Solved Mom loaded some software from scammers, need to clean please

B

blairman

Posts: 146   +1
My elderly mother got a call from 'Amazon' saying that some one just ordered a $999 laptop on her account. they loaded screen sharing software, an chrome and had her bank web sites pulled up. Luckily the 2ndary login code goes to my cell phone, so they didn't get in. I reset the computer to a couple weeks before the incident, but am weary that some spyware could have been installed. below is the first scan results.
thank you
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14-07-2022
Ran by Miaddie (administrator) on MIADDIE-PC (HP-Pavilion AY643AA-ABA s5310f) (16-07-2022 07:04:12)
Running from C:\Users\Miaddie\Downloads
Loaded Profiles: Miaddie
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE ->) (Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(explorer.exe ->) () [File not signed] C:\Program Files (x86)\Microsoft Office\Office\FINDFAST.EXE
(explorer.exe ->) () [File not signed] C:\Program Files (x86)\Microsoft Office\Office\OSA.EXE
(explorer.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastUI.exe <4>
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <16>
(explorer.exe ->) (Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files (x86)\hp\Digital Imaging\bin\hpqtra08.exe
(explorer.exe ->) (Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler64.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\hp\HP Software Update\hpwuschd2.exe
(services.exe ->) (Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Authentium, Inc. -> Authentium, Inc) C:\Program Files\Common Files\Authentium\AntiVirus5\vseamps.exe
(services.exe ->) (Authentium, Inc. -> Authentium, Inc) C:\Program Files\Common Files\Authentium\AntiVirus5\vsedsps.exe
(services.exe ->) (Authentium, Inc. -> Authentium, Inc) C:\Program Files\Common Files\Authentium\AntiVirus5\vseqrts.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\afwServ.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Driver Updater\DriverUpdSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe
(services.exe ->) (F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Frontier\apps\Ultralight\ulcore\1654689741\fshoster64.exe <2>
(services.exe ->) (F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Frontier\apps\Ultralight\ulcore\1654689741\fsorsp64.exe
(services.exe ->) (F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Frontier\apps\Ultralight\ulcore\1654689741\fsulprothoster.exe
(services.exe ->) (F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Frontier\fshoster32.exe <3>
(services.exe ->) (Hewlett-Packard Company) [File not signed] C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe <2>

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvCplDaemon] => C:\Windows\system32\NvCpl.dll [16333856 2009-07-29] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM\...\Run: [PC-Doctor for Windows localizer] => C:\Program Files\PC-Doctor for Windows\localizer.exe [95728 2009-09-17] (PC-Doctor, Inc. -> PC-Doctor, Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [213760 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 1
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-19\Software\Policies\...\system: [DisableCMD] 0
HKU\S-1-5-20\Software\Policies\...\system: [DisableCMD] 0
HKU\S-1-5-21-947602546-141725-2524230356-1001\...\Run: [HP Photosmart 7520 series (NET)] => C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKU\S-1-5-21-947602546-141725-2524230356-1001\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_465_pepper.exe [1499704 2020-12-25] (Adobe Inc. -> Adobe)
HKU\S-1-5-21-947602546-141725-2524230356-1001\...\Policies\Explorer: [TaskbarNoNotification] 1
HKLM\...\Windows x64\Print Processors\hpfpp101: C:\Windows\System32\spool\prtprocs\x64\hpfpp101.dll [253440 2010-03-10] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Windows x64\Print Processors\hpzppwn7: C:\Windows\System32\spool\prtprocs\x64\hpzppwn7.dll [101376 2009-07-13] (Microsoft Windows -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\HP BC11 Status Monitor: C:\Windows\system32\hpinkstsBC11LM.dll [331664 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Photosmart 7520 series): C:\Windows\system32\HPDiscoPMBC11.dll [741480 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\hpf3l101.dll: C:\Windows\system32\hpf3l101.dll [138752 2010-03-10] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Company)
HKLM\...\Print\Monitors\PCL hpz3lwn7: C:\Windows\system32\hpz3lwn7.dll [36352 2009-07-13] (Microsoft Windows -> Hewlett-Packard Company)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\103.0.5060.114\Installer\chrmstp.exe [2022-07-15] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{44BBA851-CC51-11CF-AAFA-00AA00B6015C}] -> C:\Windows\SysWOW64\advpack.dll [2009-07-13] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.81\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\Software\...\Authentication\Credential Providers: [{F8A0B131-5F68-486c-8040-7E8FC3C85BB6}] -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2013-11-01]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\hp\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2018-02-17]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PictureMover.lnk [2010-01-18]
ShortcutTarget: PictureMover.lnk -> C:\Program Files (x86)\PictureMover\Bin\PictureMover.exe (Hewlett-Packard Company) [File not signed]
Startup: C:\Users\Miaddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AOL Desktop Launcher.lnk [2022-06-15]
ShortcutTarget: AOL Desktop Launcher.lnk -> C:\Users\Miaddie\AppData\Local\AOLDesktop\AolTrayApp.exe (Oath Holdings Inc. -> AOL Inc.)
Startup: C:\Users\Miaddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Find Fast.lnk [2010-07-21]
ShortcutTarget: Microsoft Find Fast.lnk -> C:\Program Files (x86)\Microsoft Office\Office\FINDFAST.EXE () [File not signed]
Startup: C:\Users\Miaddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Office Startup.lnk [2010-07-21]
ShortcutTarget: Office Startup.lnk -> C:\Program Files (x86)\Microsoft Office\Office\OSA.EXE () [File not signed]
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {00851A68-EC39-4360-8097-09155D5405B2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-09-03] (Google Inc -> Google Inc.)
Task: {01401DC5-F6ED-4795-8C6D-C7A15A20638E} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_465_Plugin.exe [1504312 2020-12-08] (Adobe Inc. -> Adobe)
Task: {078F21BC-B0D2-4D95-AF0E-ABF80D9D324B} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2250576 2022-07-16] (Avast Software s.r.o. -> Avast Software)
Task: {09D60AE1-A2FE-4A9B-A810-EAFCDA4B7ED9} - System32\Tasks\RecoveryCDWin7 => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [26680 2009-10-20] (Hewlett-Packard Company -> )
Task: {1295FBAE-108B-4B81-9F8F-76F29B3FC741} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [326320 2021-06-16] (HP Inc. -> HP Inc.)
Task: {13DA86EF-0700-4C6D-A2F8-934776D98FEF} - System32\Tasks\PCDRScheduledMaintenance => C:\Program Files\PC-Doctor for Windows\pcdrcui.exe [147440 2009-09-18] (PC-Doctor, Inc. -> PC-Doctor, Inc.)
Task: {17F7B59C-F60E-43D7-AA3E-29B3B7E3265C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1136984 2020-09-17] (HP Inc. -> HP Inc.)
Task: {18175447-CB6F-4D4C-8B55-2D414A07C820} - System32\Tasks\HP AR Program Upload - 36bfc9f77b87409ebf99231ab7854ac2b44629badba94395a4268353b088018f => C:\Program Files\HP\HP Photosmart 7520 series\bin\HPRewards.exe [3513960 2012-10-17] (Hewlett Packard -> TODO: <Company name>)
Task: {1E19FFB1-D2FF-41FF-8323-496E3FA317DD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1506648 2020-08-20] (HP Inc. -> HP Inc.)
Task: {1FBCD867-345F-45A4-8D3D-E086FF8425AA} - System32\Tasks\HP AR Program Upload - 79fbc9b0ee424ee59191c46af03e80cfd86ea30a569644b0b5bfa077de37cc21 => C:\Program Files\HP\HP Photosmart 7520 series\bin\HPRewards.exe [3513960 2012-10-17] (Hewlett Packard -> TODO: <Company name>)
Task: {2188E861-0E85-4010-B878-384D82BCA12A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1506648 2020-08-20] (HP Inc. -> HP Inc.)
Task: {2BDAABBE-575D-45AD-98DF-1A11223AF111} - System32\Tasks\ServicePlan => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [26680 2009-10-20] (Hewlett-Packard Company -> )
Task: {32D8CC63-C664-4DCE-95B4-84F9134A0030} - System32\Tasks\Avast Software\Avast SecureLine VPN Bug Report => C:\Program Files\Avast Software\SecureLine VPN\AvBugReport.exe [4637440 2022-07-16] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 11 --programpath "C:\Program Files\Avast Software\SecureLine VPN" --configpath "C:\ProgramData\Avast Software\SecureLine VPN" --path "C:\ProgramData\Avast Software\SecureLine VPN\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramData\Avast Software\SecureLine VPN\log" --guid e658384b-9ef7-4181-8f53-c5d408a07954
Task: {41A407A0-04B5-4FC2-9654-4CF457B0F2A4} - System32\Tasks\Avast Software\Avast Cleanup BugReport => C:\Program Files\Avast Software\Cleanup\AvBugReport.exe [4614992 2022-07-16] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 62 --programpath "C:\Program Files\Avast Software\Cleanup\Setup\.." --configpath "C:\Program Files\Avast Software\Cleanup\Setup" --path "C:\ProgramData\Avast Software\Cleanup\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --guid 8e0b0ec7-1b2d-4ae4-9ba2-4f3774203da8
Task: {4BD470F6-14C6-450A-895F-3DDE33481EB7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)
Task: {62FEB0B8-8717-4DD2-A48C-C0DFFE6B0277} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [4938496 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
Task: {769DDE5D-AC7D-4B3F-BC82-911EF76ED5A8} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [1174016 2010-11-20] (Microsoft Windows -> Microsoft Corporation)
Task: {81FB273C-FB7C-441E-9C7C-0F01681ACD38} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [136304 2021-03-30] (HP Inc. -> HP Inc.)
Task: {8E627854-FCC0-4095-B49B-482ED1442FA8} - System32\Tasks\Avast Software\Avast Driver Updater Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-du\icarus.exe [6667600 2022-05-19] (Avast Software s.r.o. -> Avast Software)
Task: {A52D0CB8-3994-4609-ACD1-8ABB8DA99285} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - resources updates => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)
Task: {B08689AC-BA02-4FD5-A033-2E225CA13C40} - System32\Tasks\Avast Software\Avast SecureLine VPN Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-vpn\icarus.exe [6694224 2022-07-12] (Avast Software s.r.o. -> Avast Software)
Task: {B110D27A-4719-4911-82F7-1C8E4BCCFF59} - System32\Tasks\Avast Software\Avast Driver Updater BugReport => C:\Program Files\Avast Software\Driver Updater\AvBugReport.exe [4613456 2022-07-16] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 148 --programpath "C:\Program Files\Avast Software\Driver Updater\Setup\.." --configpath "C:\Program Files\Avast Software\Driver Updater\Setup" --path "C:\ProgramData\Avast Software\Driver Updater\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --guid 675d18d1-fa17-4202-af0a-321d6c0673ac
Task: {B17A7D8A-5446-43BB-B217-EE6DFEC91ECC} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {B1AD7F33-DCB1-4890-83E7-F9A9B369ED17} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\BingPopup\BingPopup.exe [555640 2021-03-25] (HP Inc. -> HP Inc.)
Task: {BE935D87-6B8B-4FF2-B010-F102F862FF61} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1136984 2020-09-17] (HP Inc. -> HP Inc.)
Task: {C1313075-9155-4245-99C5-0CD8EDF27F2C} - System32\Tasks\ExtendedServicePlan => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [26680 2009-10-20] (Hewlett-Packard Company -> )
Task: {CE92DEE4-5180-409A-847B-89D18179E19E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-25] (Adobe Inc. -> Adobe)
Task: {D3072ECB-64E6-44F8-954E-BACFA6F33AC1} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_465_pepper.exe [1499704 2020-12-25] (Adobe Inc. -> Adobe)
Task: {D6E67F53-A1C3-4C87-A891-22A01FDE28D1} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [25128 2017-11-15] (HP Inc. -> )
Task: {E1103BDB-EBDF-4089-9E92-D796C96E0910} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-09-03] (Google Inc -> Google Inc.)
Task: {EB0160BA-B38B-4DFD-9FAC-575039FB5001} - System32\Tasks\HPCustParticipation HP Photosmart 7520 series => C:\Program Files\HP\HP Photosmart 7520 series\Bin\HPCustPartic.exe [4119656 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
Task: {EBF86E89-EAAA-4898-8E73-13B17C11AD44} - System32\Tasks\Avast SecureLine VPN Update => C:\Program Files\Avast Software\SecureLine VPN\VpnUpdate.exe [1197824 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
Task: {EE4E9F52-8D4B-432C-90CF-7926C475C7A7} - System32\Tasks\{272FAF55-788B-4CD1-B673-7BEF9088381F} => C:\Windows\system32\pcalua.exe -a E:\setup.EXE -d E:\ -c /AUTORUN
Task: {F64FE1C8-9878-43A3-B38D-0C71EBF1CA08} - System32\Tasks\Avast Software\Avast Cleanup Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-tu\icarus.exe [6667600 2022-05-18] (Avast Software s.r.o. -> Avast Software)
Task: {F7D37931-1865-4BAF-A222-29E28E15C6F1} - System32\Tasks\HP AR Program Upload => C:\Program Files\HP\HP Photosmart 7520 series\bin\HPRewards.exe [3513960 2012-10-17] (Hewlett Packard -> TODO: <Company name>)
Task: {FA352A7F-C4BA-4B99-8719-BDCE60F13D0B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\PCDRScheduledMaintenance.job => C:\Program Files\PC-Doctor for Windows\pcdrcui.exe5-fh scripts\monthly.xml

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 05 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5 06 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5-x64 05 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [170880 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5-x64 06 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [170880 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.254.254
Tcpip\..\Interfaces\{BCAEC965-F33B-4005-91AA-EEB1CDFD7AC1}: [DhcpNameServer] 192.168.254.254

FireFox:
========
FF DefaultProfile: 3wayot6b.default
FF ProfilePath: C:\Users\Miaddie\AppData\Roaming\Mozilla\Firefox\Profiles\3wayot6b.default [2021-04-13]
FF HKLM\...\Firefox\Extensions: [ols@f-secure.com] - C:\Program Files (x86)\Frontier\apps\Ultralight\nif\1612279462\browser\install\fs_firefox_https\fs_firefox_https.xpi
FF Extension: (Browsing Protection by F-Secure) - C:\Program Files (x86)\Frontier\apps\Ultralight\nif\1612279462\browser\install\fs_firefox_https\fs_firefox_https.xpi [2021-02-02] [UpdateUrl:hxxps://download.sp.f-secure.com/online-safety/updates.json]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: (HP Smart Web Printing) - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-11-01] [Legacy] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [ols@f-secure.com] - C:\Program Files (x86)\Frontier\apps\Ultralight\nif\1612279462\browser\install\fs_firefox_https\fs_firefox_https.xpi
FF HKU\S-1-5-21-947602546-141725-2524230356-1001\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_465.dll [2020-12-08] (Adobe Inc. -> )
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_465.dll [2020-12-08] (Adobe Inc. -> )
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google) [File not signed]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll [2010-12-07] (WildTangent Inc -> )
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-09-04] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-947602546-141725-2524230356-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Miaddie\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-10-24] (Unity Technologies ApS -> Unity Technologies ApS)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default [2022-07-16]
CHR DefaultSearchURL: Default -> hxxps://www.discoveryplus.com/assets/android-chrome-36x36.png
CHR Extension: (DISCOVERY+) - C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hepgdcblfmpbkfkaonlhdmlmakojgppa [2021-04-08]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-30]
CHR HKLM\...\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade]
CHR HKLM-x32\...\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [64704 2014-09-04] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-25] (Adobe Inc. -> Adobe)
S3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [8486968 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [590080 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Firewall; C:\Program Files\Avast Software\Avast\afwServ.exe [2009344 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [589056 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R2 CleanupPSvc; C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe [15701328 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
S3 clr_optimization_v2.0.50727_64; C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [90776 2014-03-20] (Microsoft Corporation -> Microsoft Corporation)
S2 clr_optimization_v4.0.30319_64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [158912 2019-03-28] (Microsoft Dynamic Code Publisher -> Microsoft Corporation)
R2 DriverUpdSvc; C:\Program Files\Avast Software\Driver Updater\DriverUpdSvc.exe [7680336 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R2 fshoster; C:\Program Files (x86)\Frontier\fshoster32.exe [213448 2018-10-05] (F-Secure Corporation -> F-Secure Corporation)
R2 fsnethoster; C:\Program Files (x86)\Frontier\fshoster32.exe [213448 2018-10-05] (F-Secure Corporation -> F-Secure Corporation)
R2 fsulhoster; C:\Program Files (x86)\Frontier\apps\Ultralight\ulcore\1654689741\fshoster64.exe [419096 2022-06-13] (F-Secure Corporation -> F-Secure Corporation)
R2 fsulnethoster; C:\Program Files (x86)\Frontier\apps\Ultralight\ulcore\1654689741\fshoster64.exe [419096 2022-06-13] (F-Secure Corporation -> F-Secure Corporation)
R2 fsulorsp; C:\Program Files (x86)\Frontier\apps\Ultralight\ulcore\1654689741\fsorsp64.exe [107208 2022-06-13] (F-Secure Corporation -> F-Secure Corporation)
R2 fsulprothoster; C:\Program Files (x86)\Frontier\apps\Ultralight\ulcore\1654689741\fsulprothoster.exe [419096 2022-06-13] (F-Secure Corporation -> F-Secure Corporation)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [379736 2020-08-20] (HP Inc. -> HP Inc.)
R2 LightScribeService; c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2009-08-20] (Hewlett-Packard Company) [File not signed]
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.681\McCHSvc.exe [404376 2018-02-04] (McAfee, Inc. -> McAfee, Inc.)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 SecureLine; C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe [9752320 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R2 vseamps; C:\Program Files\Common Files\Authentium\AntiVirus5\vseamps.exe [149544 2010-04-08] (Authentium, Inc. -> Authentium, Inc)
R2 vsedsps; C:\Program Files\Common Files\Authentium\AntiVirus5\vsedsps.exe [148008 2010-04-08] (Authentium, Inc. -> Authentium, Inc)
R2 vseqrts; C:\Program Files\Common Files\Authentium\AntiVirus5\vseqrts.exe [205352 2010-04-08] (Authentium, Inc. -> Authentium, Inc)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
R2 wlidsvc; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2286976 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
S2 HPTouchpointAnalyticsService; "C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe" [X]

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S0 AFS; C:\Windows\SysWow64\Drivers\AFS.sys [79052 2011-04-26] (Oak Technology Inc.) [File not signed]
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Windows -> Microsoft Corporation)
S0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [41832 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [235584 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [385560 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [258072 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [104976 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [47976 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [274536 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\Windows\System32\drivers\aswNetHub.sys [553928 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R3 aswNetNd6; C:\Windows\System32\DRIVERS\aswNetNd6.sys [38152 2022-07-16] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [113984 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
S0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [89056 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [860416 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [668208 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [221528 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [324864 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R3 F-Secure Gatekeeper; C:\Program Files (x86)\Frontier\apps\Ultralight\ulcore\1654689741\fsulgk.sys [407056 2022-06-13] (Microsoft Windows Hardware Compatibility Publisher -> F-Secure Corporation)
R3 fsni; C:\Program Files (x86)\Frontier\apps\Ultralight\nif\1612279462\fsni64.sys [111472 2021-02-02] (F-Secure Corporation -> F-Secure Corporation)
U3 TrueSight; C:\Windows\System32\drivers\truesight.sys [28272 2019-08-12] (Adlice -> )
S3 wanatw; system32\DRIVERS\wanatw64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-07-16 07:04 - 2022-07-16 07:05 - 000031540 _____ C:\Users\Miaddie\Downloads\FRST.txt
2022-07-16 07:03 - 2022-07-16 07:04 - 000000000 ____D C:\FRST
2022-07-16 07:03 - 2022-07-16 07:03 - 002369536 _____ (Farbar) C:\Users\Miaddie\Downloads\FRST64.exe
2022-07-16 06:58 - 2022-07-16 06:58 - 000000000 _____ C:\Users\Miaddie\Desktop\FRST64.exe
2022-07-16 06:40 - 2022-07-16 07:02 - 000000000 ____D C:\Users\Miaddie\AppData\Local\Avast Software
2022-07-16 06:32 - 2022-07-16 06:32 - 000002059 _____ C:\Users\Public\Desktop\Avast One.lnk
2022-07-16 06:32 - 2022-07-16 06:32 - 000000000 ____D C:\Users\Miaddie\AppData\Roaming\Avast Software
2022-07-16 06:32 - 2022-07-16 06:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2022-07-16 06:27 - 2022-07-16 06:39 - 340574190 _____ (AVAST Software) C:\Users\Miaddie\Downloads\Unconfirmed 931495.crdownload
2022-07-16 06:27 - 2022-07-16 06:27 - 000003938 _____ C:\Windows\system32\Tasks\Avast SecureLine VPN Update
2022-07-16 06:26 - 2022-07-16 06:27 - 000037200 _____ (Avast Software) C:\Windows\system32\icarus_rvrt.exe
2022-07-16 06:26 - 2022-07-16 06:27 - 000000000 ____D C:\Windows\system32\Tasks\Avast Software
2022-07-16 06:26 - 2022-07-16 06:26 - 000000000 ____D C:\Windows\system32\gf2engine
2022-07-16 06:25 - 2022-07-16 06:25 - 000324864 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2022-07-16 06:25 - 2022-07-16 06:25 - 000221528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2022-07-16 06:25 - 2022-07-16 06:25 - 000104976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys
2022-07-16 06:25 - 2022-07-16 06:25 - 000003910 _____ C:\Windows\system32\Tasks\Avast Emergency Update
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2022-07-16 06:25 - 2022-07-16 06:24 - 000860416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2022-07-16 06:25 - 2022-07-16 06:24 - 000668208 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2022-07-16 06:25 - 2022-07-16 06:24 - 000553928 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetHub.sys
2022-07-16 06:25 - 2022-07-16 06:24 - 000385560 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys
2022-07-16 06:25 - 2022-07-16 06:24 - 000274536 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2022-07-16 06:25 - 2022-07-16 06:24 - 000270592 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2022-07-16 06:25 - 2022-07-16 06:24 - 000258072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys
2022-07-16 06:25 - 2022-07-16 06:24 - 000235584 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2022-07-16 06:25 - 2022-07-16 06:24 - 000113984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2022-07-16 06:25 - 2022-07-16 06:24 - 000089056 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2022-07-16 06:25 - 2022-07-16 06:24 - 000047976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2022-07-16 06:25 - 2022-07-16 06:24 - 000041832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArDisk.sys
2022-07-16 06:25 - 2022-07-16 06:24 - 000038152 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetNd6.sys
2022-07-16 06:22 - 2022-07-16 06:27 - 000000000 ____D C:\Program Files\Avast Software
2022-07-16 06:21 - 2022-07-16 06:27 - 000000000 ____D C:\ProgramData\Avast Software
2022-07-16 06:21 - 2022-07-16 06:21 - 000268536 _____ (AVAST Software) C:\Users\Miaddie\Downloads\avast_one_essential_setup_online.exe
2022-07-05 13:34 - 2022-07-05 13:36 - 000000000 ____D C:\Users\Miaddie\AppData\Local\TeamViewer
2022-07-05 13:34 - 2022-07-05 13:34 - 000000000 ____D C:\Users\Miaddie\AppData\Roaming\TeamViewer
2022-07-05 12:38 - 2022-07-15 21:53 - 000000000 ____D C:\Users\Miaddie\AppData\Roaming\AnyDesk

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-07-16 06:52 - 2010-08-02 16:21 - 000000000 ____D C:\Program Files (x86)\Google
2022-07-16 06:42 - 2009-07-14 00:45 - 000015792 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2022-07-16 06:42 - 2009-07-14 00:45 - 000015792 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2022-07-16 06:25 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\inf
2022-07-16 06:21 - 2010-07-21 11:52 - 000085616 _____ C:\Users\Miaddie\AppData\Local\GDIPFONTCACHEV1.DAT
2022-07-16 06:18 - 2009-07-14 01:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2022-07-15 22:23 - 2012-04-18 19:39 - 000002250 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-07-15 22:23 - 2012-04-18 19:39 - 000002209 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2022-07-15 22:03 - 2010-07-21 11:48 - 000000000 ____D C:\Users\Miaddie
2022-07-15 22:02 - 2021-01-09 10:28 - 000000000 ____D C:\Users\Miaddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
2022-07-15 22:02 - 2017-11-13 15:38 - 000000000 ____D C:\Program Files (x86)\Frontier
2022-07-15 22:02 - 2017-07-20 14:27 - 000000000 ____D C:\Users\Miaddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aol Inc
2022-07-15 22:02 - 2017-07-20 14:27 - 000000000 ____D C:\Users\Miaddie\AppData\Local\AOLDesktopData
2022-07-15 22:02 - 2017-07-20 14:26 - 000000000 ____D C:\Users\Miaddie\AppData\Local\AOLDesktop
2022-07-15 22:02 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\registration
2022-06-29 13:04 - 2018-11-08 15:06 - 000001934 _____ C:\Users\Miaddie\AppData\Roaming\wklnhst.dat

==================== Files in the root of some directories ========

2018-11-08 15:06 - 2022-06-29 13:04 - 000001934 _____ () C:\Users\Miaddie\AppData\Roaming\wklnhst.dat
2021-01-19 12:16 - 2021-01-19 12:17 - 000000000 _____ () C:\Users\Miaddie\AppData\Local\{C25F2FCD-5BF3-49B3-A054-1AF56DB40C3E}

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)


LastRegBack: 2022-06-29 13:38
==================== End of FRST.txt ========================
 
Addition.text part 1

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-07-2022
Ran by Miaddie (16-07-2022 07:06:01)
Running from C:\Users\Miaddie\Downloads
Microsoft Windows 7 Home Premium Service Pack 1 (X64) (2010-07-21 15:48:01)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-947602546-141725-2524230356-500 - Administrator - Disabled)
ASPNET (S-1-5-21-947602546-141725-2524230356-1004 - Limited - Enabled)
Guest (S-1-5-21-947602546-141725-2524230356-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-947602546-141725-2524230356-1002 - Limited - Enabled)
Miaddie (S-1-5-21-947602546-141725-2524230356-1001 - Administrator - Enabled) => C:\Users\Miaddie

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Computer Security by F-Secure (Disabled - Up to date) {67E93A7F-FDB2-39E8-E991-EA71E0926EF7}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AS: Computer Security by F-Secure (Disabled - Up to date) {DC88DB9B-DB88-3666-D321-D1039B15244A}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {5078598A-1FA2-C888-AA5F-A9C66537DB12}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe AIR (HKLM-x32\...\{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}) (Version: 2.5.1.17730 - Adobe Systems Inc.) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.5.1.17730 - Adobe Systems Inc.)
Adobe Flash Player 32 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 32.0.0.465 - Adobe)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.465 - Adobe)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.465 - Adobe)
Adobe Reader X (10.1.12) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.12 - Adobe Systems Incorporated)
AOL Desktop Gold (HKU\S-1-5-21-947602546-141725-2524230356-1001\...\AOLDesktop) (Version: 11.0.3746 - Yahoo)
Avast One (HKLM\...\Avast Antivirus) (Version: 22.6.6022 - Avast Software)
Bingo Master (HKLM-x32\...\Bingo Master) (Version: - )
Card And Board Games 2 (HKLM-x32\...\Card And Board Games 2) (Version: - )
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Computer Security (HKLM-x32\...\{12CFC2FB-3ED2-45D8-94E4-7C20511A232C}) (Version: 3.15.612.0 - F-Secure Corporation) Hidden
Computer Security (HKLM-x32\...\F-Secure ServiceEnabler 53784005) (Version: 3.15.612.0 - F-Secure Corporation)
Computer Security 17.215.129.0 (release) (HKLM-x32\...\{658FDBCA-B7A1-43E4-A849-9F0812473331}) (Version: 17.215.129.0 - F-Secure Corporation) Hidden
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Dragon's Challenge (HKLM-x32\...\Dragon's Challenge) (Version: - )
F-Secure Network CCF 100.0.0.0 (HKLM-x32\...\{670203BE-8801-4A41-8480-29B7EC37FC7D}) (Version: 100.0.0.0 - F-Secure Corporation) Hidden
F-Secure Ultralight 1.0.5438.0 (release) (cc0c4f981bd2f23d1e5e325af11ed0a0ecf2a348) (HKLM-x32\...\{C75644E8-5FB5-4B8F-8FD2-08CC5D7ECD87}) (Version: 1.0.5438.0 - F-Secure Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 103.0.5060.114 - Google LLC)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Hoyle Casino 5 (HKLM-x32\...\Hoyle Casino 5) (Version: - )
Hoyle Mahjong Tiles (HKLM-x32\...\Hoyle Mahjong Tiles) (Version: - )
Hoyle Solitaire and Mahjong (HKLM-x32\...\Hoyle Solitaire and Mahjong) (Version: - )
HP Advisor (HKLM-x32\...\{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}) (Version: 3.3.9512.3162 - Hewlett-Packard)
HP Customer Experience Enhancements (HKLM-x32\...\{07FA4960-B038-49EB-891B-9F95930AA544}) (Version: 6.0.1.8 - Hewlett-Packard) Hidden
HP Customer Experience Enhancements (HKLM-x32\...\{C9EF1AAF-B542-41C8-A537-1142DA5D4AEC}) (Version: 6.0.3.1 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.0.71 - WildTangent)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP MediaSmart Demo (HKLM-x32\...\{9DEF9686-CCB2-47B7-BF83-B49EA21FA016}) (Version: 1.00.0000 - Hewlett-Packard)
HP MediaSmart Music/Photo/Video (HKLM-x32\...\{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}) (Version: 3.1.3601 - Hewlett-Packard) Hidden
HP MediaSmart Music/Photo/Video (HKLM-x32\...\InstallShield_{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}) (Version: 3.1.3601 - Hewlett-Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.2024 - HP Photo Creations Powered by RocketLife)
HP Photosmart 7520 series Basic Device Software (HKLM\...\{27ABA988-D480-4F44-B0FD-45E5656D2CFE}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Photosmart 7520 series Help (HKLM-x32\...\{08295D09-E002-48F8-905D-34E4B08509BA}) (Version: 28.0.0 - Hewlett Packard)
HP Photosmart 7520 series Product Improvement Study (HKLM\...\{16B872EE-C458-41BD-BEAE-52758A3F3168}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Photosmart Prem C410 All-In-One Driver Software 14.0 Rel. 7 (HKLM\...\{C1164ED0-EF08-4B0B-8084-3BDAEAAEFD8D}) (Version: 14.0 - HP)
HP Setup (HKLM-x32\...\{17B4760F-334B-475D-829F-1A3E94A6A4E6}) (Version: 1.2.3560.3170 - Hewlett-Packard)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Support Solutions Framework (HKLM-x32\...\{55065080-504F-43BB-BE00-36B80D7D39A5}) (Version: 12.18.34.21 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
HPDiagnosticAlert (HKLM-x32\...\{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}) (Version: 1.00.0000 - Microsoft) Hidden
Junk Mail filter update (HKLM-x32\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
LightScribe System Software (HKLM-x32\...\{CC8E94A2-55C7-4460-953C-2A790180578C}) (Version: 1.18.8.1 - LightScribe)
Macromedia Shockwave Player (HKLM-x32\...\Macromedia Shockwave Player) (Version: - )
Mahjongg Empire (HKLM-x32\...\Mahjongg Empire) (Version: - )
MahJongg Game of Four Winds (HKLM-x32\...\MahJongg Game of Four Winds) (Version: - )
MahJongg Game of Four Winds Files (HKLM-x32\...\MahJongg Game of Four Winds Files) (Version: - )
Mahjongg Madness (HKLM-x32\...\Mahjongg Madness) (Version: - )
Mahjongg Master 4 (HKU\S-1-5-21-947602546-141725-2524230356-1001\...\Mahjongg Master 4) (Version: 1.0.0.0 - eGames)
Mahjongg Master 5 (HKLM-x32\...\Mahjongg Master 5) (Version: - )
Mahjongg Master Egyptian Edition (HKLM-x32\...\Mahjongg Master Egyptian Edition) (Version: - )
Mahjongg Master Egyptian Edition (HKU\S-1-5-21-947602546-141725-2524230356-1001\...\Mahjongg Master Egyptian Edition) (Version: 1.0.0.0 - eGames)
Mahjongg Patience (HKU\S-1-5-21-947602546-141725-2524230356-1001\...\Mahjongg Patience) (Version: 1.0.0.0 - eGames)
Mahjongg Platinum 4 DELUXE (HKLM-x32\...\{93149D26-B712-E67B-C23D-8CED82DC9DB5}) (Version: 1.0 - )
Mahjongg Tiles of Time Lite (HKU\S-1-5-21-947602546-141725-2524230356-1001\...\Mahjongg Tiles of Time Lite) (Version: 1.0.0.0 - eGames)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.681.1 - McAfee, Inc.)
Mesh Runtime (HKLM-x32\...\{8C6D6116-B724-4810-8F2D-D047E6B7D68E}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (HKLM-x32\...\{50816F92-1652-4A7C-B9BC-48F682742C4B}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.8 (HKLM\...\{16735AF7-1D8D-3681-94A5-C578A61EC832}) (Version: 4.8.03761 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.8 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.8.03761 - Microsoft Corporation)
Microsoft Live Search Toolbar (HKLM-x32\...\{7FC8C210-A319-4835-A87D-B935EFB4C148}) (Version: 3.0.566.0 - Microsoft Corporation) Hidden
Microsoft Live Search Toolbar (HKLM-x32\...\{DF802C05-4660-418c-970C-B988ADB1D316}) (Version: 3.0.566.0 - Microsoft Live Search Toolbar)
Microsoft Office 97, Professional Edition (HKLM-x32\...\Office8.0) (Version: - )
Microsoft Office Home and Student 60 day trial (HKLM\...\OfficeTrial) (Version: - )
Microsoft Office PowerPoint Viewer 2007 (English) (HKLM-x32\...\{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft VC9 runtime libraries (HKLM-x32\...\{553C904F-57A2-4113-888E-BA0C3D1C69C0}) (Version: 2.0.0 - AOL Inc.) Hidden
Microsoft VC9 runtime libraries (HKLM-x32\...\{797EE0CA-8165-405C-B5CE-F11EC20F1BB0}) (Version: 1.0.0 - AOL LLC) Hidden
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Web Publishing Wizard 1.52 (HKLM-x32\...\WebPost) (Version: - )
Microsoft Works (HKLM-x32\...\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation)
Mozilla Firefox 62.0 (x64 en-US) (HKLM\...\Mozilla Firefox 62.0 (x64 en-US)) (Version: 62.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 62.0 - Mozilla)
MSVCRT (HKLM-x32\...\{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}) (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (HKLM-x32\...\{D0B44725-3666-492D-BEF6-587A14BD9BD9}) (Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.5 - NVIDIA Corporation)
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
Online Safety 2.215.7452.4118 (HKLM-x32\...\{0DD64CD2-B23F-4A3D-A88D-EF6848A20167}) (Version: 2.215.7452.4118 - F-Secure Corporation) Hidden
PictureMover (HKLM-x32\...\{1896E712-2B3D-45eb-BCE9-542742A51032}) (Version: 3.3.1.19 - Hewlett-Packard Company)
Pipeliner (HKLM-x32\...\{057E1A06-C320-2038-287D-040E5A427ED4}) (Version: 2.5.0 - uptime ITechnologies GmbH) Hidden
Pipeliner (HKLM-x32\...\Pipeliner.5A8F60606AB9E68112BC6FCD53E816B203E65DCC.1) (Version: 2.5.0 (build 5841) - uptime ITechnologies GmbH)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
PowerDirector (HKLM-x32\...\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.3503 - CyberLink Corp.) Hidden
PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.3503 - CyberLink Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5938 - Realtek Semiconductor Corp.)
Recovery Manager (HKLM-x32\...\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.5.2216 - CyberLink Corp.) Hidden
Shanghai Dynasty (HKLM-x32\...\ShanghaiDynastyUninstallKey) (Version: - )
Shanghai Second Dynasty (HKLM-x32\...\Activision_SD2UninstallKey) (Version: - )
Shanghai: Great Moments version 2.0 (HKLM-x32\...\Shanghai: Great Moments) (Version: - )
Shockwave (HKLM-x32\...\Shockwave) (Version: - )
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Shopping InContext (HKU\S-1-5-21-947602546-141725-2524230356-1001\...\{4E002314-9999-4402-9823-1CB9E6098849}_is1) (Version: 3.3 - InContext Solutions, LLC)
Taipei Mahjongg 25K (HKLM-x32\...\Taipei Mahjongg 25K) (Version: 1.00.07.06.01 - Selectsoft Publishing)
Uninstall AOL Emergency Connect Utility 1.0 (HKLM-x32\...\AOL Emergency Connect Utility 1.0) (Version: - )
Unity Web Player (HKU\S-1-5-21-947602546-141725-2524230356-1001\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Update Installer for WildTangent Games App (HKLM-x32\...\{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App) (Version: - WildTangent) Hidden
WildTangent Games App (HP Games) (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp) (Version: 4.0.5.5 - WildTangent)
Windows Live Communications Platform (HKLM-x32\...\{D45240D3-B6B3-4FF9-B243-54ECE3E10066}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Family Safety (HKLM\...\{1AAF3A3B-7B32-4DDF-8ABB-438DAEB46EEC}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Family Safety (HKLM\...\{46A5FBE9-ADB3-4493-A1CC-B4CFFD24D26A}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (HKLM\...\{1B8ABA62-74F0-47ED-B18C-A43128E591B8}) (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (HKLM-x32\...\{0B0F231F-CE6A-483D-AA23-77B364F75917}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (HKLM\...\{5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (HKLM-x32\...\{9D56775A-93F3-44A3-8092-840E3826DE30}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (HKLM-x32\...\{C66824E4-CBB3-4851-BB3F-E8CFD6350923}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (HKLM-x32\...\{A0C91188-C88F-4E86-93E6-CD7C9A266649}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (HKLM-x32\...\{DECDCB7C-58CC-4865-91AF-627F9798FE48}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (HKLM-x32\...\{80956555-A512-4190-9CAD-B000C36D6B6B}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (HKLM-x32\...\{EB4DF488-AAEF-406F-A341-CB2AAA315B90}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger Companion Core (HKLM-x32\...\{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (HKLM\...\{DA54F80E-261C-41A2-A855-549A144F2F59}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (HKLM-x32\...\{19BA08F7-C728-469C-8A35-BFBD3633BE08}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (HKLM-x32\...\{92EA4134-10D1-418A-91E1-5A0453131A38}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (HKLM-x32\...\{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (HKLM-x32\...\{D436F577-1695-4D2F-8B44-AC76C99E0002}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (HKLM-x32\...\{3336F667-9049-4D46-98B6-4C743EEBC5B1}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (HKLM-x32\...\{34F4D9A4-42C2-4348-BEF4-E553C84549E7}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (HKLM-x32\...\{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Remote Client (HKLM\...\{DF6D988A-EEA0-4277-AAB8-158E086E439B}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (HKLM\...\{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (HKLM\...\{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (HKLM\...\{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (HKLM-x32\...\{682B3E4F-696A-42DE-A41C-4C07EA1678B4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (HKLM-x32\...\{200FEC62-3C34-4D60-9CE8-EC372E01C08F}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live UX Platform (HKLM-x32\...\{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (HKLM-x32\...\{6A05FEDF-662E-46BF-8A25-010E3F1C9C69}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer (HKLM-x32\...\{A726AE06-AAA3-43D1-87E3-70F510314F04}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer (HKLM-x32\...\{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer (HKLM-x32\...\{AAF454FC-82CA-4F29-AB31-6A109485E76E}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (HKLM-x32\...\{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Worlds Best Mahjongg Games (HKLM-x32\...\{92B0DD85-4CAC-4F7D-96A6-5D6FAAFC942D}) (Version: 1.00.0000 - Valusoft)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-07-16] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-07-16] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-07-16] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-07-16] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2009-07-29] (NVIDIA Corporation) [File not signed]
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-07-16] (Avast Software s.r.o. -> AVAST Software)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\Miaddie\Desktop\DISCOVERY+.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=hepgdcblfmpbkfkaonlhdmlmakojgppa
ShortcutWithArgument: C:\Users\Miaddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\DISCOVERY+.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=hepgdcblfmpbkfkaonlhdmlmakojgppa

==================== Loaded Modules (Whitelisted) =============

1996-11-17 00:00 - 1996-11-17 00:00 - 003774224 _____ () [File not signed] C:\Program Files (x86)\Microsoft Office\Office\MSO97.DLL
2009-11-18 04:42 - 2009-11-18 04:42 - 000048128 _____ (Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\hp\Digital Imaging\bin\hpqtra08.rsc
2009-08-20 17:34 - 2009-08-20 17:34 - 000033792 _____ (Hewlett-Packard Company) [File not signed] c:\Program Files (x86)\Common Files\LightScribe\LSLog.dll
2009-08-20 17:34 - 2009-08-20 17:34 - 000110592 _____ (Hewlett-Packard Company) [File not signed] c:\Program Files (x86)\Common Files\LightScribe\LSSProxy.dll
2010-08-06 11:15 - 2010-08-06 11:15 - 000071680 _____ (Hewlett-Packard) [File not signed] c:\windows\system32\hpzinw12.dll
2010-08-06 11:15 - 2010-08-06 11:15 - 000089600 _____ (Hewlett-Packard) [File not signed] c:\windows\system32\hpzipm12.dll
1996-11-17 00:00 - 1996-11-17 00:00 - 000005904 _____ (Microsoft Corporation) [File not signed] C:\Program Files (x86)\Microsoft Office\Office\osaintl.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-file-l1-2-0.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\api-ms-win-core-file-l1-2-0.dll
2022-07-16 06:27 - 2022-07-16 06:27 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-file-l1-2-0.dll] C:\Program Files\Avast Software\Avast\defs\22071599\avast.local_vc142.crt\api-ms-win-core-file-l1-2-0.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-file-l2-1-0.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\api-ms-win-core-file-l2-1-0.dll
2022-07-16 06:27 - 2022-07-16 06:27 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-file-l2-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071599\avast.local_vc142.crt\api-ms-win-core-file-l2-1-0.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-localization-l1-2-0.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\api-ms-win-core-localization-l1-2-0.dll
2022-07-16 06:27 - 2022-07-16 06:27 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-localization-l1-2-0.dll] C:\Program Files\Avast Software\Avast\defs\22071599\avast.local_vc142.crt\api-ms-win-core-localization-l1-2-0.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-processthreads-l1-1-1.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\api-ms-win-core-processthreads-l1-1-1.dll
2022-07-16 06:27 - 2022-07-16 06:27 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-processthreads-l1-1-1.dll] C:\Program Files\Avast Software\Avast\defs\22071599\avast.local_vc142.crt\api-ms-win-core-processthreads-l1-1-1.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-synch-l1-2-0.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\api-ms-win-core-synch-l1-2-0.dll
2022-07-16 06:27 - 2022-07-16 06:27 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-synch-l1-2-0.dll] C:\Program Files\Avast Software\Avast\defs\22071599\avast.local_vc142.crt\api-ms-win-core-synch-l1-2-0.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-timezone-l1-1-0.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\api-ms-win-core-timezone-l1-1-0.dll
2022-07-16 06:27 - 2022-07-16 06:27 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-timezone-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071599\avast.local_vc142.crt\api-ms-win-core-timezone-l1-1-0.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-convert-l1-1-0.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\api-ms-win-crt-convert-l1-1-0.dll
2022-07-16 06:27 - 2022-07-16 06:27 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-convert-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071599\avast.local_vc142.crt\api-ms-win-crt-convert-l1-1-0.dll
2022-07-16 06:27 - 2022-07-16 06:27 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-environment-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071599\avast.local_vc142.crt\api-ms-win-crt-environment-l1-1-0.dll
2022-07-16 06:27 - 2022-07-16 06:27 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-filesystem-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071599\avast.local_vc142.crt\api-ms-win-crt-filesystem-l1-1-0.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-heap-l1-1-0.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\api-ms-win-crt-heap-l1-1-0.dll
2022-07-16 06:27 - 2022-07-16 06:27 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-heap-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071599\avast.local_vc142.crt\api-ms-win-crt-heap-l1-1-0.dll
2022-07-16 06:27 - 2022-07-16 06:27 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-locale-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071599\avast.local_vc142.crt\api-ms-win-crt-locale-l1-1-0.dll
2022-07-16 06:27 - 2022-07-16 06:27 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-math-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071599\avast.local_vc142.crt\api-ms-win-crt-math-l1-1-0.dll
2022-07-16 06:27 - 2022-07-16 06:27 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-multibyte-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071599\avast.local_vc142.crt\api-ms-win-crt-multibyte-l1-1-0.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-runtime-l1-1-0.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\api-ms-win-crt-runtime-l1-1-0.dll
2022-07-16 06:27 - 2022-07-16 06:27 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-runtime-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071599\avast.local_vc142.crt\api-ms-win-crt-runtime-l1-1-0.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-stdio-l1-1-0.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\api-ms-win-crt-stdio-l1-1-0.dll
2022-07-16 06:27 - 2022-07-16 06:27 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-stdio-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071599\avast.local_vc142.crt\api-ms-win-crt-stdio-l1-1-0.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-string-l1-1-0.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\api-ms-win-crt-string-l1-1-0.dll
2022-07-16 06:27 - 2022-07-16 06:27 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-string-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071599\avast.local_vc142.crt\api-ms-win-crt-string-l1-1-0.dll
2022-07-16 06:27 - 2022-07-16 06:27 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-time-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071599\avast.local_vc142.crt\api-ms-win-crt-time-l1-1-0.dll
2022-07-16 06:27 - 2022-07-16 06:27 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-utility-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071599\avast.local_vc142.crt\api-ms-win-crt-utility-l1-1-0.dll
2022-07-16 06:27 - 2022-07-16 06:27 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\msvcp140.dll] C:\Program Files\Avast Software\Avast\defs\22071599\avast.local_vc142.crt\MSVCP140.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\ucrtbase.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\ucrtbase.DLL
2022-07-16 06:27 - 2022-07-16 06:27 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\ucrtbase.dll] C:\Program Files\Avast Software\Avast\defs\22071599\avast.local_vc142.crt\ucrtbase.DLL
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\vcruntime140.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\VCRUNTIME140.dll
2022-07-16 06:27 - 2022-07-16 06:27 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\vcruntime140.dll] C:\Program Files\Avast Software\Avast\defs\22071599\avast.local_vc142.crt\VCRUNTIME140.dll
2022-07-16 06:27 - 2022-07-16 06:27 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\vcruntime140_1.dll] C:\Program Files\Avast Software\Avast\defs\22071599\avast.local_vc142.crt\VCRUNTIME140_1.dll
2009-07-29 14:21 - 2009-07-29 14:21 - 000238080 _____ (NVIDIA Corporation) [File not signed] C:\Windows\system32\nvshext.dll
2009-07-29 14:21 - 2009-07-29 14:21 - 001087488 _____ (NVIDIA Corporation) [File not signed] C:\Windows\system32\NVSVCR.DLL

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Version 11) (Whitelisted) ==========

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\S-1-5-21-947602546-141725-2524230356-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-947602546-141725-2524230356-1001 -> DefaultScope {6339B916-C47B-43E1-ACB4-61293BB2E5B4} URL = hxxp://search.searchleasierpro.com/s?ap=appfocus5&uid=5644bf54-a85c-4191-927e-2641a3f27b67&source=www.aol.com_v3-bb9-iei&i_id=email_spt__1.30&uc=20190801&query={searchTerms}
SearchScopes: HKU\S-1-5-21-947602546-141725-2524230356-1001 -> {6339B916-C47B-43E1-ACB4-61293BB2E5B4} URL = hxxp://search.searchleasierpro.com/s?ap=appfocus5&uid=5644bf54-a85c-4191-927e-2641a3f27b67&source=www.aol.com_v3-bb9-iei&i_id=email_spt__1.30&uc=20190801&query={searchTerms}
BHO: Browsing Protection by F-Secure -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files (x86)\Frontier\apps\Ultralight\nif\1612279462\browser\install\fs_ie_https\fs_ie_https64.dll [2021-02-02] (F-Secure Corporation -> F-Secure Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22] (Hewlett-Packard Company -> Hewlett-Packard Co.)
BHO-x32: Browsing Protection by F-Secure -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files (x86)\Frontier\apps\Ultralight\nif\1612279462\browser\install\fs_ie_https\fs_ie_https.dll [2021-02-02] (F-Secure Corporation -> F-Secure Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-11-10] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Microsoft Live Search Toolbar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll [2009-07-16] (Microsoft Corporation -> Microsoft Corp.)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2017-10-27] (HP Inc. -> HP Inc.)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22] (Hewlett-Packard Company -> Hewlett-Packard Co.)
Toolbar: HKLM-x32 - Microsoft Live Search Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll [2009-07-16] (Microsoft Corporation -> Microsoft Corp.)
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 22:34 - 2018-02-17 18:17 - 000000092 _____ C:\Windows\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-947602546-141725-2524230356-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Miaddie\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.254.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

============
 
Addition.txt part 2

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{ED1CBEA0-02BD-4522-B050-AAB8B8067A7E}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDirector\PDR.EXE (CyberLink -> CyberLink Corp.)
FirewallRules: [{C5724D6E-2422-4FE9-A5D7-A9200638816D}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartMusic.exe => No File
FirewallRules: [{26B1EB32-DCBD-4101-85B3-872E6BB3A4C1}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartPhoto.exe => No File
FirewallRules: [{95B62B8F-1629-4C8D-9971-B5F1BAEBB039}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartVideo.exe => No File
FirewallRules: [{7508281C-E89F-4E59-A5BC-D8FB546D380D}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\TSMAgent.exe => No File
FirewallRules: [{CFE77747-1D54-4188-B19F-4FAEB8661FE6}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\Kernel\CLML\CLMLSvc.exe => No File
FirewallRules: [{1F5CCE93-9771-408B-A96C-9BCF854440A5}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPDVDSmart.exe => No File
FirewallRules: [{2E5AA83D-3D06-444B-A194-8A8206ED7A92}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{AA9E2146-1EF7-4B15-A96D-F36B5FB654DD}] => (Allow) C:\Windows\system32\svchost.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{E46888A6-E59D-494A-A57A-F97F807B2C5D}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8C0BE1C9-5ED5-454A-AC78-E1210E746631}] => (Allow) C:\Program Files (x86)\Common Files\aol\acs\AOLDial.exe => No File
FirewallRules: [{15E08041-09BD-4F94-814F-B764DABA0005}] => (Allow) C:\Program Files (x86)\Common Files\aol\acs\AOLDial.exe => No File
FirewallRules: [{7C448904-82DF-466E-B06B-C27672A97832}] => (Allow) C:\Program Files (x86)\Common Files\aol\acs\AOLacsd.exe => No File
FirewallRules: [{1F61CCA4-2BA3-481B-82EB-65CAE6B8D4F5}] => (Allow) C:\Program Files (x86)\Common Files\aol\acs\AOLacsd.exe => No File
FirewallRules: [{AF5B1E71-C94D-464C-BA99-6E460E747847}] => (Allow) C:\Program Files (x86)\Common Files\aol\1279729449\ee\aolsoftware.exe => No File
FirewallRules: [{991551E0-F5CE-43D0-8913-49C9CD85A5FF}] => (Allow) C:\Program Files (x86)\Common Files\aol\1279729449\ee\aolsoftware.exe => No File
FirewallRules: [{170805DD-0C10-4AA0-A26D-2FCF86ED22E4}] => (Allow) C:\Program Files (x86)\AOL 9.5\waol.exe => No File
FirewallRules: [{B252D97D-0AC2-40BD-BBE1-354AD8CC93B1}] => (Allow) C:\Program Files (x86)\AOL 9.5\waol.exe => No File
FirewallRules: [{4B87657B-BD19-4AE4-B3BF-5068EF35B33B}] => (Allow) C:\Program Files (x86)\Common Files\aol\TopSpeed\3.0\aoltpsd3.exe => No File
FirewallRules: [{D2892F51-4DB5-4BD4-B4A6-429A820DFEB9}] => (Allow) C:\Program Files (x86)\Common Files\aol\TopSpeed\3.0\aoltpsd3.exe => No File
FirewallRules: [{6EF1FB2B-C444-449A-A7A3-BE7E16564F04}] => (Allow) C:\Program Files (x86)\Common Files\aol\Loader\aolload.exe => No File
FirewallRules: [{7E6F8066-B649-4688-A90F-D7A3695FFDBB}] => (Allow) C:\Program Files (x86)\Common Files\aol\Loader\aolload.exe => No File
FirewallRules: [{EC2E174C-FB6F-460D-9D8D-2C2B6EA33C55}] => (Allow) C:\Program Files (x86)\Common Files\aol\System Information\sinf.exe => No File
FirewallRules: [{320D0458-6A46-44A2-8C70-2F5AED26C8EB}] => (Allow) C:\Program Files (x86)\Common Files\aol\System Information\sinf.exe => No File
FirewallRules: [{A6DD5893-3186-41AD-B1D7-1CC7D1F8CD78}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartMusic.exe => No File
FirewallRules: [{D892BFEA-9C6A-4EFD-A297-C140111FEC61}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartPhoto.exe => No File
FirewallRules: [{0A0F3980-E88D-42B8-AC8E-8E33CF77EA19}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartVideo.exe => No File
FirewallRules: [{81DE6CEC-A10A-4282-A61F-2BF747ABB83F}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe => No File
FirewallRules: [{63E3F2F7-450A-4912-9838-904A6C578436}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe => No File
FirewallRules: [{B6C75C0B-EBDC-4006-B603-3CA912429AF7}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BD30C847-8AD6-4336-BDCD-AD934BC7731E}] => (Allow) LPort=2869
FirewallRules: [{9FFE1DB9-5CFD-4B3C-A324-60744D57ED52}] => (Allow) LPort=1900
FirewallRules: [{20B90176-CBEE-4D04-AB81-FB904F909DC9}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C2F9B59F-7354-4FF7-AF8E-19CB489243E5}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7\waol.exe => No File
FirewallRules: [{4809A6A8-019F-4B85-B5E1-CD546B32898C}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7\waol.exe => No File
FirewallRules: [{AA0F1767-3400-43CF-85C2-BDEA12E9FF56}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7\AOLBrowser\aolbrowser.exe => No File
FirewallRules: [{D0BB5D4F-6F22-403C-B258-A15DFDE6309A}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7\AOLBrowser\aolbrowser.exe => No File
FirewallRules: [{7A9348B4-5E1D-4170-874D-C006B5F8E8B0}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => No File
FirewallRules: [{793D80D3-8B12-4021-8A17-8FC35516CF2A}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => No File
FirewallRules: [{28801A7D-2DC2-4725-A577-C13F102A539C}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => No File
FirewallRules: [{4F09EE76-488A-491F-8E34-3678B828CECB}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe => No File
FirewallRules: [{29541E40-6A30-484C-BA09-40450F277E79}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe => No File
FirewallRules: [{195FCD64-88D4-44A0-9A5C-D299C9CA16F3}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe => No File
FirewallRules: [{5A25021F-52A2-4085-99AB-6414FF74578D}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe => No File
FirewallRules: [{A2F3A284-42B4-455D-80B4-086646F71064}] => (Allow) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe => No File
FirewallRules: [{5ED14A49-24E8-4187-BD2F-DA7DFBB958DE}] => (Allow) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe => No File
FirewallRules: [{25E0E7B3-ECA7-4BA3-8FAC-4835464F0FFC}] => (Allow) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe => No File
FirewallRules: [{FE1D455B-82D9-4D05-92BD-2E24514434C3}] => (Allow) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe => No File
FirewallRules: [{EAF9378F-D8B9-445E-9E39-2477B7083C15}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe (HP Inc. -> HP Inc.)
FirewallRules: [{58716FE0-2952-4290-9D53-7944D1B5F3DF}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7a\waol.exe => No File
FirewallRules: [{EEDAD34F-2056-4006-8D34-C1190311189F}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7a\waol.exe => No File
FirewallRules: [{5578A937-8EDA-4400-B2D4-B243A8894767}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7a\AOLBrowser\aolbrowser.exe => No File
FirewallRules: [{BDCA462B-78A4-4648-AFF8-4D34FD452516}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7a\AOLBrowser\aolbrowser.exe => No File
FirewallRules: [{C40C4DA0-53C4-49D3-A7F4-9CDDBDCD45DA}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7b\waol.exe => No File
FirewallRules: [{B36DE284-1153-4BF2-A61C-03C3B173415F}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7b\waol.exe => No File
FirewallRules: [{FEEA01FC-6DAF-4A3B-A8B1-C6E8F76F05B8}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7b\AOLBrowser\aolbrowser.exe => No File
FirewallRules: [{A4CA2809-BA55-4C04-8489-A29F80C3B72A}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7b\AOLBrowser\aolbrowser.exe => No File
FirewallRules: [{9DE59065-2A3A-4CC2-97E7-40CD05A03F63}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{B4043B5B-5C4C-4B74-B294-A4C9438C310B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{7A3E02F2-FD9D-43EA-AD54-42991F3AA95D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{0914B27C-8A0B-46C2-BA2C-9CE3F8425E28}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{6876633B-A184-4739-B444-28460108B501}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{D4AA4340-ABFC-4060-BA2F-83549E0036DD}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{2CD35AA3-B985-432B-ADB9-023C5A44D351}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{D3D38E39-EAFA-4D96-8096-28796AFD8F7E}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{27BECC58-278C-49F0-9076-E1B56AEAE109}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{B7C84CC0-6174-4027-987B-CFD3DD9EE29B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{01C6E0CD-BE70-4234-9EFB-7202024E0BDD}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{BBF6E6F3-8526-4659-8B19-298D1F3CAB07}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{70AA1E85-EAD6-4410-8CD5-5315830C7F7D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{64D84A0F-E0DA-4F1A-B5F2-7C60D0973729}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe (Hewlett Packard -> Hewlett-Packard)
FirewallRules: [{F1CCD1E1-85BF-4C83-B526-E77F99F0DB08}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{D572B0F0-DDB0-46C9-861C-C5AB69C89202}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{544F2DA6-DC33-4B05-9FC1-9202DF73DAC0}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe (Hewlett-Packard Company -> Hewlett-Packard)
FirewallRules: [{2414F7D3-67BB-4B84-BA3D-9DC91503E5DD}] => (Allow) C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe (Hewlett-Packard Company -> Hewlett-Packard Co.)
FirewallRules: [{0C1544D6-B35B-46D9-AF2A-1CA83A73F6AA}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe => No File
FirewallRules: [{B5D369C6-6199-4034-96D2-F2E6B088A2C0}] => (Allow) C:\Users\Miaddie\AppData\Local\Temp\7zS54B3\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{43CB206E-4198-45C2-9E30-DC108A993BAD}] => (Allow) C:\Users\Miaddie\AppData\Local\Temp\7zS54B3\HPDiagnosticCoreUI.exe => No File
FirewallRules: [TCP Query User{3E35AD15-A870-45BC-A48F-AFD02DA09A2F}C:\program files (x86)\hewlett-packard\hp support solutions\modules\hpdevicedetection3.exe] => (Block) C:\program files (x86)\hewlett-packard\hp support solutions\modules\hpdevicedetection3.exe (Hewlett-Packard Company -> Hewlett-Packard Company)
FirewallRules: [UDP Query User{38F24AD3-EA7B-41C4-8B8F-01FF37082E5E}C:\program files (x86)\hewlett-packard\hp support solutions\modules\hpdevicedetection3.exe] => (Block) C:\program files (x86)\hewlett-packard\hp support solutions\modules\hpdevicedetection3.exe (Hewlett-Packard Company -> Hewlett-Packard Company)
FirewallRules: [{0E0D216D-114C-4C3A-A4E0-3378D52579C0}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{AB0C27BC-9D53-4E36-A6AB-B4BB5AAF0DC5}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{00A5A4F1-9173-4DCF-9580-E7C3FB04EC52}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2643\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2643\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{BECAF0D9-1966-4C1E-BC36-477C9E1E9651}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2643\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2643\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{5C047EEE-058E-4C35-9B61-A661F02FC274}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2664\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2664\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{1C1A3E37-98EE-4891-8D12-49C40001AD41}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2664\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2664\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{BD865EC0-F57D-445F-9B1E-19983E3E91A9}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2690\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2690\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{A655A0EC-2179-4980-862B-C036BCBA6AAC}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2690\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2690\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{C641DA32-F29A-4C50-8BDF-B76ED7E08B92}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2706\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2706\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{5810FA84-AF95-469E-9968-9ED839A04F4D}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2706\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2706\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{C3D6FA6C-775D-4883-A746-0AA5791A3EFC}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2725\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2725\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{6CA0922C-8A81-4F4C-8409-BFFA5EAB4F8D}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2725\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2725\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{BE391C5C-20BD-4480-AF1B-61E06D6907EA}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2738\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2738\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{7D4E2C2E-B658-4FDD-BF98-E4AC9E0437E7}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2738\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2738\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{7F93B887-9722-4FA1-B4FB-71BCB9DF9D59}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2745\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2745\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{0980294E-6504-4DF3-B4F4-4F9A950A73B2}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2745\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2745\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{520CB816-AF09-4BCD-8708-99C073F6ADB6}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2760\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2760\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{9AF468B4-2024-44D9-AECE-C018627B1763}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2760\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2760\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{7EE7C3BC-2DC1-4DE4-A9D9-C670765CB273}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2793\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2793\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{B4EEA5BE-C13E-4727-9BFF-B9FCDAC250F3}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2793\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2793\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{B46E586C-DF03-4409-9082-A29213A6674E}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2811\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2811\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{4E44E8F7-887E-44C1-86A2-709DF89AAE2D}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2811\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2811\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{CAB25ACD-12A6-4DE0-8385-9E0D52C980C9}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2881\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2881\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{EF930352-A409-41F9-94DA-2F00F00B0D7F}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2881\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2881\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{3EC9B557-317A-4CAF-836C-273C128473E9}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2899\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2899\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{5BACD8B9-E20B-44A1-9544-70F0DF61CB42}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2899\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2899\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{71ED711C-6143-4449-8937-EFAE5570F1BD}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2926\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2926\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{9DDF7BE7-B3F1-483F-B674-BFC98B6A7071}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2926\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2926\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{B2551474-7473-4814-B086-E684070EC4D7}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2974\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2974\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{2037C828-D228-456B-BAD1-5EEFA600D5F3}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2974\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2974\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{BA37718D-A4E8-444E-8CD6-70756F26563A}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2978\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2978\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{A49696E4-2ECD-4AAB-8800-11C945710E60}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2978\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2978\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{B357E862-C593-43CF-B53F-1FB934A53D6E}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2984\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2984\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{C9252F03-09C4-44CA-91D1-6950BBED7D3A}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2984\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2984\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{EC28EE52-B66E-4040-8AEA-6AD1DB74B5D4}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3012\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3012\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{2DC70433-B056-4D4A-B883-A7120E67FE68}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3012\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3012\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{4197B728-B82A-4FEF-8959-CC109F275F21}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3043\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3043\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{E59E1D33-61FB-418A-8424-05C277821134}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3043\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3043\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{321CF3D6-C3AF-4C1B-B512-3C7711BA9AA8}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3046\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3046\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{0C7D8EB1-1D3E-4408-88DE-F00488431F40}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3046\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3046\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{C8075BCE-BFA9-4E23-B738-CEA48ABFEA4E}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3080\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3080\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{793C7A6F-A3FD-4536-BAE4-7BFB0B9F87ED}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3080\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3080\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{F6572591-CAB5-4501-8AEA-9B64704E5F8C}C:\program files\hp\hp photosmart 7520 series\bin\hpnetworkcommunicatorcom.exe] => (Allow) C:\program files\hp\hp photosmart 7520 series\bin\hpnetworkcommunicatorcom.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [UDP Query User{874C2CCF-00BC-4689-B0DB-ACE0D68BE0AA}C:\program files\hp\hp photosmart 7520 series\bin\hpnetworkcommunicatorcom.exe] => (Allow) C:\program files\hp\hp photosmart 7520 series\bin\hpnetworkcommunicatorcom.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [TCP Query User{C1F36DD9-4EBC-49CB-93B0-1AA7985E8963}C:\program files\hp\hp photosmart 7520 series\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp photosmart 7520 series\bin\hpnetworkcommunicator.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [UDP Query User{208D6CCD-9D91-4943-8CDF-CB20909E27A6}C:\program files\hp\hp photosmart 7520 series\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp photosmart 7520 series\bin\hpnetworkcommunicator.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [TCP Query User{8F0486DB-D57A-4549-AE6F-DCFD4C9DDF6A}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3112\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3112\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{DFBF3C47-0681-499C-B66F-C67EEB30A6EF}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3112\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3112\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{1B420DC9-BC3B-463A-90F0-51FF384616E9}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3142\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3142\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{B9A3EB97-8F40-4F60-A727-BF6D35F99D77}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3142\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3142\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{EF383746-1939-4479-B2B4-FD01D1186854}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3158\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3158\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{050D6C35-6A0A-496A-8A43-F9AB0E466D8A}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3158\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3158\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{D7E24C91-C841-4E19-BED0-E9A55367B840}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3167\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3167\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{98F1B0A2-9017-42E7-8CEE-4C464CFE908B}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3167\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3167\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{28611463-4581-4DA8-9F4E-A4FA92E7ADC6}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3181\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3181\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{8C709D61-6BC3-4980-88A9-D7D4355326DD}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3181\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3181\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{6299904C-A293-41C2-AB88-BDF4826AD946}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3208\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3208\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{F7F18F69-20DC-4F9E-A498-91693EF211C8}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3208\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3208\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{D98D7FC0-A6CD-4F1B-BFC2-83D574E1F895}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3233\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3233\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{1886B77C-BDE1-44DD-9C58-3D6B1A23065B}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3233\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3233\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{CB481943-BC23-4336-B9DF-E89F46298012}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3266\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3266\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{DD22596B-2C1E-4733-B312-9F15F4E115D1}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3266\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3266\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{164ECBC2-2671-42C2-A8BE-00D88BCE0BD5}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3270\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3270\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{D207853E-68E6-4EEE-A897-032AB6A5F1A8}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3270\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3270\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{AD28DE77-1190-4C56-96A3-ADA1685B0443}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3276\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3276\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{0D5183CD-CBA0-43F3-B981-38313511F1E0}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3276\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3276\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{26B19510-52B4-446D-8DAD-02290378E806}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3294\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3294\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{F9F1ED82-F030-4E14-9DCD-F0EA02D6CD88}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3294\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3294\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{E80B8C95-D0D6-4850-AE07-E716BAE8349D}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3296\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3296\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{01D5EAD9-757A-4EC9-81E9-0902875D4910}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3296\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3296\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{E522A3A3-2CB6-4BC3-B2E4-69DFC9349358}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3300\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3300\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{9BEB4090-0A8A-465D-BA91-30AC44F21D40}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3300\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3300\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{1EB175A5-7D14-4B49-A380-B539A9C72858}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3308\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3308\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{D1D0B671-3F3E-4317-93B4-AA743E2F7167}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3308\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3308\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{43F56640-7BE8-4D68-92EE-38CF9E2DC441}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3314\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3314\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{B351FB78-0D2C-48C7-8148-25BD048C6E07}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3314\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3314\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{7C66EDB1-04BB-49B2-953B-84CCA4D7DEB7}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3315\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3315\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{DCAE27C2-2867-4719-9898-97FBD47C2C5C}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3315\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3315\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{43CB7588-EB82-4B9E-BD32-C01EBA76BFDD}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3353\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3353\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{C30C76D4-B227-4B8B-B197-F222EA28328C}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3353\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3353\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{D126ABA1-3551-43EA-8D30-539A632B17F7}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3384\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3384\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{ABB51A6C-2968-4C69-9CEB-936DCE7319C9}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3384\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3384\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{67922B71-35F5-47EF-B77E-AE88E0BE0E63}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3418\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3418\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{2574FEDC-6E5C-4ECE-9720-5C9060907EE4}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3418\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3418\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{3F38C974-AEFB-44A7-B195-4DFBB272177B}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3489\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3489\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{AED5E45C-522F-40C3-84F0-B7B073470CAB}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3489\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3489\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{BF8D5A73-828A-4669-92CF-7B284551CF28}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3544\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3544\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{1D709547-67BD-45BE-B9CA-527737BD2FFF}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3544\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3544\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{5ECC0043-AC67-4929-8D52-D14156204BB3}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3584\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3584\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{774546D8-33B2-4E6E-8870-9EC9FC0C539F}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3584\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3584\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{8BBB3F96-39F0-43AB-B451-894238D22D5B}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3605\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3605\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{4D9403BE-A0B6-4FA8-B4DD-644EDAC6CD79}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3605\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3605\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{1AA8DF17-E529-414D-BF8B-716D27F9E52D}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3629\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3629\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{B9CDF8C4-EA08-4CB0-8518-31A8F88FB0C1}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3629\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3629\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{8447E6F5-0A35-4A0F-8EBE-988097668A94}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3649\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3649\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{490EEDC5-CDAD-4671-A1EB-42943633C1FA}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3649\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3649\cefsharp.browsersubprocess.exe => No File
FirewallRules: [{596E8426-72CF-4A00-81A8-D56032CCAC8E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{E4751347-C514-4B13-8772-05E3D4A0C34F}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{9A79776C-AFDA-4688-90E4-F4942CDB3A5E}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)

==================== Restore Points =========================

28-05-2022 12:13:58 Scheduled Checkpoint
22-06-2022 19:25:03 Scheduled Checkpoint
05-07-2022 13:48:05 Device Driver Package Install: TeamViewer GmbH Monitors
15-07-2022 21:59:14 Restore Operation

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (04/23/2022 11:42:04 AM) (Source: Software Protection Platform Service) (EventID: 8208) (User: )
Description: Acquisition of genuine ticket failed (hr=0x80072EE7) for template Id 66c92734-d682-4d71-983e-d6ec3f16059f

Error: (04/23/2022 11:42:04 AM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: License acquisition failure details.
hr=0x80072EE7

Error: (10/13/2021 12:06:38 PM) (Source: Software Protection Platform Service) (EventID: 8208) (User: )
Description: Acquisition of genuine ticket failed (hr=0x80072EE7) for template Id 66c92734-d682-4d71-983e-d6ec3f16059f

Error: (10/13/2021 12:06:38 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: License acquisition failure details.
hr=0x80072EE7

Error: (09/15/2021 07:23:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: mahjongg.exe, version: 1.0.0.0, time stamp: 0x44f47ca8
Faulting module name: mahjongg.exe, version: 1.0.0.0, time stamp: 0x44f47ca8
Exception code: 0x40000015
Fault offset: 0x0006ca39
Faulting process id: 0x704
Faulting application start time: 0x01d7aa88a8777c20
Faulting application path: C:\Program Files (x86)\Selectsoft\Taipei Mahjongg\mahjongg.exe
Faulting module path: C:\Program Files (x86)\Selectsoft\Taipei Mahjongg\mahjongg.exe
Report Id: ef9b2f20-167b-11ec-8a13-e0cb4e58ac19

Error: (05/09/2021 05:20:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: FlashUtil32_32_0_0_465_pepper.exe, version: 32.0.0.465, time stamp: 0x5fbd8783
Faulting module name: FlashUtil32_32_0_0_465_pepper.dll, version: 32.0.0.465, time stamp: 0x5fbd87af
Exception code: 0xc0000005
Fault offset: 0x0000b382
Faulting process id: 0x930
Faulting application start time: 0x01d745191d724d00
Faulting application path: C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_465_pepper.exe
Faulting module path: C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_465_pepper.dll
Report Id: 636a2260-b10c-11eb-be8d-e0cb4e58ac19

Error: (04/14/2021 11:55:26 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: FlashUtil32_32_0_0_465_pepper.exe, version: 32.0.0.465, time stamp: 0x5fbd8783
Faulting module name: FlashUtil32_32_0_0_465_pepper.dll, version: 32.0.0.465, time stamp: 0x5fbd87af
Exception code: 0xc0000005
Fault offset: 0x0000b382
Faulting process id: 0xea8
Faulting application start time: 0x01d7314689229640
Faulting application path: C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_465_pepper.exe
Faulting module path: C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_465_pepper.dll
Report Id: d38372e0-9d39-11eb-9dc6-e0cb4e58ac19

Error: (01/31/2021 03:17:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: mahjongg.exe, version: 1.0.0.0, time stamp: 0x44f47ca8
Faulting module name: mahjongg.exe, version: 1.0.0.0, time stamp: 0x44f47ca8
Exception code: 0x40000015
Fault offset: 0x0006ca39
Faulting process id: 0x1d0
Faulting application start time: 0x01d6f800dcf68440
Faulting application path: C:\Program Files (x86)\Selectsoft\Taipei Mahjongg\mahjongg.exe
Faulting module path: C:\Program Files (x86)\Selectsoft\Taipei Mahjongg\mahjongg.exe
Report Id: f5dd4390-63f8-11eb-9f1b-e0cb4e58ac19


System errors:
=============
Error: (07/16/2022 07:10:13 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: The server {BB6DF56B-CACE-11DC-9992-0019B93A3A84} did not register with DCOM within the required timeout.

Error: (07/16/2022 06:47:43 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 40. The internal error state is 252.

Error: (07/16/2022 06:47:42 AM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: The following fatal alert was generated: 40. The internal error state is 252.

Error: (07/16/2022 06:22:25 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The HP Touchpoint Analytics service failed to start due to the following error:
The system cannot find the file specified.

Error: (07/16/2022 06:18:23 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
AFS

Error: (07/16/2022 06:18:19 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Function Discovery Resource Publication service terminated with the following error:
%%-2147014847 = The requested address is not valid in its context.

Error: (07/15/2022 10:06:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The HP Touchpoint Analytics service failed to start due to the following error:
The system cannot find the file specified.

Error: (07/15/2022 10:04:44 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the fsulhoster service.


Windows Defender:
================
Date: 2013-02-14 03:35:50.245
Description:
Windows Defender has detected spyware or other potentially unwanted software.
For more information please see the following:
Name:Adware:Win32/PriceGong
Severity:Medium
Category:Adware
Path Found:file:C:\Users\Miaddie\AppData\LocalLow\FLV_Runner\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.5.3\bin\PriceGongIE.dll
Detection Type:Concrete
Detection Source:System
Status:Unknown
Process Name:

Date: 2013-02-13 12:30:00.137
Description:
Windows Defender has detected spyware or other potentially unwanted software.
For more information please see the following:
Name:Adware:Win32/PriceGong
Severity:Medium
Category:Adware
Path Found:file:C:\Users\Miaddie\AppData\LocalLow\FLV_Runner\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.5.3\bin\PriceGongIE.dll
Detection Type:Concrete
Detection Source:System
Status:Unknown
Process Name:

Date: 2013-02-09 15:08:11.534
Description:
Windows Defender has detected spyware or other potentially unwanted software.
For more information please see the following:
Name:Adware:Win32/PriceGong
Severity:Medium
Category:Adware
Path Found:file:C:\Users\Miaddie\AppData\LocalLow\FLV_Runner\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.5.3\bin\PriceGongIE.dll
Detection Type:Concrete
Detection Source:Real-Time Protection
Status:Unknown
Process Name:

Date: 2010-07-21 14:47:28.147
Description:
Windows Defender has detected spyware or other potentially unwanted software.
For more information please see the following:
Name:Spyware:Win32/Conducent
Severity:High
Category:Spyware
Path Found:containerfile:C:\Users\Miaddie\AppData\Local\Temp\setup2.exe;containerfile:E:\setup.exe;containerfile:E:\stub1.exe;containerfile:E:\stub2.exe;file:C:\Program Files (x86)\TimeSink\AdGateway\TSAdBot.exe;file:C:\Users\Miaddie\AppData\Local\Temp\setup2.exe->(VFS:TSAd.dll);file:C:\Users\Miaddie\AppData\Local\Temp\setup2.exe->(VFS:TSAdBot.exe#1);file:E:\setup.exe->(VFS:TSAd.dll);file:E:\setup.exe->(VFS:TSAdBot.exe#1);file:E:\setup.EXE->(wise0052)->(VFS:TSAd.dll#2);file:E:\setup.EXE->(wise0052)->(VFS:TSAdBot.exe#1);file:E:\setup.EXE->(wise0052)->(VFS:VcpDLL.dll#3);file:E:\setup.EXE->(wise0056);file:E:\setup.EXE->(wise0088);file:E:\stub1.exe->(VFS:TSAd.dll);file:E:\stub1.exe->(VFS:TSAdBot.exe#1);file:E:\stub2.exe->(VFS:TSAd.dll);file:E:\stub2.exe->(VFS:TSAdBot.exe#1);folder:C:\Program Files (x86)\timesink\;folder:C:\Program Files (x86)\timesink\AdGateway\;process:pid:1172;process:pid:1456;process:pid:2432;process:pid:2452;process:pid:3604;process:pid:3724;process:pid:3828;process:pid:4592;process:pid:964;regkey:HKLM
Detection Type:Concrete
Detection Source:Real-Time Protection
Status:Unknown
Process Name:

Date: 2010-07-21 14:47:16.806
Description:
Windows Defender has detected spyware or other potentially unwanted software.
For more information please see the following:
Name:Spyware:Win32/Conducent
Severity:High
Category:Spyware
Path Found:containerfile:C:\Users\Miaddie\AppData\Local\Temp\setup2.exe;containerfile:E:\setup.exe;containerfile:E:\stub1.exe;containerfile:E:\stub2.exe;file:C:\Program Files (x86)\TimeSink\AdGateway\TSAdBot.exe;file:C:\Users\Miaddie\AppData\Local\Temp\setup2.exe->(VFS:TSAd.dll);file:C:\Users\Miaddie\AppData\Local\Temp\setup2.exe->(VFS:TSAdBot.exe#1);file:E:\setup.exe->(VFS:TSAd.dll);file:E:\setup.exe->(VFS:TSAdBot.exe#1);file:E:\setup.EXE->(wise0052)->(VFS:TSAd.dll#2);file:E:\setup.EXE->(wise0052)->(VFS:TSAdBot.exe#1);file:E:\setup.EXE->(wise0052)->(VFS:VcpDLL.dll#3);file:E:\setup.EXE->(wise0056);file:E:\setup.EXE->(wise0088);file:E:\stub1.exe->(VFS:TSAd.dll);file:E:\stub1.exe->(VFS:TSAdBot.exe#1);file:E:\stub2.exe->(VFS:TSAd.dll);file:E:\stub2.exe->(VFS:TSAdBot.exe#1);folder:C:\Program Files (x86)\timesink\;folder:C:\Program Files (x86)\timesink\AdGateway\;process:pid:1172;process:pid:1456;process:pid:2432;process:pid:2452;process:pid:3604;process:pid:3724;process:pid:3828;process:pid:4592;process:pid:964;regkey:HKLM
Detection Type:Concrete
Detection Source:Real-Time Protection
Status:Unknown
Process Name:

==================== Memory info ===========================

BIOS: American Megatrends Inc. 5.15 11/06/2009
Motherboard: PEGATRON CORPORATION Narra6
Processor: AMD Athlon(tm) II X2 250 Processor
Percentage of memory in use: 59%
Total physical RAM: 7935.3 MB
Available physical RAM: 3237.09 MB
Total Virtual: 15868.79 MB
Available Virtual: 9161 MB

==================== Drives ================================

Drive c: (HP) (Fixed) (Total:585.16 GB) (Free:449.42 GB) (Model: WDC WD64 00AAKS-65A7B SCSI Disk Device) NTFS
Drive d: (FACTORY_IMAGE) (Fixed) (Total:10.92 GB) (Free:1.59 GB) (Model: WDC WD64 00AAKS-65A7B SCSI Disk Device) NTFS ==>[system with boot components (obtained from drive)]
Drive e: (HP PS7520) (CDROM) (Total:0.52 GB) (Free:0 GB) CDFS

\\?\Volume{2cd32944-0aec-11df-ac22-806e6f6e6963}\ (SYSTEM) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 596.2 GB) (Disk ID: 1549F232)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=585.2 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=10.9 GB) - (Type=07 NTFS)

==================== End of Addition.txt ===========
 
RogueKiller txt

Program : RogueKiller Anti-Malware
Version : 15.5.3.0
x64 : Yes
Program Date : Jun 13 2022
Location : C:\Program Files\RogueKiller\RogueKiller64.exe
Premium : No
Company : Adlice Software
Website : https://www.adlice.com/
Contact : https://adlice.com/contact/
Website : https://adlice.com/download/roguekiller/
Operating System : Windows 7 (6.1.7601 Service Pack 1) 64-bit
64-bit OS : Yes
Startup : 0
WindowsPE : No
User : Miaddie
User is Admin : Yes
Date : 2022/07/16 21:18:00
Type : Removal
Aborted : No
Scan Mode : Standard
Duration : 34101
Found items : 7
Total scanned : 87984
Signatures Version : 20220711_090857
Truesight Driver : Yes
Updates Count : 1

************************* Warnings *************************
(20:2685) C:\Windows\System32, LONG_FOLDER_SCAN
[+] path : C:\Windows\System32
[+] message : LONG_FOLDER_SCAN
[+] int1 : 20
[+] int2 : 2685

(20:758) C:\Users\Miaddie\AppData\Local\IM\Identities\{EE9CF5D2-C7AF-4D2E-965A-18D76BAF38B8}\Message Store\Attachments, LONG_FOLDER_SCAN
[+] path : C:\Users\Miaddie\AppData\Local\IM\Identities\{EE9CF5D2-C7AF-4D2E-965A-18D76BAF38B8}\Message Store\Attachments
[+] message : LONG_FOLDER_SCAN
[+] int1 : 20
[+] int2 : 758

(20:5) C:\Users\Miaddie\AppData\Local\IM\Identities\{EE9CF5D2-C7AF-4D2E-965A-18D76BAF38B8}\Message Store, LONG_FOLDER_SCAN
[+] path : C:\Users\Miaddie\AppData\Local\IM\Identities\{EE9CF5D2-C7AF-4D2E-965A-18D76BAF38B8}\Message Store
[+] message : LONG_FOLDER_SCAN
[+] int1 : 20
[+] int2 : 5

(20:12) C:\Users\Miaddie\AppData\Local\IM\Identities\{EE9CF5D2-C7AF-4D2E-965A-18D76BAF38B8}, LONG_FOLDER_SCAN
[+] path : C:\Users\Miaddie\AppData\Local\IM\Identities\{EE9CF5D2-C7AF-4D2E-965A-18D76BAF38B8}
[+] message : LONG_FOLDER_SCAN
[+] int1 : 20
[+] int2 : 12

(20:0) C:\Users\Miaddie\AppData\Local\IM\Identities, LONG_FOLDER_SCAN
[+] path : C:\Users\Miaddie\AppData\Local\IM\Identities
[+] message : LONG_FOLDER_SCAN
[+] int1 : 20
[+] int2 : 0

(468:6) C:\Users\Miaddie\AppData\Local\IM\Runtime\Notifier\1DDC932D-C532-4C1C-B8AD-B27EF8099643, LONG_FOLDER_SCAN
[+] path : C:\Users\Miaddie\AppData\Local\IM\Runtime\Notifier\1DDC932D-C532-4C1C-B8AD-B27EF8099643
[+] message : LONG_FOLDER_SCAN
[+] int1 : 468
[+] int2 : 6

(468:0) C:\Users\Miaddie\AppData\Local\IM\Runtime\Notifier, LONG_FOLDER_SCAN
[+] path : C:\Users\Miaddie\AppData\Local\IM\Runtime\Notifier
[+] message : LONG_FOLDER_SCAN
[+] int1 : 468
[+] int2 : 0

(468:1) C:\Users\Miaddie\AppData\Local\IM\Runtime, LONG_FOLDER_SCAN
[+] path : C:\Users\Miaddie\AppData\Local\IM\Runtime
[+] message : LONG_FOLDER_SCAN
[+] int1 : 468
[+] int2 : 1

(489:2) C:\Users\Miaddie\AppData\Local\IM, LONG_FOLDER_SCAN
[+] path : C:\Users\Miaddie\AppData\Local\IM
[+] message : LONG_FOLDER_SCAN
[+] int1 : 489
[+] int2 : 2


************************* Removal *************************
[PUP.Iolo (Potentially Malicious)] HKEY_LOCAL_MACHINE\Software\Phoenix360 -- -> Deleted
[+] scan_what : 2
[+] vendors : PUP.Iolo
[+] Name : HKEY_LOCAL_MACHINE\Software\Phoenix360
[+] Type : Registry
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 0
[+] status : 3
[+] status_str : Deleted
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0

[PUP.Iolo (Potentially Malicious)] HKEY_USERS\S-1-5-21-947602546-141725-2524230356-1001\Software\iolo -- -> Deleted
[+] scan_what : 2
[+] vendors : PUP.Iolo
[+] Name : HKEY_USERS\S-1-5-21-947602546-141725-2524230356-1001\Software\iolo
[+] Type : Registry
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 1
[+] status : 3
[+] status_str : Deleted
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0

[PUP.Iolo (Potentially Malicious)] mfc45.dat -- %SystemRoot%\SysWOW64\mfc45.dat -> Deleted
[+] scan_what : 1
[+] vendors : PUP.Iolo
[+] Name : mfc45.dat
[+] value : %SystemRoot%\SysWOW64\mfc45.dat
[+] Type : File/Folder
[+] file_hash : 11D32DE80D5AF43BAA14BE1A21549ACFB1105D2E88D791B3CAF34D34D295B10C
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 2
[+] status : 3
[+] status_str : Deleted
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0

[PUP.Iolo (Potentially Malicious)] iolo -- %_Miaddie_appdata%\iolo -> Deleted
[+] scan_what : 1
[+] vendors : PUP.Iolo
[+] Name : iolo
[+] value : %_Miaddie_appdata%\iolo
[+] Type : File/Folder
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 3
[+] status : 3
[+] status_str : Deleted
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0

[PUP.Iolo (Potentially Malicious)] iolo -- %localappdata%\iolo -> Deleted
[+] scan_what : 1
[+] vendors : PUP.Iolo
[+] Name : iolo
[+] value : %localappdata%\iolo
[+] Type : File/Folder
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 4
[+] status : 3
[+] status_str : Deleted
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0

[PUP.Iolo (Potentially Malicious)] iolo -- %programdata%\iolo -> Deleted
[+] scan_what : 1
[+] vendors : PUP.Iolo
[+] Name : iolo
[+] value : %programdata%\iolo
[+] Type : File/Folder
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 5
[+] status : 3
[+] status_str : Deleted
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0

[PUP.Iolo (Potentially Malicious)] Phoenix360 -- %programdata%\Phoenix360 -> Deleted
[+] scan_what : 1
[+] vendors : PUP.Iolo
[+] Name : Phoenix360
[+] value : %programdata%\Phoenix360
[+] Type : File/Folder
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 6
[+] status : 3
[+] status_str : Deleted
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0
 
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 7/16/2022
Scan Time: 5:57 PM
Logfile: MalwareHistoryLog.txt
Administrator: Yes

Version: 2.2.0.1024
Malware Database: v2015.09.22.05
Rootkit Database: v2015.09.18.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Miaddie

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 392362
Time Elapsed: 12 min, 53 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)
 
Malwarebytes Anti-Malware
www.malwarebytes.org


Error, 7/16/2022 5:57 PM, SYSTEM, MIADDIE-PC, Manual, 0,
Update, 7/16/2022 5:57 PM, SYSTEM, MIADDIE-PC, Manual, program, Failed, Unable to access update server, 2.2.0.1024, 3.6.1.0,
Error, 7/16/2022 5:57 PM, SYSTEM, MIADDIE-PC, Manual, 0,
Update, 7/16/2022 5:57 PM, SYSTEM, MIADDIE-PC, Manual, program, Failed, Unable to access update server, 2.2.0.1024, 3.6.1.0,
Scan, 7/16/2022 6:10 PM, SYSTEM, MIADDIE-PC, Manual, Start:7/16/2022 5:57 PM, Duration:12 min 53 sec, Threat Scan, Completed, 0 Malware Detections, 0 Non-Malware Detections,
Error, 7/16/2022 7:35 PM, SYSTEM, MIADDIE-PC, Manual, 0,
Update, 7/16/2022 7:35 PM, SYSTEM, MIADDIE-PC, Manual, program, Failed, Unable to access update server, 2.2.0.1024, 3.6.1.0,

(end)
 
# -------------------------------
# Malwarebytes AdwCleaner 8.3.2.0
# -------------------------------
# Build: 03-23-2022
# Database: 2022-06-24.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 07-16-2022
# Duration: 00:00:11
# OS: Windows 7 Home Premium
# Cleaned: 1
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****
 
# -------------------------------
# Malwarebytes AdwCleaner 8.3.2.0
# -------------------------------
# Build: 03-23-2022
# Database: 2022-06-24.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 07-16-2022
# Duration: 00:00:17
# OS: Windows 7 Home Premium
# Scanned: 32061
# Detected: 35


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Optional.Legacy HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6339B916-C47B-43E1-ACB4-61293BB2E5B4}

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Hosts File Entries ] *****

No malicious hosts file entries found.

***** [ Preinstalled Software ] *****

Preinstalled.HPSupportAssistant Folder C:\HP\SUPPORT
Preinstalled.HPSupportAssistant Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP CUSTOMER FEEDBACK
Preinstalled.HPSupportAssistant Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Preinstalled.HPSupportAssistant Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP SUPPORT INFORMATION
Preinstalled.HPSupportAssistant Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP SUPPORT SOLUTIONS
Preinstalled.HPSupportAssistant Folder C:\ProgramData\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Preinstalled.HPSupportAssistant Folder C:\Users\Miaddie\AppData\Local\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Preinstalled.HPSupportAssistant Folder C:\Users\Miaddie\AppData\Roaming\HEWLETT-PACKARD\HP CUSTOMER FEEDBACK
Preinstalled.HPSupportAssistant Folder C:\Users\Miaddie\AppData\Roaming\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Preinstalled.HPSupportAssistant Folder C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Preinstalled.HPSupportAssistant Folder C:\Windows\System32\config\systemprofile\AppData\Local\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Preinstalled.HPSupportAssistant Folder C:\Windows\System32\config\systemprofile\AppData\Roaming\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Preinstalled.HPSupportAssistant Registry HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Preinstalled.HPSupportAssistant Registry HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Classes\CLSID\{335F9A62-FE4B-40CD-B4ED-BB4DE21DC95D}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Classes\CLSID\{335F9A62-FE4B-40CD-B4ED-BB4DE21DC95D}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Classes\CLSID\{C0ABBA07-B636-47B8-B9E1-BB96D7CD4831}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Classes\CLSID\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{08DB3902-2CE0-474D-BCE3-0177766CE9F1}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{1CC069FA-1A86-402E-9787-3F04E652C67A}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{55065080-504F-43BB-BE00-36B80D7D39A5}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{741CFE3A-1C0B-4A7D-8E08-5D78C911C09D}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{B9A03B7B-E0FF-4FB3-BA83-762E58A1B0AA}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{CA43FE4F-9FF2-4AD7-88F0-CC3BAC17B226}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{E92D47A1-D27D-430A-8368-0BAFD956507D}
Preinstalled.WildTangentGamesBundle File C:\Users\Miaddie\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\WildTangent Games App - hp.lnk
Preinstalled.WildTangentGamesBundle Folder C:\Program Files (x86)\WILDTANGENT GAMES
Preinstalled.WildTangentGamesBundle Folder C:\Program Files (x86)\WILDTANGENT GAMES\APP
Preinstalled.WildTangentGamesBundle Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\WildTangentGameProvider-hp-genres
Preinstalled.WildTangentGamesBundle Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\WildTangentGameProvider-hp-main
Preinstalled.WildTangentGamesBundle Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App
Preinstalled.WildTangentGamesBundle Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp



########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########
 
Re-run Farbar Recovery Scan Tool (FRST/FRST64) you ran at the very beginning of this topic.

  • Double click to run it.
  • Press Scan button.
  • Scan will create two logs, FRST.txt and Addition.txt
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14-07-2022
Ran by Miaddie (administrator) on MIADDIE-PC (HP-Pavilion AY643AA-ABA s5310f) (17-07-2022 08:11:57)
Running from C:\Users\Miaddie\Desktop
Loaded Profiles: Miaddie
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Default browser: "C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe" --single-argument %1
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastUI.exe <5>
(C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1206.2\AvastBrowserCrashHandler.exe
(C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1206.2\AvastBrowserCrashHandler64.exe
(C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE ->) (Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(C:\Program Files\RogueKiller\RogueKillerSvc.exe ->) (ADLICE -> ) C:\Program Files\RogueKiller\RogueKiller64.exe
(explorer.exe ->) () [File not signed] C:\Program Files (x86)\Microsoft Office\Office\FINDFAST.EXE
(explorer.exe ->) () [File not signed] C:\Program Files (x86)\Microsoft Office\Office\OSA.EXE
(explorer.exe ->) (Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files (x86)\hp\Digital Imaging\bin\hpqtra08.exe
(explorer.exe ->) (Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler64.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\hp\HP Software Update\hpwuschd2.exe
(services.exe ->) (ADLICE -> ) C:\Program Files\RogueKiller\RogueKillerSvc.exe
(services.exe ->) (Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Authentium, Inc. -> Authentium, Inc) C:\Program Files\Common Files\Authentium\AntiVirus5\vseamps.exe
(services.exe ->) (Authentium, Inc. -> Authentium, Inc) C:\Program Files\Common Files\Authentium\AntiVirus5\vsedsps.exe
(services.exe ->) (Authentium, Inc. -> Authentium, Inc) C:\Program Files\Common Files\Authentium\AntiVirus5\vseqrts.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\afwServ.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswidsagent.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Driver Updater\DriverUpdSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe
(services.exe ->) (Hewlett-Packard Company) [File not signed] C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msiexec.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe <2>
(taskeng.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
(taskeng.exe ->) (Avast Software s.r.o. -> Avast Software) C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvCplDaemon] => C:\Windows\system32\NvCpl.dll [16333856 2009-07-29] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM\...\Run: [PC-Doctor for Windows localizer] => C:\Program Files\PC-Doctor for Windows\localizer.exe [95728 2009-09-17] (PC-Doctor, Inc. -> PC-Doctor, Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [213760 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 1
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-19\Software\Policies\...\system: [DisableCMD] 0
HKU\S-1-5-20\Software\Policies\...\system: [DisableCMD] 0
HKU\S-1-5-21-947602546-141725-2524230356-1001\...\Run: [HP Photosmart 7520 series (NET)] => C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKU\S-1-5-21-947602546-141725-2524230356-1001\...\Run: [AvastBrowserAutoLaunch_8295189623E51B3D6D1D677EC38BE781] => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2793640 2022-07-05] (Avast Software s.r.o. -> AVAST Software)
HKU\S-1-5-21-947602546-141725-2524230356-1001\...\Policies\Explorer: [TaskbarNoNotification] 1
HKLM\...\Windows x64\Print Processors\hpfpp101: C:\Windows\System32\spool\prtprocs\x64\hpfpp101.dll [253440 2010-03-10] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Windows x64\Print Processors\hpzppwn7: C:\Windows\System32\spool\prtprocs\x64\hpzppwn7.dll [101376 2009-07-13] (Microsoft Windows -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\HP BC11 Status Monitor: C:\Windows\system32\hpinkstsBC11LM.dll [331664 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Photosmart 7520 series): C:\Windows\system32\HPDiscoPMBC11.dll [741480 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\hpf3l101.dll: C:\Windows\system32\hpf3l101.dll [138752 2010-03-10] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Company)
HKLM\...\Print\Monitors\PCL hpz3lwn7: C:\Windows\system32\hpz3lwn7.dll [36352 2009-07-13] (Microsoft Windows -> Hewlett-Packard Company)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\103.0.5060.114\Installer\chrmstp.exe [2022-07-15] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files (x86)\AVAST Software\Browser\Application\103.0.17593.114\Installer\chrmstp.exe [2022-07-16] (Avast Software s.r.o. -> AVAST Software)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{44BBA851-CC51-11CF-AAFA-00AA00B6015C}] -> C:\Windows\SysWOW64\advpack.dll [2009-07-13] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.81\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\Software\...\Authentication\Credential Providers: [{F8A0B131-5F68-486c-8040-7E8FC3C85BB6}] -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2013-11-01]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\hp\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PictureMover.lnk [2010-01-18]
ShortcutTarget: PictureMover.lnk -> C:\Program Files (x86)\PictureMover\Bin\PictureMover.exe (Hewlett-Packard Company) [File not signed]
Startup: C:\Users\Miaddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AOL Desktop Launcher.lnk [2022-06-15]
ShortcutTarget: AOL Desktop Launcher.lnk -> C:\Users\Miaddie\AppData\Local\AOLDesktop\AolTrayApp.exe (Oath Holdings Inc. -> AOL Inc.)
Startup: C:\Users\Miaddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Find Fast.lnk [2010-07-21]
ShortcutTarget: Microsoft Find Fast.lnk -> C:\Program Files (x86)\Microsoft Office\Office\FINDFAST.EXE () [File not signed]
Startup: C:\Users\Miaddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Office Startup.lnk [2010-07-21]
ShortcutTarget: Office Startup.lnk -> C:\Program Files (x86)\Microsoft Office\Office\OSA.EXE () [File not signed]
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {00851A68-EC39-4360-8097-09155D5405B2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-09-03] (Google Inc -> Google Inc.)
Task: {01778761-F85D-4687-93F9-C86A346CAE06} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1136984 2020-09-17] (HP Inc. -> HP Inc.)
Task: {034E948E-3EC3-4BE9-A61E-389C5E72B35A} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2793640 2022-07-05] (Avast Software s.r.o. -> AVAST Software)
Task: {078F21BC-B0D2-4D95-AF0E-ABF80D9D324B} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2250576 2022-07-16] (Avast Software s.r.o. -> Avast Software)
Task: {09D60AE1-A2FE-4A9B-A810-EAFCDA4B7ED9} - System32\Tasks\RecoveryCDWin7 => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [26680 2009-10-20] (Hewlett-Packard Company -> )
Task: {1295FBAE-108B-4B81-9F8F-76F29B3FC741} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [326320 2021-06-16] (HP Inc. -> HP Inc.)
Task: {13DA86EF-0700-4C6D-A2F8-934776D98FEF} - System32\Tasks\PCDRScheduledMaintenance => C:\Program Files\PC-Doctor for Windows\pcdrcui.exe [147440 2009-09-18] (PC-Doctor, Inc. -> PC-Doctor, Inc.)
Task: {17F7B59C-F60E-43D7-AA3E-29B3B7E3265C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1136984 2020-09-17] (HP Inc. -> HP Inc.)
Task: {18175447-CB6F-4D4C-8B55-2D414A07C820} - System32\Tasks\HP AR Program Upload - 36bfc9f77b87409ebf99231ab7854ac2b44629badba94395a4268353b088018f => C:\Program Files\HP\HP Photosmart 7520 series\bin\HPRewards.exe [3513960 2012-10-17] (Hewlett Packard -> TODO: <Company name>)
Task: {1E19FFB1-D2FF-41FF-8323-496E3FA317DD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1506648 2020-08-20] (HP Inc. -> HP Inc.)
Task: {1FBCD867-345F-45A4-8D3D-E086FF8425AA} - System32\Tasks\HP AR Program Upload - 79fbc9b0ee424ee59191c46af03e80cfd86ea30a569644b0b5bfa077de37cc21 => C:\Program Files\HP\HP Photosmart 7520 series\bin\HPRewards.exe [3513960 2012-10-17] (Hewlett Packard -> TODO: <Company name>)
Task: {2188E861-0E85-4010-B878-384D82BCA12A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1506648 2020-08-20] (HP Inc. -> HP Inc.)
Task: {2BDAABBE-575D-45AD-98DF-1A11223AF111} - System32\Tasks\ServicePlan => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [26680 2009-10-20] (Hewlett-Packard Company -> )
Task: {32D8CC63-C664-4DCE-95B4-84F9134A0030} - System32\Tasks\Avast Software\Avast SecureLine VPN Bug Report => C:\Program Files\Avast Software\SecureLine VPN\AvBugReport.exe [4637440 2022-07-16] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 11 --programpath "C:\Program Files\Avast Software\SecureLine VPN" --configpath "C:\ProgramData\Avast Software\SecureLine VPN" --path "C:\ProgramData\Avast Software\SecureLine VPN\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramData\Avast Software\SecureLine VPN\log" --guid e658384b-9ef7-4181-8f53-c5d408a07954
Task: {41A407A0-04B5-4FC2-9654-4CF457B0F2A4} - System32\Tasks\Avast Software\Avast Cleanup BugReport => C:\Program Files\Avast Software\Cleanup\AvBugReport.exe [4614992 2022-07-16] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 62 --programpath "C:\Program Files\Avast Software\Cleanup\Setup\.." --configpath "C:\Program Files\Avast Software\Cleanup\Setup" --path "C:\ProgramData\Avast Software\Cleanup\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --guid 8e0b0ec7-1b2d-4ae4-9ba2-4f3774203da8
Task: {496892E2-0F25-47C3-B3FF-7405E82F5E7E} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [179936 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
Task: {4BD470F6-14C6-450A-895F-3DDE33481EB7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)
Task: {62FEB0B8-8717-4DD2-A48C-C0DFFE6B0277} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [4938496 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
Task: {769DDE5D-AC7D-4B3F-BC82-911EF76ED5A8} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [1174016 2010-11-20] (Microsoft Windows -> Microsoft Corporation)
Task: {770AD0DA-FF43-4714-AC39-5D57EDD60BBC} - System32\Tasks\Avast SecureLine VPN Update => C:\Program Files\Avast Software\SecureLine VPN\VpnUpdate.exe [1197824 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
Task: {7DB8FBB7-AE87-4B23-A605-7E81A94DDE85} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [179936 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
Task: {81FB273C-FB7C-441E-9C7C-0F01681ACD38} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [136304 2021-03-30] (HP Inc. -> HP Inc.)
Task: {8E627854-FCC0-4095-B49B-482ED1442FA8} - System32\Tasks\Avast Software\Avast Driver Updater Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-du\icarus.exe [6667600 2022-05-19] (Avast Software s.r.o. -> Avast Software)
Task: {A52D0CB8-3994-4609-ACD1-8ABB8DA99285} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - resources updates => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)
Task: {B08689AC-BA02-4FD5-A033-2E225CA13C40} - System32\Tasks\Avast Software\Avast SecureLine VPN Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-vpn\icarus.exe [6694224 2022-07-12] (Avast Software s.r.o. -> Avast Software)
Task: {B110D27A-4719-4911-82F7-1C8E4BCCFF59} - System32\Tasks\Avast Software\Avast Driver Updater BugReport => C:\Program Files\Avast Software\Driver Updater\AvBugReport.exe [4613456 2022-07-16] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 148 --programpath "C:\Program Files\Avast Software\Driver Updater\Setup\.." --configpath "C:\Program Files\Avast Software\Driver Updater\Setup" --path "C:\ProgramData\Avast Software\Driver Updater\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --guid 675d18d1-fa17-4202-af0a-321d6c0673ac
Task: {B17A7D8A-5446-43BB-B217-EE6DFEC91ECC} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {B1AD7F33-DCB1-4890-83E7-F9A9B369ED17} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\BingPopup\BingPopup.exe [555640 2021-03-25] (HP Inc. -> HP Inc.)
Task: {B1DB85C0-3C9B-46FE-A2D0-2064BCA7C79B} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2793640 2022-07-05] (Avast Software s.r.o. -> AVAST Software)
Task: {C1313075-9155-4245-99C5-0CD8EDF27F2C} - System32\Tasks\ExtendedServicePlan => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [26680 2009-10-20] (Hewlett-Packard Company -> )
Task: {D6E67F53-A1C3-4C87-A891-22A01FDE28D1} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [25128 2017-11-15] (HP Inc. -> )
Task: {E1103BDB-EBDF-4089-9E92-D796C96E0910} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-09-03] (Google Inc -> Google Inc.)
Task: {EB0160BA-B38B-4DFD-9FAC-575039FB5001} - System32\Tasks\HPCustParticipation HP Photosmart 7520 series => C:\Program Files\HP\HP Photosmart 7520 series\Bin\HPCustPartic.exe [4119656 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
Task: {EE4E9F52-8D4B-432C-90CF-7926C475C7A7} - System32\Tasks\{272FAF55-788B-4CD1-B673-7BEF9088381F} => C:\Windows\system32\pcalua.exe -a E:\setup.EXE -d E:\ -c /AUTORUN
Task: {F64FE1C8-9878-43A3-B38D-0C71EBF1CA08} - System32\Tasks\Avast Software\Avast Cleanup Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-tu\icarus.exe [6667600 2022-05-18] (Avast Software s.r.o. -> Avast Software)
Task: {F7D37931-1865-4BAF-A222-29E28E15C6F1} - System32\Tasks\HP AR Program Upload => C:\Program Files\HP\HP Photosmart 7520 series\bin\HPRewards.exe [3513960 2012-10-17] (Hewlett Packard -> TODO: <Company name>)
Task: {FA352A7F-C4BA-4B99-8719-BDCE60F13D0B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\PCDRScheduledMaintenance.job => C:\Program Files\PC-Doctor for Windows\pcdrcui.exe5-fh scripts\monthly.xml

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 05 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5 06 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5-x64 05 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [170880 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5-x64 06 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [170880 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.254.254
Tcpip\..\Interfaces\{BCAEC965-F33B-4005-91AA-EEB1CDFD7AC1}: [DhcpNameServer] 192.168.254.254

FireFox:
========
FF DefaultProfile: 3wayot6b.default
FF ProfilePath: C:\Users\Miaddie\AppData\Roaming\Mozilla\Firefox\Profiles\3wayot6b.default [2021-04-13]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: (HP Smart Web Printing) - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-11-01] [Legacy] [not signed]
FF HKU\S-1-5-21-947602546-141725-2524230356-1001\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google) [File not signed]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1206.2\npAvastBrowserUpdate3.dll [2022-07-16] (Avast Software s.r.o. -> AVAST Software)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1206.2\npAvastBrowserUpdate3.dll [2022-07-16] (Avast Software s.r.o. -> AVAST Software)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll [2010-12-07] (WildTangent Inc -> )
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-09-04] (Adobe Systems, Incorporated -> Adobe Systems Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default [2022-07-16]
CHR DefaultSearchURL: Default -> hxxps://www.discoveryplus.com/assets/android-chrome-36x36.png
CHR Extension: (DISCOVERY+) - C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hepgdcblfmpbkfkaonlhdmlmakojgppa [2021-04-08]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-30]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [64704 2014-09-04] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [8486968 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [179936 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [590080 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Firewall; C:\Program Files\Avast Software\Avast\afwServ.exe [2009344 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [589056 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [179936 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
S3 AvastSecureBrowserElevationService; C:\Program Files (x86)\AVAST Software\Browser\Application\103.0.17593.114\elevation_service.exe [1991960 2022-07-05] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R2 CleanupPSvc; C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe [15701328 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
S3 clr_optimization_v2.0.50727_64; C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [90776 2014-03-20] (Microsoft Corporation -> Microsoft Corporation)
S2 clr_optimization_v4.0.30319_64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [158912 2019-03-28] (Microsoft Dynamic Code Publisher -> Microsoft Corporation)
R2 DriverUpdSvc; C:\Program Files\Avast Software\Driver Updater\DriverUpdSvc.exe [7680336 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [379736 2020-08-20] (HP Inc. -> HP Inc.)
R2 LightScribeService; c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2009-08-20] (Hewlett-Packard Company) [File not signed]
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes Corporation -> Malwarebytes)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 rkrtservice; C:\Program Files\RogueKiller\RogueKillerSvc.exe [14592472 2022-06-13] (ADLICE -> )
R2 SecureLine; C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe [9752320 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R2 vseamps; C:\Program Files\Common Files\Authentium\AntiVirus5\vseamps.exe [149544 2010-04-08] (Authentium, Inc. -> Authentium, Inc)
R2 vsedsps; C:\Program Files\Common Files\Authentium\AntiVirus5\vsedsps.exe [148008 2010-04-08] (Authentium, Inc. -> Authentium, Inc)
R2 vseqrts; C:\Program Files\Common Files\Authentium\AntiVirus5\vseqrts.exe [205352 2010-04-08] (Authentium, Inc. -> Authentium, Inc)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
R2 wlidsvc; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2286976 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
S2 HPTouchpointAnalyticsService; "C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe" [X]

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S0 AFS; C:\Windows\SysWow64\Drivers\AFS.sys [79052 2011-04-26] (Oak Technology Inc.) [File not signed]
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Windows -> Microsoft Corporation)
R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [41832 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [235584 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [385560 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [258072 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [104976 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [47976 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [274536 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\Windows\System32\drivers\aswNetHub.sys [553928 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R3 aswNetNd6; C:\Windows\System32\DRIVERS\aswNetNd6.sys [38152 2022-07-16] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [113984 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [89056 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [860416 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [668208 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [221528 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [324864 2022-07-16] (Avast Software s.r.o. -> AVAST Software)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes Corporation -> Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation -> Malwarebytes Corporation)
U3 TrueSight; C:\Windows\System32\drivers\truesight.sys [38032 2022-07-17] (Adlice -> )
S3 wanatw; system32\DRIVERS\wanatw64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-07-17 08:10 - 2022-07-17 08:10 - 000000000 ___HD C:\avast! sandbox
2022-07-17 08:01 - 2022-07-17 08:03 - 000038032 _____ C:\Windows\system32\Drivers\truesight.sys
2022-07-17 07:56 - 2022-07-17 08:13 - 000031225 _____ C:\Users\Miaddie\Desktop\FRST.txt
2022-07-16 19:40 - 2022-07-16 19:45 - 000000000 ____D C:\Users\Miaddie\Desktop\AdwCleaner
2022-07-16 19:40 - 2022-07-16 19:40 - 008551608 _____ (Malwarebytes) C:\Users\Miaddie\Desktop\AdwCleaner.exe
2022-07-16 19:38 - 2022-07-16 19:38 - 000000794 _____ C:\Users\Miaddie\Desktop\MalwareProtectionLog.txt
2022-07-16 19:37 - 2022-07-16 19:37 - 000001068 _____ C:\Users\Miaddie\Desktop\MalwareHistoryLog.txt
2022-07-16 17:57 - 2022-07-16 17:57 - 000192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2022-07-16 17:56 - 2022-07-16 17:56 - 000001056 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2022-07-16 17:56 - 2022-07-16 17:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2022-07-16 17:56 - 2022-07-16 17:56 - 000000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2022-07-16 17:56 - 2015-10-05 09:50 - 000109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2022-07-16 17:56 - 2015-10-05 09:50 - 000063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2022-07-16 17:56 - 2015-10-05 09:50 - 000025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2022-07-16 17:20 - 2022-07-16 17:20 - 002556344 _____ (Malwarebytes) C:\Users\Miaddie\Desktop\MBSetup-A1BDC795.exe
2022-07-16 07:38 - 2022-07-16 17:28 - 000000000 ____D C:\ProgramData\RogueKiller
2022-07-16 07:38 - 2022-07-16 07:38 - 000003732 _____ C:\Windows\system32\Tasks\Avast Secure Browser Heartbeat Task (Hourly)
2022-07-16 07:38 - 2022-07-16 07:38 - 000003150 _____ C:\Windows\system32\Tasks\Avast Secure Browser Heartbeat Task (Logon)
2022-07-16 07:38 - 2022-07-16 07:38 - 000002455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2022-07-16 07:38 - 2022-07-16 07:38 - 000002412 _____ C:\Users\Public\Desktop\Avast Secure Browser.lnk
2022-07-16 07:38 - 2022-07-16 07:38 - 000000860 _____ C:\Users\Public\Desktop\RogueKiller.lnk
2022-07-16 07:38 - 2022-07-16 07:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2022-07-16 07:38 - 2022-07-16 07:38 - 000000000 ____D C:\Program Files\RogueKiller
2022-07-16 07:35 - 2022-07-16 07:35 - 000003372 _____ C:\Windows\system32\Tasks\AvastUpdateTaskMachineUA
2022-07-16 07:35 - 2022-07-16 07:35 - 000003244 _____ C:\Windows\system32\Tasks\AvastUpdateTaskMachineCore
2022-07-16 07:35 - 2022-07-16 07:35 - 000000000 ____D C:\Program Files (x86)\AVAST Software
2022-07-16 07:33 - 2022-07-16 07:34 - 043599792 _____ (Adlice Software ) C:\Users\Miaddie\Desktop\RogueKiller_setup.exe
2022-07-16 07:03 - 2022-07-17 08:12 - 000000000 ____D C:\FRST
2022-07-16 07:03 - 2022-07-16 07:03 - 002369536 _____ (Farbar) C:\Users\Miaddie\Desktop\FRST64.exe
2022-07-16 06:40 - 2022-07-16 18:02 - 000000000 ____D C:\Users\Miaddie\AppData\Local\Avast Software
2022-07-16 06:32 - 2022-07-16 06:32 - 000002059 _____ C:\Users\Public\Desktop\Avast One.lnk
2022-07-16 06:32 - 2022-07-16 06:32 - 000000000 ____D C:\Users\Miaddie\AppData\Roaming\Avast Software
2022-07-16 06:32 - 2022-07-16 06:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2022-07-16 06:27 - 2022-07-16 19:45 - 000003938 _____ C:\Windows\system32\Tasks\Avast SecureLine VPN Update
2022-07-16 06:27 - 2022-07-16 06:39 - 340574190 _____ (AVAST Software) C:\Users\Miaddie\Downloads\Unconfirmed 931495.crdownload
2022-07-16 06:26 - 2022-07-16 06:27 - 000037200 _____ (Avast Software) C:\Windows\system32\icarus_rvrt.exe
2022-07-16 06:26 - 2022-07-16 06:27 - 000000000 ____D C:\Windows\system32\Tasks\Avast Software
2022-07-16 06:26 - 2022-07-16 06:26 - 000000000 ____D C:\Windows\system32\gf2engine
2022-07-16 06:25 - 2022-07-17 07:52 - 000004168 _____ C:\Windows\system32\Tasks\Avast Emergency Update
2022-07-16 06:25 - 2022-07-16 06:25 - 000324864 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2022-07-16 06:25 - 2022-07-16 06:25 - 000221528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2022-07-16 06:25 - 2022-07-16 06:25 - 000104976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2022-07-16 06:25 - 2022-07-16 06:24 - 000860416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2022-07-16 06:25 - 2022-07-16 06:24 - 000668208 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2022-07-16 06:25 - 2022-07-16 06:24 - 000553928 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetHub.sys
2022-07-16 06:25 - 2022-07-16 06:24 - 000385560 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys
2022-07-16 06:25 - 2022-07-16 06:24 - 000274536 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2022-07-16 06:25 - 2022-07-16 06:24 - 000270592 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2022-07-16 06:25 - 2022-07-16 06:24 - 000258072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys
2022-07-16 06:25 - 2022-07-16 06:24 - 000235584 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2022-07-16 06:25 - 2022-07-16 06:24 - 000113984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2022-07-16 06:25 - 2022-07-16 06:24 - 000089056 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2022-07-16 06:25 - 2022-07-16 06:24 - 000047976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2022-07-16 06:25 - 2022-07-16 06:24 - 000041832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArDisk.sys
2022-07-16 06:25 - 2022-07-16 06:24 - 000038152 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetNd6.sys
2022-07-16 06:22 - 2022-07-16 06:27 - 000000000 ____D C:\Program Files\Avast Software
2022-07-16 06:21 - 2022-07-17 07:59 - 000000000 ____D C:\ProgramData\Avast Software
2022-07-16 06:21 - 2022-07-16 06:21 - 000268536 _____ (AVAST Software) C:\Users\Miaddie\Downloads\avast_one_essential_setup_online.exe
2022-07-05 13:34 - 2022-07-05 13:36 - 000000000 ____D C:\Users\Miaddie\AppData\Local\TeamViewer
2022-07-05 13:34 - 2022-07-05 13:34 - 000000000 ____D C:\Users\Miaddie\AppData\Roaming\TeamViewer
2022-07-05 12:38 - 2022-07-15 21:53 - 000000000 ____D C:\Users\Miaddie\AppData\Roaming\AnyDesk

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-07-17 08:12 - 2009-07-14 00:45 - 000015792 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2022-07-17 08:12 - 2009-07-14 00:45 - 000015792 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2022-07-17 08:11 - 2011-02-23 21:12 - 000000000 ____D C:\Users\Miaddie\AppData\LocalLow\Unity
2022-07-17 08:11 - 2011-02-23 21:12 - 000000000 ____D C:\Users\Miaddie\AppData\Local\Unity
2022-07-17 08:09 - 2017-11-13 15:38 - 000000000 ____D C:\Program Files (x86)\Frontier
2022-07-17 08:09 - 2017-11-13 15:34 - 000000000 ____D C:\ProgramData\F-Secure
2022-07-17 08:03 - 2010-08-02 16:21 - 000000000 ____D C:\Program Files (x86)\Google
2022-07-17 07:59 - 2009-07-14 01:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2022-07-16 17:56 - 2016-01-15 21:00 - 000000000 ____D C:\ProgramData\Malwarebytes
2022-07-16 07:32 - 2011-11-22 10:02 - 000000000 ____D C:\Windows\system32\Macromed
2022-07-16 07:31 - 2010-01-17 23:49 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2022-07-16 06:25 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\inf
2022-07-16 06:21 - 2010-07-21 11:52 - 000085616 _____ C:\Users\Miaddie\AppData\Local\GDIPFONTCACHEV1.DAT
2022-07-15 22:23 - 2012-04-18 19:39 - 000002250 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-07-15 22:23 - 2012-04-18 19:39 - 000002209 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2022-07-15 22:03 - 2010-07-21 11:48 - 000000000 ____D C:\Users\Miaddie
2022-07-15 22:02 - 2021-01-09 10:28 - 000000000 ____D C:\Users\Miaddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
2022-07-15 22:02 - 2017-07-20 14:27 - 000000000 ____D C:\Users\Miaddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aol Inc
2022-07-15 22:02 - 2017-07-20 14:27 - 000000000 ____D C:\Users\Miaddie\AppData\Local\AOLDesktopData
2022-07-15 22:02 - 2017-07-20 14:26 - 000000000 ____D C:\Users\Miaddie\AppData\Local\AOLDesktop
2022-07-15 22:02 - 2009-07-13 23:20 - 000000000 ____D C:\Windows\registration
2022-06-29 13:04 - 2018-11-08 15:06 - 000001934 _____ C:\Users\Miaddie\AppData\Roaming\wklnhst.dat

==================== Files in the root of some directories ========

2018-11-08 15:06 - 2022-06-29 13:04 - 000001934 _____ () C:\Users\Miaddie\AppData\Roaming\wklnhst.dat
2021-01-19 12:16 - 2021-01-19 12:17 - 000000000 _____ () C:\Users\Miaddie\AppData\Local\{C25F2FCD-5BF3-49B3-A054-1AF56DB40C3E}

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)


LastRegBack: 2022-07-16 18:34
==================== End of FRST.txt ========================
 
FARBAR ADDITION TXT PART 1

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-07-2022
Ran by Miaddie (17-07-2022 08:13:35)
Running from C:\Users\Miaddie\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X64) (2010-07-21 15:48:01)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-947602546-141725-2524230356-500 - Administrator - Disabled)
ASPNET (S-1-5-21-947602546-141725-2524230356-1004 - Limited - Enabled)
Guest (S-1-5-21-947602546-141725-2524230356-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-947602546-141725-2524230356-1002 - Limited - Enabled)
Miaddie (S-1-5-21-947602546-141725-2524230356-1001 - Administrator - Enabled) => C:\Users\Miaddie

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {5078598A-1FA2-C888-AA5F-A9C66537DB12}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe AIR (HKLM-x32\...\{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}) (Version: 2.5.1.17730 - Adobe Systems Inc.) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.5.1.17730 - Adobe Systems Inc.)
Adobe Reader X (10.1.12) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.12 - Adobe Systems Incorporated)
AOL Desktop Gold (HKU\S-1-5-21-947602546-141725-2524230356-1001\...\AOLDesktop) (Version: 11.0.3746 - Yahoo)
Avast One (HKLM\...\Avast Antivirus) (Version: 22.6.6022 - Avast Software)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 103.0.17593.114 - AVAST Software)
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1206.2 - AVAST Software) Hidden
Bingo Master (HKLM-x32\...\Bingo Master) (Version: - )
Card And Board Games 2 (HKLM-x32\...\Card And Board Games 2) (Version: - )
Compatibility Pack for the 2007 Office system (HKLM-x32\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Dragon's Challenge (HKLM-x32\...\Dragon's Challenge) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 103.0.5060.114 - Google LLC)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Hoyle Casino 5 (HKLM-x32\...\Hoyle Casino 5) (Version: - )
Hoyle Mahjong Tiles (HKLM-x32\...\Hoyle Mahjong Tiles) (Version: - )
Hoyle Solitaire and Mahjong (HKLM-x32\...\Hoyle Solitaire and Mahjong) (Version: - )
HP Advisor (HKLM-x32\...\{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}) (Version: 3.3.9512.3162 - Hewlett-Packard)
HP Customer Experience Enhancements (HKLM-x32\...\{07FA4960-B038-49EB-891B-9F95930AA544}) (Version: 6.0.1.8 - Hewlett-Packard) Hidden
HP Customer Experience Enhancements (HKLM-x32\...\{C9EF1AAF-B542-41C8-A537-1142DA5D4AEC}) (Version: 6.0.3.1 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.0.71 - WildTangent)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP MediaSmart Demo (HKLM-x32\...\{9DEF9686-CCB2-47B7-BF83-B49EA21FA016}) (Version: 1.00.0000 - Hewlett-Packard)
HP MediaSmart Music/Photo/Video (HKLM-x32\...\{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}) (Version: 3.1.3601 - Hewlett-Packard) Hidden
HP MediaSmart Music/Photo/Video (HKLM-x32\...\InstallShield_{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}) (Version: 3.1.3601 - Hewlett-Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.2024 - HP Photo Creations Powered by RocketLife)
HP Photosmart 7520 series Basic Device Software (HKLM\...\{27ABA988-D480-4F44-B0FD-45E5656D2CFE}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Photosmart 7520 series Help (HKLM-x32\...\{08295D09-E002-48F8-905D-34E4B08509BA}) (Version: 28.0.0 - Hewlett Packard)
HP Photosmart 7520 series Product Improvement Study (HKLM\...\{16B872EE-C458-41BD-BEAE-52758A3F3168}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Photosmart Prem C410 All-In-One Driver Software 14.0 Rel. 7 (HKLM\...\{C1164ED0-EF08-4B0B-8084-3BDAEAAEFD8D}) (Version: 14.0 - HP)
HP Setup (HKLM-x32\...\{17B4760F-334B-475D-829F-1A3E94A6A4E6}) (Version: 1.2.3560.3170 - Hewlett-Packard)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Support Solutions Framework (HKLM-x32\...\{55065080-504F-43BB-BE00-36B80D7D39A5}) (Version: 12.18.34.21 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
HPDiagnosticAlert (HKLM-x32\...\{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}) (Version: 1.00.0000 - Microsoft) Hidden
Junk Mail filter update (HKLM-x32\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
LightScribe System Software (HKLM-x32\...\{CC8E94A2-55C7-4460-953C-2A790180578C}) (Version: 1.18.8.1 - LightScribe)
Macromedia Shockwave Player (HKLM-x32\...\Macromedia Shockwave Player) (Version: - )
Mahjongg Empire (HKLM-x32\...\Mahjongg Empire) (Version: - )
MahJongg Game of Four Winds (HKLM-x32\...\MahJongg Game of Four Winds) (Version: - )
MahJongg Game of Four Winds Files (HKLM-x32\...\MahJongg Game of Four Winds Files) (Version: - )
Mahjongg Madness (HKLM-x32\...\Mahjongg Madness) (Version: - )
Mahjongg Master 4 (HKU\S-1-5-21-947602546-141725-2524230356-1001\...\Mahjongg Master 4) (Version: 1.0.0.0 - eGames)
Mahjongg Master 5 (HKLM-x32\...\Mahjongg Master 5) (Version: - )
Mahjongg Master Egyptian Edition (HKLM-x32\...\Mahjongg Master Egyptian Edition) (Version: - )
Mahjongg Master Egyptian Edition (HKU\S-1-5-21-947602546-141725-2524230356-1001\...\Mahjongg Master Egyptian Edition) (Version: 1.0.0.0 - eGames)
Mahjongg Patience (HKU\S-1-5-21-947602546-141725-2524230356-1001\...\Mahjongg Patience) (Version: 1.0.0.0 - eGames)
Mahjongg Platinum 4 DELUXE (HKLM-x32\...\{93149D26-B712-E67B-C23D-8CED82DC9DB5}) (Version: 1.0 - )
Mahjongg Tiles of Time Lite (HKU\S-1-5-21-947602546-141725-2524230356-1001\...\Mahjongg Tiles of Time Lite) (Version: 1.0.0.0 - eGames)
Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Mesh Runtime (HKLM-x32\...\{8C6D6116-B724-4810-8F2D-D047E6B7D68E}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (HKLM-x32\...\{50816F92-1652-4A7C-B9BC-48F682742C4B}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.8 (HKLM\...\{16735AF7-1D8D-3681-94A5-C578A61EC832}) (Version: 4.8.03761 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.8 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.8.03761 - Microsoft Corporation)
Microsoft Live Search Toolbar (HKLM-x32\...\{7FC8C210-A319-4835-A87D-B935EFB4C148}) (Version: 3.0.566.0 - Microsoft Corporation) Hidden
Microsoft Live Search Toolbar (HKLM-x32\...\{DF802C05-4660-418c-970C-B988ADB1D316}) (Version: 3.0.566.0 - Microsoft Live Search Toolbar)
Microsoft Office 97, Professional Edition (HKLM-x32\...\Office8.0) (Version: - )
Microsoft Office Home and Student 60 day trial (HKLM\...\OfficeTrial) (Version: - )
Microsoft Office PowerPoint Viewer 2007 (English) (HKLM-x32\...\{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft VC9 runtime libraries (HKLM-x32\...\{553C904F-57A2-4113-888E-BA0C3D1C69C0}) (Version: 2.0.0 - AOL Inc.) Hidden
Microsoft VC9 runtime libraries (HKLM-x32\...\{797EE0CA-8165-405C-B5CE-F11EC20F1BB0}) (Version: 1.0.0 - AOL LLC) Hidden
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Web Publishing Wizard 1.52 (HKLM-x32\...\WebPost) (Version: - )
Microsoft Works (HKLM-x32\...\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation)
Mozilla Firefox 62.0 (x64 en-US) (HKLM\...\Mozilla Firefox 62.0 (x64 en-US)) (Version: 62.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 62.0 - Mozilla)
MSVCRT (HKLM-x32\...\{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}) (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (HKLM-x32\...\{D0B44725-3666-492D-BEF6-587A14BD9BD9}) (Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.5 - NVIDIA Corporation)
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
PictureMover (HKLM-x32\...\{1896E712-2B3D-45eb-BCE9-542742A51032}) (Version: 3.3.1.19 - Hewlett-Packard Company)
Pipeliner (HKLM-x32\...\{057E1A06-C320-2038-287D-040E5A427ED4}) (Version: 2.5.0 - uptime ITechnologies GmbH) Hidden
Pipeliner (HKLM-x32\...\Pipeliner.5A8F60606AB9E68112BC6FCD53E816B203E65DCC.1) (Version: 2.5.0 (build 5841) - uptime ITechnologies GmbH)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
PowerDirector (HKLM-x32\...\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.3503 - CyberLink Corp.) Hidden
PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.3503 - CyberLink Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5938 - Realtek Semiconductor Corp.)
Recovery Manager (HKLM-x32\...\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.5.2216 - CyberLink Corp.) Hidden
RogueKiller version 15.5.3.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 15.5.3.0 - Adlice Software)
Shanghai Dynasty (HKLM-x32\...\ShanghaiDynastyUninstallKey) (Version: - )
Shanghai Second Dynasty (HKLM-x32\...\Activision_SD2UninstallKey) (Version: - )
Shanghai: Great Moments version 2.0 (HKLM-x32\...\Shanghai: Great Moments) (Version: - )
Shockwave (HKLM-x32\...\Shockwave) (Version: - )
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Taipei Mahjongg 25K (HKLM-x32\...\Taipei Mahjongg 25K) (Version: 1.00.07.06.01 - Selectsoft Publishing)
Uninstall AOL Emergency Connect Utility 1.0 (HKLM-x32\...\AOL Emergency Connect Utility 1.0) (Version: - )
Update Installer for WildTangent Games App (HKLM-x32\...\{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App) (Version: - WildTangent) Hidden
WildTangent Games App (HP Games) (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp) (Version: 4.0.5.5 - WildTangent)
Windows Live Communications Platform (HKLM-x32\...\{D45240D3-B6B3-4FF9-B243-54ECE3E10066}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Family Safety (HKLM\...\{1AAF3A3B-7B32-4DDF-8ABB-438DAEB46EEC}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Family Safety (HKLM\...\{46A5FBE9-ADB3-4493-A1CC-B4CFFD24D26A}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (HKLM\...\{1B8ABA62-74F0-47ED-B18C-A43128E591B8}) (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (HKLM-x32\...\{0B0F231F-CE6A-483D-AA23-77B364F75917}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (HKLM\...\{5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (HKLM-x32\...\{9D56775A-93F3-44A3-8092-840E3826DE30}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (HKLM-x32\...\{C66824E4-CBB3-4851-BB3F-E8CFD6350923}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (HKLM-x32\...\{A0C91188-C88F-4E86-93E6-CD7C9A266649}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (HKLM-x32\...\{DECDCB7C-58CC-4865-91AF-627F9798FE48}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (HKLM-x32\...\{80956555-A512-4190-9CAD-B000C36D6B6B}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (HKLM-x32\...\{EB4DF488-AAEF-406F-A341-CB2AAA315B90}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger Companion Core (HKLM-x32\...\{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (HKLM\...\{DA54F80E-261C-41A2-A855-549A144F2F59}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (HKLM-x32\...\{19BA08F7-C728-469C-8A35-BFBD3633BE08}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (HKLM-x32\...\{92EA4134-10D1-418A-91E1-5A0453131A38}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (HKLM-x32\...\{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (HKLM-x32\...\{D436F577-1695-4D2F-8B44-AC76C99E0002}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (HKLM-x32\...\{3336F667-9049-4D46-98B6-4C743EEBC5B1}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (HKLM-x32\...\{34F4D9A4-42C2-4348-BEF4-E553C84549E7}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (HKLM-x32\...\{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Remote Client (HKLM\...\{DF6D988A-EEA0-4277-AAB8-158E086E439B}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (HKLM\...\{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (HKLM\...\{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (HKLM\...\{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (HKLM-x32\...\{682B3E4F-696A-42DE-A41C-4C07EA1678B4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (HKLM-x32\...\{200FEC62-3C34-4D60-9CE8-EC372E01C08F}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live UX Platform (HKLM-x32\...\{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (HKLM-x32\...\{6A05FEDF-662E-46BF-8A25-010E3F1C9C69}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer (HKLM-x32\...\{A726AE06-AAA3-43D1-87E3-70F510314F04}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer (HKLM-x32\...\{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer (HKLM-x32\...\{AAF454FC-82CA-4F29-AB31-6A109485E76E}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (HKLM-x32\...\{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Worlds Best Mahjongg Games (HKLM-x32\...\{92B0DD85-4CAC-4F7D-96A6-5D6FAAFC942D}) (Version: 1.00.0000 - Valusoft)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-07-16] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-07-16] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-07-16] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-07-16] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2009-07-29] (NVIDIA Corporation) [File not signed]
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-07-16] (Avast Software s.r.o. -> AVAST Software)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\Miaddie\Desktop\DISCOVERY+.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=hepgdcblfmpbkfkaonlhdmlmakojgppa
ShortcutWithArgument: C:\Users\Miaddie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\DISCOVERY+.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=hepgdcblfmpbkfkaonlhdmlmakojgppa

==================== Loaded Modules (Whitelisted) =============

1996-11-17 00:00 - 1996-11-17 00:00 - 003774224 _____ () [File not signed] C:\Program Files (x86)\Microsoft Office\Office\MSO97.DLL
2009-11-18 04:42 - 2009-11-18 04:42 - 000048128 _____ (Hewlett-Packard Co.) [File not signed] C:\Program Files (x86)\hp\Digital Imaging\bin\hpqtra08.rsc
2009-08-20 17:34 - 2009-08-20 17:34 - 000033792 _____ (Hewlett-Packard Company) [File not signed] c:\Program Files (x86)\Common Files\LightScribe\LSLog.dll
2009-08-20 17:34 - 2009-08-20 17:34 - 000110592 _____ (Hewlett-Packard Company) [File not signed] c:\Program Files (x86)\Common Files\LightScribe\LSSProxy.dll
2010-08-06 11:15 - 2010-08-06 11:15 - 000071680 _____ (Hewlett-Packard) [File not signed] c:\windows\system32\hpzinw12.dll
2010-08-06 11:15 - 2010-08-06 11:15 - 000089600 _____ (Hewlett-Packard) [File not signed] c:\windows\system32\hpzipm12.dll
1996-11-17 00:00 - 1996-11-17 00:00 - 000005904 _____ (Microsoft Corporation) [File not signed] C:\Program Files (x86)\Microsoft Office\Office\osaintl.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-file-l1-2-0.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\api-ms-win-core-file-l1-2-0.dll
2022-07-17 07:56 - 2022-07-17 07:56 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-file-l1-2-0.dll] C:\Program Files\Avast Software\Avast\defs\22071702\avast.local_vc142.crt\api-ms-win-core-file-l1-2-0.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-file-l2-1-0.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\api-ms-win-core-file-l2-1-0.dll
2022-07-17 07:56 - 2022-07-17 07:56 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-file-l2-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071702\avast.local_vc142.crt\api-ms-win-core-file-l2-1-0.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-localization-l1-2-0.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\api-ms-win-core-localization-l1-2-0.dll
2022-07-17 07:56 - 2022-07-17 07:56 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-localization-l1-2-0.dll] C:\Program Files\Avast Software\Avast\defs\22071702\avast.local_vc142.crt\api-ms-win-core-localization-l1-2-0.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-processthreads-l1-1-1.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\api-ms-win-core-processthreads-l1-1-1.dll
2022-07-17 07:56 - 2022-07-17 07:56 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-processthreads-l1-1-1.dll] C:\Program Files\Avast Software\Avast\defs\22071702\avast.local_vc142.crt\api-ms-win-core-processthreads-l1-1-1.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-synch-l1-2-0.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\api-ms-win-core-synch-l1-2-0.dll
2022-07-17 07:56 - 2022-07-17 07:56 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-synch-l1-2-0.dll] C:\Program Files\Avast Software\Avast\defs\22071702\avast.local_vc142.crt\api-ms-win-core-synch-l1-2-0.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-timezone-l1-1-0.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\api-ms-win-core-timezone-l1-1-0.dll
2022-07-17 07:56 - 2022-07-17 07:56 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-core-timezone-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071702\avast.local_vc142.crt\api-ms-win-core-timezone-l1-1-0.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-convert-l1-1-0.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\api-ms-win-crt-convert-l1-1-0.dll
2022-07-17 07:56 - 2022-07-17 07:56 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-convert-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071702\avast.local_vc142.crt\api-ms-win-crt-convert-l1-1-0.dll
2022-07-17 07:56 - 2022-07-17 07:56 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-environment-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071702\avast.local_vc142.crt\api-ms-win-crt-environment-l1-1-0.dll
2022-07-17 07:56 - 2022-07-17 07:56 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-filesystem-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071702\avast.local_vc142.crt\api-ms-win-crt-filesystem-l1-1-0.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-heap-l1-1-0.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\api-ms-win-crt-heap-l1-1-0.dll
2022-07-17 07:56 - 2022-07-17 07:56 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-heap-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071702\avast.local_vc142.crt\api-ms-win-crt-heap-l1-1-0.dll
2022-07-17 07:56 - 2022-07-17 07:56 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-locale-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071702\avast.local_vc142.crt\api-ms-win-crt-locale-l1-1-0.dll
2022-07-17 07:56 - 2022-07-17 07:56 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-math-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071702\avast.local_vc142.crt\api-ms-win-crt-math-l1-1-0.dll
2022-07-17 07:56 - 2022-07-17 07:56 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-multibyte-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071702\avast.local_vc142.crt\api-ms-win-crt-multibyte-l1-1-0.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-runtime-l1-1-0.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\api-ms-win-crt-runtime-l1-1-0.dll
2022-07-17 07:56 - 2022-07-17 07:56 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-runtime-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071702\avast.local_vc142.crt\api-ms-win-crt-runtime-l1-1-0.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-stdio-l1-1-0.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\api-ms-win-crt-stdio-l1-1-0.dll
2022-07-17 07:56 - 2022-07-17 07:56 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-stdio-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071702\avast.local_vc142.crt\api-ms-win-crt-stdio-l1-1-0.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-string-l1-1-0.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\api-ms-win-crt-string-l1-1-0.dll
2022-07-17 07:56 - 2022-07-17 07:56 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-string-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071702\avast.local_vc142.crt\api-ms-win-crt-string-l1-1-0.dll
2022-07-17 07:56 - 2022-07-17 07:56 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-time-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071702\avast.local_vc142.crt\api-ms-win-crt-time-l1-1-0.dll
2022-07-17 07:56 - 2022-07-17 07:56 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\api-ms-win-crt-utility-l1-1-0.dll] C:\Program Files\Avast Software\Avast\defs\22071702\avast.local_vc142.crt\api-ms-win-crt-utility-l1-1-0.dll
2022-07-17 07:56 - 2022-07-17 07:56 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\msvcp140.dll] C:\Program Files\Avast Software\Avast\defs\22071702\avast.local_vc142.crt\MSVCP140.dll
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\ucrtbase.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\ucrtbase.DLL
2022-07-17 07:56 - 2022-07-17 07:56 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\ucrtbase.dll] C:\Program Files\Avast Software\Avast\defs\22071702\avast.local_vc142.crt\ucrtbase.DLL
2022-07-16 06:25 - 2022-07-16 06:25 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\vcruntime140.dll] C:\Program Files\Avast Software\Avast\1033\avast.local_vc142.crt\VCRUNTIME140.dll
2022-07-17 07:56 - 2022-07-17 07:56 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\vcruntime140.dll] C:\Program Files\Avast Software\Avast\defs\22071702\avast.local_vc142.crt\VCRUNTIME140.dll
2022-07-17 07:56 - 2022-07-17 07:56 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Avast Software\Avast\avast.local_vc142.crt\vcruntime140_1.dll] C:\Program Files\Avast Software\Avast\defs\22071702\avast.local_vc142.crt\VCRUNTIME140_1.dll
2009-07-29 14:21 - 2009-07-29 14:21 - 001087488 _____ (NVIDIA Corporation) [File not signed] C:\Windows\system32\NVSVCR.DLL

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Version 11) (Whitelisted) ==========

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securityresponse.symantec.com/avcenter/fix_homepage/
HKU\S-1-5-21-947602546-141725-2524230356-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-947602546-141725-2524230356-1001 -> DefaultScope {6339B916-C47B-43E1-ACB4-61293BB2E5B4} URL =
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22] (Hewlett-Packard Company -> Hewlett-Packard Co.)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-11-10] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Microsoft Live Search Toolbar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll [2009-07-16] (Microsoft Corporation -> Microsoft Corp.)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2017-10-27] (HP Inc. -> HP Inc.)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22] (Hewlett-Packard Company -> Hewlett-Packard Co.)
Toolbar: HKLM-x32 - Microsoft Live Search Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll [2009-07-16] (Microsoft Corporation -> Microsoft Corp.)
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 22:34 - 2018-02-17 18:17 - 000000092 _____ C:\Windows\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-947602546-141725-2524230356-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Miaddie\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.254.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

=============
 
FARBAR ADDITION TXT PART 2

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{ED1CBEA0-02BD-4522-B050-AAB8B8067A7E}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDirector\PDR.EXE (CyberLink -> CyberLink Corp.)
FirewallRules: [{C5724D6E-2422-4FE9-A5D7-A9200638816D}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartMusic.exe => No File
FirewallRules: [{26B1EB32-DCBD-4101-85B3-872E6BB3A4C1}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartPhoto.exe => No File
FirewallRules: [{95B62B8F-1629-4C8D-9971-B5F1BAEBB039}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartVideo.exe => No File
FirewallRules: [{7508281C-E89F-4E59-A5BC-D8FB546D380D}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\TSMAgent.exe => No File
FirewallRules: [{CFE77747-1D54-4188-B19F-4FAEB8661FE6}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\Kernel\CLML\CLMLSvc.exe => No File
FirewallRules: [{1F5CCE93-9771-408B-A96C-9BCF854440A5}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPDVDSmart.exe => No File
FirewallRules: [{2E5AA83D-3D06-444B-A194-8A8206ED7A92}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{AA9E2146-1EF7-4B15-A96D-F36B5FB654DD}] => (Allow) C:\Windows\system32\svchost.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{E46888A6-E59D-494A-A57A-F97F807B2C5D}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8C0BE1C9-5ED5-454A-AC78-E1210E746631}] => (Allow) C:\Program Files (x86)\Common Files\aol\acs\AOLDial.exe => No File
FirewallRules: [{15E08041-09BD-4F94-814F-B764DABA0005}] => (Allow) C:\Program Files (x86)\Common Files\aol\acs\AOLDial.exe => No File
FirewallRules: [{7C448904-82DF-466E-B06B-C27672A97832}] => (Allow) C:\Program Files (x86)\Common Files\aol\acs\AOLacsd.exe => No File
FirewallRules: [{1F61CCA4-2BA3-481B-82EB-65CAE6B8D4F5}] => (Allow) C:\Program Files (x86)\Common Files\aol\acs\AOLacsd.exe => No File
FirewallRules: [{AF5B1E71-C94D-464C-BA99-6E460E747847}] => (Allow) C:\Program Files (x86)\Common Files\aol\1279729449\ee\aolsoftware.exe => No File
FirewallRules: [{991551E0-F5CE-43D0-8913-49C9CD85A5FF}] => (Allow) C:\Program Files (x86)\Common Files\aol\1279729449\ee\aolsoftware.exe => No File
FirewallRules: [{170805DD-0C10-4AA0-A26D-2FCF86ED22E4}] => (Allow) C:\Program Files (x86)\AOL 9.5\waol.exe => No File
FirewallRules: [{B252D97D-0AC2-40BD-BBE1-354AD8CC93B1}] => (Allow) C:\Program Files (x86)\AOL 9.5\waol.exe => No File
FirewallRules: [{4B87657B-BD19-4AE4-B3BF-5068EF35B33B}] => (Allow) C:\Program Files (x86)\Common Files\aol\TopSpeed\3.0\aoltpsd3.exe => No File
FirewallRules: [{D2892F51-4DB5-4BD4-B4A6-429A820DFEB9}] => (Allow) C:\Program Files (x86)\Common Files\aol\TopSpeed\3.0\aoltpsd3.exe => No File
FirewallRules: [{6EF1FB2B-C444-449A-A7A3-BE7E16564F04}] => (Allow) C:\Program Files (x86)\Common Files\aol\Loader\aolload.exe => No File
FirewallRules: [{7E6F8066-B649-4688-A90F-D7A3695FFDBB}] => (Allow) C:\Program Files (x86)\Common Files\aol\Loader\aolload.exe => No File
FirewallRules: [{EC2E174C-FB6F-460D-9D8D-2C2B6EA33C55}] => (Allow) C:\Program Files (x86)\Common Files\aol\System Information\sinf.exe => No File
FirewallRules: [{320D0458-6A46-44A2-8C70-2F5AED26C8EB}] => (Allow) C:\Program Files (x86)\Common Files\aol\System Information\sinf.exe => No File
FirewallRules: [{A6DD5893-3186-41AD-B1D7-1CC7D1F8CD78}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartMusic.exe => No File
FirewallRules: [{D892BFEA-9C6A-4EFD-A297-C140111FEC61}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartPhoto.exe => No File
FirewallRules: [{0A0F3980-E88D-42B8-AC8E-8E33CF77EA19}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartVideo.exe => No File
FirewallRules: [{81DE6CEC-A10A-4282-A61F-2BF747ABB83F}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe => No File
FirewallRules: [{63E3F2F7-450A-4912-9838-904A6C578436}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe => No File
FirewallRules: [{B6C75C0B-EBDC-4006-B603-3CA912429AF7}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BD30C847-8AD6-4336-BDCD-AD934BC7731E}] => (Allow) LPort=2869
FirewallRules: [{9FFE1DB9-5CFD-4B3C-A324-60744D57ED52}] => (Allow) LPort=1900
FirewallRules: [{20B90176-CBEE-4D04-AB81-FB904F909DC9}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C2F9B59F-7354-4FF7-AF8E-19CB489243E5}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7\waol.exe => No File
FirewallRules: [{4809A6A8-019F-4B85-B5E1-CD546B32898C}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7\waol.exe => No File
FirewallRules: [{AA0F1767-3400-43CF-85C2-BDEA12E9FF56}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7\AOLBrowser\aolbrowser.exe => No File
FirewallRules: [{D0BB5D4F-6F22-403C-B258-A15DFDE6309A}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7\AOLBrowser\aolbrowser.exe => No File
FirewallRules: [{7A9348B4-5E1D-4170-874D-C006B5F8E8B0}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => No File
FirewallRules: [{793D80D3-8B12-4021-8A17-8FC35516CF2A}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => No File
FirewallRules: [{28801A7D-2DC2-4725-A577-C13F102A539C}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => No File
FirewallRules: [{4F09EE76-488A-491F-8E34-3678B828CECB}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe => No File
FirewallRules: [{29541E40-6A30-484C-BA09-40450F277E79}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe => No File
FirewallRules: [{195FCD64-88D4-44A0-9A5C-D299C9CA16F3}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe => No File
FirewallRules: [{5A25021F-52A2-4085-99AB-6414FF74578D}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe => No File
FirewallRules: [{A2F3A284-42B4-455D-80B4-086646F71064}] => (Allow) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe => No File
FirewallRules: [{5ED14A49-24E8-4187-BD2F-DA7DFBB958DE}] => (Allow) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe => No File
FirewallRules: [{25E0E7B3-ECA7-4BA3-8FAC-4835464F0FFC}] => (Allow) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe => No File
FirewallRules: [{FE1D455B-82D9-4D05-92BD-2E24514434C3}] => (Allow) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe => No File
FirewallRules: [{EAF9378F-D8B9-445E-9E39-2477B7083C15}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe (HP Inc. -> HP Inc.)
FirewallRules: [{58716FE0-2952-4290-9D53-7944D1B5F3DF}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7a\waol.exe => No File
FirewallRules: [{EEDAD34F-2056-4006-8D34-C1190311189F}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7a\waol.exe => No File
FirewallRules: [{5578A937-8EDA-4400-B2D4-B243A8894767}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7a\AOLBrowser\aolbrowser.exe => No File
FirewallRules: [{BDCA462B-78A4-4648-AFF8-4D34FD452516}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7a\AOLBrowser\aolbrowser.exe => No File
FirewallRules: [{C40C4DA0-53C4-49D3-A7F4-9CDDBDCD45DA}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7b\waol.exe => No File
FirewallRules: [{B36DE284-1153-4BF2-A61C-03C3B173415F}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7b\waol.exe => No File
FirewallRules: [{FEEA01FC-6DAF-4A3B-A8B1-C6E8F76F05B8}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7b\AOLBrowser\aolbrowser.exe => No File
FirewallRules: [{A4CA2809-BA55-4C04-8489-A29F80C3B72A}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7b\AOLBrowser\aolbrowser.exe => No File
FirewallRules: [{9DE59065-2A3A-4CC2-97E7-40CD05A03F63}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{B4043B5B-5C4C-4B74-B294-A4C9438C310B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{7A3E02F2-FD9D-43EA-AD54-42991F3AA95D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{0914B27C-8A0B-46C2-BA2C-9CE3F8425E28}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{6876633B-A184-4739-B444-28460108B501}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{D4AA4340-ABFC-4060-BA2F-83549E0036DD}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{2CD35AA3-B985-432B-ADB9-023C5A44D351}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{D3D38E39-EAFA-4D96-8096-28796AFD8F7E}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{27BECC58-278C-49F0-9076-E1B56AEAE109}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{B7C84CC0-6174-4027-987B-CFD3DD9EE29B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{01C6E0CD-BE70-4234-9EFB-7202024E0BDD}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{BBF6E6F3-8526-4659-8B19-298D1F3CAB07}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{70AA1E85-EAD6-4410-8CD5-5315830C7F7D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{64D84A0F-E0DA-4F1A-B5F2-7C60D0973729}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe (Hewlett Packard -> Hewlett-Packard)
FirewallRules: [{F1CCD1E1-85BF-4C83-B526-E77F99F0DB08}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{D572B0F0-DDB0-46C9-861C-C5AB69C89202}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{544F2DA6-DC33-4B05-9FC1-9202DF73DAC0}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe (Hewlett-Packard Company -> Hewlett-Packard)
FirewallRules: [{2414F7D3-67BB-4B84-BA3D-9DC91503E5DD}] => (Allow) C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe (Hewlett-Packard Company -> Hewlett-Packard Co.)
FirewallRules: [{0C1544D6-B35B-46D9-AF2A-1CA83A73F6AA}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe => No File
FirewallRules: [{B5D369C6-6199-4034-96D2-F2E6B088A2C0}] => (Allow) C:\Users\Miaddie\AppData\Local\Temp\7zS54B3\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{43CB206E-4198-45C2-9E30-DC108A993BAD}] => (Allow) C:\Users\Miaddie\AppData\Local\Temp\7zS54B3\HPDiagnosticCoreUI.exe => No File
FirewallRules: [TCP Query User{3E35AD15-A870-45BC-A48F-AFD02DA09A2F}C:\program files (x86)\hewlett-packard\hp support solutions\modules\hpdevicedetection3.exe] => (Block) C:\program files (x86)\hewlett-packard\hp support solutions\modules\hpdevicedetection3.exe (Hewlett-Packard Company -> Hewlett-Packard Company)
FirewallRules: [UDP Query User{38F24AD3-EA7B-41C4-8B8F-01FF37082E5E}C:\program files (x86)\hewlett-packard\hp support solutions\modules\hpdevicedetection3.exe] => (Block) C:\program files (x86)\hewlett-packard\hp support solutions\modules\hpdevicedetection3.exe (Hewlett-Packard Company -> Hewlett-Packard Company)
FirewallRules: [{0E0D216D-114C-4C3A-A4E0-3378D52579C0}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{AB0C27BC-9D53-4E36-A6AB-B4BB5AAF0DC5}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{00A5A4F1-9173-4DCF-9580-E7C3FB04EC52}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2643\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2643\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{BECAF0D9-1966-4C1E-BC36-477C9E1E9651}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2643\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2643\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{5C047EEE-058E-4C35-9B61-A661F02FC274}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2664\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2664\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{1C1A3E37-98EE-4891-8D12-49C40001AD41}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2664\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2664\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{BD865EC0-F57D-445F-9B1E-19983E3E91A9}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2690\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2690\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{A655A0EC-2179-4980-862B-C036BCBA6AAC}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2690\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2690\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{C641DA32-F29A-4C50-8BDF-B76ED7E08B92}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2706\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2706\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{5810FA84-AF95-469E-9968-9ED839A04F4D}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2706\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2706\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{C3D6FA6C-775D-4883-A746-0AA5791A3EFC}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2725\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2725\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{6CA0922C-8A81-4F4C-8409-BFFA5EAB4F8D}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2725\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2725\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{BE391C5C-20BD-4480-AF1B-61E06D6907EA}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2738\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2738\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{7D4E2C2E-B658-4FDD-BF98-E4AC9E0437E7}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2738\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2738\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{7F93B887-9722-4FA1-B4FB-71BCB9DF9D59}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2745\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2745\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{0980294E-6504-4DF3-B4F4-4F9A950A73B2}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2745\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2745\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{520CB816-AF09-4BCD-8708-99C073F6ADB6}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2760\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2760\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{9AF468B4-2024-44D9-AECE-C018627B1763}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2760\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2760\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{7EE7C3BC-2DC1-4DE4-A9D9-C670765CB273}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2793\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2793\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{B4EEA5BE-C13E-4727-9BFF-B9FCDAC250F3}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2793\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2793\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{B46E586C-DF03-4409-9082-A29213A6674E}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2811\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2811\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{4E44E8F7-887E-44C1-86A2-709DF89AAE2D}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2811\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2811\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{CAB25ACD-12A6-4DE0-8385-9E0D52C980C9}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2881\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2881\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{EF930352-A409-41F9-94DA-2F00F00B0D7F}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2881\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2881\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{3EC9B557-317A-4CAF-836C-273C128473E9}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2899\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2899\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{5BACD8B9-E20B-44A1-9544-70F0DF61CB42}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2899\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2899\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{71ED711C-6143-4449-8937-EFAE5570F1BD}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2926\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2926\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{9DDF7BE7-B3F1-483F-B674-BFC98B6A7071}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2926\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2926\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{B2551474-7473-4814-B086-E684070EC4D7}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2974\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2974\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{2037C828-D228-456B-BAD1-5EEFA600D5F3}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2974\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2974\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{BA37718D-A4E8-444E-8CD6-70756F26563A}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2978\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2978\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{A49696E4-2ECD-4AAB-8800-11C945710E60}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2978\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2978\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{B357E862-C593-43CF-B53F-1FB934A53D6E}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2984\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2984\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{C9252F03-09C4-44CA-91D1-6950BBED7D3A}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2984\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2984\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{EC28EE52-B66E-4040-8AEA-6AD1DB74B5D4}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3012\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3012\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{2DC70433-B056-4D4A-B883-A7120E67FE68}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3012\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3012\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{4197B728-B82A-4FEF-8959-CC109F275F21}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3043\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3043\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{E59E1D33-61FB-418A-8424-05C277821134}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3043\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3043\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{321CF3D6-C3AF-4C1B-B512-3C7711BA9AA8}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3046\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3046\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{0C7D8EB1-1D3E-4408-88DE-F00488431F40}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3046\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3046\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{C8075BCE-BFA9-4E23-B738-CEA48ABFEA4E}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3080\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3080\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{793C7A6F-A3FD-4536-BAE4-7BFB0B9F87ED}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3080\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3080\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{F6572591-CAB5-4501-8AEA-9B64704E5F8C}C:\program files\hp\hp photosmart 7520 series\bin\hpnetworkcommunicatorcom.exe] => (Allow) C:\program files\hp\hp photosmart 7520 series\bin\hpnetworkcommunicatorcom.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [UDP Query User{874C2CCF-00BC-4689-B0DB-ACE0D68BE0AA}C:\program files\hp\hp photosmart 7520 series\bin\hpnetworkcommunicatorcom.exe] => (Allow) C:\program files\hp\hp photosmart 7520 series\bin\hpnetworkcommunicatorcom.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [TCP Query User{C1F36DD9-4EBC-49CB-93B0-1AA7985E8963}C:\program files\hp\hp photosmart 7520 series\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp photosmart 7520 series\bin\hpnetworkcommunicator.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [UDP Query User{208D6CCD-9D91-4943-8CDF-CB20909E27A6}C:\program files\hp\hp photosmart 7520 series\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp photosmart 7520 series\bin\hpnetworkcommunicator.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [TCP Query User{8F0486DB-D57A-4549-AE6F-DCFD4C9DDF6A}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3112\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3112\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{DFBF3C47-0681-499C-B66F-C67EEB30A6EF}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3112\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3112\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{1B420DC9-BC3B-463A-90F0-51FF384616E9}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3142\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3142\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{B9A3EB97-8F40-4F60-A727-BF6D35F99D77}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3142\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3142\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{EF383746-1939-4479-B2B4-FD01D1186854}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3158\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3158\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{050D6C35-6A0A-496A-8A43-F9AB0E466D8A}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3158\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3158\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{D7E24C91-C841-4E19-BED0-E9A55367B840}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3167\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3167\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{98F1B0A2-9017-42E7-8CEE-4C464CFE908B}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3167\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3167\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{28611463-4581-4DA8-9F4E-A4FA92E7ADC6}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3181\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3181\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{8C709D61-6BC3-4980-88A9-D7D4355326DD}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3181\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3181\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{6299904C-A293-41C2-AB88-BDF4826AD946}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3208\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3208\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{F7F18F69-20DC-4F9E-A498-91693EF211C8}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3208\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3208\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{D98D7FC0-A6CD-4F1B-BFC2-83D574E1F895}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3233\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3233\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{1886B77C-BDE1-44DD-9C58-3D6B1A23065B}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3233\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3233\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{CB481943-BC23-4336-B9DF-E89F46298012}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3266\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3266\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{DD22596B-2C1E-4733-B312-9F15F4E115D1}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3266\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3266\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{164ECBC2-2671-42C2-A8BE-00D88BCE0BD5}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3270\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3270\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{D207853E-68E6-4EEE-A897-032AB6A5F1A8}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3270\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3270\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{AD28DE77-1190-4C56-96A3-ADA1685B0443}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3276\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3276\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{0D5183CD-CBA0-43F3-B981-38313511F1E0}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3276\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3276\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{26B19510-52B4-446D-8DAD-02290378E806}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3294\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3294\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{F9F1ED82-F030-4E14-9DCD-F0EA02D6CD88}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3294\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3294\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{E80B8C95-D0D6-4850-AE07-E716BAE8349D}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3296\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3296\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{01D5EAD9-757A-4EC9-81E9-0902875D4910}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3296\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3296\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{E522A3A3-2CB6-4BC3-B2E4-69DFC9349358}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3300\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3300\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{9BEB4090-0A8A-465D-BA91-30AC44F21D40}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3300\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3300\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{1EB175A5-7D14-4B49-A380-B539A9C72858}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3308\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3308\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{D1D0B671-3F3E-4317-93B4-AA743E2F7167}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3308\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3308\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{43F56640-7BE8-4D68-92EE-38CF9E2DC441}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3314\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3314\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{B351FB78-0D2C-48C7-8148-25BD048C6E07}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3314\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3314\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{7C66EDB1-04BB-49B2-953B-84CCA4D7DEB7}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3315\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3315\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{DCAE27C2-2867-4719-9898-97FBD47C2C5C}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3315\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3315\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{43CB7588-EB82-4B9E-BD32-C01EBA76BFDD}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3353\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3353\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{C30C76D4-B227-4B8B-B197-F222EA28328C}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3353\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3353\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{D126ABA1-3551-43EA-8D30-539A632B17F7}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3384\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3384\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{ABB51A6C-2968-4C69-9CEB-936DCE7319C9}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3384\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3384\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{67922B71-35F5-47EF-B77E-AE88E0BE0E63}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3418\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3418\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{2574FEDC-6E5C-4ECE-9720-5C9060907EE4}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3418\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3418\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{3F38C974-AEFB-44A7-B195-4DFBB272177B}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3489\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3489\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{AED5E45C-522F-40C3-84F0-B7B073470CAB}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3489\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3489\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{BF8D5A73-828A-4669-92CF-7B284551CF28}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3544\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3544\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{1D709547-67BD-45BE-B9CA-527737BD2FFF}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3544\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3544\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{5ECC0043-AC67-4929-8D52-D14156204BB3}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3584\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3584\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{774546D8-33B2-4E6E-8870-9EC9FC0C539F}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3584\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3584\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{8BBB3F96-39F0-43AB-B451-894238D22D5B}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3605\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3605\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{4D9403BE-A0B6-4FA8-B4DD-644EDAC6CD79}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3605\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3605\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{1AA8DF17-E529-414D-BF8B-716D27F9E52D}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3629\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3629\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{B9CDF8C4-EA08-4CB0-8518-31A8F88FB0C1}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3629\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3629\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{8447E6F5-0A35-4A0F-8EBE-988097668A94}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3649\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3649\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{490EEDC5-CDAD-4671-A1EB-42943633C1FA}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3649\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3649\cefsharp.browsersubprocess.exe => No File
FirewallRules: [{596E8426-72CF-4A00-81A8-D56032CCAC8E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{E4751347-C514-4B13-8772-05E3D4A0C34F}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{9A79776C-AFDA-4688-90E4-F4942CDB3A5E}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{F6898FCD-B6D1-4521-A0BA-35A44D26F1D3}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe (Avast Software s.r.o. -> AVAST Software)

==================== Restore Points =========================

22-06-2022 19:25:03 Scheduled Checkpoint
05-07-2022 13:48:05 Device Driver Package Install: TeamViewer GmbH Monitors
15-07-2022 21:59:14 Restore Operation
17-07-2022 08:08:03 Removed Computer Security

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (07/17/2022 07:56:46 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program FRST64.exe version 14.7.2022.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: d74

Start Time: 01d899d3f12e8a90

Termination Time: 16

Application Path: C:\Users\Miaddie\Desktop\FRST64.exe

Report Id: 7a8c28b1-05c7-11ed-9571-e0cb4e58ac19

Error: (04/23/2022 11:42:04 AM) (Source: Software Protection Platform Service) (EventID: 8208) (User: )
Description: Acquisition of genuine ticket failed (hr=0x80072EE7) for template Id 66c92734-d682-4d71-983e-d6ec3f16059f

Error: (04/23/2022 11:42:04 AM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: License acquisition failure details.
hr=0x80072EE7

Error: (10/13/2021 12:06:38 PM) (Source: Software Protection Platform Service) (EventID: 8208) (User: )
Description: Acquisition of genuine ticket failed (hr=0x80072EE7) for template Id 66c92734-d682-4d71-983e-d6ec3f16059f

Error: (10/13/2021 12:06:38 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: License acquisition failure details.
hr=0x80072EE7

Error: (09/15/2021 07:23:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: mahjongg.exe, version: 1.0.0.0, time stamp: 0x44f47ca8
Faulting module name: mahjongg.exe, version: 1.0.0.0, time stamp: 0x44f47ca8
Exception code: 0x40000015
Fault offset: 0x0006ca39
Faulting process id: 0x704
Faulting application start time: 0x01d7aa88a8777c20
Faulting application path: C:\Program Files (x86)\Selectsoft\Taipei Mahjongg\mahjongg.exe
Faulting module path: C:\Program Files (x86)\Selectsoft\Taipei Mahjongg\mahjongg.exe
Report Id: ef9b2f20-167b-11ec-8a13-e0cb4e58ac19

Error: (05/09/2021 05:20:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: FlashUtil32_32_0_0_465_pepper.exe, version: 32.0.0.465, time stamp: 0x5fbd8783
Faulting module name: FlashUtil32_32_0_0_465_pepper.dll, version: 32.0.0.465, time stamp: 0x5fbd87af
Exception code: 0xc0000005
Fault offset: 0x0000b382
Faulting process id: 0x930
Faulting application start time: 0x01d745191d724d00
Faulting application path: C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_465_pepper.exe
Faulting module path: C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_465_pepper.dll
Report Id: 636a2260-b10c-11eb-be8d-e0cb4e58ac19

Error: (04/14/2021 11:55:26 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: FlashUtil32_32_0_0_465_pepper.exe, version: 32.0.0.465, time stamp: 0x5fbd8783
Faulting module name: FlashUtil32_32_0_0_465_pepper.dll, version: 32.0.0.465, time stamp: 0x5fbd87af
Exception code: 0xc0000005
Fault offset: 0x0000b382
Faulting process id: 0xea8
Faulting application start time: 0x01d7314689229640
Faulting application path: C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_465_pepper.exe
Faulting module path: C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_465_pepper.dll
Report Id: d38372e0-9d39-11eb-9dc6-e0cb4e58ac19


System errors:
=============
Error: (07/17/2022 08:18:12 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: The server {BB6DF56B-CACE-11DC-9992-0019B93A3A84} did not register with DCOM within the required timeout.

Error: (07/17/2022 08:11:34 AM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 40.

Error: (07/17/2022 08:11:33 AM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 40.

Error: (07/17/2022 08:11:06 AM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 40.

Error: (07/17/2022 08:11:06 AM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 40.

Error: (07/17/2022 08:11:04 AM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 40.

Error: (07/17/2022 08:11:04 AM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 40.

Error: (07/17/2022 08:11:03 AM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: The following fatal alert was received: 40.


Windows Defender:
================
Date: 2013-02-14 03:35:50.245
Description:
Windows Defender has detected spyware or other potentially unwanted software.
For more information please see the following:
Name:Adware:Win32/PriceGong
Severity:Medium
Category:Adware
Path Found:file:C:\Users\Miaddie\AppData\LocalLow\FLV_Runner\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.5.3\bin\PriceGongIE.dll
Detection Type:Concrete
Detection Source:System
Status:Unknown
Process Name:

Date: 2013-02-13 12:30:00.137
Description:
Windows Defender has detected spyware or other potentially unwanted software.
For more information please see the following:
Name:Adware:Win32/PriceGong
Severity:Medium
Category:Adware
Path Found:file:C:\Users\Miaddie\AppData\LocalLow\FLV_Runner\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.5.3\bin\PriceGongIE.dll
Detection Type:Concrete
Detection Source:System
Status:Unknown
Process Name:

Date: 2013-02-09 15:08:11.534
Description:
Windows Defender has detected spyware or other potentially unwanted software.
For more information please see the following:
Name:Adware:Win32/PriceGong
Severity:Medium
Category:Adware
Path Found:file:C:\Users\Miaddie\AppData\LocalLow\FLV_Runner\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.5.3\bin\PriceGongIE.dll
Detection Type:Concrete
Detection Source:Real-Time Protection
Status:Unknown
Process Name:

Date: 2010-07-21 14:47:28.147
Description:
Windows Defender has detected spyware or other potentially unwanted software.
For more information please see the following:
Name:Spyware:Win32/Conducent
Severity:High
Category:Spyware
Path Found:containerfile:C:\Users\Miaddie\AppData\Local\Temp\setup2.exe;containerfile:E:\setup.exe;containerfile:E:\stub1.exe;containerfile:E:\stub2.exe;file:C:\Program Files (x86)\TimeSink\AdGateway\TSAdBot.exe;file:C:\Users\Miaddie\AppData\Local\Temp\setup2.exe->(VFS:TSAd.dll);file:C:\Users\Miaddie\AppData\Local\Temp\setup2.exe->(VFS:TSAdBot.exe#1);file:E:\setup.exe->(VFS:TSAd.dll);file:E:\setup.exe->(VFS:TSAdBot.exe#1);file:E:\setup.EXE->(wise0052)->(VFS:TSAd.dll#2);file:E:\setup.EXE->(wise0052)->(VFS:TSAdBot.exe#1);file:E:\setup.EXE->(wise0052)->(VFS:VcpDLL.dll#3);file:E:\setup.EXE->(wise0056);file:E:\setup.EXE->(wise0088);file:E:\stub1.exe->(VFS:TSAd.dll);file:E:\stub1.exe->(VFS:TSAdBot.exe#1);file:E:\stub2.exe->(VFS:TSAd.dll);file:E:\stub2.exe->(VFS:TSAdBot.exe#1);folder:C:\Program Files (x86)\timesink\;folder:C:\Program Files (x86)\timesink\AdGateway\;process:pid:1172;process:pid:1456;process:pid:2432;process:pid:2452;process:pid:3604;process:pid:3724;process:pid:3828;process:pid:4592;process:pid:964;regkey:HKLM
Detection Type:Concrete
Detection Source:Real-Time Protection
Status:Unknown
Process Name:

Date: 2010-07-21 14:47:16.806
Description:
Windows Defender has detected spyware or other potentially unwanted software.
For more information please see the following:
Name:Spyware:Win32/Conducent
Severity:High
Category:Spyware
Path Found:containerfile:C:\Users\Miaddie\AppData\Local\Temp\setup2.exe;containerfile:E:\setup.exe;containerfile:E:\stub1.exe;containerfile:E:\stub2.exe;file:C:\Program Files (x86)\TimeSink\AdGateway\TSAdBot.exe;file:C:\Users\Miaddie\AppData\Local\Temp\setup2.exe->(VFS:TSAd.dll);file:C:\Users\Miaddie\AppData\Local\Temp\setup2.exe->(VFS:TSAdBot.exe#1);file:E:\setup.exe->(VFS:TSAd.dll);file:E:\setup.exe->(VFS:TSAdBot.exe#1);file:E:\setup.EXE->(wise0052)->(VFS:TSAd.dll#2);file:E:\setup.EXE->(wise0052)->(VFS:TSAdBot.exe#1);file:E:\setup.EXE->(wise0052)->(VFS:VcpDLL.dll#3);file:E:\setup.EXE->(wise0056);file:E:\setup.EXE->(wise0088);file:E:\stub1.exe->(VFS:TSAd.dll);file:E:\stub1.exe->(VFS:TSAdBot.exe#1);file:E:\stub2.exe->(VFS:TSAd.dll);file:E:\stub2.exe->(VFS:TSAdBot.exe#1);folder:C:\Program Files (x86)\timesink\;folder:C:\Program Files (x86)\timesink\AdGateway\;process:pid:1172;process:pid:1456;process:pid:2432;process:pid:2452;process:pid:3604;process:pid:3724;process:pid:3828;process:pid:4592;process:pid:964;regkey:HKLM
Detection Type:Concrete
Detection Source:Real-Time Protection
Status:Unknown
Process Name:

==================== Memory info ===========================

BIOS: American Megatrends Inc. 5.15 11/06/2009
Motherboard: PEGATRON CORPORATION Narra6
Processor: AMD Athlon(tm) II X2 250 Processor
Percentage of memory in use: 47%
Total physical RAM: 7935.3 MB
Available physical RAM: 4188.61 MB
Total Virtual: 15868.79 MB
Available Virtual: 12320.52 MB

==================== Drives ================================

Drive c: (HP) (Fixed) (Total:585.16 GB) (Free:448.51 GB) (Model: WDC WD64 00AAKS-65A7B SCSI Disk Device) NTFS
Drive d: (FACTORY_IMAGE) (Fixed) (Total:10.92 GB) (Free:1.59 GB) (Model: WDC WD64 00AAKS-65A7B SCSI Disk Device) NTFS ==>[system with boot components (obtained from drive)]
Drive e: (HP PS7520) (CDROM) (Total:0.52 GB) (Free:0 GB) CDFS

\\?\Volume{2cd32944-0aec-11df-ac22-806e6f6e6963}\ (SYSTEM) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 596.2 GB) (Disk ID: 1549F232)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=585.2 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=10.9 GB) - (Type=07 NTFS)

==================== End of Addition.txt ==========
 
Download attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST(FRST64) and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.
 

Attachments

  • fixlist.txt
    31.2 KB · Views: 70
Fix result of Farbar Recovery Scan Tool (x64) Version: 14-07-2022
Ran by Miaddie (17-07-2022 18:56:05) Run:1
Running from C:\Users\Miaddie\Desktop
Loaded Profiles: Miaddie
Boot Mode: Normal
==============================================
FIXLIST.TXT PART 1
fixlist content:
*****************
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
S2 HPTouchpointAnalyticsService; "C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe" [X]
S3 wanatw; system32\DRIVERS\wanatw64.sys [X]
2018-11-08 15:06 - 2022-06-29 13:04 - 000001934 _____ () C:\Users\Miaddie\AppData\Roaming\wklnhst.dat
2021-01-19 12:16 - 2021-01-19 12:17 - 000000000 _____ () C:\Users\Miaddie\AppData\Local\{C25F2FCD-5BF3-49B3-A054-1AF56DB40C3E}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FirewallRules: [{C5724D6E-2422-4FE9-A5D7-A9200638816D}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartMusic.exe => No File
FirewallRules: [{26B1EB32-DCBD-4101-85B3-872E6BB3A4C1}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartPhoto.exe => No File
FirewallRules: [{95B62B8F-1629-4C8D-9971-B5F1BAEBB039}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPTouchSmartVideo.exe => No File
FirewallRules: [{7508281C-E89F-4E59-A5BC-D8FB546D380D}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\TSMAgent.exe => No File
FirewallRules: [{CFE77747-1D54-4188-B19F-4FAEB8661FE6}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\Kernel\CLML\CLMLSvc.exe => No File
FirewallRules: [{1F5CCE93-9771-408B-A96C-9BCF854440A5}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPDVDSmart.exe => No File
FirewallRules: [{8C0BE1C9-5ED5-454A-AC78-E1210E746631}] => (Allow) C:\Program Files (x86)\Common Files\aol\acs\AOLDial.exe => No File
FirewallRules: [{15E08041-09BD-4F94-814F-B764DABA0005}] => (Allow) C:\Program Files (x86)\Common Files\aol\acs\AOLDial.exe => No File
FirewallRules: [{7C448904-82DF-466E-B06B-C27672A97832}] => (Allow) C:\Program Files (x86)\Common Files\aol\acs\AOLacsd.exe => No File
FirewallRules: [{1F61CCA4-2BA3-481B-82EB-65CAE6B8D4F5}] => (Allow) C:\Program Files (x86)\Common Files\aol\acs\AOLacsd.exe => No File
FirewallRules: [{AF5B1E71-C94D-464C-BA99-6E460E747847}] => (Allow) C:\Program Files (x86)\Common Files\aol\1279729449\ee\aolsoftware.exe => No File
FirewallRules: [{991551E0-F5CE-43D0-8913-49C9CD85A5FF}] => (Allow) C:\Program Files (x86)\Common Files\aol\1279729449\ee\aolsoftware.exe => No File
FirewallRules: [{170805DD-0C10-4AA0-A26D-2FCF86ED22E4}] => (Allow) C:\Program Files (x86)\AOL 9.5\waol.exe => No File
FirewallRules: [{B252D97D-0AC2-40BD-BBE1-354AD8CC93B1}] => (Allow) C:\Program Files (x86)\AOL 9.5\waol.exe => No File
FirewallRules: [{4B87657B-BD19-4AE4-B3BF-5068EF35B33B}] => (Allow) C:\Program Files (x86)\Common Files\aol\TopSpeed\3.0\aoltpsd3.exe => No File
FirewallRules: [{D2892F51-4DB5-4BD4-B4A6-429A820DFEB9}] => (Allow) C:\Program Files (x86)\Common Files\aol\TopSpeed\3.0\aoltpsd3.exe => No File
FirewallRules: [{6EF1FB2B-C444-449A-A7A3-BE7E16564F04}] => (Allow) C:\Program Files (x86)\Common Files\aol\Loader\aolload.exe => No File
FirewallRules: [{7E6F8066-B649-4688-A90F-D7A3695FFDBB}] => (Allow) C:\Program Files (x86)\Common Files\aol\Loader\aolload.exe => No File
FirewallRules: [{EC2E174C-FB6F-460D-9D8D-2C2B6EA33C55}] => (Allow) C:\Program Files (x86)\Common Files\aol\System Information\sinf.exe => No File
FirewallRules: [{320D0458-6A46-44A2-8C70-2F5AED26C8EB}] => (Allow) C:\Program Files (x86)\Common Files\aol\System Information\sinf.exe => No File
FirewallRules: [{A6DD5893-3186-41AD-B1D7-1CC7D1F8CD78}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartMusic.exe => No File
FirewallRules: [{D892BFEA-9C6A-4EFD-A297-C140111FEC61}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartPhoto.exe => No File
FirewallRules: [{0A0F3980-E88D-42B8-AC8E-8E33CF77EA19}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\HPTouchSmartVideo.exe => No File
FirewallRules: [{81DE6CEC-A10A-4282-A61F-2BF747ABB83F}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe => No File
FirewallRules: [{63E3F2F7-450A-4912-9838-904A6C578436}] => (Allow) c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe => No File
FirewallRules: [{C2F9B59F-7354-4FF7-AF8E-19CB489243E5}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7\waol.exe => No File
FirewallRules: [{4809A6A8-019F-4B85-B5E1-CD546B32898C}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7\waol.exe => No File
FirewallRules: [{AA0F1767-3400-43CF-85C2-BDEA12E9FF56}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7\AOLBrowser\aolbrowser.exe => No File
FirewallRules: [{D0BB5D4F-6F22-403C-B258-A15DFDE6309A}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7\AOLBrowser\aolbrowser.exe => No File
FirewallRules: [{7A9348B4-5E1D-4170-874D-C006B5F8E8B0}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => No File
FirewallRules: [{793D80D3-8B12-4021-8A17-8FC35516CF2A}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => No File
FirewallRules: [{28801A7D-2DC2-4725-A577-C13F102A539C}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe => No File
FirewallRules: [{4F09EE76-488A-491F-8E34-3678B828CECB}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe => No File
FirewallRules: [{29541E40-6A30-484C-BA09-40450F277E79}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe => No File
FirewallRules: [{195FCD64-88D4-44A0-9A5C-D299C9CA16F3}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe => No File
FirewallRules: [{5A25021F-52A2-4085-99AB-6414FF74578D}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe => No File
FirewallRules: [{A2F3A284-42B4-455D-80B4-086646F71064}] => (Allow) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe => No File
FirewallRules: [{5ED14A49-24E8-4187-BD2F-DA7DFBB958DE}] => (Allow) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe => No File
FirewallRules: [{25E0E7B3-ECA7-4BA3-8FAC-4835464F0FFC}] => (Allow) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe => No File
FirewallRules: [{FE1D455B-82D9-4D05-92BD-2E24514434C3}] => (Allow) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe => No File
FirewallRules: [{58716FE0-2952-4290-9D53-7944D1B5F3DF}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7a\waol.exe => No File
FirewallRules: [{EEDAD34F-2056-4006-8D34-C1190311189F}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7a\waol.exe => No File
FirewallRules: [{5578A937-8EDA-4400-B2D4-B243A8894767}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7a\AOLBrowser\aolbrowser.exe => No File
FirewallRules: [{BDCA462B-78A4-4648-AFF8-4D34FD452516}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7a\AOLBrowser\aolbrowser.exe => No File
FirewallRules: [{C40C4DA0-53C4-49D3-A7F4-9CDDBDCD45DA}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7b\waol.exe => No File
FirewallRules: [{B36DE284-1153-4BF2-A61C-03C3B173415F}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7b\waol.exe => No File
FirewallRules: [{FEEA01FC-6DAF-4A3B-A8B1-C6E8F76F05B8}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7b\AOLBrowser\aolbrowser.exe => No File
FirewallRules: [{A4CA2809-BA55-4C04-8489-A29F80C3B72A}] => (Allow) C:\Program Files (x86)\AOL Desktop 9.7b\AOLBrowser\aolbrowser.exe => No File
FirewallRules: [{0C1544D6-B35B-46D9-AF2A-1CA83A73F6AA}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe => No File
FirewallRules: [{B5D369C6-6199-4034-96D2-F2E6B088A2C0}] => (Allow) C:\Users\Miaddie\AppData\Local\Temp\7zS54B3\HPDiagnosticCoreUI.exe => No File
FirewallRules: [{43CB206E-4198-45C2-9E30-DC108A993BAD}] => (Allow) C:\Users\Miaddie\AppData\Local\Temp\7zS54B3\HPDiagnosticCoreUI.exe => No File
FirewallRules: [TCP Query User{00A5A4F1-9173-4DCF-9580-E7C3FB04EC52}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2643\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2643\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{BECAF0D9-1966-4C1E-BC36-477C9E1E9651}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2643\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2643\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{5C047EEE-058E-4C35-9B61-A661F02FC274}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2664\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2664\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{1C1A3E37-98EE-4891-8D12-49C40001AD41}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2664\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2664\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{BD865EC0-F57D-445F-9B1E-19983E3E91A9}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2690\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2690\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{A655A0EC-2179-4980-862B-C036BCBA6AAC}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2690\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2690\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{C641DA32-F29A-4C50-8BDF-B76ED7E08B92}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2706\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2706\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{5810FA84-AF95-469E-9968-9ED839A04F4D}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2706\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2706\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{C3D6FA6C-775D-4883-A746-0AA5791A3EFC}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2725\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2725\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{6CA0922C-8A81-4F4C-8409-BFFA5EAB4F8D}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2725\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2725\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{BE391C5C-20BD-4480-AF1B-61E06D6907EA}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2738\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2738\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{7D4E2C2E-B658-4FDD-BF98-E4AC9E0437E7}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2738\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2738\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{7F93B887-9722-4FA1-B4FB-71BCB9DF9D59}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2745\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2745\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{0980294E-6504-4DF3-B4F4-4F9A950A73B2}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2745\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2745\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{520CB816-AF09-4BCD-8708-99C073F6ADB6}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2760\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2760\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{9AF468B4-2024-44D9-AECE-C018627B1763}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2760\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2760\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{7EE7C3BC-2DC1-4DE4-A9D9-C670765CB273}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2793\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2793\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{B4EEA5BE-C13E-4727-9BFF-B9FCDAC250F3}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2793\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2793\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{B46E586C-DF03-4409-9082-A29213A6674E}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2811\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2811\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{4E44E8F7-887E-44C1-86A2-709DF89AAE2D}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2811\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2811\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{CAB25ACD-12A6-4DE0-8385-9E0D52C980C9}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2881\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2881\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{EF930352-A409-41F9-94DA-2F00F00B0D7F}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2881\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2881\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{3EC9B557-317A-4CAF-836C-273C128473E9}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2899\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2899\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{5BACD8B9-E20B-44A1-9544-70F0DF61CB42}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2899\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2899\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{71ED711C-6143-4449-8937-EFAE5570F1BD}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2926\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2926\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{9DDF7BE7-B3F1-483F-B674-BFC98B6A7071}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2926\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2926\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{B2551474-7473-4814-B086-E684070EC4D7}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2974\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2974\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{2037C828-D228-456B-BAD1-5EEFA600D5F3}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2974\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2974\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{BA37718D-A4E8-444E-8CD6-70756F26563A}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2978\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2978\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{A49696E4-2ECD-4AAB-8800-11C945710E60}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2978\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2978\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{B357E862-C593-43CF-B53F-1FB934A53D6E}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2984\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2984\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{C9252F03-09C4-44CA-91D1-6950BBED7D3A}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2984\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2984\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{EC28EE52-B66E-4040-8AEA-6AD1DB74B5D4}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3012\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3012\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{2DC70433-B056-4D4A-B883-A7120E67FE68}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3012\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3012\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{4197B728-B82A-4FEF-8959-CC109F275F21}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3043\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3043\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{E59E1D33-61FB-418A-8424-05C277821134}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3043\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3043\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{321CF3D6-C3AF-4C1B-B512-3C7711BA9AA8}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3046\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3046\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{0C7D8EB1-1D3E-4408-88DE-F00488431F40}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3046\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3046\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{C8075BCE-BFA9-4E23-B738-CEA48ABFEA4E}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3080\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3080\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{793C7A6F-A3FD-4536-BAE4-7BFB0B9F87ED}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3080\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3080\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{8F0486DB-D57A-4549-AE6F-DCFD4C9DDF6A}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3112\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3112\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{DFBF3C47-0681-499C-B66F-C67EEB30A6EF}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3112\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3112\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{1B420DC9-BC3B-463A-90F0-51FF384616E9}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3142\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3142\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{B9A3EB97-8F40-4F60-A727-BF6D35F99D77}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3142\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3142\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{EF383746-1939-4479-B2B4-FD01D1186854}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3158\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3158\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{050D6C35-6A0A-496A-8A43-F9AB0E466D8A}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3158\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3158\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{D7E24C91-C841-4E19-BED0-E9A55367B840}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3167\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3167\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{98F1B0A2-9017-42E7-8CEE-4C464CFE908B}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3167\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3167\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{28611463-4581-4DA8-9F4E-A4FA92E7ADC6}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3181\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3181\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{8C709D61-6BC3-4980-88A9-D7D4355326DD}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3181\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3181\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{6299904C-A293-41C2-AB88-BDF4826AD946}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3208\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3208\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{F7F18F69-20DC-4F9E-A498-91693EF211C8}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3208\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3208\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{D98D7FC0-A6CD-4F1B-BFC2-83D574E1F895}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3233\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3233\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{1886B77C-BDE1-44DD-9C58-3D6B1A23065B}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3233\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3233\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{CB481943-BC23-4336-B9DF-E89F46298012}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3266\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3266\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{DD22596B-2C1E-4733-B312-9F15F4E115D1}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3266\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3266\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{164ECBC2-2671-42C2-A8BE-00D88BCE0BD5}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3270\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3270\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{D207853E-68E6-4EEE-A897-032AB6A5F1A8}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3270\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3270\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{AD28DE77-1190-4C56-96A3-ADA1685B0443}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3276\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3276\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{0D5183CD-CBA0-43F3-B981-38313511F1E0}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3276\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3276\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{26B19510-52B4-446D-8DAD-02290378E806}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3294\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3294\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{F9F1ED82-F030-4E14-9DCD-F0EA02D6CD88}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3294\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3294\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{E80B8C95-D0D6-4850-AE07-E716BAE8349D}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3296\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3296\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{01D5EAD9-757A-4EC9-81E9-0902875D4910}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3296\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3296\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{E522A3A3-2CB6-4BC3-B2E4-69DFC9349358}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3300\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3300\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{9BEB4090-0A8A-465D-BA91-30AC44F21D40}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3300\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3300\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{1EB175A5-7D14-4B49-A380-B539A9C72858}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3308\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3308\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{D1D0B671-3F3E-4317-93B4-AA743E2F7167}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3308\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3308\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{43F56640-7BE8-4D68-92EE-38CF9E2DC441}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3314\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3314\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{B351FB78-0D2C-48C7-8148-25BD048C6E07}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3314\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3314\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{7C66EDB1-04BB-49B2-953B-84CCA4D7DEB7}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3315\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3315\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{DCAE27C2-2867-4719-9898-97FBD47C2C5C}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3315\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3315\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{43CB7588-EB82-4B9E-BD32-C01EBA76BFDD}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3353\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3353\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{C30C76D4-B227-4B8B-B197-F222EA28328C}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3353\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3353\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{D126ABA1-3551-43EA-8D30-539A632B17F7}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3384\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3384\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{ABB51A6C-2968-4C69-9CEB-936DCE7319C9}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3384\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3384\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{67922B71-35F5-47EF-B77E-AE88E0BE0E63}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3418\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3418\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{2574FEDC-6E5C-4ECE-9720-5C9060907EE4}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3418\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3418\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{3F38C974-AEFB-44A7-B195-4DFBB272177B}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3489\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3489\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{AED5E45C-522F-40C3-84F0-B7B073470CAB}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3489\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3489\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{BF8D5A73-828A-4669-92CF-7B284551CF28}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3544\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3544\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{1D709547-67BD-45BE-B9CA-527737BD2FFF}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3544\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3544\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{5ECC0043-AC67-4929-8D52-D14156204BB3}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3584\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3584\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{774546D8-33B2-4E6E-8870-9EC9FC0C539F}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3584\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3584\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{8BBB3F96-39F0-43AB-B451-894238D22D5B}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3605\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3605\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{4D9403BE-A0B6-4FA8-B4DD-644EDAC6CD79}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3605\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3605\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{1AA8DF17-E529-414D-BF8B-716D27F9E52D}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3629\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3629\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{B9CDF8C4-EA08-4CB0-8518-31A8F88FB0C1}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3629\cefsharp.browsersubprocess.exe] => (Allow) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3629\cefsharp.browsersubprocess.exe => No File
FirewallRules: [TCP Query User{8447E6F5-0A35-4A0F-8EBE-988097668A94}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3649\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3649\cefsharp.browsersubprocess.exe => No File
FirewallRules: [UDP Query User{490EEDC5-CDAD-4671-A1EB-42943633C1FA}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3649\cefsharp.browsersubprocess.exe] => (Block) C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3649\cefsharp.browsersubprocess.exe => No File

*****************
 
FIXLOG.TXT PART 2

HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
HKLM\System\CurrentControlSet\Services\HPTouchpointAnalyticsService => removed successfully
HPTouchpointAnalyticsService => service removed successfully
HKLM\System\CurrentControlSet\Services\wanatw => removed successfully
wanatw => service removed successfully
C:\Users\Miaddie\AppData\Roaming\wklnhst.dat => moved successfully
C:\Users\Miaddie\AppData\Local\{C25F2FCD-5BF3-49B3-A054-1AF56DB40C3E} => moved successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => value restored successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C5724D6E-2422-4FE9-A5D7-A9200638816D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{26B1EB32-DCBD-4101-85B3-872E6BB3A4C1}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{95B62B8F-1629-4C8D-9971-B5F1BAEBB039}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7508281C-E89F-4E59-A5BC-D8FB546D380D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CFE77747-1D54-4188-B19F-4FAEB8661FE6}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1F5CCE93-9771-408B-A96C-9BCF854440A5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8C0BE1C9-5ED5-454A-AC78-E1210E746631}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{15E08041-09BD-4F94-814F-B764DABA0005}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7C448904-82DF-466E-B06B-C27672A97832}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1F61CCA4-2BA3-481B-82EB-65CAE6B8D4F5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AF5B1E71-C94D-464C-BA99-6E460E747847}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{991551E0-F5CE-43D0-8913-49C9CD85A5FF}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{170805DD-0C10-4AA0-A26D-2FCF86ED22E4}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B252D97D-0AC2-40BD-BBE1-354AD8CC93B1}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4B87657B-BD19-4AE4-B3BF-5068EF35B33B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D2892F51-4DB5-4BD4-B4A6-429A820DFEB9}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6EF1FB2B-C444-449A-A7A3-BE7E16564F04}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7E6F8066-B649-4688-A90F-D7A3695FFDBB}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{EC2E174C-FB6F-460D-9D8D-2C2B6EA33C55}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{320D0458-6A46-44A2-8C70-2F5AED26C8EB}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A6DD5893-3186-41AD-B1D7-1CC7D1F8CD78}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D892BFEA-9C6A-4EFD-A297-C140111FEC61}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0A0F3980-E88D-42B8-AC8E-8E33CF77EA19}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{81DE6CEC-A10A-4282-A61F-2BF747ABB83F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{63E3F2F7-450A-4912-9838-904A6C578436}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C2F9B59F-7354-4FF7-AF8E-19CB489243E5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4809A6A8-019F-4B85-B5E1-CD546B32898C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AA0F1767-3400-43CF-85C2-BDEA12E9FF56}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D0BB5D4F-6F22-403C-B258-A15DFDE6309A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7A9348B4-5E1D-4170-874D-C006B5F8E8B0}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{793D80D3-8B12-4021-8A17-8FC35516CF2A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{28801A7D-2DC2-4725-A577-C13F102A539C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4F09EE76-488A-491F-8E34-3678B828CECB}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{29541E40-6A30-484C-BA09-40450F277E79}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{195FCD64-88D4-44A0-9A5C-D299C9CA16F3}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5A25021F-52A2-4085-99AB-6414FF74578D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A2F3A284-42B4-455D-80B4-086646F71064}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5ED14A49-24E8-4187-BD2F-DA7DFBB958DE}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{25E0E7B3-ECA7-4BA3-8FAC-4835464F0FFC}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{FE1D455B-82D9-4D05-92BD-2E24514434C3}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{58716FE0-2952-4290-9D53-7944D1B5F3DF}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{EEDAD34F-2056-4006-8D34-C1190311189F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5578A937-8EDA-4400-B2D4-B243A8894767}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BDCA462B-78A4-4648-AFF8-4D34FD452516}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C40C4DA0-53C4-49D3-A7F4-9CDDBDCD45DA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B36DE284-1153-4BF2-A61C-03C3B173415F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{FEEA01FC-6DAF-4A3B-A8B1-C6E8F76F05B8}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A4CA2809-BA55-4C04-8489-A29F80C3B72A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0C1544D6-B35B-46D9-AF2A-1CA83A73F6AA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B5D369C6-6199-4034-96D2-F2E6B088A2C0}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{43CB206E-4198-45C2-9E30-DC108A993BAD}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{00A5A4F1-9173-4DCF-9580-E7C3FB04EC52}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2643\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{BECAF0D9-1966-4C1E-BC36-477C9E1E9651}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2643\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{5C047EEE-058E-4C35-9B61-A661F02FC274}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2664\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{1C1A3E37-98EE-4891-8D12-49C40001AD41}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2664\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{BD865EC0-F57D-445F-9B1E-19983E3E91A9}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2690\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A655A0EC-2179-4980-862B-C036BCBA6AAC}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2690\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{C641DA32-F29A-4C50-8BDF-B76ED7E08B92}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2706\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{5810FA84-AF95-469E-9968-9ED839A04F4D}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2706\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{C3D6FA6C-775D-4883-A746-0AA5791A3EFC}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2725\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6CA0922C-8A81-4F4C-8409-BFFA5EAB4F8D}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2725\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{BE391C5C-20BD-4480-AF1B-61E06D6907EA}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2738\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{7D4E2C2E-B658-4FDD-BF98-E4AC9E0437E7}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2738\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{7F93B887-9722-4FA1-B4FB-71BCB9DF9D59}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2745\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{0980294E-6504-4DF3-B4F4-4F9A950A73B2}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2745\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{520CB816-AF09-4BCD-8708-99C073F6ADB6}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2760\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{9AF468B4-2024-44D9-AECE-C018627B1763}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2760\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{7EE7C3BC-2DC1-4DE4-A9D9-C670765CB273}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2793\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{B4EEA5BE-C13E-4727-9BFF-B9FCDAC250F3}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2793\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B46E586C-DF03-4409-9082-A29213A6674E}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2811\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4E44E8F7-887E-44C1-86A2-709DF89AAE2D}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2811\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{CAB25ACD-12A6-4DE0-8385-9E0D52C980C9}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2881\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{EF930352-A409-41F9-94DA-2F00F00B0D7F}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2881\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{3EC9B557-317A-4CAF-836C-273C128473E9}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2899\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{5BACD8B9-E20B-44A1-9544-70F0DF61CB42}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2899\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{71ED711C-6143-4449-8937-EFAE5570F1BD}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2926\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{9DDF7BE7-B3F1-483F-B674-BFC98B6A7071}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2926\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B2551474-7473-4814-B086-E684070EC4D7}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2974\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{2037C828-D228-456B-BAD1-5EEFA600D5F3}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2974\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{BA37718D-A4E8-444E-8CD6-70756F26563A}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2978\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A49696E4-2ECD-4AAB-8800-11C945710E60}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2978\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B357E862-C593-43CF-B53F-1FB934A53D6E}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2984\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{C9252F03-09C4-44CA-91D1-6950BBED7D3A}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.2984\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{EC28EE52-B66E-4040-8AEA-6AD1DB74B5D4}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3012\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{2DC70433-B056-4D4A-B883-A7120E67FE68}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3012\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{4197B728-B82A-4FEF-8959-CC109F275F21}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3043\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{E59E1D33-61FB-418A-8424-05C277821134}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3043\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{321CF3D6-C3AF-4C1B-B512-3C7711BA9AA8}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3046\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{0C7D8EB1-1D3E-4408-88DE-F00488431F40}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3046\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{C8075BCE-BFA9-4E23-B738-CEA48ABFEA4E}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3080\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{793C7A6F-A3FD-4536-BAE4-7BFB0B9F87ED}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3080\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{8F0486DB-D57A-4549-AE6F-DCFD4C9DDF6A}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3112\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{DFBF3C47-0681-499C-B66F-C67EEB30A6EF}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3112\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1B420DC9-BC3B-463A-90F0-51FF384616E9}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3142\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{B9A3EB97-8F40-4F60-A727-BF6D35F99D77}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3142\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{EF383746-1939-4479-B2B4-FD01D1186854}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3158\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{050D6C35-6A0A-496A-8A43-F9AB0E466D8A}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3158\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D7E24C91-C841-4E19-BED0-E9A55367B840}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3167\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{98F1B0A2-9017-42E7-8CEE-4C464CFE908B}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3167\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{28611463-4581-4DA8-9F4E-A4FA92E7ADC6}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3181\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{8C709D61-6BC3-4980-88A9-D7D4355326DD}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3181\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{6299904C-A293-41C2-AB88-BDF4826AD946}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3208\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{F7F18F69-20DC-4F9E-A498-91693EF211C8}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3208\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D98D7FC0-A6CD-4F1B-BFC2-83D574E1F895}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3233\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{1886B77C-BDE1-44DD-9C58-3D6B1A23065B}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3233\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{CB481943-BC23-4336-B9DF-E89F46298012}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3266\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{DD22596B-2C1E-4733-B312-9F15F4E115D1}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3266\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{164ECBC2-2671-42C2-A8BE-00D88BCE0BD5}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3270\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D207853E-68E6-4EEE-A897-032AB6A5F1A8}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3270\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{AD28DE77-1190-4C56-96A3-ADA1685B0443}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3276\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{0D5183CD-CBA0-43F3-B981-38313511F1E0}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3276\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{26B19510-52B4-446D-8DAD-02290378E806}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3294\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{F9F1ED82-F030-4E14-9DCD-F0EA02D6CD88}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3294\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{E80B8C95-D0D6-4850-AE07-E716BAE8349D}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3296\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{01D5EAD9-757A-4EC9-81E9-0902875D4910}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3296\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{E522A3A3-2CB6-4BC3-B2E4-69DFC9349358}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3300\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{9BEB4090-0A8A-465D-BA91-30AC44F21D40}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3300\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1EB175A5-7D14-4B49-A380-B539A9C72858}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3308\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D1D0B671-3F3E-4317-93B4-AA743E2F7167}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3308\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{43F56640-7BE8-4D68-92EE-38CF9E2DC441}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3314\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{B351FB78-0D2C-48C7-8148-25BD048C6E07}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3314\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{7C66EDB1-04BB-49B2-953B-84CCA4D7DEB7}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3315\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{DCAE27C2-2867-4719-9898-97FBD47C2C5C}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3315\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{43CB7588-EB82-4B9E-BD32-C01EBA76BFDD}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3353\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{C30C76D4-B227-4B8B-B197-F222EA28328C}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3353\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D126ABA1-3551-43EA-8D30-539A632B17F7}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3384\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{ABB51A6C-2968-4C69-9CEB-936DCE7319C9}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3384\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{67922B71-35F5-47EF-B77E-AE88E0BE0E63}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3418\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{2574FEDC-6E5C-4ECE-9720-5C9060907EE4}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3418\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{3F38C974-AEFB-44A7-B195-4DFBB272177B}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3489\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{AED5E45C-522F-40C3-84F0-B7B073470CAB}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3489\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{BF8D5A73-828A-4669-92CF-7B284551CF28}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3544\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{1D709547-67BD-45BE-B9CA-527737BD2FFF}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3544\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{5ECC0043-AC67-4929-8D52-D14156204BB3}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3584\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{774546D8-33B2-4E6E-8870-9EC9FC0C539F}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3584\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{8BBB3F96-39F0-43AB-B451-894238D22D5B}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3605\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4D9403BE-A0B6-4FA8-B4DD-644EDAC6CD79}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3605\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1AA8DF17-E529-414D-BF8B-716D27F9E52D}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3629\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{B9CDF8C4-EA08-4CB0-8518-31A8F88FB0C1}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3629\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{8447E6F5-0A35-4A0F-8EBE-988097668A94}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3649\cefsharp.browsersubprocess.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{490EEDC5-CDAD-4671-A1EB-42943633C1FA}C:\users\miaddie\appdata\local\aoldesktop\app-11.0.3649\cefsharp.browsersubprocess.exe" => removed successfully

==== End of Fixlog 18:56:06 ====
 
Last scans...


redtarget.gif

Download Security Check from here or here and save it to your Desktop.

  • Double-click SecurityCheck.exe
  • Follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.

NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.
NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.
NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run



redtarget.gif

Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.
Make sure the following options are checked:

  • Internet Services
  • Windows Firewall
  • System Restore
  • Security Center
  • Windows Update
  • Windows Defender
  • Other Services

Press "Scan".
It will create a log (FSS.txt) in the same directory the tool is run.
Please copy and paste the log to your reply.



redtarget.gif

Download Temp File Cleaner (TFC)
Alternate download: http://www.itxassociates.com/OT-Tools/TFC.exe

  • Double click on TFC.exe to run the program.
  • Click on Start button to begin cleaning process.
  • TFC will close all running programs, and it may ask you to restart computer.



redtarget.gif

Download Sophos Free Virus Removal Tool and save it to your desktop.

  • Double click the icon and select Run
  • Click Next
  • Select I accept the terms in this license agreement, then click Next twice
  • Click Install
  • Click Finish to launch the program
  • Once the virus database has been updated click Start Scanning
  • If any threats are found click Details, then View log file... (bottom left hand corner)
  • Copy and paste the results in your reply
  • Close the Notepad document, close the Threat Details screen, then click Start cleanup
  • Click Exit to close the program
 
Results of screen317's Security Check version 1.014 --- 12/23/15
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
Avast Antivirus
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Adobe Reader 10.1.12 Adobe Reader out of Date!
Google Chrome (103.0.5060.114)
Google Chrome (SetupMetrics...)
````````Process Check: objlist.exe by Laurent````````
Common Files Authentium AntiVirus5 vsedsps.exe
Common Files Authentium AntiVirus5 vseamps.exe
Common Files Authentium AntiVirus5 vseqrts.exe
Avast Software Avast wsc_proxy.exe
Avast Software Avast AvastSvc.exe
Avast Software Avast aswToolsSvc.exe
Avast Software Avast AvastUI.exe
Avast Software Avast afwServ.exe
Avast Software Cleanup TuneupSvc.exe
Avast Software Avast aswEngSrv.exe
Avast Software Driver Updater DriverUpdSvc.exe
AVAST Software Browser Update 1.8.1206.2\AvastBrowserCrashHandler.exe
AVAST Software Browser Update 1.8.1206.2\AvastBrowserCrashHandler64.exe
Avast Software SecureLine VPN VpnSvc.exe
Avast Software Avast aswidsagent.exe
Avast Software Avast AvastUI.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 1%
````````````````````End of Log``````````````````````
 
Farbar Service Scanner Version: 15-06-2022
Ran by Miaddie (administrator) on 17-07-2022 at 20:13:12
Running from "C:\Users\Miaddie\Desktop"
Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============


Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============


Firewall Disabled Policy:
==================


System Restore:
============


System Restore Policy:
========================


Action Center:
============


Windows Update:
============


Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.


Windows Defender Disabled Policy:
==========================


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\Drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\Drivers\netbt.sys => File is digitally signed
C:\Windows\System32\Drivers\tdx.sys => File is digitally signed
C:\Windows\System32\dhcpcsvc.dll => File is digitally signed
C:\Windows\System32\Drivers\afd.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\Drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\SDRSVC.dll => File is digitally signed
C:\Windows\System32\vssvc.exe => File is digitally signed
C:\Windows\System32\wscsvc.dll => File is digitally signed
C:\Windows\System32\\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Windows\System32\ipnathlp.dll => File is digitally signed
C:\Windows\System32\iphlpsvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed


**** End of log ****
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 11446748872 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes

Emptying RecycleBin. Do not interrupt.

RecycleBin emptied: 7965105346 bytes
Process complete!

Total Files Cleaned = 18,597.00 mb
 
Code: 
Sophos Scan & Clean
www.sophos.com

   Computer name . . . . : MIADDIE-PC
   Windows . . . . . . . : 6.1.1.7601.X64/2
   User name . . . . . . : Miaddie-PC\Miaddie
   UAC . . . . . . . . . : Enabled
   License . . . . . . . : Free

   Scan date . . . . . . : 2022-07-17 20:22:58
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 11m 4s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : Yes

   Threats . . . . . . . : 2
   Traces  . . . . . . . : 322

   Objects scanned . . . : 2,008,479
   Files scanned . . . . : 87,189
   Remnants scanned  . . : 663,567 files / 1,257,723 keys

Malware _____________________________________________________________________

   C:\Users\Miaddie\AppData\Local\SquirrelTemp\tempe\lib\net45\Mono.Cecil.dll -> Quarantined
      Size . . . . . . . : 287,776 bytes
      Age  . . . . . . . : 1678.3 days (2017-12-12 12:31:12)
      Entropy  . . . . . : 8.0
      SHA-256  . . . . . : A7CAB37F7AD259241CB5C82DA0E3341D42377DC07CAF9740828457C5BEB228D0
    > Sophos . . . . . . : Generic ML PUA (PUA)
      Fuzzy  . . . . . . : 114.0


Malware remnants ____________________________________________________________

   HKLM\SOFTWARE\Classes\Wow6432Node\CLSID\{A4730EBE-43A6-443e-9776-36915D323AD3}\ (Adware.MyWebSearch) -> Deleted

Potential Unwanted Programs _________________________________________________

   C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.old (Spyware.HPTouchpointAnalytics) -> Deleted
      Size . . . . . . . : 198,696 bytes
      Age  . . . . . . . : 1704.9 days (2017-11-15 22:04:44)
      Entropy  . . . . . : 7.1
      SHA-256  . . . . . : E3AA0DA2E74D226AE4A0B2395127B53F04EEB75AE70B9E9A19891C0D73523F48
      Needs elevation  . : Yes
      Product  . . . . . : HP Active Health
      Publisher  . . . . : HP Inc.
      Description  . . . : HP Active Health
      Version  . . . . . : 3.2.1.981
      RSA Key Size . . . : 2048
      LanguageID . . . . : 0
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -7.0

   C:\ProgramData\HP\TAInstaller\ (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\catalog.cache (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20171115.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20171116.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20171117.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20171118.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20171119.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20171120.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20171121.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20171122.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20171202.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20171203.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20171212.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20171213.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20171214.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20171217.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20171218.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20171219.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20171229.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180102.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180104.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180108.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180109.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180119.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180121.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180124.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180128.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180201.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180217.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180303.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180308.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180309.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180310.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180311.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180312.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180313.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180315.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180322.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180512.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180513.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180515.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180516.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180518.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180519.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180520.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180530.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180606.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180608.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180609.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180611.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180615.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180616.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180701.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180702.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180706.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180721.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180722.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180726.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180728.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180804.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180807.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180808.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180811.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180814.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180815.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180816.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180817.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180818.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180819.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180820.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180821.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180831.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180906.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180907.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180908.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180909.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180910.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180914.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20180930.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181004.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181005.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181006.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181007.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181008.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181009.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181011.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181015.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181016.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181019.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181021.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181024.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181025.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181026.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181027.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181028.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181103.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181106.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181108.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181110.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181111.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181112.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181113.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181114.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181115.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181117.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181119.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181124.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181126.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181128.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181130.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181201.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181202.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181205.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181207.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181213.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181215.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181217.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181218.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181220.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181224.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181225.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181226.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181227.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181228.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181229.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181230.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20181231.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190101.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190102.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190103.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190104.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190105.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190106.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190107.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190108.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190109.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190110.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190111.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190112.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190113.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190114.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190115.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190116.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190117.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190118.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190119.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190120.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190121.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190122.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190123.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190124.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190125.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190126.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190127.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190128.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190129.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190130.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190131.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190201.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190202.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190209.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190212.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190215.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190216.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190217.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190222.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190224.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190225.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190226.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190309.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190328.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190329.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190330.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190331.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190401.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190402.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190403.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190406.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190407.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190412.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190413.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190414.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190415.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190416.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190417.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190421.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190422.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190423.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190504.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190505.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190507.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190511.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190512.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190515.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190521.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190606.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190607.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190608.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190609.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190610.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190611.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190616.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190623.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190713.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190727.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190728.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190729.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190730.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190731.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190803.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190804.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190805.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\log_20190812.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\LogHPSAActiveHealthIntegration_20180224.txt (Spyware.HPTouchpointAnalytics) -> Deleted
   C:\ProgramData\HP\TAInstaller\selfupdate.cache (Spyware.HPTouchpointAnalytics) -> Deleted
   HKLM\SYSTEM\ControlSet001\services\eventlog\Application\HPTouchpointAnalyticsService\ (Spyware.HPTouchpointAnalytics) -> Deleted
   HKLM\SYSTEM\ControlSet002\services\eventlog\Application\HPTouchpointAnalyticsService\ (Spyware.HPTouchpointAnalytics) -> Deleted
   HKLM\SYSTEM\ControlSet002\services\HPTouchpointAnalyticsService\ (Spyware.HPTouchpointAnalytics)
   HKLM\SYSTEM\CurrentControlSet\services\eventlog\Application\HPTouchpointAnalyticsService\ (Spyware.HPTouchpointAnalytics) -> PendingDelete

Cookies _____________________________________________________________________

   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:131788053.log.optimizely.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:360yield.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:acuityplatform.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:addthis.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:adfarm1.adition.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:adform.net
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:adgrx.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:adingo.jp
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:adnxs.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:ads.avct.cloud
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:ads.linkedin.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:ads.playground.xyz
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:ads.pubmatic.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:ads.samba.tv
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:ads.stickyadstv.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:ads.yieldmo.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:adsby.bidtheatre.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:adscience.nl
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:adsrvr.org
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:adsymptotic.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:agkn.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:atemda.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:betweendigital.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:bh-xandr.contextweb.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:bh.contextweb.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:bidr.io
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:bidswitch.net
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:bluekai.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:c.appier.net
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:casalemedia.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:cdn.taboola.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:chango.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:comcast.demdex.net
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:connexity.net
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:contextweb.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:creative-serving.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:crwdcntrl.net
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:ctnsnet.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:demdex.net
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:dlx.addthis.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:dotomi.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:doubleclick.net
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:dpm.demdex.net
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:everesttech.net
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:eyeviewads.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:flashtalking.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:go.sonobi.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:ib.mookie1.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:imrworldwide.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:ipredictive.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:krxd.net
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:lijit.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:linksynergy.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:mathtag.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:media6degrees.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:mediaplex.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:ml314.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:mookie1.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:mxptint.net
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:openx.net
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:outbrain.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:owneriq.net
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:pool.admedo.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:postrelease.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:pswec.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:pubmatic.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:rfihub.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:rlcdn.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:rubiconproject.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:scorecardresearch.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:scripps.demdex.net
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:server.cpmstar.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:servesharp.net
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:serving-sys.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:simpli.fi
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:sitescout.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:smartadserver.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:swid.switchads.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:sxp.smartclip.net
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:taboola.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:tapad.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:tidaltv.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:tremorhub.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:tribalfusion.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:turn.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:univide.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:ups.demdex.net
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:vizu.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:w55c.net
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:wtp101.com
   C:\Users\Miaddie\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies:www.googleadservices.com
   C:\Users\Miaddie\AppData\Roaming\Microsoft\Windows\Cookies\352AEJAC.txt
   C:\Users\Miaddie\AppData\Roaming\Microsoft\Windows\Cookies\KXAVGZ2T.txt
   C:\Users\Miaddie\AppData\Roaming\Microsoft\Windows\Cookies\Low\L3X1JY4F.txt
   C:\Users\Miaddie\AppData\Roaming\Microsoft\Windows\Cookies\Low\N4AD97UM.txt
   C:\Users\Miaddie\AppData\Roaming\Microsoft\Windows\Cookies\Low\OO2H1FB1.txt
   C:\Users\Miaddie\AppData\Roaming\Microsoft\Windows\Cookies\Low\TP3M2UL3.txt
   C:\Users\Miaddie\AppData\Roaming\Microsoft\Windows\Cookies\Low\U82PBCNC.txt
   C:\Users\Miaddie\AppData\Roaming\Microsoft\Windows\Cookies\Low\ZMN135SH.txt
   C:\Users\Miaddie\AppData\Roaming\Microsoft\Windows\Cookies\NU3MCENE.txt
 
Your computer is clean

1. This step will remove all cleaning tools we used, it'll reset restore points (so you won't get reinfected by accidentally using some older restore point) and it'll make some other minor adjustments...
This is a very crucial step so make sure you don't skip it.
Download http://www.imgdumper.nl/uploads6/51a5ce45267c1/51a5ce45263de-delfix.png[URL='http://www.bleepingcomputer.com/download/delfix/'][B]DelFix by Xplode[/B][/URL] to your desktop. Delfix will delete all the used tools and logfiles.

Double-click [B]Delfix.exe[/B] to start the tool.
Make sure the following items are checked:

[LIST]
[*]Activate UAC (optional; some users prefer to keep it off)
[*]Remove disinfection tools
[*]Create registry backup
[*]Purge System Restore
[*]Reset system settings
[/LIST]
Now click "[B]Run[/B]" and wait patiently.
Once finished a logfile will be created. You [B]don't[/B] have to attach it to your next reply.

2. Make sure [B]Windows Updates[/B] are current.

3. If any [B]trojans, rootkits or bootkits[/B] were listed among your infection(s), make sure, you [U]change all of your on-line important passwords[/U] (bank account(s), secured web sites, etc.) [B]immediately[/B]!

4. Check if your browser plugins are up to date.
Firefox - [URL]https://www.mozilla.org/en-US/plugincheck/[/URL]
other browsers: [URL]https://browsercheck.qualys.com/[/URL] (click on "Scan without installing plugin" and then on "Scan now")

5. Run [B]Malwarebytes[/B] "Quick scan" once in a while to assure safety of your computer.

6. Run [B]Temporary File Cleaner[/B] (TFC) and [B]AdwCleaner[/B] weekly (you need to redownload these tools since they were removed by DelFix).

7. (optional) If you want to keep all your programs up to date, download and install [URL='https://filehippo.com/download_app_manager']FileHippo App Manager[/URL].
The Update Checker will scan your computer for installed software, check the versions and then send this information to FileHippo.com to see if there are any newer releases.

8. When installing\updating ANY program, make sure you always select "[B][U]Custom [/U][/B]" installation, so you can UN-check any possible "drive-by-install" ([B]foistware[/B]), like toolbars etc., which may try to install along with the legitimate program. Do NOT click "Next" button without looking at any given page.

9. Read:
[B]How did I get infected?, With steps so it does not happen again![/B]: [URL]http://www.bleepingcomputer.com/forums/topic2520.html[/URL]
[B]Simple and easy ways to keep your computer safe and secure on the Internet[/B]: [URL]http://www.bleepingcomputer.com/tutorials/keep-your-computer-safe-online/[/URL]
[B]About those Toolbars and Add-ons - Potentially Unwanted Programs (PUPs) which change your browser settings[/B]: [URL='http://www.bleepingcomputer.com/forums/t/407147/answers-to-common-security-questions-best-practices/#entry3187642']http://www.bleepingcomputer.com/for...curity-questions-best-practices/#entry3187642[/URL]

10. [B]Please, let me know, how your computer is doing.[/B]
 
Thank you Broni, runs great Mom (88 yrs young) will be happy to get back to her email, if I can keep her from clicking on things she shouldn't!
 
You must log in or register to reply here.

Similar threads

midian182
Teenager takes $20,000 of parent's money, gives it to Twitch streamers
Replies
21
Views
4K
Bp968
Bp968
DjKraid
Steam: How to spot scams and how to avoid them
Replies
0
Views
18K
DjKraid
DjKraid
Julio Franco
Top password managers to lock down your security online
Replies
8
Views
2K
Godel
G

Latest posts

Back