Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-12-2019 Ran by [removed] (12-12-2019 17:47:34) Running from C:\Users\[removed]\Downloads Windows 10 Home Version 1903 18362.535 (X64) (2019-08-06 16:07:51) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-2640053030-2595494242-2820618962-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-2640053030-2595494242-2820618962-503 - Limited - Disabled) Guest (S-1-5-21-2640053030-2595494242-2820618962-501 - Limited - Disabled) ksmit (S-1-5-21-2640053030-2595494242-2820618962-1001 - Administrator - Enabled) => C:\Users\ksmit WDAGUtilityAccount (S-1-5-21-2640053030-2595494242-2820618962-504 - Limited - Disabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 7-Zip 18.01 (x64) (HKLM\...\7-Zip) (Version: 18.01 - Igor Pavlov) Adobe Acrobat 7.0 Professional (HKLM-x32\...\Adobe Acrobat 7.0 Professional) (Version: 7.0.0 - Adobe Systems) Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 19.021.20058 - Adobe Systems Incorporated) Adobe Connect 9 Add-in (HKU\S-1-5-21-2640053030-2595494242-2820618962-1001\...\Adobe Connect 9 Add-in) (Version: 11.9.980.387 - Adobe Systems Incorporated) AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.) AMD Settings (HKLM\...\WUCCCApp) (Version: 2017.0627.1013.18374 - Advanced Micro Devices, Inc.) ArcGIS Desktop 10.5.1 (HKLM-x32\...\{4740FC57-60FE-45BB-B513-3309F6B73183}) (Version: 10.5.7333 - Environmental Systems Research Institute, Inc.) Hidden ArcGIS Desktop 10.5.1 (HKLM-x32\...\ArcGIS Desktop 10.5.1) (Version: 10.5.7333 - Environmental Systems Research Institute, Inc.) Auslogics Duplicate File Finder (HKLM-x32\...\{6845255F-15CC-4DD1-94D5-D38F370118B3}_is1) (Version: 7.0.1.0 - Auslogics Labs Pty Ltd) Backup and Sync from Google (HKLM\...\{93EBD8BA-7A14-4636-8F1F-E929ADF2C3A9}) (Version: 3.47.7654.0300 - Google, Inc.) BRAdmin Professional 3 (HKLM-x32\...\{75C885D4-C758-4896-A3B4-90DA34B44C31}) (Version: 3.71.0001 - Brother) BrLauncher (HKLM-x32\...\{42D26B47-887C-45FC-BCAE-0BE485C5C0BB}) (Version: 2.0.11.0 - Brother Industries Ltd.) Hidden BrLogRx (HKLM-x32\...\{190861E7-09C5-42D8-BB4B-0AFB234BCFC1}) (Version: 1.0.3.1 - Brother Industries Ltd.) Hidden Brother IPPoverUSB Driver (HKLM-x32\...\{36DAA671-6347-495C-B816-6FB782430D8A}) (Version: 1.1.0.0 - Brother Industries Ltd.) Hidden Brother iPrint&Scan (HKLM-x32\...\{00ED423F-FA0B-473D-B7BD-656CE964AF59}) (Version: 4.1.3.1 - Brother Industries, Ltd.) Hidden Brother iPrint&Scan (HKLM-x32\...\{aa21588a-d715-43af-9972-6332e8e9f590}) (Version: 4.1.3.1 - Brother Industries, Ltd.) Brother PowerENGAGE (HKLM-x32\...\{3CE8B8E8-B33B-453C-BB7A-821ED6E18A24}) (Version: 1.0.27 - Aviata, Inc.) Brother Printer Driver (HKLM-x32\...\{6D33FF09-043C-45A6-A3E5-5DDBF686AC4E}) (Version: 1.4.0.0 - Brother Industries Ltd.) Hidden BrSupportTools (HKLM-x32\...\{32F47565-84B1-42CC-B09A-4CDDD9A32F94}) (Version: 1.0.20.0 - Brother Industries Ltd.) Hidden CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.7.0.0 - Canon Inc.) Canon G3000 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_G3000_series) (Version: 1.01 - Canon Inc.) Canon G3000 series On-screen Manual (HKLM-x32\...\Canon G3000 series On-screen Manual) (Version: 7.8.0 - Canon Inc.) Canon G3000 series User Registration (HKLM-x32\...\Canon G3000 series User Registration) (Version: - ‭Canon Inc.) Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: 1.5.4.4 - Canon Inc.) Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.7.0 - Canon Inc.) Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.1.20.13 - Canon Inc.) Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 6.0.3 - Canon Inc.) Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 3.6.1 - Canon Inc.) Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 3.6.0 - Canon Inc.) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.3.0 - Canon Inc.) Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.8.5 - Canon Inc.) Catalyst Control Center Next Localization BR (HKLM\...\{54E3E97D-573B-9568-2A06-FDC4BDAD4F13}) (Version: 2017.0627.1013.18374 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization BR (HKLM\...\{5591A46B-4FD3-21E2-039C-737CC739F52E}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHS (HKLM\...\{1165E935-AA00-7CE4-C458-B6C7290682CC}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHS (HKLM\...\{153FBCEB-4888-529B-C6E4-EEF414230B5F}) (Version: 2017.0627.1013.18374 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHT (HKLM\...\{272BFE26-87E0-B8DE-54F2-FD44A32DFBD5}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHT (HKLM\...\{D9B815AA-CF4D-08E0-338E-6D9E4074CFC8}) (Version: 2017.0627.1013.18374 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CS (HKLM\...\{B4239749-1CCA-A61E-D5C1-F72EA5E12064}) (Version: 2017.0627.1013.18374 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CS (HKLM\...\{BB45FEF8-167F-72F7-A631-5DB3D93A8872}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DA (HKLM\...\{6F07BC43-5B87-6A89-875E-9569E92EA80E}) (Version: 2017.0627.1013.18374 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DA (HKLM\...\{B78A2258-5630-C1DF-0F27-AD1F1E59AEC6}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DE (HKLM\...\{0E6CC911-B0B7-11A2-411A-8B2A02080618}) (Version: 2017.0627.1013.18374 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DE (HKLM\...\{8DEF9006-FC17-6332-79C6-49A47B86ABFD}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization EL (HKLM\...\{29E87A92-2A5D-C559-EFAB-C418748551DD}) (Version: 2017.0627.1013.18374 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization EL (HKLM\...\{EA0D8B3B-ADB3-6DBC-DA34-51B70AE29C16}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization ES (HKLM\...\{052F0949-D33A-3128-9DCE-50BEA1B341B7}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization ES (HKLM\...\{9A2554B9-485D-4BA2-40EB-F82756A4AB06}) (Version: 2017.0627.1013.18374 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FI (HKLM\...\{081C8424-2C7F-573E-ED3B-61E063111DC5}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FI (HKLM\...\{7ADBE369-E788-6AA4-475A-9583670E6F2A}) (Version: 2017.0627.1013.18374 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FR (HKLM\...\{73A94ECB-4EC8-6C73-12F9-F28EAFD5B237}) (Version: 2017.0627.1013.18374 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FR (HKLM\...\{A3571290-2E3C-F314-866E-52A3B9295DA9}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization HU (HKLM\...\{09E0143F-79BC-1FF9-B433-B12C1AF3D942}) (Version: 2017.0627.1013.18374 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization HU (HKLM\...\{964640D0-AC6C-9549-892E-DB0E3AAC5CEF}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization IT (HKLM\...\{7AEBE733-FCAE-C7CD-092B-8BD38B0B33A3}) (Version: 2017.0627.1013.18374 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization IT (HKLM\...\{EA54F30D-6AB0-7870-A0F2-E802632E3AE1}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization JA (HKLM\...\{13DA946D-1BC4-1ED0-F6BD-722AEFACBCB5}) (Version: 2017.0627.1013.18374 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization JA (HKLM\...\{C1B17BA3-56B2-47B1-E4EE-6602392724AE}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization KO (HKLM\...\{78B5EF49-6FD5-0A1F-C7C3-A5B8214C1DAC}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization KO (HKLM\...\{A4C56925-B29F-0F69-54EA-6EC25FE22074}) (Version: 2017.0627.1013.18374 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NL (HKLM\...\{2ED86AAF-9DA0-8F95-21E1-01D6878E312D}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NL (HKLM\...\{B145D7B0-BB39-535E-67AE-29F104A56C21}) (Version: 2017.0627.1013.18374 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NO (HKLM\...\{1B77DD3D-8DA4-CE05-36CE-6FBF71995D74}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NO (HKLM\...\{7186C78E-A1AD-4AB6-6AE9-D75C372F5014}) (Version: 2017.0627.1013.18374 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization PL (HKLM\...\{119BCF10-3F00-6E9A-BF42-AF216BF2D6DE}) (Version: 2017.0627.1013.18374 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization PL (HKLM\...\{7461FCE1-D63D-C463-00F4-55864E06079D}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization RU (HKLM\...\{234B355E-EFF0-C923-A496-FA032E54F820}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization RU (HKLM\...\{F54DBF01-18BC-EB5A-458A-363A197E772E}) (Version: 2017.0627.1013.18374 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization SV (HKLM\...\{2DFA8397-A1A6-BA94-D582-63387958A605}) (Version: 2017.0627.1013.18374 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization SV (HKLM\...\{FDEFB5D3-92AC-4A94-1682-92143E3DA051}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TH (HKLM\...\{D2115CD4-D30A-9605-FAE8-B21EF4CD20EC}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TH (HKLM\...\{F1F1CE29-2910-7005-DBF6-E51D788B27EF}) (Version: 2017.0627.1013.18374 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TR (HKLM\...\{46827A2F-7A32-3BCC-46C5-FB491A009D66}) (Version: 2017.0627.1013.18374 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TR (HKLM\...\{DA3AE593-6667-EAD6-4BBF-3936FE1164D7}) (Version: 2016.0927.1916.32860 - Advanced Micro Devices, Inc.) Hidden CCleaner (HKLM\...\CCleaner) (Version: 5.35 - Piriform) Corel KPT Collection (HKLM-x32\...\_{2E6E25E9-9BEE-4486-848B-92CC172B8FF8}) (Version: 1.0.0.131 - Corel Corporation) Corel KPT Collection (HKLM-x32\...\{2E6E25E9-9BEE-4486-848B-92CC172B8FF8}) (Version: 1.0.0.131 - Corel Corporation) Hidden Corel Painter Essentials 5 - IPM (HKLM\...\{7AE4E1DB-DD52-46DA-806C-30A10D3FDEA7}) (Version: 5.0 - Corel Corporation) Hidden Corel Painter Essentials 5 - IPM Content (HKLM\...\{E7C117A5-E97D-487B-AEB6-1293FA0BF8E6}) (Version: 5.0 - Corel Corporation) Hidden Corel Painter Essentials 5 (HKLM\...\_{7E35BD37-3F00-4FCB-A357-92F5D0CDEC2A}) (Version: 0.0 - Corel Corporation) Corel PaintShop Pro X9 (HKLM-x32\...\_{998717E5-1031-4D28-A143-48ADAF062E5F}) (Version: 19.2.0.7 - Corel Corporation) Corel PaintShop Pro X9 (HKLM-x32\...\{93EE564E-9DA1-4655-8A90-4E816019B409}) (Version: 19.2.0.7 - Corel Corporation) Hidden Corel PDF Fusion (HKLM\...\{2D769EF2-E9FE-4AC6-8990-15C39E1D68BF}) (Version: 1.10.0000 - Corel Corporation) Corel Update Manager (HKLM\...\{B8C05FFE-C36F-4F17-AD20-739E4BC65AC9}) (Version: 2.11.552 - Corel corporation) Hidden Corel Update Manager (HKLM-x32\...\{EE61B6C5-F017-4505-85D3-6D40B1797D32}) (Version: 2.11.552 - Corel corporation) Hidden Creative Content (HKLM-x32\...\_{9375898A-ED8E-4423-ADFA-75AF8E594769}) (Version: 1.0.0.130 - Corel Corporation) Hidden Creative Content (HKLM-x32\...\{9375898A-ED8E-4423-ADFA-75AF8E594769}) (Version: 1.0.0.130 - Corel Corporation) Hidden CyberLink Media Suite Essentials (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 12 - CyberLink Corp.) Dell Customer Connect (HKLM-x32\...\{04A41EBC-AB30-4574-A14D-E0CDFE31AB70}) (Version: 1.5.1.0 - Dell Inc.) Dell Digital Delivery (HKLM-x32\...\{4B38FF9D-7308-411D-93BF-CCF259B476ED}) (Version: 3.5.2013.0 - Dell Products, LP) Dell Help & Support (HKLM\...\{8917AEA5-01A5-476F-AA27-A52EA6C94212}) (Version: 2.6.1.0 - Dell Inc.) Hidden Dell Help & Support (HKLM-x32\...\InstallShield_{8917AEA5-01A5-476F-AA27-A52EA6C94212}) (Version: 2.6.1.0 - Dell Inc.) Dell Product Registration (HKLM-x32\...\InstallShield_{48114909-3C3B-43E6-BF98-AE9C396500A3}) (Version: 3.0.127.0 - Dell Inc.) Dell SupportAssist (HKLM\...\{AEFE431B-C6FB-449E-B2DB-93E67B8B1DAF}) (Version: 3.4.0.200 - Dell Inc.) Dell SupportAssist Remediation (HKLM\...\{5832D99C-C9C6-437F-861C-43ED6333956F}) (Version: 4.1.0.6828 - Dell Inc.) Hidden Dell SupportAssist Remediation (HKLM-x32\...\{48253a97-70d4-4166-9a2b-80b3bb2fcc75}) (Version: 4.1.0.6828 - Dell Inc.) Dell Update - SupportAssist Update Plugin (HKLM\...\{77C86F54-9452-4EB6-B4C3-8A57FBF72D2B}) (Version: 4.4.0.9836 - Dell Inc.) Hidden Dell Update - SupportAssist Update Plugin (HKLM-x32\...\{d2a00335-3e50-405c-8c5d-32e2a636bbe1}) (Version: 4.4.0.9836 - Dell Inc.) Dell Update (HKLM-x32\...\{5EBBC1DA-975F-44A0-B438-F325BCD45577}) (Version: 3.0.1 - Dell Inc.) dr.fone toolkit for Android (Version 8.3.2) (HKLM-x32\...\{7B08A1E1-3644-4237-B39D-762B5F5564D0}_is1) (Version: 8.3.2.62 - Wondershare Technology Co.,Ltd.) Dropbox (HKLM-x32\...\Dropbox) (Version: 86.4.146 - Dropbox, Inc.) Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.241.1 - Dropbox, Inc.) Hidden EaseUS Data Recovery Wizard (HKLM\...\EaseUS Data Recovery Wizard_is1) (Version: - EaseUS) EaseUS Partition Master 12.5 (HKLM-x32\...\EaseUS Partition Master_is1) (Version: - EaseUS) Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.4.0 - Seiko Epson Corporation) Epson Customer Research Participation (HKLM\...\{B26449A6-6007-4460-B4FE-C4776115BCEA}) (Version: 1.82.0000 - Seiko Epson Corporation) Epson Event Manager (HKLM-x32\...\{9F205E94-9E42-4486-A92A-DF3F6CB85444}) (Version: 3.10.0061 - Seiko Epson Corporation) EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation) Epson Software Updater (HKLM-x32\...\{1028AD34-EB8A-4136-9A93-27FC60FD0A40}) (Version: 4.4.11 - Seiko Epson Corporation) EPSON XP-410 Series Printer Uninstall (HKLM\...\EPSON XP-410 Series) (Version: - SEIKO EPSON Corporation) EpsonNet Print (HKLM\...\{96ED1D58-440C-4345-8FEE-C4781366C67F}) (Version: 3.1.4.0 - SEIKO EPSON Corporation) erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden FileViewPro (HKLM\...\FileViewPro_is1) (Version: 1.1.0.0 - Solvusoft Corporation) Free Timer (HKLM-x32\...\{2AE4F065-5A3C-486D-81B4-161D4693303E}_is1) (Version: 4.0.0.0 - Comfort Software Group) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 78.0.3904.108 - Google LLC) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.341 - Google LLC) Hidden Html Editor (HKLM-x32\...\{6C6420A4-F6B1-4095-B06A-9931A7C725FC}) (Version: 1.0.0 - MSDN) ICA (HKLM-x32\...\{998717E5-1031-4D28-A143-48ADAF062E5F}) (Version: 19.2.0.7 - Corel Corporation) Hidden IconHandler 64 bit (HKLM\...\{4E82E2E9-668B-4F8A-814A-78E163FCDBCD}) (Version: 2.0 - Corel Corporation) Hidden Intel(R) Chipset Device Software (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel(R) Corporation) Hidden Intel(R) Online Connect Software Asset Manager (HKLM-x32\...\{AE956AB9-CD98-4F1E-8B9E-C3C66E290D64}) (Version: 3.4.2072 - Intel Corporation) Hidden Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 26.20.100.6951 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 15.5.2.1054 - Intel Corporation) Intel(R) Ready Mode Technology (HKLM\...\{CC3C017C-876D-4A31-A128-593FF92A1FE7}) (Version: 1.1.70.528 - Intel Corporation) Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1725.1 - Intel Corporation) Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00000060-0200-1033-84C8-B8D95FA3C8C3}) (Version: 20.60.0 - Intel Corporation) Intel® PROSet/Wireless Software (HKLM-x32\...\{50cf70be-570a-46b0-8a05-ea84ad3b4a36}) (Version: 21.20.0 - Intel Corporation) IPM_PSP_COM (HKLM-x32\...\{9A86C6EE-2CCC-4A51-BCC8-AAF97C2F4615}) (Version: 19.2.0.7 - Corel Corporation) Hidden IPM_PSP_COM64 (HKLM\...\{966E78A9-AB34-4FC6-BEDA-7D3F1F42121D}) (Version: 19.2.0.7 - Corel Corporation) Hidden Logitech Options (HKLM\...\LogiOptions) (Version: 8.0.863 - Logitech) Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.80 - Logitech Inc.) Maxx Audio Installer (x64) (HKLM\...\{307032B2-6AF2-46D7-B933-62438DEB2B9A}) (Version: 2.7.9177.0 - Waves Audio Ltd.) Hidden Microsoft Office 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.12228.20332 - Microsoft Corporation) Microsoft Office Home and Student 2016 - en-us (HKLM\...\HomeStudentRetail - en-us) (Version: 16.0.12228.20332 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-2640053030-2595494242-2820618962-1001\...\OneDriveSetup.exe) (Version: 19.192.0926.0012 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x64) - 14.11.25325 (HKLM-x32\...\{6c6356fe-cbfa-4944-9bed-a9e99f45cb7a}) (Version: 14.11.25325.0 - Microsoft Corporation) MiniTool Power Data Recovery 7.5 (HKLM\...\{E1BCD081-4BF4-4E2F-832A-911EC42EF3C5}_is1) (Version: 7.5 - MiniTool Solution Ltd.) NetworkRepairTool (HKLM-x32\...\{86E68F57-FAFE-4052-BDD4-3B90C38236AE}) (Version: 1.2.16.0 - Brother Industries, Ltd.) Hidden NewBlue Video Essentials for Windows (HKLM-x32\...\NewBlue Video Essentials for Windows) (Version: 3.0 - NewBlue) Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 7.7.1 - Notepad++ Team) Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.12228.20332 - Microsoft Corporation) Hidden Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.12228.20332 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.12228.20332 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.12228.20332 - Microsoft Corporation) Hidden OpenOffice 4.1.5 (HKLM-x32\...\{ABCAD346-4F4B-49E9-9AA1-28EF8C26059D}) (Version: 4.15.9789 - Apache Software Foundation) Painter Essentials 5 - Contentx64 (HKLM\...\{F62567D5-C772-44A9-8197-3B16D42EB944}) (Version: 5.0 - Corel Corporation) Hidden Painter Essentials 5 - Core (HKLM\...\{8E99D572-EE7E-4840-9C79-FA26C1FA08D2}) (Version: 5.0.1 - Corel Corporation) Hidden Painter Essentials 5 - Corex64 (HKLM\...\{5A595A4C-E10E-4695-8914-317AE77CBB79}) (Version: 5.0 - Corel Corporation) Hidden Painter Essentials 5 - CT (HKLM\...\{26489B02-A6F9-4F46-A59D-DB65FA8FD4F9}) (Version: 5.0 - Corel Corporation) Hidden Painter Essentials 5 - DE (HKLM\...\{99211142-E2B0-4CE8-A35A-792A531BAD40}) (Version: 5.0.1 - Corel Corporation) Hidden Painter Essentials 5 - EN (HKLM\...\{662D2525-13B4-41BF-824F-53A2E0D6FA82}) (Version: 5.0.1 - Corel Corporation) Hidden Painter Essentials 5 - FR (HKLM\...\{B00BA6C2-FD72-4434-A82D-415C65DA359C}) (Version: 5.0 - Corel Corporation) Hidden Painter Essentials 5 - Setup Files (HKLM\...\{7E35BD37-3F00-4FCB-A357-92F5D0CDEC2A}) (Version: 5.0 - Corel Corporation) Hidden PDF Combine (HKLM-x32\...\PDF Combine_is1) (Version: 2.5 - Softplicity, Inc.) PowerENGAGE (HKLM-x32\...\{BFE5C68B-E6D4-4421-9ACF-2B8C4BC2D2A1}) (Version: 3.2.13 - Aviata, Inc.) Hidden proDAD Adorage 3.0 (HKLM-x32\...\proDAD-Adorage-3.0) (Version: 3.0.114.1 - proDAD GmbH) Product Registration (HKLM\...\{48114909-3C3B-43E6-BF98-AE9C396500A3}) (Version: 3.0.127.0 - Dell Inc.) Hidden PSPPContent (HKLM-x32\...\{91773E30-F29C-4381-854A-95281DEB8DA1}) (Version: 19.2.0.7 - Corel Corporation) Hidden PSPPHelp (HKLM-x32\...\{9F087D85-EDDC-4DC4-B665-AFDD3734D987}) (Version: 19.2.0.7 - Corel Corporation) Hidden PSPPro64 (HKLM\...\{9722764A-D7C1-483A-931C-9C0A95D5F4EB}) (Version: 19.2.0.7 - Corel Corporation) Hidden Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8248 - Realtek Semiconductor Corp.) Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform) Samsung Kies3 (HKLM-x32\...\{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16084.2 - Samsung Electronics Co., Ltd.) Hidden Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16084.2 - Samsung Electronics Co., Ltd.) SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.) Setup (HKLM-x32\...\{9E0054AB-F957-4177-850E-3541960DBD53}) (Version: 19.2.0.7 - Corel Corporation) Hidden Simple Driver Updater (HKLM\...\Simple Driver Updater) (Version: 5.31.4.2 - Corel Corporation) SimpleOCR 3.1 (HKLM-x32\...\SimpleOCR 3.1) (Version: - ) Skype version 8.54 (HKLM-x32\...\Skype_is1) (Version: 8.54 - Skype Technologies S.A.) SoftwareUpdateNotification (HKLM-x32\...\{34F12379-C924-41E6-921D-51C71217F58C}) (Version: 1.0.9.0 - Brother Industries, Ltd.) Hidden StatusMonitor (HKLM-x32\...\{40578A7A-6E36-457F-A4F0-45BC37EB61FD}) (Version: 1.20.1.0 - Brother Insutries Ltd.) Hidden TurboTax 2018 (HKLM-x32\...\TurboTax 2018) (Version: 2018.0 - Intuit, Inc) Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{16AD6161-2E47-4BF1-AA77-0946EFE93E08}) (Version: 2.61.0.0 - Microsoft Corporation) UsbRepairTool (HKLM-x32\...\{F8762A81-32B5-4144-9F3C-9274F515A651}) (Version: 1.4.0.0 - Brother Industries, Ltd.) Hidden Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.) Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden Windows 10 Upgrade Assistant (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22175 - Microsoft Corporation) Windows 7 Games for Windows 8 and 10 (HKLM-x32\...\MicrosoftGamesForWin8) (Version: 1.1.0.10 - ) Windows Boot Genius (HKLM-x32\...\Windows Boot Genius) (Version: - Tenorshare, Inc.) WinZip 22.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C24115}) (Version: 22.0.12670 - Corel Corporation) WinZip Courier (HKLM-x32\...\{1F8A7889-6DFE-4EA7-9A5E-10F3D797606C}) (Version: 8.0.12599 - WinZip Computing, S.L. ) Wondershare Helper Compact 2.5.2 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.2 - Wondershare) Packages: ========= Autodesk SketchBook -> C:\Program Files\WindowsApps\89006A2E.AutodeskSketchBook_5.1.0.0_x64__tf1gferkr813w [2019-11-05] (Autodesk Inc.) Canon Inkjet Print Utility -> C:\Program Files\WindowsApps\34791E63.CanonInkjetPrintUtility_2.8.0.1_neutral__6e5tt8cgb93ep [2019-10-11] (Canon Inc.) Clipboard -> C:\Program Files\WindowsApps\11361JustinChase.Clipboard_1.6.0.18_neutral__aahkhnxzpwnc4 [2019-02-28] (Justin Chase) DatabaseDocs -> C:\Program Files\WindowsApps\7804SlickScripts.SlickSheets_1.1.0.0_x86__6pj3caexj1gdt [2017-11-20] (Slick Scripts) Dell SupportAssist for Home PCs -> C:\Program Files\WindowsApps\DellInc.DellSupportAssistforPCs_3.4.7.0_x64__htrsf667h5kn2 [2019-12-02] (Dell Inc) Disney Magic Kingdoms -> C:\Program Files\WindowsApps\A278AB0D.DisneyMagicKingdoms_4.5.1.2_x86__h6adky7gbf63m [2019-11-25] (Gameloft.) Free Timer -> C:\Program Files\WindowsApps\35527Liquid47.FreeTimer_2.0.0.4_neutral__y1fzmhwcb5c58 [2018-11-09] (Family Apps) March of Empires: War of Lords -> C:\Program Files\WindowsApps\A278AB0D.MarchofEmpires_4.5.0.9_x86__h6adky7gbf63m [2019-12-04] (Gameloft.) Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-27] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-27] (Microsoft Corporation) [MS Ad] Microsoft News -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.33.13094.0_x64__8wekyb3d8bbwe [2019-11-14] (Microsoft Corporation) [MS Ad] Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.5.12061.0_x64__8wekyb3d8bbwe [2019-12-11] (Microsoft Studios) [MS Ad] Movie Maker : Free Video Editor -> C:\Program Files\WindowsApps\39691Videopix.MovieMakerFreeVideoEditor_1.1.52.0_x64__dxz7h1qnd1pge [2019-12-04] (Videopix) [MS Ad] MSN Weather -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.33.13253.0_x64__8wekyb3d8bbwe [2019-11-23] (Microsoft Corporation) [MS Ad] Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.95.602.0_x64__mcm4njqhnhss8 [2019-10-25] (Netflix, Inc.) Photos Media Engine Add-on -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2019-11-06] (Microsoft Corporation) Reader Notification Client -> C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r [2018-12-07] (Adobe Systems Incorporated) ==================== Custom CLSID (Whitelisted): ============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-2640053030-2595494242-2820618962-1001_Classes\CLSID\{3560575F-7C2D-48AE-AB45-DAD430A95EBE}\InprocServer32 -> C:\Program Files (x86)\WinZip Courier\adxloader64.dll () [File not signed] CustomCLSID: HKU\S-1-5-21-2640053030-2595494242-2820618962-1001_Classes\CLSID\{943F19B2-32F9-4373-8D4C-DBE62B95F2CF}\InprocServer32 -> C:\Program Files (x86)\WinZip Courier\adxloader64.dll () [File not signed] CustomCLSID: HKU\S-1-5-21-2640053030-2595494242-2820618962-1001_Classes\CLSID\{a9872fee-5a55-4ecb-9b0f-b06fedcf14d1}\localserver32 -> C:\Program Files\Waves\MaxxAudio\MaxxAudioPro.exe (Waves Inc -> Waves Audio Ltd) CustomCLSID: HKU\S-1-5-21-2640053030-2595494242-2820618962-1001_Classes\CLSID\{CB2B673F-D441-4CD4-AFBE-DC4037CA4220}\InprocServer32 -> C:\Program Files\WinZip\adxloader64.WinZipExpressForOffice.dll () [File not signed] CustomCLSID: HKU\S-1-5-21-2640053030-2595494242-2820618962-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\ksmit\Dropbox [2017-10-20 12:33] ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-10-24] (Google LLC -> Google) ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-10-24] (Google LLC -> Google) ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-10-24] (Google LLC -> Google) ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.) ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-01-28] (Igor Pavlov) [File not signed] ContextMenuHandlers1-x32: [Adobe.Acrobat.ContextMenu] -> {D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802} => C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat Elements\ContextMenu.dll [2004-12-14] (Adobe Systems Inc.) [File not signed] ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2018-10-14] (Notepad++ -> ) ContextMenuHandlers1: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2016-04-27] (CyberLink Corp. -> Cyberlink) ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.) ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2019-10-24] (Google LLC -> Google) ContextMenuHandlers1: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2017-11-01] (Corel Corporation -> WinZip Computing, S.L.) ContextMenuHandlers2: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2016-04-27] (CyberLink Corp. -> Cyberlink) ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-01-28] (Igor Pavlov) [File not signed] ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.) ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2019-10-24] (Google LLC -> Google) ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd) ContextMenuHandlers4: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2017-11-01] (Corel Corporation -> WinZip Computing, S.L.) ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2017-06-27] (Advanced Micro Devices, Inc.) [File not signed] ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\ki132869.inf_amd64_052eb72d070df60f\igfxDTCM.dll [2019-07-15] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-01-28] (Igor Pavlov) [File not signed] ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd) ContextMenuHandlers6: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2017-11-01] (Corel Corporation -> WinZip Computing, S.L.) ==================== Codecs (Whitelisted) ==================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Drivers32: [vidc.pDAD] => C:\Windows\SysWOW64\prodad-codec.dll [506392 2016-04-27] (proDAD GmbH -> proDAD GmbH) ==================== Shortcuts & WMI ======================== ==================== Loaded Modules (Whitelisted) ============= 2016-11-25 10:18 - 2016-11-25 10:18 - 000139264 _____ () [File not signed] C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll 2018-12-09 08:05 - 2018-01-18 15:39 - 000519168 _____ () [File not signed] C:\Program Files (x86)\Browny02\BrMonitor.dll 2018-07-06 16:24 - 2016-07-21 09:54 - 000137728 _____ () [File not signed] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll 2018-07-06 16:24 - 2016-10-08 15:48 - 001506304 _____ () [File not signed] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll 2019-12-10 16:19 - 2019-11-12 18:26 - 001901568 _____ () [File not signed] C:\Program Files (x86)\Microsoft\Skype for Desktop\ffmpeg.dll 2019-12-10 16:19 - 2019-11-12 18:26 - 000115712 _____ () [File not signed] C:\Program Files (x86)\Microsoft\Skype for Desktop\libegl.dll 2019-12-10 16:19 - 2019-11-12 18:26 - 004636672 _____ () [File not signed] C:\Program Files (x86)\Microsoft\Skype for Desktop\libglesv2.dll 2017-03-13 03:35 - 2017-03-13 03:35 - 000609280 ____R () [File not signed] C:\Program Files (x86)\WinZip Courier\adxloader.dll 2017-11-01 22:00 - 2017-11-01 22:00 - 000609280 _____ () [File not signed] C:\Program Files\WinZip\adxloader.WinZipExpressForOffice.dll 2019-07-12 12:39 - 2017-07-05 12:43 - 000561152 _____ (CANON INC. ) [File not signed] C:\Program Files (x86)\Canon\Quick Menu\CCL.dll 2019-07-12 12:31 - 2015-01-09 07:46 - 000008192 _____ (CANON INC.) [File not signed] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNSS_ENU.DLL 2019-07-12 12:31 - 2015-01-09 07:44 - 000104960 _____ (CANON INC.) [File not signed] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNSS_IMG.dll 2019-07-12 12:39 - 2017-07-05 12:49 - 000593920 _____ (CANON INC.) [File not signed] C:\Program Files (x86)\Canon\Quick Menu\CNQMMWRP.dll 2019-07-12 12:31 - 2015-03-17 07:51 - 000375296 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNMN6PPM.DLL 2017-09-01 03:15 - 2017-09-01 03:15 - 002227456 _____ (Corel Corporation -> WinZip) [File not signed] C:\Program Files\WinZip\WinZip Smart Monitor\SystemInfo-vc100-mt.dll 2018-03-07 11:39 - 2018-01-28 07:00 - 000075776 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll 2019-08-06 08:46 - 2019-08-06 08:46 - 001658880 _____ (Microsoft Corporation) [File not signed] C:\WINDOWS\WinSxS\amd64_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.4053_none_8444db7d32915e4c\MFC80.DLL 2019-08-06 08:44 - 2019-08-06 08:44 - 000047104 _____ (Microsoft Corporation) [File not signed] C:\WINDOWS\WinSxS\amd64_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.4053_none_bc1d1e5b0be08790\MFC80ENU.DLL 2017-03-13 17:29 - 2017-03-13 17:29 - 000000000 ____L (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\AppVIsvSubsystems32.dll 2017-03-13 17:29 - 2017-03-13 17:29 - 000000000 ____L (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\c2r32.dll 2017-11-21 16:12 - 2015-02-27 10:35 - 000489984 _____ (Newtonsoft) [File not signed] C:\Program Files (x86)\Wondershare\WAF\2.4.3.227\Newtonsoft.Json.dll 2015-12-17 10:11 - 2015-12-17 10:11 - 000132096 _____ (Seiko Epson Corporation) [File not signed] C:\Program Files (x86)\EPSON Software\Event Manager\epnsm.dll 2009-10-21 16:39 - 2009-10-21 16:39 - 000291328 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\EPSON Software\Event Manager\LcMgr.dll 2016-09-14 13:31 - 2016-09-14 13:31 - 000500736 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\WINDOWS\System32\enppmon.dll 2019-11-22 10:02 - 2019-11-22 10:02 - 001899008 _____ (SQLite Development Team) [File not signed] C:\Program Files\Dell\SupportAssistAgent\bin\x64\sqlite3.dll 2019-08-07 07:15 - 2019-08-07 07:15 - 000039936 _____ (WinZip Computing, S.L.) [File not signed] C:\Users\ksmit\AppData\Local\assembly\dl3\C33ZC9YH.BYG\2CRA0O8H.V7E\c761fd7a\00f048d1_9f53d301\WinZipExpressForOffice.DLL 2018-07-06 16:24 - 2016-10-08 15:49 - 000708608 _____ (Wondershare) [File not signed] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSProducstInfo.dll 2017-11-21 16:12 - 2017-06-21 09:24 - 000087552 _____ (Wondershare) [File not signed] C:\Program Files (x86)\Wondershare\WAF\2.4.3.227\WsAppCollect.dll 2017-11-21 16:12 - 2017-06-21 09:24 - 000198144 _____ (Wondershare) [File not signed] C:\Program Files (x86)\Wondershare\WAF\2.4.3.227\WsAppCommon.dll ==================== Alternate Data Streams (Whitelisted) ======== ==================== Safe Mode (Whitelisted) ================== ==================== Association (Whitelisted) ================= (If an entry is included in the fixlist, the registry item will be restored to default or removed.) HKLM\...\.reg: Regedit.Document => c:\Winnt\Regedit.exe %1 <==== ATTENTION ==================== Internet Explorer trusted/restricted ========== ==================== Hosts content: ========================= (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2016-07-16 03:47 - 2016-07-16 03:45 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts ==================== Other Areas =========================== (Currently there is no automatic fix for this section.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\ HKU\S-1-5-21-2640053030-2595494242-2820618962-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\ksmit\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Windows Firewall is enabled. Network Binding: ============= Wi-Fi: Intel(R) Technology Access Filter Driver -> nt_ndisrd (enabled) Ethernet: Intel(R) Technology Access Filter Driver -> nt_ndisrd (enabled) ==================== MSCONFIG/TASK MANAGER disabled items == (If an entry is included in the fixlist, it will be removed.) HKLM\...\StartupApproved\Run: => "WinZip UN" HKLM\...\StartupApproved\Run: => "WinZip PreLoader" HKLM\...\StartupApproved\Run32: => "EaseUS EPM Tray Agent" HKU\S-1-5-21-2640053030-2595494242-2820618962-1001\...\StartupApproved\Run: => "WinZipPrivacyProtector" ==================== FirewallRules (Whitelisted) ================ (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{E3163080-B44B-4CD5-A114-2DD5B83704EC}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe (Intuit, Inc. -> Intuit Inc.) FirewallRules: [{9992A6AC-B526-45C5-A58D-B1CF5F52783B}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe (Intuit, Inc. -> Intuit Inc.) FirewallRules: [{E055603B-1D40-48B9-8E64-A910CE0E1D11}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe (Intuit, Inc. -> Intuit Inc.) FirewallRules: [{753D1A27-B7BC-4718-B118-E7E2C449E875}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe (Intuit, Inc. -> Intuit Inc.) FirewallRules: [{E27A7D9F-CF8F-4A9A-9F1F-68521597A929}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe (Intuit, Inc. -> Intuit Inc.) FirewallRules: [{61C009CF-DB28-408C-8B40-389DD8361B4F}] => (Allow) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdater.exe (Intuit, Inc. -> Intuit Inc.) FirewallRules: [{133DA323-7D14-4EE0-83E5-5564B4EB5C34}] => (Allow) C:\Program Files (x86)\Brother\BRAdmin Professional 3\bradminv3.exe (Brother Industries, Ltd. -> Brother Industries, Ltd.) FirewallRules: [{BAA2A165-35F9-4A88-8F93-FEC749D35C79}] => (Allow) C:\Program Files (x86)\Brother\BRAdmin Professional 3\bradminv3.exe (Brother Industries, Ltd. -> Brother Industries, Ltd.) FirewallRules: [{C290D4A3-C353-4F2E-823A-AEB6B515888F}] => (Allow) C:\Program Files (x86)\Brother\BRAdmin Professional 3\auditorserver.exe (Brother Industries, Ltd. -> ) FirewallRules: [{6580F11D-C05F-4D8D-ABD0-741CEC8D2871}] => (Allow) C:\Program Files (x86)\Brother\BRAdmin Professional 3\auditorserver.exe (Brother Industries, Ltd. -> ) FirewallRules: [{8B1006F1-925B-47BE-8D2B-7A4D2BA7270F}] => (Allow) C:\Program Files (x86)\Brother\BRAdmin Professional 3\discover.exe (Brother Industries, Ltd. -> ) FirewallRules: [{567335A1-5CEB-4088-94E1-7C91CEF2203C}] => (Allow) C:\Program Files (x86)\Brother\BRAdmin Professional 3\discover.exe (Brother Industries, Ltd. -> ) FirewallRules: [{388C495D-F8E1-4395-9608-E3D075508DFF}] => (Allow) LPort=54955 FirewallRules: [{E2952F8B-211D-452D-8B12-FB3D1B413862}] => (Allow) LPort=54950 FirewallRules: [{D5EB9ECE-DCCC-46AD-BE5D-1D89CBBECB49}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) FirewallRules: [{853F2FA7-E11F-4DE6-BBC4-E9492FAE04A4}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) FirewallRules: [UDP Query User{45A59D1C-22D1-448E-AA31-DD824B501BDD}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) FirewallRules: [TCP Query User{01923777-9FBE-4FB9-AFD4-93BFF688145A}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) FirewallRules: [{999BE493-DC95-4BC6-A611-8D358BFFEACE}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) FirewallRules: [{0C03C41F-6004-42C6-8B55-690A0604EAB7}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) FirewallRules: [{9E85F22B-3D98-4EA5-95D2-150F027E919E}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) FirewallRules: [{2A864918-9084-4760-823E-46956B238C89}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) FirewallRules: [{8249E7D4-5A0B-4ACE-8A1F-A20A86BD216B}] => (Allow) C:\Program Files (x86)\CyberLink\CyberLink Media Suite\PowerDVD14\PowerDVD.exe (CyberLink Corp. -> CyberLink Corp.) FirewallRules: [{5972240C-3AA7-427C-8511-A80FD5035922}] => (Allow) C:\Program Files (x86)\CyberLink\CyberLink Media Suite\PowerDVD14\Movie\PowerDVDMovie.exe (CyberLink Corp. -> CyberLink Corp.) FirewallRules: [{73392DC1-7286-4B34-8687-F265B72CE46F}] => (Allow) C:\Program Files (x86)\CyberLink\CyberLink Media Suite\PowerDVD14\Movie\PowerDVD Cinema\PowerDVDCinema.exe (CyberLink Corp. -> CyberLink Corp.) FirewallRules: [{8637AD39-95B7-4805-9B34-44C0EE63D281}] => (Allow) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.EXE (Logitech Inc -> Logitech, Inc.) FirewallRules: [{464289A6-CD21-42BE-8AC4-A37EE7AF06F4}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation -> ) FirewallRules: [{D5BB39E8-00A0-4A55-BA5F-F469B3EB33C7}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{8D9D58E0-703A-4929-8C5D-458DA87C40F3}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [{23336599-FC4C-4BBA-9DF5-9FA554B3F2EC}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.) FirewallRules: [{D7B2F2CD-2E2D-4542-BBCE-F9653FE40AC1}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{AB90D1E2-6365-4088-9A15-7D4887FE038C}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) ==================== Restore Points ========================= 22-11-2019 11:47:30 Scheduled Checkpoint 02-12-2019 10:44:25 Scheduled Checkpoint 11-12-2019 10:25:12 Windows Update ==================== Faulty Device Manager Devices ============ ==================== Event log errors: ======================== Application errors: ================== Error: (12/12/2019 05:44:45 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1020) (User: NT AUTHORITY) Description: The required buffer size is greater than the buffer size passed to the Collect function of the "C:\Windows\System32\perfts.dll" Extensible Counter DLL for the "LSM" service. The given buffer size was 55832 and the required size was 56408. Error: (12/12/2019 05:42:01 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (9384,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (12/12/2019 05:20:27 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (14796,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (12/12/2019 04:39:40 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (19812,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (12/12/2019 12:36:26 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (13080,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (12/12/2019 12:19:41 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (22060,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (12/12/2019 12:05:53 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (21520,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (12/12/2019 11:36:23 AM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (19592,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. System errors: ============= Error: (12/11/2019 06:33:55 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: The Dell Digital Delivery Service service terminated unexpectedly. It has done this 1 time(s). Error: (12/11/2019 06:30:40 PM) (Source: DCOM) (EventID: 10010) (User: DELL-8920) Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error: (12/11/2019 06:30:40 PM) (Source: DCOM) (EventID: 10010) (User: DELL-8920) Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error: (12/11/2019 06:30:40 PM) (Source: DCOM) (EventID: 10010) (User: DELL-8920) Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error: (12/11/2019 06:30:40 PM) (Source: DCOM) (EventID: 10010) (User: DELL-8920) Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error: (12/11/2019 06:30:40 PM) (Source: DCOM) (EventID: 10010) (User: DELL-8920) Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error: (12/11/2019 06:30:40 PM) (Source: DCOM) (EventID: 10010) (User: DELL-8920) Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Error: (12/11/2019 06:30:40 PM) (Source: DCOM) (EventID: 10010) (User: DELL-8920) Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout. Windows Defender: =================================== Date: 2019-12-12 17:15:40.659 Description: Windows Defender Antivirus scan has been stopped before completion. Scan ID: {EA6D61B1-479A-45E8-8D5B-74182E385AFB} Scan Type: Antimalware Scan Parameters: Full Scan Date: 2019-12-12 17:15:40.657 Description: Windows Defender Antivirus has detected malware or other potentially unwanted software. For more information please see the following: https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Bluteal!rfn&threatid=2147724737&enterprise=0 Name: Trojan:Win32/Bluteal!rfn ID: 2147724737 Severity: Severe Category: Trojan Path: containerfile:_C:\Users\ksmit\Downloads\backup-yoncalla.net-10-11-2019.tar.gz; containerfile:_C:\Users\ksmit\Downloads\boldgrid-backup-yoncalla.net-a82097b2-20191007-175508.zip; containerfile:_C:\Users\ksmit\OneDrive\Documents\wordpress\Backup 10_11_19\boldgrid_backup\boldgrid-backup-yoncalla.net-a82097b2-20191007-175508.zip; containerfile:_C:\Users\ksmit\OneDrive\Documents\wordpress\Backup 10_7_19\wp-admin\includes\wp-seca.php; file:_C:\Users\ksmit\Downloads\backup-yoncalla.net-10-11-2019.tar.gz->(GZip)->./boldgrid_backup/boldgrid-backup-yoncalla.net-a82097b2-20191007-175508.zip->wp-admin/includes/wp-seca.php->(UTF-8); file:_C:\Users\ksmit\Downloads\boldgrid-backup-yoncalla.net-a82097b2-20191007-175508.zip->wp-admin/includes/wp-seca.php->(UTF-8); file:_C:\Users\ksmit\OneDrive\Documents\wordpress\Backup 10_11_19\boldgrid_backup\boldgrid-backup-yoncalla.net-a82097b2-20191007-175508.zip->wp-admin/includes/wp-seca.php->(UTF-8); file:_C:\Users\ksmit\OneDrive\Documents\wordpress\Backup 10_7_19\wp-admin\includes\w Detection Origin: Local machine Detection Type: Concrete Detection Source: User Process Name: Unknown Security intelligence Version: AV: 1.307.295.0, AS: 1.307.295.0, NIS: 1.307.295.0 Engine Version: AM: 1.1.16600.7, NIS: 1.1.16600.7 Date: 2019-12-12 17:15:40.656 Description: Windows Defender Antivirus has detected malware or other potentially unwanted software. For more information please see the following: https://go.microsoft.com/fwlink/?linkid=37020&name=Backdoor:PHP/Chopper.B!dha&threatid=2147735632&enterprise=0 Name: Backdoor:PHP/Chopper.B!dha ID: 2147735632 Severity: Severe Category: Backdoor Path: containerfile:_C:\Users\ksmit\Downloads\backup-yoncalla.net-10-11-2019.tar.gz; containerfile:_C:\Users\ksmit\Downloads\boldgrid-backup-yoncalla.net-a82097b2-20191007-175508.zip; containerfile:_C:\Users\ksmit\OneDrive\Documents\wordpress\Backup 10_11_19\boldgrid_backup\boldgrid-backup-yoncalla.net-a82097b2-20191007-175508.zip; file:_C:\Users\ksmit\Downloads\backup-yoncalla.net-10-11-2019.tar.gz->(GZip)->./boldgrid_backup/boldgrid-backup-yoncalla.net-a82097b2-20191007-175508.zip->wp-admin/images/404.php; file:_C:\Users\ksmit\Downloads\backup-yoncalla.net-10-11-2019.tar.gz->(GZip)->./quarantine/quarantine_2019-10-08-52/hacks/home/yoncal5/public_html/wp-admin/images/404.php; file:_C:\Users\ksmit\Downloads\boldgrid-backup-yoncalla.net-a82097b2-20191007-175508.zip->wp-admin/images/404.php; file:_C:\Users\ksmit\OneDrive\Documents\wordpress\Backup 10_11_19\boldgrid_backup\boldgrid-backup-yoncalla.net-a82097b2-20191007-175508.zip->wp-admin/images/404.php Detection Origin: Local machine Detection Type: Concrete Detection Source: User Process Name: Unknown Security intelligence Version: AV: 1.307.295.0, AS: 1.307.295.0, NIS: 1.307.295.0 Engine Version: AM: 1.1.16600.7, NIS: 1.1.16600.7 Date: 2019-12-12 17:15:40.655 Description: Windows Defender Antivirus has detected malware or other potentially unwanted software. For more information please see the following: https://go.microsoft.com/fwlink/?linkid=37020&name=Backdoor:PHP/Yorcirekrikseng.E&threatid=2147740761&enterprise=0 Name: Backdoor:PHP/Yorcirekrikseng.E ID: 2147740761 Severity: Severe Category: Backdoor Path: containerfile:_C:\Users\ksmit\Downloads\backup-yoncalla.net-10-11-2019.tar.gz; file:_C:\Users\ksmit\Downloads\backup-yoncalla.net-10-11-2019.tar.gz->(GZip)->./public_html/wordpress/wp-content/uploads/2019/10/dex.php->(SCRIPT0002) Detection Origin: Local machine Detection Type: Concrete Detection Source: User Process Name: Unknown Security intelligence Version: AV: 1.307.295.0, AS: 1.307.295.0, NIS: 1.307.295.0 Engine Version: AM: 1.1.16600.7, NIS: 1.1.16600.7 Date: 2019-12-12 17:15:40.654 Description: Windows Defender Antivirus has detected malware or other potentially unwanted software. For more information please see the following: https://go.microsoft.com/fwlink/?linkid=37020&name=Backdoor:PHP/Webshell.D&threatid=2147651340&enterprise=0 Name: Backdoor:PHP/Webshell.D ID: 2147651340 Severity: Severe Category: Backdoor Path: containerfile:_C:\Users\ksmit\Downloads\backup-yoncalla.net-10-11-2019.tar.gz; containerfile:_C:\Users\ksmit\Downloads\boldgrid-backup-yoncalla.net-a82097b2-20191007-175508.zip; containerfile:_C:\Users\ksmit\OneDrive\Documents\wordpress\Backup 10_11_19\boldgrid_backup\boldgrid-backup-yoncalla.net-a82097b2-20191007-175508.zip; containerfile:_C:\Users\ksmit\OneDrive\Documents\wordpress\Backup 10_11_19\boldgrid_backup\boldgrid-backup-yoncalla.net-a82097b2-20191008-195955.zip; containerfile:_C:\Users\ksmit\OneDrive\Documents\wordpress\Backup 10_11_19\boldgrid_backup\boldgrid-backup-yoncalla.net-a82097b2-20191010-144540.zip; containerfile:_C:\Users\ksmit\OneDrive\Documents\wordpress\Backup 10_11_19\boldgrid_backup\boldgrid-backup-yoncalla.net-a82097b2-20191011-132417.zip; file:_C:\Users\ksmit\Downloads\backup-yoncalla.net-10-11-2019.tar.gz->(GZip)->./boldgrid_backup/boldgrid-backup-yoncalla.net-a82097b2-20191007-175508.zip->index.php; file:_C:\Users\ksmit\Downloads\backup-yoncalla.net-10-11-2019.tar.gz->(GZip)->. Detection Origin: Local machine Detection Type: Concrete Detection Source: User Process Name: Unknown Security intelligence Version: AV: 1.307.295.0, AS: 1.307.295.0, NIS: 1.307.295.0 Engine Version: AM: 1.1.16600.7, NIS: 1.1.16600.7 CodeIntegrity: =================================== Date: 2019-12-08 13:24:07.491 Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume7\Program Files\Google\Drive\googledrivesync64.dll that did not meet the Microsoft signing level requirements. Date: 2019-12-08 13:24:07.487 Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume7\Program Files\Google\Drive\googledrivesync64.dll that did not meet the Microsoft signing level requirements. Date: 2019-12-08 13:24:07.483 Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume7\Program Files\Google\Drive\googledrivesync64.dll that did not meet the Microsoft signing level requirements. Date: 2019-12-08 13:24:07.478 Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume7\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll that did not meet the Microsoft signing level requirements. Date: 2019-12-08 13:24:07.471 Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume7\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll that did not meet the Microsoft signing level requirements. Date: 2019-12-08 13:24:07.463 Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume7\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll that did not meet the Microsoft signing level requirements. Date: 2019-12-08 13:24:07.454 Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume7\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll that did not meet the Microsoft signing level requirements. Date: 2019-12-08 13:24:07.448 Description: Code Integrity determined that a process (\Device\HarddiskVolume7\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume7\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll that did not meet the Microsoft signing level requirements. ==================== Memory info =========================== BIOS: Dell Inc. 1.0.19 02/11/2019 Motherboard: Dell Inc. 0VHXCD Processor: Intel(R) Core(TM) i7-7700 CPU @ 3.60GHz Percentage of memory in use: 42% Total physical RAM: 24479.52 MB Available physical RAM: 14156.31 MB Total Virtual: 28063.52 MB Available Virtual: 12893.01 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:223.46 GB) (Free:44.1 GB) NTFS Drive d: (DATA) (Fixed) (Total:931.39 GB) (Free:931.26 GB) NTFS Drive e: (Seagate Expansion Drive) (Fixed) (Total:4657.4 GB) (Free:3496.22 GB) NTFS Drive j: (RECOVERY) (Fixed) (Total:31.99 GB) (Free:22.86 GB) FAT32 ==>[system with boot components (obtained from drive)] Drive k: (SmallDrive) (Fixed) (Total:1831.01 GB) (Free:1629.44 GB) NTFS \\?\Volume{b4c62b3c-bb35-47b8-8ce3-69a2fbcd7bbc}\ () (Fixed) (Total:0.83 GB) (Free:0.4 GB) NTFS \\?\Volume{f778225e-733d-437c-b386-3d386611e59c}\ (Image) (Fixed) (Total:12.49 GB) (Free:0.54 GB) NTFS \\?\Volume{8039ac69-8b1a-4f94-9942-a9389ed4033e}\ (DELLSUPPORT) (Fixed) (Total:1.08 GB) (Free:0.49 GB) NTFS \\?\Volume{b138f3f1-2320-4408-ba73-91e4eefd9cad}\ (ESP) (Fixed) (Total:0.48 GB) (Free:0.42 GB) FAT32 ==================== MBR & Partition Table ==================== ========================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: B37DB6DE) Partition: GPT. ========================================================== Disk: 1 (Size: 238.5 GB) (Disk ID: B37DB50F) Partition: GPT. ========================================================== Disk: 2 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: A6CAD1BA) Partition 1: (Active) - (Size=32 GB) - (Type=0C) Partition 2: (Not Active) - (Size=1831 GB) - (Type=07 NTFS) ========================================================== Disk: 3 (Size: 4657.5 GB) (Disk ID: 2A81BFB3) Partition: GPT. ==================== End of Addition.txt =======================