Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Popup/adware/spyware from uploadrar.com

Spyware removal

  • Please log in to reply

#1
heyage13

heyage13

    Member

  • Member
  • PipPipPip
  • 121 posts

Good day, 

 

A popup has been appearing at the bottom right hand corner of my screen for the past few days. It displays ads from everything associated to an "infected PC" to political news to erection cream etc..

 

It also displays in small lettering under the ads the site 'uploadrar.com'

 

I have attached a picture for reference.

 

Thank you for the assistance

Attached Thumbnails

  • malware popup.PNG

Edited by heyage13, 27 September 2019 - 05:29 PM.

  • 0

Advertisements


#2
icotonev

icotonev

    Trusted Helper

  • Malware Removal
  • 16 posts

Hello...!   Please:

Follow the instructions in this guide. Post the contents of the FRST logs as a new reply to this topic.


  • 0

#3
heyage13

heyage13

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 121 posts

FRST LOG:

 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28-09-2019
Ran by Office PC (administrator) on OFFICEPC-PC (28-09-2019 10:49:32)
Running from C:\Users\Office PC\Downloads
Loaded Profiles: Office PC (Available Profiles: Office PC & DefaultAppPool)
Platform: Windows 10 Pro Version 1803 17134.1006 (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe
(Azureus Software, Inc. -> Azureus Software, Inc) C:\Program Files (x86)\Vuze\Azureus.exe
(Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\concentr.exe
(Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\redirector.exe
(Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe
(Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\Receiver\Receiver.exe
(Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\SelfServicePlugin\SelfServicePlugin.exe
(Dropbox, Inc -> Windows ® Win 7 DDK provider) C:\Windows\System32\DbxSvc.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.17920.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19072.12011.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1908.7-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1908.7-0\NisSrv.exe
(Mixbyte Inc -> ) C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Plex, Inc -> ) C:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe
(Plex, Inc -> Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe
(Plex, Inc -> Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
(Realtek Semiconductor Corp -> ) C:\Windows\runSW.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor Corp.) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RtWLan.exe
(Realtek Semiconductor Corp -> Realtek) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RtlService.exe
(Realtek Semiconductor Corp -> Realtek) C:\Windows\SwUSB.exe
(Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.52.138.0_x64__kzf8qxf38zg5c\SkypeApp.exe
(Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.52.138.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.52.138.0_x64__kzf8qxf38zg5c\SkypeBridge\SkypeBridge.exe
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-08-06] (Apple Inc.) [File not signed]
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [ConnectionCenter] => C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [395656 2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
HKLM-x32\...\Run: [Redirector] => C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [153992 2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
HKLM-x32\...\Run: [ProductUpdater] => C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe [229216 2018-10-24] (Mixbyte Inc -> )
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-2488212447-1855921873-862638463-1000\...\Run: [Plex Media Server] => C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe [25171944 2019-08-22] (Plex, Inc -> Plex, Inc.)
HKU\S-1-5-21-2488212447-1855921873-862638463-1000\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Office PC\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"
HKU\S-1-5-21-2488212447-1855921873-862638463-1000\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Office PC\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe"
HKU\S-1-5-21-2488212447-1855921873-862638463-1000\...\RunOnce: [Uninstall 19.152.0801.0008\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Office PC\AppData\Local\Microsoft\OneDrive\19.152.0801.0008\amd64"
HKU\S-1-5-21-2488212447-1855921873-862638463-1000\...\RunOnce: [Uninstall 19.152.0801.0008] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Office PC\AppData\Local\Microsoft\OneDrive\19.152.0801.0008"
HKU\S-1-5-18\...\Run: [Plex Media Server] => C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe [25171944 2019-08-22] (Plex, Inc -> Plex, Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\77.0.3865.90\Installer\chrmstp.exe [2019-09-24] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] -> 
IFEO\SppExtComObj.exe: [Debugger] SppExtComObjPatcher.exe
Startup: C:\Users\Office PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitor Ink Alerts - HP OfficeJet 4650 series.lnk [2019-09-26]
ShortcutAndArgument: Monitor Ink Alerts - HP OfficeJet 4650 series.lnk -> C:\WINDOWS\system32\RunDll32.exe => "C:\Program Files\HP\HP OfficeJet 4650 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=TH69U4J16Y0662;CONNECTION=USB;MONITOR=1;
 
==================== Scheduled Tasks (Whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {00B11316-CDED-4CDF-A3AC-A8FFE598F0DF} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27367016 2019-08-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {02277877-7778-4548-9731-15FF12E88B14} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {03DDDBD9-D6F0-41D5-8D4D-86978B87CCD3} - System32\Tasks\BlueStacksHelper => C:\ProgramData\BlueStacks\Client\Helper\BlueStacksHelper.exe [745480 2019-04-16] (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
Task: {08613761-4450-4640-8625-528906050245} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {18CEF45E-C946-4C95-8202-56D0C9CEE2E4} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {18D22941-40A6-43EF-89F4-315DADCBDC53} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {1EC64251-13F0-473F-86F4-2B3FA226BDB2} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [849904 2019-03-18] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {1F41E191-05EC-4169-8439-612041C75F32} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {205A382A-DB42-4CB6-B878-897CB55D7AB9} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {34533C4F-97B5-4A6C-A2A1-4FAF5BFC1ED9} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {35A94DAD-7C48-4B94-A420-82F8E20DA6CA} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [117728 2019-09-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {35E0B648-4EC5-4B17-960E-AEDF87919CED} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [877552 2019-03-18] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {387E41F6-8638-4490-93CA-8CB342F06516} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3729392 2019-03-18] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3B8AC68F-5F50-4A40-BB2E-194499B9D226} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27367016 2019-08-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {3BA5065F-4E3B-4F9C-B598-F52A52C4779A} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {3FB5ED31-DB98-4A8C-BDCB-CBB3C3DE34DB} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION
Task: {41428A31-F62F-49BB-AA88-0026D4F204EF} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {43C9E783-D1A6-4EAF-9D8D-9DF24B772CAA} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {443AF4D1-8E57-4C25-BB54-03D0EE1ABB01} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {44F4B60B-7191-47F9-842F-76915D16BBEC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {47A2BCBF-6B79-46EF-8355-DDD80B424AF0} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4467864 2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47C2-B62A-B7C4CED925CB}
Task: {522DF4A9-DE54-4871-B879-F664C1202F4D} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {5F600903-3463-4D7D-9934-8D2AFEA54B35} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {60977B59-C17A-4465-9A1A-9F354200757F} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [117728 2019-09-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {674C28E2-1833-4E7E-9AEE-4EDC7334380C} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1428640 2019-09-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {676375EB-E8B5-4570-81EF-58AAF9019B48} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1908.7-0\MpCmdRun.exe [467880 2019-09-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6975CA31-3687-4D4B-927C-2A1614C8DD4B} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [877552 2019-03-18] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6B503DF7-8CF7-420C-9550-71E5ED6FE163} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {6F6C0972-315A-433E-878F-DEBA487A1AAA} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6FA79CE4-E7B7-433C-B5C3-31FA1CD21CE0} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {725EEB54-7A0E-4EE4-864E-EE369324894F} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {7E88D757-0A84-4C51-A89A-C1276AD871AC} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {8037FD4D-F5DE-4473-95C4-C4BB6C4C7D43} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1908.7-0\MpCmdRun.exe [467880 2019-09-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {815F9D7D-83BD-4CE8-9EE8-05A60E7F3DEE} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [877552 2019-03-18] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {81F965D4-4FB2-4B1E-8EA4-FA48486AC055} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {889BC518-F0C7-477B-B1C0-24ED4292C1F2} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {8AD7DBB0-9A34-4E72-ADF1-4EA641D1B264} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [782320 2019-03-18] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {8BFA1B39-16C9-4543-B8C2-2ED5AE0D72DA} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {8CF6E8DB-58B7-437A-8D64-6FC280411D60} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {8D0B4B6E-202F-47E7-8318-77A9EADCC834} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [849904 2019-03-18] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {91047EE6-8460-4A53-9487-EA36D8AF3A0D} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {9D6BEC95-1A41-46F9-A21D-B1C6883C7598} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [877552 2019-03-18] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A143C136-762D-4685-A7AB-9D057F072D81} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {A50750D5-4272-4E11-91AB-6EA3EBD62C71} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [648688 2019-03-18] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A88E93B0-B82D-4AF0-9A06-2FB2E13CAA5F} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {AB921443-339D-492B-8529-2C8F87C6BA4B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4467864 2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {B0B460A0-978A-4E7F-AFF2-9CBB624D3B24} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {B63E0357-2763-49C3-8845-285F22E37E96} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {B79D8706-D650-4453-BEF9-1D6A21D46C86} - System32\Tasks\{597065CD-2A36-41B9-BD15-766E49DE38D2} => C:\WINDOWS\system32\pcalua.exe -a C:\DriveKey\HPUSBFW.EXE -d "C:\Users\Office PC\Desktop"
Task: {BA5A9CF6-915A-499D-B782-460A762DCF39} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C6D7D618-32BC-4895-AFA1-4B409BDD55B3} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
Task: {CACCB2C7-067D-45EA-9972-2E4BE38F2EA7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1908.7-0\MpCmdRun.exe [467880 2019-09-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CBCB7ADE-7E11-4645-888B-5A7E2855D23B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1236048 2019-07-24] (Adobe Inc. -> Adobe Systems)
Task: {CEF956CC-5162-494C-9982-8D6A2318D53A} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D18020F2-23BB-4F90-A9AC-1A1E1C11A013} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [591344 2019-03-18] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D43F7585-C03D-42C9-A193-B6BEE2EB03C9} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {D8688AFA-9C0F-4CCD-B003-B4D5B405CE82} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {DAC69070-EB58-49B6-BAF3-D785379A7A3F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1908.7-0\MpCmdRun.exe [467880 2019-09-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DBB60476-7506-425D-8694-1828376E76ED} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {E31E4D9F-3338-42B3-A073-C6C1F89A9DC5} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {E5D3ECB5-DAFF-48B0-87DB-DAB7E763B291} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {E83D77BD-F383-439A-9595-025567CE91C2} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {EBBF393A-4544-451E-AEE3-F893A49B4BE5} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {ED4EA8BC-8B3F-41C6-9202-F8C36246DCCD} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1428640 2019-09-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {EE880963-9C33-4A10-8BB4-1E3E78C2353D} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {F5B91CD0-1872-4348-9A06-EC34BE73DEE5} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F6442BB1-5AF3-4C5B-8AA9-C59BF0874886} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [782320 2019-03-18] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F8169460-34F9-49B3-A85A-D7F42D623D99} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {FDC49624-76A1-4A27-8DF1-8EA7119BB6E8} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\MpCmdRun.exe
Task: {FF816777-1A02-4032-A6CC-62BBD150D561} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{31de69d8-51fb-41f5-9f0d-3863c77e27a6}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{63bd6f76-fa26-4e69-9775-d0030a378e36}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{eb3b84bd-802a-4c54-a0e0-bb726e77bb76}: [DhcpNameServer] 192.168.0.1
 
Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-2488212447-1855921873-862638463-1000 -> DefaultScope {0A35F900-6BE5-4446-BCA1-EC335E7A3341} URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2019-07-01] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2019-04-06] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-10-17] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-10-17] (Oracle America, Inc. -> Oracle Corporation)
DPF: HKLM-x32 {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} hxxp://quickscan.bitdefender.com/qsax/qsax.cab
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-09-01] (Microsoft Corporation -> Microsoft Corporation)
Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
 
FireFox:
========
FF Plugin: @videolan.org/vlc,version=3.0.6 -> E:\VLC\npvlc.dll [No File]
FF Plugin-x32: @Citrix.com/npican -> C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-10-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-10-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-04-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-04-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-03-23] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-03-23] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-23] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-23] (Google Inc -> Google LLC)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-07-31] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: questrade.com/QuestradeIQEdgeDetector -> C:\Program Files (x86)\Questrade IQ Edge\npQuestradeIQEdgeDetector.dll [2017-07-14] (Questrade Inc) [File not signed]
FF Plugin HKU\S-1-5-21-2488212447-1855921873-862638463-1000: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\Users\Office PC\AppData\Roaming\Visan\plugins\npRLSecurePluginLayer.dll [2011-11-15] (RocketLife -> RocketLife, LLP)
FF Plugin ProgramFiles/Appdata: C:\Users\Office PC\AppData\Roaming\mozilla\plugins\npatgpc.dll [2017-05-30]
 
Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://google.ca/
CHR StartupUrls: Default -> "hxxps://ca.search.yahoo.com/?type=994519&fr=yo-yhp-ch","hxxp://google.com/"
CHR Profile: C:\Users\Office PC\AppData\Local\Google\Chrome\User Data\Default [2019-09-28]
CHR Extension: (Google Docs) - C:\Users\Office PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-12-13]
CHR Extension: (Google Drive) - C:\Users\Office PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-17]
CHR Extension: (YouTube) - C:\Users\Office PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Adblock for Youtube™) - C:\Users\Office PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2019-03-26]
CHR Extension: (Google Search) - C:\Users\Office PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Adobe Acrobat) - C:\Users\Office PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2019-08-16]
CHR Extension: (Google Docs Offline) - C:\Users\Office PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-20]
CHR Extension: (Google Photos) - C:\Users\Office PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcglmfcclpfgljeaiahehebeoaiicbko [2017-05-29]
CHR Extension: (Cisco Webex Extension) - C:\Users\Office PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlhmfgmfgeifomenelglieieghnjghma [2019-07-18]
CHR Extension: (Metal Slug Brutal 3) - C:\Users\Office PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\maphilmnngnhkfigpjjoddpjpfbmpmcc [2014-05-23]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Office PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-12-20]
CHR Extension: (Pop Art Studio Online) - C:\Users\Office PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\oompiimecpnflklhlnmdpddcjdmiibkf [2014-05-23]
CHR Extension: (Psykopaint) - C:\Users\Office PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgjchkcfmigkkhedgjedmffdepgmpfil [2015-03-19]
CHR Extension: (Weather Underground) - C:\Users\Office PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjejbgheonogbpfkkjigbmahaljipoej [2015-05-13]
CHR Extension: (Gmail) - C:\Users\Office PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-29]
CHR Extension: (Chrome Media Router) - C:\Users\Office PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-09-26]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
 
==================== Services (Whitelisted) ====================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11568144 2019-08-30] (Microsoft Corporation -> Microsoft Corporation)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [42792 2016-09-19] (Dropbox, Inc -> Windows ® Win 7 DDK provider)
S3 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [73056 2018-10-24] (Mixbyte Inc -> Freemake)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6744288 2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [782320 2019-03-18] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [782320 2019-03-18] (NVIDIA Corporation -> NVIDIA Corporation)
S2 PlexUpdateService; C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe [2139112 2019-08-22] (Plex, Inc -> Plex, Inc.)
R2 RealtekWlanU; C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RtlService.exe [48856 2014-10-09] (Realtek Semiconductor Corp -> Realtek)
S2 RTLDHCPService; C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe [262360 2014-10-09] (Realtek Semiconductor Corp -> Realtek)
R2 RunSwUSB; C:\Windows\runSW.exe [44760 2014-12-15] (Realtek Semiconductor Corp -> )
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5075696 2019-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1908.7-0\NisSrv.exe [3630832 2019-09-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1908.7-0\MsMpEng.exe [103168 2019-09-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvTelemetry\plugins" -r
 
===================== Drivers (Whitelisted) ======================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
S3 ampa; C:\WINDOWS\system32\ampa.sys [38320 2017-02-28] (CHENGDU AOMEI Tech Co., Ltd. -> )
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13368 2009-04-06] (ASUSTeK Computer Inc. -> )
R3 AtcL001; C:\WINDOWS\System32\drivers\l160x64.sys [61440 2009-10-13] (Microsoft Windows Hardware Compatibility Publisher -> Atheros Communications, Inc.)
R3 athr; C:\WINDOWS\System32\drivers\athwnx.sys [4233728 2018-04-11] (Microsoft Windows -> Qualcomm Atheros Communications, Inc.)
S3 BstkDrv; C:\Program Files (x86)\BlueStacks\BstkDrv.sys [269408 2018-05-23] (Bluestack Systems, Inc. -> Bluestack System Inc. )
S3 ddmdrv; C:\WINDOWS\system32\ddmdrv.sys [35760 2016-12-27] (CHENGDU AOMEI Tech Co., Ltd. -> )
R3 FETNDIS; C:\WINDOWS\System32\drivers\fetn63a.sys [53248 2018-04-11] (Microsoft Windows -> VIA Technologies, Inc. )
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2019-06-26] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [275232 2019-09-26] (Malwarebytes Corporation -> Malwarebytes)
R3 MTsensor; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] (ASUSTeK Computer Inc. -> )
R3 NIWinCDEmu; C:\WINDOWS\System32\drivers\NIWinCDEmu.sys [111696 2014-12-28] (NATIVE INSTRUMENTS GmbH -> )
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_c1a085cc86772d3f\nvlddmkm.sys [17544792 2018-03-25] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30336 2019-02-26] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [70024 2018-10-01] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [58816 2018-03-23] (NVIDIA Corporation -> NVIDIA Corporation)
R3 RtlWlanu; C:\WINDOWS\system32\DRIVERS\rtwlanu.sys [9860816 2019-05-30] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation )
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2015-06-17] (Apple, Inc.) [File not signed]
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46472 2019-09-16] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [26880 2015-11-12] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [346336 2019-09-16] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [53984 2019-09-16] (Microsoft Windows -> Microsoft Corporation)
U3 idsvc; no ImagePath
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One month (created) ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2019-09-28 10:49 - 2019-09-28 10:51 - 000041163 _____ C:\Users\Office PC\Downloads\FRST.txt
2019-09-28 10:49 - 2019-09-28 10:50 - 000000000 ____D C:\FRST
2019-09-28 10:47 - 2019-09-28 10:48 - 001616384 _____ (Farbar) C:\Users\Office PC\Downloads\FRST64.exe
2019-09-26 17:43 - 2019-09-26 17:43 - 000275232 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2019-09-20 22:41 - 2019-09-20 23:11 - 859662156 _____ C:\Users\Office PC\Downloads\777fe9374499c9cbec55322422f82b0b1561779244-1280-720-2494-h264.mp4
2019-09-17 22:03 - 2019-09-17 22:03 - 000002498 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business.lnk
2019-09-17 22:03 - 2019-09-17 22:03 - 000002493 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2019-09-17 22:03 - 2019-09-17 22:03 - 000002492 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2019-09-17 22:03 - 2019-09-17 22:03 - 000002456 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2019-09-17 22:03 - 2019-09-17 22:03 - 000002455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2019-09-17 22:03 - 2019-09-17 22:03 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2019-09-17 22:03 - 2019-09-17 22:03 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2019-09-17 22:03 - 2019-09-17 22:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools
2019-09-13 20:57 - 2019-09-13 20:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plex Media Server
2019-09-13 20:57 - 2019-09-13 20:57 - 000000000 ____D C:\Program Files (x86)\Plex
2019-09-10 15:19 - 2019-09-04 01:13 - 007519896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2019-09-10 15:19 - 2019-09-04 01:02 - 006568280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-09-10 15:19 - 2019-09-04 00:55 - 025857536 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2019-09-10 15:18 - 2019-09-04 06:16 - 002871608 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2019-09-10 15:18 - 2019-09-04 06:16 - 001721144 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2019-09-10 15:18 - 2019-09-04 06:16 - 000810808 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2019-09-10 15:18 - 2019-09-04 06:16 - 000740664 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2019-09-10 15:18 - 2019-09-04 06:16 - 000324408 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2019-09-10 15:18 - 2019-09-04 06:15 - 000637752 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2019-09-10 15:18 - 2019-09-04 06:15 - 000464696 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2019-09-10 15:18 - 2019-09-04 06:15 - 000164152 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2019-09-10 15:18 - 2019-09-04 06:15 - 000071480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2019-09-10 15:18 - 2019-09-04 06:06 - 000581016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll
2019-09-10 15:18 - 2019-09-04 06:06 - 000541200 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2019-09-10 15:18 - 2019-09-04 06:06 - 000402016 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2019-09-10 15:18 - 2019-09-04 06:01 - 004527800 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2019-09-10 15:18 - 2019-09-04 06:01 - 001516632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2019-09-10 15:18 - 2019-09-04 06:01 - 000790936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2019-09-10 15:18 - 2019-09-04 06:01 - 000396088 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2019-09-10 15:18 - 2019-09-04 06:00 - 021399576 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2019-09-10 15:18 - 2019-09-04 06:00 - 001632112 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2019-09-10 15:18 - 2019-09-04 06:00 - 001616840 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2019-09-10 15:18 - 2019-09-04 05:46 - 012838400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2019-09-10 15:18 - 2019-09-04 05:45 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2019-09-10 15:18 - 2019-09-04 05:45 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\LSCSHostPolicy.dll
2019-09-10 15:18 - 2019-09-04 05:45 - 000027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\lstelemetry.dll
2019-09-10 15:18 - 2019-09-04 05:44 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2019-09-10 15:18 - 2019-09-04 05:44 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tsusbhub.sys
2019-09-10 15:18 - 2019-09-04 05:44 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssrvlic.dll
2019-09-10 15:18 - 2019-09-04 05:43 - 008627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2019-09-10 15:18 - 2019-09-04 05:42 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcaSvc.dll
2019-09-10 15:18 - 2019-09-04 05:41 - 000677888 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2019-09-10 15:18 - 2019-09-04 05:40 - 003614208 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2019-09-10 15:18 - 2019-09-04 05:40 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2019-09-10 15:18 - 2019-09-04 05:40 - 000957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2019-09-10 15:18 - 2019-09-04 05:40 - 000878592 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2019-09-10 15:18 - 2019-09-04 05:39 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2019-09-10 15:18 - 2019-09-04 04:52 - 001453624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2019-09-10 15:18 - 2019-09-04 04:52 - 000467400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll
2019-09-10 15:18 - 2019-09-04 04:51 - 000662328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2019-09-10 15:18 - 2019-09-04 04:51 - 000322360 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2019-09-10 15:18 - 2019-09-04 04:50 - 001320344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2019-09-10 15:18 - 2019-09-04 04:50 - 000356896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2019-09-10 15:18 - 2019-09-04 04:48 - 020393120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2019-09-10 15:18 - 2019-09-04 04:38 - 012039680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2019-09-10 15:18 - 2019-09-04 04:38 - 007990784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2019-09-10 15:18 - 2019-09-04 04:35 - 000704000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2019-09-10 15:18 - 2019-09-04 04:33 - 002882048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2019-09-10 15:18 - 2019-09-04 01:25 - 003180080 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2019-09-10 15:18 - 2019-09-04 01:25 - 001613096 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2019-09-10 15:18 - 2019-09-04 01:24 - 002417744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2019-09-10 15:18 - 2019-09-04 01:24 - 001298960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2019-09-10 15:18 - 2019-09-04 01:24 - 000705336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2019-09-10 15:18 - 2019-09-04 01:19 - 000513336 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2019-09-10 15:18 - 2019-09-04 01:19 - 000511288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2019-09-10 15:18 - 2019-09-04 01:19 - 000036152 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2019-09-10 15:18 - 2019-09-04 01:17 - 001213264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2019-09-10 15:18 - 2019-09-04 01:17 - 001035040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2019-09-10 15:18 - 2019-09-04 01:15 - 005627280 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2019-09-10 15:18 - 2019-09-04 01:15 - 001219896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2019-09-10 15:18 - 2019-09-04 01:15 - 001027384 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2019-09-10 15:18 - 2019-09-04 01:15 - 000568104 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2019-09-10 15:18 - 2019-09-04 01:15 - 000500744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2019-09-10 15:18 - 2019-09-04 01:15 - 000491208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2019-09-10 15:18 - 2019-09-04 01:15 - 000323904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2019-09-10 15:18 - 2019-09-04 01:14 - 007437592 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2019-09-10 15:18 - 2019-09-04 01:14 - 003290584 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2019-09-10 15:18 - 2019-09-04 01:14 - 002469920 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2019-09-10 15:18 - 2019-09-04 01:14 - 001934808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2019-09-10 15:18 - 2019-09-04 01:14 - 001363536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2019-09-10 15:18 - 2019-09-04 01:14 - 001209696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2019-09-10 15:18 - 2019-09-04 01:14 - 000594032 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2019-09-10 15:18 - 2019-09-04 01:14 - 000420984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xbgmengine.dll
2019-09-10 15:18 - 2019-09-04 01:14 - 000361752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2019-09-10 15:18 - 2019-09-04 01:13 - 009084424 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2019-09-10 15:18 - 2019-09-04 01:13 - 004405232 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2019-09-10 15:18 - 2019-09-04 01:13 - 002773816 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2019-09-10 15:18 - 2019-09-04 01:13 - 002571848 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2019-09-10 15:18 - 2019-09-04 01:13 - 002371296 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2019-09-10 15:18 - 2019-09-04 01:13 - 001459120 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2019-09-10 15:18 - 2019-09-04 01:13 - 001260776 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2019-09-10 15:18 - 2019-09-04 01:13 - 001141504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2019-09-10 15:18 - 2019-09-04 01:13 - 001098064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2019-09-10 15:18 - 2019-09-04 01:13 - 000983936 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2019-09-10 15:18 - 2019-09-04 01:13 - 000735680 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2019-09-10 15:18 - 2019-09-04 01:13 - 000713272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2019-09-10 15:18 - 2019-09-04 01:13 - 000692352 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2019-09-10 15:18 - 2019-09-04 01:13 - 000545808 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2019-09-10 15:18 - 2019-09-04 01:13 - 000383288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2019-09-10 15:18 - 2019-09-04 01:13 - 000335672 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2019-09-10 15:18 - 2019-09-04 01:13 - 000260800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2019-09-10 15:18 - 2019-09-04 01:13 - 000129040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2019-09-10 15:18 - 2019-09-04 01:10 - 000415544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2019-09-10 15:18 - 2019-09-04 01:05 - 000550520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2019-09-10 15:18 - 2019-09-04 01:04 - 000286616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2019-09-10 15:18 - 2019-09-04 01:03 - 006046096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2019-09-10 15:18 - 2019-09-04 01:03 - 002478664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2019-09-10 15:18 - 2019-09-04 01:03 - 002331696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2019-09-10 15:18 - 2019-09-04 01:03 - 002261448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2019-09-10 15:18 - 2019-09-04 01:03 - 001993136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2019-09-10 15:18 - 2019-09-04 01:03 - 001980264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2019-09-10 15:18 - 2019-09-04 01:03 - 001011872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2019-09-10 15:18 - 2019-09-04 01:03 - 000581264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2019-09-10 15:18 - 2019-09-04 01:03 - 000538192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2019-09-10 15:18 - 2019-09-04 01:02 - 004790160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2019-09-10 15:18 - 2019-09-04 01:02 - 001805872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2019-09-10 15:18 - 2019-09-04 01:02 - 000560600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2019-09-10 15:18 - 2019-09-04 01:02 - 000129088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2019-09-10 15:18 - 2019-09-04 00:54 - 022017024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2019-09-10 15:18 - 2019-09-04 00:48 - 019385344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2019-09-10 15:18 - 2019-09-04 00:48 - 007057408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2019-09-10 15:18 - 2019-09-04 00:46 - 009084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2019-09-10 15:18 - 2019-09-04 00:46 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll
2019-09-10 15:18 - 2019-09-04 00:45 - 022734336 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2019-09-10 15:18 - 2019-09-04 00:45 - 005883904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2019-09-10 15:18 - 2019-09-04 00:45 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
2019-09-10 15:18 - 2019-09-04 00:45 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2019-09-10 15:18 - 2019-09-04 00:45 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ws2ifsl.sys
2019-09-10 15:18 - 2019-09-04 00:44 - 006647296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2019-09-10 15:18 - 2019-09-04 00:44 - 004388864 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2019-09-10 15:18 - 2019-09-04 00:44 - 003687424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2019-09-10 15:18 - 2019-09-04 00:43 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2019-09-10 15:18 - 2019-09-04 00:43 - 004849664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2019-09-10 15:18 - 2019-09-04 00:43 - 003402240 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2019-09-10 15:18 - 2019-09-04 00:43 - 002825728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2019-09-10 15:18 - 2019-09-04 00:43 - 000567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2019-09-10 15:18 - 2019-09-04 00:43 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2019-09-10 15:18 - 2019-09-04 00:43 - 000436736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\HdAudio.sys
2019-09-10 15:18 - 2019-09-04 00:43 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2019-09-10 15:18 - 2019-09-04 00:43 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2019-09-10 15:18 - 2019-09-04 00:43 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll
2019-09-10 15:18 - 2019-09-04 00:42 - 007572992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2019-09-10 15:18 - 2019-09-04 00:42 - 006032384 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2019-09-10 15:18 - 2019-09-04 00:42 - 005769728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2019-09-10 15:18 - 2019-09-04 00:42 - 003381248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2019-09-10 15:18 - 2019-09-04 00:42 - 002929152 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll
2019-09-10 15:18 - 2019-09-04 00:42 - 001862656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsservices.dll
2019-09-10 15:18 - 2019-09-04 00:42 - 001765888 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2019-09-10 15:18 - 2019-09-04 00:42 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2019-09-10 15:18 - 2019-09-04 00:42 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2019-09-10 15:18 - 2019-09-04 00:42 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2019-09-10 15:18 - 2019-09-04 00:42 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2019-09-10 15:18 - 2019-09-04 00:42 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2019-09-10 15:18 - 2019-09-04 00:42 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2019-09-10 15:18 - 2019-09-04 00:42 - 000331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2019-09-10 15:18 - 2019-09-04 00:41 - 002449408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2019-09-10 15:18 - 2019-09-04 00:41 - 002373632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2019-09-10 15:18 - 2019-09-04 00:41 - 001986560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2019-09-10 15:18 - 2019-09-04 00:41 - 001634304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2019-09-10 15:18 - 2019-09-04 00:41 - 001347584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2019-09-10 15:18 - 2019-09-04 00:41 - 000686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2019-09-10 15:18 - 2019-09-04 00:41 - 000379904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2019-09-10 15:18 - 2019-09-04 00:40 - 002912256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2019-09-10 15:18 - 2019-09-04 00:40 - 002602496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2019-09-10 15:18 - 2019-09-04 00:40 - 002364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2019-09-10 15:18 - 2019-09-04 00:40 - 002179584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2019-09-10 15:18 - 2019-09-04 00:40 - 001808896 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2019-09-10 15:18 - 2019-09-04 00:40 - 001563648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2019-09-10 15:18 - 2019-09-04 00:40 - 001232384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2019-09-10 15:18 - 2019-09-04 00:40 - 000978944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2019-09-10 15:18 - 2019-09-04 00:40 - 000851968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2019-09-10 15:18 - 2019-09-04 00:40 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2019-09-10 15:18 - 2019-09-04 00:40 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll
2019-09-10 15:18 - 2019-09-04 00:39 - 003203072 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2019-09-10 15:18 - 2019-09-04 00:39 - 002166272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2019-09-10 15:18 - 2019-09-04 00:39 - 001920512 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2019-09-10 15:18 - 2019-09-04 00:39 - 001264640 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2019-09-10 15:18 - 2019-09-04 00:39 - 001225216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2019-09-10 15:18 - 2019-09-04 00:39 - 000976896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2019-09-10 15:18 - 2019-09-04 00:39 - 000961536 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2019-09-10 15:18 - 2019-09-04 00:39 - 000927744 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2019-09-10 15:18 - 2019-09-04 00:39 - 000884224 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2019-09-10 15:18 - 2019-09-04 00:39 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2019-09-10 15:18 - 2019-09-04 00:39 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2019-09-10 15:18 - 2019-09-04 00:39 - 000629248 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2019-09-10 15:18 - 2019-09-04 00:39 - 000532480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2019-09-10 15:18 - 2019-09-04 00:39 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2019-09-10 15:18 - 2019-09-04 00:38 - 001398272 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2019-09-10 15:18 - 2019-09-04 00:38 - 000885760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2019-09-10 15:18 - 2019-09-04 00:38 - 000884736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2019-09-10 15:18 - 2019-09-04 00:38 - 000705024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2019-09-10 15:18 - 2019-09-04 00:38 - 000544768 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2019-09-10 15:18 - 2019-09-04 00:38 - 000506368 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2019-09-10 15:18 - 2019-09-03 23:22 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim
2019-09-10 15:18 - 2019-08-15 18:55 - 000786072 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2019-09-10 15:18 - 2019-08-15 18:55 - 000604000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2019-09-10 15:18 - 2019-08-15 05:59 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2019-09-10 15:18 - 2019-08-13 14:21 - 000665400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2019-09-10 15:18 - 2019-08-13 14:21 - 000221016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeManagerObj.dll
2019-09-10 15:18 - 2019-08-13 14:20 - 003701184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2019-09-10 15:18 - 2019-08-13 14:20 - 000106560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe
2019-09-10 15:18 - 2019-08-13 14:06 - 000901120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2019-09-10 15:18 - 2019-08-13 14:06 - 000668160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2019-09-10 15:18 - 2019-08-13 14:06 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ComputerDefaults.exe
2019-09-10 15:18 - 2019-08-13 14:05 - 002017280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2019-09-10 15:18 - 2019-08-13 11:06 - 000443632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2019-09-10 15:18 - 2019-08-13 11:04 - 001651040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2019-09-10 15:18 - 2019-08-13 11:04 - 001585304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2019-09-10 15:18 - 2019-08-13 10:46 - 006661632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2019-09-10 15:18 - 2019-08-13 10:45 - 002969600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2019-09-10 15:18 - 2019-08-13 10:44 - 000163328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
2019-09-10 15:18 - 2019-08-13 10:43 - 001295872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2019-09-10 15:18 - 2019-08-13 10:43 - 000624128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
2019-09-10 15:18 - 2019-08-13 10:43 - 000202752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll
2019-09-10 15:18 - 2019-08-13 10:42 - 000252416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2019-09-10 15:18 - 2019-08-13 10:40 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2019-09-10 15:18 - 2019-08-13 10:39 - 000536064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2019-09-10 15:18 - 2019-08-13 06:15 - 001427768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2019-09-10 15:18 - 2019-08-13 06:14 - 004040008 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2019-09-10 15:18 - 2019-08-13 06:09 - 000771384 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2019-09-10 15:18 - 2019-08-13 06:09 - 000571688 _____ (Microsoft Corporation) C:\WINDOWS\system32\phoneactivate.exe
2019-09-10 15:18 - 2019-08-13 06:08 - 000117240 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe
2019-09-10 15:18 - 2019-08-13 05:51 - 004853248 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2019-09-10 15:18 - 2019-08-13 05:51 - 000905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\slui.exe
2019-09-10 15:18 - 2019-08-13 05:50 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcommdlg.dll
2019-09-10 15:18 - 2019-08-13 05:49 - 001060864 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2019-09-10 15:18 - 2019-08-13 05:49 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ComputerDefaults.exe
2019-09-10 15:18 - 2019-08-13 05:47 - 001262080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2019-09-10 15:18 - 2019-08-13 05:46 - 002084864 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2019-09-10 15:18 - 2019-08-13 05:46 - 000757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2019-09-10 15:18 - 2019-08-13 02:37 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2019-09-10 15:18 - 2019-08-13 00:54 - 000790208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll
2019-09-10 15:18 - 2019-08-13 00:46 - 000611640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2019-09-10 15:18 - 2019-08-13 00:46 - 000510288 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2019-09-10 15:18 - 2019-08-13 00:46 - 000194360 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2019-09-10 15:18 - 2019-08-13 00:45 - 002718736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2019-09-10 15:18 - 2019-08-13 00:45 - 000723216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2019-09-10 15:18 - 2019-08-13 00:45 - 000722960 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2019-09-10 15:18 - 2019-08-13 00:44 - 002161288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2019-09-10 15:18 - 2019-08-13 00:44 - 001793472 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2019-09-10 15:18 - 2019-08-13 00:17 - 004708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2019-09-10 15:18 - 2019-08-13 00:16 - 008189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2019-09-10 15:18 - 2019-08-13 00:16 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\system32\fcon.dll
2019-09-10 15:18 - 2019-08-13 00:15 - 001626112 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2019-09-10 15:18 - 2019-08-13 00:14 - 001826816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2019-09-10 15:18 - 2019-08-13 00:13 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2019-09-10 15:18 - 2019-08-13 00:13 - 000137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Storage.dll
2019-09-10 15:18 - 2019-08-13 00:12 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2019-09-10 15:18 - 2019-08-13 00:12 - 000300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
2019-09-10 15:18 - 2019-08-13 00:12 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2019-09-10 15:18 - 2019-08-13 00:12 - 000244224 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2019-09-10 15:18 - 2019-08-13 00:12 - 000205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
2019-09-10 15:18 - 2019-08-13 00:11 - 000737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2019-09-10 15:18 - 2019-08-13 00:11 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2019-09-10 15:18 - 2019-08-13 00:11 - 000302592 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2019-09-10 15:18 - 2019-08-13 00:08 - 001221120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2019-09-10 15:18 - 2019-08-13 00:08 - 000662016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2019-09-10 15:18 - 2019-08-13 00:08 - 000320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2019-09-10 15:18 - 2019-08-12 22:51 - 000421376 _____ (curl, hxxps://curl.haxx.se/) C:\WINDOWS\system32\curl.exe
2019-09-10 15:18 - 2019-08-12 22:49 - 000806328 _____ C:\WINDOWS\SysWOW64\locale.nls
2019-09-10 15:18 - 2019-08-12 22:49 - 000806328 _____ C:\WINDOWS\system32\locale.nls
2019-09-10 15:18 - 2019-08-12 20:57 - 001312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2019-09-10 15:18 - 2019-08-12 20:57 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2019-09-10 15:18 - 2019-08-12 20:57 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2019-09-10 15:18 - 2019-08-12 20:57 - 000313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
 
==================== One month (modified) ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2019-09-28 10:49 - 2014-05-23 18:18 - 000000000 ____D C:\Users\Office PC\AppData\Roaming\Azureus
2019-09-28 10:45 - 2018-06-10 18:13 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-09-28 10:45 - 2018-04-11 19:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-09-28 09:05 - 2018-06-10 18:46 - 000004166 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B9A2FFAE-2A27-44EA-81A2-96CA95436ECD}
2019-09-27 23:47 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-09-27 19:07 - 2015-07-13 20:21 - 000000000 ____D C:\Users\Office PC\AppData\Roaming\PioneerLog
2019-09-27 16:00 - 2018-04-11 19:38 - 000000000 ___HD C:\Program Files\WindowsApps
2019-09-27 12:25 - 2017-07-17 21:00 - 000000000 ____D C:\ProgramData\NVIDIA
2019-09-27 11:32 - 2019-03-24 03:55 - 000003378 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2488212447-1855921873-862638463-1000
2019-09-27 11:32 - 2018-06-10 18:27 - 000002416 _____ C:\Users\Office PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-09-27 11:32 - 2015-10-26 14:13 - 000000000 ___RD C:\Users\Office PC\OneDrive
2019-09-26 17:42 - 2018-06-10 18:46 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-09-26 17:41 - 2018-04-11 17:04 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2019-09-24 19:23 - 2014-11-26 18:49 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-09-18 22:52 - 2019-08-15 21:10 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2019-09-17 22:01 - 2019-03-22 10:25 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2019-09-17 17:07 - 2014-05-23 18:18 - 000000000 ____D C:\Users\Office PC\Documents\Vuze Downloads
2019-09-16 16:56 - 2018-02-17 07:45 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2019-09-15 10:13 - 2016-12-28 02:53 - 000000000 ____D C:\Users\Office PC\AppData\Roaming\vlc
2019-09-13 20:57 - 2014-07-08 16:05 - 000000000 ____D C:\ProgramData\Package Cache
2019-09-11 03:41 - 2018-04-11 19:36 - 000000000 ____D C:\WINDOWS\INF
2019-09-10 17:52 - 2018-06-10 18:20 - 000968720 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-09-10 17:48 - 2015-10-29 20:12 - 000000000 ___RD C:\Users\Office PC\3D Objects
2019-09-10 17:48 - 2015-09-10 01:44 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-09-10 17:47 - 2018-06-10 18:13 - 000418920 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-09-10 17:43 - 2018-06-10 18:27 - 000000000 ____D C:\Users\Office PC
2019-09-10 17:43 - 2018-04-12 05:20 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2019-09-10 17:43 - 2018-04-11 19:38 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2019-09-10 17:43 - 2018-04-11 19:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2019-09-10 17:43 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\TextInput
2019-09-10 17:43 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2019-09-10 17:43 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\system32\oobe
2019-09-10 17:43 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\ShellExperiences
2019-09-10 17:43 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\ShellComponents
2019-09-10 17:43 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2019-09-10 17:43 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-09-10 17:43 - 2018-04-11 17:04 - 000000000 ____D C:\WINDOWS\system32\Dism
2019-09-10 15:23 - 2018-04-11 19:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-08-31 23:57 - 2018-07-12 19:16 - 000835480 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2019-08-31 23:57 - 2018-07-12 19:16 - 000179816 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2019-08-30 20:24 - 2019-06-15 12:47 - 000001139 _____ C:\Users\Public\Desktop\VLC media player.lnk
2019-08-30 20:24 - 2019-06-15 12:47 - 000001139 _____ C:\ProgramData\Desktop\VLC media player.lnk
2019-08-30 20:18 - 2018-04-11 19:38 - 000000000 ____D C:\WINDOWS\system32\NDF
2019-08-30 14:14 - 2018-11-15 22:19 - 000000000 ____D C:\Program Files\rempl
 
==================== Files in the root of some directories ================
 
2010-12-22 12:26 - 2010-12-22 12:26 - 487666616 _____ (Adobe Systems Incorporated) C:\Users\Office PC\AppData\Roaming\AcrobatPro_10_Web_WWEFD.exe
2015-04-28 19:51 - 2015-04-28 19:51 - 000000038 ____H () C:\Users\Office PC\AppData\Roaming\usercode.properties
2017-10-31 11:23 - 2017-10-31 11:23 - 000000000 ___SH () C:\Users\Office PC\AppData\Local\LumaEmu
2017-01-28 16:41 - 2017-01-28 16:41 - 000000851 _____ () C:\Users\Office PC\AppData\Local\recently-used.xbel
2014-06-09 22:39 - 2014-06-09 22:39 - 000007602 _____ () C:\Users\Office PC\AppData\Local\Resmon.ResmonCfg
2015-04-29 19:52 - 2015-04-29 19:52 - 000000000 _____ () C:\Users\Office PC\AppData\Local\{5C72E2D0-7A74-4EA1-B374-A793C730F0D9}
 
==================== SigCheck ===============================
 
(There is no automatic fix for files that do not pass verification.)
 
==================== End of FRST.txt ============================
 
 
Addition Log:
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-09-2019
Ran by Office PC (28-09-2019 10:53:16)
Running from C:\Users\Office PC\Downloads
Windows 10 Pro Version 1803 17134.1006 (X64) (2018-06-10 22:47:47)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-2488212447-1855921873-862638463-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2488212447-1855921873-862638463-503 - Limited - Disabled)
Guest (S-1-5-21-2488212447-1855921873-862638463-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2488212447-1855921873-862638463-1002 - Limited - Enabled)
Office PC (S-1-5-21-2488212447-1855921873-862638463-1000 - Administrator - Enabled) => C:\Users\Office PC
WDAGUtilityAccount (S-1-5-21-2488212447-1855921873-862638463-504 - Limited - Disabled)
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
4K YouTube to MP3 3.3 (HKLM-x32\...\{59537536-03C1-4289-800C-BCCF8C9850F8}) (Version: 3.3.9.1844 - Open Media LLC)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 19.012.20040 - Adobe Systems Incorporated)
AOMEI Partition Assistant Standard Edition 8.2 (HKLM-x32\...\{02F850ED-FD0E-4ED1-BE0B-54981f5BD3D4}_is1) (Version:  - AOMEI Technology Co., Ltd.)
Apple Application Support (32-bit) (HKLM-x32\...\{D4C80B0C-CF67-43A7-90C3-466853543B54}) (Version: 6.3 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{B2A2E8AF-BC48-4191-B2C4-3846A19835CA}) (Version: 6.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{C1BBFD2A-BCDD-45B3-8C0B-66BD434970A8}) (Version: 2.4.8.1 - Apple Inc.)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.14 - Michael Tippach)
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 4.1.17.2008 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
Cisco WebEx Meetings (HKU\S-1-5-21-2488212447-1855921873-862638463-1000\...\ActiveTouchMeetingClient) (Version:  - Cisco WebEx LLC)
Citrix Receiver (HKLM-x32\...\CitrixOnlinePluginPackWeb) (Version: 14.1.0.0 - Citrix Systems, Inc.)
DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 391.35 - NVIDIA Corporation) Hidden
FL Studio 10 (HKLM-x32\...\FL Studio 10) (Version:  - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version:  - Image-Line)
Freemake Audio Converter version 1.1.8 (HKLM-x32\...\Freemake Audio Converter_is1) (Version: 1.1.8 - Ellora Assets Corporation)
Full Tilt Poker (HKLM-x32\...\{D4C9692E-4EFA-4DA0-8B7F-9439466D9E31}) (Version: 5.10.15.WIN.FullTilt.COM - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 77.0.3865.90 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.11 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
HP Dropbox Plugin (HKLM-x32\...\{23617173-F935-4C17-A323-EB1207F3ED49}) (Version: 36.0.31.53050 - Hewlett-Packard Co.)
HP Google Drive Plugin (HKLM-x32\...\{AFF80405-E56A-48E7-98FC-8E46E261949F}) (Version: 36.0.31.53050 - Hewlett-Packard Co.)
HP OfficeJet 4650 series Basic Device Software (HKLM\...\{AD2313B9-714F-496E-AD7F-20532E833EB2}) (Version: 36.0.72.54013 - Hewlett-Packard Co.)
HP Photo Creations (HKU\S-1-5-21-2488212447-1855921873-862638463-1000\...\HP Photo Creations) (Version: 1.0.0.22192 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HP USB Disk Storage Format Tool (HKLM-x32\...\{0E0DF90C-D0BA-4C89-9262-AD78D1A3DE51}) (Version:  - )
I.R.I.S. OCR (HKLM-x32\...\{C60E2D8F-0FC0-497D-A149-90F3B361937C}) (Version: 12.3.6.9 - HP)
IL Gross Beat (HKLM-x32\...\IL Gross Beat) (Version:  - Image-Line)
IL Shared Libraries (HKLM-x32\...\IL Shared Libraries) (Version:  - Image-Line)
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Kodi (HKU\S-1-5-21-2488212447-1855921873-862638463-1000\...\Kodi) (Version:  - XBMC-Foundation)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Loopmaster Samples version 1.0 (HKLM-x32\...\{EF29801F-C87A-481B-B4D1-6D1FBDEA954B}_is1) (Version: 1.0 - Serato LP INC)
Malwarebytes version 3.8.3.2965 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.8.3.2965 - Malwarebytes)
Media Player Codec Pack 4.3.1 (HKLM-x32\...\Media Player - Codec Pack) (Version: 4.3.1 - Media Player Codec Pack)
Microsoft Office Professional Plus 2019 - en-us (HKLM\...\ProPlus2019Retail - en-us) (Version: 16.0.11929.20300 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2488212447-1855921873-862638463-1000\...\OneDriveSetup.exe) (Version: 19.152.0801.0009 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{CA8A885F-E95B-3FC6-BB91-F4D9377C7686}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MultiWall version 1.0.31 (HKLM-x32\...\{54384F46-6346-4BDC-A137-4D4037D362D3}_is1) (Version: 1.0.31 - MultiWall)
Native Instruments Massive (HKLM-x32\...\Native Instruments Massive) (Version:  - Native Instruments)
Native Instruments Replika (HKLM-x32\...\Native Instruments Replika) (Version: 1.2.1.713 - Native Instruments)
Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.6.0.137 - Native Instruments)
Nero 11 Mini Repack (HKLM\...\NMMS11) (Version:  - )
Nero Backup Drivers (HKLM\...\{D600D357-5CB9-4DE9-8FD4-14E208BD1970}) (Version: 1.0.10000.1.0 - Nero AG)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.15 - NVIDIA Corporation) Hidden
NVIDIA 3D Vision Controller Driver 390.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 390.41 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 391.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 391.35 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.18.0.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.18.0.94 - NVIDIA Corporation)
NVIDIA Graphics Driver 391.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 391.35 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.36.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.36.6 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.11929.20300 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.11929.20300 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.11929.20300 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.11929.20300 - Microsoft Corporation) Hidden
Online Plug-in (HKLM-x32\...\{F390D923-76F1-458E-8218-8C0C156CDCFD}) (Version: 14.1.0.0 - Citrix Systems, Inc.) Hidden
Pioneer MIX 64bit Driver (HKLM\...\Pioneer MIX) (Version: 5.2.3.0008 - Pioneer DJ Corporation.)
Pioneer MIX Driver (HKLM-x32\...\Pioneer MIX) (Version: 4.5.0.0007 - Pioneer DJ Corporation.)
Plex Media Player (HKLM\...\{0D4EDF77-CC4A-4979-8244-259FCFA579DB}) (Version: 2.26.0 - Plex) Hidden
Plex Media Player (HKLM-x32\...\{dfdf93ed-d82c-445a-a5bf-4be48d6fb841}) (Version: 2.26.0 - Plex)
Plex Media Server (HKLM-x32\...\{06F175F5-D6CA-438F-B1E6-E9F1FB2735FF}) (Version: 1.16.1554 - Plex, Inc.) Hidden
Plex Media Server (HKLM-x32\...\{6b47007f-5e5b-40bb-8655-d2530bedcec2}) (Version: 1.16.5.1554 - Plex, Inc.)
PowerISO (HKLM-x32\...\PowerISO) (Version: 5.0 - Power Software Ltd)
Questrade IQ Edge (HKLM-x32\...\{B50F973A-8BEC-4A5D-AFEE-E4AEDAA150BD}_is1) (Version: 5.7.9.151 - Questrade Inc.)
QuickTime 7 (HKLM-x32\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.)
REALTEK Wireless LAN Driver and Utility (HKLM-x32\...\{9C049509-055C-4CFF-A116-1D12312225EB}) (Version: 1.00.0285 - REALTEK Semiconductor Corp.)
reFX Nexus VSTi RTAS v2.2.0 (HKLM-x32\...\reFX Nexus_is1) (Version:  - )
rekordbox 4.4.0 (HKLM-x32\...\Pioneer rekordbox 4.4.0) (Version: 4.4.0.0020 - Pioneer DJ)
rekordbox 4.5.0 (HKLM-x32\...\Pioneer rekordbox 4.5.0) (Version: 4.5.0.0007 - Pioneer DJ)
rekordbox 5.2.3 64bit (HKLM\...\Pioneer rekordbox 5.2.3) (Version: 5.2.3.0008 - Pioneer DJ)
Self-service Plug-in (HKLM-x32\...\{47117FCA-0D00-4B6D-9D68-00B763629463}) (Version: 4.1.0.41738 - Citrix Systems, Inc.) Hidden
Steinberg Download Assistant (HKLM-x32\...\Steinberg Download Assistant) (Version: 1.15.0 - Steinberg Media Technologies GmbH)
Stopping Plex (HKLM-x32\...\{783867B4-5DA3-470A-9882-3F18DAA454A7}) (Version: 1.16.1554 - Plex, Inc.) Hidden
Sylenth1 v2.21 (HKLM\...\Sylenth1_is1) (Version:  - )
System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
UnderCoverXP 1.23 (HKLM-x32\...\UnderCoverXP_is1) (Version:  - Wicked & Wild Inc.)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
VC80CRTRedist - 8.0.50727.6195 (HKLM-x32\...\{933B4015-4618-4716-A828-5289FC03165F}) (Version: 1.2.0 - DivX, Inc) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 3.0.6 - VideoLAN)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.8 - VideoLAN)
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
Vuze (HKLM-x32\...\8461-7759-5462-8226) (Version: 5.7.6.0 - Azureus Software, Inc.)
WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
 
Packages:
=========
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_100.1.581.0_x64__v10z8vjag6ke6 [2019-07-19] (HP Inc.)
iTunes -> C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa [2019-09-26] (Apple Inc.)
Mail and Calendar -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12026.20218.0_x64__8wekyb3d8bbwe [2019-09-24] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-11] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-11] (Microsoft Corporation) [MS Ad]
Microsoft News -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.32.12463.0_x64__8wekyb3d8bbwe [2019-09-10] (Microsoft Corporation) [MS Ad]
Microsoft Phone -> C:\Program Files\WindowsApps\Microsoft.CommsPhone_3.43.20002.1000_x64__8wekyb3d8bbwe [2018-09-09] (Microsoft Corporation)
Microsoft Phone Companion -> C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1802.311.0_x64__8wekyb3d8bbwe [2018-02-13] (Microsoft Corporation)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe [2019-08-29] (Microsoft Studios) [MS Ad]
MSN Money -> C:\Program Files\WindowsApps\Microsoft.BingFinance_4.31.11905.0_x64__8wekyb3d8bbwe [2019-07-19] (Microsoft Corporation) [MS Ad]
MSN Sports -> C:\Program Files\WindowsApps\Microsoft.BingSports_4.31.11905.0_x64__8wekyb3d8bbwe [2019-07-19] (Microsoft Corporation) [MS Ad]
MSN Weather -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.32.12463.0_x64__8wekyb3d8bbwe [2019-09-10] (Microsoft Corporation) [MS Ad]
SimpleStream -> C:\Program Files\WindowsApps\14861TPWorks.SimpleStream_1.5.15.0_x64__n0e1jx1pycqem [2018-03-17] (TPWorks) [MS Ad]
WindowsDVDPlayer -> C:\Program Files\WindowsApps\Microsoft.WindowsDVDPlayer_3.6.13291.0_x64__8wekyb3d8bbwe [2015-11-13] (Microsoft Corporation)
 
==================== Custom CLSID (Whitelisted): ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
CustomCLSID: HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Office PC\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{1BEAC3E3-B852-44F4-B468-8906C062422E}\localserver32 -> "C:\Users\Office PC\AppData\Local\Google\Chrome SxS\Application\41.0.2224.2\delegate_execute.exe" => No File
CustomCLSID: HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Office PC\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Office PC\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Office PC\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Office PC\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll => No File
ContextMenuHandlers1: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\Program Files (x86)\AIMP\System\aimp_menu64.dll -> No File
ContextMenuHandlers1: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files (x86)\PowerISO\PWRISOSH.DLL [2012-02-09] (Power Software Ltd -> Power Software Ltd)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers4: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\Program Files (x86)\AIMP\System\aimp_menu64.dll -> No File
ContextMenuHandlers4: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files (x86)\PowerISO\PWRISOSH.DLL [2012-02-09] (Power Software Ltd -> Power Software Ltd)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} =>  -> No File
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2018-03-23] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files (x86)\PowerISO\PWRISOSH.DLL [2012-02-09] (Power Software Ltd -> Power Software Ltd)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
 
==================== Shortcuts & WMI ========================
 
(The entries could be listed to be restored or removed.)
 
WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::
WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]
WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]
 
Shortcut: C:\Users\Office PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line\FL Studio 10\Image-Line website.lnk -> hxxp://www.image-line.com
Shortcut: C:\Users\Office PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line\FL Studio 10\Advanced\Diagnostic.lnk -> hxxp://www.image-line.com/diagnosti
Shortcut: C:\Users\Office PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line\FL Studio 10\Additional\Download Deckadance.lnk -> hxxp://www.deckadance.com
Shortcut: C:\Users\Office PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line\FL Studio 10\Additional\SynthMaker website.lnk -> hxxp://www.synthmaker.co.uk
 
==================== Loaded Modules (Whitelisted) ==============
 
2018-04-17 20:53 - 2014-04-17 09:54 - 000863232 _____ ( Realtek Semiconductor Corp.) [File not signed] C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\P2PLib.dll
2018-04-17 20:53 - 2014-04-17 09:54 - 000221184 _____ () [File not signed] C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\EnumDevLib.dll
2013-10-01 15:31 - 2013-10-01 15:31 - 002293760 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\Citrix\Receiver\xerces-c_3_1.dll
2017-03-04 11:58 - 2017-03-04 11:58 - 000118784 _____ (Eclipse Foundation) [File not signed] C:\Users\Office PC\.swt\lib\win32\x86\swt-gdip-win32-4716.dll
2017-03-04 11:58 - 2017-03-04 11:58 - 000430080 _____ (Eclipse Foundation) [File not signed] C:\Users\Office PC\.swt\lib\win32\x86\swt-win32-4716.dll
2018-06-10 18:30 - 2018-06-10 18:30 - 001101824 _____ (Microsoft Corporation) [File not signed] C:\WINDOWS\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\MFC80.DLL
2018-06-10 18:31 - 2018-06-10 18:31 - 000057344 _____ (Microsoft Corporation) [File not signed] C:\WINDOWS\WinSxS\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_03ce2c72205943d3\MFC80ENU.DLL
2019-03-20 20:13 - 2018-03-23 19:05 - 000764640 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI.dll
2019-03-20 20:13 - 2018-03-23 19:05 - 000880024 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI64.dll
2019-03-20 20:13 - 2018-03-23 19:05 - 000343728 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem\NvStereo\_nvstapisvr64.dll
2018-04-17 20:53 - 2014-04-17 09:54 - 000200704 _____ (Realtek) [File not signed] C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\IpLib.dll
2018-04-17 20:53 - 2014-04-17 09:54 - 000044544 _____ (Realtek) [File not signed] C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RtlQRCode.dll
2016-08-04 22:10 - 2007-12-07 02:08 - 000108032 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\WINDOWS\System32\E_ILMCDA.DLL
2018-04-17 20:53 - 2014-04-17 09:54 - 001122304 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\LIBEAY32.dll
 
==================== Alternate Data Streams (Whitelisted) =========
 
(If an entry is included in the fixlist, only the ADS will be removed.)
 
 
==================== Safe Mode (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
 
==================== Association (Whitelisted) ===============
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, it will be removed from the registry.)
 
 
==================== Hosts content: ===============================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2009-07-13 22:34 - 2009-06-10 17:00 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
 
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-2488212447-1855921873-862638463-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Office PC\AppData\Roaming\MultiWall\wallpaper.bmp
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
Windows Firewall is enabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
If an entry is included in the fixlist, it will be removed.
 
MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: Apple Mobile Device => 2
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: HitmanProScheduler => 2
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: NvNetworkService => 2
MSCONFIG\Services: NvStreamSvc => 2
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: Stereo Service => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^CodecPackUpdateChecker.lnk => C:\Windows\pss\CodecPackUpdateChecker.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: CitrixReceiver => "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Citrix\Receiver Updater.lnk"
MSCONFIG\startupreg: ConnectionCenter => "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
MSCONFIG\startupreg: Google Update => "C:\Users\Office PC\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: NBAgent => "C:\Program Files (x86)\Nero\Nero 11\Nero BackItUp\NBAgent.exe" /WinStart
MSCONFIG\startupreg: PWRISOVM.EXE => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE -startup
MSCONFIG\startupreg: Redirector => "C:\Program Files (x86)\Citrix\ICA Client\redirector.exe" /startup
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
 
==================== FirewallRules (Whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [{5FBC4E11-AE0A-4C97-8ED8-750F8C9ACE82}] => (Allow) C:\Program Files (x86)\BlueStacks\HD-Player.exe (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
FirewallRules: [{8B235538-1A3C-4EC6-A9C6-E4F4A857478D}] => (Allow) C:\Program Files\Pioneer\rekordbox 5.2.3\ls-unity-rekordbox-win-64bit.exe (Pioneer DJ Corporation -> )
FirewallRules: [{CEF29C26-2ECC-48BA-99CA-68B27EAC794F}] => (Allow) C:\Program Files\Pioneer\rekordbox 5.2.3\edb_streamd.exe () [File not signed]
FirewallRules: [{E7797620-114E-4670-BA6F-ABA4753CD78D}] => (Allow) C:\Program Files\Pioneer\rekordbox 5.2.3\psvlinksysmgr.exe (Pioneer DJ Corporation -> Pioneer DJ Corporation.)
FirewallRules: [{87AFDBBC-737F-4B61-99A1-F667E6765B01}] => (Allow) C:\Program Files\Pioneer\rekordbox 5.2.3\psvnfsd.exe (Pioneer DJ Corporation -> Pioneer Corporation.)
FirewallRules: [{8D2E7FFE-BFF1-46F7-AB6E-213E03D02E2B}] => (Allow) C:\Program Files\Pioneer\rekordbox 5.2.3\rekordbox.exe (Pioneer DJ Corporation -> Pioneer DJ Corporation)
FirewallRules: [UDP Query User{71338094-4111-4124-87D3-6EF0D09D78A3}C:\program files\pioneer\rekordbox 5.2.2\rekordbox.exe] => (Allow) C:\program files\pioneer\rekordbox 5.2.2\rekordbox.exe No File
FirewallRules: [TCP Query User{D3EBE4DC-AE16-4EFE-90B8-569792210FF7}C:\program files\pioneer\rekordbox 5.2.2\rekordbox.exe] => (Allow) C:\program files\pioneer\rekordbox 5.2.2\rekordbox.exe No File
FirewallRules: [UDP Query User{FA250FFC-4AFB-4F90-81F8-305DD11E0C10}C:\program files\pioneer\rekordbox 5.2.2\psvlinksysmgr.exe] => (Allow) C:\program files\pioneer\rekordbox 5.2.2\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{D3B895B6-7F4C-47D4-85F8-99A4D75E40F2}C:\program files\pioneer\rekordbox 5.2.2\psvlinksysmgr.exe] => (Allow) C:\program files\pioneer\rekordbox 5.2.2\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{95FBDD43-992E-4C02-B40C-A8BDC34E9E53}C:\program files\pioneer\rekordbox 5.2.2\psvnfsd.exe] => (Allow) C:\program files\pioneer\rekordbox 5.2.2\psvnfsd.exe No File
FirewallRules: [TCP Query User{3BA6C42C-FA74-4971-8E85-553A2F977C12}C:\program files\pioneer\rekordbox 5.2.2\psvnfsd.exe] => (Allow) C:\program files\pioneer\rekordbox 5.2.2\psvnfsd.exe No File
FirewallRules: [{3203F83F-DE37-420C-8640-D53673DB20C8}] => (Allow) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)
FirewallRules: [{2C431A6B-87DA-49D9-964C-032E55D4B953}] => (Allow) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)
FirewallRules: [{1E81D134-3048-4E40-8E54-0F0129242F68}] => (Allow) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)
FirewallRules: [{97E4A892-8B88-40BB-AE1F-0C8429A17D79}] => (Allow) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)
FirewallRules: [{AC1E9C17-3B2A-4F4B-9F47-14F2E8B7080E}] => (Allow) LPort=53
FirewallRules: [{D3C6F7BE-B6B7-4F76-96D6-5E9A071400D8}] => (Allow) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)
FirewallRules: [{E94442C3-431B-4785-8193-48575E10F676}] => (Allow) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)
FirewallRules: [{70C33CB5-690D-40EC-A48C-EA5FDB303A0B}] => (Allow) C:\PROGRA~2\REALTEK\USBWIR~1\Rtldhcp.exe (Realtek Semiconductor Corp -> Realtek)
FirewallRules: [{CA0029F0-B9E8-485A-86AD-E8F0B0FFF6D6}] => (Allow) LPort=53
FirewallRules: [{6646619F-0E42-4DB0-9316-57275D0460CE}] => (Allow) LPort=1542
FirewallRules: [{8F583241-7F96-4830-8EB6-3838610815AD}] => (Allow) LPort=1542
FirewallRules: [{01220189-25EF-4A77-8990-BD9067F5BA14}] => (Allow) C:\PROGRA~2\REALTEK\USBWIR~1\RtWlan.exe (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)
FirewallRules: [UDP Query User{E171B90D-0034-4FFC-9E0A-8517869B148A}C:\program files\perfectplayer\jre\bin\javaw.exe] => (Allow) C:\program files\perfectplayer\jre\bin\javaw.exe No File
FirewallRules: [TCP Query User{EA5C7E95-4901-4BEF-8E76-351CE5C2CF42}C:\program files\perfectplayer\jre\bin\javaw.exe] => (Allow) C:\program files\perfectplayer\jre\bin\javaw.exe No File
FirewallRules: [{938D9D26-632B-461C-B7EF-A0E99077F7F3}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [UDP Query User{C62FC86D-EF1B-41FC-84DB-FF9EA3338BDE}C:\program files (x86)\pioneer\rekordbox 4.3.1\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.1\rekordbox.exe No File
FirewallRules: [TCP Query User{9AFC1A7B-9462-4E7C-98D2-7D155427BF3E}C:\program files (x86)\pioneer\rekordbox 4.3.1\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.1\rekordbox.exe No File
FirewallRules: [UDP Query User{53D091DC-3EAF-4F64-B37E-88F9C947FD83}C:\program files (x86)\pioneer\rekordbox 4.3.1\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.1\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{26C10B7B-90BD-4E8A-8412-A39315BE2E00}C:\program files (x86)\pioneer\rekordbox 4.3.1\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.1\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{95654D0D-8D1E-42D5-B40C-7472C54DFE50}C:\program files (x86)\pioneer\rekordbox 4.3.1\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.1\psvnfsd.exe No File
FirewallRules: [TCP Query User{2B80635F-0430-42EB-8D4A-B388C7D0F012}C:\program files (x86)\pioneer\rekordbox 4.3.1\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.1\psvnfsd.exe No File
FirewallRules: [UDP Query User{66E6AB99-0529-4D3F-BFAF-BCA86B3F4292}C:\program files (x86)\pioneer\rekordbox 4.3.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.0\rekordbox.exe No File
FirewallRules: [TCP Query User{D8D98D62-EF6B-45E9-90CD-104479380BDB}C:\program files (x86)\pioneer\rekordbox 4.3.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.0\rekordbox.exe No File
FirewallRules: [UDP Query User{01A430C8-329B-44A4-86B9-39E6F721EF13}C:\program files (x86)\pioneer\rekordbox 4.3.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.0\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{6AE495BD-E237-4389-BCB0-9F903F3FA2EF}C:\program files (x86)\pioneer\rekordbox 4.3.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.0\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{36D33B87-2B66-4F42-88CD-D494EB0B29CF}C:\program files (x86)\pioneer\rekordbox 4.3.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.0\psvnfsd.exe No File
FirewallRules: [TCP Query User{2597AD93-B4E7-420E-9024-9BFA24670CCF}C:\program files (x86)\pioneer\rekordbox 4.3.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.0\psvnfsd.exe No File
FirewallRules: [{7DDF0725-2E45-4D6D-8A34-96593DE7AC06}] => (Allow) C:\Program Files (x86)\Vuze\Azureus.exe (Azureus Software, Inc. -> Azureus Software, Inc)
FirewallRules: [{1D72A606-AC1C-483A-B9AC-EC74AFCF45B9}] => (Allow) C:\Program Files (x86)\Vuze\Azureus.exe (Azureus Software, Inc. -> Azureus Software, Inc)
FirewallRules: [{8D7E2C60-AA63-4713-AD0C-5CB0E31759B2}] => (Allow) C:\Program Files\HP\HP OfficeJet 4650 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [{BB302AB2-F4D1-4695-B266-8CD05BFB72FE}] => (Allow) LPort=5357
FirewallRules: [{004E3D86-060C-492B-BFC7-81BC9F86CA64}] => (Allow) C:\Program Files\HP\HP OfficeJet 4650 series\Bin\DeviceSetup.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [{C0A9B8EB-6343-433A-8A80-AFC07576395A}] => (Allow) C:\Program Files\HP\HP OfficeJet 4650 series\bin\SendAFax.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [{27FB382B-7365-476F-88EC-F730A1207135}] => (Allow) C:\Program Files\HP\HP OfficeJet 4650 series\bin\DigitalWizards.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [{613D0867-8287-4FD5-B9A9-C4582F80A5F5}] => (Allow) C:\Program Files\HP\HP OfficeJet 4650 series\bin\FaxApplications.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [{6D9AF2CE-2879-4EFA-BE5E-0A77984772DA}] => (Allow) C:\Program Files\HP\HP OfficeJet 4650 series\bin\FaxPrinterUtility.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [{13F94000-72C5-44D0-B15C-D990DC6FF101}] => (Allow) C:\Users\Office PC\AppData\Local\Temp\7zS78BB\HP.EasyStart.exe No File
FirewallRules: [UDP Query User{E8323A86-E14F-4780-9898-45B142D5CE14}C:\program files (x86)\pioneer\rekordbox 4.2.5\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.5\rekordbox.exe No File
FirewallRules: [TCP Query User{0B785053-9696-4988-B130-189BCF1996B4}C:\program files (x86)\pioneer\rekordbox 4.2.5\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.5\rekordbox.exe No File
FirewallRules: [UDP Query User{6D18093D-BFA9-433F-AB96-E9DA8BC801E2}C:\program files (x86)\pioneer\rekordbox 4.2.5\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.5\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{F95C63B9-EDBB-400F-A10A-D82C70D4F261}C:\program files (x86)\pioneer\rekordbox 4.2.5\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.5\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{A707DC1E-4486-4FBA-8B73-9191CDF510A9}C:\program files (x86)\pioneer\rekordbox 4.2.5\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.5\psvnfsd.exe No File
FirewallRules: [TCP Query User{AD6DF718-3C81-409B-8F3E-3A6B7A24BCE5}C:\program files (x86)\pioneer\rekordbox 4.2.5\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.5\psvnfsd.exe No File
FirewallRules: [{A29A66BE-5AEA-4098-BDF1-28AA6F3EFE4B}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe No File
FirewallRules: [{E26B8369-CCBA-4C2F-8E33-D7756E9F3F42}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe No File
FirewallRules: [{B613E517-63DE-4057-9C76-E9FDE42D4F34}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe No File
FirewallRules: [{50E38E07-75EA-4338-8A6D-F4FDA8A543B7}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe No File
FirewallRules: [UDP Query User{B1583B16-7FFD-4F38-B3AF-EAB6B32DF1D2}C:\program files (x86)\pioneer\rekordbox 4.2.4\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\rekordbox.exe No File
FirewallRules: [TCP Query User{51F5EB12-AEAE-4ABB-85BD-D1C76597942F}C:\program files (x86)\pioneer\rekordbox 4.2.4\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\rekordbox.exe No File
FirewallRules: [UDP Query User{4132752B-47BA-4E7A-BC30-D438BA6BB588}C:\program files (x86)\pioneer\rekordbox 4.2.4\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{32991C82-0257-4B80-879F-D41224D0D353}C:\program files (x86)\pioneer\rekordbox 4.2.4\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{1AAE85DC-F59F-4A2E-9BF7-5BBCE1BA4109}C:\program files (x86)\pioneer\rekordbox 4.2.4\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\psvnfsd.exe No File
FirewallRules: [TCP Query User{D05660BA-696F-4E54-BD34-2A3E247E8CCE}C:\program files (x86)\pioneer\rekordbox 4.2.4\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\psvnfsd.exe No File
FirewallRules: [{6D58AB03-49CA-4A6E-BB35-EC7F63801951}] => (Allow) C:\Program Files\Vuze\Azureus.exe No File
FirewallRules: [{86DD3AAC-3254-428B-8407-0C44E691CB26}] => (Allow) C:\Program Files\Vuze\Azureus.exe No File
FirewallRules: [UDP Query User{01A7B6E5-0225-42FB-93C7-D5B0AF3AB37C}C:\program files (x86)\pioneer\rekordbox 4.0.2\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.2\rekordbox.exe No File
FirewallRules: [TCP Query User{A2034AFF-2933-4E76-A6E4-33FC733F2252}C:\program files (x86)\pioneer\rekordbox 4.0.2\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.2\rekordbox.exe No File
FirewallRules: [UDP Query User{6252D549-D247-4A56-AAED-074BF17BA80B}C:\program files (x86)\pioneer\rekordbox 4.0.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.2\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{F6B51DAF-840D-4426-8409-1D5915657A97}C:\program files (x86)\pioneer\rekordbox 4.0.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.2\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{03ECD949-F351-4400-B419-59000AAC515F}C:\program files (x86)\pioneer\rekordbox 4.0.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.2\psvnfsd.exe No File
FirewallRules: [TCP Query User{E4DE526E-4D2C-4356-A564-F12961181538}C:\program files (x86)\pioneer\rekordbox 4.0.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.2\psvnfsd.exe No File
FirewallRules: [TCP Query User{2BF2E6AA-B2BF-47EC-B39E-5BDD95190365}C:\program files\vuze\azureus.exe] => (Allow) C:\program files\vuze\azureus.exe No File
FirewallRules: [UDP Query User{EC489DB2-60F0-441E-BC5B-2886E910E55F}C:\program files\vuze\azureus.exe] => (Allow) C:\program files\vuze\azureus.exe No File
FirewallRules: [TCP Query User{27232ABF-BE6D-4DF8-B3BF-F361871DDCAF}C:\program files (x86)\far cry 4\bin\farcry4.exe] => (Allow) C:\program files (x86)\far cry 4\bin\farcry4.exe No File
FirewallRules: [UDP Query User{18AEA720-57CC-41F3-829B-B41C79B3A519}C:\program files (x86)\far cry 4\bin\farcry4.exe] => (Allow) C:\program files (x86)\far cry 4\bin\farcry4.exe No File
FirewallRules: [TCP Query User{FFF5D276-E35E-4E0A-8A98-01667002C9EF}C:\program files (x86)\xbmc\xbmc.exe] => (Allow) C:\program files (x86)\xbmc\xbmc.exe No File
FirewallRules: [UDP Query User{F6514FCB-283E-42B9-B8DA-8532715661F7}C:\program files (x86)\xbmc\xbmc.exe] => (Allow) C:\program files (x86)\xbmc\xbmc.exe No File
FirewallRules: [TCP Query User{63B3A4D0-24CC-41C2-B199-A24905AA8B88}C:\program files (x86)\pioneer\rekordbox 3.2.2\rekordbox 3.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.2.2\rekordbox 3.exe No File
FirewallRules: [UDP Query User{8535269D-4332-472A-AF40-C4948DADE8B0}C:\program files (x86)\pioneer\rekordbox 3.2.2\rekordbox 3.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.2.2\rekordbox 3.exe No File
FirewallRules: [TCP Query User{B3D2FDD9-AA9C-4C4C-80C4-90A3E08B42F4}C:\program files (x86)\pioneer\rekordbox 3.2.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.2.2\psvnfsd.exe No File
FirewallRules: [UDP Query User{AB202331-2727-4DBB-9ED4-0853B038E37D}C:\program files (x86)\pioneer\rekordbox 3.2.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.2.2\psvnfsd.exe No File
FirewallRules: [TCP Query User{C79BE9FE-7F3F-466F-A6A3-ADCEC88A521C}C:\program files (x86)\pioneer\rekordbox 3.2.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.2.2\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{04E830F2-B1E8-41DE-BC19-3AF1AC76EA2D}C:\program files (x86)\pioneer\rekordbox 3.2.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.2.2\psvlinksysmgr.exe No File
FirewallRules: [{FEB1D940-26AB-4A2B-A481-1A80CFCFC27A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{3A7DD7F3-AB34-4551-87F3-998398EC021E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{CE7159D0-0012-4AA8-BA20-C97C9B8AB6B7}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F1B60142-FE3A-4ED4-B375-0E5FBA7AA6B5}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{9C6EA718-C792-42A0-8475-7503CC7FBB64}C:\program files (x86)\pioneer\rekordbox 3.3.0\rekordbox 3.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\rekordbox 3.exe No File
FirewallRules: [UDP Query User{C17DC586-65CA-4D2C-9C7E-1891521EC8CA}C:\program files (x86)\pioneer\rekordbox 3.3.0\rekordbox 3.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\rekordbox 3.exe No File
FirewallRules: [TCP Query User{2D77D9E0-5388-47E5-AF71-1579225351EC}C:\program files (x86)\pioneer\rekordbox 3.3.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\psvnfsd.exe No File
FirewallRules: [UDP Query User{CD6EC7B6-2F89-425B-8740-FFFAE75A1A9A}C:\program files (x86)\pioneer\rekordbox 3.3.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\psvnfsd.exe No File
FirewallRules: [TCP Query User{C20697B2-E32B-4CD5-AE23-1A6A181B066A}C:\program files (x86)\pioneer\rekordbox 3.3.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{00E74F8E-AA20-4A24-A538-993A83C2F489}C:\program files (x86)\pioneer\rekordbox 3.3.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{2EE8C791-145B-4CF6-B484-E90909A60FBF}C:\program files (x86)\pioneer\rekordbox 4.0.1\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.1\psvnfsd.exe No File
FirewallRules: [UDP Query User{C58A611A-E23B-44DF-9D7B-F783F1018258}C:\program files (x86)\pioneer\rekordbox 4.0.1\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.1\psvnfsd.exe No File
FirewallRules: [TCP Query User{CAD4C767-8680-4405-BAE3-87B63E3B6BCB}C:\program files (x86)\pioneer\rekordbox 4.0.1\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.1\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{13330E86-2E25-4A0D-B51C-CF12F4772974}C:\program files (x86)\pioneer\rekordbox 4.0.1\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.1\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{9117174E-7038-4A5E-82C0-BEDBCB00E981}C:\program files (x86)\pioneer\rekordbox 4.0.1\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.1\rekordbox.exe No File
FirewallRules: [UDP Query User{12D860EF-27C2-4D00-B00F-1CFF9817E972}C:\program files (x86)\pioneer\rekordbox 4.0.1\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.1\rekordbox.exe No File
FirewallRules: [TCP Query User{1BF25A75-191A-4A72-92E6-96EB303732B1}C:\program files (x86)\pioneer\rekordbox 4.0.4\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\psvnfsd.exe No File
FirewallRules: [UDP Query User{4351150F-CD3D-4F0C-B9EA-6AD4B297EA76}C:\program files (x86)\pioneer\rekordbox 4.0.4\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\psvnfsd.exe No File
FirewallRules: [TCP Query User{0695387C-671E-4593-8D06-8A386ADFF944}C:\program files (x86)\pioneer\rekordbox 4.0.4\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{883EB7EC-3983-4845-BA0F-AA1F653F6311}C:\program files (x86)\pioneer\rekordbox 4.0.4\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{29628C64-E93B-4538-B793-DCF7F4E61988}C:\program files (x86)\pioneer\rekordbox 4.0.4\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\rekordbox.exe No File
FirewallRules: [UDP Query User{D57333C0-E16B-49C4-8E73-983CFBFC0780}C:\program files (x86)\pioneer\rekordbox 4.0.4\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\rekordbox.exe No File
FirewallRules: [TCP Query User{616619BA-DA2E-43A4-AA4D-BDD661DACCDD}C:\program files (x86)\pioneer\rekordbox 4.0.6\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\psvnfsd.exe No File
FirewallRules: [UDP Query User{209A37D0-C0B1-4003-B1E6-B3A1C40BBBA5}C:\program files (x86)\pioneer\rekordbox 4.0.6\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\psvnfsd.exe No File
FirewallRules: [TCP Query User{D55C1537-26F7-4CEA-AED6-EA9D3F4B0FAB}C:\program files (x86)\pioneer\rekordbox 4.0.6\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{B39F9C58-E6E6-481B-BBDD-06785FD12FCA}C:\program files (x86)\pioneer\rekordbox 4.0.6\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{B3FB374B-CF13-43CF-8795-348D4738009B}C:\program files (x86)\pioneer\rekordbox 4.0.6\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\rekordbox.exe No File
FirewallRules: [UDP Query User{D8DC4A0D-7EBC-4B1D-B46F-6AF4C238D26F}C:\program files (x86)\pioneer\rekordbox 4.0.6\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\rekordbox.exe No File
FirewallRules: [TCP Query User{1953F254-31FF-4688-82A9-2E63CEE980DE}C:\program files (x86)\pioneer\rekordbox 4.0.8\psvnfsd.exe] => (Block) C:\program files (x86)\pioneer\rekordbox 4.0.8\psvnfsd.exe No File
FirewallRules: [UDP Query User{E02FB0A3-1CF0-4AD2-9369-B29BF01C63A8}C:\program files (x86)\pioneer\rekordbox 4.0.8\psvnfsd.exe] => (Block) C:\program files (x86)\pioneer\rekordbox 4.0.8\psvnfsd.exe No File
FirewallRules: [TCP Query User{24CEF838-93EA-4282-A071-468B6774328B}C:\program files (x86)\pioneer\rekordbox 4.0.8\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.8\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{D673884A-E8AE-4B6C-950C-CBB7C2C10220}C:\program files (x86)\pioneer\rekordbox 4.0.8\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.8\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{7053C90C-3E5A-485A-9284-F00B2CF0CB82}C:\program files (x86)\pioneer\rekordbox 4.0.8\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.8\rekordbox.exe No File
FirewallRules: [UDP Query User{090D000C-E171-4928-95EF-B0A3FEB2E737}C:\program files (x86)\pioneer\rekordbox 4.0.8\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.8\rekordbox.exe No File
FirewallRules: [TCP Query User{070591E0-4726-4E7F-895A-2AFB1E34909A}C:\program files (x86)\pioneer\rekordbox 4.1.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\psvnfsd.exe No File
FirewallRules: [UDP Query User{FB9CD7D6-C84D-4881-A36D-39EAEB51E977}C:\program files (x86)\pioneer\rekordbox 4.1.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\psvnfsd.exe No File
FirewallRules: [TCP Query User{8187DBC6-DE1A-4F05-8AE3-A76CC05E879E}C:\program files (x86)\pioneer\rekordbox 4.1.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{39F1B626-389B-4AB2-AA81-29F38D2D0891}C:\program files (x86)\pioneer\rekordbox 4.1.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{87D3C823-9E9D-4997-8868-F506B29F70BD}C:\program files (x86)\pioneer\rekordbox 4.1.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\rekordbox.exe No File
FirewallRules: [UDP Query User{3099C262-06D8-4E55-9E15-20985FCD3516}C:\program files (x86)\pioneer\rekordbox 4.1.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\rekordbox.exe No File
FirewallRules: [TCP Query User{1C45B843-B67F-4368-A882-153C5FDF88F2}C:\program files (x86)\pioneer\rekordbox 4.1.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.2\psvnfsd.exe No File
FirewallRules: [UDP Query User{13AE1858-A83D-46C5-AEDC-64CD9C8D8B0C}C:\program files (x86)\pioneer\rekordbox 4.1.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.2\psvnfsd.exe No File
FirewallRules: [TCP Query User{BDD9F65B-B127-4BA2-BC96-BCAD7BDB175E}C:\program files (x86)\pioneer\rekordbox 4.1.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.2\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{27F2BA6B-86D1-40FB-9081-A434808E2A4B}C:\program files (x86)\pioneer\rekordbox 4.1.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.2\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{A34DCB6D-39D1-4488-B841-CFF9B917CB9A}C:\program files (x86)\pioneer\rekordbox 4.1.2\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.2\rekordbox.exe No File
FirewallRules: [UDP Query User{17E51C60-E3DB-44B4-A31B-FB321F863C8F}C:\program files (x86)\pioneer\rekordbox 4.1.2\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.2\rekordbox.exe No File
FirewallRules: [TCP Query User{4FDCC07A-3F62-4C4F-9C6C-84CA605AB4F2}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe (XBMC-Foundation) [File not signed]
FirewallRules: [UDP Query User{B8AF626D-5977-498A-8A79-93B2FB150622}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe (XBMC-Foundation) [File not signed]
FirewallRules: [TCP Query User{68962B76-60AB-4BE0-8253-B8D2541C6A5E}C:\program files (x86)\pioneer\rekordbox 4.2.1\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.1\psvnfsd.exe No File
FirewallRules: [UDP Query User{6F5FFAF1-13BA-47CC-AF9D-2650EECB76ED}C:\program files (x86)\pioneer\rekordbox 4.2.1\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.1\psvnfsd.exe No File
FirewallRules: [TCP Query User{A5450227-D043-4AAC-854E-069924AF670A}C:\program files (x86)\pioneer\rekordbox 4.2.1\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.1\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{1C136FB2-6E0E-42BC-BF06-97418FC39408}C:\program files (x86)\pioneer\rekordbox 4.2.1\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.1\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{17FAFBB5-C81A-4E7C-BEF3-CAC09F5D6588}C:\program files (x86)\pioneer\rekordbox 4.2.1\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.1\rekordbox.exe No File
FirewallRules: [UDP Query User{376B6609-1BA7-4C4E-993A-72E04303920B}C:\program files (x86)\pioneer\rekordbox 4.2.1\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.1\rekordbox.exe No File
FirewallRules: [TCP Query User{E2D7CB05-5603-426D-A5EF-74F46B47D53E}C:\program files (x86)\pioneer\rekordbox 4.2.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.2\psvnfsd.exe No File
FirewallRules: [UDP Query User{8905BC0D-0500-44F6-9610-23011F4FDFE9}C:\program files (x86)\pioneer\rekordbox 4.2.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.2\psvnfsd.exe No File
FirewallRules: [TCP Query User{82DB47F2-B023-4EC0-9E64-F1FEA5378118}C:\program files (x86)\pioneer\rekordbox 4.2.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.2\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{8B00C7A0-B08F-4A08-9DB7-F9EB5CF87752}C:\program files (x86)\pioneer\rekordbox 4.2.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.2\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{20A0078D-B906-4075-BBB9-891129216BAD}C:\program files (x86)\pioneer\rekordbox 4.2.2\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.2\rekordbox.exe No File
FirewallRules: [UDP Query User{2CA77B23-5942-4106-9ADD-BE97AD6224A2}C:\program files (x86)\pioneer\rekordbox 4.2.2\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.2\rekordbox.exe No File
FirewallRules: [TCP Query User{566CCB9A-1D76-42F8-ACC5-48178BDA9434}C:\program files (x86)\pioneer\rekordbox 4.5.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\psvnfsd.exe (Pioneer DJ Corporation -> Pioneer Corporation.)
FirewallRules: [UDP Query User{5A40CDA8-A66B-427C-96A3-6FBF7B5C6519}C:\program files (x86)\pioneer\rekordbox 4.5.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\psvnfsd.exe (Pioneer DJ Corporation -> Pioneer Corporation.)
FirewallRules: [TCP Query User{3B0CD9C3-C2A0-41C7-83C3-49340292EC9F}C:\program files (x86)\pioneer\rekordbox 4.5.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\psvlinksysmgr.exe (Pioneer DJ Corporation -> Pioneer DJ Corporation.)
FirewallRules: [UDP Query User{4652D61B-7747-45C5-BE30-DCEC32B5873D}C:\program files (x86)\pioneer\rekordbox 4.5.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\psvlinksysmgr.exe (Pioneer DJ Corporation -> Pioneer DJ Corporation.)
FirewallRules: [TCP Query User{E221CA3A-24FF-4394-A2D4-756D32689B15}C:\program files (x86)\pioneer\rekordbox 4.5.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\rekordbox.exe (Pioneer DJ Corporation -> Pioneer DJ Corporation)
FirewallRules: [UDP Query User{D8C0D318-347F-41F2-B82D-60581718CB4D}C:\program files (x86)\pioneer\rekordbox 4.5.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\rekordbox.exe (Pioneer DJ Corporation -> Pioneer DJ Corporation)
FirewallRules: [TCP Query User{32DBA8EF-5BD0-4EEA-BFBD-68E4E2F7A9B5}C:\program files (x86)\pioneer\rekordbox 4.5.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\psvnfsd.exe (Pioneer DJ Corporation -> Pioneer Corporation.)
FirewallRules: [UDP Query User{92493C55-1EE8-4B3D-8146-7809AA276FF8}C:\program files (x86)\pioneer\rekordbox 4.5.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\psvnfsd.exe (Pioneer DJ Corporation -> Pioneer Corporation.)
FirewallRules: [TCP Query User{8A645FA0-9C73-4EFC-B323-66CD62C3C8B8}C:\program files (x86)\pioneer\rekordbox 4.5.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\psvlinksysmgr.exe (Pioneer DJ Corporation -> Pioneer DJ Corporation.)
FirewallRules: [UDP Query User{C2340C67-96AF-40C6-B842-75A8ABB48F55}C:\program files (x86)\pioneer\rekordbox 4.5.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\psvlinksysmgr.exe (Pioneer DJ Corporation -> Pioneer DJ Corporation.)
FirewallRules: [TCP Query User{2A8C690E-B7F1-4D65-B4E9-B43F0DF9A645}C:\program files (x86)\pioneer\rekordbox 4.5.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\rekordbox.exe (Pioneer DJ Corporation -> Pioneer DJ Corporation)
FirewallRules: [UDP Query User{68185D26-1A89-4666-ACFF-7BB0BDE8F516}C:\program files (x86)\pioneer\rekordbox 4.5.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\rekordbox.exe (Pioneer DJ Corporation -> Pioneer DJ Corporation)
FirewallRules: [TCP Query User{7BAEFA0F-42FA-4EE9-9249-3E18216CA6F7}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe (XBMC-Foundation) [File not signed]
FirewallRules: [UDP Query User{90A76CCA-F37F-4EF1-9744-4177462DADFB}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe (XBMC-Foundation) [File not signed]
FirewallRules: [{A51866B1-1CA3-4432-BCF9-38BA67FE1698}] => (Allow) C:\Program Files (x86)\Vuze\Azureus.exe (Azureus Software, Inc. -> Azureus Software, Inc)
FirewallRules: [{1F7BC6BE-2CB4-4B28-916D-1DE0ABE0CD97}] => (Allow) C:\Program Files (x86)\Vuze\Azureus.exe (Azureus Software, Inc. -> Azureus Software, Inc)
FirewallRules: [TCP Query User{10A7FA5A-3AC1-40D6-A616-BD17855EEAAD}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{526E7677-636C-429E-84DF-2AE272999C47}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{69320998-3E0F-4771-9D14-686A216F18EE}] => (Allow) C:\Program Files\Plex\Plex Media Player\PlexMediaPlayer.exe (Plex, Inc -> )
FirewallRules: [{FC33D97E-DAFD-4458-B04E-AB6AB45349F1}] => (Allow) C:\Program Files\Plex\Plex Media Player\PMPHelper.exe () [File not signed]
FirewallRules: [{B5FD4324-C36F-48DA-B1F2-D1021EE9A167}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{F5E7F39E-8D13-4B93-B6A4-28DBAF0F6F54}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{A3358224-651C-41A9-AC7C-552B68D66B34}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{085A9798-B062-439C-B098-09A9366BAED3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{E6C4EBDC-6CE0-4985-A864-1D101A969778}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{AB0F1F1C-E2DE-4194-9899-CB48DA32A918}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{7A118EB4-00F7-4AA4-86BF-8DE1502A45D5}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{870DEF38-2764-48FA-8A21-8814FA3EC605}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E0A38503-8D4F-425F-8779-183BBC70D306}] => (Allow) C:\Users\Office PC\Desktop\Microsoft Office 2019\Crack\OfficeFixes\win_x64\vlmcsd.exe No File
FirewallRules: [{C129578D-DD0F-4CEA-B674-CB59DABEE97F}] => (Allow) C:\Users\Office PC\Desktop\Microsoft Office 2019\Crack\OfficeFixes\win_x64\vlmcsd.exe No File
FirewallRules: [{23161DFC-8665-48B1-B431-99C0CAC533B0}] => (Allow) C:\Users\Office PC\Desktop\Microsoft Office 2019\Crack\OfficeFixes\win_x64\FakeClient.exe No File
FirewallRules: [{3F84AA58-9686-4AA0-B829-CA498A97C892}] => (Allow) C:\Users\Office PC\Desktop\Microsoft Office 2019\Crack\OfficeFixes\win_x64\FakeClient.exe No File
FirewallRules: [{C7940006-3324-4448-88F0-B4BA7DA25D4A}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4C6DFCA4-5BF0-43CE-BC11-395252CFB2EE}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{5D417251-DD57-43CA-A8A3-29370C5F74C4}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CA9EDE06-AC1E-4756-9439-944C860A8FEB}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{63F166E8-2BA2-4523-9020-1C2BFFCE09CB}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{3AE86ADC-ACC2-4719-BE10-27670B05DC20}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{D4A8E572-161B-40FB-9173-851205EFEFE6}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{03D11B16-C167-484F-80B7-67F8B5054984}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0C3B833A-EB22-48C9-8792-8061385F8FF6}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{B6C3FE5F-3D19-4DB2-82EB-9C1197560AD0}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F1D7D9D8-11D8-4146-84B8-995192EE7F2A}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{AF092756-65EE-4E31-9241-914F108F5060}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{95823A84-8378-45CD-A0C5-61DD47708960}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C76A4E4D-77A6-491A-8D1B-087AD2545CB7}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{D0F7CBFF-45EB-435E-8DC0-5D37339505C6}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{3DFB2A1A-E67D-47B2-B924-CAA72F09ED0B}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{DA18C3DF-DCBD-4F7C-8A92-36D7D114F659}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{302833F2-B778-4F1A-8697-9D06A3316973}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{14571879-DDC6-48EA-8A31-FCADFE1E2475}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4456182E-AF6B-4F74-920A-137AC4197124}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{52DCDBFE-4C63-438F-8D90-6587467E9903}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{6F249DFD-B74B-477A-A329-E94E377DADAE}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{239FEC0C-8EF7-41DC-85D5-C43F46B6216D}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{BDAE623D-523C-4E3D-8C48-CA9B0FD23B06}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{CFEEE174-C59F-4D25-BA7D-9F381C3E329F}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{7448DDC4-80E6-47AE-AE6D-53B8FFCF1F69}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{571E4784-1EBC-4963-B9AB-6B5374B172E3}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C97D9CA0-445B-4617-8FD3-7FB42ED2BBC0}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe (Plex, Inc -> Plex, Inc.)
FirewallRules: [{7C9E25EB-9D07-43A8-8221-72E1C9372C19}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe (Plex, Inc -> Python Software Foundation)
FirewallRules: [{7A70A73D-FDB9-47BC-90F1-47BA1884E4BE}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex DLNA Server.exe (Plex, Inc -> Plex, Inc.)
FirewallRules: [{7941CDFA-CF20-4E86-96C9-B751A51F0910}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe (Plex, Inc -> )
FirewallRules: [{3192D831-0783-4C26-94C0-B8029DF5671A}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{73AF9150-2217-4B01-9500-67AD6F76CFAC}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{AF4F25D8-3538-435A-AD20-1ABAC9E41F92}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{BBB04EBA-FAB3-48BF-AE14-003CDD857EA0}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{FACC9259-094A-48F0-AF66-E6D80C2A9089}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{6F56B038-1938-4B4B-9BB7-298458CDDC87}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{66DEEED2-8650-433B-A899-C754FF17A6C3}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C0E0E718-C9EC-4AA2-B2F5-29A7DCEF1FE8}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F4E6B148-C691-4791-842B-258D7C1F00EF}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{846EA420-0F97-4114-9CC9-CE13F4E3BEE0}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{841F6F77-C754-447B-860B-2A6355EFE070}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{2AA3AFFA-C128-4E26-9C42-2253E9B98FFF}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{391F5BB1-F746-4597-97D3-8FCE01213C22}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{958CD2FE-1581-4A69-A2AA-57084E22B275}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{BDFEC31E-4543-470C-A874-25F4832FF304}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{AE4A3F19-96C0-4A56-B72B-5E7B6C669756}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4B00294B-C3D1-49A2-9679-B222871E44CE}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C1FB728A-F1AE-411A-9D84-C66FBF237A34}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{CCDA6DE6-E638-4B34-BD85-D3B3921F4DCD}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{56401A91-2695-4E85-A63F-9184342464AF}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{29CD6077-AA28-4DD2-A2A2-060A20E6877D}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{E92F43F4-FDB1-4D19-9235-769D681FE8F8}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{020EF55C-3C94-42A1-B313-1FDB6C162EC0}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{DE5C456C-0345-4539-A8AF-756FF87A13E6}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{5A472341-84AF-40D8-92BD-5AC989CAC76C}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F9AE86DF-C2AC-4437-B37E-F93FC491AC89}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{A514091E-EA67-4AC1-BD10-89B97F28C75F}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{DCF3A79D-CADA-4B25-A350-1E60E4995E3E}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{6CFD0E82-AB0F-46AC-A65F-E660BD2F248C}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{35632B82-7F75-4547-B769-BD952B4CA95B}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{083E0017-740D-4DAA-B1C3-685E70B709CB}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{90689765-F94C-4CBF-BE85-97C50471809E}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{BD3DA248-B537-4551-83CB-6A612EBF0DD8}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{1DDBD690-9509-4E5C-AC91-3342E67E266D}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{559D2D92-A0D8-4E34-B45E-692D4E54BFC4}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F10CB7B9-0941-4C9F-BC71-F9DAEAD6B328}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{11742E77-A27E-4A8C-96F6-A66B30B861B4}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{1379995F-4E76-4DDC-9388-C8E67E07CAFA}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{030F2C57-AB7D-49AA-8F0B-DA0398EB1964}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0E960F29-D9CB-4418-B8B3-9B7D0A0D1933}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{63A4971D-2881-4C63-9490-CBE0E3FD9434}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{96642132-2B65-432A-81D4-B8E76B563FD9}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{56AF4B2E-EE0D-4A2D-B18F-8E7A0FF547B4}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0997887F-11AB-4763-A2E3-7759C44CE210}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{FF397C1D-695C-40AA-B740-ED212B1A7748}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{2BF41F3C-3D3B-481D-9D64-AC95FCEEF009}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{1A87017C-65F9-480F-AEE8-D0C613559D51}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4F4DF99B-7448-410A-AC00-613254268777}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{41C1D557-F24D-4021-86F4-ABB2BB687645}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4F42887C-2D8B-46D6-8D27-DA803B011233}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{220C7136-4D8F-4376-91BC-9EEC21FC34AE}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{86A651A0-1163-458A-8CDB-EC506E228959}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{90679069-6382-4740-810C-E1F412508BA2}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4D58E217-0D0B-4B6A-9127-0CA104FEA6F0}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C317FF5C-E8C7-44CE-ADCE-66347842BECF}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{D9C88254-6FBA-4B45-ADDF-792BF84D4DB9}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{7B28E8F4-0ACD-486E-8BE0-E1FCE56769F1}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
 
==================== Codecs (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Drivers32: [vidc.ffds] => C:\WINDOWS\system32\ff_vfw.dll [127488 2014-05-13] () [File not signed]
HKLM\...\Drivers32: [vidc.ffds] => C:\Windows\SysWOW64\ff_vfw.dll [112640 2014-05-13] () [File not signed]
HKLM\...\Drivers32: [vidc.xvid] => C:\Windows\SysWOW64\xvidvfw.dll [235520 2014-04-08] () [File not signed]
HKLM\...\Drivers32: [vidc.x264] => C:\Windows\SysWOW64\x264vfw.dll [4102656 2013-12-16] (x264vfw project) [File not signed]
HKLM\...\Drivers32: [vidc.lags] => C:\Windows\SysWOW64\lagarith.dll [216064 2013-12-16] ( ) [File not signed]
HKLM\...\Drivers32: [msacm.divxa32] => C:\Windows\SysWOW64\DivXa32.acm [291408 2013-12-16] (Packed With Joy !) [File not signed]
HKLM\...\Drivers32: [msacm.vorbis] => C:\Windows\SysWOW64\vorbis.acm [1554944 2009-09-15] (HMS hxxp://hp.vector.co.jp/authors/VA012897/) [File not signed]
 
==================== Restore Points =========================
 
17-09-2019 05:45:54 Scheduled Checkpoint
26-09-2019 18:07:28 Scheduled Checkpoint
 
==================== Faulty Device Manager Devices =============
 
Name: USB Mass Storage Device
Description: USB Mass Storage Device
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: Compatible USB storage device
Service: USBSTOR
Problem: : Windows cannot use this hardware device because it has been prepared for safe removal, but it has not been removed from the computer. (Code 47)
Resolution: Unplug the device, and then plug it in again. Alternately, restart the computer to make the device available.
 
Name: Standard PS/2 Keyboard
Description: Standard PS/2 Keyboard
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard keyboards)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (09/28/2019 12:09:16 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Microsoft.Photos.exe version 2019.19071.17920.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
 
Process ID: 2cd0
 
Start Time: 01d5756e35b008eb
 
Termination Time: 4294967295
 
Application Path: C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.17920.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
 
Report Id: b854b07c-c0f4-4ee7-a6ec-982650ed1620
 
Faulting package full name: Microsoft.Windows.Photos_2019.19071.17920.0_x64__8wekyb3d8bbwe
 
Faulting package-relative application ID: App
 
Error: (09/26/2019 05:28:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname OfficePC-PC.local already in use; will try OfficePC-PC-2.local instead
 
Error: (09/26/2019 05:28:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister    4 OfficePC-PC.local. Addr 192.168.0.19
 
Error: (09/26/2019 05:28:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.19:5353   16 OfficePC-PC.local. AAAA 2607:FEA8:BE1F:F841:0000:0000:0000:0005
 
Error: (09/26/2019 05:27:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname OfficePC-PC.local already in use; will try OfficePC-PC-2.local instead
 
Error: (09/26/2019 05:27:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 0; will deregister    4 OfficePC-PC.local. Addr 192.168.0.19
 
Error: (09/26/2019 05:27:57 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.19:5353   16 OfficePC-PC.local. AAAA 2607:FEA8:BE1F:F841:0000:0000:0000:0005
 
Error: (09/25/2019 08:01:19 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Activation context generation failed for "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest".Error in manifest or policy file "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL" on line 1.
Component identity found in manifest does not match the identity of the component requested.
Reference is UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
Definition is UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Please use sxstrace.exe for detailed diagnosis.
 
 
System errors:
=============
Error: (09/27/2019 06:37:49 PM) (Source: DCOM) (EventID: 10016) (User: OfficePC-PC)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
 and APPID 
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
 to the user OfficePC-PC\Office PC SID (S-1-5-21-2488212447-1855921873-862638463-1000) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). This security permission can be modified using the Component Services administrative tool.
 
Error: (09/27/2019 06:17:07 PM) (Source: DCOM) (EventID: 10000) (User: NT AUTHORITY)
Description: Unable to start a DCOM Server: {3C296D07-90AE-4FAC-86F9-65EAA8B82D22}. The error:
"5"
Happened while starting this command:
C:\WINDOWS\system32\SppExtComObj.exe -Embedding
 
Error: (09/27/2019 06:17:07 PM) (Source: DCOM) (EventID: 10000) (User: NT AUTHORITY)
Description: Unable to start a DCOM Server: {3C296D07-90AE-4FAC-86F9-65EAA8B82D22}. The error:
"5"
Happened while starting this command:
C:\WINDOWS\system32\SppExtComObj.exe -Embedding
 
Error: (09/26/2019 06:37:16 PM) (Source: DCOM) (EventID: 10016) (User: OfficePC-PC)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
 and APPID 
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
 to the user OfficePC-PC\Office PC SID (S-1-5-21-2488212447-1855921873-862638463-1000) from address LocalHost (Using LRPC) running in the application container Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). This security permission can be modified using the Component Services administrative tool.
 
Error: (09/26/2019 05:48:22 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscDataProtection
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Error: (09/26/2019 05:48:22 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID 
Windows.SecurityCenter.WscBrokerManager
 and APPID 
Unavailable
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Error: (09/26/2019 05:46:44 PM) (Source: DCOM) (EventID: 10016) (User: OfficePC-PC)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user OfficePC-PC\Office PC SID (S-1-5-21-2488212447-1855921873-862638463-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
 
Error: (09/26/2019 05:43:46 PM) (Source: DCOM) (EventID: 10000) (User: NT AUTHORITY)
Description: Unable to start a DCOM Server: {3C296D07-90AE-4FAC-86F9-65EAA8B82D22}. The error:
"5"
Happened while starting this command:
C:\WINDOWS\system32\SppExtComObj.exe -Embedding
 
 
Windows Defender:
===================================
Date: 2019-09-07 16:33:25.373
Description: 
Windows Defender Antivirus scan has been stopped before completion.
Scan ID: {CAE32280-3509-4940-B220-18B81F38A0D4}
Scan Type: Antimalware
Scan Parameters: Quick Scan
 
CodeIntegrity:
===================================
 
Date: 2018-10-03 15:59:50.814
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
 
Date: 2018-10-03 15:48:24.144
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
 
Date: 2018-10-03 15:47:52.480
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
 
Date: 2018-10-02 23:10:38.172
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
 
Date: 2018-10-02 21:06:44.160
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
 
Date: 2018-10-02 21:06:22.464
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
 
Date: 2018-10-02 21:03:58.078
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
 
Date: 2018-10-02 21:02:03.406
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
 
==================== Memory info =========================== 
 
BIOS: American Megatrends Inc. 1008 04/01/2008
Motherboard: ASUSTeK Computer INC. P5K SE
Processor: Intel® Core™2 Duo CPU E6750 @ 2.66GHz
Percentage of memory in use: 45%
Total physical RAM: 7167.11 MB
Available physical RAM: 3936.53 MB
Total Virtual: 15260.77 MB
Available Virtual: 10010.17 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:930.97 GB) (Free:702.39 GB) NTFS
Drive f: (Seagate Backup Plus Drive) (Fixed) (Total:7451.91 GB) (Free:4454.18 GB) NTFS
 
\\?\Volume{15ec17a7-e2a2-11e3-9e42-806e6f6e6963}\ (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS
\\?\Volume{915f062f-0000-0000-0000-90c4e8000000}\ () (Fixed) (Total:0.44 GB) (Free:0.06 GB) NTFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 915F062F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
 
========================================================
Disk: 1 (Size: 7452 GB) (Disk ID: 9FC4602D)
 
Partition: GPT.
 
==================== End of Addition.txt ============================

  • 0

#4
icotonev

icotonev

    Trusted Helper

  • Malware Removal
  • 16 posts

Hello again..! 

 

Farbar Recovery Scan Tool - Fix

 

  • Highlight the contents of the below code box and press Ctrl + C on your keyboard:
Start::
CreateRestorePoint:
EmptyTemp:
CloseProcesses:
Task: {18D22941-40A6-43EF-89F4-315DADCBDC53} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {1F41E191-05EC-4169-8439-612041C75F32} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {3FB5ED31-DB98-4A8C-BDCB-CBB3C3DE34DB} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION
Task: {41428A31-F62F-49BB-AA88-0026D4F204EF} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {43C9E783-D1A6-4EAF-9D8D-9DF24B772CAA} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {5F600903-3463-4D7D-9934-8D2AFEA54B35} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {8CF6E8DB-58B7-437A-8D64-6FC280411D60} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {A143C136-762D-4685-A7AB-9D057F072D81} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {B63E0357-2763-49C3-8845-285F22E37E96} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {D43F7585-C03D-42C9-A193-B6BEE2EB03C9} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {DBB60476-7506-425D-8694-1828376E76ED} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {EBBF393A-4544-451E-AEE3-F893A49B4BE5} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {FF816777-1A02-4032-A6CC-62BBD150D561} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
U3 idsvc; no ImagePath
CustomCLSID: HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Office PC\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{1BEAC3E3-B852-44F4-B468-8906C062422E}\localserver32 -> "C:\Users\Office PC\AppData\Local\Google\Chrome SxS\Application\41.0.2224.2\delegate_execute.exe" => No File
CustomCLSID: HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Office PC\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Office PC\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Office PC\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Office PC\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll => No File
ContextMenuHandlers1: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\Program Files (x86)\AIMP\System\aimp_menu64.dll -> No File
ContextMenuHandlers4: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\Program Files (x86)\AIMP\System\aimp_menu64.dll -> No File
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} =>  -> No File
FirewallRules: [UDP Query User{71338094-4111-4124-87D3-6EF0D09D78A3}C:\program files\pioneer\rekordbox 5.2.2\rekordbox.exe] => (Allow) C:\program files\pioneer\rekordbox 5.2.2\rekordbox.exe No File
FirewallRules: [TCP Query User{D3EBE4DC-AE16-4EFE-90B8-569792210FF7}C:\program files\pioneer\rekordbox 5.2.2\rekordbox.exe] => (Allow) C:\program files\pioneer\rekordbox 5.2.2\rekordbox.exe No File
FirewallRules: [UDP Query User{FA250FFC-4AFB-4F90-81F8-305DD11E0C10}C:\program files\pioneer\rekordbox 5.2.2\psvlinksysmgr.exe] => (Allow) C:\program files\pioneer\rekordbox 5.2.2\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{D3B895B6-7F4C-47D4-85F8-99A4D75E40F2}C:\program files\pioneer\rekordbox 5.2.2\psvlinksysmgr.exe] => (Allow) C:\program files\pioneer\rekordbox 5.2.2\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{95FBDD43-992E-4C02-B40C-A8BDC34E9E53}C:\program files\pioneer\rekordbox 5.2.2\psvnfsd.exe] => (Allow) C:\program files\pioneer\rekordbox 5.2.2\psvnfsd.exe No File
FirewallRules: [TCP Query User{3BA6C42C-FA74-4971-8E85-553A2F977C12}C:\program files\pioneer\rekordbox 5.2.2\psvnfsd.exe] => (Allow) C:\program files\pioneer\rekordbox 5.2.2\psvnfsd.exe No File
FirewallRules: [UDP Query User{E171B90D-0034-4FFC-9E0A-8517869B148A}C:\program files\perfectplayer\jre\bin\javaw.exe] => (Allow) C:\program files\perfectplayer\jre\bin\javaw.exe No File
FirewallRules: [TCP Query User{EA5C7E95-4901-4BEF-8E76-351CE5C2CF42}C:\program files\perfectplayer\jre\bin\javaw.exe] => (Allow) C:\program files\perfectplayer\jre\bin\javaw.exe No File
FirewallRules: [UDP Query User{C62FC86D-EF1B-41FC-84DB-FF9EA3338BDE}C:\program files (x86)\pioneer\rekordbox 4.3.1\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.1\rekordbox.exe No File
FirewallRules: [TCP Query User{9AFC1A7B-9462-4E7C-98D2-7D155427BF3E}C:\program files (x86)\pioneer\rekordbox 4.3.1\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.1\rekordbox.exe No File
FirewallRules: [UDP Query User{53D091DC-3EAF-4F64-B37E-88F9C947FD83}C:\program files (x86)\pioneer\rekordbox 4.3.1\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.1\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{26C10B7B-90BD-4E8A-8412-A39315BE2E00}C:\program files (x86)\pioneer\rekordbox 4.3.1\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.1\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{95654D0D-8D1E-42D5-B40C-7472C54DFE50}C:\program files (x86)\pioneer\rekordbox 4.3.1\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.1\psvnfsd.exe No File
FirewallRules: [TCP Query User{2B80635F-0430-42EB-8D4A-B388C7D0F012}C:\program files (x86)\pioneer\rekordbox 4.3.1\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.1\psvnfsd.exe No File
FirewallRules: [UDP Query User{66E6AB99-0529-4D3F-BFAF-BCA86B3F4292}C:\program files (x86)\pioneer\rekordbox 4.3.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.0\rekordbox.exe No File
FirewallRules: [TCP Query User{D8D98D62-EF6B-45E9-90CD-104479380BDB}C:\program files (x86)\pioneer\rekordbox 4.3.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.0\rekordbox.exe No File
FirewallRules: [UDP Query User{01A430C8-329B-44A4-86B9-39E6F721EF13}C:\program files (x86)\pioneer\rekordbox 4.3.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.0\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{6AE495BD-E237-4389-BCB0-9F903F3FA2EF}C:\program files (x86)\pioneer\rekordbox 4.3.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.0\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{36D33B87-2B66-4F42-88CD-D494EB0B29CF}C:\program files (x86)\pioneer\rekordbox 4.3.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.0\psvnfsd.exe No File
FirewallRules: [TCP Query User{2597AD93-B4E7-420E-9024-9BFA24670CCF}C:\program files (x86)\pioneer\rekordbox 4.3.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.0\psvnfsd.exe No File
FirewallRules: [{13F94000-72C5-44D0-B15C-D990DC6FF101}] => (Allow) C:\Users\Office PC\AppData\Local\Temp\7zS78BB\HP.EasyStart.exe No File
FirewallRules: [UDP Query User{E8323A86-E14F-4780-9898-45B142D5CE14}C:\program files (x86)\pioneer\rekordbox 4.2.5\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.5\rekordbox.exe No File
FirewallRules: [TCP Query User{0B785053-9696-4988-B130-189BCF1996B4}C:\program files (x86)\pioneer\rekordbox 4.2.5\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.5\rekordbox.exe No File
FirewallRules: [UDP Query User{6D18093D-BFA9-433F-AB96-E9DA8BC801E2}C:\program files (x86)\pioneer\rekordbox 4.2.5\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.5\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{F95C63B9-EDBB-400F-A10A-D82C70D4F261}C:\program files (x86)\pioneer\rekordbox 4.2.5\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.5\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{A707DC1E-4486-4FBA-8B73-9191CDF510A9}C:\program files (x86)\pioneer\rekordbox 4.2.5\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.5\psvnfsd.exe No File
FirewallRules: [TCP Query User{AD6DF718-3C81-409B-8F3E-3A6B7A24BCE5}C:\program files (x86)\pioneer\rekordbox 4.2.5\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.5\psvnfsd.exe No File
FirewallRules: [{A29A66BE-5AEA-4098-BDF1-28AA6F3EFE4B}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe No File
FirewallRules: [{E26B8369-CCBA-4C2F-8E33-D7756E9F3F42}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe No File
FirewallRules: [{B613E517-63DE-4057-9C76-E9FDE42D4F34}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe No File
FirewallRules: [{50E38E07-75EA-4338-8A6D-F4FDA8A543B7}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe No File
FirewallRules: [UDP Query User{B1583B16-7FFD-4F38-B3AF-EAB6B32DF1D2}C:\program files (x86)\pioneer\rekordbox 4.2.4\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\rekordbox.exe No File
FirewallRules: [TCP Query User{51F5EB12-AEAE-4ABB-85BD-D1C76597942F}C:\program files (x86)\pioneer\rekordbox 4.2.4\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\rekordbox.exe No File
FirewallRules: [UDP Query User{4132752B-47BA-4E7A-BC30-D438BA6BB588}C:\program files (x86)\pioneer\rekordbox 4.2.4\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{32991C82-0257-4B80-879F-D41224D0D353}C:\program files (x86)\pioneer\rekordbox 4.2.4\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{1AAE85DC-F59F-4A2E-9BF7-5BBCE1BA4109}C:\program files (x86)\pioneer\rekordbox 4.2.4\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\psvnfsd.exe No File
FirewallRules: [TCP Query User{D05660BA-696F-4E54-BD34-2A3E247E8CCE}C:\program files (x86)\pioneer\rekordbox 4.2.4\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\psvnfsd.exe No File
FirewallRules: [{6D58AB03-49CA-4A6E-BB35-EC7F63801951}] => (Allow) C:\Program Files\Vuze\Azureus.exe No File
FirewallRules: [{86DD3AAC-3254-428B-8407-0C44E691CB26}] => (Allow) C:\Program Files\Vuze\Azureus.exe No File
FirewallRules: [UDP Query User{01A7B6E5-0225-42FB-93C7-D5B0AF3AB37C}C:\program files (x86)\pioneer\rekordbox 4.0.2\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.2\rekordbox.exe No File
FirewallRules: [TCP Query User{A2034AFF-2933-4E76-A6E4-33FC733F2252}C:\program files (x86)\pioneer\rekordbox 4.0.2\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.2\rekordbox.exe No File
FirewallRules: [UDP Query User{6252D549-D247-4A56-AAED-074BF17BA80B}C:\program files (x86)\pioneer\rekordbox 4.0.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.2\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{F6B51DAF-840D-4426-8409-1D5915657A97}C:\program files (x86)\pioneer\rekordbox 4.0.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.2\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{03ECD949-F351-4400-B419-59000AAC515F}C:\program files (x86)\pioneer\rekordbox 4.0.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.2\psvnfsd.exe No File
FirewallRules: [TCP Query User{E4DE526E-4D2C-4356-A564-F12961181538}C:\program files (x86)\pioneer\rekordbox 4.0.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.2\psvnfsd.exe No File
FirewallRules: [TCP Query User{2BF2E6AA-B2BF-47EC-B39E-5BDD95190365}C:\program files\vuze\azureus.exe] => (Allow) C:\program files\vuze\azureus.exe No File
FirewallRules: [UDP Query User{EC489DB2-60F0-441E-BC5B-2886E910E55F}C:\program files\vuze\azureus.exe] => (Allow) C:\program files\vuze\azureus.exe No File
FirewallRules: [TCP Query User{27232ABF-BE6D-4DF8-B3BF-F361871DDCAF}C:\program files (x86)\far cry 4\bin\farcry4.exe] => (Allow) C:\program files (x86)\far cry 4\bin\farcry4.exe No File
FirewallRules: [UDP Query User{18AEA720-57CC-41F3-829B-B41C79B3A519}C:\program files (x86)\far cry 4\bin\farcry4.exe] => (Allow) C:\program files (x86)\far cry 4\bin\farcry4.exe No File
FirewallRules: [TCP Query User{FFF5D276-E35E-4E0A-8A98-01667002C9EF}C:\program files (x86)\xbmc\xbmc.exe] => (Allow) C:\program files (x86)\xbmc\xbmc.exe No File
FirewallRules: [UDP Query User{F6514FCB-283E-42B9-B8DA-8532715661F7}C:\program files (x86)\xbmc\xbmc.exe] => (Allow) C:\program files (x86)\xbmc\xbmc.exe No File
FirewallRules: [TCP Query User{63B3A4D0-24CC-41C2-B199-A24905AA8B88}C:\program files (x86)\pioneer\rekordbox 3.2.2\rekordbox 3.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.2.2\rekordbox 3.exe No File
FirewallRules: [UDP Query User{8535269D-4332-472A-AF40-C4948DADE8B0}C:\program files (x86)\pioneer\rekordbox 3.2.2\rekordbox 3.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.2.2\rekordbox 3.exe No File
FirewallRules: [TCP Query User{B3D2FDD9-AA9C-4C4C-80C4-90A3E08B42F4}C:\program files (x86)\pioneer\rekordbox 3.2.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.2.2\psvnfsd.exe No File
FirewallRules: [UDP Query User{AB202331-2727-4DBB-9ED4-0853B038E37D}C:\program files (x86)\pioneer\rekordbox 3.2.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.2.2\psvnfsd.exe No File
FirewallRules: [TCP Query User{C79BE9FE-7F3F-466F-A6A3-ADCEC88A521C}C:\program files (x86)\pioneer\rekordbox 3.2.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.2.2\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{04E830F2-B1E8-41DE-BC19-3AF1AC76EA2D}C:\program files (x86)\pioneer\rekordbox 3.2.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.2.2\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{9C6EA718-C792-42A0-8475-7503CC7FBB64}C:\program files (x86)\pioneer\rekordbox 3.3.0\rekordbox 3.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\rekordbox 3.exe No File
FirewallRules: [UDP Query User{C17DC586-65CA-4D2C-9C7E-1891521EC8CA}C:\program files (x86)\pioneer\rekordbox 3.3.0\rekordbox 3.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\rekordbox 3.exe No File
FirewallRules: [TCP Query User{2D77D9E0-5388-47E5-AF71-1579225351EC}C:\program files (x86)\pioneer\rekordbox 3.3.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\psvnfsd.exe No File
FirewallRules: [UDP Query User{CD6EC7B6-2F89-425B-8740-FFFAE75A1A9A}C:\program files (x86)\pioneer\rekordbox 3.3.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\psvnfsd.exe No File
FirewallRules: [TCP Query User{C20697B2-E32B-4CD5-AE23-1A6A181B066A}C:\program files (x86)\pioneer\rekordbox 3.3.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{00E74F8E-AA20-4A24-A538-993A83C2F489}C:\program files (x86)\pioneer\rekordbox 3.3.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{2EE8C791-145B-4CF6-B484-E90909A60FBF}C:\program files (x86)\pioneer\rekordbox 4.0.1\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.1\psvnfsd.exe No File
FirewallRules: [UDP Query User{C58A611A-E23B-44DF-9D7B-F783F1018258}C:\program files (x86)\pioneer\rekordbox 4.0.1\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.1\psvnfsd.exe No File
FirewallRules: [TCP Query User{CAD4C767-8680-4405-BAE3-87B63E3B6BCB}C:\program files (x86)\pioneer\rekordbox 4.0.1\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.1\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{13330E86-2E25-4A0D-B51C-CF12F4772974}C:\program files (x86)\pioneer\rekordbox 4.0.1\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.1\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{9117174E-7038-4A5E-82C0-BEDBCB00E981}C:\program files (x86)\pioneer\rekordbox 4.0.1\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.1\rekordbox.exe No File
FirewallRules: [UDP Query User{12D860EF-27C2-4D00-B00F-1CFF9817E972}C:\program files (x86)\pioneer\rekordbox 4.0.1\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.1\rekordbox.exe No File
FirewallRules: [TCP Query User{1BF25A75-191A-4A72-92E6-96EB303732B1}C:\program files (x86)\pioneer\rekordbox 4.0.4\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\psvnfsd.exe No File
FirewallRules: [UDP Query User{4351150F-CD3D-4F0C-B9EA-6AD4B297EA76}C:\program files (x86)\pioneer\rekordbox 4.0.4\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\psvnfsd.exe No File
FirewallRules: [TCP Query User{0695387C-671E-4593-8D06-8A386ADFF944}C:\program files (x86)\pioneer\rekordbox 4.0.4\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{883EB7EC-3983-4845-BA0F-AA1F653F6311}C:\program files (x86)\pioneer\rekordbox 4.0.4\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{29628C64-E93B-4538-B793-DCF7F4E61988}C:\program files (x86)\pioneer\rekordbox 4.0.4\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\rekordbox.exe No File
FirewallRules: [UDP Query User{D57333C0-E16B-49C4-8E73-983CFBFC0780}C:\program files (x86)\pioneer\rekordbox 4.0.4\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\rekordbox.exe No File
FirewallRules: [TCP Query User{616619BA-DA2E-43A4-AA4D-BDD661DACCDD}C:\program files (x86)\pioneer\rekordbox 4.0.6\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\psvnfsd.exe No File
FirewallRules: [UDP Query User{209A37D0-C0B1-4003-B1E6-B3A1C40BBBA5}C:\program files (x86)\pioneer\rekordbox 4.0.6\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\psvnfsd.exe No File
FirewallRules: [TCP Query User{D55C1537-26F7-4CEA-AED6-EA9D3F4B0FAB}C:\program files (x86)\pioneer\rekordbox 4.0.6\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{B39F9C58-E6E6-481B-BBDD-06785FD12FCA}C:\program files (x86)\pioneer\rekordbox 4.0.6\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{B3FB374B-CF13-43CF-8795-348D4738009B}C:\program files (x86)\pioneer\rekordbox 4.0.6\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\rekordbox.exe No File
FirewallRules: [UDP Query User{D8DC4A0D-7EBC-4B1D-B46F-6AF4C238D26F}C:\program files (x86)\pioneer\rekordbox 4.0.6\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\rekordbox.exe No File
FirewallRules: [TCP Query User{1953F254-31FF-4688-82A9-2E63CEE980DE}C:\program files (x86)\pioneer\rekordbox 4.0.8\psvnfsd.exe] => (Block) C:\program files (x86)\pioneer\rekordbox 4.0.8\psvnfsd.exe No File
FirewallRules: [UDP Query User{E02FB0A3-1CF0-4AD2-9369-B29BF01C63A8}C:\program files (x86)\pioneer\rekordbox 4.0.8\psvnfsd.exe] => (Block) C:\program files (x86)\pioneer\rekordbox 4.0.8\psvnfsd.exe No File
FirewallRules: [TCP Query User{24CEF838-93EA-4282-A071-468B6774328B}C:\program files (x86)\pioneer\rekordbox 4.0.8\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.8\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{D673884A-E8AE-4B6C-950C-CBB7C2C10220}C:\program files (x86)\pioneer\rekordbox 4.0.8\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.8\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{7053C90C-3E5A-485A-9284-F00B2CF0CB82}C:\program files (x86)\pioneer\rekordbox 4.0.8\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.8\rekordbox.exe No File
FirewallRules: [UDP Query User{090D000C-E171-4928-95EF-B0A3FEB2E737}C:\program files (x86)\pioneer\rekordbox 4.0.8\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.8\rekordbox.exe No File
FirewallRules: [TCP Query User{070591E0-4726-4E7F-895A-2AFB1E34909A}C:\program files (x86)\pioneer\rekordbox 4.1.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\psvnfsd.exe No File
FirewallRules: [UDP Query User{FB9CD7D6-C84D-4881-A36D-39EAEB51E977}C:\program files (x86)\pioneer\rekordbox 4.1.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\psvnfsd.exe No File
FirewallRules: [TCP Query User{8187DBC6-DE1A-4F05-8AE3-A76CC05E879E}C:\program files (x86)\pioneer\rekordbox 4.1.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{39F1B626-389B-4AB2-AA81-29F38D2D0891}C:\program files (x86)\pioneer\rekordbox 4.1.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{87D3C823-9E9D-4997-8868-F506B29F70BD}C:\program files (x86)\pioneer\rekordbox 4.1.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\rekordbox.exe No File
FirewallRules: [UDP Query User{3099C262-06D8-4E55-9E15-20985FCD3516}C:\program files (x86)\pioneer\rekordbox 4.1.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\rekordbox.exe No File
FirewallRules: [TCP Query User{1C45B843-B67F-4368-A882-153C5FDF88F2}C:\program files (x86)\pioneer\rekordbox 4.1.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.2\psvnfsd.exe No File
FirewallRules: [UDP Query User{13AE1858-A83D-46C5-AEDC-64CD9C8D8B0C}C:\program files (x86)\pioneer\rekordbox 4.1.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.2\psvnfsd.exe No File
FirewallRules: [TCP Query User{BDD9F65B-B127-4BA2-BC96-BCAD7BDB175E}C:\program files (x86)\pioneer\rekordbox 4.1.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.2\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{27F2BA6B-86D1-40FB-9081-A434808E2A4B}C:\program files (x86)\pioneer\rekordbox 4.1.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.2\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{A34DCB6D-39D1-4488-B841-CFF9B917CB9A}C:\program files (x86)\pioneer\rekordbox 4.1.2\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.2\rekordbox.exe No File
FirewallRules: [UDP Query User{17E51C60-E3DB-44B4-A31B-FB321F863C8F}C:\program files (x86)\pioneer\rekordbox 4.1.2\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.2\rekordbox.exe No File
FirewallRules: [TCP Query User{4FDCC07A-3F62-4C4F-9C6C-84CA605AB4F2}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe (XBMC-Foundation) [File not signed]
FirewallRules: [UDP Query User{B8AF626D-5977-498A-8A79-93B2FB150622}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe (XBMC-Foundation) [File not signed]
FirewallRules: [TCP Query User{68962B76-60AB-4BE0-8253-B8D2541C6A5E}C:\program files (x86)\pioneer\rekordbox 4.2.1\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.1\psvnfsd.exe No File
FirewallRules: [UDP Query User{6F5FFAF1-13BA-47CC-AF9D-2650EECB76ED}C:\program files (x86)\pioneer\rekordbox 4.2.1\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.1\psvnfsd.exe No File
FirewallRules: [TCP Query User{A5450227-D043-4AAC-854E-069924AF670A}C:\program files (x86)\pioneer\rekordbox 4.2.1\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.1\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{1C136FB2-6E0E-42BC-BF06-97418FC39408}C:\program files (x86)\pioneer\rekordbox 4.2.1\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.1\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{17FAFBB5-C81A-4E7C-BEF3-CAC09F5D6588}C:\program files (x86)\pioneer\rekordbox 4.2.1\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.1\rekordbox.exe No File
FirewallRules: [UDP Query User{376B6609-1BA7-4C4E-993A-72E04303920B}C:\program files (x86)\pioneer\rekordbox 4.2.1\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.1\rekordbox.exe No File
FirewallRules: [TCP Query User{E2D7CB05-5603-426D-A5EF-74F46B47D53E}C:\program files (x86)\pioneer\rekordbox 4.2.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.2\psvnfsd.exe No File
FirewallRules: [UDP Query User{8905BC0D-0500-44F6-9610-23011F4FDFE9}C:\program files (x86)\pioneer\rekordbox 4.2.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.2\psvnfsd.exe No File
FirewallRules: [TCP Query User{82DB47F2-B023-4EC0-9E64-F1FEA5378118}C:\program files (x86)\pioneer\rekordbox 4.2.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.2\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{8B00C7A0-B08F-4A08-9DB7-F9EB5CF87752}C:\program files (x86)\pioneer\rekordbox 4.2.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.2\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{20A0078D-B906-4075-BBB9-891129216BAD}C:\program files (x86)\pioneer\rekordbox 4.2.2\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.2\rekordbox.exe No File
FirewallRules: [UDP Query User{2CA77B23-5942-4106-9ADD-BE97AD6224A2}C:\program files (x86)\pioneer\rekordbox 4.2.2\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.2\rekordbox.exe No File
FirewallRules: [{E0A38503-8D4F-425F-8779-183BBC70D306}] => (Allow) C:\Users\Office PC\Desktop\Microsoft Office 2019\Crack\OfficeFixes\win_x64\vlmcsd.exe No File
FirewallRules: [{C129578D-DD0F-4CEA-B674-CB59DABEE97F}] => (Allow) C:\Users\Office PC\Desktop\Microsoft Office 2019\Crack\OfficeFixes\win_x64\vlmcsd.exe No File
FirewallRules: [{23161DFC-8665-48B1-B431-99C0CAC533B0}] => (Allow) C:\Users\Office PC\Desktop\Microsoft Office 2019\Crack\OfficeFixes\win_x64\FakeClient.exe No File
FirewallRules: [{3F84AA58-9686-4AA0-B829-CA498A97C892}] => (Allow) C:\Users\Office PC\Desktop\Microsoft Office 2019\Crack\OfficeFixes\win_x64\FakeClient.exe No File
Reboot:
End::

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

  • Double-click FRST.exe/FRST64.exe to run it.
  • Press the Fix button just once and wait.
    Note: No need to paste the script into FRST.
  • Restart the computer if prompted.
  • When the fix is complete FRST will generate a log in the same location it was run from (Fixlog.txt)
  • Please copy and paste its contents into your reply.

---------------------------------------------------

In your next reply, please include:

  • Fixlog.txt
  • Let me know how the computer is doing.

  • 0

#5
heyage13

heyage13

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 121 posts

A pop still produced immediately after the restart. I'd attach a pic for your reference but I do not how to on a reply..
 
here is the log:
 
Fix result of Farbar Recovery Scan Tool (x64) Version: 28-09-2019
Ran by Office PC (28-09-2019 16:21:20) Run:1
Running from C:\Users\Office PC\Downloads
Loaded Profiles: Office PC (Available Profiles: Office PC & DefaultAppPool)
Boot Mode: Normal
==============================================
 
fixlist content:
*****************
CreateRestorePoint:
EmptyTemp:
CloseProcesses:
Task: {18D22941-40A6-43EF-89F4-315DADCBDC53} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {1F41E191-05EC-4169-8439-612041C75F32} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {3FB5ED31-DB98-4A8C-BDCB-CBB3C3DE34DB} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION
Task: {41428A31-F62F-49BB-AA88-0026D4F204EF} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {43C9E783-D1A6-4EAF-9D8D-9DF24B772CAA} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {5F600903-3463-4D7D-9934-8D2AFEA54B35} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {8CF6E8DB-58B7-437A-8D64-6FC280411D60} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {A143C136-762D-4685-A7AB-9D057F072D81} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {B63E0357-2763-49C3-8845-285F22E37E96} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {D43F7585-C03D-42C9-A193-B6BEE2EB03C9} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {DBB60476-7506-425D-8694-1828376E76ED} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {EBBF393A-4544-451E-AEE3-F893A49B4BE5} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {FF816777-1A02-4032-A6CC-62BBD150D561} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
U3 idsvc; no ImagePath
CustomCLSID: HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Office PC\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{1BEAC3E3-B852-44F4-B468-8906C062422E}\localserver32 -> "C:\Users\Office PC\AppData\Local\Google\Chrome SxS\Application\41.0.2224.2\delegate_execute.exe" => No File
CustomCLSID: HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Office PC\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Office PC\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Office PC\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Office PC\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll => No File
ContextMenuHandlers1: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\Program Files (x86)\AIMP\System\aimp_menu64.dll -> No File
ContextMenuHandlers4: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\Program Files (x86)\AIMP\System\aimp_menu64.dll -> No File
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} =>  -> No File
FirewallRules: [UDP Query User{71338094-4111-4124-87D3-6EF0D09D78A3}C:\program files\pioneer\rekordbox 5.2.2\rekordbox.exe] => (Allow) C:\program files\pioneer\rekordbox 5.2.2\rekordbox.exe No File
FirewallRules: [TCP Query User{D3EBE4DC-AE16-4EFE-90B8-569792210FF7}C:\program files\pioneer\rekordbox 5.2.2\rekordbox.exe] => (Allow) C:\program files\pioneer\rekordbox 5.2.2\rekordbox.exe No File
FirewallRules: [UDP Query User{FA250FFC-4AFB-4F90-81F8-305DD11E0C10}C:\program files\pioneer\rekordbox 5.2.2\psvlinksysmgr.exe] => (Allow) C:\program files\pioneer\rekordbox 5.2.2\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{D3B895B6-7F4C-47D4-85F8-99A4D75E40F2}C:\program files\pioneer\rekordbox 5.2.2\psvlinksysmgr.exe] => (Allow) C:\program files\pioneer\rekordbox 5.2.2\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{95FBDD43-992E-4C02-B40C-A8BDC34E9E53}C:\program files\pioneer\rekordbox 5.2.2\psvnfsd.exe] => (Allow) C:\program files\pioneer\rekordbox 5.2.2\psvnfsd.exe No File
FirewallRules: [TCP Query User{3BA6C42C-FA74-4971-8E85-553A2F977C12}C:\program files\pioneer\rekordbox 5.2.2\psvnfsd.exe] => (Allow) C:\program files\pioneer\rekordbox 5.2.2\psvnfsd.exe No File
FirewallRules: [UDP Query User{E171B90D-0034-4FFC-9E0A-8517869B148A}C:\program files\perfectplayer\jre\bin\javaw.exe] => (Allow) C:\program files\perfectplayer\jre\bin\javaw.exe No File
FirewallRules: [TCP Query User{EA5C7E95-4901-4BEF-8E76-351CE5C2CF42}C:\program files\perfectplayer\jre\bin\javaw.exe] => (Allow) C:\program files\perfectplayer\jre\bin\javaw.exe No File
FirewallRules: [UDP Query User{C62FC86D-EF1B-41FC-84DB-FF9EA3338BDE}C:\program files (x86)\pioneer\rekordbox 4.3.1\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.1\rekordbox.exe No File
FirewallRules: [TCP Query User{9AFC1A7B-9462-4E7C-98D2-7D155427BF3E}C:\program files (x86)\pioneer\rekordbox 4.3.1\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.1\rekordbox.exe No File
FirewallRules: [UDP Query User{53D091DC-3EAF-4F64-B37E-88F9C947FD83}C:\program files (x86)\pioneer\rekordbox 4.3.1\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.1\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{26C10B7B-90BD-4E8A-8412-A39315BE2E00}C:\program files (x86)\pioneer\rekordbox 4.3.1\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.1\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{95654D0D-8D1E-42D5-B40C-7472C54DFE50}C:\program files (x86)\pioneer\rekordbox 4.3.1\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.1\psvnfsd.exe No File
FirewallRules: [TCP Query User{2B80635F-0430-42EB-8D4A-B388C7D0F012}C:\program files (x86)\pioneer\rekordbox 4.3.1\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.1\psvnfsd.exe No File
FirewallRules: [UDP Query User{66E6AB99-0529-4D3F-BFAF-BCA86B3F4292}C:\program files (x86)\pioneer\rekordbox 4.3.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.0\rekordbox.exe No File
FirewallRules: [TCP Query User{D8D98D62-EF6B-45E9-90CD-104479380BDB}C:\program files (x86)\pioneer\rekordbox 4.3.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.0\rekordbox.exe No File
FirewallRules: [UDP Query User{01A430C8-329B-44A4-86B9-39E6F721EF13}C:\program files (x86)\pioneer\rekordbox 4.3.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.0\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{6AE495BD-E237-4389-BCB0-9F903F3FA2EF}C:\program files (x86)\pioneer\rekordbox 4.3.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.0\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{36D33B87-2B66-4F42-88CD-D494EB0B29CF}C:\program files (x86)\pioneer\rekordbox 4.3.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.0\psvnfsd.exe No File
FirewallRules: [TCP Query User{2597AD93-B4E7-420E-9024-9BFA24670CCF}C:\program files (x86)\pioneer\rekordbox 4.3.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.3.0\psvnfsd.exe No File
FirewallRules: [{13F94000-72C5-44D0-B15C-D990DC6FF101}] => (Allow) C:\Users\Office PC\AppData\Local\Temp\7zS78BB\HP.EasyStart.exe No File
FirewallRules: [UDP Query User{E8323A86-E14F-4780-9898-45B142D5CE14}C:\program files (x86)\pioneer\rekordbox 4.2.5\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.5\rekordbox.exe No File
FirewallRules: [TCP Query User{0B785053-9696-4988-B130-189BCF1996B4}C:\program files (x86)\pioneer\rekordbox 4.2.5\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.5\rekordbox.exe No File
FirewallRules: [UDP Query User{6D18093D-BFA9-433F-AB96-E9DA8BC801E2}C:\program files (x86)\pioneer\rekordbox 4.2.5\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.5\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{F95C63B9-EDBB-400F-A10A-D82C70D4F261}C:\program files (x86)\pioneer\rekordbox 4.2.5\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.5\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{A707DC1E-4486-4FBA-8B73-9191CDF510A9}C:\program files (x86)\pioneer\rekordbox 4.2.5\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.5\psvnfsd.exe No File
FirewallRules: [TCP Query User{AD6DF718-3C81-409B-8F3E-3A6B7A24BCE5}C:\program files (x86)\pioneer\rekordbox 4.2.5\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.5\psvnfsd.exe No File
FirewallRules: [{A29A66BE-5AEA-4098-BDF1-28AA6F3EFE4B}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe No File
FirewallRules: [{E26B8369-CCBA-4C2F-8E33-D7756E9F3F42}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe No File
FirewallRules: [{B613E517-63DE-4057-9C76-E9FDE42D4F34}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe No File
FirewallRules: [{50E38E07-75EA-4338-8A6D-F4FDA8A543B7}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe No File
FirewallRules: [UDP Query User{B1583B16-7FFD-4F38-B3AF-EAB6B32DF1D2}C:\program files (x86)\pioneer\rekordbox 4.2.4\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\rekordbox.exe No File
FirewallRules: [TCP Query User{51F5EB12-AEAE-4ABB-85BD-D1C76597942F}C:\program files (x86)\pioneer\rekordbox 4.2.4\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\rekordbox.exe No File
FirewallRules: [UDP Query User{4132752B-47BA-4E7A-BC30-D438BA6BB588}C:\program files (x86)\pioneer\rekordbox 4.2.4\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{32991C82-0257-4B80-879F-D41224D0D353}C:\program files (x86)\pioneer\rekordbox 4.2.4\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{1AAE85DC-F59F-4A2E-9BF7-5BBCE1BA4109}C:\program files (x86)\pioneer\rekordbox 4.2.4\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\psvnfsd.exe No File
FirewallRules: [TCP Query User{D05660BA-696F-4E54-BD34-2A3E247E8CCE}C:\program files (x86)\pioneer\rekordbox 4.2.4\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.4\psvnfsd.exe No File
FirewallRules: [{6D58AB03-49CA-4A6E-BB35-EC7F63801951}] => (Allow) C:\Program Files\Vuze\Azureus.exe No File
FirewallRules: [{86DD3AAC-3254-428B-8407-0C44E691CB26}] => (Allow) C:\Program Files\Vuze\Azureus.exe No File
FirewallRules: [UDP Query User{01A7B6E5-0225-42FB-93C7-D5B0AF3AB37C}C:\program files (x86)\pioneer\rekordbox 4.0.2\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.2\rekordbox.exe No File
FirewallRules: [TCP Query User{A2034AFF-2933-4E76-A6E4-33FC733F2252}C:\program files (x86)\pioneer\rekordbox 4.0.2\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.2\rekordbox.exe No File
FirewallRules: [UDP Query User{6252D549-D247-4A56-AAED-074BF17BA80B}C:\program files (x86)\pioneer\rekordbox 4.0.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.2\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{F6B51DAF-840D-4426-8409-1D5915657A97}C:\program files (x86)\pioneer\rekordbox 4.0.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.2\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{03ECD949-F351-4400-B419-59000AAC515F}C:\program files (x86)\pioneer\rekordbox 4.0.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.2\psvnfsd.exe No File
FirewallRules: [TCP Query User{E4DE526E-4D2C-4356-A564-F12961181538}C:\program files (x86)\pioneer\rekordbox 4.0.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.2\psvnfsd.exe No File
FirewallRules: [TCP Query User{2BF2E6AA-B2BF-47EC-B39E-5BDD95190365}C:\program files\vuze\azureus.exe] => (Allow) C:\program files\vuze\azureus.exe No File
FirewallRules: [UDP Query User{EC489DB2-60F0-441E-BC5B-2886E910E55F}C:\program files\vuze\azureus.exe] => (Allow) C:\program files\vuze\azureus.exe No File
FirewallRules: [TCP Query User{27232ABF-BE6D-4DF8-B3BF-F361871DDCAF}C:\program files (x86)\far cry 4\bin\farcry4.exe] => (Allow) C:\program files (x86)\far cry 4\bin\farcry4.exe No File
FirewallRules: [UDP Query User{18AEA720-57CC-41F3-829B-B41C79B3A519}C:\program files (x86)\far cry 4\bin\farcry4.exe] => (Allow) C:\program files (x86)\far cry 4\bin\farcry4.exe No File
FirewallRules: [TCP Query User{FFF5D276-E35E-4E0A-8A98-01667002C9EF}C:\program files (x86)\xbmc\xbmc.exe] => (Allow) C:\program files (x86)\xbmc\xbmc.exe No File
FirewallRules: [UDP Query User{F6514FCB-283E-42B9-B8DA-8532715661F7}C:\program files (x86)\xbmc\xbmc.exe] => (Allow) C:\program files (x86)\xbmc\xbmc.exe No File
FirewallRules: [TCP Query User{63B3A4D0-24CC-41C2-B199-A24905AA8B88}C:\program files (x86)\pioneer\rekordbox 3.2.2\rekordbox 3.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.2.2\rekordbox 3.exe No File
FirewallRules: [UDP Query User{8535269D-4332-472A-AF40-C4948DADE8B0}C:\program files (x86)\pioneer\rekordbox 3.2.2\rekordbox 3.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.2.2\rekordbox 3.exe No File
FirewallRules: [TCP Query User{B3D2FDD9-AA9C-4C4C-80C4-90A3E08B42F4}C:\program files (x86)\pioneer\rekordbox 3.2.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.2.2\psvnfsd.exe No File
FirewallRules: [UDP Query User{AB202331-2727-4DBB-9ED4-0853B038E37D}C:\program files (x86)\pioneer\rekordbox 3.2.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.2.2\psvnfsd.exe No File
FirewallRules: [TCP Query User{C79BE9FE-7F3F-466F-A6A3-ADCEC88A521C}C:\program files (x86)\pioneer\rekordbox 3.2.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.2.2\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{04E830F2-B1E8-41DE-BC19-3AF1AC76EA2D}C:\program files (x86)\pioneer\rekordbox 3.2.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.2.2\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{9C6EA718-C792-42A0-8475-7503CC7FBB64}C:\program files (x86)\pioneer\rekordbox 3.3.0\rekordbox 3.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\rekordbox 3.exe No File
FirewallRules: [UDP Query User{C17DC586-65CA-4D2C-9C7E-1891521EC8CA}C:\program files (x86)\pioneer\rekordbox 3.3.0\rekordbox 3.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\rekordbox 3.exe No File
FirewallRules: [TCP Query User{2D77D9E0-5388-47E5-AF71-1579225351EC}C:\program files (x86)\pioneer\rekordbox 3.3.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\psvnfsd.exe No File
FirewallRules: [UDP Query User{CD6EC7B6-2F89-425B-8740-FFFAE75A1A9A}C:\program files (x86)\pioneer\rekordbox 3.3.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\psvnfsd.exe No File
FirewallRules: [TCP Query User{C20697B2-E32B-4CD5-AE23-1A6A181B066A}C:\program files (x86)\pioneer\rekordbox 3.3.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{00E74F8E-AA20-4A24-A538-993A83C2F489}C:\program files (x86)\pioneer\rekordbox 3.3.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 3.3.0\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{2EE8C791-145B-4CF6-B484-E90909A60FBF}C:\program files (x86)\pioneer\rekordbox 4.0.1\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.1\psvnfsd.exe No File
FirewallRules: [UDP Query User{C58A611A-E23B-44DF-9D7B-F783F1018258}C:\program files (x86)\pioneer\rekordbox 4.0.1\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.1\psvnfsd.exe No File
FirewallRules: [TCP Query User{CAD4C767-8680-4405-BAE3-87B63E3B6BCB}C:\program files (x86)\pioneer\rekordbox 4.0.1\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.1\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{13330E86-2E25-4A0D-B51C-CF12F4772974}C:\program files (x86)\pioneer\rekordbox 4.0.1\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.1\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{9117174E-7038-4A5E-82C0-BEDBCB00E981}C:\program files (x86)\pioneer\rekordbox 4.0.1\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.1\rekordbox.exe No File
FirewallRules: [UDP Query User{12D860EF-27C2-4D00-B00F-1CFF9817E972}C:\program files (x86)\pioneer\rekordbox 4.0.1\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.1\rekordbox.exe No File
FirewallRules: [TCP Query User{1BF25A75-191A-4A72-92E6-96EB303732B1}C:\program files (x86)\pioneer\rekordbox 4.0.4\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\psvnfsd.exe No File
FirewallRules: [UDP Query User{4351150F-CD3D-4F0C-B9EA-6AD4B297EA76}C:\program files (x86)\pioneer\rekordbox 4.0.4\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\psvnfsd.exe No File
FirewallRules: [TCP Query User{0695387C-671E-4593-8D06-8A386ADFF944}C:\program files (x86)\pioneer\rekordbox 4.0.4\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{883EB7EC-3983-4845-BA0F-AA1F653F6311}C:\program files (x86)\pioneer\rekordbox 4.0.4\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{29628C64-E93B-4538-B793-DCF7F4E61988}C:\program files (x86)\pioneer\rekordbox 4.0.4\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\rekordbox.exe No File
FirewallRules: [UDP Query User{D57333C0-E16B-49C4-8E73-983CFBFC0780}C:\program files (x86)\pioneer\rekordbox 4.0.4\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.4\rekordbox.exe No File
FirewallRules: [TCP Query User{616619BA-DA2E-43A4-AA4D-BDD661DACCDD}C:\program files (x86)\pioneer\rekordbox 4.0.6\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\psvnfsd.exe No File
FirewallRules: [UDP Query User{209A37D0-C0B1-4003-B1E6-B3A1C40BBBA5}C:\program files (x86)\pioneer\rekordbox 4.0.6\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\psvnfsd.exe No File
FirewallRules: [TCP Query User{D55C1537-26F7-4CEA-AED6-EA9D3F4B0FAB}C:\program files (x86)\pioneer\rekordbox 4.0.6\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{B39F9C58-E6E6-481B-BBDD-06785FD12FCA}C:\program files (x86)\pioneer\rekordbox 4.0.6\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{B3FB374B-CF13-43CF-8795-348D4738009B}C:\program files (x86)\pioneer\rekordbox 4.0.6\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\rekordbox.exe No File
FirewallRules: [UDP Query User{D8DC4A0D-7EBC-4B1D-B46F-6AF4C238D26F}C:\program files (x86)\pioneer\rekordbox 4.0.6\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.6\rekordbox.exe No File
FirewallRules: [TCP Query User{1953F254-31FF-4688-82A9-2E63CEE980DE}C:\program files (x86)\pioneer\rekordbox 4.0.8\psvnfsd.exe] => (Block) C:\program files (x86)\pioneer\rekordbox 4.0.8\psvnfsd.exe No File
FirewallRules: [UDP Query User{E02FB0A3-1CF0-4AD2-9369-B29BF01C63A8}C:\program files (x86)\pioneer\rekordbox 4.0.8\psvnfsd.exe] => (Block) C:\program files (x86)\pioneer\rekordbox 4.0.8\psvnfsd.exe No File
FirewallRules: [TCP Query User{24CEF838-93EA-4282-A071-468B6774328B}C:\program files (x86)\pioneer\rekordbox 4.0.8\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.8\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{D673884A-E8AE-4B6C-950C-CBB7C2C10220}C:\program files (x86)\pioneer\rekordbox 4.0.8\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.8\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{7053C90C-3E5A-485A-9284-F00B2CF0CB82}C:\program files (x86)\pioneer\rekordbox 4.0.8\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.8\rekordbox.exe No File
FirewallRules: [UDP Query User{090D000C-E171-4928-95EF-B0A3FEB2E737}C:\program files (x86)\pioneer\rekordbox 4.0.8\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.0.8\rekordbox.exe No File
FirewallRules: [TCP Query User{070591E0-4726-4E7F-895A-2AFB1E34909A}C:\program files (x86)\pioneer\rekordbox 4.1.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\psvnfsd.exe No File
FirewallRules: [UDP Query User{FB9CD7D6-C84D-4881-A36D-39EAEB51E977}C:\program files (x86)\pioneer\rekordbox 4.1.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\psvnfsd.exe No File
FirewallRules: [TCP Query User{8187DBC6-DE1A-4F05-8AE3-A76CC05E879E}C:\program files (x86)\pioneer\rekordbox 4.1.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{39F1B626-389B-4AB2-AA81-29F38D2D0891}C:\program files (x86)\pioneer\rekordbox 4.1.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{87D3C823-9E9D-4997-8868-F506B29F70BD}C:\program files (x86)\pioneer\rekordbox 4.1.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\rekordbox.exe No File
FirewallRules: [UDP Query User{3099C262-06D8-4E55-9E15-20985FCD3516}C:\program files (x86)\pioneer\rekordbox 4.1.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.0\rekordbox.exe No File
FirewallRules: [TCP Query User{1C45B843-B67F-4368-A882-153C5FDF88F2}C:\program files (x86)\pioneer\rekordbox 4.1.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.2\psvnfsd.exe No File
FirewallRules: [UDP Query User{13AE1858-A83D-46C5-AEDC-64CD9C8D8B0C}C:\program files (x86)\pioneer\rekordbox 4.1.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.2\psvnfsd.exe No File
FirewallRules: [TCP Query User{BDD9F65B-B127-4BA2-BC96-BCAD7BDB175E}C:\program files (x86)\pioneer\rekordbox 4.1.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.2\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{27F2BA6B-86D1-40FB-9081-A434808E2A4B}C:\program files (x86)\pioneer\rekordbox 4.1.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.2\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{A34DCB6D-39D1-4488-B841-CFF9B917CB9A}C:\program files (x86)\pioneer\rekordbox 4.1.2\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.2\rekordbox.exe No File
FirewallRules: [UDP Query User{17E51C60-E3DB-44B4-A31B-FB321F863C8F}C:\program files (x86)\pioneer\rekordbox 4.1.2\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.1.2\rekordbox.exe No File
FirewallRules: [TCP Query User{4FDCC07A-3F62-4C4F-9C6C-84CA605AB4F2}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe (XBMC-Foundation) [File not signed]
FirewallRules: [UDP Query User{B8AF626D-5977-498A-8A79-93B2FB150622}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe (XBMC-Foundation) [File not signed]
FirewallRules: [TCP Query User{68962B76-60AB-4BE0-8253-B8D2541C6A5E}C:\program files (x86)\pioneer\rekordbox 4.2.1\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.1\psvnfsd.exe No File
FirewallRules: [UDP Query User{6F5FFAF1-13BA-47CC-AF9D-2650EECB76ED}C:\program files (x86)\pioneer\rekordbox 4.2.1\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.1\psvnfsd.exe No File
FirewallRules: [TCP Query User{A5450227-D043-4AAC-854E-069924AF670A}C:\program files (x86)\pioneer\rekordbox 4.2.1\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.1\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{1C136FB2-6E0E-42BC-BF06-97418FC39408}C:\program files (x86)\pioneer\rekordbox 4.2.1\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.1\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{17FAFBB5-C81A-4E7C-BEF3-CAC09F5D6588}C:\program files (x86)\pioneer\rekordbox 4.2.1\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.1\rekordbox.exe No File
FirewallRules: [UDP Query User{376B6609-1BA7-4C4E-993A-72E04303920B}C:\program files (x86)\pioneer\rekordbox 4.2.1\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.1\rekordbox.exe No File
FirewallRules: [TCP Query User{E2D7CB05-5603-426D-A5EF-74F46B47D53E}C:\program files (x86)\pioneer\rekordbox 4.2.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.2\psvnfsd.exe No File
FirewallRules: [UDP Query User{8905BC0D-0500-44F6-9610-23011F4FDFE9}C:\program files (x86)\pioneer\rekordbox 4.2.2\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.2\psvnfsd.exe No File
FirewallRules: [TCP Query User{82DB47F2-B023-4EC0-9E64-F1FEA5378118}C:\program files (x86)\pioneer\rekordbox 4.2.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.2\psvlinksysmgr.exe No File
FirewallRules: [UDP Query User{8B00C7A0-B08F-4A08-9DB7-F9EB5CF87752}C:\program files (x86)\pioneer\rekordbox 4.2.2\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.2\psvlinksysmgr.exe No File
FirewallRules: [TCP Query User{20A0078D-B906-4075-BBB9-891129216BAD}C:\program files (x86)\pioneer\rekordbox 4.2.2\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.2\rekordbox.exe No File
FirewallRules: [UDP Query User{2CA77B23-5942-4106-9ADD-BE97AD6224A2}C:\program files (x86)\pioneer\rekordbox 4.2.2\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.2.2\rekordbox.exe No File
FirewallRules: [{E0A38503-8D4F-425F-8779-183BBC70D306}] => (Allow) C:\Users\Office PC\Desktop\Microsoft Office 2019\Crack\OfficeFixes\win_x64\vlmcsd.exe No File
FirewallRules: [{C129578D-DD0F-4CEA-B674-CB59DABEE97F}] => (Allow) C:\Users\Office PC\Desktop\Microsoft Office 2019\Crack\OfficeFixes\win_x64\vlmcsd.exe No File
FirewallRules: [{23161DFC-8665-48B1-B431-99C0CAC533B0}] => (Allow) C:\Users\Office PC\Desktop\Microsoft Office 2019\Crack\OfficeFixes\win_x64\FakeClient.exe No File
FirewallRules: [{3F84AA58-9686-4AA0-B829-CA498A97C892}] => (Allow) C:\Users\Office PC\Desktop\Microsoft Office 2019\Crack\OfficeFixes\win_x64\FakeClient.exe No File
Reboot:
 
*****************
 
Restore point was successfully created.
Processes closed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{18D22941-40A6-43EF-89F4-315DADCBDC53}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{18D22941-40A6-43EF-89F4-315DADCBDC53}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1F41E191-05EC-4169-8439-612041C75F32}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1F41E191-05EC-4169-8439-612041C75F32}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3FB5ED31-DB98-4A8C-BDCB-CBB3C3DE34DB}" => removed successfully
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3FB5ED31-DB98-4A8C-BDCB-CBB3C3DE34DB} => removed successfully
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OfficeSoftwareProtectionPlatform\SvcRestartTask => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{41428A31-F62F-49BB-AA88-0026D4F204EF}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{41428A31-F62F-49BB-AA88-0026D4F204EF}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{43C9E783-D1A6-4EAF-9D8D-9DF24B772CAA}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{43C9E783-D1A6-4EAF-9D8D-9DF24B772CAA}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5F600903-3463-4D7D-9934-8D2AFEA54B35}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5F600903-3463-4D7D-9934-8D2AFEA54B35}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8CF6E8DB-58B7-437A-8D64-6FC280411D60}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8CF6E8DB-58B7-437A-8D64-6FC280411D60}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A143C136-762D-4685-A7AB-9D057F072D81}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A143C136-762D-4685-A7AB-9D057F072D81}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B63E0357-2763-49C3-8845-285F22E37E96}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B63E0357-2763-49C3-8845-285F22E37E96}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D43F7585-C03D-42C9-A193-B6BEE2EB03C9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D43F7585-C03D-42C9-A193-B6BEE2EB03C9}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DBB60476-7506-425D-8694-1828376E76ED}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DBB60476-7506-425D-8694-1828376E76ED}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EBBF393A-4544-451E-AEE3-F893A49B4BE5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EBBF393A-4544-451E-AEE3-F893A49B4BE5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{FF816777-1A02-4032-A6CC-62BBD150D561}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FF816777-1A02-4032-A6CC-62BBD150D561}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => removed successfully
HKLM\System\CurrentControlSet\Services\idsvc => removed successfully
idsvc => service removed successfully
HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208} => removed successfully
HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{1BEAC3E3-B852-44F4-B468-8906C062422E} => removed successfully
HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8} => removed successfully
HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9} => removed successfully
HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F} => removed successfully
HKU\S-1-5-21-2488212447-1855921873-862638463-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E} => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\AIMP => removed successfully
HKLM\Software\Classes\CLSID\{1F77B17B-F531-44DB-ACA4-76ABB5010A28} => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\AIMP => removed successfully
HKLM\Software\Classes\CLSID\{1F77B17B-F531-44DB-ACA4-76ABB5010A28} => not found
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\Gadgets => removed successfully
HKLM\Software\Classes\CLSID\{6B9228DA-9C15-419e-856C-19E768A13BDC} => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{71338094-4111-4124-87D3-6EF0D09D78A3}C:\program files\pioneer\rekordbox 5.2.2\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D3EBE4DC-AE16-4EFE-90B8-569792210FF7}C:\program files\pioneer\rekordbox 5.2.2\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{FA250FFC-4AFB-4F90-81F8-305DD11E0C10}C:\program files\pioneer\rekordbox 5.2.2\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D3B895B6-7F4C-47D4-85F8-99A4D75E40F2}C:\program files\pioneer\rekordbox 5.2.2\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{95FBDD43-992E-4C02-B40C-A8BDC34E9E53}C:\program files\pioneer\rekordbox 5.2.2\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{3BA6C42C-FA74-4971-8E85-553A2F977C12}C:\program files\pioneer\rekordbox 5.2.2\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{E171B90D-0034-4FFC-9E0A-8517869B148A}C:\program files\perfectplayer\jre\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{EA5C7E95-4901-4BEF-8E76-351CE5C2CF42}C:\program files\perfectplayer\jre\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{C62FC86D-EF1B-41FC-84DB-FF9EA3338BDE}C:\program files (x86)\pioneer\rekordbox 4.3.1\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{9AFC1A7B-9462-4E7C-98D2-7D155427BF3E}C:\program files (x86)\pioneer\rekordbox 4.3.1\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{53D091DC-3EAF-4F64-B37E-88F9C947FD83}C:\program files (x86)\pioneer\rekordbox 4.3.1\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{26C10B7B-90BD-4E8A-8412-A39315BE2E00}C:\program files (x86)\pioneer\rekordbox 4.3.1\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{95654D0D-8D1E-42D5-B40C-7472C54DFE50}C:\program files (x86)\pioneer\rekordbox 4.3.1\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{2B80635F-0430-42EB-8D4A-B388C7D0F012}C:\program files (x86)\pioneer\rekordbox 4.3.1\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{66E6AB99-0529-4D3F-BFAF-BCA86B3F4292}C:\program files (x86)\pioneer\rekordbox 4.3.0\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D8D98D62-EF6B-45E9-90CD-104479380BDB}C:\program files (x86)\pioneer\rekordbox 4.3.0\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{01A430C8-329B-44A4-86B9-39E6F721EF13}C:\program files (x86)\pioneer\rekordbox 4.3.0\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{6AE495BD-E237-4389-BCB0-9F903F3FA2EF}C:\program files (x86)\pioneer\rekordbox 4.3.0\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{36D33B87-2B66-4F42-88CD-D494EB0B29CF}C:\program files (x86)\pioneer\rekordbox 4.3.0\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{2597AD93-B4E7-420E-9024-9BFA24670CCF}C:\program files (x86)\pioneer\rekordbox 4.3.0\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{13F94000-72C5-44D0-B15C-D990DC6FF101}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{E8323A86-E14F-4780-9898-45B142D5CE14}C:\program files (x86)\pioneer\rekordbox 4.2.5\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0B785053-9696-4988-B130-189BCF1996B4}C:\program files (x86)\pioneer\rekordbox 4.2.5\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6D18093D-BFA9-433F-AB96-E9DA8BC801E2}C:\program files (x86)\pioneer\rekordbox 4.2.5\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F95C63B9-EDBB-400F-A10A-D82C70D4F261}C:\program files (x86)\pioneer\rekordbox 4.2.5\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A707DC1E-4486-4FBA-8B73-9191CDF510A9}C:\program files (x86)\pioneer\rekordbox 4.2.5\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{AD6DF718-3C81-409B-8F3E-3A6B7A24BCE5}C:\program files (x86)\pioneer\rekordbox 4.2.5\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A29A66BE-5AEA-4098-BDF1-28AA6F3EFE4B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E26B8369-CCBA-4C2F-8E33-D7756E9F3F42}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B613E517-63DE-4057-9C76-E9FDE42D4F34}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{50E38E07-75EA-4338-8A6D-F4FDA8A543B7}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{B1583B16-7FFD-4F38-B3AF-EAB6B32DF1D2}C:\program files (x86)\pioneer\rekordbox 4.2.4\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{51F5EB12-AEAE-4ABB-85BD-D1C76597942F}C:\program files (x86)\pioneer\rekordbox 4.2.4\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4132752B-47BA-4E7A-BC30-D438BA6BB588}C:\program files (x86)\pioneer\rekordbox 4.2.4\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{32991C82-0257-4B80-879F-D41224D0D353}C:\program files (x86)\pioneer\rekordbox 4.2.4\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{1AAE85DC-F59F-4A2E-9BF7-5BBCE1BA4109}C:\program files (x86)\pioneer\rekordbox 4.2.4\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D05660BA-696F-4E54-BD34-2A3E247E8CCE}C:\program files (x86)\pioneer\rekordbox 4.2.4\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6D58AB03-49CA-4A6E-BB35-EC7F63801951}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{86DD3AAC-3254-428B-8407-0C44E691CB26}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{01A7B6E5-0225-42FB-93C7-D5B0AF3AB37C}C:\program files (x86)\pioneer\rekordbox 4.0.2\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{A2034AFF-2933-4E76-A6E4-33FC733F2252}C:\program files (x86)\pioneer\rekordbox 4.0.2\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6252D549-D247-4A56-AAED-074BF17BA80B}C:\program files (x86)\pioneer\rekordbox 4.0.2\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F6B51DAF-840D-4426-8409-1D5915657A97}C:\program files (x86)\pioneer\rekordbox 4.0.2\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{03ECD949-F351-4400-B419-59000AAC515F}C:\program files (x86)\pioneer\rekordbox 4.0.2\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{E4DE526E-4D2C-4356-A564-F12961181538}C:\program files (x86)\pioneer\rekordbox 4.0.2\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{2BF2E6AA-B2BF-47EC-B39E-5BDD95190365}C:\program files\vuze\azureus.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{EC489DB2-60F0-441E-BC5B-2886E910E55F}C:\program files\vuze\azureus.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{27232ABF-BE6D-4DF8-B3BF-F361871DDCAF}C:\program files (x86)\far cry 4\bin\farcry4.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{18AEA720-57CC-41F3-829B-B41C79B3A519}C:\program files (x86)\far cry 4\bin\farcry4.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{FFF5D276-E35E-4E0A-8A98-01667002C9EF}C:\program files (x86)\xbmc\xbmc.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{F6514FCB-283E-42B9-B8DA-8532715661F7}C:\program files (x86)\xbmc\xbmc.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{63B3A4D0-24CC-41C2-B199-A24905AA8B88}C:\program files (x86)\pioneer\rekordbox 3.2.2\rekordbox 3.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8535269D-4332-472A-AF40-C4948DADE8B0}C:\program files (x86)\pioneer\rekordbox 3.2.2\rekordbox 3.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B3D2FDD9-AA9C-4C4C-80C4-90A3E08B42F4}C:\program files (x86)\pioneer\rekordbox 3.2.2\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{AB202331-2727-4DBB-9ED4-0853B038E37D}C:\program files (x86)\pioneer\rekordbox 3.2.2\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{C79BE9FE-7F3F-466F-A6A3-ADCEC88A521C}C:\program files (x86)\pioneer\rekordbox 3.2.2\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{04E830F2-B1E8-41DE-BC19-3AF1AC76EA2D}C:\program files (x86)\pioneer\rekordbox 3.2.2\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{9C6EA718-C792-42A0-8475-7503CC7FBB64}C:\program files (x86)\pioneer\rekordbox 3.3.0\rekordbox 3.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{C17DC586-65CA-4D2C-9C7E-1891521EC8CA}C:\program files (x86)\pioneer\rekordbox 3.3.0\rekordbox 3.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{2D77D9E0-5388-47E5-AF71-1579225351EC}C:\program files (x86)\pioneer\rekordbox 3.3.0\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{CD6EC7B6-2F89-425B-8740-FFFAE75A1A9A}C:\program files (x86)\pioneer\rekordbox 3.3.0\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{C20697B2-E32B-4CD5-AE23-1A6A181B066A}C:\program files (x86)\pioneer\rekordbox 3.3.0\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{00E74F8E-AA20-4A24-A538-993A83C2F489}C:\program files (x86)\pioneer\rekordbox 3.3.0\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{2EE8C791-145B-4CF6-B484-E90909A60FBF}C:\program files (x86)\pioneer\rekordbox 4.0.1\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{C58A611A-E23B-44DF-9D7B-F783F1018258}C:\program files (x86)\pioneer\rekordbox 4.0.1\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{CAD4C767-8680-4405-BAE3-87B63E3B6BCB}C:\program files (x86)\pioneer\rekordbox 4.0.1\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{13330E86-2E25-4A0D-B51C-CF12F4772974}C:\program files (x86)\pioneer\rekordbox 4.0.1\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{9117174E-7038-4A5E-82C0-BEDBCB00E981}C:\program files (x86)\pioneer\rekordbox 4.0.1\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{12D860EF-27C2-4D00-B00F-1CFF9817E972}C:\program files (x86)\pioneer\rekordbox 4.0.1\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1BF25A75-191A-4A72-92E6-96EB303732B1}C:\program files (x86)\pioneer\rekordbox 4.0.4\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4351150F-CD3D-4F0C-B9EA-6AD4B297EA76}C:\program files (x86)\pioneer\rekordbox 4.0.4\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0695387C-671E-4593-8D06-8A386ADFF944}C:\program files (x86)\pioneer\rekordbox 4.0.4\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{883EB7EC-3983-4845-BA0F-AA1F653F6311}C:\program files (x86)\pioneer\rekordbox 4.0.4\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{29628C64-E93B-4538-B793-DCF7F4E61988}C:\program files (x86)\pioneer\rekordbox 4.0.4\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D57333C0-E16B-49C4-8E73-983CFBFC0780}C:\program files (x86)\pioneer\rekordbox 4.0.4\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{616619BA-DA2E-43A4-AA4D-BDD661DACCDD}C:\program files (x86)\pioneer\rekordbox 4.0.6\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{209A37D0-C0B1-4003-B1E6-B3A1C40BBBA5}C:\program files (x86)\pioneer\rekordbox 4.0.6\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D55C1537-26F7-4CEA-AED6-EA9D3F4B0FAB}C:\program files (x86)\pioneer\rekordbox 4.0.6\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{B39F9C58-E6E6-481B-BBDD-06785FD12FCA}C:\program files (x86)\pioneer\rekordbox 4.0.6\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B3FB374B-CF13-43CF-8795-348D4738009B}C:\program files (x86)\pioneer\rekordbox 4.0.6\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D8DC4A0D-7EBC-4B1D-B46F-6AF4C238D26F}C:\program files (x86)\pioneer\rekordbox 4.0.6\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1953F254-31FF-4688-82A9-2E63CEE980DE}C:\program files (x86)\pioneer\rekordbox 4.0.8\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{E02FB0A3-1CF0-4AD2-9369-B29BF01C63A8}C:\program files (x86)\pioneer\rekordbox 4.0.8\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{24CEF838-93EA-4282-A071-468B6774328B}C:\program files (x86)\pioneer\rekordbox 4.0.8\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D673884A-E8AE-4B6C-950C-CBB7C2C10220}C:\program files (x86)\pioneer\rekordbox 4.0.8\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{7053C90C-3E5A-485A-9284-F00B2CF0CB82}C:\program files (x86)\pioneer\rekordbox 4.0.8\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{090D000C-E171-4928-95EF-B0A3FEB2E737}C:\program files (x86)\pioneer\rekordbox 4.0.8\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{070591E0-4726-4E7F-895A-2AFB1E34909A}C:\program files (x86)\pioneer\rekordbox 4.1.0\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{FB9CD7D6-C84D-4881-A36D-39EAEB51E977}C:\program files (x86)\pioneer\rekordbox 4.1.0\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{8187DBC6-DE1A-4F05-8AE3-A76CC05E879E}C:\program files (x86)\pioneer\rekordbox 4.1.0\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{39F1B626-389B-4AB2-AA81-29F38D2D0891}C:\program files (x86)\pioneer\rekordbox 4.1.0\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{87D3C823-9E9D-4997-8868-F506B29F70BD}C:\program files (x86)\pioneer\rekordbox 4.1.0\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{3099C262-06D8-4E55-9E15-20985FCD3516}C:\program files (x86)\pioneer\rekordbox 4.1.0\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1C45B843-B67F-4368-A882-153C5FDF88F2}C:\program files (x86)\pioneer\rekordbox 4.1.2\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{13AE1858-A83D-46C5-AEDC-64CD9C8D8B0C}C:\program files (x86)\pioneer\rekordbox 4.1.2\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{BDD9F65B-B127-4BA2-BC96-BCAD7BDB175E}C:\program files (x86)\pioneer\rekordbox 4.1.2\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{27F2BA6B-86D1-40FB-9081-A434808E2A4B}C:\program files (x86)\pioneer\rekordbox 4.1.2\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{A34DCB6D-39D1-4488-B841-CFF9B917CB9A}C:\program files (x86)\pioneer\rekordbox 4.1.2\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{17E51C60-E3DB-44B4-A31B-FB321F863C8F}C:\program files (x86)\pioneer\rekordbox 4.1.2\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{4FDCC07A-3F62-4C4F-9C6C-84CA605AB4F2}C:\program files (x86)\kodi\kodi.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{B8AF626D-5977-498A-8A79-93B2FB150622}C:\program files (x86)\kodi\kodi.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{68962B76-60AB-4BE0-8253-B8D2541C6A5E}C:\program files (x86)\pioneer\rekordbox 4.2.1\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6F5FFAF1-13BA-47CC-AF9D-2650EECB76ED}C:\program files (x86)\pioneer\rekordbox 4.2.1\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{A5450227-D043-4AAC-854E-069924AF670A}C:\program files (x86)\pioneer\rekordbox 4.2.1\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{1C136FB2-6E0E-42BC-BF06-97418FC39408}C:\program files (x86)\pioneer\rekordbox 4.2.1\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{17FAFBB5-C81A-4E7C-BEF3-CAC09F5D6588}C:\program files (x86)\pioneer\rekordbox 4.2.1\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{376B6609-1BA7-4C4E-993A-72E04303920B}C:\program files (x86)\pioneer\rekordbox 4.2.1\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{E2D7CB05-5603-426D-A5EF-74F46B47D53E}C:\program files (x86)\pioneer\rekordbox 4.2.2\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8905BC0D-0500-44F6-9610-23011F4FDFE9}C:\program files (x86)\pioneer\rekordbox 4.2.2\psvnfsd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{82DB47F2-B023-4EC0-9E64-F1FEA5378118}C:\program files (x86)\pioneer\rekordbox 4.2.2\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8B00C7A0-B08F-4A08-9DB7-F9EB5CF87752}C:\program files (x86)\pioneer\rekordbox 4.2.2\psvlinksysmgr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{20A0078D-B906-4075-BBB9-891129216BAD}C:\program files (x86)\pioneer\rekordbox 4.2.2\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{2CA77B23-5942-4106-9ADD-BE97AD6224A2}C:\program files (x86)\pioneer\rekordbox 4.2.2\rekordbox.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E0A38503-8D4F-425F-8779-183BBC70D306}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C129578D-DD0F-4CEA-B674-CB59DABEE97F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{23161DFC-8665-48B1-B431-99C0CAC533B0}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3F84AA58-9686-4AA0-B829-CA498A97C892}" => removed successfully
 
=========== EmptyTemp: ==========
 
BITS transfer queue => 10772480 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 119636415 B
Java, Flash, Steam htmlcache => 1077 B
Windows/system/drivers => 3458494 B
Edge => 10092405 B
Chrome => 477173221 B
Firefox => 0 B
Opera => 0 B
 
Temp, IE cache, history, cookies, recent:
Default => 6144 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 6144 B
LocalService => 0 B
NetworkService => 1199826 B
NetworkService => 0 B
Office PC => 64215589 B
DefaultAppPool => 6144 B
 
RecycleBin => 69008 B
EmptyTemp: => 654.8 MB temporary data Removed.
 
================================
 
 
The system needed a reboot.
 
==== End of Fixlog 16:26:46 ====


  • 0

#6
icotonev

icotonev

    Trusted Helper

  • Malware Removal
  • 16 posts

Good morning, heyage13...!  :)  Please do the following:


Reset Google Chrome

Note: this step will remove installed Chrome extensions. If you wish to keep your currently installed Chrome extensions, please note them down so they can be reinstalled later.
For a complete list of what is removed during a Chrome reset, see here for more information.

  • Open Google Chrome.
  • Click the Menu icon in the upper right corner of the Chrome window (three dots) and select Settings.
  • Under Reset and Cleanup, select Reset Settings.
  • Select Reset Settings to confirm the reset.

 
FRST scan

  • Double-click FRST.exe/FRST64.exe to run it.
  • Press the Scan button.
  • When finished, it will produce logs called FRST.txt and Addition.txt in the same directory the tool was run from.
  • Please copy and paste the logs in your next reply.

In your next reply, please include:

  • FRST.txt
  • Addition.txt

  • 0

#7
heyage13

heyage13

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 121 posts

FRST Log:

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-09-2019
Ran by Office PC (29-09-2019 14:18:32)
Running from C:\Users\Office PC\Downloads
Windows 10 Pro Version 1803 17134.1006 (X64) (2018-06-10 22:47:47)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-2488212447-1855921873-862638463-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2488212447-1855921873-862638463-503 - Limited - Disabled)
Guest (S-1-5-21-2488212447-1855921873-862638463-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2488212447-1855921873-862638463-1002 - Limited - Enabled)
Office PC (S-1-5-21-2488212447-1855921873-862638463-1000 - Administrator - Enabled) => C:\Users\Office PC
WDAGUtilityAccount (S-1-5-21-2488212447-1855921873-862638463-504 - Limited - Disabled)
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
4K YouTube to MP3 3.3 (HKLM-x32\...\{59537536-03C1-4289-800C-BCCF8C9850F8}) (Version: 3.3.9.1844 - Open Media LLC)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 19.012.20040 - Adobe Systems Incorporated)
AOMEI Partition Assistant Standard Edition 8.2 (HKLM-x32\...\{02F850ED-FD0E-4ED1-BE0B-54981f5BD3D4}_is1) (Version:  - AOMEI Technology Co., Ltd.)
Apple Application Support (32-bit) (HKLM-x32\...\{D4C80B0C-CF67-43A7-90C3-466853543B54}) (Version: 6.3 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{B2A2E8AF-BC48-4191-B2C4-3846A19835CA}) (Version: 6.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{C1BBFD2A-BCDD-45B3-8C0B-66BD434970A8}) (Version: 2.4.8.1 - Apple Inc.)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.14 - Michael Tippach)
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 4.1.17.2008 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
Cisco WebEx Meetings (HKU\S-1-5-21-2488212447-1855921873-862638463-1000\...\ActiveTouchMeetingClient) (Version:  - Cisco WebEx LLC)
Citrix Receiver (HKLM-x32\...\CitrixOnlinePluginPackWeb) (Version: 14.1.0.0 - Citrix Systems, Inc.)
DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 391.35 - NVIDIA Corporation) Hidden
FL Studio 10 (HKLM-x32\...\FL Studio 10) (Version:  - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version:  - Image-Line)
Freemake Audio Converter version 1.1.8 (HKLM-x32\...\Freemake Audio Converter_is1) (Version: 1.1.8 - Ellora Assets Corporation)
Full Tilt Poker (HKLM-x32\...\{D4C9692E-4EFA-4DA0-8B7F-9439466D9E31}) (Version: 5.10.15.WIN.FullTilt.COM - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 77.0.3865.90 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.11 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
HP Dropbox Plugin (HKLM-x32\...\{23617173-F935-4C17-A323-EB1207F3ED49}) (Version: 36.0.31.53050 - Hewlett-Packard Co.)
HP Google Drive Plugin (HKLM-x32\...\{AFF80405-E56A-48E7-98FC-8E46E261949F}) (Version: 36.0.31.53050 - Hewlett-Packard Co.)
HP OfficeJet 4650 series Basic Device Software (HKLM\...\{AD2313B9-714F-496E-AD7F-20532E833EB2}) (Version: 36.0.72.54013 - Hewlett-Packard Co.)
HP Photo Creations (HKU\S-1-5-21-2488212447-1855921873-862638463-1000\...\HP Photo Creations) (Version: 1.0.0.22192 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HP USB Disk Storage Format Tool (HKLM-x32\...\{0E0DF90C-D0BA-4C89-9262-AD78D1A3DE51}) (Version:  - )
I.R.I.S. OCR (HKLM-x32\...\{C60E2D8F-0FC0-497D-A149-90F3B361937C}) (Version: 12.3.6.9 - HP)
IL Gross Beat (HKLM-x32\...\IL Gross Beat) (Version:  - Image-Line)
IL Shared Libraries (HKLM-x32\...\IL Shared Libraries) (Version:  - Image-Line)
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Kodi (HKU\S-1-5-21-2488212447-1855921873-862638463-1000\...\Kodi) (Version:  - XBMC-Foundation)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Loopmaster Samples version 1.0 (HKLM-x32\...\{EF29801F-C87A-481B-B4D1-6D1FBDEA954B}_is1) (Version: 1.0 - Serato LP INC)
Malwarebytes version 3.8.3.2965 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.8.3.2965 - Malwarebytes)
Media Player Codec Pack 4.3.1 (HKLM-x32\...\Media Player - Codec Pack) (Version: 4.3.1 - Media Player Codec Pack)
Microsoft Office Professional Plus 2019 - en-us (HKLM\...\ProPlus2019Retail - en-us) (Version: 16.0.11929.20300 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2488212447-1855921873-862638463-1000\...\OneDriveSetup.exe) (Version: 19.152.0801.0009 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{CA8A885F-E95B-3FC6-BB91-F4D9377C7686}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MultiWall version 1.0.31 (HKLM-x32\...\{54384F46-6346-4BDC-A137-4D4037D362D3}_is1) (Version: 1.0.31 - MultiWall)
Native Instruments Massive (HKLM-x32\...\Native Instruments Massive) (Version:  - Native Instruments)
Native Instruments Replika (HKLM-x32\...\Native Instruments Replika) (Version: 1.2.1.713 - Native Instruments)
Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.6.0.137 - Native Instruments)
Nero 11 Mini Repack (HKLM\...\NMMS11) (Version:  - )
Nero Backup Drivers (HKLM\...\{D600D357-5CB9-4DE9-8FD4-14E208BD1970}) (Version: 1.0.10000.1.0 - Nero AG)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.15 - NVIDIA Corporation) Hidden
NVIDIA 3D Vision Controller Driver 390.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 390.41 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 391.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 391.35 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.18.0.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.18.0.94 - NVIDIA Corporation)
NVIDIA Graphics Driver 391.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 391.35 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.36.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.36.6 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.11929.20300 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.11929.20300 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.11929.20300 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.11929.20300 - Microsoft Corporation) Hidden
Online Plug-in (HKLM-x32\...\{F390D923-76F1-458E-8218-8C0C156CDCFD}) (Version: 14.1.0.0 - Citrix Systems, Inc.) Hidden
Pioneer MIX 64bit Driver (HKLM\...\Pioneer MIX) (Version: 5.2.3.0008 - Pioneer DJ Corporation.)
Pioneer MIX Driver (HKLM-x32\...\Pioneer MIX) (Version: 4.5.0.0007 - Pioneer DJ Corporation.)
Plex Media Player (HKLM\...\{0D4EDF77-CC4A-4979-8244-259FCFA579DB}) (Version: 2.26.0 - Plex) Hidden
Plex Media Player (HKLM-x32\...\{dfdf93ed-d82c-445a-a5bf-4be48d6fb841}) (Version: 2.26.0 - Plex)
Plex Media Server (HKLM-x32\...\{06F175F5-D6CA-438F-B1E6-E9F1FB2735FF}) (Version: 1.16.1554 - Plex, Inc.) Hidden
Plex Media Server (HKLM-x32\...\{6b47007f-5e5b-40bb-8655-d2530bedcec2}) (Version: 1.16.5.1554 - Plex, Inc.)
PowerISO (HKLM-x32\...\PowerISO) (Version: 5.0 - Power Software Ltd)
Questrade IQ Edge (HKLM-x32\...\{B50F973A-8BEC-4A5D-AFEE-E4AEDAA150BD}_is1) (Version: 5.7.9.151 - Questrade Inc.)
QuickTime 7 (HKLM-x32\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.)
REALTEK Wireless LAN Driver and Utility (HKLM-x32\...\{9C049509-055C-4CFF-A116-1D12312225EB}) (Version: 1.00.0285 - REALTEK Semiconductor Corp.)
reFX Nexus VSTi RTAS v2.2.0 (HKLM-x32\...\reFX Nexus_is1) (Version:  - )
rekordbox 4.4.0 (HKLM-x32\...\Pioneer rekordbox 4.4.0) (Version: 4.4.0.0020 - Pioneer DJ)
rekordbox 4.5.0 (HKLM-x32\...\Pioneer rekordbox 4.5.0) (Version: 4.5.0.0007 - Pioneer DJ)
rekordbox 5.2.3 64bit (HKLM\...\Pioneer rekordbox 5.2.3) (Version: 5.2.3.0008 - Pioneer DJ)
Self-service Plug-in (HKLM-x32\...\{47117FCA-0D00-4B6D-9D68-00B763629463}) (Version: 4.1.0.41738 - Citrix Systems, Inc.) Hidden
Steinberg Download Assistant (HKLM-x32\...\Steinberg Download Assistant) (Version: 1.15.0 - Steinberg Media Technologies GmbH)
Stopping Plex (HKLM-x32\...\{783867B4-5DA3-470A-9882-3F18DAA454A7}) (Version: 1.16.1554 - Plex, Inc.) Hidden
Sylenth1 v2.21 (HKLM\...\Sylenth1_is1) (Version:  - )
System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
UnderCoverXP 1.23 (HKLM-x32\...\UnderCoverXP_is1) (Version:  - Wicked & Wild Inc.)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
VC80CRTRedist - 8.0.50727.6195 (HKLM-x32\...\{933B4015-4618-4716-A828-5289FC03165F}) (Version: 1.2.0 - DivX, Inc) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 3.0.6 - VideoLAN)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.8 - VideoLAN)
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
Vuze (HKLM-x32\...\8461-7759-5462-8226) (Version: 5.7.6.0 - Azureus Software, Inc.)
WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
 
Packages:
=========
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_100.1.581.0_x64__v10z8vjag6ke6 [2019-07-19] (HP Inc.)
iTunes -> C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa [2019-09-26] (Apple Inc.)
Mail and Calendar -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12026.20218.0_x64__8wekyb3d8bbwe [2019-09-24] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-11] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-11] (Microsoft Corporation) [MS Ad]
Microsoft News -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.32.12463.0_x64__8wekyb3d8bbwe [2019-09-10] (Microsoft Corporation) [MS Ad]
Microsoft Phone -> C:\Program Files\WindowsApps\Microsoft.CommsPhone_3.43.20002.1000_x64__8wekyb3d8bbwe [2018-09-09] (Microsoft Corporation)
Microsoft Phone Companion -> C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1802.311.0_x64__8wekyb3d8bbwe [2018-02-13] (Microsoft Corporation)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe [2019-08-29] (Microsoft Studios) [MS Ad]
MSN Money -> C:\Program Files\WindowsApps\Microsoft.BingFinance_4.31.11905.0_x64__8wekyb3d8bbwe [2019-07-19] (Microsoft Corporation) [MS Ad]
MSN Sports -> C:\Program Files\WindowsApps\Microsoft.BingSports_4.31.11905.0_x64__8wekyb3d8bbwe [2019-07-19] (Microsoft Corporation) [MS Ad]
MSN Weather -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.32.12463.0_x64__8wekyb3d8bbwe [2019-09-10] (Microsoft Corporation) [MS Ad]
SimpleStream -> C:\Program Files\WindowsApps\14861TPWorks.SimpleStream_1.5.15.0_x64__n0e1jx1pycqem [2018-03-17] (TPWorks) [MS Ad]
WindowsDVDPlayer -> C:\Program Files\WindowsApps\Microsoft.WindowsDVDPlayer_3.6.13291.0_x64__8wekyb3d8bbwe [2015-11-13] (Microsoft Corporation)
 
==================== Custom CLSID (Whitelisted): ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
ContextMenuHandlers1: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files (x86)\PowerISO\PWRISOSH.DLL [2012-02-09] (Power Software Ltd -> Power Software Ltd)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers4: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files (x86)\PowerISO\PWRISOSH.DLL [2012-02-09] (Power Software Ltd -> Power Software Ltd)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2018-03-23] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files (x86)\PowerISO\PWRISOSH.DLL [2012-02-09] (Power Software Ltd -> Power Software Ltd)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
 
==================== Shortcuts & WMI ========================
 
(The entries could be listed to be restored or removed.)
 
WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::
WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]
WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]
 
Shortcut: C:\Users\Office PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line\FL Studio 10\Image-Line website.lnk -> hxxp://www.image-line.com
Shortcut: C:\Users\Office PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line\FL Studio 10\Advanced\Diagnostic.lnk -> hxxp://www.image-line.com/diagnosti
Shortcut: C:\Users\Office PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line\FL Studio 10\Additional\Download Deckadance.lnk -> hxxp://www.deckadance.com
Shortcut: C:\Users\Office PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line\FL Studio 10\Additional\SynthMaker website.lnk -> hxxp://www.synthmaker.co.uk
 
==================== Loaded Modules (Whitelisted) ==============
 
2018-04-17 20:53 - 2014-04-17 09:54 - 000863232 _____ ( Realtek Semiconductor Corp.) [File not signed] C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\P2PLib.dll
2018-04-17 20:53 - 2014-04-17 09:54 - 000221184 _____ () [File not signed] C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\EnumDevLib.dll
2013-10-01 15:31 - 2013-10-01 15:31 - 002293760 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\Citrix\Receiver\xerces-c_3_1.dll
2017-03-04 11:58 - 2017-03-04 11:58 - 000118784 _____ (Eclipse Foundation) [File not signed] C:\Users\Office PC\.swt\lib\win32\x86\swt-gdip-win32-4716.dll
2017-03-04 11:58 - 2017-03-04 11:58 - 000430080 _____ (Eclipse Foundation) [File not signed] C:\Users\Office PC\.swt\lib\win32\x86\swt-win32-4716.dll
2018-06-10 18:30 - 2018-06-10 18:30 - 001101824 _____ (Microsoft Corporation) [File not signed] C:\WINDOWS\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\MFC80.DLL
2018-06-10 18:31 - 2018-06-10 18:31 - 000057344 _____ (Microsoft Corporation) [File not signed] C:\WINDOWS\WinSxS\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_03ce2c72205943d3\MFC80ENU.DLL
2019-03-20 20:13 - 2018-03-23 19:05 - 000880024 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI64.dll
2019-03-20 20:13 - 2018-03-23 19:05 - 000343728 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem\NvStereo\_nvstapisvr64.dll
2018-04-17 20:53 - 2014-04-17 09:54 - 000200704 _____ (Realtek) [File not signed] C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\IpLib.dll
2018-04-17 20:53 - 2014-04-17 09:54 - 000044544 _____ (Realtek) [File not signed] C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RtlQRCode.dll
2016-08-04 22:10 - 2007-12-07 02:08 - 000108032 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\WINDOWS\System32\E_ILMCDA.DLL
2018-04-17 20:53 - 2014-04-17 09:54 - 001122304 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\LIBEAY32.dll
 
==================== Alternate Data Streams (Whitelisted) =========
 
(If an entry is included in the fixlist, only the ADS will be removed.)
 
 
==================== Safe Mode (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
 
==================== Association (Whitelisted) ===============
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, it will be removed from the registry.)
 
 
==================== Hosts content: ===============================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2009-07-13 22:34 - 2009-06-10 17:00 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
 
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-2488212447-1855921873-862638463-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Office PC\AppData\Roaming\MultiWall\wallpaper.bmp
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
Windows Firewall is enabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
If an entry is included in the fixlist, it will be removed.
 
MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: Apple Mobile Device => 2
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: HitmanProScheduler => 2
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: NvNetworkService => 2
MSCONFIG\Services: NvStreamSvc => 2
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: Stereo Service => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^CodecPackUpdateChecker.lnk => C:\Windows\pss\CodecPackUpdateChecker.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: CitrixReceiver => "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Citrix\Receiver Updater.lnk"
MSCONFIG\startupreg: ConnectionCenter => "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
MSCONFIG\startupreg: Google Update => "C:\Users\Office PC\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: NBAgent => "C:\Program Files (x86)\Nero\Nero 11\Nero BackItUp\NBAgent.exe" /WinStart
MSCONFIG\startupreg: PWRISOVM.EXE => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE -startup
MSCONFIG\startupreg: Redirector => "C:\Program Files (x86)\Citrix\ICA Client\redirector.exe" /startup
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
 
==================== FirewallRules (Whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [{5FBC4E11-AE0A-4C97-8ED8-750F8C9ACE82}] => (Allow) C:\Program Files (x86)\BlueStacks\HD-Player.exe (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
FirewallRules: [{8B235538-1A3C-4EC6-A9C6-E4F4A857478D}] => (Allow) C:\Program Files\Pioneer\rekordbox 5.2.3\ls-unity-rekordbox-win-64bit.exe (Pioneer DJ Corporation -> )
FirewallRules: [{CEF29C26-2ECC-48BA-99CA-68B27EAC794F}] => (Allow) C:\Program Files\Pioneer\rekordbox 5.2.3\edb_streamd.exe () [File not signed]
FirewallRules: [{E7797620-114E-4670-BA6F-ABA4753CD78D}] => (Allow) C:\Program Files\Pioneer\rekordbox 5.2.3\psvlinksysmgr.exe (Pioneer DJ Corporation -> Pioneer DJ Corporation.)
FirewallRules: [{87AFDBBC-737F-4B61-99A1-F667E6765B01}] => (Allow) C:\Program Files\Pioneer\rekordbox 5.2.3\psvnfsd.exe (Pioneer DJ Corporation -> Pioneer Corporation.)
FirewallRules: [{8D2E7FFE-BFF1-46F7-AB6E-213E03D02E2B}] => (Allow) C:\Program Files\Pioneer\rekordbox 5.2.3\rekordbox.exe (Pioneer DJ Corporation -> Pioneer DJ Corporation)
FirewallRules: [{3203F83F-DE37-420C-8640-D53673DB20C8}] => (Allow) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)
FirewallRules: [{2C431A6B-87DA-49D9-964C-032E55D4B953}] => (Allow) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)
FirewallRules: [{1E81D134-3048-4E40-8E54-0F0129242F68}] => (Allow) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)
FirewallRules: [{97E4A892-8B88-40BB-AE1F-0C8429A17D79}] => (Allow) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)
FirewallRules: [{AC1E9C17-3B2A-4F4B-9F47-14F2E8B7080E}] => (Allow) LPort=53
FirewallRules: [{D3C6F7BE-B6B7-4F76-96D6-5E9A071400D8}] => (Allow) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)
FirewallRules: [{E94442C3-431B-4785-8193-48575E10F676}] => (Allow) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)
FirewallRules: [{70C33CB5-690D-40EC-A48C-EA5FDB303A0B}] => (Allow) C:\PROGRA~2\REALTEK\USBWIR~1\Rtldhcp.exe (Realtek Semiconductor Corp -> Realtek)
FirewallRules: [{CA0029F0-B9E8-485A-86AD-E8F0B0FFF6D6}] => (Allow) LPort=53
FirewallRules: [{6646619F-0E42-4DB0-9316-57275D0460CE}] => (Allow) LPort=1542
FirewallRules: [{8F583241-7F96-4830-8EB6-3838610815AD}] => (Allow) LPort=1542
FirewallRules: [{01220189-25EF-4A77-8990-BD9067F5BA14}] => (Allow) C:\PROGRA~2\REALTEK\USBWIR~1\RtWlan.exe (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)
FirewallRules: [{938D9D26-632B-461C-B7EF-A0E99077F7F3}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{7DDF0725-2E45-4D6D-8A34-96593DE7AC06}] => (Allow) C:\Program Files (x86)\Vuze\Azureus.exe (Azureus Software, Inc. -> Azureus Software, Inc)
FirewallRules: [{1D72A606-AC1C-483A-B9AC-EC74AFCF45B9}] => (Allow) C:\Program Files (x86)\Vuze\Azureus.exe (Azureus Software, Inc. -> Azureus Software, Inc)
FirewallRules: [{8D7E2C60-AA63-4713-AD0C-5CB0E31759B2}] => (Allow) C:\Program Files\HP\HP OfficeJet 4650 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [{BB302AB2-F4D1-4695-B266-8CD05BFB72FE}] => (Allow) LPort=5357
FirewallRules: [{004E3D86-060C-492B-BFC7-81BC9F86CA64}] => (Allow) C:\Program Files\HP\HP OfficeJet 4650 series\Bin\DeviceSetup.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [{C0A9B8EB-6343-433A-8A80-AFC07576395A}] => (Allow) C:\Program Files\HP\HP OfficeJet 4650 series\bin\SendAFax.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [{27FB382B-7365-476F-88EC-F730A1207135}] => (Allow) C:\Program Files\HP\HP OfficeJet 4650 series\bin\DigitalWizards.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [{613D0867-8287-4FD5-B9A9-C4582F80A5F5}] => (Allow) C:\Program Files\HP\HP OfficeJet 4650 series\bin\FaxApplications.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [{6D9AF2CE-2879-4EFA-BE5E-0A77984772DA}] => (Allow) C:\Program Files\HP\HP OfficeJet 4650 series\bin\FaxPrinterUtility.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [{FEB1D940-26AB-4A2B-A481-1A80CFCFC27A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{3A7DD7F3-AB34-4551-87F3-998398EC021E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{CE7159D0-0012-4AA8-BA20-C97C9B8AB6B7}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F1B60142-FE3A-4ED4-B375-0E5FBA7AA6B5}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{566CCB9A-1D76-42F8-ACC5-48178BDA9434}C:\program files (x86)\pioneer\rekordbox 4.5.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\psvnfsd.exe (Pioneer DJ Corporation -> Pioneer Corporation.)
FirewallRules: [UDP Query User{5A40CDA8-A66B-427C-96A3-6FBF7B5C6519}C:\program files (x86)\pioneer\rekordbox 4.5.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\psvnfsd.exe (Pioneer DJ Corporation -> Pioneer Corporation.)
FirewallRules: [TCP Query User{3B0CD9C3-C2A0-41C7-83C3-49340292EC9F}C:\program files (x86)\pioneer\rekordbox 4.5.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\psvlinksysmgr.exe (Pioneer DJ Corporation -> Pioneer DJ Corporation.)
FirewallRules: [UDP Query User{4652D61B-7747-45C5-BE30-DCEC32B5873D}C:\program files (x86)\pioneer\rekordbox 4.5.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\psvlinksysmgr.exe (Pioneer DJ Corporation -> Pioneer DJ Corporation.)
FirewallRules: [TCP Query User{E221CA3A-24FF-4394-A2D4-756D32689B15}C:\program files (x86)\pioneer\rekordbox 4.5.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\rekordbox.exe (Pioneer DJ Corporation -> Pioneer DJ Corporation)
FirewallRules: [UDP Query User{D8C0D318-347F-41F2-B82D-60581718CB4D}C:\program files (x86)\pioneer\rekordbox 4.5.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\rekordbox.exe (Pioneer DJ Corporation -> Pioneer DJ Corporation)
FirewallRules: [TCP Query User{32DBA8EF-5BD0-4EEA-BFBD-68E4E2F7A9B5}C:\program files (x86)\pioneer\rekordbox 4.5.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\psvnfsd.exe (Pioneer DJ Corporation -> Pioneer Corporation.)
FirewallRules: [UDP Query User{92493C55-1EE8-4B3D-8146-7809AA276FF8}C:\program files (x86)\pioneer\rekordbox 4.5.0\psvnfsd.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\psvnfsd.exe (Pioneer DJ Corporation -> Pioneer Corporation.)
FirewallRules: [TCP Query User{8A645FA0-9C73-4EFC-B323-66CD62C3C8B8}C:\program files (x86)\pioneer\rekordbox 4.5.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\psvlinksysmgr.exe (Pioneer DJ Corporation -> Pioneer DJ Corporation.)
FirewallRules: [UDP Query User{C2340C67-96AF-40C6-B842-75A8ABB48F55}C:\program files (x86)\pioneer\rekordbox 4.5.0\psvlinksysmgr.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\psvlinksysmgr.exe (Pioneer DJ Corporation -> Pioneer DJ Corporation.)
FirewallRules: [TCP Query User{2A8C690E-B7F1-4D65-B4E9-B43F0DF9A645}C:\program files (x86)\pioneer\rekordbox 4.5.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\rekordbox.exe (Pioneer DJ Corporation -> Pioneer DJ Corporation)
FirewallRules: [UDP Query User{68185D26-1A89-4666-ACFF-7BB0BDE8F516}C:\program files (x86)\pioneer\rekordbox 4.5.0\rekordbox.exe] => (Allow) C:\program files (x86)\pioneer\rekordbox 4.5.0\rekordbox.exe (Pioneer DJ Corporation -> Pioneer DJ Corporation)
FirewallRules: [TCP Query User{7BAEFA0F-42FA-4EE9-9249-3E18216CA6F7}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe (XBMC-Foundation) [File not signed]
FirewallRules: [UDP Query User{90A76CCA-F37F-4EF1-9744-4177462DADFB}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe (XBMC-Foundation) [File not signed]
FirewallRules: [{A51866B1-1CA3-4432-BCF9-38BA67FE1698}] => (Allow) C:\Program Files (x86)\Vuze\Azureus.exe (Azureus Software, Inc. -> Azureus Software, Inc)
FirewallRules: [{1F7BC6BE-2CB4-4B28-916D-1DE0ABE0CD97}] => (Allow) C:\Program Files (x86)\Vuze\Azureus.exe (Azureus Software, Inc. -> Azureus Software, Inc)
FirewallRules: [TCP Query User{10A7FA5A-3AC1-40D6-A616-BD17855EEAAD}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{526E7677-636C-429E-84DF-2AE272999C47}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{69320998-3E0F-4771-9D14-686A216F18EE}] => (Allow) C:\Program Files\Plex\Plex Media Player\PlexMediaPlayer.exe (Plex, Inc -> )
FirewallRules: [{FC33D97E-DAFD-4458-B04E-AB6AB45349F1}] => (Allow) C:\Program Files\Plex\Plex Media Player\PMPHelper.exe () [File not signed]
FirewallRules: [{B5FD4324-C36F-48DA-B1F2-D1021EE9A167}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{F5E7F39E-8D13-4B93-B6A4-28DBAF0F6F54}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{A3358224-651C-41A9-AC7C-552B68D66B34}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{085A9798-B062-439C-B098-09A9366BAED3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{E6C4EBDC-6CE0-4985-A864-1D101A969778}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{AB0F1F1C-E2DE-4194-9899-CB48DA32A918}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{7A118EB4-00F7-4AA4-86BF-8DE1502A45D5}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{870DEF38-2764-48FA-8A21-8814FA3EC605}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C7940006-3324-4448-88F0-B4BA7DA25D4A}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4C6DFCA4-5BF0-43CE-BC11-395252CFB2EE}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{5D417251-DD57-43CA-A8A3-29370C5F74C4}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CA9EDE06-AC1E-4756-9439-944C860A8FEB}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{63F166E8-2BA2-4523-9020-1C2BFFCE09CB}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{3AE86ADC-ACC2-4719-BE10-27670B05DC20}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{D4A8E572-161B-40FB-9173-851205EFEFE6}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{03D11B16-C167-484F-80B7-67F8B5054984}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0C3B833A-EB22-48C9-8792-8061385F8FF6}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{B6C3FE5F-3D19-4DB2-82EB-9C1197560AD0}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F1D7D9D8-11D8-4146-84B8-995192EE7F2A}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{AF092756-65EE-4E31-9241-914F108F5060}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{95823A84-8378-45CD-A0C5-61DD47708960}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C76A4E4D-77A6-491A-8D1B-087AD2545CB7}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{D0F7CBFF-45EB-435E-8DC0-5D37339505C6}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{3DFB2A1A-E67D-47B2-B924-CAA72F09ED0B}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{DA18C3DF-DCBD-4F7C-8A92-36D7D114F659}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{302833F2-B778-4F1A-8697-9D06A3316973}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{14571879-DDC6-48EA-8A31-FCADFE1E2475}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4456182E-AF6B-4F74-920A-137AC4197124}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{52DCDBFE-4C63-438F-8D90-6587467E9903}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{6F249DFD-B74B-477A-A329-E94E377DADAE}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{239FEC0C-8EF7-41DC-85D5-C43F46B6216D}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{BDAE623D-523C-4E3D-8C48-CA9B0FD23B06}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{CFEEE174-C59F-4D25-BA7D-9F381C3E329F}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{7448DDC4-80E6-47AE-AE6D-53B8FFCF1F69}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{571E4784-1EBC-4963-B9AB-6B5374B172E3}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C97D9CA0-445B-4617-8FD3-7FB42ED2BBC0}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe (Plex, Inc -> Plex, Inc.)
FirewallRules: [{7C9E25EB-9D07-43A8-8221-72E1C9372C19}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe (Plex, Inc -> Python Software Foundation)
FirewallRules: [{7A70A73D-FDB9-47BC-90F1-47BA1884E4BE}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex DLNA Server.exe (Plex, Inc -> Plex, Inc.)
FirewallRules: [{7941CDFA-CF20-4E86-96C9-B751A51F0910}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe (Plex, Inc -> )
FirewallRules: [{3192D831-0783-4C26-94C0-B8029DF5671A}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{73AF9150-2217-4B01-9500-67AD6F76CFAC}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{AF4F25D8-3538-435A-AD20-1ABAC9E41F92}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{BBB04EBA-FAB3-48BF-AE14-003CDD857EA0}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{FACC9259-094A-48F0-AF66-E6D80C2A9089}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{6F56B038-1938-4B4B-9BB7-298458CDDC87}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{66DEEED2-8650-433B-A899-C754FF17A6C3}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C0E0E718-C9EC-4AA2-B2F5-29A7DCEF1FE8}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F4E6B148-C691-4791-842B-258D7C1F00EF}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{846EA420-0F97-4114-9CC9-CE13F4E3BEE0}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{841F6F77-C754-447B-860B-2A6355EFE070}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{2AA3AFFA-C128-4E26-9C42-2253E9B98FFF}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{391F5BB1-F746-4597-97D3-8FCE01213C22}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{958CD2FE-1581-4A69-A2AA-57084E22B275}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{BDFEC31E-4543-470C-A874-25F4832FF304}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{AE4A3F19-96C0-4A56-B72B-5E7B6C669756}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4B00294B-C3D1-49A2-9679-B222871E44CE}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C1FB728A-F1AE-411A-9D84-C66FBF237A34}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{CCDA6DE6-E638-4B34-BD85-D3B3921F4DCD}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{56401A91-2695-4E85-A63F-9184342464AF}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{29CD6077-AA28-4DD2-A2A2-060A20E6877D}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{E92F43F4-FDB1-4D19-9235-769D681FE8F8}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{020EF55C-3C94-42A1-B313-1FDB6C162EC0}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{DE5C456C-0345-4539-A8AF-756FF87A13E6}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{5A472341-84AF-40D8-92BD-5AC989CAC76C}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F9AE86DF-C2AC-4437-B37E-F93FC491AC89}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{A514091E-EA67-4AC1-BD10-89B97F28C75F}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{DCF3A79D-CADA-4B25-A350-1E60E4995E3E}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{6CFD0E82-AB0F-46AC-A65F-E660BD2F248C}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{35632B82-7F75-4547-B769-BD952B4CA95B}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{083E0017-740D-4DAA-B1C3-685E70B709CB}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{90689765-F94C-4CBF-BE85-97C50471809E}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{BD3DA248-B537-4551-83CB-6A612EBF0DD8}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{1DDBD690-9509-4E5C-AC91-3342E67E266D}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{559D2D92-A0D8-4E34-B45E-692D4E54BFC4}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F10CB7B9-0941-4C9F-BC71-F9DAEAD6B328}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{11742E77-A27E-4A8C-96F6-A66B30B861B4}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{1379995F-4E76-4DDC-9388-C8E67E07CAFA}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{030F2C57-AB7D-49AA-8F0B-DA0398EB1964}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0E960F29-D9CB-4418-B8B3-9B7D0A0D1933}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{63A4971D-2881-4C63-9490-CBE0E3FD9434}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{96642132-2B65-432A-81D4-B8E76B563FD9}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{56AF4B2E-EE0D-4A2D-B18F-8E7A0FF547B4}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0997887F-11AB-4763-A2E3-7759C44CE210}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{FF397C1D-695C-40AA-B740-ED212B1A7748}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{2BF41F3C-3D3B-481D-9D64-AC95FCEEF009}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{1A87017C-65F9-480F-AEE8-D0C613559D51}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4F4DF99B-7448-410A-AC00-613254268777}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{41C1D557-F24D-4021-86F4-ABB2BB687645}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4F42887C-2D8B-46D6-8D27-DA803B011233}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{220C7136-4D8F-4376-91BC-9EEC21FC34AE}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{86A651A0-1163-458A-8CDB-EC506E228959}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{90679069-6382-4740-810C-E1F412508BA2}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4D58E217-0D0B-4B6A-9127-0CA104FEA6F0}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C317FF5C-E8C7-44CE-ADCE-66347842BECF}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{D9C88254-6FBA-4B45-ADDF-792BF84D4DB9}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{7B28E8F4-0ACD-486E-8BE0-E1FCE56769F1}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12100.7.42015.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
 
==================== Codecs (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Drivers32: [vidc.ffds] => C:\WINDOWS\system32\ff_vfw.dll [127488 2014-05-13] () [File not signed]
HKLM\...\Drivers32: [vidc.ffds] => C:\Windows\SysWOW64\ff_vfw.dll [112640 2014-05-13] () [File not signed]
HKLM\...\Drivers32: [vidc.xvid] => C:\Windows\SysWOW64\xvidvfw.dll [235520 2014-04-08] () [File not signed]
HKLM\...\Drivers32: [vidc.x264] => C:\Windows\SysWOW64\x264vfw.dll [4102656 2013-12-16] (x264vfw project) [File not signed]
HKLM\...\Drivers32: [vidc.lags] => C:\Windows\SysWOW64\lagarith.dll [216064 2013-12-16] ( ) [File not signed]
HKLM\...\Drivers32: [msacm.divxa32] => C:\Windows\SysWOW64\DivXa32.acm [291408 2013-12-16] (Packed With Joy !) [File not signed]
HKLM\...\Drivers32: [msacm.vorbis] => C:\Windows\SysWOW64\vorbis.acm [1554944 2009-09-15] (HMS hxxp://hp.vector.co.jp/authors/VA012897/) [File not signed]
 
==================== Restore Points =========================
 
26-09-2019 18:07:28 Scheduled Checkpoint
 
==================== Faulty Device Manager Devices =============
 
Name: Standard PS/2 Keyboard
Description: Standard PS/2 Keyboard
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard keyboards)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (09/28/2019 04:29:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname OfficePC-PC.local already in use; will try OfficePC-PC-2.local instead
 
Error: (09/28/2019 04:29:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister    4 OfficePC-PC.local. Addr 192.168.0.19
 
Error: (09/28/2019 04:29:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.19:5353   16 OfficePC-PC.local. AAAA 2607:FEA8:BE1F:F841:0000:0000:0000:0005
 
Error: (09/28/2019 04:23:16 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine QueryFullProcessImageNameW.  hr = 0x8007001f, A device attached to the system is not functioning.
.
 
 
Operation:
   Executing Asynchronous Operation
 
Context:
   Current State: DoSnapshotSet
 
Error: (09/28/2019 04:21:21 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface.  hr = 0x80070005, Access is denied.
.
This is often caused by incorrect security settings in either the writer or requestor process.
 
 
Operation:
   Gathering Writer Data
 
Context:
   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Name: System Writer
   Writer Instance ID: {9bbd6eab-2572-41b5-a3b0-97b406f46a1e}
 
Error: (09/28/2019 12:09:16 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Microsoft.Photos.exe version 2019.19071.17920.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
 
Process ID: 2cd0
 
Start Time: 01d5756e35b008eb
 
Termination Time: 4294967295
 
Application Path: C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.17920.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
 
Report Id: b854b07c-c0f4-4ee7-a6ec-982650ed1620
 
Faulting package full name: Microsoft.Windows.Photos_2019.19071.17920.0_x64__8wekyb3d8bbwe
 
Faulting package-relative application ID: App
 
Error: (09/26/2019 05:28:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname OfficePC-PC.local already in use; will try OfficePC-PC-2.local instead
 
Error: (09/26/2019 05:28:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister    4 OfficePC-PC.local. Addr 192.168.0.19
 
 
System errors:
=============
Error: (09/29/2019 12:29:32 PM) (Source: DCOM) (EventID: 10000) (User: NT AUTHORITY)
Description: Unable to start a DCOM Server: {3C296D07-90AE-4FAC-86F9-65EAA8B82D22}. The error:
"5"
Happened while starting this command:
C:\WINDOWS\system32\SppExtComObj.exe -Embedding
 
Error: (09/29/2019 12:29:32 PM) (Source: DCOM) (EventID: 10000) (User: NT AUTHORITY)
Description: Unable to start a DCOM Server: {3C296D07-90AE-4FAC-86F9-65EAA8B82D22}. The error:
"5"
Happened while starting this command:
C:\WINDOWS\system32\SppExtComObj.exe -Embedding
 
Error: (09/29/2019 12:14:27 PM) (Source: DCOM) (EventID: 10000) (User: NT AUTHORITY)
Description: Unable to start a DCOM Server: {3C296D07-90AE-4FAC-86F9-65EAA8B82D22}. The error:
"5"
Happened while starting this command:
C:\WINDOWS\system32\SppExtComObj.exe -Embedding
 
Error: (09/29/2019 12:14:27 PM) (Source: DCOM) (EventID: 10000) (User: NT AUTHORITY)
Description: Unable to start a DCOM Server: {3C296D07-90AE-4FAC-86F9-65EAA8B82D22}. The error:
"5"
Happened while starting this command:
C:\WINDOWS\system32\SppExtComObj.exe -Embedding
 
Error: (09/29/2019 11:29:44 AM) (Source: DCOM) (EventID: 10000) (User: NT AUTHORITY)
Description: Unable to start a DCOM Server: {3C296D07-90AE-4FAC-86F9-65EAA8B82D22}. The error:
"5"
Happened while starting this command:
C:\WINDOWS\system32\SppExtComObj.exe -Embedding
 
Error: (09/29/2019 11:29:44 AM) (Source: DCOM) (EventID: 10000) (User: NT AUTHORITY)
Description: Unable to start a DCOM Server: {3C296D07-90AE-4FAC-86F9-65EAA8B82D22}. The error:
"5"
Happened while starting this command:
C:\WINDOWS\system32\SppExtComObj.exe -Embedding
 
Error: (09/29/2019 09:09:48 AM) (Source: DCOM) (EventID: 10000) (User: NT AUTHORITY)
Description: Unable to start a DCOM Server: {3C296D07-90AE-4FAC-86F9-65EAA8B82D22}. The error:
"5"
Happened while starting this command:
C:\WINDOWS\system32\SppExtComObj.exe -Embedding
 
Error: (09/29/2019 09:09:48 AM) (Source: DCOM) (EventID: 10000) (User: NT AUTHORITY)
Description: Unable to start a DCOM Server: {3C296D07-90AE-4FAC-86F9-65EAA8B82D22}. The error:
"5"
Happened while starting this command:
C:\WINDOWS\system32\SppExtComObj.exe -Embedding
 
 
CodeIntegrity:
===================================
 
Date: 2018-10-03 15:59:50.814
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
 
Date: 2018-10-03 15:48:24.144
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
 
Date: 2018-10-03 15:47:52.480
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
 
Date: 2018-10-02 23:10:38.172
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
 
Date: 2018-10-02 21:06:44.160
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
 
Date: 2018-10-02 21:06:22.464
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
 
Date: 2018-10-02 21:03:58.078
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
 
Date: 2018-10-02 21:02:03.406
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
 
==================== Memory info =========================== 
 
BIOS: American Megatrends Inc. 1008 04/01/2008
Motherboard: ASUSTeK Computer INC. P5K SE
Processor: Intel® Core™2 Duo CPU E6750 @ 2.66GHz
Percentage of memory in use: 61%
Total physical RAM: 7167.11 MB
Available physical RAM: 2732.53 MB
Total Virtual: 14335.11 MB
Available Virtual: 10010.09 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:930.97 GB) (Free:585.79 GB) NTFS
Drive e: (KINGSTON) (Removable) (Total:3.73 GB) (Free:3.45 GB) FAT32
Drive f: (Seagate Backup Plus Drive) (Fixed) (Total:7451.91 GB) (Free:4454.18 GB) NTFS
 
\\?\Volume{15ec17a7-e2a2-11e3-9e42-806e6f6e6963}\ (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS
\\?\Volume{915f062f-0000-0000-0000-90c4e8000000}\ () (Fixed) (Total:0.44 GB) (Free:0.06 GB) NTFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 915F062F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
 
========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 3.7 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=3.7 GB) - (Type=0B)
 
========================================================
Disk: 2 (Size: 7452 GB) (Disk ID: 9FC4602D)
 
Partition: GPT.
 
==================== End of Addition.txt ============================

  • 0

#8
icotonev

icotonev

    Trusted Helper

  • Malware Removal
  • 16 posts

Hi .. Sorry but during the week I was not able to post in the forum due to my work engagement ..! :)  I apologize ..! :) What happens to your problem ...How does your system behave ..?


  • 0

#9
heyage13

heyage13

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 121 posts

Hey no worries - no popups - I think the issue has been corrected my friend. Thanks so much for all the help!


  • 0






Similar Topics


Also tagged with one or more of these keywords: Spyware removal

1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP