Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-05.2019 01
Ran by Bogdan Placintescu (15-05-2019 23:01:47)
Running from C:\Users\Bogdan Placintescu\Desktop
Windows 10 Pro Version 1809 17763.475 (X64) (2018-12-30 21:39:31)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1985958338-2759964917-1504332263-500 - Administrator - Disabled)
Bogdan Placintescu (S-1-5-21-1985958338-2759964917-1504332263-1000 - Administrator - Enabled) => C:\Users\Bogdan Placintescu
DefaultAccount (S-1-5-21-1985958338-2759964917-1504332263-503 - Limited - Disabled)
Guest (S-1-5-21-1985958338-2759964917-1504332263-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-1985958338-2759964917-1504332263-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-1985958338-2759964917-1504332263-1000\...\uTorrent) (Version: 3.5.3.44428 - BitTorrent Inc.)
1310 (HKLM-x32\...\{76A9FB3A-D7AB-4C8C-8C49-3CFDBF2D6C2D}) (Version: 140.0.425.000 - Hewlett-Packard) Hidden
1310_Help (HKLM-x32\...\{6D4553DF-2095-4D10-92C0-17934733B51D}) (Version: 82.0.58.000 - Hewlett-Packard) Hidden
1310Trb (HKLM-x32\...\{6D7E031C-4C05-4265-854A-FE9FDEA9984D}) (Version: 82.0.242.000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Acrobat DC (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 19.010.20100 - Adobe Systems Incorporated)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 19.010.20099 - Adobe Systems Incorporated)
Adobe Audition CC 2019 (HKLM-x32\...\AUDT_12_0_1) (Version: 12.0.1 - Adobe Systems Incorporated)
Adobe Bridge CC 2019 (HKLM-x32\...\KBRG_9_0_2) (Version: 9.0.2 - Adobe Systems Incorporated)
Adobe Character Animator CC (Beta) (HKLM-x32\...\ANMLBETA_1_0_6) (Version: 1.0.6 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.8.1.435 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.192 - Adobe)
Adobe Illustrator CC 2019 (HKLM-x32\...\ILST_23_0_2) (Version: 23.0.2 - Adobe Systems Incorporated)
Adobe Lightroom Classic CC (HKLM-x32\...\LTRM_8_2) (Version: 8.2 - Adobe Systems Incorporated)
Adobe Media Encoder CC 2019 (HKLM-x32\...\AME_13_0_2) (Version: 13.0.2 - Adobe Systems Incorporated)
Adobe Photoshop CC 2019 (HKLM-x32\...\PHSP_20_0_3) (Version: 20.0.3 - Adobe Systems Incorporated)
Adobe Premiere Pro CC 2019 (HKLM-x32\...\PPRO_13_0_3) (Version: 13.0.3 - Adobe Systems Incorporated)
AIO_CDB_ProductContext (HKLM-x32\...\{D5045A94-1D46-44A7-9C4F-7D05B40D82EC}) (Version: 140.0.425.000 - Hewlett-Packard) Hidden
AIO_CDB_Software (HKLM-x32\...\{2DFDE21D-AFFE-4CDD-BBD4-3B7832BEC036}) (Version: 140.0.428.000 - Hewlett-Packard) Hidden
AIO_Scan (HKLM-x32\...\{104066F4-5897-4067-85D3-4C88B67CCF75}) (Version: 130.0.421.000 - Hewlett-Packard) Hidden
Allegorithmic Substance Painter 2018.1.2 (HKLM\...\{33C3E9E2-0675-4196-9019-28AB9C5E9BB0}_is1) (Version: 2018.1.2 - Allegorithmic)
Apple Mobile Device Support (HKLM\...\{5FA8C4BE-8C74-4B9C-9B49-EBF759230189}) (Version: 12.1.0.25 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)
Autodesk Certificate Package (x64) - 5.1.4 (HKLM\...\{79D5E475-5EAB-4474-84F5-BD612337A175}) (Version: 5.1.4.100 - Autodesk)
Autodesk Desktop App (HKLM-x32\...\Autodesk Desktop App) (Version: 7.0.12.84 - Autodesk)
Autodesk License Service (x64) - 5.1.5 (HKLM\...\{3609A8D9-FC0C-4C9B-9F58-0B1D1A4FE556}) (Version: 5.1.5.0 - Autodesk)
Autodesk Maya 2018 (HKLM\...\{8502EAAD-CC62-498D-9C8D-CB5632762A61}) (Version: 18.5.0.7880 - Autodesk) Hidden
Autodesk Maya 2018 (HKLM\...\Autodesk Maya 2018) (Version: 18.5.0.7880 - Autodesk)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Bifrost for Maya 2018 (HKLM\...\{2CA9DC72-AB13-4FCE-ADE1-B20DED59D7FA}) (Version: 1.5.5.0 - Autodesk)
Bifrost for Maya 2018 1.5.5.0 (HKLM\...\Bifrost for Maya 2018) (Version: - )
Bifrost to Arnold for Maya 2018 1.5.0 Arnold-5.0.0.0 (HKLM\...\BifrostToArnold for Maya 2018 1.5.0 Arnold-5.0.0.0) (Version: 0.3.0.0 - Autodesk)
BifrostToArnold for Maya 2018 1.5.0 Arnold-5.0.0.0 (HKLM\...\{23779D18-6AD1-449E-AC36-F16D501230FE}) (Version: 0.3.0.0 - Autodesk) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
BufferChm (HKLM-x32\...\{FA0FF682-CC70-4C57-93CD-E276F3E7537E}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
ChromaCam (remove only) (HKLM-x32\...\ChromaCam) (Version: 2.2.1.14 - Personify, Inc.)
Copy (HKLM-x32\...\{9BE466FF-70B7-4DA8-807C-DB4C3610FDAA}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
Curse (HKLM-x32\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 6.0.0.0 - Curse)
Destinations (HKLM-x32\...\{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden
Destiny 2 (HKLM-x32\...\Destiny 2) (Version: - Blizzard Entertainment)
DeviceDiscovery (HKLM-x32\...\{1458BB78-1DC5-4BC0-B9A3-2B644F5A8105}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden
Discord (HKU\S-1-5-21-1985958338-2759964917-1504332263-1000\...\Discord) (Version: 0.0.305 - Discord Inc.)
DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 425.31 - NVIDIA Corporation) Hidden
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Fax (HKLM-x32\...\{9294F169-72EE-4D74-AE92-CA25F64B4FF8}) (Version: 140.0.307.000 - Hewlett-Packard) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 74.0.3729.157 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.11 - Google LLC) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Photosmart Officejet and Deskjet All-In-One Driver Software (HKLM\...\{6F5B70F0-EA6C-4A5B-BB16-8390BD66B251}) (Version: 14.0 - HP)
HPPhotoGadget (HKLM-x32\...\{CAE4213F-F797-439D-BD9E-79B71D115BE3}) (Version: 140.0.524.000 - Hewlett-Packard) Hidden
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{F70BCE36-25F2-4475-A918-6209B3D85BF3}) (Version: 15.0.179 - Intel Corporation)
Intel(R) Chipset Device Software (HKLM-x32\...\{44ded3eb-1686-46a6-9770-fd79096c29f7}) (Version: 10.1.1.45 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1068 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1633.3 - Intel Corporation)
Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.49.166.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32\...\{df682aff-4294-4ad1-aaa7-276931d5781f}) (Version: 1.49.166.0 - Intel Corporation) Hidden
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 4.0.0.36 - Intel Corporation)
iTunes (HKLM\...\{0019B70B-02B6-486A-A582-A99AB68F6C9D}) (Version: 12.9.3.3 - Apple Inc.)
Java 8 Update 171 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180171F0}) (Version: 8.0.1710.11 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Logitech Gaming Software 8.96 (HKLM\...\Logitech Gaming Software) (Version: 8.96.88 - Logitech Inc.)
Malwarebytes version 3.7.1.2839 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.7.1.2839 - Malwarebytes)
Microsoft Office Professional Plus 2016 - en-us (HKLM\...\ProPlusRetail - en-us) (Version: 16.0.11601.20178 - Microsoft Corporation)
Microsoft Office Professional Plus 2016 - ro-ro (HKLM\...\ProPlusRetail - ro-ro) (Version: 16.0.11601.20178 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.15.26706 (HKLM-x32\...\{95ac1cfa-f4fb-4d1b-8912-7f9d5fbb140d}) (Version: 14.15.26706.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.15.26706 (HKLM-x32\...\{7e9fae12-5bbf-47fb-b944-09c49e75c061}) (Version: 14.15.26706.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Firefox 66.0.5 (x64 en-US) (HKLM\...\Mozilla Firefox 66.0.5 (x64 en-US)) (Version: 66.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 66.0.5.7066 - Mozilla)
MSI Live Update 6 (HKLM-x32\...\{4F46CF54-47D2-41F4-B230-B0954C544420}}_is1) (Version: 6.2.0.39 - MSI)
MtoA for Maya 2018 (HKU\S-1-5-21-1985958338-2759964917-1504332263-1000\...\MtoA2018) (Version: 3.1.1.1 - Solid Angle)
Network64 (HKLM\...\{6BFAB6C1-6D46-46DB-A538-A269907C9F2F}) (Version: 140.0.306.000 - Hewlett-Packard) Hidden
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.15 - NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 3.18.0.102 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.18.0.102 - NVIDIA Corporation)
NVIDIA Graphics Driver 430.64 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 430.64 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.38.16 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.16 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 20.1.3 - OBS Project)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.11601.20178 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.11601.20178 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.11601.20178 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0418-1000-0000000FF1CE}) (Version: 16.0.11601.20178 - Microsoft Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 10.5.36.23506 - Electronic Arts, Inc.)
osu! (HKLM-x32\...\{2f92ca61-4ea7-462a-a74d-831fab9238e8}) (Version: latest - ppy Pty Ltd)
Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 2.21.20.606 - Razer Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8470 - Realtek Semiconductor Corp.)
RogueKiller version 13.2.0.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 13.2.0.0 - Adlice Software)
Scan (HKLM-x32\...\{06A1D88C-E102-4527-AF70-29FFD7AF215A}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden
Skype version 8.42 (HKLM-x32\...\Skype_is1) (Version: 8.42 - Skype Technologies S.A.)
Sophos Virus Removal Tool (HKLM-x32\...\{B829E117-D072-41EA-9606-9826A38D34C1}) (Version: 2.7.0 - Sophos Limited)
SPORE™ Creepy & Cute Parts Pack (HKLM-x32\...\{4BDCC41C-FFE7-40a4-BCB6-B558916868F7}_SPORE(TM) Creepy & Cute Parts Pack) (Version: 1.0.0.0 - Electronic Arts)
Status (HKLM-x32\...\{5B025634-7D5B-4B8D-BE2A-7943C1CF2D5D}) (Version: 140.0.342.000 - Hewlett-Packard) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Toolbox (HKLM-x32\...\{292F0F52-B62D-4E71-921B-89A682402201}) (Version: 140.0.596.000 - Hewlett-Packard) Hidden
TrayApp (HKLM-x32\...\{CD31E63D-47FD-491C-8117-CF201D0AFAB5}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden
Twitch (HKU\S-1-5-21-1985958338-2759964917-1504332263-1000\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 8.0.0 - Twitch Interactive, Inc.)
Unity (HKLM-x32\...\Unity) (Version: 2018.3.12f1 - Unity Technologies ApS)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{9CBA860F-7437-4A75-941C-8EF559F2D145}) (Version: 2.52.0.0 - Microsoft Corporation)
Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft)
UtechSmart 16400DPI VENUS Gaming Mouse version 1.1 (HKLM-x32\...\{5A0E98CD-3E42-4FA9-BA70-3EEFA31F67CE}_is1) (Version: 1.1 - UtechSmart)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.6 - VideoLAN)
Wacom Tablet (HKLM\...\Wacom Tablet Driver) (Version: 6.3.31-4 - Wacom Technology Corp.)
WebReg (HKLM-x32\...\{8EE94FD8-5F52-4463-A340-185D16328158}) (Version: 140.0.297.017 - Hewlett-Packard) Hidden
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)
ZBrush 4R7 (HKLM-x32\...\ZBrush 4R7 4R7) (Version: 4R7 - Pixologic)
Packages:
=========
Acrobat Notification Client -> C:\Program Files\WindowsApps\AcrobatNotificationClient_1.0.4.0_x86__e1rzdqpraam7r [2019-01-17] (Adobe Systems Incorporated)
Adobe XD CC -> C:\Program Files\WindowsApps\Adobe.CC.XD_16.0.2.8_x64__adky2gkssdxte [2019-02-23] (Adobe Systems Incorporated)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_95.1.531.0_x64__v10z8vjag6ke6 [2019-03-19] (HP Inc.)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1985958338-2759964917-1504332263-1000_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-2AC715432C9E} -> [Creative Cloud Files] => C:\Users\Bogdan Placintescu\Creative Cloud Files [2016-12-08 21:44]
CustomCLSID: HKU\S-1-5-21-1985958338-2759964917-1504332263-1000_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Bogdan Placintescu\AppData\Local\Microsoft\OneDrive\19.043.0304.0007\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-1985958338-2759964917-1504332263-1000_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Bogdan Placintescu\AppData\Local\Microsoft\OneDrive\19.043.0304.0007\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-1985958338-2759964917-1504332263-1000_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Bogdan Placintescu\AppData\Local\Microsoft\OneDrive\19.043.0304.0007\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-1985958338-2759964917-1504332263-1000_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems Incorporated -> Adobe Systems)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] (Adobe Systems Incorporated -> )
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] (Adobe Systems Incorporated -> )
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] (Adobe Systems Incorporated -> )
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] (Adobe Systems Incorporated -> )
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => E:\WinRAR\rarext.dll [2016-08-15] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => E:\WinRAR\rarext32.dll [2016-08-15] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2019-05-06] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] (Adobe Systems Incorporated -> )
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => E:\WinRAR\rarext.dll [2016-08-15] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => E:\WinRAR\rarext32.dll [2016-08-15] (win.rar GmbH -> Alexander Roshal)
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2018-08-20 18:55 - 2005-07-18 13:43 - 000160256 _____ () [File not signed] C:\Program Files (x86)\MSI\Live Update\unrar.dll
2019-05-15 17:46 - 2019-05-15 17:46 - 000015360 _____ () [File not signed] C:\WINDOWS\System32\tlpless.dll
2019-04-01 23:58 - 2019-04-01 23:58 - 000586752 _____ (DRM Technologies) [File not signed] C:\WINDOWS\Microsoft.NET\Framework\VERSION.dll
2019-04-01 23:58 - 2019-04-01 23:58 - 000586752 _____ (DRM Technologies) [File not signed] C:\WINDOWS\System32\msfte.dll
2011-08-18 01:29 - 2011-08-18 01:29 - 001039360 _____ (Hewlett-Packard Co.) [File not signed] c:\program files (x86)\hp\digital imaging\bin\hpslpsvc64.dll
2017-07-17 12:42 - 2017-08-23 17:48 - 001548288 _____ (The OpenSSL Project, hxxp://
www.openssl.org/) [File not signed] E:\Origin\LIBEAY32.dll
2017-07-17 12:42 - 2017-08-23 17:49 - 000395776 _____ (The OpenSSL Project, hxxp://
www.openssl.org/) [File not signed] E:\Origin\ssleay32.dll
2017-07-17 12:42 - 2018-04-10 16:01 - 001611264 _____ (The Qt Company Ltd) [File not signed] E:\Origin\platforms\qwindows.dll
2017-07-17 12:42 - 2018-04-10 16:02 - 005487104 _____ (The Qt Company Ltd) [File not signed] E:\Origin\Qt5Core.dll
2017-07-17 12:42 - 2018-04-10 16:02 - 005841920 _____ (The Qt Company Ltd) [File not signed] E:\Origin\Qt5Gui.dll
2017-07-17 12:42 - 2018-04-10 16:02 - 001177600 _____ (The Qt Company Ltd) [File not signed] E:\Origin\Qt5Network.dll
2017-07-17 12:42 - 2018-04-10 16:02 - 005089792 _____ (The Qt Company Ltd) [File not signed] E:\Origin\Qt5Widgets.dll
2017-07-17 12:42 - 2018-04-10 16:02 - 000184832 _____ (The Qt Company Ltd) [File not signed] E:\Origin\Qt5Xml.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\WINDOWS\system32\Drivers\qflzbsnv.sys:changelist [562]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\xgctaxzu.sys:changelist [562]
AlternateDataStreams: C:\Users\Bogdan Placintescu\Desktop\CV stuff:AFP_AfpInfo [122]
AlternateDataStreams: C:\Users\Bogdan Placintescu\Desktop\Diploma SAE anul 2.jpeg:3or4kl4x13tuuug3Byamue2s4b [97]
AlternateDataStreams: C:\Users\Bogdan Placintescu\Desktop\Diploma SAE anul 2.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
AlternateDataStreams: C:\Users\Bogdan Placintescu\Desktop\Gaem:AFP_AfpInfo [122]
AlternateDataStreams: C:\Users\Bogdan Placintescu\Desktop\Hop!_NEW:AFP_AfpInfo [122]
AlternateDataStreams: C:\Users\Bogdan Placintescu\Desktop\Safari Bookmarks.html:AFP_AfpInfo [122]
AlternateDataStreams: C:\Users\Bogdan Placintescu\Desktop\Safari Bookmarks.html:com.apple.metadata_kMDItemUserTags [86]
AlternateDataStreams: C:\Users\Bogdan Placintescu\Desktop\safari reading list.html:AFP_AfpInfo [122]
AlternateDataStreams: C:\Users\Bogdan Placintescu\Desktop\safari reading list.html:com.apple.metadata_kMDItemUserTags [86]
AlternateDataStreams: C:\Users\Public\.DS_Store:AFP_AfpInfo [122]
AlternateDataStreams: C:\Users\Public\AppData:CSM [470]
AlternateDataStreams: C:\Users\Public\Documents\.DS_Store:AFP_AfpInfo [122]
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2016-11-03 20:45 - 2016-12-08 21:47 - 000000959 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1
127.0.0.1
127.0.0.1 na1r.services.adobe.com
127.0.0.1 hlrcv.stage.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 activate.adobe.com
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Program Files (x86)\Common Files\Intel\Shared Libraries\redist\intel64\compiler;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\System32\OpenSSH\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-1985958338-2759964917-1504332263-1000\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img1.jpg
DNS Servers: 192.168.100.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
If an entry is included in the fixlist, it will be removed.
HKLM\...\StartupApproved\StartupFolder: => "Killer Network Manager.lnk"
HKLM\...\StartupApproved\StartupFolder: => "HP Digital Imaging Monitor.lnk"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run: => "NahimicVRSvc64"
HKLM\...\StartupApproved\Run: => "NahimicVRSvc32"
HKLM\...\StartupApproved\Run: => "AdobeGCInvoker-1.0"
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run32: => "ElectraV2Helper"
HKLM\...\StartupApproved\Run32: => "Autodesk Desktop App"
HKLM\...\StartupApproved\Run32: => "Live Update"
HKLM\...\StartupApproved\Run32: => "Razer Synapse"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"
HKLM\...\StartupApproved\Run32: => "T1gmmouseRun"
HKLM\...\StartupApproved\Run32: => "OGMgmmouseRun"
HKU\S-1-5-21-1985958338-2759964917-1504332263-1000\...\StartupApproved\Run: => "Akamai NetSession Interface"
HKU\S-1-5-21-1985958338-2759964917-1504332263-1000\...\StartupApproved\Run: => "World of Tanks"
HKU\S-1-5-21-1985958338-2759964917-1504332263-1000\...\StartupApproved\Run: => "Adobe Acrobat Synchronizer"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [SNMP-In-UDP] => (Allow) %SystemRoot%\system32\snmp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [SNMP-Out-UDP] => (Allow) %SystemRoot%\system32\snmp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [SNMP-In-UDP-NoScope] => (Allow) %SystemRoot%\system32\snmp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [SNMP-Out-UDP-NoScope] => (Allow) %SystemRoot%\system32\snmp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [UDP Query User{E5C0101A-38E8-4211-AECE-63ED873D7C73}C:\program files (x86)\world of warcraft\_retail_\utils\wowvoiceproxy.exe] => (Allow) C:\program files (x86)\world of warcraft\_retail_\utils\wowvoiceproxy.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [TCP Query User{2CE5288E-BB97-4ED9-BF80-CE305BF7D1B3}C:\program files (x86)\world of warcraft\_retail_\utils\wowvoiceproxy.exe] => (Allow) C:\program files (x86)\world of warcraft\_retail_\utils\wowvoiceproxy.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [UDP Query User{FD74DFC6-A2D4-4014-B23A-5DE9E966ECDE}E:\allegorithmic\substance painter\substance painter.exe] => (Allow) E:\allegorithmic\substance painter\substance painter.exe (Allegorithmic -> Allegorithmic) [File not signed]
FirewallRules: [TCP Query User{3957E0C4-666B-4047-85D3-B78457658D33}E:\allegorithmic\substance painter\substance painter.exe] => (Allow) E:\allegorithmic\substance painter\substance painter.exe (Allegorithmic -> Allegorithmic) [File not signed]
FirewallRules: [UDP Query User{9C4D7925-BE60-40ED-9253-4D9090F4E585}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [TCP Query User{1DD80A04-5450-4A51-9DFD-75907B800A9A}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [{D966DE68-C7E4-47B8-8E11-99E9AA106928}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{5DEE59AB-D1F9-48EE-AAB9-52D96B7241AF}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{4907D086-2533-4261-9F8D-BC4AD0D4652A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{C87BFE46-265D-4582-A83D-23D6EC35E4FC}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{ED60CE49-98D6-4FAA-A6C5-406714C6F198}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{CC8F8BC4-46BD-4080-911A-0298198AC4B0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{481C136F-A521-4FA7-81C5-346FA17B0615}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{068134BE-4A61-4D3B-BBDB-15B5F754AD9C}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{2945187A-2ED8-48D7-A9D4-BFB39FC7EA33}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{7AFC3AF4-F185-4489-BF38-4C85915E2363}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqnrs08.exe (Hewlett-Packard Co.) [File not signed]
FirewallRules: [{53053F5E-6CCC-4695-A6B7-363EBC08DD03}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{6E938C60-989A-4235-8A04-EC064B0C216C}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{0B1E12F7-A1EC-4ED5-B0FD-769A4FEDD963}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{0029C7D3-FC75-40E9-B215-CAE110018903}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{695FF91B-BD81-40D2-A872-10DC29667EC5}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9990B512-9033-4632-962B-9E6F0FF9B62F}] => (Allow) E:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{A71B3A14-D9EE-417D-9F9A-F76D97237122}] => (Allow) E:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [UDP Query User{8B2587DE-1F13-40C9-9E6F-E8567FC7D9CC}C:\program files (x86)\world of warcraft\utils\wowvoiceproxy.exe] => (Allow) C:\program files (x86)\world of warcraft\utils\wowvoiceproxy.exe No File
FirewallRules: [TCP Query User{454DAF59-8610-4077-9350-F2D918F9FB84}C:\program files (x86)\world of warcraft\utils\wowvoiceproxy.exe] => (Allow) C:\program files (x86)\world of warcraft\utils\wowvoiceproxy.exe No File
FirewallRules: [UDP Query User{6882A908-E6E0-4FCD-BF3E-E8E632408748}C:\users\bogdan placintescu\appdata\local\discord\app-0.0.301\discord.exe] => (Allow) C:\users\bogdan placintescu\appdata\local\discord\app-0.0.301\discord.exe No File
FirewallRules: [TCP Query User{8BAA4360-DB55-4394-A1B5-05D442A3A1FF}C:\users\bogdan placintescu\appdata\local\discord\app-0.0.301\discord.exe] => (Allow) C:\users\bogdan placintescu\appdata\local\discord\app-0.0.301\discord.exe No File
FirewallRules: [UDP Query User{ECF3A544-D274-46D2-8F9F-B3D463C148E5}E:\hearthstone\hearthstone.exe] => (Allow) E:\hearthstone\hearthstone.exe (Blizzard Entertainment, Inc. -> )
FirewallRules: [TCP Query User{86C54DC8-8370-4C9F-9F01-6726A94E9883}E:\hearthstone\hearthstone.exe] => (Allow) E:\hearthstone\hearthstone.exe (Blizzard Entertainment, Inc. -> )
FirewallRules: [UDP Query User{F99A2CE3-FCC6-4B73-AD59-7A8EA5E65249}C:\users\bogdan placintescu\appdata\roaming\curse client\bin\electron\twitchui.exe] => (Allow) C:\users\bogdan placintescu\appdata\roaming\curse client\bin\electron\twitchui.exe (Twitch Interactive, Inc. -> Twitch Interactive, Inc.)
FirewallRules: [TCP Query User{5D9DAE3E-5AFD-43F4-B795-1189C4A58F4B}C:\users\bogdan placintescu\appdata\roaming\curse client\bin\electron\twitchui.exe] => (Allow) C:\users\bogdan placintescu\appdata\roaming\curse client\bin\electron\twitchui.exe (Twitch Interactive, Inc. -> Twitch Interactive, Inc.)
FirewallRules: [{E4E70CA4-79AE-444D-872B-185233AEF637}] => (Allow) E:\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe () [File not signed]
FirewallRules: [{01ACA498-42FE-4B6E-A6B5-28B083059BFC}] => (Allow) E:\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe () [File not signed]
FirewallRules: [{FBE47FAB-BF29-4DA2-AC96-AB571DF722C6}] => (Allow) E:\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe () [File not signed]
FirewallRules: [{8C9E912F-ED6A-4ABD-A8C4-6AB3307F76AF}] => (Allow) E:\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe () [File not signed]
FirewallRules: [{DA4B9BB6-B5BC-4052-B58B-AE24B46834DC}] => (Allow) E:\Steam\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI_DX12.exe (Firaxis Games) [File not signed]
FirewallRules: [{1F119452-E557-4445-AADC-DB4D7AB6D0FD}] => (Allow) E:\Steam\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI_DX12.exe (Firaxis Games) [File not signed]
FirewallRules: [{1952CCE2-F0E4-4479-AD90-DB5BE1E060BC}] => (Allow) E:\Steam\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI.exe (Firaxis Games) [File not signed]
FirewallRules: [{3082CAAF-25FD-49C4-89D9-1C1BC1E1826E}] => (Allow) E:\Steam\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI.exe (Firaxis Games) [File not signed]
FirewallRules: [{936D8974-7DBC-4C35-8998-F8175679F357}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{0B92DCAA-4F9A-4695-BF59-7A3773C9CDC2}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [UDP Query User{A3D554A6-B6EB-4BA0-8D81-4351CACDA310}E:\allegorithmic\substance painter\substance painter.exe] => (Allow) E:\allegorithmic\substance painter\substance painter.exe (Allegorithmic -> Allegorithmic) [File not signed]
FirewallRules: [TCP Query User{80888C66-AF42-4799-9512-66ADEBB887CD}E:\allegorithmic\substance painter\substance painter.exe] => (Allow) E:\allegorithmic\substance painter\substance painter.exe (Allegorithmic -> Allegorithmic) [File not signed]
FirewallRules: [{9952BCF0-541F-46C5-BFD1-A92EB03D4746}] => (Allow) C:\Users\Bogdan Placintescu\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{CC61D9BD-667F-4F68-B606-700EED46CF60}] => (Allow) C:\Users\Bogdan Placintescu\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{DC8C7E3C-63F8-4FAC-9907-3FE424E373BE}] => (Allow) E:\Steam\steamapps\common\Prey\Binaries\Danielle\x64\Release\Prey.exe (Arkane Studios) [File not signed]
FirewallRules: [{900E8856-8C4C-4A6D-87BA-A8F4440DE3E4}] => (Allow) E:\Steam\steamapps\common\Prey\Binaries\Danielle\x64\Release\Prey.exe (Arkane Studios) [File not signed]
FirewallRules: [{24896A34-B233-48AC-BAF3-8203A0F4D79B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{A5AA78BA-A7F5-48DC-BD9F-AA26CCA58F8B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [UDP Query User{6C683BD8-F22E-4E71-8DB6-D0A3C4182E93}C:\users\bogdan placintescu\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\bogdan placintescu\appdata\local\akamai\netsession_win.exe No File
FirewallRules: [TCP Query User{66D2AB2B-C928-47A7-A54A-E6CC71429F51}C:\users\bogdan placintescu\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\bogdan placintescu\appdata\local\akamai\netsession_win.exe No File
FirewallRules: [{4E60C5B0-D6D4-4AF7-88F8-EF70749DB68E}] => (Allow) LPort=5000
FirewallRules: [{E57768F3-6BEA-4CE5-BE54-3FDB436B596F}] => (Allow) LPort=59586
FirewallRules: [UDP Query User{71B7B179-D440-4B6C-A6C2-A806069EDC18}C:\users\bogdan placintescu\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\bogdan placintescu\appdata\local\akamai\netsession_win.exe No File
FirewallRules: [TCP Query User{9A2A79B0-A8C8-40B7-9CF4-8494C17E1639}C:\users\bogdan placintescu\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\bogdan placintescu\appdata\local\akamai\netsession_win.exe No File
FirewallRules: [{54A0141E-FF31-4B54-B524-1E5B8185EBD2}] => (Block) E:\steam\steamapps\common\assassin's creed revelations\acrpr.exe No File
FirewallRules: [{2803DD31-5551-420F-8F52-C98CBE4805CB}] => (Block) E:\steam\steamapps\common\assassin's creed revelations\acrpr.exe No File
FirewallRules: [UDP Query User{B9EE3591-5FCC-4EC7-84E4-C6277AADCC70}E:\steam\steamapps\common\assassin's creed revelations\acrpr.exe] => (Allow) E:\steam\steamapps\common\assassin's creed revelations\acrpr.exe No File
FirewallRules: [TCP Query User{A8FB5909-AAE6-49B8-B001-02BC2F856BBE}E:\steam\steamapps\common\assassin's creed revelations\acrpr.exe] => (Allow) E:\steam\steamapps\common\assassin's creed revelations\acrpr.exe No File
FirewallRules: [{54A79771-E54F-4C63-A24E-FC81DA932320}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe No File
FirewallRules: [{08CD9225-8547-4DAC-932E-7D47516B1DE1}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe No File
FirewallRules: [{FBE4B4C7-6D43-4815-95E1-7EC467ED3089}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe No File
FirewallRules: [{F9AA57F8-9DD4-4FBD-9C3D-4D4EE85502F5}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe No File
FirewallRules: [{96FE9F4A-8F1F-483C-B71B-A4193DE37F1C}] => (Block) C:\program files (x86)\battle.net\battle.net.9397\battle.net.exe No File
FirewallRules: [{F9BE8509-78B3-43C8-AA29-690750DA9183}] => (Block) C:\program files (x86)\battle.net\battle.net.9397\battle.net.exe No File
FirewallRules: [UDP Query User{94FCB05F-3F37-4AF9-866E-4D45A7DC9295}C:\program files (x86)\battle.net\battle.net.9397\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.9397\battle.net.exe No File
FirewallRules: [TCP Query User{F531EE0C-5CF6-47C9-BB70-970291FA1C36}C:\program files (x86)\battle.net\battle.net.9397\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.9397\battle.net.exe No File
FirewallRules: [{E323831F-CB3A-4EDF-86C2-861F85A8A3C0}] => (Allow) E:\Steam\steamapps\common\Call of Duty WWII Beta\s2_mp64_ship.exe No File
FirewallRules: [{C96C25DB-8C84-44CC-A3D1-1421189969A3}] => (Allow) E:\Steam\steamapps\common\Call of Duty WWII Beta\s2_mp64_ship.exe No File
FirewallRules: [{D21F9DB0-305A-4AD9-9758-FBA2CFD70338}] => (Block) E:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe No File
FirewallRules: [{7FD2E22D-6233-43C2-93C3-69C7A977A7BF}] => (Block) E:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe No File
FirewallRules: [UDP Query User{BF00E262-176A-4B19-A44F-DBBE1499F6C7}E:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) E:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe No File
FirewallRules: [TCP Query User{C47C2FE7-7B14-47DE-B5AF-43ABAACB6692}E:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) E:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe No File
FirewallRules: [{AE0866A2-080E-4DF6-8444-89F88FEBA27E}] => (Block) E:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe No File
FirewallRules: [{55FCCBCD-931E-4E3C-BD9F-49D30129E108}] => (Block) E:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe No File
FirewallRules: [UDP Query User{B7C6093B-0735-4B1B-85BB-130B7E53492F}E:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) E:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe No File
FirewallRules: [TCP Query User{8BDF8220-8EE2-4FB2-A458-88B9CF6B2BEE}E:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) E:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe No File
FirewallRules: [{E0F90972-3518-49ED-9EE0-5B9C6967A7CC}] => (Allow) LPort=1688
FirewallRules: [{5E62B46B-596C-4D98-9C20-E5239FF8609A}] => (Block) E:\starcraft\starcraft.exe No File
FirewallRules: [{C117EB6E-26F2-42FF-8779-9757850D1762}] => (Block) E:\starcraft\starcraft.exe No File
FirewallRules: [UDP Query User{5353A3A1-5743-4E03-9215-422E0BD4C2DE}E:\starcraft\starcraft.exe] => (Allow) E:\starcraft\starcraft.exe No File
FirewallRules: [TCP Query User{D621DBC1-20C7-4254-B6AC-590610DA8A50}E:\starcraft\starcraft.exe] => (Allow) E:\starcraft\starcraft.exe No File
FirewallRules: [{6A8EA5E6-632B-4C8B-A87F-364E73FF9298}] => (Block) C:\program files (x86)\battle.net\battle.net.9262\battle.net.exe No File
FirewallRules: [{AB1ADBC2-7DC9-4B8D-A520-CD8B4E09E4E9}] => (Block) C:\program files (x86)\battle.net\battle.net.9262\battle.net.exe No File
FirewallRules: [UDP Query User{D4F4F150-A07C-4960-B9E7-4DC922949FAB}C:\program files (x86)\battle.net\battle.net.9262\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.9262\battle.net.exe No File
FirewallRules: [TCP Query User{226E3527-8E2D-4781-B43E-7C48EBEC3AD6}C:\program files (x86)\battle.net\battle.net.9262\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.9262\battle.net.exe No File
FirewallRules: [{0884F2C9-18F8-40D3-94D9-A9D12A85ADE8}] => (Block) E:\starcraft ii\versions\base55958\sc2_x64.exe No File
FirewallRules: [{43152848-AE89-434F-9D57-6D5A119292E6}] => (Block) E:\starcraft ii\versions\base55958\sc2_x64.exe No File
FirewallRules: [UDP Query User{4C743791-075C-4D93-9E50-82868E1C0DA7}E:\starcraft ii\versions\base55958\sc2_x64.exe] => (Allow) E:\starcraft ii\versions\base55958\sc2_x64.exe No File
FirewallRules: [TCP Query User{E62B02E9-87C1-47F7-A2E3-5EB66C147655}E:\starcraft ii\versions\base55958\sc2_x64.exe] => (Allow) E:\starcraft ii\versions\base55958\sc2_x64.exe No File
FirewallRules: [UDP Query User{EEEFD632-D5B4-4836-92CE-C0C811783D50}C:\program files (x86)\battle.net\battle.net.8098\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8098\battle.net.exe No File
FirewallRules: [TCP Query User{B06973BC-8437-4F71-9178-5987E2B3EE1C}C:\program files (x86)\battle.net\battle.net.8098\battle.net.exe] => (Allow) C:\program files (x86)\battle.net\battle.net.8098\battle.net.exe No File
FirewallRules: [{1770A958-2276-4276-9B07-C2A0AC009F72}] => (Allow) E:\Steam\steamapps\common\Brothers - A Tale of Two Sons\Binaries\Win32\BrothersLauncher.exe No File
FirewallRules: [{ECDAAF6F-0DA3-4EEC-B7D5-868D99C28E06}] => (Allow) E:\Steam\steamapps\common\Brothers - A Tale of Two Sons\Binaries\Win32\BrothersLauncher.exe No File
FirewallRules: [{5E9977E2-FD73-4331-BB75-42C9EC71F68C}] => (Allow) E:\Steam\steamapps\common\Brothers - A Tale of Two Sons\Binaries\Win32\Brothers.exe No File
FirewallRules: [{1164B80C-134A-46F2-90D3-85F4B0493303}] => (Allow) E:\Steam\steamapps\common\Brothers - A Tale of Two Sons\Binaries\Win32\Brothers.exe No File
FirewallRules: [{1EA56F08-4BA0-4704-A7BF-3E2533A50F7B}] => (Allow) E:\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe No File
FirewallRules: [{D0D14898-01D5-48E9-83D5-6CAB8408C659}] => (Allow) E:\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe No File
FirewallRules: [UDP Query User{8D4E3803-0276-4B3E-BE62-9F670DB170C6}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [TCP Query User{FF1846EF-3B7B-4B6F-B5B8-2D60171C9811}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [{59DCFC2A-2D8F-49E1-A7DE-42CC69474DEF}] => (Allow) E:\Steam\steamapps\common\SunlessSea\Sunless Sea.exe () [File not signed]
FirewallRules: [{BB8B0F52-9E5A-4896-B1C2-98DFFFC6A49B}] => (Allow) E:\Steam\steamapps\common\SunlessSea\Sunless Sea.exe () [File not signed]
FirewallRules: [{9DC32FCD-7E69-4A9B-9EBD-D97CA5F19956}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{FC8D9118-5615-4281-AF76-8013F0AE2904}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{A0468DAA-07B3-45B7-ABC8-24CD6D6E5152}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{1559B79B-484E-4E2E-92AE-54208A476BB6}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [UDP Query User{9D61AE8C-4AF1-4555-BBED-29F5668210C3}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [TCP Query User{3C8D00F2-898D-42A0-B861-51A3F5F57552}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [UDP Query User{F145B7B7-30AC-4BBD-989D-B22CA4F8B266}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [TCP Query User{2CC356DB-914A-41AB-A2A4-856146BAC8BC}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)