Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01.09.2018 03 Ran by STEVEN_DESKTOP (05-09-2018 15:38:56) Running from E:\~tools for windows Windows 7 Ultimate Service Pack 1 (X64) (2013-04-07 03:01:14) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-1752262018-2004630284-3030787665-500 - Administrator - Disabled) Guest (S-1-5-21-1752262018-2004630284-3030787665-501 - Limited - Enabled) => C:\Users\Guest HomeGroupUser$ (S-1-5-21-1752262018-2004630284-3030787665-1008 - Limited - Enabled) SophosSAUSTEVEN-DES0 (S-1-5-21-1752262018-2004630284-3030787665-1010 - Limited - Enabled) STEVEN_DESKTOP (S-1-5-21-1752262018-2004630284-3030787665-1000 - Administrator - Enabled) => C:\Users\STEVEN_DESKTOP ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Sophos Anti-Virus (Enabled - Up to date) {FFADE7EA-DC92-4602-D6B2-626CD3450A0F} AS: Sophos Anti-Virus (Enabled - Up to date) {44CC060E-FAA8-498C-EC02-591EA8C240B2} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\uTorrent) (Version: 3.5.4.44520 - BitTorrent Inc.) 1.1 (HKLM-x32\...\{18F1594D-AEFC-4F91-8F19-37351F5A1770}_is1) (Version: 1.0 - Afreet Software, Inc.) 4nec2 full version 5.8.16 (HKLM-x32\...\4nec2_is1) (Version: - 4nec2@gmx.net (Use "4nec2 modeller" as the subject)) Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 18.011.20058 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.5.1.17730 - Adobe Systems Inc.) Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.4.980 - Adobe Systems Incorporated.) Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.0.42.34 - Adobe Systems Incorporated) Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated) Adobe Photoshop CS5.1 (HKLM-x32\...\{9158FF30-78D7-40EF-B83E-451AC5334640}) (Version: 12.1 - Adobe Systems Incorporated) Age of Empires III (HKLM-x32\...\{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}) (Version: 1.00.0000 - Microsoft Game Studios) Hidden Age of Empires III (HKLM-x32\...\InstallShield_{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}) (Version: 1.00.0000 - Microsoft Game Studios) Akamai NetSession Interface (HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\Akamai) (Version: - Akamai Technologies, Inc) Allway Sync version 14.0.1 (HKLM-x32\...\Allway Sync_is1) (Version: - Botkind Inc) Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 382.53 - NVIDIA Corporation) Hidden Apple Application Support (32-bit) (HKLM-x32\...\{26356515-5821-40FA-9C3D-9785052A1062}) (Version: 4.3.1 - Apple Inc.) Apple Application Support (64-bit) (HKLM\...\{C2651553-6CA3-4822-B2E6-BC4ACA6E0EA2}) (Version: 4.3.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.) Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.) Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.12.0 - Asmedia Technology) ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 2.1.5 - ASUS) Audacity 2.0.3 (HKLM-x32\...\Audacity_is1) (Version: 2.0.3 - Audacity Team) AutoCAD 2015 - English (HKLM\...\{5783F2D7-E001-0000-0102-0060B0CE6BBA}) (Version: 20.0.51.0 - Autodesk) Hidden AutoCAD 2015 - English (HKLM\...\{5783F2D7-E001-0409-2102-0060B0CE6BBA}) (Version: 20.0.51.0 - Autodesk) Hidden AutoCAD 2015 Language Pack - English (HKLM\...\{5783F2D7-E001-0409-1102-0060B0CE6BBA}) (Version: 20.0.51.0 - Autodesk) Hidden Autodesk 360 (HKLM\...\{556966D9-F7F6-421B-9707-D07901604DDF}) (Version: 5.1.2.1000 - Autodesk) Autodesk App Manager (HKLM-x32\...\{C8125548-F2D5-4059-823F-1F3C5BBD9F19}) (Version: 1.2.0 - Autodesk) Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 3.0.155.0 - Autodesk) Autodesk AutoCAD 2015 - English (HKLM\...\AutoCAD 2015 - English) (Version: 20.0.51.0 - Autodesk) Autodesk AutoCAD Performance Feedback Tool Version 1.2.2 (HKLM-x32\...\{85735431-6CD3-4B16-BEC8-95332034E53B}) (Version: 1.2.2.0 - Autodesk) Autodesk BIM 360 Glue AutoCAD 2015 Add-in 64 bit (HKLM\...\{9D589081-AFC2-4932-9071-AC585AC1EA83}) (Version: 3.32.3004 - Autodesk) Autodesk Content Service (HKLM-x32\...\{A37CDB58-AAE8-0000-8C13-E0F7BACB0D5F}) (Version: 3.2.0.0 - Autodesk) Hidden Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.2.0.0 - Autodesk) Autodesk Content Service Language Pack (HKLM-x32\...\{A37CDB58-AAE8-0001-8C13-E0F7BACB0D5F}) (Version: 3.2.0.0 - Autodesk) Hidden Autodesk Download Manager (HKLM-x32\...\{C897D9EC-13C6-4A22-ABF7-33F2126A7DB6}) (Version: 3.0.8.0 - Autodesk, Inc.) Autodesk Featured Apps (HKLM-x32\...\{EDDEE94B-214D-4B07-9727-A3E46F3E379A}) (Version: 1.2.0 - Autodesk) Autodesk Material Library 2015 (HKLM-x32\...\{427F733F-4D6C-45BC-9324-EB743104C321}) (Version: 5.2.9.100 - Autodesk) Autodesk Material Library Base Resolution Image Library 2015 (HKLM-x32\...\{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}) (Version: 5.2.9.100 - Autodesk) Autodesk ReCap (HKLM\...\{31ABA3F2-0000-1033-0102-111D43815377}) (Version: 1.3.1.39 - Autodesk) Hidden Autodesk ReCap (HKLM\...\Autodesk ReCap) (Version: 1.3.1.39 - Autodesk) AV Voice Changer Software DIAMOND 7.0 (HKLM-x32\...\AV Voice Changer Software DIAMOND 7.0) (Version: 7.0.29 - Avnex Ltd.) AviSynth 2.5 (HKLM-x32\...\AviSynth) (Version: - ) AwesomiumSetup (HKLM-x32\...\{19EF99D1-7EE6-4B5E-ABEE-0B3825F703B0}) (Version: 1.00.0000 - SIX Networks GmbH) Backup and Sync from Google (HKLM\...\{AEFBDB5B-899F-4AE6-B789-BA56A652A476}) (Version: 3.42.9858.3671 - Google, Inc.) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts) Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.2 - EA Digital Illusions CE AB) BleachBit (HKLM-x32\...\BleachBit) (Version: 2.0 - BleachBit) Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.) Brother Driver Deployment Wizard (HKLM-x32\...\{0ED38503-B69A-44B4-98BE-21BFF284A9B6}) (Version: 1.09.000 - Brother) calibre 64bit (HKLM\...\{2B73426A-9499-4875-BAE9-8DD729009399}) (Version: 1.47.0 - Kovid Goyal) CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden CCleaner (HKLM\...\CCleaner) (Version: 4.01 - Piriform) Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 3.1.10010 - Cisco Systems, Inc.) Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\{C37C8243-90EC-42A9-85C6-43105A32B926}) (Version: 3.1.10010 - Cisco Systems, Inc.) Hidden Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.) Cities: Skylines Green Cities (HKLM\...\Y2l0aWVzc2t5bGluZXM_is1) (Version: 1 - ) ContextEdit (PC Magazine) (HKLM-x32\...\ContextEdit_is1) (Version: 1.2 - Ziff Davis Media, Inc.) Core Temp 1.0 RC5 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu) CPUID HWMonitor 1.27 (HKLM\...\CPUID HWMonitor_is1) (Version: - ) CrystalDiskMark 3.0.3b (HKLM\...\CrystalDiskMark_is1) (Version: 3.0.3b - Crystal Dew World) CutePDF Writer 3.1 (HKLM\...\CutePDF Writer Installation) (Version: 3.1 - Acro Software Inc.) CyberLink PowerDirector 11 (HKLM\...\{551F492A-01B0-4DC4-866F-875EC4EDC0A8}) (Version: 11.0.0.2110 - CyberLink Corp.) Hidden CyberLink PowerDirector 11 (HKLM-x32\...\InstallShield_{551F492A-01B0-4DC4-866F-875EC4EDC0A8}) (Version: 11.0.0.2110 - CyberLink Corp.) D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd) DataStudio (HKLM-x32\...\{C1C47F92-0C96-408D-8E18-323F745E8A08}) (Version: 1.9.8.10 - PASCO scientific) Hidden DataStudio (HKLM-x32\...\InstallShield_{C1C47F92-0C96-408D-8E18-323F745E8A08}) (Version: 1.9.8.10 - PASCO scientific) Defraggler (HKLM\...\Defraggler) (Version: 2.18 - Piriform) Democracy 3 (HKLM-x32\...\GOGPACKDEMOCRACY3_is1) (Version: 2.6.0.11 - GOG.com) Desktop-Reminder 2 (HKLM-x32\...\{288487BA-D8C5-4C81-BD89-C7E49DD48E18}) (Version: 2.105 - Polenter - Software Solutions) Hidden Desktop-Reminder 2 (HKLM-x32\...\Desktop-Reminder 2) (Version: 2.105 - Polenter - Software Solutions) DisplayFusion 7.3.4 (HKLM-x32\...\B076073A-5527-4f4f-B46B-B10692277DA2_is1) (Version: 7.3.4.0 - Binary Fortress Software) DjVu Solo 3.1 (HKLM-x32\...\DjVu Solo 3.1) (Version: - ) DriveImage XML (Private Edition) (HKLM-x32\...\{F7E1CA14-B39D-452A-960B-39423DDDD933}) (Version: 2.50.000 - Runtime Software) Dropbox (HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\Dropbox) (Version: 57.3.86 - Dropbox, Inc.) Duplicate & Same Files Searcher 4.3 (HKLM\...\DuplicateSameFilesSearcher4_is1) (Version: - Yury Malich) Duplicate Cleaner Pro 4.0.4 (HKLM-x32\...\Duplicate Cleaner Pro) (Version: 4.0.4 - DigitalVolcano Software Ltd) DVDFab 9.1.2.5 (22/01/2014) (HKLM-x32\...\DVDFab 9_is1) (Version: - Fengtao Software Inc.) erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB) Everything 1.4.1.877 (x86) (HKLM-x32\...\Everything) (Version: 1.4.1.877 (x86) - David Carpenter) EVGA PrecisionX 16 (HKLM-x32\...\{DF31774D-B479-47D9-82F4-6ED733A7A341}) (Version: 5.2.4 - EVGA Corporation) f.lux (HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\Flux) (Version: - ) FAHClient (HKLM-x32\...\FAHClient) (Version: 7.4.4 - Stanford University) FileBot (HKLM\...\{5A7319F0-DD49-4716-B0DD-8FCD0111BA31}) (Version: 4.7.8 - Reinhard Pointner) Fraps (HKLM-x32\...\Fraps) (Version: - ) Free YouTube to MP3 Converter version 3.12.42.716 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.42.716 - DVDVideoSoft Ltd.) Geekbench 4 (HKLM-x32\...\Geekbench 4) (Version: - Primate Labs Inc.) GitHub (HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\5f7eb300e2ea4ebf) (Version: 1.3.3.1 - GitHub, Inc.) Glary Utilities 5.42 (HKLM-x32\...\Glary Utilities 5) (Version: 5.42.0.62 - Glarysoft Ltd) GlassFish Server Open Source Edition 4.0 (HKLM\...\nbi-glassfish-mod-4.0.0.89.0) (Version: - ) GlassWire 1.2 (remove only) (HKLM-x32\...\GlassWire 1.2) (Version: 1.2.73 - SecureMix LLC) GMapTool 0.8.143 (HKLM-x32\...\{1873789F-59D5-4002-8A2F-60A827B78F98}_is1) (Version: - AP) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 68.0.3440.106 - Google Inc.) Google Earth (HKLM-x32\...\{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B}) (Version: 4.0.2722 - Google) Google Earth Plug-in (HKLM-x32\...\{57BB4801-61C8-4E74-9672-2160728A461E}) (Version: 7.1.5.1557 - Google) Google Earth Pro (HKLM\...\{F914BC59-918A-498F-B2E3-B274C9CB48A8}) (Version: 7.3.2.5491 - Google) Google Talk Plugin (HKLM-x32\...\{F9B579C2-D854-300A-BE62-A09EB9D722E4}) (Version: 5.41.3.0 - Google) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden HandBrake 0.9.9.1 (HKLM-x32\...\HandBrake) (Version: 0.9.9.1 - ) HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version: - EFD Software) HD Tune Pro 5.50 (HKLM-x32\...\HD Tune Pro_is1) (Version: - EFD Software) Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios) Icecream PDF Split and Merge version 2.04 (HKLM-x32\...\{95DC4DB4-99FB-4FB2-ADBD-97F194EDEB4D}_is1) (Version: 2.04 - Icecream Apps) iCloud (HKLM\...\{4B48E22A-2FB0-4EFA-B99E-954B1E50CD69}) (Version: 5.1.0.34 - Apple Inc.) inSSIDer 3 (HKLM-x32\...\{5BB0D82A-4EED-477B-858E-1D5B01560BF5}) (Version: 3.0.5.80 - MetaGeek, LLC) Intel(R) Chipset Device Software (HKLM-x32\...\{98f335cd-0a32-4b3f-b74c-ef9480e834f0}) (Version: 10.0.27 - Intel(R) Corporation) Hidden Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation) Intel(R) Network Connections 19.5.303.0 (HKLM\...\PROSetDX) (Version: 19.5.303.0 - Intel) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.10.255 - Intel Corporation) Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version: - Intel Corporation) iTunes (HKLM\...\{9F4BF859-C3A4-4AB6-BDD1-9C5D58188598}) (Version: 12.4.1.6 - Apple Inc.) Java 8 Update 141 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180141F0}) (Version: 8.0.1410.15 - Oracle Corporation) Java SE Development Kit 8 Update 121 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180121}) (Version: 8.0.1210.13 - Oracle Corporation) JPEG to PDF (HKLM-x32\...\{7A2B6DE3-9303-46E8-9274-0112618AA7FD}_is1) (Version: - jpegtopdf.com) Junk Mail filter update (HKLM-x32\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden KeyScrambler (HKLM-x32\...\KeyScrambler) (Version: 3.11.0.3 - QFX Software Corporation) K-Lite Mega Codec Pack 10.0.5 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.0.5 - ) Kodi (HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\Kodi) (Version: - XBMC-Foundation) LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - ) LG United Mobile Driver (HKLM-x32\...\{2A3A4BD6-6CE0-4E2A-80D2-1D0FF6ACBFBA}) (Version: 3.7.2.0 - LG Electronics) Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.) M4A Player 1.0.1 (HKLM-x32\...\M4A Player_is1) (Version: - vsevensoft.com) Macrium Reflect Free Edition (HKLM\...\{49B022E5-A7FA-4CC0-83CF-1A0BEF029321}) (Version: 5.3.7109 - Paramount Software (UK) Ltd.) Hidden Macrium Reflect Free Edition (HKLM\...\MacriumReflect) (Version: 5.2 - Paramount Software (UK) Ltd.) Malwarebytes version 3.5.1.2522 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.5.1.2522 - Malwarebytes) Maple 16 (HKLM\...\Maple 16) (Version: - Maplesoft) Maple 16 (HKLM-x32\...\Maple 16) (Version: 16.0.0.0 - Maplesoft) Math Kernel Libraries (64-bit) (HKLM\...\{112D8201-03A2-43B2-861B-EB3FCB855547}) (Version: 13.0.13 - National Instruments) Hidden Math Kernel Libraries (64-bit) (HKLM\...\{56B02DF2-C570-43E0-A16A-C6A1CE4AD7FB}) (Version: 1.0.31.0 - National Instruments) Hidden Math Kernel Libraries (HKLM-x32\...\{9BA528A0-F33B-4162-993A-538CF56A005E}) (Version: 1.0.31.0 - National Instruments) Hidden Math Kernel Libraries (HKLM-x32\...\{E71784F9-5B67-4052-A5FC-55C038396936}) (Version: 13.0.13 - National Instruments) Hidden MATLAB R2016a (HKLM\...\Matlab R2016a) (Version: 9.0 - MathWorks) Microsoft .NET Framework 4.7.1 (Ελληνικά) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1032) (Version: 4.7.02558 - Microsoft Corporation) Microsoft .NET Framework 4.7.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.03062 - Microsoft Corporation) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Office 365 ProPlus - en-us (HKLM\...\O365ProPlusRetail - en-us) (Version: 16.0.9126.2275 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\OneDriveSetup.exe) (Version: 17.3.5951.0827 - Microsoft Corporation) Microsoft Online Services Sign-in Assistant (HKLM\...\{46E637E2-AC34-4B45-B5DF-D20903A3DB61}) (Version: 7.250.4303.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Sync Framework 2.0 Core Components (x64) ENU (HKLM\...\{8CCBEC22-D2DB-4DC9-A58A-E1A1F3A38C8A}) (Version: 2.0.1578.0 - Microsoft Corporation) Microsoft Sync Framework 2.0 Provider Services (x64) ENU (HKLM\...\{03AC245F-4C64-425C-89CF-7783C1D3AB2C}) (Version: 2.0.1578.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) MiKTeX 2.9 (HKLM-x32\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org) mkv2vob (HKLM-x32\...\{21AE04E8-EBF6-40DB-9AA9-B7A80C5D057D}) (Version: 2.4.9 - 3r1c) MMSSTV version 1.13A (HKLM-x32\...\{F71E3066-5D8E-4E58-9B72-43D4365127D3}_is1) (Version: 1.13A - JE3HHT, Makoto Mori) Movie Maker (HKLM-x32\...\{38F03569-A636-4CF3-BDDE-032C8C251304}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Mozilla Firefox 61.0.2 (x64 en-US) (HKLM\...\Mozilla Firefox 61.0.2 (x64 en-US)) (Version: 61.0.2 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 61.0.2.6793 - Mozilla) Mozilla Thunderbird 17.0.8 (x86 en-US) (HKLM-x32\...\Mozilla Thunderbird 17.0.8 (x86 en-US)) (Version: 17.0.8 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Mumble 1.2.10 (HKLM-x32\...\{63243F5C-E941-4461-A4B0-2689A9A3BF13}) (Version: 1.2.10 - Thorvald Natvig) MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.7 - F.J. Wechselberger) National Instruments Software (HKLM-x32\...\NI Uninstaller) (Version: - National Instruments) Nero 7 Ultra Edition (HKLM-x32\...\{CF097717-F174-4144-954A-FBC4BF301033}) (Version: 7.02.9753 - Nero AG) NetBeans IDE 8.0 (HKLM\...\nbi-nb-base-8.0.0.0.201403101706) (Version: 8.0 - NetBeans.org) Network Stumbler 0.4.0 (remove only) (HKLM-x32\...\Network Stumbler) (Version: - ) Newblue Art Effects for PowerDirector (HKLM\...\NewBlue Art Effects for PowerDirector) (Version: 2.0 - NewBlue) NI .NET Framework 4.0 (HKLM-x32\...\{5CC95D76-A798-4722-AE76-E494D9664907}) (Version: 4.01.49152 - National Instruments) Hidden NI ActiveX Container (64-bit) (HKLM\...\{63B6ADAB-AB1B-4542-911D-C15FFBD5E1BE}) (Version: 13.0.4 - National Instruments) Hidden NI ActiveX Container (HKLM-x32\...\{53606225-A1A8-4A74-BA4B-00206F38DB60}) (Version: 13.0.4 - National Instruments) Hidden NI Assistant Framework (HKLM-x32\...\{4823D63E-2F23-462E-A124-483EB0220C76}) (Version: 9.0.143 - National Instruments) Hidden NI Assistant Framework 64-bit (HKLM\...\{4E1321FD-9B77-44A0-A8F8-856815928A9C}) (Version: 9.0.143 - National Instruments) Hidden NI Assistant Framework LabVIEW 2013 Support (HKLM-x32\...\{438C89DD-4603-4324-8F36-BAD073F88B58}) (Version: 9.0.107 - National Instruments) Hidden NI Assistant Framework LabVIEW Code Generator 2013 (HKLM-x32\...\{1A535E17-6E6D-4CC7-AEE8-433103B599D6}) (Version: 9.0.107 - National Instruments) Hidden NI Authentication 13.0.0 (64-bit) (HKLM\...\{2BF63B6D-6B44-46D5-8F2C-5BFBC78D9593}) (Version: 13.0.326 - National Instruments) Hidden NI Authentication 13.0.0 (HKLM-x32\...\{6CB3DA3D-C753-423D-AB3B-670C5C2FE6C4}) (Version: 13.0.326 - National Instruments) Hidden NI CodeSignAPI (HKLM-x32\...\{E1D60C68-016C-4951-8C1F-52E24DFE7836}) (Version: 2.70.346 - National Instruments) Hidden NI Curl 13.0.0 (64-bit) (HKLM\...\{E957A395-E199-4B35-B06A-FF7CBA66B953}) (Version: 13.0.324 - National Instruments) Hidden NI Curl 13.0.0 (HKLM-x32\...\{2DD33997-3C3E-4517-9D98-0CC5802D6D53}) (Version: 13.0.324 - National Instruments) Hidden NI Customer Experience Improvement Program (HKLM-x32\...\{B42BB38A-9B97-4494-A42C-A0FD79B94E7A}) (Version: 2.0.77 - National Instruments) Hidden NI DataSocket 5.1 (64-bit) (HKLM\...\{3EE48061-4008-4429-854D-90EC62074C5D}) (Version: 5.1.227 - National Instruments) Hidden NI DataSocket 5.1 (HKLM-x32\...\{88098056-C07B-4264-A824-C90D5BF3935E}) (Version: 5.1.227 - National Instruments) Hidden NI Distributed System Manager 2013 (HKLM-x32\...\{FEA545A1-9CAA-415E-81D8-49951ED44F22}) (Version: 13.0.338 - National Instruments) Hidden NI Error Reporting 2013 (HKLM-x32\...\{DF549FB9-B94F-4B8D-B007-39281EDB9A52}) (Version: 13.0.324 - National Instruments) Hidden NI Error Reporting Interface Installer 5.5 (HKLM-x32\...\{843AA365-C682-4540-9E7C-9B9A10C6A539}) (Version: 5.50.49152 - National Instruments) Hidden NI Error Reporting Interface Installer 5.5 for Windows 64-bit (HKLM\...\{817746FE-367D-4BA3-9ABF-D2214D0E5E33}) (Version: 5.50.49152 - National Instruments) Hidden NI EulaDepot (HKLM-x32\...\{97401357-96F5-45D0-8CC3-2031EE48B8C0}) (Version: 3.20.351 - National Instruments) Hidden NI Example Finder 13.0 (HKLM-x32\...\{4A1BCB81-2F91-451D-BEC6-59FAB0ADB8F0}) (Version: 13.0.324 - National Instruments) Hidden NI GMP Windows 32-bit Installer 13.0.0 (HKLM-x32\...\{0AF8A008-7141-40DD-BB99-10B7F0C4769A}) (Version: 13.0.45.0 - National Instruments) Hidden NI GMP Windows 64-bit Installer 13.0.0 (HKLM\...\{00D12A70-7B79-4A14-80B5-F12626237DE7}) (Version: 13.0.45.0 - National Instruments) Hidden NI Help Assistant 2.0 (64bit) (HKLM\...\{DDAAADDD-C57E-4731-A29C-133191587488}) (Version: 2.0.3 - National Instruments) Hidden NI Help Assistant 2.0 (HKLM-x32\...\{C9A0D47F-9A68-4917-868C-79E384E4DEE6}) (Version: 2.0.3 - National Instruments) Hidden NI Instrument IO Assistant for LabVIEW 2013 32-bit (HKLM-x32\...\{5AFBEB79-C105-4A13-9136-7830FB0616E4}) (Version: 1.0.14.0 - National Instruments) Hidden NI LabVIEW 2011 Real-Time NBFifo (HKLM-x32\...\{7C6869BF-6CBE-4CB0-8869-2743B419343C}) (Version: 11.0.250.0 - National Instruments) Hidden NI LabVIEW 2012 Real-Time NBFifo (HKLM-x32\...\{B4A772D4-ED42-4484-8C0E-663A52D07A2F}) (Version: 12.0.219.0 - National Instruments) Hidden NI LabVIEW 2012 Real-Time NBFifo (HKLM-x32\...\{EEDB0927-3BD8-4349-856E-425A146CC680}) (Version: 13.0.336 - National Instruments) Hidden NI LabVIEW 2012 Run-Time Engine Web Server (HKLM-x32\...\{3C717C2C-A9F4-4236-A539-89592B0652A7}) (Version: 12.5.198.0 - National Instruments) Hidden NI LabVIEW 2012 SP1 Run-Time Engine Non-English Support. (HKLM-x32\...\{06897ACD-84E1-4F9E-8848-3E3BF27D2D99}) (Version: 12.1.52.0 - National Instruments) Hidden NI LabVIEW 2013 (32-bit) (HKLM-x32\...\{194AD9A6-9C1E-4ACA-9F7A-570AC992661C}) (Version: 13.0.350 - National Instruments) Hidden NI LabVIEW 2013 (32-bit) (HKLM-x32\...\{26954A89-6E26-4EC1-AB7A-0EFEFF992A40}) (Version: 13.0.397 - National Instruments) Hidden NI LabVIEW 2013 (32-bit) (HKLM-x32\...\{29B1DD55-ECCC-492C-8732-FC5586E10D5F}) (Version: 13.0.350 - National Instruments) Hidden NI LabVIEW 2013 (32-bit) (HKLM-x32\...\{34CA058D-7653-4DBC-9468-53AF99D38EDB}) (Version: 13.0.350 - National Instruments) Hidden NI LabVIEW 2013 (32-bit) (HKLM-x32\...\{6856F054-3AD1-46CD-9CD8-DB00923361E9}) (Version: 13.0.350 - National Instruments) Hidden NI LabVIEW 2013 (32-bit) (HKLM-x32\...\{6A3BC178-8B3D-4D87-BDB1-7CAB9842CC27}) (Version: 13.0.350 - National Instruments) Hidden NI LabVIEW 2013 (32-bit) (HKLM-x32\...\{8CE6A8CC-8E00-4A0B-A2E7-45513D422764}) (Version: 13.0.350 - National Instruments) Hidden NI LabVIEW 2013 (32-bit) (HKLM-x32\...\{D7373824-7279-4D63-B2A7-B8A4D4FF2DFD}) (Version: 13.0.350 - National Instruments) Hidden NI LabVIEW 2013 (32-bit) (HKLM-x32\...\{F0974FCB-5970-4D07-81B9-E1D74A58F2F9}) (Version: 13.0.350 - National Instruments) Hidden NI LabVIEW 2013 Deployable License (HKLM-x32\...\{87287A3C-0D30-42CE-867A-C595BE8C1721}) (Version: 13.0.303 - National Instruments) Hidden NI LabVIEW 2013 Deployment Framework (HKLM-x32\...\{EE372D3C-8CDE-4141-8DE9-05A0734B63E4}) (Version: 13.0.330 - National Instruments) Hidden NI LabVIEW 2013 f1 (HKLM-x32\...\{6EDBCD86-56DC-44C2-A32F-4EBA9FC9CF5F}) (Version: 13.0.328 - National Instruments) Hidden NI LabVIEW 2013 Help (HKLM-x32\...\{8BA0BD14-21A8-4A16-9B4B-38E314FB0F53}) (Version: 13.0.338 - National Instruments) Hidden NI LabVIEW 2013 Help File (HKLM-x32\...\{B0D9DFEE-6678-4EFA-909E-CDFAC1A967FB}) (Version: 13.0.299 - National Instruments) Hidden NI LabVIEW 2013 License (HKLM-x32\...\{FFB33CD3-1CE4-401B-BA96-3F6CDBA31F6B}) (Version: 13.0.342 - National Instruments) Hidden NI LabVIEW 2013 Manuals (HKLM-x32\...\{E6E01748-A5BE-4840-977A-BC4174002079}) (Version: 13.0.326 - National Instruments) Hidden NI LabVIEW 2013 MeasAppChm File (HKLM-x32\...\{C66AFA34-E93D-4B4E-8944-F29988D915F3}) (Version: 13.0.299 - National Instruments) Hidden NI LabVIEW 2013 Real-Time Error Dialog (HKLM-x32\...\{EA289B2D-80CE-486A-935D-FC3F088AB5C7}) (Version: 13.0.123 - National Instruments) Hidden NI LabVIEW 2013 Run-Time Engine Non-English Support. (HKLM-x32\...\{9BA381D6-F63D-4C03-BE13-940F39068E01}) (Version: 13.0.329 - National Instruments) Hidden NI LabVIEW 2013 Run-Time Engine Web Server (HKLM-x32\...\{ADC16943-45BD-4E47-89CD-A9CA790DE09C}) (Version: 13.0.321 - National Instruments) Hidden NI LabVIEW 2013 Scripting Code Generator (HKLM-x32\...\{841CC81E-6023-4795-BB9E-7A8EE31BB0BD}) (Version: 9.0.172 - National Instruments) Hidden NI LabVIEW 2013 Search (HKLM-x32\...\{22E5FA11-6167-4DC5-89E2-27641105B780}) (Version: 13.0.16 - National Instruments) Hidden NI LabVIEW 2013 Simulation (HKLM-x32\...\{5C26D671-05A5-4788-B75B-161EBC91EFE4}) (Version: 13.0.327 - National Instruments) Hidden NI LabVIEW 2013 Variable Web Service (HKLM-x32\...\{5E0425D0-A514-49F4-92CF-E639FE757A66}) (Version: 13.0.326 - National Instruments) Hidden NI LabVIEW 2013 Web Server (HKLM-x32\...\{2F228DD5-DAF1-4D91-A419-D751FD2495CB}) (Version: 13.0.327 - National Instruments) Hidden NI LabVIEW Broker (64 bit) (HKLM\...\{B9254715-D10D-4B4B-B002-54CBA61E6F64}) (Version: 6.8.10.0 - National Instruments) Hidden NI LabVIEW Broker (HKLM-x32\...\{F37CC885-1E37-4F2A-93F3-7F1E1EEBBEBB}) (Version: 6.8.10.0 - National Instruments) Hidden NI LabVIEW C Interface (HKLM-x32\...\{DEC25D81-2317-47F6-8B26-D54A939DA1EE}) (Version: 1.0.1 - National Instruments) Hidden NI LabVIEW Compare Utility 13.0.0 (HKLM-x32\...\{01DAFF66-E9ED-4D91-9EBC-C3732FBBF078}) (Version: 13.0.340 - National Instruments) Hidden NI LabVIEW MAX XML (HKLM-x32\...\{416B50BB-64CE-46C5-81A6-7F842CC35CDC}) (Version: 9.0.6.0 - National Instruments) Hidden NI LabVIEW Merge Utility 13.0.0 (HKLM-x32\...\{D9254C4B-CB25-4348-8EBC-CD2670EDA0AA}) (Version: 13.0.339 - National Instruments) Hidden NI LabVIEW Run-Time Engine 2011 SP1 (HKLM-x32\...\{1D78A81A-58D9-46F7-BFF6-ADF7247803F9}) (Version: 11.0.448.0 - National Instruments) Hidden NI LabVIEW Run-Time Engine 2012 SP1 f3 (HKLM-x32\...\{5157CC53-EB17-4E69-A5C9-73E5695198B1}) (Version: 12.1.58.0 - National Instruments) Hidden NI LabVIEW Run-Time Engine 2013 (HKLM-x32\...\{C0446EC0-D69F-44C3-B3AD-E04EA7FAE72B}) (Version: 13.0.332 - National Instruments) Hidden NI LabVIEW Run-Time Engine Interop 2011 (HKLM-x32\...\{6B9F789C-1D28-44D5-BCCE-7CCDBFB14B79}) (Version: 11.0.449.0 - National Instruments) Hidden NI LabVIEW Run-Time Engine Interop 2012 SP1 (HKLM-x32\...\{3750BCB6-B4E7-4678-817D-732F1CD84EF5}) (Version: 12.1.58.0 - National Instruments) Hidden NI LabVIEW Run-Time Engine Interop 2013 (HKLM-x32\...\{2931F00C-6417-4BFE-B3C5-26D90ABE8189}) (Version: 13.0.332 - National Instruments) Hidden NI LabVIEW Web Server for Run-Time Engine (HKLM-x32\...\{BCC373FE-227D-46D9-827F-05BA296E2602}) (Version: 11.0.375.0 - National Instruments) Hidden NI LabVIEW Web Services Runtime (HKLM-x32\...\{362294F9-C171-42B9-8436-4E8EE3467E3B}) (Version: 13.0.314 - National Instruments) Hidden NI LabWindows/CVI 2010 SP1 Analysis Library (64-bit) (HKLM\...\{DABB1D70-482A-4B92-8B24-052AD650A2B0}) (Version: 10.0.1434 - National Instruments) Hidden NI LabWindows/CVI 2010 SP1 Analysis Library (HKLM-x32\...\{94AEBDCC-159F-4CBB-ABDE-B16483D2CF6C}) (Version: 10.0.1434 - National Instruments) Hidden NI LabWindows/CVI 2010 SP1 Code Generator (HKLM-x32\...\{5AEBB67E-812E-43BC-B029-CD83DBA7CE30}) (Version: 10.0.1434 - National Instruments) Hidden NI LabWindows/CVI 2010 SP1 Low-Level Driver (Original) (HKLM-x32\...\{2B1D39F8-477A-4B40-B062-F5E0C4D42B9B}) (Version: 10.0.1434 - National Instruments) Hidden NI LabWindows/CVI 2010 SP1 Low-Level Driver (Updated) (HKLM-x32\...\{74DBB98D-B4A7-4DD9-9E13-C51FDB1105D0}) (Version: 10.0.1434 - National Instruments) Hidden NI LabWindows/CVI 2010 SP1 Network Variable Library (64-bit) (HKLM\...\{0C2486A3-EF0D-4C6C-9947-C63D6E8C6E4C}) (Version: 10.0.1434 - National Instruments) Hidden NI LabWindows/CVI 2010 SP1 Network Variable Library (HKLM-x32\...\{7FB07065-F547-448A-A1C3-1F2EF5EB834F}) (Version: 10.0.1434 - National Instruments) Hidden NI LabWindows/CVI 2010 SP1 Run-Time Engine (64-bit) (HKLM\...\{176468CE-41AB-4A9A-AC38-45A146D39688}) (Version: 10.0.1434 - National Instruments) Hidden NI LabWindows/CVI 2010 SP1 TDM Streaming Library (64-bit) (HKLM\...\{25DECAB0-6580-4B9C-8174-5AC6C9E2D823}) (Version: 10.0.1434 - National Instruments) Hidden NI LabWindows/CVI 2010 SP1 TDM Streaming Library (HKLM-x32\...\{A06A7065-FCA1-4D3C-BE65-2837ACCB135D}) (Version: 10.0.1434 - National Instruments) Hidden NI LabWindows/CVI 2012 LabVIEW DLL Builder (HKLM-x32\...\{295D9649-5DFF-43EA-AE50-B749E84BB2C6}) (Version: 12.0.0422 - National Instruments) Hidden NI LabWindows/CVI Run-Time Engine 2010 SP1 (HKLM-x32\...\{41F6CA61-82CB-4615-9A97-252C5D58FA4B}) (Version: 10.0.1434 - National Instruments) Hidden NI LabWindows/CVI Run-Time Engine 2010 SP1 (Updated) (HKLM-x32\...\{075CA8A9-25A1-4EA7-885C-8A92AED7DB3A}) (Version: 10.0.1434 - National Instruments) Hidden NI Launcher (HKLM-x32\...\{3E60279A-618E-4670-81CC-777B8E60991E}) (Version: 3.20.351 - National Instruments) Hidden NI License Manager (HKLM-x32\...\{A8490B70-08B4-40F8-84FE-CCE239901EA1}) (Version: 3.7.53 - National Instruments) Hidden NI Logos 5.5 (64-bit) (HKLM\...\{B2149E16-A01C-458E-A6E5-B9DC96EAD1AA}) (Version: 5.5.293 - National Instruments) Hidden NI Logos 5.5 (HKLM-x32\...\{CA533BA0-E6F9-4349-B0EC-ABDEB0481E77}) (Version: 5.5.293 - National Instruments) Hidden NI Logos LabVIEW 2013 Support (HKLM-x32\...\{BBFA3804-4238-4CBF-A579-5D5A072378AE}) (Version: 13.0.327 - National Instruments) Hidden NI Logos XT Support (HKLM-x32\...\{A05EFB3F-19E2-4F9E-8380-BE095CCF0BE4}) (Version: 5.5.294 - National Instruments) Hidden NI Logos64 XT Support (HKLM\...\{A3154334-4692-449E-8836-3CCD28D0B1D7}) (Version: 5.5.294 - National Instruments) Hidden NI Math Kernel Libraries (64-bit) (HKLM\...\{58A9B4F6-2E67-464A-9F71-95F6D7159702}) (Version: 1.0.10.0 - National Instruments) Hidden NI Math Kernel Libraries (HKLM-x32\...\{231D0E11-0313-49FD-95CE-1D0264C7F1F5}) (Version: 1.0.10.0 - National Instruments) Hidden NI MAX Remote Configuration 64-bit Installer 5.5 (HKLM\...\{4768A660-5962-491F-8B1D-9A3FA35819A6}) (Version: 5.50.49152 - National Instruments) Hidden NI MAX Remote Configuration Installer 5.5 (HKLM-x32\...\{5A073702-D6E0-4D28-B43B-4C4D5DFB752D}) (Version: 5.50.49152 - National Instruments) Hidden NI MAX Support for 64 Bit Windows (HKLM\...\{C7D66BE3-9A63-47A0-A422-D772F1216F43}) (Version: 5.50.49152 - National Instruments) Hidden NI MDF Support (HKLM-x32\...\{4E45B56F-95B5-4A1D-B5CC-B410FF1726AE}) (Version: 3.20.351 - National Instruments) Hidden NI mDNS Responder 2.2 for Windows 64-bit (HKLM\...\{3A6898F6-9B23-40DE-9B2D-617DBDEFDBF9}) (Version: 2.20.49152 - National Instruments) Hidden NI mDNS Responder 2.2.0 (HKLM-x32\...\{1F7F5330-D1C5-49D8-85A3-75E29C2434FE}) (Version: 2.20.49152 - National Instruments) Hidden NI Measurement & Automation Explorer 5.5.0 (HKLM-x32\...\{6A996EAF-F118-4C11-AD14-8029547085CB}) (Version: 5.50.49152 - National Instruments) Hidden NI Measurement Studio ComponentWorks 3D Graph (HKLM-x32\...\{F278392D-547E-4E67-AD1C-2576C2852B50}) (Version: 8.6.10603 - National Instruments) Hidden NI Measurement Studio ComponentWorks UI (HKLM-x32\...\{2C77FBC4-79E2-4D25-86FB-CF7AAE02425E}) (Version: 8.6.10603 - National Instruments) Hidden NI Measurement Studio Recipe Processor (HKLM-x32\...\{4159DD60-49C1-4323-A1A5-FB060CBA35C5}) (Version: 8.0.0101 - National Instruments) Hidden NI MetaSuite Installer (HKLM-x32\...\{1610AE87-4FD0-4087-BE80-039C968E5C1A}) (Version: 3.20.351 - National Instruments) Hidden NI MXS 5.5.0 (HKLM-x32\...\{DB974CAC-E29F-4F36-9343-6B589DF80593}) (Version: 5.50.49152 - National Instruments) Hidden NI MXS 5.5.0 for 64 Bit Windows (HKLM\...\{2C222477-A505-4ACF-A5F2-1E026DBA288D}) (Version: 5.50.49152 - National Instruments) Hidden NI Network Discovery 5.5 (HKLM-x32\...\{FC89B79E-AE5F-495F-A2B5-4469E5E2E284}) (Version: 5.50.49152 - National Instruments) Hidden NI Network Discovery 5.5 for Windows 64-bit (HKLM\...\{B847F6E6-0C6C-4FE8-8BF2-E864F3520DC2}) (Version: 5.50.49152 - National Instruments) Hidden NI NI LabVIEW 2011 SP1 Run-Time Engine Non-English Support (HKLM-x32\...\{38300A40-AB90-444D-A823-17EB95A5C731}) (Version: 11.0.302.0 - National Instruments) Hidden NI OPC Support (HKLM-x32\...\{B34624AE-C43F-416E-B22A-F3B561EB9760}) (Version: 13.0.296 - National Instruments) Hidden NI OPCEnum Shared (HKLM-x32\...\{1179FFB4-726B-4200-BF02-0387C86C429B}) (Version: 5.5.2018 - National Instruments) Hidden NI Portable Configuration 5.5.0 (HKLM-x32\...\{646550E5-F469-410B-9721-01E3DCAFA7D2}) (Version: 5.50.49152 - National Instruments) Hidden NI Portable Configuration for 64 Bit Windows 5.5.0 (HKLM\...\{91D415DC-5C6C-4512-902A-EEB48545A299}) (Version: 5.50.49152 - National Instruments) Hidden NI Registration Wizard (HKLM-x32\...\{37CBF405-7780-4D61-BA64-048229E7CAEE}) (Version: 1.3.97.0 - National Instruments) Hidden NI Remote Provider for MAX 5.5.0 (HKLM-x32\...\{4EDA6809-BAD6-416D-AACD-1EC39BF6DD41}) (Version: 5.50.49152 - National Instruments) Hidden NI Remote PXI Provider for MAX 5.5.0 (HKLM-x32\...\{D426844E-2735-4881-BD41-29F7530FA06C}) (Version: 5.50.49152 - National Instruments) Hidden NI Search Shared (HKLM-x32\...\{C89DD7B9-9ACA-4B8F-9B72-37CE3AEBDD46}) (Version: 13.0.13 - National Instruments) Hidden NI Security Update (KB 67L8LCQW) (64-bit) (HKLM\...\{4A78D9E6-D349-4CCA-9295-45B12BE5BC6C}) (Version: 1.0.29.0 - National Instruments) Hidden NI Security Update (KB 67L8LCQW) (HKLM-x32\...\{20124E21-206B-485F-838F-14BB88161045}) (Version: 1.0.29.0 - National Instruments) Hidden NI Service Locator 13.0 (HKLM-x32\...\{23180501-7886-47B6-AB6E-5ABFB1848012}) (Version: 13.0.303 - National Instruments) Hidden NI SLCP 2.0 (HKLM-x32\...\{3FAE02C9-923D-4096-AE28-04E6FCE67094}) (Version: 2.0.27 - National Instruments) Hidden NI Software Provider for MAX 5.5.0 (HKLM-x32\...\{A6025DDF-67EF-4B5D-8365-907295F5D469}) (Version: 5.50.49152 - National Instruments) Hidden NI SSL LabVIEW 2013 Support (HKLM-x32\...\{AFF8EE12-DE6F-45DD-BFE6-AC78B0D7D01D}) (Version: 13.0.328 - National Instruments) Hidden NI SSL LabVIEW RTE 2012 SP1 Support (HKLM-x32\...\{DFEB5AEC-611E-466F-A072-956751A66880}) (Version: 12.5.8.0 - National Instruments) Hidden NI SSL LabVIEW RTE 2013 Support (HKLM-x32\...\{BF324FB5-4C39-4FDC-B023-19AEFFAE116A}) (Version: 13.0.317 - National Instruments) Hidden NI SSL Support (64-bit) (HKLM\...\{A6E0DCE3-A917-4234-B401-6D630E869FB3}) (Version: 13.0.319 - National Instruments) Hidden NI SSL Support (HKLM-x32\...\{87392509-BFBD-4780-9170-E0106DB472DF}) (Version: 13.0.324 - National Instruments) Hidden NI System API .NET 5.5.0 (HKLM-x32\...\{556653E7-A474-4D05-AA00-D555DF8609C6}) (Version: 5.50.157 - National Instruments) Hidden NI System API Client for WIF 5.5.0 (HKLM-x32\...\{9B51048C-8467-4C02-967E-0145E31BDE3C}) (Version: 5.50.419 - National Instruments) Hidden NI System API Web-Service 32-bit 5.5.0 (HKLM-x32\...\{0E5A6C9B-E5F6-4BBD-8942-FC9BFC287F68}) (Version: 5.50.405 - National Instruments) Hidden NI System API Windows 32-bit 5.5.0 (HKLM-x32\...\{A8779088-85BA-4CC0-8205-1C7AF40FCDBD}) (Version: 5.50.589 - National Instruments) Hidden NI System API Windows 64-bit 5.5.0 (HKLM\...\{6662C75A-9A77-4959-9853-F4A2AF15C4B8}) (Version: 5.50.588 - National Instruments) Hidden NI System Configuration 5.5.0 LabVIEW Support (HKLM-x32\...\{C202C5C6-AA4B-49D6-A373-554A3568382E}) (Version: 5.50.186 - National Instruments) Hidden NI System Configuration LV2013 Support 5.5.0 (HKLM-x32\...\{7428E02E-9DE5-4454-951B-C68A88ABEEA4}) (Version: 5.50.178 - National Instruments) Hidden NI System Configuration Runtime 5.5.0 (HKLM-x32\...\{FCBEDF17-375A-4963-B6BC-B8DD66036D2F}) (Version: 5.50.226 - National Instruments) Hidden NI System Configuration Runtime 5.5.0 for Windows 64-bit (HKLM\...\{E24A808C-68AE-4204-A6B5-55656CBE7AF1}) (Version: 5.50.226 - National Instruments) Hidden NI System State Publisher (64-bit) (HKLM\...\{68319FE7-1E06-4156-BC00-8D24828B5084}) (Version: 13.0.299 - National Instruments) Hidden NI System State Publisher (HKLM-x32\...\{AE20D525-5D10-475F-9115-963DB67D49DF}) (Version: 13.0.304 - National Instruments) Hidden NI System Web Server 13.0 (HKLM-x32\...\{FC59A893-A510-411A-A71C-60A06D2C9BF2}) (Version: 13.0.330 - National Instruments) Hidden NI System Web Server Base 13.0.0 (64-bit) (HKLM\...\{A0133B57-1D4B-4D89-A0EF-1453ECECA58A}) (Version: 13.0.323 - National Instruments) Hidden NI System Web Server Base 13.0.0 (HKLM-x32\...\{69D447B3-1B3F-42A9-9605-A8533BE06D17}) (Version: 13.0.323 - National Instruments) Hidden NI TDM Excel Add-In 3.5 (HKLM-x32\...\{FC3DE99A-2D6A-428D-ADA5-6A86717E6129}) (Version: 3.5.9 - National Instruments) Hidden NI TDM Excel Add-In 3.5 64-bit (HKLM\...\{BC7E190B-47EB-4B84-817B-E52120108C0E}) (Version: 3.5.9 - National Instruments) Hidden NI TDM Streaming 2.5 (64-bit) (HKLM\...\{3ABCF186-64DE-439C-8B66-CC31B8513D8C}) (Version: 2.5.36 - National Instruments) Hidden NI TDM Streaming 2.5 (HKLM-x32\...\{27367777-A95D-4014-B73B-18D4838E54A4}) (Version: 2.5.36 - National Instruments) Hidden NI Trace Engine (64-bit) (HKLM\...\{DA83B4AC-EC3C-4F13-A867-CB0C24A8E1D5}) (Version: 13.0.324 - National Instruments) Hidden NI Trace Engine (HKLM-x32\...\{63495F25-850C-4127-8BA6-1DFD5144723C}) (Version: 13.0.324 - National Instruments) Hidden NI Uninstaller (HKLM-x32\...\{4416E546-A113-4B37-9FA5-C5165EEF36E0}) (Version: 3.20.351 - National Instruments) Hidden NI Update Service 2.3 (64-bit) (HKLM\...\{FCA2E817-8584-43EF-ABCA-05514305F0C6}) (Version: 2.30.53 - National Instruments) Hidden NI Update Service 2.3 (HKLM-x32\...\{8FBAA717-6C1C-4BA1-B446-AA5118BA6401}) (Version: 2.30.65 - National Instruments) Hidden NI USI 2.0.1 (HKLM-x32\...\{FE82D7AF-0A22-40E8-B7A5-9D7615296BA6}) (Version: 2.0.15249 - National Instruments) Hidden NI USI 2.0.1 64-Bit (HKLM\...\{0D8CE7D9-884A-4DF1-B459-E910CF34EE5C}) (Version: 2.0.15249 - National Instruments) Hidden NI Variable Engine (64-bit) (HKLM\...\{75534D54-E901-4C68-B523-C4A9884AED61}) (Version: 2.7.297 - National Instruments) Hidden NI Variable Engine 2.6.0 (HKLM-x32\...\{639C20B2-5F6C-4139-96EA-A206EEA6F995}) (Version: 2.7.297 - National Instruments) Hidden NI Variable Engine LabVIEW 2013 Support (HKLM-x32\...\{324CEE33-A570-4B63-AF5D-E6BF7B79DF87}) (Version: 13.0.327 - National Instruments) Hidden NI VC2005MSMs x64 (HKLM\...\{E3E3E625-8F74-44CE-A6D2-C31CB43DA23D}) (Version: 8.05.0 - National Instruments) Hidden NI VC2005MSMs x86 (HKLM-x32\...\{4B877FC6-F44C-4B39-B0B6-CE15ADC63997}) (Version: 8.05.0 - National Instruments) Hidden NI VC2008MSMs x64 (HKLM\...\{07E00E94-7A78-40FA-9BEF-71C190E98041}) (Version: 9.0.401 - National Instruments) Hidden NI VC2008MSMs x86 (HKLM-x32\...\{E84997A1-4D6F-4C0B-B60D-F85B360D2666}) (Version: 9.0.401 - National Instruments) Hidden NI VC2010SP1MSMs x64 (HKLM\...\{AFC5A844-CA3A-4566-89E7-3E24E6AFF9A3}) (Version: 10.0.100 - National Instruments) Hidden NI VC2010SP1MSMs x86 (HKLM-x32\...\{F2273FA7-117C-43D7-BD59-00B025535442}) (Version: 10.0.100 - National Instruments) Hidden NI VIPM Helper 2013 (HKLM-x32\...\{BC2E5499-009B-4F1D-B978-8C0B2B1EC6BF}) (Version: 13.0.339 - National Instruments) Hidden NI Web Application Server 13.0 (64-bit) (HKLM\...\{62126BD1-8107-48A1-9889-FA16F064893C}) (Version: 13.0.319 - National Instruments) Hidden NI Web Application Server 13.0 (HKLM-x32\...\{4845B7A3-DDC3-44F9-A7DB-C50C94017129}) (Version: 13.0.324 - National Instruments) Hidden NI Web Pipeline 3.3 (64-bit) (HKLM\...\{F7F361A8-65E2-4A1B-9111-DA87B692AAD8}) (Version: 3.30.24 - National Instruments) Hidden NI Web Pipeline 3.3 (HKLM-x32\...\{55D08CCF-C60F-4A4B-A78E-0E9430B45B42}) (Version: 3.30.24 - National Instruments) Hidden NI Web-Based Configuration and Monitoring 2013 (HKLM-x32\...\{2DD64FD3-64E6-4198-9E3B-41686C4048CA}) (Version: 13.0.306 - National Instruments) Hidden NI Xalan Delay Load 1.10.2 (HKLM-x32\...\{2CB15350-C073-4A5B-A706-59E1F69DE11C}) (Version: 1.10.72.0 - National Instruments) Hidden NI Xalan Delay Load 1.10.2 64-bit (HKLM\...\{B9293F41-3CB1-4E86-9523-010F8ACB782D}) (Version: 1.10.73.0 - National Instruments) Hidden NI Xerces Delay Load 2.7.3 (HKLM-x32\...\{E6068691-1FBC-4EF0-87E8-609CDB32038A}) (Version: 2.7.180.0 - National Instruments) Hidden NI Xerces Delay Load 2.7.3 64-bit (HKLM\...\{50B2D9D8-87B6-49EE-BC5C-874119FD6B7B}) (Version: 2.7.190.0 - National Instruments) Hidden NI-DAQmx/LabVIEW shared documentation 9.7.5 (HKLM-x32\...\{55D00097-F9A4-4979-863C-E5345629D505}) (Version: 9.75.49152 - National Instruments) Hidden NI-DAQmx/LabVIEW shared documentation for 64 Bit Windows 9.7.5 (HKLM\...\{CC95B8ED-58F6-4D0A-B040-75C9EA073ED1}) (Version: 9.75.49152 - National Instruments) Hidden NI-Mesa (HKLM\...\{7716F0A8-AFEF-4C22-9A10-4D5BDCD6471D}) (Version: 12.0.7.0 - National Instruments) Hidden NI-Mesa (HKLM-x32\...\{3AA5FCD0-8215-4604-920C-BC87CE1D843B}) (Version: 12.0.7.0 - National Instruments) Hidden NI-RPC 4.4.0f0 (HKLM-x32\...\{9125CF98-08A9-41AA-96B9-A7A7A255E3DC}) (Version: 4.40.49152 - National Instruments) Hidden NI-RPC 4.4.0f0 for 64 Bit Windows (HKLM\...\{B1153914-2CA8-4FFE-855E-FAC61EFD9C0D}) (Version: 4.40.49152 - National Instruments) Hidden NI-RPC 4.4.0f0 for Phar Lap ETS (HKLM-x32\...\{9CF01499-669E-472A-89E3-54CC30C4FDBB}) (Version: 4.40.49152 - National Instruments) Hidden Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.5 - Notepad++ Team) NVIDIA 3D Vision Controller Driver 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation) NVIDIA GeForce Experience 3.6.0.74 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.6.0.74 - NVIDIA Corporation) NVIDIA HD Audio Driver 1.3.34.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.27 - NVIDIA Corporation) NVIDIA PhysX System Software 9.17.0329 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0329 - NVIDIA Corporation) NvNodejs (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvNodejs) (Version: 3.6.0.74 - NVIDIA Corporation) Hidden NvTelemetry (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetry) (Version: 2.4.10.0 - NVIDIA Corporation) Hidden NvvHci (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvvHci) (Version: 2.02.0.5 - NVIDIA Corporation) Hidden OCCT 4.4.1 (HKLM-x32\...\OCCT) (Version: 4.4.1 - Ocbase.com) Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.9126.2275 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.9126.2275 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.9126.2275 - Microsoft Corporation) Hidden Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - ) OpenTTD 1.7.0 (HKLM-x32\...\OpenTTD) (Version: 1.7.0 - OpenTTD) Papers, Please (HKLM-x32\...\GOGPACKPAPERSPLEASE_is1) (Version: 2.4.0.10 - GOG.com) Pasco USB Driver (HKLM-x32\...\PascoUSBDriver) (Version: - ) PascoCommonFiles (HKLM-x32\...\PascoCommonFiles) (Version: 1.1.13 - ) PDF Settings CS5 (HKLM-x32\...\{A78FE97A-C0C8-49CE-89D0-EDD524A17392}) (Version: 10.0 - Adobe Systems Incorporated) Hidden PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.5.1 - pdfforge GmbH) PerformanceTest v7.0 (64-bit) (HKLM\...\PerformanceTest 7_is1) (Version: 7.0 - Passmark Software) PerformanceTest v7.0 (HKLM-x32\...\PerformanceTest 7_is1) (Version: 7.0 - Passmark Software) PerformanceTest v9.0 (HKLM\...\PerformanceTest 9_is1) (Version: 9.0.1020.0 - Passmark Software) Port Forward Network Utilities (HKLM-x32\...\{88B1D36C-7B70-4C48-8D2F-AAB956ECF4C3}) (Version: 2.0.9 - Portforward, LLC) POWERPREP II (HKLM-x32\...\{2687340C-C114-47DC-9F0E-C1BA85FEB001}) (Version: 2.2.0000 - ETS) Python 3.6.1 (32-bit) (HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\{1babc3bc-6a32-44f7-bf4d-60eec36c9ad1}) (Version: 3.6.1150.0 - Python Software Foundation) Python 3.6.1 Add to Path (32-bit) (HKLM-x32\...\{ED8BD450-5015-4CB3-95B5-2D93F23E111B}) (Version: 3.6.1150.0 - Python Software Foundation) Hidden Python 3.6.1 Core Interpreter (32-bit) (HKLM-x32\...\{E63E60CA-437B-4894-8395-81F2F66483B0}) (Version: 3.6.1150.0 - Python Software Foundation) Hidden Python 3.6.1 Development Libraries (32-bit) (HKLM-x32\...\{3029D656-0C32-4AC9-84FB-A15056F356CC}) (Version: 3.6.1150.0 - Python Software Foundation) Hidden Python 3.6.1 Documentation (32-bit) (HKLM-x32\...\{D1198C40-C6F5-4FFB-B98C-79BF1FE706C1}) (Version: 3.6.1150.0 - Python Software Foundation) Hidden Python 3.6.1 Executables (32-bit) (HKLM-x32\...\{A7036382-80F1-4FC1-B244-D31AA50337F4}) (Version: 3.6.1150.0 - Python Software Foundation) Hidden Python 3.6.1 pip Bootstrap (32-bit) (HKLM-x32\...\{899F7F28-F6D3-4E5B-8FBE-F7929036172A}) (Version: 3.6.1150.0 - Python Software Foundation) Hidden Python 3.6.1 Standard Library (32-bit) (HKLM-x32\...\{3BCCB89B-CD98-4F78-8436-78847FABFD68}) (Version: 3.6.1150.0 - Python Software Foundation) Hidden Python 3.6.1 Tcl/Tk Support (32-bit) (HKLM-x32\...\{F6ED0771-FE83-4A1C-BE65-A06CB65B46D5}) (Version: 3.6.1150.0 - Python Software Foundation) Hidden Python 3.6.1 Test Suite (32-bit) (HKLM-x32\...\{F44EF183-905E-48BB-998E-53FC99B36FE3}) (Version: 3.6.1150.0 - Python Software Foundation) Hidden Python 3.6.1 Utility Scripts (32-bit) (HKLM-x32\...\{2AA7DAB3-6778-42A7-9F33-22615234540E}) (Version: 3.6.1150.0 - Python Software Foundation) Hidden Python Launcher (HKLM-x32\...\{323AC113-C6CE-4F99-842F-4936332D055A}) (Version: 3.6.5923.0 - Python Software Foundation) Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{7D916FA5-DAE9-4A25-B089-655C70EAF607}) (Version: 3.0 - Qualcomm Atheros) Rainmeter (HKLM-x32\...\Rainmeter) (Version: 2.5 r1842 - ) Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 2.21.18.115 - Razer Inc.) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.370.70 - Realtek Semiconductor Corp.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7464 - Realtek Semiconductor Corp.) Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform) Reset NI Config 5.5.0 (HKLM-x32\...\{32D5858D-5BCE-407A-93CD-897E867ABA51}) (Version: 5.50.227 - National Instruments) Hidden RivaTuner Statistics Server 5.2.0 (HKLM-x32\...\RTSS) (Version: 5.2.0 - Unwinder) RNX-N180UBE 11n USB Wireless LAN Driver (HKLM-x32\...\{B20F9D1C-A0A5-4cd8-8306-DE95842311B1}) (Version: 1.00.0175 - Rosewill Corp.) RuneScape Launcher 2.2.4 (HKLM\...\RuneScape Launcher_is1) (Version: 2.2.4 - Jagex Ltd) SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.14.0 - SAMSUNG Electronics Co., Ltd.) Sharepod 4.0.0.3 (HKLM-x32\...\{085BCFB8-F6FB-4600-AFAB-1F6DBC7F5F99}_is1) (Version: - Macroplant LLC) SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0370 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 3.6.0.74 - NVIDIA Corporation) Hidden Siemens NX 10.0 (HKLM\...\{11B4AD15-AE98-4618-B90A-562EC6875DC3}) (Version: 10.0.0.24 - Siemens) Siemens PLM License Server (HKLM\...\Siemens PLM License Server) (Version: 6.4.2.1 - Siemens Product Lifecycle Management Software Inc.) SketchUp Import (HKLM-x32\...\{C403E867-FCF1-432B-BCC1-8FFD40A10A6E}) (Version: 1.2.0 - Autodesk) Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.103 - Skype Technologies S.A.) Sophos Anti-Virus (HKLM-x32\...\{6654537D-935E-41C0-A18A-C55C2BF77B7E}) (Version: 10.8.1.316 - Sophos Limited) Sophos AutoUpdate (HKLM-x32\...\{AFBCA1B9-496C-4AE6-98AE-3EA1CFF65C54}) (Version: 5.11.206 - Sophos Limited) Sophos System Protection (HKLM-x32\...\{1093B57D-A613-47F3-90CF-0FD5C5DCFFE6}) (Version: 1.3.1 - Sophos Limited) Speccy (HKLM\...\Speccy) (Version: 1.20 - Piriform) SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - ) Spotify (HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\Spotify) (Version: 1.0.68.407.g6864aaaf - Spotify AB) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited) StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment) Stardock Fences 2 (HKLM-x32\...\Stardock Fences 2) (Version: 2.12 - Stardock Software, Inc.) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Stellarium 0.11.4 (HKLM-x32\...\Stellarium_is1) (Version: 0.11.4 - Stellarium team) SumatraPDF (HKLM-x32\...\SumatraPDF) (Version: 3.0 - Krzysztof Kowalczyk) SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1260 - SUPERAntiSpyware.com) SyncToy 2.1 (x64) (HKLM\...\{88DAAF05-5A72-46D2-A7C5-C3759697E943}) (Version: 2.1.0 - Microsoft) TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH) TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.72365 - TeamViewer) Texmaker (HKLM-x32\...\Texmaker) (Version: - ) Unchecky v1.2 (HKLM-x32\...\Unchecky) (Version: 1.2 - Reason Software Company Inc.) VI Package Manager 2013 (HKLM-x32\...\{0A84E377-C315-48EC-A99A-C5F5F8432FCF}) (Version: 13.0.1879 - JKI) VI Package Manager 2013 (HKLM-x32\...\{9645A76D-DEF7-4783-B710-AF611CAA23D9}) (Version: 13.0.0 - National Instruments) Hidden Virtual Audio Cable 4.9 (HKLM\...\Virtual Audio Cable 4.9) (Version: - ) Virtual Router v1.0 (HKLM-x32\...\{BE905C46-2B34-4D73-AEE1-769ED138E0FF}) (Version: 1.0 - Chris Pietschmann) Vistumbler (HKLM-x32\...\Vistumbler) (Version: v10 - Vistumbler.net) VLC media player 2.0.6 (HKLM-x32\...\VLC media player) (Version: 2.0.6 - VideoLAN) VSO ConvertXToDVD (HKLM-x32\...\{CE1F93C0-4353-4C9D-84DA-AB4E7C63ED32}_is1) (Version: 5.2.0.45 - VSO Software) VSO ConvertXToDVD 7 (HKLM-x32\...\{A021D003-6933-4EA4-B582-F1D0C3E52409}_is1) (Version: 7.0.0.36 - VSO Software) WIF Core Dependencies Windows 5.5.0 (HKLM-x32\...\{4C280606-F07F-4BF4-80D1-CBEEC51A866C}) (Version: 5.50.155 - National Instruments) Hidden Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc) Winamp Detector Plug-in (HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc) WinDirStat 1.1.2 (HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\WinDirStat) (Version: - ) Windows Driver Package - PASCO Scientific (WinUSB) Pasco Interface (08/14/2008 1.0.0.0) (HKLM\...\AD4AD0F184940E4712E96652A58ADDC47894E622) (Version: 08/14/2008 1.0.0.0 - PASCO Scientific) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.) WinZip 15.0 (HKLM-x32\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240BE}) (Version: 15.0.9302 - WinZip Computing, S.L. ) Wireshark 2.4.1 64-bit (HKLM-x32\...\Wireshark) (Version: 2.4.1 - The Wireshark developer community, hxxps://www.wireshark.org) Wolfram Extras 10.0 (5203600) (HKLM\...\A-WIN-Extras 10.0.2 5203600_is1) (Version: 10.0.2 - Wolfram Research, Inc.) Wolfram Mathematica 10 (M-WIN-L 10.0.2 5206639) (HKLM\...\M-WIN-L 10.0.2 5206639_is1) (Version: 10.0.2 - Wolfram Research, Inc.) Xml Viewer (HKLM-x32\...\{F58E04CD-6E76-43C8-AAF1-482225C2910E}) (Version: 3 - MindFusion Limited) YouTube Downloader App 3.00 (HKLM-x32\...\YouTube Downloader App) (Version: 3.00 - Regensoft) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{083f5ae0-2b0a-11dd-bd0b-0800200c9a66}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{0B628DE4-07AD-4284-81CA-5B439F67C5E6}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{25815CC0-43F4-3C75-8C3A-A139D9ADE740}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{42ED960B-3C77-4008-A81E-C655146B1FD5}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{5b55a44a-d008-49aa-9234-86fb7709bc0a}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{91A41FCC-BC02-42D8-A36E-0D27FF9BFFC8}\InprocServer32 -> C:\Users\STEVEN_DESKTOP\AppData\Local\Google\Update\1.3.33.7\psuser_64.dll => No File CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2015\en-US\acadficn.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\STEVEN_DESKTOP\AppData\Local\Google\Update\1.3.33.17\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{EA724FD3-844D-43A9-A8C9-A5BC35FC20E4}\InprocServer32 -> C:\Users\STEVEN_DESKTOP\AppData\Local\Google\Update\1.3.33.17\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\DropboxExt64.24.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{F09690BD-582D-4439-B6ED-5C2545D2F424}\InprocServer32 -> C:\Windows\system32\kernel32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\DropboxExt64.24.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\DropboxExt64.24.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\DropboxExt64.24.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\DropboxExt64.24.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\DropboxExt64.24.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\DropboxExt64.24.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\DropboxExt64.24.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\DropboxExt64.24.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\DropboxExt64.24.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\DropboxExt64.24.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\DropboxExt64.24.0.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-05-30] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-05-30] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-05-30] (Google) ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.) ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\DropboxExt64.24.0.dll [2018-08-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\DropboxExt64.24.0.dll [2018-08-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\DropboxExt64.24.0.dll [2018-08-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\DropboxExt64.24.0.dll [2018-08-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\DropboxExt64.24.0.dll [2018-08-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\DropboxExt64.24.0.dll [2018-08-31] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\DropboxExt64.24.0.dll [2018-08-31] (Dropbox, Inc.) ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2014-02-07] (Autodesk) ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_05.dll [2012-06-18] () ContextMenuHandlers1-x32: [Cover Designer] -> {73FCA462-9BD5-4065-A73F-A8E5F6904EF7} => C:\Program Files (x86)\Nero\Nero 7\Nero CoverDesigner\CoverEdExtension.dll [2007-06-28] (Nero AG) ContextMenuHandlers1-x32: [DefragglerShellExtension] -> {4380C993-0C43-4E02-9A7A-0D40B6EA7590} => C:\Program Files\Defraggler\DefragglerShell64.dll [2014-04-09] (Piriform Ltd) ContextMenuHandlers1-x32: [FencesShellExt] -> {1984DD45-52CF-49cd-AB77-18F378FEA264} => C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll [2013-11-26] (Stardock) ContextMenuHandlers1-x32: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-05-30] (Google) ContextMenuHandlers1-x32: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2015-12-21] (Glarysoft Ltd) ContextMenuHandlers1-x32-x32: [MyPhoneExplorer] -> {A372C6DF-7A85-41B1-B3B0-D1E24073DCBF} => S:\Program Files (x86)\MyPhoneExplorer\DLL\ShellMgr.dll -> No File ContextMenuHandlers1-x32-x32: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => C:\Windows\system32\mscoree.dll [2010-11-20] (Microsoft Corporation) ContextMenuHandlers1-x32-x32: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2015-11-30] (Apple Inc.) ContextMenuHandlers1-x32-x32: [ReflectShellExt] -> {DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611} => C:\Program Files\Macrium\Reflect\RContextMenu.dll [2014-07-21] (Paramount Software UK Ltd) ContextMenuHandlers1-x32-x32: [SavShellExt] -> {A3A1D8A1-006D-4B93-BA27-6F6B4C9C4F1D} => C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll [2018-03-06] (Sophos Limited) ContextMenuHandlers1-x32-x32: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files (x86)\WinZip\wzshls64.dll [2010-10-29] (WinZip Computing, S.L.) ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2015-12-21] (Glarysoft Ltd) ContextMenuHandlers2: [ReflectShellExt] -> {DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611} => C:\Program Files\Macrium\Reflect\RContextMenu.dll [2014-07-21] (Paramount Software UK Ltd) ContextMenuHandlers2: [SavShellExt] -> {A3A1D8A1-006D-4B93-BA27-6F6B4C9C4F1D} => C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll [2018-03-06] (Sophos Limited) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes) ContextMenuHandlers4: [FencesShellExt] -> {1984DD45-52CF-49cd-AB77-18F378FEA264} => C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll [2013-11-26] (Stardock) ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-05-30] (Google) ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd) ContextMenuHandlers4: [SavShellExt] -> {A3A1D8A1-006D-4B93-BA27-6F6B4C9C4F1D} => C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll [2018-03-06] (Sophos Limited) ContextMenuHandlers4: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files (x86)\WinZip\wzshls64.dll [2010-10-29] (WinZip Computing, S.L.) ContextMenuHandlers5: [FencesShellExt] -> {1984DD45-52CF-49cd-AB77-18F378FEA264} => C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll [2013-11-26] (Stardock) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2015-04-08] (NVIDIA Corporation) ContextMenuHandlers6: [DefragglerShellExtension] -> {4380C993-0C43-4E02-9A7A-0D40B6EA7590} => C:\Program Files\Defraggler\DefragglerShell64.dll [2014-04-09] (Piriform Ltd) ContextMenuHandlers6: [FencesShellExt] -> {1984DD45-52CF-49cd-AB77-18F378FEA264} => C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll [2013-11-26] (Stardock) ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2015-12-21] (Glarysoft Ltd) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes) ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd) ContextMenuHandlers6: [SavShellExt] -> {A3A1D8A1-006D-4B93-BA27-6F6B4C9C4F1D} => C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll [2018-03-06] (Sophos Limited) ContextMenuHandlers6: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files (x86)\WinZip\wzshls64.dll [2010-10-29] (WinZip Computing, S.L.) ContextMenuHandlers1_S-1-5-21-1752262018-2004630284-3030787665-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\DropboxExt64.24.0.dll [2018-08-31] (Dropbox, Inc.) ContextMenuHandlers4_S-1-5-21-1752262018-2004630284-3030787665-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\DropboxExt64.24.0.dll [2018-08-31] (Dropbox, Inc.) ContextMenuHandlers5_S-1-5-21-1752262018-2004630284-3030787665-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\DropboxExt64.24.0.dll [2018-08-31] (Dropbox, Inc.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {09AF6F51-D3B7-47C4-83F3-84E9BF6B14D4} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1752262018-2004630284-3030787665-1000Core => C:\Users\STEVEN_DESKTOP\AppData\Local\Google\Update\GoogleUpdate.exe [2017-03-15] (Google Inc.) Task: {0B93F043-0CFF-4C91-98BB-42F4C0428B1A} - System32\Tasks\JKIUpdateTask => C:\Program Files (x86)\JKI\VI Package Manager\support\JKIUpdate.exe [2013-05-23] (JKI) Task: {0BDC0F0D-3EB2-4DCE-8171-02971CE1F96B} - System32\Tasks\SUPERAntiSpyware Scheduled Task d9e9253f-662b-41b0-b98b-843d4fd4e249 => C:\Program Files\SUPERAntiSpyware\SASTask.exe [2013-11-07] (SUPERAdBlocker.com) Task: {1E6ED709-3088-49E3-BA21-4EA4F68AE5D0} - System32\Tasks\EVGAPrecisionX => C:\Program Files (x86)\EVGA\PrecisionX 16\PrecisionX_x64.exe [2014-10-23] (EVGA Corp.) Task: {33838BDA-83CC-47DE-A990-81D138CCC7E5} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-05-03] (NVIDIA Corporation) Task: {3582B291-EB73-4B8B-85AB-F4AAAB8082EC} - System32\Tasks\NIUpdateServiceCheckTask => S:\Program Files (x86)\National Instruments\Shared\Update Service\NIUpdateService.exe Task: {37976759-20D5-4718-97F3-8B3E5141E928} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-05-03] (NVIDIA Corporation) Task: {38E80B20-255D-4D74-9EBA-3E463D7BBBEE} - System32\Tasks\EVGAPrecision => C:\Program Files (x86)\EVGA Precision X\EVGAPrecision.exe Task: {3D1B0B3F-7877-4389-800E-2B2051BFBE1F} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-05-03] (NVIDIA Corporation) Task: {414444DF-A2BD-40BC-B76A-23629CA69DFF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-15] (Adobe Systems Incorporated) Task: {5B3D035F-4870-455E-8254-BBC7A234F58D} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-05-03] (NVIDIA Corporation) Task: {63C272BA-DD27-4697-9060-A2679FDCE963} - System32\Tasks\{A6F8FFAA-A35F-4C7C-A39B-CBDF63515417} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.40.0.103&LastError=12040 Task: {6A3F7CD3-EE36-4040-A962-25D6FCC3CC10} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-08-07] (Microsoft Corporation) Task: {6E20A960-9492-424F-B864-4CCE7AB7C3C3} - System32\Tasks\ASUS\ASUS Network iControl Help Execute => S:\Program Files (x86)\AI Suite II\Network iControl\NetSvcHelp\NetSvcHelpEntry.exe Task: {741AB126-BC11-4EDA-BE07-3A66AB91BCB5} - System32\Tasks\GlaryInitialize 5 => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe [2016-01-04] (Glarysoft Ltd) Task: {773745D4-D52F-4256-ADC8-837E6FFC324F} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-05-03] (NVIDIA Corporation) Task: {78CDBF8A-7A26-4C98-B2FA-39E06BE9B95E} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-05-03] (NVIDIA Corporation) Task: {7A6ABF73-358B-46EE-A448-CE82B2D4976D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2018-08-24] (Microsoft Corporation) Task: {7D44C291-7C8A-4BA3-BA0B-C2DACE0C6991} - System32\Tasks\MSIAfterburner => S:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe Task: {803AF43D-E9C7-4C56-8D39-58FC4C4D3BFE} - System32\Tasks\{4573263F-15EE-43A1-A892-6ECBCAC430E6} => C:\Windows\system32\pcalua.exe -a S:\Users\STEVEN_DESKTOP\Downloads\Chrome\Mobiless.exe -d S:\Users\STEVEN_DESKTOP\Downloads\Chrome Task: {83225A43-85EC-4230-A30B-423A55CC3461} - System32\Tasks\RTSS => S:\Program Files (x86)\MSI Afterburner\Bundle\OSDServer\RTSS.exe Task: {850DD5E8-7918-4ABE-96F0-D21A7150C747} - System32\Tasks\{EDE10845-491B-4165-9F16-086037ECEE7A} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Steam\steamapps\common\Left 4 Dead 2\bin\addoninstaller.exe" -d "C:\Program Files (x86)\Steam\steamapps\common\Left 4 Dead 2" -c /register Task: {853A078F-9073-498F-81D5-2514CD510442} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1752262018-2004630284-3030787665-1000Core => C:\Users\STEVEN_DESKTOP\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.) Task: {8BB07919-3D04-4E0B-B0A6-F66D24593FBF} - System32\Tasks\ASUS\ASUS WiFi GO! Server Execute => S:\Program Files (x86)\AI Suite II\Wi-Fi GO!\AssistTools\WiFi GO! Server.exe Task: {93F1BC75-DFD3-4EC6-AFC1-2CD97D7ECF30} - System32\Tasks\SUPERAntiSpyware Scheduled Task b43940ce-84ed-41fc-b4e8-98a75112eb43 => C:\Program Files\SUPERAntiSpyware\SASTask.exe [2013-11-07] (SUPERAdBlocker.com) Task: {9D719A20-65D5-44D6-856E-A0E607A31B7F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.) Task: {A1F700C6-8212-44E4-A9EA-5C47638C1CE6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.) Task: {A2FF50C1-17E7-450F-BAE1-2DE6EA910893} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-05-03] (NVIDIA Corporation) Task: {A7797FEB-FD31-44AC-BFEC-0333C6D077D5} - System32\Tasks\{BB39BF98-B1AE-4C91-A9B7-C707CAB35584} => C:\Windows\system32\pcalua.exe -a "S:\Program Files (x86)\Steam\steamapps\common\Left 4 Dead 2\bin\addoninstaller.exe" -d "S:\Program Files (x86)\Steam\steamapps\common\Left 4 Dead 2" -c /register Task: {A8D35D1F-D26B-4EC0-B000-05DE3F735606} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work => C:\Windows\system32\WorkFoldersSystemTray.exe [2015-09-04] (Microsoft Corporation) Task: {AEA6FAAB-7A3A-45EE-AEDB-4E74117C6748} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1752262018-2004630284-3030787665-1000UA => C:\Users\STEVEN_DESKTOP\AppData\Local\Google\Update\GoogleUpdate.exe [2017-03-15] (Google Inc.) Task: {B026EB68-6E73-4977-B092-8A8E0245FEB8} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2018-08-24] (Microsoft Corporation) Task: {B3B8B66F-28EF-448B-8BDC-2C43EA992E77} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2018-08-24] (Microsoft Corporation) Task: {B99CC638-D8D9-41EE-9A10-5E6B350A4685} - System32\Tasks\PCMeter\Startup => S:\Users\STEVEN_DESKTOP\Downloads\Chrome\PCMeter\PCMeterV0.3.exe Task: {BB1F4F93-CD42-415D-8EE5-C3E229EDD80E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-03-21] (Adobe Systems Incorporated) Task: {C3838A5F-4A0D-4EC7-9F40-D156F6658521} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-05-03] (NVIDIA Corporation) Task: {DD319708-A14F-43A9-8347-8F096ECA0B76} - System32\Tasks\{F4F60C81-14E5-40AA-AB3A-80CD7E3340AF} => C:\Windows\system32\pcalua.exe -a C:\Users\STEVEN_DESKTOP\Downloads\setup_en.exe -d C:\Users\STEVEN_DESKTOP\Downloads Task: {E557CBE9-DF7E-47A2-8780-4EBF557332DC} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe Task: {E8E66363-DF6A-4771-9C6A-4643FE5A03CD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.) Task: {EC1A8D82-BDB7-4E78-8F16-C94D07B1D442} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-08-07] (Microsoft Corporation) Task: {EDB49EBF-F578-4724-A55A-3AA335A3E91E} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-08-24] (Microsoft Corporation) Task: {F222FCCB-3452-480D-B71F-79933C711422} - System32\Tasks\GU5SkipUAC => C:\Program Files (x86)\Glary Utilities 5\Integrator.exe [2016-01-04] (Glarysoft Ltd) Task: {F47B5E36-86AD-4717-A7C4-1DBF47475CA9} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-08-24] (Microsoft Corporation) Task: {F5AA4E26-B311-4216-97D7-3D589D88F277} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1752262018-2004630284-3030787665-1000UA => C:\Users\STEVEN_DESKTOP\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1752262018-2004630284-3030787665-1000Core.job => C:\Users\STEVEN_DESKTOP\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1752262018-2004630284-3030787665-1000UA.job => C:\Users\STEVEN_DESKTOP\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task b43940ce-84ed-41fc-b4e8-98a75112eb43.job => C:\Program Files\SUPERAntiSpyware\SASTask.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task d9e9253f-662b-41b0-b98b-843d4fd4e249.job => C:\Program Files\SUPERAntiSpyware\SASTask.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe ==================== Shortcuts & WMI ======================== (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2017-04-18 19:31 - 2016-01-22 17:57 - 000089008 _____ () C:\Windows\System32\cpwmon64.dll 2016-04-22 01:07 - 2016-04-22 01:07 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2016-04-22 01:07 - 2016-04-22 01:07 - 001337144 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2017-11-16 02:05 - 2017-06-06 21:42 - 001666664 _____ () C:\Program Files (x86)\Everything\Everything.exe 2016-11-05 11:43 - 2017-05-03 16:21 - 001267320 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll 2014-01-10 14:40 - 2014-01-10 14:49 - 000076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2017-07-19 18:09 - 2017-07-19 18:09 - 000189264 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe 2013-04-09 09:12 - 2012-09-11 23:14 - 000390672 _____ () C:\Program Files\Cyberlink\Shared files\RichVideo64.exe 2018-09-05 14:18 - 2018-06-18 13:32 - 002433744 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll 2012-06-01 05:42 - 2013-07-27 15:21 - 000920736 ____N () C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe 2016-05-06 15:46 - 2018-08-03 09:37 - 008936112 _____ () C:\Program Files\Microsoft Office\root\Office16\1033\GrooveIntlResource.dll 2017-07-28 22:45 - 2017-07-28 22:45 - 000298448 _____ () C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe 2015-07-22 11:54 - 2015-07-22 11:54 - 000063376 _____ () C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll 2014-09-02 21:10 - 2014-06-21 02:19 - 000047496 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\QtSolutions_Service-head.dll 2014-09-02 21:10 - 2014-06-21 02:19 - 000104328 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\qjson0.dll 2013-04-06 23:10 - 2018-09-05 14:20 - 000030720 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\PEbiosinterface32.dll 2013-04-06 23:10 - 2010-06-28 22:58 - 000104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\ATKEX.dll 2014-04-27 15:51 - 1999-12-31 20:00 - 001242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2016-11-05 11:43 - 2017-05-03 16:21 - 001040504 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll 2018-08-31 14:01 - 2018-08-31 04:29 - 001113928 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\dropbox_watchdog.dll 2018-08-31 14:01 - 2018-08-31 04:29 - 002247496 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\dropbox_crashpad.dll 2018-05-26 14:05 - 2018-08-31 04:33 - 000023888 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\tornado.speedups.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:31 - 000025456 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.cp35-win32.pyd 2018-01-25 20:47 - 2018-08-31 04:28 - 000142824 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\_cffi_backend.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:31 - 001958760 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:31 - 000025960 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:29 - 000117272 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\pywintypes35.dll 2018-05-26 14:05 - 2018-08-31 04:28 - 000109024 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\win32api.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:31 - 000083784 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\fastpath.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:29 - 000418776 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\pythoncom35.dll 2018-05-26 14:05 - 2018-08-31 04:28 - 000027616 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\win32event.cp35-win32.pyd 2018-05-26 14:05 - 2018-08-31 04:28 - 000049128 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\win32process.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:31 - 000074584 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.cp35-win32.pyd 2018-05-26 14:05 - 2018-08-31 04:28 - 000131552 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\win32file.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:31 - 000025944 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.cp35-win32.pyd 2018-05-26 14:05 - 2018-08-31 04:28 - 000026600 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\win32clipboard.cp35-win32.pyd 2018-05-26 14:05 - 2018-08-31 04:28 - 000182752 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\win32gui.cp35-win32.pyd 2018-05-26 14:05 - 2018-08-31 04:28 - 000027616 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\win32pipe.cp35-win32.pyd 2018-05-26 14:05 - 2018-08-31 04:28 - 000119272 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\win32security.cp35-win32.pyd 2018-05-26 14:05 - 2018-08-31 04:33 - 000401240 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\win32com.shell.shell.cp35-win32.pyd 2018-05-26 14:05 - 2018-08-31 04:28 - 000028640 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\win32job.cp35-win32.pyd 2018-01-25 20:47 - 2018-08-31 04:34 - 000034664 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\winffi.kernel32.compiled._winffi_kernel32.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:28 - 000023520 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\mmapfile.cp35-win32.pyd 2018-05-26 14:05 - 2018-08-31 04:28 - 000053736 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\win32service.cp35-win32.pyd 2018-05-26 14:05 - 2018-08-31 04:28 - 000065504 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\win32evtlog.cp35-win32.pyd 2018-01-25 20:47 - 2018-08-31 04:34 - 000059744 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\winshell.compiled._winshell.cp35-win32.pyd 2018-05-26 14:05 - 2018-08-31 04:33 - 000068968 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\winenumhandles.compiled._WinEnumHandles.cp35-win32.pyd 2018-01-25 20:47 - 2018-08-31 04:34 - 000028520 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:31 - 000027488 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\crashpad.compiled._Crashpad.cp35-win32.pyd 2018-05-26 14:05 - 2018-08-31 04:28 - 000032736 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\win32ts.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:32 - 000156504 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.cp35-win32.pyd 2018-05-26 14:05 - 2018-08-31 04:33 - 000092488 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\sip.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:31 - 001779024 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:32 - 000519504 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:32 - 000052056 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineCore.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:31 - 001929552 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:32 - 003822416 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:32 - 000044888 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:32 - 000131016 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:32 - 000218456 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:32 - 000205656 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.cp35-win32.pyd 2018-05-26 14:05 - 2018-08-31 04:28 - 000061408 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\win32print.cp35-win32.pyd 2018-01-25 20:47 - 2018-08-31 04:34 - 000051552 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\winrpcserver.compiled._RPCServer.cp35-win32.pyd 2018-05-26 14:05 - 2018-08-31 04:28 - 000027624 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\win32profile.cp35-win32.pyd 2018-07-30 16:12 - 2018-08-31 04:34 - 000033632 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\winreindex.compiled._winreindex.cp35-win32.pyd 2018-01-25 20:47 - 2018-08-31 04:34 - 000028008 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\winffi.user32.compiled._winffi_user32.cp35-win32.pyd 2018-01-25 20:47 - 2018-08-31 04:34 - 000025960 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\winffi.iphlpapi.compiled._winffi_iphlpapi.cp35-win32.pyd 2018-01-25 20:47 - 2018-08-31 04:34 - 000025448 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\winffi.winerror.compiled._winffi_winerror.cp35-win32.pyd 2018-01-25 20:47 - 2018-08-31 04:34 - 000025960 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\winffi.wininet.compiled._winffi_wininet.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:31 - 000031600 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.cp35-win32.pyd 2018-01-25 20:47 - 2018-08-31 04:28 - 000494048 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\winxpgui.cp35-win32.pyd 2018-01-25 20:47 - 2018-08-31 04:34 - 000029040 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:31 - 000029024 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:29 - 000036312 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\librsync.dll 2018-05-26 14:05 - 2018-08-31 04:34 - 000025960 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\winffi.advapi32.compiled._winffi_advapi32.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:31 - 000441672 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL 2018-05-26 14:05 - 2018-08-31 04:33 - 000035680 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\wind3d11.compiled._wind3d11.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:31 - 000025920 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\libEGL.DLL 2018-08-31 14:01 - 2018-08-31 04:31 - 001590200 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\libGLESv2.dll 2018-01-25 20:47 - 2018-08-31 04:34 - 000029544 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\winffi.winhttp.compiled._winffi_winhttp.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:32 - 000529352 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:32 - 000354128 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.cp35-win32.pyd 2018-08-31 14:01 - 2018-08-31 04:32 - 000037200 _____ () C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngine.cp35-win32.pyd 2017-01-16 07:40 - 2017-01-16 07:40 - 000143824 _____ () C:\ProgramData\Razer\Synapse\CrashReporter\CrashRpt1402.dll 2016-05-06 15:47 - 2018-08-03 09:38 - 008935600 _____ () C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\1033\GrooveIntlResource.dll 2017-09-14 08:03 - 2017-04-13 13:58 - 050656768 _____ () C:\Users\STEVEN_DESKTOP\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libcef.dll 2017-09-14 08:03 - 2017-04-13 13:58 - 001874944 _____ () C:\Users\STEVEN_DESKTOP\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libglesv2.dll 2017-09-14 08:03 - 2017-04-13 13:58 - 000075264 _____ () C:\Users\STEVEN_DESKTOP\AppData\Local\razer\InGameEngine\cache\RzStats.Manager\cef\libegl.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\ProgramData\Temp:4FC01C57 [134] AlternateDataStreams: C:\Users\Guest\Desktop\let1.png:3or4kl4x13tuuug3Byamue2s4b [81] AlternateDataStreams: C:\Users\Guest\Desktop\let1.png:com.dropbox.attributes [168] AlternateDataStreams: C:\Users\Guest\Desktop\let1.png:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMSwissArmy => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SAVService => ""="service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMSwissArmy => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SAVService => ""="service" ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1" ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com There are 7877 more sites. IE trusted site: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\sharepoint.com -> hxxps://liveconcordia-files.sharepoint.com IE restricted site: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\007guard.com -> install.007guard.com IE restricted site: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\008i.com -> 008i.com IE restricted site: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\008k.com -> www.008k.com IE restricted site: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\00hq.com -> www.00hq.com IE restricted site: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\010402.com -> 010402.com IE restricted site: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com IE restricted site: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\0scan.com -> www.0scan.com IE restricted site: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\1-2005-search.com -> www.1-2005-search.com IE restricted site: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com IE restricted site: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\1000gratisproben.com -> www.1000gratisproben.com IE restricted site: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\1001namen.com -> www.1001namen.com IE restricted site: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\100888290cs.com -> mir.100888290cs.com IE restricted site: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\100sexlinks.com -> www.100sexlinks.com IE restricted site: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\10sek.com -> www.10sek.com IE restricted site: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\12-26.net -> user1.12-26.net IE restricted site: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\12-27.net -> user1.12-27.net IE restricted site: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\123fporn.info -> www.123fporn.info IE restricted site: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com IE restricted site: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\123moviedownload.com -> www.123moviedownload.com IE restricted site: HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\...\123simsen.com -> www.123simsen.com There are 7877 more sites. ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-13 22:34 - 2018-09-05 14:18 - 000454997 ____R C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 127.0.0.1 www.0scan.com 127.0.0.1 0scan.com 127.0.0.1 1000gratisproben.com 127.0.0.1 www.1000gratisproben.com 127.0.0.1 1001namen.com 127.0.0.1 www.1001namen.com 127.0.0.1 100888290cs.com 127.0.0.1 www.100888290cs.com 127.0.0.1 www.100sexlinks.com 127.0.0.1 100sexlinks.com 127.0.0.1 10sek.com 127.0.0.1 www.10sek.com 127.0.0.1 www.1-2005-search.com 127.0.0.1 1-2005-search.com 127.0.0.1 123fporn.info 127.0.0.1 www.123fporn.info 127.0.0.1 www.123haustiereundmehr.com 127.0.0.1 123haustiereundmehr.com 127.0.0.1 123moviedownload.com There are 15639 more lines. ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-1752262018-2004630284-3030787665-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\STEVEN_DESKTOP\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: Media is not connected to internet. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == MSCONFIG\startupfolder: C:^Users^STEVEN_DESKTOP^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Rainmeter.lnk => C:\Windows\pss\Rainmeter.lnk.Startup MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun MSCONFIG\startupreg: Dropbox Update => "C:\Users\STEVEN_DESKTOP\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c MSCONFIG\startupreg: Fences => "C:\Program Files (x86)\Stardock\Fences\Fences.exe" /startup MSCONFIG\startupreg: uTorrent => "C:\Users\STEVEN_DESKTOP\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [TCP Query User{56474FAE-BD84-46B3-A2A6-679E3D4CD5DF}C:\users\steven_desktop\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\steven_desktop\appdata\local\akamai\netsession_win.exe FirewallRules: [UDP Query User{A018F622-271D-47F3-830F-6412AFB7BDCA}C:\users\steven_desktop\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\steven_desktop\appdata\local\akamai\netsession_win.exe FirewallRules: [{8A4E1232-0AB1-4797-907C-4342940C4F32}] => (Allow) C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{0D73B1FE-AF2F-4880-82E3-F25FEF388CC8}] => (Allow) C:\Users\STEVEN_DESKTOP\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [TCP Query User{C69E1C50-B965-432D-A6A1-747FA2918BD9}C:\users\steven_desktop\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\steven_desktop\appdata\local\akamai\netsession_win.exe FirewallRules: [UDP Query User{5EE84A24-F835-4F2C-8FD4-D32D7A5D8C56}C:\users\steven_desktop\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\steven_desktop\appdata\local\akamai\netsession_win.exe FirewallRules: [{EC37F366-D3B4-47A9-9BB3-C272688F6CAD}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [TCP Query User{7C39B5A9-89BC-4062-8E91-C2380F630D07}C:\users\steven_desktop\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\steven_desktop\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [UDP Query User{E5632386-52FF-4062-8F11-04AF7FB04D06}C:\users\steven_desktop\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\steven_desktop\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [{2EFEE655-5507-4ACD-B695-63A36565195C}] => (Allow) LPort=2869 FirewallRules: [{39B23E6F-6C17-4A32-9C78-75BB9A678BDD}] => (Allow) LPort=1900 FirewallRules: [{9794E7D4-9CD9-4EF7-B734-4021BD519EB9}] => (Allow) LPort=2869 FirewallRules: [{11DED567-7BD0-412D-9DD5-4842322F3CCF}] => (Allow) LPort=1900 FirewallRules: [TCP Query User{A37DD618-BEE3-4309-B904-08AE10691863}S:\users\steven_desktop\downloads\chrome\withsix-play (2).exe] => (Allow) S:\users\steven_desktop\downloads\chrome\withsix-play (2).exe FirewallRules: [UDP Query User{458465BF-4975-42D7-9FB5-3D64BA407637}S:\users\steven_desktop\downloads\chrome\withsix-play (2).exe] => (Allow) S:\users\steven_desktop\downloads\chrome\withsix-play (2).exe FirewallRules: [{CD7BB369-82FF-49B0-B388-6B019A7DCDA3}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{3D1FF415-5DE8-47D4-805D-86C56DB63848}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{450D32B6-0F15-453E-922F-511746E07916}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{9F45296C-A3B6-4CDC-B5DC-133F9E4049CD}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{7A49319E-7890-4525-B224-508BFFADDEBB}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe FirewallRules: [{EB134A57-E153-4BE5-B752-4A3D718E2D15}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe FirewallRules: [{943EB021-82E8-4B4E-9CD3-5BA20F7D7462}] => (Allow) C:\Users\STEVEN_DESKTOP\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{EEACB26E-7BCF-4546-8067-D34D17ED05EC}] => (Allow) C:\Users\STEVEN_DESKTOP\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [TCP Query User{0F502B2D-DE55-4657-AA33-E4E2B65E9F0B}C:\program files\maple 16\jre\bin\maple.exe] => (Allow) C:\program files\maple 16\jre\bin\maple.exe FirewallRules: [UDP Query User{A1763CDA-09A8-4FDB-9608-A790C167100E}C:\program files\maple 16\jre\bin\maple.exe] => (Allow) C:\program files\maple 16\jre\bin\maple.exe FirewallRules: [{5B2BAC43-2BDE-4AF8-8891-5DCBBBA7549D}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{6A58F151-4804-4082-AF9B-E4D50A6FF1A2}] => (Allow) LPort=2869 FirewallRules: [{352DC7E2-E1F1-4A87-BD63-0B67292A1458}] => (Allow) LPort=1900 FirewallRules: [{C14948FC-5894-4FCD-B85E-AD3E8260B545}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{B85AB951-8FCC-4DC5-9BB3-54CFCEC7C500}] => (Allow) LPort=2869 FirewallRules: [{C79E72D0-FF8D-4F3C-9CD5-7FA7FD1D8E01}] => (Allow) LPort=1900 FirewallRules: [{032A11D0-55D5-4775-B33B-1FEA8268AFAD}] => (Allow) LPort=2869 FirewallRules: [{93A59F50-FD79-4A28-8621-495E90F31500}] => (Allow) LPort=1900 FirewallRules: [{79E87044-3092-4420-B456-BF039006499F}] => (Block) C:\Program Files (x86)\AV Vcs 7.0 DIAMOND\VcsCore.exe FirewallRules: [{7D476C2C-A440-4DC8-AC8A-DD4C5B1FE931}] => (Allow) C:\Users\STEVEN_DESKTOP\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{48207E46-0A1F-4E55-AFEA-ECDE083C2AE0}] => (Allow) C:\Users\STEVEN_DESKTOP\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{014F1749-5FAB-41A0-B791-0E36B5B71DFF}] => (Allow) LPort=50248 FirewallRules: [{D84DAF15-6635-46E1-A733-B9DA9FAA3136}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe FirewallRules: [{7B8E4721-38FA-48AA-8E3D-357CB9EE3179}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe FirewallRules: [TCP Query User{9AEBC8A7-A715-441B-87A8-E08736122505}C:\program files (x86)\fahclient\fahclient.exe] => (Allow) C:\program files (x86)\fahclient\fahclient.exe FirewallRules: [UDP Query User{8B03FA9E-38B4-47A2-8DF5-4CF37090FA9F}C:\program files (x86)\fahclient\fahclient.exe] => (Allow) C:\program files (x86)\fahclient\fahclient.exe FirewallRules: [TCP Query User{DF4EBB2E-BE75-4B9B-8FF6-8B94E9E4E9CB}C:\program files (x86)\fahclient\fahclient.exe] => (Allow) C:\program files (x86)\fahclient\fahclient.exe FirewallRules: [UDP Query User{B0F8B9E4-17B3-4133-833C-1ACC2A3EFAE1}C:\program files (x86)\fahclient\fahclient.exe] => (Allow) C:\program files (x86)\fahclient\fahclient.exe FirewallRules: [TCP Query User{FB5E967B-262E-41A9-8560-3D5968B4A46B}C:\users\steven_desktop\appdata\local\id software\quakelive\quakelive.exe] => (Allow) C:\users\steven_desktop\appdata\local\id software\quakelive\quakelive.exe FirewallRules: [UDP Query User{6876C31C-0CF2-482B-A42A-A47540B5DA9D}C:\users\steven_desktop\appdata\local\id software\quakelive\quakelive.exe] => (Allow) C:\users\steven_desktop\appdata\local\id software\quakelive\quakelive.exe FirewallRules: [{A89D11CB-D61F-402C-A2ED-8B36BDD9EF87}] => (Allow) S:\Program Files (x86)\Wolfram\Mathematica.exe FirewallRules: [{150D9A7E-E9AB-4603-B9FC-A7B02BC81EEF}] => (Allow) S:\Program Files (x86)\Wolfram\Mathematica.exe FirewallRules: [{2F55F0D4-0E33-4C45-A81B-EB5446EE8290}] => (Allow) S:\Program Files (x86)\Wolfram\MathKernel.exe FirewallRules: [{D3EA2453-456F-4302-8069-0F516C2FCA79}] => (Allow) S:\Program Files (x86)\Wolfram\MathKernel.exe FirewallRules: [{69475FF0-57C3-4AF8-8181-6B5AD6606717}] => (Allow) S:\Program Files (x86)\Wolfram\math.exe FirewallRules: [{3851D13D-14DE-4C4B-A035-89571334E887}] => (Allow) S:\Program Files (x86)\Wolfram\math.exe FirewallRules: [TCP Query User{DBE45A18-5CE1-4E98-8595-6F8E850C40BF}S:\program files (x86)\starcraft ii\versions\base32283\sc2.exe] => (Allow) S:\program files (x86)\starcraft ii\versions\base32283\sc2.exe FirewallRules: [UDP Query User{A4959677-2798-469F-B45E-B2FF1C5C2720}S:\program files (x86)\starcraft ii\versions\base32283\sc2.exe] => (Allow) S:\program files (x86)\starcraft ii\versions\base32283\sc2.exe FirewallRules: [{44361242-9098-44AD-A891-103087FAA047}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{A7FF03B9-3DCB-44F6-A92D-5366E88DEC01}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{BEE33D29-425B-43B6-84AB-AEC098ECBA73}] => (Allow) S:\Program Files (x86)\AI Suite II\Wi-Fi GO!\AssistTools\WiFi GO! Server.exe FirewallRules: [{B542C162-F93D-4B8A-9D37-27CF4AF8836B}] => (Allow) S:\Program Files (x86)\AI Suite II\Wi-Fi GO!\AssistTools\WiFi GO! Server.exe FirewallRules: [{4E59F75D-CAEA-4B7C-9500-C9547E609864}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{587DE3A2-83D2-4913-88C5-41EBB7BF32AC}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{A7AB63E4-E7C9-41E7-B529-727D6008B6C9}S:\users\steven_desktop\downloads\chrome\eclipse\eclipse.exe] => (Allow) S:\users\steven_desktop\downloads\chrome\eclipse\eclipse.exe FirewallRules: [UDP Query User{CBF81F04-D58E-4A8A-996D-5521C32B15B5}S:\users\steven_desktop\downloads\chrome\eclipse\eclipse.exe] => (Allow) S:\users\steven_desktop\downloads\chrome\eclipse\eclipse.exe FirewallRules: [{9B5FD011-69B7-4FCA-81F9-5EBA3F2EE1BA}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{31400D34-3628-4CD5-A090-4216137C2D24}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{C64DA9ED-5D7D-4F6E-8410-3905009682EE}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{F4FB7B3A-5606-4C8A-B7E1-D4FC14F55D7B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{FF18805B-EE95-4DAB-A066-55EEE38AE011}] => (Allow) C:\Program Files\iTunes\iTunes.exe FirewallRules: [{4D43C1E2-FE02-43C3-8960-21AD659F65E4}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe FirewallRules: [{53043FA6-8369-4320-9AF2-CCF95FB9821D}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe FirewallRules: [{14ED2237-3B21-4FD8-B4CE-692D5198FFFC}] => (Allow) S:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{106A1154-DA8F-4199-995A-88C0D8652D3A}] => (Allow) S:\Program Files (x86)\Steam\Steam.exe FirewallRules: [TCP Query User{489759F3-5AA5-4CCF-BAFD-191604EF114C}S:\program files (x86)\siemens\nx 10.0\ugii\ugraf.exe] => (Allow) S:\program files (x86)\siemens\nx 10.0\ugii\ugraf.exe FirewallRules: [UDP Query User{00F19DDC-EB97-4B0E-AE54-669F2872BF4F}S:\program files (x86)\siemens\nx 10.0\ugii\ugraf.exe] => (Allow) S:\program files (x86)\siemens\nx 10.0\ugii\ugraf.exe FirewallRules: [{F85513EC-F1F0-4038-A9B3-6AE03FA3230E}] => (Allow) S:\Program Files (x86)\Steam\steamapps\common\Age2HD\Launcher.exe FirewallRules: [{EEE14D26-20D8-4F05-B416-AAFAB1CF9299}] => (Allow) S:\Program Files (x86)\Steam\steamapps\common\Age2HD\Launcher.exe FirewallRules: [TCP Query User{A4681A5F-BFC9-44E9-A279-627343279EC3}S:\program files (x86)\matlab\r2016a\bin\win64\matlab.exe] => (Allow) S:\program files (x86)\matlab\r2016a\bin\win64\matlab.exe FirewallRules: [UDP Query User{DF7C4A72-44EF-43C0-95D7-F9C727E16410}S:\program files (x86)\matlab\r2016a\bin\win64\matlab.exe] => (Allow) S:\program files (x86)\matlab\r2016a\bin\win64\matlab.exe FirewallRules: [{D8A68FB9-60DB-4E6E-9499-E9E8F64D1FBA}] => (Allow) S:\Program Files (x86)\Steam\steamapps\common\Portal\hl2.exe FirewallRules: [{670FC363-7118-446C-95A9-9387600BD886}] => (Allow) S:\Program Files (x86)\Steam\steamapps\common\Portal\hl2.exe FirewallRules: [{DE8A0D3A-44EB-41A9-853D-C3C79487DDA1}] => (Allow) S:\Program Files (x86)\Steam\steamapps\common\Crysis 2 Game of the Year\bin32\Crysis2Launcher.exe FirewallRules: [{D1C22F68-CF9C-4474-B163-73C363F9AA7F}] => (Allow) S:\Program Files (x86)\Steam\steamapps\common\Crysis 2 Game of the Year\bin32\Crysis2Launcher.exe FirewallRules: [{EF85E773-AB96-4262-A604-25B8D0672688}] => (Allow) S:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe FirewallRules: [{3A8E4E28-7811-45F3-8B97-DB6765068BC7}] => (Allow) S:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe FirewallRules: [{2E35F144-EF49-4546-AA2D-6765F1656930}] => (Allow) S:\Program Files (x86)\Steam\steamapps\common\Half-Life\hl.exe FirewallRules: [{1FACA33A-ADBB-4865-A67D-473A0967367E}] => (Allow) S:\Program Files (x86)\Steam\steamapps\common\Half-Life\hl.exe FirewallRules: [{B5B4AE31-CDAA-44C0-ABB3-5183CBF1DDF0}] => (Allow) S:\Program Files (x86)\Steam\steamapps\common\Half-Life 2\hl2.exe FirewallRules: [{F3E4C5A8-2F9D-477C-8F80-E12B018A790B}] => (Allow) S:\Program Files (x86)\Steam\steamapps\common\Half-Life 2\hl2.exe FirewallRules: [{D7F20637-1152-47D9-92E1-2C6C091342D5}] => (Allow) S:\Program Files (x86)\Steam\steamapps\common\Metro 2033\metro2033.exe FirewallRules: [{2247A07F-3C82-427A-A05E-B2D8ECCE5212}] => (Allow) S:\Program Files (x86)\Steam\steamapps\common\Metro 2033\metro2033.exe FirewallRules: [{963CB2DD-86B9-4036-9678-B744C061298E}] => (Allow) S:\Program Files (x86)\Glasswire\GWCtlSrv.exe FirewallRules: [{771157C5-0232-491D-BD99-3894AAF3CABE}] => (Allow) S:\Program Files (x86)\Glasswire\GWCtlSrv.exe FirewallRules: [{948D203C-6419-4080-96D2-CA055CD51F55}] => (Allow) S:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{858F358A-329E-483D-B581-9BBCB1876876}] => (Allow) S:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{0E109AA6-A009-4263-85B3-BE2E2998A752}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{1C983F86-7087-49A9-ADB7-FEAA7A0AB02B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{3F793812-833F-4DEA-B774-629684440048}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{6BC495C5-6EB1-4EE7-9538-D7E6F47DAAB0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{A9C2A7E2-75FE-4C61-8B15-6FCD44513AE3}] => (Allow) S:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe FirewallRules: [{3B848BF1-A2CB-49D8-BEDD-6E15C4BDB929}] => (Allow) S:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe FirewallRules: [{22EC3136-CADE-4416-9D77-F40268D55AD2}] => (Allow) S:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe FirewallRules: [{C229CA86-D1D2-4089-A45B-2E31E803BAF1}] => (Allow) C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe FirewallRules: [{4F08CF52-B016-4A68-944C-1304C9C0BE35}] => (Allow) C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe FirewallRules: [{CD4A55A3-AC69-4910-B11D-11764353D2A1}] => (Allow) S:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe FirewallRules: [{E9F3CA92-CAD3-46F6-BDA4-C9D733553497}] => (Allow) S:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe FirewallRules: [{8A3BB187-468E-4D84-9792-02A814D0A23C}] => (Allow) S:\Program Files (x86)\National Instruments\Shared\nisvcloc\nisvcloc.exe FirewallRules: [{DF58609B-7294-4D7B-8E9A-A4EABA727F0B}] => (Allow) S:\Program Files (x86)\National Instruments\Shared\nisvcloc\nisvcloc.exe FirewallRules: [{721E6C45-FC91-4D1B-9F52-607EDD1DB1BA}] => (Allow) C:\Program Files (x86)\JKI\VI Package Manager\support\JKIUpdate.exe FirewallRules: [{3899F71E-7C1D-4C99-A24E-7F74E0A795CD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{D57DF6CB-2B1A-4AD7-80A3-2307B3124BFE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{430FD721-1F11-49AC-B5D6-849735B6D299}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{03733429-F076-4A64-A234-9A576CA270C1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{20A9A0C0-4C20-4601-B9A8-EC8CFA1DC200}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [TCP Query User{2D5DC29B-1248-49F8-85F1-F0F740FAE45C}E:\laptop backup 05.03.17\data folder\games\aoe\aoe\empires.exe] => (Block) E:\laptop backup 05.03.17\data folder\games\aoe\aoe\empires.exe FirewallRules: [UDP Query User{1121B3DE-C7B8-446F-AD3A-CB664C658148}E:\laptop backup 05.03.17\data folder\games\aoe\aoe\empires.exe] => (Block) E:\laptop backup 05.03.17\data folder\games\aoe\aoe\empires.exe FirewallRules: [TCP Query User{40588A3B-EC28-4D50-AF5B-E525024A4537}S:\program files (x86)\kodi\kodi.exe] => (Allow) S:\program files (x86)\kodi\kodi.exe FirewallRules: [UDP Query User{9B89F066-E77C-429F-835B-F6A1F90AF6AB}S:\program files (x86)\kodi\kodi.exe] => (Allow) S:\program files (x86)\kodi\kodi.exe FirewallRules: [{47F98854-B127-4606-AAB4-D65971F0BD37}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe FirewallRules: [{01935EF1-F7A3-4D88-8E36-CFA05C2CBCF2}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe FirewallRules: [TCP Query User{FC6CB055-80E2-469D-B004-DF72D76FBE3B}S:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) S:\program files (x86)\myphoneexplorer\myphoneexplorer.exe FirewallRules: [UDP Query User{6CE9B595-847F-49F6-8E54-AF0A5B9D974D}S:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) S:\program files (x86)\myphoneexplorer\myphoneexplorer.exe FirewallRules: [{62815547-DF96-48EC-B362-7A0A4F9B4A6F}] => (Allow) S:\Program Files (x86)\Steam\steamapps\common\mirrors edge\Binaries\MirrorsEdge.exe FirewallRules: [{8305B82B-E0AD-4B0E-8272-8700FDC39369}] => (Allow) S:\Program Files (x86)\Steam\steamapps\common\mirrors edge\Binaries\MirrorsEdge.exe FirewallRules: [{D2B2DE52-820D-46FD-B1A3-583BA18F9E1D}] => (Allow) S:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{6FF694AD-45CB-4A09-985B-EF5D38B1F725}] => (Allow) S:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [TCP Query User{1A4ED605-27F4-4DAA-AD91-647EE4EF1111}C:\users\steven_desktop\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\steven_desktop\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{A5826C90-E6C7-4E25-8FB0-161E13477158}C:\users\steven_desktop\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\steven_desktop\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{6DF22A79-AA12-490C-AA88-237495C2E470}C:\users\steven_desktop\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\steven_desktop\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{78F66D3C-3FE3-4FE8-BD58-9AE467A54FD0}C:\users\steven_desktop\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\steven_desktop\appdata\roaming\spotify\spotify.exe FirewallRules: [{D15C203D-9284-4DFC-955F-A62FCE45FF1A}] => (Allow) S:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe FirewallRules: [{0DEE0F9B-B218-4BCA-8891-472DCBF62D6B}] => (Allow) S:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe FirewallRules: [{FD9BF2DF-B5EC-49A0-9E91-B92295B88F52}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe FirewallRules: [{3A3239B7-FCA9-4EA1-BFA8-6BC829C95EA5}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{986DF414-B6E8-4295-BDCA-5653D0280F99}] => (Allow) C:\Program Files (x86)\Dethroned\Millisecond.exe FirewallRules: [{530CF72C-34B9-44E4-94AB-8A4248F6AC7C}] => (Allow) C:\Program Files (x86)\Cuckolding\Millisecond.exe FirewallRules: [{E2EC9539-BC46-4206-846F-38B62B155989}] => (Allow) C:\Program Files (x86)\riggers\Faiths.exe FirewallRules: [{2E8B4988-26DF-45C3-A91B-EFBE19F60C62}] => (Allow) C:\Program Files (x86)\Cuckolding\Faiths.exe FirewallRules: [TCP Query User{1C4B87ED-EFA1-4AE1-997A-6FF011C54D9C}C:\program files (x86)\google\chrome\application\chromecrewe.exe] => (Block) C:\program files (x86)\google\chrome\application\chromecrewe.exe FirewallRules: [UDP Query User{FC605F88-8621-487F-894B-F8A027F8E304}C:\program files (x86)\google\chrome\application\chromecrewe.exe] => (Block) C:\program files (x86)\google\chrome\application\chromecrewe.exe ==================== Restore Points ========================= 05-09-2018 13:23:56 JRT Pre-Junkware Removal ==================== Faulty Device Manager Devices ============= Name: Atheros AR9485 Wireless Network Adapter Description: Atheros AR9485 Wireless Network Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Atheros Communications Inc. Service: athr Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: vpnva Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (09/05/2018 02:20:00 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (09/05/2018 01:39:00 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (09/05/2018 01:24:08 PM) (Source: VSS) (EventID: 12305) (User: ) Description: Volume Shadow Copy Service error: Volume/disk not connected or not found. Error context: DeviceIoControl(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy1 - 000000000000014C,0x00530194,0000000000000000,0,000000000036D2D0,4096,[0]). Operation: Query Shadow Copies Error: (09/05/2018 10:12:23 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Error: (09/05/2018 10:03:36 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (09/03/2018 12:50:33 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (09/02/2018 07:32:44 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Error: (09/02/2018 05:04:17 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. System errors: ============= Error: (09/05/2018 02:34:54 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: The server {005A3A96-BAC4-4B0A-94EA-C0CE100EA736} did not register with DCOM within the required timeout. Error: (09/05/2018 02:26:18 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The BrSplService service terminated unexpectedly. It has done this 1 time(s). Error: (09/05/2018 02:18:23 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The Siemens PLM License Server service failed to start due to the following error: The system cannot find the file specified. Error: (09/05/2018 02:18:23 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The NI Service Locator service failed to start due to the following error: The system cannot find the file specified. Error: (09/05/2018 02:18:22 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The GlassWire Control Service service failed to start due to the following error: The system cannot find the file specified. Error: (09/05/2018 02:12:31 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: The server {005A3A96-BAC4-4B0A-94EA-C0CE100EA736} did not register with DCOM within the required timeout. Error: (09/05/2018 01:38:19 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The BrSplService service terminated unexpectedly. It has done this 1 time(s). Error: (09/05/2018 01:37:24 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The Siemens PLM License Server service failed to start due to the following error: The system cannot find the file specified. Windows Defender: =================================== Date: 2018-03-28 15:34:10.573 Description: Windows Defender scan has been stopped before completion. Scan ID:{4FE8D347-6D09-40E2-A74F-A143FCE8B05B} Scan Type:AntiSpyware Scan Parameters:Quick Scan Date: 2017-11-20 10:07:03.319 Description: Windows Defender scan has been stopped before completion. Scan ID:{E1C8029F-E3ED-4ACD-9031-551FBEA987B7} Scan Type:AntiSpyware Scan Parameters:Quick Scan Date: 2017-08-09 03:20:15.048 Description: Windows Defender scan has been stopped before completion. Scan ID:{B52E7DC1-86AE-4C31-9151-3F182D637C94} Scan Type:AntiSpyware Scan Parameters:Quick Scan Date: 2016-01-20 10:17:28.168 Description: Windows Defender has detected spyware or other potentially unwanted software. For more information please see the following: http://go.microsoft.com/fwlink/?linkid=37020&name=SoftwareBundler:Win32/Dartsmound&threatid=224714 Name:SoftwareBundler:Win32/Dartsmound ID:224714 Severity:High Category:Software Bundler Path Found:file:C:\Program Files (x86)\SpringFiles\uninstall.dat;file:C:\Program Files (x86)\SpringFiles\Uninstall.exe;file:C:\Program Files (x86)\SpringFiles\Updater.exe;folder:C:\Program Files (x86)\SpringFiles\ Detection Type:Concrete Detection Source:System Status:Unknown Process Name: Date: 2016-01-19 03:41:11.523 Description: Windows Defender has detected spyware or other potentially unwanted software. For more information please see the following: http://go.microsoft.com/fwlink/?linkid=37020&name=SoftwareBundler:Win32/Dartsmound&threatid=224714 Name:SoftwareBundler:Win32/Dartsmound ID:224714 Severity:High Category:Software Bundler Path Found:file:C:\Program Files (x86)\SpringFiles\uninstall.dat;file:C:\Program Files (x86)\SpringFiles\Uninstall.exe;file:C:\Program Files (x86)\SpringFiles\Updater.exe;folder:C:\Program Files (x86)\SpringFiles\ Detection Type:Concrete Detection Source:System Status:Unknown Process Name: Date: 2017-11-15 19:23:24.043 Description: %1 engine has been terminated due to an unexpected error. Failure Type:%5 Exception code:%6 Resource:%3 Date: 2017-06-06 10:57:21.394 Description: %1 engine has been terminated due to an unexpected error. Failure Type:%5 Exception code:%6 Resource:%3 Date: 2017-06-04 03:01:00.033 Description: %1 engine has been terminated due to an unexpected error. Failure Type:%5 Exception code:%6 Resource:%3 Date: 2016-01-05 17:00:11.227 Description: Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version:1.213.1503.0 Update Source:User Signature Type:AntiSpyware Update Type:Delta Current Engine Version: Previous Engine Version:1.1.12400.0 Error code:0x80070070 Error description:There is not enough space on the disk. Date: 2015-08-28 14:38:10.603 Description: Windows Defender has encountered an error trying to update signatures. New Signature Version: Previous Signature Version:1.205.415.0 Update Source:User Signature Type:AntiSpyware Update Type:Delta Current Engine Version: Previous Engine Version:1.1.12002.0 Error code:0x80070070 Error description:There is not enough space on the disk. CodeIntegrity: =================================== Date: 2018-03-28 14:46:00.993 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\C0mb0F1x\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-03-28 14:46:00.931 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\C0mb0F1x\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-03-28 14:28:36.094 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-03-28 14:28:36.048 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-03-28 14:28:36.001 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-03-28 14:28:35.938 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2017-03-20 13:10:23.939 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2017-03-20 13:10:23.857 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz Percentage of memory in use: 24% Total physical RAM: 16328.27 MB Available physical RAM: 12389.79 MB Total Virtual: 32654.69 MB Available Virtual: 28852.9 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:112.8 GB) (Free:14.97 GB) NTFS Drive e: (LINUX~CLEAN) (Removable) (Total:14.91 GB) (Free:8.81 GB) FAT32 Drive z: (Data Disk) (Fixed) (Total:1863.01 GB) (Free:1823.61 GB) NTFS \\?\Volume{7782040d-9eca-11e2-a5ec-806e6f6e6963}\ (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7/8/10) (Size: 119.2 GB) (Disk ID: 0CD2C1AC) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=112.8 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: 59670629) Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (Size: 14.9 GB) (Disk ID: 31CF038D) Partition 1: (Active) - (Size=14.9 GB) - (Type=0C) ==================== End of Addition.txt ============================