Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-05.2019
Ran by Lounatuuli (23-05-2019 16:24:52)
Running from C:\Users\Dx\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2013-12-27 14:58:25)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Dx (S-1-5-21-3124275158-742175479-152280192-1006 - Limited - Enabled) => C:\Users\Dx
Järjestelmänvalvoja (S-1-5-21-3124275158-742175479-152280192-500 - Administrator - Disabled)
lol (S-1-5-21-3124275158-742175479-152280192-1003 - Limited - Enabled) => C:\Users\lol
Lounatuuli (S-1-5-21-3124275158-742175479-152280192-1001 - Administrator - Enabled) => C:\Users\Lounatuuli
s (S-1-5-21-3124275158-742175479-152280192-1004 - Limited - Enabled) => C:\Users\s
sderg (S-1-5-21-3124275158-742175479-152280192-1005 - Limited - Enabled) => C:\Users\sderg
Vieras (S-1-5-21-3124275158-742175479-152280192-501 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-3124275158-742175479-152280192-1001\...\uTorrent) (Version: 3.4.2.36044 - BitTorrent Inc.)
µTorrent (HKU\S-1-5-21-3124275158-742175479-152280192-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05232019162026719\...\uTorrent) (Version: 3.4.2.36044 - BitTorrent Inc.)
µTorrent (HKU\S-1-5-21-3124275158-742175479-152280192-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05232019162027002\...\uTorrent) (Version: 3.4.2.35702 - BitTorrent Inc.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 24 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 24.0.0.221 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.221 - Adobe Systems Incorporated)
Adobe Flash Player 24 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 24.0.0.221 - Adobe Systems Incorporated)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Applen ohjelmatuki (HKLM-x32\...\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}) (Version: 2.3.4 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 4.18 - Piriform)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4478 - CDBurnerXP)
Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version: - Cheat Engine)
ClassPad Manager Subscription for ClassPad II Series (HKLM-x32\...\{EC998026-463A-48DC-AD5B-99933135A9E0}) (Version: 02.01.0000.0000 - CASIO COMPUTER CO., LTD.)
Debut Video Capture Software (HKLM-x32\...\Debut) (Version: 1.88 - NCH Software)
DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 391.01 - NVIDIA Corporation) Hidden
Easy-Hide-IP 5.0.0.3 (HKLM\...\Easy-Hide-IP_is1) (Version: - EasyTech)
Epic Games Launcher (HKLM-x32\...\{D442B219-3EBE-4EE2-88F9-5A31DF331CB1}) (Version: 1.1.144.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
EpicBot (HKU\S-1-5-21-3124275158-742175479-152280192-1001\...\EpicBot) (Version: - )
EpicBot (HKU\S-1-5-21-3124275158-742175479-152280192-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05232019162026719\...\EpicBot) (Version: - )
Express Zip (HKLM-x32\...\ExpressZip) (Version: 2.28 - NCH Software)
FileFort Backup Software (HKU\S-1-5-21-3124275158-742175479-152280192-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05232019162027002\...\FileFort) (Version: 3.31 - NCH Software)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 6.1.2.1224 - Foxit Corporation)
Game Maker 8.0 (HKLM-x32\...\Game Maker 8.0) (Version: - )
GameMaker-Studio 1.2 (HKU\S-1-5-21-3124275158-742175479-152280192-1001\...\GameMaker-Studio12) (Version: - YoYo Games Ltd.)
GameMaker-Studio 1.2 (HKU\S-1-5-21-3124275158-742175479-152280192-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05232019162026719\...\GameMaker-Studio12) (Version: - YoYo Games Ltd.)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 74.0.3729.169 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.7 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Graboid Video (HKLM-x32\...\{DC74E5B9-EDF7-4685-ADF1-2E4CD3D793B5}) (Version: 5.1.0.0 - Graboid Inc.) Hidden
Graboid Video (HKU\S-1-5-21-3124275158-742175479-152280192-1001\...\Graboid Video 5.1.0.0) (Version: 5.1.0.0 - Graboid Inc.)
Graboid Video (HKU\S-1-5-21-3124275158-742175479-152280192-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05232019162026719\...\Graboid Video 5.1.0.0) (Version: 5.1.0.0 - Graboid Inc.)
Graboid Video 4.8 (HKLM-x32\...\Graboid Video) (Version: 4.8 - Graboid Inc.)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.0.0.1083 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation)
Java 8 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218071F0}) (Version: 8.0.710.15 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKLM-x32\...\{918A9082-6287-4D25-9002-5E5D5E4971CB}) (Version: 1.02.0000 - Riot Games)
League of Legends (HKLM-x32\...\{E70D54A4-60A4-4148-A292-525922A9A108}) (Version: 4.1.2 - Riot Games) Hidden
League of Legends (HKLM-x32\...\League of Legends 4.1.2) (Version: 4.1.2 - Riot Games)
LibreOffice 4.1.4.2 (HKLM-x32\...\{94E11973-ED58-47A0-907C-ABF6D95C5DD8}) (Version: 4.1.4.2 - The Document Foundation)
Malwarebytes versio 3.7.1.2839 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.7.1.2839 - Malwarebytes)
Microsoft .NET Framework 4.7.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02558 - Microsoft Corporation)
Microsoft .NET Framework 4.7.1 (suomi) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1035) (Version: 4.7.02558 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-040B-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.209.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Mozilla Firefox 49.0.2 (x86 fi) (HKLM-x32\...\Mozilla Firefox 49.0.2 (x86 fi)) (Version: 49.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 49.0.2.6136 - Mozilla)
Mozilla Thunderbird 24.2.0 (x86 fi) (HKLM-x32\...\Mozilla Thunderbird 24.2.0 (x86 fi)) (Version: 24.2.0 - Mozilla)
NVIDIA 3D Vision -ohjain 390.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 390.41 - NVIDIA Corporation)
NVIDIA 3D Vision -ohjain 391.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 391.01 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.12.0.84 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.12.0.84 - NVIDIA Corporation)
NVIDIA Grafiikkaohjain 391.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 391.01 - NVIDIA Corporation)
NVIDIA HD-ääniohjain 1.3.36.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.36.6 - NVIDIA Corporation)
NVIDIA PhysX-järjestelmäohjelmisto 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
OldSchool RuneScape Launcher 1.2.7 (HKLM-x32\...\{FEDDCE73-34B8-4980-90B8-8619A78C902C}) (Version: 1.2.7 - Jagex Ltd)
Paint.NET v3.5.11 (HKLM\...\{72EF03F5-0507-4861-9A44-D99FD4C41418}) (Version: 3.61.0 - dotPDN LLC)
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)
PlanetSide 2 (HKU\S-1-5-21-3124275158-742175479-152280192-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05232019162027002\...\DG0-PlanetSide 2) (Version: - Sony Online Entertainment)
QuickTime (HKLM-x32\...\{B67BAFBA-4C9F-48FA-9496-933E3B255044}) (Version: 7.74.80.86 - Apple Inc.)
Razer Chroma SDK Core Components (HKLM-x32\...\Razer Chroma SDK) (Version: 1.1.5 - Razer Inc.)
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.21.28129 - Razer Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.67.1226.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7071 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.0.3 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.3 - VS Revo Group, Ltd.)
RogueKiller version 13.2.1.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 13.2.1.0 - Adlice Software)
RuneScape Launcher 1.2.3 (HKLM-x32\...\{FAE99C85-0732-4C58-9C6B-10B5B12FA2E9}) (Version: 1.2.3 - Jagex Ltd)
RuneScape Launcher 2.2.2 (HKLM\...\RuneScape Launcher_is1) (Version: 2.2.2 - Jagex Ltd)
Skype™ 7.24 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.24.104 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-3124275158-742175479-152280192-1001\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
Spotify (HKU\S-1-5-21-3124275158-742175479-152280192-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05232019162026719\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 8.0.1038 - SUPERAntiSpyware.com)
Ultimate IP Changer version 1.1 (HKLM-x32\...\{4A4472E1-2A39-432D-9455-82AE293CA601}_is1) (Version: 1.1 - Olcinium)
Unity Web Player (HKU\S-1-5-21-3124275158-742175479-152280192-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05232019162027002\...\UnityWebPlayer) (Version: 5.3.1f1 - Unity Technologies ApS)
Walaber's Trampoline (HKLM-x32\...\{9617BEC2-A487-40E7-94FB-AC699F1B360B}) (Version: 1.0 - Walaber)
VideoPad Video Editor (HKU\S-1-5-21-3124275158-742175479-152280192-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05232019162027099\...\VideoPad) (Version: 4.08 - NCH Software)
WinRAR 5.21 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
Yahoo! Search (HKU\S-1-5-21-3124275158-742175479-152280192-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05232019162026948\...\Yahoo! Search) (Version: - Pay-By-Ads) <==== ATTENTION
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ExpressZip] -> {8EEA165E-0B8B-4BA7-9796-50214C767171} => C:\Program Files (x86)\NCH Software\ExpressZip\ezcm64.dll [2014-03-28] () [File not signed]
ContextMenuHandlers1: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll [2013-12-10] (Foxit Corporation -> Foxit Corporation)
ContextMenuHandlers2: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => E:\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) [File not signed]
ContextMenuHandlers4: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2018-02-23] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [ExpressZip] -> {8EEA165E-0B8B-4BA7-9796-50214C767171} => C:\Program Files (x86)\NCH Software\ExpressZip\ezcm64.dll [2014-03-28] () [File not signed]
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => E:\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::
WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]
WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]
Shortcut: C:\Users\Lounatuuli\Favorites\NCH Software Download Site.lnk -> hxxp://
www.nchsoftware.com/index.htm
==================== Loaded Modules (Whitelisted) ==============
2014-03-28 15:51 - 2014-03-28 15:51 - 000089088 _____ () [File not signed] C:\Program Files (x86)\NCH Software\ExpressZip\ezcm64.dll
2014-01-04 16:55 - 2012-09-12 09:49 - 000455168 _____ () [File not signed] C:\Program Files\Easy-Hide-IP\rdr\sqlite3.dll
2018-03-17 13:45 - 2018-03-17 13:45 - 098275328 _____ () [File not signed] E:\Epic Games\Launcher\Engine\Binaries\ThirdParty\CEF3\Win64\libcef.dll
2018-03-17 13:45 - 2018-03-17 13:45 - 000092672 _____ () [File not signed] E:\Epic Games\Launcher\Engine\Binaries\ThirdParty\CEF3\Win64\libEGL.dll
2018-03-17 13:45 - 2018-03-17 13:45 - 003922432 _____ () [File not signed] E:\Epic Games\Launcher\Engine\Binaries\ThirdParty\CEF3\Win64\libGLESv2.dll
2019-05-23 15:48 - 2019-05-23 16:21 - 000474112 _____ (ESET) [File not signed] c:\users\dx\appdata\local\google\chrome\user data\swreporter\41.203.200.3\edls_64.dll
2010-11-18 22:08 - 2010-11-18 22:08 - 000086016 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll
2013-01-31 16:20 - 2013-01-31 16:20 - 000503296 _____ (Intel Corporation) [File not signed] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\ISDI2.dll
2013-01-31 16:20 - 2013-01-31 16:20 - 000285696 _____ (Intel Corporation) [File not signed] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\PsiData.dll
2013-12-30 12:49 - 2013-12-30 12:49 - 000225280 _____ (Microsoft Corporation) [File not signed] C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcm90.dll
2014-01-04 16:55 - 2012-09-12 09:49 - 000303104 _____ (Mozilla Foundation) [File not signed] C:\Program Files\Easy-Hide-IP\rdr\freebl3.dll
2014-01-04 16:55 - 2012-09-12 09:49 - 000295424 _____ (Mozilla Foundation) [File not signed] C:\Program Files\Easy-Hide-IP\rdr\libnspr4.dll
2014-01-04 16:55 - 2012-09-12 09:49 - 000048640 _____ (Mozilla Foundation) [File not signed] C:\Program Files\Easy-Hide-IP\rdr\libplc4.dll
2014-01-04 16:55 - 2012-09-12 09:49 - 000046080 _____ (Mozilla Foundation) [File not signed] C:\Program Files\Easy-Hide-IP\rdr\libplds4.dll
2014-01-04 16:55 - 2012-09-12 09:49 - 000854528 _____ (Mozilla Foundation) [File not signed] C:\Program Files\Easy-Hide-IP\rdr\nss3.dll
2014-01-04 16:55 - 2012-09-12 09:49 - 000135680 _____ (Mozilla Foundation) [File not signed] C:\Program Files\Easy-Hide-IP\rdr\nssutil3.dll
2014-01-04 16:55 - 2012-09-12 09:49 - 000132608 _____ (Mozilla Foundation) [File not signed] C:\Program Files\Easy-Hide-IP\rdr\smime3.dll
2018-03-17 18:48 - 2018-02-23 22:29 - 000764456 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI.dll
2018-03-17 18:48 - 2018-02-23 22:29 - 000343728 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem\NvStereo\_nvstapisvr64.dll
2015-11-16 16:28 - 2015-11-16 16:28 - 000589976 _____ (Razer Inc. -> Razer Inc.) [File not signed] C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
2015-11-19 11:57 - 2015-11-19 11:57 - 000051200 _____ (Razer Inc.) [File not signed] C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe
2015-01-09 03:55 - 2015-01-09 03:55 - 000074752 _____ (Razer, Inc.) [File not signed] C:\Program Files (x86)\Razer\Razer Services\GSS\rzlogger.dll
2015-06-23 23:11 - 2015-06-17 01:16 - 000097792 _____ (Razer, Inc.) [File not signed] C:\Program Files (x86)\Razer\Razer Services\GSS\RzProcessManager.dll
2018-03-17 13:45 - 2018-03-17 13:45 - 000547840 _____ (The Chromium Authors) [File not signed] E:\Epic Games\Launcher\Engine\Binaries\ThirdParty\CEF3\Win64\chrome_elf.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\Public\AppData:CSM [478]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [452]
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\EasyRedirect => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 05:34 - 2016-02-27 01:03 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\Razer Chroma SDK\bin;C:\Program Files\Razer Chroma SDK\bin;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\QuickTime\QTSystem\;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common
HKU\S-1-5-21-3124275158-742175479-152280192-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Lounatuuli\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-3124275158-742175479-152280192-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05232019162026719\Control Panel\Desktop\\Wallpaper -> C:\Users\Lounatuuli\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-3124275158-742175479-152280192-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05232019162026948\Control Panel\Desktop\\Wallpaper -> C:\Users\lol\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-3124275158-742175479-152280192-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05232019162027002\Control Panel\Desktop\\Wallpaper -> C:\Users\s\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-3124275158-742175479-152280192-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05232019162027099\Control Panel\Desktop\\Wallpaper -> C:\Users\sderg\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-3124275158-742175479-152280192-1006\Control Panel\Desktop\\Wallpaper -> C:\Users\Dx\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-3124275158-742175479-152280192-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05232019162027148\Control Panel\Desktop\\Wallpaper -> C:\Users\Dx\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
If an entry is included in the fixlist, it will be removed.
MSCONFIG\Services: WSearch => 2
MSCONFIG\startupreg: uTorrent => "C:\Users\sderg\Downloads\uTorrent.exe" /MINIMIZED
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{358A41FA-E621-4E6E-BC9A-BAC9510934A7}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe No File
FirewallRules: [{03413213-88D5-42AA-878E-F208A59CD6D3}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe No File
FirewallRules: [{C40AE448-AC1F-493B-8410-0248C57BFFDC}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{EACA436E-1407-49EB-8BC8-2B183B0F8770}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{5D87E7B7-428E-4C18-B349-2285C1869875}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{2A3B6AF4-2F38-4109-BB98-2EA486F71BC3}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [TCP Query User{EC4C45F3-A9E8-4255-81E4-A1D39F75B9BF}C:\users\lounatuuli\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\lounatuuli\appdata\roaming\utorrent\utorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [UDP Query User{6991C5A1-9FC8-42B2-9EAC-F25A363FDE71}C:\users\lounatuuli\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\lounatuuli\appdata\roaming\utorrent\utorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{5C80476A-EBDC-4571-BFEC-2D225AE82E5D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Toribash\toribash.exe () [File not signed]
FirewallRules: [{0EF1B794-C2BC-4F74-A2EA-A4F44E9D81C2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Toribash\toribash.exe () [File not signed]
FirewallRules: [{7554869C-A59A-4E06-A39A-564384EAA51C}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe No File
FirewallRules: [{60A7C3E0-3FD3-4719-AA52-6CAB45B60292}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe No File
FirewallRules: [TCP Query User{E0B3D6D6-0CE7-4366-AC36-74897A420F93}C:\users\lounatuuli\appdata\roaming\utorrent\updates\3.4.2_34309.exe] => (Block) C:\users\lounatuuli\appdata\roaming\utorrent\updates\3.4.2_34309.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [UDP Query User{FBBBB03D-85C8-4E41-A698-764DC86EC0FC}C:\users\lounatuuli\appdata\roaming\utorrent\updates\3.4.2_34309.exe] => (Block) C:\users\lounatuuli\appdata\roaming\utorrent\updates\3.4.2_34309.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [TCP Query User{46F03E56-5A91-42CE-995D-74E1FEEF1505}C:\users\lounatuuli\appdata\roaming\utorrent\updates\3.4.2_34944.exe] => (Block) C:\users\lounatuuli\appdata\roaming\utorrent\updates\3.4.2_34944.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [UDP Query User{261286D1-331E-4782-B4F7-A36CDE77593D}C:\users\lounatuuli\appdata\roaming\utorrent\updates\3.4.2_34944.exe] => (Block) C:\users\lounatuuli\appdata\roaming\utorrent\updates\3.4.2_34944.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [TCP Query User{CFF971B9-62AB-4E25-B795-B397C8C24C13}E:\far cry 4\bin\farcry4.exe] => (Block) E:\far cry 4\bin\farcry4.exe No File
FirewallRules: [UDP Query User{BEFDC911-AAE8-44F0-8B56-5234FA6AEA89}E:\far cry 4\bin\farcry4.exe] => (Block) E:\far cry 4\bin\farcry4.exe No File
FirewallRules: [TCP Query User{ABCFE01D-E86B-4E48-A36D-59B5141F93C5}E:\far cry 4\bin\ige_wpf64.exe] => (Block) E:\far cry 4\bin\ige_wpf64.exe No File
FirewallRules: [UDP Query User{11660C7B-98E8-4453-8959-E470E79B3505}E:\far cry 4\bin\ige_wpf64.exe] => (Block) E:\far cry 4\bin\ige_wpf64.exe No File
FirewallRules: [{5FFE5BE9-C66F-4371-8F51-5F8A5C271A2E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{936870AD-F6EE-400E-9415-8ACD5F805A14}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{FCEFE5F4-C18F-43CD-B765-DD341CF3F899}E:\steam\steamapps\common\planetside 2\planetside2_x64.exe] => (Block) E:\steam\steamapps\common\planetside 2\planetside2_x64.exe No File
FirewallRules: [UDP Query User{35197BE6-2073-4A88-93DB-086A5741FB2C}E:\steam\steamapps\common\planetside 2\planetside2_x64.exe] => (Block) E:\steam\steamapps\common\planetside 2\planetside2_x64.exe No File
FirewallRules: [{94A13B9B-11DA-441F-B04A-849DCA514481}] => (Allow) E:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [{09D26789-BD0E-456A-A92F-1B6374F8127E}] => (Allow) E:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [{8C228944-2A58-4CD8-9914-CC4F80B018C8}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe (Pando Networks, Inc. -> )
FirewallRules: [{2004997C-85DC-4C6D-A3F5-FE7CA373D394}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe (Pando Networks, Inc. -> )
FirewallRules: [{9A420447-92B2-47FB-A484-930C7D81B540}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe (Pando Networks, Inc. -> )
FirewallRules: [{EC2C7896-795C-4035-8358-2952BCC0AE21}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe (Pando Networks, Inc. -> )
FirewallRules: [{537A57A0-9188-406B-A55E-05C9E504B1B6}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe (Pando Networks, Inc. -> )
FirewallRules: [{D46B4D71-F810-4085-B2E6-D07BAD37BDF4}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{9C669C85-BB03-4199-B621-1BB42075B8EA}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{833DE651-97D0-4D82-BE29-8C8BB3C12F9B}] => (Allow) E:\123\Steam.exe No File
FirewallRules: [{69074E9F-FEF1-48C2-8704-E9286C4CACFF}] => (Allow) E:\123\Steam.exe No File
FirewallRules: [{536AF152-5BDD-44DA-B8E2-9B1A5E261372}] => (Allow) E:\123\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{8468478E-A37C-4677-BA25-4D4B8BE34A96}] => (Allow) E:\123\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{DFF05299-8442-40E2-ABA2-DBAB42D8F7D3}] => (Allow) E:\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{4D77014B-B82E-4A4B-9936-A0979B755994}] => (Allow) E:\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{33741939-3DD4-40CD-A55C-77E7CE46EDCD}] => (Allow) E:\Steam\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{ED69E310-4642-45E8-ACD7-8CD735F1BF3D}] => (Allow) E:\Steam\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [TCP Query User{51222092-CEA4-4A5E-B6A1-689206BC8267}E:\ad\rads\projects\league_client\releases\0.0.0.129\deploy\leagueclient.exe] => (Block) E:\ad\rads\projects\league_client\releases\0.0.0.129\deploy\leagueclient.exe No File
FirewallRules: [UDP Query User{39725B0A-C49B-4C2E-A2DE-458EDF72754C}E:\ad\rads\projects\league_client\releases\0.0.0.129\deploy\leagueclient.exe] => (Block) E:\ad\rads\projects\league_client\releases\0.0.0.129\deploy\leagueclient.exe No File
FirewallRules: [TCP Query User{EBEAACEF-1E9E-4C08-B656-B2BDE09BFC98}E:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Block) E:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{DD6B59DE-361C-4CD3-B4AF-CF021F76D97F}E:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Block) E:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{A46D0992-B402-461B-A7E3-01B3408BF4CA}E:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Block) E:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{952432B6-89A6-4C6E-BEE4-EF69A6E14577}E:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Block) E:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{DB6CD46C-D25D-4ABC-9197-90E1D0FB0AE7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{097D92D2-2232-484D-BE9C-19C0D1ED4187}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{5ABC136D-EB4A-4FBA-86E2-A9F40533B9D5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{362DCC7C-D914-46BB-AE20-8860A2403687}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{287D9C7B-82D4-4B41-9FFD-F9AD7E26B884}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{A6264E05-C5C4-4274-8D90-727B4751DCCA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{AC3C4317-8C8C-4F15-8843-2F4C8959A675}E:\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Block) E:\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{36DE25F0-0F9F-45E5-AA10-4181C1CEBDA8}E:\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Block) E:\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{17B185E6-3311-45F5-BB12-0AB4D6C57B93}E:\ad\rads\projects\league_client\releases\0.0.0.147\deploy\leagueclient.exe] => (Block) E:\ad\rads\projects\league_client\releases\0.0.0.147\deploy\leagueclient.exe No File
FirewallRules: [UDP Query User{8DBEA221-D9F9-4E5B-925E-656D0392BC44}E:\ad\rads\projects\league_client\releases\0.0.0.147\deploy\leagueclient.exe] => (Block) E:\ad\rads\projects\league_client\releases\0.0.0.147\deploy\leagueclient.exe No File
FirewallRules: [TCP Query User{0516E870-AE98-4F30-B77A-959DD098C1C1}E:\ad\rads\projects\league_client\releases\0.0.0.148\deploy\leagueclient.exe] => (Block) E:\ad\rads\projects\league_client\releases\0.0.0.148\deploy\leagueclient.exe No File
FirewallRules: [UDP Query User{C28CF0C9-1E55-4C1A-A5EE-56C871C40FA0}E:\ad\rads\projects\league_client\releases\0.0.0.148\deploy\leagueclient.exe] => (Block) E:\ad\rads\projects\league_client\releases\0.0.0.148\deploy\leagueclient.exe No File
FirewallRules: [TCP Query User{3E3FF02A-F48F-435B-A9BB-BC1D10645399}E:\ad\rads\projects\league_client\releases\0.0.0.149\deploy\leagueclient.exe] => (Block) E:\ad\rads\projects\league_client\releases\0.0.0.149\deploy\leagueclient.exe No File
FirewallRules: [UDP Query User{5A7C5F68-1D1C-4D0E-BF53-9A4626D278AB}E:\ad\rads\projects\league_client\releases\0.0.0.149\deploy\leagueclient.exe] => (Block) E:\ad\rads\projects\league_client\releases\0.0.0.149\deploy\leagueclient.exe No File
FirewallRules: [TCP Query User{57184CD7-BB80-45B4-9511-951A46D7CCEC}C:\program files (x86)\libreoffice 4\program\soffice.bin] => (Block) C:\program files (x86)\libreoffice 4\program\soffice.bin (The Document Foundation) [File not signed]
FirewallRules: [UDP Query User{EAC17B91-2DC2-401D-A554-DE80221A1EA3}C:\program files (x86)\libreoffice 4\program\soffice.bin] => (Block) C:\program files (x86)\libreoffice 4\program\soffice.bin (The Document Foundation) [File not signed]
FirewallRules: [TCP Query User{526C0D35-C027-4484-BA65-5471B2A00933}E:\ad\rads\projects\league_client\releases\0.0.0.165\deploy\leagueclient.exe] => (Block) E:\ad\rads\projects\league_client\releases\0.0.0.165\deploy\leagueclient.exe No File
FirewallRules: [UDP Query User{FC03EC08-6CA6-4D12-97E7-8A977EB3450D}E:\ad\rads\projects\league_client\releases\0.0.0.165\deploy\leagueclient.exe] => (Block) E:\ad\rads\projects\league_client\releases\0.0.0.165\deploy\leagueclient.exe No File
FirewallRules: [TCP Query User{473ECE32-7C3D-412C-B6AB-30BB98A4DDD4}E:\ad\rads\projects\league_client\releases\0.0.0.166\deploy\leagueclient.exe] => (Block) E:\ad\rads\projects\league_client\releases\0.0.0.166\deploy\leagueclient.exe No File
FirewallRules: [UDP Query User{668310CF-A782-4FA9-8236-B11FDFDF8A74}E:\ad\rads\projects\league_client\releases\0.0.0.166\deploy\leagueclient.exe] => (Block) E:\ad\rads\projects\league_client\releases\0.0.0.166\deploy\leagueclient.exe No File
FirewallRules: [TCP Query User{BE3B6F98-8776-4636-AE9E-DE6DB4B42F2D}E:\ad\rads\projects\league_client\releases\0.0.0.168\deploy\leagueclient.exe] => (Block) E:\ad\rads\projects\league_client\releases\0.0.0.168\deploy\leagueclient.exe No File
FirewallRules: [UDP Query User{B908E9E4-B542-4CB6-AC54-82A387552593}E:\ad\rads\projects\league_client\releases\0.0.0.168\deploy\leagueclient.exe] => (Block) E:\ad\rads\projects\league_client\releases\0.0.0.168\deploy\leagueclient.exe No File
FirewallRules: [TCP Query User{24E5754F-1F7F-4715-A5C2-5CFFD81F800D}E:\ad\rads\projects\league_client\releases\0.0.0.169\deploy\leagueclient.exe] => (Block) E:\ad\rads\projects\league_client\releases\0.0.0.169\deploy\leagueclient.exe No File
FirewallRules: [UDP Query User{FE05234D-0075-4482-9105-92DA8184BD9D}E:\ad\rads\projects\league_client\releases\0.0.0.169\deploy\leagueclient.exe] => (Block) E:\ad\rads\projects\league_client\releases\0.0.0.169\deploy\leagueclient.exe No File
FirewallRules: [TCP Query User{FCFEC649-C5D9-4EEE-88C2-7E976E661601}E:\ad\rads\projects\league_client\releases\0.0.0.193\deploy\leagueclient.exe] => (Block) E:\ad\rads\projects\league_client\releases\0.0.0.193\deploy\leagueclient.exe (Riot Games, Inc. -> )
FirewallRules: [UDP Query User{4DEB2493-B644-4805-8C2D-7DBA222932BD}E:\ad\rads\projects\league_client\releases\0.0.0.193\deploy\leagueclient.exe] => (Block) E:\ad\rads\projects\league_client\releases\0.0.0.193\deploy\leagueclient.exe (Riot Games, Inc. -> )
FirewallRules: [{FEC56821-7E40-4205-BE19-DD41BED96490}] => (Allow) E:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{05CA729C-0042-4B90-877D-5F6A99DBA1C7}] => (Allow) E:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [TCP Query User{0C066E0A-E0A4-4F33-AA7D-C25C9637853C}E:\ad\rads\projects\league_client\releases\0.0.0.200\deploy\leagueclient.exe] => (Block) E:\ad\rads\projects\league_client\releases\0.0.0.200\deploy\leagueclient.exe No File
FirewallRules: [UDP Query User{489C999B-3A28-4E31-BB47-C201D8E32D17}E:\ad\rads\projects\league_client\releases\0.0.0.200\deploy\leagueclient.exe] => (Block) E:\ad\rads\projects\league_client\releases\0.0.0.200\deploy\leagueclient.exe No File
FirewallRules: [{C94D2915-1E6B-424E-8DE0-CD4A33CC5726}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)
==================== Restore Points =========================
==================== Faulty Device Manager Devices =============
Name: Microsoft Teredo -tunnelointisovitin
Description: Microsoft Teredo -tunnelointisovitin
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (05/23/2019 04:21:29 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (05/23/2019 04:13:35 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (05/23/2019 03:49:25 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (05/23/2019 03:31:37 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (05/23/2019 02:26:55 PM) (Source: Software Protection Platform Service) (EventID: 8193) (User: )
Description: Käyttöoikeuden aktivoinnin ajoitus (Sppuinotify.dll) epäonnistui, virhekoodi:
0xC0020017
Error: (05/23/2019 01:36:39 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Error: (05/23/2019 01:03:38 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Palautuspistettä ei voitu luoda (Prosessi = C:\Windows\system32\svchost.exe -k netsvcs; Kuvaus = Windows Update; Virhe = 0x81000101).
Error: (05/23/2019 12:54:39 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
System errors:
=============
Error: (05/23/2019 04:16:17 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Palvelu Verkkoluettelopalvelu on riippuvainen palvelusta NLA-nimiavaruus (Network Location Awareness), jonka käynnistyminen epäonnistui virheen vuoksi:
Liittopalvelu tai -ryhmä ei käynnistynyt.
Error: (05/23/2019 04:11:53 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Palvelu Verkkoluettelopalvelu on riippuvainen palvelusta NLA-nimiavaruus (Network Location Awareness), jonka käynnistyminen epäonnistui virheen vuoksi:
Liittopalvelu tai -ryhmä ei käynnistynyt.
Error: (05/23/2019 04:11:50 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Palvelu Verkkoluettelopalvelu on riippuvainen palvelusta NLA-nimiavaruus (Network Location Awareness), jonka käynnistyminen epäonnistui virheen vuoksi:
Liittopalvelu tai -ryhmä ei käynnistynyt.
Error: (05/23/2019 04:11:50 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Palvelu Verkkoluettelopalvelu on riippuvainen palvelusta NLA-nimiavaruus (Network Location Awareness), jonka käynnistyminen epäonnistui virheen vuoksi:
Liittopalvelu tai -ryhmä ei käynnistynyt.
Error: (05/23/2019 04:11:50 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Palvelu Verkkoluettelopalvelu on riippuvainen palvelusta NLA-nimiavaruus (Network Location Awareness), jonka käynnistyminen epäonnistui virheen vuoksi:
Liittopalvelu tai -ryhmä ei käynnistynyt.
Error: (05/23/2019 04:11:50 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Palvelu Verkkoluettelopalvelu on riippuvainen palvelusta NLA-nimiavaruus (Network Location Awareness), jonka käynnistyminen epäonnistui virheen vuoksi:
Liittopalvelu tai -ryhmä ei käynnistynyt.
Error: (05/23/2019 04:11:50 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Palvelu Verkkoluettelopalvelu on riippuvainen palvelusta NLA-nimiavaruus (Network Location Awareness), jonka käynnistyminen epäonnistui virheen vuoksi:
Liittopalvelu tai -ryhmä ei käynnistynyt.
Error: (05/23/2019 04:11:50 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Palvelu Verkkoluettelopalvelu on riippuvainen palvelusta NLA-nimiavaruus (Network Location Awareness), jonka käynnistyminen epäonnistui virheen vuoksi:
Liittopalvelu tai -ryhmä ei käynnistynyt.
==================== Memory info ===========================
BIOS: American Megatrends Inc. 0707 08/27/2013
Motherboard: ASUSTeK COMPUTER INC. B85-PLUS
Processor: Intel(R) Core(TM) i5-4440 CPU @ 3.10GHz
Percentage of memory in use: 49%
Total physical RAM: 8097.92 MB
Available physical RAM: 4070.4 MB
Total Virtual: 16193.99 MB
Available Virtual: 11476.04 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:111.45 GB) (Free:7.31 GB) NTFS
Drive e: (Paikallinen levy) (Fixed) (Total:465.76 GB) (Free:309.38 GB) NTFS
\\?\Volume{f82666c4-6f06-11e3-ae6f-806e6f6e6963}\ (Järjestelmän varaama) (Fixed) (Total:0.34 GB) (Free:0.3 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 111.8 GB) (Disk ID: 3809E8B1)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.4 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 19012616)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================