Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-11-2017
Ran by JohnDoe (11-11-2017 11:48:38)
Running from C:\Users\JohnDoe\Desktop
Windows 10 Pro 10240.17354 (X64) (2017-01-09 00:07:25)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2118853541-1488753588-3094647493-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2118853541-1488753588-3094647493-503 - Limited - Disabled)
Guest (S-1-5-21-2118853541-1488753588-3094647493-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2118853541-1488753588-3094647493-1009 - Limited - Enabled)
JohnDoe (S-1-5-21-2118853541-1488753588-3094647493-1000 - Administrator - Enabled) => C:\Users\JohnDoe
Visitor (S-1-5-21-2118853541-1488753588-3094647493-1010 - Limited - Enabled) => C:\Users\Visitor
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs
should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-2118853541-1488753588-3094647493-1000\...\uTorrent) (Version: 3.4.9.43085 - BitTorrent
Inc.)
Acronis True Image 2014 (HKLM-x32\...\{1F91344A-B963-4431-89E8-4F80DEE282BE}) (Version: 17.0.5560 - Acronis)
Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.8.0.1280 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems
Incorporated)
Adobe Flash Player 26 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 26.0.0.131 - Adobe Systems
Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe
Systems Incorporated)
Adobe InDesign CS6 (HKLM-x32\...\{CFB770D7-8D43-1014-922B-CC2715FADE3F}) (Version: 8.0 - Adobe Systems
Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 -
Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems
Incorporated)
Adobe Reader XI (11.0.08) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.08 - Adobe
Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.3.133 - Adobe Systems, Inc.)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version: - )
Blender (HKLM\...\Blender) (Version: 2.74 - Blender Foundation)
Call Of Cthulhu DCoTE (HKLM-x32\...\{E4406ED3-B04C-44F1-ABB4-08775B74934F}) (Version: 1.00.000 - )
CCleaner (HKLM\...\CCleaner) (Version: 4.06 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5067 - CDBurnerXP)
Combined Community Codec Pack 64bit 2015-10-18 (HKLM\...\Combined Community Codec Pack 64bit_is1) (Version:
2015.10.19.0 - CCCP Project)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Deluge 1.3.13 (HKLM-x32\...\Deluge) (Version: - )
DivX Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.31 - DivX, LLC)
D-Link DWA-582 - V1.02b01 (HKLM-x32\...\{321C85DB-F528-4B49-B6AB-82547D03DAF6}) (Version: - D-Link
Corporation)
Dxtory version 2.0.126 (HKLM-x32\...\Dxtory2.0_is1) (Version: 2.0.126 - ExKode Co. Ltd.)
Emscripten SDK 64-bit (HKLM\...\Emscripten) (Version: - )
ESEA Client (HKU\S-1-5-21-2118853541-1488753588-3094647493-1000\...\ESEA) (Version: 5.0.0.0 - E-Sports
Entertainment LLC)
Etron USB3.0 Host Controller (HKLM-x32\...\{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.118 - Etron
Technology) Hidden
Etron USB3.0 Host Controller (HKLM-x32\...\InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version:
0.118 - Etron Technology)
f.lux (HKU\S-1-5-21-2118853541-1488753588-3094647493-1000\...\Flux) (Version: - f.lux Software LLC)
FileZilla Client 3.10.0.2 (HKLM-x32\...\FileZilla Client) (Version: 3.10.0.2 - Tim Kosse)
foobar2000 v1.3.14 (HKLM-x32\...\foobar2000) (Version: 1.3.14 - JohnDoe Pawlowski)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 62.0.3202.89 - Google Inc.)
Google Drive (HKLM-x32\...\{AC117AF9-316B-4E1D-959E-F0EB85B0DC5F}) (Version: 2.34.7100.0000 - Google, Inc.)
Google Earth Pro (HKLM-x32\...\{ECF2E224-42F5-4E50-B58E-94CA70E85697}) (Version: 7.3.0.3832 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.)
Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.)
Hidden
GZ3Doom 1.8.10_e (HKLM-x32\...\GZ3Doom 1.8.10_e) (Version: 1.8.10_e - zdoom.org)
HandBrake 0.10.0 (HKLM-x32\...\HandBrake) (Version: 0.10.0 - )
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb)
(Version: - )
IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb)
(Version: - )
InfraRecorder 0.53 (x64 edition) (HKLM\...\{2C22EA92-CB30-4932-0053-000001000000}) (Version: 0.53.00.00 -
Christian Kindahl)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Jed's Half-Life Model Viewer 1.3.6 (HKLM-x32\...\Jed's Half-Life Model Viewer) (Version: 1.3.6 - wunderboy.org)
KB4023057 (HKLM\...\{ED06689A-33B7-4D35-8F76-36A82CD03406}) (Version: 2.3.0.0 - Microsoft Corporation)
K-Lite Codec Pack 10.0.0 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.0.0 - )
Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version: - )
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
LastPass (uninstall only) (HKLM-x32\...\LastPass) (Version: - LastPass)
Link Shell Extension (HKLM\...\HardlinkShellExt) (Version: 3.8.5.1 - Hermann Schinagl)
Logitech Gaming Software 8.50 (HKLM\...\Logitech Gaming Software) (Version: 8.50.281 - Logitech Inc.)
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043
- Malwarebytes)
Media Player Codec Pack 4.2.4 (HKLM-x32\...\Media Player - Codec Pack) (Version: 4.2.4 - Media Player Codec
Pack)
MeshLab_64b 1.3.2 (HKLM\...\MeshLab_64b) (Version: 1.3.2 - Paolo Cignoni - Guido Ranzuglia VCG - ISTI - CNR)
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version:
4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493})
(Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 -
Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681})
(Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4})
(Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 -
Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 -
Microsoft Corporation)
Microsoft Camera Codec Pack (HKLM\...\{A6A4A258-0A48-4F76-B8F1-61F0514594DD}) (Version: 16.4.1970.0624 -
Microsoft Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280})
(Version: 3.5.0.0 - Microsoft Corporation)
Microsoft Flight Simulator SimConnect Client v10.0.61259.0 (HKLM-x32\...\{D61CA184-3F6D-4A50-B2CC-
7A18447D6A8D}) (Version: 10.0.61259.0 - Microsoft Corporation)
Microsoft Flight Simulator SimConnect Client v10.0.62615.0 (HKLM-x32\...\{33D89314-361A-4495-A1E1-
0ACBCE08F78D}) (Version: 10.0.62615.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F})
(Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version:
3.5.50.0 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation)
Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 -
Microsoft Corporation)
Microsoft Office 365 ProPlus - en-us (HKLM\...\O365ProPlusRetail - en-us) (Version: 15.0.4971.1002 - Microsoft
Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2118853541-1488753588-3094647493-1000\...\OneDriveSetup.exe) (Version:
17.3.7076.1026 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft
Corporation)
Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 -
Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version:
3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{58FED865-4F13-408D-A5BF-996019C4B936}) (Version:
11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B})
(Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F})
(Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{E4A1FDA3-689D-44DA-9B39-86BD2270F522}) (Version:
11.2.5058.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version:
11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version:
11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version:
11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version:
11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234})
(Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version:
3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version:
3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version:
4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (12.0.30919.1) (HKLM-x32\...\{0D7FCBFB-F478-4D32-901C-83F0BF5A3501})
(Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-
A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}) (Version:
10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version:
10.50.1600.1 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version:
11.1.3366.16 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20})
(Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version:
8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version:
8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version:
8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD})
(Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{14297226-E0A0-3781-8911-E9D529552663})
(Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE})
(Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-
5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-
22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-
21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-
725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-
87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7})
(Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-
68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-
f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-
4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-
5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-
56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-
97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{f0080ca2-80ae-4958-b6eb-
e8fa916d744a}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-
47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-
0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-
fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-
3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - ENU (HKLM\...\{BCA26999-EC22-3007-BB79-638913079C9A})
(Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for
Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Web Deploy 3.5 (HKLM\...\{69A998C5-00A9-42CA-AB4E-C31CFFCD9251}) (Version: 3.1237.1763 - Microsoft
Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 -
Microsoft)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version:
3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F})
(Version: 4.0.30901.0 - Microsoft Corporation)
MKVToolNix 7.2.0 (32bit) (HKLM-x32\...\MKVToolNix) (Version: 7.2.0 - Moritz Bunkus)
Motorola Device Manager (HKLM-x32\...\{28DB8373-C1BB-444F-A427-A55585A12ED7}) (Version: 2.5.4 - Motorola
Mobility)
Motorola Device Software Update (HKLM-x32\...\{894AB83D-A9AF-4E54-BFF3-A7262A0A6C13}) (Version: 13.09.3001 -
Motorola Mobility) Hidden
Motorola Mobile Drivers Installation 6.4.0 (HKLM\...\{27986EDD-C9EC-4B52-B92F-06D073F0AA52}) (Version: 6.4.0 -
Motorola Mobility LLC)
Movie Maker (HKLM-x32\...\{38F03569-A636-4CF3-BDDE-032C8C251304}) (Version: 16.4.3528.0331 - Microsoft
Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft
Corporation) Hidden
Mozilla Firefox 34.0.5 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 en-US)) (Version: 34.0.5 -
Mozilla)
Mp3tag v2.73 (HKLM-x32\...\Mp3tag) (Version: v2.73 - Florian Heidenreich)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 -
Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 -
Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 -
Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft
Corporation)
msxml4 (HKLM-x32\...\{5AE3D9F1-9E9E-4015-8787-E22705AA32C5}) (Version: 1.0.0 - Default Company Name)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.4 - Notepad++ Team)
NSIS Example2 (HKLM-x32\...\ARC3D Webservice v2.2) (Version: - )
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 17.0.0 - OBS Project)
Office 15 Click-to-Run Extensibility Component (HKLM-x32\...\{90150000-008C-0000-0000-0000000FF1CE}) (Version:
15.0.4971.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-008F-0000-1000-0000000FF1CE}) (Version:
15.0.4971.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (HKLM-x32\...\{90150000-008C-0409-0000-0000000FF1CE}) (Version:
15.0.4971.1002 - Microsoft Corporation) Hidden
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )
Open XML SDK 2.5 for Microsoft Office (HKLM-x32\...\{3EA16E23-14D2-466A-8268-D7CD40DC46B6}) (Version: 2.5.5631
- Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenOffice 4.1.1 (HKLM-x32\...\{9395F41D-0F80-432E-9A59-B8E477E7E163}) (Version: 4.11.9775 - Apache Software
Foundation)
Outlast (HKLM-x32\...\Outlast_R.G. Mechanics_is1) (Version: - R.G. Mechanics, spider91)
Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
PackBit Codec version 1.0.0.1Beta (HKLM-x32\...\{5AFD98DE-0AF5-497F-BE7E-F93DEDF74573}_is1) (Version:
1.0.0.1Beta - Dxtory Software)
PDF Settings CS6 (HKLM-x32\...\{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}) (Version: 11.0 - Adobe Systems
Incorporated) Hidden
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.1 - pdfforge)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Plex Media Server (HKLM-x32\...\{34B11343-9146-43DE-B621-B971E854087D}) (Version: 1.9.6429 - Plex, Inc.) Hidden
Plex Media Server (HKLM-x32\...\{f3d9eae6-b717-4e4e-884e-227227518530}) (Version: 1.9.6.4429 - Plex, Inc.)
PosteRazor (HKLM-x32\...\PosteRazor_is1) (Version: 1.5.2 - Alessandro Portale)
PowerISO (HKLM-x32\...\PowerISO) (Version: 6.4 - Power Software Ltd)
Prerequisites for SSDT (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft
Corporation)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.992 - Even Balance, Inc.)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version:
7.49.927.2011 - Realtek)
Realtek Ethernet Diagnostic Utility (HKLM-x32\...\{DADC7AB0-E554-4705-9F6A-83EA82ED708E}) (Version: 1.006 -
Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7106
- Realtek Semiconductor Corp.)
REAPER (x64) (HKLM\...\REAPER) (Version: - )
Resident Evil 7: Biohazard (HKLM-x32\...\Resident Evil 7: Biohazard_is1) (Version: - )
Riftcat (HKLM-x32\...\{8346dab5-9676-4878-9891-b24811bf4ce4}) (Version: 1.0.0 - Riftcat)
Riftcat Client (HKLM-x32\...\{B2C26ED3-33A6-4A0E-98EE-6ACEC22C5793}) (Version: 1.0.0.3 - Riftcat) Hidden
RoboBasket3 (HKLM\...\RoboBasket_is1) (Version: 3.6.8 - ETUS)
Samsung Universal Print Driver 2 (HKLM-x32\...\Samsung Universal Print Driver 2) (Version: 2.50.04.00 - Samsung
Electronics Co., Ltd.)
SharePoint Client Components (HKLM\...\{95150002-1163-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 -
Microsoft Corporation) Hidden
SharePoint Client Components (HKLM\...\{95160001-1163-0409-1000-0000000FF1CE}) (Version: 16.0.2617.1200 -
Microsoft Corporation) Hidden
SharpKeys (HKLM-x32\...\{636E94DA-99C0-448F-A931-3DAD83B4975F}) (Version: 3.5.0000 - RandyRants.com)
Simple Shutdown Timer (HKLM-x32\...\Simple Shutdown Timer1.1.2) (Version: 1.1.2 - PcWinTech.com)
SketchUp 2016 (HKLM\...\{E2B66CF6-ABA0-4E5F-B426-7478B18301AE}) (Version: 16.1.1449 - Trimble Navigation
Limited)
SketchUp 2017 (HKLM\...\{E59BD84C-169B-4F3F-AC5D-85127CF67051}) (Version: 17.2.2555 - Trimble, Inc.)
SketchUp Import 2016 (HKLM-x32\...\{C769FB7C-1F55-4B31-9A2A-21CEC50F4F92}) (Version: 2.0.0 - Autodesk)
Skype Web Plugin (HKLM-x32\...\{EB96DF8B-65A7-4E72-BFB1-38DB36870D16}) (Version: 7.32.6.278 - Skype
Technologies S.A.)
Skype™ 7.38 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.38.101 - Skype Technologies S.A.)
SoulseekQt version 2017.2.20 (HKLM-x32\...\{8A4E1646-488C-4E5B-AC31-F784400E8D2D}_is1) (Version: 2017.2.20 -
Soulseek LLC)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Stopping Plex (HKLM-x32\...\{992AD614-FFE5-4258-BB56-9E7513E21221}) (Version: 1.9.6429 - Plex, Inc.) Hidden
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 5.6.1032 - SUPERAntiSpyware.com)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TriDef 3D 7.0 (HKLM-x32\...\essentials-bundle) (Version: 7.0 - Dynamic Digital Depth Australia Pty Ltd)
TrinusVR version 2.0.7 (HKLM-x32\...\{A66AD08F-FC5B-4583-9A7D-4636F5637B2C}_is1) (Version: 2.0.7 - Odd Sheep
Ltd.)
TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
Unity (HKLM-x32\...\Unity) (Version: 5.1.1f1 - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-2118853541-1488753588-3094647493-1000\...\UnityWebPlayer) (Version: 5.1.1f1 -
Unity Technologies ApS)
Unreal Development Kit: 2014-08 (HKLM\...\UDK-9c2d7d48-70d6-4b8d-8177-eed675927679) (Version: - Epic Games,
Inc.)
Unreal Engine (HKLM\...\{C5027D29-72B6-45F1-95C7-AAB98C31F69D}) (Version: 1.1.12.0 - Epic Games, Inc.)
VC80CRTRedist - 8.0.50727.6195 (HKLM-x32\...\{933B4015-4618-4716-A828-5289FC03165F}) (Version: 1.2.0 - DivX,
Inc) Hidden
Veeam Endpoint Backup (HKLM\...\{97BBA6CF-338C-4284-B605-5A5AC00132F8}) (Version: 1.5.0.306 - Veeam Software
AG)
Vegas Pro 13.0 (64-bit) (HKLM\...\{D0360940-CCC6-11E3-B9C6-F04DA23A5C58}) (Version: 13.0.310 - Sony)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 -
AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version:
14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player 2.1.0 (HKLM-x32\...\VLC media player) (Version: 2.1.0 - VideoLAN)
VR Player (HKLM-x32\...\{31DDB528-67A7-415C-B218-B111B5FAF5DD}) (Version: 0.5.1 - StephaneLX)
VTFEdit 1.3.3 (HKLM\...\VTFEdit_is1) (Version: - Neil Jedrzejewski & Ryan Gregg)
Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.5-3 - Wacom Technology Corp.)
WCF RIA Services V1.0 SP2 (HKLM-x32\...\{5D8DD6A8-C4D7-4554-93F9-F1CC28C72600}) (Version: 4.1.62812.0 -
Microsoft Corporation)
WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version:
2.1.0.7 - Wacom Technology Corp.)
WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version:
2.1.0.7 - Wacom Technology Corp.)
WinDirStat 1.1.2 (HKU\S-1-5-21-2118853541-1488753588-3094647493-1000\...\WinDirStat) (Version: - )
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.00 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)
Worms Armageddon (HKLM-x32\...\Worms Armageddon) (Version: - )
Worms W.M.D. (HKLM-x32\...\Worms W.M.D._is1) (Version: - )
XSplit Gamecaster (HKLM-x32\...\{083E9AF8-1900-4D7A-AB08-0B4BB98D2848}) (Version: 2.7.1512.1839 -
SplitmediaLabs)
Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved
unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2118853541-1488753588-3094647493-1000_Classes\CLSID\{0B628DE4-07AD-4284-81CA-
5B439F67C5E6}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2016\acad.exe /Automation => No File
CustomCLSID: HKU\S-1-5-21-2118853541-1488753588-3094647493-1000_Classes\CLSID\{149DD748-EA85-45A6-93C5-
AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2016\acad.exe => No File
CustomCLSID: HKU\S-1-5-21-2118853541-1488753588-3094647493-1000_Classes\CLSID\{41052F6E-3662-4584-BCD3-
77BCCAAE8470}\InprocServer32 -> C:\Users\JohnDoe\AppData\Local\SkypePlugin\7.32.6.278\GatewayActiveX-x64.dll
(Skype Technologies S.A.)
CustomCLSID: HKU\S-1-5-21-2118853541-1488753588-3094647493-1000_Classes\CLSID\{5370C727-1451-4700-A960-
77630950AF6D}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2016\acad.exe /Automation => No File
CustomCLSID: HKU\S-1-5-21-2118853541-1488753588-3094647493-1000_Classes\CLSID\{60813F68-E9F7-4B3C-80B4-
A76A66211660}\localserver32 -> C:\Users\JohnDoe\AppData\Local\SkypePlugin\7.32.6.278\GatewayVersion-x64.exe
(Skype Technologies S.A.)
CustomCLSID: HKU\S-1-5-21-2118853541-1488753588-3094647493-1000_Classes\CLSID\{C52B9871-E5E9-41FD-B84D-
C5ACADBEC7AE}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2118853541-1488753588-3094647493-1000_Classes\CLSID\{CBF9CD8C-2714-4F36-B76A-
43E6C7547BC2}\localserver32 -> C:\Users\JohnDoe\AppData\Local\SkypePlugin\7.32.6.278\EdgeCalling.exe (Skype
Technologies S.A.)
CustomCLSID: HKU\S-1-5-21-2118853541-1488753588-3094647493-1000_Classes\CLSID\{D45F043D-F17F-4e8a-8435-
70971D9FA46D}\InprocServer32 -> C:\Program Files\Blender Foundation\Blender\BlendThumb64.dll ()
CustomCLSID: HKU\S-1-5-21-2118853541-1488753588-3094647493-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-
0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2016\en-US\acadficn.dll => No File
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program
Files (x86)\Google\Drive\googledrivesync64.dll [2017-10-09] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program
Files (x86)\Google\Drive\googledrivesync64.dll [2017-10-09] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program
Files (x86)\Google\Drive\googledrivesync64.dll [2017-10-09] (Google)
ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files
(x86)\Acronis\TrueImageHome\tishell64.dll [2013-08-07] (Acronis)
ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program
Files (x86)\Acronis\TrueImageHome\tishell64.dll [2013-08-07] (Acronis)
ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files
(x86)\Acronis\TrueImageHome\tishell64.dll [2013-08-07] (Acronis)
ShellIconOverlayIdentifiers: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} => C:\Program Files
\LinkShellExtension\HardlinkShellExt.dll [2014-06-03] (Hermann Schinagl)
ShellIconOverlayIdentifiers: [IconOverlayHardLink] -> {0A479751-02BC-11d3-A855-0004AC2568DD} => C:\Program
Files\LinkShellExtension\HardlinkShellExt.dll [2014-06-03] (Hermann Schinagl)
ShellIconOverlayIdentifiers: [IconOverlaySymbolicLink] -> {0A479751-02BC-11d3-A855-0004AC2568EE} => C:\Program
Files\LinkShellExtension\HardlinkShellExt.dll [2014-06-03] (Hermann Schinagl)
ShellIconOverlayIdentifiers-x32: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} => C:\Program Files
\LinkShellExtension\HardlinkShellExt.dll [2014-06-03] (Hermann Schinagl)
ShellIconOverlayIdentifiers-x32: [IconOverlayHardLink] -> {0A479751-02BC-11d3-A855-0004AC2568DD} => C:\Program
Files\LinkShellExtension\HardlinkShellExt.dll [2014-06-03] (Hermann Schinagl)
ShellIconOverlayIdentifiers-x32: [IconOverlaySymbolicLink] -> {0A479751-02BC-11d3-A855-0004AC2568EE} => C:
\Program Files\LinkShellExtension\HardlinkShellExt.dll [2014-06-03] (Hermann Schinagl)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files
(x86)\Google\Drive\contextmenu64.dll [2017-10-09] (Google)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll
[2013-08-22] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR
\rarext32.dll [2013-08-22] (Alexander Roshal)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files
(x86)\Malwarebytes Anti-Malware\mbamext.dll [2016-03-10] (Malwarebytes)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files
(x86)\Google\Drive\contextmenu64.dll [2017-10-09] (Google)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI
Technologies\ATI.ACE\Core-Static\atiacm64.dll [2015-11-04] (Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files
(x86)\Malwarebytes Anti-Malware\mbamext.dll [2016-03-10] (Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll
[2013-08-22] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR
\rarext32.dll [2013-08-22] (Alexander Roshal)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved
unless listed separately.)
Task: {043ABB39-7149-431C-A81F-172B310A7E73} - System32\Tasks\Microsoft\Windows\Media Center
\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {085F6E7A-CABE-4D03-9AB3-09E55B9851C8} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 =>
C:\WINDOWS\ehome\ehPrivJob.exe
Task: {08F069B4-7CCF-44FA-B025-B8520AAE32FE} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS
\SysWOW64\Macromed\Flash\FlashUtil32_26_0_0_131_pepper.exe [2017-07-09] (Adobe Systems Incorporated)
Task: {09221FF3-7AD7-43E6-9C8D-B9F821CEF5CA} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate =>
C:\WINDOWS\ehome\ehPrivJob.exe
Task: {0BFD8BCD-46B0-4EB2-B2D7-BAA9ABB9FAB1} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady
=> C:\WINDOWS\ehome\ehPrivJob.exe
Task: {10CFAE02-CE22-4E4C-A05C-54C4BE819A62} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot
=> C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1B67756E-0F48-496B-BD07-C5067FA20EED} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch =>
C:\WINDOWS\ehome\ehPrivJob.exe
Task: {213E625D-F228-4F92-9D31-041763DD6ED1} - System32\Tasks\Motorola Device Manager Update => C:\Program
Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2014-10-30] ()
Task: {215932AA-6835-474A-BA4A-9185B7E70C4D} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery =>
C:\WINDOWS\ehome\ehPrivJob.exe
Task: {215AAD55-D1F5-4E84-BA1C-5F84FCBE6F67} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files
(x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {2829A8E2-D3C5-4129-87E7-A61C3F0BCDF5} - System32\Tasks\Private Internet Access Startup => C:\Program
Files\pia_manager\pia_manager.exe [2017-01-08] ()
Task: {2C1386B3-1B50-45CE-B67D-ABF510EF1268} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:
\WINDOWS\ehome\mcupdate.exe
Task: {315FF7C3-5435-4784-9BFD-88F6B0AEBAED} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files
(x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {343E87FA-C082-4C67-85A8-905F7ADBD75E} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe
=> c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft)
Task: {371CC41F-45D9-4A7D-B095-A1F41F8E4535} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance
=> C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared
\OFFICE15\OLicenseHeartbeat.exe [2017-09-05] (Microsoft Corporation)
Task: {390B6383-B0BA-4532-BB92-8A8CCD706D21} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask =>
C:\WINDOWS\ehome\mcupdate.exe
Task: {3A26E800-0D02-423E-831C-4FC5A2CE841B} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program
Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {3CADE8BA-3376-4CC5-9129-DF20CEC9386A} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry
=> C:\WINDOWS\ehome\MCUpdate.exe
Task: {3E83079D-5816-44DD-A1C5-035CBA2D8701} - System32\Tasks\{264AA82E-0D9F-491F-8F75-6AC88379EC64} => C:
\Windows\system32\pcalua.exe -a C:\facetalk\vcredist_x86.exe -d C:\facetalk
Task: {3F6E048D-6404-433B-8F5F-CFF4D89BF89E} - System32\Tasks\Microsoft\Windows\Application Experience
\Microsoft Compatibility Appraiser => %windir%\system32\rundll32.exe generaltel.dll,RunTelemetryW
Task: {4824F5C2-CFF1-489B-9DD8-50867EF00A08} - System32\Tasks\Microsoft\Windows\Media Center
\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {4DF66FDD-56D1-4CC0-82FD-C23A43BC9FD1} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled
=> C:\WINDOWS\ehome\mcupdate.exe
Task: {56A416E1-CEA6-4C66-9B49-446CDF2A9322} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\
\Bin64\InstallManagerApp.exe [2016-03-21] (Advanced Micro Devices, Inc.)
Task: {653609D6-9972-490E-95F8-6655932A38D4} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program
Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {70BD27CD-43BC-4D7D-8CC0-A37C7DD5B5DE} - System32\Tasks\Microsoft\Windows\Media Center
\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {71E7E9F7-D2F1-4425-A067-8DA7826EC65B} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:
\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {7D8FACD2-560D-4F3F-849C-CE58FA6D8286} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask =>
C:\WINDOWS\ehome\mcupdate.exe
Task: {821FBBD1-F4F0-4D14-A496-C67DF82DDB40} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 =>
C:\WINDOWS\ehome\ehPrivJob.exe
Task: {82D2D90C-FC57-4662-8576-105906E7319C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows
\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-07-09] (Adobe Systems Incorporated)
Task: {82F255A8-9083-4D50-908F-6AE669801AAA} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath
=> C:\WINDOWS\ehome\ehPrivJob.exe
Task: {87FFBA8A-5C6C-40B3-8776-B7F4FFDBC42F} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart
=> C:\WINDOWS\ehome\ehrec.exe
Task: {88451E32-5273-48C4-84C3-5EC634EF6E74} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording =>
C:\WINDOWS\ehome\ehrec.exe
Task: {8F42BC07-C2E6-4884-92D1-D62E0DCE1B98} - System32\Tasks\Microsoft\Windows\Media Center
\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {8F4C3A2F-D807-437E-BAA4-10DF9721ED47} - \Microsoft\Windows\File Classification Infrastructure\Property
Definition Sync -> No File <==== ATTENTION
Task: {9FF2A908-33EA-42DE-BFA0-940693DF7D25} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2118853541-
1488753588-3094647493-1000Core => C:\Users\JohnDoe\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {A20E378C-2EC1-485F-A033-4E56E69D4328} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack =>
C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2017-03-14] (Microsoft Corporation)
Task: {A510FD0F-C100-4861-A68C-3E5752FA7C6E} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program
Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {A7B20046-C633-4354-A90C-5793CDC2F226} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:
\WINDOWS\ehome\ehPrivJob.exe
Task: {B56B7CF9-8765-49C8-842E-3D9C72245EDB} - System32\Tasks\Microsoft\Office\Office ClickToRun Service
Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-09-05] (Microsoft
Corporation)
Task: {B64791E3-1488-4590-A4EA-C2846AAF49C3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:
\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2017-03-14] (Microsoft Corporation)
Task: {C66F61DB-B81C-4BBB-84E5-699CFC921128} - System32\Tasks\{0712CEE4-6F21-4497-83F5-42D74A7817AB} => C:
\Windows\system32\pcalua.exe -a C:\Users\JohnDoe\Downloads\forge-1.8-11.14.1.1375-installer-win.exe -d C:
\Users\JohnDoe\Downloads
Task: {CCC7FE22-3409-4283-8E0D-C7015B12984F} - System32\Tasks\Microsoft\Windows\Media Center
\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {D72F551A-6A6F-4425-8B05-DA317BC197FB} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery =>
C:\WINDOWS\ehome\ehPrivJob.exe
Task: {DDA1B7D1-095B-45E8-A877-1BB3A97DCF0B} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:
\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-09-05] (Microsoft Corporation)
Task: {EAC73821-25D2-4693-83E1-F0CED2F7181F} - System32\Tasks\{62DE4789-40F7-454A-88EC-924C65C24006} => C:
\Windows\system32\pcalua.exe -a C:\Users\JohnDoe\Desktop\oculus\Perception\Perception\bin
\VireioDLLInstaller.exe -d C:\Users\JohnDoe\Desktop\oculus\Perception\Perception\bin
Task: {EBD233ED-ACC8-4CDF-8404-B3BD20954E3B} - System32\Tasks\Motorola Device Manager Initial Update => C:
\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotorolaDeviceManagerUpdate.exe [2014-10-30] ()
Task: {F63B8181-B71E-49CD-8F32-04949325051C} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft
Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\MpCmdRun.exe
Task: {F8BEDA55-0D01-4DB6-8C7A-62977D00839B} - System32\Tasks\Microsoft\Windows\Media Center
\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the
task will not be moved.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\JohnDoe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google
Keep - notes and lists.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --
profile-directory="Profile 1" --app-id=hmjkmjkepdijhoojdojkdfohbdgmmhki
ShortcutWithArgument: C:\Users\JohnDoe\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned
\TaskBar\Google Keep - notes and lists.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) -> --profile-directory="Profile 1" --app-id=hmjkmjkepdijhoojdojkdfohbdgmmhki
ShortcutWithArgument: C:\Users\JohnDoe\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned
\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application
\chrome.exe (Google Inc.) -> --profile-directory="Profile 1"
==================== Loaded Modules (Whitelisted) ==============
2017-01-08 20:07 - 2015-07-14 21:04 - 000032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
2014-03-29 17:14 - 2011-04-11 00:26 - 000034304 _____ () C:\WINDOWS\System32\spe__l.dll
2015-08-03 23:25 - 2015-08-03 23:25 - 000214528 _____ () C:\Program Files\AMD\ATI.ACE\Fuel
\Fuel.Container.PerformanceTuning.dll
2014-02-11 06:08 - 2014-02-11 06:08 - 000817152 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Device.dll
2014-02-11 06:08 - 2014-02-11 06:08 - 003650560 _____ () C:\Program Files\AMD\ATI.ACE\Fuel\Platform.dll
2015-08-03 23:25 - 2015-08-03 23:25 - 000127488 _____ () C:\Program Files\AMD\ATI.ACE\Fuel
\Fuel.Container.Wlan.dll
2015-09-08 14:03 - 2017-01-17 03:25 - 000117440 _____ () C:\Program Files\Microsoft Office
15\ClientX64\ApiClient.dll
2017-04-11 20:35 - 2017-03-28 05:15 - 002495768 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-11-07 21:52 - 2017-01-08 07:43 - 007711878 _____ () C:\Program Files\pia_manager\pia_manager.exe
2017-03-21 18:50 - 2017-01-31 07:34 - 008909512 _____ () C:\Program Files\Microsoft Office 15\root\VFS
\ProgramFilesX64\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2004-09-30 13:15 - 2004-09-30 13:15 - 000192000 _____ () C:\Program Files\LinkShellExtension\RockallDLL.dll
2017-01-08 20:14 - 2015-09-17 00:48 - 000429056 _____ () C:\Windows\SystemApps
\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-11-04 15:43 - 2015-11-04 15:43 - 000102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel
\Fuel.Proxy.Native.dll
2017-11-07 17:32 - 2017-11-05 04:12 - 004135768 _____ () C:\Program Files (x86)\Google\Chrome\Application
\62.0.3202.89\libglesv2.dll
2017-11-07 17:32 - 2017-11-05 04:12 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application
\62.0.3202.89\libegl.dll
2017-04-11 20:35 - 2017-03-28 00:57 - 006569472 _____ () C:\WINDOWS\SystemApps
\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-01-08 20:12 - 2016-11-19 01:06 - 000471040 _____ () C:\WINDOWS\SystemApps
\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-04-11 20:34 - 2017-03-28 00:55 - 001808384 _____ () C:\WINDOWS\SystemApps
\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-01-08 20:17 - 2015-09-17 00:43 - 002274816 _____ () C:\WINDOWS\SystemApps
\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-07-10 06:00 - 2015-07-10 08:14 - 000210432 _____ () C:\WINDOWS\SystemApps
\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.ProxyStub.dll
2014-04-07 09:31 - 2014-04-07 09:31 - 000172032 _____ () C:\Program Files (x86)\Motorola Mobility\Motorola
Device Manager\css_core.dll
2017-11-11 10:27 - 2017-11-11 10:27 - 000012800 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocr3701.tmp\lib
\ruby\1.9.1\i386-mingw32\enc\encdb.so
2017-11-11 10:27 - 2017-11-11 10:27 - 000009728 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocr3701.tmp\lib
\ruby\1.9.1\i386-mingw32\enc\iso_8859_1.so
2017-11-11 10:27 - 2017-11-11 10:27 - 000014848 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocr3701.tmp\lib
\ruby\1.9.1\i386-mingw32\enc\trans\transdb.so
2017-11-11 10:27 - 2017-11-11 10:27 - 000094208 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocr3701.tmp\src
\rgloader\rgloader193.mswin.so
2017-11-11 10:27 - 2017-11-11 10:27 - 000009216 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocr3701.tmp\lib
\ruby\1.9.1\i386-mingw32\etc.so
2017-11-11 10:27 - 2017-11-11 10:27 - 000094208 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocr3701.tmp\lib
\ruby\site_ruby\1.9.1\rgloader\rgloader193.mswin.so
2017-11-11 10:27 - 2017-11-11 10:27 - 000126976 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocr3701.tmp\lib
\ruby\1.9.1\i386-mingw32\win32ole.so
2017-11-11 10:27 - 2017-11-11 10:27 - 000087552 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocr3701.tmp\lib
\ruby\1.9.1\i386-mingw32\dl.so
2017-11-11 10:27 - 2017-11-11 10:27 - 000016384 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocr3701.tmp\lib
\ruby\1.9.1\i386-mingw32\fiddle.so
2017-11-11 10:27 - 2017-11-11 10:27 - 000127316 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocr3701.tmp\bin
\libffi-6.dll
2017-11-11 10:27 - 2017-11-11 10:27 - 000008704 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocr3701.tmp\lib
\ruby\1.9.1\i386-mingw32\enc\utf_16le.so
2017-11-11 10:27 - 2017-11-11 10:27 - 000013312 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocr3701.tmp\lib
\ruby\1.9.1\i386-mingw32\enc\trans\utf_16_32.so
2017-11-11 10:27 - 2017-11-11 10:27 - 000095744 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocr3701.tmp\lib
\ruby\1.9.1\i386-mingw32\enc\trans\single_byte.so
2017-11-11 10:27 - 2017-11-11 10:27 - 000026624 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocr3701.tmp\lib
\ruby\gems\1.9.1\gems\win32-api-1.5.0-universal-mingw32\lib\win32\ruby19\win32\api.so
2017-11-11 10:28 - 2017-11-11 10:28 - 000012800 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\lib
\ruby\1.9.1\i386-mingw32\enc\encdb.so
2017-11-11 10:28 - 2017-11-11 10:28 - 000009728 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\lib
\ruby\1.9.1\i386-mingw32\enc\iso_8859_1.so
2017-11-11 10:28 - 2017-11-11 10:28 - 000014848 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\lib
\ruby\1.9.1\i386-mingw32\enc\trans\transdb.so
2017-11-11 10:27 - 2017-11-11 10:27 - 000094208 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\src
\rgloader\rgloader193.mswin.so
2017-11-11 10:28 - 2017-11-11 10:28 - 000094208 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\lib
\ruby\site_ruby\1.9.1\rgloader\rgloader193.mswin.so
2017-11-11 10:28 - 2017-11-11 10:28 - 000118784 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\lib
\ruby\1.9.1\i386-mingw32\socket.so
2017-11-11 10:28 - 2017-11-11 10:28 - 000069120 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\lib
\ruby\1.9.1\i386-mingw32\zlib.so
2017-11-11 10:27 - 2017-11-11 10:27 - 000083968 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\bin
\zlib1.dll
2017-11-11 10:28 - 2017-11-11 10:28 - 000026624 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\lib
\ruby\1.9.1\i386-mingw32\stringio.so
2017-11-11 10:28 - 2017-11-11 10:28 - 000275968 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\lib
\ruby\1.9.1\i386-mingw32\openssl.so
2017-11-11 10:28 - 2017-11-11 10:28 - 000015360 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\lib
\ruby\1.9.1\i386-mingw32\digest.so
2017-11-11 10:28 - 2017-11-11 10:28 - 000008192 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\lib
\ruby\1.9.1\i386-mingw32\fcntl.so
2017-11-11 10:28 - 2017-11-11 10:28 - 000009216 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\lib
\ruby\1.9.1\i386-mingw32\etc.so
2017-11-11 10:28 - 2017-11-11 10:28 - 000023552 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\lib
\ruby\1.9.1\i386-mingw32\json\ext\parser.so
2017-11-11 10:28 - 2017-11-11 10:28 - 000008704 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\lib
\ruby\1.9.1\i386-mingw32\enc\utf_16be.so
2017-11-11 10:28 - 2017-11-11 10:28 - 000008704 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\lib
\ruby\1.9.1\i386-mingw32\enc\utf_16le.so
2017-11-11 10:28 - 2017-11-11 10:28 - 000008704 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\lib
\ruby\1.9.1\i386-mingw32\enc\utf_32be.so
2017-11-11 10:28 - 2017-11-11 10:28 - 000008704 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\lib
\ruby\1.9.1\i386-mingw32\enc\utf_32le.so
2017-11-11 10:28 - 2017-11-11 10:28 - 000036352 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\lib
\ruby\1.9.1\i386-mingw32\json\ext\generator.so
2017-11-11 10:28 - 2017-11-11 10:28 - 000126976 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\lib
\ruby\1.9.1\i386-mingw32\win32ole.so
2017-11-11 10:28 - 2017-11-11 10:28 - 000087552 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\lib
\ruby\1.9.1\i386-mingw32\dl.so
2017-11-11 10:28 - 2017-11-11 10:28 - 000016384 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\lib
\ruby\1.9.1\i386-mingw32\fiddle.so
2017-11-11 10:27 - 2017-11-11 10:28 - 000127316 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\bin
\libffi-6.dll
2017-11-11 10:28 - 2017-11-11 10:28 - 000013312 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\lib
\ruby\1.9.1\i386-mingw32\enc\trans\utf_16_32.so
2017-11-11 10:28 - 2017-11-11 10:28 - 000095744 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\lib
\ruby\1.9.1\i386-mingw32\enc\trans\single_byte.so
2017-11-11 10:28 - 2017-11-11 10:28 - 000026624 _____ () C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\lib
\ruby\gems\1.9.1\gems\win32-api-1.5.0-universal-mingw32\lib\win32\ruby19\win32\api.so
2017-01-08 07:43 - 2017-01-08 07:43 - 000939520 _____ () C:\Program Files\pia_manager\pia_tray_bin\nw-win
\ffmpeg.dll
2017-01-08 07:43 - 2017-01-08 07:43 - 003115520 _____ () C:\Program Files\pia_manager\pia_tray_bin\nw-win
\node.dll
2017-11-06 09:51 - 2017-11-06 09:51 - 000083432 _____ () C:\Program Files (x86)\Plex\Plex Media Server\zlib.dll
2017-11-06 09:51 - 2017-11-06 09:51 - 001083368 _____ () C:\Program Files (x86)\Plex\Plex Media Server
\libxml2.dll
2017-11-06 09:51 - 2017-11-06 09:51 - 000115688 _____ () C:\Program Files (x86)\Plex\Plex Media Server
\soci_core-vc80-3_0.dll
2017-11-06 09:51 - 2017-11-06 09:51 - 000059880 _____ () C:\Program Files (x86)\Plex\Plex Media Server
\soci_sqlite3-vc80-3_0.dll
2017-11-06 09:51 - 2017-11-06 09:51 - 000772072 _____ () C:\Program Files (x86)\Plex\Plex Media Server\tag.dll
2017-11-06 09:51 - 2017-11-06 09:51 - 001741288 _____ () C:\Program Files (x86)\Plex\Plex Media Server
\opencv_imgproc2411.dll
2017-11-06 09:51 - 2017-11-06 09:51 - 001962984 _____ () C:\Program Files (x86)\Plex\Plex Media Server
\opencv_core2411.dll
2017-11-06 09:51 - 2017-11-06 09:51 - 000025576 _____ () C:\Program Files (x86)\Plex\Plex Media Server
\lyric_lite.dll
2017-11-06 09:51 - 2017-11-06 09:51 - 000203240 _____ () C:\Program Files (x86)\Plex\Plex Media Server
\libidn.dll
2017-11-06 09:51 - 2017-11-06 09:51 - 001549104 _____ () C:\Program Files (x86)\Plex\Plex Media Server\libstdc
++-6.dll
2017-11-06 09:51 - 2017-11-06 09:51 - 000127136 _____ () C:\Program Files (x86)\Plex\Plex Media Server
\libgcc_s_dw2-1.dll
2017-11-06 09:51 - 2017-11-06 09:51 - 000050152 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs
\_socket.pyd
2017-11-06 09:51 - 2017-11-06 09:51 - 000071656 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs
\_ssl.pyd
2017-11-06 09:51 - 2017-11-06 09:51 - 000024552 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs
\_hashlib.pyd
2017-11-06 09:51 - 2017-11-06 09:51 - 000041448 _____ () C:\Program Files (x86)\Plex\Plex Media Server\Exts
\simplejson\_speedups.pyd
2017-11-06 09:51 - 2017-11-06 09:51 - 000930280 _____ () C:\Program Files (x86)\Plex\Plex Media Server\Exts
\lxml\etree.pyd
2017-11-06 09:51 - 2017-11-06 09:51 - 000190952 _____ () C:\Program Files (x86)\Plex\Plex Media Server
\libxslt.dll
2017-11-06 09:51 - 2017-11-06 09:51 - 000074728 _____ () C:\Program Files (x86)\Plex\Plex Media Server
\libexslt.dll
2017-11-06 09:51 - 2017-11-06 09:51 - 000218088 _____ () C:\Program Files (x86)\Plex\Plex Media Server\Exts
\lxml\objectify.pyd
2017-11-06 09:51 - 2017-11-06 09:51 - 000018920 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs
\select.pyd
2017-11-06 09:51 - 2017-11-06 09:51 - 000095720 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs
\_ctypes.pyd
2017-11-06 09:51 - 2017-11-06 09:51 - 000143336 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs
\pyexpat.pyd
2017-11-06 09:51 - 2017-11-06 09:51 - 000694248 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs
\unicodedata.pyd
2017-11-06 09:51 - 2017-11-06 09:51 - 000064488 _____ () C:\Program Files (x86)\Plex\Plex Media Server
\TeVii.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`28hfm [0]
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm [0]
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`27hfm [0]
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be
restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MB3Service => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MB3Service => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
HKU\S-1-5-21-2118853541-1488753588-3094647493-1000\Software\Classes\.scr: AutoCADScriptFile =>
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 21:34 - 2017-03-30 20:04 - 000501196 _____ C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 activation.acronis.com
127.0.0.1 localhost
0.0.0.0 fr.a2dfp.net
0.0.0.0 m.fr.a2dfp.net
0.0.0.0 mfr.a2dfp.net
0.0.0.0 ad.a8.net
0.0.0.0 asy.a8ww.net
0.0.0.0 static.a-ads.com
0.0.0.0 abcstats.com
0.0.0.0 a.abv.bg
0.0.0.0 adserver.abv.bg
0.0.0.0 adv.abv.bg
0.0.0.0 bimg.abv.bg
0.0.0.0 ca.abv.bg
0.0.0.0 track.acclaimnetwork.com
0.0.0.0 accuserveadsystem.com
0.0.0.0 www.accuserveadsystem.com
0.0.0.0 achmedia.com
0.0.0.0 csh.actiondesk.com
0.0.0.0 ads.activepower.net
0.0.0.0 app.activetrail.com
0.0.0.0 stat.active24stats.nl #[Tracking.Cookie]
0.0.0.0 traffic.acwebconnecting.com
0.0.0.0 office.ad1.ru
0.0.0.0 cms.ad2click.nl
0.0.0.0 ad2games.com
0.0.0.0 content.ad20.net
0.0.0.0 core.ad20.net
0.0.0.0 banner.ad.nu
0.0.0.0 adadvisor.net
There are 13208 more lines.
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2118853541-1488753588-3094647493-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\JohnDoe
\Downloads\46900422-wallpaper-gray.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5)
(ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
MSCONFIG\Services: !SASCORE => 2
MSCONFIG\Services: AcrSch2Svc => 2
MSCONFIG\Services: afcdpsrv => 2
MSCONFIG\Services: Apple Mobile Device => 2
MSCONFIG\Services: Autodesk Content Service => 2
MSCONFIG\Services: BEService => 3
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: FlexNet Licensing Service 64 => 3
MSCONFIG\Services: Hamachi2Svc => 2
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: LMIGuardianSvc => 2
MSCONFIG\Services: SDScannerService => 2
MSCONFIG\Services: SDUpdateService => 2
MSCONFIG\Services: SDWSCService => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: SwitchBoard => 3
MSCONFIG\Services: syncagentsrv => 2
MSCONFIG\Services: VeeamEndpointBackupSvc => 2
MSCONFIG\Services: WTabletServiceCon => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^CrashPlan Tray.lnk => C:
\Windows\pss\CrashPlan Tray.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Install LastPass FF
RunOnce.lnk => C:\Windows\pss\Install LastPass FF RunOnce.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Install LastPass IE
RunOnce.lnk => C:\Windows\pss\Install LastPass IE RunOnce.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan
Plus.lnk => C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^OculusConfigUtil.lnk =>
C:\Windows\pss\OculusConfigUtil.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^JohnDoe^AppData^Roaming^Microsoft^Windows^Start
Menu^Programs^Startup^EvernoteClipper.lnk => C:\Windows\pss\EvernoteClipper.lnk.Startup
MSCONFIG\startupfolder: C:^Users^JohnDoe^AppData^Roaming^Microsoft^Windows^Start
Menu^Programs^Startup^MagicDisc.lnk => C:\Windows\pss\MagicDisc.lnk.Startup
MSCONFIG\startupreg: Acronis Scheduler2 Service => "C:\Program Files (x86)\Common Files\Acronis
\Schedule2\schedhlp.exe"
MSCONFIG\startupreg: AcronisTibMounterMonitor => C:\Program Files (x86)\Common Files\Acronis\TibMounter
\TibMounterMonitor.exe
MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative
Cloud.exe" --showwindow=false --onOSstartup=true
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA
\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager
\CS6ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: ADSKAppManager => "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager
\R1\AdAppMgr.exe" -showminimized -checkautorun
MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\JohnDoe\AppData\Local\Akamai\netsession_win.exe"
MSCONFIG\startupreg: ApplePhotoStreams => C:\Program Files (x86)\Common Files\Apple\Internet Services
\ApplePhotoStreams.exe
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support
\APSDaemon.exe"
MSCONFIG\startupreg: Autodesk Sync => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
MSCONFIG\startupreg: AVG-Secure-Search-Update_0214c => C:\Users\JohnDoe\AppData\Roaming\AVG 0214c Campaign
\AVG-Secure-Search-Update-0214c.exe /PROMPT /mid=012d7d48095647d39ae281ac0f58262d-
70393698b68259567fe90401a4c13bae881e40dd /CMPID=0214c
MSCONFIG\startupreg: AVG-Secure-Search-Update_1113a => C:\Users\JohnDoe\AppData\Roaming\AVG 1113a Campaign
\AVG-Secure-Search-Update-1113a.exe /PROMPT /mid=012d7d48095647d39ae281ac0f58262d-
70393698b68259567fe90401a4c13bae881e40dd /CMPID=1113a
MSCONFIG\startupreg: AVG_UI => "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
MSCONFIG\startupreg: BackupAndRecoveryMonitor.exe => C:\Program Files (x86)\Acronis\BackupAndRecovery
\BackupAndRecoveryMonitor.exe
MSCONFIG\startupreg: BCSSync => "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: CrashPlanService => C:\Users\JohnDoe\AppData\Local\Programs\CrashPlan\CrashPlanService.vbs
MSCONFIG\startupreg: CrashPlanTray => C:\Users\JohnDoe\AppData\Local\Programs\CrashPlan\CrashPlanTray.exe
MSCONFIG\startupreg: DivXUpdate => "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
MSCONFIG\startupreg: Dxtory Update Checker 2.0 => C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe
MSCONFIG\startupreg: f.lux => "C:\Users\JohnDoe\AppData\Local\FluxSoftware\Flux\flux.exe" /noshow
MSCONFIG\startupreg: Facebook Update => "C:\Users\JohnDoe\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c
/nocrashserver
MSCONFIG\startupreg: Fences => "C:\Program Files (x86)\Stardock\Fences\Fences.exe" /startup
MSCONFIG\startupreg: googletalk => C:\Program Files (x86)\Google\Google Talk\googletalk.exe /autostart
MSCONFIG\startupreg: Gyazo => C:\Program Files (x86)\Gyazo\GyStation.exe
MSCONFIG\startupreg: iCloudServices => C:\Program Files (x86)\Common Files\Apple\Internet Services
\iCloudServices.exe
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Logitech Download Assistant => C:\Windows\system32\rundll32.exe C:\Windows
\System32\LogiLDA.dll,LogiFetch
MSCONFIG\startupreg: OutfoxTV => C:\Program Files\OutfoxTV\OutfoxTV\DesktopContainer.exe
MSCONFIG\startupreg: PWRISOVM.EXE => C:\Program Files\PowerISO\PWRISOVM.EXE -startup
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup
MSCONFIG\startupreg: SDTray => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spybot-S&D Cleaning => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe"
/autoclean
MSCONFIG\startupreg: SpybotPostWindows10UpgradeReInstall => "C:\Program Files\Common Files\AV\Spybot - Search
and Destroy\Test.exe"
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
MSCONFIG\startupreg: TrayMonitor.exe => C:\Program Files (x86)\Acronis\TrayMonitor\TrayMonitor.exe
MSCONFIG\startupreg: TrueImageMonitor.exe => "C:\Program Files (x86)\Acronis\TrueImageHome
\TrueImageMonitor.exe"
MSCONFIG\startupreg: uTorrent => "C:\Users\JohnDoe\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
MSCONFIG\startupreg: Veeam.EndPoint.Tray.exe => C:\Program Files\Veeam\Endpoint Backup\Veeam.EndPoint.Tray.exe
-NoControlPanel
MSCONFIG\startupreg: XboxStat => "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "Launch LCore"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKLM\...\StartupApproved\Run32: => "SDTray"
HKU\S-1-5-21-2118853541-1488753588-3094647493-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2118853541-1488753588-3094647493-1000\...\StartupApproved\Run: =>
"SpybotPostWindows10UpgradeReInstall"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved
unless listed separately.)
FirewallRules: [{75EFF93B-098D-465E-AF70-C6873E25ACCD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{9C7E5216-7246-4528-8150-0FFE3335D0F4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{0BE48B47-1842-4C75-B520-2D736FBF1451}] => (Allow) C:\Program Files (x86)\Riftcat\VRidge.exe
FirewallRules: [{F81B3C48-1DAB-48BA-A151-7A486ACA21A0}] => (Allow) C:\Program Files (x86)\Riftcat\VRidge.exe
FirewallRules: [{8931F971-2510-419C-8561-66E8583E8595}] => (Allow) C:\Program Files (x86)\Riftcat\Riftcat.exe
FirewallRules: [{E481D2D3-FC9D-4FA9-BD95-A5ABFAEB9EE4}] => (Allow) C:\Program Files (x86)\Riftcat\Riftcat.exe
FirewallRules: [UDP Query User{334E95A5-E2D1-43DE-99CA-98E48DC68EE5}C:\program files (x86)\deluge\deluge.exe]
=> (Allow) C:\program files (x86)\deluge\deluge.exe
FirewallRules: [TCP Query User{F54B39CC-F7C5-4DE0-995B-A6642AA23865}C:\program files (x86)\deluge\deluge.exe]
=> (Allow) C:\program files (x86)\deluge\deluge.exe
FirewallRules: [{E3E9ED28-8066-4E36-B5CA-C46F4F148D39}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{F6A84C0E-FBD0-4CAF-B407-1B06957D4CDE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{D121B62E-5B2A-4E66-A800-68664F6E4661}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{37E3A800-803F-4A73-B72E-9FD98E463A1F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{5A399ACA-D7A2-457D-BADD-487F542DDFF2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{1889113A-2289-4DAE-99BA-D8753613E6AB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7A628787-D70F-44E9-80D9-38806ED72DBF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6BDA842F-47B0-4DBA-9D33-87B95AD5E95E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{0471FF3C-C44C-4C68-9A46-3DBA0A8FF54D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{98A1E580-C5AE-4192-84AB-D1560060FBE7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{27955D3F-5717-49D3-8AD0-E8DEA6334BD3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{5044250B-D182-45D1-84B9-81DCC60E28FD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7BA4CEA0-7440-4BA2-AB0A-934CFBBF5FD6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{1B548BB3-D5CC-4D5F-9D38-B35426A2D05C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{8879323F-DBEB-4F66-992E-1AC6C2D2D6AE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{F357546F-BC60-4181-98B4-C2F57AD073C5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{5A421725-3FA5-4FA3-ACA0-92A7F2D5220B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{0B8DF506-238B-4E76-85DD-E45AFAA49A3C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C080184A-4EB1-42F4-8640-31127F0E9A5B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{06D8837E-E83B-46D2-894D-962A183F1301}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7228A905-67B6-46BA-ADD1-37A2F4B32B1D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{792973AA-B5D0-4B44-8D12-0EB98ED151D7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{BC7DEB8A-DE4B-4558-8B9D-C27E0C1CA634}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{5BB07D0C-6B22-4274-91B6-FD7947DB90D5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{B5BC6F77-13B5-4ED9-A507-15B3B1BED50F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{F9E7398D-3EFF-40B3-B12E-F03B66786A05}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{0BF167CF-15F9-4737-9965-865C0D6321B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{EB4D1600-0AE2-42A9-B874-48651630C9C5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{3199D023-6BFA-45E4-B721-D75FBC326964}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{04BF1E32-50DA-4559-B2A1-49B76EB4B638}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{5400F224-ED0E-4D80-BC7B-322269023C91}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{FA8F5790-358C-4F2A-9984-C1F00C975B36}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6927A104-0E3A-40F7-86D2-51A558DBB213}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{A4B536E6-B8D8-43DD-A9DC-C3BB2C5FC733}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{B6ABE096-3A9B-4521-B61B-A23BFA0A9A59}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{2AB76F7D-7735-4BA5-ACD6-A4E143326D1C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{38C11767-E891-40DD-93B6-0D385E9C9C44}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6174BB2B-CEED-450A-B238-B6DD9D617A12}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{A199A92F-EEB1-48CC-B60E-EB8B6D5A6D07}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{B1F3DFA6-F742-46E7-8DB5-2E99BF6D81DB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{CB553BBA-8C3E-4978-8B83-DF123EE8F28C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{4752FBD5-F36A-4E3D-A108-CCF8C6EA67A5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C296C17E-D9D1-46FF-967D-76DA4ECF7102}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{B358125D-056E-47EB-AC42-B21783CC1F9F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C1CF8409-8EB9-4DB4-86D5-F72DDA6239E8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{EB4FFEAB-443B-4324-950F-AAC71F1132D6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{EB959F4E-710F-4CE9-98DB-011C396458C9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C4EC1DBE-7C62-4B8C-BF04-F046005415AF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{2E02996E-3154-4610-A5D4-80027361955D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{B3A3F6A3-35DF-44F6-AC50-2A306FDA08AD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{9BC67FB0-7767-4299-8CB6-A27376FCA58E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2cfg.exe
FirewallRules: [{60EA82B5-DED9-4FE7-8390-A2A505FA8E00}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2cfg.exe
FirewallRules: [{ED62CF6B-F640-4C0E-B0A1-3224767DD34B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef
\cef.win7\steamwebhelper.exe
FirewallRules: [{4E4EB7DB-C878-4B9E-9224-FB610E867540}] => (Allow) C:\Program Files (x86)\Steam\bin\cef
\cef.win7\steamwebhelper.exe
FirewallRules: [{EB750A4D-18F6-4B03-A74C-CC608477E910}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\STALKER Shadow of Chernobyl\bin\XR_3DA.exe
FirewallRules: [{4C9EF861-E2E3-4C4D-94A1-29829C11F6D5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\STALKER Shadow of Chernobyl\bin\XR_3DA.exe
FirewallRules: [{4625D4FA-F8F3-4641-A15A-49FDC679DBA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\The Binding Of Isaac\Isaac.exe
FirewallRules: [{7BEC35B6-6789-4B85-854A-AE8E529C2908}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\The Binding Of Isaac\Isaac.exe
FirewallRules: [{6807D6D9-2714-4377-97B6-DEEBE6718AED}] => (Allow) C:\Program Files\Veeam\Endpoint Backup
\VeeamDeploymentSvc.exe
FirewallRules: [{57DB03E4-395E-44B2-A33E-55EC2E91B4A2}] => (Allow) C:\Program Files\Veeam\Endpoint Backup
\VeeamDeploymentSvc.exe
FirewallRules: [{F64BFA1B-49E6-4331-A98B-81335811AA1F}] => (Allow) C:\Program Files\Veeam\Endpoint Backup
\x86\VeeamAgent.exe
FirewallRules: [{8AC04E03-EF0E-4CC9-8334-0413E02586AF}] => (Allow) C:\Program Files\Veeam\Endpoint Backup
\x86\VeeamAgent.exe
FirewallRules: [{F7CA07DE-DC4A-4442-85A3-11C266BE4AB2}] => (Allow) C:\Program Files\Veeam\Endpoint Backup
\x64\VeeamAgent.exe
FirewallRules: [{97C8B878-283D-4785-B0AB-E824E050F158}] => (Allow) C:\Program Files\Veeam\Endpoint Backup
\x64\VeeamAgent.exe
FirewallRules: [{DFA8F125-8120-4A86-ABCD-D7BD39FB9870}] => (Allow) C:\Program Files\Veeam\Endpoint Backup
\Veeam.EndPoint.Service.exe
FirewallRules: [{3BFB2EEC-AC13-4B28-A17D-97A3F3CFAA95}] => (Allow) C:\Program Files\Veeam\Endpoint Backup
\Veeam.EndPoint.Service.exe
FirewallRules: [{753C829F-AAF8-46BD-BD3A-3CB1EDACAD80}] => (Allow) C:\Program Files\Veeam\Endpoint Backup
\Veeam.EndPoint.Recovery.exe
FirewallRules: [UDP Query User{9E010019-C924-40F4-90B7-7E68AAC18F5D}C:\program files (x86)\trinusvr
\tgserver.exe] => (Allow) C:\program files (x86)\trinusvr\tgserver.exe
FirewallRules: [TCP Query User{3B0E7986-E1E7-49B9-87CB-6228B3681EA2}C:\program files (x86)\trinusvr
\tgserver.exe] => (Allow) C:\program files (x86)\trinusvr\tgserver.exe
FirewallRules: [{97F5B3D5-FBB2-42D0-865E-53C658581B85}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\SteamVR\tools\bin\win32\vrmonitor.exe
FirewallRules: [{76A3B7AC-0DCD-4203-B265-DDD01BFAE72D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\SteamVR\tools\bin\win32\vrmonitor.exe
FirewallRules: [UDP Query User{5EB3E8DF-6AE7-46B5-9725-E78D104BE3ED}C:\program files (x86)\trinusvr
\tgserver.exe] => (Allow) C:\program files (x86)\trinusvr\tgserver.exe
FirewallRules: [TCP Query User{00E5D80B-2D5E-4DE1-8428-386A2D6CAC35}C:\program files (x86)\trinusvr
\tgserver.exe] => (Allow) C:\program files (x86)\trinusvr\tgserver.exe
FirewallRules: [{2FA4CE46-18FE-4086-92D4-1AC347E23F1E}] => (Allow) C:\Users\JohnDoe\AppData\Roaming\uTorrent
\uTorrent.exe
FirewallRules: [{3481AC93-4F43-4F29-8A7D-894227C96201}] => (Allow) C:\Users\JohnDoe\AppData\Roaming\uTorrent
\uTorrent.exe
FirewallRules: [{A720F494-AC19-43A4-B74D-2B94D68C96B3}] => (Allow) C:\Users\JohnDoe\AppData\Roaming\uTorrent
\uTorrent.exe
FirewallRules: [{086628CB-CD16-4E65-9132-A82C3F839B8E}] => (Allow) C:\Users\JohnDoe\AppData\Roaming\uTorrent
\uTorrent.exe
FirewallRules: [{695E2055-0738-4A4B-B619-FE9D3895A703}] => (Allow) C:\Users\JohnDoe\AppData\Roaming\uTorrent
\uTorrent.exe
FirewallRules: [{4CC1AB1E-308B-4EBE-AED2-881C795F188C}] => (Allow) C:\Users\JohnDoe\AppData\Roaming\uTorrent
\uTorrent.exe
FirewallRules: [{103C5946-3F05-4BFD-BBC6-40D1099C42CF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\SteamVRPerformanceTest\bin\win64\vr.exe
FirewallRules: [{34B01E4B-F143-440A-A59A-1AEE372EAF1B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\SteamVRPerformanceTest\bin\win64\vr.exe
FirewallRules: [UDP Query User{223C5775-E52B-4BCD-952F-D01632A73CAD}C:\users\JohnDoe\appdata\local\programs
\crashplan\crashplanservice.exe] => (Allow) C:\users\JohnDoe\appdata\local\programs\crashplan
\crashplanservice.exe
FirewallRules: [TCP Query User{8E72D0B3-A8F6-402E-AD22-C3AFC9AB2FF6}C:\users\JohnDoe\appdata\local\programs
\crashplan\crashplanservice.exe] => (Allow) C:\users\JohnDoe\appdata\local\programs\crashplan
\crashplanservice.exe
FirewallRules: [{38849EF8-BD16-498C-84D5-F337210558A4}] => (Allow) LPort=7575
FirewallRules: [{F6C56860-CA82-4224-B5D5-46C720F18A8D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Quake Live\quakelive_steam.exe
FirewallRules: [{B50CC47A-193C-4A45-959D-A75DDE485389}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Quake Live\quakelive_steam.exe
FirewallRules: [{687D1343-9F7E-4204-B53D-74EB32326A1C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Dark Souls II Scholar of the First Sin\Game\DarkSoulsII.exe
FirewallRules: [{C2270987-E8D4-4FBB-B40C-CA78E841C26A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Dark Souls II Scholar of the First Sin\Game\DarkSoulsII.exe
FirewallRules: [UDP Query User{35688CE3-AF66-4FF0-B22E-50B9EC596A62}C:\program files (x86)\hearthstone
\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [TCP Query User{C3F443B8-18D2-4BA2-8213-B50E3E5C352B}C:\program files (x86)\hearthstone
\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [{A1EC950A-785F-42A6-A6DE-CADCCEC3895F}] => (Block) %ProgramFiles% (x86)\R.G. Mechanics\Outlast
\OutlastLauncher.exe
FirewallRules: [UDP Query User{DE58377F-8EFA-4999-BCC1-0462C086528E}C:\program files (x86)\r.g. mechanics
\outlast\binaries\win64\olgame.exe] => (Block) C:\program files (x86)\r.g. mechanics\outlast\binaries
\win64\olgame.exe
FirewallRules: [TCP Query User{97966721-E71E-43EA-A511-C53C7F219C58}C:\program files (x86)\r.g. mechanics
\outlast\binaries\win64\olgame.exe] => (Block) C:\program files (x86)\r.g. mechanics\outlast\binaries
\win64\olgame.exe
FirewallRules: [{F0404191-39A0-4526-BA1B-027E493EA615}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{90820F54-83BE-47CB-8F53-FB278E5260C4}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{EE4300FC-1BE1-46FA-95F8-E4B8BCAB0EC2}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{C1F1A368-F725-44C7-95D8-D65F0F339F28}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{3A9091F7-788A-4DE5-8191-196E88BD4973}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{AC291F83-70BC-49DD-8123-138816007EEF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [UDP Query User{BFB084F1-BABA-4D4C-AB16-40D414A9D041}C:\program files\unity\editor\unity.exe] =>
(Allow) C:\program files\unity\editor\unity.exe
FirewallRules: [TCP Query User{679DDA69-471F-423F-A25E-5F3C6D3DC360}C:\program files\unity\editor\unity.exe] =>
(Allow) C:\program files\unity\editor\unity.exe
FirewallRules: [{3B9D85D4-D587-4A45-A46C-D8F95F87E81F}] => (Allow) %ProgramFiles%\pia_manager\pia_manager.exe
FirewallRules: [{EB876300-600A-4B9F-8DA4-856756EC7EED}] => (Allow) %ProgramFiles%\pia_manager
\privateinternetaccess.exe
FirewallRules: [{CD530128-FBE0-4599-A77B-AC9C278992D4}] => (Allow) %ProgramFiles%\pia_manager\pia_manager.exe
FirewallRules: [{B66A3EAE-1BB1-40BE-AA78-7F509230BC5C}] => (Allow) %ProgramFiles%\pia_manager
\privateinternetaccess.exe
FirewallRules: [{914725A8-9310-4172-90A6-9FF2684C2D18}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Morrowind\Morrowind Launcher.exe
FirewallRules: [{D2F68AF1-B4F3-4A3A-8C3F-39FA7E294184}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Morrowind\Morrowind Launcher.exe
FirewallRules: [{0465A618-1646-4733-BDDC-8ED63FA94623}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Skyrim\skse_steam_boot.exe
FirewallRules: [{A21E6775-3F27-4204-8177-9B19B6205C58}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Skyrim\skse_steam_boot.exe
FirewallRules: [UDP Query User{B5E30494-B301-4B74-A681-33243E7C6A9D}C:\program files (x86)\minecraft\runtime
\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin
\javaw.exe
FirewallRules: [TCP Query User{40A3AA9D-693D-4A48-AE33-23E9C2ADCA18}C:\program files (x86)\minecraft\runtime
\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin
\javaw.exe
FirewallRules: [{251DF70C-7415-4389-B0F0-00CCBF9ED12A}] => (Allow) C:\Program Files\Microsoft Office 15\root
\Office15\UcMapi.exe
FirewallRules: [{7B82BBA7-53A1-459B-B0DB-9F09B0616196}] => (Allow) C:\Program Files\Microsoft Office 15\root
\Office15\Lync.exe
FirewallRules: [{557FA6B3-12B5-4BCE-ACCC-79BE7D017056}] => (Allow) %ProgramFiles%\pia_manager
FirewallRules: [{B0F1A8BF-F3AE-4B90-BB52-A647D7668098}] => (Allow) C:\program files\pia_manager\openvpn.exe
FirewallRules: [{5926E1D8-79BF-485E-B617-9C8A46079B47}] => (Allow) C:\program files\pia_manager\openvpn.exe
FirewallRules: [UDP Query User{D9C24520-0DC6-4733-877D-4AF8F3F70C97}C:\program files\pia_manager\openvpn.exe]
=> (Allow) C:\program files\pia_manager\openvpn.exe
FirewallRules: [TCP Query User{7E8567E2-7B68-49A6-AFEC-D2C7D596FB55}C:\program files\pia_manager\openvpn.exe]
=> (Allow) C:\program files\pia_manager\openvpn.exe
FirewallRules: [{689CFD95-B6B3-45BD-93F6-A925FFAAAEB2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{4D91763D-87BC-404E-8D43-971FA1B66D97}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{BDA468C0-1D6A-4319-8085-EB328902BA1D}] => (Allow) C:\Program Files\Microsoft Office 15\root
\Office15\UcMapi.exe
FirewallRules: [{6078D894-7692-42E4-A341-9EBABA5A3F4C}] => (Allow) C:\Program Files\Microsoft Office 15\root
\Office15\Lync.exe
FirewallRules: [{4F35435A-2864-4DFF-A1F2-FDABB7E21366}] => (Allow) C:\Program Files\Microsoft Office 15\root
\Office15\outlook.exe
FirewallRules: [UDP Query User{F4994A54-69F5-4F3B-B87A-14E31C4F93AC}C:\program files\epic games\4.8\engine
\binaries\dotnet\swarmagent.exe] => (Allow) C:\program files\epic games\4.8\engine\binaries\dotnet
\swarmagent.exe
FirewallRules: [TCP Query User{D1101655-C058-424F-AA56-1B5AD6F3FA7C}C:\program files\epic games\4.8\engine
\binaries\dotnet\swarmagent.exe] => (Allow) C:\program files\epic games\4.8\engine\binaries\dotnet
\swarmagent.exe
FirewallRules: [UDP Query User{D4EC0B55-69E8-4A5C-9F92-B49FDF478574}C:\program files\epic games\4.8\engine
\binaries\win64\ue4editor.exe] => (Allow) C:\program files\epic games\4.8\engine\binaries\win64\ue4editor.exe
FirewallRules: [TCP Query User{11F7C029-262D-4ADA-9335-2C0502B83CC2}C:\program files\epic games\4.8\engine
\binaries\win64\ue4editor.exe] => (Allow) C:\program files\epic games\4.8\engine\binaries\win64\ue4editor.exe
FirewallRules: [UDP Query User{0E00E11A-FC6F-452C-844A-F4FA2455648F}C:\program files\unity\monodevelop\bin
\monodevelop.exe] => (Allow) C:\program files\unity\monodevelop\bin\monodevelop.exe
FirewallRules: [TCP Query User{7ABD9079-BB15-46F9-B993-81CE94262A93}C:\program files\unity\monodevelop\bin
\monodevelop.exe] => (Allow) C:\program files\unity\monodevelop\bin\monodevelop.exe
FirewallRules: [UDP Query User{F13BCE07-A029-4B65-AB99-394BA1174A0D}C:\program files\unity\editor\unity.exe] =>
(Allow) C:\program files\unity\editor\unity.exe
FirewallRules: [TCP Query User{56D6E516-1C0D-45CC-863C-94E1D03A7DFA}C:\program files\unity\editor\unity.exe] =>
(Allow) C:\program files\unity\editor\unity.exe
FirewallRules: [UDP Query User{BD3BD8C6-DE95-4799-904D-699D1B2B50FB}C:\program files (x86)\minecraft\runtime
\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin
\javaw.exe
FirewallRules: [TCP Query User{FB60E9E8-09AD-40BF-9741-5A27EA899BC5}C:\program files (x86)\minecraft\runtime
\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin
\javaw.exe
FirewallRules: [{BDCAEA99-6314-4F53-9A08-C74438D71D71}] => (Block) %ProgramFiles%\Adobe\Adobe Photoshop CS6 (64
Bit)\Photoshop.exe
FirewallRules: [{304D728F-8450-45B4-B223-F669374AF7E7}] => (Block) %ProgramFiles%\Adobe\Adobe Bridge CS6 (64
Bit)\Bridge.exe
FirewallRules: [{4F1C0B00-3EA9-43F9-85FD-C95EB000204A}] => (Block) %ProgramFiles%\Adobe\Adobe Bridge CS6 (64
Bit)\Bridge.exe
FirewallRules: [{35248B8B-0468-4F3B-8B7F-07D48887F81E}] => (Block) %ProgramFiles%\Adobe\Adobe Photoshop CS6 (64
Bit)\sniffer_gpu.exe
FirewallRules: [{2FA9FE2A-47A0-4593-963D-DCFED39BE8AB}] => (Block) %ProgramFiles%\Adobe\Adobe Photoshop CS6 (64
Bit)\LogTransport2.exe
FirewallRules: [{8B0515E4-0E49-43B2-BF01-86CE7CBA52B0}] => (Block) %ProgramFiles%\Adobe\Adobe Photoshop CS6 (64
Bit)\Photoshop.exe
FirewallRules: [{F2CBCE41-B49D-4E47-81BF-CB33C1A41BA3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Dear Esther\dearesther.exe
FirewallRules: [{1EB87F30-4AA1-4387-9A1C-D594B356FC51}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Dear Esther\dearesther.exe
FirewallRules: [{43BE26E7-965F-4EFD-9D05-EF9E5F005882}] => (Allow) C:\Program Files (x86)\Common Files\Acronis
\SyncAgent\syncagentsrv.exe
FirewallRules: [{BB1BE65F-E880-4FF6-8227-B2268548ACF3}] => (Allow) C:\Program Files (x86)\Common Files\Acronis
\SyncAgent\syncagentsrv.exe
FirewallRules: [{BCEC217F-4EF7-40D5-93E2-1987C9671215}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Machine for Pigs\Launcher.exe
FirewallRules: [{E1DBBEB6-8AB7-4DB4-B37E-F1BB20F9310B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Machine for Pigs\Launcher.exe
FirewallRules: [{AA0C4311-7C28-41E5-ADF8-257AFBB8978F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Machine for Pigs\aamfp.exe
FirewallRules: [{D614BFF5-2C7D-4756-A4C8-98F8BF20DE85}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Machine for Pigs\aamfp.exe
FirewallRules: [{CC5E7AA1-A1D9-4683-A46A-2CBFC0DA5338}] => (Allow) C:\Program Files (x86)\Crazybump
\CrazyBump.exe
FirewallRules: [{78DA62EC-9AD7-4C8A-8856-C870591C171E}] => (Allow) C:\Program Files (x86)\Crazybump
\CrazyBump.exe
FirewallRules: [{70BC060B-FAA7-4814-AF0A-1979E3BF68FA}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [{CFC16692-2CCD-4EE0-A203-88B536979279}] => (Allow) C:\UDK\UDK-2014-08\Binaries\Win64\UDK.exe
FirewallRules: [{D756C30A-7DC0-40B9-B4E0-E27B97B9ACA9}] => (Allow) C:\UDK\UDK-2014-08\Binaries\Win64\UDK.exe
FirewallRules: [{BD0F74E9-033F-41D6-99B1-EA009D003A05}] => (Allow) C:\UDK\UDK-2014-08\Binaries\Win32\UDK.exe
FirewallRules: [{6F33C7AF-E299-4E25-B864-6CEDFDC941E7}] => (Allow) C:\UDK\UDK-2014-08\Binaries\Win32\UDK.exe
FirewallRules: [{56AF8189-48C8-474A-BE17-1C756CDF0C4C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\SourceSDK\bin\SDKLauncher.exe
FirewallRules: [{C0C17CE3-CF5D-488A-982A-67A5B012D068}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\SourceSDK\bin\SDKLauncher.exe
FirewallRules: [{B6CB86F2-75B2-48EB-8516-5504475D41D8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\left 4 dead\bin\SDKLauncher.exe
FirewallRules: [{A488BE73-CE02-4B06-8835-6B54A55133B6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\left 4 dead\bin\SDKLauncher.exe
FirewallRules: [{8C369261-2C9E-4AC6-96D3-74DF7904DB5A}] => (Allow) LPort=1900
FirewallRules: [{5BE45551-2216-46BE-B0D4-AB084ABF6B5E}] => (Allow) LPort=2869
FirewallRules: [{6C4B18EA-1923-4CE3-9816-38A32670250A}] => (Allow) C:\Program Files (x86)\Windows Live
\Contacts\wlcomm.exe
FirewallRules: [{FA5672C5-79CA-4238-8542-B535C9C04AA3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9E1EF846-D980-44D5-B064-9DEFBC386BF0}] => (Allow) C:\Program Files (x86)\Samsung\Samsung
Universal Print Driver 2\PrinterSelector\SUPDApp.exe
FirewallRules: [{8905A171-F954-4A06-8B10-A14EA7B23B55}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Penumbra Overture\redist\Penumbra.exe
FirewallRules: [{998B5B86-6CD5-4237-A747-7E9B23370B7D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Penumbra Overture\redist\Penumbra.exe
FirewallRules: [{1D032D33-B665-477B-B36D-9697627C0BFF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Penumbra Black Plague\redist\Penumbra.exe
FirewallRules: [{F2C538D2-CDCB-4AA7-AC77-FF12EF32F3CD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Penumbra Black Plague\redist\Penumbra.exe
FirewallRules: [{01B94D6C-BAB3-4CB6-A725-7963319B4E08}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\team fortress 2\hl2.exe
FirewallRules: [{5DF3193C-079D-4FBE-BDE9-9ED23CD96D21}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\team fortress 2\hl2.exe
FirewallRules: [{17A91EFC-AB92-4C4C-A03E-5861C19AB7B0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Source SDK Base\hl2.exe
FirewallRules: [{4A5E98D2-427F-42AE-A5F5-084EB39EB9C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Source SDK Base\hl2.exe
FirewallRules: [{391658E2-5D00-48ED-9795-CE0435B6584B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\GarrysMod\hl2.exe
FirewallRules: [{439846EA-C718-47AA-9E58-8FA7093FC2E2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\GarrysMod\hl2.exe
FirewallRules: [{6337E307-76D3-4D5E-BB42-AE9A424AED3A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Source SDK Base 2013 Singleplayer\hl2.exe
FirewallRules: [{C7B75A24-3A3B-4308-8CEF-EEB2541E7572}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Source SDK Base 2013 Singleplayer\hl2.exe
FirewallRules: [{5CCED517-F47C-4127-B375-420F798744E2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Source SDK Base 2007\hl2.exe
FirewallRules: [{BF9069EB-D6C3-4A0E-B432-4E246497E4EA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Source SDK Base 2007\hl2.exe
FirewallRules: [{82A10E02-EECD-4CBF-959F-0BBDFAA80CBA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Half-Life\hl.exe
FirewallRules: [{B75AB411-522D-47C0-B206-6775A3C76913}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Half-Life\hl.exe
FirewallRules: [{365CF0E7-335E-497B-A6C2-9D0EF37E592F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Half-Life SDK\Hammer Editor\hammer.exe
FirewallRules: [{E7EA8D79-286C-41BB-823E-E1FB770461A7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Half-Life SDK\Hammer Editor\hammer.exe
FirewallRules: [{0A05A12F-340B-4C99-8B02-E92ACE1681C0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\rust\rust.exe
FirewallRules: [{6D4F103A-84B2-47FE-9C68-711D8069466A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\rust\rust.exe
FirewallRules: [{97BA6D3B-7F24-4BAF-86B0-56F154B4E62D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\rust\rust.exe
FirewallRules: [{189AA99C-29B4-4787-BA4F-49038D0CD82C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\rust\rust.exe
FirewallRules: [{F4A1B8F6-5963-49F1-850A-64E9A6030020}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\rust\rust.exe
FirewallRules: [{14A3AE91-D91B-49E1-BD78-1BCAE910B511}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\rust\rust.exe
FirewallRules: [{1FF26D7B-6C36-44E2-B2AF-FBD98F3A1A68}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{7192F61F-A591-4E6F-87B9-3F3B1BE59F65}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{5BBADA0D-7A50-4B8A-BC75-5C28ED8002AA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{BF036E11-8E7F-4FC6-843B-FE13044BF492}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{B6080E87-9741-4AB6-85B7-7EF9B69D0E09}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{E1B16B81-9E24-4DB7-B67B-2950CA0DA710}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{56FFB7E7-4121-47CC-9A22-DB02C79800C2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{99D685FA-9458-4285-8048-802DD0CEB253}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{F6CD971B-C6D3-4E6A-AB53-2BCFAB125A35}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{A29D69EE-9F74-45BB-9FBC-CBB8ED1BA890}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{6E5B2C30-AAD4-4339-9887-DCFB64B1B9B0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{ABFA9C35-5EC3-40A4-861F-82FC1B5C0FBC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{A2FF888B-45F5-46B6-9374-104FB370FB0C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Super Meat Boy\SuperMeatBoy.exe
FirewallRules: [{6A52E697-7BDE-4EEC-AE16-7FA55BA3741E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Super Meat Boy\SuperMeatBoy.exe
FirewallRules: [{2F8D325A-ED64-440C-96BA-040B56A04E56}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{679FE4AF-76D1-4B96-8216-401D8D646440}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [UDP Query User{77A1F528-C305-47C4-9EE8-FADA0899565B}C:\program files (x86)\steam\steam.exe] =>
(Allow) C:\program files (x86)\steam\steam.exe
FirewallRules: [TCP Query User{9A677C8A-4E4B-4317-BAE0-7D62A12D3F15}C:\program files (x86)\steam\steam.exe] =>
(Allow) C:\program files (x86)\steam\steam.exe
FirewallRules: [{C1258AE8-D306-4DF3-BF51-C9FFEE03A10B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Machine for Pigs\Launcher.exe
FirewallRules: [{B027A9F6-42CA-4757-B11C-3DFAD7B15B6C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Machine for Pigs\Launcher.exe
FirewallRules: [{8A717357-2916-4FB5-8C6B-26CDD6F9D087}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Machine for Pigs\aamfp.exe
FirewallRules: [{46FB3D3E-161E-46FC-B87A-5A76394739F1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Machine for Pigs\aamfp.exe
FirewallRules: [UDP Query User{91331AFE-DC3D-4181-8407-FFFEF8BAD75A}C:\users\JohnDoe\appdata\roaming\utorrent
\utorrent.exe] => (Allow) C:\users\JohnDoe\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [TCP Query User{F126D196-4670-4756-9A49-1ACED4807FAC}C:\users\JohnDoe\appdata\roaming\utorrent
\utorrent.exe] => (Allow) C:\users\JohnDoe\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{6851E29B-4CED-4178-B2B4-C50CAD1DA965}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{6A1B49D5-57F7-477B-BBBF-E94F3CBB314E}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{8577D211-94C7-445D-B102-4CC929B62453}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Bigscreen\Bigscreen_Data\Bigscreen\win64\Bigscreen.exe
FirewallRules: [{EA344CE9-FC11-4172-9D95-7EA505E7D375}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Bigscreen\Bigscreen_Data\Bigscreen\win64\Bigscreen.exe
FirewallRules: [{D245C990-B511-4EB7-8DEF-0ABDDD285683}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{2352082C-7BA2-4E5C-9602-B76CF40E1F67}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{A7F66000-F97A-4487-AE3E-C74AF3BCA34F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{EA93DE08-08B7-49FF-B45C-1E56103C29F0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{89608FAE-303D-4EB4-AA4A-1B7EF91B1385}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{F39ACEC1-7F1E-4F51-B074-5C99CAB3C4BE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{BC36DD12-CAD9-4E29-A76B-4408E4CFBE9B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6810EB91-A85A-43B1-9792-49A03464F634}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{5A356A8C-54B2-4CF2-9761-895D399FBA78}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{8FE699A1-CC04-40AF-AB8D-1EF2BEE8AF67}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6473884F-B43E-462E-ADFF-EE1C0FA873F3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{31B169E8-D8D3-4BA2-884B-796974DA8345}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{310462CE-870A-41DD-9DFD-20E092554186}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{A09E818E-880B-4471-AB74-7F6F3DF33F25}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{9A16DE88-D587-46E5-BAE1-6CCD178A79F0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6B74A00C-6984-4347-9B35-E1A6484CC026}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6DE9E0EE-5297-4536-AF2F-DA6D1388D14A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{3C985F21-214E-4329-8135-B230B771CBB0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{E51D949F-B77D-4B4A-A3ED-1DB0D8B80E8E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{D7038E8F-2AB5-4568-8CC0-E487DFC4FE50}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{45381F00-51ED-48E7-B197-67A3FED0C0E0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{3331AE6D-DFC1-42D3-B24F-AD6BC217E9A6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{89238998-161F-4BA7-8F28-34D61B0E7AA3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{9D31D3D7-B755-4104-BB39-F4ED796C4DB0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C0CCBE55-0080-43AB-B52A-CE18CDC34FE7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C8F229C2-5800-44C3-A584-3F00A449429C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [TCP Query User{6AC8E5E5-0448-45A3-96A8-4004A36B416F}C:\program files (x86)\dearmob\5kplayer
\5kplayer.exe] => (Allow) C:\program files (x86)\dearmob\5kplayer\5kplayer.exe
FirewallRules: [UDP Query User{E427C6FA-5FC1-44FD-85B0-CB43A01CED92}C:\program files (x86)\dearmob\5kplayer
\5kplayer.exe] => (Allow) C:\program files (x86)\dearmob\5kplayer\5kplayer.exe
FirewallRules: [{E07D0991-7B06-437D-BA37-ADEC7371B7F7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{DF3B090F-AE9C-4666-9413-5BAE516BAF18}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{97DB912B-A616-4180-B18C-D090E4D1EB8A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{197AE5FD-D8F2-4887-8134-F6D7AA9EEC6C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7A5FC420-46BA-4F82-B923-2017DC25DD3A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{35BAE388-A4E3-48C5-B80D-2866A0BD403D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{F38EBDB9-B28C-42E7-AB84-E2CEB8364378}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{D969E3CE-7B6C-4DB4-A39E-384479D58877}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [TCP Query User{14F286DF-EB2D-46BB-9450-01A61EC91468}C:\program files\java\jre1.8.0_51\bin
\java.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\java.exe
FirewallRules: [UDP Query User{BAF747F1-449C-4811-A989-1A8F8D44A5FB}C:\program files\java\jre1.8.0_51\bin
\java.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\java.exe
FirewallRules: [{9B5EA3DB-8A1C-4BBC-AE4C-516EA4031043}] => (Block) C:\program files\java\jre1.8.0_51\bin
\java.exe
FirewallRules: [{01090D46-F62D-4303-B9E5-938FF76B3C44}] => (Block) C:\program files\java\jre1.8.0_51\bin
\java.exe
FirewallRules: [{EBA1F5DD-6F59-4DB4-AEAC-1CA9F17ED3E7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{46E3BC1E-09A0-4EA9-A1A9-36200478C9C4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{19EFA63D-3559-4814-B1DD-15449D2A8974}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{63586D1F-9657-4591-B56C-7AD2BDC8B474}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{91CF096F-B4CA-4A22-91DE-27210865081F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{432BF075-8886-4D6E-92A4-3B973A17A9D3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{FB8FDAED-D7C0-4D99-8EDE-3B8C9774A2FF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{89564C33-0558-4FFE-88A9-7EEF9CB3C141}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{9DC9AD5B-B134-4283-997F-47382AA74189}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{19914B29-4A43-4650-B88F-88DD1D86D97F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{1D34DE84-1F26-490F-BABE-137ED7A0A1A5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{9ED6880B-04FB-4E3D-9001-70E87B046FD5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{3D129460-97B1-4FBD-8383-E9C245713CC5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{0AB58EC6-1B9C-4585-8233-087E8851A54C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{FCB2A20E-799F-4AB1-9AB1-620FA84356ED}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{03E43FBA-EC84-4C22-BD73-CC1F77E00DE2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C3BC89C5-2D9F-402B-93E9-294C3B0BC9E7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C714E824-9BF6-4DE0-87C7-2290E7198067}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{CA19EB25-71AB-4262-812B-B0812E6F4CEB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{BAE2A2EF-F936-4C89-987F-FC9BE942E522}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{AFF11262-B606-4B80-80BD-3FE6C5B095F3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{2AB49C8A-954B-4622-914A-BF96039BA046}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{832EA048-0277-43E3-B9FA-81E13FDE3BDA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{E934A329-326F-4009-9C0B-58E68EC0A248}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{73E8F931-26A4-4E1F-98FE-5835493FE656}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{2FA56D4A-DCC0-4620-9C21-77053B06BB70}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{427DECFB-F758-4FF1-AD23-ED4A1F2592D3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{FC567421-FC77-4D2A-884A-5B850FB40FE6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{E955E5BE-CA38-4345-9FD0-E2829CFFE0E0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{71FA7563-269E-49E9-A574-CE765E5623DD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{412FB76D-9FE0-4EE4-9654-D90DBCF1F8FA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{1417E540-990A-4249-A78C-957B5D61C047}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{CCECC6EE-AA04-46E4-A7B6-5E183D52C860}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6C3343E6-27D3-451D-89BF-4062F2D83557}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{0DC20C22-3D6F-4B0E-8EB3-0F4830C7E991}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{5DD6DEA8-8D04-4C50-B84D-5243F4CC50A0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{EF88E3F1-8982-40A8-9262-31D2D42924FF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{5733C5D5-8F05-4C45-ADCD-E288184FD9D0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{05FE21D2-FE4E-490C-A7DF-5C7821DE4680}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{23AE89FC-1122-4621-AE0D-2538E6B58C3E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{CDACAA4F-E9E5-432F-A4DB-0C19E7E5A37E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{D31A4718-88C6-44DD-A94A-6C9877153FAB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{D6185D9B-14D2-46A6-BCE9-EE87C48F2130}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{EEFD1C3F-A753-4E91-8310-CC688A6C7610}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{576D2051-F324-4212-A363-237D3F51AB41}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{5866985D-2A12-4B6C-A0F1-E8644FC1FC91}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{069997FD-A755-440C-AE17-BF9393580E40}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C38C385F-EA6B-4AB1-A211-92AEF89EF9D6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{3925D0C6-7756-405F-BD92-20D720B2735E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{565860AF-A84E-46C4-91A7-B18F4A8E840B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6C096AB2-B689-48D0-A401-DF636F46C90A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Zen Bound 2\ZenBound2.exe
FirewallRules: [{2800AF51-77DF-4675-AFAE-DD04FB48BFF6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Zen Bound 2\ZenBound2.exe
FirewallRules: [{EFA31CCC-04BD-4FCD-AFB0-BB06B5148E14}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Cortex Command\Cortex Command.exe
FirewallRules: [{3FD5A9E1-77AB-435C-8C8E-6B1667DAA5B8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Cortex Command\Cortex Command.exe
FirewallRules: [{02422E61-0025-4641-B1ED-072656C08F54}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{1D9FB4B2-DB68-429B-891F-232E80B5B829}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{43772756-F942-4139-930D-229C12BCAEB1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{5FF900DC-81B2-48AD-B23B-0B5DCA19C471}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{640065B5-2295-4138-96E2-4B101A92D1DC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Call of Duty Black Ops\BlackOpsMP.exe
FirewallRules: [{981DA163-C751-4946-9790-FDB51CCFF860}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Call of Duty Black Ops\BlackOpsMP.exe
FirewallRules: [{F4B2C88B-BC8E-4AC2-B6E2-5CA71BAB0A3A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C136E98E-4828-495D-AD23-C7A1F9073B6F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{BF608A45-E705-4E4B-B16A-80D29EBFA52A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{DF4E394B-1880-45ED-8053-2AE59832132D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{EB7B7EFE-D6AE-44BA-A657-C72DD195D2E4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{D6492530-D995-44A3-8704-82ADE07EB2B8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{79AF9884-BFA2-46F8-8DEC-B704AA0070BB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{542E6284-4CB6-4563-9400-39CFD30C79CF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{BF698A63-E387-467B-92A9-6281715BEE93}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{D64E53CF-71B9-4290-9DE1-0999BAE0389B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{1D728E68-E85E-41DC-B8AD-D199D9895E94}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{E576337B-1D73-4502-8B2D-EBF5EB0DF769}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{623CFFC1-AE84-4615-B448-D9AC1D1D3F22}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{5DF44BFB-6A7D-47EF-96E3-0F9FF7DF7610}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{825933C6-259B-4786-B4AB-DDFEB0AEEFD3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{65C82595-796A-45F6-9ADA-C60D6031CFFD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{4EBE22F9-D8A1-465E-BD1F-DE33A0799B5E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{492826FD-B8D9-4B1D-A4CA-F9E0355D094E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{0BF6A407-640D-4373-A826-39AF9389A922}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{77C392DC-EAE5-4127-8FFF-F8A5C953F369}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [TCP Query User{7B276A94-FB50-48F6-B292-9FC51776B9B2}C:\users\JohnDoe\appdata\local\skypeplugin
\pluginhost.exe] => (Allow) C:\users\JohnDoe\appdata\local\skypeplugin\pluginhost.exe
FirewallRules: [UDP Query User{1EB6DD75-412A-4FFE-8682-AAB07DDF629E}C:\users\JohnDoe\appdata\local\skypeplugin
\pluginhost.exe] => (Allow) C:\users\JohnDoe\appdata\local\skypeplugin\pluginhost.exe
FirewallRules: [{B3E16C66-8057-4F43-BB7D-B6C6E14234CB}] => (Block) C:\users\JohnDoe\appdata\local\skypeplugin
\pluginhost.exe
FirewallRules: [{7D55988B-71A5-461E-B315-E09AF86B9501}] => (Block) C:\users\JohnDoe\appdata\local\skypeplugin
\pluginhost.exe
FirewallRules: [{F8208DB3-B161-4BA9-8A7F-16630E61C34B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{F63F8DF5-C01D-4FAF-8F27-510DBF54CB19}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{15D84A01-F110-4FDC-8B4B-084F74B60A20}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{B04D8C0D-AE14-4A7B-A5F6-A7EBA848F0CB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7BABF8C7-1591-4E6D-8304-B8671454F32C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\SteamVR\bin\win32\vrstartup.exe
FirewallRules: [{E52AC7D1-78D0-4C4B-95A2-BB5FEB018DC5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\SteamVR\bin\win32\vrstartup.exe
FirewallRules: [{0486B8D6-FA3F-413F-B65B-B13B7D4DD0B0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{41F34609-39D8-4379-975E-83B2FEEA483A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{65F85B7B-5E0A-4A34-BA8A-8F9DF9379F6A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{BAA3C76E-5912-40A4-B5EF-8447C22377AA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6B3ED6D8-16E4-4286-AE70-9C355169A9E2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{EB58486A-41EF-42A9-96D8-4274C4DFF89D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C45C4B25-60DF-45AE-A5DB-8DD50AE4CA5E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{19E27A4B-39F8-4005-A278-1F8CCB56EE3F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{507958FD-98C8-4FE3-8F93-657E400FDBCB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{54A41E38-A54E-4B32-855F-BEB3D136F096}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{BE9B0D5E-3A07-4512-B2CC-4F24CBA568B5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{5485B733-5164-4538-910B-3BEE4C65D8A0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{77AB9DE0-B3A4-43F4-9F80-4F3ABCC9FD14}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Triennale Game Collection\TGC.exe
FirewallRules: [{676A7CDA-A46A-4496-92D7-F68FFC49F41A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Triennale Game Collection\TGC.exe
FirewallRules: [{C235C184-5A94-42BF-9E85-14EE77224B78}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7EC2B399-65D5-4B73-AD68-E595BFF30B5B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{510AF94E-A9A6-4A81-8ADD-42F189A77F53}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{AE483A94-2D4F-4F54-8AF3-C4D5FA933903}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{87C50B97-179B-4167-B01A-432D556C9A36}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{E99827AF-1101-4E88-9165-507B1BEF9811}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{254A6799-03FB-404C-8940-063A42089224}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{FC3B87D6-A7D2-422F-BC70-C41EEFAF7D01}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{167A9F00-3909-4C4D-AD34-AABAC3B12513}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\DARK SOULS III\Game\DarkSoulsIII.exe
FirewallRules: [{E4BD7796-64EB-4297-BDC1-F65A820AEA23}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\DARK SOULS III\Game\DarkSoulsIII.exe
FirewallRules: [{E16C27F7-C59A-4EDB-B43F-8043B12AF54E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{DFBA6168-F6EF-47E7-A58A-3A042151A66E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{4C92C5CA-63DE-4A90-B4D2-9E7F7F5776D9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{EA8E79E3-98EA-4F6A-AAF0-49B82DF5EC65}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{A417CF6B-07C2-4525-80E4-A6C7363879D6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7B3FAC41-BF51-4279-A173-3E19790BA3C0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{3B47F452-87B4-4A4D-8984-3B5A20A52DFB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7A1AFFB4-6342-408E-9662-78355A0DE6B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{15B3E56E-14DE-4026-9328-C807880A2C66}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{606F94DF-9D74-44EF-AECC-73512F25B10C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{1DB90217-2232-4FCF-9359-467C14C16327}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{1C73ECC3-7383-462A-A3DC-771D654CA657}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{B416E276-6AF4-4B77-8950-F03E4725948A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{315762FD-A671-4774-96EE-18446A82785C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [TCP Query User{50E779EE-EC1D-4A4F-9C74-4A87C79FEAC8}C:\program files (x86)\deluge\deluge.exe]
=> (Allow) C:\program files (x86)\deluge\deluge.exe
FirewallRules: [UDP Query User{7F8EDFFF-DD3B-44B8-A785-1EBE80B9E50E}C:\program files (x86)\deluge\deluge.exe]
=> (Allow) C:\program files (x86)\deluge\deluge.exe
FirewallRules: [{E69DE465-861D-41EB-A63E-A86ABA70F293}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{916F46A2-FAAE-4E01-A23E-57D66C21D8E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{4AC4A855-5540-47DF-A7D5-FDA21823C7D8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7A91B659-E7CF-4D1D-9E91-23E9E2000572}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{2644EFC1-6167-454F-BB9A-30D75036F400}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C62FA5BC-EEED-4BD3-9AA4-03CB555FB11E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{3422CCD2-01C2-4CFB-B827-FA954DEA2AE8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{9B967771-AAC4-41BE-8D4D-B65CFEC3BBFF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{DAB6C0DC-12D6-464F-B68C-9782EA4885B6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{5E4624F1-98C2-49EF-BA69-B2E9843704A0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{EAA30354-F07F-426A-9B2C-F8115F9314E6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{56142DD9-BC39-45B3-91B6-9E6213D053BE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7C263FBD-34B2-48A0-AEC3-92105F755173}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{99DCE7D5-BF18-467E-87AC-5FCD2DCAEDEC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{78F62FD9-0796-4556-BC1C-933E47B11F2D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7AC1DA79-3137-4001-8496-DC4E0DDE858A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{A431190B-8412-4131-AE4C-4EB2FEAF1C97}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{74418ACE-0D30-4D41-975C-E9BD60981C50}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{AF62C180-0082-422C-BE04-646F804B15BE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{9DF0E91F-7AC6-441E-A109-3E01B399EFA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{E516132C-40AB-4F01-9B81-D6AF9183E5E5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{305B42DD-E1E5-4071-A2B7-69EF76452D79}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{3F68097E-D5E7-4D27-98BF-45AB5B62A4C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{98343C88-E0C2-4B71-9CA3-A51E88FA7C55}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{44CA5BFF-1EF0-4CAF-8242-57555D24441D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\DARK SOULS III\Game\DarkSoulsIII.exe
FirewallRules: [{9B682D37-DA92-4476-850F-D763F46D9BD8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\DARK SOULS III\Game\DarkSoulsIII.exe
FirewallRules: [{2A148A49-C05F-492B-A0E5-8B034E502076}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{3284D81D-5513-4551-9A77-968E7043F7A1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{01CF588F-84B1-4752-9C3D-5FF58E488E3A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C673C64A-D1ED-4A0E-A4D0-B471183EE2A8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{739F6C2D-AEF8-48C6-820C-613BE741703F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{DC306C33-ECD2-4ECD-A001-26FFD865F636}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [TCP Query User{29B3AD49-D643-4AC8-ABD8-B6D0CED2B441}C:\program files (x86)\soulseekqt
\soulseekqt.exe] => (Allow) C:\program files (x86)\soulseekqt\soulseekqt.exe
FirewallRules: [UDP Query User{0D679011-82BD-4F1E-B04C-97C0DDB1D934}C:\program files (x86)\soulseekqt
\soulseekqt.exe] => (Allow) C:\program files (x86)\soulseekqt\soulseekqt.exe
FirewallRules: [{255E9145-EE3E-495E-B151-EFA65214E29E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7C89B1F5-CC4A-4F1B-BA02-D90E0B0EE52A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{F1EB676A-7D30-4141-AA44-9D7059BB6928}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{D9576BED-234D-4668-8495-B4DC5A837198}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{CD0F42FD-88A3-49EB-94F4-13BC5406DDC5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6968A33F-1EA2-421A-ACEE-4BBAABC6DDB8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{A1F3BC9B-DFB9-4656-96CC-CBE6F0E67009}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{1645735C-278C-4F8B-A430-8702193853BC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{911AEA59-0961-4F08-A979-822F997BA7AE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{09921F80-DFF8-4D97-A551-6C3D4F7A5CC1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{B40E7FD4-0927-48B0-BC17-DD9BFDA2B68B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{98DDC664-3564-478F-8DD0-289C58AAE70D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{43B87E0A-CFE5-4266-AD6A-6B09F1591C38}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{76244D35-2524-462F-86D7-E013948C4316}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{83363C42-8C47-44D6-8412-84AF0C7CBEBA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C1F4F6EE-2873-4B5C-AE8F-9666BF98CA1C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{2ABB588A-749D-4FA0-A6F8-E511FFD502F0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{793EC73F-D8C3-477C-B8F8-81F93B14E99D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [TCP Query User{1E9FAE70-7B73-4467-9F42-B5C1CF2DE7F8}C:\program files (x86)\overwatch
\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [UDP Query User{A438AD74-1F12-4BB8-BC30-0A01E7E937D6}C:\program files (x86)\overwatch
\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [{7EF1D59D-501B-4B6C-BADC-283A849AA655}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{8C0EE9FA-11A0-4774-B16C-ECA5215AF15C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7456922B-CF5D-4D2E-A257-0F1056DBEC51}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\DiRT 3 Complete Edition\dirt3_game.exe
FirewallRules: [{FDB0C458-052B-4969-A633-AC774C4719B7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\DiRT 3 Complete Edition\dirt3_game.exe
FirewallRules: [{999587AA-D171-4756-B871-EB30050F54EA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Portal\hl2.exe
FirewallRules: [{E53C5683-F0A0-4380-9952-9F6B13C96E37}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Portal\hl2.exe
FirewallRules: [{3DE45635-9A1F-4949-B55F-35B168040C49}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Trine\_enchanted_edition_\trine1_launcher.exe
FirewallRules: [{8D850CB9-C0D9-430D-849B-A3FF4D66DAEE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Trine\_enchanted_edition_\trine1_launcher.exe
FirewallRules: [{E3A522E8-9DB3-4841-8F7B-1FCDD58F8BEF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Torchlight\Torchlight.exe
FirewallRules: [{BBFE475D-C672-48B5-B39B-D790E9F63F3D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Torchlight\Torchlight.exe
FirewallRules: [{74A4F7C7-B64A-4D41-8D4F-0CEFBA921523}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Overcooked\Overcooked.exe
FirewallRules: [{C86FFC09-13FC-412E-90BC-AA4059446FE8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Overcooked\Overcooked.exe
FirewallRules: [{A2B400F0-951F-42C2-926C-078ABB37638C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Torchlight II\ModLauncher.exe
FirewallRules: [{8E41CDAD-9230-4026-A838-96D0EF8EFF13}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Torchlight II\ModLauncher.exe
FirewallRules: [TCP Query User{26F84D69-04FB-4401-8E81-A1E5A35C4320}C:\program files (x86)\steam\steamapps
\common\torchlight ii\torchlight2.exe] => (Block) C:\program files (x86)\steam\steamapps\common\torchlight ii
\torchlight2.exe
FirewallRules: [UDP Query User{D876B31E-C18D-4377-8810-08FEF73E5C70}C:\program files (x86)\steam\steamapps
\common\torchlight ii\torchlight2.exe] => (Block) C:\program files (x86)\steam\steamapps\common\torchlight ii
\torchlight2.exe
FirewallRules: [{5C1B1890-8B2D-4BD5-B6B5-BE97AAC38F49}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Magicka 2\engine\Magicka2.exe
FirewallRules: [{8E4923C5-F189-42FD-BBAE-65DFE3AEFB19}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Magicka 2\engine\Magicka2.exe
FirewallRules: [{DFC0B403-FD85-46CE-BC73-D84EFC12825D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\SS2\SS2.exe
FirewallRules: [{C7FF41ED-9D63-413F-A84B-210735A4AE49}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\SS2\SS2.exe
FirewallRules: [{7F04A63A-7FCD-48F7-8E9D-A59A34FDF58A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{54A4D2AF-7DFA-4F45-AAA9-DA918593486C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{4289BEF5-E30E-4FBE-BDF5-26DEF9F1312D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Mount Your Friends\MountYourFriends.exe
FirewallRules: [{2FDE973B-A82F-4771-85FC-C0443078B991}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Mount Your Friends\MountYourFriends.exe
FirewallRules: [{0BD12F7B-5679-4762-ACDF-8EF0BB347489}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{050892EF-F145-4DE0-B64D-1725B440D7C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{127D96F1-B23E-4B56-A2E1-740977401BB5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{CCD87D99-7A79-4B0A-B6AE-A8D5E5C9085D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{052DE6E9-EB97-4948-A138-22C80CA858D9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe
FirewallRules: [{B4ABE65D-FCF9-42D9-BB47-AF5B2807936C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe
FirewallRules: [{B98F4CB2-0DF5-4F32-B06B-ED6134A77573}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{9B77AFFC-BFA0-451A-846B-A3931E54CB10}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{56638887-1DF3-442E-8860-010B98F032C0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{A2B413A8-F55D-4A6C-8535-8B283AD64668}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7AD2574A-84F1-489C-87F6-814630659005}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{CD97A7CC-67AC-4C84-9FEB-D8A6ECD3C7EC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{9B67E367-AECF-42E0-918B-13946F4408B4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C627F552-1792-4A32-9A88-33D25E70D4CF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{5AD70824-6505-4112-8ECF-7D623854179B}] => (Allow) C:\Program Files (x86)\Google\Chrome
\Application\chrome.exe
FirewallRules: [TCP Query User{ACC3414A-5267-457C-BAFF-DC83C6D319A5}C:\users\JohnDoe\downloads
\sdi_r1793\sdi_x64_r1793.exe] => (Allow) C:\users\JohnDoe\downloads\sdi_r1793\sdi_x64_r1793.exe
FirewallRules: [UDP Query User{029153E8-27F2-426E-8ACC-FE2033EDC1C1}C:\users\JohnDoe\downloads
\sdi_r1793\sdi_x64_r1793.exe] => (Allow) C:\users\JohnDoe\downloads\sdi_r1793\sdi_x64_r1793.exe
FirewallRules: [{AAB09494-CFA2-4DF4-A79C-F9EB1ED11A15}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{56E4EC1F-901A-496C-B2E4-E0BAD48CE131}] => (Allow) C:\Program Files (x86)\Steam\SteamApps
\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{DF7E6CD0-4F78-4108-B309-19D51DC28650}] => (Allow) C:\Program Files (x86)\Plex\Plex Media
Server\Plex Media Server.exe
FirewallRules: [{77554E9E-5ECA-4452-96FB-970A36A7D118}] => (Allow) C:\Program Files (x86)\Plex\Plex Media
Server\PlexScriptHost.exe
FirewallRules: [{A71A6284-597F-49F5-9EF9-1EC5182D547B}] => (Allow) C:\Program Files (x86)\Plex\Plex Media
Server\Plex DLNA Server.exe
FirewallRules: [{867D1BE5-EFE4-454D-9B1C-2DD34F2CFF49}] => (Allow) C:\Program Files (x86)\Plex\Plex Media
Server\Plex Tuner Service.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\TriDef\TriDef\TriDefMediaPlayer
\TriDefMediaPlayer.exe] => Enabled:TriDef 3D Media Player
==================== Restore Points =========================
05-11-2017 16:40:04 Scheduled Checkpoint
11-11-2017 08:10:46 Removed Java 7 Update 67
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (11/11/2017 10:05:38 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ANDROID-
MC3IPDQ)
Description: Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2144927141
See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (11/11/2017 08:29:05 AM) (Source: Perflib) (EventID: 1023) (User: )
Description: Windows cannot load the extensible counter DLL rdyboost. The first four bytes (DWORD) of the Data
section contains the Windows error code.
Error: (11/11/2017 08:29:03 AM) (Source: Perflib) (EventID: 1017) (User: )
Description: Disabled performance counter data collection from the "ASP.NET_64_2.0.50727" service because the
performance counter library for that service has generated one or more errors. The errors that forced this
action have been written to the application event log. Correct the errors before enabling the performance
counters for this service.
Error: (11/11/2017 08:29:03 AM) (Source: Perflib) (EventID: 1022) (User: )
Description: Windows cannot open the 64-bit extensible counter DLL ASP.NET_64_2.0.50727 in a 32-bit
environment. Contact the file vendor to obtain a 32-bit version. Alternatively if you are running a 64-bit
native environment, you can open the 64-bit extensible counter DLL by using the 64-bit version of Performance
Monitor. To use this tool, open the Windows folder, open the System32 folder, and then start Perfmon.exe.
Error: (11/11/2017 08:25:20 AM) (Source: Microsoft-Windows-RestartManager) (EventID: 10007) (User: ANDROID-
MC3IPDQ)
Description: Application or service 'Autodesk Content Service' could not be restarted.
Error: (11/11/2017 08:11:40 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.
System
Error:
Access is denied.
.
Error: (11/11/2017 12:26:54 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ANDROID-
MC3IPDQ)
Description: Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2144927141
See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (11/11/2017 12:26:53 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ANDROID-
MC3IPDQ)
Description: Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2144927141
See the Microsoft-Windows-TWinUI/Operational log for additional information.
Error: (11/09/2017 10:51:05 PM) (Source: Windows Search Service) (EventID: 1019) (User: )
Description: Windows Search Service failed to process the list of included and excluded locations with the
error <30, 0x80040d07, "iehistory://{S-1-5-21-2118853541-1488753588-3094647493-1000}/">.
Error: (11/07/2017 07:06:39 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: ANDROID-
MC3IPDQ)
Description: Package Microsoft.Windows.Cortana_1.4.8.176_neutral_neutral_cw5n1h2txyewy+CortanaUI was terminated
because it took too long to suspend.
System errors:
=============
Error: (11/11/2017 11:31:24 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Plex Update Service service terminated unexpectedly. It has done this 1 time(s). The
following corrective action will be taken in 10000 milliseconds: Restart the service.
Error: (11/11/2017 10:30:22 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM
Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the
application container Unavailable SID (Unavailable). This security permission can be modified using the
Component Services administrative tool.
Error: (11/11/2017 10:07:09 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT
AUTHORITY)
Description: WLAN Extensibility Module has failed to start.
Module Path: C:\WINDOWS\system32\Rtlihvs.dll
Error Code: 126
Error: (11/11/2017 10:07:09 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Net.Tcp Listener Adapter service depends on the Net.Tcp Port Sharing Service service which
failed to start because of the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated
with it.
Error: (11/11/2017 10:05:38 AM) (Source: DCOM) (EventID: 10010) (User: ANDROID-MC3IPDQ)
Description: The server CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca did not register with DCOM within
the required timeout.
Error: (11/11/2017 10:05:37 AM) (Source: DCOM) (EventID: 10010) (User: ANDROID-MC3IPDQ)
Description: The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required
timeout.
Error: (11/11/2017 10:05:37 AM) (Source: DCOM) (EventID: 10010) (User: ANDROID-MC3IPDQ)
Description: The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required
timeout.
Error: (11/11/2017 10:05:37 AM) (Source: DCOM) (EventID: 10010) (User: ANDROID-MC3IPDQ)
Description: The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required
timeout.
Error: (11/11/2017 10:05:37 AM) (Source: DCOM) (EventID: 10010) (User: ANDROID-MC3IPDQ)
Description: The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required
timeout.
Error: (11/11/2017 10:05:37 AM) (Source: DCOM) (EventID: 10010) (User: ANDROID-MC3IPDQ)
Description: The server {1EF75F33-893B-4E8F-9655-C3D602BA4897} did not register with DCOM within the required
timeout.
CodeIntegrity:
===================================
Date: 2017-10-18 20:13:39.660
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET
\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC
\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft
signing level requirements.
Date: 2017-10-18 20:13:39.588
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET
\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB
\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
Date: 2017-10-18 20:13:39.540
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET
\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC
\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.
Date: 2017-10-18 20:13:39.454
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET
\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC
\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft
signing level requirements.
Date: 2017-10-18 20:13:39.313
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET
\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB
\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
Date: 2017-10-18 20:13:39.181
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET
\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC
\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.
Date: 2017-10-18 20:13:35.417
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET
\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole
\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.
Date: 2017-10-18 20:13:32.129
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET
\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole
\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.
Date: 2017-10-03 06:55:31.303
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET
\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC
\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft
signing level requirements.
Date: 2017-10-03 06:55:31.199
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET
\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB
\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
Processor: AMD Phenom II X4 955 Processor
Percentage of memory in use: 43%
Total physical RAM: 8189.24 MB
Available physical RAM: 4626.84 MB
Total Virtual: 20472.24 MB
Available Virtual: 16603.79 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:930.97 GB) (Free:189.77 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: AEAA2C87)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
==================== End of Addition.txt ============================
~~~
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 11-11-2017
Ran by JohnDoe (administrator) on ANDROID-MC3IPDQ (11-11-2017 11:46:49)
Running from C:\Users\JohnDoe\Desktop
Loaded Profiles: JohnDoe (Available Profiles: JohnDoe & Visitor & DefaultAppPool)
Platform: Windows 10 Pro 10240.17354 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Motorola Mobility LLC) C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Motorola) C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
() C:\Program Files\pia_manager\pia_manager.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Motorola Mobility LLC) C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(f.lux Software LLC) C:\Users\JohnDoe\AppData\Local\FluxSoftware\Flux\flux.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(hxxp://www.ruby-lang.org/) C:\Users\JohnDoe\AppData\Local\Temp\ocr3701.tmp\bin\rubyw.exe
() C:\Program Files\pia_manager\pia_manager.exe
(hxxp://www.ruby-lang.org/) C:\Users\JohnDoe\AppData\Local\Temp\ocrCF88.tmp\bin\rubyw.exe
(The NWJS Community) C:\Program Files\pia_manager\pia_tray_bin\nw-win\pia_nw.exe
(The NWJS Community) C:\Program Files\pia_manager\pia_tray_bin\nw-win\pia_nw.exe
(The NWJS Community) C:\Program Files\pia_manager\pia_tray_bin\nw-win\pia_nw.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe
(Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
(Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\Plex DLNA Server.exe
(Plex) C:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe
(Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe
(Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
(Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
(Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
(Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
(Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
(Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
(Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
(Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
(Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
(Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file
will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-12-12] (Realtek
Semiconductor)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [8290584 2013-08-01]
(Logitech Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA
\UpdaterStartupUtility.exe [557768 2014-09-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe
[767176 2015-11-04] (Advanced Micro Devices, Inc.)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-2118853541-1488753588-3094647493-1000\...\Run: [f.lux] => C:\Users\JohnDoe\AppData\Local
\FluxSoftware\Flux\flux.exe [1678840 2017-10-10] (f.lux Software LLC)
HKU\S-1-5-21-2118853541-1488753588-3094647493-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program
Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-2118853541-1488753588-3094647493-1000\...\Run: [Plex Media Server] => C:\Program Files (x86)\Plex
\Plex Media Server\Plex Media Server.exe [15842280 2017-11-06] (Plex, Inc.)
HKU\S-1-5-21-2118853541-1488753588-3094647493-1000\...\RunOnce: [FlashPlayerUpdate] => C:\WINDOWS
\SysWOW64\Macromed\Flash\FlashUtil32_26_0_0_131_pepper.exe [1280000 2017-07-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-2118853541-1488753588-3094647493-1000\...\Policies\Explorer: []
HKU\S-1-5-21-2118853541-1488753588-3094647493-1000\...\MountPoints2: D - "D:\setup\autorun.exe"
HKU\S-1-5-18\...\Run: [Plex Media Server] => C:\Program Files (x86)\Plex\Plex Media Server\Plex Media
Server.exe [15842280 2017-11-06] (Plex, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 0.0.0.0
Tcpip\..\Interfaces\{09c7a648-8223-45eb-bd0d-35af2ede0422}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{4f1c6091-4e81-436c-b5c8-a0d8e1805d09}: [DhcpNameServer] 192.168.0.1 0.0.0.0
Tcpip\..\Interfaces\{591e90c2-32c8-420e-94d4-28b956bcd8d5}: [DhcpNameServer] 209.222.18.222 209.222.18.218
Tcpip\..\Interfaces\{c37a50aa-f7ab-4830-b36f-6aef28eb3c0a}: [DhcpNameServer] 192.168.0.1 0.0.0.0
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-2118853541-1488753588-3094647493-1000\Software\Microsoft\Internet Explorer\Main,Start Page
Redirect Cache = hxxp://ca.msn.com/?ocid=iehp
SearchScopes: HKLM -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft
Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2017-09-05] (Microsoft Corporation)
BHO: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass
\LPToolbar_x64.dll [2016-01-15] (LastPass)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft
Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2017-09-05] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files
\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2017-09-05] (Microsoft
Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files
\Microsoft Office 15\root\Office15\OCHelper.dll [2017-08-15] (Microsoft Corporation)
BHO-x32: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass
\LPToolbar.dll [2016-01-15] (LastPass)
BHO-x32: No Name -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> No File
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files
\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2017-09-05] (Microsoft Corporation)
Toolbar: HKLM - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass
\LPToolbar_x64.dll [2016-01-15] (LastPass)
Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files
(x86)\LastPass\LPToolbar.dll [2016-01-15] (LastPass)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root
\Office15\MSOSB.DLL [2017-07-18] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\JohnDoe\AppData\Roaming\Mozilla\Firefox\Profiles\88xq2klu.default [2017-11-09]
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\88xq2klu.default -> Google
FF Homepage: Mozilla\Firefox\Profiles\88xq2klu.default ->
hxxps://www.malwarebytes.org/restorebrowser/_ir_16_02¶m1=1¶m2=f%3D1%26b%3DFirefox%26cc%3Dca%26pa
%3DWincy%26cd
%3D2XzuyEtN2Y1L1QzuyDtD0EyDyEzy0B0C0C0F0D0EtAyCyBtCtN0D0Tzu0StCyEyByEtN1L2XzutAtFtCyBtFtBtFtDtN1L1Czu1BtBtN1L1G
1B1V1N2Y1L1Qzu2SyBtByCzyyDyD0CyBtGtD0AzyzztG0AtAzztDtGyB0C0AyCtGtCyEyDtByE0CyDtCtAtCzy0E2QtN1M1F1B2Z1V1N2Y1L1Qz
u2SzytCyDyE0AzyzyyBtGyE0DyEzztGyE0EtDtBtG0BzytBzztGyCtDyDyB0EyCzytCyE0DyCyE2QtN0A0LzutB%26cr%3D595026009%26a
%3Dwncy_ir_16_02%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate
FF NetworkProxy: Mozilla\Firefox\Profiles\88xq2klu.default -> backup.ftp", "118.97.30.165"
FF NetworkProxy: Mozilla\Firefox\Profiles\88xq2klu.default -> backup.ftp_port", 80
FF NetworkProxy: Mozilla\Firefox\Profiles\88xq2klu.default -> backup.socks", "118.97.30.165"
FF NetworkProxy: Mozilla\Firefox\Profiles\88xq2klu.default -> backup.socks_port", 80
FF NetworkProxy: Mozilla\Firefox\Profiles\88xq2klu.default -> backup.ssl", "118.97.30.165"
FF NetworkProxy: Mozilla\Firefox\Profiles\88xq2klu.default -> backup.ssl_port", 80
FF NetworkProxy: Mozilla\Firefox\Profiles\88xq2klu.default -> ftp", "140.0.237.238 "
FF NetworkProxy: Mozilla\Firefox\Profiles\88xq2klu.default -> ftp_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\88xq2klu.default -> http", "140.0.237.238 "
FF NetworkProxy: Mozilla\Firefox\Profiles\88xq2klu.default -> http_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\88xq2klu.default -> share_proxy_settings", true
FF NetworkProxy: Mozilla\Firefox\Profiles\88xq2klu.default -> socks", "140.0.237.238 "
FF NetworkProxy: Mozilla\Firefox\Profiles\88xq2klu.default -> socks_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\88xq2klu.default -> ssl", "140.0.237.238 "
FF NetworkProxy: Mozilla\Firefox\Profiles\88xq2klu.default -> ssl_port", 8080
FF NetworkProxy: Mozilla\Firefox\Profiles\88xq2klu.default -> type", 0
FF Extension: (Mozilla WebVR Plus) - C:\Users\JohnDoe\AppData\Roaming\Mozilla\Firefox\Profiles
\88xq2klu.default\Extensions\@mozillawebvrenabler.xpi [2016-09-12]
FF Extension: (LastPass) - C:\Users\JohnDoe\AppData\Roaming\Mozilla\Firefox\Profiles\88xq2klu.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-10] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll
[2014-05-22] (DivX, LLC.)
FF Plugin: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll [2016-01-15] (LastPass)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll
[2016-08-31] ( Microsoft Corporation)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014
-03-25] (Wacom)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities
\npAdobeAAMDetect64.dll [2014-09-19] (Adobe Systems)
FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25]
(Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-10]
()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1203133.dll [2013-06-
26] (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
[2014-02-18] ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper
\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
[2015-02-13] (Google, Inc.)
FF Plugin-x32: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll [2016-01-15]
(LastPass)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS
\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-12] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight
\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root
\Office15\NPSPWRAP.DLL [2015-09-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery
\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update
\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update
\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files (x86)\TabletPlugins
\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05]
(Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities
\npAdobeAAMDetect32.dll [2014-09-19] (Adobe Systems)
FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll
[2014-03-25] (Wacom)
FF Plugin HKU\S-1-5-21-2118853541-1488753588-3094647493-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users
\JohnDoe\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-15] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2118853541-1488753588-3094647493-1000: SkypePlugin -> C:\Users\JohnDoe\AppData\Local
\SkypePlugin\7.32.6.278\npGatewayNpapi.dll [2017-04-18] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-2118853541-1488753588-3094647493-1000: SkypePlugin64 -> C:\Users\JohnDoe\AppData\Local
\SkypePlugin\7.32.6.278\npGatewayNpapi-x64.dll [2017-04-18] (Skype Technologies S.A.)
Chrome:
=======
CHR DefaultProfile: Profile 1
CHR DefaultSearchKeyword: Profile 1 -> lp
CHR Profile: C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Default [2017-11-09]
CHR Extension: (Duolingo on the Web) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Default
\Extensions\aiahmijlpehemcpleichkcokhegllfjl [2015-06-26]
CHR Extension: (Adblock for Youtube™) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Default
\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2015-10-16]
CHR Extension: (Google Calendar) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Default\Extensions
\ejjicmeblgpmajnghnpcppodonldlgfn [2017-05-20]
CHR Extension: (Facebook™ Chat Privacy) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Default
\Extensions\gfpgaanechfneiboempkfjghninbibjn [2017-01-02]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data
\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2017-05-20]
CHR Extension: (Facebook - Delete All Messages) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data
\Default\Extensions\hgiidlnejdlfoacoeleopkljhbckmlko [2017-01-02]
CHR Extension: (Google Maps) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Default\Extensions
\lneaknkopdijkpnocmklfnjbeapigfbh [2016-01-15]
CHR Extension: (Click&Clean App) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Default\Extensions
\pdabfienifkbhoihedcgeogidfmibmhp [2017-05-20]
CHR Extension: (Chrome Media Router) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Default
\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-20]
CHR Extension: (Privacy Badger) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Default\Extensions
\pkehgijcmpdhfbdbbnkijodmdjhbjlgp [2017-05-20]
CHR Profile: C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-11-09]
CHR Profile: C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-11-11]
CHR Extension: (Google Drive) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions
\apdfllckaahabafndbhieahigkjlhalf [2016-01-15]
CHR Extension: (YouTube) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions
\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-15]
CHR Extension: (Chrome IG Story) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions
\bojgejgifofondahckoaahkilneffhmf [2017-10-09]
CHR Extension: (Adblock Plus) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions
\cfhdojbkjhnklbpkdaibdccddilifddb [2017-09-27]
CHR Extension: (Google Search) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions
\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-15]
CHR Extension: (Video Downloader professional) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Profile
1\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2017-08-03]
CHR Extension: (WebM Options (Premium)) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Profile
1\Extensions\fhgjcfedjhkachipnckecjckmdllpgjh [2016-02-08]
CHR Extension: (WebM Inline Player) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Profile
1\Extensions\fnaeemmlglafkapofhhgfhnhddaboeig [2016-01-27]
CHR Extension: (Web Page to PDF Converter) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Profile
1\Extensions\gdlncamcmchghcemgocofijkhkklijbj [2016-08-11]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data
\Profile 1\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2017-10-21]
CHR Extension: (Facebook - Delete All Messages) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data
\Profile 1\Extensions\hgiidlnejdlfoacoeleopkljhbckmlko [2017-10-29]
CHR Extension: (Kill News Feed) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions
\hjobfcedfgohjkaieocljfcppjbkglfd [2016-02-16]
CHR Extension: (Google Keep - notes and lists) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Profile
1\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki [2017-11-06]
CHR Extension: (Social Fixer for Facebook) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Profile
1\Extensions\ifmhoabcaeehkljcfclfiieohkohdgbb [2017-10-03]
CHR Extension: (InstaG Downloader) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Profile
1\Extensions\jnkdcmgmnegofdddphijckfagibepdlb [2017-10-28]
CHR Extension: (Signup Block) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions
\joiaigcocfbhjbgeajdmmgchlbepelco [2016-11-11]
CHR Extension: (Reddit Enhancement Suite) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Profile
1\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb [2017-09-22]
CHR Extension: (Ghostery) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions
\mlomiejdfkolichcflejclcbmpeaniij [2017-10-31]
CHR Extension: (Chrome Web Store Payments) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Profile
1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-21]
CHR Extension: (Unseen) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions
\oclokcfejikeggpnhgakanfbdnlafaon [2017-08-08]
CHR Extension: (Gmail) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions
\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-15]
CHR Extension: (Chrome Media Router) - C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\Profile
1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-11-07]
CHR Profile: C:\Users\JohnDoe\AppData\Local\Google\Chrome\User Data\System Profile [2017-11-09]
CHR HKLM\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] -
hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] -
hxxp://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved
unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-08-03] (Advanced Micro
Devices, Inc.) [File not signed]
S4 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1863688 2016-05-12] ()
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [5632 2017-01-08] (Microsoft
Corporation)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3058416 2017-09-05]
(Microsoft Corporation)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [528424 2017-10-23] (EasyAntiCheat
Ltd)
R2 Motorola Device Manager; C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager
\MotoHelperService.exe [137528 2014-04-08] (Motorola Mobility LLC)
R2 PlexUpdateService; C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe [2100200 2017-11-
06] (Plex, Inc.)
R2 PST Service; C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [65657 2011-09-02]
(Motorola) [File not signed]
S4 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19]
(Adobe Systems Incorporated) [File not signed]
S4 VeeamEndpointBackupSvc; C:\Program Files\Veeam\Endpoint Backup\Veeam.EndPoint.Service.exe [101888 2016-03-
10] (Veeam Software AG) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2016-10-25] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2017-03-28] (Microsoft Corporation)
S4 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [656664 2014-08-19] (Wacom Technology,
Corp.)
S4 LMIGuardianSvc; "C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe" [X]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved
unless listed separately.)
R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro
Devices)
S3 CMUSBDAC; C:\WINDOWS\system32\DRIVERS\CMUSBDAC.sys [3778592 2017-01-08] (C-MEDIA)
S3 DFX12; C:\WINDOWS\System32\drivers\dfx12x64.sys [28344 2015-10-12] (Windows ® Win 7 DDK provider)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2017-05-27] (Samsung Electronics Co., Ltd.)
S3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [151968 2017-07-30] (Windows ® Win 7 DDK provider)
S3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [27040 2017-07-30] (Windows ® Win 7 DDK provider)
R3 DRTWlanE; C:\WINDOWS\System32\drivers\Drtwlane.sys [4619520 2015-07-21] (Realtek Semiconductor Corporation )
R1 epp; C:\EEK\bin64\epp.sys [124552 2016-11-23] (Emsisoft Ltd)
S3 Hamachi; C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [45680 2017-02-02] (LogMeIn Inc.)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [43664 2015-04-21] ()
S3 LGSHidFilt; C:\WINDOWS\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
S3 LGSUsbFilt; C:\WINDOWS\system32\DRIVERS\LGSUsbFilt.Sys [41752 2013-05-30] (Logitech Inc.)
S3 LifeCamTrueColor; C:\WINDOWS\system32\DRIVERS\LifeCamTrueColor.sys [37928 2017-08-04] (Microsoft
Corporation)
S3 ManyCam; C:\WINDOWS\system32\DRIVERS\mcvidrv.sys [49264 2014-07-28] (Visicom Media Inc.)
S3 mcaudrv_simple; C:\WINDOWS\System32\drivers\mcaudrv_x64.sys [35440 2014-05-13] (Visicom Media Inc.)
R2 NPF; C:\Windows\system32\drivers\npf.sys [35344 2013-12-20] (CACE Technologies, Inc.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek )
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2017-05-27] (Samsung Electronics Co., Ltd.)
R3 SteamStreamingMicrophone; C:\WINDOWS\system32\drivers\SteamStreamingMicrophone.sys [40736 2017-07-28] ()
R3 SteamStreamingSpeakers; C:\WINDOWS\system32\drivers\SteamStreamingSpeakers.sys [40736 2017-07-21] ()
R0 tib; C:\WINDOWS\System32\DRIVERS\tib.sys [1120032 2014-12-04] (Acronis International GmbH)
S0 tib_mounter; C:\WINDOWS\System32\DRIVERS\tib_mounter.sys [183224 2014-12-04] (Acronis)
S3 UdeCx; C:\WINDOWS\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 VBAudioVMVAIOMME; C:\WINDOWS\system32\DRIVERS\vbaudio_vmvaio64_win7.sys [41192 2017-01-02] (Windows ® Win
7 DDK provider)
R2 VeeamFSR; C:\Program Files\Veeam\Endpoint Backup\VeeamFSR.sys [114120 2016-03-10] (Veeam Software AG)
R0 vidsflt; C:\WINDOWS\System32\DRIVERS\vidsflt.sys [117024 2014-12-04] (Acronis International GmbH)
S3 VirtualDK; C:\Program Files\Veeam\Endpoint Backup\vdk.sys [36808 2016-03-10] (Ken Kato)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 XSplit_Dummy; C:\WINDOWS\System32\drivers\xspltspk.sys [26200 2015-05-25] (SplitmediaLabs Limited)
U3 idsvc; no ImagePath
S3 VBAudioVACMME; \SystemRoot\system32\DRIVERS\vbaudio_cable64_win7.sys [X]
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
U3 wpcsvc; no ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved
unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-11-11 11:48 - 2017-11-11 11:48 - 002724512 _____ (Sysinternals - www.sysinternals.com) C:\Users\JohnDoe
\Downloads\procexp.exe
2017-11-11 11:46 - 2017-11-11 11:46 - 000000000 ____D C:\Users\JohnDoe\Desktop\FRST-OlderVersion
2017-11-11 11:42 - 2017-11-11 11:45 - 000019220 _____ C:\VEW.txt
2017-11-11 11:41 - 2017-11-11 11:41 - 000063050 _____ C:\Users\Public\Documents\SIGVERIF.TXT
2017-11-11 11:41 - 2017-11-11 11:41 - 000061440 _____ ( ) C:\Users\JohnDoe\Downloads\VEW.exe
2017-11-11 11:38 - 2017-11-11 11:39 - 000060564 _____ C:\junk.txt
2017-11-11 11:31 - 2017-11-11 11:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plex
Media Server
2017-11-11 11:15 - 2017-11-11 11:15 - 000016148 _____ C:\WINDOWS\system32\ANDROID-
MC3IPDQ_JohnDoe_HistoryPrediction.bin
2017-11-11 09:18 - 2017-11-11 09:19 - 000001194 _____ C:\Users\JohnDoe\Desktop\malware.txt
2017-11-11 08:28 - 2017-11-11 08:28 - 000000000 ____D C:\Users\JohnDoe\AppData\Local\Deployment
2017-11-11 08:27 - 2017-11-11 08:27 - 000000000 ____D C:\Users\JohnDoe\AppData\Roaming\DropIt
2017-11-11 08:17 - 2017-11-11 08:17 - 000000309 _____ C:\Users\JohnDoe\Desktop\Search.txt
2017-11-11 08:16 - 2017-11-11 08:16 - 000000085 _____ C:\WINDOWS\wininit.ini
2017-11-11 08:14 - 2017-11-11 08:15 - 000000153 _____ C:\Users\JohnDoe\BullseyeCoverageError.txt
2017-11-11 08:13 - 2017-11-11 08:16 - 000154724 _____ C:\Users\JohnDoe\Desktop\Addition.txt
2017-11-11 08:13 - 2017-11-11 08:13 - 000000000 _____ C:\WINDOWS\SysWOW64\REN4189.tmp
2017-11-11 08:09 - 2017-11-11 11:47 - 000028671 _____ C:\Users\JohnDoe\Desktop\FRST.txt
2017-11-11 08:08 - 2017-11-11 11:46 - 002392576 _____ (Farbar) C:\Users\JohnDoe\Desktop\FRST64.exe
2017-11-10 23:07 - 2017-11-10 23:08 - 000000000 ____D C:\Users\JohnDoe\Downloads\Pimsleur - All Languages
2017-11-10 23:07 - 2017-11-10 23:07 - 000139599 _____ C:\Users\JohnDoe\Downloads\Pimsleur - All Languages-
[rarbg.to].torrent
2017-11-10 22:55 - 2017-11-10 22:55 - 000043046 _____ C:\Users\JohnDoe\Desktop\TB1X3AAb46I8KJjy0FgXXXXzVXa-
1125-350.jpg_960x960Q75s50.jpg_.webp
2017-11-10 19:45 - 2017-11-10 19:45 - 000000000 ____D C:\Users\JohnDoe\Downloads\gil1557
2017-11-10 17:54 - 2017-11-10 18:55 - 148868562 _____ C:\Users\JohnDoe\Downloads\gil1557.part2.rar
2017-11-10 16:30 - 2017-11-10 17:32 - 099333685 _____ C:\Users\JohnDoe\Downloads\Unconfirmed 905287.crdownload
2017-11-09 23:07 - 2017-11-09 23:09 - 000000000 ____D C:\Users\JohnDoe\Downloads\SDI_R1793
2017-11-09 23:07 - 2017-11-09 23:07 - 004229389 _____ C:\Users\JohnDoe\Downloads\SDI_R1793.zip
2017-11-09 23:07 - 2017-11-09 23:07 - 000173692 _____ C:\Users\JohnDoe\Downloads\SDI_Update.torrent
2017-11-09 23:00 - 2017-11-09 23:00 - 036404789 _____ C:\Users\JohnDoe\Downloads\Unconfirmed 848068.crdownload
2017-11-07 20:42 - 2017-11-07 20:42 - 000000717 _____ C:\Users\JohnDoe\AppData\Local\recently-used.xbel
2017-11-07 17:16 - 2017-11-11 11:33 - 000000000 ____D C:\Users\JohnDoe\Downloads\Stranger Things Season 2 Mp4
1080p
2017-11-06 21:21 - 2017-11-06 23:15 - 209715200 _____ C:\Users\JohnDoe\Downloads\gil1557.part1.rar
2017-11-05 15:21 - 2017-11-05 15:21 - 000000000 ____D C:\ProgramData\Emsisoft
2017-11-05 15:20 - 2017-11-05 15:45 - 000000000 ____D C:\EEK
2017-11-05 15:16 - 2017-11-05 15:19 - 340674888 _____ C:\Users\JohnDoe\Downloads\EmsisoftEmergencyKit.exe
2017-11-05 15:11 - 2017-11-05 15:11 - 000253888 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\30251D42.sys
2017-11-05 15:07 - 2017-11-05 15:07 - 008261584 _____ (Malwarebytes) C:\Users\JohnDoe\Downloads
\adwcleaner_7.0.4.0.exe
2017-11-05 15:03 - 2017-11-05 15:03 - 001790024 _____ (Malwarebytes) C:\Users\JohnDoe\Downloads\JRT.exe
2017-11-05 15:03 - 2017-11-05 15:03 - 000048425 _____ C:\Users\JohnDoe\Downloads\Addition.txt
2017-11-05 15:01 - 2017-11-05 15:03 - 000042389 _____ C:\Users\JohnDoe\Downloads\FRST.txt
2017-11-05 14:06 - 2017-11-07 19:12 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2017-11-03 19:37 - 2017-11-03 19:37 - 002047428 _____ C:\Users\JohnDoe\Downloads\Bail 6592 Jeanne-Mance (1).pdf
2017-11-03 19:20 - 2017-11-03 19:20 - 002118430 _____ C:\Users\JohnDoe\Downloads\Photos (1).zip
2017-11-03 19:20 - 2017-11-03 19:20 - 001435730 _____ C:\Users\JohnDoe\Downloads\Photos.zip
2017-11-03 19:17 - 2017-11-03 19:17 - 004088898 _____ C:\Users\JohnDoe\Downloads\WEB_LRT01_AW-PW-PWAIR.dwg
2017-10-28 22:41 - 2017-10-28 22:42 - 000000000 ____D C:\Users\JohnDoe\AppData\Roaming\Trine1
2017-10-28 20:04 - 2017-10-28 20:04 - 000000000 ____D C:\Users\JohnDoe\Documents\Penumbra
2017-10-28 18:08 - 2017-10-28 18:08 - 000000000 ____D C:\Users\JohnDoe\Downloads\The Tragically Hip - 1992 -
Fully Completely (2CD Deluxe Edition) [mp3]
2017-10-28 17:55 - 2017-10-28 17:58 - 000000000 ____D C:\Users\JohnDoe\Downloads
\Nathan.For.You.S04E04.WEB.x264-TBS[ettv]
2017-10-28 17:53 - 2017-10-28 17:54 - 000000000 ____D C:\Users\JohnDoe\Downloads\NxWorries (Anderson .Paak &
Knxwledge) - Yes Lawd! (2016) [MP3~320Kbps]
2017-10-28 17:52 - 2017-10-28 17:52 - 000003626 _____ C:\Users\JohnDoe\Downloads
\Nathan.For.You.S04E04.WEB.x264-TBS[ettv][https---worldwidetorrents.me].torrent
2017-10-28 09:01 - 2017-10-28 09:01 - 000021994 _____ C:\Users\JohnDoe\Downloads\Thundercat - Drunk (2017)
[Mp3-320kbps][https---worldwidetorrents.me].torrent
2017-10-28 09:01 - 2017-10-28 09:01 - 000000000 ____D C:\Users\JohnDoe\Downloads\Thundercat - Drunk (2017)
[Mp3~320kbps]
2017-10-26 19:26 - 2017-10-26 19:27 - 000000000 ____D C:\Users\JohnDoe\AppData\Roaming\discordsdk
2017-10-26 19:26 - 2017-10-26 19:26 - 000000000 ____D C:\Users\JohnDoe\Documents\SavedGames
2017-10-26 19:26 - 2007-04-04 17:53 - 000081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2017-10-26 18:14 - 2017-10-26 18:14 - 000000000 ____D C:\Users\JohnDoe\AppData\Roaming\ParadoxInteractive
2017-10-25 21:16 - 2017-11-11 11:36 - 000000000 ____D C:\Users\JohnDoe\Streaming Media
2017-10-25 21:13 - 2017-11-11 11:28 - 000000000 ____D C:\Users\JohnDoe\AppData\Local\Plex Media Server
2017-10-25 21:11 - 2017-10-25 21:11 - 000000000 ____D C:\Program Files (x86)\Plex
2017-10-25 21:09 - 2017-10-25 21:10 - 075658992 _____ (Plex, Inc.) C:\Users\JohnDoe\Downloads\Plex-Media-
Server-1.9.4.4325-1bf240a65.exe
2017-10-25 17:31 - 2017-10-25 17:31 - 000000000 ____D C:\Users\JohnDoe\AppData\Roaming\EasyAntiCheat
2017-10-25 17:31 - 2017-10-25 17:31 - 000000000 ____D C:\Program Files (x86)\EasyAntiCheat
2017-10-24 20:11 - 2017-10-24 20:11 - 000000021 _____ C:\Users\JohnDoe\Documents\rbc_account.txt
2017-10-21 07:34 - 2017-10-21 07:59 - 000000000 ____D C:\Users\JohnDoe\Documents\Overwatch
2017-10-21 00:10 - 2017-10-21 00:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs
\Overwatch
2017-10-20 22:30 - 2017-11-10 21:34 - 000000000 ____D C:\Program Files (x86)\Overwatch
2017-10-20 22:25 - 2017-10-20 22:25 - 003251696 _____ (Blizzard Entertainment) C:\Users\JohnDoe\Downloads
\Overwatch-Setup.exe
2017-10-19 17:03 - 2017-10-19 17:03 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2017-10-18 18:46 - 2017-10-18 18:46 - 000028310 _____ C:\Users\JohnDoe\Downloads\The Tragically Hip - 1992 -
Fully Completely (2CD Deluxe Edition) [mp3][https---worldwidetorrents.me].torrent
2017-10-18 18:28 - 2017-10-18 18:28 - 000002205 _____ C:\Users\JohnDoe\AppData\Roaming\Microsoft\Windows\Start
Menu\Programs\f.lux.lnk
2017-10-17 21:53 - 2017-10-17 22:08 - 048414273 _____ C:\Users\JohnDoe\Downloads\Unconfirmed 658321.crdownload
2017-10-14 09:39 - 2017-10-14 09:39 - 000062665 _____ C:\Users\JohnDoe\Downloads\02383462.pdf
2017-10-14 09:39 - 2017-10-14 09:39 - 000062137 _____ C:\Users\JohnDoe\Downloads\CR112377.pdf
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-11-11 11:46 - 2015-04-30 16:59 - 000000000 ____D C:\FRST
2017-11-11 11:40 - 2015-07-10 06:02 - 000000000 ____D C:\WINDOWS\INF
2017-11-11 11:31 - 2014-08-29 14:59 - 000000000 ____D C:\ProgramData\Package Cache
2017-11-11 10:27 - 2016-10-01 09:16 - 000000000 ____D C:\Temp
2017-11-11 10:07 - 2015-07-10 07:21 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-11-11 10:06 - 2017-05-14 10:37 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2017-11-11 10:06 - 2015-07-10 07:20 - 005018672 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-11-11 10:05 - 2015-07-10 04:05 - 001048576 ___SH C:\WINDOWS\system32\config\BBI
2017-11-11 09:22 - 2015-07-10 05:55 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-11-11 08:52 - 2013-09-09 17:33 - 000000000 ____D C:\Users\JohnDoe\AppData\Roaming\vlc
2017-11-11 08:30 - 2015-12-12 18:39 - 000000556 _____ C:\WINDOWS\SysWOW64\nativelog.txt
2017-11-11 08:30 - 2015-04-17 18:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs
\Minecraft
2017-11-11 08:30 - 2015-04-17 18:07 - 000000000 ____D C:\Program Files (x86)\Minecraft
2017-11-11 08:30 - 2014-09-14 18:59 - 000000000 ____D C:\Users\JohnDoe\AppData\Roaming\Microsoft\Windows\Start
Menu\Programs\Autodesk
2017-11-11 08:30 - 2014-09-14 18:59 - 000000000 ____D C:\Program Files\Autodesk
2017-11-11 08:30 - 2014-03-07 16:31 - 000000000 ____D C:\Program Files\VCG
2017-11-11 08:29 - 2016-10-02 22:05 - 000000000 ____D C:\Program Files\GoPro
2017-11-11 08:29 - 2014-09-02 20:05 - 000000000 ____D C:\Program Files\GIMP 2
2017-11-11 08:28 - 2015-04-02 11:30 - 000000000 ____D C:\ProgramData\HappyCloud
2017-11-11 08:28 - 2014-09-15 08:09 - 000000000 ____D C:\Users\JohnDoe\AppData\Roaming\Microsoft\Windows\Start
Menu\Programs\GitHub, Inc
2017-11-11 08:28 - 2014-09-02 19:48 - 000000000 ____D C:\Users\JohnDoe\AppData\Local\Nem's Tools
2017-11-11 08:28 - 2014-09-02 19:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs
\Nem's Tools
2017-11-11 08:27 - 2016-10-28 22:36 - 000000000 ____D C:\Program Files (x86)\DebugMode
2017-11-11 08:27 - 2016-08-21 18:50 - 000000000 ____D C:\Users\JohnDoe\AppData\Local\CrashPlan
2017-11-11 08:27 - 2016-05-12 18:32 - 000000000 ____D C:\Program Files (x86)\DZLauncher
2017-11-11 08:26 - 2016-12-10 09:12 - 000000000 ____D C:\Program Files (x86)\AviSynth
2017-11-11 08:26 - 2013-09-06 19:43 - 000000000 ____D C:\Users\JohnDoe\AppData\Roaming\Canon
2017-11-11 08:26 - 2013-09-06 18:15 - 000000000 ____D C:\Program Files (x86)\Steam
2017-11-11 08:25 - 2016-01-11 16:35 - 000000000 ____D C:\Program Files\Common Files\Autodesk Shared
2017-11-11 08:24 - 2016-01-11 16:29 - 000000000 ____D C:\ProgramData\Autodesk
2017-11-11 08:24 - 2015-07-10 06:04 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2017-11-11 08:23 - 2014-09-14 19:00 - 000000000 ____D C:\Users\JohnDoe\AppData\Roaming\Autodesk
2017-11-11 08:19 - 2014-01-27 23:22 - 000000000 ____D C:\Program Files (x86)\SpeedFan
2017-11-11 08:16 - 2017-05-14 10:37 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2017-11-11 08:15 - 2017-05-15 17:53 - 000000000 ____D C:\Program Files\Malwarebytes
2017-11-11 08:15 - 2013-09-06 18:25 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-11-11 08:14 - 2017-01-08 18:25 - 000000000 ____D C:\Users\JohnDoe
2017-11-11 08:14 - 2013-09-06 18:15 - 000000000 ____D C:\Program Files\Java
2017-11-11 08:14 - 2013-09-06 18:14 - 000000000 ____D C:\Program Files (x86)\Java
2017-11-10 23:08 - 2017-01-08 10:15 - 000000000 ____D C:\Users\JohnDoe\AppData\Roaming\deluge
2017-11-10 21:42 - 2016-06-19 11:42 - 000000000 ____D C:\Users\JohnDoe\AppData\Local\Battle.net
2017-11-10 20:19 - 2016-06-19 11:43 - 000000000 ____D C:\Program Files (x86)\Hearthstone
2017-11-10 20:12 - 2016-06-19 11:41 - 000000000 ____D C:\Program Files (x86)\Battle.net
2017-11-09 22:56 - 2013-09-16 06:40 - 000000000 ____D C:\Users\JohnDoe\AppData\Roaming\Media Player Classic
2017-11-07 17:32 - 2015-05-03 23:11 - 000002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs
\Google Chrome.lnk
2017-11-07 17:19 - 2017-07-27 16:40 - 000003378 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update
Task-S-1-5-21-2118853541-1488753588-3094647493-1000
2017-11-07 17:19 - 2017-01-08 19:22 - 000002412 _____ C:\Users\JohnDoe\AppData\Roaming\Microsoft\Windows\Start
Menu\Programs\OneDrive.lnk
2017-11-07 17:19 - 2014-02-20 21:10 - 000000000 ___RD C:\Users\JohnDoe\OneDrive
2017-11-06 17:57 - 2017-01-08 18:24 - 001005598 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-11-05 15:12 - 2015-07-10 06:04 - 000000000 __RSD C:\WINDOWS\Media
2017-11-05 15:11 - 2015-04-21 12:27 - 000000000 ____D C:\AdwCleaner
2017-11-05 14:28 - 2013-12-19 09:35 - 000000000 ____D C:\Users\JohnDoe\AppData\Local\ElevatedDiagnostics
2017-11-05 14:12 - 2014-08-30 11:31 - 000192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers
\MBAMSwissArmy.sys
2017-11-04 14:09 - 2013-09-06 18:35 - 000000000 ____D C:\Users\JohnDoe\AppData\Roaming\Skype
2017-11-02 17:15 - 2015-07-10 06:04 - 000000000 ___HD C:\Program Files\WindowsApps
2017-11-02 17:15 - 2015-07-10 06:04 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-11-01 21:28 - 2017-03-11 16:41 - 000000000 ____D C:\Users\JohnDoe\AppData\Roaming\foobar2000
2017-10-31 20:04 - 2017-10-02 05:59 - 000077440 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-10-31 20:02 - 2014-03-08 22:05 - 000000000 ____D C:\Users\JohnDoe\AppData\Local\Packages
2017-10-26 23:01 - 2015-11-07 15:52 - 000000000 ____D C:\Program Files\pia_manager
2017-10-26 17:34 - 2015-02-05 20:34 - 000000000 ____D C:\Users\JohnDoe\AppData\Local\Steam
2017-10-26 16:44 - 2017-03-25 21:08 - 000000000 ____D C:\Users\JohnDoe\AppData\Roaming\ZenBound2
2017-10-26 16:26 - 2017-01-08 20:19 - 000000000 ____D C:\Users\JohnDoe\Documents\My Games
2017-10-24 21:11 - 2015-04-26 18:37 - 000109080 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:
\WINDOWS\SysWOW64\OpenAL32.dll
2017-10-24 21:11 - 2013-12-19 17:09 - 000466456 _____ (Creative Labs) C:\WINDOWS\system32\wrap_oal.dll
2017-10-24 21:11 - 2013-12-19 17:09 - 000444952 _____ (Creative Labs) C:\WINDOWS\SysWOW64\wrap_oal.dll
2017-10-24 21:11 - 2013-12-19 17:09 - 000122904 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:
\WINDOWS\system32\OpenAL32.dll
2017-10-21 12:43 - 2014-02-11 22:31 - 000000000 ____D C:\Users\JohnDoe\AppData\Roaming\OBS
2017-10-21 07:58 - 2016-06-19 11:42 - 000000000 ____D C:\Users\JohnDoe\AppData\Local\Blizzard Entertainment
2017-10-17 21:16 - 2015-07-10 06:04 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-10-17 21:14 - 2015-09-08 14:03 - 000000000 ____D C:\Program Files\Microsoft Office 15
2017-10-14 18:22 - 2016-08-28 08:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs
\Google Drive
==================== Files in the root of some directories =======
2016-01-15 15:47 - 2016-01-15 15:47 - 021403160 _____ (LastPass) C:\Program Files (x86)\Common Files
\lpuninstall.exe
2013-11-08 08:52 - 2015-06-26 12:23 - 000000132 _____ () C:\Users\JohnDoe\AppData\Roaming\Adobe AIFF Format CS6
Prefs
2015-01-21 19:44 - 2015-01-21 20:04 - 000000132 _____ () C:\Users\JohnDoe\AppData\Roaming\Adobe BMP Format CS6
Prefs
2014-12-22 13:11 - 2014-12-24 13:38 - 000000132 _____ () C:\Users\JohnDoe\AppData\Roaming\Adobe PNG Format CS5
Prefs
2013-12-08 10:53 - 2017-08-15 17:48 - 000000132 _____ () C:\Users\JohnDoe\AppData\Roaming\Adobe PNG Format CS6
Prefs
2014-09-02 20:48 - 2014-09-02 21:08 - 000000107 _____ () C:\Users\JohnDoe\AppData\Roaming\Camdata.ini
2014-09-02 20:48 - 2014-09-02 21:08 - 000000408 _____ () C:\Users\JohnDoe\AppData\Roaming\CamLayout.ini
2014-09-02 20:48 - 2014-09-02 21:08 - 000000408 _____ () C:\Users\JohnDoe\AppData\Roaming\CamShapes.ini
2014-09-02 20:48 - 2014-09-02 21:08 - 000004544 _____ () C:\Users\JohnDoe\AppData\Roaming\CamStudio.cfg
2015-08-24 23:54 - 2015-08-24 23:54 - 000000000 _____ () C:\Users\JohnDoe\AppData\Roaming\Exception Minidump
(2015-08-25 04.54.01).mdmp
2014-12-24 15:03 - 2014-12-24 16:49 - 297506468 _____ () C:\Users\JohnDoe\AppData\Roaming\Install Quixel
SUITE.exe
2014-09-22 13:47 - 2014-11-22 16:53 - 000000112 _____ () C:\Users\JohnDoe\AppData\Roaming\JP2K CS6 Prefs
2014-10-26 14:51 - 2014-10-26 14:56 - 000000125 _____ () C:\Users\JohnDoe\AppData\Roaming\licecap.ini
2014-01-03 23:00 - 2014-01-03 23:05 - 000001158 _____ () C:\Users\JohnDoe\AppData\Roaming\ShiftN.ini
2014-09-02 20:41 - 2014-09-02 21:04 - 000000096 _____ () C:\Users\JohnDoe\AppData\Roaming\version2.xml
2017-01-02 18:15 - 2017-04-14 15:42 - 000004031 _____ () C:\Users\JohnDoe\AppData\Roaming
\VoiceMeeterDefault.xml
2014-08-30 10:55 - 2014-08-30 10:55 - 000000046 _____ () C:\Users\JohnDoe\AppData\Roaming\WB.CFG
2014-08-29 15:09 - 2014-08-29 15:11 - 174606558 _____ () C:\Users\JohnDoe\AppData\Local\ACCCx2_7_1_418.zip
2013-12-08 11:38 - 2017-07-23 20:38 - 000001456 _____ () C:\Users\JohnDoe\AppData\Local\Adobe Save for Web 13.0
Prefs
2015-11-22 21:41 - 2015-11-22 21:41 - 000968942 _____ () C:\Users\JohnDoe\AppData\Local\Auto-Shutdown_1140.rar
2013-09-22 15:20 - 2015-08-20 19:46 - 000007168 _____ () C:\Users\JohnDoe\AppData\Local\DCBC2A71-70D8-4DAN-
EHR8-E0D61DEA3FDF.ini
2015-05-18 20:05 - 2015-05-18 20:35 - 000027316 _____ () C:\Users\JohnDoe\AppData\Local\HDGraph.log
2017-11-07 20:42 - 2017-11-07 20:42 - 000000717 _____ () C:\Users\JohnDoe\AppData\Local\recently-used.xbel
Some files in TEMP:
====================
2017-11-11 08:24 - 2015-01-26 07:34 - 000015752 _____ (Autodesk, Inc.) C:\Users\JohnDoe\AppData\Local\Temp
\AcDeltree.exe
2017-11-11 08:14 - 2017-11-11 08:14 - 000008720 _____ () C:\Users\JohnDoe\AppData\Local\Temp\BullseyeCoverage-
2-x86.dll
2017-11-11 08:15 - 2017-11-11 08:15 - 000012080 _____ () C:\Users\JohnDoe\AppData\Local\Temp\BullseyeCoverage-
x64-3.dll
2017-11-11 08:24 - 2017-11-11 08:24 - 001962752 _____ (Flexera Software LLC) C:\Users\JohnDoe\AppData\Local
\Temp\FNP_ACT_InstallerCA.dll
2017-11-11 11:48 - 2017-11-11 11:48 - 001458856 _____ (Sysinternals - www.sysinternals.com) C:\Users\JohnDoe
\AppData\Local\Temp\procexp64.exe
2017-11-11 08:19 - 2017-11-11 08:19 - 000192512 _____ () C:\Users\JohnDoe\AppData\Local\Temp\sfamcc00001.dll
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-11-11 10:18
==================== End of FRST.txt ============================
~~~
~~~
Process CPU Private Bytes Working Set PID Description Company Name Verified Signer
System Idle Process 45.03 0 K 4 K 0
chrome.exe 24.27 62,808 K 66,060 K 6648 Google Chrome Google Inc. (Verified)
Google Inc
chrome.exe 15.65 213,412 K 230,524 K 3852 Google Chrome Google Inc. (Verified)
Google Inc
procexp64.exe 6.21 49,788 K 66,636 K 7948 Sysinternals Process Explorer Sysinternals -
www.sysinternals.com (Verified) Microsoft Corporation
FRST64.exe 2.86 27,160 K 46,280 K 6864 Farbar Recovery Scan Tool Farbar (No
signature was present in the subject) Farbar
Interrupts 1.02 0 K 0 K n/a Hardware Interrupts and DPCs
System 0.90 308 K 17,796 K 4
dwm.exe 0.85 35,152 K 30,288 K 920 Desktop Window Manager Microsoft Corporation
(Verified) Microsoft Windows
csrss.exe 0.60 5,848 K 5,912 K 800 Client Server Runtime Process Microsoft Corporation
(Verified) Microsoft Windows Publisher
rubyw.exe 0.51 56,600 K 14,052 K 4120 Ruby interpreter (GUI) 1.9.3p448 [i386-mingw32]
svchost.exe 0.36 15,180 K 25,996 K 1156 Host Process for Windows Services
Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.27 107,132 K 124,696 K 1040 Host Process for Windows Services
Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.26 3,696 K 8,840 K 8 Host Process for Windows Services Microsoft Corporation
(Verified) Microsoft Windows Publisher
explorer.exe 0.21 72,364 K 127,228 K 3596 Windows Explorer Microsoft Corporation
(Verified) Microsoft Windows
Plex DLNA Server.exe 0.16 11,992 K 14,804 K 4964 Plex Media Server DLNA Service Plex,
Inc. (Verified) Plex
dllhost.exe 0.16 4,284 K 9,640 K 3160 COM Surrogate Microsoft Corporation (Verified) Microsoft
Windows
chrome.exe 0.15 186,532 K 268,628 K 4396 Google Chrome Google Inc. (Verified)
Google Inc
Plex Media Server.exe 0.10 44,412 K 57,640 K 4272 Plex Media Server Plex, Inc.
(Verified) Plex
pia_nw.exe 0.07 43,024 K 28,372 K 892 nwjs The NWJS Community (No signature
was present in the subject) The NWJS Community
chrome.exe 0.05 165,432 K 176,448 K 5900 Google Chrome Google Inc. (Verified)
Google Inc
PlexScriptHost.exe 0.04 29,860 K 36,448 K 4092 Python Python Software Foundation
(Verified) Plex
services.exe 0.04 2,996 K 7,828 K 924 Services and Controller app Microsoft Corporation
(Verified) Microsoft Windows Publisher
chrome.exe 0.03 129,700 K 136,228 K 5000 Google Chrome Google Inc. (Verified)
Google Inc
ipoint.exe 0.03 4,348 K 2,676 K 3296 IPoint.exe Microsoft Corporation (Verified) Microsoft
Corporation
itype.exe 0.02 7,172 K 2,236 K 1964 IType.exe Microsoft Corporation (Verified) Microsoft
Corporation
flux.exe 0.01 8,780 K 22,140 K 4244 f.lux f.lux Software LLC (Verified) F.lux
Software LLC
PlexScriptHost.exe 0.01 26,724 K 32,324 K 3180 Python Python Software Foundation
(Verified) Plex
PlexScriptHost.exe 0.01 21,992 K 27,612 K 4384 Python Python Software Foundation
(Verified) Plex
chrome.exe 0.01 138,560 K 117,908 K 4836 Google Chrome Google Inc. (Verified)
Google Inc
PlexScriptHost.exe 0.01 23,476 K 28,984 K 6148 Python Python Software Foundation
(Verified) Plex
pia_nw.exe 0.01 18,964 K 7,352 K 4504 nwjs The NWJS Community (No signature was
present in the subject) The NWJS Community
PlexScriptHost.exe 0.01 21,064 K 26,660 K 5644 Python Python Software Foundation
(Verified) Plex
MOM.exe 0.01 24,076 K 4,944 K 4528 Catalyst Control Center: Monitoring program Advanced Micro
Devices Inc. (Verified) Advanced Micro Devices
PlexScriptHost.exe 0.01 23,248 K 28,832 K 5196 Python Python Software Foundation
(Verified) Plex
chrome.exe 0.01 52,964 K 60,072 K 5008 Google Chrome Google Inc. (Verified)
Google Inc
MotoHelperAgent.exe 0.01 2,600 K 11,296 K 1884 MotoHelperAgent Motorola Mobility LLC
(Verified) Motorola Mobility Inc.
PlexScriptHost.exe 0.01 27,988 K 35,052 K 6004 Python Python Software Foundation
(Verified) Plex
PlexScriptHost.exe 0.01 21,848 K 27,440 K 5864 Python Python Software Foundation
(Verified) Plex
PlexScriptHost.exe < 0.01 25,404 K 30,968 K 3440 Python Python Software Foundation
(Verified) Plex
PlexScriptHost.exe < 0.01 26,080 K 31,616 K 6940 Python Python Software Foundation
(Verified) Plex
PlexScriptHost.exe < 0.01 20,936 K 26,732 K 5908 Python Python Software Foundation
(Verified) Plex
svchost.exe < 0.01 17,456 K 41,296 K 1060 Host Process for Windows Services
Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe < 0.01 7,600 K 24,976 K 1388 Host Process for Windows Services Microsoft
Corporation (Verified) Microsoft Windows Publisher
svchost.exe < 0.01 2,268 K 8,708 K 1380 Host Process for Windows Services Microsoft Corporation
(Verified) Microsoft Windows Publisher
rubyw.exe < 0.01 8,716 K 260 K 5092 Ruby interpreter (GUI) 1.9.3p448 [i386-mingw32]
svchost.exe < 0.01 5,716 K 18,272 K 348 Host Process for Windows Services Microsoft
Corporation (Verified) Microsoft Windows Publisher
officeclicktorun.exe < 0.01 30,892 K 46,456 K 2348 Microsoft Office Click-to-Run
Microsoft Corporation (Verified) Microsoft Corporation
SearchIndexer.exe < 0.01 44,048 K 45,576 K 3016 Microsoft Windows Search Indexer
Microsoft Corporation (Verified) Microsoft Windows
Plex Tuner Service.exe < 0.01 6,380 K 12,444 K 3632 Plex Tuner Service Plex (Verified) Plex
chrome.exe < 0.01 51,780 K 56,212 K 5024 Google Chrome Google Inc. (Verified)
Google Inc
WmiPrvSE.exe 2,048 K 8,348 K 4296 WMI Provider Host Microsoft Corporation (Verified)
Microsoft Windows
winlogon.exe 1,640 K 8,844 K 860 Windows Logon Application Microsoft Corporation
(Verified) Microsoft Windows
wininit.exe 892 K 4,784 K 776 Windows Start-Up Application Microsoft Corporation
(Verified) Microsoft Windows Publisher
taskhostw.exe 5,076 K 15,664 K 3680 Host Process for Windows Tasks Microsoft Corporation
(Verified) Microsoft Windows
svchost.exe 16,248 K 26,728 K 1704 Host Process for Windows Services
Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,972 K 9,276 K 2176 Host Process for Windows Services Microsoft Corporation
(Verified) Microsoft Windows Publisher
svchost.exe 7,484 K 28,056 K 608 Host Process for Windows Services Microsoft
Corporation (Verified) Microsoft Windows Publisher
svchost.exe 16,112 K 29,452 K 1860 Host Process for Windows Services
Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,356 K 9,652 K 2416 Host Process for Windows Services Microsoft Corporation
(Verified) Microsoft Windows Publisher
svchost.exe 1,820 K 8,092 K 2880 Host Process for Windows Services Microsoft Corporation
(Verified) Microsoft Windows Publisher
svchost.exe 3,988 K 15,832 K 2920 Host Process for Windows Services Microsoft
Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,276 K 6,120 K 3220 Host Process for Windows Services Microsoft Corporation
(Verified) Microsoft Windows Publisher
svchost.exe 1,104 K 5,320 K 3152 Host Process for Windows Services Microsoft Corporation
(Verified) Microsoft Windows Publisher
sqlwriter.exe 1,444 K 7,412 K 2740 SQL Server VSS Writer - 64 Bit Microsoft Corporation
(Verified) Microsoft Corporation
spoolsv.exe 5,500 K 14,984 K 1852 Spooler SubSystem App Microsoft Corporation
(Verified) Microsoft Windows
SMSvcHost.exe 15,460 K 19,600 K 3348 SMSvcHost.exe Microsoft Corporation
(Verified) Microsoft Corporation
SMSvcHost.exe 20,752 K 13,972 K 3340 SMSvcHost.exe Microsoft Corporation
(Verified) Microsoft Corporation
smss.exe 344 K 1,180 K 492 Windows Session Manager Microsoft Corporation (Verified)
Microsoft Windows Publisher
sihost.exe 4,212 K 19,000 K 3144 Shell Infrastructure Host Microsoft Corporation
(Verified) Microsoft Windows
ShellExperienceHost.exe Suspended 19,652 K 52,160 K 3020 Windows Shell Experience Host
Microsoft Corporation (Verified) Microsoft Windows
SearchUI.exe Suspended 50,460 K 95,188 K 6092 Search and Cortana application
Microsoft Corporation (Verified) Microsoft Windows
SearchProtocolHost.exe 2,572 K 9,428 K 7444 Microsoft Windows Search Protocol Host Microsoft
Corporation (Verified) Microsoft Windows
SearchFilterHost.exe 1,880 K 6,992 K 7724 Microsoft Windows Search Filter Host Microsoft
Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 7,052 K 26,984 K 1336 Runtime Broker Microsoft Corporation
(Verified) Microsoft Windows
RAVCpl64.exe 3,876 K 13,160 K 2248 Realtek HD Audio Manager Realtek Semiconductor
(Verified) Realtek Semiconductor Corp
procexp.exe 2,684 K 9,688 K 6848 Sysinternals Process Explorer Sysinternals -
www.sysinternals.com (Verified) Microsoft Corporation
Plex Update Service.exe 1,788 K 7,816 K 6156 Plex Update Service Plex, Inc. (Verified) Plex
pia_nw.exe 1,644 K 376 K 4524 nwjs The NWJS Community (No signature was present in
the subject) The NWJS Community
pia_manager.exe 1,152 K 184 K 308 (No signature was present in the subject)
pia_manager.exe 1,152 K 232 K 4376 (No signature was present in the subject)
notepad.exe 2,220 K 10,600 K 7504 Notepad Microsoft Corporation (Verified) Microsoft
Windows
mqsvc.exe 4,172 K 12,116 K 2272 Message Queuing Service Microsoft Corporation
(Verified) Microsoft Windows
MotoHelperService.exe 2,560 K 9,864 K 2292 MotoHelper Service Motorola Mobility LLC
(Verified) Motorola Mobility Inc.
lsass.exe 4,692 K 13,892 K 936 Local Security Authority Process Microsoft
Corporation (Verified) Microsoft Windows Publisher
GoogleCrashHandler64.exe 1,456 K 260 K 3292 Google Crash Handler Google Inc.
(Verified) Google Inc
GoogleCrashHandler.exe 1,496 K 268 K 3416 Google Crash Handler Google Inc. (Verified)
Google Inc
Fuel.Service.exe 4,824 K 19,728 K 2240 AMD Fuel Service Advanced Micro Devices,
Inc. (No signature was present in the subject) Advanced Micro Devices, Inc.
ForwardDaemon.exe 1,256 K 5,272 K 2464 ForwardDemon Motorola (No signature was
present in the subject) Motorola
dasHost.exe 1,984 K 10,288 K 2224 Device Association Framework Provider Host
Microsoft Corporation (Verified) Microsoft Windows
csrss.exe 1,248 K 4,488 K 672 Client Server Runtime Process Microsoft Corporation
(Verified) Microsoft Windows Publisher
conhost.exe 1,584 K 6,980 K 4356 Console Window Host Microsoft Corporation (Verified)
Microsoft Windows
conhost.exe 1,344 K 5,376 K 3368 Console Window Host Microsoft Corporation (Verified)
Microsoft Windows
conhost.exe 1,572 K 7,016 K 3968 Console Window Host Microsoft Corporation (Verified)
Microsoft Windows
conhost.exe 1,576 K 6,920 K 4944 Console Window Host Microsoft Corporation (Verified)
Microsoft Windows
conhost.exe 1,568 K 6,940 K 6336 Console Window Host Microsoft Corporation (Verified)
Microsoft Windows
conhost.exe 1,572 K 6,912 K 3580 Console Window Host Microsoft Corporation (Verified)
Microsoft Windows
conhost.exe 1,568 K 6,940 K 5492 Console Window Host Microsoft Corporation (Verified)
Microsoft Windows
conhost.exe 1,568 K 6,964 K 3488 Console Window Host Microsoft Corporation (Verified)
Microsoft Windows
conhost.exe 1,576 K 6,924 K 6108 Console Window Host Microsoft Corporation (Verified)
Microsoft Windows
conhost.exe 1,576 K 6,956 K 5800 Console Window Host Microsoft Corporation (Verified)
Microsoft Windows
conhost.exe 1,564 K 6,948 K 3772 Console Window Host Microsoft Corporation (Verified)
Microsoft Windows
conhost.exe 1,580 K 7,004 K 5580 Console Window Host Microsoft Corporation (Verified)
Microsoft Windows
chrome.exe 75,592 K 84,028 K 5016 Google Chrome Google Inc. (Verified)
Google Inc
chrome.exe 29,552 K 35,028 K 5048 Google Chrome Google Inc. (Verified)
Google Inc
chrome.exe 29,420 K 36,156 K 5032 Google Chrome Google Inc. (Verified)
Google Inc
chrome.exe 42,044 K 46,048 K 5040 Google Chrome Google Inc. (Verified)
Google Inc
chrome.exe 1,728 K 6,956 K 4404 Google Chrome Google Inc. (Verified) Google Inc
chrome.exe 1,640 K 7,528 K 4676 Google Chrome Google Inc. (Verified) Google Inc
CCC.exe 75,304 K 6,404 K 4620 Catalyst Control Center: Host application Advanced Micro
Devices Inc. (Verified) Advanced Micro Devices
audiodg.exe 8,684 K 13,744 K 6472 Windows Audio Device Graph Isolation Microsoft
Corporation (Verified) Microsoft Windows
atiesrxx.exe 1,028 K 4,912 K 1228 AMD External Events Service Module AMD (Verified)
Microsoft Windows Hardware Compatibility Publisher
atieclxx.exe 2,008 K 8,976 K 1292 AMD External Events Client Module AMD (Verified)
Microsoft Windows Hardware Compatibility Publisher
armsvc.exe 1,164 K 5,612 K 2208 Adobe Acrobat Update Service Adobe Systems Incorporated
(Verified) Adobe Systems
~~~
Image Name PID Services
========================= ======== ============================================
System Idle Process 0 N/A
System 4 N/A
smss.exe 492 N/A
csrss.exe 672 N/A
wininit.exe 776 N/A
csrss.exe 800 N/A
winlogon.exe 860 N/A
services.exe 924 N/A
lsass.exe 936 KeyIso, SamSs, VaultSvc
svchost.exe 348 BrokerInfrastructure, DcomLaunch, LSM,
PlugPlay, Power, SystemEventsBroker
svchost.exe 8 RpcEptMapper, RpcSs
dwm.exe 920 N/A
svchost.exe 1040 AudioEndpointBuilder, CscService,
DeviceAssociationService, DsSvc, hidserv,
NcbService, PcaSvc, SysMain, TrkWks,
WdiSystemHost, WlanSvc, wudfsvc
svchost.exe 1060 Appinfo, BITS, gpsvc, iphlpsvc,
LanmanServer, ProfSvc, Schedule, SENS,
ShellHWDetection, Themes, UserManager,
Winmgmt
svchost.exe 1156 Audiosrv, Dhcp, EventLog, lmhosts, Wcmsvc,
wscsvc
atiesrxx.exe 1228 AMD External Events Utility
atieclxx.exe 1292 N/A
svchost.exe 1380 SSDPSRV, TimeBroker
svchost.exe 1388 EventSystem, FontCache, LicenseManager,
netprofm, nsi, WdiServiceHost,
WinHttpAutoProxySvc
svchost.exe 1704 CryptSvc, Dnscache, LanmanWorkstation,
NlaSvc
spoolsv.exe 1852 Spooler
svchost.exe 1860 BFE, CoreMessagingRegistrar, DPS, MpsSvc
svchost.exe 2176 AppHostSvc
armsvc.exe 2208 AdobeARMservice
dasHost.exe 2224 N/A
Fuel.Service.exe 2240 AMD FUEL Service
mqsvc.exe 2272 MSMQ
MotoHelperService.exe 2292 Motorola Device Manager
officeclicktorun.exe 2348 ClickToRunSvc
svchost.exe 2416 W3SVC, WAS
ForwardDaemon.exe 2464 PST Service
sqlwriter.exe 2740 SQLWriter
svchost.exe 2880 stisvc
svchost.exe 2920 StateRepository, tiledatamodelsvc
svchost.exe 3220 PolicyAgent
SMSvcHost.exe 3340 NetMsmqActivator
SMSvcHost.exe 3348 NetPipeActivator
GoogleCrashHandler.exe 3416 N/A
GoogleCrashHandler64.exe 3292 N/A
SearchIndexer.exe 3016 WSearch
sihost.exe 3144 N/A
pia_manager.exe 308 N/A
itype.exe 1964 N/A
taskhostw.exe 3680 N/A
ipoint.exe 3296 N/A
explorer.exe 3596 N/A
RuntimeBroker.exe 1336 N/A
ShellExperienceHost.exe 3020 N/A
MotoHelperAgent.exe 1884 N/A
RAVCpl64.exe 2248 N/A
flux.exe 4244 N/A
WmiPrvSE.exe 4296 N/A
chrome.exe 4396 N/A
chrome.exe 4404 N/A
MOM.exe 4528 N/A
CCC.exe 4620 N/A
chrome.exe 4676 N/A
chrome.exe 4836 N/A
chrome.exe 5000 N/A
chrome.exe 5008 N/A
chrome.exe 5016 N/A
chrome.exe 5024 N/A
chrome.exe 5032 N/A
chrome.exe 5040 N/A
chrome.exe 5048 N/A
rubyw.exe 5092 N/A
pia_manager.exe 4376 N/A
rubyw.exe 4120 N/A
pia_nw.exe 4504 N/A
pia_nw.exe 4524 N/A
pia_nw.exe 892 N/A
svchost.exe 608 N/A
chrome.exe 6648 N/A
svchost.exe 3152 SDRSVC
chrome.exe 5900 N/A
audiodg.exe 6472 N/A
SearchUI.exe 6092 N/A
Plex Media Server.exe 4272 N/A
PlexScriptHost.exe 4092 N/A
conhost.exe 4356 N/A
Plex DLNA Server.exe 4964 N/A
Plex Tuner Service.exe 3632 N/A
conhost.exe 3368 N/A
Plex Update Service.exe 6156 PlexUpdateService
PlexScriptHost.exe 6940 N/A
conhost.exe 3968 N/A
PlexScriptHost.exe 5908 N/A
PlexScriptHost.exe 5644 N/A
conhost.exe 4944 N/A
conhost.exe 6336 N/A
PlexScriptHost.exe 6148 N/A
PlexScriptHost.exe 5864 N/A
conhost.exe 3580 N/A
conhost.exe 5492 N/A
PlexScriptHost.exe 4384 N/A
PlexScriptHost.exe 5196 N/A
conhost.exe 3488 N/A
conhost.exe 6108 N/A
PlexScriptHost.exe 3440 N/A
PlexScriptHost.exe 3180 N/A
conhost.exe 5800 N/A
conhost.exe 3772 N/A
PlexScriptHost.exe 6004 N/A
conhost.exe 5580 N/A
chrome.exe 3852 N/A
notepad.exe 7504 N/A
SearchProtocolHost.exe 7444 N/A
FRST64.exe 6864 N/A
procexp.exe 6848 N/A
procexp64.exe 7948 N/A
notepad.exe 8052 N/A
taskhostw.exe 7632 N/A
dllhost.exe 1396 N/A
dllhost.exe 5056 N/A
dllhost.exe 1036 N/A
cmd.exe 4772 N/A
conhost.exe 7032 N/A
tasklist.exe 5680 N/A
WmiPrvSE.exe 6568 N/A