Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-06-2019
Ran by Anou (03-06-2019 16:41:30)
Running from C:\Users\Anou\Desktop
Windows 10 Pro Version 1809 17763.503 (X64) (2019-01-25 15:35:41)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2954086005-1533210460-2665764129-500 - Administrator - Disabled)
Anou (S-1-5-21-2954086005-1533210460-2665764129-1000 - Administrator - Enabled) => C:\Users\Anou
DefaultAccount (S-1-5-21-2954086005-1533210460-2665764129-503 - Limited - Disabled)
Guest (S-1-5-21-2954086005-1533210460-2665764129-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2954086005-1533210460-2665764129-1005 - Limited - Enabled)
WDAGUtilityAccount (S-1-5-21-2954086005-1533210460-2665764129-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

1Password (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000\...\1Password) (Version: 7.3.684 - AgileBits Inc.)
1Password (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092846825\...\1Password) (Version: 7.3.684 - AgileBits Inc.)
1Password (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092847495\...\1Password) (Version: 7.3.684 - AgileBits Inc.)
1Password (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092848215\...\1Password) (Version: 7.3.684 - AgileBits Inc.)
4K Video Downloader 4.5 (HKLM\...\{180B9AE1-F87B-4107-8C68-4265E927D6A8}) (Version: 4.5.0.2482 - Open Media LLC)
AbleWord v3.0 (HKLM-x32\...\AbleWord_is1) (Version: - )
AC3Filter 1.63b (HKLM-x32\...\AC3Filter_is1) (Version: 1.63b - Alexander Vigovsky)
Adobe Acrobat DC (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 19.012.20034 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Digital Editions 4.5 (HKLM-x32\...\Adobe Digital Editions 4.5) (Version: 4.5.8 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.192 - Adobe)
Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Reader X (10.1.4) - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AA1000000001}) (Version: 10.1.4 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.7.637 - Adobe Systems, Inc.)
Anti-Twin (Installation 08/10/2011) (HKLM-x32\...\Anti-Twin 2011-10-08 16.56.21) (Version: - Joerg Rosenthal, Germany)
Apple Application Support (32 bits) (HKLM-x32\...\{80B42CAA-28C0-4FBD-A46E-D61F45E2F9FC}) (Version: 7.2 - Apple Inc.)
Apple Application Support (64 bits) (HKLM\...\{466D00D0-E7DE-47C2-8FE5-54A8009F5850}) (Version: 7.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5FA8C4BE-8C74-4B9C-9B49-EBF759230189}) (Version: 12.1.0.25 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)
Assistant Mise à jour de Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22452 - Microsoft Corporation)
Avidemux VC++ 64bits (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000\...\{1e3be1b3-d05f-483c-9aa0-8639f59c67af}) (Version: 2.7.3 - Mean)
Avidemux VC++ 64bits (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092846825\...\{1e3be1b3-d05f-483c-9aa0-8639f59c67af}) (Version: 2.7.3 - Mean)
Avidemux VC++ 64bits (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092847495\...\{1e3be1b3-d05f-483c-9aa0-8639f59c67af}) (Version: 2.7.3 - Mean)
Avidemux VC++ 64bits (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092848215\...\{1e3be1b3-d05f-483c-9aa0-8639f59c67af}) (Version: 2.7.3 - Mean)
BD Gest' 7.1.3.1 (HKLM-x32\...\bdgest7_is1) (Version: - Philippe Magneron)
Bejeweled 3 (HKLM-x32\...\Bejeweled 31.0) (Version: 1.0 - AllSmartGames)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
calibre 64bit (HKLM\...\{6DDEAC55-646B-4970-A23D-6C6CA429DB29}) (Version: 3.38.1 - Kovid Goyal)
CCleaner (HKLM\...\CCleaner) (Version: 5.38 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4255 - CDBurnerXP)
Cool Beans NFO Creator 2.0.1.3 (HKLM-x32\...\Cool Beans NFO Creator_is1) (Version: - Cool Beans Software)
Cyberduck 4.1 (8911) (HKLM-x32\...\Cyberduck) (Version: 4.1 (8911) - )
DB Browser for SQLite (HKLM-x32\...\DB Browser for SQLite) (Version: 3.10.1 - DB Browser for SQLite Team)
dBpoweramp (HKLM-x32\...\dBpoweramp) (Version: Release 16.2 - Illustrate)
Détection de l'application Winamp (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Détection de l'application Winamp (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092846825\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Détection de l'application Winamp (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092847495\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Détection de l'application Winamp (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092848215\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
DhcpExplorer 1.4.8 (HKLM-x32\...\DhcpExplorer_is1) (Version: - Nsasoft LLC.)
Dropbox (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000\...\Dropbox) (Version: 73.4.118 - Dropbox, Inc.)
Dropbox (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092846825\...\Dropbox) (Version: 73.4.118 - Dropbox, Inc.)
Dropbox (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092847495\...\Dropbox) (Version: 73.4.118 - Dropbox, Inc.)
Dropbox (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092848215\...\Dropbox) (Version: 73.4.118 - Dropbox, Inc.)
DVD Shrink 3.2 (HKLM-x32\...\DVD Shrink_is1) (Version: - DVD Shrink)
e-Carte Bleue Caisse d'Epargne (HKLM-x32\...\{18EF615A-5AAD-4944-B24E-6CD7863FC735}) (Version: 2.2.7.0 - )
eMule (HKLM-x32\...\eMule) (Version: - )
ePUBee DRM Removal (HKLM-x32\...\ePUBee DRM Removal) (Version: 3.1.5.2 - ePUBee Inc.)
eReg (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
EZ CD Audio Converter (HKLM-x32\...\EZ CD Audio Converter) (Version: 2.2.2 - Poikosoft)
FastStone Capture 6.9 (HKLM-x32\...\FastStone Capture) (Version: 6.9 - FastStone Soft)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 74.0.3729.169 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.11 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version: - )
HandBrake 1.0.2 (HKLM-x32\...\HandBrake) (Version: 1.0.2 - )
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
iTunes (HKLM\...\{5881B877-CB42-4317-9411-96BA3CA39715}) (Version: 12.9.2.6 - Apple Inc.)
Java 8 Update 181 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180181F0}) (Version: 8.0.1810.13 - Oracle Corporation)
Java 8 Update 191 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180191F0}) (Version: 8.0.1910.12 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
King's Quest VII version 1.0 (HKLM-x32\...\{8006F881-EC04-40BB-BD2F-8973B92B73BA}_is1) (Version: 1.0 - Abandonware-France)
Kobo (HKLM-x32\...\Kobo) (Version: 4.6.8062 - Rakuten Kobo Inc.)
LAV Filters 0.55.3 (HKLM-x32\...\lavfilters_is1) (Version: 0.55.3 - Hendrik Leppkes)
Logitech Options (HKLM\...\LogiOptions) (Version: 7.12.43 - Logitech)
Malwarebytes version 3.7.1.2839 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.7.1.2839 - Malwarebytes)
MediaInfo 0.7.97 (HKLM\...\MediaInfo) (Version: 0.7.97 - MediaArea.net)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional Plus 2007 (HKLM-x32\...\PROPLUS) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40649 (HKLM-x32\...\{5d0723d3-cff7-4e07-8d0b-ada737deb5e6}) (Version: 12.0.40649.5 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Mise à jour Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{B761869A-B85C-40E2-994C-A1CE78AC8F2C}) (Version: - Microsoft)
Mise à jour Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{51EFB347-1F3D-4BAC-8B79-F056B904FE21}) (Version: - Microsoft)
Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{C3DCA38E-005E-41BA-A52A-7C3429F351C3}) (Version: - Microsoft)
Mise à jour Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{81536A04-DBFB-4DB3-978F-0F284590C223}) (Version: - Microsoft)
MKVToolNix 29.0.0 (64-bit) (HKLM-x32\...\MKVToolNix) (Version: 29.0.0 - Moritz Bunkus)
Molotov (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000\...\Molotov) (Version: 3.1.0 - Molotov)
Molotov (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092846825\...\Molotov) (Version: 3.1.0 - Molotov)
Molotov (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092847495\...\Molotov) (Version: 3.1.0 - Molotov)
Molotov (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092848215\...\Molotov) (Version: 3.1.0 - Molotov)
Mozilla Firefox 67.0 (x64 fr) (HKLM\...\Mozilla Firefox 67.0 (x64 fr)) (Version: 67.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 67.0.0.7075 - Mozilla)
MPEG2 Codec(libmpeg2/mad) (HKLM-x32\...\MPEG2 Codec(libmpeg2/mad)) (Version: - )
Music Manager (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000\...\MusicManager) (Version: - Google, Inc.)
Music Manager (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092846825\...\MusicManager) (Version: - Google, Inc.)
Music Manager (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092847495\...\MusicManager) (Version: - Google, Inc.)
Music Manager (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092848215\...\MusicManager) (Version: - Google, Inc.)
MyBackupPC from Rerware, LLC (HKLM-x32\...\MyBackupPC) (Version: - )
Nmap 7.31 (HKLM-x32\...\Nmap) (Version: 7.31 - )
Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.3.3 - Notepad++ Team)
Npcap 0.10 r9 (HKLM-x32\...\NpcapInst) (Version: 0.10 r9 - Nmap Project)
PDF Settings CS5 (HKLM-x32\...\{A78FE97A-C0C8-49CE-89D0-EDD524A17392}) (Version: 10.0 - Adobe Systems Incorporated) Hidden
Plex Media Player (HKLM-x32\...\{63fc66dc-7f15-43f8-aec4-097b46fedc6c}) (Version: 2.13.0 - Plex)
Plexamp 1.1.0 (only current user) (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000\...\46418f0f-cea3-5740-a7e9-a0166db1e7c4) (Version: 1.1.0 - Plex, Inc.)
Plexamp 1.1.0 (only current user) (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092846825\...\46418f0f-cea3-5740-a7e9-a0166db1e7c4) (Version: 1.1.0 - Plex, Inc.)
Plexamp 1.1.0 (only current user) (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092847495\...\46418f0f-cea3-5740-a7e9-a0166db1e7c4) (Version: 1.1.0 - Plex, Inc.)
Plexamp 1.1.0 (only current user) (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092848215\...\46418f0f-cea3-5740-a7e9-a0166db1e7c4) (Version: 1.1.0 - Plex, Inc.)
PuTTY version 0.63 (HKLM-x32\...\PuTTY_is1) (Version: 0.63 - Simon Tatham)
qBittorrent 3.1.12 (HKLM-x32\...\qBittorrent) (Version: 3.1.12 - The qBittorrent project)
QuickPar 0.9 (HKLM-x32\...\QuickPar) (Version: 0.9 - Peter B. Clements)
QuickSFV (HKLM\...\{89B56CFC-0270-4ACF-8BF1-048251FD9E08}) (Version: 3.0.0 - Totally Useful Software, Inc.)
QuickSFV (Remove only) (HKLM-x32\...\QuickSFV) (Version: - )
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.47.714.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6662 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.19.0 - Renesas Electronics Corporation) Hidden
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.19.0 - Renesas Electronics Corporation)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.63.0 - Samsung Electronics Co., Ltd.)
Sid Meier's Civilization 4 - Beyond the Sword (HKLM-x32\...\{32E4F0D2-C135-475E-A841-1D59A0D22989}) (Version: 3.19 - Firaxis Games)
Sid Meier's Civilization 4 Complete (HKLM-x32\...\{30D1F3D2-54CF-481D-A005-F94B0E98FEEC}) (Version: 1.74 - Firaxis Games)
Sid Meier's Civilization IV Colonization (HKLM-x32\...\{EF36A836-BF89-4A4F-B079-057B0C68C1E0}) (Version: 1.00 - Firaxis Games)
Smart Switch (HKLM-x32\...\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.18052.28 - Samsung Electronics Co., Ltd.) Hidden
Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.18052.28 - Samsung Electronics Co., Ltd.)
SoulseekQt version 2017.2.20 (HKLM-x32\...\{8A4E1646-488C-4E5B-AC31-F784400E8D2D}_is1) (Version: 2017.2.20 - Soulseek LLC)
Speccy (HKLM\...\Speccy) (Version: 1.31 - Piriform)
SubSync (HKLM-x32\...\ST6UNST #1) (Version: - )
Subtitle Workshop 2.51 (HKLM-x32\...\SubtitleWorkshop) (Version: - )
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Requirements Lab for Intel (HKLM-x32\...\{CD41B576-4787-4D5C-95EE-24A4ABD89CD3}) (Version: 4.4.24.0 - Husdawg, LLC)
TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.22298 - TeamViewer)
Time Adjuster STANDARD 3.1 (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000\...\TimeAdjuster) (Version: - IrekSoftware.com)
Time Adjuster STANDARD 3.1 (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092846825\...\TimeAdjuster) (Version: - IrekSoftware.com)
Time Adjuster STANDARD 3.1 (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092847495\...\TimeAdjuster) (Version: - IrekSoftware.com)
Time Adjuster STANDARD 3.1 (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092848215\...\TimeAdjuster) (Version: - IrekSoftware.com)
Tribler (remove only) (HKLM-x32\...\Tribler) (Version: - )
Unity Web Player (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092846825\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092847495\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092848215\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{F814D094-197F-43C8-87FA-3210BB780486}) (Version: 2.53.0.0 - Microsoft Corporation)
VdhCoApp 1.2.4 (HKLM\...\weh-iss-net.downloadhelper.coapp_is1) (Version: - DownloadHelper)
Video to Video (HKLM-x32\...\{7F95A744-78DA-4AED-A8F0-A0AF330B8411}_is1) (Version: - Media Converters)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VisualSubSync (remove only) (HKLM-x32\...\VisualSubSync) (Version: - )
VLC media player (HKLM\...\VLC media player) (Version: 3.0.6 - VideoLAN)
VueScan x64 (HKLM\...\VueScan x64) (Version: - )
Winamp (HKLM-x32\...\Winamp) (Version: 5.62 - Nullsoft, Inc)
WinDirStat 1.1.2 (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000\...\WinDirStat) (Version: - )
WinDirStat 1.1.2 (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092846825\...\WinDirStat) (Version: - )
WinDirStat 1.1.2 (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092847495\...\WinDirStat) (Version: - )
WinDirStat 1.1.2 (HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092848215\...\WinDirStat) (Version: - )
Windows Driver Package - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/28/2014 11.0.0000.00000) (HKLM\...\092555911492C6959D2596D612F52DCA71881CA2) (Version: 08/28/2014 11.0.0000.00000 - Google, Inc.)
WinHTTrack Website Copier 3.49-1 (x64) (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.49.1 - HTTrack)
WinRAR 4.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)
Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)
You Don't Know Jack® (HKLM-x32\...\{CE75C837-4BA9-4CF8-B912-C3ED5BD0EAAC}) (Version: 1.00.0000 - THQ)

Packages:
=========
Candy Crush Soda Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSodaSaga_1.140.300.0_x86__kgqvnymyfvs32 [2019-05-29] (king.com)
Facebook -> C:\Program Files\WindowsApps\Facebook.Facebook_186.2191.46880.0_x86__8xx8rvfyw5nnt [2019-03-27] (Facebook Inc)
hueDynamic for Hue -> C:\Program Files\WindowsApps\52892MD2Solutions.hueDynamic_2.9.23.0_x64__6tz2v08d5fw6a [2019-02-19] (MD2 Solutions)
March of Empires: War of Lords -> C:\Program Files\WindowsApps\A278AB0D.MarchofEmpires_4.0.1.1_x86__h6adky7gbf63m [2019-05-16] (Gameloft.)
PAC-MAN Championship Edition DX+ -> C:\Program Files\WindowsApps\NAMCOBANDAIGamesInc.PAC-MANChampionshipEditionDX_1.0.1.2_x86__gdy2aq6ez762w [2017-12-29] (NAMCO BANDAI Games Inc)
Pocket Casts Desktop -> C:\Program Files\WindowsApps\ShiftyJelly.PocketCastsDesktop_1.2.0.0_x64__jr8twj5yc2snp [2019-02-19] (Shifty Jelly)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Anou\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Anou\AppData\Local\Microsoft\OneDrive\17.3.7131.1115\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InprocServer32 -> C:\Users\Anou\AppData\Local\Microsoft\OneDrive\17.3.7131.1115\amd64\FileCoAuthLib64.dll => No File
CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{62634D95-960B-4834-8E71-A70408AD8FD9}\InprocServer32 -> C:\Users\Anou\AppData\Local\Google\Update\1.3.34.7\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Anou\AppData\Local\Microsoft\OneDrive\17.3.7131.1115\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Anou\AppData\Local\Microsoft\OneDrive\17.3.7131.1115\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{86508D42-E5D7-4D10-9C6F-D427AEEB85B5}\InprocServer32 -> C:\Users\Anou\AppData\Local\Google\Update\1.3.34.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{A804CF1A-91E5-4F0C-9E8C-DB39E74056DD}\InprocServer32 -> C:\Users\Anou\AppData\Local\Google\Update\1.3.33.23\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\Anou\Dropbox [2012-10-23 20:03]
CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1B} -> [dropbox-NamespaceExtensionRole.Business] => 0
CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Anou\AppData\Local\Google\Update\1.3.34.11\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{EA724FD3-844D-43A9-A8C9-A5BC35FC20E4}\InprocServer32 -> C:\Users\Anou\AppData\Local\Google\Update\1.3.33.17\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2954086005-1533210460-2665764129-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> No File
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> No File
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2017-03-08] (Notepad++ -> )
ContextMenuHandlers1: [EzCd] -> {E46D6DC6-9707-43a9-BDBB-0BDBDD096F90} => C:\Program Files\EZ CD Audio Converter\ezcd64.dll [2013-02-19] (Poikosoft -> Poikosoft)
ContextMenuHandlers1: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => -> No File
ContextMenuHandlers1-x32: [QuickSFV Shell Extension] -> {906b0e6e-61ce-11d3-8ee2-0060080a7242} => C:\Program Files (x86)\QuickSFV\QSFVShll.dll [2017-08-06] (Mercedes) [File not signed]
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2011-05-28] () [File not signed]
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2011-05-28] () [File not signed]
ContextMenuHandlers3: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [EzCd] -> {E46D6DC6-9707-43a9-BDBB-0BDBDD096F90} => C:\Program Files\EZ CD Audio Converter\ezcd64.dll [2013-02-19] (Poikosoft -> Poikosoft)
ContextMenuHandlers4-x32: [QuickSFV Shell Extension] -> {906b0e6e-61ce-11d3-8ee2-0060080a7242} => C:\Program Files (x86)\QuickSFV\QSFVShll.dll [2017-08-06] (Mercedes) [File not signed]
ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2011-05-28] () [File not signed]
ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2011-05-28] () [File not signed]
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll [2017-03-09] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2015-03-17] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2011-05-28] () [File not signed]
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2011-05-28] () [File not signed]
ContextMenuHandlers1_S-1-5-21-2954086005-1533210460-2665764129-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers4_S-1-5-21-2954086005-1533210460-2665764129-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5_S-1-5-21-2954086005-1533210460-2665764129-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Anou\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-05-07] (Dropbox, Inc -> Dropbox, Inc.)

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


ShortcutWithArgument: C:\Users\Anou\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome\Google Play Musique.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=fahmaaghhglfmonjliepjlchgpgfmobi

==================== Loaded Modules (Whitelisted) ==============

2011-07-10 05:16 - 2011-05-28 22:05 - 000164864 _____ () [File not signed] C:\Program Files\WinRAR\rarext.dll
2011-07-10 14:41 - 2011-05-04 12:11 - 001892352 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\xerces-c_2_7.dll
2011-07-10 14:41 - 2011-05-04 12:05 - 000069632 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\StatusStrings.dll
2003-04-03 17:42 - 2003-04-03 17:42 - 000024576 _____ (Microsoft Corporation) [File not signed] C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\1036\mdmui.dll
2006-10-26 13:44 - 2006-10-26 13:44 - 000123904 _____ (Microsoft Corporation) [File not signed] C:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\csm.dll
2006-10-26 13:40 - 2006-10-26 13:40 - 000335872 _____ (Microsoft Corporation) [File not signed] C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
2006-10-26 13:45 - 2006-10-26 13:45 - 000247296 _____ (Microsoft Corporation) [File not signed] C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\msdbg2.dll
2011-07-07 21:15 - 2011-07-07 21:15 - 000074752 _____ (Nullsoft, Inc.) [File not signed] C:\Program Files (x86)\Winamp\winampa.exe

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2018-02-01 21:29 - 000000822 _____ C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Calibre2\;C:\Program Files (x86)\QuickTime\QTSystem\;C:\adb;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092846735\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092847425\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092848125\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092846780\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092847465\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092848175\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-21-2954086005-1533210460-2665764129-1000\Control Panel\Desktop\\Wallpaper -> g:\images\tumblr_le98j2sbok1qfvkydo1_500.jpg
HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092846825\Control Panel\Desktop\\Wallpaper -> g:\images\tumblr_le98j2sbok1qfvkydo1_500.jpg
HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092847495\Control Panel\Desktop\\Wallpaper -> g:\images\tumblr_le98j2sbok1qfvkydo1_500.jpg
HKU\S-1-5-21-2954086005-1533210460-2665764129-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06032019092848215\Control Panel\Desktop\\Wallpaper -> g:\images\tumblr_le98j2sbok1qfvkydo1_500.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{65FAD86D-5CDB-4D97-AF95-63836062EE01}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [UDP Query User{D11C0E8D-B758-44F8-B2B9-6CDCDD22E225}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [TCP Query User{C11F7BB7-C8D5-486D-83DA-7FD16CC8D6AC}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [UDP Query User{FCDE577D-C7FD-4E80-A268-18DAC0CE819D}C:\program files (x86)\java\jre1.8.0_144\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_144\bin\javaw.exe No File
FirewallRules: [TCP Query User{1CA10519-FF76-46E8-8E3C-34482EA64FC6}C:\program files (x86)\java\jre1.8.0_144\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_144\bin\javaw.exe No File
FirewallRules: [UDP Query User{B7B993EF-FDA7-4D7D-A7DF-350B08AEF5D0}C:\program files (x86)\java\jre1.8.0_131\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_131\bin\javaw.exe No File
FirewallRules: [TCP Query User{17A92010-8698-4F0A-9DC4-E2999249D9D5}C:\program files (x86)\java\jre1.8.0_131\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_131\bin\javaw.exe No File
FirewallRules: [{166DD722-B2D2-4EF8-B20D-002520CB87AD}] => (Block) C:\program files (x86)\soulseekqt\soulseekqt.exe () [File not signed]
FirewallRules: [{20BF3023-776D-417D-A2C9-D63617A5B724}] => (Block) C:\program files (x86)\soulseekqt\soulseekqt.exe () [File not signed]
FirewallRules: [UDP Query User{4B57E545-F745-46E9-9023-57186BBA6761}C:\program files (x86)\soulseekqt\soulseekqt.exe] => (Allow) C:\program files (x86)\soulseekqt\soulseekqt.exe () [File not signed]
FirewallRules: [TCP Query User{CBE17F1C-E6AC-408F-8EBF-4B6905D33D75}C:\program files (x86)\soulseekqt\soulseekqt.exe] => (Allow) C:\program files (x86)\soulseekqt\soulseekqt.exe () [File not signed]
FirewallRules: [{37F65AF8-0368-4C64-AFA4-8F06C8342F04}] => (Block) C:\users\anou\appdata\roaming\couchpotato\application\couchpotato.exe () [File not signed]
FirewallRules: [{482C1D2C-10F1-4115-A895-3B8AE027518F}] => (Block) C:\users\anou\appdata\roaming\couchpotato\application\couchpotato.exe () [File not signed]
FirewallRules: [UDP Query User{FD641643-DFDE-450C-8DA9-7121A49B7929}C:\program files (x86)\java\jre1.8.0_121\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_121\bin\javaw.exe No File
FirewallRules: [TCP Query User{624477EB-F374-46E8-95DC-DB5FFF1414C7}C:\program files (x86)\java\jre1.8.0_121\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_121\bin\javaw.exe No File
FirewallRules: [UDP Query User{4FAAD636-3FA0-4754-BB3B-913126E23192}C:\users\anou\appdata\roaming\couchpotato\application\couchpotato.exe] => (Allow) C:\users\anou\appdata\roaming\couchpotato\application\couchpotato.exe () [File not signed]
FirewallRules: [TCP Query User{333B877C-5B60-453A-BF3C-5BF8B2A3545D}C:\users\anou\appdata\roaming\couchpotato\application\couchpotato.exe] => (Allow) C:\users\anou\appdata\roaming\couchpotato\application\couchpotato.exe () [File not signed]
FirewallRules: [{1326C3D8-A54F-4F95-A335-DA4E358E4521}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{6A97E123-FA18-4EF7-9451-8AD263E42254}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{A9816E9E-9468-41C1-855A-00DDDB91B0A3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{7509DC47-F314-41D9-BFB3-378CFD9EA910}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{DCC506DA-C7AD-462B-9D76-BDC5ABD84CFE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{ABF4188E-C5E8-4911-BA98-E1238324976D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{E414F6A3-F590-438C-AEA7-C521AFA7CBD9}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe () [File not signed]
FirewallRules: [{83C550E8-999B-4EE5-9023-F41345328A10}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe () [File not signed]
FirewallRules: [{4849DDFC-9EB8-4252-913A-152B589B9017}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe () [File not signed]
FirewallRules: [{012E315E-D15C-4ED8-9409-284D02614E29}] => (Allow) C:\Program Files (x86)\qBittorrent\qbittorrent.exe () [File not signed]
FirewallRules: [{D87F80DA-4B4E-4A70-B4D1-77367C9C1544}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe No File
FirewallRules: [{397943F5-D6A8-44D4-AE3C-F585121F8D59}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe No File
FirewallRules: [{40F05971-A5D7-43C6-A2E7-244B316BCC6F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{F8B33BE9-79BA-4E5D-B219-BB9C55868436}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{6E61C691-87C4-47F2-AC32-E7F3002B7387}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{81E43AFA-74D7-4D44-BE2C-25343B3FEB3C}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{5912ED23-DE05-4A5F-98C3-A651B3C0CC51}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{C99578FC-4854-4CB0-93A7-D386AB17B576}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{0E920EED-E9F2-4175-8496-C3D2AF70E597}] => (Allow) C:\Users\Anou\AppData\Roaming\uTorrent\uTorrent.exe No File
FirewallRules: [{DC83C2FD-999E-4F5E-8813-26198BAE1195}] => (Allow) C:\Users\Anou\AppData\Roaming\uTorrent\uTorrent.exe No File
FirewallRules: [{091CB1CA-5FA2-460E-A29E-BD2D3B0B5F33}] => (Allow) G:\Program Files\Sid Meier's Civilization IV Colonization\Colonization.exe ()
FirewallRules: [{3089B99B-39F9-44B4-BEFD-2CE5C43CD557}] => (Allow) G:\Program Files\Sid Meier's Civilization IV Colonization\Colonization.exe ()
FirewallRules: [{ECE9765B-36BE-456C-AA46-6CE9B40EC04B}] => (Allow) G:\Program Files\Sid Meier's Civilization 4 Complete\Beyond the Sword\Civ4BeyondSword.exe ()
FirewallRules: [{BF77B4D5-5A74-4ACD-8C08-044BB1CD2E9E}] => (Allow) G:\Program Files\Sid Meier's Civilization 4 Complete\Beyond the Sword\Civ4BeyondSword.exe ()
FirewallRules: [{F55CBF36-716B-4C25-9E34-3D78EBDACCAF}] => (Allow) G:\Program Files\Sid Meier's Civilization 4 Complete\Warlords\Civ4Warlords.exe No File
FirewallRules: [{1BF6681B-D5FD-448D-94FB-CEAFC3D16D51}] => (Allow) G:\Program Files\Sid Meier's Civilization 4 Complete\Warlords\Civ4Warlords.exe No File
FirewallRules: [{2587BC1E-F18B-49D6-9864-574482A32F66}] => (Allow) G:\Program Files\Sid Meier's Civilization 4 Complete\Civilization4.exe ()
FirewallRules: [{EC888CFD-A83E-4D60-9D07-E51DE4025618}] => (Allow) G:\Program Files\Sid Meier's Civilization 4 Complete\Civilization4.exe ()
FirewallRules: [UDP Query User{BA2948D7-47CE-4767-B8AB-DC91701A0FB4}C:\users\anou\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\anou\appdata\roaming\dropbox\bin\dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [TCP Query User{925AAD5E-A557-459A-A35D-C932F5C1B3F6}C:\users\anou\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\anou\appdata\roaming\dropbox\bin\dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{7BFAAC85-C8A1-4B00-8E52-66D90BC3ACD5}] => (Allow) C:\Users\Anou\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{6980633E-EE35-4077-AF5D-6C0D777EEBF9}] => (Allow) C:\Users\Anou\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{3CDD9910-3BBA-4DEE-97C1-7B711FDA96E6}] => (Allow) LPort=4482
FirewallRules: [{664D9942-028C-4819-869C-03B1838D1FF0}] => (Allow) LPort=4482
FirewallRules: [{B63654BA-13E2-4F6C-A6F5-62256B9A8E61}] => (Allow) LPort=4481
FirewallRules: [{84B15989-765D-481E-9FC6-410B59B69768}] => (Allow) LPort=4481
FirewallRules: [{BEF7EF05-FB73-4155-97C1-9CA6C1AB9A30}] => (Allow) C:\Program Files (x86)\Research In Motion\BlackBerry Desktop\Rim.Desktop.exe No File
FirewallRules: [{48459A1F-8D4D-440E-971F-BE6AD8AFF659}] => (Allow) C:\Program Files (x86)\Research In Motion\BlackBerry Desktop\Rim.Desktop.exe No File
FirewallRules: [{CBF886DA-D3DD-4209-8D66-DB340E492F3C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{42DCB3E0-C7D4-4369-B7A5-A726939D072B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4AC060D1-7538-4D9E-8AF5-A8672FE95693}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{87F489C2-FD68-47AF-8A60-31892186DE7F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{41F26880-FE3A-423B-985A-39AB2CE12D7A}] => (Allow) G:\Program Files\Tribler\tribler.exe No File
FirewallRules: [{9674DFE8-2BA4-490B-8579-875F46728660}] => (Allow) G:\Program Files\Tribler\tribler.exe No File
FirewallRules: [UDP Query User{90E20703-8BF6-4565-BC5B-D45980C6A41E}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe No File
FirewallRules: [TCP Query User{420E57A6-D974-414B-A575-767AE038D33E}C:\program files (x86)\google\google earth\client\googleearth.exe] => (Allow) C:\program files (x86)\google\google earth\client\googleearth.exe No File
FirewallRules: [UDP Query User{B8C0639A-8801-4BC9-8471-07B2DF825219}D:\program files\emule\emule.exe] => (Allow) D:\program files\emule\emule.exe (hxxp://www.emule-project.net) [File not signed]
FirewallRules: [TCP Query User{51258017-A538-4EE5-AAF9-2264AE6810AF}D:\program files\emule\emule.exe] => (Allow) D:\program files\emule\emule.exe (hxxp://www.emule-project.net) [File not signed]
FirewallRules: [UDP Query User{7FD09831-4DA9-426E-869E-A2D287C71E95}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [TCP Query User{625E1AB4-558B-4B21-B559-E08B48701CBB}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{64EC263C-A0A5-47AA-9B80-BC4491846340}] => (Allow) LPort=88
FirewallRules: [{7EB62F67-AD9D-4D81-8D17-8BDB8DA13699}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{4DCA9386-57A2-4FC1-9E38-7D6E09FB7CD4}C:\users\anou\appdata\local\programs\plexamp\plexamp.exe] => (Allow) C:\users\anou\appdata\local\programs\plexamp\plexamp.exe (Plex, Inc -> Plex, Inc.)
FirewallRules: [UDP Query User{32EE36A3-FD49-4400-991F-167C567BB335}C:\users\anou\appdata\local\programs\plexamp\plexamp.exe] => (Allow) C:\users\anou\appdata\local\programs\plexamp\plexamp.exe (Plex, Inc -> Plex, Inc.)
FirewallRules: [TCP Query User{E1CD221A-E3A7-45DA-8B42-89466317D068}C:\program files\dvdfab 11\dvdfab64.exe] => (Block) C:\program files\dvdfab 11\dvdfab64.exe No File
FirewallRules: [UDP Query User{B29FE7E8-429B-4AA0-96AB-54164CCBCCEA}C:\program files\dvdfab 11\dvdfab64.exe] => (Block) C:\program files\dvdfab 11\dvdfab64.exe No File
FirewallRules: [{A92D3F17-A747-42C8-84AE-0F3EFEBB1CDA}] => (Allow) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.EXE (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{8C85EB82-462C-4558-B001-1DAFAEB4DD4B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)

==================== Restore Points =========================

ATTENTION: System Restore is disabled

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/31/2019 11:14:07 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante MicrosoftEdgeCP.exe, version : 11.0.17763.1, horodatage : 0x90f701bc
Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000
Code d’exception : 0xc0000409
Décalage d’erreur : 0x0000000000000203
ID du processus défaillant : 0x345c
Heure de début de l’application défaillante : 0x01d5179132c38e40
Chemin d’accès de l’application défaillante : C:\Windows\System32\MicrosoftEdgeCP.exe
Chemin d’accès du module défaillant: unknown
ID de rapport : 038627bd-b0aa-49ae-a38e-9c98b26f0106
Nom complet du package défaillant : Microsoft.MicrosoftEdge_44.17763.1.0_neutral__8wekyb3d8bbwe
ID de l’application relative au package défaillant : MicrosoftEdge

Error: (05/23/2019 05:36:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante Acrobat.exe, version : 19.12.20034.1161, horodatage : 0x5ccb9be1
Nom du module défaillant : ntdll.dll, version : 10.0.17763.475, horodatage : 0x1ddde673
Code d’exception : 0xc0000409
Décalage d’erreur : 0x00084fe0
ID du processus défaillant : 0x1138
Heure de début de l’application défaillante : 0x01d5114375be697d
Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Chemin d’accès du module défaillant: C:\WINDOWS\SYSTEM32\ntdll.dll
ID de rapport : cceef243-9b60-49a2-ac1a-da71591c466d
Nom complet du package défaillant :
ID de l’application relative au package défaillant :

Error: (05/20/2019 09:45:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante MicrosoftEdgeCP.exe, version : 11.0.17763.1, horodatage : 0x90f701bc
Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000
Code d’exception : 0xc0000409
Décalage d’erreur : 0x0000000000000203
ID du processus défaillant : 0x27e4
Heure de début de l’application défaillante : 0x01d50f448c0f75cd
Chemin d’accès de l’application défaillante : C:\Windows\System32\MicrosoftEdgeCP.exe
Chemin d’accès du module défaillant: unknown
ID de rapport : 1a68c91d-f8a4-45a6-8707-4ecd76758a18
Nom complet du package défaillant : Microsoft.MicrosoftEdge_44.17763.1.0_neutral__8wekyb3d8bbwe
ID de l’application relative au package défaillant : MicrosoftEdge

Error: (05/19/2019 03:29:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante MicrosoftEdgeCP.exe, version : 11.0.17763.1, horodatage : 0x90f701bc
Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000
Code d’exception : 0xc0000409
Décalage d’erreur : 0x0000000000000203
ID du processus défaillant : 0x2be0
Heure de début de l’application défaillante : 0x01d50e46dc268a43
Chemin d’accès de l’application défaillante : C:\Windows\System32\MicrosoftEdgeCP.exe
Chemin d’accès du module défaillant: unknown
ID de rapport : 27e98a01-1e41-439b-8fda-9bfc8ee82539
Nom complet du package défaillant : Microsoft.MicrosoftEdge_44.17763.1.0_neutral__8wekyb3d8bbwe
ID de l’application relative au package défaillant : MicrosoftEdge

Error: (05/15/2019 12:03:32 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 14234

Error: (05/15/2019 12:03:32 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 14234

Error: (05/15/2019 12:03:32 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/14/2019 07:00:17 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante MicrosoftEdgeCP.exe, version : 11.0.17763.1, horodatage : 0x90f701bc
Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000
Code d’exception : 0xc0000409
Décalage d’erreur : 0x0000000000000203
ID du processus défaillant : 0x15c
Heure de début de l’application défaillante : 0x01d50a74ea0d38c5
Chemin d’accès de l’application défaillante : C:\Windows\System32\MicrosoftEdgeCP.exe
Chemin d’accès du module défaillant: unknown
ID de rapport : 10c5162b-f513-4945-9033-75fd3951e005
Nom complet du package défaillant : Microsoft.MicrosoftEdge_44.17763.1.0_neutral__8wekyb3d8bbwe
ID de l’application relative au package défaillant : MicrosoftEdge


System errors:
=============
Error: (06/03/2019 09:49:57 AM) (Source: DCOM) (EventID: 10016) (User: NIFLHEIM)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
et l’APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
au SID NIFLHEIM\Anou de l’utilisateur (S-1-5-21-2954086005-1533210460-2665764129-1000) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Unavailable du conteneur d’applications (Unavailable). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (06/03/2019 09:43:38 AM) (Source: DCOM) (EventID: 10016) (User: NIFLHEIM)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
et l’APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
au SID NIFLHEIM\Anou de l’utilisateur (S-1-5-21-2954086005-1533210460-2665764129-1000) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Unavailable du conteneur d’applications (Unavailable). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (06/03/2019 09:30:46 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Launch pour l’application serveur COM avec le CLSID
Windows.SecurityCenter.WscBrokerManager
et l’APPID
Unavailable
au SID NT AUTHORITY\SYSTEM de l’utilisateur (S-1-5-18) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Unavailable du conteneur d’applications (Unavailable). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (06/03/2019 09:30:46 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Launch pour l’application serveur COM avec le CLSID
Windows.SecurityCenter.SecurityAppBroker
et l’APPID
Unavailable
au SID NT AUTHORITY\SYSTEM de l’utilisateur (S-1-5-18) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Unavailable du conteneur d’applications (Unavailable). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (06/03/2019 09:30:46 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Launch pour l’application serveur COM avec le CLSID
Windows.SecurityCenter.WscDataProtection
et l’APPID
Unavailable
au SID NT AUTHORITY\SYSTEM de l’utilisateur (S-1-5-18) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Unavailable du conteneur d’applications (Unavailable). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (06/03/2019 09:28:49 AM) (Source: DCOM) (EventID: 10016) (User: NIFLHEIM)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
et l’APPID
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
au SID NIFLHEIM\Anou de l’utilisateur (S-1-5-21-2954086005-1533210460-2665764129-1000) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Unavailable du conteneur d’applications (Unavailable). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (06/03/2019 09:27:50 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Message Queuing s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 120000 millisecondes : Restart the service.

Error: (06/03/2019 09:27:50 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Apple Mobile Device Service s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 60000 millisecondes : Restart the service.


CodeIntegrity:
===================================

Date: 2019-06-03 09:07:03.882
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-06-03 09:07:03.544
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-06-03 09:07:03.200
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-06-03 09:07:02.851
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-06-03 09:07:02.507
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-06-03 09:07:02.133
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-06-03 09:07:01.591
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-06-03 09:07:01.109
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Memory info ===========================

BIOS: American Megatrends Inc. 0806 02/11/2011
Motherboard: ASUSTeK Computer INC. P8H67-M PRO
Processor: Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz
Percentage of memory in use: 81%
Total physical RAM: 4007.22 MB
Available physical RAM: 727.12 MB
Total Virtual: 8103.22 MB
Available Virtual: 3692.13 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:118.69 GB) (Free:40 GB) NTFS
Drive d: (Surt) (Fixed) (Total:465.76 GB) (Free:174.32 GB) NTFS
Drive e: (Green) (Fixed) (Total:1863.01 GB) (Free:603.09 GB) NTFS
Drive g: (Black) (Fixed) (Total:931.51 GB) (Free:290.34 GB) NTFS

\\?\Volume{2741ce7d-aa8f-11e0-81b2-806e6f6e6963}\ (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS
\\?\Volume{a3ac0702-0000-0000-0000-b0b21d000000}\ () (Fixed) (Total:0.45 GB) (Free:0.06 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 119.2 GB) (Disk ID: A3AC0702)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=118.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=459 MB) - (Type=27)

========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: E2995ADB)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: 5C3A6260)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

========================================================
Disk: 3 (MBR Code: Windows XP) (Size: 465.8 GB) (Disk ID: 1014A9E3)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================