Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-02-2022
Ran by Vitek (07-03-2022 19:48:33)
Running from C:\Users\Vitek\Downloads
Microsoft Windows 10 Pro Version 21H2 19044.1566 (X64) (2020-10-11 17:39:35)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-4008697583-2606143404-964516348-500 - Administrator - Disabled)
ccu (S-1-5-21-4008697583-2606143404-964516348-1013 - Administrator - Enabled) => C:\Users\ccu
DefaultAccount (S-1-5-21-4008697583-2606143404-964516348-503 - Limited - Disabled)
Guest (S-1-5-21-4008697583-2606143404-964516348-501 - Limited - Disabled)
kantn (S-1-5-21-4008697583-2606143404-964516348-1009 - Limited - Enabled) => C:\Users\kantn
SophosSAUDESKTOP-IU0 (S-1-5-21-4008697583-2606143404-964516348-1002 - Limited - Enabled)
svobo (S-1-5-21-4008697583-2606143404-964516348-1012 - Limited - Disabled)
Visitor (S-1-5-21-4008697583-2606143404-964516348-1007 - Limited - Enabled) => C:\Users\Visitor
Vitek (S-1-5-21-4008697583-2606143404-964516348-1001 - Administrator - Enabled) => C:\Users\Vitek
WDAGUtilityAccount (S-1-5-21-4008697583-2606143404-964516348-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Sophos Anti-Virus (Enabled - Up to date) {8E0623B8-CF1C-DFFE-CEA3-AA41BDA4B8EE}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Sophos Anti-Virus (Enabled - Up to date) {44CC060E-FAA8-498C-EC02-591EA8C240B2}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat DC (64-bit) (HKLM\...\{AC76BA86-1033-1033-7760-BC15014EA700}) (Version: 21.011.20039 - Adobe)
Alcor Micro Smart Card Reader Driver (HKLM-x32\...\{F24F876B-7D71-4BD6-88E9-614D3B000044}) (Version: 1.7.44.0 - Alcor Micro Corp.) Hidden
Alcor Micro Smart Card Reader Driver (HKLM-x32\...\SZCCID) (Version: 1.7.44.0 - Alcor Micro Corp.)
Anaconda3 2021.05 (Python 3.8.8 64-bit) (HKU\S-1-5-21-4008697583-2606143404-964516348-1001\...\Anaconda3 2021.05 (Python 3.8.8 64-bit)) (Version: 2021.05 - Anaconda, Inc.)
Apple Application Support (32-bit) (HKLM-x32\...\{C3A282C9-4C8B-4A63-B449-3A064FB378D7}) (Version: 8.2 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{CC046FB9-E84E-4092-B924-DBE33DA2BE75}) (Version: 8.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{527DD209-8A66-482F-8779-C7B3BACCA8F1}) (Version: 15.0.0.16 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A3985C05-7386-411F-A4BF-32A73F37EB44}) (Version: 2.6.3.1 - Apple Inc.)
Autodesk Desktop App (HKLM-x32\...\Autodesk Desktop App) (Version: 8.3.0.71 - Autodesk)
Autodesk Genuine Service (HKLM\...\{8AD048E5-9570-442E-A5A2-B12C2618977E}) (Version: 4.6.0.124 - Autodesk)
Autodesk Maya 2020 (HKLM\...\{0EBFFCF6-F972-4D40-863F-E673B5C38236}) (Version: 20.4.0.1627 - Autodesk) Hidden
Autodesk Maya 2020 (HKLM\...\{C2F98634-0139-4EB2-B26C-821D090559CC}) (Version: 2020.4.0.1627 - Autodesk, Inc.)
Autodesk Maya 2022 (HKLM\...\{75720A52-D985-4C79-BDDC-4286437BDD8B}) (Version: 22.0.0.217 - Autodesk) Hidden
Autodesk Maya 2022 (HKLM\...\{9D725D29-4BE6-3ED9-A585-F4D5E20CECEE}) (Version: 2022.0.0.217 - Autodesk, Inc.)
Autodesk Single Sign On Component (HKLM\...\{D3715C06-96BD-4E88-A18D-8CA9FDD332D6}) (Version: 12.2.2.1802 - Autodesk)
Avogadro (HKLM-x32\...\Avogadro) (Version: 1.2.0 - Humanity)
Bang & Olufsen Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 9.0.232.70 - Conexant)
Bifrost Extension 2.0.3.0 for Maya 2020 (HKLM\...\{0BAD8879-2A6C-43DC-B8BC-9FE8AD80C75B}) (Version: 2.0.3.0 - Autodesk)
Bifrost Extension 2.0.5.0 for Maya 2020 (HKLM\...\{55EA9152-717D-460A-AA14-06C76B27FB84}) (Version: 2.0.5.0 - Autodesk)
Bifrost Extension 2.1.0.0 for Maya 2020 (HKLM\...\{0E7A12C7-0F7C-4B78-9329-D795B3A29572}) (Version: 2.1.0.0 - Autodesk)
Bifrost Extension 2.2.0.0 for Maya 2020 (HKLM\...\{5CE146E2-49C3-465D-8FA0-E59CB980A251}) (Version: 2.2.0.0 - Autodesk)
Bifrost Extension 2.2.1.0 for Maya 2022 (HKLM\...\{F2EA156C-FBCF-4933-B551-7EF2E6970F66}) (Version: 2.2.1.0 - Autodesk)
Blender (HKLM\...\{E29A1273-2E7A-40E7-AA63-428A11D59429}) (Version: 2.79.2 - Blender Foundation)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Bonjour Print Services (HKLM\...\{0DA20600-6130-443B-9D4B-F30520315FA6}) (Version: 2.0.2.0 - Apple Inc.)
Cisco AnyConnect Secure Mobility Client  (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 4.10.02086 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\{703B5A06-CCE1-466B-AAC4-49B9FE780A1E}) (Version: 4.10.02086 - Cisco Systems, Inc.) Hidden
Cisco Webex Meetings (HKU\S-1-5-21-4008697583-2606143404-964516348-1001\...\ActiveTouchMeetingClient) (Version: 40.2.8 - Cisco Webex LLC)
Documentation Manager (HKLM\...\{82FBBBC9-616A-4247-BEAD-87B8132D49D2}) (Version: 22.0.0.6 - Intel Corporation) Hidden
Double Commander 0.8.1 beta (HKLM\...\Double Commander_is1) (Version:  - )
Dropbox (HKLM-x32\...\Dropbox) (Version: 143.4.4161 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.541.1 - Dropbox, Inc.) Hidden
Energy Star (HKLM\...\{465CA2B6-98AF-4E77-BE22-A908C34BB9EC}) (Version: 1.0.9 - Hewlett-Packard Company)
Fityk 1.3.1 (HKLM-x32\...\fityk_is1) (Version: 1.3.1 - Marcin Wojdyr)
Gaussian 09W (HKLM-x32\...\Gaussian 09W) (Version:  - )
gnuplot 5.0 patchlevel 6 (HKLM-x32\...\{AB419AC3-9BC1-4EC5-A75B-4D8870DD651F}_is1) (Version: 5.0 patchlevel 6 - gnuplot development team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 99.0.4844.51 - Google LLC)
Heroes of Might and Magic III Complete CZ (HKLM-x32\...\Heroes of Might and Magic III Complete CZ) (Version:  - )
Herramientas de corrección de Microsoft Office 2016: español (HKLM\...\{90160000-001F-0C0A-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP)
HP Notifications (HKLM-x32\...\{A95378BF-DA86-4260-9B9E-928EEC2CA0C9}) (Version: 1.1.21.1 - HP)
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.8334.5401 - Hewlett-Packard)
HP SoftPaq Download Manager (HKLM-x32\...\{fc153673-e23b-4908-93b9-164cc056a3c4}) (Version: 4.3.19.0 - HP)
HP Software Setup (HKLM-x32\...\{83421C73-4679-40F0-B590-20846CB893E0}) (Version: 9.0.1 - HP)
HP Support Solutions Framework (HKLM-x32\...\{00612F78-52C4-46C0-97F0-F50B6036B5E2}) (Version: 12.18.34.21 - HP Inc.)
HP System Software Manager (HKLM-x32\...\{0654A5BE-4E69-4F93-88B2-A81B13A7960C}) (Version: 3.2.8.1 - HP)
HP Universal Camera Driver (HKLM-x32\...\{8B204728-0D90-48BE-97C0-BBEDDFDFA83C}) (Version: 3.6.8.5B - SunplusIT)
HP Welcome (HKLM\...\HPWelcome) (Version: 1.0 - HP Inc.)
Inkscape (HKLM-x32\...\Inkscape) (Version: 1.1.0- - Inkscape)
Intel(R) Chipset Device Software (HKLM-x32\...\{f3b1c211-1159-4262-bb97-84150cda9096}) (Version: 10.1.18243.8188 - Intel(R) Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 2141.15.0.2511 - Intel Corporation)
Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 22.3 - Intel)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.8.17.1065 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1724.2 - Intel Corporation)
Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.63.1155.1 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32\...\{1abcb68a-399f-47fe-aa39-6da46522db0b}) (Version: 1.63.1155.1 - Intel Corporation) Hidden
Intel(R) WiDi (HKLM\...\{6C02A234-7A14-4737-9D89-B0C47A64F94E}) (Version: 6.0.52.0 - Intel Corporation)
Intel(R) WiDi Software Asset Manager (HKLM-x32\...\{AC8973AF-7F4C-40F4-BFE1-C02FE95ED2C2}) (Version: 3.2.1184 - Intel Corporation) Hidden
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{F50984E6-5E69-4A75-B1A5-7F5B4D964EB0}) (Version: 19.11.1641.0703 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{cf961541-ca37-4826-a285-3a9cb22cd5a2}) (Version: 21.40.2 - Intel Corporation)
Intel® Security Assist (HKLM-x32\...\{3D45BD48-F215-4C69-B23F-256C83D1D7F0}) (Version: 1.0.0.534 - Intel Corporation)
Intel® Software Installer (HKLM-x32\...\{056c22c9-0ef2-4a10-ba00-4d68d16c5669}) (Version: 22.0.0.6 - Intel Corporation) Hidden
iTunes (HKLM\...\{1881A808-898B-45F4-80E8-A34C1B6008C5}) (Version: 12.12.2.2 - Apple Inc.)
JabRef (HKLM\...\{BBE5A83A-AE2E-3EBE-A656-EB812C2FF8F7}) (Version: 5.0.50001 - JabRef)
JabRef 4.3.1 (HKLM\...\0034-7691-1464-4754) (Version: 4.3.1 - JabRef Community)
Joplin 2.4.12 (HKU\S-1-5-21-4008697583-2606143404-964516348-1001\...\499c114e-8890-5040-9c02-24abe7d3ebe9) (Version: 2.4.12 - Laurent Cozic)
Julia 1.6.1 (HKU\S-1-5-21-4008697583-2606143404-964516348-1001\...\Julia-1.6.1_is1) (Version: 1.6.1 - Julia Language)
LibreOffice 7.3.0.3 (HKLM\...\{8113FFA7-4CB7-4855-A319-1DB2A7FB9733}) (Version: 7.3.0.3 - The Document Foundation)
LogMeIn Hamachi (HKLM-x32\...\{ECC0FA07-863E-44BC-8B1D-DA22F96E5FB7}) (Version: 2.2.0.633 - LogMeIn, Inc.) Hidden
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.633 - LogMeIn, Inc.)
MATLAB R2016a (HKLM\...\Matlab R2016a) (Version: 9.0 - MathWorks)
MATLAB R2019b (HKLM\...\Matlab R2019b) (Version: 9.7 - MathWorks)
MayaUSD Extension 0.8.0 202102180129-2f83c8f for Maya 2022 (HKLM\...\{D2BC25AB-9C8C-489B-9BB9-E0C4FDF5BB22}) (Version: 0.8.0 - Autodesk)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 99.0.1150.30 - Microsoft Corporation)
Microsoft MPI (10.0.12498.5) (HKLM\...\{8499ACD3-C1E3-45AB-BF96-DA491727EBE1}) (Version: 10.0.12498.5 - Microsoft Corporation)
Microsoft Office Professional Plus 2016 (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4008697583-2606143404-964516348-1001\...\OneDriveSetup.exe) (Version: 22.022.0130.0001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4008697583-2606143404-964516348-1007\...\OneDriveSetup.exe) (Version: 20.201.1005.0009 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4008697583-2606143404-964516348-1009\...\OneDriveSetup.exe) (Version: 20.201.1005.0009 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4008697583-2606143404-964516348-1013\...\OneDriveSetup.exe) (Version: 21.220.1024.0005 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{16E50919-B07A-4B4E-994A-476D4773F5BF}) (Version: 3.65.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.27.29112 (HKLM-x32\...\{0f770e99-3916-4b0c-8f9b-83822826bcbf}) (Version: 14.27.29112.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.27.29112 (HKLM-x32\...\{be826f5f-eda5-45a2-a3fe-c2cb5c1b9842}) (Version: 14.27.29112.0 - Microsoft Corporation)
MiKTeX 2.9 (HKU\S-1-5-21-4008697583-2606143404-964516348-1001\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org)
Miniconda3 py38_4.8.3 (Python 3.8.3 64-bit) (HKU\S-1-5-21-4008697583-2606143404-964516348-1001\...\Miniconda3 py38_4.8.3 (Python 3.8.3 64-bit)) (Version: py38_4.8.3 - Anaconda, Inc.)
Mp3tag v2.90a (HKLM-x32\...\Mp3tag) (Version: 2.90a - Florian Heidenreich)
MtoA for Maya 2020 (HKU\S-1-5-21-4008697583-2606143404-964516348-1001\...\MtoA2020) (Version: 4.1.1 - Autodesk)
MtoA for Maya 2022 (HKU\S-1-5-21-4008697583-2606143404-964516348-1001\...\MtoA2022) (Version: 4.2.1 - Autodesk)
National Instruments Software (HKLM-x32\...\NI Uninstaller) (Version:  - National Instruments)
NI Package Manager 64-bit (HKLM\...\NI Package Manager) (Version: 20.5.0 - National Instruments)
NXPProximityInstaller (HKLM-x32\...\NXPProximityInstaller) (Version: 3.100140.10443.10 - NXP Semiconductors)
OceanView 1.6.5 (Win64) (HKLM\...\OceanView 1.6.5 (Win64) 1.6.5) (Version: 1.6.5 - Ocean Optics, Inc.)
OmniDriver-win32-2.43 (HKLM-x32\...\OmniDriver-win32-2.43 ) (Version:  - Ocean Optics, Inc.)
Orca (HKLM-x32\...\Orca) (Version: 4.2.1 - Max-Planck-Institute for Kohlenforschung)
Outils de vérification linguistique 2016 de Microsoft Office - Français (HKLM\...\{90160000-001F-040C-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
PI E-816.CD (HKLM-x32\...\{9D01AD20-36E2-4302-86BF-0A3DB252ED22}) (Version: 4.0.0.0 - Physik Instrumente (PI) GmbH & Co. KG)
PI GCS Library E816_DLL (HKLM-x32\...\{434AFE92-B6D2-4AC0-9EA9-92836F4BE754}) (Version: 2.1.0.37 - Physik Instrumente (PI) GmbH & Co. KG)
PI LabVIEW Driver Analog (HKLM-x32\...\{7A9E414D-D5BC-4F7D-A1E7-FC27CFD79544}) (Version: 6.3.1.1 - Physik Instrumente (PI) GmbH & Co. KG)
PI LabVIEW Driver E-816 (HKLM-x32\...\{9280F511-A2F4-469F-B03F-A96F2DF0E7D5}) (Version: 6.0.2.0 - Physik Instrumente (PI) GmbH & Co. KG)
PI LabVIEW Merge Tool (HKLM-x32\...\{FD4E9FC3-D01F-4273-A61C-DE47A8AB4FB6}) (Version: 6.5.0.0 - Physik Instrumente (PI) GmbH & Co. KG)
PI Programming Files E816_DLL (HKLM-x32\...\{43B75AF1-B1D6-4FDE-BF56-CDE5E3B8C2BE}) (Version: 2.1.0.37 - Physik Instrumente (PI) GmbH & Co. KG)
PI USB Driver (HKLM-x32\...\{04E6EF42-33C6-48A3-AEE0-556BDC1DB9F2}) (Version: 1.0.2.0 - Physik Instrumente (PI) GmbH & Co. KG)
PIFirmwareWizard (HKLM-x32\...\{CAFC9F43-FDE9-41E1-83F0-269E9C0519C3}) (Version: 3.6.1.0 - Physik Instrumente (PI) GmbH & Co. KG)
PIMikroMove (HKLM-x32\...\{B2BD5B10-92AA-494A-8DFC-85C723B7E74E}) (Version: 2.16.2.1 - Physik Instrumente (PI) GmbH & Co. KG)
PITerminal (HKLM-x32\...\{A87AEC1A-C4EC-4971-9E74-C430FDC17193}) (Version: 6.5.0.0 - Physik Instrumente (PI) GmbH & Co. KG)
PIUpdateFinder (HKLM-x32\...\{48827D06-6A2A-42F0-BBA3-EED7549823FD}) (Version: 1.2.2.9 - Physik Instrumente (PI) GmbH & Co. KG)
PuTTY release 0.73 (64-bit) (HKLM\...\{44F7642C-AB7E-4468-B028-E8D08A0CBB0E}) (Version: 0.73.0.0 - Simon Tatham)
PyMEL for Python 3 (HKLM\...\{3C6A5692-8780-485D-A4EB-FBD4E5C794E6}) (Version: 22.0.0.0 - Autodesk) Hidden
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.370.151 - Realtek Semiconductor Corp.)
Realtek USB Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{04201224-2B34-4EE7-862B-B7BBF89DB3AB}) (Version: 10.2.616.2015 - Realtek)
ResearchSoft Direct Export Helper (HKLM-x32\...\ResearchSoft Direct Export Helper) (Version:  - Thomson Reuters)
Rokoko Motion Library - Maya 2020.4 (HKLM\...\Rokoko Motion Library 1.1.3) (Version: 1.1.3 - Rokoko)
Rokoko Motion Library - Maya 2022 (HKLM\...\Rokoko Motion Library 2.0.0) (Version: 2.0.0 - Rokoko)
Rokoko Motion Library (HKLM\...\{0DD90669-5CAB-489C-B9D5-D8FE4EE35235}) (Version: 2.0.0 - Rokoko) Hidden
Rokoko Motion Library (HKLM\...\{E0014705-08C2-4600-93B4-95184B65C94C}) (Version: 1.1.3 - Rokoko) Hidden
Signal 5.34.0 (HKU\S-1-5-21-4008697583-2606143404-964516348-1001\...\7d96caee-06e6-597c-9f2f-c7bb2e0948b4) (Version: 5.34.0 - Open Whisper Systems)
Skype version 8.75 (HKLM-x32\...\Skype_is1) (Version: 8.75 - Skype Technologies S.A.)
Sophos Anti-Virus (HKLM-x32\...\{71B8156C-1DF3-484B-9891-D845B84D969C}) (Version: 10.8.13.42 - Sophos Limited)
Sophos AutoUpdate (HKLM-x32\...\{644ADF05-0B2E-452C-B720-3CF1580A9368}) (Version: 5.17.243.0 - Sophos Limited)
Sophos Endpoint Defense (HKLM\...\Sophos Endpoint Defense) (Version: 2.2.6.8739 - Sophos Limited)
Sophos Network Threat Protection (HKLM\...\{4B1F9009-CD85-43C0-BCBD-D491908D5A52}) (Version: 1.9.2235.0 - Sophos Limited)
Strawberry Perl (64-bit) (HKLM\...\{2DC518D0-750A-1014-A07D-5301D6FAD9F8}) (Version: 5.32.1001 - strawberryperl.com project)
Sublime Text Build 3126 (HKLM\...\Sublime Text 3_is1) (Version:  - Sublime HQ Pty Ltd)
Substance in Maya 2020-2.1.7 (HKLM\...\{47209805-a05c-4af2-b34b-459745022023}_is1) (Version: 2.1.7 - Adobe)
Substance in Maya 2022-2.1.9 (HKLM\...\{3275b177-e217-4a4d-9a5f-c215a422d225}_is1) (Version: 2.1.9 - Adobe)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.19.73 - Synaptics Incorporated)
Synaptics WBF Fingerprint Reader (HKLM\...\{0CDA14EC-A786-4A8B-9CDC-0B7D93AD9887}) (Version: 4.5.341.0 - Synaptics)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.26.4 - TeamViewer)
Texmaker 5.0.3 (64-bit) (HKLM-x32\...\{7209FF10-D27D-432F-A705-84F02D136C7E}) (Version: 5.0.3.0 - Texmaker)
Thorlabs DCx Cameras (HKLM-x32\...\{8EF50DBE-83AB-484E-979F-74746233CD32}) (Version: 4.20.0006 - Thorlabs GmbH)
Thorlabs DCx Cameras 64 bit Components (HKLM\...\{60493C26-5778-4A2B-9693-3371FFFF3FC6}) (Version: 4.20.0006 - Thorlabs GmbH)
VI Package Manager 2020.1 (HKLM-x32\...\{582ADD07-2992-44D8-BF48-93F34B24144B}) (Version: 20.1.2348 - JKI)
VI Package Manager Runtime Engine (HKLM-x32\...\{F7EAE60D-6527-4631-BED6-210F9642B196}) (Version: 19.0.0 - JKI)
VideoMach (HKLM-x32\...\VideoMach) (Version:  - )
VISA Shared Components 5.12.0 (64-Bit) (HKLM\...\{452610CE-4A5B-4CFF-87F3-B6A49E621E5C}) (Version: 5.12.0300 - IVI Foundation) Hidden
VISA Shared Components 5.12.0 (64-Bit) (HKLM-x32\...\VISASharedComponents) (Version: 5.12 - IVI Foundation)
VISA.NET Shared Components 5.11.0 (64-Bit) (HKLM\...\{E518296D-57A9-434B-AB33-9928D9B5E09D}) (Version: 5.11.0301 - IVI Foundation) Hidden
VISA.NET Shared Components 5.11.0 (64-Bit) (HKLM-x32\...\VISANETSharedComponents5.11.0) (Version: 5.11.0301 - IVI Foundation)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.6 - VideoLAN)
Warcraft III (HKLM-x32\...\Warcraft III) (Version:  - Blizzard Entertainment)
Warcraft III Reign of Chaos & The Frozen Throne (HKLM-x32\...\Warcraft III Reign of Chaos & The Frozen Throne) (Version:  - )
Windows Driver Package - Physik Instrumente (PI) (PI_USB_x64) PI_USBControlledDevices  (04/11/2007 2.41.0.0) (HKLM\...\4D951FDE1AEA74F71332359F23562D819490F99D) (Version: 04/11/2007 2.41.0.0 - Physik Instrumente (PI))
Windows Driver Package - Thorlabs GmbH (uc480_boot) USB  (12/11/2012 4.20.6.1) (HKLM\...\F795A6BC60EA26FF26DEBB0A38D7811ADC34C2BB) (Version: 12/11/2012 4.20.6.1 - Thorlabs GmbH)
Windows PC Health Check (HKLM\...\{77ACFAF7-E5AB-410D-BA14-BBEBF89422DE}) (Version: 3.1.2109.29003 - Microsoft Corporation)
WinSCP 5.17.6 (HKLM-x32\...\winscp3_is1) (Version: 5.17.6 - Martin Prikryl)
Youtube-mp3 (HKU\S-1-5-21-4008697583-2606143404-964516348-1001\...\Youtube) (Version: 1.0.0 - Med Zed INC)
Zoom (HKU\S-1-5-21-4008697583-2606143404-964516348-1001\...\ZoomUMX) (Version: 5.9.1 (2581) - Zoom Video Communications, Inc.)
Zoom (HKU\S-1-5-21-4008697583-2606143404-964516348-1007\...\ZoomUMX) (Version: 5.4.9 (59931.0110) - Zoom Video Communications, Inc.)
Zoom (HKU\S-1-5-21-4008697583-2606143404-964516348-1009\...\ZoomUMX) (Version: 5.4.9 (59931.0110) - Zoom Video Communications, Inc.)
Zotero (HKLM-x32\...\Zotero 5.0.54 (x86 en-US)) (Version: 5.0.54 - Corporation for Digital Scholarship)

Packages:
=========
Autodesk SketchBook -> C:\Program Files\WindowsApps\89006A2E.AutodeskSketchBook_5.1.0.0_x64__tf1gferkr813w [2019-11-06] (Autodesk Inc.)
HP PC Hardware Diagnostics Windows -> C:\Program Files\WindowsApps\AD2F1837.HPPCHardwareDiagnosticsWindows_1.8.0.0_x64__v10z8vjag6ke6 [2022-01-06] (HP Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.14.42.0_x64__v10z8vjag6ke6 [2022-03-03] (HP Inc.)
HP System Information -> C:\Program Files\WindowsApps\AD2F1837.HPSystemInformation_7.0.18.0_x64__v10z8vjag6ke6 [2022-01-06] (HP Inc.)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-20] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-20] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.12.2180.0_x64__8wekyb3d8bbwe [2022-02-27] (Microsoft Studios) [MS Ad]
Photos Media Engine Add-on -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-08-06] (Microsoft Corporation)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0 [2022-03-03] (Spotify AB) [Startup Task]
Twitter -> C:\Program Files\WindowsApps\9E2F88E3.TWITTER_7.0.1.0_neutral__wgeqdkkx372wm [2021-06-11] (Twitter Inc.)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-4008697583-2606143404-964516348-1001_Classes\CLSID\{1019ADC7-17CB-4489-AFD5-6642C7400ACE}\localserver32 -> C:\Users\Vitek\AppData\Local\Webex\Webex\Applications\ptOIEx64.exe (Cisco WebEx LLC -> Cisco WebEx LLC)
CustomCLSID: HKU\S-1-5-21-4008697583-2606143404-964516348-1001_Classes\CLSID\{9A872070-0A06-11D1-90B7-00A024CE2744}\localserver32 -> C:\Program Files\National Instruments\LabVIEW 2019\LabVIEW.exe (National Instruments Corporation -> National Instruments Corporation)
CustomCLSID: HKU\S-1-5-21-4008697583-2606143404-964516348-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\Vitek\Dropbox [2017-02-11 20:17]
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll -> No File
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll [2018-09-23] (Florian Heidenreich) [File not signed]
ContextMenuHandlers1: [SavShellExt] -> {A3A1D8A1-006D-4B93-BA27-6F6B4C9C4F1D} => C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll [2022-01-25] (Sophos Ltd -> Sophos Limited)
ContextMenuHandlers2: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll [2018-09-23] (Florian Heidenreich) [File not signed]
ContextMenuHandlers2: [SavShellExt] -> {A3A1D8A1-006D-4B93-BA27-6F6B4C9C4F1D} => C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll [2022-01-25] (Sophos Ltd -> Sophos Limited)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers4: [Mp3tagShell] -> {6351E20C-35FA-4BE3-98FB-4CABF1363E12} => C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll [2018-09-23] (Florian Heidenreich) [File not signed]
ContextMenuHandlers4: [SavShellExt] -> {A3A1D8A1-006D-4B93-BA27-6F6B4C9C4F1D} => C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll [2022-01-25] (Sophos Ltd -> Sophos Limited)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6daaea9afe1e6f6\igfxDTCM.dll [2020-11-11] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [SavShellExt] -> {A3A1D8A1-006D-4B93-BA27-6F6B4C9C4F1D} => C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavShellExtX64.dll [2022-01-25] (Sophos Ltd -> Sophos Limited)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\Vitek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Anaconda3 (64-bit)\Anaconda Prompt (anaconda3).lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> "/K" C:\Users\Vitek\anaconda3\Scripts\activate.bat C:\Users\Vitek\anaconda3

==================== Loaded Modules (Whitelisted) =============

2019-09-16 11:09 - 2019-09-16 11:09 - 000005120 _____ () [File not signed] C:\Program Files (x86)\National Instruments\Shared\Caps\Compat\NI5690.sdc
2019-09-16 11:09 - 2019-09-16 11:09 - 000012288 _____ () [File not signed] C:\Program Files (x86)\National Instruments\Shared\Caps\Compat\NIDWG.sdc
2019-09-16 11:09 - 2019-09-16 11:09 - 000021504 _____ () [File not signed] C:\Program Files (x86)\National Instruments\Shared\Caps\Compat\NIHSD.sdc
2019-09-16 11:09 - 2019-09-16 11:09 - 000006144 _____ () [File not signed] C:\Program Files (x86)\National Instruments\Shared\Caps\Compat\NIPS.sdc
2019-09-16 11:09 - 2019-09-16 11:09 - 000005632 _____ () [File not signed] C:\Program Files (x86)\National Instruments\Shared\Caps\Compat\NIRFSA.sdc
2019-09-16 11:09 - 2019-09-16 11:09 - 000013312 _____ () [File not signed] C:\Program Files (x86)\National Instruments\Shared\Caps\Compat\NISL.sdc
2019-09-16 11:09 - 2019-09-16 11:09 - 000013824 _____ () [File not signed] C:\Program Files (x86)\National Instruments\Shared\Caps\Compat\NISRC.sdc
2019-09-16 11:09 - 2019-09-16 11:09 - 000006656 _____ () [File not signed] C:\Program Files (x86)\National Instruments\Shared\Caps\Compat\NISYNC.sdc
2019-09-16 11:09 - 2019-09-16 11:09 - 000007680 _____ () [File not signed] C:\Program Files (x86)\National Instruments\Shared\Caps\Compat\NITNR.sdc
2019-09-16 11:09 - 2019-09-16 11:09 - 000009728 _____ () [File not signed] C:\Program Files (x86)\National Instruments\Shared\Caps\Compat\NITSU.sdc
2020-11-16 00:13 - 2018-07-03 11:14 - 001348608 _____ (Conexant Systems, Inc.) [File not signed] C:\Program Files\Conexant\SA3\HP-NB-AIO\CxHDAudioAPI.dll
2018-09-23 12:23 - 2018-09-23 12:23 - 000424448 _____ (Florian Heidenreich) [File not signed] C:\Program Files (x86)\Mp3tag\Mp3tagShell64.dll
2015-01-27 11:11 - 2015-01-27 11:11 - 000021504 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\Caps\NI6535.sdc
2015-01-27 11:11 - 2015-01-27 11:11 - 000014848 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\Caps\NISFT.sdc
2016-01-17 09:45 - 2016-01-17 09:45 - 000053760 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\License Manager\Bin\nilm_Vision_150000.dll
2016-12-08 09:36 - 2016-12-08 09:36 - 000035328 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\mod_niconf.dll
2016-08-03 13:26 - 2016-08-03 13:26 - 000061440 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\mod_niesp.dll
2016-08-03 13:26 - 2016-08-03 13:26 - 000209408 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\NI WebServer\mod_nisessmgr.dll
2018-10-05 08:19 - 2018-10-05 08:19 - 000100864 _____ (National Instruments Corporation) [File not signed] C:\Program Files (x86)\National Instruments\Shared\TraceEngine\ni_traceengine.dll
2016-12-08 09:04 - 2016-12-08 09:04 - 000134656 _____ (National Instruments Corporation) [File not signed] C:\ProgramData\National Instruments\WebServices\NI\LVWSAuthSvc\niauthsvc.dll
2016-12-08 09:36 - 2016-12-08 09:36 - 000031744 _____ (National Instruments Corporation) [File not signed] C:\ProgramData\National Instruments\WebServices\NI\LVWSDeploySvc\deploysvc.dll
2016-12-08 09:36 - 2016-12-08 09:36 - 000165376 _____ (National Instruments Corporation) [File not signed] C:\ProgramData\National Instruments\WebServices\NI\LVWSSSLAdmin\ssladminsvc.dll
2016-08-03 13:27 - 2016-08-03 13:27 - 000219648 _____ (National Instruments Corporation) [File not signed] C:\ProgramData\National Instruments\WebServices\NI\LVWSSysAdmin\sysadminsvc.dll
2016-06-07 14:26 - 2016-06-07 14:26 - 000128512 _____ (National Instruments Corporation) [File not signed] C:\ProgramData\National Instruments\WebServices\NI\wif_core\wif_core.dll
2009-08-25 01:46 - 2009-08-25 01:46 - 000274944 _____ (National Instruments) [File not signed] C:\Program Files (x86)\National Instruments\Shared\License Manager\Bin\nilm_LabVIEW_090001.dll
2022-02-24 13:28 - 2022-02-24 13:28 - 003974144 _____ (National Instruments) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\NationalIns5112fcdb#\c9494686ffdd754ead50570028a6f83b\NationalInstruments.LicenseManagement.ni.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SAVService => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SAVService => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SntpService => ""="service"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2022-02-25] (HP Inc. -> HP Inc.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2022-02-25] (HP Inc. -> HP Inc.)
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2015-10-30 08:24 - 2016-12-07 12:38 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files\Microsoft MPI\Bin\;%OOI_HOME%;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\Orca;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files\MATLAB\R2019b\runtime\win64;C:\Program Files\MATLAB\R2019b\bin;C:\Program Files\PuTTY\;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin\;C:\Program Files\IVI Foundation\VISA\Win64\Bin\;C:\Program Files (x86)\National Instruments\Shared\LabVIEW CLI;C:\Program Files (x86)\IVI Foundation\VISA\WinNT\Bin;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Strawberry\c\bin;C:\Strawberry\perl\site\bin;C:\Strawberry\perl\bin
HKU\S-1-5-21-4008697583-2606143404-964516348-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Vitek\Pictures\Saved Pictures\ridgway_colorado_united states.jpg
HKU\S-1-5-21-4008697583-2606143404-964516348-1007\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
HKU\S-1-5-21-4008697583-2606143404-964516348-1009\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
HKU\S-1-5-21-4008697583-2606143404-964516348-1013\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
HKU\S-1-5-80-1122491841-3392631692-228128370-2991616343-3360392805\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-80-2318606733-4105731500-2265514868-2382646068-3090068018\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-80-63272789-367670524-4235130887-501008514-333400210\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\StartupFolder: => "NI Error Reporting.lnk"
HKLM\...\StartupApproved\StartupFolder: => "NI Error Reporting (64-bit).lnk"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "Cisco AnyConnect Secure Mobility Agent for Windows"
HKLM\...\StartupApproved\Run32: => "KeePass 2 PreLoad"
HKLM\...\StartupApproved\Run32: => "Dropbox"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKU\S-1-5-21-4008697583-2606143404-964516348-1001\...\StartupApproved\StartupFolder: => "EvernoteClipper.lnk"
HKU\S-1-5-21-4008697583-2606143404-964516348-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-4008697583-2606143404-964516348-1001\...\StartupApproved\Run: => "Lync"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{31ED6296-265B-4615-8F89-C607857AE281}] => (Allow) C:\Program Files (x86)\JKI\VI Package Manager\support\JKIUpdate.exe (James Kring, Inc. -> JKI)
FirewallRules: [{E9F3CA92-CAD3-46F6-BDA4-C9D733553497}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{CD4A55A3-AC69-4910-B11D-11764353D2A1}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\SystemWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{4F08CF52-B016-4A68-944C-1304C9C0BE35}] => (Allow) C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{C229CA86-D1D2-4089-A45B-2E31E803BAF1}] => (Allow) C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{22EC3136-CADE-4416-9D77-F40268D55AD2}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{3B848BF1-A2CB-49D8-BEDD-6E15C4BDB929}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{A9C2A7E2-75FE-4C61-8B15-6FCD44513AE3}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{DF58609B-7294-4D7B-8E9A-A4EABA727F0B}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\nisvcloc\nisvcloc.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{8A3BB187-468E-4D84-9792-02A814D0A23C}] => (Allow) C:\Program Files (x86)\National Instruments\Shared\nisvcloc\nisvcloc.exe (National Instruments Corporation -> National Instruments Corporation)
FirewallRules: [{2D246C0F-9988-436C-95DB-2AF6193B3760}] => (Block) C:\program files\matlab\r2019b\bin\win64\update_installer.exe (The MathWorks, Inc. -> The MathWorks, Inc)
FirewallRules: [{5492707A-A19A-46D8-8AD4-24984D14EA50}] => (Block) C:\program files\matlab\r2019b\bin\win64\update_installer.exe (The MathWorks, Inc. -> The MathWorks, Inc)
FirewallRules: [UDP Query User{3BA8F148-7717-41EB-8398-853B47DF707A}C:\program files\matlab\r2019b\bin\win64\update_installer.exe] => (Allow) C:\program files\matlab\r2019b\bin\win64\update_installer.exe (The MathWorks, Inc. -> The MathWorks, Inc)
FirewallRules: [TCP Query User{FC44D786-DE63-4A0F-9ABF-C726A02C878D}C:\program files\matlab\r2019b\bin\win64\update_installer.exe] => (Allow) C:\program files\matlab\r2019b\bin\win64\update_installer.exe (The MathWorks, Inc. -> The MathWorks, Inc)
FirewallRules: [UDP Query User{F65CE89C-BBCA-411D-8051-54A21F06DA5F}C:\program files (x86)\warcraft iii reign of chaos & the frozen throne\war3.exe] => (Allow) C:\program files (x86)\warcraft iii reign of chaos & the frozen throne\war3.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [TCP Query User{F1C1BB52-14E7-4A97-A9BE-27F558DA77EE}C:\program files (x86)\warcraft iii reign of chaos & the frozen throne\war3.exe] => (Allow) C:\program files (x86)\warcraft iii reign of chaos & the frozen throne\war3.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [UDP Query User{ABF1A554-95D5-4E50-819D-CA7EAB2B5110}C:\users\vitek\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\vitek\appdata\roaming\spotify\spotify.exe => No File
FirewallRules: [TCP Query User{BB06D1B5-ED13-44CD-812D-09255E0A8F34}C:\users\vitek\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\vitek\appdata\roaming\spotify\spotify.exe => No File
FirewallRules: [UDP Query User{D4ACD3DA-8365-4165-B35E-8FE707B3F282}C:\users\vitek\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\vitek\appdata\roaming\spotify\spotify.exe => No File
FirewallRules: [TCP Query User{A61B681E-95A3-405F-A212-906EC7C83AE7}C:\users\vitek\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\vitek\appdata\roaming\spotify\spotify.exe => No File
FirewallRules: [{D6780851-181C-4B7C-84C0-7A19BFB0E612}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [UDP Query User{C3556086-A04A-473D-9008-DFBC4CEFAF0F}C:\program files\matlab\r2016a\bin\win64\matlab.exe] => (Allow) C:\program files\matlab\r2016a\bin\win64\matlab.exe => No File
FirewallRules: [TCP Query User{9046FC85-D602-4FA0-909E-69F20EA1A3CF}C:\program files\matlab\r2016a\bin\win64\matlab.exe] => (Allow) C:\program files\matlab\r2016a\bin\win64\matlab.exe => No File
FirewallRules: [{371422E0-BD2C-46AC-9363-4A56D785502B}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\SmartAgentTest.exe => No File
FirewallRules: [{33C076BF-C709-4A05-B97A-B09D014236AE}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\Next\WirelessDisplay.exe => No File
FirewallRules: [{D07248D3-4A86-432E-A99D-31A5358914AA}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\WiDiAppOld.exe => No File
FirewallRules: [{4FA84778-B398-4A5F-90E4-5107B1805782}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe => No File
FirewallRules: [{C160A7B8-21DF-42A9-B61E-8C68475E3BA9}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{41B7A047-DFD2-4122-8239-35C0CADE2016}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{58B7D003-8540-4791-BF98-E3B1C8B310ED}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FD3F6B61-62A9-4C3B-8BA6-E3F3BF75F34D}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{5119BA15-A19A-4875-8A59-8D2C5D60E019}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{D0C00049-4573-4A5D-9C6E-838B8F5310BF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C9ECB48F-7505-4039-88D3-DB41802F04D0}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{19A72BFE-E277-4FF9-9B8B-6E2628CDF9DB}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{EFB84C69-9BC0-4301-ADA0-0753CF3B1B58}C:\program files\ocean optics\oceanview\oceanview\_jvm\bin\javaw.exe] => (Allow) C:\program files\ocean optics\oceanview\oceanview\_jvm\bin\javaw.exe
FirewallRules: [UDP Query User{B51B6E79-49D7-42EA-87C8-3A10B11B7433}C:\program files\ocean optics\oceanview\oceanview\_jvm\bin\javaw.exe] => (Allow) C:\program files\ocean optics\oceanview\oceanview\_jvm\bin\javaw.exe
FirewallRules: [{3E03A50E-F79E-4F72-ADF4-FD7A8798E99F}] => (Allow) C:\Users\Vitek\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{343CB175-4654-4B34-B12D-C598C3BC6CDF}] => (Allow) C:\Users\Vitek\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{0BA978F1-8E16-468C-9DE0-23FAF4CF5477}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{5CA93E1F-4B4C-435E-9A2D-9E015BB1A54B}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{682EDDBD-BB88-4684-ABD3-F05311E1C1EE}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{AFDE0930-9A86-4499-B730-62BC5221E3BA}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{7FE603E7-FCAA-40CE-AA2D-7E9DEDBBCDAC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{EC854528-39E8-40EE-9156-3DE633D13AC9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [TCP Query User{696A12C2-FDB9-427D-B753-7CC999C7661B}C:\program files\matlab\r2016a\bin\win64\matlab.exe] => (Allow) C:\program files\matlab\r2016a\bin\win64\matlab.exe => No File
FirewallRules: [UDP Query User{0880E7D6-27CC-4439-BF4F-F2DB9A0264FD}C:\program files\matlab\r2016a\bin\win64\matlab.exe] => (Allow) C:\program files\matlab\r2016a\bin\win64\matlab.exe => No File
FirewallRules: [{B6BD110D-D3C2-4612-8959-F99583639119}] => (Allow) LPort=139
FirewallRules: [{FDA378DB-C956-4745-9547-A876D70771A4}] => (Allow) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn, Inc. -> LogMeIn Inc.)
FirewallRules: [{0EA93B99-E0A3-4DDA-AD89-3EBA5224634D}] => (Allow) C:\Program Files\Microsoft MPI\Bin\msmpilaunchsvc.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8A793BC3-3868-4A38-A7B2-902E21AC58F5}] => (Allow) C:\Program Files\Microsoft MPI\Bin\msmpilaunchsvc.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6132ED4E-6814-4188-AE9D-387E1AA2D735}] => (Allow) C:\Program Files\Microsoft MPI\Bin\mpiexec.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7DA9B4D8-E658-4930-9EE1-C846A0481B2C}] => (Allow) C:\Program Files\Microsoft MPI\Bin\mpiexec.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6DD8AF44-7B22-43DF-9673-DA412466B45F}] => (Allow) C:\Program Files\Microsoft MPI\Bin\smpd.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{EDC3CAB2-9F64-4CEF-9EF0-A0AA2549E97F}] => (Allow) C:\Program Files\Microsoft MPI\Bin\smpd.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{DC3C3556-B731-442D-A4DC-D0D71EEC047A}C:\program files\autodesk\maya2020\bin\maya.exe] => (Allow) C:\program files\autodesk\maya2020\bin\maya.exe (Autodesk, Inc. -> Autodesk)
FirewallRules: [UDP Query User{44455535-6DA7-40C1-986D-939C13923D05}C:\program files\autodesk\maya2020\bin\maya.exe] => (Allow) C:\program files\autodesk\maya2020\bin\maya.exe (Autodesk, Inc. -> Autodesk)
FirewallRules: [TCP Query User{421DFA94-5441-4401-A031-471831E276A0}C:\users\vitek\appdata\local\temp\nsa90cc.tmp\setupbulanci.exe] => (Allow) C:\users\vitek\appdata\local\temp\nsa90cc.tmp\setupbulanci.exe => No File
FirewallRules: [UDP Query User{4B6CB8CC-EEB7-4059-B420-ED10402B664A}C:\users\vitek\appdata\local\temp\nsa90cc.tmp\setupbulanci.exe] => (Allow) C:\users\vitek\appdata\local\temp\nsa90cc.tmp\setupbulanci.exe => No File
FirewallRules: [{CE345F40-7E8E-4484-9EFC-79993ABB5A19}] => (Block) C:\users\vitek\appdata\local\temp\nsa90cc.tmp\setupbulanci.exe => No File
FirewallRules: [{4A869FE5-8FBC-4134-9575-468B136090D7}] => (Block) C:\users\vitek\appdata\local\temp\nsa90cc.tmp\setupbulanci.exe => No File
FirewallRules: [TCP Query User{195BEA4D-62F6-4F07-855B-5A8BCE741C50}C:\users\vitek\appdata\local\temp\nspa67.tmp\setupbulanci.exe] => (Allow) C:\users\vitek\appdata\local\temp\nspa67.tmp\setupbulanci.exe => No File
FirewallRules: [UDP Query User{2B4AAFFC-7935-47B5-8593-B5B3A79CC126}C:\users\vitek\appdata\local\temp\nspa67.tmp\setupbulanci.exe] => (Allow) C:\users\vitek\appdata\local\temp\nspa67.tmp\setupbulanci.exe => No File
FirewallRules: [{3EE39C92-0419-4CE3-8F80-809BEF4D90BD}] => (Block) C:\users\vitek\appdata\local\temp\nspa67.tmp\setupbulanci.exe => No File
FirewallRules: [{0DE23D3C-8043-4BDC-AFE2-91D5441A502C}] => (Block) C:\users\vitek\appdata\local\temp\nspa67.tmp\setupbulanci.exe => No File
FirewallRules: [TCP Query User{EED242D5-F31F-402E-974F-B36071FFF315}C:\users\visitor\appdata\roaming\zoom\bin\zoom.exe] => (Allow) C:\users\visitor\appdata\roaming\zoom\bin\zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [UDP Query User{76078AC7-00DC-4385-8D6A-BB852792AFF5}C:\users\visitor\appdata\roaming\zoom\bin\zoom.exe] => (Allow) C:\users\visitor\appdata\roaming\zoom\bin\zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{9A6280F5-CFB8-4C68-835B-AFF96298ED40}] => (Block) C:\users\visitor\appdata\roaming\zoom\bin\zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{647B69D2-2046-4C26-98B6-45CCDA620359}] => (Block) C:\users\visitor\appdata\roaming\zoom\bin\zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [TCP Query User{7CE1B621-A1B9-4B8B-8C64-DF39E316372A}C:\users\kantn\appdata\roaming\zoom\bin\zoom.exe] => (Allow) C:\users\kantn\appdata\roaming\zoom\bin\zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [UDP Query User{2D1D5977-59C7-448F-A1A3-34EB53DB2965}C:\users\kantn\appdata\roaming\zoom\bin\zoom.exe] => (Allow) C:\users\kantn\appdata\roaming\zoom\bin\zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{DEB9BE3E-3B4A-47DE-BC1C-4FA3FF042651}] => (Block) C:\users\kantn\appdata\roaming\zoom\bin\zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{54819450-D7B7-482F-8497-E74E10911853}] => (Block) C:\users\kantn\appdata\roaming\zoom\bin\zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{0924CB2A-ABBC-4B11-878E-966CCAEE89D2}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{CF95093A-5D59-4BCB-B45C-9D04E1FE7848}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{992AFCF0-E69E-4391-A589-5C46EF9B801F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{10CC430E-63F5-43DC-89FD-5AFF2F65D713}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{1B0283EA-85C4-45A7-A16B-7A198C8002ED}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{29C4A023-25C9-4325-BCA6-406CDC40E408}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{AC93E133-1C5C-4651-A242-75B56D526EE3}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{20CC4A76-F9D9-49D0-8146-BA4B6BC59CE7}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{3D7E5998-4FD7-471B-B60A-E9CFF03F5CC6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{902E96C8-9953-4B7D-A92D-31365D06D696}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{3B26D5A0-E94B-4457-B80A-286E4208EC1D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{5F869308-4BEA-427E-A942-E4A08BEBA81C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8AF0F55E-5CDB-4AA9-B20D-8FB6607EDF4D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{7477326B-3B78-40D0-B0F1-2A30C7DBF550}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{6E787487-39A1-4F5E-87C8-A144C59C4D8D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{1AB1442C-8953-49C3-851C-4261A396234B}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{80BA287D-EB57-4EB3-BDB3-B0245CE7A79B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{224F082F-F0B9-408E-99B3-48058A6ED50C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A816EB3E-9AA0-4D0E-88DC-3C35072DA271}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{7F3B2C71-DC3B-475A-AB55-96508A12E65F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{E466C8C4-FEAE-4219-828D-587E088CCC54}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{C626F5A1-65F2-4103-A323-FDEC8016493D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1C385B4D-D55F-4478-995C-645DF7E19A80}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{29A42A75-5F3A-4AE6-BE3D-86FA3331CA69}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.180.699.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{3D5022E0-6DE9-482E-9903-D4B41CF2F476}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

24-02-2022 15:57:24 Scheduled Checkpoint
25-02-2022 20:09:50 Installed Strawberry Perl (64-bit)
07-03-2022 12:33:24 Scheduled Checkpoint

==================== Faulty Device Manager Devices ============

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: LogMeIn Hamachi Virtual Ethernet Adapter
Description: LogMeIn Hamachi Virtual Ethernet Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: LogMeIn Inc.
Service: Hamachi
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: ========================

Application errors:
==================
Error: (03/07/2022 07:45:04 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Skipping: Eap method DLL path validation failed. Error: typeId=43, authorId=9, vendorId=0, vendorType=0

Error: (03/07/2022 07:45:04 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Skipping: Eap method DLL path validation failed. Error: typeId=25, authorId=9, vendorId=0, vendorType=0

Error: (03/07/2022 07:45:04 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Skipping: Eap method DLL path validation failed. Error: typeId=17, authorId=9, vendorId=0, vendorType=0

Error: (03/07/2022 07:45:04 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Skipping: Eap method DLL path validation failed. Error: typeId=43, authorId=9, vendorId=0, vendorType=0

Error: (03/07/2022 07:45:04 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Skipping: Eap method DLL path validation failed. Error: typeId=25, authorId=9, vendorId=0, vendorType=0

Error: (03/07/2022 07:45:04 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Skipping: Eap method DLL path validation failed. Error: typeId=17, authorId=9, vendorId=0, vendorType=0

Error: (03/07/2022 07:45:04 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Skipping: Eap method DLL path validation failed. Error: typeId=43, authorId=9, vendorId=0, vendorType=0

Error: (03/07/2022 07:45:04 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY)
Description: Skipping: Eap method DLL path validation failed. Error: typeId=25, authorId=9, vendorId=0, vendorType=0


System errors:
=============
Error: (03/07/2022 07:45:22 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Intel(R) PROSet/Wireless Zero Configuration Service service terminated with the following error: 
%%2147770990

Error: (03/07/2022 07:44:57 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 19:36:51 on ‎07/‎03/‎2022 was unexpected.

Error: (03/07/2022 07:42:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The HP Hotkey UWP Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.

Error: (03/07/2022 07:42:06 PM) (Source: IntcOED) (EventID: 154) (User: )
Description: Event-ID 154

Error: (03/07/2022 07:42:06 PM) (Source: IntcOED) (EventID: 154) (User: )
Description: Event-ID 154

Error: (03/07/2022 07:42:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The HP Network HSA Service service failed to start due to the following error: 
Insufficient system resources exist to complete the requested service.

Error: (03/07/2022 07:42:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The HP Diagnostics HSA Service service failed to start due to the following error: 
The paging file is too small for this operation to complete.

Error: (03/07/2022 07:41:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The HP Network HSA Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service.


CodeIntegrity:
===============
Date: 2022-03-07 19:47:15
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Sophos\Sophos Anti-Virus\WSCClient.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info =========================== 

BIOS: HP N75 Ver. 01.53 11/19/2021
Motherboard: HP 8079
Processor: Intel(R) Core(TM) i7-6500U CPU @ 2.50GHz
Percentage of memory in use: 31%
Total physical RAM: 16264.59 MB
Available physical RAM: 11208.61 MB
Total Virtual: 18696.59 MB
Available Virtual: 13701.68 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:457.64 GB) (Free:194.84 GB) NTFS
Drive d: (Recovery Image) (Fixed) (Total:15.86 GB) (Free:2.05 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.99 GB) FAT32

\\?\Volume{76536cd7-f9c0-4341-b4b2-d00ca3200c18}\ (Windows RE tools) (Fixed) (Total:0.96 GB) (Free:0.23 GB) NTFS
\\?\Volume{e84010f0-d5dd-440a-bfd7-5d1c95519442}\ (SYSTEM) (Fixed) (Total:0.35 GB) (Free:0.26 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: 13340061)

Partition: GPT.

==================== End of Addition.txt =======================