Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-07-2017 Ran by sagaramati (19-07-2017 08:09:30) Running from C:\Users\sagaramati\Desktop Windows 10 Pro Version 1703 (X64) (2017-05-16 10:53:57) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-1317644463-2230382406-96430102-500 - Administrator - Disabled) => C:\Users\Administrator DefaultAccount (S-1-5-21-1317644463-2230382406-96430102-503 - Limited - Disabled) Guest (S-1-5-21-1317644463-2230382406-96430102-501 - Limited - Disabled) sagaramati (S-1-5-21-1317644463-2230382406-96430102-1000 - Administrator - Enabled) => C:\Users\sagaramati ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} AV: Bitdefender Antivirus (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371} AS: Bitdefender Antispyware (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC} AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Bitdefender Firewall (Enabled) {078AF241-05A3-0EFF-40E0-3E0D69EA140A} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 7-Zip 9.38 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0938-000001000000}) (Version: 9.38.00.0 - Igor Pavlov) ACDSee Ultimate 9 (64-bit) (HKLM\...\{97EE2327-B39E-429C-970B-0DB6CBBEC8E1}) (Version: 9.3.0.673 - ACD Systems International Inc.) ACDSee Video Studio (HKLM\...\ACDSee_acdVStudio) (Version: 1.0.0.54 - ACD Systems International Inc.) Acrobat Reader Packages (HKU\S-1-5-21-1317644463-2230382406-96430102-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214568\...\Acrobat Reader Packages) (Version: - ) <==== ATTENTION Acronis True Image (HKLM-x32\...\{A10E0F26-6CE4-4038-8A29-3A9AED728B64}) (Version: 19.0.6589 - Acronis) Hidden Acronis True Image (HKLM-x32\...\{A10E0F26-6CE4-4038-8A29-3A9AED728B64}Visible) (Version: 19.0.6589 - Acronis) Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 17.009.20058 - Adobe Systems Incorporated) Adobe Flash Player 26 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 26.0.0.137 - Adobe Systems Incorporated) Agent Ransack x64 (HKLM\...\{FD8C1365-2229-4F37-A126-558DB2471CBE}) (Version: 7.0.828.1 - Mythicsoft Ltd) AI Suite 3 (HKLM-x32\...\{CD36E28B-6023-469A-91E7-049A2874EC13}) (Version: 1.01.02 - ASUSTeK Computer Inc.) Akamai NetSession Interface (HKU\S-1-5-21-1317644463-2230382406-96430102-1000\...\Akamai) (Version: - Akamai Technologies, Inc) Akamai NetSession Interface (HKU\S-1-5-21-1317644463-2230382406-96430102-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214006\...\Akamai) (Version: - Akamai Technologies, Inc) Akamai NetSession Interface (HKU\S-1-5-21-1317644463-2230382406-96430102-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214568\...\Akamai) (Version: - Akamai Technologies, Inc) Amazon Kindle (HKU\S-1-5-21-1317644463-2230382406-96430102-1000\...\Amazon Kindle) (Version: 1.20.1.47037 - Amazon) Amazon Kindle (HKU\S-1-5-21-1317644463-2230382406-96430102-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214006\...\Amazon Kindle) (Version: 1.20.1.47037 - Amazon) Amazon Kindle (HKU\S-1-5-21-1317644463-2230382406-96430102-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214568\...\Amazon Kindle) (Version: - Amazon) Amazon MP3 Downloader 1.0.18 (HKU\S-1-5-21-1317644463-2230382406-96430102-1000\...\Amazon MP3 Downloader) (Version: 1.0.18 - Amazon Services LLC) Amazon MP3 Downloader 1.0.18 (HKU\S-1-5-21-1317644463-2230382406-96430102-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214006\...\Amazon MP3 Downloader) (Version: 1.0.18 - Amazon Services LLC) Amazon Music (HKU\S-1-5-21-1317644463-2230382406-96430102-1000\...\Amazon Amazon Music) (Version: 4.3.2.1367 - Amazon Services LLC) Amazon Music (HKU\S-1-5-21-1317644463-2230382406-96430102-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214006\...\Amazon Amazon Music) (Version: 4.3.2.1367 - Amazon Services LLC) Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 382.05 - NVIDIA Corporation) Hidden Apple Application Support (32-bit) (HKLM-x32\...\{E92BB800-BCC5-4C25-8102-AC2C3B7C7C1E}) (Version: 5.5 - Apple Inc.) Apple Application Support (64-bit) (HKLM\...\{9C912B1E-06DD-43EF-BB2B-45CB2C88BAAE}) (Version: 5.5 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{0A596141-97D5-45FA-9281-98DFAF48D579}) (Version: 10.3.2.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{52D87F32-70E4-4348-8148-C0B9F35B1314}) (Version: 2.3.0.177 - Apple Inc.) Application Insights Tools for Visual Studio 2015 (HKLM-x32\...\{9F429DF7-F8DD-4980-9673-E6DACA012F6C}) (Version: 3.3 - Microsoft Corporation) Hidden Application Verifier (x64) (HKLM\...\{361A49FA-59B3-49FB-8C3E-08AF3EA5791A}) (Version: 4.0.917 - Microsoft Corporation) Ashampoo Burning Studio 18 (HKLM-x32\...\{91B33C97-AF35-C3DC-976E-8A253D817482}_is1) (Version: 18.0.5 - Ashampoo GmbH & Co. KG) Ashampoo Snap 8 (HKLM-x32\...\{C92AB6F1-3B65-B79C-9019-8640F02B7C58}_is1) (Version: 8.0.9 - Ashampoo GmbH & Co. KG) Ashampoo UnInstaller 5 v.5.0.4 (HKLM-x32\...\{4209F371-ABC8-B772-DB8E-93F4772F58FA}_is1) (Version: 5.04.00 - Ashampoo GmbH & Co. KG) Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team) Aviator (HKLM-x32\...\{B0E4AA1D-76A7-48B5-AAA1-D68BDBB1FF99}) (Version: 2.6 - WhiteHat Security, Inc.) Azure AD Authentication Connected Service (HKLM-x32\...\{3FEAC561-1CF6-41D6-B0F3-BECDD9C88A1B}) (Version: 14.0.23107 - Microsoft Corporation) Hidden AzureTools.Notifications (HKLM-x32\...\{1E5CA362-39B6-4BD0-B9C0-69CF15F0FEA2}) (Version: 2.7.30611.1601 - Microsoft Corporation) Hidden BBC iPlayer Downloads (HKLM-x32\...\{148784F3-3B6E-4DFA-B7A1-3400B277DAF3}) (Version: 1.14.2 - BBC) Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 21.0.24.36 - Bitdefender) Bitdefender Device Management (HKLM\...\Bitdefender Device Management) (Version: 21.0.24.54 - Bitdefender) Bitdefender Total Security 2017 (HKLM\...\Bitdefender) (Version: 21.0.24.54 - Bitdefender) Blend for Visual Studio SDK for .NET 4.5 (HKLM-x32\...\{37E53780-3944-4A6A-842F-727128E8616E}) (Version: 3.0.40218.0 - Microsoft Corporation) Hidden Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.) calibre 64bit (HKLM\...\{DECAEEC6-3E29-4C50-82E8-D182A34CA7A3}) (Version: 3.1.1 - Kovid Goyal) CCleaner (HKLM\...\CCleaner) (Version: 5.32 - Piriform) Chattha Sangayana Tipitaka 4.0 (HKLM-x32\...\{A0C75468-DE8B-4F9C-8144-0E1E66F4030E}) (Version: 4.0.0.16 - Frank Snow / Tipitaka.org) Classic Shell (HKLM\...\{383BB30A-B4A7-4666-9A83-22CFA8640097}) (Version: 4.3.0 - IvoSoft) Concise Oxford English Dictionary (HKU\S-1-5-21-1317644463-2230382406-96430102-1000\...\Concise Oxford English Dictionary) (Version: - ) Concise Oxford English Dictionary (HKU\S-1-5-21-1317644463-2230382406-96430102-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214006\...\Concise Oxford English Dictionary) (Version: - ) Concise Oxford English Dictionary (HKU\S-1-5-21-1317644463-2230382406-96430102-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214568\...\Concise Oxford English Dictionary) (Version: - ) Corel WinDVD Pro 11 (HKLM-x32\...\_{EF13E6B7-86D2-4E2C-82FB-375654407D4F}) (Version: 11.7.0.15 - Corel Inc.) CPUID CPU-Z 1.77 (HKLM\...\CPUID CPU-Z_is1) (Version: - ) CyberLink BD Advisor 2.0 (HKLM-x32\...\{2D2D8FE2-605C-4D3C-B706-36E981E7EEF0}) (Version: - ) CyberLink Blu-ray Disc Suite (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.3226 - CyberLink Corp.) CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.2919.52 - CyberLink Corp.) CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 1.0.2609 - CyberLink Corp.) Debugging Tools for Windows (x64) (HKLM\...\{7F2E5C3B-DBDF-469D-AD8D-F686D3B71176}) (Version: 6.11.1.404 - Microsoft Corporation) DENOISE projects standard (64-Bit) (HKLM\...\DENOISE_PROJECTS_1_2_FBC348A0_is1) (Version: 1.17 - Franzis Verlag GmbH) Dotfuscator and Analytics Community Edition 5.18.1 (HKLM-x32\...\{9890DF1A-10E9-4236-94B1-1EFAA4099F13}) (Version: 5.18.1.2898 - PreEmptive Solutions) Hidden DVD43 Plug-in v1.0.0.6 (HKLM-x32\...\DVD43 Plug-in_is1) (Version: - ) EA.com Update (HKLM-x32\...\{9AB97F52-512B-43EF-AAEC-4825C17B32ED}) (Version: - ) English (UK) + Pali (HKLM\...\{39FD143A-7A7E-49F2-98D5-7C2A271B2E4C}) (Version: 1.0.3.40 - Frank Snow) Entity Framework 6.1.3 Tools for Visual Studio 2015 (HKLM-x32\...\{1A8A9739-BAD7-491F-B5B9-A79A2B965422}) (Version: 14.0.40302.0 - Microsoft Corporation) Exact Audio Copy 1.1 (HKLM-x32\...\Exact Audio Copy) (Version: 1.1 - Andre Wiethoff) Extended Asian Language font pack for Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-2530-0000-AC0F074E4100}) (Version: 15.007.20033 - Adobe Systems Incorporated) FlexiPDF 2017 version 1.06 (HKLM-x32\...\7AE3751D-1C66-47A9-8AD5-D27A1A40F5ED_is1) (Version: 1.06 - SoftMaker Software GmbH) FormatFactory 3.6.0.0 (HKLM-x32\...\FormatFactory) (Version: 3.6.0.0 - Format Factory) Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 8.1.4.1208 - Foxit Software Inc.) FUJIFILM MyFinePix Studio 4.2b (HKLM-x32\...\MyFinePix Studio_is1) (Version: - ) GentiumPlus 5.000 (HKLM-x32\...\GentiumPlus) (Version: - ) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 59.0.3071.115 - Google Inc.) Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden HDR projects 4 elements (64-Bit) (HKLM\...\HDR_PROJECTS_4_1_3BF7CE82_is1) (Version: 4.41 - Franzis Verlag GmbH) HL-2240D (HKLM-x32\...\{E2A97415-BD97-4867-B906-05E39E9EE51F}) (Version: 1.0.7.0 - Brother Industries, Ltd.) ICA (HKLM-x32\...\{EF13E6B7-86D2-4E2C-82FB-375654407D4F}) (Version: 11.7.0.15 - Corel Inc.) Hidden iCloud (HKLM\...\{5B1A59DA-D1EC-4C3A-A996-DF011A0A9668}) (Version: 6.2.2.39 - Apple Inc.) IIS 10.0 Express (HKLM\...\{5984D8DA-C1AF-4284-9C88-D7150425B315}) (Version: 10.0.1734 - Microsoft Corporation) IIS Express Application Compatibility Database for x64 (HKLM\...\{08274920-8908-45c2-9258-8ad67ff77b09}.sdb) (Version: - ) IIS Express Application Compatibility Database for x86 (HKLM\...\{ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb) (Version: - ) Intel(R) Chipset Device Software (HKLM-x32\...\{98f335cd-0a32-4b3f-b74c-ef9480e834f0}) (Version: 10.0.27 - Intel(R) Corporation) Hidden Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1011 - Intel Corporation) Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.1.1000 - Intel Corporation) Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version: - Intel Corporation) IPM (HKLM-x32\...\{C64A5A02-6BF8-424B-A060-97808E9BF6A6}) (Version: 11.5 - Corel Inc.) Hidden iTunes (HKLM\...\{F0C7385A-9D20-45F3-8101-05D383885180}) (Version: 12.6.1.25 - Apple Inc.) LG Tool Kit (HKLM-x32\...\{6179550A-3E7C-499E-BCC9-9E8113E0A285}) (Version: 8.01.0919.01 - ) LightScribe System Software (HKLM-x32\...\{F132000C-1CBA-458F-BF2F-FD43D59410F9}) (Version: 1.18.27.10 - LightScribe) LightScribe Template Designs - Art Pack 1 (HKLM-x32\...\{2CDB2DCD-1153-4ED4-9D0A-606231CEFE9A}) (Version: 1.10.16.1 - LightScribe) LightScribe Template Designs - Nature Pack 1 (HKLM-x32\...\{F3A482EC-55E0-48FA-A408-F40FDF265181}) (Version: 1.17.0.0 - LightScribe) LightScribe Template Designs - Straight Text (HKLM-x32\...\{F8AACE23-4E68-4F07-BAC0-D3536584EAC0}) (Version: 1.18.18.3 - LightScribe) LightScribe Template Labeler (HKLM-x32\...\{8A03241E-7A3C-401D-B0CE-B3096F50AE6F}) (Version: 1.18.27.10 - LightScribe) Magical Jelly Bean KeyFinder (HKLM-x32\...\KeyFinder_is1) (Version: 2.0.10.10 - Magical Jelly Bean) MakeMKV v1.9.0 (HKLM-x32\...\MakeMKV) (Version: v1.9.0 - GuinpinSoft inc) Malwarebytes version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes) Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (ENU) (HKLM-x32\...\{290FC320-2F5A-329E-8840-C4193BD7A9EE}) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{B941AFB4-8851-33A1-9E72-0C33D463C41C}) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.6 SDK (HKLM-x32\...\{B5915D37-0637-4A26-A3AA-C5DC9F856370}) (Version: 4.6.00081 - Microsoft Corporation) Microsoft .NET Framework 4.6 Targeting Pack (ENU) (HKLM-x32\...\{3D3CEBE6-40EA-4C48-97FD-73828281AB4A}) (Version: 4.6.00081 - Microsoft Corporation) Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation) Microsoft .NET Version Manager (x64) 1.0.0-beta5 (HKLM\...\{c5a4aba3-1aba-3ef8-b2d5-c3fa37f59738}) (Version: 1.0.10609.0 - Microsoft Corporation) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Document Explorer 2008 (HKLM-x32\...\Microsoft Document Explorer 2008) (Version: - Microsoft Corporation) Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.23107 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-1317644463-2230382406-96430102-1000\...\OneDriveSetup.exe) (Version: 17.3.6917.0607 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-1317644463-2230382406-96430102-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214006\...\OneDriveSetup.exe) (Version: 17.3.6917.0607 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation) Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2014 Management Objects (HKLM-x32\...\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server 2014 Management Objects (x64) (HKLM\...\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\...\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server 2014 T-SQL Language Service (HKLM-x32\...\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - enu (14.0.50616.0) (HKLM-x32\...\{58246C80-3941-4B69-AE31-264644E2ADB8}) (Version: 14.0.50616.0 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{68BA34E8-9B9D-4A74-83F0-7D366B532D75}) (Version: 12.0.2402.11 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\...\{718FFB65-F6E4-4D62-861F-ED10ED32C936}) (Version: 12.0.2402.11 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{4FFA2088-8317-3B14-93CD-4C699DB37843}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation) Microsoft Visual C++ Compilers 2008 Standard Edition - enu - x64 (HKLM\...\{965DF723-5688-359E-84D2-417CAFE644B5}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ Compilers 2008 Standard Edition - enu - x86 (HKLM-x32\...\{44D9A2CB-0692-3180-B5E2-26F4E807D067}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio Community 2015 (HKLM-x32\...\{50b32652-69d2-4b93-9316-edcd12067b8b}) (Version: 14.0.23107.10 - Microsoft Corporation) Microsoft Web Deploy 3.6 (HKLM\...\{ED4CC1E5-043E-4157-8452-B5E533FE2BA1}) (Version: 3.1238.1955 - Microsoft Corporation) Microsoft Windows SDK for Windows 7 (7.0) (HKLM\...\SDKSetup_7.0.7600.16385.40715) (Version: 7.0.7600.16385.40715 - Microsoft Corporation) MKVToolNix 7.1.0 (64bit) (HKLM-x32\...\MKVToolNix) (Version: 7.1.0 - Moritz Bunkus) Motorola Device Manager (HKLM-x32\...\{28DB8373-C1BB-444F-A427-A55585A12ED7}) (Version: 2.4.5 - Motorola Mobility) Motorola Device Software Update (HKLM-x32\...\{894AB83D-A9AF-4E54-BFF3-A7262A0A6C13}) (Version: 13.09.3001 - Motorola Mobility) Hidden Motorola Mobile Drivers Installation 6.3.0 (HKLM\...\{759E6A2F-1F01-45EF-A0C4-22F1B56CB975}) (Version: 6.3.0 - Motorola Mobility LLC) Mozilla Firefox 54.0.1 (x86 en-GB) (HKLM-x32\...\Mozilla Firefox 54.0.1 (x86 en-GB)) (Version: 54.0.1 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 53.0 - Mozilla) Mozilla Thunderbird 38.2.0 (x86 en-US) (HKLM-x32\...\Mozilla Thunderbird 38.2.0 (x86 en-US)) (Version: 38.2.0 - Mozilla) Mozilla Thunderbird 38.5.0 (x86 en-US) (HKU\S-1-5-21-1317644463-2230382406-96430102-1000\...\Mozilla Thunderbird 38.5.0 (x86 en-US)) (Version: 38.5.0 - Mozilla) Mozilla Thunderbird 38.5.0 (x86 en-US) (HKU\S-1-5-21-1317644463-2230382406-96430102-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214006\...\Mozilla Thunderbird 38.5.0 (x86 en-US)) (Version: 38.5.0 - Mozilla) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) Multi-Device Hybrid Apps using C# - Templates - ENU (HKLM-x32\...\{12D99739-FFD3-3761-8AA6-F929E0FE407E}) (Version: 14.0.23107 - Microsoft Corporation) Hidden NEF Codec (HKLM-x32\...\{D6506521-0959-4FA3-875F-E2E28830B0D2}) (Version: 1.00.0000 - Nikon) Newsbin Pro (HKLM\...\Newsbin6) (Version: 6.80 - DJI Interprises, LLC) NVIDIA 3D Vision Controller Driver 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation) NVIDIA 3D Vision Driver 382.05 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 382.05 - NVIDIA Corporation) NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation) NVIDIA Graphics Driver 382.05 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 382.05 - NVIDIA Corporation) NVIDIA HD Audio Driver 1.3.34.26 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.26 - NVIDIA Corporation) NVIDIA PhysX System Software 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation) PeaZip 5.5.3 (HKLM-x32\...\{5A2BC38A-406C-4A5B-BF45-6991F9A05325}_is1) (Version: - Giorgio Tani) PerfectDisk Professional (HKLM\...\{C4E01CDC-0063-493C-B383-9C4FCF7A89F7}) (Version: 14.0.890 - Raxco Software Inc.) PreEmptive Analytics Visual Studio Components (HKLM-x32\...\{436A18DD-5F2C-4B3C-985E-AD3C13B0CC25}) (Version: 1.2.5134.1 - PreEmptive Solutions) Hidden Prerequisites for SSDT (HKLM-x32\...\{21373064-AD95-48DB-A32E-0D9E08EF7355}) (Version: 12.0.2000.8 - Microsoft Corporation) QuickPar 0.9 (HKLM-x32\...\QuickPar) (Version: 0.9 - Peter B. Clements) QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.) RAF (HKLM-x32\...\{E6B43401-E818-4961-AFED-118DD8E87642}) (Version: 1.00.0001 - FUJIFILM Corporation) RAW FILE CONVERTER EX powered by SILKYPIX (HKLM-x32\...\{30B1CCDB-209B-4E94-8311-379F2E6B6B59}) (Version: 3 - Ichikawa Soft Laboratory) Hidden RAW FILE CONVERTER EX powered by SILKYPIX (HKLM-x32\...\InstallShield_{30B1CCDB-209B-4E94-8311-379F2E6B6B59}) (Version: 3 - Ichikawa Soft Laboratory) RAW Image Viewer (HKLM-x32\...\{3C867AA0-22EC-4B27-8C60-A354AA37D68C}_is1) (Version: - IdeaMK) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10586.31222 - Realtek Semiconduct Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.90.826.2014 - Realtek) Realtek Ethernet Diagnostic Utility (HKLM-x32\...\{DADC7AB0-E554-4705-9F6A-83EA82ED708E}) (Version: 2.0.2.8 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7841 - Realtek Semiconductor Corp.) Roslyn Language Services - x86 (HKLM-x32\...\{5B47029B-1E62-30FF-906E-694851C22782}) (Version: 14.0.23107 - Microsoft Corporation) Hidden Roslyn Language Services - x86 (HKLM-x32\...\{6C1985E7-E1C5-3A95-86EF-2C62465F15C3}) (Version: 14.0.23107 - Microsoft Corporation) Hidden Samsung Data Migration (HKLM-x32\...\{3B304604-0BF5-488E-AB95-F2F2E31206F3}) (Version: 3.1 - Samsung) Samsung Drive Manager (HKLM-x32\...\{9F1A6A24-4901-42F6-A355-5DD2B82E62AE}) (Version: 1.0.174 - Clarus, Inc.) Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 5.1.0.1120 - Samsung Electronics) SanDiskSecureAccess_Manager.exe (HKU\S-1-5-21-1317644463-2230382406-96430102-1000\...\@@__UNKNOWN__@@SanDiskSecureAccess_Manager.exe) (Version: 1.1.19755 - Gemalto N.V.) SanDiskSecureAccess_Manager.exe (HKU\S-1-5-21-1317644463-2230382406-96430102-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214006\...\@@__UNKNOWN__@@SanDiskSecureAccess_Manager.exe) (Version: 1.1.19755 - Gemalto N.V.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Setup (HKLM-x32\...\{E8F227AF-ACE6-454A-867C-075CF187A6AF}) (Version: 11.7.0.15 - Corel Inc.) Hidden SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 4.0.1000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 17.12.8 - NVIDIA Corporation) Hidden Skype™ 7.36 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.36.101 - Skype Technologies S.A.) SoftMaker Office 2016 (HKLM-x32\...\{8EBB8452-274B-465D-8324-00B0832FBB05}) (Version: 16.0.3714 - SoftMaker Software GmbH) Sub Command (HKLM-x32\...\{00614BE0-4470-11D5-941B-0050DA2D7AE1}) (Version: - ) Team Explorer for Microsoft Visual Studio 2015 (HKLM-x32\...\{791295AE-3B0A-3222-9E69-26C8C106E8D1}) (Version: 14.0.23102 - Microsoft Corporation) Hidden Test Tools for Microsoft Visual Studio 2015 (HKLM-x32\...\{9EABBFE1-7EED-47D9-8FB8-21D7E4808057}) (Version: 14.0.23107 - Microsoft Corporation) Hidden Thunder Master v2.7 (HKLM-x32\...\{EE04522C-0814-4B63-AE57-0B63E5A355BB}_is1) (Version: 2.7.0.1 - Palit Microsystems Ltd.) TomTom HOME (HKLM-x32\...\{B581E191-A2C1-4CE3-907E-9FE3C728750C}) (Version: 2.9.91 - TomTom) TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.) TomTom MyDrive Connect 4.1.1.2797 (HKLM-x32\...\MyDriveConnect) (Version: 4.1.1.2797 - TomTom) TuneUp Utilities 2014 (en-US) (HKLM-x32\...\{14C8CE46-C68C-461B-BCA9-E276A85851C6}) (Version: 14.0.1000.340 - TuneUp Software) Hidden TypeScript Power Tool (HKLM-x32\...\{E51EAA08-F838-4CCE-B011-A82469BE6CC5}) (Version: 1.6.3.0 - Microsoft Corporation) Hidden TypeScript Tools for Microsoft Visual Studio 2015 (HKLM-x32\...\{F0AF1E33-1CB9-4377-ABEE-4E4550A3F9BA}) (Version: 1.6.3.0 - Microsoft Corporation) Hidden TypeScript Tools for Microsoft Visual Studio 2015 1.6.3.0 (HKLM-x32\...\{da31aa25-410a-4c1b-9ec0-114dd8dff786}) (Version: 1.6.23313.0 - Microsoft Corporation) United Kingdom Extended (Apple) - Custom (HKLM\...\{E7407B09-E37B-44FA-9BF9-E6635576FF5D}) (Version: 1.0.3.40 - Clive Parker) Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN) VSFilter 2.41.322 (0c3a1ea) Nightly (64-bit) (HKLM\...\vsfilter64_is1) (Version: 2.41.322 - MPC-HC Team) VueScan x64 (HKLM\...\VueScan x64) (Version: - ) Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.) WCF Data Services 5.6.4 Runtime (HKLM-x32\...\{DB85E7BD-B2DD-43D4-B3C0-23D7B527B597}) (Version: 5.6.62175.4 - Microsoft Corporation) Hidden WCF Data Services Tools for Microsoft Visual Studio 2015 (HKLM-x32\...\{0A3B508E-5638-4471-BCC9-954E1868CB86}) (Version: 5.6.62175.4 - Microsoft Corporation) Hidden WD Quick View (HKLM-x32\...\{79966948-BECF-4CB1-A79F-E76C830A17D2}) (Version: 2.4.6.3 - Western Digital Technologies, Inc.) WD Security (HKLM-x32\...\{0AC340BC-4A62-4D1F-86DB-35C1C3CB66CF}) (Version: 1.1.1.3 - Western Digital Technologies, Inc.) Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation) Windows Driver Package - Leaf Imaging Ltd. Image (12/03/2014 1.2.0.0) (HKLM\...\B758007C752D28F7C3542875CEEBDADCAE5941AE) (Version: 12/03/2014 1.2.0.0 - Leaf Imaging Ltd.) Windows Driver Package - Phase One / Mamiya V-Grip USB Driver (12/03/2014 1.2.0.0) (HKLM\...\3F504CC0B024052107934E093CC26DA720256A7A) (Version: 12/03/2014 1.2.0.0 - Phase One / Mamiya) Windows Driver Package - Phase One A/S (WinUSB) USBDevice (12/03/2014 1.13.0.0) (HKLM\...\7C6570ABBEB2F08EFBC23ED7925AE72DA6167BD8) (Version: 12/03/2014 1.13.0.0 - Phase One A/S) WinDVD (HKLM-x32\...\{0AE9EE8D-683A-4FCD-A80C-32319B7DF722}) (Version: 11.7.0.15 - Corel Inc.) Hidden WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.) Wise Auto Shutdown 1.43 (HKLM-x32\...\Wise Auto Shutdown_is1) (Version: 1.43 - WiseCleaner.com, Inc.) Wise Care 365 4.67 (HKLM-x32\...\Wise Care 365_is1) (Version: 4.67 - WiseCleaner.com, Inc.) Wise Care 365 version 2.86 (HKLM-x32\...\{E864A1C8-EEE1-47D0-A7F8-00CC86D26D5E}_is1) (Version: 4.6.7 - WiseCleaner.com, Inc.) Wise Data Recovery 3.44 (HKLM-x32\...\Wise Data Recovery_is1) (Version: 3.44 - WiseCleaner.com, Inc.) Wise Folder Hider 2.02 (HKLM-x32\...\Wise Folder Hider_is1) (Version: 2.02 - WiseCleaner.com, Inc.) Wise JetSearch 1.48 (HKLM-x32\...\Wise JetSearch_is1) (Version: 1.48 - WiseCleaner.com, Inc.) Wise Memory Optimizer 3.33 (HKLM-x32\...\Wise Memory Optimizer_is1) (Version: 3.33 - WiseCleaner.com, Inc.) Wise Program Uninstaller 1.65 (HKLM-x32\...\Wise Program Uninstaller_is1) (Version: 1.65 - WiseCleaner.com, Inc.) Wise System Monitor 1.29 (HKLM-x32\...\Wise System Monitor_is1) (Version: 1.29 - WiseCleaner.com, Inc.) Wise Video Converter 1.37 (HKLM-x32\...\Wise Video Converter_is1) (Version: 1.37 - WiseCleaner.com, Inc.) Zoom (HKU\S-1-5-21-1317644463-2230382406-96430102-1000\...\ZoomUMX) (Version: 4.0 - Zoom Video Communications, Inc.) Zoom (HKU\S-1-5-21-1317644463-2230382406-96430102-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214006\...\ZoomUMX) (Version: 4.0 - Zoom Video Communications, Inc.) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2016-03-18] (Acronis) ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2016-03-18] (Acronis) ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2016-03-18] (Acronis) ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft) ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft) ContextMenuHandlers01: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2015-01-03] (Igor Pavlov) ContextMenuHandlers01: [BDFVCtxMenuExt] -> {9E96C1F5-0EFA-4348-9460-15D6802C70AA} => C:\Program Files\Bitdefender\Bitdefender 2017\bdfvsctx.dll [2017-04-24] (Bitdefender) ContextMenuHandlers01: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll [2016-11-14] (Foxit Software Inc.) ContextMenuHandlers01: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2017-05-09] (Apple Inc.) ContextMenuHandlers01: [PicaViewCtxMenuShlExt] -> {F3CBBA61-EE3F-4D6D-B1C6-B3474E579936} => C:\Program Files\Common Files\ACD Systems\PicaView\ACDSeePV.dll [2015-08-28] (ACD Systems International Inc.) ContextMenuHandlers01: [VersionsPageShellExt] -> {9E42900A-85F9-4E67-9778-575FBBA0A81C} => C:\Program Files (x86)\Acronis\TrueImageHome\x64\versions_page.dll [2016-03-18] (Acronis International GmbH) ContextMenuHandlers01: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File ContextMenuHandlers02: [AgentRansack] -> {2AE9D6D8-E348-4853-B266-C78844D31B97} => C:\Program Files\Mythicsoft\Agent Ransack\ShellExt.dll [2014-11-21] (Mythicsoft Ltd) ContextMenuHandlers03: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes) ContextMenuHandlers03: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File ContextMenuHandlers04: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2015-01-03] (Igor Pavlov) ContextMenuHandlers04: [AgentRansack] -> {2AE9D6D8-E348-4853-B266-C78844D31B97} => C:\Program Files\Mythicsoft\Agent Ransack\ShellExt.dll [2014-11-21] (Mythicsoft Ltd) ContextMenuHandlers04: [BDFVCtxMenuExt] -> {9E96C1F5-0EFA-4348-9460-15D6802C70AA} => C:\Program Files\Bitdefender\Bitdefender 2017\bdfvsctx.dll [2017-04-24] (Bitdefender) ContextMenuHandlers04: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File ContextMenuHandlers05: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => -> No File ContextMenuHandlers05: [BDFVCtxMenuExt] -> {9E96C1F5-0EFA-4348-9460-15D6802C70AA} => C:\Program Files\Bitdefender\Bitdefender 2017\bdfvsctx.dll [2017-04-24] (Bitdefender) ContextMenuHandlers05: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> No File ContextMenuHandlers05: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-05-01] (NVIDIA Corporation) ContextMenuHandlers05: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File ContextMenuHandlers06: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2015-01-03] (Igor Pavlov) ContextMenuHandlers06: [AgentRansack] -> {2AE9D6D8-E348-4853-B266-C78844D31B97} => C:\Program Files\Mythicsoft\Agent Ransack\ShellExt.dll [2014-11-21] (Mythicsoft Ltd) ContextMenuHandlers06: [BDFVCtxMenuExt] -> {9E96C1F5-0EFA-4348-9460-15D6802C70AA} => C:\Program Files\Bitdefender\Bitdefender 2017\bdfvsctx.dll [2017-04-24] (Bitdefender) ContextMenuHandlers06: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll [2016-11-14] (Foxit Software Inc.) ContextMenuHandlers06: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes) ContextMenuHandlers06: [StartMenuExt] -> {E595F05F-903F-4318-8B0A-7F633B520D2B} => C:\WINDOWS\system32\StartMenuHelper64.dll [2016-07-30] (IvoSoft) ContextMenuHandlers06: [VersionsPageShellExt] -> {9E42900A-85F9-4E67-9778-575FBBA0A81C} => C:\Program Files (x86)\Acronis\TrueImageHome\x64\versions_page.dll [2016-03-18] (Acronis International GmbH) ContextMenuHandlers06: [XXX Groove GFS Context Menu Handler XXX] -> {6C467336-8281-4E60-8204-430CED96822D} => -> No File ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {0046739E-F66E-4E2E-B6B6-B8E731D396B7} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION Task: {03445675-EC10-4E63-B2A4-D83F4C7F807E} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION Task: {126CF76C-807D-4512-8920-B04E590E2BEC} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION Task: {145D6359-7665-4104-8F2E-09FACF5668D9} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION Task: {189A465A-8B1F-4D51-A40C-7A4010D92E18} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION Task: {2E9ABE77-0855-4141-852B-A54E59D159FE} - System32\Tasks\AviatorUpdateTask => wscript "C:\Program Files (x86)\WhiteHat\Aviator\Update\BatchLauncher.vbs" "C:\Program Files (x86)\WhiteHat\Aviator\Update\AviatorAutoUpdate.exe" Task: {316CB534-2CC1-43B4-B6F2-F2ADF0440826} - System32\Tasks\Wise Turbo Checker.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe [2016-12-21] (WiseCleaner.COM) Task: {35B349B6-D6A8-4879-B9FC-D335CF95F037} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION Task: {415CBFC1-5A00-42FA-988E-5605F34EE82C} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION Task: {46F0CD80-401B-4F1F-B6A7-CCDE547A636A} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION Task: {4E3FAFF8-B456-416D-AEC4-137E6A87E4D7} - System32\Tasks\Adobe online update program => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-25] (Adobe Systems Incorporated) Task: {55BA7BD7-060A-4F5B-8DC2-7EC0C10954A1} - System32\Tasks\ASUS\ASUS AISuiteIII => C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe [2015-03-25] (ASUSTeK Computer Inc.) Task: {6653B64E-2B81-4166-9C6F-0CCE5C6B01F1} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-06-30] (Piriform Ltd) Task: {6D446155-A86C-44DF-BD7F-F2FC8D19814A} - System32\Tasks\Motorola Device Manager Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2013-10-31] () Task: {768524CF-BE96-459F-8214-8AB00D695F75} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION Task: {7DBF2768-17BC-474D-B4E3-265C062A5266} - System32\Tasks\Motorola Device Manager Engine => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2013-10-31] () Task: {92B2D2F7-BCD9-4283-9182-8278F4FDF53A} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION Task: {96BD670F-6891-4642-A174-F94FFC728449} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe [2017-05-19] (Samsung Electronics Co. Ltd.) Task: {9BAEE819-50E0-4465-997C-E327A8103C8D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.) Task: {AA612320-C665-4A49-B8C7-E63155F593A0} - System32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C => C:\Program Files\Bitdefender\Bitdefender 2017\bdagent.exe [2017-04-24] (Bitdefender) Task: {AE721E11-915B-494A-A368-1F932EA2107C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-25] (Adobe Systems Incorporated) Task: {B31D6FEE-3356-4065-876D-E26F7EC894B2} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2017-04-11] (Bitdefender) Task: {B9C6D0B1-8BC2-45E9-AF73-49DF52B1D106} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION Task: {DDF35D9F-462A-4BCF-B5B4-F273C7A4808C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION Task: {DFAED0C7-B033-43D5-8087-0544075A8190} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION Task: {E0391611-917E-429A-83CF-7C24596D4885} - System32\Tasks\Motorola Device Manager Initial Update => C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2013-10-31] () Task: {E4A4AD88-DFF9-45B4-9D69-1D19DC123EF3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-06-17] (Adobe Systems Incorporated) Task: {EBD149E3-8DB0-489B-8448-BEB679E745A8} - System32\Tasks\{F9880CF0-6534-4BCD-AD5C-DE4485E7A1F2} => "c:\windows\system32\launchwinapp.exe" hxxp://ui.skype.com/ui/0/7.27.0.101/en/abandoninstall?page=tsProgressBar Task: {FC00ED0F-3458-45E3-A3F8-71807651CF4D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.) Task: {FFE22AFC-BEF7-429B-8D70-83AAED5F182A} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) ==================== Shortcuts & WMI ======================== (The entries could be listed to be restored or removed.) Shortcut: C:\Users\sagaramati\Favorites\NCH Software Download Site.lnk -> hxxp://www.nchsoftware.com/index.htm ==================== Loaded Modules (Whitelisted) ============== 2017-04-24 15:08 - 2017-04-24 15:08 - 00111832 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\bdmetrics.dll 2017-03-20 23:42 - 2017-02-07 13:34 - 01008448 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_001_001\ashttpbr.mdl 2017-03-20 23:42 - 2017-02-07 13:34 - 00541952 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_001_001\ashttpdsp.mdl 2017-03-20 23:42 - 2017-02-07 13:34 - 03243920 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_001_001\ashttpph.mdl 2017-03-20 23:42 - 2017-02-07 13:34 - 01544568 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_001_001\ashttprbl.mdl 2016-10-14 15:31 - 2016-10-14 15:31 - 01244408 _____ () C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe 2016-09-01 18:12 - 2016-09-01 18:12 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2017-05-09 00:44 - 2017-05-09 00:44 - 01354040 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2017-05-01 08:44 - 2017-05-01 08:44 - 04463592 _____ () C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe 2017-05-16 11:38 - 2013-07-04 03:32 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe 2017-05-06 12:59 - 2017-07-15 12:33 - 02260432 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll 2016-04-16 12:56 - 2016-04-16 12:56 - 09698296 _____ () C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe 2017-05-16 11:38 - 2017-05-01 21:51 - 00133752 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2017-03-18 21:58 - 2017-03-18 21:58 - 00138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll 2017-03-18 21:59 - 2017-03-19 03:30 - 01731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2017-07-18 09:21 - 2017-07-18 09:22 - 00074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2017-07-18 09:21 - 2017-07-18 09:22 - 00203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2017-07-18 09:21 - 2017-07-18 09:22 - 43573248 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkyWrap.dll 2017-07-18 09:21 - 2017-07-18 09:22 - 02435584 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\skypert.dll 2017-05-29 16:25 - 2017-05-29 16:25 - 00023328 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\lang\en-us\bdsystray.txtui 2013-10-31 16:05 - 2013-10-31 16:05 - 00172032 _____ () C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\css_core.dll 2017-05-16 11:38 - 2017-07-19 00:01 - 00034448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\PEbiosinterface32.dll 2017-05-16 11:38 - 2013-07-04 03:32 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\ATKEX.dll 2015-08-11 15:36 - 2015-08-11 15:36 - 00024896 _____ () C:\Program Files (x86)\Common Files\Acronis\Infrastructure\core_workers_shared_context.dll 2017-04-17 17:55 - 2017-04-17 17:55 - 00037808 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\thread_pool.dll 2017-04-17 18:46 - 2017-04-17 18:46 - 04355776 _____ () C:\Program Files (x86)\Common Files\Acronis\Infrastructure\atih_mms_addon.dll 2015-08-23 15:59 - 2015-08-23 15:59 - 00606672 _____ () C:\Program Files (x86)\Common Files\Acronis\Infrastructure\sqlite3.dll 2017-04-17 18:43 - 2017-04-17 18:43 - 20604856 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\ti_managers.dll 2015-11-16 18:05 - 2015-11-16 18:05 - 00126928 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\afcdpapi.dll 2016-04-16 12:45 - 2016-04-16 12:45 - 00248240 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\sync_agent_api.dll 2014-04-03 16:48 - 2014-04-03 16:48 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2017-04-17 17:58 - 2017-04-17 17:58 - 00445872 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\ulxmlrpcpp.dll 2017-04-17 17:53 - 2017-04-17 17:53 - 00115632 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\EXPAT.dll 2017-05-09 00:45 - 2017-05-09 00:45 - 01041720 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2017-05-09 00:44 - 2017-05-09 00:44 - 00189752 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll 2016-09-01 18:13 - 2016-09-01 18:13 - 00080184 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2017-04-17 18:49 - 2017-04-17 18:49 - 00759920 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\ti_managers_proxy.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\Users\sagaramati\supporttool_2015 (1).exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Desktop\FRST64.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Desktop\JRT(1).exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Desktop\SILKYRFCInstaller.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Desktop\supporttool_2015.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\364.72-desktop-win8-win7-winvista-64bit-international-whql.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\acdsee-ultimate-9-1-0-580-win-x64-en.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\acdseeultimate.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\AcronisTrueImage2016_web.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\adwcleaner_6.044.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\adwcleaner_7.0.0.0.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\AgentRansack_828.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\ashampoo_burning_studio_16_e16.0.7_sm.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\ashampoo_burning_studio_18_18.0.5_sm.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\ashampoo_snap_8_e8.0.8_sm(1).exe.part:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\ashampoo_snap_8_e8.0.8_sm.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\bitdefender_av_19_64b.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\bitdefender_windows_0ea68c9d-26a6-45ef-98ac-fb904f53694e.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\bitdefender_windows_bb26b786-7134-48d5-8c45-82d41ccb7621.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\CaptureOne.Win.9.2.1.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\ccsetup530 (1).exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\ccsetup531.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\ccsetup532.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\ChromeSetup.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\ClassicShellSetup_4_2_7.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\ClassicShellSetup_4_3_0.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\cpu-z_1.77-en.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\cr8_bkup.bat:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\delinf_10260.EXE:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\epubor_ultimate.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\Firefox Setup Stub 53.0.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\flexipdfbasic2017 (1).exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\flexipdfbasic2017.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\FoxitReader814_enu_Setup_Prom.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\GentiumPlus-5.000.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\GrammarlyAddInSetup.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\GrammarlySetup(1).exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\GrammarlySetup.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\hdr_projects_3_elements_3.34_sm.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\hdr_projects_4_elements_4.41_sm.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\HL-2240D-inst-D1-win8-useu (1).EXE:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\HL-2240D-inst-D1-win8-useu(1).EXE:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\HL-2240D-inst-D1-win8-useu.EXE:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\i2003beta_2.5.0.0.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\IDC426_1607a.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\iTunes64Setup.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\JRT.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\jxpiinstall(1).exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\keypack.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\kindleconvertersetup.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\kindledrmsetup.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\KindleForPC-installer-1.16.44025.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\kodi-16.1-Jarvis.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\LG-ODD.v4508_RiTA10_DVD120913-03 (1).exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\LG-ODD.v4508_RiTA10_DVD120913-03 (2).exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\LG-ODD.v4508_RiTA10_DVD120913-03 (3).exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\LG-ODD.v4508_RiTA10_DVD120913-03 (4).exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\LG-ODD.v4508_RiTA10_DVD120913-03.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\LGMobileSupportTool.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\Lightroom_5_LS11_win_5_7_1.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\mb3-setup-consumer-3.0.6.1469-10103.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\mbam-clean-2.1.1.1001.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\mbam-setup-2.2.1.1043.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\MediaCreationTool.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\nb672-install.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\nb680B2 (1).exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\nb680B2.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\nb680B5 (1).exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\nb680B5.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\ofw16_757.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\ofw16_761.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\ofw16_763.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\ofw16_765.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\ofw16_766.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\OneCareCleanup.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\Opera_38.0.2220.41_Campaign_70_Setup.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\pd14.0_pro.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\perfectdisk_cleanup.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\PMHOME_5201DL.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\PUsetup.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\SkypeSetup.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\supporttool_2015.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\The_New_Bitdefender_UninstallTool(1).exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\The_New_Bitdefender_UninstallTool.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\torbrowser-install-6.5_en-US.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\UsenetNLSetup_427130f.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\UserBenchMark.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\VSFilter_2.41.322_x64.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\VSFilter_2.41.322_x86.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\vs_community.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\WinDVD_11.7_Pro.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\WinDVD_11_Pro_SP5.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\WinDVD_11_Pro_SP7(1).exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\WinDVD_11_Pro_SP7.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\WiseCare365.exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\Zoom_launcher(1).exe:BDU [0] AlternateDataStreams: C:\Users\sagaramati\Downloads\Zoom_launcher.exe:BDU [0] ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE trusted site: HKU\S-1-5-21-1317644463-2230382406-96430102-1000\...\amazon.co.uk -> hxxps://amazon.co.uk IE trusted site: HKU\S-1-5-21-1317644463-2230382406-96430102-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214006\...\amazon.co.uk -> hxxps://amazon.co.uk ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2017-07-19 07:32 - 00000828 _____ C:\WINDOWS\system32\Drivers\etc\hosts ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073213943\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073213990\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg HKU\S-1-5-21-1317644463-2230382406-96430102-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\sagaramati\Pictures\26d67d0660096523e61e9f1ee488e6c5.jpg HKU\S-1-5-21-1317644463-2230382406-96430102-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214006\Control Panel\Desktop\\Wallpaper -> C:\Users\sagaramati\Pictures\26d67d0660096523e61e9f1ee488e6c5.jpg HKU\S-1-5-21-1317644463-2230382406-96430102-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214568\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Dell\Win7 LtBlue 1920x1200.jpg HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214631\Control Panel\Desktop\\Wallpaper -> DNS Servers: 192.168.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == MSCONFIG\startupreg: ACDSeeCommanderUltimate8 => MSCONFIG\startupreg: ACDSeeCommanderUltimate9 => C:\Program Files\ACD Systems\ACDSee Ultimate\9.0\ACDSeeCommanderUltimate9.exe MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\sagaramati\AppData\Local\Akamai\netsession_win.exe" MSCONFIG\startupreg: AvgUi => MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR MSCONFIG\startupreg: GoogleChromeAutoLaunch_4BDD89AF626241F4DE08891510EE7950 => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window MSCONFIG\startupreg: iCloudDrive => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe MSCONFIG\startupreg: iCloudServices => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe" MSCONFIG\startupreg: KeePass 2 PreLoad => MSCONFIG\startupreg: LGODDFU => MSCONFIG\startupreg: LightScribe Control Panel => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden MSCONFIG\startupreg: QuickTime Task => MSCONFIG\startupreg: RTHDVCPL => "C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart MSCONFIG\startupreg: SpeedZooka Scheduler => MSCONFIG\startupreg: SunJavaUpdateSched => MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" HKLM\...\StartupApproved\Run: => "RTHDVCPL" HKLM\...\StartupApproved\Run: => "NvBackend" HKLM\...\StartupApproved\Run: => "iTunesHelper" HKLM\...\StartupApproved\Run: => "ACUW09EN" HKLM\...\StartupApproved\Run: => "Malwarebytes TrayApp" HKLM\...\StartupApproved\Run32: => "AcronisTibMounterMonitor" HKLM\...\StartupApproved\Run32: => "TrueImageMonitor.exe" HKLM\...\StartupApproved\Run32: => "BDRegion" HKLM\...\StartupApproved\Run32: => "LGODDFU" HKLM\...\StartupApproved\Run32: => "PMBVolumeWatcher" HKLM\...\StartupApproved\Run32: => "UpdatePSTShortCut" HKLM\...\StartupApproved\Run32: => "RemoteControl9" HKLM\...\StartupApproved\Run32: => "Acronis Scheduler2 Service" HKU\S-1-5-21-1317644463-2230382406-96430102-1000\...\StartupApproved\Run: => "ACDSeeCommanderUltimate9" HKU\S-1-5-21-1317644463-2230382406-96430102-1000\...\StartupApproved\Run: => "Bitdefender Wallet Agent" HKU\S-1-5-21-1317644463-2230382406-96430102-1000\...\StartupApproved\Run: => "CCleaner Monitoring" HKU\S-1-5-21-1317644463-2230382406-96430102-1000\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-1317644463-2230382406-96430102-1000\...\StartupApproved\Run: => "TomTomHOME.exe" HKU\S-1-5-21-1317644463-2230382406-96430102-1000\...\StartupApproved\Run: => "iCloudDrive" HKU\S-1-5-21-1317644463-2230382406-96430102-1000\...\StartupApproved\Run: => "iCloudPhotos" HKU\S-1-5-21-1317644463-2230382406-96430102-1000\...\StartupApproved\Run: => "ApplePhotoStreams" HKU\S-1-5-21-1317644463-2230382406-96430102-1000\...\StartupApproved\Run: => "iCloudServices" HKU\S-1-5-21-1317644463-2230382406-96430102-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214006\...\StartupApproved\Run: => "ACDSeeCommanderUltimate9" HKU\S-1-5-21-1317644463-2230382406-96430102-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214006\...\StartupApproved\Run: => "Bitdefender Wallet Agent" HKU\S-1-5-21-1317644463-2230382406-96430102-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214006\...\StartupApproved\Run: => "CCleaner Monitoring" HKU\S-1-5-21-1317644463-2230382406-96430102-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214006\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-1317644463-2230382406-96430102-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214006\...\StartupApproved\Run: => "TomTomHOME.exe" HKU\S-1-5-21-1317644463-2230382406-96430102-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214006\...\StartupApproved\Run: => "iCloudDrive" HKU\S-1-5-21-1317644463-2230382406-96430102-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214006\...\StartupApproved\Run: => "iCloudPhotos" HKU\S-1-5-21-1317644463-2230382406-96430102-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214006\...\StartupApproved\Run: => "ApplePhotoStreams" HKU\S-1-5-21-1317644463-2230382406-96430102-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07192017073214006\...\StartupApproved\Run: => "iCloudServices" ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{FAE8FC53-C791-4553-ACCC-30C394DAA0FA}] => (Allow) C:\Program Files\Newsbin\newsbinpro64.exe FirewallRules: [{0481FD15-CCAF-488F-A96F-4EEEE503EABB}] => (Allow) C:\Program Files\Newsbin\newsbinpro64.exe FirewallRules: [{50807531-52B0-4FA1-91D3-EC2C314F59B2}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe FirewallRules: [{2044D34C-24B7-4B21-805E-93DB86D3D060}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe FirewallRules: [{32E16A52-F721-4983-BE45-28C9E62073F9}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe FirewallRules: [{A3D5B985-A2B4-4F0B-9681-6DC0E9BA0E41}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe FirewallRules: [{0CCA4390-12A8-4F62-A223-7FA3FA759376}] => (Allow) c:\Program Files (x86)\Corel\WinDVD11\\WinDVD.exe FirewallRules: [{3C18AAA9-B6AE-449A-8F6E-9ED5C9879DA6}] => (Allow) C:\Program Files\Newsbin\newsbinpro64.exe FirewallRules: [{B01223B2-080A-4E7E-8763-8A1373E88003}] => (Allow) C:\Program Files\Newsbin\newsbinpro64.exe FirewallRules: [{97637D90-05D5-4F03-90AC-B71DCD304EFF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{6E226F3F-4183-49EB-AA57-D4166ABB9702}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{33B43DC3-D50D-496B-9A4C-0E876DDD79BE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{8895F3B7-6ADD-4439-A24D-D1679CF2B077}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{E44D5E68-DA6E-4129-A372-5C9AA5C09373}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{2DD7186B-997E-489D-AC0E-963B00B1886A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{8D4A82D5-1764-4329-9876-ACD2F9B69A72}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{9B9BC9D1-18CD-4CAF-A347-217AF2B99395}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{A9064DA3-BBA9-4A57-8F83-209EFE3E7104}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe FirewallRules: [{B0442FCF-DB9C-4F3B-8C62-AD93BB903C61}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{6C28AF1F-06DE-42CF-BCE6-9F0DC635FB80}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{4885DB39-5F15-4362-9B85-650161391745}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{3C2D44B0-164D-4F1D-9452-E3E41844EB6D}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{606C4DD6-95BC-44F0-93EC-64803E821B40}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [UDP Query User{1B22F929-4E27-4339-9D24-14170654FF76}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe FirewallRules: [TCP Query User{EECBD03F-84F9-43AE-BC1B-B1C487BC2DF3}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe FirewallRules: [UDP Query User{AC01DC00-3898-4F65-A343-7C7B3BCBA2BF}C:\program files (x86)\freetime\formatfactory\formatfactory.exe] => (Allow) C:\program files (x86)\freetime\formatfactory\formatfactory.exe FirewallRules: [TCP Query User{742DDABA-1EA7-4099-BC9C-EFE6445125D6}C:\program files (x86)\freetime\formatfactory\formatfactory.exe] => (Allow) C:\program files (x86)\freetime\formatfactory\formatfactory.exe FirewallRules: [{B829F4D1-D989-4680-912A-42F0C92C61C4}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{868DC1B5-6131-41C3-B3DF-193A4A9B323C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [UDP Query User{07C36CD7-BDA5-4AE1-82D7-CC421DD2ED85}C:\users\sagaramati\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\sagaramati\appdata\local\akamai\netsession_win.exe FirewallRules: [TCP Query User{0A13B709-6907-409B-8CBA-E74090B3CA7A}C:\users\sagaramati\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\sagaramati\appdata\local\akamai\netsession_win.exe FirewallRules: [UDP Query User{5912F969-CB70-44E4-BDD3-979003381E33}C:\users\sagaramati\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\sagaramati\appdata\local\akamai\netsession_win.exe FirewallRules: [TCP Query User{AAD19D56-08C6-4D56-8412-BFBBF021A4EA}C:\users\sagaramati\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\sagaramati\appdata\local\akamai\netsession_win.exe FirewallRules: [UDP Query User{4BCF66AE-7554-4904-BAB5-B7CD0F07D5F8}C:\program files\picturecode\photoninja64_1.2.4d\photoninja64.exe] => (Allow) C:\program files\picturecode\photoninja64_1.2.4d\photoninja64.exe FirewallRules: [TCP Query User{CB4D61BE-CECB-4F40-88EB-3E8CC031B496}C:\program files\picturecode\photoninja64_1.2.4d\photoninja64.exe] => (Allow) C:\program files\picturecode\photoninja64_1.2.4d\photoninja64.exe FirewallRules: [{3525971B-5D0A-41AF-823F-2CD160926EED}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe FirewallRules: [{9F0DE230-E55F-40CB-90FB-46A308F733A6}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe FirewallRules: [{278150A7-DE57-4165-A047-FA7772164627}] => (Allow) LPort=53 FirewallRules: [{ABE045C9-942F-4E22-935C-147A5DD9E4FC}] => (Allow) LPort=53 FirewallRules: [{C13E2534-543D-4BF0-8EE2-C93C5BE5D961}] => (Allow) LPort=68 FirewallRules: [{E3CA4A0B-6F2A-42F3-B6CD-F9C959A7182E}] => (Allow) LPort=67 FirewallRules: [{57BD284E-DDBF-483C-86D4-1332EF95D68F}] => (Allow) LPort=53 FirewallRules: [{25696E95-2DAD-4EA5-A86E-96578DC00889}] => (Allow) LPort=1542 FirewallRules: [{27E27C39-84C0-4987-824C-1AABCD91277B}] => (Allow) LPort=1542 FirewallRules: [{3AD7CC84-9CCB-4D85-8003-B70B7FDE198A}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe FirewallRules: [{D6649FBE-A6AA-49B8-A962-3AE5AD5118B9}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe FirewallRules: [{D4201749-6DD1-4191-99EA-728D5009975B}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD Cinema\PowerDVDCinema.exe FirewallRules: [{E934F014-36B8-4D85-888F-E81B600DDF17}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD9.EXE FirewallRules: [{BE0527E4-8976-4FE8-8A84-A0A42B55A326}] => (Allow) C:\Program Files\iTunes\iTunes.exe FirewallRules: [{34360AC6-1773-476C-AD2C-37F211C9BABC}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Restore Points ========================= 12-07-2017 09:04:44 Windows Update ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (07/19/2017 07:52:30 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PYRRHO) Description: Activation of application Microsoft.BingWeather_8wekyb3d8bbwe!App failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (07/19/2017 07:36:38 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Activation context generation failed for "C:\Program Files (x86)\Microsoft Visual Studio 9.0\VC\bin\ia64\pgosweep.exe". Dependent Assembly Microsoft.VC90.CRT,processorArchitecture="ia64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8" could not be found. Please use sxstrace.exe for detailed diagnosis. Error: (07/19/2017 07:36:38 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Activation context generation failed for "C:\Program Files (x86)\Microsoft Visual Studio 9.0\VC\bin\ia64\pgocvt.exe". Dependent Assembly Microsoft.VC90.CRT,processorArchitecture="ia64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8" could not be found. Please use sxstrace.exe for detailed diagnosis. Error: (07/19/2017 07:36:37 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Activation context generation failed for "C:\Program Files (x86)\Microsoft Visual Studio 9.0\VC\bin\ia64\pgomgr.exe". Dependent Assembly Microsoft.VC90.CRT,processorArchitecture="ia64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8" could not be found. Please use sxstrace.exe for detailed diagnosis. Error: (07/19/2017 07:32:22 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PYRRHO) Description: Activation of application Microsoft.BingWeather_8wekyb3d8bbwe!App failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (07/19/2017 12:27:00 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PYRRHO) Description: Activation of application Microsoft.BingWeather_8wekyb3d8bbwe!App failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (07/19/2017 12:01:30 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PYRRHO) Description: Activation of application Microsoft.BingWeather_8wekyb3d8bbwe!App failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information. Error: (07/19/2017 12:01:14 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Local Hostname Pyrrho.local already in use; will try Pyrrho-2.local instead Error: (07/19/2017 12:01:14 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister 4 Pyrrho.local. Addr 192.168.0.13 Error: (07/19/2017 12:01:14 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: mDNSCoreReceiveResponse: Received from 192.168.0.13:5353 16 Pyrrho.local. AAAA 2A02:0C7D:8AED:9B00:A548:07B1:E410:80CB System errors: ============= Error: (07/19/2017 12:01:16 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (07/19/2017 12:01:16 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool. Error: (07/19/2017 12:01:13 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: The SysMain service terminated with the following error: The request is not supported. Error: (07/19/2017 12:01:13 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: The NetTcpActivator service depends on the NetTcpPortSharing service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. Error: (07/19/2017 12:01:13 AM) (Source: NETLOGON) (EventID: 3095) (User: ) Description: This computer is configured as a member of a workgroup, not as a member of a domain. The Netlogon service does not need to run in this configuration. Error: (07/19/2017 12:01:11 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The CldFlt service failed to start due to the following error: The request is not supported. Error: (07/19/2017 12:00:39 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Acronis Sync Agent Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service. Error: (07/19/2017 12:00:39 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Office Software Protection Platform service terminated unexpectedly. It has done this 1 time(s). Error: (07/19/2017 12:00:39 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Intel(R) Management and Security Application Local Management Service service terminated unexpectedly. It has done this 1 time(s). Error: (07/19/2017 12:00:39 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: The Malwarebytes Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service. CodeIntegrity: =================================== Date: 2017-07-19 00:01:13.826 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe) attempted to load \Device\HarddiskVolume1\Program Files\Bitdefender\Bitdefender 2017\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-07-18 23:53:11.001 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume1\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-07-18 23:52:30.054 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume1\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-07-18 23:52:29.937 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume1\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-07-18 23:33:49.349 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume1\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-07-18 23:29:44.518 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume1\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-07-18 23:26:40.578 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume1\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-07-18 23:24:39.075 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume1\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-07-18 23:23:35.987 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume1\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-07-18 23:17:30.331 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume1\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i5-4570 CPU @ 3.20GHz Percentage of memory in use: 23% Total physical RAM: 16321.8 MB Available physical RAM: 12534.46 MB Total Virtual: 32705.8 MB Available Virtual: 28795.5 MB ==================== Drives ================================ Drive c: (Pyrrho) (Fixed) (Total:231.04 GB) (Free:54.01 GB) NTFS ==>[drive with boot components (obtained from BCD)] Drive d: (PROMETHEUS) (CDROM) (Total:44.47 GB) (Free:0 GB) UDF Drive e: (CopyCat) (Fixed) (Total:931.51 GB) (Free:119.62 GB) NTFS Drive f: (Ananta) (Fixed) (Total:465.75 GB) (Free:465.48 GB) NTFS Drive g: (No. 1) (Fixed) (Total:465.75 GB) (Free:205.62 GB) NTFS Drive h: (Dassana) (Fixed) (Total:931.51 GB) (Free:490.18 GB) NTFS Drive j: (My Passport) (Fixed) (Total:931.48 GB) (Free:448.92 GB) NTFS Drive k: (Samsung USB) (Removable) (Total:119.47 GB) (Free:45.47 GB) FAT32 Drive o: (SAMSUNG) (Fixed) (Total:931.51 GB) (Free:257.15 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 232.9 GB) (Disk ID: F400EE4D) Partition 1: (Active) - (Size=231 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=936 MB) - (Type=27) ======================================================== Disk: 1 (Size: 465.8 GB) (Disk ID: 4FD8A09E) Partition 1: (Not Active) - (Size=465.8 GB) - (Type=OF Extended) ======================================================== Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 482C57DD) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) ======================================================== Disk: 3 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 01E11AEB) Partition 1: (Not Active) - (Size=465.8 GB) - (Type=OF Extended) ======================================================== Disk: 4 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: ECC0C0F5) Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS) ======================================================== Disk: 5 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: AF4AA871) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) ======================================================== Disk: 6 (Size: 931.5 GB) (Disk ID: DFF51D81) Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS) ======================================================== Disk: 7 (Size: 119.5 GB) (Disk ID: FB1F4153) Partition 1: (Not Active) - (Size=119.5 GB) - (Type=0C) ==================== End of Addition.txt ============================