1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Solved Clicking Sound and Pop-up after Clean Scans

Discussion in 'Malware and Virus Removal' started by PlanetAlps, 2016/07/09.

  1. 2016/07/09
    PlanetAlps

    PlanetAlps Member Thread Starter

    Joined:
    2016/07/09
    Messages:
    47
    Likes Received:
    0
    Recently my computer has been acting a bit weird. Occasionally (every few hours) it will make a clicking sound, as in the type you get while opening a folder or something of that sort, and will make whatever window I am currently paying attention to seem to alt-tab. The window tab changes color. I have recently scanned my PC with MalwareBytes, Kaspersky malware scan, Zoek, McAfee (my current antivirus), Adware,Emisoft, ProHitman, Spybot S and D and GMER. These have removed some random adware malware, however the problem still occurs. After I scanned and used these programs I saw a popup asking for survey info that was obviously not legitimate. I don't think I have access to their logs anymore, the logs of the programs I used to scan as I deleted most of them after I thought the problem was solved. Addition txt too large to fit, will provide it later.

    FRST txt.

    Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02-07-2016
    Ran by MacGyver (administrator) on MACGYVER (09-07-2016 00:36:38)
    Running from C:\Users\MacGyver\Downloads
    Loaded Profiles: MacGyver (Available Profiles: MacGyver & Guest & DefaultAppPool)
    Platform: Windows 10 Home Version 1511 (X64) Language: English (United States)
    Internet Explorer Version 11 (Default browser: Chrome)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
    (McAfee, Inc.) C:\Windows\System32\mfevtps.exe
    (Intel Corporation) C:\Windows\System32\igfxCUIService.exe
    (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
    (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
    (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
    (McAfee, Inc.) C:\Windows\System32\mfevtps.exe
    (McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
    (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
    (McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
    (AMD) C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
    (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
    (Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
    (iolo technologies, LLC) C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe
    (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
    (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
    (McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe
    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
    () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
    (AMD) C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpert.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
    (Microsoft Corporation) C:\Windows\System32\mqsvc.exe
    (Perforce Software Inc.) C:\Program Files\Perforce\Server\p4s.exe
    (DEVGURU Co., LTD.) C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
    (Intel Security, Inc.) C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe
    (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
    (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
    (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
    (Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe
    (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
    (iolo technologies, LLC) C:\Program Files (x86)\iolo\System Mechanic\ioloGovernor64.exe
    (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
    (Intel Corporation) C:\Windows\System32\igfxEM.exe
    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
    (McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe
    (Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
    (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
    (Spotify Ltd) C:\Users\MacGyver\AppData\Roaming\Spotify\SpotifyWebHelper.exe
    (Akamai Technologies, Inc.) C:\Users\MacGyver\AppData\Local\Akamai\netsession_win.exe
    (Akamai Technologies, Inc.) C:\Users\MacGyver\AppData\Local\Akamai\netsession_win.exe
    (Spotify Ltd) C:\Users\MacGyver\AppData\Roaming\Spotify\Spotify.exe
    (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
    (AMD) C:\Windows\SysWOW64\WinMsgBalloonServer.exe
    (AMD) C:\Windows\SysWOW64\WinMsgBalloonClient.exe
    (iolo technologies, LLC) C:\Program Files (x86)\iolo\System Mechanic\LiveBoost.exe
    (Spotify Ltd) C:\Users\MacGyver\AppData\Roaming\Spotify\SpotifyCrashService.exe
    (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OFFICE16\CSISYNCCLIENT.EXE
    (Spotify Ltd) C:\Users\MacGyver\AppData\Roaming\Spotify\Spotify.exe
    (Spotify Ltd) C:\Users\MacGyver\AppData\Roaming\Spotify\Spotify.exe
    (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
    (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
    (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
    () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
    (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
    (McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\1.9.741.0\McCSPServiceHost.exe
    (McAfee, Inc.) C:\Program Files\McAfee\MAT\McPvTray.exe
    (McAfee, Inc.) C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe
    (Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Intel Security) C:\Program Files\Common Files\McAfee\ClientAnalytics\McClientAnalytics.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
    (Microsoft Corporation) C:\Program Files\Internet Explorer\ielowutil.exe


    ==================== Registry (Whitelisted) ===========================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [hpsysdrv] => c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)
    HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
    HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
    HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)
    HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [322472 2015-06-23] (Intel Corporation)
    HKLM-x32\...\Run: [] => [X]
    HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [596640 2016-06-16] (Razer Inc.)
    HKLM-x32\...\Run: [iolo Startup] => C:\Program Files (x86)\iolo\Common\Lib\ioloLManager.exe [4612544 2016-02-19] (iolo technologies, LLC)
    HKLM-x32\...\Run: [Adobe Creative Cloud] => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
    HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595992 2016-05-20] (Oracle Corporation)
    HKLM\...\Policies\Explorer: [AllowLegacyWebView] 1
    HKLM\...\Policies\Explorer: [AllowUnhashedWebView] 1
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2851408 2016-07-08] (Valve Corporation)
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\Run: [Spotify Web Helper] => C:\Users\MacGyver\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1553520 2016-06-28] (Spotify Ltd)
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\Run: [Akamai NetSession Interface] => C:\Users\MacGyver\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\Run: [Spotify] => C:\Users\MacGyver\AppData\Roaming\Spotify\Spotify.exe [7003760 2016-06-28] (Spotify Ltd)
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [26424960 2016-06-29] (Skype Technologies S.A.)
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\RunOnce: [Uninstall C:\Users\MacGyver\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\MacGyver\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64 "
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\RunOnce: [Uninstall C:\Users\MacGyver\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\MacGyver\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64 "
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\Policies\system: [DisableLockWorkstation] 0
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\Policies\Explorer: []
    HKU\S-1-5-18\...\Run: [KSS] => "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan\kss.exe" autorun
    BootExecute: autocheck autochk * sdnclean64.exe

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
    Tcpip\..\Interfaces\{4f78a4a4-bc96-4378-96d4-03264811ecb7}: [DhcpNameServer] 192.168.1.1
    Tcpip\..\Interfaces\{cd525c03-aa61-4c1d-814f-041194d7b431}: [NameServer] 8.8.8.8,8.8.4.4
    Tcpip\..\Interfaces\{d516021c-3855-40b0-8c5b-fc273fa90223}: [DhcpNameServer] 192.168.1.254
    Tcpip\..\Interfaces\{ea1c36eb-2e37-4844-838a-afa255fcd7f7}: [DhcpNameServer] 192.168.1.1

    Internet Explorer:
    ==================
    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/HPDSK/1
    SearchScopes: HKLM -> {8B6AFE61-4015-44CA-A35C-DF9EEDBD272A} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
    SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-30572-11896-1/4?mpre=hxxp://www.ebay.com/sch/i.html?_nkw={searchTerms}
    SearchScopes: HKLM -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
    SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-30572-11896-1/4?mpre=hxxp://www.ebay.com/sch/i.html?_nkw={searchTerms}
    SearchScopes: HKU\S-1-5-21-3964298893-2401237506-3764420300-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
    SearchScopes: HKU\S-1-5-21-3964298893-2401237506-3764420300-1000 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-30572-11896-1/4?mpre=hxxp://www.ebay.com/sch/i.html?_nkw={searchTerms}
    BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2016-06-14] (Microsoft Corporation)
    BHO: No Name -> {AB4C7833-A6EC-433f-B9FE-6B14B1A2F836} -> No File
    BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2016-06-15] (Microsoft Corporation)
    BHO: No Name -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> No File
    BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation)
    BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-07-07] (Oracle Corporation)
    BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2016-06-15] (Microsoft Corporation)
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-07-07] (Oracle Corporation)
    BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2015-05-06] (Hewlett-Packard)
    Toolbar: HKLM - No Name - {A13C2648-91D4-4bf3-BC6D-0079707C4389} - No File
    Toolbar: HKU\S-1-5-21-3964298893-2401237506-3764420300-1000 -> No Name - {A13C2648-91D4-4BF3-BC6D-0079707C4389} - No File
    Toolbar: HKU\S-1-5-21-3964298893-2401237506-3764420300-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
    Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2016-06-24] (McAfee, Inc.)
    Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2016-06-24] (McAfee, Inc.)
    Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2016-05-20] (Microsoft Corporation)
    Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-05-20] (Microsoft Corporation)
    Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2016-05-20] (Microsoft Corporation)
    Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-05-20] (Microsoft Corporation)
    Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2016-06-24] (McAfee, Inc.)
    Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2016-06-24] (McAfee, Inc.)
    Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll [2016-05-24] (McAfee, Inc.)
    Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll [2016-05-24] (McAfee, Inc.)

    FireFox:
    ========
    FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_22_0_0_192.dll [2016-06-16] ()
    FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2016-05-24] ()
    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
    FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~4\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
    FF Plugin: @wacom.com/wtPlugin,version=2.1.0.2 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
    FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
    FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
    FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [No File]
    FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll [2013-07-14] (Adobe Systems)
    FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_192.dll [2016-06-16] ()
    FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
    FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll [2013-05-30] (ESN Social Software AB)
    FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [2014-05-26] (EA Digital Illusions CE AB)
    FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-07-07] (Oracle Corporation)
    FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-07-07] (Oracle Corporation)
    FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2016-05-24] ()
    FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-05-27] (Microsoft Corporation)
    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
    FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-06-29] (NVIDIA Corporation)
    FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-06-29] (NVIDIA Corporation)
    FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
    FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.2 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
    FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
    FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-27] (Adobe Systems Inc.)
    FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-07-14] (Adobe Systems)
    FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
    FF Plugin HKU\S-1-5-21-3964298893-2401237506-3764420300-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\MacGyver\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [No File]
    FF Plugin HKU\S-1-5-21-3964298893-2401237506-3764420300-1000: ActiveGS -> C:\Program Files (x86)\ActiveGS\npActiveGS.dll [2012-09-19] (Free Tools Association)
    FF Plugin HKU\S-1-5-21-3964298893-2401237506-3764420300-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-07-05] ()
    FF Plugin HKU\S-1-5-21-3964298893-2401237506-3764420300-1000: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2016-05-27] (Microsoft Corporation)
    FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
    FF Extension: McAfee WebAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2016-07-09]
    FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
    FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
    FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2016-07-08] [not signed]

    Chrome:
    =======
    CHR DefaultSearchURL: Default -> hxxps://search.yahoo.com/search?p={searchTerms}&fr=yset_chr_syc_oracle&type=default
    CHR DefaultSearchKeyword: Default -> Yahoo
    CHR DefaultSuggestURL: Default -> hxxps://search.yahoo.com/sugg/ie?output=fxjson&command={searchTerms}&nResults=10
    CHR Profile: C:\Users\MacGyver\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (BetterTTV) - C:\Users\MacGyver\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2016-07-08]
    CHR Extension: (Google Docs) - C:\Users\MacGyver\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-07-08]
    CHR Extension: (HTTPS Everywhere) - C:\Users\MacGyver\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp [2016-07-08]
    CHR Extension: (AdBlock) - C:\Users\MacGyver\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-07-08]
    CHR Extension: (Drumpfinator) - C:\Users\MacGyver\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcimhbfpiofdihhdnofbdlhjcmjopilp [2016-07-08]
    CHR Extension: (Twitch Now) - C:\Users\MacGyver\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmbdmpjmlijibeockamioakdpmhjnpk [2016-07-08]
    CHR Extension: (Chrome Web Store Payments) - C:\Users\MacGyver\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-07-08]
    CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2016-07-08]
    CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2016-07-08]
    CHR HKLM-x32\...\Chrome\Extension: [gihfmmedoddijgnhkgfgnkeohkpbipol] - hxxps://clients2.google.com/service/update2/crx

    ==================== Services (Whitelisted) ========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    S2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-11-20] (Advanced Micro Devices, Inc.) [File not signed]
    S2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc.)
    S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1125888 2015-07-22] ()
    R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)
    U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-03-14] (Hi-Rez Studios) [File not signed]
    R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [599864 2016-04-23] (McAfee, Inc.)
    R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [28552 2016-04-26] (Hewlett-Packard Company)
    S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [18856 2015-06-23] (Intel Corporation)
    S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
    R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373160 2015-12-19] (Intel Corporation)
    R2 ioloSystemService; C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe [4759600 2016-02-19] (iolo technologies, LLC)
    R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [163592 2016-06-24] (McAfee, Inc.)
    R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [989192 2016-05-24] (McAfee, Inc.)
    R2 McBootDelayStartSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [599864 2016-04-23] (McAfee, Inc.)
    R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.9.741.0\\McCSPServiceHost.exe [1903320 2016-04-18] (McAfee, Inc.)
    R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [599864 2016-04-23] (McAfee, Inc.)
    R2 McNaiAnn; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [599864 2016-04-23] (McAfee, Inc.)
    S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [795528 2016-04-20] (McAfee, Inc.)
    R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [599864 2016-04-23] (McAfee, Inc.)
    R2 McProxy; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [599864 2016-04-23] (McAfee, Inc.)
    R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [232688 2016-03-07] (McAfee, Inc.)
    R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [382456 2016-04-01] (McAfee, Inc.)
    R3 mfevtp; C:\WINDOWS\system32\mfevtps.exe [277744 2016-03-07] (McAfee, Inc.)
    R2 ModuleCoreService; C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe [1424352 2016-04-21] (McAfee, Inc.)
    R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [599864 2016-04-23] (McAfee, Inc.)
    R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)
    R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)
    R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)
    S4 Oasis2Service; C:\Program Files (x86)\DDNi\Oasis2Service 1.0\Oasis2Service.exe [46592 2011-01-05] () [File not signed]
    S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2122248 2016-06-25] (Electronic Arts)
    S4 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1128952 2011-08-12] (PDF Complete Inc)
    R2 PEFService; C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe [1029856 2016-04-21] (Intel Security, Inc.)
    R2 Perforce; C:\Program Files\Perforce\Server\p4s.exe [3455104 2012-11-09] (Perforce Software Inc.)
    R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [188072 2015-11-04] ()
    R2 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [741640 2014-06-16] (DEVGURU Co., LTD.)
    S4 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [758224 2013-11-06] (Tunngle.net GmbH) [File not signed]
    S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
    S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
    R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [656664 2014-08-19] (Wacom Technology, Corp.)

    ===================== Drivers (Whitelisted) ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
    R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [78632 2016-03-11] (McAfee, Inc.)
    R1 ElRawDisk; C:\Windows\system32\drivers\ElRawDsk.sys [30752 2013-09-15] (EldoS Corporation)
    S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [207968 2016-02-24] (McAfee, Inc.)
    S3 hitmanpro37; C:\WINDOWS\system32\drivers\hitmanpro37.sys [46960 2016-07-08] ()
    R3 KillerEth; C:\Windows\System32\drivers\e22w10x64.sys [124464 2015-04-27] (Qualcomm Atheros, Inc.)
    R2 McPvDrv; C:\Windows\system32\drivers\McPvDrv.sys [79192 2016-04-20] (McAfee, Inc.)
    R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [193336 2015-07-10] (Intel Corporation)
    R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [419624 2016-03-11] (McAfee, Inc.)
    R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [349480 2016-03-11] (McAfee, Inc.)
    S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [83608 2016-03-11] (McAfee, Inc.)
    R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [493352 2016-03-11] (McAfee, Inc.)
    R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [842536 2016-03-11] (McAfee, Inc.)
    R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [543488 2016-02-10] (McAfee, Inc.)
    S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [109480 2016-02-10] (McAfee, Inc.)
    R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [46240 2016-06-06] (McAfee, Inc.)
    R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [243496 2016-03-11] (McAfee, Inc.)
    R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)
    R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
    R1 RawDisk3; C:\Windows\system32\drivers\rawdsk3.sys [32912 2014-07-13] (EldoS Corporation)
    R3 rzendpt; C:\Windows\System32\drivers\rzendpt.sys [50392 2015-08-13] (Razer Inc)
    S3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [40696 2013-11-21] (Windows (R) Win 7 DDK provider)
    R2 rzpmgrk; C:\WINDOWS\system32\drivers\rzpmgrk.sys [37184 2015-09-22] (Razer, Inc.)
    R2 rzpnk; C:\WINDOWS\system32\drivers\rzpnk.sys [130880 2015-12-14] (Razer, Inc.)
    R3 ScpVBus; C:\Windows\System32\drivers\ScpVBus.sys [39168 2013-05-05] (Scarlet.Crush Productions)
    R3 tap0901t; C:\Windows\System32\drivers\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
    S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
    S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
    S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
    U3 idsvc; no ImagePath

    ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
     
  2. 2016/07/09
    PlanetAlps

    PlanetAlps Member Thread Starter

    Joined:
    2016/07/09
    Messages:
    47
    Likes Received:
    0
    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2016-07-09 00:36 - 2016-07-09 00:37 - 00031652 _____ C:\Users\MacGyver\Downloads\FRST.txt
    2016-07-09 00:35 - 2016-07-09 00:36 - 00000000 ____D C:\FRST
    2016-07-09 00:34 - 2016-07-09 00:35 - 02390016 _____ (Farbar) C:\Users\MacGyver\Downloads\FRST64.exe
    2016-07-09 00:08 - 2016-07-09 00:08 - 00000085 _____ C:\WINDOWS\wininit.ini
    2016-07-08 23:36 - 2016-07-09 00:09 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
    2016-07-08 23:36 - 2016-07-09 00:08 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
    2016-07-08 23:36 - 2016-07-08 23:36 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
    2016-07-08 19:49 - 2016-07-08 19:52 - 00198586 _____ C:\TDSSKiller.3.1.0.9_08.07.2016_19.49.39_log.txt
    2016-07-08 19:48 - 2016-07-08 19:48 - 00000356 _____ C:\TDSSKiller.2.8.16.0_08.07.2016_19.48.23_log.txt
    2016-07-08 18:32 - 2016-07-08 18:32 - 00000000 ____D C:\Users\MacGyver\AppData\Roaming\3909
    2016-07-08 17:43 - 2016-07-08 21:23 - 00004020 _____ C:\WINDOWS\System32\Tasks\Intel Security DAT Reputation (AMCore) periodic endpoint safety pulse
    2016-07-08 17:43 - 2016-07-08 17:43 - 00004208 _____ C:\WINDOWS\System32\Tasks\Intel Security DAT Reputation (AMCore) Post DAT update endpoint safety pulse
    2016-07-08 08:23 - 2016-07-08 08:23 - 00000000 ____D C:\ProgramData\Emsisoft
    2016-07-08 08:05 - 2016-07-09 00:09 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
    2016-07-08 05:21 - 2016-07-08 05:21 - 00001995 _____ C:\Users\Public\Desktop\McAfee Total Protection.lnk
    2016-07-08 05:20 - 2016-07-09 00:16 - 00000000 __RSD C:\Users\MacGyver\Documents\McAfee Vaults
    2016-07-08 05:20 - 2016-07-08 05:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
    2016-07-08 05:20 - 2016-07-08 05:20 - 00000000 ____D C:\Users\MacGyver\AppData\Local\McAfee File Lock
    2016-07-08 05:20 - 2016-04-20 11:00 - 00079192 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\McPvDrv.sys
    2016-07-08 05:20 - 2016-02-24 21:07 - 00207968 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\HipShieldK.sys
    2016-07-08 05:19 - 2016-07-08 05:19 - 00003142 _____ C:\WINDOWS\System32\Tasks\McAfeeLogon
    2016-07-08 05:19 - 2016-07-08 05:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\McAfee
    2016-07-08 05:19 - 2016-07-08 05:19 - 00000000 ____D C:\ProgramData\Intel Security
    2016-07-08 05:18 - 2016-07-09 00:10 - 00000000 ____D C:\Program Files (x86)\McAfee
    2016-07-08 05:18 - 2016-07-08 23:38 - 00000000 ____D C:\Program Files\Common Files\AV
    2016-07-08 05:18 - 2016-07-08 05:18 - 00000000 ____D C:\Program Files\McAfee.com
    2016-07-08 05:18 - 2016-07-08 05:18 - 00000000 ____D C:\Program Files\Common Files\Intel Security
    2016-07-08 05:13 - 2016-03-07 15:38 - 00277744 _____ (McAfee, Inc.) C:\WINDOWS\system32\mfevtps.exe
    2016-07-08 05:12 - 2016-07-08 05:20 - 00000000 ____D C:\Program Files\Common Files\McAfee
    2016-07-08 04:01 - 2016-07-08 04:01 - 00000000 ____D C:\ProgramData\ioloGovernor
    2016-07-08 04:00 - 2016-07-08 04:00 - 00000000 ____D C:\Users\MacGyver\AppData\Local\ActiveSync
    2016-07-08 03:54 - 2016-07-08 03:31 - 00024064 _____ C:\WINDOWS\zoek-delete.exe
    2016-07-08 03:50 - 2016-07-08 05:25 - 00000000 ____D C:\Users\MacGyver\AppData\Roaming\iolo
    2016-07-08 02:19 - 2016-07-08 02:19 - 00002776 _____ C:\WINDOWS\system32\.crusader
    2016-07-08 01:29 - 2016-07-08 02:21 - 00046960 _____ C:\WINDOWS\system32\Drivers\hitmanpro37.sys
    2016-07-08 00:56 - 2016-07-08 06:55 - 00290304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\subinacl.exe
    2016-07-08 00:06 - 2016-07-08 17:39 - 00000000 ____D C:\Users\MacGyver\AppData\Roaming\ZHP
    2016-07-08 00:06 - 2016-06-29 12:21 - 00111552 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
    2016-07-08 00:05 - 2016-05-03 21:23 - 00129824 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
    2016-07-08 00:05 - 2016-05-03 21:22 - 00130848 _____ C:\WINDOWS\system32\vulkan-1.dll
    2016-07-08 00:05 - 2016-05-03 21:22 - 00045344 _____ C:\WINDOWS\system32\vulkaninfo.exe
    2016-07-08 00:05 - 2016-05-03 21:22 - 00040224 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
    2016-07-08 00:04 - 2016-07-08 00:06 - 00000000 ____D C:\WINDOWS\LastGood
    2016-07-08 00:03 - 2016-06-29 17:39 - 39979576 _____ C:\WINDOWS\system32\nvcompiler.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 35115968 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 31663040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 25431608 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 17445096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 10680808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 10656296 _____ C:\WINDOWS\system32\nvptxJitCompiler.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 10224024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 09013792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 08741848 _____ C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 08608120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 02845120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 02471992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 01922616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6436869.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 01579976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 01573432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6436869.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00984512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00909248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00787384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00786176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00771640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00709176 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00669952 _____ C:\WINDOWS\system32\nvfatbinaryLoader.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00632848 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00631288 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00601936 _____ C:\WINDOWS\system32\nvmcumd.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00565208 _____ C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00549424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00452432 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00423360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00383936 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00379808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00379448 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00348216 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00316632 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00178136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00155768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00153232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00131584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00046024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
    2016-07-07 23:47 - 2016-07-07 23:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
    2016-07-07 23:46 - 2016-07-07 23:46 - 00000000 ____D C:\WINDOWS\System32\Tasks\Apple
    2016-07-07 23:46 - 2016-07-07 23:46 - 00000000 ____D C:\Program Files\Bonjour
    2016-07-07 23:46 - 2016-07-07 23:46 - 00000000 ____D C:\Program Files (x86)\Bonjour
    2016-07-07 23:46 - 2016-07-07 23:46 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
    2016-07-07 23:45 - 2016-07-07 23:45 - 00097344 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
    2016-07-07 23:45 - 2016-07-07 23:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
    2016-07-07 23:44 - 2016-07-07 23:44 - 00001094 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
    2016-07-07 23:43 - 2016-07-07 23:43 - 00000000 ____D C:\Program Files (x86)\Audacity
    2016-07-07 23:42 - 2016-07-07 23:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
    2016-07-07 08:03 - 2016-07-08 02:00 - 00000000 ____D C:\ProgramData\HitmanPro
    2016-07-07 03:33 - 2016-07-07 03:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
    2016-07-07 03:33 - 2016-07-07 03:33 - 00000000 ____D C:\Program Files\7-Zip
    2016-07-06 19:55 - 2016-07-06 19:55 - 00000000 ____D C:\Users\MacGyver\AppData\Local\ESET
    2016-07-06 10:34 - 2016-07-06 10:35 - 00000000 ____D C:\Users\MacGyver\Downloads\Music Sheets
    2016-07-05 19:47 - 2016-07-05 19:47 - 00000000 ____D C:\ProgramData\Samsung
    2016-07-05 19:47 - 2016-07-05 19:47 - 00000000 ____D C:\Program Files\SAMSUNG
    2016-07-05 03:50 - 2016-07-05 03:50 - 00003498 _____ C:\WINDOWS\System32\Tasks\{BC3FA003-1B9B-4710-A518-5713D42B1CE4}
    2016-07-05 01:35 - 2016-07-05 01:35 - 00000000 ____D C:\Users\MacGyver\AppData\Local\backburner
    2016-07-05 01:28 - 2016-07-08 23:25 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
    2016-07-01 16:51 - 2016-07-01 16:51 - 00001955 _____ C:\Users\MacGyver\Desktop\Steam.lnk
    2016-06-27 02:47 - 2016-06-27 02:47 - 00001916 _____ C:\Users\MacGyver\Desktop\PowerPoint 2016.lnk
    2016-06-27 02:47 - 2016-06-27 02:47 - 00001884 _____ C:\Users\MacGyver\Desktop\Word 2016.lnk
    2016-06-27 02:41 - 2016-07-08 23:13 - 00002656 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
    2016-06-27 02:41 - 2016-06-27 02:41 - 00002729 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
    2016-06-27 02:41 - 2016-06-27 02:41 - 00002662 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
    2016-06-27 02:41 - 2016-06-27 02:41 - 00002656 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business 2016.lnk
    2016-06-27 02:41 - 2016-06-27 02:41 - 00002656 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
    2016-06-27 02:41 - 2016-06-27 02:41 - 00002648 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
    2016-06-27 02:41 - 2016-06-27 02:41 - 00002648 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
    2016-06-27 02:41 - 2016-06-27 02:41 - 00002642 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
    2016-06-27 02:41 - 2016-06-27 02:41 - 00002628 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
    2016-06-27 02:41 - 2016-06-27 02:41 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools
    2016-06-27 02:40 - 2016-06-27 02:40 - 00000000 ____D C:\WINDOWS\PCHEALTH
    2016-06-27 02:40 - 2016-06-27 02:40 - 00000000 ____D C:\Program Files\Microsoft SQL Server
    2016-06-27 02:40 - 2016-06-27 02:40 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
    2016-06-27 02:40 - 2016-06-27 02:40 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
    2016-06-27 02:37 - 2016-06-27 02:40 - 00000000 ____D C:\Program Files\Microsoft Office
    2016-06-27 02:37 - 2016-06-27 02:37 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
    2016-06-27 02:37 - 2016-06-27 02:37 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
    2016-06-27 02:37 - 2016-06-27 02:37 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
    2016-06-27 02:35 - 2016-06-27 02:35 - 00000000 __RHD C:\MSOCache
    2016-06-17 20:32 - 2016-06-17 20:32 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
    2016-06-17 20:31 - 2016-06-03 02:22 - 01920960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6436839.dll
    2016-06-17 20:31 - 2016-06-03 02:22 - 01571776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6436839.dll
    2016-06-17 04:27 - 2016-07-08 05:20 - 00000000 ____D C:\Program Files\McAfee
    2016-06-14 18:28 - 2016-05-28 01:13 - 01401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
    2016-06-14 18:28 - 2016-05-28 01:13 - 01184960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
    2016-06-14 18:28 - 2016-05-28 01:13 - 00514752 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
    2016-06-14 18:28 - 2016-05-28 01:13 - 00290496 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
    2016-06-14 18:28 - 2016-05-28 01:13 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
    2016-06-14 18:28 - 2016-05-28 01:13 - 00046784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
    2016-06-14 18:28 - 2016-05-28 00:25 - 04268880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
    2016-06-14 18:28 - 2016-05-28 00:23 - 00388384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
    2016-06-14 18:28 - 2016-05-28 00:23 - 00312160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll
    2016-06-14 18:28 - 2016-05-28 00:22 - 07474528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
    2016-06-14 18:28 - 2016-05-28 00:22 - 04387680 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
    2016-06-14 18:28 - 2016-05-28 00:22 - 00428896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
    2016-06-14 18:28 - 2016-05-28 00:22 - 00211296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
    2016-06-14 18:28 - 2016-05-28 00:22 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
    2016-06-14 18:28 - 2016-05-28 00:20 - 00430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
    2016-06-14 18:28 - 2016-05-28 00:18 - 00357216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
    2016-06-14 18:28 - 2016-05-28 00:16 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
    2016-06-14 18:28 - 2016-05-28 00:09 - 00501600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
    2016-06-14 18:28 - 2016-05-28 00:09 - 00170848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.exe
    2016-06-14 18:28 - 2016-05-28 00:09 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
    2016-06-14 18:28 - 2016-05-28 00:08 - 00693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
    2016-06-14 18:28 - 2016-05-28 00:08 - 00258912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufx01000.sys
    2016-06-14 18:28 - 2016-05-28 00:08 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
    2016-06-14 18:28 - 2016-05-28 00:07 - 03675512 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
    2016-06-14 18:28 - 2016-05-28 00:07 - 02921880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
    2016-06-14 18:28 - 2016-05-28 00:07 - 01322248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
    2016-06-14 18:28 - 2016-05-28 00:07 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
    2016-06-14 18:28 - 2016-05-28 00:07 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
    2016-06-14 18:28 - 2016-05-28 00:07 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
    2016-06-14 18:28 - 2016-05-28 00:07 - 00331616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
    2016-06-14 18:28 - 2016-05-28 00:06 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
    2016-06-14 18:28 - 2016-05-28 00:06 - 04074160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
    2016-06-14 18:28 - 2016-05-28 00:06 - 00730344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
    2016-06-14 18:28 - 2016-05-28 00:06 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
    2016-06-14 18:28 - 2016-05-28 00:06 - 00254656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
    2016-06-14 18:28 - 2016-05-28 00:05 - 04515264 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
    2016-06-14 18:28 - 2016-05-28 00:04 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
    2016-06-14 18:28 - 2016-05-28 00:04 - 00431296 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
    2016-06-14 18:28 - 2016-05-28 00:04 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
    2016-06-14 18:28 - 2016-05-28 00:04 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
    2016-06-14 18:28 - 2016-05-28 00:04 - 00111064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
    2016-06-14 18:28 - 2016-05-28 00:04 - 00097096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
    2016-06-14 18:28 - 2016-05-28 00:03 - 00131248 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
    2016-06-14 18:28 - 2016-05-27 23:58 - 01996640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
    2016-06-14 18:28 - 2016-05-27 23:58 - 00379232 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
    2016-06-14 18:28 - 2016-05-27 23:57 - 02548944 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
    2016-06-14 18:28 - 2016-05-27 23:57 - 02195632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
    2016-06-14 18:28 - 2016-05-27 23:57 - 01594416 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
    2016-06-14 18:28 - 2016-05-27 23:57 - 01372312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
    2016-06-14 18:28 - 2016-05-27 23:57 - 00649792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
    2016-06-14 18:28 - 2016-05-27 23:57 - 00636304 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
    2016-06-14 18:28 - 2016-05-27 23:57 - 00577376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
    2016-06-14 18:28 - 2016-05-27 23:57 - 00546456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
    2016-06-14 18:28 - 2016-05-27 23:57 - 00521664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
    2016-06-14 18:28 - 2016-05-27 23:57 - 00316256 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
    2016-06-14 18:28 - 2016-05-27 23:35 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe
    2016-06-14 18:28 - 2016-05-27 23:35 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
    2016-06-14 18:28 - 2016-05-27 23:35 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsdport.sys
    2016-06-14 18:28 - 2016-05-27 23:31 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdlrecover.exe
    2016-06-14 18:28 - 2016-05-27 23:31 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
    2016-06-14 18:28 - 2016-05-27 23:31 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
    2016-06-14 18:28 - 2016-05-27 23:29 - 22379008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
    2016-06-14 18:28 - 2016-05-27 23:29 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
    2016-06-14 18:28 - 2016-05-27 23:28 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
    2016-06-14 18:28 - 2016-05-27 23:27 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
    2016-06-14 18:28 - 2016-05-27 23:27 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
    2016-06-14 18:28 - 2016-05-27 23:26 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
    2016-06-14 18:28 - 2016-05-27 23:26 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
    2016-06-14 18:28 - 2016-05-27 23:26 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
    2016-06-14 18:28 - 2016-05-27 23:25 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
    2016-06-14 18:28 - 2016-05-27 23:24 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
    2016-06-14 18:28 - 2016-05-27 23:24 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
    2016-06-14 18:28 - 2016-05-27 23:24 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
    2016-06-14 18:28 - 2016-05-27 23:22 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
    2016-06-14 18:28 - 2016-05-27 23:22 - 00278528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
    2016-06-14 18:28 - 2016-05-27 23:22 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
    2016-06-14 18:28 - 2016-05-27 23:22 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
    2016-06-14 18:28 - 2016-05-27 23:22 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
    2016-06-14 18:28 - 2016-05-27 23:22 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsvc.dll
    2016-06-14 18:28 - 2016-05-27 23:22 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
    2016-06-14 18:28 - 2016-05-27 23:21 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrokerLib.dll
    2016-06-14 18:28 - 2016-05-27 23:21 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
    2016-06-14 18:28 - 2016-05-27 23:20 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
    2016-06-14 18:28 - 2016-05-27 23:20 - 00511488 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll
    2016-06-14 18:28 - 2016-05-27 23:20 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\system32\polstore.dll
    2016-06-14 18:28 - 2016-05-27 23:20 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
    2016-06-14 18:28 - 2016-05-27 23:20 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GnssAdapter.dll
    2016-06-14 18:28 - 2016-05-27 23:20 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Privacy.dll
    2016-06-14 18:28 - 2016-05-27 23:19 - 24605696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
    2016-06-14 18:28 - 2016-05-27 23:19 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
    2016-06-14 18:28 - 2016-05-27 23:18 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
    2016-06-14 18:28 - 2016-05-27 23:18 - 07977472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
    2016-06-14 18:28 - 2016-05-27 23:18 - 00610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
    2016-06-14 18:28 - 2016-05-27 23:18 - 00591360 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
    2016-06-14 18:28 - 2016-05-27 23:18 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
    2016-06-14 18:28 - 2016-05-27 23:18 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPSECSVC.DLL
    2016-06-14 18:28 - 2016-05-27 23:18 - 00380416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
    2016-06-14 18:28 - 2016-05-27 23:18 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
    2016-06-14 18:28 - 2016-05-27 23:17 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
    2016-06-14 18:28 - 2016-05-27 23:17 - 00963072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
    2016-06-14 18:28 - 2016-05-27 23:17 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
    2016-06-14 18:28 - 2016-05-27 23:17 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.dll
    2016-06-14 18:28 - 2016-05-27 23:17 - 00415232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
    2016-06-14 18:28 - 2016-05-27 23:17 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
    2016-06-14 18:28 - 2016-05-27 23:17 - 00173056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
    2016-06-14 18:28 - 2016-05-27 23:16 - 19344384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
    2016-06-14 18:28 - 2016-05-27 23:16 - 00690176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
    2016-06-14 18:28 - 2016-05-27 23:16 - 00684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
    2016-06-14 18:28 - 2016-05-27 23:16 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
    2016-06-14 18:28 - 2016-05-27 23:16 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
    2016-06-14 18:28 - 2016-05-27 23:16 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
    2016-06-14 18:28 - 2016-05-27 23:16 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\polstore.dll
    2016-06-14 18:28 - 2016-05-27 23:16 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
    2016-06-14 18:28 - 2016-05-27 23:15 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
    2016-06-14 18:28 - 2016-05-27 23:15 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
    2016-06-14 18:28 - 2016-05-27 23:15 - 00794624 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
    2016-06-14 18:28 - 2016-05-27 23:15 - 00535040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
    2016-06-14 18:28 - 2016-05-27 23:15 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
    2016-06-14 18:28 - 2016-05-27 23:15 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
    2016-06-14 18:28 - 2016-05-27 23:14 - 18674176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
    2016-06-14 18:28 - 2016-05-27 23:14 - 01716736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
    2016-06-14 18:28 - 2016-05-27 23:14 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
    2016-06-14 18:28 - 2016-05-27 23:14 - 00965632 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
    2016-06-14 18:28 - 2016-05-27 23:14 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
    2016-06-14 18:28 - 2016-05-27 23:14 - 00606208 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
    2016-06-14 18:28 - 2016-05-27 23:14 - 00499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
    2016-06-14 18:28 - 2016-05-27 23:14 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
    2016-06-14 18:28 - 2016-05-27 23:13 - 00990208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
    2016-06-14 18:28 - 2016-05-27 23:13 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
    2016-06-14 18:28 - 2016-05-27 23:13 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
    2016-06-14 18:28 - 2016-05-27 23:13 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
    2016-06-14 18:28 - 2016-05-27 23:13 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
    2016-06-14 18:28 - 2016-05-27 23:12 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
    2016-06-14 18:28 - 2016-05-27 23:12 - 00614400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
    2016-06-14 18:28 - 2016-05-27 23:12 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
    2016-06-14 18:28 - 2016-05-27 23:11 - 01445888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
    2016-06-14 18:28 - 2016-05-27 23:11 - 00890368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
    2016-06-14 18:28 - 2016-05-27 23:11 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
    2016-06-14 18:28 - 2016-05-27 23:11 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
    2016-06-14 18:28 - 2016-05-27 23:11 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
    2016-06-14 18:28 - 2016-05-27 23:11 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
    2016-06-14 18:28 - 2016-05-27 23:11 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
    2016-06-14 18:28 - 2016-05-27 23:09 - 01073152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
    2016-06-14 18:28 - 2016-05-27 23:08 - 13385728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
    2016-06-14 18:28 - 2016-05-27 23:08 - 06295552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
    2016-06-14 18:28 - 2016-05-27 23:06 - 12128256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
    2016-06-14 18:28 - 2016-05-27 23:06 - 07200256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
    2016-06-14 18:28 - 2016-05-27 23:06 - 01339904 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
    2016-06-14 18:28 - 2016-05-27 23:05 - 03994624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
    2016-06-14 18:28 - 2016-05-27 23:05 - 03664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
    2016-06-14 18:28 - 2016-05-27 23:05 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
    2016-06-14 18:28 - 2016-05-27 23:05 - 01797120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
    2016-06-14 18:28 - 2016-05-27 23:04 - 06973952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
    2016-06-14 18:28 - 2016-05-27 23:04 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
    2016-06-14 18:28 - 2016-05-27 23:04 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll
    2016-06-14 18:28 - 2016-05-27 23:03 - 05323776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
    2016-06-14 18:28 - 2016-05-27 23:03 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
    2016-06-14 18:28 - 2016-05-27 23:03 - 02609664 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
    2016-06-14 18:28 - 2016-05-27 23:03 - 01185280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationFramework.dll
    2016-06-14 18:28 - 2016-05-27 23:03 - 00693760 _____ (Microsoft Corporation) C:\WINDOWS\system32\internetmail.dll
    2016-06-14 18:28 - 2016-05-27 23:03 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
    2016-06-14 18:28 - 2016-05-27 23:02 - 03590144 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
    2016-06-14 18:28 - 2016-05-27 23:02 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
    2016-06-14 18:28 - 2016-05-27 23:02 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
    2016-06-14 18:28 - 2016-05-27 23:01 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
    2016-06-14 18:28 - 2016-05-27 23:01 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
    2016-06-14 18:28 - 2016-05-27 23:01 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
    2016-06-14 18:28 - 2016-05-27 23:01 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
    2016-06-14 18:28 - 2016-05-27 23:00 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
    2016-06-14 18:28 - 2016-05-27 23:00 - 03585536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
    2016-06-14 18:28 - 2016-05-27 23:00 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
    2016-06-14 18:28 - 2016-05-27 23:00 - 02230272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
    2016-06-14 18:28 - 2016-05-27 23:00 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
    2016-06-14 18:28 - 2016-05-27 23:00 - 01730560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
    2016-06-14 18:28 - 2016-05-27 23:00 - 01707520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
    2016-06-14 18:28 - 2016-05-27 23:00 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
    2016-06-14 18:28 - 2016-05-27 22:58 - 07832576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
    2016-06-14 18:28 - 2016-05-27 22:58 - 04896256 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
    2016-06-14 18:28 - 2016-05-27 22:58 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
    2016-06-14 18:28 - 2016-05-27 22:58 - 02066432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
    2016-06-14 18:28 - 2016-05-27 22:58 - 01996288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
    2016-06-14 18:28 - 2016-05-27 22:57 - 02281472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
    2016-06-14 18:28 - 2016-05-27 22:55 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
    2016-06-14 18:27 - 2016-05-27 23:29 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll
    2016-06-14 18:27 - 2016-05-27 23:29 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxp.dll
    2016-06-14 18:27 - 2016-05-27 23:28 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
    2016-06-14 18:27 - 2016-05-27 23:28 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\FwRemoteSvr.dll
    2016-06-14 18:27 - 2016-05-27 23:26 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
    2016-06-14 18:27 - 2016-05-27 23:26 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
    2016-06-14 18:27 - 2016-05-27 23:24 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ndu.sys
    2016-06-14 18:27 - 2016-05-27 23:24 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
    2016-06-14 18:27 - 2016-05-27 23:24 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
    2016-06-14 18:27 - 2016-05-27 23:24 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
    2016-06-14 18:27 - 2016-05-27 23:24 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FwRemoteSvr.dll
    2016-06-14 18:27 - 2016-05-27 23:23 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
    2016-06-14 18:27 - 2016-05-27 23:23 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
    2016-06-14 18:27 - 2016-05-27 23:22 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
    2016-06-14 18:27 - 2016-05-27 23:22 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
    2016-06-14 18:27 - 2016-05-27 23:21 - 00550912 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
    2016-06-14 18:27 - 2016-05-27 23:21 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
    2016-06-14 18:27 - 2016-05-27 23:20 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
    2016-06-14 18:27 - 2016-05-27 23:19 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
    2016-06-14 18:27 - 2016-05-27 23:19 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
    2016-06-14 18:27 - 2016-05-27 23:19 - 00355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
    2016-06-14 18:27 - 2016-05-27 23:19 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
    2016-06-14 18:27 - 2016-05-27 23:17 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
    2016-06-14 18:27 - 2016-05-27 23:15 - 00293888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
    2016-06-14 18:27 - 2016-05-27 23:14 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
    2016-06-14 18:27 - 2016-05-27 23:13 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
    2016-06-14 18:27 - 2016-05-27 23:11 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
    2016-06-14 18:27 - 2016-05-27 23:02 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
    2016-06-14 18:27 - 2016-05-27 23:00 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
    2016-06-14 18:27 - 2016-05-27 23:00 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
    2016-06-14 18:27 - 2016-05-27 22:59 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
    2016-06-14 18:27 - 2016-05-27 22:53 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2016-07-09 00:37 - 2015-07-30 07:08 - 00000000 ___RD C:\Users\MacGyver\OneDrive
    2016-07-09 00:36 - 2015-02-16 14:04 - 00000000 ____D C:\Users\MacGyver\AppData\Roaming\Skype
    2016-07-09 00:36 - 2014-06-24 02:56 - 00000000 ____D C:\Users\MacGyver\AppData\Local\Spotify
    2016-07-09 00:36 - 2012-07-28 11:50 - 00004166 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B6066F4B-23E5-4C8A-B819-7A76951FBD33}
    2016-07-09 00:36 - 2012-07-28 01:34 - 00000000 ____D C:\Program Files (x86)\Steam
    2016-07-09 00:26 - 2012-08-18 12:48 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
    2016-07-09 00:23 - 2015-08-10 17:15 - 00000000 ____D C:\Users\MacGyver\Documents\College Stuff
    2016-07-09 00:17 - 2014-06-24 02:56 - 00000000 ____D C:\Users\MacGyver\AppData\Roaming\Spotify
    2016-07-09 00:11 - 2015-12-26 19:53 - 00000000 __SHD C:\Users\MacGyver\IntelGraphicsProfiles
    2016-07-09 00:11 - 2015-12-26 19:43 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
    2016-07-09 00:10 - 2014-11-29 14:15 - 00000926 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
    2016-07-09 00:09 - 2016-01-04 17:25 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
    2016-07-09 00:09 - 2016-01-04 16:45 - 00000000 ____D C:\ProgramData\NVIDIA
    2016-07-09 00:09 - 2015-10-30 01:28 - 00786432 ___SH C:\WINDOWS\system32\config\BBI
    2016-07-08 23:19 - 2013-07-06 14:49 - 00000000 ____D C:\Users\MacGyver\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\1-click run
    2016-07-08 23:14 - 2015-10-30 02:24 - 00000000 ___HD C:\Program Files\WindowsApps
    2016-07-08 23:14 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\AppReadiness
    2016-07-08 23:14 - 2015-07-30 06:52 - 00000000 ____D C:\Users\MacGyver\AppData\Local\Packages
    2016-07-08 23:12 - 2013-10-23 20:05 - 00000000 ____D C:\Users\MacGyver\AppData\Local\Battle.net
    2016-07-08 23:12 - 2013-10-23 20:05 - 00000000 ____D C:\Program Files (x86)\Battle.net
    2016-07-08 23:08 - 2012-07-28 20:27 - 00000000 ____D C:\Users\MacGyver\Documents\my games
    2016-07-08 23:07 - 2014-02-23 11:28 - 00000000 ___RD C:\Users\MacGyver\Desktop\Desktop Icons
    2016-07-08 23:01 - 2012-07-28 00:43 - 00000000 ____D C:\Users\MacGyver\AppData\Local\CrashDumps
    2016-07-08 23:00 - 2014-02-22 14:53 - 00000000 ____D C:\Program Files (x86)\PCSX2 1.2.1
    2016-07-08 23:00 - 2013-06-27 22:20 - 00000000 ____D C:\Users\MacGyver\Documents\PCSX2
    2016-07-08 18:45 - 2016-01-10 16:59 - 00003348 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForMacGyver
    2016-07-08 18:45 - 2016-01-10 16:59 - 00000368 _____ C:\WINDOWS\Tasks\HPCeeScheduleForMacGyver.job
    2016-07-08 17:43 - 2015-10-30 01:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
    2016-07-08 17:43 - 2012-08-09 16:33 - 00000000 ____D C:\ProgramData\McAfee
    2016-07-08 05:19 - 2015-10-30 02:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
    2016-07-08 05:14 - 2015-07-30 06:52 - 00000000 __RHD C:\Users\Public\AccountPictures
    2016-07-08 05:06 - 2016-01-04 16:39 - 00360648 _____ C:\WINDOWS\system32\FNTCACHE.DAT
    2016-07-08 03:55 - 2012-11-22 01:59 - 00000008 __RSH C:\ProgramData\ntuser.pol
    2016-07-08 03:46 - 2009-07-13 22:20 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
    2016-07-08 01:29 - 2012-08-22 12:28 - 00000000 ____D C:\ProgramData\Origin
    2016-07-08 01:23 - 2009-07-14 00:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
    2016-07-08 01:00 - 2013-05-11 09:36 - 00000000 ____D C:\Users\MacGyver\AppData\Local\Sony
    2016-07-08 00:58 - 2013-04-20 08:52 - 00000000 ____D C:\Program Files (x86)\JC2-MP
    2016-07-08 00:51 - 2013-01-02 22:11 - 00000000 ____D C:\Program Files (x86)\Origin Games
    2016-07-08 00:06 - 2016-01-04 16:45 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
    2016-07-08 00:06 - 2015-10-30 02:21 - 00000000 ____D C:\WINDOWS\INF
    2016-07-08 00:06 - 2012-07-28 01:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
    2016-07-07 23:47 - 2014-09-30 18:38 - 00000000 ___RD C:\Program Files (x86)\Skype
    2016-07-07 23:47 - 2012-02-15 21:36 - 00000000 ____D C:\ProgramData\Skype
    2016-07-07 23:46 - 2012-08-23 14:43 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
    2016-07-07 23:45 - 2012-09-02 16:03 - 00000000 ____D C:\Program Files (x86)\Java
    2016-07-07 23:23 - 2016-05-05 18:03 - 00000000 ____D C:\Program Files (x86)\Overwatch
    2016-07-07 23:23 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
    2016-07-06 19:57 - 2014-11-29 14:16 - 00002274 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
    2016-07-05 22:37 - 2015-10-30 04:07 - 00000000 ____D C:\WINDOWS\ShellNew
    2016-07-05 22:37 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\Provisioning
    2016-07-05 22:18 - 2014-10-16 21:05 - 00000000 ____D C:\Program Files (x86)\Heroes of the Storm
    2016-07-05 03:51 - 2013-01-31 18:55 - 00000000 ____D C:\Users\MacGyver\AppData\Local\ElevatedDiagnostics
    2016-07-05 01:35 - 2012-09-24 21:42 - 00000000 ____D C:\Program Files (x86)\Autodesk
    2016-07-02 23:53 - 2015-11-11 18:35 - 00000000 ____D C:\Users\MacGyver\Downloads\DS4Windows
    2016-06-30 22:13 - 2015-12-21 18:56 - 13617096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
    2016-06-29 17:39 - 2016-01-28 17:50 - 00040084 _____ C:\WINDOWS\system32\nvinfo.pb
    2016-06-29 17:39 - 2015-12-21 18:56 - 20393528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
    2016-06-29 17:39 - 2015-12-21 18:56 - 17747392 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
    2016-06-29 17:39 - 2015-12-21 18:56 - 14472848 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
    2016-06-29 17:39 - 2015-12-21 18:56 - 03814512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
    2016-06-29 17:39 - 2015-12-21 18:56 - 03374720 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
    2016-06-29 17:39 - 2015-12-21 18:56 - 00214592 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
    2016-06-29 12:50 - 2016-01-04 16:45 - 06363072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
    2016-06-29 12:50 - 2016-01-04 16:45 - 02455608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
    2016-06-29 12:50 - 2016-01-04 16:45 - 01764408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
    2016-06-29 12:50 - 2016-01-04 16:45 - 01352760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
    2016-06-29 12:50 - 2016-01-04 16:45 - 00534072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
    2016-06-29 12:50 - 2016-01-04 16:45 - 00393784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
    2016-06-29 12:50 - 2016-01-04 16:45 - 00081856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
    2016-06-29 12:50 - 2016-01-04 16:45 - 00071224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
    2016-06-27 15:35 - 2012-11-13 22:33 - 00000000 ____D C:\Program Files (x86)\Mozilla FireFox
    2016-06-27 14:39 - 2015-12-20 17:31 - 00000000 ____D C:\Users\MacGyver\Desktop\School 2015
    2016-06-27 02:41 - 2015-10-30 02:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
    2016-06-27 02:40 - 2015-10-30 02:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
    2016-06-27 02:37 - 2015-10-30 02:24 - 00000000 ____D C:\Program Files\Common Files\System
    2016-06-27 02:37 - 2009-07-13 21:34 - 00000478 _____ C:\WINDOWS\win.ini
    2016-06-27 01:58 - 2013-03-14 01:38 - 00000000 ____D C:\Program Files\Microsoft Silverlight
    2016-06-27 01:58 - 2013-03-14 01:38 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
    2016-06-27 01:56 - 2016-01-04 16:51 - 00000000 ____D C:\Users\MacGyver
    2016-06-25 02:11 - 2012-08-22 12:29 - 00000000 ____D C:\Users\MacGyver\AppData\Roaming\Origin
    2016-06-25 00:55 - 2012-08-22 12:28 - 00000000 ____D C:\Program Files (x86)\Origin
    2016-06-24 16:11 - 2016-01-04 16:46 - 00000000 ____D C:\ProgramData\Razer
    2016-06-24 14:50 - 2013-03-14 01:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
    2016-06-22 22:22 - 2012-10-15 16:20 - 00003276 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForMACGYVER-HP$
    2016-06-22 22:22 - 2012-10-15 16:20 - 00000348 _____ C:\WINDOWS\Tasks\HPCeeScheduleForMACGYVER-HP$.job
    2016-06-22 10:16 - 2016-01-04 16:45 - 07208075 _____ C:\WINDOWS\system32\nvcoproc.bin
    2016-06-17 18:59 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\rescache
    2016-06-17 00:27 - 2012-07-28 01:44 - 00000000 ____D C:\Program Files (x86)\StarCraft II
    2016-06-16 21:26 - 2016-04-07 17:26 - 09717952 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe
    2016-06-16 17:44 - 2015-10-30 02:11 - 00000000 ____D C:\WINDOWS\CbsTemp
    2016-06-16 13:00 - 2015-10-30 02:24 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
    2016-06-16 13:00 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
    2016-06-16 13:00 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\bcastdvr
    2016-06-14 19:54 - 2013-08-15 03:01 - 00000000 ____D C:\WINDOWS\system32\MRT
    2016-06-14 19:41 - 2012-07-28 19:05 - 142482544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
    2016-06-14 15:01 - 2015-12-01 18:24 - 00112216 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
    2016-06-14 15:01 - 2014-06-02 22:14 - 01756424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
    2016-06-14 15:01 - 2014-06-02 22:14 - 01316184 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
    2016-06-14 15:01 - 2013-10-28 17:54 - 01767944 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
    2016-06-14 15:01 - 2013-10-28 17:54 - 01377800 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
    2016-06-14 13:33 - 2015-10-30 02:26 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
    2016-06-14 13:33 - 2015-10-30 02:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

    ==================== Files in the root of some directories =======

    2015-06-19 16:09 - 2015-06-19 16:09 - 0002724 _____ () C:\Users\MacGyver\AppData\Roaming\TargetInvocationLog.txt
    2015-12-27 09:17 - 2016-01-04 19:00 - 0000000 _____ () C:\Users\MacGyver\AppData\Local\Driver_LOM_8161Present.flag
    2013-12-26 13:27 - 2013-12-26 13:27 - 0000036 _____ () C:\Users\MacGyver\AppData\Local\housecall.guid.cache
    2013-11-25 22:14 - 2015-06-25 01:48 - 0007597 _____ () C:\Users\MacGyver\AppData\Local\resmon.resmoncfg
    2012-07-28 00:31 - 2012-07-28 00:31 - 0000003 _____ () C:\Users\MacGyver\AppData\Local\user_data.ini
    2012-07-28 00:05 - 2012-07-28 00:05 - 0017408 _____ () C:\Users\MacGyver\AppData\Local\WebpageIcons.db
    2015-07-30 06:07 - 2015-07-30 06:07 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
    2012-07-28 15:21 - 2012-09-24 21:44 - 0000381 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

    Some files in TEMP:
    ====================
    C:\Users\MacGyver\AppData\Local\Temp\0207221467973106mcinst.exe
    C:\Users\MacGyver\AppData\Local\Temp\McCSPInstall.dll


    ==================== Bamital & volsnap =================

    (There is no automatic fix for files that do not pass verification.)

    C:\WINDOWS\system32\winlogon.exe => File is digitally signed
    C:\WINDOWS\system32\wininit.exe => File is digitally signed
    C:\WINDOWS\explorer.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
    C:\WINDOWS\system32\svchost.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
    C:\WINDOWS\system32\services.exe => File is digitally signed
    C:\WINDOWS\system32\User32.dll => File is digitally signed
    C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
    C:\WINDOWS\system32\userinit.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
    C:\WINDOWS\system32\rpcss.dll => File is digitally signed
    C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
    C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
    C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2016-07-01 19:26

    ==================== End of FRST.txt ============================
     

  3. to hide this advert.

  4. 2016/07/09
    PlanetAlps

    PlanetAlps Member Thread Starter

    Joined:
    2016/07/09
    Messages:
    47
    Likes Received:
    0
    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-07-2016
    Ran by MacGyver (2016-07-09 00:37:53)
    Running from C:\Users\MacGyver\Downloads
    Windows 10 Home Version 1511 (X64) (2016-01-04 22:30:42)
    Boot Mode: Normal
    ==========================================================


    ==================== Accounts: =============================

    Administrator (S-1-5-21-3964298893-2401237506-3764420300-500 - Administrator - Disabled)
    DefaultAccount (S-1-5-21-3964298893-2401237506-3764420300-503 - Limited - Disabled)
    Guest (S-1-5-21-3964298893-2401237506-3764420300-501 - Limited - Disabled) => C:\Users\Guest
    HomeGroupUser$ (S-1-5-21-3964298893-2401237506-3764420300-1002 - Limited - Enabled)
    MacGyver (S-1-5-21-3964298893-2401237506-3764420300-1000 - Administrator - Enabled) => C:\Users\MacGyver

    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AV: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556}
    AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB}
    FW: McAfee Firewall (Enabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D}

    ==================== Installed Programs ======================

    (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    7-Zip 16.02 (x64) (HKLM\...\7-Zip) (Version: 16.02 - Igor Pavlov)
    Acrobat.com (HKLM-x32\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1.377 - Adobe Systems Incorporated)
    Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
    ActiveGS (HKLM-x32\...\{F576BBE9-11D0-4F02-B8F0-7CCA9C159937}) (Version: 3.5.903 - Second Sight Software/FTA)
    Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.016.20045 - Adobe Systems Incorporated)
    Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.192 - Adobe Systems Incorporated)
    Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
    Akamai NetSession Interface (HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\Akamai) (Version: - Akamai Technologies, Inc)
    AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
    Amnesia: The Dark Descent (HKLM-x32\...\Steam App 57300) (Version: - )
    Apple Application Support (32-bit) (HKLM-x32\...\{26356515-5821-40FA-9C3D-9785052A1062}) (Version: 4.3.1 - Apple Inc.)
    Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.)
    Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
    Arma 2: DayZ Mod (HKLM-x32\...\Steam App 224580) (Version: - )
    ARMA 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version: - Bohemia Interactive)
    Arma 3 (HKLM-x32\...\Steam App 107410) (Version: - Bohemia Interactive)
    ASRock App Charger v1.0.5 (HKLM\...\ASRock App Charger_is1) (Version: - ASRock Inc.)
    ASRock eXtreme Tuner v0.1.122 (HKLM-x32\...\ASRock eXtreme Tuner_is1) (Version: - )
    ASRock InstantBoot v1.29 (HKLM-x32\...\ASRock InstantBoot_is1) (Version: - )
    Assassin's Creed Brotherhood (HKLM-x32\...\Steam App 48190) (Version: - Ubisoft Montreal)
    Assassin's Creed Syndicate (HKLM-x32\...\Uplay Install 1875) (Version: 1.50 - Ubisoft)
    Atlas Native Client (HKLM-x32\...\{D355A686-EC21-4232-970C-B21252628B68}) (Version: 1.12.0 - Artillery Games, Inc.)
    Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
    Batman: Arkham City GOTY (HKLM-x32\...\Steam App 200260) (Version: - )
    Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
    BattleBlock Theater (HKLM-x32\...\Steam App 238460) (Version: - The Behemoth)
    Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
    BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version: - )
    BIT.TRIP RUNNER (HKLM-x32\...\Steam App 63710) (Version: - Gaijin Games)
    Bluetooth by hp (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.8200 - Broadcom Corporation)
    Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
    Broadcom Gigabit NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 14.6.1.3 - Broadcom Corporation)
    Bubble Wrap (HKLM-x32\...\{5BFFDDEB-AFD7-499F-BB13-7A6EAD927CDA}_is1) (Version: 1.0.0.0 - XM Asia Pacific Pte Ltd)
    Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version: - Infinity Ward)
    Call of Duty: Modern Warfare 2 (HKLM-x32\...\Steam App 10180) (Version: - Infinity Ward)
    Call of Duty: World at War (HKLM-x32\...\Steam App 10090) (Version: - Treyarch)
    Cities: Skylines (HKLM-x32\...\Steam App 255710) (Version: - Colossal Order Ltd.)
    Cook, Serve, Delicious! (HKLM-x32\...\Steam App 247020) (Version: - Vertigo Gaming)
    Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - )
    Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version: - Valve)
    Counter-Strike: Source Beta (HKLM-x32\...\Steam App 260) (Version: - )
    CPUID CPU-Z G1 1.75 (HKLM\...\CPUID CPU-Z G1_is1) (Version: 1.75 - CPUID, Inc.)
    Crusader Kings II (HKLM-x32\...\Steam App 203770) (Version: - Paradox Development Studio)
    Crysis®3 MP Open Beta (HKLM-x32\...\{02454664-23E6-46B3-9CB3-30870AE3645E}) (Version: 1.0.0.0 - Electronic Arts)
    D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
    DARK SOULS III (HKLM\...\Steam App 374320) (Version: - FromSoftware, Inc.)
    Dark Souls: Prepare to Die Edition (HKLM-x32\...\Steam App 211420) (Version: - )
    DARK SOULS™ II (HKLM\...\Steam App 236430) (Version: - FromSoftware, Inc)
    DayZ (HKLM\...\Steam App 221100) (Version: - Bohemia Interactive)
    Deus Ex: Human Revolution (HKLM-x32\...\Steam App 28050) (Version: - Eidos Montreal)
    DirectX for Managed Code Update (Summer 2004) (x32 Version: 9.02.2904 - Microsoft) Hidden
    Don't Starve Together Beta (HKLM-x32\...\Steam App 322330) (Version: - Klei Entertainment)
    Driver Fusion (HKLM-x32\...\{100C8F3B-82D6-4B14-BB7A-5E8C3FF810C8}_is1) (Version: 1.5.0 - Treexy)
    Dual-Core Optimizer (HKLM-x32\...\{9FD6F1A8-5550-46AF-8509-271DF0E768B5}) (Version: 1.1.4.0169 - AMD)
    Duck Game (HKLM-x32\...\Steam App 312530) (Version: - Landon Podbielski)
    Endless Legend (HKLM-x32\...\Steam App 289130) (Version: - AMPLITUDE Studios)
    ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
    Etron USB3.0 Host Controller (x32 Version: 0.104 - Etron Technology) Hidden
    EVGA OC Scanner X 2.2.3 (HKLM-x32\...\{CB92C58B-7BDF-48E3-92E3-51768DCCA585}_is1) (Version: - EVGA)
    Façade (HKLM-x32\...\{24E34264-D483-477C-A9A0-4E53F69834CF}) (Version: 1.1.2 - Procedural Arts)
    Fallout 4 (HKLM-x32\...\Steam App 377160) (Version: - Bethesda Game Studios)
    Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version: - Bethesda Softworks)
    FARO LS 1.1.406.58 (HKLM-x32\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production)
    Flixster (HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\404b9336c7552828) (Version: 1.4.1.78 - Flixster)
    From Dust (HKLM-x32\...\Steam App 33460) (Version: - )
    FTL: Faster Than Light (HKLM-x32\...\Steam App 212680) (Version: - )
    Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Team Garry)
    Garry's Mod 13 Beta (HKLM-x32\...\Steam App 4010) (Version: - TEAM GARRY)
    Golf With Friends (HKLM\...\Steam App 431240) (Version: - Blacklight Interactive)
    Google Chrome (HKLM-x32\...\Google Chrome) (Version: 51.0.2704.106 - Google Inc.)
    Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden
    Grand Theft Auto IV (HKLM-x32\...\Steam App 12210) (Version: - Rockstar North)
    Grand Theft Auto: Episodes from Liberty City (HKLM-x32\...\Steam App 12220) (Version: - Rockstar North / Toronto)
    Grow Home (HKLM-x32\...\Steam App 323320) (Version: - Reflections, a Ubisoft Studio)
    Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version: - NCsoft Corporation, Ltd.)
    Half-Life 2 (HKLM-x32\...\Steam App 220) (Version: - Valve)
    Half-Life 2: Lost Coast (HKLM-x32\...\Steam App 340) (Version: - Valve)
    Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
    Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment)
    Herramientas de corrección de Microsoft Office 2016: español (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
    Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
    Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
    Hotline Miami (HKLM-x32\...\Steam App 219150) (Version: - Dennaton Games)
    HP Application Assistant (HKLM\...\{B34A07DD-C6F7-414A-AE63-01019482EAF0}) (Version: 1.0.393.3870 - Hewlett-Packard)
    HP Calendar (HKLM-x32\...\{2B38E0FA-D8A5-4EBF-A018-E3C1C8E7A2E2}) (Version: 5.1.4245.23508 - Hewlett-Packard)
    HP Clock (HKLM-x32\...\{0EEC4E49-D4C2-4E23-87F2-B5641F1A09E4}) (Version: 5.1.4244.16367 - Hewlett-Packard)
    HP LinkUp (HKLM-x32\...\{7E750542-55BC-4300-8B7B-AC2A762FB435}) (Version: 2.01.029 - Hewlett-Packard)
    HP Magic Canvas Tutorials (HKLM-x32\...\{858FCB65-7C6D-4BA4-AD80-A3CB3744CE09}_is1) (Version: 5.0.0.3 - Hewlett-Packard)
    HP Notes (HKLM-x32\...\{86BAB08A-5E66-4C53-82E3-C1E91673C7CA}) (Version: 5.1.4274.30382 - Hewlett-Packard)
    HP Odometer (HKLM-x32\...\{B8AC1A89-FFD1-4F97-8051-E505A160F562}) (Version: 2.10.0000 - Hewlett-Packard)
    HP RSS (HKLM-x32\...\{452479C5-0118-48E9-AA69-0A7339F95FC8}) (Version: 5.1.4289.23799 - Hewlett-Packard)
    HP Setup (HKLM-x32\...\{F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1}) (Version: 9.0.15130.3904 - Hewlett-Packard Company)
    HP Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.2.15145.3905 - Hewlett-Packard Company)
    HP Support Assistant (HKLM-x32\...\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}) (Version: 8.2.8.25 - Hewlett-Packard Company)
    HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 11.00.0001 - Hewlett-Packard)
    HP Support Solutions Framework (HKLM-x32\...\{55065080-504F-43BB-BE00-36B80D7D39A5}) (Version: 12.4.18.7 - Hewlett-Packard Company)
    HP TouchSmart RecipeBox (HKLM-x32\...\{20714B53-FC73-4F9C-9687-49EB237D6FD7}) (Version: 3.0.3830.27730 - Hewlett-Packard)
    HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
    HP Vision Hardware Diagnostics (HKLM\...\{D79A02E9-6713-4335-9668-AAC7474C0C0E}) (Version: 2.12.1.0 - Hewlett-Packard)
    HP Weather (HKLM-x32\...\{776CC95E-8160-401B-AC79-164822AA8306}) (Version: 5.1.4245.22595 - Hewlett-Packard)
    Intel(R) Chipset Device Software (x32 Version: 10.1.1.8 - Intel(R) Corporation) Hidden
    Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1158 - Intel Corporation)
    Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4331 - Intel Corporation)
    Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.5.0.1081 - Intel Corporation)
    iolo technologies' System Mechanic (HKLM-x32\...\{55FD1D5A-7AEF-4DA3-8FAF-A71B2A52FFC7}_is1) (Version: 15.5.0 - iolo technologies, LLC)
    Java 8 Update 91 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.15 - Oracle Corporation)
    JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
    Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
    Just Cause 2 (HKLM-x32\...\Steam App 8190) (Version: - Avalanche Studios)
    Just Cause 2: Multiplayer Mod (HKLM-x32\...\Steam App 259080) (Version: - JC2-MP Team)
    Killer Bandwidth Control Filter Driver (Version: 1.1.54.1334 - Rivet Networks) Hidden
    Killer E220x Drivers (Version: 1.1.54.1334 - Rivet Networks) Hidden
    Killer Performance Suite (HKLM-x32\...\{7335EB04-8B27-4CA9-AF83-A3851E894770}) (Version: 1.1.54.1334 - Rivet Networks)
    Kobo (HKLM-x32\...\Kobo) (Version: 2.0.3 - Kobo Inc.)
    KRISTAL Audio Engine (HKLM-x32\...\KRISTAL Audio Engine) (Version: - )
    LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.4507 - CyberLink Corp.)
    LabelPrint (x32 Version: 2.5.4507 - CyberLink Corp.) Hidden
    LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
    League Client alpha pbe (HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\League Client alpha pbe 1.0) (Version: 1.0 - Riot Games, Inc)
    League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
    League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden
    Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)
    LIMBO (HKLM-x32\...\Steam App 48000) (Version: - )
    Magicka (HKLM-x32\...\Steam App 42910) (Version: - Arrowhead Game Studios AB)
    McAfee Total Protection (HKLM-x32\...\MSC) (Version: 14.0.9042 - McAfee, Inc.)
    McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.0.220 - McAfee, Inc.)
    Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
    Metric Converter (HKLM-x32\...\{D0661463-50F7-4A1E-83CB-37CC590589AE}_is1) (Version: 1.0.0.0 - XM Asia Pacific Pte Ltd)
    Metro 2033 (HKLM-x32\...\Steam App 43110) (Version: - 4A Games)
    Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
    Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
    Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
    Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
    Microsoft Mathematics (HKLM-x32\...\{4D090F70-6F08-4B60-9357-A1DFD4458F09}) (Version: 4.0 - Microsoft Corporation)
    Microsoft Office Professional Plus 2016 (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
    Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)
    Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
    Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
    Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
    Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
    Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
    Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
    Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
    Mirror's Edge (HKLM-x32\...\Steam App 17410) (Version: - DICE)
    Monaco (HKLM-x32\...\Steam App 113020) (Version: - )
    Mortal Kombat X (HKLM-x32\...\Steam App 307780) (Version: - NetherRealm Studios)
    Mount & Blade: Warband (HKLM-x32\...\Steam App 48700) (Version: - TaleWorlds Entertainment)
    MSI Afterburner 2.3.1 (HKLM-x32\...\Afterburner) (Version: 2.3.1 - MSI Co., LTD)
    MSI Kombustor 2.5.0 (HKLM-x32\...\{0B7C79A5-5CB2-4ABD-A9C1-92A6213CE8DD}_is1) (Version: - MSI Co., LTD)
    MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
    MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
    Nether (HKLM-x32\...\Steam App 247730) (Version: - Phosphor Games Studio)
    Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.49.7 - Black Tree Gaming)
    NVIDIA 3D Vision Controller Driver 364.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 364.44 - NVIDIA Corporation)
    NVIDIA 3D Vision Driver 368.69 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 368.69 - NVIDIA Corporation)
    NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation)
    NVIDIA Graphics Driver 368.69 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 368.69 - NVIDIA Corporation)
    NVIDIA HD Audio Driver 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation)
    NVIDIA PhysX (Legacy) (HKLM-x32\...\{FAAC26AD-73BA-40CE-86AA-C9213F9E064A}) (Version: 9.13.0604 - NVIDIA Corporation)
    NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
    Oasis2Service 1.0 (HKLM-x32\...\{E50FC5DB-7CBD-407D-A46E-0C13E45BC386}) (Version: 1.0.0 - DDNi)
    OffScrub_O15msi_OFFICE15.0090 (HKLM\...\OFFICE15.0090) (Version: - )
    OffScrub_O15msi_OFFICE15.00E1 (HKLM\...\OFFICE15.00E1) (Version: - )
    OffScrub_O15msi_OFFICE15.00E2 (HKLM\...\OFFICE15.00E2) (Version: - )
    OffScrub_O15msi_OFFICE15.012B (HKLM\...\OFFICE15.012B) (Version: - )
    OffScrub_O15msi_OFFICE15.ACCESS (HKLM\...\OFFICE15.ACCESS) (Version: - )
    OffScrub_O15msi_OFFICE15.AccessSetupMetadata (HKLM\...\OFFICE15.AccessSetupMetadata) (Version: - )
    OffScrub_O15msi_OFFICE15.EXCEL (HKLM\...\OFFICE15.EXCEL) (Version: - )
    OffScrub_O15msi_OFFICE15.Groove (HKLM\...\OFFICE15.Groove) (Version: - )
    OffScrub_O15msi_OFFICE15.InfoPath (HKLM\...\OFFICE15.InfoPath) (Version: - )
    OffScrub_O15msi_OFFICE15.Office64 (HKLM\...\OFFICE15.Office64) (Version: - )
    OffScrub_O15msi_OFFICE15.ONENOTE (HKLM\...\OFFICE15.ONENOTE) (Version: - )
    OffScrub_O15msi_OFFICE15.Outlook (HKLM\...\OFFICE15.Outlook) (Version: - )
    OffScrub_O15msi_OFFICE15.PowerPoint (HKLM\...\OFFICE15.PowerPoint) (Version: - )
    OffScrub_O15msi_OFFICE15.Proof (HKLM\...\OFFICE15.Proof) (Version: - )
    OffScrub_O15msi_OFFICE15.Proofing (HKLM\...\OFFICE15.Proofing) (Version: - )
    OffScrub_O15msi_OFFICE15.Publisher (HKLM\...\OFFICE15.Publisher) (Version: - )
    OffScrub_O15msi_OFFICE15.Shared (HKLM\...\OFFICE15.Shared) (Version: - )
    OffScrub_O15msi_OFFICE15.SharedSetupMetadata (HKLM\...\OFFICE15.SharedSetupMetadata) (Version: - )
    OffScrub_O15msi_OFFICE15.Word (HKLM\...\OFFICE15.Word) (Version: - )
    Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )
    OpenAL (HKLM-x32\...\OpenAL) (Version: - )
    opensource (x32 Version: 1.0.14960.3876 - Your Company Name) Hidden
    Orcs Must Die! (HKLM-x32\...\Steam App 102600) (Version: - )
    Orcs Must Die! 2 (HKLM-x32\...\Steam App 201790) (Version: - )
    Origin (HKLM-x32\...\Origin) (Version: 9.12.1.43352 - Electronic Arts, Inc.)
    Outils de vérification linguistique 2016 de Microsoft Office - Français (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
    Overgrowth (HKLM-x32\...\Steam App 25000) (Version: - Wolfire)
    Overgrowth (remove only) (HKLM-x32\...\OVERGROWTH) (Version: - )
    Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
    Papers, Please (HKLM-x32\...\Steam App 239030) (Version: - 3909)
    PDF Complete Special Edition (HKLM-x32\...\PDF Complete) (Version: 4.0.65 - PDF Complete, Inc)
    Perforce Server Components (HKLM\...\{E320C837-5868-411C-B0B6-BDB74BFD628D}) (Version: 122.55.1823 - Perforce Software)
    Planetary Annihilation (HKLM-x32\...\Steam App 233250) (Version: - Uber Entertainment)
    Play withSIX (HKLM-x32\...\{61873A7A-38DD-4973-90A9-69E4560A1DC6}) (Version: 1.00.0064 - SIX Networks)
    PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
    PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
    Portal (HKLM-x32\...\Steam App 400) (Version: - Valve)
    Portal 2 (HKLM-x32\...\Steam App 620) (Version: - Valve)
    Portal 2 Publishing Tool (HKLM-x32\...\Steam App 644) (Version: - )
    Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.5706 - CyberLink Corp.)
    Power2Go (x32 Version: 6.1.5706 - CyberLink Corp.) Hidden
    PressReader (HKLM-x32\...\{912CED74-88D3-4C5B-ACB0-132318649765}) (Version: 5.11.0721.0 - NewspaperDirect Inc.)
    Project Zomboid (HKLM-x32\...\Steam App 108600) (Version: - The Indie Stone)
    Python 2.5.4 (HKLM-x32\...\{2E0DFC24-7C4B-4DCF-BCC7-81C513BED3BC}) (Version: 2.5.4150 - Python Software Foundation)
    QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
    RAIDXpert (HKLM-x32\...\InstallShield_{8B76B8E9-F773-4B75-A08C-120079EB765E}) (Version: 3.3.1540.9 - AMD)
    RAIDXpert (x32 Version: 3.3.1540.9 - AMD) Hidden
    Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 2.20.15.616 - Razer Inc.)
    Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.44.421.2011 - Realtek)
    Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7553 - Realtek Semiconductor Corp.)
    Receiver (HKLM-x32\...\Steam App 234190) (Version: - )
    Recovery Manager (x32 Version: 5.5.0.4424 - CyberLink Corp.) Hidden
    Remote Graphics Receiver (HKLM-x32\...\{16FC3056-90C0-4757-8A68-64D8DA846ADA}) (Version: 5.4.5 - Hewlett-Packard)
    Risk of Rain (HKLM-x32\...\Steam App 248820) (Version: - )
    Rogue Legacy (HKLM-x32\...\Steam App 241600) (Version: - Cellar Door Games)
    Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version: - Volition)
    Samson SoftPre (HKLM-x32\...\{AC042F3D-DAAD-4F76-B857-396EF81AB197}) (Version: 1.0.22 - Samson Technologies Corp.)
    SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)
    SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
    SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
    SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 4.0.96.5684 - Electronic Arts)
    Skype™ 7.25 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.25.106 - Skype Technologies S.A.)
    Sniper Elite V2 (HKLM-x32\...\Steam App 63380) (Version: - Rebellion)
    SpeedRunners (HKLM-x32\...\Steam App 207140) (Version: - DoubleDutch Games)
    Spelunky (HKLM-x32\...\Steam App 239350) (Version: - )
    Spider-man (HKLM-x32\...\Spider-Man) (Version: - )
    SPORE™ (HKLM-x32\...\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}) (Version: 1.00.0000 - Electronic Arts)
    Spot (HKLM-x32\...\{3D171340-B528-42E0-92E4-BDA7AEEF6F32}_is1) (Version: 1.0.0.0 - XM Asia Pacific Pte Ltd)
    Spotify (HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\Spotify) (Version: 1.0.32.96.g3c8a06e6 - Spotify AB)
    Starbound (HKLM-x32\...\Steam App 211820) (Version: - )
    StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
    StarCraft II Public Test (HKLM-x32\...\StarCraft II Public Test) (Version: - Blizzard Entertainment)
    Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
    Stronghold (HKLM-x32\...\{C917BA70-28A3-4C74-B163-41FD8C8E1A5A}) (Version: 1.20.0000 - Firefly Studios)
    Stronghold 2 (HKLM-x32\...\{16D2C649-CBA8-44EE-B730-12584667D487}) (Version: 1.40.1000 - Firefly Studios)
    Stronghold Crusader Extreme (HKLM-x32\...\{8C3727F2-8E37-49E4-820C-03B1677F53B6}) (Version: 1.20.0000 - Firefly Studios)
    Stronghold Legends (HKLM-x32\...\{66A405D2-BA14-4594-BF36-B3B544F0754E}) (Version: 1.20.0000 - Firefly Studios)
    Sublime Text 2.0.2 (HKLM\...\Sublime Text 2_is1) (Version: - )
    Super Hexagon (HKLM-x32\...\Steam App 221640) (Version: - Terry Cavanagh)
    Super Meat Boy (HKLM-x32\...\Steam App 40800) (Version: - )
    Superbrothers: Sword & Sworcery EP (HKLM-x32\...\Steam App 204060) (Version: - )
    Terraria (HKLM-x32\...\Steam App 105600) (Version: - )
    The Binding of Isaac: Rebirth (HKLM-x32\...\Steam App 250900) (Version: - Nicalis, Inc.)
    The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
    The Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.67.2 - Electronic Arts)
    The Testament of Sherlock Holmes (HKLM-x32\...\Steam App 205650) (Version: - Frogwares)
    The Walking Dead (HKLM-x32\...\Steam App 207610) (Version: - )
    This War of Mine (HKLM-x32\...\Steam App 282070) (Version: - 11 bit studios)
    Thomas Was Alone (HKLM-x32\...\Steam App 220780) (Version: - )
    TI Connect™ (HKLM-x32\...\{D06BA64C-4447-49B4-B99D-E85BEA9E1035}) (Version: 4.0.0.218 - Texas Instruments Inc.)
    TI Connect™ CE (HKLM-x32\...\{E22A8EDD-B273-443C-B2C1-782AEA6D746E}) (Version: 5.1.1.92 - Texas Instruments Inc.)
    Trouble In The Manor (HKLM-x32\...\Steam App 338530) (Version: - Charyb Games)
    Tunngle beta (HKLM-x32\...\Tunngle beta_is1) (Version: - Tunngle.net GmbH)
    Unmechanical (HKLM-x32\...\Steam App 211180) (Version: - )
    Unturned (HKLM-x32\...\Steam App 304930) (Version: - Nelson Sexton)
    Update for Skype for Business 2016 (KB3115268) 64-Bit Edition (HKLM\...\{90160000-0011-0000-1000-0000000FF1CE}_Office16.PROPLUS_{5D633E34-0FA8-4C3F-8A16-D1A6C33C7015}) (Version: - Microsoft)
    Update for Skype for Business 2016 (KB3115268) 64-Bit Edition (HKLM\...\{90160000-00C1-0000-1000-0000000FF1CE}_Office16.PROPLUS_{5D633E34-0FA8-4C3F-8A16-D1A6C33C7015}) (Version: - Microsoft)
    Update for Skype for Business 2016 (KB3115268) 64-Bit Edition (HKLM\...\{90160000-012B-0409-1000-0000000FF1CE}_Office16.PROPLUS_{5D633E34-0FA8-4C3F-8A16-D1A6C33C7015}) (Version: - Microsoft)
    Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft)
    Visual C++ 8.0 Runtime Setup Package (x64) (HKLM-x32\...\{2FDBBCEA-62DB-45F4-B6E5-0E1FB2A1F29D}) (Version: 9.0.0.623 - AVG Technologies CZ, s.r.o.)
    Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
    Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
    Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
    Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
    Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.5-3 - Wacom Technology Corp.)
    Warframe (HKLM-x32\...\Steam App 230410) (Version: - Digital Extremes)
    WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
    WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
    Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
    Windows Driver Package - Texas Instruments Inc. (SilvrLnk) USB (06/11/2009 1.0.0.0) (HKLM\...\EC3E466026556D3EB760B01C4772277614354E11) (Version: 06/11/2009 1.0.0.0 - Texas Instruments Inc.)
    Windows Driver Package - Texas Instruments Inc. (TIEHDUSB) USB (09/02/2009 1.0.0.1) (HKLM\...\7511B29C86C398B4D11A0B0E4176CAD68D1B7057) (Version: 09/02/2009 1.0.0.1 - Texas Instruments Inc.)
    Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
    Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
    Worms Clan Wars (HKLM-x32\...\Steam App 233840) (Version: - Team17 Digital Ltd)
    Worms Revolution (HKLM-x32\...\Steam App 200170) (Version: - Team17 Digital Ltd.)
    XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version: - Firaxis Games)
    Zinio Reader 4 (HKLM-x32\...\ZinioReader4) (Version: 4.2.4164 - Zinio LLC)
    Zinio Reader 4 (x32 Version: 4.2.4164 - Zinio LLC) Hidden

    ==================== Custom CLSID (Whitelisted): ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    CustomCLSID: HKU\S-1-5-21-3964298893-2401237506-3764420300-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\MacGyver\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileCoAuth.exe (Microsoft Corporation)

    ==================== Scheduled Tasks (Whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    Task: {004C38E6-D883-497C-92A5-93B913FC9B32} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-03-02] (Hewlett-Packard)
    Task: {042937CB-5476-4C2A-8480-C5E036578E2B} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
    Task: {05F37BF7-7CCC-45A2-9B15-5749644FBB26} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
    Task: {096CA418-0168-412A-A77A-79AB0BAEFF26} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2016-02-18] (Hewlett-Packard Company)
    Task: {0A45C0C6-5F52-476A-AEE4-9FC309FAE2D4} - System32\Tasks\Norton Identity Safe\Norton Error Analyzer => C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.0.43\SymErr.exe
    Task: {0B22810D-53F2-4238-9C6F-DC561C94B979} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
    Task: {0BF6EBD9-C364-459E-A04C-10FE65954A7A} - System32\Tasks\{7306452F-917A-4D33-9B23-8AF2A5522BA4} => pcalua.exe -a F:\Setup.exe -d F:\
    Task: {0E692092-4680-4230-96C7-59E4EB9E7CA7} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
    Task: {10C8B4DA-3FA3-4915-AB0B-B40EB108CD74} - System32\Tasks\iolo DelOnReboot => /c IF EXIST C:\ProgramData\iolo\ops\smrr.dll del /f C:\ProgramData\iolo\ops\smrr.dll
    Task: {1628B678-E893-42A9-9FAC-F36927C71B6A} - System32\Tasks\SidebarExecute => C:\Program Files\Windows Sidebar\sidebar.exe
    Task: {2C1E3A48-53CE-4C91-944F-C8AD59F08B5A} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2015-07-31] (Microsoft Corporation)
    Task: {2DCF42BA-6AE4-4390-9CAA-3147078A0817} - System32\Tasks\McAfee\McAfee Auto Maintenance Task Agent
    Task: {2DFE69AF-A909-4F60-8A3C-AD8E0917AD88} - System32\Tasks\Intel Security DAT Reputation (AMCore) Post DAT update endpoint safety pulse => C:\Program Files\Common Files\McAfee\AMContent\scanners\x86_64\datrep\54.0\mcdatrep.exe [2016-01-27] (McAfee, Inc.)
    Task: {2F7E76D0-BB3A-426A-A6A9-823FFB66A1E9} - System32\Tasks\{74F8D666-7023-418B-A5CC-225CABE8E78E} => pcalua.exe -a "C:\Program Files (x86)\Steam\steamapps\common\MortalKombat_KompleteEdition\_CommonRedist\vcredist\2008\vcredist_x86.exe" -d "C:\Program Files (x86)\Steam\steamapps\common\MortalKombat_KompleteEdition\_CommonRedist\vcredist\2008 "
    Task: {35A742C1-2971-4943-A2E3-29AD462FFAAC} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
    Task: {3ACF76E4-F5DF-431C-BEA2-BE70CF85AE6D} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
    Task: {425B60B1-3C31-4BC3-AC87-C3F59A48F5B4} - System32\Tasks\McAfeeLogon => C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe [2016-04-23] (McAfee, Inc.)
    Task: {43FE9EFF-B8FB-4026-993E-AEAB9D7604BB} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
    Task: {448270B0-5154-498D-B24D-AE71E7DB5927} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
    Task: {4483757A-F84B-41BE-917B-5DE61561D2A9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-05-09] (Hewlett-Packard)
    Task: {46487538-A29E-4D4B-8CD3-F43CE0D0BA86} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-05-20] (Oracle Corporation)
    Task: {48F4B1C1-D91A-4239-80ED-11E4FEB92C4B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
    Task: {4E7A0622-FE37-4249-8C23-9D6A5C1DEC96} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
    Task: {4EF9C94A-BEB8-4886-8EFB-6F8DC72DE967} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
    Task: {51709B5E-45B0-4553-9B06-504DACCD8C15} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-06-16] (Adobe Systems Incorporated)
    Task: {53ABC437-1B0B-41C8-BFA8-0949927B2CAE} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
    Task: {55FDF64B-3C5A-49F4-9EC4-597B575CA285} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
    Task: {57A2211B-65D5-4F89-AA85-32A26B634EAA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
    Task: {5E031EC6-EC75-4619-8376-9AF578040064} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
    Task: {60C6872D-D8C5-4B88-8980-45D08F81447E} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
    Task: {65978FE5-1B85-47BA-B835-479DC765791E} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
    Task: {66373DB8-4A8D-49A8-88A9-7AC45A9257AE} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
    Task: {694FC36C-1D21-44BA-970C-1800BB5708F0} - System32\Tasks\{4AC0CD17-8B0E-460F-A673-7F5399D5171B} => pcalua.exe -a "C:\Users\MacGyver\Downloads\Bridge IT V1.0\BRIDGEIT\RegSetup.exe" -d "C:\Users\MacGyver\Downloads\Bridge IT V1.0\BRIDGEIT "
    Task: {6A779838-DB24-47D2-B782-AFCB2EA0836B} - \Razer_Game_Booster_AutoUpdate -> No File <==== ATTENTION
    Task: {6C0C25FB-0167-460C-A108-057F7A30A687} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
    Task: {6FD26CEE-5187-4304-84F4-6363BBA45986} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-06-14] (Microsoft Corporation)
    Task: {71672019-2C89-4863-8AE3-8DA6E90F4CDC} - System32\Tasks\iolo Process Governor => C:\Program Files (x86)\iolo\System Mechanic\iologovernor64.exe [2016-02-19] (iolo technologies, LLC)
    Task: {76028AB5-AC97-4F06-8327-7D5A47A19935} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
    Task: {77171C41-85F0-4F51-90FE-1021BFA26454} - System32\Tasks\{DB7CF8C5-6A10-4736-8C65-023DABCF2F3F} => pcalua.exe -a "C:\Program Files (x86)\Steam\steam.exe" -c steam://uninstall/202990
    Task: {77DB0704-C2EE-4665-9FBE-6C50BF24D338} - System32\Tasks\{098B881B-C84B-4A5E-9C21-473D389F5D09} => pcalua.exe -a "C:\Users\MacGyver\Downloads\The Sims 3 - University Life\Sims3EP09Setup.exe" -d "C:\Users\MacGyver\Downloads\The Sims 3 - University Life "
    Task: {7E4F94F7-2CA1-4D76-98C8-C2C8EFCC9FBF} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
    Task: {7EF9485D-1198-4CEE-96D2-F31AA58F9306} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
    Task: {8019363D-BCAD-4773-B90D-F17D42075CBA} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
    Task: {8114BBBF-1FE4-4C06-9D7E-D988F5FF2A93} - System32\Tasks\{1C88D420-B1A8-41FE-81BE-BE11C58815E4} => pcalua.exe -a C:\Users\MacGyver\Downloads\rzr-dnfr\razor1911_installer.exe -d C:\Users\MacGyver\Downloads\rzr-dnfr
    Task: {81A70CC6-93FF-474D-A0EA-11CFEC9BC947} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Active Health Launcher => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-03-02] (Hewlett-Packard)
    Task: {81B18DA0-9DA1-4FDC-8FDC-6D03581EBEC3} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
    Task: {899C800A-D05D-48AC-BB35-E9F792D49D94} - System32\Tasks\McAfee\McAfee Idle Detection Task
    Task: {8D77A25D-FD6A-481A-B0D6-9678902CB9A5} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
    Task: {9362521F-3941-4DE9-AE47-B3E6577852E8} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
    Task: {94A8641A-1526-4E28-9753-EB59CAD7EEBD} - System32\Tasks\HP online update program => c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2013-05-30] (Hewlett-Packard)
    Task: {97D57FBC-B035-440C-88E7-9E676CD64057} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
    Task: {9A02F879-4D87-43BE-9171-683C359BFC0F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
    Task: {9E47A294-E9F0-479C-9131-1B21B12E501D} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
    Task: {9EE88514-786B-4C6B-B761-AD00A3815399} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
    Task: {A0EB8230-8642-42EB-8BD8-65A002FA7413} - System32\Tasks\HPCeeScheduleForMacGyver => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard)
    Task: {A42A0C18-A6DD-4B24-91F1-B9FCBC83EFA3} - System32\Tasks\Google Updater and Installer => C:\Users\MacGyver\AppData\Local\Google\Update\GoogleUpdate.exe
    Task: {A5EAA359-307F-422D-92C6-12261C183A9D} - System32\Tasks\{6C6FF25C-E2A3-42D5-BD58-42799F7A6E89} => pcalua.exe -a "C:\program files (x86)\steam\steamapps\common\left 4 dead 2\bin\addoninstaller.exe" -d "c:\program files (x86)\steam\steamapps\common\left 4 dead 2" -c /register
    Task: {A9BF8641-3CD9-4689-8D44-B3C8B0073CBE} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
    Task: {ABE81196-0AAC-419A-993A-CA0F9FA7E738} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
    Task: {AC5314C6-7034-46D4-9666-CBB350D32C35} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-05-04] (Hewlett-Packard)
    Task: {AD3232E8-7041-4C01-8FBE-472DE4DE25D2} - System32\Tasks\Norton Identity Safe\Norton Error Processor => C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.0.43\SymErr.exe
    Task: {B0783751-AFAE-4BFF-B02A-3C74BBADC98E} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
    Task: {B4533FBF-4F29-4801-ACCC-D82770D70539} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2016-06-28] (HP Inc.)
    Task: {B6D9AEA1-EF28-4CD7-9C2F-CA1AF5195E7E} - System32\Tasks\HPCeeScheduleForMACGYVER-HP$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard)
    Task: {BB891099-3F04-45DA-8DFA-066AB33B0F7D} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
    Task: {C0F395F2-9715-4314-A840-2E6C417F6A32} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
    Task: {C4C2BA0B-9746-444D-88AB-7471AD00235C} - System32\Tasks\{C4F2CDCC-870A-4734-8982-EE52BA832AC4} => pcalua.exe -a "C:\Program Files (x86)\Steam\bin\steamservice.exe" -d "C:\Program Files (x86)\Steam" -c /installscript "C:\Program Files (x86)\Steam\steamapps\common\Moon Base Alpha\runasadmin.vdf" 39000
    Task: {C6429797-F491-4F5C-BD36-6AC08CF60D18} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
    Task: {CA1FCCDE-56B5-475C-B315-FC475FC1C1FB} - System32\Tasks\Intel Security DAT Reputation (AMCore) periodic endpoint safety pulse => C:\Program Files\Common Files\McAfee\AMContent\scanners\x86_64\datrep\54.0\mcdatrep.exe [2016-01-27] (McAfee, Inc.)
    Task: {CC5C92E3-0748-4B48-BA51-D9FE45AC10E6} - System32\Tasks\{EA9C00B9-3B41-4955-9E65-66E94B39201D} => pcalua.exe -a "C:\Program Files (x86)\Activision\Spider-Man\Spider-Man Setup.exe" -d C:\PROGRA~2\ACTIVI~1\SPIDER~1
    Task: {CFEE4228-EF6C-4446-8E39-A47BE7FE8D6C} - System32\Tasks\{41B44913-D051-4923-B09F-E0FE12BEE505} => pcalua.exe -a "C:\Program Files (x86)\Desura\\desura.exe" -c desura://uninstall/games/16911
    Task: {D5360E92-6DCB-43D8-903C-0A3D690C9A13} - System32\Tasks\{BC3FA003-1B9B-4710-A518-5713D42B1CE4} => pcalua.exe -a "C:\Program Files (x86)\Common Files\EAInstaller\Crysis 3 MP Open Beta\Cleanup.exe" -d C:\Windows\ImmersiveControlPanel -c uninstall_game -autologging -keepMaintenanceLog
    Task: {D6ECA103-299E-4899-B5BD-3EE5C5416AE6} - System32\Tasks\AMD Core Line (MacGyver) => C:\Program Files (x86)\DDNi\AMD Core Line\CenterStage.exe
    Task: {DBB6F12F-6A87-4B25-8AA7-D63D6CC56541} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
    Task: {DC339BF0-E26D-4C31-841F-F0D3F076F166} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2016-02-18] (Hewlett-Packard Company)
    Task: {EB727618-9F33-4D68-AD78-9EE35B7BB30F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
    Task: {EE44F1BC-3A65-4249-BBAC-F4DEB17CDF61} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
    Task: {F1C389AD-0D5B-42B3-B29C-709FCF56E8C8} - System32\Tasks\Adobe online update program => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
    Task: {F2511BEE-366D-49C8-BB06-D1D74AAAE162} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
    Task: {F4DE1F09-F2EA-48AA-9492-462FE28C70D9} - System32\Tasks\{47F995A3-DC7A-49D7-9D22-24FAF0B0EE65} => pcalua.exe -a "C:\Users\MacGyver\Downloads\[PC GAME] Assassins Creed (Full) + CRACK\AssassinsCreed.exe" -d "C:\Users\MacGyver\Downloads\[PC GAME] Assassins Creed (Full) + CRACK "

    (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

    Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\WINDOWS\Tasks\HPCeeScheduleForMACGYVER-HP$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
    Task: C:\WINDOWS\Tasks\HPCeeScheduleForMacGyver.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

    ==================== Shortcuts =============================

    (The entries could be listed to be restored or removed.)

    Shortcut: C:\Users\MacGyver\AppData\Local\Microsoft\Windows\GameExplorer\{FDD8F18F-F2CE-4AB4-929A-F90FB3704B56}\SupportTasks\1\Support.lnk -> hxxp://www.activision.com/support/ (No File)
    Shortcut: C:\Users\MacGyver\AppData\Local\Microsoft\Windows\GameExplorer\{FDD8F18F-F2CE-4AB4-929A-F90FB3704B56}\SupportTasks\0\More Games from Microsoft.lnk -> hxxp://www.sony.com/spider-man/ (No File)
    Shortcut: C:\Users\MacGyver\AppData\Local\Microsoft\Windows\GameExplorer\{1BC82C05-6785-4DE4-B684-689373462B6D}\SupportTasks\0\Spore.com.lnk -> hxxp:\( (No File)

    ==================== Loaded Modules (Whitelisted) ==============

    2015-10-30 02:18 - 2015-10-30 02:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
    2016-01-04 16:45 - 2016-06-29 12:50 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
    2015-11-04 19:11 - 2015-11-04 19:12 - 00188072 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
    2016-03-07 21:10 - 2016-06-14 15:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
    2015-12-21 18:53 - 2016-06-14 15:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
    2016-04-19 18:02 - 2016-06-14 15:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
    2016-03-07 21:10 - 2016-06-14 15:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
    2016-04-19 18:02 - 2016-06-14 15:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
    2016-04-19 18:02 - 2016-06-14 15:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
    2016-04-19 18:02 - 2016-06-14 15:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
    2016-01-16 12:37 - 2016-06-14 15:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
    2016-04-12 19:50 - 2016-03-29 05:20 - 02656952 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
    2016-04-19 18:02 - 2016-06-14 15:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
    2016-04-19 18:02 - 2016-06-14 15:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
    2013-07-29 08:51 - 2014-08-19 14:12 - 01356568 _____ () C:\Program Files\Tablet\Pen\libxml2.dll
    2016-04-12 19:50 - 2016-03-29 05:20 - 02656952 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
    2016-05-23 16:28 - 2016-05-23 16:28 - 00959168 _____ () C:\Users\MacGyver\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll
    2016-06-14 06:25 - 2016-06-14 06:25 - 08911552 _____ () C:\Program Files\Microsoft Office\Office16\1033\GrooveIntlResource.dll
    2016-01-04 18:33 - 2016-01-04 18:33 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
    2016-05-10 20:22 - 2016-04-22 23:25 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
    2016-06-14 18:28 - 2016-05-27 22:59 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
    2016-06-14 18:28 - 2016-05-27 22:53 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
    2016-06-14 18:28 - 2016-05-27 22:54 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
    2016-06-14 18:28 - 2016-05-27 22:56 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
    2016-05-12 20:54 - 2016-05-12 20:54 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
    2011-05-11 19:17 - 2011-05-11 19:17 - 00516096 _____ () C:\Program Files (x86)\AMD\RAIDXpert\bin\libxml2.dll
    2015-06-15 17:08 - 2016-06-14 15:03 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
    2016-05-12 20:54 - 2016-05-12 20:54 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
    2016-05-12 20:54 - 2016-05-12 20:55 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll

    ==================== Alternate Data Streams (Whitelisted) =========

    (If an entry is included in the fixlist, only the ADS will be removed.)

    AlternateDataStreams: C:\ProgramData\Temp:A1EDB939 [126]
    AlternateDataStreams: C:\ProgramData\Temp:C039C6AC [122]
     
  5. 2016/07/09
    PlanetAlps

    PlanetAlps Member Thread Starter

    Joined:
    2016/07/09
    Messages:
    47
    Likes Received:
    0
    ==================== Safe Mode (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ioloSystemService => " "= "Service "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => " "=" "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => " "=" "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ioloSystemService => " "= "Service "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcapexe => " "=" "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => " "= "Service "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McNaiAnn => " "=" "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => " "=" "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => " "=" "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack => " "= "Service "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack.sys => " "= "Driver "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk => " "= "Service "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk.sys => " "= "Driver "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => " "= "Service "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => " "= "Service "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => " "= "Driver "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => " "= "Service "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => " "= "Driver "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfemms => " "= "Service "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => " "= "Service "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => " "= "Driver "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => " "= "Service "

    ==================== Association (Whitelisted) ===============

    (If an entry is included in the fixlist, the registry item will be restored to default or removed.)

    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\Software\Classes\.scr: AutoCADScriptFile =>

    ==================== Internet Explorer trusted/restricted ===============

    (If an entry is included in the fixlist, it will be removed from the registry.)

    IE trusted site: HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\amazon.com -> hxxps://amazon.com

    ==================== Hosts content: ===============================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


    ==================== Other Areas ============================

    (Currently there is no automatic fix for this section.)

    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\MacGyver\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{85553faa-63c6-4a72-871e-19e8dcda9f17}.jpg
    DNS Servers: 192.168.1.1
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
    Windows Firewall is enabled.

    ==================== MSCONFIG/TASK MANAGER disabled items ==

    (Currently there is no automatic fix for this section.)

    HKLM\...\StartupApproved\Run32: => "iTunesHelper "
    HKLM\...\StartupApproved\Run32: => "ioloLiveBoost "
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\StartupApproved\Run: => "KSS "

    ==================== FirewallRules (Whitelisted) ===============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
    FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
    FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
    FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
    FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
    FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
    FirewallRules: [{CEC84F4F-1BF7-44C4-BDC6-01927429D42C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Trouble In The Manor\TroubleManorClient.exe
    FirewallRules: [{DCB818EB-F4DA-42A2-97EC-36E5B124890A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Trouble In The Manor\TroubleManorClient.exe
    FirewallRules: [{6B22B247-7C01-4A3D-BF99-E1117E27BAAC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe
    FirewallRules: [{E1E68B70-61A3-43E1-AF83-B9ABA58639A1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe
    FirewallRules: [{A8B33201-7696-4A40-B996-49474443DF8A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe
    FirewallRules: [{A34CB092-A875-4096-8B07-A03A1BA2BC55}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe
    FirewallRules: [{EF165E1C-F6D2-49B7-AB82-0E72718A0838}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed Syndicate\ACS.exe
    FirewallRules: [{91337E30-33E7-41D7-84D7-D2FCBE7FE1A1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fallout 4\Fallout4Launcher.exe
    FirewallRules: [{ECD8B33F-D9F2-4F16-A2FF-95B50126C309}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fallout 4\Fallout4Launcher.exe
    FirewallRules: [{517D0633-84F6-441E-B075-4B0D772305A3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unturned\Unturned.exe
    FirewallRules: [{6FD0403E-569B-4127-9BC5-95A820D0EFE1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unturned\Unturned.exe
    FirewallRules: [{0EEDC96A-D9A5-48BA-AC8A-0534114420CC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4mp.exe
    FirewallRules: [{8B7C7C61-FCEC-4481-9FE5-05006D33F986}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4mp.exe
    FirewallRules: [{498FD14E-72FC-4BC2-BDA8-99049127139F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4sp.exe
    FirewallRules: [{FE069F21-9E37-456F-9531-C0FA4857CB81}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4sp.exe
    FirewallRules: [{A0F4E99E-B0AE-4C01-9459-E6A0E89C0742}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\RoxioNow\RNow.exe
    FirewallRules: [{0140CC64-89B8-40B0-A623-86B4E741D035}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\RoxioNow\RNow.exe
    FirewallRules: [{E8B762F3-92E0-4F9E-9AB8-D0AF89170EF1}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\RoxioNow\IndivDRM.exe
    FirewallRules: [{C1B9103E-C9AC-466E-826A-C52B1D0C38FC}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\RoxioNow\IndivDRM.exe
    FirewallRules: [{3119F5E9-F0DE-4BD5-A50A-7D9964056564}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\Remote Graphics Receiver\rgreceiver.exe
    FirewallRules: [{9D03C4D5-8FE5-4992-AAE3-615E6BB9F8DD}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\Remote Graphics Receiver\rgreceiver.exe
    FirewallRules: [{46F41D43-8AF9-4E16-A9C5-FD274C95F991}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP LinkUp\HP LinkUp Viewer.exe
    FirewallRules: [{D366C629-81FB-4B3A-94F9-8705BEA5C1EF}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP LinkUp\HP LinkUp Viewer.exe
    FirewallRules: [{CFCB44F3-6319-44C6-B3FD-74FF65687EC9}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
    FirewallRules: [{334E2F3A-E209-4825-B431-78163D955E85}] => (Allow) LPort=2869
    FirewallRules: [{AC7DED61-3CEC-4024-B928-F9DB53C86832}] => (Allow) LPort=1900
    FirewallRules: [{C7D1C8DD-F236-4500-A004-CDB3E6BF755B}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
    FirewallRules: [{B80A0B40-0B56-4F74-9ADF-048AE1D02F12}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
    FirewallRules: [{DF8EDEA7-4803-40F6-80F8-59475FE8BF70}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{4ABC9DBE-C960-4EBF-8E7E-4A393379EA7F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{92EC2E26-289C-43FD-A4C5-15E09B07144F}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe
    FirewallRules: [{1D8F6EFE-C0FF-4971-B23A-9FED12AD1849}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe
    FirewallRules: [{7D7BC24E-C3E8-401D-B09D-9BDADCADD4FB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\orcs must die!\Build\release\OrcsMustDie.exe
    FirewallRules: [{099DB964-D358-4A6A-95A1-656882CCFE7A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\orcs must die!\Build\release\OrcsMustDie.exe
    FirewallRules: [{225EB543-E59A-4B99-96C3-CC2465ACEEB3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Just Cause 2\JustCause2.exe
    FirewallRules: [{1040807F-238D-4520-97BF-1FB5CED719E4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Just Cause 2\JustCause2.exe
    FirewallRules: [{D300202A-4BDD-4326-A72E-1FE8CCA998DC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\amnesia the dark descent\Launcher.exe
    FirewallRules: [{E7682C3F-3AC4-47A9-8BC3-82A6BCAF3841}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\amnesia the dark descent\Launcher.exe
    FirewallRules: [{80245AE0-9435-47DB-86A7-A046F119AB3F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\lone survivor\LoneSurvivor\LoneSurvivor.exe
    FirewallRules: [{C6C8E73D-FBDC-488B-829C-264D536C46BE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\lone survivor\LoneSurvivor\LoneSurvivor.exe
    FirewallRules: [{8CF86034-A5C8-4220-92A9-067230E17758}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Mass Effect\docs\EA Help\Electronic_Arts_Technical_Support.htm
    FirewallRules: [{989F550B-1CB7-4043-858C-BB929DD6EF97}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Mass Effect\docs\EA Help\Electronic_Arts_Technical_Support.htm
    FirewallRules: [TCP Query User{B93CFFAB-FF1F-43A5-962B-97BF27901C53}C:\program files (x86)\steam\steamapps\common\worms reloaded\wormsreloaded.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\worms reloaded\wormsreloaded.exe
    FirewallRules: [UDP Query User{97717F8E-382E-4FA5-B7B1-D664356424C6}C:\program files (x86)\steam\steamapps\common\worms reloaded\wormsreloaded.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\worms reloaded\wormsreloaded.exe
    FirewallRules: [{341078B1-A730-4168-9524-FD880BAFD4EA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\superbrothers sword & sworcery ep\swordandsworcery_pc.exe
    FirewallRules: [{11A2E157-BCF0-4EEA-A831-04EE54D0AE7B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\superbrothers sword & sworcery ep\swordandsworcery_pc.exe
    FirewallRules: [{DC10A3B5-5B2C-4505-A538-3866A7127AAD}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe
    FirewallRules: [{306BB6E0-C2AE-4860-BCCB-BFB99A85F65D}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe
    FirewallRules: [TCP Query User{3EC96682-AA77-4C65-BEEB-E33921B96362}C:\program files (x86)\starcraft ii\versions\base22612\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base22612\sc2.exe
    FirewallRules: [UDP Query User{DD89C51C-0CA7-424A-BECA-8C38EEBBA548}C:\program files (x86)\starcraft ii\versions\base22612\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base22612\sc2.exe
    FirewallRules: [TCP Query User{84FDCA02-9C6C-46DF-8397-020EB3892A5D}C:\users\macgyver\documents\arma 2\expansion\beta\arma2oa.exe] => (Allow) C:\users\macgyver\documents\arma 2\expansion\beta\arma2oa.exe
    FirewallRules: [UDP Query User{9232EB61-61BC-4906-9706-3B15273E66F8}C:\users\macgyver\documents\arma 2\expansion\beta\arma2oa.exe] => (Allow) C:\users\macgyver\documents\arma 2\expansion\beta\arma2oa.exe
    FirewallRules: [{43DE93EE-9F44-4665-AFA3-DFF56A668EA3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\arma 2 operation arrowhead\BEsetup\Setup_BattlEyeARMA2OA.exe
    FirewallRules: [{8BA11511-46E9-4A2B-96B0-3D702AD4EDE7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\arma 2 operation arrowhead\BEsetup\Setup_BattlEyeARMA2OA.exe
    FirewallRules: [{0FC295E3-224E-414D-A4D1-B96EAE725AF0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\arma 2 operation arrowhead\_runA2CO.cmd
    FirewallRules: [{2EF26338-3A5B-4248-9B1F-F02369DD40C7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\arma 2 operation arrowhead\_runA2CO.cmd
    FirewallRules: [{164F040B-764A-4021-8BA3-4D03F3644C58}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unmechanical\Binaries\Win32\UDK.exe
    FirewallRules: [{D23F5067-5633-47C4-9D86-DF2DC66C84FC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unmechanical\Binaries\Win32\UDK.exe
    FirewallRules: [{E5B8781A-37DC-4225-BCD8-48256ABFAE0C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\deus ex - human revolution\dxhr.exe
    FirewallRules: [{E1254A71-BFA7-4E0C-8AA2-7CE62FAD1E1C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\deus ex - human revolution\dxhr.exe
    FirewallRules: [TCP Query User{6262EE3F-E6A3-458A-BEAE-7F81497C2EFC}C:\program files (x86)\steam\steamapps\lopez24383\source sdk base\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\lopez24383\source sdk base\hl2.exe
    FirewallRules: [UDP Query User{9B965C18-79B6-4142-BA61-927725D82230}C:\program files (x86)\steam\steamapps\lopez24383\source sdk base\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\lopez24383\source sdk base\hl2.exe
    FirewallRules: [TCP Query User{75206C0E-8CB9-4EE2-9F3C-21AE1A0A9720}C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe
    FirewallRules: [UDP Query User{1F0677C0-8E10-4ABC-AF6F-48E5D1A0DA23}C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe
    FirewallRules: [TCP Query User{BCF5DAC5-B3B2-4EE7-97C7-6A8EE7D510B6}C:\program files (x86)\steam\steamapps\lopez24383\counterstrike source beta\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\lopez24383\counterstrike source beta\hl2.exe
    FirewallRules: [UDP Query User{ECD8CC36-F6E5-4BD6-B53C-2D79D5EDA01D}C:\program files (x86)\steam\steamapps\lopez24383\counterstrike source beta\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\lopez24383\counterstrike source beta\hl2.exe
    FirewallRules: [TCP Query User{C3474348-02AF-4418-B7FD-CC5AEFFB9FE0}C:\users\macgyver\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\macgyver\appdata\local\akamai\netsession_win.exe
    FirewallRules: [UDP Query User{892173F7-1F5E-4CCF-97F5-84F9DEB47333}C:\users\macgyver\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\macgyver\appdata\local\akamai\netsession_win.exe
    FirewallRules: [TCP Query User{5C67D8F0-A64A-494E-AB1A-62FAFC3AE7C4}C:\users\macgyver\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\macgyver\appdata\local\akamai\netsession_win.exe
    FirewallRules: [UDP Query User{78DCC5E7-21D5-4F6F-B9CA-C0D12EF99C5A}C:\users\macgyver\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\macgyver\appdata\local\akamai\netsession_win.exe
    FirewallRules: [TCP Query User{8BCD836D-2F03-40CE-B226-A06673A7D20E}C:\users\macgyver\downloads\xcom enemy unkonwn\iaa-x.e.u\binaries\win32\xcomgame.exe] => (Allow) C:\users\macgyver\downloads\xcom enemy unkonwn\iaa-x.e.u\binaries\win32\xcomgame.exe
    FirewallRules: [UDP Query User{BCED27C0-9D18-469B-A4A0-A5CF08C06B27}C:\users\macgyver\downloads\xcom enemy unkonwn\iaa-x.e.u\binaries\win32\xcomgame.exe] => (Allow) C:\users\macgyver\downloads\xcom enemy unkonwn\iaa-x.e.u\binaries\win32\xcomgame.exe
    FirewallRules: [TCP Query User{560CCB42-7742-4523-B5BF-B248CEDF27ED}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
    FirewallRules: [UDP Query User{041BF523-48BD-40CF-9230-C0D303F2E478}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
    FirewallRules: [{7985516E-BE15-4926-827E-B1D832AAA5E9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham City GOTY\Binaries\Win32\BatmanAC.exe
    FirewallRules: [{F94C7FB7-E845-4EE4-9E39-146A8753D0D6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham City GOTY\Binaries\Win32\BatmanAC.exe
    FirewallRules: [{59A8D381-38C5-44C8-BAD6-5236EA36D344}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham City GOTY\RunLauncher.bat
    FirewallRules: [{3CFEE228-BF1A-4B31-ACD5-5188005E340B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham City GOTY\RunLauncher.bat
    FirewallRules: [{5395ADE1-C00F-4C96-8E9B-388EC38382CF}] => (Allow) C:\Program Files (x86)\StarCraft II 2012 Beta\StarCraft II Beta.exe
    FirewallRules: [{2E0722DB-6374-4436-BD5C-DF25BE5CA69B}] => (Allow) C:\Program Files (x86)\StarCraft II 2012 Beta\StarCraft II Beta.exe
    FirewallRules: [{1A184DB1-CCE8-4DF7-9E87-2339C1BF4501}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\thomaswasalone\ThomasWasAlone.exe
    FirewallRules: [{A3924F4B-A7CE-4067-B28F-5A95AAF9C9B2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\thomaswasalone\ThomasWasAlone.exe
    FirewallRules: [{AE60AE9E-E1C4-497B-A81A-95D2C14E0CF0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\World of Goo\WorldOfGoo.exe
    FirewallRules: [{E3E85811-79A7-408F-B3F3-796DDA163BC1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\World of Goo\WorldOfGoo.exe
    FirewallRules: [{26E0EDBD-055B-4B90-B567-65DB59EEB115}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\From Dust\From_Dust.exe
    FirewallRules: [{0E309EFA-B08E-4D4C-8A53-061A870920B5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\From Dust\From_Dust.exe
    FirewallRules: [{4782C740-9745-4E18-9EDD-1EA91D206E65}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\I am Alive\src\SYSTEM\IAmAlive_game.exe
    FirewallRules: [{3C4969E4-C500-48B8-834F-D36BCF357C66}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\I am Alive\src\SYSTEM\IAmAlive_game.exe
    FirewallRules: [{87D1A976-7D3E-43A8-80CE-0442D713466A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\fallout new vegas\FalloutNVLauncher.exe
    FirewallRules: [{FFD7AAC4-BBD4-48F6-916C-0B938DD4DFFA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\fallout new vegas\FalloutNVLauncher.exe
    FirewallRules: [{AF358203-797E-4EDA-996B-40C3BB0694C3}] => (Allow) C:\Program Files (x86)\NAMCO BANDAI Games\DarkSouls\DARKSOULS.exe
    FirewallRules: [{CA2C37FC-F400-404A-9F14-EC02E8217966}] => (Allow) C:\Program Files (x86)\2K Sports\NBA 2K13\nba2k13.exe
    FirewallRules: [{B9854157-80FD-4041-B44E-E46C26042CA7}] => (Allow) C:\Program Files (x86)\2K Sports\NBA 2K13\nba2k13.exe
    FirewallRules: [TCP Query User{9DCB3312-403F-4C41-9772-C175DE76A3FB}C:\users\macgyver\appdata\local\warframe\downloaded\public\warframe.x64.exe] => (Allow) C:\users\macgyver\appdata\local\warframe\downloaded\public\warframe.x64.exe
    FirewallRules: [UDP Query User{5438E4A9-1463-48E0-B745-F38327F5A15C}C:\users\macgyver\appdata\local\warframe\downloaded\public\warframe.x64.exe] => (Allow) C:\users\macgyver\appdata\local\warframe\downloaded\public\warframe.x64.exe
    FirewallRules: [TCP Query User{5DD6F46F-0A88-44A1-ABD7-118F9158FA75}C:\games\blur nosteam\blur.exe] => (Allow) C:\games\blur nosteam\blur.exe
    FirewallRules: [UDP Query User{74D6ADCB-D721-4C58-B0F0-70B9941D4A1B}C:\games\blur nosteam\blur.exe] => (Allow) C:\games\blur nosteam\blur.exe
    FirewallRules: [{233AC679-0ADE-4C40-9B94-F870AED22ACF}] => (Allow) C:\Program Files (x86)\Origin Games\Crysis 3 MP Open Beta\bin32\Crysis 3 MP Open Beta.exe
    FirewallRules: [{E75755D8-E39A-4F5B-8672-D790A898CA70}] => (Allow) C:\Program Files (x86)\Origin Games\Crysis 3 MP Open Beta\bin32\Crysis 3 MP Open Beta.exe
    FirewallRules: [TCP Query User{9107F0F6-5395-4D1C-9B95-B268DDDCBEA0}C:\program files (x86)\starcraft ii 2012 beta\versions\base24764\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii 2012 beta\versions\base24764\sc2.exe
    FirewallRules: [UDP Query User{53226421-C130-4C9E-83E0-8DDF1A64D3FE}C:\program files (x86)\starcraft ii 2012 beta\versions\base24764\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii 2012 beta\versions\base24764\sc2.exe
    FirewallRules: [{DA782E4F-E0A5-44DD-B5DD-AD96DA66BAA6}] => (Allow) C:\Program Files (x86)\Autodesk\3ds Max 2013\NVIDIA\raysat_3dsmax2013_32server.exe
    FirewallRules: [{E0327B81-A8EA-48E7-9754-08644BCA45FE}] => (Allow) C:\Program Files (x86)\Autodesk\3ds Max 2013\NVIDIA\raysat_3dsmax2013_32server.exe
    FirewallRules: [{1D5C9113-79E9-4E9B-A03F-36017A9CBECE}] => (Allow) C:\Program Files (x86)\Autodesk\3ds Max 2013\NVIDIA\raysat_3dsmax2013_32.exe
    FirewallRules: [{84AE0152-BC2F-4426-884F-C24A99F18636}] => (Allow) C:\Program Files (x86)\Autodesk\3ds Max 2013\NVIDIA\raysat_3dsmax2013_32.exe
    FirewallRules: [{DA1D5ACF-22F8-4A90-9085-741EDDB3FC7A}] => (Allow) C:\Program Files (x86)\Autodesk\3ds Max 2013\3dsmax.exe
    FirewallRules: [{75F04D3D-A322-453D-80FA-5295D91BEE3D}] => (Allow) C:\Program Files (x86)\Autodesk\3ds Max 2013\3dsmax.exe
    FirewallRules: [{EFBC35A6-38EE-4148-95AB-280717EE5088}] => (Allow) C:\Program Files (x86)\Steam\steamapps\lopez24383\garrysmod\hl2.exe
    FirewallRules: [{1397A858-0FB3-4CD9-B938-D2EBA75EB733}] => (Allow) C:\Program Files (x86)\Steam\steamapps\lopez24383\garrysmod\hl2.exe
    FirewallRules: [TCP Query User{335FB71F-7055-430E-B0B7-C22F2761A784}C:\program files (x86)\crysis 3\bin32\crysis3.exe] => (Allow) C:\program files (x86)\crysis 3\bin32\crysis3.exe
    FirewallRules: [UDP Query User{31A5298D-1E57-45D1-B23D-F68F134B70E0}C:\program files (x86)\crysis 3\bin32\crysis3.exe] => (Allow) C:\program files (x86)\crysis 3\bin32\crysis3.exe
    FirewallRules: [{1DB370CE-5F8D-4815-976A-9530568AC68B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\bit.trip runner\RUNNER.exe
    FirewallRules: [{3662A5E7-5522-4F32-91DD-6C49EA4480DD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\bit.trip runner\RUNNER.exe
    FirewallRules: [{39F9E028-8CE8-43A0-B641-B9729B9A5FAE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1675\Agent.exe
    FirewallRules: [{B1E494B0-3406-4882-A7E5-B398F6BA17AA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1675\Agent.exe
    FirewallRules: [TCP Query User{65FCEE06-CD92-4FC7-B25A-CC9E2B529FD5}C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe
    FirewallRules: [UDP Query User{C26B71C4-DFA8-4E52-B002-EAC9B4912E06}C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe
    FirewallRules: [{A486908F-1A60-462A-8FDA-96749EBF2204}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1675\Agent.exe
    FirewallRules: [{A4E44BAB-CB61-4FA0-9CC3-99281FA0EA84}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1675\Agent.exe
    FirewallRules: [TCP Query User{6924EF6B-B728-44D9-8D8A-BF79BA9318BD}C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe
    FirewallRules: [UDP Query User{2D9ABB71-AA63-4CDC-94D4-844010D26D32}C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe
    FirewallRules: [{77F3E2A0-BCB6-4BEB-8575-D3B0DD55E7B1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TripleTown\TripleTown.exe
    FirewallRules: [{C7B557A8-21D1-4D1F-805F-371F6EF0D921}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TripleTown\TripleTown.exe
    FirewallRules: [{62B37891-4A60-41F7-B910-8324CE1F5CDC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\skyrim\SkyrimLauncher.exe
    FirewallRules: [{34930B50-1B80-4694-92BC-C709549510E4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\skyrim\SkyrimLauncher.exe
    FirewallRules: [{F4C21C2B-287C-4F1A-B881-4F3EF4265B01}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
    FirewallRules: [{0DDE224B-FDAB-464B-A089-D96A367256AA}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
    FirewallRules: [TCP Query User{C26613A5-A229-4FBB-949A-D8B48AE83E42}C:\program files (x86)\arma iii alpha\arma3.exe] => (Block) C:\program files (x86)\arma iii alpha\arma3.exe
    FirewallRules: [UDP Query User{2C782B23-399D-4E22-925B-122B231E679A}C:\program files (x86)\arma iii alpha\arma3.exe] => (Block) C:\program files (x86)\arma iii alpha\arma3.exe
    FirewallRules: [{59437E28-0AD6-48C6-81D4-798BA0C380C0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
    FirewallRules: [{7B0AFBD4-EE8F-421C-B22A-A3FE538961F4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
    FirewallRules: [TCP Query User{10DCC0EC-B1A8-47C2-9140-0051A389EA56}C:\program files (x86)\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
    FirewallRules: [UDP Query User{8F694472-AB1F-4BF1-8A49-97381293D0EC}C:\program files (x86)\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
    FirewallRules: [{600A4C38-24FA-461B-835C-2142124A4119}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold 2\Stronghold2.exe
    FirewallRules: [{329ACA66-2524-489B-A0FC-E4BF8FA013E9}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold 2\Stronghold2.exe
    FirewallRules: [{48B09BA9-D173-4BFB-8373-D15B018585DA}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Legends\StrongholdLegends.exe
    FirewallRules: [{E03BBAF1-8ADE-4FA0-B45F-1AA6A82CC87A}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Legends\StrongholdLegends.exe
    FirewallRules: [{85E1D04E-6071-4504-8EE6-7AB0722E1B4F}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Crusader\Stronghold Crusader.exe
    FirewallRules: [{1BD42C11-4BB8-4985-B3CE-F7015BC92A20}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Crusader\Stronghold Crusader.exe
    FirewallRules: [{01D0DD7C-E566-49FD-A885-372F15A1F49A}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Crusader\Stronghold_Crusader_Extreme.exe
    FirewallRules: [{8A3BAAB6-EE98-4A61-92C5-2F4EFEBB71B9}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Crusader\Stronghold_Crusader_Extreme.exe
    FirewallRules: [{98E820E5-62FE-4460-92DF-8DE59B403AEF}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold\Stronghold.exe
    FirewallRules: [{97AC2FF0-BFC3-43D3-B501-700775ECFEDE}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold\Stronghold.exe
    FirewallRules: [{B97CFB45-BA2B-46F5-BCC8-6BA9FD4253D5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\magicka\Magicka.exe
    FirewallRules: [{54F3C6D4-AC2B-4306-A090-B980C645E5C6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\magicka\Magicka.exe
    FirewallRules: [{DB663D52-1810-4288-8EC8-D3E28CDFACA6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Receiver\Receiver.exe
    FirewallRules: [{F4DFBDDE-E2A2-4282-914C-C63FE653780E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Receiver\Receiver.exe
    FirewallRules: [{B7A469BC-7CF3-4A54-9380-4A4FD29EF62F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops II\t6mp.exe
    FirewallRules: [{E78C9F69-69D2-464B-9556-37ACF51B0C50}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops II\t6mp.exe
    FirewallRules: [{9CEF7775-DD25-43A1-BFB9-D46F6D8FF26D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe
    FirewallRules: [{56F8DBD0-EB83-4B03-815A-481DB15AFB20}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe
    FirewallRules: [{0A47A69F-E8F6-4B0B-A24F-B8DC52BE465F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FTL Faster Than Light\FTLGame.exe
    FirewallRules: [{C53D014B-1888-45C5-8064-F909CA454AEB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FTL Faster Than Light\FTLGame.exe
    FirewallRules: [{657024F6-FE2F-4B23-828A-59E713984B1A}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
    FirewallRules: [{414DF5F7-96AD-4045-8C80-74C38E98C743}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
    FirewallRules: [{404023FB-55EE-46B1-A1C6-48628CB063F1}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
    FirewallRules: [{A40F89C0-5223-4A3C-9736-C8525FBDDA35}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
    FirewallRules: [{CA6B1250-9C3B-4D24-A83E-42D8836A539F}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Brotherhood\ACBSP.exe
    FirewallRules: [{D6FDC4FF-44C1-4DE9-BD6E-A91D6A2D20B3}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Brotherhood\ACBSP.exe
    FirewallRules: [{DC4F20D9-C038-4D2A-94F8-81056F314955}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Brotherhood\ACBMP.exe
    FirewallRules: [{9D2D612C-68BF-47CC-B094-A1B0BA2E8C60}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Brotherhood\ACBMP.exe
    FirewallRules: [{323B75BF-9D33-4138-866E-FB6D287095B1}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Brotherhood\AssassinsCreedBrotherhood.exe
    FirewallRules: [{6230188E-FF96-4440-B317-3BD5E4DDEB1B}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Brotherhood\AssassinsCreedBrotherhood.exe
    FirewallRules: [{A2812657-42A2-4A87-BBE0-F8A42574DD1B}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Brotherhood\UPlayBrowser.exe
    FirewallRules: [{DF3F4049-B9D9-4829-B733-D7FEC3CFEBC3}] => (Allow) C:\Program Files (x86)\Ubisoft\Assassin's Creed Brotherhood\UPlayBrowser.exe
    FirewallRules: [{0FA08E61-B63E-4A23-8286-95B74095F1EE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\arma 2 operation arrowhead\ArmA2OA.exe
    FirewallRules: [{C54688D2-17F9-482C-9BBF-D6F56BC03CB5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\arma 2 operation arrowhead\ArmA2OA.exe
    FirewallRules: [{45DA58DC-E0AB-4ECD-89E0-B6BCD18E562B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\saints row the third\game_launcher.exe
    FirewallRules: [{9ECA4407-8EC3-4832-91D0-5EA1A4B588BA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\saints row the third\game_launcher.exe
    FirewallRules: [{C9F5CC56-554A-4489-892D-582040B55574}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\saints row the third\SaintsRowTheThird.exe
    FirewallRules: [{558318D6-03B2-4B0A-BDAE-5D6BACA6458B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\saints row the third\SaintsRowTheThird.exe
    FirewallRules: [{4E757CA2-230B-4420-9C16-ECD856B8E71F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\saints row the third\SaintsRowTheThird_DX11.exe
    FirewallRules: [{D418A918-7399-4479-B928-66487AFA51E5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\saints row the third\SaintsRowTheThird_DX11.exe
    FirewallRules: [{D54B665C-942C-4785-94B3-0C006587B5F2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Source\hl2.exe
    FirewallRules: [{4D3AFF0F-0E0C-46ED-A575-E03794198C59}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Source\hl2.exe
    FirewallRules: [{2360002C-0736-4973-8EFA-66E008FB2831}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe
    FirewallRules: [{ABF16F6F-87E5-4809-A3FF-B6D9C83DA009}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe
    FirewallRules: [TCP Query User{30DB46A0-0371-462E-B21F-0859AB109956}C:\program files (x86)\grand theft auto iv\gtaiv.exe] => (Allow) C:\program files (x86)\grand theft auto iv\gtaiv.exe
    FirewallRules: [UDP Query User{F9EBFC8F-C625-43B8-B59E-D7638F4F4E03}C:\program files (x86)\grand theft auto iv\gtaiv.exe] => (Allow) C:\program files (x86)\grand theft auto iv\gtaiv.exe
    FirewallRules: [TCP Query User{0767DAFD-11F1-4D7E-9BA2-8AAC31CF2918}C:\program files (x86)\mortal kombat komplete edition\disccontentpc\mkke.exe] => (Allow) C:\program files (x86)\mortal kombat komplete edition\disccontentpc\mkke.exe
    FirewallRules: [UDP Query User{9846FA44-191C-4205-92BB-4FF5C4121587}C:\program files (x86)\mortal kombat komplete edition\disccontentpc\mkke.exe] => (Allow) C:\program files (x86)\mortal kombat komplete edition\disccontentpc\mkke.exe
    FirewallRules: [{7087D580-5D2A-4107-842D-1D6DBE62EF73}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
    FirewallRules: [{FF02C061-DD3F-4F64-80BF-5C8FE291AE55}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
    FirewallRules: [{316BC30B-4F6F-4392-85E8-1DC8AC8DC3CB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
    FirewallRules: [{90C17A47-9E7B-486A-AB8E-95E0FB1EA9AC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
    FirewallRules: [{5C544884-5694-40FF-A2F9-0C3776D79691}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
    FirewallRules: [{71D15AFA-2F8B-4B0D-81A4-59AC56DB307D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
    FirewallRules: [{64FAE54F-7974-4C31-9401-02BB6FADFA84}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Walking Dead\WalkingDead101.exe
    FirewallRules: [{5F78B80E-BBF3-4731-A905-354A6E24B0A4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Walking Dead\WalkingDead101.exe
    FirewallRules: [{E43D5A1C-E7F0-40A0-9683-524D40428D9F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto IV Episodes from Liberty City\EFLC\LaunchEFLC.exe
    FirewallRules: [{0A9A12C6-F947-4C3F-8FDF-B33B4E2983D0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto IV Episodes from Liberty City\EFLC\LaunchEFLC.exe
    FirewallRules: [TCP Query User{4FD2D8E8-1E31-40BA-925E-086155AA8EEB}C:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
    FirewallRules: [UDP Query User{F2815D8B-4CDE-4022-A5A3-FB06FC179C61}C:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
    FirewallRules: [{E30FCB86-1A9A-4C8B-89C7-53DF63C153EE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Metro 2033\metro2033.exe
    FirewallRules: [{7D332E0A-DE41-4DD0-BB95-3B69F63D3C8B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Metro 2033\metro2033.exe
    FirewallRules: [{5C390D4A-C82F-494E-B6F1-AAEA8E4D54AC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rogue Legacy\RogueLegacy.exe
    FirewallRules: [{F0282C6D-DD64-4598-9EE1-35F33E451CF8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rogue Legacy\RogueLegacy.exe
    FirewallRules: [{01867956-98F9-44DF-8AD6-61224E691E32}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Crusader Kings II\ck2game.exe
    FirewallRules: [{93AABE0D-9BB1-47F9-9EBA-82E327D82C63}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Crusader Kings II\ck2game.exe
    FirewallRules: [{2AD4A090-D3FB-48B5-92F6-726BF3CDCC0F}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
    FirewallRules: [{C5740E98-B9B7-4B63-89AC-1EB44753AF77}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
    FirewallRules: [{B8953970-C51C-49B8-B5D6-90E2246B701F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe
    FirewallRules: [{ABDAAA31-5AF0-4205-81DB-897EB974596F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe
    FirewallRules: [{BE4E3F7D-9E26-4189-833A-CA2F2C65236A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Monaco\MONACO.exe
    FirewallRules: [{CCAED583-6FC2-41AC-AE1B-C91D6CD4C8AE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Monaco\MONACO.exe
    FirewallRules: [TCP Query User{D93AE9AB-98CA-46F3-B62F-ED9EA87A5A2A}C:\users\macgyver\appdata\local\vghd\bin\virtuagirl_downloader.exe] => (Allow) C:\users\macgyver\appdata\local\vghd\bin\virtuagirl_downloader.exe
    FirewallRules: [UDP Query User{717A96B2-81B3-4686-B88D-21C9D5677EBD}C:\users\macgyver\appdata\local\vghd\bin\virtuagirl_downloader.exe] => (Allow) C:\users\macgyver\appdata\local\vghd\bin\virtuagirl_downloader.exe
    FirewallRules: [{9865E3CF-D4BF-4A95-8EC6-3E66529D5CA4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
    FirewallRules: [{0E99DAE0-3102-40E4-83EB-DF2A43093341}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
    FirewallRules: [{AE154EEF-C58B-43C4-B2A5-E31F46648895}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PAYDAY 2 Beta\payday2_win32_release.exe
    FirewallRules: [{20EA6F61-40DE-4BCF-8E2B-89AAB097BF8C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PAYDAY 2 Beta\payday2_win32_release.exe
    FirewallRules: [{A581D1B2-C740-4CA1-80D5-7937104B4AAD}] => (Allow) C:\Users\MacGyver\AppData\Roaming\uTorrent\uTorrent.exe
    FirewallRules: [{8D31B650-8058-40FA-999C-34C3E1B2530C}] => (Allow) C:\Users\MacGyver\AppData\Roaming\uTorrent\uTorrent.exe
    FirewallRules: [TCP Query User{9423C81C-A061-441F-9A30-6A61B3975C1B}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
    FirewallRules: [UDP Query User{B6880EFF-0DCF-434B-AAA9-2329C45BE709}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
    FirewallRules: [{DFE698F0-CB05-4665-844B-4F9967E1B1F2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Spelunky\Spelunky.exe
    FirewallRules: [{FEE99424-7D33-4195-94D2-0AB8890ABDF1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Spelunky\Spelunky.exe
    FirewallRules: [{1531CA4B-9FB9-498B-A659-F2ABDCD00611}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\chivalrymedievalwarfare\Binaries\Win32\UDK.exe
    FirewallRules: [{CF89C241-B109-4D66-8F50-AC3435B30C57}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\chivalrymedievalwarfare\Binaries\Win32\UDK.exe
    FirewallRules: [{D9F49029-874B-46CE-9EE1-B610C085404D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\WormsRevolution\WormsRevolution.exe
    FirewallRules: [{E667AF17-D4CA-4FC1-9B9D-DF5BB08B2203}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\WormsRevolution\WormsRevolution.exe
    FirewallRules: [{BA78BD56-6EC1-44EB-8764-F437D0C52729}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\mirrors edge\Binaries\MirrorsEdge.exe
    FirewallRules: [{34F99F71-A106-4E1A-8D00-FB6195749284}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\mirrors edge\Binaries\MirrorsEdge.exe
    FirewallRules: [{4382D1B4-F861-4BE0-A63B-DE936E345BB5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\mirrors edge\Support\EA Help\Electronic_Arts_Technical_Support.htm
    FirewallRules: [{80F3E0C8-F7D3-429A-A892-453137BDDF1C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\mirrors edge\Support\EA Help\Electronic_Arts_Technical_Support.htm
    FirewallRules: [{5EFC921B-A12D-41D8-878A-6A3095D28A2F}] => (Allow) C:\Program Files (x86)\Origin Games\Dead Space 3\deadspace3.exe
    FirewallRules: [{B6094820-D749-4548-A188-E2D0D819CA76}] => (Allow) C:\Program Files (x86)\Origin Games\Dead Space 3\deadspace3.exe
    FirewallRules: [TCP Query User{13000FD6-64C3-45C2-AB5D-0EB836BA2911}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe
    FirewallRules: [UDP Query User{778AE870-DCB9-4E8F-8189-0FA517E7723A}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe
    FirewallRules: [{B54BA648-63A1-45C3-8282-2A34BEFF6F6D}] => (Block) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe
    FirewallRules: [{13F5BE14-8CA5-49FC-84D0-1103F00DA56E}] => (Block) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe
    FirewallRules: [{44BA731A-BEB5-4A1D-BE05-8B6E21E6D95B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Crysis 2 Game of the Year\bin32\Crysis2Launcher.exe
    FirewallRules: [{6925D552-0773-4C1D-B778-69D44125B5A7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Crysis 2 Game of the Year\bin32\Crysis2Launcher.exe
    FirewallRules: [TCP Query User{D3C1BC41-5599-49BA-B486-26BA5618F438}C:\games\flatout 2\flatout2.exe] => (Allow) C:\games\flatout 2\flatout2.exe
    FirewallRules: [UDP Query User{0C3C979F-BF43-4860-B02E-614F18B4632D}C:\games\flatout 2\flatout2.exe] => (Allow) C:\games\flatout 2\flatout2.exe
    FirewallRules: [{405FB566-4DF4-49C6-9394-076CCBA4AEDB}] => (Block) C:\games\flatout 2\flatout2.exe
    FirewallRules: [{8CDF4AFE-A6D5-4F89-8066-DFEF363CFA6E}] => (Block) C:\games\flatout 2\flatout2.exe
    FirewallRules: [{48807DFA-889C-4766-A718-E60830EA855C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dead Space\Support\EA Help\Electronic_Arts_Technical_Support.htm
    FirewallRules: [{8F943BCF-D887-4FAE-BDCD-F1DECC8FCE96}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dead Space\Support\EA Help\Electronic_Arts_Technical_Support.htm
    FirewallRules: [{1598D211-7EA6-4B3A-8324-CC714832C5FD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Medal of Honor\MP\mohmpgame.exe
    FirewallRules: [{D320BA2B-AAB0-4240-A3CF-7C47A4AC4E7D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Medal of Honor\MP\mohmpgame.exe
    FirewallRules: [{870ABA11-C527-429F-8655-F7F0ED430FBF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Medal of Honor\Binaries\moh.exe
    FirewallRules: [{F0789910-A3D5-4712-9410-77331DD19F03}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Medal of Honor\Binaries\moh.exe
    FirewallRules: [TCP Query User{2A3F1ABF-263D-45C9-A59D-6CEF6A223DA2}C:\program files (x86)\payday 2\payday2_win32_release.exe] => (Allow) C:\program files (x86)\payday 2\payday2_win32_release.exe
    FirewallRules: [UDP Query User{E8B36521-00C6-46F0-922C-62404B7BD0E1}C:\program files (x86)\payday 2\payday2_win32_release.exe] => (Allow) C:\program files (x86)\payday 2\payday2_win32_release.exe
    FirewallRules: [{D5F9F0B0-29ED-4C34-A91C-047231FD6D33}] => (Block) C:\program files (x86)\payday 2\payday2_win32_release.exe
    FirewallRules: [{E58B8E61-6658-441F-AA54-4CF9C0E050DD}] => (Block) C:\program files (x86)\payday 2\payday2_win32_release.exe
    FirewallRules: [TCP Query User{528C6A40-CE6B-476F-B05D-2C3213A9BFC4}C:\users\macgyver\downloads\arma.3.beta.with.update2-ali213\arma.3.beta.with.up2.ali213\arma 3\arma3.exe] => (Allow) C:\users\macgyver\downloads\arma.3.beta.with.update2-ali213\arma.3.beta.with.up2.ali213\arma 3\arma3.exe
    FirewallRules: [UDP Query User{C08E158B-B98B-4259-986B-0698D3B64E9F}C:\users\macgyver\downloads\arma.3.beta.with.update2-ali213\arma.3.beta.with.up2.ali213\arma 3\arma3.exe] => (Allow) C:\users\macgyver\downloads\arma.3.beta.with.update2-ali213\arma.3.beta.with.up2.ali213\arma 3\arma3.exe
    FirewallRules: [{9A68DF53-E667-4C0A-AC66-B931BF869679}] => (Block) C:\users\macgyver\downloads\arma.3.beta.with.update2-ali213\arma.3.beta.with.up2.ali213\arma 3\arma3.exe
    FirewallRules: [{9ED8A3C1-9709-43BC-AF02-F89F3B7CEE51}] => (Block) C:\users\macgyver\downloads\arma.3.beta.with.update2-ali213\arma.3.beta.with.up2.ali213\arma 3\arma3.exe
    FirewallRules: [TCP Query User{93B7FEA8-17FA-4093-9742-53D4A918F15F}C:\users\macgyver\downloads\srv\sc-9865411\saintsrowiv.exe] => (Allow) C:\users\macgyver\downloads\srv\sc-9865411\saintsrowiv.exe
    FirewallRules: [UDP Query User{F8921064-D517-4AEC-BA73-3C5CA30424B2}C:\users\macgyver\downloads\srv\sc-9865411\saintsrowiv.exe] => (Allow) C:\users\macgyver\downloads\srv\sc-9865411\saintsrowiv.exe
    FirewallRules: [{F91717F6-248F-465A-962B-A3F4DD6042F5}] => (Block) C:\users\macgyver\downloads\srv\sc-9865411\saintsrowiv.exe
    FirewallRules: [{EBD9078D-9969-43DD-9C28-4B10C228C528}] => (Block) C:\users\macgyver\downloads\srv\sc-9865411\saintsrowiv.exe
    FirewallRules: [TCP Query User{94DC9C74-8F86-4C45-87B2-B2184460EFA3}C:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe
    FirewallRules: [UDP Query User{E0D0D484-0C4D-43A0-8306-94D642572A22}C:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe
    FirewallRules: [TCP Query User{04275490-BBFD-4672-91C1-17958D4B51BE}C:\program files (x86)\total war rome ii\rome2.exe] => (Allow) C:\program files (x86)\total war rome ii\rome2.exe
    FirewallRules: [UDP Query User{75107A7C-EF5C-4D14-8247-45DB74564E5F}C:\program files (x86)\total war rome ii\rome2.exe] => (Allow) C:\program files (x86)\total war rome ii\rome2.exe
    FirewallRules: [{06F270A0-14F4-487C-8012-97B741375C33}] => (Block) C:\program files (x86)\total war rome ii\rome2.exe
    FirewallRules: [{3874FBA3-7DEA-4F03-A660-47519B3E7452}] => (Block) C:\program files (x86)\total war rome ii\rome2.exe
    FirewallRules: [TCP Query User{DF59A8F6-0926-458F-A6B7-F5ED4DF0D642}C:\program files (x86)\paradox interactive\crusader kings ii\ck2.exe] => (Allow) C:\program files (x86)\paradox interactive\crusader kings ii\ck2.exe
    FirewallRules: [UDP Query User{80731885-EF3F-4FD4-ABE2-9B44A5BBA678}C:\program files (x86)\paradox interactive\crusader kings ii\ck2.exe] => (Allow) C:\program files (x86)\paradox interactive\crusader kings ii\ck2.exe
    FirewallRules: [{9E97CDC8-F384-4994-AD96-A40359A10B29}] => (Block) C:\program files (x86)\paradox interactive\crusader kings ii\ck2.exe
    FirewallRules: [{B3860ED0-CC25-4C64-952B-97AC1E950BBC}] => (Block) C:\program files (x86)\paradox interactive\crusader kings ii\ck2.exe
    FirewallRules: [{3221AD17-ED0E-420F-8E89-5D4494E05D34}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe
    FirewallRules: [{67F3B4AF-E36A-4624-AE7C-E3C59942CF52}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe
    FirewallRules: [{3A2A8DB1-F89D-4935-AEC0-274F045CB6C9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
    FirewallRules: [{D50E1EB0-B389-4D3A-8C43-A717608BF32E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
    FirewallRules: [TCP Query User{B6B52FCC-2D72-4289-8688-7C28660505EE}C:\program files (x86)\starcraft ii\versions\base26490\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base26490\sc2.exe
    FirewallRules: [UDP Query User{05569083-6010-4323-92A5-B0E933C25BB0}C:\program files (x86)\starcraft ii\versions\base26490\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base26490\sc2.exe
    FirewallRules: [{05863B2D-5D4F-4161-8C04-ED06079120FD}] => (Block) C:\program files (x86)\starcraft ii\versions\base26490\sc2.exe
    FirewallRules: [{295B0018-30EF-48C3-BD84-685C6FC41C4B}] => (Block) C:\program files (x86)\starcraft ii\versions\base26490\sc2.exe
    FirewallRules: [{EFD5FA8F-822F-4631-8885-C387DCD99159}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
    FirewallRules: [{8A23DAAF-F043-4B61-810B-DFF8098AFF9A}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
    FirewallRules: [{C4C39A75-7CBF-45DD-9984-7E95E1B4603C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Source\hl2.exe
    FirewallRules: [{A014F59A-85F2-43B5-9CFE-82179A12ECAA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Source\hl2.exe
    FirewallRules: [TCP Query User{E3391328-2D0B-44EB-B7AE-862CFFD17F55}C:\program files (x86)\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\eflc.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\eflc.exe
    FirewallRules: [UDP Query User{A6C34A54-ED68-4BD9-A990-E2A0C07EFD85}C:\program files (x86)\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\eflc.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\eflc.exe
    FirewallRules: [{FA24D5EF-9275-421D-9586-F17CBA848A48}] => (Block) C:\program files (x86)\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\eflc.exe
    FirewallRules: [{3624B33A-06E9-4403-9CD6-241EA56DD33F}] => (Block) C:\program files (x86)\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\eflc.exe
    FirewallRules: [{287AC7D6-FBF2-4FD7-951D-EE3EB5A28498}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\skyrim\SkyrimLauncher.exe
    FirewallRules: [{7670A5B4-31BA-49D9-B11C-90A84E749B58}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\skyrim\SkyrimLauncher.exe
    FirewallRules: [{DEE41F71-FE8E-498B-8F1E-BE7487BB2BF2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\superbrothers sword & sworcery ep\swordandsworcery_pc.exe
    FirewallRules: [{CDF31F07-EF74-4DBE-8E5F-C1C312708C1A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\superbrothers sword & sworcery ep\swordandsworcery_pc.exe
    FirewallRules: [TCP Query User{8CF5DC84-6403-4C4C-9173-5D2FB958D168}C:\users\macgyver\appdata\local\temp\gw2.exe] => (Allow) C:\users\macgyver\appdata\local\temp\gw2.exe
    FirewallRules: [UDP Query User{881B6CC9-3259-4D99-9FFF-670AC7A6DF53}C:\users\macgyver\appdata\local\temp\gw2.exe] => (Allow) C:\users\macgyver\appdata\local\temp\gw2.exe
    FirewallRules: [{DECF7692-ACC6-4920-ACA0-4A369D202E96}] => (Block) C:\users\macgyver\appdata\local\temp\gw2.exe
    FirewallRules: [{D76FD52C-F538-42A1-A312-C38623C93678}] => (Block) C:\users\macgyver\appdata\local\temp\gw2.exe
    FirewallRules: [TCP Query User{D6610F34-DFC7-4BE7-AC73-97008E296F81}C:\program files (x86)\guild wars 2\gw2.exe] => (Allow) C:\program files (x86)\guild wars 2\gw2.exe
    FirewallRules: [UDP Query User{94E049B3-0C75-4FB6-B3BD-464A45383871}C:\program files (x86)\guild wars 2\gw2.exe] => (Allow) C:\program files (x86)\guild wars 2\gw2.exe
    FirewallRules: [{C664B7B9-ABB8-4081-AEB3-A3A5C4EB5E01}] => (Block) C:\program files (x86)\guild wars 2\gw2.exe
    FirewallRules: [{C659EF39-1B7A-4823-9636-E78A6102E909}] => (Block) C:\program files (x86)\guild wars 2\gw2.exe
    FirewallRules: [{210444EE-7805-4715-8F7D-2CD01B9582A3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Spelunky\Spelunky.exe
    FirewallRules: [{1EF989EA-8B0D-45FE-9C5D-ED93619213C5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Spelunky\Spelunky.exe
    FirewallRules: [{D3351E63-14AE-42A1-8F92-7BC5ED9EF852}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\arma 2 operation arrowhead\ArmA2OA.exe
    FirewallRules: [{70F0091C-B164-4871-BA16-C543E05A9CD1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\arma 2 operation arrowhead\ArmA2OA.exe
    FirewallRules: [{DFDB45D1-676A-4455-8BB6-8242A2DF7E2B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\arma 2 operation arrowhead\Expansion\beta\arma2oa.exe
    FirewallRules: [{A119B746-03A8-4914-A83B-87CEF68875BC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\arma 2 operation arrowhead\Expansion\beta\arma2oa.exe
    FirewallRules: [{97D8A8F5-E149-4F63-BCA2-A15298AF9EC1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham City GOTY\Binaries\Win32\BatmanAC.exe
    FirewallRules: [{152E1A0B-0082-472B-B001-6C8F89F5D2D3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham City GOTY\Binaries\Win32\BatmanAC.exe
    FirewallRules: [{34471D61-60F2-43DB-9B8F-0FCDB43E118A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham City GOTY\RunLauncher.bat
    FirewallRules: [{6CA7B4FF-AF87-4275-A0B1-E1F479FD222A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham City GOTY\RunLauncher.bat
    FirewallRules: [{2234138D-5CED-4325-85F2-0B9EEE5F6FEC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2293\Agent.exe
    FirewallRules: [{1DAC7645-61D1-4BA9-9023-930C9586643B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2293\Agent.exe
    FirewallRules: [{18E79263-F1F7-4FA3-BD9C-9492429B1391}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
    FirewallRules: [{CCDE77EA-4E5A-48C3-A820-BD44C092163F}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
    FirewallRules: [{0E8D328E-C7DA-4F77-A9C4-0E3F2D953146}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
    FirewallRules: [{3E589566-F998-409E-BA15-869510C158E5}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
    FirewallRules: [{D6170126-5061-4B44-B243-447431E9E929}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\chivalrymedievalwarfare\Binaries\Win32\UDK.exe
    FirewallRules: [{3EEBD1B9-CFDE-40E0-8109-C2BBE9D8D719}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\chivalrymedievalwarfare\Binaries\Win32\UDK.exe
    FirewallRules: [{EDC57275-DF7A-456D-936F-43B251610021}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\magicka\Magicka.exe
    FirewallRules: [{B815B22C-F727-4CE6-9A57-707B38DA1CCA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\magicka\Magicka.exe
     
  6. 2016/07/09
    PlanetAlps

    PlanetAlps Member Thread Starter

    Joined:
    2016/07/09
    Messages:
    47
    Likes Received:
    0
    irewallRules: [{47F68BB5-9274-439E-86CB-E15472936787}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2328\Agent.exe
    FirewallRules: [{091ED815-DB94-46A9-96E5-AD1867DDE1BC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2328\Agent.exe
    FirewallRules: [{C103CE4B-4438-41C8-82B5-D9DDA6292F43}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\lone survivor\LoneSurvivor\LoneSurvivor.exe
    FirewallRules: [{6699D03B-6CD3-459F-94DD-D3CED418FE40}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\lone survivor\LoneSurvivor\LoneSurvivor.exe
    FirewallRules: [{495F4428-95F3-4206-8A7B-965D1AF3CD78}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2359\Agent.exe
    FirewallRules: [{92816AF8-D8C5-4716-A211-B67C7C90ADDF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2359\Agent.exe
    FirewallRules: [{B181D937-5A35-4BC3-A298-A62C39318A5C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
    FirewallRules: [{4A17F249-D2BD-4E68-BA84-177478F21946}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
    FirewallRules: [{82AE8CEA-B819-4733-A16C-EBD84DBA154A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{13C5D0D9-E66D-449C-8BD0-C2060BB4E8A6}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{72F4293E-AB8A-464D-98AB-32740285E37D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2391\Agent.exe
    FirewallRules: [{87D46867-C60F-4BEE-A4ED-725E005E6472}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2391\Agent.exe
    FirewallRules: [TCP Query User{098E45B0-3D0E-4B97-A9A7-05FE34B280C3}C:\users\macgyver\downloads\m-skidrowcrack.com\6545641526sc-xeu\binaries\win32\xcomgame.exe] => (Allow) C:\users\macgyver\downloads\m-skidrowcrack.com\6545641526sc-xeu\binaries\win32\xcomgame.exe
    FirewallRules: [UDP Query User{C6B70A03-8823-4602-A13E-B444E00D4DA3}C:\users\macgyver\downloads\m-skidrowcrack.com\6545641526sc-xeu\binaries\win32\xcomgame.exe] => (Allow) C:\users\macgyver\downloads\m-skidrowcrack.com\6545641526sc-xeu\binaries\win32\xcomgame.exe
    FirewallRules: [{0B2B43E9-4465-4740-BBC7-50480973CD44}] => (Block) C:\users\macgyver\downloads\m-skidrowcrack.com\6545641526sc-xeu\binaries\win32\xcomgame.exe
    FirewallRules: [{E0DF0BA6-EE1B-4E4B-BA4D-45024EDF4981}] => (Block) C:\users\macgyver\downloads\m-skidrowcrack.com\6545641526sc-xeu\binaries\win32\xcomgame.exe
    FirewallRules: [{F72EE0AA-56F9-47FD-8DDE-B5DE7916ECEA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Worms Clan Wars\WormsClanWars.exe
    FirewallRules: [{C4CDAD85-086F-4280-929A-5AD996DDF2AC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Worms Clan Wars\WormsClanWars.exe
    FirewallRules: [{AB0CF07D-F8C6-417B-BA64-618E97DB12D9}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
    FirewallRules: [{9038BCBF-72D9-41D0-9FE0-6523FC4043E6}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
    FirewallRules: [{5B1B94CD-C2F8-42B3-8B65-8F1A7AAD4527}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
    FirewallRules: [{11359F3E-0475-4538-B6CB-346E0B507441}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
    FirewallRules: [{AA5B4619-1FDA-4B7C-9ACC-4ECD5978CA00}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
    FirewallRules: [{7ACAEA07-1971-47A7-9736-2E62C5C07013}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
    FirewallRules: [{5E6426DC-BFC6-4E1A-9FE0-89DF286FF9D3}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
    FirewallRules: [{92971C7B-C33D-4B14-BCE3-8F62F5B36AD1}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
    FirewallRules: [{4CF925AA-BC6D-47AC-9637-A96D0314F526}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
    FirewallRules: [{423A6EC3-43B4-4B84-8E13-DAE1AB1F3137}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
    FirewallRules: [TCP Query User{9B39A1B1-22F8-4A02-9695-3A42D8B2E5B0}C:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe
    FirewallRules: [UDP Query User{8DE0E772-090C-4CE6-8202-ED56A267C629}C:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe
    FirewallRules: [{AEB0ED4D-7363-4B51-99A6-F7552E1CE597}] => (Block) C:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe
    FirewallRules: [{65B61D20-4260-4118-9282-3D2E0654C5B7}] => (Block) C:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe
    FirewallRules: [{9510B920-2FC2-4BE5-8638-5EBB107F043A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\farcry3.exe
    FirewallRules: [{6BB971F0-AC38-4DB7-A1DA-864A83C8871B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\farcry3.exe
    FirewallRules: [{8023F919-99F5-4E0F-AC60-CCA9258E9C64}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\farcry3_d3d11.exe
    FirewallRules: [{1BF26BCE-9D27-4C12-8B38-71BD9820618B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\farcry3_d3d11.exe
    FirewallRules: [{66E3BEB5-88F1-4E72-ADAD-475A8213024C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
    FirewallRules: [{7872B3E2-B969-4C7B-B3D3-6E648EF4C09C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
    FirewallRules: [{2FC357A9-A89E-42E8-A7AA-3AEA05326CED}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
    FirewallRules: [{D70D0144-978D-4101-988B-148F838CFB93}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
    FirewallRules: [{A60872D4-326F-4336-BE52-9717CE8DD5A5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3.exe
    FirewallRules: [{79832585-1C21-47E4-9C16-16D44A42269C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3.exe
    FirewallRules: [{A53BFD56-35D7-47F0-B37E-3D2ECA1C4743}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3.exe
    FirewallRules: [{1C5C74D5-0E6A-45CC-91E2-0CA5974F7F9A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3.exe
    FirewallRules: [{DD61FE73-3310-4D2C-9086-8B61CF1BAB1C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3.exe
    FirewallRules: [{192EB324-9B1C-4052-AA32-11F433FD98DC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3.exe
    FirewallRules: [{0BCC0985-8BB7-4C39-BF6E-D7CDC55BB6BF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3.exe
    FirewallRules: [{E2DA3C57-B505-47F6-800E-7FE36140E403}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3.exe
    FirewallRules: [{230B4472-4C77-4738-AC2E-266EA238AC43}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MagickaWizardWars\WizardWars.bat
    FirewallRules: [{765743C1-DD43-4965-B598-1F6659CDF77C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MagickaWizardWars\WizardWars.bat
    FirewallRules: [{9DF9DEBC-799F-4F85-B5BA-746F79FB74BB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
    FirewallRules: [{3D45B389-5BAD-40DF-AD1C-393B630526DC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
    FirewallRules: [{FFE7005A-B840-4572-84E0-9159D9453277}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
    FirewallRules: [{67669EE0-6F8E-463D-BE32-8260D159F4BB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
    FirewallRules: [{500BF5A5-6F10-47D0-AAF0-531AAAB45E02}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3.exe
    FirewallRules: [{74BE6D04-D6CC-44F6-9940-8E9981314A54}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3.exe
    FirewallRules: [{C3822E60-6F32-4031-B686-C2854ED7505D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3.exe
    FirewallRules: [{2E5B81F5-79BD-4B71-A2DB-53CF02C65106}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3.exe
    FirewallRules: [{F893A19E-8DD2-4AD8-AF32-BCF4824BC7C1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2417\Agent.exe
    FirewallRules: [{4E7CCABA-E52E-45F6-B15E-512D91AFEF70}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2417\Agent.exe
    FirewallRules: [TCP Query User{119B514E-1009-4BCF-96B3-4ACC3B8F54DB}C:\program files (x86)\steam\steamapps\common\magickawizardwars\bitsquid_win32_dev.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\magickawizardwars\bitsquid_win32_dev.exe
    FirewallRules: [UDP Query User{39F1C8BD-E166-40F3-913D-A9E6E67B7DF9}C:\program files (x86)\steam\steamapps\common\magickawizardwars\bitsquid_win32_dev.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\magickawizardwars\bitsquid_win32_dev.exe
    FirewallRules: [{78C26501-F422-40F8-ADA3-0AA0E60CD945}] => (Block) C:\program files (x86)\steam\steamapps\common\magickawizardwars\bitsquid_win32_dev.exe
    FirewallRules: [{BE856E5D-D347-497B-877E-964481A23DE1}] => (Block) C:\program files (x86)\steam\steamapps\common\magickawizardwars\bitsquid_win32_dev.exe
    FirewallRules: [{196B1C21-F4F3-49D8-9458-0DBF87061B5C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
    FirewallRules: [{A627B7E2-3F43-4379-B952-D83416087675}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
    FirewallRules: [{E2C8B0CC-F2AC-42EE-B4C8-7952B3480F7C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3.exe
    FirewallRules: [{C00453F2-B8E0-43F2-A172-B9FCF9CA6CE9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3.exe
    FirewallRules: [{83780C0F-AC2A-47AE-BFAA-1D6AED7AB9B2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3.exe
    FirewallRules: [{5175FF32-69C0-49B7-9171-7D6C336B1CA4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3.exe
    FirewallRules: [{C9CE83CD-84E0-44D9-BB39-1F900758581F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MagickaWizardWars\WizardWars.bat
    FirewallRules: [{88270E8D-321F-4731-9A77-6399B6865774}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MagickaWizardWars\WizardWars.bat
    FirewallRules: [TCP Query User{1831375D-3DC0-4469-839C-E361133DBED8}C:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe
    FirewallRules: [UDP Query User{3C990D9F-F599-43C0-978C-B87696C5B558}C:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe
    FirewallRules: [{194A50FF-17DE-4473-BE25-7E5A0988DC06}] => (Allow) C:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe
    FirewallRules: [{9083E083-C739-4FEA-AADB-B979F9D8704B}] => (Allow) C:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe
    FirewallRules: [{384F85E3-989A-48D0-9478-14701C6E03F2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
    FirewallRules: [{B1AAD299-2474-4CEA-926D-E68B9F52647C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
    FirewallRules: [{42306C3B-AFF8-4BD1-A89F-F41E88596E3E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
    FirewallRules: [{4876BFB5-1AD5-40E3-A52D-659B36366797}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
    FirewallRules: [{659DF4A8-40C5-4DF6-8C6E-024B666D0AE1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Crusader Kings II\ck2game.exe
    FirewallRules: [{E1E4CB41-DEB6-43CA-821E-FE52982A3B26}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Crusader Kings II\ck2game.exe
    FirewallRules: [{DD5D5282-4F52-4AB1-9974-7FD1973ED0F9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
    FirewallRules: [{91F310FC-D033-4D09-A212-043ACA560DF7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
    FirewallRules: [{86068A78-43FF-430C-B075-3EC667573082}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Monaco\MONACO.exe
    FirewallRules: [{CEA36FB6-BA30-4111-B08F-F400935CFEB8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Monaco\MONACO.exe
    FirewallRules: [{83BF107B-5D74-4F07-B6D4-2465FA048315}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MagickaWizardWars\WizardWars.bat
    FirewallRules: [{1BE9CE9C-F39B-485D-B43F-666DE83EB8C9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MagickaWizardWars\WizardWars.bat
    FirewallRules: [{3B91453A-285F-4C56-AE08-AE62E0DBF9C4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rogue Legacy\RogueLegacy.exe
    FirewallRules: [{BBFC47AC-C0A5-4DF3-BF8F-D3E75DE21C35}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rogue Legacy\RogueLegacy.exe
    FirewallRules: [{73317BAE-9B8B-4FD4-8BDF-819F50DA46D6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rogue Legacy\RogueLegacy.exe
    FirewallRules: [{1D352C03-8C73-4666-97A9-A9BA3DB06B8E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rogue Legacy\RogueLegacy.exe
    FirewallRules: [{19522E33-E25D-4B84-B9C2-8DDBA45765E4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Monaco\MONACO.exe
    FirewallRules: [{D8FF4570-2F8E-4D9B-9068-FECC39870450}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Monaco\MONACO.exe
    FirewallRules: [{7F82146C-68F5-4269-A1BB-689F515D7606}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
    FirewallRules: [{353A0407-3557-41DA-AEA8-DA9950FA7705}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
    FirewallRules: [{8A2A8DB7-5FAB-4F97-88EE-15768D883CBA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Monaco\MONACO.exe
    FirewallRules: [{D9B401D4-CCA4-4368-A94E-334D91EF79CB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Monaco\MONACO.exe
    FirewallRules: [{750D060C-2432-425C-9BAD-61D664D93C8B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Monaco\MONACO.exe
    FirewallRules: [{238CCD8A-2428-4CA1-94A4-5228D527A57F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Monaco\MONACO.exe
    FirewallRules: [{1A61F9C0-A2EC-4D8F-9875-4A26AA16405B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Monaco\MONACO.exe
    FirewallRules: [{1B3C21DA-4E20-4657-A05B-B28A3366ED91}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Monaco\MONACO.exe
    FirewallRules: [{3ED7E6D8-4F2A-47F2-8ABF-2AB4440F360C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
    FirewallRules: [{2DA6C8C0-92CF-4629-8722-5A2B0BCD2D93}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
    FirewallRules: [{43D94DC7-E972-4FDC-8B4F-4433F0AE84FD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MagickaWizardWars\WizardWars.bat
    FirewallRules: [{6E8515A2-4028-4860-83E9-B4F83B602EE3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MagickaWizardWars\WizardWars.bat
    FirewallRules: [{5EDC5CFE-4006-4972-BA6C-6B1CB7395C6C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rogue Legacy\RogueLegacy.exe
    FirewallRules: [{745B6774-586A-49CA-96B5-67F69912B85B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rogue Legacy\RogueLegacy.exe
    FirewallRules: [{671042F6-BA6D-4C58-83A8-33C3F65ED858}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Monaco\MONACO.exe
    FirewallRules: [{8178378B-D31D-4CAB-A12E-9B0CCB1AF1E6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Monaco\MONACO.exe
    FirewallRules: [{BA2E4DC0-C7F9-4669-AF2C-DEB7CC22CBF5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Just Cause 2 - Multiplayer Mod\JcmpLauncher.exe
    FirewallRules: [{1058F549-85AF-4B29-A975-1E1EB59817AC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Just Cause 2 - Multiplayer Mod\JcmpLauncher.exe
    FirewallRules: [{22BAC93F-DBDA-43AC-9ED9-1E540EFD1627}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\terraria\Terraria.exe
    FirewallRules: [{77448E7A-D802-4424-9656-F13CDD6A92E6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\terraria\Terraria.exe
    FirewallRules: [{393926EC-A193-4614-BB23-FEC0F2CA840A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2514\Agent.exe
    FirewallRules: [{2CE0599D-ACC1-4771-973A-2B5EDEBB8DB6}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2514\Agent.exe
    FirewallRules: [{AEC1BC46-E5B8-4C7B-89B3-5944818B4309}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Crusader Kings II\ck2game.exe
    FirewallRules: [{08F6D438-480F-4028-ACB1-0D0FD47E0D36}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Crusader Kings II\ck2game.exe
    FirewallRules: [{E847DE7C-B5EF-4728-B025-694F22117026}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Just Cause 2 - Multiplayer Mod\JcmpLauncher.exe
    FirewallRules: [{EBDFBA1C-A9D2-42E4-84FC-8096257CC006}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Just Cause 2 - Multiplayer Mod\JcmpLauncher.exe
    FirewallRules: [{E79919B8-036F-49D8-B055-69A08C0D10CA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ.exe
    FirewallRules: [{F6CF47EF-F462-451D-A51D-8667A6BA4128}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ.exe
    FirewallRules: [{9BC434E2-2AEE-431E-AA7B-813F4F1DFF99}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Crusader Kings II\ck2game.exe
    FirewallRules: [{F0618370-5C05-44EA-8600-9F6F897DF666}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Crusader Kings II\ck2game.exe
    FirewallRules: [{1C087221-2E10-4D2C-93CA-E7E1C5BB2E86}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
    FirewallRules: [{991A4154-273F-4E5B-A3A6-EF7DB382FD15}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
    FirewallRules: [{04EBF8C4-3E1E-441F-ABB5-21A2FE193A83}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
    FirewallRules: [{250295AD-E841-415C-B710-26FE1C9DBE05}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\left 4 dead 2\left4dead2.exe
     
  7. 2016/07/09
    PlanetAlps

    PlanetAlps Member Thread Starter

    Joined:
    2016/07/09
    Messages:
    47
    Likes Received:
    0
    FirewallRules: [{BC78E720-0D21-45B5-8965-09D1186A97A7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ.exe
    FirewallRules: [{DF0D0DD2-A7C9-4436-86A7-19630C7E8D59}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ.exe
    FirewallRules: [{FC9DC31C-CBBD-4F62-962D-542CACFC697B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ.exe
    FirewallRules: [{4D92A0D6-E63D-4DDB-A2F1-D3A75BCDD9CE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ.exe
    FirewallRules: [{12F751F6-725B-480D-AAB9-D4E43589127D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Half-Life 2\hl2.exe
    FirewallRules: [{0A66EBC9-9CB3-41A7-AA4A-6DCC8CC95B08}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Half-Life 2\hl2.exe
    FirewallRules: [{C0B5B373-0C27-4F18-82A7-D2C3E52FC4C1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal\hl2.exe
    FirewallRules: [{6E464E12-7D76-4021-82F0-D9ABCC785DF8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal\hl2.exe
    FirewallRules: [{3E4A9189-33D4-46EE-8406-FFE79D755554}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
    FirewallRules: [{7A8175EC-14DD-463A-9BAA-BDEAE8075AE5}] => (Allow) C:\Program Files (x86)\Tunngle\Tnglctrl.exe
    FirewallRules: [{29720FEA-8508-4124-A345-923489E7164A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe
    FirewallRules: [{F0B15140-72AD-4701-968B-F77329AC212B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe
    FirewallRules: [{6559755B-DF8A-4FE2-AECC-0AB1FD3F818A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
    FirewallRules: [{85013F8B-FC65-46DD-BE91-E8FFBE2B4DD3}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
    FirewallRules: [{9E517625-937C-414F-BBA3-44A3A6183559}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Overgrowth\Overgrowth.exe
    FirewallRules: [{9119BC98-16B3-480D-9990-BF34CBDB990A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Overgrowth\Overgrowth.exe
    FirewallRules: [{189B46E2-5A28-4FCD-82C5-72B282B8B703}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
    FirewallRules: [{264DE7A7-00B9-4109-8319-22C48F174738}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
    FirewallRules: [{C8F37EC4-424C-4E6F-A3D6-24663A275067}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
    FirewallRules: [{5A597A17-BFB6-405D-BA69-98DD0985E917}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
    FirewallRules: [{7F914D8D-1D6C-4037-96CF-BC0E1AE44559}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
    FirewallRules: [{09666761-933E-4E0A-B2C5-338865DDC651}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
    FirewallRules: [{3AD0EE83-5439-4656-9A4D-B0F4E08DCF9E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Testament of Sherlock Holmes\game.exe
    FirewallRules: [{961F9B12-A361-429E-B17C-B7C6C8E3FCC2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Testament of Sherlock Holmes\game.exe
    FirewallRules: [{64040475-9186-4AB7-B1AC-F0DA1EC5BEEB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation\PA.exe
    FirewallRules: [{D1AC1932-8328-4909-B032-35273D226527}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation\PA.exe
    FirewallRules: [{2E25730B-852B-4F1F-B6D3-4E6F6CC49F0E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
    FirewallRules: [{3EFEEECB-EACD-4832-AEAB-AE73BE85F7E3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
    FirewallRules: [{F39AF226-2F95-4D02-BE02-71A9A769FE5E}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe
    FirewallRules: [{E3AD1BBB-0DAA-49E5-ABC6-6A9F184D0063}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe
    FirewallRules: [{915042A2-8B4D-4AD8-B7EF-3EE2A0E2923E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
    FirewallRules: [{66AA84AF-988B-4AE6-A9A4-0F85CE1D34D2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
    FirewallRules: [{DD66B85F-7B37-45D5-87E5-5C735E360408}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
    FirewallRules: [{01A35536-5044-44E9-8D5E-A10FECFF085C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
    FirewallRules: [{0757A3C1-A8AE-4016-B368-FC75942C27D8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FTL Faster Than Light\FTLGame.exe
    FirewallRules: [{4062ED51-4E33-4DDC-AB61-345B6F1BBD3D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FTL Faster Than Light\FTLGame.exe
    FirewallRules: [{4A240CC0-FFF9-4618-B3DB-A65178711533}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2787\Agent.exe
    FirewallRules: [{5FFD07F0-EE75-4964-83F8-D36DB7D407B3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2787\Agent.exe
    FirewallRules: [TCP Query User{7373E4A3-2CE2-491B-92CA-3CCAAE011B5D}C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe
    FirewallRules: [UDP Query User{EBB89386-5481-49CA-96BD-079DAE76FCC5}C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe
    FirewallRules: [{8DEB5793-5830-4BC3-AF96-6606D8F9E39F}] => (Block) C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe
    FirewallRules: [{5075AFAD-E584-40A0-AFCF-D352CDB6E3CA}] => (Block) C:\program files (x86)\starcraft ii\versions\base28667\sc2.exe
    FirewallRules: [{1B3714D8-314F-4645-A501-4D29106A9F04}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2816\Agent.exe
    FirewallRules: [{4B5C8E42-CAA6-4962-BB65-6C49964D9EBB}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2816\Agent.exe
    FirewallRules: [{5C33036C-4221-4B3E-B3D3-C41298F4339F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Walking Dead\WalkingDead101.exe
    FirewallRules: [{0FC88FC5-48F5-4680-8521-7285EBF54921}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Walking Dead\WalkingDead101.exe
    FirewallRules: [{C7574123-579F-4A89-B4C1-5AD719034889}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
    FirewallRules: [{15FA2052-F514-446F-A413-C746C816AB37}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
    FirewallRules: [{2E4BDA50-C9BA-4392-802E-89515C0F75F1}] => (Allow) C:\Program Files\Ubisoft\WATCH_DOGS\bin\Watch_Dogs.exe
    FirewallRules: [{DBBDBC03-A544-4BE7-96CB-E4A3189CB447}] => (Allow) C:\Program Files\Ubisoft\WATCH_DOGS\bin\Watch_Dogs.exe
    FirewallRules: [{19B960BF-BAC8-4AA1-9DAC-48076121D2BF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sniper Elite V2\bin\SniperEliteV2.exe
    FirewallRules: [{FF4C2370-E58F-4860-81FE-EC8FCFBDA615}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sniper Elite V2\bin\SniperEliteV2.exe
    FirewallRules: [{A3914FBF-A661-41A8-9AD1-0BEF61E4D9C3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe
    FirewallRules: [{95942DF0-1B99-4037-B183-4BD1AEA184B9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe
    FirewallRules: [{DBA6128F-CA6D-4F20-BDB2-AAA1B940A501}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PapersPlease\PapersPlease.exe
    FirewallRules: [{CBB98092-38BC-4F0E-B926-51CA77805C32}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PapersPlease\PapersPlease.exe
    FirewallRules: [{C04A457B-8347-4F1B-9828-73CDECC3D79E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\hotline_miami\HotlineMiami.exe
    FirewallRules: [{0667AF0A-9EE3-4830-A6B3-7039B798A6A4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\hotline_miami\HotlineMiami.exe
    FirewallRules: [TCP Query User{3230372C-7F17-4FA6-B928-5A8A4534D114}C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe
    FirewallRules: [UDP Query User{754CDB58-9620-473D-998A-9CF93875D465}C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe
    FirewallRules: [{B4EABB81-4A05-42BC-9E75-6E30D82B7BD8}] => (Block) C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe
    FirewallRules: [{47F7BF8B-6AFE-4B36-9ADB-DFA5FC59B174}] => (Block) C:\program files (x86)\steam\steamapps\common\the witcher 2\bin\witcher2.exe
    FirewallRules: [{F9CBD212-1DAE-4EB1-9E9F-C13851D917A0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BattleBlock Theater\BattleBlockTheater.exe
    FirewallRules: [{9E601441-5537-4BD0-B5F4-A867819204DF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BattleBlock Theater\BattleBlockTheater.exe
    FirewallRules: [{DD3432AE-CC3D-4EA0-9ADE-211FBE9D1DA6}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
    FirewallRules: [{E898F43D-5CD2-4F0B-9280-2E17D9873EED}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
    FirewallRules: [TCP Query User{86834C76-1A3E-4093-A693-9CDEDE211991}C:\program files (x86)\steam\steamapps\common\nether\game\binaries\win64\nether.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\nether\game\binaries\win64\nether.exe
    FirewallRules: [UDP Query User{055BB6A6-6B5E-4196-AFB0-C9ED8A45C566}C:\program files (x86)\steam\steamapps\common\nether\game\binaries\win64\nether.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\nether\game\binaries\win64\nether.exe
    FirewallRules: [{127B52E0-1B0F-47AB-9A42-D2C1B064FCBE}] => (Block) C:\program files (x86)\steam\steamapps\common\nether\game\binaries\win64\nether.exe
    FirewallRules: [{69DD6BF8-2292-4B06-B32A-B60704B7B169}] => (Block) C:\program files (x86)\steam\steamapps\common\nether\game\binaries\win64\nether.exe
    FirewallRules: [TCP Query User{A1F357FF-1D48-4C28-9A8F-B1C0E264F2EE}C:\users\macgyver\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\macgyver\appdata\roaming\spotify\spotify.exe
    FirewallRules: [UDP Query User{9A434992-3FAA-4CF5-9AD1-623C68E9BE57}C:\users\macgyver\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\macgyver\appdata\roaming\spotify\spotify.exe
    FirewallRules: [{63CD9A80-B100-4BED-B42A-38A0AA8141F8}] => (Block) C:\users\macgyver\appdata\roaming\spotify\spotify.exe
    FirewallRules: [{24821917-42F2-4003-BA98-FF50079E512A}] => (Block) C:\users\macgyver\appdata\roaming\spotify\spotify.exe
    FirewallRules: [{30083576-9E35-4D36-AAF7-2387BB9B3586}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\thomaswasalone\ThomasWasAlone.exe
    FirewallRules: [{DA6A820F-D316-4044-8394-A7126A845EF5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\thomaswasalone\ThomasWasAlone.exe
    FirewallRules: [TCP Query User{D418109D-35F5-4EDD-816E-BD96205A6FEE}C:\program files (x86)\steam\steamapps\common\crusader kings ii\ck2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\crusader kings ii\ck2.exe
    FirewallRules: [UDP Query User{A8D65D6D-9931-4216-B39A-94000A7006C9}C:\program files (x86)\steam\steamapps\common\crusader kings ii\ck2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\crusader kings ii\ck2.exe
    FirewallRules: [{E63DB7F6-39C6-46CA-BE35-06FD5313A656}] => (Block) C:\program files (x86)\steam\steamapps\common\crusader kings ii\ck2.exe
    FirewallRules: [{AB59396A-9EAD-4A87-8757-48F4786FFFB2}] => (Block) C:\program files (x86)\steam\steamapps\common\crusader kings ii\ck2.exe
    FirewallRules: [{D44C10AD-40F8-4AC7-A076-58509348EE2B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\arma 2 operation arrowhead\ArmA2OA_BE.exe
    FirewallRules: [{A653AF41-A8F2-48C8-8ACB-DEA0236A14BF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\arma 2 operation arrowhead\ArmA2OA_BE.exe
    FirewallRules: [{BFACFD3E-C278-48BC-A3D8-862ABDF9D81A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe
    FirewallRules: [{5AC07E6E-58AC-44D5-9C2B-CD60B675C1BD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe
    FirewallRules: [{16BDD0F7-A47F-4542-9CC2-93BB99A01275}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MountBlade Warband\mb_warband.exe
    FirewallRules: [{2E1B0EC3-CF22-46B2-8ED5-E3EBCC46BA5C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MountBlade Warband\mb_warband.exe
    FirewallRules: [{950CD6AB-AAE0-4B5F-BD5B-7F521BB64A73}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
    FirewallRules: [{410A1478-30BE-4F12-A8B9-7C35EBCF813D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
    FirewallRules: [{D415E582-6767-4150-AA94-6961C77A2896}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
    FirewallRules: [{0FD36B20-84AD-4A69-A948-F7FA0ADE51E8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
    FirewallRules: [{EE0999D4-FA81-48D5-94A0-64284CBB8B7C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Super Hexagon\superhexagon.exe
    FirewallRules: [{D9517C7B-0986-4426-8C61-A376D0BA11D3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Super Hexagon\superhexagon.exe
    FirewallRules: [{9B401F22-5559-46BC-B95B-5CFBBE63A505}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
    FirewallRules: [{74E38DE5-53FC-47E0-B68D-AD5E3E49B608}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
    FirewallRules: [{4B03E4B9-503D-47FB-95BB-8CFAFF95C7B7}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
    FirewallRules: [{037C3659-0ECC-4590-906F-8F8B9082274D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
    FirewallRules: [{4A7B118C-8AE3-4055-9FAE-5B0C9E063896}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MortalKombat_KompleteEdition\DiscContentPC\MKKE.exe
    FirewallRules: [{E0EB1FC7-12E1-4144-B309-D86B5A05118E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MortalKombat_KompleteEdition\DiscContentPC\MKKE.exe
    FirewallRules: [{E4FF82C9-446F-450E-B959-8E558885F8E3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MortalKombat_KompleteEdition\DiscContentPC\MKLauncher.exe
    FirewallRules: [{83405E48-0D95-49E3-AEFD-D60BF4D3DCD8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MortalKombat_KompleteEdition\DiscContentPC\MKLauncher.exe
    FirewallRules: [{04143FEA-F01F-4EB4-91C3-CC48977D1409}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
    FirewallRules: [{73EBCF60-582E-4591-BBC7-58E042AB7134}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
    FirewallRules: [{8C59EF21-B791-4F48-9D55-D70AC6C29215}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
    FirewallRules: [{7B5EF015-D9E0-4544-95F3-F682B50AB952}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
    FirewallRules: [{701BF3DB-28FC-40D9-AFF3-03F3F6071816}] => (Allow) C:\Program Files (x86)\StarCraft II Public Test\StarCraft II Public Test.exe
    FirewallRules: [{B36F05F5-5CF6-423E-A0DB-DA29DCA9EF1C}] => (Allow) C:\Program Files (x86)\StarCraft II Public Test\StarCraft II Public Test.exe
    FirewallRules: [TCP Query User{650D67F7-0397-4117-A0CE-FC521CE664C9}C:\program files (x86)\starcraft ii public test\versions\base31925\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii public test\versions\base31925\sc2.exe
    FirewallRules: [UDP Query User{14D820D9-A056-48C8-9F43-EC0546CAA36A}C:\program files (x86)\starcraft ii public test\versions\base31925\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii public test\versions\base31925\sc2.exe
    FirewallRules: [{371D6409-F8A2-4CF2-9247-E5D07FC766AF}] => (Block) C:\program files (x86)\starcraft ii public test\versions\base31925\sc2.exe
    FirewallRules: [{CBBA9E1C-F55D-4689-9C67-A8AFAE6876EA}] => (Block) C:\program files (x86)\starcraft ii public test\versions\base31925\sc2.exe
    FirewallRules: [{FA5C047F-F925-4FC6-B328-D91035BC607B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
    FirewallRules: [{99DD80C4-68BD-468E-9918-FC7AB92088BA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
    FirewallRules: [{AF6305CD-8E9B-4851-8114-0C9DD2FCC109}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
    FirewallRules: [{C5760581-1683-4974-8FA7-F0CCB2C17741}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
    FirewallRules: [{5970959E-844B-4D22-97B4-C8188A3967E1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
    FirewallRules: [{16CC2E99-8332-4B34-83A1-3D4B6D26A654}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
    FirewallRules: [TCP Query User{BD731DD9-4882-4CAC-B61F-405811D0AAA2}C:\program files (x86)\the vanishing of ethan carter\binaries\win64\astronautsgame-win64-shipping.exe] => (Allow) C:\program files (x86)\the vanishing of ethan carter\binaries\win64\astronautsgame-win64-shipping.exe
    FirewallRules: [UDP Query User{1AED87D4-C4CF-452F-A862-F17EFE0B3D07}C:\program files (x86)\the vanishing of ethan carter\binaries\win64\astronautsgame-win64-shipping.exe] => (Allow) C:\program files (x86)\the vanishing of ethan carter\binaries\win64\astronautsgame-win64-shipping.exe
    FirewallRules: [{81D7EC1C-988A-4D19-A217-A975DC49E550}] => (Block) C:\program files (x86)\the vanishing of ethan carter\binaries\win64\astronautsgame-win64-shipping.exe
    FirewallRules: [{9C3D0519-3B3D-4936-B092-674961B24E54}] => (Block) C:\program files (x86)\the vanishing of ethan carter\binaries\win64\astronautsgame-win64-shipping.exe
    FirewallRules: [{3CB92DBA-AC72-44D1-ABAE-3B1639732FFF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
    FirewallRules: [{BB908A16-BE75-406D-8EAB-4F4838A7BECA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
     
  8. 2016/07/09
    PlanetAlps

    PlanetAlps Member Thread Starter

    Joined:
    2016/07/09
    Messages:
    47
    Likes Received:
    0
    FirewallRules: [{1F931E62-0E4E-4E39-87BB-98CF4E4CD9C0}] => (Allow) LPort=27015
    FirewallRules: [{50EB3F4D-D584-475D-A6DE-C5493C829DB8}] => (Allow) LPort=27020
    FirewallRules: [{A9E43B61-91FA-4F72-ADB2-B9B30151DEC9}] => (Allow) LPort=27005
    FirewallRules: [{DFDD9F49-80E9-4403-8849-30CEABFF5BFE}] => (Allow) LPort=51840
    FirewallRules: [TCP Query User{1D08D644-2E8B-4E6D-95F3-0EA7825A6D08}C:\csgo-ds\srcds.exe] => (Allow) C:\csgo-ds\srcds.exe
    FirewallRules: [UDP Query User{DE906154-6ED6-488B-A8B8-7E2492844529}C:\csgo-ds\srcds.exe] => (Allow) C:\csgo-ds\srcds.exe
    FirewallRules: [{4C1B59DF-BA7A-4993-87C7-47CD98E41408}] => (Block) C:\csgo-ds\srcds.exe
    FirewallRules: [{E6D6F9EE-DE77-4ADA-B9B0-73B4A52ABDAB}] => (Block) C:\csgo-ds\srcds.exe
    FirewallRules: [{8E561F02-659B-4743-B7E0-82FEA163DC6F}] => (Allow) LPort=27015
    FirewallRules: [{3907D9A8-30B4-4A56-986E-98410344F1EC}] => (Allow) LPort=27016
    FirewallRules: [{0440C027-E9E6-4228-BE4E-91356B4F470C}] => (Allow) LPort=27016
    FirewallRules: [{B4ABEBB6-B94C-41B3-BF13-663E6C5B82ED}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
    FirewallRules: [{0A99ADEA-9894-459E-B42F-1E1FE93F4CA9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
    FirewallRules: [{F4EF2C96-46D1-45D7-8C99-B4DD2CFA797F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\CSNZ\Bin\cstrike-online.exe
    FirewallRules: [{4012E5CF-F876-430E-B243-E986C4876175}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\CSNZ\Bin\cstrike-online.exe
    FirewallRules: [{474CA430-FBE0-46C6-9D1B-1F9DBABAB317}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
    FirewallRules: [{EEC28BE5-44B1-4741-BA1D-77F2A94D4BB4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
    FirewallRules: [TCP Query User{4AD5AFD4-DB68-4EFF-B7BE-A1BAC23C1E04}C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe
    FirewallRules: [UDP Query User{1752D65C-ED83-4BC9-B708-879D40B0977C}C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe
    FirewallRules: [{E3A21EA2-64BE-4013-8B6A-594F44D3031E}] => (Block) C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe
    FirewallRules: [{CA83E132-6711-4EB5-91DC-B909B41CC3CD}] => (Block) C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe
    FirewallRules: [{45FAE39D-B762-45CE-9CEC-69D02AF2F936}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
    FirewallRules: [{4A7AF2CA-2C0A-45A8-9103-A205988B5180}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
    FirewallRules: [{DD7F4E59-3E0B-452A-82A6-C2922719234D}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
    FirewallRules: [{9FC46A9C-6BB1-4F4C-A087-AA64B2834FBB}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
    FirewallRules: [{EC96AD2E-50C8-43C5-930B-B4990DD1908E}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe
    FirewallRules: [{628EC94C-932B-43EF-8B62-B4FA33B83385}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe
    FirewallRules: [{FD0B1E61-4C2D-494C-9337-07EF032676FC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Evolve\Bin64_SteamRetail\StaticLauncher64.exe
    FirewallRules: [{14FFFC1A-E3DD-4EEC-B850-56D88E83A361}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Evolve\Bin64_SteamRetail\StaticLauncher64.exe
    FirewallRules: [{EEC218E8-D309-47CA-9834-57CEDB5859DB}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
    FirewallRules: [{2679E8BB-F0E8-4CA8-A0A8-F5A76DE82D21}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
    FirewallRules: [{3646B8BD-BDF8-48AF-B29B-B9EF8288B0D1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Just Cause 2\JustCause2.exe
    FirewallRules: [{4E14A2B5-BA18-4CC6-BB89-B3DFFED20102}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Just Cause 2\JustCause2.exe
    FirewallRules: [TCP Query User{5099213B-BF7D-44CB-8E41-FC998F6DBC2A}C:\program files (x86)\far cry 4\bin\farcry4.exe] => (Allow) C:\program files (x86)\far cry 4\bin\farcry4.exe
    FirewallRules: [UDP Query User{6A3F7E25-5D7A-4BDB-A3C8-5D11EABB7862}C:\program files (x86)\far cry 4\bin\farcry4.exe] => (Allow) C:\program files (x86)\far cry 4\bin\farcry4.exe
    FirewallRules: [{AA89CF57-981B-40CB-83FF-3811A5AFE19A}] => (Block) C:\program files (x86)\far cry 4\bin\farcry4.exe
    FirewallRules: [{7E179044-6BA2-4D31-9FD7-65F9B9D7321E}] => (Block) C:\program files (x86)\far cry 4\bin\farcry4.exe
    FirewallRules: [TCP Query User{A2FB97D1-B1FA-4439-A450-59E601AE1D7E}C:\udk\udk-2013-07\binaries\win32\udk.exe] => (Allow) C:\udk\udk-2013-07\binaries\win32\udk.exe
    FirewallRules: [UDP Query User{FFF7B3F7-062B-4787-9A08-AB8E3A25C5E5}C:\udk\udk-2013-07\binaries\win32\udk.exe] => (Allow) C:\udk\udk-2013-07\binaries\win32\udk.exe
    FirewallRules: [{B2DFD934-1FE9-4315-B050-CE1DBDC62073}] => (Block) C:\udk\udk-2013-07\binaries\win32\udk.exe
    FirewallRules: [{9EDDF389-1EC3-403D-B2E0-5E9B381F4E89}] => (Block) C:\udk\udk-2013-07\binaries\win32\udk.exe
    FirewallRules: [{1D737982-FD5B-4868-BCF3-7CD38A8E1F12}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\amnesia the dark descent\Amnesia.exe
    FirewallRules: [{4F272495-D51D-416D-9AE7-0DF6E84F6EA3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\amnesia the dark descent\Amnesia.exe
    FirewallRules: [{9336A2E0-53B7-4153-BA9E-41463F46382A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\amnesia the dark descent\Launcher.exe
    FirewallRules: [{567E0C5D-FE5A-4A01-BD81-DA1AFC7592F9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\amnesia the dark descent\Launcher.exe
    FirewallRules: [TCP Query User{601CC51C-71A3-46D1-A674-B438BB6DA691}C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe
    FirewallRules: [UDP Query User{8CBDFD6D-704D-4DB2-8CA4-468BDCABCC7E}C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe
    FirewallRules: [{C7611724-890F-477B-B223-D484A4440EE7}] => (Block) C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe
    FirewallRules: [{7B219B97-B81C-4572-8B3C-BB989793AC99}] => (Block) C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe
    FirewallRules: [TCP Query User{8AB6A4F3-300A-49E7-BC48-87D735233AF3}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
    FirewallRules: [UDP Query User{E32F3DBE-F6D3-408A-9F5D-F5C00D7148DE}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
    FirewallRules: [TCP Query User{45DC69F9-9A01-455F-9EF6-995C534D47B4}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
    FirewallRules: [UDP Query User{73C0E0B5-A0E0-417D-B139-70BD0FD68E49}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
    FirewallRules: [{261C5D35-F491-463B-B4FD-80B10F6B73C6}] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
    FirewallRules: [{2B690CD0-DC29-4DE3-93F4-7E3F0B8CEA4D}] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
    FirewallRules: [{9BC9C9A4-6131-4D9A-A7CD-AF9E1C06D1EC}] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
    FirewallRules: [{528EAF8C-375B-4A95-A5EF-F8C19F2ADA45}] => (Block) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
    FirewallRules: [{5B606BE7-CAD0-4CCB-8684-6E55CC6622FD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
    FirewallRules: [{1A7208BC-9F03-4D7B-A011-6DFC4D53D97D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
    FirewallRules: [{9690AD15-EED0-45A4-823A-F7EAB5EEF747}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid32.exe
    FirewallRules: [{AE610437-C7C6-4FA9-B324-6575ADC93DDF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid32.exe
    FirewallRules: [{DEC8E949-40F7-4619-987A-9E394B226E07}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Endless Legend\EndlessLegend.exe
    FirewallRules: [{3FFBA7FC-5526-483C-87A5-2AD5D5A5ACC7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Endless Legend\EndlessLegend.exe
    FirewallRules: [{A3F17785-34D9-44A4-BF37-7A5210599558}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
    FirewallRules: [{B2AED377-C0C8-4499-BDF3-3A314335A4B5}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
    FirewallRules: [{37B7BFE1-E3AA-458B-B2BF-4B2AA23BC1DC}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
    FirewallRules: [{BDC03EF6-FE0D-49DA-ABB8-B5599D149D0C}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
    FirewallRules: [{01C5C577-A7B7-4953-A922-C31989C5D4BB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty World at War\CoDWaW.exe
    FirewallRules: [{45335171-A0EC-43FB-A571-702E939F1DA6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty World at War\CoDWaW.exe
    FirewallRules: [{27586830-FAC8-4FE8-8D67-4D3EA3E97440}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty World at War\CoDWaWmp.exe
    FirewallRules: [{D2D7A0D0-EAF5-4A6F-BA2C-B105EE2401BF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty World at War\CoDWaWmp.exe
    FirewallRules: [TCP Query User{0AD4C7BB-930C-4159-8FB6-AF206DB8434B}C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe
    FirewallRules: [UDP Query User{515FE72A-2A47-4A44-930E-AF03A49D1D39}C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe
    FirewallRules: [{18E05A13-A8A7-40AB-A367-3C2EC65CF804}] => (Block) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe
    FirewallRules: [{0EA43B82-9435-4E13-BADF-24B372C17802}] => (Block) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe
    FirewallRules: [{CBF4E482-A2A6-49CA-95B5-37E3CCAB2780}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid64.exe
    FirewallRules: [{4C5B4944-D57D-4683-B9CF-5AB277311760}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid64.exe
    FirewallRules: [{FB22CF21-AA86-47D2-8194-2B436476B5BE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe
    FirewallRules: [{1FDF18F0-5D1C-43F7-B518-B50AF86C9632}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe
    FirewallRules: [{463DC4C6-594B-4238-A34D-00EFBE0C8BEF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
    FirewallRules: [{45E16892-4D3E-4794-B2D4-5E658C4D637A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
    FirewallRules: [{1A3D3958-D6AA-439D-A267-5AE65D4842F2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\EvolveBeta\Bin64_SteamRetail\StaticLauncher64.exe
    FirewallRules: [{B24B1B93-AD99-460F-8E41-6C7652B5C16D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\EvolveBeta\Bin64_SteamRetail\StaticLauncher64.exe
    FirewallRules: [{FDB29A67-1250-415F-B960-912CE8BA3EEB}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
    FirewallRules: [{672D0C80-39FA-4AA1-9890-279336A2302D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
    FirewallRules: [TCP Query User{CA0AE28C-ED44-49A1-9E36-E81751B6D699}C:\program files (x86)\dying light\dyinglightgame.exe] => (Allow) C:\program files (x86)\dying light\dyinglightgame.exe
    FirewallRules: [UDP Query User{5F543C04-DDB4-4EEE-9ECD-E3FC0AAA246D}C:\program files (x86)\dying light\dyinglightgame.exe] => (Allow) C:\program files (x86)\dying light\dyinglightgame.exe
    FirewallRules: [{BF8B0480-EDB3-4108-A163-9BD87A0321C6}] => (Block) C:\program files (x86)\dying light\dyinglightgame.exe
    FirewallRules: [{3A3F6A9C-AD0B-4005-ACE7-952C36F6BFA3}] => (Block) C:\program files (x86)\dying light\dyinglightgame.exe
    FirewallRules: [{D07633AD-D885-4114-8F2F-6EE5A318293B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation\bin_x64\PA.exe
    FirewallRules: [{9070DEDD-86BA-4A49-AF7C-0CB20355BA9E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Planetary Annihilation\bin_x64\PA.exe
    FirewallRules: [{F0AD662C-6FC8-40DE-AC85-5DC4929643EC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
    FirewallRules: [{CB562758-12E5-48C8-B1F2-2463BE922163}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
    FirewallRules: [TCP Query User{5CF6C340-CE8E-4D85-9197-31B3C352633B}C:\program files (x86)\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe
    FirewallRules: [UDP Query User{5FBCB5D4-70DC-497C-BE8A-2F81B35A80B9}C:\program files (x86)\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe
    FirewallRules: [{F010950A-8C3A-4BA6-BA4E-2795502BBA20}] => (Block) C:\program files (x86)\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe
    FirewallRules: [{B1D8E0AB-88AC-431F-9D93-032478D80EC8}] => (Block) C:\program files (x86)\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe
    FirewallRules: [{9B2273FB-0246-4C4B-9D82-18127201E20A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sniper Elite V2\Launcher\SniperV2Launcher.exe
    FirewallRules: [{6DE8F17C-F248-45B5-A273-8A61C2E431B1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sniper Elite V2\Launcher\SniperV2Launcher.exe
    FirewallRules: [TCP Query User{FBFCE188-1AD4-4B8F-A96E-D792D0762075}C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe
    FirewallRules: [UDP Query User{B7751526-4246-490A-BECF-473F55D30F23}C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe
    FirewallRules: [{D92F6D90-2B98-4A6F-89FA-91CED40DE9E7}] => (Block) C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe
    FirewallRules: [{5DE34A27-3FD3-4B3E-B92D-BCBC8AE8775F}] => (Block) C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe
    FirewallRules: [TCP Query User{3BB3C0DD-66F8-455A-ADD5-775E0A971310}C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
    FirewallRules: [UDP Query User{021A6E33-2ED5-4FAA-BA81-0ED33F39AD80}C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
    FirewallRules: [{5F804856-24A5-4DC0-A6C4-A8771788A616}] => (Block) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
    FirewallRules: [{903009D2-E811-4797-83DF-F0AB145FB137}] => (Block) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
    FirewallRules: [{84CC2575-D468-43D1-9DF5-1FCFCFD4F0E6}] => (Allow) C:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe
    FirewallRules: [{046000FD-F0EE-4EDA-9B02-E9AC26024F82}] => (Allow) C:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe
    FirewallRules: [{5CE12924-E5A3-46BF-A836-B40EBD0CB4C9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3.exe
    FirewallRules: [{B18B6C30-6BC7-4F75-A052-C453AED994D7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3.exe
    FirewallRules: [{A892F7D3-7B4D-4544-8978-BC322BD9769A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3launcher.exe
    FirewallRules: [{7056DB69-10FF-4D92-B37D-FB3AE1F4C13B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3launcher.exe
    FirewallRules: [{0C0DD34A-4794-4064-BF02-D8CB573A0187}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dark Souls II\Game\DarkSoulsII.exe
    FirewallRules: [{C3632D4F-D24F-4910-BDDF-33457C444ACA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dark Souls II\Game\DarkSoulsII.exe
    FirewallRules: [TCP Query User{E1BFD9C7-212C-463F-A487-5003816A8F5F}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
    FirewallRules: [UDP Query User{3688ADEE-7337-41DC-9B03-ABB176FD38FF}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
    FirewallRules: [{11167137-2524-4BBA-8932-52BD07909A75}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unmechanical\Binaries\Win32\UDK.exe
    FirewallRules: [{DDC342BC-BE1D-4E28-B2FC-2B3B76DBB12C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unmechanical\Binaries\Win32\UDK.exe
    FirewallRules: [{C02E161E-05AF-4938-87F1-C050163C0550}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unmechanical\Binaries\Win32\UDKGame.exe
    FirewallRules: [{4AE3E236-2C4D-4F0E-8EB5-88DF50AC1A98}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unmechanical\Binaries\Win32\UDKGame.exe
    FirewallRules: [{A8313760-4849-4BCD-B30D-FB77E588284E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Duck Game\DuckGame.exe
    FirewallRules: [{685210FC-E2B6-4313-BA61-65C5EF93F45A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Duck Game\DuckGame.exe
    FirewallRules: [{AAB39991-1E5C-4895-A2EF-E00AC02C6DC8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\CookServeDelicious\CSDSteamBuild.exe
    FirewallRules: [{1BAD8857-DAA1-481E-9D1B-9FE3B3464171}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\CookServeDelicious\CSDSteamBuild.exe
    FirewallRules: [{9BFC33B6-1B97-439C-901B-AA739939F1AD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GrowHome\GrowHome.exe
    FirewallRules: [{73FBEA5F-D4D8-4145-812F-5CEA0C2CD748}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GrowHome\GrowHome.exe
    FirewallRules: [{7652A312-3E8D-491B-AC27-5AFDEF92068C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MK10\Binaries\Retail\MK10.exe
    FirewallRules: [{A0D31B60-2B77-4E98-8C2B-D4447BA86B0A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MK10\Binaries\Retail\MK10.exe
    FirewallRules: [{489F1373-1FD4-4521-BDBF-B13C60EC3218}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MK10\Binaries\Retail\MKXLauncher.exe
    FirewallRules: [{7DA58F33-4DEE-426C-B735-8C789F57C8F5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MK10\Binaries\Retail\MKXLauncher.exe
    FirewallRules: [{D0C5A210-1A48-4462-BB15-95F83CD6C6A5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe
    FirewallRules: [{7AB29785-2AD9-4D6C-B3C3-555BB2F868C3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe
    FirewallRules: [{6C5A36D4-B118-4D10-954E-CB5D9F72E478}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
    FirewallRules: [{555CC080-18CC-41E1-8C41-AD4730B35DBD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
    FirewallRules: [{8EDC7C47-966A-40EA-9DD8-7A39E0203F66}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\fallout new vegas\FalloutNVLauncher.exe
    FirewallRules: [{629BA111-3FDF-4A0E-B0DE-B2E45D797EAE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\fallout new vegas\FalloutNVLauncher.exe
    FirewallRules: [{CCDC1B69-718F-42F5-8CB8-2198201860AF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
    FirewallRules: [{863525CE-21EA-4393-B532-1B6F43032A78}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
    FirewallRules: [{FD407717-3928-40F6-9BB5-0B1267FE6EB4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
    FirewallRules: [{A0417754-DA5B-430A-B58F-F59248A68247}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
    FirewallRules: [{4338284A-2DD1-45F4-B466-E28976CFDBB1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
    FirewallRules: [{D6B6280A-08E6-44AE-B26E-08485A8B9988}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
    FirewallRules: [{6020A5D6-EF8E-4EB1-BC83-3FDB2FBDFC07}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
     
  9. 2016/07/09
    PlanetAlps

    PlanetAlps Member Thread Starter

    Joined:
    2016/07/09
    Messages:
    47
    Likes Received:
    0
    FirewallRules: [{9EE05AB2-7274-4C29-9741-8DCEA6B22C49}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
    FirewallRules: [{C6741A06-7E2F-4B48-ADAD-BD06F74F0ECF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
    FirewallRules: [{7D698723-A687-45BB-B2EB-3E08381C45A7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Risk of Rain\Risk of Rain.exe
    FirewallRules: [{993DA023-3C59-4A4B-B49B-4CF115DD784A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Risk of Rain\Risk of Rain.exe
    FirewallRules: [{5AA7FBCD-4E70-4FBD-8183-C950E33A4669}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
    FirewallRules: [{37CD42E2-DAED-4776-9EE3-5CF00B971963}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
    FirewallRules: [{4B440D1B-2876-45A8-9A04-B0660D49481B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
    FirewallRules: [{61774AB6-2CE5-41D0-87B5-FA51D67211E0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
    FirewallRules: [{E8132A27-7E52-443B-A7F8-6B5E275BFEBC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
    FirewallRules: [{0BDD26B0-60F2-4CBE-9944-6A1AA948EF3A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
    FirewallRules: [{0B1CEBFD-D572-488B-A4CA-0C93B9EACBD1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
    FirewallRules: [{15CD5A81-A14A-479B-9218-4650AB1B62FC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
    FirewallRules: [{9AD140C6-4775-4E9E-888C-B713C154871D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
    FirewallRules: [{14210E31-7B79-48BB-8CAB-7285A29DFB5A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
    FirewallRules: [{46DEDD79-7B62-4519-8A28-C304C8A5D352}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
    FirewallRules: [{DA66C86A-22C4-4223-B380-AC899FCC16D1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
    FirewallRules: [{16EEBF6B-1646-4556-BBB7-FA8627A852F8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
    FirewallRules: [{FF1B0DE8-A3B3-4884-ACAA-248DE1CC51CD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
    FirewallRules: [{E47A67A5-2411-4F87-AC01-092607CFC27A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unmechanical\Binaries\Win32\UDKGame.exe
    FirewallRules: [{C189C16A-A6D8-42F1-BFCE-BFE4870E6324}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unmechanical\Binaries\Win32\UDKGame.exe
    FirewallRules: [{F4D4E835-6608-4BA4-8C28-FEE03DEA085A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dark Souls II\Game\DarkSoulsII.exe
    FirewallRules: [{725EFBFA-A086-4A7E-AEF7-3B584688149C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dark Souls II\Game\DarkSoulsII.exe
    FirewallRules: [{64E5072F-7BD9-4357-92D1-15E4DBCF6113}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Golf With Friends\Golf With Friends.exe
    FirewallRules: [{F7819D50-0D7D-41A5-B1E6-46C31FF87BA1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Golf With Friends\Golf With Friends.exe
    FirewallRules: [TCP Query User{56D1E0D3-AA5C-46CD-BB5A-DFB0AF2F3AB6}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
    FirewallRules: [UDP Query User{110C40A0-8A6E-406B-BE21-530101B40EA4}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
    FirewallRules: [TCP Query User{5887E1FC-7922-436B-ACA4-BAE1A2FCE299}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
    FirewallRules: [UDP Query User{35A807EC-E66D-4F46-A80E-4D966AA40742}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
    FirewallRules: [{CF71764B-F117-4CED-9192-C1165133EB95}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Golf With Friends\Golf With Your Friends.exe
    FirewallRules: [{DA13865D-68C7-4BF1-B913-E12D0CBEF83C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Golf With Friends\Golf With Your Friends.exe
    FirewallRules: [{996F31C4-FBD5-4B3C-B8C9-FA9234F68EC7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ_BE.exe
    FirewallRules: [{3EB337A2-5CCA-4E3B-BAFE-655EB2D4533A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ_BE.exe
    FirewallRules: [{7B7B9306-B21D-4479-B62E-E72805A16223}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
    FirewallRules: [{77134CE6-FEE6-48F7-94CB-66147A82F39E}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
    FirewallRules: [{6E1B4EDB-7968-42AC-A07B-38A065C879BB}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
    FirewallRules: [{C70D061C-E1BD-46AA-8108-12FDD7A931F2}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
    FirewallRules: [{BFE2EA24-F9B5-412C-966A-E9FAFE373B7E}] => (Allow) C:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe
    FirewallRules: [{B1DA5408-3673-4BBB-9D36-3BEEC2B1C8AC}] => (Allow) C:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe
    FirewallRules: [{88C9914E-169B-48C6-95E2-96583296D016}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DARK SOULS III\Game\DarkSoulsIII.exe
    FirewallRules: [{F5613221-E3CE-4B0F-BB6B-E454C8BF08C9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DARK SOULS III\Game\DarkSoulsIII.exe
    FirewallRules: [{D4C88974-C104-47C9-90A1-3A7350E2C493}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    FirewallRules: [{D5E61D06-97D1-4A73-8ECF-9B41E92DAB29}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
    FirewallRules: [{029F0525-1E96-4B49-A7D2-807B15B06A00}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
    FirewallRules: [{F62E2291-09A9-4FA8-8253-77F36E890AA9}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
    FirewallRules: [{E60F672F-7965-45E3-A45A-DC360FA91E4A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
    FirewallRules: [{88D7451E-CE7F-4674-AAD3-8D192AAC4B3C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
    FirewallRules: [{42C84906-2F9A-471C-96C8-B23927CD281B}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
    FirewallRules: [{187EDB64-B78C-4406-B938-D564C971DF6A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
    FirewallRules: [{024D4EC3-1B40-4E3C-8A94-09B6372F1FD7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe

    ==================== Restore Points =========================

    07-07-2016 10:46:43 Checkpoint by HitmanPro
    07-07-2016 23:52:39 JRT Pre-Junkware Removal

    ==================== Faulty Device Manager Devices =============


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (07/09/2016 12:20:03 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
    Description: Subscription licensing service failed: -1073418154

    Error: (07/09/2016 12:18:35 AM) (Source: MsiInstaller) (EventID: 1002) (User: MACGYVER)
    Description: Unexpected or missing value (name: 'PackageName', value: '') in key 'HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList'

    Error: (07/09/2016 12:17:58 AM) (Source: HP Active Health) (EventID: 401) (User: )
    Description: SmartDrive executable didn't pass digital signature validation. Execution aborted: [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\Executable Agent Data\_Shared\DiskCheck\ETD_GetSMART.exe]

    Error: (07/09/2016 12:17:58 AM) (Source: HP Active Health) (EventID: 1100) (User: )
    Description: Agent DiskPhysical threw an exception: System.NullReferenceException: Object reference not set to an instance of an object.
    at HP.ActiveHealth.Agents.DiskPhysical.DiskPhysicalAgent.CollectNewDataClasses(FileInfo agentStateFile, IDataClassCollector dataClassColector)
    at HP.ActiveHealth.API.DataGeneration.AgentRunner.QueryAgentDelegate(Object agentObj)

    Error: (07/09/2016 12:17:47 AM) (Source: HP Active Health) (EventID: 1101) (User: )
    Description: DiskPhysical executable didn't pass digital signature validation. Execution aborted: [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\Executable Agent Data\_Shared\DiskCheck\ETD_GetSMART.exe]

    Error: (07/09/2016 12:16:08 AM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: IAStorDataMgrSvc.exe, version: 14.5.0.1081, time stamp: 0x556ecc3d
    Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
    Exception code: 0xc0000005
    Fault offset: 0x050e4c35
    Faulting process id: 0x4420
    Faulting application start time: 0xIAStorDataMgrSvc.exe0
    Faulting application path: IAStorDataMgrSvc.exe1
    Faulting module path: IAStorDataMgrSvc.exe2
    Report Id: IAStorDataMgrSvc.exe3
    Faulting package full name: IAStorDataMgrSvc.exe4
    Faulting package-relative application ID: IAStorDataMgrSvc.exe5

    Error: (07/09/2016 12:16:07 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
    Description: Application: IAStorDataMgrSvc.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: System.NullReferenceException
    at IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()
    at IAStorUtil.SystemDataModelListener.LoadSavedSystemState()
    at IAStorDataMgr.EventRelay.<Start>b__0(System.Object)
    at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
    at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
    at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
    at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
    at System.Threading.ThreadPoolWorkQueue.Dispatch()
    at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

    Error: (07/09/2016 12:08:52 AM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: a2service.exe, version: 11.9.0.6513, time stamp: 0x5772c632
    Faulting module name: ntdll.dll, version: 10.0.10586.306, time stamp: 0x571af2eb
    Exception code: 0xc0000374
    Fault offset: 0x00000000000ee6fc
    Faulting process id: 0x33cc
    Faulting application start time: 0xa2service.exe0
    Faulting application path: a2service.exe1
    Faulting module path: a2service.exe2
    Report Id: a2service.exe3
    Faulting package full name: a2service.exe4
    Faulting package-relative application ID: a2service.exe5

    Error: (07/08/2016 11:21:58 PM) (Source: MsiInstaller) (EventID: 11721) (User: MACGYVER)
    Description: Product: Façade -- Error 1721. There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: speexuninstall.bat_1, location: C:\Program Files (x86)\Facade\util\sources\facade\Sounds\speexuninstall.bat, command: "C:\Program Files (x86)\Facade\util\sources\facade\Sounds\ "

    Error: (07/08/2016 11:01:00 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: backgroundTaskHost.exe, version: 10.0.10586.0, time stamp: 0x5632d8f0
    Faulting module name: Cortana.BackgroundTask.dll, version: 0.0.0.0, time stamp: 0x57491660
    Exception code: 0xc0000005
    Fault offset: 0x0000000000046ab5
    Faulting process id: 0x30c0
    Faulting application start time: 0xbackgroundTaskHost.exe0
    Faulting application path: backgroundTaskHost.exe1
    Faulting module path: backgroundTaskHost.exe2
    Report Id: backgroundTaskHost.exe3
    Faulting package full name: backgroundTaskHost.exe4
    Faulting package-relative application ID: backgroundTaskHost.exe5


    System errors:
    =============
    Error: (07/09/2016 12:18:55 AM) (Source: DCOM) (EventID: 10016) (User: MACGYVER)
    Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}MACGYVERMacGyverS-1-5-21-3964298893-2401237506-3764420300-1000LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

    Error: (07/09/2016 12:18:55 AM) (Source: DCOM) (EventID: 10016) (User: MACGYVER)
    Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}MACGYVERMacGyverS-1-5-21-3964298893-2401237506-3764420300-1000LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

    Error: (07/09/2016 12:16:11 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The Intel(R) Rapid Storage Technology service terminated unexpectedly. It has done this 1 time(s).

    Error: (07/09/2016 12:16:00 AM) (Source: DCOM) (EventID: 10016) (User: MACGYVER)
    Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}MACGYVERMacGyverS-1-5-21-3964298893-2401237506-3764420300-1000LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

    Error: (07/09/2016 12:16:00 AM) (Source: DCOM) (EventID: 10016) (User: MACGYVER)
    Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}MACGYVERMacGyverS-1-5-21-3964298893-2401237506-3764420300-1000LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

    Error: (07/09/2016 12:16:00 AM) (Source: DCOM) (EventID: 10016) (User: MACGYVER)
    Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}MACGYVERMacGyverS-1-5-21-3964298893-2401237506-3764420300-1000LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

    Error: (07/09/2016 12:16:00 AM) (Source: DCOM) (EventID: 10016) (User: MACGYVER)
    Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}MACGYVERMacGyverS-1-5-21-3964298893-2401237506-3764420300-1000LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

    Error: (07/09/2016 12:16:00 AM) (Source: DCOM) (EventID: 10016) (User: MACGYVER)
    Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}MACGYVERMacGyverS-1-5-21-3964298893-2401237506-3764420300-1000LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

    Error: (07/09/2016 12:16:00 AM) (Source: DCOM) (EventID: 10016) (User: MACGYVER)
    Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}MACGYVERMacGyverS-1-5-21-3964298893-2401237506-3764420300-1000LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

    Error: (07/09/2016 12:16:00 AM) (Source: DCOM) (EventID: 10016) (User: MACGYVER)
    Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}MACGYVERMacGyverS-1-5-21-3964298893-2401237506-3764420300-1000LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742


    CodeIntegrity:
    ===================================
    Date: 2016-06-27 15:45:38.143
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

    Date: 2016-06-27 02:43:15.092
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

    Date: 2016-06-27 01:46:52.796
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

    Date: 2016-06-16 22:44:39.575
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

    Date: 2016-06-16 18:45:31.904
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

    Date: 2016-06-16 17:35:35.882
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

    Date: 2016-06-14 21:01:17.469
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

    Date: 2016-05-13 19:50:21.791
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

    Date: 2016-05-13 16:49:23.740
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

    Date: 2016-05-12 18:11:17.805
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.


    ==================== Memory info ===========================

    Processor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz
    Percentage of memory in use: 15%
    Total physical RAM: 16244.84 MB
    Available physical RAM: 13749.25 MB
    Total Virtual: 17268.84 MB
    Available Virtual: 14833.94 MB

    ==================== Drives ================================

    Drive c: (OS) (Fixed) (Total:1379.56 GB) (Free:565.07 GB) NTFS ==>[system with boot components (obtained from drive)]
    Drive d: (HP_RECOVERY) (Fixed) (Total:16.88 GB) (Free:2.05 GB) NTFS ==>[system with boot components (obtained from drive)]

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1397.3 GB) (Disk ID: 449AE631)
    Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
    Partition 2: (Not Active) - (Size=1379.6 GB) - (Type=07 NTFS)
    Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
    Partition 4: (Not Active) - (Size=16.9 GB) - (Type=07 NTFS)

    ==================== End of Addition.txt ============================
     
  10. 2016/07/09
    PlanetAlps

    PlanetAlps Member Thread Starter

    Joined:
    2016/07/09
    Messages:
    47
    Likes Received:
    0
    As I go through these files I see things like "Skidrow" a notorious torrenting entity, I was under the impression I deleted all traces of any of that garbage. Strange to see it still exists in my computer. (I have, you can see in my steam files, now a legal license for the Skidrow crack I see in my files of XCOM. I usually do not delete video games, even if I do not play them which is why I have so much stuff on my comp. College Freshman by the way. That is why my computer has more... immature files.
     
  11. 2016/07/09
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Welcome aboard [​IMG]

    Please, observe following rules:
    • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
    • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
    • Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
    • Never run more than one scan at a time.
    • Keep updating me regarding your computer behavior, good, or bad.
    • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
    • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
    • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

    ====================================

    [​IMG] Download RogueKiller from one of the following links and save it to your Desktop:

    Link 1
    Link 2
    • Close all the running programs
    • Windows Vista/7/8 users: right click on RogueKiller.exe, click Run as Administrator
    • Otherwise just double-click on RogueKiller.exe
    • Pre-scan will start. Let it finish.
    • Click on SCAN button.
    • Wait until the Status box shows Scan Finished
    • Click on Delete.
    • Wait until the Status box shows Deleting Finished.
    • Click on Report and copy/paste the content of the Notepad into your next reply.
    • RKreport.txt could also be found on your desktop.
    • If more than one log is produced post all logs.
    • If RogueKiller has been blocked, do not hesitate to try a few times more. If really won't run, rename it to winlogon.exe (or winlogon.com) and try again
    [​IMG] Please download Malwarebytes Anti-Malware (MBAM) to your desktop.
    NOTE. If you already have MBAM 2.0 installed scroll down.
    • Double-click mbam-setup-2.0.0.1000.exe and follow the prompts to install the program.
    • At the end, be sure a checkmark is placed next to the following:
    • Launch Malwarebytes Anti-Malware
    • A 14 day trial of the Premium features is pre-selected. You may deselect this if you wish, and it will not diminish the scanning and removal capabilities of the program.
    • Click Finish.
    • On the Dashboard, click the 'Update Now >>' link
    • After the update completes, click the 'Scan Now >>' button.
    • Or, on the Dashboard, click the Scan Now >> button.
    • If an update is available, click the Update Now button.
    • A Threat Scan will begin.
    • When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
    • In most cases, a restart will be required.
    • Wait for the prompt to restart the computer to appear, then click on Yes.
    If you already have MBAM 2.0 installed:
    • On the Dashboard, click the 'Update Now >>' link
    • After the update completes, click the 'Scan Now >>' button.
    • Or, on the Dashboard, click the Scan Now >> button.
    • If an update is available, click the Update Now button.
    • A Threat Scan will begin.
    • When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
    • In most cases, a restart will be required.
    • Wait for the prompt to restart the computer to appear, then click on Yes.
    How to get logs:
    (Export log to save as txt)
    • After the restart once you are back at your desktop, open MBAM once more.
    • Click on the History tab > Application Logs.
    • Double click on the Scan Log which shows the Date and time of the scan just performed.
    • Click 'Export'.
    • Click 'Text file (*.txt)'
    • In the Save File dialog box which appears, click on Desktop.
    • In the File name: box type a name for your scan log.
    • A message box named 'File Saved' should appear stating "Your file has been successfully exported ".
    • Click Ok
    • Attach that saved log to your next reply.
    (Copy to clipboard for pasting into forum replies or tickets)
    • After the restart once you are back at your desktop, open MBAM once more.
    • Click on the History tab > Application Logs.
    • Double click on the Scan Log which shows the Date and time of the scan just performed.
    • Click 'Copy to Clipboard'
    • Paste the contents of the clipboard into your reply.
    [​IMG] Please download AdwCleaner by Xplode onto your desktop.
    • Close all open programs and internet browsers.
    • Double click on adwcleaner.exe to run the tool.
    • Click on Scan button.
    • When the scan has finished click on Clean button.
    • Your computer will be rebooted automatically. A text file will open after the restart.
    • Please post the contents of that logfile with your next reply.
    • You can find the logfile at C:\AdwCleaner[S1].txt as well.
    [​IMG] Please download Junkware Removal Tool to your desktop.
    • Shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator ".
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Post the contents of JRT.txt into your next message.
     
  12. 2016/07/10
    PlanetAlps

    PlanetAlps Member Thread Starter

    Joined:
    2016/07/09
    Messages:
    47
    Likes Received:
    0
    RogueKiller V12.3.7.0 [Jul 4 2016] (Free) by Adlice Software
    mail : Contact - Adlice Software
    Feedback : Adlice forum
    Website : RogueKiller Anti-Malware Free Download - Official Website
    Blog : Adlice Software

    Operating System : Windows 10 (10.0.10586) 64 bits version
    Started in : Normal mode
    User : MacGyver [Administrator]
    Started from : C:\Users\MacGyver\Downloads\RogueKiller.exe
    Mode : Scan -- Date : 07/10/2016 14:07:29

    ¤¤¤ Processes : 0 ¤¤¤

    ¤¤¤ Registry : 0 ¤¤¤

    ¤¤¤ Tasks : 0 ¤¤¤

    ¤¤¤ Files : 0 ¤¤¤

    ¤¤¤ Hosts File : 0 ¤¤¤

    ¤¤¤ Antirootkit : 0 (Driver: Not loaded [0xc000036b]) ¤¤¤

    ¤¤¤ Web browsers : 0 ¤¤¤

    ¤¤¤ MBR Check : ¤¤¤
    +++++ PhysicalDrive0: ST1500DL003-9VT16L +++++
    --- User ---
    [MBR] 62eafb7232cda11c571cac6f231f63c9
    [BSP] 1ccca2401cd56cade8833563654a6457 : Windows Vista/7/8|VT.Unknown MBR Code
    Partition table:
    0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 1412669 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    2 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2893352960 | Size: 450 MB
    3 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2894274560 | Size: 17290 MB [Error reading VBR! ([83] An attempt was made to move the file pointer before the beginning of the file. )]
    User != LL1 ... KO!
    --- LL1 ---
    [MBR] 62eafb7232cda11c571cac6f231f63c9
    [BSP] 1ccca2401cd56cade8833563654a6457 : Windows Vista/7/8 MBR Code
    Partition table:
    0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 1412669 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    2 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2893352960 | Size: 450 MB
    3 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2894274560 | Size: 17290 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    User != LL2 ... KO!
    --- LL2 ---
    [MBR] 62eafb7232cda11c571cac6f231f63c9
    [BSP] 1ccca2401cd56cade8833563654a6457 : Windows Vista/7/8 MBR Code
    Partition table:
    0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 1412669 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    2 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2893352960 | Size: 450 MB
    3 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2894274560 | Size: 17290 MB[Invalid]

    RogueKiller V12.3.7.0 [Jul 4 2016] (Free) by Adlice Software
    mail : Contact - Adlice Software
    Feedback : Adlice forum
    Website : RogueKiller Anti-Malware Free Download - Official Website
    Blog : Adlice Software

    Operating System : Windows 10 (10.0.10586) 64 bits version
    Started in : Normal mode
    User : MacGyver [Administrator]
    Started from : C:\Users\MacGyver\Downloads\RogueKiller.exe
    Mode : Scan Aborted -- Date : 07/10/2016 14:20:45

    ¤¤¤ Processes : 0 ¤¤¤

    ¤¤¤ Registry : 0 ¤¤¤

    ¤¤¤ Tasks : 0 ¤¤¤

    ¤¤¤ Files : 0 ¤¤¤

    ¤¤¤ Hosts File : 0 ¤¤¤

    ¤¤¤ Antirootkit : 0 (Driver: Not loaded [0xc000036b]) ¤¤¤

    ¤¤¤ Web browsers : 0 ¤¤¤

    ¤¤¤ MBR Check : ¤¤¤
    +++++ PhysicalDrive0: ST1500DL003-9VT16L +++++
    --- User ---
    [MBR] 62eafb7232cda11c571cac6f231f63c9
    [BSP] 1ccca2401cd56cade8833563654a6457 : Windows Vista/7/8|VT.Unknown MBR Code
    Partition table:
    0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 1412669 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    2 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2893352960 | Size: 450 MB
    3 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2894274560 | Size: 17290 MB [Error reading VBR! ([83] An attempt was made to move the file pointer before the beginning of the file. )]
    User != LL1 ... KO!
    --- LL1 ---
    [MBR] 62eafb7232cda11c571cac6f231f63c9
    [BSP] 1ccca2401cd56cade8833563654a6457 : Windows Vista/7/8 MBR Code
    Partition table:
    0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 1412669 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    2 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2893352960 | Size: 450 MB
    3 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2894274560 | Size: 17290 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    User != LL2 ... KO!
    --- LL2 ---
    [MBR] 62eafb7232cda11c571cac6f231f63c9
    [BSP] 1ccca2401cd56cade8833563654a6457 : Windows Vista/7/8 MBR Code
    Partition table:
    0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 1412669 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    2 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2893352960 | Size: 450 MB
    3 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2894274560 | Size: 17290 MB[Invalid]

    RogueKiller V12.3.7.0 [Jul 4 2016] (Free) by Adlice Software
    mail : http://www.adlice.com/contact/
    Feedback : http://forum.adlice.com
    Website : http://www.adlice.com/download/roguekiller/
    Blog : http://www.adlice.com

    Operating System : Windows 10 (10.0.10586) 64 bits version
    Started in : Normal mode
    User : MacGyver [Administrator]
    Started from : C:\Users\MacGyver\Downloads\RogueKiller.exe
    Mode : Scan -- Date : 07/10/2016 14:56:15

    ¤¤¤ Processes : 0 ¤¤¤

    ¤¤¤ Registry : 0 ¤¤¤

    ¤¤¤ Tasks : 0 ¤¤¤

    ¤¤¤ Files : 0 ¤¤¤

    ¤¤¤ Hosts File : 0 ¤¤¤

    ¤¤¤ Antirootkit : 0 (Driver: Not loaded [0xc000036b]) ¤¤¤

    ¤¤¤ Web browsers : 0 ¤¤¤

    ¤¤¤ MBR Check : ¤¤¤
    +++++ PhysicalDrive0: ST1500DL003-9VT16L +++++
    --- User ---
    [MBR] 62eafb7232cda11c571cac6f231f63c9
    [BSP] 1ccca2401cd56cade8833563654a6457 : Windows Vista/7/8 MBR Code
    Partition table:
    0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 1412669 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    2 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2893352960 | Size: 450 MB
    3 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2894274560 | Size: 17290 MB [Error reading VBR! ([83] An attempt was made to move the file pointer before the beginning of the file. )]
    User != LL1 ... KO!
    --- LL1 ---
    [MBR] 62eafb7232cda11c571cac6f231f63c9
    [BSP] 1ccca2401cd56cade8833563654a6457 : Windows Vista/7/8 MBR Code
    Partition table:
    0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 1412669 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    2 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2893352960 | Size: 450 MB
    3 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2894274560 | Size: 17290 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    User != LL2 ... KO!
    --- LL2 ---
    [MBR] 62eafb7232cda11c571cac6f231f63c9
    [BSP] 1ccca2401cd56cade8833563654a6457 : Windows Vista/7/8 MBR Code
    Partition table:
    0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 1412669 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
    2 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2893352960 | Size: 450 MB
    3 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2894274560 | Size: 17290 MB[Invalid]

    There was nothing to delete. Apparently nothing was detected. Will run the MalwareBytes after this. Also I ran it twice, the Rogue Killer because I thought I did it incorrectly, it produced the three logs above.
     
  13. 2016/07/10
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Go on...
     
  14. 2016/07/10
    PlanetAlps

    PlanetAlps Member Thread Starter

    Joined:
    2016/07/09
    Messages:
    47
    Likes Received:
    0
    Malwarebytes Anti-Malware
    www.malwarebytes.org

    Scan Date: 7/10/2016
    Scan Time: 3:04 PM
    Logfile: Malwarebytes Text.txt
    Administrator: Yes

    Version: 2.2.1.1043
    Malware Database: v2016.07.10.07
    Rootkit Database: v2016.05.27.01
    License: Free
    Malware Protection: Disabled
    Malicious Website Protection: Disabled
    Self-protection: Disabled

    OS: Windows 10
    CPU: x64
    File System: NTFS
    User: MacGyver

    Scan Type: Threat Scan
    Result: Completed
    Objects Scanned: 447687
    Time Elapsed: 45 min, 58 sec

    Memory: Enabled
    Startup: Enabled
    Filesystem: Enabled
    Archives: Enabled
    Rootkits: Enabled
    Heuristics: Enabled
    PUP: Enabled
    PUM: Enabled

    Processes: 0
    (No malicious items detected)

    Modules: 0
    (No malicious items detected)

    Registry Keys: 0
    (No malicious items detected)

    Registry Values: 0
    (No malicious items detected)

    Registry Data: 0
    (No malicious items detected)

    Folders: 0
    (No malicious items detected)

    Files: 0
    (No malicious items detected)

    Physical Sectors: 0
    (No malicious items detected)


    (end)

    # AdwCleaner v5.201 - Logfile created 10/07/2016 at 16:23:12
    # Updated 30/06/2016 by ToolsLib
    # Database : 2016-07-10.3 [Server]
    # Operating system : Windows 10 Home (X64)
    # Username : MacGyver - MACGYVER
    # Running from : C:\Users\MacGyver\Desktop\adwcleaner_5.201.exe
    # Option : Clean
    # Support : ToolsLib

    ***** [ Services ] *****


    ***** [ Folders ] *****


    ***** [ Files ] *****


    ***** [ DLLs ] *****


    ***** [ WMI ] *****


    ***** [ Shortcuts ] *****


    ***** [ Scheduled tasks ] *****


    ***** [ Registry ] *****


    ***** [ Web browsers ] *****

    [-] [C:\Users\MacGyver\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : aol.com
    [-] [C:\Users\MacGyver\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : ask.com

    *************************

    :: "Tracing" keys deleted
    :: Winsock settings cleared

    *************************

    C:\AdwCleaner\AdwCleaner[C1].txt - [953 bytes] - [10/07/2016 16:23:12]
    C:\AdwCleaner\AdwCleaner[S1].txt - [1002 bytes] - [10/07/2016 16:20:33]

    ########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1098 bytes] ##########

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Junkware Removal Tool (JRT) by Malwarebytes
    Version: 8.0.7 (07.03.2016)
    Operating System: Windows 10 Home x64
    Ran by MacGyver (Administrator) on Sun 07/10/2016 at 16:39:05.12
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




    File System: 2

    Successfully deleted: C:\Users\MacGyver\AppData\Roaming\3909 (Folder)
    Successfully deleted: C:\WINDOWS\wininit.ini (File)



    Registry: 0





    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Scan was completed on Sun 07/10/2016 at 16:41:36.09
    End of JRT log
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    Everything is clean. I guess I got rid of the problem? I have no clue, I could have sworn I heard the click and saw the switch tab, but everything is clean. I think. These random texts mean nothing to me so I can't see if there is nothing wrong. If there is nothing wrong, sorry for wasting your time. Maybe the scans I did before I opened the thread actually worked. Still, that strange pop-up about a gift card occurred and like I said I thought I saw the initial problem present itself again but I have not been on the computer long enough to verify whether it still exists.
     
  15. 2016/07/10
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Re-run Farbar Recovery Scan Tool (FRST/FRST64) you ran at the very beginning of this topic.

    • Double click to run it.
    • Make sure you checkmark Addition.txt box.
    • Press Scan button.
    • Scan will create two logs, FRST.txt and Addition.txt in the same directory the tool is run. Please copy and paste them to your reply.
     
  16. 2016/07/11
    PlanetAlps

    PlanetAlps Member Thread Starter

    Joined:
    2016/07/09
    Messages:
    47
    Likes Received:
    0
    Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 10-07-2016 01
    Ran by MacGyver (administrator) on MACGYVER (11-07-2016 01:11:17)
    Running from C:\Users\MacGyver\Downloads
    Loaded Profiles: MacGyver (Available Profiles: MacGyver & Guest & DefaultAppPool)
    Platform: Windows 10 Home Version 1511 (X64) Language: English (United States)
    Internet Explorer Version 11 (Default browser: Chrome)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (McAfee, Inc.) C:\Windows\System32\mfevtps.exe
    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
    (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe
    (McAfee, Inc.) C:\Windows\System32\mfevtps.exe
    (Intel Corporation) C:\Windows\System32\igfxCUIService.exe
    (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
    (McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
    (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
    (McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
    (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
    (AMD) C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe
    (Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
    (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
    (iolo technologies, LLC) C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe
    (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
    () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
    (DEVGURU Co., LTD.) C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
    (Perforce Software Inc.) C:\Program Files\Perforce\Server\p4s.exe
    (Microsoft Corporation) C:\Windows\System32\mqsvc.exe
    (McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe
    (AMD) C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpert.exe
    (Intel Security, Inc.) C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe
    (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
    (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    (AMD) C:\Windows\SysWOW64\WinMsgBalloonServer.exe
    (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
    (McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\1.9.741.0\McCSPServiceHost.exe
    (McAfee, Inc.) C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe
    (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
    (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
    () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
    (McAfee, Inc.) C:\Program Files\McAfee\MAT\McPvTray.exe
    (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
    (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11602.1.26.0_x64__8wekyb3d8bbwe\WinStore.Mobile.exe
    (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6965.40901.0_x64__8wekyb3d8bbwe\HxMail.exe
    (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6965.40901.0_x64__8wekyb3d8bbwe\HxTsr.exe
    () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1605.1582.0_x64__8wekyb3d8bbwe\Calculator.exe
    (McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe
    (McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\Core\mchost.exe
    (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
    (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
    (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
    (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
    (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
    (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
    (Spotify Ltd) C:\Users\MacGyver\AppData\Roaming\Spotify\Spotify.exe
    (Spotify Ltd) C:\Users\MacGyver\AppData\Roaming\Spotify\SpotifyCrashService.exe
    (Spotify Ltd) C:\Users\MacGyver\AppData\Roaming\Spotify\Spotify.exe
    (Spotify Ltd) C:\Users\MacGyver\AppData\Roaming\Spotify\SpotifyWebHelper.exe
    (Spotify Ltd) C:\Users\MacGyver\AppData\Roaming\Spotify\Spotify.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe


    ==================== Registry (Whitelisted) ===========================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [hpsysdrv] => c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)
    HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
    HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
    HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)
    HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [322472 2015-06-23] (Intel Corporation)
    HKLM-x32\...\Run: [] => [X]
    HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [596640 2016-06-16] (Razer Inc.)
    HKLM-x32\...\Run: [Adobe Creative Cloud] => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
    HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595992 2016-05-20] (Oracle Corporation)
    HKLM\...\Policies\Explorer: [AllowLegacyWebView] 1
    HKLM\...\Policies\Explorer: [AllowUnhashedWebView] 1
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2851408 2016-07-08] (Valve Corporation)
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\Run: [Spotify Web Helper] => C:\Users\MacGyver\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1554032 2016-07-10] (Spotify Ltd)
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\Run: [Akamai NetSession Interface] => C:\Users\MacGyver\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\Run: [Spotify] => C:\Users\MacGyver\AppData\Roaming\Spotify\Spotify.exe [6913648 2016-07-10] (Spotify Ltd)
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [26424960 2016-06-29] (Skype Technologies S.A.)
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => "C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe "
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\RunOnce: [Uninstall C:\Users\MacGyver\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\MacGyver\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64 "
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\RunOnce: [Uninstall C:\Users\MacGyver\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\MacGyver\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64 "
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\Policies\system: [DisableLockWorkstation] 0
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\Policies\Explorer: []
    HKU\S-1-5-18\...\Run: [KSS] => "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan\kss.exe" autorun
    BootExecute: autocheck autochk * sdnclean64.exe

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
    Tcpip\..\Interfaces\{4f78a4a4-bc96-4378-96d4-03264811ecb7}: [DhcpNameServer] 192.168.1.1
    Tcpip\..\Interfaces\{cd525c03-aa61-4c1d-814f-041194d7b431}: [NameServer] 8.8.8.8,8.8.4.4
    Tcpip\..\Interfaces\{d516021c-3855-40b0-8c5b-fc273fa90223}: [DhcpNameServer] 192.168.1.254
    Tcpip\..\Interfaces\{ea1c36eb-2e37-4844-838a-afa255fcd7f7}: [DhcpNameServer] 192.168.1.1

    Internet Explorer:
    ==================
    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.msn.com/HPDSK/1
    SearchScopes: HKLM -> {8B6AFE61-4015-44CA-A35C-DF9EEDBD272A} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us1-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
    SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-30572-11896-1/4?mpre=hxxp://www.ebay.com/sch/i.html?_nkw={searchTerms}
    SearchScopes: HKLM -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPDTDF&pc=HPDTDF&src=IE-SearchBox
    SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-30572-11896-1/4?mpre=hxxp://www.ebay.com/sch/i.html?_nkw={searchTerms}
    SearchScopes: HKU\S-1-5-21-3964298893-2401237506-3764420300-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
    SearchScopes: HKU\S-1-5-21-3964298893-2401237506-3764420300-1000 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-30572-11896-1/4?mpre=hxxp://www.ebay.com/sch/i.html?_nkw={searchTerms}
    BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2016-06-14] (Microsoft Corporation)
    BHO: No Name -> {AB4C7833-A6EC-433f-B9FE-6B14B1A2F836} -> No File
    BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2016-06-15] (Microsoft Corporation)
    BHO: No Name -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> No File
    BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation)
    BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-07-07] (Oracle Corporation)
    BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2016-06-15] (Microsoft Corporation)
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-07-07] (Oracle Corporation)
    BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2015-05-06] (Hewlett-Packard)
    Toolbar: HKLM - No Name - {A13C2648-91D4-4bf3-BC6D-0079707C4389} - No File
    Toolbar: HKU\S-1-5-21-3964298893-2401237506-3764420300-1000 -> No Name - {A13C2648-91D4-4BF3-BC6D-0079707C4389} - No File
    Toolbar: HKU\S-1-5-21-3964298893-2401237506-3764420300-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
    Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2016-06-24] (McAfee, Inc.)
    Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2016-06-24] (McAfee, Inc.)
    Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2016-05-20] (Microsoft Corporation)
    Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-05-20] (Microsoft Corporation)
    Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2016-05-20] (Microsoft Corporation)
    Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-05-20] (Microsoft Corporation)
    Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2016-06-24] (McAfee, Inc.)
    Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2016-06-24] (McAfee, Inc.)
    Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll [2016-05-24] (McAfee, Inc.)
    Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll [2016-05-24] (McAfee, Inc.)

    FireFox:
    ========
    FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_22_0_0_192.dll [2016-06-16] ()
    FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2016-05-24] ()
    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
    FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~4\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
    FF Plugin: @wacom.com/wtPlugin,version=2.1.0.2 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
    FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
    FF Plugin: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
    FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [No File]
    FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll [2013-07-14] (Adobe Systems)
    FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_192.dll [2016-06-16] ()
    FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
    FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll [2013-05-30] (ESN Social Software AB)
    FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [2014-05-26] (EA Digital Illusions CE AB)
    FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-07-07] (Oracle Corporation)
    FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-07-07] (Oracle Corporation)
    FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2016-05-24] ()
    FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-05-27] (Microsoft Corporation)
    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MIF5BA~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
    FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-06-29] (NVIDIA Corporation)
    FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-06-29] (NVIDIA Corporation)
    FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
    FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.2 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
    FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
    FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.7 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
    FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-27] (Adobe Systems Inc.)
    FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-07-14] (Adobe Systems)
    FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
    FF Plugin HKU\S-1-5-21-3964298893-2401237506-3764420300-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\MacGyver\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [No File]
    FF Plugin HKU\S-1-5-21-3964298893-2401237506-3764420300-1000: ActiveGS -> C:\Program Files (x86)\ActiveGS\npActiveGS.dll [2012-09-19] (Free Tools Association)
    FF Plugin HKU\S-1-5-21-3964298893-2401237506-3764420300-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-07-05] ()
    FF Plugin HKU\S-1-5-21-3964298893-2401237506-3764420300-1000: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2014-03-25] (Wacom)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2016-05-27] (Microsoft Corporation)
    FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
    FF Extension: McAfee WebAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2016-07-09]
    FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
    FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
    FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2016-07-08] [not signed]

    Chrome:
    =======
    CHR DefaultSearchURL: Default -> hxxps://search.yahoo.com/search?p={searchTerms}&fr=yset_chr_syc_oracle&type=default
    CHR DefaultSearchKeyword: Default -> Yahoo
    CHR DefaultSuggestURL: Default -> hxxps://search.yahoo.com/sugg/ie?output=fxjson&command={searchTerms}&nResults=10
    CHR Profile: C:\Users\MacGyver\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (BetterTTV) - C:\Users\MacGyver\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2016-07-08]
    CHR Extension: (Google Docs) - C:\Users\MacGyver\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-07-08]
    CHR Extension: (HTTPS Everywhere) - C:\Users\MacGyver\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp [2016-07-08]
    CHR Extension: (AdBlock) - C:\Users\MacGyver\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-07-08]
    CHR Extension: (Drumpfinator) - C:\Users\MacGyver\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcimhbfpiofdihhdnofbdlhjcmjopilp [2016-07-08]
    CHR Extension: (Twitch Now) - C:\Users\MacGyver\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmbdmpjmlijibeockamioakdpmhjnpk [2016-07-08]
    CHR Extension: (Chrome Web Store Payments) - C:\Users\MacGyver\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-07-08]
    CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2016-07-08]
    CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2016-07-08]
    CHR HKLM-x32\...\Chrome\Extension: [gihfmmedoddijgnhkgfgnkeohkpbipol] - hxxps://clients2.google.com/service/update2/crx

    ==================== Services (Whitelisted) ========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    S2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-11-20] (Advanced Micro Devices, Inc.) [File not signed]
    S2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc.)
    S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1125888 2015-07-22] ()
    R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)
    U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-03-14] (Hi-Rez Studios) [File not signed]
    R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [599864 2016-04-23] (McAfee, Inc.)
    R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [28552 2016-04-26] (Hewlett-Packard Company)
    S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [18856 2015-06-23] (Intel Corporation)
    S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
    R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373160 2015-12-19] (Intel Corporation)
    R2 ioloSystemService; C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe [4759600 2016-02-19] (iolo technologies, LLC)
    R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [163592 2016-06-24] (McAfee, Inc.)
    R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [989192 2016-05-24] (McAfee, Inc.)
    R2 McBootDelayStartSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [599864 2016-04-23] (McAfee, Inc.)
    R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.9.741.0\\McCSPServiceHost.exe [1903320 2016-04-18] (McAfee, Inc.)
    R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [599864 2016-04-23] (McAfee, Inc.)
    R2 McNaiAnn; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [599864 2016-04-23] (McAfee, Inc.)
    S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [795528 2016-04-20] (McAfee, Inc.)
    R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [599864 2016-04-23] (McAfee, Inc.)
    R2 McProxy; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [599864 2016-04-23] (McAfee, Inc.)
    R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [232688 2016-03-07] (McAfee, Inc.)
    R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [382456 2016-04-01] (McAfee, Inc.)
    R3 mfevtp; C:\WINDOWS\system32\mfevtps.exe [277744 2016-03-07] (McAfee, Inc.)
    R2 ModuleCoreService; C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe [1424352 2016-04-21] (McAfee, Inc.)
    R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [599864 2016-04-23] (McAfee, Inc.)
    R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)
    S3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)
    S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)
    S4 Oasis2Service; C:\Program Files (x86)\DDNi\Oasis2Service 1.0\Oasis2Service.exe [46592 2011-01-05] () [File not signed]
    S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2122248 2016-06-25] (Electronic Arts)
    S4 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1128952 2011-08-12] (PDF Complete Inc)
    R2 PEFService; C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe [1029856 2016-04-21] (Intel Security, Inc.)
    R2 Perforce; C:\Program Files\Perforce\Server\p4s.exe [3455104 2012-11-09] (Perforce Software Inc.)
    R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [188072 2015-11-04] ()
    R2 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [741640 2014-06-16] (DEVGURU Co., LTD.)
    S4 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [758224 2013-11-06] (Tunngle.net GmbH) [File not signed]
    S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
    S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
    R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [656664 2014-08-19] (Wacom Technology, Corp.)

    ===================== Drivers (Whitelisted) ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
    R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [78632 2016-03-11] (McAfee, Inc.)
    R1 ElRawDisk; C:\Windows\system32\drivers\ElRawDsk.sys [30752 2013-09-15] (EldoS Corporation)
    S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [207968 2016-02-24] (McAfee, Inc.)
    S3 hitmanpro37; C:\WINDOWS\system32\drivers\hitmanpro37.sys [46960 2016-07-08] ()
    R3 KillerEth; C:\Windows\System32\drivers\e22w10x64.sys [124464 2015-04-27] (Qualcomm Atheros, Inc.)
    R2 McPvDrv; C:\Windows\system32\drivers\McPvDrv.sys [79192 2016-04-20] (McAfee, Inc.)
    R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [193336 2015-07-10] (Intel Corporation)
    R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [419624 2016-03-11] (McAfee, Inc.)
    R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [349480 2016-03-11] (McAfee, Inc.)
    S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [83608 2016-03-11] (McAfee, Inc.)
    R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [493352 2016-03-11] (McAfee, Inc.)
    R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [842536 2016-03-11] (McAfee, Inc.)
    R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [543488 2016-02-10] (McAfee, Inc.)
    S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [109480 2016-02-10] (McAfee, Inc.)
    R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [46240 2016-06-06] (McAfee, Inc.)
    R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [243496 2016-03-11] (McAfee, Inc.)
    R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
    R1 RawDisk3; C:\Windows\system32\drivers\rawdsk3.sys [32912 2014-07-13] (EldoS Corporation)
    R3 rzendpt; C:\Windows\System32\drivers\rzendpt.sys [50392 2015-08-13] (Razer Inc)
    S3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [40696 2013-11-21] (Windows (R) Win 7 DDK provider)
    R2 rzpmgrk; C:\WINDOWS\system32\drivers\rzpmgrk.sys [37184 2015-09-22] (Razer, Inc.)
    R2 rzpnk; C:\WINDOWS\system32\drivers\rzpnk.sys [130880 2015-12-14] (Razer, Inc.)
    R3 ScpVBus; C:\Windows\System32\drivers\ScpVBus.sys [39168 2013-05-05] (Scarlet.Crush Productions)
    R3 tap0901t; C:\Windows\System32\drivers\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
    U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [24688 2016-07-10] ()
    S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
    S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
    S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
    U3 idsvc; no ImagePath

    ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2016-07-11 01:02 - 2016-07-11 01:02 - 00000000 ____D C:\Users\MacGyver\Downloads\FRST-OlderVersion
    2016-07-10 20:43 - 2016-07-10 20:43 - 00000000 ____D C:\Users\MacGyver\AppData\Roaming\3909
    2016-07-10 16:42 - 2016-07-10 16:42 - 00000684 _____ C:\Users\MacGyver\Desktop\JRT 2.txt
    2016-07-10 16:41 - 2016-07-10 16:41 - 00000684 _____ C:\Users\MacGyver\Desktop\JRT.txt
    2016-07-10 16:37 - 2016-07-10 16:37 - 00001177 _____ C:\Users\MacGyver\Desktop\AdwCleaner[C1].txt
    2016-07-10 16:19 - 2016-07-10 16:23 - 00000000 ____D C:\AdwCleaner
    2016-07-10 16:18 - 2016-07-10 16:18 - 00001054 _____ C:\Users\MacGyver\Desktop\Malwarebytes Text.txt
    2016-07-10 15:03 - 2016-07-10 15:04 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
    2016-07-10 15:03 - 2016-07-10 15:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
    2016-07-10 15:03 - 2016-07-10 15:03 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
    2016-07-10 15:03 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
    2016-07-10 15:03 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
    2016-07-10 15:03 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
    2016-07-10 12:49 - 2016-07-10 12:49 - 00024688 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
    2016-07-10 12:49 - 2016-07-10 12:49 - 00000000 ____D C:\ProgramData\RogueKiller
    2016-07-10 12:48 - 2016-07-10 12:48 - 19921992 _____ C:\Users\MacGyver\Downloads\RogueKiller.exe
    2016-07-09 00:37 - 2016-07-09 00:40 - 00186029 _____ C:\Users\MacGyver\Desktop\Addition.txt
    2016-07-09 00:36 - 2016-07-11 01:11 - 00029944 _____ C:\Users\MacGyver\Downloads\FRST.txt
    2016-07-09 00:36 - 2016-07-09 00:40 - 00081618 _____ C:\Users\MacGyver\Desktop\FRST.txt
    2016-07-09 00:35 - 2016-07-11 01:11 - 00000000 ____D C:\FRST
    2016-07-09 00:34 - 2016-07-11 01:02 - 02390528 _____ (Farbar) C:\Users\MacGyver\Downloads\FRST64.exe
    2016-07-08 23:36 - 2016-07-08 23:36 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
    2016-07-08 19:49 - 2016-07-08 19:52 - 00198586 _____ C:\TDSSKiller.3.1.0.9_08.07.2016_19.49.39_log.txt
    2016-07-08 19:48 - 2016-07-08 19:48 - 00000356 _____ C:\TDSSKiller.2.8.16.0_08.07.2016_19.48.23_log.txt
    2016-07-08 17:43 - 2016-07-10 20:18 - 00004020 _____ C:\WINDOWS\System32\Tasks\Intel Security DAT Reputation (AMCore) periodic endpoint safety pulse
    2016-07-08 17:43 - 2016-07-10 12:38 - 00004208 _____ C:\WINDOWS\System32\Tasks\Intel Security DAT Reputation (AMCore) Post DAT update endpoint safety pulse
    2016-07-08 08:23 - 2016-07-08 08:23 - 00000000 ____D C:\ProgramData\Emsisoft
    2016-07-08 08:05 - 2016-07-09 00:09 - 00000000 ____D C:\Program Files\Emsisoft Anti-Malware
    2016-07-08 05:21 - 2016-07-08 05:21 - 00001995 _____ C:\Users\Public\Desktop\McAfee Total Protection.lnk
    2016-07-08 05:20 - 2016-07-10 16:30 - 00000000 __RSD C:\Users\MacGyver\Documents\McAfee Vaults
    2016-07-08 05:20 - 2016-07-08 05:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
    2016-07-08 05:20 - 2016-07-08 05:20 - 00000000 ____D C:\Users\MacGyver\AppData\Local\McAfee File Lock
    2016-07-08 05:20 - 2016-04-20 11:00 - 00079192 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\McPvDrv.sys
    2016-07-08 05:20 - 2016-02-24 21:07 - 00207968 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\HipShieldK.sys
    2016-07-08 05:19 - 2016-07-08 05:19 - 00003142 _____ C:\WINDOWS\System32\Tasks\McAfeeLogon
    2016-07-08 05:19 - 2016-07-08 05:19 - 00000000 ____D C:\WINDOWS\System32\Tasks\McAfee
    2016-07-08 05:19 - 2016-07-08 05:19 - 00000000 ____D C:\ProgramData\Intel Security
    2016-07-08 05:18 - 2016-07-09 09:04 - 00000000 ____D C:\Program Files\Common Files\AV
    2016-07-08 05:18 - 2016-07-09 00:10 - 00000000 ____D C:\Program Files (x86)\McAfee
    2016-07-08 05:18 - 2016-07-08 05:18 - 00000000 ____D C:\Program Files\McAfee.com
    2016-07-08 05:18 - 2016-07-08 05:18 - 00000000 ____D C:\Program Files\Common Files\Intel Security
    2016-07-08 05:13 - 2016-03-07 15:38 - 00277744 _____ (McAfee, Inc.) C:\WINDOWS\system32\mfevtps.exe
    2016-07-08 05:12 - 2016-07-08 05:20 - 00000000 ____D C:\Program Files\Common Files\McAfee
    2016-07-08 04:01 - 2016-07-08 04:01 - 00000000 ____D C:\ProgramData\ioloGovernor
    2016-07-08 04:00 - 2016-07-08 04:00 - 00000000 ____D C:\Users\MacGyver\AppData\Local\ActiveSync
    2016-07-08 03:54 - 2016-07-08 03:31 - 00024064 _____ C:\WINDOWS\zoek-delete.exe
    2016-07-08 03:50 - 2016-07-08 05:25 - 00000000 ____D C:\Users\MacGyver\AppData\Roaming\iolo
    2016-07-08 02:19 - 2016-07-08 02:19 - 00002776 _____ C:\WINDOWS\system32\.crusader
    2016-07-08 01:29 - 2016-07-08 02:21 - 00046960 _____ C:\WINDOWS\system32\Drivers\hitmanpro37.sys
    2016-07-08 00:56 - 2016-07-08 06:55 - 00290304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\subinacl.exe
    2016-07-08 00:06 - 2016-07-08 17:39 - 00000000 ____D C:\Users\MacGyver\AppData\Roaming\ZHP
    2016-07-08 00:06 - 2016-06-29 12:21 - 00111552 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
    2016-07-08 00:05 - 2016-05-03 21:23 - 00129824 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
    2016-07-08 00:05 - 2016-05-03 21:22 - 00130848 _____ C:\WINDOWS\system32\vulkan-1.dll
    2016-07-08 00:05 - 2016-05-03 21:22 - 00045344 _____ C:\WINDOWS\system32\vulkaninfo.exe
    2016-07-08 00:05 - 2016-05-03 21:22 - 00040224 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
    2016-07-08 00:04 - 2016-07-08 00:06 - 00000000 ____D C:\WINDOWS\LastGood
    2016-07-08 00:03 - 2016-06-29 17:39 - 39979576 _____ C:\WINDOWS\system32\nvcompiler.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 35115968 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 31663040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 25431608 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 17445096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 10680808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 10656296 _____ C:\WINDOWS\system32\nvptxJitCompiler.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 10224024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 09013792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 08741848 _____ C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 08608120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 02845120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 02471992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 01922616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6436869.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 01579976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 01573432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6436869.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00984512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00909248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00787384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00786176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00771640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00709176 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00669952 _____ C:\WINDOWS\system32\nvfatbinaryLoader.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00632848 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00631288 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00601936 _____ C:\WINDOWS\system32\nvmcumd.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00565208 _____ C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00549424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00452432 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00423360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00383936 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00379808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00379448 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00348216 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00316632 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00178136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00155768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00153232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00131584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
    2016-07-08 00:03 - 2016-06-29 17:39 - 00046024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
    2016-07-07 23:47 - 2016-07-07 23:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
    2016-07-07 23:46 - 2016-07-07 23:46 - 00000000 ____D C:\WINDOWS\System32\Tasks\Apple
    2016-07-07 23:46 - 2016-07-07 23:46 - 00000000 ____D C:\Program Files\Bonjour
    2016-07-07 23:46 - 2016-07-07 23:46 - 00000000 ____D C:\Program Files (x86)\Bonjour
    2016-07-07 23:46 - 2016-07-07 23:46 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
    2016-07-07 23:45 - 2016-07-07 23:45 - 00097344 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
    2016-07-07 23:45 - 2016-07-07 23:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
    2016-07-07 23:44 - 2016-07-07 23:44 - 00001094 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
    2016-07-07 23:43 - 2016-07-07 23:43 - 00000000 ____D C:\Program Files (x86)\Audacity
    2016-07-07 23:42 - 2016-07-07 23:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
    2016-07-07 08:03 - 2016-07-08 02:00 - 00000000 ____D C:\ProgramData\HitmanPro
    2016-07-07 03:33 - 2016-07-07 03:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
    2016-07-07 03:33 - 2016-07-07 03:33 - 00000000 ____D C:\Program Files\7-Zip
    2016-07-06 19:55 - 2016-07-06 19:55 - 00000000 ____D C:\Users\MacGyver\AppData\Local\ESET
    2016-07-06 10:34 - 2016-07-06 10:35 - 00000000 ____D C:\Users\MacGyver\Downloads\Music Sheets
    2016-07-05 19:47 - 2016-07-05 19:47 - 00000000 ____D C:\ProgramData\Samsung
    2016-07-05 19:47 - 2016-07-05 19:47 - 00000000 ____D C:\Program Files\SAMSUNG
    2016-07-05 03:50 - 2016-07-05 03:50 - 00003498 _____ C:\WINDOWS\System32\Tasks\{BC3FA003-1B9B-4710-A518-5713D42B1CE4}
    2016-07-05 01:35 - 2016-07-05 01:35 - 00000000 ____D C:\Users\MacGyver\AppData\Local\backburner
    2016-07-05 01:28 - 2016-07-08 23:25 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
    2016-07-01 16:51 - 2016-07-01 16:51 - 00001955 _____ C:\Users\MacGyver\Desktop\Steam.lnk
    2016-06-27 02:47 - 2016-06-27 02:47 - 00001916 _____ C:\Users\MacGyver\Desktop\PowerPoint 2016.lnk
    2016-06-27 02:47 - 2016-06-27 02:47 - 00001884 _____ C:\Users\MacGyver\Desktop\Word 2016.lnk
    2016-06-27 02:41 - 2016-07-08 23:13 - 00002656 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
    2016-06-27 02:41 - 2016-06-27 02:41 - 00002729 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
    2016-06-27 02:41 - 2016-06-27 02:41 - 00002662 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
    2016-06-27 02:41 - 2016-06-27 02:41 - 00002656 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business 2016.lnk
    2016-06-27 02:41 - 2016-06-27 02:41 - 00002656 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
    2016-06-27 02:41 - 2016-06-27 02:41 - 00002648 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
    2016-06-27 02:41 - 2016-06-27 02:41 - 00002648 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
    2016-06-27 02:41 - 2016-06-27 02:41 - 00002642 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
    2016-06-27 02:41 - 2016-06-27 02:41 - 00002628 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
    2016-06-27 02:41 - 2016-06-27 02:41 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools
    2016-06-27 02:40 - 2016-06-27 02:40 - 00000000 ____D C:\WINDOWS\PCHEALTH
    2016-06-27 02:40 - 2016-06-27 02:40 - 00000000 ____D C:\Program Files\Microsoft SQL Server
    2016-06-27 02:40 - 2016-06-27 02:40 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
    2016-06-27 02:40 - 2016-06-27 02:40 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
    2016-06-27 02:37 - 2016-06-27 02:40 - 00000000 ____D C:\Program Files\Microsoft Office
    2016-06-27 02:37 - 2016-06-27 02:37 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
    2016-06-27 02:37 - 2016-06-27 02:37 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
    2016-06-27 02:37 - 2016-06-27 02:37 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
    2016-06-27 02:35 - 2016-06-27 02:35 - 00000000 __RHD C:\MSOCache
    2016-06-17 20:32 - 2016-06-17 20:32 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
    2016-06-17 20:31 - 2016-06-03 02:22 - 01920960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6436839.dll
    2016-06-17 20:31 - 2016-06-03 02:22 - 01571776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6436839.dll
    2016-06-17 04:27 - 2016-07-08 05:20 - 00000000 ____D C:\Program Files\McAfee
     
  17. 2016/07/11
    PlanetAlps

    PlanetAlps Member Thread Starter

    Joined:
    2016/07/09
    Messages:
    47
    Likes Received:
    0
    2016-06-14 18:28 - 2016-05-28 01:13 - 01401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
    2016-06-14 18:28 - 2016-05-28 01:13 - 01184960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
    2016-06-14 18:28 - 2016-05-28 01:13 - 00514752 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
    2016-06-14 18:28 - 2016-05-28 01:13 - 00290496 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
    2016-06-14 18:28 - 2016-05-28 01:13 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
    2016-06-14 18:28 - 2016-05-28 01:13 - 00046784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
    2016-06-14 18:28 - 2016-05-28 00:25 - 04268880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
    2016-06-14 18:28 - 2016-05-28 00:23 - 00388384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
    2016-06-14 18:28 - 2016-05-28 00:23 - 00312160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll
    2016-06-14 18:28 - 2016-05-28 00:22 - 07474528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
    2016-06-14 18:28 - 2016-05-28 00:22 - 04387680 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
    2016-06-14 18:28 - 2016-05-28 00:22 - 00428896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
    2016-06-14 18:28 - 2016-05-28 00:22 - 00211296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
    2016-06-14 18:28 - 2016-05-28 00:22 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
    2016-06-14 18:28 - 2016-05-28 00:20 - 00430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
    2016-06-14 18:28 - 2016-05-28 00:18 - 00357216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
    2016-06-14 18:28 - 2016-05-28 00:16 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
    2016-06-14 18:28 - 2016-05-28 00:09 - 00501600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
    2016-06-14 18:28 - 2016-05-28 00:09 - 00170848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.exe
    2016-06-14 18:28 - 2016-05-28 00:09 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
    2016-06-14 18:28 - 2016-05-28 00:08 - 00693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
    2016-06-14 18:28 - 2016-05-28 00:08 - 00258912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufx01000.sys
    2016-06-14 18:28 - 2016-05-28 00:08 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
    2016-06-14 18:28 - 2016-05-28 00:07 - 03675512 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
    2016-06-14 18:28 - 2016-05-28 00:07 - 02921880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
    2016-06-14 18:28 - 2016-05-28 00:07 - 01322248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
    2016-06-14 18:28 - 2016-05-28 00:07 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
    2016-06-14 18:28 - 2016-05-28 00:07 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
    2016-06-14 18:28 - 2016-05-28 00:07 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
    2016-06-14 18:28 - 2016-05-28 00:07 - 00331616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
    2016-06-14 18:28 - 2016-05-28 00:06 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
    2016-06-14 18:28 - 2016-05-28 00:06 - 04074160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
    2016-06-14 18:28 - 2016-05-28 00:06 - 00730344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
    2016-06-14 18:28 - 2016-05-28 00:06 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
    2016-06-14 18:28 - 2016-05-28 00:06 - 00254656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
    2016-06-14 18:28 - 2016-05-28 00:05 - 04515264 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
    2016-06-14 18:28 - 2016-05-28 00:04 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
    2016-06-14 18:28 - 2016-05-28 00:04 - 00431296 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
    2016-06-14 18:28 - 2016-05-28 00:04 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
    2016-06-14 18:28 - 2016-05-28 00:04 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
    2016-06-14 18:28 - 2016-05-28 00:04 - 00111064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
    2016-06-14 18:28 - 2016-05-28 00:04 - 00097096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
    2016-06-14 18:28 - 2016-05-28 00:03 - 00131248 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
    2016-06-14 18:28 - 2016-05-27 23:58 - 01996640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
    2016-06-14 18:28 - 2016-05-27 23:58 - 00379232 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
    2016-06-14 18:28 - 2016-05-27 23:57 - 02548944 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
    2016-06-14 18:28 - 2016-05-27 23:57 - 02195632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
    2016-06-14 18:28 - 2016-05-27 23:57 - 01594416 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
    2016-06-14 18:28 - 2016-05-27 23:57 - 01372312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
    2016-06-14 18:28 - 2016-05-27 23:57 - 00649792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
    2016-06-14 18:28 - 2016-05-27 23:57 - 00636304 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
    2016-06-14 18:28 - 2016-05-27 23:57 - 00577376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
    2016-06-14 18:28 - 2016-05-27 23:57 - 00546456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
    2016-06-14 18:28 - 2016-05-27 23:57 - 00521664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
    2016-06-14 18:28 - 2016-05-27 23:57 - 00316256 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
    2016-06-14 18:28 - 2016-05-27 23:35 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe
    2016-06-14 18:28 - 2016-05-27 23:35 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
    2016-06-14 18:28 - 2016-05-27 23:35 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsdport.sys
    2016-06-14 18:28 - 2016-05-27 23:31 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdlrecover.exe
    2016-06-14 18:28 - 2016-05-27 23:31 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
    2016-06-14 18:28 - 2016-05-27 23:31 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
    2016-06-14 18:28 - 2016-05-27 23:29 - 22379008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
    2016-06-14 18:28 - 2016-05-27 23:29 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
    2016-06-14 18:28 - 2016-05-27 23:28 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
    2016-06-14 18:28 - 2016-05-27 23:27 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
    2016-06-14 18:28 - 2016-05-27 23:27 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
    2016-06-14 18:28 - 2016-05-27 23:26 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
    2016-06-14 18:28 - 2016-05-27 23:26 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
    2016-06-14 18:28 - 2016-05-27 23:26 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
    2016-06-14 18:28 - 2016-05-27 23:25 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
    2016-06-14 18:28 - 2016-05-27 23:24 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
    2016-06-14 18:28 - 2016-05-27 23:24 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
    2016-06-14 18:28 - 2016-05-27 23:24 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
    2016-06-14 18:28 - 2016-05-27 23:22 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
    2016-06-14 18:28 - 2016-05-27 23:22 - 00278528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
    2016-06-14 18:28 - 2016-05-27 23:22 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
    2016-06-14 18:28 - 2016-05-27 23:22 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
    2016-06-14 18:28 - 2016-05-27 23:22 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
    2016-06-14 18:28 - 2016-05-27 23:22 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsvc.dll
    2016-06-14 18:28 - 2016-05-27 23:22 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
    2016-06-14 18:28 - 2016-05-27 23:21 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrokerLib.dll
    2016-06-14 18:28 - 2016-05-27 23:21 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
    2016-06-14 18:28 - 2016-05-27 23:20 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
    2016-06-14 18:28 - 2016-05-27 23:20 - 00511488 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll
    2016-06-14 18:28 - 2016-05-27 23:20 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\system32\polstore.dll
    2016-06-14 18:28 - 2016-05-27 23:20 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
    2016-06-14 18:28 - 2016-05-27 23:20 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GnssAdapter.dll
    2016-06-14 18:28 - 2016-05-27 23:20 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Privacy.dll
    2016-06-14 18:28 - 2016-05-27 23:19 - 24605696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
    2016-06-14 18:28 - 2016-05-27 23:19 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
    2016-06-14 18:28 - 2016-05-27 23:18 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
    2016-06-14 18:28 - 2016-05-27 23:18 - 07977472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
    2016-06-14 18:28 - 2016-05-27 23:18 - 00610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
    2016-06-14 18:28 - 2016-05-27 23:18 - 00591360 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
    2016-06-14 18:28 - 2016-05-27 23:18 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
    2016-06-14 18:28 - 2016-05-27 23:18 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPSECSVC.DLL
    2016-06-14 18:28 - 2016-05-27 23:18 - 00380416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
    2016-06-14 18:28 - 2016-05-27 23:18 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
    2016-06-14 18:28 - 2016-05-27 23:17 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
    2016-06-14 18:28 - 2016-05-27 23:17 - 00963072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
    2016-06-14 18:28 - 2016-05-27 23:17 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
    2016-06-14 18:28 - 2016-05-27 23:17 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.dll
    2016-06-14 18:28 - 2016-05-27 23:17 - 00415232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
    2016-06-14 18:28 - 2016-05-27 23:17 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
    2016-06-14 18:28 - 2016-05-27 23:17 - 00173056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
    2016-06-14 18:28 - 2016-05-27 23:16 - 19344384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
    2016-06-14 18:28 - 2016-05-27 23:16 - 00690176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
    2016-06-14 18:28 - 2016-05-27 23:16 - 00684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
    2016-06-14 18:28 - 2016-05-27 23:16 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
    2016-06-14 18:28 - 2016-05-27 23:16 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
    2016-06-14 18:28 - 2016-05-27 23:16 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
    2016-06-14 18:28 - 2016-05-27 23:16 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\polstore.dll
    2016-06-14 18:28 - 2016-05-27 23:16 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
    2016-06-14 18:28 - 2016-05-27 23:15 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
    2016-06-14 18:28 - 2016-05-27 23:15 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
    2016-06-14 18:28 - 2016-05-27 23:15 - 00794624 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
    2016-06-14 18:28 - 2016-05-27 23:15 - 00535040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
    2016-06-14 18:28 - 2016-05-27 23:15 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
    2016-06-14 18:28 - 2016-05-27 23:15 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
    2016-06-14 18:28 - 2016-05-27 23:14 - 18674176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
    2016-06-14 18:28 - 2016-05-27 23:14 - 01716736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
    2016-06-14 18:28 - 2016-05-27 23:14 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
    2016-06-14 18:28 - 2016-05-27 23:14 - 00965632 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
    2016-06-14 18:28 - 2016-05-27 23:14 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
    2016-06-14 18:28 - 2016-05-27 23:14 - 00606208 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
    2016-06-14 18:28 - 2016-05-27 23:14 - 00499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
    2016-06-14 18:28 - 2016-05-27 23:14 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
    2016-06-14 18:28 - 2016-05-27 23:13 - 00990208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
    2016-06-14 18:28 - 2016-05-27 23:13 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
    2016-06-14 18:28 - 2016-05-27 23:13 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
    2016-06-14 18:28 - 2016-05-27 23:13 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
    2016-06-14 18:28 - 2016-05-27 23:13 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
    2016-06-14 18:28 - 2016-05-27 23:12 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
    2016-06-14 18:28 - 2016-05-27 23:12 - 00614400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
    2016-06-14 18:28 - 2016-05-27 23:12 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
    2016-06-14 18:28 - 2016-05-27 23:11 - 01445888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
    2016-06-14 18:28 - 2016-05-27 23:11 - 00890368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
    2016-06-14 18:28 - 2016-05-27 23:11 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
    2016-06-14 18:28 - 2016-05-27 23:11 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
    2016-06-14 18:28 - 2016-05-27 23:11 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
    2016-06-14 18:28 - 2016-05-27 23:11 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
    2016-06-14 18:28 - 2016-05-27 23:11 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
    2016-06-14 18:28 - 2016-05-27 23:09 - 01073152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
    2016-06-14 18:28 - 2016-05-27 23:08 - 13385728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
    2016-06-14 18:28 - 2016-05-27 23:08 - 06295552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
    2016-06-14 18:28 - 2016-05-27 23:06 - 12128256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
    2016-06-14 18:28 - 2016-05-27 23:06 - 07200256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
    2016-06-14 18:28 - 2016-05-27 23:06 - 01339904 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
    2016-06-14 18:28 - 2016-05-27 23:05 - 03994624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
    2016-06-14 18:28 - 2016-05-27 23:05 - 03664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
    2016-06-14 18:28 - 2016-05-27 23:05 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
    2016-06-14 18:28 - 2016-05-27 23:05 - 01797120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
    2016-06-14 18:28 - 2016-05-27 23:04 - 06973952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
    2016-06-14 18:28 - 2016-05-27 23:04 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
    2016-06-14 18:28 - 2016-05-27 23:04 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll
    2016-06-14 18:28 - 2016-05-27 23:03 - 05323776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
    2016-06-14 18:28 - 2016-05-27 23:03 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
    2016-06-14 18:28 - 2016-05-27 23:03 - 02609664 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
    2016-06-14 18:28 - 2016-05-27 23:03 - 01185280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationFramework.dll
    2016-06-14 18:28 - 2016-05-27 23:03 - 00693760 _____ (Microsoft Corporation) C:\WINDOWS\system32\internetmail.dll
    2016-06-14 18:28 - 2016-05-27 23:03 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
    2016-06-14 18:28 - 2016-05-27 23:02 - 03590144 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
    2016-06-14 18:28 - 2016-05-27 23:02 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
    2016-06-14 18:28 - 2016-05-27 23:02 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
    2016-06-14 18:28 - 2016-05-27 23:01 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
    2016-06-14 18:28 - 2016-05-27 23:01 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
    2016-06-14 18:28 - 2016-05-27 23:01 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
    2016-06-14 18:28 - 2016-05-27 23:01 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
    2016-06-14 18:28 - 2016-05-27 23:00 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
    2016-06-14 18:28 - 2016-05-27 23:00 - 03585536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
    2016-06-14 18:28 - 2016-05-27 23:00 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
    2016-06-14 18:28 - 2016-05-27 23:00 - 02230272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
    2016-06-14 18:28 - 2016-05-27 23:00 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
    2016-06-14 18:28 - 2016-05-27 23:00 - 01730560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
    2016-06-14 18:28 - 2016-05-27 23:00 - 01707520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
    2016-06-14 18:28 - 2016-05-27 23:00 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
    2016-06-14 18:28 - 2016-05-27 22:58 - 07832576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
    2016-06-14 18:28 - 2016-05-27 22:58 - 04896256 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
    2016-06-14 18:28 - 2016-05-27 22:58 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
    2016-06-14 18:28 - 2016-05-27 22:58 - 02066432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
    2016-06-14 18:28 - 2016-05-27 22:58 - 01996288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
    2016-06-14 18:28 - 2016-05-27 22:57 - 02281472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
    2016-06-14 18:28 - 2016-05-27 22:55 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
    2016-06-14 18:27 - 2016-05-27 23:29 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll
    2016-06-14 18:27 - 2016-05-27 23:29 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxp.dll
    2016-06-14 18:27 - 2016-05-27 23:28 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
    2016-06-14 18:27 - 2016-05-27 23:28 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\FwRemoteSvr.dll
    2016-06-14 18:27 - 2016-05-27 23:26 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
    2016-06-14 18:27 - 2016-05-27 23:26 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
    2016-06-14 18:27 - 2016-05-27 23:24 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ndu.sys
    2016-06-14 18:27 - 2016-05-27 23:24 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
    2016-06-14 18:27 - 2016-05-27 23:24 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
    2016-06-14 18:27 - 2016-05-27 23:24 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
    2016-06-14 18:27 - 2016-05-27 23:24 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FwRemoteSvr.dll
    2016-06-14 18:27 - 2016-05-27 23:23 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
    2016-06-14 18:27 - 2016-05-27 23:23 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
    2016-06-14 18:27 - 2016-05-27 23:22 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
    2016-06-14 18:27 - 2016-05-27 23:22 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
    2016-06-14 18:27 - 2016-05-27 23:21 - 00550912 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
    2016-06-14 18:27 - 2016-05-27 23:21 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
    2016-06-14 18:27 - 2016-05-27 23:20 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
    2016-06-14 18:27 - 2016-05-27 23:19 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
    2016-06-14 18:27 - 2016-05-27 23:19 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
    2016-06-14 18:27 - 2016-05-27 23:19 - 00355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
    2016-06-14 18:27 - 2016-05-27 23:19 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
    2016-06-14 18:27 - 2016-05-27 23:17 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
    2016-06-14 18:27 - 2016-05-27 23:15 - 00293888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
    2016-06-14 18:27 - 2016-05-27 23:14 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
    2016-06-14 18:27 - 2016-05-27 23:13 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
    2016-06-14 18:27 - 2016-05-27 23:11 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
    2016-06-14 18:27 - 2016-05-27 23:02 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
    2016-06-14 18:27 - 2016-05-27 23:00 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
    2016-06-14 18:27 - 2016-05-27 23:00 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
    2016-06-14 18:27 - 2016-05-27 22:59 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
    2016-06-14 18:27 - 2016-05-27 22:53 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2016-07-11 00:57 - 2015-02-16 14:04 - 00000000 ____D C:\Users\MacGyver\AppData\Roaming\Skype
    2016-07-11 00:26 - 2012-08-18 12:48 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
    2016-07-10 23:17 - 2012-07-28 01:40 - 00000000 ____D C:\Users\MacGyver\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
    2016-07-10 23:17 - 2012-07-28 00:43 - 00000000 ____D C:\Users\MacGyver\AppData\Local\CrashDumps
    2016-07-10 21:59 - 2012-07-28 01:34 - 00000000 ____D C:\Program Files (x86)\Steam
    2016-07-10 21:23 - 2013-10-23 20:05 - 00000000 ____D C:\Users\MacGyver\AppData\Local\Battle.net
    2016-07-10 21:08 - 2014-06-24 02:56 - 00000000 ____D C:\Users\MacGyver\AppData\Roaming\Spotify
    2016-07-10 21:03 - 2014-06-24 02:56 - 00000000 ____D C:\Users\MacGyver\AppData\Local\Spotify
    2016-07-10 21:03 - 2013-10-23 20:05 - 00000000 ____D C:\Program Files (x86)\Battle.net
    2016-07-10 20:07 - 2014-11-29 14:15 - 00000926 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
    2016-07-10 16:38 - 2015-07-30 07:08 - 00000000 ___RD C:\Users\MacGyver\OneDrive
    2016-07-10 16:27 - 2015-12-26 19:53 - 00000000 __SHD C:\Users\MacGyver\IntelGraphicsProfiles
    2016-07-10 16:27 - 2015-12-26 19:43 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
    2016-07-10 16:24 - 2016-01-04 17:25 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
    2016-07-10 16:24 - 2016-01-04 16:45 - 00000000 ____D C:\ProgramData\NVIDIA
    2016-07-10 16:23 - 2015-10-30 01:28 - 00786432 ___SH C:\WINDOWS\system32\config\BBI
    2016-07-10 12:56 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\AppReadiness
    2016-07-10 12:51 - 2015-10-30 02:24 - 00000000 ___HD C:\Program Files\WindowsApps
    2016-07-09 01:53 - 2012-07-28 11:50 - 00004166 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B6066F4B-23E5-4C8A-B819-7A76951FBD33}
    2016-07-09 00:23 - 2015-08-10 17:15 - 00000000 ____D C:\Users\MacGyver\Documents\College Stuff
    2016-07-08 23:19 - 2013-07-06 14:49 - 00000000 ____D C:\Users\MacGyver\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\1-click run
    2016-07-08 23:14 - 2015-07-30 06:52 - 00000000 ____D C:\Users\MacGyver\AppData\Local\Packages
    2016-07-08 23:08 - 2012-07-28 20:27 - 00000000 ____D C:\Users\MacGyver\Documents\my games
    2016-07-08 23:07 - 2014-02-23 11:28 - 00000000 ___RD C:\Users\MacGyver\Desktop\Desktop Icons
    2016-07-08 23:00 - 2014-02-22 14:53 - 00000000 ____D C:\Program Files (x86)\PCSX2 1.2.1
    2016-07-08 23:00 - 2013-06-27 22:20 - 00000000 ____D C:\Users\MacGyver\Documents\PCSX2
    2016-07-08 18:45 - 2016-01-10 16:59 - 00003348 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForMacGyver
    2016-07-08 18:45 - 2016-01-10 16:59 - 00000368 _____ C:\WINDOWS\Tasks\HPCeeScheduleForMacGyver.job
    2016-07-08 17:43 - 2015-10-30 01:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
    2016-07-08 17:43 - 2012-08-09 16:33 - 00000000 ____D C:\ProgramData\McAfee
    2016-07-08 05:19 - 2015-10-30 02:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
    2016-07-08 05:14 - 2015-07-30 06:52 - 00000000 __RHD C:\Users\Public\AccountPictures
    2016-07-08 05:06 - 2016-01-04 16:39 - 00360648 _____ C:\WINDOWS\system32\FNTCACHE.DAT
    2016-07-08 03:55 - 2012-11-22 01:59 - 00000008 __RSH C:\ProgramData\ntuser.pol
    2016-07-08 03:46 - 2009-07-13 22:20 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
    2016-07-08 01:29 - 2012-08-22 12:28 - 00000000 ____D C:\ProgramData\Origin
    2016-07-08 01:23 - 2009-07-14 00:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
    2016-07-08 01:00 - 2013-05-11 09:36 - 00000000 ____D C:\Users\MacGyver\AppData\Local\Sony
    2016-07-08 00:58 - 2013-04-20 08:52 - 00000000 ____D C:\Program Files (x86)\JC2-MP
    2016-07-08 00:51 - 2013-01-02 22:11 - 00000000 ____D C:\Program Files (x86)\Origin Games
    2016-07-08 00:06 - 2016-01-04 16:45 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
    2016-07-08 00:06 - 2015-10-30 02:21 - 00000000 ____D C:\WINDOWS\INF
    2016-07-08 00:06 - 2012-07-28 01:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
    2016-07-07 23:47 - 2014-09-30 18:38 - 00000000 ___RD C:\Program Files (x86)\Skype
    2016-07-07 23:47 - 2012-02-15 21:36 - 00000000 ____D C:\ProgramData\Skype
    2016-07-07 23:46 - 2012-08-23 14:43 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
    2016-07-07 23:45 - 2012-09-02 16:03 - 00000000 ____D C:\Program Files (x86)\Java
    2016-07-07 23:23 - 2016-05-05 18:03 - 00000000 ____D C:\Program Files (x86)\Overwatch
    2016-07-07 23:23 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
    2016-07-06 19:57 - 2014-11-29 14:16 - 00002274 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
    2016-07-05 22:37 - 2015-10-30 04:07 - 00000000 ____D C:\WINDOWS\ShellNew
    2016-07-05 22:37 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\Provisioning
    2016-07-05 22:18 - 2014-10-16 21:05 - 00000000 ____D C:\Program Files (x86)\Heroes of the Storm
    2016-07-05 03:51 - 2013-01-31 18:55 - 00000000 ____D C:\Users\MacGyver\AppData\Local\ElevatedDiagnostics
    2016-07-05 01:35 - 2012-09-24 21:42 - 00000000 ____D C:\Program Files (x86)\Autodesk
    2016-07-02 23:53 - 2015-11-11 18:35 - 00000000 ____D C:\Users\MacGyver\Downloads\DS4Windows
    2016-06-30 22:13 - 2015-12-21 18:56 - 13617096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
    2016-06-29 17:39 - 2016-01-28 17:50 - 00040084 _____ C:\WINDOWS\system32\nvinfo.pb
    2016-06-29 17:39 - 2015-12-21 18:56 - 20393528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
    2016-06-29 17:39 - 2015-12-21 18:56 - 17747392 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
    2016-06-29 17:39 - 2015-12-21 18:56 - 14472848 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
    2016-06-29 17:39 - 2015-12-21 18:56 - 03814512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
    2016-06-29 17:39 - 2015-12-21 18:56 - 03374720 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
    2016-06-29 17:39 - 2015-12-21 18:56 - 00214592 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
    2016-06-29 12:50 - 2016-01-04 16:45 - 06363072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
    2016-06-29 12:50 - 2016-01-04 16:45 - 02455608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
    2016-06-29 12:50 - 2016-01-04 16:45 - 01764408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
    2016-06-29 12:50 - 2016-01-04 16:45 - 01352760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
    2016-06-29 12:50 - 2016-01-04 16:45 - 00534072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
    2016-06-29 12:50 - 2016-01-04 16:45 - 00393784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
    2016-06-29 12:50 - 2016-01-04 16:45 - 00081856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
    2016-06-29 12:50 - 2016-01-04 16:45 - 00071224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
    2016-06-27 15:35 - 2012-11-13 22:33 - 00000000 ____D C:\Program Files (x86)\Mozilla FireFox
    2016-06-27 14:39 - 2015-12-20 17:31 - 00000000 ____D C:\Users\MacGyver\Desktop\School 2015
    2016-06-27 02:41 - 2015-10-30 02:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
    2016-06-27 02:40 - 2015-10-30 02:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
    2016-06-27 02:37 - 2015-10-30 02:24 - 00000000 ____D C:\Program Files\Common Files\System
    2016-06-27 02:37 - 2009-07-13 21:34 - 00000478 _____ C:\WINDOWS\win.ini
    2016-06-27 01:58 - 2013-03-14 01:38 - 00000000 ____D C:\Program Files\Microsoft Silverlight
    2016-06-27 01:58 - 2013-03-14 01:38 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
    2016-06-27 01:56 - 2016-01-04 16:51 - 00000000 ____D C:\Users\MacGyver
    2016-06-25 02:11 - 2012-08-22 12:29 - 00000000 ____D C:\Users\MacGyver\AppData\Roaming\Origin
    2016-06-25 00:55 - 2012-08-22 12:28 - 00000000 ____D C:\Program Files (x86)\Origin
    2016-06-24 16:11 - 2016-01-04 16:46 - 00000000 ____D C:\ProgramData\Razer
    2016-06-24 14:50 - 2013-03-14 01:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
    2016-06-22 22:22 - 2012-10-15 16:20 - 00003276 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForMACGYVER-HP$
    2016-06-22 22:22 - 2012-10-15 16:20 - 00000348 _____ C:\WINDOWS\Tasks\HPCeeScheduleForMACGYVER-HP$.job
    2016-06-22 10:16 - 2016-01-04 16:45 - 07208075 _____ C:\WINDOWS\system32\nvcoproc.bin
    2016-06-17 18:59 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\rescache
    2016-06-17 00:27 - 2012-07-28 01:44 - 00000000 ____D C:\Program Files (x86)\StarCraft II
    2016-06-16 21:26 - 2016-04-07 17:26 - 09717952 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe
    2016-06-16 17:44 - 2015-10-30 02:11 - 00000000 ____D C:\WINDOWS\CbsTemp
    2016-06-16 13:00 - 2015-10-30 02:24 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
    2016-06-16 13:00 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
    2016-06-16 13:00 - 2015-10-30 02:24 - 00000000 ____D C:\WINDOWS\bcastdvr
    2016-06-14 19:54 - 2013-08-15 03:01 - 00000000 ____D C:\WINDOWS\system32\MRT
    2016-06-14 19:41 - 2012-07-28 19:05 - 142482544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
    2016-06-14 15:01 - 2015-12-01 18:24 - 00112216 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
    2016-06-14 15:01 - 2014-06-02 22:14 - 01756424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
    2016-06-14 15:01 - 2014-06-02 22:14 - 01316184 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
    2016-06-14 15:01 - 2013-10-28 17:54 - 01767944 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
    2016-06-14 15:01 - 2013-10-28 17:54 - 01377800 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
    2016-06-14 13:33 - 2015-10-30 02:26 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
    2016-06-14 13:33 - 2015-10-30 02:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

    ==================== Files in the root of some directories =======

    2015-06-19 16:09 - 2015-06-19 16:09 - 0002724 _____ () C:\Users\MacGyver\AppData\Roaming\TargetInvocationLog.txt
    2015-12-27 09:17 - 2016-01-04 19:00 - 0000000 _____ () C:\Users\MacGyver\AppData\Local\Driver_LOM_8161Present.flag
    2013-12-26 13:27 - 2013-12-26 13:27 - 0000036 _____ () C:\Users\MacGyver\AppData\Local\housecall.guid.cache
    2013-11-25 22:14 - 2015-06-25 01:48 - 0007597 _____ () C:\Users\MacGyver\AppData\Local\resmon.resmoncfg
    2012-07-28 00:31 - 2012-07-28 00:31 - 0000003 _____ () C:\Users\MacGyver\AppData\Local\user_data.ini
    2012-07-28 00:05 - 2012-07-28 00:05 - 0017408 _____ () C:\Users\MacGyver\AppData\Local\WebpageIcons.db
    2015-07-30 06:07 - 2015-07-30 06:07 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
    2012-07-28 15:21 - 2012-09-24 21:44 - 0000381 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

    Some files in TEMP:
    ====================
    C:\Users\MacGyver\AppData\Local\Temp\dllnt_dump.dll
    C:\Users\MacGyver\AppData\Local\Temp\libeay32.dll
    C:\Users\MacGyver\AppData\Local\Temp\McCSPInstall.dll
    C:\Users\MacGyver\AppData\Local\Temp\msvcr120.dll
    C:\Users\MacGyver\AppData\Local\Temp\sqlite3.dll


    ==================== Bamital & volsnap =================

    (There is no automatic fix for files that do not pass verification.)

    C:\WINDOWS\system32\winlogon.exe => File is digitally signed
    C:\WINDOWS\system32\wininit.exe => File is digitally signed
    C:\WINDOWS\explorer.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
    C:\WINDOWS\system32\svchost.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
    C:\WINDOWS\system32\services.exe => File is digitally signed
    C:\WINDOWS\system32\User32.dll => File is digitally signed
    C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
    C:\WINDOWS\system32\userinit.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
    C:\WINDOWS\system32\rpcss.dll => File is digitally signed
    C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
    C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
    C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2016-07-01 19:26

    ==================== End of FRST.txt ============================
     
  18. 2016/07/11
    PlanetAlps

    PlanetAlps Member Thread Starter

    Joined:
    2016/07/09
    Messages:
    47
    Likes Received:
    0
    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-07-2016 01
    Ran by MacGyver (2016-07-11 01:11:42)
    Running from C:\Users\MacGyver\Downloads
    Windows 10 Home Version 1511 (X64) (2016-01-04 22:30:42)
    Boot Mode: Normal
    ==========================================================


    ==================== Accounts: =============================

    Administrator (S-1-5-21-3964298893-2401237506-3764420300-500 - Administrator - Disabled)
    DefaultAccount (S-1-5-21-3964298893-2401237506-3764420300-503 - Limited - Disabled)
    Guest (S-1-5-21-3964298893-2401237506-3764420300-501 - Limited - Disabled) => C:\Users\Guest
    HomeGroupUser$ (S-1-5-21-3964298893-2401237506-3764420300-1002 - Limited - Enabled)
    MacGyver (S-1-5-21-3964298893-2401237506-3764420300-1000 - Administrator - Enabled) => C:\Users\MacGyver

    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AV: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556}
    AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: McAfee Anti-Virus and Anti-Spyware (Enabled - Up to date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB}
    FW: McAfee Firewall (Enabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D}

    ==================== Installed Programs ======================

    (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    7-Zip 16.02 (x64) (HKLM\...\7-Zip) (Version: 16.02 - Igor Pavlov)
    Acrobat.com (HKLM-x32\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1.377 - Adobe Systems Incorporated)
    Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
    ActiveGS (HKLM-x32\...\{F576BBE9-11D0-4F02-B8F0-7CCA9C159937}) (Version: 3.5.903 - Second Sight Software/FTA)
    Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.016.20045 - Adobe Systems Incorporated)
    Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.192 - Adobe Systems Incorporated)
    Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
    Akamai NetSession Interface (HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\Akamai) (Version: - Akamai Technologies, Inc)
    AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
    Amnesia: The Dark Descent (HKLM-x32\...\Steam App 57300) (Version: - )
    Apple Application Support (32-bit) (HKLM-x32\...\{26356515-5821-40FA-9C3D-9785052A1062}) (Version: 4.3.1 - Apple Inc.)
    Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.)
    Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
    Arma 2: DayZ Mod (HKLM-x32\...\Steam App 224580) (Version: - )
    ARMA 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version: - Bohemia Interactive)
    ASRock App Charger v1.0.5 (HKLM\...\ASRock App Charger_is1) (Version: - ASRock Inc.)
    ASRock eXtreme Tuner v0.1.122 (HKLM-x32\...\ASRock eXtreme Tuner_is1) (Version: - )
    ASRock InstantBoot v1.29 (HKLM-x32\...\ASRock InstantBoot_is1) (Version: - )
    Assassin's Creed Brotherhood (HKLM-x32\...\Steam App 48190) (Version: - Ubisoft Montreal)
    Assassin's Creed Syndicate (HKLM-x32\...\Uplay Install 1875) (Version: 1.50 - Ubisoft)
    Atlas Native Client (HKLM-x32\...\{D355A686-EC21-4232-970C-B21252628B68}) (Version: 1.12.0 - Artillery Games, Inc.)
    Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
    Batman: Arkham City GOTY (HKLM-x32\...\Steam App 200260) (Version: - )
    Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
    Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
    BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version: - )
    BIT.TRIP RUNNER (HKLM-x32\...\Steam App 63710) (Version: - Gaijin Games)
    Bluetooth by hp (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.8200 - Broadcom Corporation)
    Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
    Broadcom Gigabit NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 14.6.1.3 - Broadcom Corporation)
    Bubble Wrap (HKLM-x32\...\{5BFFDDEB-AFD7-499F-BB13-7A6EAD927CDA}_is1) (Version: 1.0.0.0 - XM Asia Pacific Pte Ltd)
    Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version: - Infinity Ward)
    Call of Duty: Modern Warfare 2 (HKLM-x32\...\Steam App 10180) (Version: - Infinity Ward)
    Call of Duty: World at War (HKLM-x32\...\Steam App 10090) (Version: - Treyarch)
    Cities: Skylines (HKLM-x32\...\Steam App 255710) (Version: - Colossal Order Ltd.)
    Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - )
    Counter-Strike: Source Beta (HKLM-x32\...\Steam App 260) (Version: - )
    CPUID CPU-Z G1 1.75 (HKLM\...\CPUID CPU-Z G1_is1) (Version: 1.75 - CPUID, Inc.)
    Crusader Kings II (HKLM-x32\...\Steam App 203770) (Version: - Paradox Development Studio)
    Crysis®3 MP Open Beta (HKLM-x32\...\{02454664-23E6-46B3-9CB3-30870AE3645E}) (Version: 1.0.0.0 - Electronic Arts)
    D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
    DARK SOULS III (HKLM\...\Steam App 374320) (Version: - FromSoftware, Inc.)
    Dark Souls: Prepare to Die Edition (HKLM-x32\...\Steam App 211420) (Version: - )
    DayZ (HKLM\...\Steam App 221100) (Version: - Bohemia Interactive)
    Deus Ex: Human Revolution (HKLM-x32\...\Steam App 28050) (Version: - Eidos Montreal)
    DirectX for Managed Code Update (Summer 2004) (x32 Version: 9.02.2904 - Microsoft) Hidden
    Don't Starve Together Beta (HKLM-x32\...\Steam App 322330) (Version: - Klei Entertainment)
    Driver Fusion (HKLM-x32\...\{100C8F3B-82D6-4B14-BB7A-5E8C3FF810C8}_is1) (Version: 1.5.0 - Treexy)
    Dual-Core Optimizer (HKLM-x32\...\{9FD6F1A8-5550-46AF-8509-271DF0E768B5}) (Version: 1.1.4.0169 - AMD)
    Duck Game (HKLM-x32\...\Steam App 312530) (Version: - Landon Podbielski)
    ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
    Etron USB3.0 Host Controller (x32 Version: 0.104 - Etron Technology) Hidden
    EVGA OC Scanner X 2.2.3 (HKLM-x32\...\{CB92C58B-7BDF-48E3-92E3-51768DCCA585}_is1) (Version: - EVGA)
    Façade (HKLM-x32\...\{24E34264-D483-477C-A9A0-4E53F69834CF}) (Version: 1.1.2 - Procedural Arts)
    Fallout 4 (HKLM-x32\...\Steam App 377160) (Version: - Bethesda Game Studios)
    Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version: - Bethesda Softworks)
    FARO LS 1.1.406.58 (HKLM-x32\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production)
    Flixster (HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\404b9336c7552828) (Version: 1.4.1.78 - Flixster)
    FTL: Faster Than Light (HKLM-x32\...\Steam App 212680) (Version: - )
    Garry's Mod 13 Beta (HKLM-x32\...\Steam App 4010) (Version: - TEAM GARRY)
    Golf With Friends (HKLM\...\Steam App 431240) (Version: - Blacklight Interactive)
    Google Chrome (HKLM-x32\...\Google Chrome) (Version: 51.0.2704.106 - Google Inc.)
    Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden
    Grand Theft Auto: Episodes from Liberty City (HKLM-x32\...\Steam App 12220) (Version: - Rockstar North / Toronto)
    Grow Home (HKLM-x32\...\Steam App 323320) (Version: - Reflections, a Ubisoft Studio)
    Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version: - NCsoft Corporation, Ltd.)
    Half-Life 2 (HKLM-x32\...\Steam App 220) (Version: - Valve)
    Half-Life 2: Lost Coast (HKLM-x32\...\Steam App 340) (Version: - Valve)
    Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
    Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment)
    Herramientas de corrección de Microsoft Office 2016: español (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
    Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
    Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
    Hotline Miami (HKLM-x32\...\Steam App 219150) (Version: - Dennaton Games)
    HP Application Assistant (HKLM\...\{B34A07DD-C6F7-414A-AE63-01019482EAF0}) (Version: 1.0.393.3870 - Hewlett-Packard)
    HP Calendar (HKLM-x32\...\{2B38E0FA-D8A5-4EBF-A018-E3C1C8E7A2E2}) (Version: 5.1.4245.23508 - Hewlett-Packard)
    HP Clock (HKLM-x32\...\{0EEC4E49-D4C2-4E23-87F2-B5641F1A09E4}) (Version: 5.1.4244.16367 - Hewlett-Packard)
    HP LinkUp (HKLM-x32\...\{7E750542-55BC-4300-8B7B-AC2A762FB435}) (Version: 2.01.029 - Hewlett-Packard)
    HP Magic Canvas Tutorials (HKLM-x32\...\{858FCB65-7C6D-4BA4-AD80-A3CB3744CE09}_is1) (Version: 5.0.0.3 - Hewlett-Packard)
    HP Notes (HKLM-x32\...\{86BAB08A-5E66-4C53-82E3-C1E91673C7CA}) (Version: 5.1.4274.30382 - Hewlett-Packard)
    HP Odometer (HKLM-x32\...\{B8AC1A89-FFD1-4F97-8051-E505A160F562}) (Version: 2.10.0000 - Hewlett-Packard)
    HP RSS (HKLM-x32\...\{452479C5-0118-48E9-AA69-0A7339F95FC8}) (Version: 5.1.4289.23799 - Hewlett-Packard)
    HP Setup (HKLM-x32\...\{F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1}) (Version: 9.0.15130.3904 - Hewlett-Packard Company)
    HP Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.2.15145.3905 - Hewlett-Packard Company)
    HP Support Assistant (HKLM-x32\...\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}) (Version: 8.2.8.25 - Hewlett-Packard Company)
    HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 11.00.0001 - Hewlett-Packard)
    HP Support Solutions Framework (HKLM-x32\...\{55065080-504F-43BB-BE00-36B80D7D39A5}) (Version: 12.4.18.7 - Hewlett-Packard Company)
    HP TouchSmart RecipeBox (HKLM-x32\...\{20714B53-FC73-4F9C-9687-49EB237D6FD7}) (Version: 3.0.3830.27730 - Hewlett-Packard)
    HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
    HP Vision Hardware Diagnostics (HKLM\...\{D79A02E9-6713-4335-9668-AAC7474C0C0E}) (Version: 2.12.1.0 - Hewlett-Packard)
    HP Weather (HKLM-x32\...\{776CC95E-8160-401B-AC79-164822AA8306}) (Version: 5.1.4245.22595 - Hewlett-Packard)
    Intel(R) Chipset Device Software (x32 Version: 10.1.1.8 - Intel(R) Corporation) Hidden
    Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1158 - Intel Corporation)
    Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4331 - Intel Corporation)
    Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.5.0.1081 - Intel Corporation)
    iolo technologies' System Mechanic (HKLM-x32\...\{55FD1D5A-7AEF-4DA3-8FAF-A71B2A52FFC7}_is1) (Version: 15.5.0 - iolo technologies, LLC)
    Java 8 Update 91 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.15 - Oracle Corporation)
    JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
    Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
    Just Cause 2 (HKLM-x32\...\Steam App 8190) (Version: - Avalanche Studios)
    Just Cause 2: Multiplayer Mod (HKLM-x32\...\Steam App 259080) (Version: - JC2-MP Team)
    Killer Bandwidth Control Filter Driver (Version: 1.1.54.1334 - Rivet Networks) Hidden
    Killer E220x Drivers (Version: 1.1.54.1334 - Rivet Networks) Hidden
    Killer Performance Suite (HKLM-x32\...\{7335EB04-8B27-4CA9-AF83-A3851E894770}) (Version: 1.1.54.1334 - Rivet Networks)
    Kobo (HKLM-x32\...\Kobo) (Version: 2.0.3 - Kobo Inc.)
    KRISTAL Audio Engine (HKLM-x32\...\KRISTAL Audio Engine) (Version: - )
    LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.4507 - CyberLink Corp.)
    LabelPrint (x32 Version: 2.5.4507 - CyberLink Corp.) Hidden
    LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
    League Client alpha pbe (HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\League Client alpha pbe 1.0) (Version: 1.0 - Riot Games, Inc)
    League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
    League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden
    Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)
    LIMBO (HKLM-x32\...\Steam App 48000) (Version: - )
    Magicka (HKLM-x32\...\Steam App 42910) (Version: - Arrowhead Game Studios AB)
    Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
    McAfee Total Protection (HKLM-x32\...\MSC) (Version: 14.0.9042 - McAfee, Inc.)
    McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.0.220 - McAfee, Inc.)
    Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
    Metric Converter (HKLM-x32\...\{D0661463-50F7-4A1E-83CB-37CC590589AE}_is1) (Version: 1.0.0.0 - XM Asia Pacific Pte Ltd)
    Metro 2033 (HKLM-x32\...\Steam App 43110) (Version: - 4A Games)
    Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
    Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
    Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
    Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
    Microsoft Mathematics (HKLM-x32\...\{4D090F70-6F08-4B60-9357-A1DFD4458F09}) (Version: 4.0 - Microsoft Corporation)
    Microsoft Office Professional Plus 2016 (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
    Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)
    Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
    Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
    Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
    Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
    Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
    Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
    Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
    Mirror's Edge (HKLM-x32\...\Steam App 17410) (Version: - DICE)
    Monaco (HKLM-x32\...\Steam App 113020) (Version: - )
    Mortal Kombat X (HKLM-x32\...\Steam App 307780) (Version: - NetherRealm Studios)
    Mount & Blade: Warband (HKLM-x32\...\Steam App 48700) (Version: - TaleWorlds Entertainment)
    MSI Afterburner 2.3.1 (HKLM-x32\...\Afterburner) (Version: 2.3.1 - MSI Co., LTD)
    MSI Kombustor 2.5.0 (HKLM-x32\...\{0B7C79A5-5CB2-4ABD-A9C1-92A6213CE8DD}_is1) (Version: - MSI Co., LTD)
    MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
    MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
    Nether (HKLM-x32\...\Steam App 247730) (Version: - Phosphor Games Studio)
    Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.49.7 - Black Tree Gaming)
    NVIDIA 3D Vision Controller Driver 364.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 364.44 - NVIDIA Corporation)
    NVIDIA 3D Vision Driver 368.69 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 368.69 - NVIDIA Corporation)
    NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation)
    NVIDIA Graphics Driver 368.69 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 368.69 - NVIDIA Corporation)
    NVIDIA HD Audio Driver 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation)
    NVIDIA PhysX (Legacy) (HKLM-x32\...\{FAAC26AD-73BA-40CE-86AA-C9213F9E064A}) (Version: 9.13.0604 - NVIDIA Corporation)
    NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
    Oasis2Service 1.0 (HKLM-x32\...\{E50FC5DB-7CBD-407D-A46E-0C13E45BC386}) (Version: 1.0.0 - DDNi)
    OffScrub_O15msi_OFFICE15.0090 (HKLM\...\OFFICE15.0090) (Version: - )
    OffScrub_O15msi_OFFICE15.00E1 (HKLM\...\OFFICE15.00E1) (Version: - )
    OffScrub_O15msi_OFFICE15.00E2 (HKLM\...\OFFICE15.00E2) (Version: - )
    OffScrub_O15msi_OFFICE15.012B (HKLM\...\OFFICE15.012B) (Version: - )
    OffScrub_O15msi_OFFICE15.ACCESS (HKLM\...\OFFICE15.ACCESS) (Version: - )
    OffScrub_O15msi_OFFICE15.AccessSetupMetadata (HKLM\...\OFFICE15.AccessSetupMetadata) (Version: - )
    OffScrub_O15msi_OFFICE15.EXCEL (HKLM\...\OFFICE15.EXCEL) (Version: - )
    OffScrub_O15msi_OFFICE15.Groove (HKLM\...\OFFICE15.Groove) (Version: - )
    OffScrub_O15msi_OFFICE15.InfoPath (HKLM\...\OFFICE15.InfoPath) (Version: - )
    OffScrub_O15msi_OFFICE15.Office64 (HKLM\...\OFFICE15.Office64) (Version: - )
    OffScrub_O15msi_OFFICE15.ONENOTE (HKLM\...\OFFICE15.ONENOTE) (Version: - )
    OffScrub_O15msi_OFFICE15.Outlook (HKLM\...\OFFICE15.Outlook) (Version: - )
    OffScrub_O15msi_OFFICE15.PowerPoint (HKLM\...\OFFICE15.PowerPoint) (Version: - )
    OffScrub_O15msi_OFFICE15.Proof (HKLM\...\OFFICE15.Proof) (Version: - )
    OffScrub_O15msi_OFFICE15.Proofing (HKLM\...\OFFICE15.Proofing) (Version: - )
    OffScrub_O15msi_OFFICE15.Publisher (HKLM\...\OFFICE15.Publisher) (Version: - )
    OffScrub_O15msi_OFFICE15.Shared (HKLM\...\OFFICE15.Shared) (Version: - )
    OffScrub_O15msi_OFFICE15.SharedSetupMetadata (HKLM\...\OFFICE15.SharedSetupMetadata) (Version: - )
    OffScrub_O15msi_OFFICE15.Word (HKLM\...\OFFICE15.Word) (Version: - )
    Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )
    OpenAL (HKLM-x32\...\OpenAL) (Version: - )
    opensource (x32 Version: 1.0.14960.3876 - Your Company Name) Hidden
    Orcs Must Die! (HKLM-x32\...\Steam App 102600) (Version: - )
    Orcs Must Die! 2 (HKLM-x32\...\Steam App 201790) (Version: - )
    Origin (HKLM-x32\...\Origin) (Version: 9.12.1.43352 - Electronic Arts, Inc.)
    Outils de vérification linguistique 2016 de Microsoft Office - Français (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
    Overgrowth (HKLM-x32\...\Steam App 25000) (Version: - Wolfire)
    Overgrowth (remove only) (HKLM-x32\...\OVERGROWTH) (Version: - )
    Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
    Papers, Please (HKLM-x32\...\Steam App 239030) (Version: - 3909)
    PDF Complete Special Edition (HKLM-x32\...\PDF Complete) (Version: 4.0.65 - PDF Complete, Inc)
    Perforce Server Components (HKLM\...\{E320C837-5868-411C-B0B6-BDB74BFD628D}) (Version: 122.55.1823 - Perforce Software)
    Play withSIX (HKLM-x32\...\{61873A7A-38DD-4973-90A9-69E4560A1DC6}) (Version: 1.00.0064 - SIX Networks)
    PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
    PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
    Portal (HKLM-x32\...\Steam App 400) (Version: - Valve)
    Portal 2 (HKLM-x32\...\Steam App 620) (Version: - Valve)
    Portal 2 Publishing Tool (HKLM-x32\...\Steam App 644) (Version: - )
    Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.5706 - CyberLink Corp.)
    Power2Go (x32 Version: 6.1.5706 - CyberLink Corp.) Hidden
    PressReader (HKLM-x32\...\{912CED74-88D3-4C5B-ACB0-132318649765}) (Version: 5.11.0721.0 - NewspaperDirect Inc.)
    Project Zomboid (HKLM-x32\...\Steam App 108600) (Version: - The Indie Stone)
    Python 2.5.4 (HKLM-x32\...\{2E0DFC24-7C4B-4DCF-BCC7-81C513BED3BC}) (Version: 2.5.4150 - Python Software Foundation)
    QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
    RAIDXpert (HKLM-x32\...\InstallShield_{8B76B8E9-F773-4B75-A08C-120079EB765E}) (Version: 3.3.1540.9 - AMD)
    RAIDXpert (x32 Version: 3.3.1540.9 - AMD) Hidden
    Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 2.20.15.616 - Razer Inc.)
    Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.44.421.2011 - Realtek)
    Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7553 - Realtek Semiconductor Corp.)
    Receiver (HKLM-x32\...\Steam App 234190) (Version: - )
    Recovery Manager (x32 Version: 5.5.0.4424 - CyberLink Corp.) Hidden
    Remote Graphics Receiver (HKLM-x32\...\{16FC3056-90C0-4757-8A68-64D8DA846ADA}) (Version: 5.4.5 - Hewlett-Packard)
    Risk of Rain (HKLM-x32\...\Steam App 248820) (Version: - )
    Samson SoftPre (HKLM-x32\...\{AC042F3D-DAAD-4F76-B857-396EF81AB197}) (Version: 1.0.22 - Samson Technologies Corp.)
    SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)
    SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
    SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
    SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 4.0.96.5684 - Electronic Arts)
    Skype™ 7.25 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.25.106 - Skype Technologies S.A.)
    SpeedRunners (HKLM-x32\...\Steam App 207140) (Version: - DoubleDutch Games)
    Spelunky (HKLM-x32\...\Steam App 239350) (Version: - )
    Spider-man (HKLM-x32\...\Spider-Man) (Version: - )
    SPORE™ (HKLM-x32\...\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}) (Version: 1.00.0000 - Electronic Arts)
    Spot (HKLM-x32\...\{3D171340-B528-42E0-92E4-BDA7AEEF6F32}_is1) (Version: 1.0.0.0 - XM Asia Pacific Pte Ltd)
    Spotify (HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\Spotify) (Version: 1.0.33.106.g60b5d1f0 - Spotify AB)
    Starbound (HKLM-x32\...\Steam App 211820) (Version: - )
    StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
    StarCraft II Public Test (HKLM-x32\...\StarCraft II Public Test) (Version: - Blizzard Entertainment)
    Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
    Stronghold (HKLM-x32\...\{C917BA70-28A3-4C74-B163-41FD8C8E1A5A}) (Version: 1.20.0000 - Firefly Studios)
    Stronghold 2 (HKLM-x32\...\{16D2C649-CBA8-44EE-B730-12584667D487}) (Version: 1.40.1000 - Firefly Studios)
    Stronghold Crusader Extreme (HKLM-x32\...\{8C3727F2-8E37-49E4-820C-03B1677F53B6}) (Version: 1.20.0000 - Firefly Studios)
    Stronghold Legends (HKLM-x32\...\{66A405D2-BA14-4594-BF36-B3B544F0754E}) (Version: 1.20.0000 - Firefly Studios)
    Sublime Text 2.0.2 (HKLM\...\Sublime Text 2_is1) (Version: - )
    Super Hexagon (HKLM-x32\...\Steam App 221640) (Version: - Terry Cavanagh)
    Super Meat Boy (HKLM-x32\...\Steam App 40800) (Version: - )
    Superbrothers: Sword & Sworcery EP (HKLM-x32\...\Steam App 204060) (Version: - )
    Terraria (HKLM-x32\...\Steam App 105600) (Version: - )
    The Binding of Isaac: Rebirth (HKLM-x32\...\Steam App 250900) (Version: - Nicalis, Inc.)
    The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
    The Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.67.2 - Electronic Arts)
    The Testament of Sherlock Holmes (HKLM-x32\...\Steam App 205650) (Version: - Frogwares)
    The Walking Dead (HKLM-x32\...\Steam App 207610) (Version: - )
    This War of Mine (HKLM-x32\...\Steam App 282070) (Version: - 11 bit studios)
    Thomas Was Alone (HKLM-x32\...\Steam App 220780) (Version: - )
    TI Connect™ (HKLM-x32\...\{D06BA64C-4447-49B4-B99D-E85BEA9E1035}) (Version: 4.0.0.218 - Texas Instruments Inc.)
    TI Connect™ CE (HKLM-x32\...\{E22A8EDD-B273-443C-B2C1-782AEA6D746E}) (Version: 5.1.1.92 - Texas Instruments Inc.)
    Trouble In The Manor (HKLM-x32\...\Steam App 338530) (Version: - Charyb Games)
    Tunngle beta (HKLM-x32\...\Tunngle beta_is1) (Version: - Tunngle.net GmbH)
    Unmechanical (HKLM-x32\...\Steam App 211180) (Version: - )
    Unturned (HKLM-x32\...\Steam App 304930) (Version: - Nelson Sexton)
    Update for Skype for Business 2016 (KB3115268) 64-Bit Edition (HKLM\...\{90160000-0011-0000-1000-0000000FF1CE}_Office16.PROPLUS_{5D633E34-0FA8-4C3F-8A16-D1A6C33C7015}) (Version: - Microsoft)
    Update for Skype for Business 2016 (KB3115268) 64-Bit Edition (HKLM\...\{90160000-00C1-0000-1000-0000000FF1CE}_Office16.PROPLUS_{5D633E34-0FA8-4C3F-8A16-D1A6C33C7015}) (Version: - Microsoft)
    Update for Skype for Business 2016 (KB3115268) 64-Bit Edition (HKLM\...\{90160000-012B-0409-1000-0000000FF1CE}_Office16.PROPLUS_{5D633E34-0FA8-4C3F-8A16-D1A6C33C7015}) (Version: - Microsoft)
    Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft)
    Visual C++ 8.0 Runtime Setup Package (x64) (HKLM-x32\...\{2FDBBCEA-62DB-45F4-B6E5-0E1FB2A1F29D}) (Version: 9.0.0.623 - AVG Technologies CZ, s.r.o.)
    Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
    Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
    Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
    Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
    Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.5-3 - Wacom Technology Corp.)
    Warframe (HKLM-x32\...\Steam App 230410) (Version: - Digital Extremes)
    WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
    WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
    Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
    Windows Driver Package - Texas Instruments Inc. (SilvrLnk) USB (06/11/2009 1.0.0.0) (HKLM\...\EC3E466026556D3EB760B01C4772277614354E11) (Version: 06/11/2009 1.0.0.0 - Texas Instruments Inc.)
    Windows Driver Package - Texas Instruments Inc. (TIEHDUSB) USB (09/02/2009 1.0.0.1) (HKLM\...\7511B29C86C398B4D11A0B0E4176CAD68D1B7057) (Version: 09/02/2009 1.0.0.1 - Texas Instruments Inc.)
    Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
    Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
    Worms Clan Wars (HKLM-x32\...\Steam App 233840) (Version: - Team17 Digital Ltd)
    Worms Revolution (HKLM-x32\...\Steam App 200170) (Version: - Team17 Digital Ltd.)
    XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version: - Firaxis Games)
    Zinio Reader 4 (HKLM-x32\...\ZinioReader4) (Version: 4.2.4164 - Zinio LLC)
    Zinio Reader 4 (x32 Version: 4.2.4164 - Zinio LLC) Hidden

    ==================== Custom CLSID (Whitelisted): ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    CustomCLSID: HKU\S-1-5-21-3964298893-2401237506-3764420300-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\MacGyver\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileCoAuth.exe (Microsoft Corporation)
     
  19. 2016/07/11
    PlanetAlps

    PlanetAlps Member Thread Starter

    Joined:
    2016/07/09
    Messages:
    47
    Likes Received:
    0
    ==================== Scheduled Tasks (Whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    Task: {042937CB-5476-4C2A-8480-C5E036578E2B} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
    Task: {05F37BF7-7CCC-45A2-9B15-5749644FBB26} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
    Task: {096CA418-0168-412A-A77A-79AB0BAEFF26} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2016-02-18] (Hewlett-Packard Company)
    Task: {0A45C0C6-5F52-476A-AEE4-9FC309FAE2D4} - System32\Tasks\Norton Identity Safe\Norton Error Analyzer => C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.0.43\SymErr.exe
    Task: {0B22810D-53F2-4238-9C6F-DC561C94B979} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
    Task: {0BF6EBD9-C364-459E-A04C-10FE65954A7A} - System32\Tasks\{7306452F-917A-4D33-9B23-8AF2A5522BA4} => pcalua.exe -a F:\Setup.exe -d F:\
    Task: {0E692092-4680-4230-96C7-59E4EB9E7CA7} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
    Task: {10C8B4DA-3FA3-4915-AB0B-B40EB108CD74} - System32\Tasks\iolo DelOnReboot => /c IF EXIST C:\ProgramData\iolo\ops\smrr.dll del /f C:\ProgramData\iolo\ops\smrr.dll
    Task: {1628B678-E893-42A9-9FAC-F36927C71B6A} - System32\Tasks\SidebarExecute => C:\Program Files\Windows Sidebar\sidebar.exe
    Task: {2C1E3A48-53CE-4C91-944F-C8AD59F08B5A} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2015-07-31] (Microsoft Corporation)
    Task: {2DCF42BA-6AE4-4390-9CAA-3147078A0817} - System32\Tasks\McAfee\McAfee Auto Maintenance Task Agent
    Task: {2F7E76D0-BB3A-426A-A6A9-823FFB66A1E9} - System32\Tasks\{74F8D666-7023-418B-A5CC-225CABE8E78E} => pcalua.exe -a "C:\Program Files (x86)\Steam\steamapps\common\MortalKombat_KompleteEdition\_CommonRedist\vcredist\2008\vcredist_x86.exe" -d "C:\Program Files (x86)\Steam\steamapps\common\MortalKombat_KompleteEdition\_CommonRedist\vcredist\2008 "
    Task: {327943E6-52C3-4408-92E4-878644B6C18A} - System32\Tasks\Intel Security DAT Reputation (AMCore) Post DAT update endpoint safety pulse => C:\Program Files\Common Files\McAfee\AMContent\scanners\x86_64\datrep\54.0\mcdatrep.exe [2016-01-27] (McAfee, Inc.)
    Task: {35A742C1-2971-4943-A2E3-29AD462FFAAC} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
    Task: {3ACF76E4-F5DF-431C-BEA2-BE70CF85AE6D} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
    Task: {425B60B1-3C31-4BC3-AC87-C3F59A48F5B4} - System32\Tasks\McAfeeLogon => C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe [2016-04-23] (McAfee, Inc.)
    Task: {43FE9EFF-B8FB-4026-993E-AEAB9D7604BB} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
    Task: {448270B0-5154-498D-B24D-AE71E7DB5927} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
    Task: {4483757A-F84B-41BE-917B-5DE61561D2A9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-05-09] (Hewlett-Packard)
    Task: {46487538-A29E-4D4B-8CD3-F43CE0D0BA86} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-05-20] (Oracle Corporation)
    Task: {48F4B1C1-D91A-4239-80ED-11E4FEB92C4B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
    Task: {4E7A0622-FE37-4249-8C23-9D6A5C1DEC96} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
    Task: {4EF9C94A-BEB8-4886-8EFB-6F8DC72DE967} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
    Task: {51709B5E-45B0-4553-9B06-504DACCD8C15} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-06-16] (Adobe Systems Incorporated)
    Task: {53ABC437-1B0B-41C8-BFA8-0949927B2CAE} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
    Task: {55FDF64B-3C5A-49F4-9EC4-597B575CA285} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
    Task: {57A2211B-65D5-4F89-AA85-32A26B634EAA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
    Task: {5E031EC6-EC75-4619-8376-9AF578040064} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
    Task: {60C6872D-D8C5-4B88-8980-45D08F81447E} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
    Task: {65978FE5-1B85-47BA-B835-479DC765791E} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
    Task: {66373DB8-4A8D-49A8-88A9-7AC45A9257AE} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
    Task: {694FC36C-1D21-44BA-970C-1800BB5708F0} - System32\Tasks\{4AC0CD17-8B0E-460F-A673-7F5399D5171B} => pcalua.exe -a "C:\Users\MacGyver\Downloads\Bridge IT V1.0\BRIDGEIT\RegSetup.exe" -d "C:\Users\MacGyver\Downloads\Bridge IT V1.0\BRIDGEIT "
    Task: {6A779838-DB24-47D2-B782-AFCB2EA0836B} - \Razer_Game_Booster_AutoUpdate -> No File <==== ATTENTION
    Task: {6C0C25FB-0167-460C-A108-057F7A30A687} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
    Task: {6FD26CEE-5187-4304-84F4-6363BBA45986} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-06-14] (Microsoft Corporation)
    Task: {71672019-2C89-4863-8AE3-8DA6E90F4CDC} - System32\Tasks\iolo Process Governor => C:\Program Files (x86)\iolo\System Mechanic\iologovernor64.exe [2016-02-19] (iolo technologies, LLC)
    Task: {76028AB5-AC97-4F06-8327-7D5A47A19935} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
    Task: {77171C41-85F0-4F51-90FE-1021BFA26454} - System32\Tasks\{DB7CF8C5-6A10-4736-8C65-023DABCF2F3F} => pcalua.exe -a "C:\Program Files (x86)\Steam\steam.exe" -c steam://uninstall/202990
    Task: {77DB0704-C2EE-4665-9FBE-6C50BF24D338} - System32\Tasks\{098B881B-C84B-4A5E-9C21-473D389F5D09} => pcalua.exe -a "C:\Users\MacGyver\Downloads\The Sims 3 - University Life\Sims3EP09Setup.exe" -d "C:\Users\MacGyver\Downloads\The Sims 3 - University Life "
    Task: {7E4F94F7-2CA1-4D76-98C8-C2C8EFCC9FBF} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
    Task: {7EF9485D-1198-4CEE-96D2-F31AA58F9306} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
    Task: {8019363D-BCAD-4773-B90D-F17D42075CBA} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
    Task: {8114BBBF-1FE4-4C06-9D7E-D988F5FF2A93} - System32\Tasks\{1C88D420-B1A8-41FE-81BE-BE11C58815E4} => pcalua.exe -a C:\Users\MacGyver\Downloads\rzr-dnfr\razor1911_installer.exe -d C:\Users\MacGyver\Downloads\rzr-dnfr
    Task: {81A70CC6-93FF-474D-A0EA-11CFEC9BC947} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Active Health Launcher => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-03-02] (Hewlett-Packard)
    Task: {81B18DA0-9DA1-4FDC-8FDC-6D03581EBEC3} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
    Task: {899C800A-D05D-48AC-BB35-E9F792D49D94} - System32\Tasks\McAfee\McAfee Idle Detection Task
    Task: {8D77A25D-FD6A-481A-B0D6-9678902CB9A5} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
    Task: {9362521F-3941-4DE9-AE47-B3E6577852E8} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
    Task: {94A8641A-1526-4E28-9753-EB59CAD7EEBD} - System32\Tasks\HP online update program => c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2013-05-30] (Hewlett-Packard)
    Task: {97D57FBC-B035-440C-88E7-9E676CD64057} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
    Task: {9A02F879-4D87-43BE-9171-683C359BFC0F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
    Task: {9E47A294-E9F0-479C-9131-1B21B12E501D} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
    Task: {9EE88514-786B-4C6B-B761-AD00A3815399} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
    Task: {A0EB8230-8642-42EB-8BD8-65A002FA7413} - System32\Tasks\HPCeeScheduleForMacGyver => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard)
    Task: {A42A0C18-A6DD-4B24-91F1-B9FCBC83EFA3} - System32\Tasks\Google Updater and Installer => C:\Users\MacGyver\AppData\Local\Google\Update\GoogleUpdate.exe
    Task: {A5EAA359-307F-422D-92C6-12261C183A9D} - System32\Tasks\{6C6FF25C-E2A3-42D5-BD58-42799F7A6E89} => pcalua.exe -a "C:\program files (x86)\steam\steamapps\common\left 4 dead 2\bin\addoninstaller.exe" -d "c:\program files (x86)\steam\steamapps\common\left 4 dead 2" -c /register
    Task: {A9BF8641-3CD9-4689-8D44-B3C8B0073CBE} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
    Task: {ABE81196-0AAC-419A-993A-CA0F9FA7E738} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
    Task: {AC5314C6-7034-46D4-9666-CBB350D32C35} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-05-04] (Hewlett-Packard)
    Task: {AD3232E8-7041-4C01-8FBE-472DE4DE25D2} - System32\Tasks\Norton Identity Safe\Norton Error Processor => C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.0.43\SymErr.exe
    Task: {AF21AB97-6ED0-41A3-9B32-57C2AE584125} - System32\Tasks\Intel Security DAT Reputation (AMCore) periodic endpoint safety pulse => C:\Program Files\Common Files\McAfee\AMContent\scanners\x86_64\datrep\54.0\mcdatrep.exe [2016-01-27] (McAfee, Inc.)
    Task: {B0783751-AFAE-4BFF-B02A-3C74BBADC98E} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
    Task: {B0DD5A35-9C34-4D04-860A-937ABFEAB34B} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-03-02] (Hewlett-Packard)
    Task: {B4533FBF-4F29-4801-ACCC-D82770D70539} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2016-06-28] (HP Inc.)
    Task: {B6D9AEA1-EF28-4CD7-9C2F-CA1AF5195E7E} - System32\Tasks\HPCeeScheduleForMACGYVER-HP$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard)
    Task: {BB891099-3F04-45DA-8DFA-066AB33B0F7D} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
    Task: {C0F395F2-9715-4314-A840-2E6C417F6A32} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
    Task: {C4C2BA0B-9746-444D-88AB-7471AD00235C} - System32\Tasks\{C4F2CDCC-870A-4734-8982-EE52BA832AC4} => pcalua.exe -a "C:\Program Files (x86)\Steam\bin\steamservice.exe" -d "C:\Program Files (x86)\Steam" -c /installscript "C:\Program Files (x86)\Steam\steamapps\common\Moon Base Alpha\runasadmin.vdf" 39000
    Task: {C6429797-F491-4F5C-BD36-6AC08CF60D18} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
    Task: {CC5C92E3-0748-4B48-BA51-D9FE45AC10E6} - System32\Tasks\{EA9C00B9-3B41-4955-9E65-66E94B39201D} => pcalua.exe -a "C:\Program Files (x86)\Activision\Spider-Man\Spider-Man Setup.exe" -d C:\PROGRA~2\ACTIVI~1\SPIDER~1
    Task: {CFEE4228-EF6C-4446-8E39-A47BE7FE8D6C} - System32\Tasks\{41B44913-D051-4923-B09F-E0FE12BEE505} => pcalua.exe -a "C:\Program Files (x86)\Desura\\desura.exe" -c desura://uninstall/games/16911
    Task: {D5360E92-6DCB-43D8-903C-0A3D690C9A13} - System32\Tasks\{BC3FA003-1B9B-4710-A518-5713D42B1CE4} => pcalua.exe -a "C:\Program Files (x86)\Common Files\EAInstaller\Crysis 3 MP Open Beta\Cleanup.exe" -d C:\Windows\ImmersiveControlPanel -c uninstall_game -autologging -keepMaintenanceLog
    Task: {D6ECA103-299E-4899-B5BD-3EE5C5416AE6} - System32\Tasks\AMD Core Line (MacGyver) => C:\Program Files (x86)\DDNi\AMD Core Line\CenterStage.exe
    Task: {DBB6F12F-6A87-4B25-8AA7-D63D6CC56541} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
    Task: {DC339BF0-E26D-4C31-841F-F0D3F076F166} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2016-02-18] (Hewlett-Packard Company)
    Task: {EB727618-9F33-4D68-AD78-9EE35B7BB30F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
    Task: {EE44F1BC-3A65-4249-BBAC-F4DEB17CDF61} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
    Task: {F1C389AD-0D5B-42B3-B29C-709FCF56E8C8} - System32\Tasks\Adobe online update program => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
    Task: {F2511BEE-366D-49C8-BB06-D1D74AAAE162} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
    Task: {F4DE1F09-F2EA-48AA-9492-462FE28C70D9} - System32\Tasks\{47F995A3-DC7A-49D7-9D22-24FAF0B0EE65} => pcalua.exe -a "C:\Users\MacGyver\Downloads\[PC GAME] Assassins Creed (Full) + CRACK\AssassinsCreed.exe" -d "C:\Users\MacGyver\Downloads\[PC GAME] Assassins Creed (Full) + CRACK "

    (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

    Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\WINDOWS\Tasks\HPCeeScheduleForMACGYVER-HP$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
    Task: C:\WINDOWS\Tasks\HPCeeScheduleForMacGyver.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

    ==================== Shortcuts =============================

    (The entries could be listed to be restored or removed.)

    Shortcut: C:\Users\MacGyver\AppData\Local\Microsoft\Windows\GameExplorer\{FDD8F18F-F2CE-4AB4-929A-F90FB3704B56}\SupportTasks\1\Support.lnk -> hxxp://www.activision.com/support/ (No File)
    Shortcut: C:\Users\MacGyver\AppData\Local\Microsoft\Windows\GameExplorer\{FDD8F18F-F2CE-4AB4-929A-F90FB3704B56}\SupportTasks\0\More Games from Microsoft.lnk -> hxxp://www.sony.com/spider-man/ (No File)
    Shortcut: C:\Users\MacGyver\AppData\Local\Microsoft\Windows\GameExplorer\{1BC82C05-6785-4DE4-B684-689373462B6D}\SupportTasks\0\Spore.com.lnk -> hxxp:\( (No File)

    ==================== Loaded Modules (Whitelisted) ==============

    2015-10-30 02:18 - 2015-10-30 02:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
    2015-11-04 19:11 - 2015-11-04 19:12 - 00188072 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
    2016-04-12 19:50 - 2016-03-29 05:20 - 02656952 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
    2016-04-12 19:50 - 2016-03-29 05:20 - 02656952 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
    2016-05-23 16:28 - 2016-05-23 16:28 - 00959168 _____ () C:\Users\MacGyver\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll
    2016-06-14 06:25 - 2016-06-14 06:25 - 08911552 _____ () C:\Program Files\Microsoft Office\Office16\1033\GrooveIntlResource.dll
    2016-05-12 20:54 - 2016-05-12 20:54 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
    2016-01-04 18:33 - 2016-01-04 18:33 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
    2016-05-10 20:22 - 2016-04-22 23:25 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
    2016-05-10 20:22 - 2016-04-22 23:25 - 00674816 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\MtcUvc.dll
    2016-06-14 18:28 - 2016-05-27 22:59 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
    2016-06-14 18:28 - 2016-05-27 22:53 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
    2016-06-14 18:28 - 2016-05-27 22:54 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
    2016-06-14 18:28 - 2016-05-27 22:56 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
    2016-05-12 21:00 - 2016-05-12 21:00 - 10256384 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11602.1.26.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
    2016-06-21 13:43 - 2016-06-21 13:44 - 03893960 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6965.40901.0_x64__8wekyb3d8bbwe\gfxim.dll
    2016-06-27 13:51 - 2016-06-27 13:51 - 03790336 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1605.1582.0_x64__8wekyb3d8bbwe\Calculator.exe
    2015-12-21 13:19 - 2015-12-21 13:19 - 00258560 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1605.1582.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
    2011-05-11 19:17 - 2011-05-11 19:17 - 00516096 _____ () C:\Program Files (x86)\AMD\RAIDXpert\bin\libxml2.dll
    2016-05-12 20:54 - 2016-05-12 20:54 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
    2016-05-12 20:54 - 2016-05-12 20:55 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll
    2016-05-23 16:28 - 2016-05-23 16:28 - 00679624 _____ () C:\Users\MacGyver\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\ClientTelemetry.dll
    2016-06-14 06:25 - 2016-06-14 06:25 - 08911552 _____ () C:\Program Files (x86)\Microsoft Office\Office16\1033\GrooveIntlResource.dll
    2013-03-12 17:10 - 2016-04-29 15:10 - 00785920 _____ () C:\Program Files (x86)\Steam\SDL2.dll
    2014-05-21 17:01 - 2016-07-08 20:06 - 02317904 _____ () C:\Program Files (x86)\Steam\video.dll
    2015-01-19 16:32 - 2015-07-03 11:12 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
    2014-08-28 19:50 - 2016-02-08 18:14 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
    2014-08-28 19:50 - 2016-02-08 18:14 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
    2014-08-28 19:50 - 2016-02-08 18:14 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
    2014-08-28 19:50 - 2016-02-08 18:14 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
    2014-08-28 19:50 - 2016-02-08 18:14 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
    2015-01-19 16:32 - 2015-07-03 11:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
    2015-01-19 16:32 - 2015-07-03 11:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
    2012-07-28 01:37 - 2016-07-08 20:06 - 00829520 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
    2016-03-09 18:01 - 2016-07-06 17:00 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
    2013-07-29 19:31 - 2016-06-14 14:14 - 49826080 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
    2015-01-19 16:31 - 2015-09-24 18:56 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
    2015-03-10 16:59 - 2016-07-10 12:45 - 52042352 _____ () C:\Users\MacGyver\AppData\Roaming\Spotify\libcef.dll
    2015-03-10 16:59 - 2016-07-10 12:45 - 01741936 _____ () C:\Users\MacGyver\AppData\Roaming\Spotify\libglesv2.dll
    2015-03-10 16:59 - 2016-07-10 12:45 - 00087664 _____ () C:\Users\MacGyver\AppData\Roaming\Spotify\libegl.dll

    ==================== Alternate Data Streams (Whitelisted) =========

    (If an entry is included in the fixlist, only the ADS will be removed.)

    AlternateDataStreams: C:\ProgramData\Temp:A1EDB939 [126]
    AlternateDataStreams: C:\ProgramData\Temp:C039C6AC [122]

    ==================== Safe Mode (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ioloSystemService => " "= "Service "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => " "=" "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => " "=" "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ioloSystemService => " "= "Service "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcapexe => " "=" "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => " "= "Service "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McNaiAnn => " "=" "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => " "=" "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => " "=" "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack => " "= "Service "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack.sys => " "= "Driver "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk => " "= "Service "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk.sys => " "= "Driver "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => " "= "Service "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => " "= "Service "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => " "= "Driver "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => " "= "Service "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => " "= "Driver "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfemms => " "= "Service "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => " "= "Service "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => " "= "Driver "
    HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => " "= "Service "

    ==================== Association (Whitelisted) ===============

    (If an entry is included in the fixlist, the registry item will be restored to default or removed.)

    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\Software\Classes\.scr: AutoCADScriptFile =>

    ==================== Internet Explorer trusted/restricted ===============

    (If an entry is included in the fixlist, it will be removed from the registry.)

    IE trusted site: HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\amazon.com -> hxxps://amazon.com

    ==================== Hosts content: ===============================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2009-07-13 21:34 - 2009-06-10 16:00 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


    ==================== Other Areas ============================

    (Currently there is no automatic fix for this section.)

    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\MacGyver\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{85553faa-63c6-4a72-871e-19e8dcda9f17}.jpg
    DNS Servers: 192.168.1.1
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
    Windows Firewall is enabled.

    ==================== MSCONFIG/TASK MANAGER disabled items ==

    (Currently there is no automatic fix for this section.)

    HKLM\...\StartupApproved\Run32: => "iTunesHelper "
    HKLM\...\StartupApproved\Run32: => "ioloLiveBoost "
    HKU\S-1-5-21-3964298893-2401237506-3764420300-1000\...\StartupApproved\Run: => "KSS "

    ==================== FirewallRules (Whitelisted) ===============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
    FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
    FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
    FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
    FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
    FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
    FirewallRules: [{CEC84F4F-1BF7-44C4-BDC6-01927429D42C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Trouble In The Manor\TroubleManorClient.exe
    FirewallRules: [{DCB818EB-F4DA-42A2-97EC-36E5B124890A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Trouble In The Manor\TroubleManorClient.exe
    FirewallRules: [{6B22B247-7C01-4A3D-BF99-E1117E27BAAC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe
    FirewallRules: [{E1E68B70-61A3-43E1-AF83-B9ABA58639A1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe
    FirewallRules: [{A8B33201-7696-4A40-B996-49474443DF8A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe
    FirewallRules: [{A34CB092-A875-4096-8B07-A03A1BA2BC55}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe
    FirewallRules: [{EF165E1C-F6D2-49B7-AB82-0E72718A0838}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed Syndicate\ACS.exe
    FirewallRules: [{91337E30-33E7-41D7-84D7-D2FCBE7FE1A1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fallout 4\Fallout4Launcher.exe
    FirewallRules: [{ECD8B33F-D9F2-4F16-A2FF-95B50126C309}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fallout 4\Fallout4Launcher.exe
    FirewallRules: [{517D0633-84F6-441E-B075-4B0D772305A3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unturned\Unturned.exe
    FirewallRules: [{6FD0403E-569B-4127-9BC5-95A820D0EFE1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unturned\Unturned.exe
    FirewallRules: [{0EEDC96A-D9A5-48BA-AC8A-0534114420CC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4mp.exe
    FirewallRules: [{8B7C7C61-FCEC-4481-9FE5-05006D33F986}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4mp.exe
    FirewallRules: [{498FD14E-72FC-4BC2-BDA8-99049127139F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4sp.exe
    FirewallRules: [{FE069F21-9E37-456F-9531-C0FA4857CB81}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4sp.exe
    FirewallRules: [{A0F4E99E-B0AE-4C01-9459-E6A0E89C0742}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\RoxioNow\RNow.exe
    FirewallRules: [{0140CC64-89B8-40B0-A623-86B4E741D035}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\RoxioNow\RNow.exe
    FirewallRules: [{E8B762F3-92E0-4F9E-9AB8-D0AF89170EF1}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\RoxioNow\IndivDRM.exe
    FirewallRules: [{C1B9103E-C9AC-466E-826A-C52B1D0C38FC}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\RoxioNow\IndivDRM.exe
    FirewallRules: [{3119F5E9-F0DE-4BD5-A50A-7D9964056564}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\Remote Graphics Receiver\rgreceiver.exe
    FirewallRules: [{9D03C4D5-8FE5-4992-AAE3-615E6BB9F8DD}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\Remote Graphics Receiver\rgreceiver.exe
    FirewallRules: [{46F41D43-8AF9-4E16-A9C5-FD274C95F991}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP LinkUp\HP LinkUp Viewer.exe
    FirewallRules: [{D366C629-81FB-4B3A-94F9-8705BEA5C1EF}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP LinkUp\HP LinkUp Viewer.exe
    FirewallRules: [{CFCB44F3-6319-44C6-B3FD-74FF65687EC9}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
    FirewallRules: [{334E2F3A-E209-4825-B431-78163D955E85}] => (Allow) LPort=2869
    FirewallRules: [{AC7DED61-3CEC-4024-B928-F9DB53C86832}] => (Allow) LPort=1900
    FirewallRules: [{C7D1C8DD-F236-4500-A004-CDB3E6BF755B}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
    FirewallRules: [{B80A0B40-0B56-4F74-9ADF-048AE1D02F12}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
    FirewallRules: [{DF8EDEA7-4803-40F6-80F8-59475FE8BF70}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{4ABC9DBE-C960-4EBF-8E7E-4A393379EA7F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{92EC2E26-289C-43FD-A4C5-15E09B07144F}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe
    FirewallRules: [{1D8F6EFE-C0FF-4971-B23A-9FED12AD1849}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe
    FirewallRules: [{7D7BC24E-C3E8-401D-B09D-9BDADCADD4FB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\orcs must die!\Build\release\OrcsMustDie.exe
    FirewallRules: [{099DB964-D358-4A6A-95A1-656882CCFE7A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\orcs must die!\Build\release\OrcsMustDie.exe
    FirewallRules: [{225EB543-E59A-4B99-96C3-CC2465ACEEB3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Just Cause 2\JustCause2.exe
    FirewallRules: [{1040807F-238D-4520-97BF-1FB5CED719E4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Just Cause 2\JustCause2.exe
    FirewallRules: [{D300202A-4BDD-4326-A72E-1FE8CCA998DC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\amnesia the dark descent\Launcher.exe
    FirewallRules: [{E7682C3F-3AC4-47A9-8BC3-82A6BCAF3841}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\amnesia the dark descent\Launcher.exe
    FirewallRules: [{80245AE0-9435-47DB-86A7-A046F119AB3F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\lone survivor\LoneSurvivor\LoneSurvivor.exe
    FirewallRules: [{C6C8E73D-FBDC-488B-829C-264D536C46BE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\lone survivor\LoneSurvivor\LoneSurvivor.exe
    FirewallRules: [{8CF86034-A5C8-4220-92A9-067230E17758}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Mass Effect\docs\EA Help\Electronic_Arts_Technical_Support.htm
    FirewallRules: [{989F550B-1CB7-4043-858C-BB929DD6EF97}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Mass Effect\docs\EA Help\Electronic_Arts_Technical_Support.htm
    FirewallRules: [TCP Query User{B93CFFAB-FF1F-43A5-962B-97BF27901C53}C:\program files (x86)\steam\steamapps\common\worms reloaded\wormsreloaded.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\worms reloaded\wormsreloaded.exe
    FirewallRules: [UDP Query User{97717F8E-382E-4FA5-B7B1-D664356424C6}C:\program files (x86)\steam\steamapps\common\worms reloaded\wormsreloaded.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\worms reloaded\wormsreloaded.exe
    FirewallRules: [{341078B1-A730-4168-9524-FD880BAFD4EA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\superbrothers sword & sworcery ep\swordandsworcery_pc.exe
    FirewallRules: [{11A2E157-BCF0-4EEA-A831-04EE54D0AE7B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\superbrothers sword & sworcery ep\swordandsworcery_pc.exe
    FirewallRules: [{DC10A3B5-5B2C-4505-A538-3866A7127AAD}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe
    FirewallRules: [{306BB6E0-C2AE-4860-BCCB-BFB99A85F65D}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe
    FirewallRules: [TCP Query User{3EC96682-AA77-4C65-BEEB-E33921B96362}C:\program files (x86)\starcraft ii\versions\base22612\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base22612\sc2.exe
    FirewallRules: [UDP Query User{DD89C51C-0CA7-424A-BECA-8C38EEBBA548}C:\program files (x86)\starcraft ii\versions\base22612\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base22612\sc2.exe
    FirewallRules: [TCP Query User{84FDCA02-9C6C-46DF-8397-020EB3892A5D}C:\users\macgyver\documents\arma 2\expansion\beta\arma2oa.exe] => (Allow) C:\users\macgyver\documents\arma 2\expansion\beta\arma2oa.exe
    FirewallRules: [UDP Query User{9232EB61-61BC-4906-9706-3B15273E66F8}C:\users\macgyver\documents\arma 2\expansion\beta\arma2oa.exe] => (Allow) C:\users\macgyver\documents\arma 2\expansion\beta\arma2oa.exe
    FirewallRules: [{43DE93EE-9F44-4665-AFA3-DFF56A668EA3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\arma 2 operation arrowhead\BEsetup\Setup_BattlEyeARMA2OA.exe
    FirewallRules: [{8BA11511-46E9-4A2B-96B0-3D702AD4EDE7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\arma 2 operation arrowhead\BEsetup\Setup_BattlEyeARMA2OA.exe
    FirewallRules: [{0FC295E3-224E-414D-A4D1-B96EAE725AF0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\arma 2 operation arrowhead\_runA2CO.cmd
    FirewallRules: [{2EF26338-3A5B-4248-9B1F-F02369DD40C7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\arma 2 operation arrowhead\_runA2CO.cmd
    FirewallRules: [{164F040B-764A-4021-8BA3-4D03F3644C58}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unmechanical\Binaries\Win32\UDK.exe
    FirewallRules: [{D23F5067-5633-47C4-9D86-DF2DC66C84FC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unmechanical\Binaries\Win32\UDK.exe
    FirewallRules: [{E5B8781A-37DC-4225-BCD8-48256ABFAE0C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\deus ex - human revolution\dxhr.exe
    FirewallRules: [{E1254A71-BFA7-4E0C-8AA2-7CE62FAD1E1C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\deus ex - human revolution\dxhr.exe
    FirewallRules: [TCP Query User{6262EE3F-E6A3-458A-BEAE-7F81497C2EFC}C:\program files (x86)\steam\steamapps\lopez24383\source sdk base\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\lopez24383\source sdk base\hl2.exe
    FirewallRules: [UDP Query User{9B965C18-79B6-4142-BA61-927725D82230}C:\program files (x86)\steam\steamapps\lopez24383\source sdk base\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\lopez24383\source sdk base\hl2.exe
    FirewallRules: [TCP Query User{75206C0E-8CB9-4EE2-9F3C-21AE1A0A9720}C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe
    FirewallRules: [UDP Query User{1F0677C0-8E10-4ABC-AF6F-48E5D1A0DA23}C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe
    FirewallRules: [TCP Query User{BCF5DAC5-B3B2-4EE7-97C7-6A8EE7D510B6}C:\program files (x86)\steam\steamapps\lopez24383\counterstrike source beta\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\lopez24383\counterstrike source beta\hl2.exe
    FirewallRules: [UDP Query User{ECD8CC36-F6E5-4BD6-B53C-2D79D5EDA01D}C:\program files (x86)\steam\steamapps\lopez24383\counterstrike source beta\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\lopez24383\counterstrike source beta\hl2.exe
    FirewallRules: [TCP Query User{C3474348-02AF-4418-B7FD-CC5AEFFB9FE0}C:\users\macgyver\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\macgyver\appdata\local\akamai\netsession_win.exe
    FirewallRules: [UDP Query User{892173F7-1F5E-4CCF-97F5-84F9DEB47333}C:\users\macgyver\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\macgyver\appdata\local\akamai\netsession_win.exe
    FirewallRules: [TCP Query User{5C67D8F0-A64A-494E-AB1A-62FAFC3AE7C4}C:\users\macgyver\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\macgyver\appdata\local\akamai\netsession_win.exe
    FirewallRules: [UDP Query User{78DCC5E7-21D5-4F6F-B9CA-C0D12EF99C5A}C:\users\macgyver\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\macgyver\appdata\local\akamai\netsession_win.exe
    FirewallRules: [TCP Query User{8BCD836D-2F03-40CE-B226-A06673A7D20E}C:\users\macgyver\downloads\xcom enemy unkonwn\iaa-x.e.u\binaries\win32\xcomgame.exe] => (Allow) C:\users\macgyver\downloads\xcom enemy unkonwn\iaa-x.e.u\binaries\win32\xcomgame.exe
    FirewallRules: [UDP Query User{BCED27C0-9D18-469B-A4A0-A5CF08C06B27}C:\users\macgyver\downloads\xcom enemy unkonwn\iaa-x.e.u\binaries\win32\xcomgame.exe] => (Allow) C:\users\macgyver\downloads\xcom enemy unkonwn\iaa-x.e.u\binaries\win32\xcomgame.exe
    FirewallRules: [TCP Query User{560CCB42-7742-4523-B5BF-B248CEDF27ED}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
    FirewallRules: [UDP Query User{041BF523-48BD-40CF-9230-C0D303F2E478}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
    FirewallRules: [{7985516E-BE15-4926-827E-B1D832AAA5E9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham City GOTY\Binaries\Win32\BatmanAC.exe
    FirewallRules: [{F94C7FB7-E845-4EE4-9E39-146A8753D0D6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham City GOTY\Binaries\Win32\BatmanAC.exe
    FirewallRules: [{59A8D381-38C5-44C8-BAD6-5236EA36D344}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham City GOTY\RunLauncher.bat
    FirewallRules: [{3CFEE228-BF1A-4B31-ACD5-5188005E340B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham City GOTY\RunLauncher.bat
    FirewallRules: [{5395ADE1-C00F-4C96-8E9B-388EC38382CF}] => (Allow) C:\Program Files (x86)\StarCraft II 2012 Beta\StarCraft II Beta.exe
    FirewallRules: [{2E0722DB-6374-4436-BD5C-DF25BE5CA69B}] => (Allow) C:\Program Files (x86)\StarCraft II 2012 Beta\StarCraft II Beta.exe
    FirewallRules: [{1A184DB1-CCE8-4DF7-9E87-2339C1BF4501}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\thomaswasalone\ThomasWasAlone.exe
    FirewallRules: [{A3924F4B-A7CE-4067-B28F-5A95AAF9C9B2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\thomaswasalone\ThomasWasAlone.exe
    FirewallRules: [{AE60AE9E-E1C4-497B-A81A-95D2C14E0CF0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\World of Goo\WorldOfGoo.exe
    FirewallRules: [{E3E85811-79A7-408F-B3F3-796DDA163BC1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\World of Goo\WorldOfGoo.exe
    FirewallRules: [{4782C740-9745-4E18-9EDD-1EA91D206E65}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\I am Alive\src\SYSTEM\IAmAlive_game.exe
    FirewallRules: [{3C4969E4-C500-48B8-834F-D36BCF357C66}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\I am Alive\src\SYSTEM\IAmAlive_game.exe
    FirewallRules: [{87D1A976-7D3E-43A8-80CE-0442D713466A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\fallout new vegas\FalloutNVLauncher.exe
    FirewallRules: [{FFD7AAC4-BBD4-48F6-916C-0B938DD4DFFA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\fallout new vegas\FalloutNVLauncher.exe
    FirewallRules: [{AF358203-797E-4EDA-996B-40C3BB0694C3}] => (Allow) C:\Program Files (x86)\NAMCO BANDAI Games\DarkSouls\DARKSOULS.exe
    FirewallRules: [{CA2C37FC-F400-404A-9F14-EC02E8217966}] => (Allow) C:\Program Files (x86)\2K Sports\NBA 2K13\nba2k13.exe
    FirewallRules: [{B9854157-80FD-4041-B44E-E46C26042CA7}] => (Allow) C:\Program Files (x86)\2K Sports\NBA 2K13\nba2k13.exe
    FirewallRules: [TCP Query User{9DCB3312-403F-4C41-9772-C175DE76A3FB}C:\users\macgyver\appdata\local\warframe\downloaded\public\warframe.x64.exe] => (Allow) C:\users\macgyver\appdata\local\warframe\downloaded\public\warframe.x64.exe
    FirewallRules: [UDP Query User{5438E4A9-1463-48E0-B745-F38327F5A15C}C:\users\macgyver\appdata\local\warframe\downloaded\public\warframe.x64.exe] => (Allow) C:\users\macgyver\appdata\local\warframe\downloaded\public\warframe.x64.exe
    FirewallRules: [TCP Query User{5DD6F46F-0A88-44A1-ABD7-118F9158FA75}C:\games\blur nosteam\blur.exe] => (Allow) C:\games\blur nosteam\blur.exe
    FirewallRules: [UDP Query User{74D6ADCB-D721-4C58-B0F0-70B9941D4A1B}C:\games\blur nosteam\blur.exe] => (Allow) C:\games\blur nosteam\blur.exe
    FirewallRules: [{233AC679-0ADE-4C40-9B94-F870AED22ACF}] => (Allow) C:\Program Files (x86)\Origin Games\Crysis 3 MP Open Beta\bin32\Crysis 3 MP Open Beta.exe
    FirewallRules: [{E75755D8-E39A-4F5B-8672-D790A898CA70}] => (Allow) C:\Program Files (x86)\Origin Games\Crysis 3 MP Open Beta\bin32\Crysis 3 MP Open Beta.exe
    FirewallRules: [TCP Query User{9107F0F6-5395-4D1C-9B95-B268DDDCBEA0}C:\program files (x86)\starcraft ii 2012 beta\versions\base24764\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii 2012 beta\versions\base24764\sc2.exe
    FirewallRules: [UDP Query User{53226421-C130-4C9E-83E0-8DDF1A64D3FE}C:\program files (x86)\starcraft ii 2012 beta\versions\base24764\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii 2012 beta\versions\base24764\sc2.exe
    FirewallRules: [{DA782E4F-E0A5-44DD-B5DD-AD96DA66BAA6}] => (Allow) C:\Program Files (x86)\Autodesk\3ds Max 2013\NVIDIA\raysat_3dsmax2013_32server.exe
    FirewallRules: [{E0327B81-A8EA-48E7-9754-08644BCA45FE}] => (Allow) C:\Program Files (x86)\Autodesk\3ds Max 2013\NVIDIA\raysat_3dsmax2013_32server.exe
    FirewallRules: [{1D5C9113-79E9-4E9B-A03F-36017A9CBECE}] => (Allow) C:\Program Files (x86)\Autodesk\3ds Max 2013\NVIDIA\raysat_3dsmax2013_32.exe
    FirewallRules: [{84AE0152-BC2F-4426-884F-C24A99F18636}] => (Allow) C:\Program Files (x86)\Autodesk\3ds Max 2013\NVIDIA\raysat_3dsmax2013_32.exe
    FirewallRules: [{DA1D5ACF-22F8-4A90-9085-741EDDB3FC7A}] => (Allow) C:\Program Files (x86)\Autodesk\3ds Max 2013\3dsmax.exe
    FirewallRules: [{75F04D3D-A322-453D-80FA-5295D91BEE3D}] => (Allow) C:\Program Files (x86)\Autodesk\3ds Max 2013\3dsmax.exe
    FirewallRules: [{EFBC35A6-38EE-4148-95AB-280717EE5088}] => (Allow) C:\Program Files (x86)\Steam\steamapps\lopez24383\garrysmod\hl2.exe
    FirewallRules: [{1397A858-0FB3-4CD9-B938-D2EBA75EB733}] => (Allow) C:\Program Files (x86)\Steam\steamapps\lopez24383\garrysmod\hl2.exe
    FirewallRules: [TCP Query User{335FB71F-7055-430E-B0B7-C22F2761A784}C:\program files (x86)\crysis 3\bin32\crysis3.exe] => (Allow) C:\program files (x86)\crysis 3\bin32\crysis3.exe
    FirewallRules: [UDP Query User{31A5298D-1E57-45D1-B23D-F68F134B70E0}C:\program files (x86)\crysis 3\bin32\crysis3.exe] => (Allow) C:\program files (x86)\crysis 3\bin32\crysis3.exe
    FirewallRules: [{1DB370CE-5F8D-4815-976A-9530568AC68B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\bit.trip runner\RUNNER.exe
    FirewallRules: [{3662A5E7-5522-4F32-91DD-6C49EA4480DD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\bit.trip runner\RUNNER.exe
    FirewallRules: [{39F9E028-8CE8-43A0-B641-B9729B9A5FAE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1675\Agent.exe
    FirewallRules: [{B1E494B0-3406-4882-A7E5-B398F6BA17AA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1675\Agent.exe
    FirewallRules: [TCP Query User{65FCEE06-CD92-4FC7-B25A-CC9E2B529FD5}C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe
    FirewallRules: [UDP Query User{C26B71C4-DFA8-4E52-B002-EAC9B4912E06}C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe
    FirewallRules: [{A486908F-1A60-462A-8FDA-96749EBF2204}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1675\Agent.exe
    FirewallRules: [{A4E44BAB-CB61-4FA0-9CC3-99281FA0EA84}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1675\Agent.exe
    FirewallRules: [TCP Query User{6924EF6B-B728-44D9-8D8A-BF79BA9318BD}C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe
    FirewallRules: [UDP Query User{2D9ABB71-AA63-4CDC-94D4-844010D26D32}C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe
    FirewallRules: [{77F3E2A0-BCB6-4BEB-8575-D3B0DD55E7B1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TripleTown\TripleTown.exe
    FirewallRules: [{C7B557A8-21D1-4D1F-805F-371F6EF0D921}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TripleTown\TripleTown.exe
    FirewallRules: [{62B37891-4A60-41F7-B910-8324CE1F5CDC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\skyrim\SkyrimLauncher.exe
    FirewallRules: [{34930B50-1B80-4694-92BC-C709549510E4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\skyrim\SkyrimLauncher.exe
    FirewallRules: [{F4C21C2B-287C-4F1A-B881-4F3EF4265B01}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
    FirewallRules: [{0DDE224B-FDAB-464B-A089-D96A367256AA}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
    FirewallRules: [TCP Query User{C26613A5-A229-4FBB-949A-D8B48AE83E42}C:\program files (x86)\arma iii alpha\arma3.exe] => (Block) C:\program files (x86)\arma iii alpha\arma3.exe
    FirewallRules: [UDP Query User{2C782B23-399D-4E22-925B-122B231E679A}C:\program files (x86)\arma iii alpha\arma3.exe] => (Block) C:\program files (x86)\arma iii alpha\arma3.exe
    FirewallRules: [{59437E28-0AD6-48C6-81D4-798BA0C380C0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
    FirewallRules: [{7B0AFBD4-EE8F-421C-B22A-A3FE538961F4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
    FirewallRules: [TCP Query User{10DCC0EC-B1A8-47C2-9140-0051A389EA56}C:\program files (x86)\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
    FirewallRules: [UDP Query User{8F694472-AB1F-4BF1-8A49-97381293D0EC}C:\program files (x86)\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
    FirewallRules: [{600A4C38-24FA-461B-835C-2142124A4119}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold 2\Stronghold2.exe
    FirewallRules: [{329ACA66-2524-489B-A0FC-E4BF8FA013E9}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold 2\Stronghold2.exe
    FirewallRules: [{48B09BA9-D173-4BFB-8373-D15B018585DA}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Legends\StrongholdLegends.exe
    FirewallRules: [{E03BBAF1-8ADE-4FA0-B45F-1AA6A82CC87A}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Legends\StrongholdLegends.exe
    FirewallRules: [{85E1D04E-6071-4504-8EE6-7AB0722E1B4F}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Crusader\Stronghold Crusader.exe
    FirewallRules: [{1BD42C11-4BB8-4985-B3CE-F7015BC92A20}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Crusader\Stronghold Crusader.exe
    FirewallRules: [{01D0DD7C-E566-49FD-A885-372F15A1F49A}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Crusader\Stronghold_Crusader_Extreme.exe
    FirewallRules: [{8A3BAAB6-EE98-4A61-92C5-2F4EFEBB71B9}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold Crusader\Stronghold_Crusader_Extreme.exe
    FirewallRules: [{98E820E5-62FE-4460-92DF-8DE59B403AEF}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold\Stronghold.exe
    FirewallRules: [{97AC2FF0-BFC3-43D3-B501-700775ECFEDE}] => (Allow) C:\Program Files (x86)\Firefly Studios\Stronghold\Stronghold.exe
    FirewallRules: [{B97CFB45-BA2B-46F5-BCC8-6BA9FD4253D5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\magicka\Magicka.exe
    FirewallRules: [{54F3C6D4-AC2B-4306-A090-B980C645E5C6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\magicka\Magicka.exe
    FirewallRules: [{DB663D52-1810-4288-8EC8-D3E28CDFACA6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Receiver\Receiver.exe
    FirewallRules: [{F4DFBDDE-E2A2-4282-914C-C63FE653780E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Receiver\Receiver.exe
    FirewallRules: [{B7A469BC-7CF3-4A54-9380-4A4FD29EF62F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops II\t6mp.exe
    FirewallRules: [{E78C9F69-69D2-464B-9556-37ACF51B0C50}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops II\t6mp.exe
    FirewallRules: [{9CEF7775-DD25-43A1-BFB9-D46F6D8FF26D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe
    FirewallRules: [{56F8DBD0-EB83-4B03-815A-481DB15AFB20}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe
    FirewallRules: [{0A47A69F-E8F6-4B0B-A24F-B8DC52BE465F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FTL Faster Than Light\FTLGame.exe
    FirewallRules: [{C53D014B-1888-45C5-8064-F909CA454AEB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FTL Faster Than Light\FTLGame.exe
    FirewallRules: [{657024F6-FE2F-4B23-828A-59E713984B1A}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
    FirewallRules: [{414DF5F7-96AD-4045-8C80-74C38E98C743}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
    FirewallRules: [{404023FB-55EE-46B1-A1C6-48628CB063F1}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
    FirewallRules: [{A40F89C0-5223-4A3C-9736-C8525FBDDA35}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
     
  20. 2016/07/11
    PlanetAlps

    PlanetAlps Member Thread Starter

    Joined:
    2016/07/09
    Messages:
    47
    Likes Received:
    0
    FirewallRules: [{01C5C577-A7B7-4953-A922-C31989C5D4BB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty World at War\CoDWaW.exe
    FirewallRules: [{45335171-A0EC-43FB-A571-702E939F1DA6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty World at War\CoDWaW.exe
    FirewallRules: [{27586830-FAC8-4FE8-8D67-4D3EA3E97440}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty World at War\CoDWaWmp.exe
    FirewallRules: [{D2D7A0D0-EAF5-4A6F-BA2C-B105EE2401BF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty World at War\CoDWaWmp.exe
    FirewallRules: [TCP Query User{0AD4C7BB-930C-4159-8FB6-AF206DB8434B}C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe
    FirewallRules: [UDP Query User{515FE72A-2A47-4A44-930E-AF03A49D1D39}C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe
    FirewallRules: [{18E05A13-A8A7-40AB-A367-3C2EC65CF804}] => (Block) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe
    FirewallRules: [{0EA43B82-9435-4E13-BADF-24B372C17802}] => (Block) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe
    FirewallRules: [{CBF4E482-A2A6-49CA-95B5-37E3CCAB2780}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid64.exe
    FirewallRules: [{4C5B4944-D57D-4683-B9CF-5AB277311760}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid64.exe
    FirewallRules: [{FB22CF21-AA86-47D2-8194-2B436476B5BE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe
    FirewallRules: [{1FDF18F0-5D1C-43F7-B518-B50AF86C9632}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe
    FirewallRules: [{463DC4C6-594B-4238-A34D-00EFBE0C8BEF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
    FirewallRules: [{45E16892-4D3E-4794-B2D4-5E658C4D637A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
    FirewallRules: [{1A3D3958-D6AA-439D-A267-5AE65D4842F2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\EvolveBeta\Bin64_SteamRetail\StaticLauncher64.exe
    FirewallRules: [{B24B1B93-AD99-460F-8E41-6C7652B5C16D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\EvolveBeta\Bin64_SteamRetail\StaticLauncher64.exe
    FirewallRules: [{FDB29A67-1250-415F-B960-912CE8BA3EEB}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
    FirewallRules: [{672D0C80-39FA-4AA1-9890-279336A2302D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
    FirewallRules: [TCP Query User{CA0AE28C-ED44-49A1-9E36-E81751B6D699}C:\program files (x86)\dying light\dyinglightgame.exe] => (Allow) C:\program files (x86)\dying light\dyinglightgame.exe
    FirewallRules: [UDP Query User{5F543C04-DDB4-4EEE-9ECD-E3FC0AAA246D}C:\program files (x86)\dying light\dyinglightgame.exe] => (Allow) C:\program files (x86)\dying light\dyinglightgame.exe
    FirewallRules: [{BF8B0480-EDB3-4108-A163-9BD87A0321C6}] => (Block) C:\program files (x86)\dying light\dyinglightgame.exe
    FirewallRules: [{3A3F6A9C-AD0B-4005-ACE7-952C36F6BFA3}] => (Block) C:\program files (x86)\dying light\dyinglightgame.exe
    FirewallRules: [{F0AD662C-6FC8-40DE-AC85-5DC4929643EC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
    FirewallRules: [{CB562758-12E5-48C8-B1F2-2463BE922163}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
    FirewallRules: [TCP Query User{5CF6C340-CE8E-4D85-9197-31B3C352633B}C:\program files (x86)\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe
    FirewallRules: [UDP Query User{5FBCB5D4-70DC-497C-BE8A-2F81B35A80B9}C:\program files (x86)\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe
    FirewallRules: [{F010950A-8C3A-4BA6-BA4E-2795502BBA20}] => (Block) C:\program files (x86)\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe
    FirewallRules: [{B1D8E0AB-88AC-431F-9D93-032478D80EC8}] => (Block) C:\program files (x86)\heroes of the storm\versions\base33684\heroesofthestorm_x64.exe
    FirewallRules: [TCP Query User{FBFCE188-1AD4-4B8F-A96E-D792D0762075}C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe
    FirewallRules: [UDP Query User{B7751526-4246-490A-BECF-473F55D30F23}C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe
    FirewallRules: [{D92F6D90-2B98-4A6F-89FA-91CED40DE9E7}] => (Block) C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe
    FirewallRules: [{5DE34A27-3FD3-4B3E-B92D-BCBC8AE8775F}] => (Block) C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe
    FirewallRules: [TCP Query User{3BB3C0DD-66F8-455A-ADD5-775E0A971310}C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
    FirewallRules: [UDP Query User{021A6E33-2ED5-4FAA-BA81-0ED33F39AD80}C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
    FirewallRules: [{5F804856-24A5-4DC0-A6C4-A8771788A616}] => (Block) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
    FirewallRules: [{903009D2-E811-4797-83DF-F0AB145FB137}] => (Block) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
    FirewallRules: [{84CC2575-D468-43D1-9DF5-1FCFCFD4F0E6}] => (Allow) C:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe
    FirewallRules: [{046000FD-F0EE-4EDA-9B02-E9AC26024F82}] => (Allow) C:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe
    FirewallRules: [{5CE12924-E5A3-46BF-A836-B40EBD0CB4C9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3.exe
    FirewallRules: [{B18B6C30-6BC7-4F75-A052-C453AED994D7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3.exe
    FirewallRules: [{0C0DD34A-4794-4064-BF02-D8CB573A0187}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dark Souls II\Game\DarkSoulsII.exe
    FirewallRules: [{C3632D4F-D24F-4910-BDDF-33457C444ACA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dark Souls II\Game\DarkSoulsII.exe
    FirewallRules: [TCP Query User{E1BFD9C7-212C-463F-A487-5003816A8F5F}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
    FirewallRules: [UDP Query User{3688ADEE-7337-41DC-9B03-ABB176FD38FF}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
    FirewallRules: [{11167137-2524-4BBA-8932-52BD07909A75}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unmechanical\Binaries\Win32\UDK.exe
    FirewallRules: [{DDC342BC-BE1D-4E28-B2FC-2B3B76DBB12C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unmechanical\Binaries\Win32\UDK.exe
    FirewallRules: [{C02E161E-05AF-4938-87F1-C050163C0550}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unmechanical\Binaries\Win32\UDKGame.exe
    FirewallRules: [{4AE3E236-2C4D-4F0E-8EB5-88DF50AC1A98}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unmechanical\Binaries\Win32\UDKGame.exe
    FirewallRules: [{A8313760-4849-4BCD-B30D-FB77E588284E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Duck Game\DuckGame.exe
    FirewallRules: [{685210FC-E2B6-4313-BA61-65C5EF93F45A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Duck Game\DuckGame.exe
    FirewallRules: [{9BFC33B6-1B97-439C-901B-AA739939F1AD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GrowHome\GrowHome.exe
    FirewallRules: [{73FBEA5F-D4D8-4145-812F-5CEA0C2CD748}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GrowHome\GrowHome.exe
    FirewallRules: [{7652A312-3E8D-491B-AC27-5AFDEF92068C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MK10\Binaries\Retail\MK10.exe
    FirewallRules: [{A0D31B60-2B77-4E98-8C2B-D4447BA86B0A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MK10\Binaries\Retail\MK10.exe
    FirewallRules: [{489F1373-1FD4-4521-BDBF-B13C60EC3218}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MK10\Binaries\Retail\MKXLauncher.exe
    FirewallRules: [{7DA58F33-4DEE-426C-B735-8C789F57C8F5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MK10\Binaries\Retail\MKXLauncher.exe
    FirewallRules: [{D0C5A210-1A48-4462-BB15-95F83CD6C6A5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe
    FirewallRules: [{7AB29785-2AD9-4D6C-B3C3-555BB2F868C3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe
    FirewallRules: [{6C5A36D4-B118-4D10-954E-CB5D9F72E478}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
    FirewallRules: [{555CC080-18CC-41E1-8C41-AD4730B35DBD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe
    FirewallRules: [{8EDC7C47-966A-40EA-9DD8-7A39E0203F66}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\fallout new vegas\FalloutNVLauncher.exe
    FirewallRules: [{629BA111-3FDF-4A0E-B0DE-B2E45D797EAE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\fallout new vegas\FalloutNVLauncher.exe
    FirewallRules: [{CCDC1B69-718F-42F5-8CB8-2198201860AF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
    FirewallRules: [{863525CE-21EA-4393-B532-1B6F43032A78}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
    FirewallRules: [{FD407717-3928-40F6-9BB5-0B1267FE6EB4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
    FirewallRules: [{A0417754-DA5B-430A-B58F-F59248A68247}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
    FirewallRules: [{4338284A-2DD1-45F4-B466-E28976CFDBB1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
    FirewallRules: [{D6B6280A-08E6-44AE-B26E-08485A8B9988}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
    FirewallRules: [{6020A5D6-EF8E-4EB1-BC83-3FDB2FBDFC07}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
     
  21. 2016/07/11
    PlanetAlps

    PlanetAlps Member Thread Starter

    Joined:
    2016/07/09
    Messages:
    47
    Likes Received:
    0
    FirewallRules: [{9EE05AB2-7274-4C29-9741-8DCEA6B22C49}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
    FirewallRules: [{C6741A06-7E2F-4B48-ADAD-BD06F74F0ECF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
    FirewallRules: [{7D698723-A687-45BB-B2EB-3E08381C45A7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Risk of Rain\Risk of Rain.exe
    FirewallRules: [{993DA023-3C59-4A4B-B49B-4CF115DD784A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Risk of Rain\Risk of Rain.exe
    FirewallRules: [{5AA7FBCD-4E70-4FBD-8183-C950E33A4669}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
    FirewallRules: [{37CD42E2-DAED-4776-9EE3-5CF00B971963}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
    FirewallRules: [{4B440D1B-2876-45A8-9A04-B0660D49481B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
    FirewallRules: [{61774AB6-2CE5-41D0-87B5-FA51D67211E0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
    FirewallRules: [{E8132A27-7E52-443B-A7F8-6B5E275BFEBC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
    FirewallRules: [{0BDD26B0-60F2-4CBE-9944-6A1AA948EF3A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
    FirewallRules: [{0B1CEBFD-D572-488B-A4CA-0C93B9EACBD1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
    FirewallRules: [{15CD5A81-A14A-479B-9218-4650AB1B62FC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
    FirewallRules: [{9AD140C6-4775-4E9E-888C-B713C154871D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
    FirewallRules: [{14210E31-7B79-48BB-8CAB-7285A29DFB5A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
    FirewallRules: [{46DEDD79-7B62-4519-8A28-C304C8A5D352}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
    FirewallRules: [{DA66C86A-22C4-4223-B380-AC899FCC16D1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
    FirewallRules: [{16EEBF6B-1646-4556-BBB7-FA8627A852F8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
    FirewallRules: [{FF1B0DE8-A3B3-4884-ACAA-248DE1CC51CD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
    FirewallRules: [{E47A67A5-2411-4F87-AC01-092607CFC27A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unmechanical\Binaries\Win32\UDKGame.exe
    FirewallRules: [{C189C16A-A6D8-42F1-BFCE-BFE4870E6324}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unmechanical\Binaries\Win32\UDKGame.exe
    FirewallRules: [{F4D4E835-6608-4BA4-8C28-FEE03DEA085A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dark Souls II\Game\DarkSoulsII.exe
    FirewallRules: [{725EFBFA-A086-4A7E-AEF7-3B584688149C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dark Souls II\Game\DarkSoulsII.exe
    FirewallRules: [{64E5072F-7BD9-4357-92D1-15E4DBCF6113}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Golf With Friends\Golf With Friends.exe
    FirewallRules: [{F7819D50-0D7D-41A5-B1E6-46C31FF87BA1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Golf With Friends\Golf With Friends.exe
    FirewallRules: [TCP Query User{56D1E0D3-AA5C-46CD-BB5A-DFB0AF2F3AB6}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
    FirewallRules: [UDP Query User{110C40A0-8A6E-406B-BE21-530101B40EA4}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
    FirewallRules: [TCP Query User{5887E1FC-7922-436B-ACA4-BAE1A2FCE299}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
    FirewallRules: [UDP Query User{35A807EC-E66D-4F46-A80E-4D966AA40742}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
    FirewallRules: [{CF71764B-F117-4CED-9192-C1165133EB95}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Golf With Friends\Golf With Your Friends.exe
    FirewallRules: [{DA13865D-68C7-4BF1-B913-E12D0CBEF83C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Golf With Friends\Golf With Your Friends.exe
    FirewallRules: [{996F31C4-FBD5-4B3C-B8C9-FA9234F68EC7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ_BE.exe
    FirewallRules: [{3EB337A2-5CCA-4E3B-BAFE-655EB2D4533A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ_BE.exe
    FirewallRules: [{7B7B9306-B21D-4479-B62E-E72805A16223}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
    FirewallRules: [{77134CE6-FEE6-48F7-94CB-66147A82F39E}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
    FirewallRules: [{6E1B4EDB-7968-42AC-A07B-38A065C879BB}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
    FirewallRules: [{C70D061C-E1BD-46AA-8108-12FDD7A931F2}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
    FirewallRules: [{BFE2EA24-F9B5-412C-966A-E9FAFE373B7E}] => (Allow) C:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe
    FirewallRules: [{B1DA5408-3673-4BBB-9D36-3BEEC2B1C8AC}] => (Allow) C:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe
    FirewallRules: [{88C9914E-169B-48C6-95E2-96583296D016}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DARK SOULS III\Game\DarkSoulsIII.exe
    FirewallRules: [{F5613221-E3CE-4B0F-BB6B-E454C8BF08C9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DARK SOULS III\Game\DarkSoulsIII.exe
    FirewallRules: [{D4C88974-C104-47C9-90A1-3A7350E2C493}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    FirewallRules: [{D5E61D06-97D1-4A73-8ECF-9B41E92DAB29}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
    FirewallRules: [{029F0525-1E96-4B49-A7D2-807B15B06A00}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
    FirewallRules: [{F62E2291-09A9-4FA8-8253-77F36E890AA9}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
    FirewallRules: [{E60F672F-7965-45E3-A45A-DC360FA91E4A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
    FirewallRules: [{88D7451E-CE7F-4674-AAD3-8D192AAC4B3C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
    FirewallRules: [{42C84906-2F9A-471C-96C8-B23927CD281B}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
    FirewallRules: [{187EDB64-B78C-4406-B938-D564C971DF6A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
    FirewallRules: [{024D4EC3-1B40-4E3C-8A94-09B6372F1FD7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe

    ==================== Restore Points =========================

    07-07-2016 10:46:43 Checkpoint by HitmanPro
    07-07-2016 23:52:39 JRT Pre-Junkware Removal
    10-07-2016 16:39:09 JRT Pre-Junkware Removal

    ==================== Faulty Device Manager Devices =============


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (07/10/2016 11:17:32 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: backgroundTaskHost.exe, version: 10.0.10586.0, time stamp: 0x5632d8f0
    Faulting module name: Cortana.BackgroundTask.dll, version: 0.0.0.0, time stamp: 0x57491660
    Exception code: 0xc0000005
    Fault offset: 0x0000000000046ab5
    Faulting process id: 0xbf8
    Faulting application start time: 0xbackgroundTaskHost.exe0
    Faulting application path: backgroundTaskHost.exe1
    Faulting module path: backgroundTaskHost.exe2
    Report Id: backgroundTaskHost.exe3
    Faulting package full name: backgroundTaskHost.exe4
    Faulting package-relative application ID: backgroundTaskHost.exe5

    Error: (07/10/2016 04:39:20 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
    Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

    Details:
    AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.

    System Error:
    Access is denied.
    .

    Error: (07/10/2016 04:32:04 PM) (Source: HP Active Health) (EventID: 91) (User: )
    Description: Unhandled Exception. Application will terminate immediately.
    System.ArgumentNullException: Value cannot be null.
    at System.Threading.Monitor.Enter(Object obj)
    at HP.ActiveHealth.Commons.Security.HashStore.Validate(String filePath)
    at HP.ActiveHealth.Core.Program..ctor(String[] args, Boolean mustCheckSignature, Boolean validateIni)
    at HP.ActiveHealth.Core.ActiveHealthMain.Main(String[] args)

    Error: (07/10/2016 04:27:44 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: IAStorDataMgrSvc.exe, version: 14.5.0.1081, time stamp: 0x556ecc3d
    Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
    Exception code: 0xc0000005
    Fault offset: 0x04fa4c35
    Faulting process id: 0x1594
    Faulting application start time: 0xIAStorDataMgrSvc.exe0
    Faulting application path: IAStorDataMgrSvc.exe1
    Faulting module path: IAStorDataMgrSvc.exe2
    Report Id: IAStorDataMgrSvc.exe3
    Faulting package full name: IAStorDataMgrSvc.exe4
    Faulting package-relative application ID: IAStorDataMgrSvc.exe5

    Error: (07/10/2016 04:27:43 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
    Description: Application: IAStorDataMgrSvc.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: System.NullReferenceException
    at IAStorUtil.SystemDataModelListener.ProcessSystemDataModelChanges()
    at IAStorUtil.SystemDataModelListener.LoadSavedSystemState()
    at IAStorDataMgr.EventRelay.<Start>b__0(System.Object)
    at System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
    at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
    at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
    at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
    at System.Threading.ThreadPoolWorkQueue.Dispatch()
    at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

    Error: (07/10/2016 04:24:55 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: NvStreamNetworkService.exe, version: 7.1.2084.9592, time stamp: 0x57605ac0
    Faulting module name: MessageBus.dll, version: 0.0.0.0, time stamp: 0x5760534f
    Exception code: 0xc0000005
    Fault offset: 0x0000000000010f73
    Faulting process id: 0x17ac
    Faulting application start time: 0xNvStreamNetworkService.exe0
    Faulting application path: NvStreamNetworkService.exe1
    Faulting module path: NvStreamNetworkService.exe2
    Report Id: NvStreamNetworkService.exe3
    Faulting package full name: NvStreamNetworkService.exe4
    Faulting package-relative application ID: NvStreamNetworkService.exe5

    Error: (07/10/2016 12:50:16 PM) (Source: HP Active Health) (EventID: 91) (User: )
    Description: Unhandled Exception. Application will terminate immediately.
    System.ArgumentNullException: Value cannot be null.
    at System.Threading.Monitor.Enter(Object obj)
    at HP.ActiveHealth.Commons.Security.HashStore.Validate(String filePath)
    at HP.ActiveHealth.Core.Program..ctor(String[] args, Boolean mustCheckSignature, Boolean validateIni)
    at HP.ActiveHealth.Core.ActiveHealthMain.Main(String[] args)

    Error: (07/10/2016 12:45:57 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: NvStreamUserAgent.exe, version: 7.1.2084.9592, time stamp: 0x57605c64
    Faulting module name: ntdll.dll, version: 10.0.10586.306, time stamp: 0x571af2eb
    Exception code: 0xc0000005
    Fault offset: 0x000000000002e909
    Faulting process id: 0xf74
    Faulting application start time: 0xNvStreamUserAgent.exe0
    Faulting application path: NvStreamUserAgent.exe1
    Faulting module path: NvStreamUserAgent.exe2
    Report Id: NvStreamUserAgent.exe3
    Faulting package full name: NvStreamUserAgent.exe4
    Faulting package-relative application ID: NvStreamUserAgent.exe5

    Error: (07/10/2016 12:37:39 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
    Description: Subscription licensing service failed: -1073418154

    Error: (07/09/2016 09:52:32 AM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: dwm.exe, version: 10.0.10586.0, time stamp: 0x5632d756
    Faulting module name: combase.dll, version: 10.0.10586.103, time stamp: 0x56a849ab
    Exception code: 0xc0000005
    Fault offset: 0x0000000000067e3c
    Faulting process id: 0x4498
    Faulting application start time: 0xdwm.exe0
    Faulting application path: dwm.exe1
    Faulting module path: dwm.exe2
    Report Id: dwm.exe3
    Faulting package full name: dwm.exe4
    Faulting package-relative application ID: dwm.exe5


    System errors:
    =============
    Error: (07/10/2016 11:17:31 PM) (Source: DCOM) (EventID: 10016) (User: MACGYVER)
    Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}MACGYVERMacGyverS-1-5-21-3964298893-2401237506-3764420300-1000LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

    Error: (07/10/2016 11:17:31 PM) (Source: DCOM) (EventID: 10016) (User: MACGYVER)
    Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}MACGYVERMacGyverS-1-5-21-3964298893-2401237506-3764420300-1000LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

    Error: (07/10/2016 08:37:15 PM) (Source: DCOM) (EventID: 10016) (User: MACGYVER)
    Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}MACGYVERMacGyverS-1-5-21-3964298893-2401237506-3764420300-1000LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

    Error: (07/10/2016 08:37:15 PM) (Source: DCOM) (EventID: 10016) (User: MACGYVER)
    Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}MACGYVERMacGyverS-1-5-21-3964298893-2401237506-3764420300-1000LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

    Error: (07/10/2016 08:02:08 PM) (Source: DCOM) (EventID: 10016) (User: MACGYVER)
    Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}MACGYVERMacGyverS-1-5-21-3964298893-2401237506-3764420300-1000LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

    Error: (07/10/2016 08:02:08 PM) (Source: DCOM) (EventID: 10016) (User: MACGYVER)
    Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}MACGYVERMacGyverS-1-5-21-3964298893-2401237506-3764420300-1000LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

    Error: (07/10/2016 04:32:52 PM) (Source: DCOM) (EventID: 10016) (User: MACGYVER)
    Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}MACGYVERMacGyverS-1-5-21-3964298893-2401237506-3764420300-1000LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

    Error: (07/10/2016 04:32:52 PM) (Source: DCOM) (EventID: 10016) (User: MACGYVER)
    Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}MACGYVERMacGyverS-1-5-21-3964298893-2401237506-3764420300-1000LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

    Error: (07/10/2016 04:32:11 PM) (Source: DCOM) (EventID: 10016) (User: MACGYVER)
    Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}MACGYVERMacGyverS-1-5-21-3964298893-2401237506-3764420300-1000LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

    Error: (07/10/2016 04:32:11 PM) (Source: DCOM) (EventID: 10016) (User: MACGYVER)
    Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}MACGYVERMacGyverS-1-5-21-3964298893-2401237506-3764420300-1000LocalHost (Using LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742


    CodeIntegrity:
    ===================================
    Date: 2016-06-27 15:45:38.143
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

    Date: 2016-06-27 02:43:15.092
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

    Date: 2016-06-27 01:46:52.796
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

    Date: 2016-06-16 22:44:39.575
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

    Date: 2016-06-16 18:45:31.904
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

    Date: 2016-06-16 17:35:35.882
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

    Date: 2016-06-14 21:01:17.469
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

    Date: 2016-05-13 19:50:21.791
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

    Date: 2016-05-13 16:49:23.740
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

    Date: 2016-05-12 18:11:17.805
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.


    ==================== Memory info ===========================

    Processor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz
    Percentage of memory in use: 23%
    Total physical RAM: 16244.84 MB
    Available physical RAM: 12467.64 MB
    Total Virtual: 17268.84 MB
    Available Virtual: 13161.38 MB

    ==================== Drives ================================

    Drive c: (OS) (Fixed) (Total:1379.56 GB) (Free:639.29 GB) NTFS ==>[system with boot components (obtained from drive)]
    Drive d: (HP_RECOVERY) (Fixed) (Total:16.88 GB) (Free:2.05 GB) NTFS ==>[system with boot components (obtained from drive)]

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1397.3 GB) (Disk ID: 449AE631)
    Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
    Partition 2: (Not Active) - (Size=1379.6 GB) - (Type=07 NTFS)
    Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
    Partition 4: (Not Active) - (Size=16.9 GB) - (Type=07 NTFS)

    ==================== End of Addition.txt ============================
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.