Jresnick523
2016-06-16, 19:47
Hey Guys,
So I tried to read all the stickies to provide the logs that are needed to start a topic here. The symptoms are that my computer is lagging up for no reason on basic tasks and there is a loading sign on the cursor almost all the time and the browser windows keep getting deselected for what appears to be no reason. I tried to attach the log files but most were "too big" according to the forum so i pasted them below. Please let me know if there is any other information I can provide to be helpful.
Thank you in advanced for any and all help!
-Josh
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:16-06-2016
Ran by JewFro (administrator) on THEMOTHERSHIP (16-06-2016 13:33:39)
Running from C:\Users\JewFro\Downloads
Loaded Profiles: JewFro (Available Profiles: JewFro & Afro)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\51.0.2704.7\remoting_host.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\51.0.2704.7\remoting_host.exe
(Hi-Rez Studios) T:\HiPatchService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(iolo technologies, LLC) C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe
(Microsoft Corporation) C:\Program Files\Microsoft SDKs\Kinect\v1.0 Beta2\Service\KinectManagementService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
() C:\xampp\mysql\bin\mysqld.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
() C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe
(CYREN Inc.) C:\Program Files\Common Files\Commtouch\AntiVirus5\vsedsps.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
() C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDFME\WDFME.exe
() C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDSC.exe
(CYREN Inc.) C:\Program Files\Common Files\Commtouch\AntiVirus5\vseamps.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(iolo technologies, LLC) C:\Program Files (x86)\iolo\System Mechanic Professional\ioloGovernor64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP Officejet Pro 8620\Bin\ScanToPCActivationApp.exe
() C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(iolo technologies, LLC) C:\Program Files (x86)\iolo\System Mechanic Professional\LiveBoost.exe
() C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv.exe
() C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Hammer & Chisel, Inc.) C:\Users\JewFro\AppData\Local\Discord\app-0.0.291\Discord.exe
(Hammer & Chisel, Inc.) C:\Users\JewFro\AppData\Local\Discord\app-0.0.291\Discord.exe
(Hammer & Chisel, Inc.) C:\Users\JewFro\AppData\Local\Discord\app-0.0.291\Discord.exe
() C:\Users\JewFro\AppData\Local\GitHub\PortableGit_d76a6a98c9315931ec4927243517bc09e9b731a0\usr\bin\ssh-agent.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP Officejet Pro 8620\Bin\HPNetworkCommunicatorCom.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.84\nacl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.84\nacl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7156296 2013-03-05] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2398776 2016-05-02] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.10.398\AsusWSPanel.exe [5247808 2014-08-19] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [iolo Startup] => C:\Program Files (x86)\iolo\Common\Lib\ioloLManager.exe [4612544 2016-02-19] (iolo technologies, LLC)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\Run: [HP Officejet Pro 8620 (NET)] => C:\Program Files\HP\HP Officejet Pro 8620\Bin\ScanToPCActivationApp.exe [3487240 2014-07-21] (Hewlett-Packard Development Company, LP)
HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\MountPoints2: {5ac4160c-8ae9-11e3-a76d-806e6f6e6963} - D:\.\Bin\ASSETUP.exe
HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\MountPoints2: {dd3cd12b-0736-11e4-ad07-74d02bc47eec} - G:\setup.exe -a
HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\MountPoints2: {ec6c980a-ccb7-11e3-a73d-74d02bc47eec} - G:\VZW_Software_upgrade_assistant.exe
HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [242688 2010-11-20] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.10.398\ASUSWSShellExt64.dll [2013-06-25] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.10.398\ASUSWSShellExt64.dll [2013-06-25] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.10.398\ASUSWSShellExt64.dll [2013-06-25] (ASUS Cloud Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk [2014-03-21]
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDDMStatus.lnk [2014-02-01]
ShortcutTarget: WDDMStatus.lnk -> C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe (Western Digital Technologies, Inc.)
BootExecute: "autocheck autochk * "sdnclean64.exebddel.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog9 01 C:\Windows\system32\iavlsp.dll No File
Winsock: Catalog9 02 C:\Windows\system32\iavlsp.dll No File
Winsock: Catalog9 13 C:\Windows\system32\iavlsp.dll No File
Winsock: Catalog9-x64 01 C:\Windows\system32\iavlsp64.dll [160256 2014-07-16] ()
Winsock: Catalog9-x64 02 C:\Windows\system32\iavlsp64.dll [160256 2014-07-16] ()
Winsock: Catalog9-x64 13 C:\Windows\system32\iavlsp64.dll [160256 2014-07-16] ()
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{050A6CD1-AEBC-4656-9568-A2DCEF67092B}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{7BAEF71C-9C8C-4F74-AB03-2997778E0256}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{AD3D85A7-F74A-4386-8A62-996982BC24E9}: [DhcpNameServer] 192.168.42.129
Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre8\bin\ssv.dll [2014-05-29] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office16\URLREDIR.DLL [2015-07-31] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2016-01-13] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre8\bin\jp2ssv.dll [2014-05-29] (Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-11-18] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-05-07] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office16\URLREDIR.DLL [2015-07-31] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2016-01-13] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-01-13] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-01-13] (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-12] ()
FF Plugin: @java.com/DTPlugin,version=11.5.2 -> C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll [2014-05-29] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.5.2 -> C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll [2014-05-29] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-12] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> E:\Mozilla Plugins\npitunes.dll [No File]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-05-07] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-05-07] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-11-18] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-02-09] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-02-09] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-09-12] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3547861629-2237757925-1048173658-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\JewFro\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-05-08] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-11-18] (Microsoft Corporation)
Chrome:
=======
CHR HomePage: Default -> hxxps://www.google.com/
CHR StartupUrls: Default -> "hxxp://search.conduit.com/?ctid=CT3324774&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SP280DDF8D-D416-4907-8A5E-56C5E5FAFEDA&SSPV=","hxxp://thepulse.blogs.pace.edu/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.84\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.84\ppGoogleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.84\pdf.dll => No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll => No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Profile: C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-17]
CHR Extension: (YouTube) - C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-17]
CHR Extension: (Google Search) - C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-17]
CHR Extension: (Universe 1080p) - C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpjflbaeldlhnllfjdiogkjgnmljfkli [2016-03-30]
CHR Extension: (Google Play Music) - C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2016-06-14]
CHR Extension: (Chrome Sniffer Plus) - C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhhdlnnepfjhlhilgmeepgkhjmhhhjkh [2016-02-17]
CHR Extension: (Chrome Remote Desktop) - C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2016-06-02]
CHR Extension: (Google Docs Offline) - C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-06-02]
CHR Extension: (Chrome Web Store Payments) - C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]
CHR Extension: (Gmail) - C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-17]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 Apache2.4; C:\xampp\apache\bin\httpd.exe [22528 2015-10-13] (Apache Software Foundation) [File not signed]
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2013-06-04] ()
R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\51.0.2704.7\remoting_host.exe [68488 2016-04-14] (Google Inc.)
R2 ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [414360 2016-02-05] ()
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [File not signed]
S4 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1165368 2016-05-02] (NVIDIA Corporation)
R2 HiPatchService; T:\HiPatchService.exe [9728 2016-03-14] (Hi-Rez Studios) [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 ioloSystemService; C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe [4759600 2016-02-19] (iolo technologies, LLC)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation)
R2 KinectManagement; C:\Program Files\Microsoft SDKs\Kinect\v1.0 Beta2\Service\KinectManagementService.exe [131584 2011-09-24] (Microsoft Corporation) [File not signed]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-08-08] (LogMeIn, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
R2 mysql; C:\xampp\mysql\bin\mysqld.exe [11583304 2016-03-23] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144 2016-05-02] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3634232 2016-05-02] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2522680 2016-05-02] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-02-04] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1740760 2014-09-03] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
R2 SystemUsageReportSvc_WILLAMETTE; C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe [115864 2016-02-05] ()
S3 USER_ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [414360 2016-02-05] ()
R2 vseamps; C:\Program Files\Common Files\Commtouch\AntiVirus5\vseamps.exe [122120 2014-03-25] (CYREN Inc.)
R2 vsedsps; C:\Program Files\Common Files\Commtouch\AntiVirus5\vsedsps.exe [119560 2014-03-25] (CYREN Inc.)
S3 vseqrts; C:\Program Files\Common Files\Commtouch\AntiVirus5\vseqrts.exe [181512 2014-03-25] (CYREN Inc.)
R2 WDDMService; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [288256 2010-09-08] (WDC) [File not signed]
R2 WDFME; C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDFME\WDFME.exe [1034752 2010-09-08] () [File not signed]
R2 WDSC; C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDSC.exe [485376 2010-09-08] () [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMP; C:\Windows\system32\Drivers\amp.sys [174856 2014-03-25] (CYREN Inc.)
S2 AMPSE; C:\Windows\system32\Drivers\ampse.sys [1728776 2014-03-25] (CYREN Inc.)
R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [47512 2013-01-10] (Asmedia Technology)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-21] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2014-02-27] ()
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [496400 2013-02-26] (Intel Corporation)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 ElRawDisk; C:\Windows\system32\drivers\ElRawDsk.sys [30752 2013-12-03] (EldoS Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-01-31] (Intel Corporation)
S3 KinectCamera; C:\Windows\System32\Drivers\kinectcamera.sys [42880 2011-09-24] (Microsoft Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-06-16] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28216 2016-05-02] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
R1 RawDisk3; C:\Windows\system32\drivers\rawdsk3.sys [32912 2014-07-16] (EldoS Corporation)
R1 SDHookDriver; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHookDrv64.sys [64160 2014-04-25] ()
R3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [21984 2015-06-04] ()
R1 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys [127456 2016-03-04] (Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\System32\DRIVERS\VBoxNetLwf.sys [205784 2016-03-04] (Oracle Corporation)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-06-16 13:33 - 2016-06-16 13:33 - 00027549 _____ C:\Users\JewFro\Downloads\FRST.txt
2016-06-16 13:32 - 2016-06-16 13:33 - 00000000 ____D C:\FRST
2016-06-16 13:32 - 2016-06-16 13:32 - 02386944 _____ (Farbar) C:\Users\JewFro\Downloads\FRST64.exe
2016-06-15 23:30 - 2016-06-15 23:30 - 00000000 ____D C:\Users\JewFro\AppData\Roaming\Subversion
2016-06-15 23:30 - 2016-06-15 23:30 - 00000000 ____D C:\Users\JewFro\AppData\Roaming\MonoDevelop-Unity-5.0
2016-06-15 23:30 - 2016-06-15 23:30 - 00000000 ____D C:\Users\JewFro\AppData\Local\MonoDevelop-Unity-5.0
2016-06-15 23:16 - 2016-06-15 23:16 - 00000000 ____D C:\Users\JewFro\Downloads\Ex_Files_Unity_5_2D_EssT
2016-06-15 18:46 - 2016-06-15 18:52 - 30157050 _____ C:\Users\JewFro\Downloads\Ex_Files_Unity_5_2D_EssT.zip
2016-06-15 18:31 - 2016-06-15 18:31 - 00000136 _____ C:\Users\JewFro\.gitconfig
2016-06-14 21:49 - 2016-05-13 18:15 - 00382184 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-06-14 21:49 - 2016-05-13 18:09 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-06-14 21:49 - 2016-05-13 18:09 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-06-14 21:49 - 2016-05-13 18:09 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-06-14 21:49 - 2016-05-13 18:09 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-06-14 21:49 - 2016-05-13 17:54 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-06-14 21:49 - 2016-05-13 17:50 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2016-06-14 21:49 - 2016-05-13 17:49 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-06-14 21:49 - 2016-05-13 17:49 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-06-14 21:49 - 2016-05-13 17:27 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-06-14 21:49 - 2016-05-12 13:20 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-06-14 21:49 - 2016-05-12 13:20 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-06-14 21:49 - 2016-05-12 13:15 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-06-14 21:49 - 2016-05-12 13:15 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-06-14 21:49 - 2016-05-12 13:15 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-06-14 21:49 - 2016-05-12 13:15 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-06-14 21:49 - 2016-05-12 13:15 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-06-14 21:49 - 2016-05-12 11:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-06-14 21:49 - 2016-05-12 10:58 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-06-14 21:49 - 2016-05-12 10:58 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-06-14 21:49 - 2016-05-12 10:58 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-06-14 21:49 - 2016-05-12 10:58 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-06-14 21:49 - 2016-05-12 10:58 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-06-14 21:49 - 2016-05-12 10:58 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-06-14 21:49 - 2016-05-12 10:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-06-14 21:49 - 2016-05-12 10:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-06-14 21:49 - 2016-05-12 10:51 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-06-14 21:49 - 2016-05-12 09:05 - 00459640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-06-14 21:49 - 2016-05-12 09:05 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-06-14 21:49 - 2016-05-12 09:04 - 00249352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-06-14 21:48 - 2016-05-18 12:10 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-06-14 21:48 - 2016-05-18 12:09 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-06-14 21:48 - 2016-05-12 13:15 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\winipsec.dll
2016-06-14 21:48 - 2016-05-12 13:14 - 00794624 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-06-14 21:48 - 2016-05-12 13:14 - 00793088 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2016-06-14 21:48 - 2016-05-12 13:14 - 00502272 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2016-06-14 21:48 - 2016-05-12 13:14 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll
2016-06-14 21:48 - 2016-05-12 13:14 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2016-06-14 21:48 - 2016-05-12 13:14 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
2016-06-14 21:48 - 2016-05-12 13:14 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.dll
2016-06-14 21:48 - 2016-05-12 11:18 - 00591872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefcl.dll
2016-06-14 21:48 - 2016-05-12 11:18 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\polstore.dll
2016-06-14 21:48 - 2016-05-12 11:18 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2016-06-14 21:48 - 2016-05-12 11:18 - 00070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winipsec.dll
2016-06-14 21:48 - 2016-05-12 11:18 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FwRemoteSvr.dll
2016-06-14 21:48 - 2016-05-12 11:06 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.exe
2016-06-14 21:48 - 2016-05-12 11:03 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-06-14 21:48 - 2016-05-12 10:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpscript.dll
2016-06-14 21:48 - 2016-05-12 10:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpscript.exe
2016-06-14 21:48 - 2016-05-11 13:02 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2016-06-14 21:48 - 2016-05-11 13:02 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-06-14 21:48 - 2016-05-11 13:02 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-06-14 21:48 - 2016-05-11 13:02 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2016-06-14 21:48 - 2016-05-11 11:19 - 00363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2016-06-14 21:48 - 2016-05-11 11:19 - 00351744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2016-06-14 21:48 - 2016-05-11 11:19 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2016-06-14 21:48 - 2016-05-11 11:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll
2016-06-14 21:48 - 2016-05-11 11:11 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2016-06-14 21:48 - 2016-05-11 11:01 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe
2016-06-14 21:48 - 2016-05-11 10:58 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2016-06-14 21:46 - 2016-05-23 19:37 - 00394960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-06-14 21:46 - 2016-05-23 18:54 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-06-14 21:46 - 2016-05-21 13:28 - 25802752 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-06-14 21:46 - 2016-05-21 12:57 - 20341248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-06-14 21:46 - 2016-05-20 18:27 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-06-14 21:46 - 2016-05-20 18:27 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-06-14 21:46 - 2016-05-20 18:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-06-14 21:46 - 2016-05-20 18:10 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-06-14 21:46 - 2016-05-20 18:09 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-06-14 21:46 - 2016-05-20 18:09 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-06-14 21:46 - 2016-05-20 18:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-06-14 21:46 - 2016-05-20 18:08 - 02895360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-06-14 21:46 - 2016-05-20 18:08 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-06-14 21:46 - 2016-05-20 18:02 - 06051328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-06-14 21:46 - 2016-05-20 18:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-06-14 21:46 - 2016-05-20 17:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-06-14 21:46 - 2016-05-20 17:57 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-06-14 21:46 - 2016-05-20 17:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-06-14 21:46 - 2016-05-20 17:57 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-06-14 21:46 - 2016-05-20 17:56 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-06-14 21:46 - 2016-05-20 17:56 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-06-14 21:46 - 2016-05-20 17:55 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-06-14 21:46 - 2016-05-20 17:54 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-06-14 21:46 - 2016-05-20 17:54 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-06-14 21:46 - 2016-05-20 17:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-06-14 21:46 - 2016-05-20 17:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-06-14 21:46 - 2016-05-20 17:50 - 02287104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-06-14 21:46 - 2016-05-20 17:49 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-06-14 21:46 - 2016-05-20 17:48 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-06-14 21:46 - 2016-05-20 17:45 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-06-14 21:46 - 2016-05-20 17:45 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-06-14 21:46 - 2016-05-20 17:44 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-06-14 21:46 - 2016-05-20 17:44 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-06-14 21:46 - 2016-05-20 17:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-06-14 21:46 - 2016-05-20 17:41 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-06-14 21:46 - 2016-05-20 17:33 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-06-14 21:46 - 2016-05-20 17:33 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-06-14 21:46 - 2016-05-20 17:32 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-06-14 21:46 - 2016-05-20 17:29 - 13815808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-06-14 21:46 - 2016-05-20 17:28 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-06-14 21:46 - 2016-05-20 17:27 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-06-14 21:46 - 2016-05-20 17:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-06-14 21:46 - 2016-05-20 17:26 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-06-14 21:46 - 2016-05-20 17:25 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-06-14 21:46 - 2016-05-20 17:23 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-06-14 21:46 - 2016-05-20 17:23 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-06-14 21:46 - 2016-05-20 17:22 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-06-14 21:46 - 2016-05-20 17:21 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-06-14 21:46 - 2016-05-20 17:19 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-06-14 21:46 - 2016-05-20 17:14 - 04610048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-06-14 21:46 - 2016-05-20 17:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-06-14 21:46 - 2016-05-20 17:11 - 15420928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-06-14 21:46 - 2016-05-20 17:11 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-06-14 21:46 - 2016-05-20 17:09 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-06-14 21:46 - 2016-05-20 17:09 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-06-14 21:46 - 2016-05-20 17:08 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-06-14 21:46 - 2016-05-20 17:08 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-06-14 21:46 - 2016-05-20 17:07 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-06-14 21:46 - 2016-05-20 17:07 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-06-14 21:46 - 2016-05-20 17:06 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-06-14 21:46 - 2016-05-20 16:46 - 02597888 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-06-14 21:46 - 2016-05-20 16:42 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-06-14 21:46 - 2016-05-20 16:38 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-06-14 21:46 - 2016-05-20 16:38 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-06-14 21:46 - 2016-05-20 16:34 - 01544192 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-06-14 21:46 - 2016-05-20 16:23 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-06-13 23:18 - 2016-06-13 23:31 - 00363606 _____ C:\Windows\ntbtlog.txt
2016-06-13 17:07 - 2016-06-16 13:28 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-06-13 17:07 - 2016-06-13 17:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-06-13 17:07 - 2016-06-13 17:07 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-06-13 17:07 - 2016-06-13 17:07 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-06-13 17:07 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-06-13 17:07 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-06-13 17:07 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-06-13 17:06 - 2016-06-13 17:06 - 22851472 _____ (Malwarebytes ) C:\Users\JewFro\Downloads\mbam-setup-2.2.1.1043.exe
2016-06-11 13:54 - 2016-06-11 13:54 - 00000000 ____D C:\Windows\pss
2016-06-11 13:53 - 2016-06-11 13:53 - 00139612 _____ C:\Users\JewFro\Documents\cc_20160611_135352.reg
2016-06-11 13:48 - 2016-06-11 13:48 - 00000000 ____D C:\Users\JewFro\Documents\ProcAlyzer Dumps
2016-06-11 13:42 - 2009-06-10 17:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts.20160611-134249.backup
2016-06-11 13:41 - 2016-06-11 13:41 - 00042206 _____ C:\Windows\SysWOW64\bddel.dat
2016-06-11 03:04 - 2016-06-11 03:04 - 00000000 ____D C:\Program Files\Common Files\AV
2016-06-11 03:04 - 2015-07-28 17:52 - 00821920 _____ (Safer-Networking Ltd. ) C:\Users\Public\Desktop\Post Win10 Spybot-install.exe
2016-06-11 03:00 - 2016-06-11 03:00 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2016-06-11 02:59 - 2016-06-14 00:20 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2016-06-11 02:59 - 2016-06-11 02:59 - 00001395 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2016-06-11 02:59 - 2016-06-11 02:59 - 00001383 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2016-06-11 02:59 - 2016-06-11 02:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2016-06-11 02:59 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2016-06-11 02:58 - 2016-06-11 03:06 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-06-11 02:58 - 2016-06-11 02:58 - 00558328 _____ (Safer-Networking Ltd. ) C:\Users\JewFro\Downloads\spybot2-license.exe
2016-06-09 23:18 - 2016-06-09 23:18 - 00000000 ____D C:\Users\JewFro\Downloads\simple-icons-gh-pages
2016-06-09 17:25 - 2016-06-15 23:16 - 00000000 ____D C:\Users\JewFro\AppData\LocalLow\DefaultCompany
2016-06-09 17:04 - 2016-06-09 17:04 - 22136717 _____ C:\Users\JewFro\Downloads\tiled-0.16.1-win64.msi
2016-06-09 17:04 - 2016-06-09 17:04 - 00002901 _____ C:\Users\JewFro\Desktop\Tiled.lnk
2016-06-09 17:04 - 2016-06-09 17:04 - 00002861 _____ C:\Users\JewFro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tiled.lnk
2016-06-09 15:27 - 2016-06-15 23:16 - 00000000 ____D C:\ProgramData\Unity
2016-06-09 15:26 - 2016-06-09 15:26 - 00000000 ____D C:\Users\JewFro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2015 Tools for Unity
2016-06-09 15:26 - 2016-06-09 15:26 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio Tools for Unity
2016-06-09 15:23 - 2016-06-15 23:16 - 00000000 ____D C:\Users\Public\Documents\Unity Projects
2016-06-09 15:18 - 2016-06-09 15:18 - 00000669 _____ C:\Users\Public\Desktop\Unity 5.3.5f1 (64-bit).lnk
2016-06-09 15:18 - 2016-06-09 15:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unity 5.3.5f1 (64-bit)
2016-06-09 15:18 - 2016-06-09 15:18 - 00000000 ____D C:\Program Files (x86)\GtkSharp
2016-06-09 15:15 - 2016-06-09 15:15 - 00669088 _____ C:\Users\JewFro\Downloads\UnityDownloadAssistant-5.3.5f1.exe
2016-06-08 02:15 - 2016-06-08 02:15 - 00000000 ____D C:\Users\JewFro\AppData\LocalLow\Steel Crate Games
2016-06-08 02:14 - 2016-06-08 02:14 - 00000000 ____D C:\Users\JewFro\Desktop\Keep_Talking_and_Nobody_Explodes_1.1.3_-_Windows
2016-06-08 02:13 - 2016-06-08 02:14 - 106413926 _____ C:\Users\JewFro\Downloads\Keep_Talking_and_Nobody_Explodes_1.1.3_-_Windows.zip
2016-05-26 23:28 - 2016-05-26 23:28 - 00000408 _____ C:\Windows\SysWOW64\iolo.ini
2016-05-26 23:28 - 2016-05-26 23:28 - 00000408 _____ C:\Windows\system32\iolo.ini
2016-05-20 17:04 - 2016-05-20 17:05 - 09617360 _____ (TeamViewer GmbH) C:\Users\JewFro\Downloads\TeamViewer_Setup_en.exe
2016-05-18 01:17 - 2016-05-18 01:17 - 00036368 _____ C:\Users\JewFro\Documents\cc_20160518_011727.reg
2016-05-18 01:09 - 2014-07-16 14:46 - 00032912 _____ (EldoS Corporation) C:\Windows\system32\Drivers\rawdsk3.sys
2016-05-18 01:08 - 2016-05-18 01:08 - 00000000 ____D C:\ProgramData\Commtouch
2016-05-18 01:08 - 2016-05-18 01:08 - 00000000 ____D C:\Program Files\Common Files\Commtouch
2016-05-18 01:08 - 2014-03-25 15:59 - 01728776 ____R (CYREN Inc.) C:\Windows\system32\Drivers\ampse.sys
2016-05-17 15:45 - 2016-05-17 15:45 - 03588933 _____ C:\Users\JewFro\Downloads\Grad Outcome (1).pptx
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-06-16 13:33 - 2016-02-25 16:14 - 00000000 ____D C:\Users\JewFro\AppData\Local\CrashDumps
2016-06-16 13:29 - 2009-07-14 00:45 - 00009584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-06-16 13:29 - 2009-07-14 00:45 - 00009584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-06-16 13:25 - 2014-07-24 15:08 - 09166528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2016-06-16 13:25 - 2014-07-24 14:42 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-06-16 13:25 - 2014-07-24 14:42 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-06-16 13:25 - 2014-02-14 07:25 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-06-16 13:25 - 2014-02-14 07:25 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-06-16 13:25 - 2014-01-31 22:49 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-06-16 02:41 - 2014-04-15 15:07 - 00000000 ____D C:\Users\JewFro\AppData\Local\Battle.net
2016-06-16 02:34 - 2016-02-18 01:31 - 00000000 ____D C:\Users\JewFro\AppData\Local\Frontier_Developments
2016-06-16 02:34 - 2014-02-01 00:20 - 00000000 ____D C:\Program Files (x86)\Steam
2016-06-16 00:20 - 2014-04-15 15:07 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-06-15 18:47 - 2014-01-31 22:49 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-06-15 18:32 - 2016-02-27 01:49 - 00000000 ____D C:\Users\JewFro\AppData\Roaming\GitHub
2016-06-15 18:32 - 2016-02-27 01:49 - 00000000 ____D C:\Users\JewFro\AppData\Local\GitHub
2016-06-15 18:32 - 2016-02-27 01:47 - 00000000 ____D C:\Users\JewFro\AppData\Local\Deployment
2016-06-15 18:31 - 2014-01-31 22:39 - 00000000 ____D C:\Users\JewFro
2016-06-15 05:55 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\rescache
2016-06-15 03:46 - 2009-07-14 01:13 - 00877858 _____ C:\Windows\system32\PerfStringBackup.INI
2016-06-15 03:46 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\inf
2016-06-15 03:40 - 2014-01-31 23:08 - 00000000 ____D C:\ProgramData\NVIDIA
2016-06-15 03:40 - 2009-07-14 01:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-06-15 03:40 - 2009-07-14 00:45 - 00549776 _____ C:\Windows\system32\FNTCACHE.DAT
2016-06-15 03:34 - 2014-02-01 05:30 - 00000000 ____D C:\Windows\system32\MRT
2016-06-15 03:02 - 2014-02-01 05:30 - 142482544 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-06-13 23:29 - 2014-04-03 03:50 - 00000000 ____D C:\Users\JewFro\AppData\Local\ElevatedDiagnostics
2016-06-13 17:15 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\security
2016-06-11 16:51 - 2016-03-10 16:23 - 00007597 _____ C:\Users\JewFro\AppData\Local\resmon.resmoncfg
2016-06-11 15:10 - 2016-02-27 02:01 - 00000000 ____D C:\Users\JewFro\Documents\Sites
2016-06-11 13:49 - 2016-02-17 16:16 - 00002122 _____ C:\Users\JewFro\Desktop\Slack.lnk
2016-06-11 13:49 - 2016-02-17 16:16 - 00000000 ____D C:\Users\JewFro\AppData\Roaming\Slack
2016-06-11 13:49 - 2016-02-17 16:16 - 00000000 ____D C:\Users\JewFro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Slack Technologies
2016-06-11 13:49 - 2016-02-17 16:16 - 00000000 ____D C:\Users\JewFro\AppData\Local\slack
2016-06-11 13:49 - 2016-02-17 16:15 - 00000000 ____D C:\Users\JewFro\AppData\Local\SquirrelTemp
2016-06-11 13:45 - 2014-05-21 01:22 - 00000000 ____D C:\Users\JewFro\AppData\Local\Unity
2016-06-09 16:41 - 2014-05-21 01:23 - 00000000 ____D C:\Users\JewFro\AppData\Roaming\Unity
2016-06-09 16:41 - 2014-05-21 01:22 - 00000000 ____D C:\Users\JewFro\AppData\LocalLow\Unity
2016-06-09 15:26 - 2009-07-14 01:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-06-08 16:04 - 2014-03-04 16:00 - 00000000 ____D C:\Users\JewFro\Documents\Important Documents
2016-06-07 21:42 - 2014-01-31 22:49 - 00002195 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-06-07 21:42 - 2014-01-31 22:49 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-06-04 01:02 - 2016-05-06 03:04 - 00000000 ____D C:\Users\JewFro\AppData\Local\Discord
2016-06-04 01:02 - 2016-02-17 16:15 - 00002174 _____ C:\Users\JewFro\Desktop\Discord.lnk
2016-06-04 01:02 - 2016-02-17 16:15 - 00000000 ____D C:\Users\JewFro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc
2016-05-28 16:18 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\system32\NDF
2016-05-26 23:28 - 2014-02-01 01:08 - 00000392 _____ C:\Windows\SysWOW64\iolo.ini.txt
2016-05-25 18:12 - 2014-04-15 15:07 - 00000000 ____D C:\Users\JewFro\AppData\Roaming\Battle.net
2016-05-24 15:11 - 2014-02-05 04:11 - 00000000 ____D C:\Users\JewFro\AppData\Roaming\Skype
2016-05-18 01:16 - 2016-03-10 04:49 - 00000000 ____D C:\Windows\Minidump
2016-05-18 01:07 - 2014-09-15 17:30 - 00000000 ____D C:\ProgramData\iolo
2016-05-18 01:05 - 2014-09-15 17:34 - 00003144 _____ C:\Windows\System32\Tasks\iolo Process Governor
2016-05-18 01:05 - 2014-09-15 17:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Mechanic Professional
2016-05-18 01:05 - 2014-09-15 17:34 - 00000000 ____D C:\ProgramData\ioloGovernor
2016-05-18 01:05 - 2009-07-13 23:20 - 00000000 __RSD C:\Windows\Media
==================== Files in the root of some directories =======
2014-02-16 18:45 - 2014-03-15 20:24 - 0000000 _____ () C:\Users\JewFro\AppData\Roaming\bitlord_log.txt
2014-03-16 03:23 - 2014-03-16 03:23 - 0000218 _____ () C:\Users\JewFro\AppData\Local\recently-used.xbel
2016-03-10 16:23 - 2016-06-11 16:51 - 0007597 _____ () C:\Users\JewFro\AppData\Local\resmon.resmoncfg
2016-02-22 01:00 - 2016-02-22 01:00 - 0000057 _____ () C:\ProgramData\Ament.ini
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2016-06-07 00:06
==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version:16-06-2016
Ran by JewFro (2016-06-16 13:33:59)
Running from C:\Users\JewFro\Downloads
Windows 7 Ultimate Service Pack 1 (X64) (2014-02-01 02:39:45)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-3547861629-2237757925-1048173658-500 - Administrator - Disabled)
Afro (S-1-5-21-3547861629-2237757925-1048173658-1009 - Administrator - Enabled) => C:\Users\Afro
Guest (S-1-5-21-3547861629-2237757925-1048173658-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3547861629-2237757925-1048173658-1003 - Limited - Enabled)
JewFro (S-1-5-21-3547861629-2237757925-1048173658-1000 - Administrator - Enabled) => C:\Users\JewFro
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Spybot - Search and Destroy (Enabled - Up to date) {20A26C15-1AF0-7CA3-9380-FAB824A7EE0D}
AV: System Shield (Disabled - Up to date) {51A1F251-72D6-FBFA-1969-EBE1F52F559F}
AS: System Shield (Disabled - Up to date) {EAC013B5-54EC-F474-23D9-D0938EA81F22}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.6 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.242 - Adobe Systems Incorporated)
Adobe Flash Player 22 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 22.0.0.192 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Amnesia: The Dark Descent (HKLM-x32\...\Steam App 57300) (Version: - Frictional Games)
Apple Application Support (HKLM-x32\...\{21FC2093-6E43-460B-B9B0-5F5AA35BBB0F}) (Version: 3.0 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{FE86CB0C-FCB3-4358-B4B0-B0A41E33B3DD}) (Version: 7.1.0.32 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Asmedia ASM106x SATA Host Controller Driver (HKLM-x32\...\{61942EF5-2CD8-47D4-869C-2E9A8BB085F1}) (Version: 1.3.4.001 - Asmedia Technology)
ASUS PC Diagnostics (HKLM-x32\...\{D709005F-D8DC-42A8-8435-5AE880ECAF82}) (Version: 1.3.4 - ASUSTeK Computer Inc.)
AVSDK5 (Version: 5.4.11 - CYREN Inc.) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
BitLord 2.3 (HKLM-x32\...\BitLord) (Version: 2.3.2-245 - House of Life)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.14 - Piriform)
Chrome Remote Desktop Host (HKLM-x32\...\{95EB2FCC-AE0B-40E9-B804-347C6358923B}) (Version: 51.0.2704.7 - Google Inc.)
Contagion (HKLM-x32\...\Steam App 238430) (Version: - Monochrome LLC)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Curse (HKLM-x32\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 6.0.0.0 - Curse)
Darksiders II (HKLM-x32\...\Steam App 50650) (Version: - Vigil Games)
DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive)
Dead Rising 3 (HKLM-x32\...\Steam App 265550) (Version: - Capcom Game Studio Vancouver)
Discord (HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\Discord) (Version: 0.0.291 - Hammer & Chisel, Inc.)
Electric Sheep 2.7b34 (HKLM-x32\...\Electric Sheep) (Version: 2.7b34 - Electricsheep)
Elite Dangerous (HKLM\...\Steam App 359320) (Version: - Frontier Developments)
Entity Framework Tools for Visual Studio 2013 (HKLM-x32\...\{08AEF86A-1956-4846-B906-B01350E96E30}) (Version: 12.0.20912.0 - Microsoft Corporation)
EVGA Precision X 4.0.0 (HKLM-x32\...\PrecisionX) (Version: 4.0.0 - EVGA Corporation)
Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version: - Obsidian Entertainment)
FINAL FANTASY VII (HKLM-x32\...\Steam App 39140) (Version: - Square Enix)
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)
FTL: Faster Than Light (HKLM-x32\...\Steam App 212680) (Version: - Subset Games)
GameMaker: Studio (HKLM-x32\...\Steam App 214850) (Version: - YoYo Games Ltd.)
Gauntlet (HKLM-x32\...\Steam App 258970) (Version: - Arrowhead Game Studios)
GitHub (HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\5f7eb300e2ea4ebf) (Version: 3.1.1.4 - GitHub, Inc.)
Goat Simulator (HKLM-x32\...\Steam App 265930) (Version: - Coffee Stain Studios)
Gods Will Be Watching (HKLM-x32\...\Steam App 274290) (Version: - Deconstructeam)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 51.0.2704.84 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.5 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden
Gtk# for .Net 2.12.26 (HKLM-x32\...\{BC25B808-A11C-4C9F-9C0A-6682E47AAB83}) (Version: 2.12.26 - Xamarin, Inc.)
Hammerwatch (HKLM-x32\...\Steam App 239070) (Version: - )
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment)
Herramientas de corrección de Microsoft Office 2016: espańol (x32 Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
HP Officejet Pro 8620 Basic Device Software (HKLM\...\{A977D10D-989A-40D4-B0B1-450954516543}) (Version: 32.3.198.49673 - Hewlett-Packard Co.)
HP Officejet Pro 8620 Help (HKLM-x32\...\{9A4D71AB-9C68-4702-A4A2-A4DB7B0FE270}) (Version: 32.0.0 - Hewlett Packard)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
Intel(R) Driver Update Utility 2.4 (x32 Version: 2.4.0.7 - Intel) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1323 - Intel Corporation)
Intel(R) Network Connections 18.1.59.0 (HKLM\...\PROSetDX) (Version: 18.1.59.0 - Intel)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.18.10.3071 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.0.0.1083 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.63463 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.0.0.100 - Intel Corporation)
Intel® Driver Update Utility (HKLM-x32\...\{561b5fb5-1d4d-40e8-b3e4-ad52858b217c}) (Version: 2.4.0.7 - Intel)
iolo technologies' System Mechanic Professional (HKLM-x32\...\{BBD3F66B-1180-4785-B679-3F91572CD3B4}_is1) (Version: 15.5.0 - iolo technologies, LLC)
iTunes (HKLM\...\{96B53CA8-5ABB-49D8-96F1-F6C0D73A76C6}) (Version: 11.1.4.62 - Apple Inc.)
Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.600 - Oracle)
Java 8 Update 5 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418005FF}) (Version: 8.0.50 - Oracle Corporation)
Java SE Development Kit 8 Update 5 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180050}) (Version: 8.0.50 - Oracle Corporation)
JavaFX Scene Builder 2.0 (HKLM-x32\...\{B4665EB1-1F7A-44F5-AD07-C20A938E8BC2}) (Version: 2.0 - Oracle)
League of Legends (HKLM-x32\...\League of Legends 3.0.0) (Version: 3.0.0 - Riot Games)
League of Legends (x32 Version: 3.0.0 - Riot Games) Hidden
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.236 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.236 - LogMeIn, Inc.) Hidden
Magicka (HKLM-x32\...\Steam App 42910) (Version: - Arrowhead Game Studios)
MAGIX Common Components 1 (HKLM-x32\...\{7A8B2204-574B-42A2-A3DC-52AE142D197F}) (Version: 1.2.0.0 - MAGIX AG)
MAGIX Content and Soundpools (HKLM-x32\...\MAGIX_GlobalContent) (Version: 1.0.0.0 - MAGIX Software GmbH)
MAGIX Fonts Package 1 (x32 Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Speed burnR (MSI) (HKLM-x32\...\MX.{79ECE77C-9C0A-4F2A-A2B4-97B4A1077D37}) (Version: 7.0.1.27 - MAGIX AG)
MAGIX Speed burnR (MSI) (Version: 7.0.1.27 - MAGIX AG) Hidden
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Metal Slug 3 (HKLM-x32\...\Steam App 250180) (Version: - DotEmu)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation)
Microsoft Kinect 1.0 Beta2 SDK (HKLM\...\{BB8DB4E0-F448-4637-9D87-9FD57D1288D2}) (Version: 1.0.0.45 - Microsoft Corporation)
Microsoft Office Professional Plus 2016 (HKLM-x32\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version: - Microsoft Corporation)
Microsoft SQL Server 2008 Browser (HKLM-x32\...\{C688457E-03FD-4941-923B-A27F4D42A7DD}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Native Client (HKLM\...\{BBDE8A3D-64A2-43A6-95F3-C27B87DF7AC1}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{B40EE88B-400A-4266-A17B-E3DE64E94431}) (Version: 10.1.2731.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{58FED865-4F13-408D-A5BF-996019C4B936}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (12.0.30919.1) (HKLM-x32\...\{0D7FCBFB-F478-4D32-901C-83F0BF5A3501}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{0826F9E4-787E-481D-83E0-BC6A57B056D5}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Express - ENU (HKLM-x32\...\Microsoft Visual C++ 2010 Express - ENU) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - ENU (HKLM\...\{BCA26999-EC22-3007-BB79-638913079C9A}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.31007 - Microsoft Corporation)
Microsoft Visual Studio 2015 Tools for Unity (HKLM-x32\...\{D68E6605-F852-4936-AB64-04B80E0C85AD}) (Version: 2.2.0.0 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Middle-earth: Shadow of Mordor (HKLM-x32\...\Steam App 241930) (Version: - Monolith Productions, Inc.)
Minimum (HKLM-x32\...\Steam App 214190) (Version: - Human Head Studios)
Mirror's Edge (HKLM-x32\...\Steam App 17410) (Version: - DICE)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Nidhogg (HKLM-x32\...\Steam App 94400) (Version: - Messhof)
NVIDIA 3D Vision Controller Driver 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 361.91 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 361.91 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.11.3.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.3.5 - NVIDIA Corporation)
NVIDIA Graphics Driver 361.91 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 361.91 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Offworld Trading Company (HKLM-x32\...\Steam App 271240) (Version: - Mohawk Games)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Oracle VM VirtualBox 5.0.16 (HKLM\...\{F2E958A1-9215-4C7D-9A2E-F0740B8CA5B7}) (Version: 5.0.16 - Oracle Corporation)
Outils de vérification linguistique 2016 de Microsoft Office*- Franēais (x32 Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
Pixel Piracy (HKLM-x32\...\Steam App 264140) (Version: - Vitali Kirpu)
Prerequisites for SSDT (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation)
Product Improvement Study for HP Officejet Pro 8620 (HKLM\...\{99039186-EBEB-4127-BFA2-18B10A05ACE2}) (Version: 32.3.198.49673 - Hewlett-Packard Co.)
Project Zomboid (HKLM-x32\...\Steam App 108600) (Version: - The Indie Stone)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Python 3.5.1 (32-bit) (HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\{c39d559b-aa83-4476-ba20-988a35a1199a}) (Version: 3.5.1150.0 - Python Software Foundation)
Python 3.5.1 Add to Path (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Core Interpreter (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Development Libraries (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Documentation (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Executables (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Launcher (32-bit) (HKLM-x32\...\{17778F7B-FB5A-4A93-9719-D75BAF673498}) (Version: 3.5.150.0 - Python Software Foundation)
Python 3.5.1 pip Bootstrap (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Standard Library (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Tcl/Tk Support (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Test Suite (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Utility Scripts (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6853 - Realtek Semiconductor Corp.)
Resident Evil Revelations / Biohazard Revelations UE (HKLM-x32\...\Steam App 222480) (Version: - Capcom)
Risk of Rain (HKLM-x32\...\Steam App 248820) (Version: - )
Rogue Legacy (HKLM-x32\...\Steam App 241600) (Version: - Cellar Door Games)
Ruby 2.2.4-p230-x64 (HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\{A98E44F8-6401-400F-830E-B1A2919C22BD}_is1) (Version: 2.2.4-p230 - RubyInstaller Team)
Service Pack 1 for SQL Server 2008 (KB968369) (64-bit) (HKLM\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation)
SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.11.3.5 - NVIDIA Corporation) Hidden
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version: - 2K Games, Inc.)
Sins of a Solar Empire: Rebellion (HKLM-x32\...\Steam App 204880) (Version: - Ironclad Games)
Skype 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.112 - Skype Technologies S.A.)
Slack (HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\slack) (Version: 2.0.5 - Slack Technologies)
Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 3.6.3347.0 - Hi-Rez Studios)
Space Engineers (HKLM-x32\...\Steam App 244850) (Version: - )
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Sql Server Customer Experience Improvement Program (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
Starwhal: Just the Tip (HKLM-x32\...\Steam App 263020) (Version: - Breakfall)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
Sublime Text 2.0.2 (HKLM\...\Sublime Text 2_is1) (Version: - )
System Mechanic 14 Professional (x32 Version: 15.5.0 - ) Hidden
Tabletop Simulator (HKLM-x32\...\Steam App 286160) (Version: - Berserk Games)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve)
Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)
The Bureau: XCOM Declassified (HKLM-x32\...\Steam App 65930) (Version: - 2K Marin)
The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios)
The Showdown Effect (HKLM-x32\...\Steam App 204080) (Version: - Arrowhead Game Studios)
Tiled (HKLM\...\{113C4865-4A02-49E9-ACAC-CD225E518EA5}) (Version: 0.16.1 - mapeditor.org)
Tom Clancy's Rainbow Six Siege (HKLM-x32\...\Steam App 359550) (Version: - Ubisoft Montreal)
TP-LINK TL-WDN4800 Driver (HKLM-x32\...\{FDA7E907-6539-42C1-9721-0239C281B336}) (Version: 1.3.1 - TP-LINK)
TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK)
Trine 2 (HKLM-x32\...\Steam App 35720) (Version: - Frozenbyte)
Unity (HKLM-x32\...\Unity) (Version: 5.3.5f1 - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\UnityWebPlayer) (Version: 5.3.5f1 - Unity Technologies ApS)
Unturned (HKLM-x32\...\Steam App 304930) (Version: - Nelson Sexton)
Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
Update for Skype for Business 2016 (KB3114696) 32-Bit Edition (HKLM-x32\...\{90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{D71274C5-85CB-4E05-A91F-4BB44BDDFA4F}) (Version: - Microsoft)
Update for Skype for Business 2016 (KB3114696) 32-Bit Edition (HKLM-x32\...\{90160000-012B-0409-0000-0000000FF1CE}_Office16.PROPLUS_{D71274C5-85CB-4E05-A91F-4BB44BDDFA4F}) (Version: - Microsoft)
Uplay (HKLM-x32\...\Uplay) (Version: 13.0 - Ubisoft)
VC_CRT_x64 (Version: 1.02.0000 - Intel Corporation) Hidden
Vita 2 (Version: 1.0.0.0 - MAGIX Software GmbH) Hidden
Vita 2 add-on content (Version: 1.0.0.0 - MAGIX Software GmbH) Hidden
Vita Drum Engine (Version: 1.0.0.0 - MAGIX Software GmbH) Hidden
Vita Electric Piano (Version: 1.0.2.0 - MAGIX Software GmbH) Hidden
Vita Jazz Drums (Version: 1.0.0.0 - MAGIX Software GmbH) Hidden
Vita Pop Brass (Version: 1.0.0.0 - MAGIX Software GmbH) Hidden
Vita Power Guitar (Version: 1.0.0.0 - MAGIX Software GmbH) Hidden
Vita Vintage Organ (Version: 1.0.1.0 - MAGIX Software GmbH) Hidden
Warhammer 40,000: Dawn of War Dark Crusade (HKLM-x32\...\Steam App 4580) (Version: - Relic Entertainment)
Warhammer 40,000: Dawn of War - Game of the Year Edition (HKLM-x32\...\Steam App 4570) (Version: - Relic Entertainment)
Warhammer 40,000: Dawn of War Soulstorm (HKLM-x32\...\Steam App 9450) (Version: - Relic Entertainment)
Warhammer 40,000: Dawn of War Winter Assault (HKLM-x32\...\Steam App 9310) (Version: - Relic Entertainment)
Watch_Dogs (HKLM-x32\...\Steam App 243470) (Version: - Ubisoft)
WD SmartWare (HKLM\...\{6F482C75-174D-42EB-A2CF-B00A1F354F7B}) (Version: 1.4.1.1 - Western Digital)
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.1.10.398 - ASUS Cloud Corporation)
WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
XAMPP (HKLM-x32\...\xampp) (Version: 5.6.20-0 - Bitnami)
XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version: - Firaxis Games)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0CA98BAE-7DDE-4A42-A1AE-53DC9D7EBF66} - System32\Tasks\iolo Process Governor => C:\Program Files (x86)\iolo\System Mechanic Professional\iologovernor64.exe [2016-02-19] (iolo technologies, LLC)
Task: {1C1DCB1E-0C54-4A7F-9B68-477719EA2AD3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-01-15] (Piriform Ltd)
Task: {226F5FCA-775F-4880-A6CE-F642A5386F4E} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {4A8B5A07-6EDD-430F-BC59-D7D2C29D0A34} - System32\Tasks\USER_ESRV_SVC_WILLAMETTE => Wscript.exe //B //NoLogo "C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\task.vbs"
Task: {4C414D37-4860-4563-96D6-FE5850232E43} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-17] (Google Inc.)
Task: {5306EC9C-2454-46EB-9208-C2D157042CDB} - System32\Tasks\{BB826235-D9FA-4E95-9CDA-6C4B89208BB9} => Chrome.exe hxxp://ui.skype.com/ui/0/6.13.61.104/en/go/help.faq.installer?LastError=1618
Task: {5604CE4D-5667-4E21-B8FF-3D7A78A53B1B} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe
Task: {6D16AD5F-7E1D-4E30-A7F0-FD59E1CD1010} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {7601F771-A129-4739-8E8A-D943F5287B45} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {80CDCB2A-F4E6-4B89-AF65-D0305C4776C8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-06-16] (Adobe Systems Incorporated)
Task: {825F15D9-3503-4311-A42B-C6B39FA2A267} - System32\Tasks\HPCustParticipation HP Officejet Pro 8620 => C:\Program Files\HP\HP Officejet Pro 8620\Bin\HPCustPartic.exe [2014-07-21] (Hewlett-Packard Development Company, LP)
Task: {D48B2C6B-4DA4-4F00-B457-C7E32C686B0C} - System32\Tasks\{D6684DA7-EE83-41BC-BE68-873D0273EF5B} => Chrome.exe hxxp://ui.skype.com/ui/0/6.13.61.104/en/go/help.faq.installer?LastError=1618
Task: {E8D338A6-D788-4AD6-9FFB-109F5C1A8595} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {EE544FC3-983B-45E2-AC75-D2789065FB4B} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {FE625883-47C7-4A98-9A27-CF50227DA1D2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-17] (Google Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
Shortcut: C:\Users\JewFro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ruby 2.2.4-p230-x64\Interactive Ruby.lnk -> C:\Ruby22-x64\bin\irb.bat ()
ShortcutWithArgument: C:\Users\JewFro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ruby 2.2.4-p230-x64\Start Command Prompt with Ruby.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /E:ON /K C:\Ruby22-x64\bin\setrbvars.bat
ShortcutWithArgument: C:\Users\JewFro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Chrome Remote Desktop.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp
ShortcutWithArgument: C:\Users\JewFro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Play Music.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=fahmaaghhglfmonjliepjlchgpgfmobi
==================== Loaded Modules (Whitelisted) ==============
2014-09-15 17:34 - 2014-07-16 14:44 - 00160256 _____ () C:\Windows\system32\iavlsp64.dll
2016-03-10 19:14 - 2013-06-04 18:41 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
2016-04-30 15:33 - 2016-03-23 23:20 - 11583304 _____ () C:\xampp\mysql\bin\mysqld.exe
2016-03-16 02:02 - 2016-05-02 01:54 - 00369208 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-05-09 15:56 - 2016-05-02 01:54 - 01148984 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-03-16 02:02 - 2016-05-02 01:55 - 03613240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-02-17 16:03 - 2016-05-02 01:55 - 00289848 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2014-02-04 17:12 - 2014-02-04 17:12 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2016-02-05 16:13 - 2016-02-05 16:13 - 00115864 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe
2016-02-05 16:13 - 2016-02-05 16:13 - 00255640 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\analyzer.dll
2016-02-05 16:13 - 2016-02-05 16:13 - 00034968 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\AnalyzerTask.dll
2016-02-05 16:13 - 2016-02-05 16:13 - 00019096 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\DriverDetection.dll
2016-01-12 21:46 - 2016-01-12 21:46 - 00019688 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\DriverInfo.dll
2016-01-12 21:46 - 2016-01-12 21:46 - 00026856 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\IDUUDetection.dll
2010-09-08 14:45 - 2010-09-08 14:45 - 01034752 _____ () C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDFME\WDFME.exe
2010-09-08 14:44 - 2010-09-08 14:44 - 00485376 _____ () C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDSC.exe
2016-05-09 15:56 - 2016-05-02 01:55 - 02667576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-05-09 15:56 - 2016-05-02 01:55 - 01990200 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-05-09 15:56 - 2016-05-02 01:55 - 01842232 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-02-17 16:03 - 2016-05-02 01:55 - 00208952 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2014-01-31 23:08 - 2016-02-09 01:41 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-01-12 06:12 - 2016-01-12 06:12 - 08901800 _____ () C:\Program Files\Microsoft Office\Office16\1033\GrooveIntlResource.dll
2014-03-21 16:54 - 2013-04-09 11:05 - 00846848 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
2016-03-10 23:45 - 2016-02-05 16:16 - 00458904 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv.exe
2016-03-10 23:45 - 2016-02-05 16:26 - 00709272 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_modeler.dll
2016-03-10 23:45 - 2016-02-05 16:25 - 00188568 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\foreground_window_input.dll
2016-03-10 23:45 - 2016-02-05 16:20 - 00414360 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe
2016-03-10 23:45 - 2016-02-05 16:23 - 00130712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_process_input.dll
2016-03-10 23:45 - 2016-02-05 16:24 - 00025752 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_system_power_state_input.dll
2016-03-10 23:45 - 2016-02-05 16:24 - 00059544 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_quality_and_reliability_input.dll
2016-03-10 23:45 - 2016-02-05 16:24 - 00194712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\acpi_battery_input.dll
2016-03-10 23:45 - 2016-02-05 16:25 - 00159896 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\sema_thermal_input.dll
2016-03-10 23:45 - 2016-02-05 16:25 - 00158360 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\wifi_input.dll
2016-03-10 23:45 - 2016-02-05 16:25 - 00050840 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\devices_use_input.dll
2016-03-10 23:45 - 2016-02-05 16:23 - 00032920 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_disktrace_input.dll
2016-05-06 18:07 - 2016-01-20 08:22 - 00382114 _____ () C:\Users\JewFro\AppData\Local\GitHub\PortableGit_d76a6a98c9315931ec4927243517bc09e9b731a0\usr\bin\ssh-agent.exe
2016-05-09 15:56 - 2016-05-02 01:54 - 00035896 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-05-09 15:56 - 2016-05-02 01:54 - 00921656 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2016-04-30 15:33 - 2015-06-05 06:54 - 00404992 _____ () C:\xampp\apache\bin\pcre.dll
2016-04-30 15:33 - 2016-03-31 18:24 - 00130048 _____ () C:\xampp\php\libpq.dll
2014-02-06 01:52 - 2014-02-06 01:52 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-06 01:52 - 2014-02-06 01:52 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2016-03-11 00:11 - 2016-06-15 03:40 - 00035984 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\PEbiosinterface32.dll
2016-03-10 19:14 - 2013-06-04 18:41 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\ATKEX.dll
2016-06-11 02:59 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2016-06-11 02:59 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2016-06-11 02:59 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2016-06-11 02:59 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2016-06-11 02:59 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2010-03-05 14:24 - 2010-03-05 14:24 - 00886272 _____ () C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDFME\System.Data.SQLite.dll
2016-02-17 16:03 - 2016-05-02 02:02 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2014-03-21 16:54 - 2013-01-22 14:40 - 01411072 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\nicLan.dll
2014-03-21 16:54 - 2013-04-02 13:41 - 00193024 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\DC_WFF.dll
2014-03-21 16:54 - 2013-04-02 13:41 - 00138752 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJWF\WJWF.dll
2014-03-21 16:54 - 2013-02-28 11:42 - 00115712 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJWF\WJWF_WPS_WIN7.DLL
2016-06-04 01:02 - 2016-06-02 20:40 - 02779832 _____ () C:\Users\JewFro\AppData\Local\Discord\app-0.0.291\libdiscord.dll
2016-06-04 01:02 - 2016-06-02 20:40 - 01746104 _____ () C:\Users\JewFro\AppData\Local\Discord\app-0.0.291\ffmpeg.dll
2016-06-04 01:02 - 2016-06-02 20:40 - 00112312 _____ () \\?\C:\Users\JewFro\AppData\Local\Discord\app-0.0.291\resources\node_modules\discord_overlay\discord_overlay.node
2014-07-19 00:16 - 2014-07-19 00:16 - 00043008 _____ () C:\Users\JewFro\Desktop\kinect\KinectCam.ax
2016-01-12 06:12 - 2016-01-12 06:12 - 08901800 _____ () C:\Program Files (x86)\Microsoft Office\Office16\1033\GrooveIntlResource.dll
2016-06-04 01:02 - 2016-06-02 20:40 - 01843896 _____ () C:\Users\JewFro\AppData\Local\Discord\app-0.0.291\libglesv2.dll
2016-06-04 01:02 - 2016-06-02 20:40 - 00020664 _____ () C:\Users\JewFro\AppData\Local\Discord\app-0.0.291\libegl.dll
2016-06-15 14:21 - 2016-06-15 14:21 - 00140800 _____ () \\?\C:\Users\JewFro\AppData\Local\Temp\EFA7.tmp.node
2016-05-06 18:08 - 2014-11-04 07:33 - 00085916 _____ () C:\Users\JewFro\AppData\Local\GitHub\PortableGit_d76a6a98c9315931ec4927243517bc09e9b731a0\usr\bin\msys-z.dll
2016-05-06 18:08 - 2016-04-01 00:58 - 00110334 _____ () C:\Users\JewFro\AppData\Local\GitHub\PortableGit_d76a6a98c9315931ec4927243517bc09e9b731a0\usr\bin\msys-gcc_s-1.dll
2016-05-06 18:08 - 2016-04-01 00:58 - 00013307 _____ () C:\Users\JewFro\AppData\Local\GitHub\PortableGit_d76a6a98c9315931ec4927243517bc09e9b731a0\usr\bin\msys-ssp-0.dll
2014-02-01 00:21 - 2016-04-29 16:10 - 00785920 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2016-02-17 15:50 - 2015-07-03 12:12 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
2016-02-17 15:50 - 2015-07-03 12:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2016-02-17 15:50 - 2015-07-03 12:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2014-05-27 01:28 - 2016-06-14 20:47 - 02387024 _____ () C:\Program Files (x86)\Steam\video.dll
2014-08-29 02:26 - 2016-02-08 19:14 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2014-08-29 02:26 - 2016-02-08 19:14 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2014-08-29 02:26 - 2016-02-08 19:14 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2014-08-29 02:26 - 2016-02-08 19:14 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2014-08-29 02:26 - 2016-02-08 19:14 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2014-02-01 00:21 - 2016-06-14 20:47 - 00829008 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-03-09 00:05 - 2016-02-17 18:25 - 00281088 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2014-02-01 00:21 - 2016-06-14 15:14 - 49826080 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2016-02-17 15:50 - 2015-09-24 19:56 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
2016-06-07 21:42 - 2016-06-03 21:56 - 01745560 _____ () C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.84\libglesv2.dll
2016-06-07 21:42 - 2016-06-03 21:56 - 00091288 _____ () C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.84\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AMP => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AMPSE => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventSystem => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ioloSystemService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vseamps => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vsedsps => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vseqrts => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AMP => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AMPSE => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\EventSystem => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ioloSystemService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vseamps => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsedsps => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vseqrts => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
There are 7904 more sites.
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\123simsen.com -> www.123simsen.com
There are 7904 more sites.
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 22:34 - 2016-06-11 13:42 - 00452730 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123haustiereundmehr.com
127.0.0.1 123moviedownload.com
127.0.0.1 www.123moviedownload.com
There are 15534 more lines.
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\JewFro\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
MSCONFIG\startupfolder: C:^Users^JewFro^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Slack.lnk => C:\Windows\pss\Slack.lnk.Startup
MSCONFIG\startupreg: (default) =>
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{B18BF77C-9820-4EBB-BFAE-A5A2C4EC2E33}] => (Allow) LPort=58321
FirewallRules: [{1A2BAD1A-C0EB-4F63-B030-9CF8778E87D8}] => (Allow) LPort=58321
FirewallRules: [{94AA2C19-1DA4-4284-B269-7934165C7284}] => (Allow) LPort=58321
FirewallRules: [{3C969344-0F10-4C8D-816F-F3A60CD49F28}] => (Allow) LPort=58321
FirewallRules: [{7D3CEEF1-6E7D-4C4F-B2DE-77DBD0D8A42C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{274CA3B3-36EF-4A1D-A4D6-7716B2ECEE03}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{62AF0CE0-3BCA-40F1-B0CD-3A123E8A76DA}] => (Allow) C:\Program Files (x86)\iolo\System Mechanic Professional\SysMech.exe
FirewallRules: [{DCCC97CC-C7B9-4B89-ABDA-0B05C965F82E}] => (Allow) C:\Program Files (x86)\iolo\System Mechanic Professional\SysMech.exe
FirewallRules: [{F43EABEA-C709-4CFB-B5DD-7B9D44A06602}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{35FB9486-D5E0-42BF-8DB2-07983D003C1E}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{16CA0F59-D91D-4D1A-9B6C-FE644DF99682}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{B4FDD0AD-ED68-41D9-9837-1D45E4FB2346}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{176A3256-F258-4A1F-8BD3-D275E4707B33}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{5D90235C-3FC1-4252-856D-1562AB729480}] => (Allow) C:\Program Files (x86)\BitLord 2\Bitlord files\bitlord.exe
FirewallRules: [{25655B22-71A3-4ECC-835B-AB344BF9C39A}] => (Allow) C:\Program Files (x86)\BitLord 2\Bitlord files\bitlord.exe
FirewallRules: [{E6FCA0FA-B847-4C31-BD15-4F3072A24BE1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{D053DB70-8BBB-4448-BC74-2BC695A73A02}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{DB2619F0-20F8-42F9-A2D8-117FAF756BF9}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{88938B04-4E52-4A11-A0D4-BD339689625D}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{60A8CBF6-DE62-42E9-BA83-E4391B1F2639}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe
FirewallRules: [{BDFC9FDE-38EA-4AD5-8BE1-B83FFCF0D87D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe
FirewallRules: [{4393BD72-E523-4B82-B8E8-6C4AFF7ADF0F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Amnesia The Dark Descent\Launcher.exe
FirewallRules: [{11BE46F6-BB45-43ED-9287-AFE995E2888D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Amnesia The Dark Descent\Launcher.exe
FirewallRules: [TCP Query User{CD3D1255-B627-49FA-9DFC-8BF5995D4008}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [UDP Query User{BF565B73-FC5D-4DF3-8501-036C983FF16B}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [{1B455C77-FB0F-4BA0-96C9-AF820D71E3DB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Trine 2\trine2_launcher.exe
FirewallRules: [{86D705E3-87B9-4583-8699-82B4E5EB2410}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Trine 2\trine2_launcher.exe
FirewallRules: [{6B6BEC20-8C62-42E8-946D-E11E36DEA210}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hammerwatch\Hammerwatch.exe
FirewallRules: [{A47C4BE7-9205-4173-9691-8D834890D50C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hammerwatch\Hammerwatch.exe
FirewallRules: [{EC5BB264-D0B1-4BF4-91E9-E475D8ED8A06}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magicka\Magicka.exe
FirewallRules: [{808D7A23-F83C-45C5-816A-729734D23D3C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magicka\Magicka.exe
FirewallRules: [{45E5715B-E278-4399-B302-CFD38750F7A7}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{2B42B89D-DC94-4E5B-BD56-3DC3FA531EE6}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{E4486D72-7B06-4644-B290-BC018A467C4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hammerwatch\editor\HammerEditor.exe
FirewallRules: [{6868EACD-1791-49F2-BEC1-A4E17613FB2E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hammerwatch\editor\HammerEditor.exe
FirewallRules: [{8FC79E32-6A2F-492F-85B9-B6AE664B4699}] => (Allow) E:\SteamLibrary\SteamApps\common\Darksiders 2\Darksiders2.exe
FirewallRules: [{24A6E393-0C18-42AC-8849-21B7D3B5E7D6}] => (Allow) E:\SteamLibrary\SteamApps\common\Darksiders 2\Darksiders2.exe
FirewallRules: [{EDD2CCD9-76BB-4E97-A28D-9737DBB3F6C0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Nidhogg\Nidhogg.exe
FirewallRules: [{92E7DEBA-47DF-43C3-9990-EBAC802AADF6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Nidhogg\Nidhogg.exe
FirewallRules: [{11B257E3-8E3D-4A1E-9217-AB193F42754B}] => (Allow) E:\SteamLibrary\SteamApps\common\FTL Faster Than Light\FTLGame.exe
FirewallRules: [{84E3973F-7360-4815-B5A3-77C87AF7F091}] => (Allow) E:\SteamLibrary\SteamApps\common\FTL Faster Than Light\FTLGame.exe
FirewallRules: [{00066571-9C54-4C4B-863D-46F0D15A1DCC}] => (Allow) E:\SteamLibrary\SteamApps\common\Sins of a Solar Empire Rebellion\Sins of a Solar Empire Rebellion.exe
FirewallRules: [{97DE515F-6FD4-4538-BFDD-F61C9C8C4C14}] => (Allow) E:\SteamLibrary\SteamApps\common\Sins of a Solar Empire Rebellion\Sins of a Solar Empire Rebellion.exe
FirewallRules: [{67D3FB14-0C47-4184-AA9A-49F0FEF70ED5}] => (Allow) E:\SteamLibrary\SteamApps\common\Showdown\binaries\showdown.exe
FirewallRules: [{5759D618-EE14-4F29-B1E3-39F7EE0367B2}] => (Allow) E:\SteamLibrary\SteamApps\common\Showdown\binaries\showdown.exe
FirewallRules: [{2DC51783-28C6-4BCB-A185-84990539094B}] => (Allow) E:\SteamLibrary\SteamApps\common\Starwhal\Starwhal.exe
FirewallRules: [{F8A020C0-24A7-4BC1-969A-8A6E587E53C4}] => (Allow) E:\SteamLibrary\SteamApps\common\Starwhal\Starwhal.exe
FirewallRules: [{3DBB7918-E563-45E9-848B-A105FE3922FA}] => (Allow) E:\SteamLibrary\SteamApps\common\RESIDENT EVIL REVELATIONS\rerev.exe
FirewallRules: [{C55219BC-CE1A-420B-B90A-B9E49D36C6A5}] => (Allow) E:\SteamLibrary\SteamApps\common\RESIDENT EVIL REVELATIONS\rerev.exe
FirewallRules: [{F5357315-FFB5-4C9B-BCDF-BD0AC5FBFE99}] => (Allow) E:\SteamLibrary\SteamApps\common\Sins of a Solar Empire Rebellion\Sins of a Solar Empire Rebellion.exe
FirewallRules: [{FF3BCD46-3179-45F6-A62E-56176F21D6E1}] => (Allow) E:\SteamLibrary\SteamApps\common\Sins of a Solar Empire Rebellion\Sins of a Solar Empire Rebellion.exe
FirewallRules: [{45AA5162-9043-40ED-A2B5-DBEE274A4845}] => (Allow) E:\SteamLibrary\SteamApps\common\mirrors edge\Binaries\MirrorsEdge.exe
FirewallRules: [{6E5A26E6-47D4-44EA-8D05-29FEE2672424}] => (Allow) E:\SteamLibrary\SteamApps\common\mirrors edge\Binaries\MirrorsEdge.exe
FirewallRules: [{05D16B82-DB8E-45F2-BB10-DEB2ECDCA520}] => (Allow) E:\SteamLibrary\SteamApps\common\Risk of Rain\Risk of Rain.exe
FirewallRules: [{168D9A5C-F467-4AAC-A9BE-0A0420CCC5E5}] => (Allow) E:\SteamLibrary\SteamApps\common\Risk of Rain\Risk of Rain.exe
FirewallRules: [{DCFAF268-81AF-43E8-A6F5-56E381879487}] => (Allow) E:\SteamLibrary\SteamApps\common\Metal Slug 3\mslug3.exe
FirewallRules: [{7AEFBAD3-8E82-4D06-9626-05296AB0ABF8}] => (Allow) E:\SteamLibrary\SteamApps\common\Metal Slug 3\mslug3.exe
FirewallRules: [{9AF35D56-0473-4890-B80B-F0457F073E76}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Pixel Piracy\PixelPiracy.exe
FirewallRules: [{D23D7FA7-CB4A-4F29-B89E-90817CB49400}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Pixel Piracy\PixelPiracy.exe
FirewallRules: [{D63F27A2-C5FD-4CAE-AD9E-2E1E8A383DDF}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{6F411EC4-EE32-4EAD-A04D-EA6073B0B1EE}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{FAD0DDBA-235C-41DD-9FF4-F87CFF2C1758}] => (Allow) E:\SteamLibrary\SteamApps\common\FINAL FANTASY VII\FF7_Launcher.exe
FirewallRules: [{1678AADB-098E-4FC3-99BA-339F0EB47F90}] => (Allow) E:\SteamLibrary\SteamApps\common\FINAL FANTASY VII\FF7_Launcher.exe
FirewallRules: [{F3138C88-7F76-48E3-B220-4E0CFF81705A}] => (Allow) E:\SteamLibrary\SteamApps\common\Rogue Legacy\RogueLegacy.exe
FirewallRules: [{404970A8-CE59-4AFF-B5E3-9749929489C0}] => (Allow) E:\SteamLibrary\SteamApps\common\Rogue Legacy\RogueLegacy.exe
FirewallRules: [{F3722CFF-C522-4F5D-997C-6CD893462F50}] => (Allow) E:\SteamLibrary\SteamApps\common\Contagion\contagion.exe
FirewallRules: [{D11851C3-9BC8-46CE-8CC4-26E64E35F35A}] => (Allow) E:\SteamLibrary\SteamApps\common\Contagion\contagion.exe
FirewallRules: [{95CDD84D-5378-4665-AF95-271CF032A6AE}] => (Allow) E:\SteamLibrary\SteamApps\common\Contagion\contagionds.exe
FirewallRules: [{7CEF06BE-99E4-44C6-AE9E-9A1B84F07D2B}] => (Allow) E:\SteamLibrary\SteamApps\common\Contagion\contagionds.exe
FirewallRules: [{FEDD212D-8C4D-4118-8E23-912808509581}] => (Allow) E:\SteamLibrary\SteamApps\common\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{438C2745-EC3F-4E5B-A422-155C771F293C}] => (Allow) E:\SteamLibrary\SteamApps\common\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{5477159F-8C46-461B-9193-0B9C7AE8C6E5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{BE6D99EC-298C-4797-8364-B291BB1C51D6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{6C31F5BD-343E-4058-8C00-707B6F338332}] => (Allow) E:\SteamLibrary\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{F4531F41-A058-4D1E-A256-9C739F14B716}] => (Allow) E:\SteamLibrary\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{AE7B0625-095B-49A4-8BF8-EB089835F199}C:\program files\java\jre8\bin\javaw.exe] => (Allow) C:\program files\java\jre8\bin\javaw.exe
FirewallRules: [UDP Query User{63565F80-0106-49B7-A572-174801FC1A96}C:\program files\java\jre8\bin\javaw.exe] => (Allow) C:\program files\java\jre8\bin\javaw.exe
FirewallRules: [{E06ECC1E-39A5-4664-A0B7-080C9E6EB90C}] => (Allow) C:\program files\java\jre8\bin\javaw.exe
FirewallRules: [{D5B2416B-7D97-4FDC-BB0F-50178F48047E}] => (Allow) C:\program files\java\jre8\bin\javaw.exe
FirewallRules: [{98AB446D-8762-45C7-A49A-4A3BE2F2B9EC}] => (Allow) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
FirewallRules: [{F11D5B46-1E97-4CE9-9BE3-CBCC44AC9A0A}] => (Allow) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
FirewallRules: [{C11ABEF1-F59E-4E8E-93FC-880E753DDADB}] => (Allow) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
FirewallRules: [{57C544EF-C64D-4D58-96C0-13F28A093AB7}] => (Allow) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
FirewallRules: [{4D7CCF36-50A3-4B3B-85BE-917B1D01B4AD}] => (Allow) LPort=25565
FirewallRules: [{800CC616-8F35-47A6-8F5B-94C5B1A0D151}] => (Allow) E:\SteamLibrary\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{2B277352-4EC4-4F94-B8DE-3C10167CD205}] => (Allow) E:\SteamLibrary\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{884C26A2-7110-4754-B4F1-EACB210E0FA0}] => (Allow) E:\SteamLibrary\SteamApps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{9E9C6A4B-8CF5-4EAE-B0A9-857196E47FAB}] => (Allow) E:\SteamLibrary\SteamApps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{66A9C5F2-29ED-4F82-B3A7-D615555ACD75}] => (Allow) E:\SteamLibrary\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{4B8EF29E-9041-49FD-AE30-5A51F8AFAFCE}] => (Allow) E:\SteamLibrary\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{A6571C41-F6AD-4E79-9444-72AA28E2D9AF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{B375C11E-3D6B-4524-BAC1-204F813A67E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [TCP Query User{4E3D1922-65EC-448C-AAC8-95BA692FAE30}C:\program files (x86)\steam\steamapps\common\projectzomboid\jre64\bin\java.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\projectzomboid\jre64\bin\java.exe
FirewallRules: [UDP Query User{72145008-C18F-476B-97F0-2DF1A7AF2BF1}C:\program files (x86)\steam\steamapps\common\projectzomboid\jre64\bin\java.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\projectzomboid\jre64\bin\java.exe
FirewallRules: [{0B936862-F2E5-4916-B2F7-40AE3E99A8EB}] => (Block) C:\program files (x86)\steam\steamapps\common\projectzomboid\jre64\bin\java.exe
FirewallRules: [{3C047D54-DC33-4D3E-B35E-8A967F0B4F8D}] => (Block) C:\program files (x86)\steam\steamapps\common\projectzomboid\jre64\bin\java.exe
FirewallRules: [{1C6D192D-5ED7-4C8C-A97A-E70207E750EC}] => (Allow) E:\SteamLibrary\SteamApps\common\Gods Will Be Watching\gwbw.exe
FirewallRules: [{4EFD8273-0759-4AD1-B0AC-EAFDBCA40815}] => (Allow) E:\SteamLibrary\SteamApps\common\Gods Will Be Watching\gwbw.exe
FirewallRules: [{1E7EB360-19B9-43D2-B0CD-594F59FA777F}] => (Allow) E:\SteamLibrary\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{A01EED30-E31E-465C-95F0-39E625563ADE}] => (Allow) E:\SteamLibrary\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{8276F7E2-5CF6-4AA5-9F0E-D96A1327E792}] => (Allow) E:\SteamLibrary\SteamApps\common\gamemaker_studio\GameMakerPlayer.exe
FirewallRules: [{EF76B5D0-837F-40D9-9C75-CAC034DC4C7D}] => (Allow) E:\SteamLibrary\SteamApps\common\gamemaker_studio\GameMakerPlayer.exe
FirewallRules: [{DEBEEEC9-2C54-45C0-B70D-3E609FD1B0F5}] => (Allow) E:\SteamLibrary\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{69F642B5-9375-4DF7-BFE0-D48340A81CE6}] => (Allow) E:\SteamLibrary\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{8B24877C-C88A-4EB3-BB06-637AAB9F12A4}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{3F46517E-FDCE-4F6A-B07A-38288E5AAB7B}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{C6C6FEA4-A9AB-4BFF-BF6B-142B033A0831}] => (Allow) T:\StarCraft II\StarCraft II.exe
FirewallRules: [{D762EB94-CA3E-4E0A-ACB6-DE98ABB74FE5}] => (Allow) T:\StarCraft II\StarCraft II.exe
FirewallRules: [TCP Query User{A85391EB-B6CC-4879-ACC4-C622C799BE50}T:\hirezgames\smite\binaries\win32\smite.exe] => (Allow) T:\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [UDP Query User{2D3D9D6A-687F-4F36-A132-52F40218B302}T:\hirezgames\smite\binaries\win32\smite.exe] => (Allow) T:\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [{52393AD9-F5CC-42A4-BC99-A18BE18E28B1}] => (Block) T:\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [{697F164E-F970-481D-9094-CB3DDE8176DD}] => (Block) T:\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [TCP Query User{4CA9ED50-B376-4113-895D-D69F18219AF0}T:\starcraft ii\versions\base28667\sc2.exe] => (Allow) T:\starcraft ii\versions\base28667\sc2.exe
FirewallRules: [UDP Query User{E7CD4610-265A-4033-9915-60C19F5399C2}T:\starcraft ii\versions\base28667\sc2.exe] => (Allow) T:\starcraft ii\versions\base28667\sc2.exe
FirewallRules: [{879FE642-02FF-4F5E-8E5C-53F999952155}] => (Block) T:\starcraft ii\versions\base28667\sc2.exe
FirewallRules: [{D6D0B8B4-51DF-4522-B76B-1E997026EF6F}] => (Block) T:\starcraft ii\versions\base28667\sc2.exe
FirewallRules: [{8FDD0533-0B9E-43DB-951D-BFD4275FF425}] => (Allow) T:\SteamLibrary\SteamApps\common\The Bureau\Binaries\Win32\TheBureau.exe
FirewallRules: [{783D8405-33E3-4B62-8685-4934A5B538A0}] => (Allow) T:\SteamLibrary\SteamApps\common\The Bureau\Binaries\Win32\TheBureau.exe
FirewallRules: [TCP Query User{0BA93FEA-E753-43FF-B6F9-D95B15E3649F}E:\steamlibrary\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe] => (Allow) E:\steamlibrary\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe
FirewallRules: [UDP Query User{BEB2401A-B0F1-4172-8F2E-D850B6B2920D}E:\steamlibrary\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe] => (Allow) E:\steamlibrary\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe
FirewallRules: [{13A6F478-03CA-4B49-BAE0-731B1D063F4F}] => (Block) E:\steamlibrary\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe
FirewallRules: [{0051FDC1-2841-4C72-845D-B2B8F397C05D}] => (Block) E:\steamlibrary\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe
FirewallRules: [{53BE3CDA-09D2-4FBD-B40D-FFB63834800C}] => (Allow) T:\SteamLibrary\SteamApps\common\deadrising3\deadrising3.exe
FirewallRules: [{F09AC41D-1DEF-468B-9D6B-F9112D48E533}] => (Allow) T:\SteamLibrary\SteamApps\common\deadrising3\deadrising3.exe
FirewallRules: [{85D2CEC0-7703-4A92-8821-192C8E2115E2}] => (Allow) C:\Program Files (x86)\iolo\System Mechanic Professional\SysMech.exe
FirewallRules: [{6551CF0C-F115-4B6F-A0C2-C8259CB36416}] => (Allow) C:\Program Files (x86)\iolo\System Mechanic Professional\SysMech.exe
FirewallRules: [{1A080C8C-1CDE-43DD-B461-36A480A7EF8E}] => (Allow) T:\SteamLibrary\SteamApps\common\Gauntlet\binaries\gauntlet.exe
FirewallRules: [{E55FD9E0-9907-4FB0-99E4-D43D6C6DE32D}] => (Allow) T:\SteamLibrary\SteamApps\common\Gauntlet\binaries\gauntlet.exe
FirewallRules: [{34034C40-5F28-4A18-8276-107D107283A7}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{94DBC935-183D-4B3C-AA67-BD555815BDEF}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{E0C1BD8F-D892-40BC-969D-EF60A0AD0146}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{7EFEB49F-1E91-4AB0-877F-64480342AE5A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{45A6A6BE-F99F-4413-8E4B-42D0C23BB62A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{C3D07763-8AB9-447B-B30D-84259D68CD2B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{F0CD7249-E06E-45E1-803C-DAFDB2770057}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{98B6E437-D4C3-42B8-93A4-C9FE0BCBB6CC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Amnesia The Dark Descent\Amnesia.exe
FirewallRules: [{E9901A9D-256A-4F22-BF77-261F634AC178}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Amnesia The Dark Descent\Amnesia.exe
FirewallRules: [{0AA2B8F8-4348-418C-BDAA-579A4BCE4361}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{35A2C73A-341D-4F4D-B806-774D516CABA4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{4F81D906-62EF-45B1-9796-5BE9BF9EB73C}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{9A0E6F56-30A0-4239-A5FD-EB0BA85D0235}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{1B61FA39-FEE8-416C-B0D7-F13BA5DDE978}] => (Allow) T:\SteamLibrary\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{27E81728-BB59-4131-AB84-D8E642424A19}] => (Allow) T:\SteamLibrary\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{D2AFD7C9-77BB-4E91-8495-65C8D278B6DD}] => (Allow) T:\SteamLibrary\SteamApps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe
FirewallRules: [{FFDD4553-674E-4BD7-B10A-5E1DD7CA6034}] => (Allow) T:\SteamLibrary\SteamApps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe
FirewallRules: [{D47296E2-1C2C-4309-94C6-099C7F97AB02}] => (Allow) T:\SteamLibrary\SteamApps\common\Tabletop Simulator\Tabletop Simulator.exe
FirewallRules: [{C8ACEF68-FC2D-4E78-A673-65704EBDDAA9}] => (Allow) T:\SteamLibrary\SteamApps\common\Tabletop Simulator\Tabletop Simulator.exe
FirewallRules: [{78C404CA-D436-431A-8B07-B4BE43CEB023}] => (Allow) T:\SteamLibrary\SteamApps\common\Offworld Trading Company\Offworld.exe
FirewallRules: [{A8E3642E-32FF-49B3-A744-3BE0E3347162}] => (Allow) T:\SteamLibrary\SteamApps\common\Offworld Trading Company\Offworld.exe
FirewallRules: [TCP Query User{8008C9E4-EBD7-483B-8EC4-9EF08D55150C}T:\steamlibrary\steamapps\common\elite dangerous\products\elite-dangerous-64\elitedangerous64.exe] => (Allow) T:\steamlibrary\steamapps\common\elite dangerous\products\elite-dangerous-64\elitedangerous64.exe
FirewallRules: [UDP Query User{F26CCF39-37D2-4D65-A1B0-6D79BB356551}T:\steamlibrary\steamapps\common\elite dangerous\products\elite-dangerous-64\elitedangerous64.exe] => (Allow) T:\steamlibrary\steamapps\common\elite dangerous\products\elite-dangerous-64\elitedangerous64.exe
FirewallRules: [{5C6B9BEB-3B90-4125-BE20-E41485426D91}] => (Block) T:\steamlibrary\steamapps\common\elite dangerous\products\elite-dangerous-64\elitedangerous64.exe
FirewallRules: [{6E7379F3-7CB8-45AB-90B5-C0FFE6D75297}] => (Block) T:\steamlibrary\steamapps\common\elite dangerous\products\elite-dangerous-64\elitedangerous64.exe
FirewallRules: [{930F3AB5-FCB5-40F9-98A8-B5FE6A50BF68}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\lync.exe
FirewallRules: [{5EDD573C-CA3F-4C4A-BBA2-64DD0B0B14C4}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\lync.exe
FirewallRules: [{2DDCA2FC-3A60-4721-A1F3-69F2CCC203E8}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{37EADD72-A3A2-4F64-A54D-9D27FAEE062C}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{B6B7ED56-1C87-4A96-B17F-153BA4C1656B}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\FaxApplications.exe
FirewallRules: [{F8947948-0E6F-4E38-87A2-6C0488FD4A2C}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\DigitalWizards.exe
FirewallRules: [{83F33CC6-0B57-4D19-A677-A8D8E10EC1F3}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\SendAFax.exe
FirewallRules: [{DF73A72F-33F4-4D15-8C45-55F6FE7EF34B}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\Bin\DeviceSetup.exe
FirewallRules: [{795D5EF9-5148-4C49-94A1-C7FA1172AD01}] => (Allow) LPort=5357
FirewallRules: [{63274032-2FED-4275-A265-103C15A4EDA9}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [TCP Query User{9CB49925-BA3A-4352-A928-63248D5EA212}T:\steamlibrary\steamapps\common\elite dangerous\products\forc-fdev-d-1010\elitedangerous32.exe] => (Allow) T:\steamlibrary\steamapps\common\elite dangerous\products\forc-fdev-d-1010\elitedangerous32.exe
FirewallRules: [UDP Query User{04B8B5AA-5E45-48C9-B838-86ED5D892D18}T:\steamlibrary\steamapps\common\elite dangerous\products\forc-fdev-d-1010\elitedangerous32.exe] => (Allow) T:\steamlibrary\steamapps\common\elite dangerous\products\forc-fdev-d-1010\elitedangerous32.exe
FirewallRules: [{C54FD4FE-5304-42C6-963D-ABF6BE7F74DC}] => (Block) T:\steamlibrary\steamapps\common\elite dangerous\products\forc-fdev-d-1010\elitedangerous32.exe
FirewallRules: [{EEC0865E-362C-4F45-A9DB-D1ED16F51BED}] => (Block) T:\steamlibrary\steamapps\common\elite dangerous\products\forc-fdev-d-1010\elitedangerous32.exe
FirewallRules: [{055B0193-6C96-4093-A2E5-9AEA91F7B81E}] => (Allow) T:\SteamLibrary\SteamApps\common\Elite Dangerous\EDLaunch.exe
FirewallRules: [{4810773A-4D74-4DAC-9FE5-0C13612E2B54}] => (Allow) T:\SteamLibrary\SteamApps\common\Elite Dangerous\EDLaunch.exe
FirewallRules: [TCP Query User{0181F3A3-1C28-450C-8874-33EBF9176B88}C:\users\jewfro\downloads\adt-bundle-windows-x86-20140702\adt-bundle-windows-x86-20140702\eclipse\eclipse.exe] => (Allow) C:\users\jewfro\downloads\adt-bundle-windows-x86-20140702\adt-bundle-windows-x86-20140702\eclipse\eclipse.exe
FirewallRules: [UDP Query User{2B9E7113-4C6C-4BFC-97D4-B81E3697CE46}C:\users\jewfro\downloads\adt-bundle-windows-x86-20140702\adt-bundle-windows-x86-20140702\eclipse\eclipse.exe] => (Allow) C:\users\jewfro\downloads\adt-bundle-windows-x86-20140702\adt-bundle-windows-x86-20140702\eclipse\eclipse.exe
FirewallRules: [{A91963BA-71DE-4D4F-ADF5-FF44CA696D3F}] => (Block) C:\users\jewfro\downloads\adt-bundle-windows-x86-20140702\adt-bundle-windows-x86-20140702\eclipse\eclipse.exe
FirewallRules: [{943EE22E-9C84-4F35-9FB0-375F2D3DC860}] => (Block) C:\users\jewfro\downloads\adt-bundle-windows-x86-20140702\adt-bundle-windows-x86-20140702\eclipse\eclipse.exe
FirewallRules: [{2776268C-7F77-46FF-A494-1F5BD185E007}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hammerwatch\editor\HammerEditor.exe
FirewallRules: [{BBF2DF4B-0B9A-4910-BF76-7C9DBFE461F7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hammerwatch\editor\HammerEditor.exe
FirewallRules: [TCP Query User{01B9DE3B-1CA9-4C37-9AEC-6E6D60F65AA8}C:\ruby22-x64\bin\ruby.exe] => (Allow) C:\ruby22-x64\bin\ruby.exe
FirewallRules: [UDP Query User{DE5B8F08-7CB6-4145-9D45-00BAF1ACBBEB}C:\ruby22-x64\bin\ruby.exe] => (Allow) C:\ruby22-x64\bin\ruby.exe
FirewallRules: [{968B7FBC-F6D8-444F-9A1D-D4D8D21176D9}] => (Block) C:\ruby22-x64\bin\ruby.exe
FirewallRules: [{D5260BFA-D038-439B-BAA0-F06ECAA803BA}] => (Block) C:\ruby22-x64\bin\ruby.exe
FirewallRules: [{75DC4E97-DD3A-4E24-B49A-904C662617B7}] => (Allow) E:\SteamLibrary\SteamApps\common\mordheim\mordheim.exe
FirewallRules: [{98868189-0152-481E-A761-8DC63B49A25F}] => (Allow) E:\SteamLibrary\SteamApps\common\mordheim\mordheim.exe
FirewallRules: [{DEBE8717-EC8D-4997-8784-55D707D331EF}] => (Allow) C:\Program Files (x86)\Google\Chrome Remote Desktop\51.0.2704.7\remoting_host.exe
FirewallRules: [{17238BE9-512F-40B9-8851-98B043600B10}] => (Allow) T:\SteamLibrary\SteamApps\common\Minimum\Binaries\Win32\Minimum.exe
FirewallRules: [{07C4DB81-67A4-4E7E-B4A4-EF9D950AC491}] => (Allow) T:\SteamLibrary\SteamApps\common\Minimum\Binaries\Win32\Minimum.exe
FirewallRules: [{DF46864E-EDCA-485F-AED0-2300BF4714DC}] => (Allow) E:\SteamLibrary\SteamApps\common\Kerbal Space Program\KSP.exe
FirewallRules: [{334AFDF6-75D4-4A7B-914E-1709B9ED7732}] => (Allow) E:\SteamLibrary\SteamApps\common\Kerbal Space Program\KSP.exe
FirewallRules: [{8DA8DCF2-3ABA-4A2D-8BC5-C703F2E12A72}] => (Allow) E:\SteamLibrary\SteamApps\common\Kerbal Space Program\KSP_x64.exe
FirewallRules: [{A8C2D1FC-8E58-45E1-98E1-18EC3F44117E}] => (Allow) E:\SteamLibrary\SteamApps\common\Kerbal Space Program\KSP_x64.exe
FirewallRules: [TCP Query User{42C11B59-7335-47C5-945D-5244E5C168DA}C:\users\jewfro\appdata\local\programs\python\python35-32\python.exe] => (Allow) C:\users\jewfro\appdata\local\programs\python\python35-32\python.exe
FirewallRules: [UDP Query User{ABD09AAC-8350-4F97-B222-64C926DCBFB9}C:\users\jewfro\appdata\local\programs\python\python35-32\python.exe] => (Allow) C:\users\jewfro\appdata\local\programs\python\python35-32\python.exe
FirewallRules: [{ACBB6AF7-3BE5-4C2B-8AA1-A998C6252E01}] => (Block) C:\users\jewfro\appdata\local\programs\python\python35-32\python.exe
FirewallRules: [{C8B90CF4-C809-4A3C-97C2-6050826BB4A7}] => (Block) C:\users\jewfro\appdata\local\programs\python\python35-32\python.exe
FirewallRules: [TCP Query User{4C6F8F5F-F3D4-4C08-A55F-CF207900DE14}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{52DCB071-CC42-4B56-817D-0BA539E4F532}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [{963A92ED-7A60-4F57-8571-BD7B21AD46F1}] => (Block) C:\xampp\apache\bin\httpd.exe
FirewallRules: [{FF1350C0-D40A-4DBF-81F8-929E6957FC6C}] => (Block) C:\xampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{45217B9C-6D60-4071-9585-AF6C2DDCB36B}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [UDP Query User{024AE031-AA0C-47A1-AE4F-27E273F805A2}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [{45292028-7753-4201-806F-C5DEE9501619}] => (Block) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [{CD7FFC2F-9A0E-440C-86EF-818ABAF4C0D3}] => (Block) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [TCP Query User{AB39228A-4E7E-4D68-AA6D-DEAE7ADDE75B}T:\overwatch\overwatch.exe] => (Allow) T:\overwatch\overwatch.exe
FirewallRules: [UDP Query User{4C05094A-088C-40D4-A9D8-67C952F948A3}T:\overwatch\overwatch.exe] => (Allow) T:\overwatch\overwatch.exe
FirewallRules: [{DB0C476B-1676-45C1-AC85-565AAF735EAF}] => (Block) T:\overwatch\overwatch.exe
FirewallRules: [{A01F3330-142E-4B16-84CE-A46FAFB28FB0}] => (Block) T:\overwatch\overwatch.exe
FirewallRules: [{00495BD5-ADAF-43B1-8A05-23A123EAED33}] => (Allow) E:\SteamLibrary\SteamApps\common\Sword Coast Legends\SwordCoast.exe
FirewallRules: [{60AD626F-BE3C-4F09-BE9A-8952C7F2FA7D}] => (Allow) E:\SteamLibrary\SteamApps\common\Sword Coast Legends\SwordCoast.exe
FirewallRules: [TCP Query User{3FD02319-72EC-4583-BF39-C1A7DCA3F7B1}T:\heroes of the storm\versions\base43259\heroesofthestorm_x64.exe] => (Allow) T:\heroes of the storm\versions\base43259\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{90BA8498-9DD3-4F4B-AB83-05270D821679}T:\heroes of the storm\versions\base43259\heroesofthestorm_x64.exe] => (Allow) T:\heroes of the storm\versions\base43259\heroesofthestorm_x64.exe
FirewallRules: [{F7694376-D7C6-4634-8A68-79BB3E02F224}] => (Block) T:\heroes of the storm\versions\base43259\heroesofthestorm_x64.exe
FirewallRules: [{7284A33B-E7A3-4D90-9846-49BC7EF8E061}] => (Block) T:\heroes of the storm\versions\base43259\heroesofthestorm_x64.exe
FirewallRules: [{96EAC012-1F08-4D21-A758-85CAF19180AC}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{B227772F-4481-4E21-879A-2B49DE5B0251}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio Tools for Unity\2015\UnityVS.OpenFile.exe
FirewallRules: [{AE9101C9-F859-4119-83D6-D6306D37278A}] => (Allow) T:\PROGRA~2\Editor\Unity.exe
FirewallRules: [TCP Query User{EAC73B23-D1B8-42F1-AB9F-2E10F68FE2CE}T:\heroes of the storm\versions\base43571\heroesofthestorm_x64.exe] => (Allow) T:\heroes of the storm\versions\base43571\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{10E019C4-9746-45C1-9C03-ACCD08F21972}T:\heroes of the storm\versions\base43571\heroesofthestorm_x64.exe] => (Allow) T:\heroes of the storm\versions\base43571\heroesofthestorm_x64.exe
FirewallRules: [{5DB37F17-B37F-4056-ADEA-2241E467D05E}] => (Block) T:\heroes of the storm\versions\base43571\heroesofthestorm_x64.exe
FirewallRules: [{31A53D36-70ED-475B-94C4-8E6A427C3156}] => (Block) T:\heroes of the storm\versions\base43571\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{F6FF3539-2314-4D17-9210-902FC079D571}T:\program files\monodevelop\bin\monodevelop.exe] => (Allow) T:\program files\monodevelop\bin\monodevelop.exe
FirewallRules: [UDP Query User{A0A7F706-1749-4C4C-9AED-23A3B02E0D1B}T:\program files\monodevelop\bin\monodevelop.exe] => (Allow) T:\program files\monodevelop\bin\monodevelop.exe
FirewallRules: [{F67D312B-5F17-4AC3-AEDA-F80F7628B42B}] => (Block) T:\program files\monodevelop\bin\monodevelop.exe
FirewallRules: [{7BACEB9D-8E0B-436A-8EEB-B5CF2CBFEE2C}] => (Block) T:\program files\monodevelop\bin\monodevelop.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
==================== Restore Points =========================
==================== Faulty Device Manager Devices =============
Name: Active Malware Protection Support Driver
Description: Active Malware Protection Support Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: AMPSE
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (06/16/2016 01:34:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Faulting module name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Exception code: 0xc0000005
Fault offset: 0x00071d70
Faulting process id: 0x62a8
Faulting application start time: 0xNvOAWrapperCache.exe0
Faulting application path: NvOAWrapperCache.exe1
Faulting module path: NvOAWrapperCache.exe2
Report Id: NvOAWrapperCache.exe3
Error: (06/16/2016 01:34:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Faulting module name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Exception code: 0xc0000005
Fault offset: 0x00071d70
Faulting process id: 0x5d94
Faulting application start time: 0xNvOAWrapperCache.exe0
Faulting application path: NvOAWrapperCache.exe1
Faulting module path: NvOAWrapperCache.exe2
Report Id: NvOAWrapperCache.exe3
Error: (06/16/2016 01:33:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Faulting module name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Exception code: 0xc0000005
Fault offset: 0x00071d70
Faulting process id: 0x6318
Faulting application start time: 0xNvOAWrapperCache.exe0
Faulting application path: NvOAWrapperCache.exe1
Faulting module path: NvOAWrapperCache.exe2
Report Id: NvOAWrapperCache.exe3
Error: (06/16/2016 01:33:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Faulting module name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Exception code: 0xc0000005
Fault offset: 0x00071d70
Faulting process id: 0x5abc
Faulting application start time: 0xNvOAWrapperCache.exe0
Faulting application path: NvOAWrapperCache.exe1
Faulting module path: NvOAWrapperCache.exe2
Report Id: NvOAWrapperCache.exe3
Error: (06/16/2016 01:32:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Faulting module name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Exception code: 0xc0000005
Fault offset: 0x00071d70
Faulting process id: 0x23e0
Faulting application start time: 0xNvOAWrapperCache.exe0
Faulting application path: NvOAWrapperCache.exe1
Faulting module path: NvOAWrapperCache.exe2
Report Id: NvOAWrapperCache.exe3
Error: (06/16/2016 01:32:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Faulting module name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Exception code: 0xc0000005
Fault offset: 0x00071d70
Faulting process id: 0x5998
Faulting application start time: 0xNvOAWrapperCache.exe0
Faulting application path: NvOAWrapperCache.exe1
Faulting module path: NvOAWrapperCache.exe2
Report Id: NvOAWrapperCache.exe3
Error: (06/16/2016 01:31:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Faulting module name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Exception code: 0xc0000005
Fault offset: 0x00071d70
Faulting process id: 0x6618
Faulting application start time: 0xNvOAWrapperCache.exe0
Faulting application path: NvOAWrapperCache.exe1
Faulting module path: NvOAWrapperCache.exe2
Report Id: NvOAWrapperCache.exe3
Error: (06/16/2016 01:31:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Faulting module name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Exception code: 0xc0000005
Fault offset: 0x00071d70
Faulting process id: 0x5b68
Faulting application start time: 0xNvOAWrapperCache.exe0
Faulting application path: NvOAWrapperCache.exe1
Faulting module path: NvOAWrapperCache.exe2
Report Id: NvOAWrapperCache.exe3
Error: (06/16/2016 01:30:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Faulting module name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Exception code: 0xc0000005
Fault offset: 0x00071d70
Faulting process id: 0x6234
Faulting application start time: 0xNvOAWrapperCache.exe0
Faulting application path: NvOAWrapperCache.exe1
Faulting module path: NvOAWrapperCache.exe2
Report Id: NvOAWrapperCache.exe3
Error: (06/16/2016 01:30:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Faulting module name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Exception code: 0xc0000005
Fault offset: 0x00071d70
Faulting process id: 0x5d34
Faulting application start time: 0xNvOAWrapperCache.exe0
Faulting application path: NvOAWrapperCache.exe1
Faulting module path: NvOAWrapperCache.exe2
Report Id: NvOAWrapperCache.exe3
System errors:
=============
Error: (06/16/2016 03:28:31 AM) (Source: volsnap) (EventID: 36) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.
Error: (06/16/2016 03:02:32 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070663: Security Update for Skype for Business 2016 (KB3114960) 32-Bit Edition.
Error: (06/16/2016 03:02:32 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070663: Update for Microsoft PowerPoint 2016 (KB3115138) 32-Bit Edition.
Error: (06/16/2016 03:01:09 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070663: Security Update for Microsoft Excel 2016 (KB3114964) 32-Bit Edition.
Error: (06/16/2016 03:01:09 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070663: Update for Microsoft OneDrive for Business (KB3115148) 32-Bit Edition.
Error: (06/16/2016 03:01:09 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070663: Update for Microsoft Excel 2016 (KB3115139) 32-Bit Edition.
Error: (06/16/2016 03:01:07 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070663: Update for Microsoft Project 2016 (KB3115149) 32-Bit Edition.
Error: (06/16/2016 03:01:07 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070663: Update for Microsoft Office 2016 (KB3115102) 32-Bit Edition.
Error: (06/16/2016 03:01:07 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070663: Update for Microsoft Office 2016 (KB3114968) 32-Bit Edition.
Error: (06/16/2016 03:01:07 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070663: Update for Skype for Business 2016 (KB3115087) 32-Bit Edition.
CodeIntegrity:
===================================
Date: 2016-06-16 13:32:30.814
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-06-16 13:25:38.277
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-06-16 04:53:11.298
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-06-16 04:45:06.236
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-06-16 03:58:37.012
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-06-16 03:11:48.256
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-06-15 23:12:18.537
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-06-15 22:10:55.184
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-06-15 22:00:53.172
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-06-15 21:30:43.374
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz
Percentage of memory in use: 26%
Total physical RAM: 24513.77 MB
Available physical RAM: 17898.92 MB
Total Virtual: 49025.73 MB
Available Virtual: 39331.29 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:167.58 GB) (Free:4.38 GB) NTFS
Drive e: () (Fixed) (Total:465.75 GB) (Free:175.75 GB) NTFS
Drive t: (The Big Byte) (Fixed) (Total:931.51 GB) (Free:717.77 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 4A4D4A4D)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 167.7 GB) (Disk ID: 55A48125)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=167.6 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: D01E21DE)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================
So I tried to read all the stickies to provide the logs that are needed to start a topic here. The symptoms are that my computer is lagging up for no reason on basic tasks and there is a loading sign on the cursor almost all the time and the browser windows keep getting deselected for what appears to be no reason. I tried to attach the log files but most were "too big" according to the forum so i pasted them below. Please let me know if there is any other information I can provide to be helpful.
Thank you in advanced for any and all help!
-Josh
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:16-06-2016
Ran by JewFro (administrator) on THEMOTHERSHIP (16-06-2016 13:33:39)
Running from C:\Users\JewFro\Downloads
Loaded Profiles: JewFro (Available Profiles: JewFro & Afro)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\51.0.2704.7\remoting_host.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\51.0.2704.7\remoting_host.exe
(Hi-Rez Studios) T:\HiPatchService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(iolo technologies, LLC) C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe
(Microsoft Corporation) C:\Program Files\Microsoft SDKs\Kinect\v1.0 Beta2\Service\KinectManagementService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
() C:\xampp\mysql\bin\mysqld.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
() C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe
(CYREN Inc.) C:\Program Files\Common Files\Commtouch\AntiVirus5\vsedsps.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
() C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDFME\WDFME.exe
() C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDSC.exe
(CYREN Inc.) C:\Program Files\Common Files\Commtouch\AntiVirus5\vseamps.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(iolo technologies, LLC) C:\Program Files (x86)\iolo\System Mechanic Professional\ioloGovernor64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP Officejet Pro 8620\Bin\ScanToPCActivationApp.exe
() C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(iolo technologies, LLC) C:\Program Files (x86)\iolo\System Mechanic Professional\LiveBoost.exe
() C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv.exe
() C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Hammer & Chisel, Inc.) C:\Users\JewFro\AppData\Local\Discord\app-0.0.291\Discord.exe
(Hammer & Chisel, Inc.) C:\Users\JewFro\AppData\Local\Discord\app-0.0.291\Discord.exe
(Hammer & Chisel, Inc.) C:\Users\JewFro\AppData\Local\Discord\app-0.0.291\Discord.exe
() C:\Users\JewFro\AppData\Local\GitHub\PortableGit_d76a6a98c9315931ec4927243517bc09e9b731a0\usr\bin\ssh-agent.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP Officejet Pro 8620\Bin\HPNetworkCommunicatorCom.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.84\nacl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.84\nacl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7156296 2013-03-05] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192 2013-01-31] (Intel Corporation)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2398776 2016-05-02] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.10.398\AsusWSPanel.exe [5247808 2014-08-19] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [iolo Startup] => C:\Program Files (x86)\iolo\Common\Lib\ioloLManager.exe [4612544 2016-02-19] (iolo technologies, LLC)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\Run: [HP Officejet Pro 8620 (NET)] => C:\Program Files\HP\HP Officejet Pro 8620\Bin\ScanToPCActivationApp.exe [3487240 2014-07-21] (Hewlett-Packard Development Company, LP)
HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\MountPoints2: {5ac4160c-8ae9-11e3-a76d-806e6f6e6963} - D:\.\Bin\ASSETUP.exe
HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\MountPoints2: {dd3cd12b-0736-11e4-ad07-74d02bc47eec} - G:\setup.exe -a
HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\MountPoints2: {ec6c980a-ccb7-11e3-a73d-74d02bc47eec} - G:\VZW_Software_upgrade_assistant.exe
HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [242688 2010-11-20] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.10.398\ASUSWSShellExt64.dll [2013-06-25] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.10.398\ASUSWSShellExt64.dll [2013-06-25] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.10.398\ASUSWSShellExt64.dll [2013-06-25] (ASUS Cloud Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk [2014-03-21]
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDDMStatus.lnk [2014-02-01]
ShortcutTarget: WDDMStatus.lnk -> C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe (Western Digital Technologies, Inc.)
BootExecute: "autocheck autochk * "sdnclean64.exebddel.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog9 01 C:\Windows\system32\iavlsp.dll No File
Winsock: Catalog9 02 C:\Windows\system32\iavlsp.dll No File
Winsock: Catalog9 13 C:\Windows\system32\iavlsp.dll No File
Winsock: Catalog9-x64 01 C:\Windows\system32\iavlsp64.dll [160256 2014-07-16] ()
Winsock: Catalog9-x64 02 C:\Windows\system32\iavlsp64.dll [160256 2014-07-16] ()
Winsock: Catalog9-x64 13 C:\Windows\system32\iavlsp64.dll [160256 2014-07-16] ()
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{050A6CD1-AEBC-4656-9568-A2DCEF67092B}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{7BAEF71C-9C8C-4F74-AB03-2997778E0256}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{AD3D85A7-F74A-4386-8A62-996982BC24E9}: [DhcpNameServer] 192.168.42.129
Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre8\bin\ssv.dll [2014-05-29] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office16\URLREDIR.DLL [2015-07-31] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2016-01-13] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre8\bin\jp2ssv.dll [2014-05-29] (Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-11-18] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-05-07] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office16\URLREDIR.DLL [2015-07-31] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2016-01-13] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-01-13] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-01-13] (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-12] ()
FF Plugin: @java.com/DTPlugin,version=11.5.2 -> C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll [2014-05-29] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.5.2 -> C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll [2014-05-29] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-12] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> E:\Mozilla Plugins\npitunes.dll [No File]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-03-12] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-05-07] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-05-07] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-11-18] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-02-09] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-02-09] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-09-12] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3547861629-2237757925-1048173658-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\JewFro\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-05-08] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-11-18] (Microsoft Corporation)
Chrome:
=======
CHR HomePage: Default -> hxxps://www.google.com/
CHR StartupUrls: Default -> "hxxp://search.conduit.com/?ctid=CT3324774&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SP280DDF8D-D416-4907-8A5E-56C5E5FAFEDA&SSPV=","hxxp://thepulse.blogs.pace.edu/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.84\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.84\ppGoogleNaClPluginChrome.dll => No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.84\pdf.dll => No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll => No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Profile: C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-17]
CHR Extension: (YouTube) - C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-17]
CHR Extension: (Google Search) - C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-17]
CHR Extension: (Universe 1080p) - C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpjflbaeldlhnllfjdiogkjgnmljfkli [2016-03-30]
CHR Extension: (Google Play Music) - C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2016-06-14]
CHR Extension: (Chrome Sniffer Plus) - C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhhdlnnepfjhlhilgmeepgkhjmhhhjkh [2016-02-17]
CHR Extension: (Chrome Remote Desktop) - C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2016-06-02]
CHR Extension: (Google Docs Offline) - C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-06-02]
CHR Extension: (Chrome Web Store Payments) - C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]
CHR Extension: (Gmail) - C:\Users\JewFro\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-17]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 Apache2.4; C:\xampp\apache\bin\httpd.exe [22528 2015-10-13] (Apache Software Foundation) [File not signed]
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2013-06-04] ()
R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\51.0.2704.7\remoting_host.exe [68488 2016-04-14] (Google Inc.)
R2 ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [414360 2016-02-05] ()
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [File not signed]
S4 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1165368 2016-05-02] (NVIDIA Corporation)
R2 HiPatchService; T:\HiPatchService.exe [9728 2016-03-14] (Hi-Rez Studios) [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-01-31] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 ioloSystemService; C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe [4759600 2016-02-19] (iolo technologies, LLC)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation)
R2 KinectManagement; C:\Program Files\Microsoft SDKs\Kinect\v1.0 Beta2\Service\KinectManagementService.exe [131584 2011-09-24] (Microsoft Corporation) [File not signed]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-08-08] (LogMeIn, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
R2 mysql; C:\xampp\mysql\bin\mysqld.exe [11583304 2016-03-23] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144 2016-05-02] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3634232 2016-05-02] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2522680 2016-05-02] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-02-04] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1740760 2014-09-03] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
R2 SystemUsageReportSvc_WILLAMETTE; C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe [115864 2016-02-05] ()
S3 USER_ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [414360 2016-02-05] ()
R2 vseamps; C:\Program Files\Common Files\Commtouch\AntiVirus5\vseamps.exe [122120 2014-03-25] (CYREN Inc.)
R2 vsedsps; C:\Program Files\Common Files\Commtouch\AntiVirus5\vsedsps.exe [119560 2014-03-25] (CYREN Inc.)
S3 vseqrts; C:\Program Files\Common Files\Commtouch\AntiVirus5\vseqrts.exe [181512 2014-03-25] (CYREN Inc.)
R2 WDDMService; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [288256 2010-09-08] (WDC) [File not signed]
R2 WDFME; C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDFME\WDFME.exe [1034752 2010-09-08] () [File not signed]
R2 WDSC; C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDSC.exe [485376 2010-09-08] () [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMP; C:\Windows\system32\Drivers\amp.sys [174856 2014-03-25] (CYREN Inc.)
S2 AMPSE; C:\Windows\system32\Drivers\ampse.sys [1728776 2014-03-25] (CYREN Inc.)
R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [47512 2013-01-10] (Asmedia Technology)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-21] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2014-02-27] ()
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [496400 2013-02-26] (Intel Corporation)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 ElRawDisk; C:\Windows\system32\drivers\ElRawDsk.sys [30752 2013-12-03] (EldoS Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-01-31] (Intel Corporation)
S3 KinectCamera; C:\Windows\System32\Drivers\kinectcamera.sys [42880 2011-09-24] (Microsoft Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-06-16] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28216 2016-05-02] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
R1 RawDisk3; C:\Windows\system32\drivers\rawdsk3.sys [32912 2014-07-16] (EldoS Corporation)
R1 SDHookDriver; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHookDrv64.sys [64160 2014-04-25] ()
R3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [21984 2015-06-04] ()
R1 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys [127456 2016-03-04] (Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\System32\DRIVERS\VBoxNetLwf.sys [205784 2016-03-04] (Oracle Corporation)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-06-16 13:33 - 2016-06-16 13:33 - 00027549 _____ C:\Users\JewFro\Downloads\FRST.txt
2016-06-16 13:32 - 2016-06-16 13:33 - 00000000 ____D C:\FRST
2016-06-16 13:32 - 2016-06-16 13:32 - 02386944 _____ (Farbar) C:\Users\JewFro\Downloads\FRST64.exe
2016-06-15 23:30 - 2016-06-15 23:30 - 00000000 ____D C:\Users\JewFro\AppData\Roaming\Subversion
2016-06-15 23:30 - 2016-06-15 23:30 - 00000000 ____D C:\Users\JewFro\AppData\Roaming\MonoDevelop-Unity-5.0
2016-06-15 23:30 - 2016-06-15 23:30 - 00000000 ____D C:\Users\JewFro\AppData\Local\MonoDevelop-Unity-5.0
2016-06-15 23:16 - 2016-06-15 23:16 - 00000000 ____D C:\Users\JewFro\Downloads\Ex_Files_Unity_5_2D_EssT
2016-06-15 18:46 - 2016-06-15 18:52 - 30157050 _____ C:\Users\JewFro\Downloads\Ex_Files_Unity_5_2D_EssT.zip
2016-06-15 18:31 - 2016-06-15 18:31 - 00000136 _____ C:\Users\JewFro\.gitconfig
2016-06-14 21:49 - 2016-05-13 18:15 - 00382184 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-06-14 21:49 - 2016-05-13 18:09 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-06-14 21:49 - 2016-05-13 18:09 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-06-14 21:49 - 2016-05-13 18:09 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-06-14 21:49 - 2016-05-13 18:09 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-06-14 21:49 - 2016-05-13 17:54 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-06-14 21:49 - 2016-05-13 17:50 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2016-06-14 21:49 - 2016-05-13 17:49 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2016-06-14 21:49 - 2016-05-13 17:49 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2016-06-14 21:49 - 2016-05-13 17:27 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-06-14 21:49 - 2016-05-12 13:20 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-06-14 21:49 - 2016-05-12 13:20 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-06-14 21:49 - 2016-05-12 13:15 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-06-14 21:49 - 2016-05-12 13:15 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-06-14 21:49 - 2016-05-12 13:15 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-06-14 21:49 - 2016-05-12 13:15 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-06-14 21:49 - 2016-05-12 13:15 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-06-14 21:49 - 2016-05-12 13:14 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-06-14 21:49 - 2016-05-12 11:18 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-06-14 21:49 - 2016-05-12 11:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-06-14 21:49 - 2016-05-12 10:58 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-06-14 21:49 - 2016-05-12 10:58 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-06-14 21:49 - 2016-05-12 10:58 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-06-14 21:49 - 2016-05-12 10:58 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-06-14 21:49 - 2016-05-12 10:58 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-06-14 21:49 - 2016-05-12 10:58 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-06-14 21:49 - 2016-05-12 10:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-06-14 21:49 - 2016-05-12 10:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-06-14 21:49 - 2016-05-12 10:51 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-06-14 21:49 - 2016-05-12 09:05 - 00459640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-06-14 21:49 - 2016-05-12 09:05 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-06-14 21:49 - 2016-05-12 09:04 - 00249352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-06-14 21:48 - 2016-05-18 12:10 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-06-14 21:48 - 2016-05-18 12:09 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-06-14 21:48 - 2016-05-12 13:15 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\winipsec.dll
2016-06-14 21:48 - 2016-05-12 13:14 - 00794624 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-06-14 21:48 - 2016-05-12 13:14 - 00793088 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2016-06-14 21:48 - 2016-05-12 13:14 - 00502272 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2016-06-14 21:48 - 2016-05-12 13:14 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll
2016-06-14 21:48 - 2016-05-12 13:14 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2016-06-14 21:48 - 2016-05-12 13:14 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
2016-06-14 21:48 - 2016-05-12 13:14 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.dll
2016-06-14 21:48 - 2016-05-12 11:18 - 00591872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpprefcl.dll
2016-06-14 21:48 - 2016-05-12 11:18 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\polstore.dll
2016-06-14 21:48 - 2016-05-12 11:18 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2016-06-14 21:48 - 2016-05-12 11:18 - 00070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winipsec.dll
2016-06-14 21:48 - 2016-05-12 11:18 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FwRemoteSvr.dll
2016-06-14 21:48 - 2016-05-12 11:06 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.exe
2016-06-14 21:48 - 2016-05-12 11:03 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-06-14 21:48 - 2016-05-12 10:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpscript.dll
2016-06-14 21:48 - 2016-05-12 10:57 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpscript.exe
2016-06-14 21:48 - 2016-05-11 13:02 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2016-06-14 21:48 - 2016-05-11 13:02 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-06-14 21:48 - 2016-05-11 13:02 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-06-14 21:48 - 2016-05-11 13:02 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2016-06-14 21:48 - 2016-05-11 11:19 - 00363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2016-06-14 21:48 - 2016-05-11 11:19 - 00351744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2016-06-14 21:48 - 2016-05-11 11:19 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2016-06-14 21:48 - 2016-05-11 11:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll
2016-06-14 21:48 - 2016-05-11 11:11 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2016-06-14 21:48 - 2016-05-11 11:01 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe
2016-06-14 21:48 - 2016-05-11 10:58 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2016-06-14 21:46 - 2016-05-23 19:37 - 00394960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-06-14 21:46 - 2016-05-23 18:54 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-06-14 21:46 - 2016-05-21 13:28 - 25802752 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-06-14 21:46 - 2016-05-21 12:57 - 20341248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-06-14 21:46 - 2016-05-20 18:27 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-06-14 21:46 - 2016-05-20 18:27 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-06-14 21:46 - 2016-05-20 18:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-06-14 21:46 - 2016-05-20 18:10 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-06-14 21:46 - 2016-05-20 18:09 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-06-14 21:46 - 2016-05-20 18:09 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-06-14 21:46 - 2016-05-20 18:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-06-14 21:46 - 2016-05-20 18:08 - 02895360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-06-14 21:46 - 2016-05-20 18:08 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-06-14 21:46 - 2016-05-20 18:02 - 06051328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-06-14 21:46 - 2016-05-20 18:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-06-14 21:46 - 2016-05-20 17:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-06-14 21:46 - 2016-05-20 17:57 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-06-14 21:46 - 2016-05-20 17:57 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-06-14 21:46 - 2016-05-20 17:57 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-06-14 21:46 - 2016-05-20 17:56 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-06-14 21:46 - 2016-05-20 17:56 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-06-14 21:46 - 2016-05-20 17:55 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-06-14 21:46 - 2016-05-20 17:54 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-06-14 21:46 - 2016-05-20 17:54 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-06-14 21:46 - 2016-05-20 17:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-06-14 21:46 - 2016-05-20 17:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-06-14 21:46 - 2016-05-20 17:50 - 02287104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-06-14 21:46 - 2016-05-20 17:49 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-06-14 21:46 - 2016-05-20 17:48 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-06-14 21:46 - 2016-05-20 17:45 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-06-14 21:46 - 2016-05-20 17:45 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-06-14 21:46 - 2016-05-20 17:44 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-06-14 21:46 - 2016-05-20 17:44 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-06-14 21:46 - 2016-05-20 17:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-06-14 21:46 - 2016-05-20 17:41 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-06-14 21:46 - 2016-05-20 17:33 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-06-14 21:46 - 2016-05-20 17:33 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-06-14 21:46 - 2016-05-20 17:32 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-06-14 21:46 - 2016-05-20 17:29 - 13815808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-06-14 21:46 - 2016-05-20 17:28 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-06-14 21:46 - 2016-05-20 17:27 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-06-14 21:46 - 2016-05-20 17:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-06-14 21:46 - 2016-05-20 17:26 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-06-14 21:46 - 2016-05-20 17:25 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-06-14 21:46 - 2016-05-20 17:23 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-06-14 21:46 - 2016-05-20 17:23 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-06-14 21:46 - 2016-05-20 17:22 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-06-14 21:46 - 2016-05-20 17:21 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-06-14 21:46 - 2016-05-20 17:19 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-06-14 21:46 - 2016-05-20 17:14 - 04610048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-06-14 21:46 - 2016-05-20 17:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-06-14 21:46 - 2016-05-20 17:11 - 15420928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-06-14 21:46 - 2016-05-20 17:11 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-06-14 21:46 - 2016-05-20 17:09 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-06-14 21:46 - 2016-05-20 17:09 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-06-14 21:46 - 2016-05-20 17:08 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-06-14 21:46 - 2016-05-20 17:08 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-06-14 21:46 - 2016-05-20 17:07 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-06-14 21:46 - 2016-05-20 17:07 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-06-14 21:46 - 2016-05-20 17:06 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-06-14 21:46 - 2016-05-20 16:46 - 02597888 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-06-14 21:46 - 2016-05-20 16:42 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-06-14 21:46 - 2016-05-20 16:38 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-06-14 21:46 - 2016-05-20 16:38 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-06-14 21:46 - 2016-05-20 16:34 - 01544192 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-06-14 21:46 - 2016-05-20 16:23 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-06-13 23:18 - 2016-06-13 23:31 - 00363606 _____ C:\Windows\ntbtlog.txt
2016-06-13 17:07 - 2016-06-16 13:28 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-06-13 17:07 - 2016-06-13 17:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-06-13 17:07 - 2016-06-13 17:07 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-06-13 17:07 - 2016-06-13 17:07 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-06-13 17:07 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-06-13 17:07 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-06-13 17:07 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-06-13 17:06 - 2016-06-13 17:06 - 22851472 _____ (Malwarebytes ) C:\Users\JewFro\Downloads\mbam-setup-2.2.1.1043.exe
2016-06-11 13:54 - 2016-06-11 13:54 - 00000000 ____D C:\Windows\pss
2016-06-11 13:53 - 2016-06-11 13:53 - 00139612 _____ C:\Users\JewFro\Documents\cc_20160611_135352.reg
2016-06-11 13:48 - 2016-06-11 13:48 - 00000000 ____D C:\Users\JewFro\Documents\ProcAlyzer Dumps
2016-06-11 13:42 - 2009-06-10 17:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts.20160611-134249.backup
2016-06-11 13:41 - 2016-06-11 13:41 - 00042206 _____ C:\Windows\SysWOW64\bddel.dat
2016-06-11 03:04 - 2016-06-11 03:04 - 00000000 ____D C:\Program Files\Common Files\AV
2016-06-11 03:04 - 2015-07-28 17:52 - 00821920 _____ (Safer-Networking Ltd. ) C:\Users\Public\Desktop\Post Win10 Spybot-install.exe
2016-06-11 03:00 - 2016-06-11 03:00 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2016-06-11 02:59 - 2016-06-14 00:20 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2016-06-11 02:59 - 2016-06-11 02:59 - 00001395 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2016-06-11 02:59 - 2016-06-11 02:59 - 00001383 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2016-06-11 02:59 - 2016-06-11 02:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2016-06-11 02:59 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2016-06-11 02:58 - 2016-06-11 03:06 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-06-11 02:58 - 2016-06-11 02:58 - 00558328 _____ (Safer-Networking Ltd. ) C:\Users\JewFro\Downloads\spybot2-license.exe
2016-06-09 23:18 - 2016-06-09 23:18 - 00000000 ____D C:\Users\JewFro\Downloads\simple-icons-gh-pages
2016-06-09 17:25 - 2016-06-15 23:16 - 00000000 ____D C:\Users\JewFro\AppData\LocalLow\DefaultCompany
2016-06-09 17:04 - 2016-06-09 17:04 - 22136717 _____ C:\Users\JewFro\Downloads\tiled-0.16.1-win64.msi
2016-06-09 17:04 - 2016-06-09 17:04 - 00002901 _____ C:\Users\JewFro\Desktop\Tiled.lnk
2016-06-09 17:04 - 2016-06-09 17:04 - 00002861 _____ C:\Users\JewFro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tiled.lnk
2016-06-09 15:27 - 2016-06-15 23:16 - 00000000 ____D C:\ProgramData\Unity
2016-06-09 15:26 - 2016-06-09 15:26 - 00000000 ____D C:\Users\JewFro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2015 Tools for Unity
2016-06-09 15:26 - 2016-06-09 15:26 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio Tools for Unity
2016-06-09 15:23 - 2016-06-15 23:16 - 00000000 ____D C:\Users\Public\Documents\Unity Projects
2016-06-09 15:18 - 2016-06-09 15:18 - 00000669 _____ C:\Users\Public\Desktop\Unity 5.3.5f1 (64-bit).lnk
2016-06-09 15:18 - 2016-06-09 15:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unity 5.3.5f1 (64-bit)
2016-06-09 15:18 - 2016-06-09 15:18 - 00000000 ____D C:\Program Files (x86)\GtkSharp
2016-06-09 15:15 - 2016-06-09 15:15 - 00669088 _____ C:\Users\JewFro\Downloads\UnityDownloadAssistant-5.3.5f1.exe
2016-06-08 02:15 - 2016-06-08 02:15 - 00000000 ____D C:\Users\JewFro\AppData\LocalLow\Steel Crate Games
2016-06-08 02:14 - 2016-06-08 02:14 - 00000000 ____D C:\Users\JewFro\Desktop\Keep_Talking_and_Nobody_Explodes_1.1.3_-_Windows
2016-06-08 02:13 - 2016-06-08 02:14 - 106413926 _____ C:\Users\JewFro\Downloads\Keep_Talking_and_Nobody_Explodes_1.1.3_-_Windows.zip
2016-05-26 23:28 - 2016-05-26 23:28 - 00000408 _____ C:\Windows\SysWOW64\iolo.ini
2016-05-26 23:28 - 2016-05-26 23:28 - 00000408 _____ C:\Windows\system32\iolo.ini
2016-05-20 17:04 - 2016-05-20 17:05 - 09617360 _____ (TeamViewer GmbH) C:\Users\JewFro\Downloads\TeamViewer_Setup_en.exe
2016-05-18 01:17 - 2016-05-18 01:17 - 00036368 _____ C:\Users\JewFro\Documents\cc_20160518_011727.reg
2016-05-18 01:09 - 2014-07-16 14:46 - 00032912 _____ (EldoS Corporation) C:\Windows\system32\Drivers\rawdsk3.sys
2016-05-18 01:08 - 2016-05-18 01:08 - 00000000 ____D C:\ProgramData\Commtouch
2016-05-18 01:08 - 2016-05-18 01:08 - 00000000 ____D C:\Program Files\Common Files\Commtouch
2016-05-18 01:08 - 2014-03-25 15:59 - 01728776 ____R (CYREN Inc.) C:\Windows\system32\Drivers\ampse.sys
2016-05-17 15:45 - 2016-05-17 15:45 - 03588933 _____ C:\Users\JewFro\Downloads\Grad Outcome (1).pptx
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-06-16 13:33 - 2016-02-25 16:14 - 00000000 ____D C:\Users\JewFro\AppData\Local\CrashDumps
2016-06-16 13:29 - 2009-07-14 00:45 - 00009584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-06-16 13:29 - 2009-07-14 00:45 - 00009584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-06-16 13:25 - 2014-07-24 15:08 - 09166528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2016-06-16 13:25 - 2014-07-24 14:42 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-06-16 13:25 - 2014-07-24 14:42 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-06-16 13:25 - 2014-02-14 07:25 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-06-16 13:25 - 2014-02-14 07:25 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-06-16 13:25 - 2014-01-31 22:49 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-06-16 02:41 - 2014-04-15 15:07 - 00000000 ____D C:\Users\JewFro\AppData\Local\Battle.net
2016-06-16 02:34 - 2016-02-18 01:31 - 00000000 ____D C:\Users\JewFro\AppData\Local\Frontier_Developments
2016-06-16 02:34 - 2014-02-01 00:20 - 00000000 ____D C:\Program Files (x86)\Steam
2016-06-16 00:20 - 2014-04-15 15:07 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-06-15 18:47 - 2014-01-31 22:49 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-06-15 18:32 - 2016-02-27 01:49 - 00000000 ____D C:\Users\JewFro\AppData\Roaming\GitHub
2016-06-15 18:32 - 2016-02-27 01:49 - 00000000 ____D C:\Users\JewFro\AppData\Local\GitHub
2016-06-15 18:32 - 2016-02-27 01:47 - 00000000 ____D C:\Users\JewFro\AppData\Local\Deployment
2016-06-15 18:31 - 2014-01-31 22:39 - 00000000 ____D C:\Users\JewFro
2016-06-15 05:55 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\rescache
2016-06-15 03:46 - 2009-07-14 01:13 - 00877858 _____ C:\Windows\system32\PerfStringBackup.INI
2016-06-15 03:46 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\inf
2016-06-15 03:40 - 2014-01-31 23:08 - 00000000 ____D C:\ProgramData\NVIDIA
2016-06-15 03:40 - 2009-07-14 01:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-06-15 03:40 - 2009-07-14 00:45 - 00549776 _____ C:\Windows\system32\FNTCACHE.DAT
2016-06-15 03:34 - 2014-02-01 05:30 - 00000000 ____D C:\Windows\system32\MRT
2016-06-15 03:02 - 2014-02-01 05:30 - 142482544 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-06-13 23:29 - 2014-04-03 03:50 - 00000000 ____D C:\Users\JewFro\AppData\Local\ElevatedDiagnostics
2016-06-13 17:15 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\security
2016-06-11 16:51 - 2016-03-10 16:23 - 00007597 _____ C:\Users\JewFro\AppData\Local\resmon.resmoncfg
2016-06-11 15:10 - 2016-02-27 02:01 - 00000000 ____D C:\Users\JewFro\Documents\Sites
2016-06-11 13:49 - 2016-02-17 16:16 - 00002122 _____ C:\Users\JewFro\Desktop\Slack.lnk
2016-06-11 13:49 - 2016-02-17 16:16 - 00000000 ____D C:\Users\JewFro\AppData\Roaming\Slack
2016-06-11 13:49 - 2016-02-17 16:16 - 00000000 ____D C:\Users\JewFro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Slack Technologies
2016-06-11 13:49 - 2016-02-17 16:16 - 00000000 ____D C:\Users\JewFro\AppData\Local\slack
2016-06-11 13:49 - 2016-02-17 16:15 - 00000000 ____D C:\Users\JewFro\AppData\Local\SquirrelTemp
2016-06-11 13:45 - 2014-05-21 01:22 - 00000000 ____D C:\Users\JewFro\AppData\Local\Unity
2016-06-09 16:41 - 2014-05-21 01:23 - 00000000 ____D C:\Users\JewFro\AppData\Roaming\Unity
2016-06-09 16:41 - 2014-05-21 01:22 - 00000000 ____D C:\Users\JewFro\AppData\LocalLow\Unity
2016-06-09 15:26 - 2009-07-14 01:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-06-08 16:04 - 2014-03-04 16:00 - 00000000 ____D C:\Users\JewFro\Documents\Important Documents
2016-06-07 21:42 - 2014-01-31 22:49 - 00002195 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-06-07 21:42 - 2014-01-31 22:49 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-06-04 01:02 - 2016-05-06 03:04 - 00000000 ____D C:\Users\JewFro\AppData\Local\Discord
2016-06-04 01:02 - 2016-02-17 16:15 - 00002174 _____ C:\Users\JewFro\Desktop\Discord.lnk
2016-06-04 01:02 - 2016-02-17 16:15 - 00000000 ____D C:\Users\JewFro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc
2016-05-28 16:18 - 2009-07-13 23:20 - 00000000 ____D C:\Windows\system32\NDF
2016-05-26 23:28 - 2014-02-01 01:08 - 00000392 _____ C:\Windows\SysWOW64\iolo.ini.txt
2016-05-25 18:12 - 2014-04-15 15:07 - 00000000 ____D C:\Users\JewFro\AppData\Roaming\Battle.net
2016-05-24 15:11 - 2014-02-05 04:11 - 00000000 ____D C:\Users\JewFro\AppData\Roaming\Skype
2016-05-18 01:16 - 2016-03-10 04:49 - 00000000 ____D C:\Windows\Minidump
2016-05-18 01:07 - 2014-09-15 17:30 - 00000000 ____D C:\ProgramData\iolo
2016-05-18 01:05 - 2014-09-15 17:34 - 00003144 _____ C:\Windows\System32\Tasks\iolo Process Governor
2016-05-18 01:05 - 2014-09-15 17:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Mechanic Professional
2016-05-18 01:05 - 2014-09-15 17:34 - 00000000 ____D C:\ProgramData\ioloGovernor
2016-05-18 01:05 - 2009-07-13 23:20 - 00000000 __RSD C:\Windows\Media
==================== Files in the root of some directories =======
2014-02-16 18:45 - 2014-03-15 20:24 - 0000000 _____ () C:\Users\JewFro\AppData\Roaming\bitlord_log.txt
2014-03-16 03:23 - 2014-03-16 03:23 - 0000218 _____ () C:\Users\JewFro\AppData\Local\recently-used.xbel
2016-03-10 16:23 - 2016-06-11 16:51 - 0007597 _____ () C:\Users\JewFro\AppData\Local\resmon.resmoncfg
2016-02-22 01:00 - 2016-02-22 01:00 - 0000057 _____ () C:\ProgramData\Ament.ini
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2016-06-07 00:06
==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version:16-06-2016
Ran by JewFro (2016-06-16 13:33:59)
Running from C:\Users\JewFro\Downloads
Windows 7 Ultimate Service Pack 1 (X64) (2014-02-01 02:39:45)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-3547861629-2237757925-1048173658-500 - Administrator - Disabled)
Afro (S-1-5-21-3547861629-2237757925-1048173658-1009 - Administrator - Enabled) => C:\Users\Afro
Guest (S-1-5-21-3547861629-2237757925-1048173658-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3547861629-2237757925-1048173658-1003 - Limited - Enabled)
JewFro (S-1-5-21-3547861629-2237757925-1048173658-1000 - Administrator - Enabled) => C:\Users\JewFro
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Spybot - Search and Destroy (Enabled - Up to date) {20A26C15-1AF0-7CA3-9380-FAB824A7EE0D}
AV: System Shield (Disabled - Up to date) {51A1F251-72D6-FBFA-1969-EBE1F52F559F}
AS: System Shield (Disabled - Up to date) {EAC013B5-54EC-F474-23D9-D0938EA81F22}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.6 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.242 - Adobe Systems Incorporated)
Adobe Flash Player 22 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 22.0.0.192 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Amnesia: The Dark Descent (HKLM-x32\...\Steam App 57300) (Version: - Frictional Games)
Apple Application Support (HKLM-x32\...\{21FC2093-6E43-460B-B9B0-5F5AA35BBB0F}) (Version: 3.0 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{FE86CB0C-FCB3-4358-B4B0-B0A41E33B3DD}) (Version: 7.1.0.32 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Asmedia ASM106x SATA Host Controller Driver (HKLM-x32\...\{61942EF5-2CD8-47D4-869C-2E9A8BB085F1}) (Version: 1.3.4.001 - Asmedia Technology)
ASUS PC Diagnostics (HKLM-x32\...\{D709005F-D8DC-42A8-8435-5AE880ECAF82}) (Version: 1.3.4 - ASUSTeK Computer Inc.)
AVSDK5 (Version: 5.4.11 - CYREN Inc.) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
BitLord 2.3 (HKLM-x32\...\BitLord) (Version: 2.3.2-245 - House of Life)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.14 - Piriform)
Chrome Remote Desktop Host (HKLM-x32\...\{95EB2FCC-AE0B-40E9-B804-347C6358923B}) (Version: 51.0.2704.7 - Google Inc.)
Contagion (HKLM-x32\...\Steam App 238430) (Version: - Monochrome LLC)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Curse (HKLM-x32\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 6.0.0.0 - Curse)
Darksiders II (HKLM-x32\...\Steam App 50650) (Version: - Vigil Games)
DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive)
Dead Rising 3 (HKLM-x32\...\Steam App 265550) (Version: - Capcom Game Studio Vancouver)
Discord (HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\Discord) (Version: 0.0.291 - Hammer & Chisel, Inc.)
Electric Sheep 2.7b34 (HKLM-x32\...\Electric Sheep) (Version: 2.7b34 - Electricsheep)
Elite Dangerous (HKLM\...\Steam App 359320) (Version: - Frontier Developments)
Entity Framework Tools for Visual Studio 2013 (HKLM-x32\...\{08AEF86A-1956-4846-B906-B01350E96E30}) (Version: 12.0.20912.0 - Microsoft Corporation)
EVGA Precision X 4.0.0 (HKLM-x32\...\PrecisionX) (Version: 4.0.0 - EVGA Corporation)
Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version: - Obsidian Entertainment)
FINAL FANTASY VII (HKLM-x32\...\Steam App 39140) (Version: - Square Enix)
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG)
FTL: Faster Than Light (HKLM-x32\...\Steam App 212680) (Version: - Subset Games)
GameMaker: Studio (HKLM-x32\...\Steam App 214850) (Version: - YoYo Games Ltd.)
Gauntlet (HKLM-x32\...\Steam App 258970) (Version: - Arrowhead Game Studios)
GitHub (HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\5f7eb300e2ea4ebf) (Version: 3.1.1.4 - GitHub, Inc.)
Goat Simulator (HKLM-x32\...\Steam App 265930) (Version: - Coffee Stain Studios)
Gods Will Be Watching (HKLM-x32\...\Steam App 274290) (Version: - Deconstructeam)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 51.0.2704.84 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.5 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden
Gtk# for .Net 2.12.26 (HKLM-x32\...\{BC25B808-A11C-4C9F-9C0A-6682E47AAB83}) (Version: 2.12.26 - Xamarin, Inc.)
Hammerwatch (HKLM-x32\...\Steam App 239070) (Version: - )
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment)
Herramientas de corrección de Microsoft Office 2016: espańol (x32 Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
HP Officejet Pro 8620 Basic Device Software (HKLM\...\{A977D10D-989A-40D4-B0B1-450954516543}) (Version: 32.3.198.49673 - Hewlett-Packard Co.)
HP Officejet Pro 8620 Help (HKLM-x32\...\{9A4D71AB-9C68-4702-A4A2-A4DB7B0FE270}) (Version: 32.0.0 - Hewlett Packard)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
Intel(R) Driver Update Utility 2.4 (x32 Version: 2.4.0.7 - Intel) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1323 - Intel Corporation)
Intel(R) Network Connections 18.1.59.0 (HKLM\...\PROSetDX) (Version: 18.1.59.0 - Intel)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.18.10.3071 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.0.0.1083 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.63463 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.0.0.100 - Intel Corporation)
Intel® Driver Update Utility (HKLM-x32\...\{561b5fb5-1d4d-40e8-b3e4-ad52858b217c}) (Version: 2.4.0.7 - Intel)
iolo technologies' System Mechanic Professional (HKLM-x32\...\{BBD3F66B-1180-4785-B679-3F91572CD3B4}_is1) (Version: 15.5.0 - iolo technologies, LLC)
iTunes (HKLM\...\{96B53CA8-5ABB-49D8-96F1-F6C0D73A76C6}) (Version: 11.1.4.62 - Apple Inc.)
Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.600 - Oracle)
Java 8 Update 5 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418005FF}) (Version: 8.0.50 - Oracle Corporation)
Java SE Development Kit 8 Update 5 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180050}) (Version: 8.0.50 - Oracle Corporation)
JavaFX Scene Builder 2.0 (HKLM-x32\...\{B4665EB1-1F7A-44F5-AD07-C20A938E8BC2}) (Version: 2.0 - Oracle)
League of Legends (HKLM-x32\...\League of Legends 3.0.0) (Version: 3.0.0 - Riot Games)
League of Legends (x32 Version: 3.0.0 - Riot Games) Hidden
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.236 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.236 - LogMeIn, Inc.) Hidden
Magicka (HKLM-x32\...\Steam App 42910) (Version: - Arrowhead Game Studios)
MAGIX Common Components 1 (HKLM-x32\...\{7A8B2204-574B-42A2-A3DC-52AE142D197F}) (Version: 1.2.0.0 - MAGIX AG)
MAGIX Content and Soundpools (HKLM-x32\...\MAGIX_GlobalContent) (Version: 1.0.0.0 - MAGIX Software GmbH)
MAGIX Fonts Package 1 (x32 Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Speed burnR (MSI) (HKLM-x32\...\MX.{79ECE77C-9C0A-4F2A-A2B4-97B4A1077D37}) (Version: 7.0.1.27 - MAGIX AG)
MAGIX Speed burnR (MSI) (Version: 7.0.1.27 - MAGIX AG) Hidden
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Metal Slug 3 (HKLM-x32\...\Steam App 250180) (Version: - DotEmu)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation)
Microsoft Kinect 1.0 Beta2 SDK (HKLM\...\{BB8DB4E0-F448-4637-9D87-9FD57D1288D2}) (Version: 1.0.0.45 - Microsoft Corporation)
Microsoft Office Professional Plus 2016 (HKLM-x32\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version: - Microsoft Corporation)
Microsoft SQL Server 2008 Browser (HKLM-x32\...\{C688457E-03FD-4941-923B-A27F4D42A7DD}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Native Client (HKLM\...\{BBDE8A3D-64A2-43A6-95F3-C27B87DF7AC1}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{B40EE88B-400A-4266-A17B-E3DE64E94431}) (Version: 10.1.2731.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{58FED865-4F13-408D-A5BF-996019C4B936}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (12.0.30919.1) (HKLM-x32\...\{0D7FCBFB-F478-4D32-901C-83F0BF5A3501}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{0826F9E4-787E-481D-83E0-BC6A57B056D5}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Express - ENU (HKLM-x32\...\Microsoft Visual C++ 2010 Express - ENU) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - ENU (HKLM\...\{BCA26999-EC22-3007-BB79-638913079C9A}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.31007 - Microsoft Corporation)
Microsoft Visual Studio 2015 Tools for Unity (HKLM-x32\...\{D68E6605-F852-4936-AB64-04B80E0C85AD}) (Version: 2.2.0.0 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Middle-earth: Shadow of Mordor (HKLM-x32\...\Steam App 241930) (Version: - Monolith Productions, Inc.)
Minimum (HKLM-x32\...\Steam App 214190) (Version: - Human Head Studios)
Mirror's Edge (HKLM-x32\...\Steam App 17410) (Version: - DICE)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Nidhogg (HKLM-x32\...\Steam App 94400) (Version: - Messhof)
NVIDIA 3D Vision Controller Driver 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 361.91 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 361.91 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.11.3.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.3.5 - NVIDIA Corporation)
NVIDIA Graphics Driver 361.91 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 361.91 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Offworld Trading Company (HKLM-x32\...\Steam App 271240) (Version: - Mohawk Games)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Oracle VM VirtualBox 5.0.16 (HKLM\...\{F2E958A1-9215-4C7D-9A2E-F0740B8CA5B7}) (Version: 5.0.16 - Oracle Corporation)
Outils de vérification linguistique 2016 de Microsoft Office*- Franēais (x32 Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
Pixel Piracy (HKLM-x32\...\Steam App 264140) (Version: - Vitali Kirpu)
Prerequisites for SSDT (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation)
Product Improvement Study for HP Officejet Pro 8620 (HKLM\...\{99039186-EBEB-4127-BFA2-18B10A05ACE2}) (Version: 32.3.198.49673 - Hewlett-Packard Co.)
Project Zomboid (HKLM-x32\...\Steam App 108600) (Version: - The Indie Stone)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Python 3.5.1 (32-bit) (HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\{c39d559b-aa83-4476-ba20-988a35a1199a}) (Version: 3.5.1150.0 - Python Software Foundation)
Python 3.5.1 Add to Path (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Core Interpreter (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Development Libraries (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Documentation (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Executables (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Launcher (32-bit) (HKLM-x32\...\{17778F7B-FB5A-4A93-9719-D75BAF673498}) (Version: 3.5.150.0 - Python Software Foundation)
Python 3.5.1 pip Bootstrap (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Standard Library (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Tcl/Tk Support (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Test Suite (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Python 3.5.1 Utility Scripts (32-bit) (x32 Version: 3.5.1150.0 - Python Software Foundation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6853 - Realtek Semiconductor Corp.)
Resident Evil Revelations / Biohazard Revelations UE (HKLM-x32\...\Steam App 222480) (Version: - Capcom)
Risk of Rain (HKLM-x32\...\Steam App 248820) (Version: - )
Rogue Legacy (HKLM-x32\...\Steam App 241600) (Version: - Cellar Door Games)
Ruby 2.2.4-p230-x64 (HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\{A98E44F8-6401-400F-830E-B1A2919C22BD}_is1) (Version: 2.2.4-p230 - RubyInstaller Team)
Service Pack 1 for SQL Server 2008 (KB968369) (64-bit) (HKLM\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation)
SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.11.3.5 - NVIDIA Corporation) Hidden
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version: - 2K Games, Inc.)
Sins of a Solar Empire: Rebellion (HKLM-x32\...\Steam App 204880) (Version: - Ironclad Games)
Skype 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.112 - Skype Technologies S.A.)
Slack (HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\slack) (Version: 2.0.5 - Slack Technologies)
Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 3.6.3347.0 - Hi-Rez Studios)
Space Engineers (HKLM-x32\...\Steam App 244850) (Version: - )
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Sql Server Customer Experience Improvement Program (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
Starwhal: Just the Tip (HKLM-x32\...\Steam App 263020) (Version: - Breakfall)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
Sublime Text 2.0.2 (HKLM\...\Sublime Text 2_is1) (Version: - )
System Mechanic 14 Professional (x32 Version: 15.5.0 - ) Hidden
Tabletop Simulator (HKLM-x32\...\Steam App 286160) (Version: - Berserk Games)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve)
Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)
The Bureau: XCOM Declassified (HKLM-x32\...\Steam App 65930) (Version: - 2K Marin)
The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios)
The Showdown Effect (HKLM-x32\...\Steam App 204080) (Version: - Arrowhead Game Studios)
Tiled (HKLM\...\{113C4865-4A02-49E9-ACAC-CD225E518EA5}) (Version: 0.16.1 - mapeditor.org)
Tom Clancy's Rainbow Six Siege (HKLM-x32\...\Steam App 359550) (Version: - Ubisoft Montreal)
TP-LINK TL-WDN4800 Driver (HKLM-x32\...\{FDA7E907-6539-42C1-9721-0239C281B336}) (Version: 1.3.1 - TP-LINK)
TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK)
Trine 2 (HKLM-x32\...\Steam App 35720) (Version: - Frozenbyte)
Unity (HKLM-x32\...\Unity) (Version: 5.3.5f1 - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\UnityWebPlayer) (Version: 5.3.5f1 - Unity Technologies ApS)
Unturned (HKLM-x32\...\Steam App 304930) (Version: - Nelson Sexton)
Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
Update for Skype for Business 2016 (KB3114696) 32-Bit Edition (HKLM-x32\...\{90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{D71274C5-85CB-4E05-A91F-4BB44BDDFA4F}) (Version: - Microsoft)
Update for Skype for Business 2016 (KB3114696) 32-Bit Edition (HKLM-x32\...\{90160000-012B-0409-0000-0000000FF1CE}_Office16.PROPLUS_{D71274C5-85CB-4E05-A91F-4BB44BDDFA4F}) (Version: - Microsoft)
Uplay (HKLM-x32\...\Uplay) (Version: 13.0 - Ubisoft)
VC_CRT_x64 (Version: 1.02.0000 - Intel Corporation) Hidden
Vita 2 (Version: 1.0.0.0 - MAGIX Software GmbH) Hidden
Vita 2 add-on content (Version: 1.0.0.0 - MAGIX Software GmbH) Hidden
Vita Drum Engine (Version: 1.0.0.0 - MAGIX Software GmbH) Hidden
Vita Electric Piano (Version: 1.0.2.0 - MAGIX Software GmbH) Hidden
Vita Jazz Drums (Version: 1.0.0.0 - MAGIX Software GmbH) Hidden
Vita Pop Brass (Version: 1.0.0.0 - MAGIX Software GmbH) Hidden
Vita Power Guitar (Version: 1.0.0.0 - MAGIX Software GmbH) Hidden
Vita Vintage Organ (Version: 1.0.1.0 - MAGIX Software GmbH) Hidden
Warhammer 40,000: Dawn of War Dark Crusade (HKLM-x32\...\Steam App 4580) (Version: - Relic Entertainment)
Warhammer 40,000: Dawn of War - Game of the Year Edition (HKLM-x32\...\Steam App 4570) (Version: - Relic Entertainment)
Warhammer 40,000: Dawn of War Soulstorm (HKLM-x32\...\Steam App 9450) (Version: - Relic Entertainment)
Warhammer 40,000: Dawn of War Winter Assault (HKLM-x32\...\Steam App 9310) (Version: - Relic Entertainment)
Watch_Dogs (HKLM-x32\...\Steam App 243470) (Version: - Ubisoft)
WD SmartWare (HKLM\...\{6F482C75-174D-42EB-A2CF-B00A1F354F7B}) (Version: 1.4.1.1 - Western Digital)
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.1.10.398 - ASUS Cloud Corporation)
WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
XAMPP (HKLM-x32\...\xampp) (Version: 5.6.20-0 - Bitnami)
XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version: - Firaxis Games)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0CA98BAE-7DDE-4A42-A1AE-53DC9D7EBF66} - System32\Tasks\iolo Process Governor => C:\Program Files (x86)\iolo\System Mechanic Professional\iologovernor64.exe [2016-02-19] (iolo technologies, LLC)
Task: {1C1DCB1E-0C54-4A7F-9B68-477719EA2AD3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-01-15] (Piriform Ltd)
Task: {226F5FCA-775F-4880-A6CE-F642A5386F4E} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {4A8B5A07-6EDD-430F-BC59-D7D2C29D0A34} - System32\Tasks\USER_ESRV_SVC_WILLAMETTE => Wscript.exe //B //NoLogo "C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\task.vbs"
Task: {4C414D37-4860-4563-96D6-FE5850232E43} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-17] (Google Inc.)
Task: {5306EC9C-2454-46EB-9208-C2D157042CDB} - System32\Tasks\{BB826235-D9FA-4E95-9CDA-6C4B89208BB9} => Chrome.exe hxxp://ui.skype.com/ui/0/6.13.61.104/en/go/help.faq.installer?LastError=1618
Task: {5604CE4D-5667-4E21-B8FF-3D7A78A53B1B} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe
Task: {6D16AD5F-7E1D-4E30-A7F0-FD59E1CD1010} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {7601F771-A129-4739-8E8A-D943F5287B45} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {80CDCB2A-F4E6-4B89-AF65-D0305C4776C8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-06-16] (Adobe Systems Incorporated)
Task: {825F15D9-3503-4311-A42B-C6B39FA2A267} - System32\Tasks\HPCustParticipation HP Officejet Pro 8620 => C:\Program Files\HP\HP Officejet Pro 8620\Bin\HPCustPartic.exe [2014-07-21] (Hewlett-Packard Development Company, LP)
Task: {D48B2C6B-4DA4-4F00-B457-C7E32C686B0C} - System32\Tasks\{D6684DA7-EE83-41BC-BE68-873D0273EF5B} => Chrome.exe hxxp://ui.skype.com/ui/0/6.13.61.104/en/go/help.faq.installer?LastError=1618
Task: {E8D338A6-D788-4AD6-9FFB-109F5C1A8595} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {EE544FC3-983B-45E2-AC75-D2789065FB4B} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {FE625883-47C7-4A98-9A27-CF50227DA1D2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-17] (Google Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
Shortcut: C:\Users\JewFro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ruby 2.2.4-p230-x64\Interactive Ruby.lnk -> C:\Ruby22-x64\bin\irb.bat ()
ShortcutWithArgument: C:\Users\JewFro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ruby 2.2.4-p230-x64\Start Command Prompt with Ruby.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /E:ON /K C:\Ruby22-x64\bin\setrbvars.bat
ShortcutWithArgument: C:\Users\JewFro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Chrome Remote Desktop.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp
ShortcutWithArgument: C:\Users\JewFro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Play Music.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=fahmaaghhglfmonjliepjlchgpgfmobi
==================== Loaded Modules (Whitelisted) ==============
2014-09-15 17:34 - 2014-07-16 14:44 - 00160256 _____ () C:\Windows\system32\iavlsp64.dll
2016-03-10 19:14 - 2013-06-04 18:41 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
2016-04-30 15:33 - 2016-03-23 23:20 - 11583304 _____ () C:\xampp\mysql\bin\mysqld.exe
2016-03-16 02:02 - 2016-05-02 01:54 - 00369208 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-05-09 15:56 - 2016-05-02 01:54 - 01148984 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-03-16 02:02 - 2016-05-02 01:55 - 03613240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-02-17 16:03 - 2016-05-02 01:55 - 00289848 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2014-02-04 17:12 - 2014-02-04 17:12 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2016-02-05 16:13 - 2016-02-05 16:13 - 00115864 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe
2016-02-05 16:13 - 2016-02-05 16:13 - 00255640 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\analyzer.dll
2016-02-05 16:13 - 2016-02-05 16:13 - 00034968 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\AnalyzerTask.dll
2016-02-05 16:13 - 2016-02-05 16:13 - 00019096 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\DriverDetection.dll
2016-01-12 21:46 - 2016-01-12 21:46 - 00019688 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\DriverInfo.dll
2016-01-12 21:46 - 2016-01-12 21:46 - 00026856 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\IDUUDetection.dll
2010-09-08 14:45 - 2010-09-08 14:45 - 01034752 _____ () C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDFME\WDFME.exe
2010-09-08 14:44 - 2010-09-08 14:44 - 00485376 _____ () C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDSC.exe
2016-05-09 15:56 - 2016-05-02 01:55 - 02667576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-05-09 15:56 - 2016-05-02 01:55 - 01990200 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-05-09 15:56 - 2016-05-02 01:55 - 01842232 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-02-17 16:03 - 2016-05-02 01:55 - 00208952 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2014-01-31 23:08 - 2016-02-09 01:41 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-01-12 06:12 - 2016-01-12 06:12 - 08901800 _____ () C:\Program Files\Microsoft Office\Office16\1033\GrooveIntlResource.dll
2014-03-21 16:54 - 2013-04-09 11:05 - 00846848 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
2016-03-10 23:45 - 2016-02-05 16:16 - 00458904 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv.exe
2016-03-10 23:45 - 2016-02-05 16:26 - 00709272 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_modeler.dll
2016-03-10 23:45 - 2016-02-05 16:25 - 00188568 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\foreground_window_input.dll
2016-03-10 23:45 - 2016-02-05 16:20 - 00414360 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe
2016-03-10 23:45 - 2016-02-05 16:23 - 00130712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_process_input.dll
2016-03-10 23:45 - 2016-02-05 16:24 - 00025752 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_system_power_state_input.dll
2016-03-10 23:45 - 2016-02-05 16:24 - 00059544 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_quality_and_reliability_input.dll
2016-03-10 23:45 - 2016-02-05 16:24 - 00194712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\acpi_battery_input.dll
2016-03-10 23:45 - 2016-02-05 16:25 - 00159896 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\sema_thermal_input.dll
2016-03-10 23:45 - 2016-02-05 16:25 - 00158360 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\wifi_input.dll
2016-03-10 23:45 - 2016-02-05 16:25 - 00050840 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\devices_use_input.dll
2016-03-10 23:45 - 2016-02-05 16:23 - 00032920 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_disktrace_input.dll
2016-05-06 18:07 - 2016-01-20 08:22 - 00382114 _____ () C:\Users\JewFro\AppData\Local\GitHub\PortableGit_d76a6a98c9315931ec4927243517bc09e9b731a0\usr\bin\ssh-agent.exe
2016-05-09 15:56 - 2016-05-02 01:54 - 00035896 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-05-09 15:56 - 2016-05-02 01:54 - 00921656 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2016-04-30 15:33 - 2015-06-05 06:54 - 00404992 _____ () C:\xampp\apache\bin\pcre.dll
2016-04-30 15:33 - 2016-03-31 18:24 - 00130048 _____ () C:\xampp\php\libpq.dll
2014-02-06 01:52 - 2014-02-06 01:52 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-06 01:52 - 2014-02-06 01:52 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2016-03-11 00:11 - 2016-06-15 03:40 - 00035984 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\PEbiosinterface32.dll
2016-03-10 19:14 - 2013-06-04 18:41 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\ATKEX.dll
2016-06-11 02:59 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2016-06-11 02:59 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2016-06-11 02:59 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2016-06-11 02:59 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2016-06-11 02:59 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2010-03-05 14:24 - 2010-03-05 14:24 - 00886272 _____ () C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDFME\System.Data.SQLite.dll
2016-02-17 16:03 - 2016-05-02 02:02 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2014-03-21 16:54 - 2013-01-22 14:40 - 01411072 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\nicLan.dll
2014-03-21 16:54 - 2013-04-02 13:41 - 00193024 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\DC_WFF.dll
2014-03-21 16:54 - 2013-04-02 13:41 - 00138752 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJWF\WJWF.dll
2014-03-21 16:54 - 2013-02-28 11:42 - 00115712 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJWF\WJWF_WPS_WIN7.DLL
2016-06-04 01:02 - 2016-06-02 20:40 - 02779832 _____ () C:\Users\JewFro\AppData\Local\Discord\app-0.0.291\libdiscord.dll
2016-06-04 01:02 - 2016-06-02 20:40 - 01746104 _____ () C:\Users\JewFro\AppData\Local\Discord\app-0.0.291\ffmpeg.dll
2016-06-04 01:02 - 2016-06-02 20:40 - 00112312 _____ () \\?\C:\Users\JewFro\AppData\Local\Discord\app-0.0.291\resources\node_modules\discord_overlay\discord_overlay.node
2014-07-19 00:16 - 2014-07-19 00:16 - 00043008 _____ () C:\Users\JewFro\Desktop\kinect\KinectCam.ax
2016-01-12 06:12 - 2016-01-12 06:12 - 08901800 _____ () C:\Program Files (x86)\Microsoft Office\Office16\1033\GrooveIntlResource.dll
2016-06-04 01:02 - 2016-06-02 20:40 - 01843896 _____ () C:\Users\JewFro\AppData\Local\Discord\app-0.0.291\libglesv2.dll
2016-06-04 01:02 - 2016-06-02 20:40 - 00020664 _____ () C:\Users\JewFro\AppData\Local\Discord\app-0.0.291\libegl.dll
2016-06-15 14:21 - 2016-06-15 14:21 - 00140800 _____ () \\?\C:\Users\JewFro\AppData\Local\Temp\EFA7.tmp.node
2016-05-06 18:08 - 2014-11-04 07:33 - 00085916 _____ () C:\Users\JewFro\AppData\Local\GitHub\PortableGit_d76a6a98c9315931ec4927243517bc09e9b731a0\usr\bin\msys-z.dll
2016-05-06 18:08 - 2016-04-01 00:58 - 00110334 _____ () C:\Users\JewFro\AppData\Local\GitHub\PortableGit_d76a6a98c9315931ec4927243517bc09e9b731a0\usr\bin\msys-gcc_s-1.dll
2016-05-06 18:08 - 2016-04-01 00:58 - 00013307 _____ () C:\Users\JewFro\AppData\Local\GitHub\PortableGit_d76a6a98c9315931ec4927243517bc09e9b731a0\usr\bin\msys-ssp-0.dll
2014-02-01 00:21 - 2016-04-29 16:10 - 00785920 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2016-02-17 15:50 - 2015-07-03 12:12 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
2016-02-17 15:50 - 2015-07-03 12:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2016-02-17 15:50 - 2015-07-03 12:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2014-05-27 01:28 - 2016-06-14 20:47 - 02387024 _____ () C:\Program Files (x86)\Steam\video.dll
2014-08-29 02:26 - 2016-02-08 19:14 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2014-08-29 02:26 - 2016-02-08 19:14 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2014-08-29 02:26 - 2016-02-08 19:14 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2014-08-29 02:26 - 2016-02-08 19:14 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2014-08-29 02:26 - 2016-02-08 19:14 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2014-02-01 00:21 - 2016-06-14 20:47 - 00829008 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-03-09 00:05 - 2016-02-17 18:25 - 00281088 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2014-02-01 00:21 - 2016-06-14 15:14 - 49826080 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2016-02-17 15:50 - 2015-09-24 19:56 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
2016-06-07 21:42 - 2016-06-03 21:56 - 01745560 _____ () C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.84\libglesv2.dll
2016-06-07 21:42 - 2016-06-03 21:56 - 00091288 _____ () C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.84\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AMP => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AMPSE => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventSystem => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ioloSystemService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vseamps => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vsedsps => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vseqrts => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AMP => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AMPSE => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\EventSystem => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ioloSystemService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vseamps => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsedsps => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vseqrts => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
There are 7904 more sites.
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\...\123simsen.com -> www.123simsen.com
There are 7904 more sites.
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 22:34 - 2016-06-11 13:42 - 00452730 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123haustiereundmehr.com
127.0.0.1 123moviedownload.com
127.0.0.1 www.123moviedownload.com
There are 15534 more lines.
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-3547861629-2237757925-1048173658-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\JewFro\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
MSCONFIG\startupfolder: C:^Users^JewFro^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Slack.lnk => C:\Windows\pss\Slack.lnk.Startup
MSCONFIG\startupreg: (default) =>
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{B18BF77C-9820-4EBB-BFAE-A5A2C4EC2E33}] => (Allow) LPort=58321
FirewallRules: [{1A2BAD1A-C0EB-4F63-B030-9CF8778E87D8}] => (Allow) LPort=58321
FirewallRules: [{94AA2C19-1DA4-4284-B269-7934165C7284}] => (Allow) LPort=58321
FirewallRules: [{3C969344-0F10-4C8D-816F-F3A60CD49F28}] => (Allow) LPort=58321
FirewallRules: [{7D3CEEF1-6E7D-4C4F-B2DE-77DBD0D8A42C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{274CA3B3-36EF-4A1D-A4D6-7716B2ECEE03}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{62AF0CE0-3BCA-40F1-B0CD-3A123E8A76DA}] => (Allow) C:\Program Files (x86)\iolo\System Mechanic Professional\SysMech.exe
FirewallRules: [{DCCC97CC-C7B9-4B89-ABDA-0B05C965F82E}] => (Allow) C:\Program Files (x86)\iolo\System Mechanic Professional\SysMech.exe
FirewallRules: [{F43EABEA-C709-4CFB-B5DD-7B9D44A06602}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{35FB9486-D5E0-42BF-8DB2-07983D003C1E}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{16CA0F59-D91D-4D1A-9B6C-FE644DF99682}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{B4FDD0AD-ED68-41D9-9837-1D45E4FB2346}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{176A3256-F258-4A1F-8BD3-D275E4707B33}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{5D90235C-3FC1-4252-856D-1562AB729480}] => (Allow) C:\Program Files (x86)\BitLord 2\Bitlord files\bitlord.exe
FirewallRules: [{25655B22-71A3-4ECC-835B-AB344BF9C39A}] => (Allow) C:\Program Files (x86)\BitLord 2\Bitlord files\bitlord.exe
FirewallRules: [{E6FCA0FA-B847-4C31-BD15-4F3072A24BE1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{D053DB70-8BBB-4448-BC74-2BC695A73A02}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{DB2619F0-20F8-42F9-A2D8-117FAF756BF9}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{88938B04-4E52-4A11-A0D4-BD339689625D}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{60A8CBF6-DE62-42E9-BA83-E4391B1F2639}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe
FirewallRules: [{BDFC9FDE-38EA-4AD5-8BE1-B83FFCF0D87D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe
FirewallRules: [{4393BD72-E523-4B82-B8E8-6C4AFF7ADF0F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Amnesia The Dark Descent\Launcher.exe
FirewallRules: [{11BE46F6-BB45-43ED-9287-AFE995E2888D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Amnesia The Dark Descent\Launcher.exe
FirewallRules: [TCP Query User{CD3D1255-B627-49FA-9DFC-8BF5995D4008}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [UDP Query User{BF565B73-FC5D-4DF3-8501-036C983FF16B}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [{1B455C77-FB0F-4BA0-96C9-AF820D71E3DB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Trine 2\trine2_launcher.exe
FirewallRules: [{86D705E3-87B9-4583-8699-82B4E5EB2410}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Trine 2\trine2_launcher.exe
FirewallRules: [{6B6BEC20-8C62-42E8-946D-E11E36DEA210}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hammerwatch\Hammerwatch.exe
FirewallRules: [{A47C4BE7-9205-4173-9691-8D834890D50C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hammerwatch\Hammerwatch.exe
FirewallRules: [{EC5BB264-D0B1-4BF4-91E9-E475D8ED8A06}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magicka\Magicka.exe
FirewallRules: [{808D7A23-F83C-45C5-816A-729734D23D3C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magicka\Magicka.exe
FirewallRules: [{45E5715B-E278-4399-B302-CFD38750F7A7}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{2B42B89D-DC94-4E5B-BD56-3DC3FA531EE6}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{E4486D72-7B06-4644-B290-BC018A467C4F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hammerwatch\editor\HammerEditor.exe
FirewallRules: [{6868EACD-1791-49F2-BEC1-A4E17613FB2E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hammerwatch\editor\HammerEditor.exe
FirewallRules: [{8FC79E32-6A2F-492F-85B9-B6AE664B4699}] => (Allow) E:\SteamLibrary\SteamApps\common\Darksiders 2\Darksiders2.exe
FirewallRules: [{24A6E393-0C18-42AC-8849-21B7D3B5E7D6}] => (Allow) E:\SteamLibrary\SteamApps\common\Darksiders 2\Darksiders2.exe
FirewallRules: [{EDD2CCD9-76BB-4E97-A28D-9737DBB3F6C0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Nidhogg\Nidhogg.exe
FirewallRules: [{92E7DEBA-47DF-43C3-9990-EBAC802AADF6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Nidhogg\Nidhogg.exe
FirewallRules: [{11B257E3-8E3D-4A1E-9217-AB193F42754B}] => (Allow) E:\SteamLibrary\SteamApps\common\FTL Faster Than Light\FTLGame.exe
FirewallRules: [{84E3973F-7360-4815-B5A3-77C87AF7F091}] => (Allow) E:\SteamLibrary\SteamApps\common\FTL Faster Than Light\FTLGame.exe
FirewallRules: [{00066571-9C54-4C4B-863D-46F0D15A1DCC}] => (Allow) E:\SteamLibrary\SteamApps\common\Sins of a Solar Empire Rebellion\Sins of a Solar Empire Rebellion.exe
FirewallRules: [{97DE515F-6FD4-4538-BFDD-F61C9C8C4C14}] => (Allow) E:\SteamLibrary\SteamApps\common\Sins of a Solar Empire Rebellion\Sins of a Solar Empire Rebellion.exe
FirewallRules: [{67D3FB14-0C47-4184-AA9A-49F0FEF70ED5}] => (Allow) E:\SteamLibrary\SteamApps\common\Showdown\binaries\showdown.exe
FirewallRules: [{5759D618-EE14-4F29-B1E3-39F7EE0367B2}] => (Allow) E:\SteamLibrary\SteamApps\common\Showdown\binaries\showdown.exe
FirewallRules: [{2DC51783-28C6-4BCB-A185-84990539094B}] => (Allow) E:\SteamLibrary\SteamApps\common\Starwhal\Starwhal.exe
FirewallRules: [{F8A020C0-24A7-4BC1-969A-8A6E587E53C4}] => (Allow) E:\SteamLibrary\SteamApps\common\Starwhal\Starwhal.exe
FirewallRules: [{3DBB7918-E563-45E9-848B-A105FE3922FA}] => (Allow) E:\SteamLibrary\SteamApps\common\RESIDENT EVIL REVELATIONS\rerev.exe
FirewallRules: [{C55219BC-CE1A-420B-B90A-B9E49D36C6A5}] => (Allow) E:\SteamLibrary\SteamApps\common\RESIDENT EVIL REVELATIONS\rerev.exe
FirewallRules: [{F5357315-FFB5-4C9B-BCDF-BD0AC5FBFE99}] => (Allow) E:\SteamLibrary\SteamApps\common\Sins of a Solar Empire Rebellion\Sins of a Solar Empire Rebellion.exe
FirewallRules: [{FF3BCD46-3179-45F6-A62E-56176F21D6E1}] => (Allow) E:\SteamLibrary\SteamApps\common\Sins of a Solar Empire Rebellion\Sins of a Solar Empire Rebellion.exe
FirewallRules: [{45AA5162-9043-40ED-A2B5-DBEE274A4845}] => (Allow) E:\SteamLibrary\SteamApps\common\mirrors edge\Binaries\MirrorsEdge.exe
FirewallRules: [{6E5A26E6-47D4-44EA-8D05-29FEE2672424}] => (Allow) E:\SteamLibrary\SteamApps\common\mirrors edge\Binaries\MirrorsEdge.exe
FirewallRules: [{05D16B82-DB8E-45F2-BB10-DEB2ECDCA520}] => (Allow) E:\SteamLibrary\SteamApps\common\Risk of Rain\Risk of Rain.exe
FirewallRules: [{168D9A5C-F467-4AAC-A9BE-0A0420CCC5E5}] => (Allow) E:\SteamLibrary\SteamApps\common\Risk of Rain\Risk of Rain.exe
FirewallRules: [{DCFAF268-81AF-43E8-A6F5-56E381879487}] => (Allow) E:\SteamLibrary\SteamApps\common\Metal Slug 3\mslug3.exe
FirewallRules: [{7AEFBAD3-8E82-4D06-9626-05296AB0ABF8}] => (Allow) E:\SteamLibrary\SteamApps\common\Metal Slug 3\mslug3.exe
FirewallRules: [{9AF35D56-0473-4890-B80B-F0457F073E76}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Pixel Piracy\PixelPiracy.exe
FirewallRules: [{D23D7FA7-CB4A-4F29-B89E-90817CB49400}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Pixel Piracy\PixelPiracy.exe
FirewallRules: [{D63F27A2-C5FD-4CAE-AD9E-2E1E8A383DDF}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{6F411EC4-EE32-4EAD-A04D-EA6073B0B1EE}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{FAD0DDBA-235C-41DD-9FF4-F87CFF2C1758}] => (Allow) E:\SteamLibrary\SteamApps\common\FINAL FANTASY VII\FF7_Launcher.exe
FirewallRules: [{1678AADB-098E-4FC3-99BA-339F0EB47F90}] => (Allow) E:\SteamLibrary\SteamApps\common\FINAL FANTASY VII\FF7_Launcher.exe
FirewallRules: [{F3138C88-7F76-48E3-B220-4E0CFF81705A}] => (Allow) E:\SteamLibrary\SteamApps\common\Rogue Legacy\RogueLegacy.exe
FirewallRules: [{404970A8-CE59-4AFF-B5E3-9749929489C0}] => (Allow) E:\SteamLibrary\SteamApps\common\Rogue Legacy\RogueLegacy.exe
FirewallRules: [{F3722CFF-C522-4F5D-997C-6CD893462F50}] => (Allow) E:\SteamLibrary\SteamApps\common\Contagion\contagion.exe
FirewallRules: [{D11851C3-9BC8-46CE-8CC4-26E64E35F35A}] => (Allow) E:\SteamLibrary\SteamApps\common\Contagion\contagion.exe
FirewallRules: [{95CDD84D-5378-4665-AF95-271CF032A6AE}] => (Allow) E:\SteamLibrary\SteamApps\common\Contagion\contagionds.exe
FirewallRules: [{7CEF06BE-99E4-44C6-AE9E-9A1B84F07D2B}] => (Allow) E:\SteamLibrary\SteamApps\common\Contagion\contagionds.exe
FirewallRules: [{FEDD212D-8C4D-4118-8E23-912808509581}] => (Allow) E:\SteamLibrary\SteamApps\common\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{438C2745-EC3F-4E5B-A422-155C771F293C}] => (Allow) E:\SteamLibrary\SteamApps\common\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{5477159F-8C46-461B-9193-0B9C7AE8C6E5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{BE6D99EC-298C-4797-8364-B291BB1C51D6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{6C31F5BD-343E-4058-8C00-707B6F338332}] => (Allow) E:\SteamLibrary\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{F4531F41-A058-4D1E-A256-9C739F14B716}] => (Allow) E:\SteamLibrary\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{AE7B0625-095B-49A4-8BF8-EB089835F199}C:\program files\java\jre8\bin\javaw.exe] => (Allow) C:\program files\java\jre8\bin\javaw.exe
FirewallRules: [UDP Query User{63565F80-0106-49B7-A572-174801FC1A96}C:\program files\java\jre8\bin\javaw.exe] => (Allow) C:\program files\java\jre8\bin\javaw.exe
FirewallRules: [{E06ECC1E-39A5-4664-A0B7-080C9E6EB90C}] => (Allow) C:\program files\java\jre8\bin\javaw.exe
FirewallRules: [{D5B2416B-7D97-4FDC-BB0F-50178F48047E}] => (Allow) C:\program files\java\jre8\bin\javaw.exe
FirewallRules: [{98AB446D-8762-45C7-A49A-4A3BE2F2B9EC}] => (Allow) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
FirewallRules: [{F11D5B46-1E97-4CE9-9BE3-CBCC44AC9A0A}] => (Allow) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
FirewallRules: [{C11ABEF1-F59E-4E8E-93FC-880E753DDADB}] => (Allow) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
FirewallRules: [{57C544EF-C64D-4D58-96C0-13F28A093AB7}] => (Allow) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
FirewallRules: [{4D7CCF36-50A3-4B3B-85BE-917B1D01B4AD}] => (Allow) LPort=25565
FirewallRules: [{800CC616-8F35-47A6-8F5B-94C5B1A0D151}] => (Allow) E:\SteamLibrary\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{2B277352-4EC4-4F94-B8DE-3C10167CD205}] => (Allow) E:\SteamLibrary\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{884C26A2-7110-4754-B4F1-EACB210E0FA0}] => (Allow) E:\SteamLibrary\SteamApps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{9E9C6A4B-8CF5-4EAE-B0A9-857196E47FAB}] => (Allow) E:\SteamLibrary\SteamApps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{66A9C5F2-29ED-4F82-B3A7-D615555ACD75}] => (Allow) E:\SteamLibrary\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{4B8EF29E-9041-49FD-AE30-5A51F8AFAFCE}] => (Allow) E:\SteamLibrary\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{A6571C41-F6AD-4E79-9444-72AA28E2D9AF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{B375C11E-3D6B-4524-BAC1-204F813A67E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [TCP Query User{4E3D1922-65EC-448C-AAC8-95BA692FAE30}C:\program files (x86)\steam\steamapps\common\projectzomboid\jre64\bin\java.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\projectzomboid\jre64\bin\java.exe
FirewallRules: [UDP Query User{72145008-C18F-476B-97F0-2DF1A7AF2BF1}C:\program files (x86)\steam\steamapps\common\projectzomboid\jre64\bin\java.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\projectzomboid\jre64\bin\java.exe
FirewallRules: [{0B936862-F2E5-4916-B2F7-40AE3E99A8EB}] => (Block) C:\program files (x86)\steam\steamapps\common\projectzomboid\jre64\bin\java.exe
FirewallRules: [{3C047D54-DC33-4D3E-B35E-8A967F0B4F8D}] => (Block) C:\program files (x86)\steam\steamapps\common\projectzomboid\jre64\bin\java.exe
FirewallRules: [{1C6D192D-5ED7-4C8C-A97A-E70207E750EC}] => (Allow) E:\SteamLibrary\SteamApps\common\Gods Will Be Watching\gwbw.exe
FirewallRules: [{4EFD8273-0759-4AD1-B0AC-EAFDBCA40815}] => (Allow) E:\SteamLibrary\SteamApps\common\Gods Will Be Watching\gwbw.exe
FirewallRules: [{1E7EB360-19B9-43D2-B0CD-594F59FA777F}] => (Allow) E:\SteamLibrary\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{A01EED30-E31E-465C-95F0-39E625563ADE}] => (Allow) E:\SteamLibrary\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{8276F7E2-5CF6-4AA5-9F0E-D96A1327E792}] => (Allow) E:\SteamLibrary\SteamApps\common\gamemaker_studio\GameMakerPlayer.exe
FirewallRules: [{EF76B5D0-837F-40D9-9C75-CAC034DC4C7D}] => (Allow) E:\SteamLibrary\SteamApps\common\gamemaker_studio\GameMakerPlayer.exe
FirewallRules: [{DEBEEEC9-2C54-45C0-B70D-3E609FD1B0F5}] => (Allow) E:\SteamLibrary\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{69F642B5-9375-4DF7-BFE0-D48340A81CE6}] => (Allow) E:\SteamLibrary\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{8B24877C-C88A-4EB3-BB06-637AAB9F12A4}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{3F46517E-FDCE-4F6A-B07A-38288E5AAB7B}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{C6C6FEA4-A9AB-4BFF-BF6B-142B033A0831}] => (Allow) T:\StarCraft II\StarCraft II.exe
FirewallRules: [{D762EB94-CA3E-4E0A-ACB6-DE98ABB74FE5}] => (Allow) T:\StarCraft II\StarCraft II.exe
FirewallRules: [TCP Query User{A85391EB-B6CC-4879-ACC4-C622C799BE50}T:\hirezgames\smite\binaries\win32\smite.exe] => (Allow) T:\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [UDP Query User{2D3D9D6A-687F-4F36-A132-52F40218B302}T:\hirezgames\smite\binaries\win32\smite.exe] => (Allow) T:\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [{52393AD9-F5CC-42A4-BC99-A18BE18E28B1}] => (Block) T:\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [{697F164E-F970-481D-9094-CB3DDE8176DD}] => (Block) T:\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [TCP Query User{4CA9ED50-B376-4113-895D-D69F18219AF0}T:\starcraft ii\versions\base28667\sc2.exe] => (Allow) T:\starcraft ii\versions\base28667\sc2.exe
FirewallRules: [UDP Query User{E7CD4610-265A-4033-9915-60C19F5399C2}T:\starcraft ii\versions\base28667\sc2.exe] => (Allow) T:\starcraft ii\versions\base28667\sc2.exe
FirewallRules: [{879FE642-02FF-4F5E-8E5C-53F999952155}] => (Block) T:\starcraft ii\versions\base28667\sc2.exe
FirewallRules: [{D6D0B8B4-51DF-4522-B76B-1E997026EF6F}] => (Block) T:\starcraft ii\versions\base28667\sc2.exe
FirewallRules: [{8FDD0533-0B9E-43DB-951D-BFD4275FF425}] => (Allow) T:\SteamLibrary\SteamApps\common\The Bureau\Binaries\Win32\TheBureau.exe
FirewallRules: [{783D8405-33E3-4B62-8685-4934A5B538A0}] => (Allow) T:\SteamLibrary\SteamApps\common\The Bureau\Binaries\Win32\TheBureau.exe
FirewallRules: [TCP Query User{0BA93FEA-E753-43FF-B6F9-D95B15E3649F}E:\steamlibrary\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe] => (Allow) E:\steamlibrary\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe
FirewallRules: [UDP Query User{BEB2401A-B0F1-4172-8F2E-D850B6B2920D}E:\steamlibrary\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe] => (Allow) E:\steamlibrary\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe
FirewallRules: [{13A6F478-03CA-4B49-BAE0-731B1D063F4F}] => (Block) E:\steamlibrary\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe
FirewallRules: [{0051FDC1-2841-4C72-845D-B2B8F397C05D}] => (Block) E:\steamlibrary\steamapps\common\sid meier's civilization v\civilizationv_dx11.exe
FirewallRules: [{53BE3CDA-09D2-4FBD-B40D-FFB63834800C}] => (Allow) T:\SteamLibrary\SteamApps\common\deadrising3\deadrising3.exe
FirewallRules: [{F09AC41D-1DEF-468B-9D6B-F9112D48E533}] => (Allow) T:\SteamLibrary\SteamApps\common\deadrising3\deadrising3.exe
FirewallRules: [{85D2CEC0-7703-4A92-8821-192C8E2115E2}] => (Allow) C:\Program Files (x86)\iolo\System Mechanic Professional\SysMech.exe
FirewallRules: [{6551CF0C-F115-4B6F-A0C2-C8259CB36416}] => (Allow) C:\Program Files (x86)\iolo\System Mechanic Professional\SysMech.exe
FirewallRules: [{1A080C8C-1CDE-43DD-B461-36A480A7EF8E}] => (Allow) T:\SteamLibrary\SteamApps\common\Gauntlet\binaries\gauntlet.exe
FirewallRules: [{E55FD9E0-9907-4FB0-99E4-D43D6C6DE32D}] => (Allow) T:\SteamLibrary\SteamApps\common\Gauntlet\binaries\gauntlet.exe
FirewallRules: [{34034C40-5F28-4A18-8276-107D107283A7}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{94DBC935-183D-4B3C-AA67-BD555815BDEF}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{E0C1BD8F-D892-40BC-969D-EF60A0AD0146}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{7EFEB49F-1E91-4AB0-877F-64480342AE5A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{45A6A6BE-F99F-4413-8E4B-42D0C23BB62A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{C3D07763-8AB9-447B-B30D-84259D68CD2B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{F0CD7249-E06E-45E1-803C-DAFDB2770057}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{98B6E437-D4C3-42B8-93A4-C9FE0BCBB6CC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Amnesia The Dark Descent\Amnesia.exe
FirewallRules: [{E9901A9D-256A-4F22-BF77-261F634AC178}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Amnesia The Dark Descent\Amnesia.exe
FirewallRules: [{0AA2B8F8-4348-418C-BDAA-579A4BCE4361}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{35A2C73A-341D-4F4D-B806-774D516CABA4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{4F81D906-62EF-45B1-9796-5BE9BF9EB73C}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{9A0E6F56-30A0-4239-A5FD-EB0BA85D0235}] => (Allow) E:\SteamLibrary\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{1B61FA39-FEE8-416C-B0D7-F13BA5DDE978}] => (Allow) T:\SteamLibrary\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{27E81728-BB59-4131-AB84-D8E642424A19}] => (Allow) T:\SteamLibrary\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{D2AFD7C9-77BB-4E91-8495-65C8D278B6DD}] => (Allow) T:\SteamLibrary\SteamApps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe
FirewallRules: [{FFDD4553-674E-4BD7-B10A-5E1DD7CA6034}] => (Allow) T:\SteamLibrary\SteamApps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe
FirewallRules: [{D47296E2-1C2C-4309-94C6-099C7F97AB02}] => (Allow) T:\SteamLibrary\SteamApps\common\Tabletop Simulator\Tabletop Simulator.exe
FirewallRules: [{C8ACEF68-FC2D-4E78-A673-65704EBDDAA9}] => (Allow) T:\SteamLibrary\SteamApps\common\Tabletop Simulator\Tabletop Simulator.exe
FirewallRules: [{78C404CA-D436-431A-8B07-B4BE43CEB023}] => (Allow) T:\SteamLibrary\SteamApps\common\Offworld Trading Company\Offworld.exe
FirewallRules: [{A8E3642E-32FF-49B3-A744-3BE0E3347162}] => (Allow) T:\SteamLibrary\SteamApps\common\Offworld Trading Company\Offworld.exe
FirewallRules: [TCP Query User{8008C9E4-EBD7-483B-8EC4-9EF08D55150C}T:\steamlibrary\steamapps\common\elite dangerous\products\elite-dangerous-64\elitedangerous64.exe] => (Allow) T:\steamlibrary\steamapps\common\elite dangerous\products\elite-dangerous-64\elitedangerous64.exe
FirewallRules: [UDP Query User{F26CCF39-37D2-4D65-A1B0-6D79BB356551}T:\steamlibrary\steamapps\common\elite dangerous\products\elite-dangerous-64\elitedangerous64.exe] => (Allow) T:\steamlibrary\steamapps\common\elite dangerous\products\elite-dangerous-64\elitedangerous64.exe
FirewallRules: [{5C6B9BEB-3B90-4125-BE20-E41485426D91}] => (Block) T:\steamlibrary\steamapps\common\elite dangerous\products\elite-dangerous-64\elitedangerous64.exe
FirewallRules: [{6E7379F3-7CB8-45AB-90B5-C0FFE6D75297}] => (Block) T:\steamlibrary\steamapps\common\elite dangerous\products\elite-dangerous-64\elitedangerous64.exe
FirewallRules: [{930F3AB5-FCB5-40F9-98A8-B5FE6A50BF68}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\lync.exe
FirewallRules: [{5EDD573C-CA3F-4C4A-BBA2-64DD0B0B14C4}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\lync.exe
FirewallRules: [{2DDCA2FC-3A60-4721-A1F3-69F2CCC203E8}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{37EADD72-A3A2-4F64-A54D-9D27FAEE062C}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{B6B7ED56-1C87-4A96-B17F-153BA4C1656B}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\FaxApplications.exe
FirewallRules: [{F8947948-0E6F-4E38-87A2-6C0488FD4A2C}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\DigitalWizards.exe
FirewallRules: [{83F33CC6-0B57-4D19-A677-A8D8E10EC1F3}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\SendAFax.exe
FirewallRules: [{DF73A72F-33F4-4D15-8C45-55F6FE7EF34B}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\Bin\DeviceSetup.exe
FirewallRules: [{795D5EF9-5148-4C49-94A1-C7FA1172AD01}] => (Allow) LPort=5357
FirewallRules: [{63274032-2FED-4275-A265-103C15A4EDA9}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [TCP Query User{9CB49925-BA3A-4352-A928-63248D5EA212}T:\steamlibrary\steamapps\common\elite dangerous\products\forc-fdev-d-1010\elitedangerous32.exe] => (Allow) T:\steamlibrary\steamapps\common\elite dangerous\products\forc-fdev-d-1010\elitedangerous32.exe
FirewallRules: [UDP Query User{04B8B5AA-5E45-48C9-B838-86ED5D892D18}T:\steamlibrary\steamapps\common\elite dangerous\products\forc-fdev-d-1010\elitedangerous32.exe] => (Allow) T:\steamlibrary\steamapps\common\elite dangerous\products\forc-fdev-d-1010\elitedangerous32.exe
FirewallRules: [{C54FD4FE-5304-42C6-963D-ABF6BE7F74DC}] => (Block) T:\steamlibrary\steamapps\common\elite dangerous\products\forc-fdev-d-1010\elitedangerous32.exe
FirewallRules: [{EEC0865E-362C-4F45-A9DB-D1ED16F51BED}] => (Block) T:\steamlibrary\steamapps\common\elite dangerous\products\forc-fdev-d-1010\elitedangerous32.exe
FirewallRules: [{055B0193-6C96-4093-A2E5-9AEA91F7B81E}] => (Allow) T:\SteamLibrary\SteamApps\common\Elite Dangerous\EDLaunch.exe
FirewallRules: [{4810773A-4D74-4DAC-9FE5-0C13612E2B54}] => (Allow) T:\SteamLibrary\SteamApps\common\Elite Dangerous\EDLaunch.exe
FirewallRules: [TCP Query User{0181F3A3-1C28-450C-8874-33EBF9176B88}C:\users\jewfro\downloads\adt-bundle-windows-x86-20140702\adt-bundle-windows-x86-20140702\eclipse\eclipse.exe] => (Allow) C:\users\jewfro\downloads\adt-bundle-windows-x86-20140702\adt-bundle-windows-x86-20140702\eclipse\eclipse.exe
FirewallRules: [UDP Query User{2B9E7113-4C6C-4BFC-97D4-B81E3697CE46}C:\users\jewfro\downloads\adt-bundle-windows-x86-20140702\adt-bundle-windows-x86-20140702\eclipse\eclipse.exe] => (Allow) C:\users\jewfro\downloads\adt-bundle-windows-x86-20140702\adt-bundle-windows-x86-20140702\eclipse\eclipse.exe
FirewallRules: [{A91963BA-71DE-4D4F-ADF5-FF44CA696D3F}] => (Block) C:\users\jewfro\downloads\adt-bundle-windows-x86-20140702\adt-bundle-windows-x86-20140702\eclipse\eclipse.exe
FirewallRules: [{943EE22E-9C84-4F35-9FB0-375F2D3DC860}] => (Block) C:\users\jewfro\downloads\adt-bundle-windows-x86-20140702\adt-bundle-windows-x86-20140702\eclipse\eclipse.exe
FirewallRules: [{2776268C-7F77-46FF-A494-1F5BD185E007}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hammerwatch\editor\HammerEditor.exe
FirewallRules: [{BBF2DF4B-0B9A-4910-BF76-7C9DBFE461F7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hammerwatch\editor\HammerEditor.exe
FirewallRules: [TCP Query User{01B9DE3B-1CA9-4C37-9AEC-6E6D60F65AA8}C:\ruby22-x64\bin\ruby.exe] => (Allow) C:\ruby22-x64\bin\ruby.exe
FirewallRules: [UDP Query User{DE5B8F08-7CB6-4145-9D45-00BAF1ACBBEB}C:\ruby22-x64\bin\ruby.exe] => (Allow) C:\ruby22-x64\bin\ruby.exe
FirewallRules: [{968B7FBC-F6D8-444F-9A1D-D4D8D21176D9}] => (Block) C:\ruby22-x64\bin\ruby.exe
FirewallRules: [{D5260BFA-D038-439B-BAA0-F06ECAA803BA}] => (Block) C:\ruby22-x64\bin\ruby.exe
FirewallRules: [{75DC4E97-DD3A-4E24-B49A-904C662617B7}] => (Allow) E:\SteamLibrary\SteamApps\common\mordheim\mordheim.exe
FirewallRules: [{98868189-0152-481E-A761-8DC63B49A25F}] => (Allow) E:\SteamLibrary\SteamApps\common\mordheim\mordheim.exe
FirewallRules: [{DEBE8717-EC8D-4997-8784-55D707D331EF}] => (Allow) C:\Program Files (x86)\Google\Chrome Remote Desktop\51.0.2704.7\remoting_host.exe
FirewallRules: [{17238BE9-512F-40B9-8851-98B043600B10}] => (Allow) T:\SteamLibrary\SteamApps\common\Minimum\Binaries\Win32\Minimum.exe
FirewallRules: [{07C4DB81-67A4-4E7E-B4A4-EF9D950AC491}] => (Allow) T:\SteamLibrary\SteamApps\common\Minimum\Binaries\Win32\Minimum.exe
FirewallRules: [{DF46864E-EDCA-485F-AED0-2300BF4714DC}] => (Allow) E:\SteamLibrary\SteamApps\common\Kerbal Space Program\KSP.exe
FirewallRules: [{334AFDF6-75D4-4A7B-914E-1709B9ED7732}] => (Allow) E:\SteamLibrary\SteamApps\common\Kerbal Space Program\KSP.exe
FirewallRules: [{8DA8DCF2-3ABA-4A2D-8BC5-C703F2E12A72}] => (Allow) E:\SteamLibrary\SteamApps\common\Kerbal Space Program\KSP_x64.exe
FirewallRules: [{A8C2D1FC-8E58-45E1-98E1-18EC3F44117E}] => (Allow) E:\SteamLibrary\SteamApps\common\Kerbal Space Program\KSP_x64.exe
FirewallRules: [TCP Query User{42C11B59-7335-47C5-945D-5244E5C168DA}C:\users\jewfro\appdata\local\programs\python\python35-32\python.exe] => (Allow) C:\users\jewfro\appdata\local\programs\python\python35-32\python.exe
FirewallRules: [UDP Query User{ABD09AAC-8350-4F97-B222-64C926DCBFB9}C:\users\jewfro\appdata\local\programs\python\python35-32\python.exe] => (Allow) C:\users\jewfro\appdata\local\programs\python\python35-32\python.exe
FirewallRules: [{ACBB6AF7-3BE5-4C2B-8AA1-A998C6252E01}] => (Block) C:\users\jewfro\appdata\local\programs\python\python35-32\python.exe
FirewallRules: [{C8B90CF4-C809-4A3C-97C2-6050826BB4A7}] => (Block) C:\users\jewfro\appdata\local\programs\python\python35-32\python.exe
FirewallRules: [TCP Query User{4C6F8F5F-F3D4-4C08-A55F-CF207900DE14}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{52DCB071-CC42-4B56-817D-0BA539E4F532}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [{963A92ED-7A60-4F57-8571-BD7B21AD46F1}] => (Block) C:\xampp\apache\bin\httpd.exe
FirewallRules: [{FF1350C0-D40A-4DBF-81F8-929E6957FC6C}] => (Block) C:\xampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{45217B9C-6D60-4071-9585-AF6C2DDCB36B}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [UDP Query User{024AE031-AA0C-47A1-AE4F-27E273F805A2}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [{45292028-7753-4201-806F-C5DEE9501619}] => (Block) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [{CD7FFC2F-9A0E-440C-86EF-818ABAF4C0D3}] => (Block) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [TCP Query User{AB39228A-4E7E-4D68-AA6D-DEAE7ADDE75B}T:\overwatch\overwatch.exe] => (Allow) T:\overwatch\overwatch.exe
FirewallRules: [UDP Query User{4C05094A-088C-40D4-A9D8-67C952F948A3}T:\overwatch\overwatch.exe] => (Allow) T:\overwatch\overwatch.exe
FirewallRules: [{DB0C476B-1676-45C1-AC85-565AAF735EAF}] => (Block) T:\overwatch\overwatch.exe
FirewallRules: [{A01F3330-142E-4B16-84CE-A46FAFB28FB0}] => (Block) T:\overwatch\overwatch.exe
FirewallRules: [{00495BD5-ADAF-43B1-8A05-23A123EAED33}] => (Allow) E:\SteamLibrary\SteamApps\common\Sword Coast Legends\SwordCoast.exe
FirewallRules: [{60AD626F-BE3C-4F09-BE9A-8952C7F2FA7D}] => (Allow) E:\SteamLibrary\SteamApps\common\Sword Coast Legends\SwordCoast.exe
FirewallRules: [TCP Query User{3FD02319-72EC-4583-BF39-C1A7DCA3F7B1}T:\heroes of the storm\versions\base43259\heroesofthestorm_x64.exe] => (Allow) T:\heroes of the storm\versions\base43259\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{90BA8498-9DD3-4F4B-AB83-05270D821679}T:\heroes of the storm\versions\base43259\heroesofthestorm_x64.exe] => (Allow) T:\heroes of the storm\versions\base43259\heroesofthestorm_x64.exe
FirewallRules: [{F7694376-D7C6-4634-8A68-79BB3E02F224}] => (Block) T:\heroes of the storm\versions\base43259\heroesofthestorm_x64.exe
FirewallRules: [{7284A33B-E7A3-4D90-9846-49BC7EF8E061}] => (Block) T:\heroes of the storm\versions\base43259\heroesofthestorm_x64.exe
FirewallRules: [{96EAC012-1F08-4D21-A758-85CAF19180AC}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{B227772F-4481-4E21-879A-2B49DE5B0251}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio Tools for Unity\2015\UnityVS.OpenFile.exe
FirewallRules: [{AE9101C9-F859-4119-83D6-D6306D37278A}] => (Allow) T:\PROGRA~2\Editor\Unity.exe
FirewallRules: [TCP Query User{EAC73B23-D1B8-42F1-AB9F-2E10F68FE2CE}T:\heroes of the storm\versions\base43571\heroesofthestorm_x64.exe] => (Allow) T:\heroes of the storm\versions\base43571\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{10E019C4-9746-45C1-9C03-ACCD08F21972}T:\heroes of the storm\versions\base43571\heroesofthestorm_x64.exe] => (Allow) T:\heroes of the storm\versions\base43571\heroesofthestorm_x64.exe
FirewallRules: [{5DB37F17-B37F-4056-ADEA-2241E467D05E}] => (Block) T:\heroes of the storm\versions\base43571\heroesofthestorm_x64.exe
FirewallRules: [{31A53D36-70ED-475B-94C4-8E6A427C3156}] => (Block) T:\heroes of the storm\versions\base43571\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{F6FF3539-2314-4D17-9210-902FC079D571}T:\program files\monodevelop\bin\monodevelop.exe] => (Allow) T:\program files\monodevelop\bin\monodevelop.exe
FirewallRules: [UDP Query User{A0A7F706-1749-4C4C-9AED-23A3B02E0D1B}T:\program files\monodevelop\bin\monodevelop.exe] => (Allow) T:\program files\monodevelop\bin\monodevelop.exe
FirewallRules: [{F67D312B-5F17-4AC3-AEDA-F80F7628B42B}] => (Block) T:\program files\monodevelop\bin\monodevelop.exe
FirewallRules: [{7BACEB9D-8E0B-436A-8EEB-B5CF2CBFEE2C}] => (Block) T:\program files\monodevelop\bin\monodevelop.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
==================== Restore Points =========================
==================== Faulty Device Manager Devices =============
Name: Active Malware Protection Support Driver
Description: Active Malware Protection Support Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: AMPSE
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (06/16/2016 01:34:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Faulting module name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Exception code: 0xc0000005
Fault offset: 0x00071d70
Faulting process id: 0x62a8
Faulting application start time: 0xNvOAWrapperCache.exe0
Faulting application path: NvOAWrapperCache.exe1
Faulting module path: NvOAWrapperCache.exe2
Report Id: NvOAWrapperCache.exe3
Error: (06/16/2016 01:34:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Faulting module name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Exception code: 0xc0000005
Fault offset: 0x00071d70
Faulting process id: 0x5d94
Faulting application start time: 0xNvOAWrapperCache.exe0
Faulting application path: NvOAWrapperCache.exe1
Faulting module path: NvOAWrapperCache.exe2
Report Id: NvOAWrapperCache.exe3
Error: (06/16/2016 01:33:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Faulting module name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Exception code: 0xc0000005
Fault offset: 0x00071d70
Faulting process id: 0x6318
Faulting application start time: 0xNvOAWrapperCache.exe0
Faulting application path: NvOAWrapperCache.exe1
Faulting module path: NvOAWrapperCache.exe2
Report Id: NvOAWrapperCache.exe3
Error: (06/16/2016 01:33:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Faulting module name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Exception code: 0xc0000005
Fault offset: 0x00071d70
Faulting process id: 0x5abc
Faulting application start time: 0xNvOAWrapperCache.exe0
Faulting application path: NvOAWrapperCache.exe1
Faulting module path: NvOAWrapperCache.exe2
Report Id: NvOAWrapperCache.exe3
Error: (06/16/2016 01:32:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Faulting module name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Exception code: 0xc0000005
Fault offset: 0x00071d70
Faulting process id: 0x23e0
Faulting application start time: 0xNvOAWrapperCache.exe0
Faulting application path: NvOAWrapperCache.exe1
Faulting module path: NvOAWrapperCache.exe2
Report Id: NvOAWrapperCache.exe3
Error: (06/16/2016 01:32:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Faulting module name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Exception code: 0xc0000005
Fault offset: 0x00071d70
Faulting process id: 0x5998
Faulting application start time: 0xNvOAWrapperCache.exe0
Faulting application path: NvOAWrapperCache.exe1
Faulting module path: NvOAWrapperCache.exe2
Report Id: NvOAWrapperCache.exe3
Error: (06/16/2016 01:31:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Faulting module name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Exception code: 0xc0000005
Fault offset: 0x00071d70
Faulting process id: 0x6618
Faulting application start time: 0xNvOAWrapperCache.exe0
Faulting application path: NvOAWrapperCache.exe1
Faulting module path: NvOAWrapperCache.exe2
Report Id: NvOAWrapperCache.exe3
Error: (06/16/2016 01:31:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Faulting module name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Exception code: 0xc0000005
Fault offset: 0x00071d70
Faulting process id: 0x5b68
Faulting application start time: 0xNvOAWrapperCache.exe0
Faulting application path: NvOAWrapperCache.exe1
Faulting module path: NvOAWrapperCache.exe2
Report Id: NvOAWrapperCache.exe3
Error: (06/16/2016 01:30:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Faulting module name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Exception code: 0xc0000005
Fault offset: 0x00071d70
Faulting process id: 0x6234
Faulting application start time: 0xNvOAWrapperCache.exe0
Faulting application path: NvOAWrapperCache.exe1
Faulting module path: NvOAWrapperCache.exe2
Report Id: NvOAWrapperCache.exe3
Error: (06/16/2016 01:30:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Faulting module name: NvOAWrapperCache.exe, version: 0.0.0.0, time stamp: 0x571635d7
Exception code: 0xc0000005
Fault offset: 0x00071d70
Faulting process id: 0x5d34
Faulting application start time: 0xNvOAWrapperCache.exe0
Faulting application path: NvOAWrapperCache.exe1
Faulting module path: NvOAWrapperCache.exe2
Report Id: NvOAWrapperCache.exe3
System errors:
=============
Error: (06/16/2016 03:28:31 AM) (Source: volsnap) (EventID: 36) (User: )
Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.
Error: (06/16/2016 03:02:32 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070663: Security Update for Skype for Business 2016 (KB3114960) 32-Bit Edition.
Error: (06/16/2016 03:02:32 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070663: Update for Microsoft PowerPoint 2016 (KB3115138) 32-Bit Edition.
Error: (06/16/2016 03:01:09 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070663: Security Update for Microsoft Excel 2016 (KB3114964) 32-Bit Edition.
Error: (06/16/2016 03:01:09 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070663: Update for Microsoft OneDrive for Business (KB3115148) 32-Bit Edition.
Error: (06/16/2016 03:01:09 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070663: Update for Microsoft Excel 2016 (KB3115139) 32-Bit Edition.
Error: (06/16/2016 03:01:07 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070663: Update for Microsoft Project 2016 (KB3115149) 32-Bit Edition.
Error: (06/16/2016 03:01:07 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070663: Update for Microsoft Office 2016 (KB3115102) 32-Bit Edition.
Error: (06/16/2016 03:01:07 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070663: Update for Microsoft Office 2016 (KB3114968) 32-Bit Edition.
Error: (06/16/2016 03:01:07 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070663: Update for Skype for Business 2016 (KB3115087) 32-Bit Edition.
CodeIntegrity:
===================================
Date: 2016-06-16 13:32:30.814
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-06-16 13:25:38.277
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-06-16 04:53:11.298
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-06-16 04:45:06.236
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-06-16 03:58:37.012
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-06-16 03:11:48.256
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-06-15 23:12:18.537
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-06-15 22:10:55.184
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-06-15 22:00:53.172
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-06-15 21:30:43.374
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz
Percentage of memory in use: 26%
Total physical RAM: 24513.77 MB
Available physical RAM: 17898.92 MB
Total Virtual: 49025.73 MB
Available Virtual: 39331.29 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:167.58 GB) (Free:4.38 GB) NTFS
Drive e: () (Fixed) (Total:465.75 GB) (Free:175.75 GB) NTFS
Drive t: (The Big Byte) (Fixed) (Total:931.51 GB) (Free:717.77 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 4A4D4A4D)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 167.7 GB) (Disk ID: 55A48125)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=167.6 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: D01E21DE)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================