Résultat de l'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 19-04-2020\nRan par Daniele (administrateur) sur DANIELE-PC (Acer Aspire 5750G) (19-04-2020 14:37:26)\nExécution à partir de C: Users Daniele Downloads\nProfils chargés: Daniele (Profils disponibles: Daniele & Ree)\nPlateforme: Windows 7 Home Premium Service Pack 1 (X64) Langue: Italiano (Italia)\nInternet Explorer version 11 (navigateur par défaut: FF)\nMode de démarrage: Normal
"},{"id":"text-2","type":"text","heading":"","plain_text":"==================== Processus (sur liste blanche) =================","html":"==================== Processus (sur liste blanche) =================
"},{"id":"text-3","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, le processus sera fermé. Le fichier ne sera pas déplacé.)","html":"(Si une entrée est incluse dans la liste de correctifs, le processus sera fermé. Le fichier ne sera pas déplacé.)
"},{"id":"text-4","type":"text","heading":"","plain_text":"(Adobe Inc. -> Adobe Systems) C: Program Files (x86) Common Files Adobe ARM 1.0 armsvc.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Antivirus avgnt.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Antivirus avguard.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Antivirus avscan.exe \n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Antivirus avshadow.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Antivirus sched.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Launcher Avira.ServiceHost.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Launcher Avira.Systray.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Optimizer Host Avira.OptimizerHost.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira SoftwareUpdater Avira.SoftwareUpdater.ServiceHost.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira VPN Avira.VpnService.exe\n(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C: Program Files (x86) Battle.net Battle.net.exe \n(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C: ProgramData Battle.net Agent Agent.7022 Agent.exe\n(CyberLink -> CyberLink Corp.) C: Program Files (x86) Acer clear.fi MVP clear.fiAgent.exe\n(CyberLink -> CyberLink) C: Program Files (x86) Acer clear.fi MVP Kernel DMR DMREngine.exe\n(Discord Inc. -> Discord Inc.) C: Users Daniele AppData Local Discord app-0.0.306 Discord.exe \n(Even Balance, Inc. ->) C: Windows SysWOW64 PnkBstrA.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe \n(HearthSim, LLC -> HearthSim) C: Users Daniele AppData Local HearthstoneDeckTracker app-1.10.7 HearthstoneDeckTracker.exe\n(Intel Corporation -> Intel Corporation) C: Windows System32 igfxpers.exe\n(Intel Corporation -> Intel Corporation) C: Windows System32 igfxtray.exe\n(McAfee, LLC -> McAfee, LLC) C: Program Files McAfee WebAdvisor servicehost.exe\n(McAfee, LLC -> McAfee, LLC) C: Program Files McAfee WebAdvisor uihost.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Fichiers communs microsoft shared Virtualization Handler CVHSVC.EXE\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Microsoft Application Virtualization Client sftlist.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Microsoft Application Virtualization Client sftvsa.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client MsMpEng.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client msseces.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client NisSrv.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 dllhost.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 rundll32.exe\n(Mozilla Corporation -> Mozilla Corporation) C: Program Files (x86) Mozilla Firefox firefox.exe \n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files (x86) NVIDIA Corporation NvTelemetry NvTelemetryContainer.exe\n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation Display.NvContainer NVDisplay.Container.exe \n(SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C: Program Files Fichiers communs EPSON EPW! 3 SSRP E_S60RPB.EXE\n(SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C: Windows System32 spool drivers x64 3 E_IATILFE.EXE\n(Shanghai Changzhi Network Technology Co., Ltd. ->) D: XuanZhi LDPlayer ldnews.exe\n(Synaptics Incorporated -> Synaptics Incorporated) C: Program Files Synaptics SynTP SynTPEnh.exe\n(Synaptics Incorporated -> Synaptics Incorporated) C: Program Files Synaptics SynTP SynTPHelper.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer_Service.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer tv_w32.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer tv_x64.exe","html":"(Adobe Inc. -> Adobe Systems) C: Program Files (x86) Common Files Adobe ARM 1.0 armsvc.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Antivirus avgnt.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Antivirus avguard.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Antivirus avscan.exe \n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Antivirus avshadow.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Antivirus sched.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Launcher Avira.ServiceHost.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Launcher Avira.Systray.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Optimizer Host Avira.OptimizerHost.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira SoftwareUpdater Avira.SoftwareUpdater.ServiceHost.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira VPN Avira.VpnService.exe\n(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C: Program Files (x86) Battle.net Battle.net.exe \n(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C: ProgramData Battle.net Agent Agent.7022 Agent.exe\n(CyberLink -> CyberLink Corp.) C: Program Files (x86) Acer clear.fi MVP clear.fiAgent.exe\n(CyberLink -> CyberLink) C: Program Files (x86) Acer clear.fi MVP Kernel DMR DMREngine.exe\n(Discord Inc. -> Discord Inc.) C: Users Daniele AppData Local Discord app-0.0.306 Discord.exe \n(Even Balance, Inc. ->) C: Windows SysWOW64 PnkBstrA.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe \n(HearthSim, LLC -> HearthSim) C: Users Daniele AppData Local HearthstoneDeckTracker app-1.10.7 HearthstoneDeckTracker.exe\n(Intel Corporation -> Intel Corporation) C: Windows System32 igfxpers.exe\n(Intel Corporation -> Intel Corporation) C: Windows System32 igfxtray.exe\n(McAfee, LLC -> McAfee, LLC) C: Program Files McAfee WebAdvisor servicehost.exe\n(McAfee, LLC -> McAfee, LLC) C: Program Files McAfee WebAdvisor uihost.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Fichiers communs microsoft shared Virtualization Handler CVHSVC.EXE\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Microsoft Application Virtualization Client sftlist.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Microsoft Application Virtualization Client sftvsa.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client MsMpEng.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client msseces.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client NisSrv.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 dllhost.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 rundll32.exe\n(Mozilla Corporation -> Mozilla Corporation) C: Program Files (x86) Mozilla Firefox firefox.exe \n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files (x86) NVIDIA Corporation NvTelemetry NvTelemetryContainer.exe\n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation Display.NvContainer NVDisplay.Container.exe \n(SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C: Program Files Fichiers communs EPSON EPW! 3 SSRP E_S60RPB.EXE\n(SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C: Windows System32 spool drivers x64 3 E_IATILFE.EXE\n(Shanghai Changzhi Network Technology Co., Ltd. ->) D: XuanZhi LDPlayer ldnews.exe\n(Synaptics Incorporated -> Synaptics Incorporated) C: Program Files Synaptics SynTP SynTPEnh.exe\n(Synaptics Incorporated -> Synaptics Incorporated) C: Program Files Synaptics SynTP SynTPHelper.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer_Service.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer tv_w32.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer tv_x64.exe
"},{"id":"text-5","type":"text","heading":"","plain_text":"==================== Registre (liste blanche) ===================","html":"==================== Registre (liste blanche) ===================
"},{"id":"text-6","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, l'élément de registre sera restauré par défaut ou supprimé. Le fichier ne sera pas déplacé.)","html":"(Si une entrée est incluse dans la liste de correctifs, l'élément de registre sera restauré par défaut ou supprimé. Le fichier ne sera pas déplacé.)
"},{"id":"text-7","type":"text","heading":"","plain_text":"HKLM … Run: [MSC] => C: Program Files Microsoft Security Client msseces.exe [1353680 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nHKLM … Run: [SynTPEnh] => C: Program Files Synaptics SynTP SynTPEnh.exe [2280232 2010-07-29] (Synaptics Incorporated -> Synaptics Incorporated)\nHKLM … Run: [] => [X]\nHKLM-x32 … Exécuter: [KeePass 2 PreLoad] => C: Program Files (x86) KeePass Password Safe 2 KeePass.exe [3331264 2020-01-20] (Développeur Open Source, Dominik Reichl -> Dominik Reichl)\nHKLM-x32 … Exécuter: [Avira SystrayStartTrigger] => C: Program Files (x86) Avira Launcher Avira.SystrayStartTrigger.exe [239520 2020-04-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nHKLM-x32 … Exécuter: [Avira System Speedup User Starter] => C: Program Files (x86) Avira System Speedup Avira.SystemSpeedup.Core.Common.Starter.exe [331368 2020-01-30] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nHKLM-x32 … Exécuter: [] => [X]\nHKU S-1-5-19 … RunOnce: [IsMyWinLockerReboot] => msiexec.exe / qn / x voidguid\nHKU S-1-5-20 … RunOnce: [IsMyWinLockerReboot] => msiexec.exe / qn / x voidguid\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … Run: [EPLTargetP0000000000000001] => C: Windows system32 spool DRIVERS x64 3 E_IATILFE.EXE [297024 2013-01-24] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … Run: [Discord] => C: Users Daniele AppData Local Discord app-0.0.306 Discord.exe [90950968 2020-02-24] (Discord Inc. -> Discord Inc.)\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … Run: [LDNews] => D: XuanZhi LDPlayer ldnews.exe [1309368 2020-03-25] (Shanghai Changzhi Network Technology Co., Ltd. ->)\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … Run: [] => [X]\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … RunOnce: [FlashPlayerUpdate] => C: Windows SysWOW64 Macromed Flash FlashUtil32_32_0_0_303_Plugin.exe [1457720 2019-12-18] (Adobe Inc. -> Adobe)\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … MountPoints2: 050c8d1e-37e4-11ea-9ee4-1c7508f37aca – H: RTK_NIC_DRIVER_INSTALLER.sfx.exe\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … MountPoints2: 5e68e840-be54-11e2-b434-806e6f6e6963 – G: Setup.exe\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … MountPoints2: 839489ac-58a7-11e5-ac80-1c7508ead495 – C: Windows system32 RunDLL32.EXE Shell32.DLL, ShellExec_RunDLL H: Start.exe\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … MountPoints2: 84650df6-67d9-11ea-9c89-1c7508f37aca – H: HiSuiteDownLoader.exe} – H: HiSuiteDownLoader.exe\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … MountPoints2: aab47bad-b4df-11e2-b1df-1c7508ead495 – F: LANLauncher.exe\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … MountPoints2: b7603e81-b1e8-11e7-9500-1c7508ead495 – G: HiSuiteDownLoader.exe\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … MountPoints2: fb958786-5f36-11e3-8f8a-1c7508ead495 – F: autorun.exe\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 Control Panel Desktop \\ SCRNSAVE.EXE -> C: Windows system32 scrnsave.scr [11264 2009-07-14] (Microsoft Windows -> Microsoft Corporation)\nHKU S-1-5-18 … RunOnce: [IsMyWinLockerReboot] => msiexec.exe / qn / x voidguid\nHKLM Software Microsoft Active Setup Installed Components: [2D46B6DC-2207-486B-B523-A557E6D54B47] -> C: Windows system32 cmd.exe / D / C démarrer C: Windows system32 ie4uinit.exe -ClearIconCache\nHKLM Software Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> C: Program Files (x86) Google Chrome Application 81.0.4044.113 Installer chrmstp.exe [2020-04-15] (Google LLC -> Google LLC)\nHKLM Software Wow6432Node Microsoft Active Setup Installed Components: [2D46B6DC-2207-486B-B523-A557E6D54B47] -> C: Windows system32 cmd.exe / D / C démarrer C: Windows system32 ie4uinit.exe -ClearIconCache\nHKLM Software Wow6432Node Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> "C: Program Files (x86) Google Chrome Application 57.0.2987.133 Installer chrmstp.exe" –configure-user-settings –verbose-logging –system-level\nHKLM Software Wow6432Node Microsoft Active Setup Installed Components: [A6EADE66-0000-0000-484E-7E8A45000000] -> C: Program Files (x86) Adobe Acrobat Reader DC Esl AiodLite.dll [2019-05-03] (Adobe Inc. -> Adobe Systems, Inc.)\nHKLM Software … Authentication Credential Providers: [F8A0B131-5F68-486c-8040-7E8FC3C85BB6] -> C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDCREDPROV.DLL [2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nFournisseurs HKLM Software … Authentication PLAP: [60442b50-aac2-4db7-b9b0-813d2107287d] -> c: windows system32 dsNcSmartCardProv.dll [2014-04-16] (Juniper Networks, Inc. -> Juniper Networks)\nFournisseurs HKLM Software … Authentication PLAP: [9f4a51de-92b1-483a-b717-dd7d3bb7d3db] -> c: windows system32 dsNcCredProv.dll [2014-04-16] (Juniper Networks, Inc. -> Juniper Networks)\nAppInit_DLLs: C: Windows system32 nvinitx.dll => C: Windows system32 nvinitx.dll [182784 2018-03-25] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation)\nAppInit_DLLs-x32: C: Windows SysWOW64 nvinit.dll => C: Windows SysWOW64 nvinit.dll [159704 2018-03-25] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation)","html":"HKLM … Run: [MSC] => C: Program Files Microsoft Security Client msseces.exe [1353680 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nHKLM … Run: [SynTPEnh] => C: Program Files Synaptics SynTP SynTPEnh.exe [2280232 2010-07-29] (Synaptics Incorporated -> Synaptics Incorporated)\nHKLM … Run: [] => [X]\nHKLM-x32 … Exécuter: [KeePass 2 PreLoad] => C: Program Files (x86) KeePass Password Safe 2 KeePass.exe [3331264 2020-01-20] (Développeur Open Source, Dominik Reichl -> Dominik Reichl)\nHKLM-x32 … Exécuter: [Avira SystrayStartTrigger] => C: Program Files (x86) Avira Launcher Avira.SystrayStartTrigger.exe [239520 2020-04-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nHKLM-x32 … Exécuter: [Avira System Speedup User Starter] => C: Program Files (x86) Avira System Speedup Avira.SystemSpeedup.Core.Common.Starter.exe [331368 2020-01-30] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nHKLM-x32 … Exécuter: [] => [X]\nHKU S-1-5-19 … RunOnce: [IsMyWinLockerReboot] => msiexec.exe / qn / x voidguid\nHKU S-1-5-20 … RunOnce: [IsMyWinLockerReboot] => msiexec.exe / qn / x voidguid\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … Run: [EPLTargetP0000000000000001] => C: Windows system32 spool DRIVERS x64 3 E_IATILFE.EXE [297024 2013-01-24] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … Run: [Discord] => C: Users Daniele AppData Local Discord app-0.0.306 Discord.exe [90950968 2020-02-24] (Discord Inc. -> Discord Inc.)\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … Run: [LDNews] => D: XuanZhi LDPlayer ldnews.exe [1309368 2020-03-25] (Shanghai Changzhi Network Technology Co., Ltd. ->)\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … Run: [] => [X]\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … RunOnce: [FlashPlayerUpdate] => C: Windows SysWOW64 Macromed Flash FlashUtil32_32_0_0_303_Plugin.exe [1457720 2019-12-18] (Adobe Inc. -> Adobe)\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … MountPoints2: 050c8d1e-37e4-11ea-9ee4-1c7508f37aca – H: RTK_NIC_DRIVER_INSTALLER.sfx.exe\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … MountPoints2: 5e68e840-be54-11e2-b434-806e6f6e6963 – G: Setup.exe\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … MountPoints2: 839489ac-58a7-11e5-ac80-1c7508ead495 – C: Windows system32 RunDLL32.EXE Shell32.DLL, ShellExec_RunDLL H: Start.exe\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … MountPoints2: 84650df6-67d9-11ea-9c89-1c7508f37aca – H: HiSuiteDownLoader.exe} – H: HiSuiteDownLoader.exe\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … MountPoints2: aab47bad-b4df-11e2-b1df-1c7508ead495 – F: LANLauncher.exe\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … MountPoints2: b7603e81-b1e8-11e7-9500-1c7508ead495 – G: HiSuiteDownLoader.exe\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … MountPoints2: fb958786-5f36-11e3-8f8a-1c7508ead495 – F: autorun.exe\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 Control Panel Desktop \\ SCRNSAVE.EXE -> C: Windows system32 scrnsave.scr [11264 2009-07-14] (Microsoft Windows -> Microsoft Corporation)\nHKU S-1-5-18 … RunOnce: [IsMyWinLockerReboot] => msiexec.exe / qn / x voidguid\nHKLM Software Microsoft Active Setup Installed Components: [2D46B6DC-2207-486B-B523-A557E6D54B47] -> C: Windows system32 cmd.exe / D / C démarrer C: Windows system32 ie4uinit.exe -ClearIconCache\nHKLM Software Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> C: Program Files (x86) Google Chrome Application 81.0.4044.113 Installer chrmstp.exe [2020-04-15] (Google LLC -> Google LLC)\nHKLM Software Wow6432Node Microsoft Active Setup Installed Components: [2D46B6DC-2207-486B-B523-A557E6D54B47] -> C: Windows system32 cmd.exe / D / C démarrer C: Windows system32 ie4uinit.exe -ClearIconCache\nHKLM Software Wow6432Node Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> "C: Program Files (x86) Google Chrome Application 57.0.2987.133 Installer chrmstp.exe" –configure-user-settings –verbose-logging –system-level\nHKLM Software Wow6432Node Microsoft Active Setup Installed Components: [A6EADE66-0000-0000-484E-7E8A45000000] -> C: Program Files (x86) Adobe Acrobat Reader DC Esl AiodLite.dll [2019-05-03] (Adobe Inc. -> Adobe Systems, Inc.)\nHKLM Software … Authentication Credential Providers: [F8A0B131-5F68-486c-8040-7E8FC3C85BB6] -> C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDCREDPROV.DLL [2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nFournisseurs HKLM Software … Authentication PLAP: [60442b50-aac2-4db7-b9b0-813d2107287d] -> c: windows system32 dsNcSmartCardProv.dll [2014-04-16] (Juniper Networks, Inc. -> Juniper Networks)\nFournisseurs HKLM Software … Authentication PLAP: [9f4a51de-92b1-483a-b717-dd7d3bb7d3db] -> c: windows system32 dsNcCredProv.dll [2014-04-16] (Juniper Networks, Inc. -> Juniper Networks)\nAppInit_DLLs: C: Windows system32 nvinitx.dll => C: Windows system32 nvinitx.dll [182784 2018-03-25] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation)\nAppInit_DLLs-x32: C: Windows SysWOW64 nvinit.dll => C: Windows SysWOW64 nvinit.dll [159704 2018-03-25] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation)
"},{"id":"text-8","type":"text","heading":"","plain_text":"==================== Tâches planifiées (liste blanche) ============","html":"==================== Tâches planifiées (liste blanche) ============
"},{"id":"text-9","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)","html":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)
"},{"id":"text-10","type":"text","heading":"","plain_text":"Tâche: 0587C257-D7C6-4C78-8F21-1D7F3939B9B9 – System32 Tasks Recovery Management Burn Notification => C: Program Files Acer Acer eRecovery Management NotificationCenter Notification.exe [816520 2011-08-09] (Acer Incorporated -> Acer)\nTâche: 0698585B-BA25-4335-9278-3BC3C18BE8B5 – System32 Tasks Adobe Flash Player NPAPI Notifier => C: Windows SysWOW64 Macromed Flash FlashUtil32_32_0_0_303_Plugin.exe [1457720 2019-12-18] (Adobe Inc. -> Adobe)\nTâche: 0D073FB3-7592-4AD3-ACD5-261412DDD7DF – System32 Tasks EPSON XP-312 313 315 Series Invitation 6AFC5C38-E427-4C18-A613-15CA4120664F => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 0D415B8D-D7FD-477F-97FB-381B18EBA498 – Tâche de mise à jour System32 Tasks Adobe Acrobat => C: Program Files (x86) Common Files Adobe ARM 1.0 AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)\nTâche: 16CBEF8D-2362-4ADC-9C8E-7F143609615F – System32 Tasks clear.fiAgent => C: Program Files (x86) Acer clear.fi MVP clear.fiAgent.exe [120104 2011-08-24] (CyberLink -> CyberLink Corp.)\nTâche: 19BE36DC-19D0-4AE2-B932-4E92E841E50E – System32 Tasks NvTmMon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation Update Core NvTmMon.exe [510912 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 28017D3E-92AD-4139-B233-772380FCF796 – System32 Tasks 898F6CA2-2FC0-4969-9594-F4670EF81EBA => C: Program Files (x86) Activision Rome – Total War RomeTW.exe\nTâche: 28FFE953-0A42-4552-8E34-DC5CE2F4000A – System32 Tasks F3E47E76-9709-4A21-BB71-1B0C6C9B8223 => C: Windows system32 pcalua.exe -a E: Setup.exe – d E: \nTâche: 2AFD2942-0BC9-4D3A-A82D-AD1D5CCE73FD – System32 Tasks E3F8847E-F1BC-4BFB-8A19-8DF64248AAFE => C: Program Files (x86) Activision Rome – Total War RomeTW.exe\nTâche: 34FFA4CE-EA47-418C-BE0E-1EA34C5DCC7B – System32 Tasks AviraSystemSpeedupUpdate => C: ProgramData Avira SystemSpeedup Update avira_speedup_setup_update.exe [27848432 2020-04-09] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nTâche: 461EE1FB-988C-4A90-BB13-D665D42A365A – System32 Tasks NvProfileUpdaterDaily_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation Update Core NvProfileUpdater64 [662464 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 4802D53D-7317-4F6D-96B0-025C0D18E41B – System32 Tasks 5B715CDF-6EE8-460D-A988-FA5FE01124D1 => E: baldur.exe\nTâche: 53F97095-C1E8-4C4E-8E7E-D640EAC6E922 – System32 Tasks NVIDIA GeForce Experience SelfUpdate_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation NVIDIA GeForce Experience NVIDIA GeForce Experience.exe [2069952 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 576D0D33-BE9A-4724-A555-8F4E9B90573B – System32 Tasks EPSON XP-312 313 315 Series Update E25A4D64-F87D-4249-99D5-CFF2F8F8E6DF => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 58DE433B-64F3-4832-A901-30F96F3625BA – System32 Tasks NvProfileUpdaterOnLogon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation Update Core NvProfileUpdater64 [662464 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 5CED6FD0-67EC-4881-BEBA-77F9D42F4209 – System32 Tasks Adobe Flash Player Updater => C: Windows SysWOW64 Macromed Flash FlashPlayerUpdateService.exe [335416 2019-12-18] (Adobe Inc. -> Adobe)\nTâche: 6DA9947E-16BB-412B-9076-BAB7FB4730DC – System32 Tasks NvTmRep_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation Update Core NvTmRep.exe [757184 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 6E86E2AF-4A75-49B5-B12F-E52842CDEB92 – System32 Tasks E4841482-3364-44D1-9773-1AA169AD4679 => C: Program Files (x86) Activision Rome – Total War RomeTW.exe\nTâche: 6E924764-AF68-4394-8DE7-E26688CAA88F – System32 Tasks E6B67C06-3DA8-48D9-8061-CC54EDA7A03D => C: Users Daniele Desktop Tor Browser Browser firefox.exe.exe \nTâche: 82643A6B-7C76-4DDE-9EFC-EAA23691FC3F – System32 Tasks 7D643D1C-0931-495D-8883-8D8B85E39BAB => C: Windows system32 pcalua.exe -a C: Users Daniele Bureau hpflash1.exe -d C: Users Daniele Desktop\nTâche: 89BBD1F3-AD18-4295-9C8F-408713D375EF – System32 Tasks DMREngine => C: Program Files (x86) Acer clear.fi MVP . Kernel DMR DMREngine.exe [169352 2011-08-24] (CyberLink -> CyberLink)\nTâche: 8DA7805F-DA82-44FD-8C16-3DB36A78306A – System32 Tasks UALU notificatin => C: Program Files Acer Acer Updater UALU.exe [22392 2012-04-05] (Acer Incorporated -> Acer Incorporated)\nTâche: 906AA2A6-A3F5-419E-AD07-0DC22E0C18E7 – System32 Tasks clear.fi => C: Program Files (x86) Acer clear.fi MVP clear.fi.exe [264760 2011-08-24] (CyberLink -> Acer Incorporated)\nTâche: 91BE0F27-0BB1-4F2D-AA59-B164367ED37B – System32 Tasks GoogleUpdateTaskMachineCore => C: Program Files (x86) Google Update GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)\nTâche: 944C8AC3-46F0-49EA-BCE6-BD5F2ABF1E25 – System32 Tasks NvBatteryBoostCheckOnLogon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVontia Corporation NvC [469952 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 947B3B5A-7121-4AA4-A132-B3723F145F31 – System32 Tasks EPSON XP-312 313 315 Series Update 6AFC5C38-E427-4C18-A613-15CA4120664F => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 96EC6761-5AF9-498C-A923-CBEB073F3C48 – System32 Tasks Microsoft Microsoft Antimalware Microsoft Antimalware Scheduled Scan => C: Program Files Microsoft Security Client \\ MpCmdRun.exe [410784 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nTâche: 971CBDDC-AE71-4383-BF3E-55684DC6BE1F – Tâche System32 Tasks Overwolf Updater => C: Program Files (x86) Overwolf OverwolfUpdater.exe [2463064 2020-03-14] (Overwolf Ltd -> Overwolf LTD)\nTâche: 9C563B9F-8477-4F74-9683-3D0C349598DD – System32 Tasks EPSON XP-312 313 315 Series Invitation E25A4D64-F87D-4249-99D5-CFF2F8F8E6DF => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: A2AF1F20-FAF1-44EB-A8EE-F9E61B94538B – System32 Tasks CEF4E478-F540-44FA-8A0A-B04F0C79ED38 => C: Windows system32 pcalua.exe -a C: Users Daniele Téléchargements HijackThis.exe -d C: Users Daniele Downloads\nTâche: A4CA37D7-063A-4E31-BD80-149FDBF10BE1 – System32 Tasks 5D586F1C-A007-495B-A683-84471FF9182E => C: Windows system32 pcalua.exe -a C: Users Daniele Desktop BaldursGate2 Setup.exe -d C: Users Daniele Desktop BaldursGate2\nTâche: A5D1C74C-C335-4965-A36A-010CC81124C7 – System32 Tasks E1FD0496-34FB-4E32-BE56-1638E11B44F0 => C: Program Files (x86) Activision Rome – Total War RomeTW.exe\nTâche: AA9292C3-4A04-427B-83C6-1D8EA215F4AC – System32 Tasks A07D0381-8480-48E5-93B1-1CD22638FA0B => C: Windows system32 pcalua.exe -a E: Launch.exe – d E: \nTâche: AF175631-4055-4EDD-B91E-ADC2D47EC4D7 – System32 Tasks NvNodeLauncher_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation NvNode nvnodejsla [976832 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: D7C41E02-A0BF-4278-A071-55694952ACDC – System32 Tasks GoogleUpdateTaskMachineUA => C: Program Files (x86) Google Update GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)\nTâche: D7F35FFC-47BF-4DC2-97D2-9C611F8EC20B – System32 Tasks Microsoft Windows Live SOXE Extractor Definitions Update Task => 3519154C-227E-47F3-9CC9-12C3F05817F1\nTâche: DD604AC5-C11F-4371-84FE-2AC34CF0D167 – System32 Tasks NvDriverUpdateCheckDaily_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation NvContainer nvcontain.exe [522688 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: E002599A-08C1-4C42-883F-191BB591BB0F – System32 Tasks 6E01CB89-B997-4F11-A30C-C7CE8A9C91A1 => C: Windows system32 pcalua.exe -a C: Users Daniele Téléchargements win32_152824.exe -d C: Users Daniele Downloads\nTâche: F75AEAE1-46D4-4AE2-B52C-212BD3348EFE – System32 Tasks Avira_Antivirus_Systray => C: Program Files (x86) Avira Antivirus avgnt.exe [2759304 2020-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)","html":"Tâche: 0587C257-D7C6-4C78-8F21-1D7F3939B9B9 – System32 Tasks Recovery Management Burn Notification => C: Program Files Acer Acer eRecovery Management NotificationCenter Notification.exe [816520 2011-08-09] (Acer Incorporated -> Acer)\nTâche: 0698585B-BA25-4335-9278-3BC3C18BE8B5 – System32 Tasks Adobe Flash Player NPAPI Notifier => C: Windows SysWOW64 Macromed Flash FlashUtil32_32_0_0_303_Plugin.exe [1457720 2019-12-18] (Adobe Inc. -> Adobe)\nTâche: 0D073FB3-7592-4AD3-ACD5-261412DDD7DF – System32 Tasks EPSON XP-312 313 315 Series Invitation 6AFC5C38-E427-4C18-A613-15CA4120664F => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 0D415B8D-D7FD-477F-97FB-381B18EBA498 – Tâche de mise à jour System32 Tasks Adobe Acrobat => C: Program Files (x86) Common Files Adobe ARM 1.0 AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)\nTâche: 16CBEF8D-2362-4ADC-9C8E-7F143609615F – System32 Tasks clear.fiAgent => C: Program Files (x86) Acer clear.fi MVP clear.fiAgent.exe [120104 2011-08-24] (CyberLink -> CyberLink Corp.)\nTâche: 19BE36DC-19D0-4AE2-B932-4E92E841E50E – System32 Tasks NvTmMon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation Update Core NvTmMon.exe [510912 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 28017D3E-92AD-4139-B233-772380FCF796 – System32 Tasks 898F6CA2-2FC0-4969-9594-F4670EF81EBA => C: Program Files (x86) Activision Rome – Total War RomeTW.exe\nTâche: 28FFE953-0A42-4552-8E34-DC5CE2F4000A – System32 Tasks F3E47E76-9709-4A21-BB71-1B0C6C9B8223 => C: Windows system32 pcalua.exe -a E: Setup.exe – d E: \nTâche: 2AFD2942-0BC9-4D3A-A82D-AD1D5CCE73FD – System32 Tasks E3F8847E-F1BC-4BFB-8A19-8DF64248AAFE => C: Program Files (x86) Activision Rome – Total War RomeTW.exe\nTâche: 34FFA4CE-EA47-418C-BE0E-1EA34C5DCC7B – System32 Tasks AviraSystemSpeedupUpdate => C: ProgramData Avira SystemSpeedup Update avira_speedup_setup_update.exe [27848432 2020-04-09] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nTâche: 461EE1FB-988C-4A90-BB13-D665D42A365A – System32 Tasks NvProfileUpdaterDaily_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation Update Core NvProfileUpdater64 [662464 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 4802D53D-7317-4F6D-96B0-025C0D18E41B – System32 Tasks 5B715CDF-6EE8-460D-A988-FA5FE01124D1 => E: baldur.exe\nTâche: 53F97095-C1E8-4C4E-8E7E-D640EAC6E922 – System32 Tasks NVIDIA GeForce Experience SelfUpdate_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation NVIDIA GeForce Experience NVIDIA GeForce Experience.exe [2069952 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 576D0D33-BE9A-4724-A555-8F4E9B90573B – System32 Tasks EPSON XP-312 313 315 Series Update E25A4D64-F87D-4249-99D5-CFF2F8F8E6DF => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 58DE433B-64F3-4832-A901-30F96F3625BA – System32 Tasks NvProfileUpdaterOnLogon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation Update Core NvProfileUpdater64 [662464 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 5CED6FD0-67EC-4881-BEBA-77F9D42F4209 – System32 Tasks Adobe Flash Player Updater => C: Windows SysWOW64 Macromed Flash FlashPlayerUpdateService.exe [335416 2019-12-18] (Adobe Inc. -> Adobe)\nTâche: 6DA9947E-16BB-412B-9076-BAB7FB4730DC – System32 Tasks NvTmRep_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation Update Core NvTmRep.exe [757184 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 6E86E2AF-4A75-49B5-B12F-E52842CDEB92 – System32 Tasks E4841482-3364-44D1-9773-1AA169AD4679 => C: Program Files (x86) Activision Rome – Total War RomeTW.exe\nTâche: 6E924764-AF68-4394-8DE7-E26688CAA88F – System32 Tasks E6B67C06-3DA8-48D9-8061-CC54EDA7A03D => C: Users Daniele Desktop Tor Browser Browser firefox.exe.exe \nTâche: 82643A6B-7C76-4DDE-9EFC-EAA23691FC3F – System32 Tasks 7D643D1C-0931-495D-8883-8D8B85E39BAB => C: Windows system32 pcalua.exe -a C: Users Daniele Bureau hpflash1.exe -d C: Users Daniele Desktop\nTâche: 89BBD1F3-AD18-4295-9C8F-408713D375EF – System32 Tasks DMREngine => C: Program Files (x86) Acer clear.fi MVP . Kernel DMR DMREngine.exe [169352 2011-08-24] (CyberLink -> CyberLink)\nTâche: 8DA7805F-DA82-44FD-8C16-3DB36A78306A – System32 Tasks UALU notificatin => C: Program Files Acer Acer Updater UALU.exe [22392 2012-04-05] (Acer Incorporated -> Acer Incorporated)\nTâche: 906AA2A6-A3F5-419E-AD07-0DC22E0C18E7 – System32 Tasks clear.fi => C: Program Files (x86) Acer clear.fi MVP clear.fi.exe [264760 2011-08-24] (CyberLink -> Acer Incorporated)\nTâche: 91BE0F27-0BB1-4F2D-AA59-B164367ED37B – System32 Tasks GoogleUpdateTaskMachineCore => C: Program Files (x86) Google Update GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)\nTâche: 944C8AC3-46F0-49EA-BCE6-BD5F2ABF1E25 – System32 Tasks NvBatteryBoostCheckOnLogon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVontia Corporation NvC [469952 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 947B3B5A-7121-4AA4-A132-B3723F145F31 – System32 Tasks EPSON XP-312 313 315 Series Update 6AFC5C38-E427-4C18-A613-15CA4120664F => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 96EC6761-5AF9-498C-A923-CBEB073F3C48 – System32 Tasks Microsoft Microsoft Antimalware Microsoft Antimalware Scheduled Scan => C: Program Files Microsoft Security Client \\ MpCmdRun.exe [410784 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nTâche: 971CBDDC-AE71-4383-BF3E-55684DC6BE1F – Tâche System32 Tasks Overwolf Updater => C: Program Files (x86) Overwolf OverwolfUpdater.exe [2463064 2020-03-14] (Overwolf Ltd -> Overwolf LTD)\nTâche: 9C563B9F-8477-4F74-9683-3D0C349598DD – System32 Tasks EPSON XP-312 313 315 Series Invitation E25A4D64-F87D-4249-99D5-CFF2F8F8E6DF => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: A2AF1F20-FAF1-44EB-A8EE-F9E61B94538B – System32 Tasks CEF4E478-F540-44FA-8A0A-B04F0C79ED38 => C: Windows system32 pcalua.exe -a C: Users Daniele Téléchargements HijackThis.exe -d C: Users Daniele Downloads\nTâche: A4CA37D7-063A-4E31-BD80-149FDBF10BE1 – System32 Tasks 5D586F1C-A007-495B-A683-84471FF9182E => C: Windows system32 pcalua.exe -a C: Users Daniele Desktop BaldursGate2 Setup.exe -d C: Users Daniele Desktop BaldursGate2\nTâche: A5D1C74C-C335-4965-A36A-010CC81124C7 – System32 Tasks E1FD0496-34FB-4E32-BE56-1638E11B44F0 => C: Program Files (x86) Activision Rome – Total War RomeTW.exe\nTâche: AA9292C3-4A04-427B-83C6-1D8EA215F4AC – System32 Tasks A07D0381-8480-48E5-93B1-1CD22638FA0B => C: Windows system32 pcalua.exe -a E: Launch.exe – d E: \nTâche: AF175631-4055-4EDD-B91E-ADC2D47EC4D7 – System32 Tasks NvNodeLauncher_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation NvNode nvnodejsla [976832 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: D7C41E02-A0BF-4278-A071-55694952ACDC – System32 Tasks GoogleUpdateTaskMachineUA => C: Program Files (x86) Google Update GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)\nTâche: D7F35FFC-47BF-4DC2-97D2-9C611F8EC20B – System32 Tasks Microsoft Windows Live SOXE Extractor Definitions Update Task => 3519154C-227E-47F3-9CC9-12C3F05817F1\nTâche: DD604AC5-C11F-4371-84FE-2AC34CF0D167 – System32 Tasks NvDriverUpdateCheckDaily_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation NvContainer nvcontain.exe [522688 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: E002599A-08C1-4C42-883F-191BB591BB0F – System32 Tasks 6E01CB89-B997-4F11-A30C-C7CE8A9C91A1 => C: Windows system32 pcalua.exe -a C: Users Daniele Téléchargements win32_152824.exe -d C: Users Daniele Downloads\nTâche: F75AEAE1-46D4-4AE2-B52C-212BD3348EFE – System32 Tasks Avira_Antivirus_Systray => C: Program Files (x86) Avira Antivirus avgnt.exe [2759304 2020-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
"},{"id":"text-11","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, le fichier de tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)","html":"(Si une entrée est incluse dans la liste de correctifs, le fichier de tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
"},{"id":"text-12","type":"text","heading":"","plain_text":"Tâche: C: Windows Tasks EPSON XP-312 313 315 Series Invitation 6AFC5C38-E427-4C18-A613-15CA4120664F .job => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE\nTâche: C: Windows Tasks EPSON XP-312 313 315 Series Invitation E25A4D64-F87D-4249-99D5-CFF2F8F8E6DF .job => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE\nTâche: C: Windows Tasks EPSON XP-312 313 315 Series Update 6AFC5C38-E427-4C18-A613-15CA4120664F .job => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE : / EXE: 6AFC5C38-E427-4C18-A613-15CA4120664F / F: UpdateSYSTEMĊ Recherche les mises à jour du logiciel EPSON et vous avertit lorsque des mises à jour sont disponibles.Si cette tâche est désactivée ou arrêtée, votre logiciel EPSON ne sera pas automatiquement mis à jour date.Thi\nTâche: C: Windows Tasks EPSON XP-312 313 315 Series Update E25A4D64-F87D-4249-99D5-CFF2F8F8E6DF .job => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE : / EXE: E25A4D64-F87D-4249-99D5-CFF2F8F8E6DF / F: UpdateSYSTEMĊ Recherche les mises à jour du logiciel EPSON et vous avertit lorsque des mises à jour sont disponibles. Si cette tâche est désactivée ou arrêtée, votre logiciel EPSON ne sera pas automatiquement tenu à jour. date.Thi","html":"Tâche: C: Windows Tasks EPSON XP-312 313 315 Series Invitation 6AFC5C38-E427-4C18-A613-15CA4120664F .job => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE\nTâche: C: Windows Tasks EPSON XP-312 313 315 Series Invitation E25A4D64-F87D-4249-99D5-CFF2F8F8E6DF .job => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE\nTâche: C: Windows Tasks EPSON XP-312 313 315 Series Update 6AFC5C38-E427-4C18-A613-15CA4120664F .job => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE : / EXE: 6AFC5C38-E427-4C18-A613-15CA4120664F / F: UpdateSYSTEMĊ Recherche les mises à jour du logiciel EPSON et vous avertit lorsque des mises à jour sont disponibles.Si cette tâche est désactivée ou arrêtée, votre logiciel EPSON ne sera pas automatiquement mis à jour date.Thi\nTâche: C: Windows Tasks EPSON XP-312 313 315 Series Update E25A4D64-F87D-4249-99D5-CFF2F8F8E6DF .job => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE : / EXE: E25A4D64-F87D-4249-99D5-CFF2F8F8E6DF / F: UpdateSYSTEMĊ Recherche les mises à jour du logiciel EPSON et vous avertit lorsque des mises à jour sont disponibles. Si cette tâche est désactivée ou arrêtée, votre logiciel EPSON ne sera pas automatiquement tenu à jour. date.Thi
"},{"id":"text-13","type":"text","heading":"","plain_text":"==================== Internet (liste blanche) ====================","html":"==================== Internet (liste blanche) ====================
"},{"id":"text-14","type":"text","heading":"","plain_text":"(Si un élément est inclus dans la liste de correctifs, s'il s'agit d'un élément du registre, il sera supprimé ou restauré par défaut.)","html":"(Si un élément est inclus dans la liste de correctifs, s'il s'agit d'un élément du registre, il sera supprimé ou restauré par défaut.)
"},{"id":"text-15","type":"text","heading":"","plain_text":"Winsock: Catalog5 07 C: Program Files (x86) Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [145280 2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nWinsock: Catalog5 08 C: Program Files (x86) Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [145280 2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nWinsock: Catalog5-x64 07 C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [171392 2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nWinsock: Catalog5-x64 08 C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [171392 2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nTcpip Paramètres: [DhcpNameServer] 194.168.4.100 194.168.8.100\nTcpip .. Interfaces 0EF91A76-19E2-4548-BB51-E60CD7106D02: [DhcpNameServer] 192.168.0.1\nTcpip .. Interfaces 3EFC82CC-B91A-4C1E-B521-C2B94DC80088: [DhcpNameServer] 194.168.4.100 194.168.8.100\nTcpip .. Interfaces 49233639-7CE3-4A19-9C9C-58E97178E1DA: [DhcpNameServer] 194.168.4.100 194.168.8.100\nTcpip .. Interfaces C05787A9-9258-4705-B63A-09E187B553B7: [DhcpNameServer] 192.168.42.129\nTcpip .. Interfaces E302DF92-CA2E-4BE6-BBDF-9847BF0E7A4F: [DhcpNameServer] 192.168.42.129","html":"Winsock: Catalog5 07 C: Program Files (x86) Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [145280 2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nWinsock: Catalog5 08 C: Program Files (x86) Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [145280 2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nWinsock: Catalog5-x64 07 C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [171392 2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nWinsock: Catalog5-x64 08 C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [171392 2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nTcpip Paramètres: [DhcpNameServer] 194.168.4.100 194.168.8.100\nTcpip .. Interfaces 0EF91A76-19E2-4548-BB51-E60CD7106D02: [DhcpNameServer] 192.168.0.1\nTcpip .. Interfaces 3EFC82CC-B91A-4C1E-B521-C2B94DC80088: [DhcpNameServer] 194.168.4.100 194.168.8.100\nTcpip .. Interfaces 49233639-7CE3-4A19-9C9C-58E97178E1DA: [DhcpNameServer] 194.168.4.100 194.168.8.100\nTcpip .. Interfaces C05787A9-9258-4705-B63A-09E187B553B7: [DhcpNameServer] 192.168.42.129\nTcpip .. Interfaces E302DF92-CA2E-4BE6-BBDF-9847BF0E7A4F: [DhcpNameServer] 192.168.42.129
"},{"id":"text-16","type":"text","heading":"","plain_text":"Internet Explorer:\n==================\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 Software Microsoft Internet Explorer Main, page de démarrage = hxxp: //uk.search.yahoo.com/? Type = 714647 & fr = spigot-yhp -c'est à dire\nSearchScopes: HKLM -> DefaultScope 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = AARTDF & pc = MAAR & src = IE-SearchBox\nSearchScopes: HKLM -> 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = AARTDF & pc = MAAR & src = IE-SearchBox\nSearchScopes: HKLM-x32 -> DefaultScope 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = AARTDF & pc = MAAR & src = IE-SearchBox\nSearchScopes: HKLM-x32 -> 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = AARTDF & pc = MAAR & src = IE-SearchBox\nSearchScopes: HKU .DEFAULT -> DefaultScope 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nSearchScopes: HKU .DEFAULT -> 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nSearchScopes: HKU S-1-5-21-1536202438-368462837-3654654372-1001 -> DefaultScope 6F10B82E-F8E1-488B-AFF0-66E6D7950E71 URL = hxxps: //uk.search.yahoo.com/search? Fr = chr-greentree_ie & ei = utf-8 & ilc = 12 & type = 714647 & p = searchTerms\nSearchScopes: HKU S-1-5-21-1536202438-368462837-3654654372-1001 -> 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nSearchScopes: HKU S-1-5-21-1536202438-368462837-3654654372-1001 -> 0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9 URL = hxxp: //www1.delta-search.com/? Q = searchTerms & affID = 119776 & tt = gc_ & babsrc = SP_ss & mntrId = 0A75EC55F940E88A\nSearchScopes: HKU S-1-5-21-1536202438-368462837-3654654372-1001 -> 6F10B82E-F8E1-488B-AFF0-66E6D7950E71 URL = hxxps: //uk.search.yahoo.com/search? Fr = chr-greentree_ie & ei = utf-8 & ilc = 12 & type = 714647 & p = searchTerms\nSearchScopes: HKU S-1-5-21-1536202438-368462837-3654654372-1001 -> 7405AE7F-13A6-4266-A4B2-512B544AACDB URL = hxxp: //uk.search.yahoo.com/search? Fr = chr-greentree_ie & ei = utf-8 & ilc = 12 & type = 714647 & p = searchTerms\nSearchScopes: HKU S-1-5-21-1536202438-368462837-3654654372-1001 -> 99209B94-587D-42C2-A3CA-F72D0A76A2F6 URL = hxxp: //www.bing.com/search? Q = searchTerms & r = 503\nBHO: Aide à la connexion Windows Live ID -> 9030D464-4C02-4ABF-8ECC-5164760863C6 -> C: Program Files Fichiers communs Microsoft Shared Windows Live WindowsLiveLogin.dll [2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nBHO: McAfee WebAdvisor -> B164E929-A1B6-4A06-B104-2CD0E90A88FF -> C: Program Files McAfee WebAdvisor x64 IEPlugin.dll [2020-04-08] (McAfee, LLC -> McAfee, LLC)\nBHO-x32: Java ™ Plug-In SSV Helper -> 761497BB-D6F0-462C-B6EB-D4DAF1D92D43 -> C: Program Files (x86) Java jre1.8.0_171 bin ssv.dll [2018-04-24] (Oracle America, Inc. -> Oracle Corporation)\nBHO-x32: Aide à la connexion Windows Live ID -> 9030D464-4C02-4ABF-8ECC-5164760863C6 -> C: Program Files (x86) Common Files Microsoft Shared Windows Live WindowsLiveLogin.dll [2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nBHO-x32: McAfee WebAdvisor -> B164E929-A1B6-4A06-B104-2CD0E90A88FF -> C: Program Files McAfee WebAdvisor win32 IEPlugin.dll [2020-04-08] (McAfee, LLC -> McAfee, LLC)\nBHO-x32: Java ™ Plug-In 2 SSV Helper -> DBC80044-A445-435b-BC74-9C25C1C588A9 -> C: Program Files (x86) Java jre1.8.0_171 bin jp2ssv.dll [2018-04-24] (Oracle America, Inc. -> Oracle Corporation)\nRestauration de session IE: HKU S-1-5-21-1536202438-368462837-3654654372-1001 -> est activé.\nDPF: HKLM AA570693-00E2-4907-B6F1-60A1199B030C hxxps: //juniper.net/dana-cached/sc/JuniperSetupClient64.cab\nDPF: HKLM-x32 E5F5D008-DD2C-4D32-977D-1A0ADF03058B hxxps: //juniper.net/dana-cached/setup/JuniperSetupSP1.cab\nDPF: HKLM-x32 F27237D7-93C8-44C2-AC6E-D6057B9A918F hxxps: //juniper.net/dana-cached/sc/JuniperSetupClient.cab\nGestionnaire: skype4com – FFC8B962-9B40-4DFF-9458-1830C7DD7F5D – Aucun fichier\nFilter-x32: application / x-ica – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = euc-jp – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = ISO-8859-1 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = MS936 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = MS949 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = MS950 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = UTF-8 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = UTF8 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = euc-jp – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = ISO-8859-1 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = MS936 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = MS949 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = MS950 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = UTF-8 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = UTF8 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: ica – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)","html":"Internet Explorer:\n==================\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 Software Microsoft Internet Explorer Main, page de démarrage = hxxp: //uk.search.yahoo.com/? Type = 714647 & fr = spigot-yhp -c'est à dire\nSearchScopes: HKLM -> DefaultScope 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = AARTDF & pc = MAAR & src = IE-SearchBox\nSearchScopes: HKLM -> 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = AARTDF & pc = MAAR & src = IE-SearchBox\nSearchScopes: HKLM-x32 -> DefaultScope 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = AARTDF & pc = MAAR & src = IE-SearchBox\nSearchScopes: HKLM-x32 -> 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = AARTDF & pc = MAAR & src = IE-SearchBox\nSearchScopes: HKU .DEFAULT -> DefaultScope 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nSearchScopes: HKU .DEFAULT -> 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nSearchScopes: HKU S-1-5-21-1536202438-368462837-3654654372-1001 -> DefaultScope 6F10B82E-F8E1-488B-AFF0-66E6D7950E71 URL = hxxps: //uk.search.yahoo.com/search? Fr = chr-greentree_ie & ei = utf-8 & ilc = 12 & type = 714647 & p = searchTerms\nSearchScopes: HKU S-1-5-21-1536202438-368462837-3654654372-1001 -> 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nSearchScopes: HKU S-1-5-21-1536202438-368462837-3654654372-1001 -> 0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9 URL = hxxp: //www1.delta-search.com/? Q = searchTerms & affID = 119776 & tt = gc_ & babsrc = SP_ss & mntrId = 0A75EC55F940E88A\nSearchScopes: HKU S-1-5-21-1536202438-368462837-3654654372-1001 -> 6F10B82E-F8E1-488B-AFF0-66E6D7950E71 URL = hxxps: //uk.search.yahoo.com/search? Fr = chr-greentree_ie & ei = utf-8 & ilc = 12 & type = 714647 & p = searchTerms\nSearchScopes: HKU S-1-5-21-1536202438-368462837-3654654372-1001 -> 7405AE7F-13A6-4266-A4B2-512B544AACDB URL = hxxp: //uk.search.yahoo.com/search? Fr = chr-greentree_ie & ei = utf-8 & ilc = 12 & type = 714647 & p = searchTerms\nSearchScopes: HKU S-1-5-21-1536202438-368462837-3654654372-1001 -> 99209B94-587D-42C2-A3CA-F72D0A76A2F6 URL = hxxp: //www.bing.com/search? Q = searchTerms & r = 503\nBHO: Aide à la connexion Windows Live ID -> 9030D464-4C02-4ABF-8ECC-5164760863C6 -> C: Program Files Fichiers communs Microsoft Shared Windows Live WindowsLiveLogin.dll [2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nBHO: McAfee WebAdvisor -> B164E929-A1B6-4A06-B104-2CD0E90A88FF -> C: Program Files McAfee WebAdvisor x64 IEPlugin.dll [2020-04-08] (McAfee, LLC -> McAfee, LLC)\nBHO-x32: Java ™ Plug-In SSV Helper -> 761497BB-D6F0-462C-B6EB-D4DAF1D92D43 -> C: Program Files (x86) Java jre1.8.0_171 bin ssv.dll [2018-04-24] (Oracle America, Inc. -> Oracle Corporation)\nBHO-x32: Aide à la connexion Windows Live ID -> 9030D464-4C02-4ABF-8ECC-5164760863C6 -> C: Program Files (x86) Common Files Microsoft Shared Windows Live WindowsLiveLogin.dll [2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nBHO-x32: McAfee WebAdvisor -> B164E929-A1B6-4A06-B104-2CD0E90A88FF -> C: Program Files McAfee WebAdvisor win32 IEPlugin.dll [2020-04-08] (McAfee, LLC -> McAfee, LLC)\nBHO-x32: Java ™ Plug-In 2 SSV Helper -> DBC80044-A445-435b-BC74-9C25C1C588A9 -> C: Program Files (x86) Java jre1.8.0_171 bin jp2ssv.dll [2018-04-24] (Oracle America, Inc. -> Oracle Corporation)\nRestauration de session IE: HKU S-1-5-21-1536202438-368462837-3654654372-1001 -> est activé.\nDPF: HKLM AA570693-00E2-4907-B6F1-60A1199B030C hxxps: //juniper.net/dana-cached/sc/JuniperSetupClient64.cab\nDPF: HKLM-x32 E5F5D008-DD2C-4D32-977D-1A0ADF03058B hxxps: //juniper.net/dana-cached/setup/JuniperSetupSP1.cab\nDPF: HKLM-x32 F27237D7-93C8-44C2-AC6E-D6057B9A918F hxxps: //juniper.net/dana-cached/sc/JuniperSetupClient.cab\nGestionnaire: skype4com – FFC8B962-9B40-4DFF-9458-1830C7DD7F5D – Aucun fichier\nFilter-x32: application / x-ica – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = euc-jp – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = ISO-8859-1 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = MS936 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = MS949 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = MS950 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = UTF-8 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = UTF8 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = euc-jp – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = ISO-8859-1 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = MS936 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = MS949 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = MS950 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = UTF-8 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = UTF8 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: ica – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
"},{"id":"text-17","type":"text","heading":"","plain_text":"FireFox:\n========\nFF DefaultProfile: xlbk4m4f.default-1485720396432\nFF ProfilePath: C: Users Daniele AppData Roaming Mozilla Firefox Profiles xlbk4m4f.default-1485720396432 [2020-04-19]\nRestauration de session FF: Mozilla Firefox Profiles xlbk4m4f.default-1485720396432 -> est activé.\nExtension FF: (Sécurité du navigateur Avira) – C: Users Daniele AppData Roaming Mozilla Firefox Profiles xlbk4m4f.default-1485720396432 Extensions abs@avira.com.xpi [2020-03-23]\nExtension FF: (Recherche et nouvel onglet par Yahoo) – C: Users Daniele AppData Roaming Mozilla Firefox Profiles xlbk4m4f.default-1485720396432 Extensions jid1-16aeif9OQIRKxA@jetpack.xpi [2019-05-16]\nPlugin FF: @ adobe.com / FlashPlayer -> C: Windows system32 Macromed Flash NPSWF64_32_0_0_303.dll [2019-12-18] (Adobe Inc. ->)\nPlugin FF: @ microsoft.com / GENUINE -> désactivé [No File]\nPlugin FF: @ Microsoft.com / NpCtrl, version = 1.0 -> C: Program Files Microsoft Silverlight 5.1.50918.0 npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @ adobe.com / FlashPlayer -> C: Windows SysWOW64 Macromed Flash NPSWF32_32_0_0_303.dll [2019-12-18] (Adobe Inc. ->)\nFF Plugin-x32: @ Citrix.com / npican -> C: Program Files (x86) Citrix ICA Client npicaN.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFF Plugin-x32: @ java.com / DTPlugin, version = 11.171.2 -> C: Program Files (x86) Java jre1.8.0_171 bin dtplugin npDeployJava1.dll [2018-04-24] (Oracle America, Inc. -> Oracle Corporation)\nFF Plugin-x32: @ java.com / JavaPlugin, version = 11.171.2 -> C: Program Files (x86) Java jre1.8.0_171 bin plugin2 npjp2.dll [2018-04-24] (Oracle America, Inc. -> Oracle Corporation)\nFF Plugin-x32: @ microsoft.com / GENUINE -> désactivé [No File]\nFF Plugin-x32: @ Microsoft.com / NpCtrl, version = 1.0 -> C: Program Files (x86) Microsoft Silverlight 5.1.50918.0 npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @ microsoft.com / SharePoint, version = 14.0 -> C: PROGRA ~ 2 MICROS ~ 4 Office14 NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @ microsoft.com / WLPG, version = 15.4.3502.0922 -> C: Program Files (x86) Windows Live Photo Gallery NPWLPG.dll [2011-05-13] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @ microsoft.com / WLPG, version = 15.4.3538.0513 -> C: Program Files (x86) Windows Live Photo Gallery NPWLPG.dll [2011-05-13] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @ videolan.org / vlc, version = 2.0.6 -> C: Program Files (x86) VideoLAN VLC npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)\nFF Plugin-x32: @ videolan.org / vlc, version = 2.1.2 -> C: Program Files (x86) VideoLAN VLC npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)\nFF Plugin-x32: @ videolan.org / vlc, version = 2.2.1 -> C: Program Files (x86) VideoLAN VLC npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)\nFF Plugin-x32: @ videolan.org / vlc, version = 2.2.6 -> C: Program Files (x86) VideoLAN VLC npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)\nFF Plugin-x32: @ videolan.org / vlc, version = 3.0.8 -> C: Program Files (x86) VideoLAN VLC npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)\nFF Plugin-x32: @ WildTangent.com / GamesAppPresenceDetector, Version = 1.0 -> C: Program Files (x86) WildTangent Games App BrowserIntegration Registered 0 NP_wtapp.dll [2013-08-06] (WildTangent Inc ->)\nFF Plugin-x32: Adobe Reader -> C: Program Files (x86) Adobe Acrobat Reader DC Reader AIR nppdf32.dll [2020-03-05] (Adobe Inc. -> Adobe Systems Inc.)\nPlugin FF HKU S-1-5-21-1536202438-368462837-3654654372-1001: @ asperasoft.com / AsperaConnect -> C: Users Daniele AppData Local Programs Aspera Aspera Connect lib 3.6. 1 npasperaweb_3.6.1.111228.dll [2015-09-11] (Aspera, Inc. -> Aspera, Inc.)\nPlugin FF HKU S-1-5-21-1536202438-368462837-3654654372-1001: @ Unity3d.com / UnityPlayer, version = 1.0 -> C: Users Daniele AppData LocalLow Unity WebPlayer Loader npUnity3D32 .dll [2015-03-27] (Unity Technologies SF -> Unity Technologies ApS)\nPlugin FF HKU S-1-5-21-1536202438-368462837-3654654372-1001: SkypeForBusinessPlugin-15.8 -> C: Users Daniele AppData Local Microsoft SkypeForBusinessPlugin 15.8.20020.400 npGatewayNpapi.dll [2015-06-15] (Microsoft Corporation -> Microsoft Corporation)\nPlugin FF HKU S-1-5-21-1536202438-368462837-3654654372-1001: SkypeForBusinessPlugin64-15.8 -> C: Users Daniele AppData Local Microsoft SkypeForBusinessPlugin 15.8.20020.400 npGatewayNpapi-x64.dll [2015-06-15] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin HKUS-1-5-21-1536202438-368462837-3654654372-1001: SkypePlugin -> C:UsersDanieleAppDataLocalSkypePlugin7.26.0.48npGatewayNpapi.dll [2016-09-22] (Microsoft Corporation -> Skype Technologies S.A.)\nFF Plugin HKUS-1-5-21-1536202438-368462837-3654654372-1001: SkypePlugin64 -> C:UsersDanieleAppDataLocalSkypePlugin7.26.0.48npGatewayNpapi-x64.dll [2016-09-22] (Microsoft Corporation -> Skype Technologies S.A.)","html":"FireFox:\n========\nFF DefaultProfile: xlbk4m4f.default-1485720396432\nFF ProfilePath: C: Users Daniele AppData Roaming Mozilla Firefox Profiles xlbk4m4f.default-1485720396432 [2020-04-19]\nRestauration de session FF: Mozilla Firefox Profiles xlbk4m4f.default-1485720396432 -> est activé.\nExtension FF: (Sécurité du navigateur Avira) – C: Users Daniele AppData Roaming Mozilla Firefox Profiles xlbk4m4f.default-1485720396432 Extensions abs@avira.com.xpi [2020-03-23]\nExtension FF: (Recherche et nouvel onglet par Yahoo) – C: Users Daniele AppData Roaming Mozilla Firefox Profiles xlbk4m4f.default-1485720396432 Extensions jid1-16aeif9OQIRKxA@jetpack.xpi [2019-05-16]\nPlugin FF: @ adobe.com / FlashPlayer -> C: Windows system32 Macromed Flash NPSWF64_32_0_0_303.dll [2019-12-18] (Adobe Inc. ->)\nPlugin FF: @ microsoft.com / GENUINE -> désactivé [No File]\nPlugin FF: @ Microsoft.com / NpCtrl, version = 1.0 -> C: Program Files Microsoft Silverlight 5.1.50918.0 npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @ adobe.com / FlashPlayer -> C: Windows SysWOW64 Macromed Flash NPSWF32_32_0_0_303.dll [2019-12-18] (Adobe Inc. ->)\nFF Plugin-x32: @ Citrix.com / npican -> C: Program Files (x86) Citrix ICA Client npicaN.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFF Plugin-x32: @ java.com / DTPlugin, version = 11.171.2 -> C: Program Files (x86) Java jre1.8.0_171 bin dtplugin npDeployJava1.dll [2018-04-24] (Oracle America, Inc. -> Oracle Corporation)\nFF Plugin-x32: @ java.com / JavaPlugin, version = 11.171.2 -> C: Program Files (x86) Java jre1.8.0_171 bin plugin2 npjp2.dll [2018-04-24] (Oracle America, Inc. -> Oracle Corporation)\nFF Plugin-x32: @ microsoft.com / GENUINE -> désactivé [No File]\nFF Plugin-x32: @ Microsoft.com / NpCtrl, version = 1.0 -> C: Program Files (x86) Microsoft Silverlight 5.1.50918.0 npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @ microsoft.com / SharePoint, version = 14.0 -> C: PROGRA ~ 2 MICROS ~ 4 Office14 NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @ microsoft.com / WLPG, version = 15.4.3502.0922 -> C: Program Files (x86) Windows Live Photo Gallery NPWLPG.dll [2011-05-13] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @ microsoft.com / WLPG, version = 15.4.3538.0513 -> C: Program Files (x86) Windows Live Photo Gallery NPWLPG.dll [2011-05-13] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @ videolan.org / vlc, version = 2.0.6 -> C: Program Files (x86) VideoLAN VLC npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)\nFF Plugin-x32: @ videolan.org / vlc, version = 2.1.2 -> C: Program Files (x86) VideoLAN VLC npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)\nFF Plugin-x32: @ videolan.org / vlc, version = 2.2.1 -> C: Program Files (x86) VideoLAN VLC npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)\nFF Plugin-x32: @ videolan.org / vlc, version = 2.2.6 -> C: Program Files (x86) VideoLAN VLC npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)\nFF Plugin-x32: @ videolan.org / vlc, version = 3.0.8 -> C: Program Files (x86) VideoLAN VLC npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)\nFF Plugin-x32: @ WildTangent.com / GamesAppPresenceDetector, Version = 1.0 -> C: Program Files (x86) WildTangent Games App BrowserIntegration Registered 0 NP_wtapp.dll [2013-08-06] (WildTangent Inc ->)\nFF Plugin-x32: Adobe Reader -> C: Program Files (x86) Adobe Acrobat Reader DC Reader AIR nppdf32.dll [2020-03-05] (Adobe Inc. -> Adobe Systems Inc.)\nPlugin FF HKU S-1-5-21-1536202438-368462837-3654654372-1001: @ asperasoft.com / AsperaConnect -> C: Users Daniele AppData Local Programs Aspera Aspera Connect lib 3.6. 1 npasperaweb_3.6.1.111228.dll [2015-09-11] (Aspera, Inc. -> Aspera, Inc.)\nPlugin FF HKU S-1-5-21-1536202438-368462837-3654654372-1001: @ Unity3d.com / UnityPlayer, version = 1.0 -> C: Users Daniele AppData LocalLow Unity WebPlayer Loader npUnity3D32 .dll [2015-03-27] (Unity Technologies SF -> Unity Technologies ApS)\nPlugin FF HKU S-1-5-21-1536202438-368462837-3654654372-1001: SkypeForBusinessPlugin-15.8 -> C: Users Daniele AppData Local Microsoft SkypeForBusinessPlugin 15.8.20020.400 npGatewayNpapi.dll [2015-06-15] (Microsoft Corporation -> Microsoft Corporation)\nPlugin FF HKU S-1-5-21-1536202438-368462837-3654654372-1001: SkypeForBusinessPlugin64-15.8 -> C: Users Daniele AppData Local Microsoft SkypeForBusinessPlugin 15.8.20020.400 npGatewayNpapi-x64.dll [2015-06-15] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin HKUS-1-5-21-1536202438-368462837-3654654372-1001: SkypePlugin -> C:UsersDanieleAppDataLocalSkypePlugin7.26.0.48npGatewayNpapi.dll [2016-09-22] (Microsoft Corporation -> Skype Technologies S.A.)\nFF Plugin HKUS-1-5-21-1536202438-368462837-3654654372-1001: SkypePlugin64 -> C:UsersDanieleAppDataLocalSkypePlugin7.26.0.48npGatewayNpapi-x64.dll [2016-09-22] (Microsoft Corporation -> Skype Technologies S.A.)
"},{"id":"text-18","type":"text","heading":"","plain_text":"Chrome: \n=======\nCHR Profile: C:UsersDanieleAppDataLocalGoogleChromeUser DataDefault [2020-04-19]\nCHR Notifications: Default -> hxxps://uk-mg42.mail.yahoo.com; hxxps://web.skype.com; hxxps://web.whatsapp.com; hxxps://www.hotukdeals.com; hxxps://www.reddit.com\nCHR HomePage: Default -> hxxp://uk.search.yahoo.com/?type=714647&fr=spigot-yhp-ch\nCHR StartupUrls: Default -> "hxxps://www.google.co.uk/"\nCHR Session Restore: Default -> is enabled.\nCHR Extension: (Presentazioni) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsaapocclcgogkmnckokdopfmhonfmgoek [2017-10-16]\nCHR Extension: (Documenti) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsaohghmighlieiainnegkcijnfilokake [2017-10-16]\nCHR Extension: (Google Drive) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsapdfllckaahabafndbhieahigkjlhalf [2015-10-21]\nCHR Extension: (YouTube) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsblpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]\nCHR Extension: (Avira Password Manager) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionscaljgklbbfbcjjanaijlacgncafpegll [2020-04-14]\nCHR Extension: (Google Search) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionscoobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]\nCHR Extension: (Fogli) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsfelcaaldnbdncclmgdcncolpebgiejap [2017-10-16]\nCHR Extension: (Documenti Google offline) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-03-17]\nCHR Extension: (AdBlock: il miglior ad-blocker di sempre) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsgighmmpiobklfepjocnamgkkbiglidom [2020-04-17]\nCHR Extension: (Lightshot (strumento per screenshot)) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsmbniclmhobmnbdlbpiphghaielnnpgdp [2020-01-31]\nCHR Extension: (Pagamenti Chrome Web Store) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsnmmhkkegccagdldgiimedpiccmgmieda [2019-10-05]\nCHR Extension: (Gmail) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionspjkljhegncpnkpknbcohdijeoejaedia [2019-05-16]\nCHR Extension: (Chrome Media Router) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionspkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-04-14]\nCHR HKLM…ChromeExtension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]\nCHR HKLM…ChromeExtension: [fheoggkfdfchfphceeifdbepaooicaho]\nCHR HKLM-x32…ChromeExtension: [caljgklbbfbcjjanaijlacgncafpegll]\nCHR HKLM-x32…ChromeExtension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]\nCHR HKLM-x32…ChromeExtension: [efaidnbmnnnibpcajpcglclefindmkaj]\nCHR HKLM-x32…ChromeExtension: [fheoggkfdfchfphceeifdbepaooicaho]\nCHR HKLM-x32…ChromeExtension: [flliilndjeohchalpbbcdekjklbdgfkk]\nCHR HKLM-x32…ChromeExtension: [ibbfklbaljofpaanmpaeadejijfdddco]\nCHR HKLM-x32…ChromeExtension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl]\nCHR HKLM-x32…ChromeExtension: [nbmafkdmkkckhggblphicnnhlgljnoje] – \nCHR HKLM-x32…ChromeExtension: [njpedbdniajflhgfoipnjkednnlkngbj]","html":"Chrome: \n=======\nCHR Profile: C:UsersDanieleAppDataLocalGoogleChromeUser DataDefault [2020-04-19]\nCHR Notifications: Default -> hxxps://uk-mg42.mail.yahoo.com; hxxps://web.skype.com; hxxps://web.whatsapp.com; hxxps://www.hotukdeals.com; hxxps://www.reddit.com\nCHR HomePage: Default -> hxxp://uk.search.yahoo.com/?type=714647&fr=spigot-yhp-ch\nCHR StartupUrls: Default -> "hxxps://www.google.co.uk/"\nCHR Session Restore: Default -> is enabled.\nCHR Extension: (Presentazioni) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsaapocclcgogkmnckokdopfmhonfmgoek [2017-10-16]\nCHR Extension: (Documenti) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsaohghmighlieiainnegkcijnfilokake [2017-10-16]\nCHR Extension: (Google Drive) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsapdfllckaahabafndbhieahigkjlhalf [2015-10-21]\nCHR Extension: (YouTube) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsblpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]\nCHR Extension: (Avira Password Manager) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionscaljgklbbfbcjjanaijlacgncafpegll [2020-04-14]\nCHR Extension: (Google Search) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionscoobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]\nCHR Extension: (Fogli) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsfelcaaldnbdncclmgdcncolpebgiejap [2017-10-16]\nCHR Extension: (Documenti Google offline) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-03-17]\nCHR Extension: (AdBlock: il miglior ad-blocker di sempre) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsgighmmpiobklfepjocnamgkkbiglidom [2020-04-17]\nCHR Extension: (Lightshot (strumento per screenshot)) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsmbniclmhobmnbdlbpiphghaielnnpgdp [2020-01-31]\nCHR Extension: (Pagamenti Chrome Web Store) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsnmmhkkegccagdldgiimedpiccmgmieda [2019-10-05]\nCHR Extension: (Gmail) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionspjkljhegncpnkpknbcohdijeoejaedia [2019-05-16]\nCHR Extension: (Chrome Media Router) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionspkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-04-14]\nCHR HKLM…ChromeExtension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]\nCHR HKLM…ChromeExtension: [fheoggkfdfchfphceeifdbepaooicaho]\nCHR HKLM-x32…ChromeExtension: [caljgklbbfbcjjanaijlacgncafpegll]\nCHR HKLM-x32…ChromeExtension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]\nCHR HKLM-x32…ChromeExtension: [efaidnbmnnnibpcajpcglclefindmkaj]\nCHR HKLM-x32…ChromeExtension: [fheoggkfdfchfphceeifdbepaooicaho]\nCHR HKLM-x32…ChromeExtension: [flliilndjeohchalpbbcdekjklbdgfkk]\nCHR HKLM-x32…ChromeExtension: [ibbfklbaljofpaanmpaeadejijfdddco]\nCHR HKLM-x32…ChromeExtension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl]\nCHR HKLM-x32…ChromeExtension: [nbmafkdmkkckhggblphicnnhlgljnoje] – \nCHR HKLM-x32…ChromeExtension: [njpedbdniajflhgfoipnjkednnlkngbj]
"},{"id":"text-19","type":"text","heading":"","plain_text":"==================== Services (Whitelisted) ===================","html":"==================== Services (Whitelisted) ===================
"},{"id":"text-20","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)","html":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
"},{"id":"text-21","type":"text","heading":"","plain_text":"S2 AntiVirMailService; C:Program Files (x86)AviraAntivirusavmailc7.exe [1209856 2020-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 AntiVirSchedulerService; C:Program Files (x86)AviraAntivirussched.exe [485960 2020-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 AntiVirService; C:Program Files (x86)AviraAntivirusavguard.exe [485960 2020-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nS2 AntiVirWebService; C:Program Files (x86)AviraAntivirusavwebg7.exe [573760 2020-03-22] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 Avira.ServiceHost; C:Program Files (x86)AviraLauncherAvira.ServiceHost.exe [634896 2020-04-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 AviraOptimizerHost; C:Program Files (x86)AviraOptimizer HostAvira.OptimizerHost.exe [2989888 2020-01-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 AviraPhantomVPN; C:Program Files (x86)AviraVPNAvira.VpnService.exe [382992 2020-03-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 AviraUpdaterService; C:Program Files (x86)AviraSoftwareUpdaterAvira.SoftwareUpdater.ServiceHost.exe [161216 2020-04-09] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nS4 EpsonScanSvc; C:Windowssystem32EscSvc64.exe [144560 2012-05-17] (SEIKO EPSON Corporation -> Seiko Epson Corporation)\nR2 EPSON_PM_RPCV4_06; C:Program FilesCommon FilesEPSONEPW!3 SSRPE_S60RPB.EXE [152640 2013-04-15] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nS3 fussvc; C:Program Files (x86)Windows Kits8.1App Certification Kitfussvc.exe [143872 2014-10-24] (Microsoft Corporation) [File not signed]\nS4 GamesAppIntegrationService; C:Program Files (x86)WildTangent GamesAppGamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent Inc -> WildTangent)\nR2 McAfee WebAdvisor; C:Program FilesMcAfeeWebAdvisorServiceHost.exe [913640 2020-04-08] (McAfee, LLC -> McAfee, LLC)\nR2 MsMpSvc; C:Program FilesMicrosoft Security ClientMsMpEng.exe [119864 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nS4 MyEpson Portal Service; C:Program Files (x86)EPSONMyEpson PortalmepService.exe [714712 2017-06-28] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)\nR3 NisSrv; C:Program FilesMicrosoft Security ClientNisSrv.exe [361816 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nS4 NTI IScheduleSvc; C:Program Files (x86)NTIAcer Backup ManagerIScheduleSvc.exe [256832 2011-04-24] (NTI Corporation -> NTI Corporation)\nS3 NvContainerLocalSystem; C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe [522688 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nS3 NvContainerNetworkService; C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe [522688 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nS4 Origin Client Service; C:Program Files (x86)OriginOriginClientService.exe [2098528 2017-08-23] (Electronic Arts, Inc. -> Electronic Arts)\nS4 Origin Web Helper Service; C:Program Files (x86)OriginOriginWebHelperService.exe [2977640 2017-08-23] (Electronic Arts, Inc. -> Electronic Arts)\nS4 OverwolfUpdater; C:Program Files (x86)OverwolfOverwolfUpdater.exe [2463064 2020-03-14] (Overwolf Ltd -> Overwolf LTD)\nR2 PnkBstrA; C:WindowsSysWOW64PnkBstrA.exe [75136 2013-05-17] (Even Balance, Inc. -> )\nS3 Te.Service; C:Program Files (x86)Windows Kits8.1TestingRuntimesTAEFWex.Services.exe [122368 2015-02-26] (Microsoft Corporation) [File not signed]\nR2 TeamViewer; C:Program Files (x86)TeamViewerTeamViewer_Service.exe [13216272 2020-03-20] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nS3 WinDefend; C:Program FilesWindows Defendermpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)\nS3 wlidsvc; C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSVC.EXE [2292096 2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nR2 NVDisplay.ContainerLocalSystem; "C:Program FilesNVIDIA CorporationDisplay.NvContainerNVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:ProgramDataNVIDIANVDisplay.ContainerLocalSystem.log" -l 3 -d "C:Program FilesNVIDIA CorporationDisplay.NvContainerpluginsLocalSystem" -r -p 30000\nR2 NvTelemetryContainer; "C:Program Files (x86)NVIDIA CorporationNvTelemetryNvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:ProgramDataNVIDIANvTelemetryContainer.log" -l 3 -d "C:Program Files (x86)NVIDIA CorporationNvTelemetryplugins" -r","html":"S2 AntiVirMailService; C:Program Files (x86)AviraAntivirusavmailc7.exe [1209856 2020-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 AntiVirSchedulerService; C:Program Files (x86)AviraAntivirussched.exe [485960 2020-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 AntiVirService; C:Program Files (x86)AviraAntivirusavguard.exe [485960 2020-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nS2 AntiVirWebService; C:Program Files (x86)AviraAntivirusavwebg7.exe [573760 2020-03-22] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 Avira.ServiceHost; C:Program Files (x86)AviraLauncherAvira.ServiceHost.exe [634896 2020-04-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 AviraOptimizerHost; C:Program Files (x86)AviraOptimizer HostAvira.OptimizerHost.exe [2989888 2020-01-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 AviraPhantomVPN; C:Program Files (x86)AviraVPNAvira.VpnService.exe [382992 2020-03-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 AviraUpdaterService; C:Program Files (x86)AviraSoftwareUpdaterAvira.SoftwareUpdater.ServiceHost.exe [161216 2020-04-09] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nS4 EpsonScanSvc; C:Windowssystem32EscSvc64.exe [144560 2012-05-17] (SEIKO EPSON Corporation -> Seiko Epson Corporation)\nR2 EPSON_PM_RPCV4_06; C:Program FilesCommon FilesEPSONEPW!3 SSRPE_S60RPB.EXE [152640 2013-04-15] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nS3 fussvc; C:Program Files (x86)Windows Kits8.1App Certification Kitfussvc.exe [143872 2014-10-24] (Microsoft Corporation) [File not signed]\nS4 GamesAppIntegrationService; C:Program Files (x86)WildTangent GamesAppGamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent Inc -> WildTangent)\nR2 McAfee WebAdvisor; C:Program FilesMcAfeeWebAdvisorServiceHost.exe [913640 2020-04-08] (McAfee, LLC -> McAfee, LLC)\nR2 MsMpSvc; C:Program FilesMicrosoft Security ClientMsMpEng.exe [119864 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nS4 MyEpson Portal Service; C:Program Files (x86)EPSONMyEpson PortalmepService.exe [714712 2017-06-28] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)\nR3 NisSrv; C:Program FilesMicrosoft Security ClientNisSrv.exe [361816 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nS4 NTI IScheduleSvc; C:Program Files (x86)NTIAcer Backup ManagerIScheduleSvc.exe [256832 2011-04-24] (NTI Corporation -> NTI Corporation)\nS3 NvContainerLocalSystem; C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe [522688 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nS3 NvContainerNetworkService; C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe [522688 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nS4 Origin Client Service; C:Program Files (x86)OriginOriginClientService.exe [2098528 2017-08-23] (Electronic Arts, Inc. -> Electronic Arts)\nS4 Origin Web Helper Service; C:Program Files (x86)OriginOriginWebHelperService.exe [2977640 2017-08-23] (Electronic Arts, Inc. -> Electronic Arts)\nS4 OverwolfUpdater; C:Program Files (x86)OverwolfOverwolfUpdater.exe [2463064 2020-03-14] (Overwolf Ltd -> Overwolf LTD)\nR2 PnkBstrA; C:WindowsSysWOW64PnkBstrA.exe [75136 2013-05-17] (Even Balance, Inc. -> )\nS3 Te.Service; C:Program Files (x86)Windows Kits8.1TestingRuntimesTAEFWex.Services.exe [122368 2015-02-26] (Microsoft Corporation) [File not signed]\nR2 TeamViewer; C:Program Files (x86)TeamViewerTeamViewer_Service.exe [13216272 2020-03-20] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nS3 WinDefend; C:Program FilesWindows Defendermpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)\nS3 wlidsvc; C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSVC.EXE [2292096 2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nR2 NVDisplay.ContainerLocalSystem; "C:Program FilesNVIDIA CorporationDisplay.NvContainerNVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:ProgramDataNVIDIANVDisplay.ContainerLocalSystem.log" -l 3 -d "C:Program FilesNVIDIA CorporationDisplay.NvContainerpluginsLocalSystem" -r -p 30000\nR2 NvTelemetryContainer; "C:Program Files (x86)NVIDIA CorporationNvTelemetryNvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:ProgramDataNVIDIANvTelemetryContainer.log" -l 3 -d "C:Program Files (x86)NVIDIA CorporationNvTelemetryplugins" -r
"},{"id":"text-22","type":"text","heading":"","plain_text":"===================== Drivers (Whitelisted) ===================","html":"===================== Drivers (Whitelisted) ===================
"},{"id":"text-23","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)","html":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
"},{"id":"text-24","type":"text","heading":"","plain_text":"R3 athr; C:WindowsSystem32DRIVERSathrx.sys [2755584 2011-07-19] (Microsoft Windows Hardware Compatibility Publisher -> Atheros Communications, Inc.)\nR0 avdevprot; C:WindowsSystem32DRIVERSavdevprot.sys [68152 2019-06-07] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 avgntflt; C:WindowsSystem32DRIVERSavgntflt.sys [223744 2020-03-27] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR1 avipbb; C:WindowsSystem32DRIVERSavipbb.sys [177376 2020-04-06] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR1 avkmgr; C:WindowsSystem32DRIVERSavkmgr.sys [36072 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 avnetflt; C:WindowsSystem32DRIVERSavnetflt.sys [78600 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR0 avusbflt; C:WindowsSystem32Driversavusbflt.sys [35376 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR1 dtsoftbus01; C:WindowsSystem32DRIVERSdtsoftbus01.sys [283064 2013-12-07] (Disc Soft Ltd -> Disc Soft Ltd)\nR2 LdBoxDrv; C:Program Filesdnplayerext2LdBoxDrv.sys [319376 2019-12-18] (Shanghai Changzhi Network Technology Co., Ltd. -> Oracle Corporation)\nR2 LdVBoxDrv; C:Program FilesldplayerboxLdVBoxDrv.sys [319376 2020-03-25] (Shanghai Changzhi Network Technology Co., Ltd. -> Oracle Corporation)\nR0 MpFilter; C:WindowsSystem32DRIVERSMpFilter.sys [295000 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)\nS3 MYFAULT; C:Windowssystem32driversmyfault.sys [25392 2018-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Sysinternals)\nR3 NisDrv; C:WindowsSystem32DRIVERSNisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)\nR3 nusb3hub; C:Windowssystem32driversnusb3hub.sys [82432 2011-02-10] (Microsoft Windows Hardware Compatibility Publisher -> Renesas Electronics Corporation)\nR3 nusb3xhc; C:Windowssystem32driversnusb3xhc.sys [181760 2011-02-10] (Microsoft Windows Hardware Compatibility Publisher -> Renesas Electronics Corporation)\nS3 NvStreamKms; C:Program FilesNVIDIA CorporationNvStreamSrvNvStreamKms.sys [31168 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 nvvad_WaveExtensible; C:WindowsSystem32driversnvvad64v.sys [59240 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 nvvhci; C:WindowsSystem32DRIVERSnvvhci.sys [58816 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 phantomtap; C:WindowsSystem32DRIVERSphantomtap.sys [35664 2020-03-18] (Avira Operations GmbH & Co. KG -> The OpenVPN Project)\nS3 rtux64w7; C:WindowsSystem32DRIVERSrtux64w7.sys [328448 2016-08-19] (Realtek Semiconductor Corp -> Realtek )\nS4 secdrv; C:WindowsSysWow64Driverssecdrv.sys [11973 2017-06-06] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [File not signed]\nR0 sptd; C:WindowsSystem32Driverssptd.sys [381440 2013-12-07] (Disc Soft Ltd -> Duplex Secure Ltd.)","html":"R3 athr; C:WindowsSystem32DRIVERSathrx.sys [2755584 2011-07-19] (Microsoft Windows Hardware Compatibility Publisher -> Atheros Communications, Inc.)\nR0 avdevprot; C:WindowsSystem32DRIVERSavdevprot.sys [68152 2019-06-07] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 avgntflt; C:WindowsSystem32DRIVERSavgntflt.sys [223744 2020-03-27] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR1 avipbb; C:WindowsSystem32DRIVERSavipbb.sys [177376 2020-04-06] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR1 avkmgr; C:WindowsSystem32DRIVERSavkmgr.sys [36072 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 avnetflt; C:WindowsSystem32DRIVERSavnetflt.sys [78600 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR0 avusbflt; C:WindowsSystem32Driversavusbflt.sys [35376 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR1 dtsoftbus01; C:WindowsSystem32DRIVERSdtsoftbus01.sys [283064 2013-12-07] (Disc Soft Ltd -> Disc Soft Ltd)\nR2 LdBoxDrv; C:Program Filesdnplayerext2LdBoxDrv.sys [319376 2019-12-18] (Shanghai Changzhi Network Technology Co., Ltd. -> Oracle Corporation)\nR2 LdVBoxDrv; C:Program FilesldplayerboxLdVBoxDrv.sys [319376 2020-03-25] (Shanghai Changzhi Network Technology Co., Ltd. -> Oracle Corporation)\nR0 MpFilter; C:WindowsSystem32DRIVERSMpFilter.sys [295000 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)\nS3 MYFAULT; C:Windowssystem32driversmyfault.sys [25392 2018-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Sysinternals)\nR3 NisDrv; C:WindowsSystem32DRIVERSNisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)\nR3 nusb3hub; C:Windowssystem32driversnusb3hub.sys [82432 2011-02-10] (Microsoft Windows Hardware Compatibility Publisher -> Renesas Electronics Corporation)\nR3 nusb3xhc; C:Windowssystem32driversnusb3xhc.sys [181760 2011-02-10] (Microsoft Windows Hardware Compatibility Publisher -> Renesas Electronics Corporation)\nS3 NvStreamKms; C:Program FilesNVIDIA CorporationNvStreamSrvNvStreamKms.sys [31168 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 nvvad_WaveExtensible; C:WindowsSystem32driversnvvad64v.sys [59240 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 nvvhci; C:WindowsSystem32DRIVERSnvvhci.sys [58816 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 phantomtap; C:WindowsSystem32DRIVERSphantomtap.sys [35664 2020-03-18] (Avira Operations GmbH & Co. KG -> The OpenVPN Project)\nS3 rtux64w7; C:WindowsSystem32DRIVERSrtux64w7.sys [328448 2016-08-19] (Realtek Semiconductor Corp -> Realtek )\nS4 secdrv; C:WindowsSysWow64Driverssecdrv.sys [11973 2017-06-06] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [File not signed]\nR0 sptd; C:WindowsSystem32Driverssptd.sys [381440 2013-12-07] (Disc Soft Ltd -> Duplex Secure Ltd.)
"},{"id":"text-25","type":"text","heading":"","plain_text":"==================== NetSvcs (Whitelisted) ===================","html":"==================== NetSvcs (Whitelisted) ===================
"},{"id":"text-26","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)","html":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
"},{"id":"text-27","type":"text","heading":"","plain_text":"==================== One month (created) ===================","html":"==================== One month (created) ===================
"},{"id":"text-28","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, the file/folder will be moved.)","html":"(If an entry is included in the fixlist, the file/folder will be moved.)
"},{"id":"text-29","type":"text","heading":"","plain_text":"2020-04-19 14:36 – 2020-04-19 14:36 – 000000000 ____D C:UsersDanieleDownloadsFRST-OlderVersion\n2020-04-18 14:29 – 2020-04-18 14:29 – 000062792 _____ C:ProgramDataagent.uninstall.1587216527.bdinstall.v2.bin\n2020-04-17 00:37 – 2020-04-17 00:46 – 000072692 _____ C:UsersDanieleDownloadsAddition.txt\n2020-04-17 00:28 – 2020-04-19 14:41 – 000045553 _____ C:UsersDanieleDownloadsFRST.txt\n2020-04-17 00:22 – 2020-04-19 14:40 – 000000000 ____D C:FRST\n2020-04-17 00:21 – 2020-04-19 14:36 – 002281984 _____ (Farbar) C:UsersDanieleDownloadsFRST64.exe\n2020-04-16 23:30 – 2020-04-16 23:30 – 000013738 _____ C:UsersDanieleDesktophijackthis2\n2020-04-16 22:55 – 2020-04-18 14:29 – 000000000 ____D C:Program FilesBitdefender Agent\n2020-04-16 22:55 – 2020-04-16 22:55 – 000102692 _____ C:ProgramDataagent.1587074131.bdinstall.v2.bin\n2020-04-16 22:55 – 2020-04-16 22:55 – 000000000 ____D C:ProgramDataBitdefender Agent\n2020-04-16 22:53 – 2020-04-16 22:53 – 010527368 _____ C:UsersDanieleDownloadsbitdefender_online.exe\n2020-04-16 22:40 – 2020-04-16 22:40 – 000000000 ____D C:ProgramDataUbisoft\n2020-04-16 22:11 – 2020-04-16 22:11 – 000388608 _____ (Trend Micro Inc.) C:UsersDanieleDownloadsHijackThis.exe\n2020-04-15 17:17 – 2020-04-15 17:17 – 000000219 _____ C:UsersDanieleDesktopCounter-Strike Global Offensive.url\n2020-04-10 00:18 – 2020-04-10 00:18 – 004342776 _____ (Avira Operations GmbH & Co. KG) C:UsersDanieleDownloadsavira_en_sptl1_1609235037-1586472637__phpws-spotlight-release (1).exe\n2020-04-10 00:16 – 2020-04-10 00:16 – 000003292 _____ C:Windowssystem32TasksAvira_Antivirus_Systray\n2020-04-10 00:15 – 2020-04-06 21:13 – 000177376 _____ (Avira Operations GmbH & Co. KG) C:Windowssystem32Driversavipbb.sys\n2020-04-10 00:15 – 2020-03-27 12:48 – 000223744 _____ (Avira Operations GmbH & Co. KG) C:Windowssystem32Driversavgntflt.sys\n2020-04-10 00:15 – 2019-06-07 15:09 – 000068152 _____ (Avira Operations GmbH & Co. KG) C:Windowssystem32Driversavdevprot.sys\n2020-04-10 00:15 – 2019-03-20 19:50 – 000078600 _____ (Avira Operations GmbH & Co. KG) C:Windowssystem32Driversavnetflt.sys\n2020-04-10 00:15 – 2019-03-20 19:50 – 000036072 _____ (Avira Operations GmbH & Co. KG) C:Windowssystem32Driversavkmgr.sys\n2020-04-10 00:15 – 2019-03-20 19:50 – 000035376 _____ (Avira Operations GmbH & Co. KG) C:Windowssystem32Driversavusbflt.sys\n2020-04-09 23:54 – 2020-04-09 23:55 – 000000000 ____D C:UsersPublicSpeedup Sessions\n2020-04-09 23:54 – 2020-04-09 23:54 – 000003668 _____ C:Windowssystem32TasksAviraSystemSpeedupUpdate\n2020-04-09 23:53 – 2020-04-15 08:51 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsAvira\n2020-04-09 23:53 – 2020-04-09 23:53 – 000001192 _____ C:UsersPublicDesktopAvira.lnk\n2020-04-09 23:53 – 2020-04-09 23:53 – 000001192 _____ C:ProgramDataDesktopAvira.lnk\n2020-04-09 23:50 – 2020-04-09 23:50 – 004342776 _____ (Avira Operations GmbH & Co. KG) C:UsersDanieleDownloadsavira_en_sptl1_1609235037-1586472637__phpws-spotlight-release.exe\n2020-04-09 23:08 – 2020-04-09 23:08 – 003318440 _____ (Dominik Reichl ) C:UsersDanieleDownloadsKeePass-2.44-Setup.exe\n2020-04-03 01:24 – 2020-04-03 01:24 – 000000000 ____D C:UsersDanieleAppDataLocalLowObsidian Entertainment\n2020-04-02 22:10 – 2020-04-02 22:10 – 000000222 _____ C:UsersDanieleDesktopPillars of Eternity.url\n2020-03-30 19:29 – 2020-03-30 19:29 – 000076137 _____ C:UsersDanieleDownloadseContract.pdf\n2020-03-26 17:50 – 2020-03-26 18:04 – 000000000 ____D C:UsersDanieleDesktopRee Accident Claim\n2020-03-25 23:46 – 2020-04-04 11:49 – 000000000 ____D C:UsersDaniele.Ld2VirtualBox\n2020-03-25 23:45 – 2020-03-25 23:45 – 000000671 _____ C:UsersDanieleDesktopLDMultiPlayer4.lnk\n2020-03-25 23:45 – 2020-03-25 23:45 – 000000671 _____ C:UsersDanieleAppDataRoamingMicrosoftWindowsStart MenuLDMultiPlayer4.lnk\n2020-03-25 23:45 – 2020-03-25 23:45 – 000000656 _____ C:UsersDanieleDesktopLDPlayer4.lnk\n2020-03-25 23:45 – 2020-03-25 23:45 – 000000656 _____ C:UsersDanieleAppDataRoamingMicrosoftWindowsStart MenuLDPlayer4.lnk\n2020-03-25 23:45 – 2020-03-25 23:45 – 000000000 ____D C:UsersDanieleAppDataRoamingMicrosoftWindowsStart MenuProgramsLDPlayer4\n2020-03-25 23:44 – 2020-03-25 23:45 – 000000000 ____D C:Program Filesldplayerbox\n2020-03-25 23:44 – 2020-03-25 23:44 – 000000000 ____D C:UsersDanieleDocumentsXuanZhi\n2020-03-25 23:43 – 2020-03-25 23:43 – 000000000 ____D C:Program FilesMcAfee\n2020-03-25 23:42 – 2020-03-25 23:42 – 000284010 _____ C:UsersDanieleAppDataRoamingm47_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt\n2020-03-25 23:42 – 2020-03-25 23:42 – 000000000 ____D C:UsersDanieleDownloads2cep\n2020-03-25 23:41 – 2020-03-25 23:46 – 000000000 ____D C:UsersDanieleAppDataRoamingXuanZhi\n2020-03-25 23:41 – 2020-03-25 23:41 – 002931392 _____ (XUANZHI INTERNATIONAL CO., LIMITED) C:UsersDanieleDownloadsLDPlayer_ens_3020_ld.exe\n2020-03-25 23:41 – 2020-03-25 23:41 – 002931392 _____ (XUANZHI INTERNATIONAL CO., LIMITED) C:UsersDanieleDownloadsLDPlayer_ens_3020_ld (1).exe","html":"2020-04-19 14:36 – 2020-04-19 14:36 – 000000000 ____D C:UsersDanieleDownloadsFRST-OlderVersion\n2020-04-18 14:29 – 2020-04-18 14:29 – 000062792 _____ C:ProgramDataagent.uninstall.1587216527.bdinstall.v2.bin\n2020-04-17 00:37 – 2020-04-17 00:46 – 000072692 _____ C:UsersDanieleDownloadsAddition.txt\n2020-04-17 00:28 – 2020-04-19 14:41 – 000045553 _____ C:UsersDanieleDownloadsFRST.txt\n2020-04-17 00:22 – 2020-04-19 14:40 – 000000000 ____D C:FRST\n2020-04-17 00:21 – 2020-04-19 14:36 – 002281984 _____ (Farbar) C:UsersDanieleDownloadsFRST64.exe\n2020-04-16 23:30 – 2020-04-16 23:30 – 000013738 _____ C:UsersDanieleDesktophijackthis2\n2020-04-16 22:55 – 2020-04-18 14:29 – 000000000 ____D C:Program FilesBitdefender Agent\n2020-04-16 22:55 – 2020-04-16 22:55 – 000102692 _____ C:ProgramDataagent.1587074131.bdinstall.v2.bin\n2020-04-16 22:55 – 2020-04-16 22:55 – 000000000 ____D C:ProgramDataBitdefender Agent\n2020-04-16 22:53 – 2020-04-16 22:53 – 010527368 _____ C:UsersDanieleDownloadsbitdefender_online.exe\n2020-04-16 22:40 – 2020-04-16 22:40 – 000000000 ____D C:ProgramDataUbisoft\n2020-04-16 22:11 – 2020-04-16 22:11 – 000388608 _____ (Trend Micro Inc.) C:UsersDanieleDownloadsHijackThis.exe\n2020-04-15 17:17 – 2020-04-15 17:17 – 000000219 _____ C:UsersDanieleDesktopCounter-Strike Global Offensive.url\n2020-04-10 00:18 – 2020-04-10 00:18 – 004342776 _____ (Avira Operations GmbH & Co. KG) C:UsersDanieleDownloadsavira_en_sptl1_1609235037-1586472637__phpws-spotlight-release (1).exe\n2020-04-10 00:16 – 2020-04-10 00:16 – 000003292 _____ C:Windowssystem32TasksAvira_Antivirus_Systray\n2020-04-10 00:15 – 2020-04-06 21:13 – 000177376 _____ (Avira Operations GmbH & Co. KG) C:Windowssystem32Driversavipbb.sys\n2020-04-10 00:15 – 2020-03-27 12:48 – 000223744 _____ (Avira Operations GmbH & Co. KG) C:Windowssystem32Driversavgntflt.sys\n2020-04-10 00:15 – 2019-06-07 15:09 – 000068152 _____ (Avira Operations GmbH & Co. KG) C:Windowssystem32Driversavdevprot.sys\n2020-04-10 00:15 – 2019-03-20 19:50 – 000078600 _____ (Avira Operations GmbH & Co. KG) C:Windowssystem32Driversavnetflt.sys\n2020-04-10 00:15 – 2019-03-20 19:50 – 000036072 _____ (Avira Operations GmbH & Co. KG) C:Windowssystem32Driversavkmgr.sys\n2020-04-10 00:15 – 2019-03-20 19:50 – 000035376 _____ (Avira Operations GmbH & Co. KG) C:Windowssystem32Driversavusbflt.sys\n2020-04-09 23:54 – 2020-04-09 23:55 – 000000000 ____D C:UsersPublicSpeedup Sessions\n2020-04-09 23:54 – 2020-04-09 23:54 – 000003668 _____ C:Windowssystem32TasksAviraSystemSpeedupUpdate\n2020-04-09 23:53 – 2020-04-15 08:51 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsAvira\n2020-04-09 23:53 – 2020-04-09 23:53 – 000001192 _____ C:UsersPublicDesktopAvira.lnk\n2020-04-09 23:53 – 2020-04-09 23:53 – 000001192 _____ C:ProgramDataDesktopAvira.lnk\n2020-04-09 23:50 – 2020-04-09 23:50 – 004342776 _____ (Avira Operations GmbH & Co. KG) C:UsersDanieleDownloadsavira_en_sptl1_1609235037-1586472637__phpws-spotlight-release.exe\n2020-04-09 23:08 – 2020-04-09 23:08 – 003318440 _____ (Dominik Reichl ) C:UsersDanieleDownloadsKeePass-2.44-Setup.exe\n2020-04-03 01:24 – 2020-04-03 01:24 – 000000000 ____D C:UsersDanieleAppDataLocalLowObsidian Entertainment\n2020-04-02 22:10 – 2020-04-02 22:10 – 000000222 _____ C:UsersDanieleDesktopPillars of Eternity.url\n2020-03-30 19:29 – 2020-03-30 19:29 – 000076137 _____ C:UsersDanieleDownloadseContract.pdf\n2020-03-26 17:50 – 2020-03-26 18:04 – 000000000 ____D C:UsersDanieleDesktopRee Accident Claim\n2020-03-25 23:46 – 2020-04-04 11:49 – 000000000 ____D C:UsersDaniele.Ld2VirtualBox\n2020-03-25 23:45 – 2020-03-25 23:45 – 000000671 _____ C:UsersDanieleDesktopLDMultiPlayer4.lnk\n2020-03-25 23:45 – 2020-03-25 23:45 – 000000671 _____ C:UsersDanieleAppDataRoamingMicrosoftWindowsStart MenuLDMultiPlayer4.lnk\n2020-03-25 23:45 – 2020-03-25 23:45 – 000000656 _____ C:UsersDanieleDesktopLDPlayer4.lnk\n2020-03-25 23:45 – 2020-03-25 23:45 – 000000656 _____ C:UsersDanieleAppDataRoamingMicrosoftWindowsStart MenuLDPlayer4.lnk\n2020-03-25 23:45 – 2020-03-25 23:45 – 000000000 ____D C:UsersDanieleAppDataRoamingMicrosoftWindowsStart MenuProgramsLDPlayer4\n2020-03-25 23:44 – 2020-03-25 23:45 – 000000000 ____D C:Program Filesldplayerbox\n2020-03-25 23:44 – 2020-03-25 23:44 – 000000000 ____D C:UsersDanieleDocumentsXuanZhi\n2020-03-25 23:43 – 2020-03-25 23:43 – 000000000 ____D C:Program FilesMcAfee\n2020-03-25 23:42 – 2020-03-25 23:42 – 000284010 _____ C:UsersDanieleAppDataRoamingm47_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt\n2020-03-25 23:42 – 2020-03-25 23:42 – 000000000 ____D C:UsersDanieleDownloads2cep\n2020-03-25 23:41 – 2020-03-25 23:46 – 000000000 ____D C:UsersDanieleAppDataRoamingXuanZhi\n2020-03-25 23:41 – 2020-03-25 23:41 – 002931392 _____ (XUANZHI INTERNATIONAL CO., LIMITED) C:UsersDanieleDownloadsLDPlayer_ens_3020_ld.exe\n2020-03-25 23:41 – 2020-03-25 23:41 – 002931392 _____ (XUANZHI INTERNATIONAL CO., LIMITED) C:UsersDanieleDownloadsLDPlayer_ens_3020_ld (1).exe
"},{"id":"text-30","type":"text","heading":"","plain_text":"==================== One month (modified) ==================","html":"==================== One month (modified) ==================
"},{"id":"text-31","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, the file/folder will be moved.)","html":"(If an entry is included in the fixlist, the file/folder will be moved.)
"},{"id":"text-32","type":"text","heading":"","plain_text":"2020-04-19 14:47 – 2014-02-28 19:48 – 000000000 ____D C:UsersDanieleAppDataLocalBattle.net\n2020-04-19 14:28 – 2017-01-29 20:15 – 000000000 ____D C:UsersDanieleAppDataLocalLowMozilla\n2020-04-19 14:27 – 2019-01-30 14:34 – 000000000 ____D C:UsersDanieleAppDataRoamingDiscord\n2020-04-19 13:50 – 2018-10-22 17:50 – 000000911 _____ C:WindowsTasksEPSON XP-312 313 315 Series Update E25A4D64-F87D-4249-99D5-CFF2F8F8E6DF.job\n2020-04-19 13:50 – 2018-10-22 17:50 – 000000911 _____ C:WindowsTasksEPSON XP-312 313 315 Series Update 6AFC5C38-E427-4C18-A613-15CA4120664F.job\n2020-04-19 13:50 – 2018-10-22 17:50 – 000000725 _____ C:WindowsTasksEPSON XP-312 313 315 Series Invitation E25A4D64-F87D-4249-99D5-CFF2F8F8E6DF.job\n2020-04-19 13:50 – 2018-10-22 17:50 – 000000725 _____ C:WindowsTasksEPSON XP-312 313 315 Series Invitation 6AFC5C38-E427-4C18-A613-15CA4120664F.job\n2020-04-19 12:25 – 2018-07-01 20:59 – 000000000 ____D C:ProgramDataNVIDIA\n2020-04-19 03:56 – 2009-07-14 05:45 – 000016976 ____H C:Windowssystem327B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0\n2020-04-19 03:56 – 2009-07-14 05:45 – 000016976 ____H C:Windowssystem327B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0\n2020-04-19 03:19 – 2018-03-26 22:41 – 000000000 ____D C:UsersDanieleAppDataRoamingHearthstoneDeckTracker\n2020-04-18 20:55 – 2018-03-26 22:41 – 000002512 _____ C:UsersDanieleDesktopHearthstone Deck Tracker.lnk\n2020-04-18 20:55 – 2018-03-26 22:41 – 000000000 ____D C:UsersDanieleAppDataLocalHearthstoneDeckTracker\n2020-04-18 20:54 – 2018-03-26 22:41 – 000000000 ____D C:UsersDanieleAppDataLocalSquirrelTemp\n2020-04-18 15:26 – 2014-02-28 19:47 – 000000000 ____D C:Program Files (x86)Battle.net\n2020-04-18 14:22 – 2014-06-18 09:34 – 000000000 ____D C:Program Files (x86)TeamViewer\n2020-04-18 14:21 – 2009-07-14 06:08 – 000000006 ____H C:WindowsTasksSA.DAT\n2020-04-17 19:37 – 2017-05-31 22:40 – 000000000 ____D C:UsersRee\n2020-04-17 13:30 – 2019-12-20 00:37 – 000000000 ____D C:WindowsSysWOW64NV\n2020-04-17 13:30 – 2019-12-20 00:37 – 000000000 ____D C:Windowssystem32NV\n2020-04-17 13:29 – 2017-09-12 00:30 – 000000000 ____D C:Program Files (x86)Mozilla Firefox\n2020-04-17 13:29 – 2013-05-04 17:46 – 000000000 ____D C:Program Files (x86)Mozilla Maintenance Service\n2020-04-17 13:22 – 2014-01-15 19:16 – 000000000 ____D C:Program Files (x86)Steam\n2020-04-17 13:10 – 2017-12-17 16:51 – 000000000 ____D C:UsersDanieleAppDataLocalUbisoft Game Launcher\n2020-04-16 22:37 – 2012-06-21 20:37 – 000000000 ___HD C:Program Files (x86)InstallShield Installation Information\n2020-04-16 22:37 – 2009-07-14 06:32 – 000000000 ___RD C:ProgramDataMicrosoftWindowsStart MenuProgramsGames\n2020-04-16 22:36 – 2013-05-04 20:18 – 000000000 ____D C:UsersDanieleAppDataRoaminguTorrent\n2020-04-15 20:36 – 2013-05-04 18:11 – 000002226 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsGoogle Chrome.lnk\n2020-04-10 00:17 – 2009-07-14 04:20 – 000000000 ____D C:Windowsinf\n2020-04-10 00:15 – 2013-05-06 00:19 – 000000000 ____D C:ProgramDataAvira\n2020-04-10 00:15 – 2013-05-06 00:19 – 000000000 ____D C:Program Files (x86)Avira\n2020-04-10 00:13 – 2013-04-13 02:40 – 000743878 _____ C:Windowssystem32perfh010.dat\n2020-04-10 00:13 – 2013-04-13 02:40 – 000148496 _____ C:Windowssystem32perfc010.dat\n2020-04-10 00:13 – 2009-07-14 06:13 – 001662796 _____ C:Windowssystem32PerfStringBackup.INI\n2020-04-10 00:04 – 2013-04-16 13:43 – 000000000 ____D C:UsersDaniele\n2020-04-09 23:52 – 2014-08-20 13:02 – 000000000 ____D C:ProgramDataPackage Cache\n2020-04-09 23:28 – 2018-01-28 01:56 – 000000000 ____D C:UsersDanieleAppDataRoamingKeePass\n2020-04-09 23:10 – 2018-01-28 01:00 – 000001121 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsKeePass 2.lnk\n2020-04-09 23:10 – 2018-01-28 01:00 – 000001109 _____ C:UsersDanieleDesktopKeePass 2.lnk\n2020-04-09 23:10 – 2018-01-28 01:00 – 000000000 ____D C:Program Files (x86)KeePass Password Safe 2\n2020-04-02 06:28 – 2018-03-29 14:27 – 000000000 ____D C:Program Files (x86)Overwolf\n2020-04-02 00:49 – 2010-11-21 04:27 – 000744808 ____N (Microsoft Corporation) C:Windowssystem32MpSigStub.exe\n2020-03-26 18:43 – 2019-12-18 20:22 – 000000000 ____D C:UsersDanieleAppDataRoamingChangZhi2\n2020-03-26 17:50 – 2013-05-12 22:25 – 000000000 ____D C:UsersDanieleDesktopCompleanno Ree 2013\n2020-03-26 17:49 – 2020-02-04 14:31 – 000000000 ____D C:UsersDanieleDesktopCittadinanza\n2020-03-25 23:42 – 2013-05-06 19:11 – 000000000 ____D C:ProgramDataMcAfee\n2020-03-25 23:34 – 2019-12-18 20:31 – 000000000 ____D C:UsersDaniele.LdVirtualBox\n2020-03-25 13:00 – 2019-02-14 20:04 – 000000000 ____D C:UsersDanieleAppDataLocalBluestacks\n2020-03-24 02:08 – 2013-05-15 17:30 – 000000000 ____D C:UsersDanieleAppDataRoamingSoftGrid Client\n2020-03-21 02:29 – 2013-05-04 18:11 – 000003586 _____ C:Windowssystem32TasksGoogleUpdateTaskMachineUA\n2020-03-21 02:29 – 2013-05-04 18:11 – 000003458 _____ C:Windowssystem32TasksGoogleUpdateTaskMachineCore\n2020-03-20 08:46 – 2015-01-01 09:45 – 000004476 _____ C:Windowssystem32TasksAdobe Acrobat Update Task\n2020-03-20 08:45 – 2015-12-16 22:13 – 000002441 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsAcrobat Reader DC.lnk","html":"2020-04-19 14:47 – 2014-02-28 19:48 – 000000000 ____D C:UsersDanieleAppDataLocalBattle.net\n2020-04-19 14:28 – 2017-01-29 20:15 – 000000000 ____D C:UsersDanieleAppDataLocalLowMozilla\n2020-04-19 14:27 – 2019-01-30 14:34 – 000000000 ____D C:UsersDanieleAppDataRoamingDiscord\n2020-04-19 13:50 – 2018-10-22 17:50 – 000000911 _____ C:WindowsTasksEPSON XP-312 313 315 Series Update E25A4D64-F87D-4249-99D5-CFF2F8F8E6DF.job\n2020-04-19 13:50 – 2018-10-22 17:50 – 000000911 _____ C:WindowsTasksEPSON XP-312 313 315 Series Update 6AFC5C38-E427-4C18-A613-15CA4120664F.job\n2020-04-19 13:50 – 2018-10-22 17:50 – 000000725 _____ C:WindowsTasksEPSON XP-312 313 315 Series Invitation E25A4D64-F87D-4249-99D5-CFF2F8F8E6DF.job\n2020-04-19 13:50 – 2018-10-22 17:50 – 000000725 _____ C:WindowsTasksEPSON XP-312 313 315 Series Invitation 6AFC5C38-E427-4C18-A613-15CA4120664F.job\n2020-04-19 12:25 – 2018-07-01 20:59 – 000000000 ____D C:ProgramDataNVIDIA\n2020-04-19 03:56 – 2009-07-14 05:45 – 000016976 ____H C:Windowssystem327B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0\n2020-04-19 03:56 – 2009-07-14 05:45 – 000016976 ____H C:Windowssystem327B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0\n2020-04-19 03:19 – 2018-03-26 22:41 – 000000000 ____D C:UsersDanieleAppDataRoamingHearthstoneDeckTracker\n2020-04-18 20:55 – 2018-03-26 22:41 – 000002512 _____ C:UsersDanieleDesktopHearthstone Deck Tracker.lnk\n2020-04-18 20:55 – 2018-03-26 22:41 – 000000000 ____D C:UsersDanieleAppDataLocalHearthstoneDeckTracker\n2020-04-18 20:54 – 2018-03-26 22:41 – 000000000 ____D C:UsersDanieleAppDataLocalSquirrelTemp\n2020-04-18 15:26 – 2014-02-28 19:47 – 000000000 ____D C:Program Files (x86)Battle.net\n2020-04-18 14:22 – 2014-06-18 09:34 – 000000000 ____D C:Program Files (x86)TeamViewer\n2020-04-18 14:21 – 2009-07-14 06:08 – 000000006 ____H C:WindowsTasksSA.DAT\n2020-04-17 19:37 – 2017-05-31 22:40 – 000000000 ____D C:UsersRee\n2020-04-17 13:30 – 2019-12-20 00:37 – 000000000 ____D C:WindowsSysWOW64NV\n2020-04-17 13:30 – 2019-12-20 00:37 – 000000000 ____D C:Windowssystem32NV\n2020-04-17 13:29 – 2017-09-12 00:30 – 000000000 ____D C:Program Files (x86)Mozilla Firefox\n2020-04-17 13:29 – 2013-05-04 17:46 – 000000000 ____D C:Program Files (x86)Mozilla Maintenance Service\n2020-04-17 13:22 – 2014-01-15 19:16 – 000000000 ____D C:Program Files (x86)Steam\n2020-04-17 13:10 – 2017-12-17 16:51 – 000000000 ____D C:UsersDanieleAppDataLocalUbisoft Game Launcher\n2020-04-16 22:37 – 2012-06-21 20:37 – 000000000 ___HD C:Program Files (x86)InstallShield Installation Information\n2020-04-16 22:37 – 2009-07-14 06:32 – 000000000 ___RD C:ProgramDataMicrosoftWindowsStart MenuProgramsGames\n2020-04-16 22:36 – 2013-05-04 20:18 – 000000000 ____D C:UsersDanieleAppDataRoaminguTorrent\n2020-04-15 20:36 – 2013-05-04 18:11 – 000002226 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsGoogle Chrome.lnk\n2020-04-10 00:17 – 2009-07-14 04:20 – 000000000 ____D C:Windowsinf\n2020-04-10 00:15 – 2013-05-06 00:19 – 000000000 ____D C:ProgramDataAvira\n2020-04-10 00:15 – 2013-05-06 00:19 – 000000000 ____D C:Program Files (x86)Avira\n2020-04-10 00:13 – 2013-04-13 02:40 – 000743878 _____ C:Windowssystem32perfh010.dat\n2020-04-10 00:13 – 2013-04-13 02:40 – 000148496 _____ C:Windowssystem32perfc010.dat\n2020-04-10 00:13 – 2009-07-14 06:13 – 001662796 _____ C:Windowssystem32PerfStringBackup.INI\n2020-04-10 00:04 – 2013-04-16 13:43 – 000000000 ____D C:UsersDaniele\n2020-04-09 23:52 – 2014-08-20 13:02 – 000000000 ____D C:ProgramDataPackage Cache\n2020-04-09 23:28 – 2018-01-28 01:56 – 000000000 ____D C:UsersDanieleAppDataRoamingKeePass\n2020-04-09 23:10 – 2018-01-28 01:00 – 000001121 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsKeePass 2.lnk\n2020-04-09 23:10 – 2018-01-28 01:00 – 000001109 _____ C:UsersDanieleDesktopKeePass 2.lnk\n2020-04-09 23:10 – 2018-01-28 01:00 – 000000000 ____D C:Program Files (x86)KeePass Password Safe 2\n2020-04-02 06:28 – 2018-03-29 14:27 – 000000000 ____D C:Program Files (x86)Overwolf\n2020-04-02 00:49 – 2010-11-21 04:27 – 000744808 ____N (Microsoft Corporation) C:Windowssystem32MpSigStub.exe\n2020-03-26 18:43 – 2019-12-18 20:22 – 000000000 ____D C:UsersDanieleAppDataRoamingChangZhi2\n2020-03-26 17:50 – 2013-05-12 22:25 – 000000000 ____D C:UsersDanieleDesktopCompleanno Ree 2013\n2020-03-26 17:49 – 2020-02-04 14:31 – 000000000 ____D C:UsersDanieleDesktopCittadinanza\n2020-03-25 23:42 – 2013-05-06 19:11 – 000000000 ____D C:ProgramDataMcAfee\n2020-03-25 23:34 – 2019-12-18 20:31 – 000000000 ____D C:UsersDaniele.LdVirtualBox\n2020-03-25 13:00 – 2019-02-14 20:04 – 000000000 ____D C:UsersDanieleAppDataLocalBluestacks\n2020-03-24 02:08 – 2013-05-15 17:30 – 000000000 ____D C:UsersDanieleAppDataRoamingSoftGrid Client\n2020-03-21 02:29 – 2013-05-04 18:11 – 000003586 _____ C:Windowssystem32TasksGoogleUpdateTaskMachineUA\n2020-03-21 02:29 – 2013-05-04 18:11 – 000003458 _____ C:Windowssystem32TasksGoogleUpdateTaskMachineCore\n2020-03-20 08:46 – 2015-01-01 09:45 – 000004476 _____ C:Windowssystem32TasksAdobe Acrobat Update Task\n2020-03-20 08:45 – 2015-12-16 22:13 – 000002441 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsAcrobat Reader DC.lnk
"},{"id":"text-33","type":"text","heading":"","plain_text":"==================== Files in the root of some directories ========","html":"==================== Files in the root of some directories ========
"},{"id":"text-34","type":"text","heading":"","plain_text":"2013-12-31 12:57 – 2013-12-31 12:58 – 000000093 _____ () C:UsersDanieleAppDataRoamingARCompanion.log\n2019-12-18 20:31 – 2019-12-18 20:31 – 000000068 _____ () C:UsersDanieleAppDataRoamingchangzhi_leidian.data\n2019-12-21 18:17 – 2019-12-21 18:17 – 000000068 _____ () C:UsersDanieleAppDataRoamingchangzhi_mplayer.data\n2020-03-25 23:42 – 2020-03-25 23:42 – 000284010 _____ () C:UsersDanieleAppDataRoamingm47_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt\n2017-07-11 22:13 – 2017-07-11 22:13 – 000014139 _____ () C:UsersDanieleAppDataLocalHWVendorDetection.log\n2013-05-05 00:55 – 2019-12-27 13:15 – 000007615 _____ () C:UsersDanieleAppDataLocalresmon.resmoncfg","html":"2013-12-31 12:57 – 2013-12-31 12:58 – 000000093 _____ () C:UsersDanieleAppDataRoamingARCompanion.log\n2019-12-18 20:31 – 2019-12-18 20:31 – 000000068 _____ () C:UsersDanieleAppDataRoamingchangzhi_leidian.data\n2019-12-21 18:17 – 2019-12-21 18:17 – 000000068 _____ () C:UsersDanieleAppDataRoamingchangzhi_mplayer.data\n2020-03-25 23:42 – 2020-03-25 23:42 – 000284010 _____ () C:UsersDanieleAppDataRoamingm47_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt\n2017-07-11 22:13 – 2017-07-11 22:13 – 000014139 _____ () C:UsersDanieleAppDataLocalHWVendorDetection.log\n2013-05-05 00:55 – 2019-12-27 13:15 – 000007615 _____ () C:UsersDanieleAppDataLocalresmon.resmoncfg
"},{"id":"text-35","type":"text","heading":"","plain_text":"==================== SigCheck ============================","html":"==================== SigCheck ============================
"},{"id":"text-36","type":"text","heading":"","plain_text":"(There is no automatic fix for files that do not pass verification.)","html":"(There is no automatic fix for files that do not pass verification.)
"},{"id":"text-37","type":"text","heading":"","plain_text":"LastRegBack: 2020-04-17 19:29\n==================== End of FRST.txt ========================\nAdditional scan result of Farbar Recovery Scan Tool (x64) Version: 19-04-2020\nRan by Daniele (19-04-2020 14:50:00)\nRunning from C:UsersDanieleDownloads\nWindows 7 Home Premium Service Pack 1 (X64) (2013-04-16 12:43:25)\nBoot Mode: Normal\n==========================================================","html":"LastRegBack: 2020-04-17 19:29\n==================== End of FRST.txt ========================\nAdditional scan result of Farbar Recovery Scan Tool (x64) Version: 19-04-2020\nRan by Daniele (19-04-2020 14:50:00)\nRunning from C:UsersDanieleDownloads\nWindows 7 Home Premium Service Pack 1 (X64) (2013-04-16 12:43:25)\nBoot Mode: Normal\n==========================================================
"},{"id":"text-38","type":"text","heading":"","plain_text":"==================== Accounts: =============================","html":"==================== Accounts: =============================
"},{"id":"text-39","type":"text","heading":"","plain_text":"Administrator (S-1-5-21-1536202438-368462837-3654654372-500 – Administrator – Disabled)\nDaniele (S-1-5-21-1536202438-368462837-3654654372-1001 – Administrator – Enabled) => C:UsersDaniele\nGuest (S-1-5-21-1536202438-368462837-3654654372-501 – Limited – Disabled)\nHomeGroupUser$ (S-1-5-21-1536202438-368462837-3654654372-1003 – Limited – Enabled)\nRee (S-1-5-21-1536202438-368462837-3654654372-1005 – Limited – Enabled) => C:UsersRee","html":"Administrator (S-1-5-21-1536202438-368462837-3654654372-500 – Administrator – Disabled)\nDaniele (S-1-5-21-1536202438-368462837-3654654372-1001 – Administrator – Enabled) => C:UsersDaniele\nGuest (S-1-5-21-1536202438-368462837-3654654372-501 – Limited – Disabled)\nHomeGroupUser$ (S-1-5-21-1536202438-368462837-3654654372-1003 – Limited – Enabled)\nRee (S-1-5-21-1536202438-368462837-3654654372-1005 – Limited – Enabled) => C:UsersRee
"},{"id":"text-40","type":"text","heading":"","plain_text":"==================== Security Center ========================","html":"==================== Security Center ========================
"},{"id":"text-41","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed.)","html":"(If an entry is included in the fixlist, it will be removed.)
"},{"id":"text-42","type":"text","heading":"","plain_text":"AV: Avira Antivirus (Enabled – Up to date) 8EAC8D5C-B3AA-95AA-3DF1-2845CDD09CBE\nAV: Microsoft Security Essentials (Enabled – Up to date) 71A27EC9-3DA6-45FC-60A7-004F623C6189\nAS: Microsoft Security Essentials (Enabled – Up to date) CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34\nAS: Avira Antivirus (Enabled – Up to date) 35CD6CB8-9590-9A24-0741-1337B657D603\nAS: Windows Defender (Disabled – Out of date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46","html":"AV: Avira Antivirus (Enabled – Up to date) 8EAC8D5C-B3AA-95AA-3DF1-2845CDD09CBE\nAV: Microsoft Security Essentials (Enabled – Up to date) 71A27EC9-3DA6-45FC-60A7-004F623C6189\nAS: Microsoft Security Essentials (Enabled – Up to date) CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34\nAS: Avira Antivirus (Enabled – Up to date) 35CD6CB8-9590-9A24-0741-1337B657D603\nAS: Windows Defender (Disabled – Out of date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46
"},{"id":"text-43","type":"text","heading":"","plain_text":"==================== Installed Programs ======================","html":"==================== Installed Programs ======================
"},{"id":"text-44","type":"text","heading":"","plain_text":"(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)","html":"(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
"},{"id":"text-45","type":"text","heading":"","plain_text":"Acer Backup Manager (HKLM-x32…InstallShield_0B61BBD5-DA3C-409A-8730-0C3DC3B0F270) (Version: 3.0.0.99 – NTI Corporation)\nAcer Crystal Eye Webcam (HKLM-x32…1FB4998-33C4-4431-85ED-079E3EEFE75D) (Version: 1.0.1904 – CyberLink Corp.) Hidden\nAcer Crystal Eye Webcam (HKLM-x32…InstallShield_01FB4998-33C4-4431-85ED-079E3EEFE75D) (Version: 1.0.1904 – CyberLink Corp.)\nAcer ePower Management (HKLM-x32…3DB0448D-AD82-4923-B305-D001E521A964) (Version: 6.00.3008 – Acer Incorporated)\nAcer eRecovery Management (HKLM-x32…7F811A54-5A09-4579-90E1-C93498E230D9) (Version: 5.00.3504 – Acer Incorporated)\nAcer Games (HKLM-x32…WildTangent acer Master Uninstall) (Version: 1.0.2.5 – WildTangent)\nAcer Registration (HKLM-x32…Acer Registration) (Version: 1.04.3504 – Acer Incorporated)\nAcer ScreenSaver (HKLM-x32…Acer Screensaver) (Version: 1.1.0913.2011 – Acer Incorporated)\nAcer Updater (HKLM-x32…EE171732-BEB4-4576-887D-CB62727F01CA) (Version: 1.02.3502 – Acer Incorporated)\nAdobe Acrobat Reader DC – Italiano (HKLM-x32…AC76BA86-7AD7-1040-7B44-AC0F074E4100) (Version: 20.006.20042 – Adobe Systems Incorporated)\nAdobe AIR (HKLM-x32…Adobe AIR) (Version: 2.7.1.19610 – Adobe Systems Incorporated)\nAdobe Flash Player 29 ActiveX (HKLM-x32…Adobe Flash Player ActiveX) (Version: 29.0.0.140 – Adobe Systems Incorporated)\nAdobe Flash Player 32 NPAPI (HKLM-x32…Adobe Flash Player NPAPI) (Version: 32.0.0.303 – Adobe)\nAgatha Christie – Death on the Nile (HKLM-x32…WTA-5e746bf8-8dee-4fe9-9f1a-49235ad98c76) (Version: 2.2.0.98 – WildTangent) Hidden\nAggiornamenti NVIDIA 31.1.10.0 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.Update) (Version: 31.1.10.0 – NVIDIA Corporation) Hidden\nApplication Verifier x64 External Package (HKLM…77F3D72C-465F-BD51-890E-CC3914B1365F) (Version: 8.100.26936 – Microsoft) Hidden\nAspera Connect 3.6.1.111228 (HKLM-x32…EC793CAC-7C41-4817-BA98-7E481A79F9CF) (Version: 3.6.1.111228 – © Copyright IBM Corp. 2014) Hidden\nAspera Connect 3.6.1.111228 (HKUS-1-5-21-1536202438-368462837-3654654372-1001…Aspera Connect 3.6.1.111228) (Version: 3.6.1.111228 – © Copyright IBM Corp. 2014)\nAssassin's Creed IV Black Flag (HKLM-x32…Uplay Install 273) (Version: – Ubisoft)\nAvira (HKLM-x32…CAB70370-888E-4D62-B5D5-DA7982585C46) (Version: 1.2.145.25926 – Avira Operations GmbH & Co. KG) Hidden\nAvira (HKLM-x32…e636e084-c7ab-4246-8ad2-aa1bb1cbedfd) (Version: 1.2.145.25926 – Avira Operations GmbH & Co. KG)\nAvira Antivirus (HKLM-x32…Avira Antivirus) (Version: 15.0.2004.1828 – Avira Operations GmbH & Co. KG)\nAvira Phantom VPN (HKLM-x32…Avira Phantom VPN) (Version: 2.32.2.34115 – Avira Operations GmbH & Co. KG)\nAvira Software Updater (HKLM-x32…30947035-9248-4304-96CE-CB6B1D38CFD5) (Version: 2.0.6.30594 – Avira Operations GmbH & Co. KG)\nAvira System Speedup (HKLM-x32…Avira System Speedup_is1) (Version: 6.4.1.10871 – Avira Operations GmbH & Co. KG)\nBackup Manager V3 (HKLM-x32…B61BBD5-DA3C-409A-8730-0C3DC3B0F270) (Version: 3.0.0.99 – NTI Corporation) Hidden\nBattle.net (HKLM-x32…Battle.net) (Version: – Blizzard Entertainment)\nBejeweled 2 Deluxe (HKLM-x32…WTA-878366c0-7e0d-49fc-9060-e75a6dabe155) (Version: 2.2.0.95 – WildTangent) Hidden\nBlue Jeans (HKLM-x32…6D19EE68-6672-48DB-A45A-5CCFA8021D92) (Version: 1.28.10 – Blue Jeans)\nBroadcom Card Reader Driver Installer (HKLM…4710662C-8204-4334-A977-B1AC9E547819) (Version: 14.8.2.2 – Broadcom Corporation)\nBroadcom NetLink Controller (HKLM…C91DCB72-F5BB-410D-A91A-314F5D1B4284) (Version: 14.8.4.1 – Broadcom Corporation)\nCaesar 3 (HKLM-x32…Caesar 3) (Version: – )\nChuzzle Deluxe (HKLM-x32…WTA-7f54354a-b7a2-4639-9a5c-f4b75efe2e90) (Version: 2.2.0.95 – WildTangent) Hidden\nclear.fi (HKLM-x32…14C4C3B6-F1F4-401F-8C86-03E8E19AAC8C) (Version: 1.0.1517_36458 – CyberLink Corp.) Hidden\nclear.fi (HKLM-x32…2637C347-9DAD-11D6-9EA2-00055D0CA761) (Version: 1.0.2024.00 – CyberLink Corp.) Hidden\nclear.fi (HKLM-x32…B906C11A-D193-4143-9FA7-E2EE8A5A8F21) (Version: 9.0.8026 – CyberLink Corp.) Hidden\nclear.fi (HKLM-x32…InstallShield_2637C347-9DAD-11D6-9EA2-00055D0CA761) (Version: 1.0.2024.00 – CyberLink Corp.)\nclear.fi Client (HKLM-x32…43AAE145-83CF-4C96-9A5E-756CEFCE879F) (Version: 1.00.3500 – Acer Incorporated)\nCrazy Chicken Kart 2 (HKLM-x32…WTA-111fa445-16e9-4867-bd6d-79c26bc446f5) (Version: 2.2.0.97 – WildTangent) Hidden\nD3DX10 (HKLM-x32…E09C4DB7-630C-4F06-A631-8EA7239923AF) (Version: 15.4.2368.0902 – Microsoft) Hidden\nDAEMON Tools Lite (HKLM-x32…DAEMON Tools Lite) (Version: 4.48.1.0347 – Disc Soft Ltd)\nDiablo III (HKLM-x32…Diablo III) (Version: – Blizzard Entertainment)\nDiscord (HKUS-1-5-21-1536202438-368462837-3654654372-1001…Discord) (Version: 0.0.306 – Discord Inc.)\nDisinstalla EPSON SX100 Series Printer (HKLM…EPSON SX100 Series) (Version: – SEIKO EPSON Corporation)\nDisplayDriverAnalyzer (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_DisplayDriverAnalyzer) (Version: 391.35 – NVIDIA Corporation) Hidden\nDolby Advanced Audio v2 (HKLM-x32…B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613) (Version: 7.2.7000.7 – Dolby Laboratories Inc)\nDragon Age II (HKLM-x32…F2E23139-3404-4E3C-9855-7724415D62A5) (Version: 1.04 – Electronic Arts, Inc.)\nDropbox (HKUS-1-5-21-1536202438-368462837-3654654372-1001…Dropbox) (Version: 3.0.5 – Dropbox, Inc.)\neBay Worldwide (HKLM-x32…D3E5A972-9A15-427D-AE78-8181A5FD943C) (Version: 2.2.0409 – OEM)\nEpson Connect Printer Setup (HKLM-x32…D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C) (Version: 1.4.0 – Seiko Epson Corporation)\nEpson Event Manager (HKLM-x32…9F205E94-9E42-4486-A92A-DF3F6CB85444) (Version: 3.10.0061 – Seiko Epson Corporation)\nEPSON Remote Print Uninstall (HKLM…EPSON Remote Print) (Version: – SEIKO EPSON Corporation)\nEPSON Scan (HKLM-x32…EPSON Scanner) (Version: – Seiko Epson Corporation)\nEpson Software Updater (HKLM-x32…FD036A57-F81D-4865-AAF0-811558EA76AE) (Version: 4.5.1 – Seiko Epson Corporation)\nEPSON XP-312 313 315 Series Printer Uninstall (HKLM…EPSON XP-312 313 315 Series) (Version: – SEIKO EPSON Corporation)\nEpsonNet Print (HKLM-x32…3E31400D-274E-4647-916C-2CACC3741799) (Version: 2.6.0 – SEIKO EPSON CORPORATION)\nEvernote v. 4.5.1 (HKLM-x32…28921580-E4BB-11E0-9FD7-1CC1DEF07CBE) (Version: 4.5.1.5451 – Evernote Corp.)\nFATE (HKLM-x32…WTA-d562914f-464e-442a-9b6b-eef07926c4b7) (Version: 2.2.0.97 – WildTangent) Hidden\nFinal Drive: Nitro (HKLM-x32…WTA-ba528cbd-abfc-43b4-b622-039073085d6c) (Version: 2.2.0.95 – WildTangent) Hidden\nFooz Kids (HKLM-x32…4C774C35-E0AF-72E1-136A-2BF666702268) (Version: 3.0.8 – FUHU, Inc.) Hidden\nFooz Kids (HKLM-x32…FoozKids) (Version: 3.0.8 – FUHU, Inc.)\nFooz Kids Platform (HKLM-x32…8D68CE08-9A14-4B7B-9857-3C646A2F34C7) (Version: 2.1 – FUHU, Inc.)\nFotogalerija Windows Live (HKLM-x32…E59969EA-3B5B-4B24-8B94-43842A7FBFE9) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nGaleria de Fotografias do Windows Live (HKLM-x32…EC0B576-90F9-43C3-8FAD-A4902DF4B8F4) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nGalería fotográfica de Windows Live (HKLM-x32…E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nGaleria fotogràfica del Windows Live (HKLM-x32…4736B0ED-F6A1-48EC-A1B7-C053027648F1) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nGaleria fotografii usługi Windows Live (HKLM-x32…CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nGalerie de photos Windows Live (HKLM-x32…488F0347-C4A7-4374-91A7-30818BEDA710) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nGalerie foto Windows Live (HKLM-x32…CB66242D-12B1-4494-82D2-6F53A7E024A3) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nGoogle Chrome (HKLM-x32…Google Chrome) (Version: 81.0.4044.113 – Google LLC)\nGoogle Update Helper (HKLM-x32…60EC980A-BDA2-4CB6-A427-B07A5498B4CA) (Version: 1.3.35.451 – Google LLC) Hidden\nHearthArena Companion (HKUS-1-5-21-1536202438-368462837-3654654372-1001…Overwolf_eldaohcjmecjpkpdhhoiolhhaeapcldppbdgbnbc) (Version: 1.5.0.2 – Overwolf app)\nHearthstone (HKLM-x32…Hearthstone) (Version: – Blizzard Entertainment)\nHearthstone Deck Tracker (HKUS-1-5-21-1536202438-368462837-3654654372-1001…HearthstoneDeckTracker) (Version: 1.10.7 – HearthSim)\nHP USB Disk Storage Format Tool (HKLM-x32…E0DF90C-D0BA-4C89-9262-AD78D1A3DE51) (Version: – )\nIdentity Card (HKLM-x32…Identity Card) (Version: 1.00.3501 – Acer Incorporated)\nInsaniquarium Deluxe (HKLM-x32…WTA-1aadf450-ec73-41b5-b741-966d0737010a) (Version: 2.2.0.97 – WildTangent) Hidden\nIntel® Control Center (HKLM-x32…F8A9085D-4C7A-41a9-8A77-C8998A96C421) (Version: 1.2.1.1007 – Intel Corporation)\nIntel® Management Engine Components (HKLM-x32…65153EA5-8B6E-43B6-857B-C6E4FC25798A) (Version: 7.0.0.1144 – Intel Corporation)\nIntel® Processor Graphics (HKLM-x32…F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA) (Version: 8.15.10.2342 – Intel Corporation)\nIntel® Processor Identification Utility (HKLM-x32…A92A4DB0-CD37-42D1-BE1D-603D53C24328) (Version: 1.0.0.0 – Intel Corporation)\nIntel® Rapid Storage Technology (HKLM-x32…3E29EE6C-963A-4aae-86C1-DC237C4A49FC) (Version: 10.5.0.1026 – Intel Corporation)\nIntel® SDK for OpenCL – CPU Only Runtime Package (HKLM-x32…FCB3772C-B7D0-4933-B1A9-3707EBACC573) (Version: 2.0.0.37149 – Intel Corporation)\nJava 8 Update 171 (HKLM-x32…26A24AE4-039D-4CA4-87B4-2F32180171F0) (Version: 8.0.1710.11 – Oracle Corporation)\nJewel Match 3 (HKLM-x32…WTA-63325e84-34c2-4ccd-b3ee-87abc401d44a) (Version: 2.2.0.97 – WildTangent) Hidden\nJewel Quest Solitaire (HKLM-x32…WTA-4d51be1b-2978-4973-ad15-8b42189f04f8) (Version: 2.2.0.95 – WildTangent) Hidden\nJohn Deere Drive Green (HKLM-x32…WTA-91a805f7-4cee-4088-a326-afc28032536e) (Version: 2.2.0.95 – WildTangent) Hidden\nJuniper Installer Service (HKLM-x32…93A64A36-C060-47B4-96DE-D405CC22F4C4) (Version: 7.4.28485 – Juniper Networks) Hidden\nJuniper Installer Service 7.4 (HKLM-x32…Juniper Installer Service 7.4) (Version: 7.4.28485 – Juniper Networks, Inc.)\nJuniper Networks Network Connect 7.1.8 (HKLM-x32…Juniper Network Connect 7.1.8) (Version: 7.1.8.20737 – Juniper Networks)\nJuniper Networks Network Connect 7.3.0 (HKLM-x32…Juniper Network Connect 7.3.0) (Version: 7.3.0.24657 – Juniper Networks)\nJuniper Networks Network Connect 7.4.0 (HKLM-x32…Juniper Network Connect 7.4.0) (Version: 7.4.0.30731 – Juniper Networks)\nJuniper Networks, Inc. Setup Client (HKUS-1-5-21-1536202438-368462837-3654654372-1001…Juniper_Setup_Client) (Version: 7.4.10.45165 – Juniper Networks, Inc.)\nJuniper Networks, Inc. Setup Client 64-bit Activex Control (HKLM…Juniper_Setup_Client Activex Control) (Version: 2.1.1.1 – Juniper Networks, Inc.)\nJuniper Networks, Inc. Setup Client Activex Control (HKLM-x32…Juniper_Setup_Client Activex Control) (Version: 2.1.1.1 – Juniper Networks, Inc.)\nJunk Mail filter update (HKLM-x32…1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nKeePass Password Safe 2.44 (HKLM-x32…KeePassPasswordSafe2_is1) (Version: 2.44 – Dominik Reichl)\nKits Configuration Installer (HKLM-x32…B74E65FD-CC47-41C5-4B89-791A3F61942D) (Version: 8.100.25984 – Microsoft) Hidden\nKodi (HKUS-1-5-21-1536202438-368462837-3654654372-1001…Kodi) (Version: – XBMC-Foundation)\nLaunch Manager (HKLM-x32…LManager) (Version: 5.1.7 – Acer Inc.)\nLDPlayer (HKLM-x32…LDPlayer4) (Version: 4.0 – XUANZHI INTERNATIONAL CO., LIMITED)\nLINE (HKUS-1-5-21-1536202438-368462837-3654654372-1001…LINE) (Version: 5.21.3.2086 – LINE Corporation)\nManuali EPSON (HKLM-x32…84CECC1B-21EF-41B1-9A91-3E724E5D99D3) (Version: 1.53.0.0 – Seiko Epson Corporation)\nMcAfee WebAdvisor (HKLM-x32…35ED3F83-4BDC-4c44-8EC6-6A8301C7413A) (Version: 4.1.1.90 – McAfee, LLC.)\nMesh Runtime (HKLM-x32…8C6D6116-B724-4810-8F2D-D047E6B7D68E) (Version: 15.4.5722.2 – Microsoft Corporation) Hidden\nMicrosoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32…D1D37853-0004-3E36-A7AA-74F4EEA35F64) (Version: 4.5.50930 – Microsoft Corporation)\nMicrosoft .NET Framework 4.5.1 SDK (HKLM-x32…19A5926D-66E1-46FC-854D-163AA10A52D3) (Version: 4.5.51641 – Microsoft Corporation)\nMicrosoft .NET Framework 4.8 (HKLM…92FB6C44-E685-45AD-9B20-CADF4CABA132 – 1033) (Version: 4.8.03761 – Microsoft Corporation)\nMicrosoft .NET Framework 4.8 (Italiano) (HKLM…92FB6C44-E685-45AD-9B20-CADF4CABA132 – 1040) (Version: 4.8.03761 – Microsoft Corporation)\nMicrosoft Office 2010 (HKLM-x32…95140000-0070-0000-0000-0000000FF1CE) (Version: 14.0.4763.1000 – Microsoft Corporation)\nMicrosoft Office a portata di clic 2010 (HKLM-x32…Office14.Click2Run) (Version: 14.0.4763.1000 – Microsoft Corporation)\nMicrosoft Office Starter 2010 – Italiano (HKLM-x32…90140011-0066-0410-0000-0000000FF1CE) (Version: 14.0.5128.5002 – Microsoft Corporation)\nMicrosoft Security Essentials (HKLM…Microsoft Security Client) (Version: 4.10.209.0 – Microsoft Corporation)\nMicrosoft Silverlight (HKLM…89F4137D-6C26-4A84-BDB8-2E5A4BB71E00) (Version: 5.1.50918.0 – Microsoft Corporation)\nMicrosoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32…F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8) (Version: 3.1.0000 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…710f4c1c-cc18-4c49-8cbf-51240c89a1a2) (Version: 8.0.61001 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x64 9.0.30729.17 (HKLM…8220EEFE-38CD-377E-8595-13398D740ACE) (Version: 9.0.30729 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x64 9.0.30729.6161 (HKLM…5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.17 (HKLM-x32…9A25302D-30C0-39D9-BD6F-21E6EC160475) (Version: 9.0.30729 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.4148 (HKLM-x32…1F1C2DFC-2D24-3E06-BCB8-725134ADF989) (Version: 9.0.30729.4148 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.6161 (HKLM-x32…9BE518E6-ECC6-35A9-88E4-87755C07200F) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C++ 2010 x64 Redistributable – 10.0.40219 (HKLM…1D8E6291-B0D5-35EC-8441-6616F567A0F7) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2010 x86 Redistributable – 10.0.40219 (HKLM-x32…F0C3E5D1-1ADE-321E-8167-68EF0DE699A5) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x64) – 11.0.61030 (HKLM-x32…ca67548a-5ebe-413a-b50c-4b9ceb6d66c6) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x86) – 11.0.61030 (HKLM-x32…33d1fd90-4274-48a1-9bc1-97e33d9c2d6f) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x64) – 12.0.30501 (HKLM-x32…50d4fc8-5d48-4b8f-8972-47c82c46020f) (Version: 12.0.30501.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x86) – 12.0.30501 (HKLM-x32…f65db027-aff3-4070-886a-0d87064aabb1) (Version: 12.0.30501.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2015 Redistributable (x64) – 14.0.24215 (HKLM-x32…d992c12e-cab2-426f-bde3-fb8c53950b0d) (Version: 14.0.24215.1 – Microsoft Corporation)\nMicrosoft Visual C++ 2015 Redistributable (x86) – 14.0.24215 (HKLM-x32…e2803110-78b3-4664-a479-3611a381656a) (Version: 14.0.24215.1 – Microsoft Corporation)\nMonitoraggio della tecnologia Intel® Turbo Boost 2.0 (HKLM…B77EFA0B-9BD3-4122-9F9A-15A963B5EA24) (Version: 2.1.23.0 – Intel)\nMozilla Firefox 75.0 (x64 it) (HKLM…Mozilla Firefox 75.0 (x64 it)) (Version: 75.0 – Mozilla)\nMozilla Maintenance Service (HKLM-x32…MozillaMaintenanceService) (Version: 75.0.0.7398 – Mozilla)\nMSI Development Tools (HKLM-x32…CF3A1CA6-5E5E-B4BD-6CF1-363056816CA2) (Version: 8.100.26898 – Microsoft Corporation) Hidden\nMyEpson Portal (HKLM-x32…3361D415-BA35-4143-B301-661991BA6219) (Version: 1.1.2.2 – SEIKO EPSON CORPORATION) Hidden\nMyEpson Portal (HKLM-x32…MyEpson Portal) (Version: – SEIKO EPSON Corporation)\nMystery of Mortlake Mansion (HKLM-x32…WTA-fa5c5656-0bbe-4718-93c5-e01c9a8c326f) (Version: 2.2.0.98 – WildTangent) Hidden\nnewsXpresso (HKLM-x32…613C0AC5-3A67-4B94-8B13-9176AD83F5BF) (Version: 1.0.0.40 – esobi Inc.) Hidden\nnewsXpresso (HKLM-x32…InstallShield_613C0AC5-3A67-4B94-8B13-9176AD83F5BF) (Version: 1.0.0.40 – esobi Inc.)\nNotepad++ (HKLM-x32…Notepad++) (Version: 6.6.8 – Notepad++ Team)\nNTI Media Maker 9 (HKLM-x32…D3D5C4E8-040F-4C6F-8105-41D43CF94F44) (Version: 9.0.2.9002 – NTI Corporation) Hidden\nNTI Media Maker 9 (HKLM-x32…InstallShield_D3D5C4E8-040F-4C6F-8105-41D43CF94F44) (Version: 9.0.2.9002 – NTI Corporation)\nNVIDIA Driver grafico 391.35 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.Driver) (Version: 391.35 – NVIDIA Corporation)\nNVIDIA GeForce Experience 3.13.1.30 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.GFExperience) (Version: 3.13.1.30 – NVIDIA Corporation)\nNVIDIA PhysX System Software 9.17.0524 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.PhysX) (Version: 9.17.0524 – NVIDIA Corporation)\nOnline Plug-in (HKLM-x32…9A0FE2C0-7A7E-444E-8BD4-087178A91865) (Version: 14.0.0.91 – Citrix Systems, Inc.) Hidden\nOrigin (HKLM-x32…Origin) (Version: 10.5.2.49155 – Electronic Arts, Inc.)\nOverwolf (HKLM-x32…Overwolf) (Version: 0.143.0.24 – Overwolf Ltd.)\nPannello di controllo NVIDIA 391.35 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.ControlPanel) (Version: 391.35 – NVIDIA Corporation) Hidden\nPenguins! (HKLM-x32…WTA-f82d33cf-1bf0-4c54-85ca-769791349557) (Version: 2.2.0.95 – WildTangent) Hidden\nPidgin (HKLM-x32…Pidgin) (Version: 2.10.7 – )\nPlants vs. Zombies – Game of the Year (HKLM-x32…WTA-fc291ad5-7412-47d4-8641-d23ea23ef2e0) (Version: 2.2.0.95 – WildTangent) Hidden\nPoczta usługi Windows Live (HKLM-x32…64376910-1860-4CEF-8B34-AA5D205FC5F1) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nPodstawowe programy Windows Live (HKLM-x32…7A9D47BA-6D50-4087-866F-0800D8B89383) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nPolar Bowler (HKLM-x32…WTA-4f14c51e-af03-4658-92f9-0f759f61b306) (Version: 2.2.0.97 – WildTangent) Hidden\nPošta Windows Live (HKLM-x32…7BA19818-F717-4DFB-BC11-FAF17B2B8AEE) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nPunkBuster Services (HKLM-x32…PunkBusterSvc) (Version: 0.991 – Even Balance, Inc.)\nQuickTime (HKLM-x32…B67BAFBA-4C9F-48FA-9496-933E3B255044) (Version: 7.74.80.86 – Apple Inc.)\nRaccolta foto di Windows Live (HKLM-x32…ED16B700-D91F-44B0-867C-7EB5253CA38D) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nRealtek High Definition Audio Driver (HKLM-x32…F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC) (Version: 6.0.1.6438 – Realtek Semiconductor Corp.)\nRenesas Electronics USB 3.0 Host Controller Driver (HKLM-x32…5442DAB8-7177-49E1-8B22-09A049EA5996) (Version: 2.0.34.0 – Renesas Electronics Corporation) Hidden\nRenesas Electronics USB 3.0 Host Controller Driver (HKLM-x32…InstallShield_5442DAB8-7177-49E1-8B22-09A049EA5996) (Version: 2.0.34.0 – Renesas Electronics Corporation)\nSDK Debuggers (HKLM-x32…9274C832-3D8A-A294-FDE8-8B9272357098) (Version: 8.100.26936 – Microsoft Corporation) Hidden\nShockwave (HKLM-x32…Shockwave) (Version: – )\nSierra Utilities (HKLM-x32…Sierra Utilities) (Version: – )\nSkype Click to Call (HKLM-x32…873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B) (Version: 8.5.0.9167 – Microsoft Corporation)\nSkype for Business Web App Plug-in (HKLM-x32…37C8167B-B653-4955-A6E8-EBB8DE937DDD) (Version: 15.8.20020.400 – Microsoft Corporation)\nSkype versione 8.44 (HKLM-x32…Skype_is1) (Version: 8.44 – Skype Technologies S.A.)\nSkype Web Plugin (HKLM-x32…DF6DC2FB-6783-4340-8B98-401CB656AD3A) (Version: 7.26.0.48 – Skype Technologies S.A.)\nSlingo Deluxe (HKLM-x32…WTA-0317c6a7-06b3-4b13-8a10-9b264c639ed4) (Version: 2.2.0.95 – WildTangent) Hidden\nSteam (HKLM-x32…Steam) (Version: – Valve Corporation)\nSupporto applicazioni Apple (HKLM-x32…5D09C772-ECB3-442B-9CC6-B4341C78FDC2) (Version: 2.3.4 – Apple Inc.)\nSynaptics Pointing Device Driver (HKLM…SynTPDeinstKey) (Version: 15.1.6.0 – Synaptics Incorporated)\nTeamSpeak 3 Client (HKLM…TeamSpeak 3 Client) (Version: 3.0.15 – TeamSpeak Systems GmbH)\nTeamViewer (HKLM-x32…TeamViewer) (Version: 15.4.4445 – TeamViewer)\nTorchlight (HKLM-x32…WTA-86f22e04-aba5-46a2-baee-2d2b15dcd07d) (Version: 2.2.0.97 – WildTangent) Hidden\nTreeSize Free V4.2 (HKLM-x32…TreeSize Free_is1) (Version: 4.2 – JAM Software)\nUnity Web Player (HKUS-1-5-21-1536202438-368462837-3654654372-1001…UnityWebPlayer) (Version: 5.0.1f1 – Unity Technologies ApS)\nUpdate Installer for WildTangent Games App (HKLM-x32…2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2.WildTangent Games App) (Version: – WildTangent) Hidden\nUplay (HKLM-x32…Uplay) (Version: 46.0 – Ubisoft)\nVirtual Villagers 4 – The Tree of Life (HKLM-x32…WTA-2d8486f0-4bd6-4e7d-9791-27029e7c6472) (Version: 2.2.0.97 – WildTangent) Hidden\nVLC media player (HKLM-x32…VLC media player) (Version: 3.0.8 – VideoLAN)\nVulkan Run Time Libraries 1.0.65.1 (HKLM…VulkanRT1.0.65.1) (Version: 1.0.65.1 – LunarG, Inc.) Hidden\nWedding Dash (HKLM-x32…WTA-e9518137-4e7b-4626-9f43-7daf4e91fd72) (Version: 2.2.0.95 – WildTangent) Hidden\nWelcome Center (HKLM-x32…Acer Welcome Center) (Version: 1.02.3504 – Acer Incorporated)\nWhoCrashed 5.54 (HKLM…WhoCrashed_is1) (Version: – Resplendence Software Projects Sp.)\nWildTangent Games App (HKLM-x32…70B446D1-E03B-4ab0-9B3C-0832142C9AA8.WildTangent Games App-acer) (Version: 4.0.10.25 – WildTangent) Hidden\nWindows Live Essentials (HKLM-x32…WinLiveSuite) (Version: 15.4.3538.0513 – Microsoft Corporation)\nWindows Software Development Kit for Windows 8.1 (HKLM-x32…ed3a6e6d-9661-4357-abe4-fcc03dc57a07) (Version: 8.100.26936 – Microsoft Corporation)\nWinRAR 4.20 (32-bit) (HKLM-x32…WinRAR archiver) (Version: 4.20.0 – win.rar GmbH)\nWPT Redistributables (HKLM-x32…64F3FB9A-9250-B2D6-00B4-50BE0358AEE8) (Version: 8.100.26936 – Microsoft) Hidden\nWPTx64 (HKLM-x32…BFF81CB5-E8C7-4184-FBB4-74ADFBC6CCCB) (Version: 8.100.26936 – Microsoft) Hidden\nZuma Deluxe (HKLM-x32…WTA-744d629c-c549-4c3b-b820-4ba591229d4e) (Version: 2.2.0.95 – WildTangent) Hidden\nΣυλλογή φωτογραφιών του Windows Live (HKLM-x32…C00C2A91-6CB3-483F-80B3-2958E29468F1) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nОсновные компоненты Windows Live (HKLM-x32…E83DC314-C926-4214-AD58-147691D6FE9F) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nПочта Windows Live (HKLM-x32…B63F0CE3-CCD0-490A-9A9C-E1A3B3A17137) (Version: 15.4.3502.0922 – Корпорация Майкрософт) Hidden\nФотоальбом Windows Live (HKLM-x32…77F69CA1-E53D-4D77-8BA3-FA07606CC851) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nФотогалерия на Windows Live (HKLM-x32…4444F27C-B1A8-464E-9486-4C37BAB39A09) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nגלריית התמונות של Windows Live (HKLM-x32…CE929F09-3853-4180-BD90-30764BFF7136) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nبريد Windows Live (HKLM-x32…A4C4B29-5A9D-4910-A13C-B920D5758744) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nمعرض صور Windows Live (HKLM-x32…FBCA06D2-4642-4F33-B20A-A7AB3F0D2E69) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden","html":"Acer Backup Manager (HKLM-x32…InstallShield_0B61BBD5-DA3C-409A-8730-0C3DC3B0F270) (Version: 3.0.0.99 – NTI Corporation)\nAcer Crystal Eye Webcam (HKLM-x32…1FB4998-33C4-4431-85ED-079E3EEFE75D) (Version: 1.0.1904 – CyberLink Corp.) Hidden\nAcer Crystal Eye Webcam (HKLM-x32…InstallShield_01FB4998-33C4-4431-85ED-079E3EEFE75D) (Version: 1.0.1904 – CyberLink Corp.)\nAcer ePower Management (HKLM-x32…3DB0448D-AD82-4923-B305-D001E521A964) (Version: 6.00.3008 – Acer Incorporated)\nAcer eRecovery Management (HKLM-x32…7F811A54-5A09-4579-90E1-C93498E230D9) (Version: 5.00.3504 – Acer Incorporated)\nAcer Games (HKLM-x32…WildTangent acer Master Uninstall) (Version: 1.0.2.5 – WildTangent)\nAcer Registration (HKLM-x32…Acer Registration) (Version: 1.04.3504 – Acer Incorporated)\nAcer ScreenSaver (HKLM-x32…Acer Screensaver) (Version: 1.1.0913.2011 – Acer Incorporated)\nAcer Updater (HKLM-x32…EE171732-BEB4-4576-887D-CB62727F01CA) (Version: 1.02.3502 – Acer Incorporated)\nAdobe Acrobat Reader DC – Italiano (HKLM-x32…AC76BA86-7AD7-1040-7B44-AC0F074E4100) (Version: 20.006.20042 – Adobe Systems Incorporated)\nAdobe AIR (HKLM-x32…Adobe AIR) (Version: 2.7.1.19610 – Adobe Systems Incorporated)\nAdobe Flash Player 29 ActiveX (HKLM-x32…Adobe Flash Player ActiveX) (Version: 29.0.0.140 – Adobe Systems Incorporated)\nAdobe Flash Player 32 NPAPI (HKLM-x32…Adobe Flash Player NPAPI) (Version: 32.0.0.303 – Adobe)\nAgatha Christie – Death on the Nile (HKLM-x32…WTA-5e746bf8-8dee-4fe9-9f1a-49235ad98c76) (Version: 2.2.0.98 – WildTangent) Hidden\nAggiornamenti NVIDIA 31.1.10.0 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.Update) (Version: 31.1.10.0 – NVIDIA Corporation) Hidden\nApplication Verifier x64 External Package (HKLM…77F3D72C-465F-BD51-890E-CC3914B1365F) (Version: 8.100.26936 – Microsoft) Hidden\nAspera Connect 3.6.1.111228 (HKLM-x32…EC793CAC-7C41-4817-BA98-7E481A79F9CF) (Version: 3.6.1.111228 – © Copyright IBM Corp. 2014) Hidden\nAspera Connect 3.6.1.111228 (HKUS-1-5-21-1536202438-368462837-3654654372-1001…Aspera Connect 3.6.1.111228) (Version: 3.6.1.111228 – © Copyright IBM Corp. 2014)\nAssassin's Creed IV Black Flag (HKLM-x32…Uplay Install 273) (Version: – Ubisoft)\nAvira (HKLM-x32…CAB70370-888E-4D62-B5D5-DA7982585C46) (Version: 1.2.145.25926 – Avira Operations GmbH & Co. KG) Hidden\nAvira (HKLM-x32…e636e084-c7ab-4246-8ad2-aa1bb1cbedfd) (Version: 1.2.145.25926 – Avira Operations GmbH & Co. KG)\nAvira Antivirus (HKLM-x32…Avira Antivirus) (Version: 15.0.2004.1828 – Avira Operations GmbH & Co. KG)\nAvira Phantom VPN (HKLM-x32…Avira Phantom VPN) (Version: 2.32.2.34115 – Avira Operations GmbH & Co. KG)\nAvira Software Updater (HKLM-x32…30947035-9248-4304-96CE-CB6B1D38CFD5) (Version: 2.0.6.30594 – Avira Operations GmbH & Co. KG)\nAvira System Speedup (HKLM-x32…Avira System Speedup_is1) (Version: 6.4.1.10871 – Avira Operations GmbH & Co. KG)\nBackup Manager V3 (HKLM-x32…B61BBD5-DA3C-409A-8730-0C3DC3B0F270) (Version: 3.0.0.99 – NTI Corporation) Hidden\nBattle.net (HKLM-x32…Battle.net) (Version: – Blizzard Entertainment)\nBejeweled 2 Deluxe (HKLM-x32…WTA-878366c0-7e0d-49fc-9060-e75a6dabe155) (Version: 2.2.0.95 – WildTangent) Hidden\nBlue Jeans (HKLM-x32…6D19EE68-6672-48DB-A45A-5CCFA8021D92) (Version: 1.28.10 – Blue Jeans)\nBroadcom Card Reader Driver Installer (HKLM…4710662C-8204-4334-A977-B1AC9E547819) (Version: 14.8.2.2 – Broadcom Corporation)\nBroadcom NetLink Controller (HKLM…C91DCB72-F5BB-410D-A91A-314F5D1B4284) (Version: 14.8.4.1 – Broadcom Corporation)\nCaesar 3 (HKLM-x32…Caesar 3) (Version: – )\nChuzzle Deluxe (HKLM-x32…WTA-7f54354a-b7a2-4639-9a5c-f4b75efe2e90) (Version: 2.2.0.95 – WildTangent) Hidden\nclear.fi (HKLM-x32…14C4C3B6-F1F4-401F-8C86-03E8E19AAC8C) (Version: 1.0.1517_36458 – CyberLink Corp.) Hidden\nclear.fi (HKLM-x32…2637C347-9DAD-11D6-9EA2-00055D0CA761) (Version: 1.0.2024.00 – CyberLink Corp.) Hidden\nclear.fi (HKLM-x32…B906C11A-D193-4143-9FA7-E2EE8A5A8F21) (Version: 9.0.8026 – CyberLink Corp.) Hidden\nclear.fi (HKLM-x32…InstallShield_2637C347-9DAD-11D6-9EA2-00055D0CA761) (Version: 1.0.2024.00 – CyberLink Corp.)\nclear.fi Client (HKLM-x32…43AAE145-83CF-4C96-9A5E-756CEFCE879F) (Version: 1.00.3500 – Acer Incorporated)\nCrazy Chicken Kart 2 (HKLM-x32…WTA-111fa445-16e9-4867-bd6d-79c26bc446f5) (Version: 2.2.0.97 – WildTangent) Hidden\nD3DX10 (HKLM-x32…E09C4DB7-630C-4F06-A631-8EA7239923AF) (Version: 15.4.2368.0902 – Microsoft) Hidden\nDAEMON Tools Lite (HKLM-x32…DAEMON Tools Lite) (Version: 4.48.1.0347 – Disc Soft Ltd)\nDiablo III (HKLM-x32…Diablo III) (Version: – Blizzard Entertainment)\nDiscord (HKUS-1-5-21-1536202438-368462837-3654654372-1001…Discord) (Version: 0.0.306 – Discord Inc.)\nDisinstalla EPSON SX100 Series Printer (HKLM…EPSON SX100 Series) (Version: – SEIKO EPSON Corporation)\nDisplayDriverAnalyzer (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_DisplayDriverAnalyzer) (Version: 391.35 – NVIDIA Corporation) Hidden\nDolby Advanced Audio v2 (HKLM-x32…B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613) (Version: 7.2.7000.7 – Dolby Laboratories Inc)\nDragon Age II (HKLM-x32…F2E23139-3404-4E3C-9855-7724415D62A5) (Version: 1.04 – Electronic Arts, Inc.)\nDropbox (HKUS-1-5-21-1536202438-368462837-3654654372-1001…Dropbox) (Version: 3.0.5 – Dropbox, Inc.)\neBay Worldwide (HKLM-x32…D3E5A972-9A15-427D-AE78-8181A5FD943C) (Version: 2.2.0409 – OEM)\nEpson Connect Printer Setup (HKLM-x32…D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C) (Version: 1.4.0 – Seiko Epson Corporation)\nEpson Event Manager (HKLM-x32…9F205E94-9E42-4486-A92A-DF3F6CB85444) (Version: 3.10.0061 – Seiko Epson Corporation)\nEPSON Remote Print Uninstall (HKLM…EPSON Remote Print) (Version: – SEIKO EPSON Corporation)\nEPSON Scan (HKLM-x32…EPSON Scanner) (Version: – Seiko Epson Corporation)\nEpson Software Updater (HKLM-x32…FD036A57-F81D-4865-AAF0-811558EA76AE) (Version: 4.5.1 – Seiko Epson Corporation)\nEPSON XP-312 313 315 Series Printer Uninstall (HKLM…EPSON XP-312 313 315 Series) (Version: – SEIKO EPSON Corporation)\nEpsonNet Print (HKLM-x32…3E31400D-274E-4647-916C-2CACC3741799) (Version: 2.6.0 – SEIKO EPSON CORPORATION)\nEvernote v. 4.5.1 (HKLM-x32…28921580-E4BB-11E0-9FD7-1CC1DEF07CBE) (Version: 4.5.1.5451 – Evernote Corp.)\nFATE (HKLM-x32…WTA-d562914f-464e-442a-9b6b-eef07926c4b7) (Version: 2.2.0.97 – WildTangent) Hidden\nFinal Drive: Nitro (HKLM-x32…WTA-ba528cbd-abfc-43b4-b622-039073085d6c) (Version: 2.2.0.95 – WildTangent) Hidden\nFooz Kids (HKLM-x32…4C774C35-E0AF-72E1-136A-2BF666702268) (Version: 3.0.8 – FUHU, Inc.) Hidden\nFooz Kids (HKLM-x32…FoozKids) (Version: 3.0.8 – FUHU, Inc.)\nFooz Kids Platform (HKLM-x32…8D68CE08-9A14-4B7B-9857-3C646A2F34C7) (Version: 2.1 – FUHU, Inc.)\nFotogalerija Windows Live (HKLM-x32…E59969EA-3B5B-4B24-8B94-43842A7FBFE9) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nGaleria de Fotografias do Windows Live (HKLM-x32…EC0B576-90F9-43C3-8FAD-A4902DF4B8F4) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nGalería fotográfica de Windows Live (HKLM-x32…E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nGaleria fotogràfica del Windows Live (HKLM-x32…4736B0ED-F6A1-48EC-A1B7-C053027648F1) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nGaleria fotografii usługi Windows Live (HKLM-x32…CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nGalerie de photos Windows Live (HKLM-x32…488F0347-C4A7-4374-91A7-30818BEDA710) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nGalerie foto Windows Live (HKLM-x32…CB66242D-12B1-4494-82D2-6F53A7E024A3) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nGoogle Chrome (HKLM-x32…Google Chrome) (Version: 81.0.4044.113 – Google LLC)\nGoogle Update Helper (HKLM-x32…60EC980A-BDA2-4CB6-A427-B07A5498B4CA) (Version: 1.3.35.451 – Google LLC) Hidden\nHearthArena Companion (HKUS-1-5-21-1536202438-368462837-3654654372-1001…Overwolf_eldaohcjmecjpkpdhhoiolhhaeapcldppbdgbnbc) (Version: 1.5.0.2 – Overwolf app)\nHearthstone (HKLM-x32…Hearthstone) (Version: – Blizzard Entertainment)\nHearthstone Deck Tracker (HKUS-1-5-21-1536202438-368462837-3654654372-1001…HearthstoneDeckTracker) (Version: 1.10.7 – HearthSim)\nHP USB Disk Storage Format Tool (HKLM-x32…E0DF90C-D0BA-4C89-9262-AD78D1A3DE51) (Version: – )\nIdentity Card (HKLM-x32…Identity Card) (Version: 1.00.3501 – Acer Incorporated)\nInsaniquarium Deluxe (HKLM-x32…WTA-1aadf450-ec73-41b5-b741-966d0737010a) (Version: 2.2.0.97 – WildTangent) Hidden\nIntel® Control Center (HKLM-x32…F8A9085D-4C7A-41a9-8A77-C8998A96C421) (Version: 1.2.1.1007 – Intel Corporation)\nIntel® Management Engine Components (HKLM-x32…65153EA5-8B6E-43B6-857B-C6E4FC25798A) (Version: 7.0.0.1144 – Intel Corporation)\nIntel® Processor Graphics (HKLM-x32…F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA) (Version: 8.15.10.2342 – Intel Corporation)\nIntel® Processor Identification Utility (HKLM-x32…A92A4DB0-CD37-42D1-BE1D-603D53C24328) (Version: 1.0.0.0 – Intel Corporation)\nIntel® Rapid Storage Technology (HKLM-x32…3E29EE6C-963A-4aae-86C1-DC237C4A49FC) (Version: 10.5.0.1026 – Intel Corporation)\nIntel® SDK for OpenCL – CPU Only Runtime Package (HKLM-x32…FCB3772C-B7D0-4933-B1A9-3707EBACC573) (Version: 2.0.0.37149 – Intel Corporation)\nJava 8 Update 171 (HKLM-x32…26A24AE4-039D-4CA4-87B4-2F32180171F0) (Version: 8.0.1710.11 – Oracle Corporation)\nJewel Match 3 (HKLM-x32…WTA-63325e84-34c2-4ccd-b3ee-87abc401d44a) (Version: 2.2.0.97 – WildTangent) Hidden\nJewel Quest Solitaire (HKLM-x32…WTA-4d51be1b-2978-4973-ad15-8b42189f04f8) (Version: 2.2.0.95 – WildTangent) Hidden\nJohn Deere Drive Green (HKLM-x32…WTA-91a805f7-4cee-4088-a326-afc28032536e) (Version: 2.2.0.95 – WildTangent) Hidden\nJuniper Installer Service (HKLM-x32…93A64A36-C060-47B4-96DE-D405CC22F4C4) (Version: 7.4.28485 – Juniper Networks) Hidden\nJuniper Installer Service 7.4 (HKLM-x32…Juniper Installer Service 7.4) (Version: 7.4.28485 – Juniper Networks, Inc.)\nJuniper Networks Network Connect 7.1.8 (HKLM-x32…Juniper Network Connect 7.1.8) (Version: 7.1.8.20737 – Juniper Networks)\nJuniper Networks Network Connect 7.3.0 (HKLM-x32…Juniper Network Connect 7.3.0) (Version: 7.3.0.24657 – Juniper Networks)\nJuniper Networks Network Connect 7.4.0 (HKLM-x32…Juniper Network Connect 7.4.0) (Version: 7.4.0.30731 – Juniper Networks)\nJuniper Networks, Inc. Setup Client (HKUS-1-5-21-1536202438-368462837-3654654372-1001…Juniper_Setup_Client) (Version: 7.4.10.45165 – Juniper Networks, Inc.)\nJuniper Networks, Inc. Setup Client 64-bit Activex Control (HKLM…Juniper_Setup_Client Activex Control) (Version: 2.1.1.1 – Juniper Networks, Inc.)\nJuniper Networks, Inc. Setup Client Activex Control (HKLM-x32…Juniper_Setup_Client Activex Control) (Version: 2.1.1.1 – Juniper Networks, Inc.)\nJunk Mail filter update (HKLM-x32…1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nKeePass Password Safe 2.44 (HKLM-x32…KeePassPasswordSafe2_is1) (Version: 2.44 – Dominik Reichl)\nKits Configuration Installer (HKLM-x32…B74E65FD-CC47-41C5-4B89-791A3F61942D) (Version: 8.100.25984 – Microsoft) Hidden\nKodi (HKUS-1-5-21-1536202438-368462837-3654654372-1001…Kodi) (Version: – XBMC-Foundation)\nLaunch Manager (HKLM-x32…LManager) (Version: 5.1.7 – Acer Inc.)\nLDPlayer (HKLM-x32…LDPlayer4) (Version: 4.0 – XUANZHI INTERNATIONAL CO., LIMITED)\nLINE (HKUS-1-5-21-1536202438-368462837-3654654372-1001…LINE) (Version: 5.21.3.2086 – LINE Corporation)\nManuali EPSON (HKLM-x32…84CECC1B-21EF-41B1-9A91-3E724E5D99D3) (Version: 1.53.0.0 – Seiko Epson Corporation)\nMcAfee WebAdvisor (HKLM-x32…35ED3F83-4BDC-4c44-8EC6-6A8301C7413A) (Version: 4.1.1.90 – McAfee, LLC.)\nMesh Runtime (HKLM-x32…8C6D6116-B724-4810-8F2D-D047E6B7D68E) (Version: 15.4.5722.2 – Microsoft Corporation) Hidden\nMicrosoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32…D1D37853-0004-3E36-A7AA-74F4EEA35F64) (Version: 4.5.50930 – Microsoft Corporation)\nMicrosoft .NET Framework 4.5.1 SDK (HKLM-x32…19A5926D-66E1-46FC-854D-163AA10A52D3) (Version: 4.5.51641 – Microsoft Corporation)\nMicrosoft .NET Framework 4.8 (HKLM…92FB6C44-E685-45AD-9B20-CADF4CABA132 – 1033) (Version: 4.8.03761 – Microsoft Corporation)\nMicrosoft .NET Framework 4.8 (Italiano) (HKLM…92FB6C44-E685-45AD-9B20-CADF4CABA132 – 1040) (Version: 4.8.03761 – Microsoft Corporation)\nMicrosoft Office 2010 (HKLM-x32…95140000-0070-0000-0000-0000000FF1CE) (Version: 14.0.4763.1000 – Microsoft Corporation)\nMicrosoft Office a portata di clic 2010 (HKLM-x32…Office14.Click2Run) (Version: 14.0.4763.1000 – Microsoft Corporation)\nMicrosoft Office Starter 2010 – Italiano (HKLM-x32…90140011-0066-0410-0000-0000000FF1CE) (Version: 14.0.5128.5002 – Microsoft Corporation)\nMicrosoft Security Essentials (HKLM…Microsoft Security Client) (Version: 4.10.209.0 – Microsoft Corporation)\nMicrosoft Silverlight (HKLM…89F4137D-6C26-4A84-BDB8-2E5A4BB71E00) (Version: 5.1.50918.0 – Microsoft Corporation)\nMicrosoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32…F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8) (Version: 3.1.0000 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…710f4c1c-cc18-4c49-8cbf-51240c89a1a2) (Version: 8.0.61001 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x64 9.0.30729.17 (HKLM…8220EEFE-38CD-377E-8595-13398D740ACE) (Version: 9.0.30729 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x64 9.0.30729.6161 (HKLM…5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.17 (HKLM-x32…9A25302D-30C0-39D9-BD6F-21E6EC160475) (Version: 9.0.30729 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.4148 (HKLM-x32…1F1C2DFC-2D24-3E06-BCB8-725134ADF989) (Version: 9.0.30729.4148 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.6161 (HKLM-x32…9BE518E6-ECC6-35A9-88E4-87755C07200F) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C++ 2010 x64 Redistributable – 10.0.40219 (HKLM…1D8E6291-B0D5-35EC-8441-6616F567A0F7) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2010 x86 Redistributable – 10.0.40219 (HKLM-x32…F0C3E5D1-1ADE-321E-8167-68EF0DE699A5) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x64) – 11.0.61030 (HKLM-x32…ca67548a-5ebe-413a-b50c-4b9ceb6d66c6) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x86) – 11.0.61030 (HKLM-x32…33d1fd90-4274-48a1-9bc1-97e33d9c2d6f) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x64) – 12.0.30501 (HKLM-x32…50d4fc8-5d48-4b8f-8972-47c82c46020f) (Version: 12.0.30501.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x86) – 12.0.30501 (HKLM-x32…f65db027-aff3-4070-886a-0d87064aabb1) (Version: 12.0.30501.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2015 Redistributable (x64) – 14.0.24215 (HKLM-x32…d992c12e-cab2-426f-bde3-fb8c53950b0d) (Version: 14.0.24215.1 – Microsoft Corporation)\nMicrosoft Visual C++ 2015 Redistributable (x86) – 14.0.24215 (HKLM-x32…e2803110-78b3-4664-a479-3611a381656a) (Version: 14.0.24215.1 – Microsoft Corporation)\nMonitoraggio della tecnologia Intel® Turbo Boost 2.0 (HKLM…B77EFA0B-9BD3-4122-9F9A-15A963B5EA24) (Version: 2.1.23.0 – Intel)\nMozilla Firefox 75.0 (x64 it) (HKLM…Mozilla Firefox 75.0 (x64 it)) (Version: 75.0 – Mozilla)\nMozilla Maintenance Service (HKLM-x32…MozillaMaintenanceService) (Version: 75.0.0.7398 – Mozilla)\nMSI Development Tools (HKLM-x32…CF3A1CA6-5E5E-B4BD-6CF1-363056816CA2) (Version: 8.100.26898 – Microsoft Corporation) Hidden\nMyEpson Portal (HKLM-x32…3361D415-BA35-4143-B301-661991BA6219) (Version: 1.1.2.2 – SEIKO EPSON CORPORATION) Hidden\nMyEpson Portal (HKLM-x32…MyEpson Portal) (Version: – SEIKO EPSON Corporation)\nMystery of Mortlake Mansion (HKLM-x32…WTA-fa5c5656-0bbe-4718-93c5-e01c9a8c326f) (Version: 2.2.0.98 – WildTangent) Hidden\nnewsXpresso (HKLM-x32…613C0AC5-3A67-4B94-8B13-9176AD83F5BF) (Version: 1.0.0.40 – esobi Inc.) Hidden\nnewsXpresso (HKLM-x32…InstallShield_613C0AC5-3A67-4B94-8B13-9176AD83F5BF) (Version: 1.0.0.40 – esobi Inc.)\nNotepad++ (HKLM-x32…Notepad++) (Version: 6.6.8 – Notepad++ Team)\nNTI Media Maker 9 (HKLM-x32…D3D5C4E8-040F-4C6F-8105-41D43CF94F44) (Version: 9.0.2.9002 – NTI Corporation) Hidden\nNTI Media Maker 9 (HKLM-x32…InstallShield_D3D5C4E8-040F-4C6F-8105-41D43CF94F44) (Version: 9.0.2.9002 – NTI Corporation)\nNVIDIA Driver grafico 391.35 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.Driver) (Version: 391.35 – NVIDIA Corporation)\nNVIDIA GeForce Experience 3.13.1.30 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.GFExperience) (Version: 3.13.1.30 – NVIDIA Corporation)\nNVIDIA PhysX System Software 9.17.0524 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.PhysX) (Version: 9.17.0524 – NVIDIA Corporation)\nOnline Plug-in (HKLM-x32…9A0FE2C0-7A7E-444E-8BD4-087178A91865) (Version: 14.0.0.91 – Citrix Systems, Inc.) Hidden\nOrigin (HKLM-x32…Origin) (Version: 10.5.2.49155 – Electronic Arts, Inc.)\nOverwolf (HKLM-x32…Overwolf) (Version: 0.143.0.24 – Overwolf Ltd.)\nPannello di controllo NVIDIA 391.35 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.ControlPanel) (Version: 391.35 – NVIDIA Corporation) Hidden\nPenguins! (HKLM-x32…WTA-f82d33cf-1bf0-4c54-85ca-769791349557) (Version: 2.2.0.95 – WildTangent) Hidden\nPidgin (HKLM-x32…Pidgin) (Version: 2.10.7 – )\nPlants vs. Zombies – Game of the Year (HKLM-x32…WTA-fc291ad5-7412-47d4-8641-d23ea23ef2e0) (Version: 2.2.0.95 – WildTangent) Hidden\nPoczta usługi Windows Live (HKLM-x32…64376910-1860-4CEF-8B34-AA5D205FC5F1) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nPodstawowe programy Windows Live (HKLM-x32…7A9D47BA-6D50-4087-866F-0800D8B89383) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nPolar Bowler (HKLM-x32…WTA-4f14c51e-af03-4658-92f9-0f759f61b306) (Version: 2.2.0.97 – WildTangent) Hidden\nPošta Windows Live (HKLM-x32…7BA19818-F717-4DFB-BC11-FAF17B2B8AEE) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nPunkBuster Services (HKLM-x32…PunkBusterSvc) (Version: 0.991 – Even Balance, Inc.)\nQuickTime (HKLM-x32…B67BAFBA-4C9F-48FA-9496-933E3B255044) (Version: 7.74.80.86 – Apple Inc.)\nRaccolta foto di Windows Live (HKLM-x32…ED16B700-D91F-44B0-867C-7EB5253CA38D) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nRealtek High Definition Audio Driver (HKLM-x32…F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC) (Version: 6.0.1.6438 – Realtek Semiconductor Corp.)\nRenesas Electronics USB 3.0 Host Controller Driver (HKLM-x32…5442DAB8-7177-49E1-8B22-09A049EA5996) (Version: 2.0.34.0 – Renesas Electronics Corporation) Hidden\nRenesas Electronics USB 3.0 Host Controller Driver (HKLM-x32…InstallShield_5442DAB8-7177-49E1-8B22-09A049EA5996) (Version: 2.0.34.0 – Renesas Electronics Corporation)\nSDK Debuggers (HKLM-x32…9274C832-3D8A-A294-FDE8-8B9272357098) (Version: 8.100.26936 – Microsoft Corporation) Hidden\nShockwave (HKLM-x32…Shockwave) (Version: – )\nSierra Utilities (HKLM-x32…Sierra Utilities) (Version: – )\nSkype Click to Call (HKLM-x32…873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B) (Version: 8.5.0.9167 – Microsoft Corporation)\nSkype for Business Web App Plug-in (HKLM-x32…37C8167B-B653-4955-A6E8-EBB8DE937DDD) (Version: 15.8.20020.400 – Microsoft Corporation)\nSkype versione 8.44 (HKLM-x32…Skype_is1) (Version: 8.44 – Skype Technologies S.A.)\nSkype Web Plugin (HKLM-x32…DF6DC2FB-6783-4340-8B98-401CB656AD3A) (Version: 7.26.0.48 – Skype Technologies S.A.)\nSlingo Deluxe (HKLM-x32…WTA-0317c6a7-06b3-4b13-8a10-9b264c639ed4) (Version: 2.2.0.95 – WildTangent) Hidden\nSteam (HKLM-x32…Steam) (Version: – Valve Corporation)\nSupporto applicazioni Apple (HKLM-x32…5D09C772-ECB3-442B-9CC6-B4341C78FDC2) (Version: 2.3.4 – Apple Inc.)\nSynaptics Pointing Device Driver (HKLM…SynTPDeinstKey) (Version: 15.1.6.0 – Synaptics Incorporated)\nTeamSpeak 3 Client (HKLM…TeamSpeak 3 Client) (Version: 3.0.15 – TeamSpeak Systems GmbH)\nTeamViewer (HKLM-x32…TeamViewer) (Version: 15.4.4445 – TeamViewer)\nTorchlight (HKLM-x32…WTA-86f22e04-aba5-46a2-baee-2d2b15dcd07d) (Version: 2.2.0.97 – WildTangent) Hidden\nTreeSize Free V4.2 (HKLM-x32…TreeSize Free_is1) (Version: 4.2 – JAM Software)\nUnity Web Player (HKUS-1-5-21-1536202438-368462837-3654654372-1001…UnityWebPlayer) (Version: 5.0.1f1 – Unity Technologies ApS)\nUpdate Installer for WildTangent Games App (HKLM-x32…2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2.WildTangent Games App) (Version: – WildTangent) Hidden\nUplay (HKLM-x32…Uplay) (Version: 46.0 – Ubisoft)\nVirtual Villagers 4 – The Tree of Life (HKLM-x32…WTA-2d8486f0-4bd6-4e7d-9791-27029e7c6472) (Version: 2.2.0.97 – WildTangent) Hidden\nVLC media player (HKLM-x32…VLC media player) (Version: 3.0.8 – VideoLAN)\nVulkan Run Time Libraries 1.0.65.1 (HKLM…VulkanRT1.0.65.1) (Version: 1.0.65.1 – LunarG, Inc.) Hidden\nWedding Dash (HKLM-x32…WTA-e9518137-4e7b-4626-9f43-7daf4e91fd72) (Version: 2.2.0.95 – WildTangent) Hidden\nWelcome Center (HKLM-x32…Acer Welcome Center) (Version: 1.02.3504 – Acer Incorporated)\nWhoCrashed 5.54 (HKLM…WhoCrashed_is1) (Version: – Resplendence Software Projects Sp.)\nWildTangent Games App (HKLM-x32…70B446D1-E03B-4ab0-9B3C-0832142C9AA8.WildTangent Games App-acer) (Version: 4.0.10.25 – WildTangent) Hidden\nWindows Live Essentials (HKLM-x32…WinLiveSuite) (Version: 15.4.3538.0513 – Microsoft Corporation)\nWindows Software Development Kit for Windows 8.1 (HKLM-x32…ed3a6e6d-9661-4357-abe4-fcc03dc57a07) (Version: 8.100.26936 – Microsoft Corporation)\nWinRAR 4.20 (32-bit) (HKLM-x32…WinRAR archiver) (Version: 4.20.0 – win.rar GmbH)\nWPT Redistributables (HKLM-x32…64F3FB9A-9250-B2D6-00B4-50BE0358AEE8) (Version: 8.100.26936 – Microsoft) Hidden\nWPTx64 (HKLM-x32…BFF81CB5-E8C7-4184-FBB4-74ADFBC6CCCB) (Version: 8.100.26936 – Microsoft) Hidden\nZuma Deluxe (HKLM-x32…WTA-744d629c-c549-4c3b-b820-4ba591229d4e) (Version: 2.2.0.95 – WildTangent) Hidden\nΣυλλογή φωτογραφιών του Windows Live (HKLM-x32…C00C2A91-6CB3-483F-80B3-2958E29468F1) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nОсновные компоненты Windows Live (HKLM-x32…E83DC314-C926-4214-AD58-147691D6FE9F) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nПочта Windows Live (HKLM-x32…B63F0CE3-CCD0-490A-9A9C-E1A3B3A17137) (Version: 15.4.3502.0922 – Корпорация Майкрософт) Hidden\nФотоальбом Windows Live (HKLM-x32…77F69CA1-E53D-4D77-8BA3-FA07606CC851) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nФотогалерия на Windows Live (HKLM-x32…4444F27C-B1A8-464E-9486-4C37BAB39A09) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nגלריית התמונות של Windows Live (HKLM-x32…CE929F09-3853-4180-BD90-30764BFF7136) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nبريد Windows Live (HKLM-x32…A4C4B29-5A9D-4910-A13C-B920D5758744) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nمعرض صور Windows Live (HKLM-x32…FBCA06D2-4642-4F33-B20A-A7AB3F0D2E69) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden
"},{"id":"text-46","type":"text","heading":"","plain_text":"==================== Custom CLSID (Whitelisted): ==============","html":"==================== Custom CLSID (Whitelisted): ==============
"},{"id":"text-47","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)","html":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
"},{"id":"text-48","type":"text","heading":"","plain_text":"CustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSID05A3A96-BAC4-4B0A-94EA-C0CE100EA736localserver32 -> C:UsersDanieleAppDataRoamingDropboxbinDropbox.exe (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSID4A9E854-6F47-4F37-8A10-F896717F0329InprocServer32 -> C:UsersDanieleAppDataLocalProgramsAsperaAspera Connectlib3.6.1npasperaweb64_3.6.1.111228.dll (Aspera, Inc. -> Aspera, Inc. )\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSID7ECF6F97-B4F3-4168-9835-F59C06D7875FInprocServer32 -> C:UsersDanieleAppDataLocalMicrosoftSkypeForBusinessPlugin15.8.20020.400GatewayActiveX-x64.dll (Microsoft Corporation -> Microsoft Corporation)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDAD17B774-7F87-4141-BB9C-2AEE3841DC4EInprocServer32 -> C:UsersDanieleAppDataLocalProgramsAsperaAspera Connectlib3.6.1npasperaweb64_3.6.1.111228.dll (Aspera, Inc. -> Aspera, Inc. )\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDBB384F15-7676-403E-B797-1F9D935525A3InprocServer32 -> C:UsersDanieleAppDataLocalSkypePlugin7.26.0.48GatewayActiveX-x64.dll (Microsoft Corporation -> Skype Technologies S.A.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314ED9-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314EDA-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314EDB-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314EDC-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314EDD-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314EDE-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314EDF-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314EE0-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt1 »] -> FB314ED9-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt2 »] -> FB314EDA-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt3 »] -> FB314EDD-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt4 »] -> FB314EDE-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt5 »] -> FB314EDB-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt6 »] -> FB314EDF-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt7 »] -> FB314EDC-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt8 »] -> FB314EE0-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nContextMenuHandlers1: [ANotepad++64] -> B298D29A-A6ED-11DE-BA8C-A68E55D89593 => C:Program Files (x86)Notepad++NppShell_06.dll [2014-05-12] () [File not signed]\nContextMenuHandlers1: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => C:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers1: [Shell Extension for Malware scanning] -> 45AC2688-0253-4ED8-97DE-B5370FA7D48A => C:Program Files (x86)AviraAntivirusshlext64.dll [2020-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nContextMenuHandlers1: [SystemSpeedupFilesMenu] -> 14cb2bd0-2375-3d10-9b5d-5e18865c8959 => C:Program Files (x86)AviraSystem SpeedupAvira.SystemSpeedup.UI.ShellExtension.DLL [2020-01-30] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nContextMenuHandlers1: [WinRAR] -> B41DB860-64E4-11D2-9906-E49FADC173CA => C:Program Files (x86)WinRARrarext64.dll [2012-06-09] (Alexander Roshal) [File not signed]\nContextMenuHandlers1-x32: [WinRAR32] -> B41DB860-8EE4-11D2-9906-E49FADC173CA => C:Program Files (x86)WinRARrarext.dll [2012-06-09] (Alexander Roshal) [File not signed]\nContextMenuHandlers2: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => C:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers4: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => C:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers4: [SystemSpeedupFoldersMenu] -> 700866bb-c8e9-3e71-b359-abb28baed0e8 => C:Program Files (x86)AviraSystem SpeedupAvira.SystemSpeedup.UI.ShellExtension.DLL [2020-01-30] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nContextMenuHandlers5: [igfxcui] -> 3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4 => C:Windowssystem32igfxpph.dll [2011-03-26] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)\nContextMenuHandlers5: [NvCplDesktopContext] -> 3D1975AF-48C6-4f8e-A182-BE0E08FA86A9 => C:Windowssystem32nvshext.dll [2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nContextMenuHandlers5: [SynGlwPad] -> 681C10CE-5E5D-463A-A270-771AA48E4C71 => C:WindowsSystem32SynGlwPadShlExt.dll [2010-07-29] (Synaptics Incorporated -> Synaptics Incorporated)\nContextMenuHandlers5: [SystemSpeedupDesktopMenu] -> 0cab5786-30e8-3185-9b3b-ccefbf1b8afe => C:Program Files (x86)AviraSystem SpeedupAvira.SystemSpeedup.UI.ShellExtension.DLL [2020-01-30] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nContextMenuHandlers6: [Shell Extension for Malware scanning] -> 45AC2688-0253-4ED8-97DE-B5370FA7D48A => C:Program Files (x86)AviraAntivirusshlext64.dll [2020-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nContextMenuHandlers6: [WinRAR] -> B41DB860-64E4-11D2-9906-E49FADC173CA => C:Program Files (x86)WinRARrarext64.dll [2012-06-09] (Alexander Roshal) [File not signed]\nContextMenuHandlers6-x32: [WinRAR32] -> B41DB860-8EE4-11D2-9906-E49FADC173CA => C:Program Files (x86)WinRARrarext.dll [2012-06-09] (Alexander Roshal) [File not signed]\nContextMenuHandlers1_S-1-5-21-1536202438-368462837-3654654372-1001: [DropboxExt] -> FB314ED9-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nContextMenuHandlers4_S-1-5-21-1536202438-368462837-3654654372-1001: [DropboxExt] -> FB314ED9-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nContextMenuHandlers5_S-1-5-21-1536202438-368462837-3654654372-1001: [DropboxExt] -> FB314ED9-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)","html":"CustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSID05A3A96-BAC4-4B0A-94EA-C0CE100EA736localserver32 -> C:UsersDanieleAppDataRoamingDropboxbinDropbox.exe (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSID4A9E854-6F47-4F37-8A10-F896717F0329InprocServer32 -> C:UsersDanieleAppDataLocalProgramsAsperaAspera Connectlib3.6.1npasperaweb64_3.6.1.111228.dll (Aspera, Inc. -> Aspera, Inc. )\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSID7ECF6F97-B4F3-4168-9835-F59C06D7875FInprocServer32 -> C:UsersDanieleAppDataLocalMicrosoftSkypeForBusinessPlugin15.8.20020.400GatewayActiveX-x64.dll (Microsoft Corporation -> Microsoft Corporation)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDAD17B774-7F87-4141-BB9C-2AEE3841DC4EInprocServer32 -> C:UsersDanieleAppDataLocalProgramsAsperaAspera Connectlib3.6.1npasperaweb64_3.6.1.111228.dll (Aspera, Inc. -> Aspera, Inc. )\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDBB384F15-7676-403E-B797-1F9D935525A3InprocServer32 -> C:UsersDanieleAppDataLocalSkypePlugin7.26.0.48GatewayActiveX-x64.dll (Microsoft Corporation -> Skype Technologies S.A.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314ED9-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314EDA-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314EDB-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314EDC-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314EDD-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314EDE-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314EDF-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314EE0-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt1 »] -> FB314ED9-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt2 »] -> FB314EDA-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt3 »] -> FB314EDD-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt4 »] -> FB314EDE-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt5 »] -> FB314EDB-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt6 »] -> FB314EDF-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt7 »] -> FB314EDC-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt8 »] -> FB314EE0-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nContextMenuHandlers1: [ANotepad++64] -> B298D29A-A6ED-11DE-BA8C-A68E55D89593 => C:Program Files (x86)Notepad++NppShell_06.dll [2014-05-12] () [File not signed]\nContextMenuHandlers1: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => C:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers1: [Shell Extension for Malware scanning] -> 45AC2688-0253-4ED8-97DE-B5370FA7D48A => C:Program Files (x86)AviraAntivirusshlext64.dll [2020-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nContextMenuHandlers1: [SystemSpeedupFilesMenu] -> 14cb2bd0-2375-3d10-9b5d-5e18865c8959 => C:Program Files (x86)AviraSystem SpeedupAvira.SystemSpeedup.UI.ShellExtension.DLL [2020-01-30] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nContextMenuHandlers1: [WinRAR] -> B41DB860-64E4-11D2-9906-E49FADC173CA => C:Program Files (x86)WinRARrarext64.dll [2012-06-09] (Alexander Roshal) [File not signed]\nContextMenuHandlers1-x32: [WinRAR32] -> B41DB860-8EE4-11D2-9906-E49FADC173CA => C:Program Files (x86)WinRARrarext.dll [2012-06-09] (Alexander Roshal) [File not signed]\nContextMenuHandlers2: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => C:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers4: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => C:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers4: [SystemSpeedupFoldersMenu] -> 700866bb-c8e9-3e71-b359-abb28baed0e8 => C:Program Files (x86)AviraSystem SpeedupAvira.SystemSpeedup.UI.ShellExtension.DLL [2020-01-30] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nContextMenuHandlers5: [igfxcui] -> 3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4 => C:Windowssystem32igfxpph.dll [2011-03-26] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)\nContextMenuHandlers5: [NvCplDesktopContext] -> 3D1975AF-48C6-4f8e-A182-BE0E08FA86A9 => C:Windowssystem32nvshext.dll [2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nContextMenuHandlers5: [SynGlwPad] -> 681C10CE-5E5D-463A-A270-771AA48E4C71 => C:WindowsSystem32SynGlwPadShlExt.dll [2010-07-29] (Synaptics Incorporated -> Synaptics Incorporated)\nContextMenuHandlers5: [SystemSpeedupDesktopMenu] -> 0cab5786-30e8-3185-9b3b-ccefbf1b8afe => C:Program Files (x86)AviraSystem SpeedupAvira.SystemSpeedup.UI.ShellExtension.DLL [2020-01-30] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nContextMenuHandlers6: [Shell Extension for Malware scanning] -> 45AC2688-0253-4ED8-97DE-B5370FA7D48A => C:Program Files (x86)AviraAntivirusshlext64.dll [2020-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nContextMenuHandlers6: [WinRAR] -> B41DB860-64E4-11D2-9906-E49FADC173CA => C:Program Files (x86)WinRARrarext64.dll [2012-06-09] (Alexander Roshal) [File not signed]\nContextMenuHandlers6-x32: [WinRAR32] -> B41DB860-8EE4-11D2-9906-E49FADC173CA => C:Program Files (x86)WinRARrarext.dll [2012-06-09] (Alexander Roshal) [File not signed]\nContextMenuHandlers1_S-1-5-21-1536202438-368462837-3654654372-1001: [DropboxExt] -> FB314ED9-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nContextMenuHandlers4_S-1-5-21-1536202438-368462837-3654654372-1001: [DropboxExt] -> FB314ED9-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nContextMenuHandlers5_S-1-5-21-1536202438-368462837-3654654372-1001: [DropboxExt] -> FB314ED9-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)
"},{"id":"text-49","type":"text","heading":"","plain_text":"==================== Codecs (Whitelisted) ====================","html":"==================== Codecs (Whitelisted) ====================
"},{"id":"text-50","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)","html":"(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
"},{"id":"text-51","type":"text","heading":"","plain_text":"HKLM…Drivers32: [msacm.l3acm] => C:WindowsSysWOW64l3codecp.acm [220672 2009-07-14] (Microsoft Windows -> Fraunhofer Institut Integrierte Schaltungen IIS)","html":"HKLM…Drivers32: [msacm.l3acm] => C:WindowsSysWOW64l3codecp.acm [220672 2009-07-14] (Microsoft Windows -> Fraunhofer Institut Integrierte Schaltungen IIS)
"},{"id":"text-52","type":"text","heading":"","plain_text":"==================== Shortcuts & WMI ========================","html":"==================== Shortcuts & WMI ========================
"},{"id":"text-53","type":"text","heading":"","plain_text":"(The entries could be listed to be restored or removed.)","html":"(The entries could be listed to be restored or removed.)
"},{"id":"text-54","type":"text","heading":"","plain_text":"WMI:subscription__FilterToConsumerBinding->CommandLineEventConsumer.Name="BVTConsumer"",Filter="__EventFilter.Name="BVTFilter"::\nWMI:subscription__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA « Win32_Processor » AND TargetInstance.LoadPercentage > 99]\nWMI:subscriptionCommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]","html":"WMI:subscription__FilterToConsumerBinding->CommandLineEventConsumer.Name="BVTConsumer"",Filter="__EventFilter.Name="BVTFilter"::\nWMI:subscription__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA « Win32_Processor » AND TargetInstance.LoadPercentage > 99]\nWMI:subscriptionCommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]
"},{"id":"text-55","type":"text","heading":"","plain_text":"==================== Loaded Modules (Whitelisted) =============","html":"==================== Loaded Modules (Whitelisted) =============
"},{"id":"text-56","type":"text","heading":"","plain_text":"2020-04-18 15:24 – 2020-04-18 15:24 – 096130048 _____ () [File not signed] C:Program Files (x86)Battle.netBattle.net.11943libcef.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000117760 _____ () [File not signed] C:Program Files (x86)Battle.netBattle.net.11943libEGL.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 004342784 _____ () [File not signed] C:Program Files (x86)Battle.netBattle.net.11943libGLESv2.dll\n2019-03-28 00:48 – 2019-03-28 00:48 – 000115200 _____ (Microsoft Corporation) [File not signed] C:WindowsMicrosoft.NetassemblyGAC_32System.EnterpriseServicesv4.0_4.0.0.0__b03f5f7f11d50a3aSystem.EnterpriseServices.Wrapper.dll\n2018-05-03 22:00 – 2018-05-03 22:00 – 001101824 _____ (Microsoft Corporation) [File not signed] C:WindowsWinSxSx86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8fMFC80.DLL\n2018-05-03 22:00 – 2018-05-03 22:00 – 001093120 _____ (Microsoft Corporation) [File not signed] C:WindowsWinSxSx86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8fMFC80U.DLL\n2018-05-03 22:00 – 2018-05-03 22:00 – 000061440 _____ (Microsoft Corporation) [File not signed] C:WindowsWinSxSx86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_03ce2c72205943d3MFC80ITA.DLL\n2015-05-01 19:18 – 2012-11-12 15:15 – 000558592 _____ (SEIKO EPSON CORPORATION) [File not signed] C:WindowsSystem32enppmon.dll\n2015-05-01 19:18 – 2012-10-22 17:19 – 000219648 _____ (SEIKO EPSON CORPORATION) [File not signed] C:WindowsSystem32enpres.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000760832 _____ (The Chromium Authors) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943chrome_elf.dll\n2020-04-18 15:23 – 2020-04-18 15:23 – 000047104 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943audioqtaudio_windows.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000026112 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943imageformatsqgif.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000027136 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943imageformatsqico.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000243712 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943imageformatsqjpeg.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000223744 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943imageformatsqmng.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000020992 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943imageformatsqsvg.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000332288 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943imageformatsqtiff.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 001140224 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943platformsqwindows.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000041984 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtGraphicalEffectsprivateqtgraphicaleffectsprivate.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000014848 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtGraphicalEffectsqtgraphicaleffectsplugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000014848 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtQmlModels.2modelsplugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000014848 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtQuick.2qtquick2plugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000084480 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtQuickControls.2qtquickcontrols2plugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000267776 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtQuickControlsqtquickcontrolsplugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000071680 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtQuickLayoutsqquicklayoutsplugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000211456 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtQuickTemplates.2qtquicktemplates2plugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000014848 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtQuickWindow.2windowplugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 004943360 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Core.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 005022208 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Gui.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000626176 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Multimedia.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000877056 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Network.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 002908672 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Qml.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 003078656 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Quick.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000096256 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5QuickControls2.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000681472 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5QuickTemplates2.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000259072 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Svg.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 004718080 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Widgets.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000439296 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5WinExtras.dll\n2020-04-18 15:25 – 2020-04-18 15:25 – 000159232 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Xml.dll","html":"2020-04-18 15:24 – 2020-04-18 15:24 – 096130048 _____ () [File not signed] C:Program Files (x86)Battle.netBattle.net.11943libcef.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000117760 _____ () [File not signed] C:Program Files (x86)Battle.netBattle.net.11943libEGL.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 004342784 _____ () [File not signed] C:Program Files (x86)Battle.netBattle.net.11943libGLESv2.dll\n2019-03-28 00:48 – 2019-03-28 00:48 – 000115200 _____ (Microsoft Corporation) [File not signed] C:WindowsMicrosoft.NetassemblyGAC_32System.EnterpriseServicesv4.0_4.0.0.0__b03f5f7f11d50a3aSystem.EnterpriseServices.Wrapper.dll\n2018-05-03 22:00 – 2018-05-03 22:00 – 001101824 _____ (Microsoft Corporation) [File not signed] C:WindowsWinSxSx86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8fMFC80.DLL\n2018-05-03 22:00 – 2018-05-03 22:00 – 001093120 _____ (Microsoft Corporation) [File not signed] C:WindowsWinSxSx86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8fMFC80U.DLL\n2018-05-03 22:00 – 2018-05-03 22:00 – 000061440 _____ (Microsoft Corporation) [File not signed] C:WindowsWinSxSx86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_03ce2c72205943d3MFC80ITA.DLL\n2015-05-01 19:18 – 2012-11-12 15:15 – 000558592 _____ (SEIKO EPSON CORPORATION) [File not signed] C:WindowsSystem32enppmon.dll\n2015-05-01 19:18 – 2012-10-22 17:19 – 000219648 _____ (SEIKO EPSON CORPORATION) [File not signed] C:WindowsSystem32enpres.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000760832 _____ (The Chromium Authors) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943chrome_elf.dll\n2020-04-18 15:23 – 2020-04-18 15:23 – 000047104 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943audioqtaudio_windows.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000026112 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943imageformatsqgif.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000027136 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943imageformatsqico.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000243712 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943imageformatsqjpeg.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000223744 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943imageformatsqmng.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000020992 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943imageformatsqsvg.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000332288 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943imageformatsqtiff.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 001140224 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943platformsqwindows.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000041984 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtGraphicalEffectsprivateqtgraphicaleffectsprivate.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000014848 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtGraphicalEffectsqtgraphicaleffectsplugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000014848 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtQmlModels.2modelsplugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000014848 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtQuick.2qtquick2plugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000084480 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtQuickControls.2qtquickcontrols2plugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000267776 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtQuickControlsqtquickcontrolsplugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000071680 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtQuickLayoutsqquicklayoutsplugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000211456 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtQuickTemplates.2qtquicktemplates2plugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000014848 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtQuickWindow.2windowplugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 004943360 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Core.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 005022208 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Gui.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000626176 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Multimedia.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000877056 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Network.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 002908672 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Qml.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 003078656 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Quick.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000096256 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5QuickControls2.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000681472 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5QuickTemplates2.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000259072 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Svg.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 004718080 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Widgets.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000439296 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5WinExtras.dll\n2020-04-18 15:25 – 2020-04-18 15:25 – 000159232 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Xml.dll
"},{"id":"text-57","type":"text","heading":"","plain_text":"==================== Alternate Data Streams (Whitelisted) ========","html":"==================== Alternate Data Streams (Whitelisted) ========
"},{"id":"text-58","type":"text","heading":"","plain_text":"==================== Safe Mode (Whitelisted) ==================","html":"==================== Safe Mode (Whitelisted) ==================
"},{"id":"text-59","type":"text","heading":"","plain_text":"==================== Association (Whitelisted) =================","html":"==================== Association (Whitelisted) =================
"},{"id":"text-60","type":"text","heading":"","plain_text":"==================== Internet Explorer trusted/restricted ==========","html":"==================== Internet Explorer trusted/restricted ==========
"},{"id":"text-61","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed from the registry.)","html":"(If an entry is included in the fixlist, it will be removed from the registry.)
"},{"id":"text-62","type":"text","heading":"","plain_text":"IE trusted site: HKUS-1-5-21-1536202438-368462837-3654654372-1001…geforce.co.uk -> hxxps://www.geforce.co.uk","html":"IE trusted site: HKUS-1-5-21-1536202438-368462837-3654654372-1001…geforce.co.uk -> hxxps://www.geforce.co.uk
"},{"id":"text-63","type":"text","heading":"","plain_text":"==================== Hosts content: =========================","html":"==================== Hosts content: =========================
"},{"id":"text-64","type":"text","heading":"","plain_text":"(If needed Hosts: directive could be included in the fixlist to reset Hosts.)","html":"(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
"},{"id":"text-65","type":"text","heading":"","plain_text":"2009-07-14 03:34 – 2009-06-10 22:00 – 000000824 _____ C:Windowssystem32driversetchosts","html":"2009-07-14 03:34 – 2009-06-10 22:00 – 000000824 _____ C:Windowssystem32driversetchosts
"},{"id":"text-66","type":"text","heading":"","plain_text":"==================== Other Areas ===========================","html":"==================== Other Areas ===========================
"},{"id":"text-67","type":"text","heading":"","plain_text":"(Currently there is no automatic fix for this section.)","html":"(Currently there is no automatic fix for this section.)
"},{"id":"text-68","type":"text","heading":"","plain_text":"HKLMSystemCurrentControlSetControlSession ManagerEnvironment\\Path -> c:program files (x86)common filesoraclejavajavapath;c:programdataoraclejavajavapath;c:program filescommon filesmicrosoft sharedwindows live;c:program files (x86)common filesmicrosoft sharedwindows live;c:windowssystem32;c:windows;c:windowssystem32wbem;c:windowssystem32windowspowershellv1.0;c:program files (x86)windows liveshared;c:program files (x86)quicktimeqtsystem;c:program files (x86)windows kits8.1windows performance toolkit;c:program files (x86)intelopencl sdk2.0binx86;c:program files (x86)intelopencl sdk2.0binx64;c:program files (x86)intelopencl sdk2.0binx86;c:program files (x86)intelopencl sdk2.0binx64;C:Program Files (x86)NVIDIA CorporationPhysXCommon\nHKUS-1-5-21-1536202438-368462837-3654654372-1001Control PanelDesktop\\Wallpaper -> C:UsersDanieleAppDataRoamingMicrosoftWindowsThemesTranscodedWallpaper.jpg\nDNS Servers: 194.168.4.100 – 194.168.8.100\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)\nWindows Firewall is enabled.","html":"HKLMSystemCurrentControlSetControlSession ManagerEnvironment\\Path -> c:program files (x86)common filesoraclejavajavapath;c:programdataoraclejavajavapath;c:program filescommon filesmicrosoft sharedwindows live;c:program files (x86)common filesmicrosoft sharedwindows live;c:windowssystem32;c:windows;c:windowssystem32wbem;c:windowssystem32windowspowershellv1.0;c:program files (x86)windows liveshared;c:program files (x86)quicktimeqtsystem;c:program files (x86)windows kits8.1windows performance toolkit;c:program files (x86)intelopencl sdk2.0binx86;c:program files (x86)intelopencl sdk2.0binx64;c:program files (x86)intelopencl sdk2.0binx86;c:program files (x86)intelopencl sdk2.0binx64;C:Program Files (x86)NVIDIA CorporationPhysXCommon\nHKUS-1-5-21-1536202438-368462837-3654654372-1001Control PanelDesktop\\Wallpaper -> C:UsersDanieleAppDataRoamingMicrosoftWindowsThemesTranscodedWallpaper.jpg\nDNS Servers: 194.168.4.100 – 194.168.8.100\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)\nWindows Firewall is enabled.
"},{"id":"text-69","type":"text","heading":"","plain_text":"==================== MSCONFIG/TASK MANAGER disabled items ==","html":"==================== MSCONFIG/TASK MANAGER disabled items ==
"},{"id":"text-70","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed.)","html":"(If an entry is included in the fixlist, it will be removed.)
"},{"id":"text-71","type":"text","heading":"","plain_text":"MSCONFIGServices: AdobeARMservice => 2\nMSCONFIGServices: AdobeFlashPlayerUpdateSvc => 3\nMSCONFIGServices: cphs => 3\nMSCONFIGServices: DsiWMIService => 2\nMSCONFIGServices: dsNcService => 2\nMSCONFIGServices: ePowerSvc => 2\nMSCONFIGServices: EpsonScanSvc => 2\nMSCONFIGServices: EPSON_PM_RPCV4_06 => 2\nMSCONFIGServices: FLEXnet Licensing Service => 3\nMSCONFIGServices: GamesAppIntegrationService => 3\nMSCONFIGServices: GamesAppService => 3\nMSCONFIGServices: GREGService => 2\nMSCONFIGServices: gupdate => 2\nMSCONFIGServices: gupdatem => 3\nMSCONFIGServices: IAStorDataMgrSvc => 2\nMSCONFIGServices: ICCS => 3\nMSCONFIGServices: JuniperAccessService => 2\nMSCONFIGServices: Live Updater Service => 2\nMSCONFIGServices: LMS => 2\nMSCONFIGServices: MozillaMaintenance => 3\nMSCONFIGServices: MyEpson Portal Service => 2\nMSCONFIGServices: NTI IScheduleSvc => 2\nMSCONFIGServices: NvContainerLocalSystem => 3\nMSCONFIGServices: NvContainerNetworkService => 3\nMSCONFIGServices: NVDisplay.ContainerLocalSystem => 2\nMSCONFIGServices: NvTelemetryContainer => 2\nMSCONFIGServices: Origin Client Service => 3\nMSCONFIGServices: Origin Web Helper Service => 2\nMSCONFIGServices: OverwolfUpdater => 3\nMSCONFIGServices: SkypeUpdate => 2\nMSCONFIGServices: Steam Client Service => 3\nMSCONFIGServices: TeamViewer => 2\nMSCONFIGServices: TurboBoost => 3\nMSCONFIGServices: UNS => 2\nMSCONFIGstartupreg: APSDaemon => "C:Program Files (x86)Common FilesAppleApple Application SupportAPSDaemon.exe"\nMSCONFIGstartupreg: ArcadeMovieService => "C:Program Files (x86)Acerclear.fiMovieclear.fiMovieService.exe"\nMSCONFIGstartupreg: BackupManagerTray => "C:Program Files (x86)NTIAcer Backup ManagerBackupManagerTray.exe" -h -k\nMSCONFIGstartupreg: ConnectionCenter => "C:Program Files (x86)CitrixICA Clientconcentr.exe" /startup\nMSCONFIGstartupreg: DAEMON Tools Lite => "C:Program Files (x86)DAEMON Tools LiteDTLite.exe" -autorun\nMSCONFIGstartupreg: Dolby Advanced Audio v2 => "C:Dolby PCEE4pcee4.exe" -autostart\nMSCONFIGstartupreg: EEventManager => "C:Program Files (x86)Epson SoftwareEvent ManagerEEventManager.exe"\nMSCONFIGstartupreg: HotKeysCmds => "C:Windowssystem32hkcmd.exe"\nMSCONFIGstartupreg: IgfxTray => "C:Windowssystem32igfxtray.exe"\nMSCONFIGstartupreg: KeePass 2 PreLoad => "C:Program Files (x86)KeePass Password Safe 2KeePass.exe" –preload\nMSCONFIGstartupreg: LManager => C:Program Files (x86)Launch ManagerLManager.exe\nMSCONFIGstartupreg: mobilegeni daemon => C:Program Files (x86)MobogenieDaemonProcess.exe\nMSCONFIGstartupreg: NUSB3MON => "C:Program Files (x86)Renesas ElectronicsUSB 3.0 Host Controller DriverApplicationnusb3mon.exe"\nMSCONFIGstartupreg: OOTag => C:Program Files (x86)AcerOOBEOfferootag.exe\nMSCONFIGstartupreg: Persistence => "C:Windowssystem32igfxpers.exe"\nMSCONFIGstartupreg: Power Management => C:Program FilesAcerAcer ePower ManagementePowerTray.exe\nMSCONFIGstartupreg: QuickTime Task => "C:Program Files (x86)QuickTimeQTTask.exe" -atboottime\nMSCONFIGstartupreg: Redirector => "C:Program Files (x86)CitrixICA Clientredirector.exe" /startup\nMSCONFIGstartupreg: RtHDVBg_Dolby => C:Program FilesRealtekAudioHDARAVBg64.exe /FORPCEE4 \nMSCONFIGstartupreg: RtHDVCpl => C:Program FilesRealtekAudioHDARAVCpl64.exe -s\nMSCONFIGstartupreg: Search Protection => "C:UsersDanieleAppDataRoamingSearch ProtectionSP.EXE" /autostart\nMSCONFIGstartupreg: Skype => "C:Program Files (x86)SkypePhoneSkype.exe" /minimized /regrun\nMSCONFIGstartupreg: SunJavaUpdateSched => C:Program Files (x86)Common FilesJavaJava Updatejusched.exe\nMSCONFIGstartupreg: SynTPEnh => %ProgramFiles%SynapticsSynTPSynTPEnh.exe","html":"MSCONFIGServices: AdobeARMservice => 2\nMSCONFIGServices: AdobeFlashPlayerUpdateSvc => 3\nMSCONFIGServices: cphs => 3\nMSCONFIGServices: DsiWMIService => 2\nMSCONFIGServices: dsNcService => 2\nMSCONFIGServices: ePowerSvc => 2\nMSCONFIGServices: EpsonScanSvc => 2\nMSCONFIGServices: EPSON_PM_RPCV4_06 => 2\nMSCONFIGServices: FLEXnet Licensing Service => 3\nMSCONFIGServices: GamesAppIntegrationService => 3\nMSCONFIGServices: GamesAppService => 3\nMSCONFIGServices: GREGService => 2\nMSCONFIGServices: gupdate => 2\nMSCONFIGServices: gupdatem => 3\nMSCONFIGServices: IAStorDataMgrSvc => 2\nMSCONFIGServices: ICCS => 3\nMSCONFIGServices: JuniperAccessService => 2\nMSCONFIGServices: Live Updater Service => 2\nMSCONFIGServices: LMS => 2\nMSCONFIGServices: MozillaMaintenance => 3\nMSCONFIGServices: MyEpson Portal Service => 2\nMSCONFIGServices: NTI IScheduleSvc => 2\nMSCONFIGServices: NvContainerLocalSystem => 3\nMSCONFIGServices: NvContainerNetworkService => 3\nMSCONFIGServices: NVDisplay.ContainerLocalSystem => 2\nMSCONFIGServices: NvTelemetryContainer => 2\nMSCONFIGServices: Origin Client Service => 3\nMSCONFIGServices: Origin Web Helper Service => 2\nMSCONFIGServices: OverwolfUpdater => 3\nMSCONFIGServices: SkypeUpdate => 2\nMSCONFIGServices: Steam Client Service => 3\nMSCONFIGServices: TeamViewer => 2\nMSCONFIGServices: TurboBoost => 3\nMSCONFIGServices: UNS => 2\nMSCONFIGstartupreg: APSDaemon => "C:Program Files (x86)Common FilesAppleApple Application SupportAPSDaemon.exe"\nMSCONFIGstartupreg: ArcadeMovieService => "C:Program Files (x86)Acerclear.fiMovieclear.fiMovieService.exe"\nMSCONFIGstartupreg: BackupManagerTray => "C:Program Files (x86)NTIAcer Backup ManagerBackupManagerTray.exe" -h -k\nMSCONFIGstartupreg: ConnectionCenter => "C:Program Files (x86)CitrixICA Clientconcentr.exe" /startup\nMSCONFIGstartupreg: DAEMON Tools Lite => "C:Program Files (x86)DAEMON Tools LiteDTLite.exe" -autorun\nMSCONFIGstartupreg: Dolby Advanced Audio v2 => "C:Dolby PCEE4pcee4.exe" -autostart\nMSCONFIGstartupreg: EEventManager => "C:Program Files (x86)Epson SoftwareEvent ManagerEEventManager.exe"\nMSCONFIGstartupreg: HotKeysCmds => "C:Windowssystem32hkcmd.exe"\nMSCONFIGstartupreg: IgfxTray => "C:Windowssystem32igfxtray.exe"\nMSCONFIGstartupreg: KeePass 2 PreLoad => "C:Program Files (x86)KeePass Password Safe 2KeePass.exe" –preload\nMSCONFIGstartupreg: LManager => C:Program Files (x86)Launch ManagerLManager.exe\nMSCONFIGstartupreg: mobilegeni daemon => C:Program Files (x86)MobogenieDaemonProcess.exe\nMSCONFIGstartupreg: NUSB3MON => "C:Program Files (x86)Renesas ElectronicsUSB 3.0 Host Controller DriverApplicationnusb3mon.exe"\nMSCONFIGstartupreg: OOTag => C:Program Files (x86)AcerOOBEOfferootag.exe\nMSCONFIGstartupreg: Persistence => "C:Windowssystem32igfxpers.exe"\nMSCONFIGstartupreg: Power Management => C:Program FilesAcerAcer ePower ManagementePowerTray.exe\nMSCONFIGstartupreg: QuickTime Task => "C:Program Files (x86)QuickTimeQTTask.exe" -atboottime\nMSCONFIGstartupreg: Redirector => "C:Program Files (x86)CitrixICA Clientredirector.exe" /startup\nMSCONFIGstartupreg: RtHDVBg_Dolby => C:Program FilesRealtekAudioHDARAVBg64.exe /FORPCEE4 \nMSCONFIGstartupreg: RtHDVCpl => C:Program FilesRealtekAudioHDARAVCpl64.exe -s\nMSCONFIGstartupreg: Search Protection => "C:UsersDanieleAppDataRoamingSearch ProtectionSP.EXE" /autostart\nMSCONFIGstartupreg: Skype => "C:Program Files (x86)SkypePhoneSkype.exe" /minimized /regrun\nMSCONFIGstartupreg: SunJavaUpdateSched => C:Program Files (x86)Common FilesJavaJava Updatejusched.exe\nMSCONFIGstartupreg: SynTPEnh => %ProgramFiles%SynapticsSynTPSynTPEnh.exe
"},{"id":"text-72","type":"text","heading":"","plain_text":"==================== FirewallRules (Whitelisted) ================","html":"==================== FirewallRules (Whitelisted) ================
"},{"id":"text-73","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)","html":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
"},{"id":"text-74","type":"text","heading":"","plain_text":"FirewallRules: [BB9D900C-0431-418E-8C0A-C231DDCD4601] => (Allow) C:Program Files (x86)Windows LiveContactswlcomm.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [32049F24-47B1-4DD3-8444-C00D6AD61B16] => (Allow) LPort=2869\nFirewallRules: [F75F9F29-02E8-4A68-8A28-54916E467F3D] => (Allow) LPort=1900\nFirewallRules: [C356995C-A188-4CAC-A71A-7AA95365C06B] => (Allow) C:Program Files (x86)Windows LiveMessengermsnmsgr.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [F27A6AD3-BABD-4E5E-9C93-AE69FEE085E1] => (Allow) C:Program Files (x86)Windows LiveMeshMOE.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [BC8F2982-4766-4CA9-8568-4DD9325B8D8B] => (Allow) C:Program Files (x86)Acerclear.fiMVPclear.fi.exe (CyberLink -> Acer Incorporated)\nFirewallRules: [D0884557-C872-4F28-B425-11EA38071BAA] => (Allow) C:Program Files (x86)Acerclear.fiMVPclear.fiAgent.exe (CyberLink -> CyberLink Corp.)\nFirewallRules: [DED69C15-FD73-47F1-9AE7-AA1E07B1AA5F] => (Allow) C:Program Files (x86)Acerclear.fiMVPKernelCLMLCLMLSvc.exe (CyberLink -> CyberLink Corp.)\nFirewallRules: [7053E4E1-5D04-4B5F-B765-30CC150AB5F0] => (Allow) C:Program Files (x86)Acerclear.fiMVPKernelDMRDMREngine.exe (CyberLink -> CyberLink)\nFirewallRules: [CD57FF54-0544-444F-8A7C-F432B4AF1F13] => (Allow) C:Program Files (x86)Acerclear.fiMVPKernelDMRDMREngine.exe (CyberLink -> CyberLink)\nFirewallRules: [E10AD824-55A4-4C5E-AFDC-3278CEC762AF] => (Block) C:Program Files (x86)Acerclear.fiMVPKernelDMRDMREngine.exe (CyberLink -> CyberLink)\nFirewallRules: [A6B0B15B-42D5-4D85-B90A-F0312F1B958D] => (Allow) Conquer_v5721_P2P.exe No File\nFirewallRules: [TCP Query User5AE4B2B1-9F23-4BE2-B1CB-D68B83804AB3D:giochidiablo iiidiablo iiidiablo iii.exe] => (Allow) D:giochidiablo iiidiablo iiidiablo iii.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [UDP Query UserD67346DB-E26C-48B9-82CF-217414001078D:giochidiablo iiidiablo iiidiablo iii.exe] => (Allow) D:giochidiablo iiidiablo iiidiablo iii.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [0A3A4784-CDE8-4892-BAB0-0DDA97B44F36] => (Allow) C:WindowsSysWOW64PnkBstrA.exe (Even Balance, Inc. -> )\nFirewallRules: [EF78F40A-C8F9-45E4-91A3-FB22A2D9B090] => (Allow) C:WindowsSysWOW64PnkBstrA.exe (Even Balance, Inc. -> )\nFirewallRules: [3A4F95A8-CD4C-461E-8981-11EB54AE03F9] => (Allow) C:WindowsSysWOW64PnkBstrB.exe (Even Balance, Inc. -> )\nFirewallRules: [FEF7E85F-3029-4D61-8862-75BA9506CC73] => (Allow) C:WindowsSysWOW64PnkBstrB.exe (Even Balance, Inc. -> )\nFirewallRules: [74DB4201-A73A-48B2-AA3A-148CF51349C0] => (Allow) C:Program Files (x86)Common FilesAppleApple Application SupportWebKit2WebProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [F87F2B4A-34AD-488A-A071-7849FC87729E] => (Allow) C:UsersDanieleAppDataRoaminguTorrentuTorrent.exe No File\nFirewallRules: [AB0C7AF1-9475-46B2-B111-A13144F9DDFD] => (Allow) C:UsersDanieleAppDataRoaminguTorrentuTorrent.exe No File\nFirewallRules: [6EF13497-1121-43C7-97C4-E2ED9E9E244D] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)\nFirewallRules: [612ED1D8-238A-4C46-A5D8-9F246018E22C] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)\nFirewallRules: [44E21BC9-991E-4012-8574-7C0E44EC3586] => (Allow) C:Program Files (x86)Battle.netBattle.net.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [FECBDB91-560D-4666-8565-E4E38DDA498C] => (Allow) C:Program Files (x86)Battle.netBattle.net.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [A2A5A7DD-A5F7-4DE8-824D-B5DC0DF5E263] => (Allow) C:ProgramDataBattle.netAgentAgent.beta.2737Agent.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [6E042EB7-3751-4658-B76C-F8D665685522] => (Allow) C:ProgramDataBattle.netAgentAgent.beta.2737Agent.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [26535086-916B-4D18-8166-4D2AC4036B93] => (Allow) C:ProgramDataBattle.netAgentAgent.beta.2753Agent.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [56CDE0D0-F4BD-41E6-99EC-9AD17421D43A] => (Allow) C:ProgramDataBattle.netAgentAgent.beta.2753Agent.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [DFBCBBF2-C3D0-4D12-B7FB-BE8097FDD79A] => (Allow) C:UsersDanieleAppDataRoamingDropboxbinDropbox.exe (Dropbox, Inc -> Dropbox, Inc.)\nFirewallRules: [51A92662-05B7-40E3-AC9B-4361F8756831] => (Allow) C:UsersDanieleAppDataRoamingDropboxbinDropbox.exe (Dropbox, Inc -> Dropbox, Inc.)\nFirewallRules: [C20EF2D3-73B1-459D-A216-C18E161A05F1] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [CF196B10-406C-4903-BA69-031AFBF448F2] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [CB0FE2A1-EB29-4664-BEBA-B86716D7194F] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [22CE7CBF-D8FF-4D70-AAFE-28B08ED0B355] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [TCP Query User178CF2A2-0D4F-4104-9731-24DA106BAC23C:program files (x86)mozilla firefoxfirefox.exe] => (Block) C:program files (x86)mozilla firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [UDP Query User8B73733E-A519-4359-92DA-1F88A0CDFCE8C:program files (x86)mozilla firefoxfirefox.exe] => (Block) C:program files (x86)mozilla firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [TCP Query User68CA8A72-B440-4885-A5CB-5C3B7303437EC:program files (x86)kodikodi.exe] => (Allow) C:program files (x86)kodikodi.exe (XBMC-Foundation) [File not signed]\nFirewallRules: [UDP Query User1F56C585-CDCB-435D-989C-3898A06D6B82C:program files (x86)kodikodi.exe] => (Allow) C:program files (x86)kodikodi.exe (XBMC-Foundation) [File not signed]\nFirewallRules: [49ADE3C6-B596-4EEC-BF05-A44B6D162148] => (Allow) C:Program Files (x86)Steambinsteamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [F29CF4BD-B1DF-4AAB-BFF1-78A2BF5998AE] => (Allow) C:Program Files (x86)Steambinsteamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [6EBBDC91-6891-435A-906C-B0373AE1C0C8] => (Allow) C:Program Files (x86)SteamSteamAppscommonSoccer ManagerSoccer Manager.exe () [File not signed]\nFirewallRules: [6CF1FE33-D73B-40A5-A924-ADC0D7D2AF5A] => (Allow) C:Program Files (x86)SteamSteamAppscommonSoccer ManagerSoccer Manager.exe () [File not signed]\nFirewallRules: [TCP Query User9C70BED5-17C9-4370-9B0F-126357FA2B45C:usersdanieleappdatalocalskypepluginpluginhost.exe] => (Allow) C:usersdanieleappdatalocalskypepluginpluginhost.exe (Microsoft Corporation -> Skype Technologies S.A.)\nFirewallRules: [UDP Query UserCE2FDCBA-9FE0-4053-A207-1322E0F9C691C:usersdanieleappdatalocalskypepluginpluginhost.exe] => (Allow) C:usersdanieleappdatalocalskypepluginpluginhost.exe (Microsoft Corporation -> Skype Technologies S.A.)\nFirewallRules: [E4A4A8EA-DBCC-43D1-BD93-562C96AB0935] => (Allow) C:Program Files (x86)Mozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [D52DCD90-6B49-49C0-97EF-D987E1868BFA] => (Allow) C:Program Files (x86)Mozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [FCDE241B-E22A-4166-A8DC-48695BE935D6] => (Allow) C:Program Files (x86)Steambincefcef.win7steamwebhelper.exe No File\nFirewallRules: [1DDA64DE-761F-40CC-9EA7-851DC33D0D83] => (Allow) C:Program Files (x86)Steambincefcef.win7steamwebhelper.exe No File\nFirewallRules: [TCP Query UserB3EAE4A3-48B3-4441-87D3-093BFDF490CDC:usersreeappdatalocalblue jeansappbluejeans.exe] => (Allow) C:usersreeappdatalocalblue jeansappbluejeans.exe (Blue Jeans Network -> Blue Jeans)\nFirewallRules: [UDP Query User87E5D06C-0B72-435E-9416-10CA4CDC044AC:usersreeappdatalocalblue jeansappbluejeans.exe] => (Allow) C:usersreeappdatalocalblue jeansappbluejeans.exe (Blue Jeans Network -> Blue Jeans)\nFirewallRules: [TCP Query User9DF0C516-812D-4B45-829B-44126C8F1B20C:usersdanieleappdatalocalmicrosoftskypeforbusinessplugin15.8.20020.400pluginhost.exe] => (Allow) C:usersdanieleappdatalocalmicrosoftskypeforbusinessplugin15.8.20020.400pluginhost.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [UDP Query UserB72E6E6F-F7D0-4B79-815B-A8C55347E36FC:usersdanieleappdatalocalmicrosoftskypeforbusinessplugin15.8.20020.400pluginhost.exe] => (Allow) C:usersdanieleappdatalocalmicrosoftskypeforbusinessplugin15.8.20020.400pluginhost.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [TCP Query UserA0034E0B-97DD-46E8-823A-62E0703F0ADAC:usersreeappdatalocalblue jeansappbluejeans.exe] => (Block) C:usersreeappdatalocalblue jeansappbluejeans.exe (Blue Jeans Network -> Blue Jeans)\nFirewallRules: [UDP Query User9ADD0A8D-6055-4CB1-BA9F-4020B6706570C:usersreeappdatalocalblue jeansappbluejeans.exe] => (Block) C:usersreeappdatalocalblue jeansappbluejeans.exe (Blue Jeans Network -> Blue Jeans)\nFirewallRules: [09E47FEF-1759-43B4-9795-E9315C90A01D] => (Allow) C:Program Files (x86)Epson SoftwareEvent ManagerEEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [9E3142C6-90FB-4855-8FF1-FCBE114EEF4D] => (Allow) C:Program Files (x86)Epson SoftwareEvent ManagerEEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [9FB0505C-59D4-4113-91C5-9FBFAB217F6D] => (Allow) C:Program Files (x86)EPSON SoftwareECPrinterSetupENPApp.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [3A64D786-1F89-4801-BD77-C585A80CBFB7] => (Allow) C:Program Files (x86)EPSON SoftwareECPrinterSetupENPApp.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [TCP Query User74F6835B-AE6B-4AB9-8FCC-4459350C6570D:giochihearthstonehearthstone.exe] => (Block) D:giochihearthstonehearthstone.exe (Blizzard Entertainment, Inc. -> )\nFirewallRules: [UDP Query User58AED474-9009-46A6-9923-0206B015380FD:giochihearthstonehearthstone.exe] => (Block) D:giochihearthstonehearthstone.exe (Blizzard Entertainment, Inc. -> )\nFirewallRules: [VirtualPC-In-UDP-1] => (Allow) %SystemRoot%System32vpc.exe No File\nFirewallRules: [VirtualPC-In-UDP-2] => (Allow) %SystemRoot%System32vpc.exe No File\nFirewallRules: [VirtualPC-In-TCP-1] => (Allow) %SystemRoot%System32vpc.exe No File\nFirewallRules: [2DBC1507-3D9F-4958-9F7E-83595D81F016] => (Allow) D:GiochiDOTA 2steamappscommonEador. Masters of the Broken Worldlauncher.exe () [File not signed]\nFirewallRules: [B9026BBA-84DB-4400-8E1E-ABD5059117CD] => (Allow) D:GiochiDOTA 2steamappscommonEador. Masters of the Broken Worldlauncher.exe () [File not signed]\nFirewallRules: [428E48D4-A2FC-4E38-93F0-D015DED2CEA0] => (Allow) D:GiochiDOTA 2steamappscommondota 2 betagamebinwin64dota2.exe (Valve -> )\nFirewallRules: [74C303B6-F2E8-4BC6-853F-EFD5FBE1535B] => (Allow) D:GiochiDOTA 2steamappscommondota 2 betagamebinwin64dota2.exe (Valve -> )\nFirewallRules: [8D39FFFC-D3F3-40B7-9A83-559EF34F746B] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [9C0BC1AD-D865-48A0-A410-D2A72E9067A0] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [E4732CBC-C606-4D23-B4BE-4EF941892D2A] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [3C1769FE-7F73-40CD-8694-9D94EB5A4C73] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [EDDA200D-3307-4268-BF74-2A6B8C5850FE] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [5AC4F2B2-78FE-4312-94CF-D9BD16700FE6] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [7FFE0A82-6CE9-4263-BCEA-12BA88FC5AD1] => (Allow) C:Program FilesBlueStacksHD-Player.exe No File\nFirewallRules: [71D0935A-3DC4-46A8-B5EC-DC69E44DE995] => (Allow) C:Program Files (x86)MicrosoftSkype for DesktopSkype.exe (Skype Software Sarl -> Skype Technologies S.A.)\nFirewallRules: [734F2907-15A9-4964-9A4B-6AF63CB588B4] => (Allow) C:Program Files (x86)MicrosoftSkype for DesktopSkype.exe (Skype Software Sarl -> Skype Technologies S.A.)\nFirewallRules: [575D6C1F-8E4F-481C-AF65-601DDDA498A1] => (Allow) C:UsersDanieleAppDataLocalLINEbin5.18.2.1998LINE.exe No File\nFirewallRules: [891ABF3F-4987-4BF6-894D-804B5BC60153] => (Allow) C:UsersDanieleAppDataLocalLINEbin5.18.2.1998LINE.exe No File\nFirewallRules: [42FF3F30-8B2A-42B0-9BC0-F6C7BACF9258] => (Allow) C:UsersDanieleAppDataLocalLINEbin5.18.2.1998LineUpdater.exe No File\nFirewallRules: [F38971E4-A0A7-44DB-8A1C-8450D8A685C3] => (Allow) C:UsersDanieleAppDataLocalLINEbin5.18.2.1998LineUpdater.exe No File\nFirewallRules: [TCP Query UserCC8480C0-2941-4E9D-8A52-47822F0D9776D:giochidiablo iiidiablo iiix64diablo iii64.exe] => (Allow) D:giochidiablo iiidiablo iiix64diablo iii64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [UDP Query UserF6C4F938-A1A8-4668-AB2C-03AC5CE15700D:giochidiablo iiidiablo iiix64diablo iii64.exe] => (Allow) D:giochidiablo iiidiablo iiix64diablo iii64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [TCP Query User163F9996-F652-4769-9BAC-80C531683DA9C:program filesdnplayerext2ldboxheadless.exe] => (Allow) C:program filesdnplayerext2ldboxheadless.exe (Shanghai Changzhi Network Technology Co., Ltd. -> Oracle Corporation)\nFirewallRules: [UDP Query User3343FBF2-B1FF-4C62-B5FF-D8C3A6E8EC98C:program filesdnplayerext2ldboxheadless.exe] => (Allow) C:program filesdnplayerext2ldboxheadless.exe (Shanghai Changzhi Network Technology Co., Ltd. -> Oracle Corporation)\nFirewallRules: [6A971D92-619D-4131-AB0C-0BC7C492C4D5] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [9947C36A-3F76-4596-90D5-7062A53E9C53] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [TCP Query User71DD669E-F8F9-4657-9480-12045D0A9A65C:program filesldplayerboxldvboxheadless.exe] => (Allow) C:program filesldplayerboxldvboxheadless.exe (Shanghai Changzhi Network Technology Co., Ltd. -> Oracle Corporation)\nFirewallRules: [UDP Query User5C9DDDCA-3F20-4505-8FE1-74593EBD6931C:program filesldplayerboxldvboxheadless.exe] => (Allow) C:program filesldplayerboxldvboxheadless.exe (Shanghai Changzhi Network Technology Co., Ltd. -> Oracle Corporation)\nFirewallRules: [170B5594-146D-4B85-9BB4-3EF53938E732] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [37535782-EEB9-4AD5-82AB-95BDA7C0B007] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [F8CACE39-A536-471F-89EC-F6BA460694F0] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [472F5DAF-CF00-417C-AB83-604384991CE5] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [8070CE88-1B4C-434E-8495-B0F0C8C82972] => (Allow) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [22DBF4E8-86F2-44C0-9BE2-40F28D8B56AF] => (Allow) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [06240932-630C-46AA-8C14-877D0EA3938A] => (Allow) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [CC3EB70E-EEAD-4622-8480-E3C7771BF25C] => (Allow) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [E59453FF-C79A-4D0D-A485-D3FE8B274B54] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [0A829F94-700F-4835-8284-7B28614D717B] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [79FB848F-BBE9-42DA-8170-285A6C0060C8] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [456EF3E4-BE52-4A9A-8CA8-06554B75D800] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [B06D86D3-3848-4734-944F-5706BE664234] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [F0855DE7-46B2-4581-BFC1-2A4EB0D47355] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [8009BD78-17DA-44F1-95AA-5E9EC7724E77] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [73B5CCA2-1DFB-417E-88E2-0DAE1645F388] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [41C0109E-C969-40D1-AEDA-28C4B17EF631] => (Allow) D:GiochiDOTA 2steamappscommonPillars of EternityPillarsOfEternity.exe (Obsidian Entertainment) [File not signed]\nFirewallRules: [0A52AC62-C826-437E-BCE1-C1902CBE00BE] => (Allow) D:GiochiDOTA 2steamappscommonPillars of EternityPillarsOfEternity.exe (Obsidian Entertainment) [File not signed]\nFirewallRules: [374A4772-2595-4C7A-9E1D-A1692E687887] => (Allow) D:GiochiDOTA 2steamappscommonCounter-Strike Global Offensivecsgo.exe (Valve -> )\nFirewallRules: [55E824ED-7014-48A7-8DAA-0C8717A6913C] => (Allow) D:GiochiDOTA 2steamappscommonCounter-Strike Global Offensivecsgo.exe (Valve -> )\nFirewallRules: [E3CDA667-4963-4012-8775-68F6023DADD5] => (Allow) C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC -> Google LLC)\nFirewallRules: [BB40FF31-6239-422E-8074-B6A9E2DC0D95] => (Block) C:Program Files (x86)AviraSoftwareUpdateravirasoftwareupdatertoastnotificationsbridge.exe (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nFirewallRules: [0645C731-0335-4950-9427-213A6DA9E558] => (Allow) C:Program Files (x86)AviraSoftwareUpdateravirasoftwareupdatertoastnotificationsbridge.exe (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nFirewallRules: [CDB7F1B2-0F67-4210-9A69-DF18B049D9CE] => (Allow) C:Program Files (x86)AviraSoftwareUpdateravirasoftwareupdatertoastnotificationsbridge.exe (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)","html":"FirewallRules: [BB9D900C-0431-418E-8C0A-C231DDCD4601] => (Allow) C:Program Files (x86)Windows LiveContactswlcomm.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [32049F24-47B1-4DD3-8444-C00D6AD61B16] => (Allow) LPort=2869\nFirewallRules: [F75F9F29-02E8-4A68-8A28-54916E467F3D] => (Allow) LPort=1900\nFirewallRules: [C356995C-A188-4CAC-A71A-7AA95365C06B] => (Allow) C:Program Files (x86)Windows LiveMessengermsnmsgr.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [F27A6AD3-BABD-4E5E-9C93-AE69FEE085E1] => (Allow) C:Program Files (x86)Windows LiveMeshMOE.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [BC8F2982-4766-4CA9-8568-4DD9325B8D8B] => (Allow) C:Program Files (x86)Acerclear.fiMVPclear.fi.exe (CyberLink -> Acer Incorporated)\nFirewallRules: [D0884557-C872-4F28-B425-11EA38071BAA] => (Allow) C:Program Files (x86)Acerclear.fiMVPclear.fiAgent.exe (CyberLink -> CyberLink Corp.)\nFirewallRules: [DED69C15-FD73-47F1-9AE7-AA1E07B1AA5F] => (Allow) C:Program Files (x86)Acerclear.fiMVPKernelCLMLCLMLSvc.exe (CyberLink -> CyberLink Corp.)\nFirewallRules: [7053E4E1-5D04-4B5F-B765-30CC150AB5F0] => (Allow) C:Program Files (x86)Acerclear.fiMVPKernelDMRDMREngine.exe (CyberLink -> CyberLink)\nFirewallRules: [CD57FF54-0544-444F-8A7C-F432B4AF1F13] => (Allow) C:Program Files (x86)Acerclear.fiMVPKernelDMRDMREngine.exe (CyberLink -> CyberLink)\nFirewallRules: [E10AD824-55A4-4C5E-AFDC-3278CEC762AF] => (Block) C:Program Files (x86)Acerclear.fiMVPKernelDMRDMREngine.exe (CyberLink -> CyberLink)\nFirewallRules: [A6B0B15B-42D5-4D85-B90A-F0312F1B958D] => (Allow) Conquer_v5721_P2P.exe No File\nFirewallRules: [TCP Query User5AE4B2B1-9F23-4BE2-B1CB-D68B83804AB3D:giochidiablo iiidiablo iiidiablo iii.exe] => (Allow) D:giochidiablo iiidiablo iiidiablo iii.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [UDP Query UserD67346DB-E26C-48B9-82CF-217414001078D:giochidiablo iiidiablo iiidiablo iii.exe] => (Allow) D:giochidiablo iiidiablo iiidiablo iii.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [0A3A4784-CDE8-4892-BAB0-0DDA97B44F36] => (Allow) C:WindowsSysWOW64PnkBstrA.exe (Even Balance, Inc. -> )\nFirewallRules: [EF78F40A-C8F9-45E4-91A3-FB22A2D9B090] => (Allow) C:WindowsSysWOW64PnkBstrA.exe (Even Balance, Inc. -> )\nFirewallRules: [3A4F95A8-CD4C-461E-8981-11EB54AE03F9] => (Allow) C:WindowsSysWOW64PnkBstrB.exe (Even Balance, Inc. -> )\nFirewallRules: [FEF7E85F-3029-4D61-8862-75BA9506CC73] => (Allow) C:WindowsSysWOW64PnkBstrB.exe (Even Balance, Inc. -> )\nFirewallRules: [74DB4201-A73A-48B2-AA3A-148CF51349C0] => (Allow) C:Program Files (x86)Common FilesAppleApple Application SupportWebKit2WebProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [F87F2B4A-34AD-488A-A071-7849FC87729E] => (Allow) C:UsersDanieleAppDataRoaminguTorrentuTorrent.exe No File\nFirewallRules: [AB0C7AF1-9475-46B2-B111-A13144F9DDFD] => (Allow) C:UsersDanieleAppDataRoaminguTorrentuTorrent.exe No File\nFirewallRules: [6EF13497-1121-43C7-97C4-E2ED9E9E244D] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)\nFirewallRules: [612ED1D8-238A-4C46-A5D8-9F246018E22C] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)\nFirewallRules: [44E21BC9-991E-4012-8574-7C0E44EC3586] => (Allow) C:Program Files (x86)Battle.netBattle.net.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [FECBDB91-560D-4666-8565-E4E38DDA498C] => (Allow) C:Program Files (x86)Battle.netBattle.net.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [A2A5A7DD-A5F7-4DE8-824D-B5DC0DF5E263] => (Allow) C:ProgramDataBattle.netAgentAgent.beta.2737Agent.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [6E042EB7-3751-4658-B76C-F8D665685522] => (Allow) C:ProgramDataBattle.netAgentAgent.beta.2737Agent.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [26535086-916B-4D18-8166-4D2AC4036B93] => (Allow) C:ProgramDataBattle.netAgentAgent.beta.2753Agent.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [56CDE0D0-F4BD-41E6-99EC-9AD17421D43A] => (Allow) C:ProgramDataBattle.netAgentAgent.beta.2753Agent.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [DFBCBBF2-C3D0-4D12-B7FB-BE8097FDD79A] => (Allow) C:UsersDanieleAppDataRoamingDropboxbinDropbox.exe (Dropbox, Inc -> Dropbox, Inc.)\nFirewallRules: [51A92662-05B7-40E3-AC9B-4361F8756831] => (Allow) C:UsersDanieleAppDataRoamingDropboxbinDropbox.exe (Dropbox, Inc -> Dropbox, Inc.)\nFirewallRules: [C20EF2D3-73B1-459D-A216-C18E161A05F1] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [CF196B10-406C-4903-BA69-031AFBF448F2] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [CB0FE2A1-EB29-4664-BEBA-B86716D7194F] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [22CE7CBF-D8FF-4D70-AAFE-28B08ED0B355] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [TCP Query User178CF2A2-0D4F-4104-9731-24DA106BAC23C:program files (x86)mozilla firefoxfirefox.exe] => (Block) C:program files (x86)mozilla firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [UDP Query User8B73733E-A519-4359-92DA-1F88A0CDFCE8C:program files (x86)mozilla firefoxfirefox.exe] => (Block) C:program files (x86)mozilla firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [TCP Query User68CA8A72-B440-4885-A5CB-5C3B7303437EC:program files (x86)kodikodi.exe] => (Allow) C:program files (x86)kodikodi.exe (XBMC-Foundation) [File not signed]\nFirewallRules: [UDP Query User1F56C585-CDCB-435D-989C-3898A06D6B82C:program files (x86)kodikodi.exe] => (Allow) C:program files (x86)kodikodi.exe (XBMC-Foundation) [File not signed]\nFirewallRules: [49ADE3C6-B596-4EEC-BF05-A44B6D162148] => (Allow) C:Program Files (x86)Steambinsteamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [F29CF4BD-B1DF-4AAB-BFF1-78A2BF5998AE] => (Allow) C:Program Files (x86)Steambinsteamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [6EBBDC91-6891-435A-906C-B0373AE1C0C8] => (Allow) C:Program Files (x86)SteamSteamAppscommonSoccer ManagerSoccer Manager.exe () [File not signed]\nFirewallRules: [6CF1FE33-D73B-40A5-A924-ADC0D7D2AF5A] => (Allow) C:Program Files (x86)SteamSteamAppscommonSoccer ManagerSoccer Manager.exe () [File not signed]\nFirewallRules: [TCP Query User9C70BED5-17C9-4370-9B0F-126357FA2B45C:usersdanieleappdatalocalskypepluginpluginhost.exe] => (Allow) C:usersdanieleappdatalocalskypepluginpluginhost.exe (Microsoft Corporation -> Skype Technologies S.A.)\nFirewallRules: [UDP Query UserCE2FDCBA-9FE0-4053-A207-1322E0F9C691C:usersdanieleappdatalocalskypepluginpluginhost.exe] => (Allow) C:usersdanieleappdatalocalskypepluginpluginhost.exe (Microsoft Corporation -> Skype Technologies S.A.)\nFirewallRules: [E4A4A8EA-DBCC-43D1-BD93-562C96AB0935] => (Allow) C:Program Files (x86)Mozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [D52DCD90-6B49-49C0-97EF-D987E1868BFA] => (Allow) C:Program Files (x86)Mozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [FCDE241B-E22A-4166-A8DC-48695BE935D6] => (Allow) C:Program Files (x86)Steambincefcef.win7steamwebhelper.exe No File\nFirewallRules: [1DDA64DE-761F-40CC-9EA7-851DC33D0D83] => (Allow) C:Program Files (x86)Steambincefcef.win7steamwebhelper.exe No File\nFirewallRules: [TCP Query UserB3EAE4A3-48B3-4441-87D3-093BFDF490CDC:usersreeappdatalocalblue jeansappbluejeans.exe] => (Allow) C:usersreeappdatalocalblue jeansappbluejeans.exe (Blue Jeans Network -> Blue Jeans)\nFirewallRules: [UDP Query User87E5D06C-0B72-435E-9416-10CA4CDC044AC:usersreeappdatalocalblue jeansappbluejeans.exe] => (Allow) C:usersreeappdatalocalblue jeansappbluejeans.exe (Blue Jeans Network -> Blue Jeans)\nFirewallRules: [TCP Query User9DF0C516-812D-4B45-829B-44126C8F1B20C:usersdanieleappdatalocalmicrosoftskypeforbusinessplugin15.8.20020.400pluginhost.exe] => (Allow) C:usersdanieleappdatalocalmicrosoftskypeforbusinessplugin15.8.20020.400pluginhost.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [UDP Query UserB72E6E6F-F7D0-4B79-815B-A8C55347E36FC:usersdanieleappdatalocalmicrosoftskypeforbusinessplugin15.8.20020.400pluginhost.exe] => (Allow) C:usersdanieleappdatalocalmicrosoftskypeforbusinessplugin15.8.20020.400pluginhost.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [TCP Query UserA0034E0B-97DD-46E8-823A-62E0703F0ADAC:usersreeappdatalocalblue jeansappbluejeans.exe] => (Block) C:usersreeappdatalocalblue jeansappbluejeans.exe (Blue Jeans Network -> Blue Jeans)\nFirewallRules: [UDP Query User9ADD0A8D-6055-4CB1-BA9F-4020B6706570C:usersreeappdatalocalblue jeansappbluejeans.exe] => (Block) C:usersreeappdatalocalblue jeansappbluejeans.exe (Blue Jeans Network -> Blue Jeans)\nFirewallRules: [09E47FEF-1759-43B4-9795-E9315C90A01D] => (Allow) C:Program Files (x86)Epson SoftwareEvent ManagerEEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [9E3142C6-90FB-4855-8FF1-FCBE114EEF4D] => (Allow) C:Program Files (x86)Epson SoftwareEvent ManagerEEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [9FB0505C-59D4-4113-91C5-9FBFAB217F6D] => (Allow) C:Program Files (x86)EPSON SoftwareECPrinterSetupENPApp.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [3A64D786-1F89-4801-BD77-C585A80CBFB7] => (Allow) C:Program Files (x86)EPSON SoftwareECPrinterSetupENPApp.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [TCP Query User74F6835B-AE6B-4AB9-8FCC-4459350C6570D:giochihearthstonehearthstone.exe] => (Block) D:giochihearthstonehearthstone.exe (Blizzard Entertainment, Inc. -> )\nFirewallRules: [UDP Query User58AED474-9009-46A6-9923-0206B015380FD:giochihearthstonehearthstone.exe] => (Block) D:giochihearthstonehearthstone.exe (Blizzard Entertainment, Inc. -> )\nFirewallRules: [VirtualPC-In-UDP-1] => (Allow) %SystemRoot%System32vpc.exe No File\nFirewallRules: [VirtualPC-In-UDP-2] => (Allow) %SystemRoot%System32vpc.exe No File\nFirewallRules: [VirtualPC-In-TCP-1] => (Allow) %SystemRoot%System32vpc.exe No File\nFirewallRules: [2DBC1507-3D9F-4958-9F7E-83595D81F016] => (Allow) D:GiochiDOTA 2steamappscommonEador. Masters of the Broken Worldlauncher.exe () [File not signed]\nFirewallRules: [B9026BBA-84DB-4400-8E1E-ABD5059117CD] => (Allow) D:GiochiDOTA 2steamappscommonEador. Masters of the Broken Worldlauncher.exe () [File not signed]\nFirewallRules: [428E48D4-A2FC-4E38-93F0-D015DED2CEA0] => (Allow) D:GiochiDOTA 2steamappscommondota 2 betagamebinwin64dota2.exe (Valve -> )\nFirewallRules: [74C303B6-F2E8-4BC6-853F-EFD5FBE1535B] => (Allow) D:GiochiDOTA 2steamappscommondota 2 betagamebinwin64dota2.exe (Valve -> )\nFirewallRules: [8D39FFFC-D3F3-40B7-9A83-559EF34F746B] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [9C0BC1AD-D865-48A0-A410-D2A72E9067A0] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [E4732CBC-C606-4D23-B4BE-4EF941892D2A] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [3C1769FE-7F73-40CD-8694-9D94EB5A4C73] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [EDDA200D-3307-4268-BF74-2A6B8C5850FE] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [5AC4F2B2-78FE-4312-94CF-D9BD16700FE6] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [7FFE0A82-6CE9-4263-BCEA-12BA88FC5AD1] => (Allow) C:Program FilesBlueStacksHD-Player.exe No File\nFirewallRules: [71D0935A-3DC4-46A8-B5EC-DC69E44DE995] => (Allow) C:Program Files (x86)MicrosoftSkype for DesktopSkype.exe (Skype Software Sarl -> Skype Technologies S.A.)\nFirewallRules: [734F2907-15A9-4964-9A4B-6AF63CB588B4] => (Allow) C:Program Files (x86)MicrosoftSkype for DesktopSkype.exe (Skype Software Sarl -> Skype Technologies S.A.)\nFirewallRules: [575D6C1F-8E4F-481C-AF65-601DDDA498A1] => (Allow) C:UsersDanieleAppDataLocalLINEbin5.18.2.1998LINE.exe No File\nFirewallRules: [891ABF3F-4987-4BF6-894D-804B5BC60153] => (Allow) C:UsersDanieleAppDataLocalLINEbin5.18.2.1998LINE.exe No File\nFirewallRules: [42FF3F30-8B2A-42B0-9BC0-F6C7BACF9258] => (Allow) C:UsersDanieleAppDataLocalLINEbin5.18.2.1998LineUpdater.exe No File\nFirewallRules: [F38971E4-A0A7-44DB-8A1C-8450D8A685C3] => (Allow) C:UsersDanieleAppDataLocalLINEbin5.18.2.1998LineUpdater.exe No File\nFirewallRules: [TCP Query UserCC8480C0-2941-4E9D-8A52-47822F0D9776D:giochidiablo iiidiablo iiix64diablo iii64.exe] => (Allow) D:giochidiablo iiidiablo iiix64diablo iii64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [UDP Query UserF6C4F938-A1A8-4668-AB2C-03AC5CE15700D:giochidiablo iiidiablo iiix64diablo iii64.exe] => (Allow) D:giochidiablo iiidiablo iiix64diablo iii64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [TCP Query User163F9996-F652-4769-9BAC-80C531683DA9C:program filesdnplayerext2ldboxheadless.exe] => (Allow) C:program filesdnplayerext2ldboxheadless.exe (Shanghai Changzhi Network Technology Co., Ltd. -> Oracle Corporation)\nFirewallRules: [UDP Query User3343FBF2-B1FF-4C62-B5FF-D8C3A6E8EC98C:program filesdnplayerext2ldboxheadless.exe] => (Allow) C:program filesdnplayerext2ldboxheadless.exe (Shanghai Changzhi Network Technology Co., Ltd. -> Oracle Corporation)\nFirewallRules: [6A971D92-619D-4131-AB0C-0BC7C492C4D5] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [9947C36A-3F76-4596-90D5-7062A53E9C53] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [TCP Query User71DD669E-F8F9-4657-9480-12045D0A9A65C:program filesldplayerboxldvboxheadless.exe] => (Allow) C:program filesldplayerboxldvboxheadless.exe (Shanghai Changzhi Network Technology Co., Ltd. -> Oracle Corporation)\nFirewallRules: [UDP Query User5C9DDDCA-3F20-4505-8FE1-74593EBD6931C:program filesldplayerboxldvboxheadless.exe] => (Allow) C:program filesldplayerboxldvboxheadless.exe (Shanghai Changzhi Network Technology Co., Ltd. -> Oracle Corporation)\nFirewallRules: [170B5594-146D-4B85-9BB4-3EF53938E732] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [37535782-EEB9-4AD5-82AB-95BDA7C0B007] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [F8CACE39-A536-471F-89EC-F6BA460694F0] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [472F5DAF-CF00-417C-AB83-604384991CE5] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [8070CE88-1B4C-434E-8495-B0F0C8C82972] => (Allow) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [22DBF4E8-86F2-44C0-9BE2-40F28D8B56AF] => (Allow) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [06240932-630C-46AA-8C14-877D0EA3938A] => (Allow) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [CC3EB70E-EEAD-4622-8480-E3C7771BF25C] => (Allow) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [E59453FF-C79A-4D0D-A485-D3FE8B274B54] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [0A829F94-700F-4835-8284-7B28614D717B] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [79FB848F-BBE9-42DA-8170-285A6C0060C8] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [456EF3E4-BE52-4A9A-8CA8-06554B75D800] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [B06D86D3-3848-4734-944F-5706BE664234] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [F0855DE7-46B2-4581-BFC1-2A4EB0D47355] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [8009BD78-17DA-44F1-95AA-5E9EC7724E77] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [73B5CCA2-1DFB-417E-88E2-0DAE1645F388] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [41C0109E-C969-40D1-AEDA-28C4B17EF631] => (Allow) D:GiochiDOTA 2steamappscommonPillars of EternityPillarsOfEternity.exe (Obsidian Entertainment) [File not signed]\nFirewallRules: [0A52AC62-C826-437E-BCE1-C1902CBE00BE] => (Allow) D:GiochiDOTA 2steamappscommonPillars of EternityPillarsOfEternity.exe (Obsidian Entertainment) [File not signed]\nFirewallRules: [374A4772-2595-4C7A-9E1D-A1692E687887] => (Allow) D:GiochiDOTA 2steamappscommonCounter-Strike Global Offensivecsgo.exe (Valve -> )\nFirewallRules: [55E824ED-7014-48A7-8DAA-0C8717A6913C] => (Allow) D:GiochiDOTA 2steamappscommonCounter-Strike Global Offensivecsgo.exe (Valve -> )\nFirewallRules: [E3CDA667-4963-4012-8775-68F6023DADD5] => (Allow) C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC -> Google LLC)\nFirewallRules: [BB40FF31-6239-422E-8074-B6A9E2DC0D95] => (Block) C:Program Files (x86)AviraSoftwareUpdateravirasoftwareupdatertoastnotificationsbridge.exe (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nFirewallRules: [0645C731-0335-4950-9427-213A6DA9E558] => (Allow) C:Program Files (x86)AviraSoftwareUpdateravirasoftwareupdatertoastnotificationsbridge.exe (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nFirewallRules: [CDB7F1B2-0F67-4210-9A69-DF18B049D9CE] => (Allow) C:Program Files (x86)AviraSoftwareUpdateravirasoftwareupdatertoastnotificationsbridge.exe (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
"},{"id":"text-75","type":"text","heading":"","plain_text":"==================== Restore Points =========================","html":"==================== Restore Points =========================
"},{"id":"text-76","type":"text","heading":"","plain_text":"18-04-2020 04:24:53 Punto di controllo pianificato\n18-04-2020 22:37:41 Windows Update","html":"18-04-2020 04:24:53 Punto di controllo pianificato\n18-04-2020 22:37:41 Windows Update
"},{"id":"text-77","type":"text","heading":"","plain_text":"==================== Faulty Device Manager Devices ============","html":"==================== Faulty Device Manager Devices ============
"},{"id":"text-78","type":"text","heading":"","plain_text":"==================== Event log errors: ========================","html":"==================== Event log errors: ========================
"},{"id":"text-79","type":"text","heading":"","plain_text":"Application errors:\n==================\nError: (04/19/2020 02:59:14 AM) (Source: Application Error) (EventID: 1000) (User: )\nDescription: Nome dell'applicazione che ha generato l'errore: Avira.SystemSpeedup.Maintenance.exe, versione: 6.4.1.10871, timestamp: 0x5e32ea26\nNome del modulo che ha generato l'errore: clr.dll, versione: 4.8.4110.0, timestamp: 0x5de6da2a\nCodice eccezione: 0xc0000409\nOffset errore 0x0035a538\nID processo che ha generato l'errore: 0x28e4\nOra di avvio dell'applicazione che ha generato l'errore: 0x01d615ee12c7f9a8\nPercorso dell'applicazione che ha generato l'errore: C:Program Files (x86)AviraSystem SpeedupAvira.SystemSpeedup.Maintenance.exe\nPercorso del modulo che ha generato l'errore: C:WindowsMicrosoft.NETFrameworkv4.0.30319clr.dll\nID segnalazione: 5dd80d31-81e1-11ea-b4b9-1c7508f37aca","html":"Application errors:\n==================\nError: (04/19/2020 02:59:14 AM) (Source: Application Error) (EventID: 1000) (User: )\nDescription: Nome dell'applicazione che ha generato l'errore: Avira.SystemSpeedup.Maintenance.exe, versione: 6.4.1.10871, timestamp: 0x5e32ea26\nNome del modulo che ha generato l'errore: clr.dll, versione: 4.8.4110.0, timestamp: 0x5de6da2a\nCodice eccezione: 0xc0000409\nOffset errore 0x0035a538\nID processo che ha generato l'errore: 0x28e4\nOra di avvio dell'applicazione che ha generato l'errore: 0x01d615ee12c7f9a8\nPercorso dell'applicazione che ha generato l'errore: C:Program Files (x86)AviraSystem SpeedupAvira.SystemSpeedup.Maintenance.exe\nPercorso del modulo che ha generato l'errore: C:WindowsMicrosoft.NETFrameworkv4.0.30319clr.dll\nID segnalazione: 5dd80d31-81e1-11ea-b4b9-1c7508f37aca
"},{"id":"text-80","type":"text","heading":"","plain_text":"Error: (04/18/2020 02:22:40 PM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Impossibile riattivare il filtro eventi con query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" nello spazio dei nomi "//./root/CIMV2". Errore 0x80041003. Impossibile recapitare gli eventi tramite questo filtro fino alla risoluzione del problema.","html":"Error: (04/18/2020 02:22:40 PM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Impossibile riattivare il filtro eventi con query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" nello spazio dei nomi "//./root/CIMV2". Errore 0x80041003. Impossibile recapitare gli eventi tramite questo filtro fino alla risoluzione del problema.
"},{"id":"text-81","type":"text","heading":"","plain_text":"Error: (04/18/2020 02:22:32 PM) (Source: Avira Phantom VPN) (EventID: 0) (User: )\nDescription: Service cannot be started. Il processo di servizio non ha potuto connettersi al controller di servizio","html":"Error: (04/18/2020 02:22:32 PM) (Source: Avira Phantom VPN) (EventID: 0) (User: )\nDescription: Service cannot be started. Il processo di servizio non ha potuto connettersi al controller di servizio
"},{"id":"text-82","type":"text","heading":"","plain_text":"Error: (04/18/2020 02:58:54 AM) (Source: Application Error) (EventID: 1000) (User: )\nDescription: Nome dell'applicazione che ha generato l'errore: Avira.SystemSpeedup.Maintenance.exe, versione: 6.4.1.10871, timestamp: 0x5e32ea26\nNome del modulo che ha generato l'errore: clr.dll, versione: 4.8.4110.0, timestamp: 0x5de6da2a\nCodice eccezione: 0xc0000409\nOffset errore 0x0035a538\nID processo che ha generato l'errore: 0x13cc\nOra di avvio dell'applicazione che ha generato l'errore: 0x01d61524e890fa87\nPercorso dell'applicazione che ha generato l'errore: C:Program Files (x86)AviraSystem SpeedupAvira.SystemSpeedup.Maintenance.exe\nPercorso del modulo che ha generato l'errore: C:WindowsMicrosoft.NETFrameworkv4.0.30319clr.dll\nID segnalazione: 27c684c1-8118-11ea-8822-1c7508f37aca","html":"Error: (04/18/2020 02:58:54 AM) (Source: Application Error) (EventID: 1000) (User: )\nDescription: Nome dell'applicazione che ha generato l'errore: Avira.SystemSpeedup.Maintenance.exe, versione: 6.4.1.10871, timestamp: 0x5e32ea26\nNome del modulo che ha generato l'errore: clr.dll, versione: 4.8.4110.0, timestamp: 0x5de6da2a\nCodice eccezione: 0xc0000409\nOffset errore 0x0035a538\nID processo che ha generato l'errore: 0x13cc\nOra di avvio dell'applicazione che ha generato l'errore: 0x01d61524e890fa87\nPercorso dell'applicazione che ha generato l'errore: C:Program Files (x86)AviraSystem SpeedupAvira.SystemSpeedup.Maintenance.exe\nPercorso del modulo che ha generato l'errore: C:WindowsMicrosoft.NETFrameworkv4.0.30319clr.dll\nID segnalazione: 27c684c1-8118-11ea-8822-1c7508f37aca
"},{"id":"text-83","type":"text","heading":"","plain_text":"Error: (04/17/2020 01:32:33 PM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Impossibile riattivare il filtro eventi con query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" nello spazio dei nomi "//./root/CIMV2". Errore 0x80041003. Impossibile recapitare gli eventi tramite questo filtro fino alla risoluzione del problema.","html":"Error: (04/17/2020 01:32:33 PM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Impossibile riattivare il filtro eventi con query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" nello spazio dei nomi "//./root/CIMV2". Errore 0x80041003. Impossibile recapitare gli eventi tramite questo filtro fino alla risoluzione del problema.
"},{"id":"text-84","type":"text","heading":"","plain_text":"Error: (04/17/2020 02:59:07 AM) (Source: Application Error) (EventID: 1000) (User: )\nDescription: Nome dell'applicazione che ha generato l'errore: Avira.SystemSpeedup.Maintenance.exe, versione: 6.4.1.10871, timestamp: 0x5e32ea26\nNome del modulo che ha generato l'errore: clr.dll, versione: 4.8.4110.0, timestamp: 0x5de6da2a\nCodice eccezione: 0xc0000409\nOffset errore 0x0035a538\nID processo che ha generato l'errore: 0x18b0\nOra di avvio dell'applicazione che ha generato l'errore: 0x01d6145bbe2f4581\nPercorso dell'applicazione che ha generato l'errore: C:Program Files (x86)AviraSystem SpeedupAvira.SystemSpeedup.Maintenance.exe\nPercorso del modulo che ha generato l'errore: C:WindowsMicrosoft.NETFrameworkv4.0.30319clr.dll\nID segnalazione: 050dfbb3-804f-11ea-ad8b-1c7508f37aca","html":"Error: (04/17/2020 02:59:07 AM) (Source: Application Error) (EventID: 1000) (User: )\nDescription: Nome dell'applicazione che ha generato l'errore: Avira.SystemSpeedup.Maintenance.exe, versione: 6.4.1.10871, timestamp: 0x5e32ea26\nNome del modulo che ha generato l'errore: clr.dll, versione: 4.8.4110.0, timestamp: 0x5de6da2a\nCodice eccezione: 0xc0000409\nOffset errore 0x0035a538\nID processo che ha generato l'errore: 0x18b0\nOra di avvio dell'applicazione che ha generato l'errore: 0x01d6145bbe2f4581\nPercorso dell'applicazione che ha generato l'errore: C:Program Files (x86)AviraSystem SpeedupAvira.SystemSpeedup.Maintenance.exe\nPercorso del modulo che ha generato l'errore: C:WindowsMicrosoft.NETFrameworkv4.0.30319clr.dll\nID segnalazione: 050dfbb3-804f-11ea-ad8b-1c7508f37aca
"},{"id":"text-85","type":"text","heading":"","plain_text":"Error: (04/17/2020 12:36:53 AM) (Source: Application Error) (EventID: 1000) (User: )\nDescription: Nome dell'applicazione che ha generato l'errore: MsMpEng.exe, versione: 4.10.209.0, timestamp: 0x582a94a1\nNome del modulo che ha generato l'errore: mpengine.dll, versione: 1.1.16900.4, timestamp: 0x5e70249a\nCodice eccezione: 0xc0000005\nOffset errore 0x00000000001d00cf\nID processo che ha generato l'errore: 0xac\nOra di avvio dell'applicazione che ha generato l'errore: 0x01d60ec33667deaa\nPercorso dell'applicazione che ha generato l'errore: C:Program FilesMicrosoft Security ClientMsMpEng.exe\nPercorso del modulo che ha generato l'errore: C:ProgramDataMicrosoftMicrosoft AntimalwareDefinition UpdatesABFDE23F-10A0-40FD-89BB-EEAFDF90A038mpengine.dll\nID segnalazione: 2686ef91-803b-11ea-ad8b-1c7508f37aca","html":"Error: (04/17/2020 12:36:53 AM) (Source: Application Error) (EventID: 1000) (User: )\nDescription: Nome dell'applicazione che ha generato l'errore: MsMpEng.exe, versione: 4.10.209.0, timestamp: 0x582a94a1\nNome del modulo che ha generato l'errore: mpengine.dll, versione: 1.1.16900.4, timestamp: 0x5e70249a\nCodice eccezione: 0xc0000005\nOffset errore 0x00000000001d00cf\nID processo che ha generato l'errore: 0xac\nOra di avvio dell'applicazione che ha generato l'errore: 0x01d60ec33667deaa\nPercorso dell'applicazione che ha generato l'errore: C:Program FilesMicrosoft Security ClientMsMpEng.exe\nPercorso del modulo che ha generato l'errore: C:ProgramDataMicrosoftMicrosoft AntimalwareDefinition UpdatesABFDE23F-10A0-40FD-89BB-EEAFDF90A038mpengine.dll\nID segnalazione: 2686ef91-803b-11ea-ad8b-1c7508f37aca
"},{"id":"text-86","type":"text","heading":"","plain_text":"Error: (04/16/2020 10:25:52 PM) (Source: Application Hang) (EventID: 1002) (User: )\nDescription: Il programma Explorer.EXE versione 6.1.7601.23537 non interagisce più con Windows ed è stato chiuso. Per vedere se sono disponibili ulteriori informazioni sul problema, verificare la cronologia del problema in Centro operativo nel Pannello di controllo.","html":"Error: (04/16/2020 10:25:52 PM) (Source: Application Hang) (EventID: 1002) (User: )\nDescription: Il programma Explorer.EXE versione 6.1.7601.23537 non interagisce più con Windows ed è stato chiuso. Per vedere se sono disponibili ulteriori informazioni sul problema, verificare la cronologia del problema in Centro operativo nel Pannello di controllo.
"},{"id":"text-87","type":"text","heading":"","plain_text":"ID processo: 804","html":"ID processo: 804
"},{"id":"text-88","type":"text","heading":"","plain_text":"Ora di avvio: 01d60ec34d82acc2","html":"Ora di avvio: 01d60ec34d82acc2
"},{"id":"text-89","type":"text","heading":"","plain_text":"Ora di chiusura: 0","html":"Ora di chiusura: 0
"},{"id":"text-90","type":"text","heading":"","plain_text":"Percorso applicazione: C:WindowsExplorer.EXE","html":"Percorso applicazione: C:WindowsExplorer.EXE
"},{"id":"text-91","type":"text","heading":"","plain_text":"ID segnalazione: cb278b7b-8028-11ea-ad8b-1c7508f37aca","html":"ID segnalazione: cb278b7b-8028-11ea-ad8b-1c7508f37aca
"},{"id":"text-92","type":"text","heading":"","plain_text":"System errors:\n=============\nError: (04/18/2020 02:23:26 PM) (Source: Service Control Manager) (EventID: 7031) (User: )\nDescription: Il servizio Avira Phantom VPN è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 5000 millisecondi: Riavvia il servizio.","html":"System errors:\n=============\nError: (04/18/2020 02:23:26 PM) (Source: Service Control Manager) (EventID: 7031) (User: )\nDescription: Il servizio Avira Phantom VPN è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 5000 millisecondi: Riavvia il servizio.
"},{"id":"text-93","type":"text","heading":"","plain_text":"Error: (04/17/2020 12:40:19 AM) (Source: Microsoft Antimalware) (EventID: 3002) (User: )\nDescription: La funzionalità di protezione in tempo reale di Antimalware Microsoft ha rilevato un errore e non è riuscita.","html":"Error: (04/17/2020 12:40:19 AM) (Source: Microsoft Antimalware) (EventID: 3002) (User: )\nDescription: La funzionalità di protezione in tempo reale di Antimalware Microsoft ha rilevato un errore e non è riuscita.
"},{"id":"text-94","type":"text","heading":"","plain_text":"Funzionalità: Network Inspection System","html":"Funzionalità: Network Inspection System
"},{"id":"text-95","type":"text","heading":"","plain_text":"Codice errore: 0x80070002","html":"Codice errore: 0x80070002
"},{"id":"text-96","type":"text","heading":"","plain_text":"Descrizione errore: Impossibile trovare il file specificato.","html":"Descrizione errore: Impossibile trovare il file specificato.
"},{"id":"text-97","type":"text","heading":"","plain_text":"Motivo: Nel sistema mancano degli aggiornamenti necessari per l'esecuzione di Network Inspection System. Installare gli aggiornamenti necessari e riavviare il computer.","html":"Motivo: Nel sistema mancano degli aggiornamenti necessari per l'esecuzione di Network Inspection System. Installare gli aggiornamenti necessari e riavviare il computer.
"},{"id":"text-98","type":"text","heading":"","plain_text":"Error: (04/17/2020 12:38:27 AM) (Source: Service Control Manager) (EventID: 7031) (User: )\nDescription: Il servizio Microsoft Antimalware Service è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 100 millisecondi: Esegui il programma di ripristino configurato.","html":"Error: (04/17/2020 12:38:27 AM) (Source: Service Control Manager) (EventID: 7031) (User: )\nDescription: Il servizio Microsoft Antimalware Service è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 100 millisecondi: Esegui il programma di ripristino configurato.
"},{"id":"text-99","type":"text","heading":"","plain_text":"Error: (04/17/2020 12:36:50 AM) (Source: Microsoft Antimalware) (EventID: 5008) (User: )\nDescription: Il motore Antimalware Microsoft è stato interrotto a causa di un errore imprevisto.","html":"Error: (04/17/2020 12:36:50 AM) (Source: Microsoft Antimalware) (EventID: 5008) (User: )\nDescription: Il motore Antimalware Microsoft è stato interrotto a causa di un errore imprevisto.
"},{"id":"text-100","type":"text","heading":"","plain_text":"Tipo errore: Arresto anomalo","html":"Tipo errore: Arresto anomalo
"},{"id":"text-101","type":"text","heading":"","plain_text":"Codice eccezione: 0xc0000005","html":"Codice eccezione: 0xc0000005
"},{"id":"text-102","type":"text","heading":"","plain_text":"Risorsa: file:C:UsersDanieleDownloadsSample GESE Grade 5 Topic form_completed..pdf","html":"Risorsa: file:C:UsersDanieleDownloadsSample GESE Grade 5 Topic form_completed..pdf
"},{"id":"text-103","type":"text","heading":"","plain_text":"Error: (04/16/2020 11:28:52 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: Ricevuto avviso di errore irreversibile: 40.","html":"Error: (04/16/2020 11:28:52 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: Ricevuto avviso di errore irreversibile: 40.
"},{"id":"text-104","type":"text","heading":"","plain_text":"Error: (04/16/2020 11:28:52 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: Ricevuto avviso di errore irreversibile: 70.","html":"Error: (04/16/2020 11:28:52 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: Ricevuto avviso di errore irreversibile: 70.
"},{"id":"text-105","type":"text","heading":"","plain_text":"Error: (04/16/2020 10:18:15 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: Ricevuto avviso di errore irreversibile: 40.","html":"Error: (04/16/2020 10:18:15 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: Ricevuto avviso di errore irreversibile: 40.
"},{"id":"text-106","type":"text","heading":"","plain_text":"Error: (04/16/2020 10:18:15 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: Ricevuto avviso di errore irreversibile: 70.","html":"Error: (04/16/2020 10:18:15 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: Ricevuto avviso di errore irreversibile: 70.
"},{"id":"text-107","type":"text","heading":"","plain_text":"Windows Defender:\n===================================\nDate: 2016-06-22 23:31:54.534\nLa description: \nWindows Defender: errore durante il tentativo di caricare le firme. Verrà tentato di ripristinare un set di firme valido.\nFirme tentate:Corrente\nCodice errore:0x80070002\nDescrizione errore:Impossibile trovare il file specificato. \nVersione firma:0.0.0.0\nVersione modulo:0.0.0.0","html":"Windows Defender:\n===================================\nDate: 2016-06-22 23:31:54.534\nLa description: \nWindows Defender: errore durante il tentativo di caricare le firme. Verrà tentato di ripristinare un set di firme valido.\nFirme tentate:Corrente\nCodice errore:0x80070002\nDescrizione errore:Impossibile trovare il file specificato. \nVersione firma:0.0.0.0\nVersione modulo:0.0.0.0
"},{"id":"text-108","type":"text","heading":"","plain_text":"==================== Memory info ===========================","html":"==================== Memory info ===========================
"},{"id":"text-109","type":"text","heading":"","plain_text":"BIOS: Acer V1.07 03/02/2011\nMotherboard: Acer JE50_HR\nProcessor: Intel® Core™ i5-2410M CPU @ 2.30GHz\nPercentage of memory in use: 92%\nTotal physical RAM: 8043.86 MB\nAvailable physical RAM: 633.23 MB\nTotal Virtual: 24426 MB\nAvailable Virtual: 15554.41 MB","html":"BIOS: Acer V1.07 03/02/2011\nMotherboard: Acer JE50_HR\nProcessor: Intel® Core™ i5-2410M CPU @ 2.30GHz\nPercentage of memory in use: 92%\nTotal physical RAM: 8043.86 MB\nAvailable physical RAM: 633.23 MB\nTotal Virtual: 24426 MB\nAvailable Virtual: 15554.41 MB
"},{"id":"text-110","type":"text","heading":"","plain_text":"==================== Drives ================================","html":"==================== Drives ================================
"},{"id":"text-111","type":"text","heading":"","plain_text":"Drive c: (Acer) (Fixed) (Total:290.05 GB) (Free:130.96 GB) NTFS\nDrive d: (DATA) (Fixed) (Total:290.4 GB) (Free:143.46 GB) NTFS\nDrive e: (Misc) (CDROM) (Total:0.69 GB) (Free:0.13 GB) UDF\nDrive g: () (Removable) (Total:29.27 GB) (Free:1.17 GB) FAT32","html":"Drive c: (Acer) (Fixed) (Total:290.05 GB) (Free:130.96 GB) NTFS\nDrive d: (DATA) (Fixed) (Total:290.4 GB) (Free:143.46 GB) NTFS\nDrive e: (Misc) (CDROM) (Total:0.69 GB) (Free:0.13 GB) UDF\nDrive g: () (Removable) (Total:29.27 GB) (Free:1.17 GB) FAT32
"},{"id":"text-112","type":"text","heading":"","plain_text":"\\?Volume283c1efb-a59f-11e2-b4d5-806e6f6e6963 (SYSTEM RESERVED) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS\n\\?Volume283c1efa-a59f-11e2-b4d5-806e6f6e6963 (PQSERVICE) (Fixed) (Total:15.62 GB) (Free:2.53 GB) NTFS","html":"\\?Volume283c1efb-a59f-11e2-b4d5-806e6f6e6963 (SYSTEM RESERVED) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS\n\\?Volume283c1efa-a59f-11e2-b4d5-806e6f6e6963 (PQSERVICE) (Fixed) (Total:15.62 GB) (Free:2.53 GB) NTFS
"},{"id":"text-113","type":"text","heading":"","plain_text":"==================== MBR & Partition Table ====================","html":"==================== MBR & Partition Table ====================
"},{"id":"text-114","type":"text","heading":"","plain_text":"==========================================================\nDisk: 0 (MBR Code: Windows 7/8/10) (Size: 596.2 GB) (Disk ID: BD414BA4)\nPartition 1: (Not Active) – (Size=15.6 GB) – (Type=27)\nPartition 2: (Active) – (Size=100 MB) – (Type=07 NTFS)\nPartition 3: (Not Active) – (Size=290.1 GB) – (Type=07 NTFS)\nPartition 4: (Not Active) – (Size=290.4 GB) – (Type=07 NTFS)","html":"==========================================================\nDisk: 0 (MBR Code: Windows 7/8/10) (Size: 596.2 GB) (Disk ID: BD414BA4)\nPartition 1: (Not Active) – (Size=15.6 GB) – (Type=27)\nPartition 2: (Active) – (Size=100 MB) – (Type=07 NTFS)\nPartition 3: (Not Active) – (Size=290.1 GB) – (Type=07 NTFS)\nPartition 4: (Not Active) – (Size=290.4 GB) – (Type=07 NTFS)
"},{"id":"text-115","type":"text","heading":"","plain_text":"==========================================================\nDisk: 1 (Protective MBR) (Size: 29.3 GB) (Disk ID: 00000000)","html":"==========================================================\nDisk: 1 (Protective MBR) (Size: 29.3 GB) (Disk ID: 00000000)
"},{"id":"text-116","type":"text","heading":"","plain_text":"Partition: GPT.","html":"Partition: GPT.
"},{"id":"text-117","type":"text","heading":"","plain_text":"==================== End of Addition.txt =======================","html":"==================== End of Addition.txt =======================
"},{"id":"text-118","type":"text","heading":"","plain_text":"Click to rate this post!\n \n [Total: 0 Average: 0]","html":"Click to rate this post!\n \n [Total: 0 Average: 0]
"}],"sections":[{"id":"text-1","heading":"Text","content":"Résultat de l'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 19-04-2020\nRan par Daniele (administrateur) sur DANIELE-PC (Acer Aspire 5750G) (19-04-2020 14:37:26)\nExécution à partir de C: Users Daniele Downloads\nProfils chargés: Daniele (Profils disponibles: Daniele & Ree)\nPlateforme: Windows 7 Home Premium Service Pack 1 (X64) Langue: Italiano (Italia)\nInternet Explorer version 11 (navigateur par défaut: FF)\nMode de démarrage: Normal"},{"id":"text-2","heading":"Text","content":"==================== Processus (sur liste blanche) ================="},{"id":"text-3","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, le processus sera fermé. Le fichier ne sera pas déplacé.)"},{"id":"text-4","heading":"Text","content":"(Adobe Inc. -> Adobe Systems) C: Program Files (x86) Common Files Adobe ARM 1.0 armsvc.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Antivirus avgnt.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Antivirus avguard.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Antivirus avscan.exe \n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Antivirus avshadow.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Antivirus sched.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Launcher Avira.ServiceHost.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Launcher Avira.Systray.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira Optimizer Host Avira.OptimizerHost.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira SoftwareUpdater Avira.SoftwareUpdater.ServiceHost.exe\n(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C: Program Files (x86) Avira VPN Avira.VpnService.exe\n(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C: Program Files (x86) Battle.net Battle.net.exe \n(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C: ProgramData Battle.net Agent Agent.7022 Agent.exe\n(CyberLink -> CyberLink Corp.) C: Program Files (x86) Acer clear.fi MVP clear.fiAgent.exe\n(CyberLink -> CyberLink) C: Program Files (x86) Acer clear.fi MVP Kernel DMR DMREngine.exe\n(Discord Inc. -> Discord Inc.) C: Users Daniele AppData Local Discord app-0.0.306 Discord.exe \n(Even Balance, Inc. ->) C: Windows SysWOW64 PnkBstrA.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe \n(HearthSim, LLC -> HearthSim) C: Users Daniele AppData Local HearthstoneDeckTracker app-1.10.7 HearthstoneDeckTracker.exe\n(Intel Corporation -> Intel Corporation) C: Windows System32 igfxpers.exe\n(Intel Corporation -> Intel Corporation) C: Windows System32 igfxtray.exe\n(McAfee, LLC -> McAfee, LLC) C: Program Files McAfee WebAdvisor servicehost.exe\n(McAfee, LLC -> McAfee, LLC) C: Program Files McAfee WebAdvisor uihost.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Fichiers communs microsoft shared Virtualization Handler CVHSVC.EXE\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Microsoft Application Virtualization Client sftlist.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Microsoft Application Virtualization Client sftvsa.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client MsMpEng.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client msseces.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client NisSrv.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 dllhost.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 rundll32.exe\n(Mozilla Corporation -> Mozilla Corporation) C: Program Files (x86) Mozilla Firefox firefox.exe \n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files (x86) NVIDIA Corporation NvTelemetry NvTelemetryContainer.exe\n(NVIDIA Corporation -> NVIDIA Corporation) C: Program Files NVIDIA Corporation Display.NvContainer NVDisplay.Container.exe \n(SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C: Program Files Fichiers communs EPSON EPW! 3 SSRP E_S60RPB.EXE\n(SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C: Windows System32 spool drivers x64 3 E_IATILFE.EXE\n(Shanghai Changzhi Network Technology Co., Ltd. ->) D: XuanZhi LDPlayer ldnews.exe\n(Synaptics Incorporated -> Synaptics Incorporated) C: Program Files Synaptics SynTP SynTPEnh.exe\n(Synaptics Incorporated -> Synaptics Incorporated) C: Program Files Synaptics SynTP SynTPHelper.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer_Service.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer tv_w32.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer tv_x64.exe"},{"id":"text-5","heading":"Text","content":"==================== Registre (liste blanche) ==================="},{"id":"text-6","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, l'élément de registre sera restauré par défaut ou supprimé. Le fichier ne sera pas déplacé.)"},{"id":"text-7","heading":"Text","content":"HKLM … Run: [MSC] => C: Program Files Microsoft Security Client msseces.exe [1353680 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nHKLM … Run: [SynTPEnh] => C: Program Files Synaptics SynTP SynTPEnh.exe [2280232 2010-07-29] (Synaptics Incorporated -> Synaptics Incorporated)\nHKLM … Run: [] => [X]\nHKLM-x32 … Exécuter: [KeePass 2 PreLoad] => C: Program Files (x86) KeePass Password Safe 2 KeePass.exe [3331264 2020-01-20] (Développeur Open Source, Dominik Reichl -> Dominik Reichl)\nHKLM-x32 … Exécuter: [Avira SystrayStartTrigger] => C: Program Files (x86) Avira Launcher Avira.SystrayStartTrigger.exe [239520 2020-04-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nHKLM-x32 … Exécuter: [Avira System Speedup User Starter] => C: Program Files (x86) Avira System Speedup Avira.SystemSpeedup.Core.Common.Starter.exe [331368 2020-01-30] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nHKLM-x32 … Exécuter: [] => [X]\nHKU S-1-5-19 … RunOnce: [IsMyWinLockerReboot] => msiexec.exe / qn / x voidguid\nHKU S-1-5-20 … RunOnce: [IsMyWinLockerReboot] => msiexec.exe / qn / x voidguid\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … Run: [EPLTargetP0000000000000001] => C: Windows system32 spool DRIVERS x64 3 E_IATILFE.EXE [297024 2013-01-24] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … Run: [Discord] => C: Users Daniele AppData Local Discord app-0.0.306 Discord.exe [90950968 2020-02-24] (Discord Inc. -> Discord Inc.)\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … Run: [LDNews] => D: XuanZhi LDPlayer ldnews.exe [1309368 2020-03-25] (Shanghai Changzhi Network Technology Co., Ltd. ->)\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … Run: [] => [X]\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … RunOnce: [FlashPlayerUpdate] => C: Windows SysWOW64 Macromed Flash FlashUtil32_32_0_0_303_Plugin.exe [1457720 2019-12-18] (Adobe Inc. -> Adobe)\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … MountPoints2: 050c8d1e-37e4-11ea-9ee4-1c7508f37aca – H: RTK_NIC_DRIVER_INSTALLER.sfx.exe\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … MountPoints2: 5e68e840-be54-11e2-b434-806e6f6e6963 – G: Setup.exe\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … MountPoints2: 839489ac-58a7-11e5-ac80-1c7508ead495 – C: Windows system32 RunDLL32.EXE Shell32.DLL, ShellExec_RunDLL H: Start.exe\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … MountPoints2: 84650df6-67d9-11ea-9c89-1c7508f37aca – H: HiSuiteDownLoader.exe} – H: HiSuiteDownLoader.exe\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … MountPoints2: aab47bad-b4df-11e2-b1df-1c7508ead495 – F: LANLauncher.exe\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … MountPoints2: b7603e81-b1e8-11e7-9500-1c7508ead495 – G: HiSuiteDownLoader.exe\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 … MountPoints2: fb958786-5f36-11e3-8f8a-1c7508ead495 – F: autorun.exe\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 Control Panel Desktop \\ SCRNSAVE.EXE -> C: Windows system32 scrnsave.scr [11264 2009-07-14] (Microsoft Windows -> Microsoft Corporation)\nHKU S-1-5-18 … RunOnce: [IsMyWinLockerReboot] => msiexec.exe / qn / x voidguid\nHKLM Software Microsoft Active Setup Installed Components: [2D46B6DC-2207-486B-B523-A557E6D54B47] -> C: Windows system32 cmd.exe / D / C démarrer C: Windows system32 ie4uinit.exe -ClearIconCache\nHKLM Software Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> C: Program Files (x86) Google Chrome Application 81.0.4044.113 Installer chrmstp.exe [2020-04-15] (Google LLC -> Google LLC)\nHKLM Software Wow6432Node Microsoft Active Setup Installed Components: [2D46B6DC-2207-486B-B523-A557E6D54B47] -> C: Windows system32 cmd.exe / D / C démarrer C: Windows system32 ie4uinit.exe -ClearIconCache\nHKLM Software Wow6432Node Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> "C: Program Files (x86) Google Chrome Application 57.0.2987.133 Installer chrmstp.exe" –configure-user-settings –verbose-logging –system-level\nHKLM Software Wow6432Node Microsoft Active Setup Installed Components: [A6EADE66-0000-0000-484E-7E8A45000000] -> C: Program Files (x86) Adobe Acrobat Reader DC Esl AiodLite.dll [2019-05-03] (Adobe Inc. -> Adobe Systems, Inc.)\nHKLM Software … Authentication Credential Providers: [F8A0B131-5F68-486c-8040-7E8FC3C85BB6] -> C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDCREDPROV.DLL [2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nFournisseurs HKLM Software … Authentication PLAP: [60442b50-aac2-4db7-b9b0-813d2107287d] -> c: windows system32 dsNcSmartCardProv.dll [2014-04-16] (Juniper Networks, Inc. -> Juniper Networks)\nFournisseurs HKLM Software … Authentication PLAP: [9f4a51de-92b1-483a-b717-dd7d3bb7d3db] -> c: windows system32 dsNcCredProv.dll [2014-04-16] (Juniper Networks, Inc. -> Juniper Networks)\nAppInit_DLLs: C: Windows system32 nvinitx.dll => C: Windows system32 nvinitx.dll [182784 2018-03-25] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation)\nAppInit_DLLs-x32: C: Windows SysWOW64 nvinit.dll => C: Windows SysWOW64 nvinit.dll [159704 2018-03-25] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation)"},{"id":"text-8","heading":"Text","content":"==================== Tâches planifiées (liste blanche) ============"},{"id":"text-9","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)"},{"id":"text-10","heading":"Text","content":"Tâche: 0587C257-D7C6-4C78-8F21-1D7F3939B9B9 – System32 Tasks Recovery Management Burn Notification => C: Program Files Acer Acer eRecovery Management NotificationCenter Notification.exe [816520 2011-08-09] (Acer Incorporated -> Acer)\nTâche: 0698585B-BA25-4335-9278-3BC3C18BE8B5 – System32 Tasks Adobe Flash Player NPAPI Notifier => C: Windows SysWOW64 Macromed Flash FlashUtil32_32_0_0_303_Plugin.exe [1457720 2019-12-18] (Adobe Inc. -> Adobe)\nTâche: 0D073FB3-7592-4AD3-ACD5-261412DDD7DF – System32 Tasks EPSON XP-312 313 315 Series Invitation 6AFC5C38-E427-4C18-A613-15CA4120664F => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 0D415B8D-D7FD-477F-97FB-381B18EBA498 – Tâche de mise à jour System32 Tasks Adobe Acrobat => C: Program Files (x86) Common Files Adobe ARM 1.0 AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)\nTâche: 16CBEF8D-2362-4ADC-9C8E-7F143609615F – System32 Tasks clear.fiAgent => C: Program Files (x86) Acer clear.fi MVP clear.fiAgent.exe [120104 2011-08-24] (CyberLink -> CyberLink Corp.)\nTâche: 19BE36DC-19D0-4AE2-B932-4E92E841E50E – System32 Tasks NvTmMon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation Update Core NvTmMon.exe [510912 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 28017D3E-92AD-4139-B233-772380FCF796 – System32 Tasks 898F6CA2-2FC0-4969-9594-F4670EF81EBA => C: Program Files (x86) Activision Rome – Total War RomeTW.exe\nTâche: 28FFE953-0A42-4552-8E34-DC5CE2F4000A – System32 Tasks F3E47E76-9709-4A21-BB71-1B0C6C9B8223 => C: Windows system32 pcalua.exe -a E: Setup.exe – d E: \nTâche: 2AFD2942-0BC9-4D3A-A82D-AD1D5CCE73FD – System32 Tasks E3F8847E-F1BC-4BFB-8A19-8DF64248AAFE => C: Program Files (x86) Activision Rome – Total War RomeTW.exe\nTâche: 34FFA4CE-EA47-418C-BE0E-1EA34C5DCC7B – System32 Tasks AviraSystemSpeedupUpdate => C: ProgramData Avira SystemSpeedup Update avira_speedup_setup_update.exe [27848432 2020-04-09] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nTâche: 461EE1FB-988C-4A90-BB13-D665D42A365A – System32 Tasks NvProfileUpdaterDaily_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation Update Core NvProfileUpdater64 [662464 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 4802D53D-7317-4F6D-96B0-025C0D18E41B – System32 Tasks 5B715CDF-6EE8-460D-A988-FA5FE01124D1 => E: baldur.exe\nTâche: 53F97095-C1E8-4C4E-8E7E-D640EAC6E922 – System32 Tasks NVIDIA GeForce Experience SelfUpdate_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation NVIDIA GeForce Experience NVIDIA GeForce Experience.exe [2069952 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 576D0D33-BE9A-4724-A555-8F4E9B90573B – System32 Tasks EPSON XP-312 313 315 Series Update E25A4D64-F87D-4249-99D5-CFF2F8F8E6DF => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 58DE433B-64F3-4832-A901-30F96F3625BA – System32 Tasks NvProfileUpdaterOnLogon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation Update Core NvProfileUpdater64 [662464 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 5CED6FD0-67EC-4881-BEBA-77F9D42F4209 – System32 Tasks Adobe Flash Player Updater => C: Windows SysWOW64 Macromed Flash FlashPlayerUpdateService.exe [335416 2019-12-18] (Adobe Inc. -> Adobe)\nTâche: 6DA9947E-16BB-412B-9076-BAB7FB4730DC – System32 Tasks NvTmRep_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation Update Core NvTmRep.exe [757184 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 6E86E2AF-4A75-49B5-B12F-E52842CDEB92 – System32 Tasks E4841482-3364-44D1-9773-1AA169AD4679 => C: Program Files (x86) Activision Rome – Total War RomeTW.exe\nTâche: 6E924764-AF68-4394-8DE7-E26688CAA88F – System32 Tasks E6B67C06-3DA8-48D9-8061-CC54EDA7A03D => C: Users Daniele Desktop Tor Browser Browser firefox.exe.exe \nTâche: 82643A6B-7C76-4DDE-9EFC-EAA23691FC3F – System32 Tasks 7D643D1C-0931-495D-8883-8D8B85E39BAB => C: Windows system32 pcalua.exe -a C: Users Daniele Bureau hpflash1.exe -d C: Users Daniele Desktop\nTâche: 89BBD1F3-AD18-4295-9C8F-408713D375EF – System32 Tasks DMREngine => C: Program Files (x86) Acer clear.fi MVP . Kernel DMR DMREngine.exe [169352 2011-08-24] (CyberLink -> CyberLink)\nTâche: 8DA7805F-DA82-44FD-8C16-3DB36A78306A – System32 Tasks UALU notificatin => C: Program Files Acer Acer Updater UALU.exe [22392 2012-04-05] (Acer Incorporated -> Acer Incorporated)\nTâche: 906AA2A6-A3F5-419E-AD07-0DC22E0C18E7 – System32 Tasks clear.fi => C: Program Files (x86) Acer clear.fi MVP clear.fi.exe [264760 2011-08-24] (CyberLink -> Acer Incorporated)\nTâche: 91BE0F27-0BB1-4F2D-AA59-B164367ED37B – System32 Tasks GoogleUpdateTaskMachineCore => C: Program Files (x86) Google Update GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)\nTâche: 944C8AC3-46F0-49EA-BCE6-BD5F2ABF1E25 – System32 Tasks NvBatteryBoostCheckOnLogon_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVontia Corporation NvC [469952 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: 947B3B5A-7121-4AA4-A132-B3723F145F31 – System32 Tasks EPSON XP-312 313 315 Series Update 6AFC5C38-E427-4C18-A613-15CA4120664F => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 96EC6761-5AF9-498C-A923-CBEB073F3C48 – System32 Tasks Microsoft Microsoft Antimalware Microsoft Antimalware Scheduled Scan => C: Program Files Microsoft Security Client \\ MpCmdRun.exe [410784 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nTâche: 971CBDDC-AE71-4383-BF3E-55684DC6BE1F – Tâche System32 Tasks Overwolf Updater => C: Program Files (x86) Overwolf OverwolfUpdater.exe [2463064 2020-03-14] (Overwolf Ltd -> Overwolf LTD)\nTâche: 9C563B9F-8477-4F74-9683-3D0C349598DD – System32 Tasks EPSON XP-312 313 315 Series Invitation E25A4D64-F87D-4249-99D5-CFF2F8F8E6DF => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: A2AF1F20-FAF1-44EB-A8EE-F9E61B94538B – System32 Tasks CEF4E478-F540-44FA-8A0A-B04F0C79ED38 => C: Windows system32 pcalua.exe -a C: Users Daniele Téléchargements HijackThis.exe -d C: Users Daniele Downloads\nTâche: A4CA37D7-063A-4E31-BD80-149FDBF10BE1 – System32 Tasks 5D586F1C-A007-495B-A683-84471FF9182E => C: Windows system32 pcalua.exe -a C: Users Daniele Desktop BaldursGate2 Setup.exe -d C: Users Daniele Desktop BaldursGate2\nTâche: A5D1C74C-C335-4965-A36A-010CC81124C7 – System32 Tasks E1FD0496-34FB-4E32-BE56-1638E11B44F0 => C: Program Files (x86) Activision Rome – Total War RomeTW.exe\nTâche: AA9292C3-4A04-427B-83C6-1D8EA215F4AC – System32 Tasks A07D0381-8480-48E5-93B1-1CD22638FA0B => C: Windows system32 pcalua.exe -a E: Launch.exe – d E: \nTâche: AF175631-4055-4EDD-B91E-ADC2D47EC4D7 – System32 Tasks NvNodeLauncher_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files (x86) NVIDIA Corporation NvNode nvnodejsla [976832 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: D7C41E02-A0BF-4278-A071-55694952ACDC – System32 Tasks GoogleUpdateTaskMachineUA => C: Program Files (x86) Google Update GoogleUpdate.exe [144200 2015-08-28] (Google Inc -> Google Inc.)\nTâche: D7F35FFC-47BF-4DC2-97D2-9C611F8EC20B – System32 Tasks Microsoft Windows Live SOXE Extractor Definitions Update Task => 3519154C-227E-47F3-9CC9-12C3F05817F1\nTâche: DD604AC5-C11F-4371-84FE-2AC34CF0D167 – System32 Tasks NvDriverUpdateCheckDaily_ B2FE1952-0186-46C3-BAEC-A80AA35AC5B8 => C: Program Files NVIDIA Corporation NvContainer nvcontain.exe [522688 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nTâche: E002599A-08C1-4C42-883F-191BB591BB0F – System32 Tasks 6E01CB89-B997-4F11-A30C-C7CE8A9C91A1 => C: Windows system32 pcalua.exe -a C: Users Daniele Téléchargements win32_152824.exe -d C: Users Daniele Downloads\nTâche: F75AEAE1-46D4-4AE2-B52C-212BD3348EFE – System32 Tasks Avira_Antivirus_Systray => C: Program Files (x86) Avira Antivirus avgnt.exe [2759304 2020-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)"},{"id":"text-11","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, le fichier de tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)"},{"id":"text-12","heading":"Text","content":"Tâche: C: Windows Tasks EPSON XP-312 313 315 Series Invitation 6AFC5C38-E427-4C18-A613-15CA4120664F .job => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE\nTâche: C: Windows Tasks EPSON XP-312 313 315 Series Invitation E25A4D64-F87D-4249-99D5-CFF2F8F8E6DF .job => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE\nTâche: C: Windows Tasks EPSON XP-312 313 315 Series Update 6AFC5C38-E427-4C18-A613-15CA4120664F .job => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE : / EXE: 6AFC5C38-E427-4C18-A613-15CA4120664F / F: UpdateSYSTEMĊ Recherche les mises à jour du logiciel EPSON et vous avertit lorsque des mises à jour sont disponibles.Si cette tâche est désactivée ou arrêtée, votre logiciel EPSON ne sera pas automatiquement mis à jour date.Thi\nTâche: C: Windows Tasks EPSON XP-312 313 315 Series Update E25A4D64-F87D-4249-99D5-CFF2F8F8E6DF .job => C: Windows system32 spool DRIVERS x64 3 E_ITSLFE.EXE : / EXE: E25A4D64-F87D-4249-99D5-CFF2F8F8E6DF / F: UpdateSYSTEMĊ Recherche les mises à jour du logiciel EPSON et vous avertit lorsque des mises à jour sont disponibles. Si cette tâche est désactivée ou arrêtée, votre logiciel EPSON ne sera pas automatiquement tenu à jour. date.Thi"},{"id":"text-13","heading":"Text","content":"==================== Internet (liste blanche) ===================="},{"id":"text-14","heading":"Text","content":"(Si un élément est inclus dans la liste de correctifs, s'il s'agit d'un élément du registre, il sera supprimé ou restauré par défaut.)"},{"id":"text-15","heading":"Text","content":"Winsock: Catalog5 07 C: Program Files (x86) Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [145280 2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nWinsock: Catalog5 08 C: Program Files (x86) Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [145280 2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nWinsock: Catalog5-x64 07 C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [171392 2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nWinsock: Catalog5-x64 08 C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [171392 2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nTcpip Paramètres: [DhcpNameServer] 194.168.4.100 194.168.8.100\nTcpip .. Interfaces 0EF91A76-19E2-4548-BB51-E60CD7106D02: [DhcpNameServer] 192.168.0.1\nTcpip .. Interfaces 3EFC82CC-B91A-4C1E-B521-C2B94DC80088: [DhcpNameServer] 194.168.4.100 194.168.8.100\nTcpip .. Interfaces 49233639-7CE3-4A19-9C9C-58E97178E1DA: [DhcpNameServer] 194.168.4.100 194.168.8.100\nTcpip .. Interfaces C05787A9-9258-4705-B63A-09E187B553B7: [DhcpNameServer] 192.168.42.129\nTcpip .. Interfaces E302DF92-CA2E-4BE6-BBDF-9847BF0E7A4F: [DhcpNameServer] 192.168.42.129"},{"id":"text-16","heading":"Text","content":"Internet Explorer:\n==================\nHKU S-1-5-21-1536202438-368462837-3654654372-1001 Software Microsoft Internet Explorer Main, page de démarrage = hxxp: //uk.search.yahoo.com/? Type = 714647 & fr = spigot-yhp -c'est à dire\nSearchScopes: HKLM -> DefaultScope 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = AARTDF & pc = MAAR & src = IE-SearchBox\nSearchScopes: HKLM -> 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = AARTDF & pc = MAAR & src = IE-SearchBox\nSearchScopes: HKLM-x32 -> DefaultScope 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = AARTDF & pc = MAAR & src = IE-SearchBox\nSearchScopes: HKLM-x32 -> 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = AARTDF & pc = MAAR & src = IE-SearchBox\nSearchScopes: HKU .DEFAULT -> DefaultScope 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nSearchScopes: HKU .DEFAULT -> 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nSearchScopes: HKU S-1-5-21-1536202438-368462837-3654654372-1001 -> DefaultScope 6F10B82E-F8E1-488B-AFF0-66E6D7950E71 URL = hxxps: //uk.search.yahoo.com/search? Fr = chr-greentree_ie & ei = utf-8 & ilc = 12 & type = 714647 & p = searchTerms\nSearchScopes: HKU S-1-5-21-1536202438-368462837-3654654372-1001 -> 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nSearchScopes: HKU S-1-5-21-1536202438-368462837-3654654372-1001 -> 0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9 URL = hxxp: //www1.delta-search.com/? Q = searchTerms & affID = 119776 & tt = gc_ & babsrc = SP_ss & mntrId = 0A75EC55F940E88A\nSearchScopes: HKU S-1-5-21-1536202438-368462837-3654654372-1001 -> 6F10B82E-F8E1-488B-AFF0-66E6D7950E71 URL = hxxps: //uk.search.yahoo.com/search? Fr = chr-greentree_ie & ei = utf-8 & ilc = 12 & type = 714647 & p = searchTerms\nSearchScopes: HKU S-1-5-21-1536202438-368462837-3654654372-1001 -> 7405AE7F-13A6-4266-A4B2-512B544AACDB URL = hxxp: //uk.search.yahoo.com/search? Fr = chr-greentree_ie & ei = utf-8 & ilc = 12 & type = 714647 & p = searchTerms\nSearchScopes: HKU S-1-5-21-1536202438-368462837-3654654372-1001 -> 99209B94-587D-42C2-A3CA-F72D0A76A2F6 URL = hxxp: //www.bing.com/search? Q = searchTerms & r = 503\nBHO: Aide à la connexion Windows Live ID -> 9030D464-4C02-4ABF-8ECC-5164760863C6 -> C: Program Files Fichiers communs Microsoft Shared Windows Live WindowsLiveLogin.dll [2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nBHO: McAfee WebAdvisor -> B164E929-A1B6-4A06-B104-2CD0E90A88FF -> C: Program Files McAfee WebAdvisor x64 IEPlugin.dll [2020-04-08] (McAfee, LLC -> McAfee, LLC)\nBHO-x32: Java ™ Plug-In SSV Helper -> 761497BB-D6F0-462C-B6EB-D4DAF1D92D43 -> C: Program Files (x86) Java jre1.8.0_171 bin ssv.dll [2018-04-24] (Oracle America, Inc. -> Oracle Corporation)\nBHO-x32: Aide à la connexion Windows Live ID -> 9030D464-4C02-4ABF-8ECC-5164760863C6 -> C: Program Files (x86) Common Files Microsoft Shared Windows Live WindowsLiveLogin.dll [2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nBHO-x32: McAfee WebAdvisor -> B164E929-A1B6-4A06-B104-2CD0E90A88FF -> C: Program Files McAfee WebAdvisor win32 IEPlugin.dll [2020-04-08] (McAfee, LLC -> McAfee, LLC)\nBHO-x32: Java ™ Plug-In 2 SSV Helper -> DBC80044-A445-435b-BC74-9C25C1C588A9 -> C: Program Files (x86) Java jre1.8.0_171 bin jp2ssv.dll [2018-04-24] (Oracle America, Inc. -> Oracle Corporation)\nRestauration de session IE: HKU S-1-5-21-1536202438-368462837-3654654372-1001 -> est activé.\nDPF: HKLM AA570693-00E2-4907-B6F1-60A1199B030C hxxps: //juniper.net/dana-cached/sc/JuniperSetupClient64.cab\nDPF: HKLM-x32 E5F5D008-DD2C-4D32-977D-1A0ADF03058B hxxps: //juniper.net/dana-cached/setup/JuniperSetupSP1.cab\nDPF: HKLM-x32 F27237D7-93C8-44C2-AC6E-D6057B9A918F hxxps: //juniper.net/dana-cached/sc/JuniperSetupClient.cab\nGestionnaire: skype4com – FFC8B962-9B40-4DFF-9458-1830C7DD7F5D – Aucun fichier\nFilter-x32: application / x-ica – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = euc-jp – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = ISO-8859-1 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = MS936 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = MS949 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = MS950 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = UTF-8 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = UTF8 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = euc-jp – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = ISO-8859-1 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = MS936 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = MS949 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = MS950 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = UTF-8 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: application / x-ica; charset = UTF8 – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFilter-x32: ica – CFB6322E-CC85-4d1b-82C7-893888A236BC – C: Program Files (x86) Citrix ICA Client IcaMimeFilter.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)"},{"id":"text-17","heading":"Text","content":"FireFox:\n========\nFF DefaultProfile: xlbk4m4f.default-1485720396432\nFF ProfilePath: C: Users Daniele AppData Roaming Mozilla Firefox Profiles xlbk4m4f.default-1485720396432 [2020-04-19]\nRestauration de session FF: Mozilla Firefox Profiles xlbk4m4f.default-1485720396432 -> est activé.\nExtension FF: (Sécurité du navigateur Avira) – C: Users Daniele AppData Roaming Mozilla Firefox Profiles xlbk4m4f.default-1485720396432 Extensions abs@avira.com.xpi [2020-03-23]\nExtension FF: (Recherche et nouvel onglet par Yahoo) – C: Users Daniele AppData Roaming Mozilla Firefox Profiles xlbk4m4f.default-1485720396432 Extensions jid1-16aeif9OQIRKxA@jetpack.xpi [2019-05-16]\nPlugin FF: @ adobe.com / FlashPlayer -> C: Windows system32 Macromed Flash NPSWF64_32_0_0_303.dll [2019-12-18] (Adobe Inc. ->)\nPlugin FF: @ microsoft.com / GENUINE -> désactivé [No File]\nPlugin FF: @ Microsoft.com / NpCtrl, version = 1.0 -> C: Program Files Microsoft Silverlight 5.1.50918.0 npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @ adobe.com / FlashPlayer -> C: Windows SysWOW64 Macromed Flash NPSWF32_32_0_0_303.dll [2019-12-18] (Adobe Inc. ->)\nFF Plugin-x32: @ Citrix.com / npican -> C: Program Files (x86) Citrix ICA Client npicaN.dll [2013-10-01] (Citrix Systems, Inc. -> Citrix Systems, Inc.)\nFF Plugin-x32: @ java.com / DTPlugin, version = 11.171.2 -> C: Program Files (x86) Java jre1.8.0_171 bin dtplugin npDeployJava1.dll [2018-04-24] (Oracle America, Inc. -> Oracle Corporation)\nFF Plugin-x32: @ java.com / JavaPlugin, version = 11.171.2 -> C: Program Files (x86) Java jre1.8.0_171 bin plugin2 npjp2.dll [2018-04-24] (Oracle America, Inc. -> Oracle Corporation)\nFF Plugin-x32: @ microsoft.com / GENUINE -> désactivé [No File]\nFF Plugin-x32: @ Microsoft.com / NpCtrl, version = 1.0 -> C: Program Files (x86) Microsoft Silverlight 5.1.50918.0 npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @ microsoft.com / SharePoint, version = 14.0 -> C: PROGRA ~ 2 MICROS ~ 4 Office14 NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @ microsoft.com / WLPG, version = 15.4.3502.0922 -> C: Program Files (x86) Windows Live Photo Gallery NPWLPG.dll [2011-05-13] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @ microsoft.com / WLPG, version = 15.4.3538.0513 -> C: Program Files (x86) Windows Live Photo Gallery NPWLPG.dll [2011-05-13] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @ videolan.org / vlc, version = 2.0.6 -> C: Program Files (x86) VideoLAN VLC npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)\nFF Plugin-x32: @ videolan.org / vlc, version = 2.1.2 -> C: Program Files (x86) VideoLAN VLC npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)\nFF Plugin-x32: @ videolan.org / vlc, version = 2.2.1 -> C: Program Files (x86) VideoLAN VLC npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)\nFF Plugin-x32: @ videolan.org / vlc, version = 2.2.6 -> C: Program Files (x86) VideoLAN VLC npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)\nFF Plugin-x32: @ videolan.org / vlc, version = 3.0.8 -> C: Program Files (x86) VideoLAN VLC npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)\nFF Plugin-x32: @ WildTangent.com / GamesAppPresenceDetector, Version = 1.0 -> C: Program Files (x86) WildTangent Games App BrowserIntegration Registered 0 NP_wtapp.dll [2013-08-06] (WildTangent Inc ->)\nFF Plugin-x32: Adobe Reader -> C: Program Files (x86) Adobe Acrobat Reader DC Reader AIR nppdf32.dll [2020-03-05] (Adobe Inc. -> Adobe Systems Inc.)\nPlugin FF HKU S-1-5-21-1536202438-368462837-3654654372-1001: @ asperasoft.com / AsperaConnect -> C: Users Daniele AppData Local Programs Aspera Aspera Connect lib 3.6. 1 npasperaweb_3.6.1.111228.dll [2015-09-11] (Aspera, Inc. -> Aspera, Inc.)\nPlugin FF HKU S-1-5-21-1536202438-368462837-3654654372-1001: @ Unity3d.com / UnityPlayer, version = 1.0 -> C: Users Daniele AppData LocalLow Unity WebPlayer Loader npUnity3D32 .dll [2015-03-27] (Unity Technologies SF -> Unity Technologies ApS)\nPlugin FF HKU S-1-5-21-1536202438-368462837-3654654372-1001: SkypeForBusinessPlugin-15.8 -> C: Users Daniele AppData Local Microsoft SkypeForBusinessPlugin 15.8.20020.400 npGatewayNpapi.dll [2015-06-15] (Microsoft Corporation -> Microsoft Corporation)\nPlugin FF HKU S-1-5-21-1536202438-368462837-3654654372-1001: SkypeForBusinessPlugin64-15.8 -> C: Users Daniele AppData Local Microsoft SkypeForBusinessPlugin 15.8.20020.400 npGatewayNpapi-x64.dll [2015-06-15] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin HKUS-1-5-21-1536202438-368462837-3654654372-1001: SkypePlugin -> C:UsersDanieleAppDataLocalSkypePlugin7.26.0.48npGatewayNpapi.dll [2016-09-22] (Microsoft Corporation -> Skype Technologies S.A.)\nFF Plugin HKUS-1-5-21-1536202438-368462837-3654654372-1001: SkypePlugin64 -> C:UsersDanieleAppDataLocalSkypePlugin7.26.0.48npGatewayNpapi-x64.dll [2016-09-22] (Microsoft Corporation -> Skype Technologies S.A.)"},{"id":"text-18","heading":"Text","content":"Chrome: \n=======\nCHR Profile: C:UsersDanieleAppDataLocalGoogleChromeUser DataDefault [2020-04-19]\nCHR Notifications: Default -> hxxps://uk-mg42.mail.yahoo.com; hxxps://web.skype.com; hxxps://web.whatsapp.com; hxxps://www.hotukdeals.com; hxxps://www.reddit.com\nCHR HomePage: Default -> hxxp://uk.search.yahoo.com/?type=714647&fr=spigot-yhp-ch\nCHR StartupUrls: Default -> "hxxps://www.google.co.uk/"\nCHR Session Restore: Default -> is enabled.\nCHR Extension: (Presentazioni) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsaapocclcgogkmnckokdopfmhonfmgoek [2017-10-16]\nCHR Extension: (Documenti) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsaohghmighlieiainnegkcijnfilokake [2017-10-16]\nCHR Extension: (Google Drive) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsapdfllckaahabafndbhieahigkjlhalf [2015-10-21]\nCHR Extension: (YouTube) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsblpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]\nCHR Extension: (Avira Password Manager) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionscaljgklbbfbcjjanaijlacgncafpegll [2020-04-14]\nCHR Extension: (Google Search) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionscoobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]\nCHR Extension: (Fogli) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsfelcaaldnbdncclmgdcncolpebgiejap [2017-10-16]\nCHR Extension: (Documenti Google offline) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-03-17]\nCHR Extension: (AdBlock: il miglior ad-blocker di sempre) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsgighmmpiobklfepjocnamgkkbiglidom [2020-04-17]\nCHR Extension: (Lightshot (strumento per screenshot)) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsmbniclmhobmnbdlbpiphghaielnnpgdp [2020-01-31]\nCHR Extension: (Pagamenti Chrome Web Store) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionsnmmhkkegccagdldgiimedpiccmgmieda [2019-10-05]\nCHR Extension: (Gmail) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionspjkljhegncpnkpknbcohdijeoejaedia [2019-05-16]\nCHR Extension: (Chrome Media Router) – C:UsersDanieleAppDataLocalGoogleChromeUser DataDefaultExtensionspkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-04-14]\nCHR HKLM…ChromeExtension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]\nCHR HKLM…ChromeExtension: [fheoggkfdfchfphceeifdbepaooicaho]\nCHR HKLM-x32…ChromeExtension: [caljgklbbfbcjjanaijlacgncafpegll]\nCHR HKLM-x32…ChromeExtension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]\nCHR HKLM-x32…ChromeExtension: [efaidnbmnnnibpcajpcglclefindmkaj]\nCHR HKLM-x32…ChromeExtension: [fheoggkfdfchfphceeifdbepaooicaho]\nCHR HKLM-x32…ChromeExtension: [flliilndjeohchalpbbcdekjklbdgfkk]\nCHR HKLM-x32…ChromeExtension: [ibbfklbaljofpaanmpaeadejijfdddco]\nCHR HKLM-x32…ChromeExtension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl]\nCHR HKLM-x32…ChromeExtension: [nbmafkdmkkckhggblphicnnhlgljnoje] – \nCHR HKLM-x32…ChromeExtension: [njpedbdniajflhgfoipnjkednnlkngbj]"},{"id":"text-19","heading":"Text","content":"==================== Services (Whitelisted) ==================="},{"id":"text-20","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)"},{"id":"text-21","heading":"Text","content":"S2 AntiVirMailService; C:Program Files (x86)AviraAntivirusavmailc7.exe [1209856 2020-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 AntiVirSchedulerService; C:Program Files (x86)AviraAntivirussched.exe [485960 2020-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 AntiVirService; C:Program Files (x86)AviraAntivirusavguard.exe [485960 2020-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nS2 AntiVirWebService; C:Program Files (x86)AviraAntivirusavwebg7.exe [573760 2020-03-22] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 Avira.ServiceHost; C:Program Files (x86)AviraLauncherAvira.ServiceHost.exe [634896 2020-04-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 AviraOptimizerHost; C:Program Files (x86)AviraOptimizer HostAvira.OptimizerHost.exe [2989888 2020-01-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 AviraPhantomVPN; C:Program Files (x86)AviraVPNAvira.VpnService.exe [382992 2020-03-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 AviraUpdaterService; C:Program Files (x86)AviraSoftwareUpdaterAvira.SoftwareUpdater.ServiceHost.exe [161216 2020-04-09] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nS4 EpsonScanSvc; C:Windowssystem32EscSvc64.exe [144560 2012-05-17] (SEIKO EPSON Corporation -> Seiko Epson Corporation)\nR2 EPSON_PM_RPCV4_06; C:Program FilesCommon FilesEPSONEPW!3 SSRPE_S60RPB.EXE [152640 2013-04-15] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nS3 fussvc; C:Program Files (x86)Windows Kits8.1App Certification Kitfussvc.exe [143872 2014-10-24] (Microsoft Corporation) [File not signed]\nS4 GamesAppIntegrationService; C:Program Files (x86)WildTangent GamesAppGamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent Inc -> WildTangent)\nR2 McAfee WebAdvisor; C:Program FilesMcAfeeWebAdvisorServiceHost.exe [913640 2020-04-08] (McAfee, LLC -> McAfee, LLC)\nR2 MsMpSvc; C:Program FilesMicrosoft Security ClientMsMpEng.exe [119864 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nS4 MyEpson Portal Service; C:Program Files (x86)EPSONMyEpson PortalmepService.exe [714712 2017-06-28] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)\nR3 NisSrv; C:Program FilesMicrosoft Security ClientNisSrv.exe [361816 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nS4 NTI IScheduleSvc; C:Program Files (x86)NTIAcer Backup ManagerIScheduleSvc.exe [256832 2011-04-24] (NTI Corporation -> NTI Corporation)\nS3 NvContainerLocalSystem; C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe [522688 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nS3 NvContainerNetworkService; C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe [522688 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nS4 Origin Client Service; C:Program Files (x86)OriginOriginClientService.exe [2098528 2017-08-23] (Electronic Arts, Inc. -> Electronic Arts)\nS4 Origin Web Helper Service; C:Program Files (x86)OriginOriginWebHelperService.exe [2977640 2017-08-23] (Electronic Arts, Inc. -> Electronic Arts)\nS4 OverwolfUpdater; C:Program Files (x86)OverwolfOverwolfUpdater.exe [2463064 2020-03-14] (Overwolf Ltd -> Overwolf LTD)\nR2 PnkBstrA; C:WindowsSysWOW64PnkBstrA.exe [75136 2013-05-17] (Even Balance, Inc. -> )\nS3 Te.Service; C:Program Files (x86)Windows Kits8.1TestingRuntimesTAEFWex.Services.exe [122368 2015-02-26] (Microsoft Corporation) [File not signed]\nR2 TeamViewer; C:Program Files (x86)TeamViewerTeamViewer_Service.exe [13216272 2020-03-20] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nS3 WinDefend; C:Program FilesWindows Defendermpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)\nS3 wlidsvc; C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSVC.EXE [2292096 2011-03-29] (Microsoft Corporation -> Microsoft Corp.)\nR2 NVDisplay.ContainerLocalSystem; "C:Program FilesNVIDIA CorporationDisplay.NvContainerNVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:ProgramDataNVIDIANVDisplay.ContainerLocalSystem.log" -l 3 -d "C:Program FilesNVIDIA CorporationDisplay.NvContainerpluginsLocalSystem" -r -p 30000\nR2 NvTelemetryContainer; "C:Program Files (x86)NVIDIA CorporationNvTelemetryNvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:ProgramDataNVIDIANvTelemetryContainer.log" -l 3 -d "C:Program Files (x86)NVIDIA CorporationNvTelemetryplugins" -r"},{"id":"text-22","heading":"Text","content":"===================== Drivers (Whitelisted) ==================="},{"id":"text-23","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)"},{"id":"text-24","heading":"Text","content":"R3 athr; C:WindowsSystem32DRIVERSathrx.sys [2755584 2011-07-19] (Microsoft Windows Hardware Compatibility Publisher -> Atheros Communications, Inc.)\nR0 avdevprot; C:WindowsSystem32DRIVERSavdevprot.sys [68152 2019-06-07] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 avgntflt; C:WindowsSystem32DRIVERSavgntflt.sys [223744 2020-03-27] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR1 avipbb; C:WindowsSystem32DRIVERSavipbb.sys [177376 2020-04-06] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR1 avkmgr; C:WindowsSystem32DRIVERSavkmgr.sys [36072 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR2 avnetflt; C:WindowsSystem32DRIVERSavnetflt.sys [78600 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR0 avusbflt; C:WindowsSystem32Driversavusbflt.sys [35376 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nR1 dtsoftbus01; C:WindowsSystem32DRIVERSdtsoftbus01.sys [283064 2013-12-07] (Disc Soft Ltd -> Disc Soft Ltd)\nR2 LdBoxDrv; C:Program Filesdnplayerext2LdBoxDrv.sys [319376 2019-12-18] (Shanghai Changzhi Network Technology Co., Ltd. -> Oracle Corporation)\nR2 LdVBoxDrv; C:Program FilesldplayerboxLdVBoxDrv.sys [319376 2020-03-25] (Shanghai Changzhi Network Technology Co., Ltd. -> Oracle Corporation)\nR0 MpFilter; C:WindowsSystem32DRIVERSMpFilter.sys [295000 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)\nS3 MYFAULT; C:Windowssystem32driversmyfault.sys [25392 2018-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Sysinternals)\nR3 NisDrv; C:WindowsSystem32DRIVERSNisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)\nR3 nusb3hub; C:Windowssystem32driversnusb3hub.sys [82432 2011-02-10] (Microsoft Windows Hardware Compatibility Publisher -> Renesas Electronics Corporation)\nR3 nusb3xhc; C:Windowssystem32driversnusb3xhc.sys [181760 2011-02-10] (Microsoft Windows Hardware Compatibility Publisher -> Renesas Electronics Corporation)\nS3 NvStreamKms; C:Program FilesNVIDIA CorporationNvStreamSrvNvStreamKms.sys [31168 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 nvvad_WaveExtensible; C:WindowsSystem32driversnvvad64v.sys [59240 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 nvvhci; C:WindowsSystem32DRIVERSnvvhci.sys [58816 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nR3 phantomtap; C:WindowsSystem32DRIVERSphantomtap.sys [35664 2020-03-18] (Avira Operations GmbH & Co. KG -> The OpenVPN Project)\nS3 rtux64w7; C:WindowsSystem32DRIVERSrtux64w7.sys [328448 2016-08-19] (Realtek Semiconductor Corp -> Realtek )\nS4 secdrv; C:WindowsSysWow64Driverssecdrv.sys [11973 2017-06-06] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [File not signed]\nR0 sptd; C:WindowsSystem32Driverssptd.sys [381440 2013-12-07] (Disc Soft Ltd -> Duplex Secure Ltd.)"},{"id":"text-25","heading":"Text","content":"==================== NetSvcs (Whitelisted) ==================="},{"id":"text-26","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)"},{"id":"text-27","heading":"Text","content":"==================== One month (created) ==================="},{"id":"text-28","heading":"Text","content":"(If an entry is included in the fixlist, the file/folder will be moved.)"},{"id":"text-29","heading":"Text","content":"2020-04-19 14:36 – 2020-04-19 14:36 – 000000000 ____D C:UsersDanieleDownloadsFRST-OlderVersion\n2020-04-18 14:29 – 2020-04-18 14:29 – 000062792 _____ C:ProgramDataagent.uninstall.1587216527.bdinstall.v2.bin\n2020-04-17 00:37 – 2020-04-17 00:46 – 000072692 _____ C:UsersDanieleDownloadsAddition.txt\n2020-04-17 00:28 – 2020-04-19 14:41 – 000045553 _____ C:UsersDanieleDownloadsFRST.txt\n2020-04-17 00:22 – 2020-04-19 14:40 – 000000000 ____D C:FRST\n2020-04-17 00:21 – 2020-04-19 14:36 – 002281984 _____ (Farbar) C:UsersDanieleDownloadsFRST64.exe\n2020-04-16 23:30 – 2020-04-16 23:30 – 000013738 _____ C:UsersDanieleDesktophijackthis2\n2020-04-16 22:55 – 2020-04-18 14:29 – 000000000 ____D C:Program FilesBitdefender Agent\n2020-04-16 22:55 – 2020-04-16 22:55 – 000102692 _____ C:ProgramDataagent.1587074131.bdinstall.v2.bin\n2020-04-16 22:55 – 2020-04-16 22:55 – 000000000 ____D C:ProgramDataBitdefender Agent\n2020-04-16 22:53 – 2020-04-16 22:53 – 010527368 _____ C:UsersDanieleDownloadsbitdefender_online.exe\n2020-04-16 22:40 – 2020-04-16 22:40 – 000000000 ____D C:ProgramDataUbisoft\n2020-04-16 22:11 – 2020-04-16 22:11 – 000388608 _____ (Trend Micro Inc.) C:UsersDanieleDownloadsHijackThis.exe\n2020-04-15 17:17 – 2020-04-15 17:17 – 000000219 _____ C:UsersDanieleDesktopCounter-Strike Global Offensive.url\n2020-04-10 00:18 – 2020-04-10 00:18 – 004342776 _____ (Avira Operations GmbH & Co. KG) C:UsersDanieleDownloadsavira_en_sptl1_1609235037-1586472637__phpws-spotlight-release (1).exe\n2020-04-10 00:16 – 2020-04-10 00:16 – 000003292 _____ C:Windowssystem32TasksAvira_Antivirus_Systray\n2020-04-10 00:15 – 2020-04-06 21:13 – 000177376 _____ (Avira Operations GmbH & Co. KG) C:Windowssystem32Driversavipbb.sys\n2020-04-10 00:15 – 2020-03-27 12:48 – 000223744 _____ (Avira Operations GmbH & Co. KG) C:Windowssystem32Driversavgntflt.sys\n2020-04-10 00:15 – 2019-06-07 15:09 – 000068152 _____ (Avira Operations GmbH & Co. KG) C:Windowssystem32Driversavdevprot.sys\n2020-04-10 00:15 – 2019-03-20 19:50 – 000078600 _____ (Avira Operations GmbH & Co. KG) C:Windowssystem32Driversavnetflt.sys\n2020-04-10 00:15 – 2019-03-20 19:50 – 000036072 _____ (Avira Operations GmbH & Co. KG) C:Windowssystem32Driversavkmgr.sys\n2020-04-10 00:15 – 2019-03-20 19:50 – 000035376 _____ (Avira Operations GmbH & Co. KG) C:Windowssystem32Driversavusbflt.sys\n2020-04-09 23:54 – 2020-04-09 23:55 – 000000000 ____D C:UsersPublicSpeedup Sessions\n2020-04-09 23:54 – 2020-04-09 23:54 – 000003668 _____ C:Windowssystem32TasksAviraSystemSpeedupUpdate\n2020-04-09 23:53 – 2020-04-15 08:51 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsAvira\n2020-04-09 23:53 – 2020-04-09 23:53 – 000001192 _____ C:UsersPublicDesktopAvira.lnk\n2020-04-09 23:53 – 2020-04-09 23:53 – 000001192 _____ C:ProgramDataDesktopAvira.lnk\n2020-04-09 23:50 – 2020-04-09 23:50 – 004342776 _____ (Avira Operations GmbH & Co. KG) C:UsersDanieleDownloadsavira_en_sptl1_1609235037-1586472637__phpws-spotlight-release.exe\n2020-04-09 23:08 – 2020-04-09 23:08 – 003318440 _____ (Dominik Reichl ) C:UsersDanieleDownloadsKeePass-2.44-Setup.exe\n2020-04-03 01:24 – 2020-04-03 01:24 – 000000000 ____D C:UsersDanieleAppDataLocalLowObsidian Entertainment\n2020-04-02 22:10 – 2020-04-02 22:10 – 000000222 _____ C:UsersDanieleDesktopPillars of Eternity.url\n2020-03-30 19:29 – 2020-03-30 19:29 – 000076137 _____ C:UsersDanieleDownloadseContract.pdf\n2020-03-26 17:50 – 2020-03-26 18:04 – 000000000 ____D C:UsersDanieleDesktopRee Accident Claim\n2020-03-25 23:46 – 2020-04-04 11:49 – 000000000 ____D C:UsersDaniele.Ld2VirtualBox\n2020-03-25 23:45 – 2020-03-25 23:45 – 000000671 _____ C:UsersDanieleDesktopLDMultiPlayer4.lnk\n2020-03-25 23:45 – 2020-03-25 23:45 – 000000671 _____ C:UsersDanieleAppDataRoamingMicrosoftWindowsStart MenuLDMultiPlayer4.lnk\n2020-03-25 23:45 – 2020-03-25 23:45 – 000000656 _____ C:UsersDanieleDesktopLDPlayer4.lnk\n2020-03-25 23:45 – 2020-03-25 23:45 – 000000656 _____ C:UsersDanieleAppDataRoamingMicrosoftWindowsStart MenuLDPlayer4.lnk\n2020-03-25 23:45 – 2020-03-25 23:45 – 000000000 ____D C:UsersDanieleAppDataRoamingMicrosoftWindowsStart MenuProgramsLDPlayer4\n2020-03-25 23:44 – 2020-03-25 23:45 – 000000000 ____D C:Program Filesldplayerbox\n2020-03-25 23:44 – 2020-03-25 23:44 – 000000000 ____D C:UsersDanieleDocumentsXuanZhi\n2020-03-25 23:43 – 2020-03-25 23:43 – 000000000 ____D C:Program FilesMcAfee\n2020-03-25 23:42 – 2020-03-25 23:42 – 000284010 _____ C:UsersDanieleAppDataRoamingm47_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt\n2020-03-25 23:42 – 2020-03-25 23:42 – 000000000 ____D C:UsersDanieleDownloads2cep\n2020-03-25 23:41 – 2020-03-25 23:46 – 000000000 ____D C:UsersDanieleAppDataRoamingXuanZhi\n2020-03-25 23:41 – 2020-03-25 23:41 – 002931392 _____ (XUANZHI INTERNATIONAL CO., LIMITED) C:UsersDanieleDownloadsLDPlayer_ens_3020_ld.exe\n2020-03-25 23:41 – 2020-03-25 23:41 – 002931392 _____ (XUANZHI INTERNATIONAL CO., LIMITED) C:UsersDanieleDownloadsLDPlayer_ens_3020_ld (1).exe"},{"id":"text-30","heading":"Text","content":"==================== One month (modified) =================="},{"id":"text-31","heading":"Text","content":"(If an entry is included in the fixlist, the file/folder will be moved.)"},{"id":"text-32","heading":"Text","content":"2020-04-19 14:47 – 2014-02-28 19:48 – 000000000 ____D C:UsersDanieleAppDataLocalBattle.net\n2020-04-19 14:28 – 2017-01-29 20:15 – 000000000 ____D C:UsersDanieleAppDataLocalLowMozilla\n2020-04-19 14:27 – 2019-01-30 14:34 – 000000000 ____D C:UsersDanieleAppDataRoamingDiscord\n2020-04-19 13:50 – 2018-10-22 17:50 – 000000911 _____ C:WindowsTasksEPSON XP-312 313 315 Series Update E25A4D64-F87D-4249-99D5-CFF2F8F8E6DF.job\n2020-04-19 13:50 – 2018-10-22 17:50 – 000000911 _____ C:WindowsTasksEPSON XP-312 313 315 Series Update 6AFC5C38-E427-4C18-A613-15CA4120664F.job\n2020-04-19 13:50 – 2018-10-22 17:50 – 000000725 _____ C:WindowsTasksEPSON XP-312 313 315 Series Invitation E25A4D64-F87D-4249-99D5-CFF2F8F8E6DF.job\n2020-04-19 13:50 – 2018-10-22 17:50 – 000000725 _____ C:WindowsTasksEPSON XP-312 313 315 Series Invitation 6AFC5C38-E427-4C18-A613-15CA4120664F.job\n2020-04-19 12:25 – 2018-07-01 20:59 – 000000000 ____D C:ProgramDataNVIDIA\n2020-04-19 03:56 – 2009-07-14 05:45 – 000016976 ____H C:Windowssystem327B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0\n2020-04-19 03:56 – 2009-07-14 05:45 – 000016976 ____H C:Windowssystem327B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0\n2020-04-19 03:19 – 2018-03-26 22:41 – 000000000 ____D C:UsersDanieleAppDataRoamingHearthstoneDeckTracker\n2020-04-18 20:55 – 2018-03-26 22:41 – 000002512 _____ C:UsersDanieleDesktopHearthstone Deck Tracker.lnk\n2020-04-18 20:55 – 2018-03-26 22:41 – 000000000 ____D C:UsersDanieleAppDataLocalHearthstoneDeckTracker\n2020-04-18 20:54 – 2018-03-26 22:41 – 000000000 ____D C:UsersDanieleAppDataLocalSquirrelTemp\n2020-04-18 15:26 – 2014-02-28 19:47 – 000000000 ____D C:Program Files (x86)Battle.net\n2020-04-18 14:22 – 2014-06-18 09:34 – 000000000 ____D C:Program Files (x86)TeamViewer\n2020-04-18 14:21 – 2009-07-14 06:08 – 000000006 ____H C:WindowsTasksSA.DAT\n2020-04-17 19:37 – 2017-05-31 22:40 – 000000000 ____D C:UsersRee\n2020-04-17 13:30 – 2019-12-20 00:37 – 000000000 ____D C:WindowsSysWOW64NV\n2020-04-17 13:30 – 2019-12-20 00:37 – 000000000 ____D C:Windowssystem32NV\n2020-04-17 13:29 – 2017-09-12 00:30 – 000000000 ____D C:Program Files (x86)Mozilla Firefox\n2020-04-17 13:29 – 2013-05-04 17:46 – 000000000 ____D C:Program Files (x86)Mozilla Maintenance Service\n2020-04-17 13:22 – 2014-01-15 19:16 – 000000000 ____D C:Program Files (x86)Steam\n2020-04-17 13:10 – 2017-12-17 16:51 – 000000000 ____D C:UsersDanieleAppDataLocalUbisoft Game Launcher\n2020-04-16 22:37 – 2012-06-21 20:37 – 000000000 ___HD C:Program Files (x86)InstallShield Installation Information\n2020-04-16 22:37 – 2009-07-14 06:32 – 000000000 ___RD C:ProgramDataMicrosoftWindowsStart MenuProgramsGames\n2020-04-16 22:36 – 2013-05-04 20:18 – 000000000 ____D C:UsersDanieleAppDataRoaminguTorrent\n2020-04-15 20:36 – 2013-05-04 18:11 – 000002226 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsGoogle Chrome.lnk\n2020-04-10 00:17 – 2009-07-14 04:20 – 000000000 ____D C:Windowsinf\n2020-04-10 00:15 – 2013-05-06 00:19 – 000000000 ____D C:ProgramDataAvira\n2020-04-10 00:15 – 2013-05-06 00:19 – 000000000 ____D C:Program Files (x86)Avira\n2020-04-10 00:13 – 2013-04-13 02:40 – 000743878 _____ C:Windowssystem32perfh010.dat\n2020-04-10 00:13 – 2013-04-13 02:40 – 000148496 _____ C:Windowssystem32perfc010.dat\n2020-04-10 00:13 – 2009-07-14 06:13 – 001662796 _____ C:Windowssystem32PerfStringBackup.INI\n2020-04-10 00:04 – 2013-04-16 13:43 – 000000000 ____D C:UsersDaniele\n2020-04-09 23:52 – 2014-08-20 13:02 – 000000000 ____D C:ProgramDataPackage Cache\n2020-04-09 23:28 – 2018-01-28 01:56 – 000000000 ____D C:UsersDanieleAppDataRoamingKeePass\n2020-04-09 23:10 – 2018-01-28 01:00 – 000001121 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsKeePass 2.lnk\n2020-04-09 23:10 – 2018-01-28 01:00 – 000001109 _____ C:UsersDanieleDesktopKeePass 2.lnk\n2020-04-09 23:10 – 2018-01-28 01:00 – 000000000 ____D C:Program Files (x86)KeePass Password Safe 2\n2020-04-02 06:28 – 2018-03-29 14:27 – 000000000 ____D C:Program Files (x86)Overwolf\n2020-04-02 00:49 – 2010-11-21 04:27 – 000744808 ____N (Microsoft Corporation) C:Windowssystem32MpSigStub.exe\n2020-03-26 18:43 – 2019-12-18 20:22 – 000000000 ____D C:UsersDanieleAppDataRoamingChangZhi2\n2020-03-26 17:50 – 2013-05-12 22:25 – 000000000 ____D C:UsersDanieleDesktopCompleanno Ree 2013\n2020-03-26 17:49 – 2020-02-04 14:31 – 000000000 ____D C:UsersDanieleDesktopCittadinanza\n2020-03-25 23:42 – 2013-05-06 19:11 – 000000000 ____D C:ProgramDataMcAfee\n2020-03-25 23:34 – 2019-12-18 20:31 – 000000000 ____D C:UsersDaniele.LdVirtualBox\n2020-03-25 13:00 – 2019-02-14 20:04 – 000000000 ____D C:UsersDanieleAppDataLocalBluestacks\n2020-03-24 02:08 – 2013-05-15 17:30 – 000000000 ____D C:UsersDanieleAppDataRoamingSoftGrid Client\n2020-03-21 02:29 – 2013-05-04 18:11 – 000003586 _____ C:Windowssystem32TasksGoogleUpdateTaskMachineUA\n2020-03-21 02:29 – 2013-05-04 18:11 – 000003458 _____ C:Windowssystem32TasksGoogleUpdateTaskMachineCore\n2020-03-20 08:46 – 2015-01-01 09:45 – 000004476 _____ C:Windowssystem32TasksAdobe Acrobat Update Task\n2020-03-20 08:45 – 2015-12-16 22:13 – 000002441 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsAcrobat Reader DC.lnk"},{"id":"text-33","heading":"Text","content":"==================== Files in the root of some directories ========"},{"id":"text-34","heading":"Text","content":"2013-12-31 12:57 – 2013-12-31 12:58 – 000000093 _____ () C:UsersDanieleAppDataRoamingARCompanion.log\n2019-12-18 20:31 – 2019-12-18 20:31 – 000000068 _____ () C:UsersDanieleAppDataRoamingchangzhi_leidian.data\n2019-12-21 18:17 – 2019-12-21 18:17 – 000000068 _____ () C:UsersDanieleAppDataRoamingchangzhi_mplayer.data\n2020-03-25 23:42 – 2020-03-25 23:42 – 000284010 _____ () C:UsersDanieleAppDataRoamingm47_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt\n2017-07-11 22:13 – 2017-07-11 22:13 – 000014139 _____ () C:UsersDanieleAppDataLocalHWVendorDetection.log\n2013-05-05 00:55 – 2019-12-27 13:15 – 000007615 _____ () C:UsersDanieleAppDataLocalresmon.resmoncfg"},{"id":"text-35","heading":"Text","content":"==================== SigCheck ============================"},{"id":"text-36","heading":"Text","content":"(There is no automatic fix for files that do not pass verification.)"},{"id":"text-37","heading":"Text","content":"LastRegBack: 2020-04-17 19:29\n==================== End of FRST.txt ========================\nAdditional scan result of Farbar Recovery Scan Tool (x64) Version: 19-04-2020\nRan by Daniele (19-04-2020 14:50:00)\nRunning from C:UsersDanieleDownloads\nWindows 7 Home Premium Service Pack 1 (X64) (2013-04-16 12:43:25)\nBoot Mode: Normal\n=========================================================="},{"id":"text-38","heading":"Text","content":"==================== Accounts: ============================="},{"id":"text-39","heading":"Text","content":"Administrator (S-1-5-21-1536202438-368462837-3654654372-500 – Administrator – Disabled)\nDaniele (S-1-5-21-1536202438-368462837-3654654372-1001 – Administrator – Enabled) => C:UsersDaniele\nGuest (S-1-5-21-1536202438-368462837-3654654372-501 – Limited – Disabled)\nHomeGroupUser$ (S-1-5-21-1536202438-368462837-3654654372-1003 – Limited – Enabled)\nRee (S-1-5-21-1536202438-368462837-3654654372-1005 – Limited – Enabled) => C:UsersRee"},{"id":"text-40","heading":"Text","content":"==================== Security Center ========================"},{"id":"text-41","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed.)"},{"id":"text-42","heading":"Text","content":"AV: Avira Antivirus (Enabled – Up to date) 8EAC8D5C-B3AA-95AA-3DF1-2845CDD09CBE\nAV: Microsoft Security Essentials (Enabled – Up to date) 71A27EC9-3DA6-45FC-60A7-004F623C6189\nAS: Microsoft Security Essentials (Enabled – Up to date) CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34\nAS: Avira Antivirus (Enabled – Up to date) 35CD6CB8-9590-9A24-0741-1337B657D603\nAS: Windows Defender (Disabled – Out of date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46"},{"id":"text-43","heading":"Text","content":"==================== Installed Programs ======================"},{"id":"text-44","heading":"Text","content":"(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)"},{"id":"text-45","heading":"Text","content":"Acer Backup Manager (HKLM-x32…InstallShield_0B61BBD5-DA3C-409A-8730-0C3DC3B0F270) (Version: 3.0.0.99 – NTI Corporation)\nAcer Crystal Eye Webcam (HKLM-x32…1FB4998-33C4-4431-85ED-079E3EEFE75D) (Version: 1.0.1904 – CyberLink Corp.) Hidden\nAcer Crystal Eye Webcam (HKLM-x32…InstallShield_01FB4998-33C4-4431-85ED-079E3EEFE75D) (Version: 1.0.1904 – CyberLink Corp.)\nAcer ePower Management (HKLM-x32…3DB0448D-AD82-4923-B305-D001E521A964) (Version: 6.00.3008 – Acer Incorporated)\nAcer eRecovery Management (HKLM-x32…7F811A54-5A09-4579-90E1-C93498E230D9) (Version: 5.00.3504 – Acer Incorporated)\nAcer Games (HKLM-x32…WildTangent acer Master Uninstall) (Version: 1.0.2.5 – WildTangent)\nAcer Registration (HKLM-x32…Acer Registration) (Version: 1.04.3504 – Acer Incorporated)\nAcer ScreenSaver (HKLM-x32…Acer Screensaver) (Version: 1.1.0913.2011 – Acer Incorporated)\nAcer Updater (HKLM-x32…EE171732-BEB4-4576-887D-CB62727F01CA) (Version: 1.02.3502 – Acer Incorporated)\nAdobe Acrobat Reader DC – Italiano (HKLM-x32…AC76BA86-7AD7-1040-7B44-AC0F074E4100) (Version: 20.006.20042 – Adobe Systems Incorporated)\nAdobe AIR (HKLM-x32…Adobe AIR) (Version: 2.7.1.19610 – Adobe Systems Incorporated)\nAdobe Flash Player 29 ActiveX (HKLM-x32…Adobe Flash Player ActiveX) (Version: 29.0.0.140 – Adobe Systems Incorporated)\nAdobe Flash Player 32 NPAPI (HKLM-x32…Adobe Flash Player NPAPI) (Version: 32.0.0.303 – Adobe)\nAgatha Christie – Death on the Nile (HKLM-x32…WTA-5e746bf8-8dee-4fe9-9f1a-49235ad98c76) (Version: 2.2.0.98 – WildTangent) Hidden\nAggiornamenti NVIDIA 31.1.10.0 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.Update) (Version: 31.1.10.0 – NVIDIA Corporation) Hidden\nApplication Verifier x64 External Package (HKLM…77F3D72C-465F-BD51-890E-CC3914B1365F) (Version: 8.100.26936 – Microsoft) Hidden\nAspera Connect 3.6.1.111228 (HKLM-x32…EC793CAC-7C41-4817-BA98-7E481A79F9CF) (Version: 3.6.1.111228 – © Copyright IBM Corp. 2014) Hidden\nAspera Connect 3.6.1.111228 (HKUS-1-5-21-1536202438-368462837-3654654372-1001…Aspera Connect 3.6.1.111228) (Version: 3.6.1.111228 – © Copyright IBM Corp. 2014)\nAssassin's Creed IV Black Flag (HKLM-x32…Uplay Install 273) (Version: – Ubisoft)\nAvira (HKLM-x32…CAB70370-888E-4D62-B5D5-DA7982585C46) (Version: 1.2.145.25926 – Avira Operations GmbH & Co. KG) Hidden\nAvira (HKLM-x32…e636e084-c7ab-4246-8ad2-aa1bb1cbedfd) (Version: 1.2.145.25926 – Avira Operations GmbH & Co. KG)\nAvira Antivirus (HKLM-x32…Avira Antivirus) (Version: 15.0.2004.1828 – Avira Operations GmbH & Co. KG)\nAvira Phantom VPN (HKLM-x32…Avira Phantom VPN) (Version: 2.32.2.34115 – Avira Operations GmbH & Co. KG)\nAvira Software Updater (HKLM-x32…30947035-9248-4304-96CE-CB6B1D38CFD5) (Version: 2.0.6.30594 – Avira Operations GmbH & Co. KG)\nAvira System Speedup (HKLM-x32…Avira System Speedup_is1) (Version: 6.4.1.10871 – Avira Operations GmbH & Co. KG)\nBackup Manager V3 (HKLM-x32…B61BBD5-DA3C-409A-8730-0C3DC3B0F270) (Version: 3.0.0.99 – NTI Corporation) Hidden\nBattle.net (HKLM-x32…Battle.net) (Version: – Blizzard Entertainment)\nBejeweled 2 Deluxe (HKLM-x32…WTA-878366c0-7e0d-49fc-9060-e75a6dabe155) (Version: 2.2.0.95 – WildTangent) Hidden\nBlue Jeans (HKLM-x32…6D19EE68-6672-48DB-A45A-5CCFA8021D92) (Version: 1.28.10 – Blue Jeans)\nBroadcom Card Reader Driver Installer (HKLM…4710662C-8204-4334-A977-B1AC9E547819) (Version: 14.8.2.2 – Broadcom Corporation)\nBroadcom NetLink Controller (HKLM…C91DCB72-F5BB-410D-A91A-314F5D1B4284) (Version: 14.8.4.1 – Broadcom Corporation)\nCaesar 3 (HKLM-x32…Caesar 3) (Version: – )\nChuzzle Deluxe (HKLM-x32…WTA-7f54354a-b7a2-4639-9a5c-f4b75efe2e90) (Version: 2.2.0.95 – WildTangent) Hidden\nclear.fi (HKLM-x32…14C4C3B6-F1F4-401F-8C86-03E8E19AAC8C) (Version: 1.0.1517_36458 – CyberLink Corp.) Hidden\nclear.fi (HKLM-x32…2637C347-9DAD-11D6-9EA2-00055D0CA761) (Version: 1.0.2024.00 – CyberLink Corp.) Hidden\nclear.fi (HKLM-x32…B906C11A-D193-4143-9FA7-E2EE8A5A8F21) (Version: 9.0.8026 – CyberLink Corp.) Hidden\nclear.fi (HKLM-x32…InstallShield_2637C347-9DAD-11D6-9EA2-00055D0CA761) (Version: 1.0.2024.00 – CyberLink Corp.)\nclear.fi Client (HKLM-x32…43AAE145-83CF-4C96-9A5E-756CEFCE879F) (Version: 1.00.3500 – Acer Incorporated)\nCrazy Chicken Kart 2 (HKLM-x32…WTA-111fa445-16e9-4867-bd6d-79c26bc446f5) (Version: 2.2.0.97 – WildTangent) Hidden\nD3DX10 (HKLM-x32…E09C4DB7-630C-4F06-A631-8EA7239923AF) (Version: 15.4.2368.0902 – Microsoft) Hidden\nDAEMON Tools Lite (HKLM-x32…DAEMON Tools Lite) (Version: 4.48.1.0347 – Disc Soft Ltd)\nDiablo III (HKLM-x32…Diablo III) (Version: – Blizzard Entertainment)\nDiscord (HKUS-1-5-21-1536202438-368462837-3654654372-1001…Discord) (Version: 0.0.306 – Discord Inc.)\nDisinstalla EPSON SX100 Series Printer (HKLM…EPSON SX100 Series) (Version: – SEIKO EPSON Corporation)\nDisplayDriverAnalyzer (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_DisplayDriverAnalyzer) (Version: 391.35 – NVIDIA Corporation) Hidden\nDolby Advanced Audio v2 (HKLM-x32…B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613) (Version: 7.2.7000.7 – Dolby Laboratories Inc)\nDragon Age II (HKLM-x32…F2E23139-3404-4E3C-9855-7724415D62A5) (Version: 1.04 – Electronic Arts, Inc.)\nDropbox (HKUS-1-5-21-1536202438-368462837-3654654372-1001…Dropbox) (Version: 3.0.5 – Dropbox, Inc.)\neBay Worldwide (HKLM-x32…D3E5A972-9A15-427D-AE78-8181A5FD943C) (Version: 2.2.0409 – OEM)\nEpson Connect Printer Setup (HKLM-x32…D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C) (Version: 1.4.0 – Seiko Epson Corporation)\nEpson Event Manager (HKLM-x32…9F205E94-9E42-4486-A92A-DF3F6CB85444) (Version: 3.10.0061 – Seiko Epson Corporation)\nEPSON Remote Print Uninstall (HKLM…EPSON Remote Print) (Version: – SEIKO EPSON Corporation)\nEPSON Scan (HKLM-x32…EPSON Scanner) (Version: – Seiko Epson Corporation)\nEpson Software Updater (HKLM-x32…FD036A57-F81D-4865-AAF0-811558EA76AE) (Version: 4.5.1 – Seiko Epson Corporation)\nEPSON XP-312 313 315 Series Printer Uninstall (HKLM…EPSON XP-312 313 315 Series) (Version: – SEIKO EPSON Corporation)\nEpsonNet Print (HKLM-x32…3E31400D-274E-4647-916C-2CACC3741799) (Version: 2.6.0 – SEIKO EPSON CORPORATION)\nEvernote v. 4.5.1 (HKLM-x32…28921580-E4BB-11E0-9FD7-1CC1DEF07CBE) (Version: 4.5.1.5451 – Evernote Corp.)\nFATE (HKLM-x32…WTA-d562914f-464e-442a-9b6b-eef07926c4b7) (Version: 2.2.0.97 – WildTangent) Hidden\nFinal Drive: Nitro (HKLM-x32…WTA-ba528cbd-abfc-43b4-b622-039073085d6c) (Version: 2.2.0.95 – WildTangent) Hidden\nFooz Kids (HKLM-x32…4C774C35-E0AF-72E1-136A-2BF666702268) (Version: 3.0.8 – FUHU, Inc.) Hidden\nFooz Kids (HKLM-x32…FoozKids) (Version: 3.0.8 – FUHU, Inc.)\nFooz Kids Platform (HKLM-x32…8D68CE08-9A14-4B7B-9857-3C646A2F34C7) (Version: 2.1 – FUHU, Inc.)\nFotogalerija Windows Live (HKLM-x32…E59969EA-3B5B-4B24-8B94-43842A7FBFE9) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nGaleria de Fotografias do Windows Live (HKLM-x32…EC0B576-90F9-43C3-8FAD-A4902DF4B8F4) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nGalería fotográfica de Windows Live (HKLM-x32…E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nGaleria fotogràfica del Windows Live (HKLM-x32…4736B0ED-F6A1-48EC-A1B7-C053027648F1) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nGaleria fotografii usługi Windows Live (HKLM-x32…CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nGalerie de photos Windows Live (HKLM-x32…488F0347-C4A7-4374-91A7-30818BEDA710) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nGalerie foto Windows Live (HKLM-x32…CB66242D-12B1-4494-82D2-6F53A7E024A3) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nGoogle Chrome (HKLM-x32…Google Chrome) (Version: 81.0.4044.113 – Google LLC)\nGoogle Update Helper (HKLM-x32…60EC980A-BDA2-4CB6-A427-B07A5498B4CA) (Version: 1.3.35.451 – Google LLC) Hidden\nHearthArena Companion (HKUS-1-5-21-1536202438-368462837-3654654372-1001…Overwolf_eldaohcjmecjpkpdhhoiolhhaeapcldppbdgbnbc) (Version: 1.5.0.2 – Overwolf app)\nHearthstone (HKLM-x32…Hearthstone) (Version: – Blizzard Entertainment)\nHearthstone Deck Tracker (HKUS-1-5-21-1536202438-368462837-3654654372-1001…HearthstoneDeckTracker) (Version: 1.10.7 – HearthSim)\nHP USB Disk Storage Format Tool (HKLM-x32…E0DF90C-D0BA-4C89-9262-AD78D1A3DE51) (Version: – )\nIdentity Card (HKLM-x32…Identity Card) (Version: 1.00.3501 – Acer Incorporated)\nInsaniquarium Deluxe (HKLM-x32…WTA-1aadf450-ec73-41b5-b741-966d0737010a) (Version: 2.2.0.97 – WildTangent) Hidden\nIntel® Control Center (HKLM-x32…F8A9085D-4C7A-41a9-8A77-C8998A96C421) (Version: 1.2.1.1007 – Intel Corporation)\nIntel® Management Engine Components (HKLM-x32…65153EA5-8B6E-43B6-857B-C6E4FC25798A) (Version: 7.0.0.1144 – Intel Corporation)\nIntel® Processor Graphics (HKLM-x32…F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA) (Version: 8.15.10.2342 – Intel Corporation)\nIntel® Processor Identification Utility (HKLM-x32…A92A4DB0-CD37-42D1-BE1D-603D53C24328) (Version: 1.0.0.0 – Intel Corporation)\nIntel® Rapid Storage Technology (HKLM-x32…3E29EE6C-963A-4aae-86C1-DC237C4A49FC) (Version: 10.5.0.1026 – Intel Corporation)\nIntel® SDK for OpenCL – CPU Only Runtime Package (HKLM-x32…FCB3772C-B7D0-4933-B1A9-3707EBACC573) (Version: 2.0.0.37149 – Intel Corporation)\nJava 8 Update 171 (HKLM-x32…26A24AE4-039D-4CA4-87B4-2F32180171F0) (Version: 8.0.1710.11 – Oracle Corporation)\nJewel Match 3 (HKLM-x32…WTA-63325e84-34c2-4ccd-b3ee-87abc401d44a) (Version: 2.2.0.97 – WildTangent) Hidden\nJewel Quest Solitaire (HKLM-x32…WTA-4d51be1b-2978-4973-ad15-8b42189f04f8) (Version: 2.2.0.95 – WildTangent) Hidden\nJohn Deere Drive Green (HKLM-x32…WTA-91a805f7-4cee-4088-a326-afc28032536e) (Version: 2.2.0.95 – WildTangent) Hidden\nJuniper Installer Service (HKLM-x32…93A64A36-C060-47B4-96DE-D405CC22F4C4) (Version: 7.4.28485 – Juniper Networks) Hidden\nJuniper Installer Service 7.4 (HKLM-x32…Juniper Installer Service 7.4) (Version: 7.4.28485 – Juniper Networks, Inc.)\nJuniper Networks Network Connect 7.1.8 (HKLM-x32…Juniper Network Connect 7.1.8) (Version: 7.1.8.20737 – Juniper Networks)\nJuniper Networks Network Connect 7.3.0 (HKLM-x32…Juniper Network Connect 7.3.0) (Version: 7.3.0.24657 – Juniper Networks)\nJuniper Networks Network Connect 7.4.0 (HKLM-x32…Juniper Network Connect 7.4.0) (Version: 7.4.0.30731 – Juniper Networks)\nJuniper Networks, Inc. Setup Client (HKUS-1-5-21-1536202438-368462837-3654654372-1001…Juniper_Setup_Client) (Version: 7.4.10.45165 – Juniper Networks, Inc.)\nJuniper Networks, Inc. Setup Client 64-bit Activex Control (HKLM…Juniper_Setup_Client Activex Control) (Version: 2.1.1.1 – Juniper Networks, Inc.)\nJuniper Networks, Inc. Setup Client Activex Control (HKLM-x32…Juniper_Setup_Client Activex Control) (Version: 2.1.1.1 – Juniper Networks, Inc.)\nJunk Mail filter update (HKLM-x32…1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nKeePass Password Safe 2.44 (HKLM-x32…KeePassPasswordSafe2_is1) (Version: 2.44 – Dominik Reichl)\nKits Configuration Installer (HKLM-x32…B74E65FD-CC47-41C5-4B89-791A3F61942D) (Version: 8.100.25984 – Microsoft) Hidden\nKodi (HKUS-1-5-21-1536202438-368462837-3654654372-1001…Kodi) (Version: – XBMC-Foundation)\nLaunch Manager (HKLM-x32…LManager) (Version: 5.1.7 – Acer Inc.)\nLDPlayer (HKLM-x32…LDPlayer4) (Version: 4.0 – XUANZHI INTERNATIONAL CO., LIMITED)\nLINE (HKUS-1-5-21-1536202438-368462837-3654654372-1001…LINE) (Version: 5.21.3.2086 – LINE Corporation)\nManuali EPSON (HKLM-x32…84CECC1B-21EF-41B1-9A91-3E724E5D99D3) (Version: 1.53.0.0 – Seiko Epson Corporation)\nMcAfee WebAdvisor (HKLM-x32…35ED3F83-4BDC-4c44-8EC6-6A8301C7413A) (Version: 4.1.1.90 – McAfee, LLC.)\nMesh Runtime (HKLM-x32…8C6D6116-B724-4810-8F2D-D047E6B7D68E) (Version: 15.4.5722.2 – Microsoft Corporation) Hidden\nMicrosoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32…D1D37853-0004-3E36-A7AA-74F4EEA35F64) (Version: 4.5.50930 – Microsoft Corporation)\nMicrosoft .NET Framework 4.5.1 SDK (HKLM-x32…19A5926D-66E1-46FC-854D-163AA10A52D3) (Version: 4.5.51641 – Microsoft Corporation)\nMicrosoft .NET Framework 4.8 (HKLM…92FB6C44-E685-45AD-9B20-CADF4CABA132 – 1033) (Version: 4.8.03761 – Microsoft Corporation)\nMicrosoft .NET Framework 4.8 (Italiano) (HKLM…92FB6C44-E685-45AD-9B20-CADF4CABA132 – 1040) (Version: 4.8.03761 – Microsoft Corporation)\nMicrosoft Office 2010 (HKLM-x32…95140000-0070-0000-0000-0000000FF1CE) (Version: 14.0.4763.1000 – Microsoft Corporation)\nMicrosoft Office a portata di clic 2010 (HKLM-x32…Office14.Click2Run) (Version: 14.0.4763.1000 – Microsoft Corporation)\nMicrosoft Office Starter 2010 – Italiano (HKLM-x32…90140011-0066-0410-0000-0000000FF1CE) (Version: 14.0.5128.5002 – Microsoft Corporation)\nMicrosoft Security Essentials (HKLM…Microsoft Security Client) (Version: 4.10.209.0 – Microsoft Corporation)\nMicrosoft Silverlight (HKLM…89F4137D-6C26-4A84-BDB8-2E5A4BB71E00) (Version: 5.1.50918.0 – Microsoft Corporation)\nMicrosoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32…F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8) (Version: 3.1.0000 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…710f4c1c-cc18-4c49-8cbf-51240c89a1a2) (Version: 8.0.61001 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x64 9.0.30729.17 (HKLM…8220EEFE-38CD-377E-8595-13398D740ACE) (Version: 9.0.30729 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x64 9.0.30729.6161 (HKLM…5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.17 (HKLM-x32…9A25302D-30C0-39D9-BD6F-21E6EC160475) (Version: 9.0.30729 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.4148 (HKLM-x32…1F1C2DFC-2D24-3E06-BCB8-725134ADF989) (Version: 9.0.30729.4148 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.6161 (HKLM-x32…9BE518E6-ECC6-35A9-88E4-87755C07200F) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C++ 2010 x64 Redistributable – 10.0.40219 (HKLM…1D8E6291-B0D5-35EC-8441-6616F567A0F7) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2010 x86 Redistributable – 10.0.40219 (HKLM-x32…F0C3E5D1-1ADE-321E-8167-68EF0DE699A5) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x64) – 11.0.61030 (HKLM-x32…ca67548a-5ebe-413a-b50c-4b9ceb6d66c6) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x86) – 11.0.61030 (HKLM-x32…33d1fd90-4274-48a1-9bc1-97e33d9c2d6f) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x64) – 12.0.30501 (HKLM-x32…50d4fc8-5d48-4b8f-8972-47c82c46020f) (Version: 12.0.30501.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x86) – 12.0.30501 (HKLM-x32…f65db027-aff3-4070-886a-0d87064aabb1) (Version: 12.0.30501.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2015 Redistributable (x64) – 14.0.24215 (HKLM-x32…d992c12e-cab2-426f-bde3-fb8c53950b0d) (Version: 14.0.24215.1 – Microsoft Corporation)\nMicrosoft Visual C++ 2015 Redistributable (x86) – 14.0.24215 (HKLM-x32…e2803110-78b3-4664-a479-3611a381656a) (Version: 14.0.24215.1 – Microsoft Corporation)\nMonitoraggio della tecnologia Intel® Turbo Boost 2.0 (HKLM…B77EFA0B-9BD3-4122-9F9A-15A963B5EA24) (Version: 2.1.23.0 – Intel)\nMozilla Firefox 75.0 (x64 it) (HKLM…Mozilla Firefox 75.0 (x64 it)) (Version: 75.0 – Mozilla)\nMozilla Maintenance Service (HKLM-x32…MozillaMaintenanceService) (Version: 75.0.0.7398 – Mozilla)\nMSI Development Tools (HKLM-x32…CF3A1CA6-5E5E-B4BD-6CF1-363056816CA2) (Version: 8.100.26898 – Microsoft Corporation) Hidden\nMyEpson Portal (HKLM-x32…3361D415-BA35-4143-B301-661991BA6219) (Version: 1.1.2.2 – SEIKO EPSON CORPORATION) Hidden\nMyEpson Portal (HKLM-x32…MyEpson Portal) (Version: – SEIKO EPSON Corporation)\nMystery of Mortlake Mansion (HKLM-x32…WTA-fa5c5656-0bbe-4718-93c5-e01c9a8c326f) (Version: 2.2.0.98 – WildTangent) Hidden\nnewsXpresso (HKLM-x32…613C0AC5-3A67-4B94-8B13-9176AD83F5BF) (Version: 1.0.0.40 – esobi Inc.) Hidden\nnewsXpresso (HKLM-x32…InstallShield_613C0AC5-3A67-4B94-8B13-9176AD83F5BF) (Version: 1.0.0.40 – esobi Inc.)\nNotepad++ (HKLM-x32…Notepad++) (Version: 6.6.8 – Notepad++ Team)\nNTI Media Maker 9 (HKLM-x32…D3D5C4E8-040F-4C6F-8105-41D43CF94F44) (Version: 9.0.2.9002 – NTI Corporation) Hidden\nNTI Media Maker 9 (HKLM-x32…InstallShield_D3D5C4E8-040F-4C6F-8105-41D43CF94F44) (Version: 9.0.2.9002 – NTI Corporation)\nNVIDIA Driver grafico 391.35 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.Driver) (Version: 391.35 – NVIDIA Corporation)\nNVIDIA GeForce Experience 3.13.1.30 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.GFExperience) (Version: 3.13.1.30 – NVIDIA Corporation)\nNVIDIA PhysX System Software 9.17.0524 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.PhysX) (Version: 9.17.0524 – NVIDIA Corporation)\nOnline Plug-in (HKLM-x32…9A0FE2C0-7A7E-444E-8BD4-087178A91865) (Version: 14.0.0.91 – Citrix Systems, Inc.) Hidden\nOrigin (HKLM-x32…Origin) (Version: 10.5.2.49155 – Electronic Arts, Inc.)\nOverwolf (HKLM-x32…Overwolf) (Version: 0.143.0.24 – Overwolf Ltd.)\nPannello di controllo NVIDIA 391.35 (HKLM…B2FE1952-0186-46C3-BAEC-A80AA35AC5B8_Display.ControlPanel) (Version: 391.35 – NVIDIA Corporation) Hidden\nPenguins! (HKLM-x32…WTA-f82d33cf-1bf0-4c54-85ca-769791349557) (Version: 2.2.0.95 – WildTangent) Hidden\nPidgin (HKLM-x32…Pidgin) (Version: 2.10.7 – )\nPlants vs. Zombies – Game of the Year (HKLM-x32…WTA-fc291ad5-7412-47d4-8641-d23ea23ef2e0) (Version: 2.2.0.95 – WildTangent) Hidden\nPoczta usługi Windows Live (HKLM-x32…64376910-1860-4CEF-8B34-AA5D205FC5F1) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nPodstawowe programy Windows Live (HKLM-x32…7A9D47BA-6D50-4087-866F-0800D8B89383) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nPolar Bowler (HKLM-x32…WTA-4f14c51e-af03-4658-92f9-0f759f61b306) (Version: 2.2.0.97 – WildTangent) Hidden\nPošta Windows Live (HKLM-x32…7BA19818-F717-4DFB-BC11-FAF17B2B8AEE) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nPunkBuster Services (HKLM-x32…PunkBusterSvc) (Version: 0.991 – Even Balance, Inc.)\nQuickTime (HKLM-x32…B67BAFBA-4C9F-48FA-9496-933E3B255044) (Version: 7.74.80.86 – Apple Inc.)\nRaccolta foto di Windows Live (HKLM-x32…ED16B700-D91F-44B0-867C-7EB5253CA38D) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nRealtek High Definition Audio Driver (HKLM-x32…F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC) (Version: 6.0.1.6438 – Realtek Semiconductor Corp.)\nRenesas Electronics USB 3.0 Host Controller Driver (HKLM-x32…5442DAB8-7177-49E1-8B22-09A049EA5996) (Version: 2.0.34.0 – Renesas Electronics Corporation) Hidden\nRenesas Electronics USB 3.0 Host Controller Driver (HKLM-x32…InstallShield_5442DAB8-7177-49E1-8B22-09A049EA5996) (Version: 2.0.34.0 – Renesas Electronics Corporation)\nSDK Debuggers (HKLM-x32…9274C832-3D8A-A294-FDE8-8B9272357098) (Version: 8.100.26936 – Microsoft Corporation) Hidden\nShockwave (HKLM-x32…Shockwave) (Version: – )\nSierra Utilities (HKLM-x32…Sierra Utilities) (Version: – )\nSkype Click to Call (HKLM-x32…873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B) (Version: 8.5.0.9167 – Microsoft Corporation)\nSkype for Business Web App Plug-in (HKLM-x32…37C8167B-B653-4955-A6E8-EBB8DE937DDD) (Version: 15.8.20020.400 – Microsoft Corporation)\nSkype versione 8.44 (HKLM-x32…Skype_is1) (Version: 8.44 – Skype Technologies S.A.)\nSkype Web Plugin (HKLM-x32…DF6DC2FB-6783-4340-8B98-401CB656AD3A) (Version: 7.26.0.48 – Skype Technologies S.A.)\nSlingo Deluxe (HKLM-x32…WTA-0317c6a7-06b3-4b13-8a10-9b264c639ed4) (Version: 2.2.0.95 – WildTangent) Hidden\nSteam (HKLM-x32…Steam) (Version: – Valve Corporation)\nSupporto applicazioni Apple (HKLM-x32…5D09C772-ECB3-442B-9CC6-B4341C78FDC2) (Version: 2.3.4 – Apple Inc.)\nSynaptics Pointing Device Driver (HKLM…SynTPDeinstKey) (Version: 15.1.6.0 – Synaptics Incorporated)\nTeamSpeak 3 Client (HKLM…TeamSpeak 3 Client) (Version: 3.0.15 – TeamSpeak Systems GmbH)\nTeamViewer (HKLM-x32…TeamViewer) (Version: 15.4.4445 – TeamViewer)\nTorchlight (HKLM-x32…WTA-86f22e04-aba5-46a2-baee-2d2b15dcd07d) (Version: 2.2.0.97 – WildTangent) Hidden\nTreeSize Free V4.2 (HKLM-x32…TreeSize Free_is1) (Version: 4.2 – JAM Software)\nUnity Web Player (HKUS-1-5-21-1536202438-368462837-3654654372-1001…UnityWebPlayer) (Version: 5.0.1f1 – Unity Technologies ApS)\nUpdate Installer for WildTangent Games App (HKLM-x32…2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2.WildTangent Games App) (Version: – WildTangent) Hidden\nUplay (HKLM-x32…Uplay) (Version: 46.0 – Ubisoft)\nVirtual Villagers 4 – The Tree of Life (HKLM-x32…WTA-2d8486f0-4bd6-4e7d-9791-27029e7c6472) (Version: 2.2.0.97 – WildTangent) Hidden\nVLC media player (HKLM-x32…VLC media player) (Version: 3.0.8 – VideoLAN)\nVulkan Run Time Libraries 1.0.65.1 (HKLM…VulkanRT1.0.65.1) (Version: 1.0.65.1 – LunarG, Inc.) Hidden\nWedding Dash (HKLM-x32…WTA-e9518137-4e7b-4626-9f43-7daf4e91fd72) (Version: 2.2.0.95 – WildTangent) Hidden\nWelcome Center (HKLM-x32…Acer Welcome Center) (Version: 1.02.3504 – Acer Incorporated)\nWhoCrashed 5.54 (HKLM…WhoCrashed_is1) (Version: – Resplendence Software Projects Sp.)\nWildTangent Games App (HKLM-x32…70B446D1-E03B-4ab0-9B3C-0832142C9AA8.WildTangent Games App-acer) (Version: 4.0.10.25 – WildTangent) Hidden\nWindows Live Essentials (HKLM-x32…WinLiveSuite) (Version: 15.4.3538.0513 – Microsoft Corporation)\nWindows Software Development Kit for Windows 8.1 (HKLM-x32…ed3a6e6d-9661-4357-abe4-fcc03dc57a07) (Version: 8.100.26936 – Microsoft Corporation)\nWinRAR 4.20 (32-bit) (HKLM-x32…WinRAR archiver) (Version: 4.20.0 – win.rar GmbH)\nWPT Redistributables (HKLM-x32…64F3FB9A-9250-B2D6-00B4-50BE0358AEE8) (Version: 8.100.26936 – Microsoft) Hidden\nWPTx64 (HKLM-x32…BFF81CB5-E8C7-4184-FBB4-74ADFBC6CCCB) (Version: 8.100.26936 – Microsoft) Hidden\nZuma Deluxe (HKLM-x32…WTA-744d629c-c549-4c3b-b820-4ba591229d4e) (Version: 2.2.0.95 – WildTangent) Hidden\nΣυλλογή φωτογραφιών του Windows Live (HKLM-x32…C00C2A91-6CB3-483F-80B3-2958E29468F1) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nОсновные компоненты Windows Live (HKLM-x32…E83DC314-C926-4214-AD58-147691D6FE9F) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nПочта Windows Live (HKLM-x32…B63F0CE3-CCD0-490A-9A9C-E1A3B3A17137) (Version: 15.4.3502.0922 – Корпорация Майкрософт) Hidden\nФотоальбом Windows Live (HKLM-x32…77F69CA1-E53D-4D77-8BA3-FA07606CC851) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nФотогалерия на Windows Live (HKLM-x32…4444F27C-B1A8-464E-9486-4C37BAB39A09) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nגלריית התמונות של Windows Live (HKLM-x32…CE929F09-3853-4180-BD90-30764BFF7136) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nبريد Windows Live (HKLM-x32…A4C4B29-5A9D-4910-A13C-B920D5758744) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nمعرض صور Windows Live (HKLM-x32…FBCA06D2-4642-4F33-B20A-A7AB3F0D2E69) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden"},{"id":"text-46","heading":"Text","content":"==================== Custom CLSID (Whitelisted): =============="},{"id":"text-47","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)"},{"id":"text-48","heading":"Text","content":"CustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSID05A3A96-BAC4-4B0A-94EA-C0CE100EA736localserver32 -> C:UsersDanieleAppDataRoamingDropboxbinDropbox.exe (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSID4A9E854-6F47-4F37-8A10-F896717F0329InprocServer32 -> C:UsersDanieleAppDataLocalProgramsAsperaAspera Connectlib3.6.1npasperaweb64_3.6.1.111228.dll (Aspera, Inc. -> Aspera, Inc. )\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSID7ECF6F97-B4F3-4168-9835-F59C06D7875FInprocServer32 -> C:UsersDanieleAppDataLocalMicrosoftSkypeForBusinessPlugin15.8.20020.400GatewayActiveX-x64.dll (Microsoft Corporation -> Microsoft Corporation)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDAD17B774-7F87-4141-BB9C-2AEE3841DC4EInprocServer32 -> C:UsersDanieleAppDataLocalProgramsAsperaAspera Connectlib3.6.1npasperaweb64_3.6.1.111228.dll (Aspera, Inc. -> Aspera, Inc. )\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDBB384F15-7676-403E-B797-1F9D935525A3InprocServer32 -> C:UsersDanieleAppDataLocalSkypePlugin7.26.0.48GatewayActiveX-x64.dll (Microsoft Corporation -> Skype Technologies S.A.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314ED9-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314EDA-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314EDB-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314EDC-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314EDD-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314EDE-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314EDF-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nCustomCLSID: HKUS-1-5-21-1536202438-368462837-3654654372-1001_ClassesCLSIDFB314EE0-A251-47B7-93E1-CDD82E34AF8BInprocServer32 -> C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt1 »] -> FB314ED9-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt2 »] -> FB314EDA-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt3 »] -> FB314EDD-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt4 »] -> FB314EDE-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt5 »] -> FB314EDB-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt6 »] -> FB314EDF-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt7 »] -> FB314EDC-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nShellIconOverlayIdentifiers: [« DropboxExt8 »] -> FB314EE0-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nContextMenuHandlers1: [ANotepad++64] -> B298D29A-A6ED-11DE-BA8C-A68E55D89593 => C:Program Files (x86)Notepad++NppShell_06.dll [2014-05-12] () [File not signed]\nContextMenuHandlers1: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => C:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers1: [Shell Extension for Malware scanning] -> 45AC2688-0253-4ED8-97DE-B5370FA7D48A => C:Program Files (x86)AviraAntivirusshlext64.dll [2020-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nContextMenuHandlers1: [SystemSpeedupFilesMenu] -> 14cb2bd0-2375-3d10-9b5d-5e18865c8959 => C:Program Files (x86)AviraSystem SpeedupAvira.SystemSpeedup.UI.ShellExtension.DLL [2020-01-30] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nContextMenuHandlers1: [WinRAR] -> B41DB860-64E4-11D2-9906-E49FADC173CA => C:Program Files (x86)WinRARrarext64.dll [2012-06-09] (Alexander Roshal) [File not signed]\nContextMenuHandlers1-x32: [WinRAR32] -> B41DB860-8EE4-11D2-9906-E49FADC173CA => C:Program Files (x86)WinRARrarext.dll [2012-06-09] (Alexander Roshal) [File not signed]\nContextMenuHandlers2: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => C:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers4: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => C:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers4: [SystemSpeedupFoldersMenu] -> 700866bb-c8e9-3e71-b359-abb28baed0e8 => C:Program Files (x86)AviraSystem SpeedupAvira.SystemSpeedup.UI.ShellExtension.DLL [2020-01-30] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nContextMenuHandlers5: [igfxcui] -> 3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4 => C:Windowssystem32igfxpph.dll [2011-03-26] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)\nContextMenuHandlers5: [NvCplDesktopContext] -> 3D1975AF-48C6-4f8e-A182-BE0E08FA86A9 => C:Windowssystem32nvshext.dll [2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)\nContextMenuHandlers5: [SynGlwPad] -> 681C10CE-5E5D-463A-A270-771AA48E4C71 => C:WindowsSystem32SynGlwPadShlExt.dll [2010-07-29] (Synaptics Incorporated -> Synaptics Incorporated)\nContextMenuHandlers5: [SystemSpeedupDesktopMenu] -> 0cab5786-30e8-3185-9b3b-ccefbf1b8afe => C:Program Files (x86)AviraSystem SpeedupAvira.SystemSpeedup.UI.ShellExtension.DLL [2020-01-30] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nContextMenuHandlers6: [Shell Extension for Malware scanning] -> 45AC2688-0253-4ED8-97DE-B5370FA7D48A => C:Program Files (x86)AviraAntivirusshlext64.dll [2020-04-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nContextMenuHandlers6: [WinRAR] -> B41DB860-64E4-11D2-9906-E49FADC173CA => C:Program Files (x86)WinRARrarext64.dll [2012-06-09] (Alexander Roshal) [File not signed]\nContextMenuHandlers6-x32: [WinRAR32] -> B41DB860-8EE4-11D2-9906-E49FADC173CA => C:Program Files (x86)WinRARrarext.dll [2012-06-09] (Alexander Roshal) [File not signed]\nContextMenuHandlers1_S-1-5-21-1536202438-368462837-3654654372-1001: [DropboxExt] -> FB314ED9-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nContextMenuHandlers4_S-1-5-21-1536202438-368462837-3654654372-1001: [DropboxExt] -> FB314ED9-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)\nContextMenuHandlers5_S-1-5-21-1536202438-368462837-3654654372-1001: [DropboxExt] -> FB314ED9-A251-47B7-93E1-CDD82E34AF8B => C:UsersDanieleAppDataRoamingDropboxbinDropboxExt64.24.dll [2015-01-09] (Dropbox, Inc -> Dropbox, Inc.)"},{"id":"text-49","heading":"Text","content":"==================== Codecs (Whitelisted) ===================="},{"id":"text-50","heading":"Text","content":"(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)"},{"id":"text-51","heading":"Text","content":"HKLM…Drivers32: [msacm.l3acm] => C:WindowsSysWOW64l3codecp.acm [220672 2009-07-14] (Microsoft Windows -> Fraunhofer Institut Integrierte Schaltungen IIS)"},{"id":"text-52","heading":"Text","content":"==================== Shortcuts & WMI ========================"},{"id":"text-53","heading":"Text","content":"(The entries could be listed to be restored or removed.)"},{"id":"text-54","heading":"Text","content":"WMI:subscription__FilterToConsumerBinding->CommandLineEventConsumer.Name="BVTConsumer"",Filter="__EventFilter.Name="BVTFilter"::\nWMI:subscription__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA « Win32_Processor » AND TargetInstance.LoadPercentage > 99]\nWMI:subscriptionCommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]"},{"id":"text-55","heading":"Text","content":"==================== Loaded Modules (Whitelisted) ============="},{"id":"text-56","heading":"Text","content":"2020-04-18 15:24 – 2020-04-18 15:24 – 096130048 _____ () [File not signed] C:Program Files (x86)Battle.netBattle.net.11943libcef.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000117760 _____ () [File not signed] C:Program Files (x86)Battle.netBattle.net.11943libEGL.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 004342784 _____ () [File not signed] C:Program Files (x86)Battle.netBattle.net.11943libGLESv2.dll\n2019-03-28 00:48 – 2019-03-28 00:48 – 000115200 _____ (Microsoft Corporation) [File not signed] C:WindowsMicrosoft.NetassemblyGAC_32System.EnterpriseServicesv4.0_4.0.0.0__b03f5f7f11d50a3aSystem.EnterpriseServices.Wrapper.dll\n2018-05-03 22:00 – 2018-05-03 22:00 – 001101824 _____ (Microsoft Corporation) [File not signed] C:WindowsWinSxSx86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8fMFC80.DLL\n2018-05-03 22:00 – 2018-05-03 22:00 – 001093120 _____ (Microsoft Corporation) [File not signed] C:WindowsWinSxSx86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8fMFC80U.DLL\n2018-05-03 22:00 – 2018-05-03 22:00 – 000061440 _____ (Microsoft Corporation) [File not signed] C:WindowsWinSxSx86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_03ce2c72205943d3MFC80ITA.DLL\n2015-05-01 19:18 – 2012-11-12 15:15 – 000558592 _____ (SEIKO EPSON CORPORATION) [File not signed] C:WindowsSystem32enppmon.dll\n2015-05-01 19:18 – 2012-10-22 17:19 – 000219648 _____ (SEIKO EPSON CORPORATION) [File not signed] C:WindowsSystem32enpres.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000760832 _____ (The Chromium Authors) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943chrome_elf.dll\n2020-04-18 15:23 – 2020-04-18 15:23 – 000047104 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943audioqtaudio_windows.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000026112 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943imageformatsqgif.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000027136 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943imageformatsqico.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000243712 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943imageformatsqjpeg.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000223744 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943imageformatsqmng.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000020992 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943imageformatsqsvg.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000332288 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943imageformatsqtiff.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 001140224 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943platformsqwindows.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000041984 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtGraphicalEffectsprivateqtgraphicaleffectsprivate.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000014848 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtGraphicalEffectsqtgraphicaleffectsplugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000014848 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtQmlModels.2modelsplugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000014848 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtQuick.2qtquick2plugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000084480 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtQuickControls.2qtquickcontrols2plugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000267776 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtQuickControlsqtquickcontrolsplugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000071680 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtQuickLayoutsqquicklayoutsplugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000211456 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtQuickTemplates.2qtquicktemplates2plugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000014848 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943qmlQtQuickWindow.2windowplugin.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 004943360 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Core.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 005022208 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Gui.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000626176 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Multimedia.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000877056 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Network.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 002908672 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Qml.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 003078656 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Quick.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000096256 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5QuickControls2.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000681472 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5QuickTemplates2.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000259072 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Svg.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 004718080 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Widgets.dll\n2020-04-18 15:24 – 2020-04-18 15:24 – 000439296 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5WinExtras.dll\n2020-04-18 15:25 – 2020-04-18 15:25 – 000159232 _____ (The Qt Company Ltd.) [File not signed] C:Program Files (x86)Battle.netBattle.net.11943Qt5Xml.dll"},{"id":"text-57","heading":"Text","content":"==================== Alternate Data Streams (Whitelisted) ========"},{"id":"text-58","heading":"Text","content":"==================== Safe Mode (Whitelisted) =================="},{"id":"text-59","heading":"Text","content":"==================== Association (Whitelisted) ================="},{"id":"text-60","heading":"Text","content":"==================== Internet Explorer trusted/restricted =========="},{"id":"text-61","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed from the registry.)"},{"id":"text-62","heading":"Text","content":"IE trusted site: HKUS-1-5-21-1536202438-368462837-3654654372-1001…geforce.co.uk -> hxxps://www.geforce.co.uk"},{"id":"text-63","heading":"Text","content":"==================== Hosts content: ========================="},{"id":"text-64","heading":"Text","content":"(If needed Hosts: directive could be included in the fixlist to reset Hosts.)"},{"id":"text-65","heading":"Text","content":"2009-07-14 03:34 – 2009-06-10 22:00 – 000000824 _____ C:Windowssystem32driversetchosts"},{"id":"text-66","heading":"Text","content":"==================== Other Areas ==========================="},{"id":"text-67","heading":"Text","content":"(Currently there is no automatic fix for this section.)"},{"id":"text-68","heading":"Text","content":"HKLMSystemCurrentControlSetControlSession ManagerEnvironment\\Path -> c:program files (x86)common filesoraclejavajavapath;c:programdataoraclejavajavapath;c:program filescommon filesmicrosoft sharedwindows live;c:program files (x86)common filesmicrosoft sharedwindows live;c:windowssystem32;c:windows;c:windowssystem32wbem;c:windowssystem32windowspowershellv1.0;c:program files (x86)windows liveshared;c:program files (x86)quicktimeqtsystem;c:program files (x86)windows kits8.1windows performance toolkit;c:program files (x86)intelopencl sdk2.0binx86;c:program files (x86)intelopencl sdk2.0binx64;c:program files (x86)intelopencl sdk2.0binx86;c:program files (x86)intelopencl sdk2.0binx64;C:Program Files (x86)NVIDIA CorporationPhysXCommon\nHKUS-1-5-21-1536202438-368462837-3654654372-1001Control PanelDesktop\\Wallpaper -> C:UsersDanieleAppDataRoamingMicrosoftWindowsThemesTranscodedWallpaper.jpg\nDNS Servers: 194.168.4.100 – 194.168.8.100\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)\nWindows Firewall is enabled."},{"id":"text-69","heading":"Text","content":"==================== MSCONFIG/TASK MANAGER disabled items =="},{"id":"text-70","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed.)"},{"id":"text-71","heading":"Text","content":"MSCONFIGServices: AdobeARMservice => 2\nMSCONFIGServices: AdobeFlashPlayerUpdateSvc => 3\nMSCONFIGServices: cphs => 3\nMSCONFIGServices: DsiWMIService => 2\nMSCONFIGServices: dsNcService => 2\nMSCONFIGServices: ePowerSvc => 2\nMSCONFIGServices: EpsonScanSvc => 2\nMSCONFIGServices: EPSON_PM_RPCV4_06 => 2\nMSCONFIGServices: FLEXnet Licensing Service => 3\nMSCONFIGServices: GamesAppIntegrationService => 3\nMSCONFIGServices: GamesAppService => 3\nMSCONFIGServices: GREGService => 2\nMSCONFIGServices: gupdate => 2\nMSCONFIGServices: gupdatem => 3\nMSCONFIGServices: IAStorDataMgrSvc => 2\nMSCONFIGServices: ICCS => 3\nMSCONFIGServices: JuniperAccessService => 2\nMSCONFIGServices: Live Updater Service => 2\nMSCONFIGServices: LMS => 2\nMSCONFIGServices: MozillaMaintenance => 3\nMSCONFIGServices: MyEpson Portal Service => 2\nMSCONFIGServices: NTI IScheduleSvc => 2\nMSCONFIGServices: NvContainerLocalSystem => 3\nMSCONFIGServices: NvContainerNetworkService => 3\nMSCONFIGServices: NVDisplay.ContainerLocalSystem => 2\nMSCONFIGServices: NvTelemetryContainer => 2\nMSCONFIGServices: Origin Client Service => 3\nMSCONFIGServices: Origin Web Helper Service => 2\nMSCONFIGServices: OverwolfUpdater => 3\nMSCONFIGServices: SkypeUpdate => 2\nMSCONFIGServices: Steam Client Service => 3\nMSCONFIGServices: TeamViewer => 2\nMSCONFIGServices: TurboBoost => 3\nMSCONFIGServices: UNS => 2\nMSCONFIGstartupreg: APSDaemon => "C:Program Files (x86)Common FilesAppleApple Application SupportAPSDaemon.exe"\nMSCONFIGstartupreg: ArcadeMovieService => "C:Program Files (x86)Acerclear.fiMovieclear.fiMovieService.exe"\nMSCONFIGstartupreg: BackupManagerTray => "C:Program Files (x86)NTIAcer Backup ManagerBackupManagerTray.exe" -h -k\nMSCONFIGstartupreg: ConnectionCenter => "C:Program Files (x86)CitrixICA Clientconcentr.exe" /startup\nMSCONFIGstartupreg: DAEMON Tools Lite => "C:Program Files (x86)DAEMON Tools LiteDTLite.exe" -autorun\nMSCONFIGstartupreg: Dolby Advanced Audio v2 => "C:Dolby PCEE4pcee4.exe" -autostart\nMSCONFIGstartupreg: EEventManager => "C:Program Files (x86)Epson SoftwareEvent ManagerEEventManager.exe"\nMSCONFIGstartupreg: HotKeysCmds => "C:Windowssystem32hkcmd.exe"\nMSCONFIGstartupreg: IgfxTray => "C:Windowssystem32igfxtray.exe"\nMSCONFIGstartupreg: KeePass 2 PreLoad => "C:Program Files (x86)KeePass Password Safe 2KeePass.exe" –preload\nMSCONFIGstartupreg: LManager => C:Program Files (x86)Launch ManagerLManager.exe\nMSCONFIGstartupreg: mobilegeni daemon => C:Program Files (x86)MobogenieDaemonProcess.exe\nMSCONFIGstartupreg: NUSB3MON => "C:Program Files (x86)Renesas ElectronicsUSB 3.0 Host Controller DriverApplicationnusb3mon.exe"\nMSCONFIGstartupreg: OOTag => C:Program Files (x86)AcerOOBEOfferootag.exe\nMSCONFIGstartupreg: Persistence => "C:Windowssystem32igfxpers.exe"\nMSCONFIGstartupreg: Power Management => C:Program FilesAcerAcer ePower ManagementePowerTray.exe\nMSCONFIGstartupreg: QuickTime Task => "C:Program Files (x86)QuickTimeQTTask.exe" -atboottime\nMSCONFIGstartupreg: Redirector => "C:Program Files (x86)CitrixICA Clientredirector.exe" /startup\nMSCONFIGstartupreg: RtHDVBg_Dolby => C:Program FilesRealtekAudioHDARAVBg64.exe /FORPCEE4 \nMSCONFIGstartupreg: RtHDVCpl => C:Program FilesRealtekAudioHDARAVCpl64.exe -s\nMSCONFIGstartupreg: Search Protection => "C:UsersDanieleAppDataRoamingSearch ProtectionSP.EXE" /autostart\nMSCONFIGstartupreg: Skype => "C:Program Files (x86)SkypePhoneSkype.exe" /minimized /regrun\nMSCONFIGstartupreg: SunJavaUpdateSched => C:Program Files (x86)Common FilesJavaJava Updatejusched.exe\nMSCONFIGstartupreg: SynTPEnh => %ProgramFiles%SynapticsSynTPSynTPEnh.exe"},{"id":"text-72","heading":"Text","content":"==================== FirewallRules (Whitelisted) ================"},{"id":"text-73","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)"},{"id":"text-74","heading":"Text","content":"FirewallRules: [BB9D900C-0431-418E-8C0A-C231DDCD4601] => (Allow) C:Program Files (x86)Windows LiveContactswlcomm.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [32049F24-47B1-4DD3-8444-C00D6AD61B16] => (Allow) LPort=2869\nFirewallRules: [F75F9F29-02E8-4A68-8A28-54916E467F3D] => (Allow) LPort=1900\nFirewallRules: [C356995C-A188-4CAC-A71A-7AA95365C06B] => (Allow) C:Program Files (x86)Windows LiveMessengermsnmsgr.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [F27A6AD3-BABD-4E5E-9C93-AE69FEE085E1] => (Allow) C:Program Files (x86)Windows LiveMeshMOE.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [BC8F2982-4766-4CA9-8568-4DD9325B8D8B] => (Allow) C:Program Files (x86)Acerclear.fiMVPclear.fi.exe (CyberLink -> Acer Incorporated)\nFirewallRules: [D0884557-C872-4F28-B425-11EA38071BAA] => (Allow) C:Program Files (x86)Acerclear.fiMVPclear.fiAgent.exe (CyberLink -> CyberLink Corp.)\nFirewallRules: [DED69C15-FD73-47F1-9AE7-AA1E07B1AA5F] => (Allow) C:Program Files (x86)Acerclear.fiMVPKernelCLMLCLMLSvc.exe (CyberLink -> CyberLink Corp.)\nFirewallRules: [7053E4E1-5D04-4B5F-B765-30CC150AB5F0] => (Allow) C:Program Files (x86)Acerclear.fiMVPKernelDMRDMREngine.exe (CyberLink -> CyberLink)\nFirewallRules: [CD57FF54-0544-444F-8A7C-F432B4AF1F13] => (Allow) C:Program Files (x86)Acerclear.fiMVPKernelDMRDMREngine.exe (CyberLink -> CyberLink)\nFirewallRules: [E10AD824-55A4-4C5E-AFDC-3278CEC762AF] => (Block) C:Program Files (x86)Acerclear.fiMVPKernelDMRDMREngine.exe (CyberLink -> CyberLink)\nFirewallRules: [A6B0B15B-42D5-4D85-B90A-F0312F1B958D] => (Allow) Conquer_v5721_P2P.exe No File\nFirewallRules: [TCP Query User5AE4B2B1-9F23-4BE2-B1CB-D68B83804AB3D:giochidiablo iiidiablo iiidiablo iii.exe] => (Allow) D:giochidiablo iiidiablo iiidiablo iii.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [UDP Query UserD67346DB-E26C-48B9-82CF-217414001078D:giochidiablo iiidiablo iiidiablo iii.exe] => (Allow) D:giochidiablo iiidiablo iiidiablo iii.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [0A3A4784-CDE8-4892-BAB0-0DDA97B44F36] => (Allow) C:WindowsSysWOW64PnkBstrA.exe (Even Balance, Inc. -> )\nFirewallRules: [EF78F40A-C8F9-45E4-91A3-FB22A2D9B090] => (Allow) C:WindowsSysWOW64PnkBstrA.exe (Even Balance, Inc. -> )\nFirewallRules: [3A4F95A8-CD4C-461E-8981-11EB54AE03F9] => (Allow) C:WindowsSysWOW64PnkBstrB.exe (Even Balance, Inc. -> )\nFirewallRules: [FEF7E85F-3029-4D61-8862-75BA9506CC73] => (Allow) C:WindowsSysWOW64PnkBstrB.exe (Even Balance, Inc. -> )\nFirewallRules: [74DB4201-A73A-48B2-AA3A-148CF51349C0] => (Allow) C:Program Files (x86)Common FilesAppleApple Application SupportWebKit2WebProcess.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [F87F2B4A-34AD-488A-A071-7849FC87729E] => (Allow) C:UsersDanieleAppDataRoaminguTorrentuTorrent.exe No File\nFirewallRules: [AB0C7AF1-9475-46B2-B111-A13144F9DDFD] => (Allow) C:UsersDanieleAppDataRoaminguTorrentuTorrent.exe No File\nFirewallRules: [6EF13497-1121-43C7-97C4-E2ED9E9E244D] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)\nFirewallRules: [612ED1D8-238A-4C46-A5D8-9F246018E22C] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)\nFirewallRules: [44E21BC9-991E-4012-8574-7C0E44EC3586] => (Allow) C:Program Files (x86)Battle.netBattle.net.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [FECBDB91-560D-4666-8565-E4E38DDA498C] => (Allow) C:Program Files (x86)Battle.netBattle.net.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [A2A5A7DD-A5F7-4DE8-824D-B5DC0DF5E263] => (Allow) C:ProgramDataBattle.netAgentAgent.beta.2737Agent.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [6E042EB7-3751-4658-B76C-F8D665685522] => (Allow) C:ProgramDataBattle.netAgentAgent.beta.2737Agent.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [26535086-916B-4D18-8166-4D2AC4036B93] => (Allow) C:ProgramDataBattle.netAgentAgent.beta.2753Agent.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [56CDE0D0-F4BD-41E6-99EC-9AD17421D43A] => (Allow) C:ProgramDataBattle.netAgentAgent.beta.2753Agent.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [DFBCBBF2-C3D0-4D12-B7FB-BE8097FDD79A] => (Allow) C:UsersDanieleAppDataRoamingDropboxbinDropbox.exe (Dropbox, Inc -> Dropbox, Inc.)\nFirewallRules: [51A92662-05B7-40E3-AC9B-4361F8756831] => (Allow) C:UsersDanieleAppDataRoamingDropboxbinDropbox.exe (Dropbox, Inc -> Dropbox, Inc.)\nFirewallRules: [C20EF2D3-73B1-459D-A216-C18E161A05F1] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [CF196B10-406C-4903-BA69-031AFBF448F2] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [CB0FE2A1-EB29-4664-BEBA-B86716D7194F] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [22CE7CBF-D8FF-4D70-AAFE-28B08ED0B355] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [TCP Query User178CF2A2-0D4F-4104-9731-24DA106BAC23C:program files (x86)mozilla firefoxfirefox.exe] => (Block) C:program files (x86)mozilla firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [UDP Query User8B73733E-A519-4359-92DA-1F88A0CDFCE8C:program files (x86)mozilla firefoxfirefox.exe] => (Block) C:program files (x86)mozilla firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [TCP Query User68CA8A72-B440-4885-A5CB-5C3B7303437EC:program files (x86)kodikodi.exe] => (Allow) C:program files (x86)kodikodi.exe (XBMC-Foundation) [File not signed]\nFirewallRules: [UDP Query User1F56C585-CDCB-435D-989C-3898A06D6B82C:program files (x86)kodikodi.exe] => (Allow) C:program files (x86)kodikodi.exe (XBMC-Foundation) [File not signed]\nFirewallRules: [49ADE3C6-B596-4EEC-BF05-A44B6D162148] => (Allow) C:Program Files (x86)Steambinsteamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [F29CF4BD-B1DF-4AAB-BFF1-78A2BF5998AE] => (Allow) C:Program Files (x86)Steambinsteamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [6EBBDC91-6891-435A-906C-B0373AE1C0C8] => (Allow) C:Program Files (x86)SteamSteamAppscommonSoccer ManagerSoccer Manager.exe () [File not signed]\nFirewallRules: [6CF1FE33-D73B-40A5-A924-ADC0D7D2AF5A] => (Allow) C:Program Files (x86)SteamSteamAppscommonSoccer ManagerSoccer Manager.exe () [File not signed]\nFirewallRules: [TCP Query User9C70BED5-17C9-4370-9B0F-126357FA2B45C:usersdanieleappdatalocalskypepluginpluginhost.exe] => (Allow) C:usersdanieleappdatalocalskypepluginpluginhost.exe (Microsoft Corporation -> Skype Technologies S.A.)\nFirewallRules: [UDP Query UserCE2FDCBA-9FE0-4053-A207-1322E0F9C691C:usersdanieleappdatalocalskypepluginpluginhost.exe] => (Allow) C:usersdanieleappdatalocalskypepluginpluginhost.exe (Microsoft Corporation -> Skype Technologies S.A.)\nFirewallRules: [E4A4A8EA-DBCC-43D1-BD93-562C96AB0935] => (Allow) C:Program Files (x86)Mozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [D52DCD90-6B49-49C0-97EF-D987E1868BFA] => (Allow) C:Program Files (x86)Mozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [FCDE241B-E22A-4166-A8DC-48695BE935D6] => (Allow) C:Program Files (x86)Steambincefcef.win7steamwebhelper.exe No File\nFirewallRules: [1DDA64DE-761F-40CC-9EA7-851DC33D0D83] => (Allow) C:Program Files (x86)Steambincefcef.win7steamwebhelper.exe No File\nFirewallRules: [TCP Query UserB3EAE4A3-48B3-4441-87D3-093BFDF490CDC:usersreeappdatalocalblue jeansappbluejeans.exe] => (Allow) C:usersreeappdatalocalblue jeansappbluejeans.exe (Blue Jeans Network -> Blue Jeans)\nFirewallRules: [UDP Query User87E5D06C-0B72-435E-9416-10CA4CDC044AC:usersreeappdatalocalblue jeansappbluejeans.exe] => (Allow) C:usersreeappdatalocalblue jeansappbluejeans.exe (Blue Jeans Network -> Blue Jeans)\nFirewallRules: [TCP Query User9DF0C516-812D-4B45-829B-44126C8F1B20C:usersdanieleappdatalocalmicrosoftskypeforbusinessplugin15.8.20020.400pluginhost.exe] => (Allow) C:usersdanieleappdatalocalmicrosoftskypeforbusinessplugin15.8.20020.400pluginhost.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [UDP Query UserB72E6E6F-F7D0-4B79-815B-A8C55347E36FC:usersdanieleappdatalocalmicrosoftskypeforbusinessplugin15.8.20020.400pluginhost.exe] => (Allow) C:usersdanieleappdatalocalmicrosoftskypeforbusinessplugin15.8.20020.400pluginhost.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [TCP Query UserA0034E0B-97DD-46E8-823A-62E0703F0ADAC:usersreeappdatalocalblue jeansappbluejeans.exe] => (Block) C:usersreeappdatalocalblue jeansappbluejeans.exe (Blue Jeans Network -> Blue Jeans)\nFirewallRules: [UDP Query User9ADD0A8D-6055-4CB1-BA9F-4020B6706570C:usersreeappdatalocalblue jeansappbluejeans.exe] => (Block) C:usersreeappdatalocalblue jeansappbluejeans.exe (Blue Jeans Network -> Blue Jeans)\nFirewallRules: [09E47FEF-1759-43B4-9795-E9315C90A01D] => (Allow) C:Program Files (x86)Epson SoftwareEvent ManagerEEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [9E3142C6-90FB-4855-8FF1-FCBE114EEF4D] => (Allow) C:Program Files (x86)Epson SoftwareEvent ManagerEEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [9FB0505C-59D4-4113-91C5-9FBFAB217F6D] => (Allow) C:Program Files (x86)EPSON SoftwareECPrinterSetupENPApp.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [3A64D786-1F89-4801-BD77-C585A80CBFB7] => (Allow) C:Program Files (x86)EPSON SoftwareECPrinterSetupENPApp.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [TCP Query User74F6835B-AE6B-4AB9-8FCC-4459350C6570D:giochihearthstonehearthstone.exe] => (Block) D:giochihearthstonehearthstone.exe (Blizzard Entertainment, Inc. -> )\nFirewallRules: [UDP Query User58AED474-9009-46A6-9923-0206B015380FD:giochihearthstonehearthstone.exe] => (Block) D:giochihearthstonehearthstone.exe (Blizzard Entertainment, Inc. -> )\nFirewallRules: [VirtualPC-In-UDP-1] => (Allow) %SystemRoot%System32vpc.exe No File\nFirewallRules: [VirtualPC-In-UDP-2] => (Allow) %SystemRoot%System32vpc.exe No File\nFirewallRules: [VirtualPC-In-TCP-1] => (Allow) %SystemRoot%System32vpc.exe No File\nFirewallRules: [2DBC1507-3D9F-4958-9F7E-83595D81F016] => (Allow) D:GiochiDOTA 2steamappscommonEador. Masters of the Broken Worldlauncher.exe () [File not signed]\nFirewallRules: [B9026BBA-84DB-4400-8E1E-ABD5059117CD] => (Allow) D:GiochiDOTA 2steamappscommonEador. Masters of the Broken Worldlauncher.exe () [File not signed]\nFirewallRules: [428E48D4-A2FC-4E38-93F0-D015DED2CEA0] => (Allow) D:GiochiDOTA 2steamappscommondota 2 betagamebinwin64dota2.exe (Valve -> )\nFirewallRules: [74C303B6-F2E8-4BC6-853F-EFD5FBE1535B] => (Allow) D:GiochiDOTA 2steamappscommondota 2 betagamebinwin64dota2.exe (Valve -> )\nFirewallRules: [8D39FFFC-D3F3-40B7-9A83-559EF34F746B] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [9C0BC1AD-D865-48A0-A410-D2A72E9067A0] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [E4732CBC-C606-4D23-B4BE-4EF941892D2A] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [3C1769FE-7F73-40CD-8694-9D94EB5A4C73] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [EDDA200D-3307-4268-BF74-2A6B8C5850FE] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [5AC4F2B2-78FE-4312-94CF-D9BD16700FE6] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)\nFirewallRules: [7FFE0A82-6CE9-4263-BCEA-12BA88FC5AD1] => (Allow) C:Program FilesBlueStacksHD-Player.exe No File\nFirewallRules: [71D0935A-3DC4-46A8-B5EC-DC69E44DE995] => (Allow) C:Program Files (x86)MicrosoftSkype for DesktopSkype.exe (Skype Software Sarl -> Skype Technologies S.A.)\nFirewallRules: [734F2907-15A9-4964-9A4B-6AF63CB588B4] => (Allow) C:Program Files (x86)MicrosoftSkype for DesktopSkype.exe (Skype Software Sarl -> Skype Technologies S.A.)\nFirewallRules: [575D6C1F-8E4F-481C-AF65-601DDDA498A1] => (Allow) C:UsersDanieleAppDataLocalLINEbin5.18.2.1998LINE.exe No File\nFirewallRules: [891ABF3F-4987-4BF6-894D-804B5BC60153] => (Allow) C:UsersDanieleAppDataLocalLINEbin5.18.2.1998LINE.exe No File\nFirewallRules: [42FF3F30-8B2A-42B0-9BC0-F6C7BACF9258] => (Allow) C:UsersDanieleAppDataLocalLINEbin5.18.2.1998LineUpdater.exe No File\nFirewallRules: [F38971E4-A0A7-44DB-8A1C-8450D8A685C3] => (Allow) C:UsersDanieleAppDataLocalLINEbin5.18.2.1998LineUpdater.exe No File\nFirewallRules: [TCP Query UserCC8480C0-2941-4E9D-8A52-47822F0D9776D:giochidiablo iiidiablo iiix64diablo iii64.exe] => (Allow) D:giochidiablo iiidiablo iiix64diablo iii64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [UDP Query UserF6C4F938-A1A8-4668-AB2C-03AC5CE15700D:giochidiablo iiidiablo iiix64diablo iii64.exe] => (Allow) D:giochidiablo iiidiablo iiix64diablo iii64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)\nFirewallRules: [TCP Query User163F9996-F652-4769-9BAC-80C531683DA9C:program filesdnplayerext2ldboxheadless.exe] => (Allow) C:program filesdnplayerext2ldboxheadless.exe (Shanghai Changzhi Network Technology Co., Ltd. -> Oracle Corporation)\nFirewallRules: [UDP Query User3343FBF2-B1FF-4C62-B5FF-D8C3A6E8EC98C:program filesdnplayerext2ldboxheadless.exe] => (Allow) C:program filesdnplayerext2ldboxheadless.exe (Shanghai Changzhi Network Technology Co., Ltd. -> Oracle Corporation)\nFirewallRules: [6A971D92-619D-4131-AB0C-0BC7C492C4D5] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [9947C36A-3F76-4596-90D5-7062A53E9C53] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [TCP Query User71DD669E-F8F9-4657-9480-12045D0A9A65C:program filesldplayerboxldvboxheadless.exe] => (Allow) C:program filesldplayerboxldvboxheadless.exe (Shanghai Changzhi Network Technology Co., Ltd. -> Oracle Corporation)\nFirewallRules: [UDP Query User5C9DDDCA-3F20-4505-8FE1-74593EBD6931C:program filesldplayerboxldvboxheadless.exe] => (Allow) C:program filesldplayerboxldvboxheadless.exe (Shanghai Changzhi Network Technology Co., Ltd. -> Oracle Corporation)\nFirewallRules: [170B5594-146D-4B85-9BB4-3EF53938E732] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [37535782-EEB9-4AD5-82AB-95BDA7C0B007] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [F8CACE39-A536-471F-89EC-F6BA460694F0] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [472F5DAF-CF00-417C-AB83-604384991CE5] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [8070CE88-1B4C-434E-8495-B0F0C8C82972] => (Allow) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [22DBF4E8-86F2-44C0-9BE2-40F28D8B56AF] => (Allow) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [06240932-630C-46AA-8C14-877D0EA3938A] => (Allow) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [CC3EB70E-EEAD-4622-8480-E3C7771BF25C] => (Allow) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [E59453FF-C79A-4D0D-A485-D3FE8B274B54] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [0A829F94-700F-4835-8284-7B28614D717B] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [79FB848F-BBE9-42DA-8170-285A6C0060C8] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [456EF3E4-BE52-4A9A-8CA8-06554B75D800] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [B06D86D3-3848-4734-944F-5706BE664234] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [F0855DE7-46B2-4581-BFC1-2A4EB0D47355] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [8009BD78-17DA-44F1-95AA-5E9EC7724E77] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [73B5CCA2-1DFB-417E-88E2-0DAE1645F388] => (Block) C:Program Files (x86)Overwolf.143.0.24OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)\nFirewallRules: [41C0109E-C969-40D1-AEDA-28C4B17EF631] => (Allow) D:GiochiDOTA 2steamappscommonPillars of EternityPillarsOfEternity.exe (Obsidian Entertainment) [File not signed]\nFirewallRules: [0A52AC62-C826-437E-BCE1-C1902CBE00BE] => (Allow) D:GiochiDOTA 2steamappscommonPillars of EternityPillarsOfEternity.exe (Obsidian Entertainment) [File not signed]\nFirewallRules: [374A4772-2595-4C7A-9E1D-A1692E687887] => (Allow) D:GiochiDOTA 2steamappscommonCounter-Strike Global Offensivecsgo.exe (Valve -> )\nFirewallRules: [55E824ED-7014-48A7-8DAA-0C8717A6913C] => (Allow) D:GiochiDOTA 2steamappscommonCounter-Strike Global Offensivecsgo.exe (Valve -> )\nFirewallRules: [E3CDA667-4963-4012-8775-68F6023DADD5] => (Allow) C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC -> Google LLC)\nFirewallRules: [BB40FF31-6239-422E-8074-B6A9E2DC0D95] => (Block) C:Program Files (x86)AviraSoftwareUpdateravirasoftwareupdatertoastnotificationsbridge.exe (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nFirewallRules: [0645C731-0335-4950-9427-213A6DA9E558] => (Allow) C:Program Files (x86)AviraSoftwareUpdateravirasoftwareupdatertoastnotificationsbridge.exe (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)\nFirewallRules: [CDB7F1B2-0F67-4210-9A69-DF18B049D9CE] => (Allow) C:Program Files (x86)AviraSoftwareUpdateravirasoftwareupdatertoastnotificationsbridge.exe (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)"},{"id":"text-75","heading":"Text","content":"==================== Restore Points ========================="},{"id":"text-76","heading":"Text","content":"18-04-2020 04:24:53 Punto di controllo pianificato\n18-04-2020 22:37:41 Windows Update"},{"id":"text-77","heading":"Text","content":"==================== Faulty Device Manager Devices ============"},{"id":"text-78","heading":"Text","content":"==================== Event log errors: ========================"},{"id":"text-79","heading":"Text","content":"Application errors:\n==================\nError: (04/19/2020 02:59:14 AM) (Source: Application Error) (EventID: 1000) (User: )\nDescription: Nome dell'applicazione che ha generato l'errore: Avira.SystemSpeedup.Maintenance.exe, versione: 6.4.1.10871, timestamp: 0x5e32ea26\nNome del modulo che ha generato l'errore: clr.dll, versione: 4.8.4110.0, timestamp: 0x5de6da2a\nCodice eccezione: 0xc0000409\nOffset errore 0x0035a538\nID processo che ha generato l'errore: 0x28e4\nOra di avvio dell'applicazione che ha generato l'errore: 0x01d615ee12c7f9a8\nPercorso dell'applicazione che ha generato l'errore: C:Program Files (x86)AviraSystem SpeedupAvira.SystemSpeedup.Maintenance.exe\nPercorso del modulo che ha generato l'errore: C:WindowsMicrosoft.NETFrameworkv4.0.30319clr.dll\nID segnalazione: 5dd80d31-81e1-11ea-b4b9-1c7508f37aca"},{"id":"text-80","heading":"Text","content":"Error: (04/18/2020 02:22:40 PM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Impossibile riattivare il filtro eventi con query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" nello spazio dei nomi "//./root/CIMV2". Errore 0x80041003. Impossibile recapitare gli eventi tramite questo filtro fino alla risoluzione del problema."},{"id":"text-81","heading":"Text","content":"Error: (04/18/2020 02:22:32 PM) (Source: Avira Phantom VPN) (EventID: 0) (User: )\nDescription: Service cannot be started. Il processo di servizio non ha potuto connettersi al controller di servizio"},{"id":"text-82","heading":"Text","content":"Error: (04/18/2020 02:58:54 AM) (Source: Application Error) (EventID: 1000) (User: )\nDescription: Nome dell'applicazione che ha generato l'errore: Avira.SystemSpeedup.Maintenance.exe, versione: 6.4.1.10871, timestamp: 0x5e32ea26\nNome del modulo che ha generato l'errore: clr.dll, versione: 4.8.4110.0, timestamp: 0x5de6da2a\nCodice eccezione: 0xc0000409\nOffset errore 0x0035a538\nID processo che ha generato l'errore: 0x13cc\nOra di avvio dell'applicazione che ha generato l'errore: 0x01d61524e890fa87\nPercorso dell'applicazione che ha generato l'errore: C:Program Files (x86)AviraSystem SpeedupAvira.SystemSpeedup.Maintenance.exe\nPercorso del modulo che ha generato l'errore: C:WindowsMicrosoft.NETFrameworkv4.0.30319clr.dll\nID segnalazione: 27c684c1-8118-11ea-8822-1c7508f37aca"},{"id":"text-83","heading":"Text","content":"Error: (04/17/2020 01:32:33 PM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Impossibile riattivare il filtro eventi con query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" nello spazio dei nomi "//./root/CIMV2". Errore 0x80041003. Impossibile recapitare gli eventi tramite questo filtro fino alla risoluzione del problema."},{"id":"text-84","heading":"Text","content":"Error: (04/17/2020 02:59:07 AM) (Source: Application Error) (EventID: 1000) (User: )\nDescription: Nome dell'applicazione che ha generato l'errore: Avira.SystemSpeedup.Maintenance.exe, versione: 6.4.1.10871, timestamp: 0x5e32ea26\nNome del modulo che ha generato l'errore: clr.dll, versione: 4.8.4110.0, timestamp: 0x5de6da2a\nCodice eccezione: 0xc0000409\nOffset errore 0x0035a538\nID processo che ha generato l'errore: 0x18b0\nOra di avvio dell'applicazione che ha generato l'errore: 0x01d6145bbe2f4581\nPercorso dell'applicazione che ha generato l'errore: C:Program Files (x86)AviraSystem SpeedupAvira.SystemSpeedup.Maintenance.exe\nPercorso del modulo che ha generato l'errore: C:WindowsMicrosoft.NETFrameworkv4.0.30319clr.dll\nID segnalazione: 050dfbb3-804f-11ea-ad8b-1c7508f37aca"},{"id":"text-85","heading":"Text","content":"Error: (04/17/2020 12:36:53 AM) (Source: Application Error) (EventID: 1000) (User: )\nDescription: Nome dell'applicazione che ha generato l'errore: MsMpEng.exe, versione: 4.10.209.0, timestamp: 0x582a94a1\nNome del modulo che ha generato l'errore: mpengine.dll, versione: 1.1.16900.4, timestamp: 0x5e70249a\nCodice eccezione: 0xc0000005\nOffset errore 0x00000000001d00cf\nID processo che ha generato l'errore: 0xac\nOra di avvio dell'applicazione che ha generato l'errore: 0x01d60ec33667deaa\nPercorso dell'applicazione che ha generato l'errore: C:Program FilesMicrosoft Security ClientMsMpEng.exe\nPercorso del modulo che ha generato l'errore: C:ProgramDataMicrosoftMicrosoft AntimalwareDefinition UpdatesABFDE23F-10A0-40FD-89BB-EEAFDF90A038mpengine.dll\nID segnalazione: 2686ef91-803b-11ea-ad8b-1c7508f37aca"},{"id":"text-86","heading":"Text","content":"Error: (04/16/2020 10:25:52 PM) (Source: Application Hang) (EventID: 1002) (User: )\nDescription: Il programma Explorer.EXE versione 6.1.7601.23537 non interagisce più con Windows ed è stato chiuso. Per vedere se sono disponibili ulteriori informazioni sul problema, verificare la cronologia del problema in Centro operativo nel Pannello di controllo."},{"id":"text-87","heading":"Text","content":"ID processo: 804"},{"id":"text-88","heading":"Text","content":"Ora di avvio: 01d60ec34d82acc2"},{"id":"text-89","heading":"Text","content":"Ora di chiusura: 0"},{"id":"text-90","heading":"Text","content":"Percorso applicazione: C:WindowsExplorer.EXE"},{"id":"text-91","heading":"Text","content":"ID segnalazione: cb278b7b-8028-11ea-ad8b-1c7508f37aca"},{"id":"text-92","heading":"Text","content":"System errors:\n=============\nError: (04/18/2020 02:23:26 PM) (Source: Service Control Manager) (EventID: 7031) (User: )\nDescription: Il servizio Avira Phantom VPN è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 5000 millisecondi: Riavvia il servizio."},{"id":"text-93","heading":"Text","content":"Error: (04/17/2020 12:40:19 AM) (Source: Microsoft Antimalware) (EventID: 3002) (User: )\nDescription: La funzionalità di protezione in tempo reale di Antimalware Microsoft ha rilevato un errore e non è riuscita."},{"id":"text-94","heading":"Text","content":"Funzionalità: Network Inspection System"},{"id":"text-95","heading":"Text","content":"Codice errore: 0x80070002"},{"id":"text-96","heading":"Text","content":"Descrizione errore: Impossibile trovare il file specificato."},{"id":"text-97","heading":"Text","content":"Motivo: Nel sistema mancano degli aggiornamenti necessari per l'esecuzione di Network Inspection System. Installare gli aggiornamenti necessari e riavviare il computer."},{"id":"text-98","heading":"Text","content":"Error: (04/17/2020 12:38:27 AM) (Source: Service Control Manager) (EventID: 7031) (User: )\nDescription: Il servizio Microsoft Antimalware Service è stato arrestato in modo imprevisto. Questo problema si è verificato 1 volta/e. Le seguenti azioni di correzione saranno eseguite tra 100 millisecondi: Esegui il programma di ripristino configurato."},{"id":"text-99","heading":"Text","content":"Error: (04/17/2020 12:36:50 AM) (Source: Microsoft Antimalware) (EventID: 5008) (User: )\nDescription: Il motore Antimalware Microsoft è stato interrotto a causa di un errore imprevisto."},{"id":"text-100","heading":"Text","content":"Tipo errore: Arresto anomalo"},{"id":"text-101","heading":"Text","content":"Codice eccezione: 0xc0000005"},{"id":"text-102","heading":"Text","content":"Risorsa: file:C:UsersDanieleDownloadsSample GESE Grade 5 Topic form_completed..pdf"},{"id":"text-103","heading":"Text","content":"Error: (04/16/2020 11:28:52 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: Ricevuto avviso di errore irreversibile: 40."},{"id":"text-104","heading":"Text","content":"Error: (04/16/2020 11:28:52 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: Ricevuto avviso di errore irreversibile: 70."},{"id":"text-105","heading":"Text","content":"Error: (04/16/2020 10:18:15 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: Ricevuto avviso di errore irreversibile: 40."},{"id":"text-106","heading":"Text","content":"Error: (04/16/2020 10:18:15 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: Ricevuto avviso di errore irreversibile: 70."},{"id":"text-107","heading":"Text","content":"Windows Defender:\n===================================\nDate: 2016-06-22 23:31:54.534\nLa description: \nWindows Defender: errore durante il tentativo di caricare le firme. Verrà tentato di ripristinare un set di firme valido.\nFirme tentate:Corrente\nCodice errore:0x80070002\nDescrizione errore:Impossibile trovare il file specificato. \nVersione firma:0.0.0.0\nVersione modulo:0.0.0.0"},{"id":"text-108","heading":"Text","content":"==================== Memory info ==========================="},{"id":"text-109","heading":"Text","content":"BIOS: Acer V1.07 03/02/2011\nMotherboard: Acer JE50_HR\nProcessor: Intel® Core™ i5-2410M CPU @ 2.30GHz\nPercentage of memory in use: 92%\nTotal physical RAM: 8043.86 MB\nAvailable physical RAM: 633.23 MB\nTotal Virtual: 24426 MB\nAvailable Virtual: 15554.41 MB"},{"id":"text-110","heading":"Text","content":"==================== Drives ================================"},{"id":"text-111","heading":"Text","content":"Drive c: (Acer) (Fixed) (Total:290.05 GB) (Free:130.96 GB) NTFS\nDrive d: (DATA) (Fixed) (Total:290.4 GB) (Free:143.46 GB) NTFS\nDrive e: (Misc) (CDROM) (Total:0.69 GB) (Free:0.13 GB) UDF\nDrive g: () (Removable) (Total:29.27 GB) (Free:1.17 GB) FAT32"},{"id":"text-112","heading":"Text","content":"\\?Volume283c1efb-a59f-11e2-b4d5-806e6f6e6963 (SYSTEM RESERVED) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS\n\\?Volume283c1efa-a59f-11e2-b4d5-806e6f6e6963 (PQSERVICE) (Fixed) (Total:15.62 GB) (Free:2.53 GB) NTFS"},{"id":"text-113","heading":"Text","content":"==================== MBR & Partition Table ===================="},{"id":"text-114","heading":"Text","content":"==========================================================\nDisk: 0 (MBR Code: Windows 7/8/10) (Size: 596.2 GB) (Disk ID: BD414BA4)\nPartition 1: (Not Active) – (Size=15.6 GB) – (Type=27)\nPartition 2: (Active) – (Size=100 MB) – (Type=07 NTFS)\nPartition 3: (Not Active) – (Size=290.1 GB) – (Type=07 NTFS)\nPartition 4: (Not Active) – (Size=290.4 GB) – (Type=07 NTFS)"},{"id":"text-115","heading":"Text","content":"==========================================================\nDisk: 1 (Protective MBR) (Size: 29.3 GB) (Disk ID: 00000000)"},{"id":"text-116","heading":"Text","content":"Partition: GPT."},{"id":"text-117","heading":"Text","content":"==================== End of Addition.txt ======================="},{"id":"text-118","heading":"Text","content":"Click to rate this post!\n \n [Total: 0 Average: 0]"}],"media":{"primary_image":"https://tutos-gameserver.fr/wp-content/uploads/2020/03/1585419619_meta_image.png"},"relations":[{"rel":"canonical","href":"https://tutos-gameserver.fr/2020/04/24/infection-possible-aide-a-la-suppression-des-virus-chevaux-de-troie-logiciels-espions-et-programmes-malveillants-bien-choisir-son-serveur-d-impression/"},{"rel":"alternate","href":"https://tutos-gameserver.fr/2020/04/24/infection-possible-aide-a-la-suppression-des-virus-chevaux-de-troie-logiciels-espions-et-programmes-malveillants-bien-choisir-son-serveur-d-impression/llm","type":"text/html"},{"rel":"alternate","href":"https://tutos-gameserver.fr/2020/04/24/infection-possible-aide-a-la-suppression-des-virus-chevaux-de-troie-logiciels-espions-et-programmes-malveillants-bien-choisir-son-serveur-d-impression/llm.json","type":"application/json"},{"rel":"llm-manifest","href":"https://tutos-gameserver.fr/llm-endpoints-manifest.json","type":"application/json"}],"http_headers":{"X-LLM-Friendly":"1","X-LLM-Schema":"1.1.0","Content-Security-Policy":"default-src 'none'; img-src * data:; style-src 'unsafe-inline'"},"license":"CC BY-ND 4.0","attribution_required":true,"allow_cors":false}