==================== Internet Explorer (Whitelisted) ========== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) Please copy and paste all logs into your post unless otherwise requested. Task: {8B5D0AB1-09DB-4A6C-B739-540592774668} - System32\Tasks\Symantec Endpoint Protection\Symantec Endpoint Protection Error Processor => C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.3.7393.4000.105\Bin\SymErr.exe [91048 2022-02-25] (Symantec Corporation -> Broadcom) The system cannot find the file specified. R2 DtsApo4Service; C:\windows\System32\DTS\PC\APO4x\DtsApo4Service.exe [213432 2021-02-22] (DTS, Inc. -> DTS Inc.) (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Task: {658C5A85-0FD8-4A07-B8D2-05DD4D62B7DA} - System32\Tasks\GoogleUpdateTaskMachineUA{52819A4A-6F97-4F51-A9DF-F8722C17E431} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [168632 2022-05-25] (Google LLC -> Google LLC) This is intended for server use only! R3 oculusvad_oculusvad; C:\windows\System32\drivers\oculusvad.sys [75280 2022-09-19] (Microsoft Windows Hardware Compatibility Publisher -> Windows Win 7 DDK provider) How to play snake game on discord - GeoAD CHR Extension: (AdBlock best ad blocker) - C:\Users\Tyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2022-09-04] HKLM\\Run: [RtkAudUService] => C:\windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_bc81681eb27bc1ae\RtkAudUService64.exe [1231864 2021-02-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor) The welcome screen, featuring amazing artwork! HKU\S-1-5-21-479614032-2295716511-2174497491-1002\\RunOnce: [Uninstall 22.065.0412.0004_1] => C:\windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Tyson\AppData\Local\Microsoft\OneDrive\22.065.0412.0004_1" (No File) 2022-09-13 06:56 - 2021-06-05 22:10 - 000000000 ____D C:\windows\SysWOW64\oobe The file will not be moved unless listed separately.) DNS Servers: 8.8.8.8 - 8.8.4.4 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom.lnk => ":BCD3E320D4" ADS removed successfully 2022-08-22 04:14 - 2022-08-22 04:14 - 000000000 ____D C:\Users\Tyson\AppData\Roaming\Corsair Make sure to take a look at these if you're not familiar with the game. S3 CorsairGamingAudioService; C:\Windows\System32\drivers\CorsairGamingAudio64.sys [63032 2022-07-08] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.) 2022-09-13 06:48 - 2022-09-13 06:48 - 000557056 _____ (Microsoft Corporation) C:\windows\system32\PhotoScreensaver.scr from curses import KEY_RIGHT, KEY_LEFT, KEY_UP, KEY_DOWN. Total physical RAM: 32541.47 MB Learn how to play Discord's snake game using the steps shown. ========================================================== FirewallRules: [{45A692CC-FFB6-487C-AE35-45C5B016CE6E}] => (Block) C:\Program Files\StartAllBack\UpdateCheck.exe (Stanislav Zinukhov -> www.startisback.com) Removeproxy: Processor: 12th Gen Intel Core i7-12700K FirewallRules: [UDP Query User{5E3E280D-8AD0-455B-AFC4-5E5203BC6B36}C:\users\tyson\appdata\local\discord\app-1.0.9006\discord.exe] => (Allow) C:\users\tyson\appdata\local\discord\app-1.0.9006\discord.exe (Discord Inc. -> Discord Inc.) FirewallRules: [UDP Query User{551D8B65-2A74-4BCA-8113-8F49FE6A963D}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN) 2022-08-19 00:58 - 2022-01-04 13:44 - 000000000 ____D C:\ProgramData\Packages 2022-09-13 22:31 - 2022-05-13 20:49 - 000000000 ____D C:\Users\Tyson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2022-09-13 06:48 - 2022-09-13 06:48 - 000069632 _____ (Adobe Systems) C:\windows\system32\atmlib.dll Restore point was successfully created. FirewallRules: [UDP Query User{6017881F-7825-4433-A4F1-35A1F47857F0}C:\users\tyson\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\tyson\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd) ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Tyson\AppData\Local\MEGAsync\ShellExtX64.dll [2022-06-11] (Mega Limited -> ) Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2022-08-03] (Adobe Inc. -> Adobe Systems Incorporated) 2022-09-14 05:51 - 2022-05-13 20:45 - 000000000 ____D C:\Users\Tyson\AppData\Roaming\TeraCopy HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) 2022-09-20 21:38 - 2022-05-13 18:02 - 000000000 ____D C:\Users\Tyson\AppData\Roaming\vlc you can put up Snake related art or any art. 2022-09-15 21:59 - 2022-09-15 21:59 - 000001070 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop 2022.lnk (If an entry is included in the fixlist, it will be removed.) HKU\S-1-5-21-479614032-2295716511-2174497491-1002\\Policies\Explorer: [HideSCAMeetNow] 1 2022-09-19 00:27 - 2022-09-19 00:27 - 000000000 ____D C:\Program Files (x86)\VulkanRT 2022-09-13 06:56 - 2021-06-05 22:10 - 000000000 ____D C:\windows\SysWOW64\vi-VN 2022-09-13 06:56 - 2021-06-05 22:10 - 000000000 ____D C:\windows\system32\WinBioPlugIns Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.) It will play the DISCORDO sound every time you open the app. (C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe You can either enter the link into your browser's address bar by copying and pasting the above link, or else simply click on the link, and it'll bring you to their 404 page. Malwarebytes version 4.5.14.210 (HKLM\\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.5.14.210 - Malwarebytes) Packages: (C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2022-09-07] (Adobe Inc. -> ) 2022-08-30 07:22 - 2022-01-10 21:49 - 000000000 ____D C:\ProgramData\Package Cache (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) R2 CorsairLLAService; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CueLLAccessService.exe [237104 2022-08-05] (Corsair Memory, Inc. -> Corsair Memory, Inc.) 2022-09-21 08:38 - 2022-04-05 15:06 - 000000000 ____D C:\windows\system32\Tasks\Symantec Endpoint Protection 2022-08-22 04:13 - 2022-07-08 17:37 - 000610352 _____ (Corsair Memory, Inc.) C:\windows\system32\CorsairGamingAudioCfgService64.exe BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2022-08-03] (Adobe Inc. -> Adobe Systems Incorporated) Microsoft GameInput (HKLM-x32\\{A9CFD6A1-C0D3-7F37-C220-8B104867EF15}) (Version: 10.1.22621.1011 - Microsoft Corporation) HKU\S-1-5-21-479614032-2295716511-2174497491-1002\\Run: [Steam] => D:\Steam\steam.exe [4234600 2022-08-20] (Valve Corp. -> Valve Corporation) HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) ==================== Shortcuts & WMI ======================== eric forrester current wife. 2022-06-27 00:22 - 2022-06-27 00:22 - 005841920 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\Qt5Gui.dll 2022-08-23 13:40 - 2022-01-04 13:42 - 000003412 _____ C:\windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2022-08-22 04:13 - 2022-07-08 17:37 - 001847296 _____ (Corsair Memory, Inc.) C:\windows\system32\CorsairGamingAudioPO64.dll Virus, Trojan, Spyware, and Malware Removal Help, Bing Chat has a secret Celebrity mode to impersonate celebrities, Build an instant training library with this lifetime learning bundle deal. [CDATA[ Best Games Like Sons Of The Forest (2023), Best N64 Games To Play On Nintendo Switch, Bantam Melon Location In God Of War Ragnarok (Across, 5 Most Difficult Boss Fights In God Of War Ragnarok, God Of War Ragnarok: Tree Of Woe Favor Quest (Guide), How To Get To Burning Cliffs In God Of War Ragnarok, Togu In Roblox Anime Adventure: How To Get &, How To Get & Use Treasure Charts In Arcane Odyssey, How To Get Gems In Anime Adventures Roblox, How To Evolve Pucci Into Puchi (New Moon) In Anime. ==================== One month (modified) ================== Task: {56640CC7-1B14-4DE5-A992-AEE87C843206} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-05-05] (Nvidia Corporation -> NVIDIA Corporation) 2022-09-13 06:56 - 2021-06-05 22:10 - 000000000 ____D C:\windows\system32\vi-VN IFEO\InstallAgent.exe: [Debugger] / ================== ======= (C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.CpuIdRemote64.exe R0 SymEFASI; C:\windows\System32\drivers\symefasi\0704030.013\symefasi64.sys [2080248 2022-04-05] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) Rent your own prepaid DayZ server for PC, PS4 or Xbox today at Nitrado. In order to reach this page, you'll need to go to a page that doesn't exist, for instance. IFEO\InstallAgent.exe: [Debugger] / Game Tutorial - W3Schools Unsere Modding Ecke findet ihr hier: DayZ Standalone - Modding. 2022-09-13 06:56 - 2021-06-05 22:10 - 000000000 ____D C:\windows\SysWOW64\eu-ES The error: The number of points you'll get per item will also be displayed along with the instructions, so make sure to keep note of these also, as you'll then know which items accrue the most points within the game. R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [100424 2022-05-02] (Apple Inc. -> Apple Inc.) R3 iaLPSS2_GPIO2_ADL; C:\windows\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_e11257f05c0c2f89\iaLPSS2_GPIO2_ADL.sys [139928 2021-07-29] (Intel Corporation -> Intel Corporation) IFEO\osppsvc.exe: [VerifierDlls] SppExtComObjHook.dll HKLM-x32\\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> ) HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\SihClient.exe => removed successfully Bonjour (HKLM\\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.) The current highest score on Google Snake is held by Florian Wehner, with a score of533,360. Screenshots Features Play with friends Games are server-wide: The most popular option is picked! 2022-09-13 06:48 - 2022-09-13 06:48 - 000335872 _____ C:\windows\system32\Windows.Management.InprocObjects.dll Error: (09/18/2022 11:28:17 PM) (Source: Bonjour Service) (EventID: 100) (User: ) R1 IDSVia64; C:\ProgramData\Symantec\Symantec Endpoint Protection\14.3.7393.4000.105\Data\Definitions\IPSDefs\20220916.081\IDSvia64.sys [1515512 2022-05-13] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2022-04-05] (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [UDP Query User{CFFD12EB-329C-4BD6-BE1F-205E9C4B6BD9}C:\users\tyson\appdata\local\fivem\fivem.exe] => (Allow) C:\users\tyson\appdata\local\fivem\fivem.exe (TASKS ME - IT DEVELOPMENT (AILENE BULALACAO TAGOLGOL) -> Cfx.re) S3 SymEvnt; C:\ProgramData\Symantec\Symantec Endpoint Protection\14.3.7393.4000.105\Data\SymPlatform\SymEvnt.sys [957928 2022-09-08] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\UpdateAssistant.exe => removed successfully Error: (09/18/2022 11:29:07 PM) (Source: DCOM) (EventID: 10001) (User: INWIN809) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2022-08-03] (Adobe Inc. -> Adobe Systems Incorporated) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation) 2022-09-14 00:04 - 2022-08-02 02:04 - 000000000 ____D C:\Users\Tyson\AppData\Roaming\com.adobe.dunamis 2022-09-01 05:48 - 2022-05-14 13:48 - 000000871 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" R2 CorsairLLAccessC2D033F14715AA7325305EA42FBFC65BF867CC1D; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CorsairLLAccess64.sys [21752 2022-06-21] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ccSettings_{BEC9211B-09AC-4B5B-9D31-561ADFF81A33}.sys => ""="Driver" Error: (09/18/2022 11:30:19 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) 2022-09-13 06:56 - 2021-06-05 22:10 - 000000000 ____D C:\windows\ShellExperiences Description: FirewallRules: [{14EE7504-6765-4301-935F-3222337EE46B}] => (Allow) D:\Steam\SteamApps\common\DRAGON BALL FighterZ\DBFighterZ.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd) IFEO\WaaSMedic.exe: [Debugger] / S3 SNAC; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.3.7393.4000.105\Bin64\snac64.exe [215648 2022-02-25] (Symantec Corporation -> Broadcom) Task: {0F07B63F-7BBC-4F1F-BF1F-9D28D3EE4A4E} - System32\Tasks\MEGA\MEGAsync Update Task S-1-5-21-479614032-2295716511-2174497491-1002 => C:\Users\Tyson\AppData\Local\MEGAsync\MEGAupdater.exe [2531496 2022-06-11] (Mega Limited -> ) FF Extension: (LocalCDN) - C:\Users\Tyson\AppData\Roaming\Mozilla\Firefox\Profiles\xnc3cpuf.default-release\Extensions\{b86e4813-687a-43e6-ab65-0bde4ab75758}.xpi [2022-09-13] To disable, again, click on the Discord icon 15 times to . 2022-09-13 06:56 - 2021-06-05 22:10 - 000000000 ___SD C:\windows\SysWOW64\F12 Team Snake is a Discord bot written with JDA that allows users to play Snake with one another, using reactions to vote on the next move. S3 logi_joy_hid_lo; C:\windows\system32\drivers\logi_joy_hid_lo.sys [41280 2022-05-13] (WDKTestCert builder,132743893872553407 -> Logitech) 2022-09-18 23:35 - 2022-01-03 19:51 - 000848788 _____ C:\windows\system32\PerfStringBackup.INI PCSX2 - Playstation 2 Emulator (HKLM-x32\\pcsx2) (Version: 1.6.0 - PCSX2 Team) Check out the ScoreSaber community on Discord - hang out with 19,995 other members and enjoy free voice and text chat. 2022-09-13 06:35 - 2022-08-18 23:47 - 000002067 _____ C:\Users\Public\Desktop\Adobe Acrobat DC.lnk BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2022-08-03] (Adobe Inc. -> Adobe Systems Incorporated) The highest possible score on the JavaScript Snake Game is 99,999. Disk: 1 (MBR Code: Windows 7/8/10) (Size: 476.9 GB) (Disk ID: 2435D796) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ccSettings_{BEC9211B-09AC-4B5B-9D31-561ADFF81A33}.sys => ""="Driver" ======= R2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [11523704 2022-06-09] (Logitech Inc -> Logitech, Inc.) 2022-08-22 04:13 - 2022-08-22 04:14 - 000000000 ____D C:\Users\Tyson\AppData\Local\Corsair 2022-09-18 23:09 - 2021-06-05 22:10 - 000000000 ___HD C:\Program Files\WindowsApps 2022-09-04 01:01 - 2022-09-04 01:01 - 000000000 ____D C:\Users\Tyson\AppData\Roaming\slobs-plugins ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Tyson\AppData\Local\MEGAsync\ShellExtX64.dll [2022-06-11] (Mega Limited -> ) Adobe Photoshop 2022 (HKLM-x32\\PHSP_23_5_1) (Version: 23.5.1.724 - Adobe Inc.) FirewallRules: [{80040ED2-A504-49E9-A1AE-1BD99B078EE2}] => (Allow) D:\Steam\SteamApps\common\Yakuza 0\media\Yakuza0.exe () [File not signed] FirewallRules: [{CC83CFDA-11EF-408C-A403-34F509C339E6}] => (Allow) D:\Steam\SteamApps\common\VRChat\launch.exe () [File not signed] Equalizer APO (HKLM\\EqualizerAPO) (Version: 1.2.1 - ) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [527864 2022-06-28] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) IFEO\SppExtComObj.exe: [VerifierDlls] SppExtComObjHook.dll Task: {1AEAE201-6F48-4C77-82CB-E97D4A8E5F80} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138680 2022-04-05] (Microsoft Corporation -> Microsoft Corporation) (services.exe ->) (DTS, Inc. -> DTS Inc.) C:\Windows\System32\DTS\PC\APO4x\DtsApo4Service.exe 2022-08-27 00:56 - 2022-06-24 16:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blackmagic Design ========= End of CMD: ========= R1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [8746536 2022-08-17] (Riot Games, Inc. -> Riot Games, Inc.) R2 NVDisplay.ContainerLocalSystem; C:\windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_47917a79b8c7fd22\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_47917a79b8c7fd22\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem PCSX2 - Playstation 2 Emulator (HKLM-x32\\pcsx2) (Version: 1.6.0 - PCSX2 Team) (If an entry is included in the fixlist, the file/folder will be moved.) Oct 15, 2022. IFEO\UsoClient.exe: [Debugger] / ShortcutTarget: MEGAsync.lnk -> C:\Users\Tyson\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited -> Mega Limited) R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [923656 2022-08-02] (Adobe Inc. -> Adobe Inc.) Rockstar Games Social Club (HKLM-x32\\Rockstar Games Social Club) (Version: 2.1.3.7 - Rockstar Games) FirewallRules: [{B6E257CC-AF55-45B4-AD9D-7193915F34CB}] => (Block) D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.) (If an entry is included in the fixlist, it will be removed.) FF HKLM\\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi ========= ipconfig /flushdns ========= cmd: netsh advfirewall set allprofiles state ON 2022-08-31 20:07 - 2022-09-01 05:48 - 000001256 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe After Effects 2022.lnk But note some of the fix may adversely affect your system if either Windows or Office is not properly activated. HKLM\\Policies\Explorer: [HideSCAMeetNow] 1 Error: (09/18/2022 11:22:11 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) R1 SRTSPX; C:\windows\System32\Drivers\SEP\0E031CE1\0FA0.105\x64\SRTSPX64.SYS [42448 2022-02-25] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [159720 2022-07-01] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) IFEO\upfc.exe: [Debugger] / 2022-09-18 23:35 - 2022-01-03 19:51 - 000848788 _____ C:\windows\system32\PerfStringBackup.INI 2022-09-13 06:56 - 2021-06-05 22:10 - 000000000 ____D C:\windows\PolicyDefinitions Adobe After Effects 2022 (HKLM-x32\\AEFT_22_6) (Version: 22.6 - Adobe Inc.) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2022-07-28] (Malwarebytes Inc. -> Malwarebytes) FirewallRules: [{9E781FB6-6F96-4302-A546-9B41AB72632E}] => (Allow) D:\Steam\SteamApps\common\VRChat\VRChat.exe () [File not signed] R2 NVDisplay.ContainerLocalSystem; C:\windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_47917a79b8c7fd22\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_47917a79b8c7fd22\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem Task: {658C5A85-0FD8-4A07-B8D2-05DD4D62B7DA} - System32\Tasks\GoogleUpdateTaskMachineUA{52819A4A-6F97-4F51-A9DF-F8722C17E431} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [168632 2022-05-25] (Google LLC -> Google LLC) CustomCLSID: HKU\S-1-5-21-479614032-2295716511-2174497491-1002_Classes\CLSID\{89b2b650-c4dd-d68b-46e7-3176f1973c8b}\localserver32 -> C:\Program Files\Voicemod Desktop\VoicemodDesktop.exe (Voicemod Sociedad Limitada -> Voicemod) 2022-09-13 06:37 - 2022-09-13 06:37 - 000000000 ___HD C:\$WinREAgent 2022-09-13 07:02 - 2022-09-13 07:02 - 000001136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Premiere Pro 2022.lnk 2022-08-31 01:24 - 2022-05-25 01:10 - 000003496 _____ C:\windows\system32\Tasks\GoogleUpdateTaskMachineUA{52819A4A-6F97-4F51-A9DF-F8722C17E431} FirewallRules: [{BAB0BF1E-919D-4339-8127-3E03675AEE16}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation) AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeraCopy.lnk:F37336C997 [3314] Task: {380A4401-4038-4AE0-9262-4840BDAE4377} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22865832 2022-03-30] (Microsoft Corporation -> Microsoft Corporation) Battle your friends or your enemies to see who will come out on top! (C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (OpenJS Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3494672 2022-06-27] (Electronic Arts, Inc. -> Electronic Arts) 2022-09-21 08:32 - 2021-06-05 22:10 - 000000000 ____D C:\windows\ServiceState Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 2022-09-14 05:51 - 2022-05-13 20:45 - 000000000 ____D C:\Users\Tyson\AppData\Roaming\TeraCopy FirewallRules: [{E73436CE-7963-4E98-A7AE-B620A32AEA57}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) ***************** FF ProfilePath: C:\Users\Tyson\AppData\Roaming\Mozilla\Firefox\Profiles\xnc3cpuf.default-release [2022-09-21] FirewallRules: [{7A701A64-DD53-4D45-A7DF-E8D461165756}] => (Allow) C:\Program Files\Oculus\Support\oculus-worlds\Home2.exe (Epic Games, Inc.) [File not signed] -> ) R2 NVDisplay.ContainerLocalSystem; C:\windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_47917a79b8c7fd22\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_47917a79b8c7fd22\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem S2 uhssvc; "C:\Program Files\Microsoft Update Health Tools\uhssvc.exe" [X] R2 MBAMChameleon; C:\windows\System32\Drivers\MbamChameleon.sys [223176 2022-09-21] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) (C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe ->) (Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe Description: The RstMwService service terminated with the following error: 2022-08-31 20:02 - 2022-09-01 05:48 - 000001056 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom.lnk HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\upfc.exe => removed successfully Application errors: ==================== SigCheck ============================ ========= RemoveProxy: ========= (services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe FirewallRules: [{74F78123-96A8-45EF-9B82-28854C6723CA}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.) ========= bitsadmin /reset /allusers ========= 2022-09-13 06:56 - 2021-06-05 22:10 - 000000000 ____D C:\windows\ShellComponents IFEO\upfc.exe: [Debugger] / 2022-09-18 23:28 - 2022-09-18 23:28 - 000223176 _____ (Malwarebytes) C:\windows\system32\Drivers\MbamChameleon.sys 2022-08-22 04:13 - 2022-07-08 17:37 - 000486552 _____ (Sonarworks) C:\windows\system32\soundidsdkdsp.dll In this guide, you're going to learn step-by-step how to play this very game. FirewallRules: [{EE09FBDD-CD86-422F-9B0D-6DD8CE253055}] => (Allow) D:\Steam\steam.exe (Valve Corp. -> Valve Corporation) (services.exe ->) (Code Sector -> ) C:\Program Files\TeraCopy\TeraCopyService.exe 2022-08-31 20:02 - 2022-09-01 05:48 - 000001056 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom.lnk Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe After Effects 2022.lnk:F7B133A22A [3442] What Is The Highest Score On Google Snake? - Skill Shower 2022-09-13 06:48 - 2022-09-13 06:48 - 000167936 _____ C:\windows\system32\DeviceUpdateCenterCsp.dll 2022-09-15 02:39 - 2022-04-05 14:01 - 000000000 ____D C:\windows\system32\Tasks\Mozilla cmd: bitsadmin /reset /allusers Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) (C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.CpuIdRemote64.exe The file will not be moved unless listed separately.) R2 OVRService; C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe [514624 2022-09-19] (Oculus VR, LLC -> Facebook Technologies, LLC) Kind of annoying, that you have to be 3 players. (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_0797c0ea8580ae89\IntelCpHDCPSvc.exe Task: {F0160B4B-F70B-437B-95EE-597317A02FF6} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138680 2022-04-05] (Microsoft Corporation -> Microsoft Corporation) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\NisSrv.exe [2876152 2022-01-03] (Microsoft Windows Publisher -> Microsoft Corporation) Tcpip\..\Interfaces\{203ebb61-a8f5-49d4-9bc1-32351b715ebe}: [DhcpNameServer] 192.168.0.1 Task: {1AEAE201-6F48-4C77-82CB-E97D4A8E5F80} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138680 2022-04-05] (Microsoft Corporation -> Microsoft Corporation) NVIDIA HD Audio Driver 1.3.39.14 (HKLM\\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.39.14 - NVIDIA Corporation)