Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21.01.2018 Ran by Utente (26-01-2018 17:52:40) Running from C:\Users\Utente\Desktop Windows 10 Home Version 1709 16299.192 (X64) (2017-10-18 19:32:32) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-2984930238-3554751552-4076433840-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-2984930238-3554751552-4076433840-503 - Limited - Disabled) Guest (S-1-5-21-2984930238-3554751552-4076433840-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-2984930238-3554751552-4076433840-1007 - Limited - Enabled) Utente (S-1-5-21-2984930238-3554751552-4076433840-1000 - Administrator - Enabled) => C:\Users\Utente WDAGUtilityAccount (S-1-5-21-2984930238-3554751552-4076433840-504 - Limited - Disabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-2984930238-3554751552-4076433840-1000\...\uTorrent) (Version: 3.5.0.44294 - BitTorrent Inc.) 64 Bit HP CIO Components Installer (HKLM\...\{FD868C71-6CCF-42E2-B90D-0504AB0036FE}) (Version: 13.2.1 - Hewlett-Packard) Hidden 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) ABBYY FineReader 11 (HKLM-x32\...\{F1100000-0011-0000-0001-074957833700}) (Version: 11.0.460 - ABBYY) Adobe Acrobat Reader DC - Italiano (HKLM-x32\...\{AC76BA86-7AD7-1040-7B44-AC0F074E4100}) (Version: 18.009.20050 - Adobe Systems Incorporated) Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.1.1.202 - Adobe Systems Incorporated) Adobe Flash Player 28 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 28.0.0.137 - Adobe Systems Incorporated) Adobe Lightroom (HKLM-x32\...\{8048A5DF-8A70-5BE1-954B-E0FDE1BD0D0D}) (Version: 6.0 - Adobe Systems Incorporated) Adobe Photoshop CC 2017 (HKLM-x32\...\PHSP_18_1_1) (Version: 18.1.1 - Adobe Systems Incorporated) AMD Catalyst Install Manager (HKLM\...\{1E9871B6-7C44-9A3A-A1C0-F9729663C7F5}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.) AMD Settings (HKLM\...\WUCCCApp) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Apple Mobile Device Support (HKLM\...\{E3C4B99B-BE71-4C27-8E3C-4FAE3C46E1D5}) (Version: 11.0.0.30 - Apple Inc.) Apple Software Update (HKLM-x32\...\{C1BBFD2A-BCDD-45B3-8C0B-66BD434970A8}) (Version: 2.4.8.1 - Apple Inc.) ArcSoft MediaImpression 2 (HKLM-x32\...\{FB46F473-333E-4A06-A777-31C54188593E}) (Version: 2.0.14.672 - ArcSoft) ASIO Proxy for foobar2000 (HKLM-x32\...\ASIOProxy) (Version: 0.7.1.2 - Maxim V.Anisiutkin) ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.13 - Michael Tippach) Assistente aggiornamento Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22256 - Microsoft Corporation) ASUS Xonar Essence STX Audio (HKLM-x32\...\{71B53BA8-4BE3-49AF-BC3E-07F392008788}) (Version: - ASUSTeK Computer Inc.) Avira (HKLM-x32\...\{518c54f5-fd43-4aa6-936b-8d7fd8c85cbd}) (Version: 1.2.103.26908 - Avira Operations GmbH & Co. KG) Avira (HKLM-x32\...\{E3F659C3-7936-4321-B886-4DA527DA72FE}) (Version: 1.2.103.26908 - Avira Operations GmbH & Co. KG) Hidden Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.34.17 - Avira Operations GmbH & Co. KG) BDtoAVCHD 2.6.5 (HKLM-x32\...\{AF68586E-188B-4403-BD1A-45663D2BAEAC}) (Version: 2.6.5 - Joel Gali) Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.) calibre 64bit (HKLM\...\{D41AD2EF-82C5-467F-B8BA-D8A1477D0967}) (Version: 3.11.1 - Kovid Goyal) Catalyst Control Center Next Localization BR (HKLM\...\{118C2119-84B6-E32C-63E2-B56DBCF41CE5}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization BR (HKLM\...\{3E245378-BF77-6946-C6F6-096DBE5EAB82}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization BR (HKLM\...\{51F85784-6799-5CA3-97B2-2E5904FC3E58}) (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization BR (HKLM\...\{55A4D3AB-C8DF-26B2-89A8-7E16E1E40700}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization BR (HKLM\...\{A16E186C-58C4-3BDC-5CCE-714EFEF5F27F}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHS (HKLM\...\{365AEAB2-4CF3-7CBB-0DAC-E9E14B688E65}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHS (HKLM\...\{45907537-804A-514F-5280-5F4F12A6DCBC}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHS (HKLM\...\{5A083A57-10D6-D4E5-292C-F274870E73A4}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHS (HKLM\...\{8E6F5592-ED7E-9C50-74AC-BF417B1FE291}) (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHS (HKLM\...\{E42911E5-48F8-8557-ED20-D72AD1907D25}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHT (HKLM\...\{7ABC6D83-816E-6D48-E65D-B0CEDD294E4E}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHT (HKLM\...\{962364E4-08BB-347D-32E7-2B789F37BF8A}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHT (HKLM\...\{AD28960A-6190-C991-C964-308B86EAA2E2}) (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHT (HKLM\...\{B4C30EF4-B2C5-1395-B534-7B63BCB6E8E4}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHT (HKLM\...\{DF0D7C1C-72B6-9FFB-DF66-B3720237BB80}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CS (HKLM\...\{238F6F6F-2544-86CF-3AB6-2CDADAB58CF0}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CS (HKLM\...\{62098A5F-E03B-31A3-5F9C-51A7F7D25744}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CS (HKLM\...\{84C3F2C5-F7B2-2F08-CDF4-79EF7CC55D74}) (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CS (HKLM\...\{A0407E39-2AA4-60B3-885F-3C5347B6909E}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CS (HKLM\...\{C3EE628C-7394-FE2C-0C90-C05284EB528D}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DA (HKLM\...\{0989D0EA-AFF3-5F9A-3D25-20EE133E409B}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DA (HKLM\...\{0E8A3B17-D603-B1B6-C205-1685EBDD23E9}) (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DA (HKLM\...\{1757AD9B-0E3C-05F9-FE43-4343BED7DA85}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DA (HKLM\...\{2F544F46-5F6E-97BB-3550-A0242A3C5754}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DA (HKLM\...\{EC688BD0-240D-AE40-55F3-234E54919AE6}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DE (HKLM\...\{1E7D3072-1D28-E33A-99DF-85D9F7ECD06E}) (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DE (HKLM\...\{66B06F29-EE4F-9130-D96A-754826093FEA}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DE (HKLM\...\{A8689A0F-5928-7300-B82B-C5E85131B7BA}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DE (HKLM\...\{E27224E3-7913-DA1E-5B08-9BEEC8FEE3D1}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DE (HKLM\...\{FC4086D6-E345-5F43-08BB-280FB57DAF49}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization EL (HKLM\...\{76AAF56B-93D8-161D-809A-EC05F3B913DA}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization EL (HKLM\...\{821D0A0E-F246-BE40-0D68-93883C14C410}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization EL (HKLM\...\{95A52FC1-C728-841D-1BFC-CC793B77B0A4}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization EL (HKLM\...\{BA26B70C-3D8C-2D14-4122-211FB3E6F691}) (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization EL (HKLM\...\{F8EBE530-A4D5-BF51-F623-3787E6B8A878}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization ES (HKLM\...\{063CED74-F5F0-870E-DC9C-2D78FDEDA3EE}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization ES (HKLM\...\{42FBD43F-DE53-6D4D-5134-E3C93B45CBEF}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization ES (HKLM\...\{5FEACE78-C338-9AED-FF05-7DE7E273C774}) (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization ES (HKLM\...\{88BD74C4-23AB-4554-915C-6E1F0C81F6CD}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization ES (HKLM\...\{A22CDEBA-6DB5-12CD-F6CE-6238C2D78363}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FI (HKLM\...\{13BB60AA-88F7-4B1F-2DEC-D81EEDE8B3AA}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FI (HKLM\...\{A3795528-F572-6314-C4E3-EE9DAF0FBF02}) (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FI (HKLM\...\{A48E2AB0-0866-7783-9657-E1709EB18D02}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FI (HKLM\...\{AC85CF50-9A55-0103-ADBF-365C37603AA4}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FI (HKLM\...\{C0BFC67D-E447-02C8-6046-C078DFE9EC97}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FR (HKLM\...\{37AA6227-FF2C-95AC-87C0-45DCC0BB87DA}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FR (HKLM\...\{4853A56D-7931-A08B-5BA7-8E2D61043DF9}) (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FR (HKLM\...\{94C72EBE-2908-F0AC-62DA-D61951830F8F}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FR (HKLM\...\{B349892D-B015-033C-4CA8-3635E6B655D7}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FR (HKLM\...\{E61CEF9A-BAC3-EAEE-F735-E257D2354DF2}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization HU (HKLM\...\{5B987681-3652-492B-6A11-E02AC0FE5959}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization HU (HKLM\...\{B28CF677-E2C8-12CA-52BB-19B6F066D36A}) (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization HU (HKLM\...\{BE8D6AB1-3049-2F0C-67FA-00C0A5D321A3}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization HU (HKLM\...\{DA0326BB-657D-AAFC-752C-363E8FA33755}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization HU (HKLM\...\{EB328356-1DF0-1CCE-3607-6361DD329219}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization IT (HKLM\...\{26567561-DFB2-2B63-9BA8-6A490ED37016}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization IT (HKLM\...\{43F6D22B-E0E9-EE90-9B62-1C5FC5D15A55}) (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization IT (HKLM\...\{86BFE5B4-1FCE-3C02-6373-92B1AE6431E8}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization IT (HKLM\...\{87E6EC29-AEC5-28CB-F773-93EB6C1B8A2B}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization IT (HKLM\...\{B873A1FB-5EA0-EE5F-A861-1E38880AD08E}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization JA (HKLM\...\{0742432E-42D9-2240-4CA1-8595CCCBAA77}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization JA (HKLM\...\{0809FEC1-EF86-51E9-8210-DC1B1BDB6745}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization JA (HKLM\...\{CA55697D-BD74-3ED8-6B21-D7EDAD3B7D02}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization JA (HKLM\...\{D4490E0F-8E7B-1097-B56A-7643C75F1C28}) (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization JA (HKLM\...\{EC9DF9FF-9D75-4CDD-1D58-A2E887B0A42E}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization KO (HKLM\...\{5FD706FF-6AD8-E372-A35A-879409982655}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization KO (HKLM\...\{7ABACA7E-6E59-0EF9-8FA3-6B32E5F58127}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization KO (HKLM\...\{CFC860C8-4F51-E08C-A74C-2E444ED06160}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization KO (HKLM\...\{DAB44116-0266-C65B-B643-AC11217C3041}) (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization KO (HKLM\...\{EAEAA839-44F4-22DF-D1CC-88C3B2A3D4B1}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NL (HKLM\...\{3AF70346-52C7-0334-606F-118D1C1CB7A2}) (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NL (HKLM\...\{3E196AAF-F81C-B384-E2AB-28EE2398FE5F}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NL (HKLM\...\{9338D693-38B7-1ED4-9B42-BFA1D5600CCB}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NL (HKLM\...\{A3973655-E448-4A1B-477C-988A79D132D9}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NL (HKLM\...\{A4E7CA0C-84EB-5E29-2F04-06C4E4790C2F}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NO (HKLM\...\{53AE8AC7-5213-67AF-0DC0-CED696B77643}) (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NO (HKLM\...\{59D2664C-949B-7FA7-9880-ECB993B6616A}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NO (HKLM\...\{6DC92550-D065-4B36-C4D3-D8D7A702A7A7}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NO (HKLM\...\{C971C145-258D-6650-7088-13DDB161327A}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NO (HKLM\...\{DAEFFE0C-CD05-1355-6AFC-7B3D4106A820}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization PL (HKLM\...\{970A40CA-46AB-986C-1798-976ED0EA00FA}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization PL (HKLM\...\{B2A83706-3F14-1532-20CD-B4EE715A8945}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization PL (HKLM\...\{DC9DFCBF-87DA-892C-6151-99CC9EF46E3E}) (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization PL (HKLM\...\{E392A425-53A7-DF90-96A0-E287A75DD3B2}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization PL (HKLM\...\{EBA09DAF-14B4-7BE7-676E-6E2FB21EDBDD}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization RU (HKLM\...\{44ED2CDA-4197-E9E9-B328-26E1FB749116}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization RU (HKLM\...\{4707CBFC-8ED4-463E-0FF9-DE86F4A743E9}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization RU (HKLM\...\{9AA4DD93-94BF-22EA-C9D2-7084F304A31B}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization RU (HKLM\...\{C1EFF2A2-DF4A-F6D1-B99C-1ED194AE9E78}) (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization RU (HKLM\...\{D6F47BB4-700A-F612-0671-5F69EA311BB7}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization SV (HKLM\...\{01FD9A26-3F61-9236-B360-BE5D043D82C0}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization SV (HKLM\...\{3450566C-4561-0EE8-B1AB-D5C79CCE8D2C}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization SV (HKLM\...\{379D900B-A785-6DB0-012E-434356A365B3}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization SV (HKLM\...\{46EB68BE-8AAC-8C2B-7284-8DEDE6B5CD2A}) (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization SV (HKLM\...\{C14A3A5B-8A86-C239-37D7-158211778C54}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TH (HKLM\...\{366C4FB5-CF6E-258B-418D-E6D29549A278}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TH (HKLM\...\{64D4CCC3-63DF-252D-D29D-03491670225D}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TH (HKLM\...\{7A6E431B-CF43-EC3E-FD7E-0A0AAB1B25FC}) (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TH (HKLM\...\{A50C89BC-8D8E-8828-824A-7171F6D583D5}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TH (HKLM\...\{FCE8438C-3272-D63F-479F-670F082B294B}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TR (HKLM\...\{0B5633F0-C415-2F08-671E-4C9E2FAACD45}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TR (HKLM\...\{25D1751E-7CA2-5F6D-0125-0A16E47AF9FE}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TR (HKLM\...\{89A1F076-19B8-A2B1-D5A3-E8247EFAF157}) (Version: 2016.0916.1515.27418 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TR (HKLM\...\{8DF90937-B869-9F76-5D45-5A8BDA0A33B6}) (Version: 2017.0922.1659.28737 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TR (HKLM\...\{B10089DE-934F-6E0F-683A-B788F89348DF}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden ChessBase 14 (HKLM-x32\...\{06B1C4CE-4FD7-4C57-AAB5-08EE35C06668}) (Version: 14.0.0.0 - ChessBase) ChessBase 14 64-bit (HKLM\...\{B961BAEB-F11E-4233-BCBD-B9039100220A}) (Version: 14.0.0.0 - ChessBase) Cool & Quiet (HKLM-x32\...\{1ADE1AA0-7F82-4BB1-B1BD-727DE438057B}) (Version: - ) DjVuLibre DjView 3.5.25.4+4.9.2 (HKLM-x32\...\DjVuLibre+DjView) (Version: 3.5.25.4+4.9.2 - DjVuZone) Document Capture Pro (HKLM-x32\...\{B4A3C072-87AF-4937-880D-3D7997111C0D}) (Version: 1.01.0000 - Seiko Epson Corporation) Epson Copy Utility 3.5 (HKLM-x32\...\{AA72FB28-73B4-49E5-B6B4-E78F44BBD0AD}) (Version: 3.5.0.0 - ) Epson Event Manager (HKLM-x32\...\{148C8BF9-E1B4-445D-AC67-2CABAE63949A}) (Version: 3.01.0009 - Seiko Epson Corporation) Epson Guida utente EPSON Perfection V370 Photo (HKLM-x32\...\EPSON Perfection V370 Photo Useg) (Version: - ) EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation) FastStone Capture 8.4 (HKLM-x32\...\FastStone Capture) (Version: 8.4 - FastStone Soft) FILEminimizer Pictures (HKLM-x32\...\FILEminimizer Pictures_is1) (Version: - balesio AG) FLV-Media-Player (HKLM-x32\...\{AB7A5DBA-BC45-489A-B4D2-2E8F8CABB9EA}) (Version: 2.0.3.2532 - HYBRIDWEB.de) foobar2000 v1.3.9 (HKLM-x32\...\foobar2000) (Version: 1.3.9 - Peter Pawlowski) Fritz 15 64-bit (HKLM\...\{E055F983-1A0C-4A1B-84BE-A0E5F03F279C}) (Version: 15.3.0.0 - ChessBase) GIMP 2.8.22 (HKLM\...\GIMP-2_is1) (Version: 2.8.22 - The GIMP Team) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 63.0.3239.132 - Google Inc.) Google Earth Plug-in (HKLM-x32\...\{57BB4801-61C8-4E74-9672-2160728A461E}) (Version: 7.1.5.1557 - Google) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden HandBrake 1.0.2 (HKLM-x32\...\HandBrake) (Version: 1.0.2 - ) HP LaserJet Professional CP1520 Series (HKLM-x32\...\{5C069542-CA13-4f1b-B90C-28C6430F4992}) (Version: - Hewlett-Packard) HP Support Assistant (HKLM-x32\...\{78E2C850-ADA6-420D-BA35-2F4A9BE733CC}) (Version: 8.5.37.19 - HP) HP Support Solutions Framework (HKLM-x32\...\{46B6ADF2-30ED-4FDD-8D06-132BBB3B31FE}) (Version: 12.8.47.1 - HP) HP Touchpoint Analytics Client (HKLM\...\{E5FB98E0-0784-44F0-8CEC-95CD4690C43F}) (Version: 4.0.2.1439 - HP Inc.) ICC for Windows 1.0 beta 9.8.10 (HKLM-x32\...\{CFF71C5A-D887-429C-A1F6-FD395C1823E8}_is1) (Version: 1.0 - Internet Chess Club, Inc.) iCloud (HKLM\...\{7464D896-C63C-412E-8ED3-3261C9F14E21}) (Version: 7.0.1.210 - Apple Inc.) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.4.1441 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2932 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.5.235 - Intel Corporation) Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation) iTunes (HKLM\...\{FE9519EC-7EA0-437C-99F3-0383EA941E23}) (Version: 12.7.0.166 - Apple Inc.) Java 8 Update 161 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180161F0}) (Version: 8.0.1610.12 - Oracle Corporation) JRiver Media Center 21 (HKLM-x32\...\Media Center 21) (Version: 21 - J. River, Inc.) KB4023057 (HKLM\...\{0C050BEE-16BE-4998-8959-2A421433DB6E}) (Version: 2.5.0.0 - Microsoft Corporation) Kodi (HKU\S-1-5-21-2984930238-3554751552-4076433840-1000\...\Kodi) (Version: - XBMC-Foundation) MakeMKV v1.10.3 (HKLM-x32\...\MakeMKV) (Version: v1.10.3 - GuinpinSoft inc) Medieval CUE Splitter (HKLM-x32\...\{B96D2269-568B-4CBF-9332-12FAE8B158F7}) (Version: 1.2.0 - Medieval Software) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Excel 2007 Help - Aggiornamento (KB963678) (HKLM-x32\...\{90120000-0016-0410-0000-0000000FF1CE}_ENTERPRISE_{9F57BDED-B51B-4D2F-B360-5B4EFAAF0F1A}) (Version: - Microsoft) Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Outlook 2007 Help - Aggiornamento (KB963677) (HKLM-x32\...\{90120000-001A-0410-0000-0000000FF1CE}_ENTERPRISE_{2278E02A-AB15-4BF7-B2B4-5C0EEB4B7EEB}) (Version: - Microsoft) Microsoft Office Powerpoint 2007 Help - Aggiornamento (KB963669) (HKLM-x32\...\{90120000-0018-0410-0000-0000000FF1CE}_ENTERPRISE_{C76C02F1-B07F-4974-876A-A18DEC9887C8}) (Version: - Microsoft) Microsoft Office Word 2007 Help - Aggiornamento (KB963665) (HKLM-x32\...\{90120000-001B-0410-0000-0000000FF1CE}_ENTERPRISE_{E5B82DB3-DD7D-4C45-BC5E-09864B26F9BC}) (Version: - Microsoft) Microsoft OneDrive (HKU\S-1-5-21-2984930238-3554751552-4076433840-1000\...\OneDriveSetup.exe) (Version: 17.3.7294.0108 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{4FFA2088-8317-3B14-93CD-4C699DB37843}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Monkey's Audio x64 (HKLM-x32\...\Monkey's Audio x64_is1) (Version: - ) Mozilla Firefox 54.0.1 (x86 it) (HKLM-x32\...\Mozilla Firefox 54.0.1 (x86 it)) (Version: 54.0.1 - Mozilla) Mozilla Firefox 59.0 (x64 en-US) (HKLM\...\Mozilla Firefox 59.0 (x64 en-US)) (Version: 59.0 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 57.0 - Mozilla) MPC-HC 1.7.13 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.13 - MPC-HC Team) MusicReading (HKLM-x32\...\MusicReading) (Version: - ) MyDriveConnect 4.0.3.2180 (HKLM-x32\...\MyDriveConnect) (Version: 4.0.3.2180 - TomTom) Native Instruments Kontakt 5 (HKLM-x32\...\Native Instruments Kontakt 5) (Version: - Native Instruments) Native Instruments Kontakt Factory Selection (HKLM-x32\...\Native Instruments Kontakt Factory Selection) (Version: - Native Instruments) Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: - Native Instruments) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) Peshka 2 (HKLM-x32\...\Peshka_is1) (Version: - ) Plex Media Server (HKLM-x32\...\{6713f73b-dbfe-45da-a517-33a93ff8c390}) (Version: 1.2.7.2987 - Plex, Inc.) Plex Media Server (HKLM-x32\...\{D2C8A865-4227-46D0-AD2B-D2BDFE3CFF48}) (Version: 1.2.2987 - Plex, Inc.) Hidden QUAD-CAPTURE Driver (HKLM\...\RolandRDID0117) (Version: - Roland Corporation) QuickShare (HKLM-x32\...\{55532499-5676-4DAE-9A57-AEB907A0A1DD}) (Version: 1.6.1.714 - Linkury Inc.) <==== ATTENTION QuickTime 7 (HKLM-x32\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.10.714.2016 - Realtek) Realtek Ethernet Diagnostic Utility (HKLM-x32\...\{DADC7AB0-E554-4705-9F6A-83EA82ED708E}) (Version: 2.0.2.11 - Realtek) Realtek USB Ethernet Controller Driver (HKLM-x32\...\{D8102684-7BA1-4948-88B9-535F84E6E588}) (Version: 8.6.626.2013 - Realtek) Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 5.1.0.1120 - Samsung Electronics) Signalyst HQPlayer Desktop 3 (HKLM-x32\...\HQPlayer Desktop 3) (Version: - Signalyst) Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation) Skype™ 7.31 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.31.104 - Skype Technologies S.A.) Snagit 11 (HKLM-x32\...\{1FB78CB6-F4EA-474F-8B0B-100EFACF3558}) (Version: 11.4.0 - TechSmith Corporation) Sony Mobile Update Engine (HKLM-x32\...\Update Engine) (Version: 2.15.5.201504081732 - Sony Mobile Communications Inc.) Sony PC Companion 2.10.303 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.303 - Sony) Stopping Plex (HKLM-x32\...\{B0ACB88E-38A1-4712-BD0C-C5463959127F}) (Version: 1.2.2987 - Plex, Inc.) Hidden Supporto applicazioni Apple (32 bit) (HKLM-x32\...\{3D1290E6-1F77-46D5-A715-A56679C8D4E3}) (Version: 6.0.2 - Apple Inc.) Supporto applicazioni Apple (64 bit) (HKLM\...\{D0E45DEC-F4B9-4370-A9DF-66837789C2EF}) (Version: 6.0.2 - Apple Inc.) Synology Assistant (remove only) (HKLM-x32\...\Synology Assistant) (Version: - ) The Best Of Garry (HKLM-x32\...\{44062709-47B8-4C2C-9D46-5BB137D28563}) (Version: 1.0.0 - Chess Informant) TP-LINK Archer T4UH Driver (HKLM-x32\...\{5AFCFBC9-8E12-48D4-9BC4-666661780C09}) (Version: 1.3.1 - TP-LINK) TP-LINK PLC Utility (HKLM-x32\...\{B0E80E49-FBC8-4A5B-B04C-222CBD95B2F6}) (Version: 2.1.2309 - TP-LINK) UNi Xonar Audio Driver (HKLM\...\C-Media Oxygen HD Audio Driver) (Version: - ) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) USB Audio 2.0 Stereo Driver v3.34.0 (HKLM-x32\...\Software_XMOS_USBAudioStDriver_3033_Setup) (Version: 3.34.0 - XMOS) USB Audio Driver for WaveIO v2.23.0 (HKLM-x32\...\USB Audio Driver for WaveIO v2.23.0) (Version: 2.23.0 - Audiokit) Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies) Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.2 - VideoLAN) WinRAR 5.30 beta 2 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.30.2 - win.rar GmbH) Yahoo Search Set (HKLM-x32\...\Yahoo! SearchSet) (Version: - Yahoo Inc.) Yahoo! Detect (HKLM-x32\...\YTdetect) (Version: - ) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-2984930238-3554751552-4076433840-1000_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-1E220088BD31}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => No File CustomCLSID: HKU\S-1-5-21-2984930238-3554751552-4076433840-1000_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems) ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Utente\AppData\Local\MEGAsync\ShellExtX64.dll -> No File ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Utente\AppData\Local\MEGAsync\ShellExtX64.dll -> No File ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Utente\AppData\Local\MEGAsync\ShellExtX64.dll -> No File ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2017-05-26] () ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2017-05-26] () ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2017-05-26] () ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Utente\AppData\Local\MEGAsync\ShellExtX64.dll -> No File ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Utente\AppData\Local\MEGAsync\ShellExtX64.dll -> No File ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Utente\AppData\Local\MEGAsync\ShellExtX64.dll -> No File ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2017-05-26] () ContextMenuHandlers1: [FineReader11ContextMenu] -> {79E48320-C6B5-49F1-992B-571D53586885} => C:\Program Files (x86)\ABBYY FineReader 11\FRIntegration.x64.dll [2012-01-19] (ABBYY.) ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Utente\AppData\Local\MEGAsync\ShellExtX64.dll -> No File ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2017-09-18] (Apple Inc.) ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-12-18] (Avira Operations GmbH & Co. KG) ContextMenuHandlers1: [SnagItMainShellExt] -> {CF74B903-3389-469c-B3B6-0204D204FCBD} => C:\Program Files (x86)\TechSmith\Snagit 11\DLLx64\SnagitShellExt64.dll [2014-03-03] (TechSmith Corporation) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-08-05] (Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-08-04] (Alexander Roshal) ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Utente\AppData\Local\MEGAsync\ShellExtX64.dll -> No File ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Utente\AppData\Local\MEGAsync\ShellExtX64.dll -> No File ContextMenuHandlers4: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Utente\AppData\Local\MEGAsync\ShellExtX64.dll -> No File ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Utente\AppData\Local\MEGAsync\ShellExtX64.dll -> No File ContextMenuHandlers4: [SnagItMainShellExt] -> {CF74B903-3389-469c-B3B6-0204D204FCBD} => C:\Program Files (x86)\TechSmith\Snagit 11\DLLx64\SnagitShellExt64.dll [2014-03-03] (TechSmith Corporation) ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2017-09-22] (Advanced Micro Devices, Inc.) ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> No File ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => -> No File ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2017-05-26] () ContextMenuHandlers6: [FineReader11ContextMenu] -> {79E48320-C6B5-49F1-992B-571D53586885} => C:\Program Files (x86)\ABBYY FineReader 11\FRIntegration.x64.dll [2012-01-19] (ABBYY.) ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-12-18] (Avira Operations GmbH & Co. KG) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-08-05] (Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-08-04] (Alexander Roshal) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {00CCF24B-2CF2-4DAE-A98F-BDA188F330E2} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant printer driver installation => C:\WINDOWS\TEMP\CP1520series_n_Basic.exe <==== ATTENTION Task: {0257A76B-47C1-4DAA-A5B9-DD92FCB7349F} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {06C58D6C-427D-42ED-B176-FEACAA5B429A} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe [2017-05-19] (Samsung Electronics Co. Ltd.) Task: {08CE80F7-A9B3-4AD1-919D-E7354B9F3829} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.) Task: {0B8AB84D-B68D-46D4-92CB-A4DEACC90403} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-raffaele_riga@tin.it => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated) Task: {0C210C4F-F945-46D1-8138-CE396ED5D823} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION Task: {1168D183-9E86-4671-B905-4B784BC3F05B} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {19460884-5CBA-47FB-9DCB-3B2FCEF1A7BB} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {1EEE6DE3-4097-4CAB-BFA9-80C905DC8E05} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe Task: {213DC732-20FB-43D0-B51C-B3E31D0D8A1B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-01-09] (Adobe Systems Incorporated) Task: {21ED5AE9-F882-4FD5-908A-458706C06378} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe Task: {227B3A42-DB83-4763-BB57-A69AED82EDED} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION Task: {23ABF77E-58C6-4910-864B-8DB985B85290} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe Task: {2401C6D1-FBE0-4DAD-91A0-58767161D9DE} - System32\Tasks\SK.Enhancer-S-161304646 => c:\programdata\quickset\sk.enhancer\SK.Enhancer.exe <==== ATTENTION Task: {251B33E7-6C99-4885-87A6-EB009B8C01ED} - System32\Tasks\{6C6B0D72-B1C7-4C1B-8FD9-D36070CBB64E} => E:\Download\jxpiinstall(1).exe Task: {25EDEBEE-FD43-48D6-BEE8-A47894D92811} - System32\Tasks\TechSmith Updater => C:\Program Files (x86)\Common Files\TechSmith Shared\Updater\TSCUpdClt.exe [2013-10-04] (TechSmith Corporation) Task: {291D0AAA-0A3B-4F79-8C4E-9FD1774B578B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-07-24] (Apple Inc.) Task: {3888E493-2895-4615-8445-8309D336A9B9} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION Task: {43B7FC40-7286-4AD6-A4CA-408E74745184} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {44DE397E-B7B9-4AFE-A158-2586772BA6F3} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION Task: {480F4B3C-057F-4766-BCEF-AE0C6D9BE21C} - System32\Tasks\{C413C54B-09E5-4108-B777-51F1881BFCAC} => "c:\program files (x86)\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/7.24.0.104/it/abandoninstall?source=lightinstaller&page=tsInstall Task: {4AEAD4A4-75C0-4E30-8B09-EC6EDD3D3F75} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION Task: {4BAB6E5C-005B-4511-88B0-21391D1E193E} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION Task: {4E71DA3D-F2B9-4FB4-9EFF-1E2CE986B51C} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2017-05-09] (Apple Inc.) Task: {53EEEC33-E2EA-4B18-B38D-E7F26DB11653} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.) Task: {6078FC5E-88B8-4AEC-8DD6-E3DB51B8E59C} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2017-11-21] () Task: {62A1DD48-028B-45F2-A202-3372FF5C4A32} - \HDvid-Codec V9.0-enabler -> No File <==== ATTENTION Task: {6308D9BE-A3F0-4D7C-A54D-BA53EF399E0E} - System32\Tasks\{0E215D01-9542-4F03-B718-4BAE4B648C8C} => E:\Download\jxpiinstall(1).exe Task: {655C96C1-C7B0-4289-882F-65567EF06861} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION Task: {6C224116-AD17-48FF-96DB-DB2762A7904A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2017-11-08] (HP Inc.) Task: {7A84DD13-9DDD-4BBC-9D1D-1458DD483BA9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.) Task: {807F85FC-113B-43BE-860C-69B6081C4580} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe Task: {8364F2E6-C160-4872-9324-CEA9A26B88E1} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe Task: {8AB7FFB5-F68D-4482-950A-358B11436A1F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2018-01-10] (HP Inc.) Task: {9091F380-7BFE-48B7-BB61-64BD46C4FECB} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {9253BBF9-3949-4BB9-8349-7A9AAD1DC258} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {98BA5F6D-63B9-4410-864B-E63EA6E15505} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {9911B4D3-B4C8-44E3-A5D2-D6FE77119F60} - \HDvid-Codec V9.0-updater -> No File <==== ATTENTION Task: {9C460147-7C26-427E-943B-E4F346D3239E} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe Task: {9D6228DD-51AE-4A98-8ADF-5FA1A3B56E1B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION Task: {A0EE444E-AEE5-4F60-ABEA-914FFD603D91} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {A1F7FAA7-4801-4571-BC1C-53C12EC037C7} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {A351547C-3FD7-433A-97A1-B75A788D50BA} - System32\Tasks\SidebarExecute => C:\Program Files\Windows Sidebar\sidebar.exe Task: {A4346D4D-1C2E-46B7-A6D6-1DA320F939A8} - System32\Tasks\HPCeeScheduleForUtente => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2016-01-22] (Hewlett-Packard) Task: {A53DB6D6-667F-47D2-B283-554E022CC68D} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe Task: {A8136994-E466-4F31-B81D-C4722F8F2075} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2017-06-22] (HP Inc.) Task: {AEC2E51B-129C-48EE-B4E7-990136326806} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2017-12-18] (Avira Operations GmbH & Co. KG) Task: {AEEF4E62-A653-483E-B696-C23C820669E2} - \HDvid-Codec V9.0-codedownloader -> No File <==== ATTENTION Task: {B4015760-C422-43F9-8EEC-8506055B4656} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {B4E5FE41-EC45-4B7C-B1D1-258DEB82F60C} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {BBDD8E07-C671-466E-9ADD-968D486A5F42} - \HDvid-Codec V9.0-firefoxinstaller -> No File <==== ATTENTION Task: {BCE34B99-C2C2-4422-993D-99D4B8589580} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.) Task: {C024129D-960D-4A41-9581-92058E1242E4} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2018-01-09] (Microsoft Corporation) Task: {C0A2884D-0AE5-49C0-8235-F37A13769035} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe Task: {C2E79251-6D76-48DD-A3EB-DBA113177642} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe Task: {C5D0D9D1-BA2E-4F6D-A1DB-6543D6DB21D9} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27] (Adobe Systems Incorporated) Task: {CDAD53E6-4962-4E1F-B6AD-33117EDD5E1E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {CE33617E-C8B9-416C-A7F1-5E9F88166BAD} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION Task: {DC99FDD4-41E3-4BB2-9A42-1C411D12B72E} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe Task: {DDFAD978-BFE6-4386-B8A4-2336CE6C9D9C} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION Task: {E1FA2308-D7AA-44A2-B950-9B5EF4F385C8} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe Task: {E6110276-A4E8-4A49-B2DA-FA04123FC7EF} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe Task: {ED5BB113-83D1-43B8-B079-6F88C9A79C03} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe Task: {F837C772-E5DD-4800-8C75-57E03F7E324B} - \HDvid-Codec V9.0-chromeinstaller -> No File <==== ATTENTION Task: {FD6B9AC1-D595-44BC-93F3-701C71A6C205} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION Task: {FE03DD36-BB5A-4513-ACCA-1BDC1F910846} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\WINDOWS\Tasks\HPCeeScheduleForUtente.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe Task: C:\WINDOWS\Tasks\SK.Enhancer-S-161304646.job => c:\programdata\quickset\sk.enhancer\SK.Enhancer.exeG/schedule /profile c:\programdata\quickset\sk.enhancer\161304646.iniUtenteSK.Enh <==== ATTENTION ==================== Shortcuts & WMI ======================== (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2017-09-29 14:41 - 2017-09-29 14:41 - 000184432 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll 2017-09-29 14:41 - 2017-09-29 14:41 - 000419840 _____ () c:\windows\system32\SSDM.dll 2016-09-01 17:12 - 2016-09-01 17:12 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2017-09-01 01:49 - 2017-09-01 01:49 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2016-11-04 18:54 - 2015-09-25 10:54 - 000048856 _____ () C:\Windows\runSW.exe 2015-05-11 08:12 - 2015-05-11 08:12 - 000248736 _____ () C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe 2017-05-26 02:18 - 2017-05-26 02:18 - 000492112 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll 2017-12-13 18:46 - 2017-11-26 13:23 - 011044864 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2017-12-13 18:46 - 2017-11-26 13:01 - 001804288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2018-01-18 18:07 - 2018-01-18 18:08 - 000086528 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.13.274.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2018-01-18 18:07 - 2018-01-18 18:08 - 000195072 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.13.274.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2018-01-18 18:07 - 2018-01-18 18:08 - 024677376 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.13.274.0_x64__kzf8qxf38zg5c\SkyWrap.dll 2018-01-03 18:02 - 2018-01-03 18:08 - 002550272 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.13.274.0_x64__kzf8qxf38zg5c\skypert.dll 2018-01-18 18:07 - 2018-01-18 18:08 - 000667648 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.13.274.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll 2015-12-31 18:51 - 2008-07-11 16:04 - 000200704 _____ () C:\Windows\SysWOW64\HsMgr.exe 2015-12-31 18:51 - 2008-07-11 16:03 - 000282112 _____ () C:\Windows\System\HsMgr64.exe 2017-09-11 13:45 - 2017-09-11 13:45 - 000092472 _____ () C:\Program Files\iTunes\zlib1.dll 2017-09-11 13:45 - 2017-09-11 13:45 - 001356088 _____ () C:\Program Files\iTunes\libxml2.dll 2015-01-25 10:01 - 2015-06-10 10:13 - 000113024 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe 2017-05-15 01:38 - 2017-05-15 01:38 - 034957896 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe 2017-12-28 00:12 - 2017-12-28 00:12 - 008056840 _____ () C:\Program Files\Signalyst\HQPlayer Desktop 3\HQPlayer-desktop.exe 2017-04-08 21:41 - 2017-04-08 21:41 - 000404480 _____ () C:\Program Files\Signalyst\HQPlayer Desktop 3\libFLAC.dll 2018-01-08 21:40 - 2016-02-16 15:06 - 000229376 _____ () c:\program files\xmos\usbaudiostdriver_3033\xmosusbaudiost3033asio_x64.dll 2016-01-11 18:13 - 2014-05-03 18:56 - 000027648 _____ () C:\Program Files (x86)\Nemesys\dist\servicemanager.pyd 2016-01-11 18:13 - 2014-05-03 18:55 - 000110080 _____ () C:\Program Files (x86)\Nemesys\dist\pywintypes27.dll 2016-01-11 18:13 - 2014-05-03 18:55 - 000042496 _____ () C:\Program Files (x86)\Nemesys\dist\win32service.pyd 2016-01-11 18:13 - 2014-05-03 18:56 - 000100352 _____ () C:\Program Files (x86)\Nemesys\dist\win32api.pyd 2016-01-11 18:13 - 2015-05-23 09:41 - 000910336 _____ () C:\Program Files (x86)\Nemesys\dist\_hashlib.pyd 2016-01-11 18:13 - 2014-05-03 18:59 - 000396800 _____ () C:\Program Files (x86)\Nemesys\dist\pythoncom27.dll 2016-01-11 18:13 - 2014-05-03 18:55 - 000018432 _____ () C:\Program Files (x86)\Nemesys\dist\win32event.pyd 2016-01-11 18:13 - 2015-05-23 09:40 - 000046080 _____ () C:\Program Files (x86)\Nemesys\dist\_socket.pyd 2016-01-11 18:13 - 2015-05-23 09:40 - 001315328 _____ () C:\Program Files (x86)\Nemesys\dist\_ssl.pyd 2016-01-11 18:13 - 2015-05-23 09:41 - 000010240 _____ () C:\Program Files (x86)\Nemesys\dist\select.pyd 2016-01-11 18:13 - 2015-05-23 09:40 - 000127488 _____ () C:\Program Files (x86)\Nemesys\dist\pyexpat.pyd 2016-01-11 18:13 - 2014-05-19 23:26 - 000014848 _____ () C:\Program Files (x86)\Nemesys\dist\netifaces.pyd 2016-01-11 18:13 - 2015-02-02 06:03 - 000036864 _____ () C:\Program Files (x86)\Nemesys\dist\_psutil_windows.pyd 2016-01-11 18:13 - 2015-05-23 09:40 - 000088064 _____ () C:\Program Files (x86)\Nemesys\dist\_ctypes.pyd 2016-11-08 13:15 - 2016-11-08 13:15 - 000083440 _____ () C:\Program Files (x86)\Plex\Plex Media Server\zlib.dll 2016-11-08 13:15 - 2016-11-08 13:15 - 000203248 _____ () C:\Program Files (x86)\Plex\Plex Media Server\libidn.dll 2012-11-22 20:35 - 2012-03-06 14:27 - 001198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2015-01-25 10:01 - 2012-04-30 10:57 - 000039936 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\TMonitorAPI.dll 2015-01-25 10:01 - 2015-10-20 17:44 - 000242176 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\MExplorer.dll 2015-11-06 10:46 - 2015-11-06 10:46 - 002385280 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\libxt.dll 2015-01-25 10:01 - 2015-04-21 12:22 - 000053248 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\VObject.dll 2015-09-07 14:59 - 2015-09-07 14:59 - 000237440 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\Report.dll 2015-07-15 09:45 - 2015-07-15 09:45 - 000802304 _____ () C:\Program Files (x86)\Sony\Sony PC Companion\PhoneUpdate.dll 2016-11-08 13:15 - 2016-11-08 13:15 - 001083376 _____ () C:\Program Files (x86)\Plex\Plex Media Server\libxml2.dll 2016-11-08 13:15 - 2016-11-08 13:15 - 000115696 _____ () C:\Program Files (x86)\Plex\Plex Media Server\soci_core-vc80-3_0.dll 2016-11-08 13:15 - 2016-11-08 13:15 - 000059888 _____ () C:\Program Files (x86)\Plex\Plex Media Server\soci_sqlite3-vc80-3_0.dll 2016-11-08 13:15 - 2016-11-08 13:15 - 000772080 _____ () C:\Program Files (x86)\Plex\Plex Media Server\tag.dll 2016-11-08 13:15 - 2016-11-08 13:15 - 001741296 _____ () C:\Program Files (x86)\Plex\Plex Media Server\opencv_imgproc2411.dll 2016-11-08 13:15 - 2016-11-08 13:15 - 001962992 _____ () C:\Program Files (x86)\Plex\Plex Media Server\opencv_core2411.dll 2016-11-08 13:15 - 2016-11-08 13:15 - 000025584 _____ () C:\Program Files (x86)\Plex\Plex Media Server\lyric_lite.dll 2016-11-08 13:15 - 2016-11-08 13:15 - 000050160 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\_socket.pyd 2016-11-08 13:15 - 2016-11-08 13:15 - 000032240 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\_ssl.pyd 2016-11-08 13:15 - 2016-11-08 13:15 - 000022000 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\_hashlib.pyd 2016-11-08 13:15 - 2016-11-08 13:15 - 000041456 _____ () C:\Program Files (x86)\Plex\Plex Media Server\Exts\simplejson\_speedups.pyd 2016-11-08 13:15 - 2016-11-08 13:15 - 000930288 _____ () C:\Program Files (x86)\Plex\Plex Media Server\Exts\lxml\etree.pyd 2016-11-08 13:15 - 2016-11-08 13:15 - 000074736 _____ () C:\Program Files (x86)\Plex\Plex Media Server\libexslt.dll 2016-11-08 13:15 - 2016-11-08 13:15 - 000190960 _____ () C:\Program Files (x86)\Plex\Plex Media Server\libxslt.dll 2016-11-08 13:15 - 2016-11-08 13:15 - 000218096 _____ () C:\Program Files (x86)\Plex\Plex Media Server\Exts\lxml\objectify.pyd 2016-11-08 13:15 - 2016-11-08 13:15 - 000018928 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\select.pyd 2016-11-08 13:15 - 2016-11-08 13:15 - 000095216 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\_ctypes.pyd 2016-11-08 13:15 - 2016-11-08 13:15 - 000143344 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\pyexpat.pyd 2016-11-08 13:15 - 2016-11-08 13:15 - 000694256 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\unicodedata.pyd 2017-09-01 01:49 - 2017-09-01 01:49 - 001042232 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2016-09-01 17:13 - 2016-09-01 17:13 - 000080184 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2017-09-01 01:49 - 2017-09-01 01:49 - 000189752 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll 2017-06-04 06:19 - 2017-06-04 06:19 - 052051552 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\libcef.dll 2017-05-30 00:39 - 2017-05-30 00:39 - 000118272 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\fs-ext\build\Release\fs-ext.node 2017-05-30 00:39 - 2017-05-30 00:39 - 000214528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node 2017-05-30 00:38 - 2017-05-30 00:38 - 000117248 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ref\build\Release\binding.node 2017-05-30 00:39 - 2017-05-30 00:39 - 000125952 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ffi\build\Release\ffi_bindings.node 2017-06-04 06:47 - 2017-06-04 06:47 - 000099424 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin.dll 2017-05-30 00:39 - 2017-05-30 00:39 - 000086528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\idle-gc\build\Release\idle-gc.node ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\ProgramData\TEMP:A4F602C6 [209] ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2009-06-10 22:00 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-2984930238-3554751552-4076433840-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Utente\AppData\Local\Microsoft\Windows\Themes\Amore (2)\DesktopBackground\pv_setwallpaper.bmp DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{28C1CBE4-FDEF-421E-ABA6-31C2D3EA73D3}] => (Allow) C:\Users\Utente\AppData\Local\Temp\7zS78A1\Installer\hpbcsiInstaller.exe FirewallRules: [{87C938C3-161A-4CCC-A65E-FD8A87EFE981}] => (Allow) C:\Users\Utente\AppData\Local\Temp\7zS78A1\Installer\hpbcsiInstaller.exe FirewallRules: [{6A40D780-A48D-47FB-91CA-E951D1F9458F}] => (Allow) C:\Users\Utente\AppData\Local\Temp\7zS494E\Installer\hpbcsiInstaller.exe FirewallRules: [{4E3F4354-0B7A-4F45-8DE5-6442650C0A21}] => (Allow) C:\Users\Utente\AppData\Local\Temp\7zS494E\Installer\hpbcsiInstaller.exe FirewallRules: [{29813DF5-6EAF-46AC-8C4C-C60E75CA1BEE}] => (Allow) C:\Users\Utente\AppData\Local\Temp\7zS40B2\Installer\hpbcsiInstaller.exe FirewallRules: [{60937E21-49DB-4460-B3E6-24E1F4377279}] => (Allow) C:\Users\Utente\AppData\Local\Temp\7zS40B2\Installer\hpbcsiInstaller.exe FirewallRules: [{C9DF5BB8-2D28-41FD-995D-B21C633FCCE8}] => (Allow) C:\Users\Utente\AppData\Local\Temp\7zS3ED5\HPDiagnosticCoreUI.exe FirewallRules: [{DC0A4EDB-130D-4ED9-A31A-B20F4439F30C}] => (Allow) C:\Users\Utente\AppData\Local\Temp\7zS3ED5\HPDiagnosticCoreUI.exe FirewallRules: [{F3DD9C58-7A76-429F-AC89-EA269FDB454E}] => (Allow) C:\Users\Utente\AppData\Local\Temp\7zS18B6\HPDiagnosticCoreUI.exe FirewallRules: [{A6AE53F4-3D84-43E6-9521-219DB1DEB243}] => (Allow) C:\Users\Utente\AppData\Local\Temp\7zS18B6\HPDiagnosticCoreUI.exe FirewallRules: [{85EA2686-14F1-4CC9-850B-A73DD61DD1CB}] => (Allow) C:\Users\Utente\AppData\Local\Temp\7zS45C8\Installer\hpbcsiInstaller.exe FirewallRules: [{B69CD860-2155-48DC-9BF4-F33D2AD397E5}] => (Allow) C:\Users\Utente\AppData\Local\Temp\7zS45C8\Installer\hpbcsiInstaller.exe FirewallRules: [UDP Query User{CE7C82E3-59A0-457A-8246-5CADBA4F9E17}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe FirewallRules: [TCP Query User{C37C0F56-97E0-4976-A65A-66A9CD0330F9}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe FirewallRules: [{60D83840-1580-4162-8C5E-F3E5E822A603}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{FAD2F947-D207-4F4E-8EC9-B6B778AD9AC1}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [UDP Query User{AEA0C249-0238-494C-9786-185F5CB1307F}C:\program files (x86)\kodi\kodi.exe] => (Block) C:\program files (x86)\kodi\kodi.exe FirewallRules: [TCP Query User{97069574-CD03-4278-9D39-606161D49906}C:\program files (x86)\kodi\kodi.exe] => (Block) C:\program files (x86)\kodi\kodi.exe FirewallRules: [{19A9FEE2-69E3-4762-9EB8-AC5328B59FE5}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex DLNA Server.exe FirewallRules: [{79C4031C-3E85-452E-B29F-2A17986AEFE2}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe FirewallRules: [{FB7856E7-DFB5-4D22-BB21-AC18ADD6708B}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe FirewallRules: [UDP Query User{F212A8C7-10A0-4E78-995A-A0FBCE5CB343}C:\program files (x86)\synology\assistant\dsassistant.exe] => (Block) C:\program files (x86)\synology\assistant\dsassistant.exe FirewallRules: [TCP Query User{D01485A9-94C3-4995-A643-42EB794D80A0}C:\program files (x86)\synology\assistant\dsassistant.exe] => (Block) C:\program files (x86)\synology\assistant\dsassistant.exe FirewallRules: [{FF71F945-6E0A-4A84-AC2B-AEFA0B4700C0}] => (Allow) C:\Users\Utente\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{88CB28D3-B574-439F-B857-A587E2E3CDBE}] => (Allow) C:\Users\Utente\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{86131B2D-083F-44FF-B42E-7A6F925B4B3E}] => (Allow) C:\Users\Utente\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{680D8F4D-973F-41A2-B3BF-71752700F772}] => (Allow) C:\Users\Utente\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{B1965326-7C56-4087-AEF3-1398259BFDBC}] => (Allow) C:\Users\Utente\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{18DD0FD5-CF75-4147-8452-DACF03E146FB}] => (Allow) C:\Users\Utente\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{4CAA6C63-DA5C-4FA2-AEB2-42686AF5F4C5}] => (Block) C:\program files (x86)\tp-link\tp-link plc utility\tpplc.exe FirewallRules: [{C711158F-9339-4BA6-966F-93FC206AA0CD}] => (Block) C:\program files (x86)\tp-link\tp-link plc utility\tpplc.exe FirewallRules: [UDP Query User{12E4AD8D-9C5C-4C90-9509-B8883EAC2459}C:\program files (x86)\tp-link\tp-link plc utility\tpplc.exe] => (Allow) C:\program files (x86)\tp-link\tp-link plc utility\tpplc.exe FirewallRules: [TCP Query User{E17AFF53-29D7-4912-9378-34A9D9DDCD03}C:\program files (x86)\tp-link\tp-link plc utility\tpplc.exe] => (Allow) C:\program files (x86)\tp-link\tp-link plc utility\tpplc.exe FirewallRules: [{F0B6AC49-CD80-4468-8823-EDF11F7BAF9F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{016F7305-A7D9-41D3-94DF-926E99D3DD69}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{0F9E903C-91A4-4AF7-B3D7-AED4E2328349}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{66CD0171-634F-4A06-A842-CAC60E5110AB}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{6F3564F5-E05C-467A-A0F7-C9127DBF4AB0}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{1110E9A6-60C7-43E1-BA56-D56DBB15E800}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{745F0AC9-FF5C-4537-912E-059C656A8AD0}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgmfapx.exe FirewallRules: [{CB3F2A51-FB85-412D-A42A-B4160B15B1FE}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgmfapx.exe FirewallRules: [{367FFB13-5A6D-4B6C-8604-3AF79AF4CFAB}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{55A98893-A1C1-419F-BD2D-AA52B45BDD06}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{0081170A-94A1-474B-96DB-C1CBBD1807EA}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{565169A9-4E13-4F4D-88DB-4FE1B67C7481}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{EDD59816-2268-4046-B8B7-2C26C0F483E2}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe FirewallRules: [{8B5FA6C7-5A78-4586-8285-FB2F6CC20C1F}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe FirewallRules: [{7A751C9A-5417-4594-BFCA-3A2731C9164D}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgdiagex.exe FirewallRules: [{17584986-77D9-409C-88B2-9EDF5B6AC08E}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgdiagex.exe FirewallRules: [{963D4AE3-4B89-4C58-AC44-D82BDC60812E}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgemca.exe FirewallRules: [{A46A1530-ADC2-4F88-BC4C-147C845A1929}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgemca.exe FirewallRules: [{ED668998-D325-4F27-97B7-C3C6DF70DD23}] => (Allow) E:\bb\BBHelper\BandinaBoxServer.exe FirewallRules: [{8BC72A04-B754-4AA0-81E5-8B9993BE2CA4}] => (Allow) E:\bb\BBHelper\BandinaBoxServer.exe FirewallRules: [TCP Query User{82B46BEF-0F3D-4E00-8858-403590493FB4}C:\users\utente\appdata\roaming\exabi\olgi.exe] => (Block) C:\users\utente\appdata\roaming\exabi\olgi.exe FirewallRules: [UDP Query User{BD61F8B1-DF1E-4890-854D-25C74D6880F8}C:\users\utente\appdata\roaming\exabi\olgi.exe] => (Block) C:\users\utente\appdata\roaming\exabi\olgi.exe FirewallRules: [TCP Query User{40810B2E-2043-42E3-AECA-485BB7AEFBA6}C:\program files (x86)\orbitdownloader\orbitnet.exe] => (Block) C:\program files (x86)\orbitdownloader\orbitnet.exe FirewallRules: [UDP Query User{E305C4EB-AA69-4127-9EE8-6892EA76714E}C:\program files (x86)\orbitdownloader\orbitnet.exe] => (Block) C:\program files (x86)\orbitdownloader\orbitnet.exe FirewallRules: [TCP Query User{9884371F-1773-476C-AC63-A3C0A0D96413}C:\program files (x86)\orbitdownloader\orbitnet.exe] => (Block) C:\program files (x86)\orbitdownloader\orbitnet.exe FirewallRules: [UDP Query User{BB1E6F05-64AF-4623-AA11-D2AD89997181}C:\program files (x86)\orbitdownloader\orbitnet.exe] => (Block) C:\program files (x86)\orbitdownloader\orbitnet.exe FirewallRules: [TCP Query User{DBA41B60-5418-4E6E-921E-AF937123BDAA}E:\program files\reaper (x64)\reamote.exe] => (Block) E:\program files\reaper (x64)\reamote.exe FirewallRules: [UDP Query User{4EC2E2AB-5E67-4002-AB35-3C78A70C34CF}E:\program files\reaper (x64)\reamote.exe] => (Block) E:\program files\reaper (x64)\reamote.exe FirewallRules: [{B4181144-4594-4A4C-95BE-D8A67B555021}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgmfapx.exe FirewallRules: [{A5B48FE6-D5A3-4BDD-AA47-D326B692288E}] => (Allow) C:\Program Files (x86)\AVG\AVG2013\avgmfapx.exe FirewallRules: [TCP Query User{699ACDD5-DD88-433E-925D-60A0546CF7E7}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe FirewallRules: [UDP Query User{791C8D82-E13A-4F3B-A917-2D549CF7F530}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe FirewallRules: [TCP Query User{FF7FE178-6E63-4A35-91ED-7C9F46FD0BBA}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe FirewallRules: [UDP Query User{E9E0902C-D391-48A8-AAB4-F6834278604C}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe FirewallRules: [TCP Query User{E7BB91C4-BD99-43E8-A45E-C27B30582E1A}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe FirewallRules: [UDP Query User{438CF1EF-612A-4C3F-A68D-AD4BF17726A0}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe FirewallRules: [TCP Query User{B6A4B7E7-B4C1-4CD8-A803-D718F07D0636}C:\users\utente\appdata\roaming\popcorn time\node-webkit\nw.exe] => (Allow) C:\users\utente\appdata\roaming\popcorn time\node-webkit\nw.exe FirewallRules: [UDP Query User{6E515148-E606-4A7F-9B17-9CEF63791883}C:\users\utente\appdata\roaming\popcorn time\node-webkit\nw.exe] => (Allow) C:\users\utente\appdata\roaming\popcorn time\node-webkit\nw.exe FirewallRules: [{8B79EC42-0119-4096-82C8-B276544E36BC}] => (Allow) LPort=8298 FirewallRules: [{8713859F-2997-438E-8886-858958D8A9FE}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe FirewallRules: [{694E32C7-51EF-49BF-AC68-C351EE0198BC}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe FirewallRules: [{E78BCE54-909B-41E8-A990-17401900814D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{C9FF8766-D32E-4653-BB5F-41FB9B0FBC5B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{354BEA5D-19E0-4B84-BE4D-B873020A5796}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe FirewallRules: [{6FE74D7E-17FE-40E4-B449-D336229649CE}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe FirewallRules: [TCP Query User{C161FE83-85E4-4905-9F7D-BAE4564F7EA4}C:\users\utente\desktop\u1405.exe] => (Allow) C:\users\utente\desktop\u1405.exe FirewallRules: [UDP Query User{D1CBA6B4-43E8-4E7C-B58B-48B58587AC63}C:\users\utente\desktop\u1405.exe] => (Allow) C:\users\utente\desktop\u1405.exe FirewallRules: [{DCD4932B-53DC-4161-8506-201D532DF5CE}] => (Allow) C:\Program Files (x86)\Sony Mobile\Update Engine\Sony Mobile Update Engine.exe FirewallRules: [{B2E66FB0-45DE-4AB5-B7E1-55FC518D18D9}] => (Allow) C:\Program Files (x86)\Sony Mobile\Update Engine\Sony Mobile Update Engine.exe FirewallRules: [TCP Query User{EB505AE0-126F-4735-8D94-3F1B0DE7480A}C:\windows\splwow64.exe] => (Block) C:\windows\splwow64.exe FirewallRules: [UDP Query User{6F38117E-F30A-4414-A2F8-F634DAFFDBDC}C:\windows\splwow64.exe] => (Block) C:\windows\splwow64.exe FirewallRules: [{B74D5C17-FDAE-4B9D-A22F-97BFC1C527F9}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [TCP Query User{11275683-0721-4280-9ECE-4384FBBA835F}C:\users\utente\desktop\u1502.exe] => (Block) C:\users\utente\desktop\u1502.exe FirewallRules: [UDP Query User{22AC78B1-B3BE-4F26-97E8-970EFC53A904}C:\users\utente\desktop\u1502.exe] => (Block) C:\users\utente\desktop\u1502.exe FirewallRules: [TCP Query User{F785B4A5-9E8C-4A7A-AD7D-671096EB74FA}C:\program files (x86)\signalyst\hqplayer desktop 3\hqplayer-desktop.exe] => (Allow) C:\program files (x86)\signalyst\hqplayer desktop 3\hqplayer-desktop.exe FirewallRules: [UDP Query User{2F5794D2-029E-45C7-B1AD-7E88D50C272B}C:\program files (x86)\signalyst\hqplayer desktop 3\hqplayer-desktop.exe] => (Allow) C:\program files (x86)\signalyst\hqplayer desktop 3\hqplayer-desktop.exe FirewallRules: [TCP Query User{057876F1-0E4E-49EA-BA0C-0CA8EED78C92}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe FirewallRules: [UDP Query User{76777D55-F1E8-43ED-A0CC-8081538725F6}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe FirewallRules: [{B2541AD8-BF7E-4F45-B148-69A8749CE92F}] => (Allow) E:\Program Files (x86)\MisuraInternetSpeedTest\dist\mist.exe FirewallRules: [{5BB392AE-A5BC-4C9F-8FCA-7A412D7D0954}] => (Allow) E:\Program Files (x86)\MisuraInternetSpeedTest\dist\mist.exe FirewallRules: [{8E5296A9-101B-4464-847A-36675DB9E0D1}] => (Allow) E:\Program Files (x86)\MisuraInternetSpeedTest\dist\mist.exe FirewallRules: [{C79C305E-9D04-4207-8F00-F025E40108B5}] => (Allow) C:\Program Files (x86)\Nemesys\dist\login.exe FirewallRules: [{2E19E299-623C-4200-B165-39843525F7A3}] => (Allow) C:\Program Files (x86)\Nemesys\dist\login.exe FirewallRules: [{8A5B28D2-29E7-49C0-996B-1323E52C90C1}] => (Allow) C:\Program Files (x86)\Nemesys\dist\login.exe FirewallRules: [{9DDE6AB4-E5B0-410D-BBF8-C771935CE244}] => (Allow) C:\Program Files (x86)\Nemesys\dist\login.exe FirewallRules: [TCP Query User{5DCDC5B7-3711-4E06-A40A-78FA6B507F12}C:\program files (x86)\synology\assistant\dsassistant.exe] => (Allow) C:\program files (x86)\synology\assistant\dsassistant.exe FirewallRules: [UDP Query User{F864404F-F79A-42E4-82FC-1EA37AD6F84A}C:\program files (x86)\synology\assistant\dsassistant.exe] => (Allow) C:\program files (x86)\synology\assistant\dsassistant.exe FirewallRules: [{114D2B4B-5D1A-404C-AAFE-3C777FACD111}] => (Allow) C:\Users\Utente\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{E28438E8-91AE-4B16-B6FC-F90334DB2E74}] => (Allow) C:\Users\Utente\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{3E2BBF0C-0EBF-4762-A2FA-3E5FF6833E99}] => (Allow) C:\Program Files (x86)\VodBurner\vodburner.exe FirewallRules: [{8805232B-FEA7-4650-B73F-D167616CED12}] => (Allow) C:\Program Files (x86)\VodBurner\vodburner.exe FirewallRules: [{58645A15-6149-4D0C-9C4B-80D8EF949246}] => (Allow) C:\Program Files (x86)\VodBurner\vodburner.exe FirewallRules: [{BD96E420-7FC8-4AE9-9D32-8D37288AC3CD}] => (Allow) C:\Program Files (x86)\VodBurner\vodburner.exe FirewallRules: [{52705260-3F62-4D82-9A57-E9C69376257E}] => (Allow) C:\Program Files\iTunes\iTunes.exe FirewallRules: [TCP Query User{11A45294-8EB0-470E-B486-D2DE85DA2CB3}C:\users\utente\appdata\roaming\kodi\userdata\addon_data\program.plexus\acestream\ace_engine.exe] => (Allow) C:\users\utente\appdata\roaming\kodi\userdata\addon_data\program.plexus\acestream\ace_engine.exe FirewallRules: [UDP Query User{D11CDFCD-C3D3-4136-9A3F-41648F344818}C:\users\utente\appdata\roaming\kodi\userdata\addon_data\program.plexus\acestream\ace_engine.exe] => (Allow) C:\users\utente\appdata\roaming\kodi\userdata\addon_data\program.plexus\acestream\ace_engine.exe FirewallRules: [{2B6A3AAB-3AE5-4881-A00C-6E23E0B09497}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Restore Points ========================= 23-01-2018 18:02:26 Punto di controllo pianificato ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (01/26/2018 07:38:20 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 43483640 Error: (01/26/2018 07:38:20 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 43483640 Error: (01/26/2018 07:38:20 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (01/26/2018 07:38:19 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 43482421 Error: (01/26/2018 07:38:19 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 43482421 Error: (01/26/2018 07:38:19 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (01/26/2018 07:38:18 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 43481234 Error: (01/26/2018 07:38:18 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 43481234 Error: (01/26/2018 07:38:18 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (01/26/2018 07:38:17 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 43480140 System errors: ============= Error: (01/26/2018 05:14:42 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Il servizio AdaptiveSleepService non è stato avviato per il seguente errore: Impossibile trovare il file specificato. Error: (01/26/2018 05:12:30 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Il servizio NetTcpActivator dipende dal servizio WAS che non è stato avviato per il seguente errore: Dati non validi. Error: (01/26/2018 05:12:30 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Il servizio W3SVC dipende dal servizio WAS che non è stato avviato per il seguente errore: Dati non validi. Error: (01/26/2018 05:12:30 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Il servizio NetMsmqActivator dipende dal servizio WAS che non è stato avviato per il seguente errore: Dati non validi. Error: (01/26/2018 05:12:30 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Il servizio NetPipeActivator dipende dal servizio WAS che non è stato avviato per il seguente errore: Dati non validi. Error: (01/26/2018 05:12:30 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Servizio WAS terminato con l'errore: Dati non validi. Error: (01/26/2018 05:12:29 PM) (Source: WAS) (EventID: 5005) (User: ) Description: Il servizio Attivazione processo Windows (WAS) verrà arrestato perché si è verificato un errore. Il campo dei dati contiene il numero di errore. Error: (01/26/2018 05:12:29 PM) (Source: WAS) (EventID: 5215) (User: ) Description: Errore del servizio Attivazione processo Windows (WAS) nell'inizializzazione della configurazione offline. Il numero di errore è indicato nel campo dati. Error: (01/26/2018 05:12:27 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Il servizio RtNdPt630 non è stato avviato per il seguente errore: Impossibile trovare il file specificato. Error: (01/26/2018 05:12:25 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Precedente arresto del sistema inatteso a 07:37:36 su ‎26/‎01/‎2018. CodeIntegrity: =================================== Date: 2018-01-26 17:48:02.816 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2018-01-26 17:48:02.815 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2018-01-26 17:32:17.849 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2018-01-26 17:32:17.848 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2018-01-26 17:27:31.577 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2018-01-26 17:27:31.576 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2018-01-26 17:27:30.069 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2018-01-26 17:27:30.068 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2018-01-26 17:19:04.869 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2018-01-26 17:19:04.868 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz Percentage of memory in use: 29% Total physical RAM: 16329.02 MB Available physical RAM: 11463.12 MB Total Virtual: 16529.02 MB Available Virtual: 11151.27 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:237.94 GB) (Free:16.95 GB) NTFS Drive e: (Volume) (Fixed) (Total:931.51 GB) (Free:83.08 GB) NTFS Drive f: (Volume) (Fixed) (Total:48.83 GB) (Free:48.68 GB) NTFS Drive g: (Volume) (Fixed) (Total:1863.01 GB) (Free:365.48 GB) NTFS Drive h: (Dati) (Fixed) (Total:412.33 GB) (Free:37.56 GB) NTFS Drive i: (DATI) (Fixed) (Total:4.58 GB) (Free:4.58 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 42A14CB6) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=237.9 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=450 MB) - (Type=27) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: F3BFF3BF) Partition 1: (Active) - (Size=48.8 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=416.9 GB) - (Type=OF Extended) ======================================================== Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: C4607006) Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS) ======================================================== Disk: 3 (Size: 931.5 GB) (Disk ID: 000AB471) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================