WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. Join 93097 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!

Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Internet Browsers been infected [Solved]

Started by yukukuhi , Dec 21 2019 05:25 AM

This topic is locked

73 replies to this topic

#1 yukukuhi

Authentic Member

Authentic Member
92 posts

Posted 21 December 2019 - 05:25 AM

I can't access the net via any of the browsers like firefox, chrome etc. I suspect malware did this. Please help me to fix it up. I wasn't able to run aswMBR.exe. It kept on crashing. But i was able to run Farbar Recovery Scan. I'm posting it logs.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14-12-2019

Ran by SGK (administrator) on DESKTOP-VF56AA2 (LENOVO 20CKCTO1WW) (21-12-2019 13:21:28)

Running from C:\Users\SGK\Desktop

Loaded Profiles: SGK (Available Profiles: SGK)

Platform: Windows 10 Pro Version 1903 18362.356 (X64) Language: English (United States)

Default browser not detected!

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

( ) [File not signed] C:\ProgramData\NtvHost\native.exe

(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe

(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe

(CloudBees, Inc.) [File not signed] C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

(Google LLC -> Google LLC) C:\Users\SGK\AppData\Local\GoogleChromeApplication\chrome.exe

(Intel Corporation -> Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(Intel® pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(Intel® pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe

(Intel® pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe

(Intel® Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe

(Lenovo -> Lenovo Group Ltd.) C:\Program Files\Lenovo\iMController\Service\Lenovo.Modern.ImController.exe

(Lenovo -> Lenovo) C:\Windows\SysWOW64\Lenovo\PowerMgr\PowerMgr.exe

(Lenovo -> Lenovo.) C:\Windows\System32\ibmpmsvc.exe

(Lenovo -> Lenovo.) C:\Windows\System32\LPlatSvc.exe

(Lenovo -> Lenovo.) C:\Windows\System32\TpShocks.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\osk.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

(Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe

(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe

(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe

(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

(Synaptics Incorporated -> Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoHelper.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)

HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2872400 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)

HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PrivacyIconClient.exe [1178400 2015-07-07] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation)

HKLM-x32\...\Run: [Aimersoft Helper Compact.exe] => C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe [2138272 2016-10-08] (Shenzhen Jia Xing Investment Co., Ltd. -> AimerSoft)

HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1312040 2018-12-04] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)

HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION

HKU\S-1-5-21-2295186157-4208122820-3846616368-1001\...\Run: [HP Deskjet 3050 J610 series (NET)] => C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)

HKU\S-1-5-21-2295186157-4208122820-3846616368-1001\...\Run: [BaiduYunGuanjia] => C:\Users\SGK\AppData\Roaming\baidu\BaiduNetdisk\baidunetdisk.exe [8954888 2019-08-23] (Beijing Baidu Netcom Science and Technology Co.,Ltd -> )

HKU\S-1-5-21-2295186157-4208122820-3846616368-1001\...\Run: [BaiduYunDetect] => C:\Users\SGK\AppData\Roaming\baidu\BaiduNetdisk\YunDetectService.exe [1126920 2019-08-23] (Beijing Baidu Netcom Science and Technology Co.,Ltd -> )

HKU\S-1-5-21-2295186157-4208122820-3846616368-1001\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [4051000 2019-05-13] (Tonec Inc.) [File not signed]

HKU\S-1-5-21-2295186157-4208122820-3846616368-1001\...\Run: [EPLTarget\P0000000000000001] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIUNE.EXE [416896 2017-09-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)

HKU\S-1-5-21-2295186157-4208122820-3846616368-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIUNE.EXE [416896 2017-09-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)

HKU\S-1-5-21-2295186157-4208122820-3846616368-1001\...\Run: [Chromium] => "c:\users\sgk\appdata\local\chromium\application\chrome.exe" --auto-launch-at-startup --profile-directory="Default" --restore-last-session

HKU\S-1-5-21-2295186157-4208122820-3846616368-1001\...\Policies\Explorer: [NoSecurityTab] 1

HKU\S-1-5-18\...\RunOnce: [Application Restart #1] => C:\Windows\System32\osk.exe [640000 2019-03-19] (Microsoft Windows -> Microsoft Corporation)

HKU\S-1-5-18\...\RunOnce: [Application Restart #0] => C:\Windows\System32\osk.exe [640000 2019-03-19] (Microsoft Windows -> Microsoft Corporation)

HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\79.1.1.23\Installer\chrmstp.exe [2019-12-20] (Brave Software, Inc.) [File not signed]

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hauppauge Device Properties.lnk [2019-07-02]

ShortcutTarget: Hauppauge Device Properties.lnk -> C:\Program Files (x86)\Hauppauge\DeviceCentral\HcwDCTrayTool.exe (Hauppauge Computer Works Inc. -> Hauppauge Computer Works, Inc.) [File not signed]

Startup: C:\Users\SGK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Free Sound Recorder Update.lnk [2019-10-10]

ShortcutTarget: Free Sound Recorder Update.lnk -> C:\Program Files (x86)\Free Sound Recorder\Free Sound Recorder Update.exe (No File)

CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {069B45B6-ED78-4C29-A115-974553475799} - System32\Tasks\Lenovo\REACHit Agent Update => C:\Program Files (x86)\Lenovo\REACHit\webAgent.exe [564664 2015-06-12] (LENOVO -> Lenovo)

Task: {0B10ED68-9BF9-4683-8F10-8BA467C3ED15} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [360448 2019-12-13] (CloudBees, Inc.) [File not signed]

Task: {0CCE4F7C-E31E-4598-8A5D-9FF635BC4839} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)

Task: {0EECE584-E122-4E76-92FC-CB06E2A4A66C} - System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-VF56AA2-SGK => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)

Task: {0FCF35A8-0E29-43B8-967D-069EE6AE57CD} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => %windir%\System32\reg.exe add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32

Task: {12768BAD-7F3D-4748-92DB-C78D2304F844} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [17184 2014-09-02] (LENOVO -> Lenovo)

Task: {1BCF664A-DF62-44D4-903E-E1BFFA6050C2} - System32\Tasks\Lenovo\REACHit Agent Startup => C:\Program Files (x86)\Lenovo\REACHit\webAgent.exe [564664 2015-06-12] (LENOVO -> Lenovo)

Task: {1EE2C587-D0FA-4C81-AAF9-C1C2FEF67230} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MpCmdRun.exe [469928 2019-10-29] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {2201B329-1587-425D-9741-A15C1C11BDBC} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1514416 2018-04-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

Task: {2417BE97-F92E-4DF4-8E32-CF7FDBFD42DA} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [1360320 2015-09-05] (LENOVO -> Lenovo)

Task: {2CCDB93E-87BF-46F6-92BF-FF8B6306986F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MpCmdRun.exe [469928 2019-10-29] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {3252C2D4-1260-45B3-97C0-167467E31D47} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [360448 2019-12-13] (CloudBees, Inc.) [File not signed]

Task: {347D0436-6FDC-43B8-970B-DC055903672D} - System32\Tasks\HPCustParticipation HP Deskjet 3050 J610 series => C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\HPCustPartic.exe [4119656 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)

Task: {3FAFF3BD-FB0A-46EC-BAB5-8294B38FA110} - System32\Tasks\EPSON L3150 Series Update {EB3992DF-6650-4241-A140-08977B791365} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSUNE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)

Task: {41AB9512-9F20-498A-9133-F293D1522CB5} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [9464768 2015-09-05] (LENOVO -> )

Task: {48670278-F002-4FF8-9D8E-A365D5317805} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [9464768 2015-09-05] (LENOVO -> )

Task: {5155A95A-0A65-4360-B5B2-F42FE0A5E78E} - System32\Tasks\RtHDVBg_Dolby => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1514416 2018-04-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

Task: {56284708-6204-4F68-9F15-EFA59AD15D90} - System32\Tasks\Lenovo\Power Manager\Uninstall task => C:\WINDOWS\SysWOW64\Lenovo\PowerMgr\PowerMgrInst.exe [58552 2019-02-12] (Lenovo -> )

Task: {622CD398-E4F4-4942-AB65-1F8532616046} - System32\Tasks\Lenovo Active Protection System => C:\Windows\system32\TpShUI.exe [120424 2017-03-21] (Lenovo -> Lenovo.)

Task: {67215899-2122-41EB-9D81-8FA35A83A9E0} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [157320 2019-09-29] (Brave Software, Inc. -> BraveSoftware Inc.)

Task: {674F069F-9B32-4950-A015-E228A4A2FCF2} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [54144 2019-09-23] (Lenovo -> Lenovo Group Ltd.)

Task: {7620AEB6-6806-4324-B297-F00FFC5AD35E} - System32\Tasks\Product Updater => C:\Program Files (x86)\MP3 Cutter Joiner Free\FFProductUpdater.exe

Task: {7D4F7FCF-6C00-4A4E-A17E-6CA509EA294F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1240656 2019-09-10] (Adobe Inc. -> Adobe Systems)

Task: {8B58203B-01A8-4E7B-A25E-D713E37227F1} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_303_pepper.exe [1453112 2019-12-15] (Adobe Inc. -> Adobe)

Task: {94C7DB49-81E7-4CE1-83AB-65FBCA77EF54} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [157320 2019-09-29] (Brave Software, Inc. -> BraveSoftware Inc.)

Task: {9DDD4663-28D7-4445-B8FB-C6CF0C5472B4} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => %windir%\system32\sc.exe START ImControllerService

Task: {A659EDB8-E7F7-44B5-950B-A4EDC38D66E9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MpCmdRun.exe [469928 2019-10-29] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {A8575C5E-3759-495A-91F1-85A99018ED58} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)

Task: {BA94AE67-7A42-4CA6-A405-3A6EEA82AE6D} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe

Task: {BE780F7D-DEDC-47B7-A47D-378193C46EB8} - System32\Tasks\Lenovo\Experience Improvement => C:\Program Files\Lenovo\ExperienceImprovement\LenovoExperienceImprovement.exe [287688 2017-06-11] (LENOVO -> Lenovo)

Task: {BF32976A-45F2-42D4-A7A4-8AAD5FF0E936} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => C:\Windows\system32\rundll32.exe C:\Windows\system32\pla.dll,PlaHost "LSC Memory" "$(Arg0)"

Task: {C87B1E9E-F468-4BAB-B8B3-BE548DB8320A} - System32\Tasks\BlueStacksHelper => C:\ProgramData\BlueStacks\Client\Helper\BlueStacksHelper.exe [745480 2019-04-16] (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)

Task: {C91BF3D1-9E7B-4FE0-B869-257F2A22124D} - System32\Tasks\DolbySelectorTask => C:\Program Files\Dolby Digital Plus\ddp.exe

Task: {D92F0C7F-2382-4087-95C5-0DAE14CC43B5} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [316632 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)

Task: {DAA0705E-7BC4-4B76-9C28-40368C4552B1} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\e5de0dc4-1bfd-4ee7-bb16-5528e1afc174 => C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [77208 2019-09-23] (Lenovo -> Lenovo Group Ltd.)

Task: {E2E2B5E1-8CC2-406D-A551-F0FBB0905373} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-12-15] (Adobe Inc. -> Adobe)

Task: {E5DA6C26-7168-46D9-A1AD-2CFACDD1F3AB} - System32\Tasks\GoogleUpdateTaskMachineWSO => C:\WINDOWS\SysWOW64\Microsoft\Protect\S-1-21-90\RB_1.4.94.84.exe [67896 2019-11-07] () [File not signed] <==== ATTENTION

Task: {E9B8FC8C-1D6D-417E-913C-7DFDADEC3B30} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [270272 2015-09-05] (LENOVO -> Lenovo)

Task: {F0B70A85-BCBF-44FE-8F27-4ABAB6BF7B0C} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2872400 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)

Task: {F259D293-1C22-4A40-876D-4BFC8CC7BDCA} - System32\Tasks\Lenovo\Power Manager\Background monitor => C:\WINDOWS\SysWOW64\Lenovo\PowerMgr\PowerMgr.exe [112312 2019-02-12] (Lenovo -> Lenovo)

Task: {F8F01970-D1C4-46D1-8048-64A223AEF6BB} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\e10b237a-e5ab-4479-be3c-0da1d02de202 => C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [77208 2019-09-23] (Lenovo -> Lenovo Group Ltd.)

Task: {FE9ABD8B-8328-4C70-8B83-40B1EBCBED1A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MpCmdRun.exe [469928 2019-10-29] (Microsoft Windows Publisher -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

Task: C:\WINDOWS\Tasks\EPSON L3150 Series Update {EB3992DF-6650-4241-A140-08977B791365}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSUNE.EXE:/EXE:{EB3992DF-6650-4241-A140-08977B791365} /F:UpdateWORKGROUP\DESKTOP-VF56AA2$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\Lenovo Active Protection System.job => C:\Windows\system32\TpShUI.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local: [ActivePolicy] SOFTWARE\Policies\Microsoft\Windows\IPSEC\Policy\Local\ipsecPolicy{d0dfe279-ff8e-42d5-a693-e3bfaea074be} <==== ATTENTION (Restriction - IP)

ProxyEnable: [S-1-5-21-2295186157-4208122820-3846616368-1001] => Proxy is enabled.

ProxyServer: [S-1-5-21-2295186157-4208122820-3846616368-1001] => http=127.0.0.1:8080;https=127.0.0.1:8080

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{9e8827fe-e5ba-4082-80b6-6eac0b961629}: [DhcpNameServer] 172.168.127.2

Tcpip\..\Interfaces\{a7b1feef-c942-43a6-b975-ba7b52789bf5}: [DhcpNameServer] 192.168.1.1

ManualProxies: 1http=127.0.0.1:8080;https=127.0.0.1:8080

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-2295186157-4208122820-3846616368-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo15.msn.com/?pc=LCTE

HKU\S-1-5-21-2295186157-4208122820-3846616368-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/

BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2019-05-09] (Tonec Inc. -> Internet Download Manager, Tonec Inc.)

BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2019-05-09] (Tonec Inc. -> Internet Download Manager, Tonec Inc.)

BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2017-02-22] (Microsoft Corporation -> Microsoft Corporation)

Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2017-04-11] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2017-04-11] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2017-04-11] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2017-04-11] (Microsoft Corporation -> Microsoft Corporation)

FireFox:

========

FF DefaultProfile: w02vk56o.default

FF ProfilePath: C:\Users\SGK\AppData\Roaming\Mozilla\Firefox\Profiles\9cl2d4l1.default-release [2019-12-20]

FF Notifications: Mozilla\Firefox\Profiles\9cl2d4l1.default-release -> hxxps://mail-notification.info; hxxps://fbu5.reirenchattin.com

FF Extension: (Video DownloadHelper) - C:\Users\SGK\AppData\Roaming\Mozilla\Firefox\Profiles\9cl2d4l1.default-release\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2019-10-10]

FF ProfilePath: C:\Users\SGK\AppData\Roaming\Mozilla\Firefox\Profiles\w02vk56o.default [2019-12-16]

FF user.js: detected! => C:\Users\SGK\AppData\Roaming\Mozilla\Firefox\Profiles\w02vk56o.default\user.js [2017-06-29]

FF Homepage: Mozilla\Firefox\Profiles\w02vk56o.default -> file:///C:/ProgramData/Voyasollams/ff.HP

FF Notifications: Mozilla\Firefox\Profiles\w02vk56o.default -> hxxps://mg.mail.yahoo.com; hxxps://recordsfinder.com; hxxps://mail-notification.info

FF Extension: (No Name) - C:\Program Files (x86)\Mozilla Firefox\browser\features\{A3D769E6-007E-485F-B2AC-CD7838DD4B20}.xpi [2019-11-08] [not signed]

FF HKU\S-1-5-21-2295186157-4208122820-3846616368-1001\...\Firefox\Extensions: [mozilla_cc3@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi

FF Extension: (IDM Integration Module) - C:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi [2019-05-10] [UpdateUrl:hxxps://data.internetdownloadmanager.com/idmmzcc3/update.json]

FF HKU\S-1-5-21-2295186157-4208122820-3846616368-1001\...\Firefox\Extensions: [ISAllmytube@iSkysoft.com] - C:\Program Files (x86)\Aimersoft\Aimersoft iTube Studio\BrowserPlugin\isallmytube@iskysoft.com_xpi => not found

FF HKU\S-1-5-21-2295186157-4208122820-3846616368-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\SGK\AppData\Roaming\IDM\idmmzcc5

FF Extension: (IDM CC) - C:\Users\SGK\AppData\Roaming\IDM\idmmzcc5 [2019-08-31] [Legacy] [not signed]

FF HKU\S-1-5-21-2295186157-4208122820-3846616368-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi

FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-12-20] [Legacy]

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @baidu.com/YunWebDetectPlugin -> C:\Users\SGK\AppData\Roaming\baidu\BaiduNetdisk\npYunWebDetect.dll [2019-08-23] (Beijing Baidu Netcom Science and Technology Co.,Ltd -> Baidu.com, Inc.)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel® Identity Protection Technology Software -> Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel® Identity Protection Technology Software -> Intel Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=3 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [2019-09-29] (Brave Software, Inc. -> BraveSoftware Inc.)

FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=9 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [2019-09-29] (Brave Software, Inc. -> BraveSoftware Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.342\npGoogleUpdate3.dll [2019-11-09] (Google Inc -> Google LLC)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.342\npGoogleUpdate3.dll [2019-11-09] (Google Inc -> Google LLC)

FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-08-21] (Adobe Inc. -> Adobe Systems Inc.)

Chrome:

=======

CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2019-05-11]

CHR HKU\S-1-5-21-2295186157-4208122820-3846616368-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dhdgffkkebhmkfjojejmpbldmpobfkfo] - hxxp://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2019-05-11]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

"MsDD0C5C30AppA" => service could not be unlocked. <==== ATTENTION

HKLM\SYSTEM\ControlSet001\Services\MsDD0C5C30AppA => C:\WINDOWS\System32\MsDD0C5C30App.dll <==== ATTENTION (Rootkit!/Locked Service)

R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3147344 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2914896 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated)

S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [157320 2019-09-29] (Brave Software, Inc. -> BraveSoftware Inc.)

S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [157320 2019-09-29] (Brave Software, Inc. -> BraveSoftware Inc.)

R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [145224 2019-09-19] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)

S2 EventSvc; C:\ProgramData\EventSvc\eventsvc.exe [360448 2018-07-24] (CloudBees, Inc.) [File not signed] <==== ATTENTION

S4 ExpressCache; C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe [829080 2015-06-11] (CONDUSIV TECHNOLOGIES -> Condusiv Technologies)

R2 gupdate; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [360448 2019-12-13] (CloudBees, Inc.) [File not signed]

S3 gupdatem; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [360448 2019-12-13] (CloudBees, Inc.) [File not signed]

S3 HcwDevCentralService; C:\Program Files (x86)\Hauppauge\DeviceCentral\HcwDevCentralService.exe [396072 2016-10-05] (Hauppauge Computer Works Inc. -> Hauppauge Computer Works, Inc.) [File not signed]

R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [542320 2018-01-10] (Intel® Wireless Connectivity Solutions -> Intel Corporation)

R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [382456 2016-11-23] (Intel® pGFX -> Intel Corporation)

R2 ImControllerService; C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [77208 2019-09-23] (Lenovo -> Lenovo Group Ltd.)

S4 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel® Trusted Connect Service -> Intel® Corporation)

S4 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [223008 2015-07-07] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation)

R2 LPlatSvc; C:\WINDOWS\system32\LPlatSvc.exe [711248 2017-04-01] (Lenovo -> Lenovo.)

S4 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [271296 2015-09-05] (LENOVO -> Lenovo)

S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6960640 2019-11-08] (Malwarebytes Inc -> Malwarebytes)

R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [333232 2018-04-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5796168 2019-10-15] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [259176 2016-10-02] (Synaptics Incorporated -> Synaptics Incorporated)

S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\NisSrv.exe [3201616 2019-10-29] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MsMpEng.exe [103168 2019-10-29] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 wuauserv; C:\WINDOWS\system32\svchost.exe [53744 2019-03-19] (Microsoft Windows Publisher -> Microsoft Corporation) <==== ATTENTION (no ServiceDLL)

S3 wuauserv; C:\WINDOWS\SysWOW64\svchost.exe [45448 2019-03-19] (Microsoft Windows Publisher -> Microsoft Corporation) <==== ATTENTION (no ServiceDLL)

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [4110624 2019-05-14] (Intel Corporation -> Intel® Corporation)

S4 MyWiFiDHCPDNS; "C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe" [X]

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 anvsnddrv; C:\WINDOWS\system32\drivers\anvsnddrv.sys [33872 2012-05-17] (AnvSoft Co., Ltd. -> AnvSoft Inc.)

S3 Apowersoft_AudioDevice; C:\WINDOWS\system32\drivers\Apowersoft_AudioDevice.sys [31920 2014-04-09] (APOWERSOFT LIMITED -> Wondershare)

S3 BlueStacksDrv; C:\Program Files\BlueStacks\BstkDrv.sys [313112 2019-09-05] (Bluestack Systems, Inc. -> Bluestack System Inc. )

R1 excfs; C:\WINDOWS\System32\DRIVERS\excfs.sys [25752 2015-06-11] (CONDUSIV TECHNOLOGIES -> Condusiv Technologies)

R0 excsd; C:\WINDOWS\System32\DRIVERS\excsd.sys [117912 2015-06-11] (CONDUSIV TECHNOLOGIES -> Condusiv Technologies)

R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [136128 2018-01-10] (Intel® Wireless Connectivity Solutions -> Intel Corporation)

R0 IntelHSWPcc; C:\WINDOWS\System32\drivers\IntelPcc.sys [88256 2015-06-10] (Intel® Software -> Intel Corporation)

S3 IT9517BDA; C:\WINDOWS\System32\Drivers\hcwG4bda.sys [752656 2016-08-11] (Hauppauge Computer Works Inc. -> ITE )

S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2019-11-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)

S3 Netwtw02; C:\WINDOWS\System32\drivers\Netwtw02.sys [7030040 2015-07-16] (Intel Corporation-Wireless Connectivity Solutions -> Intel Corporation)

R3 Netwtw04; C:\WINDOWS\system32\DRIVERS\Netwtw04.sys [8731536 2019-06-03] (Intel® Wireless Connectivity Solutions -> Intel Corporation)

R2 npf; C:\WINDOWS\system32\drivers\npf.sys [36600 2015-10-12] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)

R3 RTSPER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [763120 2015-08-20] (Realtek Semiconductor Corp -> Realsil Semiconductor Corporation)

S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [50808 2016-04-21] (Synaptics Incorporated -> Synaptics Incorporated)

R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [51296 2016-10-02] (Synaptics Incorporated -> Synaptics Incorporated)

R3 SPUVCbv; C:\WINDOWS\System32\Drivers\SPUVCbv64.sys [749640 2016-07-01] (SUNPLUS INNOVATION TECHNOLOGY INC. -> Sunplus Innovation Technology Inc.)

S3 tapwindscribe0901; C:\WINDOWS\System32\drivers\tapwindscribe0901.sys [54896 2017-04-21] (Windscribe Limited -> The OpenVPN Project)

S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [46472 2019-10-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [26880 2016-04-23] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)

S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [351968 2019-10-29] (Microsoft Windows -> Microsoft Corporation)

S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [53984 2019-10-29] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

NETSVC: MsDD0C5C30App -> no filepath.

NETSVC: MsDD0C5C30AppB -> no filepath.

NETSVC: MsDD0C5C30AppC -> no filepath.

NETSVC: MsDD0C5C30AppBak -> no filepath.

NETSVC: MsDD0C5C30AppA -> no filepath.

==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-12-21 13:21 - 2019-12-21 13:24 - 000034226 _____ C:\Users\SGK\Desktop\FRST.txt

2019-12-21 13:20 - 2019-12-21 13:23 - 000000000 ____D C:\FRST

2019-12-21 13:14 - 2019-12-21 13:20 - 000722332 _____ C:\WINDOWS\Minidump\122119-32843-01.dmp

2019-12-21 12:21 - 2019-12-21 12:26 - 000717868 _____ C:\WINDOWS\Minidump\122119-41484-01.dmp

2019-12-21 12:13 - 2019-12-21 13:14 - 000000000 ____D C:\WINDOWS\Minidump

2019-12-21 12:13 - 2019-12-21 12:13 - 000000000 _____ C:\WINDOWS\Minidump\122119-34796-01.dmp

2019-12-21 12:04 - 2019-12-21 12:07 - 000000000 ____D C:\Users\SGK\Documents\Bandicam

2019-12-21 11:59 - 2019-12-21 11:59 - 000001075 _____ C:\Users\SGK\Desktop\Bandicam.lnk

2019-12-21 11:59 - 2019-12-21 11:59 - 000000000 ____D C:\Program Files (x86)\Bandicam

2019-12-21 11:42 - 2019-12-21 11:42 - 000000616 _____ C:\Users\Public\Desktop\Fraps.lnk

2019-12-21 11:42 - 2019-12-21 11:42 - 000000616 _____ C:\ProgramData\Desktop\Fraps.lnk

2019-12-21 11:42 - 2019-12-21 11:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps

2019-12-21 11:35 - 2019-12-21 11:35 - 002264064 _____ (Farbar) C:\Users\SGK\Desktop\FRST64.exe

2019-12-21 11:28 - 2019-12-21 11:33 - 005198336 _____ (AVAST Software) C:\Users\SGK\Desktop\aswMBR.exe

2019-12-20 20:57 - 2019-12-20 20:57 - 000002501 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk

2019-12-20 20:57 - 2019-12-20 20:57 - 000002460 _____ C:\Users\Public\Desktop\Brave.lnk

2019-12-20 20:57 - 2019-12-20 20:57 - 000002460 _____ C:\ProgramData\Desktop\Brave.lnk

2019-12-20 20:49 - 2019-12-20 20:49 - 003839032 _____ C:\Users\SGK\Documents\bookmarks_12_20_19.html

2019-12-20 20:43 - 2019-12-20 20:43 - 000000080 ___SH C:\bootTel.dat

2019-12-20 20:43 - 2019-12-20 20:43 - 000000000 __SHD C:\found.000

2019-12-16 14:09 - 2019-12-16 21:45 - 000000000 ____D C:\WINDOWS\system32\Tasks\SyncVersion

2019-12-16 14:08 - 2019-12-16 14:09 - 000000000 ____D C:\ProgramData\{A66E9A52-8E46-E22A-D61E-CA023EF612DA}

2019-12-16 14:08 - 2019-12-16 14:08 - 000001368 _____ C:\Users\SGK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HowToRemove.lnk

2019-12-16 13:35 - 2019-12-16 13:35 - 000000000 ____D C:\ProgramData\AutoUpdate

2019-12-16 13:35 - 2019-12-16 13:35 - 000000000 ____D C:\ProgramData\Airy Team

2019-12-16 12:38 - 2019-12-16 12:38 - 000000000 ____D C:\Download

2019-12-16 12:36 - 2019-12-16 12:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack

2019-12-16 12:36 - 2019-12-16 12:36 - 000000000 ____D C:\Program Files (x86)\K-Lite Codec Pack

2019-12-16 12:22 - 2019-12-16 12:23 - 000000000 ____D C:\Users\SGK\Downloads\Kadar Majee

2019-12-16 12:19 - 2019-12-20 13:17 - 000000000 ____D C:\Users\SGK\AppData\Roaming\Intel Rapid

2019-12-16 12:04 - 2019-12-20 13:16 - 000000000 ____D C:\WINDOWS\system32\Tasks\System

2019-12-16 12:02 - 2019-12-20 13:17 - 000000000 ____D C:\Users\SGK\AppData\Roaming\UBlockPlugin

2019-12-16 11:58 - 2019-12-20 13:16 - 000000000 ____D C:\Program Files (x86)\Hps

2019-12-16 11:58 - 2019-12-16 11:58 - 000000000 ____D C:\ProgramData\Lamia

2019-12-16 11:50 - 2019-12-16 11:50 - 000000000 ____D C:\Users\SGK\AppData\Local\cache

2019-12-15 13:14 - 2019-12-15 13:14 - 002621096 _____ C:\Users\SGK\Downloads\Kannana Kannanukku-Aalayamani Tml Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:14 - 2019-12-15 13:14 - 002545332 _____ C:\Users\SGK\Downloads\Kallelam Maanikka-Aalayamani Tml Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:14 - 2019-12-15 13:14 - 002303000 _____ C:\Users\SGK\Downloads\Satti Suttathada-Aalayamani Tml Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:14 - 2019-12-15 13:14 - 001854432 _____ C:\Users\SGK\Downloads\Maanaattam-Aalayamani Tml Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:14 - 2019-12-15 13:14 - 001760620 _____ C:\Users\SGK\Downloads\Thookam Un Kangalai-Aalayamani Tml Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:14 - 2019-12-15 13:14 - 001245688 _____ C:\Users\SGK\Downloads\Kallelaam Maanikka-Aalayamani Tml Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:14 - 2019-12-15 13:14 - 000355884 _____ C:\Users\SGK\Downloads\Karunai Magan-Aalayamani Tml Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:10 - 2019-12-15 13:10 - 002797440 _____ C:\Users\SGK\Downloads\Thanjavur Melam Atichi-Simla Special Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:10 - 2019-12-15 13:10 - 002609816 _____ C:\Users\SGK\Downloads\Ven Megame Oodiva-Simla Special Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:10 - 2019-12-15 13:10 - 002441368 _____ C:\Users\SGK\Downloads\Look Love Me Dear - Ven Megame-Simla Special Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:09 - 2019-12-15 13:09 - 002434224 _____ C:\Users\SGK\Downloads\Kuthura Kuthula-Simla Special Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:09 - 2019-12-15 13:09 - 002272356 _____ C:\Users\SGK\Downloads\Unnakkenna Melae-Simla Special Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:08 - 2019-12-15 13:08 - 001649324 _____ C:\Users\SGK\Downloads\Sollale Vilakka Theriyale-Chakravarthi Thirumagal Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:08 - 2019-12-15 13:08 - 001621688 _____ C:\Users\SGK\Downloads\Nalangittu Paarpomadi-Chakravarthi Thirumagal Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:08 - 2019-12-15 13:08 - 001572996 _____ C:\Users\SGK\Downloads\Kaathalennum Solaiyile-Chakravarthi Thirumagal Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:08 - 2019-12-15 13:08 - 001461136 _____ C:\Users\SGK\Downloads\Ennam Ellam-Chakravarthi Thirumagal Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:08 - 2019-12-15 13:08 - 001287800 _____ C:\Users\SGK\Downloads\Sollalae Villakkath Theriallae-Chakravarthi Thirumagal Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:07 - 2019-12-15 13:07 - 001309420 _____ C:\Users\SGK\Downloads\Ellayillatha Indathile-Chakravarthi Thirumagal Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:07 - 2019-12-15 13:07 - 001184964 _____ C:\Users\SGK\Downloads\Kannalane Vaarunga-Chakravarthi Thirumagal Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:07 - 2019-12-15 13:07 - 001121232 _____ C:\Users\SGK\Downloads\Enthan Inbam-Chakravarthi Thirumagal Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:06 - 2019-12-15 13:06 - 001789196 _____ C:\Users\SGK\Downloads\Porakkumpothu-Chakravarthi Thirumagal Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:06 - 2019-12-15 13:06 - 001688804 _____ C:\Users\SGK\Downloads\Aada Vaanga-Chakravarthi Thirumagal Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:06 - 2019-12-15 13:06 - 001579576 _____ C:\Users\SGK\Downloads\Yematram Thaana-Chakravarthi Thirumagal Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:06 - 2019-12-15 13:06 - 001443088 _____ C:\Users\SGK\Downloads\Aththanum Naanthane-Chakravarthi Thirumagal Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:05 - 2019-12-15 13:06 - 001852364 _____ C:\Users\SGK\Downloads\Manithan Porakkumpothu-Chakravarthi Thirumagal Gaana.com (index_0_a) (via Skyload).mp4

2019-12-15 13:05 - 2019-12-15 13:05 - 001612664 _____ C:\Users\SGK\Downloads\Urangaiyile-Chakravarthi Thirumagal Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:51 - 2019-12-13 12:51 - 001856688 _____ C:\Users\SGK\Downloads\Undaakki Vittavargal-Muharasi Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:51 - 2019-12-13 12:51 - 001418836 _____ C:\Users\SGK\Downloads\Enakkum Unakkumthaan-Muharasi Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:51 - 2019-12-13 12:51 - 001142288 _____ C:\Users\SGK\Downloads\Mugathai Kaatti Katti-Muharasi Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:49 - 2019-12-13 12:49 - 002812856 _____ C:\Users\SGK\Downloads\Jalitha Vanitha-Avanthaan Manithan Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:49 - 2019-12-13 12:49 - 002464116 _____ C:\Users\SGK\Downloads\Anbu Nadamaadum-Avanthaan Manithan Gaana.com (index_0_a) (via Skyload) (1).mp4

2019-12-13 12:49 - 2019-12-13 12:49 - 002370304 _____ C:\Users\SGK\Downloads\Manithan Ninaippathundu-Avanthaan Manithan Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:49 - 2019-12-13 12:49 - 001910644 _____ C:\Users\SGK\Downloads\Anbu Nadamaadum-Avanthaan Manithan Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:48 - 2019-12-13 12:48 - 002058224 _____ C:\Users\SGK\Downloads\Aattuvittaal-Avanthaan Manithan Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:43 - 2019-12-13 12:43 - 003105196 _____ C:\Users\SGK\Downloads\Jambulingame Jadathara-Kasethan Kadavulada Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:43 - 2019-12-13 12:43 - 002205616 _____ C:\Users\SGK\Downloads\Indru Vandha Intha Mayakkam-Kasethan Kadavulada Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:43 - 2019-12-13 12:43 - 001984340 _____ C:\Users\SGK\Downloads\Aval Enna Ninaithal-Kasethan Kadavulada Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:43 - 2019-12-13 12:43 - 001936212 _____ C:\Users\SGK\Downloads\Andavan Thodangi-Kasethan Kadavulada Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:40 - 2019-12-13 12:40 - 001315436 _____ C:\Users\SGK\Downloads\Kasethan Kadavulappa-A Tribute to Vaali Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:16 - 2019-12-13 12:16 - 002806464 _____ C:\Users\SGK\Downloads\Mazhai Kaalam Megam Ondru-Vazhve Maayam Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:16 - 2019-12-13 12:16 - 002493632 _____ C:\Users\SGK\Downloads\Vandhanam Yen Vandhanam-Vazhve Maayam Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:16 - 2019-12-13 12:16 - 002456408 _____ C:\Users\SGK\Downloads\Devi Sridevi vun Thirumal-Vazhve Maayam Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:16 - 2019-12-13 12:16 - 002447384 _____ C:\Users\SGK\Downloads\Neela Vaanam Odaiyil-Vazhve Maayam Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:16 - 2019-12-13 12:16 - 002348120 _____ C:\Users\SGK\Downloads\Vazhve Maayam Intha Vazhve-Vazhve Maayam Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:16 - 2019-12-13 12:16 - 002251300 _____ C:\Users\SGK\Downloads\Ye Rajave O Rajathi-Vazhve Maayam Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:15 - 2019-12-13 12:15 - 002366732 _____ C:\Users\SGK\Downloads\Malargalil-Kalyana Raman Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:15 - 2019-12-13 12:15 - 001497044 _____ C:\Users\SGK\Downloads\Kaathal Deepam Ondru-Kalyana Raman Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:14 - 2019-12-13 12:14 - 002263896 _____ C:\Users\SGK\Downloads\Ninaithaal Inikkum-Kalyana Raman Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:14 - 2019-12-13 12:14 - 002136432 _____ C:\Users\SGK\Downloads\Kaathal Vanthiruchi-Kalyana Raman Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:14 - 2019-12-13 12:14 - 002069692 _____ C:\Users\SGK\Downloads\Aaha Vandhirichchu-Kalyana Raman Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:05 - 2019-12-13 12:05 - 001527124 _____ C:\Users\SGK\Downloads\Thedum Deivam-Kazhugu Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:05 - 2019-12-13 12:05 - 001199440 _____ C:\Users\SGK\Downloads\Kathal Ennum Kovil-Kazhugu Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:04 - 2019-12-13 12:04 - 001658724 _____ C:\Users\SGK\Downloads\Thangangale Thambigale-Thillu Mullu Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 12:04 - 2019-12-13 12:04 - 000607804 _____ C:\Users\SGK\Downloads\Thillumullu Thillumullu-Thillu Mullu Gaana.com (index_0_a) (via Skyload).mp4

2019-12-13 11:51 - 2019-12-21 13:24 - 000000000 ____D C:\Users\SGK\AppData\Local\GoogleChromeUserData

2019-12-11 13:41 - 2019-12-11 13:43 - 000000000 ____D C:\Users\SGK\Downloads\Medeival Tamil Songs

2019-12-11 13:33 - 2019-12-21 12:24 - 000000000 ____D C:\Users\SGK\AppData\Local\GoogleChromeApplication

2019-12-11 12:15 - 2019-12-11 12:15 - 006848922 _____ C:\Users\SGK\Downloads\Kai Kodutha Deivam Sindhu Nadhiyin song (4).mp4

2019-12-11 11:19 - 2019-12-11 11:22 - 000000000 ____D C:\Users\SGK\AppData\Roaming\YouTubeByClick

2019-12-11 11:19 - 2019-12-11 11:19 - 000000000 ____D C:\ProgramData\Caphyon

2019-12-06 12:04 - 2019-12-06 12:42 - 000000000 ____D C:\Users\SGK\Downloads\1957 Dec Makkalai Petra Maharasi

2019-12-06 12:03 - 2019-12-06 12:42 - 000000000 ____D C:\Users\SGK\Downloads\1966 Dec Manam Oru Kurangu

2019-12-04 11:45 - 2019-12-04 12:00 - 754687337 ____R C:\Users\SGK\Downloads\Spider-Man. Far from Home (2019) WEBRip [1080p] Trailer №2.mkv

2019-12-04 11:44 - 2019-12-04 11:44 - 000001607 _____ C:\Users\SGK\Desktop\Sowbhagyavathi.Vprj

2019-12-03 20:28 - 2019-12-03 20:28 - 001113271 _____ C:\WINDOWS\SysWOW64\D5C25D9D4D6684479BCB96E28CC6897C.CPB116

2019-12-03 14:17 - 2019-12-03 14:17 - 000060788 _____ C:\Users\SGK\Downloads\[new-rutor.org]Chelovek.pauk.Vdali.ot.doma_Spider.Man.Far.from.Ho.torrent

2019-12-03 14:10 - 2019-12-03 14:10 - 000018346 _____ C:\Users\SGK\Downloads\[rutor.is]Godzilla.King.of.the.Monsters.2019.BDRip.AVC.Ex.torrent

2019-12-03 14:01 - 2019-12-03 14:01 - 000015315 _____ C:\Users\SGK\Downloads\[rutor.is]Spider-Man._Far_from_Home_2019_WEBRip_1080p_Tra.torrent

2019-12-03 14:00 - 2019-12-03 14:00 - 000082363 _____ C:\Users\SGK\Downloads\[rutor.is]Spider-Man_Far_from_Home_2019_QHD_HDR.torrent

2019-12-03 13:54 - 2019-12-03 13:54 - 000083881 _____ C:\Users\SGK\Downloads\510AADAA88CA9473470CA31C7696977C5BE57DEF.torrent

2019-12-03 13:53 - 2019-12-03 13:53 - 000015380 _____ C:\Users\SGK\Downloads\7D23F3365AEAC062E7CA20A54D3D18B3767E496F.torrent

2019-12-03 13:40 - 2019-12-03 13:40 - 000060047 _____ C:\Users\SGK\Downloads\926EA1620FC8A1CBA7AF098F3523507D0EEFED95.torrent

2019-12-03 13:37 - 2019-12-03 13:37 - 000091931 _____ C:\Users\SGK\Downloads\0DDBB442E9812A60FBEE21B102BF4E669A05D667.torrent

2019-12-03 13:32 - 2019-12-03 13:32 - 000083187 _____ C:\Users\SGK\Downloads\E1AF5F59F021775254627EC1D9A861695DC20B0E.torrent

2019-12-03 13:24 - 2019-12-03 13:24 - 000058337 _____ C:\Users\SGK\Downloads\D9F84DBB2D36379C2C12CBE97A43CFBBA622F7C3.torrent

2019-12-03 13:24 - 2019-12-03 13:24 - 000038298 _____ C:\Users\SGK\Downloads\113E92422F28A6222F6717676A72176144B2D3AE.torrent

2019-12-03 13:23 - 2019-12-03 13:23 - 000017572 _____ C:\Users\SGK\Downloads\EC3F4D80A05F3F54E207E5302053DE49F4837E78.torrent

2019-12-03 13:21 - 2019-12-03 13:21 - 000018257 _____ C:\Users\SGK\Downloads\00D76F58439FA2FC9889C95D98E05930A7C036A0.torrent

2019-12-03 13:17 - 2019-12-03 13:17 - 000013302 _____ C:\Users\SGK\Downloads\41F6721BB3BCE598843E9F7B172DC97488266C34.torrent

2019-12-03 13:05 - 2019-12-03 13:05 - 000086947 _____ C:\Users\SGK\Downloads\97F58867E989E0DA30CFC56522B08A01646F27D1.torrent

2019-11-29 19:27 - 2019-11-29 19:55 - 000000000 ____D C:\Users\SGK\Downloads\Age.of.Empires.II.Definitive.Edition-CODEX

2019-11-29 19:22 - 2019-11-29 19:22 - 000093233 _____ C:\Users\SGK\Downloads\Age.of.Empires.II.Definitive.Edition-CODEX.torrent

2019-11-24 21:30 - 2019-11-24 21:30 - 000290523 _____ C:\WINDOWS\SysWOW64\5244E186942F41E6DA72177D06E62D9D.CRA116

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-12-21 13:17 - 2019-10-13 20:18 - 000000000 ____D C:\Users\SGK\Desktop\BlueStacks Apps

2019-12-21 13:17 - 2019-03-19 10:22 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2019-12-21 13:16 - 2017-06-12 20:39 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat

2019-12-21 13:16 - 2017-06-11 22:14 - 000000000 __SHD C:\Users\SGK\IntelGraphicsProfiles

2019-12-21 13:14 - 2019-10-15 00:07 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2019-12-21 13:14 - 2019-10-14 23:38 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2019-12-21 12:27 - 2019-03-19 10:20 - 000000000 ____D C:\WINDOWS\INF

2019-12-21 12:13 - 2019-10-14 23:49 - 000000000 ____D C:\Users\SGK

2019-12-21 11:44 - 2019-10-15 00:07 - 000004164 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{0A00A2D4-6E2D-4A15-AC5D-1F5CEDAEDF66}

2019-12-21 11:42 - 2017-10-03 19:58 - 000000000 ____D C:\Fraps

2019-12-20 20:57 - 2019-09-29 21:01 - 000000000 ____D C:\Program Files (x86)\BraveSoftware

2019-12-20 20:51 - 2019-11-09 11:51 - 000000000 ____D C:\Program Files (x86)\Google

2019-12-20 20:31 - 2019-10-09 12:17 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox

2019-12-20 13:25 - 2017-06-25 20:05 - 000000000 ____D C:\Users\SGK\AppData\LocalLow\Mozilla

2019-12-20 13:17 - 2019-11-07 21:57 - 000000000 ____D C:\ProgramData\winnmgr

2019-12-20 13:17 - 2019-11-07 21:57 - 000000000 ____D C:\ProgramData\EventSvc

2019-12-20 13:17 - 2019-03-19 10:07 - 000524288 _____ C:\WINDOWS\system32\config\BBI

2019-12-20 13:16 - 2019-11-08 11:32 - 000000000 ____D C:\Program Files\XHH3UA0M8V

2019-12-20 13:16 - 2019-10-10 20:02 - 000000000 ____D C:\Users\SGK\AppData\Roaming\Free Sound Recorder New Version Available

2019-12-20 13:14 - 2019-10-09 21:38 - 000000000 ____D C:\Program Files (x86)\Auslogics

2019-12-20 12:17 - 2019-08-31 21:00 - 000000000 ____D C:\Users\SGK\Downloads\Compressed

2019-12-17 22:31 - 2018-03-18 17:59 - 000000000 ____D C:\Users\Public\Hauppauge Capture

2019-12-16 21:38 - 2019-08-31 21:00 - 000000000 ____D C:\Users\SGK\AppData\Roaming\DMCache

2019-12-16 14:08 - 2016-02-24 00:38 - 000000000 ____D C:\ProgramData\Package Cache

2019-12-16 14:03 - 2018-02-12 20:43 - 000000000 ____D C:\Users\SGK\AppData\Local\4kdownload.com

2019-12-16 13:55 - 2019-03-19 10:22 - 000000000 ____D C:\WINDOWS\LiveKernelReports

2019-12-16 12:46 - 2018-09-27 22:26 - 000000000 ____D C:\Users\SGK\AppData\Local\MediaHuman

2019-12-16 12:22 - 2019-11-08 11:38 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys

2019-12-16 11:19 - 2017-06-13 21:16 - 000000000 ____D C:\Users\SGK\AppData\Roaming\VideoReDo-TVSuite5

2019-12-16 11:19 - 2017-06-13 21:16 - 000000000 ____D C:\ProgramData\TEMP

2019-12-15 12:57 - 2019-10-15 00:07 - 000004554 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player PPAPI Notifier

2019-12-15 12:57 - 2019-03-19 10:22 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed

2019-12-15 12:57 - 2019-03-19 10:22 - 000000000 ____D C:\WINDOWS\system32\Macromed

2019-12-13 11:51 - 2019-11-07 21:57 - 000000000 ____D C:\ProgramData\NtvHost

2019-12-09 14:00 - 2019-10-26 14:30 - 000000000 ____D C:\Users\SGK\Downloads\Mani

2019-12-06 12:38 - 2019-08-31 21:00 - 000000000 ____D C:\Users\SGK\Downloads\Video

2019-12-05 11:10 - 2019-04-21 14:34 - 000000000 ____D C:\Users\SGK\AppData\Roaming\uTorrent

2019-12-04 17:02 - 2019-04-21 14:35 - 000000000 ____D C:\Users\SGK\AppData\Local\BitTorrentHelper

2019-12-04 11:49 - 2019-10-28 22:16 - 000000000 ____D C:\Users\SGK\Downloads\Gaana Old Tamil Songs

2019-12-01 19:22 - 2019-09-28 20:46 - 2147483648 _____ C:\Users\SGK\Documents\[ReinForce] Break Blade 2014 (BDRip 1920x1080 x264 FLAC).part13.rar.baiduyun.downloading

2019-12-01 19:22 - 2019-09-28 20:46 - 000008606 ____H C:\Users\SGK\Documents\[ReinForce] Break Blade 2014 (BDRip 1920x1080 x264 FLAC).part13.rar.baiduyun.downloading.cfg

2019-11-27 20:27 - 2019-10-15 00:07 - 000003376 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2295186157-4208122820-3846616368-1001

2019-11-27 20:26 - 2019-10-14 23:49 - 000002368 _____ C:\Users\SGK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2019-11-27 20:26 - 2017-06-11 22:17 - 000000000 ___RD C:\Users\SGK\OneDrive

==================== Files in the root of some directories ========

2017-11-25 19:48 - 2017-11-25 19:48 - 000000002 _____ () C:\Users\SGK\AppData\Roaming\ExplorerFavorites.txt

2018-12-30 13:30 - 2018-12-30 13:30 - 000000000 _____ () C:\Users\SGK\AppData\Local\oobelibMkey.log

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Advertisements

Register to Remove

#2 yukukuhi

Authentic Member

Authentic Member
92 posts

Posted 21 December 2019 - 05:26 AM

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-12-2019

Ran by SGK (21-12-2019 13:25:20)

Running from C:\Users\SGK\Desktop

Windows 10 Pro Version 1903 18362.356 (X64) (2019-10-14 18:38:57)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-2295186157-4208122820-3846616368-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-2295186157-4208122820-3846616368-503 - Limited - Disabled)

Guest (S-1-5-21-2295186157-4208122820-3846616368-501 - Limited - Disabled)

SGK (S-1-5-21-2295186157-4208122820-3846616368-1001 - Administrator - Enabled) => C:\Users\SGK

WDAGUtilityAccount (S-1-5-21-2295186157-4208122820-3846616368-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-2295186157-4208122820-3846616368-1001\...\uTorrent) (Version: 3.5.5.45395 - BitTorrent Inc.)

Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 19.012.20040 - Adobe Systems Incorporated)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)

Adobe Audition CS6 (HKLM-x32\...\{30FD541D-3C9D-41C4-B240-A994EE4E0231}) (Version: 5.0 - Adobe Systems Incorporated)

Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.303 - Adobe)

Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)

Adobe Illustrator 2019 (HKLM-x32\...\ILST_23_0_3) (Version: 23.0.3 - Adobe Systems Incorporated)

Adobe Premiere Pro CC 2019 (HKLM-x32\...\PPRO_13_0_1) (Version: 13.0.1 - Adobe Systems Incorporated)

Adownloader version 18.1 (HKLM-x32\...\{41E8664D-2C33-4B67-9702-C0FAC4DF4763}_is1) (Version: 18.1 - Denobis)

Aimersoft Helper Compact 2.5.2 (HKLM-x32\...\{405147F7-FCC5-499B-A27E-EA6BD4A80435}_is1) (Version: 2.5.2 - Aimersoft)

Apowersoft Video Converter Studio V4.5.2 (HKLM-x32\...\{195E8D7F-292B-4B04-A6E7-E96CAF04C767}_is1) (Version: 4.5.2 - APOWERSOFT LIMITED)

AviSynth 2.6 (HKLM-x32\...\AviSynth) (Version: 2.6.0.6 - GPL Public release.)

Bandicam (HKLM-x32\...\Bandicam) (Version: - Bandisoft)

bl (HKLM-x32\...\{2A075BB4-E976-4278-BF3F-E5C6945D84C0}) (Version: 1.0.0 - Your Company Name) Hidden

BlueStacks App Player (HKLM\...\BlueStacks) (Version: 4.130.6.1102 - BlueStack Systems, Inc.)

Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 79.1.1.23 - Brave Software Inc)

dBpoweramp (HKLM-x32\...\dBpoweramp) (Version: Release 16.6 - Illustrate)

dBpoweramp AAC Encoder (HKLM-x32\...\dBpoweramp AAC Encoder) (Version: Release 2.1 - Illustrate)

dBpoweramp DirectShow Decoder (HKLM-x32\...\dBpoweramp DirectShow Decoder) (Version: Release 3 - Illustrate)

dBpoweramp m4a FDK (AAC) Encoder (HKLM-x32\...\dBpoweramp m4a FDK (AAC) Encoder) (Version: Release 4 (FDK v0.1.4 & v0.63) - Illustrate)

Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.4.2 - Seiko Epson Corporation)

Epson Event Manager (HKLM-x32\...\{15F081E3-93FF-4FF3-B447-42CC458C4F79}) (Version: 3.11.0021 - Seiko Epson Corporation)

EPSON L3150 Series Printer Uninstall (HKLM\...\EPSON L3150 Series) (Version: - Seiko Epson Corporation)

EPSON Manuals (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.56.1.0 - Seiko Epson Corporation)

Epson Scan 2 (HKLM-x32\...\Epson Scan 2) (Version: - Seiko Epson Corporation)

Epson Software Updater (HKLM-x32\...\{FD036A57-F81D-4865-AAF0-811558EA76AE}) (Version: 4.5.1 - Seiko Epson Corporation)

EPSON Universal Print Driver Printer Uninstall (HKLM\...\EPSON Universal Print Driver) (Version: - SEIKO EPSON Corporation)

EpsonNet Print (HKLM\...\{96ED1D58-440C-4345-8FEE-C4781366C67F}) (Version: 3.1.4.0 - SEIKO EPSON Corporation)

ExpressCache (HKLM\...\{F19137D8-2E93-4043-9634-4D44E7EFE889}) (Version: 1.3.118.0 - Condusiv Technologies)

Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.341 - Google LLC) Hidden

Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.99.0 - Google Inc.) Hidden

Hauppauge Capture (HKLM-x32\...\Hauppauge Capture) (Version: 1.1.35054 - Hauppauge Computer Works)

Hauppauge Device Central (HKLM-x32\...\Hauppauge Device Central) (Version: 1.4.34279 - Hauppauge Computer Works, Inc.)

Herramientas de corrección de Microsoft Office 2016: español (HKLM\...\{90160000-001F-0C0A-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden

HP Deskjet 3050 J610 series Basic Device Software (HKLM\...\{6457BD83-98CF-4267-93D7-F173FF3E7C25}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

HP Deskjet 3050 J610 series Product Improvement Study (HKLM\...\{5FB5B723-6B6E-45ED-BA73-F264D52AF916}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

Huffyuv AVI lossless video codec (Remove Only) (HKLM\...\HUFFYUV) (Version: - )

Intel® Chipset Device Software (HKLM-x32\...\{c6cff78a-cccb-49d5-be68-ae0ec5f0d48a}) (Version: 10.1.1.8 - Intel® Corporation) Hidden

Intel® Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1156 - Intel Corporation)

Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4531 - Intel Corporation)

Intel® Wireless Bluetooth® (HKLM-x32\...\{1A51AA9E-D4BC-4318-9419-B55EA4C95B3C}) (Version: 17.1.1525.1443 - Intel Corporation)

Intel® PROSet/Wireless Software (HKLM-x32\...\{50cf70be-570a-46b0-8a05-ea84ad3b4a36}) (Version: 21.20.0 - Intel Corporation)

Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: 6.33.2 - Tonek Inc.)

K-Lite Codec Pack 13.6.5 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 13.6.5 - KLCP)

Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version: - )

Lenovo Active Protection System (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.82.00.14 - Lenovo) Hidden

Lenovo Experience Improvement (HKLM\...\LenovoExperienceImprovement) (Version: 2.0.9.0 - Lenovo)

Lenovo On Screen Display (HKLM\...\OnScreenDisplay) (Version: 8.72.10 - Lenovo)

Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.67.12.24 - Lenovo) Hidden

Lenovo QuickOptimizer (HKLM\...\{8D2C871B-1B9F-45AC-9C43-2BB18089CDFA}) (Version: 1.0.016.00 - Lenovo)

Lenovo Settings - Power (HKLM-x32\...\{A6CFC34A-56EE-4AF5-8C49-995F59E6A160}) (Version: 8.03.14 - Lenovo Group Limited) Hidden

Lenovo Solution Center (HKLM\...\{DB529F41-7844-4FD9-B660-CE829E59A71E}) (Version: 3.1.002.00 - Lenovo)

Malwarebytes version 4.0.4.49 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.0.4.49 - Malwarebytes)

Metric Collection SDK (HKLM-x32\...\{DDAA788F-52E6-44EA-ADB8-92837B11BF26}) (Version: 1.1.0008.00 - Lenovo Group Limited) Hidden

Metric Collection SDK 35 (HKLM-x32\...\{C2B5B5B0-2545-4E94-B4BA-548D4BF0B196}) (Version: 1.2.0010.00 - Lenovo Group Limited) Hidden

Microsoft Office Professional Plus 2016 (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-2295186157-4208122820-3846616368-1001\...\OneDriveSetup.exe) (Version: 19.192.0926.0012 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)

Microsoft Visual C++ 2017 Redistributable (x64) - 14.15.26706 (HKLM-x32\...\{95ac1cfa-f4fb-4d1b-8912-7f9d5fbb140d}) (Version: 14.15.26706.0 - Microsoft Corporation)

Microsoft Visual C++ 2017 Redistributable (x86) - 14.16.27024 (HKLM-x32\...\{2ff11a2a-f7ac-4a6c-8cd4-c7bb974f3642}) (Version: 14.16.27024.1 - Microsoft Corporation)

MKVCleaver x64 (HKLM\...\{EE4FBCD4-BAB6-405A-8AFF-5FEF41B841B4}) (Version: 7.0.2 - Ilia Bakhmoutski)

MKVToolNix 13.0.0 (64bit) (HKLM-x32\...\MKVToolNix) (Version: 13.0.0 - Moritz Bunkus)

MPC-HC 1.7.13 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.13 - MPC-HC Team)

OpenOffice 4.1.5 (HKLM-x32\...\{ABCAD346-4F4B-49E9-9AA1-28EF8C26059D}) (Version: 4.15.9789 - Apache Software Foundation)

Outils de vérification linguistique 2016 de Microsoft Office - Français (HKLM\...\{90160000-001F-040C-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden

ph (HKLM-x32\...\{185F9795-9663-4F13-9EF9-307A282ADB5A}) (Version: 1.0.0 - Your Company Name) Hidden

REACHit (HKLM-x32\...\{4532E4C5-C84D-4040-A044-ECFCC5C6995B}) (Version: 2.1.0.11 - Lenovo)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.17.115 - Synaptics Incorporated)

ThinkPad Settings Dependency (HKLM\...\{08515684-CE49-47EF-B509-326A2E91BC5C}_is1) (Version: 3.0.0.12 - Lenovo) Hidden

Thinkpad USB Ethernet Adapter Driver (HKLM-x32\...\{D8102684-7BA1-4948-88B9-535F84E6E588}) (Version: 10.1.506.2015 - Lenovo)

Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden

UpdateAssistant (HKLM\...\{F49D6A65-1AB6-4728-9FDA-DB5BAB631CF6}) (Version: 1.23.0.0 - Microsoft Corporation) Hidden

Ut Video Codec Suite (HKLM\...\utvideo_is1) (Version: 18.2.1 - UMEZAWA Takeshi)

Videoder 1.0.9 (HKLM-x32\...\808fc302-3d01-59ce-8094-e0443a55877e) (Version: 1.0.9 - GlennioTech)

VideoReDo TVSuite Version 5.1.1.719 (HKLM-x32\...\VideoReDo5_is1) (Version: - DRD Systems, Inc.)

VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.8 - VideoLAN)

Vuze (HKLM\...\8461-7759-5462-8226) (Version: 5.7.6.0 - Azureus Software, Inc.)

Windows 10 Update Assistant (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22532 - Microsoft Corporation)

Windows Driver Package - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/28/2014 11.0.0000.00000) (HKLM\...\092555911492C6959D2596D612F52DCA71881CA2) (Version: 08/28/2014 11.0.0000.00000 - Google, Inc.)

Windows Driver Package - Lenovo 1.67.10.15 (06/22/2015 1.67.10.15) (HKLM\...\116858BC299A848A634E4FC927990093F81F608D) (Version: 06/22/2015 1.67.10.15 - Lenovo)

Windows Driver Package - Realtek Semiconduct Corp. (RTSPER) MTD (05/29/2015 10.0.10125.21277) (HKLM\...\4E55DAEF56C7E4B0BFE2CA2C3C55718B1DB7B3B9) (Version: 05/29/2015 10.0.10125.21277 - Realtek Semiconduct Corp.)

Windows Driver Package - Realtek Semiconductor Corp. HD Audio Driver (07/29/2015 6.0.1.7572) (HKLM\...\FB7FCBF0F17BC6F027BA3449CC8B02C4445C5565) (Version: 07/29/2015 6.0.1.7572 - Realtek Semiconductor Corp.)

Windows Driver Package - Synaptics (SmbDrv) System (07/24/2015 19.0.17.2) (HKLM\...\D46201570EE858381BA5A517C517317159E0F49A) (Version: 07/24/2015 19.0.17.2 - Synaptics)

Windows Driver Package - Synaptics (SynTP) Mouse (07/24/2015 19.0.17.2) (HKLM\...\BCACBD4A2C3424D2C4AB53EE766C3F38399CEB15) (Version: 07/24/2015 19.0.17.2 - Synaptics)

Windows Setup Remediations (x64) (KB4023057) (HKLM\...\{5534e02f-0f5d-40dd-ba92-bea38d22384d}.sdb) (Version: - )

WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

YAMB (HKLM-x32\...\YAMB) (Version: - )

百度网盘 (HKLM-x32\...\百度云管家) (Version: 5.6.0 - 百度在线网络技术（北京）有限公司)

Packages:

=========

Candy Crush Soda Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSodaSaga_1.150.300.0_x86__kgqvnymyfvs32 [2019-10-17] (king.com)

HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_105.1.618.0_x64__v10z8vjag6ke6 [2019-10-17] (HP Inc.)

IDM Integration Module -> C:\Program Files\WindowsApps\TonecInc.IDMIntegrationModule_6.30.6.0_neutral__e7b5mm5d3r6v2 [2019-08-31] (Tonec Inc.)

Mail and Calendar -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12026.20218.0_x64__8wekyb3d8bbwe [2019-10-09] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-03-23] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-03-23] (Microsoft Corporation) [MS Ad]

Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.10022.0_x64__8wekyb3d8bbwe [2019-10-09] (Microsoft Studios) [MS Ad]

MSN Money -> C:\Program Files\WindowsApps\Microsoft.BingFinance_4.31.11905.0_x64__8wekyb3d8bbwe [2019-10-09] (Microsoft Corporation) [MS Ad]

MSN Weather -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.32.12463.0_x64__8wekyb3d8bbwe [2019-10-09] (Microsoft Corporation) [MS Ad]

Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.94.574.0_x64__mcm4njqhnhss8 [2019-10-09] (Netflix, Inc.)

Reader Notification Client -> C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r [2019-04-29] (Adobe Systems Incorporated)

Twitter -> C:\Program Files\WindowsApps\9E2F88E3.Twitter_6.1.4.1000_neutral__wgeqdkkx372wm [2018-09-14] (Twitter Inc.)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2295186157-4208122820-3846616368-1001_Classes\CLSID\{679F137C-3162-45da-BE3C-2F9C3D093F64}\Shell\Open\Command -> C:\Users\SGK\AppData\Roaming\baidu\BaiduNetdisk\BaiduNetdisk.exe (Beijing Baidu Netcom Science and Technology Co.,Ltd -> )

CustomCLSID: HKU\S-1-5-21-2295186157-4208122820-3846616368-1001_Classes\CLSID\{679F137C-3162-45da-BE3C-2F9C3D093F64} -> [百度网盘] => C:\Users\SGK\AppData\Roaming\baidu\BaiduNetdisk\ [0000-00-00 00:00]

ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2019-05-02] (Tonec Inc. -> Tonec Inc.)

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers1: [YunShellExt] -> {6D85624F-305A-491d-8848-C1927AA0D790} => C:\Users\SGK\AppData\Roaming\baidu\BaiduNetdisk\YunShellExt64.dll [2019-08-23] (Beijing Baidu Netcom Science and Technology Co.,Ltd -> )

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-11-08] (Malwarebytes Corporation -> Malwarebytes)

ContextMenuHandlers4: [YunShellExt] -> {6D85624F-305A-491d-8848-C1927AA0D790} => C:\Users\SGK\AppData\Roaming\baidu\BaiduNetdisk\YunShellExt64.dll [2019-08-23] (Beijing Baidu Netcom Science and Technology Co.,Ltd -> )

ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File

ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2016-11-23] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)

ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-11-08] (Malwarebytes Corporation -> Malwarebytes)

ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [VIDC.FPS1] => C:\WINDOWS\system32\frapsv64.dll [71680 2013-02-26] (Beepa P/L) [File not signed]

HKLM\...\Drivers32: [VIDC.ULRA] => C:\WINDOWS\system32\utv_vcm.dll [130048 2017-07-16] () [File not signed]

HKLM\...\Drivers32: [VIDC.ULRG] => C:\WINDOWS\system32\utv_vcm.dll [130048 2017-07-16] () [File not signed]

HKLM\...\Drivers32: [VIDC.ULY0] => C:\WINDOWS\system32\utv_vcm.dll [130048 2017-07-16] () [File not signed]

HKLM\...\Drivers32: [VIDC.ULY2] => C:\WINDOWS\system32\utv_vcm.dll [130048 2017-07-16] () [File not signed]

HKLM\...\Drivers32: [VIDC.ULY4] => C:\WINDOWS\system32\utv_vcm.dll [130048 2017-07-16] () [File not signed]

HKLM\...\Drivers32: [VIDC.ULH0] => C:\WINDOWS\system32\utv_vcm.dll [130048 2017-07-16] () [File not signed]

HKLM\...\Drivers32: [VIDC.ULH2] => C:\WINDOWS\system32\utv_vcm.dll [130048 2017-07-16] () [File not signed]

HKLM\...\Drivers32: [VIDC.ULH4] => C:\WINDOWS\system32\utv_vcm.dll [130048 2017-07-16] () [File not signed]

HKLM\...\Drivers32: [VIDC.UQY2] => C:\WINDOWS\system32\utv_vcm.dll [130048 2017-07-16] () [File not signed]

HKLM\...\Drivers32: [VIDC.UQRG] => C:\WINDOWS\system32\utv_vcm.dll [130048 2017-07-16] () [File not signed]

HKLM\...\Drivers32: [VIDC.UQRA] => C:\WINDOWS\system32\utv_vcm.dll [130048 2017-07-16] () [File not signed]

HKLM\...\Drivers32: [VIDC.LAGS] => C:\WINDOWS\system32\lagarith.dll [148992 2011-12-07] ( ) [File not signed]

HKLM\...\Drivers32: [VIDC.HFYU] => C:\WINDOWS\system32\huffyuv.dll [33280 2000-08-23] (Disappearing Inc.) [File not signed]

HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\SysWOW64\frapsvid.dll [65536 2013-02-26] (Beepa P/L) [File not signed]