Question about suspicious processes: remote proxy intermittently connecting - Virus, Trojan, Spyware, and Malware Removal Help (2024)

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01.06.2024

Ran by lcone (04-06-2024 01:02:56)

Running from C:\Users\lcone\Downloads

Microsoft Windows 11 Home Version 23H2 22631.3593 (X64) (2023-03-12 01:21:52)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-3582097181-4158356751-2855229883-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-3582097181-4158356751-2855229883-503 - Limited - Disabled)

Guest (S-1-5-21-3582097181-4158356751-2855229883-501 - Limited - Disabled)

lcone (S-1-5-21-3582097181-4158356751-2855229883-1003 - Administrator - Enabled) => C:\Users\lcone

WDAGUtilityAccount (S-1-5-21-3582097181-4158356751-2855229883-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Norton Security (Enabled - Up to date) {A2708B76-6835-6565-CB96-694212954A75}

AV: Malwarebytes (Enabled - Up to date) {0D452135-A081-B000-D6B6-132E52638543}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Norton Security (Disabled - Out of date) {AECE2126-F4E7-6909-11F2-1B69D1FBCBD0}

AV: Norton Security (Disabled - Out of date) {9E3FD331-C4C2-7AC4-0537-131EEF1B1F8A}

FW: Norton Security (Enabled) {9A4B0A53-225A-643D-E0C9-C077EC460D0E}

FW: Norton Security (Disabled) {A6045214-8EAD-7B9C-2E68-BA2B11C858F1}

FW: Norton Security (Disabled) {96F5A003-BE88-6851-3AAD-B25C2F288CAB}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov)

Ableton Live 11 Lite (HKLM\...\{F04D689D-E614-4E66-972D-235C9FF5F29D}) (Version: 11.0.0.0 - Ableton) Hidden

Ableton Live 11 Lite (HKLM-x32\...\{0d3082dd-89e0-416d-851e-efe859e3a99f}) (Version: 11.0.0.0 - Ableton)

Ableton Push Driver v5.50.0 (HKLM\...\{8CE98F88-3F07-4338-A036-B66414F3FD66}) (Version: 5.50.0 - Ableton) Hidden

Adobe After Effects 2023 (HKLM-x32\...\AEFT_23_5) (Version: 23.5 - Adobe Inc.)

Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 6.2.0.554 - Adobe Inc.)

Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.330 - Adobe)

Adobe Media Encoder 2023 (HKLM-x32\...\AME_23_5) (Version: 23.5 - Adobe Inc.)

Adobe Photoshop 2023 (HKLM-x32\...\PHSP_24_6) (Version: 24.6.0.573 - Adobe Inc.)

Adobe Premiere Pro 2023 (HKLM-x32\...\PPRO_23_5) (Version: 23.5 - Adobe Inc.)

Ample Guitar M Lite II version 2.3.1 (HKLM-x32\...\{548F88E8-79D2-441F-B87B-E71754257651}_is1) (Version: 2.3.1 - Ample Sound Technology Co., Ltd.)

Analog Lab 4 4.2.3 (HKLM-x32\...\Analog Lab 4_is1) (Version: 4.2.3 - Arturia)

Analog Lab V 5.5.2 (HKLM-x32\...\Analog Lab V_is1) (Version: 5.5.2 - Arturia)

Arturia Software Center 2.7.0 (HKLM-x32\...\Arturia Software Center_is1) (Version: 2.7.0 - Arturia)

Arturia USB MIDI Driver v1.0.1 (HKLM-x32\...\Software_Arturia_arturiausbmidi_Setup) (Version: 1.0.1 - Arturia)

ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.14 - Michael Tippach)

Blackmagic RAW Common Components (HKLM\...\{BF8B97B1-9BEE-422A-9893-AC7A52ACA23A}) (Version: 3.3 - Blackmagic Design)

Camel Audio CamelCrusher64 (HKLM-x32\...\Camel Audio CamelCrusher64) (Version: 1.01.0 - Camel Audio)

CDXtract 4 demo (HKLM-x32\...\CDXTRACT 4 demo_is1) (Version: - CDXTRACT.COM)

Citra (HKU\S-1-5-21-3582097181-4158356751-2855229883-1003\...\{778e6aad-023e-4afb-8449-3e2c15cd923b}) (Version: 1.0.0 - Citra Team)

Documentation Manager (HKLM\...\{669FA6D8-9A73-40F5-907C-9C8CCE1BB091}) (Version: 22.160.0.4 - Intel Corporation) Hidden

Dodo MIDI version 2.0 (HKLM-x32\...\Dodo MIDI_is1) (Version: 2.0 - )

Dragon Center (HKLM-x32\...\InstallShield_{C65B26BC-5A6F-4135-9678-55A877655471}) (Version: 2.6.1909.0202 - Micro-Star International Co., Ltd.)

Dropbox (HKLM-x32\...\Dropbox) (Version: 200.4.7134 - Dropbox, Inc.)

Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.863.1 - Dropbox, Inc.) Hidden

FL Studio 20 (HKLM-x32\...\FL Studio 20) (Version: - Image-Line)

FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version: - Image-Line)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 125.0.6422.141 - Google LLC)

GTK2-Runtime (HKLM-x32\...\GTK2-Runtime) (Version: 2.24.10-2012-10-10-ash - Alexander Shaduri)

GTK3-Runtime Win64 (HKLM\...\GTK3-Runtime Win64) (Version: 3.24.31-2022-01-04-ts-win64 - Tom Schoonjans)

Gyazo 4.1.4.0 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version: - Nota Inc.)

Helm (HKLM\...\{971514BD-7CC3-414F-9258-B79E6D53EC46}) (Version: 0.9.0.0 - Matt Tytel)

Hextech Repair Tool (HKLM-x32\...\{7F9A97E6-E666-11E5-B582-B88687E82322}) (Version: 1.1.176 - Riot Games, Inc.)

HitmanPro 3.8 (HKLM\...\HitmanPro38) (Version: 3.8.34.330 - SurfRight B.V.)

IK Multimedia Authorization Manager version 1.0.19 (HKLM\...\{85BC0DCB-69E5-4279-AA25-F108EF896588}_is1) (Version: 1.0.19 - IK Multimedia)

IK Product Manager 1.0.1 (HKLM\...\a401809f-3509-5ed7-a6dc-34dc618bf372) (Version: 1.0.1 - IK Multimedia)

IL Download Manager (HKLM-x32\...\IL Download Manager) (Version: - Image-Line)

Intel® C++ Redistributables on Intel® 64 (HKLM-x32\...\{F70BCE36-25F2-4475-A918-6209B3D85BF3}) (Version: 15.0.179 - Intel Corporation)

Intel® Chipset Device Software (HKLM\...\{351A0D24-F6F1-4105-AA50-5D2CCC71E0DD}) (Version: 10.1.18019.8144 - Intel Corporation) Hidden

Intel® Chipset Device Software (HKLM-x32\...\{4551f75f-3c54-4f09-8221-8c8a061bad00}) (Version: 10.1.18019.8144 - Intel® Corporation)

Intel® Serial IO (HKLM\...\{7EB7E1A5-7771-481E-A2AC-8734A9BC3B4F}) (Version: 30.100.1915.1 - Intel Corporation) Hidden

Intel® Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1915.1 - Intel Corporation)

Intel® PROSet/Wireless Software (HKLM-x32\...\{0fdc2e5c-7a15-4db3-b33c-f303fe56f68d}) (Version: 21.30.3 - Intel Corporation)

Intel® PROSet/Wireless WiFi Software (HKLM\...\{074B9893-BA7C-46C3-A5AD-D15971AA8666}) (Version: 21.30.3.3297 - Intel Corporation) Hidden

Intel® Software Installer (HKLM-x32\...\{097f6fe6-d6f8-4204-b004-1e255f6cf68b}) (Version: 22.160.0.4 - Intel Corporation) Hidden

Java 8 Update 301 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180301F0}) (Version: 8.0.3010.9 - Oracle Corporation)

Magic Bullet Suite (HKLM\...\Magic Bullet Suite v2023.0.0) (Version: - Maxon Computer GmbH)

Malwarebytes Anti-Exploit version 1.13.1.585 (HKLM\...\Malwarebytes Anti-Exploit_is1) (Version: 1.13.1.585 - Malwarebytes)

Malwarebytes version 4.6.13.324 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.6.13.324 - Malwarebytes)

Maxon Cinema 4D 2023 (HKLM\...\Maxon Cinema 4D 2023) (Version: 2023 - Maxon)

MeldaProduction Audio Plugins 16 (HKLM\...\MeldaProduction Audio Plugins 16) (Version: 16_08 - MeldaProduction)

mGBA 0.9.1 (HKLM\...\mGBA_is1) (Version: 0.9.1 - Jeffrey Pfau)

MH Thump version 2.0.2 (HKLM\...\MH Thump_is1) (Version: 2.0.2 - Metric Halo)

Microsoft .NET Host - 7.0.12 (x64) (HKLM\...\{074E2B26-C394-4F51-A7EB-9877C3A52996}) (Version: 56.48.2548 - Microsoft Corporation) Hidden

Microsoft .NET Host FX Resolver - 7.0.12 (x64) (HKLM\...\{674DE23D-D7B0-4034-9F9B-4687DB56C0BE}) (Version: 56.48.2548 - Microsoft Corporation) Hidden

Microsoft .NET Runtime - 7.0.12 (x64) (HKLM\...\{215711B5-53C6-43AA-A2C7-9ED2AFCA7B13}) (Version: 56.48.2548 - Microsoft Corporation) Hidden

Microsoft 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.17628.20110 - Microsoft Corporation)

Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 125.0.2535.79 - Microsoft Corporation)

Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 125.0.2535.79 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-3582097181-4158356751-2855229883-1003\...\OneDriveSetup.exe) (Version: 24.091.0505.0003 - Microsoft Corporation)

Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.32.31332 (HKLM-x32\...\{3746f21b-c990-4045-bb33-1cf98cff7a68}) (Version: 14.32.31332.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.32.31332 (HKLM-x32\...\{a98dc6ff-d360-4878-9f0a-915eba86eaf3}) (Version: 14.32.31332.0 - Microsoft Corporation)

Microsoft Visual C++ 2022 X64 Additional Runtime - 14.32.31332 (HKLM\...\{F4499EE3-A166-496C-81BB-51D1BCDC70A9}) (Version: 14.32.31332 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.32.31332 (HKLM\...\{3407B900-37F5-4CC2-B612-5CD5D580A163}) (Version: 14.32.31332 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X86 Additional Runtime - 14.32.31332 (HKLM-x32\...\{8972AC25-452E-4FFE-945A-EB9E28C20322}) (Version: 14.32.31332 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.32.31332 (HKLM-x32\...\{AEAA18F7-9C96-4A43-BC07-8B88A4913EEB}) (Version: 14.32.31332 - Microsoft Corporation) Hidden

Microsoft Windows Desktop Runtime - 7.0.12 (x64) (HKLM\...\{BE6ECDF8-E148-40B9-922D-6377E272B32B}) (Version: 56.48.2562 - Microsoft Corporation) Hidden

Microsoft Windows Desktop Runtime - 7.0.12 (x64) (HKLM-x32\...\{db33e419-1b78-40cf-bac2-d2b83f6e37b2}) (Version: 7.0.12.32928 - Microsoft Corporation)

MIDI Control Center 1.14.1 (HKLM\...\MIDI Control Center_is1) (Version: 1.14.1 - Arturia)

MSI App Player (HKLM\...\BlueStacks_msi2) (Version: 4.80.5.1004 - BlueStack Systems, Inc.)

MSI Recovery Image Backup (HKLM-x32\...\{92A6B009-1343-4C44-AFB1-8849137CA3F0}) (Version: 5.0.1908.1201 - Application) Hidden

MSI Recovery Image Backup (HKLM-x32\...\InstallShield_{92A6B009-1343-4C44-AFB1-8849137CA3F0}) (Version: 5.0.1908.1201 - Application)

Native Access 3.6.2 (HKU\S-1-5-21-3582097181-4158356751-2855229883-1003\...\c410b7d2-8fce-53b3-8332-e98b6e89a16a) (Version: 3.6.2 - Native Instruments)

Native Instruments Kontakt 7 (HKLM-x32\...\Native Instruments Kontakt 7) (Version: 7.6.0.0 - Native Instruments)

Native Instruments NTKDaemon (HKLM-x32\...\Native Instruments NTKDaemon) (Version: 1.14.0.0 - Native Instruments)

Nefarius Virtual Gamepad Emulation Bus Driver (HKLM\...\{93D91F60-7C94-4A79-863F-EA713D2EB3F3}) (Version: 1.17.333.0 - Nefarius Software Solutions e.U.)

Norton Security (HKLM-x32\...\NGC) (Version: 22.24.2.6 - NortonLifeLock Inc)

NVIDIA GeForce Experience 3.20.4.14 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.4.14 - NVIDIA Corporation)

NVIDIA Graphics Driver 452.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 452.06 - NVIDIA Corporation)

NVIDIA HD Audio Driver 1.3.38.34 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.34 - NVIDIA Corporation)

NVIDIA PhysX System Software 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)

Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.17628.20110 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.17628.20102 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden

Oracle VM VirtualBox 6.1.42 (HKLM\...\{9D04B35F-FA7E-4DC3-9B48-37853467E2DF}) (Version: 6.1.42 - Oracle Corporation)

Panasonic DVC USB Driver (HKLM-x32\...\InstallShield_{D1014B9B-5704-4B27-B581-1C19B72528D1}) (Version: 2.02.0000 - Panasonic)

PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2) (Version: 1.6.0 - PCSX2 Team)

Pink version 1.1.1 (HKLM\...\Pink_is1) (Version: 1.1.1 - )

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.35.510.2019 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8787.1 - Realtek Semiconductor Corp.)

Respondus LockDown Browser Lab OEM (HKLM-x32\...\{93247C13-8453-4789-AD72-60F6B9F02575}) (Version: 2.00.500 - Respondus)

Respondus LockDown Browser OEM (HKLM-x32\...\{00D779A4-92E4-404A-A502-045E1D6E3C34}) (Version: 2.00.610 - Respondus)

RotMG Exalt Launcher (HKLM\...\RotMG Exalt Launcher 1.3) (Version: 1.3 - DECA Live Operations GmbH)

Scala (HKLM-x32\...\Scala) (Version: 2.44 - Manuel Op de Coul)

Skype version 8.66 (HKLM-x32\...\Skype_is1) (Version: 8.66 - Skype Technologies S.A.)

Slippi Launcher 2.10.5 (HKLM\...\6864321e-78ac-5f45-8ec5-314da299c62f) (Version: 2.10.5 - Jas Laferriere)

Splice (HKU\S-1-5-21-3582097181-4158356751-2855229883-1003\...\splice) (Version: 4.3.78461 - Distributed Creation, Inc.)

Stage-73 V2 2.3.1 (HKLM-x32\...\Stage-73 V2_is1) (Version: 2.3.1 - Arturia)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

STL Ignite - Emissary Plug-In Bundle (HKLM\...\STL Ignite - Emissary Plug-In Bundle_is1) (Version: 2.0.2 - )

Stream version 1.2.0 (HKLM\...\Stream_is1) (Version: 1.2.0 - )

Surge XT (HKLM\...\69F3FE96-DEEC-4C7C-B72D-E8957EC8411B_is1) (Version: 1.3.1 - Surge Synth Team)

Syntronik version 1.2.0 (HKLM\...\{F4F8EE56-65A3-480C-A0CD-5CCA567A5673}_is1) (Version: 1.2.0 - IK Multimedia)

UXP WebView Support (HKLM-x32\...\UXPW_1_1_0) (Version: 1.1.0 - Adobe Inc.)

ValhallaSupermassive version 3.0.0b3 (HKLM-x32\...\{7715A01A-CD56-4A37-A2A5-F8EBE814BEB6}_is1) (Version: 3.0.0b3 - Valhalla DSP, LLC)

VCV Rack 2 Free (HKLM\...\VCVRack2Free) (Version: 2.4.1 - VCV)

Vital version 1.0.7 (HKLM\...\Vital_is1) (Version: 1.0.7 - )

vJoy Device Driver 0.2.0.5 (HKLM\...\{8E31F76F-74C3-47F1-9550-E041EEDC5FBB}_is1) (Version: 0.2.0.5 - Shaul Eizikovich)

WD Desktop App 2.1.0.313 (HKLM-x32\...\{756e70ec-1fb0-41c8-896b-df0302d17bff}) (Version: 2.1.0.313 - Western Digital Corporation) Hidden

WD Desktop App 2.1.0.313 (x64) (HKLM\...\{CA7F7232-526E-41BD-971A-47BE28C18516}) (Version: 2.1.0.313 - Western Digital Corporation) Hidden

WD Discovery (HKLM-x32\...\WDDiscovery) (Version: 4.1.270 - Western Digital Technologies, Inc.)

WD SES Driver Setup (HKLM-x32\...\{924A274D-38B6-4930-8859-F3F51CFA8DDD}) (Version: 1.1.0.25 - Western Digital) Hidden

Wii U USB GCN adapter version 3.2.1 (HKLM-x32\...\{B3898604-95BA-4EBA-A8D7-C4C2BDC2712A}_is1) (Version: 3.2.1 - Matt Cunningham)

Windows PC Health Check (HKLM\...\{6798C408-2636-448C-8AC6-F4E341102D27}) (Version: 3.6.2204.08001 - Microsoft Corporation)

WinRAR 5.91 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.91.0 - win.rar GmbH)

Xfer Records Serum (HKLM-x32\...\Serum) (Version: 1.363 - Xfer Records)

Yu-Gi-Oh! The Dawn of a New Era version 5.45.0.5644 (HKLM-x32\...\{1F276EF8-ACD8-4805-845C-BA1FC14DCB3B}_is1) (Version: 5.45.0.5644 - Kaiba Corporation)

Zoom (HKU\S-1-5-21-3582097181-4158356751-2855229883-1003\...\ZoomUMX) (Version: 5.15.5 (19404) - Zoom Video Communications, Inc.)

Chrome apps:

============

Docs (HKU\S-1-5-21-3582097181-4158356751-2855229883-1003\...\d520b5b483584a53155533b37ee2f83b) (Version: 1.0 - Google\Chrome)

Gmail (HKU\S-1-5-21-3582097181-4158356751-2855229883-1003\...\dcd5607d63a1c3b72307eef6a41ea1bc) (Version: 1.0 - Google\Chrome)

Google Drive (HKU\S-1-5-21-3582097181-4158356751-2855229883-1003\...\7cc2d0df06551bde94c527de35fc84dc) (Version: 1.0 - Google\Chrome)

Sheets (HKU\S-1-5-21-3582097181-4158356751-2855229883-1003\...\cc85647dd3f94b94e57f7752bd6ec787) (Version: 1.0 - Google\Chrome)

Slides (HKU\S-1-5-21-3582097181-4158356751-2855229883-1003\...\a80c67b21d4982ec2e2e7ef1e4a42729) (Version: 1.0 - Google\Chrome)

YouTube (HKU\S-1-5-21-3582097181-4158356751-2855229883-1003\...\8ea59899d85f07e56d734ab9810177ac) (Version: 1.0 - Google\Chrome)

Packages:

=========

Adobe Notification Client -> C:\Program Files\WindowsApps\AdobeNotificationClient_6.0.0.1_x86__enpm4xejd91yc [2024-05-21] (Adobe Systems Incorporated)

AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5487.0_x64__8j3eq9eme6ctt [2024-05-18] (INTEL CORP) [Startup Task]

AudioDirector for MSI -> C:\Program Files\WindowsApps\CyberLink.AudioDirectorforMSI_7.0.9105.0_x64__jtmmp2jxy9gb6 [2019-09-26] (CyberLink)

ColorDirector for MSI -> C:\Program Files\WindowsApps\CyberLink.ColorDirectorforMSI_5.0.8107.0_x64__jtmmp2jxy9gb6 [2019-09-26] (CyberLink)

Dropbox -> C:\Program Files (x86)\Dropbox\Client\PackageAssets [2024-05-29] (Dropbox Inc.)

HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_153.1.1137.0_x64__v10z8vjag6ke6 [2024-05-13] (HP Inc.)

Intel® Graphics Control Panel -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsControlPanel_3.3.0.0_x64__8j3eq9eme6ctt [2022-01-24] (INTEL CORP)

LinkedIn -> C:\Program Files\WindowsApps\7EE7776C.LinkedInforWindows_3.0.30.0_x64__w1wdnht996qgy [2024-05-31] (LinkedIn) [Startup Task]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2023-06-17] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2023-06-17] (Microsoft Corporation) [MS Ad]

Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2403.21002.0_x64__8wekyb3d8bbwe [2024-04-11] (Microsoft Corporation) [Startup Task]

Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2023-09-15] (Microsoft Corp.)

Microsoft Sudoku -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSudoku_2.9.5081.0_x64__8wekyb3d8bbwe [2024-05-13] (Microsoft Studios)

Microsoft Ultimate Word Games -> C:\Program Files\WindowsApps\Microsoft.Studios.Wordament_4.4.1161.0_x64__8wekyb3d8bbwe [2024-05-22] (Microsoft Studios) [MS Ad]

MicrosoftWindows.CrossDevice -> C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.24051.39.0_x64__cw5n1h2txyewy [2024-05-29] (Microsoft Windows) [Startup Task]

MSI Driver & App Center -> C:\Program Files\WindowsApps\msiappadm.MSIDriverAppCenter_1.2009.1001.0_x64__7f61qv3vk9gn2 [2020-10-21] (msiappadm)

MSI Help Desk -> C:\Program Files\WindowsApps\msiappadm.MSIHelpDesk_2.2103.3101.0_x64__7f61qv3vk9gn2 [2021-04-15] (msiappadm)

Music Maker Jam -> C:\Program Files\WindowsApps\MAGIX.MusicMakerJam_3.1.1.0_x64__a2t3txkz9j1jw [2020-10-21] (MAGIX)

Nahimic -> C:\Program Files\WindowsApps\A-Volute.Nahimic_1.10.1.0_x64__w2gh52qy24etm [2024-05-02] (A-Volute)

Norton Security -> C:\Program Files\Norton Security\Engine\22.24.2.6 [2024-06-04] (NortonLifeLock Inc.)

NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.966.0_x64__56jybvy8sckqj [2024-04-24] (NVIDIA Corp.)

PhotoDirector 10 Essential for MSI -> C:\Program Files\WindowsApps\CyberLink.PhotoDirector10EssentialforMSI_10.0.2326.0_x64__jtmmp2jxy9gb6 [2019-09-26] (CyberLink)

Photos -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2024.11050.29009.0_x64__8wekyb3d8bbwe [2024-06-03] (Microsoft Corporation) [Startup Task]

Photos Media Engine Add-on -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2023-03-10] (Microsoft Corporation)

PowerDirector 17 Essential for MSI -> C:\Program Files\WindowsApps\CyberLink.PowerDirector17EssentialforMSI_17.0.2712.0_x64__jtmmp2jxy9gb6 [2019-09-26] (CyberLink)

Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.51.327.0_x64__dt26b99r8h8gj [2024-05-17] (Realtek Semiconductor Corp)

Translator -> C:\Program Files\WindowsApps\Microsoft.BingTranslator_5.6.0.0_x64__8wekyb3d8bbwe [2024-05-10] (Microsoft Corporation)

Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.LKG_cw5n1h2txyewy [2024-05-17] (Microsoft Windows)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3582097181-4158356751-2855229883-1003_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-70477C0E951D} -> [Creative Cloud Files] => C:\Users\lcone\Creative Cloud Files [2023-05-22 18:32]

CustomCLSID: HKU\S-1-5-21-3582097181-4158356751-2855229883-1003_Classes\CLSID\{2F81B25E-7507-4844-BFF2-77D2CC24CED4}\localserver32 -> C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Inc. -> Adobe Inc.)

CustomCLSID: HKU\S-1-5-21-3582097181-4158356751-2855229883-1003_Classes\CLSID\{80172dde-4e20-4df0-81a2-0a48553e80bb}\localserver32 -> C:\Users\lcone\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe (A-Volute SAS -> A-Volute)

CustomCLSID: HKU\S-1-5-21-3582097181-4158356751-2855229883-1003_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\lcone\Dropbox [2023-03-10 21:11]

CustomCLSID: HKU\S-1-5-21-3582097181-4158356751-2855229883-1003_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Inc. -> Adobe Systems)

SSODL: WDFSMountNotificator-wdfsconnect2017 - {80CC6E47-721B-4671-9842-593C8195F0E3} - C:\Windows\system32\wdfsconnectMntNtf2017.dll (Western Digital Technologies, Inc.) [File not signed]

SSODL-x32: WDFSMountNotificator-wdfsconnect2017 - {80CC6E47-721B-4671-9842-593C8195F0E3} - C:\Windows\SysWOW64\wdfsconnectMntNtf2017.dll (Western Digital Technologies, Inc.) [File not signed]

ShellServiceObjects: Virtual Storage Mount Notification -> {80CC6E47-721B-4671-9842-593C8195F0E3} => C:\Windows\system32\wdfsconnectMntNtf2017.dll [2017-11-10] (Western Digital Technologies, Inc.) [File not signed]

ShellServiceObjects-x32: Virtual Storage Mount Notification -> {80CC6E47-721B-4671-9842-593C8195F0E3} => C:\Windows\SysWOW64\wdfsconnectMntNtf2017.dll [2017-11-10] (Western Digital Technologies, Inc.) [File not signed]

ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-04-09] (Adobe Inc. -> )

ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-04-09] (Adobe Inc. -> )

ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-04-09] (Adobe Inc. -> )

ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-01] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-01] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-01] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-01] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-01] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-01] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-01] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-01] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-01] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-01] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ WDDesktopIconOverlay01] -> {4F8A325E-9DAF-44B8-A825-1A14DFA0FA78} => C:\Program Files\WD Desktop App\kda.DLL [2020-07-21] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ShellIconOverlayIdentifiers: [ WDDesktopIconOverlay02] -> {0176BDDE-B59A-4A1E-808B-CAD461415CCA} => C:\Program Files\WD Desktop App\kda.DLL [2020-07-21] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ShellIconOverlayIdentifiers: [ WDDesktopIconOverlay03] -> {B65909D1-57AF-41F5-AB94-BEB733F62B35} => C:\Program Files\WD Desktop App\kda.DLL [2020-07-21] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ShellIconOverlayIdentifiers: [ WDDesktopIconOverlay04] -> {C6C2397D-8238-4332-8935-86C39C7C165F} => C:\Program Files\WD Desktop App\kda.DLL [2020-07-21] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ShellIconOverlayIdentifiers: [ WDDesktopIconOverlay05] -> {E7B3BCF9-0386-4B5F-AE6A-91B9F1423973} => C:\Program Files\WD Desktop App\kda.DLL [2020-07-21] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ShellIconOverlayIdentifiers: [ WDDesktopIconOverlay06] -> {564EA121-D9DA-485D-82C2-C2ED7BFCCEAD} => C:\Program Files\WD Desktop App\kda.DLL [2020-07-21] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security\Engine\22.24.2.6\buShell.dll [2024-03-04] (NortonLifeLock Inc. -> Gen Digital Inc.)

ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security\Engine\22.24.2.6\buShell.dll [2024-03-04] (NortonLifeLock Inc. -> Gen Digital Inc.)

ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security\Engine\22.24.2.6\buShell.dll [2024-03-04] (NortonLifeLock Inc. -> Gen Digital Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-01] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-01] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-01] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-01] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-01] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-01] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-01] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-01] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-01] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-01] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security\Engine\22.24.2.6\buShell.dll [2024-03-04] (NortonLifeLock Inc. -> Gen Digital Inc.)

ShellIconOverlayIdentifiers-x32: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security\Engine\22.24.2.6\buShell.dll [2024-03-04] (NortonLifeLock Inc. -> Gen Digital Inc.)

ShellIconOverlayIdentifiers-x32: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security\Engine\22.24.2.6\buShell.dll [2024-03-04] (NortonLifeLock Inc. -> Gen Digital Inc.)

ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]

ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-04-09] (Adobe Inc. -> )

ContextMenuHandlers1: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files\Norton Security\Engine\22.24.2.6\buShell.dll [2024-03-04] (NortonLifeLock Inc. -> Gen Digital Inc.)

ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-01] (Dropbox, Inc -> Dropbox, Inc.)

ContextMenuHandlers1: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.24.2.6\NavShExt.dll [2024-03-04] (NortonLifeLock Inc. -> Gen Digital Inc.)

ContextMenuHandlers1: [WDDesktopContextMenu] -> {fa00ba41-b6f6-3cfa-a300-f25ce175fe7e} => C:\Program Files\WD Desktop App\kda.DLL [2020-07-21] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2020-08-25] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2020-08-25] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers2: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.24.2.6\NavShExt.dll [2024-03-04] (NortonLifeLock Inc. -> Gen Digital Inc.)

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-03-14] (Malwarebytes Inc. -> Malwarebytes)

ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]

ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-01] (Dropbox, Inc -> Dropbox, Inc.)

ContextMenuHandlers4: [WDDesktopContextMenu] -> {fa00ba41-b6f6-3cfa-a300-f25ce175fe7e} => C:\Program Files\WD Desktop App\kda.DLL [2020-07-21] (Western Digital Technologies, Inc. -> Western Digital Corporation)

ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-01] (Dropbox, Inc -> Dropbox, Inc.)

ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvmii.inf_amd64_44053d7dadab442d\nvshext.dll [2020-08-13] (NVIDIA Corporation -> NVIDIA Corporation)

ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]

ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2024-04-09] (Adobe Inc. -> )

ContextMenuHandlers6: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files\Norton Security\Engine\22.24.2.6\buShell.dll [2024-03-04] (NortonLifeLock Inc. -> Gen Digital Inc.)

ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-03-14] (Malwarebytes Inc. -> Malwarebytes)

ContextMenuHandlers6: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.24.2.6\NavShExt.dll [2024-03-04] (NortonLifeLock Inc. -> Gen Digital Inc.)

ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2020-08-25] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2020-08-25] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\lcone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 1" --app-id=mpnpojknpmmopombnjdcgaaiekajbnjb

ShortcutWithArgument: C:\Users\lcone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 1" --app-id=fmgjjmmmlfnkbppncabfkddbjimcfncm

ShortcutWithArgument: C:\Users\lcone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 1" --app-id=aghbiahbpaijignceidepookljebhfak

ShortcutWithArgument: C:\Users\lcone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 1" --app-id=fhihpiojkbmbpdjeoajapmgkhlnakfjf

ShortcutWithArgument: C:\Users\lcone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 1" --app-id=kefjledonklijopmnomlcbpllchaibag

ShortcutWithArgument: C:\Users\lcone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 1" --app-id=agimnkijcaahngcdmfeangaknmldooml

ShortcutWithArgument: C:\Users\lcone\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9501e18d7c2ab92e\Lucas - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 2"

ShortcutWithArgument: C:\Users\lcone\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\225bb61db2f318c1\Lucas - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 3"

==================== Loaded Modules (Whitelisted) =============

2020-10-20 15:45 - 2020-10-20 15:45 - 001987072 _____ () [File not signed] C:\Program Files (x86)\Western Digital\Discovery\Current\ffmpeg.dll

2020-10-20 15:45 - 2020-10-20 15:45 - 000117248 _____ () [File not signed] C:\Program Files (x86)\Western Digital\Discovery\Current\swiftshader\libegl.dll

2020-10-20 15:45 - 2020-10-20 15:45 - 002250240 _____ () [File not signed] C:\Program Files (x86)\Western Digital\Discovery\Current\swiftshader\libglesv2.dll

2020-07-21 00:28 - 2020-07-21 00:28 - 002637985 _____ () [File not signed] C:\Program Files\WD Desktop App\libfusewdfs.dll

2019-09-02 14:41 - 2019-09-02 14:41 - 000243712 _____ (A-Volute) [File not signed] C:\Program Files (x86)\MSI\Dragon Center\NahimicAPI.dll

2018-11-23 07:01 - 2018-11-23 07:01 - 000438784 _____ (A-Volute) [File not signed] C:\Program Files (x86)\MSI\Dragon Center\YooMixCOM.dll

2016-08-10 20:34 - 2016-08-10 20:34 - 000047816 _____ (MICRO-STAR INTERNATIONAL CO., LTD -> www.internals.com) [File not signed] C:\Program Files (x86)\MSI\Dragon Center\MSIAPP_Service\WinIo64.dll

2015-06-11 19:35 - 2015-06-11 19:35 - 000047816 _____ (MICRO-STAR INTERNATIONAL CO., LTD -> www.internals.com) [File not signed] C:\Program Files (x86)\MSI\Dragon Center\WinIo64.dll

2018-08-01 09:54 - 2018-08-01 09:54 - 000014632 _____ (Micro-Star International CO., LTD. -> ) [File not signed] C:\Program Files (x86)\MSI\Dragon Center\UEFIVaribleDll.dll

2020-10-20 15:45 - 2017-11-10 13:51 - 000180224 _____ (Western Digital Technologies, Inc.) [File not signed] C:\Windows\system32\wdfsconnectMntNtf2017.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

HKU\S-1-5-21-3582097181-4158356751-2855229883-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://oem17win10.msn.com/?pc=NMTE

HKU\S-1-5-21-3582097181-4158356751-2855229883-1003\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://oem17win10.msn.com/?pc=NMTE

SearchScopes: HKU\S-1-5-21-3582097181-4158356751-2855229883-1003 -> DefaultScope {D915D91B-58C2-4692-8559-1CC2B877315F} URL =

SearchScopes: HKU\S-1-5-21-3582097181-4158356751-2855229883-1003 -> {D915D91B-58C2-4692-8559-1CC2B877315F} URL =

BHO: No Name -> {80CC6E47-721B-4671-9842-593C8195F0E3}' -> No File

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-04-05] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_301\bin\ssv.dll [2021-09-10] (Oracle America, Inc. -> Oracle Corporation)

BHO-x32: No Name -> {80CC6E47-721B-4671-9842-593C8195F0E3}' -> No File

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_301\bin\jp2ssv.dll [2021-09-10] (Oracle America, Inc. -> Oracle Corporation)

Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-06-01] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-06-01] (Microsoft Corporation -> Microsoft Corporation)

Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-06-01] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-06-01] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-06-01] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-06-01] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-06-01] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-06-01] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-03-18 21:49 - 2019-03-18 21:49 - 000000824 ____N C:\WINDOWS\system32\drivers\etc\hosts

2021-01-11 18:56 - 2021-01-11 19:01 - 000000431 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> %INTEL_DEV_REDIST%redist\intel64\compiler;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\dotnet\;C:\Program Files\GTK3-Runtime Win64\bin;C:\Program Files (x86)\GTK2-Runtime\bin

HKU\S-1-5-21-3582097181-4158356751-2855229883-1003\Control Panel\Desktop\\Wallpaper -> C:\Users\lcone\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\20211202_193314.jpg

DNS Servers: 8.8.8.8 - 8.8.4.4

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall is enabled.

Network Binding:

=============

Ethernet: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled)

VirtualBox Host-Only Network: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled)

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run32: => "Dropbox"

HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"

HKU\S-1-5-21-3582097181-4158356751-2855229883-1003\...\StartupApproved\Run: => "Steam"

HKU\S-1-5-21-3582097181-4158356751-2855229883-1003\...\StartupApproved\Run: => "Gyazo"

HKU\S-1-5-21-3582097181-4158356751-2855229883-1003\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_14E1B26F0CC7276BD27C9CE60EA04601"

HKU\S-1-5-21-3582097181-4158356751-2855229883-1003\...\StartupApproved\Run: => "RiotClient"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{56D45065-8D92-4D95-B006-C472E0D76A98}C:\users\lcone\appdata\local\splice\app-4.2.57696\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.57696\splice.exe => No File

FirewallRules: [TCP Query User{EC175E61-2838-4D0B-9B37-87B2708E9890}C:\users\lcone\appdata\local\splice\app-4.2.57696\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.57696\splice.exe => No File

FirewallRules: [UDP Query User{EE0C3D94-E756-4389-A2ED-727329B95BC4}C:\users\lcone\appdata\local\splice\app-4.2.47597\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.47597\splice.exe => No File

FirewallRules: [TCP Query User{24BF717F-7632-41C2-94FF-84CC708F4F7F}C:\users\lcone\appdata\local\splice\app-4.2.47597\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.47597\splice.exe => No File

FirewallRules: [UDP Query User{108C998C-7AAF-440F-B30C-C7D8A4C84D73}C:\program files (x86)\image-line\fl studio 20\fl64.exe] => (Allow) C:\program files (x86)\image-line\fl studio 20\fl64.exe (Image Line -> Image-Line)

FirewallRules: [TCP Query User{906FEF0F-5AEC-4E98-8B75-41DC829159FF}C:\program files (x86)\image-line\fl studio 20\fl64.exe] => (Allow) C:\program files (x86)\image-line\fl studio 20\fl64.exe (Image Line -> Image-Line)

FirewallRules: [UDP Query User{34164A84-65EC-48D0-AC3C-E5AA09BD1248}C:\users\lcone\appdata\local\discord\app-1.0.9010\discord.exe] => (Allow) C:\users\lcone\appdata\local\discord\app-1.0.9010\discord.exe => No File

FirewallRules: [TCP Query User{21127FA6-11A0-4A4D-BD61-DB8038CBC0E2}C:\users\lcone\appdata\local\discord\app-1.0.9010\discord.exe] => (Allow) C:\users\lcone\appdata\local\discord\app-1.0.9010\discord.exe => No File

FirewallRules: [UDP Query User{3B7403E1-3998-4D48-A686-D847614E39BC}C:\users\lcone\appdata\local\discord\app-1.0.9008\discord.exe] => (Allow) C:\users\lcone\appdata\local\discord\app-1.0.9008\discord.exe => No File

FirewallRules: [TCP Query User{5AF87BCC-438C-4BBE-843E-03B5E55CAC28}C:\users\lcone\appdata\local\discord\app-1.0.9008\discord.exe] => (Allow) C:\users\lcone\appdata\local\discord\app-1.0.9008\discord.exe => No File

FirewallRules: [UDP Query User{2737732F-3815-405F-B9C4-26F59E16ADF8}C:\users\lcone\appdata\local\splice\app-4.2.37448\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.37448\splice.exe => No File

FirewallRules: [TCP Query User{67463FE7-BD5A-47C1-9506-E623ABDA2E2D}C:\users\lcone\appdata\local\splice\app-4.2.37448\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.37448\splice.exe => No File

FirewallRules: [UDP Query User{8EB9CF4D-4012-48BF-B08F-59E23E5CEF66}C:\users\lcone\appdata\local\splice\app-4.2.27408\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.27408\splice.exe => No File

FirewallRules: [TCP Query User{374B5D68-EE6E-4262-8958-A1D1B3005F3A}C:\users\lcone\appdata\local\splice\app-4.2.27408\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.27408\splice.exe => No File

FirewallRules: [UDP Query User{84EC854F-45CE-481F-8943-9591379C55F0}C:\users\lcone\appdata\local\splice\app-4.2.27408\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.27408\splice.exe => No File

FirewallRules: [TCP Query User{965D181A-5D47-4624-8A22-B8AD10347855}C:\users\lcone\appdata\local\splice\app-4.2.27408\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.27408\splice.exe => No File

FirewallRules: [UDP Query User{F8052C46-FF8C-4EEC-8688-40F019F1CDCD}C:\users\lcone\appdata\local\splice\app-4.2.17404\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.17404\splice.exe => No File

FirewallRules: [TCP Query User{F5B35D57-CBF1-4CEC-A6FD-6B25C72D414F}C:\users\lcone\appdata\local\splice\app-4.2.17404\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.17404\splice.exe => No File

FirewallRules: [UDP Query User{DDF3C702-EBC8-4FE6-93C1-026019D45D6F}C:\users\lcone\appdata\roaming\slippi launcher\playback\slippi dolphin.exe] => (Allow) C:\users\lcone\appdata\roaming\slippi launcher\playback\slippi dolphin.exe (Slippi LLC -> )

FirewallRules: [TCP Query User{1E859F6E-EB4C-40A4-8622-2890985F0200}C:\users\lcone\appdata\roaming\slippi launcher\playback\slippi dolphin.exe] => (Allow) C:\users\lcone\appdata\roaming\slippi launcher\playback\slippi dolphin.exe (Slippi LLC -> )

FirewallRules: [UDP Query User{31D20A14-2055-4CF0-B4BD-BBEC92388B67}C:\users\lcone\appdata\roaming\slippi launcher\netplay\slippi dolphin.exe] => (Block) C:\users\lcone\appdata\roaming\slippi launcher\netplay\slippi dolphin.exe (Slippi LLC -> )

FirewallRules: [TCP Query User{E8ADFECB-6925-4B38-ADF7-5BF19EB547F0}C:\users\lcone\appdata\roaming\slippi launcher\netplay\slippi dolphin.exe] => (Block) C:\users\lcone\appdata\roaming\slippi launcher\netplay\slippi dolphin.exe (Slippi LLC -> )

FirewallRules: [UDP Query User{B23736B7-DB9A-43D6-8218-927944885C25}C:\program files\slippi launcher\slippi launcher.exe] => (Block) C:\program files\slippi launcher\slippi launcher.exe (Slippi LLC -> Jas Laferriere)

FirewallRules: [TCP Query User{4155C0AD-0F10-446C-A4C6-3E75E1FD765C}C:\program files\slippi launcher\slippi launcher.exe] => (Block) C:\program files\slippi launcher\slippi launcher.exe (Slippi LLC -> Jas Laferriere)

FirewallRules: [UDP Query User{23DF3FE4-9C02-4365-902B-EECB09F4B0AC}C:\users\lcone\appdata\local\discord\app-1.0.9004\discord.exe] => (Allow) C:\users\lcone\appdata\local\discord\app-1.0.9004\discord.exe => No File

FirewallRules: [TCP Query User{ACB6BDB9-B96C-416D-AD12-4D1BF1EA9934}C:\users\lcone\appdata\local\discord\app-1.0.9004\discord.exe] => (Allow) C:\users\lcone\appdata\local\discord\app-1.0.9004\discord.exe => No File

FirewallRules: [UDP Query User{FE8BBB50-7023-4821-B5C0-8C512C4C7B2F}C:\users\lcone\appdata\roaming\slippi launcher\playback\slippi dolphin.exe] => (Allow) C:\users\lcone\appdata\roaming\slippi launcher\playback\slippi dolphin.exe (Slippi LLC -> )

FirewallRules: [TCP Query User{56800F63-4E84-4509-9CE5-47D8A3DF04A8}C:\users\lcone\appdata\roaming\slippi launcher\playback\slippi dolphin.exe] => (Allow) C:\users\lcone\appdata\roaming\slippi launcher\playback\slippi dolphin.exe (Slippi LLC -> )

FirewallRules: [UDP Query User{FEDA4FB6-F0B1-4CAC-8173-10347BB56465}C:\users\lcone\appdata\roaming\slippi launcher\netplay\slippi dolphin.exe] => (Allow) C:\users\lcone\appdata\roaming\slippi launcher\netplay\slippi dolphin.exe (Slippi LLC -> )

FirewallRules: [TCP Query User{FA7869E4-DF2C-4E9E-BD7C-6BB679DC3C94}C:\users\lcone\appdata\roaming\slippi launcher\netplay\slippi dolphin.exe] => (Allow) C:\users\lcone\appdata\roaming\slippi launcher\netplay\slippi dolphin.exe (Slippi LLC -> )

FirewallRules: [UDP Query User{E69625B1-277E-438B-94F4-F8D306A7FC30}C:\games\mbaacc\mbaa.exe] => (Allow) C:\games\mbaacc\mbaa.exe => No File

FirewallRules: [TCP Query User{10614448-D134-48B1-8463-EC68C75B68E7}C:\games\mbaacc\mbaa.exe] => (Allow) C:\games\mbaacc\mbaa.exe => No File

FirewallRules: [{C9B50263-AADC-4442-8E9A-7C0AAEE9CEBA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe => No File

FirewallRules: [{DFA3D163-8731-4982-AD43-85275471F353}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe => No File

FirewallRules: [{AB628D29-7627-47E2-917C-33287E3AE244}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin64\dontstarve_steam_x64.exe => No File

FirewallRules: [{44AB1EA9-EC3F-4BB0-B41E-15ABD0F44FDF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin64\dontstarve_steam_x64.exe => No File

FirewallRules: [UDP Query User{1E2D7F29-F327-4CFC-8865-0733456837A6}C:\users\lcone\appdata\roaming\twitch studio\bin\twitchstudioagent.exe] => (Allow) C:\users\lcone\appdata\roaming\twitch studio\bin\twitchstudioagent.exe => No File

FirewallRules: [TCP Query User{5503574F-D357-4490-9C0D-C67AC3F28C6A}C:\users\lcone\appdata\roaming\twitch studio\bin\twitchstudioagent.exe] => (Allow) C:\users\lcone\appdata\roaming\twitch studio\bin\twitchstudioagent.exe => No File

FirewallRules: [{C40D4D16-9A89-4DB6-8C35-6F50C0DC3729}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{9EA4A626-F14D-4637-9993-E5B01919D9AA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{A492637A-C3A0-401F-A5EA-C70A5AE8BB03}] => (Allow) C:\Program Files\BlueStacks_msi2\HD-Player.exe (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)

FirewallRules: [{FBE177AC-351B-46E4-96F2-4781EE26A898}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{FC90C02B-466C-4A10-B381-C41D75B62E28}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{C4EF4A95-FE91-4CD9-8C82-428F28E0B6EB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{5B17CE2C-F2E6-473B-9DB3-0731A885CB1A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{094AE94B-C883-4D9E-BE27-F0347F8600E9}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [{E3D37153-E4B0-4A3C-94F8-A1B439A0BA2D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [{5C3B67FF-2144-4FA8-A873-64FA880864CA}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File

FirewallRules: [{305429B4-2E7A-4DEC-BDE3-52A6C923EBB5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File

FirewallRules: [{E87C63C9-8028-46C9-9BC1-0B34B514A86D}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [{A4F1B230-6FB2-49EC-98D4-ADDEC0326E46}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [{9950A825-9E6A-4640-826A-6D22F2FEE712}] => (Allow) C:\Users\lcone\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)

FirewallRules: [{3EEAE3A0-C775-40EB-8B75-770E3CACF3DF}] => (Allow) C:\Users\lcone\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)

FirewallRules: [{8D9A6226-7EB1-49EB-9DB7-A524822D2CF8}] => (Allow) C:\Users\lcone\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)

FirewallRules: [{68BC8045-2078-4981-A75F-94C86BC917D6}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{72552F82-EF93-4F2F-9DC4-551BAB151328}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{2FA6D7D0-EC2E-4E4B-A004-490B0078569D}] => (Allow) C:\Users\lcone\AppData\Roaming\uTorrent\uTorrent.exe => No File

FirewallRules: [{2CF267C4-3688-458E-90DE-6F34979A3B4D}] => (Allow) C:\Users\lcone\AppData\Roaming\uTorrent\uTorrent.exe => No File

FirewallRules: [TCP Query User{77E46074-FB7B-4981-A286-9E0146229D67}C:\program files\wizards of the coast\mtga\mtga.exe] => (Allow) C:\program files\wizards of the coast\mtga\mtga.exe => No File

FirewallRules: [UDP Query User{68FD834B-5662-40AA-ABF7-CA1920C831A4}C:\program files\wizards of the coast\mtga\mtga.exe] => (Allow) C:\program files\wizards of the coast\mtga\mtga.exe => No File

FirewallRules: [TCP Query User{B0C452B6-463F-4A15-ABE1-26622A1AEB2A}C:\users\lcone\appdata\local\splice\app-4.2.67720\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.67720\splice.exe => No File

FirewallRules: [UDP Query User{20877BEB-5F32-4D6E-B5B6-3DE36EABF1A1}C:\users\lcone\appdata\local\splice\app-4.2.67720\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.67720\splice.exe => No File

FirewallRules: [{8A8E396B-B580-4F40-9C3A-8343A6ED1B0C}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_23047.400.1873.7204_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{501DFCAA-06BB-4C50-BF4A-40382A192058}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_23047.400.1873.7204_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [TCP Query User{55ACE81D-A795-4201-A56E-97C53579FB41}C:\users\lcone\appdata\local\splice\app-4.2.57696\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.57696\splice.exe => No File

FirewallRules: [UDP Query User{09F9DB51-4855-4D4C-9B0D-BA6C72A5073A}C:\users\lcone\appdata\local\splice\app-4.2.57696\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.57696\splice.exe => No File

FirewallRules: [TCP Query User{43A377DD-D77E-4F27-8459-D9E3A1D14615}C:\users\lcone\appdata\local\splice\app-4.2.77773\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.77773\splice.exe => No File

FirewallRules: [UDP Query User{F372F3E4-657D-4262-9C76-298EE9F6AE45}C:\users\lcone\appdata\local\splice\app-4.2.77773\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.77773\splice.exe => No File

FirewallRules: [TCP Query User{30DC5837-F542-45DE-9F3E-9B98E3D22835}C:\users\lcone\appdata\local\splice\app-4.2.77773\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.77773\splice.exe => No File

FirewallRules: [UDP Query User{DD13E53B-0AE6-49A4-8FB4-5F6C9A9BD470}C:\users\lcone\appdata\local\splice\app-4.2.77773\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.77773\splice.exe => No File

FirewallRules: [{DF3830A1-832B-4F12-8E4B-F7C4ABA1977F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Realm of the Mad God\RotMG Exalt Launcher.exe (Deca Live Operations GmbH -> )

FirewallRules: [{8453F4D7-F1B5-426E-A97A-56BC2596FFBC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Realm of the Mad God\RotMG Exalt Launcher.exe (Deca Live Operations GmbH -> )

FirewallRules: [{B29C9BF9-5394-48FC-AA03-3B199465AB2A}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [TCP Query User{351ADF2C-5D06-43F9-8371-F10BABBE42ED}C:\users\lcone\appdata\local\splice\app-4.2.87912\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.87912\splice.exe => No File

FirewallRules: [UDP Query User{1C515973-B4D7-4532-8653-271BB26AFF05}C:\users\lcone\appdata\local\splice\app-4.2.87912\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.87912\splice.exe => No File

FirewallRules: [TCP Query User{0C094737-3F7A-4F43-A285-A42ED5A23AE1}C:\users\lcone\appdata\local\splice\app-4.2.97998\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.97998\splice.exe => No File

FirewallRules: [UDP Query User{D4A332B9-54EA-41CF-9E4B-DC732462229A}C:\users\lcone\appdata\local\splice\app-4.2.97998\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.2.97998\splice.exe => No File

FirewallRules: [TCP Query User{078C3136-B786-40A1-894D-A245943DFE6D}C:\users\lcone\appdata\local\splice\app-4.3.18047\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.3.18047\splice.exe => No File

FirewallRules: [UDP Query User{8228CD18-C94F-477A-A268-FE16CC4BB7D3}C:\users\lcone\appdata\local\splice\app-4.3.18047\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.3.18047\splice.exe => No File

FirewallRules: [TCP Query User{E1641805-2B8F-4609-B621-D98923FE4FD4}C:\program files\google\chrome\application\chrome1.exe] => (Block) C:\program files\google\chrome\application\chrome1.exe => No File

FirewallRules: [UDP Query User{905BEBAB-E2B1-4396-AF4D-4C75B7734391}C:\program files\google\chrome\application\chrome1.exe] => (Block) C:\program files\google\chrome\application\chrome1.exe => No File

FirewallRules: [TCP Query User{8B9A1B9C-FB85-4CEF-AA81-5BF9158BAD8B}C:\program files\google\chrome\application\chrome1.exe] => (Block) C:\program files\google\chrome\application\chrome1.exe => No File

FirewallRules: [UDP Query User{A768926C-DDAF-463B-B305-419C7F53C536}C:\program files\google\chrome\application\chrome1.exe] => (Block) C:\program files\google\chrome\application\chrome1.exe => No File

FirewallRules: [TCP Query User{E508962D-98DC-4F1C-82FA-931414A1B020}C:\users\lcone\appdata\local\splice\app-4.3.28125\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.3.28125\splice.exe => No File

FirewallRules: [UDP Query User{9C259BEB-5E96-4204-9817-CC70114D71D5}C:\users\lcone\appdata\local\splice\app-4.3.28125\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.3.28125\splice.exe => No File

FirewallRules: [TCP Query User{BAC7157B-3A1D-4FBF-A7BB-6A2B402C265E}C:\users\lcone\appdata\local\splice\app-4.3.38165\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.3.38165\splice.exe => No File

FirewallRules: [UDP Query User{E2E8449A-30DE-4EB7-9AA0-64121FB11004}C:\users\lcone\appdata\local\splice\app-4.3.38165\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.3.38165\splice.exe => No File

FirewallRules: [TCP Query User{C3D1FFF3-04BA-45DF-BB9B-6E301363ACA1}C:\users\lcone\appdata\local\splice\app-4.3.48217\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.3.48217\splice.exe => No File

FirewallRules: [UDP Query User{24900B07-8372-4148-844F-5123C9A5CDF5}C:\users\lcone\appdata\local\splice\app-4.3.48217\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.3.48217\splice.exe => No File

FirewallRules: [TCP Query User{AAAA9E94-1020-448D-BA09-BDEBB5A15F5E}C:\users\lcone\appdata\local\splice\app-4.3.58276\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.3.58276\splice.exe => No File

FirewallRules: [UDP Query User{3961CC43-76D5-4CC3-8158-70E00B34F91E}C:\users\lcone\appdata\local\splice\app-4.3.58276\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.3.58276\splice.exe => No File

FirewallRules: [{73CDFB73-32A6-4277-9322-1849A4DAC88A}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe => No File

FirewallRules: [{CBE31E0E-F46A-4B89-BD82-5E9C58554A52}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe => No File

FirewallRules: [{6802C257-BF29-4AF3-8038-47DACB21E07D}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DaVinciPanelDaemon.exe => No File

FirewallRules: [{C184A49F-BFDB-4FBF-B547-232BEFD8A33B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe => No File

FirewallRules: [{E0D07BAE-4912-4A86-8846-CAF873F85E5B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe => No File

FirewallRules: [{4EC6C009-43C9-4650-86A1-118CB7EE69E7}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe => No File

FirewallRules: [{119CA0CE-FD45-43C8-B711-118F550A315E}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe => No File

FirewallRules: [{3B5B4BED-7FBA-41F2-9E1A-FF1A08A21228}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\fuscript.exe => No File

FirewallRules: [TCP Query User{E2CCE6AA-EACE-4343-A2C4-726E3E8134A3}C:\users\lcone\appdata\local\splice\app-4.3.68353\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.3.68353\splice.exe (Splice) [File not signed]

FirewallRules: [UDP Query User{C982A0C7-AD1C-440E-A8EA-CE1CF1DF6C34}C:\users\lcone\appdata\local\splice\app-4.3.68353\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.3.68353\splice.exe (Splice) [File not signed]

FirewallRules: [TCP Query User{BCF2E008-1F06-4631-8FDD-2722C41823BA}C:\users\lcone\appdata\local\splice\app-4.3.78461\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.3.78461\splice.exe (Splice) [File not signed]

FirewallRules: [UDP Query User{8FA6D796-C7CB-4F97-AB89-3C2DEBC5E46E}C:\users\lcone\appdata\local\splice\app-4.3.78461\splice.exe] => (Allow) C:\users\lcone\appdata\local\splice\app-4.3.78461\splice.exe (Splice) [File not signed]

FirewallRules: [TCP Query User{774E2714-1E40-41B3-84A3-B5F7536FA156}C:\users\lcone\appdata\local\citra\nightly\citra-qt.exe] => (Allow) C:\users\lcone\appdata\local\citra\nightly\citra-qt.exe => No File

FirewallRules: [UDP Query User{D835ECF9-8A78-429F-8905-24529009B5E9}C:\users\lcone\appdata\local\citra\nightly\citra-qt.exe] => (Allow) C:\users\lcone\appdata\local\citra\nightly\citra-qt.exe => No File

FirewallRules: [TCP Query User{EB3A8F5C-1E32-49E0-8BE6-0040A65DC3B8}C:\programdata\ableton\live 11 lite\program\ableton live 11 lite.exe] => (Allow) C:\programdata\ableton\live 11 lite\program\ableton live 11 lite.exe (Ableton AG -> Ableton)

FirewallRules: [UDP Query User{2A936D8D-860D-4269-8393-0943BFDC1DC5}C:\programdata\ableton\live 11 lite\program\ableton live 11 lite.exe] => (Allow) C:\programdata\ableton\live 11 lite\program\ableton live 11 lite.exe (Ableton AG -> Ableton)

FirewallRules: [TCP Query User{2AEE3D5D-8B09-4F3D-9956-8526EE9F504D}C:\riot games\league of legends\leagueclientuxrender.exe] => (Block) C:\riot games\league of legends\leagueclientuxrender.exe => No File

FirewallRules: [UDP Query User{580F484A-A4B9-47BB-A079-B1C7217BC4E4}C:\riot games\league of legends\leagueclientuxrender.exe] => (Block) C:\riot games\league of legends\leagueclientuxrender.exe => No File

FirewallRules: [TCP Query User{0654CD47-865F-4A08-84D7-A9CC25FE4848}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe => No File

FirewallRules: [UDP Query User{260D3EC5-261D-44FD-A9DB-C075E8DA663B}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe => No File

FirewallRules: [{02378CDE-3334-4BD9-B85B-0AD4553FC3DA}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe => No File

FirewallRules: [{E27C21D3-0BF6-4D13-991F-0C1FE7C9E10D}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe => No File

FirewallRules: [{34CC0C17-D98C-4C5F-89DE-F2F9D958502F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.119.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{EDF1A94C-C25E-4137-A872-5657737A07CC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.119.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{06D9FC94-221A-45C4-B965-ECBDA626F6ED}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.119.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{53A1210F-5851-441F-B32C-F62B23A8F1FB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.119.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{2A3DFB21-7A9E-4822-B3B1-944A42A5F28C}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)

FirewallRules: [{E56D461C-2C33-4220-BC9D-7BBD7BDDD0BF}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)

FirewallRules: [{75216CAD-FF1A-4A24-8357-81D5EBD2F267}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

FirewallRules: [{F8781ED2-39ED-436D-A5F2-B445F836B941}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.79\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Restore Points =========================

02-06-2024 09:07:28 Scheduled Checkpoint

==================== Faulty Device Manager Devices ============

Name: vJoy Device

Description: vJoy Device

Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}

Manufacturer: Shaul Eizikovich

Service: vjoy

Problem: : The driver for this device might be corrupted, or your system may be running low on memory or other resources. (Code3)

Resolution: If the driver is corrupted, uninstall the driver and scan for new hardware to install the driver again. To scan for new hardware, click on the "Action" menu in Device Manager, and then select "Scan for hardware changes".

If your computer does not have enough memory to run the device, you can close some applications to make memory available. To check memory and system resources, right-click "My Computer", click "Properties", click the "Advanced" tab, and then click "Settings" under "Performance".

You may need to install additional random access memory (RAM).

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

==================== Event log errors: ========================

Application errors:

==================

Error: (06/03/2024 10:40:54 PM) (Source: Application Hang) (EventID: 1002) (User: NT AUTHORITY)

Description: The program FL64.exe version 1.1.50.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Error: (06/03/2024 09:32:13 PM) (Source: Application Hang) (EventID: 1002) (User: NT AUTHORITY)

Description: The program FL64.exe version 1.1.50.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Error: (06/03/2024 09:29:00 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT AUTHORITY)

Description: Windows cannot load the extensible counter DLL "C:\WINDOWS\system32\sysmain.dll" (Win32 error code 126).

Error: (06/03/2024 09:19:04 PM) (Source: Application Hang) (EventID: 1002) (User: NT AUTHORITY)

Description: The program FL64.exe version 1.1.50.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Error: (06/03/2024 09:11:42 PM) (Source: Application Error) (EventID: 1000) (User: MSI)

Description: Faulting application name: ilbridge.exe, version: 1.5.113.0, time stamp: 0x5c19103f

Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000

Exception code: 0x00000000

Fault offset: 0x00000000

Faulting process id: 0x0x9dc

Faulting application start time: 0x0x1dab6350f43ad96

Faulting application path: C:\Program Files (x86)\Image-Line\FL Studio 20\System\Tools\Bridge\32bit\ilbridge.exe

Faulting module path: unknown

Report Id: 43f7eafe-f7b1-4d0b-a268-1934fb5f66b9

Faulting package full name:

Faulting package-relative application ID:

Error: (06/03/2024 09:11:41 PM) (Source: Application Error) (EventID: 1000) (User: MSI)

Description: Faulting application name: ilbridge.exe, version: 1.5.113.0, time stamp: 0x5c19103f

Faulting module name: ntdll.dll, version: 10.0.22621.3527, time stamp: 0xb71c4741

Exception code: 0xc0000005

Fault offset: 0x00090131

Faulting process id: 0x0x9dc

Faulting application start time: 0x0x1dab6350f43ad96

Faulting application path: C:\Program Files (x86)\Image-Line\FL Studio 20\System\Tools\Bridge\32bit\ilbridge.exe

Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll

Report Id: 07a2085f-6a71-49cb-868c-2b4f42ba312a

Faulting package full name:

Faulting package-relative application ID:

Error: (06/03/2024 09:11:40 PM) (Source: Application Error) (EventID: 1000) (User: MSI)

Description: Faulting application name: ilbridge.exe, version: 1.5.113.0, time stamp: 0x5c19103f

Faulting module name: ntdll.dll, version: 10.0.22621.3527, time stamp: 0xb71c4741

Exception code: 0xc0000005

Fault offset: 0x00090131

Faulting process id: 0x0x9dc

Faulting application start time: 0x0x1dab6350f43ad96

Faulting application path: C:\Program Files (x86)\Image-Line\FL Studio 20\System\Tools\Bridge\32bit\ilbridge.exe

Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll

Report Id: 0e3f6355-ea48-438c-b832-b54ee9bdde8b

Faulting package full name:

Faulting package-relative application ID:

Error: (06/03/2024 09:11:39 PM) (Source: Application Error) (EventID: 1000) (User: MSI)

Description: Faulting application name: ilbridge.exe, version: 1.5.113.0, time stamp: 0x5c19103f

Faulting module name: ntdll.dll, version: 10.0.22621.3527, time stamp: 0xb71c4741

Exception code: 0xc0000005

Fault offset: 0x0005af90

Faulting process id: 0x0x9dc

Faulting application start time: 0x0x1dab6350f43ad96

Faulting application path: C:\Program Files (x86)\Image-Line\FL Studio 20\System\Tools\Bridge\32bit\ilbridge.exe

Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll

Report Id: 2d23d4de-11e7-4f0d-b8ab-f270f45fd7ba

Faulting package full name:

Faulting package-relative application ID:

System errors:

=============

Error: (06/04/2024 12:59:08 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: The Intel® PROSet/Wireless Zero Configuration Service service terminated with the following error:

%%2147770990

Error: (06/04/2024 12:58:49 AM) (Source: vjoy) (EventID: 514) (User: )

Description: Failed to install driver. Function WdfCollectionCreate failed with status 0xc000009a.

Error: (06/03/2024 10:04:08 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x80248007: 9NBLGGH5FV99-Microsoft.MSPaint.

Error: (06/03/2024 09:49:42 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x80073d02: 9NMPJ99VJBWV-Microsoft.YourPhone.

Error: (06/03/2024 09:18:24 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x80073d02: 9NMPJ99VJBWV-Microsoft.YourPhone.

Error: (06/03/2024 09:09:08 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: The Intel® PROSet/Wireless Zero Configuration Service service terminated with the following error:

%%2147770990

Error: (06/03/2024 09:08:49 PM) (Source: vjoy) (EventID: 514) (User: )

Description: Failed to install driver. Function WdfCollectionCreate failed with status 0xc000009a.

Error: (06/02/2024 08:55:27 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: The Intel® PROSet/Wireless Zero Configuration Service service terminated with the following error:

%%2147770990

Windows Defender:

================

Date: 2024-05-31 19:51:49

Description:

Microsoft Defender Antivirus scan has been stopped before completion.

Scan Type: Antimalware

Scan Parameters: Quick Scan

Date: 2024-05-28 17:23:19

Description:

Microsoft Defender Antivirus scan has been stopped before completion.

Scan Type: Antimalware

Scan Parameters: Quick Scan

Date: 2024-05-27 19:05:32

Description:

Microsoft Defender Antivirus scan has been stopped before completion.

Scan Type: Antimalware

Scan Parameters: Quick Scan

Date: 2024-05-27 01:54:28

Description:

Microsoft Defender Antivirus scan has been stopped before completion.

Scan Type: Antimalware

Scan Parameters: Quick Scan

Date: 2024-05-26 19:20:27

Description:

Microsoft Defender Antivirus scan has been stopped before completion.

Scan Type: Antimalware

Scan Parameters: Quick Scan

Event[0]

Date: 2024-06-03 22:54:00

Description:

Microsoft Defender Antivirus has encountered an error trying to update security intelligence and will attempt to revert to a previous version.

Security intelligence Attempted: Backup

Error Code: 0x80004004

Error description: Operation aborted

Security intelligence Version: 1.413.14.0;1.413.14.0

Engine Version: 1.1.24050.5

Date: 2024-06-03 22:54:00

Description:

Microsoft Defender Antivirus has encountered an error trying to update security intelligence and will attempt to revert to a previous version.

Security intelligence Attempted: Current

Error Code: 0x80501102

Error description: An unexpected problem occurred. Install any available updates, and then try to start the program again. For information on installing updates, see Help and Support.

Security intelligence Version: 1.413.14.0;1.413.14.0

Engine Version: 1.1.24050.5

Date: 2024-06-03 00:09:09

Description:

Microsoft Defender Antivirus has encountered an error trying to update security intelligence and will attempt to revert to a previous version.

Security intelligence Attempted: Backup

Error Code: 0x80004004

Error description: Operation aborted

Security intelligence Version: 1.413.14.0;1.413.14.0

Engine Version: 1.1.24050.5

Date: 2024-06-03 00:09:09

Description:

Microsoft Defender Antivirus has encountered an error trying to update security intelligence and will attempt to revert to a previous version.

Security intelligence Attempted: Current

Error Code: 0x80501102

Error description: An unexpected problem occurred. Install any available updates, and then try to start the program again. For information on installing updates, see Help and Support.

Security intelligence Version: 1.413.14.0;1.413.14.0

Engine Version: 1.1.24050.5

Date: 2024-06-01 05:44:43

Description:

Microsoft Defender Antivirus has encountered an error trying to update security intelligence and will attempt to revert to a previous version.

Security intelligence Attempted: Backup

Error Code: 0x80004004

Error description: Operation aborted

Security intelligence Version: 1.413.14.0;1.413.14.0

Engine Version: 1.1.24050.5

CodeIntegrity:

===============

Date: 2024-06-04 01:02:12

Description:

Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Norton Security\Engine\22.24.2.6\symamsi.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2024-06-04 01:01:58

Description:

Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MpCmdRun.exe) attempted to load \Device\HarddiskVolume3\Program Files\Norton Security\Engine\22.24.2.6\symamsi.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

BIOS: American Megatrends Inc. E16W1IMS.108 12/04/2019

Motherboard: Micro-Star International Co., Ltd. MS-16W1

Processor: Intel® Core™ i7-9750H CPU @ 2.60GHz

Percentage of memory in use: 37%

Total physical RAM: 16227.84 MB

Available physical RAM: 10154.13 MB

Total Virtual: 19043.84 MB

Available Virtual: 12622.03 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:455.22 GB) (Free:102.36 GB) (Model: WDC PC SN530 SDBPNPZ-512G-1032) NTFS

\\?\Volume{34741317-7cfe-4ec0-9d25-46b0ae81be2b}\ (WinRE tools) (Fixed) (Total:0.88 GB) (Free:0.15 GB) NTFS

\\?\Volume{d8f30def-290d-4ec9-ad34-93466904a4f4}\ (BIOS_RVY) (Fixed) (Total:20.42 GB) (Free:0.69 GB) NTFS

\\?\Volume{ba93a9f7-31c8-4cc0-9f14-747e3fccae32}\ (SYSTEM) (Fixed) (Total:0.29 GB) (Free:0.26 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================

Disk: 0 (Size: 476.9 GB) (Disk ID: 8B786469)

Partition: GPT.

==================== End of Addition.txt =======================


Question about suspicious processes: remote proxy intermittently connecting - Virus, Trojan, Spyware, and Malware Removal Help (2024)
Top Articles
Latest Posts
Article information

Author: Margart Wisoky

Last Updated:

Views: 5955

Rating: 4.8 / 5 (78 voted)

Reviews: 93% of readers found this page helpful

Author information

Name: Margart Wisoky

Birthday: 1993-05-13

Address: 2113 Abernathy Knoll, New Tamerafurt, CT 66893-2169

Phone: +25815234346805

Job: Central Developer

Hobby: Machining, Pottery, Rafting, Cosplaying, Jogging, Taekwondo, Scouting

Introduction: My name is Margart Wisoky, I am a gorgeous, shiny, successful, beautiful, adventurous, excited, pleasant person who loves writing and wants to share my knowledge and understanding with you.