| intradeep | 05.09.2017 14:00 |
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-08-2017
Ran by intradeep (05-09-2017 14:57:43)
Running from G:\Dload
Windows 10 Pro Version 1703 (X64) (2017-05-09 22:07:45)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-362322673-1176133492-4255052427-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-362322673-1176133492-4255052427-503 - Limited - Disabled)
Guest (S-1-5-21-362322673-1176133492-4255052427-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-362322673-1176133492-4255052427-1005 - Limited - Enabled)
intradeep (S-1-5-21-362322673-1176133492-4255052427-1001 - Administrator - Enabled) => C:\Users\intradeep
SvenT430u (S-1-5-21-362322673-1176133492-4255052427-1003 - Administrator - Enabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
1Password 4.6.2.625 (HKLM-x32\...\1Password4_is1) (Version: 4.0 - AgileBits)
Acronis Drive Monitor (HKLM-x32\...\{706AE61D-40A4-4F50-8359-FE8F6F7FA461}) (Version: 1.0.187 - Acronis)
ActiveState ActivePython 2.7.8.10 (64-bit) (HKLM\...\{1C2C54C6-AC67-4BD7-825D-D16C10AE5ABF}) (Version: 2.7.10 - ActiveState Software Inc.)
Amazon Kindle (HKLM-x32\...\Amazon Kindle) (Version: - Amazon)
Amazon MP3-Downloader 1.0.9 (HKLM-x32\...\Amazon MP3-Downloader) (Version: - )
Amazon Send to Kindle (HKLM-x32\...\SendToKindle) (Version: 1.0.0.192 - Amazon)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
AMD Catalyst Install Manager (HKLM\...\{F37078EA-4B6A-1D6F-6FED-3EDF2117B42C}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Apple Application Support (32-Bit) (HKLM-x32\...\{E92BB800-BCC5-4C25-8102-AC2C3B7C7C1E}) (Version: 5.5 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{9C912B1E-06DD-43EF-BB2B-45CB2C88BAAE}) (Version: 5.5 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{0A596141-97D5-45FA-9281-98DFAF48D579}) (Version: 10.3.2.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{52D87F32-70E4-4348-8148-C0B9F35B1314}) (Version: 2.3.0.177 - Apple Inc.)
Audible Download Manager (HKLM-x32\...\AudibleDownloadManager) (Version: 6.6.0.19 - Audible, Inc.)
AudibleManager (HKLM-x32\...\AudibleManager) (Version: 164.37627008.37618272.0 - Audible, Inc.)
Audiograbber 1.83 SE (HKLM-x32\...\Audiograbber) (Version: 1.83 SE - Audiograbber Deutschland)
AusweisApp (HKLM-x32\...\{BA6CDB7A-F5D7-4341-99E1-1FF0AAEAF1D8}) (Version: 1.13.0 - OpenLimit SignCubes AG)
Backup4all Professional 4 (HKLM-x32\...\{218B007C-1526-4F16-9924-FE9AD47F0CF7}) (Version: 4.8.286 - Softland)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
BoxCryptor 1.5 (HKLM-x32\...\BoxCryptor) (Version: 1.5.406.139 - Secomba GmbH)
Brother MFL-Pro Suite MFC-J5320DW (HKLM-x32\...\{7FC49664-DAA4-4E7C-ADD0-614ABB43691B}) (Version: 1.0.5.0 - Brother Industries, Ltd.)
calibre (HKLM-x32\...\{5E53D5BC-E77B-4EB3-9F09-4F92C53664E9}) (Version: 2.39.0 - Kovid Goyal)
ChessBase Reader (HKLM-x32\...\{DE1044D3-B7A3-45F0-AE4C-9F68BDD7B596}) (Version: 12.42.0.0 - ChessBase)
Cisco Connect (HKLM-x32\...\Cisco Connect) (Version: 1.2.10237.2 - Cisco Consumer Products LLC)
ColorPic (HKLM-x32\...\ColorPic) (Version: 4.1 - Iconico)
Company of Heroes - FAKEMSI (HKLM-x32\...\{25724802-CC14-4B90-9F3B-3D6955EE27B1}) (Version: 2.0.0.0 - THQ Inc.) Hidden
Company of Heroes - FAKEMSI (HKLM-x32\...\{32C4A4EB-C97D-414E-99C5-38F8DFD31D5D}) (Version: 2.0.0.0 - THQ Inc.) Hidden
Company of Heroes - FAKEMSI (HKLM-x32\...\{50193078-F553-4EBA-AA77-64C9FAA12F98}) (Version: 2.0.0.0 - THQ Inc.) Hidden
Company of Heroes - FAKEMSI (HKLM-x32\...\{51D718D1-DA81-4FAD-919F-5C1CE3C33379}) (Version: 2.0.0.0 - THQ Inc.) Hidden
Company of Heroes - FAKEMSI (HKLM-x32\...\{66F78C51-D108-4F0C-A93C-1CBE74CE338F}) (Version: 2.0.0.0 - THQ Inc.) Hidden
Company of Heroes - FAKEMSI (HKLM-x32\...\{7F4B1592-222F-4E5F-A100-E5AFD61A0BB3}) (Version: 2.0.0.0 - THQ Inc.) Hidden
Company of Heroes - FAKEMSI (HKLM-x32\...\{80D03817-7943-4839-8E96-B9F924C5E67D}) (Version: 2.0.0.0 - THQ Inc.) Hidden
Company of Heroes - FAKEMSI (HKLM-x32\...\{97E5205F-EA4F-438F-B211-F1846419F1C1}) (Version: 2.0.0.0 - THQ Inc.) Hidden
Company of Heroes - FAKEMSI (HKLM-x32\...\{99A7722D-9ACB-43F3-A222-ABC7133F159E}) (Version: 2.0.0.0 - THQ Inc.) Hidden
Company of Heroes - FAKEMSI (HKLM-x32\...\{BA801B94-C28D-46EE-B806-E1E021A3D519}) (Version: 2.0.0.0 - THQ Inc.) Hidden
Company of Heroes - FAKEMSI (HKLM-x32\...\{D4D244D1-05E0-4D24-86A2-B2433C435671}) (Version: 2.0.0.0 - THQ Inc.) Hidden
Company of Heroes - FAKEMSI (HKLM-x32\...\{EAF636A9-F664-4703-A659-85A894DA264F}) (Version: 2.0.0.0 - THQ Inc.) Hidden
CorelDRAW Graphics Suite X5 - Capture (HKLM-x32\...\{EDB98D5A-A6FB-425C-BFB7-51A0924B762D}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Common (HKLM-x32\...\{CA3861BA-1D96-4D66-B577-318E1602C4F3}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Connect (HKLM-x32\...\{54B8F4A1-02B0-4D32-8F37-925526C0EEC6}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Custom Data (HKLM-x32\...\{24D9A3E0-D086-4B62-AF93-63CF6B05CB48}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Draw (HKLM-x32\...\{62978C1C-FE2E-4A4E-851D-3EB406C9EBC2}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - EN (HKLM-x32\...\{E34C6AA4-AE8E-4677-912A-92FC2E039DD9}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Filters (HKLM-x32\...\{3472C84E-2FD0-439F-B27F-C290C1E4CD8B}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - FontNav (HKLM-x32\...\{983F7145-CABF-4EDD-9F3D-E06B2F024BD3}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - PHOTO-PAINT (HKLM-x32\...\{A1B04B6B-25BB-48AD-8BD9-D31A86E89F3E}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Photozoom Plugin (HKLM-x32\...\{D642FF8D-438D-4545-A1D5-2EDB4BCAE3BA}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Redist (HKLM-x32\...\{59123CCF-FED2-46FF-9293-D1DC80042219}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Setup Files (HKLM-x32\...\{CE54DCE1-E00A-4D91-ACB9-A2D916C24051}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - VBA (HKLM-x32\...\{57400C1E-BC51-4ECE-AD2A-A6096204DDEC}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - VideoBrowser (HKLM-x32\...\{FE4B83DE-85CF-4DE5-90CE-A2735A0E1F21}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - VSTA (HKLM-x32\...\{260ED378-2B8C-4831-ADAE-D0712D119AC5}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - Windows Shell Extension 64 Bit (HKLM\...\{66C10F29-31F0-4A9B-B2CF-465F488AE086}) (Version: 15.0.487 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X5 - WT (HKLM-x32\...\{9244E956-5939-4B88-930C-0699D4AB2B95}) (Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - DE (x64) (HKLM\...\{CDFFDDCC-B74E-4AEE-A97F-12E31BAFF3FF}) (Version: 16.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 - Photozoom Plugin (x64) (HKLM\...\{2C72B5E4-AA34-4F1A-8C7E-468530F9F6A3}) (Version: 16.1 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X6 (x64) (HKLM\...\{CCE7423E-1D84-4CD3-9E32-220EC9358D97}) (Version: 16.1 - Corel Corporation) Hidden
Creative Audio-Systemsteuerung (HKLM-x32\...\AudioCS) (Version: 2.56 - Creative Technology Limited)
Creative Software AutoUpdate (HKLM-x32\...\Creative Software AutoUpdate) (Version: 1.40 - Creative Technology Limited)
Creative Sound Blaster Properties x64 Edition (HKLM-x32\...\Creative Sound Blaster Properties x64 Edition) (Version: - )
CutePDF Writer 3.0 (HKLM\...\CutePDF Writer Installation) (Version: 3.0 - CutePDF.com)
cyberJack Base Components (HKLM-x32\...\{FC338210-F594-11D3-BA24-00001C3AB4DF}) (Version: 6.10.0 - REINER SCT)
Dropbox (HKU\S-1-5-21-362322673-1176133492-4255052427-1001\...\Dropbox) (Version: 33.4.23 - Dropbox, Inc.)
EaseUS Partition Master 12.0 (HKLM-x32\...\EaseUS Partition Master_is1) (Version: - EaseUS)
EaseUS Todo Backup Free 10.0 (HKLM-x32\...\EaseUS Todo Backup_is1) (Version: 10.0 - CHENGDU YIWO Tech Development Co., Ltd)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 18.2.1.22580 - Landesfinanzdirektion Thüringen)
eReg (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Evaer Video Recorder for Skype 1.2.9.65 (HKLM-x32\...\Evaer Video Recorder for Skype) (Version: 1.2.9.65 - Evaer Technology)
Evoluent Mouse Manager (HKLM-x32\...\{933B0FA1-2ECF-4B3F-8153-BEBD8750FF72}) (Version: 5.5.0 - Evoluent)
f.lux (HKU\S-1-5-21-362322673-1176133492-4255052427-1001\...\Flux) (Version: - )
FreePDF (Remove only) (HKLM-x32\...\FreePDF_XP) (Version: - )
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\_{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation)
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation) Hidden
Google Chrome (HKU\S-1-5-21-362322673-1176133492-4255052427-1001\...\Google Chrome) (Version: 60.0.3112.113 - Google Inc.)
Google Drive (HKLM-x32\...\{A90339B3-2C3F-492E-B3A7-0BDFC691E526}) (Version: 2.34.6425.2548 - Google, Inc.)
Google Earth Pro (HKLM-x32\...\{ECF2E224-42F5-4E50-B58E-94CA70E85697}) (Version: 7.3.0.3832 - Google)
Google Photos Backup (HKU\S-1-5-21-362322673-1176133492-4255052427-1001\...\Google Photos Backup) (Version: 1.1.2.13 - Google, Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
GPL Ghostscript 8.71 (HKLM-x32\...\GPL Ghostscript 8.71) (Version: - )
GSview 4.9 (HKLM-x32\...\GSview 4.9) (Version: - )
Helium (HKLM-x32\...\{9A781940-AC41-4D5E-8E1E-76A04B916FB9}) (Version: 1.0.0 - ClockworkMod)
High-Definition Video Playback 10 (HKLM-x32\...\{237CCB62-8454-43E3-B158-3ACD0134852E}) (Version: 7.0.11400.29.0 - Nero AG) Hidden
Hotfix für Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (HKLM-x32\...\{8E87B944-4815-3C5E-947F-5035C9F64362}.KB947789) (Version: 1 - Microsoft Corporation)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Inkscape 0.48.2 (HKLM-x32\...\Inkscape) (Version: 0.48.2 - )
Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: - )
iTunes (HKLM\...\{F0C7385A-9D20-45F3-8101-05D383885180}) (Version: 12.6.1.25 - Apple Inc.)
Logitech Options (HKLM\...\LogiOptions) (Version: - Logitech)
Logitech SetPoint 6.67 (HKLM\...\sp6) (Version: 6.67.83 - Logitech)
Logitech Unifying-Software 2.50 (HKLM\...\Logitech Unifying) (Version: 2.50.25 - Logitech)
Logitech Webcam Software (HKLM\...\{987FE247-4E69-4A2E-A961-D14F901FDBF6}) (Version: 12.10.1113 - Logitech Inc.)
Logitech Webcam Software Driver Package (HKLM\...\lvdrivers_12.10) (Version: 12.10.1110 - Logitech Inc.)
Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-362322673-1176133492-4255052427-1001\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)
Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Sync Framework 2.0 Core Components (x64) ENU (HKLM\...\{8CCBEC22-D2DB-4DC9-A58A-E1A1F3A38C8A}) (Version: 2.0.1578.0 - Microsoft Corporation)
Microsoft Sync Framework 2.0 Provider Services (x64) ENU (HKLM\...\{03AC245F-4C64-425C-89CF-7783C1D3AB2C}) (Version: 2.0.1578.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU (HKLM-x32\...\{8E87B944-4815-3C5E-947F-5035C9F64362}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - DEU (HKLM-x32\...\{76DAEC83-AF7B-333C-8A53-83D7C7D39199}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek)
Mozilla Firefox 54.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 54.0.1 (x86 de)) (Version: 54.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 54.0.1.6388 - Mozilla)
Mozilla Thunderbird 52.2.1 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 52.2.1 (x86 de)) (Version: 52.2.1 - Mozilla)
Mozilla Thunderbird 52.3.0 (x86 de) (HKU\S-1-5-21-362322673-1176133492-4255052427-1001\...\Mozilla Thunderbird 52.3.0 (x86 de)) (Version: 52.3.0 - Mozilla)
MP4 to MP3 Converter 3 (HKLM-x32\...\MP4 to MP3 Converter 3) (Version: 3.1.23.0209b - MP4Converter)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero Burning ROM 10 (HKLM-x32\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.0.11100.10.100 - Nero AG)
Nero BurnRights 10 (HKLM-x32\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.0.11000.12.100 - Nero AG)
Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.0.10800.7.100 - Nero AG)
Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.0.11000.10.100 - Nero AG)
Nero InfoTool 10 (HKLM-x32\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.0.10800.8.100 - Nero AG)
Nero Multimedia Suite 10 (HKLM-x32\...\{277C1559-4CF7-44FF-8D07-98AA9C13AABD}) (Version: 10.0.13200 - Nero AG)
Nero Recode 10 (HKLM-x32\...\{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}) (Version: 4.6.10900.4.100 - Nero AG)
Nero RescueAgent 10 (HKLM-x32\...\{E337E787-CF61-4B7B-B84F-509202A54023}) (Version: 3.0.10900.9.100 - Nero AG)
Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.0.11200.12.100 - Nero AG)
Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0017 - Nero AG)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.3 - Notepad++ Team)
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
OJOsoft MP4 to MP3 Converter (HKLM-x32\...\OJOsoft MP4 to MP3 Converter1,5,3,0118) (Version: 1,5,3,0118 - OJOsoft Corporation)
Paragon Hard Disk Manager™ 12 Suite (HKLM-x32\...\{29258311-EA49-11DE-967C-005056C00008}) (Version: 90.00.0003 - Paragon Software)
Paragon Partition Manager™ 10.0 Server (HKLM\...\{ACCD5C00-F1E4-11DD-AA93-005056C00008}) (Version: 90.00.0003 - Paragon Software)
PDF Split And Merge Basic (HKLM\...\{C91B24F6-1629-11E2-B696-21676188709B}) (Version: 2.2.2 - Andrea Vacondio)
PhraseExpress v12.0.145 (HKLM-x32\...\PhraseExpress_is1) (Version: 12.0.145 - Bartels Media GmbH)
Python 2.7 pycrypto-2.6 (HKLM\...\pycrypto-py2.7) (Version: - )
Q-Dir (HKLM\...\Q-Dir) (Version: - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6662 - Realtek Semiconductor Corp.)
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version: - )
Revo Uninstaller 2.0.3 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.3 - VS Revo Group, Ltd.)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.55.0 - Samsung Electronics Co., Ltd.)
Sandboxie 4.08 (64-bit) (HKLM\...\Sandboxie) (Version: 4.08 - Sandboxie Holdings, LLC)
SHOUTcast Source (remove only) (HKLM-x32\...\SHOUTcast Source) (Version: - )
Sid Meier's Civilization VI (HKLM\...\Steam App 289070) (Version: - Firaxis)
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype™ 7.39 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.39.102 - Skype Technologies S.A.)
Smart View 2.0 (HKLM-x32\...\{FBAAAFAE-08A8-4C63-87EA-4AEA9DEE53E1}) (Version: 1.0.0.0 - Samsung)
Snip (HKLM-x32\...\{DE935EF7-6CE4-471E-9C73-0AE1A2E7D0D6}) (Version: 0.1.5119.0 - Microsoft) Hidden
Snip (HKU\S-1-5-21-362322673-1176133492-4255052427-1001\...\{525d439e-e22a-4221-8fd1-25b845fe0038}) (Version: 0.1.5119.0 - Microsoft Corporation)
Spotify (HKU\S-1-5-21-362322673-1176133492-4255052427-1001\...\Spotify) (Version: 1.0.62.508.g2c497f24 - Spotify AB)
StarMoney (HKLM-x32\...\{99D7711E-74BE-4920-8088-CB785D4C406F}) (Version: 5.0.0.226 - StarFinanz) Hidden
StarMoney (HKLM-x32\...\{BA8CA518-A9B4-485C-AEE0-22E3F0E0E5F6}) (Version: 5.0.0.226 - StarFinanz) Hidden
StarMoney (HKLM-x32\...\{BC9EBE6E-E72A-459B-98A5-79D6F589C286}) (Version: 4.0.2.34 - StarFinanz) Hidden
StarMoney (HKLM-x32\...\{CD4B3346-65D2-4F2A-95C0-81E2B616C0A3}) (Version: 4.0.2.34 - StarFinanz) Hidden
StarMoney 10 (HKLM-x32\...\{E55A5764-CB9F-4130-B742-33AAEF1B8759}) (Version: 10 - Star Finanz GmbH)
StarMoney 9.0 S-Edition (HKLM-x32\...\{C1F854BE-6A4B-438B-A35C-0C27107699E1}) (Version: 9.0 - Star Finanz GmbH)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SumatraPDF (HKLM-x32\...\SumatraPDF) (Version: 3.1.2 - Krzysztof Kowalczyk)
SyncToy 2.1 (x64) (HKLM\...\{88DAAF05-5A72-46D2-A7C5-C3759697E943}) (Version: 2.1.0 - Microsoft)
Telegram Desktop version 1.1.19 (HKU\S-1-5-21-362322673-1176133492-4255052427-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.1.19 - Telegram Messenger LLP)
ThunderFix 1.0.0.2 (HKLM-x32\...\{52291FC0-33D3-4A18-9587-5115225545D8}_is1) (Version: - )
Time Stopper (HKLM-x32\...\Time Stopper4.0) (Version: 4.0 - DilSoft)
TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
Universal Adb Driver (HKLM-x32\...\{D9C4202E-6D51-4B06-A8F1-22316E654BCA}) (Version: 1.0.0 - ClockworkMod)
VIP Access (HKLM-x32\...\{DA8CD0CD-E922-457F-8F8B-9F801A1D2062}) (Version: 2.2.3.3 - Symantec Corporation)
Virtual CD v10 (HKLM-x32\...\{10C51313-A308-4B40-90E3-B368D5882660}) (Version: 10.00.0 - H+H Software GmbH)
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.5.0.0 - Elaborate Bytes)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VLC media player 2.0.2 (HKLM\...\VLC media player) (Version: 2.0.2 - VideoLAN)
WD SmartWare (HKLM\...\{23B47A34-0517-48DA-8B76-015DA8546893}) (Version: 1.5.1 - Western Digital)
WhatsApp (HKU\S-1-5-21-362322673-1176133492-4255052427-1001\...\WhatsApp) (Version: 0.2.5863 - WhatsApp)
Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation)
Windows Driver Package - Evoluent (EvoMouseDriverFilterHidUsb) HIDClass (09/10/2013 4.0.1.0) (HKLM\...\0419316FF285F35FF53D35BE51866E8B48306CE5) (Version: 09/10/2013 4.0.1.0 - Evoluent)
Windows Driver Package - Evoluent Mouse (02/22/2013 4.0.1.0) (HKLM\...\8DB874487A94C0B8E6CF1A1B5FF0C060C088E5D9) (Version: 02/22/2013 4.0.1.0 - Evoluent)
WinRAR Archivierer (HKLM-x32\...\WinRAR archiver) (Version: - )
Xilisoft Video Converter Ultimate (HKLM-x32\...\Xilisoft Video Converter Ultimate) (Version: 7.6.0.20121127 - Xilisoft)
Yahoo! Detect (HKLM-x32\...\YTdetect) (Version: - )
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-362322673-1176133492-4255052427-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\intradeep\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-362322673-1176133492-4255052427-1001_Classes\CLSID\{144DF3B2-2402-47AE-9583-5A045929A8D4}\InprocServer32 -> C:\Users\intradeep\AppData\Local\Google\Update\1.3.33.5\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-362322673-1176133492-4255052427-1001_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 -> C:\Users\intradeep\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-362322673-1176133492-4255052427-1001_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\intradeep\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-362322673-1176133492-4255052427-1001_Classes\CLSID\{8C46158B-D978-483C-A312-16EE5013BE04}\InprocServer32 -> C:\Users\intradeep\AppData\Local\Google\Update\1.3.33.3\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-362322673-1176133492-4255052427-1001_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\intradeep\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-362322673-1176133492-4255052427-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\intradeep\AppData\Local\Google\Update\1.3.33.5\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-362322673-1176133492-4255052427-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-362322673-1176133492-4255052427-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-362322673-1176133492-4255052427-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-362322673-1176133492-4255052427-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-362322673-1176133492-4255052427-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-362322673-1176133492-4255052427-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-362322673-1176133492-4255052427-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-362322673-1176133492-4255052427-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-362322673-1176133492-4255052427-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-362322673-1176133492-4255052427-1001_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-362322673-1176133492-4255052427-1001_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-362322673-1176133492-4255052427-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-04] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-04] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-04] (Google)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [EldosIconOverlay-cbfs4] -> {4FD3E3D9-279A-4640-A60C-326A1F189D2F} => C:\Windows\system32\cbfsMntNtf4.dll [2012-12-24] (EldoS Corporation)
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => -> No File
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [EldosIconOverlay-cbfs4] -> {4FD3E3D9-279A-4640-A60C-326A1F189D2F} => C:\Windows\system32\cbfsMntNtf4.dll [2012-12-24] (EldoS Corporation)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => D:\Programme\Acrobat Elements\ContextMenuShim64.dll -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2014-05-12] ()
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-08-04] (Google)
ContextMenuHandlers1: [LavasoftShellExt] -> {DCE027F7-16A4-4BEE-9BE7-74F80EE3738F} => -> No File
ContextMenuHandlers1: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => C:\Program Files\LockHunter\LHShellExt64.dll [2012-01-27] (TODO: <Company name>)
ContextMenuHandlers1: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2016-12-08] (CHENGDU YIWO Tech Development Co.,Ltd)
ContextMenuHandlers1: [VirtualCloneDrive] -> {B7056B8E-4F99-44f8-8CBD-282390FE5428} => D:\Programme\VirtualCloneDrive\ElbyVCDShell.dll [2009-12-14] (Elaborate Bytes AG)
ContextMenuHandlers1: [WDBackupMenuHandler] -> {C752BC82-C19A-4827-9C15-0996BA85C180} => C:\Program Files\Western Digital\WD SmartWare\WDContextMenuHandler.dll [2011-08-01] (Western Digital)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2005-06-07] ()
ContextMenuHandlers2: [CWDDriveMenuHandler] -> {CCEFA845-DCDB-4A2F-8BED-DBE87CD198EC} => C:\Program Files\Western Digital\WD SmartWare\WDContextMenuHandler.dll [2011-08-01] (Western Digital)
ContextMenuHandlers2: [LavasoftShellExt] -> {DCE027F7-16A4-4BEE-9BE7-74F80EE3738F} => -> No File
ContextMenuHandlers2: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => C:\Program Files\LockHunter\LHShellExt64.dll [2012-01-27] (TODO: <Company name>)
ContextMenuHandlers2: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2016-12-08] (CHENGDU YIWO Tech Development Co.,Ltd)
ContextMenuHandlers2: [VirtualCloneDrive] -> {B7056B8E-4F99-44f8-8CBD-282390FE5428} => D:\Programme\VirtualCloneDrive\ElbyVCDShell.dll [2009-12-14] (Elaborate Bytes AG)
ContextMenuHandlers3: [STKContextMenu] -> {90DD7445-E924-4c6e-92AC-01F8C3A7E0C7} => C:\Program Files (x86)\Amazon\SendToKindle\stkContextMenu_192.dll [2012-10-24] (Amazon.com, Inc.)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-08-04] (Google)
ContextMenuHandlers4: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => C:\Program Files\LockHunter\LHShellExt64.dll [2012-01-27] (TODO: <Company name>)
ContextMenuHandlers4: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2016-12-08] (CHENGDU YIWO Tech Development Co.,Ltd)
ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2005-06-07] ()
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2015-11-04] (Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> No File
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => D:\Programme\Acrobat Elements\ContextMenuShim64.dll -> No File
ContextMenuHandlers6: [LavasoftShellExt] -> {DCE027F7-16A4-4BEE-9BE7-74F80EE3738F} => -> No File
ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2012-12-29] (VS Revo Group)
ContextMenuHandlers6: [WDBackupMenuHandler] -> {C752BC82-C19A-4827-9C15-0996BA85C180} => C:\Program Files\Western Digital\WD SmartWare\WDContextMenuHandler.dll [2011-08-01] (Western Digital)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2005-06-07] ()
ContextMenuHandlers1_S-1-5-21-362322673-1176133492-4255052427-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ContextMenuHandlers4_S-1-5-21-362322673-1176133492-4255052427-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
ContextMenuHandlers5_S-1-5-21-362322673-1176133492-4255052427-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\intradeep\AppData\Roaming\Dropbox\bin\DropboxExt64.18.0.dll [2017-08-22] (Dropbox, Inc.)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {05E0AEB3-3758-4269-A186-1884553BDE1A} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {0D979B5B-A364-435C-8AF2-450C5863C327} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {11EFF3FC-3891-4055-B8F0-3009D771C142} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {13E48EDE-4BA8-4BEB-A7F7-1E6B7F0A909C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-362322673-1176133492-4255052427-1001Core => C:\Users\intradeep\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {15F8DE80-A3F0-476D-B9FA-7500D14E5788} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {16FBB69C-A9FA-4685-8518-EC46CE955DA1} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1B3759C2-6921-49DF-BBD1-CB8BB9F3C109} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {1B749CDC-11B3-497A-8955-FA46081C0783} - System32\Tasks\{0148A849-DD44-420B-879D-524EE368CFEB} => "c:\program files (x86)\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/5.1.0.112/en/abandoninstall?page=tsChrome&installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:offered-installed;madedefault
Task: {1D4806D2-2B9F-44E8-AE31-71CEF55322D3} - System32\Tasks\{DE1DAE52-5A73-4DC7-BEE8-BDBFE9DCF9CA} => C:\Windows\system32\pcalua.exe -a G:\Dload\Dloads\Programme\pantsoff.exe -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {1F4CA21E-6465-4E28-B155-D258099BFACA} - System32\Tasks\TechSmith Updater => C:\Program Files (x86)\Common Files\TechSmith Shared\Updater\TSCUpdClt.exe
Task: {1FE962A4-4CB0-4A6A-A473-7066D52A317D} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-362322673-1176133492-4255052427-1001UA => C:\Users\intradeep\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-07] (Dropbox, Inc.)
Task: {3008D646-537A-4EF6-91D7-3F5406DAB25C} - System32\Tasks\b4a_Laptop Transfer => C:\Program Files (x86)\Softland\Backup4all Professional 4\b4aSchedStarter.exe [2012-10-02] (Softland)
Task: {313644C9-AFDA-415F-B381-813B41FD1DC1} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {329F7EEA-257B-4DDB-A2C0-6CB002DDEE33} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {32AE4897-576D-4EA5-83F3-031CA76BF5BB} - System32\Tasks\b4a_Backup Dokumente => C:\Program Files (x86)\Softland\Backup4all Professional 4\b4aSchedStarter.exe [2012-10-02] (Softland)
Task: {3ED76A28-A206-4405-99F2-A0C136C5C808} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {3F927A67-59B7-4B07-A8E7-A9FFE5D29EAF} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {4A2215BA-0D53-4BF5-9DFB-12FAA1069D12} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {513F252E-94CA-4D79-AF4C-5C677884F90A} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-362322673-1176133492-4255052427-1001Core => C:\Users\intradeep\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-07] (Dropbox, Inc.)
Task: {53C4EBC2-96E0-4DB6-9249-623395BD3FEB} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {5D05D86B-0E34-49B1-8B1C-6C3F248BF3E8} - System32\Tasks\{072CA29B-18AB-4D2B-8B83-6A4B32940A3A} => "c:\program files (x86)\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/5.10.0.116/en/abandoninstall?page=tsProgressBar
Task: {5EDF9EA2-D1BC-463F-8919-7432B689E4C6} - System32\Tasks\{BCB5C54E-B619-4C67-B6A8-C75C36CBB3BD} => I:\Pony-Toolkit-II\OFFICE 2010 TOOLKIT.EXE
Task: {5FA2F3DE-1DF0-4504-92A4-A6FA0BFF6368} - System32\Tasks\{18EAD2FF-8E9A-4D17-9202-FCA539D83C1A} => C:\Windows\system32\pcalua.exe -a G:\Dload\Dloads\Programme\chrome_installer150b874121.exe -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {6AEE044C-F1E8-4845-BE86-6E5A73715F4B} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6DFAAED0-D34D-43F8-8D5E-DC1240E28BEB} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {71703486-4F06-405D-B493-D4C4CE1998BF} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
Task: {768A28EF-266E-4E6B-B6D9-8A653D5523E8} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {7D83E895-7845-4D80-BC41-C30EE313FD8F} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {7D98C485-D94B-49F5-8A95-543C07BBE210} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
Task: {7E75BE3A-70AC-448F-892B-D9A050E2FC8C} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {83E8409F-1B7E-43F8-8F3A-320B4EFA60AA} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {83E8C513-4FD4-4F21-B860-8029BC764D45} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {8486D72F-1841-4C86-8509-01B6A550D7AA} - System32\Tasks\Ad-Aware Antivirus Scheduled Scan => C:\PROGRA~2\AD-AWA~1\AdAwareLauncher.exe
Task: {87E59226-CA63-4245-8E3D-807641250A65} - System32\Tasks\{758A65DC-A3C9-43BB-870F-95D0AE266263} => C:\Windows\system32\pcalua.exe -a G:\Dload\Dloads\Programme\Adaware_Installer.exe -d G:\Dload\Dloads\Programme
Task: {89AA8D60-3945-41E2-9F11-4BFA210B7567} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {8A91E006-449C-4081-B3FA-DEBC8379AECB} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {90F3C675-217A-4A4E-9E25-2BE9821FA92C} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {93EB41EB-E212-4D67-BCE8-7549EF927748} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A72379EE-16CD-4EE1-B12B-ECECC0C0C6B2} - \BaronReplays -> No File <==== ATTENTION
Task: {A7846854-98B8-4C44-A446-AAA353992AA7} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {A8178290-9BEB-4456-BB90-231903A08106} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C33F5321-F883-4476-AF25-B9B413EC4D54} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {C70D8DF5-EC58-4C88-A04A-EB6680B851C2} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {D0604140-8BE1-4119-A5EC-6C03C67E2D22} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D19F787F-D5C1-4A01-B9FA-47A355428AE6} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {D2E272E4-1EF4-4E4C-8724-583C230AEE4F} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> No File <==== ATTENTION
Task: {E0574B9C-445B-4BA0-B103-FEC140FD1790} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
Task: {E262DB74-5B62-46B0-89C9-E56EB71F3C7C} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {EC0A950F-C040-419F-80BE-B61E64C5FFAE} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {ED5ABF81-F40D-4D63-A24C-7B22BCFE8B7B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-362322673-1176133492-4255052427-1001UA => C:\Users\intradeep\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {F1802045-F599-4388-AFB6-FC8B55B6C912} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {FB2FD5A2-B62C-4BB4-9AE9-3CA6A6A05FDB} - System32\Tasks\{68BFB9A0-8912-41DB-B338-8FC13D2D731F} => C:\Windows\system32\pcalua.exe -a G:\Dload\Dloads\Programme\Adaware_Installer_10.5.1.4369.exe -d G:\Dload\Dloads\Programme
Task: {FE226269-3762-4BEF-ABD1-E8D5913A94BA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\b4a_Backup_Ebooks_Uni_Musik_Bilder.job => C:\Program Files (x86)\Softland\Backup4all Professional 4\b4aSchedStarter.exe
Task: C:\WINDOWS\Tasks\b4a_Laptop Transfer.job => C:\Program Files (x86)\Softland\Backup4all Professional 4\b4aSchedStarter.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-362322673-1176133492-4255052427-1001Core.job => C:\Users\intradeep\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-362322673-1176133492-4255052427-1001UA.job => C:\Users\intradeep\AppData\Local\Dropbox\Update\DropboxUpdate.exe
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
Shortcut: C:\Users\intradeep\Desktop\DeDRM_Drop_Target.bat - Shortcut.lnk -> C:\Users\intradeep\Documents\DeDRM_App\DeDRM_Drop_Target.bat ()
ShortcutWithArgument: C:\Users\intradeep\Desktop\Signal Private Messenger.lnk -> C:\Users\intradeep\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=bikioccmkafdpakkkcpdbppfkghcmihk
ShortcutWithArgument: C:\Users\intradeep\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Signal Private Messenger.lnk -> C:\Users\intradeep\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=bikioccmkafdpakkkcpdbppfkghcmihk
==================== Loaded Modules (Whitelisted) ==============
2013-02-19 21:54 - 2012-10-04 19:49 - 000087152 _____ () C:\WINDOWS\System32\cpwmon64.dll
2011-11-08 18:02 - 2010-06-17 22:56 - 000087040 _____ () C:\WINDOWS\System32\redmonnt.dll
2010-07-12 14:35 - 2008-06-04 15:53 - 000027648 _____ () C:\WINDOWS\System32\spd__l.dll
2014-09-07 13:57 - 2011-04-11 07:26 - 000034304 _____ () C:\WINDOWS\System32\spe__l.dll
2006-12-04 01:26 - 2006-12-04 01:26 - 000022016 _____ () C:\WINDOWS\System32\sugs2l6.dll
2017-05-09 00:44 - 2017-05-09 00:44 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2017-05-09 00:44 - 2017-05-09 00:44 - 001354040 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-05-27 12:15 - 2005-04-22 06:36 - 000143360 _____ () C:\WINDOWS\system32\BrSNMP64.dll
2017-05-05 11:13 - 2016-12-06 02:46 - 000259264 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
2017-03-18 22:58 - 2017-03-18 22:58 - 000138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-03-18 22:59 - 2017-03-19 04:30 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-08-29 19:45 - 2017-08-23 10:48 - 002692952 _____ () C:\Users\intradeep\AppData\Local\Google\Chrome\Application\60.0.3112.113\swiftshader\libglesv2.dll
2017-08-29 19:45 - 2017-08-23 10:48 - 000137048 _____ () C:\Users\intradeep\AppData\Local\Google\Chrome\Application\60.0.3112.113\swiftshader\libegl.dll
2017-08-22 20:23 - 2017-08-22 20:23 - 000074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-08-22 20:23 - 2017-08-22 20:23 - 000203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-05-05 11:13 - 2016-03-01 14:00 - 000080936 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CodeLog.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000019648 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CompressFile.dll
2017-05-05 11:13 - 2016-12-06 02:44 - 000090816 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBGetRemoteNetInfo.dll
2017-05-05 11:13 - 2016-03-07 18:08 - 001291264 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\libxml2.dll
2017-05-05 11:13 - 2004-10-05 03:08 - 000055808 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\zlib1.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000024768 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CmcTbProxy.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000188608 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCPipeCenter.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000182976 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCAdapt.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000163520 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCAdapt_RTTO.dll
2017-05-05 11:13 - 2016-12-06 02:44 - 000056000 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBInfo.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000018112 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCNetTokenProxy.dll
2017-05-05 11:13 - 2017-03-01 17:44 - 000123584 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ActivationOnline.dll
2017-05-05 11:13 - 2016-12-06 02:44 - 000085696 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\logsys.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000032960 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\DiskSearchImg.dll
2017-05-05 11:13 - 2016-12-06 02:44 - 000070336 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\MountImg.dll
2017-05-05 11:13 - 2016-12-06 02:44 - 000160448 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ImgFile.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000296640 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\DsImgFile.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000078528 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\FatLib.dll
2017-05-05 11:13 - 2016-12-09 09:09 - 000305856 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\NTFSUtil.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000026304 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CallbackOperator.dll
2017-05-05 11:13 - 2016-12-06 02:44 - 000210112 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\NTFSLib.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000074432 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CheckImg.dll
2017-05-05 11:13 - 2016-12-06 02:44 - 000142016 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\vhdvmdk.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000040128 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\BootDriver.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000737984 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ExImage.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000195776 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EmailBackupSize.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000414400 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\AndroidImage.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000162496 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EnumDisk.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000029376 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\DeviceAdapter.dll
2017-05-05 11:13 - 2016-12-06 02:44 - 000114368 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\FileStorage.dll
2017-05-05 11:13 - 2016-12-06 02:44 - 000026816 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\GetDriverInfo.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000022720 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CorrectMbr.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000034496 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EnumTapeDevice.dll
2017-05-05 11:13 - 2016-12-06 02:44 - 000054464 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbTapeBrowse.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000026816 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\AccountManager.dll
2017-05-05 11:13 - 2016-12-06 02:44 - 000066240 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\RegLib.dll
2017-05-05 11:13 - 2016-12-06 02:44 - 000074944 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\NasOperator.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000221376 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\EmailBrowser.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000079040 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\CloudOperator.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000020672 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\ActiveOnline.dll
2017-05-05 11:13 - 2016-12-06 02:44 - 000138432 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\VMConfig.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000021696 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\AndroidDeviceManager.dll
2017-05-05 11:13 - 2016-12-06 02:44 - 000045248 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbDataSwap.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000367808 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\DeviceManager.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000141504 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\Device.dll
2017-05-05 11:13 - 2016-12-06 02:44 - 000149184 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\Partition.dll
2017-05-05 11:13 - 2016-12-06 02:44 - 000052416 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\FileSystemAnalyser.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000064192 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\FATFileSystemAnalyser.dll
2017-05-05 11:13 - 2016-12-06 02:43 - 000091840 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\Common.dll
2017-05-05 11:13 - 2016-12-06 02:44 - 000058560 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\NTFSFileSystemAnalyser.dll
2016-12-20 19:45 - 2016-01-28 16:33 - 001058624 _____ () D:\Programme\SM 10\ouservice\libxml2.dll
2016-12-20 19:45 - 2011-01-13 12:44 - 000232800 _____ () D:\Programme\SM 10\ouservice\PATCHW32.dll
2014-07-30 22:19 - 2011-01-13 12:44 - 000232800 _____ () D:\Programme\StarMoney9\ouservice\PATCHW32.dll
2017-05-05 11:13 - 2016-12-06 02:44 - 000210112 _____ () C:\Program Files (x86)\EaseUS\Todo Backup\bin\SmartBackup.dll
2016-04-09 00:35 - 2016-04-09 00:35 - 003481600 _____ () C:\Users\intradeep\AppData\Local\Programs\Google\Google Photos Backup\gpuploader_i18n.dll
2017-07-16 21:30 - 2017-08-04 23:19 - 000678176 _____ () D:\Games\SDL2.dll
2017-07-16 21:30 - 2017-08-28 22:05 - 002505504 _____ () D:\Games\video.dll
2017-07-16 21:30 - 2016-09-01 03:02 - 004969248 _____ () D:\Games\v8.dll
2017-07-16 21:30 - 2016-01-27 09:49 - 000491008 _____ () D:\Games\libavformat-56.dll
2017-07-16 21:30 - 2016-01-27 09:49 - 000332800 _____ () D:\Games\libavresample-2.dll
2017-07-16 21:30 - 2016-01-27 09:49 - 002549760 _____ () D:\Games\libavcodec-56.dll
2017-07-16 21:30 - 2016-01-27 09:49 - 000442880 _____ () D:\Games\libavutil-54.dll
2017-07-16 21:30 - 2016-01-27 09:49 - 000485888 _____ () D:\Games\libswscale-3.dll
2017-07-16 21:30 - 2016-09-01 03:02 - 001195296 _____ () D:\Games\icuuc.dll
2017-07-16 21:30 - 2016-09-01 03:02 - 001563936 _____ () D:\Games\icui18n.dll
2017-07-16 21:30 - 2017-08-28 22:05 - 000885024 _____ () D:\Games\bin\chromehtml.DLL
2017-07-16 21:30 - 2016-07-05 00:17 - 000266560 _____ () D:\Games\openvr_api.dll
2016-10-16 14:45 - 2017-05-30 10:14 - 000503832 _____ () D:\Programme\PhraseExpress\pexlang.dll
2017-09-05 14:22 - 2017-09-05 14:22 - 000098816 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\win32api.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000110080 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\pywintypes27.dll
2017-09-05 14:22 - 2017-09-05 14:22 - 000364544 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\pythoncom27.dll
2017-09-05 14:22 - 2017-09-05 14:22 - 000320512 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\win32com.shell.shell.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000914432 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\_hashlib.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 001176576 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\wx._core_.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000806400 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\wx._gdi_.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000816128 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\wx._windows_.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 001067008 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\wx._controls_.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000733184 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\wx._misc_.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000682496 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\pysqlite2._sqlite.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000088064 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\_ctypes.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000686080 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\unicodedata.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000119808 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\win32file.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000108544 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\win32security.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000007168 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\hashobjs_ext.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000017920 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\thumbnails_ext.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000088064 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\usb_ext.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000012800 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\common.time34.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000018432 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\win32event.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000167936 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\win32gui.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000046080 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\_socket.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 001303552 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\_ssl.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000128512 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\_elementtree.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000127488 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\pyexpat.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000038912 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\win32inet.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000036864 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\_psutil_windows.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000524248 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\windows._lib_cacheinvalidation.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000011264 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\win32crypt.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000123392 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\wx._wizard.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000077312 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\wx._html2.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000027648 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\_multiprocessing.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000020480 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\_yappi.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000035840 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\win32process.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000078848 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\wx._animate.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000024064 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\win32pipe.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000010240 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\select.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000025600 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\win32pdh.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000017408 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\win32profile.pyd
2017-09-05 14:22 - 2017-09-05 14:22 - 000022528 ____R () C:\Users\intradeep\AppData\Local\Temp\_MEI142282\win32ts.pyd
2017-07-16 21:31 - 2017-05-17 03:54 - 000678176 _____ () D:\Games\bin\cef\cef.win7\SDL2.dll
2017-07-16 21:31 - 2017-07-18 00:50 - 073115424 _____ () D:\Games\bin\cef\cef.win7\libcef.dll
2017-07-16 21:30 - 2015-09-25 01:52 - 000119208 _____ () D:\Games\winh264.dll
2017-04-27 18:08 - 2017-09-05 13:51 - 071820400 _____ () C:\Users\intradeep\AppData\Roaming\Spotify\libcef.dll
2017-04-27 18:08 - 2017-09-05 13:51 - 002969200 _____ () C:\Users\intradeep\AppData\Roaming\Spotify\libglesv2.dll
2017-04-27 18:08 - 2017-09-05 13:51 - 000086640 _____ () C:\Users\intradeep\AppData\Roaming\Spotify\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\ProgramData\Temp:21654C57 [129]
AlternateDataStreams: C:\ProgramData\Templates:gs5sys [2048]
AlternateDataStreams: C:\Users\intradeep\Cookies:gs5sys [1792]
AlternateDataStreams: C:\Users\intradeep\Desktop\desktop.ini:gs5sys [3074]
AlternateDataStreams: C:\Users\intradeep\AppData\Local\History:gs5sys [1792]
AlternateDataStreams: C:\Users\intradeep\Documents\desktop.ini:gs5sys [3074]
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2017-09-05 09:31 - 000000027 _____ C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-362322673-1176133492-4255052427-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\intradeep\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\hintergrundbild der windows-fotoanzeige.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall is disabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
MSCONFIG\Services: AcrSch2Svc => 2
MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: Apple Mobile Device => 2
MSCONFIG\Services: bthserv => 3
MSCONFIG\Services: CGVPNCliService => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: Hamachi2Svc => 2
MSCONFIG\Services: Skype C2C Service => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: ss_conn_service => 2
MSCONFIG\startupfolder: C:^Users^intradeep^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Mediencenter.lnk => C:\Windows\pss\Mediencenter.lnk.Startup
MSCONFIG\startupreg: Acronis Scheduler2 Service => "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe"
MSCONFIG\startupreg: adm_tray.exe => C:\Program Files (x86)\Acronis\DriveMonitor\adm_tray.exe
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: avichannel => "C:\Program Files (x86)\Evaer\videochannel.exe"
MSCONFIG\startupreg: BCSSync => "D:\Programme\Visio32\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: BoxCryptor => C:\Program Files (x86)\BoxCryptor\BoxCryptor.exe
MSCONFIG\startupreg: CyberGhost => "C:\Program Files\CyberGhost 5\CyberGhost.exe" /autostart /min
MSCONFIG\startupreg: Google Update => "C:\Users\intradeep\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: KiesAirMessage => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
MSCONFIG\startupreg: KiesPreload => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: OfficeSyncProcess => "D:\Programme\Visio32\Office14\MSOSYNC.EXE"
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\intradeep\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: TomTomHOME.exe => "D:\Programme\\TomTom HOME 2\TomTomHOMERunner.exe"
HKLM\...\StartupApproved\Run: => "RtHDVCpl"
HKLM\...\StartupApproved\Run: => "LogiOptions"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run: => "EvtMgr6"
HKLM\...\StartupApproved\Run32: => "BrHelp"
HKLM\...\StartupApproved\Run32: => "StartCCC"
HKLM\...\StartupApproved\Run32: => "ControlCenter4"
HKLM\...\StartupApproved\Run32: => "Raptr"
HKLM\...\StartupApproved\Run32: => "BrStsMon00"
HKLM\...\StartupApproved\Run32: => "SPM15 Chrome Autofill Relay"
HKLM\...\StartupApproved\Run32: => "VirtualCloneDrive"
HKLM\...\StartupApproved\Run32: => "VC10Player"
HKU\S-1-5-21-362322673-1176133492-4255052427-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-362322673-1176133492-4255052427-1001\...\StartupApproved\Run: => "KiesPreload"
HKU\S-1-5-21-362322673-1176133492-4255052427-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-362322673-1176133492-4255052427-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-362322673-1176133492-4255052427-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-362322673-1176133492-4255052427-1001\...\StartupApproved\Run: => "Spotify Web Helper"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{19E666A3-A929-4C98-8863-F32B55B0CAFE}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
FirewallRules: [{8EF96972-C954-4E62-9B8F-BF2ADA317DC6}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe
FirewallRules: [{F02648F3-692A-4B23-B5AC-82EDD00F5359}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe
FirewallRules: [{44A98CC4-6924-4924-BF53-F9F366367342}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe
FirewallRules: [{A4186EC6-DFB2-469F-9099-ACAE655582E1}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe
FirewallRules: [{9FEBF403-6914-4F4E-BC8A-E2B816F470B8}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe
FirewallRules: [{C71CA1FA-E78A-4E56-A153-B454FC5F2B04}] => (Allow) C:\Users\intradeep\AppData\Local\Google\Chrome\Application\chrome.exe
FirewallRules: [{761C1249-BD53-45D8-931F-A5869C1CA3D3}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{C03E26C1-9B19-47D8-BF00-AD39E9B2A449}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{E2D20967-123F-4105-9E0D-38BBD523599C}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{E600091D-A921-42EE-8A7E-F23FAD159E2F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{E42CDE69-2A7B-4831-BA2F-6D788CFEF3FC}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{9E4230D0-ED0D-4420-85E8-B8F84DD7C38C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [UDP Query User{27D0F70D-33CC-4AB8-8F06-CFCFA6345D6D}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{3C54F9AF-E976-4B62-9728-40B53CFC24AB}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{469F7EE0-DF8F-4901-BD75-7051C489126C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{FC8C1979-72E9-48E2-9857-4BE5A2546871}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{194D79DB-BA28-42A9-89CC-D9C1C93617F0}] => (Allow) D:\Games\League of Legends\Game\League of Legends.exe
FirewallRules: [{66398414-0861-4ED3-83AC-CBC6DA902826}] => (Allow) D:\Games\League of Legends\Game\League of Legends.exe
FirewallRules: [{9F95E4F0-3A47-4A37-B22B-0564A6780C2A}] => (Allow) D:\Games\League of Legends\Air\LolClient.exe
FirewallRules: [{576EA3A2-3504-4AAE-AD3B-883AFBF3C498}] => (Allow) D:\Games\League of Legends\Air\LolClient.exe
FirewallRules: [{CFE25F69-9EE5-4A38-B490-64D491EB1761}] => (Allow) LPort=8394
FirewallRules: [{99B69FB1-31C0-491F-98C3-718A12599891}] => (Allow) LPort=8394
FirewallRules: [{C4A44E24-68E1-4CBF-A81E-84B78359E970}] => (Allow) C:\Users\intradeep\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{F213C550-5A80-4483-AC8F-50AA73BF0397}] => (Allow) C:\Users\intradeep\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [UDP Query User{D1D0F6DE-75FB-4558-B34E-727B3C867EE0}C:\users\intradeep\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\intradeep\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{CDD3E3E7-1F97-4839-8710-93E3B7E615DA}C:\users\intradeep\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\intradeep\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{27ABB946-6FF7-4D19-8890-061E62AE9DF3}] => (Allow) C:\Users\intradeep\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{7A1941B5-F0FB-4A64-A2B5-B03C98915224}] => (Allow) C:\Users\intradeep\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{E1299852-DEDE-47B1-8290-D1152FCD72FE}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{5BC52B74-FE3D-442E-9D4F-5ADB37FFDC60}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{24EA79A3-3073-4AD2-90B7-468DD4F68711}] => (Allow) D:\Games\Battle.net\Battle.net.exe
FirewallRules: [{655F9BA2-22CD-411A-8ED2-19EE2743F13F}] => (Allow) D:\Games\Battle.net\Battle.net.exe
FirewallRules: [{598802A0-F76F-419C-AF2A-BAC5DBB4E1E6}] => (Allow) D:\Games\League of Legends\Game\League of Legends.exe
FirewallRules: [{D3FBA722-6B28-406A-B49D-80375BA912B2}] => (Allow) D:\Games\League of Legends\Game\League of Legends.exe
FirewallRules: [{69408D17-497A-4B60-9A1F-EFF813E8B082}] => (Allow) D:\Games\League of Legends\Air\LolClient.exe
FirewallRules: [{C303A9FE-3625-4797-B27C-BDDB867B6FA2}] => (Allow) D:\Games\League of Legends\Air\LolClient.exe
FirewallRules: [{ADCE75DC-621D-4639-93D3-A7F5C8ECE9A5}] => (Allow) C:\Users\intradeep\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{AEDBA4FB-9F26-431D-99BF-1F3A2FE4A32D}] => (Allow) C:\Users\intradeep\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [UDP Query User{DDCD943D-19D0-424B-A612-38F0E390B38E}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe
FirewallRules: [TCP Query User{0E52EF47-B951-4849-BB02-7F8A6EC3BD70}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe
FirewallRules: [{093C6949-0A27-47EF-AA9F-BAE3F708BE84}] => (Allow) C:\Program Files (x86)\Softland\Backup4all Professional 4\b4aCmd.exe
FirewallRules: [{DC865182-4A8B-4048-9B4E-3DB531CEC5F2}] => (Allow) C:\Program Files (x86)\Softland\Backup4all Professional 4\Backup4all.exe
FirewallRules: [UDP Query User{FBF5B757-8D42-478F-85B9-E716B7703687}C:\program files (x86)\imagej\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\imagej\jre\bin\javaw.exe
FirewallRules: [TCP Query User{C9C4F878-2354-4BDC-8FE5-3D2BE37A7F15}C:\program files (x86)\imagej\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\imagej\jre\bin\javaw.exe
FirewallRules: [UDP Query User{13602DAB-EE2D-4F8C-91BB-279529D162D1}C:\program files (x86)\mozilla thunderbird\thunderbird.exe] => (Allow) C:\program files (x86)\mozilla thunderbird\thunderbird.exe
FirewallRules: [TCP Query User{153A7180-5BFE-4726-B114-28B027D7BA4B}C:\program files (x86)\mozilla thunderbird\thunderbird.exe] => (Allow) C:\program files (x86)\mozilla thunderbird\thunderbird.exe
FirewallRules: [{B4000377-1B17-4C31-9361-2BDD94F62697}] => (Allow) C:\Program Files (x86)\iPhone PC Suite\iPhone\iPhone PC Suite.exe
FirewallRules: [UDP Query User{6F003BBE-E535-4787-ABD3-13209A2794A3}C:\program files (x86)\iphone pc suite\iphone\iphone pc suite.exe] => (Allow) C:\program files (x86)\iphone pc suite\iphone\iphone pc suite.exe
FirewallRules: [TCP Query User{01022AB8-2286-4C83-B18C-68B2B22FBE6C}C:\program files (x86)\iphone pc suite\iphone\iphone pc suite.exe] => (Allow) C:\program files (x86)\iphone pc suite\iphone\iphone pc suite.exe
FirewallRules: [{2824036F-8EC2-494D-8CF2-EF041F87EBF4}] => (Allow) C:\Program Files (x86)\iPhone PC Suite\iPhone\iPhone PC Suite.exe
FirewallRules: [{28A20DB2-E677-4251-B305-F7CC808A04DA}] => (Allow) C:\Program Files (x86)\iPhone PC Suite\iPhone\iPhone PC Suite.exe
FirewallRules: [{C233E245-A6F6-4562-A327-DAB1F682FF84}] => (Allow) C:\Users\intradeep\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{77D9706F-14FE-4A1F-B98C-B5CC3CC133EB}] => (Allow) C:\Users\intradeep\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [UDP Query User{144C3041-BC61-4467-966D-346B5403420D}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [TCP Query User{43AC2508-9F7A-4D89-A398-19F2603B4871}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{D7DA4FE8-59D1-499F-A97C-FF11CCB454D9}D:\images\me3\binaries\win32\masseffect3.exe] => (Block) D:\images\me3\binaries\win32\masseffect3.exe
FirewallRules: [TCP Query User{3897CCD6-C876-49BF-A557-DE4787B9E0B4}D:\images\me3\binaries\win32\masseffect3.exe] => (Block) D:\images\me3\binaries\win32\masseffect3.exe
FirewallRules: [UDP Query User{961E81DD-6AC0-4B05-A937-CA3155301643}C:\program files (x86)\icq7.6\icq.exe] => (Allow) C:\program files (x86)\icq7.6\icq.exe
FirewallRules: [TCP Query User{117A922C-2B82-492C-AF62-E82E6B25529B}C:\program files (x86)\icq7.6\icq.exe] => (Allow) C:\program files (x86)\icq7.6\icq.exe
FirewallRules: [UDP Query User{763DD67C-0D15-4E0F-B9C3-22A3A49F0D72}C:\program files (x86)\winamp\winamp.exe] => (Block) C:\program files (x86)\winamp\winamp.exe
FirewallRules: [TCP Query User{B0A0FAB7-5AAF-4A3B-92F3-E373B7072646}C:\program files (x86)\winamp\winamp.exe] => (Block) C:\program files (x86)\winamp\winamp.exe
FirewallRules: [{E8E88259-F602-4B49-AACE-ADB044C3D4FC}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{FF562998-ABCE-4AD9-9B38-63C32E5534A7}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{F65FF3D9-4085-491A-8795-1D1EA9A8C4A2}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{30F182E8-C069-4726-A0E4-685943F1641F}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [UDP Query User{6A0C407C-D308-44D9-BEB6-94F3E884F2CC}C:\windows\kmsemulator.exe] => (Allow) C:\windows\kmsemulator.exe
FirewallRules: [TCP Query User{373E7FF7-14C6-4427-886B-7FD11C9ACA31}C:\windows\kmsemulator.exe] => (Allow) C:\windows\kmsemulator.exe
FirewallRules: [UDP Query User{2F97D858-A8F6-433F-A534-1B41973703AA}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe
FirewallRules: [TCP Query User{6F0F2373-A45B-4D3D-8607-0092D4416664}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe
FirewallRules: [{DD548C6D-55F6-4495-8149-B26D6DE98FB2}] => (Allow) LPort=6955
FirewallRules: [{F840F0C3-5FF4-4890-9530-F2CC7264CDE0}] => (Allow) LPort=6955
FirewallRules: [{F5DFAE43-A189-4069-A3B1-5D32B119ECAB}] => (Allow) LPort=8398
FirewallRules: [{47E42321-9953-40D1-9365-2221A9C2BB8B}] => (Allow) LPort=8398
FirewallRules: [{5FBB820B-799C-4D2D-8CFB-449D78A5E24D}] => (Allow) LPort=6890
FirewallRules: [{F78EB7D6-CE8C-4141-B053-5862E41C0648}] => (Allow) LPort=6890
FirewallRules: [{D839B810-AE27-47B5-876E-67359567F61D}] => (Allow) LPort=6951
FirewallRules: [{6B551A83-0674-4826-91EF-B5837DCBF480}] => (Allow) LPort=6951
FirewallRules: [{07FA21C9-7F36-48EF-B532-1FAC5FEAADF8}] => (Allow) LPort=8397
FirewallRules: [{F4B15E49-87BF-40C9-8D6A-F4E9B1EE66CF}] => (Allow) LPort=8397
FirewallRules: [{1167EB13-2607-473F-BC11-E6680E293D7D}] => (Allow) D:\Games\Star Wars The Force Unleashed 2\SWTFU2\SWTFU2.exe
FirewallRules: [{C1E350F5-27F5-41AC-8F36-3AE8AC1F7964}] => (Allow) D:\Games\Star Wars The Force Unleashed 2\SWTFU2\SWTFU2.exe
FirewallRules: [{3065A389-C3B5-4AB7-AAC5-8DFC1E210EBE}] => (Allow) LPort=8396
FirewallRules: [{2B23B678-8F6A-4CDC-8998-3C0262777B07}] => (Allow) LPort=8396
FirewallRules: [{BB39A5CB-CD84-47B5-8872-9F15D5ABE3E7}] => (Allow) LPort=8395
FirewallRules: [{F2B1EE29-F513-411D-B602-946FC8DFA963}] => (Allow) LPort=8395
FirewallRules: [{1FE657FE-8152-48A8-8561-59E0D8868CF6}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1EA170AD-BB1B-40E9-9EA2-5ED54D8F173D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{69483688-5E09-4C50-B87D-C950E7A933D2}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A9AFE362-C432-4356-8F91-E90D89D9966D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{00A4EB92-A204-4713-B915-EB32BAADB218}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{524158EE-D8A0-4845-A63C-F09BF1271F9C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9FD21092-D347-4A05-B14E-7A5AFA16BAAF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{3341124D-5826-4513-82EE-359DBC74A1DF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{25B7896F-7F42-4F9F-BCD0-633B70434081}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{38C7FB60-7FF2-4AB2-94B6-E5CB4D4B434D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0163B4E8-3B28-4A8F-83ED-B9AB6B5F16D6}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{EA782B8B-76C1-457B-A30D-D4CAEBFD617E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{3030D0E0-ED12-4D60-85E3-057EE280E365}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8667A979-842B-45D4-9B0D-80107B979922}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D4137857-9492-41BB-8861-C1B5B2941E80}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FB1DCE56-0661-4749-A60C-D17C103DA3DE}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{629E844B-8B34-4738-876B-266015375CC8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{58D1B53D-9D83-464F-9875-8A6A2BFD5509}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C6148C97-0E70-404E-9B7E-8A171B8A9520}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{24F008AA-3375-41E5-926C-688E7F0517A2}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D257766E-9C54-4AFF-A404-D2CA419DE143}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{19116878-04EC-430B-B22F-04575BDECC72}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{E7085E51-BC9E-41F7-8748-F70EEFC5D4F9}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{13553B95-0716-48F1-B8D7-F2C16AFBC52C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{E3946118-95D2-4920-B42D-797EC75B23DF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1CEC4514-497D-429B-B8FD-E2A93AFD44F4}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{009850CD-150D-42C6-8AFE-302502230B4A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{09617483-CB44-45D3-A9A9-C095F33B41D4}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{A02FED1B-33FE-445F-B692-C30F19614B95}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{B75819D3-9351-4F55-935F-7B4E43163ED8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{903774CF-CF3E-4D2B-8D44-A6D38BEB5D9A}] => (Allow) D:\Games\StarCraft II\Versions\Base15405\SC2.exe
FirewallRules: [{0DF1A6E7-1007-4244-9E53-1BA3E84060E6}] => (Allow) D:\Games\StarCraft II\Versions\Base15405\SC2.exe
FirewallRules: [{18D347F9-8EFF-4EA1-9CFD-9D3D9EA0E801}] => (Allow) D:\Games\StarCraft II\StarCraft II.exe
FirewallRules: [{7F80F487-E035-4432-9E7E-2529BFDF4DF9}] => (Allow) D:\Games\StarCraft II\StarCraft II.exe
FirewallRules: [{8E581E23-DD45-4A97-A4A5-2E7CB5297BE2}] => (Allow) LPort=8394
FirewallRules: [{AC98D44B-9A3E-4357-8246-ACA1A425BD6D}] => (Allow) LPort=8394
FirewallRules: [{25B25C2B-F3A5-426B-A9DE-305D8F497790}] => (Allow) C:\Windows\System32\SUPDSvc.exe
FirewallRules: [{78210153-4AFB-4AFE-8FD5-E974F53837F2}] => (Allow) C:\Windows\System32\SUPDSvc.exe
FirewallRules: [UDP Query User{2989ADE8-554B-4BDA-8F41-5F25865B6616}G:\mirc\mirc.exe] => (Allow) G:\mirc\mirc.exe
FirewallRules: [TCP Query User{6529D4BD-C64F-428A-B176-D68E45498A1B}G:\mirc\mirc.exe] => (Allow) G:\mirc\mirc.exe
FirewallRules: [UDP Query User{3ED22E2E-A719-4DE0-A836-27715CA62A8F}C:\program files (x86)\maple 13\jre\bin\maple.exe] => (Allow) C:\program files (x86)\maple 13\jre\bin\maple.exe
FirewallRules: [TCP Query User{943BCB03-FD79-4648-86BE-75BB6973E4A9}C:\program files (x86)\maple 13\jre\bin\maple.exe] => (Allow) C:\program files (x86)\maple 13\jre\bin\maple.exe
FirewallRules: [{F6CBA075-1FAA-4B33-9416-4A631C55C027}] => (Allow) LPort=54925
FirewallRules: [{DBD1E261-C26C-41F7-A714-F16F1F7E2A1B}] => (Allow) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.EXE
FirewallRules: [TCP Query User{860986FE-CFCC-4195-9DC8-45009AAA1AB6}C:\programdata\logishrd\logioptions\software\6.00.547\logioptionsmgr.exe] => (Allow) C:\programdata\logishrd\logioptions\software\6.00.547\logioptionsmgr.exe
FirewallRules: [UDP Query User{535BB1AA-038A-4919-B23E-0E66FC508E59}C:\programdata\logishrd\logioptions\software\6.00.547\logioptionsmgr.exe] => (Allow) C:\programdata\logishrd\logioptions\software\6.00.547\logioptionsmgr.exe
FirewallRules: [TCP Query User{DEB011DD-764C-4C59-BBFD-D4A8FE9B5C3C}C:\programdata\logishrd\logioptions\software\6.00.540\logioptionsmgr.exe] => (Allow) C:\programdata\logishrd\logioptions\software\6.00.540\logioptionsmgr.exe
FirewallRules: [UDP Query User{D34B1A54-D284-4934-8DCD-00CD705268C1}C:\programdata\logishrd\logioptions\software\6.00.540\logioptionsmgr.exe] => (Allow) C:\programdata\logishrd\logioptions\software\6.00.540\logioptionsmgr.exe
FirewallRules: [{1840F964-766A-4260-BFDF-69539CB42B05}] => (Allow) D:\Games\Steam.exe
FirewallRules: [{DC774D0E-5B21-446D-B97B-7E262FFA422C}] => (Allow) D:\Games\Steam.exe
FirewallRules: [{4F29F4C0-3B15-4F1F-BC5B-DC76C19E3EA5}] => (Allow) D:\Games\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{9B4578E6-7D77-41A5-B584-6A7D4B7675C2}] => (Allow) D:\Games\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{681886B8-BD5A-45B3-98C0-46FA03F02767}] => (Allow) D:\Games\steamapps\common\Sid Meier's Civilization VI Demo\Base\Binaries\Win64Demo\CivilizationVI.exe
FirewallRules: [{3B84C179-9313-44DD-B026-B3655A6B2C17}] => (Allow) D:\Games\steamapps\common\Sid Meier's Civilization VI Demo\Base\Binaries\Win64Demo\CivilizationVI.exe
FirewallRules: [{FF75B486-8195-4EEE-9CD8-DB7CA7C4D98E}] => (Allow) D:\Games\steamapps\common\Sid Meier's Civilization VI Demo\Base\Binaries\Win64Demo\CivilizationVI_DX12.exe
FirewallRules: [{23AD0AD3-A21E-4DB2-8E94-69FEE26FC470}] => (Allow) D:\Games\steamapps\common\Sid Meier's Civilization VI Demo\Base\Binaries\Win64Demo\CivilizationVI_DX12.exe
FirewallRules: [{B6C0CFFF-3FD8-4BE1-940B-1CBB2EA428BE}] => (Allow) D:\Games\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI.exe
FirewallRules: [{D4E0992B-DF24-4D20-B99E-3D4AA872C461}] => (Allow) D:\Games\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI.exe
FirewallRules: [{845D4C8C-36B6-401B-BB95-29FC25372F2C}] => (Allow) D:\Games\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI_DX12.exe
FirewallRules: [{B4E7A0CD-9E33-4EAE-BDD5-F8F73A5B6FEB}] => (Allow) D:\Games\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI_DX12.exe
FirewallRules: [{39E9A24C-6B56-4C3B-AD18-6B54F779CF84}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{B1E37D66-9271-4AC6-9B6D-5ED04575BE94}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [TCP Query User{95983F4C-2BCF-40F1-8633-391F5388B81E}D:\programme\phraseexpress\phraseexpress.exe] => (Allow) D:\programme\phraseexpress\phraseexpress.exe
FirewallRules: [UDP Query User{83B595D8-1E7A-464F-92B5-9B17908B6E78}D:\programme\phraseexpress\phraseexpress.exe] => (Allow) D:\programme\phraseexpress\phraseexpress.exe
==================== Restore Points =========================
ATTENTION: System Restore is disabled
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (09/05/2017 02:24:32 PM) (Source: Application) (EventID: 0) (User: )
Description: Event-ID 0
Error: (09/05/2017 02:22:53 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "G:\Dload\esetsmartinstaller_deu.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.483_none_26002d27e7c744a2.manifest.
Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.483_none_6dad63fefc436da8.manifest.
Error: (09/05/2017 02:12:00 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "G:\Dload\esetsmartinstaller_deu.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.483_none_26002d27e7c744a2.manifest.
Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.483_none_6dad63fefc436da8.manifest.
Error: (09/05/2017 02:08:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: LVPrcSrv.exe, version: 12.10.1110.0, time stamp: 0x4acc50c4
Faulting module name: LVPrcSrv.exe, version: 12.10.1110.0, time stamp: 0x4acc50c4
Exception code: 0xc0000005
Fault offset: 0x0000000000007af2
Faulting process id: 0xfb0
Faulting application start time: 0x01d3263ef9454059
Faulting application path: C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
Faulting module path: C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
Report Id: db0506f0-8115-44a2-bb9a-7d68aac0be04
Faulting package full name:
Faulting package-relative application ID:
Error: (09/05/2017 02:04:40 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "G:\Dload\esetsmartinstaller_deu.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.483_none_26002d27e7c744a2.manifest.
Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.483_none_6dad63fefc436da8.manifest.
Error: (09/05/2017 11:22:07 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "G:\Dload\esetsmartinstaller_deu.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.483_none_26002d27e7c744a2.manifest.
Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.483_none_6dad63fefc436da8.manifest.
Error: (09/05/2017 09:44:52 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "G:\Dload\esetsmartinstaller_deu.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.483_none_26002d27e7c744a2.manifest.
Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.483_none_6dad63fefc436da8.manifest.
Error: (09/05/2017 09:30:29 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "G:\Dload\esetsmartinstaller_deu.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.483_none_26002d27e7c744a2.manifest.
Component 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.483_none_6dad63fefc436da8.manifest.
Error: (09/05/2017 08:10:47 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: INTRADEEP-PC)
Description: Package Microsoft.Office.OneNote_17.8471.57791.0_x64__8wekyb3d8bbwe+microsoft.onenoteim was terminated because it took too long to suspend.
Error: (09/05/2017 08:10:42 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: onenoteim.exe, version: 16.0.8471.5779, time stamp: 0x599dfd09
Faulting module name: Office.UI.Xaml.OneNote.dll, version: 16.0.8471.5779, time stamp: 0x599dfd1e
Exception code: 0xc000041d
Fault offset: 0x00000000002e4b97
Faulting process id: 0x174c
Faulting application start time: 0x01d3260b8f451861
Faulting application path: C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.8471.57791.0_x64__8wekyb3d8bbwe\onenoteim.exe
Faulting module path: C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.8471.57791.0_x64__8wekyb3d8bbwe\Office.UI.Xaml.OneNote.dll
Report Id: 9fcdbd32-3020-4a7f-8b1d-e48359ad6c32
Faulting package full name: Microsoft.Office.OneNote_17.8471.57791.0_x64__8wekyb3d8bbwe
Faulting package-relative application ID: microsoft.onenoteim
System errors:
=============
Error: (09/05/2017 02:22:05 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (09/05/2017 02:22:05 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (09/05/2017 02:21:44 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The NetTcpActivator service depends on the NetTcpPortSharing service which failed to start because of the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
Error: (09/05/2017 02:21:42 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The CldFlt service failed to start due to the following error:
The request is not supported.
Error: (09/05/2017 02:08:24 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Process Monitor service terminated unexpectedly. It has done this 1 time(s).
Error: (09/05/2017 02:03:42 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (09/05/2017 02:03:42 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
and APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Error: (09/05/2017 02:03:23 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The NetTcpActivator service depends on the NetTcpPortSharing service which failed to start because of the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
Error: (09/05/2017 02:03:20 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The CldFlt service failed to start due to the following error:
The request is not supported.
Error: (09/05/2017 02:01:49 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Windows Media Player Network Sharing Service service depends on the Windows Search service which failed to start because of the following error:
The service has not been started.
CodeIntegrity:
===================================
Date: 2017-09-05 14:58:41.164
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume7\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-09-05 14:58:41.162
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume7\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-09-05 14:56:04.333
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume7\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-09-05 14:56:04.332
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume7\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-09-05 14:55:43.693
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume7\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-09-05 14:55:43.691
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume7\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-09-05 14:55:41.501
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume7\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-09-05 14:55:41.499
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume7\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-09-05 14:25:19.724
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume7\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-09-05 14:25:19.722
Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume7\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
Processor: Intel(R) Core(TM)2 Quad CPU Q9300 @ 2.50GHz
Percentage of memory in use: 66%
Total physical RAM: 4094.49 MB
Available physical RAM: 1387.72 MB
Total Virtual: 8190.49 MB
Available Virtual: 3635.17 MB
==================== Drives ================================
Drive c: (Windoof7) (Fixed) (Total:74.07 GB) (Free:15.98 GB) NTFS
Drive d: (WD) (Fixed) (Total:505.69 GB) (Free:481.02 GB) NTFS
Drive e: (Trash) (Fixed) (Total:0.04 GB) (Free:0 GB) NTFS
Drive g: (Daten) (Fixed) (Total:465.72 GB) (Free:441.09 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive j: (FREEAGENT) (Fixed) (Total:1397.26 GB) (Free:1320.81 GB) NTFS
Drive m: (Stuff) (Fixed) (Total:351.32 GB) (Free:351.15 GB) NTFS
Drive q: (Sicherung FA) (Fixed) (Total:1524.86 GB) (Free:1452.56 GB) NTFS
Drive r: (WD CG) (Fixed) (Total:1269.53 GB) (Free:1188.14 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 2794.5 GB) (Disk ID: 00000000)
Partition: GPT.
========================================================
Disk: 1 (MBR Code: Windows 7 or Vista) (Size: 931.5 GB) (Disk ID: 60167CF8)
Partition 1: (Not Active) - (Size=505.7 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=74.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=449 MB) - (Type=27)
Partition 4: (Not Active) - (Size=351.3 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 586D7391)
Partition 1: (Active) - (Size=465.7 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=38 MB) - (Type=07 NTFS)
========================================================
Disk: 3 (MBR Code: Windows 7 or Vista) (Size: 1397.3 GB) (Disk ID: A96949AA)
Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================
|
SecurityCheck und:
Lesestoff: