Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-06-2021 Ran by User (16-06-2021 13:58:44) Running from Y:\AppData\file\FRST64 Windows 7 Home Premium Service Pack 1 (X64) (2016-12-07 10:30:32) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-3753424090-3426142987-573532147-500 - Administrator - Disabled) Guest (S-1-5-21-3753424090-3426142987-573532147-501 - Limited - Disabled) User (S-1-5-21-3753424090-3426142987-573532147-1000 - Administrator - Enabled) => C:\Users\User ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Kaspersky Free (Enabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8} AS: Kaspersky Free (Enabled - Up to date) {B1D2E896-6D96-7460-F17A-838B9D00DD65} AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-3753424090-3426142987-573532147-1000\...\uTorrent) (Version: 3.5.5.46010 - BitTorrent Inc.) 3D Ripper DX v1.8.2 (HKLM-x32\...\3D Ripper DX_is1) (Version: - Roman Lut) 4K Video Downloader (HKLM\...\{E9B4998F-85C5-4694-B95F-2390B6E63756}) (Version: 4.13.5.3950 - Open Media LLC) 7capture 1.2.0.21 (HKLM-x32\...\7capture_is1) (Version: 1.2.0.21 - IBE Software) AbiWord 2.9.4 (HKLM-x32\...\AbiWord2) (Version: 2.9.4 - AbiSource Developers) AbleWord v3.0 (HKLM-x32\...\AbleWord_is1) (Version: - ) Adobe Acrobat Reader DC - Polish (HKLM-x32\...\{AC76BA86-7AD7-1045-7B44-AC0F074E4100}) (Version: 21.005.20048 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated) Adobe Flash Player 10 ActiveX (HKLM-x32\...\{48DB5914-8772-472D-B8DF-E2092BE598F6}) (Version: 10.3.181.34 - Adobe Systems Incorporated) Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated) Adobe Illustrator CS6 (HKLM-x32\...\{4869414E-7AEA-4C8E-BE1C-8D40977FD517}) (Version: 16.0 - Adobe Systems Incorporated) Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated) AMD Catalyst Install Manager (HKLM\...\{7E5DC2C5-115A-322B-976C-219237FAED66}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.) AOMEI Partition Assistant Standard Edition 8.5 (HKLM-x32\...\{02F850ED-FD0E-4ED1-BE0B-54981f5BD3D4}_is1) (Version: - AOMEI Technology Co., Ltd.) Apple Application Support (HKLM-x32\...\{63EC2120-1742-4625-AA47-C6A8AEC9C64C}) (Version: 2.2.2 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{7446FE8D-C1F9-4D42-AAAE-5DBCE58605A6}) (Version: 6.0.0.59 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.14.3.0 - Asmedia Technology) Autodesk 3ds Max 2012 64-bit - English (HKLM\...\Autodesk 3ds Max 2012 64-bit - English) (Version: 14.0 - Autodesk) Autodesk Backburner 2012.0.0 (HKLM-x32\...\{3D347E6D-5A03-4342-B5BA-6A771885F379}) (Version: 2012.0.0 - Autodesk, Inc.) Autodesk DirectConnect 2012 64-bit (HKLM\...\Autodesk DirectConnect 2012 64-bit) (Version: 6.0.443.0 - Autodesk) Autodesk DirectConnect 2016 64-bit (HKLM\...\Autodesk DirectConnect 2016 64-bit) (Version: 10.0.98.0 - Autodesk) Autodesk FBX Plug-in 2012.0 - 3ds Max 2012 64-bit (HKLM\...\Autodesk FBX Plug-in 2012.0 - 3ds Max 2012 64-bit) (Version: - Autodesk) Autodesk MatchMover 2012 64-bit (HKLM\...\{4529F749-C362-4119-AFA0-0A3F1CA924AB}) (Version: 14.00.0000 - Autodesk) Autodesk Material Library 2012 (HKLM-x32\...\{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}) (Version: 2.5.0.8 - Autodesk) Autodesk Material Library Base Resolution Image Library 2012 (HKLM-x32\...\{65420DC9-306E-4371-905F-F4DC3B418E52}) (Version: 2.5.0.8 - Autodesk) Autodesk Material Library Medium Resolution Image Library 2012 (HKLM-x32\...\{B5751715-EC10-43D9-8C95-62E1368433EF}) (Version: 2.5.0.8 - Autodesk) Autodesk Maya 2012 64-bit (HKLM\...\Autodesk Maya 2012 64-bit) (Version: 14.0.0.0 - Autodesk) Autodesk Maya 2016 (HKLM\...\Autodesk Maya 2016) (Version: 16.6.2775.0 - Autodesk) Autodesk Maya 2016 SP1 (HKLM\...\Autodesk Maya 2016 SP1) (Version: 16.6.2775.0 - Autodesk) Hidden Autodesk Maya 2016 SP2 (HKLM\...\Autodesk Maya 2016 SP2) (Version: 16.6.2775.0 - Autodesk) Hidden Autodesk Maya 2016 SP3 (HKLM\...\Autodesk Maya 2016 SP3) (Version: 16.6.2775.0 - Autodesk) Hidden Autodesk Maya 2016 SP3P02 (HKLM\...\Autodesk Maya 2016 SP3P02) (Version: 16.6.2775.0 - Autodesk) Hidden Autodesk Maya 2016 SP4 (HKLM\...\Autodesk Maya 2016 SP4) (Version: 16.6.2775.0 - Autodesk) Hidden Autodesk Maya 2016 SP4P04 (HKLM\...\Autodesk Maya 2016 SP4P04) (Version: 16.6.2775.0 - Autodesk) Hidden Autodesk Maya 2016 SP4P05 (HKLM\...\Autodesk Maya 2016 SP4P05) (Version: 16.6.2775.0 - Autodesk) Hidden Autodesk Maya 2016 SP5 (HKLM\...\Autodesk Maya 2016 SP5) (Version: 16.6.2775.0 - Autodesk) Hidden Autodesk Maya 2016 SP5P06 (HKLM\...\Autodesk Maya 2016 SP5P06) (Version: 16.6.2775.0 - Autodesk) Hidden Autodesk Maya 2016 SP5P07 (HKLM\...\Autodesk Maya 2016 SP5P07) (Version: 16.6.2775.0 - Autodesk) Hidden Autodesk Maya 2016 SP5P08 (HKLM\...\Autodesk Maya 2016 SP5P08) (Version: 16.6.2775.0 - Autodesk) Hidden Autodesk Maya 2016 SP6 (HKLM\...\Autodesk Maya 2016 SP6) (Version: 16.6.2775.0 - Autodesk) Autodesk SketchBook Pro for Enterprise 2014 (HKLM-x32\...\Autodesk SketchBook Pro for Enterprise 2014) (Version: 6.10.0000 - Autodesk) Blender (HKLM\...\Blender) (Version: 2.70a - Blender Foundation) BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 4.1.21.2018 - BlueStack Systems, Inc.) Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.) Booking (HKLM-x32\...\{13D4CD54-EA09-4FDB-B979-8B2BC0F020CA}_is1) (Version: 2.0.701 - Booking) calibre (HKLM-x32\...\{A253C2A7-FD66-43AA-9EA7-D30E5041F391}) (Version: 3.5.0 - Kovid Goyal) CCleaner (HKLM\...\CCleaner) (Version: 5.26 - Piriform) Cheat Engine 6.7 (HKLM-x32\...\Cheat Engine 6.7_is1) (Version: - Cheat Engine) ChomikBox (HKLM-x32\...\{45B8131C-E239-4BE0-A92B-0E7FE1BBF83E}) (Version: 2.0.8.2 - Chomikuj.pl) CodeBlocks (HKU\S-1-5-21-3753424090-3426142987-573532147-1000\...\CodeBlocks) (Version: 16.01 - The Code::Blocks Team) Composite 2012 64-bit (HKLM\...\{EA234BC3-39FE-4734-B72F-076086889F6D}) (Version: 7.0.0 - Autodesk) CopyTrans Control Center Uninstall Only (HKU\S-1-5-21-3753424090-3426142987-573532147-1000\...\CopyTrans Suite) (Version: 4.013 - WindSolutions) Corel Graphics - Windows Shell Extension (HKLM\...\_{B16BB34E-B7BF-47DF-8658-BEABCF40CD6A}) (Version: 16.1.0.843 - Corel Corporation) Corel Graphics - Windows Shell Extension (HKLM\...\{B16BB34E-B7BF-47DF-8658-BEABCF40CD6A}) (Version: 16.1.843 - Corel Corporation) Hidden Corel Graphics - Windows Shell Extension 32 Bit (HKLM\...\{0CEA94E0-E6F4-4F2D-AA98-D0EFD6833754}) (Version: 16.1.843 - Corel Corporation) Hidden CorelDRAW Graphics Suite X6 - IPM (HKLM\...\{B6DF7031-2843-44FD-9CAB-DECAB4257456}) (Version: 16.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X6 - Writing Tools (x64) (HKLM\...\{DDE82E3D-20C4-48E1-AE1D-B1F10E42CA44}) (Version: 16.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X6 (64-Bit) (HKLM\...\_{BDBFAC49-8877-472F-876B-75ADB7DBC955}) (Version: 16.1.0.843 - Corel Corporation) CrystalDiskInfo 7.0.5 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 7.0.5 - Crystal Dew World) DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd) DAZ Install Manager (HKLM-x32\...\DAZ Install Manager 1.1.0.64) (Version: 1.1.0.64 - DAZ 3D) DAZ PostgreSQL CMS (HKLM-x32\...\DAZ PostgreSQL CMS 9.3.4.3) (Version: 9.3.4.3 - DAZ 3D) Ðîçîâàÿ Ïàíòåðà (HKLM-x32\...\Ðîçîâàÿ Ïàíòåðà) (Version: - ) DirectX Version Checker (HKLM-x32\...\{6122970E-5575-4155-8408-FD624B3F7C4F}_is1) (Version: - directxupdate.com) Disney's 102 Dalmatians Puppies to the Rescue (HKLM-x32\...\102 Dalmatians Puppies to the Rescue) (Version: - ) Droid4X (HKLM-x32\...\Droid4X) (Version: 0.10.7 - Haiyu Dongxiang Co.,Ltd.) Dual-Core Optimizer (HKLM-x32\...\{9FD6F1A8-5550-46AF-8509-271DF0E768B5}) (Version: 1.1.4.0169 - AMD) DVDFab (x64) 11.0.3.1 (16/05/2019) (HKLM-x32\...\DVDFab 11(x64)) (Version: 11.0.3.1 - DVDFab Software Inc.) DVDFab 9.0.2.8 (01/03/2013) Qt (HKLM-x32\...\DVDFab 9_is1) (Version: - Fengtao Software Inc.) EaseUS Data Recovery Wizard (HKLM\...\EaseUS Data Recovery Wizard_is1) (Version: - EaseUS) EaseUS Partition Recovery 9.0 (HKLM-x32\...\EaseUS Partition Recovery_is1) (Version: - EaseUS) Easy Settings (HKLM-x32\...\{17283B95-21A8-4996-97DA-547A48DB266F}) (Version: 1.1 - Samsung Electronics CO., LTD.) EphereZookeeper 1.7.6 Flux (HKLM-x32\...\EphereZookeeper) (Version: - ) ETDWare PS/2-X64 10.0.7.3_WHQL (HKLM\...\Elantech) (Version: 10.0.7.3 - ELAN Microelectronic Corp.) ExpressCache (HKLM\...\{F9EB0DDE-931C-4E89-96B2-DE8286EDFA6C}) (Version: 1.0.64 - Diskeeper Corporation) Faasoft Video Converter 5.4.20.6448 (HKLM-x32\...\{C6FE6897-0A65-4474-8EF7-E7AF11F8F239}_is1) (Version: - Faasoft Corporation) FastStone Capture 9.0 (HKLM-x32\...\FastStone Capture) (Version: 9.0 - FastStone Soft) FBReader for Windows (HKLM-x32\...\FBReader for Windows) (Version: - ) Fraps (HKLM-x32\...\Fraps) (Version: - ) Game Graphic Studio (HKLM-x32\...\{5AEDCB07-25E3-4136-BE1E-BB2A2944355D}) (Version: 7.4.0 - Obocaman) GG (HKU\S-1-5-21-3753424090-3426142987-573532147-1000\...\GG) (Version: 12 - England Sp. z o.o.) GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: - GOG.com) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 91.0.4472.106 - Google LLC) Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.99.0 - Google Inc.) Hidden Gwent (HKLM-x32\...\1971477531_is1) (Version: 0.9.18 public beta - GOG.com) HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version: - EFD Software) Hello World 0.2 (HKLM-x32\...\Hello World_is1) (Version: - Manning Inc) HiSuite (HKLM-x32\...\Hi Suite) (Version: 9.1.0.309 - ) iExplorer (HKU\S-1-5-21-3753424090-3426142987-573532147-1000\...\2ee35ebaf226322a) (Version: 4.1.4.1 - Macroplant LLC) Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation) Intel(R) PROSet/Wireless for Bluetooth(R) 3.0 + High Speed (HKLM\...\{2C0E6BD4-65B1-4E82-B2AC-43EFFC8F100C}) (Version: 15.0.0.0059 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.5.1001 - Intel Corporation) Intel® PROSet/Wireless WiFi Software (HKLM\...\{DF7756DD-656A-45C3-BA71-74673E8259A9}) (Version: 15.00.0000.0642 - Intel Corporation) Interactive Guide (HKLM-x32\...\{CB383BE9-7518-4ABD-826E-8FC4695F7D52}) (Version: 1.2 - ) iTunes (HKLM\...\{1493B2AE-0261-47D2-B1AA-F4DAD0F6C48B}) (Version: 10.7.0.21 - Apple Inc.) Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle) Kaspersky Free (HKLM-x32\...\{5AAE61FF-858E-453E-B8F3-944618149975}) (Version: 18.0.0.405 - Kaspersky Lab) Hidden Kaspersky Free (HKLM-x32\...\InstallWIX_{5AAE61FF-858E-453E-B8F3-944618149975}) (Version: 18.0.0.405 - Kaspersky Lab) Kaspersky Secure Connection (HKLM-x32\...\{F33C0717-8E04-4EB5-90C8-47221287DB4F}) (Version: 18.0.0.405 - Kaspersky Lab) Hidden Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{F33C0717-8E04-4EB5-90C8-47221287DB4F}) (Version: 18.0.0.405 - Kaspersky Lab) KMPlayer 64X (remove only) (HKLM\...\KMPlayer 64X) (Version: 2018.12.24.14 - PandoraTV) LAV Filters 0.74.1 (HKLM-x32\...\lavfilters_is1) (Version: 0.74.1 - Hendrik Leppkes) MakeMKV v1.15.1 (HKLM-x32\...\MakeMKV) (Version: v1.15.1 - GuinpinSoft inc) Marvelous Designer 2 (HKLM-x32\...\Marvelous Designer 2) (Version: - CLO Virtual Fashion Inc.) Marvelous Designer 3 Enterprise (HKLM-x32\...\Marvelous Designer 3 Enterprise) (Version: - CLO Virtual Fashion Inc.) Marvelous Designer 5 Enterprise (HKLM-x32\...\Marvelous Designer 5 Enterprise) (Version: - CLO Virtual Fashion Inc.) Marvelous Designer 6 Personal (HKLM-x32\...\Marvelous Designer 6 Personal) (Version: - CLO Virtual Fashion Inc.) MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited) mental ray renderer for Autodesk Maya 2016 (HKLM\...\{59AC9438-6EE3-4B22-860F-525308329228}) (Version: 16.6.2775.0 - mental ray) Microsoft .NET Framework 4.8 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.8.03761 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\...\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation) Microsoft Visual Studio Installer (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 2.9.3366.28650 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Microsoft XNA Framework Redistributable 3.0 (HKLM-x32\...\{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}) (Version: 3.0.11010.0 - Microsoft Corporation) MiniTool Partition Wizard Free 11 (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version: - MiniTool Software Limited) MKVToolNix 41.0.0 (64-bit) (HKLM-x32\...\MKVToolNix) (Version: 41.0.0 - Moritz Bunkus) Mozilla Firefox 89.0 (x64 pl) (HKLM\...\Mozilla Firefox 89.0 (x64 pl)) (Version: 89.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 89.0.0.7817 - Mozilla) MPC-HC 1.7.13 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.13 - MPC-HC Team) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MtoA for Maya 2016 (HKU\S-1-5-21-3753424090-3426142987-573532147-1000\...\MtoA2016) (Version: 3.0.0.1 - Solid Angle) Ninja ripper, âåðñèÿ 1.2.7b (HKLM\...\{91130CD0-D546-4194-ACDB-3503A715D068}_is1) (Version: 1.2.7b - black_ninja, Tosyk) NoxPlayer (HKLM-x32\...\Nox) (Version: 7.0.1.0 - Duodian Technology Co. Ltd.) NVIDIA Photoshop Plug-ins 64 bit (HKLM-x32\...\{5E386C5B-CDE7-435A-B5C9-EC73A1B0553A}) (Version: 8.50 - ) NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation) NVIDIA PhysX Plug-in for Autodesk Maya 2012 64 bit (HKLM\...\{FC4AD39F-9DCE-4BD0-B7D0-7C81CEB9F04B}) (Version: 2.60.0216.1828 - NVIDIA Corporation) OpenOffice.org 3.4.1 (HKLM-x32\...\{18192D3F-5537-4560-AD89-D695F72AF91D}) (Version: 3.41.9593 - Apache Software Foundation) Opera Stable 76.0.4017.177 (HKU\S-1-5-21-3753424090-3426142987-573532147-1000\...\Opera 76.0.4017.177) (Version: 76.0.4017.177 - Opera Software) OPTPiX iMageStudio 3.1 (HKLM-x32\...\OPTPiX iMageStudio 3) (Version: - ) Oracle VM VirtualBox 4.3.12_ZZZZ (HKLM\...\{B5121457-0126-4E62-BCBF-6DC7C73D9E4A}) (Version: 4.3.12 - Oracle Corporation) Origin (HKLM-x32\...\Origin) (Version: 10.5.88.45577 - Electronic Arts, Inc.) paint.net (HKLM\...\{1F895C18-6A2F-4A9E-BBE9-246783070F37}) (Version: 4.0.16 - dotPDN LLC) PDF Settings CS6 (HKLM-x32\...\{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}) (Version: 11.0 - Adobe Systems Incorporated) Hidden PDF-XChange Editor (HKLM\...\{388C165A-5F78-48CA-B02F-1E16E6A17D10}) (Version: 6.0.321.0 - Tracker Software Products (Canada) Ltd.) PotPlayer-64 bit (HKLM\...\PotPlayer64) (Version: 1.7.16291 - Kakao Corp.) PyQt GPL v4.10.3 for Python v2.7 (x32) (HKLM-x32\...\PyQt GPL v4.10.3 for Python v2.7 (x32)) (Version: 4.10.3 - ) Python 2.5.4 (64 bit) (HKLM\...\{2E0DFC24-7C4B-4DCF-BCC7-81C513BED3BD}) (Version: 2.5.4150 - Python Software Foundation) Python 2.5.4 (HKLM-x32\...\{2E0DFC24-7C4B-4DCF-BCC7-81C513BED3BC}) (Version: 2.5.4150 - Python Software Foundation) Python 2.7 numpy-1.7.1 (HKLM-x32\...\numpy-py2.7) (Version: - ) Python 2.7 pygame-1.9.2a0 (HKLM-x32\...\{0728A653-2517-4562-BB30-D8D8E74C9D4B}) (Version: 1.9.2 - Pete Shinners, Rene Dudfield, Marcus von Appen, Bob Pendleton, others...) Python 2.7.5 (HKLM-x32\...\{DBDD570E-0952-475f-9453-AB88F3DD5659}) (Version: 2.7.5150 - Python Software Foundation) qBittorrent 4.2.3 (HKLM-x32\...\qBittorrent) (Version: 4.2.3 - The qBittorrent project) QuickTime (HKLM-x32\...\{0E64B098-8018-4256-BA23-C316A43AD9B0}) (Version: 7.72.80.56 - Apple Inc.) Quixel SUITE 2.0 version 2.0 (HKLM\...\{37962BCF-EF4D-4F9D-8AA1-8E2AAD546B67}_is1) (Version: 2.0 - Quixel) Raptr (HKLM-x32\...\Raptr) (Version: 5.2.10-r123135-release - Raptr, Inc) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.45.516.2011 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6428 - Realtek Semiconductor Corp.) Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform) S Agent (HKLM\...\{0052BF58-5307-4F7D-A379-8F4EC9212FA8}) (Version: 1.1.58 - Samsung Electronics Co., Ltd.) Hidden Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.) SageThumbs 2.0.0.16 (HKLM\...\SageThumbs) (Version: 2.0.0.16 - Cherubic Software) Samsung Update (HKLM-x32\...\{06E8E156-6993-4A23-805A-B95C0012D743}) (Version: 2.2.44 - Samsung Electronics Co., Ltd.) School of Dragons (HKLM-x32\...\School of Dragons 3.15.1.CL246337_RELEASE) (Version: 3.16.0.CL247517_RELEASE - JumpStart Games) SketchUp 2016 (HKLM\...\{D87EE6DC-32BA-4219-AC75-0A6FD54ED058}) (Version: 16.0.19912 - Trimble Navigation Limited) Skype version 8.49 (HKLM-x32\...\Skype_is1) (Version: 8.49 - Skype Technologies S.A.) SlimDX Runtime .NET 2.0 (January 2012) (HKLM-x32\...\{014A2868-BE56-4888-A16C-693989B8F153}) (Version: 2.0.13.43 - SlimDX Group) Spider-Man (HKLM-x32\...\Spider-Man_is1) (Version: - Repack by Canek77) SQLite ADO.NET 2.0/3.5 Provider (HKLM-x32\...\{00257FA9-3622-45E4-8B4B-A792CC5169EB}) (Version: 1.066.0 - Phoenix Software Solutions, LLC) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Substance Painter 2 version 2.4.1 (HKLM\...\{f42b7a996fa1d13a1d0a2e33eea2c0800bb5d1b8}_is1) (Version: 2.4.1 - Allegorithmic) Syncios Data Transfer 3.0.2 (HKLM-x32\...\Syncios Data Transfer) (Version: 3.0.2 - Anvsoft) The Sims 2 (HKLM-x32\...\{6E7DD182-9FC6-4651-0095-2E666CC6AF35}) (Version: - ) The Sims 2 Nocne zycie (HKLM-x32\...\{F7529650-B9DB-481B-0089-A2AC3C2821C1}) (Version: - ) The Sims 2 Rozrywka rodzinna - Akcesoria (HKLM-x32\...\{6BDD9CE6-D0A6-478A-BAD3-BA6945E89EB0}) (Version: - ) The Sims 2 Szyk i elegancja - Akcesoria (HKLM-x32\...\{9CDBC303-3EED-40b0-8E41-A7C65AA96C26}) (Version: - ) The Sims 2 University (HKLM-x32\...\{8FD3F4BA-A4A6-4380-00A6-CC6853AB2DC2}) (Version: - ) The Sims 2 Wlasny biznes (HKLM-x32\...\{7B3577F5-1D82-4C9B-008B-69D026FD8BCA}) (Version: - ) The Sims™ 2 Zwierzaki (HKLM-x32\...\{4817189D-1785-4627-A33C-39FD90919300}) (Version: - ) The Sims™ 2 IKEA® urzadza dom Akcesoria (HKLM-x32\...\{6E17F9751-F056-4335-B718-8AF1B1092AFB}) (Version: - Electronic Arts) The Sims™ 2 Czas wolny (HKLM-x32\...\{87F6C83D-F949-4d14-B5CB-DC8C75F8932D}) (Version: - Electronic Arts) The Sims™ 2 Cztery pory roku (HKLM-x32\...\{DFEF49D9-FC95-4301-99B9-2FB91C6ABA06}) (Version: - ) The Sims™ 2 Impreza! Akcesoria (HKLM-x32\...\{EAA38532-7AD0-4f78-918A-4F4F02096ECE}) (Version: - ) The Sims™ 2 Kuchnia i lazienka Wystrój wnetrz Akcesoria (HKLM-x32\...\{6522C636-B04C-4333-9BEB-9E0C0B6350D6}) (Version: - Electronic Arts) The Sims™ 2 Mlodziezowy styl Akcesoria (HKLM-x32\...\{5C648FDB-0138-4619-B66E-230EF53E8E2C}) (Version: - Electronic Arts) The Sims™ 2 Moda z H&M® Akcesoria (HKLM-x32\...\{84DDE556-43EF-43ed-B2DF-37AF9E5DDD75}) (Version: - ) The Sims™ 2 Osiedlowe zycie (HKLM-x32\...\{B6F5B704-06D3-4687-90F3-6195304AD755}) (Version: - Electronic Arts) The Sims™ 2 Podróze (HKLM-x32\...\{F248ADFA-64E0-4b03-8A83-059078BED6A0}) (Version: - Electronic Arts) The Sims™ 2 Rezydencje i ogrody Akcesoria (HKLM-x32\...\{1A2A15C2-6780-49c1-B296-503230E9DE00}) (Version: - Electronic Arts) The Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.67.2 - Electronic Arts) The Sims™ 3 Late Night (HKLM-x32\...\{45057FCE-5784-48BE-8176-D9D00AF56C3C}) (Version: 6.0.81 - Electronic Arts) The Sims™ 3 University Life (HKLM-x32\...\{F26DE8EF-F2CF-40DC-8CDA-CC0D82D11B36}) (Version: 18.0.126 - Electronic Arts) The Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.65.70.1020 - Electronic Arts Inc.) TopoGun 2 W64 (HKLM-x32\...\TopoGun2 W64) (Version: 2 W64 - SC PIXELMACHINE SRL) TSR Workshop (HKLM-x32\...\{2EAD0F04-0711-44AF-946C-F61B919A44A9}) (Version: 2.2.70 - The Sims Resource) Unity (HKLM-x32\...\Unity) (Version: 2018.4.35f1 - Unity Technologies ApS) Video Download Capture V6.3.3 (HKLM-x32\...\{b3336f66-e079-4ff6-abdb-51e2fab781d5}_is1) (Version: 6.3.3 - APOWERSOFT LIMITED) VideoProc (HKLM-x32\...\VideoProc) (Version: 3.6 - Digiarty, Inc.) VideoSolo Blu-ray Copy 1.0.10 (HKLM-x32\...\{246D6958-672A-40B8-BB5D-DCB1F392BF6E}_is1) (Version: 1.0.10 - VideoSolo Studio) VLC media player (HKLM\...\VLC media player) (Version: 3.0.8 - VideoLAN) VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.8 - VideoLAN) VOB2MPG v3 (HKLM-x32\...\{908B5359-244E-4E09-AA9F-DBF240679B46}) (Version: 3.2.2000 - BadgerIT) WinDirStat 1.1.2 (HKU\S-1-5-21-3753424090-3426142987-573532147-1000\...\WinDirStat) (Version: - ) WindowsAndroid version 4.0.3 (HKU\S-1-5-21-3753424090-3426142987-573532147-1000\...\{7E07052F-A4CE-4932-B066-B9203888439F}_is1) (Version: 4.0.3 - SocketeQ, Inc.) WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH) WinZip 21.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C2410D}) (Version: 21.0.12288 - WinZip Computing, S.L. ) Witcher 3 Mod Tools version 1.3 (HKLM-x32\...\{668E890B-660E-475F-BCE6-4730E88BEE00}_is1) (Version: 1.3 - CD Projekt RED) Wondershare Helper Compact 2.5.3 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.3 - Wondershare) Wondershare Recoverit(Build 9.0.3.5) (HKLM-x32\...\{829555DC-31E5-4FEA-B350-8FCF24CECD95}_is1) (Version: 9.0.3.5 - Wondershare Software Co.,Ltd.) XnView 2.50 (HKLM-x32\...\XnView_is1) (Version: 2.50 - Gougelet Pierre-e) YouTube By Click (HKLM-x32\...\{4CFC33AD-851E-4618-B764-651D14E1B6D3}) (Version: 2.2.83 - ByClick) Hidden YouTube By Click (HKLM-x32\...\YouTube By Click 2.2.83) (Version: 2.2.83 - ByClick) ZBrush 4R7 (HKLM-x32\...\ZBrush 4R7 4R7) (Version: 4R7 - Pixologic) ==================== Custom CLSID (Whitelisted): ============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-3753424090-3426142987-573532147-1000_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3753424090-3426142987-573532147-1000_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3753424090-3426142987-573532147-1000_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3753424090-3426142987-573532147-1000_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3753424090-3426142987-573532147-1000_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3753424090-3426142987-573532147-1000_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3753424090-3426142987-573532147-1000_Classes\CLSID\{D45F043D-F17F-4e8a-8435-70971D9FA46D}\InprocServer32 -> C:\Program Files\Blender Foundation\Blender\BlendThumb64.dll () [File not signed] CustomCLSID: HKU\S-1-5-21-3753424090-3426142987-573532147-1000_Classes\CLSID\{E68D0A55-3C40-4712-B90D-DCFA93FF2534}\InprocServer32 -> C:\Users\User\AppData\Roaming\GG\ggdrive\ggdrive-menu.dll => No File ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\User\AppData\Local\MEGAsync\ShellExtX64.dll [2021-06-13] (Mega Limited -> ) ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\User\AppData\Local\MEGAsync\ShellExtX64.dll [2021-06-13] (Mega Limited -> ) ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\User\AppData\Local\MEGAsync\ShellExtX64.dll [2021-06-13] (Mega Limited -> ) ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\User\AppData\Local\MEGAsync\ShellExtX64.dll [2021-06-13] (Mega Limited -> ) ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\User\AppData\Local\MEGAsync\ShellExtX64.dll [2021-06-13] (Mega Limited -> ) ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\User\AppData\Local\MEGAsync\ShellExtX64.dll [2021-06-13] (Mega Limited -> ) ContextMenuHandlers1: [Kaspersky Anti-Virus 18.0.0] -> {FF48AD48-74C7-4260-B385-FAEB80947450} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 18.0.0\x64\ShellEx.dll [2018-10-23] (Kaspersky Lab -> AO Kaspersky Lab) ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\User\AppData\Local\MEGAsync\ShellExtX64.dll [2021-06-13] (Mega Limited -> ) ContextMenuHandlers1: [PDFXChange Editor Context menu] -> {2ACD35AB-F74A-4C20-AA9B-2DE80081626D} => C:\Program Files\Tracker Software\Shell Extensions\XCShellMenu.x64.dll [2017-03-07] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.) ContextMenuHandlers1: [SageThumbs] -> {4A34B3E3-F50E-4FF6-8979-7E4176466FF2} => C:\Program Files (x86)\SageThumbs\64\SageThumbs.dll [2013-07-11] (CherubicSoft) [File not signed] ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-16] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-16] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers1: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2016-12-13] (WinZip Computing LLC -> WinZip Computing, S.L.) ContextMenuHandlers2: [Kaspersky Anti-Virus 18.0.0] -> {FF48AD48-74C7-4260-B385-FAEB80947450} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 18.0.0\x64\ShellEx.dll [2018-10-23] (Kaspersky Lab -> AO Kaspersky Lab) ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\User\AppData\Local\MEGAsync\ShellExtX64.dll [2021-06-13] (Mega Limited -> ) ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\User\AppData\Local\MEGAsync\ShellExtX64.dll [2021-06-13] (Mega Limited -> ) ContextMenuHandlers4: [Kaspersky Anti-Virus 18.0.0] -> {FF48AD48-74C7-4260-B385-FAEB80947450} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 18.0.0\x64\ShellEx.dll [2018-10-23] (Kaspersky Lab -> AO Kaspersky Lab) ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\User\AppData\Local\MEGAsync\ShellExtX64.dll [2021-06-13] (Mega Limited -> ) ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd) ContextMenuHandlers4: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2016-12-13] (WinZip Computing LLC -> WinZip Computing, S.L.) ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\atiacm64.dll [2015-08-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2015-09-10] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) ContextMenuHandlers6: [Kaspersky Anti-Virus 18.0.0] -> {FF48AD48-74C7-4260-B385-FAEB80947450} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 18.0.0\x64\ShellEx.dll [2018-10-23] (Kaspersky Lab -> AO Kaspersky Lab) ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-16] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-16] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers6: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2016-12-13] (WinZip Computing LLC -> WinZip Computing, S.L.) ContextMenuHandlers1_S-1-5-21-3753424090-3426142987-573532147-1000: [GGDriveMenu] -> {E68D0A55-3C40-4712-B90D-DCFA93FF2534} => C:\Users\User\AppData\Roaming\GG\ggdrive\ggdrive-menu.dll -> No File ContextMenuHandlers4_S-1-5-21-3753424090-3426142987-573532147-1000: [GGDriveMenu] -> {E68D0A55-3C40-4712-B90D-DCFA93FF2534} => C:\Users\User\AppData\Roaming\GG\ggdrive\ggdrive-menu.dll -> No File ContextMenuHandlers5_S-1-5-21-3753424090-3426142987-573532147-1000: [GGDriveMenu] -> {E68D0A55-3C40-4712-B90D-DCFA93FF2534} => C:\Users\User\AppData\Roaming\GG\ggdrive\ggdrive-menu.dll -> No File ==================== Codecs (Whitelisted) ==================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\system32\frapsv64.dll [105984 2015-09-05] (Beepa P/L) [File not signed] HKLM\...\Drivers32: [vidc.VP60] => C:\Windows\SysWOW64\vp6vfw.dll [442368 2005-02-26] (On2.com) [File not signed] HKLM\...\Drivers32: [vidc.VP61] => C:\Windows\SysWOW64\vp6vfw.dll [442368 2005-02-26] (On2.com) [File not signed] HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\SysWOW64\frapsvid.dll [94208 2015-09-05] (Beepa P/L) [File not signed] HKLM\...\Drivers32: [vidc.iv50] => C:\Windows\SysWOW64\ir50_32.dll [746496 2009-07-14] (Microsoft Windows -> Intel Corporation) HKLM\...\Drivers32: [msacm.iac2] => C:\Windows\SysWOW64\Iac25_32.ax [197632 2009-07-14] (Microsoft Windows -> Intel Corporation) ==================== Shortcuts & WMI ======================== (The entries could be listed to be restored or removed.) Shortcut: C:\Users\User\Desktop\New folder (22)\New folder (31)\New folder (24)\programs\Игровой Центр 101XP.lnk -> C:\Program Files (x86)\Game Center 101XP\launcher101xp.exe (No File) <==== Cyrillic Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DVDFab 11 (x64)\DVDFab Online.lnk -> hxxp://www.dvdfab.cn/?s=dvdfab11&p=x64&v=11.0.3.1 Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DAZ 3D\DAZ Install Manager\DAZ Install Manager Read Me.lnk -> hxxp:docs.daz3d.com\doku.php\public\read_me\index\14811 ==================== Loaded Modules (Whitelisted) ============= 2017-02-06 17:45 - 2011-02-18 18:16 - 000058880 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2015-05-08 04:37 - 2015-05-08 04:37 - 000087040 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\_ctypes.pyd 2015-05-08 04:37 - 2015-05-08 04:37 - 000356864 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\_hashlib.pyd 2015-05-08 04:37 - 2015-05-08 04:37 - 000043008 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\_socket.pyd 2015-05-08 04:37 - 2015-05-08 04:37 - 000044544 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\_sqlite3.pyd 2015-05-08 04:37 - 2015-05-08 04:37 - 000805376 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\_ssl.pyd 2015-05-08 04:39 - 2015-05-08 04:39 - 000141312 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\gobject._gobject.pyd 2017-05-04 20:33 - 2017-05-04 20:33 - 002717595 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\heliotrope._purple.pyd 2015-05-08 04:49 - 2015-05-08 04:49 - 001640221 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\libjabber.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 001183699 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\liboscar.dll 2015-11-14 00:59 - 2015-11-14 00:59 - 000113171 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\libvlc.dll 2015-11-14 00:59 - 2015-11-14 00:59 - 002396691 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\libvlccore.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 001213633 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\libxml2-2.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 001053730 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\libymsg.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 000495680 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libaim.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 000483306 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libicq.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 000655356 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libirc.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 001306387 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libmsn.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 000565461 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libxmpp.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 000506276 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libyahoo.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 000497782 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libyahoojp.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 000474199 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\plugins\ssl.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 000603326 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\plugins\ssl-nss.dll 2015-05-08 04:37 - 2015-05-08 04:37 - 000127488 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\pyexpat.pyd 2015-05-08 04:39 - 2015-05-08 04:39 - 001662464 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\PyQt4.QtCore.pyd 2015-05-08 04:39 - 2015-05-08 04:39 - 005812736 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\PyQt4.QtGui.pyd 2015-05-08 04:39 - 2015-05-08 04:39 - 000494592 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\PyQt4.QtNetwork.pyd 2015-05-08 04:39 - 2015-05-08 04:39 - 000313856 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\PyQt4.QtWebKit.pyd 2015-05-08 04:38 - 2015-05-08 04:38 - 000110592 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\pywintypes26.dll 2015-05-08 04:37 - 2015-05-08 04:37 - 000010240 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\select.pyd 2017-05-04 22:01 - 2017-05-04 22:01 - 000067584 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\sip.pyd 2015-05-08 04:49 - 2015-05-08 04:49 - 000417501 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\sqlite3.dll 2015-05-08 04:37 - 2015-05-08 04:37 - 000583680 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\unicodedata.pyd 2015-05-08 04:39 - 2015-05-08 04:39 - 000096256 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\win32api.pyd 2015-05-08 04:39 - 2015-05-08 04:39 - 000111104 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\win32file.pyd 2015-05-08 04:39 - 2015-05-08 04:39 - 000167936 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\win32gui.pyd 2015-05-08 04:39 - 2015-05-08 04:39 - 000036352 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\win32process.pyd 2015-05-08 04:37 - 2015-05-08 04:37 - 000009216 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\winsound.pyd 2015-05-08 04:55 - 2015-05-08 04:55 - 000055808 _____ () [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\zlib1.dll 2016-12-07 14:52 - 2006-08-12 23:48 - 000049152 _____ () [File not signed] C:\Program Files (x86)\Samsung\Easy Settings\HookDllPS2.dll 2016-12-07 14:52 - 2011-02-17 12:03 - 000203776 _____ () [File not signed] C:\Program Files (x86)\Samsung\Easy Settings\WinCRT.dll 2016-12-21 20:49 - 2016-12-21 20:49 - 000065536 _____ () [File not signed] C:\Program Files\CCleaner\lang\lang-1045.dll 2020-10-09 11:30 - 2020-10-09 11:30 - 013053440 _____ () [File not signed] C:\Users\User\AppData\Local\MEGAsync\avcodec-58.dll 2020-10-09 11:30 - 2020-10-09 11:30 - 002290176 _____ () [File not signed] C:\Users\User\AppData\Local\MEGAsync\avformat-58.dll 2020-10-09 11:30 - 2020-10-09 11:30 - 000521728 _____ () [File not signed] C:\Users\User\AppData\Local\MEGAsync\avutil-56.dll 2019-05-14 03:06 - 2020-10-09 11:30 - 000065024 _____ () [File not signed] C:\Users\User\AppData\Local\MEGAsync\cares.dll 2020-10-09 11:30 - 2020-10-09 11:30 - 000145408 _____ () [File not signed] C:\Users\User\AppData\Local\MEGAsync\swresample-3.dll 2020-10-09 11:30 - 2020-10-09 11:30 - 000570880 _____ () [File not signed] C:\Users\User\AppData\Local\MEGAsync\swscale-5.dll 2018-04-11 16:19 - 2018-04-11 16:19 - 000169984 _____ () [File not signed] C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\26fa5bfbc19a57eda07a7de5e35bedcf\IsdiInterop.ni.dll 2015-05-08 04:37 - 2015-05-08 04:37 - 002257408 _____ (ActiveState Software Inc) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\python26.dll 2021-05-21 18:12 - 2021-05-21 18:12 - 000031232 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\A4.Foundation\7588b4c9036a571683b7f5807e33af27\A4.Foundation.ni.dll 2021-05-21 18:13 - 2021-05-21 18:13 - 000022528 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\AEM.Actions5dc83b46#\019a2526f23cea41d6e9f68facb87b9d\AEM.Actions.CCAA.Shared.ni.dll 2021-05-21 18:13 - 2021-05-21 18:13 - 000013312 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.0a1309f7#\63c254c751ea2d8f2d4825cfa32e4284\AEM.Plugin.EEU.Shared.ni.dll 2021-05-21 18:13 - 2021-05-21 18:13 - 000017408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.2b6a6775#\839a1b5dd727ca43c1b632a9ba3d744b\AEM.Plugin.Hotkeys.Shared.ni.dll 2021-05-21 18:13 - 2021-05-21 18:13 - 000016384 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.54d8abe3#\9c9f4c7ef8d007288e3b7cb41371457f\AEM.Plugin.DPPE.Shared.ni.dll 2021-05-21 18:13 - 2021-05-21 18:13 - 000281600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.5d945b6b#\2d71f1e7a45ab07a54ff90b0f0685dbd\AEM.Plugin.Source.Kit.Server.ni.dll 2021-05-21 18:13 - 2021-05-21 18:13 - 000014848 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.674d2b8a#\d29c90e6a8b805851a14cf6d430c3b2a\AEM.Plugin.WinMessages.Shared.ni.dll 2021-05-21 18:13 - 2021-05-21 18:13 - 000012800 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.88aba5d2#\8c5805137e7e8b10d466e0f521e5056e\AEM.Plugin.REG.Shared.ni.dll 2021-05-21 18:13 - 2021-05-21 18:13 - 000011776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\AEM.Plugin.GD.Shared\9ee52225fc22b2410331a09f44548251\AEM.Plugin.GD.Shared.ni.dll 2021-05-21 18:13 - 2021-05-21 18:13 - 000013312 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\AEM.Server.Shared\d5cba25a1c6a64e8c7fa5a9f31cec231\AEM.Server.Shared.ni.dll 2021-05-21 18:13 - 2021-05-21 18:13 - 000267776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\AEM.Server\e07245a6e7c600468974919a1f69c9dd\AEM.Server.ni.dll 2021-05-21 18:14 - 2021-05-21 18:14 - 000055808 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\APM.Foundation\e33914cb907a7cc5c95935861ee9e076\APM.Foundation.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000122880 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\ATICCCom\e7d9bc8b53ca1cc29685c72ec84d6cec\ATICCCom.ni.dll 2021-05-21 18:14 - 2021-05-21 18:14 - 000204288 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CCC.Implementation\b4fea844170a08ddc6c431eea93e3d6a\CCC.Implementation.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000154112 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.21d2ac78#\ce48a3cc958402d53941328283a4e965\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000128000 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.3399d0ec#\221951dbfaaf884dca9bfbeace69d4e4\CLI.Aspect.CustomFormats.Graphics.Shared.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000026112 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.37d3d968#\b889f25f6860153f1b4b46f7bc11612f\CLI.Aspect.AMDHome.Graphics.Shared.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000045568 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.382a3def#\f90a201efe17d2d1da88221d1f6e8d1f\CLI.Aspect.AMDOverDrive.Platform.Shared.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000107008 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.3a6f1658#\73fd736cf49ed7b6c548e7dd4bd733b7\CLI.Aspect.TransCode.Graphics.Shared.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000132608 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.46819220#\0eee55dd2d9014b625bb49dc6c62df18\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000074752 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.4bbb0755#\7c69f84ae884a1a19cdc66663c48b6df\CLI.Aspect.TransCode.Graphics.Dashboard.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000037888 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.52c6dbaa#\d056cb645fea2c0a3a99565b385ca338\CLI.Aspect.FPS.Graphics.Shared.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000074752 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.59a12d95#\bedce00bae14764fdb9dcf79decdaf36\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000263168 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.73911eb5#\b5450c9cf28cf8e4a35e7659d1191a36\CLI.Aspect.WirelessDisplay.Graphics.Shared.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000365056 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.7ec2db45#\73325bc0b1b8d0ba1a3201c43716349b\CLI.Aspect.DeviceDFP.Graphics.Shared.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000064000 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8350f5c6#\fd7adc4267f87bd0c4208e8e3b03b594\CLI.Aspect.UpdateNotification.Graphics.Runtime.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000745472 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8d333b6b#\e0d9b1aae1dc641d9f176c9c78873eaf\CLI.Aspect.Radeon3D.Graphics.Shared.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000449024 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.8e996306#\98d3a3d1bf9b589ac73cd4f2af6858b4\CLI.Aspect.CrossDisplay.Graphics.Dashboard.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000089088 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.9cd1e9e7#\1bc74af4595f7d4bb14dba08b398f202\CLI.Aspect.FPS.Graphics.Dashboard.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000057856 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a6cd7fff#\3744857021d8101b5210d22c860c4327\CLI.Aspect.FPS.Graphics.Runtime.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000082944 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.a765109e#\662f96cd34ee44039f2daef6c9690d04\CLI.Aspect.UpdateNotification.Graphics.Dashboard.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000462336 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.acb9d930#\ef7c45342fd8e6ceaa362984f5f93611\CLI.Aspect.DeviceProperty.Graphics.Shared.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000067072 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.b0a7c1fb#\3e21ad0f6a8894bed67d8502be9c1df9\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000340992 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.c7aaa0f8#\b1a65725e974542589e37b125f7d7451\CLI.Aspect.OverDrive5.Graphics.Shared.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000017920 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.c854b457#\0bbf02bda177ca3a7b84bb2569624623\CLI.Aspect.HotkeysHandling.Graphics.Shared.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000096256 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.d4f2f79c#\dd0f5ab78addff1c9d5860088d10533c\CLI.Aspect.CrossFireX.Graphics.Dashboard.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000276480 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e8635fc7#\e41de46d0e4024f3555702356a8f2ca6\CLI.Aspect.InfoCentre.Graphics.Dashboard.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 003312640 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.e9fd7406#\45799d4f52fc1baf50fb7daa4da37449\CLI.Aspect.Radeon3D.Graphics.Dashboard.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000047616 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ef3eaa4d#\8aa73981fe14b1169ae744249b49ebc4\CLI.Aspect.TransCode.Graphics.Runtime.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000050688 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.f480a2f3#\5b4378a0e07ace571758b30de14b73d5\CLI.Aspect.UpdateNotification.Graphics.Shared.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000051200 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.A4.Runtime\e14d9dd065cb4ca4f4a9f15b22d80a72\CLI.Caste.A4.Runtime.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000044544 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.A4.Shared\bbb18c203d447a3d164533b79bfe8b63\CLI.Caste.A4.Shared.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000027136 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Af820fedc#\7d1976a67d7feec95e59eabf618297e0\CLI.Caste.A4.Dashboard.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000044544 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.F24de14fe#\55fae9c0031ec7cf7b0c0bd87e9ed6af\CLI.Caste.Fuel.Shared.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000311296 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.F36b07a2b#\6de7e27e7bdf3258a4a1e67a835e88aa\CLI.Caste.Fuel.Runtime.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000027136 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Ff3085433#\8f74b65cde0a90f1f555936b0789bcd3\CLI.Caste.Fuel.Dashboard.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000037376 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G60338cc0#\b9da81a3b3902ae8ac3de35b279e3fbf\CLI.Caste.Graphics.Runtime.Shared.Private.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 001555456 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Gd9d9b43b#\9f777e1371667aee33b444579e488331\CLI.Caste.Graphics.Dashboard.Shared.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000587776 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Gee7d2dbc#\7190220bcbcd8f6004440ffdbfb10a31\CLI.Caste.Graphics.Dashboard.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000045056 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.H18c99613#\bf9007de074c15128c42d9e66c3e548a\CLI.Caste.HydraVision.Runtime.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000030720 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.H92ba4e46#\e92846c25595b0153e743001a11a6cb1\CLI.Caste.HydraVision.Shared.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000025600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Hbb906c0b#\a54d5067e24f3e8bb50c3d941b293835\CLI.Caste.HydraVision.Dashboard.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000030720 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pac40511b#\0b574f371c97f0b70872f4b6466f75eb\CLI.Caste.Platform.Shared.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000044032 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pdb36d56e#\54fd89f72062d55a9afef3084daa6d6f\CLI.Caste.Platform.Runtime.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000024064 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.Pfeefa2b6#\3140b1a228b955f43d88936cac28de17\CLI.Caste.Platform.Dashboard.ni.dll 2021-05-21 18:13 - 2021-05-21 18:13 - 000012288 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Compone1b4a8c97#\fea89b95b344d2ebe320f10a94ab4e48\CLI.Component.Runtime.Shared.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000901632 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Compone26c9c557#\da748716ec86deaa760e20181d1a619c\CLI.Component.Systemtray.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000173568 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Compone29e547cc#\e36c082efa2466d7b250a51ff0438117\CLI.Component.Dashboard.ProfileManager2.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000151040 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Compone59f353b4#\cd96790b7a550e83ed394fa9e5844672\CLI.Component.Runtime.Shared.Private.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000017408 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Componeb4d0485c#\6850d3d4b5eb2b7fe353760abb5b2a04\CLI.Component.Runtime.Extension.EEU.ni.dll 2021-05-21 18:14 - 2021-05-21 18:14 - 001609728 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Componec89c3bec#\41cc25eff0e3d8edf1821df8498c8dee\CLI.Component.Dashboard.Shared.Private.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000018432 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Componef1fd67b2#\c3bc2c11a319e69d797337b2cc3587ad\CLI.Component.Client.Shared.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000085504 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Componef4cf054f#\0273c82b8f75aa9a50df83826fb26be5\CLI.Component.Dashboard.Shared.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000495104 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Component.Eeu\135eae50ed250dd205f7ca9220fb5e43\CLI.Component.Eeu.ni.dll 2021-05-21 18:14 - 2021-05-21 18:14 - 000089600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Foundat3d5d3945#\2aec8615458cf942c0e2028f92d88b12\CLI.Foundation.Private.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000061440 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Foundat60cdf5df#\38821c827083bc34f72bccdb0757d696\CLI.Foundation.XManifest.ni.dll 2021-05-21 18:13 - 2021-05-21 18:13 - 000091136 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Foundat619559bd#\dee3b70a4046d047575cdf95d09bb8c4\CLI.Foundation.CoreAudioAPI.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 001079296 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Foundatd3771151#\fd0264f191dc3c5e5a2e573fe8769d5c\CLI.Foundation.Client.ni.dll 2021-05-21 18:13 - 2021-05-21 18:13 - 000301568 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Foundation\6f296ece52b7593d404229e421fee706\CLI.Foundation.ni.dll 2021-05-21 18:13 - 2021-05-21 18:13 - 000025600 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\DEM.Foundation\b799a8aa0290c014a50b485ec4518ba1\DEM.Foundation.ni.dll 2021-05-21 18:13 - 2021-05-21 18:13 - 000115200 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0601\97f5dd517e1b54c950b1f62c1172f593\DEM.Graphics.I0601.ni.dll 2021-05-21 18:13 - 2021-05-21 18:13 - 000015360 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\DEM.Graphics\cf73a32e0fd9188ffcf89b05ed5bd8a4\DEM.Graphics.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000037376 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\Fuel.Foundation\bfe2a7e89d34afe293fb5d26816fe2f2\Fuel.Foundation.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000296960 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\LOG.Foundat03490438#\467f27fa881e9eee9938168f95dc6e17\LOG.Foundation.Implementation.ni.dll 2021-05-21 18:12 - 2021-05-21 18:12 - 000150016 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\LOG.Foundat5023f8e7#\58f64e3662d5697ba6ad38611a27e297\LOG.Foundation.Private.ni.dll 2021-05-21 18:14 - 2021-05-21 18:14 - 000087552 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\LOG.Foundatcaafa75b#\76ee3197f92e46c4cc38b66d2d5595be\LOG.Foundation.Implementation.Private.ni.dll 2021-05-21 18:12 - 2021-05-21 18:12 - 000132608 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\LOG.Foundation\2f1f9cdcfda600aa16f01e782ef0c7b7\LOG.Foundation.ni.dll 2021-05-21 18:14 - 2021-05-21 18:14 - 000012288 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\MOM.Foundation\d6f8cbc0a19dae825e2ca119e7016d2c\MOM.Foundation.ni.dll 2021-05-21 18:31 - 2021-05-21 18:31 - 000402944 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\MOM.Implementation\b9455d2a4b125a9d7e3d6637781d805d\MOM.Implementation.ni.dll 2021-05-21 18:13 - 2021-05-21 18:13 - 000055296 _____ (Advanced Micro Devices Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\NEWAEM.Foundation\da39baa62f53888d047f806d04ced8ec\NEWAEM.Foundation.ni.dll 2015-08-04 11:14 - 2015-08-04 11:14 - 000004608 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\atiamenu.dll 2021-05-21 18:13 - 2021-05-21 18:13 - 000897024 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\ADL.Foundation\c16b11e04389e5ba0d99cecfc307efc8\ADL.Foundation.ni.dll 2021-05-21 18:14 - 2021-05-21 18:14 - 000256000 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\APM.Server\c7a7c988826890798bbc742c9864090a\APM.Server.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000783872 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.79734f7a#\39c2ce3f5190bc4c45bc741e57450ec3\CLI.Aspect.PowerXpress.Graphics.Runtime.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000357888 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.b3da5a8f#\1c27e8729ae9ccf234b32382838081c9\CLI.Aspect.PowerXpress.Graphics.Shared.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000595456 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.d4846ba2#\af741c18a8ef78232dcdd85587a02f22\CLI.Aspect.PowerXpress.Graphics.Dashboard.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 008027648 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Combine0616f305#\ac8eb6f3c4ba1eb7fd0f91a34f8e8a45\CLI.Combined.Graphics.Aspects1.Dashboard.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000136704 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Compone168638d1#\40d424fc6a16594519daa1c689c89e50\CLI.Component.Client.Shared.Private.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000234496 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Compone6692ca50#\8da37d6cb8a205c82ae13d47ebad5ed0\CLI.Component.Runtime.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000929280 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Compone6bf88b08#\0754d3a7c5a1a4926b9f1135776a8c1f\CLI.Component.Dashboard.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000011264 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0702\950980627d54b6dabd507a1d105b2b91\DEM.Graphics.I0702.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000084480 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0709\7234dedea2336b99a9a5d0683afdd2f3\DEM.Graphics.I0709.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000009728 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0710\33c18268973f8fc09d479ed2d612a8c3\DEM.Graphics.I0710.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000012288 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0712\a81b5967c5677f9df28ad5a6aa350bc7\DEM.Graphics.I0712.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000018432 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0804\8736bd1276a5b25a28d6d0c1e774bed0\DEM.Graphics.I0804.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000009728 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I0901\2ca069e061a953e641af0f63d2c236df\DEM.Graphics.I0901.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 000035840 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\DEM.Graphics.I1010\700f1d3c7f1acfce2b1d50a06fb62308\DEM.Graphics.I1010.ni.dll 2021-05-21 18:14 - 2021-05-21 18:14 - 001139200 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\Localizatio01dbc1c0#\0b4b1658b4b990236add1fdc4f881be4\Localization.Foundation.Private.ni.dll 2021-05-21 18:31 - 2021-05-21 18:31 - 000244224 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\ResourceMan446ca0e5#\41432a0338c479832c26b1573387fbb6\ResourceManagement.Foundation.Implementation.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000023552 _____ (Advanced Micro Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\ResourceManf163905a#\868862dbc53fb7230ad4b87a09d34a15\ResourceManagement.Foundation.Private.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000091648 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Aspect.ec8786e5#\d346ccd31b9fba7f6d0c37fcb47bdc29\CLI.Aspect.AMDHome.Graphics.Dashboard.ni.dll 2021-05-21 18:14 - 2021-05-21 18:14 - 002845696 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G60a7b4d1#\17b3d8779e8932fe7c972a7121ecff53\CLI.Caste.Graphics.Shared.ni.dll 2021-05-21 18:30 - 2021-05-21 18:30 - 003268096 _____ (Advanced Mirco Devices, Inc.) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\CLI.Caste.G962aa464#\eb508a50337ae084981276a067fbf4ad\CLI.Caste.Graphics.Runtime.ni.dll 2018-04-11 16:30 - 2011-05-05 14:11 - 001892352 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\xerces-c_2_7.dll 2013-07-11 14:48 - 2013-07-11 14:48 - 000381952 _____ (CherubicSoft) [File not signed] C:\Program Files (x86)\SageThumbs\64\SageThumbs.dll 2013-07-08 06:15 - 2013-07-08 06:15 - 000718336 _____ (CherubicSoft) [File not signed] C:\Program Files (x86)\SageThumbs\64\sqlite3.dll 2015-05-08 04:55 - 2015-05-08 04:55 - 000104861 _____ (Free Software Foundation) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\intl.dll 2018-04-11 16:19 - 2018-04-11 16:19 - 000014336 _____ (Intel Corp.) [File not signed] C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\23d3bed7471ba78aadfa3d69e4a0333d\IAStorCommon.ni.dll 2017-02-06 17:45 - 2011-02-18 18:16 - 000165376 _____ (Intel Corporation) [File not signed] [File is in use] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorUIHelper.dll 2017-02-06 17:45 - 2011-02-18 18:16 - 001109504 _____ (Intel Corporation) [File not signed] [File is in use] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IntelVisualDesign.dll 2018-04-11 16:30 - 2011-05-05 14:05 - 000069632 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\StatusStrings.dll 2017-02-06 17:45 - 2011-02-18 18:13 - 000275456 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\ISDI.dll 2011-12-05 19:53 - 2011-12-05 19:53 - 000333312 _____ (Intel Corporation) [File not signed] C:\Program Files\Intel\BluetoothHS\BTHSSupplicant.dll 2011-12-05 20:20 - 2011-12-05 20:20 - 000105472 _____ (Intel Corporation) [File not signed] C:\Program Files\Intel\BluetoothHS\UsR3IoPort.dll 2011-11-23 01:00 - 2011-11-23 01:00 - 000498176 _____ (Intel Corporation) [File not signed] C:\Program Files\Intel\WiFi\bin\P2PSupplicant.dll 2018-04-11 16:19 - 2018-04-11 16:19 - 000219136 _____ (Intel Corporation) [File not signed] C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgr\3879c35fd6e89d2280df6f8a33ee469a\IAStorDataMgr.ni.dll 2018-04-11 16:19 - 2018-04-11 16:19 - 000475648 _____ (Intel Corporation) [File not signed] C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\dc516d388c5da0f1e7234dfab2e60ec5\IAStorUtil.ni.dll 2011-12-08 20:53 - 2011-12-08 20:53 - 000168448 _____ (Intel(R) Corporation) [File not signed] C:\Program Files\Common Files\Intel\WirelessCommon\PsRegApi.dll 2011-12-08 20:55 - 2011-12-08 20:55 - 000283648 _____ (Intel(R) Corporation) [File not signed] C:\Program Files\Common Files\Intel\WirelessCommon\TraceApi.dll 2011-12-08 20:54 - 2011-12-08 20:54 - 003280896 _____ (Intel(R) Corporation) [File not signed] C:\Program Files\Intel\WiFi\bin\AmtWsMan.dll 2011-12-08 20:56 - 2011-12-08 20:56 - 000093696 _____ (Intel(R) Corporation) [File not signed] C:\Program Files\Intel\WiFi\bin\IntStngs.dll 2011-12-08 20:55 - 2011-12-08 20:55 - 000052224 _____ (Intel(R) Corporation) [File not signed] C:\Program Files\Intel\WiFi\bin\IWMSPROV.DLL 2011-12-08 21:01 - 2011-12-08 21:01 - 000518656 _____ (Intel(R) Corporation) [File not signed] C:\Program Files\Intel\WiFi\bin\MurocApi.dll 2011-12-08 20:52 - 2011-12-08 20:52 - 000020992 _____ (Intel(R) Corporation) [File not signed] C:\Program Files\Intel\WiFi\bin\S24MUDLL.dll 2011-12-08 21:00 - 2011-12-08 21:00 - 002394112 _____ (Intel(R) Corporation) [File not signed] C:\Windows\System32\IWMSSvc.dll 2017-01-08 19:49 - 2017-01-08 19:49 - 000225280 _____ (Microsoft Corporation) [File not signed] [File is in use] C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcm90.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 000335360 _____ (Microsoft) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.W8090224c#\d08f94aa74361f555a8348e097ca37bf\Microsoft.WindowsAPICodePack.ni.dll 2021-05-21 18:29 - 2021-05-21 18:29 - 002546688 _____ (Microsoft) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.Wfbf9373c#\21d6de9013f3886311cf40d9e69aa8d8\Microsoft.WindowsAPICodePack.Shell.ni.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 000286885 _____ (Mozilla Foundation) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\freebl3.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 000333204 _____ (Mozilla Foundation) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\libnspr4.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 000031554 _____ (Mozilla Foundation) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\libplc4.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 000026148 _____ (Mozilla Foundation) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\libplds4.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 001290804 _____ (Mozilla Foundation) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\nss3.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 000414890 _____ (Mozilla Foundation) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\nssckbi.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 000128262 _____ (Mozilla Foundation) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\nssutil3.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 000215727 _____ (Mozilla Foundation) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\smime3.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 000259132 _____ (Mozilla Foundation) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\softokn3.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 000232807 _____ (Mozilla Foundation) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\ssl3.dll 2016-08-07 04:13 - 2016-08-07 04:13 - 000027136 _____ (Nokia Corporation and/or its subsidiary(-ies)) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\PyQt4\plugins\imageformats\qgif4.dll 2016-08-07 04:13 - 2016-08-07 04:13 - 000029184 _____ (Nokia Corporation and/or its subsidiary(-ies)) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\PyQt4\plugins\imageformats\qico4.dll 2016-08-07 04:13 - 2016-08-07 04:13 - 000197632 _____ (Nokia Corporation and/or its subsidiary(-ies)) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\PyQt4\plugins\imageformats\qjpeg4.dll 2016-08-07 04:13 - 2016-08-07 04:13 - 000221184 _____ (Nokia Corporation and/or its subsidiary(-ies)) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\PyQt4\plugins\imageformats\qmng4.dll 2016-08-07 04:13 - 2016-08-07 04:13 - 000285696 _____ (Nokia Corporation and/or its subsidiary(-ies)) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\PyQt4\plugins\imageformats\qtiff4.dll 2016-08-07 04:30 - 2016-08-07 04:30 - 002520576 _____ (Nokia Corporation and/or its subsidiary(-ies)) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\QtCore4.dll 2016-08-07 04:30 - 2016-08-07 04:30 - 008347136 _____ (Nokia Corporation and/or its subsidiary(-ies)) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\QtGui4.dll 2016-08-07 04:30 - 2016-08-07 04:30 - 001018368 _____ (Nokia Corporation and/or its subsidiary(-ies)) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\QtNetwork4.dll 2016-08-07 04:30 - 2016-08-07 04:30 - 012745728 _____ (Nokia Corporation and/or its subsidiary(-ies)) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\QtWebKit4.dll 2016-12-07 14:52 - 2012-02-01 02:58 - 000221064 _____ (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) [File not signed] C:\Program Files (x86)\Samsung\Easy Settings\GPSTurboModeDLL.dll 2016-12-07 14:52 - 2012-03-05 22:10 - 000321416 _____ (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) [File not signed] C:\Program Files (x86)\Samsung\Easy Settings\SUS.dll 2019-05-14 03:06 - 2020-10-09 11:30 - 000295936 _____ (The curl library, hxxps://curl.haxx.se/) [File not signed] C:\Users\User\AppData\Local\MEGAsync\libcurl.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 000301094 _____ (The Gfire Team) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\plugins\libxfire.dll 2015-05-08 04:55 - 2015-05-08 04:55 - 001029372 _____ (The GLib developer community) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\libglib-2.0-0.dll 2015-05-08 04:55 - 2015-05-08 04:55 - 000030594 _____ (The GLib developer community) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\libgmodule-2.0-0.dll 2015-05-08 04:55 - 2015-05-08 04:55 - 000295457 _____ (The GLib developer community) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\libgobject-2.0-0.dll 2015-05-08 04:55 - 2015-05-08 04:55 - 000039316 _____ (The GLib developer community) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\libgthread-2.0-0.dll 2011-12-08 20:12 - 2011-12-08 20:12 - 001830912 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll 2020-10-09 11:30 - 2020-10-09 11:30 - 002444288 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [File not signed] C:\Users\User\AppData\Local\MEGAsync\libcrypto-1_1.dll 2020-10-09 11:30 - 2020-10-09 11:30 - 000504320 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [File not signed] C:\Users\User\AppData\Local\MEGAsync\libssl-1_1.dll 2015-05-08 04:49 - 2015-05-08 04:49 - 002942285 _____ (The Pidgin developer community) [File not signed] C:\Program Files (x86)\Raptr Inc\Raptr\libpurple.dll 2019-05-14 03:06 - 2020-10-08 11:59 - 005118072 _____ (The Qt Company Oy -> The Qt Company Ltd.) [File not signed] C:\Users\User\AppData\Local\MEGAsync\Qt5Core.dll 2011-08-12 16:29 - 2011-08-12 16:29 - 001519104 _____ (XnView) [File not signed] C:\Program Files (x86)\SageThumbs\64\libgfl340.dll 2011-08-12 16:29 - 2011-08-12 16:29 - 000256000 _____ (XnView) [File not signed] C:\Program Files (x86)\SageThumbs\64\libgfle340.dll ==================== Alternate Data Streams (Whitelisted) ======== (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`27hfm [0] ==================== Safe Mode (Whitelisted) ================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Association (Whitelisted) ================= (If an entry is included in the fixlist, the registry item will be restored to default or removed.) HKLM\...\.scr: SageThumbsImage.scr => "%1" /S <==== ATTENTION HKU\S-1-5-21-3753424090-3426142987-573532147-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.scr\UserChoice => SageThumbsImage.scr ==================== Internet Explorer (Version 11) (Whitelisted) ========== HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = HKU\S-1-5-21-3753424090-3426142987-573532147-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.yandex.ru/?win=365&clid=2296040 SearchScopes: HKU\S-1-5-21-3753424090-3426142987-573532147-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://yandex.ru/search/?win=365&clid=2296041&text={searchTerms} SearchScopes: HKU\S-1-5-21-3753424090-3426142987-573532147-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://yandex.ru/search/?win=365&clid=2296041&text={searchTerms} BHO: Kaspersky Protection -> {0E2877D3-2641-4970-B794-A553E295428D} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 18.0.0\x64\IEExt\ie_plugin.dll [2019-05-24] (Kaspersky Lab -> AO Kaspersky Lab) BHO-x32: Kaspersky Protection -> {0E2877D3-2641-4970-B794-A553E295428D} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 18.0.0\IEExt\ie_plugin.dll [2019-05-24] (Kaspersky Lab -> AO Kaspersky Lab) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2016-12-10] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2016-12-10] (Oracle America, Inc. -> Oracle Corporation) Toolbar: HKLM - Kaspersky Protection Toolbar - {4853DF44-7D6B-48E9-9258-D800EEE54AF6} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 18.0.0\x64\IEExt\ie_plugin.dll [2019-05-24] (Kaspersky Lab -> AO Kaspersky Lab) Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {4853DF44-7D6B-48E9-9258-D800EEE54AF6} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 18.0.0\IEExt\ie_plugin.dll [2019-05-24] (Kaspersky Lab -> AO Kaspersky Lab) ==================== Hosts content: ========================= (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 05:34 - 2016-12-10 15:47 - 000001028 _____ C:\Windows\system32\drivers\etc\hosts 127.0.0.1 activate.adobe.com 127.0.0.1 practivate.adobe.com 127.0.0.1 lmlicenses.wip4.adobe.com 127.0.0.1 lm.licenses.adobe.com ==================== Other Areas =========================== (Currently there is no automatic fix for this section.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> %SystemRoot%\system32;%System Root%;%SystemRoot%\System32\Wbem HKU\S-1-5-21-3753424090-3426142987-573532147-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\User\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (If an entry is included in the fixlist, it will be removed.) MSCONFIG\Services: AdAppMgrSvc => 2 MSCONFIG\Services: Apple Mobile Device => 2 MSCONFIG\Services: Bonjour Service => 2 MSCONFIG\Services: gupdate => 2 MSCONFIG\Services: gupdatem => 3 MSCONFIG\Services: iPod Service => 3 MSCONFIG\Services: SkypeUpdate => 2 MSCONFIG\Services: Steam Client Service => 3 MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^FAH.lnk => C:\Windows\pss\FAH.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SketchBook Snapshot.lnk => C:\Windows\pss\SketchBook Snapshot.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Update Notifier.lnk => C:\Windows\pss\Update Notifier.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WinZip Preloader.lnk => C:\Windows\pss\WinZip Preloader.lnk.CommonStartup MSCONFIG\startupfolder: C:^Users^User^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.4.1.lnk => C:\Windows\pss\OpenOffice.org 3.4.1.lnk.Startup MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin MSCONFIG\startupreg: ADSKAppManager => "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" MSCONFIG\startupreg: CorelDRAW Graphics Suite 11b => C:\Program Files (x86)\Corel\Corel Graphics 12\Languages\CZ\Programs\Registration.exe /title="CorelDRAW Graphics Suite 12" /date=012617 serial=dR12WRS-8796594-FHE lang=CZ MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun MSCONFIG\startupreg: GalaxyClient => Y:\AppData\GOG Galaxy\GalaxyClient.exe /launchViaAutoStart MSCONFIG\startupreg: GG => "C:\Users\User\AppData\Local\GG\Application\gghub.exe" MSCONFIG\startupreg: ISUSPM Startup => C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe" MSCONFIG\startupreg: PlaysTV => "C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe" --startup MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime MSCONFIG\startupreg: Raptr => "C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe" --startup MSCONFIG\startupreg: SlimCleaner Plus => "C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe" /minimize /boot MSCONFIG\startupreg: Steam => "Y:\AppData\Steam\steam.exe" -silent MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe ==================== FirewallRules (Whitelisted) ================ (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{9F01DA97-6CCE-4948-9E6F-16FC131D353E}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation - Mobile Wireless Group -> ) FirewallRules: [{4E895527-9DC8-4B53-A926-B031B2B1B143}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe => No File FirewallRules: [{4789D269-39A6-4985-A199-CDF8C0D310F8}] => (Allow) Y:\AppData\Steam\Steam.exe (Valve -> Valve Corporation) FirewallRules: [{163C7EB3-0854-4037-85A4-7051A910D34C}] => (Allow) Y:\AppData\Steam\Steam.exe (Valve -> Valve Corporation) FirewallRules: [TCP Query User{49DFB678-7762-4EA7-AA9E-9435E74B983B}C:\program files (x86)\witcher 3 mod tools\bin\x64\wcc_lite.exe] => (Allow) C:\program files (x86)\witcher 3 mod tools\bin\x64\wcc_lite.exe () [File not signed] FirewallRules: [UDP Query User{85AB6564-37A3-42EB-BD9E-56B79B2411BA}C:\program files (x86)\witcher 3 mod tools\bin\x64\wcc_lite.exe] => (Allow) C:\program files (x86)\witcher 3 mod tools\bin\x64\wcc_lite.exe () [File not signed] FirewallRules: [TCP Query User{84394AE1-0306-4F1F-9CD8-7840174A7F09}Y:\appdata\witcher 3 mod tools\bin\x64\wcc_lite.exe] => (Allow) Y:\appdata\witcher 3 mod tools\bin\x64\wcc_lite.exe => No File FirewallRules: [UDP Query User{0043A66B-8FE4-4446-871D-E9F045DF258B}Y:\appdata\witcher 3 mod tools\bin\x64\wcc_lite.exe] => (Allow) Y:\appdata\witcher 3 mod tools\bin\x64\wcc_lite.exe => No File FirewallRules: [TCP Query User{AB81652B-99BA-4FCD-BDEF-0B2BEA23E846}C:\program files (x86)\witcher 3 mod tools\bin\x64\wcc_lite.exe] => (Allow) C:\program files (x86)\witcher 3 mod tools\bin\x64\wcc_lite.exe () [File not signed] FirewallRules: [UDP Query User{BE589801-7BC8-4381-ABDC-BA977EE3F58D}C:\program files (x86)\witcher 3 mod tools\bin\x64\wcc_lite.exe] => (Allow) C:\program files (x86)\witcher 3 mod tools\bin\x64\wcc_lite.exe () [File not signed] FirewallRules: [{FC697D05-319A-4384-A9DE-D55CE910F9D7}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\monitor.exe (Autodesk, Inc -> Autodesk, Inc.) FirewallRules: [{9DA5938B-9280-44D9-ACCD-0D60883B9B23}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\monitor.exe (Autodesk, Inc -> Autodesk, Inc.) FirewallRules: [{696A6A15-2587-4E5F-A104-E97A7AFDD6E1}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\manager.exe (Autodesk, Inc -> Autodesk, Inc.) FirewallRules: [{C10967C6-DC98-4FE5-B6A6-A0695DF683AB}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\manager.exe (Autodesk, Inc -> Autodesk, Inc.) FirewallRules: [{C5CADAD2-8F89-43A6-88FC-8EEDD30108E9}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\server.exe (Autodesk, Inc -> Autodesk, Inc.) FirewallRules: [{A846BE21-A2BC-4E65-A076-FD1DEAE993DF}] => (Allow) C:\Program Files (x86)\Autodesk\Backburner\server.exe (Autodesk, Inc -> Autodesk, Inc.) FirewallRules: [{B63925A4-7757-488E-9C59-0190EDF1EA3B}] => (Allow) C:\Program Files\Autodesk 3ds max 2012\3ds Max 2012\3dsmax.exe (Autodesk, Inc -> Autodesk, Inc.) FirewallRules: [{7BA2C5B1-C775-43EE-AB18-BB7F29241175}] => (Allow) C:\Program Files\Autodesk 3ds max 2012\3ds Max 2012\3dsmax.exe (Autodesk, Inc -> Autodesk, Inc.) FirewallRules: [{9DC26ADC-0C02-40FF-AABE-01B3D3F892B2}] => (Allow) C:\Program Files\Autodesk 3ds max 2012\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe () [File not signed] FirewallRules: [{37908D29-1376-4AC7-A30A-A67C20D5096D}] => (Allow) C:\Program Files\Autodesk 3ds max 2012\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_64server.exe () [File not signed] FirewallRules: [{8E1E14C5-82D3-4CF9-952F-FA20BC032F7D}] => (Allow) C:\Program Files\Autodesk 3ds max 2012\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_64.exe (mental images GmbH) [File not signed] FirewallRules: [{93CB2CB9-E370-4811-879C-2C1BE763820F}] => (Allow) C:\Program Files\Autodesk 3ds max 2012\3ds Max 2012\mentalimages\satellite\raysat_3dsmax2012_64.exe (mental images GmbH) [File not signed] FirewallRules: [{B3DDAD80-65C5-44F0-A196-A6E164508B84}] => (Allow) Y:\AppData\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation) FirewallRules: [{F31506D5-5E10-4D9C-B7EB-5AB506772E8E}] => (Allow) Y:\AppData\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation) FirewallRules: [{F08C9036-6C88-4155-819F-370C5401D145}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.) FirewallRules: [{2EEE18F4-74DF-475B-8689-D78EE835DF81}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.) FirewallRules: [{1204134F-34B8-4E92-BD5D-175CBC7A93BB}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.) FirewallRules: [{A31FB401-D5C3-4D0D-8588-81D5D7B8B5AD}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.) FirewallRules: [{027C7E9C-106C-436C-BC90-580A67E719A1}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.) FirewallRules: [{ADEE1B52-948B-4DB1-BEBC-CE6599361A5E}] => (Allow) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.) FirewallRules: [TCP Query User{CFF1711D-651E-4528-AC6D-5526643FA1EB}C:\program files\autodesk maya 2016\maya2016\bin\maya.exe] => (Allow) C:\program files\autodesk maya 2016\maya2016\bin\maya.exe (Autodesk, Inc -> Autodesk) FirewallRules: [UDP Query User{C6ED347E-B22C-4AD6-829F-4EBF9608388D}C:\program files\autodesk maya 2016\maya2016\bin\maya.exe] => (Allow) C:\program files\autodesk maya 2016\maya2016\bin\maya.exe (Autodesk, Inc -> Autodesk) FirewallRules: [{5BD6FA2D-8689-44B2-A4FE-7AAB211FFC7B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{CD49EA6E-03D1-4CFC-ADEF-A6FA1373EEB7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [TCP Query User{199DBDC4-974B-49AF-887A-5449ED219704}C:\program files (x86)\ephere\licenseserver\epherelicenseserver.exe] => (Allow) C:\program files (x86)\ephere\licenseserver\epherelicenseserver.exe () [File not signed] FirewallRules: [UDP Query User{D0763F42-E6C7-43EE-B25B-E67848B3A9E2}C:\program files (x86)\ephere\licenseserver\epherelicenseserver.exe] => (Allow) C:\program files (x86)\ephere\licenseserver\epherelicenseserver.exe () [File not signed] FirewallRules: [TCP Query User{C6C7D7F6-6513-4AA1-A862-44FFF1ECFE49}C:\program files (x86)\ephere\licenseserver\epherelicenseserver.exe] => (Block) C:\program files (x86)\ephere\licenseserver\epherelicenseserver.exe () [File not signed] FirewallRules: [UDP Query User{283091C8-7161-49E1-A6D3-D9CBB9456309}C:\program files (x86)\ephere\licenseserver\epherelicenseserver.exe] => (Block) C:\program files (x86)\ephere\licenseserver\epherelicenseserver.exe () [File not signed] FirewallRules: [{1E1CDD5C-AF47-4620-9EC8-8B1BB6A7C47D}] => (Allow) Y:\AppData\Steam\steamapps\common\The Witcher Adventure Game\TheWitcherAdventureGame.exe => No File FirewallRules: [{9F30E718-D3A8-410C-A0F9-BC3CB5D18F46}] => (Allow) Y:\AppData\Steam\steamapps\common\The Witcher Adventure Game\TheWitcherAdventureGame.exe => No File FirewallRules: [{5D84DC27-060A-4726-A3EA-2B147CFA1A6D}] => (Allow) Y:\AppData\Steam\steamapps\common\The Witcher Enhanced Edition\System\witcher.exe => No File FirewallRules: [{197B36AE-B270-4A4F-812D-659E730CE46F}] => (Allow) Y:\AppData\Steam\steamapps\common\The Witcher Enhanced Edition\System\witcher.exe => No File FirewallRules: [{22D08969-D9E5-4D4F-8D0F-53B9501F00D3}] => (Allow) Y:\AppData\Steam\steamapps\common\The Witcher Enhanced Edition\System\djinni!.exe => No File FirewallRules: [{B79E925E-28DA-460E-A400-18BDFE576DA4}] => (Allow) Y:\AppData\Steam\steamapps\common\The Witcher Enhanced Edition\System\djinni!.exe => No File FirewallRules: [{9E1DF241-4697-49E8-942F-773E0B2B0C8B}] => (Allow) Y:\AppData\Steam\steamapps\common\The Witcher Enhanced Edition\Digital Comic\DigitalComic.exe => No File FirewallRules: [{8DBEB321-E4E4-4A22-98E3-22213D8D150D}] => (Allow) Y:\AppData\Steam\steamapps\common\The Witcher Enhanced Edition\Digital Comic\DigitalComic.exe => No File FirewallRules: [{843CF25E-BAD4-4D17-9C61-B49AF22F7DCE}] => (Allow) Y:\AppData\Steam\steamapps\common\The Witcher 3\bin\x64\witcher3.exe (CD Projekt Red) [File not signed] FirewallRules: [{0AEE2831-7201-46CE-9176-E3B079861E6A}] => (Allow) Y:\AppData\Steam\steamapps\common\The Witcher 3\bin\x64\witcher3.exe (CD Projekt Red) [File not signed] FirewallRules: [TCP Query User{CBF51AC3-D722-4FBA-95F2-6A508CD760D6}Y:\appdata\mortal kombat xl\binaries\retail\mk10.exe] => (Allow) Y:\appdata\mortal kombat xl\binaries\retail\mk10.exe => No File FirewallRules: [UDP Query User{80330CC1-BDAF-4059-8B83-0B88CCE1B381}Y:\appdata\mortal kombat xl\binaries\retail\mk10.exe] => (Allow) Y:\appdata\mortal kombat xl\binaries\retail\mk10.exe => No File FirewallRules: [TCP Query User{2AA560FD-4E2E-4408-B9A5-B6A17143DE25}Y:\appdata\steam\steamapps\common\mk10\binaries\retail\mk10.exe] => (Allow) Y:\appdata\steam\steamapps\common\mk10\binaries\retail\mk10.exe => No File FirewallRules: [UDP Query User{CBB1A419-289C-4A0D-8CAE-A2E6BCCFBED7}Y:\appdata\steam\steamapps\common\mk10\binaries\retail\mk10.exe] => (Allow) Y:\appdata\steam\steamapps\common\mk10\binaries\retail\mk10.exe => No File FirewallRules: [TCP Query User{E1898F57-42AC-40BE-94AC-E0A01CD1BB3E}C:\program files\allegorithmic\substance painter 2\substance painter 2.exe] => (Block) C:\program files\allegorithmic\substance painter 2\substance painter 2.exe (Allegorithmic -> Allegorithmic) [File not signed] FirewallRules: [UDP Query User{C5F7BC12-FF31-4A09-BF34-4F14C51EF9A2}C:\program files\allegorithmic\substance painter 2\substance painter 2.exe] => (Block) C:\program files\allegorithmic\substance painter 2\substance painter 2.exe (Allegorithmic -> Allegorithmic) [File not signed] FirewallRules: [TCP Query User{4F38AAD4-45CB-424E-9ABA-9E2070D5835B}C:\program files\allegorithmic\substance painter 2\substance painter 2.exe] => (Block) C:\program files\allegorithmic\substance painter 2\substance painter 2.exe (Allegorithmic -> Allegorithmic) [File not signed] FirewallRules: [UDP Query User{BA10B4B3-E3B7-44F8-A13A-819DC9A8E317}C:\program files\allegorithmic\substance painter 2\substance painter 2.exe] => (Block) C:\program files\allegorithmic\substance painter 2\substance painter 2.exe (Allegorithmic -> Allegorithmic) [File not signed] FirewallRules: [{33D917C2-340B-43D3-8ACB-C55679598FC0}] => (Block) C:\Program Files\Marvelous Designer 5 Enterprise\MarvelousDesigner5_Enterprise_x64.exe () [File not signed] FirewallRules: [{7A02834C-E611-4053-B622-F37BAFC2C5DF}] => (Block) C:\Program Files\Marvelous Designer 6 Personal\MarvelousDesigner6_Personal_x64.exe () [File not signed] FirewallRules: [TCP Query User{5A99E3F2-2D60-4674-B450-F1CF49FBD51D}Y:\appdata\the witcher 2 assassins of kings\the witcher 2 assassins of kings - enhanced edition\bin\editor.exe] => (Allow) Y:\appdata\the witcher 2 assassins of kings\the witcher 2 assassins of kings - enhanced edition\bin\editor.exe => No File FirewallRules: [UDP Query User{61943231-8D3A-4FD7-ADAC-C98EAD198C06}Y:\appdata\the witcher 2 assassins of kings\the witcher 2 assassins of kings - enhanced edition\bin\editor.exe] => (Allow) Y:\appdata\the witcher 2 assassins of kings\the witcher 2 assassins of kings - enhanced edition\bin\editor.exe => No File FirewallRules: [{44A36C61-E2FC-4ED0-AC11-C9C38481652A}] => (Block) C:\Program Files\Corel\CorelDRAW Graphics Suite X6\Programs64\CorelDRW.exe (Corel Corporation -> Corel Corporation) FirewallRules: [{B64C30F5-CA32-47D1-AA89-B7BEB78A52DA}] => (Allow) Y:\AppData\Steam\steamapps\common\Dishonored2\Dishonored2.exe => No File FirewallRules: [{4846E793-4213-4190-B96B-D1228B82C1A1}] => (Allow) Y:\AppData\Steam\steamapps\common\Dishonored2\Dishonored2.exe => No File FirewallRules: [{3D986DD8-19CD-4775-AC61-4390BA963EA9}] => (Block) %ProgramFiles%\Autodesk Maya 2016 Extension 2\Maya2016.5\bin\maya.exe => No File FirewallRules: [{55F18D21-955E-41DE-B62C-4715137AE636}] => (Allow) C:\Users\User\Downloads\PlayBlackDesert.exe => No File FirewallRules: [{68BE2364-52DA-487A-AB86-0C200ED77C2B}] => (Allow) C:\Users\User\Downloads\PlayBlackDesert.exe => No File FirewallRules: [{01A5162D-6C44-4A68-A08C-5A0065080575}] => (Block) C:\Program Files\Autodesk Maya 2016\Maya2016\bin\maya.exe (Autodesk, Inc -> Autodesk) FirewallRules: [TCP Query User{ACF2FCFD-01DE-4F62-9576-11A6C88F6C00}Y:\appdata\steam\steamapps\common\mk10\binaries\retail\mk10.exe] => (Allow) Y:\appdata\steam\steamapps\common\mk10\binaries\retail\mk10.exe => No File FirewallRules: [UDP Query User{EC035506-244D-43BD-902A-D2FAE25D00F5}Y:\appdata\steam\steamapps\common\mk10\binaries\retail\mk10.exe] => (Allow) Y:\appdata\steam\steamapps\common\mk10\binaries\retail\mk10.exe => No File FirewallRules: [{EB94963D-C888-4551-9068-2DF393D50F34}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{DD594A12-35BB-4181-A6E7-B56DAE80E088}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{6B3361AF-77F6-49C4-B479-466CEE3B53A8}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{9EB5C64D-1904-4DE9-9689-A84931FF10B3}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{363306F0-F636-4F0E-9BDA-9C105BD2B601}] => (Allow) Y:\AppData\Steam\steamapps\common\Special Edition\DevilMayCry4SpecialEdition.exe => No File FirewallRules: [{1D6D58AD-7F02-435C-AC57-8EC03701706D}] => (Allow) Y:\AppData\Steam\steamapps\common\Special Edition\DevilMayCry4SpecialEdition.exe => No File FirewallRules: [{21BB9A9D-0C29-48E2-A596-42DBF386C6E4}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{287AC447-E4AC-449E-99CF-E5B613133883}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.) FirewallRules: [TCP Query User{1B6A1F21-9AAB-47FF-8439-F88B895992F9}C:\users\user\desktop\umodel\new folder\amped\solidangle_rlm_win\rlm.exe] => (Allow) C:\users\user\desktop\umodel\new folder\amped\solidangle_rlm_win\rlm.exe => No File FirewallRules: [UDP Query User{0D949E54-0D89-4E39-A86A-9937313DF81B}C:\users\user\desktop\umodel\new folder\amped\solidangle_rlm_win\rlm.exe] => (Allow) C:\users\user\desktop\umodel\new folder\amped\solidangle_rlm_win\rlm.exe => No File FirewallRules: [TCP Query User{4040AF85-B0F4-4669-8107-46BD357D41FF}C:\solidangle\mtoadeploy\2016\rlm.exe] => (Allow) C:\solidangle\mtoadeploy\2016\rlm.exe => No File FirewallRules: [UDP Query User{869AB250-2F43-4ACE-B509-C01B69E629E9}C:\solidangle\mtoadeploy\2016\rlm.exe] => (Allow) C:\solidangle\mtoadeploy\2016\rlm.exe => No File FirewallRules: [TCP Query User{B18674FC-4E6F-46A8-90AB-2865F0BEAA23}C:\solidangle\mtoadeploy\2016\bin\rlm.exe] => (Allow) C:\solidangle\mtoadeploy\2016\bin\rlm.exe (Reprise Software Inc.) [File not signed] FirewallRules: [UDP Query User{7C9242EE-3480-483F-8791-F99851EE9B07}C:\solidangle\mtoadeploy\2016\bin\rlm.exe] => (Allow) C:\solidangle\mtoadeploy\2016\bin\rlm.exe (Reprise Software Inc.) [File not signed] FirewallRules: [TCP Query User{FD462E8B-114B-4F23-A273-9E1B5E191947}C:\rlm\rlm.exe] => (Allow) C:\rlm\rlm.exe (Reprise Software Inc.) [File not signed] FirewallRules: [UDP Query User{28474761-1262-4CC5-89C7-77A5640FA83F}C:\rlm\rlm.exe] => (Allow) C:\rlm\rlm.exe (Reprise Software Inc.) [File not signed] FirewallRules: [{6AE836AD-6CE5-48A2-A7B7-2812D62777C3}] => (Allow) C:\Users\User\Downloads\PlayBlackDesert.exe => No File FirewallRules: [{FE3FF10D-DC98-43AA-8A75-96FF36D87C47}] => (Allow) C:\Users\User\Downloads\PlayBlackDesert.exe => No File FirewallRules: [TCP Query User{C3A578F2-6521-44C7-B894-E8709803629F}C:\program files (x86)\game center 101xp\launcher101xp.exe] => (Allow) C:\program files (x86)\game center 101xp\launcher101xp.exe => No File FirewallRules: [UDP Query User{C39B4C22-9A8A-4779-90FB-24727254371B}C:\program files (x86)\game center 101xp\launcher101xp.exe] => (Allow) C:\program files (x86)\game center 101xp\launcher101xp.exe => No File FirewallRules: [TCP Query User{6418E668-48BC-46E0-BA01-B652DA8F2232}C:\program files (x86)\qgna\qgna.exe] => (Block) C:\program files (x86)\qgna\qgna.exe => No File FirewallRules: [UDP Query User{C93E5C58-54A0-4A8F-8795-9327061EED97}C:\program files (x86)\qgna\qgna.exe] => (Block) C:\program files (x86)\qgna\qgna.exe => No File FirewallRules: [{9DB5B270-9293-48E0-9F69-A65AC7CC94E8}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe (Raptr, Inc -> Raptr, Inc) FirewallRules: [{60DDB71A-73CA-4848-994F-3676204F173D}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe (Raptr, Inc -> Raptr, Inc) FirewallRules: [{4D9E80B8-78BF-45C9-83A5-DB5CCA1E0172}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe (Raptr, Inc -> Raptr, Inc) FirewallRules: [{F414220E-7401-46CE-8B4C-CA4F3C9B563E}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe (Raptr, Inc -> Raptr, Inc) FirewallRules: [{9211E8D0-9A24-4287-80D5-0AD0CFD949E4}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe (Plays.tv, Inc -> Copyright (c) 2018 Plays.tv, LLC) FirewallRules: [{1FA72EB0-B0F6-409F-9D21-65AB75D2CF19}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe (Plays.tv, Inc -> Copyright (c) 2018 Plays.tv, LLC) FirewallRules: [TCP Query User{65E8716B-975E-4FBD-BF53-53CC729F239B}Y:\appdata\sims 4\game\bin\ts4_x64.exe] => (Allow) Y:\appdata\sims 4\game\bin\ts4_x64.exe => No File FirewallRules: [UDP Query User{126928B7-AA28-47A3-AD4E-DBDE2CA92EF1}Y:\appdata\sims 4\game\bin\ts4_x64.exe] => (Allow) Y:\appdata\sims 4\game\bin\ts4_x64.exe => No File FirewallRules: [{66419244-6F5A-4922-BDB6-A6E3B5C46632}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture 6\Video Download Capture 6.exe (Apowersoft Ltd -> Apowersoft) FirewallRules: [{2F7C69BB-3E7B-4C67-8916-1D1DAE24B7AC}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture 6\Video Download Capture 6.exe (Apowersoft Ltd -> Apowersoft) FirewallRules: [{F3B1E190-2867-4DCB-979C-E71BEDFBD572}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture 6\rtmpsrv.exe (Apowersoft Ltd -> ) FirewallRules: [{1C66F774-90F7-4B3D-9572-155AC3CDF75F}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture 6\rtmpsrv.exe (Apowersoft Ltd -> ) FirewallRules: [TCP Query User{AF78B883-94F4-43CF-9B97-EE19229709C9}Y:\appdata\sims 4\game\bin\ts4_x64.exe] => (Allow) Y:\appdata\sims 4\game\bin\ts4_x64.exe => No File FirewallRules: [UDP Query User{0B774DC9-47B7-4CE3-8820-5555384FD70D}Y:\appdata\sims 4\game\bin\ts4_x64.exe] => (Allow) Y:\appdata\sims 4\game\bin\ts4_x64.exe => No File FirewallRules: [{1FCA134C-A28B-44C9-967D-D3944C8EF85B}] => (Allow) Y:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe => No File FirewallRules: [{35A15384-2C5A-437B-A916-0419FC5A2A33}] => (Allow) Y:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe => No File FirewallRules: [{9692A901-E10A-4F2B-8189-977744DA79A6}] => (Allow) Y:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe => No File FirewallRules: [{A03CBA1D-0F44-43CB-9F4D-C3F358561C97}] => (Allow) Y:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe => No File FirewallRules: [{50EA3B8A-E212-4A14-B25D-90D90AF3D137}] => (Allow) Y:\AppData\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation) FirewallRules: [{3E974CBE-287E-44A2-8005-E140A38B11CA}] => (Allow) Y:\AppData\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation) FirewallRules: [TCP Query User{1F53DECE-A52E-43FB-832A-876AA5C5206D}Y:\appdata\games\crash bandicoot n sane trilogy\crashbandicootnsanetrilogy.exe] => (Allow) Y:\appdata\games\crash bandicoot n sane trilogy\crashbandicootnsanetrilogy.exe => No File FirewallRules: [UDP Query User{0F4C03A1-1AEC-4D96-ADCA-729CD82C687A}Y:\appdata\games\crash bandicoot n sane trilogy\crashbandicootnsanetrilogy.exe] => (Allow) Y:\appdata\games\crash bandicoot n sane trilogy\crashbandicootnsanetrilogy.exe => No File FirewallRules: [{92BD3512-33C1-44ED-8994-560A8393E8EB}] => (Allow) Y:\AppData\Steam\steamapps\common\Dishonored RHCP\Binaries\Win32\Dishonored.exe => No File FirewallRules: [{E5894A4A-C718-41B5-9763-31C2F9A593EB}] => (Allow) Y:\AppData\Steam\steamapps\common\Dishonored RHCP\Binaries\Win32\Dishonored.exe => No File FirewallRules: [TCP Query User{57D01B52-8F32-4E14-854A-6BE14E9341D3}Y:\appdata\the sims 4\game\bin\ts4_x64.exe] => (Allow) Y:\appdata\the sims 4\game\bin\ts4_x64.exe (Electronic Arts Inc.) [File not signed] FirewallRules: [UDP Query User{72BFE9D4-AB46-47F5-892B-35FDE6F48379}Y:\appdata\the sims 4\game\bin\ts4_x64.exe] => (Allow) Y:\appdata\the sims 4\game\bin\ts4_x64.exe (Electronic Arts Inc.) [File not signed] FirewallRules: [{ED0EA4F8-F2B6-4F01-B8A0-2290A40ED507}] => (Block) Y:\appdata\the sims 4\game\bin\ts4_x64.exe (Electronic Arts Inc.) [File not signed] FirewallRules: [{D21BCD7A-A2C2-4FB3-B745-EF85284076B5}] => (Block) Y:\appdata\the sims 4\game\bin\ts4_x64.exe (Electronic Arts Inc.) [File not signed] FirewallRules: [{545A3248-0044-49AF-800E-D3E13F07380F}] => (Allow) C:\Program Files (x86)\Anvsoft\Syncios Data Transfer\Syncios Data Transfer.exe (Anvsoft Inc. -> Anvsoft) FirewallRules: [{78FAF72E-AA1E-4650-BFF2-A812A149EC73}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{C5F8F28C-C16E-4BE3-BB6B-3977A2B0760F}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [TCP Query User{63FAB015-8A09-4A88-981C-E507680F46F8}C:\users\user\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe] => (Allow) C:\users\user\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe (ShenZhen Thunder Networking Technologies Ltd. -> 深圳市迅雷网络技术有限公司) FirewallRules: [{94F0B109-5701-411C-9E9A-2C231BEF714F}] => (Allow) C:\Program Files (x86)\Droid4X\Droid4X.exe () [File not signed] FirewallRules: [{D808C332-4A60-405D-A3AB-1C35381353AE}] => (Allow) C:\Program Files (x86)\Droid4X\download\MiniThunderPlatform.exe (北京海誉动想科技股份有限公司 -> 深圳市迅雷网络技术有限公司) FirewallRules: [{3419B128-7E19-49C3-BAC4-CCF048F635A8}] => (Allow) C:\Program Files (x86)\Droid4X\download\MiniThunderPlatform.exe (北京海誉动想科技股份有限公司 -> 深圳市迅雷网络技术有限公司) FirewallRules: [{C8CAAD59-7019-4EF1-B7CE-6B3DD90EA746}] => (Allow) C:\Program Files\Oracle\VirtualBox\vboxheadless.exe (Oracle Corporation -> ) FirewallRules: [TCP Query User{C5BAAA86-6685-4A1C-BC73-2EC2245F494B}C:\users\user\appdata\local\programs\opera\65.0.3467.62\opera.exe] => (Allow) C:\users\user\appdata\local\programs\opera\65.0.3467.62\opera.exe => No File FirewallRules: [UDP Query User{7D3C9ACF-BD2E-4E4E-8C62-867D8D6E0B3A}C:\users\user\appdata\local\programs\opera\65.0.3467.62\opera.exe] => (Allow) C:\users\user\appdata\local\programs\opera\65.0.3467.62\opera.exe => No File FirewallRules: [{060A4640-BF2F-4E4D-AE87-2498F731E8D1}] => (Block) C:\users\user\appdata\local\programs\opera\65.0.3467.62\opera.exe => No File FirewallRules: [{AFF56251-4CF6-4DA1-9008-438BAB682D0C}] => (Block) C:\users\user\appdata\local\programs\opera\65.0.3467.62\opera.exe => No File FirewallRules: [TCP Query User{17BFE0D5-6178-4FAF-B920-D6DFD69188A8}C:\users\user\appdata\local\programs\opera\65.0.3467.78\opera.exe] => (Allow) C:\users\user\appdata\local\programs\opera\65.0.3467.78\opera.exe => No File FirewallRules: [UDP Query User{7ECF5CD7-3679-4942-B9BB-DC5231EB4B28}C:\users\user\appdata\local\programs\opera\65.0.3467.78\opera.exe] => (Allow) C:\users\user\appdata\local\programs\opera\65.0.3467.78\opera.exe => No File FirewallRules: [TCP Query User{6819D6CA-FBB9-4B80-ADF4-B828B3B69482}C:\users\user\appdata\local\programs\opera\66.0.3515.44\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera\66.0.3515.44\opera.exe => No File FirewallRules: [UDP Query User{EC06C451-6951-4C10-B87E-09DF70B20439}C:\users\user\appdata\local\programs\opera\66.0.3515.44\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera\66.0.3515.44\opera.exe => No File FirewallRules: [TCP Query User{4DBFB500-7E72-4F3C-AE40-21C8231FAF65}C:\users\user\appdata\local\programs\opera\66.0.3515.60\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera\66.0.3515.60\opera.exe => No File FirewallRules: [UDP Query User{1089D4C4-4E78-4A59-B0CD-A5143372C4F5}C:\users\user\appdata\local\programs\opera\66.0.3515.60\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera\66.0.3515.60\opera.exe => No File FirewallRules: [TCP Query User{3B30B452-ACDB-4CAF-AABC-B5D9DCC4F333}C:\users\user\appdata\local\programs\opera\66.0.3515.72\opera.exe] => (Allow) C:\users\user\appdata\local\programs\opera\66.0.3515.72\opera.exe => No File FirewallRules: [UDP Query User{D4930E55-4323-4565-8D17-3AD2101C87A8}C:\users\user\appdata\local\programs\opera\66.0.3515.72\opera.exe] => (Allow) C:\users\user\appdata\local\programs\opera\66.0.3515.72\opera.exe => No File FirewallRules: [{8041DD11-A841-4EFF-BDAD-7B98425C8801}] => (Block) C:\users\user\appdata\local\programs\opera\66.0.3515.72\opera.exe => No File FirewallRules: [{42CED246-9B71-4E45-AACA-4A3A4715E75A}] => (Block) C:\users\user\appdata\local\programs\opera\66.0.3515.72\opera.exe => No File FirewallRules: [TCP Query User{2F091097-633A-4D83-A4C9-3A87DA08D1DC}C:\users\user\appdata\local\programs\opera\66.0.3515.103\opera.exe] => (Allow) C:\users\user\appdata\local\programs\opera\66.0.3515.103\opera.exe => No File FirewallRules: [UDP Query User{07F90DAB-B3EE-462C-9FEC-53E69E226C02}C:\users\user\appdata\local\programs\opera\66.0.3515.103\opera.exe] => (Allow) C:\users\user\appdata\local\programs\opera\66.0.3515.103\opera.exe => No File FirewallRules: [{E91CCB25-8EC7-4EFB-AA9F-6A99EC23CFAA}] => (Block) C:\users\user\appdata\local\programs\opera\66.0.3515.103\opera.exe => No File FirewallRules: [{725CB60A-D61B-49D4-B446-99BC917B64D3}] => (Block) C:\users\user\appdata\local\programs\opera\66.0.3515.103\opera.exe => No File FirewallRules: [TCP Query User{AF9DDEC4-C01D-4F2F-8972-D5A77171E19A}C:\users\user\appdata\local\programs\opera\66.0.3515.115\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera\66.0.3515.115\opera.exe => No File FirewallRules: [UDP Query User{B9BBCAE8-CE35-46A1-AA82-9A67E109F7A0}C:\users\user\appdata\local\programs\opera\66.0.3515.115\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera\66.0.3515.115\opera.exe => No File FirewallRules: [TCP Query User{5393B978-293F-435C-8FC9-D1041CC8ED8A}C:\users\user\appdata\local\programs\opera\67.0.3575.79\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera\67.0.3575.79\opera.exe => No File FirewallRules: [UDP Query User{13C53652-247D-41F5-BED3-B51DB59BA4BA}C:\users\user\appdata\local\programs\opera\67.0.3575.79\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera\67.0.3575.79\opera.exe => No File FirewallRules: [TCP Query User{7B2688D9-2E04-4614-A840-C4DB849D221A}C:\users\user\appdata\local\programs\opera\67.0.3575.97\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera\67.0.3575.97\opera.exe => No File FirewallRules: [UDP Query User{5C671695-C8EE-481F-8A7D-23EAD4507A68}C:\users\user\appdata\local\programs\opera\67.0.3575.97\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera\67.0.3575.97\opera.exe => No File FirewallRules: [TCP Query User{A0ACF3D1-6D8C-4079-A71D-9470266E7FB7}C:\users\user\appdata\local\programs\opera\67.0.3575.115\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera\67.0.3575.115\opera.exe => No File FirewallRules: [UDP Query User{2158E18E-95E7-4765-85E9-0E5CBA2235E4}C:\users\user\appdata\local\programs\opera\67.0.3575.115\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera\67.0.3575.115\opera.exe => No File FirewallRules: [{EE0854C5-3E61-4BA8-A36C-67FC13354518}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe () [File not signed] FirewallRules: [{F0D54601-B5E0-432A-A805-BC086ABE8ACB}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe () [File not signed] FirewallRules: [TCP Query User{B5313730-C220-4E71-B1C6-DD8060628B21}C:\users\user\appdata\local\programs\opera\67.0.3575.137\opera.exe] => (Allow) C:\users\user\appdata\local\programs\opera\67.0.3575.137\opera.exe => No File FirewallRules: [UDP Query User{22AB88D7-8674-424B-941C-5E58DA49529E}C:\users\user\appdata\local\programs\opera\67.0.3575.137\opera.exe] => (Allow) C:\users\user\appdata\local\programs\opera\67.0.3575.137\opera.exe => No File FirewallRules: [{60A21F5C-FA4E-408A-BB56-985A0E7B7587}] => (Block) C:\users\user\appdata\local\programs\opera\67.0.3575.137\opera.exe => No File FirewallRules: [{F27F3869-93DE-4DC9-8DDC-9862A4AC683E}] => (Block) C:\users\user\appdata\local\programs\opera\67.0.3575.137\opera.exe => No File FirewallRules: [TCP Query User{E1727D29-0868-442B-BC28-B0FD35FA1483}C:\users\user\appdata\local\programs\opera\68.0.3618.63\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera\68.0.3618.63\opera.exe => No File FirewallRules: [UDP Query User{0E4DEA79-90EE-450E-B254-F61D79A2CEF7}C:\users\user\appdata\local\programs\opera\68.0.3618.63\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera\68.0.3618.63\opera.exe => No File FirewallRules: [TCP Query User{16B4C32B-1911-4211-96DE-80882C6F0BFA}C:\users\user\appdata\local\programs\opera\68.0.3618.104\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera\68.0.3618.104\opera.exe => No File FirewallRules: [UDP Query User{66B6AF5D-B370-4652-8249-9E6712F23723}C:\users\user\appdata\local\programs\opera\68.0.3618.104\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera\68.0.3618.104\opera.exe => No File FirewallRules: [TCP Query User{C700090D-9975-4F4E-8C21-7D1548A3DA37}C:\users\user\appdata\local\programs\opera\68.0.3618.125\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera\68.0.3618.125\opera.exe => No File FirewallRules: [UDP Query User{1618E3E7-093B-4BA4-A96C-E0E06915A6A5}C:\users\user\appdata\local\programs\opera\68.0.3618.125\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera\68.0.3618.125\opera.exe => No File FirewallRules: [TCP Query User{A8CEEA46-DF9D-4FBE-9A30-568FF575C3BE}Y:\appdata\the sims 4a\game\bin\ts4_x64.exe] => (Allow) Y:\appdata\the sims 4a\game\bin\ts4_x64.exe => No File FirewallRules: [UDP Query User{7DA7EACF-63A9-4515-A52B-27600F3EB1D8}Y:\appdata\the sims 4a\game\bin\ts4_x64.exe] => (Allow) Y:\appdata\the sims 4a\game\bin\ts4_x64.exe => No File FirewallRules: [{0F671063-72AA-4906-8A6E-6F77EB551C3F}] => (Block) Y:\appdata\the sims 4a\game\bin\ts4_x64.exe => No File FirewallRules: [{CF3BD291-6067-443C-8B51-24AC0BB4E188}] => (Block) Y:\appdata\the sims 4a\game\bin\ts4_x64.exe => No File FirewallRules: [TCP Query User{7801AA1F-0652-4D79-823F-8224EC0E6B5C}C:\users\user\appdata\local\programs\opera\68.0.3618.173\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera\68.0.3618.173\opera.exe => No File FirewallRules: [UDP Query User{22251674-CD23-481E-934E-29372E24A9A8}C:\users\user\appdata\local\programs\opera\68.0.3618.173\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera\68.0.3618.173\opera.exe => No File FirewallRules: [TCP Query User{49C461DC-F800-4ED1-9F56-B20AA498AFC1}C:\program files\dvdfab 11\dvdfab64.exe] => (Allow) C:\program files\dvdfab 11\dvdfab64.exe (DVDFab Software Inc. -> DVDFab.cn) FirewallRules: [UDP Query User{B2DA90BC-F181-42B1-B91A-685554EF5F11}C:\program files\dvdfab 11\dvdfab64.exe] => (Allow) C:\program files\dvdfab 11\dvdfab64.exe (DVDFab Software Inc. -> DVDFab.cn) FirewallRules: [{226316E6-B980-4312-BD86-F66EDF485F5B}] => (Block) C:\program files\dvdfab 11\dvdfab64.exe (DVDFab Software Inc. -> DVDFab.cn) FirewallRules: [{41260AFC-E0C5-4469-8917-94D696687796}] => (Block) C:\program files\dvdfab 11\dvdfab64.exe (DVDFab Software Inc. -> DVDFab.cn) FirewallRules: [TCP Query User{9F732838-CF50-42B1-BA28-3D1C140F926F}C:\users\user\appdata\local\programs\opera\69.0.3686.77\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera\69.0.3686.77\opera.exe => No File FirewallRules: [UDP Query User{55650310-A9AD-41C5-ADEC-EF362144217E}C:\users\user\appdata\local\programs\opera\69.0.3686.77\opera.exe] => (Block) C:\users\user\appdata\local\programs\opera\69.0.3686.77\opera.exe => No File FirewallRules: [{02831CF7-1D28-4B3E-B7A1-D39EF695D0AC}] => (Allow) Y:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin_LE\TS4.exe => No File FirewallRules: [{0754ADCA-EB7E-4A48-9754-01E2AE0A8797}] => (Allow) Y:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin_LE\TS4.exe => No File FirewallRules: [{142A31B3-FF61-4D65-AA2E-0018F5171677}] => (Allow) Y:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe => No File FirewallRules: [{37FB4B22-9F61-4432-8A2A-57207230C12D}] => (Allow) Y:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe => No File FirewallRules: [TCP Query User{E7E1CFF7-6FDE-4D38-91D4-76688E364B12}C:\program files (x86)\wondershare\wondershare recoverit pro\drc.exe] => (Allow) C:\program files (x86)\wondershare\wondershare recoverit pro\drc.exe (Wondershare Technology Co.,Ltd -> Wondershare Inc.) FirewallRules: [UDP Query User{27862469-F366-49EF-AF4E-C2F08F000FC0}C:\program files (x86)\wondershare\wondershare recoverit pro\drc.exe] => (Allow) C:\program files (x86)\wondershare\wondershare recoverit pro\drc.exe (Wondershare Technology Co.,Ltd -> Wondershare Inc.) FirewallRules: [{EAA40D14-2412-4C33-AF20-9326E560B142}] => (Block) C:\program files (x86)\wondershare\wondershare recoverit pro\drc.exe (Wondershare Technology Co.,Ltd -> Wondershare Inc.) FirewallRules: [{E994CD35-D02F-4755-B632-48E15CC9E7E5}] => (Block) C:\program files (x86)\wondershare\wondershare recoverit pro\drc.exe (Wondershare Technology Co.,Ltd -> Wondershare Inc.) FirewallRules: [{6A6AB08D-A2FF-43E9-96B0-FA3F0CB530C5}] => (Allow) C:\Program Files (x86)\BlueStacks\HD-Player.exe => No File FirewallRules: [{0F3469C5-C418-4B51-BC5B-B36AAF11E330}] => (Allow) C:\Program Files (x86)\Nox\bin\Nox.exe (Nox Limited -> Duodian Technology Co. Ltd.) FirewallRules: [{4EC0E826-C596-4270-9AAC-1818A7DD699E}] => (Allow) C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe (Nox Limited -> Nox Limited Corporation) FirewallRules: [{6798A684-4E48-484B-85CF-F9C788E73616}] => (Allow) Y:\AppData\Unity Hub\Unity Hub.exe => No File FirewallRules: [TCP Query User{46AF384E-4EBE-4A35-ADDB-408572E9359A}Y:\appdata\unity hub\unity hub.exe] => (Allow) Y:\appdata\unity hub\unity hub.exe => No File FirewallRules: [UDP Query User{BDAEFE95-7401-4936-89F0-B3E68BEC73C8}Y:\appdata\unity hub\unity hub.exe] => (Allow) Y:\appdata\unity hub\unity hub.exe => No File FirewallRules: [{EFAED06A-52C3-43F9-AC57-867EFF648886}] => (Block) Y:\appdata\unity hub\unity hub.exe => No File FirewallRules: [{93BC9A87-60FC-4790-B0B4-D67373E8694B}] => (Block) Y:\appdata\unity hub\unity hub.exe => No File FirewallRules: [{2E500EC9-7D72-4A5E-ACF1-A9E8BCDB6D2B}] => (Allow) C:\Program Files\Unity Hub\Unity Hub.exe => No File FirewallRules: [TCP Query User{AE9DE892-2A42-410A-AC0F-C7B557641CF8}C:\program files\unity hub\unity hub.exe] => (Allow) C:\program files\unity hub\unity hub.exe => No File FirewallRules: [UDP Query User{7C41B1DD-C7E2-40F0-A216-29CDEFB821D3}C:\program files\unity hub\unity hub.exe] => (Allow) C:\program files\unity hub\unity hub.exe => No File FirewallRules: [{5909AAD5-27CF-45BD-A266-5473C6B79308}] => (Block) C:\program files\unity hub\unity hub.exe => No File FirewallRules: [{8C616496-EE8B-4E36-92E8-885EC7B0D72F}] => (Block) C:\program files\unity hub\unity hub.exe => No File FirewallRules: [{97644408-FD46-4304-A9B2-7959890B43CB}] => (Allow) Y:\AppData\unity\Editor\Unity.exe (Unity Technologies Aps -> Unity Technologies ApS) FirewallRules: [{324FCB70-7BF4-4491-B216-FA6F711081CD}] => (Block) Y:\AppData\unity\Editor\Unity.exe (Unity Technologies Aps -> Unity Technologies ApS) FirewallRules: [{4B52AC4C-B657-4117-8CDA-C807FC7FAC81}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) ==================== Restore Points ========================= ==================== Faulty Device Manager Devices ============ Name: USB Composite Device Description: USB Composite Device Class Guid: {36fc9e60-c465-11cf-8056-444553540000} Manufacturer: (Standard USB Host Controller) Service: usbccgp Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ======================== Application errors: ================== Error: (06/16/2021 01:48:21 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program FRST64.exe version 16.6.2021.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 22a0 Start Time: 01d7629cebd87307 Termination Time: 2947 Application Path: Y:\Downloads\FRST64.exe Report Id: 5a819881-ce90-11eb-a289-e8039a93484b Error: (06/16/2021 12:56:38 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: ZeroConfigService.exe, version: 15.0.0.1, time stamp: 0x4ee0fc85 Faulting module name: KERNELBASE.dll, version: 6.1.7601.23796, time stamp: 0x59029714 Exception code: 0xc06d007e Fault offset: 0x000000000001a06d Faulting process id: 0xb44 Faulting application start time: 0x01d76295e55a5825 Faulting application path: C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe Faulting module path: C:\Windows\system32\KERNELBASE.dll Report Id: 242226c5-ce89-11eb-a289-e5a7d9e86e03 Error: (06/16/2021 08:27:56 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: Activation context generation failed for "C:\Program Files\Autodesk 3ds max 2012\Composite 2012\python\lib\distutils\command\wininst-8_d.exe". Dependent Assembly Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found. Please use sxstrace.exe for detailed diagnosis. Error: (06/16/2021 08:21:39 AM) (Source: SideBySide) (EventID: 59) (User: ) Description: Activation context generation failed for "y:\appdata\unity\editor\data\monobleedingedge\lib\mono\4.5\nunit-console.exe".Error in manifest or policy file "y:\appdata\unity\editor\data\monobleedingedge\lib\mono\4.5\nunit-console.exe.Config" on line 1. Invalid Xml syntax. Error: (06/16/2021 08:14:17 AM) (Source: SideBySide) (EventID: 63) (User: ) Description: Activation context generation failed for "C:\Program Files (x86)\Game Graphic Studio\DelZip179.dll".Error in manifest or policy file "C:\Program Files (x86)\Game Graphic Studio\DelZip179.dll" on line 8. The value "*" of attribute "language" in element "assemblyIdentity" is invalid. Error: (06/16/2021 07:55:51 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: ZeroConfigService.exe, version: 15.0.0.1, time stamp: 0x4ee0fc85 Faulting module name: KERNELBASE.dll, version: 6.1.7601.23796, time stamp: 0x59029714 Exception code: 0xc06d007e Fault offset: 0x000000000001a06d Faulting process id: 0xb58 Faulting application start time: 0x01d7626bdf633cd6 Faulting application path: C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe Faulting module path: C:\Windows\system32\KERNELBASE.dll Report Id: 1efc848f-ce5f-11eb-a8bb-bac62e3b0e6f Error: (06/16/2021 12:22:51 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: ScanPAC.exe, version: 0.0.0.0, time stamp: 0x48320439 Faulting module name: msvcrt.dll, version: 7.0.7601.17744, time stamp: 0x4eeaf722 Exception code: 0xc0000005 Fault offset: 0x0000ab6d Faulting process id: 0x1964 Faulting application start time: 0x01d7622c984f70be Faulting application path: Y:\AppData\file\PacToolsHD-master\pactoolshd\ScanPAC.exe Faulting module path: C:\Windows\syswow64\msvcrt.dll Report Id: d6797a7d-ce1f-11eb-bb6f-ac7debe4829d Error: (06/15/2021 10:32:40 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: The program Setup.tmp version 51.1052.0.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 2240 Start Time: 01d7621c97270a36 Termination Time: 8 Application Path: C:\Users\User\AppData\Local\Temp\is-IPUA8.tmp\Setup.tmp Report Id: System errors: ============= Error: (06/16/2021 12:56:43 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Intel(R) PROSet/Wireless Zero Configuration Service service terminated unexpectedly. It has done this 1 time(s). Error: (06/16/2021 12:56:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The Reimage Real Time Protector service failed to start due to the following error: The system cannot find the file specified. Error: (06/16/2021 11:59:07 AM) (Source: DCOM) (EventID: 10010) (User: ) Description: The server {995C996E-D918-4A8C-A302-45719A6F4EA7} did not register with DCOM within the required timeout. Error: (06/16/2021 11:58:53 AM) (Source: DCOM) (EventID: 10010) (User: ) Description: The server {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} did not register with DCOM within the required timeout. Error: (06/16/2021 11:37:08 AM) (Source: volsnap) (EventID: 36) (User: ) Description: The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit. Error: (06/16/2021 07:55:53 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Intel(R) PROSet/Wireless Zero Configuration Service service terminated unexpectedly. It has done this 1 time(s). Error: (06/16/2021 07:55:47 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The Reimage Real Time Protector service failed to start due to the following error: The system cannot find the file specified. Error: (06/16/2021 12:40:53 AM) (Source: DCOM) (EventID: 10010) (User: ) Description: The server {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} did not register with DCOM within the required timeout. ==================== Memory info =========================== BIOS: Phoenix Technologies Ltd. 15FD 11/06/2012 Motherboard: SAMSUNG ELECTRONICS CO., LTD. 700Z3A/700Z4A/700Z5A/700Z5B Processor: Intel(R) Core(TM) i7-2675QM CPU @ 2.20GHz Percentage of memory in use: 60% Total physical RAM: 8105.56 MB Available physical RAM: 3178.18 MB Total Virtual: 15701.71 MB Available Virtual: 9996.34 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:475.76 GB) (Free:4.26 GB) NTFS Drive y: (Files) (Fixed) (Total:455.53 GB) (Free:58.78 GB) NTFS ==================== MBR & Partition Table ==================== ========================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: 27D7BFF6) Partition: GPT. ========================================================== Disk: 1 (MBR Code: Windows 7/8/10) (Size: 7.5 GB) (Disk ID: 74F02DEA) Partition 1: (Not Active) - (Size=7.5 GB) - (Type=73) ==================== End of Addition.txt =======================