Results 1 to 10 of 31

Thread: Computer gets very slow. Even in safe mode

Hybrid View

Previous Post Previous Post   Next Post Next Post
  1. 2017-06-26, 20:58 #1
    computer
    computer is offline
    Junior Member
    Join Date
    Jun 2017
    Posts
    20

    Default Computer gets very slow. Even in safe mode

    Came back to my computer this weekend and it was playing an audio saying that I had a virus and needed to call an 800 number to get it fixed. I disconnected it from the internet and booted in safe mode. Ran Spybot S&D and I don't think it really found anything. I tried to submit reports all weekend, but it kept timing out everytime I tried to submit a report.

    FRST:

    Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 24-06-2017 01
    Ran by Battlefield (administrator) on BATTLEFIELD-PC (24-06-2017 18:30:44)
    Running from C:\Users\Battlefield\Downloads
    Loaded Profiles: Battlefield (Available Profiles: Battlefield & QBDataServiceUser21 & QBDataServiceUser24 & Jordan & CJ & MSSQL$TESTSERVER & ReportServer & MSSQLFDLauncher & MSSQLSERVER)
    Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
    Internet Explorer Version 11 (Default browser: IE)
    Boot Mode: Safe Mode (with Networking)
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    ==================== Registry (Whitelisted) ====================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation)
    HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [Intuit SyncManager] => C:\Program Files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe [3776824 2015-11-03] (Intuit Inc. All rights reserved.)
    HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
    HKLM-x32\...\Run: [EMET 4.1 Update 1 Agent] => C:\Program Files (x86)\EMET 4.1\EMET_agent.exe [88272 2014-05-28] (Microsoft Corporation)
    HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2406496 2017-06-04] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [1870928 2017-04-04] (Adobe Systems Inc.)
    HKLM-x32\...\Run: [ApnTBMon] => "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
    HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3487032 2017-06-12] (Dropbox, Inc.)
    HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
    HKLM-x32\...\Run: [DpTsClnt] => Regsvr32.exe /s "Bin\DpTsClnt.dll"
    HKLM-x32\...\Run: [] => [X]
    Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
    HKLM\...\Policies\Explorer: [NoDesktop] 0
    HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\Run: [RCHotKey] => C:\Program Files (x86)\RingCentral\RingCentral Softphone\RCHotKey.exe [30000 2014-06-09] (RingCentral, Inc.)
    HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\Run: [HP Officejet Pro 8600 (NET)] => C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
    HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
    HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [5915776 2016-03-21] (Safer-Networking Ltd.)
    HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\RunOnce: [Uninstall C:\Users\Battlefield\AppData\Local\Microsoft\OneDrive\17.3.5860.0512\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Battlefield\AppData\Local\Microsoft\OneDrive\17.3.5860.0512\amd64"
    HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\Winlogon: [Userinit] C:\Windows\System32\userinit.exe, [30720 2010-11-20] (Microsoft Corporation)
    HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssText3d.scr [333824 2010-11-20] (Microsoft Corporation)
    AppInit_DLLs:  => No File
    ShellExecuteHooks-x32: No Name - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - -> No File
    ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google)
    ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google)
    ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google)
    ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2017-05-26] ()
    ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2017-05-26] ()
    ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2017-05-26] ()
    ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-09-11] (Autodesk, Inc.)
    ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => -> No File
    ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
    ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
    ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
    ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers-x32: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers-x32: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers-x32: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers-x32: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers-x32: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers-x32: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers-x32: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers-x32: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2013-06-25]
    ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Intuit Data Protect.lnk [2013-12-03]
    ShortcutTarget: Intuit Data Protect.lnk -> C:\Program Files (x86)\Common Files\Intuit\DataProtect\IntuitDataProtect.exe (Intuit Inc.)
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk [2013-12-03]
    ShortcutTarget: QuickBooks Update Agent.lnk -> C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe (Intuit Inc.)
    Startup: C:\Users\Jordan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2017-01-26]
    ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
    BootExecute: autocheck autochk * sdnclean64.exe

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    ProxyEnable: [.DEFAULT] => Proxy is enabled.
    ProxyServer: [.DEFAULT] => http=127.0.0.1:47574
    ProxyEnable: [S-1-5-21-3544609310-1622349089-2069013866-1000] => Proxy is enabled.
    ProxyServer: [S-1-5-21-3544609310-1622349089-2069013866-1000] => http=127.0.0.1:47574
    Winsock: Catalog5 09 C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll [26512 2013-05-11] (National Instruments Corporation)
    Winsock: Catalog5-x64 09 C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll [28560 2013-05-11] (National Instruments Corporation)
    Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
    Tcpip\..\Interfaces\{5E6EDCD9-41B9-471A-9F74-AE95EF4B6233}: [NameServer] 8.8.8.8,8.8.4.4
    Tcpip\..\Interfaces\{CE60960A-05CC-4685-B18F-B63497DE832F}: [DhcpNameServer] 192.168.1.1
    ManualProxies: 1http=127.0.0.1:47574

    Internet Explorer:
    ==================
    HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
    HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
    HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    SearchScopes: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000 -> {1711FC25-F05A-40CE-B859-A0C1CF01FD18} URL = hxxps://us.search.yahoo.com/yhs/search?hspart=omr&hsimp=yhs-001&type=86311217&param1=y6bdVFVIsvuYsgEClQfz8HyFH9tZCHsOZFHNP%2BYwJC0%2FGgRxFQo9lKd%2BjPhcFQ0cS78E9n0GGyhjf2UlQFRF2i74WjPuAkEEwqLmenHb0CwUaowPQJ7qzrdo%2BPPwmIBfOul4K06c%2F6OZUMarpdLpagWmq%2F4uiFCCS8IZTuZ00X38oNqD0h37wZ3hujH09fsYgp2YZDPn7bCd3CZbuJLeqBFFh0x6f5wCuTL6aPOd4IPSfTZl%2F3AuJd89E5D0MnESjrdXuk9Hhx5%2BNLSO6v4lyQ%3D%3D&p={searchTerms}
    BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)
    BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
    BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-04-04] (Adobe Systems Incorporated)
    BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-06-09] (Microsoft Corporation)
    BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
    BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-04-04] (Adobe Systems Incorporated)
    BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File
    BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-23] (Hewlett-Packard Co.)
    BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)
    BHO-x32: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12] (DivX, LLC)
    BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-21] (Oracle Corporation)
    BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
    BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
    BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-04-04] (Adobe Systems Incorporated)
    BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-06-09] (Microsoft Corporation)
    BHO-x32: Microsoft Web Test Recorder 14.0 Helper -> {b924f0b4-0b3c-49c0-bab2-213fb9ebd1d3} -> C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2014-11-10] (Microsoft Corporation)
    BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-21] (Oracle Corporation)
    BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-04-04] (Adobe Systems Incorporated)
    BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-23] (Hewlett-Packard Co.)
    Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-04-04] (Adobe Systems Incorporated)
    Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-04-04] (Adobe Systems Incorporated)
    Toolbar: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-04-04] (Adobe Systems Incorporated)
    DPF: HKLM-x32 {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/_layouts/ClientBin/ieawsdc32.cab
    DPF: HKLM-x32 {1851174C-97BD-4217-A0CC-E908F60D5B7A} hxxps://h50203.www5.hp.com/CSMWeb/Customer/cabs/HPISDataManager.CAB
    DPF: HKLM-x32 {4871A87A-BFDD-4106-8153-FFDE2BAC2967} hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.6.2.cab
    DPF: HKLM-x32 {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab
    DPF: HKLM-x32 {82774781-8F4E-11D1-AB1C-0000F8773BF0} hxxps://transfers.ds.microsoft.com/FTM/TransferSource/grTransferCtrl.cab
    DPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} hxxps://akamaicdn.webex.com/client/WBXclient-T27L10NSP32EP5-14362/webex/ieatgpc1.cab
    DPF: HKLM-x32 {E0FEE963-BB53-4215-81AD-B28C77384644} hxxps://pattcw.att.motive.com/wizlet/DSLActivation/static/installer/ATTInternetInstaller64.cab
    Handler-x32: intu-help-qb7 - {5A03BD9D-766D-47A6-8E87-CD90F60BE245} - C:\Program Files (x86)\Intuit\QuickBooks 2014\HelpAsyncPluggableProtocol.dll [2017-03-01] (Intuit, Inc.)
    Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
    Handler-x32: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - C:\Windows\system32\mscoree.dll [2010-11-20] (Microsoft Corporation)
    Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2013-02-26] (Skype Technologies)

    FireFox:
    ========
    FF ProfilePath: C:\Users\Battlefield\AppData\Roaming\Mozilla\Firefox\Profiles\yvro0wpn.default [2017-06-24]
    FF NewTab: Mozilla\Firefox\Profiles\yvro0wpn.default -> hxxps://us.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=86311217&param1=y6bdVFVIsvuYsgEClQfz8HyFH9tZCHsOZFHNP%2BYwJC0%2FGgRxFQo9lKd%2BjPhcFQ0cjsBGgHIAr49ni5TgGwtu8rF4lcjEYyD%2FhCoNmGlNiuxO1%2FuuA5tJc1Epyfi4b59GXpS4SlyllOjwdi3HXleNb0A%2Fj4UkuUIGPrC9E%2FymLn3Ybtxw4CUBJy5ckLPMxd0Cj0H7Yp%2FB1iAGKlkX%2BveHWNfM5bt0T5KwIDa7gmma%2BWJ5aZ5jzlOSRjDzwk19pCwsieL9Dt34i1tkiC3%2FCF11zQ%3D%3D
    FF SelectedSearchEngine: Mozilla\Firefox\Profiles\yvro0wpn.default -> Yahoo powered search
    FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\yvro0wpn.default -> Yahoo powered search
    FF DefaultSearchEngine: Mozilla\Firefox\Profiles\yvro0wpn.default -> Yahoo powered search
    FF Homepage: Mozilla\Firefox\Profiles\yvro0wpn.default -> hxxps://us.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=86311217&param1=y6bdVFVIsvuYsgEClQfz8HyFH9tZCHsOZFHNP%2BYwJC0%2FGgRxFQo9lKd%2BjPhcFQ0cN7fBYCRXl87QylSWL9EgznKMNPgDppcDpwzRlnbMJYUNYofjm6Y%2FcDa%2BlwVSAOSQN%2BECyol3ZAVB%2FNr%2FXL4iXUk4Z9NpporjUXaBSWDVrKubllJJFp4XYqThswJcg4u7JeQfpqxv9bt93oj6ZilcYh1tzJD2t9LaYWQUZyhK2fMi%2FbgNNPjnrl%2FaCQcsarTA2yY%2B7WvdBTTgyL4sA21e7Q%3D%3D
    FF Extension: (Adblock Plus) - C:\Users\Battlefield\AppData\Roaming\Mozilla\Firefox\Profiles\yvro0wpn.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-04-18]
    FF SearchPlugin: C:\Users\Battlefield\AppData\Roaming\Mozilla\Firefox\Profiles\yvro0wpn.default\searchplugins\Yahoo powered search.xml [2017-05-25]
    FF Extension: (No Name) - C:\Program Files (x86)\Mozilla Firefox\extensions\䍻䙁䕅䅆ⵃ〰㜱〭〰ⴰ〰㜰䄭䍂䕄䙆䑅䉃絁 [2013-02-27] [not signed]
    FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
    FF Extension: (DivX Plus Web Player HTML5 &video&) - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-02-01] [not signed]
    FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
    FF Extension: (HP Smart Web Printing) - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-06-25] [not signed]
    FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.15@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn
    FF Extension: (Adobe Acrobat DC - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn [2017-05-24]
    FF HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\Firefox\Extensions: [{257B76A0-0277-11E2-8271-B8AC6F996F26}] - C:\Users\Battlefield\AppData\Local\{257B76A0-0277-11E2-8271-B8AC6F996F26} => not found
    FF HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll [2013-09-10] ()
    FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)
    FF Plugin: @java.com/DTPlugin,version=10.7.2 -> C:\Windows\system32\npDeployJava1.dll [2012-10-05] (Oracle Corporation)
    FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
    FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2017-06-04] (Adobe Systems)
    FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll [2013-12-03] (Adobe Systems)
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll [2013-09-10] ()
    FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
    FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2011-12-13] (DivX, LLC)
    FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)
    FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Windows\SysWOW64\npdeployJava1.dll [2015-04-21] (Oracle Corporation)
    FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation)
    FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
    FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-02-17] (Microsoft Corporation)
    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-07-11] (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
    FF Plugin-x32: @Motive.com/NpMotive,version=1.0 -> C:\Program Files (x86)\Common Files\Motive\npMotive.dll [2010-04-30] (Alcatel-Lucent)
    FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-07-22] (NVIDIA Corporation)
    FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-07-22] (NVIDIA Corporation)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
    FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2017-04-04] (Adobe Systems Inc.)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-08-03] (Adobe Systems Inc.)
    FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2017-06-04] (Adobe Systems)
    FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-12-03] (Adobe Systems)
    FF Plugin HKU\S-1-5-21-3544609310-1622349089-2069013866-1000: @citrixonline.com/appdetectorplugin -> C:\Users\Battlefield\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2014-12-03] (Citrix Online)
    FF Plugin HKU\S-1-5-21-3544609310-1622349089-2069013866-1000: @ringcentral.com/RingCentralMeetingsPlugin -> C:\Users\Battlefield\AppData\Roaming\RingCentralMeetings\bin\nprcmsplugin.dll [2015-05-18] (Zoom Video Communications, Inc. and RingCentral Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nplv2012win32.dll [2014-01-08] (National Instruments)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nplv2013win32.dll [2014-01-09] (National Instruments)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2017-04-04] (Adobe Systems Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2012-07-03] (Apple Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2012-07-03] (Apple Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2012-07-03] (Apple Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2012-07-03] (Apple Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2012-07-03] (Apple Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll [2012-07-03] (Apple Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll [2012-07-03] (Apple Inc.)

    Chrome:
    =======
    CHR DefaultProfile: Default
    CHR HomePage: Default -> homepage.ssoextension.com
    CHR StartupUrls: Default -> "hxxp://www.google.com/"
    CHR DefaultSearchURL: Default -> hxxps://www.teoma.com/web?q={searchTerms}
    CHR DefaultSearchKeyword: Default -> hxxps://teoma.com
    CHR DefaultSuggestURL: Default -> hxxp://www.teoma.com/ss?type=prefix&li=ff&q={searchTerms}
    CHR Session Restore: Default -> is enabled.
    CHR Profile: C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default [2017-06-24]
    CHR Extension: (Google Drive) - C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-14]
    CHR Extension: (YouTube) - C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-01]
    CHR Extension: (Google Search) - C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-14]
    CHR Extension: (AdBlock) - C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-06-24]
    CHR Extension: (Pixlr Touch Up) - C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default\Extensions\jklljiahjgoglchglekebfljnmbaleig [2014-03-10]
    CHR Extension: (Chrome Web Store Payments) - C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-21]
    CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2012-04-21]
    CHR Extension: (Gmail) - C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-15]
    CHR Extension: (Chrome Media Router) - C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-17]
    CHR HKLM\...\Chrome\Extension: [ckadhkfhcieallpikidnjojofenjpfni] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\ckadhkfhcieallpikidnjojofenjpfni.crx [2016-11-11]
    CHR HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\BATTLE~1\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-05-06]
    CHR HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [gkcffmoikcgfhagefelmhiakelnjihik] - hxxps://chrome.google.com/webstore/detail/gkcffmoikcgfhagefelmhiakelnjihik
    CHR HKLM-x32\...\Chrome\Extension: [cdjbnddbclciabnckgeahmneohjlahdm] - C:\Users\Battlefield\AppData\Local\chromeupdate.crx <not found>
    CHR HKLM-x32\...\Chrome\Extension: [ckadhkfhcieallpikidnjojofenjpfni] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\ckadhkfhcieallpikidnjojofenjpfni.crx [2016-11-11]
    CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
    CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2011-12-12]

    ==================== Services (Whitelisted) ====================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    "chelper" => service was unlocked. <===== ATTENTION
    "ntcache" => service was unlocked. <===== ATTENTION
    "wuhelper" => service was unlocked. <===== ATTENTION

    S2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [814688 2017-06-04] (Adobe Systems Incorporated)
    S2 AdvHardwareService; C:\Program Files (x86)\CenterEdge Software\AdvHardwareService.exe [23552 2017-03-27] (CenterEdge Software) [File not signed]
    S2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
    S2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
    S4 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-09-11] ()
    S2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-10-12] (ASUSTeK Computer Inc.)
    S4 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-10-12] (ASUSTeK Computer Inc.)
    S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [15768 2010-02-02] (Microsoft Corporation)
    S2 chelper; C:\Program Files (x86)\SSO\chelper.exe [1285928 2017-05-25] (TODO: <Company name>) [File not signed]
    S2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2753720 2015-07-01] (Microsoft Corporation)
    S4 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-07-27] (Dropbox, Inc.)
    S4 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-07-27] (Dropbox, Inc.)
    S2 DbxSvc; C:\Windows\system32\DbxSvc.exe [48944 2017-06-12] (Dropbox, Inc.)
    S4 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [8998800 2013-05-08] (DisplayLink Corp.)
    S2 DpHost; C:\Program Files (x86)\CenterEdge Software\Bin\DpHostW.exe [326720 2009-08-10] (DigitalPersona, Inc.) [File not signed]
    S4 EPSON_Device_Control_Log_Service; C:\Program Files\epson\portcommunicationservice\DeviceControlLog.exe [395776 2012-06-22] (SEIKO EPSON CORPORATION) [File not signed]
    S4 EPSON_Port_Communication_Service; C:\Program Files\epson\portcommunicationservice\PCSVC.exe [584704 2012-06-22] (SEIKO EPSON CORPORATION) [File not signed]
    S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-20] (Microsoft Corporation) [File not signed]
    S3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-23] (Hewlett-Packard Co.) [File not signed]
    S2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-23] (Hewlett-Packard Co.) [File not signed]
    S2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1037824 2009-09-23] (Hewlett-Packard Co.) [File not signed]
    S2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [22744 2014-10-15] (Microsoft Corporation)
    S2 LkCitadelServer; C:\Windows\SysWOW64\lkcitdl.exe [695136 2010-10-27] (National Instruments, Inc.)
    S2 lkClassAds; C:\Windows\SysWOW64\lkads.exe [53544 2013-06-12] (National Instruments Corporation)
    S2 lkTimeSync; C:\Windows\SysWOW64\lktsrv.exe [63792 2013-06-12] (National Instruments Corporation)
    S2 McciCMService; C:\Program Files (x86)\Common Files\Motive\McciCMService.exe [319488 2010-04-30] (Alcatel-Lucent) [File not signed]
    S2 McciCMService64; C:\Program Files\Common Files\Motive\McciCMService.exe [517632 2010-04-30] (Alcatel-Lucent) [File not signed]
    R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation)
    S2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [69964448 2015-04-03] (Microsoft Corporation)
    S2 MSSQL$TESTSERVER; c:\Program Files\Microsoft SQL Server\MSSQL11.TESTSERVER\MSSQL\Binn\sqlservr.exe [192192 2015-05-05] (Microsoft Corporation)
    S3 MSSQLFDLauncher; C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\fdlauncher.exe [49752 2012-02-11] (Microsoft Corporation)
    S3 MSSQLSERVER; C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlservr.exe [192192 2015-05-05] (Microsoft Corporation)
    S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [File not signed]
    S2 NIApplicationWebServer; C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [57696 2013-12-10] (National Instruments Corporation)
    S4 NIApplicationWebServer64; C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [81248 2013-12-10] (National Instruments Corporation)
    S2 NIDomainService; C:\Program Files (x86)\National Instruments\Shared\Security\nidmsrv.exe [380720 2013-06-12] (National Instruments Corporation)
    S4 NILM License Manager; C:\Program Files (x86)\National Instruments\Shared\License Manager\Bin\lmgrd.exe [1427688 2010-08-02] (Macrovision Corporation)
    S2 nimDNSResponder; C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe [260976 2013-05-11] (National Instruments Corporation)
    S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation)
    S2 NiSvcLoc; C:\Program Files (x86)\National Instruments\Shared\niSvcLoc\nisvcloc.exe [90440 2013-12-10] (National Instruments Corporation)
    S2 NISystemWebServer; C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe [57680 2013-12-10] (National Instruments Corporation)
    S2 Nonbrand_WUS-N; C:\Program Files (x86)\KEEBOX\150N Wireless Utility\ANIWZCSdS.exe [126976 2010-06-21] (Wireless Service) [File not signed]
    S4 Nonbrand_WUS-N_WPS; C:\Program Files (x86)\KEEBOX\150N Wireless Utility\ANIWConnService.exe [53248 2010-06-21] () [File not signed]
    S4 NovacomD; C:\Program Files (x86)\HP webOS\SDK\bin\novacomd\x86\novacomd.exe [61440 2011-09-19] (Palm) [File not signed]
    S2 ntcache; C:\ProgramData\Microsoft\Windows\NetworkCacheManager\ntcache.exe [6960640 2017-05-25] () [File not signed] <==== ATTENTION
    S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation)
    S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation)
    S4 Palm_TCP_Relay; C:\Program Files (x86)\HP webOS\PDK\tcprelay.exe [11776 2011-12-21] () [File not signed]
    S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [File not signed]
    S4 POSPerformanceCounters; c:\Program Files (x86)\Microsoft Point Of Service\Microsoft.PointOfService.Service.exe [35648 2006-01-24] (Microsoft Corporation)
    S2 QBCFMonitorService; C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe [45056 2017-03-01] (Intuit) [File not signed]
    S3 QBFCService; C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe [65536 2013-10-10] (Intuit Inc.) [File not signed]
    S2 QBVSS; C:\Program Files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe [1248256 2013-10-10] (Intuit Inc.) [File not signed]
    S3 QuickBooksDB24; C:\Program Files (x86)\Intuit\QuickBooks 2014\QBDBMgrN.exe [679936 2013-10-10] (Intuit, Inc.) [File not signed]
    S3 ReportServer; C:\Program Files\Microsoft SQL Server\MSRS11.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe [2423792 2012-10-20] (Microsoft Corporation)
    S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
    S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [4088608 2016-09-21] (Safer-Networking Ltd.) [File not signed]
    S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [235984 2016-11-24] (Safer-Networking Ltd.) [File not signed]
    S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [441512 2015-04-03] (Microsoft Corporation)
    S4 SQLAgent$TESTSERVER; c:\Program Files\Microsoft SQL Server\MSSQL11.TESTSERVER\MSSQL\Binn\SQLAGENT.EXE [613056 2015-05-05] (Microsoft Corporation)
    S4 SQLSERVERAGENT; C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE [613056 2015-05-05] (Microsoft Corporation)
    S4 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
    S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
    S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation)
    S3 VsEtwService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89240 2014-11-10] (Microsoft Corporation)
    S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [147664 2014-11-10] (Microsoft Corporation)
    S2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-06-02] (Western Digital Technologies, Inc.)
    S2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [296312 2014-06-02] (Western Digital Technologies, Inc.)
    S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
    S2 wuhelper; C:\Program Files (x86)\Windows NT\Accessories\WinUtilityHelper\wuhelper.exe [139776 2017-05-19] () [File not signed]
    S2 APNMCP; "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe" [X]
    S4 CarboniteService; "C:\Program Files\Carbonite\Carbonite Backup\carboniteservice.exe" [X]

    ===================== Drivers (Whitelisted) ======================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    R0 AiChargerPlus; C:\Windows\System32\DRIVERS\AiChargerPlus.sys [14464 2010-11-08] (ASUSTek Computer Inc.)
    R0 AiChargerPlus; C:\Windows\SysWOW64\DRIVERS\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
    S3 akshasp; C:\Windows\System32\DRIVERS\akshasp.sys [77912 2015-09-23] (SafeNet Inc.)
    S3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [322560 2015-09-23] (SafeNet Inc.)
    R1 anodlwf; C:\Windows\System32\DRIVERS\anodlwfx.sys [15872 2010-06-21] ()
    U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
    S1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-10-12] ()
    S1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
    S3 cebal2_x64; C:\Windows\System32\DRIVERS\cebal2_x64.sys [47368 2014-06-12] ()
    S3 DisplayLinkUsbIo_x64; C:\Windows\System32\DRIVERS\DisplayLinkUsbIo_x64_7.2.47873.0.sys [44944 2013-05-13] ()
    S2 DLPortIO; C:\Windows\SysWow64\Drivers\DLPortIO.sys [3584 1999-01-10] () [File not signed]
    S2 EPSON_PCS_Parallel_Port_Driver; C:\Windows\system32\DRIVERS\pcslpt.sys [21640 2012-06-22] (SEIKO EPSON CORPORATION)
    S2 hardlock; C:\Windows\system32\drivers\hardlock.sys [350552 2015-09-23] (SafeNet Inc.)
    S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [52832 2014-01-04] (hxxp://libusb-win32.sourceforge.net)
    S0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
    S3 MREMP50; C:\Program Files (x86)\Common Files\Motive\MREMP50.sys [21248 2010-04-30] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
    S3 MRESP50; C:\Program Files (x86)\Common Files\Motive\MRESP50.sys [20096 2010-04-30] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
    S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
    S3 npf; C:\Windows\System32\drivers\npf.sys [35344 2013-07-28] (CACE Technologies, Inc.)
    S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation)
    R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-06-22] (Corel Corporation)
    R1 RegHiveRecovery; C:\Windows\system32\drivers\RegHiveRecovery.sys [48304 2014-02-20] (Microsoft Corporation)
    S4 RsFx0201; C:\Windows\System32\DRIVERS\RsFx0201.sys [336880 2012-10-20] (Microsoft Corporation)
    S3 SpotUsb; C:\Windows\System32\DRIVERS\MFUSB_Netduino.sys [34912 2012-04-11] (Microsoft Corporation)
    S3 sscdserd; C:\Windows\System32\DRIVERS\sscdserd.sys [141384 2010-11-11] (MCCI Corporation)
    S3 STTub30; C:\Windows\System32\Drivers\STTub30.sys [44184 2012-07-09] (STMicroelectronics)
    S3 STTub30; C:\Windows\SysWOW64\Drivers\STTub30.sys [37808 2009-11-23] (STMicroelectronics)
    U5 TMUSB; C:\Windows\System32\DRIVERS\TMUSB64.SYS [63096 2012-03-01] (Seiko Epson Corporation)
    S3 WIMMount; C:\Program Files (x86)\Windows Kits\8.1\Assessment and Deployment Kit\Deployment Tools\amd64\DISM\wimmount.sys [40552 2013-08-22] (Microsoft Corporation)
    S3 catchme; \??\C:\ComboFix\catchme.sys [X]
    S3 dbx; system32\DRIVERS\dbx.sys [X]
    S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X]
    S3 MREMP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS [X]
    S3 MREMPR5; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS [X]
    S3 MRENDIS5; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [X]
    S3 MRESP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS [X]
    S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

    ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2017-06-24 18:30 - 2017-06-24 18:31 - 00051633 _____ C:\Users\Battlefield\Downloads\FRST.txt
    2017-06-24 18:29 - 2017-06-24 18:30 - 00000000 ____D C:\FRST
    2017-06-24 18:29 - 2017-06-24 18:29 - 02440704 _____ (Farbar) C:\Users\Battlefield\Downloads\FRST64.exe
    2017-06-24 18:26 - 2017-06-24 18:26 - 00008192 _____ C:\Windows\SysWOW64\WDPABKP.dat
    2017-06-24 18:25 - 2017-06-24 18:25 - 00000962 _____ C:\Windows\Tweaking.com - Registry Backup Setup Log.txt
    2017-06-24 18:24 - 2017-06-24 18:24 - 05766144 _____ (Tweaking.com) C:\Users\Battlefield\Downloads\tweaking.com_registry_backup_setup (1).exe
    2017-06-24 18:23 - 2017-06-24 18:23 - 05766144 _____ (Tweaking.com) C:\Users\Battlefield\Downloads\tweaking.com_registry_backup_setup.exe
    2017-06-24 18:20 - 2017-06-24 18:20 - 00000000 ___HD C:\OneDriveTemp
    2017-06-24 18:19 - 2017-06-24 18:19 - 00000000 ___HD C:\Users\Public\Documents\AdobeGC
    2017-06-24 14:10 - 2017-06-24 14:10 - 00000000 ____D C:\Users\Battlefield\Documents\ProcAlyzer Dumps
    2017-06-24 14:02 - 2017-06-24 14:02 - 00000000 ____D C:\Users\Battlefield\AppData\Local\Tempzxpsignbf528d65aa2f44e5
    2017-06-24 14:02 - 2017-06-24 14:02 - 00000000 ____D C:\Users\Battlefield\AppData\Local\Tempzxpsign8d14837c4143a0c1
    2017-06-24 14:02 - 2017-06-24 14:02 - 00000000 ____D C:\Users\Battlefield\AppData\Local\Tempzxpsign6fa10438927821b6
    2017-06-20 12:49 - 2017-06-20 12:49 - 00000000 ____D C:\CenterEdge
    2017-06-20 12:48 - 2017-06-20 12:48 - 00001084 _____ C:\Users\Public\Desktop\Advantage Manager Console.lnk
    2017-06-20 12:48 - 2017-06-20 12:48 - 00001079 _____ C:\Users\Public\Desktop\Advantage Groups.lnk
    2017-06-20 12:48 - 2017-06-20 12:48 - 00000000 ____D C:\Windows\DPDrv
    2017-06-18 15:36 - 2017-06-18 15:36 - 00000000 ____D C:\Program Files\Common Files\AV
    2017-06-18 15:36 - 2015-07-28 17:52 - 00821920 _____ (Safer-Networking Ltd. ) C:\Users\Public\Desktop\Post Win10 Spybot-install.exe
    2017-06-18 14:30 - 2017-06-24 14:31 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
    2017-06-18 14:30 - 2017-06-18 14:30 - 00001455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
    2017-06-18 14:30 - 2017-06-18 14:30 - 00001443 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
    2017-06-18 14:30 - 2017-06-18 14:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
    2017-06-18 14:30 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
    2017-06-18 14:26 - 2017-06-18 14:27 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\CJ\Downloads\spybot-2.4.exe
    2017-06-14 13:37 - 2017-06-14 13:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
    2017-06-14 03:24 - 2017-06-02 03:28 - 02317824 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
    2017-06-14 03:24 - 2017-06-02 03:28 - 02222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
    2017-06-14 03:24 - 2017-06-02 03:28 - 00778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
    2017-06-14 03:24 - 2017-06-02 03:28 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
    2017-06-14 03:24 - 2017-06-02 03:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
    2017-06-14 03:24 - 2017-06-02 03:28 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
    2017-06-14 03:24 - 2017-06-02 03:28 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
    2017-06-14 03:24 - 2017-06-02 03:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
    2017-06-14 03:24 - 2017-06-02 03:28 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
    2017-06-14 03:24 - 2017-06-02 03:11 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
    2017-06-14 03:24 - 2017-06-02 03:11 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
    2017-06-14 03:24 - 2017-06-02 03:10 - 00733696 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
    2017-06-14 03:24 - 2017-06-02 03:10 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
    2017-06-14 03:24 - 2017-06-02 03:09 - 01549824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
    2017-06-14 03:24 - 2017-06-02 03:09 - 01400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
    2017-06-14 03:24 - 2017-06-02 03:09 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
    2017-06-14 03:24 - 2017-06-02 03:09 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
    2017-06-14 03:24 - 2017-06-02 03:09 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
    2017-06-14 03:24 - 2017-06-02 03:09 - 00104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
    2017-06-14 03:24 - 2017-06-02 03:09 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
    2017-06-14 03:24 - 2017-06-02 03:09 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
    2017-06-14 03:24 - 2017-06-02 02:58 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
    2017-06-14 03:24 - 2017-06-02 02:58 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
    2017-06-14 03:24 - 2017-06-02 02:57 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
    2017-06-14 03:24 - 2017-06-02 02:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
    2017-06-14 03:24 - 2017-05-20 23:28 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
    2017-06-14 03:24 - 2017-05-20 23:28 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
    2017-06-14 03:24 - 2017-05-20 23:24 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
    2017-06-14 03:24 - 2017-05-20 22:55 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
    2017-06-14 03:24 - 2017-05-20 22:48 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
    2017-06-14 03:24 - 2017-05-20 22:48 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
    2017-06-14 03:24 - 2017-05-20 22:48 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
    2017-06-14 03:24 - 2017-05-20 22:47 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
    2017-06-14 03:24 - 2017-05-20 22:46 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
    2017-06-14 03:24 - 2017-05-20 22:42 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
    2017-06-14 03:24 - 2017-05-16 13:19 - 00394448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
    2017-06-14 03:24 - 2017-05-16 12:35 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
    2017-06-14 03:24 - 2017-05-14 15:46 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
    2017-06-14 03:24 - 2017-05-14 15:46 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
    2017-06-14 03:24 - 2017-05-14 15:28 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
    2017-06-14 03:24 - 2017-05-14 15:27 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
    2017-06-14 03:24 - 2017-05-14 15:27 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
    2017-06-14 03:24 - 2017-05-14 15:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
    2017-06-14 03:24 - 2017-05-14 15:26 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
    2017-06-14 03:24 - 2017-05-14 15:24 - 02899456 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
    2017-06-14 03:24 - 2017-05-14 15:19 - 25738752 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
    2017-06-14 03:24 - 2017-05-14 15:17 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
    2017-06-14 03:24 - 2017-05-14 15:16 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
    2017-06-14 03:24 - 2017-05-14 15:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
    2017-06-14 03:24 - 2017-05-14 15:10 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
    2017-06-14 03:24 - 2017-05-14 15:10 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
    2017-06-14 03:24 - 2017-05-14 15:10 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
    2017-06-14 03:24 - 2017-05-14 15:10 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
    2017-06-14 03:24 - 2017-05-14 15:01 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
    2017-06-14 03:24 - 2017-05-14 14:57 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
    2017-06-14 03:24 - 2017-05-14 14:55 - 05975040 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
    2017-06-14 03:24 - 2017-05-14 14:48 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
    2017-06-14 03:24 - 2017-05-14 14:47 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
    2017-06-14 03:24 - 2017-05-14 14:46 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
    2017-06-14 03:24 - 2017-05-14 14:42 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
    2017-06-14 03:24 - 2017-05-14 14:41 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
    2017-06-14 03:24 - 2017-05-14 14:38 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
    2017-06-14 03:24 - 2017-05-14 14:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
    2017-06-14 03:24 - 2017-05-14 14:36 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
    2017-06-14 03:24 - 2017-05-14 14:23 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
    2017-06-14 03:24 - 2017-05-14 14:23 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
    2017-06-14 03:24 - 2017-05-14 14:22 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
    2017-06-14 03:24 - 2017-05-14 14:22 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
    2017-06-14 03:24 - 2017-05-14 14:22 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
    2017-06-14 03:24 - 2017-05-14 14:21 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
    2017-06-14 03:24 - 2017-05-14 14:20 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
    2017-06-14 03:24 - 2017-05-14 14:19 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
    2017-06-14 03:24 - 2017-05-14 14:18 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
    2017-06-14 03:24 - 2017-05-14 14:17 - 02132992 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
    2017-06-14 03:24 - 2017-05-14 14:16 - 02290176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
    2017-06-14 03:24 - 2017-05-14 14:15 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
    2017-06-14 03:24 - 2017-05-14 14:14 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
    2017-06-14 03:24 - 2017-05-14 14:12 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
    2017-06-14 03:24 - 2017-05-14 14:11 - 20274688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
    2017-06-14 03:24 - 2017-05-14 14:11 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
    2017-06-14 03:24 - 2017-05-14 14:10 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
    2017-06-14 03:24 - 2017-05-14 14:10 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
    2017-06-14 03:24 - 2017-05-14 14:02 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
    2017-06-14 03:24 - 2017-05-14 13:57 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
    2017-06-14 03:24 - 2017-05-14 13:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
    2017-06-14 03:24 - 2017-05-14 13:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
    2017-06-14 03:24 - 2017-05-14 13:54 - 15252992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
    2017-06-14 03:24 - 2017-05-14 13:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
    2017-06-14 03:24 - 2017-05-14 13:52 - 03240960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
    2017-06-14 03:24 - 2017-05-14 13:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
    2017-06-14 03:24 - 2017-05-14 13:50 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
    2017-06-14 03:24 - 2017-05-14 13:49 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
    2017-06-14 03:24 - 2017-05-14 13:44 - 04549120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
    2017-06-14 03:24 - 2017-05-14 13:42 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
    2017-06-14 03:24 - 2017-05-14 13:40 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
    2017-06-14 03:24 - 2017-05-14 13:39 - 02057216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
    2017-06-14 03:24 - 2017-05-14 13:38 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
    2017-06-14 03:24 - 2017-05-14 13:37 - 01544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
    2017-06-14 03:24 - 2017-05-14 13:30 - 13664768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
    2017-06-14 03:24 - 2017-05-14 13:27 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
    2017-06-14 03:24 - 2017-05-14 13:15 - 02767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
    2017-06-14 03:24 - 2017-05-14 13:11 - 01314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
    2017-06-14 03:24 - 2017-05-14 13:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
    2017-06-14 03:24 - 2017-05-12 13:27 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
    2017-06-14 03:24 - 2017-05-12 13:26 - 05547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
    2017-06-14 03:24 - 2017-05-12 13:26 - 00706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
    2017-06-14 03:24 - 2017-05-12 13:26 - 00382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
    2017-06-14 03:24 - 2017-05-12 13:24 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:07 - 04001000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
    2017-06-14 03:24 - 2017-05-12 13:07 - 03945704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
    2017-06-14 03:24 - 2017-05-12 13:07 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
    2017-06-14 03:24 - 2017-05-12 13:04 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 12:55 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
    2017-06-14 03:24 - 2017-05-12 12:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
    2017-06-14 03:24 - 2017-05-12 12:54 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
    2017-06-14 03:24 - 2017-05-12 12:52 - 03222528 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
    2017-06-14 03:24 - 2017-05-12 12:51 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
    2017-06-14 03:24 - 2017-05-12 12:50 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
    2017-06-14 03:24 - 2017-05-12 12:46 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
    2017-06-14 03:24 - 2017-05-12 12:43 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
    2017-06-14 03:24 - 2017-05-12 12:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
    2017-06-14 03:24 - 2017-05-12 12:41 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
    2017-06-14 03:24 - 2017-05-12 12:41 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
    2017-06-14 03:24 - 2017-05-12 12:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
    2017-06-14 03:24 - 2017-05-12 12:40 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 12:40 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 12:40 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 12:40 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 11:25 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
    2017-06-14 03:24 - 2017-05-12 10:58 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
    2017-06-14 03:24 - 2017-05-12 10:58 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
    2017-06-14 03:24 - 2017-05-10 10:33 - 00091368 _____ (Microsoft Corporation) C:\Windows\system32\MigAutoPlay.exe
    2017-06-14 03:24 - 2017-05-10 10:29 - 14183936 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
    2017-06-14 03:24 - 2017-05-10 10:29 - 03165184 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
    2017-06-14 03:24 - 2017-05-10 10:29 - 01867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
    2017-06-14 03:24 - 2017-05-10 10:29 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
    2017-06-14 03:24 - 2017-05-10 10:29 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
    2017-06-14 03:24 - 2017-05-10 10:28 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
    2017-06-14 03:24 - 2017-05-10 10:16 - 00091368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MigAutoPlay.exe
    2017-06-14 03:24 - 2017-05-10 10:14 - 02651136 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
    2017-06-14 03:24 - 2017-05-10 10:13 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
    2017-06-14 03:24 - 2017-05-10 10:13 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
    2017-06-14 03:24 - 2017-05-10 10:13 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
    2017-06-14 03:24 - 2017-05-10 10:13 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
    2017-06-14 03:24 - 2017-05-10 10:13 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
    2017-06-14 03:24 - 2017-05-10 10:13 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
    2017-06-14 03:24 - 2017-05-10 10:12 - 12880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
    2017-06-14 03:24 - 2017-05-10 10:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
    2017-06-14 03:24 - 2017-05-10 10:12 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
    2017-06-14 03:24 - 2017-05-10 10:00 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
    2017-06-14 03:24 - 2017-05-10 10:00 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
    2017-06-14 03:24 - 2017-05-10 10:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
    2017-06-14 03:24 - 2017-05-10 10:00 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
    2017-06-14 03:24 - 2017-05-10 09:52 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
    2017-06-14 03:24 - 2017-05-09 10:30 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
    2017-06-14 03:24 - 2017-05-09 10:29 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
    2017-06-14 03:24 - 2017-05-09 10:11 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
    2017-06-14 03:24 - 2017-05-07 10:33 - 00094440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
    2017-06-14 03:24 - 2017-05-07 10:29 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
    2017-06-14 03:24 - 2017-04-27 17:50 - 03550208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
    2017-06-14 03:24 - 2017-04-12 08:05 - 04296704 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
    2017-06-14 03:24 - 2017-03-30 10:03 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\rundll32.exe
    2017-06-14 03:24 - 2017-03-30 09:58 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
    2017-06-12 06:55 - 2017-06-12 06:55 - 00048944 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
    2017-06-12 06:52 - 2017-06-12 06:52 - 00045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
    2017-06-12 06:52 - 2017-06-12 06:52 - 00045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
    2017-06-12 06:52 - 2017-06-12 06:52 - 00045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
    2017-06-08 15:28 - 2017-06-08 15:28 - 00001209 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
    2017-06-08 15:28 - 2017-06-08 15:28 - 00001197 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
    2017-06-07 14:12 - 2017-05-28 13:09 - 27071391 _____ C:\Users\Battlefield\Downloads\BFHMenu.psd
    2017-06-06 15:00 - 2017-06-06 15:00 - 00000000 ____D C:\Users\Jordan\AppData\Roaming\DivX
    2017-06-06 13:42 - 2017-06-06 13:42 - 00000000 ____D C:\Users\Jordan\AppData\Local\Tempzxpsigne974a45c9caabc93
    2017-06-06 13:42 - 2017-06-06 13:42 - 00000000 ____D C:\Users\Jordan\AppData\Local\Tempzxpsign70ba92ffa88b188b
    2017-06-06 13:42 - 2017-06-06 13:42 - 00000000 ____D C:\Users\Jordan\AppData\Local\Tempzxpsign5a4936c86f71bbd5
    2017-06-06 13:42 - 2017-06-06 13:42 - 00000000 ____D C:\Users\Jordan\AppData\Local\Tempzxpsign4e4231ef06791530
    2017-06-01 12:06 - 2017-06-01 12:07 - 14664470 _____ C:\Users\Battlefield\Downloads\Pic.zip
    2017-05-31 15:47 - 2017-05-31 15:47 - 00000000 ____D C:\Users\Battlefield\AppData\Local\Tempzxpsign18a29e0bc9d89a08
    2017-05-31 15:44 - 2017-05-31 15:44 - 00000000 ____D C:\Users\Battlefield\AppData\Local\Tempzxpsignf4d480f6c159f900
    2017-05-31 15:44 - 2017-05-31 15:44 - 00000000 ____D C:\Users\Battlefield\AppData\Local\Tempzxpsigna146114e990e54a8
    2017-05-31 15:38 - 2017-05-31 15:39 - 00000000 ____D C:\Users\Battlefield\Documents\Battlefield FRONTLINES
    2017-05-31 15:37 - 2017-05-31 15:38 - 00000000 ____D C:\Users\Battlefield\Documents\Battlefield HOUSTON
    2017-05-31 15:35 - 2017-05-31 15:39 - 00000000 ____D C:\Users\Battlefield\Documents\West Little York
    2017-05-31 15:34 - 2017-05-31 15:39 - 00000000 ____D C:\Users\Battlefield\Documents\P-L
    2017-05-31 15:34 - 2017-05-31 15:39 - 00000000 ____D C:\Users\Battlefield\Documents\Balance Sheet
    2017-05-31 15:33 - 2017-05-31 15:33 - 00000000 ____D C:\Users\Battlefield\Documents\Valley Ridge Pkwy
    2017-05-31 15:27 - 2017-05-31 15:33 - 00000000 ____D C:\Users\Battlefield\Documents\Tax Return
    2017-05-31 15:09 - 2017-05-31 15:09 - 00002260 _____ C:\Users\Public\Desktop\QuickBooks Desktop File Doctor.lnk
    2017-05-31 15:09 - 2017-05-31 15:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickBooks Desktop File Doctor
    2017-05-31 13:12 - 2017-05-31 13:12 - 00000000 ____D C:\Users\Jordan\AppData\Local\Tempzxpsign0df6eec6484a989b
    2017-05-31 12:46 - 2017-05-31 12:46 - 00000000 ____D C:\Users\Jordan\AppData\Local\Tempzxpsigne34feb0ccd073179
    2017-05-31 12:46 - 2017-05-31 12:46 - 00000000 ____D C:\Users\Jordan\AppData\Local\Tempzxpsign69ae824cf7844bc2
    2017-05-31 12:46 - 2017-05-31 12:46 - 00000000 ____D C:\Users\Jordan\AppData\Local\Tempzxpsign09d5ce34862afbb1
    2017-05-30 14:55 - 2017-05-30 14:55 - 00013465 _____ C:\Users\Battlefield\Downloads\BFHoustonBirthdayPricing.xlsx
    2017-05-25 16:44 - 2017-05-25 16:44 - 00003344 _____ C:\Windows\System32\Tasks\AGProxyCheck
    2017-05-25 16:44 - 2017-05-25 16:44 - 00000000 ____D C:\Users\Battlefield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnonymizerGadget
    2017-05-25 16:43 - 2017-05-25 16:55 - 00000000 ____D C:\Program Files (x86)\WebDiscoverBrowser
    2017-05-25 16:43 - 2017-05-25 16:43 - 06178317 _____ C:\Users\Battlefield\Downloads\illustrator_for_beginners_tastytuts.pdf
    2017-05-25 16:43 - 2017-05-25 16:43 - 00000000 ____D C:\Users\Battlefield\AppData\Roaming\InstantSupport
    2017-05-25 16:43 - 2017-05-25 16:43 - 00000000 ____D C:\Program Files (x86)\SSO
    2017-05-25 16:43 - 2017-05-25 16:43 - 00000000 ____D C:\Program Files (x86)\Installer_P.C.A.P
    2017-05-25 16:42 - 2017-05-25 16:55 - 00000000 ____D C:\Users\Battlefield\AppData\Roaming\Primitives
    2017-05-25 16:42 - 2017-05-25 16:42 - 00000032 _____ C:\Users\Battlefield\Downloads\265598
    2017-05-25 16:42 - 2017-05-25 16:42 - 00000032 _____ C:\Users\Battlefield\Downloads\199710
    2017-05-25 16:42 - 2017-05-25 16:42 - 00000000 ____D C:\Program Files (x86)\PixelStarSetup
    2017-05-25 16:41 - 2017-05-25 16:43 - 293173839 _____ C:\Users\Battlefield\Downloads\Illustrator_beginenrs_guide_TastyTuts.rar
    2017-05-25 16:02 - 2017-05-25 16:02 - 00056476 _____ C:\Users\Battlefield\Downloads\preview (1).pdf
    2017-05-25 15:48 - 2017-05-25 15:48 - 00056680 _____ C:\Users\Battlefield\Downloads\preview.pdf
    2017-05-25 14:52 - 2017-05-25 14:52 - 00000000 ____D C:\Users\Battlefield\AppData\Local\Tempzxpsign15054d050a48fc26
    2017-05-25 11:44 - 2017-05-25 11:44 - 00000000 ____D C:\Users\Battlefield\AppData\Local\Tempzxpsign8fe1f76f6442a496
    2017-05-25 11:44 - 2017-05-25 11:44 - 00000000 ____D C:\Users\Battlefield\AppData\Local\Tempzxpsign84a94859a94687fe

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2017-06-24 18:28 - 2013-09-22 12:07 - 01496034 _____ C:\Windows\ntbtlog.txt
    2017-06-24 18:25 - 2015-07-27 21:48 - 00000000 ___RD C:\Users\Battlefield\OneDrive
    2017-06-24 18:25 - 2015-02-21 20:04 - 00000000 ____D C:\ProgramData\boost_interprocess
    2017-06-24 18:25 - 2013-09-30 12:16 - 00000000 ____D C:\Users\Battlefield\AppData\Local\CrashDumps
    2017-06-24 18:23 - 2011-10-20 14:58 - 00000000 ____D C:\QuickBookData
    2017-06-24 18:19 - 2016-07-27 13:31 - 00000914 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
    2017-06-24 18:19 - 2011-10-21 13:55 - 00000000 ____D C:\ProgramData\NVIDIA
    2017-06-24 18:19 - 2009-07-14 00:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
    2017-06-24 13:56 - 2016-11-18 23:14 - 00000000 ____D C:\Users\CJ
    2017-06-24 13:53 - 2009-07-14 00:13 - 00007920 _____ C:\Windows\system32\PerfStringBackup.INI
    2017-06-24 13:48 - 2009-07-13 23:45 - 05381648 _____ C:\Windows\system32\FNTCACHE.DAT
    2017-06-24 12:51 - 2016-07-27 13:31 - 00000918 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
    2017-06-23 10:18 - 2016-01-05 16:21 - 00000000 ___RD C:\Users\Battlefield\Creative Cloud Files
    2017-06-23 10:18 - 2011-10-20 15:38 - 00000000 ____D C:\Users\Battlefield\AppData\Local\Adobe
    2017-06-23 04:51 - 2009-07-13 23:45 - 00029120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2017-06-23 04:51 - 2009-07-13 23:45 - 00029120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2017-06-20 12:49 - 2012-10-26 16:02 - 00000000 ____D C:\ProgramData\Package Cache
    2017-06-20 12:49 - 2011-10-20 14:55 - 00189784 _____ C:\Users\Battlefield\AppData\Local\GDIPFONTCACHEV1.DAT
    2017-06-20 12:48 - 2014-11-14 17:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CenterEdge Software
    2017-06-20 12:48 - 2013-03-16 19:56 - 00000000 ____D C:\Program Files (x86)\CenterEdge Software
    2017-06-18 15:53 - 2016-11-25 18:06 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork
    2017-06-18 15:53 - 2012-09-20 11:19 - 00000910 _____ C:\Windows\wininit.ini
    2017-06-18 15:33 - 2012-09-20 10:57 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
    2017-06-18 15:06 - 2011-10-21 13:49 - 00000000 ____D C:\Users\Battlefield
    2017-06-18 02:00 - 2016-11-18 23:14 - 00000000 ____D C:\Users\CJ\AppData\Local\Adobe
    2017-06-17 23:45 - 2015-05-14 11:20 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
    2017-06-17 23:33 - 2016-11-18 23:14 - 00189784 _____ C:\Users\CJ\AppData\Local\GDIPFONTCACHEV1.DAT
    2017-06-17 23:33 - 2016-11-18 23:14 - 00000000 ____D C:\Users\CJ\AppData\Local\Dropbox
    2017-06-17 14:01 - 2016-07-26 13:51 - 00000000 ____D C:\Users\Battlefield\Desktop\BATTLEFIELD PRINT OUTS
    2017-06-16 02:00 - 2016-11-16 14:41 - 00000000 ____D C:\Users\Jordan\AppData\Local\Adobe
    2017-06-15 04:33 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\rescache
    2017-06-15 03:31 - 2013-02-02 15:20 - 00000000 ____D C:\Program Files\Microsoft Silverlight
    2017-06-15 03:31 - 2013-02-02 15:20 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
    2017-06-15 03:29 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz
    2017-06-15 03:29 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\system32\migwiz
    2017-06-15 03:14 - 2015-05-14 03:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
    2017-06-15 03:12 - 2013-08-11 16:09 - 00000000 ____D C:\Windows\system32\MRT
    2017-06-15 03:03 - 2011-10-21 13:08 - 133627792 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
    2017-06-14 19:30 - 2016-11-16 14:41 - 00000000 ____D C:\Users\Jordan\AppData\Local\Dropbox
    2017-06-14 19:30 - 2009-07-14 00:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
    2017-06-14 13:37 - 2016-07-27 13:31 - 00000000 ____D C:\Program Files (x86)\Dropbox
    2017-06-14 13:36 - 2015-07-16 12:45 - 00000000 ____D C:\Users\Battlefield\AppData\Local\Dropbox
    2017-06-13 12:17 - 2016-12-15 17:33 - 00003196 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task v2
    2017-06-13 12:17 - 2015-07-27 21:48 - 00002184 _____ C:\Users\Battlefield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
    2017-06-12 09:16 - 2016-11-16 14:41 - 00000000 ____D C:\Users\Jordan\AppData\Roaming\Adobe
    2017-06-09 15:15 - 2011-10-20 15:38 - 00000000 ____D C:\Users\Battlefield\AppData\Roaming\Adobe
    2017-06-08 12:21 - 2011-10-20 15:38 - 00000000 ____D C:\Program Files (x86)\Adobe
    2017-06-07 14:12 - 2014-10-24 15:35 - 00000000 ____D C:\Users\Battlefield\Downloads\RGB123_LED_Matrix_Case
    2017-06-07 12:46 - 2009-07-14 00:32 - 00000000 ____D C:\Windows\system32\FxsTmp
    2017-06-06 16:04 - 2014-04-15 16:31 - 00000000 ____D C:\Users\Battlefield\Documents\LegalDocs
    2017-06-06 13:42 - 2016-11-16 17:54 - 00000033 _____ C:\Users\Jordan\AppData\Roaming\AdobeWLCMCache.dat
    2017-06-03 16:58 - 2014-08-10 14:50 - 00000033 _____ C:\Users\Battlefield\AppData\Roaming\AdobeWLCMCache.dat
    2017-06-03 16:29 - 2013-12-03 14:36 - 00000000 ____D C:\Users\QBDataServiceUser24
    2017-06-02 21:19 - 2017-05-24 16:40 - 00000028 _____ C:\Users\Battlefield\AppData\Roaming\kulerdata.json
    2017-05-31 15:09 - 2011-10-20 14:48 - 00000000 ____D C:\Program Files (x86)\Intuit
    2017-05-31 15:08 - 2012-02-26 12:27 - 00000000 ____D C:\Users\Battlefield\AppData\Local\Downloaded Installations
    2017-05-31 14:59 - 2016-11-16 14:41 - 00000000 ____D C:\Users\Jordan\AppData\Local\Intuit
    2017-05-31 10:44 - 2016-11-16 14:41 - 00189784 _____ C:\Users\Jordan\AppData\Local\GDIPFONTCACHEV1.DAT
    2017-05-30 15:45 - 2010-11-20 22:27 - 00565416 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
    2017-05-29 20:35 - 2016-08-14 14:12 - 00000000 ____D C:\ProgramData\Sony Corporation
    2017-05-29 20:35 - 2012-04-09 15:57 - 00000000 ____D C:\Program Files (x86)\Sony
    2017-05-28 19:20 - 2011-10-20 14:48 - 00000090 _____ C:\Windows\QBChanUtil_Trigger.ini
    2017-05-27 15:40 - 2015-07-25 12:56 - 00000000 ____D C:\Users\Battlefield\AppData\Local\Akamai
    2017-05-26 11:56 - 2016-11-21 17:10 - 00000000 ____D C:\Users\Battlefield\Documents\jordan
    2017-05-25 16:48 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\inf

    ==================== Files in the root of some directories =======

    2010-09-26 10:04 - 2010-09-26 10:04 - 0069632 _____ (Elibrium, LLC) C:\Program Files (x86)\Common Files\ClacAdv.dll
    2010-09-26 10:04 - 2010-09-26 10:04 - 0126976 _____ (Elibrium, LLC) C:\Program Files (x86)\Common Files\ClacStmp.dll
    2010-09-26 10:04 - 2010-09-26 10:04 - 0028672 _____ (Elibrium, Inc) C:\Program Files (x86)\Common Files\MYSWHelpComp.dll
    2010-09-26 10:04 - 2010-09-26 10:04 - 0094208 _____ (Avanquest Publishing USA Inc.) C:\Program Files (x86)\Common Files\regdll.dll
    2012-09-05 13:20 - 2014-09-21 22:36 - 0000132 _____ () C:\Users\Battlefield\AppData\Roaming\Adobe BMP Format CS6 Prefs
    2011-11-11 14:44 - 2012-02-19 11:52 - 0000132 _____ () C:\Users\Battlefield\AppData\Roaming\Adobe GIF Format CS5 Prefs
    2011-11-11 14:46 - 2012-06-08 12:44 - 0000132 _____ () C:\Users\Battlefield\AppData\Roaming\Adobe PNG Format CS5 Prefs
    2012-10-01 17:41 - 2014-07-18 03:06 - 0000132 _____ () C:\Users\Battlefield\AppData\Roaming\Adobe PNG Format CS6 Prefs
    2014-08-10 14:50 - 2017-06-03 16:58 - 0000033 _____ () C:\Users\Battlefield\AppData\Roaming\AdobeWLCMCache.dat
    2011-10-20 14:17 - 2013-06-11 12:50 - 0003284 _____ () C:\Users\Battlefield\AppData\Roaming\ANIWZCS{CE60960A-05CC-4685-B18F-B63497DE832F}
    2015-01-28 14:53 - 2015-01-28 14:53 - 0026458 _____ () C:\Users\Battlefield\AppData\Roaming\Comma Separated Values.ADR
    2013-12-05 15:17 - 2017-05-31 15:11 - 0003520 _____ () C:\Users\Battlefield\AppData\Roaming\FileDrTool.log
    2017-05-24 16:40 - 2017-06-02 21:19 - 0000028 _____ () C:\Users\Battlefield\AppData\Roaming\kulerdata.json
    2015-02-17 15:40 - 2016-10-31 13:08 - 0002785 _____ () C:\Users\Battlefield\AppData\Roaming\QBFileDrTool.log
    2011-11-30 12:51 - 2012-09-06 17:37 - 0001456 _____ () C:\Users\Battlefield\AppData\Local\Adobe Save for Web 12.0 Prefs
    2012-09-10 09:37 - 2017-02-08 16:10 - 0001456 _____ () C:\Users\Battlefield\AppData\Local\Adobe Save for Web 13.0 Prefs
    2014-08-07 18:01 - 2014-08-07 18:01 - 0000000 _____ () C:\Users\Battlefield\AppData\Local\debuggee.mdmp
    2013-07-27 19:52 - 2015-01-17 21:41 - 0000600 _____ () C:\Users\Battlefield\AppData\Local\PUTTY.RND
    2015-04-23 14:51 - 2015-04-23 14:51 - 0000751 _____ () C:\Users\Battlefield\AppData\Local\recently-used.xbel
    2013-03-24 13:36 - 2016-09-17 15:01 - 0007667 _____ () C:\Users\Battlefield\AppData\Local\Resmon.ResmonCfg
    2011-12-01 14:43 - 2011-12-01 14:43 - 0000057 _____ () C:\ProgramData\Ament.ini
    2013-06-25 19:01 - 2015-01-27 00:28 - 0004417 _____ () C:\ProgramData\hpzinstall.log
    2012-11-30 22:15 - 2015-06-07 00:07 - 0000039 _____ () C:\ProgramData\IpAndPort.fig
    2012-11-30 15:13 - 2015-06-07 00:07 - 0000227 _____ () C:\ProgramData\RmUserCfg.ini

    ==================== Bamital & volsnap ======================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\system32\winlogon.exe => File is digitally signed
    C:\Windows\system32\wininit.exe => File is digitally signed
    C:\Windows\SysWOW64\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\system32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\system32\services.exe => File is digitally signed
    C:\Windows\system32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\system32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\system32\rpcss.dll => File is digitally signed
    C:\Windows\system32\dnsapi.dll => File is digitally signed
    C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
    C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

    LastRegBack: 2017-06-22 00:36

    ==================== End of FRST.txt ============================


    Addition:

    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-06-2017 01
    Ran by Battlefield (24-06-2017 18:32:46)
    Running from C:\Users\Battlefield\Downloads
    Windows 7 Home Premium Service Pack 1 (X64) (2011-10-21 18:49:17)
    Boot Mode: Safe Mode (with Networking)
    ==========================================================


    ==================== Accounts: =============================

    Administrator (S-1-5-21-3544609310-1622349089-2069013866-500 - Administrator - Disabled)
    Battlefield (S-1-5-21-3544609310-1622349089-2069013866-1000 - Administrator - Enabled) => C:\Users\Battlefield
    CJ (S-1-5-21-3544609310-1622349089-2069013866-1019 - Limited - Enabled) => C:\Users\CJ
    Guest (S-1-5-21-3544609310-1622349089-2069013866-501 - Limited - Disabled)
    HomeGroupUser$ (S-1-5-21-3544609310-1622349089-2069013866-1003 - Limited - Enabled)
    Jordan (S-1-5-21-3544609310-1622349089-2069013866-1018 - Limited - Enabled) => C:\Users\Jordan
    photoshop (S-1-5-21-3544609310-1622349089-2069013866-1006 - Limited - Enabled)
    QBDataServiceUser21 (S-1-5-21-3544609310-1622349089-2069013866-1004 - Limited - Enabled) => C:\Users\QBDataServiceUser21
    QBDataServiceUser24 (S-1-5-21-3544609310-1622349089-2069013866-1017 - Limited - Enabled) => C:\Users\QBDataServiceUser24

    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: Microsoft Security Essentials (Disabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
    AS: Spybot - Search and Destroy (Disabled - Up to date) {A16C3F68-9280-E053-1818-342707FECF4D}
    AS: Microsoft Security Essentials (Disabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
    AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    ==================== Installed Programs ======================

    (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    64 Bit HP CIO Components Installer (Version: 6.2.1 - Hewlett-Packard) Hidden
    7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
    8600_Help (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
    8600_Readme (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
    Adobe Acrobat DC (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)
    Adobe After Effects CC 2014 (HKLM-x32\...\{2B22C750-5C3B-4738-B621-BA786AC7A494}) (Version: 13.2.0 - Adobe Systems Incorporated)
    Adobe After Effects CS5.5 Third Party Content (HKLM-x32\...\{606A0AC5-5F90-4379-81AE-11B44707E094}) (Version: 10.5 - Adobe Systems Incorporated)
    Adobe After Effects CS6 (HKLM-x32\...\{4817D846-700B-474E-A31B-80892B3E92E3}) (Version: 11.0.4 - Adobe Systems Incorporated)
    Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.178 - Adobe Systems Incorporated)
    Adobe Audition CC 2014 (HKLM-x32\...\{F3388E10-EFA9-4A80-B28E-2E647F8D00C4}) (Version: 7.2.0 - Adobe Systems Incorporated)
    Adobe Audition CS6 (HKLM-x32\...\{30FD541D-3C9D-41C4-B240-A994EE4E0231}) (Version: 5.0 - Adobe Systems Incorporated)
    Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.1.1.202 - Adobe Systems Incorporated)
    Adobe Creative Suite 5.5 Production Premium (HKLM-x32\...\{7F05F449-4DC4-4E02-A8D1-4A3ED7DD5FA3}) (Version: 5.5 - Adobe Systems Incorporated)
    Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.6 - Adobe Systems Incorporated)
    Adobe Dreamweaver CS5.5 (HKLM-x32\...\{0215A652-E081-4B09-9333-DC85AAB67FFA}) (Version: 11.5 - Adobe Systems Incorporated)
    Adobe Edge Animate (HKLM-x32\...\{6A725C8E-E4E1-474A-A2B1-C17CCC48EC01}) (Version: 1.0 - Adobe Systems Incorporated)
    Adobe Edge Inspect (HKLM-x32\...\{BF73C0A4-5E3D-4C6F-8164-C0CCA57E32C8}) (Version: 1.0.327 - Adobe Systems Incorporated)
    Adobe Fireworks CS5 (HKLM-x32\...\{164965E8-4BB0-4EEB-AFBA-75785A2A2A7F}) (Version: 11.0 - Adobe Systems Incorporated)
    Adobe Fireworks CS6 (HKLM-x32\...\{CA7C485C-7A89-11E1-B2C8-CD54B377BC52}) (Version: 12.0.1 - Adobe Systems Incorporated)
    Adobe Flash Player 11 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 11.8.800.168 - Adobe Systems Incorporated)
    Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.188 - Adobe Systems Incorporated)
    Adobe Flash Professional CC 2014 (HKLM-x32\...\{AA704223-E11C-11E3-8A38-C09A633B72AF}) (Version: 14.1 - Adobe Systems Incorporated)
    Adobe Flash Professional CS6 (HKLM-x32\...\{BD5669B5-49FF-4490-B956-E9D7CB9B0ADC}) (Version: 12.0 - Adobe Systems Incorporated)
    Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
    Adobe Illustrator CC 2017 (HKLM-x32\...\ILST_21_1_0) (Version: 21.1.0 - Adobe Systems Incorporated)
    Adobe Illustrator CS6 (HKLM-x32\...\{4869414E-7AEA-4C8E-BE1C-8D40977FD517}) (Version: 16.0 - Adobe Systems Incorporated)
    Adobe InDesign CC 2017 (HKLM-x32\...\IDSN_12_1_0) (Version: 12.1.0 - Adobe Systems Incorporated)
    Adobe InDesign CS6 (HKLM-x32\...\{CFB770D7-8D43-1014-922B-CC2715FADE3F}) (Version: 8.1.0.422 - Adobe Systems Incorporated)
    Adobe Media Encoder CC 2014 (HKLM-x32\...\{663DEEEF-EF34-4DCB-8687-73A7AA146E02}) (Version: 8.2.0 - Adobe Systems Incorporated)
    Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1 - Adobe Systems Incorporated)
    Adobe Photoshop CC 2017 (HKLM-x32\...\PHSP_18_1_1) (Version: 18.1.1 - Adobe Systems Incorporated)
    Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
    Adobe Photoshop Lightroom 4.1 64-bit (HKLM\...\{F7ADB493-B913-4D61-9A63-DA736C20C3F2}) (Version: 4.1.2 - Adobe)
    Adobe Photoshop Lightroom 5.5 64-bit (HKLM\...\{19BBD0F3-7A31-480D-8A23-19AE28035E9C}) (Version: 5.5.0 - Adobe Systems Incorporated)
    Adobe Premiere Pro CC 2014 (HKLM-x32\...\{07BE616F-9E42-4C90-AF4F-0F32A5B088E7}) (Version: 8.2.0 - Adobe Systems Incorporated)
    Adobe Premiere Pro CS6 (HKLM-x32\...\{7176B973-6011-43C1-AEBC-2D73FE7C6982}) (Version: 6.0 - Adobe Systems Incorporated)
    Adobe Reader X (10.1.11) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.11 - Adobe Systems Incorporated)
    Adobe SpeedGrade CC 2014 (HKLM-x32\...\{8EFF28F0-9DFD-4208-9E04-4D49A4812CF3}) (Version: 8.2.0 - Adobe Systems Incorporated)
    Adobe SpeedGrade CS6 (HKLM-x32\...\{3D46121C-A0E6-4259-B7E0-5127C218A096}) (Version: 6.0.0 - Adobe Systems Incorporated)
    Adobe Story (HKLM-x32\...\com.adobe.AdobeStory.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.0.571 - Adobe Systems Incorporated)
    Adobe Touch App Plugins (HKLM-x32\...\{1EC083EE-5B76-4A2A-B95A-CAF460AA29D6}) (Version: 1.0 - Adobe Systems Incorporated)
    Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser.E7BED6E5DDA59983786DD72EBFA46B1598278E07.1) (Version: 2.0 Build 230 - Adobe Systems Incorporated.)
    Adobe® Content Viewer (HKLM-x32\...\com.adobe.dmp.contentviewer) (Version: 3.4.3 - Adobe Systems, Incorporated)
    AI Suite II (HKLM-x32\...\{34D3688E-A737-44C5-9E2A-FF73618728E1}) (Version: 2.01.01 - ASUSTeK Computer Inc.)
    Akamai NetSession Interface (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\Akamai) (Version: - Akamai Technologies, Inc)
    Android SDK Tools (HKLM-x32\...\Android SDK Tools) (Version: 1.16 - Google Inc.)
    Apple Application Support (32-bit) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
    Apple Application Support (64-bit) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.)
    Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
    Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
    Application Insights Tools for Visual Studio 2013 (x32 Version: 2.4 - Microsoft Corporation) Hidden
    Application Insights Tools for Visual Studio 2015 Preview (x32 Version: 3.0 - Microsoft Corporation) Hidden
    Arduino (HKLM-x32\...\Arduino) (Version: 1.6.3 - Arduino LLC)
    Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.10.0.0 - Asmedia Technology)
    Autodesk DWG TrueView 2015 - English (HKLM\...\DWG TrueView 2015 - English) (Version: 20.0.210.0 - Autodesk)
    Avery Teoma Search App (HKLM-x32\...\{4156522D-5447-006A-76A7-A758B70C2D01}) (Version: 12.45.1.1317 - APN, LLC)
    AzureTools.Notifications (x32 Version: 2.1.10731.1602 - Microsoft Corporation) Hidden
    AzureTools.Notifications (x32 Version: 2.4.20714.1601 - Microsoft Corporation) Hidden
    Battlefield Houston - Client (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\1df8928e2c062db7) (Version: 2.1.2.2 - Jessica Pittman)
    Battlefield Houston - Server (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\97442b722a32a1d7) (Version: 2.2.0.11 - Jessica Pittman)
    Battlefield Scoring (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\a517dafcecd8ee49) (Version: 1.0.0.4 - Jessica Pittman)
    Behaviors SDK (Windows Phone) for Visual Studio 2013 (x32 Version: 12.0.50926.80 - Microsoft Corporation) Hidden
    Behaviors SDK (Windows) for Visual Studio 2013 (x32 Version: 12.0.50926.80 - Microsoft Corporation) Hidden
    bl (x32 Version: 1.0.0 - Your Company Name) Hidden
    Blend for Visual Studio 2013 (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
    Blend for Visual Studio 2013 ENU resources (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
    Blend for Visual Studio Add-in for Adobe FXG Import (x32 Version: 1.0.40218.0 - Microsoft Corporation) Hidden
    Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
    Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
    Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
    BPDSoftware (x32 Version: 130.0.000.000 - Hewlett-Packard) Hidden
    BPDSoftware_Ini (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
    BrightAuthor (HKLM-x32\...\{98418140-3FEC-4866-9A08-D5E55567F3C6}) (Version: 3.7.0.37 - BrightSign)
    BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
    Build Tools - amd64 (Version: 12.0.31101 - Microsoft Corporation) Hidden
    Build Tools - x86 (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
    Build Tools 14.0 (amd64) (Version: 14.0.22310 - Microsoft Corporation) Hidden
    Build Tools 14.0 (x86) (x32 Version: 14.0.22310 - Microsoft Corporation) Hidden
    Build Tools Language Resources - amd64 (Version: 12.0.31101 - Microsoft Corporation) Hidden
    Build Tools Language Resources - x86 (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
    Build Tools Language Resources 14.0 (amd64) (Version: 14.0.22310 - Microsoft Corporation) Hidden
    Build Tools Language Resources 14.0 (x86) (x32 Version: 14.0.22310 - Microsoft Corporation) Hidden
    CenterEdge Advantage 17.1.26.1816 (HKLM-x32\...\{74c1a795-cf8e-40a8-81fb-6fa5d585fdde}) (Version: 17.1.26.1816 - CenterEdge Software)
    CenterEdge Advantage 17.1.26.1816 (x32 Version: 17.1.1816 - CenterEdge Software) Hidden
    CenterEdge Advantage Reporting 10.1.1 (HKLM-x32\...\{14FA5573-9162-4435-AB94-D50EF52628CD}) (Version: 10.1.1 - CenterEdge Software)
    CenterEdge Advantage Sign Editor 14.4.15.331 (HKLM-x32\...\{DEFE5D78-C354-4F64-8A50-C4B2AAB6DD52}) (Version: 14.4.0331 - CenterEdge Software)
    CenterEdge Advantage Signage 14.4.15.331 (HKLM-x32\...\{6F52E11B-C13E-49B8-8974-0AA2F3F5808D}) (Version: 14.4.0331 - CenterEdge Software)
    Check Designer (HKLM-x32\...\{A5E65B95-F016-474D-BC0D-6AF64412BBDF}) (Version: 11.0.0.0 - Avanquest North America, Inc.)
    Chief Architect X2 (HKLM-x32\...\{35AF2D74-7048-876E-1869-68B6D635F446}) (Version: 12.1.2.29 - Chief Architect)
    Cisco Connect (HKLM-x32\...\Cisco Connect) (Version: 1.4.11299.0 - Cisco Consumer Products LLC)
    Cisco WebEx Meetings (HKLM-x32\...\ActiveTouchMeetingClient) (Version: - Cisco WebEx LLC)
    Citrix Online Launcher (HKLM-x32\...\{C1D35D06-E60A-4834-9B52-F1F3E65D03C9}) (Version: 1.0.239 - Citrix)
    Command Center (Development) (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\bde0a3ab2c906615) (Version: 1.1.5.3 - Jessica Pittman)
    Complemento do Microsoft Report Viewer para Visual Studio 2013 (x32 Version: 11.1.3442.2 - Microsoft Corporation) Hidden
    Complemento Microsoft Report Viewer para Visual Studio 2013 (x32 Version: 11.1.3442.2 - Microsoft Corporation) Hidden
    Compon. agg. Microsoft Report Viewer per Visual Studio 2013 (x32 Version: 11.1.3442.2 - Microsoft Corporation) Hidden
    Copy (x32 Version: 130.0.366.000 - Hewlett-Packard) Hidden
    Cura 1.1.1 (HKLM-x32\...\cura-type-a_1.1.1) (Version: - )
    CutePDF Writer 2.8 (HKLM\...\CutePDF Writer Installation) (Version: - )
    D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
    Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
    DevExpress Components 14.2 (HKLM-x32\...\DevExpress Components 14.2) (Version: 14.2.4 - Developer Express Inc.)
    DevExpress Components 15.1 (HKLM-x32\...\DevExpress Components 15.1) (Version: 15.1.3 - Developer Express Inc.)
    DevExpress Documentation (HKLM-x32\...\DevExpress Documentation) (Version: - Developer Express Inc.)
    DevExpress WPF Demos (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\4e41a8afeb5c478d) (Version: 14.2.3.0 - Developer Express Inc.)
    DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
    Digi XCTU (HKLM\...\XCTU_6.1) (Version: 6.1.0.3 - Digi International)
    DisplayLink Core Software (HKLM\...\{DAA61D41-4809-46C6-9AE4-13A61C54FA23}) (Version: 7.2.47873.0 - DisplayLink Corp.)
    DivX Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.9 - DivX, LLC)
    Dog Tag (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\87a4474b070f97dc) (Version: 1.0.0.7 - Microsoft)
    Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4954.46574 - PreEmptive Solutions) Hidden
    Dotfuscator and Analytics Community Edition 5.16.0 (x32 Version: 5.16.0.2178 - PreEmptive Solutions) Hidden
    Dropbox (HKLM-x32\...\Dropbox) (Version: 28.4.14 - Dropbox, Inc.)
    Dropbox Update Helper (x32 Version: 1.3.59.1 - Dropbox, Inc.) Hidden
    DWG TrueView 2015 - English (Version: 20.0.210.0 - Autodesk) Hidden
    EAGLE 6.5.0 (HKLM-x32\...\EAGLE 6.5.0) (Version: 6.5.0 - CadSoft Computer GmbH)
    EAGLE 7.1.0 (HKLM-x32\...\EAGLE 7.1.0) (Version: 7.1.0 - CadSoft Computer GmbH)
    EMET 4.1 Update 1 (HKLM-x32\...\{6A09FEB2-691C-456B-B982-2F6D21B19602}) (Version: 4.1.1 - Microsoft Corporation)
    Entity Framework 6.1.1 Tools for Visual Studio 2013 (HKLM-x32\...\{85253F13-EE42-4850-A3A5-79B90E92D7AC}) (Version: 12.0.30610.0 - Microsoft Corporation)
    Entity Framework 6.1.2 Tools Beta 1 for Visual Studio 14 (HKLM-x32\...\{FF33B0AD-CEAF-4EDF-8D68-AD34E601B039}) (Version: 14.0.31029.0 - Microsoft Corporation)
    Entity Framework Designer for Visual Studio 2012 - enu (HKLM-x32\...\{AFA4B0BF-3289-495A-B949-BA91F39B1A44}) (Version: 11.1.21009.00 - Microsoft Corporation)
    EPSON Advanced Printer Driver 4 (HKLM-x32\...\{11FF6AF6-0141-4EF8-829A-989459A1E5D8}) (Version: 4.53.0001 - SEIKO EPSON CORPORATION)
    EPSON APD4 Point and Print Support (x32 Version: 4.53.0001 - SEIKO EPSON CORPORATION) Hidden
    EPSON Port Communication Service (HKLM\...\{6F915A77-A189-424F-AC46-6201E7E380CF}) (Version: 3.4.2 - SEIKO EPSON CORPORATION)
    EPSON TM Coupon Package (HKLM-x32\...\{60ED98A7-BE97-4F26-B32E-5087337C6044}) (Version: 1.10.0000 - Seiko Epson Corporation) <==== ATTENTION
    EPSON TM-T88V Utility Ver.1.31 (HKLM-x32\...\{F7174313-A545-4557-AB1B-BB79B086875C}) (Version: 1.6.0.2 - SEIKO EPSON CORPORATION)
    ErrorList (x32 Version: 1.0 - Microsoft Corporation) Hidden
    ezLCD30x Firmware Loader (HKLM-x32\...\{E08220E2-D867-44C0-8298-0EDCAB8E698B}) (Version: 1.0 - EarthLCD)
    Flash Builder (HKLM-x32\...\{C583836B-A856-4BB4-8377-0DA9BCECBDEA}) (Version: 4.6.1 - Adobe Systems Incorporated)
    GDR 3128 for SQL Server 2012 (KB2793634) (64-bit) (HKLM\...\KB2793634) (Version: 11.1.3128.0 - Microsoft Corporation)
    GDR 3153 for SQL Server 2012 (KB2977326) (64-bit) (HKLM\...\KB2977326) (Version: 11.1.3153.0 - Microsoft Corporation)
    GDR 3156 for SQL Server 2012 (KB3045318) (64-bit) (HKLM\...\KB3045318) (Version: 11.1.3156.0 - Microsoft Corporation)
    GDR 5520 for SQL Server 2008 (KB2977321) (64-bit) (HKLM\...\KB2977321) (Version: 10.3.5520.0 - Microsoft Corporation)
    GDR 5538 for SQL Server 2008 (KB3045305) (64-bit) (HKLM\...\KB3045305) (Version: 10.3.5538.0 - Microsoft Corporation)
    GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
    Git version 1.9.0-preview20140217 (HKLM-x32\...\Git_is1) (Version: 1.9.0-preview20140217 - The Git Development Community)
    Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.110 - Google Inc.)
    Google Drive (HKLM-x32\...\{A1238426-ECDF-4639-BE2F-8D12A97AE23C}) (Version: 2.34.5075.1619 - Google, Inc.)
    Google Earth (HKLM-x32\...\{F6430171-B86B-4639-839E-374913E7911D}) (Version: 7.1.8.3036 - Google)
    Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
    Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden
    GoPro App (x32 Version: 0.1.443 - GoPro, Inc.) Hidden
    GoPro Studio 2.5.5 (HKLM-x32\...\{5d43231e-c765-405a-a122-81de16acd8b4}) (Version: 2.5.5.443 - GoPro, Inc.)
    GoToMeeting 7.2.4.3215 (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\GoToMeeting) (Version: 7.2.4.3215 - CitrixOnline)
    GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
    Gtk# for .Net 2.12.26 (HKLM-x32\...\{BC25B808-A11C-4C9F-9C0A-6682E47AAB83}) (Version: 2.12.26 - Xamarin, Inc.)
    HI-TECH C Compiler for the PIC10/12/16 MCUs V9.82PL0 (HKLM-x32\...\PICC 9.82) (Version: 9.82 - HI-TECH Software)
    HI-TECH C51-lite V9.60PL0 (HKLM-x32\...\HC51 9.60PL0) (Version: 9.60 - HI-TECH Software)
    HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
    HP Officejet Pro 8600 Basic Device Software (HKLM\...\{791A06E2-340F-43B0-8FAB-62D151339362}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
    HP Officejet Pro 8600 Help (HKLM-x32\...\{46235FF7-2CBE-4A84-BEDA-87348D1F7850}) (Version: 28.0.0 - Hewlett Packard)
    HP Officejet Pro K8600 (HKLM\...\{5FA67C2B-DAAB-4F7B-AE09-CA97FE73EA59}) (Version: 13.0 - HP)
    HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
    HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
    HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
    HP webOS SDK (HKLM\...\{53A97E00-7252-4ED0-A1EB-9F9712FC0AC9}) (Version: 3.0.676 - HP)
    HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
    I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
    iCloud (HKLM\...\{309768A4-A2BB-4930-A5A2-8169678C9B4C}) (Version: 4.0.6.28 - Apple Inc.)
    IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)
    IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version: - )
    IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version: - )
    Intel Edison Device USB driver (HKLM\...\Intel Edison Device USB driver) (Version: 1.0.0 - Intel)
    Itibiti RTC (x32 Version: 0.0.1 - Itibiti Inc) Hidden <==== ATTENTION
    iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.)
    Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
    Java SE Development Kit 7 Update 55 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0170550}) (Version: 1.7.0.550 - Oracle)
    Java(TM) SE Development Kit 6 Update 39 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0160390}) (Version: 1.6.0.390 - Oracle)
    JavaScript Tooling (Version: 11.0.60315 - Microsoft Corporation) Hidden
    Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
    K8600 (x32 Version: 130.0.000.000 - Hewlett-Packard) Hidden
    KEEBOX 150N Wireless Utility (HKLM-x32\...\{5C6B323C-863C-4B17-B8F7-198B5E0C4B50}) (Version: - Nonbrand)
    KeePass Password Safe 2.24 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.24 - Dominik Reichl)
    Kit SDK de vérification de Visual Studio*2012 - fra (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden
    Kits Configuration Installer (x32 Version: 8.100.25984 - Microsoft) Hidden
    Lightroom 4.1 (HKLM-x32\...\{3c5418ff-7dea-4a37-8c52-45c670677773}) (Version: 4.1 - Adobe Systems Incorporated)
    LocalESPC (x32 Version: 8.59.29989 - Microsoft Corporation) Hidden
    LocalESPC Dev12 (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
    LocalESPCui for en-us Dev12 (x32 Version: 8.100.25984 - Microsoft) Hidden
    Math Kernel Libraries (64-bit) (Version: 1.0.31.0 - National Instruments) Hidden
    Math Kernel Libraries (64-bit) (Version: 13.0.13 - National Instruments) Hidden
    Math Kernel Libraries (x32 Version: 1.0.31.0 - National Instruments) Hidden
    Math Kernel Libraries (x32 Version: 13.0.13 - National Instruments) Hidden
    Medic Control (Development) (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\f47e6bed37df04f6) (Version: 0.3.4.15 - Jessica Pittman)
    Memory Profiler (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
    Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
    Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
    MicroCode Studio (MCSX) (HKLM-x32\...\MicroCode Studio (MCSX)_is1) (Version: 5.0.0.5 - Mecanique UK)
    Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
    Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.3 Preview Multi-Targeting Pack (ENU) (HKLM-x32\...\{6FF89029-E442-4346-BB1E-C73AA6F6D080}) (Version: 4.5.53346 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.3 Preview Multi-Targeting Pack (HKLM-x32\...\{861F6EBB-5856-4DB9-B812-363CFB1D2F56}) (Version: 4.5.53346 - Microsoft Corporation)
    Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
    Microsoft .NET Micro Framework SDK 4.3 (RTM) (HKLM-x32\...\{39855987-4CD2-4CA0-B9EB-C67B342699EA}) (Version: 4.3.0.0 - Microsoft Corporation)
    Microsoft ASP.NET MVC 3 (HKLM-x32\...\{D32EF103-4016-4C15-BCB0-700C0A7A2309}) (Version: 3.0.50813.0 - Microsoft Corporation)
    Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
    Microsoft ASP.NET Web Pages (HKLM-x32\...\{631471BE-DEAB-454B-A9AC-CE3EB42C28B3}) (Version: 1.0.20105.0 - Microsoft Corporation)
    Microsoft ASP.NET Web Pages 2 (HKLM-x32\...\{cb29be6c-39c4-493e-9da7-d585d5353714}) (Version: 2.0.20715.0 - Microsoft Corporation)
    Microsoft Expression Design 4 (HKLM-x32\...\Design_8.0.31217.1) (Version: 8.0.31217.1 - Microsoft Corporation)
    Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)
    Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation)
    Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation)
    Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.22310 - Microsoft Corporation)
    Microsoft Office 365 Small Business Premium - en-us (HKLM\...\O365SmallBusPremRetail - en-us) (Version: 15.0.4737.1003 - Microsoft Corporation)
    Microsoft OneDrive (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\OneDriveSetup.exe) (Version: 17.3.6917.0607 - Microsoft Corporation)
    Microsoft POS for .NET 1.1 (HKLM-x32\...\{C05ED040-923C-4175-8B8D-A8693B93598B}) (Version: 1.1.0603.1 - Microsoft Corporation)
    Microsoft Report Viewer 2012 Runtime (HKLM-x32\...\{9CCE40CE-A9E6-4916-8729-B008558EEF3F}) (Version: 11.0.2100.60 - Microsoft Corporation)
    Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.209.0 - Microsoft Corporation)
    Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
    Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation)
    Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
    Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version: - Microsoft Corporation)
    Microsoft SQL Server 2008 Native Client (HKLM\...\{2738C4AA-420E-4E13-ADEF-B5AB250E3EF1}) (Version: 10.3.5500.0 - Microsoft Corporation)
    Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{83F2B8F4-5CF3-4BE9-9772-9543EAE4AC5F}) (Version: 10.51.2500.0 - Microsoft Corporation)
    Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{F43ADE73-2880-4A95-B995-4FE386ECF667}) (Version: 10.3.5538.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 (64-bit) (HKLM\...\Microsoft SQL Server SQLServer2012) (Version: - Microsoft Corporation)
    Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{58FED865-4F13-408D-A5BF-996019C4B936}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Data-Tier App Framework (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{4F640A82-635E-431A-856A-F43E5EAAC130}) (Version: 11.1.3156.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Native Client (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Policies (HKLM-x32\...\{DC487E40-046E-42A9-9C7C-5D2B1A7EB211}) (Version: 11.0.2100.60 - Microsoft Corporation)
    Microsoft SQL Server 2012 Setup (English) (HKLM\...\{8AC82589-7217-48FE-9051-AE6D3B211B14}) (Version: 11.1.3156.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Transact-SQL Compiler Service (HKLM\...\{BA39D494-DDE8-407A-AE5A-18A43DFF74EA}) (Version: 11.1.3156.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 T-SQL Language Service (HKLM\...\{A67C75DE-BED6-4F1B-97EB-30CD1D40FFED}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Microsoft SQL Server 2014 Express LocalDB (HKLM\...\{AB8DE9BA-19E1-446A-BCFA-6B3DA9751E21}) (Version: 12.0.2000.8 - Microsoft Corporation)
    Microsoft SQL Server 2014 Management Objects (HKLM-x32\...\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation)
    Microsoft SQL Server 2014 Management Objects (x64) (HKLM\...\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}) (Version: 12.0.2000.8 - Microsoft Corporation)
    Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\...\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation)
    Microsoft SQL Server 2014 T-SQL Language Service (HKLM-x32\...\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation)
    Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
    Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
    Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
    Microsoft SQL Server Data Tools – Database Projects – Web installer entry point (HKLM-x32\...\{F3BBC56F-2282-4464-952F-A89772181F30}) (Version: 10.3.20116.0 - Microsoft Corporation)
    Microsoft SQL Server Data Tools - enu (11.1.21208.0) (HKLM-x32\...\{EE43D481-9E18-4426-BDBA-9AD73F2FEC41}) (Version: 11.1.21208.0 - Microsoft Corporation)
    Microsoft SQL Server Data Tools - enu (12.0.41012.0) (HKLM-x32\...\{AC8E0CF4-42A1-4151-B684-97CF6FD726CF}) (Version: 12.0.41012.0 - Microsoft Corporation)
    Microsoft SQL Server Data Tools - enu (14.0.41025.0) (HKLM-x32\...\{455A16B4-CD22-4529-B429-DD454573E76A}) (Version: 14.0.41025.0 - Microsoft Corporation)
    Microsoft SQL Server Data Tools 2012 (HKLM-x32\...\{b21eb07f-a9ca-423a-896d-7cc3a4fc6481}) (Version: 11.1.21208.0 - Microsoft Corporation)
    Microsoft SQL Server Data Tools Build Utilities - enu (11.1.21208.0) (HKLM-x32\...\{98A5B388-5ED7-42C5-9DCF-D9E8CF9E51C8}) (Version: 11.1.21208.0 - Microsoft Corporation)
    Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation)
    Microsoft SQL Server System CLR Types (HKLM-x32\...\{C3F6F200-6D7B-4879-B9EE-700C0CE1FCDA}) (Version: 10.51.2500.0 - Microsoft Corporation)
    Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation)
    Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation)
    Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation)
    Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{DAF4DDA4-3B5A-407D-B4DF-07922C5A0D22}) (Version: 12.0.2360.29 - Microsoft Corporation)
    Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\...\{659D2DBE-CA2C-4C8F-AF2B-2C8DE262B278}) (Version: 12.0.2360.29 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
    Microsoft Visual C++ 2015 Preview Redistributable (x64) - 14.0.22310 (HKLM-x32\...\{eb6c06e7-8ff6-4978-ab4c-561383593306}) (Version: 14.0.22310.1 - Microsoft Corporation)
    Microsoft Visual C++ 2015 Preview Redistributable (x86) - 14.0.22310 (HKLM-x32\...\{2e4043b7-cd84-44db-b81a-8f6e5ffb7398}) (Version: 14.0.22310.1 - Microsoft Corporation)
    Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
    Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
    Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{14DD7530-CCD2-3798-B37D-3839ED6A441C}) (Version: 10.0.30319 - Microsoft Corporation)
    Microsoft Visual Studio 2010 Express Prerequisites x64 - ENU (HKLM\...\{BCA26999-EC22-3007-BB79-638913079C9A}) (Version: 10.0.30319 - Microsoft Corporation)
    Microsoft Visual Studio 2010 Shell (Integrated) - ENU (HKLM-x32\...\{012D26C3-E12A-3BDA-8ECE-DF14E721A507}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual Studio 2010 Shell (Isolated) - ENU (HKLM-x32\...\{D64B6984-242F-32BC-B008-752806E5FC44}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
    Microsoft Visual Studio 2012 Shell (Integrated) (HKLM-x32\...\{55b160d2-8221-45fd-ab30-4388c69c0f3b}) (Version: 11.0.50727.1 - Microsoft Corporation)
    Microsoft Visual Studio 2012 Shell (Integrated) Language Pack - ENU (HKLM-x32\...\{e1d01f79-be4a-4e83-b707-a009c4f6e53f}) (Version: 11.0.50727.1 - Microsoft Corporation)
    Microsoft Visual Studio 2012 Shell (Isolated) (HKLM-x32\...\{d2e0df0f-bf0a-4a89-9530-ebf93842c393}) (Version: 11.0.50727.1 - Microsoft Corporation)
    Microsoft Visual Studio 2012 Shell (Isolated) Language Pack - ENU (HKLM-x32\...\{b8df2deb-8a9f-48c8-9608-1eb3861b5630}) (Version: 11.0.50727.1 - Microsoft Corporation)
    Microsoft Visual Studio 2015 Preview Secondary Installer (HKLM-x32\...\{B6CB8401-B0A8-4795-8BED-F7B49D51ABCF}_SecondaryInstaller) (Version: 14.0.22310 - Microsoft Corporation)
    Microsoft Visual Studio Express 2012 for Web - ENU (HKLM-x32\...\{4bd1cdab-bf82-42c1-af37-e4918141913f}) (Version: 11.0.50727.1 - Microsoft Corporation)
    Microsoft Visual Studio Express 2012 for Windows Desktop - ENU (HKLM-x32\...\{e0efdce9-a486-4676-8aa5-65bb08cbf34c}) (Version: 11.0.50727.42 - Microsoft Corporation)
    Microsoft Visual Studio Professional 2013 (HKLM-x32\...\{02a877fe-5dac-4ac0-b869-4b9da00f651c}) (Version: 12.0.21005.1 - Microsoft Corporation)
    Microsoft Visual Studio Tools for Applications Design-Time 3.0 (HKLM-x32\...\{5A03C202-08B4-3F1D-9A60-A4F53EF1B636}) (Version: 10.0.40220 - Microsoft Corporation)
    Microsoft Visual Studio Tools for Applications x86 Runtime 3.0 (HKLM-x32\...\{191A6F65-6878-398D-A272-EF011B80F371}) (Version: 10.0.40220 - Microsoft Corporation)
    Microsoft Visual Studio Ultimate 2015 Preview (HKLM-x32\...\{e1f58f60-306c-4f5b-9788-5b9292910779}) (Version: 14.0.22310.1 - Microsoft Corporation)
    Microsoft VSS Writer for SQL Server 2012 (HKLM\...\{3E0DD83F-BE4C-4478-86A0-AD0D79D1353E}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Microsoft Web Deploy 3.6 Beta3 (HKLM\...\{07F0FC77-282E-42E5-BAE6-B8C098F8453E}) (Version: 3.1238.1942 - Microsoft Corporation)
    Microsoft Web Deploy dbSqlPackage Provider - enu (HKLM-x32\...\{E4C33F5B-1B2F-466E-957E-B274F08151A0}) (Version: 10.3.20225.0 - Microsoft Corporation)
    Microsoft Web Platform Installer 4.0 (HKLM\...\{75E2C40C-4345-4DD0-B5B3-B8EB92EEECB5}) (Version: 4.0.1679 - Microsoft Corporation)
    Module Microsoft Report Viewer pour Visual Studio*2013 (x32 Version: 11.1.3442.2 - Microsoft Corporation) Hidden
    Mozilla Firefox 17.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 17.0.1 (x86 en-US)) (Version: 17.0.1 - Mozilla)
    Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 17.0.1 - Mozilla)
    MPLAB Tools v8.90 (HKLM-x32\...\InstallShield_{4BFBFE90-75A0-4728-8625-9776B82C99B3}) (Version: 8.90 - Microchip Technology Inc.)
    MPLAB Tools v8.90 (x32 Version: 8.90 - Microchip Technology Inc.) Hidden
    MPM (HKLM-x32\...\{BAB0F8F5-282A-45F1-B31A-EB894827456B}) (Version: 1.00.0000 - Hewlett-Packard)
    MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
    MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
    MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
    Multi-Device Hybrid Apps using C# - Templates - ENU (x32 Version: 14.0.22310 - Microsoft Corporation) Hidden
    National Instruments Software (HKLM-x32\...\NI Uninstaller) (Version: - National Instruments)
    Netduino Drivers (Version: 4.3.0001 - Secret Labs LLC) Hidden
    Netduino SDK Core (x32 Version: 4.3.0000 - Secret Labs LLC) Hidden
    Netduino SDK v4.3.0 (February 2013) (HKLM-x32\...\{21fb40c4-d906-4605-9916-2cd3c48c9e82}) (Version: 4.3.0.1 - Secret Labs LLC)
    NetViewer 2.1.373.0 (HKLM-x32\...\NetViewer) (Version: 2.1.373.0 - )
    Network64 (Version: 130.0.579.000 - Hewlett-Packard) Hidden
    NI .NET Framework 4.0 (x32 Version: 4.01.49152 - National Instruments) Hidden
    NI ActiveX Container (64-bit) (Version: 13.0.4 - National Instruments) Hidden
    NI ActiveX Container (x32 Version: 13.0.4 - National Instruments) Hidden
    NI Authentication 13.5.0 (64-bit) (Version: 13.5.70 - National Instruments) Hidden
    NI Authentication 13.5.0 (x32 Version: 13.5.70 - National Instruments) Hidden
    NI Circuit Design Suite 13.0.1 Core (x32 Version: 13.0.995 - National Instruments) Hidden
    NI Circuit Design Suite 13.0.1 Edu Licenses (x32 Version: 13.0.995 - National Instruments) Hidden
    NI Circuit Design Suite 13.0.1 Education (x32 Version: 13.0.995 - National Instruments) Hidden
    NI Circuit Design Suite Master Database (x32 Version: 13.0.995 - National Instruments) Hidden
    NI Curl 13.5.0 (64-bit) (Version: 13.5.69 - National Instruments) Hidden
    NI Curl 13.5.0 (x32 Version: 13.5.69 - National Instruments) Hidden
    NI Error Reporting 2013 SP1 (x32 Version: 13.1.98 - National Instruments) Hidden
    NI Error Reporting Interface Installer 5.5 (x32 Version: 5.50.49152 - National Instruments) Hidden
    NI Error Reporting Interface Installer 5.5 for Windows 64-bit (Version: 5.50.49152 - National Instruments) Hidden
    NI EulaDepot (x32 Version: 3.21.132 - National Instruments) Hidden
    NI Example Finder 13.0 (x32 Version: 13.0.324 - National Instruments) Hidden
    NI GMP Windows 32-bit Installer 13.5.0 (x32 Version: 13.50.15 - National Instruments) Hidden
    NI GMP Windows 64-bit Installer 13.5.0 (Version: 13.50.15 - National Instruments) Hidden
    NI Help Assistant 2.0 (64bit) (Version: 2.0.3 - National Instruments) Hidden
    NI Help Assistant 2.0 (x32 Version: 2.0.3 - National Instruments) Hidden
    NI LabVIEW 2012 Real-Time NBFifo (x32 Version: 12.0.219.0 - National Instruments) Hidden
    NI LabVIEW 2012 Real-Time NBFifo (x32 Version: 13.0.336 - National Instruments) Hidden
    NI LabVIEW 2012 Run-Time Engine Web Server (x32 Version: 12.5.198.0 - National Instruments) Hidden
    NI LabVIEW 2012 SP1 Run-Time Engine Non-English Support. (x32 Version: 12.1.52.0 - National Instruments) Hidden
    NI LabVIEW 2013 Deployment Framework (x32 Version: 13.0.428 - National Instruments) Hidden
    NI LabVIEW 2013 Run-Time Engine Web Server (x32 Version: 13.5.26 - National Instruments) Hidden
    NI LabVIEW 2013 SP1 Run-Time Engine Non-English Support. (x32 Version: 13.1.99 - National Instruments) Hidden
    NI LabVIEW Run-Time Engine 2012 SP1 f7 (x32 Version: 12.1.65.0 - National Instruments) Hidden
    NI LabVIEW Run-Time Engine 2013 SP1 (x32 Version: 13.1.101 - National Instruments) Hidden
    NI LabVIEW Run-Time Engine Interop 2012 SP1 (x32 Version: 12.1.65.0 - National Instruments) Hidden
    NI LabVIEW Run-Time Engine Interop 2013 (x32 Version: 13.1.101 - National Instruments) Hidden
    NI LabVIEW-Multisim Co-simulation Plug-in 13.0 for LabVIEW 2012 (x32 Version: 13.0.995 - National Instruments) Hidden
    NI LabVIEW-Multisim Co-simulation Plug-in 13.0 for LabVIEW 2013 (x32 Version: 13.0.995 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 .NET Library (64-bit) (Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 .NET Library (x32 Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 Analysis Library (64-bit) (Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 Analysis Library (x32 Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 Low-Level Driver (Original) (x32 Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 Low-Level Driver (Updated) (x32 Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 Network Streams Library (64-bit) (Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 Network Streams Library (x32 Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 Network Variable Library (64-bit) (Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 Network Variable Library (x32 Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 TDMS Library (64-bit) (Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 TDMS Library (x32 Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI Run-Time Engine 2013 SP1 (Updated) (x32 Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI Shared Run-Time Engine 2013 SP1 (64-bit) (Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI Shared Run-Time Engine 2013 SP1 (x32 Version: 13.0.1201 - National Instruments) Hidden
    NI Launcher (x32 Version: 3.21.136 - National Instruments) Hidden
    NI License Manager (x32 Version: 3.7.54 - National Instruments) Hidden
    NI Logos 5.5 (64-bit) (Version: 5.5.293 - National Instruments) Hidden
    NI Logos 5.5 (x32 Version: 5.5.293 - National Instruments) Hidden
    NI Logos XT Support (x32 Version: 5.5.294 - National Instruments) Hidden
    NI Logos64 XT Support (Version: 5.5.294 - National Instruments) Hidden
    NI Math Kernel Libraries (x32 Version: 1.0.861.0 - National Instruments) Hidden
    NI MAX Remote Configuration 64-bit Installer 5.6 (Version: 5.60.49152 - National Instruments) Hidden
    NI MAX Remote Configuration Installer 5.6 (x32 Version: 5.60.49152 - National Instruments) Hidden
    NI MDF Support (x32 Version: 3.21.132 - National Instruments) Hidden
    NI mDNS Responder 2.2 for Windows 64-bit (Version: 2.20.49152 - National Instruments) Hidden
    NI mDNS Responder 2.2.0 (x32 Version: 2.20.49152 - National Instruments) Hidden
    NI Measurement Studio ComponentWorks 3D Graph (x32 Version: 8.6.10603 - National Instruments) Hidden
    NI MetaSuite Installer (x32 Version: 3.20.363 - National Instruments) Hidden
    NI Multisim API Toolkit for LabVIEW 2012 (x32 Version: 13.0.995 - National Instruments) Hidden
    NI Multisim API Toolkit for LabVIEW 2013 (x32 Version: 13.0.995 - National Instruments) Hidden
    NI Multisim LabVIEW Interoperability Support 13.0.1 (x32 Version: 13.0.995 - National Instruments) Hidden
    NI Security Update (KB 67L8LCQW) (64-bit) (Version: 1.0.29.0 - National Instruments) Hidden
    NI Security Update (KB 67L8LCQW) (x32 Version: 1.0.29.0 - National Instruments) Hidden
    NI Service Locator 13.5 (x32 Version: 13.5.70 - National Instruments) Hidden
    NI SSL LabVIEW RTE 2012 SP1 Support (x32 Version: 12.5.8.0 - National Instruments) Hidden
    NI SSL LabVIEW RTE 2013 SP1 Support (x32 Version: 13.5.26 - National Instruments) Hidden
    NI SSL Support (64-bit) (Version: 13.5.69 - National Instruments) Hidden
    NI SSL Support (x32 Version: 13.5.69 - National Instruments) Hidden
    NI System API Windows 32-bit 5.6.0 (x32 Version: 5.60.84 - National Instruments) Hidden
    NI System API Windows 64-bit 5.6.0 (Version: 5.60.84 - National Instruments) Hidden
    NI System State Publisher (64-bit) (Version: 13.1.97 - National Instruments) Hidden
    NI System State Publisher (x32 Version: 13.1.97 - National Instruments) Hidden
    NI System Web Server 13.5 (x32 Version: 13.5.69 - National Instruments) Hidden
    NI System Web Server Base 13.5.0 (64-bit) (Version: 13.5.69 - National Instruments) Hidden
    NI System Web Server Base 13.5.0 (x32 Version: 13.5.69 - National Instruments) Hidden
    NI TDM Streaming 2.5 (64-bit) (Version: 2.5.46 - National Instruments) Hidden
    NI TDM Streaming 2.5 (x32 Version: 2.5.46 - National Instruments) Hidden
    NI Trace Engine (64-bit) (Version: 13.5.69 - National Instruments) Hidden
    NI Trace Engine (x32 Version: 13.5.69 - National Instruments) Hidden
    NI Uninstaller (x32 Version: 3.21.132 - National Instruments) Hidden
    NI Update Service 2.3 (64-bit) (Version: 2.30.53 - National Instruments) Hidden
    NI Update Service 2.3 (x32 Version: 2.30.65 - National Instruments) Hidden
    NI USI 2.1.0 (x32 Version: 2.1.05374 - National Instruments) Hidden
    NI USI 2.1.0 64-Bit (Version: 2.1.05374 - National Instruments) Hidden
    NI VC2005MSMs x64 (Version: 8.05.0 - National Instruments) Hidden
    NI VC2005MSMs x86 (x32 Version: 8.05.0 - National Instruments) Hidden
    NI VC2008MSMs x64 (Version: 9.0.401 - National Instruments) Hidden
    NI VC2008MSMs x86 (x32 Version: 9.0.401 - National Instruments) Hidden
    NI VC2010SP1MSMs x64 (Version: 10.0.100 - National Instruments) Hidden
    NI VC2010SP1MSMs x86 (x32 Version: 10.0.100 - National Instruments) Hidden
    NI Visual C++ 2008 Redistributable Package (x32 Version: 9.00.49152 - National Instruments) Hidden
    NI Visual C++ 2010 Redistributable Package (x32 Version: 10.02.49152 - National Instruments) Hidden
    NI Web Application Server 13.5 (64-bit) (Version: 13.5.70 - National Instruments) Hidden
    NI Web Application Server 13.5 (x32 Version: 13.5.70 - National Instruments) Hidden
    NI-Mesa (Version: 13.0.3 - National Instruments) Hidden
    NI-Mesa (x32 Version: 13.0.3 - National Instruments) Hidden
    NI-RPC 4.4.0f0 (x32 Version: 4.40.49152 - National Instruments) Hidden
    NI-RPC 4.4.0f0 for 64 Bit Windows (Version: 4.40.49152 - National Instruments) Hidden
    Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.2.3 - )
    NVIDIA 3D Vision Controller Driver 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 331.82 - NVIDIA Corporation)
    NVIDIA 3D Vision Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)
    NVIDIA GeForce Experience 1.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8 - NVIDIA Corporation)
    NVIDIA Graphics Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)
    NVIDIA HD Audio Driver 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
    NVIDIA PhysX System Software 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
    NVIDIA Virtual Audio 1.2.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.12 - NVIDIA Corporation)
    Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
    Office 15 Click-to-Run Licensing Component (Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
    Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
    Open XML SDK 2.5 for Microsoft Office (x32 Version: 2.5.5631 - Microsoft Corporation) Hidden
    OpenSCAD (remove only) (HKLM-x32\...\OpenSCAD) (Version: - )
    Pad2Pad 1.9.89 (HKLM-x32\...\Pad2Pad_is1) (Version: - Pad2Pad.com)
    PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
    ph (x32 Version: 1.0.0 - Your Company Name) Hidden
    PICBASIC PRO(tm) Compiler 3.0.7.0 (HKLM-x32\...\PBP3_is1) (Version: 3.0.7.0 - microEngineering Labs, Inc.)
    PICkit 2 v2.60 (HKLM-x32\...\{9602161A-1B1D-4EDB-9AFD-AF71B184920D}) (Version: 2.60.00 - Microchip)
    PowreShellIntegration.Notifications (x32 Version: 2.5.21003.1603 - Microsoft Corporation) Hidden
    PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.3197.1 - PreEmptive Solutions) Hidden
    Prerequisites for SSDT (HKLM-x32\...\{21373064-AD95-48DB-A32E-0D9E08EF7355}) (Version: 12.0.2000.8 - Microsoft Corporation)
    Prerequisites for SSDT (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation)
    ProductContext (x32 Version: 130.0.000.000 - Hewlett-Packard) Hidden
    PxMergeModule (x32 Version: 1.00.0000 - Your Company Name) Hidden
    Python 3.3.2 (64-bit) (HKLM\...\{9FA9A2A6-19E4-381A-8AF3-F8CF12F0DCF0}) (Version: 3.3.2150 - Python Software Foundation)
    Python Tools for Visual Studio 2012 (HKLM-x32\...\{1B1B4164-E8DC-448B-926A-857E8A3E125B}) (Version: 2.0.10620.00 - Microsoft Corporation)
    Python Tools Redirection Template (x32 Version: 1.1 - Microsoft Corporation) Hidden
    Python Tools Redirection Template (x32 Version: 1.3 - Microsoft Corporation) Hidden
    Qt Creator (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\Qt Creator) (Version: 3.3.0 - Qt Project)
    Qt Enterprise (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\Qt Enterprise) (Version: 1.0.1 - Digia Plc)
    QuickBooks (x32 Version: 24.0.4016.2403 - Intuit Inc.) Hidden
    QuickBooks Desktop File Doctor (HKLM-x32\...\{5716778B-DC86-475F-9977-1E7153F7B588}) (Version: 3.7.0 - Inuit)
    QuickBooks File Doctor (HKLM-x32\...\{45780E89-7B52-4E92-A9DC-1172EF556708}) (Version: 3.6 - Intuit)
    QuickBooks Pro 2014 (HKLM-x32\...\{4A21D17E-2FE8-42CD-88B7-ACF8E8860834}) (Version: 24.0.4016.2403 - Intuit Inc.)
    QuickBooks Runtime Redistributable (HKLM\...\{F2A4F809-2DE6-4D27-888B-4D2BB8DAF20E}) (Version: 1.00.0000 - Intuit Inc.)
    QuickBooks SDK 5.0 (HKLM-x32\...\{9BE10B36-614C-4519-A7CB-0FCF2720863F}) (Version: 5.0.00203.0 - Intuit)
    QuickTime (HKLM-x32\...\{0E64B098-8018-4256-BA23-C316A43AD9B0}) (Version: 7.72.80.56 - Apple Inc.)
    Radlink Lite Launcher (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\11cff10e06d5938f) (Version: 1.0.0.0 - Radlink)
    RingCentral Meetings (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\RingCentralMeetings) (Version: 3.5 - Zoom Video Communications, Inc. and RingCentral Inc.)
    RingCentral Softphone (HKLM-x32\...\{52F10407-8CF3-4EEB-8D4A-9AA02AE861FC}) (Version: 6.04.001.50 - RingCentral, Inc)
    RingCentral Voicemail Player (HKLM-x32\...\{FB705754-66FB-4419-9EA9-EB020DEA8D50}) (Version: 1.4.31 - RingCentral Inc.)
    Roslyn Language Services - x86 (x32 Version: 14.0.22310 - Microsoft Corporation) Hidden
    SDK de comprobación de Visual Studio 2012 - esn (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden
    Secure Download Manager (HKLM-x32\...\{E040B65B-8683-4228-8C33-D44A141E40EA}) (Version: 3.1.60 - Kivuto Solutions Inc.)
    Service Pack 1 for SQL Server 2012 (KB2674319) (64-bit) (HKLM\...\KB2674319) (Version: 11.1.3000.0 - Microsoft Corporation)
    Service Pack 3 for SQL Server 2008 (KB2546951) (64-bit) (HKLM\...\KB2546951) (Version: 10.3.5500.0 - Microsoft Corporation)
    SharePoint Client Components (Version: 15.0.4641.1002 - Microsoft Corporation) Hidden
    SharePoint Client Components (Version: 16.0.3104.1200 - Microsoft Corporation) Hidden
    SHIELD Streaming (Version: 1.6.75 - NVIDIA Corporation) Hidden
    SignagePlayer (HKLM-x32\...\SignagePlayer.86EE3EEE54D7DB049D16E358CDC443F088917621.1) (Version: 3.0.1110 - Signage)
    SignagePlayer (x32 Version: 3.0.1110 - Signage) Hidden
    SignageStudio (HKLM-x32\...\SignageStudio.86EE3EEE54D7DB049D16E358CDC443F088917621.1) (Version: 4.0.79 - Signage)
    SignageStudio (x32 Version: 4.0.79 - Signage) Hidden
    SketchUp 2013 (HKLM-x32\...\{B75BC01B-4586-43F8-9349-D250DB98F26F}) (Version: 13.0.4812 - Trimble Navigation Limited)
    SketchUp 2014 (HKLM-x32\...\{A608A8D3-E77C-4BEE-8F2A-F8124F5F0FE2}) (Version: 14.0.4900 - Trimble Navigation Limited)
    SketchUp 2015 (HKLM\...\{350488A4-1540-4103-8F01-B27503891EB0}) (Version: 15.3.331 - Trimble Navigation Limited)
    SketchUp 8 (HKLM-x32\...\{8EB62C87-AAA6-4850-A5BC-64155884B973}) (Version: 3.0.16846 - Trimble Navigation Limited)
    Skype™ 6.7 (HKLM-x32\...\{1845470B-EB14-4ABC-835B-E36C693DC07D}) (Version: 6.7.102 - Skype Technologies S.A.)
    SmartRF Packet Sniffer (HKLM-x32\...\Texas Instruments Packet Sniffer) (Version: 2.18.1 - Texas Instruments)
    Smartwaiver Kiosk (HKLM-x32\...\{3618D6B9-2C9A-463B-A2BE-5BFFCDF151AE}) (Version: 1.0.43029 - Smartwaiver)
    SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
    SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
    Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
    SQL Server 2012 BI Development Studio (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
    SQL Server 2012 Client Tools (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
    SQL Server 2012 Common Files (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
    SQL Server 2012 Database Engine Services (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
    SQL Server 2012 Database Engine Shared (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
    SQL Server 2012 Documentation Components (Version: 11.0.2100.60 - Microsoft Corporation) Hidden
    SQL Server 2012 Full text search (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
    SQL Server 2012 Management Studio (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
    SQL Server 2012 Reporting Services (Version: 11.0.2100.60 - Microsoft Corporation) Hidden
    SQL Server 2012 Reporting Services (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
    SQL Server 2012 SQL Data Quality Common (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
    SQL Server Browser for SQL Server 2012 (HKLM-x32\...\{4B9E6EB0-0EED-4E74-9479-F982C3254F71}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Sql Server Customer Experience Improvement Program (Version: 10.3.5500.0 - Microsoft Corporation) Hidden
    Sql Server Customer Experience Improvement Program (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
    Stamps.com (HKLM-x32\...\Stamps.com) (Version: - Stamps.com, Inc.)
    Stamps.com (x32 Version: 12.1.1.2876 - Stamps.com, Inc.) Hidden
    Stamps.com ProLabel Printer Driver (HKLM-x32\...\Stamps.com ProLabel Printer Driver) (Version: - Stamps.com, Inc.)
    Stamps.com ProLabel Printer Driver (x32 Version: 1.0.0.2 - Stamps.com) Hidden
    Stamps.com support for Intuit QuickBooks 2004-2011 (HKLM-x32\...\Stamps.com support for Intuit QuickBooks 2004-2011) (Version: - Stamps.com, Inc.)
    Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
    Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
    STMicroelectronics DfuSe v3.0.2 (HKLM-x32\...\InstallShield_{7D99CBC9-46E9-4070-BF20-25136AE7052E}) (Version: 3.0.2 - STMicroelectronics)
    STMicroelectronics DfuSe v3.0.2 (x32 Version: 3.0.2 - STMicroelectronics) Hidden
    Team Explorer for Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
    Team Explorer for Microsoft Visual Studio 2015 Preview (x32 Version: 14.0.22310 - Microsoft Corporation) Hidden
    TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.44109 - TeamViewer)
    Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
    Toolkit Documentation (x32 Version: 8.100.26866 - Microsoft) Hidden
    TortoiseGit 1.8.9.0 (64 bit) (HKLM\...\{D270F72A-913D-421E-AD56-5477132B1EC6}) (Version: 1.8.9.0 - TortoiseGit)
    Total Annihilation v3.9.01 Beta Patch (HKLM-x32\...\{28CEB942-CB26-4936-91A8-D9F3FC44EF80}) (Version: 3.9.01 - TAUniverse)
    TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
    TypeScript Power Tool (x32 Version: 1.0.5.0 - Microsoft Corporation) Hidden
    TypeScript Power Tool (x32 Version: 1.3.0.0 - Microsoft Corporation) Hidden
    TypeScript Tools for Microsoft Visual Studio 14 (x32 Version: 1.3.0.0 - Microsoft Corporation) Hidden
    TypeScript Tools for Microsoft Visual Studio 2013 (x32 Version: 1.0.5.0 - Microsoft Corporation) Hidden
    UltraEdit (HKLM-x32\...\InstallShield_{635A6AF2-63AF-4C1C-AF57-BDC8AF6D397D}) (Version: 21.30.1010 - IDM Computer Solutions, Inc.)
    UltraEdit (x32 Version: 21.30.1010 - IDM Computer Solutions, Inc.) Hidden
    Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
    VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
    VCSetup (HKLM-x32\...\{4023F084-ADD3-4080-89FB-253373871BD6}) (Version: 1.0.0.0 - VCSetup)
    Vegas Pro 11.0 (64-bit) (HKLM\...\{CF411A4F-5ED9-11E1-B971-F04DA23A5C58}) (Version: 11.0.595 - Sony)
    Vegas Pro 12.0 (64-bit) (HKLM\...\{A7500970-FE98-11E1-B560-F04DA23A5C58}) (Version: 12.0.367 - Sony)
    VFW_Codec32 (x32 Version: 0.1.160.0 - GoPro, Inc.) Hidden
    VFW_Codec64 (Version: 0.1.160.0 - GoPro, Inc.) Hidden
    Visual Studio 2010 Prerequisites - English (HKLM\...\{662014D2-0450-37ED-ABAE-157C88127BEB}) (Version: 10.0.40219 - Microsoft Corporation)
    Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{112C23F2-C036-4D40-BED4-0CB47BF5555C}) (Version: 4.0.8080.0 - Microsoft Corporation)
    Visual Studio 2012 Update 3 (KB2707250) (HKLM-x32\...\{29828f33-4679-462a-8c98-1c3507678922}) (Version: 11.0.60610 - Microsoft Corporation)
    Visual Studio 2013 Update 4 (KB2829760) (HKLM-x32\...\{53d408db-eb91-43fb-9d8f-167681c19763}) (Version: 12.0.31101 - Microsoft Corporation)
    VisualGDB (HKLM-x32\...\{5DAD3404-D23E-4AED-B4CE-3268B085F010}) (Version: 4.3.10.235 - Sysprogs)
    VS Update core components (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
    VsHub (x32 Version: 1.0.0.0 - Microsoft Corporation) Hidden
    WCF Data Services 5.6.0 Runtime (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden
    WCF Data Services 5.6.2 Runtime (x32 Version: 5.6.61937.2 - Microsoft Corporation) Hidden
    WCF Data Services Tools for Microsoft Visual Studio 2013 (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden
    WCF Data Services Tools for Microsoft Visual Studio 2014 (x32 Version: 5.6.61937.2 - Microsoft Corporation) Hidden
    WCF RIA Services V1.0 SP2 (HKLM-x32\...\{5D8DD6A8-C4D7-4554-93F9-F1CC28C72600}) (Version: 4.1.62812.0 - Microsoft Corporation)
    WD Quick View (HKLM-x32\...\{324C58C7-A292-4523-A943-91DE1EB6A1FE}) (Version: 2.4.1.9 - Western Digital Technologies, Inc.)
    WD SmartWare (HKLM\...\{F6ABA2F3-9759-48CD-B25B-A07A811E92E4}) (Version: 2.4.1.9 - Western Digital Technologies, Inc.)
    WD SmartWare Installer (HKLM-x32\...\{72fda14f-5a07-49d5-b7f7-202377e9b522}) (Version: 2.4.1.9 - Western Digital Technologies, Inc.)
    WebM Media Foundation Components (HKLM-x32\...\webmmf) (Version: 1.0.1.2 - WebM Project)
    WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
    Windows Assessment and Deployment Kit for Windows 8.1 (HKLM-x32\...\{e9e06304-a604-434b-b35f-d9beb94dc06d}) (Version: 8.100.26866 - Microsoft Corporation)
    Windows Azure Authoring Tools - October 2012 Release (HKLM\...\{8748EE66-A92C-472A-805A-A86C41D22848}) (Version: 1.8.31004.1351 - Microsoft Corporation)
    Windows Azure Emulator - October 2012 Release (HKLM\...\Windows Azure Emulator - October 2012 Release) (Version: 1.8.31004.1351 - Microsoft Corporation)
    Windows Azure Libraries for .NET – October 2012 (HKLM\...\{72934D7D-3379-497D-8FA4-1E28D21AFA20}) (Version: 1.8 - Microsoft Corporation)
    Windows Azure Tools for Microsoft Visual Studio 2012 - October 2012 (HKLM-x32\...\{899c21e3-a373-47ea-bf3f-59eeae908cdb}) (Version: 1.8.51019.1603 - Microsoft Corporation)
    Windows Driver Package - BeagleBone CDM Driver Package - Bus/D2XX Driver (03/18/2011 2.08.14) (HKLM\...\E115CC79390C233F94F72330FE3603A63E5204E2) (Version: 03/18/2011 2.08.14 - BeagleBone)
    Windows Driver Package - BeagleBone CDM Driver Package - VCP Driver (03/18/2011 2.08.14) (HKLM\...\A627DA08A5F362713EB4C440F904A2D1B8CD7E74) (Version: 03/18/2011 2.08.14 - BeagleBone)
    Windows Driver Package - Linux Developer Community (usbser) Ports (11/15/2007 5.1.2600.0) (HKLM\...\78AF41F3450C5037A588E124A3CFD63F195CB249) (Version: 11/15/2007 5.1.2600.0 - Linux Developer Community)
    Windows Driver Package - Linux Developer Community Net (06/21/2006 6.0.6000.16384) (HKLM\...\F8DB389D3D629D89F82795C4EB490AE50D7FB01E) (Version: 06/21/2006 6.0.6000.16384 - Linux Developer Community)
    Windows Driver Package - Stamps.com Printer (01/02/2013 7.0.1.9) (HKLM\...\D6C304AF42E45E95BBBD32FE0040738D3D2C15CF) (Version: 01/02/2013 7.0.1.9 - Stamps.com)
    Windows Driver Package - STMicroelectronics (STTub30) USB (11/09/2009 3.0.1.0) (HKLM\...\53CE3E570993AB2791A87B0143B353B816401784) (Version: 11/09/2009 3.0.1.0 - STMicroelectronics)
    Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
    Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
    Windows Phone app for desktop (HKLM-x32\...\{5F71448B-88EB-4357-9A98-8658D4C49C48}) (Version: 1.1.2726.0 - Microsoft Corporation)
    WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
    Workflow Manager Client 1.0 (Version: 2.0.40131.0 - Microsoft Corporation) Hidden
    Workflow Manager Tools 1.0 for Visual Studio (Version: 2.0.41015.0 - Microsoft Corporation) Hidden
    Xamarin Android Player (HKLM-x32\...\{5f63cdbe-6d50-4fdf-8efb-add7866fe390}) (Version: 0.0.24 - Xamarin)
    Xamarin Android Player (Version: 0.0.24 - Xamarin) Hidden
    X-CTU (HKLM-x32\...\{BC535415-7F95-45BE-8860-7B69E43BD13E}) (Version: 5.2.86 - Digi)
    Xming 6.9.0.31 (HKLM-x32\...\Xming_is1) (Version: 6.9.0.31 - Colin Harrison)
    Xming-fonts 7.5.0.70 (HKLM-x32\...\Xming-fonts_is1) (Version: 7.5.0.70 - Colin Harrison)
    Zebra CardStudio (HKLM-x32\...\{D4AF1D5F-9CB1-4735-BD98-E1DBE853F82D}) (Version: 1.25.4100.00 - Zebra Technologies Corporation)
    Zebra ZXP S3 and S1 Card Printers (HKLM-x32\...\{1132009E-7E6B-43D3-8F24-5554F5E9483B}) (Version: 05.30.00.00 - Zebra Technologies Corporation)
    Zebra ZXP S3 and S1 Card Printers (x32 Version: 05.30.00.00 - Zebra) Hidden
    Надстройка Microsoft Report Viewer для Visual Studio 2013 (x32 Version: 11.1.3442.2 - Microsoft Corporation) Hidden
    Пакет Visual Studio 2012 Verification SDK - rus (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden
    用于 Visual Studio 2013 的 Microsoft 报告查看器加载项 (x32 Version: 11.1.3442.2 - Microsoft Corporation) Hidden

    ==================== Custom CLSID (Whitelisted): ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    CustomCLSID: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\DWG TrueView 2015 - English\dwgviewr.exe (Autodesk, Inc.)
    CustomCLSID: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Battlefield\AppData\Local\Microsoft\OneDrive\17.3.6917.0607\amd64\FileCoAuthLib64.dll (Microsoft Corporation)
    CustomCLSID: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\Autodesk\DWG TrueView 2015 - English\en-US\dwgviewrficn.dll (Autodesk, Inc.)
    CustomCLSID: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Program Files (x86)\Citrix\GoToMeeting\1960\G2MOutlookAddin64.dll (Citrix Online, a division of Citrix Systems, Inc.)
    CustomCLSID: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000_Classes\CLSID\{b5eedee0-c06e-11cf-8c56-444553540000}\InprocServer32 -> C:\Program Files (x86)\IDM Computer Solutions\UltraEdit\ue64ctmn.dll ()
    CustomCLSID: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)

    ==================== Scheduled Tasks (Whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    Task: {034F7867-71C0-4823-BE22-DA0202E4CC7F} - System32\Tasks\GoogleUpdateTaskMachineUA1d0e1ae7d3f57d0 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
    Task: {05AB8BB5-9BA9-4978-9AD4-13F08D2A6A68} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-11-14] (Microsoft Corporation)
    Task: {0D00C31B-F8B3-41AB-9F0A-EF7BED98B23B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-14] (Adobe Systems Incorporated)
    Task: {1DAC4F16-6157-41B3-9DD4-2F9E085E9AAA} - System32\Tasks\AdobeAAMUpdater-1.0-Battlefield-PC-Jordan => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated)
    Task: {2F57269B-1E09-4E2D-AB1E-B0FDAC7D279C} - \Microsoft\Windows\WindowsBackup\ConfigNotification -> No File <==== ATTENTION
    Task: {2F8521DB-C1B8-4498-AA4F-358688DF68CF} - System32\Tasks\hpUrlLauncher.exe_{F00FFB5D-FD89-48A2-A7E4-B9113D6053A0} => C:\Program Files\HP\HP Officejet Pro 8600\Bin\utils\hpUrlLauncher.exe [2012-10-17] (Hewlett-Packard Co.)
    Task: {3940C9F8-E811-406C-A255-D6B9079A7A58} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
    Task: {452FC3DC-21CF-4862-9CD3-16C94BC7D5FA} - System32\Tasks\updater.exe => C:\GOG Games\Total Annihilation - Commander Pack\updater.exe
    Task: {4645320B-A77E-4ED1-8669-EF1B0A5B1BCF} - \Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline -> No File <==== ATTENTION
    Task: {4EF28CCE-4250-4AAE-A1F7-3B5D52518FFA} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
    Task: {5E682862-FA1B-462B-999B-D6E206CAB558} - System32\Tasks\GoogleUpdateTaskMachineCore1d0e1ae7d024ecb => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
    Task: {626B862E-DE49-407F-BB09-27902105A199} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2016-03-21] (Safer-Networking Ltd.)
    Task: {697CD93D-B2DE-445F-88BE-956C66EC9023} - System32\Tasks\AdobeAAMUpdater-1.0-Battlefield-PC-CJ => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated)
    Task: {74154FEB-930E-41F2-82FA-551306202112} - System32\Tasks\ASUS\ASUS AI Suite II Execute => C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2012-03-13] (ASUSTeK Computer Inc.)
    Task: {75ADB88E-002C-4734-A144-52C28D118AD0} - System32\Tasks\G2MUploadTask-S-1-5-21-3544609310-1622349089-2069013866-1000 => C:\Program Files (x86)\Citrix\GoToMeeting\3215\g2mupload.exe [2015-08-14] (Citrix Online, a division of Citrix Systems, Inc.)
    Task: {89B59F6E-2D5F-4B42-9885-A493E9DA1C7C} - System32\Tasks\ASUS\RunDAOD => C:\Windows\DAODx.exe [2009-03-30] ()
    Task: {8C9F38C0-15B4-45AC-9762-1670E04D9FC4} - System32\Tasks\AGProxyCheck => C:\Program [Argument = Files (x86)\AnonymizerGadget\AGService.exe /recove]
    Task: {8D9A022D-3FEA-49CD-9528-225C92BFB5A2} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-02-03] (Adobe Systems Incorporated)
    Task: {938D9F26-F22A-4150-B21B-18FC7000C39B} - System32\Tasks\AdobeAAMUpdater-1.0-Battlefield-PC-Battlefield => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated)
    Task: {982E12A9-69AC-4070-B1E9-71274408C30B} - System32\Tasks\G2MUpdateTask-S-1-5-21-3544609310-1622349089-2069013866-1000 => C:\Program Files (x86)\Citrix\GoToMeeting\3215\g2mupdate.exe [2015-08-14] (Citrix Online, a division of Citrix Systems, Inc.)
    Task: {A1E28B8B-F5FA-446E-8B97-1DA9C022CEAB} - \Microsoft\Windows\Windows Activation Technologies\ValidationTask -> No File <==== ATTENTION
    Task: {A2284A70-45A9-4609-AFD3-F087C7D3ED2A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
    Task: {AC49B223-7D5B-4C5D-9B58-97151745FD29} - System32\Tasks\NIUpdateServiceCheckTask => C:\Program Files (x86)\National Instruments\Shared\Update Service\NIUpdateService.exe [2013-05-28] (National Instruments)
    Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - \Microsoft\Windows\Application Experience\AitAgent -> No File <==== ATTENTION
    Task: {AE13DE98-72A8-4B30-BD3D-34E29D1A37A2} - System32\Tasks\ASUS\Easy Update => C:\Program Files (x86)\ASUS\AI Suite II\EasyUpdate\EzUpdt.exe [2012-10-08] ()
    Task: {C6207098-8482-427E-90D0-2CBCB0589A17} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-06-09] (Microsoft Corporation)
    Task: {CEE64558-E1A7-4D9D-80A7-2001912BE5B5} - \Microsoft\Windows\MemoryDiagnostic\CorruptionDetector -> No File <==== ATTENTION
    Task: {D52D7FE0-0FC7-43A9-8CA8-9EB7C46D44C7} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2016-03-21] (Safer-Networking Ltd.)
    Task: {EB19B095-71A6-4E2E-AD1B-0A6DEAA2C1A5} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-07-27] (Dropbox, Inc.)
    Task: {F1E5514E-65D0-42BB-AB25-52435BE9129A} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Battlefield-PC-Battlefield Battlefield-PC => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2015-06-02] (Microsoft Corporation)
    Task: {FA2BC0A6-8D4B-458A-85C8-2B8C72487513} - \Microsoft\Windows\MemoryDiagnostic\DecompressionFailureDetector -> No File <==== ATTENTION
    Task: {FC7224EB-156A-4ADB-A313-7FBA5597A518} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-07-27] (Dropbox, Inc.)
    Task: {FFF8733F-DACF-468F-983F-C7DBCF42BD4E} - System32\Tasks\RunAsStdUser Task => C:\Users\Battlefield\AppData\Local\KangoBoxSA\bin\1.0.2.0\KangoBoxSA.exe

    (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

    Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
    Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
    Task: C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-3544609310-1622349089-2069013866-1000.job => C:\Program Files (x86)\Citrix\GoToMeeting\3215\g2mupdate.exe
    Task: C:\Windows\Tasks\G2MUploadTask-S-1-5-21-3544609310-1622349089-2069013866-1000.job => C:\Program Files (x86)\Citrix\GoToMeeting\3215\g2mupload.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\updater.exe.job => C:\GOG Games\Total Annihilation - Commander Pack\updater.exe

    ==================== Shortcuts & WMI ========================

    (The entries could be listed to be restored or removed.)


    Shortcut: C:\Users\Battlefield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chief Architect\Chief Architect X2\Chief Architect Website.lnk -> hxxp://chiefarchitect.com
    Shortcut: C:\Users\Battlefield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chief Architect\Chief Architect X2\IRC Checklist.lnk -> hxxp://chiefarchitect.com/useraccess/ircchecklis

    ShortcutWithArgument: C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_mgndgikekgjfcpckkfioiadnlibdjbkf\Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=mgndgikekgjfcpckkfioiadnlibdjbkf
    ShortcutWithArgument: C:\Users\Battlefield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qt Enterprise\5.3.0\MSVC 2013 (64-bit)\Qt 5.3.0 64-bit for Desktop (MSVC 2013).lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /A /Q /K C:\Qt\5.3\msvc2013_64\bin\qtenv2.bat
    ShortcutWithArgument: C:\Users\Battlefield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qt Enterprise\5.3.0\MSVC 2012 OpenGL (32-bit)\Qt 5.3.0 32-bit for Desktop (MSVC 2012 OpenGL).lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /A /Q /K C:\Qt\5.3\msvc2012_opengl\bin\qtenv2.bat
    ShortcutWithArgument: C:\Users\Battlefield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qt Enterprise\5.2.1\MSVC 2012 (32-bit)\Qt 5.2.1 32-bit for Desktop (MSVC 2012).lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /A /Q /K C:\Qt\5.2.1\msvc2012\bin\qtenv2.bat

    ==================== Loaded Modules (Whitelisted) ==============

    2014-05-28 16:23 - 2014-05-28 16:23 - 00098512 _____ () C:\Program Files (x86)\EMET 4.1\EMET_CE64.DLL
    2014-06-09 23:00 - 2014-06-09 23:00 - 00772456 _____ () C:\Program Files\TortoiseGit\bin\libgit2_tgit.dll
    2014-06-09 23:00 - 2014-06-09 23:00 - 00087400 _____ () C:\Program Files\TortoiseGit\bin\zlib1_tgit.dll

    ==================== Alternate Data Streams (Whitelisted) =========

    (If an entry is included in the fixlist, only the ADS will be removed.)

    AlternateDataStreams: C:\Windows:nlsPreferences [386]
    AlternateDataStreams: C:\Program Files\Common Files\System:zYtvMSxqSk4l5FMDRCKlFNw [2244]
    AlternateDataStreams: C:\ProgramData\Microsoft:0lAW6QhwAqWt2izmioQXq2 [2112]
    AlternateDataStreams: C:\ProgramData\Microsoft:rWxxDCDxLP0TVwMM6umeTHoeG1 [1928]
    AlternateDataStreams: C:\ProgramData\Microsoft:u9IffPXpiYP5xLCvElJk0IEEx [1958]
    AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm [0]
    AlternateDataStreams: C:\Users\Battlefield\Local Settings:567A8B67-6F1F-423d-8002-2907ACC74B9F [47]
    AlternateDataStreams: C:\Users\Battlefield\Desktop\BFH Stormtroopers March 2015.mov:com.dropbox.attributes [422]
    AlternateDataStreams: C:\Users\Battlefield\AppData\Local:567A8B67-6F1F-423d-8002-2907ACC74B9F [47]
    AlternateDataStreams: C:\Users\Battlefield\AppData\Local\Application Data:567A8B67-6F1F-423d-8002-2907ACC74B9F [47]
    AlternateDataStreams: C:\Users\Battlefield\AppData\Local\Temporary Internet Files:wb5gqcNGVznWFclCUfBl9hUe [1868]
    AlternateDataStreams: C:\Users\Battlefield\Documents\Comp 1.mpg:TOC.WMV [130]
    AlternateDataStreams: C:\Users\Battlefield\Documents\Comp 1_3_1.avi:TOC.WMV [130]
    AlternateDataStreams: C:\Users\Battlefield\Documents\Comp 1_3_1.mpg:TOC.WMV [130]

    ==================== Safe Mode (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"
    e"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\atashost => ""="Service"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SMPCHelper => ""=""
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\tvnserver => ""=""

    ==================== Association (Whitelisted) ===============

    (If an entry is included in the fixlist, the registry item will be restored to default or removed.)

    HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\Software\Classes\.scr: DWGTrueViewScriptFile => C:\Windows\system32\notepad.exe "%1"

    ==================== Internet Explorer trusted/restricted ===============

    (If an entry is included in the fixlist, it will be removed from the registry.)

    IE trusted site: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\houstondogtags.com -> hxxp://www.houstondogtags.com

    ==================== Hosts content: ==========================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2009-07-13 21:34 - 2015-05-15 12:15 - 00000141 _____ C:\Windows\system32\Drivers\etc\hosts

    127.0.0.1 localhost
    192.168.0.245 maesik
    192.168.0.245 server-2012
    98.199.39.34 jessica.pi
    192.168.0.5 battlefieldhou

    ==================== Other Areas ============================

    (Currently there is no automatic fix for this section.)

    HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\Control Panel\Desktop\\Wallpaper ->
    DNS Servers: 8.8.8.8 - 8.8.4.4
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

    ==================== MSCONFIG/TASK MANAGER disabled items ==

    MSCONFIG\Services: AdobeARMservice => 2
    MSCONFIG\Services: asComSvc => 2
    MSCONFIG\Services: AsSysCtrlService => 2
    MSCONFIG\Services: atashost => 2
    MSCONFIG\Services: AudioEndpointBuilder => 2
    MSCONFIG\Services: AudioSrv => 2
    MSCONFIG\Services: BFE => 2
    MSCONFIG\Services: BITS => 3
    MSCONFIG\Services: Bonjour Service => 2
    MSCONFIG\Services: CarboniteService => 2
    MSCONFIG\Services: CryptSvc => 3
    MSCONFIG\Services: dbupdate => 2
    MSCONFIG\Services: dbupdatem => 3
    MSCONFIG\Services: DbxSvc => 2
    MSCONFIG\Services: DisplayLinkService => 2
    MSCONFIG\Services: DpHost => 2
    MSCONFIG\Services: EPSON_Device_Control_Log_Service => 2
    MSCONFIG\Services: EPSON_Port_Communication_Service => 2
    MSCONFIG\Services: gupdate => 2
    MSCONFIG\Services: gupdatem => 3
    MSCONFIG\Services: hasplms => 2
    MSCONFIG\Services: iPod Service => 3
    MSCONFIG\Services: MozillaMaintenance => 3
    MSCONFIG\Services: NILM License Manager => 3
    MSCONFIG\Services: nlsX86cc => 2
    MSCONFIG\Services: Nonbrand_WUS-N_WPS => 2
    MSCONFIG\Services: NovacomD => 2
    MSCONFIG\Services: Palm_TCP_Relay => 2
    MSCONFIG\Services: Steam Client Service => 3
    MSCONFIG\Services: SwitchBoard => 3
    MSCONFIG\Services: TeamViewer8 => 2
    MSCONFIG\startupfolder: C:^Users^Battlefield^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
    MSCONFIG\startupreg: Adobe Acrobat Speed Launcher => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
    MSCONFIG\startupreg: AdobeCS5.5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
    MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
    MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
    MSCONFIG\startupreg: ApnTBMon => "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
    MSCONFIG\startupreg: ApplePhotoStreams => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
    MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
    MSCONFIG\startupreg: ASUS AiChargerPlus Execute => C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
    MSCONFIG\startupreg: DivXUpdate => "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
    MSCONFIG\startupreg: Dropbox => "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
    MSCONFIG\startupreg: GoPro Studio Importer => C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe
    MSCONFIG\startupreg: iCloudServices => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
    MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
    MSCONFIG\startupreg: KeePass 2 PreLoad => "C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe" --preload
    MSCONFIG\startupreg: NI Update Service => "C:\Program Files (x86)\National Instruments\Shared\Update Service\NIUpdateService.exe" -startupTask
    MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
    MSCONFIG\startupreg: Nvtmru => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
    MSCONFIG\startupreg: PMBVolumeWatcher => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe /SysAutoRun
    MSCONFIG\startupreg: Pokki => "C:\Users\Battlefield\AppData\Local\Pokki\v0.259\pokki.exe"
    MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
    MSCONFIG\startupreg: Steam => "E:\Games\Steam\steam.exe" -silent
    MSCONFIG\startupreg: VsHub.exe => "C:\Program Files (x86)\Common Files\Microsoft Shared\VsHub\1.0.0.0\vshub.exe" Execute --delay 120 --console false
    MSCONFIG\startupreg: WD Quick View => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
    MSCONFIG\startupreg: WZCSLDR2 => C:\Program Files (x86)\KEEBOX\150N Wireless Utility\WZCSLDR2.exe
    MSCONFIG\startupreg: zep32AsyncUI => C:\Windows\system32\zep32AsyncUIClient.exe

    ==================== FirewallRules (Whitelisted) ===============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    FirewallRules: [TCP Query User{21DE7197-2A96-440B-8409-3278672B3654}C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe] => (Block) C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe
    FirewallRules: [UDP Query User{80557B49-3216-460F-ACA1-F84986A301EC}C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe] => (Block) C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe
    FirewallRules: [TCP Query User{73DD5642-9E22-45DE-9D6F-CE6123C26EAF}C:\program files (x86)\ringcentral\ringcentral call controller\rcui.exe] => (Allow) C:\program files (x86)\ringcentral\ringcentral call controller\rcui.exe
    FirewallRules: [UDP Query User{A85C3AA6-18FA-4EA2-8481-CFBE7F13FF52}C:\program files (x86)\ringcentral\ringcentral call controller\rcui.exe] => (Allow) C:\program files (x86)\ringcentral\ringcentral call controller\rcui.exe
    FirewallRules: [TCP Query User{29D2D530-85F1-499D-B75C-931B2281BCDD}C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe
    FirewallRules: [UDP Query User{DEC8ADEE-2243-4006-8C39-A25184F69A30}C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe
    FirewallRules: [TCP Query User{C07B1519-468D-46A6-9BA8-31719F37208C}C:\program files (x86)\ringcentral\ringcentral call controller\rcui.exe] => (Allow) C:\program files (x86)\ringcentral\ringcentral call controller\rcui.exe
    FirewallRules: [UDP Query User{35193AD7-8C6A-475F-8A21-4851FECEF9B7}C:\program files (x86)\ringcentral\ringcentral call controller\rcui.exe] => (Allow) C:\program files (x86)\ringcentral\ringcentral call controller\rcui.exe
    FirewallRules: [TCP Query User{0CEF4E58-D8AB-4E9F-8BA0-C75837BE9F1F}C:\program files (x86)\network print monitor\pswizard-lpr.exe] => (Allow) C:\program files (x86)\network print monitor\pswizard-lpr.exe
    FirewallRules: [UDP Query User{3DC2606A-321E-4D22-9D94-310ACA201C7D}C:\program files (x86)\network print monitor\pswizard-lpr.exe] => (Allow) C:\program files (x86)\network print monitor\pswizard-lpr.exe
    FirewallRules: [{D90A8D18-AA4A-44C5-9128-7CA3CDED4CB6}] => (Allow) C:\Program Files (x86)\EPSON\EPSON Advanced Printer Driver 4\Tools\PrinterNetworkSetting\APDNetSetting.exe
    FirewallRules: [{DCE18B44-6F90-4796-9531-52A82619938F}] => (Allow) C:\Program Files (x86)\EPSON\EPSON Advanced Printer Driver 4\Tools\PrinterNetworkSetting\APDNetSetting.exe
    FirewallRules: [TCP Query User{E67AB731-0552-4643-8FC0-99ECE7804B89}C:\windows\system32\ftp.exe] => (Allow) C:\windows\system32\ftp.exe
    FirewallRules: [UDP Query User{3CF3B027-5552-44B8-9D9C-49E2AF345A39}C:\windows\system32\ftp.exe] => (Allow) C:\windows\system32\ftp.exe
    FirewallRules: [{8441DB24-EEB5-490E-862C-66ADA4AF4A49}] => (Allow) C:\Program Files (x86)\Adobe\Adobe Edge Inspect\EdgeInspect.exe
    FirewallRules: [{6F8C3444-C1F4-4F38-A8A1-337C784337A0}] => (Allow) C:\Program Files (x86)\Adobe\Adobe Flash Builder 4.6\FlashBuilder.exe
    FirewallRules: [{7F9B4F10-148D-46BC-AF2A-0E2F20F80839}] => (Allow) C:\Program Files (x86)\Adobe\Adobe Flash Builder 4.6\FlashBuilder.exe
    FirewallRules: [{E0F42E96-2008-4AF8-AD52-966B4F8C46FB}] => (Allow) LPort=7935
    FirewallRules: [{840EDBFF-7BC8-4E54-B95C-D92FA4AEA50B}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\WDExpress.exe
    FirewallRules: [TCP Query User{10FD08C7-63C0-4044-80B4-51933AE708E6}C:\program files (x86)\transmission-qt\transmission-qt.exe] => (Allow) C:\program files (x86)\transmission-qt\transmission-qt.exe
    FirewallRules: [UDP Query User{03ADF8D9-B839-45B4-A13D-D80ACC1CC3FC}C:\program files (x86)\transmission-qt\transmission-qt.exe] => (Allow) C:\program files (x86)\transmission-qt\transmission-qt.exe
    FirewallRules: [TCP Query User{60E241D3-416C-4D86-9E98-5A96E23BF2AB}C:\program files (x86)\digi\xctu\x-ctu.exe] => (Allow) C:\program files (x86)\digi\xctu\x-ctu.exe
    FirewallRules: [UDP Query User{74A531AE-3881-438D-A19F-65ACAF3C7FE8}C:\program files (x86)\digi\xctu\x-ctu.exe] => (Allow) C:\program files (x86)\digi\xctu\x-ctu.exe
    FirewallRules: [TCP Query User{3DF1874E-12AC-4588-AF54-222A40DAC867}C:\hulapos\connector\altaconnector.exe] => (Allow) C:\hulapos\connector\altaconnector.exe
    FirewallRules: [UDP Query User{7DE2AEB1-6DC0-4AD8-99D5-BA3AF04791D6}C:\hulapos\connector\altaconnector.exe] => (Allow) C:\hulapos\connector\altaconnector.exe
    FirewallRules: [TCP Query User{00FE2257-6023-492C-A009-02AD9F279C8A}C:\hulapos\desktop\altadesktop.exe] => (Allow) C:\hulapos\desktop\altadesktop.exe
    FirewallRules: [UDP Query User{64B2B9E8-2081-45CD-BCE6-507EF3C5D54A}C:\hulapos\desktop\altadesktop.exe] => (Allow) C:\hulapos\desktop\altadesktop.exe
    FirewallRules: [TCP Query User{816D102D-5644-46D2-8E5F-29969B36FD0F}C:\program files\kreateck\kreaposc\xmlserver.exe] => (Allow) C:\program files\kreateck\kreaposc\xmlserver.exe
    FirewallRules: [UDP Query User{7D8DDC6F-CE8F-4847-B397-3EF48EF77BD4}C:\program files\kreateck\kreaposc\xmlserver.exe] => (Allow) C:\program files\kreateck\kreaposc\xmlserver.exe
    FirewallRules: [TCP Query User{6E832EC2-8DA1-45FC-A74C-8E5B6E4D219A}C:\program files\kreateck\kreaposc\kreasrv.exe] => (Allow) C:\program files\kreateck\kreaposc\kreasrv.exe
    FirewallRules: [UDP Query User{A24DBA6D-DC66-4CB9-AEDB-70758672B95E}C:\program files\kreateck\kreaposc\kreasrv.exe] => (Allow) C:\program files\kreateck\kreaposc\kreasrv.exe
    FirewallRules: [{5A811A09-70FB-4A78-AC62-483B536C67ED}] => (Allow) C:\Program Files (x86)\Wyse\PocketCloud Windows Companion\PocketCloudInstallWizard.exe
    FirewallRules: [{3CCEEB24-B6FE-47D1-AE93-BF5BCAB2DCAF}] => (Allow) C:\Program Files (x86)\EPSON\TM-T88V Software\TM88VUTL\TM88VUTL.EXE
    FirewallRules: [{48044054-F1AB-4AC7-9977-9748FE3AA509}] => (Allow) C:\Program Files (x86)\EPSON\TM-T88V Software\TM88VUTL\TM88VUTL.EXE
    FirewallRules: [{EAC4CA9D-A85D-4F96-94B4-C1A8A52E6EE8}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\devenv.exe
    FirewallRules: [{DC7CF320-6F63-419B-B8D8-01DEB1369D2E}] => (Allow) LPort=1433
    FirewallRules: [{BDFAF512-755F-4FC5-BB2B-2D123E294212}] => (Allow) %ProgramFiles%\Microsoft SQL Server\MSSQL11.TESTSERVER\MSSQL\Binn\sqlservr.exe
    FirewallRules: [TCP Query User{DF65D74C-9B1B-4B95-B3F1-A3DDF5244D01}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_d6fce8aea6f600df_0002.0000_ef950f00335eb66c\timer - server.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_d6fce8aea6f600df_0002.0000_ef950f00335eb66c\timer - server.exe
    FirewallRules: [UDP Query User{40DB3F85-FEF2-416D-B5D1-1359F5955083}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_d6fce8aea6f600df_0002.0000_ef950f00335eb66c\timer - server.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_d6fce8aea6f600df_0002.0000_ef950f00335eb66c\timer - server.exe
    FirewallRules: [TCP Query User{5DF3485A-9E16-4A8A-9C4A-F8232CE4055F}C:\program files (x86)\centeredge software\sign editor\advsigneditor.exe] => (Allow) C:\program files (x86)\centeredge software\sign editor\advsigneditor.exe
    FirewallRules: [UDP Query User{764FA249-EE37-4A10-82CD-6EB3E56E98C7}C:\program files (x86)\centeredge software\sign editor\advsigneditor.exe] => (Allow) C:\program files (x86)\centeredge software\sign editor\advsigneditor.exe
    FirewallRules: [{63E4A817-0E9D-4FB0-A4C0-DC9DDF30570C}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
    FirewallRules: [{2DACAAE6-E296-4337-A34B-F40E260597B2}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
    FirewallRules: [TCP Query User{E85343FA-1DDE-49EC-B83E-924DEE851515}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_d6fce8aea6f600df_0002.0000_dcd474c9db6913ac\timer - server.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_d6fce8aea6f600df_0002.0000_dcd474c9db6913ac\timer - server.exe
    FirewallRules: [UDP Query User{922EEBDB-6C5C-4ABA-B1E8-396AF7752035}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_d6fce8aea6f600df_0002.0000_dcd474c9db6913ac\timer - server.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_d6fce8aea6f600df_0002.0000_dcd474c9db6913ac\timer - server.exe
    FirewallRules: [TCP Query User{698DE5B8-DB6C-48F6-BCAA-AB91E1B1CC6B}C:\program files (x86)\ringcentral\ringcentral softphone\rcui.exe] => (Allow) C:\program files (x86)\ringcentral\ringcentral softphone\rcui.exe
    FirewallRules: [UDP Query User{9BD5431F-34F5-410B-A7BA-76CAC9891128}C:\program files (x86)\ringcentral\ringcentral softphone\rcui.exe] => (Allow) C:\program files (x86)\ringcentral\ringcentral softphone\rcui.exe
    FirewallRules: [{EB846824-11FF-4693-A022-EEC2F3B9BE02}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
    FirewallRules: [{1BB4D8F9-27A7-4B93-BDE5-6D7D7138AED8}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
    FirewallRules: [TCP Query User{93EF9754-D42D-4F18-93F0-B18F31A62CAA}C:\program files (x86)\ringcentral\ringcentral softphone\rcui.exe] => (Block) C:\program files (x86)\ringcentral\ringcentral softphone\rcui.exe
    FirewallRules: [UDP Query User{E45E194D-AA1C-44F9-A76F-951B9BCF283B}C:\program files (x86)\ringcentral\ringcentral softphone\rcui.exe] => (Block) C:\program files (x86)\ringcentral\ringcentral softphone\rcui.exe
    FirewallRules: [{FCF8042F-D3F8-477F-BC9E-6AB246C014EA}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{30A92F2C-FFFD-435F-AE6B-8FE639EC5289}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{04024E81-D530-4D96-87EC-D682240D60DC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
    FirewallRules: [{646F7C85-0C33-4E73-8752-838B566BB2E3}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
    FirewallRules: [{05918C4D-8299-4390-9787-EDA0DFEDABB2}] => (Allow) C:\Users\Battlefield\AppData\Local\Temp\7zS3FDA\HPDiagnosticCoreUI.exe
    FirewallRules: [{C3AA7D0D-43E5-46DC-8C8E-64020D07A6D8}] => (Allow) C:\Users\Battlefield\AppData\Local\Temp\7zS3FDA\HPDiagnosticCoreUI.exe
    FirewallRules: [{239B7E07-663B-4A3E-9D9A-2B036D6E24F2}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\{5FA67C2B-DAAB-4F7B-AE09-CA97FE73EA59}\setup\hpznui40.exe
    FirewallRules: [{590D6C04-06B1-4D89-82D2-F25917535253}] => (Allow) C:\Users\Battlefield\AppData\Local\Temp\7zS595D\HPDiagnosticCoreUI.exe
    FirewallRules: [{FAFE6BB6-202E-4663-BBE1-F571742FAD74}] => (Allow) C:\Users\Battlefield\AppData\Local\Temp\7zS595D\HPDiagnosticCoreUI.exe
    FirewallRules: [{2BA8E74F-BE06-40EC-A838-513DBD77B8F7}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\bin\FaxApplications.exe
    FirewallRules: [{EB4C07C2-034F-42D8-BAC8-056E145564F9}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\bin\DigitalWizards.exe
    FirewallRules: [{A651629E-5B5C-4E40-80C2-61103C315996}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\bin\SendAFax.exe
    FirewallRules: [{A4C7FF94-4592-42F6-A222-A5DCFA175846}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\Bin\DeviceSetup.exe
    FirewallRules: [{89DF1122-71BD-4B60-AC7B-55B8DC5943AF}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicator.exe
    FirewallRules: [{6F986317-324A-4EAC-8112-91D90B80F431}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicatorCom.exe
    FirewallRules: [{917EC9F0-6A2F-45E3-B442-483A9440A2BD}] => (Allow) F:\Programs\Steam\SteamApps\common\Precipice Of Darkness 3\Rainslick3.exe
    FirewallRules: [{26A2330E-79DC-462D-BC5C-AAFD8C9839C1}] => (Allow) F:\Programs\Steam\SteamApps\common\Precipice Of Darkness 3\Rainslick3.exe
    FirewallRules: [{BA029A0D-4175-47B8-8B6B-A55064E00FB4}] => (Allow) F:\Programs\Steam\SteamApps\common\Penny Arcade's On the Rain-Slick Precipice of Darkness 4\Rainslick4.exe
    FirewallRules: [{A68A6E58-5FC3-4C46-B76A-92867231F0B3}] => (Allow) F:\Programs\Steam\SteamApps\common\Penny Arcade's On the Rain-Slick Precipice of Darkness 4\Rainslick4.exe
    FirewallRules: [{F11F05D5-C2E2-44D0-B753-4C504B97CED3}] => (Allow) F:\Programs\Steam\SteamApps\common\the witcher 2\Launcher.exe
    FirewallRules: [{E073D3AF-E5EB-4379-BE1D-8C2668EF7005}] => (Allow) F:\Programs\Steam\SteamApps\common\the witcher 2\Launcher.exe
    FirewallRules: [{CA6EBAF8-E81C-43D4-944E-3CD04D0C7B61}] => (Allow) F:\Programs\Steam\SteamApps\common\Mount and Blade Warband - Demo\mb_warband.exe
    FirewallRules: [{864E01D4-1584-4589-BF85-A0F8DC2D7A2E}] => (Allow) F:\Programs\Steam\SteamApps\common\Mount and Blade Warband - Demo\mb_warband.exe
    FirewallRules: [TCP Query User{5830EE70-0BAA-4823-A568-EA9D73E7FF07}F:\programs\warcraft iii\war3.exe] => (Allow) F:\programs\warcraft iii\war3.exe
    FirewallRules: [UDP Query User{848005F3-166C-4CD9-BA3A-90D0931C8CF9}F:\programs\warcraft iii\war3.exe] => (Allow) F:\programs\warcraft iii\war3.exe
    FirewallRules: [{CC1E8F12-4B64-4CF7-AE69-B042950E8E73}] => (Allow) F:\Programs\Steam\SteamApps\common\Supreme Commander 2\bin\SupremeCommander2.exe
    FirewallRules: [{31679F20-D431-4DDA-BD7C-0D1A3FD32A4E}] => (Allow) F:\Programs\Steam\SteamApps\common\Supreme Commander 2\bin\SupremeCommander2.exe
    FirewallRules: [{F2E54F3A-44D1-4449-A3D5-4E8E0118234A}] => (Allow) F:\Programs\Steam\SteamApps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
    FirewallRules: [{87D327DF-B421-4B78-8612-1852648821AE}] => (Allow) F:\Programs\Steam\SteamApps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
    FirewallRules: [{BA9EB260-B9AA-4952-8DC2-B2DE04EA1C56}] => (Allow) E:\Programs\Steam\SteamApps\common\Sins of a Solar Empire Rebellion\Sins of a Solar Empire Rebellion.exe
    FirewallRules: [{C1003B40-9F70-4FB7-9F4F-3AEC0F9B1F37}] => (Allow) E:\Programs\Steam\SteamApps\common\Sins of a Solar Empire Rebellion\Sins of a Solar Empire Rebellion.exe
    FirewallRules: [{F2ED918E-E456-456B-9547-770E33297DFA}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
    FirewallRules: [{7FAD2B0E-A087-4B7F-9553-97D9AE4FB2EF}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
    FirewallRules: [{8B4A489A-152A-423E-8F66-882F7515168B}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
    FirewallRules: [{28567A16-FEF8-4DE3-99A0-991630750C5B}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
    FirewallRules: [{8EA089D3-1FBC-4BA0-91A7-9CF2240E28F4}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
    FirewallRules: [TCP Query User{F44B5AF2-59E2-447D-A24E-CCAF848C69E2}C:\users\battlefield\documents\visual studio 2012\projects\bfh timer\events timer\events timer\bfh server\bin\debug\timer - server.exe] => (Allow) C:\users\battlefield\documents\visual studio 2012\projects\bfh timer\events timer\events timer\bfh server\bin\debug\timer - server.exe
    FirewallRules: [UDP Query User{58CE18CD-C19A-4BEA-98D2-A9B37D7B782F}C:\users\battlefield\documents\visual studio 2012\projects\bfh timer\events timer\events timer\bfh server\bin\debug\timer - server.exe] => (Allow) C:\users\battlefield\documents\visual studio 2012\projects\bfh timer\events timer\events timer\bfh server\bin\debug\timer - server.exe
    FirewallRules: [TCP Query User{BEA657B3-685C-49EF-AC31-603D18D17F74}C:\users\battlefield\documents\visual studio 2012\projects\bfh timer\events timer\events timer\bfh server\bin\debug\timer - server.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2012\projects\bfh timer\events timer\events timer\bfh server\bin\debug\timer - server.vshost.exe
    FirewallRules: [UDP Query User{A0C6906D-B276-4BF5-9F11-BCE86116822D}C:\users\battlefield\documents\visual studio 2012\projects\bfh timer\events timer\events timer\bfh server\bin\debug\timer - server.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2012\projects\bfh timer\events timer\events timer\bfh server\bin\debug\timer - server.vshost.exe
    FirewallRules: [{3D6BDBE0-67E1-4D70-ABF5-B2FC21A40B98}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
    FirewallRules: [{9ECFAB96-7127-421D-9C3B-A5C7440CC951}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
    FirewallRules: [{058215F5-6301-472B-B297-CB410FB706FD}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
    FirewallRules: [{AD544C0D-C6D1-4281-AF68-7623F0192DB9}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
    FirewallRules: [TCP Query User{4200CE53-85D0-4116-BAC1-AAD65ACC42D5}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_c7fb621a750c2678_0002.0002_515e619a63ad1780\timer - server.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_c7fb621a750c2678_0002.0002_515e619a63ad1780\timer - server.exe
    FirewallRules: [UDP Query User{2F64B061-BC36-4F53-A50C-94BD4616343D}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_c7fb621a750c2678_0002.0002_515e619a63ad1780\timer - server.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_c7fb621a750c2678_0002.0002_515e619a63ad1780\timer - server.exe
    FirewallRules: [TCP Query User{3F04C0BF-9F18-47A9-9B90-9E147F2A01DF}C:\users\battlefield\documents\visual studio 2012\projects\lasertag server\lasertag server\bin\debug\lasertag server.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2012\projects\lasertag server\lasertag server\bin\debug\lasertag server.vshost.exe
    FirewallRules: [UDP Query User{74998ED9-331F-435B-96E2-D868191B0B48}C:\users\battlefield\documents\visual studio 2012\projects\lasertag server\lasertag server\bin\debug\lasertag server.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2012\projects\lasertag server\lasertag server\bin\debug\lasertag server.vshost.exe
    FirewallRules: [TCP Query User{B94ADE4C-E96E-41D6-8AE4-A507CD13E41A}C:\users\battlefield\documents\visual studio 2012\projects\lasertag server\lasertag server\bin\debug\lasertag server.exe] => (Allow) C:\users\battlefield\documents\visual studio 2012\projects\lasertag server\lasertag server\bin\debug\lasertag server.exe
    FirewallRules: [UDP Query User{6F3CFFE7-FF81-49BA-B113-EEC1A34DE0B5}C:\users\battlefield\documents\visual studio 2012\projects\lasertag server\lasertag server\bin\debug\lasertag server.exe] => (Allow) C:\users\battlefield\documents\visual studio 2012\projects\lasertag server\lasertag server\bin\debug\lasertag server.exe
    FirewallRules: [{7FC56627-B2A0-4E0F-BCA5-3D9510C1C5BC}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe
    FirewallRules: [{1C25887E-A19D-4EA0-BEB2-5AC8BD0E32D8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
    FirewallRules: [{E65BD376-AB5C-43E7-8C46-53190D82D3AB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
    FirewallRules: [{8F7730CB-A536-4447-A428-1E168306BF83}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
    FirewallRules: [{A79BB051-F5F8-4243-9262-7BA3F26207B8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
    FirewallRules: [TCP Query User{4B7814C1-A3D8-49EB-90B7-7D12701C4E69}C:\users\battlefield\downloads\miner\stratumproxy\mining_proxy.exe] => (Allow) C:\users\battlefield\downloads\miner\stratumproxy\mining_proxy.exe
    FirewallRules: [UDP Query User{396E216E-9F17-43AF-BA26-8F562F5A732A}C:\users\battlefield\downloads\miner\stratumproxy\mining_proxy.exe] => (Allow) C:\users\battlefield\downloads\miner\stratumproxy\mining_proxy.exe
    FirewallRules: [{87C5029F-177C-4019-A2A2-F01013DF8F52}] => (Allow) LPort=5900
    FirewallRules: [{3983DEBD-A017-40CC-ADF7-D02644D0B1C7}] => (Allow) %ProgramFiles% (x86)\Intuit\QuickBooks 2014\QBW32Pro.exe
    FirewallRules: [{A9885A47-FDCA-422F-9E34-72CA8B5A9910}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
    FirewallRules: [{08EB4453-87D7-44B8-BA0D-6F6D568B2EBF}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
    FirewallRules: [{E3D25432-B7AA-4DBA-9383-49A760A9710B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
    FirewallRules: [{4007A2CA-D1B1-4F7D-A71D-F644CD9068A3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
    FirewallRules: [{25D29940-8C89-4F82-8BD9-BCD924009CC3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
    FirewallRules: [{E7168564-088E-4F97-B7AC-9B3F0E62D0A3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
    FirewallRules: [TCP Query User{8080FAC4-365C-4C9A-BF55-BA078B9F63CB}C:\program files (x86)\freesshd\freesshdservice.exe] => (Allow) C:\program files (x86)\freesshd\freesshdservice.exe
    FirewallRules: [UDP Query User{BD6D8A92-BF51-4342-AFCC-74503DB787DA}C:\program files (x86)\freesshd\freesshdservice.exe] => (Allow) C:\program files (x86)\freesshd\freesshdservice.exe
    FirewallRules: [{AB30EC54-9F6F-463E-8E04-AC31BA22A3CD}] => (Allow) C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe
    FirewallRules: [TCP Query User{254734B1-E4D2-4164-890C-BF62F467CC3A}C:\users\battlefield\desktop\arduino-1.5.2\java\bin\javaw.exe] => (Block) C:\users\battlefield\desktop\arduino-1.5.2\java\bin\javaw.exe
    FirewallRules: [UDP Query User{6E33599C-8236-4771-9DBD-12125C0A7651}C:\users\battlefield\desktop\arduino-1.5.2\java\bin\javaw.exe] => (Block) C:\users\battlefield\desktop\arduino-1.5.2\java\bin\javaw.exe
    FirewallRules: [TCP Query User{804EE654-C43E-49D0-8173-E7BD8431CE70}C:\program files (x86)\adobe\adobe edge animate\edgeanimate.exe] => (Allow) C:\program files (x86)\adobe\adobe edge animate\edgeanimate.exe
    FirewallRules: [UDP Query User{7916659A-35B6-45E5-B824-0136E55A2AFD}C:\program files (x86)\adobe\adobe edge animate\edgeanimate.exe] => (Allow) C:\program files (x86)\adobe\adobe edge animate\edgeanimate.exe
    FirewallRules: [{371C8FEB-0FA7-43BE-B3D6-466E2B0827BC}] => (Allow) LPort=55358
    FirewallRules: [TCP Query User{78EDF231-693B-4D80-A091-48FE86B716AE}C:\users\battlefield\desktop\arduino-1.5.2\java\bin\javaw.exe] => (Allow) C:\users\battlefield\desktop\arduino-1.5.2\java\bin\javaw.exe
    FirewallRules: [UDP Query User{0144FAAE-AB3C-4795-927F-8B70F094D852}C:\users\battlefield\desktop\arduino-1.5.2\java\bin\javaw.exe] => (Allow) C:\users\battlefield\desktop\arduino-1.5.2\java\bin\javaw.exe
    FirewallRules: [{68D2AA3F-597E-4B96-95B4-8C9E7DBE7484}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
    FirewallRules: [TCP Query User{1472D7D8-0C8B-42BB-A31A-6E830AEED84E}C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\lasertag server.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\lasertag server.vshost.exe
    FirewallRules: [UDP Query User{4F1DFB01-D271-467D-803C-4F6D9BA5183E}C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\lasertag server.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\lasertag server.vshost.exe
    FirewallRules: [TCP Query User{B4B8660C-2ECE-4EFE-89D2-28CEEE7BF483}C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\lasertag server.exe] => (Allow) C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\lasertag server.exe
    FirewallRules: [UDP Query User{AE54391D-707D-4CA6-82BF-E83D9ECC25AF}C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\lasertag server.exe] => (Allow) C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\lasertag server.exe
    FirewallRules: [TCP Query User{2F18F209-B725-4C19-A8FD-B11BBD5CB61A}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\lase..tion_0000000000000000_0001.0000_f2f724bc82ad3fcd\lasertag server.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\lase..tion_0000000000000000_0001.0000_f2f724bc82ad3fcd\lasertag server.exe
    FirewallRules: [UDP Query User{E543AE50-D63E-4EC9-83E7-241E0FF02D1F}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\lase..tion_0000000000000000_0001.0000_f2f724bc82ad3fcd\lasertag server.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\lase..tion_0000000000000000_0001.0000_f2f724bc82ad3fcd\lasertag server.exe
    FirewallRules: [TCP Query User{A580A19F-08CF-4A7B-9B22-DA53C61D9A4D}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\medi..tion_0000000000000000_0000.0003_7af09580b6978e7a\medic_control(development).exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\medi..tion_0000000000000000_0000.0003_7af09580b6978e7a\medic_control(development).exe
    FirewallRules: [UDP Query User{AB8EE24A-7D93-485D-86BA-C50DCBE1E7A4}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\medi..tion_0000000000000000_0000.0003_7af09580b6978e7a\medic_control(development).exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\medi..tion_0000000000000000_0000.0003_7af09580b6978e7a\medic_control(development).exe
    FirewallRules: [{5B75FDC7-3F67-4E93-ABAB-5CF6733C4B03}] => (Allow) C:\Users\Battlefield\AppData\Local\Temp\7zS0DB2\HPDiagnosticCoreUI.exe
    FirewallRules: [{DF878058-CFD4-4D53-B026-CF1A840A41FB}] => (Allow) C:\Users\Battlefield\AppData\Local\Temp\7zS0DB2\HPDiagnosticCoreUI.exe
    FirewallRules: [TCP Query User{E51E9D5E-E73B-44EA-B218-3E14578993BE}C:\program files (x86)\arduino\java\bin\javaw.exe] => (Allow) C:\program files (x86)\arduino\java\bin\javaw.exe
    FirewallRules: [UDP Query User{F2A40058-9BF5-4CB5-93A9-632F2E52ECEC}C:\program files (x86)\arduino\java\bin\javaw.exe] => (Allow) C:\program files (x86)\arduino\java\bin\javaw.exe
    FirewallRules: [TCP Query User{B5C808A6-8D1E-40C9-BD08-2240314A9F29}C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\medic_control.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\medic_control.vshost.exe
    FirewallRules: [UDP Query User{5305549D-93B9-4CF9-AD57-462F018FA668}C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\medic_control.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\medic_control.vshost.exe
    FirewallRules: [TCP Query User{428D70DA-0344-4861-A32D-052D6A99FA77}C:\users\battlefield\documents\visual studio 2012\projects\bfh server\bin\debug\timer - server.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2012\projects\bfh server\bin\debug\timer - server.vshost.exe
    FirewallRules: [UDP Query User{ACFA8C24-7C3E-4060-A8BC-603B18241BA2}C:\users\battlefield\documents\visual studio 2012\projects\bfh server\bin\debug\timer - server.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2012\projects\bfh server\bin\debug\timer - server.vshost.exe
    FirewallRules: [TCP Query User{4F39674F-ABB2-4C2F-A785-9B6B9F14C881}C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\medic_control.exe] => (Allow) C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\medic_control.exe
    FirewallRules: [UDP Query User{DD0C0FA5-5D74-4431-9CDD-CE5C9C4DE67C}C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\medic_control.exe] => (Allow) C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\medic_control.exe
    FirewallRules: [TCP Query User{D0E9CC85-B58A-4331-9807-625D6F2DF57D}C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\command_center.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\command_center.vshost.exe
    FirewallRules: [UDP Query User{C08F2D19-4614-4C0B-92B2-147E39D072D0}C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\command_center.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\command_center.vshost.exe
    FirewallRules: [TCP Query User{B4221ADF-98C2-4706-B89E-B9D455C29ED8}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0000_ec1aa7bb0a422cd7\command_center.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0000_ec1aa7bb0a422cd7\command_center.exe
    FirewallRules: [UDP Query User{514ECBDA-412E-433C-B7C0-F31C84FE655B}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0000_ec1aa7bb0a422cd7\command_center.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0000_ec1aa7bb0a422cd7\command_center.exe
    FirewallRules: [TCP Query User{7A167FBE-5C9C-400A-B9EA-ED678B7439D2}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0001_4b1981025e9ebcd7\command_center.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0001_4b1981025e9ebcd7\command_center.exe
    FirewallRules: [UDP Query User{0F32E4EE-F3A5-42C4-AD2E-D8A7EDB4C755}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0001_4b1981025e9ebcd7\command_center.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0001_4b1981025e9ebcd7\command_center.exe
    FirewallRules: [TCP Query User{33F19B68-CEA3-4F6D-AB0E-B239E20BB9A1}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0001_022f12b54903ee57\command_center.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0001_022f12b54903ee57\command_center.exe
    FirewallRules: [UDP Query User{911FBC84-2506-4725-B246-22A54B3302F2}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0001_022f12b54903ee57\command_center.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0001_022f12b54903ee57\command_center.exe
    FirewallRules: [{5368BE97-08CC-4125-8085-EBABB570E841}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
    FirewallRules: [{19E57C86-11ED-4D15-ACA4-E5E9864E8C1A}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
    FirewallRules: [{4EB5E612-4618-4D70-87BD-FDC65ACCDE1B}] => (Allow) C:\Program Files\Xamarin Android Player\AndroidPlayer.exe
    FirewallRules: [{3D7A837C-DBDD-48F9-8712-F676803A4BB6}] => (Allow) C:\Program Files\Xamarin Android Player\minimal_adb\adb.exe
    FirewallRules: [{A9C2A7E2-75FE-4C61-8B15-6FCD44513AE3}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe
    FirewallRules: [{3B848BF1-A2CB-49D8-BEDD-6E15C4BDB929}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe
    FirewallRules: [{22EC3136-CADE-4416-9D77-F40268D55AD2}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe
    FirewallRules: [{C229CA86-D1D2-4089-A45B-2E31E803BAF1}] => (Allow) C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe
    FirewallRules: [{4F08CF52-B016-4A68-944C-1304C9C0BE35}] => (Allow) C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe
    FirewallRules: [{CD4A55A3-AC69-4910-B11D-11764353D2A1}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe
    FirewallRules: [{E9F3CA92-CAD3-46F6-BDA4-C9D733553497}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe
    FirewallRules: [{8A3BB187-468E-4D84-9792-02A814D0A23C}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\nisvcloc\nisvcloc.exe
    FirewallRules: [{DF58609B-7294-4D7B-8E9A-A4EABA727F0B}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\nisvcloc\nisvcloc.exe
    FirewallRules: [{7CC2D7C2-C7CF-4B16-9F7F-7AFEA3BCE698}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe
    FirewallRules: [{E2E1F59B-0414-4A4B-97A7-45A43C47693A}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe
    FirewallRules: [TCP Query User{FA667B9D-BE55-48C8-B9ED-CEE23511DDC6}C:\program files (x86)\centeredge advantage signage\advantagesignage.exe] => (Allow) C:\program files (x86)\centeredge advantage signage\advantagesignage.exe
    FirewallRules: [UDP Query User{8DC286C6-4509-43DC-9AE9-C82169289513}C:\program files (x86)\centeredge advantage signage\advantagesignage.exe] => (Allow) C:\program files (x86)\centeredge advantage signage\advantagesignage.exe
    FirewallRules: [{4177BDF0-ECCA-4907-A8BD-A10C2EEA176C}] => (Block) C:\program files (x86)\centeredge advantage signage\advantagesignage.exe
    FirewallRules: [{6D916273-91A3-40AC-AB12-546CC034ECBE}] => (Block) C:\program files (x86)\centeredge advantage signage\advantagesignage.exe
    FirewallRules: [{8F73B3FF-5F1A-4D51-8035-F585C615B25C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    FirewallRules: [{B259F625-5EC8-4E14-904E-36694377B46A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe
    FirewallRules: [{CFE9621D-48EE-41EC-8FBC-08F7DA7808C5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe
    FirewallRules: [{70C26C98-A80F-46E2-9422-7384A1398D9C}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
    FirewallRules: [{AFC17EF1-1446-4480-9545-D3DF7FB74DF3}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
    FirewallRules: [{1E234857-9D17-4086-A87E-1B578793803A}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
    FirewallRules: [{4C51BEAB-255C-4190-B45F-71E47FBD1DE0}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
    FirewallRules: [{1E4BEA55-0178-49AA-8152-715E546C8E34}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
    FirewallRules: [{1E39B6E6-7A11-44CE-9DBD-64B61BADF296}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
    FirewallRules: [{799170B7-2AF3-499B-8B7D-BBA7DD066371}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
    FirewallRules: [{28F81BF1-85D1-4AB3-8D1C-53742FB315C5}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
    FirewallRules: [{D5AE6E36-109F-4A1A-904A-A34F00605100}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
    FirewallRules: [{C9BC396F-AD4B-4ECE-9E57-2766CCE1B613}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
    FirewallRules: [{748F62A0-59AB-47B7-B3ED-73432725B2E3}] => (Allow) LPort=12292
    FirewallRules: [TCP Query User{DF3F3956-E321-4116-826F-BEE13EBCCE1E}C:\program files (x86)\java\jdk1.7.0_55\bin\javaw.exe] => (Block) C:\program files (x86)\java\jdk1.7.0_55\bin\javaw.exe
    FirewallRules: [UDP Query User{089E405C-C889-470A-9AE4-BF2384CB7B68}C:\program files (x86)\java\jdk1.7.0_55\bin\javaw.exe] => (Block) C:\program files (x86)\java\jdk1.7.0_55\bin\javaw.exe
    StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
    StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
    StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
    StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

    ==================== Restore Points =========================

    19-06-2017 00:00:00 Scheduled Checkpoint
    20-06-2017 03:00:10 Windows Update
    20-06-2017 12:43:39 CenterEdge Advantage 17.1.26.1816
    20-06-2017 12:44:34 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
    20-06-2017 12:45:33 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005
    20-06-2017 12:46:28 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
    20-06-2017 12:47:07 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
    23-06-2017 03:32:58 Windows Update
    Check "winmgmt" service or repair WMI.


    ==================== Faulty Device Manager Devices =============

    Name: Officejet Pro 8600
    Description: Officejet Pro 8600
    Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
    Manufacturer: HP
    Service:
    Problem: : This device is disabled. (Code 22)
    Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

    Name: Security Processor Loader Driver
    Description: Security Processor Loader Driver
    Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    Manufacturer:
    Service: spldr
    Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
    Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
    Devices stay in this state if they have been prepared for removal.
    After you remove the device, this error disappears.Remove the device, and this error should be resolved.


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (06/24/2017 06:33:20 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
    Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.

    Error: (06/24/2017 06:33:20 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
    Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.

    Error: (06/24/2017 06:28:55 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT AUTHORITY)
    Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

    Error: (06/24/2017 06:25:25 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: Explorer.EXE, version: 6.1.7601.23537, time stamp: 0x57c44efe
    Faulting module name: wwanapi.dll, version: 6.1.7600.16385, time stamp: 0x4a5be0a8
    Exception code: 0xc0000005
    Fault offset: 0x00000000000333eb
    Faulting process id: 0x810
    Faulting application start time: 0x01d2ed4052bae995
    Faulting application path: C:\Windows\Explorer.EXE
    Faulting module path: C:\Windows\system32\wwanapi.dll
    Report Id: 65f7574b-5934-11e7-87bf-14dae9460af3

    Error: (06/24/2017 06:24:58 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT AUTHORITY)
    Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

    Error: (06/24/2017 06:22:47 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: OneDrive.exe, version: 17.3.6917.607, time stamp: 0x59386915
    Faulting module name: KERNELBASE.dll, version: 6.1.7601.23807, time stamp: 0x5915f98e
    Exception code: 0x80000003
    Fault offset: 0x0001338d
    Faulting process id: 0xb58
    Faulting application start time: 0x01d2ed40588d06ff
    Faulting application path: C:\Users\Battlefield\AppData\Local\Microsoft\OneDrive\OneDrive.exe
    Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
    Report Id: 07c14af6-5934-11e7-87bf-14dae9460af3

    Error: (06/24/2017 06:20:41 PM) (Source: MSSQL$TESTSERVER) (EventID: 9003) (User: )
    Description: The log scan number (31:245:1) passed to log scan in database 'model' is not valid. This error may indicate data corruption or that the log file (.ldf) does not match the data file (.mdf). If this error occurred during replication, re-create the publication. Otherwise, restore from backup if the problem results in a failure during startup.

    Error: (06/24/2017 01:52:59 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
    Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.

    Error: (06/24/2017 01:52:59 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
    Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.

    Error: (06/24/2017 01:50:08 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT AUTHORITY)
    Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.


    System errors:
    =============
    Error: (06/24/2017 06:34:33 PM) (Source: DCOM) (EventID: 10005) (User: )
    Description: DCOM got error "1068" attempting to start the service BITS with arguments "" in order to run the server:
    {4991D34B-80A1-4291-83B6-3328366B9097}

    Error: (06/24/2017 06:29:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
    Description: The PnP-X IP Bus Enumerator service depends on the Function Discovery Provider Host service which failed to start because of the following error:
    The dependency service or group failed to start.

    Error: (06/24/2017 06:29:15 PM) (Source: DCOM) (EventID: 10005) (User: )
    Description: DCOM got error "1068" attempting to start the service WDBackup with arguments "" in order to run the server:
    {59484148-65C9-4467-A092-3F8380023772}

    Error: (06/24/2017 06:29:15 PM) (Source: DCOM) (EventID: 10005) (User: )
    Description: DCOM got error "1068" attempting to start the service WDBackup with arguments "" in order to run the server:
    {81213AB4-5937-4340-88CD-66B4BC80DF73}

    Error: (06/24/2017 06:28:20 PM) (Source: DCOM) (EventID: 10005) (User: )
    Description: DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server:
    {9E175B6D-F52A-11D8-B9A5-505054503030}

    Error: (06/24/2017 06:28:19 PM) (Source: DCOM) (EventID: 10005) (User: )
    Description: DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server:
    {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

    Error: (06/24/2017 06:28:15 PM) (Source: DCOM) (EventID: 10005) (User: )
    Description: DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server:
    {1BE1F766-5536-11D1-B726-00C04FB926AF}

    Error: (06/24/2017 06:28:09 PM) (Source: DCOM) (EventID: 10005) (User: )
    Description: DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server:
    {DD522ACC-F821-461A-A407-50B198B896DC}

    Error: (06/24/2017 06:27:29 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
    Description: The following boot-start or system-start driver(s) failed to load:
    AsIO
    AsUpIO
    discache
    MpFilter
    spldr
    Wanarpv6

    Error: (06/24/2017 06:27:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
    Description: The Internet Connection Sharing (ICS) service depends on the Base Filtering Engine service which failed to start because of the following error:
    The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.


    CodeIntegrity:
    ===================================
    Date: 2012-09-20 13:32:19.540
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2012-09-20 13:32:19.526
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


    ==================== Memory info ===========================

    Processor: AMD Phenom(tm) II X6 1100T Processor
    Percentage of memory in use: 15%
    Total physical RAM: 16346.43 MB
    Available physical RAM: 13786.34 MB
    Total Virtual: 32691.04 MB
    Available Virtual: 30267.43 MB

    ==================== Drives ================================

    Drive c: () (Fixed) (Total:1862.92 GB) (Free:904.67 GB) NTFS

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 31A36B23)
    Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
    Partition 2: (Not Active) - (Size=1862.9 GB) - (Type=07 NTFS)

    ==================== End of Addition.txt ============================


    aswMBR version 1.0.1.2252 Copyright(c) 2014 AVAST Software
    Run date: 2017-06-24 18:45:47
    -----------------------------
    18:45:47.341 OS Version: Windows x64 6.1.7601 Service Pack 1
    18:45:47.341 Number of processors: 6 586 0xA00
    18:45:47.341 ComputerName: BATTLEFIELD-PC UserName: Battlefield
    18:45:50.057 Initialize success
    18:47:49.403 The log file has been saved successfully to "C:\Users\Battlefield\Desktop\aswMBR.txt"
  2. 2017-06-26, 23:21 #2
    Juliet
    Juliet is offline
    Security Expert-emeritus Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    4,084

    Default

    Theres quite a bit to do here.

    Do you connect by Proxy server?
    ProxyEnable: [.DEFAULT] => Proxy is enabled.
    ProxyServer: [.DEFAULT] => http=127.0.0.1:47574
    ProxyEnable: [S-1-5-21-3544609310-1622349089-2069013866-1000] => Proxy is enabled.
    ProxyServer: [S-1-5-21-3544609310-1622349089-2069013866-1000] => http=127.0.0.1:47574

    If you do, then please remove these proxy listings from the fix. IF you do not then leave them in the below fix.

    ~~~~~~~~~~~~`
    Please go to your add/remove programs list to uninstall a few things
    Unhide your Files and folders.
    http://www.ricksdailytips.com/view-h...s-windows-8-1/

    later you can hide them again just reverse the process.

    EPSON TM Coupon Package, The primary executable is named popupwindow.exe
    http://www.shouldiremoveit.com/EPSON...9-program.aspx
    Itibiti RTC (x32 Version: 0.0.1 - Itibiti Inc) Hidden <==== ATTENTION
    https://www.bleepingcomputer.com/uni...5/Itibiti-RTC/


    Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
    Java SE Development Kit 7 Update 55 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0170550}) (Version: 1.7.0.550 - Oracle)
    Java(TM) SE Development Kit 6 Update 39 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0160390}) (Version: 1.6.0.390 - Oracle)
    The above Java applications are very outdated and will be exploited.

    ******

    Start FRST (Please double-click on FRST/FRST64) with Administrator privileges.

    highlight all the text below and select Copy. {It begins with Start:: and then you need to stop at End::}

    Start::
    EndProcesses:
    CreateRestorePoint:

    ProxyEnable: [.DEFAULT] => Proxy is enabled.
    ProxyServer: [.DEFAULT] => http=127.0.0.1:47574
    ProxyEnable: [S-1-5-21-3544609310-1622349089-2069013866-1000] => Proxy is enabled.
    ProxyServer: [S-1-5-21-3544609310-1622349089-2069013866-1000] => http=127.0.0.1:47574

    HKLM-x32\...\Run: [ApnTBMon] => "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
    HKLM-x32\...\Run: [] => [X]
    AppInit_DLLs: => No File
    ShellExecuteHooks-x32: No Name - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - -> No File
    ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => -> No File
    HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
    HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
    SearchScopes: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000 -> {1711FC25-F05A-40CE-B859-A0C1CF01FD18} URL = hxxps://us.search.yahoo.com/yhs/search?hspart=omr&hsimp=yhs-001&type=86311217&param1=y6bdVFVIsvuYsgEClQfz8HyFH9tZCHsOZFHNP%2BYwJC0%2FGgRxFQo9lKd%2BjPhcFQ0cS78E9n0GGyhjf2UlQFRF2i74WjPuAkEEwqLmenHb0CwUaowPQJ7qzrdo%2BPPwmIBfOul4K06c%2F6OZUMarpdLpagWmq%2F4uiFCCS8IZTuZ00X38oNqD0h37wZ3hujH09fsYgp2YZDPn7bCd3CZbuJLeqBFFh0x6f5wCuTL6aPOd4IPSfTZl%2F3AuJd89E5D0MnESjrdXuk9Hhx5%2BNLSO6v4lyQ%3D%3D&p={searchTerms}
    BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File
    BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-21] (Oracle Corporation)
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-21] (Oracle Corporation)
    FF NewTab: Mozilla\Firefox\Profiles\yvro0wpn.default -> hxxps://us.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=86311217&param1=y6bdVFVIsvuYsgEClQfz8HyFH9tZCHsOZFHNP%2BYwJC0%2FGgRxFQo9lKd%2BjPhcFQ0cjsBGgHIAr49ni5TgGwtu8rF4lcjEYyD%2FhCoNmGlNiuxO1%2FuuA5tJc1Epyfi4b59GXpS4SlyllOjwdi3HXleNb0A%2Fj4UkuUIGPrC9E%2FymLn3Ybtxw4CUBJy5ckLPMxd0Cj0H7Yp%2FB1iAGKlkX%2BveHWNfM5bt0T5KwIDa7gmma%2BWJ5aZ5jzlOSRjDzwk19pCwsieL9Dt34i1tkiC3%2FCF11zQ%3D%3D
    FF SelectedSearchEngine: Mozilla\Firefox\Profiles\yvro0wpn.default -> Yahoo powered search
    FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\yvro0wpn.default -> Yahoo powered search
    FF DefaultSearchEngine: Mozilla\Firefox\Profiles\yvro0wpn.default -> Yahoo powered search
    FF Homepage: Mozilla\Firefox\Profiles\yvro0wpn.default -> hxxps://us.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=86311217&param1=y6bdVFVIsvuYsgEClQfz8HyFH9tZCHsOZFHNP%2BYwJC0%2FGgRxFQo9lKd%2BjPhcFQ0cN7fBYCRXl87QylSWL9EgznKMNPgDppcDpwzRlnbMJYUNYofjm6Y%2FcDa%2BlwVSAOSQN%2BECyol3ZAVB%2FNr%2FXL4iXUk4Z9NpporjUXaBSWDVrKubllJJFp4XYqThswJcg4u7JeQfpqxv9bt93oj6ZilcYh1tzJD2t9LaYWQUZyhK2fMi%2FbgNNPjnrl%2FaCQcsarTA2yY%2B7WvdBTTgyL4sA21e7Q%3D%3D
    FF SearchPlugin: C:\Users\Battlefield\AppData\Roaming\Mozilla\Firefox\Profiles\yvro0wpn.default\searchplugins\Yahoo powered search.xml [2017-05-25]
    FF Extension: (No Name) - C:\Program Files (x86)\Mozilla Firefox\extensions\䍻䙁䕅䅆ⵃ〰㜱〭〰ⴰ〰㜰䄭䍂䕄䙆䑅䉃絁 [2013-02-27] [not signed]
    FF HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\Firefox\Extensions: [{257B76A0-0277-11E2-8271-B8AC6F996F26}] - C:\Users\Battlefield\AppData\Local\{257B76A0-0277-11E2-8271-B8AC6F996F26} => not found
    FF Plugin: @java.com/DTPlugin,version=10.7.2 -> C:\Windows\system32\npDeployJava1.dll [2012-10-05] (Oracle Corporation)
    FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Windows\SysWOW64\npdeployJava1.dll [2015-04-21] (Oracle Corporation)
    FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation)
    CHR HomePage: Default -> homepage.ssoextension.com
    CHR DefaultSearchURL: Default -> hxxps://www.teoma.com/web?q={searchTerms}
    CHR DefaultSearchKeyword: Default -> hxxps://teoma.com
    CHR DefaultSuggestURL: Default -> hxxp://www.teoma.com/ss?type=prefix&li=ff&q={searchTerms}
    CHR HKLM-x32\...\Chrome\Extension: [cdjbnddbclciabnckgeahmneohjlahdm] - C:\Users\Battlefield\AppData\Local\chromeupdate.crx <not found>
    CHR HKLM-x32\...\Chrome\Extension: [ckadhkfhcieallpikidnjojofenjpfni] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\ckadhkfhcieallpikidnjojofenjpfni.crx [2016-11-11]
    S2 ntcache; C:\ProgramData\Microsoft\Windows\NetworkCacheManager\ntcache.exe [6960640 2017-05-25] () [File not signed] <==== ATTENTION
    S2 APNMCP; "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe" [X]
    C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
    C:\Program Files (x86)\AskPartnerNetwork
    Task: {2F57269B-1E09-4E2D-AB1E-B0FDAC7D279C} - \Microsoft\Windows\WindowsBackup\ConfigNotification -> No File <==== ATTENTION
    Task: {4645320B-A77E-4ED1-8669-EF1B0A5B1BCF} - \Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline -> No File <==== ATTENTION
    Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - \Microsoft\Windows\Application Experience\AitAgent -> No File <==== ATTENTION
    Task: {CEE64558-E1A7-4D9D-80A7-2001912BE5B5} - \Microsoft\Windows\MemoryDiagnostic\CorruptionDetector -> No File <==== ATTENTION
    Task: {FA2BC0A6-8D4B-458A-85C8-2B8C72487513} - \Microsoft\Windows\MemoryDiagnostic\DecompressionFailureDetector -> No File <==== ATTENTION
    Shortcut: C:\Users\Battlefield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chief Architect\Chief Architect X2\Chief Architect Website.lnk -> hxxp://chiefarchitect.com
    Shortcut: C:\Users\Battlefield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chief Architect\Chief Architect X2\IRC Checklist.lnk -> hxxp://chiefarchitect.com/useraccess/ircchecklis
    ShortcutWithArgument: C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_mgndgikekgjfcpckkfioiadnlibdjbkf\Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=mgndgikekgjfcpckkfioiadnlibdjbkf
    ShortcutWithArgument: C:\Users\Battlefield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qt Enterprise\5.3.0\MSVC 2013 (64-bit)\Qt 5.3.0 64-bit for Desktop (MSVC 2013).lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /A /Q /K C:\Qt\5.3\msvc2013_64\bin\qtenv2.bat
    ShortcutWithArgument: C:\Users\Battlefield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qt Enterprise\5.3.0\MSVC 2012 OpenGL (32-bit)\Qt 5.3.0 32-bit for Desktop (MSVC 2012 OpenGL).lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /A /Q /K C:\Qt\5.3\msvc2012_opengl\bin\qtenv2.bat
    ShortcutWithArgument: C:\Users\Battlefield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qt Enterprise\5.2.1\MSVC 2012 (32-bit)\Qt 5.2.1 32-bit for Desktop (MSVC 2012).lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /A /Q /K C:\Qt\5.2.1\msvc2012\bin\qtenv2.bat
    AlternateDataStreams: C:\Windows:nlsPreferences [386]
    AlternateDataStreams: C:\Program Files\Common Files\System:zYtvMSxqSk4l5FMDRCKlFNw [2244]
    AlternateDataStreams: C:\ProgramData\Microsoft:0lAW6QhwAqWt2izmioQXq2 [2112]
    AlternateDataStreams: C:\ProgramData\Microsoft:rWxxDCDxLP0TVwMM6umeTHoeG1 [1928]
    AlternateDataStreams: C:\ProgramData\Microsoft:u9IffPXpiYP5xLCvElJk0IEEx [1958]
    AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm [0]
    AlternateDataStreams: C:\Users\Battlefield\Local Settings:567A8B67-6F1F-423d-8002-2907ACC74B9F [47]
    AlternateDataStreams: C:\Users\Battlefield\Desktop\BFH Stormtroopers March 2015.mov:com.dropbox.attributes [422]
    AlternateDataStreams: C:\Users\Battlefield\AppData\Local:567A8B67-6F1F-423d-8002-2907ACC74B9F [47]
    AlternateDataStreams: C:\Users\Battlefield\AppData\Local\Application Data:567A8B67-6F1F-423d-8002-2907ACC74B9F [47]
    AlternateDataStreams: C:\Users\Battlefield\AppData\Local\Temporary Internet Files:wb5gqcNGVznWFclCUfBl9hUe [1868]
    AlternateDataStreams: C:\Users\Battlefield\Documents\Comp 1.mpg:TOC.WMV [130]
    AlternateDataStreams: C:\Users\Battlefield\Documents\Comp 1_3_1.avi:TOC.WMV [130]
    AlternateDataStreams: C:\Users\Battlefield\Documents\Comp 1_3_1.mpg:TOC.WMV [130]
    Emptytemp:
    End::



    Press the Fix button.
    When finished, a log file (Fixlog.txt) will pop up and saved in the same location the tool was ran from.

    Please copy and paste its contents in your next reply.

    ~~~~~

    Malwarebytes AdwCleaner
    • Please download Malwarebytes AdwCleaner and save the file to your Desktop
    • Right-click AdwCleaner.exe and select Run as administrator to run the programme.
    • Follow the prompts.
    • Click Scan.
    • Upon completion, click Logfile. A log (AdwCleaner[S0].txt) will open. Briefly check the log for anything you know to be legitimate.
    • Return to AdwCleaner. Ensure anything you know to be legitimate does not have a checkmark under the corresponding tab.
    • Click [img=http://i.imgur.com/MqHawIb.png] Clean.
    • Follow the prompts and allow your computer to reboot.
    • After the reboot, a log (AdwCleaner[C0].txt) will open. Copy the contents of the log and paste in your next reply.

    -- File, folder and registry backups are made for items removed using this programme. Should a legitimate file, folder or registry item be removed (otherwise known as a 'false-positive'), simple steps can be taken to restore the item. Please do not overly concern yourself with the contents of AdwCleaner[S0].txt.
    ~~~~~~~`

    Please download Junkware Removal Tool
    or from here http://downloads.malwarebytes.org/file/jrt
    to your desktop.
    • Shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Post the contents of JRT.txt into your next message.


    ~~
    please post
    Fixlog.txt
    AdwCleaner[C1].txt
    JRT.txt
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.
  3. 2017-06-27, 16:15 #3
    computer
    computer is offline
    Junior Member
    Join Date
    Jun 2017
    Posts
    20

    Default Fdsk ran overnight

    It took a little extra time to get all the applications your requested to uninstall. The system is really running slow. I ran the FDSK as asked, but it never seem to complete. The program ran overnight and still didn't finish. I came in this morning to it still running. I killed the process and was going to reattempt in safe mode.
  4. 2017-06-27, 17:55 #4
    Juliet
    Juliet is offline
    Security Expert-emeritus Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    4,084

    Default

    A few things to try

    Of course try safe mode, try temporarily disabling your antivirus

    or

    Please download and run the following tool to help allow other programs to run. (courtesy of BleepingComputer.com)
    There are 6 different versions. If one of them won't run then download and try to run the other one.
    Vista and Win7 users need to right click and choose Run as Admin
    You only need to get one of them to run, not all of them.


    ~~

    Attempt to run the Fixlog again. If you see while in normal mode it continues for an exceeding amount of time go to the next step.
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.
  5. 2017-06-27, 18:18 #5
    computer
    computer is offline
    Junior Member
    Join Date
    Jun 2017
    Posts
    20

    Default Log File udpates after following instructions

    I couldn't get FRST to ever quit running without killing the process. I moved onto the next steps and the reports are below. My usb mouse seems to disconnect and reconnect constantly while I'm working on this. I haven't had that issue before so wondering if that is related to all of these issues.:

    Adware Cleaner:
    # AdwCleaner v6.047 - Logfile created 27/06/2017 at 10:05:14
    # Updated on 19/05/2017 by Malwarebytes
    # Database : 2017-06-26.1 [Server]
    # Operating System : Windows 7 Home Premium Service Pack 1 (X64)
    # Username : Battlefield - BATTLEFIELD-PC
    # Running from : C:\Users\Battlefield\Desktop\AdwCleaner.exe
    # Mode: Clean
    # Support : https://www.malwarebytes.com/support



    ***** [ Services ] *****

    [-] Service deleted: APNMCP
    [-] Service deleted: ntcache
    [-] Service deleted: chelper


    ***** [ Folders ] *****

    [-] Folder deleted: C:\Users\Battlefield\AppData\Roaming\download Manager
    [-] Folder deleted: C:\Users\Battlefield\AppData\Roaming\Yahoo!\Companion
    [-] Folder deleted: C:\Users\Battlefield\AppData\Roaming\InstantSupport
    [-] Folder deleted: C:\Users\Battlefield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnonymizerGadget
    [-] Folder deleted: C:\ProgramData\AskPartnerNetwork
    [#] Folder deleted on reboot: C:\ProgramData\Application Data\AskPartnerNetwork
    [-] Folder deleted: C:\Program Files (x86)\AskPartnerNetwork
    [-] Folder deleted: C:\Program Files (x86)\WebDiscoverBrowser
    [-] Folder deleted: C:\Users\BATTLE~1\AppData\Local\Temp\apn
    [-] Folder deleted: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\WebDiscoverBrowser
    [#] Folder deleted on reboot: C:\Program Files (x86)\SSO


    ***** [ Files ] *****

    [#] File deleted: C:\ProgramData\Microsoft\Windows\NetworkCacheManager\ntcache.exe
    [-] File deleted: C:\Users\Jordan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.azlyrics.com_0.localstorage
    [-] File deleted: C:\Users\Jordan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.azlyrics.com_0.localstorage-journal
    [-] File deleted: C:\Users\Jordan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.cmptch.com_0.localstorage
    [-] File deleted: C:\Users\CJ\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.cmptch.com_0.localstorage
    [-] File deleted: C:\Users\Jordan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.cmptch.com_0.localstorage-journal
    [-] File deleted: C:\Users\CJ\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.cmptch.com_0.localstorage-journal
    [#] File deleted: C:\Users\Jordan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.azlyrics.com_0.localstorage
    [#] File deleted: C:\Users\Jordan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.azlyrics.com_0.localstorage-journal
    [-] File deleted: C:\Users\Jordan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.metrolyrics.com_0.localstorage
    [-] File deleted: C:\Users\Jordan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.metrolyrics.com_0.localstorage-journal
    [#] File deleted: C:\Users\Jordan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.cmptch.com_0.localstorage
    [#] File deleted: C:\Users\CJ\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.cmptch.com_0.localstorage
    [#] File deleted: C:\Users\Jordan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.cmptch.com_0.localstorage-journal
    [#] File deleted: C:\Users\CJ\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.cmptch.com_0.localstorage-journal


    ***** [ DLL ] *****



    ***** [ WMI ] *****



    ***** [ Shortcuts ] *****



    ***** [ Scheduled Tasks ] *****



    ***** [ Registry ] *****

    [#] Key deleted on reboot: HKLM\SYSTEM\CurrentControlSet\services\apnmcp
    [-] Key deleted: HKLM\SOFTWARE\Classes\Codejock.SkinFramework.15.3.1
    [-] Key deleted: HKLM\SOFTWARE\Classes\Codejock.SkinFrameworkGlobalSettings.15.3.1
    [#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\Codejock.SkinFramework.15.3.1
    [#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\Codejock.SkinFrameworkGlobalSettings.15.3.1
    [-] Key deleted: HKLM\SOFTWARE\Classes\AppID\{7D831388-D405-4272-9511-A07440AD2927}
    [-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{F51C15D4-3D0A-4DBA-A095-EBCC09F24DA2}
    [-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{8233093C-178B-484B-979E-3C6B5B147DBC}
    [-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{128507E0-C56F-43C0-BCF1-8193B35FE4C4}
    [-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{40217CB8-4463-4030-B324-AC6A8075FEC8}
    [-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{63C40CBE-DE43-4B56-BCEB-E14B825CF245}
    [-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{AFA0E6A1-28D7-4F2C-87A7-7266367B4655}
    [-] Key deleted: HKLM\SOFTWARE\Classes\TypeLib\{B722ED8B-0B38-408E-BB89-260C73BCF3D4}
    [-] Key deleted: HKLM\SOFTWARE\Classes\TypeLib\{BD0C1912-66C3-49CC-8B12-7B347BF6C846}
    [-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    [-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    [-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
    [-] Key deleted: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\Software\APN PIP
    [-] Key deleted: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\Software\AskPartnerNetwork
    [-] Key deleted: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\Software\Conduit
    [-] Key deleted: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\Software\WebDiscoverBrowser
    [-] Key deleted: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\Software\Yahoo\Companion
    [-] Key deleted: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\Software\Yahoo\YFriendsBar
    [-] Key deleted: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\Software\InstantSupport
    [-] Key deleted: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\Software\InSTab
    [-] Key deleted: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\Software\ACPTab
    [-] Key deleted: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\Software\SpecialSearchOffer
    [-] Key deleted: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\Software\AppDataLow\Software\Yahoo\Companion
    [#] Key deleted on reboot: HKCU\Software\APN PIP
    [#] Key deleted on reboot: HKCU\Software\AskPartnerNetwork
    [#] Key deleted on reboot: HKCU\Software\Conduit
    [#] Key deleted on reboot: HKCU\Software\WebDiscoverBrowser
    [#] Key deleted on reboot: HKCU\Software\Yahoo\Companion
    [#] Key deleted on reboot: HKCU\Software\Yahoo\YFriendsBar
    [#] Key deleted on reboot: HKCU\Software\InstantSupport
    [#] Key deleted on reboot: HKCU\Software\InSTab
    [#] Key deleted on reboot: HKCU\Software\ACPTab
    [#] Key deleted on reboot: HKCU\Software\SpecialSearchOffer
    [#] Key deleted on reboot: HKCU\Software\AppDataLow\Software\Yahoo\Companion
    [-] Key deleted: HKLM\SOFTWARE\AskPartnerNetwork
    [-] Key deleted: HKLM\SOFTWARE\PIP
    [-] Key deleted: HKLM\SOFTWARE\WebDiscoverBrowser
    [-] Key deleted: HKLM\SOFTWARE\Yahoo\Companion
    [-] Key deleted: HKLM\SOFTWARE\PCAcceleratePro
    [-] Key deleted: HKLM\SOFTWARE\SavingsCool
    [#] Key deleted on reboot: [x64] HKCU\Software\APN PIP
    [#] Key deleted on reboot: [x64] HKCU\Software\AskPartnerNetwork
    [#] Key deleted on reboot: [x64] HKCU\Software\Conduit
    [#] Key deleted on reboot: [x64] HKCU\Software\WebDiscoverBrowser
    [#] Key deleted on reboot: [x64] HKCU\Software\Yahoo\Companion
    [#] Key deleted on reboot: [x64] HKCU\Software\Yahoo\YFriendsBar
    [#] Key deleted on reboot: [x64] HKCU\Software\InstantSupport
    [#] Key deleted on reboot: [x64] HKCU\Software\InSTab
    [#] Key deleted on reboot: [x64] HKCU\Software\ACPTab
    [#] Key deleted on reboot: [x64] HKCU\Software\SpecialSearchOffer
    [#] Key deleted on reboot: [x64] HKCU\Software\AppDataLow\Software\Yahoo\Companion
    [-] Key deleted: [x64] HKLM\SOFTWARE\STool
    [-] Key deleted: [x64] HKLM\SOFTWARE\WebDiscoverBrowser
    [-] Key deleted: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
    [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8036C72171EF4ba46856BF57969F6A36
    [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\89BB7852687BDC34B9A81E01C7FF9173
    [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CBC85D72B148084ABE8C2F072F781F4
    [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CC5A38A64D6098468BC8395BA0EFF03
    [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8DF9A1AC557F56c49B56F6B83E293C15
    [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A97C590397DCC454AA8923563BAB10E4
    [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B08932C78B697C244BE7BA3E6FF09B62
    [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D14A7F65792054F418578C78367D13F7
    [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DFE9F0BD163D827438CB6AD6B100EC48
    [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F739A19A8327dc64C9A8B641A9E89646
    [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\158D6D9E3FE81fa428925F22ACB3A965
    [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15E6C514FEFC09f45BAFAAE1D7546ED4
    [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DB42320A8525634AA089F0BEC86473B
    [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22468B0D6050b2e46B9C4B67A8F59577
    [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2251BF05A2F606d43BB064BD63CBD87E
    [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3255D95681398614190EDF0A4F3F77DB
    [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CDF313E9B28c944FBC7579CF4949414
    [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\71E54748EDD3dc1468548785DC856EDA
    [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\754590DD06DE8d249B526503432F99D4
    [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98FD652EB4839214E97B69DD8EEA1D29
    [#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
    [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
    [-] Key deleted: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\Software\Microsoft\Internet Explorer\SearchScopes\{1711FC25-F05A-40CE-B859-A0C1CF01FD18}
    [#] Key deleted on reboot: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1711FC25-F05A-40CE-B859-A0C1CF01FD18}
    [#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1711FC25-F05A-40CE-B859-A0C1CF01FD18}
    [-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\itibitiphone.com
    [-] Key deleted: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\web.itibitiphone.com
    [#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\itibitiphone.com
    [#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\web.itibitiphone.com
    [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Shared Tools\MsConfig\StartupReg\ApnTBMon
    [-] Value deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTBMon]
    [-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Shared Tools\MsConfig\StartupReg\Pokki
    [-] Key deleted: HKLM\SOFTWARE\Classes\AppID\YMERemote.DLL
    [-] Key deleted: HKCU\Software\Google\Chrome\Extensions\gkcffmoikcgfhagefelmhiakelnjihik
    [#] Key deleted on reboot: [x64] HKCU\Software\Google\Chrome\Extensions\gkcffmoikcgfhagefelmhiakelnjihik


    ***** [ Web browsers ] *****

    [-] Firefox preferences cleaned: "browser.newtab.url" - "hxxps://us.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=86311217&param1=y6bdVFVIsvuYsgEClQfz8HyFH9tZCHsOZFHNP%2BYwJC0%2FGgRxFQo9lKd%2BjPhcFQ0cjsBGgHIAr49ni5TgGwtu8rF4lcjEYyD%2FhCoNmGlNiuxO1%2FuuA5tJc1Epyfi4b59GXpS4SlyllOjwdi3HXleNb0A%2Fj4UkuUIGPrC9E%2FymLn3Ybtxw4CUBJy5ckLPMxd0Cj0H7Yp%2FB1iAGKlkX%2BveHWNfM5bt0T5KwIDa7gmma%2BWJ5aZ5jzlOSRjDzwk19pCwsieL9Dt34i1tkiC3%2FCF11zQ%3D%3D"
    [-] Firefox preferences cleaned: "browser.startup.homepage" - "hxxps://us.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=86311217&param1=y6bdVFVIsvuYsgEClQfz8HyFH9tZCHsOZFHNP%2BYwJC0%2FGgRxFQo9lKd%2BjPhcFQ0cN7fBYCRXl87QylSWL9EgznKMNPgDppcDpwzRlnbMJYUNYofjm6Y%2FcDa%2BlwVSAOSQN%2BECyol3ZAVB%2FNr%2FXL4iXUk4Z9NpporjUXaBSWDVrKubllJJFp4XYqThswJcg4u7JeQfpqxv9bt93oj6ZilcYh1tzJD2t9LaYWQUZyhK2fMi%2FbgNNPjnrl%2FaCQcsarTA2yY%2B7WvdBTTgyL4sA21e7Q%3D%3D"
    [-] [C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default] [extension] Deleted: gkcffmoikcgfhagefelmhiakelnjihik
    [-] [C:\Users\Jordan\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: aol.com
    [-] [C:\Users\Jordan\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: ask.com
    [-] [C:\Users\Jordan\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: myprivatesearch.com
    [-] [C:\Users\CJ\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: aol.com
    [-] [C:\Users\CJ\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: ask.com


    *************************

    :: "Tracing" keys deleted
    :: Winsock settings cleared

    *************************

    C:\AdwCleaner\AdwCleaner[C0].txt - [13934 Bytes] - [27/06/2017 10:05:14]
    C:\AdwCleaner\AdwCleaner[S0].txt - [13042 Bytes] - [27/06/2017 09:36:46]

    ########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [14082 Bytes] ##########


    JRT:
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Junkware Removal Tool (JRT) by Malwarebytes
    Version: 8.1.3 (04.10.2017)
    Operating System: Windows 7 Home Premium x64
    Ran by Battlefield (Administrator) on Tue 06/27/2017 at 10:51:43.64
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




    File System: 495

    Successfully deleted: C:\Users\Battlefield\AppData\Local\{01600A0E-B235-44EB-82A2-ED76800960E3} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{0184B114-0375-4A68-BEB1-5CD1A1A79A7D} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{01B26D32-1974-4823-9429-29B5CE753F88} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{01C62850-A852-450D-9C92-3874A5887E9E} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{0205A972-B220-469A-982D-37391ADC79D8} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{04D3CCE9-5277-4B06-BAAC-1067B2B20BD2} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{061647BC-6BEA-478B-9D56-CA52753C9BC2} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{07EA5251-B8B0-462C-A389-6A125AD0BDDB} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{087690DE-A32F-4AA8-967B-7D96B7EDB44B} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{08C9A116-1C2A-425C-820F-730332E76395} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{0A0C7811-72FB-4D20-85F3-84185FFB7700} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{0A6A4FDD-1957-4960-92C2-B00F817E72BE} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{0BE27391-77E1-417B-841B-7A312EF3F3BE} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{0C1372D7-6475-4AD4-A14B-710F81A67BD4} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{0C3D7BD3-DA55-460E-91B3-3522EFA2B249} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{0C974CD2-9452-4756-8709-206E7948F16A} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{0DB181A4-FB20-41B7-9320-3EB3E0E3BDD7} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{0E0208C6-4F84-40DB-AE0E-28881E497333} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{0F039D27-9443-418E-94F8-3DC9ED20A027} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{0F2A4EC9-081B-445A-8C3A-6EA3AA11732F} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{10E32D86-8F34-4125-8165-E428337191EF} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{11470758-DAD8-4B54-89D0-0102CDA2BC1B} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{1159628A-92BA-44E3-9BA1-E155C78915AA} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{1221DA83-3D61-4E9D-A872-8C8383BF9C83} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{12AD32A8-2604-4D24-8E26-5A59386D258A} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{1333E0E2-8338-40DF-AA82-CAA074118DD4} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{138B84CD-A150-4AC4-ACEA-A91795BEF687} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{13C85FA5-734C-4E2B-9876-C8955C85C4D5} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{1504149B-DC7C-4E56-853E-76645A223315} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{16472B25-F12E-45BF-BFB6-52705EAF5487} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{16894AAA-CF57-4203-9661-A5722DBED4D6} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{17200144-C802-4ACF-A0E3-50E39DB08A23} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{185307FE-A6C8-4DB9-9C4E-7FDDA38142BF} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{1A34B775-D54E-40D9-BC8F-B7157EB145CA} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{1B9CA442-E30B-4FB1-B83E-95E63F9376BD} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{1C775546-F95E-4187-9D35-B9B9EAD94AB7} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{1D34F5FD-A30E-4259-867C-8B762B32196D} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{1D4C7BC9-B1D3-4C06-B796-0D74FE66D9F4} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{1E96ED96-3833-4373-A03B-CF0BC4121E4C} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{1F8A53E0-C113-422A-BB90-28CFC49C76DC} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{1F9A3115-9BBD-4A40-B863-B127AA96813F} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{1FF94C80-1F4A-48C6-B2F0-7608AF4D666A} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{21638BF5-578C-4967-A798-B4AB3B110219} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{21C86049-08E2-456E-A2DC-E9D6A456E140} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{21D783BE-17EA-4DB6-9CBA-69CCC8AF4357} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{21E5AAF0-339C-42A5-B4BA-7B0AEF9610E4} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{23FDB553-7D30-45F1-8C96-5DD7E741B49E} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{24664F07-A15B-4521-AEE6-4D25AD710793} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{253E8D1E-57F2-4763-8DB3-DACC299A4532} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{261A2B14-F395-4D70-982D-655F161BA74F} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{2658D0E8-6101-4340-8563-AF160062BEFA} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{270ACA9C-244C-485C-9716-EB69F6748BA7} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{2746A772-177C-40F5-AC08-E6B1B7EEA0DE} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{2869BCCA-E5A1-4533-A90D-9DD2071DA3EE} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{2921ED35-5181-447B-BF7C-32D00E0FF601} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{293633F7-D39C-418A-AA07-4CBB353B7334} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{295F601A-BC4F-4C52-843A-E0F543BCE1EC} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{29DB8D07-0D62-4A47-B4E4-0E040CDBA727} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{2A296FE6-C114-4864-8FAC-0EDD1760D3E6} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{2C7E0A87-8CB8-4197-B8A0-C8BFEA10AC49} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{2CB83F36-BA76-49D3-BE44-CD0ECEC6F4FF} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{2D47B620-FA99-4E5B-976E-87259B9B3264} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{2D6CED62-D194-4986-8A05-9671C1566288} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{2E600FDC-82B4-487E-867B-E2C2D391832C} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{2F8AB94C-6DDC-40AE-A241-7194748A974C} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{30D52EBA-1629-45C4-B60F-994A175C9332} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{3182BC7F-4FA5-4BEC-83EF-B3831C9BDEA9} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{31A3973E-3999-447E-B1BF-A2BE00BEEBEC} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{32685B1B-5901-4AC5-91D9-113C458C8C28} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{32C17331-E612-466C-8D0F-F4E4A67B6C6D} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{33183982-98FC-4F1C-957F-9C7BB4DACB57} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{332ACF7D-2EA1-466B-A806-791BBE18463C} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{3491D122-DF2D-491B-96FA-A568D318FBBE} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{35BF70D9-0DC1-4060-A944-EAFD7C1E3A69} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{36A285E3-1432-4292-90B7-A62C81076F00} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{36A4C73B-BC71-4A75-965C-A8C738DBC5AD} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{3817F7F4-A91C-43E7-89AE-EA545DD68728} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{38284617-B18E-4C97-89B9-0EAF76D8517B} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{38703F94-4C5E-4062-8E12-06B88A89C5B4} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{38F3D741-2F44-4D70-8390-6C9217902B6B} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{392ABBF7-91F1-44AC-8030-50030515BF8D} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{39414342-2AFD-4FF8-B495-ED8120E6FB72} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{3B408D2C-BD9B-4ADB-B7DB-7F340F97B324} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{3BCB888D-0A30-449F-98EA-760DE61EDD61} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{3C6CD537-2BA3-41E1-9075-AB03FA6336FF} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{3DD3A4C6-0211-49F7-B31A-3D1C1DBE4BC3} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{3E2B8A83-0EB1-405A-8141-CB5CFA381DD9} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{3EE8FBD7-B551-44ED-B7F0-2B679D07E957} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{3F96D137-EEE1-43BF-99C6-DC6F914AAF3B} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{3FE25072-BBB1-478C-9A20-5912B04F0B4C} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{3FF26CA0-A761-4568-B309-667E62644362} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{40551195-6FB1-4B30-A27C-BAC6D92B28D6} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{412933EC-3E80-4E41-B8E5-6B48E59B0384} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{4129F972-A007-4C73-BBC0-E3E07BA8C3C6} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{420F32E9-7283-49CF-97C4-4ED198668086} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{4264563B-8AC7-446E-8A92-3C3FD798AE11} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{42BDE1E8-B33E-4B06-92DE-F19E34EEEEE3} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{42C1E4D7-4C3A-4D2C-8E93-98BD2AD89813} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{4429111F-3AB1-4E1C-A6F3-E976804F395F} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{45FAFE75-D72A-4C9C-B5DB-68D06A727D1C} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{46C073DF-DF71-4F47-8498-368706C10595} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{476C66B5-1584-4B47-88DB-C73404024C83} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{48EEA7C3-8D4B-4507-A046-41EA7548D60D} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{4B876B69-0E1E-4CE5-B545-4A8189884F57} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{4C37876B-A174-44DB-B726-69810B8DF575} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{4CF3128D-B78F-43A8-9D60-34B8F748E99A} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{4D033B76-793A-4E7D-A70A-CD7776252250} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{4FC161BB-DEB1-46CC-91B6-18AF849E8C7A} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{4FF9CAF0-F553-40BB-B46E-8AF78983A192} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{510F1C8A-8F30-4820-A762-297A0D971FA6} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{51986859-B637-4F6E-8B96-DFE100FCDB01} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{52E7BC2B-E55C-47DA-8EFD-2AEAFE55ECB3} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{56F2C03D-C175-41F7-9DC6-DFF790B883C6} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{57747E69-7A5C-4566-89E0-FB022214FFE4} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{57FFA377-17A9-4511-84AE-BD067C6C3B05} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{58DD28B8-A317-4A80-AE8C-F48FED72907E} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{59208A90-6861-4A2D-A816-60A4C8926BE3} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{59B9D1D1-B7C5-425E-BC87-4ECA0040D3CA} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{59EA6033-8665-4D18-8C7D-85E2497F429B} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{5A05D10D-5574-4F62-B478-6D629F1142E1} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{5A097210-EFA3-4C56-9030-8CA7FCAA6CE4} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{5A309486-62CB-4EBB-8FE1-6E25EE200336} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{5BC4A094-7BCE-4BA8-8F43-DD7AD9AD0E36} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{5C071427-D48A-4B8F-AF1D-CA6C2949721A} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{5CB9D304-7D15-4920-B760-746E86BE8CF4} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{5D0C1779-62F3-4A75-9DF4-A6C9B06205D6} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{5EAD587C-ACD3-450D-AA43-1FE37D0C2305} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{6056F41E-5DAD-402C-901F-4E846A4F8AA0} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{60B1D489-99B2-44BF-B4E7-27EFDAAAA17F} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{60BF86C2-A054-4C65-B210-7F99176AF2E5} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{60E14C13-3C3E-4D4F-B079-7652156594D0} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{615D696E-2A54-4BAD-BEFB-7479AFA3E112} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{61B97D4E-7345-44E0-A81B-209D17819A2E} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{61FEA068-1419-41C4-A1A4-8BCFD9459F83} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{621D3AFB-5910-4B8F-96BD-A9DE363E8462} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{6232CFEE-8BB8-4AEC-A9A4-2D61CB507A38} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{63FFAF81-87DB-4C73-8959-B5ADA25D8719} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{64075B76-C6E2-4B96-87DA-F3B6D64E4212} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{640E0901-238B-4C2F-8C34-2AB45017FE1C} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{649CC321-AA53-4667-A5E5-F028E9F1388D} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{64C08B41-013A-44D1-BCC2-1B424332CF07} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{6547B206-F65C-469E-A59C-5A2C9DA5984C} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{66E564FD-B0FE-4B60-8BFF-096D9D7A8EBF} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{66EC4607-3397-4C44-B617-2CFE75165158} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{673AFA0A-762B-41B7-B951-161971A4C6F8} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{67C732C7-72CB-4219-8E73-25D8672153CC} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{67E9B647-577D-42DB-A07D-211D026A8C38} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{682864F2-3435-4523-8B58-66A377171BFB} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{688D136F-EFD5-4E82-B98A-F8A40DD3BB7E} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{6B5B0081-F9D2-44D0-97E8-BA11DD962DBE} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{6CEC3E5E-166A-45F7-95C6-5D4618D92A0D} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{6D5EB80A-76B2-40CE-AA89-3A355B9F7D22} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{6E14EEF2-7FC6-40A9-B81B-5D902C8AF871} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{6E30AA23-2BCA-4CD0-9752-A15F75434B95} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{6FF3ECF7-8CF3-4EC9-8B97-49D70A6951D1} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{707EB271-B6B6-401D-BD3C-F206CD1940F9} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{728388E5-8AB0-4854-989E-7AE83EBCD3DF} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{72965EA1-7E4A-4E71-8B6E-C6DBAFCE6A00} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{732151A1-B3E9-4DA2-BAAB-894C6E9C32FB} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{7536E5A5-99E1-4F36-8395-695A74B53EE5} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{75B6F51F-181A-4116-A334-89D5C7F0BA29} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{766F110E-C9B4-4B10-842D-4AB8F8ECD10F} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{76BEF131-068D-42DC-9865-106D4B06DC50} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{76F7B9C7-EF21-4C1F-A4F1-29DB967AAE97} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{7722DB09-45D4-485A-96B0-98CE3D67DB4E} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{772DECE7-C097-4BBF-A393-1AE22E5B494B} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{774C2A42-3AD0-4D86-9A40-2623794D67D6} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{7926049B-9538-42E6-A4CF-EA8EE158C673} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{79C52146-BE74-4116-AA42-651062D61B61} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{7A4A92C1-8CE3-4C95-B8EF-0CBD421DAB52} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{7AFEFAA9-3DDD-4471-9F2D-C600B3778DF7} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{7B3DFEFA-D265-48E3-8FD0-197C28B1EE9E} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{7BC7E26B-CB75-48AD-A4F3-750F78AF27A6} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{7BE5C2D7-F5D7-4DC9-9FDF-C497C7A5B718} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{7D572166-DD11-4338-8FB3-460FE576DCF4} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{7D756DB9-9B38-4960-A80D-5D5CF2CFE37B} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{7DDA341B-2C38-472E-831F-39C94AAC288C} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{7F091448-4430-49ED-8213-73A26558C3B5} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{8027577B-FEF9-4509-9813-E983DAFEA5AD} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{81BC1023-52F8-4312-94AA-BB7C6180DD5E} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{8264FF83-4AAB-4EF6-8E0C-A89995819755} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{836AF6BB-BD27-45D0-99F1-91D39D7B8B81} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{859F1F6A-1F7F-47B3-A51C-288743ED3E3C} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{864A1FDA-116B-4524-87E3-858C29CBDB9F} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{86F9631C-F37D-4E79-A4A0-5E29B6EAC471} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{87A18AFA-0D55-48B9-9422-5E1A92B23DBE} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{87B0C026-D593-4C09-B0D3-CCC0DCBF5575} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{87ED6102-B634-4ADD-B67C-636B75067B56} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{88284D18-BDB0-4FFD-9ED9-FAE59ADED78D} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{882A1C05-DB6A-4F57-B9E0-3B0EDE24B90E} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{893F9BCF-970E-4964-86BE-5AEE16F84951} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{894FADBC-8050-426E-8E52-9E10F0E1644F} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{899FE34F-37F0-4273-A5D2-6A819118B5E8} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{8A1DB78A-8399-4584-A429-F535F19F256D} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{8AAE1CDB-FFB3-40A8-9B66-88705984235C} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{8C215E06-8E0C-4A03-9055-74D8AE9D3D2F} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{8C509060-1C69-4007-8E89-9A17B6F16079} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{90A50D1F-A830-403C-A32C-5CE11B69935C} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{91F9D8A4-0D60-431A-AA92-501A5E597B1F} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{92BA4E65-6657-4FF1-9A0C-79954C6D1FC6} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{92EF9375-6987-4555-95DB-8821007C2C8A} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{94ACDE85-E617-4411-8C64-D1A7468E69B6} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{94B24979-2457-47CD-BC28-FAA2CED5CF23} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{9544A74C-DFC8-419C-9E4C-53510DF3FF01} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{95CDFBF4-D4C9-4110-BDF0-0D52661AAB52} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{96C3D9AF-0271-4E87-A48C-DA3AF7E7E927} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{971D9888-302B-4E56-AAD8-C18CC7FBE5EA} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{9976AEFE-8F73-4A12-8235-58963C4173AA} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{9A97418F-2CA2-43BC-9147-A70A7B339E1D} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{9B07F122-D4F3-4501-B000-406E64B5499E} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{9B2CDD24-0C50-4AC6-ACE6-8DB72B9C95DE} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{9BAE4A56-2CD4-4F00-8BCA-47297CBC11D1} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{9C793122-158A-4848-8364-40B4F794B5C3} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{9F12E04E-2F27-4B3A-A511-E72461B104E9} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{A1378B9C-B070-448B-BDBF-82697DFF7023} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{A4BA0DED-E379-470E-B140-24D9CA567690} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{A4D636B6-90FC-4AA1-BF16-C71B1FBF4E8F} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{A6A355D8-EEEB-4F3E-A29E-9D4821471E8B} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{A77994EA-68A8-4C52-B725-55853EDE89A9} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{A7AECA1D-7D5A-48B0-BA15-23D9C091E5C3} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{A82398C0-B779-46FD-AC4C-86E4AD688717} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{A83A35C6-C0E8-488F-B237-383DD7763465} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{A8E31C65-2C44-4319-B2E4-D4AFE606BFE7} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{A9013404-5C10-4538-AA5B-4429A9870745} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{A942FBF5-D09A-47FB-8DD5-A2D4A0CA0BC2} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{A968ACF8-3FDA-497C-AB9C-B2CAF8ACF531} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{AA36F3FF-51FD-4900-A24A-AB3C1C86D2D5} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{AAB4A176-4C52-4594-A47D-772E59AC9DD7} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{ABDB29B9-A020-43EB-8989-0DD965FF0563} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{ACF54A02-8EDE-474E-8827-8A0B4262BDD0} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{AD9B60A7-243C-48BE-AF9D-5E07A9FA5717} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{ADA6D38F-93E7-4081-9E45-0DF099FA2500} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{AEE41F38-6A24-49CF-8CF7-4651701552E0} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{AEE67427-1FF5-48D1-A980-7915FA34B84B} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{AF54B7A4-E5CF-4F73-ABC1-36EC9CFBEA62} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{AF88167E-C45C-4A74-A69B-D260296B02A3} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{AFB3CB68-F6E5-46B3-B738-8449CF57990E} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{B266357D-4368-41C8-84FB-14DFED058372} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{B479DB72-BC43-4D89-8497-20F680E426F5} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{B494F00E-2EFE-4CBF-9264-B1031A0E062C} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{B4A2E28A-C1FC-4540-A616-ED7ACB3BDD82} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{B4BFD57D-6822-4F60-A9B1-C1919D06AFE6} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{B7973543-CFB3-43EA-A407-BF227780ADE3} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{B7F3C955-0D99-448D-B639-96B74BC72EE9} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{B93D5C43-E0A5-491C-94E5-16F0B239CA55} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{B9BC330D-D704-453B-9AF3-1DF32AA710C7} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{B9DEBFFE-DC43-4C97-9D15-AAB0E256A275} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{BA7C9D57-6698-4C3D-9237-03AD49911600} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{BAD8226D-F2FC-4727-9283-EB4B4C19185F} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{BAE8AFB1-2109-4A69-BBE8-100335F20745} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{BC7D98AB-0756-43C7-9ECE-7EB0829BED15} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{BD2E4766-1E64-48AC-9EF1-6E5CAC055908} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{BD47EF23-B048-44BE-B77F-01AE5DE31FEC} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{BDF9B080-1DE7-498B-9EF2-427A9F268FFC} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{BF892A72-3610-4CA2-962F-EA8EF79933EC} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{C079F497-4B62-4C52-922E-3BB1379294A9} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{C2EC8921-9925-4CB8-B2D5-ACB8234D9115} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{C306D5FF-F8E1-4AAE-8935-CA6A639DAED4} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{C376AD2C-25E1-4104-B0D1-A8B44B40A5CE} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{C61FFA0E-34FC-4AF2-9864-0C6F846DE65B} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{C655D0AD-2A9B-477A-8900-AAF323CA3354} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{C76D0A67-0038-4FDC-AD35-1B0910BECECF} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{C85AD20F-2418-44F6-8E90-E755AE74B5D9} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{C8AE9FDB-7842-4D47-BAB8-C3B31A6A8AF7} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{C95C023A-2C1F-49CB-9A31-A01C6830685B} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{C9CD956C-F498-44C9-9977-B65E8502D6E8} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{CBA67238-B5DF-46F2-AF0A-39FA6624F76A} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{CD3C9096-21D1-4D4C-AF7D-2673AB8EF949} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{CD570767-EF5C-49D9-95A1-6959D8E4CDEB} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{CDF7DEA2-1B45-400F-AE80-85216511AB1D} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{CF1614F8-FE70-4C2D-AEB2-67FA83A20258} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{CFFA459B-B791-4717-AD01-27F04AEB65AF} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{D07BD8E9-8D5C-4D6D-9E5F-2964882726CC} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{D0FC2666-8D1D-493D-BC41-BD15F45D27D8} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{D1CC6438-8DA6-43AD-82CA-8FC5C82DB401} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{D222920E-3740-444E-AA6D-B03D4498406B} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{D4AA8711-54F9-4044-8E1E-E24826A13C0B} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{D596E6E9-BCF2-47D3-989B-2161DD7DA379} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{D7686782-1618-46F7-838B-728163455793} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{D80740F7-F1E7-459D-8D2C-B51139A7C6F6} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{D8F43B0E-F744-4B4A-874B-9383A6794E81} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{D930A3AD-9246-47E0-ACC0-20E5E3D7E152} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{DB34F0F0-B20E-475F-953A-DF2A6567F8CC} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{DB54211D-BE27-4749-A0A8-5FBCEE688086} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{DB9A52DE-2F99-426B-9781-DDB4CC299277} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{DD3187B8-1EA7-442A-8CA9-C1048FBC1E24} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{DDD83883-FC31-4A34-AF85-6D4850187AAF} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{DFF2CB9D-7255-492B-9675-0196BDE0AAF9} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{E006D82F-78FC-4E2E-8031-AF87DC2098DE} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{E0DF3626-EACE-440A-9D84-BFE6BA019D2E} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{E1B6BCDD-2EDC-4CA6-A103-290CC29F1691} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{E35B9296-B2DB-49AF-B457-5180AF742463} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{E3FAB01A-D83C-4E2E-B5D9-7A5F7DB711E7} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{E4AC4A48-1FFA-4055-B9B6-36D3ECBA3C96} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{E5C869A3-4AD7-4E63-B6A2-8B93C62D30C9} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{E5DBEA1E-91C1-4DA3-B99F-93EF19DB6268} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{E66A109A-D447-486D-94FA-E24F2D675DE2} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{E7038665-ACCD-4E27-8012-0ECCAA52C086} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{E719304E-4A45-48BA-A5C3-56042E161496} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{E8AC655F-ACDF-4C3D-9FB4-FE273B386492} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{EA775C05-16C5-4974-87EE-62CBEB9FD124} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{EB5EAEC1-D012-48C3-B968-E836FA7DF9F6} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{EC0E337F-1316-4ABF-95D1-901897A839BA} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{EC215346-4E56-448E-B0E5-78BF80D4BDA8} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{EC29ED28-5C2B-4694-B63F-341DB4915B9D} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{ECCDE16B-7FFB-4BF4-9975-3278AF98D90F} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{EE7AEE01-D8C9-4AA0-B29C-B00709094A71} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{EF59A4C1-9C2D-4FBC-A09D-94475D995260} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{EF73BE81-42D8-427A-A751-C8F9F7874710} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{F0CEAF79-C3E2-4297-88ED-CE047FCB91C2} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{F1537664-167E-480E-87A0-36105EE43E4E} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{F19B99E1-C68B-461E-B173-E676CF36C45F} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{F1D1690A-2220-49D7-A886-25CAFB4A7128} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{F1F80ADF-E5D0-4000-93A9-046B43EA4201} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{F272D7C9-87F7-4049-A608-6A3C8DED7152} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{F39BEBD3-C221-4FA3-AC68-DD89F4CAEEAA} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{F3CD5E8C-D2ED-4987-9C11-8C5DEEA42669} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{F42E4A2E-DBFB-4227-905B-94B24F8B961A} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{F7CFBBCF-C09B-4F09-A53C-5C610FA759E3} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{F7F53F4A-04A8-4B20-801D-01DDBE35F94F} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{F859A127-A0F6-41E1-A814-EB98EF727218} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{F91D14A3-84CA-45C3-8AC9-09DC53A855F0} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{FA380331-ABAA-4AE1-B514-3BAF0244A008} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{FBAFC80C-4D26-4C1C-8CB9-DA2D7D37AA22} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{FBED27C5-4121-4A76-B6CD-C3C4FE6D1952} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{FC5512F5-2882-48FD-B66E-B02A0A139645} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\{FD88F7C7-E9C4-466C-BDF8-3268BC818EE2} (Empty Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Roaming\Mozilla\Firefox\Profiles\yvro0wpn.default\searchplugins\Yahoo powered search.xml (File)
    Successfully deleted: C:\Windows\wininit.ini (File)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0CQT9S2V (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0U182D5Y (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\37SBU9EM (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3B2UQ5U8 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3NZSA6BA (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4ADMQD5S (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4CDF9B7C (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4MV3EMD1 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4S0LJO8E (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5NYZQ4FF (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5O97LZRN (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62N0TP48 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6LUZ1DVI (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P9ZI9F9 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6PB9OWJS (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7EC21EM4 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7QCL8D6F (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8GQPDTEA (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8TDXYCAW (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9MYCME61 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9N1LVF8O (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\APW9U9XM (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B368FDX2 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B528W6IZ (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B91SMF0A (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BVE30H76 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BZ779EKI (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CDA1AS8R (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DH5256DX (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DYOZB15Z (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E4J5XG91 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EL3HWH9I (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EP6RVGXW (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FP3Q6BF2 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FSJNRE2U (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FW91PUQ2 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GDX31L6R (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GEZHYH5N (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GREI6ZFV (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HIG2LRR4 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HM2A4593 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HO0GFNUY (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HQLUTZZU (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HRQBTJKF (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IJ3UB32W (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J0QL2W6A (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JHFCAT3J (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JKPC26LU (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUOPLG46 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K2SLXBS3 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KICHTEIS (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L5QIBZX7 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NKGLVKHK (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O2ABNP4L (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P38E9ZI7 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PEDGY6D0 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PI24BYJS (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QC1DG90T (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QODNL0Z1 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QZXNJEGK (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RK09JIW4 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S0Y28Q26 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S4RLDL6O (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH0VHIEG (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SOGLE4PZ (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TA1EKTT1 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TKX9HP4T (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TWHM105K (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V1M2XMIY (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V298I0ZW (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V5ENY3T5 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W09YOT6M (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WN19F00Y (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WXIDN8WI (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X918IJ9F (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XLE2E577 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XWNNPIVF (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y2JLRVZC (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Battlefield\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YTVW97NL (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0CQT9S2V (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0U182D5Y (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\37SBU9EM (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3B2UQ5U8 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3NZSA6BA (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4ADMQD5S (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4CDF9B7C (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4MV3EMD1 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4S0LJO8E (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5NYZQ4FF (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5O97LZRN (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62N0TP48 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6LUZ1DVI (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P9ZI9F9 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6PB9OWJS (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7EC21EM4 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7QCL8D6F (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8GQPDTEA (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8TDXYCAW (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9MYCME61 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9N1LVF8O (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\APW9U9XM (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B368FDX2 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B528W6IZ (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B91SMF0A (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BVE30H76 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BZ779EKI (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CDA1AS8R (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DH5256DX (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DYOZB15Z (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E4J5XG91 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EL3HWH9I (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EP6RVGXW (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FP3Q6BF2 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FSJNRE2U (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FW91PUQ2 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GDX31L6R (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GEZHYH5N (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GREI6ZFV (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HIG2LRR4 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HM2A4593 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HO0GFNUY (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HQLUTZZU (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HRQBTJKF (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IJ3UB32W (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J0QL2W6A (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JHFCAT3J (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JKPC26LU (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JUOPLG46 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K2SLXBS3 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KICHTEIS (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L5QIBZX7 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NKGLVKHK (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O2ABNP4L (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P38E9ZI7 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PEDGY6D0 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PI24BYJS (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QC1DG90T (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QODNL0Z1 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QZXNJEGK (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RK09JIW4 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S0Y28Q26 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S4RLDL6O (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH0VHIEG (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SOGLE4PZ (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TA1EKTT1 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TKX9HP4T (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TWHM105K (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V1M2XMIY (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V298I0ZW (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V5ENY3T5 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W09YOT6M (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WN19F00Y (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WXIDN8WI (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X918IJ9F (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XLE2E577 (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XWNNPIVF (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y2JLRVZC (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YTVW97NL (Temporary Internet Files Folder)



    Registry: 2

    Successfully deleted: HKLM\Software\Google\Chrome\Extensions\cdjbnddbclciabnckgeahmneohjlahdm (Registry Key)
    Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Search\\SearchAssistant (Registry Value)




    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Scan was completed on Tue 06/27/2017 at 10:57:19.02
    End of JRT log
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


    Just in case the FRST actually did something, I ran it again and hit the scan to recreate the log file. Maybe it did something while running all of these times. (I had removed the Proxy myself over the weekend so it shouldn't show up again).

    FRST:

    Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 25-06-2017 01
    Ran by Battlefield (administrator) on BATTLEFIELD-PC (27-06-2017 11:14:31)
    Running from C:\Users\Battlefield\Desktop
    Loaded Profiles: Battlefield & QBDataServiceUser24 (Available Profiles: Battlefield & QBDataServiceUser21 & QBDataServiceUser24 & Jordan & CJ & MSSQL$TESTSERVER & ReportServer & MSSQLFDLauncher & MSSQLSERVER)
    Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
    Internet Explorer Version 11 (Default browser: IE)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
    (DigitalPersona, Inc.) C:\Program Files (x86)\CenterEdge Software\Bin\DpHostW.exe
    (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
    (CenterEdge Software) C:\Program Files (x86)\CenterEdge Software\AdvHardwareService.exe
    (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
    (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
    (Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
    (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
    (National Instruments Corporation) C:\Windows\SysWOW64\lkads.exe
    (Alcatel-Lucent) C:\Program Files (x86)\Common Files\Motive\McciCMService.exe
    (Alcatel-Lucent) C:\Program Files\Common Files\Motive\McciCMService.exe
    (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
    (National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\Security\nidmsrv.exe
    (National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\nisvcloc\nisvcloc.exe
    (Wireless Service) C:\Program Files (x86)\KEEBOX\150N Wireless Utility\ANIWZCSdS.exe
    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
    (Intuit) C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
    (Intuit Inc.) C:\Program Files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
    (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
    (Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
    (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    () C:\Program Files (x86)\Windows NT\Accessories\WinUtilityHelper\wuhelper.exe
    (National Instruments, Inc.) C:\Windows\SysWOW64\lkcitdl.exe
    (National Instruments Corporation) C:\Windows\SysWOW64\lktsrv.exe
    (National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe
    (National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe
    (Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
    (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
    (National Instruments Corporation) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe
    (Intuit, Inc.) C:\Program Files (x86)\Intuit\QuickBooks 2014\QBDBMgrN.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
    (Microsoft Corporation) C:\Program Files (x86)\EMET 4.1\EMET_Agent.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
    (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Microsoft Corporation) C:\Windows\System32\taskmgr.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe

    ==================== Registry (Whitelisted) ====================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation)
    HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [Intuit SyncManager] => C:\Program Files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe [3776824 2015-11-03] (Intuit Inc. All rights reserved.)
    HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
    HKLM-x32\...\Run: [EMET 4.1 Update 1 Agent] => C:\Program Files (x86)\EMET 4.1\EMET_agent.exe [88272 2014-05-28] (Microsoft Corporation)
    HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2406496 2017-06-04] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [1870928 2017-04-04] (Adobe Systems Inc.)
    HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3487032 2017-06-12] (Dropbox, Inc.)
    HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
    HKLM-x32\...\Run: [DpTsClnt] => Regsvr32.exe /s "Bin\DpTsClnt.dll"
    HKLM-x32\...\Run: [] => [X]
    Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
    HKLM\...\Policies\Explorer: [NoDesktop] 0
    HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\Run: [RCHotKey] => C:\Program Files (x86)\RingCentral\RingCentral Softphone\RCHotKey.exe [30000 2014-06-09] (RingCentral, Inc.)
    HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\Run: [HP Officejet Pro 8600 (NET)] => C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
    HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
    HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [5915776 2016-03-21] (Safer-Networking Ltd.)
    HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\RunOnce: [Uninstall C:\Users\Battlefield\AppData\Local\Microsoft\OneDrive\17.3.5860.0512\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Battlefield\AppData\Local\Microsoft\OneDrive\17.3.5860.0512\amd64"
    HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\Winlogon: [Userinit] C:\Windows\System32\userinit.exe, [30720 2010-11-20] (Microsoft Corporation)
    HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssText3d.scr [333824 2010-11-20] (Microsoft Corporation)
    AppInit_DLLs:  => No File
    ShellExecuteHooks-x32: No Name - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - -> No File
    ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google)
    ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google)
    ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google)
    ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2017-05-26] ()
    ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2017-05-26] ()
    ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2017-05-26] ()
    ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-09-11] (Autodesk, Inc.)
    ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => -> No File
    ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
    ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
    ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
    ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers-x32: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers-x32: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers-x32: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers-x32: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers-x32: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers-x32: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers-x32: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    ShellIconOverlayIdentifiers-x32: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2013-06-25]
    ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Intuit Data Protect.lnk [2013-12-03]
    ShortcutTarget: Intuit Data Protect.lnk -> C:\Program Files (x86)\Common Files\Intuit\DataProtect\IntuitDataProtect.exe (Intuit Inc.)
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk [2013-12-03]
    ShortcutTarget: QuickBooks Update Agent.lnk -> C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe (Intuit Inc.)
    Startup: C:\Users\Jordan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2017-01-26]
    ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
    BootExecute: autocheck autochk * sdnclean64.exe

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    ProxyEnable: [.DEFAULT] => Proxy is enabled.
    ProxyServer: [.DEFAULT] => http=127.0.0.1:47574
    Winsock: Catalog5 09 C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll [26512 2013-05-11] (National Instruments Corporation)
    Winsock: Catalog5-x64 09 C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll [28560 2013-05-11] (National Instruments Corporation)
    Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
    Tcpip\..\Interfaces\{5E6EDCD9-41B9-471A-9F74-AE95EF4B6233}: [NameServer] 8.8.8.8,8.8.4.4
    Tcpip\..\Interfaces\{CE60960A-05CC-4685-B18F-B63497DE832F}: [DhcpNameServer] 192.168.1.1

    Internet Explorer:
    ==================
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
    HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)
    BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
    BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-04-04] (Adobe Systems Incorporated)
    BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-06-09] (Microsoft Corporation)
    BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
    BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-04-04] (Adobe Systems Incorporated)
    BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-23] (Hewlett-Packard Co.)
    BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)
    BHO-x32: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12] (DivX, LLC)
    BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
    BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
    BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-04-04] (Adobe Systems Incorporated)
    BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-06-09] (Microsoft Corporation)
    BHO-x32: Microsoft Web Test Recorder 14.0 Helper -> {b924f0b4-0b3c-49c0-bab2-213fb9ebd1d3} -> C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2014-11-10] (Microsoft Corporation)
    BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
    BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-04-04] (Adobe Systems Incorporated)
    BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-23] (Hewlett-Packard Co.)
    Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-04-04] (Adobe Systems Incorporated)
    Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2017-04-04] (Adobe Systems Incorporated)
    Toolbar: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2017-04-04] (Adobe Systems Incorporated)
    DPF: HKLM-x32 {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/_layouts/ClientBin/ieawsdc32.cab
    DPF: HKLM-x32 {1851174C-97BD-4217-A0CC-E908F60D5B7A} hxxps://h50203.www5.hp.com/CSMWeb/Customer/cabs/HPISDataManager.CAB
    DPF: HKLM-x32 {4871A87A-BFDD-4106-8153-FFDE2BAC2967} hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.6.2.cab
    DPF: HKLM-x32 {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab
    DPF: HKLM-x32 {82774781-8F4E-11D1-AB1C-0000F8773BF0} hxxps://transfers.ds.microsoft.com/FTM/TransferSource/grTransferCtrl.cab
    DPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} hxxps://akamaicdn.webex.com/client/WBXclient-T27L10NSP32EP5-14362/webex/ieatgpc1.cab
    DPF: HKLM-x32 {E0FEE963-BB53-4215-81AD-B28C77384644} hxxps://pattcw.att.motive.com/wizlet/DSLActivation/static/installer/ATTInternetInstaller64.cab
    Handler-x32: intu-help-qb7 - {5A03BD9D-766D-47A6-8E87-CD90F60BE245} - C:\Program Files (x86)\Intuit\QuickBooks 2014\HelpAsyncPluggableProtocol.dll [2017-03-01] (Intuit, Inc.)
    Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
    Handler-x32: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - C:\Windows\system32\mscoree.dll [2010-11-20] (Microsoft Corporation)
    Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2013-02-26] (Skype Technologies)

    FireFox:
    ========
    FF ProfilePath: C:\Users\Battlefield\AppData\Roaming\Mozilla\Firefox\Profiles\yvro0wpn.default [2017-06-24]
    FF SelectedSearchEngine: Mozilla\Firefox\Profiles\yvro0wpn.default -> Yahoo powered search
    FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\yvro0wpn.default -> Yahoo powered search
    FF DefaultSearchEngine: Mozilla\Firefox\Profiles\yvro0wpn.default -> Yahoo powered search
    FF Extension: (Adblock Plus) - C:\Users\Battlefield\AppData\Roaming\Mozilla\Firefox\Profiles\yvro0wpn.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-04-18]
    FF Extension: (No Name) - C:\Program Files (x86)\Mozilla Firefox\extensions\䍻䙁䕅䅆ⵃ〰㜱〭〰ⴰ〰㜰䄭䍂䕄䙆䑅䉃絁 [2013-02-27] [not signed]
    FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
    FF Extension: (DivX Plus Web Player HTML5 &video&) - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-02-01] [not signed]
    FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
    FF Extension: (HP Smart Web Printing) - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-06-25] [not signed]
    FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.15@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn
    FF Extension: (Adobe Acrobat DC - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn [2017-05-24]
    FF HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\Firefox\Extensions: [{257B76A0-0277-11E2-8271-B8AC6F996F26}] - C:\Users\Battlefield\AppData\Local\{257B76A0-0277-11E2-8271-B8AC6F996F26} => not found
    FF HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
    FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll [2013-09-10] ()
    FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)
    FF Plugin: @java.com/DTPlugin,version=10.7.2 -> C:\Windows\system32\npDeployJava1.dll [2012-10-05] (Oracle Corporation)
    FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
    FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2017-06-04] (Adobe Systems)
    FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll [2013-12-03] (Adobe Systems)
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll [2013-09-10] ()
    FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
    FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2011-12-13] (DivX, LLC)
    FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)
    FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
    FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-02-17] (Microsoft Corporation)
    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-07-11] (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
    FF Plugin-x32: @Motive.com/NpMotive,version=1.0 -> C:\Program Files (x86)\Common Files\Motive\npMotive.dll [2010-04-30] (Alcatel-Lucent)
    FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-07-22] (NVIDIA Corporation)
    FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-07-22] (NVIDIA Corporation)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
    FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2017-04-04] (Adobe Systems Inc.)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-08-03] (Adobe Systems Inc.)
    FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2017-06-04] (Adobe Systems)
    FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-12-03] (Adobe Systems)
    FF Plugin HKU\S-1-5-21-3544609310-1622349089-2069013866-1000: @citrixonline.com/appdetectorplugin -> C:\Users\Battlefield\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2014-12-03] (Citrix Online)
    FF Plugin HKU\S-1-5-21-3544609310-1622349089-2069013866-1000: @ringcentral.com/RingCentralMeetingsPlugin -> C:\Users\Battlefield\AppData\Roaming\RingCentralMeetings\bin\nprcmsplugin.dll [2015-05-18] (Zoom Video Communications, Inc. and RingCentral Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nplv2012win32.dll [2014-01-08] (National Instruments)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nplv2013win32.dll [2014-01-09] (National Instruments)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2017-04-04] (Adobe Systems Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2012-07-03] (Apple Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2012-07-03] (Apple Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2012-07-03] (Apple Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2012-07-03] (Apple Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2012-07-03] (Apple Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll [2012-07-03] (Apple Inc.)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll [2012-07-03] (Apple Inc.)

    Chrome:
    =======
    CHR DefaultProfile: Default
    CHR HomePage: Default -> hxxp://www.google.com/
    CHR StartupUrls: Default -> "hxxp://www.google.com/"
    CHR DefaultSearchURL: Default -> hxxps://www.teoma.com/web?q={searchTerms}
    CHR DefaultSearchKeyword: Default -> hxxps://teoma.com
    CHR DefaultSuggestURL: Default -> hxxp://www.teoma.com/ss?type=prefix&li=ff&q={searchTerms}
    CHR Session Restore: Default -> is enabled.
    CHR Profile: C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default [2017-06-27]
    CHR Extension: (Google Drive) - C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-14]
    CHR Extension: (YouTube) - C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-01]
    CHR Extension: (Google Search) - C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-14]
    CHR Extension: (AdBlock) - C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-06-26]
    CHR Extension: (Pixlr Touch Up) - C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default\Extensions\jklljiahjgoglchglekebfljnmbaleig [2014-03-10]
    CHR Extension: (Chrome Web Store Payments) - C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-21]
    CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2012-04-21]
    CHR Extension: (Gmail) - C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-15]
    CHR Extension: (Chrome Media Router) - C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-17]
    CHR HKLM\...\Chrome\Extension: [ckadhkfhcieallpikidnjojofenjpfni] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\ckadhkfhcieallpikidnjojofenjpfni.crx <not found>
    CHR HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\BATTLE~1\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-05-06]
    CHR HKLM-x32\...\Chrome\Extension: [ckadhkfhcieallpikidnjojofenjpfni] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\ckadhkfhcieallpikidnjojofenjpfni.crx <not found>
    CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
    CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2011-12-12]

    ==================== Services (Whitelisted) ====================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    "wuhelper" => service was unlocked. <==== ATTENTION

    R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [814688 2017-06-04] (Adobe Systems Incorporated)
    R2 AdvHardwareService; C:\Program Files (x86)\CenterEdge Software\AdvHardwareService.exe [23552 2017-03-27] (CenterEdge Software) [File not signed]
    R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
    R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
    S4 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-09-11] ()
    R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-10-12] (ASUSTeK Computer Inc.)
    S4 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-10-12] (ASUSTeK Computer Inc.)
    S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [15768 2010-02-02] (Microsoft Corporation)
    R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2753720 2015-07-01] (Microsoft Corporation)
    S4 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-07-27] (Dropbox, Inc.)
    S4 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-07-27] (Dropbox, Inc.)
    R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [48944 2017-06-12] (Dropbox, Inc.)
    S4 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [8998800 2013-05-08] (DisplayLink Corp.)
    R2 DpHost; C:\Program Files (x86)\CenterEdge Software\Bin\DpHostW.exe [326720 2009-08-10] (DigitalPersona, Inc.) [File not signed]
    S4 EPSON_Device_Control_Log_Service; C:\Program Files\epson\portcommunicationservice\DeviceControlLog.exe [395776 2012-06-22] (SEIKO EPSON CORPORATION) [File not signed]
    S4 EPSON_Port_Communication_Service; C:\Program Files\epson\portcommunicationservice\PCSVC.exe [584704 2012-06-22] (SEIKO EPSON CORPORATION) [File not signed]
    S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-20] (Microsoft Corporation) [File not signed]
    R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-23] (Hewlett-Packard Co.) [File not signed]
    R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-23] (Hewlett-Packard Co.) [File not signed]
    R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1037824 2009-09-23] (Hewlett-Packard Co.) [File not signed]
    R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [22744 2014-10-15] (Microsoft Corporation)
    R2 LkCitadelServer; C:\Windows\SysWOW64\lkcitdl.exe [695136 2010-10-27] (National Instruments, Inc.)
    R2 lkClassAds; C:\Windows\SysWOW64\lkads.exe [53544 2013-06-12] (National Instruments Corporation)
    R2 lkTimeSync; C:\Windows\SysWOW64\lktsrv.exe [63792 2013-06-12] (National Instruments Corporation)
    R2 McciCMService; C:\Program Files (x86)\Common Files\Motive\McciCMService.exe [319488 2010-04-30] (Alcatel-Lucent) [File not signed]
    R2 McciCMService64; C:\Program Files\Common Files\Motive\McciCMService.exe [517632 2010-04-30] (Alcatel-Lucent) [File not signed]
    R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation)
    R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [69964448 2015-04-03] (Microsoft Corporation)
    S2 MSSQL$TESTSERVER; c:\Program Files\Microsoft SQL Server\MSSQL11.TESTSERVER\MSSQL\Binn\sqlservr.exe [192192 2015-05-05] (Microsoft Corporation)
    S3 MSSQLFDLauncher; C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\fdlauncher.exe [49752 2012-02-11] (Microsoft Corporation)
    S3 MSSQLSERVER; C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlservr.exe [192192 2015-05-05] (Microsoft Corporation)
    R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [File not signed]
    R2 NIApplicationWebServer; C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [57696 2013-12-10] (National Instruments Corporation)
    S4 NIApplicationWebServer64; C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [81248 2013-12-10] (National Instruments Corporation)
    R2 NIDomainService; C:\Program Files (x86)\National Instruments\Shared\Security\nidmsrv.exe [380720 2013-06-12] (National Instruments Corporation)
    S4 NILM License Manager; C:\Program Files (x86)\National Instruments\Shared\License Manager\Bin\lmgrd.exe [1427688 2010-08-02] (Macrovision Corporation)
    R2 nimDNSResponder; C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe [260976 2013-05-11] (National Instruments Corporation)
    S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation)
    R2 NiSvcLoc; C:\Program Files (x86)\National Instruments\Shared\niSvcLoc\nisvcloc.exe [90440 2013-12-10] (National Instruments Corporation)
    R2 NISystemWebServer; C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe [57680 2013-12-10] (National Instruments Corporation)
    R2 Nonbrand_WUS-N; C:\Program Files (x86)\KEEBOX\150N Wireless Utility\ANIWZCSdS.exe [126976 2010-06-21] (Wireless Service) [File not signed]
    S4 Nonbrand_WUS-N_WPS; C:\Program Files (x86)\KEEBOX\150N Wireless Utility\ANIWConnService.exe [53248 2010-06-21] () [File not signed]
    S4 NovacomD; C:\Program Files (x86)\HP webOS\SDK\bin\novacomd\x86\novacomd.exe [61440 2011-09-19] (Palm) [File not signed]
    R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1370912 2013-11-29] (NVIDIA Corporation)
    S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15128352 2013-11-29] (NVIDIA Corporation)
    S4 Palm_TCP_Relay; C:\Program Files (x86)\HP webOS\PDK\tcprelay.exe [11776 2011-12-21] () [File not signed]
    R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [File not signed]
    S4 POSPerformanceCounters; c:\Program Files (x86)\Microsoft Point Of Service\Microsoft.PointOfService.Service.exe [35648 2006-01-24] (Microsoft Corporation)
    R2 QBCFMonitorService; C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe [45056 2017-03-01] (Intuit) [File not signed]
    S3 QBFCService; C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe [65536 2013-10-10] (Intuit Inc.) [File not signed]
    R2 QBVSS; C:\Program Files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe [1248256 2013-10-10] (Intuit Inc.) [File not signed]
    R3 QuickBooksDB24; C:\Program Files (x86)\Intuit\QuickBooks 2014\QBDBMgrN.exe [679936 2013-10-10] (Intuit, Inc.) [File not signed]
    S3 ReportServer; C:\Program Files\Microsoft SQL Server\MSRS11.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe [2423792 2012-10-20] (Microsoft Corporation)
    S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
    R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [4088608 2016-09-21] (Safer-Networking Ltd.) [File not signed]
    R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [235984 2016-11-24] (Safer-Networking Ltd.) [File not signed]
    S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [441512 2015-04-03] (Microsoft Corporation)
    S4 SQLAgent$TESTSERVER; c:\Program Files\Microsoft SQL Server\MSSQL11.TESTSERVER\MSSQL\Binn\SQLAGENT.EXE [613056 2015-05-05] (Microsoft Corporation)
    S4 SQLSERVERAGENT; C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE [613056 2015-05-05] (Microsoft Corporation)
    S4 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
    S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
    S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation)
    S3 VsEtwService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89240 2014-11-10] (Microsoft Corporation)
    S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [147664 2014-11-10] (Microsoft Corporation)
    R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-06-02] (Western Digital Technologies, Inc.)
    R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [296312 2014-06-02] (Western Digital Technologies, Inc.)
    S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
    R2 wuhelper; C:\Program Files (x86)\Windows NT\Accessories\WinUtilityHelper\wuhelper.exe [139776 2017-05-19] () [File not signed]
    S4 CarboniteService; "C:\Program Files\Carbonite\Carbonite Backup\carboniteservice.exe" [X]

    ===================== Drivers (Whitelisted) ======================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    R0 AiChargerPlus; C:\Windows\System32\DRIVERS\AiChargerPlus.sys [14464 2010-11-08] (ASUSTek Computer Inc.)
    R0 AiChargerPlus; C:\Windows\SysWOW64\DRIVERS\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
    S3 akshasp; C:\Windows\System32\DRIVERS\akshasp.sys [77912 2015-09-23] (SafeNet Inc.)
    S3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [322560 2015-09-23] (SafeNet Inc.)
    R1 anodlwf; C:\Windows\System32\DRIVERS\anodlwfx.sys [15872 2010-06-21] ()
    U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
    R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-10-12] ()
    R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
    S3 cebal2_x64; C:\Windows\System32\DRIVERS\cebal2_x64.sys [47368 2014-06-12] ()
    S3 DisplayLinkUsbIo_x64; C:\Windows\System32\DRIVERS\DisplayLinkUsbIo_x64_7.2.47873.0.sys [44944 2013-05-13] ()
    S2 DLPortIO; C:\Windows\SysWow64\Drivers\DLPortIO.sys [3584 1999-01-10] () [File not signed]
    S2 EPSON_PCS_Parallel_Port_Driver; C:\Windows\system32\DRIVERS\pcslpt.sys [21640 2012-06-22] (SEIKO EPSON CORPORATION)
    R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [350552 2015-09-23] (SafeNet Inc.)
    S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [52832 2014-01-04] (hxxp://libusb-win32.sourceforge.net)
    R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
    S3 MREMP50; C:\Program Files (x86)\Common Files\Motive\MREMP50.sys [21248 2010-04-30] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
    S3 MRESP50; C:\Program Files (x86)\Common Files\Motive\MRESP50.sys [20096 2010-04-30] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
    S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
    S3 npf; C:\Windows\System32\drivers\npf.sys [35344 2013-07-28] (CACE Technologies, Inc.)
    R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-10-30] (NVIDIA Corporation)
    R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-06-22] (Corel Corporation)
    R1 RegHiveRecovery; C:\Windows\system32\drivers\RegHiveRecovery.sys [48304 2014-02-20] (Microsoft Corporation)
    S4 RsFx0201; C:\Windows\System32\DRIVERS\RsFx0201.sys [336880 2012-10-20] (Microsoft Corporation)
    S3 SpotUsb; C:\Windows\System32\DRIVERS\MFUSB_Netduino.sys [34912 2012-04-11] (Microsoft Corporation)
    S3 sscdserd; C:\Windows\System32\DRIVERS\sscdserd.sys [141384 2010-11-11] (MCCI Corporation)
    S3 STTub30; C:\Windows\System32\Drivers\STTub30.sys [44184 2012-07-09] (STMicroelectronics)
    S3 STTub30; C:\Windows\SysWOW64\Drivers\STTub30.sys [37808 2009-11-23] (STMicroelectronics)
    U5 TMUSB; C:\Windows\System32\DRIVERS\TMUSB64.SYS [63096 2012-03-01] (Seiko Epson Corporation)
    S3 WIMMount; C:\Program Files (x86)\Windows Kits\8.1\Assessment and Deployment Kit\Deployment Tools\amd64\DISM\wimmount.sys [40552 2013-08-22] (Microsoft Corporation)
    S3 catchme; \??\C:\ComboFix\catchme.sys [X]
    S3 dbx; system32\DRIVERS\dbx.sys [X]
    S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X]
    S3 MREMP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS [X]
    S3 MREMPR5; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS [X]
    S3 MRENDIS5; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [X]
    S3 MRESP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS [X]
    S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

    ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2017-06-27 11:14 - 2017-06-27 11:15 - 00051467 _____ C:\Users\Battlefield\Desktop\FRST.txt
    2017-06-27 11:06 - 2017-06-27 11:09 - 00002784 _____ C:\Users\Battlefield\Desktop\Rkill.txt
    2017-06-27 11:06 - 2017-06-27 11:06 - 02030536 _____ (Bleeping Computer, LLC) C:\Users\Battlefield\Downloads\rkill.exe
    2017-06-27 10:57 - 2017-06-27 10:57 - 00065349 _____ C:\Users\Battlefield\Desktop\JRT.txt
    2017-06-27 10:50 - 2017-06-27 10:51 - 01663672 _____ (Malwarebytes) C:\Users\Battlefield\Downloads\JRT.exe
    2017-06-27 10:50 - 2017-06-27 10:50 - 00000000 ___HD C:\OneDriveTemp
    2017-06-27 09:34 - 2017-06-27 10:05 - 00000000 ____D C:\AdwCleaner
    2017-06-27 09:26 - 2017-06-27 11:10 - 00008807 _____ C:\Users\Battlefield\Desktop\Fixlog.txt
    2017-06-27 09:25 - 2017-06-26 17:47 - 02441216 _____ (Farbar) C:\Users\Battlefield\Desktop\FRST64.exe
    2017-06-27 09:23 - 2017-06-27 11:10 - 00008243 _____ C:\Users\Battlefield\Desktop\fixlist.txt
    2017-06-26 17:47 - 2017-06-26 17:47 - 00000000 ____D C:\Users\Battlefield\Downloads\FRST-OlderVersion
    2017-06-26 17:28 - 2017-06-26 17:24 - 04110280 _____ C:\Users\Battlefield\Desktop\AdwCleaner.exe
    2017-06-26 17:09 - 2013-02-28 21:08 - 00001711 _____ C:\Users\Battlefield\Downloads\Google Drive.lnk
    2017-06-26 17:07 - 2017-06-27 09:21 - 00008847 _____ C:\Users\Battlefield\Downloads\Fixlog.txt
    2017-06-26 17:07 - 2017-06-27 09:21 - 00008281 _____ C:\Users\Battlefield\Downloads\fixlist.txt
    2017-06-26 17:02 - 2017-06-26 17:02 - 00000000 ____D C:\ProgramData\Sun
    2017-06-24 18:47 - 2017-06-24 18:47 - 00000449 _____ C:\Users\Battlefield\Desktop\aswMBR.txt
    2017-06-24 18:45 - 2017-06-24 18:45 - 05198336 _____ (AVAST Software) C:\Users\Battlefield\Downloads\aswMBR (1).exe
    2017-06-24 18:32 - 2017-06-24 18:36 - 00131130 _____ C:\Users\Battlefield\Downloads\Addition.txt
    2017-06-24 18:30 - 2017-06-24 18:36 - 00102502 _____ C:\Users\Battlefield\Downloads\FRST.txt
    2017-06-24 18:29 - 2017-06-26 17:47 - 02441216 _____ (Farbar) C:\Users\Battlefield\Downloads\FRST64.exe
    2017-06-24 18:29 - 2017-06-26 17:07 - 00000000 ____D C:\FRST
    2017-06-24 18:26 - 2017-06-27 10:08 - 00008192 _____ C:\Windows\SysWOW64\WDPABKP.dat
    2017-06-24 18:25 - 2017-06-24 18:25 - 00000962 _____ C:\Windows\Tweaking.com - Registry Backup Setup Log.txt
    2017-06-24 18:24 - 2017-06-24 18:24 - 05766144 _____ (Tweaking.com) C:\Users\Battlefield\Downloads\tweaking.com_registry_backup_setup (1).exe
    2017-06-24 18:23 - 2017-06-24 18:23 - 05766144 _____ (Tweaking.com) C:\Users\Battlefield\Downloads\tweaking.com_registry_backup_setup.exe
    2017-06-24 18:19 - 2017-06-27 10:48 - 00000000 ___HD C:\Users\Public\Documents\AdobeGC
    2017-06-24 14:10 - 2017-06-24 14:10 - 00000000 ____D C:\Users\Battlefield\Documents\ProcAlyzer Dumps
    2017-06-24 14:02 - 2017-06-24 14:02 - 00000000 ____D C:\Users\Battlefield\AppData\Local\Tempzxpsignbf528d65aa2f44e5
    2017-06-24 14:02 - 2017-06-24 14:02 - 00000000 ____D C:\Users\Battlefield\AppData\Local\Tempzxpsign8d14837c4143a0c1
    2017-06-24 14:02 - 2017-06-24 14:02 - 00000000 ____D C:\Users\Battlefield\AppData\Local\Tempzxpsign6fa10438927821b6
    2017-06-20 12:49 - 2017-06-20 12:49 - 00000000 ____D C:\CenterEdge
    2017-06-20 12:48 - 2017-06-20 12:48 - 00001084 _____ C:\Users\Public\Desktop\Advantage Manager Console.lnk
    2017-06-20 12:48 - 2017-06-20 12:48 - 00001079 _____ C:\Users\Public\Desktop\Advantage Groups.lnk
    2017-06-20 12:48 - 2017-06-20 12:48 - 00000000 ____D C:\Windows\DPDrv
    2017-06-18 15:36 - 2017-06-18 15:36 - 00000000 ____D C:\Program Files\Common Files\AV
    2017-06-18 15:36 - 2015-07-28 17:52 - 00821920 _____ (Safer-Networking Ltd. ) C:\Users\Public\Desktop\Post Win10 Spybot-install.exe
    2017-06-18 14:30 - 2017-06-24 14:31 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
    2017-06-18 14:30 - 2017-06-18 14:30 - 00001455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
    2017-06-18 14:30 - 2017-06-18 14:30 - 00001443 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
    2017-06-18 14:30 - 2017-06-18 14:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
    2017-06-18 14:30 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
    2017-06-18 14:26 - 2017-06-18 14:27 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\CJ\Downloads\spybot-2.4.exe
    2017-06-14 13:37 - 2017-06-14 13:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
    2017-06-14 03:24 - 2017-06-02 03:28 - 02317824 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
    2017-06-14 03:24 - 2017-06-02 03:28 - 02222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
    2017-06-14 03:24 - 2017-06-02 03:28 - 00778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
    2017-06-14 03:24 - 2017-06-02 03:28 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
    2017-06-14 03:24 - 2017-06-02 03:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
    2017-06-14 03:24 - 2017-06-02 03:28 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
    2017-06-14 03:24 - 2017-06-02 03:28 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
    2017-06-14 03:24 - 2017-06-02 03:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
    2017-06-14 03:24 - 2017-06-02 03:28 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
    2017-06-14 03:24 - 2017-06-02 03:11 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
    2017-06-14 03:24 - 2017-06-02 03:11 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
    2017-06-14 03:24 - 2017-06-02 03:10 - 00733696 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
    2017-06-14 03:24 - 2017-06-02 03:10 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
    2017-06-14 03:24 - 2017-06-02 03:09 - 01549824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
    2017-06-14 03:24 - 2017-06-02 03:09 - 01400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
    2017-06-14 03:24 - 2017-06-02 03:09 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
    2017-06-14 03:24 - 2017-06-02 03:09 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
    2017-06-14 03:24 - 2017-06-02 03:09 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
    2017-06-14 03:24 - 2017-06-02 03:09 - 00104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
    2017-06-14 03:24 - 2017-06-02 03:09 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
    2017-06-14 03:24 - 2017-06-02 03:09 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
    2017-06-14 03:24 - 2017-06-02 02:58 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
    2017-06-14 03:24 - 2017-06-02 02:58 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
    2017-06-14 03:24 - 2017-06-02 02:57 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
    2017-06-14 03:24 - 2017-06-02 02:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
    2017-06-14 03:24 - 2017-05-20 23:28 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
    2017-06-14 03:24 - 2017-05-20 23:28 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
    2017-06-14 03:24 - 2017-05-20 23:24 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
    2017-06-14 03:24 - 2017-05-20 23:24 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
    2017-06-14 03:24 - 2017-05-20 23:06 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
    2017-06-14 03:24 - 2017-05-20 22:55 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
    2017-06-14 03:24 - 2017-05-20 22:48 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
    2017-06-14 03:24 - 2017-05-20 22:48 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
    2017-06-14 03:24 - 2017-05-20 22:48 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
    2017-06-14 03:24 - 2017-05-20 22:47 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
    2017-06-14 03:24 - 2017-05-20 22:46 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
    2017-06-14 03:24 - 2017-05-20 22:42 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
    2017-06-14 03:24 - 2017-05-16 13:19 - 00394448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
    2017-06-14 03:24 - 2017-05-16 12:35 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
    2017-06-14 03:24 - 2017-05-14 15:46 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
    2017-06-14 03:24 - 2017-05-14 15:46 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
    2017-06-14 03:24 - 2017-05-14 15:28 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
    2017-06-14 03:24 - 2017-05-14 15:27 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
    2017-06-14 03:24 - 2017-05-14 15:27 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
    2017-06-14 03:24 - 2017-05-14 15:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
    2017-06-14 03:24 - 2017-05-14 15:26 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
    2017-06-14 03:24 - 2017-05-14 15:24 - 02899456 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
    2017-06-14 03:24 - 2017-05-14 15:19 - 25738752 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
    2017-06-14 03:24 - 2017-05-14 15:17 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
    2017-06-14 03:24 - 2017-05-14 15:16 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
    2017-06-14 03:24 - 2017-05-14 15:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
    2017-06-14 03:24 - 2017-05-14 15:10 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
    2017-06-14 03:24 - 2017-05-14 15:10 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
    2017-06-14 03:24 - 2017-05-14 15:10 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
    2017-06-14 03:24 - 2017-05-14 15:10 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
    2017-06-14 03:24 - 2017-05-14 15:01 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
    2017-06-14 03:24 - 2017-05-14 14:57 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
    2017-06-14 03:24 - 2017-05-14 14:55 - 05975040 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
    2017-06-14 03:24 - 2017-05-14 14:48 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
    2017-06-14 03:24 - 2017-05-14 14:47 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
    2017-06-14 03:24 - 2017-05-14 14:46 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
    2017-06-14 03:24 - 2017-05-14 14:42 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
    2017-06-14 03:24 - 2017-05-14 14:41 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
    2017-06-14 03:24 - 2017-05-14 14:38 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
    2017-06-14 03:24 - 2017-05-14 14:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
    2017-06-14 03:24 - 2017-05-14 14:36 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
    2017-06-14 03:24 - 2017-05-14 14:23 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
    2017-06-14 03:24 - 2017-05-14 14:23 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
    2017-06-14 03:24 - 2017-05-14 14:22 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
    2017-06-14 03:24 - 2017-05-14 14:22 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
    2017-06-14 03:24 - 2017-05-14 14:22 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
    2017-06-14 03:24 - 2017-05-14 14:21 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
    2017-06-14 03:24 - 2017-05-14 14:20 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
    2017-06-14 03:24 - 2017-05-14 14:19 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
    2017-06-14 03:24 - 2017-05-14 14:18 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
    2017-06-14 03:24 - 2017-05-14 14:17 - 02132992 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
    2017-06-14 03:24 - 2017-05-14 14:16 - 02290176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
    2017-06-14 03:24 - 2017-05-14 14:15 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
    2017-06-14 03:24 - 2017-05-14 14:14 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
    2017-06-14 03:24 - 2017-05-14 14:12 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
    2017-06-14 03:24 - 2017-05-14 14:11 - 20274688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
    2017-06-14 03:24 - 2017-05-14 14:11 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
    2017-06-14 03:24 - 2017-05-14 14:10 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
    2017-06-14 03:24 - 2017-05-14 14:10 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
    2017-06-14 03:24 - 2017-05-14 14:02 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
    2017-06-14 03:24 - 2017-05-14 13:57 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
    2017-06-14 03:24 - 2017-05-14 13:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
    2017-06-14 03:24 - 2017-05-14 13:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
    2017-06-14 03:24 - 2017-05-14 13:54 - 15252992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
    2017-06-14 03:24 - 2017-05-14 13:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
    2017-06-14 03:24 - 2017-05-14 13:52 - 03240960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
    2017-06-14 03:24 - 2017-05-14 13:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
    2017-06-14 03:24 - 2017-05-14 13:50 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
    2017-06-14 03:24 - 2017-05-14 13:49 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
    2017-06-14 03:24 - 2017-05-14 13:44 - 04549120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
    2017-06-14 03:24 - 2017-05-14 13:42 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
    2017-06-14 03:24 - 2017-05-14 13:40 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
    2017-06-14 03:24 - 2017-05-14 13:39 - 02057216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
    2017-06-14 03:24 - 2017-05-14 13:38 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
    2017-06-14 03:24 - 2017-05-14 13:37 - 01544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
    2017-06-14 03:24 - 2017-05-14 13:30 - 13664768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
    2017-06-14 03:24 - 2017-05-14 13:27 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
    2017-06-14 03:24 - 2017-05-14 13:15 - 02767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
    2017-06-14 03:24 - 2017-05-14 13:11 - 01314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
    2017-06-14 03:24 - 2017-05-14 13:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
    2017-06-14 03:24 - 2017-05-12 13:27 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
    2017-06-14 03:24 - 2017-05-12 13:26 - 05547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
    2017-06-14 03:24 - 2017-05-12 13:26 - 00706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
    2017-06-14 03:24 - 2017-05-12 13:26 - 00382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
    2017-06-14 03:24 - 2017-05-12 13:24 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:07 - 04001000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
    2017-06-14 03:24 - 2017-05-12 13:07 - 03945704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
    2017-06-14 03:24 - 2017-05-12 13:07 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
    2017-06-14 03:24 - 2017-05-12 13:04 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 13:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 12:55 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
    2017-06-14 03:24 - 2017-05-12 12:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
    2017-06-14 03:24 - 2017-05-12 12:54 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
    2017-06-14 03:24 - 2017-05-12 12:52 - 03222528 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
    2017-06-14 03:24 - 2017-05-12 12:51 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
    2017-06-14 03:24 - 2017-05-12 12:50 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
    2017-06-14 03:24 - 2017-05-12 12:46 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
    2017-06-14 03:24 - 2017-05-12 12:43 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
    2017-06-14 03:24 - 2017-05-12 12:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
    2017-06-14 03:24 - 2017-05-12 12:41 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
    2017-06-14 03:24 - 2017-05-12 12:41 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
    2017-06-14 03:24 - 2017-05-12 12:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
    2017-06-14 03:24 - 2017-05-12 12:40 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 12:40 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 12:40 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 12:40 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
    2017-06-14 03:24 - 2017-05-12 11:25 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
    2017-06-14 03:24 - 2017-05-12 10:58 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
    2017-06-14 03:24 - 2017-05-12 10:58 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
    2017-06-14 03:24 - 2017-05-10 10:33 - 00091368 _____ (Microsoft Corporation) C:\Windows\system32\MigAutoPlay.exe
    2017-06-14 03:24 - 2017-05-10 10:29 - 14183936 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
    2017-06-14 03:24 - 2017-05-10 10:29 - 03165184 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
    2017-06-14 03:24 - 2017-05-10 10:29 - 01867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
    2017-06-14 03:24 - 2017-05-10 10:29 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
    2017-06-14 03:24 - 2017-05-10 10:29 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
    2017-06-14 03:24 - 2017-05-10 10:28 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
    2017-06-14 03:24 - 2017-05-10 10:16 - 00091368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MigAutoPlay.exe
    2017-06-14 03:24 - 2017-05-10 10:14 - 02651136 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
    2017-06-14 03:24 - 2017-05-10 10:13 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
    2017-06-14 03:24 - 2017-05-10 10:13 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
    2017-06-14 03:24 - 2017-05-10 10:13 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
    2017-06-14 03:24 - 2017-05-10 10:13 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
    2017-06-14 03:24 - 2017-05-10 10:13 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
    2017-06-14 03:24 - 2017-05-10 10:13 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
    2017-06-14 03:24 - 2017-05-10 10:12 - 12880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
    2017-06-14 03:24 - 2017-05-10 10:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
    2017-06-14 03:24 - 2017-05-10 10:12 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
    2017-06-14 03:24 - 2017-05-10 10:00 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
    2017-06-14 03:24 - 2017-05-10 10:00 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
    2017-06-14 03:24 - 2017-05-10 10:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
    2017-06-14 03:24 - 2017-05-10 10:00 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
    2017-06-14 03:24 - 2017-05-10 09:52 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
    2017-06-14 03:24 - 2017-05-09 10:30 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
    2017-06-14 03:24 - 2017-05-09 10:29 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
    2017-06-14 03:24 - 2017-05-09 10:11 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
    2017-06-14 03:24 - 2017-05-07 10:33 - 00094440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
    2017-06-14 03:24 - 2017-05-07 10:29 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
    2017-06-14 03:24 - 2017-04-27 17:50 - 03550208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
    2017-06-14 03:24 - 2017-04-12 08:05 - 04296704 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
    2017-06-14 03:24 - 2017-03-30 10:03 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\rundll32.exe
    2017-06-14 03:24 - 2017-03-30 09:58 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
    2017-06-12 06:55 - 2017-06-12 06:55 - 00048944 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
    2017-06-12 06:52 - 2017-06-12 06:52 - 00045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
    2017-06-12 06:52 - 2017-06-12 06:52 - 00045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
    2017-06-12 06:52 - 2017-06-12 06:52 - 00045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
    2017-06-08 15:28 - 2017-06-08 15:28 - 00001209 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
    2017-06-08 15:28 - 2017-06-08 15:28 - 00001197 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
    2017-06-07 14:12 - 2017-05-28 13:09 - 27071391 _____ C:\Users\Battlefield\Downloads\BFHMenu.psd
    2017-06-06 15:00 - 2017-06-06 15:00 - 00000000 ____D C:\Users\Jordan\AppData\Roaming\DivX
    2017-06-06 13:42 - 2017-06-06 13:42 - 00000000 ____D C:\Users\Jordan\AppData\Local\Tempzxpsigne974a45c9caabc93
    2017-06-06 13:42 - 2017-06-06 13:42 - 00000000 ____D C:\Users\Jordan\AppData\Local\Tempzxpsign70ba92ffa88b188b
    2017-06-06 13:42 - 2017-06-06 13:42 - 00000000 ____D C:\Users\Jordan\AppData\Local\Tempzxpsign5a4936c86f71bbd5
    2017-06-06 13:42 - 2017-06-06 13:42 - 00000000 ____D C:\Users\Jordan\AppData\Local\Tempzxpsign4e4231ef06791530
    2017-06-01 12:06 - 2017-06-01 12:07 - 14664470 _____ C:\Users\Battlefield\Downloads\Pic.zip
    2017-05-31 15:47 - 2017-05-31 15:47 - 00000000 ____D C:\Users\Battlefield\AppData\Local\Tempzxpsign18a29e0bc9d89a08
    2017-05-31 15:44 - 2017-05-31 15:44 - 00000000 ____D C:\Users\Battlefield\AppData\Local\Tempzxpsignf4d480f6c159f900
    2017-05-31 15:44 - 2017-05-31 15:44 - 00000000 ____D C:\Users\Battlefield\AppData\Local\Tempzxpsigna146114e990e54a8
    2017-05-31 15:38 - 2017-05-31 15:39 - 00000000 ____D C:\Users\Battlefield\Documents\Battlefield FRONTLINES
    2017-05-31 15:37 - 2017-05-31 15:38 - 00000000 ____D C:\Users\Battlefield\Documents\Battlefield HOUSTON
    2017-05-31 15:35 - 2017-05-31 15:39 - 00000000 ____D C:\Users\Battlefield\Documents\West Little York
    2017-05-31 15:34 - 2017-05-31 15:39 - 00000000 ____D C:\Users\Battlefield\Documents\P-L
    2017-05-31 15:34 - 2017-05-31 15:39 - 00000000 ____D C:\Users\Battlefield\Documents\Balance Sheet
    2017-05-31 15:33 - 2017-05-31 15:33 - 00000000 ____D C:\Users\Battlefield\Documents\Valley Ridge Pkwy
    2017-05-31 15:27 - 2017-05-31 15:33 - 00000000 ____D C:\Users\Battlefield\Documents\Tax Return
    2017-05-31 15:09 - 2017-05-31 15:09 - 00002260 _____ C:\Users\Public\Desktop\QuickBooks Desktop File Doctor.lnk
    2017-05-31 15:09 - 2017-05-31 15:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickBooks Desktop File Doctor
    2017-05-31 13:12 - 2017-05-31 13:12 - 00000000 ____D C:\Users\Jordan\AppData\Local\Tempzxpsign0df6eec6484a989b
    2017-05-31 12:46 - 2017-05-31 12:46 - 00000000 ____D C:\Users\Jordan\AppData\Local\Tempzxpsigne34feb0ccd073179
    2017-05-31 12:46 - 2017-05-31 12:46 - 00000000 ____D C:\Users\Jordan\AppData\Local\Tempzxpsign69ae824cf7844bc2
    2017-05-31 12:46 - 2017-05-31 12:46 - 00000000 ____D C:\Users\Jordan\AppData\Local\Tempzxpsign09d5ce34862afbb1
    2017-05-30 14:55 - 2017-05-30 14:55 - 00013465 _____ C:\Users\Battlefield\Downloads\BFHoustonBirthdayPricing.xlsx

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2017-06-27 10:52 - 2015-07-27 21:48 - 00000000 ___RD C:\Users\Battlefield\OneDrive
    2017-06-27 10:51 - 2016-07-27 13:31 - 00000918 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
    2017-06-27 10:48 - 2016-07-27 13:31 - 00000914 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
    2017-06-27 10:16 - 2009-07-13 23:45 - 00029120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2017-06-27 10:16 - 2009-07-13 23:45 - 00029120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2017-06-27 10:12 - 2009-07-14 00:13 - 00007920 _____ C:\Windows\system32\PerfStringBackup.INI
    2017-06-27 10:08 - 2013-12-03 14:36 - 00000000 ____D C:\Users\QBDataServiceUser24
    2017-06-27 10:07 - 2011-10-21 13:55 - 00000000 ____D C:\ProgramData\NVIDIA
    2017-06-27 10:07 - 2009-07-14 00:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
    2017-06-27 10:04 - 2015-02-21 20:04 - 00000000 ____D C:\ProgramData\boost_interprocess
    2017-06-27 10:04 - 2013-06-25 19:04 - 00000000 ____D C:\Users\Battlefield\AppData\Roaming\Yahoo!
    2017-06-26 17:02 - 2011-10-25 13:36 - 00000000 ____D C:\Program Files (x86)\Java
    2017-06-26 16:56 - 2013-09-30 12:16 - 00000000 ____D C:\Users\Battlefield\AppData\Local\CrashDumps
    2017-06-26 16:49 - 2013-09-22 12:07 - 01621390 _____ C:\Windows\ntbtlog.txt
    2017-06-26 16:33 - 2012-09-29 10:12 - 00000000 ____D C:\ProgramData\epson
    2017-06-26 16:33 - 2012-09-29 10:12 - 00000000 ____D C:\Program Files\EPSON
    2017-06-25 01:25 - 2011-10-20 14:39 - 00000000 ____D C:\Users\Battlefield\AppData\Local\ElevatedDiagnostics
    2017-06-24 18:23 - 2011-10-20 14:58 - 00000000 ____D C:\QuickBookData
    2017-06-24 13:56 - 2016-11-18 23:14 - 00000000 ____D C:\Users\CJ
    2017-06-24 13:48 - 2009-07-13 23:45 - 05381648 _____ C:\Windows\system32\FNTCACHE.DAT
    2017-06-23 10:18 - 2016-01-05 16:21 - 00000000 ___RD C:\Users\Battlefield\Creative Cloud Files
    2017-06-23 10:18 - 2011-10-20 15:38 - 00000000 ____D C:\Users\Battlefield\AppData\Local\Adobe
    2017-06-20 12:49 - 2012-10-26 16:02 - 00000000 ____D C:\ProgramData\Package Cache
    2017-06-20 12:49 - 2011-10-20 14:55 - 00189784 _____ C:\Users\Battlefield\AppData\Local\GDIPFONTCACHEV1.DAT
    2017-06-20 12:48 - 2014-11-14 17:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CenterEdge Software
    2017-06-20 12:48 - 2013-03-16 19:56 - 00000000 ____D C:\Program Files (x86)\CenterEdge Software
    2017-06-18 15:33 - 2012-09-20 10:57 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
    2017-06-18 15:06 - 2011-10-21 13:49 - 00000000 ____D C:\Users\Battlefield
    2017-06-18 02:00 - 2016-11-18 23:14 - 00000000 ____D C:\Users\CJ\AppData\Local\Adobe
    2017-06-17 23:45 - 2015-05-14 11:20 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
    2017-06-17 23:33 - 2016-11-18 23:14 - 00189784 _____ C:\Users\CJ\AppData\Local\GDIPFONTCACHEV1.DAT
    2017-06-17 23:33 - 2016-11-18 23:14 - 00000000 ____D C:\Users\CJ\AppData\Local\Dropbox
    2017-06-17 14:01 - 2016-07-26 13:51 - 00000000 ____D C:\Users\Battlefield\Desktop\BATTLEFIELD PRINT OUTS
    2017-06-16 02:00 - 2016-11-16 14:41 - 00000000 ____D C:\Users\Jordan\AppData\Local\Adobe
    2017-06-15 04:33 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\rescache
    2017-06-15 03:31 - 2013-02-02 15:20 - 00000000 ____D C:\Program Files\Microsoft Silverlight
    2017-06-15 03:31 - 2013-02-02 15:20 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
    2017-06-15 03:29 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz
    2017-06-15 03:29 - 2009-07-13 22:20 - 00000000 ____D C:\Windows\system32\migwiz
    2017-06-15 03:14 - 2015-05-14 03:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
    2017-06-15 03:12 - 2013-08-11 16:09 - 00000000 ____D C:\Windows\system32\MRT
    2017-06-15 03:03 - 2011-10-21 13:08 - 133627792 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
    2017-06-14 19:30 - 2016-11-16 14:41 - 00000000 ____D C:\Users\Jordan\AppData\Local\Dropbox
    2017-06-14 19:30 - 2009-07-14 00:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
    2017-06-14 13:37 - 2016-07-27 13:31 - 00000000 ____D C:\Program Files (x86)\Dropbox
    2017-06-14 13:36 - 2015-07-16 12:45 - 00000000 ____D C:\Users\Battlefield\AppData\Local\Dropbox
    2017-06-13 12:17 - 2016-12-15 17:33 - 00003196 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task v2
    2017-06-13 12:17 - 2015-07-27 21:48 - 00002184 _____ C:\Users\Battlefield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
    2017-06-12 09:16 - 2016-11-16 14:41 - 00000000 ____D C:\Users\Jordan\AppData\Roaming\Adobe
    2017-06-09 15:15 - 2011-10-20 15:38 - 00000000 ____D C:\Users\Battlefield\AppData\Roaming\Adobe
    2017-06-08 12:21 - 2011-10-20 15:38 - 00000000 ____D C:\Program Files (x86)\Adobe
    2017-06-07 14:12 - 2014-10-24 15:35 - 00000000 ____D C:\Users\Battlefield\Downloads\RGB123_LED_Matrix_Case
    2017-06-07 12:46 - 2009-07-14 00:32 - 00000000 ____D C:\Windows\system32\FxsTmp
    2017-06-06 16:04 - 2014-04-15 16:31 - 00000000 ____D C:\Users\Battlefield\Documents\LegalDocs
    2017-06-06 13:42 - 2016-11-16 17:54 - 00000033 _____ C:\Users\Jordan\AppData\Roaming\AdobeWLCMCache.dat
    2017-06-03 16:58 - 2014-08-10 14:50 - 00000033 _____ C:\Users\Battlefield\AppData\Roaming\AdobeWLCMCache.dat
    2017-06-02 21:19 - 2017-05-24 16:40 - 00000028 _____ C:\Users\Battlefield\AppData\Roaming\kulerdata.json
    2017-05-31 15:09 - 2011-10-20 14:48 - 00000000 ____D C:\Program Files (x86)\Intuit
    2017-05-31 15:08 - 2012-02-26 12:27 - 00000000 ____D C:\Users\Battlefield\AppData\Local\Downloaded Installations
    2017-05-31 14:59 - 2016-11-16 14:41 - 00000000 ____D C:\Users\Jordan\AppData\Local\Intuit
    2017-05-31 10:44 - 2016-11-16 14:41 - 00189784 _____ C:\Users\Jordan\AppData\Local\GDIPFONTCACHEV1.DAT
    2017-05-30 15:45 - 2010-11-20 22:27 - 00565416 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
    2017-05-29 20:35 - 2016-08-14 14:12 - 00000000 ____D C:\ProgramData\Sony Corporation
    2017-05-29 20:35 - 2012-04-09 15:57 - 00000000 ____D C:\Program Files (x86)\Sony
    2017-05-28 19:20 - 2011-10-20 14:48 - 00000090 _____ C:\Windows\QBChanUtil_Trigger.ini

    ==================== Files in the root of some directories =======

    2010-09-26 10:04 - 2010-09-26 10:04 - 0069632 _____ (Elibrium, LLC) C:\Program Files (x86)\Common Files\ClacAdv.dll
    2010-09-26 10:04 - 2010-09-26 10:04 - 0126976 _____ (Elibrium, LLC) C:\Program Files (x86)\Common Files\ClacStmp.dll
    2010-09-26 10:04 - 2010-09-26 10:04 - 0028672 _____ (Elibrium, Inc) C:\Program Files (x86)\Common Files\MYSWHelpComp.dll
    2010-09-26 10:04 - 2010-09-26 10:04 - 0094208 _____ (Avanquest Publishing USA Inc.) C:\Program Files (x86)\Common Files\regdll.dll
    2012-09-05 13:20 - 2014-09-21 22:36 - 0000132 _____ () C:\Users\Battlefield\AppData\Roaming\Adobe BMP Format CS6 Prefs
    2011-11-11 14:44 - 2012-02-19 11:52 - 0000132 _____ () C:\Users\Battlefield\AppData\Roaming\Adobe GIF Format CS5 Prefs
    2011-11-11 14:46 - 2012-06-08 12:44 - 0000132 _____ () C:\Users\Battlefield\AppData\Roaming\Adobe PNG Format CS5 Prefs
    2012-10-01 17:41 - 2014-07-18 03:06 - 0000132 _____ () C:\Users\Battlefield\AppData\Roaming\Adobe PNG Format CS6 Prefs
    2014-08-10 14:50 - 2017-06-03 16:58 - 0000033 _____ () C:\Users\Battlefield\AppData\Roaming\AdobeWLCMCache.dat
    2011-10-20 14:17 - 2013-06-11 12:50 - 0003284 _____ () C:\Users\Battlefield\AppData\Roaming\ANIWZCS{CE60960A-05CC-4685-B18F-B63497DE832F}
    2015-01-28 14:53 - 2015-01-28 14:53 - 0026458 _____ () C:\Users\Battlefield\AppData\Roaming\Comma Separated Values.ADR
    2013-12-05 15:17 - 2017-05-31 15:11 - 0003520 _____ () C:\Users\Battlefield\AppData\Roaming\FileDrTool.log
    2017-05-24 16:40 - 2017-06-02 21:19 - 0000028 _____ () C:\Users\Battlefield\AppData\Roaming\kulerdata.json
    2015-02-17 15:40 - 2016-10-31 13:08 - 0002785 _____ () C:\Users\Battlefield\AppData\Roaming\QBFileDrTool.log
    2011-11-30 12:51 - 2012-09-06 17:37 - 0001456 _____ () C:\Users\Battlefield\AppData\Local\Adobe Save for Web 12.0 Prefs
    2012-09-10 09:37 - 2017-02-08 16:10 - 0001456 _____ () C:\Users\Battlefield\AppData\Local\Adobe Save for Web 13.0 Prefs
    2014-08-07 18:01 - 2014-08-07 18:01 - 0000000 _____ () C:\Users\Battlefield\AppData\Local\debuggee.mdmp
    2013-07-27 19:52 - 2015-01-17 21:41 - 0000600 _____ () C:\Users\Battlefield\AppData\Local\PUTTY.RND
    2015-04-23 14:51 - 2015-04-23 14:51 - 0000751 _____ () C:\Users\Battlefield\AppData\Local\recently-used.xbel
    2013-03-24 13:36 - 2016-09-17 15:01 - 0007667 _____ () C:\Users\Battlefield\AppData\Local\Resmon.ResmonCfg
    2011-12-01 14:43 - 2011-12-01 14:43 - 0000057 _____ () C:\ProgramData\Ament.ini
    2013-06-25 19:01 - 2015-01-27 00:28 - 0004417 _____ () C:\ProgramData\hpzinstall.log
    2012-11-30 22:15 - 2015-06-07 00:07 - 0000039 _____ () C:\ProgramData\IpAndPort.fig
    2012-11-30 15:13 - 2015-06-07 00:07 - 0000227 _____ () C:\ProgramData\RmUserCfg.ini

    ==================== Bamital & volsnap ======================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\system32\winlogon.exe => File is digitally signed
    C:\Windows\system32\wininit.exe => File is digitally signed
    C:\Windows\SysWOW64\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\system32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\system32\services.exe => File is digitally signed
    C:\Windows\system32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\system32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\system32\rpcss.dll => File is digitally signed
    C:\Windows\system32\dnsapi.dll => File is digitally signed
    C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
    C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

    LastRegBack: 2017-06-22 00:36

    ==================== End of FRST.txt ===========================

    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-06-2017 01
    Ran by Battlefield (27-06-2017 11:15:43)
    Running from C:\Users\Battlefield\Desktop
    Windows 7 Home Premium Service Pack 1 (X64) (2011-10-21 18:49:17)
    Boot Mode: Normal
    ==========================================================


    ==================== Accounts: =============================

    Administrator (S-1-5-21-3544609310-1622349089-2069013866-500 - Administrator - Disabled)
    Battlefield (S-1-5-21-3544609310-1622349089-2069013866-1000 - Administrator - Enabled) => C:\Users\Battlefield
    CJ (S-1-5-21-3544609310-1622349089-2069013866-1019 - Limited - Enabled) => C:\Users\CJ
    Guest (S-1-5-21-3544609310-1622349089-2069013866-501 - Limited - Disabled)
    HomeGroupUser$ (S-1-5-21-3544609310-1622349089-2069013866-1003 - Limited - Enabled)
    Jordan (S-1-5-21-3544609310-1622349089-2069013866-1018 - Limited - Enabled) => C:\Users\Jordan
    photoshop (S-1-5-21-3544609310-1622349089-2069013866-1006 - Limited - Enabled)
    QBDataServiceUser21 (S-1-5-21-3544609310-1622349089-2069013866-1004 - Limited - Enabled) => C:\Users\QBDataServiceUser21
    QBDataServiceUser24 (S-1-5-21-3544609310-1622349089-2069013866-1017 - Limited - Enabled) => C:\Users\QBDataServiceUser24

    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
    AS: Spybot - Search and Destroy (Disabled - Out of date) {A16C3F68-9280-E053-1818-342707FECF4D}
    AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
    AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    ==================== Installed Programs ======================

    (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    64 Bit HP CIO Components Installer (Version: 6.2.1 - Hewlett-Packard) Hidden
    7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
    8600_Help (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
    8600_Readme (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
    Adobe Acrobat DC (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)
    Adobe After Effects CC 2014 (HKLM-x32\...\{2B22C750-5C3B-4738-B621-BA786AC7A494}) (Version: 13.2.0 - Adobe Systems Incorporated)
    Adobe After Effects CS5.5 Third Party Content (HKLM-x32\...\{606A0AC5-5F90-4379-81AE-11B44707E094}) (Version: 10.5 - Adobe Systems Incorporated)
    Adobe After Effects CS6 (HKLM-x32\...\{4817D846-700B-474E-A31B-80892B3E92E3}) (Version: 11.0.4 - Adobe Systems Incorporated)
    Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.178 - Adobe Systems Incorporated)
    Adobe Audition CC 2014 (HKLM-x32\...\{F3388E10-EFA9-4A80-B28E-2E647F8D00C4}) (Version: 7.2.0 - Adobe Systems Incorporated)
    Adobe Audition CS6 (HKLM-x32\...\{30FD541D-3C9D-41C4-B240-A994EE4E0231}) (Version: 5.0 - Adobe Systems Incorporated)
    Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.1.1.202 - Adobe Systems Incorporated)
    Adobe Creative Suite 5.5 Production Premium (HKLM-x32\...\{7F05F449-4DC4-4E02-A8D1-4A3ED7DD5FA3}) (Version: 5.5 - Adobe Systems Incorporated)
    Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.6 - Adobe Systems Incorporated)
    Adobe Dreamweaver CS5.5 (HKLM-x32\...\{0215A652-E081-4B09-9333-DC85AAB67FFA}) (Version: 11.5 - Adobe Systems Incorporated)
    Adobe Edge Animate (HKLM-x32\...\{6A725C8E-E4E1-474A-A2B1-C17CCC48EC01}) (Version: 1.0 - Adobe Systems Incorporated)
    Adobe Edge Inspect (HKLM-x32\...\{BF73C0A4-5E3D-4C6F-8164-C0CCA57E32C8}) (Version: 1.0.327 - Adobe Systems Incorporated)
    Adobe Fireworks CS5 (HKLM-x32\...\{164965E8-4BB0-4EEB-AFBA-75785A2A2A7F}) (Version: 11.0 - Adobe Systems Incorporated)
    Adobe Fireworks CS6 (HKLM-x32\...\{CA7C485C-7A89-11E1-B2C8-CD54B377BC52}) (Version: 12.0.1 - Adobe Systems Incorporated)
    Adobe Flash Player 11 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 11.8.800.168 - Adobe Systems Incorporated)
    Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.188 - Adobe Systems Incorporated)
    Adobe Flash Professional CC 2014 (HKLM-x32\...\{AA704223-E11C-11E3-8A38-C09A633B72AF}) (Version: 14.1 - Adobe Systems Incorporated)
    Adobe Flash Professional CS6 (HKLM-x32\...\{BD5669B5-49FF-4490-B956-E9D7CB9B0ADC}) (Version: 12.0 - Adobe Systems Incorporated)
    Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
    Adobe Illustrator CC 2017 (HKLM-x32\...\ILST_21_1_0) (Version: 21.1.0 - Adobe Systems Incorporated)
    Adobe Illustrator CS6 (HKLM-x32\...\{4869414E-7AEA-4C8E-BE1C-8D40977FD517}) (Version: 16.0 - Adobe Systems Incorporated)
    Adobe InDesign CC 2017 (HKLM-x32\...\IDSN_12_1_0) (Version: 12.1.0 - Adobe Systems Incorporated)
    Adobe InDesign CS6 (HKLM-x32\...\{CFB770D7-8D43-1014-922B-CC2715FADE3F}) (Version: 8.1.0.422 - Adobe Systems Incorporated)
    Adobe Media Encoder CC 2014 (HKLM-x32\...\{663DEEEF-EF34-4DCB-8687-73A7AA146E02}) (Version: 8.2.0 - Adobe Systems Incorporated)
    Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1 - Adobe Systems Incorporated)
    Adobe Photoshop CC 2017 (HKLM-x32\...\PHSP_18_1_1) (Version: 18.1.1 - Adobe Systems Incorporated)
    Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
    Adobe Photoshop Lightroom 4.1 64-bit (HKLM\...\{F7ADB493-B913-4D61-9A63-DA736C20C3F2}) (Version: 4.1.2 - Adobe)
    Adobe Photoshop Lightroom 5.5 64-bit (HKLM\...\{19BBD0F3-7A31-480D-8A23-19AE28035E9C}) (Version: 5.5.0 - Adobe Systems Incorporated)
    Adobe Premiere Pro CC 2014 (HKLM-x32\...\{07BE616F-9E42-4C90-AF4F-0F32A5B088E7}) (Version: 8.2.0 - Adobe Systems Incorporated)
    Adobe Premiere Pro CS6 (HKLM-x32\...\{7176B973-6011-43C1-AEBC-2D73FE7C6982}) (Version: 6.0 - Adobe Systems Incorporated)
    Adobe Reader X (10.1.11) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.11 - Adobe Systems Incorporated)
    Adobe SpeedGrade CC 2014 (HKLM-x32\...\{8EFF28F0-9DFD-4208-9E04-4D49A4812CF3}) (Version: 8.2.0 - Adobe Systems Incorporated)
    Adobe SpeedGrade CS6 (HKLM-x32\...\{3D46121C-A0E6-4259-B7E0-5127C218A096}) (Version: 6.0.0 - Adobe Systems Incorporated)
    Adobe Story (HKLM-x32\...\com.adobe.AdobeStory.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.0.571 - Adobe Systems Incorporated)
    Adobe Touch App Plugins (HKLM-x32\...\{1EC083EE-5B76-4A2A-B95A-CAF460AA29D6}) (Version: 1.0 - Adobe Systems Incorporated)
    Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser.E7BED6E5DDA59983786DD72EBFA46B1598278E07.1) (Version: 2.0 Build 230 - Adobe Systems Incorporated.)
    Adobe® Content Viewer (HKLM-x32\...\com.adobe.dmp.contentviewer) (Version: 3.4.3 - Adobe Systems, Incorporated)
    AI Suite II (HKLM-x32\...\{34D3688E-A737-44C5-9E2A-FF73618728E1}) (Version: 2.01.01 - ASUSTeK Computer Inc.)
    Akamai NetSession Interface (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\Akamai) (Version: - Akamai Technologies, Inc)
    Android SDK Tools (HKLM-x32\...\Android SDK Tools) (Version: 1.16 - Google Inc.)
    Apple Application Support (32-bit) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
    Apple Application Support (64-bit) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.)
    Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
    Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
    Application Insights Tools for Visual Studio 2013 (x32 Version: 2.4 - Microsoft Corporation) Hidden
    Application Insights Tools for Visual Studio 2015 Preview (x32 Version: 3.0 - Microsoft Corporation) Hidden
    Arduino (HKLM-x32\...\Arduino) (Version: 1.6.3 - Arduino LLC)
    Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.10.0.0 - Asmedia Technology)
    Autodesk DWG TrueView 2015 - English (HKLM\...\DWG TrueView 2015 - English) (Version: 20.0.210.0 - Autodesk)
    Avery Teoma Search App (HKLM-x32\...\{4156522D-5447-006A-76A7-A758B70C2D01}) (Version: 12.45.1.1317 - APN, LLC)
    AzureTools.Notifications (x32 Version: 2.1.10731.1602 - Microsoft Corporation) Hidden
    AzureTools.Notifications (x32 Version: 2.4.20714.1601 - Microsoft Corporation) Hidden
    Battlefield Houston - Client (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\1df8928e2c062db7) (Version: 2.1.2.2 - Jessica Pittman)
    Battlefield Houston - Server (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\97442b722a32a1d7) (Version: 2.2.0.11 - Jessica Pittman)
    Battlefield Scoring (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\a517dafcecd8ee49) (Version: 1.0.0.4 - Jessica Pittman)
    Behaviors SDK (Windows Phone) for Visual Studio 2013 (x32 Version: 12.0.50926.80 - Microsoft Corporation) Hidden
    Behaviors SDK (Windows) for Visual Studio 2013 (x32 Version: 12.0.50926.80 - Microsoft Corporation) Hidden
    bl (x32 Version: 1.0.0 - Your Company Name) Hidden
    Blend for Visual Studio 2013 (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
    Blend for Visual Studio 2013 ENU resources (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
    Blend for Visual Studio Add-in for Adobe FXG Import (x32 Version: 1.0.40218.0 - Microsoft Corporation) Hidden
    Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
    Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
    Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
    BPDSoftware (x32 Version: 130.0.000.000 - Hewlett-Packard) Hidden
    BPDSoftware_Ini (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
    BrightAuthor (HKLM-x32\...\{98418140-3FEC-4866-9A08-D5E55567F3C6}) (Version: 3.7.0.37 - BrightSign)
    BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
    Build Tools - amd64 (Version: 12.0.31101 - Microsoft Corporation) Hidden
    Build Tools - x86 (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
    Build Tools 14.0 (amd64) (Version: 14.0.22310 - Microsoft Corporation) Hidden
    Build Tools 14.0 (x86) (x32 Version: 14.0.22310 - Microsoft Corporation) Hidden
    Build Tools Language Resources - amd64 (Version: 12.0.31101 - Microsoft Corporation) Hidden
    Build Tools Language Resources - x86 (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
    Build Tools Language Resources 14.0 (amd64) (Version: 14.0.22310 - Microsoft Corporation) Hidden
    Build Tools Language Resources 14.0 (x86) (x32 Version: 14.0.22310 - Microsoft Corporation) Hidden
    CenterEdge Advantage 17.1.26.1816 (HKLM-x32\...\{74c1a795-cf8e-40a8-81fb-6fa5d585fdde}) (Version: 17.1.26.1816 - CenterEdge Software)
    CenterEdge Advantage 17.1.26.1816 (x32 Version: 17.1.1816 - CenterEdge Software) Hidden
    CenterEdge Advantage Reporting 10.1.1 (HKLM-x32\...\{14FA5573-9162-4435-AB94-D50EF52628CD}) (Version: 10.1.1 - CenterEdge Software)
    CenterEdge Advantage Sign Editor 14.4.15.331 (HKLM-x32\...\{DEFE5D78-C354-4F64-8A50-C4B2AAB6DD52}) (Version: 14.4.0331 - CenterEdge Software)
    CenterEdge Advantage Signage 14.4.15.331 (HKLM-x32\...\{6F52E11B-C13E-49B8-8974-0AA2F3F5808D}) (Version: 14.4.0331 - CenterEdge Software)
    Check Designer (HKLM-x32\...\{A5E65B95-F016-474D-BC0D-6AF64412BBDF}) (Version: 11.0.0.0 - Avanquest North America, Inc.)
    Chief Architect X2 (HKLM-x32\...\{35AF2D74-7048-876E-1869-68B6D635F446}) (Version: 12.1.2.29 - Chief Architect)
    Cisco Connect (HKLM-x32\...\Cisco Connect) (Version: 1.4.11299.0 - Cisco Consumer Products LLC)
    Cisco WebEx Meetings (HKLM-x32\...\ActiveTouchMeetingClient) (Version: - Cisco WebEx LLC)
    Citrix Online Launcher (HKLM-x32\...\{C1D35D06-E60A-4834-9B52-F1F3E65D03C9}) (Version: 1.0.239 - Citrix)
    Command Center (Development) (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\bde0a3ab2c906615) (Version: 1.1.5.3 - Jessica Pittman)
    Complemento do Microsoft Report Viewer para Visual Studio 2013 (x32 Version: 11.1.3442.2 - Microsoft Corporation) Hidden
    Complemento Microsoft Report Viewer para Visual Studio 2013 (x32 Version: 11.1.3442.2 - Microsoft Corporation) Hidden
    Compon. agg. Microsoft Report Viewer per Visual Studio 2013 (x32 Version: 11.1.3442.2 - Microsoft Corporation) Hidden
    Copy (x32 Version: 130.0.366.000 - Hewlett-Packard) Hidden
    Cura 1.1.1 (HKLM-x32\...\cura-type-a_1.1.1) (Version: - )
    CutePDF Writer 2.8 (HKLM\...\CutePDF Writer Installation) (Version: - )
    D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
    Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
    DevExpress Components 14.2 (HKLM-x32\...\DevExpress Components 14.2) (Version: 14.2.4 - Developer Express Inc.)
    DevExpress Components 15.1 (HKLM-x32\...\DevExpress Components 15.1) (Version: 15.1.3 - Developer Express Inc.)
    DevExpress Documentation (HKLM-x32\...\DevExpress Documentation) (Version: - Developer Express Inc.)
    DevExpress WPF Demos (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\4e41a8afeb5c478d) (Version: 14.2.3.0 - Developer Express Inc.)
    DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
    Digi XCTU (HKLM\...\XCTU_6.1) (Version: 6.1.0.3 - Digi International)
    DisplayLink Core Software (HKLM\...\{DAA61D41-4809-46C6-9AE4-13A61C54FA23}) (Version: 7.2.47873.0 - DisplayLink Corp.)
    DivX Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.9 - DivX, LLC)
    Dog Tag (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\87a4474b070f97dc) (Version: 1.0.0.7 - Microsoft)
    Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4954.46574 - PreEmptive Solutions) Hidden
    Dotfuscator and Analytics Community Edition 5.16.0 (x32 Version: 5.16.0.2178 - PreEmptive Solutions) Hidden
    Dropbox (HKLM-x32\...\Dropbox) (Version: 28.4.14 - Dropbox, Inc.)
    Dropbox Update Helper (x32 Version: 1.3.59.1 - Dropbox, Inc.) Hidden
    DWG TrueView 2015 - English (Version: 20.0.210.0 - Autodesk) Hidden
    EAGLE 6.5.0 (HKLM-x32\...\EAGLE 6.5.0) (Version: 6.5.0 - CadSoft Computer GmbH)
    EAGLE 7.1.0 (HKLM-x32\...\EAGLE 7.1.0) (Version: 7.1.0 - CadSoft Computer GmbH)
    EMET 4.1 Update 1 (HKLM-x32\...\{6A09FEB2-691C-456B-B982-2F6D21B19602}) (Version: 4.1.1 - Microsoft Corporation)
    Entity Framework 6.1.1 Tools for Visual Studio 2013 (HKLM-x32\...\{85253F13-EE42-4850-A3A5-79B90E92D7AC}) (Version: 12.0.30610.0 - Microsoft Corporation)
    Entity Framework 6.1.2 Tools Beta 1 for Visual Studio 14 (HKLM-x32\...\{FF33B0AD-CEAF-4EDF-8D68-AD34E601B039}) (Version: 14.0.31029.0 - Microsoft Corporation)
    Entity Framework Designer for Visual Studio 2012 - enu (HKLM-x32\...\{AFA4B0BF-3289-495A-B949-BA91F39B1A44}) (Version: 11.1.21009.00 - Microsoft Corporation)
    EPSON Advanced Printer Driver 4 (HKLM-x32\...\{11FF6AF6-0141-4EF8-829A-989459A1E5D8}) (Version: 4.53.0001 - SEIKO EPSON CORPORATION)
    EPSON APD4 Point and Print Support (x32 Version: 4.53.0001 - SEIKO EPSON CORPORATION) Hidden
    EPSON Port Communication Service (HKLM\...\{6F915A77-A189-424F-AC46-6201E7E380CF}) (Version: 3.4.2 - SEIKO EPSON CORPORATION)
    EPSON TM-T88V Utility Ver.1.31 (HKLM-x32\...\{F7174313-A545-4557-AB1B-BB79B086875C}) (Version: 1.6.0.2 - SEIKO EPSON CORPORATION)
    ErrorList (x32 Version: 1.0 - Microsoft Corporation) Hidden
    ezLCD30x Firmware Loader (HKLM-x32\...\{E08220E2-D867-44C0-8298-0EDCAB8E698B}) (Version: 1.0 - EarthLCD)
    Flash Builder (HKLM-x32\...\{C583836B-A856-4BB4-8377-0DA9BCECBDEA}) (Version: 4.6.1 - Adobe Systems Incorporated)
    GDR 3128 for SQL Server 2012 (KB2793634) (64-bit) (HKLM\...\KB2793634) (Version: 11.1.3128.0 - Microsoft Corporation)
    GDR 3153 for SQL Server 2012 (KB2977326) (64-bit) (HKLM\...\KB2977326) (Version: 11.1.3153.0 - Microsoft Corporation)
    GDR 3156 for SQL Server 2012 (KB3045318) (64-bit) (HKLM\...\KB3045318) (Version: 11.1.3156.0 - Microsoft Corporation)
    GDR 5520 for SQL Server 2008 (KB2977321) (64-bit) (HKLM\...\KB2977321) (Version: 10.3.5520.0 - Microsoft Corporation)
    GDR 5538 for SQL Server 2008 (KB3045305) (64-bit) (HKLM\...\KB3045305) (Version: 10.3.5538.0 - Microsoft Corporation)
    GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
    Git version 1.9.0-preview20140217 (HKLM-x32\...\Git_is1) (Version: 1.9.0-preview20140217 - The Git Development Community)
    Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.110 - Google Inc.)
    Google Drive (HKLM-x32\...\{A1238426-ECDF-4639-BE2F-8D12A97AE23C}) (Version: 2.34.5075.1619 - Google, Inc.)
    Google Earth (HKLM-x32\...\{F6430171-B86B-4639-839E-374913E7911D}) (Version: 7.1.8.3036 - Google)
    Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
    Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden
    GoPro App (x32 Version: 0.1.443 - GoPro, Inc.) Hidden
    GoPro Studio 2.5.5 (HKLM-x32\...\{5d43231e-c765-405a-a122-81de16acd8b4}) (Version: 2.5.5.443 - GoPro, Inc.)
    GoToMeeting 7.2.4.3215 (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\GoToMeeting) (Version: 7.2.4.3215 - CitrixOnline)
    GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
    Gtk# for .Net 2.12.26 (HKLM-x32\...\{BC25B808-A11C-4C9F-9C0A-6682E47AAB83}) (Version: 2.12.26 - Xamarin, Inc.)
    HI-TECH C Compiler for the PIC10/12/16 MCUs V9.82PL0 (HKLM-x32\...\PICC 9.82) (Version: 9.82 - HI-TECH Software)
    HI-TECH C51-lite V9.60PL0 (HKLM-x32\...\HC51 9.60PL0) (Version: 9.60 - HI-TECH Software)
    HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
    HP Officejet Pro 8600 Basic Device Software (HKLM\...\{791A06E2-340F-43B0-8FAB-62D151339362}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
    HP Officejet Pro 8600 Help (HKLM-x32\...\{46235FF7-2CBE-4A84-BEDA-87348D1F7850}) (Version: 28.0.0 - Hewlett Packard)
    HP Officejet Pro K8600 (HKLM\...\{5FA67C2B-DAAB-4F7B-AE09-CA97FE73EA59}) (Version: 13.0 - HP)
    HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
    HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
    HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
    HP webOS SDK (HKLM\...\{53A97E00-7252-4ED0-A1EB-9F9712FC0AC9}) (Version: 3.0.676 - HP)
    HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
    I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
    iCloud (HKLM\...\{309768A4-A2BB-4930-A5A2-8169678C9B4C}) (Version: 4.0.6.28 - Apple Inc.)
    IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)
    IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version: - )
    IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version: - )
    Intel Edison Device USB driver (HKLM\...\Intel Edison Device USB driver) (Version: 1.0.0 - Intel)
    iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.)
    JavaScript Tooling (Version: 11.0.60315 - Microsoft Corporation) Hidden
    Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
    K8600 (x32 Version: 130.0.000.000 - Hewlett-Packard) Hidden
    KEEBOX 150N Wireless Utility (HKLM-x32\...\{5C6B323C-863C-4B17-B8F7-198B5E0C4B50}) (Version: - Nonbrand)
    KeePass Password Safe 2.24 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.24 - Dominik Reichl)
    Kit SDK de vérification de Visual Studio*2012 - fra (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden
    Kits Configuration Installer (x32 Version: 8.100.25984 - Microsoft) Hidden
    Lightroom 4.1 (HKLM-x32\...\{3c5418ff-7dea-4a37-8c52-45c670677773}) (Version: 4.1 - Adobe Systems Incorporated)
    LocalESPC (x32 Version: 8.59.29989 - Microsoft Corporation) Hidden
    LocalESPC Dev12 (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
    LocalESPCui for en-us Dev12 (x32 Version: 8.100.25984 - Microsoft) Hidden
    Math Kernel Libraries (64-bit) (Version: 1.0.31.0 - National Instruments) Hidden
    Math Kernel Libraries (64-bit) (Version: 13.0.13 - National Instruments) Hidden
    Math Kernel Libraries (x32 Version: 1.0.31.0 - National Instruments) Hidden
    Math Kernel Libraries (x32 Version: 13.0.13 - National Instruments) Hidden
    Medic Control (Development) (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\f47e6bed37df04f6) (Version: 0.3.4.15 - Jessica Pittman)
    Memory Profiler (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
    Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
    Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
    MicroCode Studio (MCSX) (HKLM-x32\...\MicroCode Studio (MCSX)_is1) (Version: 5.0.0.5 - Mecanique UK)
    Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
    Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.3 Preview Multi-Targeting Pack (ENU) (HKLM-x32\...\{6FF89029-E442-4346-BB1E-C73AA6F6D080}) (Version: 4.5.53346 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.3 Preview Multi-Targeting Pack (HKLM-x32\...\{861F6EBB-5856-4DB9-B812-363CFB1D2F56}) (Version: 4.5.53346 - Microsoft Corporation)
    Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
    Microsoft .NET Micro Framework SDK 4.3 (RTM) (HKLM-x32\...\{39855987-4CD2-4CA0-B9EB-C67B342699EA}) (Version: 4.3.0.0 - Microsoft Corporation)
    Microsoft ASP.NET MVC 3 (HKLM-x32\...\{D32EF103-4016-4C15-BCB0-700C0A7A2309}) (Version: 3.0.50813.0 - Microsoft Corporation)
    Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
    Microsoft ASP.NET Web Pages (HKLM-x32\...\{631471BE-DEAB-454B-A9AC-CE3EB42C28B3}) (Version: 1.0.20105.0 - Microsoft Corporation)
    Microsoft ASP.NET Web Pages 2 (HKLM-x32\...\{cb29be6c-39c4-493e-9da7-d585d5353714}) (Version: 2.0.20715.0 - Microsoft Corporation)
    Microsoft Expression Design 4 (HKLM-x32\...\Design_8.0.31217.1) (Version: 8.0.31217.1 - Microsoft Corporation)
    Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)
    Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation)
    Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation)
    Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.22310 - Microsoft Corporation)
    Microsoft Office 365 Small Business Premium - en-us (HKLM\...\O365SmallBusPremRetail - en-us) (Version: 15.0.4737.1003 - Microsoft Corporation)
    Microsoft OneDrive (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\OneDriveSetup.exe) (Version: 17.3.6917.0607 - Microsoft Corporation)
    Microsoft POS for .NET 1.1 (HKLM-x32\...\{C05ED040-923C-4175-8B8D-A8693B93598B}) (Version: 1.1.0603.1 - Microsoft Corporation)
    Microsoft Report Viewer 2012 Runtime (HKLM-x32\...\{9CCE40CE-A9E6-4916-8729-B008558EEF3F}) (Version: 11.0.2100.60 - Microsoft Corporation)
    Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.209.0 - Microsoft Corporation)
    Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
    Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation)
    Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
    Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version: - Microsoft Corporation)
    Microsoft SQL Server 2008 Native Client (HKLM\...\{2738C4AA-420E-4E13-ADEF-B5AB250E3EF1}) (Version: 10.3.5500.0 - Microsoft Corporation)
    Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{83F2B8F4-5CF3-4BE9-9772-9543EAE4AC5F}) (Version: 10.51.2500.0 - Microsoft Corporation)
    Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{F43ADE73-2880-4A95-B995-4FE386ECF667}) (Version: 10.3.5538.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 (64-bit) (HKLM\...\Microsoft SQL Server SQLServer2012) (Version: - Microsoft Corporation)
    Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{58FED865-4F13-408D-A5BF-996019C4B936}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Data-Tier App Framework (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{4F640A82-635E-431A-856A-F43E5EAAC130}) (Version: 11.1.3156.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Native Client (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Policies (HKLM-x32\...\{DC487E40-046E-42A9-9C7C-5D2B1A7EB211}) (Version: 11.0.2100.60 - Microsoft Corporation)
    Microsoft SQL Server 2012 Setup (English) (HKLM\...\{8AC82589-7217-48FE-9051-AE6D3B211B14}) (Version: 11.1.3156.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Transact-SQL Compiler Service (HKLM\...\{BA39D494-DDE8-407A-AE5A-18A43DFF74EA}) (Version: 11.1.3156.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 T-SQL Language Service (HKLM\...\{A67C75DE-BED6-4F1B-97EB-30CD1D40FFED}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Microsoft SQL Server 2014 Express LocalDB (HKLM\...\{AB8DE9BA-19E1-446A-BCFA-6B3DA9751E21}) (Version: 12.0.2000.8 - Microsoft Corporation)
    Microsoft SQL Server 2014 Management Objects (HKLM-x32\...\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation)
    Microsoft SQL Server 2014 Management Objects (x64) (HKLM\...\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}) (Version: 12.0.2000.8 - Microsoft Corporation)
    Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\...\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation)
    Microsoft SQL Server 2014 T-SQL Language Service (HKLM-x32\...\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation)
    Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
    Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
    Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
    Microsoft SQL Server Data Tools – Database Projects – Web installer entry point (HKLM-x32\...\{F3BBC56F-2282-4464-952F-A89772181F30}) (Version: 10.3.20116.0 - Microsoft Corporation)
    Microsoft SQL Server Data Tools - enu (11.1.21208.0) (HKLM-x32\...\{EE43D481-9E18-4426-BDBA-9AD73F2FEC41}) (Version: 11.1.21208.0 - Microsoft Corporation)
    Microsoft SQL Server Data Tools - enu (12.0.41012.0) (HKLM-x32\...\{AC8E0CF4-42A1-4151-B684-97CF6FD726CF}) (Version: 12.0.41012.0 - Microsoft Corporation)
    Microsoft SQL Server Data Tools - enu (14.0.41025.0) (HKLM-x32\...\{455A16B4-CD22-4529-B429-DD454573E76A}) (Version: 14.0.41025.0 - Microsoft Corporation)
    Microsoft SQL Server Data Tools 2012 (HKLM-x32\...\{b21eb07f-a9ca-423a-896d-7cc3a4fc6481}) (Version: 11.1.21208.0 - Microsoft Corporation)
    Microsoft SQL Server Data Tools Build Utilities - enu (11.1.21208.0) (HKLM-x32\...\{98A5B388-5ED7-42C5-9DCF-D9E8CF9E51C8}) (Version: 11.1.21208.0 - Microsoft Corporation)
    Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation)
    Microsoft SQL Server System CLR Types (HKLM-x32\...\{C3F6F200-6D7B-4879-B9EE-700C0CE1FCDA}) (Version: 10.51.2500.0 - Microsoft Corporation)
    Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation)
    Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation)
    Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation)
    Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{DAF4DDA4-3B5A-407D-B4DF-07922C5A0D22}) (Version: 12.0.2360.29 - Microsoft Corporation)
    Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\...\{659D2DBE-CA2C-4C8F-AF2B-2C8DE262B278}) (Version: 12.0.2360.29 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
    Microsoft Visual C++ 2015 Preview Redistributable (x64) - 14.0.22310 (HKLM-x32\...\{eb6c06e7-8ff6-4978-ab4c-561383593306}) (Version: 14.0.22310.1 - Microsoft Corporation)
    Microsoft Visual C++ 2015 Preview Redistributable (x86) - 14.0.22310 (HKLM-x32\...\{2e4043b7-cd84-44db-b81a-8f6e5ffb7398}) (Version: 14.0.22310.1 - Microsoft Corporation)
    Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
    Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
    Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{14DD7530-CCD2-3798-B37D-3839ED6A441C}) (Version: 10.0.30319 - Microsoft Corporation)
    Microsoft Visual Studio 2010 Express Prerequisites x64 - ENU (HKLM\...\{BCA26999-EC22-3007-BB79-638913079C9A}) (Version: 10.0.30319 - Microsoft Corporation)
    Microsoft Visual Studio 2010 Shell (Integrated) - ENU (HKLM-x32\...\{012D26C3-E12A-3BDA-8ECE-DF14E721A507}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual Studio 2010 Shell (Isolated) - ENU (HKLM-x32\...\{D64B6984-242F-32BC-B008-752806E5FC44}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
    Microsoft Visual Studio 2012 Shell (Integrated) (HKLM-x32\...\{55b160d2-8221-45fd-ab30-4388c69c0f3b}) (Version: 11.0.50727.1 - Microsoft Corporation)
    Microsoft Visual Studio 2012 Shell (Integrated) Language Pack - ENU (HKLM-x32\...\{e1d01f79-be4a-4e83-b707-a009c4f6e53f}) (Version: 11.0.50727.1 - Microsoft Corporation)
    Microsoft Visual Studio 2012 Shell (Isolated) (HKLM-x32\...\{d2e0df0f-bf0a-4a89-9530-ebf93842c393}) (Version: 11.0.50727.1 - Microsoft Corporation)
    Microsoft Visual Studio 2012 Shell (Isolated) Language Pack - ENU (HKLM-x32\...\{b8df2deb-8a9f-48c8-9608-1eb3861b5630}) (Version: 11.0.50727.1 - Microsoft Corporation)
    Microsoft Visual Studio 2015 Preview Secondary Installer (HKLM-x32\...\{B6CB8401-B0A8-4795-8BED-F7B49D51ABCF}_SecondaryInstaller) (Version: 14.0.22310 - Microsoft Corporation)
    Microsoft Visual Studio Express 2012 for Web - ENU (HKLM-x32\...\{4bd1cdab-bf82-42c1-af37-e4918141913f}) (Version: 11.0.50727.1 - Microsoft Corporation)
    Microsoft Visual Studio Express 2012 for Windows Desktop - ENU (HKLM-x32\...\{e0efdce9-a486-4676-8aa5-65bb08cbf34c}) (Version: 11.0.50727.42 - Microsoft Corporation)
    Microsoft Visual Studio Professional 2013 (HKLM-x32\...\{02a877fe-5dac-4ac0-b869-4b9da00f651c}) (Version: 12.0.21005.1 - Microsoft Corporation)
    Microsoft Visual Studio Tools for Applications Design-Time 3.0 (HKLM-x32\...\{5A03C202-08B4-3F1D-9A60-A4F53EF1B636}) (Version: 10.0.40220 - Microsoft Corporation)
    Microsoft Visual Studio Tools for Applications x86 Runtime 3.0 (HKLM-x32\...\{191A6F65-6878-398D-A272-EF011B80F371}) (Version: 10.0.40220 - Microsoft Corporation)
    Microsoft Visual Studio Ultimate 2015 Preview (HKLM-x32\...\{e1f58f60-306c-4f5b-9788-5b9292910779}) (Version: 14.0.22310.1 - Microsoft Corporation)
    Microsoft VSS Writer for SQL Server 2012 (HKLM\...\{3E0DD83F-BE4C-4478-86A0-AD0D79D1353E}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Microsoft Web Deploy 3.6 Beta3 (HKLM\...\{07F0FC77-282E-42E5-BAE6-B8C098F8453E}) (Version: 3.1238.1942 - Microsoft Corporation)
    Microsoft Web Deploy dbSqlPackage Provider - enu (HKLM-x32\...\{E4C33F5B-1B2F-466E-957E-B274F08151A0}) (Version: 10.3.20225.0 - Microsoft Corporation)
    Microsoft Web Platform Installer 4.0 (HKLM\...\{75E2C40C-4345-4DD0-B5B3-B8EB92EEECB5}) (Version: 4.0.1679 - Microsoft Corporation)
    Module Microsoft Report Viewer pour Visual Studio*2013 (x32 Version: 11.1.3442.2 - Microsoft Corporation) Hidden
    Mozilla Firefox 17.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 17.0.1 (x86 en-US)) (Version: 17.0.1 - Mozilla)
    Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 17.0.1 - Mozilla)
    MPLAB Tools v8.90 (HKLM-x32\...\InstallShield_{4BFBFE90-75A0-4728-8625-9776B82C99B3}) (Version: 8.90 - Microchip Technology Inc.)
    MPLAB Tools v8.90 (x32 Version: 8.90 - Microchip Technology Inc.) Hidden
    MPM (HKLM-x32\...\{BAB0F8F5-282A-45F1-B31A-EB894827456B}) (Version: 1.00.0000 - Hewlett-Packard)
    MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
    MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
    MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
    Multi-Device Hybrid Apps using C# - Templates - ENU (x32 Version: 14.0.22310 - Microsoft Corporation) Hidden
    National Instruments Software (HKLM-x32\...\NI Uninstaller) (Version: - National Instruments)
    Netduino Drivers (Version: 4.3.0001 - Secret Labs LLC) Hidden
    Netduino SDK Core (x32 Version: 4.3.0000 - Secret Labs LLC) Hidden
    Netduino SDK v4.3.0 (February 2013) (HKLM-x32\...\{21fb40c4-d906-4605-9916-2cd3c48c9e82}) (Version: 4.3.0.1 - Secret Labs LLC)
    NetViewer 2.1.373.0 (HKLM-x32\...\NetViewer) (Version: 2.1.373.0 - )
    Network64 (Version: 130.0.579.000 - Hewlett-Packard) Hidden
    NI .NET Framework 4.0 (x32 Version: 4.01.49152 - National Instruments) Hidden
    NI ActiveX Container (64-bit) (Version: 13.0.4 - National Instruments) Hidden
    NI ActiveX Container (x32 Version: 13.0.4 - National Instruments) Hidden
    NI Authentication 13.5.0 (64-bit) (Version: 13.5.70 - National Instruments) Hidden
    NI Authentication 13.5.0 (x32 Version: 13.5.70 - National Instruments) Hidden
    NI Circuit Design Suite 13.0.1 Core (x32 Version: 13.0.995 - National Instruments) Hidden
    NI Circuit Design Suite 13.0.1 Edu Licenses (x32 Version: 13.0.995 - National Instruments) Hidden
    NI Circuit Design Suite 13.0.1 Education (x32 Version: 13.0.995 - National Instruments) Hidden
    NI Circuit Design Suite Master Database (x32 Version: 13.0.995 - National Instruments) Hidden
    NI Curl 13.5.0 (64-bit) (Version: 13.5.69 - National Instruments) Hidden
    NI Curl 13.5.0 (x32 Version: 13.5.69 - National Instruments) Hidden
    NI Error Reporting 2013 SP1 (x32 Version: 13.1.98 - National Instruments) Hidden
    NI Error Reporting Interface Installer 5.5 (x32 Version: 5.50.49152 - National Instruments) Hidden
    NI Error Reporting Interface Installer 5.5 for Windows 64-bit (Version: 5.50.49152 - National Instruments) Hidden
    NI EulaDepot (x32 Version: 3.21.132 - National Instruments) Hidden
    NI Example Finder 13.0 (x32 Version: 13.0.324 - National Instruments) Hidden
    NI GMP Windows 32-bit Installer 13.5.0 (x32 Version: 13.50.15 - National Instruments) Hidden
    NI GMP Windows 64-bit Installer 13.5.0 (Version: 13.50.15 - National Instruments) Hidden
    NI Help Assistant 2.0 (64bit) (Version: 2.0.3 - National Instruments) Hidden
    NI Help Assistant 2.0 (x32 Version: 2.0.3 - National Instruments) Hidden
    NI LabVIEW 2012 Real-Time NBFifo (x32 Version: 12.0.219.0 - National Instruments) Hidden
    NI LabVIEW 2012 Real-Time NBFifo (x32 Version: 13.0.336 - National Instruments) Hidden
    NI LabVIEW 2012 Run-Time Engine Web Server (x32 Version: 12.5.198.0 - National Instruments) Hidden
    NI LabVIEW 2012 SP1 Run-Time Engine Non-English Support. (x32 Version: 12.1.52.0 - National Instruments) Hidden
    NI LabVIEW 2013 Deployment Framework (x32 Version: 13.0.428 - National Instruments) Hidden
    NI LabVIEW 2013 Run-Time Engine Web Server (x32 Version: 13.5.26 - National Instruments) Hidden
    NI LabVIEW 2013 SP1 Run-Time Engine Non-English Support. (x32 Version: 13.1.99 - National Instruments) Hidden
    NI LabVIEW Run-Time Engine 2012 SP1 f7 (x32 Version: 12.1.65.0 - National Instruments) Hidden
    NI LabVIEW Run-Time Engine 2013 SP1 (x32 Version: 13.1.101 - National Instruments) Hidden
    NI LabVIEW Run-Time Engine Interop 2012 SP1 (x32 Version: 12.1.65.0 - National Instruments) Hidden
    NI LabVIEW Run-Time Engine Interop 2013 (x32 Version: 13.1.101 - National Instruments) Hidden
    NI LabVIEW-Multisim Co-simulation Plug-in 13.0 for LabVIEW 2012 (x32 Version: 13.0.995 - National Instruments) Hidden
    NI LabVIEW-Multisim Co-simulation Plug-in 13.0 for LabVIEW 2013 (x32 Version: 13.0.995 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 .NET Library (64-bit) (Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 .NET Library (x32 Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 Analysis Library (64-bit) (Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 Analysis Library (x32 Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 Low-Level Driver (Original) (x32 Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 Low-Level Driver (Updated) (x32 Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 Network Streams Library (64-bit) (Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 Network Streams Library (x32 Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 Network Variable Library (64-bit) (Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 Network Variable Library (x32 Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 TDMS Library (64-bit) (Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI 2013 SP1 TDMS Library (x32 Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI Run-Time Engine 2013 SP1 (Updated) (x32 Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI Shared Run-Time Engine 2013 SP1 (64-bit) (Version: 13.0.1201 - National Instruments) Hidden
    NI LabWindows/CVI Shared Run-Time Engine 2013 SP1 (x32 Version: 13.0.1201 - National Instruments) Hidden
    NI Launcher (x32 Version: 3.21.136 - National Instruments) Hidden
    NI License Manager (x32 Version: 3.7.54 - National Instruments) Hidden
    NI Logos 5.5 (64-bit) (Version: 5.5.293 - National Instruments) Hidden
    NI Logos 5.5 (x32 Version: 5.5.293 - National Instruments) Hidden
    NI Logos XT Support (x32 Version: 5.5.294 - National Instruments) Hidden
    NI Logos64 XT Support (Version: 5.5.294 - National Instruments) Hidden
    NI Math Kernel Libraries (x32 Version: 1.0.861.0 - National Instruments) Hidden
    NI MAX Remote Configuration 64-bit Installer 5.6 (Version: 5.60.49152 - National Instruments) Hidden
    NI MAX Remote Configuration Installer 5.6 (x32 Version: 5.60.49152 - National Instruments) Hidden
    NI MDF Support (x32 Version: 3.21.132 - National Instruments) Hidden
    NI mDNS Responder 2.2 for Windows 64-bit (Version: 2.20.49152 - National Instruments) Hidden
    NI mDNS Responder 2.2.0 (x32 Version: 2.20.49152 - National Instruments) Hidden
    NI Measurement Studio ComponentWorks 3D Graph (x32 Version: 8.6.10603 - National Instruments) Hidden
    NI MetaSuite Installer (x32 Version: 3.20.363 - National Instruments) Hidden
    NI Multisim API Toolkit for LabVIEW 2012 (x32 Version: 13.0.995 - National Instruments) Hidden
    NI Multisim API Toolkit for LabVIEW 2013 (x32 Version: 13.0.995 - National Instruments) Hidden
    NI Multisim LabVIEW Interoperability Support 13.0.1 (x32 Version: 13.0.995 - National Instruments) Hidden
    NI Security Update (KB 67L8LCQW) (64-bit) (Version: 1.0.29.0 - National Instruments) Hidden
    NI Security Update (KB 67L8LCQW) (x32 Version: 1.0.29.0 - National Instruments) Hidden
    NI Service Locator 13.5 (x32 Version: 13.5.70 - National Instruments) Hidden
    NI SSL LabVIEW RTE 2012 SP1 Support (x32 Version: 12.5.8.0 - National Instruments) Hidden
    NI SSL LabVIEW RTE 2013 SP1 Support (x32 Version: 13.5.26 - National Instruments) Hidden
    NI SSL Support (64-bit) (Version: 13.5.69 - National Instruments) Hidden
    NI SSL Support (x32 Version: 13.5.69 - National Instruments) Hidden
    NI System API Windows 32-bit 5.6.0 (x32 Version: 5.60.84 - National Instruments) Hidden
    NI System API Windows 64-bit 5.6.0 (Version: 5.60.84 - National Instruments) Hidden
    NI System State Publisher (64-bit) (Version: 13.1.97 - National Instruments) Hidden
    NI System State Publisher (x32 Version: 13.1.97 - National Instruments) Hidden
    NI System Web Server 13.5 (x32 Version: 13.5.69 - National Instruments) Hidden
    NI System Web Server Base 13.5.0 (64-bit) (Version: 13.5.69 - National Instruments) Hidden
    NI System Web Server Base 13.5.0 (x32 Version: 13.5.69 - National Instruments) Hidden
    NI TDM Streaming 2.5 (64-bit) (Version: 2.5.46 - National Instruments) Hidden
    NI TDM Streaming 2.5 (x32 Version: 2.5.46 - National Instruments) Hidden
    NI Trace Engine (64-bit) (Version: 13.5.69 - National Instruments) Hidden
    NI Trace Engine (x32 Version: 13.5.69 - National Instruments) Hidden
    NI Uninstaller (x32 Version: 3.21.132 - National Instruments) Hidden
    NI Update Service 2.3 (64-bit) (Version: 2.30.53 - National Instruments) Hidden
    NI Update Service 2.3 (x32 Version: 2.30.65 - National Instruments) Hidden
    NI USI 2.1.0 (x32 Version: 2.1.05374 - National Instruments) Hidden
    NI USI 2.1.0 64-Bit (Version: 2.1.05374 - National Instruments) Hidden
    NI VC2005MSMs x64 (Version: 8.05.0 - National Instruments) Hidden
    NI VC2005MSMs x86 (x32 Version: 8.05.0 - National Instruments) Hidden
    NI VC2008MSMs x64 (Version: 9.0.401 - National Instruments) Hidden
    NI VC2008MSMs x86 (x32 Version: 9.0.401 - National Instruments) Hidden
    NI VC2010SP1MSMs x64 (Version: 10.0.100 - National Instruments) Hidden
    NI VC2010SP1MSMs x86 (x32 Version: 10.0.100 - National Instruments) Hidden
    NI Visual C++ 2008 Redistributable Package (x32 Version: 9.00.49152 - National Instruments) Hidden
    NI Visual C++ 2010 Redistributable Package (x32 Version: 10.02.49152 - National Instruments) Hidden
    NI Web Application Server 13.5 (64-bit) (Version: 13.5.70 - National Instruments) Hidden
    NI Web Application Server 13.5 (x32 Version: 13.5.70 - National Instruments) Hidden
    NI-Mesa (Version: 13.0.3 - National Instruments) Hidden
    NI-Mesa (x32 Version: 13.0.3 - National Instruments) Hidden
    NI-RPC 4.4.0f0 (x32 Version: 4.40.49152 - National Instruments) Hidden
    NI-RPC 4.4.0f0 for 64 Bit Windows (Version: 4.40.49152 - National Instruments) Hidden
    Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.2.3 - )
    NVIDIA 3D Vision Controller Driver 331.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 331.82 - NVIDIA Corporation)
    NVIDIA 3D Vision Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)
    NVIDIA GeForce Experience 1.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8 - NVIDIA Corporation)
    NVIDIA Graphics Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)
    NVIDIA HD Audio Driver 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
    NVIDIA PhysX System Software 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
    NVIDIA Virtual Audio 1.2.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.12 - NVIDIA Corporation)
    Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
    Office 15 Click-to-Run Licensing Component (Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
    Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
    Open XML SDK 2.5 for Microsoft Office (x32 Version: 2.5.5631 - Microsoft Corporation) Hidden
    OpenSCAD (remove only) (HKLM-x32\...\OpenSCAD) (Version: - )
    Pad2Pad 1.9.89 (HKLM-x32\...\Pad2Pad_is1) (Version: - Pad2Pad.com)
    PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
    ph (x32 Version: 1.0.0 - Your Company Name) Hidden
    PICBASIC PRO(tm) Compiler 3.0.7.0 (HKLM-x32\...\PBP3_is1) (Version: 3.0.7.0 - microEngineering Labs, Inc.)
    PICkit 2 v2.60 (HKLM-x32\...\{9602161A-1B1D-4EDB-9AFD-AF71B184920D}) (Version: 2.60.00 - Microchip)
    PowreShellIntegration.Notifications (x32 Version: 2.5.21003.1603 - Microsoft Corporation) Hidden
    PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.3197.1 - PreEmptive Solutions) Hidden
    Prerequisites for SSDT (HKLM-x32\...\{21373064-AD95-48DB-A32E-0D9E08EF7355}) (Version: 12.0.2000.8 - Microsoft Corporation)
    Prerequisites for SSDT (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation)
    ProductContext (x32 Version: 130.0.000.000 - Hewlett-Packard) Hidden
    PxMergeModule (x32 Version: 1.00.0000 - Your Company Name) Hidden
    Python 3.3.2 (64-bit) (HKLM\...\{9FA9A2A6-19E4-381A-8AF3-F8CF12F0DCF0}) (Version: 3.3.2150 - Python Software Foundation)
    Python Tools for Visual Studio 2012 (HKLM-x32\...\{1B1B4164-E8DC-448B-926A-857E8A3E125B}) (Version: 2.0.10620.00 - Microsoft Corporation)
    Python Tools Redirection Template (x32 Version: 1.1 - Microsoft Corporation) Hidden
    Python Tools Redirection Template (x32 Version: 1.3 - Microsoft Corporation) Hidden
    Qt Creator (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\Qt Creator) (Version: 3.3.0 - Qt Project)
    Qt Enterprise (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\Qt Enterprise) (Version: 1.0.1 - Digia Plc)
    QuickBooks (x32 Version: 24.0.4016.2403 - Intuit Inc.) Hidden
    QuickBooks Desktop File Doctor (HKLM-x32\...\{5716778B-DC86-475F-9977-1E7153F7B588}) (Version: 3.7.0 - Inuit)
    QuickBooks File Doctor (HKLM-x32\...\{45780E89-7B52-4E92-A9DC-1172EF556708}) (Version: 3.6 - Intuit)
    QuickBooks Pro 2014 (HKLM-x32\...\{4A21D17E-2FE8-42CD-88B7-ACF8E8860834}) (Version: 24.0.4016.2403 - Intuit Inc.)
    QuickBooks Runtime Redistributable (HKLM\...\{F2A4F809-2DE6-4D27-888B-4D2BB8DAF20E}) (Version: 1.00.0000 - Intuit Inc.)
    QuickBooks SDK 5.0 (HKLM-x32\...\{9BE10B36-614C-4519-A7CB-0FCF2720863F}) (Version: 5.0.00203.0 - Intuit)
    QuickTime (HKLM-x32\...\{0E64B098-8018-4256-BA23-C316A43AD9B0}) (Version: 7.72.80.56 - Apple Inc.)
    Radlink Lite Launcher (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\11cff10e06d5938f) (Version: 1.0.0.0 - Radlink)
    RingCentral Meetings (HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\RingCentralMeetings) (Version: 3.5 - Zoom Video Communications, Inc. and RingCentral Inc.)
    RingCentral Softphone (HKLM-x32\...\{52F10407-8CF3-4EEB-8D4A-9AA02AE861FC}) (Version: 6.04.001.50 - RingCentral, Inc)
    RingCentral Voicemail Player (HKLM-x32\...\{FB705754-66FB-4419-9EA9-EB020DEA8D50}) (Version: 1.4.31 - RingCentral Inc.)
    Roslyn Language Services - x86 (x32 Version: 14.0.22310 - Microsoft Corporation) Hidden
    SDK de comprobación de Visual Studio 2012 - esn (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden
    Secure Download Manager (HKLM-x32\...\{E040B65B-8683-4228-8C33-D44A141E40EA}) (Version: 3.1.60 - Kivuto Solutions Inc.)
    Service Pack 1 for SQL Server 2012 (KB2674319) (64-bit) (HKLM\...\KB2674319) (Version: 11.1.3000.0 - Microsoft Corporation)
    Service Pack 3 for SQL Server 2008 (KB2546951) (64-bit) (HKLM\...\KB2546951) (Version: 10.3.5500.0 - Microsoft Corporation)
    SharePoint Client Components (Version: 15.0.4641.1002 - Microsoft Corporation) Hidden
    SharePoint Client Components (Version: 16.0.3104.1200 - Microsoft Corporation) Hidden
    SHIELD Streaming (Version: 1.6.75 - NVIDIA Corporation) Hidden
    SignagePlayer (HKLM-x32\...\SignagePlayer.86EE3EEE54D7DB049D16E358CDC443F088917621.1) (Version: 3.0.1110 - Signage)
    SignagePlayer (x32 Version: 3.0.1110 - Signage) Hidden
    SignageStudio (HKLM-x32\...\SignageStudio.86EE3EEE54D7DB049D16E358CDC443F088917621.1) (Version: 4.0.79 - Signage)
    SignageStudio (x32 Version: 4.0.79 - Signage) Hidden
    SketchUp 2013 (HKLM-x32\...\{B75BC01B-4586-43F8-9349-D250DB98F26F}) (Version: 13.0.4812 - Trimble Navigation Limited)
    SketchUp 2014 (HKLM-x32\...\{A608A8D3-E77C-4BEE-8F2A-F8124F5F0FE2}) (Version: 14.0.4900 - Trimble Navigation Limited)
    SketchUp 2015 (HKLM\...\{350488A4-1540-4103-8F01-B27503891EB0}) (Version: 15.3.331 - Trimble Navigation Limited)
    SketchUp 8 (HKLM-x32\...\{8EB62C87-AAA6-4850-A5BC-64155884B973}) (Version: 3.0.16846 - Trimble Navigation Limited)
    Skype™ 6.7 (HKLM-x32\...\{1845470B-EB14-4ABC-835B-E36C693DC07D}) (Version: 6.7.102 - Skype Technologies S.A.)
    SmartRF Packet Sniffer (HKLM-x32\...\Texas Instruments Packet Sniffer) (Version: 2.18.1 - Texas Instruments)
    Smartwaiver Kiosk (HKLM-x32\...\{3618D6B9-2C9A-463B-A2BE-5BFFCDF151AE}) (Version: 1.0.43029 - Smartwaiver)
    SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
    SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
    Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
    SQL Server 2012 BI Development Studio (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
    SQL Server 2012 Client Tools (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
    SQL Server 2012 Common Files (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
    SQL Server 2012 Database Engine Services (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
    SQL Server 2012 Database Engine Shared (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
    SQL Server 2012 Documentation Components (Version: 11.0.2100.60 - Microsoft Corporation) Hidden
    SQL Server 2012 Full text search (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
    SQL Server 2012 Management Studio (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
    SQL Server 2012 Reporting Services (Version: 11.0.2100.60 - Microsoft Corporation) Hidden
    SQL Server 2012 Reporting Services (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
    SQL Server 2012 SQL Data Quality Common (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
    SQL Server Browser for SQL Server 2012 (HKLM-x32\...\{4B9E6EB0-0EED-4E74-9479-F982C3254F71}) (Version: 11.1.3000.0 - Microsoft Corporation)
    Sql Server Customer Experience Improvement Program (Version: 10.3.5500.0 - Microsoft Corporation) Hidden
    Sql Server Customer Experience Improvement Program (Version: 11.1.3000.0 - Microsoft Corporation) Hidden
    Stamps.com (HKLM-x32\...\Stamps.com) (Version: - Stamps.com, Inc.)
    Stamps.com (x32 Version: 12.1.1.2876 - Stamps.com, Inc.) Hidden
    Stamps.com ProLabel Printer Driver (HKLM-x32\...\Stamps.com ProLabel Printer Driver) (Version: - Stamps.com, Inc.)
    Stamps.com ProLabel Printer Driver (x32 Version: 1.0.0.2 - Stamps.com) Hidden
    Stamps.com support for Intuit QuickBooks 2004-2011 (HKLM-x32\...\Stamps.com support for Intuit QuickBooks 2004-2011) (Version: - Stamps.com, Inc.)
    Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
    Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
    STMicroelectronics DfuSe v3.0.2 (HKLM-x32\...\InstallShield_{7D99CBC9-46E9-4070-BF20-25136AE7052E}) (Version: 3.0.2 - STMicroelectronics)
    STMicroelectronics DfuSe v3.0.2 (x32 Version: 3.0.2 - STMicroelectronics) Hidden
    Team Explorer for Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
    Team Explorer for Microsoft Visual Studio 2015 Preview (x32 Version: 14.0.22310 - Microsoft Corporation) Hidden
    TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.44109 - TeamViewer)
    Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
    Toolkit Documentation (x32 Version: 8.100.26866 - Microsoft) Hidden
    TortoiseGit 1.8.9.0 (64 bit) (HKLM\...\{D270F72A-913D-421E-AD56-5477132B1EC6}) (Version: 1.8.9.0 - TortoiseGit)
    Total Annihilation v3.9.01 Beta Patch (HKLM-x32\...\{28CEB942-CB26-4936-91A8-D9F3FC44EF80}) (Version: 3.9.01 - TAUniverse)
    TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
    TypeScript Power Tool (x32 Version: 1.0.5.0 - Microsoft Corporation) Hidden
    TypeScript Power Tool (x32 Version: 1.3.0.0 - Microsoft Corporation) Hidden
    TypeScript Tools for Microsoft Visual Studio 14 (x32 Version: 1.3.0.0 - Microsoft Corporation) Hidden
    TypeScript Tools for Microsoft Visual Studio 2013 (x32 Version: 1.0.5.0 - Microsoft Corporation) Hidden
    UltraEdit (HKLM-x32\...\InstallShield_{635A6AF2-63AF-4C1C-AF57-BDC8AF6D397D}) (Version: 21.30.1010 - IDM Computer Solutions, Inc.)
    UltraEdit (x32 Version: 21.30.1010 - IDM Computer Solutions, Inc.) Hidden
    Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
    VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
    VCSetup (HKLM-x32\...\{4023F084-ADD3-4080-89FB-253373871BD6}) (Version: 1.0.0.0 - VCSetup)
    Vegas Pro 11.0 (64-bit) (HKLM\...\{CF411A4F-5ED9-11E1-B971-F04DA23A5C58}) (Version: 11.0.595 - Sony)
    Vegas Pro 12.0 (64-bit) (HKLM\...\{A7500970-FE98-11E1-B560-F04DA23A5C58}) (Version: 12.0.367 - Sony)
    VFW_Codec32 (x32 Version: 0.1.160.0 - GoPro, Inc.) Hidden
    VFW_Codec64 (Version: 0.1.160.0 - GoPro, Inc.) Hidden
    Visual Studio 2010 Prerequisites - English (HKLM\...\{662014D2-0450-37ED-ABAE-157C88127BEB}) (Version: 10.0.40219 - Microsoft Corporation)
    Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{112C23F2-C036-4D40-BED4-0CB47BF5555C}) (Version: 4.0.8080.0 - Microsoft Corporation)
    Visual Studio 2012 Update 3 (KB2707250) (HKLM-x32\...\{29828f33-4679-462a-8c98-1c3507678922}) (Version: 11.0.60610 - Microsoft Corporation)
    Visual Studio 2013 Update 4 (KB2829760) (HKLM-x32\...\{53d408db-eb91-43fb-9d8f-167681c19763}) (Version: 12.0.31101 - Microsoft Corporation)
    VisualGDB (HKLM-x32\...\{5DAD3404-D23E-4AED-B4CE-3268B085F010}) (Version: 4.3.10.235 - Sysprogs)
    VS Update core components (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
    VsHub (x32 Version: 1.0.0.0 - Microsoft Corporation) Hidden
    WCF Data Services 5.6.0 Runtime (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden
    WCF Data Services 5.6.2 Runtime (x32 Version: 5.6.61937.2 - Microsoft Corporation) Hidden
    WCF Data Services Tools for Microsoft Visual Studio 2013 (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden
    WCF Data Services Tools for Microsoft Visual Studio 2014 (x32 Version: 5.6.61937.2 - Microsoft Corporation) Hidden
    WCF RIA Services V1.0 SP2 (HKLM-x32\...\{5D8DD6A8-C4D7-4554-93F9-F1CC28C72600}) (Version: 4.1.62812.0 - Microsoft Corporation)
    WD Quick View (HKLM-x32\...\{324C58C7-A292-4523-A943-91DE1EB6A1FE}) (Version: 2.4.1.9 - Western Digital Technologies, Inc.)
    WD SmartWare (HKLM\...\{F6ABA2F3-9759-48CD-B25B-A07A811E92E4}) (Version: 2.4.1.9 - Western Digital Technologies, Inc.)
    WD SmartWare Installer (HKLM-x32\...\{72fda14f-5a07-49d5-b7f7-202377e9b522}) (Version: 2.4.1.9 - Western Digital Technologies, Inc.)
    WebM Media Foundation Components (HKLM-x32\...\webmmf) (Version: 1.0.1.2 - WebM Project)
    WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
    Windows Assessment and Deployment Kit for Windows 8.1 (HKLM-x32\...\{e9e06304-a604-434b-b35f-d9beb94dc06d}) (Version: 8.100.26866 - Microsoft Corporation)
    Windows Azure Authoring Tools - October 2012 Release (HKLM\...\{8748EE66-A92C-472A-805A-A86C41D22848}) (Version: 1.8.31004.1351 - Microsoft Corporation)
    Windows Azure Emulator - October 2012 Release (HKLM\...\Windows Azure Emulator - October 2012 Release) (Version: 1.8.31004.1351 - Microsoft Corporation)
    Windows Azure Libraries for .NET – October 2012 (HKLM\...\{72934D7D-3379-497D-8FA4-1E28D21AFA20}) (Version: 1.8 - Microsoft Corporation)
    Windows Azure Tools for Microsoft Visual Studio 2012 - October 2012 (HKLM-x32\...\{899c21e3-a373-47ea-bf3f-59eeae908cdb}) (Version: 1.8.51019.1603 - Microsoft Corporation)
    Windows Driver Package - BeagleBone CDM Driver Package - Bus/D2XX Driver (03/18/2011 2.08.14) (HKLM\...\E115CC79390C233F94F72330FE3603A63E5204E2) (Version: 03/18/2011 2.08.14 - BeagleBone)
    Windows Driver Package - BeagleBone CDM Driver Package - VCP Driver (03/18/2011 2.08.14) (HKLM\...\A627DA08A5F362713EB4C440F904A2D1B8CD7E74) (Version: 03/18/2011 2.08.14 - BeagleBone)
    Windows Driver Package - Linux Developer Community (usbser) Ports (11/15/2007 5.1.2600.0) (HKLM\...\78AF41F3450C5037A588E124A3CFD63F195CB249) (Version: 11/15/2007 5.1.2600.0 - Linux Developer Community)
    Windows Driver Package - Linux Developer Community Net (06/21/2006 6.0.6000.16384) (HKLM\...\F8DB389D3D629D89F82795C4EB490AE50D7FB01E) (Version: 06/21/2006 6.0.6000.16384 - Linux Developer Community)
    Windows Driver Package - Stamps.com Printer (01/02/2013 7.0.1.9) (HKLM\...\D6C304AF42E45E95BBBD32FE0040738D3D2C15CF) (Version: 01/02/2013 7.0.1.9 - Stamps.com)
    Windows Driver Package - STMicroelectronics (STTub30) USB (11/09/2009 3.0.1.0) (HKLM\...\53CE3E570993AB2791A87B0143B353B816401784) (Version: 11/09/2009 3.0.1.0 - STMicroelectronics)
    Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
    Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
    Windows Phone app for desktop (HKLM-x32\...\{5F71448B-88EB-4357-9A98-8658D4C49C48}) (Version: 1.1.2726.0 - Microsoft Corporation)
    WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
    Workflow Manager Client 1.0 (Version: 2.0.40131.0 - Microsoft Corporation) Hidden
    Workflow Manager Tools 1.0 for Visual Studio (Version: 2.0.41015.0 - Microsoft Corporation) Hidden
    Xamarin Android Player (HKLM-x32\...\{5f63cdbe-6d50-4fdf-8efb-add7866fe390}) (Version: 0.0.24 - Xamarin)
    Xamarin Android Player (Version: 0.0.24 - Xamarin) Hidden
    X-CTU (HKLM-x32\...\{BC535415-7F95-45BE-8860-7B69E43BD13E}) (Version: 5.2.86 - Digi)
    Xming 6.9.0.31 (HKLM-x32\...\Xming_is1) (Version: 6.9.0.31 - Colin Harrison)
    Xming-fonts 7.5.0.70 (HKLM-x32\...\Xming-fonts_is1) (Version: 7.5.0.70 - Colin Harrison)
    Zebra CardStudio (HKLM-x32\...\{D4AF1D5F-9CB1-4735-BD98-E1DBE853F82D}) (Version: 1.25.4100.00 - Zebra Technologies Corporation)
    Zebra ZXP S3 and S1 Card Printers (HKLM-x32\...\{1132009E-7E6B-43D3-8F24-5554F5E9483B}) (Version: 05.30.00.00 - Zebra Technologies Corporation)
    Zebra ZXP S3 and S1 Card Printers (x32 Version: 05.30.00.00 - Zebra) Hidden
    Надстройка Microsoft Report Viewer для Visual Studio 2013 (x32 Version: 11.1.3442.2 - Microsoft Corporation) Hidden
    Пакет Visual Studio 2012 Verification SDK - rus (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden
    用于 Visual Studio 2013 的 Microsoft 报告查看器加载项 (x32 Version: 11.1.3442.2 - Microsoft Corporation) Hidden

    ==================== Custom CLSID (Whitelisted): ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    CustomCLSID: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\DWG TrueView 2015 - English\dwgviewr.exe (Autodesk, Inc.)
    CustomCLSID: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Battlefield\AppData\Local\Microsoft\OneDrive\17.3.6917.0607\amd64\FileCoAuthLib64.dll (Microsoft Corporation)
    CustomCLSID: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\Autodesk\DWG TrueView 2015 - English\en-US\dwgviewrficn.dll (Autodesk, Inc.)
    CustomCLSID: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Program Files (x86)\Citrix\GoToMeeting\1960\G2MOutlookAddin64.dll (Citrix Online, a division of Citrix Systems, Inc.)
    CustomCLSID: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000_Classes\CLSID\{b5eedee0-c06e-11cf-8c56-444553540000}\InprocServer32 -> C:\Program Files (x86)\IDM Computer Solutions\UltraEdit\ue64ctmn.dll ()
    CustomCLSID: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)

    ==================== Scheduled Tasks (Whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    Task: {034F7867-71C0-4823-BE22-DA0202E4CC7F} - System32\Tasks\GoogleUpdateTaskMachineUA1d0e1ae7d3f57d0 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
    Task: {0D00C31B-F8B3-41AB-9F0A-EF7BED98B23B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-14] (Adobe Systems Incorporated)
    Task: {1DAC4F16-6157-41B3-9DD4-2F9E085E9AAA} - System32\Tasks\AdobeAAMUpdater-1.0-Battlefield-PC-Jordan => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated)
    Task: {2F57269B-1E09-4E2D-AB1E-B0FDAC7D279C} - \Microsoft\Windows\WindowsBackup\ConfigNotification -> No File <==== ATTENTION
    Task: {2F8521DB-C1B8-4498-AA4F-358688DF68CF} - System32\Tasks\hpUrlLauncher.exe_{F00FFB5D-FD89-48A2-A7E4-B9113D6053A0} => C:\Program Files\HP\HP Officejet Pro 8600\Bin\utils\hpUrlLauncher.exe [2012-10-17] (Hewlett-Packard Co.)
    Task: {3940C9F8-E811-406C-A255-D6B9079A7A58} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
    Task: {452FC3DC-21CF-4862-9CD3-16C94BC7D5FA} - System32\Tasks\updater.exe => C:\GOG Games\Total Annihilation - Commander Pack\updater.exe
    Task: {4645320B-A77E-4ED1-8669-EF1B0A5B1BCF} - \Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline -> No File <==== ATTENTION
    Task: {4EF28CCE-4250-4AAE-A1F7-3B5D52518FFA} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
    Task: {5E682862-FA1B-462B-999B-D6E206CAB558} - System32\Tasks\GoogleUpdateTaskMachineCore1d0e1ae7d024ecb => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
    Task: {626B862E-DE49-407F-BB09-27902105A199} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2016-03-21] (Safer-Networking Ltd.)
    Task: {697CD93D-B2DE-445F-88BE-956C66EC9023} - System32\Tasks\AdobeAAMUpdater-1.0-Battlefield-PC-CJ => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated)
    Task: {74154FEB-930E-41F2-82FA-551306202112} - System32\Tasks\ASUS\ASUS AI Suite II Execute => C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2012-03-13] (ASUSTeK Computer Inc.)
    Task: {75ADB88E-002C-4734-A144-52C28D118AD0} - System32\Tasks\G2MUploadTask-S-1-5-21-3544609310-1622349089-2069013866-1000 => C:\Program Files (x86)\Citrix\GoToMeeting\3215\g2mupload.exe [2015-08-14] (Citrix Online, a division of Citrix Systems, Inc.)
    Task: {89B59F6E-2D5F-4B42-9885-A493E9DA1C7C} - System32\Tasks\ASUS\RunDAOD => C:\Windows\DAODx.exe [2009-03-30] ()
    Task: {8C9F38C0-15B4-45AC-9762-1670E04D9FC4} - System32\Tasks\AGProxyCheck => C:\Program [Argument = Files (x86)\AnonymizerGadget\AGService.exe /recove]
    Task: {8D9A022D-3FEA-49CD-9528-225C92BFB5A2} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-02-03] (Adobe Systems Incorporated)
    Task: {938D9F26-F22A-4150-B21B-18FC7000C39B} - System32\Tasks\AdobeAAMUpdater-1.0-Battlefield-PC-Battlefield => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated)
    Task: {982E12A9-69AC-4070-B1E9-71274408C30B} - System32\Tasks\G2MUpdateTask-S-1-5-21-3544609310-1622349089-2069013866-1000 => C:\Program Files (x86)\Citrix\GoToMeeting\3215\g2mupdate.exe [2015-08-14] (Citrix Online, a division of Citrix Systems, Inc.)
    Task: {A1E28B8B-F5FA-446E-8B97-1DA9C022CEAB} - \Microsoft\Windows\Windows Activation Technologies\ValidationTask -> No File <==== ATTENTION
    Task: {A2284A70-45A9-4609-AFD3-F087C7D3ED2A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
    Task: {AC49B223-7D5B-4C5D-9B58-97151745FD29} - System32\Tasks\NIUpdateServiceCheckTask => C:\Program Files (x86)\National Instruments\Shared\Update Service\NIUpdateService.exe [2013-05-28] (National Instruments)
    Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - \Microsoft\Windows\Application Experience\AitAgent -> No File <==== ATTENTION
    Task: {AE13DE98-72A8-4B30-BD3D-34E29D1A37A2} - System32\Tasks\ASUS\Easy Update => C:\Program Files (x86)\ASUS\AI Suite II\EasyUpdate\EzUpdt.exe [2012-10-08] ()
    Task: {C6207098-8482-427E-90D0-2CBCB0589A17} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-06-09] (Microsoft Corporation)
    Task: {CEE64558-E1A7-4D9D-80A7-2001912BE5B5} - \Microsoft\Windows\MemoryDiagnostic\CorruptionDetector -> No File <==== ATTENTION
    Task: {CF70397D-34C6-4736-A34B-370A539DC3F5} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-11-14] (Microsoft Corporation)
    Task: {D52D7FE0-0FC7-43A9-8CA8-9EB7C46D44C7} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2016-03-21] (Safer-Networking Ltd.)
    Task: {EB19B095-71A6-4E2E-AD1B-0A6DEAA2C1A5} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-07-27] (Dropbox, Inc.)
    Task: {F1E5514E-65D0-42BB-AB25-52435BE9129A} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Battlefield-PC-Battlefield Battlefield-PC => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2015-06-02] (Microsoft Corporation)
    Task: {FA2BC0A6-8D4B-458A-85C8-2B8C72487513} - \Microsoft\Windows\MemoryDiagnostic\DecompressionFailureDetector -> No File <==== ATTENTION
    Task: {FC7224EB-156A-4ADB-A313-7FBA5597A518} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-07-27] (Dropbox, Inc.)
    Task: {FFF8733F-DACF-468F-983F-C7DBCF42BD4E} - System32\Tasks\RunAsStdUser Task => C:\Users\Battlefield\AppData\Local\KangoBoxSA\bin\1.0.2.0\KangoBoxSA.exe

    (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

    Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
    Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
    Task: C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-3544609310-1622349089-2069013866-1000.job => C:\Program Files (x86)\Citrix\GoToMeeting\3215\g2mupdate.exe
    Task: C:\Windows\Tasks\G2MUploadTask-S-1-5-21-3544609310-1622349089-2069013866-1000.job => C:\Program Files (x86)\Citrix\GoToMeeting\3215\g2mupload.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\Windows\Tasks\updater.exe.job => C:\GOG Games\Total Annihilation - Commander Pack\updater.exe

    ==================== Shortcuts & WMI ========================

    (The entries could be listed to be restored or removed.)


    Shortcut: C:\Users\Battlefield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chief Architect\Chief Architect X2\Chief Architect Website.lnk -> hxxp://chiefarchitect.com
    Shortcut: C:\Users\Battlefield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chief Architect\Chief Architect X2\IRC Checklist.lnk -> hxxp://chiefarchitect.com/useraccess/ircchecklis

    ShortcutWithArgument: C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_mgndgikekgjfcpckkfioiadnlibdjbkf\Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=mgndgikekgjfcpckkfioiadnlibdjbkf
    ShortcutWithArgument: C:\Users\Battlefield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qt Enterprise\5.3.0\MSVC 2013 (64-bit)\Qt 5.3.0 64-bit for Desktop (MSVC 2013).lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /A /Q /K C:\Qt\5.3\msvc2013_64\bin\qtenv2.bat
    ShortcutWithArgument: C:\Users\Battlefield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qt Enterprise\5.3.0\MSVC 2012 OpenGL (32-bit)\Qt 5.3.0 32-bit for Desktop (MSVC 2012 OpenGL).lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /A /Q /K C:\Qt\5.3\msvc2012_opengl\bin\qtenv2.bat
    ShortcutWithArgument: C:\Users\Battlefield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qt Enterprise\5.2.1\MSVC 2012 (32-bit)\Qt 5.2.1 32-bit for Desktop (MSVC 2012).lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /A /Q /K C:\Qt\5.2.1\msvc2012\bin\qtenv2.bat

    ==================== Loaded Modules (Whitelisted) ==============

    2014-05-28 16:23 - 2014-05-28 16:23 - 00098512 _____ () C:\Program Files (x86)\EMET 4.1\EMET_CE64.DLL
    2011-12-22 13:04 - 2009-11-05 09:40 - 00085504 _____ () C:\Windows\System32\cpwmon64.dll
    2011-10-25 14:36 - 2010-09-26 10:04 - 00012056 _____ () C:\Windows\system32\spool\PRTPROCS\x64\CAPPP2K.DLL
    2015-03-20 18:12 - 2015-03-20 18:12 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
    2015-03-20 18:12 - 2015-03-20 18:12 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
    2014-03-21 04:07 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
    2017-05-19 12:09 - 2017-05-19 12:09 - 00139776 _____ () C:\Program Files (x86)\Windows NT\Accessories\WinUtilityHelper\wuhelper.exe
    2014-06-09 23:00 - 2014-06-09 23:00 - 00772456 _____ () C:\Program Files\TortoiseGit\bin\libgit2_tgit.dll
    2014-06-09 23:00 - 2014-06-09 23:00 - 00087400 _____ () C:\Program Files\TortoiseGit\bin\zlib1_tgit.dll
    2017-05-16 13:16 - 2017-05-09 04:13 - 03767640 _____ () C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\libglesv2.dll
    2017-05-16 13:16 - 2017-05-09 04:13 - 00100696 _____ () C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.110\libegl.dll
    2016-07-24 09:18 - 2016-07-24 09:18 - 00299520 _____ () C:\Program Files (x86)\CenterEdge Software\Basic.dll
    2011-10-20 14:14 - 2011-10-20 14:14 - 00073728 _____ () C:\Program Files (x86)\KEEBOX\150N Wireless Utility\ANPDApi.dll
    2011-10-20 14:13 - 2010-07-05 17:41 - 00299008 _____ () C:\Program Files (x86)\KEEBOX\150N Wireless Utility\WlanApp.dll
    2014-05-28 16:23 - 2014-05-28 16:23 - 00089808 _____ () C:\Program Files (x86)\EMET 4.1\EMET_CE.DLL
    2017-06-18 14:30 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
    2017-06-18 14:30 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl

    ==================== Alternate Data Streams (Whitelisted) =========

    (If an entry is included in the fixlist, only the ADS will be removed.)

    AlternateDataStreams: C:\Windows:nlsPreferences [386]
    AlternateDataStreams: C:\Program Files\Common Files\System:zYtvMSxqSk4l5FMDRCKlFNw [2244]
    AlternateDataStreams: C:\ProgramData\Microsoft:0lAW6QhwAqWt2izmioQXq2 [2112]
    AlternateDataStreams: C:\ProgramData\Microsoft:rWxxDCDxLP0TVwMM6umeTHoeG1 [1928]
    AlternateDataStreams: C:\ProgramData\Microsoft:u9IffPXpiYP5xLCvElJk0IEEx [1958]
    AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm [0]
    AlternateDataStreams: C:\Users\Battlefield\Local Settings:567A8B67-6F1F-423d-8002-2907ACC74B9F [47]
    AlternateDataStreams: C:\Users\Battlefield\Desktop\BFH Stormtroopers March 2015.mov:com.dropbox.attributes [422]
    AlternateDataStreams: C:\Users\Battlefield\AppData\Local:567A8B67-6F1F-423d-8002-2907ACC74B9F [47]
    AlternateDataStreams: C:\Users\Battlefield\AppData\Local\Application Data:567A8B67-6F1F-423d-8002-2907ACC74B9F [47]
    AlternateDataStreams: C:\Users\Battlefield\AppData\Local\Temporary Internet Files:wb5gqcNGVznWFclCUfBl9hUe [1868]
    AlternateDataStreams: C:\Users\Battlefield\Documents\Comp 1.mpg:TOC.WMV [130]
    AlternateDataStreams: C:\Users\Battlefield\Documents\Comp 1_3_1.avi:TOC.WMV [130]
    AlternateDataStreams: C:\Users\Battlefield\Documents\Comp 1_3_1.mpg:TOC.WMV [130]

    ==================== Safe Mode (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\atashost => ""="Service"
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SMPCHelper => ""=""
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\tvnserver => ""=""

    ==================== Association (Whitelisted) ===============

    (If an entry is included in the fixlist, the registry item will be restored to default or removed.)

    HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\Software\Classes\.scr: DWGTrueViewScriptFile => C:\Windows\system32\notepad.exe "%1"

    ==================== Internet Explorer trusted/restricted ===============

    (If an entry is included in the fixlist, it will be removed from the registry.)

    IE trusted site: HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\houstondogtags.com -> hxxp://www.houstondogtags.com

    ==================== Hosts content: ==========================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2009-07-13 21:34 - 2015-05-15 12:15 - 00000141 _____ C:\Windows\system32\Drivers\etc\hosts

    127.0.0.1 localhost
    192.168.0.245 maesik
    192.168.0.245 server-2012
    98.199.39.34 jessica.pi
    192.168.0.5 battlefieldhou

    ==================== Other Areas ============================

    (Currently there is no automatic fix for this section.)

    HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\Control Panel\Desktop\\Wallpaper ->
    DNS Servers: 8.8.8.8 - 8.8.4.4
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
    MpsSvc => Firewall Service is not running.
    bfe => Firewall Service is not running.

    ==================== MSCONFIG/TASK MANAGER disabled items ==

    MSCONFIG\Services: AdobeARMservice => 2
    MSCONFIG\Services: asComSvc => 2
    MSCONFIG\Services: AsSysCtrlService => 2
    MSCONFIG\Services: atashost => 2
    MSCONFIG\Services: AudioEndpointBuilder => 2
    MSCONFIG\Services: AudioSrv => 2
    MSCONFIG\Services: BFE => 2
    MSCONFIG\Services: BITS => 3
    MSCONFIG\Services: Bonjour Service => 2
    MSCONFIG\Services: CarboniteService => 2
    MSCONFIG\Services: CryptSvc => 3
    MSCONFIG\Services: dbupdate => 2
    MSCONFIG\Services: dbupdatem => 3
    MSCONFIG\Services: DbxSvc => 2
    MSCONFIG\Services: DisplayLinkService => 2
    MSCONFIG\Services: DpHost => 2
    MSCONFIG\Services: EPSON_Device_Control_Log_Service => 2
    MSCONFIG\Services: EPSON_Port_Communication_Service => 2
    MSCONFIG\Services: gupdate => 2
    MSCONFIG\Services: gupdatem => 3
    MSCONFIG\Services: hasplms => 2
    MSCONFIG\Services: iPod Service => 3
    MSCONFIG\Services: MozillaMaintenance => 3
    MSCONFIG\Services: NILM License Manager => 3
    MSCONFIG\Services: nlsX86cc => 2
    MSCONFIG\Services: Nonbrand_WUS-N_WPS => 2
    MSCONFIG\Services: NovacomD => 2
    MSCONFIG\Services: Palm_TCP_Relay => 2
    MSCONFIG\Services: Steam Client Service => 3
    MSCONFIG\Services: SwitchBoard => 3
    MSCONFIG\Services: TeamViewer8 => 2
    MSCONFIG\startupfolder: C:^Users^Battlefield^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
    MSCONFIG\startupreg: Adobe Acrobat Speed Launcher => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
    MSCONFIG\startupreg: AdobeCS5.5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
    MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
    MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
    MSCONFIG\startupreg: ApplePhotoStreams => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
    MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
    MSCONFIG\startupreg: ASUS AiChargerPlus Execute => C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
    MSCONFIG\startupreg: DivXUpdate => "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
    MSCONFIG\startupreg: Dropbox => "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
    MSCONFIG\startupreg: GoPro Studio Importer => C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe
    MSCONFIG\startupreg: iCloudServices => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
    MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
    MSCONFIG\startupreg: KeePass 2 PreLoad => "C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe" --preload
    MSCONFIG\startupreg: NI Update Service => "C:\Program Files (x86)\National Instruments\Shared\Update Service\NIUpdateService.exe" -startupTask
    MSCONFIG\startupreg: NvBackend => "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
    MSCONFIG\startupreg: Nvtmru => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
    MSCONFIG\startupreg: PMBVolumeWatcher => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe /SysAutoRun
    MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
    MSCONFIG\startupreg: Steam => "E:\Games\Steam\steam.exe" -silent
    MSCONFIG\startupreg: VsHub.exe => "C:\Program Files (x86)\Common Files\Microsoft Shared\VsHub\1.0.0.0\vshub.exe" Execute --delay 120 --console false
    MSCONFIG\startupreg: WD Quick View => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
    MSCONFIG\startupreg: WZCSLDR2 => C:\Program Files (x86)\KEEBOX\150N Wireless Utility\WZCSLDR2.exe
    MSCONFIG\startupreg: zep32AsyncUI => C:\Windows\system32\zep32AsyncUIClient.exe

    ==================== FirewallRules (Whitelisted) ===============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    FirewallRules: [TCP Query User{21DE7197-2A96-440B-8409-3278672B3654}C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe] => (Block) C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe
    FirewallRules: [UDP Query User{80557B49-3216-460F-ACA1-F84986A301EC}C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe] => (Block) C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe
    FirewallRules: [TCP Query User{73DD5642-9E22-45DE-9D6F-CE6123C26EAF}C:\program files (x86)\ringcentral\ringcentral call controller\rcui.exe] => (Allow) C:\program files (x86)\ringcentral\ringcentral call controller\rcui.exe
    FirewallRules: [UDP Query User{A85C3AA6-18FA-4EA2-8481-CFBE7F13FF52}C:\program files (x86)\ringcentral\ringcentral call controller\rcui.exe] => (Allow) C:\program files (x86)\ringcentral\ringcentral call controller\rcui.exe
    FirewallRules: [TCP Query User{29D2D530-85F1-499D-B75C-931B2281BCDD}C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe
    FirewallRules: [UDP Query User{DEC8ADEE-2243-4006-8C39-A25184F69A30}C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe
    FirewallRules: [TCP Query User{C07B1519-468D-46A6-9BA8-31719F37208C}C:\program files (x86)\ringcentral\ringcentral call controller\rcui.exe] => (Allow) C:\program files (x86)\ringcentral\ringcentral call controller\rcui.exe
    FirewallRules: [UDP Query User{35193AD7-8C6A-475F-8A21-4851FECEF9B7}C:\program files (x86)\ringcentral\ringcentral call controller\rcui.exe] => (Allow) C:\program files (x86)\ringcentral\ringcentral call controller\rcui.exe
    FirewallRules: [TCP Query User{0CEF4E58-D8AB-4E9F-8BA0-C75837BE9F1F}C:\program files (x86)\network print monitor\pswizard-lpr.exe] => (Allow) C:\program files (x86)\network print monitor\pswizard-lpr.exe
    FirewallRules: [UDP Query User{3DC2606A-321E-4D22-9D94-310ACA201C7D}C:\program files (x86)\network print monitor\pswizard-lpr.exe] => (Allow) C:\program files (x86)\network print monitor\pswizard-lpr.exe
    FirewallRules: [{D90A8D18-AA4A-44C5-9128-7CA3CDED4CB6}] => (Allow) C:\Program Files (x86)\EPSON\EPSON Advanced Printer Driver 4\Tools\PrinterNetworkSetting\APDNetSetting.exe
    FirewallRules: [{DCE18B44-6F90-4796-9531-52A82619938F}] => (Allow) C:\Program Files (x86)\EPSON\EPSON Advanced Printer Driver 4\Tools\PrinterNetworkSetting\APDNetSetting.exe
    FirewallRules: [TCP Query User{E67AB731-0552-4643-8FC0-99ECE7804B89}C:\windows\system32\ftp.exe] => (Allow) C:\windows\system32\ftp.exe
    FirewallRules: [UDP Query User{3CF3B027-5552-44B8-9D9C-49E2AF345A39}C:\windows\system32\ftp.exe] => (Allow) C:\windows\system32\ftp.exe
    FirewallRules: [{8441DB24-EEB5-490E-862C-66ADA4AF4A49}] => (Allow) C:\Program Files (x86)\Adobe\Adobe Edge Inspect\EdgeInspect.exe
    FirewallRules: [{6F8C3444-C1F4-4F38-A8A1-337C784337A0}] => (Allow) C:\Program Files (x86)\Adobe\Adobe Flash Builder 4.6\FlashBuilder.exe
    FirewallRules: [{7F9B4F10-148D-46BC-AF2A-0E2F20F80839}] => (Allow) C:\Program Files (x86)\Adobe\Adobe Flash Builder 4.6\FlashBuilder.exe
    FirewallRules: [{E0F42E96-2008-4AF8-AD52-966B4F8C46FB}] => (Allow) LPort=7935
    FirewallRules: [{840EDBFF-7BC8-4E54-B95C-D92FA4AEA50B}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\WDExpress.exe
    FirewallRules: [TCP Query User{10FD08C7-63C0-4044-80B4-51933AE708E6}C:\program files (x86)\transmission-qt\transmission-qt.exe] => (Allow) C:\program files (x86)\transmission-qt\transmission-qt.exe
    FirewallRules: [UDP Query User{03ADF8D9-B839-45B4-A13D-D80ACC1CC3FC}C:\program files (x86)\transmission-qt\transmission-qt.exe] => (Allow) C:\program files (x86)\transmission-qt\transmission-qt.exe
    FirewallRules: [TCP Query User{60E241D3-416C-4D86-9E98-5A96E23BF2AB}C:\program files (x86)\digi\xctu\x-ctu.exe] => (Allow) C:\program files (x86)\digi\xctu\x-ctu.exe
    FirewallRules: [UDP Query User{74A531AE-3881-438D-A19F-65ACAF3C7FE8}C:\program files (x86)\digi\xctu\x-ctu.exe] => (Allow) C:\program files (x86)\digi\xctu\x-ctu.exe
    FirewallRules: [TCP Query User{3DF1874E-12AC-4588-AF54-222A40DAC867}C:\hulapos\connector\altaconnector.exe] => (Allow) C:\hulapos\connector\altaconnector.exe
    FirewallRules: [UDP Query User{7DE2AEB1-6DC0-4AD8-99D5-BA3AF04791D6}C:\hulapos\connector\altaconnector.exe] => (Allow) C:\hulapos\connector\altaconnector.exe
    FirewallRules: [TCP Query User{00FE2257-6023-492C-A009-02AD9F279C8A}C:\hulapos\desktop\altadesktop.exe] => (Allow) C:\hulapos\desktop\altadesktop.exe
    FirewallRules: [UDP Query User{64B2B9E8-2081-45CD-BCE6-507EF3C5D54A}C:\hulapos\desktop\altadesktop.exe] => (Allow) C:\hulapos\desktop\altadesktop.exe
    FirewallRules: [TCP Query User{816D102D-5644-46D2-8E5F-29969B36FD0F}C:\program files\kreateck\kreaposc\xmlserver.exe] => (Allow) C:\program files\kreateck\kreaposc\xmlserver.exe
    FirewallRules: [UDP Query User{7D8DDC6F-CE8F-4847-B397-3EF48EF77BD4}C:\program files\kreateck\kreaposc\xmlserver.exe] => (Allow) C:\program files\kreateck\kreaposc\xmlserver.exe
    FirewallRules: [TCP Query User{6E832EC2-8DA1-45FC-A74C-8E5B6E4D219A}C:\program files\kreateck\kreaposc\kreasrv.exe] => (Allow) C:\program files\kreateck\kreaposc\kreasrv.exe
    FirewallRules: [UDP Query User{A24DBA6D-DC66-4CB9-AEDB-70758672B95E}C:\program files\kreateck\kreaposc\kreasrv.exe] => (Allow) C:\program files\kreateck\kreaposc\kreasrv.exe
    FirewallRules: [{5A811A09-70FB-4A78-AC62-483B536C67ED}] => (Allow) C:\Program Files (x86)\Wyse\PocketCloud Windows Companion\PocketCloudInstallWizard.exe
    FirewallRules: [{3CCEEB24-B6FE-47D1-AE93-BF5BCAB2DCAF}] => (Allow) C:\Program Files (x86)\EPSON\TM-T88V Software\TM88VUTL\TM88VUTL.EXE
    FirewallRules: [{48044054-F1AB-4AC7-9977-9748FE3AA509}] => (Allow) C:\Program Files (x86)\EPSON\TM-T88V Software\TM88VUTL\TM88VUTL.EXE
    FirewallRules: [{EAC4CA9D-A85D-4F96-94B4-C1A8A52E6EE8}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\devenv.exe
    FirewallRules: [{DC7CF320-6F63-419B-B8D8-01DEB1369D2E}] => (Allow) LPort=1433
    FirewallRules: [{BDFAF512-755F-4FC5-BB2B-2D123E294212}] => (Allow) %ProgramFiles%\Microsoft SQL Server\MSSQL11.TESTSERVER\MSSQL\Binn\sqlservr.exe
    FirewallRules: [TCP Query User{DF65D74C-9B1B-4B95-B3F1-A3DDF5244D01}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_d6fce8aea6f600df_0002.0000_ef950f00335eb66c\timer - server.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_d6fce8aea6f600df_0002.0000_ef950f00335eb66c\timer - server.exe
    FirewallRules: [UDP Query User{40DB3F85-FEF2-416D-B5D1-1359F5955083}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_d6fce8aea6f600df_0002.0000_ef950f00335eb66c\timer - server.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_d6fce8aea6f600df_0002.0000_ef950f00335eb66c\timer - server.exe
    FirewallRules: [TCP Query User{5DF3485A-9E16-4A8A-9C4A-F8232CE4055F}C:\program files (x86)\centeredge software\sign editor\advsigneditor.exe] => (Allow) C:\program files (x86)\centeredge software\sign editor\advsigneditor.exe
    FirewallRules: [UDP Query User{764FA249-EE37-4A10-82CD-6EB3E56E98C7}C:\program files (x86)\centeredge software\sign editor\advsigneditor.exe] => (Allow) C:\program files (x86)\centeredge software\sign editor\advsigneditor.exe
    FirewallRules: [{63E4A817-0E9D-4FB0-A4C0-DC9DDF30570C}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
    FirewallRules: [{2DACAAE6-E296-4337-A34B-F40E260597B2}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
    FirewallRules: [TCP Query User{E85343FA-1DDE-49EC-B83E-924DEE851515}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_d6fce8aea6f600df_0002.0000_dcd474c9db6913ac\timer - server.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_d6fce8aea6f600df_0002.0000_dcd474c9db6913ac\timer - server.exe
    FirewallRules: [UDP Query User{922EEBDB-6C5C-4ABA-B1E8-396AF7752035}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_d6fce8aea6f600df_0002.0000_dcd474c9db6913ac\timer - server.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_d6fce8aea6f600df_0002.0000_dcd474c9db6913ac\timer - server.exe
    FirewallRules: [TCP Query User{698DE5B8-DB6C-48F6-BCAA-AB91E1B1CC6B}C:\program files (x86)\ringcentral\ringcentral softphone\rcui.exe] => (Allow) C:\program files (x86)\ringcentral\ringcentral softphone\rcui.exe
    FirewallRules: [UDP Query User{9BD5431F-34F5-410B-A7BA-76CAC9891128}C:\program files (x86)\ringcentral\ringcentral softphone\rcui.exe] => (Allow) C:\program files (x86)\ringcentral\ringcentral softphone\rcui.exe
    FirewallRules: [{EB846824-11FF-4693-A022-EEC2F3B9BE02}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
    FirewallRules: [{1BB4D8F9-27A7-4B93-BDE5-6D7D7138AED8}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
    FirewallRules: [TCP Query User{93EF9754-D42D-4F18-93F0-B18F31A62CAA}C:\program files (x86)\ringcentral\ringcentral softphone\rcui.exe] => (Block) C:\program files (x86)\ringcentral\ringcentral softphone\rcui.exe
    FirewallRules: [UDP Query User{E45E194D-AA1C-44F9-A76F-951B9BCF283B}C:\program files (x86)\ringcentral\ringcentral softphone\rcui.exe] => (Block) C:\program files (x86)\ringcentral\ringcentral softphone\rcui.exe
    FirewallRules: [{FCF8042F-D3F8-477F-BC9E-6AB246C014EA}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{30A92F2C-FFFD-435F-AE6B-8FE639EC5289}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{04024E81-D530-4D96-87EC-D682240D60DC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
    FirewallRules: [{646F7C85-0C33-4E73-8752-838B566BB2E3}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
    FirewallRules: [{05918C4D-8299-4390-9787-EDA0DFEDABB2}] => (Allow) C:\Users\Battlefield\AppData\Local\Temp\7zS3FDA\HPDiagnosticCoreUI.exe
    FirewallRules: [{C3AA7D0D-43E5-46DC-8C8E-64020D07A6D8}] => (Allow) C:\Users\Battlefield\AppData\Local\Temp\7zS3FDA\HPDiagnosticCoreUI.exe
    FirewallRules: [{239B7E07-663B-4A3E-9D9A-2B036D6E24F2}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\{5FA67C2B-DAAB-4F7B-AE09-CA97FE73EA59}\setup\hpznui40.exe
    FirewallRules: [{590D6C04-06B1-4D89-82D2-F25917535253}] => (Allow) C:\Users\Battlefield\AppData\Local\Temp\7zS595D\HPDiagnosticCoreUI.exe
    FirewallRules: [{FAFE6BB6-202E-4663-BBE1-F571742FAD74}] => (Allow) C:\Users\Battlefield\AppData\Local\Temp\7zS595D\HPDiagnosticCoreUI.exe
    FirewallRules: [{2BA8E74F-BE06-40EC-A838-513DBD77B8F7}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\bin\FaxApplications.exe
    FirewallRules: [{EB4C07C2-034F-42D8-BAC8-056E145564F9}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\bin\DigitalWizards.exe
    FirewallRules: [{A651629E-5B5C-4E40-80C2-61103C315996}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\bin\SendAFax.exe
    FirewallRules: [{A4C7FF94-4592-42F6-A222-A5DCFA175846}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\Bin\DeviceSetup.exe
    FirewallRules: [{89DF1122-71BD-4B60-AC7B-55B8DC5943AF}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicator.exe
    FirewallRules: [{6F986317-324A-4EAC-8112-91D90B80F431}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicatorCom.exe
    FirewallRules: [{917EC9F0-6A2F-45E3-B442-483A9440A2BD}] => (Allow) F:\Programs\Steam\SteamApps\common\Precipice Of Darkness 3\Rainslick3.exe
    FirewallRules: [{26A2330E-79DC-462D-BC5C-AAFD8C9839C1}] => (Allow) F:\Programs\Steam\SteamApps\common\Precipice Of Darkness 3\Rainslick3.exe
    FirewallRules: [{BA029A0D-4175-47B8-8B6B-A55064E00FB4}] => (Allow) F:\Programs\Steam\SteamApps\common\Penny Arcade's On the Rain-Slick Precipice of Darkness 4\Rainslick4.exe
    FirewallRules: [{A68A6E58-5FC3-4C46-B76A-92867231F0B3}] => (Allow) F:\Programs\Steam\SteamApps\common\Penny Arcade's On the Rain-Slick Precipice of Darkness 4\Rainslick4.exe
    FirewallRules: [{F11F05D5-C2E2-44D0-B753-4C504B97CED3}] => (Allow) F:\Programs\Steam\SteamApps\common\the witcher 2\Launcher.exe
    FirewallRules: [{E073D3AF-E5EB-4379-BE1D-8C2668EF7005}] => (Allow) F:\Programs\Steam\SteamApps\common\the witcher 2\Launcher.exe
    FirewallRules: [{CA6EBAF8-E81C-43D4-944E-3CD04D0C7B61}] => (Allow) F:\Programs\Steam\SteamApps\common\Mount and Blade Warband - Demo\mb_warband.exe
    FirewallRules: [{864E01D4-1584-4589-BF85-A0F8DC2D7A2E}] => (Allow) F:\Programs\Steam\SteamApps\common\Mount and Blade Warband - Demo\mb_warband.exe
    FirewallRules: [TCP Query User{5830EE70-0BAA-4823-A568-EA9D73E7FF07}F:\programs\warcraft iii\war3.exe] => (Allow) F:\programs\warcraft iii\war3.exe
    FirewallRules: [UDP Query User{848005F3-166C-4CD9-BA3A-90D0931C8CF9}F:\programs\warcraft iii\war3.exe] => (Allow) F:\programs\warcraft iii\war3.exe
    FirewallRules: [{CC1E8F12-4B64-4CF7-AE69-B042950E8E73}] => (Allow) F:\Programs\Steam\SteamApps\common\Supreme Commander 2\bin\SupremeCommander2.exe
    FirewallRules: [{31679F20-D431-4DDA-BD7C-0D1A3FD32A4E}] => (Allow) F:\Programs\Steam\SteamApps\common\Supreme Commander 2\bin\SupremeCommander2.exe
    FirewallRules: [{F2E54F3A-44D1-4449-A3D5-4E8E0118234A}] => (Allow) F:\Programs\Steam\SteamApps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
    FirewallRules: [{87D327DF-B421-4B78-8612-1852648821AE}] => (Allow) F:\Programs\Steam\SteamApps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
    FirewallRules: [{BA9EB260-B9AA-4952-8DC2-B2DE04EA1C56}] => (Allow) E:\Programs\Steam\SteamApps\common\Sins of a Solar Empire Rebellion\Sins of a Solar Empire Rebellion.exe
    FirewallRules: [{C1003B40-9F70-4FB7-9F4F-3AEC0F9B1F37}] => (Allow) E:\Programs\Steam\SteamApps\common\Sins of a Solar Empire Rebellion\Sins of a Solar Empire Rebellion.exe
    FirewallRules: [{F2ED918E-E456-456B-9547-770E33297DFA}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
    FirewallRules: [{7FAD2B0E-A087-4B7F-9553-97D9AE4FB2EF}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
    FirewallRules: [{8B4A489A-152A-423E-8F66-882F7515168B}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
    FirewallRules: [{28567A16-FEF8-4DE3-99A0-991630750C5B}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
    FirewallRules: [{8EA089D3-1FBC-4BA0-91A7-9CF2240E28F4}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
    FirewallRules: [TCP Query User{F44B5AF2-59E2-447D-A24E-CCAF848C69E2}C:\users\battlefield\documents\visual studio 2012\projects\bfh timer\events timer\events timer\bfh server\bin\debug\timer - server.exe] => (Allow) C:\users\battlefield\documents\visual studio 2012\projects\bfh timer\events timer\events timer\bfh server\bin\debug\timer - server.exe
    FirewallRules: [UDP Query User{58CE18CD-C19A-4BEA-98D2-A9B37D7B782F}C:\users\battlefield\documents\visual studio 2012\projects\bfh timer\events timer\events timer\bfh server\bin\debug\timer - server.exe] => (Allow) C:\users\battlefield\documents\visual studio 2012\projects\bfh timer\events timer\events timer\bfh server\bin\debug\timer - server.exe
    FirewallRules: [TCP Query User{BEA657B3-685C-49EF-AC31-603D18D17F74}C:\users\battlefield\documents\visual studio 2012\projects\bfh timer\events timer\events timer\bfh server\bin\debug\timer - server.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2012\projects\bfh timer\events timer\events timer\bfh server\bin\debug\timer - server.vshost.exe
    FirewallRules: [UDP Query User{A0C6906D-B276-4BF5-9F11-BCE86116822D}C:\users\battlefield\documents\visual studio 2012\projects\bfh timer\events timer\events timer\bfh server\bin\debug\timer - server.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2012\projects\bfh timer\events timer\events timer\bfh server\bin\debug\timer - server.vshost.exe
    FirewallRules: [{3D6BDBE0-67E1-4D70-ABF5-B2FC21A40B98}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
    FirewallRules: [{9ECFAB96-7127-421D-9C3B-A5C7440CC951}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
    FirewallRules: [{058215F5-6301-472B-B297-CB410FB706FD}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
    FirewallRules: [{AD544C0D-C6D1-4281-AF68-7623F0192DB9}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
    FirewallRules: [TCP Query User{4200CE53-85D0-4116-BAC1-AAD65ACC42D5}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_c7fb621a750c2678_0002.0002_515e619a63ad1780\timer - server.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_c7fb621a750c2678_0002.0002_515e619a63ad1780\timer - server.exe
    FirewallRules: [UDP Query User{2F64B061-BC36-4F53-A50C-94BD4616343D}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_c7fb621a750c2678_0002.0002_515e619a63ad1780\timer - server.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\time..tion_c7fb621a750c2678_0002.0002_515e619a63ad1780\timer - server.exe
    FirewallRules: [TCP Query User{3F04C0BF-9F18-47A9-9B90-9E147F2A01DF}C:\users\battlefield\documents\visual studio 2012\projects\lasertag server\lasertag server\bin\debug\lasertag server.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2012\projects\lasertag server\lasertag server\bin\debug\lasertag server.vshost.exe
    FirewallRules: [UDP Query User{74998ED9-331F-435B-96E2-D868191B0B48}C:\users\battlefield\documents\visual studio 2012\projects\lasertag server\lasertag server\bin\debug\lasertag server.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2012\projects\lasertag server\lasertag server\bin\debug\lasertag server.vshost.exe
    FirewallRules: [TCP Query User{B94ADE4C-E96E-41D6-8AE4-A507CD13E41A}C:\users\battlefield\documents\visual studio 2012\projects\lasertag server\lasertag server\bin\debug\lasertag server.exe] => (Allow) C:\users\battlefield\documents\visual studio 2012\projects\lasertag server\lasertag server\bin\debug\lasertag server.exe
    FirewallRules: [UDP Query User{6F3CFFE7-FF81-49BA-B113-EEC1A34DE0B5}C:\users\battlefield\documents\visual studio 2012\projects\lasertag server\lasertag server\bin\debug\lasertag server.exe] => (Allow) C:\users\battlefield\documents\visual studio 2012\projects\lasertag server\lasertag server\bin\debug\lasertag server.exe
    FirewallRules: [{7FC56627-B2A0-4E0F-BCA5-3D9510C1C5BC}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe
    FirewallRules: [{1C25887E-A19D-4EA0-BEB2-5AC8BD0E32D8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
    FirewallRules: [{E65BD376-AB5C-43E7-8C46-53190D82D3AB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
    FirewallRules: [{8F7730CB-A536-4447-A428-1E168306BF83}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
    FirewallRules: [{A79BB051-F5F8-4243-9262-7BA3F26207B8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
    FirewallRules: [TCP Query User{4B7814C1-A3D8-49EB-90B7-7D12701C4E69}C:\users\battlefield\downloads\miner\stratumproxy\mining_proxy.exe] => (Allow) C:\users\battlefield\downloads\miner\stratumproxy\mining_proxy.exe
    FirewallRules: [UDP Query User{396E216E-9F17-43AF-BA26-8F562F5A732A}C:\users\battlefield\downloads\miner\stratumproxy\mining_proxy.exe] => (Allow) C:\users\battlefield\downloads\miner\stratumproxy\mining_proxy.exe
    FirewallRules: [{87C5029F-177C-4019-A2A2-F01013DF8F52}] => (Allow) LPort=5900
    FirewallRules: [{3983DEBD-A017-40CC-ADF7-D02644D0B1C7}] => (Allow) %ProgramFiles% (x86)\Intuit\QuickBooks 2014\QBW32Pro.exe
    FirewallRules: [{A9885A47-FDCA-422F-9E34-72CA8B5A9910}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
    FirewallRules: [{08EB4453-87D7-44B8-BA0D-6F6D568B2EBF}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
    FirewallRules: [{E3D25432-B7AA-4DBA-9383-49A760A9710B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
    FirewallRules: [{4007A2CA-D1B1-4F7D-A71D-F644CD9068A3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
    FirewallRules: [{25D29940-8C89-4F82-8BD9-BCD924009CC3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
    FirewallRules: [{E7168564-088E-4F97-B7AC-9B3F0E62D0A3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
    FirewallRules: [TCP Query User{8080FAC4-365C-4C9A-BF55-BA078B9F63CB}C:\program files (x86)\freesshd\freesshdservice.exe] => (Allow) C:\program files (x86)\freesshd\freesshdservice.exe
    FirewallRules: [UDP Query User{BD6D8A92-BF51-4342-AFCC-74503DB787DA}C:\program files (x86)\freesshd\freesshdservice.exe] => (Allow) C:\program files (x86)\freesshd\freesshdservice.exe
    FirewallRules: [{AB30EC54-9F6F-463E-8E04-AC31BA22A3CD}] => (Allow) C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe
    FirewallRules: [TCP Query User{254734B1-E4D2-4164-890C-BF62F467CC3A}C:\users\battlefield\desktop\arduino-1.5.2\java\bin\javaw.exe] => (Block) C:\users\battlefield\desktop\arduino-1.5.2\java\bin\javaw.exe
    FirewallRules: [UDP Query User{6E33599C-8236-4771-9DBD-12125C0A7651}C:\users\battlefield\desktop\arduino-1.5.2\java\bin\javaw.exe] => (Block) C:\users\battlefield\desktop\arduino-1.5.2\java\bin\javaw.exe
    FirewallRules: [TCP Query User{804EE654-C43E-49D0-8173-E7BD8431CE70}C:\program files (x86)\adobe\adobe edge animate\edgeanimate.exe] => (Allow) C:\program files (x86)\adobe\adobe edge animate\edgeanimate.exe
    FirewallRules: [UDP Query User{7916659A-35B6-45E5-B824-0136E55A2AFD}C:\program files (x86)\adobe\adobe edge animate\edgeanimate.exe] => (Allow) C:\program files (x86)\adobe\adobe edge animate\edgeanimate.exe
    FirewallRules: [{371C8FEB-0FA7-43BE-B3D6-466E2B0827BC}] => (Allow) LPort=55358
    FirewallRules: [TCP Query User{78EDF231-693B-4D80-A091-48FE86B716AE}C:\users\battlefield\desktop\arduino-1.5.2\java\bin\javaw.exe] => (Allow) C:\users\battlefield\desktop\arduino-1.5.2\java\bin\javaw.exe
    FirewallRules: [UDP Query User{0144FAAE-AB3C-4795-927F-8B70F094D852}C:\users\battlefield\desktop\arduino-1.5.2\java\bin\javaw.exe] => (Allow) C:\users\battlefield\desktop\arduino-1.5.2\java\bin\javaw.exe
    FirewallRules: [{68D2AA3F-597E-4B96-95B4-8C9E7DBE7484}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
    FirewallRules: [TCP Query User{1472D7D8-0C8B-42BB-A31A-6E830AEED84E}C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\lasertag server.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\lasertag server.vshost.exe
    FirewallRules: [UDP Query User{4F1DFB01-D271-467D-803C-4F6D9BA5183E}C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\lasertag server.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\lasertag server.vshost.exe
    FirewallRules: [TCP Query User{B4B8660C-2ECE-4EFE-89D2-28CEEE7BF483}C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\lasertag server.exe] => (Allow) C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\lasertag server.exe
    FirewallRules: [UDP Query User{AE54391D-707D-4CA6-82BF-E83D9ECC25AF}C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\lasertag server.exe] => (Allow) C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\lasertag server.exe
    FirewallRules: [TCP Query User{2F18F209-B725-4C19-A8FD-B11BBD5CB61A}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\lase..tion_0000000000000000_0001.0000_f2f724bc82ad3fcd\lasertag server.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\lase..tion_0000000000000000_0001.0000_f2f724bc82ad3fcd\lasertag server.exe
    FirewallRules: [UDP Query User{E543AE50-D63E-4EC9-83E7-241E0FF02D1F}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\lase..tion_0000000000000000_0001.0000_f2f724bc82ad3fcd\lasertag server.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\lase..tion_0000000000000000_0001.0000_f2f724bc82ad3fcd\lasertag server.exe
    FirewallRules: [TCP Query User{A580A19F-08CF-4A7B-9B22-DA53C61D9A4D}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\medi..tion_0000000000000000_0000.0003_7af09580b6978e7a\medic_control(development).exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\medi..tion_0000000000000000_0000.0003_7af09580b6978e7a\medic_control(development).exe
    FirewallRules: [UDP Query User{AB8EE24A-7D93-485D-86BA-C50DCBE1E7A4}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\medi..tion_0000000000000000_0000.0003_7af09580b6978e7a\medic_control(development).exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\medi..tion_0000000000000000_0000.0003_7af09580b6978e7a\medic_control(development).exe
    FirewallRules: [{5B75FDC7-3F67-4E93-ABAB-5CF6733C4B03}] => (Allow) C:\Users\Battlefield\AppData\Local\Temp\7zS0DB2\HPDiagnosticCoreUI.exe
    FirewallRules: [{DF878058-CFD4-4D53-B026-CF1A840A41FB}] => (Allow) C:\Users\Battlefield\AppData\Local\Temp\7zS0DB2\HPDiagnosticCoreUI.exe
    FirewallRules: [TCP Query User{E51E9D5E-E73B-44EA-B218-3E14578993BE}C:\program files (x86)\arduino\java\bin\javaw.exe] => (Allow) C:\program files (x86)\arduino\java\bin\javaw.exe
    FirewallRules: [UDP Query User{F2A40058-9BF5-4CB5-93A9-632F2E52ECEC}C:\program files (x86)\arduino\java\bin\javaw.exe] => (Allow) C:\program files (x86)\arduino\java\bin\javaw.exe
    FirewallRules: [TCP Query User{B5C808A6-8D1E-40C9-BD08-2240314A9F29}C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\medic_control.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\medic_control.vshost.exe
    FirewallRules: [UDP Query User{5305549D-93B9-4CF9-AD57-462F018FA668}C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\medic_control.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\medic_control.vshost.exe
    FirewallRules: [TCP Query User{428D70DA-0344-4861-A32D-052D6A99FA77}C:\users\battlefield\documents\visual studio 2012\projects\bfh server\bin\debug\timer - server.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2012\projects\bfh server\bin\debug\timer - server.vshost.exe
    FirewallRules: [UDP Query User{ACFA8C24-7C3E-4060-A8BC-603B18241BA2}C:\users\battlefield\documents\visual studio 2012\projects\bfh server\bin\debug\timer - server.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2012\projects\bfh server\bin\debug\timer - server.vshost.exe
    FirewallRules: [TCP Query User{4F39674F-ABB2-4C2F-A785-9B6B9F14C881}C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\medic_control.exe] => (Allow) C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\medic_control.exe
    FirewallRules: [UDP Query User{DD0C0FA5-5D74-4431-9CDD-CE5C9C4DE67C}C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\medic_control.exe] => (Allow) C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\medic_control.exe
    FirewallRules: [TCP Query User{D0E9CC85-B58A-4331-9807-625D6F2DF57D}C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\command_center.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\command_center.vshost.exe
    FirewallRules: [UDP Query User{C08F2D19-4614-4C0B-92B2-147E39D072D0}C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\command_center.vshost.exe] => (Allow) C:\users\battlefield\documents\visual studio 2013\projects\medic_control\lasertag server\bin\debug\command_center.vshost.exe
    FirewallRules: [TCP Query User{B4221ADF-98C2-4706-B89E-B9D455C29ED8}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0000_ec1aa7bb0a422cd7\command_center.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0000_ec1aa7bb0a422cd7\command_center.exe
    FirewallRules: [UDP Query User{514ECBDA-412E-433C-B7C0-F31C84FE655B}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0000_ec1aa7bb0a422cd7\command_center.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0000_ec1aa7bb0a422cd7\command_center.exe
    FirewallRules: [TCP Query User{7A167FBE-5C9C-400A-B9EA-ED678B7439D2}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0001_4b1981025e9ebcd7\command_center.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0001_4b1981025e9ebcd7\command_center.exe
    FirewallRules: [UDP Query User{0F32E4EE-F3A5-42C4-AD2E-D8A7EDB4C755}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0001_4b1981025e9ebcd7\command_center.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0001_4b1981025e9ebcd7\command_center.exe
    FirewallRules: [TCP Query User{33F19B68-CEA3-4F6D-AB0E-B239E20BB9A1}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0001_022f12b54903ee57\command_center.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0001_022f12b54903ee57\command_center.exe
    FirewallRules: [UDP Query User{911FBC84-2506-4725-B246-22A54B3302F2}C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0001_022f12b54903ee57\command_center.exe] => (Allow) C:\users\battlefield\appdata\local\apps\2.0\p6h2q32j.eyw\0v96dpdh.g0n\comm..tion_0000000000000000_0001.0001_022f12b54903ee57\command_center.exe
    FirewallRules: [{5368BE97-08CC-4125-8085-EBABB570E841}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
    FirewallRules: [{19E57C86-11ED-4D15-ACA4-E5E9864E8C1A}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
    FirewallRules: [{4EB5E612-4618-4D70-87BD-FDC65ACCDE1B}] => (Allow) C:\Program Files\Xamarin Android Player\AndroidPlayer.exe
    FirewallRules: [{3D7A837C-DBDD-48F9-8712-F676803A4BB6}] => (Allow) C:\Program Files\Xamarin Android Player\minimal_adb\adb.exe
    FirewallRules: [{A9C2A7E2-75FE-4C61-8B15-6FCD44513AE3}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe
    FirewallRules: [{3B848BF1-A2CB-49D8-BEDD-6E15C4BDB929}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe
    FirewallRules: [{22EC3136-CADE-4416-9D77-F40268D55AD2}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe
    FirewallRules: [{C229CA86-D1D2-4089-A45B-2E31E803BAF1}] => (Allow) C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe
    FirewallRules: [{4F08CF52-B016-4A68-944C-1304C9C0BE35}] => (Allow) C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe
    FirewallRules: [{CD4A55A3-AC69-4910-B11D-11764353D2A1}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe
    FirewallRules: [{E9F3CA92-CAD3-46F6-BDA4-C9D733553497}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe
    FirewallRules: [{8A3BB187-468E-4D84-9792-02A814D0A23C}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\nisvcloc\nisvcloc.exe
    FirewallRules: [{DF58609B-7294-4D7B-8E9A-A4EABA727F0B}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\nisvcloc\nisvcloc.exe
    FirewallRules: [{7CC2D7C2-C7CF-4B16-9F7F-7AFEA3BCE698}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe
    FirewallRules: [{E2E1F59B-0414-4A4B-97A7-45A43C47693A}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe
    FirewallRules: [TCP Query User{FA667B9D-BE55-48C8-B9ED-CEE23511DDC6}C:\program files (x86)\centeredge advantage signage\advantagesignage.exe] => (Allow) C:\program files (x86)\centeredge advantage signage\advantagesignage.exe
    FirewallRules: [UDP Query User{8DC286C6-4509-43DC-9AE9-C82169289513}C:\program files (x86)\centeredge advantage signage\advantagesignage.exe] => (Allow) C:\program files (x86)\centeredge advantage signage\advantagesignage.exe
    FirewallRules: [{4177BDF0-ECCA-4907-A8BD-A10C2EEA176C}] => (Block) C:\program files (x86)\centeredge advantage signage\advantagesignage.exe
    FirewallRules: [{6D916273-91A3-40AC-AB12-546CC034ECBE}] => (Block) C:\program files (x86)\centeredge advantage signage\advantagesignage.exe
    FirewallRules: [{8F73B3FF-5F1A-4D51-8035-F585C615B25C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    FirewallRules: [{B259F625-5EC8-4E14-904E-36694377B46A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe
    FirewallRules: [{CFE9621D-48EE-41EC-8FBC-08F7DA7808C5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe
    FirewallRules: [{70C26C98-A80F-46E2-9422-7384A1398D9C}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
    FirewallRules: [{AFC17EF1-1446-4480-9545-D3DF7FB74DF3}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
    FirewallRules: [{1E234857-9D17-4086-A87E-1B578793803A}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
    FirewallRules: [{4C51BEAB-255C-4190-B45F-71E47FBD1DE0}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
    FirewallRules: [{1E4BEA55-0178-49AA-8152-715E546C8E34}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
    FirewallRules: [{1E39B6E6-7A11-44CE-9DBD-64B61BADF296}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
    FirewallRules: [{799170B7-2AF3-499B-8B7D-BBA7DD066371}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
    FirewallRules: [{28F81BF1-85D1-4AB3-8D1C-53742FB315C5}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
    FirewallRules: [{D5AE6E36-109F-4A1A-904A-A34F00605100}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
    FirewallRules: [{C9BC396F-AD4B-4ECE-9E57-2766CCE1B613}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
    FirewallRules: [{748F62A0-59AB-47B7-B3ED-73432725B2E3}] => (Allow) LPort=12292
    FirewallRules: [TCP Query User{DF3F3956-E321-4116-826F-BEE13EBCCE1E}C:\program files (x86)\java\jdk1.7.0_55\bin\javaw.exe] => (Block) C:\program files (x86)\java\jdk1.7.0_55\bin\javaw.exe
    FirewallRules: [UDP Query User{089E405C-C889-470A-9AE4-BF2384CB7B68}C:\program files (x86)\java\jdk1.7.0_55\bin\javaw.exe] => (Block) C:\program files (x86)\java\jdk1.7.0_55\bin\javaw.exe
    StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
    StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
    StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
    StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

    ==================== Restore Points =========================

    20-06-2017 12:45:33 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005
    20-06-2017 12:46:28 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
    20-06-2017 12:47:07 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
    23-06-2017 03:32:58 Windows Update
    26-06-2017 16:57:23 Removed Java 8 Update 45
    26-06-2017 16:58:38 Removed Java(TM) SE Development Kit 6 Update 39
    26-06-2017 17:00:12 Removed Java SE Development Kit 7 Update 55
    26-06-2017 17:01:39 Removed Java 8 Update 45
    26-06-2017 17:02:52 Removed Itibiti RTC
    27-06-2017 10:18:24 Windows Update
    27-06-2017 10:51:43 JRT Pre-Junkware Removal
    Check "winmgmt" service or repair WMI.


    ==================== Faulty Device Manager Devices =============

    Name: Officejet Pro 8600
    Description: Officejet Pro 8600
    Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
    Manufacturer: HP
    Service:
    Problem: : This device is disabled. (Code 22)
    Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (06/27/2017 10:12:28 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
    Description: Unloading the performance counter strings for service WmiApRpl (WmiApRpl) failed. The first DWORD in the Data section contains the error code.

    Error: (06/27/2017 10:12:28 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
    Description: The performance strings in the Performance registry value is corrupted when process Performance extension counter provider. The BaseIndex value from the Performance registry is the first DWORD in the Data section, LastCounter value is the second DWORD in the Data section, and LastHelp value is the third DWORD in the Data section.

    Error: (06/27/2017 10:08:17 AM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT AUTHORITY)
    Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

    Error: (06/27/2017 10:07:50 AM) (Source: MSSQL$TESTSERVER) (EventID: 9003) (User: )
    Description: The log scan number (31:245:1) passed to log scan in database 'model' is not valid. This error may indicate data corruption or that the log file (.ldf) does not match the data file (.mdf). If this error occurred during replication, re-create the publication. Otherwise, restore from backup if the problem results in a failure during startup.

    Error: (06/27/2017 09:30:16 AM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: The program FRST64.exe version 25.6.2017.1 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

    Process ID: 1fb8

    Start Time: 01d2ef51551e307a

    Termination Time: 0

    Application Path: C:\Users\Battlefield\Desktop\FRST64.exe

    Report Id:

    Error: (06/27/2017 09:26:06 AM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: The program FRST64.exe version 25.6.2017.1 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

    Process ID: 1774

    Start Time: 01d2ef50a6ae1262

    Termination Time: 10

    Application Path: C:\Users\Battlefield\Downloads\FRST64.exe

    Report Id:

    Error: (06/27/2017 09:12:06 AM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: The program FRST64.exe version 25.6.2017.1 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

    Process ID: 26b8

    Start Time: 01d2eece4aadf255

    Termination Time: 0

    Application Path: C:\Users\Battlefield\Downloads\FRST64.exe

    Report Id:

    Error: (06/27/2017 04:45:13 AM) (Source: SideBySide) (EventID: 33) (User: )
    Description: Activation context generation failed for "C:\Program Files (x86)\Microsoft Visual Studio 12.0\VC\redist\1033\vcredist_arm.exe".
    Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="arm",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
    Please use sxstrace.exe for detailed diagnosis.

    Error: (06/27/2017 04:45:04 AM) (Source: SideBySide) (EventID: 33) (User: )
    Description: Activation context generation failed for "C:\Program Files (x86)\STMicroelectronics\Software\DfuSe\Driver\dpinst_ia64.exe".
    Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
    Please use sxstrace.exe for detailed diagnosis.

    Error: (06/27/2017 04:44:50 AM) (Source: SideBySide) (EventID: 33) (User: )
    Description: Activation context generation failed for "C:\Program Files (x86)\Microsoft Visual Studio 14.0\VC\redist\1033\vcredist_arm.exe".
    Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="arm",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
    Please use sxstrace.exe for detailed diagnosis.


    System errors:
    =============
    Error: (06/27/2017 11:09:45 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
    Description: The Microsoft Network Inspection service depends on the Microsoft Network Inspection System service which failed to start because of the following error:
    The dependency service or group failed to start.

    Error: (06/27/2017 11:09:45 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
    Description: The Microsoft Network Inspection System service depends on the Base Filtering Engine service which failed to start because of the following error:
    The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

    Error: (06/27/2017 11:09:45 AM) (Source: Microsoft Antimalware) (EventID: 3002) (User: )
    Description: Microsoft Antimalware Real-Time Protection feature has encountered an error and failed.

    Feature: Network Inspection System

    Error Code: 0x8007042c

    Error description: The dependency service or group failed to start.

    Reason: The system is missing updates that are required for running Network Inspection System. Install the required updates and restart the computer.

    Error: (06/27/2017 11:09:45 AM) (Source: Microsoft Antimalware) (EventID: 3002) (User: )
    Description: Microsoft Antimalware Real-Time Protection feature has encountered an error and failed.

    Feature: Network Inspection System

    Error Code: 0x8007042c

    Error description: The dependency service or group failed to start.

    Reason: The system is missing updates that are required for running Network Inspection System. Install the required updates and restart the computer.

    Error: (06/27/2017 11:09:44 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
    Description: The Microsoft Network Inspection service depends on the Microsoft Network Inspection System service which failed to start because of the following error:
    The dependency service or group failed to start.

    Error: (06/27/2017 11:09:44 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
    Description: The Microsoft Network Inspection System service depends on the Base Filtering Engine service which failed to start because of the following error:
    The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

    Error: (06/27/2017 10:52:18 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The NVIDIA Streamer Service service terminated unexpectedly. It has done this 1 time(s).

    Error: (06/27/2017 10:52:18 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The NVIDIA Display Driver Service service terminated unexpectedly. It has done this 1 time(s).

    Error: (06/27/2017 10:20:06 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
    Description: Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.247.175.0).

    Error: (06/27/2017 10:19:49 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
    Description: The Microsoft Network Inspection service depends on the Microsoft Network Inspection System service which failed to start because of the following error:
    The dependency service or group failed to start.


    CodeIntegrity:
    ===================================
    Date: 2012-09-20 13:32:19.540
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2012-09-20 13:32:19.526
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


    ==================== Memory info ===========================

    Processor: AMD Phenom(tm) II X6 1100T Processor
    Percentage of memory in use: 26%
    Total physical RAM: 16346.43 MB
    Available physical RAM: 12095 MB
    Total Virtual: 32691.04 MB
    Available Virtual: 28671.46 MB

    ==================== Drives ================================

    Drive c: () (Fixed) (Total:1862.92 GB) (Free:913.43 GB) NTFS

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 31A36B23)
    Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
    Partition 2: (Not Active) - (Size=1862.9 GB) - (Type=07 NTFS)

    ==================== End of Addition.txt ============================
  6. 2017-06-27, 19:28 #6
    Juliet
    Juliet is offline
    Security Expert-emeritus Juliet's Avatar
    Join Date
    Feb 2007
    Location
    Deep South
    Posts
    4,084

    Default

    OK

    No idea whats going on with the usb mouse, no drivers or services for this have been tampered with.

    you may need to boot into safe mode for this to work all the way through, It's possible it can hang again tho I'm not sure why.
    You can try it first in normal mode to see what we get.



    Please open Notepad *Do Not Use Wordpad!* or use any other text editor than Notepad or the script will fail. (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the quote box below:
    Or use this method Press the windows key + r on your keyboard at the same time. This will open the RUN BOX.
    Type Notepad and and click the OK key.

    To do this highlight the contents of the box and right click on it and select copy.
    Paste this into the open notepad. save it to the Desktop as fixlist.txt
    NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.
    It needs to be saved Next to the "Farbar Recovery Scan Tool" (If asked to overwrite existing one please allow)


    start
    CreateRestorePoint:
    CloseProcesses:
    RemoveProxy:
    AppInit_DLLs:  => No File
    ShellExecuteHooks-x32: No Name - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - -> No File
    ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => -> No File
    ProxyEnable: [.DEFAULT] => Proxy is enabled.
    ProxyServer: [.DEFAULT] => http=127.0.0.1:47574Tcpip\..\Interfaces\{5E6EDCD9-41B9-471A-9F74-AE95EF4B6233}: [NameServer] 8.8.8.8,8.8.4.4
    FF Extension: (No Name) - C:\Program Files (x86)\Mozilla Firefox\extensions\䍻䙁䕅䅆ⵃ〰㜱〭〰ⴰ〰㜰䄭䍂䕄䙆䑅䉃絁 [2013-02-27] [not signed]
    FF HKU\S-1-5-21-3544609310-1622349089-2069013866-1000\...\Firefox\Extensions: [{257B76A0-0277-11E2-8271-B8AC6F996F26}] - C:\Users\Battlefield\AppData\Local\{257B76A0-0277-11E2-8271-B8AC6F996F26} => not found
    CHR DefaultSearchURL: Default -> hxxps://www.teoma.com/web?q={searchTerms}
    CHR DefaultSearchKeyword: Default -> hxxps://teoma.com
    CHR DefaultSuggestURL: Default -> hxxp://www.teoma.com/ss?type=prefix&li=ff&q={searchTerms}
    CHR HKLM\...\Chrome\Extension: [ckadhkfhcieallpikidnjojofenjpfni] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\ckadhkfhcieallpikidnjojofenjpfni.crx <not found>
    "wuhelper" => service was unlocked. <==== ATTENTION
    S3 catchme; \??\C:\ComboFix\catchme.sys [X]
    S3 dbx; system32\DRIVERS\dbx.sys [X]
    S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X]
    S3 MREMP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS [X]
    S3 MREMPR5; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS [X]
    S3 MRENDIS5; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [X]
    S3 MRESP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS [X]
    S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
    C:\Users\Battlefield\AppData\Roaming\Yahoo!
    Task: {2F57269B-1E09-4E2D-AB1E-B0FDAC7D279C} - \Microsoft\Windows\WindowsBackup\ConfigNotification -> No File <==== ATTENTION
    Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - \Microsoft\Windows\Application Experience\AitAgent -> No File <==== ATTENTION
    Task: {CEE64558-E1A7-4D9D-80A7-2001912BE5B5} - \Microsoft\Windows\MemoryDiagnostic\CorruptionDetector -> No File <==== ATTENTION
    Task: {FA2BC0A6-8D4B-458A-85C8-2B8C72487513} - \Microsoft\Windows\MemoryDiagnostic\DecompressionFailureDetector -> No File <==== ATTENTION
    ShortcutWithArgument: C:\Users\Battlefield\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_mgndgikekgjfcpckkfioiadnlibdjbkf\Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=mgndgikekgjfcpckkfioiadnlibdjbkf
    ShortcutWithArgument: C:\Users\Battlefield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qt Enterprise\5.3.0\MSVC 2013 (64-bit)\Qt 5.3.0 64-bit for Desktop (MSVC 2013).lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /A /Q /K C:\Qt\5.3\msvc2013_64\bin\qtenv2.bat
    ShortcutWithArgument: C:\Users\Battlefield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qt Enterprise\5.3.0\MSVC 2012 OpenGL (32-bit)\Qt 5.3.0 32-bit for Desktop (MSVC 2012 OpenGL).lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /A /Q /K C:\Qt\5.3\msvc2012_opengl\bin\qtenv2.bat
    ShortcutWithArgument: C:\Users\Battlefield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qt Enterprise\5.2.1\MSVC 2012 (32-bit)\Qt 5.2.1 32-bit for Desktop (MSVC 2012).lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /A /Q /K C:\Qt\5.2.1\msvc2012\bin\qtenv2.bat
    AlternateDataStreams: C:\Windows:nlsPreferences [386]
    AlternateDataStreams: C:\Program Files\Common Files\System:zYtvMSxqSk4l5FMDRCKlFNw [2244]
    AlternateDataStreams: C:\ProgramData\Microsoft:0lAW6QhwAqWt2izmioQXq2 [2112]
    AlternateDataStreams: C:\ProgramData\Microsoft:rWxxDCDxLP0TVwMM6umeTHoeG1 [1928]
    AlternateDataStreams: C:\ProgramData\Microsoft:u9IffPXpiYP5xLCvElJk0IEEx [1958]
    AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm [0]
    AlternateDataStreams: C:\Users\Battlefield\Local Settings:567A8B67-6F1F-423d-8002-2907ACC74B9F [47]
    AlternateDataStreams: C:\Users\Battlefield\Desktop\BFH Stormtroopers March 2015.mov:com.dropbox.attributes [422]
    AlternateDataStreams: C:\Users\Battlefield\AppData\Local:567A8B67-6F1F-423d-8002-2907ACC74B9F [47]
    AlternateDataStreams: C:\Users\Battlefield\AppData\Local\Application Data:567A8B67-6F1F-423d-8002-2907ACC74B9F [47]
    AlternateDataStreams: C:\Users\Battlefield\AppData\Local\Temporary Internet Files:wb5gqcNGVznWFclCUfBl9hUe [1868]
    AlternateDataStreams: C:\Users\Battlefield\Documents\Comp 1.mpg:TOC.WMV [130]
    AlternateDataStreams: C:\Users\Battlefield\Documents\Comp 1_3_1.avi:TOC.WMV [130]
    AlternateDataStreams: C:\Users\Battlefield\Documents\Comp 1_3_1.mpg:TOC.WMV [130]
    EmptyTemp:
    Hosts:
    End
    Open FRST/FRST64 and press the > Fix < button just once and wait.
    If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
    When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.


    ~~~~~~~~~~~~~~~~

    Please download the Malwarebytes Anti-Malware setup file to your Desktop.

    OR from this location Here

    • Open mbam-setup.x.x.xxxx.exe (x represents the version #) and follow the prompts to install the programme.
    [*]Windows Vista, Windows 7 , 8, 8.1 and 10 : Right click and select "Run as Administrator"

    • After the installation IS complete let it update if it asks.
    • Under SETTINGS.....APPLICATIONS leave everything at default
    • Under SETTINGS.....PROTECTION make sure AUTOMATIC QUARANTINE is on.
    • Then go to the Dashboard and click on SCAN NOW

    • When the scan is finished click on EXPORT SUMMARY......COPY TO CLIPBOARD
    • Then come back to this thread and and under REPLY TO THIS TOPIC, right click in the reply and select Paste

    • Then click on POST
    • Exit Malwarebytes


    ~~~~~~~~~~~~~~~~~~~~~~~~~

    Next is an anti-rootkit scanner

    Malwarebytes Anti-Rootkit Beta
    • Download Malwarebytes Anti-Rootkit Beta and extract it to your desktop (MBAR will be launched shortly after the extraction);
    • Click on Next, and then on the Update button to let it update its database. Once the database has been successfully updated, click on Next;
    • Make sure all the checkboxes are checked, then click on the Scan button, and let it completes its scan (this can take a while);
    • Once the scan is done, make sure that every item is checked, and click on the Cleanup button (a reboot might be required);
    • After that (and the reboot, if one was required), go back in the mbar folder and look for a text file called mbar-log-TODAY'S-DATE.txt;
    • Copy/paste the content of that log in your next reply;


    ~~~~~~~~

    RogueKiller Scan
    • Please download RogueKiller (x32) / RogueKiller (x64) and save the file to your Desktop.
    • Close any running programmes.
    • Double-click RogueKillerx64.exe to run the programme.
    • Follow the prompts. If a browser window opens, close the window.
    • In the HOME tab, click Start Scan.
    • Upon completion, a browser window may open. Close this window.
    • Please do not have RogueKiller remove any detected items.
    • Click the HISTORY tab, followed by Scan Reports.
    • Double-click the scan log, and click Open TXT.
    • Copy the contents of the log and paste in your next reply.
    • Close RogueKiller.


    ****
    Please try to post these 3 logs.
    Windows Insider MVP Consumer Security 2009 - 2017
    Please do not PM me for Malware help, we all benefit from posting on the open board.
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules