D7AE628-FF41-4CD3-91DD-34825BB1A251}\localserver32 -> C:\Program Files\AutoCAD 2010\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-517480369-4133510133-2013949132-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Main\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\FileCoAuth.exe (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-517480369-4133510133-2013949132-1000_Classes\CLSID\{B77E471C-FBF3-4CB5-880F-D7528AD4B349}\localserver32 -> C:\Program Files\Autodesk\AutoCAD Civil 3D 2012\acad.exe /Automation => No File CustomCLSID: HKU\S-1-5-21-517480369-4133510133-2013949132-1000_Classes\CLSID\{C92FB640-AD4D-498A-9979-A51A2540C977}\localserver32 -> C:\Program Files\Autodesk\AutoCAD Civil 3D 2012\acad.exe /Automation => No File CustomCLSID: HKU\S-1-5-21-517480369-4133510133-2013949132-1000_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\AutoCAD 2010\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-517480369-4133510133-2013949132-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\AutoCAD 2010\acadficn.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-517480369-4133510133-2013949132-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Main\AppData\Roaming\Dropbox\bin\DropboxExt64.38.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-517480369-4133510133-2013949132-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Main\AppData\Roaming\Dropbox\bin\DropboxExt64.38.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-517480369-4133510133-2013949132-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Main\AppData\Roaming\Dropbox\bin\DropboxExt64.38.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-517480369-4133510133-2013949132-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Main\AppData\Roaming\Dropbox\bin\DropboxExt64.38.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-517480369-4133510133-2013949132-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Main\AppData\Roaming\Dropbox\bin\DropboxExt64.38.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-517480369-4133510133-2013949132-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Main\AppData\Roaming\Dropbox\bin\DropboxExt64.38.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-517480369-4133510133-2013949132-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Main\AppData\Roaming\Dropbox\bin\DropboxExt64.38.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-517480369-4133510133-2013949132-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Main\AppData\Roaming\Dropbox\bin\DropboxExt64.38.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-517480369-4133510133-2013949132-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Main\AppData\Roaming\Dropbox\bin\DropboxExt64.38.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-517480369-4133510133-2013949132-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Main\AppData\Roaming\Dropbox\bin\DropboxExt64.38.dll (Dropbox, Inc.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {00037C56-AD2E-414C-97EC-EF51DEECC2C8} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [2015-06-01] () Task: {006BAFBA-6175-463D-A037-D88A69BCED3D} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe Task: {09C79C9D-B067-4BDD-93E2-1E37AB46787A} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION Task: {14CC7729-BA4B-416D-A35C-7E7A6F9DC429} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe Task: {18022F61-BC5D-4E65-BA33-652A1A861E1A} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION Task: {193228CD-2E9E-4144-9C34-4FC37AE92E57} - System32\Tasks\SidebarExecute => C:\Program Files\Windows Sidebar\sidebar.exe Task: {1C2F2B79-E151-4A95-AD3B-5AABC22AC1FB} - System32\Tasks\CAM => C:\Program Files (x86)\NZXT\CAM\CAM_Client_V3.exe [2016-06-04] () Task: {1D79EE30-3532-4DEC-995F-D1907BF44977} - \Microsoft\Windows\Setup\gwx\rundetector -> No File <==== ATTENTION Task: {1FE56063-D568-48AF-B132-795CBC22BFD9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.) Task: {23B17C8A-9E18-4FDD-817A-392E55F4B172} - \Safer-Networking\Spybot - Search and Destroy\Scan the system -> No File <==== ATTENTION Task: {2AABAED6-05ED-4649-9D1D-E4E6F96F73FD} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe Task: {34AB2D61-384A-4550-9C1A-31C866538F9C} - System32\Tasks\EVGAPrecision => C:\Program Files (x86)\EVGA Precision X\EVGAPrecision.exe Task: {35D7ECB0-8E47-4A73-9970-9679429F3784} - \Safer-Networking\Spybot - Search and Destroy\Refresh immunization -> No File <==== ATTENTION Task: {3AB491D1-4744-4A99-B42E-98794557DD9C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe Task: {3AE64135-6677-4395-A708-5B77E9298A6C} - System32\Tasks\EVGAPrecisionX => C:\Program Files (x86)\EVGA\PrecisionX 16\PrecisionX_x64.exe Task: {3CA11C3C-EE19-45DF-879E-82DB588FCF59} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe Task: {3DBCF9A5-109A-4AA3-846A-C103051D959F} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe Task: {414A6C5B-2473-49D6-AF9E-4237E4333BA0} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {46EFC033-89AF-4A0E-B3F5-5F60BACDEB2D} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe Task: {48B346FA-75E2-484C-B548-D5777FCD5975} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2014-12-12] () Task: {4A6E1D36-F3AE-4F94-9BBB-A30574851810} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-517480369-4133510133-2013949132-1000UA => C:\Users\Main\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16] (Dropbox, Inc.) Task: {4D0B167B-74E9-41BD-8A6D-A18212D52BEE} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe Task: {554185BE-0458-43E6-BD30-FBF9D54D7B74} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-08-03] (Adobe Systems Incorporated) Task: {6525887D-59DE-4837-B1A2-462DF978697C} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-08-06] (AVAST Software) Task: {65E0C743-03F4-4AC3-8343-0839A6747F51} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe Task: {66E9EE13-6651-4898-ABC3-71B54A1B1BD8} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe Task: {6BDFF70E-6FF8-4305-B4BC-AB9ED5E535DB} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION Task: {733BFF52-DFBA-4C07-8FE7-FCF8548D8982} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe Task: {759F589B-C6C3-40B6-8A37-55A6FD00BE25} - \Safer-Networking\Spybot - Search and Destroy\Check for updates -> No File <==== ATTENTION Task: {79A84E39-F6C6-4778-9696-E4EA4720B268} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {7E5EC839-91FA-4856-A5B8-A36670F92FF0} - System32\Tasks\{61EDF003-1789-4525-8843-4BE619CFB08A} => pcalua.exe -a C:\PROGRA~2\MAGICD~1\UNWISE.EXE -c C:\PROGRA~2\MAGICD~1\INSTALL.LOG Task: {8831637E-7217-4452-B243-EC7B3DA2C01B} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION Task: {88D815B3-8260-4382-AAF1-D9F52FE3471D} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {8A6EDB4E-14CE-4FCF-8576-64503A9EC3C7} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION Task: {96227813-DA3E-4537-A1B0-726C6BAE0AAF} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe [2014-09-28] (Samsung Electronics.) Task: {96D578A7-71BD-4C18-9E04-BEA902C2E490} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe Task: {98B42266-B798-4134-8DA6-9CC178FCEA5F} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe Task: {9DEAC69F-A829-4D46-98BC-0E9607664F67} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-517480369-4133510133-2013949132-1000Core => C:\Users\Main\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16] (Dropbox, Inc.) Task: {9E1BC576-5DA4-468E-B8A5-A1B1938BE486} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe Task: {9FFFF6E4-8AB2-47C1-8B92-57F07BB18FF6} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION Task: {CDD36226-691F-4394-9378-C37D6D119A2D} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe Task: {D5491EB6-ECFE-4ED8-BC31-B3293AA16E13} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe Task: {DC1266CE-74FC-40B4-BB39-72944A268334} - System32\Tasks\IntelMemoryDiagnostic => C:\Users\Main\AppData\Local\Temp\d3dx10.exe <==== ATTENTION Task: {DC2C5F7E-450F-4BFE-B4D1-6C06233DA6C5} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe Task: {DC8F561F-2523-441B-8A56-173F290FFA7C} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe Task: {E496D8D4-F6C4-4570-8F49-1918FB287014} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION Task: {EAC90B0A-A431-4EB7-81E7-EEDE9505A919} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.) Task: {F3729C77-0C09-4582-822F-84D18DA1A64C} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe Task: {FCAD283D-1425-4E41-B925-14F63C510F55} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-517480369-4133510133-2013949132-1000Core.job => C:\Users\Main\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-517480369-4133510133-2013949132-1000UA.job => C:\Users\Main\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) Shortcut: C:\Users\Main\Desktop\Games\Interstate '76 Nitro Pack.lnk -> J:\games\Interstate 76 Arsenal\Interstate 76 Nitro Pack\aaron launcher.bat () Shortcut: C:\Users\Main\Desktop\Games\Interstate '76.lnk -> J:\games\Interstate 76 Arsenal\interstate 76\aaron launcher.bat () Shortcut: C:\Users\Main\AppData\Local\Microsoft\Windows\GameExplorer\{F4B1CB78-3D8D-4276-8FE3-7040AFBF5E27}\SupportTasks\1\Support.lnk -> hxxp://support.microsoft.com/directory/ Shortcut: C:\Users\Main\AppData\Local\Microsoft\Windows\GameExplorer\{F4B1CB78-3D8D-4276-8FE3-7040AFBF5E27}\SupportTasks\0\More Games from Microsoft.lnk -> hxxp://www.microsoft.com/games/allegiance/home.htm/ Shortcut: C:\Users\Main\AppData\Local\Microsoft\Windows\GameExplorer\{D18830D7-A3A2-4275-83AD-89D686188710}\SupportTasks\0\More Games from Microsoft.lnk -> hxxp://www.shadowgroundsgame.com/ Shortcut: C:\Users\Main\AppData\Local\Microsoft\Windows\GameExplorer\{98FCD589-4BE9-4146-9199-41E15194B342}\SupportTasks\1\Support.lnk -> hxxp://www.gtisonline.com/ Shortcut: C:\Users\Main\AppData\Local\Microsoft\Windows\GameExplorer\{98FCD589-4BE9-4146-9199-41E15194B342}\SupportTasks\0\More Games from Microsoft.lnk -> hxxp://www.unreal.com/ Shortcut: C:\Users\Main\AppData\Local\Microsoft\Windows\GameExplorer\{853B8B47-50CB-42B8-AA97-F13DCDC2893A}\SupportTasks\0\Support.lnk -> hxxp://www.aspyr.com/support/ Shortcut: C:\Users\Main\AppData\Local\Microsoft\Windows\GameExplorer\{5F8C6022-948F-4FC8-9762-443BFD7FED50}\SupportTasks\1\Support.lnk -> hxxp://support.vugames.com/ Shortcut: C:\Users\Main\AppData\Local\Microsoft\Windows\GameExplorer\{5F8C6022-948F-4FC8-9762-443BFD7FED50}\SupportTasks\0\More Games from Microsoft.lnk -> hxxp://www.vugames.com/product.do Shortcut: C:\Users\Main\AppData\Local\Microsoft\Windows\GameExplorer\{2901792C-9B38-4950-91E2-391452B84B79}\SupportTasks\1\Support.lnk -> hxxp://www.idsoftware.com/support/index.html/ Shortcut: C:\Users\Main\AppData\Local\Microsoft\Windows\GameExplorer\{2901792C-9B38-4950-91E2-391452B84B79}\SupportTasks\0\More Games from Microsoft.lnk -> hxxp://www.quake3arena.com/ Shortcut: C:\Users\Main\AppData\Local\Microsoft\Windows\GameExplorer\{055D36C4-5F2E-4E3E-B72D-F51605A68098}\SupportTasks\1\Support.lnk -> hxxp://support.microsoft.com/directory/ Shortcut: C:\Users\Main\AppData\Local\Microsoft\Windows\GameExplorer\{055D36C4-5F2E-4E3E-B72D-F51605A68098}\SupportTasks\0\More Games from Microsoft.lnk -> hxxp://www.microsoft.com/games/age2/ ShortcutWithArgument: C:\Users\Main\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Chrome Remote Desktop.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp ==================== Loaded Modules (Whitelisted) ============== 2015-10-30 02:17 - 2015-10-30 02:17 - 00028672 _____ () C:\WINDOWS\SYSTEM32\efsext.dll 2015-10-30 02:18 - 2015-10-30 02:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2015-12-09 15:11 - 2015-12-09 15:11 - 00594432 _____ () C:\Program Files\EqualizerAPO\EqualizerAPO.dll 2012-09-18 17:34 - 2012-09-18 17:34 - 02375168 _____ () C:\Program Files\EqualizerAPO\libsndfile-1.dll 2014-03-15 16:29 - 2014-03-15 16:29 - 02604934 _____ () C:\Program Files\EqualizerAPO\libfftw3f-3.dll 2016-07-02 13:32 - 2016-06-02 22:59 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2016-03-27 08:48 - 2016-06-03 02:22 - 00369208 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll 2016-03-27 08:48 - 2016-06-03 02:22 - 00289848 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll 2016-05-03 19:06 - 2016-06-03 02:22 - 01148984 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll 2016-03-27 08:48 - 2016-06-03 02:22 - 03613240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll 2014-08-09 15:44 - 2016-06-11 20:32 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe 2016-05-03 19:06 - 2016-06-03 02:22 - 02667576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll 2016-05-03 19:06 - 2016-06-03 02:22 - 01990200 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll 2016-05-03 19:06 - 2016-06-03 02:22 - 01842232 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll 2016-03-27 08:48 - 2016-06-03 02:22 - 00208952 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll 2016-07-12 20:04 - 2016-06-30 23:48 - 02656408 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2016-07-02 15:32 - 2016-07-02 17:02 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe 2016-05-03 19:06 - 2016-06-03 02:22 - 00921656 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll 2016-05-03 19:06 - 2016-06-03 02:22 - 00035896 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll 2016-07-12 20:04 - 2016-06-30 23:48 - 02656408 _____ () C:\WINDOWS\System32\CoreUIComponents.dll 2010-10-20 15:23 - 2010-10-20 15:23 - 08801632 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll 2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2016-07-02 13:47 - 2016-07-02 13:47 - 00959168 _____ () C:\Users\Main\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\amd64\ClientTelemetry.dll 2014-12-08 05:10 - 2014-12-08 05:10 - 00102176 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll 2016-04-27 01:10 - 2016-04-27 01:10 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll 2016-07-12 20:05 - 2016-06-30 22:48 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll 2016-07-12 20:04 - 2016-06-30 22:27 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2016-07-12 20:04 - 2016-06-30 22:21 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2016-07-12 20:04 - 2016-06-30 22:22 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2016-07-12 20:04 - 2016-06-30 22:24 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2016-08-06 17:18 - 2016-08-06 17:18 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2016-08-07 06:01 - 2016-08-07 06:01 - 03012096 _____ () C:\Program Files\AVAST Software\Avast\defs\16080700\algo.dll 2016-08-06 17:18 - 2016-08-06 17:18 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll 2014-04-23 16:05 - 2014-04-23 16:05 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-04-23 16:04 - 2014-04-23 16:04 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2016-07-02 15:32 - 2016-07-02 17:02 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll 2016-07-02 15:32 - 2016-07-02 17:02 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll 2015-04-14 12:56 - 2016-06-03 02:22 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2015-03-05 10:10 - 2014-09-28 18:59 - 00019872 _____ () C:\Program Files (x86)\Samsung\Samsung Magician\SAMSUNG_SSD.dll 2016-08-07 08:25 - 2016-08-07 08:25 - 00098816 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\win32api.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00110080 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\pywintypes27.dll 2016-08-07 08:25 - 2016-08-07 08:25 - 00364544 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\pythoncom27.dll 2016-08-07 08:25 - 2016-08-07 08:25 - 00320512 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\win32com.shell.shell.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00776704 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\_hashlib.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 01176576 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\wx._core_.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00806400 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\wx._gdi_.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00816128 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\wx._windows_.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 01067008 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\wx._controls_.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00733184 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\wx._misc_.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00682496 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\pysqlite2._sqlite.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00088064 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\_ctypes.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00119808 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\win32file.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00108544 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\win32security.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00007168 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\hashobjs_ext.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00017920 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\thumbnails_ext.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00088064 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\usb_ext.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00012288 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\common.time34.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00018432 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\win32event.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00167936 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\win32gui.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00046080 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\_socket.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 01208320 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\_ssl.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00128512 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\_elementtree.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00127488 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\pyexpat.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00038912 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\win32inet.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00036864 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\_psutil_windows.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00525208 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\windows._lib_cacheinvalidation.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00011264 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\win32crypt.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00077312 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\wx._html2.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00027136 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\_multiprocessing.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00020480 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\_yappi.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00035840 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\win32process.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00686080 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\unicodedata.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00078848 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\wx._animate.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00123392 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\wx._wizard.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00024064 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\win32pipe.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00010240 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\select.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00025600 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\win32pdh.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00017408 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\win32profile.pyd 2016-08-07 08:25 - 2016-08-07 08:25 - 00022528 ____R () C:\Users\Main\AppData\Local\Temp\_MEI27282\win32ts.pyd 2016-07-04 17:40 - 2016-08-02 17:08 - 00785920 _____ () C:\Program Files (x86)\Steam\SDL2.dll 2016-07-04 17:40 - 2016-08-02 17:10 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll 2016-07-04 17:40 - 2016-08-02 19:00 - 02320160 _____ () C:\Program Files (x86)\Steam\video.dll 2016-07-04 17:40 - 2016-02-08 18:14 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll 2016-07-04 17:40 - 2016-02-08 18:14 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll 2016-07-04 17:40 - 2016-02-08 18:14 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll 2016-07-04 17:40 - 2016-02-08 18:14 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll 2016-07-04 17:40 - 2016-02-08 18:14 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll 2016-07-04 17:40 - 2016-08-02 17:09 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll 2016-07-04 17:40 - 2016-08-02 17:09 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll 2016-07-04 17:40 - 2016-08-02 18:59 - 00831776 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL 2016-07-04 17:40 - 2016-07-06 17:00 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll 2016-07-04 17:40 - 2016-06-14 14:14 - 49826080 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll 2016-07-11 20:33 - 2016-06-29 21:25 - 00035792 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd 2016-08-05 13:26 - 2016-06-29 21:25 - 00145864 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\pyexpat.pyd 2016-08-05 13:26 - 2016-06-29 21:26 - 00019408 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\faulthandler.pyd 2016-08-05 13:26 - 2016-06-29 21:25 - 00116688 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\pywintypes27.dll 2016-07-11 20:33 - 2016-06-29 21:25 - 00100296 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\_ctypes.pyd 2016-07-11 20:33 - 2016-06-29 21:25 - 00018888 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\select.pyd 2016-07-11 20:33 - 2016-08-01 16:27 - 00019760 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd 2016-07-11 20:33 - 2016-06-29 21:25 - 00694224 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\unicodedata.pyd 2016-08-05 13:26 - 2016-08-01 16:26 - 00020816 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd 2016-07-11 20:33 - 2016-06-29 21:26 - 00123856 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd 2016-08-05 13:26 - 2016-08-01 16:26 - 01682760 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd 2016-08-05 13:26 - 2016-08-01 16:26 - 00020808 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd 2016-08-05 13:26 - 2016-08-01 16:27 - 00021312 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\winffi.crt.compiled._winffi_crt.pyd 2016-08-05 13:26 - 2016-08-01 16:27 - 00052024 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd 2016-08-05 13:26 - 2016-08-01 16:27 - 00038696 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\fastpath.pyd 2016-07-11 20:33 - 2016-06-29 21:27 - 00105928 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\win32api.pyd 2016-08-05 13:26 - 2016-06-29 21:25 - 00392144 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\pythoncom27.dll 2016-08-05 13:26 - 2016-06-29 21:27 - 00020936 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\mmapfile.pyd 2016-07-11 20:33 - 2016-06-29 21:27 - 00024528 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\win32event.pyd 2016-07-11 20:33 - 2016-06-29 21:27 - 00114640 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\win32security.pyd 2016-07-11 20:33 - 2016-08-01 16:27 - 00381752 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd 2016-07-11 20:33 - 2016-06-29 21:27 - 00124880 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\win32file.pyd 2016-08-05 13:26 - 2016-08-01 16:27 - 00025424 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\winffi.kernel32.compiled._winffi_kernel32.pyd 2016-07-11 20:33 - 2016-06-29 21:27 - 00024016 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\win32clipboard.pyd 2016-07-11 20:33 - 2016-06-29 21:27 - 00175560 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\win32gui.pyd 2016-07-11 20:33 - 2016-06-29 21:27 - 00030160 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\win32pipe.pyd 2016-07-11 20:33 - 2016-06-29 21:27 - 00043472 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\win32process.pyd 2016-07-11 20:33 - 2016-06-29 21:27 - 00048592 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\win32service.pyd 2016-08-05 13:26 - 2016-08-01 16:27 - 00026456 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd 2016-07-11 20:33 - 2016-06-29 21:27 - 00057808 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\win32evtlog.pyd 2016-07-11 20:33 - 2016-06-29 21:27 - 00024016 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\win32profile.pyd 2016-08-05 13:26 - 2016-08-01 16:26 - 00246592 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd 2016-07-11 20:33 - 2016-06-29 21:27 - 00028616 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\win32ts.pyd 2016-07-11 20:33 - 2016-08-01 16:27 - 00020800 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\winffi.iphlpapi._winffi_iphlpapi.pyd 2016-07-11 20:33 - 2016-08-01 16:27 - 00019776 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\winffi.winerror._winffi_winerror.pyd 2016-07-11 20:33 - 2016-08-01 16:27 - 00020800 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\winffi.wininet._winffi_wininet.pyd 2016-07-11 20:33 - 2016-06-29 21:25 - 00144848 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\_elementtree.pyd 2016-08-05 13:26 - 2016-06-29 21:26 - 00241104 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\_jpegtran.pyd 2016-08-05 13:26 - 2016-08-01 16:26 - 00020280 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd 2016-07-11 20:33 - 2016-08-01 16:27 - 00023376 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd 2016-07-11 20:33 - 2016-06-29 21:27 - 00350152 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\winxpgui.pyd 2016-07-11 20:33 - 2016-08-01 16:27 - 00022352 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd 2016-08-05 13:26 - 2016-08-01 16:27 - 00024392 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd 2016-08-05 13:26 - 2016-06-29 21:28 - 00036296 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\librsync.dll 2016-08-05 13:26 - 2016-08-01 16:27 - 00031568 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\enterprise_data.compiled._enterprise_data.pyd 2016-08-05 13:26 - 2016-08-01 16:17 - 00293392 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\EnterpriseDataAdapter.dll 2016-08-05 13:26 - 2016-08-01 16:27 - 00084280 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL 2016-08-05 13:26 - 2016-08-01 16:27 - 01826096 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd 2016-07-11 20:33 - 2016-06-29 21:26 - 00083912 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\sip.pyd 2016-08-05 13:26 - 2016-08-01 16:27 - 03929392 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd 2016-08-05 13:26 - 2016-08-01 16:27 - 01972016 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd 2016-08-05 13:26 - 2016-08-01 16:27 - 00531248 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd 2016-08-05 13:26 - 2016-08-01 16:27 - 00132912 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd 2016-08-05 13:26 - 2016-08-01 16:27 - 00224056 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd 2016-08-05 13:26 - 2016-08-01 16:27 - 00207672 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd 2016-08-05 13:26 - 2016-08-01 16:27 - 00020288 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\winffi.user32._winffi_user32.pyd 2016-07-11 20:33 - 2016-06-29 21:27 - 00060880 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\win32print.pyd 2016-07-11 20:33 - 2016-08-01 16:27 - 00037192 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\windisplaytoast.compiled._DisplayToast.pyd 2016-08-05 13:26 - 2016-08-01 16:27 - 00024904 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\winffi.winhttp.compiled._winffi_winhttp.pyd 2016-08-05 13:26 - 2016-08-01 16:27 - 00546096 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd 2016-08-05 13:26 - 2016-08-01 16:27 - 00357680 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd 2016-08-05 13:26 - 2016-08-01 16:27 - 00168248 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.pyd 2016-08-05 13:26 - 2016-08-01 16:27 - 00042808 _____ () C:\Users\Main\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.pyd 2016-08-06 17:18 - 2016-08-06 17:18 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2016-07-02 13:46 - 2016-07-02 13:46 - 00679624 _____ () C:\Users\Main\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\ClientTelemetry.dll 2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2010-10-20 15:45 - 2010-10-20 15:45 - 08801120 _____ () C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll 2016-06-17 17:10 - 2016-06-15 04:15 - 01745560 _____ () C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.103\libglesv2.dll 2016-06-17 17:10 - 2016-06-15 04:15 - 00091288 _____ () C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.103\libegl.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm [0] AlternateDataStreams: C:\ProgramData\TEMP:76650B61 [103] AlternateDataStreams: C:\ProgramData\TEMP:A1EDB939 [266] ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) HKU\S-1-5-21-517480369-4133510133-2013949132-1000\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1" ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE restricted site: HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\007guard.com -> install.007guard.com IE restricted site: HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\008i.com -> 008i.com IE restricted site: HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\008k.com -> www.008k.com IE restricted site: HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\00hq.com -> www.00hq.com IE restricted site: HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\010402.com -> 010402.com IE restricted site: HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com IE restricted site: HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\0scan.com -> www.0scan.com IE restricted site: HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\1-2005-search.com -> www.1-2005-search.com IE restricted site: HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com IE restricted site: HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\1000gratisproben.com -> www.1000gratisproben.com IE restricted site: HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\1001namen.com -> www.1001namen.com IE restricted site: HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\100888290cs.com -> mir.100888290cs.com IE restricted site: HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\100sexlinks.com -> www.100sexlinks.com IE restricted site: HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\10sek.com -> www.10sek.com IE restricted site: HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\12-26.net -> user1.12-26.net IE restricted site: HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\12-27.net -> user1.12-27.net IE restricted site: HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\123fporn.info -> www.123fporn.info IE restricted site: HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com IE restricted site: HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\123moviedownload.com -> www.123moviedownload.com IE restricted site: HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\123simsen.com -> www.123simsen.com There are 7777 more sites. ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-13 21:34 - 2015-09-13 19:15 - 00444924 ___RA C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 127.0.0.1 www.0scan.com 127.0.0.1 0scan.com 127.0.0.1 www.1000gratisproben.com 127.0.0.1 1000gratisproben.com 127.0.0.1 1001namen.com 127.0.0.1 www.1001namen.com 127.0.0.1 100888290cs.com 127.0.0.1 www.100888290cs.com 127.0.0.1 www.100sexlinks.com 127.0.0.1 100sexlinks.com 127.0.0.1 www.10sek.com 127.0.0.1 10sek.com 127.0.0.1 www.1-2005-search.com 127.0.0.1 1-2005-search.com 127.0.0.1 www.123fporn.info 127.0.0.1 123fporn.info 127.0.0.1 123haustiereundmehr.com 127.0.0.1 www.123haustiereundmehr.com 127.0.0.1 123moviedownload.com 127.0.0.1 www.123moviedownload.com There are 15270 more lines. ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-517480369-4133510133-2013949132-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Main\AppData\Roaming\Microsoft\Windows Photo Viewer\Windows Photo Viewer Wallpaper.jpg DNS Servers: 8.8.8.8 - 8.8.4.4 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe" MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" MSCONFIG\startupreg: ADSKAppManager => "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" MSCONFIG\startupreg: EaseUS EPM Tray Agent => "C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.0\bin\TrayPopupE\TrayTipAgentE.exe" MSCONFIG\startupreg: EaseUs TB Tray Agent => "C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe" MSCONFIG\startupreg: EaseUs Tray => "C:\Program Files (x86)\EaseUS\Todo Backup\bin\TrayNotify.exe" MSCONFIG\startupreg: EaseUs Watch => "C:\Program Files (x86)\EaseUS\Todo Backup\bin\EuWatch.exe" MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe" MSCONFIG\startupreg: LifeCam => "C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe" MSCONFIG\startupreg: VX3000 => C:\Windows\vVX3000.exe HKLM\...\StartupApproved\StartupFolder: => "SoftEther VPN Client Manager Startup.lnk" HKLM\...\StartupApproved\Run: => "pac" HKLM\...\StartupApproved\Run32: => "IJNetworkScannerSelectorEX" HKLM\...\StartupApproved\Run32: => "CTHelper" HKLM\...\StartupApproved\Run32: => "CTxfiHlp" HKLM\...\StartupApproved\Run32: => "UpdReg" HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-517480369-4133510133-2013949132-1000\...\StartupApproved\Run: => "DevconDefaultDB" ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808 FirewallRules: [{6299519D-155F-42A5-90EC-BC3B3629DB06}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe FirewallRules: [{9E890955-FBB9-454D-8F6C-2F00D5F3EF6B}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe FirewallRules: [{52770446-09FE-40DC-AC40-30534A0B2888}] => (Allow) C:\Users\Main\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{E05C366B-565F-49BB-BEB6-5D6891322C89}] => (Allow) C:\Users\Main\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{FD5FC62E-B24B-4D59-B654-FD15B1BE7937}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{700E4FDB-9E10-496C-9274-5F8FA87B33CE}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{2C18D7CA-55DF-4E09-AE77-0FD5FA8B3962}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{787CB6AD-7003-4793-97A8-35C388C09D72}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{C4892832-55D0-4079-B754-71969876D16B}] => (Allow) E:\Steam\steamapps\common\hardreset\hardreset.exe FirewallRules: [{16ADA19A-12E0-4AFB-A513-5041EB02E9A9}] => (Allow) E:\Steam\steamapps\common\hardreset\hardreset.exe FirewallRules: [{FEAE81FD-E6EF-4B7E-BCB5-0003B93058FB}] => (Allow) E:\Steam\steamapps\common\dcs black shark\bin\x86\stable\launcher.exe FirewallRules: [{D1810FD1-17E2-4B1B-8D69-871176792676}] => (Allow) E:\Steam\steamapps\common\dcs black shark\bin\x86\stable\launcher.exe FirewallRules: [{B96CD30F-AEDB-4BB7-8F68-69DC9C3F64D3}] => (Allow) E:\Steam\steamapps\common\dcs black shark\Multiplayer.bat FirewallRules: [{7A9253AC-16C8-4A04-85BE-08D525221F12}] => (Allow) E:\Steam\steamapps\common\dcs black shark\Multiplayer.bat FirewallRules: [{9E52CAA8-1268-44D8-9E49-F30A0A9E0138}] => (Allow) E:\Steam\steamapps\common\death to spies moment of truth\Truth.exe FirewallRules: [{3A7A3DED-77C8-46C7-9A85-8FFCD35BF714}] => (Allow) E:\Steam\steamapps\common\death to spies moment of truth\Truth.exe FirewallRules: [{E6B1B5DE-DE24-4EFA-817D-61EC358B2E92}] => (Allow) E:\Steam\steamapps\common\death to spies moment of truth\TruthSetup.exe FirewallRules: [{4C946663-4712-4658-BBBC-5F5D2D137C68}] => (Allow) E:\Steam\steamapps\common\death to spies moment of truth\TruthSetup.exe FirewallRules: [{596CCCB4-7E23-4262-8F84-63EAD63BA117}] => (Allow) E:\Steam\steamapps\common\dcs a-10c warthog\bin\Run.exe FirewallRules: [{7F6D3254-C89A-4A60-BD57-5DEDAAFE37BA}] => (Allow) E:\Steam\steamapps\common\dcs a-10c warthog\bin\Run.exe FirewallRules: [{51944D43-23F4-4433-B05D-2AFC6AEFA8E7}] => (Allow) E:\Games\StarCraft II\StarCraft II.exe FirewallRules: [{5D189AFE-AA56-4AD6-BA55-04E41EDAE1BB}] => (Allow) E:\Games\StarCraft II\StarCraft II.exe FirewallRules: [{B348516C-D60F-4BCF-9E66-0DE803E02A10}] => (Allow) E:\Games\StarCraft II\StarCraft II Public Test.exe FirewallRules: [{0F03452C-0F47-4F4B-8B2A-D6413E7396EA}] => (Allow) E:\Games\StarCraft II\StarCraft II Public Test.exe FirewallRules: [{D2B301C0-D8AE-4CFA-B510-E2474C2F7288}] => (Allow) E:\Steam\steamapps\common\men of war assault squad\mow_assault_squad.exe FirewallRules: [{DC66A142-EEBA-4C7C-82AC-61877E319DB3}] => (Allow) E:\Steam\steamapps\common\men of war assault squad\mow_assault_squad.exe FirewallRules: [{A4290A76-D223-4120-8035-F572BCBA4B42}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe FirewallRules: [{84EB70C9-9131-47DE-8091-FCF3DD2B16AE}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe FirewallRules: [{B75D3E9E-61E9-46F5-97F2-53103C1164AD}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe FirewallRules: [{0F53D86A-0014-469D-9886-F860BDBA5959}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe FirewallRules: [{9F4A58E8-CB22-4EA2-A0D0-126B2CB27067}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe FirewallRules: [{34DC4A59-7F18-4539-879C-EAF794A35BBD}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe FirewallRules: [{00D9BA83-4B62-43A4-82E3-3E9F1820407A}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe FirewallRules: [{0910E157-1CAF-47D7-B294-0A7A1EBB3B0A}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe FirewallRules: [{A7F33E6A-EE1C-4A7E-A285-E38E43F1AFD5}] => (Allow) E:\Steam\steamapps\common\cities in motion\Cities In Motion.exe FirewallRules: [{875AFE14-CA98-4F42-B9CF-060BCF0282DC}] => (Allow) E:\Steam\steamapps\common\cities in motion\Cities In Motion.exe FirewallRules: [TCP Query User{BD689181-4D6C-4DD7-8241-1BB8215576BD}\\server\downloads\antichamber\binaries\win32\udk.exe] => (Block) \\server\downloads\antichamber\binaries\win32\udk.exe FirewallRules: [UDP Query User{09920D66-853E-44CB-9D1E-9633D5DCD2F1}\\server\downloads\antichamber\binaries\win32\udk.exe] => (Block) \\server\downloads\antichamber\binaries\win32\udk.exe FirewallRules: [{B989D3C0-009D-454C-911E-091A083E9487}] => (Allow) E:\Steam\steamapps\common\PlanetSide 2\LaunchPad.exe FirewallRules: [{1C7E4DAD-0831-4A28-8A33-407D54880405}] => (Allow) E:\Steam\steamapps\common\PlanetSide 2\LaunchPad.exe FirewallRules: [TCP Query User{9784DDC1-BCE4-40E7-B87C-61E083C3124D}E:\steam\steamapps\common\planetside 2\planetside2.exe] => (Allow) E:\steam\steamapps\common\planetside 2\planetside2.exe FirewallRules: [UDP Query User{8AD8392A-CC9F-40B4-BD83-4B4B9A0DDD57}E:\steam\steamapps\common\planetside 2\planetside2.exe] => (Allow) E:\steam\steamapps\common\planetside 2\planetside2.exe FirewallRules: [{BB81360E-50A5-4D82-8315-DA9BDD2865E5}] => (Allow) E:\Games\Need for Speed(TM) Most Wanted\NFS13.exe FirewallRules: [{3328B468-9420-4C05-A6BF-8C1003035AD0}] => (Allow) E:\Games\Need for Speed(TM) Most Wanted\NFS13.exe FirewallRules: [{1F1A0517-B780-475D-8650-4B840FF27A72}] => (Allow) LPort=80 FirewallRules: [{E4171F17-FAF6-43D3-A5B3-3651DDC99919}] => (Allow) LPort=443 FirewallRules: [{6B5736EE-59E5-4E32-8E55-180D074FD5E5}] => (Allow) LPort=20010 FirewallRules: [{FF83B7E0-8991-45BD-A067-A70D8D81F444}] => (Allow) LPort=3478 FirewallRules: [{A892A857-AAE1-4B72-957F-E0E4196EF99E}] => (Allow) LPort=7850 FirewallRules: [{3A010C8F-7608-4A4A-BE18-D85BD7B61607}] => (Allow) LPort=27022 FirewallRules: [{AB330037-089D-418B-8541-2F38498C5611}] => (Allow) LPort=6881 FirewallRules: [{4A881543-57A5-4466-BC01-91DCDBCBD82A}] => (Allow) LPort=33333 FirewallRules: [{39565B2E-9191-43A9-A135-BB65B6709758}] => (Allow) LPort=20443 FirewallRules: [{E4D6F1B7-1BB5-4995-A50D-534A7F509D1E}] => (Allow) LPort=8090 FirewallRules: [TCP Query User{B5082484-9E0A-4D3A-ABC8-15EA642F6B47}\\server\downloads\unlock iphone 3gs with 5.0.1\redsn0w_win_0.9.10b1\redsn0w.exe] => (Allow) \\server\downloads\unlock iphone 3gs with 5.0.1\redsn0w_win_0.9.10b1\redsn0w.exe FirewallRules: [UDP Query User{2AAC4B77-B452-4A51-9722-86D166E1CF43}\\server\downloads\unlock iphone 3gs with 5.0.1\redsn0w_win_0.9.10b1\redsn0w.exe] => (Allow) \\server\downloads\unlock iphone 3gs with 5.0.1\redsn0w_win_0.9.10b1\redsn0w.exe FirewallRules: [TCP Query User{8144066A-EB02-4BEE-B1CC-C938A237D029}E:\steam\steam.exe] => (Allow) E:\steam\steam.exe FirewallRules: [UDP Query User{DC8C155E-5CFD-40FC-97E8-36DD7BBB64BF}E:\steam\steam.exe] => (Allow) E:\steam\steam.exe FirewallRules: [TCP Query User{B87630F1-B5D3-4F09-9AE6-43AF06793A07}E:\games\fsx\fsx.exe] => (Allow) E:\games\fsx\fsx.exe FirewallRules: [UDP Query User{74398F19-4545-4703-905E-E5D8D1AA9B06}E:\games\fsx\fsx.exe] => (Allow) E:\games\fsx\fsx.exe FirewallRules: [TCP Query User{1569EE6E-4365-4F80-B324-582D7190FCAF}C:\program files (x86)\fsfdt\fwinn\fwinn.exe] => (Allow) C:\program files (x86)\fsfdt\fwinn\fwinn.exe FirewallRules: [UDP Query User{EF1E7E6F-9C83-4C26-81FB-1C1C7038C55E}C:\program files (x86)\fsfdt\fwinn\fwinn.exe] => (Allow) C:\program files (x86)\fsfdt\fwinn\fwinn.exe FirewallRules: [TCP Query User{03D0DBA4-D767-4CA7-A5F5-74AB76F165C4}C:\program files (x86)\fsfdt\control panel\fsfdtcp.exe] => (Allow) C:\program files (x86)\fsfdt\control panel\fsfdtcp.exe FirewallRules: [UDP Query User{D18CD632-37A0-42AB-838C-D7306954A569}C:\program files (x86)\fsfdt\control panel\fsfdtcp.exe] => (Allow) C:\program files (x86)\fsfdt\control panel\fsfdtcp.exe FirewallRules: [{E07D4570-2EF2-4928-894A-149A4ECF20AB}] => (Allow) E:\Steam\steamapps\common\Wargame European Escalation\WarGame.exe FirewallRules: [{17D66D14-B3A2-4EF0-A307-43B1A63A6366}] => (Allow) E:\Steam\steamapps\common\Wargame European Escalation\WarGame.exe FirewallRules: [{5389FB8E-B76C-463B-961B-3FBF088A414F}] => (Allow) E:\Steam\steamapps\common\Trine 2\trine2_launcher.exe FirewallRules: [{1A75E772-E231-4CFC-92E4-D57EA9AC57D9}] => (Allow) E:\Steam\steamapps\common\Trine 2\trine2_launcher.exe FirewallRules: [{5A94A641-02C3-4718-8703-53A50CCE558D}] => (Allow) E:\Steam\steamapps\common\Trine\trine_launcher.exe FirewallRules: [{E5AAD7D7-6CBF-4454-95AE-0F896FA3A278}] => (Allow) E:\Steam\steamapps\common\Trine\trine_launcher.exe FirewallRules: [{EE4A7107-9877-428A-97C5-1056C4B4C0A1}] => (Allow) E:\Steam\steamapps\common\Arma 3\arma3.exe FirewallRules: [{D85B49F2-B566-4FB4-8B6B-4846841F9ED6}] => (Allow) E:\Steam\steamapps\common\Arma 3\arma3.exe FirewallRules: [{82A8D0AC-AF4F-409F-B65F-52CD5ED36BFE}] => (Allow) E:\Steam\steamapps\common\Arma 3\arma3.exe FirewallRules: [{D8815D31-9AB6-474E-80B7-31FFF6A858EF}] => (Allow) E:\Steam\steamapps\common\Arma 3\arma3.exe FirewallRules: [{D68DEC29-9589-4789-9223-2FEC5EF49595}] => (Allow) E:\Steam\steamapps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe FirewallRules: [{DD576BC4-E0B0-470F-9923-173493094FEE}] => (Allow) E:\Steam\steamapps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe FirewallRules: [{DFA0E6FA-6080-4CDC-9494-41EAA51CA6D6}] => (Allow) E:\Steam\steamapps\common\ManiaPlanet_TMStadium\ManiaPlanetLauncher.exe FirewallRules: [{7EB32515-BC29-4367-90CD-EEA9D07AC236}] => (Allow) E:\Steam\steamapps\common\ManiaPlanet_TMStadium\ManiaPlanetLauncher.exe FirewallRules: [{0EE669C3-09B4-4583-A777-3F97D7AF7B10}] => (Allow) E:\Steam\steamapps\common\ManiaPlanet_TMStadium\ManiaPlanetLauncher.exe FirewallRules: [{510D0E98-BEF4-4522-B881-EB9FA6242283}] => (Allow) E:\Steam\steamapps\common\ManiaPlanet_TMStadium\ManiaPlanetLauncher.exe FirewallRules: [{733D7B55-D6AD-4CD4-8E42-15952A63F1ED}] => (Allow) E:\Steam\steamapps\common\ManiaPlanet_TMStadium\ManiaPlanet.exe FirewallRules: [{B29CACC1-78E6-4C03-B467-1832C1570F16}] => (Allow) E:\Steam\steamapps\common\ManiaPlanet_TMStadium\ManiaPlanet.exe FirewallRules: [{114E65D1-9B2E-4D41-8A12-7B80D1F1C3A1}] => (Allow) E:\Steam\steamapps\common\Cities in Motion 2\CIM2.exe FirewallRules: [{F6C1ED19-46F5-4F53-9F52-06998478136B}] => (Allow) E:\Steam\steamapps\common\Cities in Motion 2\CIM2.exe FirewallRules: [TCP Query User{A07DC823-3FB5-4187-A464-5A428F202376}E:\games\consortium\consortium.exe] => (Block) E:\games\consortium\consortium.exe FirewallRules: [UDP Query User{847C4716-092F-4DE7-93BF-95D65D25112B}E:\games\consortium\consortium.exe] => (Block) E:\games\consortium\consortium.exe FirewallRules: [{F9D7933B-1D4E-4A74-BCE0-C4B5B595AF89}] => (Allow) E:\Steam\steamapps\common\Source SDK Base 2007\hl2.exe FirewallRules: [{A3160648-9B2A-417E-929C-9442271B28CA}] => (Allow) E:\Steam\steamapps\common\Source SDK Base 2007\hl2.exe FirewallRules: [{A47E7BAF-8D6B-4A02-B409-0790C2A57B32}] => (Allow) E:\Steam\steamapps\common\Source SDK Base\hl2.exe FirewallRules: [{F8EADF28-B9B9-4729-A1F4-34B4F1304F0B}] => (Allow) E:\Steam\steamapps\common\Source SDK Base\hl2.exe FirewallRules: [TCP Query User{7DD85B99-2B49-4DA7-8E31-EA434AADFC35}C:\program files (x86)\mirc\mirc.exe] => (Allow) C:\program files (x86)\mirc\mirc.exe FirewallRules: [UDP Query User{88124C57-4B71-4B46-A269-6F815C95684B}C:\program files (x86)\mirc\mirc.exe] => (Allow) C:\program files (x86)\mirc\mirc.exe FirewallRules: [{3330D5A7-9CEA-4A13-9EA9-D90BED3590BF}] => (Allow) E:\Steam\steamapps\common\Quake\Winquake.exe FirewallRules: [{BCA789FC-4C1A-4D82-8554-F761FC70905A}] => (Allow) E:\Steam\steamapps\common\Quake\Winquake.exe FirewallRules: [{5F8FD551-9843-4A0D-8F24-59F3A02B9810}] => (Allow) E:\Steam\steamapps\common\Quake\qwcl.exe FirewallRules: [{EA8BCE69-4F84-4E2E-ABCA-3F5301A62281}] => (Allow) E:\Steam\steamapps\common\Quake\qwcl.exe FirewallRules: [{844FA909-9498-40A6-9C4B-1BC6BDEA61AE}] => (Allow) E:\Steam\steamapps\common\Quake\Glquake.exe FirewallRules: [{122A6E00-A3DF-4AAF-B567-66BD7ACBB8F9}] => (Allow) E:\Steam\steamapps\common\Quake\Glquake.exe FirewallRules: [{737EE391-71E5-4887-88A7-8DB14525680F}] => (Allow) E:\Steam\steamapps\common\Quake\glqwcl.exe FirewallRules: [{2AE88A81-33CC-445B-99B2-6C8D2DA8731F}] => (Allow) E:\Steam\steamapps\common\Quake\glqwcl.exe FirewallRules: [{4E76898A-D39C-40D7-8910-B0462D6F7664}] => (Allow) E:\Steam\steamapps\common\Hawken\Binaries\Win32\HawkenGame-Win32-Shipping.exe FirewallRules: [{C81301DC-8F4D-44AE-A3C7-C9EB0162207C}] => (Allow) E:\Steam\steamapps\common\Hawken\Binaries\Win32\HawkenGame-Win32-Shipping.exe FirewallRules: [{9FCA95D8-FEE6-42D7-A6FC-AD41C2B93D50}] => (Allow) E:\Steam\steamapps\common\Tom Clancy's Ghost Recon Online\Launcher.exe FirewallRules: [{CB655FB5-B00E-440A-AF36-0C684717B64D}] => (Allow) E:\Steam\steamapps\common\Tom Clancy's Ghost Recon Online\Launcher.exe FirewallRules: [TCP Query User{0FF16BAE-DA5A-4FE0-80A3-083F559F92EC}E:\steam\steamapps\common\tom clancy's ghost recon online\game\ncsa-live\ghostreconphantoms.exe] => (Allow) E:\steam\steamapps\common\tom clancy's ghost recon online\game\ncsa-live\ghostreconphantoms.exe FirewallRules: [UDP Query User{3F77D27A-C649-453B-98A4-89034EA87F15}E:\steam\steamapps\common\tom clancy's ghost recon online\game\ncsa-live\ghostreconphantoms.exe] => (Allow) E:\steam\steamapps\common\tom clancy's ghost recon online\game\ncsa-live\ghostreconphantoms.exe FirewallRules: [{48D938B5-8972-49E2-8962-153390460A2B}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{49544615-C238-46F3-8FEF-C549136E7ED3}] => (Allow) LPort=2869 FirewallRules: [{601A0449-AB38-4172-B454-87C70FEDCEA7}] => (Allow) LPort=1900 FirewallRules: [{20BED758-A0EC-49A9-B34A-017E7EE1FCAE}] => (Allow) E:\Steam\steamapps\common\Tropico 4\Tropico4.exe FirewallRules: [{D2A4417B-143C-49EB-91C6-8C314936C639}] => (Allow) E:\Steam\steamapps\common\Tropico 4\Tropico4.exe FirewallRules: [TCP Query User{BD1E43E1-CB0C-4EAB-92AD-F1C8B55CFB8A}E:\steam\steamapps\common\il-2 sturmovik cliffs of dover\launcher.exe] => (Allow) E:\steam\steamapps\common\il-2 sturmovik cliffs of dover\launcher.exe FirewallRules: [UDP Query User{33DBA87F-2F05-4727-8A1B-E2BFB81E791C}E:\steam\steamapps\common\il-2 sturmovik cliffs of dover\launcher.exe] => (Allow) E:\steam\steamapps\common\il-2 sturmovik cliffs of dover\launcher.exe FirewallRules: [{F085A78E-6126-4710-B763-1E3087B7C609}] => (Allow) E:\Steam\steamapps\common\The Testament of Sherlock Holmes\game.exe FirewallRules: [{793D77EA-306A-442F-A483-DB157F8C24DD}] => (Allow) E:\Steam\steamapps\common\The Testament of Sherlock Holmes\game.exe FirewallRules: [{3F9049AD-E7B3-4A07-9B48-EA76E86B1E6C}] => (Allow) E:\Games\Battle.net\Battle.net.exe FirewallRules: [{00269B79-84FE-4911-9277-46EA548654DF}] => (Allow) E:\Games\Battle.net\Battle.net.exe FirewallRules: [{25E8C226-240D-4EA3-8F00-1CE06EBF11D4}] => (Allow) E:\Games\Hearthstone\Hearthstone.exe FirewallRules: [{599F6A68-B2F9-4B60-BF1E-991F6193CEB1}] => (Allow) E:\Games\Hearthstone\Hearthstone.exe FirewallRules: [{FAAE1DE1-99BA-4EC1-A59C-2143BC004689}] => (Allow) E:\Steam\steamapps\common\DCSWorld\Run.exe FirewallRules: [{A3662AA0-4FAB-4FF2-AC92-36B1B1A2FA5E}] => (Allow) E:\Steam\steamapps\common\DCSWorld\Run.exe FirewallRules: [{21D02A11-785D-4C3A-BAE2-EC9BD574C5B1}] => (Allow) E:\Games\ubisoft games\Watch_Dogs\bin\watch_dogs.exe FirewallRules: [{6B97C2D6-2EA8-4DF4-A4E9-221777C88E26}] => (Allow) E:\Games\ubisoft games\Watch_Dogs\bin\watch_dogs.exe FirewallRules: [{1FFF6CB1-8412-4313-B0D5-A15BCA907021}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{50D5EF2D-5559-4711-9AFD-1B6F16627B08}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{1DA2F378-3CDE-48E7-BB44-C57923E209C0}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe FirewallRules: [{D450F93B-3D94-4313-A05B-1C63C33901B9}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe FirewallRules: [TCP Query User{796DBA5A-1B48-47C6-A945-78E1083787FE}E:\steam\steamapps\common\planetside 2\planetside2_x64.exe] => (Allow) E:\steam\steamapps\common\planetside 2\planetside2_x64.exe FirewallRules: [UDP Query User{25CDC710-8034-4BA8-8AD7-CAEE4849EF6F}E:\steam\steamapps\common\planetside 2\planetside2_x64.exe] => (Allow) E:\steam\steamapps\common\planetside 2\planetside2_x64.exe FirewallRules: [TCP Query User{9E4C2564-7B37-44C2-964A-A3D25BD8016D}E:\games\assetto corsa\acs.exe] => (Block) E:\games\assetto corsa\acs.exe FirewallRules: [UDP Query User{720CD47E-5021-4E0E-B099-6AFC5A5B7C35}E:\games\assetto corsa\acs.exe] => (Block) E:\games\assetto corsa\acs.exe FirewallRules: [TCP Query User{939D2BC4-F114-4D4C-ABBD-3AD2343CFBB7}E:\games\falcon bms 4.32\bin\x86\ivc\ivc server.exe] => (Allow) E:\games\falcon bms 4.32\bin\x86\ivc\ivc server.exe FirewallRules: [UDP Query User{9660BB96-9BFB-49B9-B189-331D78C1B2EB}E:\games\falcon bms 4.32\bin\x86\ivc\ivc server.exe] => (Allow) E:\games\falcon bms 4.32\bin\x86\ivc\ivc server.exe FirewallRules: [{4F710EE3-D7E5-4CD0-9D25-F9019F567A9F}] => (Allow) E:\Steam\bin\steamwebhelper.exe FirewallRules: [{7767BC37-0AF8-4A1D-84C3-95B1B8382430}] => (Allow) E:\Steam\bin\steamwebhelper.exe FirewallRules: [{4B98C5F4-9B41-4583-BDCC-D225C48339D9}] => (Allow) E:\Steam\steamapps\common\Trine\_enchanted_edition_\trine1_launcher.exe FirewallRules: [{99E5B050-B89E-4977-B68A-EEB691E7202F}] => (Allow) E:\Steam\steamapps\common\Trine\_enchanted_edition_\trine1_launcher.exe FirewallRules: [{3AAA61D0-AA35-4015-9B7E-688AC0E139F5}] => (Allow) E:\Steam\steamapps\common\Pool Nation\Pool.exe FirewallRules: [{4CD3DC0F-C673-409C-BC61-619D167B9660}] => (Allow) E:\Steam\steamapps\common\Pool Nation\Pool.exe FirewallRules: [TCP Query User{D4CE53CC-D553-4004-A134-C342C92B7E65}E:\games\falcon bms 4.32\bin\x86\falcon bms.exe] => (Allow) E:\games\falcon bms 4.32\bin\x86\falcon bms.exe FirewallRules: [UDP Query User{5C726554-EC19-48C7-9751-A56AB32BF1C1}E:\games\falcon bms 4.32\bin\x86\falcon bms.exe] => (Allow) E:\games\falcon bms 4.32\bin\x86\falcon bms.exe FirewallRules: [TCP Query User{1190668B-A64F-414F-B372-25DBB6938F5E}E:\games\mind path to thalamus\binaries\win32\mind.exe] => (Block) E:\games\mind path to thalamus\binaries\win32\mind.exe FirewallRules: [UDP Query User{B4B83270-2941-4DD3-8FC0-11F5F1877347}E:\games\mind path to thalamus\binaries\win32\mind.exe] => (Block) E:\games\mind path to thalamus\binaries\win32\mind.exe FirewallRules: [{D722FE3B-F79B-4C3A-BA43-0D2ECDF2A85A}] => (Allow) E:\Games\Wing Commander III\Game\Game\DOSBox\DOSBox.exe FirewallRules: [{ABF6D46E-B682-4E9A-9C11-D3AA47405424}] => (Allow) E:\Games\Wing Commander III\Game\Game\DOSBox\DOSBox.exe FirewallRules: [{016E55EE-E468-42CA-83BB-32ED6F880722}] => (Allow) E:\Steam\steamapps\common\mark_of_the_ninja\bin\game.exe FirewallRules: [{20CA5613-B172-4800-B618-6AC387F1E371}] => (Allow) E:\Steam\steamapps\common\mark_of_the_ninja\bin\game.exe FirewallRules: [{930368ED-BB9E-43F1-B588-3A8B894D6CFA}] => (Allow) E:\Steam\steamapps\common\Quake 2\quake2.exe FirewallRules: [{E3441636-6CA0-4CC0-976A-88DD39CFE4FA}] => (Allow) E:\Steam\steamapps\common\Quake 2\quake2.exe FirewallRules: [{AC962E20-17DE-47F1-A380-B2370A5E6ADE}] => (Allow) E:\Steam\steamapps\common\Quake Live\quakelive_steam.exe FirewallRules: [{23382B15-B078-40EC-AD18-647AF23A5BF6}] => (Allow) E:\Steam\steamapps\common\Quake Live\quakelive_steam.exe FirewallRules: [TCP Query User{7140A2E9-60F6-4367-BF78-153238C27A07}E:\steam\steamapps\common\thehunter\game\thehunter.exe] => (Allow) E:\steam\steamapps\common\thehunter\game\thehunter.exe FirewallRules: [UDP Query User{FD362DB8-0065-4C50-9EAB-BDF51119303E}E:\steam\steamapps\common\thehunter\game\thehunter.exe] => (Allow) E:\steam\steamapps\common\thehunter\game\thehunter.exe FirewallRules: [{9C027BB2-5683-4C22-9472-321970C293F7}] => (Allow) E:\Steam\steamapps\common\insurgency2\insurgency.exe FirewallRules: [{84556BEF-94B3-4A01-AAF6-AF64F2E8012A}] => (Allow) E:\Steam\steamapps\common\insurgency2\insurgency.exe FirewallRules: [TCP Query User{69550AAB-2BBC-4ED5-B58D-6FA1103D1528}\\server\downloads\super time force ultra\stf_win32.exe] => (Allow) \\server\downloads\super time force ultra\stf_win32.exe FirewallRules: [UDP Query User{D477321E-9D9C-44E9-8C6B-BF3C795EDCA9}\\server\downloads\super time force ultra\stf_win32.exe] => (Allow) \\server\downloads\super time force ultra\stf_win32.exe FirewallRules: [TCP Query User{4FADCCA3-6F6E-4A0C-80E8-FEFC82800E5B}E:\games\screamer 4x4\screamer4x4_gl.exe] => (Allow) E:\games\screamer 4x4\screamer4x4_gl.exe FirewallRules: [UDP Query User{72EAFA8A-442C-4994-9584-1F24A02060FE}E:\games\screamer 4x4\screamer4x4_gl.exe] => (Allow) E:\games\screamer 4x4\screamer4x4_gl.exe FirewallRules: [TCP Query User{87F58A1A-5A1A-4A8A-83F3-61271E6A22C6}C:\users\main\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\main\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [UDP Query User{29D03FC8-8439-4F2E-ADB4-74304330DBCD}C:\users\main\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\main\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [{D957A037-2FD7-46DC-B36B-A95CDDA7706F}] => (Allow) E:\Games\CNC and The Covert Operations\CNC95Launcher.exe FirewallRules: [{41697B6F-10F7-4A78-AD7E-FC430ABE7F06}] => (Allow) E:\Games\CNC and The Covert Operations\CNC95Launcher.exe FirewallRules: [{4D31568C-064B-4430-B1AF-D3BBCF94F664}] => (Allow) E:\Steam\steamapps\common\Sonic & All-Stars Racing Transformed\ASN_App_PcDx9_Final.exe FirewallRules: [{6D6D36E9-65C7-4CCC-A6BA-CE5F5D7425E4}] => (Allow) E:\Steam\steamapps\common\Sonic & All-Stars Racing Transformed\ASN_App_PcDx9_Final.exe FirewallRules: [{9CAE7F70-72AD-41ED-B4B0-77C107E16CE6}] => (Allow) E:\Steam\steamapps\common\Sonic & All-Stars Racing Transformed\Launcher.exe FirewallRules: [{7A25983C-E84B-46DE-A4A1-7472801B2405}] => (Allow) E:\Steam\steamapps\common\Sonic & All-Stars Racing Transformed\Launcher.exe FirewallRules: [{368B1C2F-FFC1-4380-9772-0CDBAA0EF915}] => (Allow) E:\Steam\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe FirewallRules: [{428496F3-B043-4707-B758-609C567C5506}] => (Allow) E:\Steam\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe FirewallRules: [{0CB3A800-7E6B-4149-8769-62E2AD8BCB49}] => (Allow) E:\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe FirewallRules: [{72D82ADC-3651-45E3-9AD9-D1D86B5827D0}] => (Allow) E:\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe FirewallRules: [TCP Query User{AB1DBA8C-E198-49EE-B456-8AC53796A814}E:\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe] => (Allow) E:\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe FirewallRules: [UDP Query User{7045A4E9-22A4-4972-A358-B48D65E84C36}E:\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe] => (Allow) E:\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe FirewallRules: [{F405229A-7B5E-4BCF-AE20-FAD38E796588}] => (Allow) E:\Steam\streaming_client.exe FirewallRules: [{1A2D306E-AB7F-47CF-BDA8-14DB67B30FF4}] => (Allow) E:\Steam\streaming_client.exe FirewallRules: [{8C4C45B5-69E2-42D1-B359-25DB44896663}] => (Allow) E:\Steam\streaming_client.exe FirewallRules: [{62381971-0124-4345-91BF-005C1E3DFEB6}] => (Allow) E:\Steam\streaming_client.exe FirewallRules: [{4DD3E010-C4A5-4AD6-9569-F0EE636AF984}] => (Block) C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.0\bin\epm0.exe FirewallRules: [{54769A08-B235-464C-8BAD-F5D315435F8E}] => (Block) C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.0\bin\epm0.exe FirewallRules: [{57BB0A87-1F74-4F4B-9B34-10DBFBC25F7D}] => (Block) C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.0\bin\epm0.exe FirewallRules: [{D8CD4CAD-E4DB-49ED-B9BA-8B234A551A38}] => (Block) C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.0\bin\epm0.exe FirewallRules: [{0F8C9667-BB8C-4899-A5D8-CC5904DD836F}] => (Allow) LPort=49166 FirewallRules: [{2837C9EF-6FFA-43FD-9A2B-F9BBFA6C61F0}] => (Allow) LPort=5000 FirewallRules: [{A4D0A0AF-53D8-458E-A240-E6617419C546}] => (Allow) LPort=50248 FirewallRules: [{ACB92E79-F62E-45E6-A207-51A5FF52D0E4}] => (Allow) LPort=50248 FirewallRules: [{C84FDA1D-832D-474C-91DF-09A152E1C69E}] => (Allow) C:\Program Files (x86)\Microsoft Garage\Mouse without Borders\MouseWithoutBorders.exe FirewallRules: [{CB296293-2914-4B54-8C48-535AE60F017C}] => (Allow) E:\Steam\steamapps\common\Planetary Annihilation\bin_x64\PA.exe FirewallRules: [{A82CC8EA-9FAF-4493-88AC-6669DCCDFE22}] => (Allow) E:\Steam\steamapps\common\Planetary Annihilation\bin_x64\PA.exe FirewallRules: [{28FFAD77-843E-4014-BD01-DD7B99FDEA05}] => (Allow) E:\Steam\steamapps\common\MerchantsOfKaidan\Kaidan.exe FirewallRules: [{E6496D8D-BC75-46C7-BAE4-8ABF5CCDF775}] => (Allow) E:\Steam\steamapps\common\MerchantsOfKaidan\Kaidan.exe FirewallRules: [TCP Query User{1FD67248-30EE-4CCC-80A1-C2038AED1C20}E:\games\kingpin\kingpin.exe] => (Allow) E:\games\kingpin\kingpin.exe FirewallRules: [UDP Query User{A9D28F30-0674-4071-84B9-A8A45A144A11}E:\games\kingpin\kingpin.exe] => (Allow) E:\games\kingpin\kingpin.exe FirewallRules: [{0F6AEB60-7E5D-4AC7-AE64-5E50F42A49BD}] => (Allow) E:\Steam\steamapps\common\Super Motherload\Goldium\Motherload Goldium.exe FirewallRules: [{79E79813-926D-4EC2-A849-D8D7036740D9}] => (Allow) E:\Steam\steamapps\common\Super Motherload\Goldium\Motherload Goldium.exe FirewallRules: [{E2D5F549-4849-42B6-92F2-A1127125BA8D}] => (Allow) E:\Steam\steamapps\common\IronFront\Ironfront.exe FirewallRules: [{7D80148D-6155-4FF9-8431-BE2CCDFB4137}] => (Allow) E:\Steam\steamapps\common\IronFront\Ironfront.exe FirewallRules: [TCP Query User{8B7DF904-4DCB-4B4D-AFE0-4DE854EFB21A}E:\steam\steamapps\common\super motherload\supermotherloadgl.exe] => (Allow) E:\steam\steamapps\common\super motherload\supermotherloadgl.exe FirewallRules: [UDP Query User{38E02414-708F-49EC-9280-0CCE34E567F0}E:\steam\steamapps\common\super motherload\supermotherloadgl.exe] => (Allow) E:\steam\steamapps\common\super motherload\supermotherloadgl.exe FirewallRules: [{590678CF-125C-4ED7-9B33-38DA880652D7}] => (Allow) E:\Steam\steamapps\common\Crazy Machines 2\cm2.exe FirewallRules: [{56E74395-B160-413B-9414-15F32FB3E218}] => (Allow) E:\Steam\steamapps\common\Crazy Machines 2\cm2.exe FirewallRules: [{AE507A12-04B6-43AF-B0BF-340C71C03663}] => (Allow) E:\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe FirewallRules: [{10D77AC6-1B69-437E-B018-B3FDBE628A06}] => (Allow) E:\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe FirewallRules: [{5441286B-53BB-4411-86CB-B504F4DAC120}] => (Allow) E:\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGameServer.exe FirewallRules: [{1E4C8EA7-3D8A-48AD-A6F2-1A4E7CA062E1}] => (Allow) E:\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGameServer.exe FirewallRules: [TCP Query User{641DF8F8-0A91-4879-AA1A-D1A29ACF04A8}E:\games\naissancee\binaries\win32\udk.exe] => (Block) E:\games\naissancee\binaries\win32\udk.exe FirewallRules: [UDP Query User{741AB763-DE32-4F7F-8CB7-17C327C366A5}E:\games\naissancee\binaries\win32\udk.exe] => (Block) E:\games\naissancee\binaries\win32\udk.exe FirewallRules: [{2EE6CEBB-9BD7-40D7-9EBD-A18D5215DC05}] => (Allow) E:\Steam\steamapps\common\7 Grand Steps 01\7 Grand Steps.exe FirewallRules: [{040C6E61-0537-4EE9-AB06-A82AFE81F9D1}] => (Allow) E:\Steam\steamapps\common\7 Grand Steps 01\7 Grand Steps.exe FirewallRules: [{B8EF00FB-C586-4770-A42D-4ED3930553AE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{2534EF64-5D5D-4236-A788-9988FC219C36}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{38C71971-2A91-422B-B99D-D5613C674F8C}] => (Allow) E:\Games\GTAV\GTA5.exe FirewallRules: [{B45BCB3A-FE5D-4A8A-98B4-72A7460870CA}] => (Allow) E:\Games\GTAV\GTA5.exe FirewallRules: [TCP Query User{2823395F-338A-422E-93CB-47E9367C9B7D}E:\games\phoenixrc\phoenixrc.exe] => (Block) E:\games\phoenixrc\phoenixrc.exe FirewallRules: [UDP Query User{705896DF-B9A5-478C-AEA8-594EA2E0A0DB}E:\games\phoenixrc\phoenixrc.exe] => (Block) E:\games\phoenixrc\phoenixrc.exe FirewallRules: [TCP Query User{30E4B744-11CB-4993-916D-33D55B0B8703}E:\games\unreal gold\system\unreal1.exe] => (Block) E:\games\unreal gold\system\unreal1.exe FirewallRules: [UDP Query User{AB8B5C50-85A0-4ED8-BBC7-5AEC18B0F749}E:\games\unreal gold\system\unreal1.exe] => (Block) E:\games\unreal gold\system\unreal1.exe FirewallRules: [TCP Query User{3318FF10-1F79-4391-AE64-4CB32241AFCC}E:\games\kings quest chapter 1\binaries\win\kingsquest.exe] => (Block) E:\games\kings quest chapter 1\binaries\win\kingsquest.exe FirewallRules: [UDP Query User{837A498E-182C-450C-AD89-6DEF7D335FBB}E:\games\kings quest chapter 1\binaries\win\kingsquest.exe] => (Block) E:\games\kings quest chapter 1\binaries\win\kingsquest.exe FirewallRules: [TCP Query User{39BDD372-BDE6-4138-A0FA-54F89FAB5746}E:\games\soldier of fortune\sof.exe] => (Allow) E:\games\soldier of fortune\sof.exe FirewallRules: [UDP Query User{89256CA0-2CD2-43ED-80AF-8D18927A0D88}E:\games\soldier of fortune\sof.exe] => (Allow) E:\games\soldier of fortune\sof.exe FirewallRules: [{68F6B33B-B347-4EE6-A6F1-73843B16E55C}] => (Allow) E:\Games\Theme Hospital\data\Game\DOSBox\EALaunchHelper.exe FirewallRules: [{6052A269-E00B-4665-B5E2-8C30BD67BE5A}] => (Allow) E:\Games\Theme Hospital\data\Game\DOSBox\EALaunchHelper.exe FirewallRules: [TCP Query User{60461075-D8C9-499E-8391-6DF883107127}E:\games\world in conflict - complete edition\wic.exe] => (Allow) E:\games\world in conflict - complete edition\wic.exe FirewallRules: [UDP Query User{511F6DD5-6FA1-4B0C-865B-AFB34219AD9D}E:\games\world in conflict - complete edition\wic.exe] => (Allow) E:\games\world in conflict - complete edition\wic.exe FirewallRules: [{6C5BC810-4103-413C-99FF-62DDE216F00F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{89FBE2E4-C856-4B17-BF7A-38D306B28F23}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{D781EF31-D2A8-46AE-BED6-F107FE2C99B9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{FE8F7CA7-DD24-4ECF-919F-2A4ED64AE08D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{13F65357-228F-4475-B398-86AB84548BCB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [TCP Query User{143DA28C-59A6-4902-8387-715CE88DFFDD}E:\games\men of war - assault squad 2\mowas_2.exe] => (Block) E:\games\men of war - assault squad 2\mowas_2.exe FirewallRules: [UDP Query User{8D8F2B01-0936-4061-B79F-992F707C78E7}E:\games\men of war - assault squad 2\mowas_2.exe] => (Block) E:\games\men of war - assault squad 2\mowas_2.exe FirewallRules: [TCP Query User{AFB5C05F-2729-4434-A2D9-6317D2B16F76}E:\games\the beginner's guide\beginnersguide.exe] => (Block) E:\games\the beginner's guide\beginnersguide.exe FirewallRules: [UDP Query User{40DB4F19-3A2A-4D7B-BB19-E9C1054B6047}E:\games\the beginner's guide\beginnersguide.exe] => (Block) E:\games\the beginner's guide\beginnersguide.exe FirewallRules: [{5FBB30D7-A277-41E4-9482-1FCAE6767B01}] => (Allow) E:\Steam\steamapps\common\Commandos 2 Men of Courage\comm2.exe FirewallRules: [{E34F47BA-2859-4DA8-B8E2-E3B1516D3BE1}] => (Allow) E:\Steam\steamapps\common\Commandos 2 Men of Courage\comm2.exe FirewallRules: [{0C1B7FC5-619B-42E3-A80D-B2E285C81BB1}] => (Allow) E:\Steam\steamapps\common\Warface\live\nw.exe FirewallRules: [{1A3B0114-897E-4D46-9C45-B5B63358130B}] => (Allow) E:\Steam\steamapps\common\Warface\live\nw.exe FirewallRules: [{1A6A8E5C-3FC4-44A9-AEE8-14BFB3CEA860}] => (Allow) E:\Steam\steamapps\common\Deus Ex\System\Revision.exe FirewallRules: [{CA3D4E0A-BC7B-46F2-842B-1F0C50D36DAA}] => (Allow) E:\Steam\steamapps\common\Deus Ex\System\Revision.exe FirewallRules: [{9161CBAA-CC1A-49B2-B2AB-A0270647BE2D}] => (Allow) E:\Steam\steamapps\common\Deus Ex\System\DeusEx.exe FirewallRules: [{E7A02F6F-80CC-4D5B-BE5A-BF47DD12606B}] => (Allow) E:\Steam\steamapps\common\Deus Ex\System\DeusEx.exe FirewallRules: [{0E1D607F-8268-4231-857C-2D2B0A9EA688}] => (Allow) E:\Steam\steamapps\common\Planetary Annihilation\bin_x86\PA.exe FirewallRules: [{11BC12FC-6CE1-4CF6-A872-6F9B637124DF}] => (Allow) E:\Steam\steamapps\common\Planetary Annihilation\bin_x86\PA.exe FirewallRules: [{AD9A3F1C-12B2-41AE-AB23-2941333B0304}] => (Allow) E:\Steam\steamapps\common\Planetary Annihilation\bin_x86\crashupload.exe FirewallRules: [{A6EADD61-0B4A-4E7E-9194-700A0A0EF9C4}] => (Allow) E:\Steam\steamapps\common\Planetary Annihilation\bin_x86\crashupload.exe FirewallRules: [{17FFC019-062A-4532-9011-15B776E42F84}] => (Allow) E:\Steam\steamapps\common\Planetary Annihilation\bin_x86\host\CoherentUI_Host.exe FirewallRules: [{0D948541-5A10-4E9A-93DF-70E4D56A21A6}] => (Allow) E:\Steam\steamapps\common\Planetary Annihilation\bin_x86\host\CoherentUI_Host.exe FirewallRules: [{E9F382F6-9AB1-4402-B40A-DF6BF79975F1}] => (Allow) E:\Steam\steamapps\common\Planetary Annihilation\bin_x64\crashupload.exe FirewallRules: [{84047F91-1812-4BF4-BDD4-672EB0841101}] => (Allow) E:\Steam\steamapps\common\Planetary Annihilation\bin_x64\crashupload.exe FirewallRules: [{F4BF8B03-F62E-4551-9834-AB89A6CD5F05}] => (Allow) E:\Steam\steamapps\common\Planetary Annihilation\bin_x64\host\CoherentUI_Host.exe FirewallRules: [{B18B7799-F3F6-4C36-82D5-0B5D8F016007}] => (Allow) E:\Steam\steamapps\common\Planetary Annihilation\bin_x64\host\CoherentUI_Host.exe FirewallRules: [{4DAB7923-334D-4B0F-A49C-A97B045E5712}] => (Allow) E:\Steam\steamapps\common\Planetary Annihilation\bin_x64\server.exe FirewallRules: [{EEA19FAC-E200-40DD-8331-DF66F14C8DAB}] => (Allow) E:\Steam\steamapps\common\Planetary Annihilation\bin_x64\server.exe FirewallRules: [{9B7CA894-6A7F-4868-ADC8-126676DB6300}] => (Allow) E:\Steam\steamapps\common\Arma 3\arma3launcher.exe FirewallRules: [{F7012FD5-108C-4949-9EF0-6C5EAE7C43F5}] => (Allow) E:\Steam\steamapps\common\Arma 3\arma3launcher.exe FirewallRules: [TCP Query User{201121AA-D1C8-49F3-BCE0-96111C881670}C:\program files (x86)\deluge\deluge.exe] => (Allow) C:\program files (x86)\deluge\deluge.exe FirewallRules: [UDP Query User{63373F04-7720-4F4A-BECE-AA7D4E852283}C:\program files (x86)\deluge\deluge.exe] => (Allow) C:\program files (x86)\deluge\deluge.exe FirewallRules: [TCP Query User{5A111AA5-87C9-4CCA-A06C-059218623176}E:\games\overwatch\gameclientapp.exe] => (Allow) E:\games\overwatch\gameclientapp.exe FirewallRules: [UDP Query User{54E4A4A7-E7A1-4922-9BC8-F1D2796C95B2}E:\games\overwatch\gameclientapp.exe] => (Allow) E:\games\overwatch\gameclientapp.exe FirewallRules: [{277AB254-11FC-4AFC-B713-FF1CC2F07633}] => (Allow) C:\Users\Main\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{75B41CE9-A514-4149-80AE-B173261F55B5}] => (Allow) C:\Users\Main\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [TCP Query User{22E6CBAB-8E4F-4716-8DE6-4BA817F63F57}E:\games\star wars jedi knight ii - jedi outcast\gamedata\jk2mp.exe] => (Allow) E:\games\star wars jedi knight ii - jedi outcast\gamedata\jk2mp.exe FirewallRules: [UDP Query User{D73CF223-1DA5-478D-8F38-0FC70B3F674A}E:\games\star wars jedi knight ii - jedi outcast\gamedata\jk2mp.exe] => (Allow) E:\games\star wars jedi knight ii - jedi outcast\gamedata\jk2mp.exe FirewallRules: [TCP Query User{26BCF8D2-1786-4AE1-8E7C-93A45B732187}E:\games\distance\distance.exe] => (Block) E:\games\distance\distance.exe FirewallRules: [UDP Query User{721EDA80-BE35-4D5A-9B77-7269C5BA6051}E:\games\distance\distance.exe] => (Block) E:\games\distance\distance.exe FirewallRules: [{6046B73D-0F82-49DC-883C-76051C66D5EE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{1BCBFAC1-63D2-42F9-837D-2B9F7FCFEE5B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{E61D30C5-15CE-4043-B876-9BB9010AF933}] => (Allow) E:\Steam\steamapps\common\Warframe\Warframe.exe FirewallRules: [{CD20D16E-33E8-4FE9-A8E8-8663E672D44A}] => (Allow) E:\Steam\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{D712D99F-DCB2-4013-9C61-D1A3EA27ABE0}] => (Allow) E:\Steam\steamapps\common\Warframe\Warframe.exe FirewallRules: [{8DD65B04-A958-4C1F-B752-FEBA4B587ADE}] => (Allow) E:\Steam\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{95D62728-C7AD-4C54-B51E-F1981883F757}] => (Allow) E:\Steam\steamapps\common\Warframe\Tools\Launcher.exe FirewallRules: [{D7005D28-E7E5-4711-90D3-99AB6C3285AD}] => (Allow) E:\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe FirewallRules: [{CE2C41AF-CEEC-43ED-903A-07A22109C096}] => (Allow) E:\Steam\steamapps\common\Warframe\Warframe.exe FirewallRules: [{CCEB3DA8-2664-4CD4-AC1F-9CC8D5F8EB78}] => (Allow) E:\Steam\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{92BA88B2-9D1C-410A-B4EA-282368B71FB0}] => (Allow) E:\Steam\steamapps\common\Warframe\Warframe.exe FirewallRules: [{89EA1D4F-8B67-4270-BD83-0EB5B58CF819}] => (Allow) E:\Steam\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{F1E049B7-695F-4059-AB64-46B2BCF84D7D}] => (Allow) E:\Steam\steamapps\common\Warframe\Tools\Launcher.exe FirewallRules: [{EE82FB14-A461-4BEE-9313-7F38371AF601}] => (Allow) E:\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe FirewallRules: [{0165001D-0809-4747-8274-F6A45CC274AB}] => (Allow) E:\Steam\steamapps\common\shatter\Shatter.exe FirewallRules: [{AD647442-9496-4345-98F8-6B7CC5CBB0B7}] => (Allow) E:\Steam\steamapps\common\shatter\Shatter.exe FirewallRules: [{96E563D7-5019-4DF9-AACF-17091E2B4811}] => (Allow) E:\Steam\steamapps\common\shatter\ShatterSettingsEditor.exe FirewallRules: [{13D90DE9-F19E-43F7-8C9E-315574513F5D}] => (Allow) E:\Steam\steamapps\common\shatter\ShatterSettingsEditor.exe FirewallRules: [TCP Query User{66C0952D-5CD6-4159-8C3C-8BFBA8A2C6A6}J:\games\helldivers\binaries\x64\helldivers.exe] => (Block) J:\games\helldivers\binaries\x64\helldivers.exe FirewallRules: [UDP Query User{9E37437C-EA8E-4261-9604-F00EA9E7C13A}J:\games\helldivers\binaries\x64\helldivers.exe] => (Block) J:\games\helldivers\binaries\x64\helldivers.exe FirewallRules: [{CDBAB68E-C4FA-4C4A-B00A-82DB35A9BA70}] => (Allow) J:\SteamLibrary\steamapps\common\Lords of the Realm II\English\Lords of the Realm II\Launcher\LOTR2Launcher.exe FirewallRules: [{C421AA90-08B1-44F8-BA8D-524A7BD4E4BB}] => (Allow) J:\SteamLibrary\steamapps\common\Lords of the Realm II\English\Lords of the Realm II\Launcher\LOTR2Launcher.exe FirewallRules: [{8BE18DF4-78A2-422D-85A2-2A6E24A56CF3}] => (Allow) J:\SteamLibrary\steamapps\common\Lords of the Realm II\English\Lords of the Realm II\Lords2.exe FirewallRules: [{374EA253-C708-4A3F-9961-99BE6857F349}] => (Allow) J:\SteamLibrary\steamapps\common\Lords of the Realm II\English\Lords of the Realm II\Lords2.exe FirewallRules: [TCP Query User{0872035C-B5D0-4A47-90A1-C3AB7D3CA850}J:\games\infra part i\infra.exe] => (Block) J:\games\infra part i\infra.exe FirewallRules: [UDP Query User{052F9510-F55A-4ADE-A117-8410BAF94CD8}J:\games\infra part i\infra.exe] => (Block) J:\games\infra part i\infra.exe FirewallRules: [{19B574C5-6018-4799-BFCA-569DC1AED77D}] => (Allow) J:\SteamLibrary\steamapps\common\SNOW\Bin64\playSNOW.exe FirewallRules: [{37CB31AB-161A-47C2-A20D-D478260CEE60}] => (Allow) J:\SteamLibrary\steamapps\common\SNOW\Bin64\playSNOW.exe FirewallRules: [TCP Query User{C8A3F488-9099-410B-B272-B0BFD32FA459}J:\games\xcom 2\binaries\win64\xcom2.exe] => (Block) J:\games\xcom 2\binaries\win64\xcom2.exe FirewallRules: [UDP Query User{10DADA61-2CDA-43E1-8075-5BBD99DA33B7}J:\games\xcom 2\binaries\win64\xcom2.exe] => (Block) J:\games\xcom 2\binaries\win64\xcom2.exe FirewallRules: [{D718BFA5-3748-41D6-9530-3CE3EB0FD8E1}] => (Allow) E:\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe FirewallRules: [{0535D143-8713-4ECC-81E4-C09D20596E3A}] => (Allow) E:\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe FirewallRules: [{F0E6D88F-B0CA-425C-83EB-B7964CEC3343}] => (Allow) J:\SteamLibrary\steamapps\common\Back to Dinosaur Island Part 2\Bin64\DinoIsland2.exe FirewallRules: [{7BBA5D4D-F925-4EF6-B366-A502E64E7FA3}] => (Allow) J:\SteamLibrary\steamapps\common\Back to Dinosaur Island Part 2\Bin64\DinoIsland2.exe FirewallRules: [TCP Query User{FF480243-D394-4CFC-AF99-82B2D5828C00}C:\users\main\downloads\igg-automation151223\igg-automation151223\automation_shipping_steam.exe] => (Block) C:\users\main\downloads\igg-automation151223\igg-automation151223\automation_shipping_steam.exe FirewallRules: [UDP Query User{C8C09701-DB62-49F9-A937-D32E93752B68}C:\users\main\downloads\igg-automation151223\igg-automation151223\automation_shipping_steam.exe] => (Block) C:\users\main\downloads\igg-automation151223\igg-automation151223\automation_shipping_steam.exe FirewallRules: [{39D42FD8-EC1B-4768-92B3-F757B9CF5E7A}] => (Allow) J:\SteamLibrary\steamapps\common\Tesla Effect\TeslaEffect.exe FirewallRules: [{347B94AE-2E34-411F-B7C5-166D5989D489}] => (Allow) J:\SteamLibrary\steamapps\common\Tesla Effect\TeslaEffect.exe FirewallRules: [{8EF6A23C-579B-4F35-9A97-F284D7FEB624}] => (Allow) C:\Program Files\SoftEther VPN Client\vpnclient.exe FirewallRules: [{E7094A32-6C86-44DC-AAEC-50A10A679409}] => (Allow) C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe FirewallRules: [{EAC3DA20-E594-4F2B-88F2-215A6586D454}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmgr.exe FirewallRules: [{7F5ED4BD-67ED-43EB-8B61-E091F38482DF}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmgr_x64.exe FirewallRules: [{5E2F8144-6843-4D1D-828C-49A836547AC5}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmd.exe FirewallRules: [{D429459B-BEF5-4E3E-A890-D7EBF95AAD4C}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmd_x64.exe FirewallRules: [{3B29E71A-1147-48D2-B265-047E4BF6170C}] => (Allow) E:\Games\Allegiance 1.2\Production\Allegiance.exe FirewallRules: [{CAD8992E-0ABB-4D07-87A9-59CF8F0AA150}] => (Allow) E:\Games\Allegiance 1.2\Production\Allegiance.exe FirewallRules: [{1131ACFC-2F2E-4F6A-89C0-2B561B72ED09}] => (Allow) E:\Games\Allegiance 1.2\Beta\Allegiance.exe FirewallRules: [{000C0C80-C630-4C10-9399-F4495B9BF33F}] => (Allow) E:\Games\Allegiance 1.2\Beta\Allegiance.exe FirewallRules: [{46C10C34-215B-4832-A567-76CD818F0012}] => (Allow) E:\Games\Allegiance 1.2\Launcher.exe FirewallRules: [{4A652C2E-EAD9-41A0-8742-A95AA3A91FC7}] => (Allow) E:\Games\Allegiance 1.2\Launcher.exe FirewallRules: [{28430910-7F47-4BB0-9D60-3F0EC5C404E2}] => (Allow) J:\SteamLibrary\steamapps\common\ARK SOTF\ShooterGame\Binaries\Win64\ShooterGame_BE.exe FirewallRules: [{492B8D5A-701C-451D-AA25-990A8546C378}] => (Allow) J:\SteamLibrary\steamapps\common\ARK SOTF\ShooterGame\Binaries\Win64\ShooterGame_BE.exe FirewallRules: [TCP Query User{34CDED4D-1FF1-478A-87D2-2D53E64C7376}J:\games\euro fishing\windowsnoeditor\fishinggame\binaries\win64\fishinggame-win64-shipping.exe] => (Block) J:\games\euro fishing\windowsnoeditor\fishinggame\binaries\win64\fishinggame-win64-shipping.exe FirewallRules: [UDP Query User{DF08F429-AB9A-4D0E-9E1F-8562D4EB3B6E}J:\games\euro fishing\windowsnoeditor\fishinggame\binaries\win64\fishinggame-win64-shipping.exe] => (Block) J:\games\euro fishing\windowsnoeditor\fishinggame\binaries\win64\fishinggame-win64-shipping.exe FirewallRules: [{CDBD2780-6492-4216-AAB9-13580A2C275F}] => (Allow) J:\SteamLibrary\steamapps\common\AirMech\AirMech.exe FirewallRules: [{3016DFF8-0E56-4AE4-8EF7-DB4053F54F8A}] => (Allow) J:\SteamLibrary\steamapps\common\AirMech\AirMech.exe FirewallRules: [{DC6ADEB9-3458-4A7C-8D2A-DA383F48D8BB}] => (Allow) C:\Users\Main\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{3CC49A87-4A2D-42B5-8B45-AA8C8C9D5857}] => (Allow) C:\Users\Main\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{1EE808DC-8CC7-4768-B530-D0F5EDDDBCDC}] => (Allow) C:\Users\Main\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{05CDF30F-034C-40BB-A828-10D88D0944EC}] => (Allow) C:\Users\Main\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{EFC6F01F-FF5B-4D39-BD9D-F34FAE438BA4}] => (Allow) C:\Users\Main\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{C6D0C718-8776-46CF-925D-C58526368BD2}] => (Allow) C:\Users\Main\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{3477CDB1-5401-470B-9B6B-9A72B169C2D3}] => (Allow) J:\SteamLibrary\steamapps\common\3DMark\bin\x86\3DMark.exe FirewallRules: [{27428967-55C0-4E2F-929E-1CF2129886F6}] => (Allow) J:\SteamLibrary\steamapps\common\3DMark\bin\x86\3DMark.exe FirewallRules: [{9B59D0F6-238C-4B63-B48D-93AC8C549FEC}] => (Allow) J:\SteamLibrary\steamapps\common\3DMark\bin\x64\3DMark.exe FirewallRules: [{CF906622-A3FE-40D9-B909-549FEF0F1ED9}] => (Allow) J:\SteamLibrary\steamapps\common\3DMark\bin\x64\3DMark.exe FirewallRules: [{3E584158-EEB4-4D3B-AB09-EEAEE9CBACBA}] => (Allow) J:\SteamLibrary\steamapps\common\3DMark\bin\x86\3DMark.exe FirewallRules: [{5413B000-74EA-4E50-A575-F29A5EC94ECF}] => (Allow) J:\SteamLibrary\steamapps\common\3DMark\bin\x86\3DMark.exe FirewallRules: [{CB0FF820-216D-4E8E-9F78-069EDB7CBE9D}] => (Allow) J:\SteamLibrary\steamapps\common\3DMark\bin\x64\3DMark.exe FirewallRules: [{5D0BAE0E-51E6-46F4-A61D-7A9F8F678DEA}] => (Allow) J:\SteamLibrary\steamapps\common\3DMark\bin\x64\3DMark.exe FirewallRules: [TCP Query User{08DC5CDB-D8B3-4193-BF32-45F10FFE54D1}J:\games\battlefleet gothic - armada\battlefleetgothic\binaries\win64\battlefleetgothic-win64-shipping.exe] => (Block) J:\games\battlefleet gothic - armada\battlefleetgothic\binaries\win64\battlefleetgothic-win64-shipping.exe FirewallRules: [UDP Query User{62370162-24BD-44C7-83CC-6BDFFBD9AAB1}J:\games\battlefleet gothic - armada\battlefleetgothic\binaries\win64\battlefleetgothic-win64-shipping.exe] => (Block) J:\games\battlefleet gothic - armada\battlefleetgothic\binaries\win64\battlefleetgothic-win64-shipping.exe FirewallRules: [{51A14118-785E-4BA7-8ED3-1AC7641E0464}] => (Allow) E:\Steam\steamapps\common\Commandos 2 Men of Courage\Legacy\comm2.exe FirewallRules: [{FC1B8DC4-ADCC-481D-A5ED-C3992FA62C91}] => (Allow) E:\Steam\steamapps\common\Commandos 2 Men of Courage\Legacy\comm2.exe FirewallRules: [TCP Query User{5EE8678A-B439-4177-9E0D-F84D4DA02332}E:\games\overwatch\overwatch.exe] => (Allow) E:\games\overwatch\overwatch.exe FirewallRules: [UDP Query User{7ED6FDE5-3935-4817-A899-3CE374755DE4}E:\games\overwatch\overwatch.exe] => (Allow) E:\games\overwatch\overwatch.exe FirewallRules: [TCP Query User{4DEC82A2-DAF0-4D0B-926F-3290D1066C52}J:\games\the flame in the flood\rivergame\binaries\win64\rivergame-win64-shipping.exe] => (Block) J:\games\the flame in the flood\rivergame\binaries\win64\rivergame-win64-shipping.exe FirewallRules: [UDP Query User{7525E7ED-4885-416A-A480-1FA64ADCC98B}J:\games\the flame in the flood\rivergame\binaries\win64\rivergame-win64-shipping.exe] => (Block) J:\games\the flame in the flood\rivergame\binaries\win64\rivergame-win64-shipping.exe FirewallRules: [{C26C9019-FF8B-465A-AABD-F4E3E27075B9}] => (Allow) J:\SteamLibrary\steamapps\common\Shadow Warrior Original\bin\launcher.exe FirewallRules: [{DA665EBA-F7D9-4F58-B7E3-37A063CA0737}] => (Allow) J:\SteamLibrary\steamapps\common\Shadow Warrior Original\bin\launcher.exe FirewallRules: [TCP Query User{0D97772C-65BA-403D-8DB3-52B96CAC02F3}J:\games\descent and descent 2\dosbox\dosbox.exe] => (Allow) J:\games\descent and descent 2\dosbox\dosbox.exe FirewallRules: [UDP Query User{53469F16-4D18-49A3-BF71-2B5B7606A008}J:\games\descent and descent 2\dosbox\dosbox.exe] => (Allow) J:\games\descent and descent 2\dosbox\dosbox.exe FirewallRules: [TCP Query User{0399FA47-E4EC-4A58-A728-8A1A9BAA1B02}J:\games\unreal tournament goty\system\unrealtournament.exe] => (Allow) J:\games\unreal tournament goty\system\unrealtournament.exe FirewallRules: [UDP Query User{34B9C151-E8AB-4A6C-8F9E-094B443C0B4B}J:\games\unreal tournament goty\system\unrealtournament.exe] => (Allow) J:\games\unreal tournament goty\system\unrealtournament.exe FirewallRules: [TCP Query User{67B1A44B-F6E4-43AF-9092-617AAFBED845}J:\games\interstate 76 arsenal\interstate 76\i76.exe] => (Allow) J:\games\interstate 76 arsenal\interstate 76\i76.exe FirewallRules: [UDP Query User{540D6B59-43F4-44FC-9AA6-492464738E6C}J:\games\interstate 76 arsenal\interstate 76\i76.exe] => (Allow) J:\games\interstate 76 arsenal\interstate 76\i76.exe FirewallRules: [TCP Query User{82FE66F5-1525-4291-8B53-69724FF9254E}J:\games\dangerous golf\orlando\binaries\win64\orlando-win64-shipping.exe] => (Block) J:\games\dangerous golf\orlando\binaries\win64\orlando-win64-shipping.exe FirewallRules: [UDP Query User{AD2A1B69-30FE-47DB-840B-F892F90E2DE9}J:\games\dangerous golf\orlando\binaries\win64\orlando-win64-shipping.exe] => (Block) J:\games\dangerous golf\orlando\binaries\win64\orlando-win64-shipping.exe FirewallRules: [TCP Query User{00E60E54-0CDB-4153-B88B-9D07694ED4F1}E:\games\turmoil v0.0.0.292\turmoilsteam.exe] => (Block) E:\games\turmoil v0.0.0.292\turmoilsteam.exe FirewallRules: [UDP Query User{6D59E480-7CEF-4A70-BF88-615075A0EA41}E:\games\turmoil v0.0.0.292\turmoilsteam.exe] => (Block) E:\games\turmoil v0.0.0.292\turmoilsteam.exe FirewallRules: [{20858CDF-E54A-478D-BE6E-5E4BF1EE838A}] => (Allow) E:\Steam\steamapps\common\Hard Reset Redux\launcher.exe FirewallRules: [{215DE241-4061-468B-A64C-B32F976E29DF}] => (Allow) E:\Steam\steamapps\common\Hard Reset Redux\launcher.exe FirewallRules: [{91234355-260C-46AE-81E1-3A594D9CF711}] => (Allow) E:\Steam\steamapps\common\King of Fighters XIII\kofxiii.exe FirewallRules: [{99B2B10A-6EA2-416A-BC31-2A3E34CC3CE3}] => (Allow) E:\Steam\steamapps\common\King of Fighters XIII\kofxiii.exe FirewallRules: [{BF1D1D69-6037-41B8-88F0-B0CE3D00D9F5}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{189B14A4-F692-4714-9D5A-AA492E0637DB}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{66F12BBB-A3FF-4D3A-9CC5-9E655B838D64}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{93C4D56D-C92D-4ACB-B4A6-4972EDF6AFC0}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{FE221892-1926-431D-9385-24C84E6911E4}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe FirewallRules: [{7B2059C2-6CD4-4FB3-AB0E-EB0806D0B85E}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe FirewallRules: [{8E63D548-D3DE-477D-AE2F-944962852F38}] => (Allow) E:\Games\Battlefield 4\BF4WebHelper.exe FirewallRules: [{0B3A7075-CA7C-4BAD-862F-388BBD6513C4}] => (Allow) E:\Games\Battlefield 4\BF4WebHelper.exe FirewallRules: [{F9714DEC-0415-48CF-B100-9E9FCE60C26E}] => (Allow) E:\Games\Battlefield 4\BF4X86WebHelper.exe FirewallRules: [{C5537590-B824-40EA-8B7D-F8F87DADFAC7}] => (Allow) E:\Games\Battlefield 4\BF4X86WebHelper.exe FirewallRules: [TCP Query User{AC01E666-C47C-452D-A3BB-CFD85B56D1AB}E:\games\battlefield 4\bf4.exe] => (Allow) E:\games\battlefield 4\bf4.exe FirewallRules: [UDP Query User{E516D9F9-34D2-4924-821A-F51C52988697}E:\games\battlefield 4\bf4.exe] => (Allow) E:\games\battlefield 4\bf4.exe FirewallRules: [TCP Query User{B08CD6BA-536B-48DC-B32F-EEA6A467AFDD}C:\users\main\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\main\appdata\local\akamai\netsession_win.exe FirewallRules: [UDP Query User{5413EF22-AE67-47C9-A6C6-16A7E86FACF1}C:\users\main\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\main\appdata\local\akamai\netsession_win.exe FirewallRules: [{F62DA6D0-2C19-4DED-A3D6-DB77AFFCBA82}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{DFF17607-AE82-457C-8193-9E5B8E73C2AF}] => (Allow) E:\Steam\steamapps\common\Space\spacegame\Binaries\Win64\Fractured Space.exe FirewallRules: [{0ACECAFF-C6AD-480C-B79D-2CC060BEA8CD}] => (Allow) E:\Steam\steamapps\common\Space\spacegame\Binaries\Win64\Fractured Space.exe FirewallRules: [TCP Query User{A9B698A2-0C6D-445A-AACE-165CD01B20A6}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe FirewallRules: [UDP Query User{F1EF795A-849E-436D-84B5-F07C51B2CCC5}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe FirewallRules: [{A2EF6702-2B1B-42AE-A744-5F3F5E383FDF}] => (Allow) E:\Steam\steamapps\common\theHunter\launcher\launcher.exe FirewallRules: [{A287091C-7890-4960-899E-B55B63EEC066}] => (Allow) E:\Steam\steamapps\common\theHunter\launcher\launcher.exe FirewallRules: [{0ED3D1CA-34CC-4EA8-ACE2-FDD6141FF7C3}] => (Allow) E:\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe FirewallRules: [{A8EAB56D-26BA-4BB9-9497-807EC68105C1}] => (Allow) E:\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe FirewallRules: [{BD903781-2784-45B9-9E39-5B2C50B40944}] => (Allow) E:\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe FirewallRules: [{DECA5AA3-27EA-41E3-B9DE-2711914CE95D}] => (Allow) E:\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe FirewallRules: [{374CB644-D014-4BC7-98D9-EEB68AC3160D}] => (Allow) E:\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe FirewallRules: [{02139F07-E9C6-4440-A579-2A0D595738D5}] => (Allow) E:\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe FirewallRules: [{4651F02B-2AC9-49D6-963B-C0B58B906E20}] => (Allow) LPort=49226 FirewallRules: [{28EF459C-4D9D-4042-9DFC-5222A578040C}] => (Allow) LPort=5000 FirewallRules: [{7F7906DA-427A-4571-8545-949D8835D074}] => (Allow) LPort=9143 FirewallRules: [{95BA339F-E56C-43A2-BDFA-6A8839973825}] => (Allow) LPort=2333 FirewallRules: [{CBFE7D9B-5E88-475B-A4F3-F530D3B83DB9}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{4986DB26-8D46-413A-9D09-7D1D1A1B6C66}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{506DD736-96AB-46AC-8B92-05B3CC86E470}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{2F962027-5959-42C6-ADC0-71AC66335ECE}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{0C808DC0-DF2A-45C5-B65E-4B6ED9F415F7}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe FirewallRules: [{5F7C4F55-D0AA-4C8C-93E7-7EF50C4B4AF3}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe FirewallRules: [{125AA45C-F5B1-4CED-B42A-7F0462DF8140}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe FirewallRules: [{0BC5CBAC-3C6E-4450-8EEB-37E148934DBF}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe FirewallRules: [{D8CBAC1E-36D7-4D7A-B4BD-C08935D0E850}] => (Allow) E:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe FirewallRules: [{56FFA35B-80C4-4C4E-889F-D7A42CFBC124}] => (Allow) E:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe FirewallRules: [{22A8CB5A-B10D-4D28-B5F5-716C1CCFFE22}] => (Allow) E:\SteamLibrary\steamapps\common\DCSWorld\Run.exe FirewallRules: [{860F510B-B084-4641-858A-611A6313984A}] => (Allow) E:\SteamLibrary\steamapps\common\DCSWorld\Run.exe FirewallRules: [TCP Query User{2385965F-A667-4967-AB61-BBA16EA65051}C:\program files (x86)\foobar2000\foobar2000.exe] => (Allow) C:\program files (x86)\foobar2000\foobar2000.exe FirewallRules: [UDP Query User{68F37F93-7E0C-4E67-BD03-94C38C07B56C}C:\program files (x86)\foobar2000\foobar2000.exe] => (Allow) C:\program files (x86)\foobar2000\foobar2000.exe FirewallRules: [{420E69F4-8FD8-4BD0-98E6-627BFA0E0C3B}] => (Allow) E:\SteamLibrary\steamapps\common\Arma 3\arma3launcher.exe FirewallRules: [{745F597B-C580-4CD7-89EE-46A48FCB8FA7}] => (Allow) E:\SteamLibrary\steamapps\common\Arma 3\arma3launcher.exe FirewallRules: [{72868CF3-68DB-4152-905C-4582C1D41CD5}] => (Allow) C:\Program Files (x86)\Google\Chrome Remote Desktop\52.0.2743.48\remoting_host.exe FirewallRules: [{3BE05B44-CC2F-4CE6-86BA-49A74B8ECF4B}] => (Allow) E:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe FirewallRules: [{3861FD1A-FC9F-4F7D-9A08-4F81B563206A}] => (Allow) E:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe FirewallRules: [{03EB8C23-22A9-41EB-9ED3-7172FE3707CA}] => (Allow) E:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe FirewallRules: [{22448ED6-F97F-47EB-93F5-C01EDD6DD227}] => (Allow) E:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe FirewallRules: [TCP Query User{A902DEB8-04B3-4FC4-8BB7-4CE341724BA0}C:\users\main\downloads\igg-rimworld.alpha.14\rimworldwin.exe] => (Block) C:\users\main\downloads\igg-rimworld.alpha.14\rimworldwin.exe FirewallRules: [UDP Query User{A033E796-E6C1-4C79-BEBA-6CE0A3B11C00}C:\users\main\downloads\igg-rimworld.alpha.14\rimworldwin.exe] => (Block) C:\users\main\downloads\igg-rimworld.alpha.14\rimworldwin.exe FirewallRules: [TCP Query User{77756364-75AB-46BB-B876-E8D2C0120DAD}E:\games\igg-rimworld.alpha.14\rimworldwin.exe] => (Block) E:\games\igg-rimworld.alpha.14\rimworldwin.exe FirewallRules: [UDP Query User{E54D6075-7A9D-4DF7-A045-5D39C1E2FB6E}E:\games\igg-rimworld.alpha.14\rimworldwin.exe] => (Block) E:\games\igg-rimworld.alpha.14\rimworldwin.exe FirewallRules: [{771230C0-70FE-481A-846A-E91C06C2F36C}] => (Allow) E:\SteamLibrary\steamapps\common\Hard Reset Redux\launcher.exe FirewallRules: [{EC6979E1-DEAC-4615-8863-83E36F314EE8}] => (Allow) E:\SteamLibrary\steamapps\common\Hard Reset Redux\launcher.exe FirewallRules: [{277DFA7A-E6FD-4960-9EA0-814196B94679}] => (Allow) E:\Games\Rainbow Six\RainbowSix.exe FirewallRules: [{98549434-9A04-42ED-92BE-D5244AF32E29}] => (Allow) E:\Games\Rainbow Six\RainbowSix.exe FirewallRules: [TCP Query User{FBA7D2D7-8A7B-42C9-8D40-397D586F5504}E:\steamlibrary\steamapps\common\quake\glqwcl.exe] => (Allow) E:\steamlibrary\steamapps\common\quake\glqwcl.exe FirewallRules: [UDP Query User{0001C5AC-B465-4203-98D2-6A178D1DF315}E:\steamlibrary\steamapps\common\quake\glqwcl.exe] => (Allow) E:\steamlibrary\steamapps\common\quake\glqwcl.exe FirewallRules: [TCP Query User{22DE7DC5-FF72-4876-9AA8-B01ECB480F6F}E:\steamlibrary\steamapps\common\quake\glquake.exe] => (Allow) E:\steamlibrary\steamapps\common\quake\glquake.exe FirewallRules: [UDP Query User{A5529243-AF47-4E13-9548-2AA4581F37E4}E:\steamlibrary\steamapps\common\quake\glquake.exe] => (Allow) E:\steamlibrary\steamapps\common\quake\glquake.exe FirewallRules: [{4B1DAA4D-594A-4BD5-8332-28892BEAF8D9}] => (Allow) E:\SteamLibrary\steamapps\common\theHunter\launcher\launcher.exe FirewallRules: [{F10EDD54-E34F-4BD4-B1BA-2A1106B0DF53}] => (Allow) E:\SteamLibrary\steamapps\common\theHunter\launcher\launcher.exe FirewallRules: [TCP Query User{2E9C9D7C-B614-492A-90F6-502A2D7FB158}C:\nquake\ezquake.exe] => (Allow) C:\nquake\ezquake.exe FirewallRules: [UDP Query User{3C95E26D-0892-4F1D-8339-7297FE3B7486}C:\nquake\ezquake.exe] => (Allow) C:\nquake\ezquake.exe FirewallRules: [TCP Query User{8D020338-A6DC-4DB0-907C-4FF7B8BA0530}E:\steamlibrary\steamapps\common\quake\winquake.exe] => (Allow) E:\steamlibrary\steamapps\common\quake\winquake.exe FirewallRules: [UDP Query User{B64D5BD4-B0A7-4526-A759-D74DB953E7DB}E:\steamlibrary\steamapps\common\quake\winquake.exe] => (Allow) E:\steamlibrary\steamapps\common\quake\winquake.exe FirewallRules: [{64E91FA8-F96F-4097-9754-AA9E2A7C5D9D}] => (Allow) LPort=135 FirewallRules: [{B7D31153-B61F-4BB1-A73D-0BF4ED503883}] => (Allow) J:\ElsaWin\bin\ElsaWin.exe FirewallRules: [{4C560D56-7269-495A-93CF-55294B82C471}] => (Allow) J:\ElsaWin\bin\ElsaWin.exe FirewallRules: [{58379ABC-B35D-45C0-A63A-C408BC8A91DE}] => (Allow) E:\SteamLibrary\steamapps\common\insurgency2\insurgency.exe FirewallRules: [{A5E453B3-1443-41B4-B453-6773DDB5A01B}] => (Allow) E:\SteamLibrary\steamapps\common\insurgency2\insurgency.exe FirewallRules: [{6EA2C9EF-546A-48AB-B561-6291F561CDDD}] => (Allow) E:\SteamLibrary\steamapps\common\Space\spacegame\Binaries\Win64\Fractured Space.exe FirewallRules: [{52A3BFE0-2AB1-49A5-85F3-441BC4BC5842}] => (Allow) E:\SteamLibrary\steamapps\common\Space\spacegame\Binaries\Win64\Fractured Space.exe FirewallRules: [{7E2AA333-D621-46A0-852D-A8D537DA765E}] => (Allow) C:\WINDOWS\system32\rundll32.exe StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot-S&D 2 Tray Icon StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service ==================== Restore Points ========================= 06-08-2016 08:31:37 Scheduled Checkpoint 06-08-2016 13:11:42 JRT Pre-Junkware Removal ==================== Faulty Device Manager Devices ============= Name: Unknown USB Device (Device Descriptor Request Failed) Description: Unknown USB Device (Device Descriptor Request Failed) Class Guid: {36fc9e60-c465-11cf-8056-444553540000} Manufacturer: (Standard USB Host Controller) Service: Problem: : Windows has stopped this device because it has reported problems. (Code 43) Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. ==================== Event log errors: ========================= Application errors: ================== Error: (08/07/2016 08:25:22 AM) (Source: MSSQL$ELSAWINDB) (EventID: 17058) (User: ) Description: initerrlog: Could not open error log file 'J:\ElsaWin\sqlserverdata\MSSQL10_50.ELSAWINDB\MSSQL\Log\ERRORLOG'. Operating system error = 3(The system cannot find the path specified.). Error: (08/07/2016 08:25:22 AM) (Source: MSSQL$ELSAWINDB) (EventID: 17058) (User: ) Description: initerrlog: Could not open error log file 'J:\ElsaWin\sqlserverdata\MSSQL10_50.ELSAWINDB\MSSQL\Log\ERRORLOG'. Operating system error = 3(The system cannot find the path specified.). Error: (08/07/2016 08:25:21 AM) (Source: MSSQL$ELSAWINDB) (EventID: 17058) (User: ) Description: initerrlog: Could not open error log file 'J:\ElsaWin\sqlserverdata\MSSQL10_50.ELSAWINDB\MSSQL\Log\ERRORLOG'. Operating system error = 3(The system cannot find the path specified.). Error: (08/07/2016 08:25:21 AM) (Source: MSSQL$ELSAWINDB) (EventID: 17058) (User: ) Description: initerrlog: Could not open error log file 'J:\ElsaWin\sqlserverdata\MSSQL10_50.ELSAWINDB\MSSQL\Log\ERRORLOG'. Operating system error = 3(The system cannot find the path specified.). Error: (08/07/2016 08:25:21 AM) (Source: MSSQL$ELSAWINDB) (EventID: 17058) (User: ) Description: initerrlog: Could not open error log file 'J:\ElsaWin\sqlserverdata\MSSQL10_50.ELSAWINDB\MSSQL\Log\ERRORLOG'. Operating system error = 3(The system cannot find the path specified.). Error: (08/07/2016 08:25:20 AM) (Source: MSSQL$ELSAWINDB) (EventID: 17058) (User: ) Description: initerrlog: Could not open error log file 'J:\ElsaWin\sqlserverdata\MSSQL10_50.ELSAWINDB\MSSQL\Log\ERRORLOG'. Operating system error = 3(The system cannot find the path specified.). Error: (08/07/2016 08:25:20 AM) (Source: MSSQL$ELSAWINDB) (EventID: 17058) (User: ) Description: initerrlog: Could not open error log file 'J:\ElsaWin\sqlserverdata\MSSQL10_50.ELSAWINDB\MSSQL\Log\ERRORLOG'. Operating system error = 3(The system cannot find the path specified.). Error: (08/07/2016 08:25:20 AM) (Source: MSSQL$ELSAWINDB) (EventID: 17058) (User: ) Description: initerrlog: Could not open error log file 'J:\ElsaWin\sqlserverdata\MSSQL10_50.ELSAWINDB\MSSQL\Log\ERRORLOG'. Operating system error = 3(The system cannot find the path specified.). Error: (08/07/2016 08:25:19 AM) (Source: MSSQL$ELSAWINDB) (EventID: 17058) (User: ) Description: initerrlog: Could not open error log file 'J:\ElsaWin\sqlserverdata\MSSQL10_50.ELSAWINDB\MSSQL\Log\ERRORLOG'. Operating system error = 3(The system cannot find the path specified.). Error: (08/07/2016 08:25:19 AM) (Source: MSSQL$ELSAWINDB) (EventID: 17058) (User: ) Description: initerrlog: Could not open error log file 'J:\ElsaWin\sqlserverdata\MSSQL10_50.ELSAWINDB\MSSQL\Log\ERRORLOG'. Operating system error = 3(The system cannot find the path specified.). System errors: ============= Error: (08/07/2016 08:28:05 AM) (Source: DCOM) (EventID: 10016) (User: MAIN) Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}MAINMainS-1-5-21-517480369-4133510133-2013949132-1000LocalHost (Using LRPC)Microsoft.Windows.FeatureOnDemand.InsiderHub_10.0.10586.0_neutral_neutral_cw5n1h2txyewyS-1-15-2-4016783169-893401051-2237370320-274899566-412088533-2398988950-2155762795 Error: (08/07/2016 08:25:28 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Mouse without Borders Service service terminated unexpectedly. It has done this 1 time(s). Error: (08/07/2016 08:25:22 AM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: The SQL Server (ELSAWINDB) service terminated with the following service-specific error: %%17058 Error: (08/07/2016 08:24:23 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: A timeout was reached (30000 milliseconds) while waiting for the Sync Host_4899d service to connect. Error: (08/07/2016 08:24:23 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: A timeout was reached (30000 milliseconds) while waiting for the User Data Storage_4899d service to connect. Error: (08/07/2016 08:24:23 AM) (Source: Service Control Manager) (EventID: 7032) (User: ) Description: The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the User Data Storage_4899d service, but this action failed with the following error: %%1056 = An instance of the service is already running. Error: (08/07/2016 08:24:17 AM) (Source: DCOM) (EventID: 10010) (User: MAIN) Description: CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca Error: (08/07/2016 08:24:13 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The User Data Access_4899d service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service. Error: (08/07/2016 08:24:13 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The User Data Storage_4899d service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service. Error: (08/07/2016 08:24:13 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Contact Data_4899d service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service. CodeIntegrity: =================================== Date: 2016-08-06 15:57:14.817 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-06 15:57:14.810 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-06 15:57:14.801 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-06 15:57:14.578 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-06 15:57:14.569 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-06 15:57:14.545 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-06 15:57:14.537 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-06 15:57:14.511 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-06 15:57:14.502 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-06 15:57:14.477 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz Percentage of memory in use: 22% Total physical RAM: 16367.24 MB Available physical RAM: 12615.91 MB Total Virtual: 32751.24 MB Available Virtual: 28852.07 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:232.89 GB) (Free:130.31 GB) NTFS ==>[drive with boot components (obtained from BCD)] Drive e: (New Volume) (Fixed) (Total:931.51 GB) (Free:107.6 GB) NTFS ==>[system with boot components (obtained from drive)] Drive j: () (Fixed) (Total:1863.01 GB) (Free:665.58 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 232.9 GB) (Disk ID: 54F85F9D) Partition 1: (Active) - (Size=232.9 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 4FA18EA8) Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 53AC21D0) Partition 1: (Not Active) - (Size=1863 GB) - (Type=42) ==================== End of Addition.txt ============================