Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14.03.2018
Ran by [removed] (31-03-2018 01:00:19)
Running from L:\Downloads
Windows 10 Pro Version 1709 16299.334 (X64) (2018-01-26 11:13:19)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1528506052-2099023066-864732213-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1528506052-2099023066-864732213-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-1528506052-2099023066-864732213-1000 - Administrator - Disabled)
Guest (S-1-5-21-1528506052-2099023066-864732213-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1528506052-2099023066-864732213-1003 - Limited - Enabled)
PC (S-1-5-21-1528506052-2099023066-864732213-1001 - Administrator - Enabled) => C:\Users\PC
WDAGUtilityAccount (S-1-5-21-1528506052-2099023066-864732213-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Absolute Uninstaller 5.3.1.21 (HKLM-x32\...\Absolute Uninstaller) (Version: 5.3.1.21 - Glarysoft Ltd)
adaware antivirus (HKLM\...\{741277F1-ACDE-4C60-8CC3-28C9EF73A0F4}_AdAwareUpdater) (Version: 12.3.909.11573 - adaware)
AdAwareInstaller (HKLM\...\{29A136C6-8DE7-41B4-8344-3D4EC0D7876A}) (Version: 12.3.909.11573 - adaware) Hidden
AdAwareUpdater (HKLM\...\{741277F1-ACDE-4C60-8CC3-28C9EF73A0F4}) (Version: 12.3.909.11573 - adaware) Hidden
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 18.011.20038 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 23.0.0.257 - Adobe Systems Incorporated)
Adobe Bridge CC 2018 (HKLM-x32\...\KBRG_8_0) (Version: 8.0 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.4.1.298 - Adobe Systems Incorporated)
Adobe Lightroom Classic CC (HKLM-x32\...\LTRM_7_0_1) (Version: 7.0.1 - Adobe Systems Incorporated)
Adobe Lightroom Classic CC (HKLM-x32\...\LTRM_7_2) (Version: 7.2 - Adobe Systems Incorporated)
Adobe Photoshop CC 2018 (HKLM-x32\...\PHSP_19_1_2) (Version: 19.1.2 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.5.195 - Adobe Systems, Inc.)
Affinity Photo (HKLM\...\{CBBDEFC9-7345-4077-93AC-905ACF632981}) (Version: 1.6.1.93 - Serif (Europe) Ltd)
AntimalwareEngine (HKLM\...\{0354D65F-3A21-4A6C-BF7C-14069CF15400}) (Version: 3.0.159.0 - adaware) Hidden
Any Video Converter 6.1.4 (HKLM-x32\...\Any Video Converter) (Version: 6.1.4 - Anvsoft)
AOMEI Dynamic Disk Manager Pro Edition (HKLM-x32\...\AOMEI Dynamic Disk Manager Pro Edition_is1) (Version:  - AOMEI Technology Co., Ltd.)
AOMEI Partition Assistant Standard Edition 6.1 (HKLM-x32\...\{02F850ED-FD0E-4ED1-BE0B-54981f5BD3D4}_is1) (Version:  - AOMEI Technology Co., Ltd.)
Apple Application Support (32-bit) (HKLM-x32\...\{D4C80B0C-CF67-43A7-90C3-466853543B54}) (Version: 6.3 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{B2A2E8AF-BC48-4191-B2C4-3846A19835CA}) (Version: 6.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{AA7D90D2-2387-4FA5-A3AF-96811BE49BFD}) (Version: 11.0.5.14 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{19589375-5C58-4AFA-842F-8B34744CCEAD}) (Version: 2.5.0.1 - Apple Inc.)
BitTorrent (HKU\S-1-5-21-1528506052-2099023066-864732213-1001\...\BitTorrent) (Version: 7.10.0.43917 - BitTorrent Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.41 - Piriform)
CoffeeCup Free HTML Editor (HKU\S-1-5-21-1528506052-2099023066-864732213-1001\...\CoffeeCup Free HTML Editor) (Version:  - )
CPUID CPU-Z 1.82.1 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.82.1 - )
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 391.35 - NVIDIA Corporation) Hidden
Dropbox (HKLM-x32\...\Dropbox) (Version: 46.4.65 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.59.1 - Dropbox, Inc.) Hidden
EPSON PhotoQuicker3.5 (HKLM-x32\...\{65F5B7AF-3363-11D7-BB6B-00018021113F}) (Version:  - )
EPSON Print CD (HKLM-x32\...\{FF477885-5EA8-40D0-ADF3-D4C1B86FAEA4}) (Version:  - )
EPSON PRINT Image Framer Tool2.1 (HKLM-x32\...\{23B59ED4-C360-11D7-875B-0090CC005647}) (Version:  - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 65.0.3325.181 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.115 - Google Inc.) Hidden
HandBrake 1.0.0 (HKLM-x32\...\HandBrake) (Version: 1.0.0 - )
HouseCall for Home Networks (HKLM\...\DRScanner) (Version:  - Trend Micro Inc.)
iCloud (HKLM\...\{694E3E02-E14A-4BB2-A970-CF7F017FD5CC}) (Version: 7.3.0.20 - Apple Inc.)
Image Rescue 5 (2.0.2) (HKLM-x32\...\Image Rescue 5_is1) (Version: 2.0.2 - Lexar)
Imagenomic Portraiture 2 Plug-in (build 2341) (HKLM\...\ImagenomicPortraiturePlugin) (Version:  - )
Imaging Edge (Remote/Viewer/Edit) (HKLM\...\{E089C6DA-6FD0-4859-B775-38733C42463B}) (Version: 1.0.01.12080 - Sony Corporation)
Intel(R) Chipset Device Software (HKLM-x32\...\{4a87bd28-a855-4a8d-b133-60ca8ccffd30}) (Version: 10.0.17 - Intel(R) Corporation) Hidden
IrfanView 4.51 (32-bit) (HKLM-x32\...\IrfanView) (Version: 4.51 - Irfan Skiljan)
IrfanView 4.51 (64-bit) (HKLM\...\IrfanView64) (Version: 4.51 - Irfan Skiljan)
iTunes (HKLM\...\{7EE6E263-19DA-4A33-BB8C-9BDC12BA1918}) (Version: 12.7.3.46 - Apple Inc.)
Java 8 Update 161 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180161F0}) (Version: 8.0.1610.12 - Oracle Corporation)
Loxley Designer PRO (HKU\S-1-5-21-1528506052-2099023066-864732213-1001\...\Loxley Designer PRO) (Version: Loxley Designer PRO 2015.2.0 - Loxley Colour)
Malwarebytes version 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes)
MergeModule_x64 (HKLM\...\{12DCC5A7-0100-4433-B4FF-217A3C5DC83B}) (Version: 9.3.00 - Sony Corporation) Hidden
MergeModule_x86 (HKLM-x32\...\{DD7721BB-CF1C-4DC9-AD87-8D5FB75413B7}) (Version: 9.3.00 - Sony Corporation) Hidden
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1528506052-2099023066-864732213-1001\...\OneDriveSetup.exe) (Version: 18.025.0204.0009 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.12.25810 (HKLM-x32\...\{e2ee15e2-a480-4bc5-bfb7-e9803d1d9823}) (Version: 14.12.25810.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.12.25810 (HKLM-x32\...\{56e11d69-7cc9-40a5-a4f9-8f6190c4d84d}) (Version: 14.12.25810.0 - Microsoft Corporation)
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{EB3DF0F0-0525-4C5A-A2F8-DEC868A3075D}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 52.0.1 (x86 en-GB) (HKLM-x32\...\Mozilla Firefox 52.0.1 (x86 en-GB)) (Version: 52.0.1 - Mozilla)
Mozilla Firefox 57.0 (x64 en-GB) (HKU\S-1-5-21-1528506052-2099023066-864732213-1001\...\Mozilla Firefox 57.0 (x64 en-GB)) (Version: 57.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.0.1.6284 - Mozilla)
MUSTEK 1248UB V1.2 (HKLM-x32\...\{514C5488-192E-4C40-ACE5-CD28ECEED0E3}) (Version: 1.00.0000 - mustek) Hidden
MUSTEK 1248UB V1.2 (HKLM-x32\...\InstallShield_{514C5488-192E-4C40-ACE5-CD28ECEED0E3}) (Version: 1.00.0000 - mustek)
Neat Video v4.7.0 Demo plug-in for Vegas (HKLM\...\Neat Video v4 plug-in for Vegas_is1) (Version:  - Neat Video team, ABSoft)
Nik Collection (HKLM-x32\...\Nik Collection) (Version: 1.2.11 - Google)
NVIDIA 3D Vision Controller Driver 390.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 390.41 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 391.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 391.35 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.13.1.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.13.1.30 - NVIDIA Corporation)
NVIDIA Graphics Driver 391.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 391.35 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.36.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.36.6 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
Opanda IExif 2.3 (HKLM-x32\...\Opanda IExif_is1) (Version: 2.3 - Opanda Studio)
OpenVPN 2.3.12-I602  (HKLM-x32\...\OpenVPN) (Version: 2.3.12-I602 - )
Paltalk (HKLM-x32\...\Paltalk) (Version:  - )
PIE Free v6.99 (HKLM-x32\...\PIE_is1) (Version:  - Picmeta Systems)
PIF DESIGNER2.1 (HKLM-x32\...\{23B59B9F-C360-11D7-875B-0090CC005647}) (Version:  - )
PlayMemories Home (HKLM-x32\...\{94F4815B-755A-4FFA-AFDC-EE8FE776981E}) (Version: 5.2.01.06240 - Sony Corporation)
PMB_ModeEditor (HKLM-x32\...\{D5318740-B088-4B1A-B6A8-1F90A172CCD1}) (Version: 9.3.00 - Sony Corporation) Hidden
PMB_ServiceUploader (HKLM-x32\...\{E7FDF11C-12BB-4D6F-9B6D-F8E488C776DC}) (Version: 10.2.01 - Sony Corporation) Hidden
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
RealDownloader (HKLM-x32\...\{F735970C-1049-440A-8BC1-00BFBC196F22}) (Version: 18.1.11.204 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (HKLM-x32\...\{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}) (Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (HKLM-x32\...\{AAECF7BA-E83B-4A10-87EA-DE0B333F8734}) (Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM-x32\...\RealPlayer 18.1) (Version: 18.1.11 - RealNetworks)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.7.107.2016 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7572 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (HKLM-x32\...\{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}) (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Remote Camera Control (HKLM-x32\...\{9D7FA91A-4805-4F32-964E-577C8DCBF1CF}) (Version: 3.7.00000 - Sony Corporation)
Revo Uninstaller 2.0.5 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.5 - VS Revo Group, Ltd.)
Saal Design Software UK (HKLM-x32\...\{4AE1EBDA-46D9-85D3-7A84-DBABFC472AE6}) (Version: 4.0 - Saal Digital Fotoservice GmbH) Hidden
Saal Design Software UK (HKLM-x32\...\SaalDesignSoftwareUK) (Version: 4.0 - Saal Digital Fotoservice GmbH)
Samsung Kies3 (HKLM-x32\...\{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16084.2 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16084.2 - Samsung Electronics Co., Ltd.)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.63.0 - Samsung Electronics Co., Ltd.)
ScanToWeb (HKLM-x32\...\{EBAE381B-60A6-4863-AA9F-FCAB755BC9E5}) (Version:  - )
Seagate Dashboard (HKLM-x32\...\{EA266F00-A8E7-43A0-8DED-FBFE3F076934}) (Version: 4.9.2.0 - Seagate)
Security Task Manager 2.1i (HKLM-x32\...\Security Task Manager) (Version: 2.1i - Neuber Software)
Smart Switch (HKLM-x32\...\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.18014.6 - Samsung Electronics Co., Ltd.) Hidden
Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.18014.6 - Samsung Electronics Co., Ltd.)
Sony RAW Driver (HKLM-x32\...\{166FCF01-AC98-4288-A01C-90BEB808C059}) (Version: 2.0.00.08130 - Sony Corporation)
Spyder5Elite (HKLM-x32\...\Spyder5Elite) (Version:  - )
SpyderCheckr (HKLM-x32\...\SpyderCheckr) (Version:  - )
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
TinEye Internet Explorer plugin 1.2 (HKLM-x32\...\{AD1C7ACE-30DC-4107-B6A7-9495D12DC846}) (Version: 1.2.0 - Idée Inc.)
Trend Micro RUBotted 2.0 Beta (HKLM-x32\...\{54D4EAF5-4C80-4878-B4AC-5AE454A02E3C}_is1) (Version: 2.0.0.1034 - Trend Micro, Inc.)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{AC0D130B-8809-4125-811F-667893B90644}) (Version: 2.11.0.0 - Microsoft Corporation)
UpdateAssistant (HKLM-x32\...\{7C070E60-8769-4763-BBD8-7537A28A60D4}) (Version: 1.10.0.0 - Microsoft Corporation) Hidden
UpdateService (HKLM-x32\...\{E3AE96D6-E196-45B4-AF62-2B41998B9E37}) (Version: 1.0.0 - RealNetworks, Inc.) Hidden
Vanilla Photobooks (HKU\S-1-5-21-1528506052-2099023066-864732213-1001\...\Vanilla Photobooks) (Version: Vanilla Photobooks 2015.2.0 - Vanilla Photobooks)
vc2012_redist (HKLM-x32\...\{9402AEF2-5981-4097-8BE2-6501DAC4DBFD}) (Version: 1.0.0.0 - Realnetworks) Hidden
VEGAS Pro 14.0 (64-bit) (HKLM\...\{4C79D80F-79F9-11E6-8402-BB95F5A309BD}) (Version: 14.0.161 - VEGAS)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.6 - VideoLAN)
vs2015_redist x64 (HKLM\...\{EAED8692-5B63-4665-B857-D626633691DA}) (Version: 1.0.0.0 - Realnetworks) Hidden
vs2015_redist x86 (HKLM-x32\...\{BD46163A-0331-4A61-B65A-7B66D7C93F8E}) (Version: 1.0.0.0 - Realnetworks) Hidden
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
Wacom (HKLM\...\Pen Tablet Driver) (Version: 5.3.5-3 - Wacom Technology Corp.)
WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
WhatsApp (HKU\S-1-5-21-1528506052-2099023066-864732213-1001\...\WhatsApp) (Version: 0.2.8691 - WhatsApp)
Windowed 1.3.0 (only current user) (HKU\S-1-5-21-1528506052-2099023066-864732213-1001\...\44081872-7a9e-545d-b8c9-088e8e2737e3) (Version: 1.3.0 - Windowed.io)
Windows Driver Package - Leaf Imaging Ltd. Image  (12/03/2014 1.2.0.0) (HKLM\...\B758007C752D28F7C3542875CEEBDADCAE5941AE) (Version: 12/03/2014 1.2.0.0 - Leaf Imaging Ltd.)
Windows Driver Package - Phase One / Mamiya V-Grip USB Driver (12/03/2014 1.2.0.0) (HKLM\...\3F504CC0B024052107934E093CC26DA720256A7A) (Version: 12/03/2014 1.2.0.0 - Phase One / Mamiya)
Windows Driver Package - Phase One A/S (WinUSB) USBDevice  (12/03/2014 1.13.0.0) (HKLM\...\7C6570ABBEB2F08EFBC23ED7925AE72DA6167BD8) (Version: 12/03/2014 1.13.0.0 - Phase One A/S)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - CACE Technologies)
WinRAR 5.31 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
Wise Registry Cleaner 9.5.5 (HKLM-x32\...\Wise Registry Cleaner_is1) (Version: 9.5.5 - WiseCleaner.com, Inc.)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1528506052-2099023066-864732213-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-1BA683D7399C}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => No File
CustomCLSID: HKU\S-1-5-21-1528506052-2099023066-864732213-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
ShellIconOverlayIdentifiers: [   AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-02-10] ()
ShellIconOverlayIdentifiers: [   AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-02-10] ()
ShellIconOverlayIdentifiers: [   AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-02-10] ()
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-28] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-28] (Dropbox, Inc.)
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-02-10] ()
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-28] (Dropbox, Inc.)
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} =>  -> No File
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2018-01-10] (Apple Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-02-04] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-02-04] (Alexander Roshal)
ContextMenuHandlers2: [AdAwareContextMenu] -> {5B64240D-5B36-4B9F-A75F-4925B6A53D5B} => J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareShellExtension.dll [2018-02-24] ()
ContextMenuHandlers2: [Auslogics Disk Defrag Shell Context Menu 7.x] -> {CC89327D-D094-5D27-82CB-F989EE26FC51} =>  -> No File
ContextMenuHandlers2: [Auslogics Disk Defrag Shell Context Menu 8.x] -> {CC89327D-D094-89B3-82CB-F989EE26FC51} =>  -> No File
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} =>  -> No File
ContextMenuHandlers3: [AdAwareContextMenu] -> {5B64240D-5B36-4B9F-A75F-4925B6A53D5B} => J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareShellExtension.dll [2018-02-24] ()
ContextMenuHandlers3: [Auslogics Disk Defrag Shell Context Menu 7.x] -> {CC89327D-D094-5D27-82CB-F989EE26FC51} =>  -> No File
ContextMenuHandlers3: [Auslogics Disk Defrag Shell Context Menu 8.x] -> {CC89327D-D094-89B3-82CB-F989EE26FC51} =>  -> No File
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => J:\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers3-x32: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => c:\program files (x86)\real\realplayer\RPDS\Bin64\rpcontextmenu.dll [2018-03-15] (RealNetworks, Inc.)
ContextMenuHandlers4: [Auslogics Disk Defrag Shell Context Menu 8.x] -> {CC89327D-D094-89B3-82CB-F989EE26FC51} =>  -> No File
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-28] (Dropbox, Inc.)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2018-03-28] (Dropbox, Inc.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2018-03-24] (NVIDIA Corporation)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-02-10] ()
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} =>  -> No File
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => J:\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-02-04] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-02-04] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {02208FB0-144B-418D-9BDF-6DA943CD5B84} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-01-14] (Dropbox, Inc.)
Task: {07525F32-AD20-405F-924D-14A06838A840} - System32\Tasks\gaskeptical_bessskeptical_bess => C:\Users\PC\AppData\Local\racetracks.exe
Task: {0949CAD8-6B46-4334-9047-02C2BFA54DD6} - System32\Tasks\S-1-5-21-1528506052-2099023066-864732213-1001\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe [2017-09-29] (Microsoft Corporation)
Task: {0B84A8D9-39A8-472B-BF51-6BAC5647B316} - System32\Tasks\PC => C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\NBCore.exe [2017-09-16] (Seagate Technology LLC)
Task: {0F249BFA-E397-4A75-808C-7EAC6DFC78A0} - System32\Tasks\ebrahim fleisch playground => C:\Users\PC\AppData\Local\Edlin.exe
Task: {1A8C8DC8-1F70-4DC5-A9EB-9E459B39431A} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2018-03-14] (NVIDIA Corporation)
Task: {22E33CAA-F98D-44AC-AD06-48F4191C379B} - System32\Tasks\tecum-brownian => C:\Program Files (x86)\propulsive\racetracks.exe
Task: {2678611C-57CE-4D8D-B8A7-DB2B44DD389F} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2018-03-14] (NVIDIA Corporation)
Task: {2A8AC6BA-AF93-419B-B4D0-57BE6172981C} - System32\Tasks\gaebrahim fleisch playgroundebrahim fleisch playground => C:\Users\PC\AppData\Local\Edlin.exe
Task: {2F481664-6DD3-4A11-89D0-60F99C9826F6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MpCmdRun.exe [2018-03-01] (Microsoft Corporation)
Task: {2F8678F8-3F9E-4250-8D84-09448C4E93B0} - System32\Tasks\PC Merge => C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\NBCore.exe [2017-09-16] (Seagate Technology LLC)
Task: {30375A84-04BA-4AEF-9227-1943AA08E970} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_29_0_0_113_Plugin.exe [2018-03-14] (Adobe Systems Incorporated)
Task: {3A8029C2-07AC-468C-9A1E-2A3C38104E00} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MpCmdRun.exe [2018-03-01] (Microsoft Corporation)
Task: {3B682A38-8A27-4D0E-8AC0-168BED4C9A38} - System32\Tasks\skeptical_bess => C:\Users\PC\AppData\Local\racetracks.exe
Task: {407621A0-B142-4469-AB29-77ABBD82925E} - System32\Tasks\Seagate_Install_Launch => C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Dashboard.exe [2017-09-16] (Seagate Technology LLC)
Task: {44AD686E-B7D8-4D33-AAA5-290708B3B572} - System32\Tasks\gathree slurrythree slurry => C:\Program Files (x86)\Hutchins\racetracks.exe
Task: {46956450-9A7A-469D-A30B-B96C51EA60D4} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-03-14] (NVIDIA Corporation)
Task: {47FABED1-AD3E-40CB-AF22-BE2D89E3BD5F} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-03-14] (NVIDIA Corporation)
Task: {5971A6FC-8292-4B02-AF06-2A6A6D54E109} - System32\Tasks\gatecum-browniantecum-brownian => C:\Program Files (x86)\propulsive\racetracks.exe
Task: {611807AD-3E23-4A65-8F03-84885F792139} - System32\Tasks\RealDownloader Update Check => c:\program files (x86)\real\RealDownloader\downloader2.exe [2018-02-28] ()
Task: {6EF69D73-D5E3-4FDB-88F7-06AE13338C71} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {6F26B55A-7F5A-4547-A207-AB991E78A737} - \Auslogics\Disk Defrag\Scheduled Defragmentation -> No File <==== ATTENTION
Task: {741BDABB-90B4-4C16-9CB4-D74E97B8BC19} - System32\Tasks\PC DBAgent 2 0 => C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\DBAgent.exe [2017-09-16] (Seagate Technology LLC)
Task: {7BD5421C-3A70-4650-92AE-2DDACD2C4CFA} - System32\Tasks\WiseCleaner\WRCSkipUAC => J:\Wise Registry Cleaner\WiseRegCleaner.exe [2018-03-14] (WiseCleaner.com)
Task: {7C6F4B7A-1FB4-4988-9BB6-3D44F72829EF} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1528506052-2099023066-864732213-1001 => C:\program files (x86)\real\RealDownloader\RealUpgrade.exe [2018-02-28] (RealNetworks, Inc.)
Task: {7E109EAD-0283-45ED-B984-B5A15CEA38DE} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2018-03-14] (NVIDIA Corporation)
Task: {865BDBEA-CFB2-4822-9BDC-1BB19227ABEB} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-03-06] (Piriform Ltd)
Task: {921DDA1D-EC43-484A-A02C-2E0B16B7257D} - System32\Tasks\[removed] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2018-01-05] (Adobe Systems, Incorporated)
Task: {9B9857A6-54A0-4081-BD64-FFB86A20B6E5} - System32\Tasks\ganutrianutria => C:\Program Files (x86)\Indefinitely\Edlin.exe
Task: {9FB56627-67DA-40EB-8BB7-944228730C63} - System32\Tasks\fisher_goldfield => C:\Program Files (x86)\Hutchins\Edlin.exe
Task: {A320767E-5C01-4B17-A806-9B40887DC987} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-03-29] (Google Inc.)
Task: {A86E6E9B-78EC-4792-AFF0-D08114C03DD3} - System32\Tasks\0615pizUpdateInfo => C:\ProgramData\Avg_Update_0615piz\0615piz_AVG-Secure-Search-Update.exe
Task: {AD9693A8-3B85-4C1E-BB82-571D806CE83D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-10-12] (Apple Inc.)
Task: {C5EDF496-36CF-4ADC-B5FC-96A222815574} - System32\Tasks\gafisher_goldfieldfisher_goldfield => C:\Program Files (x86)\Hutchins\Edlin.exe
Task: {CD5A1121-F264-41AC-B7AF-C9CE8B924897} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-01-14] (Dropbox, Inc.)
Task: {CFABA6A9-E836-4328-83A0-6DB3A58452E7} - System32\Tasks\[removed] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated)
Task: {D2B414B2-51FF-4F4D-B96C-E8022E47F7F2} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-03-14] (NVIDIA Corporation)
Task: {D3DDF9A2-FEDD-4C27-9987-06F45F114D76} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-03-14] (NVIDIA Corporation)
Task: {D8BFD21F-1E9F-4F86-AF36-743B0967B6A4} - System32\Tasks\nutria => C:\Program Files (x86)\Indefinitely\Edlin.exe
Task: {D9D1FA35-8AE8-4752-A222-61A4D9A0F78E} - System32\Tasks\1215avzUpdateInfo => C:\ProgramData\Avg_Update_1215avz\1215avz_AVG-Secure-Search-Update.exe [2015-11-22] ()
Task: {DA8EF0C2-6397-4648-B5B0-24D6324E4E81} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MpCmdRun.exe [2018-03-01] (Microsoft Corporation)
Task: {E362C12A-3959-4390-A671-750EBFF72366} - System32\Tasks\three slurry => C:\Program Files (x86)\Hutchins\racetracks.exe
Task: {E5068724-6256-4668-9331-7611D169407A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-03-06] (Piriform Ltd)
Task: {E66EFE34-B1DE-4BF2-AF51-25996150B982} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-03-26] (Adobe Systems Incorporated)
Task: {E72CE348-906C-4E92-893D-EFCA826F6D5A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18022-0\MpCmdRun.exe [2018-03-01] (Microsoft Corporation)
Task: {EDAF0D51-EB78-4E29-A449-F7194629F15F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-03-29] (Google Inc.)
Task: {EDD67559-8E4C-454C-96DB-25534B52A2E3} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1528506052-2099023066-864732213-1001 => C:\program files (x86)\real\RealDownloader\RealUpgrade.exe [2018-02-28] (RealNetworks, Inc.)
Task: {F52F7FAF-C723-4E1F-9D9B-931C120AA8E5} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2018-03-13] (Microsoft Corporation)
Task: {F7DFE93C-6045-4E09-A4E5-55B1BADF918B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-02-09] (Adobe Systems Incorporated)
Task: {FA8761AD-AB27-42EA-8CB9-DE57FFF6A907} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-03-14] (NVIDIA Corporation)
Task: {FCF8F712-D860-4BF9-AF38-56745B8D4EB4} - \Auslogics\Disk Defrag\Start Disk Defrag On PC Logon -> No File <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DRScanner Startup.job => C:\Program Files (x86)\Trend Micro\DRScanner\DRScanner.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


Shortcut: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paltalk\Remove settings.lnk -> C:\Program Files (x86)\Paltalk\ng_clean_settings.bat ()

==================== Loaded Modules (Whitelisted) ==============

2017-09-29 14:41 - 2017-09-29 14:41 - 000184432 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2018-01-19 06:03 - 2018-03-24 02:19 - 000544192 _____ () C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem\DisplayDriverAnalyzer\_DisplayDriverCrashAnalyzer64.dll
2017-11-30 19:54 - 2017-11-30 19:54 - 000088888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2018-01-05 01:13 - 2018-01-05 01:13 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2018-01-26 12:05 - 2015-09-02 13:12 - 000936728 ____N () C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
2016-12-27 20:30 - 2018-03-14 14:05 - 001267648 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-11-21 17:55 - 2017-12-10 02:24 - 002301384 _____ () J:\ANTI-MALWARE\SelfProtectionSdk.dll
2018-02-24 22:52 - 2018-02-24 22:52 - 000587832 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareService.exe
2018-02-24 22:55 - 2018-02-24 22:55 - 000125400 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\boost_thread-vc140-mt-1_65_1.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 000067544 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\boost_date_time-vc140-mt-1_65_1.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 000032728 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\boost_system-vc140-mt-1_65_1.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 000790488 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\boost_log-vc140-mt-1_65_1.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 000147416 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\boost_filesystem-vc140-mt-1_65_1.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 000526296 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\boost_locale-vc140-mt-1_65_1.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 000039896 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\boost_chrono-vc140-mt-1_65_1.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 011660248 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\rpc_server.dll
2018-02-24 22:56 - 2018-02-24 22:56 - 003717592 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\RCF.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 001024472 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\boost_regex-vc140-mt-1_65_1.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 001228760 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareActivation.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 002846680 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareApplicationUpdater.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 000861656 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareGamingMode.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 000123352 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareReset.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 000145368 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareTime.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 001049048 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareDefinitionsUpdater.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 000926680 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareDefinitionsUpdaterScheduler.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 001466328 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareIgnoreList.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 000312792 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareQuarantine.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 001732568 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareAntiMalwareEngine.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 001229272 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareScannerHistory.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 001574872 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareScanner.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 000039384 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\boost_timer-vc140-mt-1_65_1.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 001052632 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareScannerScheduler.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 001195992 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareRealTimeProtection.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 003636696 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareIncompatibles.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 001598424 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareAntiSpam.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 001531352 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareAntiPhishing.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 003574232 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareParentalControl.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 003656152 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareWebProtection.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 001683416 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareEmailProtection.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 000072664 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\boost_iostreams-vc140-mt-1_65_1.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 001789400 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareNetworkProtection.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 001220568 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwarePromo.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 000479192 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareFeedback.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 003230168 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareThreatWorkAlliance.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 000720344 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwarePinCode.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 001221592 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareNotice.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 001674200 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareAvcEngine.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 001494488 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareRealTimeProtectionHistory.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 000845272 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareStatistics.dll
2018-02-10 02:12 - 2018-02-10 02:12 - 000614856 _____ () C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll
2018-03-13 18:22 - 2018-02-22 01:26 - 011044864 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2018-03-13 18:22 - 2018-02-22 01:21 - 001804288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-09-08 22:53 - 2014-08-19 20:12 - 001356568 _____ () C:\Program Files\Tablet\Pen\libxml2.dll
2018-02-24 22:55 - 2018-02-24 22:55 - 004745688 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\AdAwareTray.exe
2018-02-24 22:55 - 2018-02-24 22:55 - 011753944 _____ () J:\adaware\adaware antivirus\adaware antivirus\12.3.909.11573\rpc_client.dll
2018-02-27 21:08 - 2018-02-27 21:08 - 034523072 _____ () C:\Program Files (x86)\Adobe\Adobe Sync\Coresync\Coresync.exe
2018-03-30 01:04 - 2018-03-20 07:00 - 004435288 _____ () C:\Program Files (x86)\Google\Chrome\Application\65.0.3325.181\libglesv2.dll
2018-03-30 01:04 - 2018-03-20 07:00 - 000099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\65.0.3325.181\libegl.dll
2018-02-28 13:58 - 2018-02-28 13:58 - 001270560 _____ () c:\program files (x86)\real\RealDownloader\downloader2.exe
2018-03-31 00:51 - 2018-03-31 00:51 - 000034960 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\PEbiosinterface32.dll
2018-01-26 12:05 - 2015-09-02 13:12 - 000104448 ____N () C:\Program Files (x86)\ASUS\AXSP\1.01.02\ATKEX.dll
2018-03-30 13:54 - 2010-08-24 19:06 - 000085840 _____ () C:\Program Files (x86)\Trend Micro\RUBotted\hc_help.dll
2017-09-16 11:53 - 2017-09-16 11:53 - 000729792 _____ () C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\PocoNet.dll
2017-02-09 22:35 - 2018-03-14 14:05 - 001041344 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2018-02-14 06:03 - 2018-02-14 06:03 - 067115984 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\libcef.dll
2016-05-31 17:40 - 2017-08-17 15:54 - 001865216 _____ () J:\Spyder5Elite\Utility\SpyderUtility Libs\RBGUIFramework.dll
2016-05-31 17:40 - 2017-08-17 15:54 - 000096256 _____ () J:\Spyder5Elite\Utility\SpyderUtility Libs\Appearance Pak.dll
2016-05-31 17:40 - 2017-08-17 15:54 - 000088576 _____ () J:\Spyder5Elite\Utility\SpyderUtility Libs\Crypto.dll
2016-05-31 17:40 - 2017-08-17 15:54 - 000013824 _____ () J:\Spyder5Elite\Utility\SpyderUtility Libs\Internet Encodings.dll
2016-05-31 17:40 - 2017-08-17 15:54 - 000090112 _____ () J:\Spyder5Elite\Utility\SpyderUtility Libs\RegEx.dll
2016-05-31 17:40 - 2017-08-17 15:54 - 005340672 _____ () J:\Spyder5Elite\Utility\SpyderUtility Libs\RBScript.dll
2016-05-31 17:40 - 2017-08-17 15:54 - 000031744 _____ () J:\Spyder5Elite\Utility\SpyderUtility Libs\Shell.dll
2016-05-31 17:40 - 2017-08-17 15:54 - 000293376 _____ () J:\Spyder5Elite\Utility\SpyderUtility Libs\XML.dll
2016-05-31 17:40 - 2017-08-17 15:54 - 000316928 _____ () J:\Spyder5Elite\Utility\SpyderUtility Libs\CGamma.dll
2016-05-31 17:40 - 2017-08-17 15:54 - 000095232 _____ () J:\Spyder5Elite\Utility\SpyderUtility Libs\CSensor.dll
2017-11-30 19:55 - 2017-11-30 19:55 - 000076088 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2018-01-05 01:14 - 2018-01-05 01:14 - 001042232 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2018-01-30 09:38 - 2018-01-30 09:38 - 000118272 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\fs-ext\build\Release\fs-ext.node
2018-01-30 09:39 - 2018-01-30 09:39 - 000214528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
2018-01-30 09:38 - 2018-01-30 09:38 - 000117248 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ref\build\Release\binding.node
2018-01-30 09:38 - 2018-01-30 09:38 - 000125952 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ffi\build\Release\ffi_bindings.node
2018-02-14 06:26 - 2018-02-14 06:26 - 000099800 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin.dll
2018-01-30 09:38 - 2018-01-30 09:38 - 000086528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\idle-gc\build\Release\idle-gc.node
2018-02-14 06:20 - 2018-02-14 06:20 - 000125904 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\fs-ext\build\Release\fs-ext.node
2018-02-14 06:20 - 2018-02-14 06:20 - 000125392 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ref\build\Release\binding.node
2018-02-14 06:20 - 2018-02-14 06:20 - 000133072 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\ffi\build\Release\ffi_bindings.node
2018-02-14 06:20 - 2018-02-14 06:20 - 000222160 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
2018-02-14 06:20 - 2018-02-14 06:20 - 000099792 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin.dll
2018-02-14 06:20 - 2018-02-14 06:20 - 000106456 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\bufferutil\build\Release\bufferutil.node
2018-02-14 06:20 - 2018-02-14 06:20 - 000094168 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\js\node_modules\idle-gc\build\Release\idle-gc.node

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\73816236.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\adawareantivirusservice => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\73816236.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\adawareantivirusservice => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-1528506052-2099023066-864732213-1001\...\localhost -> localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1528506052-2099023066-864732213-1001\Control Panel\Desktop\\Wallpaper -> M:\2012\20Jul2012 Chinook Helicopter @ Nottingham Uni\Chinook2 B&W.jpg-07576.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKLM\...\StartupApproved\Run: => "NvBackend"
HKLM\...\StartupApproved\Run: => "ShadowPlay"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run: => "RealProtect"
HKLM\...\StartupApproved\Run32: => "RealDownloader"
HKLM\...\StartupApproved\Run32: => "Trend Micro RUBotted V2.0 Beta"
HKLM\...\StartupApproved\Run32: => "Dropbox"
HKLM\...\StartupApproved\Run32: => "unpluggedunplugged"
HKLM\...\StartupApproved\Run32: => "unpluggedtete"
HKLM\...\StartupApproved\Run32: => "unplugged"
HKU\S-1-5-21-1528506052-2099023066-864732213-1001\...\StartupApproved\StartupFolder: => "Watch.lnk"
HKU\S-1-5-21-1528506052-2099023066-864732213-1001\...\StartupApproved\StartupFolder: => "83e76.lnk"
HKU\S-1-5-21-1528506052-2099023066-864732213-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1528506052-2099023066-864732213-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1528506052-2099023066-864732213-1001\...\StartupApproved\Run: => "SmartSwitchPDLR.exe"
HKU\S-1-5-21-1528506052-2099023066-864732213-1001\...\StartupApproved\Run: => "iCloudServices"
HKU\S-1-5-21-1528506052-2099023066-864732213-1001\...\StartupApproved\Run: => "ziggurat"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [TCP Query User{D182E0D0-5288-4F8C-906D-86322CF92744}C:\program files (x86)\seagate\seagate dashboard 2.0\dashboard.exe] => (Allow) C:\program files (x86)\seagate\seagate dashboard 2.0\dashboard.exe
FirewallRules: [UDP Query User{A312A10D-0B17-4287-95A2-AEA6554F367E}C:\program files (x86)\seagate\seagate dashboard 2.0\dashboard.exe] => (Allow) C:\program files (x86)\seagate\seagate dashboard 2.0\dashboard.exe
FirewallRules: [{D7724E10-7855-43F8-B1F2-917C1CBF3E17}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{09D6E6C1-37B6-479D-A12F-6C770109CAC4}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{660E10B5-ED43-46BC-A499-8BF6003FA1F4}] => (Allow) LPort=8888

==================== Restore Points =========================


==================== Faulty Device Manager Devices =============

Name: Wireless Device
Description: Wireless Device
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: WUDFRd
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: NDIS Virtual Network Adapter Enumerator
Description: NDIS Virtual Network Adapter Enumerator
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: NdisVirtualBus
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/31/2018 12:37:16 AM) (Source: Microsoft Security Client) (EventID: 5000) (User: )
Description: Event-ID 5000

Error: (03/31/2018 12:37:16 AM) (Source: Microsoft Security Client) (EventID: 5000) (User: )
Description: Event-ID 5000

Error: (03/31/2018 12:37:04 AM) (Source: Microsoft Security Client) (EventID: 5000) (User: )
Description: Event-ID 5000

Error: (03/31/2018 12:37:04 AM) (Source: Microsoft Security Client) (EventID: 5000) (User: )
Description: Event-ID 5000

Error: (03/30/2018 11:46:40 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: vegas140.exe, version: 14.0.0.161, time stamp: 0x57d865dd
Faulting module name: mc_bc_dec_avc.dll, version: 9.10.12.8993, time stamp: 0x547ed345
Exception code: 0xc0000005
Fault offset: 0x0000000000230867
Faulting process ID: 0xaf0
Faulting application start time: 0x01d3c87878c380df
Faulting application path: J:\Vegas Pro\vegas140.exe
Faulting module path: J:\Vegas Pro\FileIO Plug-Ins\mxfxavc\mc_bc_dec_avc.dll
Report ID: d389112c-a41c-4977-857d-87e252e881db
Faulting package full name: 
Faulting package-relative application ID:

Error: (03/30/2018 10:58:13 PM) (Source: NVIDIA OpenGL Driver) (EventID: 1) (User: )
Description: The GPU has been disconnected and this application may become unresponsive.

Error code: 10
 (pid=11076 tid=14940 photoshop.exe 64bit)

Visit http://www.nvidia.com/page/support.html for more information.

Error: (03/30/2018 03:41:01 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Edlin.exe version 1.2.1.32 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 604c

Start Time: 01d3c82d93f1fb9f

Termination Time: 4294967295

Application Path: C:\Users\PC\AppData\Local\Edlin.exe

Report Id: 16528ad0-cecc-45a4-8c31-922626614bff

Faulting package full name: 

Faulting package-relative application ID:

Error: (03/30/2018 03:40:55 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Edlin.exe version 1.2.1.32 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 7c78

Start Time: 01d3c82f64dca60d

Termination Time: 4294967295

Application Path: C:\Users\PC\AppData\Local\Edlin.exe

Report Id: bb7e5a65-824a-4851-85ed-11ff6f71631f

Faulting package full name: 

Faulting package-relative application ID:


System errors:
=============
Error: (03/31/2018 12:59:15 AM) (Source: DCOM) (EventID: 10010) (User: JOHNS-COMPUTER)
Description: The server {9E175B6D-F52A-11D8-B9A5-505054503030} did not register with DCOM within the required timeout.

Error: (03/31/2018 12:57:15 AM) (Source: DCOM) (EventID: 10010) (User: JOHNS-COMPUTER)
Description: The server {9E175B6D-F52A-11D8-B9A5-505054503030} did not register with DCOM within the required timeout.

Error: (03/31/2018 12:56:30 AM) (Source: DCOM) (EventID: 10016) (User: JOHNS-COMPUTER)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 and APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 to the user JOHNS-COMPUTER\PC SID (S-1-5-21-1528506052-2099023066-864732213-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (03/31/2018 12:55:15 AM) (Source: DCOM) (EventID: 10010) (User: JOHNS-COMPUTER)
Description: The server {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} did not register with DCOM within the required timeout.

Error: (03/31/2018 12:53:15 AM) (Source: DCOM) (EventID: 10010) (User: JOHNS-COMPUTER)
Description: The server {E48EDA45-43C6-48E0-9323-A7B2067D9CD5} did not register with DCOM within the required timeout.

Error: (03/31/2018 12:51:17 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Diagnostic Service Host service failed to start due to the following error: 
A privilege that the service requires to function properly does not exist in the service account configuration.
You may use the Services Microsoft Management Console (MMC) snap-in (services.msc) and the Local Security Settings MMC snap-in (secpol.msc) to view the service configuration and the account configuration.

Error: (03/31/2018 12:51:07 AM) (Source: BugCheck) (EventID: 1001) (User: )
Description: The computer has rebooted from a bugcheck.  The bugcheck was: 0x000000d1 (0xffff93804ab4f010, 0x00000000000000ff, 0x0000000000000000, 0xfffff80f4c8195ae). A dump was saved in: C:\WINDOWS\MEMORY.DMP. Report Id: ca9d4afb-78d4-491d-becc-d2c1f578673a.

Error: (03/31/2018 12:51:02 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The WdiServiceHost service failed to start due to the following error: 
A privilege that the service requires to function properly does not exist in the service account configuration.
You may use the Services Microsoft Management Console (MMC) snap-in (services.msc) and the Local Security Settings MMC snap-in (secpol.msc) to view the service configuration and the account configuration.


Windows Defender:
===================================
Date: 2018-03-26 15:14:21.271
Description: 
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Tiggre!rfn&threatid=2147723625&enterprise=0
Name: Trojan:Win32/Tiggre!rfn
ID: 2147723625
Severity: Severe
Category: Trojan
Path: file:_C:\Program Files (x86)\foldershare\uninstaller.exe
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: Real-Time Protection
Process Name: C:\Windows\System32\SearchProtocolHost.exe
Signature Version: AV: 1.263.1153.0, AS: 1.263.1153.0, NIS: 119.0.0.0
Engine Version: AM: 1.1.14600.4, NIS: 2.1.14600.4

Date: 2018-03-26 15:14:21.157
Description: 
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Tiggre!rfn&threatid=2147723625&enterprise=0
Name: Trojan:Win32/Tiggre!rfn
ID: 2147723625
Severity: Severe
Category: Trojan
Path: file:_C:\Program Files (x86)\foldershare\uninstaller.exe;regkey:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\foldershare;uninstall:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\foldershare
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: Real-Time Protection
Process Name: C:\Users\PC\AppData\Local\Temp\is-R8J51.tmp\jfk0021.exe
Signature Version: AV: 1.263.1153.0, AS: 1.263.1153.0, NIS: 119.0.0.0
Engine Version: AM: 1.1.14600.4, NIS: 2.1.14600.4

Date: 2018-03-26 15:14:21.156
Description: 
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/Soctuseer!excl&threatid=237119&enterprise=0
Name: BrowserModifier:Win32/Soctuseer!excl
ID: 237119
Severity: High
Category: Browser Modifier
Path: regkeyvalue:_HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\\c:\program files\37c047741e4f062afce645cc04cec533\
Detection Origin: Unknown
Detection Type: Concrete
Detection Source: System
Process Name: Unknown
Signature Version: AV: 1.263.1153.0, AS: 1.263.1153.0, NIS: 119.0.0.0
Engine Version: AM: 1.1.14600.4, NIS: 2.1.14600.4

Date: 2018-03-26 15:13:39.531
Description: 
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Tiggre!rfn&threatid=2147723625&enterprise=0
Name: Trojan:Win32/Tiggre!rfn
ID: 2147723625
Severity: Severe
Category: Trojan
Path: file:_C:\Program Files (x86)\foldershare\uninstaller.exe
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: Real-Time Protection
Process Name: C:\Windows\System32\SearchProtocolHost.exe
Signature Version: AV: 1.263.1153.0, AS: 1.263.1153.0, NIS: 119.0.0.0
Engine Version: AM: 1.1.14600.4, NIS: 2.1.14600.4

Date: 2018-03-26 15:13:31.610
Description: 
Windows Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Tiggre!rfn&threatid=2147723625&enterprise=0
Name: Trojan:Win32/Tiggre!rfn
ID: 2147723625
Severity: Severe
Category: Trojan
Path: file:_C:\Program Files (x86)\foldershare\uninstaller.exe
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: Real-Time Protection
Process Name: C:\Users\PC\AppData\Local\Temp\is-R8J51.tmp\jfk0021.exe
Signature Version: AV: 1.263.1153.0, AS: 1.263.1153.0, NIS: 119.0.0.0
Engine Version: AM: 1.1.14600.4, NIS: 2.1.14600.4

Date: 2018-02-20 20:44:16.172
Description: 
Windows Defender Antivirus Real-Time Protection feature has encountered an error and failed.
Feature: On Access
Error Code: 0x80004005
Error description: Unspecified error 
Reason: The filter driver skipped scanning items and is in pass through mode. This may be due to low resource conditions.

Date: 2018-02-20 20:40:20.602
Description: 
Windows Defender Antivirus Real-Time Protection feature has encountered an error and failed.
Feature: On Access
Error Code: 0x80004005
Error description: Unspecified error 
Reason: The filter driver skipped scanning items and is in pass through mode. This may be due to low resource conditions.

Date: 2018-02-20 20:36:21.918
Description: 
Windows Defender Antivirus Real-Time Protection feature has encountered an error and failed.
Feature: On Access
Error Code: 0x80004005
Error description: Unspecified error 
Reason: The filter driver skipped scanning items and is in pass through mode. This may be due to low resource conditions.

Date: 2018-02-20 20:34:38.606
Description: 
Windows Defender Antivirus Real-Time Protection feature has encountered an error and failed.
Feature: On Access
Error Code: 0x80004005
Error description: Unspecified error 
Reason: The filter driver skipped scanning items and is in pass through mode. This may be due to low resource conditions.

Date: 2018-02-20 20:31:17.947
Description: 
Windows Defender Antivirus Real-Time Protection feature has encountered an error and failed.
Feature: On Access
Error Code: 0x80004005
Error description: Unspecified error 
Reason: The filter driver skipped scanning items and is in pass through mode. This may be due to low resource conditions.

CodeIntegrity:
===================================

Date: 2018-03-31 01:00:08.833
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume1\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-03-31 01:00:08.832
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume1\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-03-31 01:00:05.371
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume1\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-03-31 01:00:05.370
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume1\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-03-31 01:00:04.327
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume1\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-03-31 01:00:04.326
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume1\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-03-31 00:56:28.485
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume1\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2018-03-31 00:56:28.484
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume1\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz
Percentage of memory in use: 27%
Total physical RAM: 16326.69 MB
Available physical RAM: 11861.62 MB
Total Virtual: 25918.69 MB
Available Virtual: 21114.84 MB

==================== Drives ================================

Drive c: (New Volume) (Fixed) (Total:110.89 GB) (Free:9.6 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: (New Volume) (Fixed) (Total:111.75 GB) (Free:61.33 GB) NTFS
Drive j: (PC Hard Disk ) (Fixed) (Total:931.51 GB) (Free:899.65 GB) NTFS
Drive k: (FreeAgent Drive) (Fixed) (Total:931.51 GB) (Free:200.02 GB) NTFS
Drive l: (Seagate Backup Plus Drive) (Fixed) (Total:5588.9 GB) (Free:1695.39 GB) NTFS
Drive m: (FreeAgent GoFlex Drive) (Fixed) (Total:1863.01 GB) (Free:691.71 GB) NTFS
Drive q: (Seagate Expansion Drive) (Fixed) (Total:2794.51 GB) (Free:734.68 GB) NTFS

\\?\Volume{e56cb56f-0000-0000-0000-20b91b000000}\ () (Fixed) (Total:0.49 GB) (Free:0.08 GB) NTFS
\\?\Volume{e56cb56f-0000-0000-0000-50d81b000000}\ () (Fixed) (Total:0.44 GB) (Free:0.42 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 223.6 GB) (Disk ID: E56CB56F)
Partition 1: (Active) - (Size=110.9 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=498 MB) - (Type=27)
Partition 3: (Not Active) - (Size=449 MB) - (Type=27)
Partition 4: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: FD097ED8)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 1863 GB) (Disk ID: A4B57300)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

========================================================
Disk: 3 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: F65866CD)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 8 (MBR Code: Windows 7/8/10) (Size: 5589 GB) (Disk ID: 9FC2D423)

Partition: GPT.
Attempted reading MBR returned 0 bytes.
 Could not read MBR for disk 9.

==================== End of Addition.txt ============================