Je suis coupable de ne pas avoir lu complètement. Voir les journaux collés ci-dessous:\nRésultat de l'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 30-05-2020 01\nRan par GemmitiA (administrateur) sur KM-PC (Dell Inc. OptiPlex 7010) (31-05-2020 11:06:43)\nExécution à partir de C: Users KMiele Downloads Gus\nProfils chargés: GemmitiA & KMiele\nPlateforme: Windows 7 Professional Service Pack 1 (X64) Langue: anglais (États-Unis)\nInternet Explorer version 11 (navigateur par défaut: IE)\nMode de démarrage: Normal
"},{"id":"text-2","type":"text","heading":"","plain_text":"==================== Processus (liste blanche) =================","html":"==================== Processus (liste blanche) =================
"},{"id":"text-3","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, le processus sera fermé. Le fichier ne sera pas déplacé.)","html":"(Si une entrée est incluse dans la liste de correctifs, le processus sera fermé. Le fichier ne sera pas déplacé.)
"},{"id":"text-4","type":"text","heading":"","plain_text":"(Actian Corporation -> Actian Corporation) C: Program Files (x86) Actian PSQL bin w3dbsmgr.exe\n(Adobe Inc. -> Adobe Systems) C: Program Files (x86) Common Files Adobe ARM 1.0 armsvc.exe\n(Apple Inc. -> Apple Inc.) C: Program Files (x86) Bonjour mDNSResponder.exe\n(BUFFALO INC. -> BUFFALO INC.) C: Program Files (x86) BUFFALO NASNAVI nassvc.exe\n(Cisco WebEx LLC -> Cisco WebEx LLC) C: Windows SysWOW64 atashost.exe\n(DYMO) [File not signed] C: Program Files (x86) DYMO DYMO Label Software DYMO.DLS.Printing.Host.exe\n(FOXIT SOFTWARE INC. -> Foxit Software Inc.) C: Program Files (x86) Foxit Software Foxit PhantomPDF FoxitPhantomPDFUpdateService.exe\n(FOXIT SOFTWARE INC. -> Foxit Software Inc.) C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator FoxitProxyServer_Socket_PH.exe \n(Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe \n(Hewlett-Packard Company -> HP) C: Windows System32 HPSIsvc.exe\n(HP) [File not signed] C: Program Files (x86) HP HPLaserJetService HPLaserJetService.exe\n(Intel Corporation – Micrologiciel Intel® Management Engine -> Intel Corporation) C: Program Files (x86) Intel Intel® Management Engine Components DAL Jhi_service.exe\n(Intel Corporation – Produits logiciels et micrologiciels -> Intel Corporation) C: Program Files (x86) Intel Intel® Management Engine Components IMSS PrivacyIconClient.exe\n(Intel Corporation – Produits logiciels et micrologiciels -> Intel Corporation) C: Program Files (x86) Intel Intel® Management Engine Components LMS LMS.exe\n(Intel Corporation -> Intel Corporation) C: Program Files (x86) Intel Intel® Rapid Storage Technology IAStorDataMgrSvc.exe\n(Intel Corporation -> Intel Corporation) C: Program Files (x86) Intel Intel® Rapid Storage Technology IAStorIcon.exe\n(Intel Corporation -> Intel Corporation) C: Program Files (x86) Intel Intel® USB 3.0 eXtensible Host Controller Driver Application iusb3mon.exe\n(Intel Corporation -> Intel Corporation) C: Windows System32 IPROSetMonitor.exe\n(Intel® Corporation) [File not signed] C: Program Files Intel iCLS Client HeciServer.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 igfxCUIService.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 igfxEM.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 igfxHK.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 igfxTray.exe\n(Microsoft Corporation -> Microsoft Corp.) C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDSVC.EXE\n(Microsoft Corporation -> Microsoft Corp.) C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDSVCM.EXE\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Microsoft Office root Office16 EXCEL.EXE\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Microsoft Office root Office16 ONENOTEM.EXE\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Microsoft Office root Office16 WINWORD.EXE\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Fichiers communs Microsoft Shared ClickToRun OfficeClickToRun.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client MsMpEng.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client msseces.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client NisSrv.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Windows Microsoft.NET Framework64 v3.0 WPF PresentationFontCache.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 dllhost.exe \n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 LogonUI.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 mobsync.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 prevhost.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 rdpclip.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows SysWOW64 wbem WmiPrvSE.exe\n(Éditeur de compatibilité matérielle Microsoft Windows -> SEIKO EPSON CORPORATION) C: ProgramData EPSON EPW! 3 SSRP E_S30RP1.EXE\n(Microsoft) [File not signed] C: Program Files (x86) Common Files Sage Central AutoUpdateClient Sage.Central.AutoUpdateManager.Service.exe\n(Nuance Communications, Inc. -> Nuance Communications, Inc.) C: Program Files (x86) ScanSoft PaperPort pptd40nt.exe\n(Realtek Semiconductor Corp -> Realtek Semiconductor Corp.) C: Program Files Realtek Audio HDA RtDCpl64.exe\n(Sage Software, Inc. -> Sage Software, Inc.) C: Program Files (x86) Sage Peachtree SmartPostingService2020.exe\n(Sanford, L.P.) [File not signed] C: Program Files (x86) DYMO DYMO Label Software DymoPnpService.exe\n(Sanford, L.P.) [File not signed] C: Program Files (x86) DYMO DYMO Label Software DymoQuickPrint.exe\n(Seagate Technology LLC -> Seagate Technology LLC) C: Program Files (x86) Seagate Seagate Dashboard 2.0 MobileService.exe\n(Seagate Technology LLC -> Seagate Technology LLC) C: Program Files (x86) Seagate Seagate Dashboard 2.0 Seagate.Dashboard.DASWindowsService.exe\n(SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C: Program Files (x86) Epson Software Event Manager EEventManager.exe\n(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C: Program Files (x86) Epson Software FAX Utility FUFAXRCV.exe\n(SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C: Program Files Fichiers communs EPSON EPW! 3 SSRP E_S60RPB.EXE\n(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C: Program Files EPSON EpsonCustomerParticipation EPCP.exe\n(SEIKO EPSON Corporation -> Seiko Epson Corporation) C: Windows System32 escsvc64.exe\n(Symantec Corporation -> Symantec Corporation) C: Program Files (x86) Norton Ghost Agent VProSvc.exe\n(Symantec Corporation -> Symantec Corporation) C: Program Files (x86) Norton Ghost Agent VProTray.exe\n(Symantec Corporation -> Symantec) C: Program Files (x86) Norton Ghost Shared Drivers SymSnapServicex64.exe\n(Synology Inc. ->) C: Program Files (x86) Synology ActiveBackupforBusinessAgent service Synology Active Backup for Business Service.exe\n(Synology Inc. -> Synology Inc.) C: Program Files (x86) Synology ActiveBackupforBusinessAgent ui ui Synology Active Backup for Business Agent.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer_Service.exe\n(UPEK Inc. -> UPEK Inc.) C: Program Files Fichiers communs SPBA upeksvr.exe \n(Wave Systems Corp. ->) C: Program Files Dell Dell Data Protection Access Advanced Wave EMBASSY Client Core EmbassyServer.exe\n(Wave Systems Corp. -> Wave Systems Corp.) C: Program Files Dell Dell Data Protection Access Advanced Wave Trusted Drive Manager TdmNotify.exe\n(Wave Systems Corp. -> Wave Systems Corp.) C: Program Files Dell Dell Data Protection Access Advanced Wave Trusted Drive Manager TdmService.exe\n(Wave Systems Corp.) [File not signed] C: Program Files Dell Dell Data Protection Access Advanced Wave Authentication Manager WaveAMService.exe","html":"(Actian Corporation -> Actian Corporation) C: Program Files (x86) Actian PSQL bin w3dbsmgr.exe\n(Adobe Inc. -> Adobe Systems) C: Program Files (x86) Common Files Adobe ARM 1.0 armsvc.exe\n(Apple Inc. -> Apple Inc.) C: Program Files (x86) Bonjour mDNSResponder.exe\n(BUFFALO INC. -> BUFFALO INC.) C: Program Files (x86) BUFFALO NASNAVI nassvc.exe\n(Cisco WebEx LLC -> Cisco WebEx LLC) C: Windows SysWOW64 atashost.exe\n(DYMO) [File not signed] C: Program Files (x86) DYMO DYMO Label Software DYMO.DLS.Printing.Host.exe\n(FOXIT SOFTWARE INC. -> Foxit Software Inc.) C: Program Files (x86) Foxit Software Foxit PhantomPDF FoxitPhantomPDFUpdateService.exe\n(FOXIT SOFTWARE INC. -> Foxit Software Inc.) C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator FoxitProxyServer_Socket_PH.exe \n(Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe \n(Hewlett-Packard Company -> HP) C: Windows System32 HPSIsvc.exe\n(HP) [File not signed] C: Program Files (x86) HP HPLaserJetService HPLaserJetService.exe\n(Intel Corporation – Micrologiciel Intel® Management Engine -> Intel Corporation) C: Program Files (x86) Intel Intel® Management Engine Components DAL Jhi_service.exe\n(Intel Corporation – Produits logiciels et micrologiciels -> Intel Corporation) C: Program Files (x86) Intel Intel® Management Engine Components IMSS PrivacyIconClient.exe\n(Intel Corporation – Produits logiciels et micrologiciels -> Intel Corporation) C: Program Files (x86) Intel Intel® Management Engine Components LMS LMS.exe\n(Intel Corporation -> Intel Corporation) C: Program Files (x86) Intel Intel® Rapid Storage Technology IAStorDataMgrSvc.exe\n(Intel Corporation -> Intel Corporation) C: Program Files (x86) Intel Intel® Rapid Storage Technology IAStorIcon.exe\n(Intel Corporation -> Intel Corporation) C: Program Files (x86) Intel Intel® USB 3.0 eXtensible Host Controller Driver Application iusb3mon.exe\n(Intel Corporation -> Intel Corporation) C: Windows System32 IPROSetMonitor.exe\n(Intel® Corporation) [File not signed] C: Program Files Intel iCLS Client HeciServer.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 igfxCUIService.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 igfxEM.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 igfxHK.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 igfxTray.exe\n(Microsoft Corporation -> Microsoft Corp.) C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDSVC.EXE\n(Microsoft Corporation -> Microsoft Corp.) C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDSVCM.EXE\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Microsoft Office root Office16 EXCEL.EXE\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Microsoft Office root Office16 ONENOTEM.EXE\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Microsoft Office root Office16 WINWORD.EXE\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Fichiers communs Microsoft Shared ClickToRun OfficeClickToRun.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client MsMpEng.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client msseces.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client NisSrv.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Windows Microsoft.NET Framework64 v3.0 WPF PresentationFontCache.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 dllhost.exe \n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 LogonUI.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 mobsync.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 prevhost.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 rdpclip.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows SysWOW64 wbem WmiPrvSE.exe\n(Éditeur de compatibilité matérielle Microsoft Windows -> SEIKO EPSON CORPORATION) C: ProgramData EPSON EPW! 3 SSRP E_S30RP1.EXE\n(Microsoft) [File not signed] C: Program Files (x86) Common Files Sage Central AutoUpdateClient Sage.Central.AutoUpdateManager.Service.exe\n(Nuance Communications, Inc. -> Nuance Communications, Inc.) C: Program Files (x86) ScanSoft PaperPort pptd40nt.exe\n(Realtek Semiconductor Corp -> Realtek Semiconductor Corp.) C: Program Files Realtek Audio HDA RtDCpl64.exe\n(Sage Software, Inc. -> Sage Software, Inc.) C: Program Files (x86) Sage Peachtree SmartPostingService2020.exe\n(Sanford, L.P.) [File not signed] C: Program Files (x86) DYMO DYMO Label Software DymoPnpService.exe\n(Sanford, L.P.) [File not signed] C: Program Files (x86) DYMO DYMO Label Software DymoQuickPrint.exe\n(Seagate Technology LLC -> Seagate Technology LLC) C: Program Files (x86) Seagate Seagate Dashboard 2.0 MobileService.exe\n(Seagate Technology LLC -> Seagate Technology LLC) C: Program Files (x86) Seagate Seagate Dashboard 2.0 Seagate.Dashboard.DASWindowsService.exe\n(SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C: Program Files (x86) Epson Software Event Manager EEventManager.exe\n(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C: Program Files (x86) Epson Software FAX Utility FUFAXRCV.exe\n(SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C: Program Files Fichiers communs EPSON EPW! 3 SSRP E_S60RPB.EXE\n(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C: Program Files EPSON EpsonCustomerParticipation EPCP.exe\n(SEIKO EPSON Corporation -> Seiko Epson Corporation) C: Windows System32 escsvc64.exe\n(Symantec Corporation -> Symantec Corporation) C: Program Files (x86) Norton Ghost Agent VProSvc.exe\n(Symantec Corporation -> Symantec Corporation) C: Program Files (x86) Norton Ghost Agent VProTray.exe\n(Symantec Corporation -> Symantec) C: Program Files (x86) Norton Ghost Shared Drivers SymSnapServicex64.exe\n(Synology Inc. ->) C: Program Files (x86) Synology ActiveBackupforBusinessAgent service Synology Active Backup for Business Service.exe\n(Synology Inc. -> Synology Inc.) C: Program Files (x86) Synology ActiveBackupforBusinessAgent ui ui Synology Active Backup for Business Agent.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer_Service.exe\n(UPEK Inc. -> UPEK Inc.) C: Program Files Fichiers communs SPBA upeksvr.exe \n(Wave Systems Corp. ->) C: Program Files Dell Dell Data Protection Access Advanced Wave EMBASSY Client Core EmbassyServer.exe\n(Wave Systems Corp. -> Wave Systems Corp.) C: Program Files Dell Dell Data Protection Access Advanced Wave Trusted Drive Manager TdmNotify.exe\n(Wave Systems Corp. -> Wave Systems Corp.) C: Program Files Dell Dell Data Protection Access Advanced Wave Trusted Drive Manager TdmService.exe\n(Wave Systems Corp.) [File not signed] C: Program Files Dell Dell Data Protection Access Advanced Wave Authentication Manager WaveAMService.exe
"},{"id":"text-5","type":"text","heading":"","plain_text":"==================== Registre (liste blanche) ===================","html":"==================== Registre (liste blanche) ===================
"},{"id":"text-6","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, l'élément de registre sera restauré par défaut ou supprimé. Le fichier ne sera pas déplacé.)","html":"(Si une entrée est incluse dans la liste de correctifs, l'élément de registre sera restauré par défaut ou supprimé. Le fichier ne sera pas déplacé.)
"},{"id":"text-7","type":"text","heading":"","plain_text":"HKLM … Run: [RtHDVCpl] => C: Program Files Realtek Audio HDA RtDCpl64.exe [2907240 2011-07-20] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)\nHKLM … Run: [TdmNotify] => C: Program Files Dell Dell Data Protection Access Advanced Wave Trusted Drive Manager TdmNotify.exe [381296 2011-12-08] (Wave Systems Corp. -> Wave Systems Corp.)\nHKLM … Run: [MSC] => C: Program Files Microsoft Security Client msseces.exe [1353680 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nHKLM-x32 … Exécuter: [IAStorIcon] => C: Program Files (x86) Intel Intel® Rapid Storage Technology IAStorIcon.exe [284440 2011-11-29] (Intel Corporation -> Intel Corporation)\nHKLM-x32 … Exécuter: [IMSS] => C: Program Files (x86) Intel Intel® Management Engine Components IMSS PIconStartup.exe [134616 2013-11-13] (Intel Corporation – Logiciels et micrologiciels -> Intel Corporation)\nHKLM-x32 … Exécuter: [USB3MON] => C: Program Files (x86) Intel Intel® USB 3.0 eXtensible Host Controller Driver Application iusb3mon.exe [291608 2012-02-27] (Intel Corporation -> Intel Corporation)\nHKLM-x32 … Exécuter: [PeachtreePrefetcher.exe] => C: Program Files (x86) Sage Peachtree PeachtreePrefetcher.exe [328736 2019-10-01] (Sage Software, Inc. -> Sage Software, Inc.)\nHKLM-x32 … Exécuter: [EEventManager] => C: Program Files (x86) Epson Software Event Manager EEventManager.exe [1058880 2013-03-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nHKLM-x32 … Exécuter: [SSBkgdUpdate] => C: Program Files (x86) Fichiers communs Scansoft Shared SSBkgdUpdate SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc. -> Nuance Communications, Inc.)\nHKLM-x32 … Exécuter: [PaperPort PTD] => C: Program Files (x86) ScanSoft PaperPort pptd40nt.exe [29984 2008-01-14] (Nuance Communications, Inc. -> Nuance Communications, Inc.)\nHKLM-x32 … Exécuter: [IndexSearch] => C: Program Files (x86) ScanSoft PaperPort IndexSearch.exe [46368 2008-01-14] (Nuance Communications, Inc. -> Nuance Communications, Inc.)\nHKLM-x32 … Exécuter: [PPort11reminder] => C: Program Files (x86) ScanSoft PaperPort Ereg Ereg.exe [328992 2007-08-31] (Nuance Communications, Inc. -> Nuance Communications, Inc.)\nHKLM-x32 … Exécuter: [Norton Ghost 15.0] => C: Program Files (x86) Norton Ghost Agent VProTray.exe [2598760 2010-03-03] (Symantec Corporation -> Symantec Corporation)\nHKLM-x32 … Exécuter: [FUFAXRCV] => C: Program Files (x86) Epson Software FAX Utility FUFAXRCV.exe [642664 2014-05-26] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nHKLM-x32 … Exécuter: [FUFAXSTM] => C: Program Files (x86) Epson Software FAX Utility FUFAXSTM.exe [863848 2014-05-26] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nHKLM-x32 … Exécuter: [] => [X]\nHKLM-x32 … Exécuter: [HPUsageTrackingLEDM] => "C: Program Files (x86) HP HP UT LEDM bin hppusg.exe" "C: Program Files (x86) HP HP UT LEDM "\nHKLM-x32 … Exécuter: [DBAgent] => C: Program Files (x86) Seagate Seagate Dashboard 2.0 DBAgent.exe [1540896 2015-07-15] (Seagate Technology LLC -> Seagate Technology LLC)\nHKLM-x32 … Exécuter: [DLSWebSvc] => C: Program Files (x86) DYMO DYMO Label Software DYMO.DLS.Printing.Host.exe [4871680 2017-05-09] (DYMO) [File not signed]\nHKLM-x32 … RunOnce: [ZZPT001] => C: Program Files (x86) Sage Peachtree Peachw.exe [354848 2019-10-01] (Sage Software, Inc. -> Sage Software, Inc.)\nHKLM-x32 … RunOnce: [ZZPT002] => C: Program Files (x86) Sage Peachtree Peachw.exe [354848 2019-10-01] (Sage Software, Inc. -> Sage Software, Inc.)\nHKLM … Policies Explorer: [NoStrCmpLogical] 1\nHKU S-1-5-21-928097801-345109163-1125972616-1104 … Run: [DellSystemDetect] => C: Users GemmitiA AppData Local Apps 2.0 82RYGLLL.5KY TT48BPWH.BTP dell..tion_831211ca63b981c5_0008.0008_b150a6542eb950c1 DellSystemDetect.exe [314544 2017-09-13] (Dell Inc -> Dell)\nHKU S-1-5-21-928097801-345109163-1125972616-1107 … Exécuter: [DymoQuickPrint] => C: Program Files (x86) DYMO DYMO Label Software DymoQuickPrint.exe [2033664 2017-05-09] (Sanford, L.P.) [File not signed]\nHKU S-1-5-21-928097801-345109163-1125972616-1107 … Exécuter: [turnedneutral] => "C: Users KMiele AppData Local Turnneutral Turnneutral.exe"\nHKLM … Windows x64 Processeurs d'impression GoToMyPC Print Processor: C: Windows System32 spool prtprocs x64 GoToPrintProcessor_x64.dll [52080 2011-11-13] (Citrix Online -> Citrix Online, une division de Citrix Systems, Inc.)\nHKLM … Windows x64 Processeurs d'impression HP1100PrintProc: C: Windows System32 spool prtprocs x64 HP1100PP.DLL [74240 2012-08-31] (Éditeur de compatibilité matérielle Microsoft Windows ->)\nHKLM … Windows x64 Processeurs d'impression hpfppw73: C: Windows System32 spool prtprocs x64 hpfppw73.dll [258048 2009-07-13] (Microsoft Windows -> Hewlett-Packard Corporation)\nHKLM … Windows x64 Processeurs d'impression hpzpplhn: C: Windows System32 spool prtprocs x64 hpzpplhn.dll [99840 2008-05-07] (Hewlett-Packard Corporation) [File not signed]\nHKLM … Print Monitors C287SeriesPCL Language Monitor: C: Windows system32 KOAXTJ_L.DLL [16896 2017-07-04] (KONICA MINOLTA, INC.) [File not signed]\nHKLM … Print Monitors CutePDF Writer Monitor v3.2: C: Windows system32 cpwmon64_v32.dll [90096 2017-05-26] (Acro Software Inc ->)\nHKLM … Print Monitors DYMO LabelWriter Monitor: C: Windows system32 LW400MON.DLL [16384 2017-05-09] (Éditeur de compatibilité matérielle Microsoft Windows -> DYMO Corp.)\nHKLM … Print Monitors EPSON Stylus Photo 1400 Series 64MonitorBA: C: Windows system32 E_ILMBUA.DLL [126976 2006-08-10] (Éditeur de compatibilité matérielle Microsoft Windows -> SEIKO EPSON CORPORATION)\nHKLM … Print Monitors EPSON WF-7610 Series 64MonitorBE: C: Windows system32 E_YLMBKBE.DLL [179712 2013-10-22] (Éditeur de compatibilité matérielle Microsoft Windows -> SEIKO EPSON CORPORATION)\nHKLM … Print Monitors EpsonNet Print Port: C: Windows system32 enppmon.dll [558592 2012-11-12] (SEIKO EPSON CORPORATION) [File not signed]\nHKLM … Print Monitors Port GoToMyPC: C: Windows system32 gotomon_x64.dll [120176 2011-11-13] (Citrix Online -> Citrix Online, une division de Citrix Systems, Inc.)\nHKLM … Print Monitors HP1100LM: C: Windows system32 HP1100LM.DLL [288768 2012-08-31] (Éditeur de compatibilité matérielle Microsoft Windows ->)\nHKLM … Print Monitors PCL hpf3lw73: C: Windows system32 hpf3lw73.dll [48640 2009-07-13] (Microsoft Windows -> Hewlett-Packard Company)\nHKLM … Print Monitors PJL Language Monitor: C: Windows system32 PJLMON.DLL [22016 2010-11-20] (Microsoft Windows -> Microsoft Corporation)\nHKLM … Print Monitors WSD Port: C: Windows system32 WSDMon.dll [224768 2009-07-13] (Microsoft Windows -> Microsoft Corporation)\nHKLM Software Microsoft Active Setup Installed Components: [2D46B6DC-2207-486B-B523-A557E6D54B47] -> C: Windows system32 cmd.exe / D / C démarrer C: Windows system32 ie4uinit.exe -ClearIconCache\nHKLM Software Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> C: Program Files (x86) Google Chrome Application 83.0.4103.61 Installer chrmstp.exe [2020-05-21] (Google LLC -> Google LLC)\nHKLM Software Wow6432Node Microsoft Active Setup Installed Components: [2D46B6DC-2207-486B-B523-A557E6D54B47] -> C: Windows system32 cmd.exe / D / C démarrer C: Windows system32 ie4uinit.exe -ClearIconCache\nHKLM Software Wow6432Node Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> "C: Program Files (x86) Google Chrome Application 58.0.3029.81 Installer chrmstp.exe" –configure-user-settings –verbose-logging –system-level\nHKLM Software Wow6432Node Microsoft Active Setup Installed Components: [A6EADE66-0000-0000-484E-7E8A45000000] -> C: Program Files (x86) Adobe Acrobat Reader DC Esl AiodLite.dll [2020-05-03] (Adobe Inc. -> Adobe Systems, Inc.)\nHKLM Software … Authentication Credential Providers: [18CBEEAA-6708-41A1-9379-D08915333CF2] -> C: Program Files Fichiers communs SPBA provider.dll [2010-09-15] (UPEK Inc. -> UPEK Inc.)\nHKLM Software … Authentication Credential Providers: [F8A0B131-5F68-486c-8040-7E8FC3C85BB6] -> C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDCREDPROV.DLL [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nHKLM Software … Authentication Credential Provider Filters: [AE583D93-8D1B-424F-9858-5623FB7824EE] -> C: Program Files Fichiers communs SPBA provider.dll [2010-09-15] (UPEK Inc. -> UPEK Inc.)\nLsa: [Authentication Packages] msv1_0 wvauth\nDémarrage: C: Users KMiele AppData Roaming Microsoft Windows Start Menu Programs Startup Send to OneNote.lnk [2019-04-15]\nShortcutTarget: Envoyer à OneNote.lnk -> C: Program Files (x86) Microsoft Office root Office16 ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)\nDémarrage: C: Users KMiele AppData Roaming Microsoft Windows Start Menu Programs Startup Synology Active Backup for Business Agent.lnk [2020-05-30]\nShortcutTarget: Synology Active Backup for Business Agent.lnk -> C: Program Files (x86) Synology ActiveBackupforBusinessAgent ui ui Synology Active Backup for Business Agent.exe (Synology Inc. -> Synology Inc.)\nGroupPolicy: Restriction? <==== ATTENTION","html":"HKLM … Run: [RtHDVCpl] => C: Program Files Realtek Audio HDA RtDCpl64.exe [2907240 2011-07-20] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)\nHKLM … Run: [TdmNotify] => C: Program Files Dell Dell Data Protection Access Advanced Wave Trusted Drive Manager TdmNotify.exe [381296 2011-12-08] (Wave Systems Corp. -> Wave Systems Corp.)\nHKLM … Run: [MSC] => C: Program Files Microsoft Security Client msseces.exe [1353680 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nHKLM-x32 … Exécuter: [IAStorIcon] => C: Program Files (x86) Intel Intel® Rapid Storage Technology IAStorIcon.exe [284440 2011-11-29] (Intel Corporation -> Intel Corporation)\nHKLM-x32 … Exécuter: [IMSS] => C: Program Files (x86) Intel Intel® Management Engine Components IMSS PIconStartup.exe [134616 2013-11-13] (Intel Corporation – Logiciels et micrologiciels -> Intel Corporation)\nHKLM-x32 … Exécuter: [USB3MON] => C: Program Files (x86) Intel Intel® USB 3.0 eXtensible Host Controller Driver Application iusb3mon.exe [291608 2012-02-27] (Intel Corporation -> Intel Corporation)\nHKLM-x32 … Exécuter: [PeachtreePrefetcher.exe] => C: Program Files (x86) Sage Peachtree PeachtreePrefetcher.exe [328736 2019-10-01] (Sage Software, Inc. -> Sage Software, Inc.)\nHKLM-x32 … Exécuter: [EEventManager] => C: Program Files (x86) Epson Software Event Manager EEventManager.exe [1058880 2013-03-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nHKLM-x32 … Exécuter: [SSBkgdUpdate] => C: Program Files (x86) Fichiers communs Scansoft Shared SSBkgdUpdate SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc. -> Nuance Communications, Inc.)\nHKLM-x32 … Exécuter: [PaperPort PTD] => C: Program Files (x86) ScanSoft PaperPort pptd40nt.exe [29984 2008-01-14] (Nuance Communications, Inc. -> Nuance Communications, Inc.)\nHKLM-x32 … Exécuter: [IndexSearch] => C: Program Files (x86) ScanSoft PaperPort IndexSearch.exe [46368 2008-01-14] (Nuance Communications, Inc. -> Nuance Communications, Inc.)\nHKLM-x32 … Exécuter: [PPort11reminder] => C: Program Files (x86) ScanSoft PaperPort Ereg Ereg.exe [328992 2007-08-31] (Nuance Communications, Inc. -> Nuance Communications, Inc.)\nHKLM-x32 … Exécuter: [Norton Ghost 15.0] => C: Program Files (x86) Norton Ghost Agent VProTray.exe [2598760 2010-03-03] (Symantec Corporation -> Symantec Corporation)\nHKLM-x32 … Exécuter: [FUFAXRCV] => C: Program Files (x86) Epson Software FAX Utility FUFAXRCV.exe [642664 2014-05-26] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nHKLM-x32 … Exécuter: [FUFAXSTM] => C: Program Files (x86) Epson Software FAX Utility FUFAXSTM.exe [863848 2014-05-26] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nHKLM-x32 … Exécuter: [] => [X]\nHKLM-x32 … Exécuter: [HPUsageTrackingLEDM] => "C: Program Files (x86) HP HP UT LEDM bin hppusg.exe" "C: Program Files (x86) HP HP UT LEDM "\nHKLM-x32 … Exécuter: [DBAgent] => C: Program Files (x86) Seagate Seagate Dashboard 2.0 DBAgent.exe [1540896 2015-07-15] (Seagate Technology LLC -> Seagate Technology LLC)\nHKLM-x32 … Exécuter: [DLSWebSvc] => C: Program Files (x86) DYMO DYMO Label Software DYMO.DLS.Printing.Host.exe [4871680 2017-05-09] (DYMO) [File not signed]\nHKLM-x32 … RunOnce: [ZZPT001] => C: Program Files (x86) Sage Peachtree Peachw.exe [354848 2019-10-01] (Sage Software, Inc. -> Sage Software, Inc.)\nHKLM-x32 … RunOnce: [ZZPT002] => C: Program Files (x86) Sage Peachtree Peachw.exe [354848 2019-10-01] (Sage Software, Inc. -> Sage Software, Inc.)\nHKLM … Policies Explorer: [NoStrCmpLogical] 1\nHKU S-1-5-21-928097801-345109163-1125972616-1104 … Run: [DellSystemDetect] => C: Users GemmitiA AppData Local Apps 2.0 82RYGLLL.5KY TT48BPWH.BTP dell..tion_831211ca63b981c5_0008.0008_b150a6542eb950c1 DellSystemDetect.exe [314544 2017-09-13] (Dell Inc -> Dell)\nHKU S-1-5-21-928097801-345109163-1125972616-1107 … Exécuter: [DymoQuickPrint] => C: Program Files (x86) DYMO DYMO Label Software DymoQuickPrint.exe [2033664 2017-05-09] (Sanford, L.P.) [File not signed]\nHKU S-1-5-21-928097801-345109163-1125972616-1107 … Exécuter: [turnedneutral] => "C: Users KMiele AppData Local Turnneutral Turnneutral.exe"\nHKLM … Windows x64 Processeurs d'impression GoToMyPC Print Processor: C: Windows System32 spool prtprocs x64 GoToPrintProcessor_x64.dll [52080 2011-11-13] (Citrix Online -> Citrix Online, une division de Citrix Systems, Inc.)\nHKLM … Windows x64 Processeurs d'impression HP1100PrintProc: C: Windows System32 spool prtprocs x64 HP1100PP.DLL [74240 2012-08-31] (Éditeur de compatibilité matérielle Microsoft Windows ->)\nHKLM … Windows x64 Processeurs d'impression hpfppw73: C: Windows System32 spool prtprocs x64 hpfppw73.dll [258048 2009-07-13] (Microsoft Windows -> Hewlett-Packard Corporation)\nHKLM … Windows x64 Processeurs d'impression hpzpplhn: C: Windows System32 spool prtprocs x64 hpzpplhn.dll [99840 2008-05-07] (Hewlett-Packard Corporation) [File not signed]\nHKLM … Print Monitors C287SeriesPCL Language Monitor: C: Windows system32 KOAXTJ_L.DLL [16896 2017-07-04] (KONICA MINOLTA, INC.) [File not signed]\nHKLM … Print Monitors CutePDF Writer Monitor v3.2: C: Windows system32 cpwmon64_v32.dll [90096 2017-05-26] (Acro Software Inc ->)\nHKLM … Print Monitors DYMO LabelWriter Monitor: C: Windows system32 LW400MON.DLL [16384 2017-05-09] (Éditeur de compatibilité matérielle Microsoft Windows -> DYMO Corp.)\nHKLM … Print Monitors EPSON Stylus Photo 1400 Series 64MonitorBA: C: Windows system32 E_ILMBUA.DLL [126976 2006-08-10] (Éditeur de compatibilité matérielle Microsoft Windows -> SEIKO EPSON CORPORATION)\nHKLM … Print Monitors EPSON WF-7610 Series 64MonitorBE: C: Windows system32 E_YLMBKBE.DLL [179712 2013-10-22] (Éditeur de compatibilité matérielle Microsoft Windows -> SEIKO EPSON CORPORATION)\nHKLM … Print Monitors EpsonNet Print Port: C: Windows system32 enppmon.dll [558592 2012-11-12] (SEIKO EPSON CORPORATION) [File not signed]\nHKLM … Print Monitors Port GoToMyPC: C: Windows system32 gotomon_x64.dll [120176 2011-11-13] (Citrix Online -> Citrix Online, une division de Citrix Systems, Inc.)\nHKLM … Print Monitors HP1100LM: C: Windows system32 HP1100LM.DLL [288768 2012-08-31] (Éditeur de compatibilité matérielle Microsoft Windows ->)\nHKLM … Print Monitors PCL hpf3lw73: C: Windows system32 hpf3lw73.dll [48640 2009-07-13] (Microsoft Windows -> Hewlett-Packard Company)\nHKLM … Print Monitors PJL Language Monitor: C: Windows system32 PJLMON.DLL [22016 2010-11-20] (Microsoft Windows -> Microsoft Corporation)\nHKLM … Print Monitors WSD Port: C: Windows system32 WSDMon.dll [224768 2009-07-13] (Microsoft Windows -> Microsoft Corporation)\nHKLM Software Microsoft Active Setup Installed Components: [2D46B6DC-2207-486B-B523-A557E6D54B47] -> C: Windows system32 cmd.exe / D / C démarrer C: Windows system32 ie4uinit.exe -ClearIconCache\nHKLM Software Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> C: Program Files (x86) Google Chrome Application 83.0.4103.61 Installer chrmstp.exe [2020-05-21] (Google LLC -> Google LLC)\nHKLM Software Wow6432Node Microsoft Active Setup Installed Components: [2D46B6DC-2207-486B-B523-A557E6D54B47] -> C: Windows system32 cmd.exe / D / C démarrer C: Windows system32 ie4uinit.exe -ClearIconCache\nHKLM Software Wow6432Node Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> "C: Program Files (x86) Google Chrome Application 58.0.3029.81 Installer chrmstp.exe" –configure-user-settings –verbose-logging –system-level\nHKLM Software Wow6432Node Microsoft Active Setup Installed Components: [A6EADE66-0000-0000-484E-7E8A45000000] -> C: Program Files (x86) Adobe Acrobat Reader DC Esl AiodLite.dll [2020-05-03] (Adobe Inc. -> Adobe Systems, Inc.)\nHKLM Software … Authentication Credential Providers: [18CBEEAA-6708-41A1-9379-D08915333CF2] -> C: Program Files Fichiers communs SPBA provider.dll [2010-09-15] (UPEK Inc. -> UPEK Inc.)\nHKLM Software … Authentication Credential Providers: [F8A0B131-5F68-486c-8040-7E8FC3C85BB6] -> C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDCREDPROV.DLL [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nHKLM Software … Authentication Credential Provider Filters: [AE583D93-8D1B-424F-9858-5623FB7824EE] -> C: Program Files Fichiers communs SPBA provider.dll [2010-09-15] (UPEK Inc. -> UPEK Inc.)\nLsa: [Authentication Packages] msv1_0 wvauth\nDémarrage: C: Users KMiele AppData Roaming Microsoft Windows Start Menu Programs Startup Send to OneNote.lnk [2019-04-15]\nShortcutTarget: Envoyer à OneNote.lnk -> C: Program Files (x86) Microsoft Office root Office16 ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)\nDémarrage: C: Users KMiele AppData Roaming Microsoft Windows Start Menu Programs Startup Synology Active Backup for Business Agent.lnk [2020-05-30]\nShortcutTarget: Synology Active Backup for Business Agent.lnk -> C: Program Files (x86) Synology ActiveBackupforBusinessAgent ui ui Synology Active Backup for Business Agent.exe (Synology Inc. -> Synology Inc.)\nGroupPolicy: Restriction? <==== ATTENTION
"},{"id":"text-8","type":"text","heading":"","plain_text":"==================== Tâches planifiées (liste blanche) ============","html":"==================== Tâches planifiées (liste blanche) ============
"},{"id":"text-9","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)","html":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)
"},{"id":"text-10","type":"text","heading":"","plain_text":"Tâche: 081E9A99-734F-4FAE-8444-FF5BCE42CC94 – System32 Tasks GoogleUpdateTaskMachineCore => C: Program Files (x86) Google Update GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)\nTâche: 14E0E16B-CDD3-4715-A764-AB5077A8387C – System32 Tasks B923A7E4-5A7D-4E36-A826-F910D94CCC00 => C: Windows system32 pcalua.exe -a C: sage SAGE50_2015_2 setup.exe -dc: sage SAGE50_2015_2\nTâche: 15BC1BFC-E634-469A-A715-ECE4F1F62C74 – System32 Tasks Microsoft Microsoft Antimalware Microsoft Antimalware Scheduled Scan => C: Program Files Microsoft Security Client \\ MpCmdRun.exe [410784 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nTâche: 1C64426A-6BD3-46D2-A7B2-4A8B602C7956 – System32 Tasks Microsoft Office Office Feature Updates => C: Program Files (x86) Microsoft Office root Office16 sdxhelper.exe [115024 2020-05-16] (Microsoft Corporation -> Microsoft Corporation)\nTâche: 4684A218-CD5E-469F-B669-CF01DCA07962 – System32 Tasks 67ACF55C-EB72-425E-AB3F-35948FD488B3 => C: Program Files (x86) Camlink GBExplorer.exe\nTâche: 4BDABF97-7E25-4293-841E-C93B30A11D39 – System32 Tasks EPSON WF-7610 Series Invitation FF28E7AF-4CCD-468C-A99D-00F55294ED94 => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 59372F2D-71EE-468D-9F15-C6607CAC405D – Mise à jour de la série System32 Tasks EPSON WF-7610 39C1617B-E859-4EF3-B298-7E9FB6CA08E0 => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 5A1C4ED0-83EC-4907-995D-8B5D13CAA627 – System32 Tasks EPSON WF-7610 Series Invitation 5C8C4560-2AA2-4E44-AEF1-4B9AEDB0323F => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 5C5C9012-45CD-4B0C-8027-3E9F82A6AE46 – System32 Tasks Seagate_Install_Launch => C: Program Files (x86) Seagate Seagate Dashboard 2.0 Dashboard.exe [1964832 2015-07-15] (Seagate Technology LLC -> Seagate Technology LLC)\nTâche: 5EE99B02-4140-4D82-A422-4CD8BAD5FF97 – Mise à jour de la série System32 Tasks EPSON WF-7610 5C8C4560-2AA2-4E44-AEF1-4B9AEDB0323F => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 7C00AC32-2329-4E49-A396-84813BEC25CE – Maintenance des abonnements System32 Tasks Microsoft Office Office => C: Program Files (x86) Microsoft Office root vfs ProgramFilesCommonx86 Microsoft Shared Office16 OLicenseHeartbeat.exe [1443712 2020-05-16] (Microsoft Corporation -> Microsoft Corporation)\nTâche: 8AF49B31-0E1E-41E9-BC82-9F5FC25A5251 – System32 Tasks Adobe Flash Player Updater => C: Windows SysWOW64 Macromed Flash FlashPlayerUpdateService.exe [335416 2020-05-12] (Adobe Inc. -> Adobe)\nTâche: 8B3D8F3C-87B3-4138-94D0-086AD77F90FB – System32 Tasks 3BA22ECB-313A-484F-9D1F-BDCCEEFD4B0F => C: Windows system32 pcalua.exe -a "C: Users KM AppData Local Microsoft Windows Temporary Internet Files Content.IE5 9UYR0S67 gosetup.exe "-d C: Users KM Desktop\nTâche: 8C9007F7-F400-414A-A9A1-5EA247100A36 – Mise à jour de la série System32 Tasks EPSON WF-7610 FF28E7AF-4CCD-468C-A99D-00F55294ED94 => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 94C8FCE1-A0E0-4925-99A3-CBF4876FBC5A – Tâche de mise à jour System32 Tasks Microsoft Windows Live SOXE Extractor Definitions => 3519154C-227E-47F3-9CC9-12C3F05817F1\nTâche: 9DEF0C85-9A20-45A8-9F83-94B6E19AD0E2 – System32 Tasks 232A9230-3654-4161-A4A5-63B3A050B7B2 => C: Windows system32 pcalua.exe -a C: Users KM Téléchargements gosetup.exe -d C: Users KM Desktop\nTâche: 9F766520-5A1E-43C2-A4E5-14024BFC427C – System32 Tasks EPSON WF-7610 Series Invitation F041DFFD-6EE2-46E8-AF61-EDAD1E811B30 => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: A512C446-CF09-4DC3-BF68-9350E109231D – System32 Tasks G2MUpdateTask-S-1-5-21-302665900-850237627-724062673-1000 => C: Program Files (x86) GoToMeeting 7495 g2mupdate.exe [31808 2017-08-24] (LogMeIn, Inc. -> LogMeIn, Inc.)\nTâche: AC6732F2-23EC-47C4-B6B0-E35829E3A930 – System32 Tasks Microsoft Office Office Automatic Updates 2.0 => C: Program Files Common Files Microsoft Shared ClickToRun OfficeC2RClient.exe [24608104 2020-05-07] (Microsoft Corporation -> Microsoft Corporation)\nTâche: C62FAD65-BF38-4B2E-BE4A-F3C77CABA3E2 – Connexion aux mises à jour des fonctionnalités System32 Tasks Microsoft Office Office => C: Program Files (x86) Microsoft Office root Office16 sdxhelper.exe [115024 2020-05-16] (Microsoft Corporation -> Microsoft Corporation)\nTâche: D0842C2F-834D-49C4-BF3B-CF3E9C6545DF – System32 Tasks G2MUploadTask-S-1-5-21-302665900-850237627-724062673-1000 => C: Program Files (x86) GoToMeeting 7495 g2mupload.exe [31808 2017-08-24] (LogMeIn, Inc. -> LogMeIn, Inc.)\nTâche: D63E8E00-9071-40B5-B259-97A5D07697CC – System32 Tasks Microsoft Office Office ClickToRun Service Monitor => C: Program Files Common Files Microsoft Shared ClickToRun OfficeC2RClient.exe [24608104 2020-05-07] (Microsoft Corporation -> Microsoft Corporation)\nTâche: D8C389D4-15F0-4926-B965-FCE13ABB651F – System32 Tasks 5536D2D1-0187-4B91-BF5B-BDD9B8792EFA => C: Program Files (x86) Camlink GBExplorer.exe\nTâche: E357B89D-9D72-4889-9C8B-B5067C6DA9EC – System32 Tasks GoogleUpdateTaskMachineUA => C: Program Files (x86) Google Update GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)\nTâche: E5F20D9E-C9B5-49CB-B6DE-934F1D537789 – System32 Tasks EPSON WF-7610 Series Invitation 39C1617B-E859-4EF3-B298-7E9FB6CA08E0 => C: Windows system32 spool DRI DRI 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: EB87F4E5-1239-453E-8914-6D524EEA822A – Tâche de mise à jour System32 Tasks Adobe Acrobat => C: Program Files (x86) Common Files Adobe ARM 1.0 AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)\nTâche: F60ECC63-0AC2-46F1-A928-D7DE00352D1A – System32 Tasks KM DBAgent 2 0 => C: Program Files (x86) Seagate Seagate Dashboard 2.0 DBAgent.exe [1540896 2015-07-15] (Seagate Technology LLC -> Seagate Technology LLC)\nTâche: FE14E6A5-EF5A-4338-BF4C-8B9EE7A4EC2C – System32 Tasks EPSON WF-7610 Series Update F041DFFD-6EE2-46E8-AF61-EDAD1E811B30 => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)","html":"Tâche: 081E9A99-734F-4FAE-8444-FF5BCE42CC94 – System32 Tasks GoogleUpdateTaskMachineCore => C: Program Files (x86) Google Update GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)\nTâche: 14E0E16B-CDD3-4715-A764-AB5077A8387C – System32 Tasks B923A7E4-5A7D-4E36-A826-F910D94CCC00 => C: Windows system32 pcalua.exe -a C: sage SAGE50_2015_2 setup.exe -dc: sage SAGE50_2015_2\nTâche: 15BC1BFC-E634-469A-A715-ECE4F1F62C74 – System32 Tasks Microsoft Microsoft Antimalware Microsoft Antimalware Scheduled Scan => C: Program Files Microsoft Security Client \\ MpCmdRun.exe [410784 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nTâche: 1C64426A-6BD3-46D2-A7B2-4A8B602C7956 – System32 Tasks Microsoft Office Office Feature Updates => C: Program Files (x86) Microsoft Office root Office16 sdxhelper.exe [115024 2020-05-16] (Microsoft Corporation -> Microsoft Corporation)\nTâche: 4684A218-CD5E-469F-B669-CF01DCA07962 – System32 Tasks 67ACF55C-EB72-425E-AB3F-35948FD488B3 => C: Program Files (x86) Camlink GBExplorer.exe\nTâche: 4BDABF97-7E25-4293-841E-C93B30A11D39 – System32 Tasks EPSON WF-7610 Series Invitation FF28E7AF-4CCD-468C-A99D-00F55294ED94 => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 59372F2D-71EE-468D-9F15-C6607CAC405D – Mise à jour de la série System32 Tasks EPSON WF-7610 39C1617B-E859-4EF3-B298-7E9FB6CA08E0 => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 5A1C4ED0-83EC-4907-995D-8B5D13CAA627 – System32 Tasks EPSON WF-7610 Series Invitation 5C8C4560-2AA2-4E44-AEF1-4B9AEDB0323F => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 5C5C9012-45CD-4B0C-8027-3E9F82A6AE46 – System32 Tasks Seagate_Install_Launch => C: Program Files (x86) Seagate Seagate Dashboard 2.0 Dashboard.exe [1964832 2015-07-15] (Seagate Technology LLC -> Seagate Technology LLC)\nTâche: 5EE99B02-4140-4D82-A422-4CD8BAD5FF97 – Mise à jour de la série System32 Tasks EPSON WF-7610 5C8C4560-2AA2-4E44-AEF1-4B9AEDB0323F => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 7C00AC32-2329-4E49-A396-84813BEC25CE – Maintenance des abonnements System32 Tasks Microsoft Office Office => C: Program Files (x86) Microsoft Office root vfs ProgramFilesCommonx86 Microsoft Shared Office16 OLicenseHeartbeat.exe [1443712 2020-05-16] (Microsoft Corporation -> Microsoft Corporation)\nTâche: 8AF49B31-0E1E-41E9-BC82-9F5FC25A5251 – System32 Tasks Adobe Flash Player Updater => C: Windows SysWOW64 Macromed Flash FlashPlayerUpdateService.exe [335416 2020-05-12] (Adobe Inc. -> Adobe)\nTâche: 8B3D8F3C-87B3-4138-94D0-086AD77F90FB – System32 Tasks 3BA22ECB-313A-484F-9D1F-BDCCEEFD4B0F => C: Windows system32 pcalua.exe -a "C: Users KM AppData Local Microsoft Windows Temporary Internet Files Content.IE5 9UYR0S67 gosetup.exe "-d C: Users KM Desktop\nTâche: 8C9007F7-F400-414A-A9A1-5EA247100A36 – Mise à jour de la série System32 Tasks EPSON WF-7610 FF28E7AF-4CCD-468C-A99D-00F55294ED94 => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 94C8FCE1-A0E0-4925-99A3-CBF4876FBC5A – Tâche de mise à jour System32 Tasks Microsoft Windows Live SOXE Extractor Definitions => 3519154C-227E-47F3-9CC9-12C3F05817F1\nTâche: 9DEF0C85-9A20-45A8-9F83-94B6E19AD0E2 – System32 Tasks 232A9230-3654-4161-A4A5-63B3A050B7B2 => C: Windows system32 pcalua.exe -a C: Users KM Téléchargements gosetup.exe -d C: Users KM Desktop\nTâche: 9F766520-5A1E-43C2-A4E5-14024BFC427C – System32 Tasks EPSON WF-7610 Series Invitation F041DFFD-6EE2-46E8-AF61-EDAD1E811B30 => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: A512C446-CF09-4DC3-BF68-9350E109231D – System32 Tasks G2MUpdateTask-S-1-5-21-302665900-850237627-724062673-1000 => C: Program Files (x86) GoToMeeting 7495 g2mupdate.exe [31808 2017-08-24] (LogMeIn, Inc. -> LogMeIn, Inc.)\nTâche: AC6732F2-23EC-47C4-B6B0-E35829E3A930 – System32 Tasks Microsoft Office Office Automatic Updates 2.0 => C: Program Files Common Files Microsoft Shared ClickToRun OfficeC2RClient.exe [24608104 2020-05-07] (Microsoft Corporation -> Microsoft Corporation)\nTâche: C62FAD65-BF38-4B2E-BE4A-F3C77CABA3E2 – Connexion aux mises à jour des fonctionnalités System32 Tasks Microsoft Office Office => C: Program Files (x86) Microsoft Office root Office16 sdxhelper.exe [115024 2020-05-16] (Microsoft Corporation -> Microsoft Corporation)\nTâche: D0842C2F-834D-49C4-BF3B-CF3E9C6545DF – System32 Tasks G2MUploadTask-S-1-5-21-302665900-850237627-724062673-1000 => C: Program Files (x86) GoToMeeting 7495 g2mupload.exe [31808 2017-08-24] (LogMeIn, Inc. -> LogMeIn, Inc.)\nTâche: D63E8E00-9071-40B5-B259-97A5D07697CC – System32 Tasks Microsoft Office Office ClickToRun Service Monitor => C: Program Files Common Files Microsoft Shared ClickToRun OfficeC2RClient.exe [24608104 2020-05-07] (Microsoft Corporation -> Microsoft Corporation)\nTâche: D8C389D4-15F0-4926-B965-FCE13ABB651F – System32 Tasks 5536D2D1-0187-4B91-BF5B-BDD9B8792EFA => C: Program Files (x86) Camlink GBExplorer.exe\nTâche: E357B89D-9D72-4889-9C8B-B5067C6DA9EC – System32 Tasks GoogleUpdateTaskMachineUA => C: Program Files (x86) Google Update GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)\nTâche: E5F20D9E-C9B5-49CB-B6DE-934F1D537789 – System32 Tasks EPSON WF-7610 Series Invitation 39C1617B-E859-4EF3-B298-7E9FB6CA08E0 => C: Windows system32 spool DRI DRI 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: EB87F4E5-1239-453E-8914-6D524EEA822A – Tâche de mise à jour System32 Tasks Adobe Acrobat => C: Program Files (x86) Common Files Adobe ARM 1.0 AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)\nTâche: F60ECC63-0AC2-46F1-A928-D7DE00352D1A – System32 Tasks KM DBAgent 2 0 => C: Program Files (x86) Seagate Seagate Dashboard 2.0 DBAgent.exe [1540896 2015-07-15] (Seagate Technology LLC -> Seagate Technology LLC)\nTâche: FE14E6A5-EF5A-4338-BF4C-8B9EE7A4EC2C – System32 Tasks EPSON WF-7610 Series Update F041DFFD-6EE2-46E8-AF61-EDAD1E811B30 => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
"},{"id":"text-11","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, le fichier de tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)","html":"(Si une entrée est incluse dans la liste de correctifs, le fichier de tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
"},{"id":"text-12","type":"text","heading":"","plain_text":"Tâche: C: Windows Tasks EPSON WF-7610 Series Invitation 39C1617B-E859-4EF3-B298-7E9FB6CA08E0 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE\nTâche: C: Windows Tasks EPSON WF-7610 Series Invitation 5C8C4560-2AA2-4E44-AEF1-4B9AEDB0323F .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE\nTâche: C: Windows Tasks EPSON WF-7610 Series Invitation F041DFFD-6EE2-46E8-AF61-EDAD1E811B30 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE\nTâche: C: Windows Tasks EPSON WF-7610 Series Invitation FF28E7AF-4CCD-468C-A99D-00F55294ED94 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE\nTâche: C: Windows Tasks EPSON WF-7610 Series Update 39C1617B-E859-4EF3-B298-7E9FB6CA08E0 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE: / EXE: 39C1617B-E859-4EF3-B298-7E9FB6CA08E0 / F: UpdateSYSTEMĊRecherche les mises à jour du logiciel EPSON et vous avertit lorsque des mises à jour sont disponibles.Si cette tâche est désactivée ou arrêtée, votre logiciel EPSON ne sera pas automatiquement mis à jour automatiquement. Thi\nTâche: C: Windows Tasks EPSON WF-7610 Series Update 5C8C4560-2AA2-4E44-AEF1-4B9AEDB0323F .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE: / EXE: 5C8C4560-2AA2-4E44-AEF1-4B9AEDB0323F / F: UpdateSYSTEMĊRecherche les mises à jour du logiciel EPSON et vous avertit lorsque des mises à jour sont disponibles.Si cette tâche est désactivée ou arrêtée, votre logiciel EPSON ne sera pas automatiquement mis à jour automatiquement. Thi\nTâche: C: Windows Tasks EPSON WF-7610 Series Update F041DFFD-6EE2-46E8-AF61-EDAD1E811B30 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE: / EXE: F041DFFD-6EE2-46E8-AF61-EDAD1E811B30 / F: UpdateSYSTEMĊRecherche les mises à jour du logiciel EPSON et vous avertit lorsque des mises à jour sont disponibles.Si cette tâche est désactivée ou arrêtée, votre logiciel EPSON ne sera pas automatiquement mis à jour automatiquement. Thi\nTâche: C: Windows Tasks EPSON WF-7610 Series Update FF28E7AF-4CCD-468C-A99D-00F55294ED94 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE: / EXE: FF28E7AF-4CCD-468C-A99D-00F55294ED94 / F: UpdateSYSTEMĊ Recherche les mises à jour du logiciel EPSON et vous avertit lorsque des mises à jour sont disponibles. Si cette tâche est désactivée ou arrêtée, votre logiciel EPSON ne sera pas automatiquement mis à jour automatiquement. Thi\nTâche: C: Windows Tasks G2MUpdateTask-S-1-5-21-302665900-850237627-724062673-1000.job => C: Program Files (x86) GoToMeeting 7495 g2mupdate.exe\nTâche: C: Windows Tasks G2MUploadTask-S-1-5-21-302665900-850237627-724062673-1000.job => C: Program Files (x86) GoToMeeting 7495 g2mupload.exe","html":"Tâche: C: Windows Tasks EPSON WF-7610 Series Invitation 39C1617B-E859-4EF3-B298-7E9FB6CA08E0 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE\nTâche: C: Windows Tasks EPSON WF-7610 Series Invitation 5C8C4560-2AA2-4E44-AEF1-4B9AEDB0323F .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE\nTâche: C: Windows Tasks EPSON WF-7610 Series Invitation F041DFFD-6EE2-46E8-AF61-EDAD1E811B30 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE\nTâche: C: Windows Tasks EPSON WF-7610 Series Invitation FF28E7AF-4CCD-468C-A99D-00F55294ED94 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE\nTâche: C: Windows Tasks EPSON WF-7610 Series Update 39C1617B-E859-4EF3-B298-7E9FB6CA08E0 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE: / EXE: 39C1617B-E859-4EF3-B298-7E9FB6CA08E0 / F: UpdateSYSTEMĊRecherche les mises à jour du logiciel EPSON et vous avertit lorsque des mises à jour sont disponibles.Si cette tâche est désactivée ou arrêtée, votre logiciel EPSON ne sera pas automatiquement mis à jour automatiquement. Thi\nTâche: C: Windows Tasks EPSON WF-7610 Series Update 5C8C4560-2AA2-4E44-AEF1-4B9AEDB0323F .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE: / EXE: 5C8C4560-2AA2-4E44-AEF1-4B9AEDB0323F / F: UpdateSYSTEMĊRecherche les mises à jour du logiciel EPSON et vous avertit lorsque des mises à jour sont disponibles.Si cette tâche est désactivée ou arrêtée, votre logiciel EPSON ne sera pas automatiquement mis à jour automatiquement. Thi\nTâche: C: Windows Tasks EPSON WF-7610 Series Update F041DFFD-6EE2-46E8-AF61-EDAD1E811B30 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE: / EXE: F041DFFD-6EE2-46E8-AF61-EDAD1E811B30 / F: UpdateSYSTEMĊRecherche les mises à jour du logiciel EPSON et vous avertit lorsque des mises à jour sont disponibles.Si cette tâche est désactivée ou arrêtée, votre logiciel EPSON ne sera pas automatiquement mis à jour automatiquement. Thi\nTâche: C: Windows Tasks EPSON WF-7610 Series Update FF28E7AF-4CCD-468C-A99D-00F55294ED94 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE: / EXE: FF28E7AF-4CCD-468C-A99D-00F55294ED94 / F: UpdateSYSTEMĊ Recherche les mises à jour du logiciel EPSON et vous avertit lorsque des mises à jour sont disponibles. Si cette tâche est désactivée ou arrêtée, votre logiciel EPSON ne sera pas automatiquement mis à jour automatiquement. Thi\nTâche: C: Windows Tasks G2MUpdateTask-S-1-5-21-302665900-850237627-724062673-1000.job => C: Program Files (x86) GoToMeeting 7495 g2mupdate.exe\nTâche: C: Windows Tasks G2MUploadTask-S-1-5-21-302665900-850237627-724062673-1000.job => C: Program Files (x86) GoToMeeting 7495 g2mupload.exe
"},{"id":"text-13","type":"text","heading":"","plain_text":"==================== Internet (liste blanche) ====================","html":"==================== Internet (liste blanche) ====================
"},{"id":"text-14","type":"text","heading":"","plain_text":"(Si un élément est inclus dans la liste de correctifs, s'il s'agit d'un élément du registre, il sera supprimé ou restauré par défaut.)","html":"(Si un élément est inclus dans la liste de correctifs, s'il s'agit d'un élément du registre, il sera supprimé ou restauré par défaut.)
"},{"id":"text-15","type":"text","heading":"","plain_text":"Winsock: Catalog5 07 C: Program Files (x86) Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [145280 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nWinsock: Catalog5 08 C: Program Files (x86) Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [145280 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nWinsock: Catalog5 09 C: Program Files (x86) Bonjour mdnsNSP.dll [152864 2010-05-18] (Apple Inc. -> Apple Inc.)\nWinsock: Catalog5-x64 07 C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [170880 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nWinsock: Catalog5-x64 08 C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [170880 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nWinsock: Catalog5-x64 09 C: Program Files Bonjour mdnsNSP.dll [193824 2010-05-18] (Apple Inc. -> Apple Inc.)\nTcpip .. Interfaces D863FDF7-69D2-4F29-AC3C-50AD8EA40F8B: [NameServer] 192.168.1.10,8.8.8.8\nHKLM System … Parameters PersistentRoutes: [0.0.0.0,0.0.0.0,192.168.1.1,-1]","html":"Winsock: Catalog5 07 C: Program Files (x86) Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [145280 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nWinsock: Catalog5 08 C: Program Files (x86) Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [145280 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nWinsock: Catalog5 09 C: Program Files (x86) Bonjour mdnsNSP.dll [152864 2010-05-18] (Apple Inc. -> Apple Inc.)\nWinsock: Catalog5-x64 07 C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [170880 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nWinsock: Catalog5-x64 08 C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [170880 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nWinsock: Catalog5-x64 09 C: Program Files Bonjour mdnsNSP.dll [193824 2010-05-18] (Apple Inc. -> Apple Inc.)\nTcpip .. Interfaces D863FDF7-69D2-4F29-AC3C-50AD8EA40F8B: [NameServer] 192.168.1.10,8.8.8.8\nHKLM System … Parameters PersistentRoutes: [0.0.0.0,0.0.0.0,192.168.1.1,-1]
"},{"id":"text-16","type":"text","heading":"","plain_text":"Internet Explorer:\n==================\nHKU S-1-5-21-928097801-345109163-1125972616-1104 Software Microsoft Internet Explorer Main, Start Page Redirect Cache = hxxp: //www.msn.com/? Ocid = iehp\nHKU S-1-5-21-928097801-345109163-1125972616-1107 Software Microsoft Internet Explorer Main, Start Page Redirect Cache = hxxp: //www.msn.com/? Ocid = iehp\nSearchScopes: HKLM -> DefaultScope E6C80228-1FAB-4837-BB34-C5677F14829A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = DLRDF8 & pc = MDDR & src = IE-SearchBox\nSearchScopes: HKLM -> 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nSearchScopes: HKLM -> E6C80228-1FAB-4837-BB34-C5677F14829A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = DLRDF8 & pc = MDDR & src = IE-SearchBox\nSearchScopes: HKLM-x32 -> DefaultScope E6C80228-1FAB-4837-BB34-C5677F14829A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = DLRDF8 & pc = MDDR & src = IE-SearchBox\nSearchScopes: HKLM-x32 -> 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nSearchScopes: HKLM-x32 -> E6C80228-1FAB-4837-BB34-C5677F14829A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = DLRDF8 & pc = MDDR & src = IE-SearchBox\nSearchScopes: HKU S-1-5-21-928097801-345109163-1125972616-1104 -> DefaultScope E6C80228-1FAB-4837-BB34-C5677F14829A URL = \nSearchScopes: HKU S-1-5-21-928097801-345109163-1125972616-1104 -> E6C80228-1FAB-4837-BB34-C5677F14829A URL = \nSearchScopes: HKU S-1-5-21-928097801-345109163-1125972616-1107 -> DefaultScope E6C80228-1FAB-4837-BB34-C5677F14829A URL = \nSearchScopes: HKU S-1-5-21-928097801-345109163-1125972616-1107 -> E6C80228-1FAB-4837-BB34-C5677F14829A URL = \nBHO: Classe TmIEPlugInBHO -> 1CA1377B-DC1D-4A52-9585-6E06050FAC53 -> c: Program Files (x86) Trend Micro Client Server Security Agent bho 1009 TmIEPlg.dll => Aucun fichier\nBHO: Skype Entreprise Browser Helper -> 31D09BA0-12F5-4CCE-BE8A-2923E76605DA -> C: Program Files (x86) Microsoft Office root VFS ProgramFilesX64 Microsoft Office Office16 OCHelper.dll [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)\nBHO: Aide à la connexion Windows Live ID -> 9030D464-4C02-4ABF-8ECC-5164760863C6 -> C: Program Files Fichiers communs Microsoft Shared Windows Live WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nBHO: Foxit PhantomPDF Create PDF ToolBar Helper -> A5DD10F7-5ABB-4EEF-B4C8-6748D44DAF2A -> C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator IEAddin IEAddin_x64.dll [2020-04-22] (LOGICIEL FOXIT INC. ->)\nBHO: Gestionnaire de cache de documents Office -> B4F3A835-0E21-4959-BA22-42B3008E02FF -> C: Program Files (x86) Microsoft Office root VFS ProgramFilesX64 Microsoft Office Office16 URLREDIR.DLL [2020-05-16] (Microsoft Corporation -> Microsoft Corporation)\nBHO-x32: Classe TmIEPlugInBHO -> 1CA1377B-DC1D-4A52-9585-6E06050FAC53 -> c: Program Files (x86) Trend Micro Client Server Security Agent bho 1009 TmIEPlg32.dll => Aucun fichier\nBHO-x32: Norton Vulnerability Protection -> 6D53EC84-6AAE-4787-AEEE-F4628F01010C -> C: Program Files (x86) Norton Internet Security Engine 21.7.0.11 IPS IPSBHO.DLL => Aucun fichier\nBHO-x32: Aide à la connexion Windows Live ID -> 9030D464-4C02-4ABF-8ECC-5164760863C6 -> C: Program Files (x86) Common Files Microsoft Shared Windows Live WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nBHO-x32: Foxit PhantomPDF Create PDF ToolBar Helper -> A5DD10F7-5ABB-4EEF-B4C8-6748D44DAF2A -> C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator IEAddin IEAddin.dll [2020-04-22] (LOGICIEL FOXIT INC. ->)\nBHO-x32: Gestionnaire de cache de documents Office -> B4F3A835-0E21-4959-BA22-42B3008E02FF -> C: Program Files (x86) Microsoft Office root Office16 URLREDIR.DLL [2020-05-16] (Microsoft Corporation -> Microsoft Corporation)\nBarre d'outils: HKLM – Foxit PhantomPDF Create PDF ToolBar – BFD9D8A8-57FF-488A-B919-065EC77CF82F – C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator IEAddin IEAddin_x64.dll [2020-04-22] (LOGICIEL FOXIT INC. ->)\nBarre d'outils: HKLM-x32 – Foxit PhantomPDF Créer une barre d'outils PDF – BFD9D8A8-57FF-488A-B919-065EC77CF82F – C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator IEAddin IEAddin.dll [2020-04-22] (LOGICIEL FOXIT INC. ->)\nDPF: HKLM-x32 22945A69-1191-4DCF-9E6F-409BDE94D101 hxxp: //dl-ak.solidworks.com/nonsecure/edrawings/e2013sp03/13.3.0.111/cab//eDrawingsEnglish.cab\nHandler-x32: mso-minsb-roaming.16 – 83C25742-A9F7-49FB-9138-434302C88D07 – C: Program Files (x86) Microsoft Office root Office16 MSOSB.DLL [2020-03-07] (Microsoft Corporation -> Microsoft Corporation)\nHandler-x32: mso-minsb.16 – 42089D2D-912D-4018-9087-2B87803E93FB – C: Program Files (x86) Microsoft Office root Office16 MSOSB.DLL [2020-03-07] (Microsoft Corporation -> Microsoft Corporation)\nHandler-x32: osf-roaming.16 – 42089D2D-912D-4018-9087-2B87803E93FB – C: Program Files (x86) Microsoft Office root Office16 MSOSB.DLL [2020-03-07] (Microsoft Corporation -> Microsoft Corporation)\nHandler-x32: osf.16 – 5504BE45-A83B-4808-900A-3A5C36E7F77A – C: Program Files (x86) Microsoft Office root Office16 MSOSB.DLL [2020-03-07] (Microsoft Corporation -> Microsoft Corporation)\nGestionnaire: tmpx – 0E526CB5-7446-41D1-A403-19BFE95E8C23 – c: Program Files (x86) Trend Micro Client Server Security Agent bho 1009 TmIEPlg32.dll Aucun fichier","html":"Internet Explorer:\n==================\nHKU S-1-5-21-928097801-345109163-1125972616-1104 Software Microsoft Internet Explorer Main, Start Page Redirect Cache = hxxp: //www.msn.com/? Ocid = iehp\nHKU S-1-5-21-928097801-345109163-1125972616-1107 Software Microsoft Internet Explorer Main, Start Page Redirect Cache = hxxp: //www.msn.com/? Ocid = iehp\nSearchScopes: HKLM -> DefaultScope E6C80228-1FAB-4837-BB34-C5677F14829A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = DLRDF8 & pc = MDDR & src = IE-SearchBox\nSearchScopes: HKLM -> 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nSearchScopes: HKLM -> E6C80228-1FAB-4837-BB34-C5677F14829A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = DLRDF8 & pc = MDDR & src = IE-SearchBox\nSearchScopes: HKLM-x32 -> DefaultScope E6C80228-1FAB-4837-BB34-C5677F14829A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = DLRDF8 & pc = MDDR & src = IE-SearchBox\nSearchScopes: HKLM-x32 -> 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nSearchScopes: HKLM-x32 -> E6C80228-1FAB-4837-BB34-C5677F14829A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = DLRDF8 & pc = MDDR & src = IE-SearchBox\nSearchScopes: HKU S-1-5-21-928097801-345109163-1125972616-1104 -> DefaultScope E6C80228-1FAB-4837-BB34-C5677F14829A URL = \nSearchScopes: HKU S-1-5-21-928097801-345109163-1125972616-1104 -> E6C80228-1FAB-4837-BB34-C5677F14829A URL = \nSearchScopes: HKU S-1-5-21-928097801-345109163-1125972616-1107 -> DefaultScope E6C80228-1FAB-4837-BB34-C5677F14829A URL = \nSearchScopes: HKU S-1-5-21-928097801-345109163-1125972616-1107 -> E6C80228-1FAB-4837-BB34-C5677F14829A URL = \nBHO: Classe TmIEPlugInBHO -> 1CA1377B-DC1D-4A52-9585-6E06050FAC53 -> c: Program Files (x86) Trend Micro Client Server Security Agent bho 1009 TmIEPlg.dll => Aucun fichier\nBHO: Skype Entreprise Browser Helper -> 31D09BA0-12F5-4CCE-BE8A-2923E76605DA -> C: Program Files (x86) Microsoft Office root VFS ProgramFilesX64 Microsoft Office Office16 OCHelper.dll [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)\nBHO: Aide à la connexion Windows Live ID -> 9030D464-4C02-4ABF-8ECC-5164760863C6 -> C: Program Files Fichiers communs Microsoft Shared Windows Live WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nBHO: Foxit PhantomPDF Create PDF ToolBar Helper -> A5DD10F7-5ABB-4EEF-B4C8-6748D44DAF2A -> C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator IEAddin IEAddin_x64.dll [2020-04-22] (LOGICIEL FOXIT INC. ->)\nBHO: Gestionnaire de cache de documents Office -> B4F3A835-0E21-4959-BA22-42B3008E02FF -> C: Program Files (x86) Microsoft Office root VFS ProgramFilesX64 Microsoft Office Office16 URLREDIR.DLL [2020-05-16] (Microsoft Corporation -> Microsoft Corporation)\nBHO-x32: Classe TmIEPlugInBHO -> 1CA1377B-DC1D-4A52-9585-6E06050FAC53 -> c: Program Files (x86) Trend Micro Client Server Security Agent bho 1009 TmIEPlg32.dll => Aucun fichier\nBHO-x32: Norton Vulnerability Protection -> 6D53EC84-6AAE-4787-AEEE-F4628F01010C -> C: Program Files (x86) Norton Internet Security Engine 21.7.0.11 IPS IPSBHO.DLL => Aucun fichier\nBHO-x32: Aide à la connexion Windows Live ID -> 9030D464-4C02-4ABF-8ECC-5164760863C6 -> C: Program Files (x86) Common Files Microsoft Shared Windows Live WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nBHO-x32: Foxit PhantomPDF Create PDF ToolBar Helper -> A5DD10F7-5ABB-4EEF-B4C8-6748D44DAF2A -> C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator IEAddin IEAddin.dll [2020-04-22] (LOGICIEL FOXIT INC. ->)\nBHO-x32: Gestionnaire de cache de documents Office -> B4F3A835-0E21-4959-BA22-42B3008E02FF -> C: Program Files (x86) Microsoft Office root Office16 URLREDIR.DLL [2020-05-16] (Microsoft Corporation -> Microsoft Corporation)\nBarre d'outils: HKLM – Foxit PhantomPDF Create PDF ToolBar – BFD9D8A8-57FF-488A-B919-065EC77CF82F – C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator IEAddin IEAddin_x64.dll [2020-04-22] (LOGICIEL FOXIT INC. ->)\nBarre d'outils: HKLM-x32 – Foxit PhantomPDF Créer une barre d'outils PDF – BFD9D8A8-57FF-488A-B919-065EC77CF82F – C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator IEAddin IEAddin.dll [2020-04-22] (LOGICIEL FOXIT INC. ->)\nDPF: HKLM-x32 22945A69-1191-4DCF-9E6F-409BDE94D101 hxxp: //dl-ak.solidworks.com/nonsecure/edrawings/e2013sp03/13.3.0.111/cab//eDrawingsEnglish.cab\nHandler-x32: mso-minsb-roaming.16 – 83C25742-A9F7-49FB-9138-434302C88D07 – C: Program Files (x86) Microsoft Office root Office16 MSOSB.DLL [2020-03-07] (Microsoft Corporation -> Microsoft Corporation)\nHandler-x32: mso-minsb.16 – 42089D2D-912D-4018-9087-2B87803E93FB – C: Program Files (x86) Microsoft Office root Office16 MSOSB.DLL [2020-03-07] (Microsoft Corporation -> Microsoft Corporation)\nHandler-x32: osf-roaming.16 – 42089D2D-912D-4018-9087-2B87803E93FB – C: Program Files (x86) Microsoft Office root Office16 MSOSB.DLL [2020-03-07] (Microsoft Corporation -> Microsoft Corporation)\nHandler-x32: osf.16 – 5504BE45-A83B-4808-900A-3A5C36E7F77A – C: Program Files (x86) Microsoft Office root Office16 MSOSB.DLL [2020-03-07] (Microsoft Corporation -> Microsoft Corporation)\nGestionnaire: tmpx – 0E526CB5-7446-41D1-A403-19BFE95E8C23 – c: Program Files (x86) Trend Micro Client Server Security Agent bho 1009 TmIEPlg32.dll Aucun fichier
"},{"id":"text-17","type":"text","heading":"","plain_text":"FireFox:\n========\nFF HKLM … Firefox Extensions: [FFExtnHTML2PDF@foxitsoftware.com] – C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator FirefoxAddin FFExtnHTML2PDF.xpi\nExtension FF: (Foxit PDF Creator) – C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator FirefoxAddin FFExtnHTML2PDF.xpi [2020-04-22] [Legacy]\nFF HKLM … Firefox Extensions: [FireFoxNew-WebExtensions@foxitsoftware.com] – C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator FirefoxAddin FireFoxNew-WebExtensions@foxitsoftware.com.xpi\nExtension FF: (Foxit PDF Creator) – C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator FirefoxAddin FireFoxNew-WebExtensions@foxitsoftware.com.xpi [2020-04-22]\nFF HKLM-x32 … Firefox Extensions: [22C7F6C6-8D67-4534-92B5-529A0EC09405] – c: Program Files (x86) Trend Micro Client Server Security Agent bho 1009 FirefoxExtension => introuvable\nFF HKLM-x32 … Firefox Extensions: [quickprint@hp.com] – C: Program Files (x86) Hewlett-Packard SmartPrint QPExtension\nExtension FF: (SmartPrintButton) – C: Program Files (x86) Hewlett-Packard SmartPrint QPExtension [2011-01-26] [Legacy] [not signed]\nFF HKLM-x32…FirefoxExtensions: [FFExtnHTML2PDF@foxitsoftware.com] – C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsCreatorFirefoxAddinFFExtnHTML2PDF.xpi\nFF HKLM-x32…FirefoxExtensions: [FireFoxNew-WebExtensions@foxitsoftware.com] – C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsCreatorFirefoxAddinFireFoxNew-WebExtensions@foxitsoftware.com.xpi\nFF Plugin: @microsoft.com/GENUINE -> disabled [No File]\nFF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:Program FilesMicrosoft Silverlight5.1.50918.0npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsnpFoxitPhantomPDFPlugin.dll [2020-04-29] (FOXIT SOFTWARE INC. -> Foxit Corporation)\nFF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.cpdf -> C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsnpFoxitPhantomPDFPlugin.dll [2020-04-29] (FOXIT SOFTWARE INC. -> Foxit Corporation)\nFF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsnpFoxitPhantomPDFPlugin.dll [2020-04-29] (FOXIT SOFTWARE INC. -> Foxit Corporation)\nFF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsnpFoxitPhantomPDFPlugin.dll [2020-04-29] (FOXIT SOFTWARE INC. -> Foxit Corporation)\nFF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsnpFoxitPhantomPDFPlugin.dll [2020-04-29] (FOXIT SOFTWARE INC. -> Foxit Corporation)\nFF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:Program Files (x86)IntelIntel® Management Engine ComponentsIPTnpIntelWebAPIIPT.dll [2013-11-13] (Intel® Identity Protection Technology Software -> Intel Corporation)\nFF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:Program Files (x86)IntelIntel® Management Engine ComponentsIPTnpIntelWebAPIUpdater.dll [2013-11-13] (Intel® Identity Protection Technology Software -> Intel Corporation)\nFF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]\nFF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:Program Files (x86)Microsoft Silverlight5.1.50918.0npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:Program Files (x86)Microsoft OfficerootOffice16NPSPWRAP.DLL [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:Program Files (x86)Windows LivePhoto GalleryNPWLPG.dll [2010-11-10] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:Program Files (x86)Windows LivePhoto GalleryNPWLPG.dll [2010-11-10] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: Adobe Reader -> C:Program Files (x86)AdobeAcrobat Reader DCReaderAIRnppdf32.dll [2020-05-03] (Adobe Inc. -> Adobe Systems Inc.)","html":"FireFox:\n========\nFF HKLM … Firefox Extensions: [FFExtnHTML2PDF@foxitsoftware.com] – C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator FirefoxAddin FFExtnHTML2PDF.xpi\nExtension FF: (Foxit PDF Creator) – C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator FirefoxAddin FFExtnHTML2PDF.xpi [2020-04-22] [Legacy]\nFF HKLM … Firefox Extensions: [FireFoxNew-WebExtensions@foxitsoftware.com] – C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator FirefoxAddin FireFoxNew-WebExtensions@foxitsoftware.com.xpi\nExtension FF: (Foxit PDF Creator) – C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator FirefoxAddin FireFoxNew-WebExtensions@foxitsoftware.com.xpi [2020-04-22]\nFF HKLM-x32 … Firefox Extensions: [22C7F6C6-8D67-4534-92B5-529A0EC09405] – c: Program Files (x86) Trend Micro Client Server Security Agent bho 1009 FirefoxExtension => introuvable\nFF HKLM-x32 … Firefox Extensions: [quickprint@hp.com] – C: Program Files (x86) Hewlett-Packard SmartPrint QPExtension\nExtension FF: (SmartPrintButton) – C: Program Files (x86) Hewlett-Packard SmartPrint QPExtension [2011-01-26] [Legacy] [not signed]\nFF HKLM-x32…FirefoxExtensions: [FFExtnHTML2PDF@foxitsoftware.com] – C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsCreatorFirefoxAddinFFExtnHTML2PDF.xpi\nFF HKLM-x32…FirefoxExtensions: [FireFoxNew-WebExtensions@foxitsoftware.com] – C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsCreatorFirefoxAddinFireFoxNew-WebExtensions@foxitsoftware.com.xpi\nFF Plugin: @microsoft.com/GENUINE -> disabled [No File]\nFF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:Program FilesMicrosoft Silverlight5.1.50918.0npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsnpFoxitPhantomPDFPlugin.dll [2020-04-29] (FOXIT SOFTWARE INC. -> Foxit Corporation)\nFF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.cpdf -> C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsnpFoxitPhantomPDFPlugin.dll [2020-04-29] (FOXIT SOFTWARE INC. -> Foxit Corporation)\nFF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsnpFoxitPhantomPDFPlugin.dll [2020-04-29] (FOXIT SOFTWARE INC. -> Foxit Corporation)\nFF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsnpFoxitPhantomPDFPlugin.dll [2020-04-29] (FOXIT SOFTWARE INC. -> Foxit Corporation)\nFF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsnpFoxitPhantomPDFPlugin.dll [2020-04-29] (FOXIT SOFTWARE INC. -> Foxit Corporation)\nFF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:Program Files (x86)IntelIntel® Management Engine ComponentsIPTnpIntelWebAPIIPT.dll [2013-11-13] (Intel® Identity Protection Technology Software -> Intel Corporation)\nFF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:Program Files (x86)IntelIntel® Management Engine ComponentsIPTnpIntelWebAPIUpdater.dll [2013-11-13] (Intel® Identity Protection Technology Software -> Intel Corporation)\nFF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]\nFF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:Program Files (x86)Microsoft Silverlight5.1.50918.0npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:Program Files (x86)Microsoft OfficerootOffice16NPSPWRAP.DLL [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:Program Files (x86)Windows LivePhoto GalleryNPWLPG.dll [2010-11-10] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:Program Files (x86)Windows LivePhoto GalleryNPWLPG.dll [2010-11-10] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: Adobe Reader -> C:Program Files (x86)AdobeAcrobat Reader DCReaderAIRnppdf32.dll [2020-05-03] (Adobe Inc. -> Adobe Systems Inc.)
"},{"id":"text-18","type":"text","heading":"","plain_text":"Chrome: \n=======\nCHR Profile: C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefault [2018-03-12]\nCHR Extension: (Google Slides) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionsaapocclcgogkmnckokdopfmhonfmgoek [2017-09-13]\nCHR Extension: (Google Docs) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionsaohghmighlieiainnegkcijnfilokake [2017-09-13]\nCHR Extension: (Google Drive) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionsapdfllckaahabafndbhieahigkjlhalf [2017-09-13]\nCHR Extension: (YouTube) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionsblpcfgokakmgnkcojhhkbfbldkacnbeo [2017-09-13]\nCHR Extension: (Google Sheets) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionsfelcaaldnbdncclmgdcncolpebgiejap [2017-09-13]\nCHR Extension: (Google Docs Offline) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionsghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-09-13]\nCHR Extension: (Chrome Web Store Payments) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionsnmmhkkegccagdldgiimedpiccmgmieda [2017-09-13]\nCHR Extension: (Gmail) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionspjkljhegncpnkpknbcohdijeoejaedia [2017-09-13]\nCHR Extension: (Chrome Media Router) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionspkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-13]\nCHR HKLM…ChromeExtension: [cifnddnffldieaamihfkhkdgnbhfmaci] – C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsCreatorChromeAddinChromeAddin.crx [2020-04-22]\nCHR HKUS-1-5-21-928097801-345109163-1125972616-1107SOFTWAREGoogleChromeExtensions…ChromeExtension: [efaidnbmnnnibpcajpcglclefindmkaj]\nCHR HKLM-x32…ChromeExtension: [cifnddnffldieaamihfkhkdgnbhfmaci] – C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsCreatorChromeAddinChromeAddin.crx [2020-04-22]","html":"Chrome: \n=======\nCHR Profile: C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefault [2018-03-12]\nCHR Extension: (Google Slides) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionsaapocclcgogkmnckokdopfmhonfmgoek [2017-09-13]\nCHR Extension: (Google Docs) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionsaohghmighlieiainnegkcijnfilokake [2017-09-13]\nCHR Extension: (Google Drive) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionsapdfllckaahabafndbhieahigkjlhalf [2017-09-13]\nCHR Extension: (YouTube) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionsblpcfgokakmgnkcojhhkbfbldkacnbeo [2017-09-13]\nCHR Extension: (Google Sheets) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionsfelcaaldnbdncclmgdcncolpebgiejap [2017-09-13]\nCHR Extension: (Google Docs Offline) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionsghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-09-13]\nCHR Extension: (Chrome Web Store Payments) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionsnmmhkkegccagdldgiimedpiccmgmieda [2017-09-13]\nCHR Extension: (Gmail) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionspjkljhegncpnkpknbcohdijeoejaedia [2017-09-13]\nCHR Extension: (Chrome Media Router) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionspkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-13]\nCHR HKLM…ChromeExtension: [cifnddnffldieaamihfkhkdgnbhfmaci] – C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsCreatorChromeAddinChromeAddin.crx [2020-04-22]\nCHR HKUS-1-5-21-928097801-345109163-1125972616-1107SOFTWAREGoogleChromeExtensions…ChromeExtension: [efaidnbmnnnibpcajpcglclefindmkaj]\nCHR HKLM-x32…ChromeExtension: [cifnddnffldieaamihfkhkdgnbhfmaci] – C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsCreatorChromeAddinChromeAddin.crx [2020-04-22]
"},{"id":"text-19","type":"text","heading":"","plain_text":"==================== Services (Whitelisted) ===================","html":"==================== Services (Whitelisted) ===================
"},{"id":"text-20","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)","html":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
"},{"id":"text-21","type":"text","heading":"","plain_text":"R2 ClickToRunSvc; C:Program FilesCommon FilesMicrosoft SharedClickToRunOfficeClickToRun.exe [11111280 2020-05-07] (Microsoft Corporation -> Microsoft Corporation)\nR2 DymoPnpService; C:Program Files (x86)DYMODYMO Label SoftwareDymoPnpService.exe [27136 2017-05-09] (Sanford, L.P.) [File not signed]\nR2 EmbassyService; C:Program FilesDellDell Data ProtectionAccessAdvancedWaveEMBASSY Client CoreEmbassyServer.exe [218504 2012-01-17] (Wave Systems Corp. -> )\nR2 EpsonScanSvc; C:Windowssystem32EscSvc64.exe [144560 2012-05-17] (SEIKO EPSON Corporation -> Seiko Epson Corporation)\nR2 EPSON_PM_RPCV4_01; C:ProgramDataEPSONEPW!3 SSRPE_S30RP1.EXE [102400 2006-04-18] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)\nR2 EPSON_PM_RPCV4_06; C:Program FilesCommon FilesEPSONEPW!3 SSRPE_S60RPB.EXE [152640 2013-04-15] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nR2 FoxitPhantomPDFUpdateService; C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFFoxitPhantomPDFUpdateService.exe [1995184 2020-04-29] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)\nS3 GenericMount Helper Service; C:Program Files (x86)Norton GhostSharedDriversGenericMountHelperx64.exe [2227216 2010-02-12] (Symantec Corporation -> Symantec)\nR2 HP LaserJet Service; C:Program Files (x86)HPHPLaserJetServiceHPLaserJetService.exe [136704 2009-06-24] (HP) [File not signed]\nR2 HPSIService; C:Windowssystem32HPSIsvc.exe [126880 2012-08-31] (Hewlett-Packard Company -> HP)\nR2 igfxCUIService1.0.0.0; C:Windowssystem32igfxCUIService.exe [329192 2016-06-02] (Intel® pGFX -> Intel Corporation)\nR2 Intel® Capability Licensing Service Interface; C:Program FilesInteliCLS ClientHeciServer.exe [747520 2013-08-27] (Intel® Corporation) [File not signed]\nR2 jhi_service; C:Program Files (x86)IntelIntel® Management Engine ComponentsDALjhi_service.exe [169432 2013-11-13] (Intel Corporation – Intel® Management Engine Firmware -> Intel Corporation)\nS3 LiveUpdate; C:Program Files (x86)SymantecLiveUpdateLuComServer_3_2.EXE [2999664 2007-09-12] (Symantec Corporation -> Symantec Corporation)\nR2 MsMpSvc; C:Program FilesMicrosoft Security ClientMsMpEng.exe [119864 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nR2 NasPmService; C:Program Files (x86)BUFFALONASNAVInassvc.exe [251760 2012-03-29] (BUFFALO INC. -> BUFFALO INC.)\nR3 NisSrv; C:Program FilesMicrosoft Security ClientNisSrv.exe [361816 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nR2 Norton Ghost; C:Program Files (x86)Norton GhostAgentVProSvc.exe [4590432 2010-03-03] (Symantec Corporation -> Symantec Corporation)\nR2 psqlWGE; C:Program Files (x86)ActianPSQLbinw3dbsmgr.exe [359464 2019-02-22] (Actian Corporation -> Actian Corporation)\nR2 Sage 50 SmartPosting 2020; C:Program Files (x86)SagePeachtreeSmartPostingService2020.exe [343072 2019-10-01] (Sage Software, Inc. -> Sage Software, Inc.)\nR2 Sage AutoUpdate Manager Service; C:Program Files (x86)Common FilesSageCentralAutoUpdateClientSage.Central.AutoUpdateManager.Service.exe [8192 2015-08-24] (Microsoft) [File not signed]\nR2 Seagate Dashboard Services; C:Program Files (x86)SeagateSeagate Dashboard 2.0Seagate.Dashboard.DASWindowsService.exe [16216 2015-07-15] (Seagate Technology LLC -> Seagate Technology LLC)\nR2 Seagate MobileBackup Service; C:Program Files (x86)SeagateSeagate Dashboard 2.0MobileService.exe [143656 2015-07-15] (Seagate Technology LLC -> Seagate Technology LLC)\nR3 Symantec SymSnap VSS Provider; C:Windowssystem32dllhost.exe /Processid:C8C82416-80A2-4D08-952F-2D26082F2978 [9728 2009-07-13] (Microsoft Windows -> Microsoft Corporation)\nR3 Symantec SymSnap VSS Provider; C:Windowssystem32dllhost.exe /Processid:C8C82416-80A2-4D08-952F-2D26082F2978 [9728 2009-07-13] (Microsoft Windows -> Microsoft Corporation)\nR3 SymSnapService; C:Program Files (x86)Norton GhostSharedDriversSymSnapServicex64.exe [2963960 2010-02-11] (Symantec Corporation -> Symantec)\nR2 Synology Active Backup for Business Service; C:Program Files (x86)SynologyActiveBackupforBusinessAgentserviceSynology Active Backup for Business Service.exe [3061720 2020-03-19] (Synology Inc. -> )\nS2 tcsd_win32.exe; C:Program Files (x86)NTRU CryptosystemsNTRU TCG Software Stackbintcsd_win32.exe [1637888 2011-10-08] () [File not signed]\nR2 TeamViewer; C:Program Files (x86)TeamViewerTeamViewer_Service.exe [13172752 2020-01-22] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nR2 Wave Authentication Manager Service; C:Program FilesDellDell Data ProtectionAccessAdvancedWaveAuthentication ManagerWaveAMService.exe [1679872 2012-01-05] (Wave Systems Corp.) [File not signed]\nS3 WinDefend; C:Program FilesWindows Defendermpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)\nR2 wlidsvc; C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSVC.EXE [2286976 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nS3 WvPCR; C:Program FilesDellDell Data ProtectionAccessAdvancedWaveCommonWvPCR.exe [198144 2012-01-16] (Wave Systems Corp.) [File not signed]\nS2 GoToMyPC; "C:Program Files (x86)CitrixGoToMyPCg2svc.exe" "Start=service" [X]","html":"R2 ClickToRunSvc; C:Program FilesCommon FilesMicrosoft SharedClickToRunOfficeClickToRun.exe [11111280 2020-05-07] (Microsoft Corporation -> Microsoft Corporation)\nR2 DymoPnpService; C:Program Files (x86)DYMODYMO Label SoftwareDymoPnpService.exe [27136 2017-05-09] (Sanford, L.P.) [File not signed]\nR2 EmbassyService; C:Program FilesDellDell Data ProtectionAccessAdvancedWaveEMBASSY Client CoreEmbassyServer.exe [218504 2012-01-17] (Wave Systems Corp. -> )\nR2 EpsonScanSvc; C:Windowssystem32EscSvc64.exe [144560 2012-05-17] (SEIKO EPSON Corporation -> Seiko Epson Corporation)\nR2 EPSON_PM_RPCV4_01; C:ProgramDataEPSONEPW!3 SSRPE_S30RP1.EXE [102400 2006-04-18] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)\nR2 EPSON_PM_RPCV4_06; C:Program FilesCommon FilesEPSONEPW!3 SSRPE_S60RPB.EXE [152640 2013-04-15] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nR2 FoxitPhantomPDFUpdateService; C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFFoxitPhantomPDFUpdateService.exe [1995184 2020-04-29] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)\nS3 GenericMount Helper Service; C:Program Files (x86)Norton GhostSharedDriversGenericMountHelperx64.exe [2227216 2010-02-12] (Symantec Corporation -> Symantec)\nR2 HP LaserJet Service; C:Program Files (x86)HPHPLaserJetServiceHPLaserJetService.exe [136704 2009-06-24] (HP) [File not signed]\nR2 HPSIService; C:Windowssystem32HPSIsvc.exe [126880 2012-08-31] (Hewlett-Packard Company -> HP)\nR2 igfxCUIService1.0.0.0; C:Windowssystem32igfxCUIService.exe [329192 2016-06-02] (Intel® pGFX -> Intel Corporation)\nR2 Intel® Capability Licensing Service Interface; C:Program FilesInteliCLS ClientHeciServer.exe [747520 2013-08-27] (Intel® Corporation) [File not signed]\nR2 jhi_service; C:Program Files (x86)IntelIntel® Management Engine ComponentsDALjhi_service.exe [169432 2013-11-13] (Intel Corporation – Intel® Management Engine Firmware -> Intel Corporation)\nS3 LiveUpdate; C:Program Files (x86)SymantecLiveUpdateLuComServer_3_2.EXE [2999664 2007-09-12] (Symantec Corporation -> Symantec Corporation)\nR2 MsMpSvc; C:Program FilesMicrosoft Security ClientMsMpEng.exe [119864 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nR2 NasPmService; C:Program Files (x86)BUFFALONASNAVInassvc.exe [251760 2012-03-29] (BUFFALO INC. -> BUFFALO INC.)\nR3 NisSrv; C:Program FilesMicrosoft Security ClientNisSrv.exe [361816 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nR2 Norton Ghost; C:Program Files (x86)Norton GhostAgentVProSvc.exe [4590432 2010-03-03] (Symantec Corporation -> Symantec Corporation)\nR2 psqlWGE; C:Program Files (x86)ActianPSQLbinw3dbsmgr.exe [359464 2019-02-22] (Actian Corporation -> Actian Corporation)\nR2 Sage 50 SmartPosting 2020; C:Program Files (x86)SagePeachtreeSmartPostingService2020.exe [343072 2019-10-01] (Sage Software, Inc. -> Sage Software, Inc.)\nR2 Sage AutoUpdate Manager Service; C:Program Files (x86)Common FilesSageCentralAutoUpdateClientSage.Central.AutoUpdateManager.Service.exe [8192 2015-08-24] (Microsoft) [File not signed]\nR2 Seagate Dashboard Services; C:Program Files (x86)SeagateSeagate Dashboard 2.0Seagate.Dashboard.DASWindowsService.exe [16216 2015-07-15] (Seagate Technology LLC -> Seagate Technology LLC)\nR2 Seagate MobileBackup Service; C:Program Files (x86)SeagateSeagate Dashboard 2.0MobileService.exe [143656 2015-07-15] (Seagate Technology LLC -> Seagate Technology LLC)\nR3 Symantec SymSnap VSS Provider; C:Windowssystem32dllhost.exe /Processid:C8C82416-80A2-4D08-952F-2D26082F2978 [9728 2009-07-13] (Microsoft Windows -> Microsoft Corporation)\nR3 Symantec SymSnap VSS Provider; C:Windowssystem32dllhost.exe /Processid:C8C82416-80A2-4D08-952F-2D26082F2978 [9728 2009-07-13] (Microsoft Windows -> Microsoft Corporation)\nR3 SymSnapService; C:Program Files (x86)Norton GhostSharedDriversSymSnapServicex64.exe [2963960 2010-02-11] (Symantec Corporation -> Symantec)\nR2 Synology Active Backup for Business Service; C:Program Files (x86)SynologyActiveBackupforBusinessAgentserviceSynology Active Backup for Business Service.exe [3061720 2020-03-19] (Synology Inc. -> )\nS2 tcsd_win32.exe; C:Program Files (x86)NTRU CryptosystemsNTRU TCG Software Stackbintcsd_win32.exe [1637888 2011-10-08] () [File not signed]\nR2 TeamViewer; C:Program Files (x86)TeamViewerTeamViewer_Service.exe [13172752 2020-01-22] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nR2 Wave Authentication Manager Service; C:Program FilesDellDell Data ProtectionAccessAdvancedWaveAuthentication ManagerWaveAMService.exe [1679872 2012-01-05] (Wave Systems Corp.) [File not signed]\nS3 WinDefend; C:Program FilesWindows Defendermpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)\nR2 wlidsvc; C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSVC.EXE [2286976 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nS3 WvPCR; C:Program FilesDellDell Data ProtectionAccessAdvancedWaveCommonWvPCR.exe [198144 2012-01-16] (Wave Systems Corp.) [File not signed]\nS2 GoToMyPC; "C:Program Files (x86)CitrixGoToMyPCg2svc.exe" "Start=service" [X]
"},{"id":"text-22","type":"text","heading":"","plain_text":"===================== Drivers (Whitelisted) ===================","html":"===================== Drivers (Whitelisted) ===================
"},{"id":"text-23","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)","html":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
"},{"id":"text-24","type":"text","heading":"","plain_text":"R3 GenericMount; C:WindowsSystem32DRIVERSGenericMount.sys [66608 2010-02-12] (Symantec Corporation -> Symantec Corporation)\nR3 MEIx64; C:WindowsSystem32DRIVERSTeeDriverx64.sys [99288 2013-11-13] (Intel Corporation – Intel® Management Engine Firmware -> Intel Corporation)\nR0 MpFilter; C:WindowsSystem32DRIVERSMpFilter.sys [295000 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)\nS3 mvusbews; C:WindowsSystem32Driversmvusbews.sys [20480 2012-09-25] (Microsoft Windows Hardware Compatibility Publisher -> Marvell Semiconductor, Inc.)\nR3 NisDrv; C:WindowsSystem32DRIVERSNisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)\nR0 symsnap; C:WindowsSystem32DRIVERSsymsnap.sys [170032 2010-02-11] (Symantec Corporation -> StorageCraft)\nS3 VProEventMonitor; C:WindowsSystem32DRIVERSvproeventmonitor.sys [20528 2009-09-21] (Symantec Corporation -> Symantec Corporation)\nS1 ESProtectionDriver; ??C:Windowssystem32driversmbae64.sys [X]\nS3 MBAMFarflt; ??C:Windowssystem32driversfarflt.sys [X]\nS3 MBAMProtection; ??C:Windowssystem32driversmbam.sys [X]\nS3 MBAMWebProtection; ??C:Windowssystem32driversmwac.sys [X]\nS3 NAVENG; ??C:Program Files (x86)Norton Internet SecurityNortonData22.5.0.124DefinitionsSDSDefs20160713.021ENG64.SYS [X]\nS3 NAVEX15; ??C:Program Files (x86)Norton Internet SecurityNortonData22.5.0.124DefinitionsSDSDefs20160713.021EX64.SYS [X]\nU2 V2iMount; no ImagePath","html":"R3 GenericMount; C:WindowsSystem32DRIVERSGenericMount.sys [66608 2010-02-12] (Symantec Corporation -> Symantec Corporation)\nR3 MEIx64; C:WindowsSystem32DRIVERSTeeDriverx64.sys [99288 2013-11-13] (Intel Corporation – Intel® Management Engine Firmware -> Intel Corporation)\nR0 MpFilter; C:WindowsSystem32DRIVERSMpFilter.sys [295000 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)\nS3 mvusbews; C:WindowsSystem32Driversmvusbews.sys [20480 2012-09-25] (Microsoft Windows Hardware Compatibility Publisher -> Marvell Semiconductor, Inc.)\nR3 NisDrv; C:WindowsSystem32DRIVERSNisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)\nR0 symsnap; C:WindowsSystem32DRIVERSsymsnap.sys [170032 2010-02-11] (Symantec Corporation -> StorageCraft)\nS3 VProEventMonitor; C:WindowsSystem32DRIVERSvproeventmonitor.sys [20528 2009-09-21] (Symantec Corporation -> Symantec Corporation)\nS1 ESProtectionDriver; ??C:Windowssystem32driversmbae64.sys [X]\nS3 MBAMFarflt; ??C:Windowssystem32driversfarflt.sys [X]\nS3 MBAMProtection; ??C:Windowssystem32driversmbam.sys [X]\nS3 MBAMWebProtection; ??C:Windowssystem32driversmwac.sys [X]\nS3 NAVENG; ??C:Program Files (x86)Norton Internet SecurityNortonData22.5.0.124DefinitionsSDSDefs20160713.021ENG64.SYS [X]\nS3 NAVEX15; ??C:Program Files (x86)Norton Internet SecurityNortonData22.5.0.124DefinitionsSDSDefs20160713.021EX64.SYS [X]\nU2 V2iMount; no ImagePath
"},{"id":"text-25","type":"text","heading":"","plain_text":"==================== NetSvcs (Whitelisted) ===================","html":"==================== NetSvcs (Whitelisted) ===================
"},{"id":"text-26","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)","html":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
"},{"id":"text-27","type":"text","heading":"","plain_text":"==================== One month (created) ===================","html":"==================== One month (created) ===================
"},{"id":"text-28","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, the file/folder will be moved.)","html":"(If an entry is included in the fixlist, the file/folder will be moved.)
"},{"id":"text-29","type":"text","heading":"","plain_text":"2039-03-01 16:27 – 1998-06-05 14:54 – 000026832 _____ (Microsoft Corporation) C:WindowsSysWOW64CTL3DV2.DLL\n2039-03-01 16:24 – 2039-03-01 16:24 – 000000000 ____D C:Program FilesCADKEY\n2020-05-31 11:04 – 2020-05-31 11:06 – 000000000 ____D C:UsersKMieleDownloadsGus\n2020-05-30 15:53 – 2020-05-31 10:49 – 000000000 ____D C:ProgramDataActiveBackupforBusinessAgent\n2020-05-30 15:53 – 2020-05-30 15:53 – 000001405 _____ C:UsersPublicDesktopSynology Active Backup for Business Agent.lnk\n2020-05-30 15:53 – 2020-05-30 15:53 – 000001405 _____ C:ProgramDataDesktopSynology Active Backup for Business Agent.lnk\n2020-05-30 15:53 – 2020-05-30 15:53 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsSynology\n2020-05-30 15:53 – 2020-05-30 15:53 – 000000000 ____D C:Program Files (x86)Synology\n2020-05-30 15:29 – 2020-05-30 15:29 – 037969920 _____ C:UsersKMieleDownloadsSynology Active Backup for Business Agent-2.1.1-1125-x64.msi\n2020-05-30 14:47 – 2020-05-30 14:47 – 000001105 _____ C:UsersGemmitiADesktopESET Online Scanner.lnk\n2020-05-30 14:47 – 2020-05-30 14:47 – 000000000 ____D C:UsersGemmitiAAppDataLocalESET\n2020-05-30 14:46 – 2020-05-30 14:46 – 014665312 _____ (ESET spol. s r.o.) C:UsersKMieleDownloadsesetonlinescanner.exe\n2020-05-30 14:46 – 2020-05-30 14:46 – 000000000 ____D C:UsersKMieleAppDataLocalESET\n2020-05-30 14:25 – 2020-05-31 11:07 – 000000000 ____D C:FRST\n2020-05-29 08:12 – 2020-05-29 08:12 – 000000000 ____D C:UsersKMieleAppDataLocalF5631589-FFB7-4F02-AD42-20E544B909ED\n2020-05-28 13:08 – 2020-05-28 13:08 – 000190571 _____ C:UsersKMieleDesktopABF BOL.pdf\n2020-05-28 12:53 – 2020-05-28 12:58 – 000000000 ____D C:UsersKMieleAppDataRoamingFoxit Software\n2020-05-28 12:53 – 2020-05-28 12:53 – 000000000 ____D C:UsersKMieleAppDataLocalLowFoxit\n2020-05-28 12:51 – 2020-05-28 12:51 – 000001091 _____ C:UsersPublicDesktopFoxit PhantomPDF.lnk\n2020-05-28 12:51 – 2020-05-28 12:51 – 000001091 _____ C:ProgramDataDesktopFoxit PhantomPDF.lnk\n2020-05-28 12:51 – 2020-05-28 12:51 – 000000000 ____D C:UsersGemmitiAAppDataRoamingFoxit Software\n2020-05-28 12:51 – 2020-05-28 12:51 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsFoxit PhantomPDF\n2020-05-28 12:51 – 2020-05-28 12:51 – 000000000 ____D C:ProgramDataFoxit Software\n2020-05-28 12:50 – 2020-05-28 12:50 – 000000000 ____D C:UsersPublicFoxit Software\n2020-05-28 12:50 – 2020-05-28 12:50 – 000000000 ____D C:Program Files (x86)Foxit Software\n2020-05-28 12:47 – 2020-05-28 12:48 – 632645472 _____ (Foxit Software Inc.) C:UsersKMieleDownloadsFoxitPhantomPDF100_enu_Setup_PPC.exe\n2020-05-28 11:31 – 2020-05-28 11:31 – 000306209 _____ C:UsersKMieleDownloads8 collar instructions.pdf\n2020-05-28 11:30 – 2020-05-28 11:30 – 000374045 _____ C:UsersKMieleDownloadsDS-CC quick sheet.pdf\n2020-05-28 08:15 – 2020-05-28 08:15 – 000000000 ____D C:UsersKMieleAppDataLocalF0C7BAA7-3009-43DB-A497-8221090794EB\n2020-05-27 08:07 – 2020-05-27 08:07 – 000000000 ____D C:UsersKMieleAppDataLocal9E81D49F-F46D-46E2-B109-1DE520F0D3E3\n2020-05-26 14:10 – 2020-05-26 14:10 – 000000000 ____D C:UsersKMieleAppDataLocal3D3DB803-954F-4617-B089-1DC85BA0B8B5\n2020-05-26 08:09 – 2020-05-26 08:09 – 000000000 ____D C:UsersKMieleAppDataLocal9BFC70BC-53F7-488D-B839-D418315F4A2F\n2020-05-22 08:11 – 2020-05-22 08:11 – 000000000 ____D C:UsersKMieleAppDataLocal6FEC2B24-CB57-4A8A-88E3-95FA12DF797F\n2020-05-21 08:09 – 2020-05-21 08:09 – 000000000 ____D C:UsersKMieleAppDataLocalD7C47DEA-A771-4BED-B39B-36A44343B4BB\n2020-05-20 08:14 – 2020-05-20 08:14 – 000000000 ____D C:UsersKMieleAppDataLocal6D67C60A-5BD3-47FF-B1F3-0DE3CD8FA17B\n2020-05-19 08:34 – 2020-05-19 08:34 – 000000000 ____D C:UsersKMieleAppDataLocalB6BE2DF0-9C3B-4738-BA81-41C7CA1785B4\n2020-05-18 08:13 – 2020-05-18 08:13 – 000000000 ____D C:UsersKMieleAppDataLocalD76F431D-B886-4C63-B77D-7698F04D48D6\n2020-05-15 08:12 – 2020-05-15 08:12 – 000000000 ____D C:UsersKMieleAppDataLocal1794CD21-455A-4269-A0EB-EEABE9CAFBDD\n2020-05-14 08:11 – 2020-05-14 08:11 – 000000000 ____D C:UsersKMieleAppDataLocal3D91B3BE-87AC-4431-BEDC-FA5FE11A3BFF\n2020-05-13 08:09 – 2020-05-13 08:09 – 000000000 ____D C:UsersKMieleAppDataLocalB41284BD-5D6F-438F-8519-E57588B4E09A\n2020-05-12 08:15 – 2020-05-12 08:15 – 000000000 ____D C:UsersKMieleAppDataLocal6709064C-0B7B-4378-8A3B-F3321CDDED01\n2020-05-11 08:09 – 2020-05-11 08:09 – 000000000 ____D C:UsersKMieleAppDataLocal87750C4F-951B-458A-8B3F-C452DEA10898\n2020-05-08 08:18 – 2020-05-08 08:18 – 000000000 ____D C:UsersKMieleAppDataLocal6D5BB4FD-A712-4279-8BB3-5634D9F043CD\n2020-05-07 08:16 – 2020-05-07 08:16 – 000000000 ____D C:UsersKMieleAppDataLocal3CA62EED-8774-415A-A0FF-ACB010E1860D\n2020-05-06 08:14 – 2020-05-06 08:14 – 000000000 ____D C:UsersKMieleAppDataLocal4CBFBA70-F8C1-479C-BC33-3DFD6A74737E\n2020-05-05 08:08 – 2020-05-05 08:08 – 000000000 ____D C:UsersKMieleAppDataLocalE418702D-7B58-4178-9C05-6363F4614083\n2020-05-04 08:09 – 2020-05-04 08:09 – 000000000 ____D C:UsersKMieleAppDataLocalCC9DD8B1-3D94-4B78-9861-6B168285B939\n2020-05-01 13:06 – 2020-05-01 13:06 – 000000000 ____D C:UsersKMieleAppDataLocal90D7F255-F149-4886-A401-192FE7510560\n2020-05-01 08:25 – 2020-05-01 08:25 – 000000000 ____D C:UsersKMieleAppDataLocal6D35E746-E51D-4A0D-847B-C331EE6C35D0","html":"2039-03-01 16:27 – 1998-06-05 14:54 – 000026832 _____ (Microsoft Corporation) C:WindowsSysWOW64CTL3DV2.DLL\n2039-03-01 16:24 – 2039-03-01 16:24 – 000000000 ____D C:Program FilesCADKEY\n2020-05-31 11:04 – 2020-05-31 11:06 – 000000000 ____D C:UsersKMieleDownloadsGus\n2020-05-30 15:53 – 2020-05-31 10:49 – 000000000 ____D C:ProgramDataActiveBackupforBusinessAgent\n2020-05-30 15:53 – 2020-05-30 15:53 – 000001405 _____ C:UsersPublicDesktopSynology Active Backup for Business Agent.lnk\n2020-05-30 15:53 – 2020-05-30 15:53 – 000001405 _____ C:ProgramDataDesktopSynology Active Backup for Business Agent.lnk\n2020-05-30 15:53 – 2020-05-30 15:53 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsSynology\n2020-05-30 15:53 – 2020-05-30 15:53 – 000000000 ____D C:Program Files (x86)Synology\n2020-05-30 15:29 – 2020-05-30 15:29 – 037969920 _____ C:UsersKMieleDownloadsSynology Active Backup for Business Agent-2.1.1-1125-x64.msi\n2020-05-30 14:47 – 2020-05-30 14:47 – 000001105 _____ C:UsersGemmitiADesktopESET Online Scanner.lnk\n2020-05-30 14:47 – 2020-05-30 14:47 – 000000000 ____D C:UsersGemmitiAAppDataLocalESET\n2020-05-30 14:46 – 2020-05-30 14:46 – 014665312 _____ (ESET spol. s r.o.) C:UsersKMieleDownloadsesetonlinescanner.exe\n2020-05-30 14:46 – 2020-05-30 14:46 – 000000000 ____D C:UsersKMieleAppDataLocalESET\n2020-05-30 14:25 – 2020-05-31 11:07 – 000000000 ____D C:FRST\n2020-05-29 08:12 – 2020-05-29 08:12 – 000000000 ____D C:UsersKMieleAppDataLocalF5631589-FFB7-4F02-AD42-20E544B909ED\n2020-05-28 13:08 – 2020-05-28 13:08 – 000190571 _____ C:UsersKMieleDesktopABF BOL.pdf\n2020-05-28 12:53 – 2020-05-28 12:58 – 000000000 ____D C:UsersKMieleAppDataRoamingFoxit Software\n2020-05-28 12:53 – 2020-05-28 12:53 – 000000000 ____D C:UsersKMieleAppDataLocalLowFoxit\n2020-05-28 12:51 – 2020-05-28 12:51 – 000001091 _____ C:UsersPublicDesktopFoxit PhantomPDF.lnk\n2020-05-28 12:51 – 2020-05-28 12:51 – 000001091 _____ C:ProgramDataDesktopFoxit PhantomPDF.lnk\n2020-05-28 12:51 – 2020-05-28 12:51 – 000000000 ____D C:UsersGemmitiAAppDataRoamingFoxit Software\n2020-05-28 12:51 – 2020-05-28 12:51 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsFoxit PhantomPDF\n2020-05-28 12:51 – 2020-05-28 12:51 – 000000000 ____D C:ProgramDataFoxit Software\n2020-05-28 12:50 – 2020-05-28 12:50 – 000000000 ____D C:UsersPublicFoxit Software\n2020-05-28 12:50 – 2020-05-28 12:50 – 000000000 ____D C:Program Files (x86)Foxit Software\n2020-05-28 12:47 – 2020-05-28 12:48 – 632645472 _____ (Foxit Software Inc.) C:UsersKMieleDownloadsFoxitPhantomPDF100_enu_Setup_PPC.exe\n2020-05-28 11:31 – 2020-05-28 11:31 – 000306209 _____ C:UsersKMieleDownloads8 collar instructions.pdf\n2020-05-28 11:30 – 2020-05-28 11:30 – 000374045 _____ C:UsersKMieleDownloadsDS-CC quick sheet.pdf\n2020-05-28 08:15 – 2020-05-28 08:15 – 000000000 ____D C:UsersKMieleAppDataLocalF0C7BAA7-3009-43DB-A497-8221090794EB\n2020-05-27 08:07 – 2020-05-27 08:07 – 000000000 ____D C:UsersKMieleAppDataLocal9E81D49F-F46D-46E2-B109-1DE520F0D3E3\n2020-05-26 14:10 – 2020-05-26 14:10 – 000000000 ____D C:UsersKMieleAppDataLocal3D3DB803-954F-4617-B089-1DC85BA0B8B5\n2020-05-26 08:09 – 2020-05-26 08:09 – 000000000 ____D C:UsersKMieleAppDataLocal9BFC70BC-53F7-488D-B839-D418315F4A2F\n2020-05-22 08:11 – 2020-05-22 08:11 – 000000000 ____D C:UsersKMieleAppDataLocal6FEC2B24-CB57-4A8A-88E3-95FA12DF797F\n2020-05-21 08:09 – 2020-05-21 08:09 – 000000000 ____D C:UsersKMieleAppDataLocalD7C47DEA-A771-4BED-B39B-36A44343B4BB\n2020-05-20 08:14 – 2020-05-20 08:14 – 000000000 ____D C:UsersKMieleAppDataLocal6D67C60A-5BD3-47FF-B1F3-0DE3CD8FA17B\n2020-05-19 08:34 – 2020-05-19 08:34 – 000000000 ____D C:UsersKMieleAppDataLocalB6BE2DF0-9C3B-4738-BA81-41C7CA1785B4\n2020-05-18 08:13 – 2020-05-18 08:13 – 000000000 ____D C:UsersKMieleAppDataLocalD76F431D-B886-4C63-B77D-7698F04D48D6\n2020-05-15 08:12 – 2020-05-15 08:12 – 000000000 ____D C:UsersKMieleAppDataLocal1794CD21-455A-4269-A0EB-EEABE9CAFBDD\n2020-05-14 08:11 – 2020-05-14 08:11 – 000000000 ____D C:UsersKMieleAppDataLocal3D91B3BE-87AC-4431-BEDC-FA5FE11A3BFF\n2020-05-13 08:09 – 2020-05-13 08:09 – 000000000 ____D C:UsersKMieleAppDataLocalB41284BD-5D6F-438F-8519-E57588B4E09A\n2020-05-12 08:15 – 2020-05-12 08:15 – 000000000 ____D C:UsersKMieleAppDataLocal6709064C-0B7B-4378-8A3B-F3321CDDED01\n2020-05-11 08:09 – 2020-05-11 08:09 – 000000000 ____D C:UsersKMieleAppDataLocal87750C4F-951B-458A-8B3F-C452DEA10898\n2020-05-08 08:18 – 2020-05-08 08:18 – 000000000 ____D C:UsersKMieleAppDataLocal6D5BB4FD-A712-4279-8BB3-5634D9F043CD\n2020-05-07 08:16 – 2020-05-07 08:16 – 000000000 ____D C:UsersKMieleAppDataLocal3CA62EED-8774-415A-A0FF-ACB010E1860D\n2020-05-06 08:14 – 2020-05-06 08:14 – 000000000 ____D C:UsersKMieleAppDataLocal4CBFBA70-F8C1-479C-BC33-3DFD6A74737E\n2020-05-05 08:08 – 2020-05-05 08:08 – 000000000 ____D C:UsersKMieleAppDataLocalE418702D-7B58-4178-9C05-6363F4614083\n2020-05-04 08:09 – 2020-05-04 08:09 – 000000000 ____D C:UsersKMieleAppDataLocalCC9DD8B1-3D94-4B78-9861-6B168285B939\n2020-05-01 13:06 – 2020-05-01 13:06 – 000000000 ____D C:UsersKMieleAppDataLocal90D7F255-F149-4886-A401-192FE7510560\n2020-05-01 08:25 – 2020-05-01 08:25 – 000000000 ____D C:UsersKMieleAppDataLocal6D35E746-E51D-4A0D-847B-C331EE6C35D0
"},{"id":"text-30","type":"text","heading":"","plain_text":"==================== One month (modified) ==================","html":"==================== One month (modified) ==================
"},{"id":"text-31","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, the file/folder will be moved.)","html":"(If an entry is included in the fixlist, the file/folder will be moved.)
"},{"id":"text-32","type":"text","heading":"","plain_text":"2020-05-31 11:05 – 2017-09-07 08:48 – 000000000 ____D C:UsersKMieleAppDataLocalDeployment\n2020-05-31 10:57 – 2016-11-14 10:58 – 000000911 _____ C:WindowsTasksEPSON WF-7610 Series Update 5C8C4560-2AA2-4E44-AEF1-4B9AEDB0323F.job\n2020-05-31 10:57 – 2016-11-14 10:58 – 000000725 _____ C:WindowsTasksEPSON WF-7610 Series Invitation 5C8C4560-2AA2-4E44-AEF1-4B9AEDB0323F.job\n2020-05-31 10:53 – 2009-07-14 01:32 – 000000000 ____D C:Windowssystem32FxsTmp\n2020-05-31 10:49 – 2017-09-06 10:29 – 000000112 _____ C:Windowssystem32confignetlogon.ftl\n2020-05-31 10:49 – 2009-07-13 23:20 – 000000000 ____D C:WindowsRegistration\n2020-05-31 04:37 – 2015-08-04 14:19 – 000000504 _____ C:WindowsTasksG2MUpdateTask-S-1-5-21-302665900-850237627-724062673-1000.job\n2020-05-31 04:25 – 2016-08-22 14:25 – 000000911 _____ C:WindowsTasksEPSON WF-7610 Series Update 39C1617B-E859-4EF3-B298-7E9FB6CA08E0.job\n2020-05-31 04:25 – 2016-08-22 14:25 – 000000725 _____ C:WindowsTasksEPSON WF-7610 Series Invitation 39C1617B-E859-4EF3-B298-7E9FB6CA08E0.job\n2020-05-31 04:22 – 2016-11-14 10:22 – 000000911 _____ C:WindowsTasksEPSON WF-7610 Series Update FF28E7AF-4CCD-468C-A99D-00F55294ED94.job\n2020-05-31 04:22 – 2016-11-14 10:22 – 000000725 _____ C:WindowsTasksEPSON WF-7610 Series Invitation FF28E7AF-4CCD-468C-A99D-00F55294ED94.job\n2020-05-31 04:14 – 2009-07-14 00:45 – 000034832 ____H C:Windowssystem327B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0\n2020-05-31 04:14 – 2009-07-14 00:45 – 000034832 ____H C:Windowssystem327B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0\n2020-05-31 04:13 – 2016-11-14 10:14 – 000000911 _____ C:WindowsTasksEPSON WF-7610 Series Update F041DFFD-6EE2-46E8-AF61-EDAD1E811B30.job\n2020-05-31 04:13 – 2016-11-14 10:14 – 000000725 _____ C:WindowsTasksEPSON WF-7610 Series Invitation F041DFFD-6EE2-46E8-AF61-EDAD1E811B30.job\n2020-05-30 15:53 – 2017-09-06 10:35 – 000001415 _____ C:UsersKMieleAppDataRoamingMicrosoftWindowsStart MenuProgramsInternet Explorer.lnk\n2020-05-30 15:47 – 2020-01-07 13:47 – 000000000 ____D C:UsersKMieleDesktopACCURATE I-backup2019.zip\n2020-05-30 15:32 – 2015-08-04 14:19 – 000000600 _____ C:WindowsTasksG2MUploadTask-S-1-5-21-302665900-850237627-724062673-1000.job\n2020-05-30 14:26 – 2009-07-14 01:13 – 000804870 _____ C:Windowssystem32PerfStringBackup.INI\n2020-05-30 14:26 – 2009-07-13 23:20 – 000000000 ____D C:Windowsinf\n2020-05-30 14:24 – 2017-09-06 10:35 – 000000000 __SHD C:UsersKMieleIntelGraphicsProfiles\n2020-05-30 14:18 – 2018-03-29 14:38 – 000000000 ____D C:Program Files (x86)TeamViewer\n2020-05-30 14:18 – 2009-07-14 01:08 – 000000006 ____H C:WindowsTasksSA.DAT\n2020-05-29 15:32 – 2013-01-22 10:56 – 000004096 ___SH C:VSNAP.IDX\n2020-05-29 14:29 – 2018-08-01 10:16 – 000000000 ____D C:UsersKMieleAppDataLocalCutePDF Writer\n2020-05-29 12:38 – 2018-03-12 10:20 – 000000000 ____D C:scans\n2020-05-28 12:51 – 2015-10-14 08:59 – 000000000 ____D C:ProgramDataPackage Cache\n2020-05-26 12:19 – 2017-09-06 10:38 – 000000000 ____D C:UsersGemmitiA\n2020-05-26 08:21 – 2016-12-05 21:15 – 000002061 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsAcrobat Reader DC.lnk\n2020-05-26 08:09 – 2018-06-20 10:35 – 000000000 ____D C:ProgramDataregid.1991-06.com.microsoft\n2020-05-26 08:08 – 2012-08-15 00:57 – 000000000 ____D C:Program Files (x86)Microsoft Office\n2020-05-26 08:08 – 2009-07-14 00:45 – 000454456 _____ C:Windowssystem32FNTCACHE.DAT\n2020-05-21 21:37 – 2014-12-08 14:04 – 000002226 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsGoogle Chrome.lnk\n2020-05-21 21:37 – 2014-12-08 14:04 – 000002185 _____ C:UsersPublicDesktopGoogle Chrome.lnk\n2020-05-21 21:37 – 2014-12-08 14:04 – 000002185 _____ C:ProgramDataDesktopGoogle Chrome.lnk\n2020-05-13 03:02 – 2017-09-06 09:53 – 000000000 ____D C:Windowssystem32MRT\n2020-05-13 03:00 – 2017-09-06 09:52 – 120636720 ____C (Microsoft Corporation) C:Windowssystem32MRT.exe\n2020-05-12 15:28 – 2017-09-06 11:20 – 000000000 ____D C:UsersKMieleAppDataLocalCrashDumps\n2020-05-12 14:10 – 2012-08-15 00:39 – 000842296 _____ (Adobe) C:WindowsSysWOW64FlashPlayerApp.exe\n2020-05-12 14:10 – 2012-08-15 00:39 – 000175160 _____ (Adobe) C:WindowsSysWOW64FlashPlayerCPLApp.cpl\n2020-05-12 14:10 – 2012-08-15 00:39 – 000004312 _____ C:Windowssystem32TasksAdobe Flash Player Updater\n2020-05-12 14:10 – 2012-08-15 00:39 – 000000000 ____D C:WindowsSysWOW64Macromed\n2020-05-12 14:10 – 2012-08-15 00:39 – 000000000 ____D C:Windowssystem32Macromed\n2020-05-09 15:53 – 2017-11-09 15:54 – 000003166 _____ C:Windowssystem32TasksOneDrive Standalone Update Task-S-1-5-21-928097801-345109163-1125972616-1107\n2020-05-09 15:53 – 2017-11-08 09:40 – 000002160 _____ C:UsersKMieleAppDataRoamingMicrosoftWindowsStart MenuProgramsMicrosoft OneDrive.lnk\n2020-05-09 15:53 – 2017-11-08 09:40 – 000000000 ___RD C:UsersKMieleOneDrive\n2020-05-05 13:29 – 2019-08-27 10:09 – 000000000 _____ C:UsersKMieleDocuments63aa4421-cdd9-4382-b7e9-8150eac235f3","html":"2020-05-31 11:05 – 2017-09-07 08:48 – 000000000 ____D C:UsersKMieleAppDataLocalDeployment\n2020-05-31 10:57 – 2016-11-14 10:58 – 000000911 _____ C:WindowsTasksEPSON WF-7610 Series Update 5C8C4560-2AA2-4E44-AEF1-4B9AEDB0323F.job\n2020-05-31 10:57 – 2016-11-14 10:58 – 000000725 _____ C:WindowsTasksEPSON WF-7610 Series Invitation 5C8C4560-2AA2-4E44-AEF1-4B9AEDB0323F.job\n2020-05-31 10:53 – 2009-07-14 01:32 – 000000000 ____D C:Windowssystem32FxsTmp\n2020-05-31 10:49 – 2017-09-06 10:29 – 000000112 _____ C:Windowssystem32confignetlogon.ftl\n2020-05-31 10:49 – 2009-07-13 23:20 – 000000000 ____D C:WindowsRegistration\n2020-05-31 04:37 – 2015-08-04 14:19 – 000000504 _____ C:WindowsTasksG2MUpdateTask-S-1-5-21-302665900-850237627-724062673-1000.job\n2020-05-31 04:25 – 2016-08-22 14:25 – 000000911 _____ C:WindowsTasksEPSON WF-7610 Series Update 39C1617B-E859-4EF3-B298-7E9FB6CA08E0.job\n2020-05-31 04:25 – 2016-08-22 14:25 – 000000725 _____ C:WindowsTasksEPSON WF-7610 Series Invitation 39C1617B-E859-4EF3-B298-7E9FB6CA08E0.job\n2020-05-31 04:22 – 2016-11-14 10:22 – 000000911 _____ C:WindowsTasksEPSON WF-7610 Series Update FF28E7AF-4CCD-468C-A99D-00F55294ED94.job\n2020-05-31 04:22 – 2016-11-14 10:22 – 000000725 _____ C:WindowsTasksEPSON WF-7610 Series Invitation FF28E7AF-4CCD-468C-A99D-00F55294ED94.job\n2020-05-31 04:14 – 2009-07-14 00:45 – 000034832 ____H C:Windowssystem327B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0\n2020-05-31 04:14 – 2009-07-14 00:45 – 000034832 ____H C:Windowssystem327B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0\n2020-05-31 04:13 – 2016-11-14 10:14 – 000000911 _____ C:WindowsTasksEPSON WF-7610 Series Update F041DFFD-6EE2-46E8-AF61-EDAD1E811B30.job\n2020-05-31 04:13 – 2016-11-14 10:14 – 000000725 _____ C:WindowsTasksEPSON WF-7610 Series Invitation F041DFFD-6EE2-46E8-AF61-EDAD1E811B30.job\n2020-05-30 15:53 – 2017-09-06 10:35 – 000001415 _____ C:UsersKMieleAppDataRoamingMicrosoftWindowsStart MenuProgramsInternet Explorer.lnk\n2020-05-30 15:47 – 2020-01-07 13:47 – 000000000 ____D C:UsersKMieleDesktopACCURATE I-backup2019.zip\n2020-05-30 15:32 – 2015-08-04 14:19 – 000000600 _____ C:WindowsTasksG2MUploadTask-S-1-5-21-302665900-850237627-724062673-1000.job\n2020-05-30 14:26 – 2009-07-14 01:13 – 000804870 _____ C:Windowssystem32PerfStringBackup.INI\n2020-05-30 14:26 – 2009-07-13 23:20 – 000000000 ____D C:Windowsinf\n2020-05-30 14:24 – 2017-09-06 10:35 – 000000000 __SHD C:UsersKMieleIntelGraphicsProfiles\n2020-05-30 14:18 – 2018-03-29 14:38 – 000000000 ____D C:Program Files (x86)TeamViewer\n2020-05-30 14:18 – 2009-07-14 01:08 – 000000006 ____H C:WindowsTasksSA.DAT\n2020-05-29 15:32 – 2013-01-22 10:56 – 000004096 ___SH C:VSNAP.IDX\n2020-05-29 14:29 – 2018-08-01 10:16 – 000000000 ____D C:UsersKMieleAppDataLocalCutePDF Writer\n2020-05-29 12:38 – 2018-03-12 10:20 – 000000000 ____D C:scans\n2020-05-28 12:51 – 2015-10-14 08:59 – 000000000 ____D C:ProgramDataPackage Cache\n2020-05-26 12:19 – 2017-09-06 10:38 – 000000000 ____D C:UsersGemmitiA\n2020-05-26 08:21 – 2016-12-05 21:15 – 000002061 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsAcrobat Reader DC.lnk\n2020-05-26 08:09 – 2018-06-20 10:35 – 000000000 ____D C:ProgramDataregid.1991-06.com.microsoft\n2020-05-26 08:08 – 2012-08-15 00:57 – 000000000 ____D C:Program Files (x86)Microsoft Office\n2020-05-26 08:08 – 2009-07-14 00:45 – 000454456 _____ C:Windowssystem32FNTCACHE.DAT\n2020-05-21 21:37 – 2014-12-08 14:04 – 000002226 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsGoogle Chrome.lnk\n2020-05-21 21:37 – 2014-12-08 14:04 – 000002185 _____ C:UsersPublicDesktopGoogle Chrome.lnk\n2020-05-21 21:37 – 2014-12-08 14:04 – 000002185 _____ C:ProgramDataDesktopGoogle Chrome.lnk\n2020-05-13 03:02 – 2017-09-06 09:53 – 000000000 ____D C:Windowssystem32MRT\n2020-05-13 03:00 – 2017-09-06 09:52 – 120636720 ____C (Microsoft Corporation) C:Windowssystem32MRT.exe\n2020-05-12 15:28 – 2017-09-06 11:20 – 000000000 ____D C:UsersKMieleAppDataLocalCrashDumps\n2020-05-12 14:10 – 2012-08-15 00:39 – 000842296 _____ (Adobe) C:WindowsSysWOW64FlashPlayerApp.exe\n2020-05-12 14:10 – 2012-08-15 00:39 – 000175160 _____ (Adobe) C:WindowsSysWOW64FlashPlayerCPLApp.cpl\n2020-05-12 14:10 – 2012-08-15 00:39 – 000004312 _____ C:Windowssystem32TasksAdobe Flash Player Updater\n2020-05-12 14:10 – 2012-08-15 00:39 – 000000000 ____D C:WindowsSysWOW64Macromed\n2020-05-12 14:10 – 2012-08-15 00:39 – 000000000 ____D C:Windowssystem32Macromed\n2020-05-09 15:53 – 2017-11-09 15:54 – 000003166 _____ C:Windowssystem32TasksOneDrive Standalone Update Task-S-1-5-21-928097801-345109163-1125972616-1107\n2020-05-09 15:53 – 2017-11-08 09:40 – 000002160 _____ C:UsersKMieleAppDataRoamingMicrosoftWindowsStart MenuProgramsMicrosoft OneDrive.lnk\n2020-05-09 15:53 – 2017-11-08 09:40 – 000000000 ___RD C:UsersKMieleOneDrive\n2020-05-05 13:29 – 2019-08-27 10:09 – 000000000 _____ C:UsersKMieleDocuments63aa4421-cdd9-4382-b7e9-8150eac235f3
"},{"id":"text-33","type":"text","heading":"","plain_text":"==================== Files in the root of some directories ========","html":"==================== Files in the root of some directories ========
"},{"id":"text-34","type":"text","heading":"","plain_text":"2013-04-14 11:36 – 2013-04-14 11:36 – 001393736 _____ (Citrix Online, a division of Citrix Systems, Inc.) C:UsersKMgotomypc_635.exe","html":"2013-04-14 11:36 – 2013-04-14 11:36 – 001393736 _____ (Citrix Online, a division of Citrix Systems, Inc.) C:UsersKMgotomypc_635.exe
"},{"id":"text-35","type":"text","heading":"","plain_text":"==================== SigCheck ============================","html":"==================== SigCheck ============================
"},{"id":"text-36","type":"text","heading":"","plain_text":"(There is no automatic fix for files that do not pass verification.)","html":"(There is no automatic fix for files that do not pass verification.)
"},{"id":"text-37","type":"text","heading":"","plain_text":"LastRegBack: 2020-05-27 00:31\n==================== End of FRST.txt ========================","html":"LastRegBack: 2020-05-27 00:31\n==================== End of FRST.txt ========================
"},{"id":"text-38","type":"text","heading":"","plain_text":"Additional scan result of Farbar Recovery Scan Tool (x64) Version: 30-05-2020 01\nRan by GemmitiA (31-05-2020 11:08:21)\nRunning from C:UsersKMieleDownloadsGus\nWindows 7 Professional Service Pack 1 (X64) (2013-01-09 14:03:01)\nBoot Mode: Normal\n==========================================================","html":"Additional scan result of Farbar Recovery Scan Tool (x64) Version: 30-05-2020 01\nRan by GemmitiA (31-05-2020 11:08:21)\nRunning from C:UsersKMieleDownloadsGus\nWindows 7 Professional Service Pack 1 (X64) (2013-01-09 14:03:01)\nBoot Mode: Normal\n==========================================================
"},{"id":"text-39","type":"text","heading":"","plain_text":"==================== Accounts: =============================","html":"==================== Accounts: =============================
"},{"id":"text-40","type":"text","heading":"","plain_text":"Administrator (S-1-5-21-302665900-850237627-724062673-500 – Administrator – Disabled)\nGuest (S-1-5-21-302665900-850237627-724062673-501 – Limited – Enabled)\nKM (S-1-5-21-302665900-850237627-724062673-1000 – Administrator – Enabled) => C:UsersKM\nscans (S-1-5-21-302665900-850237627-724062673-1001 – Administrator – Enabled)","html":"Administrator (S-1-5-21-302665900-850237627-724062673-500 – Administrator – Disabled)\nGuest (S-1-5-21-302665900-850237627-724062673-501 – Limited – Enabled)\nKM (S-1-5-21-302665900-850237627-724062673-1000 – Administrator – Enabled) => C:UsersKM\nscans (S-1-5-21-302665900-850237627-724062673-1001 – Administrator – Enabled)
"},{"id":"text-41","type":"text","heading":"","plain_text":"==================== Security Center ========================","html":"==================== Security Center ========================
"},{"id":"text-42","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed.)","html":"(If an entry is included in the fixlist, it will be removed.)
"},{"id":"text-43","type":"text","heading":"","plain_text":"AV: Microsoft Security Essentials (Enabled – Up to date) 71A27EC9-3DA6-45FC-60A7-004F623C6189\nAS: Microsoft Security Essentials (Enabled – Up to date) CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34\nAS: Windows Defender (Disabled – Out of date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46","html":"AV: Microsoft Security Essentials (Enabled – Up to date) 71A27EC9-3DA6-45FC-60A7-004F623C6189\nAS: Microsoft Security Essentials (Enabled – Up to date) CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34\nAS: Windows Defender (Disabled – Out of date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46
"},{"id":"text-44","type":"text","heading":"","plain_text":"==================== Installed Programs ======================","html":"==================== Installed Programs ======================
"},{"id":"text-45","type":"text","heading":"","plain_text":"(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)","html":"(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
"},{"id":"text-46","type":"text","heading":"","plain_text":"ABBYY FineReader 6.0 Sprint (HKLM-x32…ACF60000-22B9-4CE9-98D6-2CCF359BAC07) (Version: 6.00.1395.4512 – ABBYY Software House)\nActian PSQL v13 Workgroup (HKLM-x32…A3238D7-AB32-1330-B717-F3E3F18B4A8C) (Version: 13.31.005 – Actian Corporation) Hidden\nActian PSQL v13 Workgroup R2 (HKLM-x32…Actian PSQL v13 Workgroup) (Version: 13.31.005 – Actian Corporation)\nAdobe Acrobat Reader DC (HKLM-x32…AC76BA86-7AD7-1033-7B44-AC0F074E4100) (Version: 20.009.20065 – Adobe Systems Incorporated)\nAdobe Flash Player 32 ActiveX (HKLM-x32…Adobe Flash Player ActiveX) (Version: 32.0.0.371 – Adobe)\nBioAPI Framework (HKLM…9DAED4FC-2B0E-4F3F-8141-F2ABF02CCFCB) (Version: 1.0.2 – Dell Inc.) Hidden\nBonjour (HKLM…B91110FB-33B4-468B-90C2-4D5E8AE3FAE1) (Version: 2.0.2.0 – Apple Inc.)\nBUFFALO NAS Navigator2 (HKLM-x32…UN060501) (Version: – )\nCisco WebEx Meetings (HKLM-x32…ActiveTouchMeetingClient) (Version: – Cisco WebEx LLC)\nCitrix Online Launcher (HKLM-x32…DB014C85-A264-4BCA-A66F-6DD1FCF8EC36) (Version: 1.0.335 – Citrix)\nCompatibility Pack for the 2007 Office system (HKLM-x32…90120000-0020-0409-0000-0000000FF1CE) (Version: 12.0.6612.1000 – Microsoft Corporation)\nCrystal Reports 2008 Runtime SP1 (HKLM-x32…C484CC8D-03CF-4022-89C4-DB4F02E8A15B) (Version: 12.1.0.882 – Business Objects)\nCustom (HKLM…7206B668-FEE0-455B-BB1F-9B5A2E0EC94A) (Version: 01.00.00.000 – Wave Systems Corp.) Hidden\nCutePDF Writer 3.2 (HKLM…CutePDF Writer Installation) (Version: 3.2 – Acro Software Inc.)\nD3DX10 (HKLM-x32…E09C4DB7-630C-4F06-A631-8EA7239923AF) (Version: 15.4.2368.0902 – Microsoft) Hidden\nDell Client System Update (HKLM-x32…2B2B45B1-3CA0-4F8D-BBB3-AC77ED46A0FE) (Version: 1.2.3 – Dell Inc.)\nDell Data Protection | Access (HKLM…ABBA2EA4-740E-4052-902B-9CA70B081E3F) (Version: 2.2.00001.001 – Dell Inc.)\nDell Edoc Viewer (HKLM…8EBA8727-ADC2-477B-9D9A-1A1836BE4E05) (Version: 1.0.0 – Dell Inc)\nDell System Detect (HKUS-1-5-21-928097801-345109163-1125972616-1104…d24084d039586cae) (Version: 8.8.0.1 – Dell)\nDellAccess (HKLM…F839C6BD-E92E-48FA-9CE6-7BFAF94F7096) (Version: 01.01.00.104 – Wave Systems Corp.) Hidden\nDYMO Label (HKLM-x32…2C8F4C88-E015-4D55-AB5A-ABD1C53C1B71) (Version: 8.6.710.0 – Newell Rubbermaid)\nEMBASSY Client Core (HKLM…5F5CBF39-BD29-43C8-B63A-B9758F0FD090) (Version: 01.01.00.036 – Wave Systems Corp.) Hidden\nEpson Connect Printer Setup (HKLM-x32…D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C) (Version: 1.3.0 – SEIKO EPSON CORPORATION)\nEpson Copy Utility 3.4 (HKLM-x32…AA72FB28-73B4-49E5-B6B4-E78F44BBD0AD) (Version: 3.4.0.0 – )\nEpson Customer Participation (HKLM…814FA673-A085-403C-9545-747FC1495069) (Version: 1.7.0.0 – SEIKO EPSON CORPORATION)\nEpson Event Manager (HKLM-x32…116DBCAF-9544-4592-9156-AC99F6C2D426) (Version: 3.10.0016 – Seiko Epson Corporation)\nEpson FAX Utility (HKLM-x32…CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A) (Version: 1.51.00 – SEIKO EPSON CORPORATION)\nEPSON GT-1500 User's Guide (HKLM-x32…Silent Package Run-Time Sample) (Version: – )\nEpson PC-FAX Driver (HKLM-x32…EPSON PC-FAX Driver 2) (Version: – )\nEPSON Print CD (HKLM-x32…FF477885-5EA8-40D0-ADF3-D4C1B86FAEA4) (Version: 1.50.000 – )\nEPSON Printer Software (HKLM…EPSON Printer and Utilities) (Version: – )\nEPSON Scan (HKLM-x32…EPSON Scanner) (Version: – Seiko Epson Corporation)\nEPSON Scan OCR Component (HKLM-x32…563B99D8-8895-4E3E-AE8D-15BE8C05F1C1) (Version: 2.30.00 – SEIKO EPSON Corp.)\nEPSON Scan PDF EXtensions (HKLM-x32…F9956472-6E16-4F83-BF9A-F887EF4A45B7) (Version: 1.00.0000 – SEIKO EPSON Corp.)\nEPSON WF-7610 Series Printer Uninstall (HKLM…EPSON WF-7610 Series) (Version: – SEIKO EPSON Corporation)\nEpson WF-7610 User’s Guide version 1.0 (HKLM-x32…UsersGuideEpson WF-7610 User’s Guide_is1) (Version: 1.0 – )\nEpsonNet Print (HKLM-x32…3E31400D-274E-4647-916C-2CACC3741799) (Version: 2.6.0 – SEIKO EPSON CORPORATION)\nExtended Asian Language font pack for Adobe Acrobat Reader DC (HKLM-x32…AC76BA86-7AD7-2530-0000-AC0F074E4100) (Version: 15.007.20033 – Adobe Systems Incorporated)\nFoxit PhantomPDF (HKLM-x32…60f0af00-8a56-11ea-ac63-54bf64a63c26) (Version: 10.0.0.35798 – Foxit Software Inc.) Hidden\nFoxit PhantomPDF (HKLM-x32…deb2552c-f9a9-498e-990d-b1f599ff15a1) (Version: 10.0.0.35798 – Foxit Software Inc.)\nGemalto (HKLM…91CE5F03-3A2A-4268-935A-04944F058AE9) (Version: 01.64.01.0010 – Wave Systems Corp) Hidden\nGoogle Chrome (HKLM-x32…Google Chrome) (Version: 83.0.4103.61 – Google LLC)\nGoogle Update Helper (HKLM-x32…60EC980A-BDA2-4CB6-A427-B07A5498B4CA) (Version: 1.3.35.451 – Google LLC) Hidden\nGoogle Update Helper (HKLM-x32…A92DAB39-4E2C-4304-9AB6-BC44E68B55E2) (Version: 1.3.25.11 – Google Inc.) Hidden\nHP LaserJet Professional P1100-P1560-P1600 Series (HKLM…HP LaserJet Professional P1100-P1560-P1600 Series) (Version: – )\nhppLaserJetService (HKLM-x32…D371F551-0DB9-4CEC-844B-4C90CE91EA0B) (Version: 001.001.0.0 – Hewlett-Packard) Hidden\nhppP1100P1560P1600SeriesLaserJetService (HKLM-x32…E448256-D515-4C3E-A5BE-0A7B76CED5D4) (Version: 001.001.0.0 – Hewlett-Packard) Hidden\nhppusgP1100P1560P1600Series (HKLM-x32…853F464A-B2B8-404E-BA3E-B98FF6862C41) (Version: 1.0.0.1 – Hewlett-Packard) Hidden\nHPSSupply (HKLM-x32…7902E313-FF0F-4493-ACB1-A8147B78DCD0) (Version: 2.1.1.0000 – Hewlett Packard Development Company L.P.)\nIntel® Control Center (HKLM-x32…F8A9085D-4C7A-41a9-8A77-C8998A96C421) (Version: 1.2.1.1007 – Intel Corporation)\nIntel® Management Engine Components (HKLM-x32…65153EA5-8B6E-43B6-857B-C6E4FC25798A) (Version: 9.5.15.1730 – Intel Corporation)\nIntel® Network Connections 16.8.45.00 (HKLM…PROSetDX) (Version: 16.8.45.00 – Dell)\nIntel® Processor Graphics (HKLM-x32…F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA) (Version: 10.18.10.4425 – Intel Corporation)\nIntel® Rapid Storage Technology (HKLM-x32…3E29EE6C-963A-4aae-86C1-DC237C4A49FC) (Version: 11.0.0.1032 – Intel Corporation)\nIntel® USB 3.0 eXtensible Host Controller Driver (HKLM-x32…240C3DDD-C5E9-4029-9DF7-95650D040CF2) (Version: 1.0.4.220 – Intel Corporation)\nJunk Mail filter update (HKLM-x32…1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nKONICA MINOLTA C759_C658_C368_C287_C3851Series (HKLM…KONICA MINOLTA C759_C658_C368_C287_C3851Series Installer) (Version: – KONICA MINOLTA)\nLiveUpdate 3.2 (Symantec Corporation) (HKLM-x32…LiveUpdate) (Version: 3.2.0.68 – Symantec Corporation)\nMarketResearch (HKLM-x32…175F0111-2968-4935-8F70-33108C6A4DE3) (Version: 130.0.374.000 – Hewlett-Packard) Hidden\nMesh Runtime (HKLM-x32…8C6D6116-B724-4810-8F2D-D047E6B7D68E) (Version: 15.4.5722.2 – Microsoft Corporation) Hidden\nMicrosoft .NET Framework 4.8 (HKLM…92FB6C44-E685-45AD-9B20-CADF4CABA132 – 1033) (Version: 4.8.03761 – Microsoft Corporation)\nMicrosoft ASP.NET MVC 2 (HKLM-x32…DD8FF2F3-0D97-4CF3-AF78-FA0E1B242244) (Version: 2.0.60926.0 – Microsoft Corporation)\nMicrosoft Office 365 – en-us (HKLM…O365HomePremRetail – en-us) (Version: 16.0.12527.20612 – Microsoft Corporation)\nMicrosoft OneDrive (HKU.DEFAULT…OneDriveSetup.exe) (Version: 17.3.6743.1212 – Microsoft Corporation)\nMicrosoft OneDrive (HKUS-1-5-21-928097801-345109163-1125972616-1104…OneDriveSetup.exe) (Version: 17.3.6743.1212 – Microsoft Corporation)\nMicrosoft OneDrive (HKUS-1-5-21-928097801-345109163-1125972616-1107…OneDriveSetup.exe) (Version: 20.052.0311.0011 – Microsoft Corporation)\nMicrosoft Security Essentials (HKLM…Microsoft Security Client) (Version: 4.10.209.0 – Microsoft Corporation)\nMicrosoft Silverlight (HKLM…89F4137D-6C26-4A84-BDB8-2E5A4BB71E00) (Version: 5.1.50918.0 – Microsoft Corporation)\nMicrosoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32…F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8) (Version: 3.1.0000 – Microsoft Corporation)\nMicrosoft SQL Server Compact 4.0 x64 ENU (HKLM…8424B163-D1E0-48B7-88A2-C7A61767B3D7) (Version: 4.0.8482.1 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…710f4c1c-cc18-4c49-8cbf-51240c89a1a2) (Version: 8.0.61001 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…837b34e3-7c30-493c-8f6a-2b0f04e2912c) (Version: 8.0.59193 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (x64) (HKLM…71c9b48-7c32-4621-a0ac-3f809523288f) (Version: 8.0.56336 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (x64) (HKLM…ad8a2fa1-06e7-4b0d-927d-6e54b3d31028) (Version: 8.0.61000 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x64 9.0.30729.17 (HKLM…8220EEFE-38CD-377E-8595-13398D740ACE) (Version: 9.0.30729 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x64 9.0.30729.6161 (HKLM…5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.17 (HKLM-x32…9A25302D-30C0-39D9-BD6F-21E6EC160475) (Version: 9.0.30729 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.4148 (HKLM-x32…1F1C2DFC-2D24-3E06-BCB8-725134ADF989) (Version: 9.0.30729.4148 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.6161 (HKLM-x32…9BE518E6-ECC6-35A9-88E4-87755C07200F) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C++ 2010 x64 Redistributable – 10.0.40219 (HKLM…1D8E6291-B0D5-35EC-8441-6616F567A0F7) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2010 x86 Redistributable – 10.0.40219 (HKLM-x32…F0C3E5D1-1ADE-321E-8167-68EF0DE699A5) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x64) – 11.0.61030 (HKLM-x32…ca67548a-5ebe-413a-b50c-4b9ceb6d66c6) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x86) – 11.0.50727 (HKLM-x32…22154f09-719a-4619-bb71-5b3356999fbf) (Version: 11.0.50727.1 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x86) – 11.0.61030 (HKLM-x32…33d1fd90-4274-48a1-9bc1-97e33d9c2d6f) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x64) – 12.0.21005 (HKLM-x32…7f51bdb9-ee21-49ee-94d6-90afc321780e) (Version: 12.0.21005.1 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x64) – 12.0.40660 (HKLM-x32…ef6b00ec-13e1-4c25-9064-b2f383cb8412) (Version: 12.0.40660.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x86) – 12.0.21005 (HKLM-x32…ce085a78-074e-4823-8dc1-8a721b94b76d) (Version: 12.0.21005.1 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x86) – 12.0.40660 (HKLM-x32…61087a79-ac85-455c-934d-1fa22cc64f36) (Version: 12.0.40660.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2017 Redistributable (x64) – 14.11.25325 (HKLM-x32…6c6356fe-cbfa-4944-9bed-a9e99f45cb7a) (Version: 14.11.25325.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2017 Redistributable (x86) – 14.11.25325 (HKLM-x32…404c9c27-8377-4fd1-b607-7ca635db4e49) (Version: 14.11.25325.0 – Microsoft Corporation)\nMicrosoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM…Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 – Microsoft Corporation)\nMSXML 4.0 SP2 (KB954430) (HKLM-x32…86493ADD-824D-4B8E-BD72-8C5DCDC52A71) (Version: 4.20.9870.0 – Microsoft Corporation)\nMSXML 4.0 SP2 (KB973688) (HKLM-x32…F662A8E6-F4DC-41A2-901E-8C11F044BDEC) (Version: 4.20.9876.0 – Microsoft Corporation)\nNorton Ghost (HKLM-x32…B0255743-165B-4BD5-8DA8-37DFB9930015) (Version: 15.0.1.36526 – Symantec Corporation)\nNTRU TCG Software Stack (HKLM…E9A97832-83B6-42B6-BAC6-492E344C2561) (Version: 2.1.37 – Security Innovation, Inc.) Hidden\nOffice 16 Click-to-Run Extensibility Component (HKLM-x32…90160000-008C-0000-0000-0000000FF1CE) (Version: 16.0.12527.20278 – Microsoft Corporation) Hidden\nOffice 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM…90160000-00DD-0000-1000-0000000FF1CE) (Version: 16.0.12527.20278 – Microsoft Corporation) Hidden\nOffice 16 Click-to-Run Licensing Component (HKLM…90160000-008F-0000-1000-0000000FF1CE) (Version: 16.0.12527.20612 – Microsoft Corporation) Hidden\nOffice 16 Click-to-Run Localization Component (HKLM-x32…90160000-008C-0409-0000-0000000FF1CE) (Version: 16.0.12527.20278 – Microsoft Corporation) Hidden\nPaperPort Image Printer 64-bit (HKLM…ABA4FAF1-6389-45F9-92CE-3914A4E5C471) (Version: 1.00.0000 – Nuance Communications, Inc.)\nPC-CCID (HKLM…3DCDFCDB-4D96-4CF0-9BB3-C91DAE9073F3) (Version: 2.0.0 – Gemalto) Hidden\nPreboot Manager (HKLM…3A6BE9F4-5FC8-44BB-BE7B-32A29607FEF6) (Version: 03.03.00.090 – Wave Systems Corp.) Hidden\nPrivate Information Manager (HKLM…B0A2153-58A6-4244-B458-25EDF5FCD809) (Version: 07.01.00.030 – Wave Systems Corp.) Hidden\nRAIDar 4.3.8 (HKLM-x32…1381-5408-0515-7060) (Version: 4.3.8 – Netgear Inc.)\nRealtek High Definition Audio Driver (HKLM-x32…F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC) (Version: 6.0.1.5907 – Realtek Semiconductor Corp.)\nSage 50 Accounting 2013 (HKLM-x32…1768BEA4-3469-45FB-8EFB-6742E1C0E86F) (Version: 20.00.00 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2014 (HKLM-x32…D2ADA6F5-F155-4A37-87CA-599E81F6C6C0) (Version: 21.00.00 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2015 (HKLM-x32…F3A0C9F5-77DD-4DE2-A2DF-7DB0687BA092) (Version: 22.02.00 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2016 (HKLM-x32…A0D9DC3A-156B-4785-9C7B-43DAC2D662A6) (Version: 23.00.00 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2017 (HKLM-x32…6A4CCB61-447D-432E-B56A-7D5D7626E7B5) (Version: 24.01.01 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2018 (HKLM-x32…FC7C07F7-E985-41D9-8A4F-709CE035D446) (Version: 25.00.00 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2019 (HKLM-x32…555A9126-7983-44D6-9D76-F4731B19B925) (Version: 26.01.00 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2020 (HKLM-x32…068FE61-EBAA-4F22-9D76-479DCBA14513) (Version: 27.00.00 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2020 (HKLM-x32…InstallShield_0068FE61-EBAA-4F22-9D76-479DCBA14513) (Version: 27.00.00 – Sage Software, Inc.)\nSage 50 Accounting Tax Forms (HKLM-x32…BA1EF4A7-AB67-492B-9C7D-4AEE43F5A3C6) (Version: 18.4.23 – Sage Software SB, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…016E8A4-03D0-4EBC-B927-6D51CD42C9D6) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…08A1E2E-2E39-42C7-8E5B-F2D8F4561EAA) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…3B37DB84-9E4E-4424-B83D-12C112520642) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…4E1146C8-A878-4197-A631-2F3C472DE5CC) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…5AB7FDBD-4A2E-4264-BB76-57A71200DD4A) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…6BCE889D-6AE2-4795-A90D-5BCCF04314A0) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…73AFBAE1-95F3-4598-8223-BAAE31675C90) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…FC9CD015-1E98-4A8B-94A7-99032706FB71) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…FD6B5B7C-EFD9-43B0-967B-828B89D7D273) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Payroll Sync Wizard (HKLM-x32…B3B149E0-51F9-4D82-9648-8A2D22281B21) (Version: 1.6.0.0002 – Sage Software, Inc.) Hidden\nSage 50 Payroll Sync Wizard (HKLM-x32…InstallShield_B3B149E0-51F9-4D82-9648-8A2D22281B21) (Version: 1.6.0.0002 – Sage Software, Inc.)\nSage 50 Payroll Sync Wizard 2.x (HKLM-x32…499B5712-AB99-4D5A-9E5F-967D92976E33) (Version: 2.6.0.0007 – Sage Software, Inc.) Hidden\nSage 50 Payroll Sync Wizard 2.x (HKLM-x32…InstallShield_499B5712-AB99-4D5A-9E5F-967D92976E33) (Version: 2.6.0.0007 – Sage Software, Inc.)\nSage Integration Services (HKLM-x32…Integration Services) (Version: 2.2.2240 – Sage Technology)\nSageDataExchangeAdapters (HKLM-x32…E6F432FF-49C9-4313-B00F-329B0E13F184) (Version: 1.01.0000 – Sage Software, Inc.)\nSAP Crystal Reports runtime engine for .NET Framework 4 (32-bit) (HKLM-x32…AAD476D7-FC64-40BC-85EA-0C1FD98D8375) (Version: 13.0.3.612 – SAP)\nScanSoft PaperPort 11 (HKLM-x32…DEA18FF6-D84A-4242-9663-692E5BA56805) (Version: 11.1.0000 – Nuance Communications, Inc.)\nSeagate Dashboard (HKLM-x32…EA266F00-A8E7-43A0-8DED-FBFE3F076934) (Version: 4.2.002.0 – Seagate)\nSoftware Updater (HKLM-x32…E1BAD1BA-C0E8-4018-9281-E7D2C6B07474) (Version: 4.3.6 – SEIKO EPSON CORPORATION)\nSPBA 5.9 (HKLM…2EECD5EF-5095-467C-B80C-4AB3096EFD60) (Version: 5.9.4.6901 – UPEK Inc.) Hidden\nSynology Active Backup for Business Agent (HKLM-x32…81B35851-2C23-4881-BD2C-EB7BA20D0FDA) (Version: 2.1.1125 – Synology)\nTeamViewer (HKLM-x32…TeamViewer) (Version: 15.2.2756 – TeamViewer)\ntoolkit32for64bit (HKLM-x32…703BB500-F54C-4F33-9D3C-D7A28CEAFBCF) (Version: 7.67.47.0000 – Wave Systems Corp) Hidden\nTrusted Drive Manager (HKLM…6AC87FB3-ACFC-4416-890C-8976D5A9B371) (Version: 4.5.0.136 – Wave Systems Corp.) Hidden\nUpek Touchchip Fingerprint Reader (HKLM…4E60E212-3177-4B16-BCB3-616CCC52357D) (Version: 1.2.004 – Dell Inc.) Hidden\nVisual Studio Tools for the Office system 3.0 Runtime (HKLM-x32…Visual Studio Tools for the Office system 3.0 Runtime) (Version: – Microsoft Corporation)\nVisual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32…8FB53850-246A-3507-8ADE-0060093FFEA6.KB949258) (Version: 1 – Microsoft Corporation)\nWave Crypto Runtime 2.0.7.0 x86 (HKLM-x32…8C0600A3-E772-4FC8-A67D-ED110E69665C) (Version: 02.00.07.0000 – Wave Systems Corp) Hidden\nWave Infrastructure Installer (HKLM…30C2392C-C7D6-4FE2-9617-05D2C6E9D3EE) (Version: 07.67.60.0020 – Wave Systems Corp) Hidden\nWave Support Software Installer (HKLM…7D618CD-B016-438A-ADC9-A75BD23F85CE) (Version: 05.13.00.051 – Wave Systems Corp) Hidden\nWindows Driver Package – Dell Inc. PBADRV System (09/11/2009 1.0.1.6) (HKLM…9512AA21B791B05A54E27065C45BBC417AB282DF) (Version: 09/11/2009 1.0.1.6 – Dell Inc.)\nWindows Live Essentials (HKLM-x32…WinLiveSuite) (Version: 15.4.3508.1109 – Microsoft Corporation)\nWindows Live Mesh ActiveX Control for Remote Connections (HKLM-x32…2902F983-B4C1-44BA-B85D-5C6D52E2C441) (Version: 15.4.5722.2 – Microsoft Corporation)\nWizTree v3.21 (HKLM…WizTree_is1) (Version: – Antibody Software)\nWorkForce GT-1500 Scanner Driver Update (HKLM-x32…37D0F29D-AB95-4598-ACF0-D3CC38C161D9) (Version: – )","html":"ABBYY FineReader 6.0 Sprint (HKLM-x32…ACF60000-22B9-4CE9-98D6-2CCF359BAC07) (Version: 6.00.1395.4512 – ABBYY Software House)\nActian PSQL v13 Workgroup (HKLM-x32…A3238D7-AB32-1330-B717-F3E3F18B4A8C) (Version: 13.31.005 – Actian Corporation) Hidden\nActian PSQL v13 Workgroup R2 (HKLM-x32…Actian PSQL v13 Workgroup) (Version: 13.31.005 – Actian Corporation)\nAdobe Acrobat Reader DC (HKLM-x32…AC76BA86-7AD7-1033-7B44-AC0F074E4100) (Version: 20.009.20065 – Adobe Systems Incorporated)\nAdobe Flash Player 32 ActiveX (HKLM-x32…Adobe Flash Player ActiveX) (Version: 32.0.0.371 – Adobe)\nBioAPI Framework (HKLM…9DAED4FC-2B0E-4F3F-8141-F2ABF02CCFCB) (Version: 1.0.2 – Dell Inc.) Hidden\nBonjour (HKLM…B91110FB-33B4-468B-90C2-4D5E8AE3FAE1) (Version: 2.0.2.0 – Apple Inc.)\nBUFFALO NAS Navigator2 (HKLM-x32…UN060501) (Version: – )\nCisco WebEx Meetings (HKLM-x32…ActiveTouchMeetingClient) (Version: – Cisco WebEx LLC)\nCitrix Online Launcher (HKLM-x32…DB014C85-A264-4BCA-A66F-6DD1FCF8EC36) (Version: 1.0.335 – Citrix)\nCompatibility Pack for the 2007 Office system (HKLM-x32…90120000-0020-0409-0000-0000000FF1CE) (Version: 12.0.6612.1000 – Microsoft Corporation)\nCrystal Reports 2008 Runtime SP1 (HKLM-x32…C484CC8D-03CF-4022-89C4-DB4F02E8A15B) (Version: 12.1.0.882 – Business Objects)\nCustom (HKLM…7206B668-FEE0-455B-BB1F-9B5A2E0EC94A) (Version: 01.00.00.000 – Wave Systems Corp.) Hidden\nCutePDF Writer 3.2 (HKLM…CutePDF Writer Installation) (Version: 3.2 – Acro Software Inc.)\nD3DX10 (HKLM-x32…E09C4DB7-630C-4F06-A631-8EA7239923AF) (Version: 15.4.2368.0902 – Microsoft) Hidden\nDell Client System Update (HKLM-x32…2B2B45B1-3CA0-4F8D-BBB3-AC77ED46A0FE) (Version: 1.2.3 – Dell Inc.)\nDell Data Protection | Access (HKLM…ABBA2EA4-740E-4052-902B-9CA70B081E3F) (Version: 2.2.00001.001 – Dell Inc.)\nDell Edoc Viewer (HKLM…8EBA8727-ADC2-477B-9D9A-1A1836BE4E05) (Version: 1.0.0 – Dell Inc)\nDell System Detect (HKUS-1-5-21-928097801-345109163-1125972616-1104…d24084d039586cae) (Version: 8.8.0.1 – Dell)\nDellAccess (HKLM…F839C6BD-E92E-48FA-9CE6-7BFAF94F7096) (Version: 01.01.00.104 – Wave Systems Corp.) Hidden\nDYMO Label (HKLM-x32…2C8F4C88-E015-4D55-AB5A-ABD1C53C1B71) (Version: 8.6.710.0 – Newell Rubbermaid)\nEMBASSY Client Core (HKLM…5F5CBF39-BD29-43C8-B63A-B9758F0FD090) (Version: 01.01.00.036 – Wave Systems Corp.) Hidden\nEpson Connect Printer Setup (HKLM-x32…D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C) (Version: 1.3.0 – SEIKO EPSON CORPORATION)\nEpson Copy Utility 3.4 (HKLM-x32…AA72FB28-73B4-49E5-B6B4-E78F44BBD0AD) (Version: 3.4.0.0 – )\nEpson Customer Participation (HKLM…814FA673-A085-403C-9545-747FC1495069) (Version: 1.7.0.0 – SEIKO EPSON CORPORATION)\nEpson Event Manager (HKLM-x32…116DBCAF-9544-4592-9156-AC99F6C2D426) (Version: 3.10.0016 – Seiko Epson Corporation)\nEpson FAX Utility (HKLM-x32…CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A) (Version: 1.51.00 – SEIKO EPSON CORPORATION)\nEPSON GT-1500 User's Guide (HKLM-x32…Silent Package Run-Time Sample) (Version: – )\nEpson PC-FAX Driver (HKLM-x32…EPSON PC-FAX Driver 2) (Version: – )\nEPSON Print CD (HKLM-x32…FF477885-5EA8-40D0-ADF3-D4C1B86FAEA4) (Version: 1.50.000 – )\nEPSON Printer Software (HKLM…EPSON Printer and Utilities) (Version: – )\nEPSON Scan (HKLM-x32…EPSON Scanner) (Version: – Seiko Epson Corporation)\nEPSON Scan OCR Component (HKLM-x32…563B99D8-8895-4E3E-AE8D-15BE8C05F1C1) (Version: 2.30.00 – SEIKO EPSON Corp.)\nEPSON Scan PDF EXtensions (HKLM-x32…F9956472-6E16-4F83-BF9A-F887EF4A45B7) (Version: 1.00.0000 – SEIKO EPSON Corp.)\nEPSON WF-7610 Series Printer Uninstall (HKLM…EPSON WF-7610 Series) (Version: – SEIKO EPSON Corporation)\nEpson WF-7610 User’s Guide version 1.0 (HKLM-x32…UsersGuideEpson WF-7610 User’s Guide_is1) (Version: 1.0 – )\nEpsonNet Print (HKLM-x32…3E31400D-274E-4647-916C-2CACC3741799) (Version: 2.6.0 – SEIKO EPSON CORPORATION)\nExtended Asian Language font pack for Adobe Acrobat Reader DC (HKLM-x32…AC76BA86-7AD7-2530-0000-AC0F074E4100) (Version: 15.007.20033 – Adobe Systems Incorporated)\nFoxit PhantomPDF (HKLM-x32…60f0af00-8a56-11ea-ac63-54bf64a63c26) (Version: 10.0.0.35798 – Foxit Software Inc.) Hidden\nFoxit PhantomPDF (HKLM-x32…deb2552c-f9a9-498e-990d-b1f599ff15a1) (Version: 10.0.0.35798 – Foxit Software Inc.)\nGemalto (HKLM…91CE5F03-3A2A-4268-935A-04944F058AE9) (Version: 01.64.01.0010 – Wave Systems Corp) Hidden\nGoogle Chrome (HKLM-x32…Google Chrome) (Version: 83.0.4103.61 – Google LLC)\nGoogle Update Helper (HKLM-x32…60EC980A-BDA2-4CB6-A427-B07A5498B4CA) (Version: 1.3.35.451 – Google LLC) Hidden\nGoogle Update Helper (HKLM-x32…A92DAB39-4E2C-4304-9AB6-BC44E68B55E2) (Version: 1.3.25.11 – Google Inc.) Hidden\nHP LaserJet Professional P1100-P1560-P1600 Series (HKLM…HP LaserJet Professional P1100-P1560-P1600 Series) (Version: – )\nhppLaserJetService (HKLM-x32…D371F551-0DB9-4CEC-844B-4C90CE91EA0B) (Version: 001.001.0.0 – Hewlett-Packard) Hidden\nhppP1100P1560P1600SeriesLaserJetService (HKLM-x32…E448256-D515-4C3E-A5BE-0A7B76CED5D4) (Version: 001.001.0.0 – Hewlett-Packard) Hidden\nhppusgP1100P1560P1600Series (HKLM-x32…853F464A-B2B8-404E-BA3E-B98FF6862C41) (Version: 1.0.0.1 – Hewlett-Packard) Hidden\nHPSSupply (HKLM-x32…7902E313-FF0F-4493-ACB1-A8147B78DCD0) (Version: 2.1.1.0000 – Hewlett Packard Development Company L.P.)\nIntel® Control Center (HKLM-x32…F8A9085D-4C7A-41a9-8A77-C8998A96C421) (Version: 1.2.1.1007 – Intel Corporation)\nIntel® Management Engine Components (HKLM-x32…65153EA5-8B6E-43B6-857B-C6E4FC25798A) (Version: 9.5.15.1730 – Intel Corporation)\nIntel® Network Connections 16.8.45.00 (HKLM…PROSetDX) (Version: 16.8.45.00 – Dell)\nIntel® Processor Graphics (HKLM-x32…F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA) (Version: 10.18.10.4425 – Intel Corporation)\nIntel® Rapid Storage Technology (HKLM-x32…3E29EE6C-963A-4aae-86C1-DC237C4A49FC) (Version: 11.0.0.1032 – Intel Corporation)\nIntel® USB 3.0 eXtensible Host Controller Driver (HKLM-x32…240C3DDD-C5E9-4029-9DF7-95650D040CF2) (Version: 1.0.4.220 – Intel Corporation)\nJunk Mail filter update (HKLM-x32…1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nKONICA MINOLTA C759_C658_C368_C287_C3851Series (HKLM…KONICA MINOLTA C759_C658_C368_C287_C3851Series Installer) (Version: – KONICA MINOLTA)\nLiveUpdate 3.2 (Symantec Corporation) (HKLM-x32…LiveUpdate) (Version: 3.2.0.68 – Symantec Corporation)\nMarketResearch (HKLM-x32…175F0111-2968-4935-8F70-33108C6A4DE3) (Version: 130.0.374.000 – Hewlett-Packard) Hidden\nMesh Runtime (HKLM-x32…8C6D6116-B724-4810-8F2D-D047E6B7D68E) (Version: 15.4.5722.2 – Microsoft Corporation) Hidden\nMicrosoft .NET Framework 4.8 (HKLM…92FB6C44-E685-45AD-9B20-CADF4CABA132 – 1033) (Version: 4.8.03761 – Microsoft Corporation)\nMicrosoft ASP.NET MVC 2 (HKLM-x32…DD8FF2F3-0D97-4CF3-AF78-FA0E1B242244) (Version: 2.0.60926.0 – Microsoft Corporation)\nMicrosoft Office 365 – en-us (HKLM…O365HomePremRetail – en-us) (Version: 16.0.12527.20612 – Microsoft Corporation)\nMicrosoft OneDrive (HKU.DEFAULT…OneDriveSetup.exe) (Version: 17.3.6743.1212 – Microsoft Corporation)\nMicrosoft OneDrive (HKUS-1-5-21-928097801-345109163-1125972616-1104…OneDriveSetup.exe) (Version: 17.3.6743.1212 – Microsoft Corporation)\nMicrosoft OneDrive (HKUS-1-5-21-928097801-345109163-1125972616-1107…OneDriveSetup.exe) (Version: 20.052.0311.0011 – Microsoft Corporation)\nMicrosoft Security Essentials (HKLM…Microsoft Security Client) (Version: 4.10.209.0 – Microsoft Corporation)\nMicrosoft Silverlight (HKLM…89F4137D-6C26-4A84-BDB8-2E5A4BB71E00) (Version: 5.1.50918.0 – Microsoft Corporation)\nMicrosoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32…F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8) (Version: 3.1.0000 – Microsoft Corporation)\nMicrosoft SQL Server Compact 4.0 x64 ENU (HKLM…8424B163-D1E0-48B7-88A2-C7A61767B3D7) (Version: 4.0.8482.1 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…710f4c1c-cc18-4c49-8cbf-51240c89a1a2) (Version: 8.0.61001 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…837b34e3-7c30-493c-8f6a-2b0f04e2912c) (Version: 8.0.59193 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (x64) (HKLM…71c9b48-7c32-4621-a0ac-3f809523288f) (Version: 8.0.56336 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (x64) (HKLM…ad8a2fa1-06e7-4b0d-927d-6e54b3d31028) (Version: 8.0.61000 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x64 9.0.30729.17 (HKLM…8220EEFE-38CD-377E-8595-13398D740ACE) (Version: 9.0.30729 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x64 9.0.30729.6161 (HKLM…5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.17 (HKLM-x32…9A25302D-30C0-39D9-BD6F-21E6EC160475) (Version: 9.0.30729 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.4148 (HKLM-x32…1F1C2DFC-2D24-3E06-BCB8-725134ADF989) (Version: 9.0.30729.4148 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.6161 (HKLM-x32…9BE518E6-ECC6-35A9-88E4-87755C07200F) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C++ 2010 x64 Redistributable – 10.0.40219 (HKLM…1D8E6291-B0D5-35EC-8441-6616F567A0F7) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2010 x86 Redistributable – 10.0.40219 (HKLM-x32…F0C3E5D1-1ADE-321E-8167-68EF0DE699A5) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x64) – 11.0.61030 (HKLM-x32…ca67548a-5ebe-413a-b50c-4b9ceb6d66c6) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x86) – 11.0.50727 (HKLM-x32…22154f09-719a-4619-bb71-5b3356999fbf) (Version: 11.0.50727.1 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x86) – 11.0.61030 (HKLM-x32…33d1fd90-4274-48a1-9bc1-97e33d9c2d6f) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x64) – 12.0.21005 (HKLM-x32…7f51bdb9-ee21-49ee-94d6-90afc321780e) (Version: 12.0.21005.1 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x64) – 12.0.40660 (HKLM-x32…ef6b00ec-13e1-4c25-9064-b2f383cb8412) (Version: 12.0.40660.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x86) – 12.0.21005 (HKLM-x32…ce085a78-074e-4823-8dc1-8a721b94b76d) (Version: 12.0.21005.1 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x86) – 12.0.40660 (HKLM-x32…61087a79-ac85-455c-934d-1fa22cc64f36) (Version: 12.0.40660.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2017 Redistributable (x64) – 14.11.25325 (HKLM-x32…6c6356fe-cbfa-4944-9bed-a9e99f45cb7a) (Version: 14.11.25325.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2017 Redistributable (x86) – 14.11.25325 (HKLM-x32…404c9c27-8377-4fd1-b607-7ca635db4e49) (Version: 14.11.25325.0 – Microsoft Corporation)\nMicrosoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM…Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 – Microsoft Corporation)\nMSXML 4.0 SP2 (KB954430) (HKLM-x32…86493ADD-824D-4B8E-BD72-8C5DCDC52A71) (Version: 4.20.9870.0 – Microsoft Corporation)\nMSXML 4.0 SP2 (KB973688) (HKLM-x32…F662A8E6-F4DC-41A2-901E-8C11F044BDEC) (Version: 4.20.9876.0 – Microsoft Corporation)\nNorton Ghost (HKLM-x32…B0255743-165B-4BD5-8DA8-37DFB9930015) (Version: 15.0.1.36526 – Symantec Corporation)\nNTRU TCG Software Stack (HKLM…E9A97832-83B6-42B6-BAC6-492E344C2561) (Version: 2.1.37 – Security Innovation, Inc.) Hidden\nOffice 16 Click-to-Run Extensibility Component (HKLM-x32…90160000-008C-0000-0000-0000000FF1CE) (Version: 16.0.12527.20278 – Microsoft Corporation) Hidden\nOffice 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM…90160000-00DD-0000-1000-0000000FF1CE) (Version: 16.0.12527.20278 – Microsoft Corporation) Hidden\nOffice 16 Click-to-Run Licensing Component (HKLM…90160000-008F-0000-1000-0000000FF1CE) (Version: 16.0.12527.20612 – Microsoft Corporation) Hidden\nOffice 16 Click-to-Run Localization Component (HKLM-x32…90160000-008C-0409-0000-0000000FF1CE) (Version: 16.0.12527.20278 – Microsoft Corporation) Hidden\nPaperPort Image Printer 64-bit (HKLM…ABA4FAF1-6389-45F9-92CE-3914A4E5C471) (Version: 1.00.0000 – Nuance Communications, Inc.)\nPC-CCID (HKLM…3DCDFCDB-4D96-4CF0-9BB3-C91DAE9073F3) (Version: 2.0.0 – Gemalto) Hidden\nPreboot Manager (HKLM…3A6BE9F4-5FC8-44BB-BE7B-32A29607FEF6) (Version: 03.03.00.090 – Wave Systems Corp.) Hidden\nPrivate Information Manager (HKLM…B0A2153-58A6-4244-B458-25EDF5FCD809) (Version: 07.01.00.030 – Wave Systems Corp.) Hidden\nRAIDar 4.3.8 (HKLM-x32…1381-5408-0515-7060) (Version: 4.3.8 – Netgear Inc.)\nRealtek High Definition Audio Driver (HKLM-x32…F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC) (Version: 6.0.1.5907 – Realtek Semiconductor Corp.)\nSage 50 Accounting 2013 (HKLM-x32…1768BEA4-3469-45FB-8EFB-6742E1C0E86F) (Version: 20.00.00 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2014 (HKLM-x32…D2ADA6F5-F155-4A37-87CA-599E81F6C6C0) (Version: 21.00.00 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2015 (HKLM-x32…F3A0C9F5-77DD-4DE2-A2DF-7DB0687BA092) (Version: 22.02.00 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2016 (HKLM-x32…A0D9DC3A-156B-4785-9C7B-43DAC2D662A6) (Version: 23.00.00 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2017 (HKLM-x32…6A4CCB61-447D-432E-B56A-7D5D7626E7B5) (Version: 24.01.01 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2018 (HKLM-x32…FC7C07F7-E985-41D9-8A4F-709CE035D446) (Version: 25.00.00 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2019 (HKLM-x32…555A9126-7983-44D6-9D76-F4731B19B925) (Version: 26.01.00 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2020 (HKLM-x32…068FE61-EBAA-4F22-9D76-479DCBA14513) (Version: 27.00.00 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2020 (HKLM-x32…InstallShield_0068FE61-EBAA-4F22-9D76-479DCBA14513) (Version: 27.00.00 – Sage Software, Inc.)\nSage 50 Accounting Tax Forms (HKLM-x32…BA1EF4A7-AB67-492B-9C7D-4AEE43F5A3C6) (Version: 18.4.23 – Sage Software SB, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…016E8A4-03D0-4EBC-B927-6D51CD42C9D6) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…08A1E2E-2E39-42C7-8E5B-F2D8F4561EAA) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…3B37DB84-9E4E-4424-B83D-12C112520642) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…4E1146C8-A878-4197-A631-2F3C472DE5CC) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…5AB7FDBD-4A2E-4264-BB76-57A71200DD4A) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…6BCE889D-6AE2-4795-A90D-5BCCF04314A0) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…73AFBAE1-95F3-4598-8223-BAAE31675C90) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…FC9CD015-1E98-4A8B-94A7-99032706FB71) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…FD6B5B7C-EFD9-43B0-967B-828B89D7D273) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Payroll Sync Wizard (HKLM-x32…B3B149E0-51F9-4D82-9648-8A2D22281B21) (Version: 1.6.0.0002 – Sage Software, Inc.) Hidden\nSage 50 Payroll Sync Wizard (HKLM-x32…InstallShield_B3B149E0-51F9-4D82-9648-8A2D22281B21) (Version: 1.6.0.0002 – Sage Software, Inc.)\nSage 50 Payroll Sync Wizard 2.x (HKLM-x32…499B5712-AB99-4D5A-9E5F-967D92976E33) (Version: 2.6.0.0007 – Sage Software, Inc.) Hidden\nSage 50 Payroll Sync Wizard 2.x (HKLM-x32…InstallShield_499B5712-AB99-4D5A-9E5F-967D92976E33) (Version: 2.6.0.0007 – Sage Software, Inc.)\nSage Integration Services (HKLM-x32…Integration Services) (Version: 2.2.2240 – Sage Technology)\nSageDataExchangeAdapters (HKLM-x32…E6F432FF-49C9-4313-B00F-329B0E13F184) (Version: 1.01.0000 – Sage Software, Inc.)\nSAP Crystal Reports runtime engine for .NET Framework 4 (32-bit) (HKLM-x32…AAD476D7-FC64-40BC-85EA-0C1FD98D8375) (Version: 13.0.3.612 – SAP)\nScanSoft PaperPort 11 (HKLM-x32…DEA18FF6-D84A-4242-9663-692E5BA56805) (Version: 11.1.0000 – Nuance Communications, Inc.)\nSeagate Dashboard (HKLM-x32…EA266F00-A8E7-43A0-8DED-FBFE3F076934) (Version: 4.2.002.0 – Seagate)\nSoftware Updater (HKLM-x32…E1BAD1BA-C0E8-4018-9281-E7D2C6B07474) (Version: 4.3.6 – SEIKO EPSON CORPORATION)\nSPBA 5.9 (HKLM…2EECD5EF-5095-467C-B80C-4AB3096EFD60) (Version: 5.9.4.6901 – UPEK Inc.) Hidden\nSynology Active Backup for Business Agent (HKLM-x32…81B35851-2C23-4881-BD2C-EB7BA20D0FDA) (Version: 2.1.1125 – Synology)\nTeamViewer (HKLM-x32…TeamViewer) (Version: 15.2.2756 – TeamViewer)\ntoolkit32for64bit (HKLM-x32…703BB500-F54C-4F33-9D3C-D7A28CEAFBCF) (Version: 7.67.47.0000 – Wave Systems Corp) Hidden\nTrusted Drive Manager (HKLM…6AC87FB3-ACFC-4416-890C-8976D5A9B371) (Version: 4.5.0.136 – Wave Systems Corp.) Hidden\nUpek Touchchip Fingerprint Reader (HKLM…4E60E212-3177-4B16-BCB3-616CCC52357D) (Version: 1.2.004 – Dell Inc.) Hidden\nVisual Studio Tools for the Office system 3.0 Runtime (HKLM-x32…Visual Studio Tools for the Office system 3.0 Runtime) (Version: – Microsoft Corporation)\nVisual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32…8FB53850-246A-3507-8ADE-0060093FFEA6.KB949258) (Version: 1 – Microsoft Corporation)\nWave Crypto Runtime 2.0.7.0 x86 (HKLM-x32…8C0600A3-E772-4FC8-A67D-ED110E69665C) (Version: 02.00.07.0000 – Wave Systems Corp) Hidden\nWave Infrastructure Installer (HKLM…30C2392C-C7D6-4FE2-9617-05D2C6E9D3EE) (Version: 07.67.60.0020 – Wave Systems Corp) Hidden\nWave Support Software Installer (HKLM…7D618CD-B016-438A-ADC9-A75BD23F85CE) (Version: 05.13.00.051 – Wave Systems Corp) Hidden\nWindows Driver Package – Dell Inc. PBADRV System (09/11/2009 1.0.1.6) (HKLM…9512AA21B791B05A54E27065C45BBC417AB282DF) (Version: 09/11/2009 1.0.1.6 – Dell Inc.)\nWindows Live Essentials (HKLM-x32…WinLiveSuite) (Version: 15.4.3508.1109 – Microsoft Corporation)\nWindows Live Mesh ActiveX Control for Remote Connections (HKLM-x32…2902F983-B4C1-44BA-B85D-5C6D52E2C441) (Version: 15.4.5722.2 – Microsoft Corporation)\nWizTree v3.21 (HKLM…WizTree_is1) (Version: – Antibody Software)\nWorkForce GT-1500 Scanner Driver Update (HKLM-x32…37D0F29D-AB95-4598-ACF0-D3CC38C161D9) (Version: – )
"},{"id":"text-47","type":"text","heading":"","plain_text":"==================== Custom CLSID (Whitelisted): ==============","html":"==================== Custom CLSID (Whitelisted): ==============
"},{"id":"text-48","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)","html":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
"},{"id":"text-49","type":"text","heading":"","plain_text":"CustomCLSID: HKUS-1-5-21-928097801-345109163-1125972616-1107_ClassesCLSID162C6FB5-44D3-435B-903D-E613FA093FB5InprocServer32 -> C:UsersKMieleAppDataLocalMicrosoftOneDrive17.3.6743.1212amd64FileCoAuthLib64.dll => No File\nShellIconOverlayIdentifiers: [EnabledUnlockedFDEIconOverlay] -> 30D3C2AF-9709-4D05-9CF4-13335F3C1E4A => C:Program FilesDellDell Data ProtectionAccessAdvancedWaveTrusted Drive ManagerTdmIconOverlay.dll [2011-12-08] (Wave Systems Corp. -> Wave Systems Corp.)\nShellIconOverlayIdentifiers: [UninitializedFdeIconOverlay] -> CF08DA3E-C97D-4891-A66B-E39B28DD270F => C:Program FilesDellDell Data ProtectionAccessAdvancedWaveTrusted Drive ManagerTdmIconOverlay.dll [2011-12-08] (Wave Systems Corp. -> Wave Systems Corp.)\nContextMenuHandlers1: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => C:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers1: [Foxit_ConvertToPDF] -> C5269811-4A29-4818-A4BB-111F9FC63A5F => C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsConvertToPDFShellExtension_x64.dll [2020-04-22] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)\nContextMenuHandlers2: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => C:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers4: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => C:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers5: [igfxcui] -> 3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4 => C:Windowssystem32igfxpph.dll -> No File\nContextMenuHandlers5: [igfxDTCM] -> 9B5F5829-A529-4B12-814A-E81BCB8D93FC => C:Windowssystem32igfxDTCM.dll [2016-06-02] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)\nContextMenuHandlers6: [Foxit_ConvertToPDF] -> C5269811-4A29-4818-A4BB-111F9FC63A5F => C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsConvertToPDFShellExtension_x64.dll [2020-04-22] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)","html":"CustomCLSID: HKUS-1-5-21-928097801-345109163-1125972616-1107_ClassesCLSID162C6FB5-44D3-435B-903D-E613FA093FB5InprocServer32 -> C:UsersKMieleAppDataLocalMicrosoftOneDrive17.3.6743.1212amd64FileCoAuthLib64.dll => No File\nShellIconOverlayIdentifiers: [EnabledUnlockedFDEIconOverlay] -> 30D3C2AF-9709-4D05-9CF4-13335F3C1E4A => C:Program FilesDellDell Data ProtectionAccessAdvancedWaveTrusted Drive ManagerTdmIconOverlay.dll [2011-12-08] (Wave Systems Corp. -> Wave Systems Corp.)\nShellIconOverlayIdentifiers: [UninitializedFdeIconOverlay] -> CF08DA3E-C97D-4891-A66B-E39B28DD270F => C:Program FilesDellDell Data ProtectionAccessAdvancedWaveTrusted Drive ManagerTdmIconOverlay.dll [2011-12-08] (Wave Systems Corp. -> Wave Systems Corp.)\nContextMenuHandlers1: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => C:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers1: [Foxit_ConvertToPDF] -> C5269811-4A29-4818-A4BB-111F9FC63A5F => C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsConvertToPDFShellExtension_x64.dll [2020-04-22] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)\nContextMenuHandlers2: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => C:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers4: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => C:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers5: [igfxcui] -> 3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4 => C:Windowssystem32igfxpph.dll -> No File\nContextMenuHandlers5: [igfxDTCM] -> 9B5F5829-A529-4B12-814A-E81BCB8D93FC => C:Windowssystem32igfxDTCM.dll [2016-06-02] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)\nContextMenuHandlers6: [Foxit_ConvertToPDF] -> C5269811-4A29-4818-A4BB-111F9FC63A5F => C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsConvertToPDFShellExtension_x64.dll [2020-04-22] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
"},{"id":"text-50","type":"text","heading":"","plain_text":"==================== Codecs (Whitelisted) ====================","html":"==================== Codecs (Whitelisted) ====================
"},{"id":"text-51","type":"text","heading":"","plain_text":"==================== Shortcuts & WMI ========================","html":"==================== Shortcuts & WMI ========================
"},{"id":"text-52","type":"text","heading":"","plain_text":"(The entries could be listed to be restored or removed.)","html":"(The entries could be listed to be restored or removed.)
"},{"id":"text-53","type":"text","heading":"","plain_text":"WMI:subscription__FilterToConsumerBinding->CommandLineEventConsumer.Name="BVTConsumer"",Filter="__EventFilter.Name="BVTFilter"::\nWMI:subscription__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA « Win32_Processor » AND TargetInstance.LoadPercentage > 99]\nWMI:subscriptionCommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]","html":"WMI:subscription__FilterToConsumerBinding->CommandLineEventConsumer.Name="BVTConsumer"",Filter="__EventFilter.Name="BVTFilter"::\nWMI:subscription__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA « Win32_Processor » AND TargetInstance.LoadPercentage > 99]\nWMI:subscriptionCommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]
"},{"id":"text-54","type":"text","heading":"","plain_text":"==================== Loaded Modules (Whitelisted) =============","html":"==================== Loaded Modules (Whitelisted) =============
"},{"id":"text-55","type":"text","heading":"","plain_text":"2012-08-15 00:49 – 2011-11-29 21:00 – 000059392 _____ ( () [File not signed]) [File is in use ] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIsdiInterop.dll\n2017-05-09 19:47 – 2017-05-09 19:47 – 000484352 _____ ( (DYMO Corporation) [File not signed]) [File is in use ] C:Program Files (x86)DYMODYMO Label SoftwarePrintingSupportLibrary.dll\n2009-06-24 10:57 – 2009-06-24 10:57 – 000029696 _____ ( (HP) [File not signed]) [File is in use ] C:Program Files (x86)HPHPLaserJetServiceDebugLogger.dll\n2009-06-24 10:57 – 2009-06-24 10:57 – 000032768 _____ ( (HP) [File not signed]) [File is in use ] C:Program Files (x86)HPHPLaserJetServiceHPHTTPProxy.dll\n2009-06-24 10:57 – 2009-06-24 10:57 – 000031744 _____ ( (HP) [File not signed]) [File is in use ] C:Program Files (x86)HPHPLaserJetServiceHPServiceCommunicator.dll\n2012-08-15 00:49 – 2011-11-29 21:00 – 000175616 _____ ( (Intel Corporation) [File not signed]) [File is in use ] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorUIHelper.dll\n2012-08-15 00:49 – 2011-11-29 21:00 – 001319424 _____ ( (Intel Corporation) [File not signed]) [File is in use ] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIntelVisualDesign.dll\n2019-03-27 23:48 – 2019-03-27 23:48 – 000115200 _____ ( (Microsoft Corporation) [File not signed]) [File is in use ] C:WindowsMicrosoft.NetassemblyGAC_32System.EnterpriseServicesv4.0_4.0.0.0__b03f5f7f11d50a3aSystem.EnterpriseServices.Wrapper.dll\n2013-01-12 04:09 – 2013-01-12 04:09 – 000225280 _____ ( (Microsoft Corporation) [File not signed]) [File is in use ] C:WindowsWinSxSx86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57msvcm90.dll\n2016-12-13 09:54 – 2016-12-13 09:54 – 000687616 _____ ( (Microsoft) [File not signed]) [File is in use ] C:WindowsassemblyGAC_32Sage.Central.AutoUpdateManager1.0.0.0__021b26c6762d83c5Sage.Central.AutoUpdateManager.dll\n2011-10-08 23:56 – 2011-10-08 23:56 – 000003072 _____ () [File not signed] C:Program Files (x86)NTRU CryptosystemsNTRU TCG Software StackbinTspPopup_ENU.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 022937305 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiicudt53.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 002831013 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiicuin53.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 001726380 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiicuuc53.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000075264 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuilibgcc_s_seh-1.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 001426432 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuilibstdc++-6.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000622080 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiplatformsqwindows.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000354304 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuisynocat-qt.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000117248 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuizlib1.dll\n2019-05-16 03:30 – 2019-05-16 03:30 – 000172032 _____ () [File not signed] C:WindowsassemblyNativeImages_v2.0.50727_32IsdiInterop72942022d04b079ab54528d7acd76660IsdiInterop.ni.dll\n2006-12-08 16:41 – 2012-08-15 00:53 – 000239104 _____ () [File not signed] C:Windowssystem32BIOAPI_MDS300.dll\n2006-12-08 16:42 – 2012-08-15 00:53 – 000155136 _____ () [File not signed] C:Windowssystem32BioAPI100.dll\n2011-11-07 08:55 – 2011-11-07 08:55 – 000094720 _____ () [File not signed] C:Windowssystem32Wavx_ESC_Logging.dll\n2005-09-07 13:03 – 2005-09-07 13:03 – 000036864 _____ (Black Ice Software, Inc.) [File not signed] C:Program Files (x86)ScanSoftPaperPortblicectr.dll\n2013-01-09 11:55 – 2009-05-15 06:36 – 000196608 ____R (BUFFALO INC.) [File not signed] C:Program Files (x86)BUFFALONASNAVInasdmn.dll\n2013-01-09 11:55 – 2012-02-21 11:57 – 000323584 ____R (BUFFALO INC.) [File not signed] C:Program Files (x86)BUFFALONASNAVInasexo.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 004530176 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiQt5Core.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 003574784 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiQt5Gui.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 001303552 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiQt5Network.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 005441536 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiQt5Widgets.dll\n2020-04-29 09:31 – 2020-04-29 09:31 – 000693760 _____ (Foxit) [File not signed] C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFPluginsphc.dll\n2013-01-09 12:55 – 2008-05-07 20:59 – 000099840 _____ (Hewlett-Packard Corporation) [File not signed] C:Windowssystem32spoolPRTPROCSx64hpzpplhn.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000591360 _____ (Hystax) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentservicevsstracker_x64.dll\n2019-05-16 03:30 – 2019-05-16 03:30 – 000014336 _____ (Intel Corp.) [File not signed] C:WindowsassemblyNativeImages_v2.0.50727_32IAStorCommon2c124842f2740267d4146b4211b412a0IAStorCommon.ni.dll\n2012-08-15 00:49 – 2011-11-29 20:41 – 000278016 _____ (Intel Corporation) [File not signed] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyISDI.dll\n2012-08-15 00:52 – 2012-02-27 04:59 – 000073728 _____ (Intel Corporation) [File not signed] C:Program Files (x86)IntelIntel® USB 3.0 eXtensible Host Controller DriverApplicationiusb3mon.dll\n2020-01-15 04:27 – 2020-01-15 04:27 – 000225280 _____ (Intel Corporation) [File not signed] C:WindowsassemblyNativeImages_v2.0.50727_32IAStorDataMgrc64c05bf09fe8c421829cca89b51f547IAStorDataMgr.ni.dll\n2020-01-15 04:27 – 2020-01-15 04:27 – 000487424 _____ (Intel Corporation) [File not signed] C:WindowsassemblyNativeImages_v2.0.50727_32IAStorUtil432a39402d23f6e21a6887900c7b573eIAStorUtil.ni.dll\n2018-03-12 10:00 – 2017-07-04 12:16 – 000016896 _____ (KONICA MINOLTA, INC.) [File not signed] C:WindowsSystem32KOAXTJ_L.DLL\n2009-07-13 20:35 – 2015-10-30 03:17 – 000283648 _____ (Microsoft Corporation) [File not signed] C:Windowssystem32spoolDRIVERSx643FXSAPI.DLL\n2009-07-13 20:36 – 2015-10-30 03:17 – 000032256 _____ (Microsoft Corporation) [File not signed] C:Windowssystem32spoolDRIVERSx643FXSDRV.DLL\n2009-07-13 21:19 – 2015-10-30 03:17 – 007299072 _____ (Microsoft Corporation) [File not signed] C:Windowssystem32spoolDRIVERSx643FXSRES.DLL\n2009-07-13 20:35 – 2015-10-30 03:17 – 000412672 _____ (Microsoft Corporation) [File not signed] C:Windowssystem32spoolDRIVERSx643FXSTIFF.dll\n2009-07-13 20:36 – 2015-10-30 03:17 – 000143360 _____ (Microsoft Corporation) [File not signed] C:Windowssystem32spoolDRIVERSx643FXSUI.DLL\n2009-07-13 20:36 – 2015-10-30 03:17 – 000139264 _____ (Microsoft Corporation) [File not signed] C:Windowssystem32spoolDRIVERSx643FXSWZRD.dll\n2018-06-20 10:26 – 2018-06-20 10:26 – 000000000 ____L (Microsoft Corporation) C:Program Files (x86)Microsoft OfficerootOffice16AppVIsvSubsystems32.dll\n2018-06-20 10:26 – 2018-06-20 10:26 – 000000000 ____L (Microsoft Corporation) C:Program Files (x86)Microsoft OfficerootOffice16c2r32.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000052224 _____ (MingW-W64 Project. All rights reserved.) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuilibwinpthread-1.dll\n2011-10-08 23:53 – 2011-10-08 23:53 – 002504192 _____ (NTRU Cryptosystems, Inc.) [File not signed] C:Program FilesNTRU CryptosystemsNTRU TCG Software StackbinTsp1_x64.dll\n2013-01-09 13:07 – 2005-01-13 06:47 – 000049152 ____N (SEIKO EPSON CORP.) [File not signed] C:Program Files (x86)Epson SoftwareEvent ManagerESPSUTL.dll\n2012-04-02 11:15 – 2012-04-02 11:15 – 000110080 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareEvent Managerepnsm.dll\n2009-10-21 17:39 – 2009-10-21 17:39 – 000291328 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareEvent ManagerLcMgr.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000095744 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityEbpD4Fax.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000274432 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityFULEPP.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000327680 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityFUSVCCLT.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000065536 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityFUUSBHLP.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000069632 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityLibraryFUDEVCOM.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000135168 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityLibraryFUDRVUTL.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000339968 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityLibraryFUPRBDEV.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000286720 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityLibraryFUSNMPUT.dll\n2015-07-24 18:27 – 2014-05-25 12:00 – 000081920 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUCMNMSG.dll\n2015-07-24 18:27 – 2014-05-25 12:00 – 000241664 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUFAXRCV.dll\n2015-07-24 18:27 – 2014-05-25 12:00 – 000022016 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFULEPPRes.dll\n2015-07-24 18:27 – 2014-05-25 12:00 – 000077824 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUPRBDEVRes.dll\n2015-07-24 18:26 – 2012-11-12 15:15 – 000558592 _____ (SEIKO EPSON CORPORATION) [File not signed] C:WindowsSystem32enppmon.dll\n2015-07-24 18:26 – 2012-10-22 17:19 – 000219648 _____ (SEIKO EPSON CORPORATION) [File not signed] C:WindowsSystem32enpres.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000786432 _____ (SEIKO EPSON) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityLibraryENCM.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000278528 _____ (SEIKO EPSON) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityLibraryENNW.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000299008 _____ (SEIKO EPSON) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityLibraryENUTIL.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 001787904 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentserviceLIBEAY32.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000434688 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentserviceSSLEAY32.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 001846272 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiLIBEAY32.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000386560 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiSSLEAY32.dll\n2011-11-07 08:58 – 2011-11-07 08:58 – 000119296 _____ (Wave Systems Corp.) [File not signed] C:Program FilesDellDell Data ProtectionAccessAdvancedWaveCommonSecureLoginSupport.dll\n2011-11-07 08:55 – 2011-11-07 08:55 – 000017920 _____ (Wave Systems Corp.) [File not signed] C:Program FilesDellDell Data ProtectionAccessAdvancedWaveCommonTPMSupport.dll\n2012-01-16 16:32 – 2012-01-16 16:32 – 000481280 _____ (Wave Systems Corp.) [File not signed] C:Program FilesDellDell Data ProtectionAccessAdvancedWaveCommonTrustedPlatformManager.dll\n2012-01-16 16:31 – 2012-01-16 16:31 – 000050688 _____ (Wave Systems Corp.) [File not signed] C:Program FilesDellDell Data ProtectionAccessAdvancedWaveCommonTrustedPlatformUtil.dll\n2012-01-16 16:24 – 2012-01-16 16:25 – 001058304 _____ (Wave Systems Corp.) [File not signed] C:Windowssystem32tcg15.dll\n2012-01-16 16:28 – 2012-01-16 16:28 – 000407552 _____ (Wave Systems Corp.) [File not signed] C:Windowssystem32wclient14.dll\n2012-01-05 16:00 – 2012-01-05 16:00 – 003564544 _____ (Wave Systems Corp.) [File not signed] C:Windowssystem32wvauth.DLL\n2012-08-15 00:54 – 2012-08-15 00:54 – 000025600 _____ (Wave Systems Corp.) [File not signed] C:WindowsWinSxSamd64_wave.super.superprotocol_1aaab1af848ab112_2.0.0.7_none_d8efab872cd9eac7Super.dll\n2012-08-15 00:54 – 2012-08-15 00:54 – 001175040 _____ (Wave Systems Corp.) [File not signed] C:WindowsWinSxSamd64_wave.wcr10.cryptoruntime_1aaab1af848ab112_1.0.2.11_none_68ec49ceb7426227WCR10.dll","html":"2012-08-15 00:49 – 2011-11-29 21:00 – 000059392 _____ ( () [File not signed]) [File is in use ] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIsdiInterop.dll\n2017-05-09 19:47 – 2017-05-09 19:47 – 000484352 _____ ( (DYMO Corporation) [File not signed]) [File is in use ] C:Program Files (x86)DYMODYMO Label SoftwarePrintingSupportLibrary.dll\n2009-06-24 10:57 – 2009-06-24 10:57 – 000029696 _____ ( (HP) [File not signed]) [File is in use ] C:Program Files (x86)HPHPLaserJetServiceDebugLogger.dll\n2009-06-24 10:57 – 2009-06-24 10:57 – 000032768 _____ ( (HP) [File not signed]) [File is in use ] C:Program Files (x86)HPHPLaserJetServiceHPHTTPProxy.dll\n2009-06-24 10:57 – 2009-06-24 10:57 – 000031744 _____ ( (HP) [File not signed]) [File is in use ] C:Program Files (x86)HPHPLaserJetServiceHPServiceCommunicator.dll\n2012-08-15 00:49 – 2011-11-29 21:00 – 000175616 _____ ( (Intel Corporation) [File not signed]) [File is in use ] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorUIHelper.dll\n2012-08-15 00:49 – 2011-11-29 21:00 – 001319424 _____ ( (Intel Corporation) [File not signed]) [File is in use ] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIntelVisualDesign.dll\n2019-03-27 23:48 – 2019-03-27 23:48 – 000115200 _____ ( (Microsoft Corporation) [File not signed]) [File is in use ] C:WindowsMicrosoft.NetassemblyGAC_32System.EnterpriseServicesv4.0_4.0.0.0__b03f5f7f11d50a3aSystem.EnterpriseServices.Wrapper.dll\n2013-01-12 04:09 – 2013-01-12 04:09 – 000225280 _____ ( (Microsoft Corporation) [File not signed]) [File is in use ] C:WindowsWinSxSx86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57msvcm90.dll\n2016-12-13 09:54 – 2016-12-13 09:54 – 000687616 _____ ( (Microsoft) [File not signed]) [File is in use ] C:WindowsassemblyGAC_32Sage.Central.AutoUpdateManager1.0.0.0__021b26c6762d83c5Sage.Central.AutoUpdateManager.dll\n2011-10-08 23:56 – 2011-10-08 23:56 – 000003072 _____ () [File not signed] C:Program Files (x86)NTRU CryptosystemsNTRU TCG Software StackbinTspPopup_ENU.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 022937305 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiicudt53.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 002831013 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiicuin53.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 001726380 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiicuuc53.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000075264 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuilibgcc_s_seh-1.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 001426432 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuilibstdc++-6.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000622080 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiplatformsqwindows.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000354304 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuisynocat-qt.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000117248 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuizlib1.dll\n2019-05-16 03:30 – 2019-05-16 03:30 – 000172032 _____ () [File not signed] C:WindowsassemblyNativeImages_v2.0.50727_32IsdiInterop72942022d04b079ab54528d7acd76660IsdiInterop.ni.dll\n2006-12-08 16:41 – 2012-08-15 00:53 – 000239104 _____ () [File not signed] C:Windowssystem32BIOAPI_MDS300.dll\n2006-12-08 16:42 – 2012-08-15 00:53 – 000155136 _____ () [File not signed] C:Windowssystem32BioAPI100.dll\n2011-11-07 08:55 – 2011-11-07 08:55 – 000094720 _____ () [File not signed] C:Windowssystem32Wavx_ESC_Logging.dll\n2005-09-07 13:03 – 2005-09-07 13:03 – 000036864 _____ (Black Ice Software, Inc.) [File not signed] C:Program Files (x86)ScanSoftPaperPortblicectr.dll\n2013-01-09 11:55 – 2009-05-15 06:36 – 000196608 ____R (BUFFALO INC.) [File not signed] C:Program Files (x86)BUFFALONASNAVInasdmn.dll\n2013-01-09 11:55 – 2012-02-21 11:57 – 000323584 ____R (BUFFALO INC.) [File not signed] C:Program Files (x86)BUFFALONASNAVInasexo.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 004530176 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiQt5Core.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 003574784 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiQt5Gui.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 001303552 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiQt5Network.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 005441536 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiQt5Widgets.dll\n2020-04-29 09:31 – 2020-04-29 09:31 – 000693760 _____ (Foxit) [File not signed] C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFPluginsphc.dll\n2013-01-09 12:55 – 2008-05-07 20:59 – 000099840 _____ (Hewlett-Packard Corporation) [File not signed] C:Windowssystem32spoolPRTPROCSx64hpzpplhn.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000591360 _____ (Hystax) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentservicevsstracker_x64.dll\n2019-05-16 03:30 – 2019-05-16 03:30 – 000014336 _____ (Intel Corp.) [File not signed] C:WindowsassemblyNativeImages_v2.0.50727_32IAStorCommon2c124842f2740267d4146b4211b412a0IAStorCommon.ni.dll\n2012-08-15 00:49 – 2011-11-29 20:41 – 000278016 _____ (Intel Corporation) [File not signed] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyISDI.dll\n2012-08-15 00:52 – 2012-02-27 04:59 – 000073728 _____ (Intel Corporation) [File not signed] C:Program Files (x86)IntelIntel® USB 3.0 eXtensible Host Controller DriverApplicationiusb3mon.dll\n2020-01-15 04:27 – 2020-01-15 04:27 – 000225280 _____ (Intel Corporation) [File not signed] C:WindowsassemblyNativeImages_v2.0.50727_32IAStorDataMgrc64c05bf09fe8c421829cca89b51f547IAStorDataMgr.ni.dll\n2020-01-15 04:27 – 2020-01-15 04:27 – 000487424 _____ (Intel Corporation) [File not signed] C:WindowsassemblyNativeImages_v2.0.50727_32IAStorUtil432a39402d23f6e21a6887900c7b573eIAStorUtil.ni.dll\n2018-03-12 10:00 – 2017-07-04 12:16 – 000016896 _____ (KONICA MINOLTA, INC.) [File not signed] C:WindowsSystem32KOAXTJ_L.DLL\n2009-07-13 20:35 – 2015-10-30 03:17 – 000283648 _____ (Microsoft Corporation) [File not signed] C:Windowssystem32spoolDRIVERSx643FXSAPI.DLL\n2009-07-13 20:36 – 2015-10-30 03:17 – 000032256 _____ (Microsoft Corporation) [File not signed] C:Windowssystem32spoolDRIVERSx643FXSDRV.DLL\n2009-07-13 21:19 – 2015-10-30 03:17 – 007299072 _____ (Microsoft Corporation) [File not signed] C:Windowssystem32spoolDRIVERSx643FXSRES.DLL\n2009-07-13 20:35 – 2015-10-30 03:17 – 000412672 _____ (Microsoft Corporation) [File not signed] C:Windowssystem32spoolDRIVERSx643FXSTIFF.dll\n2009-07-13 20:36 – 2015-10-30 03:17 – 000143360 _____ (Microsoft Corporation) [File not signed] C:Windowssystem32spoolDRIVERSx643FXSUI.DLL\n2009-07-13 20:36 – 2015-10-30 03:17 – 000139264 _____ (Microsoft Corporation) [File not signed] C:Windowssystem32spoolDRIVERSx643FXSWZRD.dll\n2018-06-20 10:26 – 2018-06-20 10:26 – 000000000 ____L (Microsoft Corporation) C:Program Files (x86)Microsoft OfficerootOffice16AppVIsvSubsystems32.dll\n2018-06-20 10:26 – 2018-06-20 10:26 – 000000000 ____L (Microsoft Corporation) C:Program Files (x86)Microsoft OfficerootOffice16c2r32.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000052224 _____ (MingW-W64 Project. All rights reserved.) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuilibwinpthread-1.dll\n2011-10-08 23:53 – 2011-10-08 23:53 – 002504192 _____ (NTRU Cryptosystems, Inc.) [File not signed] C:Program FilesNTRU CryptosystemsNTRU TCG Software StackbinTsp1_x64.dll\n2013-01-09 13:07 – 2005-01-13 06:47 – 000049152 ____N (SEIKO EPSON CORP.) [File not signed] C:Program Files (x86)Epson SoftwareEvent ManagerESPSUTL.dll\n2012-04-02 11:15 – 2012-04-02 11:15 – 000110080 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareEvent Managerepnsm.dll\n2009-10-21 17:39 – 2009-10-21 17:39 – 000291328 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareEvent ManagerLcMgr.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000095744 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityEbpD4Fax.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000274432 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityFULEPP.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000327680 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityFUSVCCLT.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000065536 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityFUUSBHLP.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000069632 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityLibraryFUDEVCOM.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000135168 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityLibraryFUDRVUTL.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000339968 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityLibraryFUPRBDEV.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000286720 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityLibraryFUSNMPUT.dll\n2015-07-24 18:27 – 2014-05-25 12:00 – 000081920 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUCMNMSG.dll\n2015-07-24 18:27 – 2014-05-25 12:00 – 000241664 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUFAXRCV.dll\n2015-07-24 18:27 – 2014-05-25 12:00 – 000022016 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFULEPPRes.dll\n2015-07-24 18:27 – 2014-05-25 12:00 – 000077824 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUPRBDEVRes.dll\n2015-07-24 18:26 – 2012-11-12 15:15 – 000558592 _____ (SEIKO EPSON CORPORATION) [File not signed] C:WindowsSystem32enppmon.dll\n2015-07-24 18:26 – 2012-10-22 17:19 – 000219648 _____ (SEIKO EPSON CORPORATION) [File not signed] C:WindowsSystem32enpres.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000786432 _____ (SEIKO EPSON) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityLibraryENCM.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000278528 _____ (SEIKO EPSON) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityLibraryENNW.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000299008 _____ (SEIKO EPSON) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityLibraryENUTIL.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 001787904 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentserviceLIBEAY32.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000434688 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentserviceSSLEAY32.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 001846272 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiLIBEAY32.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000386560 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiSSLEAY32.dll\n2011-11-07 08:58 – 2011-11-07 08:58 – 000119296 _____ (Wave Systems Corp.) [File not signed] C:Program FilesDellDell Data ProtectionAccessAdvancedWaveCommonSecureLoginSupport.dll\n2011-11-07 08:55 – 2011-11-07 08:55 – 000017920 _____ (Wave Systems Corp.) [File not signed] C:Program FilesDellDell Data ProtectionAccessAdvancedWaveCommonTPMSupport.dll\n2012-01-16 16:32 – 2012-01-16 16:32 – 000481280 _____ (Wave Systems Corp.) [File not signed] C:Program FilesDellDell Data ProtectionAccessAdvancedWaveCommonTrustedPlatformManager.dll\n2012-01-16 16:31 – 2012-01-16 16:31 – 000050688 _____ (Wave Systems Corp.) [File not signed] C:Program FilesDellDell Data ProtectionAccessAdvancedWaveCommonTrustedPlatformUtil.dll\n2012-01-16 16:24 – 2012-01-16 16:25 – 001058304 _____ (Wave Systems Corp.) [File not signed] C:Windowssystem32tcg15.dll\n2012-01-16 16:28 – 2012-01-16 16:28 – 000407552 _____ (Wave Systems Corp.) [File not signed] C:Windowssystem32wclient14.dll\n2012-01-05 16:00 – 2012-01-05 16:00 – 003564544 _____ (Wave Systems Corp.) [File not signed] C:Windowssystem32wvauth.DLL\n2012-08-15 00:54 – 2012-08-15 00:54 – 000025600 _____ (Wave Systems Corp.) [File not signed] C:WindowsWinSxSamd64_wave.super.superprotocol_1aaab1af848ab112_2.0.0.7_none_d8efab872cd9eac7Super.dll\n2012-08-15 00:54 – 2012-08-15 00:54 – 001175040 _____ (Wave Systems Corp.) [File not signed] C:WindowsWinSxSamd64_wave.wcr10.cryptoruntime_1aaab1af848ab112_1.0.2.11_none_68ec49ceb7426227WCR10.dll
"},{"id":"text-56","type":"text","heading":"","plain_text":"==================== Alternate Data Streams (Whitelisted) ========","html":"==================== Alternate Data Streams (Whitelisted) ========
"},{"id":"text-57","type":"text","heading":"","plain_text":"==================== Safe Mode (Whitelisted) ==================","html":"==================== Safe Mode (Whitelisted) ==================
"},{"id":"text-58","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)","html":"(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
"},{"id":"text-59","type":"text","heading":"","plain_text":"HKLMSYSTEMCurrentControlSetControlSafeBootMinimalMBAMService => ""="Service"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkatashost => ""="Service"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkMBAMService => ""="Service"","html":"HKLMSYSTEMCurrentControlSetControlSafeBootMinimalMBAMService => ""="Service"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkatashost => ""="Service"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkMBAMService => ""="Service"
"},{"id":"text-60","type":"text","heading":"","plain_text":"==================== Association (Whitelisted) =================","html":"==================== Association (Whitelisted) =================
"},{"id":"text-61","type":"text","heading":"","plain_text":"==================== Internet Explorer trusted/restricted ==========","html":"==================== Internet Explorer trusted/restricted ==========
"},{"id":"text-62","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed from the registry.)","html":"(If an entry is included in the fixlist, it will be removed from the registry.)
"},{"id":"text-63","type":"text","heading":"","plain_text":"IE trusted site: HKUS-1-5-21-928097801-345109163-1125972616-1104…dell.com -> dell.com\nIE trusted site: HKUS-1-5-21-928097801-345109163-1125972616-1104…iqassociates.biz -> hxxp://ww2.iqassociates.biz\nIE trusted site: HKUS-1-5-21-928097801-345109163-1125972616-1107…iqassociates.biz -> hxxp://ww2.iqassociates.biz\nIE trusted site: HKUS-1-5-21-928097801-345109163-1125972616-1107…iqassociates.com -> hxxp://ww2.iqassociates.com\nIE trusted site: HKUS-1-5-21-928097801-345109163-1125972616-1107…iqassociates.info -> hxxp://ww2.iqassociates.info\nIE trusted site: HKUS-1-5-21-928097801-345109163-1125972616-1107…iqassociates.net -> hxxp://ww2.iqassociates.net","html":"IE trusted site: HKUS-1-5-21-928097801-345109163-1125972616-1104…dell.com -> dell.com\nIE trusted site: HKUS-1-5-21-928097801-345109163-1125972616-1104…iqassociates.biz -> hxxp://ww2.iqassociates.biz\nIE trusted site: HKUS-1-5-21-928097801-345109163-1125972616-1107…iqassociates.biz -> hxxp://ww2.iqassociates.biz\nIE trusted site: HKUS-1-5-21-928097801-345109163-1125972616-1107…iqassociates.com -> hxxp://ww2.iqassociates.com\nIE trusted site: HKUS-1-5-21-928097801-345109163-1125972616-1107…iqassociates.info -> hxxp://ww2.iqassociates.info\nIE trusted site: HKUS-1-5-21-928097801-345109163-1125972616-1107…iqassociates.net -> hxxp://ww2.iqassociates.net
"},{"id":"text-64","type":"text","heading":"","plain_text":"==================== Hosts content: =========================","html":"==================== Hosts content: =========================
"},{"id":"text-65","type":"text","heading":"","plain_text":"(If needed Hosts: directive could be included in the fixlist to reset Hosts.)","html":"(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
"},{"id":"text-66","type":"text","heading":"","plain_text":"2009-07-13 22:34 – 2009-06-10 17:00 – 000000824 _____ C:Windowssystem32driversetchosts","html":"2009-07-13 22:34 – 2009-06-10 17:00 – 000000824 _____ C:Windowssystem32driversetchosts
"},{"id":"text-67","type":"text","heading":"","plain_text":"==================== Other Areas ===========================","html":"==================== Other Areas ===========================
"},{"id":"text-68","type":"text","heading":"","plain_text":"(Currently there is no automatic fix for this section.)","html":"(Currently there is no automatic fix for this section.)
"},{"id":"text-69","type":"text","heading":"","plain_text":"HKLMSystemCurrentControlSetControlSession ManagerEnvironment\\Path -> C:Program Files (x86)ActianPSQLbin;C:Program FilesCommon FilesMicrosoft SharedWindows Live;C:Program Files (x86)Common FilesMicrosoft SharedWindows Live;C:Program Files (x86)InteliCLS Client;C:Program FilesInteliCLS Client;%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;%SYSTEMROOT%System32WindowsPowerShellv1.0;C:Program FilesDellDell Data ProtectionAccessAdvancedWaveGemaltoAccess Clientv5;C:Program Files (x86)NTRU CryptosystemsNTRU TCG Software Stackbin;C:Program FilesNTRU CryptosystemsNTRU TCG Software Stackbin;C:Program Files (x86)Windows LiveShared;C:Program FilesIntelIntel® Management Engine ComponentsDAL;C:Program FilesIntelIntel® Management Engine ComponentsIPT;C:Program Files (x86)IntelIntel® Management Engine ComponentsDAL;C:Program Files (x86)IntelIntel® Management Engine ComponentsIPT\nHKUS-1-5-21-928097801-345109163-1125972616-1104Control PanelDesktop\\Wallpaper -> C:UsersGemmitiAAppDataRoamingMicrosoftWindowsThemesTranscodedWallpaper.jpg\nHKUS-1-5-21-928097801-345109163-1125972616-1107Control PanelDesktop\\Wallpaper -> C:UsersKMieleAppDataRoamingMicrosoftWindowsThemesTranscodedWallpaper.jpg\nDNS Servers: 192.168.1.10 – 8.8.8.8\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)\nWindows Firewall is enabled.","html":"HKLMSystemCurrentControlSetControlSession ManagerEnvironment\\Path -> C:Program Files (x86)ActianPSQLbin;C:Program FilesCommon FilesMicrosoft SharedWindows Live;C:Program Files (x86)Common FilesMicrosoft SharedWindows Live;C:Program Files (x86)InteliCLS Client;C:Program FilesInteliCLS Client;%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;%SYSTEMROOT%System32WindowsPowerShellv1.0;C:Program FilesDellDell Data ProtectionAccessAdvancedWaveGemaltoAccess Clientv5;C:Program Files (x86)NTRU CryptosystemsNTRU TCG Software Stackbin;C:Program FilesNTRU CryptosystemsNTRU TCG Software Stackbin;C:Program Files (x86)Windows LiveShared;C:Program FilesIntelIntel® Management Engine ComponentsDAL;C:Program FilesIntelIntel® Management Engine ComponentsIPT;C:Program Files (x86)IntelIntel® Management Engine ComponentsDAL;C:Program Files (x86)IntelIntel® Management Engine ComponentsIPT\nHKUS-1-5-21-928097801-345109163-1125972616-1104Control PanelDesktop\\Wallpaper -> C:UsersGemmitiAAppDataRoamingMicrosoftWindowsThemesTranscodedWallpaper.jpg\nHKUS-1-5-21-928097801-345109163-1125972616-1107Control PanelDesktop\\Wallpaper -> C:UsersKMieleAppDataRoamingMicrosoftWindowsThemesTranscodedWallpaper.jpg\nDNS Servers: 192.168.1.10 – 8.8.8.8\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)\nWindows Firewall is enabled.
"},{"id":"text-70","type":"text","heading":"","plain_text":"==================== MSCONFIG/TASK MANAGER disabled items ==","html":"==================== MSCONFIG/TASK MANAGER disabled items ==
"},{"id":"text-71","type":"text","heading":"","plain_text":"==================== FirewallRules (Whitelisted) ================","html":"==================== FirewallRules (Whitelisted) ================
"},{"id":"text-72","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)","html":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
"},{"id":"text-73","type":"text","heading":"","plain_text":"FirewallRules: [SPPSVC-In-TCP] => (Allow) C:Windowssystem32sppsvc.exe (Microsoft Windows -> Microsoft Corporation)\nFirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) C:Windowssystem32sppsvc.exe (Microsoft Windows -> Microsoft Corporation)\nFirewallRules: [VirtualPC-In-UDP-1] => (Allow) C:WindowsSystem32vpc.exe (Microsoft Windows -> Microsoft Corporation)\nFirewallRules: [VirtualPC-In-UDP-2] => (Allow) C:WindowsSystem32vpc.exe (Microsoft Windows -> Microsoft Corporation)\nFirewallRules: [VirtualPC-In-TCP-1] => (Allow) C:WindowsSystem32vpc.exe (Microsoft Windows -> Microsoft Corporation)\nFirewallRules: [4D464B0D-D441-4C1A-9690-6C220FDA57DD] => (Allow) C:Program Files (x86)Windows LiveContactswlcomm.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [E564CEC1-17F7-4172-9DC9-C78E54F37199] => (Allow) LPort=2869\nFirewallRules: [72F6B6B7-D78F-48C5-B195-1EC6B45A5C40] => (Allow) LPort=1900\nFirewallRules: [40714D49-74CC-4BB1-B04E-FD99E705C81E] => (Allow) C:Program Files (x86)Windows LiveMessengermsnmsgr.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [3890C2D2-2FF9-45F4-B52E-EB259F191DB5] => (Allow) C:Program Files (x86)Windows LiveMeshMOE.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [440564F4-AF39-40C1-AE28-FBB35EBDE959] => (Allow) LPort=61117\nFirewallRules: [BA4C16D7-37AB-4022-881F-44169704B375] => (Allow) C:Program Files (x86)Pervasive SoftwarePSQLbinw3dbsmgr.exe => No File\nFirewallRules: [4590ABF8-4776-4998-826A-D6CC5710A518] => (Allow) C:Program Files (x86)Pervasive SoftwarePSQLbinw3dbsmgr.exe => No File\nFirewallRules: [916C88EE-3304-4C93-A0DD-93C173BA61A3] => (Allow) C:Program Files (x86)BUFFALONASNAVINasNavi.exe (BUFFALO INC. -> BUFFALO INC.)\nFirewallRules: [B89F0221-F9C1-41AA-A7DB-F5466E290BBB] => (Allow) C:Program Files (x86)BUFFALONASNAVINasNavi.exe (BUFFALO INC. -> BUFFALO INC.)\nFirewallRules: [79F605C0-A287-4CB6-9FEE-5CDFCA88CF29] => (Allow) C:Program Files (x86)Pervasive SoftwarePSQLbinw3dbsmgr.exe => No File\nFirewallRules: [05E18197-10F8-4D19-AF18-843782561776] => (Allow) C:Program Files (x86)Pervasive SoftwarePSQLbinw3dbsmgr.exe => No File\nFirewallRules: [DB8BEC7F-A363-4C40-B42C-6C98215B6535] => (Allow) C:Program Files (x86)CamlinkCodeMeter.exe => No File\nFirewallRules: [D8BC628E-F611-4B70-A973-CCB679002793] => (Allow) C:Program Files (x86)CamlinkCodeMeter.exe => No File\nFirewallRules: [F66F5A33-B161-41A6-9248-A6BC9E058C2F] => (Allow) LPort=8888\nFirewallRules: [42C900BC-87EA-400B-B2F7-34045EDC21B9] => (Allow) LPort=8888\nFirewallRules: [A7E2D356-6408-4F95-90DD-B88B80A6BFCB] => (Allow) C:Program Files (x86)BonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [D0D1233B-C780-46C3-B6D9-6F8B626B2B78] => (Allow) C:Program Files (x86)BonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [TCP Query User2E9CCECE-5ACF-4140-A63F-FFDBABCC4C34C:program files (x86)epson softwareevent managereeventmanager.exe] => (Allow) C:program files (x86)epson softwareevent managereeventmanager.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nFirewallRules: [UDP Query User01CFC82B-D2D0-4293-95E4-B35AE05DB1A7C:program files (x86)epson softwareevent managereeventmanager.exe] => (Allow) C:program files (x86)epson softwareevent managereeventmanager.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nFirewallRules: [TCP Query User52FBCC23-1977-48F6-92E0-5DE2B2368A43C:userskmieleappdatalocallogmein rescue appletlmir0001.tmplmi_rescue.exe] => (Allow) C:userskmieleappdatalocallogmein rescue appletlmir0001.tmplmi_rescue.exe => No File\nFirewallRules: [UDP Query User1BA34E42-A28B-4BE7-AA07-60C0DF8D2F67C:userskmieleappdatalocallogmein rescue appletlmir0001.tmplmi_rescue.exe] => (Allow) C:userskmieleappdatalocallogmein rescue appletlmir0001.tmplmi_rescue.exe => No File\nFirewallRules: [TCP Query UserCEA255B2-B158-4E7F-A9FA-F67C35193404C:userskmieleappdatalocallogmein rescue appletlmir08a51001.tmplmi_rescue.exe] => (Allow) C:userskmieleappdatalocallogmein rescue appletlmir08a51001.tmplmi_rescue.exe => No File\nFirewallRules: [UDP Query User8D52DE92-37D9-492B-8676-439A7D521498C:userskmieleappdatalocallogmein rescue appletlmir08a51001.tmplmi_rescue.exe] => (Allow) C:userskmieleappdatalocallogmein rescue appletlmir08a51001.tmplmi_rescue.exe => No File\nFirewallRules: [TCP Query User1CD30CA8-ED9A-45AE-9026-1C29A11A5A10C:userskmieleappdatalocallogmein rescue appletlmir0c02f001.tmplmi_rescue.exe] => (Allow) C:userskmieleappdatalocallogmein rescue appletlmir0c02f001.tmplmi_rescue.exe => No File\nFirewallRules: [UDP Query User118420AF-3275-48C1-ACC5-53603D5F45ACC:userskmieleappdatalocallogmein rescue appletlmir0c02f001.tmplmi_rescue.exe] => (Allow) C:userskmieleappdatalocallogmein rescue appletlmir0c02f001.tmplmi_rescue.exe => No File\nFirewallRules: [371A237F-EDC1-4902-859C-F0EE59581535] => (Allow) LPort=1583\nFirewallRules: [BD53179F-4515-4C75-AD50-9759AEF4F571] => (Allow) LPort=3351\nFirewallRules: [TCP Query User703607D8-C5C2-48D0-B3EB-826B5F03B747C:program files (x86)epson softwareevent managereeventmanager.exe] => (Block) C:program files (x86)epson softwareevent managereeventmanager.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nFirewallRules: [UDP Query UserC3E503D7-9624-4B95-BD36-973CFFBFFA01C:program files (x86)epson softwareevent managereeventmanager.exe] => (Block) C:program files (x86)epson softwareevent managereeventmanager.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nFirewallRules: [5B66001E-67E8-482B-9907-88D2C71ECEE0] => (Allow) C:Program Files (x86)ActianPSQLbinw3dbsmgr.exe (Actian Corporation -> Actian Corporation)\nFirewallRules: [57F0256F-F11D-4C05-99B0-2B148F2122C1] => (Allow) C:Program Files (x86)ActianPSQLbinw3dbsmgr.exe (Actian Corporation -> Actian Corporation)\nFirewallRules: [CD63BB04-48E6-4C08-9DC8-6FEEBE1EE352] => (Allow) C:Program Files (x86)Microsoft OfficerootOffice16outlook.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [CD4E3930-B5A9-41E2-BA5E-725CD4F19C9F] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [47A6D514-14A2-480B-840A-96B989540524] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [614115BB-54EC-4424-863B-8D6C020D5B0F] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [FA282503-93F7-4F43-9280-E657E4800ACB] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [A842E21A-C339-443D-BD1B-9DD4FFCAF49C] => (Allow) C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC -> Google LLC)","html":"FirewallRules: [SPPSVC-In-TCP] => (Allow) C:Windowssystem32sppsvc.exe (Microsoft Windows -> Microsoft Corporation)\nFirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) C:Windowssystem32sppsvc.exe (Microsoft Windows -> Microsoft Corporation)\nFirewallRules: [VirtualPC-In-UDP-1] => (Allow) C:WindowsSystem32vpc.exe (Microsoft Windows -> Microsoft Corporation)\nFirewallRules: [VirtualPC-In-UDP-2] => (Allow) C:WindowsSystem32vpc.exe (Microsoft Windows -> Microsoft Corporation)\nFirewallRules: [VirtualPC-In-TCP-1] => (Allow) C:WindowsSystem32vpc.exe (Microsoft Windows -> Microsoft Corporation)\nFirewallRules: [4D464B0D-D441-4C1A-9690-6C220FDA57DD] => (Allow) C:Program Files (x86)Windows LiveContactswlcomm.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [E564CEC1-17F7-4172-9DC9-C78E54F37199] => (Allow) LPort=2869\nFirewallRules: [72F6B6B7-D78F-48C5-B195-1EC6B45A5C40] => (Allow) LPort=1900\nFirewallRules: [40714D49-74CC-4BB1-B04E-FD99E705C81E] => (Allow) C:Program Files (x86)Windows LiveMessengermsnmsgr.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [3890C2D2-2FF9-45F4-B52E-EB259F191DB5] => (Allow) C:Program Files (x86)Windows LiveMeshMOE.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [440564F4-AF39-40C1-AE28-FBB35EBDE959] => (Allow) LPort=61117\nFirewallRules: [BA4C16D7-37AB-4022-881F-44169704B375] => (Allow) C:Program Files (x86)Pervasive SoftwarePSQLbinw3dbsmgr.exe => No File\nFirewallRules: [4590ABF8-4776-4998-826A-D6CC5710A518] => (Allow) C:Program Files (x86)Pervasive SoftwarePSQLbinw3dbsmgr.exe => No File\nFirewallRules: [916C88EE-3304-4C93-A0DD-93C173BA61A3] => (Allow) C:Program Files (x86)BUFFALONASNAVINasNavi.exe (BUFFALO INC. -> BUFFALO INC.)\nFirewallRules: [B89F0221-F9C1-41AA-A7DB-F5466E290BBB] => (Allow) C:Program Files (x86)BUFFALONASNAVINasNavi.exe (BUFFALO INC. -> BUFFALO INC.)\nFirewallRules: [79F605C0-A287-4CB6-9FEE-5CDFCA88CF29] => (Allow) C:Program Files (x86)Pervasive SoftwarePSQLbinw3dbsmgr.exe => No File\nFirewallRules: [05E18197-10F8-4D19-AF18-843782561776] => (Allow) C:Program Files (x86)Pervasive SoftwarePSQLbinw3dbsmgr.exe => No File\nFirewallRules: [DB8BEC7F-A363-4C40-B42C-6C98215B6535] => (Allow) C:Program Files (x86)CamlinkCodeMeter.exe => No File\nFirewallRules: [D8BC628E-F611-4B70-A973-CCB679002793] => (Allow) C:Program Files (x86)CamlinkCodeMeter.exe => No File\nFirewallRules: [F66F5A33-B161-41A6-9248-A6BC9E058C2F] => (Allow) LPort=8888\nFirewallRules: [42C900BC-87EA-400B-B2F7-34045EDC21B9] => (Allow) LPort=8888\nFirewallRules: [A7E2D356-6408-4F95-90DD-B88B80A6BFCB] => (Allow) C:Program Files (x86)BonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [D0D1233B-C780-46C3-B6D9-6F8B626B2B78] => (Allow) C:Program Files (x86)BonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [TCP Query User2E9CCECE-5ACF-4140-A63F-FFDBABCC4C34C:program files (x86)epson softwareevent managereeventmanager.exe] => (Allow) C:program files (x86)epson softwareevent managereeventmanager.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nFirewallRules: [UDP Query User01CFC82B-D2D0-4293-95E4-B35AE05DB1A7C:program files (x86)epson softwareevent managereeventmanager.exe] => (Allow) C:program files (x86)epson softwareevent managereeventmanager.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nFirewallRules: [TCP Query User52FBCC23-1977-48F6-92E0-5DE2B2368A43C:userskmieleappdatalocallogmein rescue appletlmir0001.tmplmi_rescue.exe] => (Allow) C:userskmieleappdatalocallogmein rescue appletlmir0001.tmplmi_rescue.exe => No File\nFirewallRules: [UDP Query User1BA34E42-A28B-4BE7-AA07-60C0DF8D2F67C:userskmieleappdatalocallogmein rescue appletlmir0001.tmplmi_rescue.exe] => (Allow) C:userskmieleappdatalocallogmein rescue appletlmir0001.tmplmi_rescue.exe => No File\nFirewallRules: [TCP Query UserCEA255B2-B158-4E7F-A9FA-F67C35193404C:userskmieleappdatalocallogmein rescue appletlmir08a51001.tmplmi_rescue.exe] => (Allow) C:userskmieleappdatalocallogmein rescue appletlmir08a51001.tmplmi_rescue.exe => No File\nFirewallRules: [UDP Query User8D52DE92-37D9-492B-8676-439A7D521498C:userskmieleappdatalocallogmein rescue appletlmir08a51001.tmplmi_rescue.exe] => (Allow) C:userskmieleappdatalocallogmein rescue appletlmir08a51001.tmplmi_rescue.exe => No File\nFirewallRules: [TCP Query User1CD30CA8-ED9A-45AE-9026-1C29A11A5A10C:userskmieleappdatalocallogmein rescue appletlmir0c02f001.tmplmi_rescue.exe] => (Allow) C:userskmieleappdatalocallogmein rescue appletlmir0c02f001.tmplmi_rescue.exe => No File\nFirewallRules: [UDP Query User118420AF-3275-48C1-ACC5-53603D5F45ACC:userskmieleappdatalocallogmein rescue appletlmir0c02f001.tmplmi_rescue.exe] => (Allow) C:userskmieleappdatalocallogmein rescue appletlmir0c02f001.tmplmi_rescue.exe => No File\nFirewallRules: [371A237F-EDC1-4902-859C-F0EE59581535] => (Allow) LPort=1583\nFirewallRules: [BD53179F-4515-4C75-AD50-9759AEF4F571] => (Allow) LPort=3351\nFirewallRules: [TCP Query User703607D8-C5C2-48D0-B3EB-826B5F03B747C:program files (x86)epson softwareevent managereeventmanager.exe] => (Block) C:program files (x86)epson softwareevent managereeventmanager.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nFirewallRules: [UDP Query UserC3E503D7-9624-4B95-BD36-973CFFBFFA01C:program files (x86)epson softwareevent managereeventmanager.exe] => (Block) C:program files (x86)epson softwareevent managereeventmanager.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nFirewallRules: [5B66001E-67E8-482B-9907-88D2C71ECEE0] => (Allow) C:Program Files (x86)ActianPSQLbinw3dbsmgr.exe (Actian Corporation -> Actian Corporation)\nFirewallRules: [57F0256F-F11D-4C05-99B0-2B148F2122C1] => (Allow) C:Program Files (x86)ActianPSQLbinw3dbsmgr.exe (Actian Corporation -> Actian Corporation)\nFirewallRules: [CD63BB04-48E6-4C08-9DC8-6FEEBE1EE352] => (Allow) C:Program Files (x86)Microsoft OfficerootOffice16outlook.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [CD4E3930-B5A9-41E2-BA5E-725CD4F19C9F] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [47A6D514-14A2-480B-840A-96B989540524] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [614115BB-54EC-4424-863B-8D6C020D5B0F] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [FA282503-93F7-4F43-9280-E657E4800ACB] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [A842E21A-C339-443D-BD1B-9DD4FFCAF49C] => (Allow) C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC -> Google LLC)
"},{"id":"text-74","type":"text","heading":"","plain_text":"==================== Restore Points =========================","html":"==================== Restore Points =========================
"},{"id":"text-75","type":"text","heading":"","plain_text":"10-05-2020 10:30:55 Windows Update\n13-05-2020 03:00:10 Windows Update\n16-05-2020 10:31:15 Windows Update\n19-05-2020 13:29:49 Windows Update\n26-05-2020 13:13:34 Windows Update\n30-05-2020 15:52:49 Installed Synology Active Backup for Business Agent\n31-05-2020 04:15:51 Windows Update","html":"10-05-2020 10:30:55 Windows Update\n13-05-2020 03:00:10 Windows Update\n16-05-2020 10:31:15 Windows Update\n19-05-2020 13:29:49 Windows Update\n26-05-2020 13:13:34 Windows Update\n30-05-2020 15:52:49 Installed Synology Active Backup for Business Agent\n31-05-2020 04:15:51 Windows Update
"},{"id":"text-76","type":"text","heading":"","plain_text":"==================== Faulty Device Manager Devices ============","html":"==================== Faulty Device Manager Devices ============
"},{"id":"text-77","type":"text","heading":"","plain_text":"Name: Malwarebytes Anti-Exploit\nDescription: Malwarebytes Anti-Exploit\nClass Guid: 8ECC055D-047F-11D1-A537-0000F8753ED1\nManufacturer: \nService: ESProtectionDriver\nProblem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)\nResolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.\nDevices stay in this state if they have been prepared for removal.\nAfter you remove the device, this error disappears.Remove the device, and this error should be resolved.","html":"Name: Malwarebytes Anti-Exploit\nDescription: Malwarebytes Anti-Exploit\nClass Guid: 8ECC055D-047F-11D1-A537-0000F8753ED1\nManufacturer: \nService: ESProtectionDriver\nProblem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)\nResolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.\nDevices stay in this state if they have been prepared for removal.\nAfter you remove the device, this error disappears.Remove the device, and this error should be resolved.
"},{"id":"text-78","type":"text","heading":"","plain_text":"==================== Event log errors: ========================","html":"==================== Event log errors: ========================
"},{"id":"text-79","type":"text","heading":"","plain_text":"Application errors:\n==================\nError: (05/30/2020 02:18:20 PM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.","html":"Application errors:\n==================\nError: (05/30/2020 02:18:20 PM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
"},{"id":"text-80","type":"text","heading":"","plain_text":"Error: (05/28/2020 07:00:36 PM) (Source: Norton Ghost) (EventID: 100) (User: )\nDescription: Error EC8F17B7: Cannot create recovery points for job: Drive Backup of RECOVERY (*:), OS (C:).\nError EC8F03ED: Cannot create the recovery point.\nError E7D1000B: Unable to make directory 'Z:/'.\nError E7D10026: Unable to get attributes for 'Z:/'.\nError EBAB03F1: The system cannot find the path specified. (UMI:V-281-3215-6071)","html":"Error: (05/28/2020 07:00:36 PM) (Source: Norton Ghost) (EventID: 100) (User: )\nDescription: Error EC8F17B7: Cannot create recovery points for job: Drive Backup of RECOVERY (*:), OS (C:).\nError EC8F03ED: Cannot create the recovery point.\nError E7D1000B: Unable to make directory 'Z:/'.\nError E7D10026: Unable to get attributes for 'Z:/'.\nError EBAB03F1: The system cannot find the path specified. (UMI:V-281-3215-6071)
"},{"id":"text-81","type":"text","heading":"","plain_text":"Détails: \nSource: Norton Ghost","html":"Détails: \nSource: Norton Ghost
"},{"id":"text-82","type":"text","heading":"","plain_text":"Error: (05/27/2020 07:00:37 PM) (Source: Norton Ghost) (EventID: 100) (User: )\nDescription: Error EC8F17B7: Cannot create recovery points for job: Drive Backup of RECOVERY (*:), OS (C:).\nError EC8F03ED: Cannot create the recovery point.\nError E7D1000B: Unable to make directory 'Z:/'.\nError E7D10026: Unable to get attributes for 'Z:/'.\nError EBAB03F1: The system cannot find the path specified. (UMI:V-281-3215-6071)","html":"Error: (05/27/2020 07:00:37 PM) (Source: Norton Ghost) (EventID: 100) (User: )\nDescription: Error EC8F17B7: Cannot create recovery points for job: Drive Backup of RECOVERY (*:), OS (C:).\nError EC8F03ED: Cannot create the recovery point.\nError E7D1000B: Unable to make directory 'Z:/'.\nError E7D10026: Unable to get attributes for 'Z:/'.\nError EBAB03F1: The system cannot find the path specified. (UMI:V-281-3215-6071)
"},{"id":"text-83","type":"text","heading":"","plain_text":"Détails: \nSource: Norton Ghost","html":"Détails: \nSource: Norton Ghost
"},{"id":"text-84","type":"text","heading":"","plain_text":"Error: (05/26/2020 07:00:36 PM) (Source: Norton Ghost) (EventID: 100) (User: )\nDescription: Error EC8F17B7: Cannot create recovery points for job: Drive Backup of RECOVERY (*:), OS (C:).\nError EC8F03ED: Cannot create the recovery point.\nError E7D1000B: Unable to make directory 'Z:/'.\nError E7D10026: Unable to get attributes for 'Z:/'.\nError EBAB03F1: The system cannot find the path specified. (UMI:V-281-3215-6071)","html":"Error: (05/26/2020 07:00:36 PM) (Source: Norton Ghost) (EventID: 100) (User: )\nDescription: Error EC8F17B7: Cannot create recovery points for job: Drive Backup of RECOVERY (*:), OS (C:).\nError EC8F03ED: Cannot create the recovery point.\nError E7D1000B: Unable to make directory 'Z:/'.\nError E7D10026: Unable to get attributes for 'Z:/'.\nError EBAB03F1: The system cannot find the path specified. (UMI:V-281-3215-6071)
"},{"id":"text-85","type":"text","heading":"","plain_text":"Détails: \nSource: Norton Ghost","html":"Détails: \nSource: Norton Ghost
"},{"id":"text-86","type":"text","heading":"","plain_text":"Error: (05/26/2020 08:09:30 AM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.","html":"Error: (05/26/2020 08:09:30 AM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
"},{"id":"text-87","type":"text","heading":"","plain_text":"Error: (05/26/2020 08:08:48 AM) (Source: Application Error) (EventID: 1000) (User: )\nDescription: Faulting application name: OfficeClickToRun.exe, version: 16.0.12527.20612, time stamp: 0x5e8656fc\nFaulting module name: OfficeClickToRun.exe, version: 16.0.12527.20612, time stamp: 0x5e8656fc\nException code: 0xc0000005\nFault offset: 0x00000000003b24d9\nFaulting process id: 0x7a8\nFaulting application start time: 0x01d63356598eb186\nFaulting application path: C:Program FilesCommon FilesMicrosoft SharedClickToRunOfficeClickToRun.exe\nFaulting module path: C:Program FilesCommon FilesMicrosoft SharedClickToRunOfficeClickToRun.exe\nReport Id: a6e96793-9f49-11ea-b347-5cf9dd777e57","html":"Error: (05/26/2020 08:08:48 AM) (Source: Application Error) (EventID: 1000) (User: )\nDescription: Faulting application name: OfficeClickToRun.exe, version: 16.0.12527.20612, time stamp: 0x5e8656fc\nFaulting module name: OfficeClickToRun.exe, version: 16.0.12527.20612, time stamp: 0x5e8656fc\nException code: 0xc0000005\nFault offset: 0x00000000003b24d9\nFaulting process id: 0x7a8\nFaulting application start time: 0x01d63356598eb186\nFaulting application path: C:Program FilesCommon FilesMicrosoft SharedClickToRunOfficeClickToRun.exe\nFaulting module path: C:Program FilesCommon FilesMicrosoft SharedClickToRunOfficeClickToRun.exe\nReport Id: a6e96793-9f49-11ea-b347-5cf9dd777e57
"},{"id":"text-88","type":"text","heading":"","plain_text":"Error: (05/26/2020 08:08:25 AM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.","html":"Error: (05/26/2020 08:08:25 AM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
"},{"id":"text-89","type":"text","heading":"","plain_text":"Error: (05/22/2020 03:32:38 PM) (Source: ESENT) (EventID: 104) (User: )\nDescription: taskhost (4204) WebCacheLocal: The database engine stopped the instance (0) with error (-1011).","html":"Error: (05/22/2020 03:32:38 PM) (Source: ESENT) (EventID: 104) (User: )\nDescription: taskhost (4204) WebCacheLocal: The database engine stopped the instance (0) with error (-1011).
"},{"id":"text-90","type":"text","heading":"","plain_text":"System errors:\n=============\nError: (05/31/2020 10:53:04 AM) (Source: UmrdpService) (EventID: 1111) (User: )\nDescription: Driver Brother HL-5050 required for printer !!IQA-10!Brother HL-5050Lan is unknown. Contact the administrator to install the driver before you log in again.","html":"System errors:\n=============\nError: (05/31/2020 10:53:04 AM) (Source: UmrdpService) (EventID: 1111) (User: )\nDescription: Driver Brother HL-5050 required for printer !!IQA-10!Brother HL-5050Lan is unknown. Contact the administrator to install the driver before you log in again.
"},{"id":"text-91","type":"text","heading":"","plain_text":"Error: (05/31/2020 10:53:02 AM) (Source: UmrdpService) (EventID: 1111) (User: )\nDescription: Driver Amyuni Document Converter 400 required for printer QuickBooks PDF Converter 2.0 is unknown. Contact the administrator to install the driver before you log in again.","html":"Error: (05/31/2020 10:53:02 AM) (Source: UmrdpService) (EventID: 1111) (User: )\nDescription: Driver Amyuni Document Converter 400 required for printer QuickBooks PDF Converter 2.0 is unknown. Contact the administrator to install the driver before you log in again.
"},{"id":"text-92","type":"text","heading":"","plain_text":"Error: (05/31/2020 10:49:06 AM) (Source: Disk) (EventID: 11) (User: )\nDescription: The driver detected a controller error on DeviceHarddisk1DR1.","html":"Error: (05/31/2020 10:49:06 AM) (Source: Disk) (EventID: 11) (User: )\nDescription: The driver detected a controller error on DeviceHarddisk1DR1.
"},{"id":"text-93","type":"text","heading":"","plain_text":"Error: (05/31/2020 04:16:03 AM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )\nDescription: Microsoft Antimalware has encountered an error trying to update signatures.","html":"Error: (05/31/2020 04:16:03 AM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )\nDescription: Microsoft Antimalware has encountered an error trying to update signatures.
"},{"id":"text-94","type":"text","heading":"","plain_text":"New Signature Version:","html":"New Signature Version:
"},{"id":"text-95","type":"text","heading":"","plain_text":"Previous Signature Version: 1.317.184.0","html":"Previous Signature Version: 1.317.184.0
"},{"id":"text-96","type":"text","heading":"","plain_text":"Update Source: Microsoft Malware Protection Center","html":"Update Source: Microsoft Malware Protection Center
"},{"id":"text-97","type":"text","heading":"","plain_text":"Update Stage: Install","html":"Update Stage: Install
"},{"id":"text-98","type":"text","heading":"","plain_text":"Signature Type: AntiSpyware","html":"Signature Type: AntiSpyware
"},{"id":"text-99","type":"text","heading":"","plain_text":"Update Type: Full","html":"Update Type: Full
"},{"id":"text-100","type":"text","heading":"","plain_text":"User: NT AUTHORITYNETWORK SERVICE","html":"User: NT AUTHORITYNETWORK SERVICE
"},{"id":"text-101","type":"text","heading":"","plain_text":"Current Engine Version:","html":"Current Engine Version:
"},{"id":"text-102","type":"text","heading":"","plain_text":"Previous Engine Version: 1.1.17100.2","html":"Previous Engine Version: 1.1.17100.2
"},{"id":"text-103","type":"text","heading":"","plain_text":"Error code: 0x80070652","html":"Error code: 0x80070652
"},{"id":"text-104","type":"text","heading":"","plain_text":"Error description: Another installation is already in progress. Complete that installation before proceeding with this install.","html":"Error description: Another installation is already in progress. Complete that installation before proceeding with this install.
"},{"id":"text-105","type":"text","heading":"","plain_text":"Error: (05/31/2020 04:16:03 AM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )\nDescription: Microsoft Antimalware has encountered an error trying to update signatures.","html":"Error: (05/31/2020 04:16:03 AM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )\nDescription: Microsoft Antimalware has encountered an error trying to update signatures.
"},{"id":"text-106","type":"text","heading":"","plain_text":"New Signature Version:","html":"New Signature Version:
"},{"id":"text-107","type":"text","heading":"","plain_text":"Previous Signature Version: 1.317.184.0","html":"Previous Signature Version: 1.317.184.0
"},{"id":"text-108","type":"text","heading":"","plain_text":"Update Source: Microsoft Malware Protection Center","html":"Update Source: Microsoft Malware Protection Center
"},{"id":"text-109","type":"text","heading":"","plain_text":"Update Stage: Install","html":"Update Stage: Install
"},{"id":"text-110","type":"text","heading":"","plain_text":"Signature Type: AntiVirus","html":"Signature Type: AntiVirus
"},{"id":"text-111","type":"text","heading":"","plain_text":"Update Type: Full","html":"Update Type: Full
"},{"id":"text-112","type":"text","heading":"","plain_text":"User: NT AUTHORITYNETWORK SERVICE","html":"User: NT AUTHORITYNETWORK SERVICE
"},{"id":"text-113","type":"text","heading":"","plain_text":"Current Engine Version:","html":"Current Engine Version:
"},{"id":"text-114","type":"text","heading":"","plain_text":"Previous Engine Version: 1.1.17100.2","html":"Previous Engine Version: 1.1.17100.2
"},{"id":"text-115","type":"text","heading":"","plain_text":"Error code: 0x80070652","html":"Error code: 0x80070652
"},{"id":"text-116","type":"text","heading":"","plain_text":"Error description: Another installation is already in progress. Complete that installation before proceeding with this install.","html":"Error description: Another installation is already in progress. Complete that installation before proceeding with this install.
"},{"id":"text-117","type":"text","heading":"","plain_text":"Error: (05/31/2020 04:16:03 AM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )\nDescription: Microsoft Antimalware has encountered an error trying to update signatures.","html":"Error: (05/31/2020 04:16:03 AM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )\nDescription: Microsoft Antimalware has encountered an error trying to update signatures.
"},{"id":"text-118","type":"text","heading":"","plain_text":"New Signature Version:","html":"New Signature Version:
"},{"id":"text-119","type":"text","heading":"","plain_text":"Previous Signature Version:","html":"Previous Signature Version:
"},{"id":"text-120","type":"text","heading":"","plain_text":"Update Source: User","html":"Update Source: User
"},{"id":"text-121","type":"text","heading":"","plain_text":"Update Stage: Install","html":"Update Stage: Install
"},{"id":"text-122","type":"text","heading":"","plain_text":"Source Path:","html":"Source Path:
"},{"id":"text-123","type":"text","heading":"","plain_text":"Signature Type:","html":"Signature Type:
"},{"id":"text-124","type":"text","heading":"","plain_text":"Update Type:","html":"Update Type:
"},{"id":"text-125","type":"text","heading":"","plain_text":"User: NT AUTHORITYNETWORK SERVICE","html":"User: NT AUTHORITYNETWORK SERVICE
"},{"id":"text-126","type":"text","heading":"","plain_text":"Current Engine Version:","html":"Current Engine Version:
"},{"id":"text-127","type":"text","heading":"","plain_text":"Previous Engine Version:","html":"Previous Engine Version:
"},{"id":"text-128","type":"text","heading":"","plain_text":"Error code: 0x80070652","html":"Error code: 0x80070652
"},{"id":"text-129","type":"text","heading":"","plain_text":"Error description: Another installation is already in progress. Complete that installation before proceeding with this install.","html":"Error description: Another installation is already in progress. Complete that installation before proceeding with this install.
"},{"id":"text-130","type":"text","heading":"","plain_text":"Error: (05/31/2020 04:16:03 AM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )\nDescription: Microsoft Antimalware has encountered an error trying to update signatures.","html":"Error: (05/31/2020 04:16:03 AM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )\nDescription: Microsoft Antimalware has encountered an error trying to update signatures.
"},{"id":"text-131","type":"text","heading":"","plain_text":"New Signature Version:","html":"New Signature Version:
"},{"id":"text-132","type":"text","heading":"","plain_text":"Previous Signature Version:","html":"Previous Signature Version:
"},{"id":"text-133","type":"text","heading":"","plain_text":"Update Source: User","html":"Update Source: User
"},{"id":"text-134","type":"text","heading":"","plain_text":"Update Stage: Install","html":"Update Stage: Install
"},{"id":"text-135","type":"text","heading":"","plain_text":"Source Path:","html":"Source Path:
"},{"id":"text-136","type":"text","heading":"","plain_text":"Signature Type:","html":"Signature Type:
"},{"id":"text-137","type":"text","heading":"","plain_text":"Update Type:","html":"Update Type:
"},{"id":"text-138","type":"text","heading":"","plain_text":"User: NT AUTHORITYNETWORK SERVICE","html":"User: NT AUTHORITYNETWORK SERVICE
"},{"id":"text-139","type":"text","heading":"","plain_text":"Current Engine Version:","html":"Current Engine Version:
"},{"id":"text-140","type":"text","heading":"","plain_text":"Previous Engine Version:","html":"Previous Engine Version:
"},{"id":"text-141","type":"text","heading":"","plain_text":"Error code: 0x80070652","html":"Error code: 0x80070652
"},{"id":"text-142","type":"text","heading":"","plain_text":"Error description: Another installation is already in progress. Complete that installation before proceeding with this install.","html":"Error description: Another installation is already in progress. Complete that installation before proceeding with this install.
"},{"id":"text-143","type":"text","heading":"","plain_text":"Error: (05/31/2020 04:16:01 AM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )\nDescription: Microsoft Antimalware has encountered an error trying to update signatures.","html":"Error: (05/31/2020 04:16:01 AM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )\nDescription: Microsoft Antimalware has encountered an error trying to update signatures.
"},{"id":"text-144","type":"text","heading":"","plain_text":"New Signature Version:","html":"New Signature Version:
"},{"id":"text-145","type":"text","heading":"","plain_text":"Previous Signature Version: 1.317.184.0","html":"Previous Signature Version: 1.317.184.0
"},{"id":"text-146","type":"text","heading":"","plain_text":"Update Source: Microsoft Update Server","html":"Update Source: Microsoft Update Server
"},{"id":"text-147","type":"text","heading":"","plain_text":"Update Stage: Download","html":"Update Stage: Download
"},{"id":"text-148","type":"text","heading":"","plain_text":"Signature Type: AntiVirus","html":"Signature Type: AntiVirus
"},{"id":"text-149","type":"text","heading":"","plain_text":"Update Type: Full","html":"Update Type: Full
"},{"id":"text-150","type":"text","heading":"","plain_text":"User: NT AUTHORITYSYSTEM","html":"User: NT AUTHORITYSYSTEM
"},{"id":"text-151","type":"text","heading":"","plain_text":"Current Engine Version:","html":"Current Engine Version:
"},{"id":"text-152","type":"text","heading":"","plain_text":"Previous Engine Version: 1.1.17100.2","html":"Previous Engine Version: 1.1.17100.2
"},{"id":"text-153","type":"text","heading":"","plain_text":"Error code: 0x80240016","html":"Error code: 0x80240016
"},{"id":"text-154","type":"text","heading":"","plain_text":"Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.","html":"Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
"},{"id":"text-155","type":"text","heading":"","plain_text":"CodeIntegrity:\n===================================","html":"CodeIntegrity:\n===================================
"},{"id":"text-156","type":"text","heading":"","plain_text":"Date: 2020-05-31 11:02:57.773\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system.","html":"Date: 2020-05-31 11:02:57.773\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system.
"},{"id":"text-157","type":"text","heading":"","plain_text":"Date: 2020-05-31 10:55:42.474\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system.","html":"Date: 2020-05-31 10:55:42.474\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system.
"},{"id":"text-158","type":"text","heading":"","plain_text":"Date: 2018-11-15 16:44:27.311\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system.","html":"Date: 2018-11-15 16:44:27.311\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system.
"},{"id":"text-159","type":"text","heading":"","plain_text":"Date: 2018-06-20 10:14:07.864\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system.","html":"Date: 2018-06-20 10:14:07.864\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system.
"},{"id":"text-160","type":"text","heading":"","plain_text":"Date: 2018-06-18 09:15:44.321\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system.","html":"Date: 2018-06-18 09:15:44.321\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system.
"},{"id":"text-161","type":"text","heading":"","plain_text":"Date: 2018-06-18 08:56:24.219\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system.","html":"Date: 2018-06-18 08:56:24.219\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system.
"},{"id":"text-162","type":"text","heading":"","plain_text":"Date: 2018-05-16 23:39:56.129\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system.","html":"Date: 2018-05-16 23:39:56.129\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system.
"},{"id":"text-163","type":"text","heading":"","plain_text":"Date: 2018-05-16 23:33:38.323\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system.","html":"Date: 2018-05-16 23:33:38.323\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system.
"},{"id":"text-164","type":"text","heading":"","plain_text":"==================== Memory info ===========================","html":"==================== Memory info ===========================
"},{"id":"text-165","type":"text","heading":"","plain_text":"BIOS: Dell Inc. A25 05/10/2017\nMotherboard: Dell Inc. 0KRC95\nProcessor: Intel® Core™ i5-3550 CPU @ 3.30GHz\nPercentage of memory in use: 96%\nTotal physical RAM: 3982.54 MB\nAvailable physical RAM: 140.28 MB\nTotal Virtual: 7963.21 MB\nAvailable Virtual: 2160.28 MB","html":"BIOS: Dell Inc. A25 05/10/2017\nMotherboard: Dell Inc. 0KRC95\nProcessor: Intel® Core™ i5-3550 CPU @ 3.30GHz\nPercentage of memory in use: 96%\nTotal physical RAM: 3982.54 MB\nAvailable physical RAM: 140.28 MB\nTotal Virtual: 7963.21 MB\nAvailable Virtual: 2160.28 MB
"},{"id":"text-166","type":"text","heading":"","plain_text":"==================== Drives ================================","html":"==================== Drives ================================
"},{"id":"text-167","type":"text","heading":"","plain_text":"Drive c: (OS) (Fixed) (Total:232.13 GB) (Free:110.08 GB) NTFS\nDrive z: (Seagate Backup Plus Drive) (Fixed) (Total:1863.01 GB) (Free:1280.23 GB) NTFS","html":"Drive c: (OS) (Fixed) (Total:232.13 GB) (Free:110.08 GB) NTFS\nDrive z: (Seagate Backup Plus Drive) (Fixed) (Total:1863.01 GB) (Free:1280.23 GB) NTFS
"},{"id":"text-168","type":"text","heading":"","plain_text":"\\?Volume03c315c4-e6a3-11e1-be23-806e6f6e6963 (RECOVERY) (Fixed) (Total:0.74 GB) (Free:0.2 GB) NTFS","html":"\\?Volume03c315c4-e6a3-11e1-be23-806e6f6e6963 (RECOVERY) (Fixed) (Total:0.74 GB) (Free:0.2 GB) NTFS
"},{"id":"text-169","type":"text","heading":"","plain_text":"==================== MBR & Partition Table ====================","html":"==================== MBR & Partition Table ====================
"},{"id":"text-170","type":"text","heading":"","plain_text":"==========================================================\nDisk: 0 (MBR Code: Windows 7 or Vista) (Size: 232.9 GB) (Disk ID: 8AE4B35C)\nPartition 1: (Not Active) – (Size=24 MB) – (Type=DE)\nPartition 2: (Active) – (Size=753 MB) – (Type=07 NTFS)\nPartition 3: (Not Active) – (Size=232.1 GB) – (Type=07 NTFS)\nAttempted reading MBR returned 0 bytes.\n Could not read MBR for disk 1.","html":"==========================================================\nDisk: 0 (MBR Code: Windows 7 or Vista) (Size: 232.9 GB) (Disk ID: 8AE4B35C)\nPartition 1: (Not Active) – (Size=24 MB) – (Type=DE)\nPartition 2: (Active) – (Size=753 MB) – (Type=07 NTFS)\nPartition 3: (Not Active) – (Size=232.1 GB) – (Type=07 NTFS)\nAttempted reading MBR returned 0 bytes.\n Could not read MBR for disk 1.
"},{"id":"text-171","type":"text","heading":"","plain_text":"==================== End of Addition.txt =======================","html":"==================== End of Addition.txt =======================
"},{"id":"text-172","type":"text","heading":"","plain_text":"Click to rate this post!\n \n [Total: 0 Average: 0]","html":"Click to rate this post!\n \n [Total: 0 Average: 0]
"}],"sections":[{"id":"text-1","heading":"Text","content":"Je suis coupable de ne pas avoir lu complètement. Voir les journaux collés ci-dessous:\nRésultat de l'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 30-05-2020 01\nRan par GemmitiA (administrateur) sur KM-PC (Dell Inc. OptiPlex 7010) (31-05-2020 11:06:43)\nExécution à partir de C: Users KMiele Downloads Gus\nProfils chargés: GemmitiA & KMiele\nPlateforme: Windows 7 Professional Service Pack 1 (X64) Langue: anglais (États-Unis)\nInternet Explorer version 11 (navigateur par défaut: IE)\nMode de démarrage: Normal"},{"id":"text-2","heading":"Text","content":"==================== Processus (liste blanche) ================="},{"id":"text-3","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, le processus sera fermé. Le fichier ne sera pas déplacé.)"},{"id":"text-4","heading":"Text","content":"(Actian Corporation -> Actian Corporation) C: Program Files (x86) Actian PSQL bin w3dbsmgr.exe\n(Adobe Inc. -> Adobe Systems) C: Program Files (x86) Common Files Adobe ARM 1.0 armsvc.exe\n(Apple Inc. -> Apple Inc.) C: Program Files (x86) Bonjour mDNSResponder.exe\n(BUFFALO INC. -> BUFFALO INC.) C: Program Files (x86) BUFFALO NASNAVI nassvc.exe\n(Cisco WebEx LLC -> Cisco WebEx LLC) C: Windows SysWOW64 atashost.exe\n(DYMO) [File not signed] C: Program Files (x86) DYMO DYMO Label Software DYMO.DLS.Printing.Host.exe\n(FOXIT SOFTWARE INC. -> Foxit Software Inc.) C: Program Files (x86) Foxit Software Foxit PhantomPDF FoxitPhantomPDFUpdateService.exe\n(FOXIT SOFTWARE INC. -> Foxit Software Inc.) C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator FoxitProxyServer_Socket_PH.exe \n(Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe \n(Hewlett-Packard Company -> HP) C: Windows System32 HPSIsvc.exe\n(HP) [File not signed] C: Program Files (x86) HP HPLaserJetService HPLaserJetService.exe\n(Intel Corporation – Micrologiciel Intel® Management Engine -> Intel Corporation) C: Program Files (x86) Intel Intel® Management Engine Components DAL Jhi_service.exe\n(Intel Corporation – Produits logiciels et micrologiciels -> Intel Corporation) C: Program Files (x86) Intel Intel® Management Engine Components IMSS PrivacyIconClient.exe\n(Intel Corporation – Produits logiciels et micrologiciels -> Intel Corporation) C: Program Files (x86) Intel Intel® Management Engine Components LMS LMS.exe\n(Intel Corporation -> Intel Corporation) C: Program Files (x86) Intel Intel® Rapid Storage Technology IAStorDataMgrSvc.exe\n(Intel Corporation -> Intel Corporation) C: Program Files (x86) Intel Intel® Rapid Storage Technology IAStorIcon.exe\n(Intel Corporation -> Intel Corporation) C: Program Files (x86) Intel Intel® USB 3.0 eXtensible Host Controller Driver Application iusb3mon.exe\n(Intel Corporation -> Intel Corporation) C: Windows System32 IPROSetMonitor.exe\n(Intel® Corporation) [File not signed] C: Program Files Intel iCLS Client HeciServer.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 igfxCUIService.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 igfxEM.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 igfxHK.exe\n(Intel® pGFX -> Intel Corporation) C: Windows System32 igfxTray.exe\n(Microsoft Corporation -> Microsoft Corp.) C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDSVC.EXE\n(Microsoft Corporation -> Microsoft Corp.) C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDSVCM.EXE\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Microsoft Office root Office16 EXCEL.EXE\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Microsoft Office root Office16 ONENOTEM.EXE\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Microsoft Office root Office16 WINWORD.EXE\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Fichiers communs Microsoft Shared ClickToRun OfficeClickToRun.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client MsMpEng.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client msseces.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client NisSrv.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Windows Microsoft.NET Framework64 v3.0 WPF PresentationFontCache.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 dllhost.exe \n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 LogonUI.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 mobsync.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 prevhost.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 rdpclip.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows SysWOW64 wbem WmiPrvSE.exe\n(Éditeur de compatibilité matérielle Microsoft Windows -> SEIKO EPSON CORPORATION) C: ProgramData EPSON EPW! 3 SSRP E_S30RP1.EXE\n(Microsoft) [File not signed] C: Program Files (x86) Common Files Sage Central AutoUpdateClient Sage.Central.AutoUpdateManager.Service.exe\n(Nuance Communications, Inc. -> Nuance Communications, Inc.) C: Program Files (x86) ScanSoft PaperPort pptd40nt.exe\n(Realtek Semiconductor Corp -> Realtek Semiconductor Corp.) C: Program Files Realtek Audio HDA RtDCpl64.exe\n(Sage Software, Inc. -> Sage Software, Inc.) C: Program Files (x86) Sage Peachtree SmartPostingService2020.exe\n(Sanford, L.P.) [File not signed] C: Program Files (x86) DYMO DYMO Label Software DymoPnpService.exe\n(Sanford, L.P.) [File not signed] C: Program Files (x86) DYMO DYMO Label Software DymoQuickPrint.exe\n(Seagate Technology LLC -> Seagate Technology LLC) C: Program Files (x86) Seagate Seagate Dashboard 2.0 MobileService.exe\n(Seagate Technology LLC -> Seagate Technology LLC) C: Program Files (x86) Seagate Seagate Dashboard 2.0 Seagate.Dashboard.DASWindowsService.exe\n(SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C: Program Files (x86) Epson Software Event Manager EEventManager.exe\n(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C: Program Files (x86) Epson Software FAX Utility FUFAXRCV.exe\n(SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C: Program Files Fichiers communs EPSON EPW! 3 SSRP E_S60RPB.EXE\n(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C: Program Files EPSON EpsonCustomerParticipation EPCP.exe\n(SEIKO EPSON Corporation -> Seiko Epson Corporation) C: Windows System32 escsvc64.exe\n(Symantec Corporation -> Symantec Corporation) C: Program Files (x86) Norton Ghost Agent VProSvc.exe\n(Symantec Corporation -> Symantec Corporation) C: Program Files (x86) Norton Ghost Agent VProTray.exe\n(Symantec Corporation -> Symantec) C: Program Files (x86) Norton Ghost Shared Drivers SymSnapServicex64.exe\n(Synology Inc. ->) C: Program Files (x86) Synology ActiveBackupforBusinessAgent service Synology Active Backup for Business Service.exe\n(Synology Inc. -> Synology Inc.) C: Program Files (x86) Synology ActiveBackupforBusinessAgent ui ui Synology Active Backup for Business Agent.exe\n(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C: Program Files (x86) TeamViewer TeamViewer_Service.exe\n(UPEK Inc. -> UPEK Inc.) C: Program Files Fichiers communs SPBA upeksvr.exe \n(Wave Systems Corp. ->) C: Program Files Dell Dell Data Protection Access Advanced Wave EMBASSY Client Core EmbassyServer.exe\n(Wave Systems Corp. -> Wave Systems Corp.) C: Program Files Dell Dell Data Protection Access Advanced Wave Trusted Drive Manager TdmNotify.exe\n(Wave Systems Corp. -> Wave Systems Corp.) C: Program Files Dell Dell Data Protection Access Advanced Wave Trusted Drive Manager TdmService.exe\n(Wave Systems Corp.) [File not signed] C: Program Files Dell Dell Data Protection Access Advanced Wave Authentication Manager WaveAMService.exe"},{"id":"text-5","heading":"Text","content":"==================== Registre (liste blanche) ==================="},{"id":"text-6","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, l'élément de registre sera restauré par défaut ou supprimé. Le fichier ne sera pas déplacé.)"},{"id":"text-7","heading":"Text","content":"HKLM … Run: [RtHDVCpl] => C: Program Files Realtek Audio HDA RtDCpl64.exe [2907240 2011-07-20] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)\nHKLM … Run: [TdmNotify] => C: Program Files Dell Dell Data Protection Access Advanced Wave Trusted Drive Manager TdmNotify.exe [381296 2011-12-08] (Wave Systems Corp. -> Wave Systems Corp.)\nHKLM … Run: [MSC] => C: Program Files Microsoft Security Client msseces.exe [1353680 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nHKLM-x32 … Exécuter: [IAStorIcon] => C: Program Files (x86) Intel Intel® Rapid Storage Technology IAStorIcon.exe [284440 2011-11-29] (Intel Corporation -> Intel Corporation)\nHKLM-x32 … Exécuter: [IMSS] => C: Program Files (x86) Intel Intel® Management Engine Components IMSS PIconStartup.exe [134616 2013-11-13] (Intel Corporation – Logiciels et micrologiciels -> Intel Corporation)\nHKLM-x32 … Exécuter: [USB3MON] => C: Program Files (x86) Intel Intel® USB 3.0 eXtensible Host Controller Driver Application iusb3mon.exe [291608 2012-02-27] (Intel Corporation -> Intel Corporation)\nHKLM-x32 … Exécuter: [PeachtreePrefetcher.exe] => C: Program Files (x86) Sage Peachtree PeachtreePrefetcher.exe [328736 2019-10-01] (Sage Software, Inc. -> Sage Software, Inc.)\nHKLM-x32 … Exécuter: [EEventManager] => C: Program Files (x86) Epson Software Event Manager EEventManager.exe [1058880 2013-03-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nHKLM-x32 … Exécuter: [SSBkgdUpdate] => C: Program Files (x86) Fichiers communs Scansoft Shared SSBkgdUpdate SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc. -> Nuance Communications, Inc.)\nHKLM-x32 … Exécuter: [PaperPort PTD] => C: Program Files (x86) ScanSoft PaperPort pptd40nt.exe [29984 2008-01-14] (Nuance Communications, Inc. -> Nuance Communications, Inc.)\nHKLM-x32 … Exécuter: [IndexSearch] => C: Program Files (x86) ScanSoft PaperPort IndexSearch.exe [46368 2008-01-14] (Nuance Communications, Inc. -> Nuance Communications, Inc.)\nHKLM-x32 … Exécuter: [PPort11reminder] => C: Program Files (x86) ScanSoft PaperPort Ereg Ereg.exe [328992 2007-08-31] (Nuance Communications, Inc. -> Nuance Communications, Inc.)\nHKLM-x32 … Exécuter: [Norton Ghost 15.0] => C: Program Files (x86) Norton Ghost Agent VProTray.exe [2598760 2010-03-03] (Symantec Corporation -> Symantec Corporation)\nHKLM-x32 … Exécuter: [FUFAXRCV] => C: Program Files (x86) Epson Software FAX Utility FUFAXRCV.exe [642664 2014-05-26] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nHKLM-x32 … Exécuter: [FUFAXSTM] => C: Program Files (x86) Epson Software FAX Utility FUFAXSTM.exe [863848 2014-05-26] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nHKLM-x32 … Exécuter: [] => [X]\nHKLM-x32 … Exécuter: [HPUsageTrackingLEDM] => "C: Program Files (x86) HP HP UT LEDM bin hppusg.exe" "C: Program Files (x86) HP HP UT LEDM "\nHKLM-x32 … Exécuter: [DBAgent] => C: Program Files (x86) Seagate Seagate Dashboard 2.0 DBAgent.exe [1540896 2015-07-15] (Seagate Technology LLC -> Seagate Technology LLC)\nHKLM-x32 … Exécuter: [DLSWebSvc] => C: Program Files (x86) DYMO DYMO Label Software DYMO.DLS.Printing.Host.exe [4871680 2017-05-09] (DYMO) [File not signed]\nHKLM-x32 … RunOnce: [ZZPT001] => C: Program Files (x86) Sage Peachtree Peachw.exe [354848 2019-10-01] (Sage Software, Inc. -> Sage Software, Inc.)\nHKLM-x32 … RunOnce: [ZZPT002] => C: Program Files (x86) Sage Peachtree Peachw.exe [354848 2019-10-01] (Sage Software, Inc. -> Sage Software, Inc.)\nHKLM … Policies Explorer: [NoStrCmpLogical] 1\nHKU S-1-5-21-928097801-345109163-1125972616-1104 … Run: [DellSystemDetect] => C: Users GemmitiA AppData Local Apps 2.0 82RYGLLL.5KY TT48BPWH.BTP dell..tion_831211ca63b981c5_0008.0008_b150a6542eb950c1 DellSystemDetect.exe [314544 2017-09-13] (Dell Inc -> Dell)\nHKU S-1-5-21-928097801-345109163-1125972616-1107 … Exécuter: [DymoQuickPrint] => C: Program Files (x86) DYMO DYMO Label Software DymoQuickPrint.exe [2033664 2017-05-09] (Sanford, L.P.) [File not signed]\nHKU S-1-5-21-928097801-345109163-1125972616-1107 … Exécuter: [turnedneutral] => "C: Users KMiele AppData Local Turnneutral Turnneutral.exe"\nHKLM … Windows x64 Processeurs d'impression GoToMyPC Print Processor: C: Windows System32 spool prtprocs x64 GoToPrintProcessor_x64.dll [52080 2011-11-13] (Citrix Online -> Citrix Online, une division de Citrix Systems, Inc.)\nHKLM … Windows x64 Processeurs d'impression HP1100PrintProc: C: Windows System32 spool prtprocs x64 HP1100PP.DLL [74240 2012-08-31] (Éditeur de compatibilité matérielle Microsoft Windows ->)\nHKLM … Windows x64 Processeurs d'impression hpfppw73: C: Windows System32 spool prtprocs x64 hpfppw73.dll [258048 2009-07-13] (Microsoft Windows -> Hewlett-Packard Corporation)\nHKLM … Windows x64 Processeurs d'impression hpzpplhn: C: Windows System32 spool prtprocs x64 hpzpplhn.dll [99840 2008-05-07] (Hewlett-Packard Corporation) [File not signed]\nHKLM … Print Monitors C287SeriesPCL Language Monitor: C: Windows system32 KOAXTJ_L.DLL [16896 2017-07-04] (KONICA MINOLTA, INC.) [File not signed]\nHKLM … Print Monitors CutePDF Writer Monitor v3.2: C: Windows system32 cpwmon64_v32.dll [90096 2017-05-26] (Acro Software Inc ->)\nHKLM … Print Monitors DYMO LabelWriter Monitor: C: Windows system32 LW400MON.DLL [16384 2017-05-09] (Éditeur de compatibilité matérielle Microsoft Windows -> DYMO Corp.)\nHKLM … Print Monitors EPSON Stylus Photo 1400 Series 64MonitorBA: C: Windows system32 E_ILMBUA.DLL [126976 2006-08-10] (Éditeur de compatibilité matérielle Microsoft Windows -> SEIKO EPSON CORPORATION)\nHKLM … Print Monitors EPSON WF-7610 Series 64MonitorBE: C: Windows system32 E_YLMBKBE.DLL [179712 2013-10-22] (Éditeur de compatibilité matérielle Microsoft Windows -> SEIKO EPSON CORPORATION)\nHKLM … Print Monitors EpsonNet Print Port: C: Windows system32 enppmon.dll [558592 2012-11-12] (SEIKO EPSON CORPORATION) [File not signed]\nHKLM … Print Monitors Port GoToMyPC: C: Windows system32 gotomon_x64.dll [120176 2011-11-13] (Citrix Online -> Citrix Online, une division de Citrix Systems, Inc.)\nHKLM … Print Monitors HP1100LM: C: Windows system32 HP1100LM.DLL [288768 2012-08-31] (Éditeur de compatibilité matérielle Microsoft Windows ->)\nHKLM … Print Monitors PCL hpf3lw73: C: Windows system32 hpf3lw73.dll [48640 2009-07-13] (Microsoft Windows -> Hewlett-Packard Company)\nHKLM … Print Monitors PJL Language Monitor: C: Windows system32 PJLMON.DLL [22016 2010-11-20] (Microsoft Windows -> Microsoft Corporation)\nHKLM … Print Monitors WSD Port: C: Windows system32 WSDMon.dll [224768 2009-07-13] (Microsoft Windows -> Microsoft Corporation)\nHKLM Software Microsoft Active Setup Installed Components: [2D46B6DC-2207-486B-B523-A557E6D54B47] -> C: Windows system32 cmd.exe / D / C démarrer C: Windows system32 ie4uinit.exe -ClearIconCache\nHKLM Software Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> C: Program Files (x86) Google Chrome Application 83.0.4103.61 Installer chrmstp.exe [2020-05-21] (Google LLC -> Google LLC)\nHKLM Software Wow6432Node Microsoft Active Setup Installed Components: [2D46B6DC-2207-486B-B523-A557E6D54B47] -> C: Windows system32 cmd.exe / D / C démarrer C: Windows system32 ie4uinit.exe -ClearIconCache\nHKLM Software Wow6432Node Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> "C: Program Files (x86) Google Chrome Application 58.0.3029.81 Installer chrmstp.exe" –configure-user-settings –verbose-logging –system-level\nHKLM Software Wow6432Node Microsoft Active Setup Installed Components: [A6EADE66-0000-0000-484E-7E8A45000000] -> C: Program Files (x86) Adobe Acrobat Reader DC Esl AiodLite.dll [2020-05-03] (Adobe Inc. -> Adobe Systems, Inc.)\nHKLM Software … Authentication Credential Providers: [18CBEEAA-6708-41A1-9379-D08915333CF2] -> C: Program Files Fichiers communs SPBA provider.dll [2010-09-15] (UPEK Inc. -> UPEK Inc.)\nHKLM Software … Authentication Credential Providers: [F8A0B131-5F68-486c-8040-7E8FC3C85BB6] -> C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDCREDPROV.DLL [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nHKLM Software … Authentication Credential Provider Filters: [AE583D93-8D1B-424F-9858-5623FB7824EE] -> C: Program Files Fichiers communs SPBA provider.dll [2010-09-15] (UPEK Inc. -> UPEK Inc.)\nLsa: [Authentication Packages] msv1_0 wvauth\nDémarrage: C: Users KMiele AppData Roaming Microsoft Windows Start Menu Programs Startup Send to OneNote.lnk [2019-04-15]\nShortcutTarget: Envoyer à OneNote.lnk -> C: Program Files (x86) Microsoft Office root Office16 ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)\nDémarrage: C: Users KMiele AppData Roaming Microsoft Windows Start Menu Programs Startup Synology Active Backup for Business Agent.lnk [2020-05-30]\nShortcutTarget: Synology Active Backup for Business Agent.lnk -> C: Program Files (x86) Synology ActiveBackupforBusinessAgent ui ui Synology Active Backup for Business Agent.exe (Synology Inc. -> Synology Inc.)\nGroupPolicy: Restriction? <==== ATTENTION"},{"id":"text-8","heading":"Text","content":"==================== Tâches planifiées (liste blanche) ============"},{"id":"text-9","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)"},{"id":"text-10","heading":"Text","content":"Tâche: 081E9A99-734F-4FAE-8444-FF5BCE42CC94 – System32 Tasks GoogleUpdateTaskMachineCore => C: Program Files (x86) Google Update GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)\nTâche: 14E0E16B-CDD3-4715-A764-AB5077A8387C – System32 Tasks B923A7E4-5A7D-4E36-A826-F910D94CCC00 => C: Windows system32 pcalua.exe -a C: sage SAGE50_2015_2 setup.exe -dc: sage SAGE50_2015_2\nTâche: 15BC1BFC-E634-469A-A715-ECE4F1F62C74 – System32 Tasks Microsoft Microsoft Antimalware Microsoft Antimalware Scheduled Scan => C: Program Files Microsoft Security Client \\ MpCmdRun.exe [410784 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nTâche: 1C64426A-6BD3-46D2-A7B2-4A8B602C7956 – System32 Tasks Microsoft Office Office Feature Updates => C: Program Files (x86) Microsoft Office root Office16 sdxhelper.exe [115024 2020-05-16] (Microsoft Corporation -> Microsoft Corporation)\nTâche: 4684A218-CD5E-469F-B669-CF01DCA07962 – System32 Tasks 67ACF55C-EB72-425E-AB3F-35948FD488B3 => C: Program Files (x86) Camlink GBExplorer.exe\nTâche: 4BDABF97-7E25-4293-841E-C93B30A11D39 – System32 Tasks EPSON WF-7610 Series Invitation FF28E7AF-4CCD-468C-A99D-00F55294ED94 => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 59372F2D-71EE-468D-9F15-C6607CAC405D – Mise à jour de la série System32 Tasks EPSON WF-7610 39C1617B-E859-4EF3-B298-7E9FB6CA08E0 => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 5A1C4ED0-83EC-4907-995D-8B5D13CAA627 – System32 Tasks EPSON WF-7610 Series Invitation 5C8C4560-2AA2-4E44-AEF1-4B9AEDB0323F => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 5C5C9012-45CD-4B0C-8027-3E9F82A6AE46 – System32 Tasks Seagate_Install_Launch => C: Program Files (x86) Seagate Seagate Dashboard 2.0 Dashboard.exe [1964832 2015-07-15] (Seagate Technology LLC -> Seagate Technology LLC)\nTâche: 5EE99B02-4140-4D82-A422-4CD8BAD5FF97 – Mise à jour de la série System32 Tasks EPSON WF-7610 5C8C4560-2AA2-4E44-AEF1-4B9AEDB0323F => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 7C00AC32-2329-4E49-A396-84813BEC25CE – Maintenance des abonnements System32 Tasks Microsoft Office Office => C: Program Files (x86) Microsoft Office root vfs ProgramFilesCommonx86 Microsoft Shared Office16 OLicenseHeartbeat.exe [1443712 2020-05-16] (Microsoft Corporation -> Microsoft Corporation)\nTâche: 8AF49B31-0E1E-41E9-BC82-9F5FC25A5251 – System32 Tasks Adobe Flash Player Updater => C: Windows SysWOW64 Macromed Flash FlashPlayerUpdateService.exe [335416 2020-05-12] (Adobe Inc. -> Adobe)\nTâche: 8B3D8F3C-87B3-4138-94D0-086AD77F90FB – System32 Tasks 3BA22ECB-313A-484F-9D1F-BDCCEEFD4B0F => C: Windows system32 pcalua.exe -a "C: Users KM AppData Local Microsoft Windows Temporary Internet Files Content.IE5 9UYR0S67 gosetup.exe "-d C: Users KM Desktop\nTâche: 8C9007F7-F400-414A-A9A1-5EA247100A36 – Mise à jour de la série System32 Tasks EPSON WF-7610 FF28E7AF-4CCD-468C-A99D-00F55294ED94 => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 94C8FCE1-A0E0-4925-99A3-CBF4876FBC5A – Tâche de mise à jour System32 Tasks Microsoft Windows Live SOXE Extractor Definitions => 3519154C-227E-47F3-9CC9-12C3F05817F1\nTâche: 9DEF0C85-9A20-45A8-9F83-94B6E19AD0E2 – System32 Tasks 232A9230-3654-4161-A4A5-63B3A050B7B2 => C: Windows system32 pcalua.exe -a C: Users KM Téléchargements gosetup.exe -d C: Users KM Desktop\nTâche: 9F766520-5A1E-43C2-A4E5-14024BFC427C – System32 Tasks EPSON WF-7610 Series Invitation F041DFFD-6EE2-46E8-AF61-EDAD1E811B30 => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: A512C446-CF09-4DC3-BF68-9350E109231D – System32 Tasks G2MUpdateTask-S-1-5-21-302665900-850237627-724062673-1000 => C: Program Files (x86) GoToMeeting 7495 g2mupdate.exe [31808 2017-08-24] (LogMeIn, Inc. -> LogMeIn, Inc.)\nTâche: AC6732F2-23EC-47C4-B6B0-E35829E3A930 – System32 Tasks Microsoft Office Office Automatic Updates 2.0 => C: Program Files Common Files Microsoft Shared ClickToRun OfficeC2RClient.exe [24608104 2020-05-07] (Microsoft Corporation -> Microsoft Corporation)\nTâche: C62FAD65-BF38-4B2E-BE4A-F3C77CABA3E2 – Connexion aux mises à jour des fonctionnalités System32 Tasks Microsoft Office Office => C: Program Files (x86) Microsoft Office root Office16 sdxhelper.exe [115024 2020-05-16] (Microsoft Corporation -> Microsoft Corporation)\nTâche: D0842C2F-834D-49C4-BF3B-CF3E9C6545DF – System32 Tasks G2MUploadTask-S-1-5-21-302665900-850237627-724062673-1000 => C: Program Files (x86) GoToMeeting 7495 g2mupload.exe [31808 2017-08-24] (LogMeIn, Inc. -> LogMeIn, Inc.)\nTâche: D63E8E00-9071-40B5-B259-97A5D07697CC – System32 Tasks Microsoft Office Office ClickToRun Service Monitor => C: Program Files Common Files Microsoft Shared ClickToRun OfficeC2RClient.exe [24608104 2020-05-07] (Microsoft Corporation -> Microsoft Corporation)\nTâche: D8C389D4-15F0-4926-B965-FCE13ABB651F – System32 Tasks 5536D2D1-0187-4B91-BF5B-BDD9B8792EFA => C: Program Files (x86) Camlink GBExplorer.exe\nTâche: E357B89D-9D72-4889-9C8B-B5067C6DA9EC – System32 Tasks GoogleUpdateTaskMachineUA => C: Program Files (x86) Google Update GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)\nTâche: E5F20D9E-C9B5-49CB-B6DE-934F1D537789 – System32 Tasks EPSON WF-7610 Series Invitation 39C1617B-E859-4EF3-B298-7E9FB6CA08E0 => C: Windows system32 spool DRI DRI 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: EB87F4E5-1239-453E-8914-6D524EEA822A – Tâche de mise à jour System32 Tasks Adobe Acrobat => C: Program Files (x86) Common Files Adobe ARM 1.0 AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems)\nTâche: F60ECC63-0AC2-46F1-A928-D7DE00352D1A – System32 Tasks KM DBAgent 2 0 => C: Program Files (x86) Seagate Seagate Dashboard 2.0 DBAgent.exe [1540896 2015-07-15] (Seagate Technology LLC -> Seagate Technology LLC)\nTâche: FE14E6A5-EF5A-4338-BF4C-8B9EE7A4EC2C – System32 Tasks EPSON WF-7610 Series Update F041DFFD-6EE2-46E8-AF61-EDAD1E811B30 => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)"},{"id":"text-11","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, le fichier de tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)"},{"id":"text-12","heading":"Text","content":"Tâche: C: Windows Tasks EPSON WF-7610 Series Invitation 39C1617B-E859-4EF3-B298-7E9FB6CA08E0 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE\nTâche: C: Windows Tasks EPSON WF-7610 Series Invitation 5C8C4560-2AA2-4E44-AEF1-4B9AEDB0323F .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE\nTâche: C: Windows Tasks EPSON WF-7610 Series Invitation F041DFFD-6EE2-46E8-AF61-EDAD1E811B30 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE\nTâche: C: Windows Tasks EPSON WF-7610 Series Invitation FF28E7AF-4CCD-468C-A99D-00F55294ED94 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE\nTâche: C: Windows Tasks EPSON WF-7610 Series Update 39C1617B-E859-4EF3-B298-7E9FB6CA08E0 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE: / EXE: 39C1617B-E859-4EF3-B298-7E9FB6CA08E0 / F: UpdateSYSTEMĊRecherche les mises à jour du logiciel EPSON et vous avertit lorsque des mises à jour sont disponibles.Si cette tâche est désactivée ou arrêtée, votre logiciel EPSON ne sera pas automatiquement mis à jour automatiquement. Thi\nTâche: C: Windows Tasks EPSON WF-7610 Series Update 5C8C4560-2AA2-4E44-AEF1-4B9AEDB0323F .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE: / EXE: 5C8C4560-2AA2-4E44-AEF1-4B9AEDB0323F / F: UpdateSYSTEMĊRecherche les mises à jour du logiciel EPSON et vous avertit lorsque des mises à jour sont disponibles.Si cette tâche est désactivée ou arrêtée, votre logiciel EPSON ne sera pas automatiquement mis à jour automatiquement. Thi\nTâche: C: Windows Tasks EPSON WF-7610 Series Update F041DFFD-6EE2-46E8-AF61-EDAD1E811B30 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE: / EXE: F041DFFD-6EE2-46E8-AF61-EDAD1E811B30 / F: UpdateSYSTEMĊRecherche les mises à jour du logiciel EPSON et vous avertit lorsque des mises à jour sont disponibles.Si cette tâche est désactivée ou arrêtée, votre logiciel EPSON ne sera pas automatiquement mis à jour automatiquement. Thi\nTâche: C: Windows Tasks EPSON WF-7610 Series Update FF28E7AF-4CCD-468C-A99D-00F55294ED94 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKBE.EXE: / EXE: FF28E7AF-4CCD-468C-A99D-00F55294ED94 / F: UpdateSYSTEMĊ Recherche les mises à jour du logiciel EPSON et vous avertit lorsque des mises à jour sont disponibles. Si cette tâche est désactivée ou arrêtée, votre logiciel EPSON ne sera pas automatiquement mis à jour automatiquement. Thi\nTâche: C: Windows Tasks G2MUpdateTask-S-1-5-21-302665900-850237627-724062673-1000.job => C: Program Files (x86) GoToMeeting 7495 g2mupdate.exe\nTâche: C: Windows Tasks G2MUploadTask-S-1-5-21-302665900-850237627-724062673-1000.job => C: Program Files (x86) GoToMeeting 7495 g2mupload.exe"},{"id":"text-13","heading":"Text","content":"==================== Internet (liste blanche) ===================="},{"id":"text-14","heading":"Text","content":"(Si un élément est inclus dans la liste de correctifs, s'il s'agit d'un élément du registre, il sera supprimé ou restauré par défaut.)"},{"id":"text-15","heading":"Text","content":"Winsock: Catalog5 07 C: Program Files (x86) Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [145280 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nWinsock: Catalog5 08 C: Program Files (x86) Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [145280 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nWinsock: Catalog5 09 C: Program Files (x86) Bonjour mdnsNSP.dll [152864 2010-05-18] (Apple Inc. -> Apple Inc.)\nWinsock: Catalog5-x64 07 C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [170880 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nWinsock: Catalog5-x64 08 C: Program Files Fichiers communs Microsoft Shared Windows Live WLIDNSP.DLL [170880 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nWinsock: Catalog5-x64 09 C: Program Files Bonjour mdnsNSP.dll [193824 2010-05-18] (Apple Inc. -> Apple Inc.)\nTcpip .. Interfaces D863FDF7-69D2-4F29-AC3C-50AD8EA40F8B: [NameServer] 192.168.1.10,8.8.8.8\nHKLM System … Parameters PersistentRoutes: [0.0.0.0,0.0.0.0,192.168.1.1,-1]"},{"id":"text-16","heading":"Text","content":"Internet Explorer:\n==================\nHKU S-1-5-21-928097801-345109163-1125972616-1104 Software Microsoft Internet Explorer Main, Start Page Redirect Cache = hxxp: //www.msn.com/? Ocid = iehp\nHKU S-1-5-21-928097801-345109163-1125972616-1107 Software Microsoft Internet Explorer Main, Start Page Redirect Cache = hxxp: //www.msn.com/? Ocid = iehp\nSearchScopes: HKLM -> DefaultScope E6C80228-1FAB-4837-BB34-C5677F14829A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = DLRDF8 & pc = MDDR & src = IE-SearchBox\nSearchScopes: HKLM -> 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nSearchScopes: HKLM -> E6C80228-1FAB-4837-BB34-C5677F14829A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = DLRDF8 & pc = MDDR & src = IE-SearchBox\nSearchScopes: HKLM-x32 -> DefaultScope E6C80228-1FAB-4837-BB34-C5677F14829A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = DLRDF8 & pc = MDDR & src = IE-SearchBox\nSearchScopes: HKLM-x32 -> 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nSearchScopes: HKLM-x32 -> E6C80228-1FAB-4837-BB34-C5677F14829A URL = hxxp: //www.bing.com/search? Q = searchTerms & form = DLRDF8 & pc = MDDR & src = IE-SearchBox\nSearchScopes: HKU S-1-5-21-928097801-345109163-1125972616-1104 -> DefaultScope E6C80228-1FAB-4837-BB34-C5677F14829A URL = \nSearchScopes: HKU S-1-5-21-928097801-345109163-1125972616-1104 -> E6C80228-1FAB-4837-BB34-C5677F14829A URL = \nSearchScopes: HKU S-1-5-21-928097801-345109163-1125972616-1107 -> DefaultScope E6C80228-1FAB-4837-BB34-C5677F14829A URL = \nSearchScopes: HKU S-1-5-21-928097801-345109163-1125972616-1107 -> E6C80228-1FAB-4837-BB34-C5677F14829A URL = \nBHO: Classe TmIEPlugInBHO -> 1CA1377B-DC1D-4A52-9585-6E06050FAC53 -> c: Program Files (x86) Trend Micro Client Server Security Agent bho 1009 TmIEPlg.dll => Aucun fichier\nBHO: Skype Entreprise Browser Helper -> 31D09BA0-12F5-4CCE-BE8A-2923E76605DA -> C: Program Files (x86) Microsoft Office root VFS ProgramFilesX64 Microsoft Office Office16 OCHelper.dll [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)\nBHO: Aide à la connexion Windows Live ID -> 9030D464-4C02-4ABF-8ECC-5164760863C6 -> C: Program Files Fichiers communs Microsoft Shared Windows Live WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nBHO: Foxit PhantomPDF Create PDF ToolBar Helper -> A5DD10F7-5ABB-4EEF-B4C8-6748D44DAF2A -> C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator IEAddin IEAddin_x64.dll [2020-04-22] (LOGICIEL FOXIT INC. ->)\nBHO: Gestionnaire de cache de documents Office -> B4F3A835-0E21-4959-BA22-42B3008E02FF -> C: Program Files (x86) Microsoft Office root VFS ProgramFilesX64 Microsoft Office Office16 URLREDIR.DLL [2020-05-16] (Microsoft Corporation -> Microsoft Corporation)\nBHO-x32: Classe TmIEPlugInBHO -> 1CA1377B-DC1D-4A52-9585-6E06050FAC53 -> c: Program Files (x86) Trend Micro Client Server Security Agent bho 1009 TmIEPlg32.dll => Aucun fichier\nBHO-x32: Norton Vulnerability Protection -> 6D53EC84-6AAE-4787-AEEE-F4628F01010C -> C: Program Files (x86) Norton Internet Security Engine 21.7.0.11 IPS IPSBHO.DLL => Aucun fichier\nBHO-x32: Aide à la connexion Windows Live ID -> 9030D464-4C02-4ABF-8ECC-5164760863C6 -> C: Program Files (x86) Common Files Microsoft Shared Windows Live WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nBHO-x32: Foxit PhantomPDF Create PDF ToolBar Helper -> A5DD10F7-5ABB-4EEF-B4C8-6748D44DAF2A -> C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator IEAddin IEAddin.dll [2020-04-22] (LOGICIEL FOXIT INC. ->)\nBHO-x32: Gestionnaire de cache de documents Office -> B4F3A835-0E21-4959-BA22-42B3008E02FF -> C: Program Files (x86) Microsoft Office root Office16 URLREDIR.DLL [2020-05-16] (Microsoft Corporation -> Microsoft Corporation)\nBarre d'outils: HKLM – Foxit PhantomPDF Create PDF ToolBar – BFD9D8A8-57FF-488A-B919-065EC77CF82F – C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator IEAddin IEAddin_x64.dll [2020-04-22] (LOGICIEL FOXIT INC. ->)\nBarre d'outils: HKLM-x32 – Foxit PhantomPDF Créer une barre d'outils PDF – BFD9D8A8-57FF-488A-B919-065EC77CF82F – C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator IEAddin IEAddin.dll [2020-04-22] (LOGICIEL FOXIT INC. ->)\nDPF: HKLM-x32 22945A69-1191-4DCF-9E6F-409BDE94D101 hxxp: //dl-ak.solidworks.com/nonsecure/edrawings/e2013sp03/13.3.0.111/cab//eDrawingsEnglish.cab\nHandler-x32: mso-minsb-roaming.16 – 83C25742-A9F7-49FB-9138-434302C88D07 – C: Program Files (x86) Microsoft Office root Office16 MSOSB.DLL [2020-03-07] (Microsoft Corporation -> Microsoft Corporation)\nHandler-x32: mso-minsb.16 – 42089D2D-912D-4018-9087-2B87803E93FB – C: Program Files (x86) Microsoft Office root Office16 MSOSB.DLL [2020-03-07] (Microsoft Corporation -> Microsoft Corporation)\nHandler-x32: osf-roaming.16 – 42089D2D-912D-4018-9087-2B87803E93FB – C: Program Files (x86) Microsoft Office root Office16 MSOSB.DLL [2020-03-07] (Microsoft Corporation -> Microsoft Corporation)\nHandler-x32: osf.16 – 5504BE45-A83B-4808-900A-3A5C36E7F77A – C: Program Files (x86) Microsoft Office root Office16 MSOSB.DLL [2020-03-07] (Microsoft Corporation -> Microsoft Corporation)\nGestionnaire: tmpx – 0E526CB5-7446-41D1-A403-19BFE95E8C23 – c: Program Files (x86) Trend Micro Client Server Security Agent bho 1009 TmIEPlg32.dll Aucun fichier"},{"id":"text-17","heading":"Text","content":"FireFox:\n========\nFF HKLM … Firefox Extensions: [FFExtnHTML2PDF@foxitsoftware.com] – C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator FirefoxAddin FFExtnHTML2PDF.xpi\nExtension FF: (Foxit PDF Creator) – C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator FirefoxAddin FFExtnHTML2PDF.xpi [2020-04-22] [Legacy]\nFF HKLM … Firefox Extensions: [FireFoxNew-WebExtensions@foxitsoftware.com] – C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator FirefoxAddin FireFoxNew-WebExtensions@foxitsoftware.com.xpi\nExtension FF: (Foxit PDF Creator) – C: Program Files (x86) Foxit Software Foxit PhantomPDF plugins Creator FirefoxAddin FireFoxNew-WebExtensions@foxitsoftware.com.xpi [2020-04-22]\nFF HKLM-x32 … Firefox Extensions: [22C7F6C6-8D67-4534-92B5-529A0EC09405] – c: Program Files (x86) Trend Micro Client Server Security Agent bho 1009 FirefoxExtension => introuvable\nFF HKLM-x32 … Firefox Extensions: [quickprint@hp.com] – C: Program Files (x86) Hewlett-Packard SmartPrint QPExtension\nExtension FF: (SmartPrintButton) – C: Program Files (x86) Hewlett-Packard SmartPrint QPExtension [2011-01-26] [Legacy] [not signed]\nFF HKLM-x32…FirefoxExtensions: [FFExtnHTML2PDF@foxitsoftware.com] – C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsCreatorFirefoxAddinFFExtnHTML2PDF.xpi\nFF HKLM-x32…FirefoxExtensions: [FireFoxNew-WebExtensions@foxitsoftware.com] – C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsCreatorFirefoxAddinFireFoxNew-WebExtensions@foxitsoftware.com.xpi\nFF Plugin: @microsoft.com/GENUINE -> disabled [No File]\nFF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:Program FilesMicrosoft Silverlight5.1.50918.0npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsnpFoxitPhantomPDFPlugin.dll [2020-04-29] (FOXIT SOFTWARE INC. -> Foxit Corporation)\nFF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.cpdf -> C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsnpFoxitPhantomPDFPlugin.dll [2020-04-29] (FOXIT SOFTWARE INC. -> Foxit Corporation)\nFF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsnpFoxitPhantomPDFPlugin.dll [2020-04-29] (FOXIT SOFTWARE INC. -> Foxit Corporation)\nFF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsnpFoxitPhantomPDFPlugin.dll [2020-04-29] (FOXIT SOFTWARE INC. -> Foxit Corporation)\nFF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsnpFoxitPhantomPDFPlugin.dll [2020-04-29] (FOXIT SOFTWARE INC. -> Foxit Corporation)\nFF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:Program Files (x86)IntelIntel® Management Engine ComponentsIPTnpIntelWebAPIIPT.dll [2013-11-13] (Intel® Identity Protection Technology Software -> Intel Corporation)\nFF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:Program Files (x86)IntelIntel® Management Engine ComponentsIPTnpIntelWebAPIUpdater.dll [2013-11-13] (Intel® Identity Protection Technology Software -> Intel Corporation)\nFF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]\nFF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:Program Files (x86)Microsoft Silverlight5.1.50918.0npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:Program Files (x86)Microsoft OfficerootOffice16NPSPWRAP.DLL [2020-01-13] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:Program Files (x86)Windows LivePhoto GalleryNPWLPG.dll [2010-11-10] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:Program Files (x86)Windows LivePhoto GalleryNPWLPG.dll [2010-11-10] (Microsoft Corporation -> Microsoft Corporation)\nFF Plugin-x32: Adobe Reader -> C:Program Files (x86)AdobeAcrobat Reader DCReaderAIRnppdf32.dll [2020-05-03] (Adobe Inc. -> Adobe Systems Inc.)"},{"id":"text-18","heading":"Text","content":"Chrome: \n=======\nCHR Profile: C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefault [2018-03-12]\nCHR Extension: (Google Slides) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionsaapocclcgogkmnckokdopfmhonfmgoek [2017-09-13]\nCHR Extension: (Google Docs) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionsaohghmighlieiainnegkcijnfilokake [2017-09-13]\nCHR Extension: (Google Drive) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionsapdfllckaahabafndbhieahigkjlhalf [2017-09-13]\nCHR Extension: (YouTube) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionsblpcfgokakmgnkcojhhkbfbldkacnbeo [2017-09-13]\nCHR Extension: (Google Sheets) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionsfelcaaldnbdncclmgdcncolpebgiejap [2017-09-13]\nCHR Extension: (Google Docs Offline) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionsghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-09-13]\nCHR Extension: (Chrome Web Store Payments) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionsnmmhkkegccagdldgiimedpiccmgmieda [2017-09-13]\nCHR Extension: (Gmail) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionspjkljhegncpnkpknbcohdijeoejaedia [2017-09-13]\nCHR Extension: (Chrome Media Router) – C:UsersGemmitiAAppDataLocalGoogleChromeUser DataDefaultExtensionspkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-13]\nCHR HKLM…ChromeExtension: [cifnddnffldieaamihfkhkdgnbhfmaci] – C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsCreatorChromeAddinChromeAddin.crx [2020-04-22]\nCHR HKUS-1-5-21-928097801-345109163-1125972616-1107SOFTWAREGoogleChromeExtensions…ChromeExtension: [efaidnbmnnnibpcajpcglclefindmkaj]\nCHR HKLM-x32…ChromeExtension: [cifnddnffldieaamihfkhkdgnbhfmaci] – C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsCreatorChromeAddinChromeAddin.crx [2020-04-22]"},{"id":"text-19","heading":"Text","content":"==================== Services (Whitelisted) ==================="},{"id":"text-20","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)"},{"id":"text-21","heading":"Text","content":"R2 ClickToRunSvc; C:Program FilesCommon FilesMicrosoft SharedClickToRunOfficeClickToRun.exe [11111280 2020-05-07] (Microsoft Corporation -> Microsoft Corporation)\nR2 DymoPnpService; C:Program Files (x86)DYMODYMO Label SoftwareDymoPnpService.exe [27136 2017-05-09] (Sanford, L.P.) [File not signed]\nR2 EmbassyService; C:Program FilesDellDell Data ProtectionAccessAdvancedWaveEMBASSY Client CoreEmbassyServer.exe [218504 2012-01-17] (Wave Systems Corp. -> )\nR2 EpsonScanSvc; C:Windowssystem32EscSvc64.exe [144560 2012-05-17] (SEIKO EPSON Corporation -> Seiko Epson Corporation)\nR2 EPSON_PM_RPCV4_01; C:ProgramDataEPSONEPW!3 SSRPE_S30RP1.EXE [102400 2006-04-18] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)\nR2 EPSON_PM_RPCV4_06; C:Program FilesCommon FilesEPSONEPW!3 SSRPE_S60RPB.EXE [152640 2013-04-15] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nR2 FoxitPhantomPDFUpdateService; C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFFoxitPhantomPDFUpdateService.exe [1995184 2020-04-29] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)\nS3 GenericMount Helper Service; C:Program Files (x86)Norton GhostSharedDriversGenericMountHelperx64.exe [2227216 2010-02-12] (Symantec Corporation -> Symantec)\nR2 HP LaserJet Service; C:Program Files (x86)HPHPLaserJetServiceHPLaserJetService.exe [136704 2009-06-24] (HP) [File not signed]\nR2 HPSIService; C:Windowssystem32HPSIsvc.exe [126880 2012-08-31] (Hewlett-Packard Company -> HP)\nR2 igfxCUIService1.0.0.0; C:Windowssystem32igfxCUIService.exe [329192 2016-06-02] (Intel® pGFX -> Intel Corporation)\nR2 Intel® Capability Licensing Service Interface; C:Program FilesInteliCLS ClientHeciServer.exe [747520 2013-08-27] (Intel® Corporation) [File not signed]\nR2 jhi_service; C:Program Files (x86)IntelIntel® Management Engine ComponentsDALjhi_service.exe [169432 2013-11-13] (Intel Corporation – Intel® Management Engine Firmware -> Intel Corporation)\nS3 LiveUpdate; C:Program Files (x86)SymantecLiveUpdateLuComServer_3_2.EXE [2999664 2007-09-12] (Symantec Corporation -> Symantec Corporation)\nR2 MsMpSvc; C:Program FilesMicrosoft Security ClientMsMpEng.exe [119864 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nR2 NasPmService; C:Program Files (x86)BUFFALONASNAVInassvc.exe [251760 2012-03-29] (BUFFALO INC. -> BUFFALO INC.)\nR3 NisSrv; C:Program FilesMicrosoft Security ClientNisSrv.exe [361816 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nR2 Norton Ghost; C:Program Files (x86)Norton GhostAgentVProSvc.exe [4590432 2010-03-03] (Symantec Corporation -> Symantec Corporation)\nR2 psqlWGE; C:Program Files (x86)ActianPSQLbinw3dbsmgr.exe [359464 2019-02-22] (Actian Corporation -> Actian Corporation)\nR2 Sage 50 SmartPosting 2020; C:Program Files (x86)SagePeachtreeSmartPostingService2020.exe [343072 2019-10-01] (Sage Software, Inc. -> Sage Software, Inc.)\nR2 Sage AutoUpdate Manager Service; C:Program Files (x86)Common FilesSageCentralAutoUpdateClientSage.Central.AutoUpdateManager.Service.exe [8192 2015-08-24] (Microsoft) [File not signed]\nR2 Seagate Dashboard Services; C:Program Files (x86)SeagateSeagate Dashboard 2.0Seagate.Dashboard.DASWindowsService.exe [16216 2015-07-15] (Seagate Technology LLC -> Seagate Technology LLC)\nR2 Seagate MobileBackup Service; C:Program Files (x86)SeagateSeagate Dashboard 2.0MobileService.exe [143656 2015-07-15] (Seagate Technology LLC -> Seagate Technology LLC)\nR3 Symantec SymSnap VSS Provider; C:Windowssystem32dllhost.exe /Processid:C8C82416-80A2-4D08-952F-2D26082F2978 [9728 2009-07-13] (Microsoft Windows -> Microsoft Corporation)\nR3 Symantec SymSnap VSS Provider; C:Windowssystem32dllhost.exe /Processid:C8C82416-80A2-4D08-952F-2D26082F2978 [9728 2009-07-13] (Microsoft Windows -> Microsoft Corporation)\nR3 SymSnapService; C:Program Files (x86)Norton GhostSharedDriversSymSnapServicex64.exe [2963960 2010-02-11] (Symantec Corporation -> Symantec)\nR2 Synology Active Backup for Business Service; C:Program Files (x86)SynologyActiveBackupforBusinessAgentserviceSynology Active Backup for Business Service.exe [3061720 2020-03-19] (Synology Inc. -> )\nS2 tcsd_win32.exe; C:Program Files (x86)NTRU CryptosystemsNTRU TCG Software Stackbintcsd_win32.exe [1637888 2011-10-08] () [File not signed]\nR2 TeamViewer; C:Program Files (x86)TeamViewerTeamViewer_Service.exe [13172752 2020-01-22] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nR2 Wave Authentication Manager Service; C:Program FilesDellDell Data ProtectionAccessAdvancedWaveAuthentication ManagerWaveAMService.exe [1679872 2012-01-05] (Wave Systems Corp.) [File not signed]\nS3 WinDefend; C:Program FilesWindows Defendermpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)\nR2 wlidsvc; C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSVC.EXE [2286976 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)\nS3 WvPCR; C:Program FilesDellDell Data ProtectionAccessAdvancedWaveCommonWvPCR.exe [198144 2012-01-16] (Wave Systems Corp.) [File not signed]\nS2 GoToMyPC; "C:Program Files (x86)CitrixGoToMyPCg2svc.exe" "Start=service" [X]"},{"id":"text-22","heading":"Text","content":"===================== Drivers (Whitelisted) ==================="},{"id":"text-23","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)"},{"id":"text-24","heading":"Text","content":"R3 GenericMount; C:WindowsSystem32DRIVERSGenericMount.sys [66608 2010-02-12] (Symantec Corporation -> Symantec Corporation)\nR3 MEIx64; C:WindowsSystem32DRIVERSTeeDriverx64.sys [99288 2013-11-13] (Intel Corporation – Intel® Management Engine Firmware -> Intel Corporation)\nR0 MpFilter; C:WindowsSystem32DRIVERSMpFilter.sys [295000 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)\nS3 mvusbews; C:WindowsSystem32Driversmvusbews.sys [20480 2012-09-25] (Microsoft Windows Hardware Compatibility Publisher -> Marvell Semiconductor, Inc.)\nR3 NisDrv; C:WindowsSystem32DRIVERSNisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)\nR0 symsnap; C:WindowsSystem32DRIVERSsymsnap.sys [170032 2010-02-11] (Symantec Corporation -> StorageCraft)\nS3 VProEventMonitor; C:WindowsSystem32DRIVERSvproeventmonitor.sys [20528 2009-09-21] (Symantec Corporation -> Symantec Corporation)\nS1 ESProtectionDriver; ??C:Windowssystem32driversmbae64.sys [X]\nS3 MBAMFarflt; ??C:Windowssystem32driversfarflt.sys [X]\nS3 MBAMProtection; ??C:Windowssystem32driversmbam.sys [X]\nS3 MBAMWebProtection; ??C:Windowssystem32driversmwac.sys [X]\nS3 NAVENG; ??C:Program Files (x86)Norton Internet SecurityNortonData22.5.0.124DefinitionsSDSDefs20160713.021ENG64.SYS [X]\nS3 NAVEX15; ??C:Program Files (x86)Norton Internet SecurityNortonData22.5.0.124DefinitionsSDSDefs20160713.021EX64.SYS [X]\nU2 V2iMount; no ImagePath"},{"id":"text-25","heading":"Text","content":"==================== NetSvcs (Whitelisted) ==================="},{"id":"text-26","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)"},{"id":"text-27","heading":"Text","content":"==================== One month (created) ==================="},{"id":"text-28","heading":"Text","content":"(If an entry is included in the fixlist, the file/folder will be moved.)"},{"id":"text-29","heading":"Text","content":"2039-03-01 16:27 – 1998-06-05 14:54 – 000026832 _____ (Microsoft Corporation) C:WindowsSysWOW64CTL3DV2.DLL\n2039-03-01 16:24 – 2039-03-01 16:24 – 000000000 ____D C:Program FilesCADKEY\n2020-05-31 11:04 – 2020-05-31 11:06 – 000000000 ____D C:UsersKMieleDownloadsGus\n2020-05-30 15:53 – 2020-05-31 10:49 – 000000000 ____D C:ProgramDataActiveBackupforBusinessAgent\n2020-05-30 15:53 – 2020-05-30 15:53 – 000001405 _____ C:UsersPublicDesktopSynology Active Backup for Business Agent.lnk\n2020-05-30 15:53 – 2020-05-30 15:53 – 000001405 _____ C:ProgramDataDesktopSynology Active Backup for Business Agent.lnk\n2020-05-30 15:53 – 2020-05-30 15:53 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsSynology\n2020-05-30 15:53 – 2020-05-30 15:53 – 000000000 ____D C:Program Files (x86)Synology\n2020-05-30 15:29 – 2020-05-30 15:29 – 037969920 _____ C:UsersKMieleDownloadsSynology Active Backup for Business Agent-2.1.1-1125-x64.msi\n2020-05-30 14:47 – 2020-05-30 14:47 – 000001105 _____ C:UsersGemmitiADesktopESET Online Scanner.lnk\n2020-05-30 14:47 – 2020-05-30 14:47 – 000000000 ____D C:UsersGemmitiAAppDataLocalESET\n2020-05-30 14:46 – 2020-05-30 14:46 – 014665312 _____ (ESET spol. s r.o.) C:UsersKMieleDownloadsesetonlinescanner.exe\n2020-05-30 14:46 – 2020-05-30 14:46 – 000000000 ____D C:UsersKMieleAppDataLocalESET\n2020-05-30 14:25 – 2020-05-31 11:07 – 000000000 ____D C:FRST\n2020-05-29 08:12 – 2020-05-29 08:12 – 000000000 ____D C:UsersKMieleAppDataLocalF5631589-FFB7-4F02-AD42-20E544B909ED\n2020-05-28 13:08 – 2020-05-28 13:08 – 000190571 _____ C:UsersKMieleDesktopABF BOL.pdf\n2020-05-28 12:53 – 2020-05-28 12:58 – 000000000 ____D C:UsersKMieleAppDataRoamingFoxit Software\n2020-05-28 12:53 – 2020-05-28 12:53 – 000000000 ____D C:UsersKMieleAppDataLocalLowFoxit\n2020-05-28 12:51 – 2020-05-28 12:51 – 000001091 _____ C:UsersPublicDesktopFoxit PhantomPDF.lnk\n2020-05-28 12:51 – 2020-05-28 12:51 – 000001091 _____ C:ProgramDataDesktopFoxit PhantomPDF.lnk\n2020-05-28 12:51 – 2020-05-28 12:51 – 000000000 ____D C:UsersGemmitiAAppDataRoamingFoxit Software\n2020-05-28 12:51 – 2020-05-28 12:51 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsFoxit PhantomPDF\n2020-05-28 12:51 – 2020-05-28 12:51 – 000000000 ____D C:ProgramDataFoxit Software\n2020-05-28 12:50 – 2020-05-28 12:50 – 000000000 ____D C:UsersPublicFoxit Software\n2020-05-28 12:50 – 2020-05-28 12:50 – 000000000 ____D C:Program Files (x86)Foxit Software\n2020-05-28 12:47 – 2020-05-28 12:48 – 632645472 _____ (Foxit Software Inc.) C:UsersKMieleDownloadsFoxitPhantomPDF100_enu_Setup_PPC.exe\n2020-05-28 11:31 – 2020-05-28 11:31 – 000306209 _____ C:UsersKMieleDownloads8 collar instructions.pdf\n2020-05-28 11:30 – 2020-05-28 11:30 – 000374045 _____ C:UsersKMieleDownloadsDS-CC quick sheet.pdf\n2020-05-28 08:15 – 2020-05-28 08:15 – 000000000 ____D C:UsersKMieleAppDataLocalF0C7BAA7-3009-43DB-A497-8221090794EB\n2020-05-27 08:07 – 2020-05-27 08:07 – 000000000 ____D C:UsersKMieleAppDataLocal9E81D49F-F46D-46E2-B109-1DE520F0D3E3\n2020-05-26 14:10 – 2020-05-26 14:10 – 000000000 ____D C:UsersKMieleAppDataLocal3D3DB803-954F-4617-B089-1DC85BA0B8B5\n2020-05-26 08:09 – 2020-05-26 08:09 – 000000000 ____D C:UsersKMieleAppDataLocal9BFC70BC-53F7-488D-B839-D418315F4A2F\n2020-05-22 08:11 – 2020-05-22 08:11 – 000000000 ____D C:UsersKMieleAppDataLocal6FEC2B24-CB57-4A8A-88E3-95FA12DF797F\n2020-05-21 08:09 – 2020-05-21 08:09 – 000000000 ____D C:UsersKMieleAppDataLocalD7C47DEA-A771-4BED-B39B-36A44343B4BB\n2020-05-20 08:14 – 2020-05-20 08:14 – 000000000 ____D C:UsersKMieleAppDataLocal6D67C60A-5BD3-47FF-B1F3-0DE3CD8FA17B\n2020-05-19 08:34 – 2020-05-19 08:34 – 000000000 ____D C:UsersKMieleAppDataLocalB6BE2DF0-9C3B-4738-BA81-41C7CA1785B4\n2020-05-18 08:13 – 2020-05-18 08:13 – 000000000 ____D C:UsersKMieleAppDataLocalD76F431D-B886-4C63-B77D-7698F04D48D6\n2020-05-15 08:12 – 2020-05-15 08:12 – 000000000 ____D C:UsersKMieleAppDataLocal1794CD21-455A-4269-A0EB-EEABE9CAFBDD\n2020-05-14 08:11 – 2020-05-14 08:11 – 000000000 ____D C:UsersKMieleAppDataLocal3D91B3BE-87AC-4431-BEDC-FA5FE11A3BFF\n2020-05-13 08:09 – 2020-05-13 08:09 – 000000000 ____D C:UsersKMieleAppDataLocalB41284BD-5D6F-438F-8519-E57588B4E09A\n2020-05-12 08:15 – 2020-05-12 08:15 – 000000000 ____D C:UsersKMieleAppDataLocal6709064C-0B7B-4378-8A3B-F3321CDDED01\n2020-05-11 08:09 – 2020-05-11 08:09 – 000000000 ____D C:UsersKMieleAppDataLocal87750C4F-951B-458A-8B3F-C452DEA10898\n2020-05-08 08:18 – 2020-05-08 08:18 – 000000000 ____D C:UsersKMieleAppDataLocal6D5BB4FD-A712-4279-8BB3-5634D9F043CD\n2020-05-07 08:16 – 2020-05-07 08:16 – 000000000 ____D C:UsersKMieleAppDataLocal3CA62EED-8774-415A-A0FF-ACB010E1860D\n2020-05-06 08:14 – 2020-05-06 08:14 – 000000000 ____D C:UsersKMieleAppDataLocal4CBFBA70-F8C1-479C-BC33-3DFD6A74737E\n2020-05-05 08:08 – 2020-05-05 08:08 – 000000000 ____D C:UsersKMieleAppDataLocalE418702D-7B58-4178-9C05-6363F4614083\n2020-05-04 08:09 – 2020-05-04 08:09 – 000000000 ____D C:UsersKMieleAppDataLocalCC9DD8B1-3D94-4B78-9861-6B168285B939\n2020-05-01 13:06 – 2020-05-01 13:06 – 000000000 ____D C:UsersKMieleAppDataLocal90D7F255-F149-4886-A401-192FE7510560\n2020-05-01 08:25 – 2020-05-01 08:25 – 000000000 ____D C:UsersKMieleAppDataLocal6D35E746-E51D-4A0D-847B-C331EE6C35D0"},{"id":"text-30","heading":"Text","content":"==================== One month (modified) =================="},{"id":"text-31","heading":"Text","content":"(If an entry is included in the fixlist, the file/folder will be moved.)"},{"id":"text-32","heading":"Text","content":"2020-05-31 11:05 – 2017-09-07 08:48 – 000000000 ____D C:UsersKMieleAppDataLocalDeployment\n2020-05-31 10:57 – 2016-11-14 10:58 – 000000911 _____ C:WindowsTasksEPSON WF-7610 Series Update 5C8C4560-2AA2-4E44-AEF1-4B9AEDB0323F.job\n2020-05-31 10:57 – 2016-11-14 10:58 – 000000725 _____ C:WindowsTasksEPSON WF-7610 Series Invitation 5C8C4560-2AA2-4E44-AEF1-4B9AEDB0323F.job\n2020-05-31 10:53 – 2009-07-14 01:32 – 000000000 ____D C:Windowssystem32FxsTmp\n2020-05-31 10:49 – 2017-09-06 10:29 – 000000112 _____ C:Windowssystem32confignetlogon.ftl\n2020-05-31 10:49 – 2009-07-13 23:20 – 000000000 ____D C:WindowsRegistration\n2020-05-31 04:37 – 2015-08-04 14:19 – 000000504 _____ C:WindowsTasksG2MUpdateTask-S-1-5-21-302665900-850237627-724062673-1000.job\n2020-05-31 04:25 – 2016-08-22 14:25 – 000000911 _____ C:WindowsTasksEPSON WF-7610 Series Update 39C1617B-E859-4EF3-B298-7E9FB6CA08E0.job\n2020-05-31 04:25 – 2016-08-22 14:25 – 000000725 _____ C:WindowsTasksEPSON WF-7610 Series Invitation 39C1617B-E859-4EF3-B298-7E9FB6CA08E0.job\n2020-05-31 04:22 – 2016-11-14 10:22 – 000000911 _____ C:WindowsTasksEPSON WF-7610 Series Update FF28E7AF-4CCD-468C-A99D-00F55294ED94.job\n2020-05-31 04:22 – 2016-11-14 10:22 – 000000725 _____ C:WindowsTasksEPSON WF-7610 Series Invitation FF28E7AF-4CCD-468C-A99D-00F55294ED94.job\n2020-05-31 04:14 – 2009-07-14 00:45 – 000034832 ____H C:Windowssystem327B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0\n2020-05-31 04:14 – 2009-07-14 00:45 – 000034832 ____H C:Windowssystem327B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0\n2020-05-31 04:13 – 2016-11-14 10:14 – 000000911 _____ C:WindowsTasksEPSON WF-7610 Series Update F041DFFD-6EE2-46E8-AF61-EDAD1E811B30.job\n2020-05-31 04:13 – 2016-11-14 10:14 – 000000725 _____ C:WindowsTasksEPSON WF-7610 Series Invitation F041DFFD-6EE2-46E8-AF61-EDAD1E811B30.job\n2020-05-30 15:53 – 2017-09-06 10:35 – 000001415 _____ C:UsersKMieleAppDataRoamingMicrosoftWindowsStart MenuProgramsInternet Explorer.lnk\n2020-05-30 15:47 – 2020-01-07 13:47 – 000000000 ____D C:UsersKMieleDesktopACCURATE I-backup2019.zip\n2020-05-30 15:32 – 2015-08-04 14:19 – 000000600 _____ C:WindowsTasksG2MUploadTask-S-1-5-21-302665900-850237627-724062673-1000.job\n2020-05-30 14:26 – 2009-07-14 01:13 – 000804870 _____ C:Windowssystem32PerfStringBackup.INI\n2020-05-30 14:26 – 2009-07-13 23:20 – 000000000 ____D C:Windowsinf\n2020-05-30 14:24 – 2017-09-06 10:35 – 000000000 __SHD C:UsersKMieleIntelGraphicsProfiles\n2020-05-30 14:18 – 2018-03-29 14:38 – 000000000 ____D C:Program Files (x86)TeamViewer\n2020-05-30 14:18 – 2009-07-14 01:08 – 000000006 ____H C:WindowsTasksSA.DAT\n2020-05-29 15:32 – 2013-01-22 10:56 – 000004096 ___SH C:VSNAP.IDX\n2020-05-29 14:29 – 2018-08-01 10:16 – 000000000 ____D C:UsersKMieleAppDataLocalCutePDF Writer\n2020-05-29 12:38 – 2018-03-12 10:20 – 000000000 ____D C:scans\n2020-05-28 12:51 – 2015-10-14 08:59 – 000000000 ____D C:ProgramDataPackage Cache\n2020-05-26 12:19 – 2017-09-06 10:38 – 000000000 ____D C:UsersGemmitiA\n2020-05-26 08:21 – 2016-12-05 21:15 – 000002061 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsAcrobat Reader DC.lnk\n2020-05-26 08:09 – 2018-06-20 10:35 – 000000000 ____D C:ProgramDataregid.1991-06.com.microsoft\n2020-05-26 08:08 – 2012-08-15 00:57 – 000000000 ____D C:Program Files (x86)Microsoft Office\n2020-05-26 08:08 – 2009-07-14 00:45 – 000454456 _____ C:Windowssystem32FNTCACHE.DAT\n2020-05-21 21:37 – 2014-12-08 14:04 – 000002226 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsGoogle Chrome.lnk\n2020-05-21 21:37 – 2014-12-08 14:04 – 000002185 _____ C:UsersPublicDesktopGoogle Chrome.lnk\n2020-05-21 21:37 – 2014-12-08 14:04 – 000002185 _____ C:ProgramDataDesktopGoogle Chrome.lnk\n2020-05-13 03:02 – 2017-09-06 09:53 – 000000000 ____D C:Windowssystem32MRT\n2020-05-13 03:00 – 2017-09-06 09:52 – 120636720 ____C (Microsoft Corporation) C:Windowssystem32MRT.exe\n2020-05-12 15:28 – 2017-09-06 11:20 – 000000000 ____D C:UsersKMieleAppDataLocalCrashDumps\n2020-05-12 14:10 – 2012-08-15 00:39 – 000842296 _____ (Adobe) C:WindowsSysWOW64FlashPlayerApp.exe\n2020-05-12 14:10 – 2012-08-15 00:39 – 000175160 _____ (Adobe) C:WindowsSysWOW64FlashPlayerCPLApp.cpl\n2020-05-12 14:10 – 2012-08-15 00:39 – 000004312 _____ C:Windowssystem32TasksAdobe Flash Player Updater\n2020-05-12 14:10 – 2012-08-15 00:39 – 000000000 ____D C:WindowsSysWOW64Macromed\n2020-05-12 14:10 – 2012-08-15 00:39 – 000000000 ____D C:Windowssystem32Macromed\n2020-05-09 15:53 – 2017-11-09 15:54 – 000003166 _____ C:Windowssystem32TasksOneDrive Standalone Update Task-S-1-5-21-928097801-345109163-1125972616-1107\n2020-05-09 15:53 – 2017-11-08 09:40 – 000002160 _____ C:UsersKMieleAppDataRoamingMicrosoftWindowsStart MenuProgramsMicrosoft OneDrive.lnk\n2020-05-09 15:53 – 2017-11-08 09:40 – 000000000 ___RD C:UsersKMieleOneDrive\n2020-05-05 13:29 – 2019-08-27 10:09 – 000000000 _____ C:UsersKMieleDocuments63aa4421-cdd9-4382-b7e9-8150eac235f3"},{"id":"text-33","heading":"Text","content":"==================== Files in the root of some directories ========"},{"id":"text-34","heading":"Text","content":"2013-04-14 11:36 – 2013-04-14 11:36 – 001393736 _____ (Citrix Online, a division of Citrix Systems, Inc.) C:UsersKMgotomypc_635.exe"},{"id":"text-35","heading":"Text","content":"==================== SigCheck ============================"},{"id":"text-36","heading":"Text","content":"(There is no automatic fix for files that do not pass verification.)"},{"id":"text-37","heading":"Text","content":"LastRegBack: 2020-05-27 00:31\n==================== End of FRST.txt ========================"},{"id":"text-38","heading":"Text","content":"Additional scan result of Farbar Recovery Scan Tool (x64) Version: 30-05-2020 01\nRan by GemmitiA (31-05-2020 11:08:21)\nRunning from C:UsersKMieleDownloadsGus\nWindows 7 Professional Service Pack 1 (X64) (2013-01-09 14:03:01)\nBoot Mode: Normal\n=========================================================="},{"id":"text-39","heading":"Text","content":"==================== Accounts: ============================="},{"id":"text-40","heading":"Text","content":"Administrator (S-1-5-21-302665900-850237627-724062673-500 – Administrator – Disabled)\nGuest (S-1-5-21-302665900-850237627-724062673-501 – Limited – Enabled)\nKM (S-1-5-21-302665900-850237627-724062673-1000 – Administrator – Enabled) => C:UsersKM\nscans (S-1-5-21-302665900-850237627-724062673-1001 – Administrator – Enabled)"},{"id":"text-41","heading":"Text","content":"==================== Security Center ========================"},{"id":"text-42","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed.)"},{"id":"text-43","heading":"Text","content":"AV: Microsoft Security Essentials (Enabled – Up to date) 71A27EC9-3DA6-45FC-60A7-004F623C6189\nAS: Microsoft Security Essentials (Enabled – Up to date) CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34\nAS: Windows Defender (Disabled – Out of date) D68DDC3A-831F-4fae-9E44-DA132C1ACF46"},{"id":"text-44","heading":"Text","content":"==================== Installed Programs ======================"},{"id":"text-45","heading":"Text","content":"(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)"},{"id":"text-46","heading":"Text","content":"ABBYY FineReader 6.0 Sprint (HKLM-x32…ACF60000-22B9-4CE9-98D6-2CCF359BAC07) (Version: 6.00.1395.4512 – ABBYY Software House)\nActian PSQL v13 Workgroup (HKLM-x32…A3238D7-AB32-1330-B717-F3E3F18B4A8C) (Version: 13.31.005 – Actian Corporation) Hidden\nActian PSQL v13 Workgroup R2 (HKLM-x32…Actian PSQL v13 Workgroup) (Version: 13.31.005 – Actian Corporation)\nAdobe Acrobat Reader DC (HKLM-x32…AC76BA86-7AD7-1033-7B44-AC0F074E4100) (Version: 20.009.20065 – Adobe Systems Incorporated)\nAdobe Flash Player 32 ActiveX (HKLM-x32…Adobe Flash Player ActiveX) (Version: 32.0.0.371 – Adobe)\nBioAPI Framework (HKLM…9DAED4FC-2B0E-4F3F-8141-F2ABF02CCFCB) (Version: 1.0.2 – Dell Inc.) Hidden\nBonjour (HKLM…B91110FB-33B4-468B-90C2-4D5E8AE3FAE1) (Version: 2.0.2.0 – Apple Inc.)\nBUFFALO NAS Navigator2 (HKLM-x32…UN060501) (Version: – )\nCisco WebEx Meetings (HKLM-x32…ActiveTouchMeetingClient) (Version: – Cisco WebEx LLC)\nCitrix Online Launcher (HKLM-x32…DB014C85-A264-4BCA-A66F-6DD1FCF8EC36) (Version: 1.0.335 – Citrix)\nCompatibility Pack for the 2007 Office system (HKLM-x32…90120000-0020-0409-0000-0000000FF1CE) (Version: 12.0.6612.1000 – Microsoft Corporation)\nCrystal Reports 2008 Runtime SP1 (HKLM-x32…C484CC8D-03CF-4022-89C4-DB4F02E8A15B) (Version: 12.1.0.882 – Business Objects)\nCustom (HKLM…7206B668-FEE0-455B-BB1F-9B5A2E0EC94A) (Version: 01.00.00.000 – Wave Systems Corp.) Hidden\nCutePDF Writer 3.2 (HKLM…CutePDF Writer Installation) (Version: 3.2 – Acro Software Inc.)\nD3DX10 (HKLM-x32…E09C4DB7-630C-4F06-A631-8EA7239923AF) (Version: 15.4.2368.0902 – Microsoft) Hidden\nDell Client System Update (HKLM-x32…2B2B45B1-3CA0-4F8D-BBB3-AC77ED46A0FE) (Version: 1.2.3 – Dell Inc.)\nDell Data Protection | Access (HKLM…ABBA2EA4-740E-4052-902B-9CA70B081E3F) (Version: 2.2.00001.001 – Dell Inc.)\nDell Edoc Viewer (HKLM…8EBA8727-ADC2-477B-9D9A-1A1836BE4E05) (Version: 1.0.0 – Dell Inc)\nDell System Detect (HKUS-1-5-21-928097801-345109163-1125972616-1104…d24084d039586cae) (Version: 8.8.0.1 – Dell)\nDellAccess (HKLM…F839C6BD-E92E-48FA-9CE6-7BFAF94F7096) (Version: 01.01.00.104 – Wave Systems Corp.) Hidden\nDYMO Label (HKLM-x32…2C8F4C88-E015-4D55-AB5A-ABD1C53C1B71) (Version: 8.6.710.0 – Newell Rubbermaid)\nEMBASSY Client Core (HKLM…5F5CBF39-BD29-43C8-B63A-B9758F0FD090) (Version: 01.01.00.036 – Wave Systems Corp.) Hidden\nEpson Connect Printer Setup (HKLM-x32…D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C) (Version: 1.3.0 – SEIKO EPSON CORPORATION)\nEpson Copy Utility 3.4 (HKLM-x32…AA72FB28-73B4-49E5-B6B4-E78F44BBD0AD) (Version: 3.4.0.0 – )\nEpson Customer Participation (HKLM…814FA673-A085-403C-9545-747FC1495069) (Version: 1.7.0.0 – SEIKO EPSON CORPORATION)\nEpson Event Manager (HKLM-x32…116DBCAF-9544-4592-9156-AC99F6C2D426) (Version: 3.10.0016 – Seiko Epson Corporation)\nEpson FAX Utility (HKLM-x32…CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A) (Version: 1.51.00 – SEIKO EPSON CORPORATION)\nEPSON GT-1500 User's Guide (HKLM-x32…Silent Package Run-Time Sample) (Version: – )\nEpson PC-FAX Driver (HKLM-x32…EPSON PC-FAX Driver 2) (Version: – )\nEPSON Print CD (HKLM-x32…FF477885-5EA8-40D0-ADF3-D4C1B86FAEA4) (Version: 1.50.000 – )\nEPSON Printer Software (HKLM…EPSON Printer and Utilities) (Version: – )\nEPSON Scan (HKLM-x32…EPSON Scanner) (Version: – Seiko Epson Corporation)\nEPSON Scan OCR Component (HKLM-x32…563B99D8-8895-4E3E-AE8D-15BE8C05F1C1) (Version: 2.30.00 – SEIKO EPSON Corp.)\nEPSON Scan PDF EXtensions (HKLM-x32…F9956472-6E16-4F83-BF9A-F887EF4A45B7) (Version: 1.00.0000 – SEIKO EPSON Corp.)\nEPSON WF-7610 Series Printer Uninstall (HKLM…EPSON WF-7610 Series) (Version: – SEIKO EPSON Corporation)\nEpson WF-7610 User’s Guide version 1.0 (HKLM-x32…UsersGuideEpson WF-7610 User’s Guide_is1) (Version: 1.0 – )\nEpsonNet Print (HKLM-x32…3E31400D-274E-4647-916C-2CACC3741799) (Version: 2.6.0 – SEIKO EPSON CORPORATION)\nExtended Asian Language font pack for Adobe Acrobat Reader DC (HKLM-x32…AC76BA86-7AD7-2530-0000-AC0F074E4100) (Version: 15.007.20033 – Adobe Systems Incorporated)\nFoxit PhantomPDF (HKLM-x32…60f0af00-8a56-11ea-ac63-54bf64a63c26) (Version: 10.0.0.35798 – Foxit Software Inc.) Hidden\nFoxit PhantomPDF (HKLM-x32…deb2552c-f9a9-498e-990d-b1f599ff15a1) (Version: 10.0.0.35798 – Foxit Software Inc.)\nGemalto (HKLM…91CE5F03-3A2A-4268-935A-04944F058AE9) (Version: 01.64.01.0010 – Wave Systems Corp) Hidden\nGoogle Chrome (HKLM-x32…Google Chrome) (Version: 83.0.4103.61 – Google LLC)\nGoogle Update Helper (HKLM-x32…60EC980A-BDA2-4CB6-A427-B07A5498B4CA) (Version: 1.3.35.451 – Google LLC) Hidden\nGoogle Update Helper (HKLM-x32…A92DAB39-4E2C-4304-9AB6-BC44E68B55E2) (Version: 1.3.25.11 – Google Inc.) Hidden\nHP LaserJet Professional P1100-P1560-P1600 Series (HKLM…HP LaserJet Professional P1100-P1560-P1600 Series) (Version: – )\nhppLaserJetService (HKLM-x32…D371F551-0DB9-4CEC-844B-4C90CE91EA0B) (Version: 001.001.0.0 – Hewlett-Packard) Hidden\nhppP1100P1560P1600SeriesLaserJetService (HKLM-x32…E448256-D515-4C3E-A5BE-0A7B76CED5D4) (Version: 001.001.0.0 – Hewlett-Packard) Hidden\nhppusgP1100P1560P1600Series (HKLM-x32…853F464A-B2B8-404E-BA3E-B98FF6862C41) (Version: 1.0.0.1 – Hewlett-Packard) Hidden\nHPSSupply (HKLM-x32…7902E313-FF0F-4493-ACB1-A8147B78DCD0) (Version: 2.1.1.0000 – Hewlett Packard Development Company L.P.)\nIntel® Control Center (HKLM-x32…F8A9085D-4C7A-41a9-8A77-C8998A96C421) (Version: 1.2.1.1007 – Intel Corporation)\nIntel® Management Engine Components (HKLM-x32…65153EA5-8B6E-43B6-857B-C6E4FC25798A) (Version: 9.5.15.1730 – Intel Corporation)\nIntel® Network Connections 16.8.45.00 (HKLM…PROSetDX) (Version: 16.8.45.00 – Dell)\nIntel® Processor Graphics (HKLM-x32…F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA) (Version: 10.18.10.4425 – Intel Corporation)\nIntel® Rapid Storage Technology (HKLM-x32…3E29EE6C-963A-4aae-86C1-DC237C4A49FC) (Version: 11.0.0.1032 – Intel Corporation)\nIntel® USB 3.0 eXtensible Host Controller Driver (HKLM-x32…240C3DDD-C5E9-4029-9DF7-95650D040CF2) (Version: 1.0.4.220 – Intel Corporation)\nJunk Mail filter update (HKLM-x32…1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4) (Version: 15.4.3502.0922 – Microsoft Corporation) Hidden\nKONICA MINOLTA C759_C658_C368_C287_C3851Series (HKLM…KONICA MINOLTA C759_C658_C368_C287_C3851Series Installer) (Version: – KONICA MINOLTA)\nLiveUpdate 3.2 (Symantec Corporation) (HKLM-x32…LiveUpdate) (Version: 3.2.0.68 – Symantec Corporation)\nMarketResearch (HKLM-x32…175F0111-2968-4935-8F70-33108C6A4DE3) (Version: 130.0.374.000 – Hewlett-Packard) Hidden\nMesh Runtime (HKLM-x32…8C6D6116-B724-4810-8F2D-D047E6B7D68E) (Version: 15.4.5722.2 – Microsoft Corporation) Hidden\nMicrosoft .NET Framework 4.8 (HKLM…92FB6C44-E685-45AD-9B20-CADF4CABA132 – 1033) (Version: 4.8.03761 – Microsoft Corporation)\nMicrosoft ASP.NET MVC 2 (HKLM-x32…DD8FF2F3-0D97-4CF3-AF78-FA0E1B242244) (Version: 2.0.60926.0 – Microsoft Corporation)\nMicrosoft Office 365 – en-us (HKLM…O365HomePremRetail – en-us) (Version: 16.0.12527.20612 – Microsoft Corporation)\nMicrosoft OneDrive (HKU.DEFAULT…OneDriveSetup.exe) (Version: 17.3.6743.1212 – Microsoft Corporation)\nMicrosoft OneDrive (HKUS-1-5-21-928097801-345109163-1125972616-1104…OneDriveSetup.exe) (Version: 17.3.6743.1212 – Microsoft Corporation)\nMicrosoft OneDrive (HKUS-1-5-21-928097801-345109163-1125972616-1107…OneDriveSetup.exe) (Version: 20.052.0311.0011 – Microsoft Corporation)\nMicrosoft Security Essentials (HKLM…Microsoft Security Client) (Version: 4.10.209.0 – Microsoft Corporation)\nMicrosoft Silverlight (HKLM…89F4137D-6C26-4A84-BDB8-2E5A4BB71E00) (Version: 5.1.50918.0 – Microsoft Corporation)\nMicrosoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32…F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8) (Version: 3.1.0000 – Microsoft Corporation)\nMicrosoft SQL Server Compact 4.0 x64 ENU (HKLM…8424B163-D1E0-48B7-88A2-C7A61767B3D7) (Version: 4.0.8482.1 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…710f4c1c-cc18-4c49-8cbf-51240c89a1a2) (Version: 8.0.61001 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (HKLM-x32…837b34e3-7c30-493c-8f6a-2b0f04e2912c) (Version: 8.0.59193 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (x64) (HKLM…71c9b48-7c32-4621-a0ac-3f809523288f) (Version: 8.0.56336 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (x64) (HKLM…ad8a2fa1-06e7-4b0d-927d-6e54b3d31028) (Version: 8.0.61000 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x64 9.0.30729.17 (HKLM…8220EEFE-38CD-377E-8595-13398D740ACE) (Version: 9.0.30729 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x64 9.0.30729.6161 (HKLM…5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.17 (HKLM-x32…9A25302D-30C0-39D9-BD6F-21E6EC160475) (Version: 9.0.30729 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.4148 (HKLM-x32…1F1C2DFC-2D24-3E06-BCB8-725134ADF989) (Version: 9.0.30729.4148 – Microsoft Corporation)\nMicrosoft Visual C++ 2008 Redistributable – x86 9.0.30729.6161 (HKLM-x32…9BE518E6-ECC6-35A9-88E4-87755C07200F) (Version: 9.0.30729.6161 – Microsoft Corporation)\nMicrosoft Visual C++ 2010 x64 Redistributable – 10.0.40219 (HKLM…1D8E6291-B0D5-35EC-8441-6616F567A0F7) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2010 x86 Redistributable – 10.0.40219 (HKLM-x32…F0C3E5D1-1ADE-321E-8167-68EF0DE699A5) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x64) – 11.0.61030 (HKLM-x32…ca67548a-5ebe-413a-b50c-4b9ceb6d66c6) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x86) – 11.0.50727 (HKLM-x32…22154f09-719a-4619-bb71-5b3356999fbf) (Version: 11.0.50727.1 – Microsoft Corporation)\nMicrosoft Visual C++ 2012 Redistributable (x86) – 11.0.61030 (HKLM-x32…33d1fd90-4274-48a1-9bc1-97e33d9c2d6f) (Version: 11.0.61030.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x64) – 12.0.21005 (HKLM-x32…7f51bdb9-ee21-49ee-94d6-90afc321780e) (Version: 12.0.21005.1 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x64) – 12.0.40660 (HKLM-x32…ef6b00ec-13e1-4c25-9064-b2f383cb8412) (Version: 12.0.40660.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x86) – 12.0.21005 (HKLM-x32…ce085a78-074e-4823-8dc1-8a721b94b76d) (Version: 12.0.21005.1 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x86) – 12.0.40660 (HKLM-x32…61087a79-ac85-455c-934d-1fa22cc64f36) (Version: 12.0.40660.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2017 Redistributable (x64) – 14.11.25325 (HKLM-x32…6c6356fe-cbfa-4944-9bed-a9e99f45cb7a) (Version: 14.11.25325.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2017 Redistributable (x86) – 14.11.25325 (HKLM-x32…404c9c27-8377-4fd1-b607-7ca635db4e49) (Version: 14.11.25325.0 – Microsoft Corporation)\nMicrosoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM…Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 – Microsoft Corporation)\nMSXML 4.0 SP2 (KB954430) (HKLM-x32…86493ADD-824D-4B8E-BD72-8C5DCDC52A71) (Version: 4.20.9870.0 – Microsoft Corporation)\nMSXML 4.0 SP2 (KB973688) (HKLM-x32…F662A8E6-F4DC-41A2-901E-8C11F044BDEC) (Version: 4.20.9876.0 – Microsoft Corporation)\nNorton Ghost (HKLM-x32…B0255743-165B-4BD5-8DA8-37DFB9930015) (Version: 15.0.1.36526 – Symantec Corporation)\nNTRU TCG Software Stack (HKLM…E9A97832-83B6-42B6-BAC6-492E344C2561) (Version: 2.1.37 – Security Innovation, Inc.) Hidden\nOffice 16 Click-to-Run Extensibility Component (HKLM-x32…90160000-008C-0000-0000-0000000FF1CE) (Version: 16.0.12527.20278 – Microsoft Corporation) Hidden\nOffice 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM…90160000-00DD-0000-1000-0000000FF1CE) (Version: 16.0.12527.20278 – Microsoft Corporation) Hidden\nOffice 16 Click-to-Run Licensing Component (HKLM…90160000-008F-0000-1000-0000000FF1CE) (Version: 16.0.12527.20612 – Microsoft Corporation) Hidden\nOffice 16 Click-to-Run Localization Component (HKLM-x32…90160000-008C-0409-0000-0000000FF1CE) (Version: 16.0.12527.20278 – Microsoft Corporation) Hidden\nPaperPort Image Printer 64-bit (HKLM…ABA4FAF1-6389-45F9-92CE-3914A4E5C471) (Version: 1.00.0000 – Nuance Communications, Inc.)\nPC-CCID (HKLM…3DCDFCDB-4D96-4CF0-9BB3-C91DAE9073F3) (Version: 2.0.0 – Gemalto) Hidden\nPreboot Manager (HKLM…3A6BE9F4-5FC8-44BB-BE7B-32A29607FEF6) (Version: 03.03.00.090 – Wave Systems Corp.) Hidden\nPrivate Information Manager (HKLM…B0A2153-58A6-4244-B458-25EDF5FCD809) (Version: 07.01.00.030 – Wave Systems Corp.) Hidden\nRAIDar 4.3.8 (HKLM-x32…1381-5408-0515-7060) (Version: 4.3.8 – Netgear Inc.)\nRealtek High Definition Audio Driver (HKLM-x32…F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC) (Version: 6.0.1.5907 – Realtek Semiconductor Corp.)\nSage 50 Accounting 2013 (HKLM-x32…1768BEA4-3469-45FB-8EFB-6742E1C0E86F) (Version: 20.00.00 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2014 (HKLM-x32…D2ADA6F5-F155-4A37-87CA-599E81F6C6C0) (Version: 21.00.00 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2015 (HKLM-x32…F3A0C9F5-77DD-4DE2-A2DF-7DB0687BA092) (Version: 22.02.00 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2016 (HKLM-x32…A0D9DC3A-156B-4785-9C7B-43DAC2D662A6) (Version: 23.00.00 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2017 (HKLM-x32…6A4CCB61-447D-432E-B56A-7D5D7626E7B5) (Version: 24.01.01 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2018 (HKLM-x32…FC7C07F7-E985-41D9-8A4F-709CE035D446) (Version: 25.00.00 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2019 (HKLM-x32…555A9126-7983-44D6-9D76-F4731B19B925) (Version: 26.01.00 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2020 (HKLM-x32…068FE61-EBAA-4F22-9D76-479DCBA14513) (Version: 27.00.00 – Sage Software, Inc.) Hidden\nSage 50 Accounting 2020 (HKLM-x32…InstallShield_0068FE61-EBAA-4F22-9D76-479DCBA14513) (Version: 27.00.00 – Sage Software, Inc.)\nSage 50 Accounting Tax Forms (HKLM-x32…BA1EF4A7-AB67-492B-9C7D-4AEE43F5A3C6) (Version: 18.4.23 – Sage Software SB, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…016E8A4-03D0-4EBC-B927-6D51CD42C9D6) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…08A1E2E-2E39-42C7-8E5B-F2D8F4561EAA) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…3B37DB84-9E4E-4424-B83D-12C112520642) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…4E1146C8-A878-4197-A631-2F3C472DE5CC) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…5AB7FDBD-4A2E-4264-BB76-57A71200DD4A) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…6BCE889D-6AE2-4795-A90D-5BCCF04314A0) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…73AFBAE1-95F3-4598-8223-BAAE31675C90) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…FC9CD015-1E98-4A8B-94A7-99032706FB71) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Accounting Update (HKLM-x32…FD6B5B7C-EFD9-43B0-967B-828B89D7D273) (Version: 19.01.001 – Sage Software, Inc.) Hidden\nSage 50 Payroll Sync Wizard (HKLM-x32…B3B149E0-51F9-4D82-9648-8A2D22281B21) (Version: 1.6.0.0002 – Sage Software, Inc.) Hidden\nSage 50 Payroll Sync Wizard (HKLM-x32…InstallShield_B3B149E0-51F9-4D82-9648-8A2D22281B21) (Version: 1.6.0.0002 – Sage Software, Inc.)\nSage 50 Payroll Sync Wizard 2.x (HKLM-x32…499B5712-AB99-4D5A-9E5F-967D92976E33) (Version: 2.6.0.0007 – Sage Software, Inc.) Hidden\nSage 50 Payroll Sync Wizard 2.x (HKLM-x32…InstallShield_499B5712-AB99-4D5A-9E5F-967D92976E33) (Version: 2.6.0.0007 – Sage Software, Inc.)\nSage Integration Services (HKLM-x32…Integration Services) (Version: 2.2.2240 – Sage Technology)\nSageDataExchangeAdapters (HKLM-x32…E6F432FF-49C9-4313-B00F-329B0E13F184) (Version: 1.01.0000 – Sage Software, Inc.)\nSAP Crystal Reports runtime engine for .NET Framework 4 (32-bit) (HKLM-x32…AAD476D7-FC64-40BC-85EA-0C1FD98D8375) (Version: 13.0.3.612 – SAP)\nScanSoft PaperPort 11 (HKLM-x32…DEA18FF6-D84A-4242-9663-692E5BA56805) (Version: 11.1.0000 – Nuance Communications, Inc.)\nSeagate Dashboard (HKLM-x32…EA266F00-A8E7-43A0-8DED-FBFE3F076934) (Version: 4.2.002.0 – Seagate)\nSoftware Updater (HKLM-x32…E1BAD1BA-C0E8-4018-9281-E7D2C6B07474) (Version: 4.3.6 – SEIKO EPSON CORPORATION)\nSPBA 5.9 (HKLM…2EECD5EF-5095-467C-B80C-4AB3096EFD60) (Version: 5.9.4.6901 – UPEK Inc.) Hidden\nSynology Active Backup for Business Agent (HKLM-x32…81B35851-2C23-4881-BD2C-EB7BA20D0FDA) (Version: 2.1.1125 – Synology)\nTeamViewer (HKLM-x32…TeamViewer) (Version: 15.2.2756 – TeamViewer)\ntoolkit32for64bit (HKLM-x32…703BB500-F54C-4F33-9D3C-D7A28CEAFBCF) (Version: 7.67.47.0000 – Wave Systems Corp) Hidden\nTrusted Drive Manager (HKLM…6AC87FB3-ACFC-4416-890C-8976D5A9B371) (Version: 4.5.0.136 – Wave Systems Corp.) Hidden\nUpek Touchchip Fingerprint Reader (HKLM…4E60E212-3177-4B16-BCB3-616CCC52357D) (Version: 1.2.004 – Dell Inc.) Hidden\nVisual Studio Tools for the Office system 3.0 Runtime (HKLM-x32…Visual Studio Tools for the Office system 3.0 Runtime) (Version: – Microsoft Corporation)\nVisual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32…8FB53850-246A-3507-8ADE-0060093FFEA6.KB949258) (Version: 1 – Microsoft Corporation)\nWave Crypto Runtime 2.0.7.0 x86 (HKLM-x32…8C0600A3-E772-4FC8-A67D-ED110E69665C) (Version: 02.00.07.0000 – Wave Systems Corp) Hidden\nWave Infrastructure Installer (HKLM…30C2392C-C7D6-4FE2-9617-05D2C6E9D3EE) (Version: 07.67.60.0020 – Wave Systems Corp) Hidden\nWave Support Software Installer (HKLM…7D618CD-B016-438A-ADC9-A75BD23F85CE) (Version: 05.13.00.051 – Wave Systems Corp) Hidden\nWindows Driver Package – Dell Inc. PBADRV System (09/11/2009 1.0.1.6) (HKLM…9512AA21B791B05A54E27065C45BBC417AB282DF) (Version: 09/11/2009 1.0.1.6 – Dell Inc.)\nWindows Live Essentials (HKLM-x32…WinLiveSuite) (Version: 15.4.3508.1109 – Microsoft Corporation)\nWindows Live Mesh ActiveX Control for Remote Connections (HKLM-x32…2902F983-B4C1-44BA-B85D-5C6D52E2C441) (Version: 15.4.5722.2 – Microsoft Corporation)\nWizTree v3.21 (HKLM…WizTree_is1) (Version: – Antibody Software)\nWorkForce GT-1500 Scanner Driver Update (HKLM-x32…37D0F29D-AB95-4598-ACF0-D3CC38C161D9) (Version: – )"},{"id":"text-47","heading":"Text","content":"==================== Custom CLSID (Whitelisted): =============="},{"id":"text-48","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)"},{"id":"text-49","heading":"Text","content":"CustomCLSID: HKUS-1-5-21-928097801-345109163-1125972616-1107_ClassesCLSID162C6FB5-44D3-435B-903D-E613FA093FB5InprocServer32 -> C:UsersKMieleAppDataLocalMicrosoftOneDrive17.3.6743.1212amd64FileCoAuthLib64.dll => No File\nShellIconOverlayIdentifiers: [EnabledUnlockedFDEIconOverlay] -> 30D3C2AF-9709-4D05-9CF4-13335F3C1E4A => C:Program FilesDellDell Data ProtectionAccessAdvancedWaveTrusted Drive ManagerTdmIconOverlay.dll [2011-12-08] (Wave Systems Corp. -> Wave Systems Corp.)\nShellIconOverlayIdentifiers: [UninitializedFdeIconOverlay] -> CF08DA3E-C97D-4891-A66B-E39B28DD270F => C:Program FilesDellDell Data ProtectionAccessAdvancedWaveTrusted Drive ManagerTdmIconOverlay.dll [2011-12-08] (Wave Systems Corp. -> Wave Systems Corp.)\nContextMenuHandlers1: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => C:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers1: [Foxit_ConvertToPDF] -> C5269811-4A29-4818-A4BB-111F9FC63A5F => C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsConvertToPDFShellExtension_x64.dll [2020-04-22] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)\nContextMenuHandlers2: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => C:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers4: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => C:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers5: [igfxcui] -> 3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4 => C:Windowssystem32igfxpph.dll -> No File\nContextMenuHandlers5: [igfxDTCM] -> 9B5F5829-A529-4B12-814A-E81BCB8D93FC => C:Windowssystem32igfxDTCM.dll [2016-06-02] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)\nContextMenuHandlers6: [Foxit_ConvertToPDF] -> C5269811-4A29-4818-A4BB-111F9FC63A5F => C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFpluginsConvertToPDFShellExtension_x64.dll [2020-04-22] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)"},{"id":"text-50","heading":"Text","content":"==================== Codecs (Whitelisted) ===================="},{"id":"text-51","heading":"Text","content":"==================== Shortcuts & WMI ========================"},{"id":"text-52","heading":"Text","content":"(The entries could be listed to be restored or removed.)"},{"id":"text-53","heading":"Text","content":"WMI:subscription__FilterToConsumerBinding->CommandLineEventConsumer.Name="BVTConsumer"",Filter="__EventFilter.Name="BVTFilter"::\nWMI:subscription__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA « Win32_Processor » AND TargetInstance.LoadPercentage > 99]\nWMI:subscriptionCommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]"},{"id":"text-54","heading":"Text","content":"==================== Loaded Modules (Whitelisted) ============="},{"id":"text-55","heading":"Text","content":"2012-08-15 00:49 – 2011-11-29 21:00 – 000059392 _____ ( () [File not signed]) [File is in use ] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIsdiInterop.dll\n2017-05-09 19:47 – 2017-05-09 19:47 – 000484352 _____ ( (DYMO Corporation) [File not signed]) [File is in use ] C:Program Files (x86)DYMODYMO Label SoftwarePrintingSupportLibrary.dll\n2009-06-24 10:57 – 2009-06-24 10:57 – 000029696 _____ ( (HP) [File not signed]) [File is in use ] C:Program Files (x86)HPHPLaserJetServiceDebugLogger.dll\n2009-06-24 10:57 – 2009-06-24 10:57 – 000032768 _____ ( (HP) [File not signed]) [File is in use ] C:Program Files (x86)HPHPLaserJetServiceHPHTTPProxy.dll\n2009-06-24 10:57 – 2009-06-24 10:57 – 000031744 _____ ( (HP) [File not signed]) [File is in use ] C:Program Files (x86)HPHPLaserJetServiceHPServiceCommunicator.dll\n2012-08-15 00:49 – 2011-11-29 21:00 – 000175616 _____ ( (Intel Corporation) [File not signed]) [File is in use ] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorUIHelper.dll\n2012-08-15 00:49 – 2011-11-29 21:00 – 001319424 _____ ( (Intel Corporation) [File not signed]) [File is in use ] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIntelVisualDesign.dll\n2019-03-27 23:48 – 2019-03-27 23:48 – 000115200 _____ ( (Microsoft Corporation) [File not signed]) [File is in use ] C:WindowsMicrosoft.NetassemblyGAC_32System.EnterpriseServicesv4.0_4.0.0.0__b03f5f7f11d50a3aSystem.EnterpriseServices.Wrapper.dll\n2013-01-12 04:09 – 2013-01-12 04:09 – 000225280 _____ ( (Microsoft Corporation) [File not signed]) [File is in use ] C:WindowsWinSxSx86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57msvcm90.dll\n2016-12-13 09:54 – 2016-12-13 09:54 – 000687616 _____ ( (Microsoft) [File not signed]) [File is in use ] C:WindowsassemblyGAC_32Sage.Central.AutoUpdateManager1.0.0.0__021b26c6762d83c5Sage.Central.AutoUpdateManager.dll\n2011-10-08 23:56 – 2011-10-08 23:56 – 000003072 _____ () [File not signed] C:Program Files (x86)NTRU CryptosystemsNTRU TCG Software StackbinTspPopup_ENU.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 022937305 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiicudt53.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 002831013 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiicuin53.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 001726380 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiicuuc53.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000075264 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuilibgcc_s_seh-1.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 001426432 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuilibstdc++-6.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000622080 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiplatformsqwindows.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000354304 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuisynocat-qt.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000117248 _____ () [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuizlib1.dll\n2019-05-16 03:30 – 2019-05-16 03:30 – 000172032 _____ () [File not signed] C:WindowsassemblyNativeImages_v2.0.50727_32IsdiInterop72942022d04b079ab54528d7acd76660IsdiInterop.ni.dll\n2006-12-08 16:41 – 2012-08-15 00:53 – 000239104 _____ () [File not signed] C:Windowssystem32BIOAPI_MDS300.dll\n2006-12-08 16:42 – 2012-08-15 00:53 – 000155136 _____ () [File not signed] C:Windowssystem32BioAPI100.dll\n2011-11-07 08:55 – 2011-11-07 08:55 – 000094720 _____ () [File not signed] C:Windowssystem32Wavx_ESC_Logging.dll\n2005-09-07 13:03 – 2005-09-07 13:03 – 000036864 _____ (Black Ice Software, Inc.) [File not signed] C:Program Files (x86)ScanSoftPaperPortblicectr.dll\n2013-01-09 11:55 – 2009-05-15 06:36 – 000196608 ____R (BUFFALO INC.) [File not signed] C:Program Files (x86)BUFFALONASNAVInasdmn.dll\n2013-01-09 11:55 – 2012-02-21 11:57 – 000323584 ____R (BUFFALO INC.) [File not signed] C:Program Files (x86)BUFFALONASNAVInasexo.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 004530176 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiQt5Core.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 003574784 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiQt5Gui.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 001303552 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiQt5Network.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 005441536 _____ (Digia Plc and/or its subsidiary(-ies)) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiQt5Widgets.dll\n2020-04-29 09:31 – 2020-04-29 09:31 – 000693760 _____ (Foxit) [File not signed] C:Program Files (x86)Foxit SoftwareFoxit PhantomPDFPluginsphc.dll\n2013-01-09 12:55 – 2008-05-07 20:59 – 000099840 _____ (Hewlett-Packard Corporation) [File not signed] C:Windowssystem32spoolPRTPROCSx64hpzpplhn.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000591360 _____ (Hystax) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentservicevsstracker_x64.dll\n2019-05-16 03:30 – 2019-05-16 03:30 – 000014336 _____ (Intel Corp.) [File not signed] C:WindowsassemblyNativeImages_v2.0.50727_32IAStorCommon2c124842f2740267d4146b4211b412a0IAStorCommon.ni.dll\n2012-08-15 00:49 – 2011-11-29 20:41 – 000278016 _____ (Intel Corporation) [File not signed] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyISDI.dll\n2012-08-15 00:52 – 2012-02-27 04:59 – 000073728 _____ (Intel Corporation) [File not signed] C:Program Files (x86)IntelIntel® USB 3.0 eXtensible Host Controller DriverApplicationiusb3mon.dll\n2020-01-15 04:27 – 2020-01-15 04:27 – 000225280 _____ (Intel Corporation) [File not signed] C:WindowsassemblyNativeImages_v2.0.50727_32IAStorDataMgrc64c05bf09fe8c421829cca89b51f547IAStorDataMgr.ni.dll\n2020-01-15 04:27 – 2020-01-15 04:27 – 000487424 _____ (Intel Corporation) [File not signed] C:WindowsassemblyNativeImages_v2.0.50727_32IAStorUtil432a39402d23f6e21a6887900c7b573eIAStorUtil.ni.dll\n2018-03-12 10:00 – 2017-07-04 12:16 – 000016896 _____ (KONICA MINOLTA, INC.) [File not signed] C:WindowsSystem32KOAXTJ_L.DLL\n2009-07-13 20:35 – 2015-10-30 03:17 – 000283648 _____ (Microsoft Corporation) [File not signed] C:Windowssystem32spoolDRIVERSx643FXSAPI.DLL\n2009-07-13 20:36 – 2015-10-30 03:17 – 000032256 _____ (Microsoft Corporation) [File not signed] C:Windowssystem32spoolDRIVERSx643FXSDRV.DLL\n2009-07-13 21:19 – 2015-10-30 03:17 – 007299072 _____ (Microsoft Corporation) [File not signed] C:Windowssystem32spoolDRIVERSx643FXSRES.DLL\n2009-07-13 20:35 – 2015-10-30 03:17 – 000412672 _____ (Microsoft Corporation) [File not signed] C:Windowssystem32spoolDRIVERSx643FXSTIFF.dll\n2009-07-13 20:36 – 2015-10-30 03:17 – 000143360 _____ (Microsoft Corporation) [File not signed] C:Windowssystem32spoolDRIVERSx643FXSUI.DLL\n2009-07-13 20:36 – 2015-10-30 03:17 – 000139264 _____ (Microsoft Corporation) [File not signed] C:Windowssystem32spoolDRIVERSx643FXSWZRD.dll\n2018-06-20 10:26 – 2018-06-20 10:26 – 000000000 ____L (Microsoft Corporation) C:Program Files (x86)Microsoft OfficerootOffice16AppVIsvSubsystems32.dll\n2018-06-20 10:26 – 2018-06-20 10:26 – 000000000 ____L (Microsoft Corporation) C:Program Files (x86)Microsoft OfficerootOffice16c2r32.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000052224 _____ (MingW-W64 Project. All rights reserved.) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuilibwinpthread-1.dll\n2011-10-08 23:53 – 2011-10-08 23:53 – 002504192 _____ (NTRU Cryptosystems, Inc.) [File not signed] C:Program FilesNTRU CryptosystemsNTRU TCG Software StackbinTsp1_x64.dll\n2013-01-09 13:07 – 2005-01-13 06:47 – 000049152 ____N (SEIKO EPSON CORP.) [File not signed] C:Program Files (x86)Epson SoftwareEvent ManagerESPSUTL.dll\n2012-04-02 11:15 – 2012-04-02 11:15 – 000110080 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareEvent Managerepnsm.dll\n2009-10-21 17:39 – 2009-10-21 17:39 – 000291328 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareEvent ManagerLcMgr.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000095744 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityEbpD4Fax.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000274432 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityFULEPP.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000327680 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityFUSVCCLT.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000065536 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityFUUSBHLP.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000069632 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityLibraryFUDEVCOM.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000135168 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityLibraryFUDRVUTL.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000339968 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityLibraryFUPRBDEV.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000286720 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityLibraryFUSNMPUT.dll\n2015-07-24 18:27 – 2014-05-25 12:00 – 000081920 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUCMNMSG.dll\n2015-07-24 18:27 – 2014-05-25 12:00 – 000241664 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUFAXRCV.dll\n2015-07-24 18:27 – 2014-05-25 12:00 – 000022016 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFULEPPRes.dll\n2015-07-24 18:27 – 2014-05-25 12:00 – 000077824 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUPRBDEVRes.dll\n2015-07-24 18:26 – 2012-11-12 15:15 – 000558592 _____ (SEIKO EPSON CORPORATION) [File not signed] C:WindowsSystem32enppmon.dll\n2015-07-24 18:26 – 2012-10-22 17:19 – 000219648 _____ (SEIKO EPSON CORPORATION) [File not signed] C:WindowsSystem32enpres.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000786432 _____ (SEIKO EPSON) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityLibraryENCM.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000278528 _____ (SEIKO EPSON) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityLibraryENNW.dll\n2015-07-24 18:27 – 2014-05-26 01:00 – 000299008 _____ (SEIKO EPSON) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityLibraryENUTIL.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 001787904 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentserviceLIBEAY32.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000434688 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentserviceSSLEAY32.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 001846272 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiLIBEAY32.dll\n2020-03-19 10:21 – 2020-03-19 10:21 – 000386560 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:Program Files (x86)SynologyActiveBackupforBusinessAgentuiuiSSLEAY32.dll\n2011-11-07 08:58 – 2011-11-07 08:58 – 000119296 _____ (Wave Systems Corp.) [File not signed] C:Program FilesDellDell Data ProtectionAccessAdvancedWaveCommonSecureLoginSupport.dll\n2011-11-07 08:55 – 2011-11-07 08:55 – 000017920 _____ (Wave Systems Corp.) [File not signed] C:Program FilesDellDell Data ProtectionAccessAdvancedWaveCommonTPMSupport.dll\n2012-01-16 16:32 – 2012-01-16 16:32 – 000481280 _____ (Wave Systems Corp.) [File not signed] C:Program FilesDellDell Data ProtectionAccessAdvancedWaveCommonTrustedPlatformManager.dll\n2012-01-16 16:31 – 2012-01-16 16:31 – 000050688 _____ (Wave Systems Corp.) [File not signed] C:Program FilesDellDell Data ProtectionAccessAdvancedWaveCommonTrustedPlatformUtil.dll\n2012-01-16 16:24 – 2012-01-16 16:25 – 001058304 _____ (Wave Systems Corp.) [File not signed] C:Windowssystem32tcg15.dll\n2012-01-16 16:28 – 2012-01-16 16:28 – 000407552 _____ (Wave Systems Corp.) [File not signed] C:Windowssystem32wclient14.dll\n2012-01-05 16:00 – 2012-01-05 16:00 – 003564544 _____ (Wave Systems Corp.) [File not signed] C:Windowssystem32wvauth.DLL\n2012-08-15 00:54 – 2012-08-15 00:54 – 000025600 _____ (Wave Systems Corp.) [File not signed] C:WindowsWinSxSamd64_wave.super.superprotocol_1aaab1af848ab112_2.0.0.7_none_d8efab872cd9eac7Super.dll\n2012-08-15 00:54 – 2012-08-15 00:54 – 001175040 _____ (Wave Systems Corp.) [File not signed] C:WindowsWinSxSamd64_wave.wcr10.cryptoruntime_1aaab1af848ab112_1.0.2.11_none_68ec49ceb7426227WCR10.dll"},{"id":"text-56","heading":"Text","content":"==================== Alternate Data Streams (Whitelisted) ========"},{"id":"text-57","heading":"Text","content":"==================== Safe Mode (Whitelisted) =================="},{"id":"text-58","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)"},{"id":"text-59","heading":"Text","content":"HKLMSYSTEMCurrentControlSetControlSafeBootMinimalMBAMService => ""="Service"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkatashost => ""="Service"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkMBAMService => ""="Service""},{"id":"text-60","heading":"Text","content":"==================== Association (Whitelisted) ================="},{"id":"text-61","heading":"Text","content":"==================== Internet Explorer trusted/restricted =========="},{"id":"text-62","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed from the registry.)"},{"id":"text-63","heading":"Text","content":"IE trusted site: HKUS-1-5-21-928097801-345109163-1125972616-1104…dell.com -> dell.com\nIE trusted site: HKUS-1-5-21-928097801-345109163-1125972616-1104…iqassociates.biz -> hxxp://ww2.iqassociates.biz\nIE trusted site: HKUS-1-5-21-928097801-345109163-1125972616-1107…iqassociates.biz -> hxxp://ww2.iqassociates.biz\nIE trusted site: HKUS-1-5-21-928097801-345109163-1125972616-1107…iqassociates.com -> hxxp://ww2.iqassociates.com\nIE trusted site: HKUS-1-5-21-928097801-345109163-1125972616-1107…iqassociates.info -> hxxp://ww2.iqassociates.info\nIE trusted site: HKUS-1-5-21-928097801-345109163-1125972616-1107…iqassociates.net -> hxxp://ww2.iqassociates.net"},{"id":"text-64","heading":"Text","content":"==================== Hosts content: ========================="},{"id":"text-65","heading":"Text","content":"(If needed Hosts: directive could be included in the fixlist to reset Hosts.)"},{"id":"text-66","heading":"Text","content":"2009-07-13 22:34 – 2009-06-10 17:00 – 000000824 _____ C:Windowssystem32driversetchosts"},{"id":"text-67","heading":"Text","content":"==================== Other Areas ==========================="},{"id":"text-68","heading":"Text","content":"(Currently there is no automatic fix for this section.)"},{"id":"text-69","heading":"Text","content":"HKLMSystemCurrentControlSetControlSession ManagerEnvironment\\Path -> C:Program Files (x86)ActianPSQLbin;C:Program FilesCommon FilesMicrosoft SharedWindows Live;C:Program Files (x86)Common FilesMicrosoft SharedWindows Live;C:Program Files (x86)InteliCLS Client;C:Program FilesInteliCLS Client;%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;%SYSTEMROOT%System32WindowsPowerShellv1.0;C:Program FilesDellDell Data ProtectionAccessAdvancedWaveGemaltoAccess Clientv5;C:Program Files (x86)NTRU CryptosystemsNTRU TCG Software Stackbin;C:Program FilesNTRU CryptosystemsNTRU TCG Software Stackbin;C:Program Files (x86)Windows LiveShared;C:Program FilesIntelIntel® Management Engine ComponentsDAL;C:Program FilesIntelIntel® Management Engine ComponentsIPT;C:Program Files (x86)IntelIntel® Management Engine ComponentsDAL;C:Program Files (x86)IntelIntel® Management Engine ComponentsIPT\nHKUS-1-5-21-928097801-345109163-1125972616-1104Control PanelDesktop\\Wallpaper -> C:UsersGemmitiAAppDataRoamingMicrosoftWindowsThemesTranscodedWallpaper.jpg\nHKUS-1-5-21-928097801-345109163-1125972616-1107Control PanelDesktop\\Wallpaper -> C:UsersKMieleAppDataRoamingMicrosoftWindowsThemesTranscodedWallpaper.jpg\nDNS Servers: 192.168.1.10 – 8.8.8.8\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)\nWindows Firewall is enabled."},{"id":"text-70","heading":"Text","content":"==================== MSCONFIG/TASK MANAGER disabled items =="},{"id":"text-71","heading":"Text","content":"==================== FirewallRules (Whitelisted) ================"},{"id":"text-72","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)"},{"id":"text-73","heading":"Text","content":"FirewallRules: [SPPSVC-In-TCP] => (Allow) C:Windowssystem32sppsvc.exe (Microsoft Windows -> Microsoft Corporation)\nFirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) C:Windowssystem32sppsvc.exe (Microsoft Windows -> Microsoft Corporation)\nFirewallRules: [VirtualPC-In-UDP-1] => (Allow) C:WindowsSystem32vpc.exe (Microsoft Windows -> Microsoft Corporation)\nFirewallRules: [VirtualPC-In-UDP-2] => (Allow) C:WindowsSystem32vpc.exe (Microsoft Windows -> Microsoft Corporation)\nFirewallRules: [VirtualPC-In-TCP-1] => (Allow) C:WindowsSystem32vpc.exe (Microsoft Windows -> Microsoft Corporation)\nFirewallRules: [4D464B0D-D441-4C1A-9690-6C220FDA57DD] => (Allow) C:Program Files (x86)Windows LiveContactswlcomm.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [E564CEC1-17F7-4172-9DC9-C78E54F37199] => (Allow) LPort=2869\nFirewallRules: [72F6B6B7-D78F-48C5-B195-1EC6B45A5C40] => (Allow) LPort=1900\nFirewallRules: [40714D49-74CC-4BB1-B04E-FD99E705C81E] => (Allow) C:Program Files (x86)Windows LiveMessengermsnmsgr.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [3890C2D2-2FF9-45F4-B52E-EB259F191DB5] => (Allow) C:Program Files (x86)Windows LiveMeshMOE.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [440564F4-AF39-40C1-AE28-FBB35EBDE959] => (Allow) LPort=61117\nFirewallRules: [BA4C16D7-37AB-4022-881F-44169704B375] => (Allow) C:Program Files (x86)Pervasive SoftwarePSQLbinw3dbsmgr.exe => No File\nFirewallRules: [4590ABF8-4776-4998-826A-D6CC5710A518] => (Allow) C:Program Files (x86)Pervasive SoftwarePSQLbinw3dbsmgr.exe => No File\nFirewallRules: [916C88EE-3304-4C93-A0DD-93C173BA61A3] => (Allow) C:Program Files (x86)BUFFALONASNAVINasNavi.exe (BUFFALO INC. -> BUFFALO INC.)\nFirewallRules: [B89F0221-F9C1-41AA-A7DB-F5466E290BBB] => (Allow) C:Program Files (x86)BUFFALONASNAVINasNavi.exe (BUFFALO INC. -> BUFFALO INC.)\nFirewallRules: [79F605C0-A287-4CB6-9FEE-5CDFCA88CF29] => (Allow) C:Program Files (x86)Pervasive SoftwarePSQLbinw3dbsmgr.exe => No File\nFirewallRules: [05E18197-10F8-4D19-AF18-843782561776] => (Allow) C:Program Files (x86)Pervasive SoftwarePSQLbinw3dbsmgr.exe => No File\nFirewallRules: [DB8BEC7F-A363-4C40-B42C-6C98215B6535] => (Allow) C:Program Files (x86)CamlinkCodeMeter.exe => No File\nFirewallRules: [D8BC628E-F611-4B70-A973-CCB679002793] => (Allow) C:Program Files (x86)CamlinkCodeMeter.exe => No File\nFirewallRules: [F66F5A33-B161-41A6-9248-A6BC9E058C2F] => (Allow) LPort=8888\nFirewallRules: [42C900BC-87EA-400B-B2F7-34045EDC21B9] => (Allow) LPort=8888\nFirewallRules: [A7E2D356-6408-4F95-90DD-B88B80A6BFCB] => (Allow) C:Program Files (x86)BonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [D0D1233B-C780-46C3-B6D9-6F8B626B2B78] => (Allow) C:Program Files (x86)BonjourmDNSResponder.exe (Apple Inc. -> Apple Inc.)\nFirewallRules: [TCP Query User2E9CCECE-5ACF-4140-A63F-FFDBABCC4C34C:program files (x86)epson softwareevent managereeventmanager.exe] => (Allow) C:program files (x86)epson softwareevent managereeventmanager.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nFirewallRules: [UDP Query User01CFC82B-D2D0-4293-95E4-B35AE05DB1A7C:program files (x86)epson softwareevent managereeventmanager.exe] => (Allow) C:program files (x86)epson softwareevent managereeventmanager.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nFirewallRules: [TCP Query User52FBCC23-1977-48F6-92E0-5DE2B2368A43C:userskmieleappdatalocallogmein rescue appletlmir0001.tmplmi_rescue.exe] => (Allow) C:userskmieleappdatalocallogmein rescue appletlmir0001.tmplmi_rescue.exe => No File\nFirewallRules: [UDP Query User1BA34E42-A28B-4BE7-AA07-60C0DF8D2F67C:userskmieleappdatalocallogmein rescue appletlmir0001.tmplmi_rescue.exe] => (Allow) C:userskmieleappdatalocallogmein rescue appletlmir0001.tmplmi_rescue.exe => No File\nFirewallRules: [TCP Query UserCEA255B2-B158-4E7F-A9FA-F67C35193404C:userskmieleappdatalocallogmein rescue appletlmir08a51001.tmplmi_rescue.exe] => (Allow) C:userskmieleappdatalocallogmein rescue appletlmir08a51001.tmplmi_rescue.exe => No File\nFirewallRules: [UDP Query User8D52DE92-37D9-492B-8676-439A7D521498C:userskmieleappdatalocallogmein rescue appletlmir08a51001.tmplmi_rescue.exe] => (Allow) C:userskmieleappdatalocallogmein rescue appletlmir08a51001.tmplmi_rescue.exe => No File\nFirewallRules: [TCP Query User1CD30CA8-ED9A-45AE-9026-1C29A11A5A10C:userskmieleappdatalocallogmein rescue appletlmir0c02f001.tmplmi_rescue.exe] => (Allow) C:userskmieleappdatalocallogmein rescue appletlmir0c02f001.tmplmi_rescue.exe => No File\nFirewallRules: [UDP Query User118420AF-3275-48C1-ACC5-53603D5F45ACC:userskmieleappdatalocallogmein rescue appletlmir0c02f001.tmplmi_rescue.exe] => (Allow) C:userskmieleappdatalocallogmein rescue appletlmir0c02f001.tmplmi_rescue.exe => No File\nFirewallRules: [371A237F-EDC1-4902-859C-F0EE59581535] => (Allow) LPort=1583\nFirewallRules: [BD53179F-4515-4C75-AD50-9759AEF4F571] => (Allow) LPort=3351\nFirewallRules: [TCP Query User703607D8-C5C2-48D0-B3EB-826B5F03B747C:program files (x86)epson softwareevent managereeventmanager.exe] => (Block) C:program files (x86)epson softwareevent managereeventmanager.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nFirewallRules: [UDP Query UserC3E503D7-9624-4B95-BD36-973CFFBFFA01C:program files (x86)epson softwareevent managereeventmanager.exe] => (Block) C:program files (x86)epson softwareevent managereeventmanager.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nFirewallRules: [5B66001E-67E8-482B-9907-88D2C71ECEE0] => (Allow) C:Program Files (x86)ActianPSQLbinw3dbsmgr.exe (Actian Corporation -> Actian Corporation)\nFirewallRules: [57F0256F-F11D-4C05-99B0-2B148F2122C1] => (Allow) C:Program Files (x86)ActianPSQLbinw3dbsmgr.exe (Actian Corporation -> Actian Corporation)\nFirewallRules: [CD63BB04-48E6-4C08-9DC8-6FEEBE1EE352] => (Allow) C:Program Files (x86)Microsoft OfficerootOffice16outlook.exe (Microsoft Corporation -> Microsoft Corporation)\nFirewallRules: [CD4E3930-B5A9-41E2-BA5E-725CD4F19C9F] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [47A6D514-14A2-480B-840A-96B989540524] => (Allow) C:Program Files (x86)TeamViewerTeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [614115BB-54EC-4424-863B-8D6C020D5B0F] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [FA282503-93F7-4F43-9280-E657E4800ACB] => (Allow) C:Program Files (x86)TeamViewerTeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)\nFirewallRules: [A842E21A-C339-443D-BD1B-9DD4FFCAF49C] => (Allow) C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC -> Google LLC)"},{"id":"text-74","heading":"Text","content":"==================== Restore Points ========================="},{"id":"text-75","heading":"Text","content":"10-05-2020 10:30:55 Windows Update\n13-05-2020 03:00:10 Windows Update\n16-05-2020 10:31:15 Windows Update\n19-05-2020 13:29:49 Windows Update\n26-05-2020 13:13:34 Windows Update\n30-05-2020 15:52:49 Installed Synology Active Backup for Business Agent\n31-05-2020 04:15:51 Windows Update"},{"id":"text-76","heading":"Text","content":"==================== Faulty Device Manager Devices ============"},{"id":"text-77","heading":"Text","content":"Name: Malwarebytes Anti-Exploit\nDescription: Malwarebytes Anti-Exploit\nClass Guid: 8ECC055D-047F-11D1-A537-0000F8753ED1\nManufacturer: \nService: ESProtectionDriver\nProblem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)\nResolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.\nDevices stay in this state if they have been prepared for removal.\nAfter you remove the device, this error disappears.Remove the device, and this error should be resolved."},{"id":"text-78","heading":"Text","content":"==================== Event log errors: ========================"},{"id":"text-79","heading":"Text","content":"Application errors:\n==================\nError: (05/30/2020 02:18:20 PM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected."},{"id":"text-80","heading":"Text","content":"Error: (05/28/2020 07:00:36 PM) (Source: Norton Ghost) (EventID: 100) (User: )\nDescription: Error EC8F17B7: Cannot create recovery points for job: Drive Backup of RECOVERY (*:), OS (C:).\nError EC8F03ED: Cannot create the recovery point.\nError E7D1000B: Unable to make directory 'Z:/'.\nError E7D10026: Unable to get attributes for 'Z:/'.\nError EBAB03F1: The system cannot find the path specified. (UMI:V-281-3215-6071)"},{"id":"text-81","heading":"Text","content":"Détails: \nSource: Norton Ghost"},{"id":"text-82","heading":"Text","content":"Error: (05/27/2020 07:00:37 PM) (Source: Norton Ghost) (EventID: 100) (User: )\nDescription: Error EC8F17B7: Cannot create recovery points for job: Drive Backup of RECOVERY (*:), OS (C:).\nError EC8F03ED: Cannot create the recovery point.\nError E7D1000B: Unable to make directory 'Z:/'.\nError E7D10026: Unable to get attributes for 'Z:/'.\nError EBAB03F1: The system cannot find the path specified. (UMI:V-281-3215-6071)"},{"id":"text-83","heading":"Text","content":"Détails: \nSource: Norton Ghost"},{"id":"text-84","heading":"Text","content":"Error: (05/26/2020 07:00:36 PM) (Source: Norton Ghost) (EventID: 100) (User: )\nDescription: Error EC8F17B7: Cannot create recovery points for job: Drive Backup of RECOVERY (*:), OS (C:).\nError EC8F03ED: Cannot create the recovery point.\nError E7D1000B: Unable to make directory 'Z:/'.\nError E7D10026: Unable to get attributes for 'Z:/'.\nError EBAB03F1: The system cannot find the path specified. (UMI:V-281-3215-6071)"},{"id":"text-85","heading":"Text","content":"Détails: \nSource: Norton Ghost"},{"id":"text-86","heading":"Text","content":"Error: (05/26/2020 08:09:30 AM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected."},{"id":"text-87","heading":"Text","content":"Error: (05/26/2020 08:08:48 AM) (Source: Application Error) (EventID: 1000) (User: )\nDescription: Faulting application name: OfficeClickToRun.exe, version: 16.0.12527.20612, time stamp: 0x5e8656fc\nFaulting module name: OfficeClickToRun.exe, version: 16.0.12527.20612, time stamp: 0x5e8656fc\nException code: 0xc0000005\nFault offset: 0x00000000003b24d9\nFaulting process id: 0x7a8\nFaulting application start time: 0x01d63356598eb186\nFaulting application path: C:Program FilesCommon FilesMicrosoft SharedClickToRunOfficeClickToRun.exe\nFaulting module path: C:Program FilesCommon FilesMicrosoft SharedClickToRunOfficeClickToRun.exe\nReport Id: a6e96793-9f49-11ea-b347-5cf9dd777e57"},{"id":"text-88","heading":"Text","content":"Error: (05/26/2020 08:08:25 AM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected."},{"id":"text-89","heading":"Text","content":"Error: (05/22/2020 03:32:38 PM) (Source: ESENT) (EventID: 104) (User: )\nDescription: taskhost (4204) WebCacheLocal: The database engine stopped the instance (0) with error (-1011)."},{"id":"text-90","heading":"Text","content":"System errors:\n=============\nError: (05/31/2020 10:53:04 AM) (Source: UmrdpService) (EventID: 1111) (User: )\nDescription: Driver Brother HL-5050 required for printer !!IQA-10!Brother HL-5050Lan is unknown. Contact the administrator to install the driver before you log in again."},{"id":"text-91","heading":"Text","content":"Error: (05/31/2020 10:53:02 AM) (Source: UmrdpService) (EventID: 1111) (User: )\nDescription: Driver Amyuni Document Converter 400 required for printer QuickBooks PDF Converter 2.0 is unknown. Contact the administrator to install the driver before you log in again."},{"id":"text-92","heading":"Text","content":"Error: (05/31/2020 10:49:06 AM) (Source: Disk) (EventID: 11) (User: )\nDescription: The driver detected a controller error on DeviceHarddisk1DR1."},{"id":"text-93","heading":"Text","content":"Error: (05/31/2020 04:16:03 AM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )\nDescription: Microsoft Antimalware has encountered an error trying to update signatures."},{"id":"text-94","heading":"Text","content":"New Signature Version:"},{"id":"text-95","heading":"Text","content":"Previous Signature Version: 1.317.184.0"},{"id":"text-96","heading":"Text","content":"Update Source: Microsoft Malware Protection Center"},{"id":"text-97","heading":"Text","content":"Update Stage: Install"},{"id":"text-98","heading":"Text","content":"Signature Type: AntiSpyware"},{"id":"text-99","heading":"Text","content":"Update Type: Full"},{"id":"text-100","heading":"Text","content":"User: NT AUTHORITYNETWORK SERVICE"},{"id":"text-101","heading":"Text","content":"Current Engine Version:"},{"id":"text-102","heading":"Text","content":"Previous Engine Version: 1.1.17100.2"},{"id":"text-103","heading":"Text","content":"Error code: 0x80070652"},{"id":"text-104","heading":"Text","content":"Error description: Another installation is already in progress. Complete that installation before proceeding with this install."},{"id":"text-105","heading":"Text","content":"Error: (05/31/2020 04:16:03 AM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )\nDescription: Microsoft Antimalware has encountered an error trying to update signatures."},{"id":"text-106","heading":"Text","content":"New Signature Version:"},{"id":"text-107","heading":"Text","content":"Previous Signature Version: 1.317.184.0"},{"id":"text-108","heading":"Text","content":"Update Source: Microsoft Malware Protection Center"},{"id":"text-109","heading":"Text","content":"Update Stage: Install"},{"id":"text-110","heading":"Text","content":"Signature Type: AntiVirus"},{"id":"text-111","heading":"Text","content":"Update Type: Full"},{"id":"text-112","heading":"Text","content":"User: NT AUTHORITYNETWORK SERVICE"},{"id":"text-113","heading":"Text","content":"Current Engine Version:"},{"id":"text-114","heading":"Text","content":"Previous Engine Version: 1.1.17100.2"},{"id":"text-115","heading":"Text","content":"Error code: 0x80070652"},{"id":"text-116","heading":"Text","content":"Error description: Another installation is already in progress. Complete that installation before proceeding with this install."},{"id":"text-117","heading":"Text","content":"Error: (05/31/2020 04:16:03 AM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )\nDescription: Microsoft Antimalware has encountered an error trying to update signatures."},{"id":"text-118","heading":"Text","content":"New Signature Version:"},{"id":"text-119","heading":"Text","content":"Previous Signature Version:"},{"id":"text-120","heading":"Text","content":"Update Source: User"},{"id":"text-121","heading":"Text","content":"Update Stage: Install"},{"id":"text-122","heading":"Text","content":"Source Path:"},{"id":"text-123","heading":"Text","content":"Signature Type:"},{"id":"text-124","heading":"Text","content":"Update Type:"},{"id":"text-125","heading":"Text","content":"User: NT AUTHORITYNETWORK SERVICE"},{"id":"text-126","heading":"Text","content":"Current Engine Version:"},{"id":"text-127","heading":"Text","content":"Previous Engine Version:"},{"id":"text-128","heading":"Text","content":"Error code: 0x80070652"},{"id":"text-129","heading":"Text","content":"Error description: Another installation is already in progress. Complete that installation before proceeding with this install."},{"id":"text-130","heading":"Text","content":"Error: (05/31/2020 04:16:03 AM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )\nDescription: Microsoft Antimalware has encountered an error trying to update signatures."},{"id":"text-131","heading":"Text","content":"New Signature Version:"},{"id":"text-132","heading":"Text","content":"Previous Signature Version:"},{"id":"text-133","heading":"Text","content":"Update Source: User"},{"id":"text-134","heading":"Text","content":"Update Stage: Install"},{"id":"text-135","heading":"Text","content":"Source Path:"},{"id":"text-136","heading":"Text","content":"Signature Type:"},{"id":"text-137","heading":"Text","content":"Update Type:"},{"id":"text-138","heading":"Text","content":"User: NT AUTHORITYNETWORK SERVICE"},{"id":"text-139","heading":"Text","content":"Current Engine Version:"},{"id":"text-140","heading":"Text","content":"Previous Engine Version:"},{"id":"text-141","heading":"Text","content":"Error code: 0x80070652"},{"id":"text-142","heading":"Text","content":"Error description: Another installation is already in progress. Complete that installation before proceeding with this install."},{"id":"text-143","heading":"Text","content":"Error: (05/31/2020 04:16:01 AM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )\nDescription: Microsoft Antimalware has encountered an error trying to update signatures."},{"id":"text-144","heading":"Text","content":"New Signature Version:"},{"id":"text-145","heading":"Text","content":"Previous Signature Version: 1.317.184.0"},{"id":"text-146","heading":"Text","content":"Update Source: Microsoft Update Server"},{"id":"text-147","heading":"Text","content":"Update Stage: Download"},{"id":"text-148","heading":"Text","content":"Signature Type: AntiVirus"},{"id":"text-149","heading":"Text","content":"Update Type: Full"},{"id":"text-150","heading":"Text","content":"User: NT AUTHORITYSYSTEM"},{"id":"text-151","heading":"Text","content":"Current Engine Version:"},{"id":"text-152","heading":"Text","content":"Previous Engine Version: 1.1.17100.2"},{"id":"text-153","heading":"Text","content":"Error code: 0x80240016"},{"id":"text-154","heading":"Text","content":"Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support."},{"id":"text-155","heading":"Text","content":"CodeIntegrity:\n==================================="},{"id":"text-156","heading":"Text","content":"Date: 2020-05-31 11:02:57.773\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system."},{"id":"text-157","heading":"Text","content":"Date: 2020-05-31 10:55:42.474\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system."},{"id":"text-158","heading":"Text","content":"Date: 2018-11-15 16:44:27.311\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system."},{"id":"text-159","heading":"Text","content":"Date: 2018-06-20 10:14:07.864\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system."},{"id":"text-160","heading":"Text","content":"Date: 2018-06-18 09:15:44.321\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system."},{"id":"text-161","heading":"Text","content":"Date: 2018-06-18 08:56:24.219\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system."},{"id":"text-162","heading":"Text","content":"Date: 2018-05-16 23:39:56.129\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system."},{"id":"text-163","heading":"Text","content":"Date: 2018-05-16 23:33:38.323\nLa description: \nCode Integrity is unable to verify the image integrity of the file DeviceHarddiskVolume3WindowsSystem32l3codeca.acm because the set of per-page image hashes could not be found on the system."},{"id":"text-164","heading":"Text","content":"==================== Memory info ==========================="},{"id":"text-165","heading":"Text","content":"BIOS: Dell Inc. A25 05/10/2017\nMotherboard: Dell Inc. 0KRC95\nProcessor: Intel® Core™ i5-3550 CPU @ 3.30GHz\nPercentage of memory in use: 96%\nTotal physical RAM: 3982.54 MB\nAvailable physical RAM: 140.28 MB\nTotal Virtual: 7963.21 MB\nAvailable Virtual: 2160.28 MB"},{"id":"text-166","heading":"Text","content":"==================== Drives ================================"},{"id":"text-167","heading":"Text","content":"Drive c: (OS) (Fixed) (Total:232.13 GB) (Free:110.08 GB) NTFS\nDrive z: (Seagate Backup Plus Drive) (Fixed) (Total:1863.01 GB) (Free:1280.23 GB) NTFS"},{"id":"text-168","heading":"Text","content":"\\?Volume03c315c4-e6a3-11e1-be23-806e6f6e6963 (RECOVERY) (Fixed) (Total:0.74 GB) (Free:0.2 GB) NTFS"},{"id":"text-169","heading":"Text","content":"==================== MBR & Partition Table ===================="},{"id":"text-170","heading":"Text","content":"==========================================================\nDisk: 0 (MBR Code: Windows 7 or Vista) (Size: 232.9 GB) (Disk ID: 8AE4B35C)\nPartition 1: (Not Active) – (Size=24 MB) – (Type=DE)\nPartition 2: (Active) – (Size=753 MB) – (Type=07 NTFS)\nPartition 3: (Not Active) – (Size=232.1 GB) – (Type=07 NTFS)\nAttempted reading MBR returned 0 bytes.\n Could not read MBR for disk 1."},{"id":"text-171","heading":"Text","content":"==================== End of Addition.txt ======================="},{"id":"text-172","heading":"Text","content":"Click to rate this post!\n \n [Total: 0 Average: 0]"}],"media":{"primary_image":"https://tutos-gameserver.fr/wp-content/uploads/2020/03/1585419619_meta_image.png"},"relations":[{"rel":"canonical","href":"https://tutos-gameserver.fr/2020/06/01/email-doc-a-ete-clique-et-a-envoye-lutilisateur-a-office365-je-ne-sais-pas-si-linfection-a-egalement-serveur-dimpression/"},{"rel":"alternate","href":"https://tutos-gameserver.fr/2020/06/01/email-doc-a-ete-clique-et-a-envoye-lutilisateur-a-office365-je-ne-sais-pas-si-linfection-a-egalement-serveur-dimpression/llm","type":"text/html"},{"rel":"alternate","href":"https://tutos-gameserver.fr/2020/06/01/email-doc-a-ete-clique-et-a-envoye-lutilisateur-a-office365-je-ne-sais-pas-si-linfection-a-egalement-serveur-dimpression/llm.json","type":"application/json"},{"rel":"llm-manifest","href":"https://tutos-gameserver.fr/llm-endpoints-manifest.json","type":"application/json"}],"http_headers":{"X-LLM-Friendly":"1","X-LLM-Schema":"1.1.0","Content-Security-Policy":"default-src 'none'; img-src * data:; style-src 'unsafe-inline'"},"license":"CC BY-ND 4.0","attribution_required":true,"allow_cors":false}