Conversation Extreme Lag at Start Up

Dyvenge · Jun 16, 2017

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-06-2017 01
Ran by garar (16-06-2017 18:26:00)
Running from C:\Users\garar\Downloads
Windows 10 Home Version 1703 (X64) (2017-06-02 22:22:46)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-1963327732-3332141323-2774556287-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1963327732-3332141323-2774556287-503 - Limited - Disabled)
garar (S-1-5-21-1963327732-3332141323-2774556287-1001 - Administrator - Enabled) => C:\Users\garar
Guest (S-1-5-21-1963327732-3332141323-2774556287-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Bitdefender Antivirus (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371}
AS: Bitdefender Antispyware (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Bitdefender Firewall (Enabled) {078AF241-05A3-0EFF-40E0-3E0D69EA140A}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7 Days to Die (HKLM\...\Steam App 251570) (Version: - The Fun Pimps)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.0.1.188 - Adobe Systems Incorporated)
Adobe Flash Player 26 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 26.0.0.126 - Adobe Systems Incorporated)
Adobe Illustrator CC 2017 (HKLM-x32\...\ILST_21_0_2) (Version: 21.0.2 - Adobe Systems Incorporated)
Adobe Photoshop CC 2017 (HKLM-x32\...\PHSP_18_1) (Version: 18.1.0 - Adobe Systems Incorporated)
Ansel (Version: 382.05 - NVIDIA Corporation) Hidden
Apple Application Support (32-bit) (HKLM-x32\...\{E92BB800-BCC5-4C25-8102-AC2C3B7C7C1E}) (Version: 5.5 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{9C912B1E-06DD-43EF-BB2B-45CB2C88BAAE}) (Version: 5.5 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{0A596141-97D5-45FA-9281-98DFAF48D579}) (Version: 10.3.2.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{52D87F32-70E4-4348-8148-C0B9F35B1314}) (Version: 2.3.0.177 - Apple Inc.)
ARK: Survival Evolved (HKLM\...\Steam App 346110) (Version: - Studio Wildcard)
Autodesk Fusion 360 (HKU\S-1-5-21-1963327732-3332141323-2774556287-1001\...\73e72ada57b7480280f7a6f4a289729f) (Version: 2.0.2685 - Autodesk, Inc.)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 20.0.29.1517 - Bitdefender)
Bitdefender Internet Security 2017 (HKLM\...\Bitdefender) (Version: 21.0.25.92 - Bitdefender)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Cartographer's Annual Vol 3 (HKLM-x32\...\Cartographer's Annual Vol 3) (Version: 1.0 - ProFantasy Software)
Cartographer's Annual Vol 3 (x32 Version: 1.0 - ProFantasy Software) Hidden
CC3 (HKLM-x32\...\CC3) (Version: 3.42 - ProFantasy Software)
CC3 (x32 Version: 3.42 - ProFantasy Software) Hidden
CC3+ (HKLM-x32\...\CC3+) (Version: 3.74 - ProFantasy Software)
CC3+ (x32 Version: 3.74 - ProFantasy Software) Hidden
Conan Exiles (HKLM\...\Steam App 440900) (Version: - Funcom)
DayZ (HKLM\...\Steam App 221100) (Version: - Bohemia Interactive)
Deus Ex: Mankind Divided™ (HKLM\...\Steam App 337000) (Version: - Eidos Montreal)
Discord (HKU\S-1-5-21-1963327732-3332141323-2774556287-1001\...\Discord) (Version: 0.0.297 - Hammer & Chisel, Inc.)
DraftSight 2016 SP2 x64 (HKLM\...\{459B4886-8CB0-4E9B-87D9-D35CC80B1BCB}) (Version: 16.2.0060 - Dassault Systemes)
Dungeon Designer 3 (HKLM-x32\...\Dungeon Designer 3) (Version: 3.0 - ProFantasy Software)
Dungeon Designer 3 (x32 Version: 3.0 - ProFantasy Software) Hidden
Dungeon Designer 3 for CC3+ (HKLM-x32\...\Dungeon Designer 3 for CC3+) (Version: 3.0 - ProFantasy Software)
Dungeon Designer 3 for CC3+ (x32 Version: 3.0 - ProFantasy Software) Hidden
FaceRig (HKLM\...\Steam App 274920) (Version: - Holotech Studios)
FaceRig Virtual Video driver version 1.0.1.1000 (HKLM-x32\...\{7D6A1A0F-F57E-4C6B-9331-86CBC7D5C787}_is1) (Version: 1.0.1.1000 - Adoriasoft LLC)
FastCAD (HKLM-x32\...\FastCAD) (Version: - )
FINAL FANTASY XIV: A Realm Reborn (HKLM\...\Steam App 39210) (Version: - SQUARE ENIX)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.110 - Google Inc.)
Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
iTunes (HKLM\...\{F0C7385A-9D20-45F3-8101-05D383885180}) (Version: 12.6.1.25 - Apple Inc.)
Logitech Gaming Software 8.87 (HKLM\...\Logitech Gaming Software) (Version: 8.87.116 - Logitech Inc.)
Microsoft OneDrive (HKU\S-1-5-21-1963327732-3332141323-2774556287-1001\...\OneDriveSetup.exe) (Version: 17.3.6816.0313 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Minion (HKU\S-1-5-21-1963327732-3332141323-2774556287-1001\...\{Minion}}_is1) (Version: 3.0 - Good Game Mods LLC)
Mordheim: City of the Damned (HKLM\...\Steam App 276810) (Version: - Rogue Factor)
Mozilla Firefox 53.0.3 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 53.0.3 (x86 en-US)) (Version: 53.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 53.0 - Mozilla)
MSI DragonEye (HKLM\...\{7116875E-F251-4C33-AB3F-37DE05B15595}_is1) (Version: 0.0.2.3 - MSI)
MSI Gaming APP (HKLM-x32\...\{E0229316-E73B-484B-B9E0-45098AB38D8C}}_is1) (Version: 6.0.0.21 - MSI)
NVIDIA 3D Vision Controller Driver 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Driver 382.05 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 382.05 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.2.0.96 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.2.0.96 - NVIDIA Corporation)
NVIDIA Graphics Driver 382.05 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 382.05 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.34.26 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.26 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (Version: 3.2.0.96 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 2.0.0.0 - NVIDIA Corporation) Hidden
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.104.211.0 - Overwolf Ltd.)
Overwolf.Setup.VC100CRTx64.Dist (HKLM\...\{EC9D5554-6852-4A55-81BB-AC02C7A8CFED}) (Version: 1.0.0 - Overwolf)
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 2.20.17.413 - Razer Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6235 - Realtek Semiconductor Corp.)
Rust (HKLM\...\Steam App 252490) (Version: - Facepunch Studios)
SHIELD Streaming (Version: 7.1.0350 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.2.0.96 - NVIDIA Corporation) Hidden
SketchUp 2016 (HKLM\...\{E2B66CF6-ABA0-4E5F-B426-7478B18301AE}) (Version: 16.1.1449 - Trimble Navigation Limited)
Skype™ 7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.105 - Skype Technologies S.A.)
Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 4.1.3883.0 - Hi-Rez Studios)
Speccy (HKLM\...\Speccy) (Version: 1.30 - Piriform)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Stellaris (HKLM\...\Steam App 281990) (Version: - Paradox Development Studio)
Symbol Set 4 (HKLM-x32\...\Symbol Set 4) (Version: 1.0 - ProFantasy Software)
Symbol Set 4 (x32 Version: 1.0 - ProFantasy Software) Hidden
Symbol Set 4 for CC3+ (HKLM-x32\...\Symbol Set 4 for CC3+) (Version: 1.0 - ProFantasy Software)
Symbol Set 4 for CC3+ (x32 Version: 1.0 - ProFantasy Software) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios)
The Witcher 3: Wild Hunt (HKLM\...\Steam App 292030) (Version: - CD PROJEKT RED)
Total War: WARHAMMER (HKLM\...\Steam App 364360) (Version: - Creative Assembly)
Virtual Battlemap (HKLM\...\Steam App 496490) (Version: - Dragom)
Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)
Wacom Tablet (HKLM\...\Wacom Tablet Driver) (Version: 6.3.15-3 - Wacom Technology Corp.)
WebM Project Directshow Filters (HKU\S-1-5-21-1963327732-3332141323-2774556287-1001\...\webmdshow) (Version: - )
WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.)
Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)
Yousician Launcher version 1.0 (HKLM-x32\...\{EF45EAE9-523E-47C3-8634-A81923B11DD5}_is1) (Version: 1.0 - Yousician)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1963327732-3332141323-2774556287-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-50903CC8184B}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => No File
CustomCLSID: HKU\S-1-5-21-1963327732-3332141323-2774556287-1001_Classes\CLSID\{C4F0910E-E0B4-4E68-8086-452730C7A26A}\InprocServer32 -> C:\Users\garar\AppData\Local\Autodesk\webdeploy\production\890691bd91ea0296c1b94572fdc7dda4ba2e48f0\NPreview10.dll ()
CustomCLSID: HKU\S-1-5-21-1963327732-3332141323-2774556287-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {039BA6D3-8C5A-4B2A-BBC1-E300F1212DC3} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-02-14] (Apple Inc.)
Task: {08CA42E2-97F3-4796-B785-49B82165C8B8} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2017-04-11] (Bitdefender)
Task: {09DF2923-C004-4078-81E8-584FF7904A7B} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-12-12] (NVIDIA Corporation)
Task: {1C6A0260-BF72-4127-9C64-3A611EB0AE47} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-12-12] (NVIDIA Corporation)
Task: {596FF5A7-2CC4-4F11-BA0B-E240F07F14B3} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-12-12] (NVIDIA Corporation)
Task: {6BE31F69-634B-4608-84DB-8C56A8CBBBB7} - System32\Tasks\MSISW_Host => C:\WINDOWS\SysWOW64\muachost.exe [2015-08-18] (MSI)
Task: {6D115346-D0E7-4D8B-B7CC-E7CFEE48F28F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-06] (Google Inc.)
Task: {82CBF02E-492B-4B9B-AE24-8547E9C24048} - System32\Tasks\MSIOSDx64_Host => C:\Program Files (x86)\MSI\Gaming APP\OSD\x64\MsiGamingOSD_x64.exe [2016-07-28] (Micro-Star INT'L CO., LTD.)
Task: {8E7F2DBD-C62E-468B-ABB9-BFE4A1EB38E7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-25] (Adobe Systems Incorporated)
Task: {A6F9F717-E863-46D2-8A24-E316F725ACCC} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-gararion@gmail.com => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated)
Task: {AD209D86-A87A-4BD8-8531-7C01E5F35F8F} - System32\Tasks\MSIOSDx86_Host => C:\Program Files (x86)\MSI\Gaming APP\OSD\x86\MsiGamingOSD_x86.exe [2016-07-28] (Micro-Star INT'L CO., LTD.)
Task: {CAC88A5E-30E5-4003-A18B-A782B2047FCF} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-12-12] (NVIDIA Corporation)
Task: {D106EE76-2C6C-454F-830E-39B86188C510} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-12-12] (NVIDIA Corporation)
Task: {D4E4F3D0-73FA-4DB1-A62C-B74DBC4F9C8E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-06] (Google Inc.)
Task: {D7A0A585-1BF5-478E-A077-41742DD77CC2} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-12-12] (NVIDIA Corporation)
Task: {D88387F4-B0DC-4F32-AB50-B67B05A26601} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-06-13] (Adobe Systems Incorporated)
Task: {D96FABF1-5976-4277-885E-2FCB67B8E38B} - System32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C => C:\Program Files\Bitdefender\Bitdefender 2017\bdagent.exe [2017-04-20] (Bitdefender)
Task: {FB408926-79D7-4805-89E4-20656B150B98} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2016-12-12] (NVIDIA Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\MSISW_Host.job => C:\WINDOWS\SysWoW64\muachost.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\garar\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Моzillа Firеfох.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) <===== Cyrillic
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firеfох.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) <===== Cyrillic

==================== Loaded Modules (Whitelisted) ==============

2017-06-03 22:24 - 2013-09-03 14:29 - 00111832 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\bdmetrics.dll
2017-06-03 22:24 - 2017-02-07 12:34 - 01008448 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_001_001\ashttpbr.mdl
2017-06-03 22:24 - 2017-02-07 12:34 - 00541952 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_001_001\ashttpdsp.mdl
2017-06-03 22:24 - 2017-02-07 12:34 - 03243920 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_001_001\ashttpph.mdl
2017-06-03 22:24 - 2017-02-07 12:34 - 01544568 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_001_001\ashttprbl.mdl
2017-05-09 00:44 - 2017-05-09 00:44 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2017-05-09 00:44 - 2017-05-09 00:44 - 01354040 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-12-10 16:04 - 2016-12-12 19:36 - 04489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2016-12-10 16:04 - 2016-12-12 19:35 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-09-02 23:37 - 2011-10-29 09:59 - 00918448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe
2016-12-24 20:29 - 2016-01-11 13:30 - 01349824 _____ () C:\Program Files\Tablet\Wacom\libxml2.dll
2017-03-18 16:58 - 2017-03-18 16:58 - 00138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2016-08-31 22:16 - 2016-06-14 16:35 - 00187392 _____ () C:\Program Files (x86)\MSI\Gaming APP\OSD\x64\D3D11FontDraw.dll
2016-10-25 09:57 - 2016-10-25 09:57 - 00491184 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2017-03-18 16:59 - 2017-03-18 22:31 - 01731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-06-03 22:24 - 2017-05-25 15:37 - 00023328 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\lang\en-US\bdsystray.txtui
2015-03-06 20:07 - 2015-03-06 20:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2016-08-29 20:17 - 2016-08-29 20:17 - 01096824 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2015-03-06 20:07 - 2015-03-06 20:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2016-08-29 20:17 - 2016-08-29 20:17 - 00241784 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2017-05-09 03:05 - 2017-05-09 03:05 - 00092472 _____ () D:\Program Files\iTunes\zlib1.dll
2017-05-09 03:05 - 2017-05-09 03:05 - 01354040 _____ () D:\Program Files\iTunes\libxml2.dll
2017-06-07 19:37 - 2017-06-07 19:37 - 00074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.17.420.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-06-07 19:37 - 2017-06-07 19:37 - 00201728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.17.420.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-06-07 19:37 - 2017-06-07 19:37 - 43318784 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.17.420.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-06-07 19:37 - 2017-06-07 19:37 - 02427904 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.17.420.0_x64__kzf8qxf38zg5c\skypert.dll
2017-06-03 22:24 - 2017-05-25 15:36 - 00022304 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\lang\en-US\bdaphconp.txtui
2017-06-03 22:24 - 2017-04-20 18:27 - 00066240 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\bddpsp.dll
2016-09-02 23:37 - 2017-06-16 17:59 - 00023552 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.18\PEbiosinterface32.dll
2016-09-02 23:37 - 2010-06-29 10:58 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.18\ATKEX.dll
2016-12-10 16:05 - 2016-12-12 19:35 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-12-10 16:04 - 2016-12-12 19:35 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-12-10 16:04 - 2016-12-12 19:35 - 03774400 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2016-08-31 22:16 - 2016-06-14 16:35 - 00163328 _____ () C:\Program Files (x86)\MSI\Gaming APP\OSD\x86\D3D11FontDraw.dll
2017-06-02 18:25 - 2017-05-16 21:54 - 00678176 _____ () D:\Program Files (x86)\Steam\SDL2.dll
2016-10-13 19:15 - 2016-08-31 21:02 - 04969248 _____ () D:\Program Files (x86)\Steam\v8.dll
2017-06-13 16:08 - 2017-06-08 01:42 - 02485536 _____ () D:\Program Files (x86)\Steam\video.dll
2016-10-13 19:15 - 2016-08-31 21:02 - 01563936 _____ () D:\Program Files (x86)\Steam\icui18n.dll
2016-10-13 19:15 - 2016-08-31 21:02 - 01195296 _____ () D:\Program Files (x86)\Steam\icuuc.dll
2016-10-13 19:15 - 2016-01-27 03:49 - 02549760 _____ () D:\Program Files (x86)\Steam\libavcodec-56.dll
2016-10-13 19:15 - 2016-01-27 03:49 - 00491008 _____ () D:\Program Files (x86)\Steam\libavformat-56.dll
2016-10-13 19:15 - 2016-01-27 03:49 - 00332800 _____ () D:\Program Files (x86)\Steam\libavresample-2.dll
2016-10-13 19:15 - 2016-01-27 03:49 - 00442880 _____ () D:\Program Files (x86)\Steam\libavutil-54.dll
2016-10-13 19:15 - 2016-01-27 03:49 - 00485888 _____ () D:\Program Files (x86)\Steam\libswscale-3.dll
2017-06-13 16:08 - 2017-06-08 01:42 - 00877856 _____ () D:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-10-13 19:15 - 2016-07-04 18:17 - 00266560 _____ () D:\Program Files (x86)\Steam\openvr_api.dll
2017-01-13 19:52 - 2017-01-04 15:28 - 01958912 _____ () C:\Users\garar\AppData\Local\Discord\app-0.0.297\ffmpeg.dll
2017-01-14 16:57 - 2017-01-14 16:57 - 01082880 _____ () \\?\C:\Users\garar\AppData\Roaming\discord\0.0.297\modules\discord_voice\discord_voice.node
2017-01-14 16:57 - 2017-01-14 16:57 - 03750400 _____ () \\?\C:\Users\garar\AppData\Roaming\discord\0.0.297\modules\discord_voice\libdiscord.dll
2017-01-14 16:57 - 2017-01-14 16:57 - 00914432 _____ () \\?\C:\Users\garar\AppData\Roaming\discord\0.0.297\modules\discord_utils\discord_utils.node
2017-01-14 16:57 - 2017-01-14 16:57 - 01127424 _____ () \\?\C:\Users\garar\AppData\Roaming\discord\0.0.297\modules\discord_toaster\discord_toaster.node
2017-03-14 08:31 - 2017-03-14 08:31 - 52051544 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\libcef.dll
2017-06-02 18:25 - 2017-05-08 15:45 - 69516064 _____ () D:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2017-06-13 16:08 - 2017-05-16 21:54 - 00678176 _____ () D:\Program Files (x86)\Steam\bin\cef\cef.win7\SDL2.dll
2017-06-13 16:08 - 2017-06-08 01:42 - 00385312 _____ () D:\Program Files (x86)\Steam\steam.dll
2017-06-06 04:21 - 2017-06-06 04:21 - 68886856 _____ () C:\Program Files (x86)\Overwolf\0.104.211.0\libcef.DLL
2017-01-13 19:52 - 2017-01-04 15:28 - 02278912 _____ () C:\Users\garar\AppData\Local\Discord\app-0.0.297\libglesv2.dll
2017-01-13 19:52 - 2017-01-04 15:28 - 00096768 _____ () C:\Users\garar\AppData\Local\Discord\app-0.0.297\libegl.dll
2016-12-10 16:05 - 2016-12-12 10:36 - 00525760 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2016-12-10 16:05 - 2016-12-12 10:36 - 00254008 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2016-12-10 16:05 - 2016-12-12 10:36 - 02808888 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2016-12-10 16:05 - 2016-12-12 10:36 - 00384568 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2016-12-10 16:05 - 2016-12-12 10:36 - 00447424 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
2016-12-10 16:05 - 2016-12-12 10:36 - 00336832 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2016-12-10 16:05 - 2016-12-12 10:36 - 01003456 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node
2016-12-24 21:21 - 2016-12-12 10:36 - 00956472 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSDKAPINode.node
2017-01-25 20:07 - 2017-01-25 20:07 - 00118272 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\fs-ext\build\Release\fs-ext.node
2017-01-25 20:07 - 2017-01-25 20:07 - 00214528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node
2017-01-25 20:06 - 2017-01-25 20:06 - 00117248 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ref\build\Release\binding.node
2017-01-25 20:07 - 2017-01-25 20:07 - 00125952 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ffi\build\Release\ffi_bindings.node
2017-03-14 08:35 - 2017-03-14 08:35 - 00099416 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin.dll
2017-01-25 20:07 - 2017-01-25 20:07 - 00086528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\idle-gc\build\Release\idle-gc.node
2017-06-16 18:05 - 2017-06-16 18:05 - 00148992 _____ () \\?\C:\Users\garar\AppData\Local\Temp\7EBD.tmp.node
2017-01-14 16:57 - 2017-05-14 18:05 - 02658296 _____ () \\?\C:\Users\garar\AppData\Roaming\discord\0.0.297\modules\discord_rpc\discord_rpc.node
2017-01-14 16:57 - 2017-03-26 00:37 - 02665976 _____ () \\?\C:\Users\garar\AppData\Roaming\discord\0.0.297\modules\discord_contact_import\discord_contact_import.node

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\garar\Downloads\FRST64.exe:BDU [0]
AlternateDataStreams: C:\Users\garar\Downloads\iTunes64Setup.exe:BDU [0]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2016-09-01 00:08 - 2017-06-16 18:01 - 00000737 _____ C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1963327732-3332141323-2774556287-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\garar\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\desktop background.bmp
DNS Servers: 216.104.96.22 - 216.104.98.222
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKU\S-1-5-21-1963327732-3332141323-2774556287-1001\...\StartupApproved\Run: => "Skype"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{25E8D2A9-7A57-4E43-AEB5-9706BF9B5BBE}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{B74E877A-00DF-42A6-9D43-7A6BF619EBE5}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{9D3B0EA8-7DBE-410C-8275-E3C710F529CA}] => (Allow) D:\Program Files\iTunes\iTunes.exe
FirewallRules: [{AD80FFBD-E663-4E1D-9D35-328FCC1E1573}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{C6818391-4746-41D6-838E-DF4FB54C3F2A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{9E14210C-11B3-4AC7-8509-0EAE983E9E88}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{39868032-2A36-4398-9B97-F22F3EC54522}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{D99FD467-7ED5-4FF8-AB02-0396F96D746D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{53282D8E-34E5-4A2D-9295-55D2EC0F8BA4}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Total War WARHAMMER\launcher\launcher.exe
FirewallRules: [{41FDB1C1-70C3-4AC1-9AAD-FC01A43F177D}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Total War WARHAMMER\launcher\launcher.exe
FirewallRules: [{EF178163-E131-40E3-86AF-3E12DF0F4F39}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe
FirewallRules: [{ECE02993-5E56-48D8-9BE9-99701BECF084}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe
FirewallRules: [{4245C7F4-6E2F-4988-8A01-91FA6DA21957}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox.exe
FirewallRules: [{733D40B4-5824-44CF-81C9-B0DAA43072B1}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox.exe
FirewallRules: [{0D581DD4-57F3-4F30-BC1F-ACBD7CABBB72}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox_BE.exe
FirewallRules: [{4AC0C764-F675-4252-ABEC-D913788A6685}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox_BE.exe
FirewallRules: [{01D511EC-4753-449D-B604-19941190FF1A}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Rust\Rust.exe
FirewallRules: [{65E72704-92A8-48A5-ADE7-BF2DBF51E7ED}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Rust\Rust.exe
FirewallRules: [{55CD0DF2-F626-42DC-BB68-11FD0B096BCF}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{6E6EA262-6DE5-45A3-A216-ED33C6E9B4F6}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{635F0805-D55A-4FFC-BA87-B7AF4B04321A}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{9EF33A12-27C7-431C-9EA1-368DA0E20262}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{1D6552BE-219B-4634-A06A-A1C074078F51}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Virtual Battlemap\Virtual_Battlemap.exe
FirewallRules: [{FFF6CC80-6D7C-4134-BEBF-EF0BC25A569D}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Virtual Battlemap\Virtual_Battlemap.exe
FirewallRules: [{97A4C221-3E6F-4DBB-B967-B4486710869B}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{543E41C2-8F9E-47D3-B862-414515EA4835}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{7C83D8CD-07DB-464C-B191-E8D1F911DE70}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Stellaris\stellaris.exe
FirewallRules: [{E0DF1982-DD35-4A77-B009-31A47E06B81A}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Stellaris\stellaris.exe
FirewallRules: [{1D8B9CB5-FEE4-487B-A4AB-CE8C7C2CF91E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{6A27BEF5-203D-4417-B605-A425AF672A8A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{C3BA010F-B896-470F-8C6B-0C0195BB2057}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{4F9A50C9-55D2-492A-949F-4387D027C528}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{6DA37731-1CC0-4FB9-848B-3C83F109FDA8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{2A1510DE-1F87-484E-A997-641AF94B44A9}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\mordheim\mordheim.exe
FirewallRules: [{BCAE236F-5B01-4976-ACA2-7E769256ED68}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\mordheim\mordheim.exe
FirewallRules: [{D3EABB33-BF74-4857-A29F-B972BB836804}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\FaceRig\Bin\FaceRig.exe
FirewallRules: [{ADE9444F-70D4-4C81-9323-8F5DE4873CF9}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\FaceRig\Bin\FaceRig.exe
FirewallRules: [{756CED4F-A5E4-46AA-A57D-FD7A8152FDBD}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\FaceRig\Bin\Launcher.exe
FirewallRules: [{7ECF4F8A-9996-4754-8AF1-31DBF09A55C2}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\FaceRig\Bin\Launcher.exe
FirewallRules: [{A5F85C36-01FA-43D8-A9EF-BE2193B219BC}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{FF79128C-B506-4C42-A0D2-D31B6FE4A9EA}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{AEF3D32B-83B4-4A5F-AC78-C49618A77052}] => (Allow) LPort=26789
FirewallRules: [{78B8D7FD-6E27-4343-9F02-E1D9DAB88487}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{1FFFE87C-3499-4D03-88A7-43A03B029FA9}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{97D7D01F-0A3E-49F8-A9B5-8D1A36AAE96F}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{DB3E6808-1938-4546-A483-1EBEB0D144C8}] => (Allow) D:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{4381A743-4EA3-420D-9B5F-B6259724C542}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\The Witcher 3\bin\x64\witcher3.exe
FirewallRules: [{2BFBA710-B0AF-4B0B-A413-E1B22495DAA5}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\The Witcher 3\bin\x64\witcher3.exe
FirewallRules: [{A9E38D39-4CF9-4D04-AE4D-2BE704B28001}] => (Allow) C:\Users\garar\AppData\Local\Temp\MPCOnline\MPCDownload.exe
FirewallRules: [{539E7F19-8BB5-4547-B127-66A31783A806}] => (Allow) C:\Users\garar\AppData\Local\Temp\MPCOnline\MPCDownload.exe
FirewallRules: [TCP Query User{559D2F46-64CE-4DBE-AFFD-2BACAC782DD9}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{90921C7A-7C2A-46A4-89D0-5E30DBC95C93}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [{FEF6FE77-66CB-4C59-9FC6-65D4DA6985F2}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\7 Days To Die\7DaysToDie_EAC.exe
FirewallRules: [{2B49C130-3B5B-407B-867D-346A7C8C2ADE}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\7 Days To Die\7DaysToDie_EAC.exe
FirewallRules: [{0E71FA5C-ECA8-4E6A-B72D-ABB1414923B8}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\7 Days To Die\7DaysToDie.exe
FirewallRules: [{CA9DCE9F-3AC9-45AA-ACFA-5B56DFB7354F}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\7 Days To Die\7DaysToDie.exe
FirewallRules: [{FEB88335-EB47-4738-A818-1C96282951BD}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\7 Days To Die\7dLauncher.exe
FirewallRules: [{389412EE-638F-4ADF-B68D-78533509FF56}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\7 Days To Die\7dLauncher.exe
FirewallRules: [{1347B0A2-CEC1-44D0-BC4E-3D1FCAEEF855}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{0BA32144-ECBC-499D-B4F3-1C316FDBE672}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Deus Ex Mankind Divided\retail\DXMD.exe
FirewallRules: [{09D33874-2C51-458E-85E9-4D2C4DAC04C3}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Deus Ex Mankind Divided\retail\DXMD.exe

==================== Restore Points =========================

ATTENTION: System Restore is disabled

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (06/16/2017 06:03:35 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-C5IISBO)
Description: Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (06/16/2017 06:03:34 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-C5IISBO)
Description: Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (06/16/2017 06:03:34 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-C5IISBO)
Description: Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (06/16/2017 06:03:34 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-C5IISBO)
Description: Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (06/16/2017 06:03:34 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-C5IISBO)
Description: Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (06/16/2017 06:03:34 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-C5IISBO)
Description: Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (06/16/2017 06:03:34 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-C5IISBO)
Description: Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (06/16/2017 06:03:34 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-C5IISBO)
Description: Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (06/16/2017 06:03:34 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-C5IISBO)
Description: Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (06/16/2017 06:03:34 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-C5IISBO)
Description: Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2147024865 See the Microsoft-Windows-TWinUI/Operational log for additional information.

System errors:
=============
Error: (06/16/2017 06:15:08 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Error: (06/16/2017 06:06:42 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The Security Center service hung on starting.

Error: (06/16/2017 06:04:26 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The Delivery Optimization service hung on starting.

Error: (06/16/2017 06:03:36 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-C5IISBO)
Description: The server Microsoft.ZuneMusic_10.17042.14111.0_x64__8wekyb3d8bbwe!Microsoft.ZuneMusic.AppXg7frm9cyrqhbagxce6zrshkx8fn0ycca.mca did not register with DCOM within the required timeout.

Error: (06/16/2017 06:03:35 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-C5IISBO)
Description: Unable to start a DCOM Server: Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy!CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca as Unavailable/Unavailable. The error:
"31"
Happened while starting this command:
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca

Error: (06/16/2017 06:03:34 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-C5IISBO)
Description: Unable to start a DCOM Server: Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy!CortanaUI.AppXzt00mfra6wtcgv5kgrc4cdknqcwtvkyn.mca as Unavailable/Unavailable. The error:
"31"
Happened while starting this command:
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca

Error: (06/16/2017 06:03:34 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-C5IISBO)
Description: Unable to start a DCOM Server: Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy!CortanaUI.AppX6jbm6fjqte5wzzrf5807m7eq0z44q5gf.mca as Unavailable/Unavailable. The error:
"31"
Happened while starting this command:
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca

Error: (06/16/2017 06:03:34 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-C5IISBO)
Description: Unable to start a DCOM Server: Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy!CortanaUI.AppX1g2fzdjyfpzhgqwsaajfp6hm53qh64kg.mca as Unavailable/Unavailable. The error:
"31"
Happened while starting this command:
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca

Error: (06/16/2017 06:03:34 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-C5IISBO)
Description: Unable to start a DCOM Server: Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy!CortanaUI.AppXjxtspbn4351hrtx8tc95e89kaz3h2f1f.mca as Unavailable/Unavailable. The error:
"31"
Happened while starting this command:
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca

Error: (06/16/2017 06:03:34 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-C5IISBO)
Description: Unable to start a DCOM Server: Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy!CortanaUI.AppXd83zmv32qpfkr8ck529dmvphfy0gxdk2.mca as Unavailable/Unavailable. The error:
"31"
Happened while starting this command:
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca

CodeIntegrity:
===================================
Date: 2017-06-16 18:12:18.713
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Overwolf\0.104.211.0\x64\OWExplorer.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-16 18:12:18.708
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Overwolf\0.104.211.0\x64\OWExplorer.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-16 18:12:18.703
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Overwolf\0.104.211.0\x64\OWExplorer.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-16 18:12:18.699
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Overwolf\0.104.211.0\x64\OWExplorer.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-16 18:12:18.694
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Overwolf\0.104.211.0\x64\OWExplorer.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-16 18:12:18.689
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Overwolf\0.104.211.0\x64\OWExplorer.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-16 18:12:13.678
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Overwolf\0.104.211.0\x64\OWExplorer.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-16 18:12:13.674
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Overwolf\0.104.211.0\x64\OWExplorer.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-16 18:12:13.669
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Overwolf\0.104.211.0\x64\OWExplorer.dll that did not meet the Microsoft signing level requirements.

Date: 2017-06-16 18:12:13.665
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Overwolf\0.104.211.0\x64\OWExplorer.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

Processor: Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz
Percentage of memory in use: 26%
Total physical RAM: 16364.13 MB
Available physical RAM: 12021.73 MB
Total Virtual: 17388.13 MB
Available Virtual: 12202.03 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.25 GB) (Free:42.93 GB) NTFS
Drive d: (Storage) (Fixed) (Total:931.51 GB) (Free:538.35 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: CEEBCC53)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 03ED3558)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)

==================== End of Addition.txt ============================

Dyvenge · Jun 16, 2017

Instructions Part 2: Check the Master Boot Record (MBR)
and this twice, it caused blue screen of death both times. Couldn't get to a point where I could save a log.

Dyvenge · Jun 16, 2017

So starting PC I am getting Massive lag. I am also noticing lag when I wake my computer from hibernation. I am not sure if its due to Windows Defender and BitDefender both running (I believe they are as Windows Defender blocked the FRST program, had to override it).

Computer seems to run decently after the first lag. Also seemed to run decently rather quickly after the two blue screens of death. But when I got home from work and woke computer from hibernation it was lagging so bad (believe it restarted while I was at work as no previous windows were open and startup programs were starting up) I had to hard reset it and then the reset seemed to lag as well.

jmarket · Jun 17, 2017

Hey Dyvenge

Sorry to hear you're having issues. I will tag @Malnutrition to assist you. In the meantime let's get you underway with some scans

Zoek Scan

Disable your antivirus prior to this scan.
Download Zoek
Save the file to your desktop.
Right click Zoek.exe and run as administrator. (XP Users double click)
Copy and paste the items in red below and paste them into Zoek.

createsrpoint;
emptyfolderscheck;delete
emptyclsid;
emptyalltemp;
ipconfig /flushdns;b
ResetHosts;
autoclean;

Now hit the run script button.
The log will appear after a reboot, also you can find it on the C: drive.
Post the log in your next reply.

ZHP Diag Scan

Download ZHP Diag to your desktop.

1. Right Click Run as Admin.

2. Click the Options button.

Click on Check All
Then Click Validate
Then click close.

2. Click the Scanner button.

When complete please push the report button.
A notepad will open... copy and paste the report in your next reply.

Please download Junkware Removal Tool and save it on your desktop.

Shut down your anti-virus, anti-spyware, and firewall software now to avoid potential conflicts.

Run the tool by double-clicking it. If you are using Windows Vista or Windows 7, right-click it and select Run as administrator.

The tool will open and start scanning your system.

Please be patient as this can take a while to complete depending on your system's specifications.

On completion, a log is saved to your desktop and will automatically open.

Please post the JRT log.

Malnutrition · Jun 17, 2017

FRST Fix.

Click Here To Download Fixlist.

Download attached fixlist.txt file and save it to the Desktop. NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work. NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system Run FRST/FRST64 and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

Eliminate restrictive settings with this tool.

Temporarily disable your antivirus --- Your antivirus may flag this tool as malware, it is safe to run I assure you.
Download SupRestric.exe save to your desktop.
Close all running programs.
Double click the file to launch it.
Windows: 7/8/10 Vista and run as administrator
Click Yes at any prompt.
The analysis takes only a few moments.
The report is on the desktop ( CTR.txt )
Copy paste report in next reply.
A reboot is needed to complete the repairs.

HijackThis.

1- Please Click HERE to download HijackThis. -- Unzip to your desktop.
2- Right click run as admin.
3- Click on the Main Menu button if not already there.
4- Select Do a system scan and save a logfile.
5- Copy paste the log here.

Dyvenge · Jun 20, 2017

Sorry for delay, I ran the first part that jmarket wanted on friday but i thought it had finished and then restarted computer but didn't get no logs. Then had to leave for weekend. Will run the tests again today when I get a chance to leave computer to run in idle for a bit.

Malnutrition · Jun 22, 2017

Ok, post the logs when ready.

Malnutrition · Jun 26, 2017

@Dyvenge How about an update for us please. :thumbsup:

Malnutrition · Jun 30, 2017

@Dyvenge How about an update please.

Malnutrition · Jul 6, 2017

Hello @Dyvenge

How are you moving along with the instructions? Have you got an update for us?

Please update this thread within 48 hours, or it will be closed. You can however have it re-opened at any time, by sending a private message to a staff member.

Dyvenge

Dyvenge

Dyvenge

Dyvenge

jmarket

PCHF's Almighty Ruler

Malnutrition

Malnurished Admin

Attachments

Dyvenge

Malnutrition

Malnurished Admin

Malnutrition

Malnurished Admin

Malnutrition

Malnurished Admin

Malnutrition

Malnurished Admin

Search

Search

Conversation Extreme Lag at Start Up

We value your privacy