My computer is infected withJS:Agent-EGF [Adw] Please help.

Hi there, how's it going?

Avast free Antivirus keeps telling me that it has blocked JS:Agent-EGF [Adw] every time I open firefox, regardless of what website I start with. I'm not entirely sure what the symptoms are, but I suspect that it's overheating my pc, and everything that I download at least seems to be slower. oping that someone can help me, so please do so if you can.

Here's the FRST log:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20.01.2019

Ran by [removed] (administrator) on MORTE (25-01-2019 19:24:11)

Running from C:\Users\[removed]\Desktop

[removed]

Platform: Windows 8.1 (X64) Language: English (United States)

Default browser: FF

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe

(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe

(Parsec) C:\Program Files\Parsec\pservice.exe

(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe

(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe

(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe

(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler64.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe

(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe

(Parsec Cloud, Inc.) C:\Users\MorteTorment\AppData\Roaming\Parsec\electron\parsec.exe

(GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe

(Parsec Cloud, Inc.) C:\Users\MorteTorment\AppData\Roaming\Parsec\electron\parsec.exe

(Parsec) C:\Program Files\Parsec\parsecd.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

() C:\Users\MorteTorment\Downloads\DS4Windows_1.6.2_x86\DS4Windows.exe

(Parsec Cloud, Inc.) C:\Users\MorteTorment\AppData\Roaming\Parsec\electron\parsec.exe

(Cerulean Studios) C:\Program Files (x86)\Trillian\trillian.exe

(SWE von Schleusen) C:\Program Files (x86)\UltimateZip\uzqkst.exe

(Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

() C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe

(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe

(Piriform Ltd) C:\Program Files (x86)\CCleaner\CCleaner64.exe

(Cerulean Studios) C:\Program Files (x86)\Trillian\plugins\ingame\ingame_64.exe

(GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe

(GOG.com) C:\Program Files (x86)\GOG Galaxy\GOG Galaxy Notifications Renderer.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe

(Discord Inc.) C:\Users\MorteTorment\AppData\Local\Discord\app-0.0.304\Discord.exe

(ALCPU) C:\Program Files\Core Temp\Core Temp.exe

(Comfort Software Group) C:\Program Files (x86)\FreeAlarmClock\FreeAlarmClock.exe

(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe

(Microsoft Corporation) C:\Windows\System32\SndVol.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(AVAST Software) C:\Users\MorteTorment\Desktop\aswMBR.exe

(Farbar) C:\Users\MorteTorment\Desktop\FRST64(1).exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\…\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [261512 2019-01-04] (AVAST Software)

HKLM\…\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [298296 2018-07-06] (Apple Inc.)

HKLM-x32\…\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.)

HKLM-x32\…\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [261512 2019-01-04] (AVAST Software)

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\Run: [uTorrent] => C:\Program Files (x86)\uTorrent\uTorrent.exe [398712 2017-10-11] (BitTorrent, Inc.)

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\Run: [Parsec.App.0] => C:\Users\MorteTorment\AppData\Roaming\Parsec\electron\parsec.exe [80666112 2018-07-27] (Parsec Cloud, Inc.)

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2018-06-26] (Apple Inc.)

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\Run: [CCleaner Smart Cleaning] => C:\Program Files (x86)\CCleaner\CCleaner64.exe [18630056 2018-09-10] (Piriform Ltd)

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\Run: [GalaxyClient] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [7381576 2018-11-29] (GOG.com)

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\Run: [EpicGamesLauncher] => C:\Epic Games\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [35190672 2019-01-25] (Epic Games, Inc.)

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\Run: [Google Update] => C:\Users\MorteTorment\AppData\Local\Google\Update\1.3.33.23\GoogleUpdateCore.exe [605992 2018-12-18] (Google Inc.)

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\Run: [GoogleChromeAutoLaunch_E4914F21A471BC6324E4527AA3B95D56] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1587680 2018-12-11] (Google Inc.)

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_31_0_0_153_Plugin.exe [1456128 2018-12-02] (Adobe Systems Incorporated)

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\MountPoints2: {197a9de9-dd11-11e6-827a-fcaa14cc9bee} - "F:\FF7_v1.0.5.exe"

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\MountPoints2: {89196f00-ff47-11e6-82ac-fcaa14cc9bee} - "L:\setup.exe"

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\MountPoints2: {b8eb4f56-f5c2-11e6-82ab-fcaa14cc9bee} - "H:\setup.exe"

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\MountPoints2: {cdd87379-abbc-11e6-8269-fcaa14cc9bee} - "K:\setup.exe"

HKLM\…\Drivers32: [vidc.i420] => C:\Windows\system32\lvcod64.dll [175392 2012-10-26] (Logitech Inc.)

HKLM\…\Drivers32: [MSVideo] => C:\Windows\system32\vfwwdm32.dll [66048 2013-08-22] (Microsoft Corporation)

HKLM\…\Drivers32-x32: [vidc.i420] => C:\Windows\SysWOW64\lvcodec2.dll [305000 2012-10-26] (Logitech Inc.)

HKLM\Software\…\AppCompatFlags\Custom\MSIEXEC.EXE: [{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb] -> Microsoft Windows Application Compatibility Database

HKLM\Software\…\AppCompatFlags\Custom\Nexcel.exe: [{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb] -> Microsoft Windows Application Compatibility Database

HKLM\Software\…\AppCompatFlags\Custom\picture.exe: [{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb] -> Microsoft Windows Application Compatibility Database

HKLM\Software\…\AppCompatFlags\Custom\xdict.exe: [{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb] -> Microsoft Windows Application Compatibility Database

HKLM\Software\…\AppCompatFlags\InstalledSDB\{deb7008b-681e-4a4a-8aae-cc833e8216ce}: [DatabasePath] -> C:\Windows\AppPatch\Custom\{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb [2003-06-13]

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\71.0.3578.98\Installer\chrmstp.exe [2019-01-24] (Google Inc.)

HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A6EADE66-0000-0000-484E-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll [2018-09-19] (Adobe Systems, Inc.)

Startup: C:\Users\MorteTorment\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DS4Windows.lnk [2019-01-03]

ShortcutTarget: DS4Windows.lnk -> C:\Users\MorteTorment\Downloads\DS4Windows_1.6.2_x86\DS4Windows.exe ()

Startup: C:\Users\MorteTorment\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2018-12-11]

ShortcutTarget: MEGAsync.lnk -> C:\ProgramData\MEGAsync\MEGAsync.exe (Mega Limited)

Startup: C:\Users\MorteTorment\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk [2019-01-04]

ShortcutTarget: Trillian.lnk -> C:\Program Files (x86)\Trillian\trillian.exe (Cerulean Studios)

Startup: C:\Users\MorteTorment\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\UltimateZip Quick Start.lnk [2019-01-13]

ShortcutTarget: UltimateZip Quick Start.lnk -> C:\Program Files (x86)\UltimateZip\uzqkst.exe (SWE von Schleusen)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\..\Interfaces\{2C73C35C-E178-4825-BF55-13367E3F3244}: [DhcpNameServer] 75.75.75.75 75.75.76.76

Internet Explorer:

==================

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_171\bin\ssv.dll [2018-04-25] (Oracle Corporation)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_171\bin\jp2ssv.dll [2018-04-25] (Oracle Corporation)

BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)

BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2016-07-30] (IvoSoft)

Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)

Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2016-07-30] (IvoSoft)

FireFox:

========

FF DefaultProfile: dg11zzpm.default-1523417653487

FF DefaultProfile: [removed]

FF ProfilePath: C:\Users\MorteTorment\AppData\Roaming\naan studio, Inc\Echofon\Profiles\bowz7v60.default [2018-08-14]

FF ProfilePath: C:\Users\MorteTorment\AppData\Roaming\Mozilla\Firefox\Profiles\dg11zzpm.default-1523417653487 [2019-01-25]

FF Session Restore: Mozilla\Firefox\Profiles\dg11zzpm.default-1523417653487 -> is enabled.

FF Extension: (Turbo Download Manager (v2)) - C:\Users\MorteTorment\AppData\Roaming\Mozilla\Firefox\Profiles\dg11zzpm.default-1523417653487\Extensions\[removed] [2018-08-31]

FF Extension: (Tab Session Manager) - C:\Users\MorteTorment\AppData\Roaming\Mozilla\Firefox\Profiles\dg11zzpm.default-1523417653487\Extensions\[removed] [2019-01-03]

FF Extension: (Alternate Player for Twitch.tv) - C:\Users\MorteTorment\AppData\Roaming\Mozilla\Firefox\Profiles\dg11zzpm.default-1523417653487\Extensions\[removed] [2019-01-23]

FF Extension: (uBlock Origin) - C:\Users\MorteTorment\AppData\Roaming\Mozilla\Firefox\Profiles\dg11zzpm.default-1523417653487\Extensions\[removed] [2019-01-24]

FF Extension: (Avast Online Security) - C:\Users\MorteTorment\AppData\Roaming\Mozilla\Firefox\Profiles\dg11zzpm.default-1523417653487\Extensions\[removed] [2019-01-12]

FF Extension: (minerBlock) - C:\Users\MorteTorment\AppData\Roaming\Mozilla\Firefox\Profiles\dg11zzpm.default-1523417653487\Extensions\[removed] [2018-11-20]

FF Extension: (Zoom Page WE) - C:\Users\MorteTorment\AppData\Roaming\Mozilla\Firefox\Profiles\dg11zzpm.default-1523417653487\Extensions\[removed] [2018-12-13]

FF Extension: (Audio-Only Youtube) - C:\Users\MorteTorment\AppData\Roaming\Mozilla\Firefox\Profiles\dg11zzpm.default-1523417653487\Extensions\{a61b4752-4572-4787-bca5-2fbe169f76dc}.xpi [2018-04-10]

FF Extension: (Adblock Plus - free ad blocker) - C:\Users\MorteTorment\AppData\Roaming\Mozilla\Firefox\Profiles\dg11zzpm.default-1523417653487\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2019-01-23]

FF Extension: (Instant YouTube Video Search) - C:\Users\MorteTorment\AppData\Roaming\Mozilla\Firefox\Profiles\dg11zzpm.default-1523417653487\Extensions\{f26b73bc-2917-44b8-8ebd-c430966a70fc}.xpi [2018-04-10]

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_31_0_0_153.dll [2018-12-02] ()

FF Plugin: @java.com/DTPlugin,version=11.171.2 -> C:\Program Files\Java\jre1.8.0_171\bin\dtplugin\npDeployJava1.dll [2018-04-25] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.171.2 -> C:\Program Files\Java\jre1.8.0_171\bin\plugin2\npjp2.dll [2018-04-25] (Oracle Corporation)

FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2018-08-10] (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_31_0_0_153.dll [2018-12-02] ()

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2016-12-23] (Foxit Corporation)

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2016-12-23] (Foxit Corporation)

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2016-12-23] (Foxit Corporation)

FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2016-12-23] (Foxit Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-10-27] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-10-27] (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc.)

FF Plugin-x32: @vizzed.com/VizzedRGR -> C:\Program Files (x86)\Vizzed\Vizzed Retro Game Room\NpVizzedRgr.dll [2015-11-27] (Vizzed.com)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-12-04] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-1988832187-1948698999-1346875777-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\MorteTorment\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)

FF Plugin HKU\S-1-5-21-1988832187-1948698999-1346875777-1001: @talk.google.com/O1DPlugin -> C:\Users\MorteTorment\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)

FF Plugin HKU\S-1-5-21-1988832187-1948698999-1346875777-1001: @tools.google.com/Google Update;version=3 -> C:\Users\MorteTorment\AppData\Local\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-18] (Google Inc.)

FF Plugin HKU\S-1-5-21-1988832187-1948698999-1346875777-1001: @tools.google.com/Google Update;version=9 -> C:\Users\MorteTorment\AppData\Local\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-18] (Google Inc.)

FF Plugin HKU\S-1-5-21-1988832187-1948698999-1346875777-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\MorteTorment\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-10-25] (Unity Technologies ApS)

FF Plugin ProgramFiles/Appdata: C:\Users\MorteTorment\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)

FF Plugin ProgramFiles/Appdata: C:\Users\MorteTorment\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08] (Google)

Chrome:

=======

CHR HomePage: Default -> hxxp://www.google.com/

CHR StartupUrls: Default -> "hxxp://www.google.com"

CHR Profile: C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default [2019-01-25]

CHR Extension: (Slides) - C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]

CHR Extension: (BetterTTV) - C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2017-11-19]

CHR Extension: (Docs) - C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]

CHR Extension: (Google Drive) - C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-17]

CHR Extension: (YouTube) - C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-04-11]

CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2019-01-24]

CHR Extension: (uBlock Origin) - C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2018-12-04]

CHR Extension: (Netfix) - C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpgbdfpoaalclikhghccccakifaoboam [2018-01-13]

CHR Extension: (Hbomb's YouTube Censorship Addon) - C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default\Extensions\djhicpapmcmjabcmkdecglggplpnmkid [2018-02-12]

CHR Extension: (Share on Rabbit) - C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default\Extensions\dplabnbcafdgpcjmibgkekpaejlfhnkl [2019-01-20]

CHR Extension: (Avast SafePrice | Comparison, deals, coupons) - C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2018-12-19]

CHR Extension: (Sheets) - C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]

CHR Extension: (Google Docs Offline) - C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-16]

CHR Extension: (The Camelizer) - C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghnomdcacenbmilgjigehppbamfndblo [2018-06-23]

CHR Extension: (No Coin - Block miners on the web!) - C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default\Extensions\gojamcfopckidlocpkbelmpjcgmbgjcl [2018-02-26]

CHR Extension: (Avast Online Security) - C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2018-09-25]

CHR Extension: (Google Hangouts) - C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default\Extensions\knipolnnllmklapflnccelgolnpehhpl [2019-01-20]

CHR Extension: (Better YouTube Watch History) - C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default\Extensions\lleajdkalfbohpinoaekajagdefaeckd [2018-02-12]

CHR Extension: (Chrome Web Store Payments) - C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-10]

CHR Extension: (AdBlocker Ultimate) - C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohahllgiabjaoigichmmfljhkcfikeof [2018-10-25]

CHR Extension: (Netflix Party) - C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default\Extensions\oocalimimngaihdkbihfgmpkcpnmlaoa [2018-10-04]

CHR Extension: (Gmail) - C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-04-11]

CHR Extension: (Chrome Media Router) - C:\Users\MorteTorment\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-12-18]

CHR HKLM-x32\…\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\…\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [173472 2017-01-30] (SUPERAntiSpyware.com)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2018-07-05] (Apple Inc.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [7834368 2019-01-04] (AVAST Software)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [357816 2019-01-04] (AVAST Software)

S2 Defender; C:\Windows\appdata\nssm.exe [331264 2014-08-31] () [File not signed]

R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)

R2 FoxitReaderService; C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe [1659592 2016-12-29] (Foxit Software Inc.)

S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [707144 2018-11-29] (GOG.com)

S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [7172680 2018-11-29] (GOG.com)

S4 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [3346856 2018-05-30] (LogMeIn Inc.)

S4 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-05-27] (LogMeIn, Inc.)

R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [522688 2018-03-14] (NVIDIA Corporation)

S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [522688 2018-03-14] (NVIDIA Corporation)

S4 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2424648 2019-01-09] (Overwolf LTD)

R2 Parsec; C:\Program Files\Parsec\pservice.exe [190536 2018-07-27] (Parsec)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000

R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdide64; C:\Windows\System32\drivers\amdide64.sys [11944 2018-03-01] (Advanced Micro Devices Inc.)

S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-22] (Advanced Micro Devices, Inc.)

R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [37304 2019-01-04] (AVAST Software)

R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [203488 2019-01-04] (AVAST Software)

R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [223056 2019-01-14] (AVAST Software)

R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [196264 2019-01-04] (AVAST Software)

R0 aswblog; C:\Windows\System32\drivers\aswblog.sys [320888 2019-01-04] (AVAST Software)

R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [58160 2019-01-04] (AVAST Software)

R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [239808 2019-01-04] (AVAST Software)

S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [46584 2019-01-04] (AVAST Software)

R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42488 2019-01-04] (AVAST Software)

R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [166792 2019-01-18] (AVAST Software)

R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [111992 2019-01-04] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [88144 2019-01-04] (AVAST Software)

R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1034056 2019-01-04] (AVAST Software)

R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [474648 2019-01-04] (AVAST Software)

R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [218056 2019-01-04] (AVAST Software)

R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [380144 2019-01-04] (AVAST Software)

S3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [118848 2016-08-08] (Advanced Micro Devices)

S3 BlueStacksDrv; C:\Program Files\BlueStacks\BstkDrv.sys [303712 2018-12-13] (Bluestack System Inc. )

R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2016-11-19] (Disc Soft Ltd)

R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [254528 2017-08-04] (DT Soft Ltd)

S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2018-05-30] (LogMeIn Inc.)

R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2018-03-01] (REALiX™)

R2 memudrv; C:\Program Files\Microvirt\MEmuHyperv\MEmuDrv.sys [260368 2015-11-02] (Microvirt Corporation)

S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [31168 2018-03-14] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [59240 2017-12-14] (NVIDIA Corporation)

R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [57976 2017-10-27] (NVIDIA Corporation)

R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)

R3 ScpVBus; C:\Windows\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)

R3 ViGEmBus; C:\Windows\System32\drivers\ViGEmBus.sys [53128 2018-01-19] (Benjamin Höglinger-Stelzer)

R1 vmkbd3; C:\Windows\system32\DRIVERS\vmkbd.sys [52288 2016-11-11] (VMware, Inc.)

R0 vsock; C:\Windows\system32\DRIVERS\vsock.sys [91712 2016-09-30] (VMware, Inc.)

S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [34760 2013-08-22] (Microsoft Corporation)

S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [265056 2013-08-22] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)

R3 xhcdrv; C:\Windows\System32\drivers\xhcdrv.sys [305664 2018-03-01] (VIA Technologies, Inc.)

U3 aswMBR; C:\Users\MorteTorment\AppData\Local\Temp\aswMBR.sys [62728 2019-01-25] () [File not signed] <==== ATTENTION

R3 ALSysIO; \??\C:\Users\MORTET~1\AppData\Local\Temp\ALSysIO64.sys [X] <==== ATTENTION

U1 aswbdisk; no ImagePath

S3 cpuz144; \??\C:\Windows\temp\cpuz144\cpuz144_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

Error(1) reading file: "C:\Users\MorteTorment\Downloads\Phat Azz Brazilian Orgy "

Error(1) reading file: "C:\Users\MorteTorment\Downloads\Moms Teach Sex "

Error(1) reading file: "C:\Users\MorteTorment\Downloads\[TeamSkeet] Teeny Black Chicks Trying White Dicks "

Error(1) reading file: "C:\Users\MorteTorment\Downloads\[RoccoSiffredi]Victoria Summers, Baby Jewel - Teens VS MILFS "

Error(1) reading file: "C:\Users\MorteTorment\Downloads\ Miss Big Ass Brazil "

Error(1) reading file: "C:\Users\MorteTorment\Downloads\ Dont Break Me - Carolina Sweets in "

2019-01-25 19:24 - 2019-01-25 19:24 - 000030724 _____ C:\Users\MorteTorment\Desktop\FRST.txt

2019-01-25 19:22 - 2019-01-25 19:22 - 000001821 _____ C:\Users\MorteTorment\Desktop\aswMBR.txt

2019-01-25 19:22 - 2019-01-25 19:22 - 000000512 _____ C:\Users\MorteTorment\Desktop\MBR.dat

2019-01-25 19:16 - 2019-01-25 19:16 - 005198336 _____ (AVAST Software) C:\Users\MorteTorment\Desktop\aswMBR.exe

2019-01-25 18:23 - 2019-01-25 18:23 - 002428416 _____ (Farbar) C:\Users\MorteTorment\Desktop\FRST64(1).exe

2019-01-25 17:53 - 2019-01-25 18:16 - 2149531630 _____ C:\Users\MorteTorment\Downloads\Dying.Light.The.Following.Enhanced.Edition.Prison.Heist.part3.rar.part

2019-01-25 17:53 - 2019-01-25 17:53 - 000000000 _____ C:\Users\MorteTorment\Downloads\Dying.Light.The.Following.Enhanced.Edition.Prison.Heist.part3.rar

2019-01-25 17:52 - 2019-01-25 18:16 - 3436249088 _____ C:\Users\MorteTorment\Downloads\Dying.Light.The.Following.Enhanced.Edition.Prison.Heist.part1.rar.part

2019-01-25 17:52 - 2019-01-25 18:16 - 1793425408 _____ C:\Users\MorteTorment\Downloads\Dying.Light.The.Following.Enhanced.Edition.Prison.Heist.part2.rar.part

2019-01-25 17:52 - 2019-01-25 17:52 - 000000000 _____ C:\Users\MorteTorment\Downloads\Dying.Light.The.Following.Enhanced.Edition.Prison.Heist.part2.rar

2019-01-25 17:52 - 2019-01-25 17:52 - 000000000 _____ C:\Users\MorteTorment\Downloads\Dying.Light.The.Following.Enhanced.Edition.Prison.Heist.part1.rar

2019-01-24 16:27 - 2019-01-24 16:27 - 000002289 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2019-01-24 16:26 - 2019-01-24 16:26 - 001136176 _____ (Google Inc.) C:\Users\MorteTorment\Downloads\ChromeSetup(1).exe

2019-01-23 00:57 - 2019-01-23 00:57 - 000003194 _____ C:\Windows\System32\Tasks\{55664C84-BD5E-4D1E-92C7-29A3D0916149}

2019-01-23 00:49 - 2019-01-23 00:49 - 000362812 _____ C:\Users\MorteTorment\Downloads\skse_1_07_03_installer(1).exe

2019-01-22 18:26 - 2019-01-22 18:26 - 000000000 ____D C:\Users\MorteTorment\AppData\LocalLow\Pathea Games

2019-01-22 18:24 - 2019-01-22 18:24 - 000000785 _____ C:\Users\MorteTorment\Desktop\My Time At Portia.lnk

2019-01-22 18:24 - 2019-01-22 18:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\My Time At Portia

2019-01-19 20:21 - 2019-01-19 20:23 - 096607995 _____ C:\Users\MorteTorment\Downloads\Buttons - Companion-31710-1-3.zip

2019-01-15 18:30 - 2019-01-15 18:30 - 000000000 ____D C:\Users\MorteTorment\AppData\Roaming\CPY_SAVES

2019-01-15 18:30 - 2019-01-15 18:30 - 000000000 ____D C:\Users\MorteTorment\AppData\Local\ZoneUE4

2019-01-15 10:06 - 2019-01-15 10:06 - 000411920 _____ C:\Windows\Minidump\011519-22875-01.dmp

2019-01-15 09:49 - 2019-01-15 09:49 - 000411904 _____ C:\Windows\Minidump\011519-29625-01.dmp

2019-01-14 06:36 - 2019-01-14 06:36 - 000223056 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys

2019-01-13 15:33 - 2019-01-13 15:33 - 000111104 _____ () C:\Users\MorteTorment\Downloads\AtomSL.exe

2019-01-13 15:14 - 2019-01-13 15:14 - 001443680 _____ (Igor Pavlov) C:\Users\MorteTorment\Downloads\7z1806-x64.exe

2019-01-13 15:14 - 2019-01-13 15:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip

2019-01-13 15:14 - 2019-01-13 15:14 - 000000000 ____D C:\Program Files\7-Zip

2019-01-13 15:12 - 2019-01-13 15:12 - 000000000 ____D C:\Users\MorteTorment\AppData\Roaming\WinRAR

2019-01-13 15:12 - 2019-01-13 15:12 - 000000000 ____D C:\Users\MorteTorment\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2019-01-13 15:12 - 2019-01-13 15:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR

2019-01-13 15:11 - 2019-01-13 15:12 - 000000000 ____D C:\Program Files (x86)\WinRAR

2019-01-13 15:11 - 2019-01-13 15:11 - 000000000 ____D C:\Users\MorteTorment\Downloads\WinRAR 5.50 [English] [x84 + x64] + Universal Patch - Crackingpatching.com

2019-01-13 15:10 - 2019-01-13 15:11 - 004744159 _____ C:\Users\MorteTorment\Downloads\WinRAR 5.50 [English] [x84 + x64] + Universal Patch - Crackingpatching.com.zip

2019-01-13 15:06 - 2019-01-13 15:06 - 001462627 _____ C:\Users\MorteTorment\Downloads\gzip-1.10.zip

2019-01-13 15:06 - 2019-01-13 15:06 - 000000000 ____D C:\Users\MorteTorment\Downloads\gzip-1.10

2019-01-13 14:55 - 2019-01-13 14:55 - 000001054 _____ C:\Users\MorteTorment\AppData\Roaming\Microsoft\Windows\Start Menu\UltimateZip.lnk

2019-01-13 14:55 - 2019-01-13 14:55 - 000001030 _____ C:\Users\MorteTorment\Desktop\UltimateZip.lnk

2019-01-13 14:55 - 2019-01-13 14:55 - 000000000 ____D C:\Users\MorteTorment\AppData\Roaming\UltimateZip

2019-01-13 14:55 - 2019-01-13 14:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltimateZip

2019-01-13 14:55 - 2019-01-13 14:55 - 000000000 ____D C:\Program Files (x86)\UltimateZip

2019-01-13 14:54 - 2019-01-13 14:54 - 007704882 _____ (SWE von Schleusen ) C:\Users\MorteTorment\Downloads\uzsetup.exe

2019-01-12 15:47 - 2019-01-13 15:37 - 000000000 ____D C:\Users\MorteTorment\AppData\LocalLow\AtomTeam

2019-01-12 13:09 - 2019-01-12 13:20 - 1038090240 _____ C:\Users\MorteTorment\Downloads\IGG-RebelGalaxyv2.5.0.10GOG.part2.rar

2019-01-12 13:09 - 2019-01-12 13:15 - 469793107 _____ C:\Users\MorteTorment\Downloads\IGG-RebelGalaxyv2.5.0.10GOG.part3.rar

2019-01-12 13:08 - 2019-01-12 13:20 - 1038090240 _____ C:\Users\MorteTorment\Downloads\IGG-RebelGalaxyv2.5.0.10GOG.part1.rar

2019-01-10 22:10 - 2019-01-24 01:12 - 000000000 ____D C:\Users\MorteTorment\AppData\Roaming\Vortex

2019-01-10 22:09 - 2019-01-10 22:09 - 000002030 _____ C:\Users\Public\Desktop\Vortex.lnk

2019-01-10 22:09 - 2019-01-10 22:09 - 000000000 ____D C:\ProgramData\Vortex

2019-01-10 22:09 - 2019-01-10 22:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Black Tree Gaming Ltd

2019-01-10 22:09 - 2019-01-10 22:09 - 000000000 ____D C:\Program Files\Black Tree Gaming Ltd

2019-01-10 22:06 - 2019-01-10 22:08 - 073755080 _____ (Black Tree Gaming Ltd.) C:\Users\MorteTorment\Downloads\Vortex-1-0-16-15-1544094539.exe

2019-01-10 20:27 - 2019-01-10 20:27 - 000000930 _____ C:\Users\MorteTorment\Desktop\Core Temp.lnk

2019-01-10 20:26 - 2019-01-10 20:26 - 001256768 _____ (ALCPU ) C:\Users\MorteTorment\Downloads\Core-Temp-setup(2).exe

2019-01-07 04:17 - 2019-01-07 04:17 - 000463888 _____ C:\Windows\Minidump\010719-26296-01.dmp

2019-01-07 04:14 - 2019-01-07 04:15 - 000411912 _____ C:\Windows\Minidump\010719-54140-01.dmp

2019-01-04 19:03 - 2019-01-04 19:03 - 000458464 _____ C:\Users\MorteTorment\Downloads\Chapter 6 guide.pdf

2019-01-04 18:34 - 2019-01-04 18:38 - 104938552 _____ C:\Users\MorteTorment\Downloads\Ohigetan2.rar.z01

2019-01-04 07:33 - 2019-01-04 07:33 - 000001105 _____ C:\Users\MorteTorment\Desktop\Trillian.lnk

2019-01-04 07:32 - 2019-01-04 07:32 - 016473960 _____ C:\Users\MorteTorment\Downloads\trillian-v6.1.0.17.exe

2019-01-04 06:35 - 2019-01-04 06:34 - 000361352 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe

2019-01-04 06:35 - 2019-01-04 06:34 - 000320888 _____ (AVAST Software) C:\Windows\system32\Drivers\aswblog.sys

2019-01-04 06:35 - 2019-01-04 06:34 - 000196264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys

2019-01-04 06:35 - 2019-01-04 06:34 - 000058160 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys

2019-01-04 06:35 - 2019-01-04 06:34 - 000037304 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArDisk.sys

2019-01-03 00:00 - 2019-01-03 00:01 - 000000000 ____D C:\Users\MorteTorment\Downloads\DS4Windows_1.6.2_x86

2019-01-03 00:00 - 2019-01-03 00:00 - 001808598 _____ C:\Users\MorteTorment\Downloads\DS4Windows_1.6.2_x86.zip

2019-01-02 17:32 - 2019-01-02 17:32 - 000038099 _____ C:\Users\MorteTorment\Downloads\86wrathofempire.torrent

2019-01-02 14:27 - 2019-01-02 14:27 - 000033056 _____ C:\Users\MorteTorment\Downloads\18_Truthwitch.torrent

2018-12-30 16:22 - 2018-12-30 16:22 - 000000000 ____D C:\Users\MorteTorment\Downloads\DC uncensor-20181231T001205Z-001

2018-12-30 16:16 - 2018-12-30 16:17 - 150985712 _____ C:\Users\MorteTorment\Downloads\DC uncensor-20181231T001205Z-001.zip

2018-12-29 14:29 - 2019-01-15 10:06 - 808722566 _____ C:\Windows\MEMORY.DMP

2018-12-29 14:29 - 2018-12-29 14:29 - 000411856 _____ C:\Windows\Minidump\122918-28968-01.dmp

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-01-25 19:24 - 2017-01-28 19:43 - 000000000 ____D C:\FRST

2019-01-25 19:00 - 2016-09-16 14:29 - 000000000 ____D C:\Users\MorteTorment\AppData\Local\FirestormOS_x64

2019-01-25 18:59 - 2018-07-05 08:24 - 000000000 ____D C:\ProgramData\NVIDIA

2019-01-25 18:16 - 2016-11-19 05:16 - 000000000 ____D C:\Users\MorteTorment\AppData\LocalLow\Mozilla

2019-01-25 14:07 - 2016-09-13 12:50 - 000003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1988832187-1948698999-1346875777-1001

2019-01-25 14:06 - 2018-12-07 17:55 - 000000000 ____D C:\Users\MorteTorment\AppData\Roaming\DS4Windows

2019-01-25 14:02 - 2018-08-14 07:25 - 000000000 ____D C:\Users\MorteTorment\AppData\Roaming\Parsec

2019-01-25 11:43 - 2016-10-10 19:56 - 000000000 ____D C:\Users\MorteTorment\AppData\Local\ClassicShell

2019-01-25 03:33 - 2016-10-01 13:55 - 000000000 ____D C:\Steam

2019-01-24 18:44 - 2016-09-14 02:23 - 000000000 ____D C:\Users\MorteTorment\AppData\Roaming\Skype

2019-01-24 16:27 - 2017-02-05 03:44 - 000002330 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2019-01-23 12:34 - 2016-11-16 19:47 - 000000000 ____D C:\Users\MorteTorment\AppData\Local\Fallout4

2019-01-23 10:03 - 2016-10-27 16:12 - 000000000 ____D C:\Users\MorteTorment\AppData\Local\Skyrim Special Edition

2019-01-23 09:49 - 2016-10-11 19:45 - 000000000 ____D C:\Users\MorteTorment\Documents\My Games

2019-01-23 00:56 - 2018-07-27 00:01 - 000002032 _____ C:\Users\MorteTorment\Desktop\Skyrim (SKSE).lnk

2019-01-23 00:38 - 2016-10-11 20:27 - 000000000 ____D C:\Users\MorteTorment\AppData\Local\LOOT

2019-01-23 00:12 - 2016-10-01 14:06 - 000000000 ____D C:\Users\MorteTorment\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2019-01-22 23:01 - 2016-09-21 23:31 - 000000000 ____D C:\GOG Games

2019-01-22 22:54 - 2016-09-22 06:22 - 000000000 ____D C:\Games

2019-01-22 21:54 - 2016-09-14 19:38 - 000000000 ____D C:\Users\MorteTorment\AppData\Roaming\discord

2019-01-22 18:30 - 2018-12-20 18:45 - 000003592 _____ C:\Windows\System32\Tasks\BlueStacksHelper

2019-01-22 18:30 - 2018-12-20 18:31 - 000003140 _____ C:\Windows\System32\Tasks\{17596281-161F-42CB-999B-B08112AE6833}

2019-01-22 18:30 - 2018-10-12 14:36 - 000003922 _____ C:\Windows\System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2019-01-22 18:30 - 2018-09-05 20:12 - 000004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2019-01-22 18:30 - 2018-09-05 20:12 - 000003814 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2019-01-22 18:30 - 2018-09-05 20:12 - 000003798 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2019-01-22 18:30 - 2018-09-05 20:12 - 000003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2019-01-22 18:30 - 2018-09-05 20:12 - 000003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2019-01-22 18:30 - 2018-09-05 20:12 - 000003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2019-01-22 18:30 - 2018-09-05 20:12 - 000003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2019-01-22 18:30 - 2018-07-18 08:24 - 000002810 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC

2019-01-22 18:30 - 2018-07-17 09:37 - 000003882 _____ C:\Windows\System32\Tasks\CCleaner Update

2019-01-22 18:30 - 2018-04-18 15:04 - 000003166 _____ C:\Windows\System32\Tasks\{A4518508-6487-4D94-A1B7-0E79012895AD}

2019-01-22 18:30 - 2018-03-01 16:32 - 000003262 _____ C:\Windows\System32\Tasks\Driver Booster Scheduler

2019-01-22 18:30 - 2018-03-01 16:32 - 000002894 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (MorteTorment)

2019-01-22 18:30 - 2017-12-13 22:59 - 000003524 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1988832187-1948698999-1346875777-1001UA

2019-01-22 18:30 - 2017-12-13 22:59 - 000003252 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1988832187-1948698999-1346875777-1001Core

2019-01-22 18:30 - 2017-11-28 12:29 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software

2019-01-22 18:30 - 2017-09-13 18:11 - 000003352 _____ C:\Windows\System32\Tasks\NETControlUpdate

2019-01-22 18:30 - 2017-03-29 14:25 - 000003166 _____ C:\Windows\System32\Tasks\Private Internet Access Startup

2019-01-22 18:30 - 2017-03-12 05:06 - 000004304 _____ C:\Windows\System32\Tasks\Overwolf Updater Task

2019-01-22 18:30 - 2017-02-05 03:44 - 000003332 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2019-01-22 18:30 - 2017-02-05 03:44 - 000003204 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2019-01-22 18:30 - 2016-12-02 22:58 - 000003158 _____ C:\Windows\System32\Tasks\{F2EA64DD-8227-4BE4-96D8-C5A0C7CA4A2E}

2019-01-22 18:30 - 2016-10-05 03:26 - 000004238 _____ C:\Windows\System32\Tasks\AMD Updater

2019-01-22 18:29 - 2018-03-13 20:06 - 000004470 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier

2019-01-22 18:29 - 2017-02-06 04:03 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task

2019-01-22 18:29 - 2016-10-23 10:54 - 000004288 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2019-01-22 18:28 - 2018-09-05 20:13 - 000000000 ____D C:\Users\MorteTorment\AppData\Local\NVIDIA Corporation

2019-01-22 18:28 - 2017-10-23 07:20 - 000000000 ____D C:\Users\MorteTorment\AppData\Local\CrashDumps

2019-01-20 10:08 - 2017-10-23 07:22 - 000000000 _____ C:\Windows\system32\last.dump

2019-01-18 16:59 - 2017-10-08 23:42 - 000166792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys

2019-01-17 09:20 - 2013-08-22 05:36 - 000000000 ____D C:\Windows\Inf

2019-01-16 21:38 - 2018-06-18 18:18 - 000000000 ____D C:\Users\MorteTorment\AppData\Local\Warframe

2019-01-16 01:01 - 2016-09-13 12:45 - 000000000 ____D C:\Users\MorteTorment

2019-01-15 18:53 - 2017-10-08 23:42 - 000004168 _____ C:\Windows\System32\Tasks\Avast Emergency Update

2019-01-15 18:03 - 2016-09-14 19:38 - 000000000 ____D C:\Users\MorteTorment\AppData\Local\Discord

2019-01-15 12:44 - 2017-01-04 20:32 - 000000000 ____D C:\Users\MorteTorment\Documents\The Witcher 3

2019-01-15 10:06 - 2017-02-03 19:08 - 000000000 ____D C:\ProgramData\VMware

2019-01-15 10:06 - 2016-11-23 06:41 - 000000000 ____D C:\Windows\Minidump

2019-01-15 10:06 - 2013-08-22 06:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT

2019-01-13 18:21 - 2016-09-13 17:12 - 000000000 ____D C:\Users\MorteTorment\AppData\Roaming\uTorrent

2019-01-13 15:57 - 2013-08-22 07:20 - 000000000 ____D C:\Windows\CbsTemp

2019-01-12 15:50 - 2016-12-24 17:34 - 000000000 ____D C:\Users\MorteTorment\AppData\LocalLow\Unity

2019-01-12 12:29 - 2018-06-20 21:28 - 000000000 ____D C:\Users\MorteTorment\AppData\Roaming\Return2Games_WIP21

2019-01-11 08:52 - 2017-12-04 19:04 - 000000000 ____D C:\Program Files\Mozilla Firefox

2019-01-11 08:52 - 2017-12-04 19:04 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2019-01-10 20:27 - 2018-07-12 17:10 - 000000067 _____ C:\Users\MorteTorment\Desktop\Core Temp Gadget & Addons.url

2019-01-10 20:27 - 2016-09-13 17:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Core Temp

2019-01-10 20:27 - 2016-09-13 17:34 - 000000000 ____D C:\Program Files\Core Temp

2019-01-10 15:03 - 2017-12-04 19:04 - 000000948 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk

2019-01-09 21:06 - 2017-03-12 05:05 - 000000000 ____D C:\Program Files (x86)\Overwolf

2019-01-08 03:42 - 2016-11-16 18:31 - 000000222 _____ C:\Users\MorteTorment\Desktop\G2a.txt

2019-01-07 04:24 - 2014-03-18 02:03 - 000877220 _____ C:\Windows\system32\PerfStringBackup.INI

2019-01-06 10:06 - 2018-08-02 08:56 - 000000000 ____D C:\Users\MorteTorment\AppData\Local\AVAST Software

2019-01-04 19:03 - 2017-01-15 17:00 - 000000000 ____D C:\Users\MorteTorment\AppData\LocalLow\Adobe

2019-01-04 19:02 - 2016-10-04 18:19 - 000000000 ____D C:\Users\MorteTorment\AppData\Roaming\RenPy

2019-01-04 15:01 - 2017-02-06 04:02 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2019-01-04 07:33 - 2017-04-29 17:10 - 000001135 _____ C:\Users\MorteTorment\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Trillian.lnk

2019-01-04 07:33 - 2017-04-29 17:09 - 000000000 ____D C:\Program Files (x86)\Trillian

2019-01-04 06:35 - 2018-01-05 12:06 - 000239808 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys

2019-01-04 06:35 - 2017-11-16 04:50 - 000203488 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys

2019-01-04 06:35 - 2017-10-08 23:42 - 000474648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys

2019-01-04 06:35 - 2017-10-08 23:42 - 000380144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys

2019-01-04 06:35 - 2017-10-08 23:42 - 000218056 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys

2019-01-04 06:35 - 2017-10-08 23:42 - 000111992 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys

2019-01-04 06:35 - 2017-10-08 23:42 - 000088144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys

2019-01-04 06:35 - 2017-10-08 23:42 - 000046584 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys

2019-01-04 06:34 - 2018-10-22 05:51 - 000042488 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys

2019-01-04 06:34 - 2017-10-08 23:42 - 001034056 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys

2019-01-03 00:20 - 2018-03-12 12:58 - 000015969 _____ C:\Users\MorteTorment\AppData\Roaming\pacemaker_songparams.txt

2019-01-03 00:20 - 2018-03-12 12:58 - 000000620 _____ C:\Users\MorteTorment\AppData\Roaming\pacemaker.ini

2019-01-02 14:35 - 2018-10-05 14:29 - 000000000 ____D C:\Users\MorteTorment\AppData\Roaming\vlc

2018-12-29 14:42 - 2018-08-15 12:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

==================== Files in the root of some directories =======

2017-09-13 18:11 - 2017-09-03 07:23 - 000858624 _____ () C:\Program Files (x86)\setup_m.exe

2018-03-12 12:58 - 2019-01-03 00:20 - 000000620 _____ () C:\Users\MorteTorment\AppData\Roaming\pacemaker.ini

2018-03-12 12:58 - 2019-01-03 00:20 - 000015969 _____ () C:\Users\MorteTorment\AppData\Roaming\pacemaker_songparams.txt

2018-09-13 18:40 - 2018-09-13 19:12 - 000005632 _____ () C:\Users\MorteTorment\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2017-02-04 05:18 - 2016-11-23 05:37 - 000000570 _____ () C:\Users\MorteTorment\AppData\Local\TroubleshooterConfig.json

Some files in TEMP:

====================

2018-12-20 18:31 - 2017-01-26 00:58 - 000990744 _____ (BlueStack Systems, Inc.) C:\Users\MorteTorment\AppData\Local\Temp\BluestacksUninstaller.exe

2018-12-20 18:31 - 2017-01-26 00:57 - 000187416 _____ (BlueStack Systems) C:\Users\MorteTorment\AppData\Local\Temp\HD-LibraryHandler.dll

2018-12-20 18:31 - 2017-01-26 00:55 - 000246808 _____ (BlueStack Systems) C:\Users\MorteTorment\AppData\Local\Temp\HD-Logger-Native.dll

2018-12-20 15:42 - 2018-12-20 16:56 - 000492544 _____ () C:\Users\MorteTorment\AppData\Local\Temp\s3.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\dnsapi.dll => File is digitally signed

C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed

C:\Windows\system32\dllhost.exe => File is digitally signed

C:\Windows\SysWOW64\dllhost.exe => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2019-01-18 03:22

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20.01.2019

Ran by [removed] (25-01-2019 19:25:02)

Running from C:\Users\[removed]\Desktop

Windows 8.1 (X64) (2016-09-13 20:45:18)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-1988832187-1948698999-1346875777-500 - Administrator - Disabled)

Guest (S-1-5-21-1988832187-1948698999-1346875777-501 - Limited - Disabled)

MorteTorment (S-1-5-21-1988832187-1948698999-1346875777-1001 - Administrator - Enabled) => C:\Users\MorteTorment

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKLM-x32\…\uTorrent) (Version: 2.2.1 - )

7-Zip 18.06 (x64) (HKLM\…\7-Zip) (Version: 18.06 - Igor Pavlov)

Adobe Acrobat Reader DC (HKLM-x32\…\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 19.010.20069 - Adobe Systems Incorporated)

Adobe Flash Player 31 NPAPI (HKLM-x32\…\Adobe Flash Player NPAPI) (Version: 31.0.0.153 - Adobe Systems Incorporated)

Amazon Kindle (HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\Amazon Kindle) (Version: 1.17.1.44183 - Amazon)

Andy OS (HKLM\…\Andy OS) (Version: 46.16 - Andy OS, Inc)

Apple Application Support (32-bit) (HKLM-x32\…\{E5347310-C82F-4833-AA36-8D11E5A8A86A}) (Version: 6.6 - Apple Inc.)

Apple Application Support (64-bit) (HKLM\…\{D745E014-74DD-43A3-98DF-E7D38164B681}) (Version: 6.6 - Apple Inc.)

Apple Mobile Device Support (HKLM\…\{C29B636B-9015-4ED1-A12F-6375A337F23B}) (Version: 11.4.1.46 - Apple Inc.)

Apple Software Update (HKLM-x32\…\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)

Assassins Creed Origins The Curse of the Pharaohs (HKLM-x32\…\Assassins Creed Origins The Curse of the Pharaohs_is1) (Version: - )

ASTRA32 - Advanced System Information Tool 3.50 (HKLM-x32\…\ASTRA32_is1) (Version: 3.50 - Sysinfo Lab)

Avast Free Antivirus (HKLM-x32\…\Avast Antivirus) (Version: 19.1.2360 - AVAST Software)

Axis 360 (HKLM-x32\…\{F15F940E-1F65-4F10-BD51-6EE5483D6ED1}) (Version: 1.0.15.720 - Baker & Taylor)

Baldur's Gate - Enhanced Edition (HKLM-x32\…\1207666353_is1) (Version: 2.1.0.3 - GOG.com)

Baldurs Gate - Enhanced Edition (HKLM-x32\…\Baldurs Gate - Enhanced Edition_R.G. Mechanics_is1) (Version: - R.G. Mechanics, markfiter)

Baldur's Gate - Siege of Dragonspear (HKLM-x32\…\Baldur's Gate: Siege of Dragonspear_is1) (Version: 2.1.0.3 - GOG.com)

Baldur's Gate II - Enhanced Edition (HKLM-x32\…\1207666373_is1) (Version: 2.0.0.1 - GOG.com)

Battletech Ironman (HKLM-x32\…\Battletech Ironman_is1) (Version: - )

Bethesda.net Launcher (HKLM-x32\…\{3448917E-E4FE-4E30-9502-9FD52EABB6F5}_is1) (Version: 1.43.4 - Bethesda Softworks)

Blizzard App (HKLM-x32\…\Battle.net) (Version: - Blizzard Entertainment)

BloodLust Shadowhunter (HKLM\…\Qmxvb2RMdXN0U2hhZG93aHVudGVy_is1) (Version: 1 - )

BloodLustVampireRPG (HKLM\…\UDK-e84adc5f-c5bd-4b65-b7b6-ad3b11835521) (Version: - Epic Games, Inc.)

BlueStacks App Player (HKLM\…\BlueStacks) (Version: 4.32.90.1001 - BlueStack Systems, Inc.)

Bonjour (HKLM\…\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)

CameraHelperMsi (HKLM-x32\…\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden

Catalyst Control Center (HKLM-x32\…\{8B1A559A-FB9D-42F5-A8A7-2F132CF28414}) (Version: 1.00.0000 - )

CCleaner (HKLM-x32\…\CCleaner) (Version: 2.30 - Piriform)

Chasm (HKLM\…\SKIDROW - Chasm) (Version: - SKIDROW)

Classic Shell (HKLM\…\{383BB30A-B4A7-4666-9A83-22CFA8640097}) (Version: 4.3.0 - IvoSoft)

Core Temp 1.13 (HKLM\…\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.13 - ALCPU)

CPUID CPU-Z 1.81.1 (HKLM\…\CPUID CPU-Z_is1) (Version: 1.81.1 - ) <==== ATTENTION

Curse (HKLM-x32\…\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 6.0.0.0 - Curse)

DAEMON Tools Lite (HKLM\…\DAEMON Tools Lite) (Version: 10.1.0.0074 - Disc Soft Ltd)

Dead Cells (HKLM-x32\…\1237807960_is1) (Version: 0.9.2 - GOG.com)

Defraggler (HKLM\…\Defraggler) (Version: 2.22 - Piriform)

Destiny 2 (HKLM-x32\…\Destiny 2) (Version: - Blizzard Entertainment)

Dex (HKLM-x32\…\1929434313_is1) (Version: 2.0.0.3 - GOG.com)

Discord (HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\Discord) (Version: 0.0.304 - Discord Inc.)

Divinity - Original Sin Enhanced Edition (HKLM-x32\…\1445516929_is1) (Version: 2.5.0.12 - GOG.com)

Driver Booster 5 (HKLM-x32\…\Driver Booster_is1) (Version: 5.2.0 - IObit)

Epic Games Launcher (HKLM-x32\…\{0E63B233-DC24-442C-BD38-0B91D90FEC5B}) (Version: 1.1.167.0 - Epic Games, Inc.)

Epic Games Launcher Prerequisites (x64) (HKLM\…\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden

erLT (HKLM-x32\…\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden

Eye of the Beholder (HKLM-x32\…\1432575012_is1) (Version: 2.0.0.4 - GOG.com)

Fallout (HKLM-x32\…\Fallout) (Version: - )

Fallout 2 (HKLM-x32\…\2_is1) (Version: 2.1.0.17 - GOG.com)

Fallout 3 - Unofficial Fallout 3 Patch (HKLM-x32\…\{297C7552-BA68-4F73-AB83-82510777421D}_is1) (Version: v1.2.0 - Quarn ([removed]))

Fallout 3 (HKLM-x32\…\1454315831_is1) (Version: 1.7.0.3 - GOG.com)

Fallout Fixt 0.81alpha (Full Custom) (HKLM-x32\…\{83D6B5DC-9C8C-4DE2-B66C-14FA5C8680B5}_is1) (Version: 0.81alpha (Full Custom) - Sduibek)

Fallout: New Vegas (HKLM-x32\…\1454587428_is1) (Version: 1.4.0.525 - GOG.com)

FINAL FANTASY VII (HKLM-x32\…\{141B8BA9-BFFD-4635-AF64-078E31010EC3}_is1) (Version: 1.0 - Square Enix)

FINAL FANTASY XV (HKLM-x32\…\FINAL FANTASY XV_is1) (Version: - )

FirestormOS-Releasex64 (HKLM\…\FirestormOS-Releasex64) (Version: 5.1.7.55786 - The Phoenix Firestorm Project, Inc.)

Floris Evolved (HKLM-x32\…\Floris Evolved) (Version: - )

foobar2000 v1.3.16 (HKLM-x32\…\foobar2000) (Version: 1.3.16 - Peter Pawlowski)

Foxit Reader (HKLM-x32\…\Foxit Reader_is1) (Version: 8.2.0.2051 - Foxit Software Inc.)

Free Alarm Clock (HKLM-x32\…\{8ED5A2F1-338F-4608-8AF7-BCD1ADC1E1F7}_is1) (Version: 4.0.1.0 - Comfort Software Group)

Gateway to the Savage Frontier (HKLM-x32\…\1432649588_is1) (Version: 2.0.0.3 - GOG.com)

GOG Galaxy (HKLM-x32\…\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: - GOG.com)

Google Chrome (HKLM-x32\…\Google Chrome) (Version: 71.0.3578.98 - Google Inc.)

Google Talk Plugin (HKLM-x32\…\{F9B579C2-D854-300A-BE62-A09EB9D722E4}) (Version: 5.41.3.0 - Google)

Google Update Helper (HKLM-x32\…\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden

Grim Dawn (1.0.0.9) (HKLM-x32\…\1449651388_is1) (Version: 0.1.1.310 - GOG.com)

Grim Dawn: Crucible (1.0.0.9) (HKLM-x32\…\1812959072_is1) (Version: 0.1.1.310 - GOG.com)

Grim Dawn: Loyalist Upgrade (1.0.0.9) (HKLM-x32\…\1551979801_is1) (Version: 0.1.1.310 - GOG.com)

Grisaia Font Installer version 1 (HKLM-x32\…\Grisaia Font Installer_is1) (Version: 1 - )

G-senjou no Maou - The Devil on G-String (HKLM-x32\…\G-senjou no Maou - The Devil on G-String_is1) (Version: - )

GTA Save Editor (HKLM-x32\…\GTA Save Editor) (Version: 2.2.0.1 - XB36Hazard)

HandBrake 1.0.2 (HKLM-x32\…\HandBrake) (Version: 1.0.2 - )

HexChat (HKLM-x32\…\HexChat_is1) (Version: 2.12.4 - HexChat)

HF pAppLoc version 1.1.1 (HKLM-x32\…\{9143B17E-BBDE-4EA7-A4E3-20D384D9C8A5}_is1) (Version: 1.1.1 - Inquisitor)

Hyperdimension Neptunia ReBirth1 (HKLM-x32\…\1445338941_is1) (Version: 2.0.0.1 - GOG.com)

Hyperdimension Neptunia ReBirth1 DLC Pack (HKLM-x32\…\Hyperdimension Neptunia ReBirth1 DLC Pack_is1) (Version: 2.0.0.1 - GOG.com)

Icecream Ebook Reader version 4.26 (HKLM-x32\…\{B8C30F0F-1F23-49E1-A3ED-44DE17660EE2}_is1) (Version: 4.26 - Icecream Apps)

iCloud (HKLM\…\{82FCC407-A0E5-4B80-9241-5ABA78B61090}) (Version: 7.6.0.15 - Apple Inc.)

IMVU Avatar Chat Software (HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\IMVU Avatar chat client software BETA) (Version: - )

iTunes (HKLM\…\{36F365B3-05C2-455D-9D96-B73829DE046D}) (Version: 12.8.0.150 - Apple Inc.)

Java 8 Update 171 (64-bit) (HKLM\…\{26A24AE4-039D-4CA4-87B4-2F64180171F0}) (Version: 8.0.1710.11 - Oracle Corporation)

Kingdom Come Deliverance (HKLM-x32\…\Kingdom Come Deliverance_is1) (Version: - )

Lands Of Lore - The Throne of Chaos (HKLM-x32\…\1207662513_is1) (Version: 2.1.0.19 - GOG.com)

Launcher Prerequisites (x64) (HKLM-x32\…\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden

Logitech Webcam Software (HKLM-x32\…\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.80 - Logitech Inc.)

LogMeIn Hamachi (HKLM-x32\…\{892DB406-ADF8-4C30-9840-8438AF5B8763}) (Version: 2.2.0.607 - LogMeIn, Inc.) Hidden

LogMeIn Hamachi (HKLM-x32\…\LogMeIn Hamachi) (Version: 2.2.0.607 - LogMeIn, Inc.)

LOOT version 0.13.1 (HKLM-x32\…\{BF634210-A0D4-443F-A657-0DCE38040374}_is1) (Version: 0.13.1 - LOOT Team)

MEGAsync (HKLM-x32\…\MEGAsync) (Version: - Mega Limited)

MEmu (HKLM-x32\…\MEmu) (Version: 2.9.2 - Microvirt)

Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\…\{929CE49F-1CA7-4CF3-A9A1-6D757443C63F}) (Version: 1.2.0241 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\…\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\…\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\…\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\…\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\…\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\…\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\…\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\…\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\…\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\…\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\…\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\…\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\…\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\…\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\…\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\…\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\…\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\…\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\…\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)

Microsoft Visual C++ 2017 Redistributable (x64) - 14.11.25325 (HKLM-x32\…\{6c6356fe-cbfa-4944-9bed-a9e99f45cb7a}) (Version: 14.11.25325.0 - Microsoft Corporation)

Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\…\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)

Microsoft Windows Application Compatibility Database (HKLM\…\{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb) (Version: - )

Might and Magic 6 - The Mandate of Heaven (HKLM-x32\…\1207661253_is1) (Version: 2.1.0.42 - GOG.com)

Minion (HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\{Minion}}_is1) (Version: 3.0 - Good Game Mods LLC)

Mozilla Firefox 64.0.2 (x64 en-US) (HKLM\…\Mozilla Firefox 64.0.2 (x64 en-US)) (Version: 64.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM\…\MozillaMaintenanceService) (Version: 58.0.2 - Mozilla)

MPC-HC 1.7.10 (64-bit) (HKLM\…\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team)

My Game Long Name (HKLM\…\UDK-b3a54b26-09db-4946-9a24-bc33f5acacdb) (Version: - Epic Games, Inc.)

My Time At Portia (HKLM-x32\…\My Time At Portia_is1) (Version: - )

Neverwinter Nights 2 Complete (HKLM-x32\…\1207659162_is1) (Version: 1.23 - GOG.com)

Nexus Mod Manager (HKLM\…\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.65.2 - Black Tree Gaming)

NVIDIA 3D Vision Controller Driver 369.04 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)

NVIDIA 3D Vision Driver 388.13 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 388.13 - NVIDIA Corporation)

NVIDIA GeForce Experience 3.13.1.30 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.13.1.30 - NVIDIA Corporation)

NVIDIA Graphics Driver 388.13 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 388.13 - NVIDIA Corporation)

NVIDIA HD Audio Driver 1.3.35.1 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.35.1 - NVIDIA Corporation)

NVIDIA Miracast Virtual Audio 388.13 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 388.13 - NVIDIA Corporation)

NVIDIA PhysX System Software 9.17.0524 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)

OBS Studio (HKLM-x32\…\OBS Studio) (Version: 18.0.1 - OBS Project)

OpenAL (HKLM-x32\…\OpenAL) (Version: - )

OpenOffice 4.1.3 (HKLM-x32\…\{EEA30AEB-8BA7-465B-85D4-098BB99733E7}) (Version: 4.13.9783 - Apache Software Foundation)

Overwolf (HKLM-x32\…\Overwolf) (Version: 0.121.1.33 - Overwolf Ltd.)

PaceMaker plug-in for Winamp and MediaMonkey (HKLM-x32\…\PaceMaker plug-in) (Version: 2.7 - PaceMaker plug-inc.)

Parsec (HKLM-x32\…\Parsec) (Version: - Parsec Cloud Inc.)

Pathfinder Kingmaker (HKLM-x32\…\Pathfinder Kingmaker_is1) (Version: - )

PeaZip 6.1.1 (WIN64) (HKLM\…\{5A2BC38A-406C-4A5B-BF45-6991F9A05325}_is1) (Version: 6.1.1 - Giorgio Tani)

piaip AppLocale (HKLM-x32\…\{394BE3D9-7F57-4638-A8D1-1D88671913B7}) (Version: 1.0.0 - MS)

Plague Inc Evolved Shadow Plague (HKLM-x32\…\Plague Inc Evolved Shadow Plague_is1) (Version: - )

Planescape Torment - Enhanced Edition (HKLM-x32\…\Planescape Torment - Enhanced Edition_is1) (Version: - )

PokeMMO (HKLM\…\PokeMMO_is1) (Version: - PokeMMO)

PRC Pack (HKLM-x32\…\PRC Pack) (Version: - )

qBittorrent 3.3.16 (HKLM-x32\…\qBittorrent) (Version: 3.3.16 - The qBittorrent project)

Realtek High Definition Audio Driver (HKLM-x32\…\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8186 - Realtek Semiconductor Corp.)

Rockstar Games Social Club (HKLM-x32\…\Rockstar Games Social Club) (Version: 1.2.4.1 - Rockstar Games)

RogueKiller version 12.11.19.0 (HKLM\…\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 12.11.19.0 - Adlice Software)

Shenmue I and II (HKLM-x32\…\Shenmue I and II_is1) (Version: - )

Skype version 8.34 (HKLM-x32\…\Skype_is1) (Version: 8.34 - Skype Technologies S.A.)

Spybot - Search & Destroy (HKLM-x32\…\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.0 - Safer Networking Limited)

Steam (HKLM-x32\…\Steam) (Version: 2.10.91.91 - Valve Corporation)

SteamWorld Dig 2 (HKLM-x32\…\1861082507_is1) (Version: 1.1 - GOG.com)

Streamlabs OBS 0.11.3 (HKLM\…\029c4619-0385-5543-9426-46f9987161d9) (Version: 0.11.3 - General Workings, Inc.)

SUPERAntiSpyware (HKLM\…\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1260 - SUPERAntiSpyware.com)

TeamSpeak 3 Client (HKLM\…\TeamSpeak 3 Client) (Version: 3.1.1 - TeamSpeak Systems GmbH)

The Crew (Worldwide) (HKLM-x32\…\Uplay Install 413) (Version: - Ubisoft)

The Elder Scrolls II - Daggerfall (HKLM-x32\…\1435829353_is1) (Version: 2.0.0.4 - GOG.com)

The Escapists 2 (HKLM-x32\…\The Escapists 2_is1) (Version: - )

The Fruit of Grisaia (HKLM-x32\…\The Fruit of Grisaia_is1) (Version: - )

The Witcher 3 - Wild Hunt (HKLM-x32\…\1495134320_is1) (Version: 2.0.0.51 - GOG.com)

Tiberium Wars 1.09 (HKLM-x32\…\Command & Conquer 3: Tiberium Wars_is1) (Version: - HWMasters.com)

Trillian (HKLM-x32\…\Trillian) (Version: - Cerulean Studios, LLC)

Tweeten (HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\Tweeten) (Version: 4.6.1 - Inspect Element Inc.)

UltimateZip 9.0 (HKLM-x32\…\UltimateZip_is1) (Version: 9.0.0.23 - SWE von Schleusen)

Unepic (HKLM-x32\…\1207659227_is1) (Version: 1.51.0 - GOG.com)

Unigine Superposition Benchmark 1.0 (HKLM\…\Superposition_is1) (Version: 1.0 - Unigine Corp.)

Unity Web Player (HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\UnityWebPlayer) (Version: 5.3.7f1 - Unity Technologies ApS)

Uplay (HKLM-x32\…\Uplay) (Version: 18.0 - Ubisoft)

Vampire - The Masquerade - Bloodlines (HKLM-x32\…\1207659240_is1) (Version: 2.1.0.8 - GOG.com)

Ventrilo Client for Windows x64 (HKLM\…\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}) (Version: 3.0.8.0 - Flagship Industries, Inc.)

Vizzed Retro Game Room (HKLM-x32\…\{FF6F50C5-823C-435B-83B8-52559BB6DA09}) (Version: 2.41 - Vizzed)

VLC media player (HKLM\…\VLC media player) (Version: 3.0.4 - VideoLAN)

VMware Player (HKLM\…\{6D211A09-EB2A-4B83-ACCB-13B1BC12AF4E}) (Version: 12.5.2 - VMware, Inc.)

VMware VIX (HKLM-x32\…\{F99FC179-EA67-4BBC-8955-BDDA0CB94B88}) (Version: 1.15.6.00000 - VMware, Inc.)

Vortex (HKLM\…\57979c68-f490-55b8-8fed-8b017a5af2fe) (Version: 0.16.15 - Black Tree Gaming Ltd.)

Vulkan Run Time Libraries 1.0.21.0 (HKLM\…\VulkanRT1.0.21.0) (Version: 1.0.21.0 - LunarG, Inc.)

Vulkan Run Time Libraries 1.0.61.0 (HKLM\…\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden

We Happy Few (HKLM-x32\…\We Happy Few_is1) (Version: - )

Winamp (HKLM-x32\…\Winamp) (Version: 5.666 - Nullsoft, Inc)

Windows Driver Package - Sony Computer Entertainment Inc. Wireless controller for PLAYSTATION(R)3 Driver Package (01/20/2012 1.4.0.0) (HKLM\…\D5410AE5FA467EF0F19558D5F60C991A79E11B51) (Version: 01/20/2012 1.4.0.0 - Sony Computer Entertainment Inc.)

WinRAR 5.50 (32-bit) (HKLM-x32\…\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)

WORLD OF FINAL FANTASY (HKLM-x32\…\WORLD OF FINAL FANTASY_is1) (Version: - )

Ys Chronicles Plus I © Xseed version 1 (HKLM-x32\…\WXMgQ2hyb25pY2xlcyBQbHVzIEkgKGMpIFhzZWVk_is1) (Version: 1 - )

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1988832187-1948698999-1346875777-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1988832187-1948698999-1346875777-1001_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1988832187-1948698999-1346875777-1001_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1988832187-1948698999-1346875777-1001_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1988832187-1948698999-1346875777-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1988832187-1948698999-1346875777-1001_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1988832187-1948698999-1346875777-1001_Classes\CLSID\{A804CF1A-91E5-4F0C-9E8C-DB39E74056DD}\InprocServer32 -> C:\Users\MorteTorment\AppData\Local\Google\Update\1.3.33.23\psuser_64.dll (Google Inc.)

CustomCLSID: HKU\S-1-5-21-1988832187-1948698999-1346875777-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\MorteTorment\AppData\Local\Google\Update\1.3.33.23\psuser_64.dll (Google Inc.)

CustomCLSID: HKU\S-1-5-21-1988832187-1948698999-1346875777-1001_Classes\CLSID\{EA724FD3-844D-43A9-A8C9-A5BC35FC20E4}\InprocServer32 -> C:\Users\MorteTorment\AppData\Local\Google\Update\1.3.33.17\psuser_64.dll => No File

ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\ProgramData\MEGAsync\ShellExtX64.dll [2017-10-18] ()

ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\ProgramData\MEGAsync\ShellExtX64.dll [2017-10-18] ()

ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\ProgramData\MEGAsync\ShellExtX64.dll [2017-10-18] ()

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-01-04] (AVAST Software)

ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)

ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\ProgramData\MEGAsync\ShellExtX64.dll [2017-10-18] ()

ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\ProgramData\MEGAsync\ShellExtX64.dll [2017-10-18] ()

ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\ProgramData\MEGAsync\ShellExtX64.dll [2017-10-18] ()

ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2016-07-30] (IvoSoft)

ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-12-29] (Igor Pavlov)

ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-01-04] (AVAST Software)

ContextMenuHandlers1: [DefragglerShellExtension] -> {4380C993-0C43-4E02-9A7A-0D40B6EA7590} => C:\Program Files\Defraggler\DefragglerShell64.dll [2018-05-02] (Piriform Ltd)

ContextMenuHandlers1: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll [2016-12-23] (Foxit Software Inc.)

ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\ProgramData\MEGAsync\ShellExtX64.dll [2017-10-18] ()

ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2018-06-26] (Apple Inc.)

ContextMenuHandlers1: [UltimateZip] -> {2F860D81-AF3C-11D4-BDB3-00E0987D2490} => C:\Program Files (x86)\UltimateZip\uzshlex64.dll [2016-07-01] ()

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (Alexander Roshal)

ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)

ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\ProgramData\MEGAsync\ShellExtX64.dll [2017-10-18] ()

ContextMenuHandlers2-x32: [VMDiskMenuHandler] -> {271DC252-6FE1-4D59-9053-E4CF50AB99DE} => C:\Program Files (x86)\VMware\VMware Player\vmdkShellExt.dll [2016-11-11] (VMware, Inc.)

ContextMenuHandlers2-x32: [VMDiskMenuHandler64] -> {E4D28EDC-8C0B-43EE-9E7D-C8A8682334DC} => C:\Program Files (x86)\VMware\VMware Player\x64\vmdkShellExt64.dll [2016-11-11] (VMware, Inc.)

ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-01-04] (AVAST Software)

ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\ProgramData\MEGAsync\ShellExtX64.dll [2017-10-18] ()

ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-12-29] (Igor Pavlov)

ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\ProgramData\MEGAsync\ShellExtX64.dll [2017-10-18] ()

ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2017-10-27] (NVIDIA Corporation)

ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-12-29] (Igor Pavlov)

ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-01-04] (AVAST Software)

ContextMenuHandlers6: [DefragglerShellExtension] -> {4380C993-0C43-4E02-9A7A-0D40B6EA7590} => C:\Program Files\Defraggler\DefragglerShell64.dll [2018-05-02] (Piriform Ltd)

ContextMenuHandlers6: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll [2016-12-23] (Foxit Software Inc.)

ContextMenuHandlers6: [StartMenuExt] -> {E595F05F-903F-4318-8B0A-7F633B520D2B} => C:\Windows\system32\StartMenuHelper64.dll [2016-07-30] (IvoSoft)

ContextMenuHandlers6: [UltimateZip] -> {2F860D81-AF3C-11D4-BDB3-00E0987D2490} => C:\Program Files (x86)\UltimateZip\uzshlex64.dll [2016-07-01] ()

ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (Alexander Roshal)

ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0ADC1ADE-A2C5-474D-A6B5-EFD9822B2D56} - System32\Tasks\{F2EA64DD-8227-4BE4-96D8-C5A0C7CA4A2E} => C:\Windows\system32\pcalua.exe -a C:\Users\MorteTorment\Downloads\cep_v1x.exe -d C:\Users\MorteTorment\Downloads

Task: {196E8E8F-9FCE-4FE7-B5ED-9C97DF594B38} - System32\Tasks\{17596281-161F-42CB-999B-B08112AE6833} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Bluestacks\BluestacksUninstaller.exe" -c :tmp

Task: {19C6D411-892A-4EAB-8755-12833FB7AE2E} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2019-01-04] (AVAST Software)

Task: {1A5520DC-92AC-4373-AB77-96F3F99402C9} - System32\Tasks\Driver Booster SkipUAC (MorteTorment) => C:\Program Files (x86)\IObit\Driver Booster\5.2.0\DriverBooster.exe [2018-01-29] (IObit)

Task: {3337C612-2991-4207-857C-DBB972999048} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1988832187-1948698999-1346875777-1001Core => C:\Users\MorteTorment\AppData\Local\Google\Update\GoogleUpdate.exe [2017-12-13] (Google Inc.)

Task: {4BD8A199-E71E-4025-856D-F34EBDB13E52} - System32\Tasks\CCleanerSkipUAC => C:\Program Files (x86)\CCleaner\CCleaner.exe [2018-09-10] (Piriform Ltd)

Task: {50728650-624F-4FF4-BE10-307CD437BD9A} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-03-14] (NVIDIA Corporation)

Task: {522039EA-1935-4F83-8673-0B068FA5ECA9} - System32\Tasks\MEGA\MEGAsync Update Task S-1-5-21-1988832187-1948698999-1346875777-1001 => C:\ProgramData\MEGAsync\MEGAupdater.exe [2018-01-15] (Mega Limited)

Task: {5B6D8808-D45B-4B59-A652-3A11496AF273} - System32\Tasks\CCleaner Update => C:\Program Files (x86)\CCleaner\CCUpdate.exe [2018-09-10] (Piriform Ltd)

Task: {5C45CBCA-ACC5-4BB7-87C3-51B9C0306E7E} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-03-14] (NVIDIA Corporation)

Task: {5E9D0181-BF7F-4C75-8F74-D7EFFA2A28D0} - System32\Tasks\BlueStacksHelper => C:\ProgramData\BlueStacks\Client\Helper\BlueStacksHelper.exe [2018-11-15] (BlueStack Systems, Inc.)

Task: {64BA79ED-B9D0-4B1F-B27F-5F14F00460BD} - System32\Tasks\NETControlUpdate => C:\Windows\System32\service.exe

Task: {6A6EA886-DC5F-43BD-94B4-A0C3911C3C14} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2018-03-14] (NVIDIA Corporation)

Task: {8C07703B-76DD-4BD6-9435-4BE45682AF43} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-08-13] (Adobe Systems Incorporated)

Task: {922923E7-0526-4548-BBC6-FB5012400056} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-03-14] (NVIDIA Corporation)

Task: {983E34B9-E0B7-424C-85CD-0C5BC620583C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-12-02] (Adobe Systems Incorporated)

Task: {9CA5919C-9768-474B-9FA1-2DCB666CEADD} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_31_0_0_153_Plugin.exe [2018-12-02] (Adobe Systems Incorporated)

Task: {9D21206E-C251-4F26-A970-494A8C6DE3D1} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-03-14] (NVIDIA Corporation)

Task: {A093513E-E20C-4FD2-A53A-114D09ECA6C4} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-03-14] (NVIDIA Corporation)

Task: {A7F1AAC9-2892-4104-B517-9297F8B5CA8F} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe

Task: {AF8672E3-4A85-4AA9-878F-9825763A80E8} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2018-03-14] (NVIDIA Corporation)

Task: {B3ADD53F-467A-4656-A91B-4E5147F4EA5F} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2019-01-09] (Overwolf LTD)

Task: {C0C0FC56-2E20-4E35-B0B4-436FDE5D7F00} - System32\Tasks\{A4518508-6487-4D94-A1B7-0E79012895AD} => C:\Windows\system32\pcalua.exe -a "C:\GOG Games\Gothic\system\GothicStarter_mod.exe" -d "C:\GOG Games\Gothic\system"

Task: {C3C4357C-124E-4AFF-996E-B81A9763ECC4} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2018-03-14] (NVIDIA Corporation)

Task: {C8D4A1B4-8968-4D0D-9348-109CA5E17377} - System32\Tasks\Driver Booster Scheduler => C:\Program Files (x86)\IObit\Driver Booster\5.2.0\Scheduler.exe [2018-01-26] (IObit)

Task: {C8D4D14D-2B1D-4A8D-800C-F4B20801CA24} - System32\Tasks\Private Internet Access Startup => C:\Program Files\pia_manager\pia_manager.exe [2017-03-29] ()

Task: {CDE48FAD-67A2-4092-B71F-4E22D32DBC68} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-05] (Google Inc.)

Task: {E1C08265-6A3C-4823-A8CD-CB6CFDCB3BF4} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2019-01-14] (AVAST Software)

Task: {E20649D7-21C7-4CB5-9450-FAB4E1ED4F8C} - System32\Tasks\{55664C84-BD5E-4D1E-92C7-29A3D0916149} => C:\Windows\system32\pcalua.exe -a C:\Users\MorteTorment\Downloads\skse_1_07_03_installer(1).exe -d C:\Users\MorteTorment\Downloads

Task: {E7E12AF0-DFA3-4ED5-9A0B-0D1007F3C9CB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2018-01-08] (Apple Inc.)

Task: {FC7816F9-57AD-4904-8A6E-0AFFC26097BA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-02-05] (Google Inc.)

Task: {FCB29757-A70A-4196-A349-37D7A91A62A7} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1988832187-1948698999-1346875777-1001UA => C:\Users\MorteTorment\AppData\Local\Google\Update\GoogleUpdate.exe [2017-12-13] (Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\MorteTorment\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Hangouts.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> –profile-directory=Default –app-id=knipolnnllmklapflnccelgolnpehhpl

==================== Loaded Modules (Whitelisted) ==============

2017-12-08 01:48 - 2017-12-08 01:48 - 000088888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2018-06-23 05:56 - 2018-06-23 05:56 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2018-09-05 20:12 - 2018-03-14 05:05 - 001267648 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll

2017-10-18 13:51 - 2017-10-18 13:51 - 000598528 _____ () C:\ProgramData\MEGAsync\ShellExtX64.dll

2019-01-13 14:55 - 2016-07-01 20:21 - 002394624 _____ () C:\Program Files (x86)\UltimateZip\uzshlex64.dll

2019-01-04 06:35 - 2019-01-04 06:35 - 093695912 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

2019-01-04 06:34 - 2019-01-04 06:34 - 000667016 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll

2018-07-03 14:01 - 2018-07-03 14:01 - 001960448 _____ () C:\Users\MorteTorment\AppData\Roaming\Parsec\electron\ffmpeg.dll

2018-07-03 14:01 - 2018-07-03 14:01 - 003429376 _____ () C:\Users\MorteTorment\AppData\Roaming\Parsec\electron\libglesv2.dll

2018-07-03 14:01 - 2018-07-03 14:01 - 000017408 _____ () C:\Users\MorteTorment\AppData\Roaming\Parsec\electron\libegl.dll

2018-12-24 07:13 - 2018-12-31 11:06 - 002798592 _____ () C:\Users\MorteTorment\Downloads\DS4Windows_1.6.2_x86\DS4Windows.exe

2018-12-17 23:16 - 2018-12-11 21:11 - 005237216 _____ () C:\Program Files (x86)\Google\Chrome\Application\71.0.3578.98\libglesv2.dll

2018-12-17 23:16 - 2018-12-11 21:11 - 000117216 _____ () C:\Program Files (x86)\Google\Chrome\Application\71.0.3578.98\libegl.dll

2012-09-13 00:38 - 2012-09-13 00:38 - 000264040 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe

2018-09-05 20:12 - 2018-03-14 05:05 - 001041344 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll

2018-10-07 19:22 - 2018-11-29 11:12 - 067919944 _____ () C:\Program Files (x86)\GOG Galaxy\libcef.dll

2018-10-07 19:22 - 2018-11-29 11:12 - 000503368 _____ () C:\Program Files (x86)\GOG Galaxy\PocoUtil.dll

2018-10-07 19:22 - 2018-11-29 11:12 - 001071176 _____ () C:\Program Files (x86)\GOG Galaxy\PocoNet.dll

2018-10-07 19:22 - 2018-11-29 11:12 - 001856072 _____ () C:\Program Files (x86)\GOG Galaxy\PocoData.dll

2018-10-07 19:22 - 2018-11-29 11:12 - 000387656 _____ () C:\Program Files (x86)\GOG Galaxy\PocoDataSQLite.dll

2018-10-07 19:22 - 2018-11-29 11:12 - 001656392 _____ () C:\Program Files (x86)\GOG Galaxy\PocoFoundation.dll

2018-10-07 19:22 - 2018-11-29 11:12 - 000306248 _____ () C:\Program Files (x86)\GOG Galaxy\PocoNetSSL.dll

2018-10-07 19:22 - 2018-11-29 11:12 - 000327752 _____ () C:\Program Files (x86)\GOG Galaxy\PocoJSON.dll

2017-07-22 04:26 - 2018-11-29 11:12 - 000130120 _____ () C:\Program Files (x86)\GOG Galaxy\xdelta3.dll

2018-10-07 19:22 - 2018-11-29 11:12 - 000681032 _____ () C:\Program Files (x86)\GOG Galaxy\sqlite.dll

2018-10-07 19:22 - 2018-11-29 11:12 - 000107592 _____ () C:\Program Files (x86)\GOG Galaxy\zlib.dll

2018-10-07 19:22 - 2018-11-29 11:12 - 000513608 _____ () C:\Program Files (x86)\GOG Galaxy\PocoXML.dll

2018-10-07 19:22 - 2018-11-29 11:12 - 000270920 _____ () C:\Program Files (x86)\GOG Galaxy\PocoZip.dll

2018-10-07 19:22 - 2018-11-29 11:12 - 000426568 _____ () C:\Program Files (x86)\GOG Galaxy\pcre.dll

2018-10-07 19:22 - 2018-11-29 11:12 - 000157256 _____ () C:\Program Files (x86)\GOG Galaxy\PocoCrypto.dll

2018-10-07 19:22 - 2018-11-29 11:12 - 000152648 _____ () C:\Program Files (x86)\GOG Galaxy\expat.dll

2018-09-04 00:00 - 2018-09-04 00:00 - 000071680 _____ () C:\Program Files (x86)\Trillian\zlib1.dll

2018-09-04 00:00 - 2018-09-04 00:00 - 000119808 _____ () C:\Program Files (x86)\Trillian\libexpat.dll

2018-09-04 00:00 - 2018-09-04 00:00 - 000006656 _____ () c:\program files (x86)\trillian\languages\en\trillian.dll

2018-09-04 00:00 - 2018-09-04 00:00 - 000224256 _____ () C:\Program Files (x86)\Trillian\libpng16.dll

2018-09-04 00:00 - 2018-09-04 00:00 - 000015360 _____ () C:\Program Files (x86)\Trillian\libgif.dll

2018-09-04 00:00 - 2018-09-04 00:00 - 000003072 _____ () c:\program files (x86)\trillian\languages\en\toolkit.dll

2018-09-04 00:00 - 2018-09-04 00:00 - 000010752 _____ () c:\program files (x86)\trillian\languages\en\buddy.dll

2018-09-04 00:00 - 2018-09-04 00:00 - 000005120 _____ () c:\program files (x86)\trillian\languages\en\talk.dll

2018-09-04 00:00 - 2018-09-04 00:00 - 000067072 _____ () C:\Program Files (x86)\Trillian\libtinyxml2.dll

2012-09-13 00:38 - 2012-09-13 00:38 - 002144104 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll

2012-09-13 00:38 - 2012-09-13 00:38 - 007955304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll

2012-09-13 00:38 - 2012-09-13 00:38 - 000341352 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll

2012-09-13 00:38 - 2012-09-13 00:38 - 000028008 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll

2012-09-13 00:38 - 2012-09-13 00:38 - 000127336 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll

2012-09-13 00:39 - 2012-09-13 00:39 - 000336232 _____ () C:\Program Files (x86)\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll

2018-10-07 19:22 - 2018-07-11 13:47 - 003176448 _____ () C:\Program Files (x86)\GOG Galaxy\libglesv2.dll

2018-10-07 19:22 - 2018-07-11 13:47 - 000079872 _____ () C:\Program Files (x86)\GOG Galaxy\libegl.dll

2018-09-05 20:12 - 2018-03-14 05:04 - 081563584 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll

2018-10-12 14:36 - 2018-03-14 05:04 - 002478016 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\swiftshader\libglesv2.dll

2018-10-12 14:36 - 2018-03-14 05:04 - 000125376 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\swiftshader\libegl.dll

2019-01-15 18:02 - 2019-01-15 16:32 - 002000216 _____ () C:\Users\MorteTorment\AppData\Local\Discord\app-0.0.304\ffmpeg.dll

2019-01-15 18:02 - 2019-01-15 16:32 - 004332376 _____ () C:\Users\MorteTorment\AppData\Local\Discord\app-0.0.304\libglesv2.dll

2019-01-15 18:02 - 2019-01-15 16:32 - 000106328 _____ () C:\Users\MorteTorment\AppData\Local\Discord\app-0.0.304\libegl.dll

2019-01-16 13:49 - 2019-01-25 10:09 - 011345240 _____ () \\?\C:\Users\MorteTorment\AppData\Roaming\discord\0.0.304\modules\discord_voice\discord_voice.node

2019-01-16 13:49 - 2019-01-16 13:49 - 001723224 _____ () \\?\C:\Users\MorteTorment\AppData\Roaming\discord\0.0.304\modules\discord_utils\discord_utils.node

2019-01-16 13:49 - 2019-01-16 13:49 - 001762648 _____ () \\?\C:\Users\MorteTorment\AppData\Roaming\discord\0.0.304\modules\discord_game_utils\discord_game_utils.node

2019-01-16 13:49 - 2019-01-16 13:49 - 002672984 _____ () \\?\C:\Users\MorteTorment\AppData\Roaming\discord\0.0.304\modules\discord_spellcheck\node_modules\cld\build\Release\cld.node

2019-01-16 13:49 - 2019-01-16 13:49 - 000837464 _____ () \\?\C:\Users\MorteTorment\AppData\Roaming\discord\0.0.304\modules\discord_spellcheck\node_modules\spellchecker\build\Release\spellchecker.node

2019-01-16 13:49 - 2019-01-16 13:49 - 000479064 _____ () \\?\C:\Users\MorteTorment\AppData\Roaming\discord\0.0.304\modules\discord_spellcheck\node_modules\keyboard-layout\build\Release\keyboard-layout-manager.node

2019-01-16 13:49 - 2019-01-16 13:49 - 000553816 _____ () \\?\C:\Users\MorteTorment\AppData\Roaming\discord\0.0.304\modules\discord_erlpack\discord_erlpack.node

2019-01-16 13:49 - 2019-01-16 13:49 - 009914712 _____ () \\?\C:\Users\MorteTorment\AppData\Roaming\discord\0.0.304\modules\discord_cloudsync\discord_cloudsync.node

2019-01-16 13:49 - 2019-01-16 13:49 - 002909016 _____ () \\?\C:\Users\MorteTorment\AppData\Roaming\discord\0.0.304\modules\discord_rpc\discord_rpc.node

2019-01-16 13:49 - 2019-01-16 13:49 - 001726296 _____ () \\?\C:\Users\MorteTorment\AppData\Roaming\discord\0.0.304\modules\discord_overlay2\discord_overlay2.node

2019-01-16 13:49 - 2019-01-16 13:49 - 001266008 _____ () \\?\C:\Users\MorteTorment\AppData\Roaming\discord\0.0.304\modules\discord_modules\discord_modules.node

2019-01-16 13:49 - 2019-01-16 13:49 - 022327128 _____ () \\?\C:\Users\MorteTorment\AppData\Roaming\discord\0.0.304\modules\discord_dispatch\discord_dispatch.node

2019-01-16 13:49 - 2019-01-16 13:49 - 002947416 _____ () \\?\C:\Users\MorteTorment\AppData\Roaming\discord\0.0.304\modules\discord_contact_import\discord_contact_import.node

2019-01-16 13:49 - 2019-01-16 13:49 - 001297752 _____ () \\?\C:\Users\MorteTorment\AppData\Roaming\discord\0.0.304\modules\discord_vigilante\discord_vigilante.node

2019-01-15 18:02 - 2019-01-15 16:32 - 002269528 _____ () C:\Users\MorteTorment\AppData\Local\Discord\app-0.0.304\swiftshader\libglesv2.dll

2019-01-15 18:02 - 2019-01-15 16:32 - 000132952 _____ () C:\Users\MorteTorment\AppData\Local\Discord\app-0.0.304\swiftshader\libegl.dll

2017-10-18 13:58 - 2017-10-18 13:58 - 000570368 _____ () C:\ProgramData\MEGAsync\ShellExtX32.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\MorteTorment\AppData\Local\Temp:$DATA [34]

AlternateDataStreams: C:\Users\Public\AppData:CSM [456]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\vizzed.com -> www.vizzed.com

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 05:25 - 2019-01-04 01:27 - 000000826 _____ C:\Windows\system32\drivers\etc\hosts

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\RogueKiller;;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common

HKCU\Environment\\Path: C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\RogueKiller;;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg

DNS Servers: 75.75.75.75 - 75.75.76.76

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)

Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

MSCONFIG\Services: AdobeARMservice => 2

MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3

MSCONFIG\Services: AeLookupSvc => 3

MSCONFIG\Services: Apple Mobile Device Service => 2

MSCONFIG\Services: Bonjour Service => 2

MSCONFIG\Services: BstHdAndroidSvc => 3

MSCONFIG\Services: BstHdLogRotatorSvc => 2

MSCONFIG\Services: BstHdPlusAndroidSvc => 3

MSCONFIG\Services: Fax => 3

MSCONFIG\Services: gupdate => 2

MSCONFIG\Services: gupdatem => 3

MSCONFIG\Services: Hamachi2Svc => 2

MSCONFIG\Services: iPod Service => 3

MSCONFIG\Services: LMIGuardianSvc => 2

MSCONFIG\Services: MozillaMaintenance => 3

MSCONFIG\Services: OverwolfUpdater => 3

MSCONFIG\Services: SessionEnv => 3

MSCONFIG\Services: Steam Client Service => 3

MSCONFIG\Services: WPCSvc => 3

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^StartUp^HandyAndy.lnk => C:\Windows\pss\HandyAndy.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^MorteTorment^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Curse.lnk => C:\Windows\pss\Curse.lnk.Startup

MSCONFIG\startupfolder: C:^Users^MorteTorment^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MEGAsync.lnk => C:\Windows\pss\MEGAsync.lnk.Startup

MSCONFIG\startupfolder: C:^Users^MorteTorment^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Trillian.lnk => C:\Windows\pss\Trillian.lnk.Startup

MSCONFIG\startupreg: AIM for Windows => "C:\Users\MorteTorment\AppData\Local\AOL\AIM\aim.exe"

MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\MorteTorment\AppData\Local\Akamai\netsession_win.exe"

MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\Bluestacks\HD-Agent.exe

MSCONFIG\startupreg: Classic Start Menu => "C:\Program Files\Classic Shell\ClassicStartMenu.exe" -autorun

MSCONFIG\startupreg: DAEMON Tools Lite Automount => "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun

MSCONFIG\startupreg: Discord => C:\Users\MorteTorment\AppData\Local\Discord\app-0.0.301\Discord.exe

MSCONFIG\startupreg: FreeAC => C:\Program Files (x86)\FreeAlarmClock\FreeAlarmClock.exe -autorun

MSCONFIG\startupreg: GameCenter => "C:\Users\MorteTorment\AppData\Local\GameCenter\GameCenter.exe" -autostart

MSCONFIG\startupreg: Google Update => C:\Users\MorteTorment\AppData\Local\Google\Update\1.3.33.17\GoogleUpdateCore.exe

MSCONFIG\startupreg: GoogleChromeAutoLaunch_E4914F21A471BC6324E4527AA3B95D56 => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" –no-startup-window /prefetch:5

MSCONFIG\startupreg: iCloudDrive => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe

MSCONFIG\startupreg: iCloudPhotos => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe

MSCONFIG\startupreg: iCloudServices => "C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" –auto-start

MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe -overwolfsilent

MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

MSCONFIG\startupreg: Steam => "C:\Steam\steam.exe" -silent

MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

MSCONFIG\startupreg: SUPERAntiSpyware => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

MSCONFIG\startupreg: uTorrent => "C:\Program Files (x86)\uTorrent\uTorrent.exe"

MSCONFIG\startupreg: VizzedRgrPluginServiceLoader => "C:\Program Files (x86)\Vizzed\Vizzed Retro Game Room\VizzedRgrServiceLoader.exe"

HKLM\…\StartupApproved\StartupFolder: => "HandyAndy.lnk"

HKLM\…\StartupApproved\Run: => "iTunesHelper"

HKLM\…\StartupApproved\Run32: => "SunJavaUpdateSched"

HKLM\…\StartupApproved\Run32: => "LogMeIn Hamachi Ui"

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\StartupApproved\StartupFolder: => "Curse.lnk"

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\StartupApproved\StartupFolder: => "MEGAsync.lnk"

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\StartupApproved\Run: => "uTorrent"

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\StartupApproved\Run: => "Akamai NetSession Interface"

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\StartupApproved\Run: => "Steam"

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\StartupApproved\Run: => "BlueStacks Agent"

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\StartupApproved\Run: => "iCloudDrive"

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\StartupApproved\Run: => "iCloudPhotos"

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\StartupApproved\Run: => "iCloudServices"

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\StartupApproved\Run: => "Overwolf"

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\StartupApproved\Run: => "DashlanePlugin"

HKU\S-1-5-21-1988832187-1948698999-1346875777-1001\…\StartupApproved\Run: => "Dashlane"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{D84BD05B-7322-43FC-A596-966852A06C5F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe No File

FirewallRules: [{3A399959-7C69-4D76-9292-0C15472FDED0}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe ()

FirewallRules: [{FA4E3F27-8C5B-485D-A200-F63F23B134DB}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe ()

FirewallRules: [{2E3273C1-A830-4349-A689-36CBBEE4EDD6}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.)

FirewallRules: [{27ADF0C4-D832-4750-8B93-695F6C8843B2}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.)

FirewallRules: [TCP Query User{0CCF9E88-922E-4B1A-9979-65B57CD18421}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe No File

FirewallRules: [UDP Query User{81273C80-2456-466B-8587-55209F7CDE38}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe No File

FirewallRules: [{7153A11C-563B-4000-8EB2-3BA9FCB14CAE}] => (Allow) C:\Program Files (x86)\AIM\aim.exe No File

FirewallRules: [{F66AAAAE-AB62-4140-8BEC-DF0E7A530A5F}] => (Allow) C:\Program Files (x86)\AIM\aim.exe No File

FirewallRules: [TCP Query User{68588870-D06A-47C1-96C6-F8B55D534D5D}C:\users\mortetorment\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\mortetorment\appdata\local\akamai\netsession_win.exe No File

FirewallRules: [UDP Query User{7514E5B9-8966-4708-8471-90A911EB2873}C:\users\mortetorment\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\mortetorment\appdata\local\akamai\netsession_win.exe No File

FirewallRules: [TCP Query User{15FEDE7F-820C-4068-8344-6158A105B605}C:\program files (x86)\turbine\the lord of the rings online\lotroclient.exe] => (Allow) C:\program files (x86)\turbine\the lord of the rings online\lotroclient.exe No File

FirewallRules: [UDP Query User{6039FFF4-6C2A-4B3A-85F5-4EB9B837A8CE}C:\program files (x86)\turbine\the lord of the rings online\lotroclient.exe] => (Allow) C:\program files (x86)\turbine\the lord of the rings online\lotroclient.exe No File

FirewallRules: [TCP Query User{BCFA05DC-788F-425F-97C6-702AD1DDCC4A}C:\program files\firestorm-releasex64\slvoice.exe] => (Allow) C:\program files\firestorm-releasex64\slvoice.exe No File

FirewallRules: [UDP Query User{9BD628BD-87B9-48C1-9D74-A7F2F02CE89C}C:\program files\firestorm-releasex64\slvoice.exe] => (Allow) C:\program files\firestorm-releasex64\slvoice.exe No File

FirewallRules: [{A06A5D63-7678-4F3D-B216-41C6BA33F298}] => (Allow) C:\Steam\Steam.exe (Valve Corporation)

FirewallRules: [{88283997-B40F-419F-B17F-FABB9ABF02EB}] => (Allow) C:\Steam\Steam.exe (Valve Corporation)

FirewallRules: [{98B3F618-3096-4CD8-972E-5AB39FF56E2F}] => (Allow) C:\Steam\bin\steamwebhelper.exe No File

FirewallRules: [{92001062-1BAE-47C0-962D-2D2E53055DBD}] => (Allow) C:\Steam\bin\steamwebhelper.exe No File

FirewallRules: [{9F8191A4-DA91-4AA3-BACD-8E417F3ECB8D}] => (Allow) C:\Steam\steamapps\common\Project Fire\Pfire.exe ()

FirewallRules: [{22836BC5-ED4D-4CF1-8D87-8DFC54D15D37}] => (Allow) C:\Steam\steamapps\common\Project Fire\Pfire.exe ()

FirewallRules: [{02EBDAC4-4EB1-423C-9996-DFB2F49B0250}] => (Allow) C:\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe (Rockstar Games)

FirewallRules: [{DA5E974D-3045-4BD0-9BF0-D657A8C2F102}] => (Allow) C:\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe (Rockstar Games)

FirewallRules: [TCP Query User{06970569-D1DF-4B6F-88FE-4327739706B3}C:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\steam\steamapps\common\grand theft auto v\gta5.exe (Rockstar Games)

FirewallRules: [UDP Query User{1F35CBF6-783C-4A77-9A42-C8278C73981E}C:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\steam\steamapps\common\grand theft auto v\gta5.exe (Rockstar Games)

FirewallRules: [TCP Query User{1138160C-9BC3-4F4C-AC19-9EDB2F87AD09}C:\program files (x86)\r.g. mechanics\baldurs gate - enhanced edition\bgee.exe] => (Allow) C:\program files (x86)\r.g. mechanics\baldurs gate - enhanced edition\bgee.exe (Overhaul Games™)

FirewallRules: [UDP Query User{2E4327D6-DD65-436E-A5FE-F9EE241785EF}C:\program files (x86)\r.g. mechanics\baldurs gate - enhanced edition\bgee.exe] => (Allow) C:\program files (x86)\r.g. mechanics\baldurs gate - enhanced edition\bgee.exe (Overhaul Games™)

FirewallRules: [{1D1A0D6B-86EB-43D3-9CF5-C4858968881C}] => (Allow) C:\Steam\steamapps\common\Zombie Defense\ZombieDefense.exe ()

FirewallRules: [{336E9D7B-356F-4EDF-BF98-6D8A4C2F4AA4}] => (Allow) C:\Steam\steamapps\common\Zombie Defense\ZombieDefense.exe ()

FirewallRules: [{BFFFCB51-0146-4030-B9E8-3218DB501407}] => (Allow) C:\Steam\steamapps\common\Disturbed\Disturbed.exe ()

FirewallRules: [{DB6A3614-4647-4D0A-878D-7EA65BFAE5B2}] => (Allow) C:\Steam\steamapps\common\Disturbed\Disturbed.exe ()

FirewallRules: [TCP Query User{640618C4-972C-4BA1-AD93-F237ECB60D0C}C:\users\mortetorment\downloads\bloodlust.shadowhunter.v1.4.4.6\binaries\win32\udk.exe] => (Allow) C:\users\mortetorment\downloads\bloodlust.shadowhunter.v1.4.4.6\binaries\win32\udk.exe No File

FirewallRules: [UDP Query User{203A9F85-3C69-4AF2-B6A1-710CE65AB13D}C:\users\mortetorment\downloads\bloodlust.shadowhunter.v1.4.4.6\binaries\win32\udk.exe] => (Allow) C:\users\mortetorment\downloads\bloodlust.shadowhunter.v1.4.4.6\binaries\win32\udk.exe No File

FirewallRules: [TCP Query User{76BB1788-3321-40BD-8926-A6B74C2E27D5}C:\program files\bloodlust shadowhunter\binaries\win32\udk.exe] => (Allow) C:\program files\bloodlust shadowhunter\binaries\win32\udk.exe (Epic Games, Inc.)

FirewallRules: [UDP Query User{96000C93-88C9-48BF-A728-594D73E786BF}C:\program files\bloodlust shadowhunter\binaries\win32\udk.exe] => (Allow) C:\program files\bloodlust shadowhunter\binaries\win32\udk.exe (Epic Games, Inc.)

FirewallRules: [TCP Query User{CCEF365B-3573-4D56-A430-CB8ADBC8C74E}C:\program files (x86)\doom\doomx64.exe] => (Allow) C:\program files (x86)\doom\doomx64.exe No File

FirewallRules: [UDP Query User{F2DF5369-9885-42CE-AC77-2E79A513511E}C:\program files (x86)\doom\doomx64.exe] => (Allow) C:\program files (x86)\doom\doomx64.exe No File

FirewallRules: [TCP Query User{23BF6ABC-5398-4927-A291-BCEDA1D4D29E}C:\users\mortetorment\appdata\local\temp\i1475700380\windows\resource\jre\bin\javaw.exe] => (Allow) C:\users\mortetorment\appdata\local\temp\i1475700380\windows\resource\jre\bin\javaw.exe No File

FirewallRules: [UDP Query User{F3BFAFD1-71F5-495F-B3D5-9F1F5E53E0EC}C:\users\mortetorment\appdata\local\temp\i1475700380\windows\resource\jre\bin\javaw.exe] => (Allow) C:\users\mortetorment\appdata\local\temp\i1475700380\windows\resource\jre\bin\javaw.exe No File

FirewallRules: [TCP Query User{AD869DA6-6E4C-4A43-8D80-4711CDD38C77}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe No File

FirewallRules: [UDP Query User{149B86A8-8C19-496F-95C9-7CE98A2FC4CB}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe No File

FirewallRules: [{2A1DAD69-BEC6-432F-8AAB-F3DE9A4DE916}] => (Allow) C:\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe (Bethesda Softworks)

FirewallRules: [{3CF44C61-D799-4A99-9D99-5470845106AA}] => (Allow) C:\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe (Bethesda Softworks)

FirewallRules: [{DB1CCB02-C673-421F-9816-F10065E20435}] => (Allow) C:\Steam\steamapps\common\Skyrim\skse_steam_boot.exe No File

FirewallRules: [{F0C0F7B2-075B-4CE4-A694-79D70168D86F}] => (Allow) C:\Steam\steamapps\common\Skyrim\skse_steam_boot.exe No File

FirewallRules: [{2847A4C3-0871-4051-95E8-C0546DB333FA}] => (Allow) C:\Steam\steamapps\common\Blameless\Blameless.exe ()

FirewallRules: [{9E59C7BB-CA87-4885-B77A-0E34A99721B8}] => (Allow) C:\Steam\steamapps\common\Blameless\Blameless.exe ()

FirewallRules: [{53440500-490F-4D30-A0EB-89421BE5F0F2}] => (Allow) C:\Steam\steamapps\common\Black Rose\Black Rose.exe ()

FirewallRules: [{E8201601-1A87-4F8A-B977-6618F415F189}] => (Allow) C:\Steam\steamapps\common\Black Rose\Black Rose.exe ()

FirewallRules: [{4397F7F8-8882-4E6E-B33A-41A99E8AE19F}] => (Allow) C:\Steam\steamapps\common\Absent\Absent.exe (Chris Jones)

FirewallRules: [{675B4FFB-8FE5-4256-8E48-214805EEED79}] => (Allow) C:\Steam\steamapps\common\Absent\Absent.exe (Chris Jones)

FirewallRules: [{8DE45DD3-8AE2-4DBA-9A4F-05FAF133A477}] => (Allow) C:\Steam\steamapps\common\Minds Eyes\MindsEyesLaunch.exe ()

FirewallRules: [{B124BEA8-8F96-4898-AEF8-20D855901EED}] => (Allow) C:\Steam\steamapps\common\Minds Eyes\MindsEyesLaunch.exe ()

FirewallRules: [{4F1D5AF6-ABD8-454E-8EE2-2A6DC8DA7B57}] => (Allow) C:\Steam\steamapps\common\Port of Call\PortOfCall.exe ()

FirewallRules: [{78EF6DBE-E313-4567-A981-187C631F86A8}] => (Allow) C:\Steam\steamapps\common\Port of Call\PortOfCall.exe ()

FirewallRules: [TCP Query User{538CF3AF-C412-4076-BCD8-FA418071AA1E}C:\gog games\we happy few\glimpsegame\binaries\win64\glimpsegame.exe] => (Allow) C:\gog games\we happy few\glimpsegame\binaries\win64\glimpsegame.exe No File

FirewallRules: [UDP Query User{F1ABAF4B-6E63-4746-9201-63779FED0E84}C:\gog games\we happy few\glimpsegame\binaries\win64\glimpsegame.exe] => (Allow) C:\gog games\we happy few\glimpsegame\binaries\win64\glimpsegame.exe No File

FirewallRules: [TCP Query User{043DA168-AC45-488D-91C7-828BA99CB9F5}C:\program files\cloud imperium games\patcher\cigpatcher.exe] => (Allow) C:\program files\cloud imperium games\patcher\cigpatcher.exe No File

FirewallRules: [UDP Query User{362E65A6-7A48-48AB-B6B5-FF9C8D203408}C:\program files\cloud imperium games\patcher\cigpatcher.exe] => (Allow) C:\program files\cloud imperium games\patcher\cigpatcher.exe No File

FirewallRules: [TCP Query User{1EDA69C6-B635-433F-BE9E-B64B3C1EFACE}C:\program files\cloud imperium games\starcitizen\public\bin64\starcitizen.exe] => (Allow) C:\program files\cloud imperium games\starcitizen\public\bin64\starcitizen.exe No File

FirewallRules: [UDP Query User{44C6F8AF-4510-4481-BB6E-53ABFC09774D}C:\program files\cloud imperium games\starcitizen\public\bin64\starcitizen.exe] => (Allow) C:\program files\cloud imperium games\starcitizen\public\bin64\starcitizen.exe No File

FirewallRules: [{213C6626-49C0-416F-85F6-A0CCFF6FFA43}] => (Allow) C:\Steam\steamapps\common\Skyrim Special Edition\SkyrimSELauncher.exe No File

FirewallRules: [{A8B2B66B-DD52-4D44-B635-FDC9C759FA94}] => (Allow) C:\Steam\steamapps\common\Skyrim Special Edition\SkyrimSELauncher.exe No File

FirewallRules: [{A870FBFB-04CB-41F5-ABA6-D1391D41F091}] => (Allow) C:\Steam\steamapps\common\Shadowrun Dragonfall Director's Cut\Dragonfall.exe ()

FirewallRules: [{8F2FB637-C00C-4E6B-A4D8-7616112D772D}] => (Allow) C:\Steam\steamapps\common\Shadowrun Dragonfall Director's Cut\Dragonfall.exe ()

FirewallRules: [{EFEC6BC1-0571-4FEB-8DF2-E46251E2DAB5}] => (Allow) C:\Steam\steamapps\common\Fallout 4\Fallout4Launcher.exe (Bethesda Softworks)

FirewallRules: [{DC9383B3-C58E-4006-97D3-D9A160C16145}] => (Allow) C:\Steam\steamapps\common\Fallout 4\Fallout4Launcher.exe (Bethesda Softworks)

FirewallRules: [{A5215779-7C49-42C6-9E45-2C445ED22F6B}] => (Allow) C:\Steam\steamapps\common\Hitman™\Launcher.exe No File

FirewallRules: [{E07A37E7-705D-4F7A-BBB0-24B28F40C7A0}] => (Allow) C:\Steam\steamapps\common\Hitman™\Launcher.exe No File

FirewallRules: [TCP Query User{359515C9-4DCC-4BD0-8CEF-A43857B61F1A}C:\program files (x86)\diablo\diablo.exe] => (Allow) C:\program files (x86)\diablo\diablo.exe No File

FirewallRules: [UDP Query User{3647BA3F-5A02-47E8-A764-DEB97F89F6B9}C:\program files (x86)\diablo\diablo.exe] => (Allow) C:\program files (x86)\diablo\diablo.exe No File

FirewallRules: [{73A4156F-D1A6-43EF-907E-04F3693A52E4}] => (Allow) C:\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve Corporation)

FirewallRules: [{FC422081-426D-42E5-98E2-BAA0CF51374E}] => (Allow) C:\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve Corporation)

FirewallRules: [{132D4E0E-812F-4F69-B908-124D102BB1A3}] => (Allow) C:\Steam\steamapps\common\The Pirate Caribbean Hunt\ThePirate.exe ()

FirewallRules: [{2830A177-25FF-409C-927C-BD6CE49AE6D2}] => (Allow) C:\Steam\steamapps\common\The Pirate Caribbean Hunt\ThePirate.exe ()

FirewallRules: [{DE633DAB-F7D3-4357-8FD5-478A93161B06}] => (Allow) C:\Steam\steamapps\common\MountBlade Warband\mb_warband.exe ( Taleworlds Entertainment)

FirewallRules: [{49064C91-C505-4092-8386-1264450D8775}] => (Allow) C:\Steam\steamapps\common\MountBlade Warband\mb_warband.exe ( Taleworlds Entertainment)

FirewallRules: [{5A316274-1F0D-4D2A-99C8-7281CD239EC5}] => (Allow) C:\Steam\steamapps\common\Dead Island\DeadIslandGame.exe (Techland)

FirewallRules: [{89BC43C6-95C6-40F0-B8FE-18093BB712E1}] => (Allow) C:\Steam\steamapps\common\Dead Island\DeadIslandGame.exe (Techland)

FirewallRules: [TCP Query User{88DF5B90-386C-416A-BDCC-3706CCBF1A19}C:\users\mortetorment\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\mortetorment\appdata\local\mycomgames\mycomgames.exe No File

FirewallRules: [UDP Query User{F3F14F47-1B77-4DBA-A69C-FBEE1510CD6E}C:\users\mortetorment\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\mortetorment\appdata\local\mycomgames\mycomgames.exe No File

FirewallRules: [TCP Query User{3C7DFA3F-D315-4693-B14E-5CB46D99EAF4}C:\misc\roms\fusion364\fusion.exe] => (Allow) C:\misc\roms\fusion364\fusion.exe No File

FirewallRules: [UDP Query User{3CE22A53-5F49-4959-90F8-75B9DB57AA07}C:\misc\roms\fusion364\fusion.exe] => (Allow) C:\misc\roms\fusion364\fusion.exe No File

FirewallRules: [{61A837C0-2C92-4BA6-9B7F-37D64AC95D60}] => (Allow) C:\Users\MorteTorment\AppData\Local\Temp\andy-x64\Setup.exe No File

FirewallRules: [{BCDA5F49-1772-4B88-BE83-80651F6FCD95}] => (Allow) C:\Users\MorteTorment\AppData\Local\Temp\andy-x64\Setup.exe No File

FirewallRules: [{635EE7AE-7CE8-4FB0-A239-8E70955161B5}] => (Allow) C:\Program Files\Andy\andy.exe (Andy OS, inc.)

FirewallRules: [{DD59DFD8-356A-45C9-9D32-1E0139600058}] => (Allow) C:\Program Files\Andy\andy.exe (Andy OS, inc.)

FirewallRules: [{1BB94A4E-9645-46A8-96F8-372B16A16922}] => (Allow) C:\Program Files\Andy\AndyConsole.exe (Andy OS, inc.)

FirewallRules: [{FA9ECF3F-11E7-49BF-B013-8DE1949755A0}] => (Allow) C:\Program Files\Andy\AndyConsole.exe (Andy OS, inc.)

FirewallRules: [{A6D914C9-40BB-4681-8579-C6F6173511C7}] => (Allow) C:\Program Files\Andy\HandyAndy.exe (Andy OS, inc.)

FirewallRules: [{449E2AA0-0180-46DE-90B6-C952420ED341}] => (Allow) C:\Program Files\Andy\HandyAndy.exe (Andy OS, inc.)

FirewallRules: [{F5DB7A04-C3B8-4394-AE38-A4FAE7C6351C}] => (Allow) C:\Program Files\Andy\SetupFiles\Uninstall.exe (Andy OS, inc.)

FirewallRules: [{437ED98C-20FA-49C2-B9E9-7BE8FEC839DA}] => (Allow) C:\Program Files\Andy\SetupFiles\Uninstall.exe (Andy OS, inc.)

FirewallRules: [{3281DFC1-DE9E-4BA7-A5EC-697D41393B2A}] => (Allow) C:\Program Files\Andy\SetupFiles\VMwareCheck.exe (Andy OS, inc.)

FirewallRules: [{BFB3DC42-37C4-4968-A23C-5BCB02234CBB}] => (Allow) C:\Program Files\Andy\SetupFiles\VMwareCheck.exe (Andy OS, inc.)

FirewallRules: [{6F00F06B-3B25-46D6-AB55-B80D5F8CEE3B}] => (Allow) C:\Program Files\Andy\SetupFiles\AndyDoctor.exe (Andy OS, inc.)

FirewallRules: [{9897B6D5-CCA7-4E1B-82DF-C8CEB0AA042A}] => (Allow) C:\Program Files\Andy\SetupFiles\AndyDoctor.exe (Andy OS, inc.)

FirewallRules: [{C8E392C5-C095-4D57-AC42-3CD72ECF81E7}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe (VMware, Inc.)

FirewallRules: [{DCE4F1F6-E670-4CFB-A359-81A3AEE93386}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe (VMware, Inc.)

FirewallRules: [{E136FC23-B5BA-4AF5-80A5-CCFA7974E697}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)

FirewallRules: [{B8538832-5587-4049-B83B-4839B8117D71}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)

FirewallRules: [{C46FBE14-3577-4EB4-922E-226E324A6D50}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc.)

FirewallRules: [{3BF81ED4-0D90-4E2F-AF14-20C57E017EA2}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc.)

FirewallRules: [{2669FD4C-5AFC-44EA-9F98-483309474126}] => (Allow) C:\Program Files\Ventrilo\Ventrilo.exe (Flagship Industries, Inc.)

FirewallRules: [{9AD0CA4C-181B-4D8E-8050-0332183EC47A}] => (Allow) C:\Program Files\Ventrilo\Ventrilo.exe (Flagship Industries, Inc.)

FirewallRules: [TCP Query User{715CF147-703B-46BD-A7AA-6BE79B18F124}C:\gog games\torment - tides of numenera\tidesofnumenera.exe] => (Allow) C:\gog games\torment - tides of numenera\tidesofnumenera.exe No File

FirewallRules: [UDP Query User{B70AFE2F-E51B-4BE1-930F-1E96F78851B4}C:\gog games\torment - tides of numenera\tidesofnumenera.exe] => (Allow) C:\gog games\torment - tides of numenera\tidesofnumenera.exe No File

FirewallRules: [TCP Query User{90A64786-F73C-4518-87A9-B1184029EF29}C:\program files\firestorm-releasex64\slvoice.exe] => (Allow) C:\program files\firestorm-releasex64\slvoice.exe No File

FirewallRules: [UDP Query User{56AC2D16-47AB-4E8C-95F8-A47E40B2E93E}C:\program files\firestorm-releasex64\slvoice.exe] => (Allow) C:\program files\firestorm-releasex64\slvoice.exe No File

FirewallRules: [{E57FFF74-4B9C-4B03-8878-1651A0BA7722}] => (Allow) C:\Steam\steamapps\common\PuzzleQuest2\PuzzleQuest2.exe ()

FirewallRules: [{25310E34-1BA7-4CF7-B1E3-1286472A920A}] => (Allow) C:\Steam\steamapps\common\PuzzleQuest2\PuzzleQuest2.exe ()

FirewallRules: [{FC8032DC-0B97-4EE4-9F1E-04CB13E16FE3}] => (Allow) C:\Program Files (x86)\AIM\aim.exe No File

FirewallRules: [{3775BB58-2F9D-4399-B266-CCC197E88F8C}] => (Allow) C:\Program Files (x86)\AIM\aim.exe No File

FirewallRules: [{1A703AE1-4926-485C-9C12-1A9129D8C762}] => (Allow) C:\Steam\steamapps\common\Fallout Shelter\FalloutShelter.exe ()

FirewallRules: [{C3AA9AE1-218C-4F0D-9EAC-3FA49FA04A87}] => (Allow) C:\Steam\steamapps\common\Fallout Shelter\FalloutShelter.exe ()

FirewallRules: [{E35C99A5-C761-4589-B8CD-6551CAC1E1D9}] => (Allow) C:\Steam\steamapps\common\SteamVR\tools\bin\win32\vrmonitor.exe No File

FirewallRules: [{6636C469-ECC6-4BEC-9EFD-4A06963AA0FD}] => (Allow) C:\Steam\steamapps\common\SteamVR\tools\bin\win32\vrmonitor.exe No File

FirewallRules: [TCP Query User{8157E4D4-6445-4E4B-B82C-DAD47688AC1B}C:\program files\firestormos-releasex64\slvoice.exe] => (Allow) C:\program files\firestormos-releasex64\slvoice.exe ()

FirewallRules: [UDP Query User{D715A2D0-B6A6-4583-8FAB-B23A25C53836}C:\program files\firestormos-releasex64\slvoice.exe] => (Allow) C:\program files\firestormos-releasex64\slvoice.exe ()

FirewallRules: [{EB7A460D-64D5-4F94-8624-10B39D471E6A}] => (Allow) C:\Steam\steamapps\common\SteamVR\bin\win32\vrstartup.exe No File

FirewallRules: [{BDBA368E-919E-4E31-82ED-C508143B7D9F}] => (Allow) C:\Steam\steamapps\common\SteamVR\bin\win32\vrstartup.exe No File

FirewallRules: [TCP Query User{119AD5CD-3501-4E56-8316-C3D22E961CD9}C:\program files (x86)\trillian\trillian.exe] => (Allow) C:\program files (x86)\trillian\trillian.exe (Cerulean Studios)

FirewallRules: [UDP Query User{FA5BA0B7-4EFC-41F8-8F9D-7E382408B1D1}C:\program files (x86)\trillian\trillian.exe] => (Allow) C:\program files (x86)\trillian\trillian.exe (Cerulean Studios)

FirewallRules: [TCP Query User{D973C261-F486-41DB-85F4-25AFA2C5DFE3}C:\users\mortetorment\downloads\utorrent_2.2.1.exe] => (Allow) C:\users\mortetorment\downloads\utorrent_2.2.1.exe No File

FirewallRules: [UDP Query User{9EB6D86B-CDF7-4583-B9E7-40C4BEEE3A94}C:\users\mortetorment\downloads\utorrent_2.2.1.exe] => (Allow) C:\users\mortetorment\downloads\utorrent_2.2.1.exe No File

FirewallRules: [TCP Query User{537B43E6-A73A-4A62-B1BF-B53FB24A17A3}C:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\steam\steamapps\common\grand theft auto v\gta5.exe (Rockstar Games)

FirewallRules: [UDP Query User{20FA13EE-DA99-4B1D-81C9-BE6836A09E8A}C:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\steam\steamapps\common\grand theft auto v\gta5.exe (Rockstar Games)

FirewallRules: [TCP Query User{83E1197F-BA09-4B7C-9445-9D7EA2FA2258}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe No File

FirewallRules: [UDP Query User{5F2E5ECC-6E54-4D51-909B-8532BC17DA8F}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe No File

FirewallRules: [{A171CAC8-C94E-4427-94FF-E3EDB5DB25CA}] => (Allow) C:\Steam\steamapps\common\Saints Row IV\SaintsRowIV.exe No File

FirewallRules: [{10520C8F-C37F-4B37-B830-814241E29632}] => (Allow) C:\Steam\steamapps\common\Saints Row IV\SaintsRowIV.exe No File

FirewallRules: [{C96FD71A-2409-4EC1-BD2C-CC53509C100E}] => (Allow) C:\Steam\steamapps\common\Shadowrun Hong Kong\SRHK.exe No File

FirewallRules: [{FCCC1872-CDC3-4570-8FCC-D2FCC4567921}] => (Allow) C:\Steam\steamapps\common\Shadowrun Hong Kong\SRHK.exe No File

FirewallRules: [{7D992D21-088E-4A12-8E4D-5A41A2B36B91}] => (Allow) C:\Steam\steamapps\common\Marvel Heroes\UnrealEngine3\Binaries\Win64\MarvelHeroes2016.exe No File

FirewallRules: [{F947D51F-A4F1-494D-8D0B-D8AD4444F0E2}] => (Allow) C:\Steam\steamapps\common\Marvel Heroes\UnrealEngine3\Binaries\Win64\MarvelHeroes2016.exe No File

FirewallRules: [TCP Query User{20879B64-C99D-41B4-B69A-1FF1E11D56C2}C:\users\mortetorment\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\mortetorment\appdata\local\mycomgames\mycomgames.exe No File

FirewallRules: [UDP Query User{F8965881-7DB9-497B-B783-87850DC24ACE}C:\users\mortetorment\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\mortetorment\appdata\local\mycomgames\mycomgames.exe No File

FirewallRules: [{427401F0-5EDB-4525-B797-1A77CFD8BF22}] => (Allow) C:\Steam\steamapps\common\SteamVR\tools\steamvr_environments\game\bin\win64\steamtours.exe No File

FirewallRules: [{A61B7A46-C3B9-499A-94E8-3A560DE90B6A}] => (Allow) C:\Steam\steamapps\common\SteamVR\tools\steamvr_environments\game\bin\win64\steamtours.exe No File

FirewallRules: [{9F9D6B4C-8DAF-4A74-A252-4278525FB570}] => (Allow) C:\Steam\steamapps\common\SteamVR\tools\steamvr_environments\game\bin\win64\steamtourscfg.exe No File

FirewallRules: [{CDBDED8D-6558-44EB-A21A-6F4FA299C8BD}] => (Allow) C:\Steam\steamapps\common\SteamVR\tools\steamvr_environments\game\bin\win64\steamtourscfg.exe No File

FirewallRules: [{0B6652B8-1B7D-42CD-A6B5-400D64AC71DC}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe ()

FirewallRules: [{553DD2E6-C217-49AE-99EA-8CA522AB250D}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe ()

FirewallRules: [TCP Query User{E1260118-1698-4250-9027-934364523048}C:\gog games\divinity - original sin enhanced edition\shipping\eocapp.exe] => (Allow) C:\gog games\divinity - original sin enhanced edition\shipping\eocapp.exe ()

FirewallRules: [UDP Query User{C45CD8BC-EF54-43E2-8FBF-2574D0F33729}C:\gog games\divinity - original sin enhanced edition\shipping\eocapp.exe] => (Allow) C:\gog games\divinity - original sin enhanced edition\shipping\eocapp.exe ()

FirewallRules: [{E1F7FC8B-2DE2-497D-9040-0AA863BD601E}] => (Allow) C:\Program Files (x86)\BitLord\BitLord.exe No File

FirewallRules: [{A83A5ACF-392B-4595-95E5-49854D702DD1}] => (Allow) C:\Program Files (x86)\BitLord\BitLord.exe No File

FirewallRules: [TCP Query User{B3BA6933-4201-419D-864D-E49E9D88EADC}C:\program files\total war warhammer\warhammer.exe] => (Allow) C:\program files\total war warhammer\warhammer.exe No File

FirewallRules: [UDP Query User{60561FB4-29CB-4832-A4BF-E16680C0ACE7}C:\program files\total war warhammer\warhammer.exe] => (Allow) C:\program files\total war warhammer\warhammer.exe No File

FirewallRules: [TCP Query User{DEBEBC0E-DC88-4335-A134-BBBC9CFB9A6A}C:\steam\steamapps\common\total war warhammer\warhammer.exe] => (Allow) C:\steam\steamapps\common\total war warhammer\warhammer.exe No File

FirewallRules: [UDP Query User{D6C92AEC-7CC7-4431-82CE-664E0B20CFFE}C:\steam\steamapps\common\total war warhammer\warhammer.exe] => (Allow) C:\steam\steamapps\common\total war warhammer\warhammer.exe No File

FirewallRules: [{B0236618-F1F0-4D6D-AB13-ACFFB7E0ABD0}] => (Allow) C:\Program Files (x86)\Nox\bin\Nox.exe No File

FirewallRules: [{F6B74F78-02EC-4BD3-A776-F0D20C882019}] => (Allow) C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe No File

FirewallRules: [{09D091B9-FF3A-4F9B-9F09-02BF4A1CB6C6}] => (Allow) C:\Steam\steamapps\common\PlagueInc\PlagueIncEvolved.exe ()

FirewallRules: [{90E19705-231D-482F-AB1A-ECFC7739AC77}] => (Allow) C:\Steam\steamapps\common\PlagueInc\PlagueIncEvolved.exe ()

FirewallRules: [{BB9E8C05-6F39-4308-850E-5FA7E7D8C28F}] => (Allow) C:\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe No File

FirewallRules: [{0FA56DA0-4CF1-4154-93AF-3DC75A60FD96}] => (Allow) C:\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe No File

FirewallRules: [{53013387-2CDB-4BA2-8BA9-B751C39A102C}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

FirewallRules: [{F2E27BE8-69E8-41AA-91D0-7FCE1160A85B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

FirewallRules: [{ACBD1E5A-28DD-4D3C-89EC-81B08B8EB8BB}] => (Allow) C:\Steam\steamapps\common\Soda Dungeon\dungeon.exe ()

FirewallRules: [{14B271A7-DB00-47AE-8102-ACE48C50E599}] => (Allow) C:\Steam\steamapps\common\Soda Dungeon\dungeon.exe ()

FirewallRules: [{55623EE4-6DB4-412F-AA38-EC8418251ABF}] => (Allow) C:\Steam\steamapps\common\Guild Quest\guild-quest.exe ()

FirewallRules: [{617BE2DB-AAE5-476A-95E9-BB9E62554B6C}] => (Allow) C:\Steam\steamapps\common\Guild Quest\guild-quest.exe ()

FirewallRules: [{45F328E8-F2E6-46A3-949E-F9A9D11AAA95}] => (Allow) C:\Steam\steamapps\common\IdleChampions\IdleDragons.exe ()

FirewallRules: [{95A53836-5ECB-432B-87CA-BCF343AFC47F}] => (Allow) C:\Steam\steamapps\common\IdleChampions\IdleDragons.exe ()

FirewallRules: [{BB0C89C5-A032-44C2-8BA8-327AEFC70D64}] => (Allow) C:\Steam\steamapps\common\Zombidle\Zombidle.exe No File

FirewallRules: [{D7C1F560-A1BA-4832-8ECD-EF9C814E236D}] => (Allow) C:\Steam\steamapps\common\Zombidle\Zombidle.exe No File

FirewallRules: [{CEDFCEA1-BF91-43DE-8AAA-B306A40F4E48}] => (Allow) C:\Steam\steamapps\common\MOBIUS FINAL FANTASY\mobiusff.exe ()

FirewallRules: [{72CC7005-A54C-4170-8922-CBD694C75318}] => (Allow) C:\Steam\steamapps\common\MOBIUS FINAL FANTASY\mobiusff.exe ()

FirewallRules: [TCP Query User{E9A020C8-4FC6-4E57-8497-EE40DDBC5F74}C:\gog games\nine parchments\nineparchments_64bit.exe] => (Allow) C:\gog games\nine parchments\nineparchments_64bit.exe No File

FirewallRules: [UDP Query User{74FFEC89-6240-4A35-BFAE-1D0099E39534}C:\gog games\nine parchments\nineparchments_64bit.exe] => (Allow) C:\gog games\nine parchments\nineparchments_64bit.exe No File

FirewallRules: [{F0F67107-2FE2-40D8-989B-280BF1ED7A69}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)

FirewallRules: [TCP Query User{647CE461-32BB-46BA-B33B-709D7D5E5A66}C:\games\plague.road\plagueroad.exe] => (Allow) C:\games\plague.road\plagueroad.exe No File

FirewallRules: [UDP Query User{C8E8BC55-A882-42D9-93F8-B213EBD0D96E}C:\games\plague.road\plagueroad.exe] => (Allow) C:\games\plague.road\plagueroad.exe No File

FirewallRules: [{F88A6FA3-97A3-4699-80BB-73AC791413D0}] => (Allow) C:\Steam\steamapps\common\OrganTrailDC\OrganTrail.exe ()

FirewallRules: [{367BAD85-D689-481F-A01C-90DFB64A94C1}] => (Allow) C:\Steam\steamapps\common\OrganTrailDC\OrganTrail.exe ()

FirewallRules: [{E54CE923-495B-426A-80B7-3C72377A8464}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft, Inc.)

FirewallRules: [{084BD523-1CD2-4E7C-8D29-37CECF6F951B}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Nullsoft, Inc.)

FirewallRules: [TCP Query User{CE0953B0-485B-4ED1-8C50-ECF367C73B9A}C:\games\kingdom come deliverance\bin\win64\kingdomcome.exe] => (Allow) C:\games\kingdom come deliverance\bin\win64\kingdomcome.exe No File

FirewallRules: [UDP Query User{13CEFA8F-1969-4F18-A9EA-46521E902D79}C:\games\kingdom come deliverance\bin\win64\kingdomcome.exe] => (Allow) C:\games\kingdom come deliverance\bin\win64\kingdomcome.exe No File

FirewallRules: [{633C5B88-3EFC-4C7F-9A3F-CBF72529D3D5}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.2.0\DriverBooster.exe (IObit)

FirewallRules: [{1CADD875-863E-44F1-BD72-1DF8CB773F97}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.2.0\DriverBooster.exe (IObit)

FirewallRules: [{0EDA4BE9-40DB-4F31-B76E-6CBA42C36C2A}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.2.0\DBDownloader.exe (IObit)

FirewallRules: [{2F5A9140-708C-4498-BEB1-FE26B6C6C60E}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.2.0\DBDownloader.exe (IObit)

FirewallRules: [{546FACD0-91F0-42AD-9D1D-8020762F0BC4}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.2.0\AutoUpdate.exe (IObit)

FirewallRules: [{C123B6E3-89EF-41EA-A93A-C8BE5B8DA250}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.2.0\AutoUpdate.exe (IObit)

FirewallRules: [TCP Query User{6EA85C52-91A5-4F58-AC0B-A67C55398F61}C:\users\mortetorment\appdata\local\mycomgames\gamecenter.exe] => (Block) C:\users\mortetorment\appdata\local\mycomgames\gamecenter.exe No File

FirewallRules: [UDP Query User{AD624CE5-B958-463E-9A20-0678B15B7C4E}C:\users\mortetorment\appdata\local\mycomgames\gamecenter.exe] => (Block) C:\users\mortetorment\appdata\local\mycomgames\gamecenter.exe No File

FirewallRules: [TCP Query User{AE6AF877-8A86-49FC-95B1-6E65D01FF6DF}C:\users\mortetorment\downloads\utorrent-2-2-1-rc3-utorrent.exe] => (Allow) C:\users\mortetorment\downloads\utorrent-2-2-1-rc3-utorrent.exe (BitTorrent, Inc.)

FirewallRules: [UDP Query User{9267DD9D-A03F-46CD-90A5-F05CBD988C3E}C:\users\mortetorment\downloads\utorrent-2-2-1-rc3-utorrent.exe] => (Allow) C:\users\mortetorment\downloads\utorrent-2-2-1-rc3-utorrent.exe (BitTorrent, Inc.)

FirewallRules: [TCP Query User{0908A72C-7689-4C93-8601-A9547BC28573}C:\users\mortetorment\downloads\jalopy.v1.0\jalopy.exe] => (Allow) C:\users\mortetorment\downloads\jalopy.v1.0\jalopy.exe No File

FirewallRules: [UDP Query User{DA85A027-B36D-4E24-A7DD-2D69F21AD23A}C:\users\mortetorment\downloads\jalopy.v1.0\jalopy.exe] => (Allow) C:\users\mortetorment\downloads\jalopy.v1.0\jalopy.exe No File

FirewallRules: [TCP Query User{40880CFD-03BD-4B6B-BB56-CA5F9E025B7F}C:\users\mortetorment\appdata\local\gamecenter\gamecenter.exe] => (Block) C:\users\mortetorment\appdata\local\gamecenter\gamecenter.exe No File

FirewallRules: [UDP Query User{55F6AB2A-7580-4D91-A5CE-62801214B0A9}C:\users\mortetorment\appdata\local\gamecenter\gamecenter.exe] => (Block) C:\users\mortetorment\appdata\local\gamecenter\gamecenter.exe No File

FirewallRules: [TCP Query User{74683D8F-55D7-4A35-ADF0-C7933187538C}C:\users\mortetorment\downloads\metropolis.lux.obscura\metropolis lux obscura\metropolis.exe] => (Allow) C:\users\mortetorment\downloads\metropolis.lux.obscura\metropolis lux obscura\metropolis.exe No File

FirewallRules: [UDP Query User{E94BB41F-D67A-462D-A2CD-33CE9A6874A0}C:\users\mortetorment\downloads\metropolis.lux.obscura\metropolis lux obscura\metropolis.exe] => (Allow) C:\users\mortetorment\downloads\metropolis.lux.obscura\metropolis lux obscura\metropolis.exe No File

FirewallRules: [{69032CD8-B401-4C31-94B2-83D8D3AF0C8A}] => (Allow) C:\Steam\steamapps\common\Total War WARHAMMER\launcher\launcher.exe No File

FirewallRules: [{24EFEF5F-0855-43DF-B751-AE0768EA692A}] => (Allow) C:\Steam\steamapps\common\Total War WARHAMMER\launcher\launcher.exe No File

FirewallRules: [{4DCF448A-2BFB-4CFC-A35E-705F4424B823}] => (Allow) C:\Steam\steamapps\common\Stoneshard Prologue\StoneShard.exe ( )

FirewallRules: [{15E04EC4-FEBF-457C-B992-2E4042E7E4A3}] => (Allow) C:\Steam\steamapps\common\Stoneshard Prologue\StoneShard.exe ( )

FirewallRules: [{12711728-C211-4EF0-B876-67F2F29FAAC7}] => (Allow) C:\Steam\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe (Tripwire Interactive, LLC.)

FirewallRules: [{6E6C10FE-532A-4B87-90AA-43B761315960}] => (Allow) C:\Steam\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe (Tripwire Interactive, LLC.)

FirewallRules: [{B49E5D87-BE39-4E8F-B95C-EACCB39D7D2C}] => (Allow) C:\Steam\steamapps\common\System Crash Demo\System Crash.exe ()

FirewallRules: [{667D4AA3-F9A4-4C33-8795-EFFF0AABCDBA}] => (Allow) C:\Steam\steamapps\common\System Crash Demo\System Crash.exe ()

FirewallRules: [{382C46FF-8B68-44AD-861D-A2EFD9544C0A}] => (Allow) C:\Steam\steamapps\common\A Light in the Dark Demo\A Light in the Dark Demo.exe ()

FirewallRules: [{8339CDBB-3BCF-42DC-B096-393277B92A6A}] => (Allow) C:\Steam\steamapps\common\A Light in the Dark Demo\A Light in the Dark Demo.exe ()

FirewallRules: [{3F059999-2287-4E8F-879A-18595D2D01BA}] => (Allow) C:\Steam\steamapps\common\Dead by Daylight\DeadByDaylight.exe No File

FirewallRules: [{708C7BC5-103F-4E5E-904F-B9CD39C1BCF5}] => (Allow) C:\Steam\steamapps\common\Dead by Daylight\DeadByDaylight.exe No File

FirewallRules: [TCP Query User{460A3136-0EC7-4099-8FB3-321B4922D59E}C:\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) C:\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe No File

FirewallRules: [UDP Query User{F611DD6D-484B-4730-8763-8AFB14AAE9B2}C:\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) C:\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe No File

FirewallRules: [TCP Query User{26BE5FC6-8E1C-4A0C-8D09-6DB8DE5613B0}C:\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) C:\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe No File

FirewallRules: [UDP Query User{118A6877-ACFD-458C-A2A3-EF9BE84B9471}C:\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) C:\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe No File

FirewallRules: [{6413446A-D08E-44CA-A419-AB9B8C3F825B}] => (Allow) C:\Steam\steamapps\common\Book of Demons Demo\r2g_launcher_demo.exe No File

FirewallRules: [{E7B312B7-2F41-46DF-8C38-3FFD051D9C86}] => (Allow) C:\Steam\steamapps\common\Book of Demons Demo\r2g_launcher_demo.exe No File

FirewallRules: [{04059106-B50B-4E05-B366-95645C6BF143}] => (Allow) C:\Users\MorteTorment\AppData\Local\Warframe\Downloaded\Public\Warframe.exe No File

FirewallRules: [{52826158-BD5A-4ADA-83F7-6D65F0F781A5}] => (Allow) C:\Users\MorteTorment\AppData\Local\Warframe\Downloaded\Public\Warframe.x64.exe No File

FirewallRules: [{49E5442D-F671-453F-B291-F26C563A79A2}] => (Allow) C:\Users\MorteTorment\AppData\Local\Warframe\Downloaded\Public\Warframe.exe No File

FirewallRules: [{1A4F79AD-0B30-4CE7-95D1-DCD014ECF81A}] => (Allow) C:\Users\MorteTorment\AppData\Local\Warframe\Downloaded\Public\Warframe.x64.exe No File

FirewallRules: [{4AAA9413-EF6D-44C1-9A75-493EF0B62C0A}] => (Allow) C:\Users\MorteTorment\AppData\Local\Warframe\Downloaded\Public\Tools\Launcher.exe (Digital Extremes)

FirewallRules: [{DD3CED04-FBC3-46F0-8501-773A7A0A9236}] => (Allow) C:\Users\MorteTorment\AppData\Local\Warframe\Downloaded\Public\Tools\RemoteCrashSender.exe No File

FirewallRules: [{C3BD06A1-B346-49AD-9FE0-5B233D223367}] => (Allow) C:\Users\MorteTorment\AppData\Local\Warframe\Downloaded\Public\Warframe.exe No File

FirewallRules: [{D0C1B348-5EDA-41E8-B4C9-0E6F3BFFD16A}] => (Allow) C:\Users\MorteTorment\AppData\Local\Warframe\Downloaded\Public\Warframe.x64.exe No File

FirewallRules: [{8A8ECEB6-BA82-44DE-8A2B-7B888C76D9AB}] => (Allow) C:\Users\MorteTorment\AppData\Local\Warframe\Downloaded\Public\Warframe.exe No File

FirewallRules: [{8BC50FDA-17CC-4FA1-B619-43E95C9C0BC2}] => (Allow) C:\Users\MorteTorment\AppData\Local\Warframe\Downloaded\Public\Warframe.x64.exe No File

FirewallRules: [{927AF05D-4E7C-415F-8033-A2BFA425B540}] => (Allow) C:\Users\MorteTorment\AppData\Local\Warframe\Downloaded\Public\Tools\Launcher.exe (Digital Extremes)

FirewallRules: [{4488A13B-4225-4E62-8B00-7BC5CE7E8CFB}] => (Allow) C:\Users\MorteTorment\AppData\Local\Warframe\Downloaded\Public\Tools\RemoteCrashSender.exe No File

FirewallRules: [{53476587-D0CF-41A2-AEBA-2D781B7100D5}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\The Crew (Worldwide)\TheCrew.exe (UBISoft)

FirewallRules: [{0423A3E5-8619-4371-9046-29FB3C9750CD}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\The Crew (Worldwide)\TheCrew.exe (UBISoft)

FirewallRules: [{25B44DDA-750A-4241-84D1-EB878FDB1486}] => (Allow) C:\Program Files\Unigine\Superposition Benchmark\bin\launcher.exe (UNIGINE Corp.)

FirewallRules: [{4FDDB8F2-4F13-42F8-837C-D70D7AE33654}] => (Allow) C:\Program Files\Unigine\Superposition Benchmark\bin\launcher.exe (UNIGINE Corp.)

FirewallRules: [{3B7FEB26-5CBA-49B9-A32F-BC5A0B0B823A}] => (Allow) C:\Program Files\Unigine\Superposition Benchmark\bin\superposition.exe (UNIGINE Corp.)

FirewallRules: [{8CBE8EA0-108E-445E-A0D0-A36EE736286B}] => (Allow) C:\Program Files\Unigine\Superposition Benchmark\bin\superposition.exe (UNIGINE Corp.)

FirewallRules: [{161258DD-CA96-4C2D-9D14-4861924E426C}] => (Allow) C:\Games\FF14ARR\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe No File

FirewallRules: [{783B8426-ABEB-421C-B329-746196A3A7B1}] => (Allow) C:\Games\FF14ARR\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe No File

FirewallRules: [{A6C846A1-1F3E-4369-B16B-B47E818A42DF}] => (Allow) C:\Games\FF14ARR\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe No File

FirewallRules: [{349F2D1B-ED8F-4F7C-B804-44FB136D9BB2}] => (Allow) C:\Games\FF14ARR\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe No File

FirewallRules: [{0478FED1-5267-41AC-AB04-65631EA1A18E}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software)

FirewallRules: [{7A03E4E2-0B92-4303-B12F-2D23BEFDA683}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software)

FirewallRules: [TCP Query User{37E46EBE-F281-49A1-B6B4-0962A4B220C1}C:\steam\steamapps\common\battlezone combat commander beta\battlezone2.exe] => (Allow) C:\steam\steamapps\common\battlezone combat commander beta\battlezone2.exe No File

FirewallRules: [UDP Query User{165C04E6-5AF5-45B0-B65D-480FAFF71421}C:\steam\steamapps\common\battlezone combat commander beta\battlezone2.exe] => (Allow) C:\steam\steamapps\common\battlezone combat commander beta\battlezone2.exe No File

FirewallRules: [{53DC1A6D-0510-42FC-91A4-11DC7F193514}] => (Allow) C:\Program Files\Parsec\parsecd.exe (Parsec)

FirewallRules: [{C4D7252E-E23C-475A-B8E7-D91AF516E8E6}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc.)

FirewallRules: [TCP Query User{4EC4E92F-9E3C-4D85-9029-B54BCA572115}C:\games\we happy few\glimpsegame\binaries\win64\glimpsegame.exe] => (Allow) C:\games\we happy few\glimpsegame\binaries\win64\glimpsegame.exe No File

FirewallRules: [UDP Query User{0451F33C-332C-4D81-8E7E-67C0FC634A8B}C:\games\we happy few\glimpsegame\binaries\win64\glimpsegame.exe] => (Allow) C:\games\we happy few\glimpsegame\binaries\win64\glimpsegame.exe No File

FirewallRules: [{1BC84243-ED11-4515-AC0B-34833855CBE2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation)

FirewallRules: [{7FD5BCCE-50B4-44BF-913E-308941D597B7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation)

FirewallRules: [{267E0048-9B0B-4F4D-B2D0-978BE2359244}] => (Allow) C:\Program Files (x86)\CCleaner\CCUpdate.exe (Piriform Ltd)

FirewallRules: [{E4A261B5-F7F7-4844-B57F-BCE1B6D36130}] => (Allow) C:\Program Files (x86)\CCleaner\CCUpdate.exe (Piriform Ltd)

FirewallRules: [{9C300519-E1EB-4B86-B5A7-98B5562489AF}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Technologies S.A.)

FirewallRules: [{0CAED14B-62CC-43AE-B3B7-057CD2CEBF1C}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Technologies S.A.)

FirewallRules: [TCP Query User{FD52DBC7-09DF-4533-8CA4-1E1004FF5838}E:\games\pathfinder kingmaker\kingmaker.exe] => (Allow) E:\games\pathfinder kingmaker\kingmaker.exe ()

FirewallRules: [UDP Query User{5FB22E22-8CF8-4237-9DB8-BC7E316E6848}E:\games\pathfinder kingmaker\kingmaker.exe] => (Allow) E:\games\pathfinder kingmaker\kingmaker.exe ()

FirewallRules: [TCP Query User{39199147-0B23-4B38-9562-51B2F3075CEA}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN)

FirewallRules: [UDP Query User{F0F91993-546C-4195-809F-A041B35B1227}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN)

FirewallRules: [{DD905400-B7E0-47BC-9A96-DC3647981649}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation)

FirewallRules: [{27B5283F-129E-4F1C-A2B0-914F7F4860D7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation)

FirewallRules: [{DDAA36F9-85C0-4D51-A50F-8B2D663308E9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation)

FirewallRules: [{2EB90A46-118C-4E12-AD4C-A2FECFE2261F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation)

FirewallRules: [TCP Query User{5B3CDEE0-6605-4F10-8B2B-A7C649B82773}E:\games\battlenet\destiny 2\destiny 2\destiny2.exe] => (Allow) E:\games\battlenet\destiny 2\destiny 2\destiny2.exe (Bungie)

FirewallRules: [UDP Query User{244E7226-7DE9-406C-9CA5-293C95EA9795}E:\games\battlenet\destiny 2\destiny 2\destiny2.exe] => (Allow) E:\games\battlenet\destiny 2\destiny 2\destiny2.exe (Bungie)

FirewallRules: [TCP Query User{506C3FCD-37EC-4A6D-AC70-665372B0C19E}C:\steam\steamapps\common\killingfloor2\binaries\win64\kfgame.exe] => (Allow) C:\steam\steamapps\common\killingfloor2\binaries\win64\kfgame.exe (Tripwire Interactive, LLC.)

FirewallRules: [UDP Query User{7C936CD2-FFA8-4492-B9E8-969A340726FD}C:\steam\steamapps\common\killingfloor2\binaries\win64\kfgame.exe] => (Allow) C:\steam\steamapps\common\killingfloor2\binaries\win64\kfgame.exe (Tripwire Interactive, LLC.)

FirewallRules: [TCP Query User{16A22D3F-03B5-41F9-B3DD-73DB38C98136}C:\program files (x86)\ubisoft\ubisoft game launcher\games\the crew (worldwide)\thecrew.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\games\the crew (worldwide)\thecrew.exe (UBISoft)

FirewallRules: [UDP Query User{A9512A13-65F0-4A26-BD3F-252752DBC986}C:\program files (x86)\ubisoft\ubisoft game launcher\games\the crew (worldwide)\thecrew.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\games\the crew (worldwide)\thecrew.exe (UBISoft)

FirewallRules: [TCP Query User{B0A10BF0-7A4F-46E8-85BC-3EA4772F12FF}C:\epic games\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\epic games\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games, Inc.)

FirewallRules: [UDP Query User{4C95AF3B-27C5-44F7-8C7F-8D5F3A7F0A1B}C:\epic games\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\epic games\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games, Inc.)

FirewallRules: [{8B44B23F-FD36-4D26-820A-D8A37A003037}] => (Allow) C:\Program Files\BlueStacks\HD-Player.exe (BlueStack Systems, Inc.)

FirewallRules: [{52A43F9A-CD7E-41F8-9B66-855E7602CF94}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software)

FirewallRules: [{AE6A9801-C1AF-4CF6-BE2E-42A007C0C3F2}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software)

FirewallRules: [{442C5C6C-2DE3-4400-90D7-41C04A2DF8FF}] => (Allow) C:\Steam\steamapps\common\Warframe\Warframe.exe (Digital Extremes)

FirewallRules: [{BAA62F20-3828-4586-949E-B957C026DCA6}] => (Allow) C:\Steam\steamapps\common\Warframe\Warframe.x64.exe (Digital Extremes)

FirewallRules: [{3BE2E096-BA67-4798-9951-DB357D11EFC8}] => (Allow) C:\Steam\steamapps\common\Warframe\Warframe.exe (Digital Extremes)

FirewallRules: [{CF45E9F3-CD0A-4FDD-BD3C-4A3AB5C83977}] => (Allow) C:\Steam\steamapps\common\Warframe\Warframe.x64.exe (Digital Extremes)

FirewallRules: [{2511745D-1051-455F-AF31-25C98597AA76}] => (Allow) C:\Steam\steamapps\common\Warframe\Tools\Launcher.exe (Digital Extremes)

FirewallRules: [{25156042-DB21-47AF-A8A7-F92B0DDB1C0E}] => (Allow) C:\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe ()

FirewallRules: [{801C8D9F-C388-4DF4-A34B-E74755A5B480}] => (Allow) C:\Steam\steamapps\common\Warframe\Warframe.exe (Digital Extremes)

FirewallRules: [{ED2719A0-5B3E-4C21-8D41-C32911CD7928}] => (Allow) C:\Steam\steamapps\common\Warframe\Warframe.x64.exe (Digital Extremes)

FirewallRules: [{C2BA8071-70E3-4D58-AD23-B7DA76D0CAE6}] => (Allow) C:\Steam\steamapps\common\Warframe\Warframe.exe (Digital Extremes)

FirewallRules: [{22AD0E6C-F6CC-409F-A935-A68AB4FE6904}] => (Allow) C:\Steam\steamapps\common\Warframe\Warframe.x64.exe (Digital Extremes)

FirewallRules: [{98AF57A9-0521-4B1F-ABF5-E6D07CE93B9E}] => (Allow) C:\Steam\steamapps\common\Warframe\Tools\Launcher.exe (Digital Extremes)

FirewallRules: [{77E7FB3F-5A47-46AF-8163-58C14F21D3EB}] => (Allow) C:\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe ()

FirewallRules: [{B369369F-1B5F-4A01-95DB-18A2ED4EF756}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)

==================== Restore Points =========================

==================== Faulty Device Manager Devices =============

Name: LogMeIn Hamachi Virtual Ethernet Adapter

Description: LogMeIn Hamachi Virtual Ethernet Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: LogMeIn Inc.

Service: Hamachi

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: xHCI Root Hub 0

Description: xHCI Root Hub 0

Class Guid:

Manufacturer:

Service:

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

==================== Event log errors: =========================

Application errors:

==================

Error: (01/25/2019 07:25:16 PM) (Source: nssm) (EventID: 1010) (User: )

Description: Failed to start service Defender. Program C:\Windows\appdata\svchost.exe couldn't be launched.

CreateProcess() failed: