Serveur d'impression

Setup Proxy 127.0.0.1:86 – Aide à la suppression des virus, chevaux de Troie, logiciels espions et logiciels malveillants – Bien choisir son serveur d impression

Le 12 août 2021 - 58 minutes de lecture

[bzkshopping keyword= »Minecraft » count= »8″ template= »grid »]

Ajout.txt

Résultat d'analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version : 03-08-2021

Couru par Dan (08/05-2021 09:48:46)

Exécuté depuis C:UsersDanDownloads

Windows 10 Pro Version 1909 18363.1316 (X64) (2021-01-21 16:48:04)

Mode de démarrage : Normal

================================================== ========

==================== Comptes : ============================ =

(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée.)

Administrateur (S-1-5-21-1100201080-1795771759-1847257070-500 – Administrateur – Activé) => C:UsersAdministrator

Dan (S-1-5-21-1100201080-1795771759-1847257070-1000 – Administrateur – Activé) => C:UsersDan

Compte par défaut (S-1-5-21-1100201080-1795771759-1847257070-503 – Limité – Désactivé)

Invité (S-1-5-21-1100201080-1795771759-1847257070-501 – Limité – Désactivé)

sshd (S-1-5-21-1100201080-1795771759-1847257070-1001 – Limité – Activé)

WDAGUtilityAccount (S-1-5-21-1100201080-1795771759-1847257070-504 – Limité – Désactivé)

==================== Centre de sécurité ========================

(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée.)

AV : Windows Defender (activé – à jour) D68DDC3A-831F-4fae-9E44-DA132C1ACF46

==================== Programmes installés ======================

(Seuls les programmes publicitaires avec l'indicateur "Caché" peuvent être ajoutés à la liste de correctifs pour les afficher. Les programmes publicitaires doivent être désinstallés manuellement.)

µTorrent (HKUS-1-5-21-1100201080-1795771759-1847257070-1000…uTorrent) (Version : 3.5.5.46036 – BitTorrent Inc.)

µTorrent (HKUS-1-5-21-1100201080-1795771759-1847257070-500…uTorrent) (Version : 3.5.5.45988 – BitTorrent Inc.)

7-Zip 19.00 (x64) (HKLM…7-Zip) (Version : 19.00 – Igor Pavlov)

Adobe Creative Cloud (HKLM-x32…Adobe Creative Cloud) (Version : 5.4.5.550 – Adobe Inc.)

Logiciel de chipset AMD (HKLM-x32…AMD_Chipset_IODrivers) (Version : 2.17.25.506 – Advanced Micro Devices, Inc.)

Logiciel AMD (HKLM…AMD Catalyst Install Manager) (Version : 21.6.1 – Advanced Micro Devices, Inc.)

AMD_Chipset_Drivers (HKLM-x32…9bbdaa84-1315-4bcf-ac55-57449b4228f1) (Version : 2.17.25.506 – Advanced Micro Devices, Inc.) Caché

Apache NetBeans IDE 12.0 (HKLM…nbi-nb-all-12.0.0.0.200529) (Version : 12.0 – Apache NetBeans)

AutoCAD 2020 – Anglais (HKLM…28B89EEF-3001-0409-2102-CF3F3A09B77D) (Version : 23.1.47.0 – Autodesk) Masqué

Gestionnaire d'applications Autodesk 2020 (HKLM-x32…93769E2-0281-4626-88B1-43180365CCDF) (Version : 3.0.0 – Autodesk)

Autodesk AutoCAD 2020 – Anglais (HKLM…AutoCAD 2020 – Anglais) (Version : 23.1.47.0 – Autodesk)

Application de bureau Autodesk (HKLM-x32…Application de bureau Autodesk) (Version : 7.0.14.33 – Autodesk)

Applications en vedette Autodesk 2020 (HKLM-x32…D0194D24-57D6-4FC8-9B80-3B60BFEBA23A) (Version : 3.0.0 – Autodesk)

Service authentique Autodesk (HKLM-x32…317D67F2-9027-4E85-9ED1-ADF4D765AE02) (Version : 3.0.11 – Autodesk)

Bibliothèque de matériaux Autodesk 2020 (HKLM-x32…B9312A51-41B5-479D-9F72-E7448A2D89AF) (Version : 18.11.1.0 – Autodesk)

Bibliothèque d'images de résolution de base de la bibliothèque de matériaux Autodesk 2020 (HKLM-x32…E976988-E753-4C81-BD96-434CE305B176) (Version : 18.11.1.0 – Autodesk)

Autodesk Enregistrer sur Web et mobile (HKLM…26FB18F7-B553-430D-94F6-C2389A91235F) (Version : 3.0.21 – Autodesk)

Composant d'authentification unique Autodesk (HKLM…E3807FC8-DD0A-4D6D-89E9-EAADE00C845C) (Version : 10.22.0.1800 – Autodesk)

Client Badlion (HKLM…1de14785-dd8c-5cd2-aae8-d4a376f81d78) (Version : 3.2.4 – Badlion)

BandLab Assistant 6.4.1 (HKUS-1-5-21-1100201080-1795771759-1847257070-1000…9b08bea4-021c-5f9d-a74e-ac0ceb51fb28) (Version : 6.4.1 – BandLab Technologies)

Boris FX Sapphire Plug-ins 2019.52 pour OFX (HKLM…GenArts Sapphire Plug-ins pour OFX_is1) (Version : 12.520 – Boris FX, Inc.)

Supports (HKLM-x32…43086E55-5B37-4DA8-852F-EEC6C75ECFE9) (Version : 1.14.17770 – brackets.io)

Branding64 (HKLM…C871FC62-0186-40ED-BAEA-7C65BE367755) (Version : 1.00.0006 – Advanced Micro Devices, Inc.) Caché

Brave (HKLM-x32…BraveSoftware Brave-Browser) (Version : 92.1.27.109 – Brave Software Inc)

Pilotes MP de la série Canon E510 (HKLM…1199FAD5-9546-44f3-81CF-FFDB8040B7BF_Canon_E510_series) (Version : 1.03 – Canon Inc.)

Canon IJ Scan Utility (HKLM-x32…Canon_IJ_Scan_Utility) (Version :  – Canon Inc.)

CCleaner (HKLM…CCleaner) (Version : 5.82 – Piriform)

Cloudflare WARP (HKLM…EF5A51EF-A841-41A1-A56C-28EE82799D70) (Version : 1.5.206.0 – Cloudflare, Inc.)

CPUID CPU-Z 1.94 (HKLM…CPUID CPU-Z_is1) (Version : 1.94 – CPUID, Inc.)

Crystal Mod Launcher 1.0.3 (HKUS-1-5-21-1100201080-1795771759-1847257070-1000…8bd3592f-ce97-5bc9-b455-b9edc15a202b) (Version : 1.0.3 – Daniel Scalzi, BestBearr )

Discord (HKUS-1-5-21-1100201080-1795771759-1847257070-1000…Discord) (Version : 0.0.309 – Discord Inc.)

Discord (HKUS-1-5-21-1100201080-1795771759-1847257070-500…Discord) (Version : 1.0.9002 – Discord Inc.)

Dota2Mods V4 4.0.2 (HKUS-1-5-21-1100201080-1795771759-1847257070-500…7573502-2e95-5fbc-8a75-f1af600ae49c) (Version : 4.0.2 – Planetweb.ro )

ffmpeg version 1.0 (HKUS-1-5-21-1100201080-1795771759-1847257070-1000…59A818ED-B65B-4BA4-9227-56EE184ABCBC_is1) (Version : 1.0 – temp#2742)

Genshin Impact (HKLM…Genshin Impact) (Version : 2.10.2.0 – miHoYo Co., Ltd)

Google Chrome (HKLM-x32…Google Chrome) (Version : 92.0.4515.131 – Google LLC)

Assistant de mise à jour Google (HKLM-x32…A92DAB39-4E2C-4304-9AB6-BC44E68B55E2) (Version : 1.3.101.0 – Google LLC) Masqué

Guilded 1.0.996954-release (HKUS-1-5-21-1100201080-1795771759-1847257070-1000…37acac95-e961-5909-9d05-c98f2db949a9) (Version : 1.0.996954-release – Guilded, Inc.)

Tablette Huion v14.8.137.1273 (HKLM…62047893-F186-48B8-83A5-1C74D8666D19_is1) (Version : v14.8.137.1273 – )

IntelliJ IDEA Community Edition 2021.1.3 (HKLM-x32…IntelliJ IDEA Community Edition 2021.1.3) (Version : 211.7628.21 – JetBrains s.r.o.)

Java 8 Update 291 (64 bits) (HKLM…26A24AE4-039D-4CA4-87B4-2F64180291F0) (Version : 8.0.2910.10 – Oracle Corporation)

JetBrains dotPeek 2021.1.3 (HKUS-1-5-21-1100201080-1795771759-1847257070-1000…b3a57a4b-1568-53a0-abd5-fead3d8ca1fc) (Version : 2021.1.3 – JetBrains s.r.o.)

JetBrains ReSharper dans la communauté Visual Studio 2019 (HKUS-1-5-21-1100201080-1795771759-1847257070-1000…6bc9594e-4aea-5807-b8e0-93de364f0a7e) (Version : 2021.1.3 – JetBrains sro)

Programme d'installation de configuration des kits (HKLM-x32…63AAA877-5536-9481-2385-28A082100D78) (Version : 10.1.18362.1 – Microsoft) Masqué

Logitech G HUB (HKLM…521c89be-637f-4274-a840-baaf7460c2b2) (Version : 2021.8.792 – Logitech)

Client lunaire (HKUS-1-5-21-1100201080-1795771759-1847257070-1000…1fcec38f-e773-5444-8669-32b8eb41524b) (Version : 2.7.4 – Moonsworth, LLC)

Client lunaire (HKUS-1-5-21-1100201080-1795771759-1847257070-500…1fcec38f-e773-5444-8669-32b8eb41524b) (Version : 2.5.2 – Moonsworth, LLC)

Applications Microsoft 365 pour les entreprises – en-us (HKLM…O365ProPlusRetail – en-us) (Version : 16.0.14228.20204 – Microsoft Corporation)

Microsoft Edge (HKLM-x32…Microsoft Edge) (Version : 92.0.902.62 – Microsoft Corporation)

Microsoft Edge WebView2 Runtime (HKLM-x32…Microsoft EdgeWebView) (Version : 92.0.902.62 – Microsoft Corporation)

Microsoft OneDrive (HKUS-1-5-21-1100201080-1795771759-1847257070-500…OneDriveSetup.exe) (Version : 21.109.0530.0001 – Microsoft Corporation)

Microsoft Teams (HKUS-1-5-21-1100201080-1795771759-1847257070-1000…Teams) (Version : 1.4.00.4167 – Microsoft Corporation)

Microsoft Teams (HKUS-1-5-21-1100201080-1795771759-1847257070-500…Teams) (Version : 1.4.00.2879 – Microsoft Corporation)

Microsoft Visual Basic/C++ Runtime (x86) (HKLM-x32…C5E3A69D-D391-45A6-A8FB-00B01E2B010D) (Version : 1.1.0 – Microsoft Corporation)

Microsoft Visual C++ 2005 Redistribuable (HKLM-x32…710f4c1c-cc18-4c49-8cbf-51240c89a1a2) (Version : 8.0.61187 – Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM…ad8a2fa1-06e7-4b0d-927d-6e54b3d31028) (Version : 8.0.61186 – Microsoft Corporation)

Microsoft Visual C++ 2008 Redistribuable – x64 9.0.30729.7523 (HKLM…5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4) (Version : 9.0.30729.7523 – Microsoft Corporation)

Microsoft Visual C++ 2008 Redistribuable – x86 9.0.30729.7523 (HKLM-x32…9BE518E6-ECC6-35A9-88E4-87755C07200F) (Version : 9.0.30729.7523 – Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistribuable – 10.0.40219 (HKLM…1D8E6291-B0D5-35EC-8441-6616F567A0F7) (Version : 10.0.40219 – Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistribuable – 10.0.40219 (HKLM-x32…F0C3E5D1-1ADE-321E-8167-68EF0DE699A5) (Version : 10.0.40219 – Microsoft Corporation)

Exécution supplémentaire Microsoft Visual C++ 2012 x64 – 11.0.61135 (HKLM…37B8F9C7-03FB-3253-8781-2517C99D7C00) (Version : 11.0.61135 – Microsoft Corporation)

Microsoft Visual C++ 2012 x64 Exécution minimale – 11.0.61135 (HKLM…CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97) (Version : 11.0.61135 – Microsoft Corporation)

Exécution supplémentaire Microsoft Visual C++ 2012 x86 – 11.0.61135 (HKLM-x32…B175520C-86A2-35A7-8619-86DC379688B9) (Version : 11.0.61135 – Microsoft Corporation)

Microsoft Visual C++ 2012 x86 minimum d'exécution – 11.0.61135 (HKLM-x32…BD95A8CD-1D9F-35AD-981A-3E7925026EBB) (Version : 11.0.61135 – Microsoft Corporation)

Exécution supplémentaire Microsoft Visual C++ 2013 x64 – 12.0.40664 (HKLM…10792BA-551A-3AC0-A7EF-0FAB4156C382) (Version : 12.0.40664 – Microsoft Corporation)

Microsoft Visual C++ 2013 x64 Exécution minimale – 12.0.40664 (HKLM…53CF6934-A98D-3D84-9146-FC4EDF3D5641) (Version : 12.0.40664 – Microsoft Corporation)

Exécution supplémentaire Microsoft Visual C++ 2013 x86 – 12.0.40664 (HKLM-x32…D401961D-3A20-3AC7-943B-6139D5BD490A) (Version : 12.0.40664 – Microsoft Corporation)

Microsoft Visual C++ 2013 x86 Minimum Runtime – 12.0.40664 (HKLM-x32…8122DAB1-ED4D-3676-BB0A-CA368196543E) (Version : 12.0.40664 – Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistribuable (x64) – 14.29.30037 (HKLM-x32…4b2f3795-f407-415e-88d5-8c8ab322909d) (Version : 14.29.30037.0) – Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistribuable (x86) – 14.29.30037 (HKLM-x32…dfea0fad-88b2-4a1f-8536-3f8f9391f4ef) (Version : 14.29.30037.0) – Microsoft Corporation)

Outils Microsoft Visual Studio 2010 pour Office Runtime (x64) (HKLM…47C2CCDB-7A04-3797-992B-A84D3E90258F) (Version : 10.0.60833 – Microsoft Corporation)

Programme d'installation de Microsoft Visual Studio (HKLM…6F320B93-EE3C-4826-85E0-ADF79F8D4C61) (Version : 2.10.2174.31177 – Microsoft Corporation)

Lanceur Minecraft (HKLM-x32…911FBC64-4C64-4B8F-A637-B34832638C86) (Version : 1.0.0.0 – Mojang)

Mozilla Firefox 89.0.2 (x64 en-US) (HKLM…Mozilla Firefox 89.0.2 (x64 en-US)) (Version : 89.0.2 – Mozilla)

Service de maintenance Mozilla (HKLM…MozillaMaintenanceService) (Version : 88.0.1 – Mozilla)

Documents MySQL 8.0 (HKLM-x32…F8EAD01A-824D-4D18-BAD7-B0C3081EB5E4) (Version : 8.0.24 – Oracle Corporation)

Exemples et exemples MySQL 8.0 (HKLM-x32…4E588DA6-6B34-4E2B-8108-89D0447E388A) (Version : 8.0.24 – Oracle Corporation)

NARUTO SHIPPUDEN Ultimate Ninja STORM 4 Road to Boruto Next Generations (HKLM-x32…NARUTO SHIPPUDEN Ultimate Ninja STORM 4 Road to ~629813CA_is1) (Version :  – )

Tous les soirs (x64 en-US) (HKLM…Nightly 91.0a1 (x64 en-US)) (Version : 91.0a1 – Mozilla)

Node.js (HKLM…46B3B986-91F4-44FF-890D-E01C31A623E6) (Version : 15.11.0 – Fondation Node.js)

Npcap (HKLM-x32…NpcapInst) (Version : 1.10 – Projet Nmap)

OBS Studio (HKLM-x32…OBS Studio) (Version : 27.0.1 – Projet OBS)

Composant d'extensibilité en un clic d'Office 16 (HKLM…90160000-008C-0000-1000-0000000FF1CE) (Version : 16.0.14228.20204 – Microsoft Corporation) Masqué

Composant de licence en un clic Office 16 (HKLM…90160000-007E-0000-1000-0000000FF1CE) (Version : 16.0.14228.20204 – Microsoft Corporation) Masqué

Composant de localisation en un clic d'Office 16 (HKLM…90160000-008C-0409-1000-0000000FF1CE) (Version : 16.0.14131.20278 – Microsoft Corporation) Masqué

Bêta de CheatBreaker hors ligne (HKUS-1-5-21-1100201080-1795771759-1847257070-1000…Bêta de CheatBreaker hors ligne) (Version : 00.00.00.09 – CheatBreaker hors ligne)

OpenVPN 2.5.1-I601 amd64 (HKLM…E5931AF4-2A8F-48A5-AFC8-CE9B79C4B19D) (Version : 2.5.020 – OpenVPN, Inc.)

Opera GX Stable 77.0.405.275 (HKUS-1-5-21-1100201080-1795771759-1847257070-500…Opera GX 77.0.4054.275) (Version : 77.0.4054.275 – Logiciel Opera)

Opera GX Stable 77.0.4054.298 (HKUS-1-5-21-1100201080-1795771759-1847257070-1000…Opera GX 77.0.4054.298) (Version : 77.0.4054.298 – Logiciel Opera)

osu ! (HKLM-x32…a20400e5-dddc-4804-8ce1-573a52e7d3cd) (Version : dernière – ppy Pty Ltd)

PicPick (HKLM-x32…PicPick) (Version : 5.1.5 – NGWIN)

Popcorn Time (HKLM-x32…Popcorn Time_is1) (Version : 6.2.1.17 – Popcorn Time) <==== ATTENTION

Pilote Promontory_GPIO (HKLM-x32…B5512BCC-F4CD-4159-86A4-B2AD7D38FFA9) (Version : 2.0.1.0 – Advanced Micro Devices, Inc.) Caché

ProtonVPN (HKLM-x32…FFAFEA09-E7DA-4710-A278-7F0506C96829) (Version : 1.18.5 – Proton Technologies AG) Caché

ProtonVPN (HKLM-x32…ProtonVPN 1.18.5) (Version : 1.18.5 – Proton Technologies AG)

ProtonVPNTap (HKLM-x32…5DA710E2-1B81-4675-BFC5-76BAF63AE1F6) (Version : 1.1.3 – Proton Technologies AG)

Lanceur PvPLounge (HKLM…ad8f9f29-9001-57dc-871c-20ee37a85c88) (Version : 0.2.9 – Digital Ingot, Inc.)

Python 3.9.5 (64 bits) (HKUS-1-5-21-1100201080-1795771759-1847257070-1000…f3d4ed4c-f434-41ef-8469-ffadd80c4ccf) (Version : 3.9.5150.0 – Python Software Foundation)

Python 3.9.5 Ajouter au chemin (64 bits) (HKLM…6504EEE5-2172-4D34-A76D-0372356396B4) (Version : 3.9.5150.0 – Python Software Foundation) Masqué

Interpréteur de base Python 3.9.5 (débogage 64 bits) (HKLM…8FFB26F7-4CCF-4741-8C9A-264BDD0F5C68) (Version : 3.9.5150.0 – Python Software Foundation) Caché

Interpréteur de base Python 3.9.5 (symboles 64 bits) (HKLM…7AE79937-D0A7-4D36-9965-5E91E22E5FFA) (Version : 3.9.5150.0 – Python Software Foundation) Caché

Interpréteur de base Python 3.9.5 (64 bits) (HKLM…FBB6299D-CB58-4177-B6A0-63BFB1C8C3AE) (Version : 3.9.5150.0 – Python Software Foundation) Caché

Bibliothèques de développement Python 3.9.5 (débogage 64 bits) (HKLM…9C8A86E-0205-4821-A084-0008EA107CCD) (Version : 3.9.5150.0 – Python Software Foundation) Caché

Bibliothèques de développement Python 3.9.5 (64 bits) (HKLM…AEE58901-97A1-422A-B964-4FD9BF3327B8) (Version : 3.9.5150.0 – Python Software Foundation) Caché

Documentation Python 3.9.5 (64 bits) (HKLM…4EFE695B-F377-4CB0-90E3-6AEEE22DEFEB) (Version : 3.9.5150.0 – Python Software Foundation) Masqué

Exécutables Python 3.9.5 (débogage 64 bits) (HKLM…E4B94548-B7BF-492D-839A-32851B0B5076) (Version : 3.9.5150.0 – Python Software Foundation) Masqué

Exécutables Python 3.9.5 (symboles 64 bits) (HKLM…62B02C0C-B9B8-49E4-BC06-ABA02223D2BA) (Version : 3.9.5150.0 – Python Software Foundation) Caché

Exécutables Python 3.9.5 (64 bits) (HKLM…843C07B6-040E-4E83-B244-5383247D70AB) (Version : 3.9.5150.0 – Python Software Foundation) Masqué

Python 3.9.5 pip Bootstrap (64 bits) (HKLM…7559EB6B-36F9-4AE8-8970-532E4DC0ECA3) (Version : 3.9.5150.0 – Python Software Foundation) Caché

Bibliothèque standard Python 3.9.5 (débogage 64 bits) (HKLM…DB9DF8C7-EDDB-4FB9-8E65-39BBE13FB31B) (Version : 3.9.5150.0 – Python Software Foundation) Caché

Bibliothèque standard Python 3.9.5 (symboles 64 bits) (HKLM…72FB8CF5-E7CB-4CD2-90B2-39ADC3483845) (Version : 3.9.5150.0 – Python Software Foundation) Caché

Bibliothèque standard Python 3.9.5 (64 bits) (HKLM…F4DC18F4-6323-4BE8-A322-38268831BC24) (Version : 3.9.5150.0 – Python Software Foundation) Masqué

Prise en charge de Python 3.9.5 Tcl/Tk (débogage 64 bits) (HKLM…A52DECFA-2040-4C9B-840D-D836AE967A63) (Version : 3.9.5150.0 – Python Software Foundation) Caché

Prise en charge de Python 3.9.5 Tcl/Tk (symboles 64 bits) (HKLM…9F0D0DF1-B4D0-4760-A174-0CFF5C09D758) (Version : 3.9.5150.0 – Python Software Foundation) Caché

Prise en charge de Python 3.9.5 Tcl/Tk (64 bits) (HKLM…351016A7-AED4-4824-8D2E-2F9ED497CF77) (Version : 3.9.5150.0 – Python Software Foundation) Caché

Suite de tests Python 3.9.5 (débogage 64 bits) (HKLM…3C884419-9FCB-4245-804D-C9D3EB88FD87) (Version : 3.9.5150.0 – Python Software Foundation) Masqué

Suite de tests Python 3.9.5 (symboles 64 bits) (HKLM…F47D09A3-9226-47D6-A1E4-FDE02FAF24D0) (Version : 3.9.5150.0 – Python Software Foundation) Caché

Suite de tests Python 3.9.5 (64 bits) (HKLM…605117B9-EE12-4498-A089-A63219191799) (Version : 3.9.5150.0 – Python Software Foundation) Masqué

Scripts utilitaires Python 3.9.5 (64 bits) (HKLM…420E50F6-A8E8-4098-A321-7DF6B3C3BA82) (Version : 3.9.5150.0 – Python Software Foundation) Masqué

Lanceur Python (HKLM-x32…B6EF11B6-0882-43B1-AA75-4D3BD32A144A) (Version : 3.9.7427.0 – Python Software Foundation)

Processeur rapide x64 (HKLM…B5AD600E-9874-4036-9619-DEBC4A2FDC34) (Version : 3.3.3.0 – CoderBag)

Riot Vanguard (HKLM…Riot Vanguard) (Version :  – Riot Games, Inc.)

RiseupVPN (HKUS-1-5-21-1100201080-1795771759-1847257070-1000…564606a6-d183-4517-8bce-b1d73f4f2cf8) (Version : 0.21.2-16-g97d9bea – Accès au cryptage LEAP Projet)

Roblox Player pour Dan (HKUS-1-5-21-1100201080-1795771759-1847257070-1000…roblox-player) (Version :  – Roblox Corporation)

RyzenMasterSDK (HKLM…16104918-7D6F-452E-B244-5C330E347E98) (Version : 1.2.3.5 – Advanced Micro Devices, Inc.) Caché

Safe Watch (HKUS-1-5-21-1100201080-1795771759-1847257070-500…11b9ea7a-35e8-5cfb-8216-8caab4be266f) (Version : 1.6.24 – )

ShareX (HKLM…82E6AC09-0FEF-4390-AD9F-0DD3F5561EFC_is1) (Version : 13.5.0 – Équipe ShareX)

Slack (HKUS-1-5-21-1100201080-1795771759-1847257070-500…slack) (Version : 4.18.0 – Slack Technologies Inc.)

Client VPN SoftEther (HKLM…softether_sevpnclient) (Version : 4.34.9745 – Projet SoftEther VPN)

Speccy (HKLM…Speccy) (Version : 1.32 – Piriforme)

Vapeur (HKLM-x32…Vapeur) (Version : 2.10.91.91 – Valve Corporation)

Programme d'installation à l'échelle de la machine Teams (HKLM-x32…731F6BAA-A986-45A4-8936-7C3AAAAA760B) (Version : 1.3.0.28779 – Microsoft Corporation)

TLauncher (HKLM-x32…TLauncher2.8) (Version : 2.8 – TLauncher Inc.)

Univers (HKLM…Universe_is1) (Version : 2.2.2 – Red Giant & Team V.R)

VALORANT (HKUS-1-5-21-1100201080-1795771759-1847257070-1000…Riot Game valorant.live) (Version :  – Riot Games, Inc)

VEGAS Pro 18.0 (HKLM…75111FE1-CE55-11EA-8B12-00155D43CFCE) (Version : 18.0.284 – VEGAS)

Lecteur multimédia VLC (HKLM…Lecteur multimédia VLC) (Version : 3.0.12 – VideoLAN)

Voicemeeter, la console de mixage virtuelle (HKLM-x32…VB:Voicemeeter 17359A74-1236-5467) (Version :  – Logiciel VB-Audio)

Package de pilotes Windows – Tablette graphique (WinUsb) USBDevice (04/10/2014 8.33.30.0) (HKLM…142118DF51345EA02D2B1583E102C8FB95FD6D52) (Version : 04/10/2014 8.33.30.0 – Tablette graphique)

Module complémentaire SDK Windows (HKLM-x32…E18618EC-D9DB-4BCE-B382-85ADA2CBB340) (Version : 10.1.0.0 – Microsoft Corporation)

Windscribe (HKLM-x32…fa690e90-ddb0-4f0c-b3f1-136c084e5fc7_is1) (Version : 2.2 Build 10 – Windscribe Limited)

WinRAR 6.00 (HKLM…WinRAR_is1) (Version : 6.00 – lrepacks.ru)

Zoom (HKUS-1-5-21-1100201080-1795771759-1847257070-500…ZoomUMX) (Version : 5.7.4 (804) – Zoom Video Communications, Inc.)

Contributeur de contact ZoomInfo (HKUS-1-5-21-1100201080-1795771759-1847257070-500…Contributeur de contact ZoomInfo) (Version : 62 – )

==================== CLSID personnalisé (liste blanche): ==============

(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé à moins qu'il ne soit répertorié séparément.)

CustomCLSID : HKUS-1-5-21-1100201080-1795771759-1847257070-1000_ClassesCLSID19A6E644-14E6-4A60-B8D7-DD20610A871DInprocServer32 -> C:UsersDanAppDataLocalMicrosoft TeamsMeetingAddin1.0.20289.5x64Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)

CustomCLSID : HKUS-1-5-21-1100201080-1795771759-1847257070-1000_ClassesCLSID2F81B25E-7507-4844-BFF2-77D2CC24CED4localserver32 -> C:Program FilesAdobeAdobe Creative CloudACC Creative Cloud.exe (Adobe Inc. -> Adobe Inc.)

CustomCLSID : HKUS-1-5-21-1100201080-1795771759-1847257070-1000_ClassesCLSIDCB965DF1-B8EA-49C7-BDAD-5457FDC1BF92InprocServer32 -> C:UsersDanAppDataLocalMicrosoft TeamsMeetingAddin1.0.20244.4x64Microsoft.Teams.AddinLoader.dll => Aucun fichier

CustomCLSID : HKUS-1-5-21-1100201080-1795771759-1847257070-1000_ClassesCLSIDe1a7f602-67b7-44f7-ad19-439e41f06cd8localserver32 -> "C:Program FilesGlobal DelightBoom 3D Boom3D.exe" -ToastActivated => Aucun fichier

ShellIconOverlayIdentifiers : [   AccExtIco1] -> AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2021-06-04] (Adobe Inc. -> )

ShellIconOverlayIdentifiers : [   AccExtIco2] -> 853B7E05-C47D-4985-909A-D0DC5C6D7303 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2021-06-04] (Adobe Inc. -> )

ShellIconOverlayIdentifiers : [   AccExtIco3] -> 42D38F2E-98E9-4382-B546-E24E4D6D04BB => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2021-06-04] (Adobe Inc. -> )

ShellIconOverlayIdentifiers : [ OneDrive1] -> BBACC218-34EA-4666-9D7A-C78F2274A524 =>  -> Pas de fichier

ShellIconOverlayIdentifiers : [ OneDrive2] -> 5AB7172C-9C11-405C-8DD5-AF20F3606282 =>  -> Pas de fichier

ShellIconOverlayIdentifiers : [ OneDrive3] -> A78ED123-AB77-406B-9962-2A5D9D2F7F30 =>  -> Pas de fichier

ShellIconOverlayIdentifiers : [ OneDrive4] -> F241C880-6982-4CE5-8CF7-7085BA96DA5A =>  -> Pas de fichier

ShellIconOverlayIdentifiers : [ OneDrive5] -> A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E =>  -> Pas de fichier

ShellIconOverlayIdentifiers : [ OneDrive6] -> 9AA2F32D-362A-42D9-9328-24A483E2CCC3 =>  -> Pas de fichier

ShellIconOverlayIdentifiers : [ OneDrive7] -> C5FF006E-2AE9-408C-B85B-2DFDD5449D9C =>  -> Pas de fichier

ShellIconOverlayIdentifiers : [AutoCAD Digital Signatures Icon Overlay Handler] -> 36A21736-36C2-4C11-8ACB-D4136F2B57BD => C:Windowssystem32AcSignIcon.dll [2019-01-30] (Autodesk, Inc. -> Autodesk, Inc.)

ShellIconOverlayIdentifiers-x32 : [ OneDrive1] -> BBACC218-34EA-4666-9D7A-C78F2274A524 =>  -> Pas de fichier

ShellIconOverlayIdentifiers-x32 : [ OneDrive2] -> 5AB7172C-9C11-405C-8DD5-AF20F3606282 =>  -> Pas de fichier

ShellIconOverlayIdentifiers-x32 : [ OneDrive3] -> A78ED123-AB77-406B-9962-2A5D9D2F7F30 =>  -> Pas de fichier

ShellIconOverlayIdentifiers-x32 : [ OneDrive4] -> F241C880-6982-4CE5-8CF7-7085BA96DA5A =>  -> Pas de fichier

ShellIconOverlayIdentifiers-x32 : [ OneDrive5] -> A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E =>  -> Pas de fichier

ShellIconOverlayIdentifiers-x32 : [ OneDrive6] -> 9AA2F32D-362A-42D9-9328-24A483E2CCC3 =>  -> Pas de fichier

ShellIconOverlayIdentifiers-x32 : [ OneDrive7] -> C5FF006E-2AE9-408C-B85B-2DFDD5449D9C =>  -> Pas de fichier

ContextMenuHandlers1 : [7-Zip] -> 23170F69-40C1-278A-1000-000100020000 => C:Program Files7-Zip7-zip.dll [2019-02-22] (Igor Pavlov) [File not signed]

ContextMenuHandlers1 : [AccExt] -> 2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2021-06-04] (Adobe Inc. -> )

ContextMenuHandlers1 : [AcShellExtension.AcContextMenuHandler] -> 2E7A2C6C-B938-40a4-BA1C-C7EC982DC202 => C:Program FilesCommon FilesAutodesk SharedAcShellExAcShellExtension.dll [2019-01-30] (Autodesk, Inc. -> Autodesk)

ContextMenuHandlers1 : [DriveFS 28 or later] -> EE15C2BD-CECB-49F8-A113-CA1BFC528F5B =>  -> Pas de fichier

ContextMenuHandlers1 : [WinRAR] -> B41DB860-64E4-11D2-9906-E49FADC173CA => C:Program FilesWinRARrarext.dll [2020-12-01] (win.rar GmbH -> Alexandre Roshal)

ContextMenuHandlers1-x32 : [WinRAR32] -> B41DB860-8EE4-11D2-9906-E49FADC173CA => C:Program FilesWinRARrarext32.dll [2020-12-01] (win.rar GmbH -> Alexandre Roshal)

ContextMenuHandlers4 : [7-Zip] -> 23170F69-40C1-278A-1000-000100020000 => C:Program Files7-Zip7-zip.dll [2019-02-22] (Igor Pavlov) [File not signed]

ContextMenuHandlers4 : [DriveFS 28 or later] -> EE15C2BD-CECB-49F8-A113-CA1BFC528F5B =>  -> Pas de fichier

ContextMenuHandlers5 : [ACE] -> 5E2121EE-0300-11D4-8D3B-444553540000 => C:WindowsSystem32atiacm64.dll [2021-06-21] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

ContextMenuHandlers5 : [DriveFS 28 or later] -> EE15C2BD-CECB-49F8-A113-CA1BFC528F5B =>  -> Pas de fichier

ContextMenuHandlers6 : [7-Zip] -> 23170F69-40C1-278A-1000-000100020000 => C:Program Files7-Zip7-zip.dll [2019-02-22] (Igor Pavlov) [File not signed]

ContextMenuHandlers6 : [AccExt] -> 2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4 => C:Program Files (x86)Common FilesAdobeCoreSyncExtensionCoreSync_x64.dll [2021-06-04] (Adobe Inc. -> )

ContextMenuHandlers6 : [WinRAR] -> B41DB860-64E4-11D2-9906-E49FADC173CA => C:Program FilesWinRARrarext.dll [2020-12-01] (win.rar GmbH -> Alexandre Roshal)

ContextMenuHandlers6-x32 : [WinRAR32] -> B41DB860-8EE4-11D2-9906-E49FADC173CA => C:Program FilesWinRARrarext32.dll [2020-12-01] (win.rar GmbH -> Alexandre Roshal)

==================== Codecs (liste blanche) ====================

(Si une entrée est incluse dans la liste de correctifs, l'élément de registre sera restauré par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM…Drivers32 : [VIDC.FICV] => C:Windowssystem32ficvdec_x64.dll [652288 2013-05-29] () [File not signed]

HKLM…Drivers32 : [VIDC.FICV] => C:WindowsSysWOW64ficvdec_x86.dll [641024 2013-05-29] () [File not signed]

==================== Raccourcis & WMI ========================

(Les entrées peuvent être répertoriées pour être restaurées ou supprimées.)

Raccourci : C:ProgramDataMicrosoftWindowsStart MenuProgramsFirefox Nightly.lnk -> C:Program FilesFirefox Nightlyfirefox.exe (Mozilla Corporation)

RaccourciAvecArgument : C:UsersDanDesktopNosWTF (Dan) – Chrome.lnk -> C:Program FilesGoogleChromeApplicationchrome.exe (Google LLC) -> –profile-directory="Default "

RaccourciAvecArgument : C:UsersDanDesktopYouTube.lnk -> C:Program FilesGoogleChromeApplicationchrome_proxy.exe (Google LLC) ->  –profile-directory=Par défaut –app-id= agimnkijcaahngcdmfeangaknmldooml

RaccourciAvecArgument : C:UsersDanAppDataRoamingMicrosoftWindowsStart MenuProgramsChrome AppsYouTube.lnk -> C:Program FilesGoogleChromeApplicationchrome_proxy.exe (Google LLC) – >  –profile-directory=Par défaut –app-id=agimnkijcaahngcdmfeangaknmldooml

RaccourciAvecArgument : C:UsersDanAppDataRoamingMicrosoftInternet ExplorerQuick LaunchUser PinnedImplicitAppShortcuts69639df789022856Nitro (Dan) – Chrome.lnk -> C:Program FilesGoogleChromeApplication chrome.exe (Google LLC) -> –profile-directory="Profile 1"

RaccourciAvecArgument : C:ProgramDataMicrosoftWindowsStart MenuProgramsGoogle Chrome.lnk -> C:Program FilesGoogleChromeApplicationchrome.exe (Google LLC) -> –load-extension=" C:ProgramData4ede5b3d0b9c80aeec2ecc6ce540b940"

ShortcutWithArgument : C:ProgramDataMicrosoftWindowsStart MenuProgramsMicrosoft Edge.lnk -> C:Program Files (x86)MicrosoftEdgeApplicationmsedge.exe (Microsoft Corporation) -> –load- extension="C:ProgramData4ede5b3d0b9c80aeec2ecc6ce540b940"

==================== Modules chargés (liste blanche) =============

2021-07-31 17:05 – 2021-07-31 11:18 – 000634880 _____ () [File not signed] \?C:Program FilesLGHUBresourcesapp.asar.unpackednode_moduleskeytarbuildReleasekeytar.node

2021-01-06 12:26 – 2021-01-06 12:26 – 000017920 _____ () [File not signed] C:Program FilesAMDCNextCNextlibEGL.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 003567616 _____ () [File not signed] C:Program FilesAMDCNextCNextlibGLESv2.dll

2020-03-19 06:40 – 2020-03-19 06:40 – 000912896 _____ () [File not signed] C:Program FilesAMDPerformance Profile Clientaws-cpp-sdk-core.dll

2020-03-19 06:40 – 2020-03-19 06:40 – 003109888 _____ () [File not signed] C:Program FilesAMDPerformance Profile Clientaws-cpp-sdk-s3.dll

2021-06-17 19:40 – 2021-06-17 19:40 – 001704960 _____ (Advanced Micro Devices, Inc.) [File not signed] C:Program FilesAMDWVROpenVRbinwin64driver_amdwvr.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 000031744 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextpluginsimageformatsqgif.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 000039424 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextpluginsimageformatsqicns.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 000031744 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextpluginsimageformatsqico.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 000414720 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextpluginsimageformatsqjpeg.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 000025088 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextpluginsimageformatsqsvg.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 000024576 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextpluginsimageformatsqtga.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 000023552 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextpluginsimageformatsqwbmp.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 000532992 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextpluginsimageformatsqwebp.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 001441792 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextpluginsplatformsqwindows.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 001189888 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextpluginssqldriversqsqlite.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 000134656 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextpluginsstylesqwindowsvistastyle.dll

2021-01-06 12:25 – 2021-01-06 12:25 – 006184448 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQt5Core.dll

2021-01-06 12:25 – 2021-01-06 12:25 – 006867456 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQt5Gui.dll

2021-01-06 12:25 – 2021-01-06 12:25 – 000735232 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQt5Multimedia.dll

2021-01-06 12:25 – 2021-01-06 12:25 – 000120832 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQt5MultimediaQuick.dll

2021-01-06 12:25 – 2021-01-06 12:25 – 001104896 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQt5Network.dll

2021-01-06 12:25 – 2021-01-06 12:25 – 000325120 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQt5Positioning.dll

2021-01-06 12:25 – 2021-01-06 12:25 – 003668480 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQt5Qml.dll

2021-01-06 12:25 – 2021-01-06 12:25 – 000517120 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQt5QmlModels.dll

2021-01-06 12:25 – 2021-01-06 12:25 – 000051712 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQt5QmlWorkerScript.dll

2021-01-06 12:25 – 2021-01-06 12:25 – 004228608 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQt5Quick.dll

2021-01-06 12:25 – 2021-01-06 12:25 – 000171008 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQt5QuickControls2.dll

2021-01-06 12:25 – 2021-01-06 12:25 – 001085440 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQt5QuickTemplates2.dll

2021-01-06 12:25 – 2021-01-06 12:25 – 000480256 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQt5RemoteObjects.dll

2021-01-06 12:25 – 2021-01-06 12:25 – 000205824 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQt5Sql.dll

2021-01-06 12:25 – 2021-01-06 12:25 – 000329728 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQt5Svg.dll

2021-01-06 12:25 – 2021-01-06 12:25 – 000127488 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQt5WebChannel.dll

2021-01-06 12:25 – 2021-01-06 12:25 – 000390656 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQt5WebEngine.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 095598080 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQt5WebEngineCore.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 005587968 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQt5Widgets.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 000462848 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQt5WinExtras.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 000188928 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQt5Xml.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 002878464 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQt5XmlPatterns.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 000055808 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQtGraphicalEffectsprivateqtgraphicaleffectsprivate.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 000059392 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQtGraphicalEffectsqtgraphicaleffectsplugin.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 000262144 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQtMultimediadeclarative_multimedia.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 000017920 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQtQmlqmlplugin.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 000017920 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQtQuick.2qtquick2plugin.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 000284160 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQtQuickControls.2qtquickcontrols2plugin.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 000333824 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQtQuickControlsqtquickcontrolsplugin.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 000136704 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQtQuickDialogsdialogplugin.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 000090112 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQtQuickLayoutsqquicklayoutsplugin.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 000313856 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQtQuickTemplates.2qtquicktemplates2plugin.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 000017920 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQtQuickWindow.2windowplugin.dll

2021-01-06 12:26 – 2021-01-06 12:26 – 000091648 _____ (The Qt Company Ltd.) [File not signed] C:Program FilesAMDCNextCNextQtWebEngineqtwebengineplugin.dll

2021-04-21 09:10 – 2021-04-21 09:10 – 005833216 _____ (University of Tsukuba) [File not signed] C:Program FilesSoftEther VPN ClientVpnGatePlugin_x64.dll

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:ProgramDataReprise:jhqduwvxlctbqqijsf`usjbm`bfjhiqhnhmfh [0]

AlternateDataStreams: C:ProgramDataReprise:jhqduwvxlctbqqijsf`usjbm`pgyjhiqhnhm [0]

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

HKUS-1-5-21-1100201080-1795771759-1847257070-1000SoftwareMicrosoftInternet ExplorerMain,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP

SearchScopes: HKUS-1-5-21-1100201080-1795771759-1847257070-1000 -> DefaultScope 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL =

BHO: IDM integration (IDMIEHlprObj Class) -> 0055C089-8582-441B-A0BF-17B458C2A3A8 -> C:Program Files (x86)Internet Download ManagerIDMIECC64.dll => No File

BHO: Skype for Business Browser Helper -> 31D09BA0-12F5-4CCE-BE8A-2923E76605DA -> C:Program FilesMicrosoft OfficerootOffice16OCHelper.dll [2021-07-23] (Microsoft Corporation -> Microsoft Corporation)

BHO: Java™ Plug-In SSV Helper -> 761497BB-D6F0-462C-B6EB-D4DAF1D92D43 -> C:Program FilesJavajre1.8.0_291binssv.dll [2021-06-07] (Oracle America, Inc. -> Oracle Corporation)

BHO: Java™ Plug-In 2 SSV Helper -> DBC80044-A445-435b-BC74-9C25C1C588A9 -> C:Program FilesJavajre1.8.0_291binjp2ssv.dll [2021-06-07] (Oracle America, Inc. -> Oracle Corporation)

BHO-x32: IDM integration (IDMIEHlprObj Class) -> 0055C089-8582-441B-A0BF-17B458C2A3A8 -> C:Program Files (x86)Internet Download ManagerIDMIECC.dll => No File

BHO-x32: Skype for Business Browser Helper -> 31D09BA0-12F5-4CCE-BE8A-2923E76605DA -> C:Program FilesMicrosoft OfficerootVFSProgramFilesX86Microsoft OfficeOffice16OCHelper.dll [2021-07-23] (Microsoft Corporation -> Microsoft Corporation)

Handler: mso-minsb-roaming.16 – 83C25742-A9F7-49FB-9138-434302C88D07 – C:Program FilesMicrosoft OfficerootOffice16MSOSB.DLL [2021-07-31] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 – 83C25742-A9F7-49FB-9138-434302C88D07 – C:Program FilesMicrosoft OfficerootVFSProgramFilesX86Microsoft OfficeOffice16MSOSB.DLL [2021-07-31] (Microsoft Corporation -> Microsoft Corporation)

Handler: mso-minsb.16 – 42089D2D-912D-4018-9087-2B87803E93FB – C:Program FilesMicrosoft OfficerootOffice16MSOSB.DLL [2021-07-31] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 – 42089D2D-912D-4018-9087-2B87803E93FB – C:Program FilesMicrosoft OfficerootVFSProgramFilesX86Microsoft OfficeOffice16MSOSB.DLL [2021-07-31] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf-roaming.16 – 42089D2D-912D-4018-9087-2B87803E93FB – C:Program FilesMicrosoft OfficerootOffice16MSOSB.DLL [2021-07-31] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 – 42089D2D-912D-4018-9087-2B87803E93FB – C:Program FilesMicrosoft OfficerootVFSProgramFilesX86Microsoft OfficeOffice16MSOSB.DLL [2021-07-31] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf.16 – 5504BE45-A83B-4808-900A-3A5C36E7F77A – C:Program FilesMicrosoft OfficerootOffice16MSOSB.DLL [2021-07-31] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 – 5504BE45-A83B-4808-900A-3A5C36E7F77A – C:Program FilesMicrosoft OfficerootVFSProgramFilesX86Microsoft OfficeOffice16MSOSB.DLL [2021-07-31] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU.DEFAULT…localhost -> localhost

IE trusted site: HKUS-1-5-21-1100201080-1795771759-1847257070-1000…google.com -> hxxps://google.com

IE trusted site: HKUS-1-5-21-1100201080-1795771759-1847257070-1000…localhost -> localhost

IE trusted site: HKUS-1-5-21-1100201080-1795771759-1847257070-500…sharepoint.com -> hxxps://pupedu-files.sharepoint.com

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2021-05-29 11:47 – 2021-07-22 15:24 – 000000822 _____ C:Windowssystem32driversetchosts

2021-07-25 22:47 – 2021-07-26 08:45 – 000000443 _____ C:Windowssystem32driversetchosts.ics

172.17.125.177 DESKTOP-43IHF7V.mshome.net # 2026 7 6 25 0 45 19 167

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLMSystemCurrentControlSetControlSession ManagerEnvironment\Path -> C:Program Files (x86)Common FilesOracleJavajavapath;%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;%SYSTEMROOT%System32WindowsPowerShellv1.0;%SYSTEMROOT%System32OpenSSH;C:Program Filesnodejs;C:Program Files (x86)Bracketscommand

HKUS-1-5-21-1100201080-1795771759-1847257070-1000Control PanelDesktop\Wallpaper -> C:UsersDanAppDataRoamingMicrosoftWindows Photo ViewerWindows Photo Viewer Wallpaper.jpg

HKUS-1-5-21-1100201080-1795771759-1847257070-500Control PanelDesktop\Wallpaper -> C:UsersAdministratorDownloadswallpapereIgMv8P.png

DNS Servers: 8.8.8.8 – 8.8.4.4

HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorer => (SmartScreenEnabled: Off)

Windows Firewall is enabled.

Network Binding:

=============

Bluetooth Network Connection 3: SoftEther Lightweight Network Protocol -> SeLow (enabled)

Bluetooth Network Connection 3: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled)

Ethernet: SoftEther Lightweight Network Protocol -> SeLow (disabled)

Ethernet: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled)

NordLynx: SoftEther Lightweight Network Protocol -> SeLow (enabled)

NordLynx: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled)

OpenVPN TAP-Windows6: SoftEther Lightweight Network Protocol -> SeLow (enabled)

OpenVPN TAP-Windows6: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled)

VPN – VPN Client: SoftEther Lightweight Network Protocol -> SeLow (enabled)

VPN – VPN Client: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled)

Local Area Connection 3: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled)

Local Area Connection 3: SoftEther Lightweight Network Protocol -> SeLow (enabled)

OpenVPN Wintun: SoftEther Lightweight Network Protocol -> SeLow (enabled)

OpenVPN Wintun: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled)

Local Area Connection 4: SoftEther Lightweight Network Protocol -> SeLow (enabled)

Local Area Connection 4: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled)

Local Area Connection: SoftEther Lightweight Network Protocol -> SeLow (enabled)

Local Area Connection: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled)

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

MSCONFIGServices: AdAppMgrSvc => 2

MSCONFIGServices: AdskLicensingService => 2

MSCONFIGServices: CloudflareWARP => 2

MSCONFIGServices: FlexNet Licensing Service => 2

MSCONFIGServices: GoogleChromeElevationService => 3

MSCONFIGServices: gupdate => 2

MSCONFIGServices: gupdatem => 3

MSCONFIGServices: ProtonVPN Service => 3

MSCONFIGServices: ProtonVPN Update Service => 3

MSCONFIGServices: SEVPNCLIENT => 2

HKLM…StartupApprovedStartupFolder: => "Cloudflare WARP.lnk"

HKLM…StartupApprovedStartupFolder: => "SoftEther VPN Client Manager Startup.lnk"

HKLM…StartupApprovedStartupFolder: => "Huion Tablet.lnk"

HKLM…StartupApprovedRun: => "SoftEther VPN Client UI Helper"

HKLM…StartupApprovedRun: => "XMouseButtonControl"

HKLM…StartupApprovedRun: => "Riot Vanguard"

HKLM…StartupApprovedRun: => "UrbanVPN"

HKLM…StartupApprovedRun: => "AdobeGCInvoker-1.0"

HKLM…StartupApprovedRun32: => "SunJavaUpdateSched"

HKLM…StartupApprovedRun32: => "TeamsMachineInstaller"

HKLM…StartupApprovedRun32: => "Autodesk Desktop App"

HKLM…StartupApprovedRun32: => "vmware-tray.exe"

HKLM…StartupApprovedRun32: => "Adobe CCXProcess"

HKLM…StartupApprovedRun32: => "Adobe Creative Cloud"

HKUS-1-5-21-1100201080-1795771759-1847257070-1000…StartupApprovedRun: => "com.squirrel.Teams.Teams"

HKUS-1-5-21-1100201080-1795771759-1847257070-1000…StartupApprovedRun: => "Discord"

HKUS-1-5-21-1100201080-1795771759-1847257070-1000…StartupApprovedRun: => "uTorrent"

HKUS-1-5-21-1100201080-1795771759-1847257070-1000…StartupApprovedRun: => "Snap Camera"

HKUS-1-5-21-1100201080-1795771759-1847257070-1000…StartupApprovedRun: => "TabletDriver"

HKUS-1-5-21-1100201080-1795771759-1847257070-1000…StartupApprovedRun: => "electron.app.Guilded"

HKUS-1-5-21-1100201080-1795771759-1847257070-1000…StartupApprovedRun: => "Boom 3D"

HKUS-1-5-21-1100201080-1795771759-1847257070-1000…StartupApprovedRun: => "Windscribe"

HKUS-1-5-21-1100201080-1795771759-1847257070-1000…StartupApprovedRun: => "ut"

HKUS-1-5-21-1100201080-1795771759-1847257070-1000…StartupApprovedRun: => "winkit"

HKUS-1-5-21-1100201080-1795771759-1847257070-1000…StartupApprovedRun: => "CCleaner Smart Cleaning"

HKUS-1-5-21-1100201080-1795771759-1847257070-500…StartupApprovedStartupFolder: => "ShareX.lnk"

HKUS-1-5-21-1100201080-1795771759-1847257070-500…StartupApprovedStartupFolder: => "GenuineService.lnk"

HKUS-1-5-21-1100201080-1795771759-1847257070-500…StartupApprovedRun: => "com.squirrel.Teams.Teams"

HKUS-1-5-21-1100201080-1795771759-1847257070-500…StartupApprovedRun: => "uTorrent"

HKUS-1-5-21-1100201080-1795771759-1847257070-500…StartupApprovedRun: => "CCleaner Smart Cleaning"

HKUS-1-5-21-1100201080-1795771759-1847257070-500…StartupApprovedRun: => "NordVPN"

HKUS-1-5-21-1100201080-1795771759-1847257070-500…StartupApprovedRun: => "Opera GX Browser Assistant"

HKUS-1-5-21-1100201080-1795771759-1847257070-500…StartupApprovedRun: => "PicPick Start"

HKUS-1-5-21-1100201080-1795771759-1847257070-500…StartupApprovedRun: => "Lync"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [81C8067E-3E8B-4BD5-8B87-97D14391F5F6] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)

FirewallRules: [FB783F7D-4D84-42CD-BD1D-E33C8064EED0] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)

FirewallRules: [E662BEA5-846F-45AF-AB1E-CC9D6CD7D7C8] => (Allow) C:Program Files (x86)Steambincefcef.win7steamwebhelper.exe (Valve -> Valve Corporation)

FirewallRules: [D1398F89-4D40-45D7-89E3-8F73F092DF59] => (Allow) C:Program Files (x86)Steambincefcef.win7steamwebhelper.exe (Valve -> Valve Corporation)

FirewallRules: [C965D189-EA2A-4827-B7FD-7F8BD3F80BBC] => (Allow) D:Steamsteamappscommondota 2 betagamebinwin64dota2.exe (Valve -> )

FirewallRules: [847F8807-F21B-4612-862A-39BEA29A5133] => (Allow) D:Steamsteamappscommondota 2 betagamebinwin64dota2.exe (Valve -> )

FirewallRules: [A8DFB2EA-B9D3-4C1E-AA12-1606F43A4A93] => (Allow) C:Program FilesMicrosoft OfficerootOffice16UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [TCP Query UserB50B19D4-34B8-460D-A06E-5EACF8E76DB8C:program files (x86)minecraft launcherruntimejre-x64binjavaw.exe] => (Allow) C:program files (x86)minecraft launcherruntimejre-x64binjavaw.exe => No File

FirewallRules: [UDP Query User912E3771-409C-4669-8306-A5CEF1197CBCC:program files (x86)minecraft launcherruntimejre-x64binjavaw.exe] => (Allow) C:program files (x86)minecraft launcherruntimejre-x64binjavaw.exe => No File

FirewallRules: [AD3A36B4-774E-40FA-BB9D-8F24BDCB39EE] => (Allow) C:UsersAdministratorAppDataRoamingZoombinZoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)

FirewallRules: [TCP Query User2C0F005D-3BB8-4D57-A519-7A4F770A8E71C:usersadministrator.lunarclientjrezulu8.50.0.53-ca-fx-jre8.0.275-win_x64binjavaw.exe] => (Allow) C:usersadministrator.lunarclientjrezulu8.50.0.53-ca-fx-jre8.0.275-win_x64binjavaw.exe

FirewallRules: [UDP Query UserAAC5248A-3484-47BC-A1BD-65DA64A44CE8C:usersadministrator.lunarclientjrezulu8.50.0.53-ca-fx-jre8.0.275-win_x64binjavaw.exe] => (Allow) C:usersadministrator.lunarclientjrezulu8.50.0.53-ca-fx-jre8.0.275-win_x64binjavaw.exe

FirewallRules: [D515FE1C-84CD-4713-A972-DDABBCB80B49] => (Allow) C:Program FilesSoftEther VPN Clientvpnclient.exe (SoftEther Corporation -> SoftEther VPN Project at University of Tsukuba, Japan.)

FirewallRules: [EFDB0D5D-E5A8-4C45-A7FB-C5F727E102BE] => (Allow) C:Program FilesSoftEther VPN Clientvpnclient_x64.exe (SoftEther Corporation -> SoftEther VPN Project at University of Tsukuba, Japan.)

FirewallRules: [2B0EFDAA-B299-4C7F-A6A8-F6E5E50228EF] => (Allow) C:Program FilesSoftEther VPN Clientvpncmgr.exe (SoftEther Corporation -> SoftEther VPN Project at University of Tsukuba, Japan.)

FirewallRules: [7133EA40-9B9B-4337-AE21-2E0842FD8827] => (Allow) C:Program FilesSoftEther VPN Clientvpncmgr_x64.exe (SoftEther Corporation -> SoftEther VPN Project at University of Tsukuba, Japan.)

FirewallRules: [9638623B-492F-4F8E-8F1C-FA5CF0DC9A92] => (Allow) C:Program FilesSoftEther VPN Clientvpncmd.exe (SoftEther Corporation -> SoftEther VPN Project at University of Tsukuba, Japan.)

FirewallRules: [B911835D-50A4-4FF3-9DE0-B82519C95FD9] => (Allow) C:Program FilesSoftEther VPN Clientvpncmd_x64.exe (SoftEther Corporation -> SoftEther VPN Project at University of Tsukuba, Japan.)

FirewallRules: [9A16D237-DEB4-4C63-8ACE-949FE371BBD0] => (Allow) D:SteamsteamappscommonAim LabAimLab_tb.exe () [File not signed]

FirewallRules: [0C8B3B2B-9D35-4789-8038-A05BC00DCAA1] => (Allow) D:SteamsteamappscommonAim LabAimLab_tb.exe () [File not signed]

FirewallRules: [TCP Query UserC5FE82C0-40C9-4342-9E3E-FECB4A867141D:jump forcejump_forcebinarieswin64jump_force-win64-shipping.exe] => (Allow) D:jump forcejump_forcebinarieswin64jump_force-win64-shipping.exe => No File

FirewallRules: [UDP Query UserF1D7AEE6-8A21-4B32-886A-6BE0270BAD2CD:jump forcejump_forcebinarieswin64jump_force-win64-shipping.exe] => (Allow) D:jump forcejump_forcebinarieswin64jump_force-win64-shipping.exe => No File

FirewallRules: [0DD6CE9E-0834-41CE-8101-68C93849DD56] => (Allow) D:SteamsteamappscommonSCP Secret LaboratorySCPSL.exe (Hubert Moszka Northwood -> )

FirewallRules: [12CED8C9-83A5-443C-A165-9A38114F6B59] => (Allow) D:SteamsteamappscommonSCP Secret LaboratorySCPSL.exe (Hubert Moszka Northwood -> )

FirewallRules: [6D1B9281-2CB0-4A1A-9941-AE611AC2BCCB] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)

FirewallRules: [832DD732-4240-42B1-8346-AF4A7551B45B] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)

FirewallRules: [TCP Query UserD6BCA32B-A14A-4575-8E7D-80957666B009C:usersdan.lunarclientjrezulu8.50.0.53-ca-fx-jre8.0.275-win_x64binjavaw.exe] => (Allow) C:usersdan.lunarclientjrezulu8.50.0.53-ca-fx-jre8.0.275-win_x64binjavaw.exe => No File

FirewallRules: [UDP Query User616FFA52-3540-42BB-AA38-69D54F80D8ADC:usersdan.lunarclientjrezulu8.50.0.53-ca-fx-jre8.0.275-win_x64binjavaw.exe] => (Allow) C:usersdan.lunarclientjrezulu8.50.0.53-ca-fx-jre8.0.275-win_x64binjavaw.exe => No File

FirewallRules: [TCP Query UserCBD3EB54-BFA1-4DA0-8DB9-0D3447D8708AC:usersadministratorappdatalocalmicrosoftteamscurrentteams.exe] => (Allow) C:usersadministratorappdatalocalmicrosoftteamscurrentteams.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [UDP Query UserB7D48BB1-0A59-4106-A10F-1D1DE61D6F20C:usersadministratorappdatalocalmicrosoftteamscurrentteams.exe] => (Allow) C:usersadministratorappdatalocalmicrosoftteamscurrentteams.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [TCP Query User56DBE550-5497-4472-AE91-FB809ECC928EC:program filesvideolanvlcvlc.exe] => (Allow) C:program filesvideolanvlcvlc.exe (VideoLAN -> VideoLAN)

FirewallRules: [UDP Query User44D04369-226E-4620-89CC-41F96E49E84AC:program filesvideolanvlcvlc.exe] => (Allow) C:program filesvideolanvlcvlc.exe (VideoLAN -> VideoLAN)

FirewallRules: [TCP Query User490AAAAF-8EDA-4042-BDA8-4CB9B8F66F09C:usersdanappdatalocalprogramsnicehash minerminer_pluginseb75e920-94eb-11ea-a64d-17be303ea466bins15.01.15lolminer.exe] => (Allow) C:usersdanappdatalocalprogramsnicehash minerminer_pluginseb75e920-94eb-11ea-a64d-17be303ea466bins15.01.15lolminer.exe => No File

FirewallRules: [UDP Query UserCD0B7132-2C69-458F-9F69-899BA1B499B5C:usersdanappdatalocalprogramsnicehash minerminer_pluginseb75e920-94eb-11ea-a64d-17be303ea466bins15.01.15lolminer.exe] => (Allow) C:usersdanappdatalocalprogramsnicehash minerminer_pluginseb75e920-94eb-11ea-a64d-17be303ea466bins15.01.15lolminer.exe => No File

FirewallRules: [TCP Query User74000B45-8FBC-4B45-8679-99F220F369C2C:usersdanappdatalocalprogramsnicehash minerminer_pluginsfa369d10-94eb-11ea-a64d-17be303ea466bins15.1phoenixminer_5.2e_windowsphoenixminer.exe] => (Allow) C:usersdanappdatalocalprogramsnicehash minerminer_pluginsfa369d10-94eb-11ea-a64d-17be303ea466bins15.1phoenixminer_5.2e_windowsphoenixminer.exe => No File

FirewallRules: [UDP Query User6AE2B404-502A-41DF-A822-F67C7E05632BC:usersdanappdatalocalprogramsnicehash minerminer_pluginsfa369d10-94eb-11ea-a64d-17be303ea466bins15.1phoenixminer_5.2e_windowsphoenixminer.exe] => (Allow) C:usersdanappdatalocalprogramsnicehash minerminer_pluginsfa369d10-94eb-11ea-a64d-17be303ea466bins15.1phoenixminer_5.2e_windowsphoenixminer.exe => No File

FirewallRules: [TCP Query User5E30B58E-5ADA-47C9-944C-09EE12FEAEDAC:program files (x86)minecraft launcherruntimejre-legacywindows-x64jre-legacybinjavaw.exe] => (Allow) C:program files (x86)minecraft launcherruntimejre-legacywindows-x64jre-legacybinjavaw.exe

FirewallRules: [UDP Query User6F9D892F-BF45-43B6-AD95-DB0A47276A94C:program files (x86)minecraft launcherruntimejre-legacywindows-x64jre-legacybinjavaw.exe] => (Allow) C:program files (x86)minecraft launcherruntimejre-legacywindows-x64jre-legacybinjavaw.exe

FirewallRules: [TCP Query User9184A337-E0C2-44FE-B1C9-ABB2220498A3C:programdatabadlionclientjre1.8.0_202binjava.exe] => (Allow) C:programdatabadlionclientjre1.8.0_202binjava.exe

FirewallRules: [UDP Query User285B4539-6F82-4B74-8AC7-DBB006CD87B0C:programdatabadlionclientjre1.8.0_202binjava.exe] => (Allow) C:programdatabadlionclientjre1.8.0_202binjava.exe

FirewallRules: [TCP Query UserF98A10DB-75A4-4750-BF4A-623AA24AB7DAD:torque.drifttorque drifttorquedrift.exe] => (Allow) D:torque.drifttorque drifttorquedrift.exe => No File

FirewallRules: [UDP Query User50B44E47-5536-4AE4-A7A0-15B1D894C5BDD:torque.drifttorque drifttorquedrift.exe] => (Allow) D:torque.drifttorque drifttorquedrift.exe => No File

FirewallRules: [TCP Query User02E2148B-753A-486B-ADF9-998AEAC6F7CAC:program filesjavajre1.8.0_281binjavaw.exe] => (Allow) C:program filesjavajre1.8.0_281binjavaw.exe => No File

FirewallRules: [UDP Query User217DD162-1610-4893-A288-B4E376A3CB75C:program filesjavajre1.8.0_281binjavaw.exe] => (Allow) C:program filesjavajre1.8.0_281binjavaw.exe => No File

FirewallRules: [TCP Query User8B9FF986-4D74-4DE9-939E-C96C60F30EC9C:usersdanappdataroamingoffline cheatbreakerjrebinjava.exe] => (Allow) C:usersdanappdataroamingoffline cheatbreakerjrebinjava.exe

FirewallRules: [UDP Query User9D87A13B-53BC-4055-B35B-D1284896B4A4C:usersdanappdataroamingoffline cheatbreakerjrebinjava.exe] => (Allow) C:usersdanappdataroamingoffline cheatbreakerjrebinjava.exe

FirewallRules: [TCP Query User8B32B900-1FDD-4FC5-B386-36920911AEDEC:usersdanappdatalocalprogramsbandlab-assistantbandlab assistant.exe] => (Allow) C:usersdanappdatalocalprogramsbandlab-assistantbandlab assistant.exe (BandLab Singapore Pte Ltd. -> BandLab Technologies)

FirewallRules: [UDP Query UserFD289B0A-D64A-4B0A-B496-89F372F7DBCAC:usersdanappdatalocalprogramsbandlab-assistantbandlab assistant.exe] => (Allow) C:usersdanappdatalocalprogramsbandlab-assistantbandlab assistant.exe (BandLab Singapore Pte Ltd. -> BandLab Technologies)

FirewallRules: [9F0B45E8-E606-4464-A329-51D89FF8DAF8] => (Allow) D:SteamsteamappscommonCounter-Strike Global Offensivecsgo.exe (Valve -> )

FirewallRules: [0CA29436-D315-4E3A-BB98-5EBB9687912B] => (Allow) D:SteamsteamappscommonCounter-Strike Global Offensivecsgo.exe (Valve -> )

FirewallRules: [TCP Query UserDC7816BC-3F8B-4823-BA1D-71219CE679C5C:usersadministratorappdatalocalcitranightly-mingwcitra-qt.exe] => (Allow) C:usersadministratorappdatalocalcitranightly-mingwcitra-qt.exe => No File

FirewallRules: [UDP Query User02A3127D-07D7-4A28-977D-3C8D118893CAC:usersadministratorappdatalocalcitranightly-mingwcitra-qt.exe] => (Allow) C:usersadministratorappdatalocalcitranightly-mingwcitra-qt.exe => No File

FirewallRules: [D31CFFDE-6E17-4623-AD2E-6F159078D107] => (Allow) C:Program FilesMozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [434919F2-8C41-4861-B641-7BE57C24E8C9] => (Allow) C:Program FilesMozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [TCP Query User3849499E-5DF4-4CA1-815C-B86D46ABE308C:program filestixatitixati.exe] => (Allow) C:program filestixatitixati.exe => No File

FirewallRules: [UDP Query UserCD130674-A89B-40C7-B935-0184BABAE8A5C:program filestixatitixati.exe] => (Allow) C:program filestixatitixati.exe => No File

FirewallRules: [739C0008-C3D9-4670-B821-35B4913DCF90] => (Allow) C:UsersDanAppDataRoaminguTorrentuTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)

FirewallRules: [9D3CC26B-5D78-46F3-B622-87451731ED08] => (Allow) C:UsersDanAppDataRoaminguTorrentuTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)

FirewallRules: [38F621EE-8082-4A50-8C12-DB1BAC5EB1D8] => (Allow) C:UsersDanAppDataRoaminguTorrentuTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)

FirewallRules: [35CF3EE4-A12D-4A49-81A0-8A7BBFBCD674] => (Allow) C:UsersDanAppDataRoaminguTorrentuTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)

FirewallRules: [C6FF14EB-B0F5-4DDD-9644-D7B545B9B166] => (Allow) C:UsersDanAppDataRoaminguTorrentuTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)

FirewallRules: [36C5E0E8-5650-4969-8C35-FCD653BD3926] => (Allow) C:UsersDanAppDataRoaminguTorrentuTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)

FirewallRules: [TCP Query User9EB72E9B-81E5-423A-801A-99E63F26EC3AC:usersdanappdataroaming.minecraftsigmajre1.8.0_202binjava.exe] => (Allow) C:usersdanappdataroaming.minecraftsigmajre1.8.0_202binjava.exe => No File

FirewallRules: [UDP Query User3D4E502A-E01D-4158-837C-2ADB6FE412CFC:usersdanappdataroaming.minecraftsigmajre1.8.0_202binjava.exe] => (Allow) C:usersdanappdataroaming.minecraftsigmajre1.8.0_202binjava.exe => No File

FirewallRules: [TCP Query User85EB893F-772C-43CA-8D8F-D5ED786BE419D:gamesneed.for.speed.heat-p2pneed for speed heatneedforspeedheat.exe] => (Allow) D:gamesneed.for.speed.heat-p2pneed for speed heatneedforspeedheat.exe => No File

FirewallRules: [UDP Query UserB6FC0864-8E08-471D-A65A-11D88C8B3C9AD:gamesneed.for.speed.heat-p2pneed for speed heatneedforspeedheat.exe] => (Allow) D:gamesneed.for.speed.heat-p2pneed for speed heatneedforspeedheat.exe => No File

FirewallRules: [865BC969-0058-441B-90B8-796CA78C4950] => (Allow) D:SteamsteamappscommonTeam Fortress 2hl2.exe (Valve -> )

FirewallRules: [7D0A78AF-B4C5-42DC-94A0-7D6F50EB07FA] => (Allow) D:SteamsteamappscommonTeam Fortress 2hl2.exe (Valve -> )

FirewallRules: [TCP Query UserF4D7FA70-DB72-4FCD-B584-9F8C325EF631C:program files (x86)bracketsnode.exe] => (Allow) C:program files (x86)bracketsnode.exe (Adobe Inc. -> Node.js)

FirewallRules: [UDP Query User3B2B79AD-114C-4256-9559-AEDC4041C8F8C:program files (x86)bracketsnode.exe] => (Allow) C:program files (x86)bracketsnode.exe (Adobe Inc. -> Node.js)

FirewallRules: [F17A189A-FD6F-483D-BBEF-4DE7FD35B4A0] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [3BF19233-4EAF-476B-A0A6-002B36503364] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [8FDF7FA0-D701-49A4-A763-AF3385750F93] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [18FFE7A8-3B20-4CA6-A853-CBD9AC55FC75] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [915C4688-46C5-4646-8128-F09B8E54BCB6] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [9AA47BBE-950E-419F-BA5D-ECE8AC72E50F] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [58E65C1A-A523-4E99-B7E9-36EBA898F6BC] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [EA1C7FBC-378E-4CE8-AF6B-CD6688487674] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [TCP Query User98B5772F-55DA-441E-ACE5-9342A76926D7C:usersdan.lunarclientjrezulu8.52.0.23-ca-fx-jre8.0.282-win_x64binjavaw.exe] => (Allow) C:usersdan.lunarclientjrezulu8.52.0.23-ca-fx-jre8.0.282-win_x64binjavaw.exe => No File

FirewallRules: [UDP Query User3BE181CD-0965-4317-A1BA-57179ED3BA99C:usersdan.lunarclientjrezulu8.52.0.23-ca-fx-jre8.0.282-win_x64binjavaw.exe] => (Allow) C:usersdan.lunarclientjrezulu8.52.0.23-ca-fx-jre8.0.282-win_x64binjavaw.exe => No File

FirewallRules: [TCP Query UserB31D4181-B5D3-4679-A987-C317E07E53CAD:intelijintellij idea 2021.1binidea64.exe] => (Allow) D:intelijintellij idea 2021.1binidea64.exe => No File

FirewallRules: [UDP Query User7567EDF8-76B0-40CC-A836-A83299469AE7D:intelijintellij idea 2021.1binidea64.exe] => (Allow) D:intelijintellij idea 2021.1binidea64.exe => No File

FirewallRules: [3D6F4E9D-74DA-4C17-933F-D0EBEC99D85F] => (Allow) LPort=3306

FirewallRules: [1A6CB432-9C19-43EA-88D7-C28C9ECAA06B] => (Allow) LPort=33060

FirewallRules: [TCP Query User6F4C7262-EE1A-4AED-A12C-3FAD3068EFAAD:javaeclispeeclipseeclipse.exe] => (Allow) D:javaeclispeeclipseeclipse.exe (Eclipse.org Foundation, Inc. -> )

FirewallRules: [UDP Query UserD3BFEFAB-4640-4920-9CD8-FB51ADC6C17CD:javaeclispeeclipseeclipse.exe] => (Allow) D:javaeclispeeclipseeclipse.exe (Eclipse.org Foundation, Inc. -> )

FirewallRules: [B46DBD3D-0DE4-42D6-A7AC-D2964C527A26] => (Allow) C:Program FilesBlueStacksHD-Player.exe => No File

FirewallRules: [9A7DAAE2-FF11-409C-A2FA-69806C413585] => (Allow) C:Program FilesFirefox Nightlyfirefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [95DF1776-15C9-4B5E-B625-F5F9374F87A4] => (Allow) C:Program FilesFirefox Nightlyfirefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [TCP Query User8868B3F7-0866-4E46-BC21-774331DA5097C:program filesbadlion clientbadlion client.exe] => (Allow) C:program filesbadlion clientbadlion client.exe (Turtle Entertainment Online, Inc. -> Badlion)

FirewallRules: [UDP Query UserFAF1353E-7890-4316-BF16-D7459487AC13C:program filesbadlion clientbadlion client.exe] => (Allow) C:program filesbadlion clientbadlion client.exe (Turtle Entertainment Online, Inc. -> Badlion)

FirewallRules: [TCP Query User417CAFE4-193D-4BC3-A1E6-C3C2321CF812C:programdatabadlionclientjre1.8.0_202binjavaw.exe] => (Allow) C:programdatabadlionclientjre1.8.0_202binjavaw.exe

FirewallRules: [UDP Query User28E6FC98-06F4-41DB-A840-0445B6D8A4D8C:programdatabadlionclientjre1.8.0_202binjavaw.exe] => (Allow) C:programdatabadlionclientjre1.8.0_202binjavaw.exe

FirewallRules: [TCP Query UserEFF18012-ED11-4C9F-B40A-49C13AE3910BC:program filesbadlion clientbadlion client.exe] => (Allow) C:program filesbadlion clientbadlion client.exe (Turtle Entertainment Online, Inc. -> Badlion)

FirewallRules: [UDP Query User45910905-4C96-4F74-9320-84091851B4DAC:program filesbadlion clientbadlion client.exe] => (Allow) C:program filesbadlion clientbadlion client.exe (Turtle Entertainment Online, Inc. -> Badlion)

FirewallRules: [TCP Query UserDF51A269-4411-4590-B41E-8CD7E0C0186EC:programdatabadlionclientjre1.8.0_202binjavaw.exe] => (Allow) C:programdatabadlionclientjre1.8.0_202binjavaw.exe

FirewallRules: [UDP Query User63ED66EF-D7A1-452E-AF44-457B0CE6411DC:programdatabadlionclientjre1.8.0_202binjavaw.exe] => (Allow) C:programdatabadlionclientjre1.8.0_202binjavaw.exe

FirewallRules: [TCP Query User81D25692-B211-4955-8535-01FE77547CC0C:program files (x86)vbvoicemeetervoicemeeter.exe] => (Allow) C:program files (x86)vbvoicemeetervoicemeeter.exe (Vincent Burel -> VB-AUDIO Software)

FirewallRules: [UDP Query User17A0D93F-7765-4790-9008-8D1CD259517AC:program files (x86)vbvoicemeetervoicemeeter.exe] => (Allow) C:program files (x86)vbvoicemeetervoicemeeter.exe (Vincent Burel -> VB-AUDIO Software)

FirewallRules: [TCP Query User358E5365-A68B-418C-A198-362A0AF7E8A7C:program filesjavajre1.8.0_291binjavaw.exe] => (Allow) C:program filesjavajre1.8.0_291binjavaw.exe

FirewallRules: [UDP Query UserF66CC8F5-8B2D-4397-8A98-160E2FE37B52C:program filesjavajre1.8.0_291binjavaw.exe] => (Allow) C:program filesjavajre1.8.0_291binjavaw.exe

FirewallRules: [TCP Query User484F18AE-AFDF-4FA7-8A4B-13ABED36D422D:genshin impactgenshin impact gamegenshinimpact.exe] => (Allow) D:genshin impactgenshin impact gamegenshinimpact.exe (miHoYo Co.,Ltd. -> )

FirewallRules: [UDP Query UserB130759A-08AD-45D9-88F4-2451D71B7B98D:genshin impactgenshin impact gamegenshinimpact.exe] => (Allow) D:genshin impactgenshin impact gamegenshinimpact.exe (miHoYo Co.,Ltd. -> )

FirewallRules: [TCP Query UserB402FFA6-0DDB-49D4-98DB-3C2F082A3AF2C:program files (x86)minecraft launcherruntimejava-runtime-alphawindows-x64java-runtime-alphabinjavaw.exe] => (Allow) C:program files (x86)minecraft launcherruntimejava-runtime-alphawindows-x64java-runtime-alphabinjavaw.exe

FirewallRules: [UDP Query User4DF77F43-F5CB-4F25-B98D-1C0DF1B82F35C:program files (x86)minecraft launcherruntimejava-runtime-alphawindows-x64java-runtime-alphabinjavaw.exe] => (Allow) C:program files (x86)minecraft launcherruntimejava-runtime-alphawindows-x64java-runtime-alphabinjavaw.exe

FirewallRules: [TCP Query User95B2408D-598C-49EE-839E-B734203C7BABC:program filesjavajdk-15.0.2binjavaw.exe] => (Allow) C:program filesjavajdk-15.0.2binjavaw.exe => No File

FirewallRules: [UDP Query User7B53BB70-F5BE-49FF-B1E7-242AE9E7C835C:program filesjavajdk-15.0.2binjavaw.exe] => (Allow) C:program filesjavajdk-15.0.2binjavaw.exe => No File

FirewallRules: [F30E1C50-C722-4766-94A2-4DBFC2D9EC94] => (Allow) C:Program FilesCloudflareCloudflare WARPwarp-svc.exe (Cloudflare, Inc. -> )

FirewallRules: [TCP Query User3AAE31F8-4992-4F8C-A1B0-9F937D48BB18C:programdatabadlionclientjre1.16.0_1binjavaw.exe] => (Allow) C:programdatabadlionclientjre1.16.0_1binjavaw.exe

FirewallRules: [UDP Query UserF01C3CDD-7AD3-4EC9-849C-C6FEA8AAFD5BC:programdatabadlionclientjre1.16.0_1binjavaw.exe] => (Allow) C:programdatabadlionclientjre1.16.0_1binjavaw.exe

FirewallRules: [TCP Query User5905F596-A570-443D-A142-DB38450D671AC:usersdan.lunarclientjrezulu16.30.15-ca-fx-jre16.0.1-win_x64binjavaw.exe] => (Allow) C:usersdan.lunarclientjrezulu16.30.15-ca-fx-jre16.0.1-win_x64binjavaw.exe

FirewallRules: [UDP Query User8CEF8322-4B3C-4FDF-9F57-D575E691D805C:usersdan.lunarclientjrezulu16.30.15-ca-fx-jre16.0.1-win_x64binjavaw.exe] => (Allow) C:usersdan.lunarclientjrezulu16.30.15-ca-fx-jre16.0.1-win_x64binjavaw.exe

FirewallRules: [TCP Query User39B86EB7-72D2-4BB5-AE31-058B7F59C3C0C:usersdanappdataroaming.tlauncherjvmsjre1.8.0_281binjavaw.exe] => (Allow) C:usersdanappdataroaming.tlauncherjvmsjre1.8.0_281binjavaw.exe

FirewallRules: [UDP Query User8A6D0B85-97DF-4F11-B6C7-76A29BFB9176C:usersdanappdataroaming.tlauncherjvmsjre1.8.0_281binjavaw.exe] => (Allow) C:usersdanappdataroaming.tlauncherjvmsjre1.8.0_281binjavaw.exe

FirewallRules: [TCP Query UserA111351F-0C3A-42CF-A813-B19A726C537CC:program filesjavajdk1.8.0_202binjava.exe] => (Allow) C:program filesjavajdk1.8.0_202binjava.exe => No File

FirewallRules: [UDP Query User8CF79C8B-48B2-4F28-B8C9-EF22939BCEF6C:program filesjavajdk1.8.0_202binjava.exe] => (Allow) C:program filesjavajdk1.8.0_202binjava.exe => No File

FirewallRules: [A2D4D694-1845-4B91-8E33-C67ED81183E3] => (Allow) C:Program Files (x86)Popcorn TimeUpdater.exe (Popcorn Time) [File not signed]

FirewallRules: [54607048-4CBF-4068-B1C1-E1E0CFA58BC3] => (Allow) C:Program Files (x86)Popcorn TimeUpdater.exe (Popcorn Time) [File not signed]

FirewallRules: [E9F26B9C-ABB2-4346-BAB4-702360CD1413] => (Allow) C:Program Files (x86)Popcorn TimePopcornTimeDesktop.exe () [File not signed]

FirewallRules: [707B90D1-ECC9-4EEE-903C-CF359CA9DC22] => (Allow) C:Program Files (x86)Popcorn TimePopcornTimeDesktop.exe () [File not signed]

FirewallRules: [0751F015-42A6-4E2A-BD09-CF0971CC4B58] => (Allow) C:Program Files (x86)Popcorn Timenodejsnode.exe (Node.js Foundation -> Node.js)

FirewallRules: [01B16CF0-06C1-4937-A0A3-3EE4EDC40733] => (Allow) C:Program Files (x86)Popcorn Timenodejsnode.exe (Node.js Foundation -> Node.js)

FirewallRules: [28AE559B-7A66-45BE-9F1E-6B9A7F7BAF94] => (Allow) C:Program Files (x86)Popcorn Timechromecastnode.exe (Joyent Inc -> Joyent, Inc)

FirewallRules: [54B7B241-7135-43FE-B05E-D6FBF2940B4B] => (Allow) C:Program Files (x86)Popcorn Timechromecastnode.exe (Joyent Inc -> Joyent, Inc)

FirewallRules: [8AD5CE36-F95F-4746-9DFB-5DF0E47EC201] => (Allow) C:UsersAdministratorAppDataLocalProgramssafe-watchsafe-watch.exe (OPEN VIDEO, TOV -> GitHub, Inc.)

FirewallRules: [D1ACD2F1-0803-4A4B-B201-D3187BA16F2F] => (Allow) C:UsersDanAppDataRoaminguTorrentuTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)

FirewallRules: [9B554836-B400-4586-AC5E-35F7DBDDC78C] => (Allow) C:UsersDanAppDataRoaminguTorrentuTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)

FirewallRules: [TCP Query UserB13AD28E-B8AD-4BDB-86A9-8C0FD795D969C:program fileslghublghub_agent.exe] => (Allow) C:program fileslghublghub_agent.exe (Logitech Inc -> Logitech, Inc.)

FirewallRules: [UDP Query User92F11454-FB65-4992-A3FC-57B9F1C75B17C:program fileslghublghub_agent.exe] => (Allow) C:program fileslghublghub_agent.exe (Logitech Inc -> Logitech, Inc.)

FirewallRules: [TCP Query User7C4F8552-A042-4F4F-BA3A-D094109899B9C:riot gamesriot clientriotclientservices.exe] => (Allow) C:riot gamesriot clientriotclientservices.exe (Riot Games, Inc. -> Riot Games, Inc.)

FirewallRules: [UDP Query User77595358-752F-48B9-9276-C7BB6603DB59C:riot gamesriot clientriotclientservices.exe] => (Allow) C:riot gamesriot clientriotclientservices.exe (Riot Games, Inc. -> Riot Games, Inc.)

FirewallRules: [E82079CD-4734-4826-93AE-E0D69D0CF311] => (Allow) C:UsersAdministratorAppDataLocalProgramsOpera GX77.0.4054.257opera.exe (Opera Software AS -> Opera Software)

FirewallRules: [074DE57F-277F-4634-BCB9-EE18A97EF834] => (Allow) C:UsersAdministratorAppDataLocalProgramsOpera GX77.0.4054.275opera.exe (Opera Software AS -> Opera Software)

FirewallRules: [DB23CF69-B880-4D2D-9252-DDFA50F6D684] => (Allow) C:Program FilesMicrosoft OfficerootOffice16outlook.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [07DC1FFC-D517-4E02-A03B-6112821CBEB5] => (Allow) C:Program FilesMicrosoft OfficerootOffice16Lync.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [2FAF489C-A90E-4B37-A625-019211D9FD91] => (Allow) C:Program FilesMicrosoft OfficerootOffice16Lync.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [52437639-0069-4B02-A7C1-BFCDD0FEC29B] => (Allow) C:Program FilesMicrosoft OfficerootOffice16UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [TCP Query User80389905-651C-4512-B015-C0D7740FF5D7C:usersdanappdataroaming.minecraftruntimejre-legacywindowsjre-legacybinjavaw.exe] => (Allow) C:usersdanappdataroaming.minecraftruntimejre-legacywindowsjre-legacybinjavaw.exe

FirewallRules: [UDP Query UserA0A247F6-3D4B-4E38-BE9A-47B456A8F514C:usersdanappdataroaming.minecraftruntimejre-legacywindowsjre-legacybinjavaw.exe] => (Allow) C:usersdanappdataroaming.minecraftruntimejre-legacywindowsjre-legacybinjavaw.exe

FirewallRules: [TCP Query User97931313-7068-4409-A822-4A89619EBB31C:usersdandownloadspenumbra launcherruntimejre1.8.0_51binjava.exe] => (Allow) C:usersdandownloadspenumbra launcherruntimejre1.8.0_51binjava.exe

FirewallRules: [UDP Query User455C86D3-85FF-48F5-9529-94C726F61BE5C:usersdandownloadspenumbra launcherruntimejre1.8.0_51binjava.exe] => (Allow) C:usersdandownloadspenumbra launcherruntimejre1.8.0_51binjava.exe

FirewallRules: [E1E1BB9E-3068-432F-96DB-7E452C91CDBD] => (Allow) C:Program FilesBraveSoftwareBrave-BrowserApplicationbrave.exe (Brave Software, Inc. -> Brave Software, Inc.)

FirewallRules: [TCP Query User3E33F74B-53C6-49F8-BADF-7F7F3E8D4728C:usersdanappdatalocalprogramsopera gx77.0.4054.275opera.exe] => (Allow) C:usersdanappdatalocalprogramsopera gx77.0.4054.275opera.exe (Opera Software AS -> Opera Software)

FirewallRules: [UDP Query User036B6833-1918-4B8B-98E6-6D46B9238AF6C:usersdanappdatalocalprogramsopera gx77.0.4054.275opera.exe] => (Allow) C:usersdanappdatalocalprogramsopera gx77.0.4054.275opera.exe (Opera Software AS -> Opera Software)

FirewallRules: [45979927-7BC2-492D-AA17-5F410A47E6DE] => (Allow) C:Program Files (x86)MicrosoftEdgeWebViewApplication92.0.902.62msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [64D80890-A07D-4733-81BA-F96F2E82E5A9] => (Allow) C:UsersAdministratorAppDataRoamingZoombinZoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)

FirewallRules: [893BA1DE-0408-436F-BC80-9686BD4BDAD9] => (Allow) C:UsersAdministratorAppDataRoamingZoombinairhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)

FirewallRules: [02B3AD38-2F9D-4528-B84B-89A6DBA53864] => (Allow) C:UsersAdministratorAppDataRoamingZoombinairhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)

FirewallRules: [6A0265D9-130B-497D-B864-55FB027BBF66] => (Allow) C:Program FilesGoogleChromeApplicationchrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

25-07-2021 09:28:36 rsre

25-07-2021 19:04:47 Windows Modules Installer

26-07-2021 10:28:39 Windows Modules Installer

27-07-2021 11:44:18 Installed DirectX

05-08-2021 09:10:26 restorepoint

==================== Faulty Device Manager Devices ============

Name: High precision event timer

Description: High precision event timer

Class Guid: 4d36e97d-e325-11ce-bfc1-08002be10318

Manufacturer: (Standard system devices)

Service:

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: NordLynx Tunnel

Description: NordLynx Tunnel

Class Guid:

Manufacturer:

Service:

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

==================== Event log errors: ========================

Application errors:

==================

Error: (08/05/2021 09:49:41 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )

Description: Failed to schedule Software Protection service for re-start at 2021-08-06T01:04:41Z. Error Code: 0x80070002.

Error: (08/05/2021 09:49:11 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )

Description: Failed to schedule Software Protection service for re-start at 2021-08-06T01:05:11Z. Error Code: 0x80070002.

Error: (08/05/2021 09:48:41 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )

Description: Failed to schedule Software Protection service for re-start at 2021-08-06T01:04:41Z. Error Code: 0x80070002.

Error: (08/05/2021 09:48:11 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )

Description: Failed to schedule Software Protection service for re-start at 2021-08-06T01:05:11Z. Error Code: 0x80070002.

Error: (08/05/2021 09:47:41 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )

Description: Failed to schedule Software Protection service for re-start at 2021-08-06T01:04:41Z. Error Code: 0x80070002.

Error: (08/05/2021 09:47:11 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )

Description: Failed to schedule Software Protection service for re-start at 2021-08-06T01:05:11Z. Error Code: 0x80070002.

Error: (08/05/2021 09:46:41 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )

Description: Failed to schedule Software Protection service for re-start at 2021-08-06T01:04:41Z. Error Code: 0x80070002.

Error: (08/05/2021 09:46:11 AM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )

Description: Failed to schedule Software Protection service for re-start at 2021-08-06T01:05:11Z. Error Code: 0x80070002.

System errors:

=============

Error: (08/05/2021 09:26:43 AM) (Source: DCOM) (EventID: 10010) (User: WIN-KGJ2DPDON1K)

Description: The server 7022A3B3-D004-4F52-AF11-E9E987FEE25F did not register with DCOM within the required timeout.

Error: (08/05/2021 09:24:14 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Windows Perception Service service terminated unexpectedly.  It has done this 5 time(s).  The following corrective action will be taken in 1000 milliseconds: Run the configured recovery program.

Error: (08/05/2021 09:24:12 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Windows Perception Service service terminated unexpectedly.  It has done this 4 time(s).  The following corrective action will be taken in 1000 milliseconds: Restart the service.

Error: (08/05/2021 09:24:11 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Windows Perception Service service terminated unexpectedly.  It has done this 3 time(s).  The following corrective action will be taken in 1000 milliseconds: Restart the service.

Error: (08/05/2021 09:24:10 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Windows Perception Service service terminated unexpectedly.  It has done this 2 time(s).  The following corrective action will be taken in 1000 milliseconds: Restart the service.

Error: (08/05/2021 09:24:08 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: The Windows Perception Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 1000 milliseconds: Restart the service.

Error: (08/05/2021 09:24:05 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The Ds3Service service failed to start due to the following error:

The system cannot find the file specified.

Error: (08/05/2021 09:23:36 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The OpenSSH SSH Server service terminated unexpectedly.  It has done this 1 time(s).

Windows Defender:

=================

Date: 2021-07-25 06:58:27.332

Description:

Windows Defender Antivirus has detected malware or other potentially unwanted software.

For more information please see the following:

Name: HackTool:Win64/AutoKMS

Severity: High

Category: Tool

Path: file:_C:WindowsSECOH-QAD.dll; file:_C:WindowsSECOH-QAD.exe

Detection Origin: Local machine

Detection Type: Concrete

Detection Source: System

Process Name: Unknown

Security intelligence Version: AV: 1.343.1565.0, AS: 1.343.1565.0, NIS: 1.343.1565.0

Engine Version: AM: 1.1.18300.4, NIS: 1.1.18300.4

Date: 2021-07-22 14:30:17.075

Description:

Windows Defender Antivirus has detected malware or other potentially unwanted software.

For more information please see the following:

Name: TrojanDropper:BAT/MalVbsDrper.C

Severity: Severe

Category: Trojan Dropper

Path: file:_D:DownloadsGCApplicationsBatch_ReachcLEANER.bat

Detection Origin: Local machine

Detection Type: Concrete

Detection Source: Real-Time Protection

Process Name: C:Windowsexplorer.exe

Security intelligence Version: AV: 1.343.1433.0, AS: 1.343.1433.0, NIS: 1.343.1433.0

Engine Version: AM: 1.1.18300.4, NIS: 1.1.18300.4

Date: 2021-07-17 15:29:10.717

Description:

Windows Defender Antivirus has detected malware or other potentially unwanted software.

For more information please see the following:

Name: HackTool:Win64/AutoKMS

Severity: High

Category: Tool

Path: file:_C:WindowsSECOH-QAD.dll; file:_C:WindowsSECOH-QAD.exe

Detection Origin: Local machine

Detection Type: Concrete

Detection Source: User

Process Name: Unknown

Security intelligence Version: AV: 1.343.1149.0, AS: 1.343.1149.0, NIS: 1.343.1149.0

Engine Version: AM: 1.1.18300.4, NIS: 1.1.18300.4

Date: 2021-07-31 17:16:07.822

Description:

Windows Defender Antivirus has encountered an error trying to update security intelligence.

New security intelligence Version:

Previous security intelligence Version: 1.343.1963.0

Update Source: Microsoft Malware Protection Center

Security intelligence Type: AntiVirus

Update Type: Full

Current Engine Version:

Previous Engine Version: 1.1.18300.4

Error code: 0x80072ee7

Error description: The server name or address could not be resolved

Date: 2021-07-31 17:16:07.821

Description:

Windows Defender Antivirus has encountered an error trying to update security intelligence.

New security intelligence Version:

Previous security intelligence Version: 1.343.1963.0

Update Source: Microsoft Malware Protection Center

Security intelligence Type: AntiSpyware

Update Type: Full

Current Engine Version:

Previous Engine Version: 1.1.18300.4

Error code: 0x80072ee7

Error description: The server name or address could not be resolved

Date: 2021-07-31 17:16:07.820

Description:

Windows Defender Antivirus has encountered an error trying to update security intelligence.

New security intelligence Version:

Previous security intelligence Version: 1.343.1963.0

Update Source: Microsoft Malware Protection Center

Security intelligence Type: AntiVirus

Update Type: Full

Current Engine Version:

Previous Engine Version: 1.1.18300.4

Error code: 0x80072ee7

Error description: The server name or address could not be resolved

Date: 2021-07-31 17:16:07.813

Description:

Windows Defender Antivirus has encountered an error trying to update security intelligence.

New security intelligence Version:

Previous security intelligence Version: 1.343.1963.0

Update Source: Microsoft Malware Protection Center

Security intelligence Type: AntiVirus

Update Type: Full

Current Engine Version:

Previous Engine Version: 1.1.18300.4

Error code: 0x80072ee7

Error description: The server name or address could not be resolved

Date: 2021-07-31 17:16:07.813

Description:

Windows Defender Antivirus has encountered an error trying to update security intelligence.

New security intelligence Version:

Previous security intelligence Version: 1.343.1963.0

Update Source: Microsoft Malware Protection Center

Security intelligence Type: AntiSpyware

Update Type: Full

Current Engine Version:

Previous Engine Version: 1.1.18300.4

Error code: 0x80072ee7

Error description: The server name or address could not be resolved

==================== Memory info ===========================

BIOS: American Megatrends Inc. P3.30 07/31/2019

Motherboard: ASRock A320M-HDV R4.0

Processor: AMD Ryzen 3 3200G with Radeon Vega Graphics

Percentage of memory in use: 37%

Total physical RAM: 14264.89 MB

Available physical RAM: 8948.35 MB

Total Virtual: 17592.89 MB

Available Virtual: 10872.48 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.18 GB) (Free:18.38 GB) NTFS

Drive d: (Games) (Fixed) (Total:465.75 GB) (Free:175.55 GB) NTFS

\?Volume311d18b5-4eec-4494-9c4e-c23e4bd8fb6b () (Fixed) (Total:0.49 GB) (Free:0.09 GB) NTFS

\?Volumef7c123fe-6972-406b-a451-77a60fa84741 () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================

Disk: 0 (Protective MBR) (Size: 465.8 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================

Disk: 1 (Protective MBR) (Size: 111.8 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt =======================

Commentaires

Laisser un commentaire

Votre commentaire sera révisé par les administrateurs si besoin.