RSS Amplifier

BleepingComputer.com Last 20 Posts · Aug 23, 2026

Dev7 Gang Attack

0
Sign in to vote or save

giveitabreak · BleepingComputer Forums

Ran by Gustavo (administrator) on DESKTOP-NKGAUSP (Micro-Star International Co., Ltd. MS-7E26) (22-08-2026 22:43:47)

Platform: Microsoft Windows 10 Home Version 22H2 19045.6466 (X64) Language: English (United States)

Default browser: "C:\Users\Gustavo\AppData\Local\Programs\Opera GX\opera.exe" -noautoupdate -- "%1"

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe

(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe

(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\Program Files (x86)\Battle.net\temp_55378fa22eff4403dae46bf6f2453db5.exe <3>

(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.9700\Agent.exe

(C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe ->) (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

(C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe ->) (Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Epic Online Services\managedArtifacts\98bc04bc842e4906993fd6d6644ffb8d\EOSOverlayRenderer-Win64-Shipping.exe

(C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe ->) (Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\Win64\EpicWebHelper.exe <3>

(C:\Program Files (x86)\Gyazo\GyStation.exe ->) (Helpfeel Inc. -> Helpfeel Inc.) C:\Program Files (x86)\Gyazo\GyazoVideoCore.exe

(C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\MSI Center\Engine\CC_Engine_x64.exe

(C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe

(C:\Program Files (x86)\Overwolf\Overwolf.exe ->) (Overwolf Ltd -> Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.305.0.9\OverwolfHelper.exe

(C:\Program Files (x86)\Overwolf\Overwolf.exe ->) (Overwolf Ltd -> Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.305.0.9\OverwolfHelper64.exe

(C:\Program Files (x86)\Overwolf\Overwolf.exe ->) (Overwolf Ltd -> Overwolf LTD) C:\Program Files (x86)\Overwolf\0.305.0.9\OverwolfBrowser.exe <4>

(C:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe

(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (OpenJS Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe

(C:\Program Files\Google\Play Games Services\26.7.723.1\Service\GooglePlayGamesServices.exe ->) (Google LLC -> ) C:\Program Files\Google\Play Games Services\26.7.723.1\Service\data\windows.assets\crashpad_handler.exe

(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA Overlay.exe

(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\ShadowPlay\nvsphelper64.exe

(C:\Program Files\Parsec\pservice.exe ->) (Unity Technologies SF -> Parsec) C:\Program Files\Parsec\parsecd.exe

(C:\Users\Gustavo\AppData\Local\Modrinth App\Modrinth App.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.101\msedgewebview2.exe

(C:\Users\Gustavo\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files\Razer\RazerAppEngine\app-4.0.698\RazerAppEngine.exe

(C:\Users\Gustavo\AppData\Local\Programs\Opera GX\opera.exe ->) (Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe

(C:\Users\Gustavo\AppData\Local\Programs\Opera GX\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Gustavo\AppData\Local\Programs\Opera GX\134.0.5954.67\opera_crashreporter.exe

(C:\Users\Gustavo\AppData\Local\Programs\Opera GX\opera.exe ->) (Roblox Corporation -> Roblox Corporation) C:\Users\Gustavo\AppData\Local\Roblox\Versions\version-ddf602d9cfe44005\RobloxPlayerBeta.exe

(C:\Users\Gustavo\AppData\Local\Roblox\Versions\version-ddf602d9cfe44005\RobloxPlayerBeta.exe ->) (Roblox Corporation -> ) C:\Users\Gustavo\AppData\Local\Roblox\Versions\version-ddf602d9cfe44005\RobloxCrashHandler.exe

(Discord Inc. -> Discord Inc.) C:\Users\Gustavo\AppData\Local\Discord\app-1.0.9253\Discord.exe <6>

(Eclipse.org Foundation, Inc. -> Eclipse Adoptium) C:\Users\Gustavo\AppData\Local\microm\j\bin\javax.exe <2>

(Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Epic Online Services\managedArtifacts\98bc04bc842e4906993fd6d6644ffb8d\EOSOverlayRenderer-Win64-Shipping.exe <4>

(Epic Games Inc. -> Node.js) C:\Program Files (x86)\Epic Games\Epic Online Services\EpicOnlineServicesUserHelper.exe <2>

(explorer.exe ->) (Adobe Systems Incorporated -> Adobe Systems Incorporated.) C:\Program Files (x86)\Adobe\Adobe Flash CS6\Flash.exe

(explorer.exe ->) (Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\Program Files (x86)\Battle.net\temp_55378fa22eff4403dae46bf6f2453db5.exe

(explorer.exe ->) (Corsair Memory, Inc. -> Elgato Systems) C:\Program Files\Elgato\4KCaptureUtility\4KCaptureUtility.exe

(explorer.exe ->) (Hanvon Ugee Technology Co., Ltd. -> XPPEN TECHNOLOGY CO.) C:\Program Files\XPPen\PenTablet.exe

(explorer.exe ->) (Helpfeel Inc. -> Helpfeel Inc.) C:\Program Files (x86)\Gyazo\GyStation.exe

(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mspaint.exe

(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_dde1a678dfd07f64\RtkAudUService64.exe

(explorer.exe ->) (Rinth, Inc. -> ModrinthApp) C:\Users\Gustavo\AppData\Local\Modrinth App\Modrinth App.exe

(explorer.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.101\msedgewebview2.exe <11>

(Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\GameInputSvc.exe

(Microsoft Corporation -> Windows ® Win 7 DDK provider) C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA Overlay.exe <5>

(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b26cc1edfbb8f4d0\Display.NvContainer\NVDisplay.Container.exe

(Opera Norway AS -> Opera Software) C:\Users\Gustavo\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe <2>

(Opera Norway AS -> Opera Software) C:\Users\Gustavo\AppData\Local\Programs\Opera GX\opera.exe <43>

(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Razer USA Ltd. -> Razer Inc.) C:\Program Files\Razer\RazerAppEngine\app-4.0.698\RazerAppEngine.exe <8>

(services.exe ->) (Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe

(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(services.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Play Games Services\26.7.723.1\Service\GooglePlayGamesServices.exe

(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\GameInputSvc.exe

(services.exe ->) (Microsoft Corporation -> Windows ® Win 7 DDK provider) C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe

(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpDefenderCoreService.exe

(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MsMpEng.exe

(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\NisSrv.exe

(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI Center\Case\MSI_Case_Service.exe

(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe

(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b26cc1edfbb8f4d0\Display.NvContainer\NVDisplay.Container.exe

(services.exe ->) (Razer USA Ltd. -> Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS3\GameManagerService3.exe

(services.exe ->) (Razer USA Ltd. -> Razer Inc) C:\Program Files\Razer\razer_elevation_service\razer_elevation_service.exe

(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_dde1a678dfd07f64\RtkAudUService64.exe

(services.exe ->) (Unity Technologies SF -> Parsec) C:\Program Files\Parsec\pservice.exe

(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI.TerminalServer.exe

(Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe <7>

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_dde1a678dfd07f64\RtkAudUService64.exe [2385344 2024-12-05] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated -> Adobe Systems Incorporated)

HKLM\...\Run: [PenTablet] => C:\Program Files\XPPen\PenTablet.exe [12804072 2025-03-05] (Hanvon Ugee Technology Co., Ltd. -> XPPEN TECHNOLOGY CO.)

HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [File not signed]

HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated -> Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> )

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752208 2024-12-04] (Oracle America, Inc. -> Oracle Corporation)

HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2407008 2017-09-20] (Adobe Systems Incorporated -> Adobe Systems Incorporated)

HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\Run: [Microsoft Edge Update] => C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.263.3\MicrosoftEdgeUpdateCore.exe [344408 2026-08-22] (Microsoft Corporation -> Microsoft Corporation)

HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\Run: [Discord] => C:\Users\Gustavo\AppData\Local\Discord\Update.exe [1516408 2025-03-31] (Discord Inc. -> Discord Inc.)

HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5774488 2026-08-03] (Valve Corp. -> Valve Corporation)

HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\Run: [Battle.net] => C:\Program Files (x86)\Battle.net\Battle.net.exe [992464 2026-08-20] (Blizzard Entertainment, Inc. -> Blizzard Entertainment)

HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\Run: [RazerAppEngine] => C:\Program Files\Razer\RazerAppEngine\RazerAppEngine.exe [853640 2025-07-15] (Razer USA Ltd. -> Razer Inc.)

HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [1289120 2026-06-16] (Helpfeel Inc. -> Helpfeel Inc.)

HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [52536760 2026-08-20] (Epic Games Inc. -> Epic Games, Inc.)

HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\Run: [Parsec.App.0] => C:\Program Files\Parsec\parsecd.exe [518504 2026-06-25] (Unity Technologies SF -> Parsec)

HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\Run: [Opera GX Stable] => "C:\Users\Gustavo\AppData\Local\Programs\Opera GX\opera.exe" --autostart [3014600 2026-08-19] (Opera Norway AS -> Opera Software)

HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [1990472 2026-07-14] (Overwolf Ltd -> Overwolf Ltd.)

HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\Run: [RobloxPlayerBeta] => C:\Users\Gustavo\AppData\Local\Roblox\Versions\version-ddf602d9cfe44005\RobloxPlayerBeta.exe [137415632 2026-08-22] (Roblox Corporation -> Roblox Corporation)

HKU\S-1-5-18\...\Run: [RazerAppEngine] => C:\Program Files\Razer\RazerAppEngine\RazerAppEngine.exe [853640 2025-07-15] (Razer USA Ltd. -> Razer Inc.)

HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\151.0.7922.170\Installer\chrmstp.exe [7582872 2026-08-20] (Google LLC -> Google LLC)

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {9B6E3980-455D-450A-A985-B6C4FAECCCD8} - System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-NKGAUSP-Gustavo => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated -> Adobe Systems Incorporated)

Task: {DBBCE414-F9A2-4005-B9AC-0DFED5F7907F} - System32\Tasks\App_Gustavo => C:\Users\Gustavo\AppData\Local\microm\j\bin\javax.exe [50344 2026-08-23] (Eclipse.org Foundation, Inc. -> Eclipse Adoptium) -> -jar "C:\Users\Gustavo\AppData\Local\microm\gang.jar" <==== ATTENTION

Task: {6C2E0D10-D498-4E46-90C8-D235C24297A9} - System32\Tasks\Google Play Games Notifier => C:\Program Files\Google\Play Games\Bootstrapper.exe [377496 2026-08-17] (Google LLC -> Google LLC)

Task: {B8F89B5F-68A9-421A-90F0-9D3985A50C2B} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem152.0.7933.0{3CE81137-0965-42D9-91DF-06771260B301} => C:\Program Files (x86)\Google\GoogleUpdater\152.0.7933.0\updater.exe [9512088 2026-07-05] (Google LLC -> Google LLC)

Task: {89BFA8EB-95D7-4C30-9AA1-3117E7977982} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)

Task: {9D5AC003-9A61-4C7B-B0A3-F6AABCEF7DD7} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4468376 2026-07-03] (Google LLC -> Google LLC)

Task: {A27FDEB2-815C-4A6F-9574-508B82B13C6B} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [10515816 2026-06-16] (Helpfeel Inc. -> Helpfeel Inc.)

Task: {0BA235E8-8642-4B9D-BF6F-0F6B6CDEF203} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [10515816 2026-06-16] (Helpfeel Inc. -> Helpfeel Inc.)

Task: {1EEA18E7-FABD-426E-A6F0-AE1615D17C2C} - System32\Tasks\Microsoft\VisualStudio\Updates\BackgroundDownload => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\BackgroundDownload.exe [255080 2025-04-16] (Microsoft Corporation -> Microsoft)

Task: {76203AB3-418C-434F-88BF-579BD6026D37} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpCmdRun.exe [1894568 2026-07-30] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {B858E635-418C-442B-AB98-3517A37BC6EA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpCmdRun.exe [1894568 2026-07-30] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {E3E0EB93-50EB-4C1C-993B-9AEA0C39A4D2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpCmdRun.exe [1894568 2026-07-30] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {605358BC-B974-4FFE-9701-DD25FC2577E4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpCmdRun.exe [1894568 2026-07-30] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {34FB3458-8D21-428C-85F0-7F1025143FF1} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-4073064550-936356533-3332422256-1001Core{853DF1C5-3CDB-429A-AD57-FD6D0FE2E574} => C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [206944 2026-03-08] (Microsoft Corporation -> Microsoft Corporation)

Task: {39D11F47-4A7E-4867-A1D0-0EA4A601E47D} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-4073064550-936356533-3332422256-1001UA{A1AAC63E-57EE-4BEF-9987-1159F80EA476} => C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [206944 2026-03-08] (Microsoft Corporation -> Microsoft Corporation)

Task: {08C50BA0-B8BE-4F2C-8DB2-1E2611B5EFCF} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3598960 2026-07-02] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {D37D0051-9D7A-4DCD-9EFE-F4C4D14A13F1} - System32\Tasks\Opera GX scheduled assistant Autoupdate 1751925291 => C:\Users\Gustavo\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe [7716296 2026-08-15] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --installdir="C:\Users\Gustavo\AppData\Local\Programs\Opera GX\assistant" --producttype=assistant $(Arg0)

Task: {066A63BF-6085-4115-B427-AF445FF33E4E} - System32\Tasks\Opera GX scheduled Autoupdate 1751320474 => C:\Users\Gustavo\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe [7716296 2026-08-15] (Opera Norway AS -> Opera Software)

Task: {F0236A2C-11EF-4D97-9577-FD833F1DE1D3} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2401096 2026-07-14] (Overwolf Ltd -> Overwolf LTD) -> C:\Program Files (x86)\Overwolf\/RunningFrom Schedule

Task: {21A4FEE9-7333-4D64-9D9C-11CCFB30782F} - System32\Tasks\Ubisoft\Ubisoft Connect Background Update => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\upc.exe [17819640 2026-06-24] (UBISOFT ENTERTAINMENT INC. -> Ubisoft)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-31] (Apple Inc. -> Apple Inc.)

Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-31] (Apple Inc. -> Apple Inc.)

Tcpip\..\Interfaces\{85e4665a-8a91-48ee-9ed2-53f0346f0412}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{f70154f4-b76c-4cc3-a278-3340d9226660}: [DhcpNameServer] 192.168.1.1

FF Plugin: @java.com/DTPlugin,version=11.441.2 -> C:\Program Files\Java\jre1.8.0_441\bin\dtplugin\npDeployJava1.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.441.2 -> C:\Program Files\Java\jre1.8.0_441\bin\plugin2\npjp2.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2017-09-20] (Adobe Systems Incorporated -> Adobe Systems)

FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2017-09-20] (Adobe Systems Incorporated -> Adobe Systems)

Edge Profile: C:\Users\Gustavo\AppData\Local\Microsoft\Edge\User Data\Default [2026-06-13]

Edge Extension: (Google Docs Offline) - C:\Users\Gustavo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-06-04]

Edge Extension: (Edge relevant text changes) - C:\Users\Gustavo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-04-04]

CHR Profile: C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default [2026-07-02]

CHR DefaultSearchURL: Default -> hxxps://planetearthpure.com/search?q={searchTerms}

CHR Extension: (X (Twitter) Video Downloader) - C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\akmdionenlnfcipmdhbhcnkighafmdha [2025-11-14]

CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2026-07-02]

CHR Extension: (Google Docs Offline) - C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-06-23]

CHR Extension: (AdBlock — block ads across the web) - C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2026-07-02]

CHR Extension: (Web Scrobbler) - C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhinaapppaileiechjoiifaancjggfjm [2026-06-13]

CHR Extension: (Honorlock) - C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnbmpkmhjackfpkpcbapafmpepgmmddc [2026-07-02]

CHR Extension: (Canvas Dark Mode) - C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfgmfpakhabhhpefblmehnadjjkadna [2026-03-08]

CHR Extension: (ClassLink OneClick Extension) - C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgfbgkjjlonelmpenhpfeeljjlcgnkpe [2026-03-08]

CHR Extension: (Transcript - AI Homework Helper) - C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\klknhfgkblobpfimidmhkclikdalnoke [2026-06-13]

CHR Extension: (Pure Planet Earth) - C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\llflfgnpglhgnbmfebokdfladhdhchoh [2026-03-08]

CHR Extension: (Twitter Exporter) - C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lnklhjfbeicncichppfbhjijodjgaejm [2026-07-02]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-04-04]

StartMenuInternet: (HKU\S-1-5-21-4073064550-936356533-3332422256-1001) Opera GXStable - "C:\Users\Gustavo\AppData\Local\Programs\Opera GX\opera.exe"

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [817760 2017-09-20] (Adobe Systems Incorporated -> Adobe Systems Incorporated)

S2 AmdAppCompatSvc; C:\Windows\System32\DriverStore\FileRepository\amdappcompat.inf_amd64_0cfc8ba812cdbaa8\AmdAppCompatSvc.exe [300872 2025-01-02] (Advanced Micro Devices -> Advanced Micro Devices, Inc)

S3 battlenet_helpersvc; C:\ProgramData\Battle.net_components\battlenet_helpersvc\AgentHelper.exe [3642064 2026-06-22] (Blizzard Entertainment, Inc. -> Blizzard Entertainment)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [20265256 2026-06-18] (BattlEye Innovations e.K. -> )

S3 EAAntiCheatService; C:\Program Files\EA\AC\eaanticheat.gameservice.exe [128032504 2025-09-23] (Electronic Arts, Inc. -> Electronic Arts)

S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [803440 2025-09-03] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)

S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [1039800 2026-08-01] (Epic Games Inc. -> Epic Games, Inc.)

S3 EpicGamesUpdater; C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesUpdater.exe [3408312 2026-08-20] (Epic Games Inc. -> Epic Games, Inc.)

S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [2606520 2026-08-17] (Epic Games Inc. -> Epic Games, Inc.)

R2 GameInputRedistService; C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe [401792 2026-05-15] (Microsoft Corporation -> Windows ® Win 7 DDK provider)

R2 GooglePlayGamesServices-26.7.723.1; C:\Program Files\Google\Play Games Services\26.7.723.1\Service\GooglePlayGamesServices.exe [513688 2026-08-14] (Google LLC -> Google LLC)

R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpDefenderCoreService.exe [2113568 2026-07-30] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 MSI_Case_Service; C:\Program Files (x86)\MSI\MSI Center\Case\MSI_Case_Service.exe [134160 2025-01-09] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)

R2 MSI_Center_Service; C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe [1137168 2025-02-04] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)

R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b26cc1edfbb8f4d0\Display.NvContainer\NVDisplay.Container.exe [1702632 2026-07-03] (NVIDIA Corporation -> NVIDIA Corporation)

S3 OverwolfUpdater; C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2401096 2026-07-14] (Overwolf Ltd -> Overwolf LTD)

R2 Parsec; C:\Program Files\Parsec\pservice.exe [442216 2026-06-25] (Unity Technologies SF -> Parsec)

R3 Razer Elevation Service; C:\Program Files\Razer\razer_elevation_service\razer_elevation_service.exe [1741960 2025-04-25] (Razer USA Ltd. -> Razer Inc)

R2 Razer Game Manager Service 3; C:\Program Files (x86)\Razer\Razer Services\GMS3\GameManagerService3.exe [405192 2026-01-07] (Razer USA Ltd. -> Razer Inc)

S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [File not signed]

S3 UpcElevationService; C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher Core\UpcElevationService.exe [356344 2026-06-24] (UBISOFT ENTERTAINMENT INC. -> Ubisoft)

S3 VSInstallerElevationService; C:\Program Files (x86)\Microsoft Visual Studio\Installer\VSInstallerElevationService.exe [42544 2025-04-16] (Microsoft Corporation -> Microsoft)

S3 VSStandardCollectorService150; C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe [145000 2024-09-18] (Microsoft Corporation -> Microsoft Corporation)

R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\NisSrv.exe [5183648 2026-07-30] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MsMpEng.exe [291352 2026-07-30] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 Rockstar Service; "D:\Program Files\Rockstar Games\Launcher\RockstarService.exe" (No File)

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AmdAppCompat; C:\Windows\System32\DriverStore\FileRepository\amdappcompat.inf_amd64_0cfc8ba812cdbaa8\AmdAppCompat.sys [35144 2025-01-02] (Advanced Micro Devices -> Advanced Micro Devices)

R3 amdgpio3; C:\Windows\System32\drivers\amdgpio3.sys [33592 2024-09-12] (ASMedia Technology Inc. -> Advanced Micro Devices, Inc)

R2 AMDRyzenMasterDriverV29; \??\C:\Program Files\AMD\RyzenMasterSDK\bin\AMDRyzenMasterDriver.sys [61744 2024-11-06] (Advanced Micro Devices -> )

R3 AmdTools64; C:\Windows\System32\drivers\AmdTools64.sys [63392 2020-06-16] (Microsoft Windows Hardware Compatibility Publisher -> )

R1 CTIIO; \??\C:\Windows\system32\drivers\CtiIo64.sys [34512 2025-06-13] (Microsoft Windows Hardware Compatibility Publisher -> )

R3 CY3014.X64; C:\Windows\System32\drivers\CY3014.X64.SYS [3623992 2021-08-11] (Corsair Memory, Inc. -> )

S3 gdrv3; \??\C:\Windows\System32\drivers\gdrv3.sys [52440 2025-06-13] (GIGA-BYTE TECHNOLOGY CO., LTD. -> )

R1 googlehaxm; \??\C:\Windows\system32\drivers\GoogleHaxm.sys [237248 2026-08-08] (Microsoft Windows Hardware Compatibility Publisher -> )

R3 hanvonugeemfilter; C:\Windows\System32\drivers\hanvonugeemfilter.sys [9728 2023-07-28] (Microsoft Windows Hardware Compatibility Publisher -> Windows ® Win 7 DDK provider)

R3 iriuna0; C:\Windows\system32\drivers\iriuna0.sys [46976 2021-04-07] (Iriun Oy -> Windows ® Win 7 DDK provider)

R3 KslD; C:\Windows\System32\drivers\wd\KslD.sys [82312 2026-05-13] (Microsoft Windows -> Microsoft Corporation)

R3 MTKBTFilterx64; C:\Windows\System32\DriverStore\FileRepository\mtkbtfilter.inf_amd64_cde37df5add40ae6\mtkbtfilterx.sys [529928 2024-07-04] (Microsoft Windows Hardware Compatibility Publisher -> MediaTek Inc.)

S3 mtkwlex; C:\Windows\System32\DriverStore\FileRepository\mtkwl6ex.inf_amd64_6194fff95628cf72\mtkwl6ex.sys [1714808 2024-07-03] (Microsoft Windows Hardware Compatibility Publisher -> MediaTek Inc.)

R3 NTIOLib_CC_COMM; \??\C:\Program Files (x86)\MSI\MSI Center\Lib\SYS\NTIOLib_X64.sys [32592 2024-09-11] (MICRO-STAR INTERNATIONAL CO., LTD. -> )

S3 parsecvirtualds; C:\Windows\System32\drivers\parsecvirtualds.sys [26784 2024-08-23] (Microsoft Windows Hardware Compatibility Publisher -> Parsec)

R3 parsecvusba; C:\Windows\System32\drivers\parsecvusba.sys [275624 2024-08-23] (Microsoft Windows Hardware Compatibility Publisher -> Parsec)

R3 RzCommon; C:\Windows\System32\drivers\RzCommon.sys [64880 2023-09-26] (Razer USA Ltd. -> Razer Inc)

R3 RzDev_022a; C:\Windows\System32\drivers\RzDev_022a.sys [56152 2021-03-22] (Razer USA Ltd. -> Razer Inc)

R3 ScpVBus; C:\Windows\System32\drivers\ScpVBus.sys [44080 2020-05-05] (Shaul Eizikovich -> Nefarius Software Solutions)

R3 VBAudioVACMME; C:\Windows\System32\DriverStore\FileRepository\vbmmecable64_win10.inf_amd64_dd707570a4bf06fd\vbaudio_cable64_win10.sys [140760 2024-10-08] (BUREL VINCENT Entrepreneur individuel -> Windows ® Win 7 DDK provider)

S3 VBVoicemeeterVAIOMME; C:\Windows\System32\DriverStore\FileRepository\vbvoicemeetervaio64_win10.inf_amd64_ce452124b45dd943\vbvoicemeetervaio64_win10.sys [295880 2025-09-06] (BUREL VINCENT Entrepreneur individuel -> VB-Audio Software)

R3 VirtualMic; C:\Windows\System32\drivers\VirtualMic.sys [50232 2024-06-03] (Microsoft Windows Hardware Compatibility Publisher -> )

R3 vjoy; C:\Windows\System32\drivers\vjoy.sys [67448 2019-07-14] (On-site Dental Systems (Justin Shafer) -> Shaul Eizikovich)

S4 WdAiNisDrv; C:\Windows\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-07-30] (Microsoft Windows -> Microsoft Corporation)

S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [21632 2026-07-30] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [625688 2026-07-30] (Microsoft Windows -> Microsoft Corporation)

R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [111640 2026-07-30] (Microsoft Windows -> Microsoft Corporation)

R3 XPPenTablet; C:\Windows\System32\drivers\XPPenTablet.sys [10752 2024-12-05] (Microsoft Windows Hardware Compatibility Publisher -> Windows ® Win 7 DDK provider)

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

2026-08-22 22:43 - 2026-08-22 22:44 - 000035224 _____ C:\Users\Gustavo\Downloads\FRST.txt

2026-08-22 22:42 - 2026-08-22 22:39 - 002449920 _____ (Farbar) C:\Users\Gustavo\Downloads\FRST64.exe

2026-08-22 20:46 - 2026-08-22 20:46 - 000003578 _____ C:\Windows\system32\Tasks\App_Gustavo

2026-08-22 20:45 - 2026-08-22 20:45 - 000000000 ____D C:\Users\Gustavo\AppData\Local\microm

2026-08-22 16:30 - 2026-08-22 16:30 - 058594829 _____ C:\Users\Gustavo\Downloads\Chud MC 1.21.0.mrpack

2026-08-22 05:33 - 2026-08-22 05:34 - 000000000 ____D C:\Users\Gustavo\Desktop\animalhospital

2026-08-20 04:56 - 2026-08-20 04:56 - 000411772 _____ C:\Users\Gustavo\Downloads\turkeyAkbar.mp4

2026-08-20 04:11 - 2026-08-20 04:11 - 000364486 _____ C:\Users\Gustavo\Downloads\BALDI.mp4

2026-08-19 18:18 - 2026-08-19 18:18 - 000006581 _____ C:\Users\Gustavo\Downloads\mk bleep 2_kart.swf

2026-08-19 18:17 - 2026-08-19 18:18 - 003625931 _____ C:\Users\Gustavo\Downloads\yabo kart.fla

2026-08-19 15:43 - 2026-08-19 15:43 - 008030568 _____ C:\Users\Gustavo\Downloads\yaboMKsetup.mp4

2026-08-15 21:32 - 2026-08-15 21:32 - 002218848 _____ C:\Users\Gustavo\Downloads\cyber join.wav

2026-08-15 21:32 - 2026-08-15 21:32 - 001042020 _____ C:\Users\Gustavo\Downloads\cool join sound.wav

2026-08-15 14:40 - 2026-08-15 14:41 - 746216034 _____ C:\Users\Gustavo\Downloads\Pikmin 2 (USA).7z

2026-08-14 23:04 - 2026-08-14 23:04 - 000000000 ____D C:\Users\Gustavo\AppData\Local\Modrinth

2026-08-14 19:36 - 2026-08-14 19:36 - 000000000 ____D C:\Users\Gustavo\AppData\LocalLow\ZeekerssRBLX

2026-08-14 17:16 - 2026-08-14 17:16 - 000899992 _____ C:\Users\Gustavo\Downloads\TestTestOneTwoThree.wav

2026-08-14 17:16 - 2026-08-14 17:16 - 000382668 _____ C:\Users\Gustavo\Downloads\jarona.wav

2026-08-14 17:13 - 2026-08-14 17:13 - 000879640 _____ C:\Users\Gustavo\Documents\floweryYeah.wav

2026-08-14 17:09 - 2026-08-14 17:09 - 1107195744 _____ (Image-Line) C:\Users\Gustavo\Downloads\flstudio_win64_26.1.4.5589.exe

2026-08-14 17:08 - 2026-08-14 17:08 - 000799896 _____ C:\Users\Gustavo\Documents\kenny in waiting.wav

2026-08-14 17:07 - 2026-08-14 17:07 - 000954458 _____ C:\Users\Gustavo\Documents\flowery intro fade.wav

2026-08-14 06:06 - 2026-08-14 06:06 - 000314869 _____ C:\Users\Gustavo\Desktop\FlashPro crash log (42).mdmp

2026-08-14 00:59 - 2026-08-14 00:59 - 000000000 ____D C:\Users\Gustavo\AppData\LocalLow\UbiSoftCTU

2026-08-14 00:26 - 2026-08-14 00:26 - 059002748 _____ C:\Users\Gustavo\Downloads\oh_bleepk (2).mp4

2026-08-14 00:26 - 2026-08-14 00:26 - 056121976 _____ C:\Users\Gustavo\Downloads\my_baby_my_sweet_sweet_baby (3).mp4

2026-08-14 00:25 - 2026-08-14 00:25 - 022047286 _____ C:\Users\Gustavo\Downloads\eyegoreScream (1).mp4

2026-08-13 21:13 - 2026-08-13 21:09 - 000522696 _____ (Microsoft Corporation) C:\Windows\system32\gamingservicesproxy_13.dll.0

2026-08-13 18:50 - 2026-08-13 18:50 - 000036864 _____ C:\Users\Gustavo\Downloads\UEKAWA PEN.sut

2026-08-13 17:23 - 2026-08-13 17:50 - 008072252 _____ C:\Users\Gustavo\Downloads\drizz (1).fla

2026-08-11 19:16 - 2026-08-11 19:16 - 029909086 _____ C:\Users\Gustavo\Documents\Kwik Flip  YTPMV.wav

2026-08-11 17:38 - 2026-08-16 05:41 - 000000000 ____D C:\Users\Gustavo\Desktop\STEAM BS

2026-08-11 17:32 - 2026-08-11 17:33 - 516444534 _____ C:\Users\Gustavo\Downloads\Pikmin (USA) (Rev 1).7z

2026-08-10 17:11 - 2026-08-10 17:11 - 002672206 _____ C:\Users\Gustavo\Downloads\dup562exedrachac.7z

2026-08-10 17:11 - 2026-08-10 17:11 - 000000000 ____D C:\Users\Gustavo\Downloads\dup562exedrachac

2026-08-10 17:04 - 2026-08-10 17:05 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\GodotPCKExplorer

2026-08-10 16:39 - 2026-08-10 16:39 - 000000000 ____D C:\Users\Gustavo\Downloads\ExportRipTear (2) sqwunx game

2026-08-10 16:38 - 2026-08-10 16:39 - 054299859 _____ C:\Users\Gustavo\Downloads\ExportRipTear (2).zip

2026-08-10 12:22 - 2026-08-10 12:22 - 017367094 _____ C:\Users\Gustavo\Downloads\QT_STRESS_wip_5.wav

2026-08-09 21:19 - 2026-08-09 21:19 - 000000000 ____D C:\Users\Gustavo\AppData\LocalLow\House House

2026-08-09 16:27 - 2026-08-09 16:27 - 013311356 _____ C:\Users\Gustavo\Downloads\thanks_breezy.mp4

2026-08-06 13:30 - 2026-08-06 13:30 - 000262943 _____ C:\Users\Gustavo\Desktop\FlashPro crash log (41).mdmp

2026-08-06 11:20 - 2026-08-06 11:20 - 007779382 _____ C:\Users\Gustavo\Downloads\sirenCrop.mp4

2026-08-06 11:18 - 2026-08-06 11:18 - 008263688 _____ C:\Users\Gustavo\Downloads\siren.mp4

2026-08-05 19:09 - 2026-08-05 19:09 - 000103830 _____ C:\Users\Gustavo\Downloads\HeWasWhippingUpSomething.mov

2026-08-05 15:56 - 2026-08-05 15:56 - 009433858 _____ C:\Users\Gustavo\Downloads\mascotModMenuCrop.mp4

2026-08-05 15:54 - 2026-08-05 15:54 - 027919394 _____ C:\Users\Gustavo\Downloads\mascotModMenu.mp4

2026-08-05 15:15 - 2026-08-17 01:34 - 000000000 ____D C:\Users\Gustavo\Downloads\[WINDOWS] Mod Menu Playtest Build (v0.9 Feature Preview #3)

2026-08-05 15:15 - 2026-08-05 15:15 - 001008099 _____ C:\Users\Gustavo\Downloads\green_boyfirend_34c15.zip

2026-08-04 16:34 - 2026-08-04 16:34 - 847468805 _____ C:\Users\Gustavo\Downloads\[WINDOWS] Mod Menu Playtest Build (v0.9 Feature Preview #3).zip

2026-08-04 15:52 - 2026-08-18 16:21 - 000001456 _____ C:\Users\Gustavo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord.lnk

2026-08-04 15:47 - 2026-08-04 15:47 - 000685964 _____ C:\Users\Gustavo\Downloads\HelveticaNeue-Bold.otf

2026-08-04 15:45 - 2026-08-04 15:45 - 000022024 _____ C:\Users\Gustavo\Downloads\helveticaneue-bold.zip

2026-08-04 15:45 - 2026-08-04 15:45 - 000000000 ____D C:\Users\Gustavo\Downloads\helveticaneue-bold

2026-08-04 02:41 - 2026-08-04 02:41 - 008987136 _____ C:\Users\Gustavo\Downloads\keep me going_v11.fla

2026-08-02 12:35 - 2026-08-02 12:36 - 222222667 _____ C:\Users\Gustavo\Downloads\tripletrouble2 (1).mp4

2026-08-02 10:53 - 2026-08-02 10:53 - 004974219 _____ C:\Users\Gustavo\Downloads\funkin w dalia (1).fla

2026-08-02 08:23 - 2026-08-02 08:23 - 001927318 _____ C:\Users\Gustavo\Downloads\gtEyeCatcher.mp4

2026-08-01 17:09 - 2026-08-01 17:09 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\banbuds

2026-08-01 16:14 - 2026-08-01 16:14 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\collector1938

2026-08-01 16:00 - 2026-08-01 16:00 - 000000000 ____D C:\Users\Gustavo\Downloads\lullaby

2026-08-01 13:57 - 2026-08-01 13:57 - 000000000 ____D C:\Users\Gustavo\Downloads\krampuz

2026-08-01 09:55 - 2026-08-01 09:55 - 000065454 _____ C:\Users\Gustavo\Downloads\turkeyNword.mp4

2026-08-01 02:59 - 2026-08-01 02:59 - 000180224 _____ C:\Users\Gustavo\Downloads\BoyFriend_Assets_PIXEL_VARIANT (1).fla

2026-07-31 13:03 - 2026-07-31 13:03 - 000439315 _____ C:\Users\Gustavo\Downloads\FNF_Sprite_assets V2.zip

2026-07-31 13:03 - 2026-07-31 13:03 - 000000000 ____D C:\Users\Gustavo\Downloads\FNF_Sprite_assets V2

2026-07-31 05:38 - 2026-07-31 08:01 - 012472734 _____ C:\Users\Gustavo\Downloads\QT_DANCE_assets.fla

2026-07-31 05:37 - 2026-07-31 05:37 - 001724497 _____ C:\Users\Gustavo\Downloads\qt_erect.fla

2026-07-31 05:36 - 2026-07-31 05:36 - 007592947 _____ C:\Users\Gustavo\Downloads\qt_erect_real.fla

2026-07-31 05:35 - 2026-07-31 05:35 - 027071633 _____ C:\Users\Gustavo\Downloads\blissful_erect_dance.fla

2026-07-31 05:34 - 2026-07-31 05:34 - 001667571 _____ C:\Users\Gustavo\Downloads\qtqtqtqttt.fla

2026-07-31 05:34 - 2026-07-31 05:34 - 000175659 _____ C:\Users\Gustavo\Downloads\qtqtqtqt.fla

2026-07-30 11:21 - 2026-07-30 11:21 - 007196450 _____ C:\Users\Gustavo\Documents\K'Naan - Bang Bang feat. Adam Levine (explicit version).wav

2026-07-30 11:21 - 2026-07-30 11:21 - 007196450 _____ C:\Users\Gustavo\Documents\bang bang knaan.wav

2026-07-28 01:29 - 2026-07-28 01:29 - 000000000 ____D C:\Users\Gustavo\AppData\Local\Chameleon

2026-07-26 20:50 - 2026-08-02 10:55 - 006229760 _____ C:\Users\Gustavo\Downloads\funkin w dalia.fla

2026-07-26 01:46 - 2026-07-26 01:46 - 000290771 _____ C:\Users\Gustavo\Downloads\go (1).mov

2026-07-25 23:35 - 2026-07-25 23:35 - 000000000 ____D C:\Users\Gustavo\Downloads\hjdHalloween

2026-07-25 23:35 - 2026-07-25 23:35 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\hjd

2026-07-25 23:14 - 2026-07-25 23:14 - 161639211 _____ C:\Users\Gustavo\Downloads\hjdHalloween.zip

2026-07-23 03:01 - 2026-07-23 03:01 - 011412034 _____ C:\Users\Gustavo\Documents\Megalovania WITH LYRICS  Undertale Cover  FT @wrathstetic.wav

2026-07-23 00:32 - 2026-07-23 00:33 - 009932538 _____ C:\Users\Gustavo\Downloads\yoku and ikusa assets.fla

2026-08-22 22:43 - 2025-04-04 18:56 - 000000000 ____D C:\Program Files (x86)\Steam

2026-08-22 22:40 - 2022-01-01 04:17 - 000000000 ____D C:\Windows\system32\SleepStudy

2026-08-22 22:40 - 2019-12-07 05:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2026-08-22 22:18 - 2025-04-13 02:53 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\ModrinthApp

2026-08-22 20:59 - 2025-04-04 19:42 - 000000000 ____D C:\Users\Gustavo\AppData\Local\Battle.net

2026-08-22 20:46 - 2025-04-04 18:24 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\discord

2026-08-22 20:46 - 2025-04-04 18:24 - 000000000 ____D C:\Users\Gustavo\AppData\Local\Discord

2026-08-22 20:45 - 2025-05-23 05:02 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\gg.essential.mod

2026-08-22 16:32 - 2025-04-04 15:37 - 000000000 ____D C:\Users\Gustavo\AppData\Local\D3DSCache

2026-08-22 11:56 - 2019-12-07 05:14 - 000000000 ___HD C:\Program Files\WindowsApps

2026-08-22 10:15 - 2025-04-08 22:28 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\EasyAntiCheat

2026-08-22 07:26 - 2025-04-07 20:22 - 000000000 ____D C:\Users\Gustavo\AppData\Local\Roblox

2026-08-22 05:55 - 2025-04-04 15:33 - 000003874 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-4073064550-936356533-3332422256-1001UA{A1AAC63E-57EE-4BEF-9987-1159F80EA476}

2026-08-22 05:55 - 2025-04-04 15:33 - 000003812 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-4073064550-936356533-3332422256-1001Core{853DF1C5-3CDB-429A-AD57-FD6D0FE2E574}

2026-08-22 05:28 - 2025-09-13 01:14 - 000000000 ____D C:\Users\Gustavo\AppData\Local\Ubisoft Game Launcher

2026-08-22 02:00 - 2025-04-04 16:16 - 000000000 ____D C:\Users\Gustavo\AppData\Local\Adobe

2026-08-22 01:50 - 2022-01-01 04:17 - 000003534 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA

2026-08-22 01:50 - 2022-01-01 04:17 - 000003408 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore

2026-08-22 00:48 - 2026-02-07 04:41 - 000000000 ____D C:\Users\Gustavo\Desktop\YABO

2026-08-21 20:17 - 2025-04-07 20:22 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox

2026-08-21 20:17 - 2025-04-04 16:32 - 000001409 _____ C:\Users\Gustavo\Desktop\Roblox Player.lnk

2026-08-21 00:47 - 2025-04-04 16:32 - 000000000 ____D C:\Users\Gustavo\Desktop\me fan art

2026-08-20 16:47 - 2025-07-14 21:45 - 000000000 ____D C:\Users\Gustavo\AppData\Local\Overwolf

2026-08-20 16:22 - 2025-04-04 19:39 - 000000000 ____D C:\Program Files (x86)\Battle.net

2026-08-20 16:18 - 2025-04-04 15:35 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2026-08-20 16:18 - 2025-04-04 15:35 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2026-08-20 10:47 - 2025-04-04 16:32 - 000002321 _____ C:\Users\Gustavo\Desktop\Thunderstore Mod Manager.lnk

2026-08-20 07:38 - 2025-04-08 19:27 - 000000000 ____D C:\Users\Gustavo\AppData\Local\UnrealEngine

2026-08-20 05:03 - 2025-04-04 19:14 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2026-08-19 21:21 - 2025-04-08 21:24 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\Code

2026-08-19 19:51 - 2025-04-11 16:33 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\obs-studio

2026-08-19 14:02 - 2025-04-04 19:53 - 000000000 ____D C:\Program Files (x86)\Overwatch

2026-08-19 05:26 - 2025-07-07 17:54 - 000004552 _____ C:\Windows\system32\Tasks\Opera GX scheduled assistant Autoupdate 1751925291

2026-08-19 05:26 - 2025-06-30 17:54 - 000004260 _____ C:\Windows\system32\Tasks\Opera GX scheduled Autoupdate 1751320474

2026-08-19 05:26 - 2025-06-30 17:54 - 000001421 _____ C:\Users\Gustavo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera GX Browser.lnk

2026-08-18 18:18 - 2025-04-04 19:48 - 000001081 _____ C:\Users\Public\Desktop\Google Play Games.lnk

2026-08-18 17:46 - 2025-05-08 16:32 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\Parsec

2026-08-18 16:52 - 2019-12-07 05:14 - 000000000 ____D C:\Windows\LiveKernelReports

2026-08-18 16:48 - 2025-04-04 18:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer

2026-08-18 16:45 - 2019-12-07 05:03 - 000524288 _____ C:\Windows\system32\config\BBI

2026-08-18 16:21 - 2025-04-04 16:32 - 000002253 _____ C:\Users\Gustavo\Desktop\Discord.lnk

2026-08-17 14:05 - 2025-04-12 23:30 - 000000000 ____D C:\Users\Gustavo\AppData\Local\CrashDumps

2026-08-15 18:08 - 2025-04-04 15:45 - 000007984 _____ C:\Windows\system32\Drivers\mtkRunTimeDataWdi.bin

2026-08-15 02:31 - 2022-01-01 04:20 - 000000000 ____D C:\Users\Gustavo\AppData\Local\Packages

2026-08-14 23:04 - 2025-04-13 02:50 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\.minecraft

2026-08-14 23:04 - 2025-04-04 16:32 - 000001248 _____ C:\Users\Gustavo\Desktop\Modrinth App.lnk

2026-08-14 17:08 - 2025-04-06 00:19 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\audacity

2026-08-14 00:59 - 2025-09-13 01:14 - 000001323 _____ C:\Users\Gustavo\Desktop\Ubisoft Connect.lnk

2026-08-13 21:13 - 2025-04-13 02:48 - 004594120 _____ (Microsoft Corporation) C:\Windows\system32\xgameruntime.dll

2026-08-13 21:13 - 2025-04-13 02:48 - 000158152 _____ (Microsoft Corporation) C:\Windows\system32\xgamehelper.exe

2026-08-13 21:13 - 2025-04-13 02:48 - 000084424 _____ (Microsoft Corporation) C:\Windows\system32\xgamecontrol.exe

2026-08-13 21:12 - 2025-04-13 02:48 - 000166344 _____ (Microsoft Corporation) C:\Windows\system32\gamingtcuihelpers.dll

2026-08-13 21:09 - 2025-04-13 02:48 - 001190344 _____ (Microsoft Corporation) C:\Windows\system32\gameplatformservices.dll

2026-08-13 21:09 - 2025-04-13 02:48 - 000317896 _____ (Microsoft Corporation) C:\Windows\system32\gamelaunchhelper.dll

2026-08-13 21:09 - 2025-04-13 02:48 - 000272840 _____ (Microsoft Corporation) C:\Windows\system32\gameconfighelper.dll

2026-08-13 18:57 - 2025-04-04 21:44 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\FunkinCrew

2026-08-11 21:35 - 2025-04-04 15:49 - 228836432 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

2026-08-10 17:21 - 2025-08-07 18:26 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\vlc

2026-08-09 16:07 - 2025-04-05 18:51 - 000000000 ____D C:\Users\Gustavo\AppData\Local\UniSDK

2026-08-09 15:25 - 2025-04-04 16:36 - 000000000 ____D C:\Users\Gustavo\Documents\Marvel's Spider-Man Remastered

2026-08-09 15:25 - 2025-04-04 16:36 - 000000000 ____D C:\Users\Gustavo\Documents\Marvel's Spider-Man Miles Morales

2026-08-08 02:51 - 2025-04-04 19:48 - 000237248 _____ (Google) C:\Windows\system32\Drivers\GoogleHaxm.sys

2026-08-06 13:21 - 2025-04-04 16:28 - 000000000 ____D C:\Users\Gustavo\Desktop\CLIP STUDIO

2026-08-05 20:23 - 2026-06-09 05:28 - 000000000 ____D C:\Users\Gustavo\BrawlhallaReplays

2026-08-01 07:56 - 2025-04-08 22:35 - 000000000 ___SH C:\Users\Public\Shared Files

2026-08-01 07:49 - 2025-04-08 22:28 - 000000000 ____D C:\Program Files (x86)\EasyAntiCheat_EOS

2026-08-01 03:59 - 2026-01-01 06:03 - 000000000 ____D C:\Users\Gustavo\Desktop\MASCOT

2026-07-31 13:03 - 2025-04-22 01:26 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\drawpile

2026-07-31 07:33 - 2026-04-16 19:25 - 000000000 ____D C:\Users\Gustavo\Desktop\ALCYORA

2026-07-29 23:30 - 2022-01-01 04:17 - 000000000 ____D C:\Windows\system32\Drivers\wd

2026-07-29 23:20 - 2026-05-21 09:45 - 000000000 ___HD C:\Users\Gustavo\Downloads\.opera

2026-07-26 02:17 - 2026-03-30 00:52 - 000000000 ____D C:\Users\Gustavo\Desktop\GARTIC

2026-07-23 19:17 - 2025-04-04 21:08 - 000000852 _____ C:\Users\Public\Desktop\Overwatch.lnk

2025-06-08 17:59 - 2025-06-08 17:59 - 001465064 _____ (Microsoft Corporation) C:\Users\Gustavo\vs_Community.exe

2025-12-16 23:09 - 2025-12-16 23:09 - 000000048 ____R () C:\Users\Gustavo\AppData\Local\0119AC2FC90D95AC063B177717B7B3B6

2025-04-09 00:39 - 2025-04-09 00:39 - 000000048 ____R () C:\Users\Gustavo\AppData\Local\1D6C178EBC648B3F6FE40BAF8172328A

2025-04-04 19:25 - 2025-04-04 19:49 - 000072560 _____ () C:\Users\Gustavo\AppData\Local\dxdiag.log

2025-05-07 19:35 - 2025-05-24 17:36 - 000000205 _____ () C:\Users\Gustavo\AppData\Local\oobelibMkey.log

2026-06-02 01:45 - 2026-06-02 01:45 - 000000218 _____ () C:\Users\Gustavo\AppData\Local\recently-used.xbel

2025-12-25 00:12 - 2025-12-25 00:12 - 000007605 _____ () C:\Users\Gustavo\AppData\Local\Resmon.ResmonCfg

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-08-2026

Ran by Gustavo (22-08-2026 22:45:27)

Running from C:\Users\Gustavo\Downloads

Microsoft Windows 10 Home Version 22H2 19045.6466 (X64) (2022-01-01 08:18:41)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-4073064550-936356533-3332422256-500 - Administrators - Disabled)

DefaultAccount (S-1-5-21-4073064550-936356533-3332422256-503 - Limited - Disabled)

Guest (S-1-5-21-4073064550-936356533-3332422256-501 - Limited - Disabled)

Gustavo (S-1-5-21-4073064550-936356533-3332422256-1001 - Administrators - Enabled) => C:\Users\Gustavo

WDAGUtilityAccount (S-1-5-21-4073064550-936356533-3332422256-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 26.01 (x64) (HKLM\...\7-Zip) (Version: 26.01 - Igor Pavlov)

Adobe (HKLM\...\{7E6455DC-2A34-45E1-9B80-BFBCC7B4A21A}) (Version: 1.0.0000 - Adobe Systems Incorporated) Hidden

Adobe After Effects 2023 (HKLM-x32\...\AEFT_23_2_1) (Version: 23.2.1 - Adobe Inc.)

Adobe Animate 2021 (HKLM-x32\...\FLPR_21_0_6) (Version: 21.0.6 - Adobe Inc.)

Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.3.0.256 - Adobe Systems Incorporated)

Adobe Flash Professional CS6 (HKLM-x32\...\{BD5669B5-49FF-4490-B956-E9D7CB9B0ADC}) (Version: 12.0 - Adobe Systems Incorporated)

Adobe Media Encoder 2021 (HKLM-x32\...\AME_15_0) (Version: 15.0 - Adobe Inc.)

AIDA64 Extreme v7.50 (HKLM-x32\...\AIDA64 Extreme_is1) (Version: 7.50 - FinalWire Ltd.)

AMD Application Compatibility Database Driver (HKLM-x32\...\{7466773D-AE4B-48F6-8E12-D64B555C1BEA}) (Version: 1.0.0.3 - Advanced Micro Devices, Inc.) Hidden

AMD Chipset Software (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 7.01.08.129 - Advanced Micro Devices, Inc.)

AMD GPIO2 Driver (HKLM-x32\...\{E9DD399F-21A3-479E-A7DF-D6CF4B2ADBF3}) (Version: 2.2.0.133 - Advanced Micro Devices, Inc.) Hidden

AMD I2C Driver (HKLM-x32\...\{B31D92D9-2914-46B0-9738-F668A563DE73}) (Version: 1.2.0.126 - Advanced Micro Devices, Inc.) Hidden

AMD PCI Driver (HKLM-x32\...\{80EC3CEE-2940-42A1-A776-B5D810D39F1E}) (Version: 1.0.0.90 - Advanced Micro Devices, Inc.) Hidden

AMD PPM Provisioning File Driver (HKLM-x32\...\{3665A5DE-D07C-46D7-9207-713E8E9FEF32}) (Version: 8.0.0.48 - Advanced Micro Devices, Inc.) Hidden

AMD PSP Driver (HKLM-x32\...\{988F14B8-79A8-475D-BAC7-83F96AD3D821}) (Version: 5.36.0.0 - Advanced Micro Devices, Inc.) Hidden

AMD Ryzen Master SDK (HKLM\...\{DBD50508-5F75-416B-995D-C42433A00944}) (Version: 2.14.2.3330 - Advanced Micro Devices, Inc.)

AMD SBxxx SMBus Driver (HKLM-x32\...\{AAE0E27D-C88A-49BA-8715-77ADCD4286A3}) (Version: 5.12.0.44 - Advanced Micro Devices, Inc.) Hidden

AMD_Chipset_Drivers (HKLM-x32\...\{9e92542c-fa37-4c1f-9eba-41336bc79c02}) (Version: 7.01.08.129 - Advanced Micro Devices, Inc.) Hidden

Anastasiy's Extension Manager version 4.2 (HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\{EE76C90B-E2EA-4292-8310-0648B678195D}_is1) (Version: 4.2 - Anastasiy)

Application Verifier x64 External Package (DesktopEditions) (HKLM\...\{C85A0AA9-2CF5-7B43-C078-4E8B7CE362D2}) (Version: 10.1.22621.3233 - Microsoft) Hidden

Application Verifier x64 External Package (HKLM\...\{10CA1677-8F02-3131-F25C-780BAB52E468}) (Version: 10.1.18362.1 - Microsoft) Hidden

Application Verifier x64 External Package (OnecoreUAP) (HKLM\...\{2C78EC40-921E-1C02-01FC-A1B6B0489B8C}) (Version: 10.1.22621.3233 - Microsoft) Hidden

Auburn Sounds Graillon 2 (HKLM\...\Auburn Sounds Graillon 2) (Version:  - )

Audacity 3.7.5 (32-bit) (HKLM-x32\...\Audacity_is1) (Version: 3.7.5 - Audacity Team)

Audacity 3.7.5 (HKLM\...\Audacity_is1) (Version: 3.7.5 - Audacity Team)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

Blender (HKLM\...\{26068070-A31E-4DCD-8D17-F40B06CB413D}) (Version: 5.1.0 - Blender Foundation)

Blender (HKLM\...\{884D3EFF-5207-454F-8EC9-C54FC86F7594}) (Version: 4.4.0 - Blender Foundation)

Blockbench 4.12.4 (HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\f73268a5-4451-5bb0-b2b7-a92a16ee01d9) (Version: 4.12.4 - JannisX11)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

CLIP STUDIO 1.12.8 (HKLM-x32\...\{49274EB8-4598-47E6-8039-9BB7CE07627E}) (Version: 1.12.8 - CELSYS)

CLIP STUDIO PAINT 1.12.11 (HKLM-x32\...\{1E4572D2-28BC-4BC9-B743-13DC6CFD71DB}) (Version: 1.12.11 - CELSYS)

CMake (HKLM\...\{CF67CCD6-F51F-4C31-965B-07C952CF4131}) (Version: 3.31.7 - Kitware)

Copilot (HKLM-x32\...\Microsoft Copilot) (Version: 152.0.4191.34 - Microsoft Corporation)

Deadlock Mod Manager (HKLM\...\{1373FE2A-8864-4865-B5BE-E32D7592DE01}) (Version: 0.13.0 - stormix)

Deadlock Mod Manager (HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\Deadlock Mod Manager) (Version: 0.9.2 - stormix)

Deluge 2.2.0 (HKLM\...\Deluge) (Version: 2.2.0 - )

Deluge 2.2.0 (HKLM-x32\...\Deluge) (Version: 2.2.0 - )

DiagnosticsHub_CollectionService (HKLM\...\{0E5296FF-C952-4756-8C85-6E6CC9F73A20}) (Version: 17.12.35318 - Microsoft Corporation) Hidden

Discord (HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\Discord) (Version: 1.0.9253 - Discord Inc.)

Drawpile (HKLM\...\{09D7941B-505D-47CF-B388-F8EAB622FE23}) (Version: 2.3.0 - Drawpile contributors)

Elgato 4K Capture Utility (HKLM\...\{FB53D9EC-9E28-4883-B1F1-106F97FA783B}) (Version: 1.7.15.10349 - Corsair Memory, Inc.)

ENE Video Capture Box HAL (HKLM\...\{A096611D-BA11-4A1A-8D09-0A0462D7C8F2}) (Version: 1.0.5.15 - Ene Tech.) Hidden

ENE Video Capture Box HAL (HKLM-x32\...\{974259bf-3ed1-4cd6-9ed1-40c7f601a786}) (Version: 1.0.5.15 - Ene Tech.) Hidden

ENE_AIC_Marvell_HAL (HKLM\...\{085E2365-0A70-4230-B664-02D5E4FE7E9C}) (Version: 1.0.7.0 - ENE TECHNOLOGY INC.) Hidden

ENE_AIC_Marvell_HAL (HKLM-x32\...\{887e18fb-6bc3-4cd4-b34e-32d9ff71bbae}) (Version: 1.0.7.0 - ENE TECHNOLOGY INC.) Hidden

ENE_DRAM_RGB_AIO (HKLM\...\{5B5CE185-F845-487D-824D-9D02A8B778FB}) (Version: 1.0.9.1 - Ene Tech.) Hidden

ENE_DRAM_RGB_AIO (HKLM-x32\...\{661c7ac8-4c45-4772-ba1d-090085dde688}) (Version: 1.0.9.1 - Ene Tech.) Hidden

ENE_EHD_M2_HAL (HKLM\...\{37A48B7F-D4EA-4863-844E-A284E2AA3C5D}) (Version: 1.0.12.2 - ENE TECHNOLOGY INC.) Hidden

ENE_EHD_M2_HAL (HKLM-x32\...\{3f5a70c6-60da-4ae9-8072-a51aa4dc08ee}) (Version: 1.0.12.2 - ENE TECHNOLOGY INC.) Hidden

ENE_External_Device_HAL (HKLM\...\{2B8E611F-0B51-4FAC-87BB-AF50D82E7DDA}) (Version: 1.0.12.7 - ENE Tech) Hidden

ENE_External_Device_HAL (HKLM-x32\...\{a7b1cf47-d8f0-423d-9494-568195f1c864}) (Version: 1.0.12.7 - ENE Tech) Hidden

ENE_MousePad_HAL (HKLM\...\{9E97178A-ADB8-4778-BE60-7E28E2A72721}) (Version: 1.0.1.8 - ENE TECHNOLOGY INC.) Hidden

ENE_MousePad_HAL (HKLM-x32\...\{bf256b46-8ff7-48be-ab7f-5661e9a0651f}) (Version: 1.0.1.8 - ENE TECHNOLOGY INC.) Hidden

ENE_X_AIC_HAL (HKLM\...\{CF703694-01C6-4062-B797-84DB215662BC}) (Version: 1.0.6.3 - ENE TECHNOLOGY INC.) Hidden

ENE_X_AIC_HAL (HKLM-x32\...\{c662a481-d76a-4188-95d2-6eb4ffd55542}) (Version: 1.0.6.3 - ENE TECHNOLOGY INC.) Hidden

Epic Games Launcher (HKLM-x32\...\{7CFBE8DA-5BBB-44B2-BCD9-DB28996EBB67}) (Version: 1.3.135.0 - Epic Games, Inc.)

Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden

Epic Online Services (HKLM-x32\...\{6730F587-C259-4C4C-A527-F7FF31D970F8}) (Version: 4.2.1 - Epic Games, Inc.)

FL Cloud Plugins version 1.9.7 (HKLM-x32\...\FL Cloud Plugins_is1) (Version: 1.9.7 - )

FL Studio 2024 (HKLM-x32\...\FL Studio 2024) (Version: 24.2.2.4649 - Image-Line)

FL Studio 2025 (HKLM-x32\...\FL Studio 2025) (Version: 25.2.4.5242 - Image-Line)

FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version:  - Image-Line)

Git (HKLM\...\Git_is1) (Version: 2.55.0.2 - The Git Development Community)

GitHub Desktop (HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\GitHubDesktop) (Version: 3.6.2 - GitHub, Inc.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 151.0.7922.170 - Google LLC)

Google Play Games (HKLM\...\GooglePlayGames) (Version: 26.7.1101.2 - Google LLC)

Gyazo 6.0.1.0 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version: 6.0.1 - Helpfeel Inc.)

icecap_collection_neutral (HKLM-x32\...\{DD131CF4-00E3-4CD7-9F15-74C496987A36}) (Version: 17.13.35716 - Microsoft Corporation) Hidden

icecap_collection_x64 (HKLM\...\{7F0EE7E4-1E4E-4C0E-88B9-EC400695E33A}) (Version: 17.13.35716 - Microsoft Corporation) Hidden

icecap_collectionresources (HKLM-x32\...\{8E15C351-4C26-4197-A471-2664FF51BEC6}) (Version: 17.13.35716 - Microsoft Corporation) Hidden

icecap_collectionresourcesx64 (HKLM-x32\...\{A2809462-C261-4799-BFD3-0E33F9536479}) (Version: 17.13.35716 - Microsoft Corporation) Hidden

Intel® C++ Redistributables on Intel® 64 (HKLM-x32\...\{F70BCE36-25F2-4475-A918-6209B3D85BF3}) (Version: 15.0.179 - Intel Corporation)

Iriun Webcam version 2.8.10 (HKLM-x32\...\IriunWebcam_is1) (Version: 2.8.10 - Iriun)

Java 8 Update 441 (64-bit) (HKLM\...\{77724AE4-039E-4CA4-87B4-2F64180441F0}) (Version: 8.0.4410.7 - Oracle Corporation)

Kits Configuration Installer (HKLM-x32\...\{63AAA877-5536-9481-2385-28A082100D78}) (Version: 10.1.18362.1 - Microsoft) Hidden

Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden

Magic Bullet Suite (HKLM\...\Magic Bullet Suite v2023.0.0) (Version:  - Maxon Computer GmbH)

Maxon Cinema 4D 2023 (HKLM\...\Maxon Cinema 4D 2023) (Version: 2023 - Maxon)

Microsoft .NET Framework 4.6.2 Targeting Pack (ENU) (HKLM-x32\...\{C80951BD-6904-474F-BBC5-03A6C777F37C}) (Version: 4.6.01590 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.6.2 Targeting Pack (HKLM-x32\...\{A18D4C2A-07A8-40E4-9797-DD324E6EA4FC}) (Version: 4.6.01590 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.7.2 Targeting Pack (ENU) (HKLM-x32\...\{B517DBD3-B542-4FC8-9957-FFB2C3E65D1D}) (Version: 4.7.03062 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.7.2 Targeting Pack (HKLM-x32\...\{1784A8CD-F7FE-47E2-A87D-1F31E7242D0D}) (Version: 4.7.03062 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.8 SDK (HKLM-x32\...\{949C0535-171C-480F-9CF4-D25C9E60FE88}) (Version: 4.8.03928 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.8 Targeting Pack (ENU) (HKLM-x32\...\{A4EA9EE5-7CFF-4C5F-B159-B9B4E5D2BDE2}) (Version: 4.8.03761 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.8 Targeting Pack (HKLM-x32\...\{BAAF5851-0759-422D-A1E9-90061B597188}) (Version: 4.8.03761 - Microsoft Corporation) Hidden

Microsoft .NET Framework Cumulative Intellisense Pack for Visual Studio (ENU) (HKLM-x32\...\{1A9C3A1A-566B-4CFA-8B27-71FC623963BE}) (Version: 4.8.09037 - Microsoft Corporation) Hidden

Microsoft .NET Host - 6.0.35 (x86) (HKLM-x32\...\{8E9133B2-E53B-4711-A13D-BDDCFFABE4F9}) (Version: 48.140.21458 - Microsoft Corporation) Hidden

Microsoft .NET Host - 6.0.36 (x64) (HKLM\...\{D6932D97-36F1-40B8-9CDC-CA8365B21000}) (Version: 48.144.23141 - Microsoft Corporation) Hidden

Microsoft .NET Host FX Resolver - 6.0.35 (x86) (HKLM-x32\...\{EDEF1977-65C8-407E-A4AE-5FE3699ACDF2}) (Version: 48.140.21458 - Microsoft Corporation) Hidden

Microsoft .NET Host FX Resolver - 6.0.36 (x64) (HKLM\...\{A9E32B25-994B-4856-A12B-0EBED3050410}) (Version: 48.144.23141 - Microsoft Corporation) Hidden

Microsoft .NET Runtime - 6.0.35 (x86) (HKLM-x32\...\{BBEA8EBD-9170-4B66-8343-9A763011DED4}) (Version: 48.140.21458 - Microsoft Corporation) Hidden

Microsoft .NET Runtime - 6.0.36 (x64) (HKLM\...\{C912E33F-956A-4921-9F55-CC11AE8F09AF}) (Version: 48.144.23141 - Microsoft Corporation) Hidden

Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 151.0.4129.101 - Microsoft Corporation)

Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 151.0.4129.101 - Microsoft Corporation) Hidden

Microsoft GameInput (HKLM\...\{14EDF950-06B9-415F-862C-1D5DEC321AE6}) (Version: 3.3.221.0 - Microsoft Corporation)

Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X64 Additional Runtime - 14.51.36247 (HKLM\...\{6FA797CF-6B76-4B6D-87EE-768F92008720}) (Version: 14.51.36247 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X64 Debug Runtime - 14.42.34438 (HKLM\...\{AABDA62C-7603-456F-B1A3-6A6585D3F2AC}) (Version: 14.42.34438 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.51.36247 (HKLM\...\{931A2CF0-2404-45EA-82F5-345735AE6A90}) (Version: 14.51.36247 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X86 Additional Runtime - 14.51.36247 (HKLM-x32\...\{582BA719-E6F1-4651-A873-049E6A0DDDAF}) (Version: 14.51.36247 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X86 Debug Runtime - 14.42.34438 (HKLM-x32\...\{746E9BE3-ED04-4247-A54C-A2BE25CB59FD}) (Version: 14.42.34438 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.51.36247 (HKLM-x32\...\{4BF7CE18-E151-449F-9190-6CDBED0BB4A2}) (Version: 14.51.36247 - Microsoft Corporation) Hidden

Microsoft Visual C++ v14 Redistributable (x64) - 14.51.36247 (HKLM-x32\...\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}) (Version: 14.51.36247.0 - Microsoft Corporation)

Microsoft Visual C++ v14 Redistributable (x86) - 14.51.36247 (HKLM-x32\...\{9a6ce18d-11c0-4452-aa35-9f2b8437c686}) (Version: 14.51.36247.0 - Microsoft Corporation)

Microsoft Visual Studio Code (User) (HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.133.0 - Microsoft Corporation)

Microsoft Visual Studio Installer (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 3.13.2069.59209 - Microsoft Corporation)

Microsoft Visual Studio Setup Configuration (HKLM-x32\...\{D07657AA-968C-4629-BD6C-1B52AF825EA7}) (Version: 3.12.2140.44225 - Microsoft Corporation) Hidden

Microsoft Visual Studio Setup WMI Provider (HKLM-x32\...\{49727420-70BA-4495-9405-31F8D711CB5A}) (Version: 3.12.2140.44225 - Microsoft Corporation) Hidden

Microsoft Windows Desktop Runtime - 6.0.35 (x86) (HKLM-x32\...\{0963AE98-F2C6-42A0-BF25-F0BC52787B35}) (Version: 48.140.21525 - Microsoft Corporation) Hidden

Microsoft Windows Desktop Runtime - 6.0.35 (x86) (HKLM-x32\...\{6155852e-c88e-4c56-b194-2178353598fb}) (Version: 6.0.35.34113 - Microsoft Corporation)

Microsoft Windows Desktop Runtime - 6.0.36 (x64) (HKLM\...\{61D4736B-3325-4D4A-BD41-8BD206C6A86E}) (Version: 48.144.23186 - Microsoft Corporation) Hidden

Microsoft Windows Desktop Runtime - 6.0.36 (x64) (HKLM-x32\...\{0532b8f2-12d7-43de-95fc-7b87006758a8}) (Version: 6.0.36.34217 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)

Microsoft_VC80_CRT_x86 (HKLM-x32\...\{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}) (Version: 8.0.50727.4053 - Adobe) Hidden

Microsoft_VC90_CRT_x86 (HKLM-x32\...\{08D2E121-7F6A-43EB-97FD-629B44903403}) (Version: 1.00.0000 - Adobe) Hidden

Modrinth App (HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\Modrinth App) (Version: 0.17.10 - ModrinthApp)

MSI Center SDK (HKLM-x32\...\{15289038-41BE-48F8-B8B9-0B1021D3089E}}_is1) (Version: 3.2025.0213.01 - MSI)

MSI Development Tools (HKLM-x32\...\{3891A7DE-A85F-9B4E-2B84-50162AFA1E48}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

MSI Development Tools (HKLM-x32\...\{DB4DB790-64DD-1902-4BF2-833B3B6DBCA1}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

NVIDIA App 11.0.8.299 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.8.299 - NVIDIA Corporation)

NVIDIA FrameView SDK 1.8.12612.38276700 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.8.12612.38276700 - NVIDIA Corporation)

NVIDIA Graphics Driver 610.74 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 610.74 - NVIDIA Corporation)

NVIDIA HD Audio Driver 1.4.5.7 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.5.7 - NVIDIA Corporation)

NVIDIA PhysX System Software 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation)

OBS Studio (HKLM-x32\...\OBS Studio) (Version: 31.0.3 - OBS Project)

Opera GX Stable 134.0.5954.67 (HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\Opera GX 134.0.5954.67) (Version: 134.0.5954.67 - Opera Software)

OTT by Xfer Records (HKLM-x32\...\OTT) (Version:  - )

Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)

Overwolf (HKLM-x32\...\Overwolf) (Version: 0.305.0.9 - Overwolf Ltd.)

Parsec (HKLM-x32\...\Parsec) (Version: 150-104a - Parsec Cloud Inc.)

Parsec Virtual Display Driver (HKLM\...\ParsecVDD) (Version: 0.45.0.0 - Parsec Cloud Inc.)

Parsec Virtual USB Adapter Driver (HKLM\...\ParsecVUD) (Version: 0.3.10.0 - Parsec Cloud Inc.)

Patriot Viper M2 SSD RGB (HKLM\...\{8B4C0A3D-C135-4E1F-98D8-3926494B4D61}) (Version: 1.1.0.1 - Patriot Memory) Hidden

Patriot Viper M2 SSD RGB (HKLM-x32\...\{07236f40-ec25-4646-8cb6-b6aaf1597324}) (Version: 1.1.0.1 - Patriot Memory) Hidden

PDF Settings CS6 (HKLM-x32\...\{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}) (Version: 11.0 - Adobe Systems Incorporated) Hidden

Pentablet (HKLM\...\{5DAB8C1A-6D8E-467D-BE62-AC13087AA950}_is1) (Version: 4.0.8.250305 - XPPen Technology)

PKMNCC Launcher 1.1.2.5 (HKLM-x32\...\{C4146DBC-276B-44F6-B283-9E885EEC2B58}_is1) (Version: 1.1.2.5 - WindowsLogic Productions)

Promontory_GPIO Driver (HKLM-x32\...\{B5512BCC-F4CD-4159-86A4-B2AD7D38FFA9}) (Version: 3.0.3.0 - Advanced Micro Devices, Inc.) Hidden

Python 3.11.3 (32-bit) (HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\{2b965ed0-9aec-47d4-8be0-9e880b5cd5cf}) (Version: 3.11.3150.0 - Python Software Foundation)

Python 3.11.3 Add to Path (32-bit) (HKLM-x32\...\{DF5920DB-4173-4F8F-A39D-4D31423B8A6C}) (Version: 3.11.3150.0 - Python Software Foundation) Hidden

Python 3.11.3 Core Interpreter (32-bit) (HKLM-x32\...\{8C57599E-C738-4351-BB23-54ECFFC21248}) (Version: 3.11.3150.0 - Python Software Foundation) Hidden

Python 3.11.3 Development Libraries (32-bit) (HKLM-x32\...\{D04586B4-B45B-440F-AC16-969D923A66E7}) (Version: 3.11.3150.0 - Python Software Foundation) Hidden

Python 3.11.3 Executables (32-bit) (HKLM-x32\...\{8216099C-37EB-4EED-AA4B-17C1CF0F2EBC}) (Version: 3.11.3150.0 - Python Software Foundation) Hidden

Python 3.11.3 pip Bootstrap (32-bit) (HKLM-x32\...\{17B3D48C-DEBB-4054-BC75-3272DE2F422E}) (Version: 3.11.3150.0 - Python Software Foundation) Hidden

Python 3.11.3 Standard Library (32-bit) (HKLM-x32\...\{0E8791BC-7E84-4BF5-AA9E-283927F074E7}) (Version: 3.11.3150.0 - Python Software Foundation) Hidden

Python 3.11.3 Tcl/Tk Support (32-bit) (HKLM-x32\...\{460162A8-79D7-4680-B23E-95FF6BA08875}) (Version: 3.11.3150.0 - Python Software Foundation) Hidden

Python 3.11.3 Utility Scripts (32-bit) (HKLM-x32\...\{1ACFBC17-A39F-4D6E-BC68-B1FE78F5636D}) (Version: 3.11.3150.0 - Python Software Foundation) Hidden

Python Launcher (HKLM-x32\...\{C41DB702-D72D-40F4-A2B3-5BAC2DCA2DF2}) (Version: 3.11.3150.0 - Python Software Foundation)

QuikQuak Pitchwheel (HKLM\...\Pitchwheel_is1) (Version: 5.1.0 - QuikQuak)

r2modman 3.2.15 (HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\ac231ef6-6414-5f8d-b36f-3b57705721dd) (Version: 3.2.15 - ebkr)

Razer Synapse (HKLM-x32\...\Razer Synapse) (Version: 4.0.699 - Razer Inc.)

Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9768.1 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.73.815.2024 - Realtek)

Roblox Player for Gustavo (HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\roblox-player) (Version:  - Roblox Corporation)

Roblox Studio for Gustavo (HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\roblox-studio) (Version:  - Roblox Corporation)

Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.105.2733 - Rockstar Games)

Rockstar Games SDK (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.4.0.146 - Rockstar Games)

SDK ARM Additions (HKLM-x32\...\{2D2C18BA-7B10-0A98-F662-9D397CAEA0C3}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

SDK ARM Redistributables (HKLM-x32\...\{B5F4C6AF-DC6F-F6A4-1087-D068F4660610}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Serum (HKLM\...\Serum_XR_is1) (Version: 1.368 - Xfer Records)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Stremio (HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\Stremio) (Version: 4.4.182 - Smart Code Ltd)

Thunderstore Mod Manager (HKU\S-1-5-21-4073064550-936356533-3332422256-1001\...\Overwolf_ahpflogoookodlegojjphcjpjaejgghjnfcdjdmi) (Version: 1.124.1 - Overwolf app)

Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 172.1.13247 - Ubisoft)

Universal CRT Extension SDK (HKLM-x32\...\{13952D7A-B7B3-F4F8-5F29-5CD18E8168B7}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Universal CRT Extension SDK (HKLM-x32\...\{E9508840-8997-0DA6-2BF2-66913126B654}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Universal CRT Headers Libraries and Sources (HKLM-x32\...\{74CBC330-ED16-31B9-E8BE-0C6A8E67DE32}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Universal CRT Headers Libraries and Sources (HKLM-x32\...\{D3CE43AE-FB64-9FCA-BE16-5A2F3F2B112D}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Universal CRT Redistributable (HKLM-x32\...\{0460C87B-7F4C-3170-FAC9-B7A6AE5CE4E9}) (Version: 10.0.26624 - Microsoft Corporation) Hidden

Universal CRT Redistributable (HKLM-x32\...\{1D228B5E-62E8-737B-3478-78A795EBB8EC}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Universal CRT Redistributable (HKLM-x32\...\{847D4DAF-0182-265B-324F-406462E8A90D}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Universal CRT Tools x64 (HKLM\...\{2C897543-D940-0177-58DE-0D00653DE0B2}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Universal CRT Tools x86 (HKLM-x32\...\{384A28F5-6B08-01FB-BE75-EBC673BBCACF}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Universal General MIDI DLS Extension SDK (HKLM-x32\...\{6F54BF87-2EE6-FA6D-431D-33A665992D49}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Universal General MIDI DLS Extension SDK (HKLM-x32\...\{D3B0EFC4-878A-CA8C-7C79-1160CDF637D1}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Update for x64-based Windows Systems (KB5001716) (HKLM\...\{B8D93870-98D1-4980-AFCA-E26563CDFB79}) (Version: 8.94.0.0 - Microsoft Corporation)

VBCABLE, The Virtual Audio Cable (HKLM\...\VB:VBCABLE {87459874-1236-4469}) (Version:  - VB-Audio Software)

vcpp_crt.redist.clickonce (HKLM-x32\...\{83750432-75BC-4905-8B08-297298CBE817}) (Version: 14.42.34438 - Microsoft Corporation) Hidden

Verbatim_SureFireGaming_Product (HKLM\...\{35CB65C6-A7E3-4EE7-AD40-738D70A72164}) (Version: 1.0.3.11 - Verbatim) Hidden

Verbatim_SureFireGaming_Product (HKLM-x32\...\{d601832a-0d94-46ce-9b19-78e8a5887313}) (Version: 1.0.3.11 - Verbatim) Hidden

Visual Studio Community 2022 (HKLM-x32\...\0a27c660) (Version: 17.13.6 - Microsoft Corporation)

vJoy Device Driver 2.1.9.1 (HKLM\...\{8E31F76F-74C3-47F1-9550-E041EEDC5FBB}_is1) (Version: 2.1.9.1 - Shaul Eizikovich)

VLC media player (HKLM\...\VLC media player) (Version: 3.0.21 - VideoLAN)

VS Script Debugging Common (HKLM\...\{F5796163-6EC6-488A-B2DE-E1E94477F6AD}) (Version: 17.0.157.0 - Microsoft Corporation) Hidden

vs_communitymsires (HKLM-x32\...\{2E1FFB78-E62D-4474-9E8D-A4906F51161D}) (Version: 17.13.35716 - Microsoft Corporation) Hidden

vs_communitysharedmsi (HKLM-x32\...\{378A4C81-1F48-4558-95F9-1EAA710A5E37}) (Version: 17.13.35716 - Microsoft Corporation) Hidden

vs_communityx64msi (HKLM\...\{CD5E51A1-F24E-4D19-A607-303A98E00B01}) (Version: 17.13.35716 - Microsoft Corporation) Hidden

vs_CoreEditorFonts (HKLM-x32\...\{1851460E-0E63-4117-B5BA-25A2F045801B}) (Version: 17.7.40001 - Microsoft Corporation)

vs_devenvsharedmsi (HKLM-x32\...\{1B192D0E-960B-4CE1-986B-7D4C1B38E5C0}) (Version: 17.13.35710 - Microsoft Corporation) Hidden

vs_devenx64vmsi (HKLM\...\{341DF386-BE22-4944-8470-B8ACA9A7B9C7}) (Version: 17.13.35710 - Microsoft Corporation) Hidden

vs_filehandler_amd64 (HKLM-x32\...\{40363830-7943-4C25-913F-8FD4B8448D5A}) (Version: 17.13.35716 - Microsoft Corporation) Hidden

vs_filehandler_x86 (HKLM-x32\...\{F76AB80B-2967-4CF7-8FE6-D9898A6AE869}) (Version: 17.13.35716 - Microsoft Corporation) Hidden

vs_FileTracker_Singleton (HKLM-x32\...\{9A9ED659-5E68-49FE-B9AD-FF8278DA1525}) (Version: 17.13.35716 - Microsoft Corporation) Hidden

vs_githubprotocolhandlermsi (HKLM-x32\...\{22827B22-8696-49E7-BBB4-7B8231FCF4F6}) (Version: 17.13.35710 - Microsoft Corporation) Hidden

vs_Graphics_Singletonx64 (HKLM\...\{6FEB08A0-D946-4D29-A6E1-52C30DD966F1}) (Version: 17.13.35716 - Microsoft Corporation) Hidden

vs_Graphics_Singletonx86 (HKLM-x32\...\{5EE3E8D2-ED84-4D79-BF42-FF349AE1E49E}) (Version: 17.13.35716 - Microsoft Corporation) Hidden

vs_minshellinteropsharedmsi (HKLM-x32\...\{9F15C769-1458-4112-B108-823BFAD0DC88}) (Version: 17.13.35716 - Microsoft Corporation) Hidden

vs_minshellinteropx64msi (HKLM\...\{DFF29E53-B203-4658-9D12-129D2E7B3BD4}) (Version: 17.13.35710 - Microsoft Corporation) Hidden

vs_minshellmsires (HKLM-x32\...\{71CA7443-2ACE-478B-9C5F-68E7AEBEBFD4}) (Version: 17.13.35716 - Microsoft Corporation) Hidden

vs_minshellsharedmsi (HKLM-x32\...\{6069C995-A7CD-4086-BC36-15787239B7E2}) (Version: 17.13.35716 - Microsoft Corporation) Hidden

vs_minshellx64msi (HKLM\...\{7B917782-68E1-428D-8C97-FF1F0084B1D5}) (Version: 17.13.35729 - Microsoft Corporation) Hidden

vs_tipsmsi (HKLM-x32\...\{EC3CE358-9DAB-41D9-AC01-8579B6E284C6}) (Version: 17.13.35710 - Microsoft Corporation) Hidden

vs_vswebprotocolselectormsi (HKLM-x32\...\{4DEF76E2-1F1A-4E39-9C23-E34E7CA100EF}) (Version: 17.13.35710 - Microsoft Corporation) Hidden

Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden

WD P40 Game Drive (HKLM\...\{EE55DBAE-ECDD-4ADD-AAB5-23DE848B0996}) (Version: 1.0.2.18 - Western Digital Corporation) Hidden

WD P40 Game Drive (HKLM-x32\...\{72b1a866-fc31-4381-bff3-fa6cd8823777}) (Version: 1.0.2.18 - Western Digital Corporation) Hidden

WinAppDeploy (HKLM-x32\...\{8E3AE0EF-D067-700C-BDB4-10D5552155DC}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

WinAppDeploy (HKLM-x32\...\{C952A289-86CA-9322-7C44-F6E7526FD5E3}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows App Certification Kit Native Components (HKLM\...\{750766A0-28E0-2EC0-B83C-7C6F1236B041}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows App Certification Kit SupportedApiList x86 (HKLM-x32\...\{C7C6D595-1045-1CDB-DDB8-F0DCB03B63B2}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows App Certification Kit x64 (HKLM-x32\...\{2CF6B1B1-3D60-A198-E401-093F7BA784F0}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows App Certification Kit x64 (OnecoreUAP) (HKLM-x32\...\{7625FDE9-5B15-1CDF-3810-EC60A67F6D39}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows Desktop Extension SDK (HKLM-x32\...\{B4A7994D-DBA1-8B4D-621A-03EE52CF838A}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows Desktop Extension SDK (HKLM-x32\...\{D6982C58-1FDC-FB2E-B55A-7329ADE7315C}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows Desktop Extension SDK Contracts (HKLM-x32\...\{39EDCC7D-7B63-5D99-C053-C8CDF02DC5ED}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows Desktop Extension SDK Contracts (HKLM-x32\...\{779B6704-D2FB-9087-C7FB-0AA1586F6FCD}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows IoT Extension SDK (HKLM-x32\...\{9DA29C3D-9E36-AC22-59C8-FFCF413DC068}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows IoT Extension SDK (HKLM-x32\...\{CFF175F4-9F1D-289D-B99E-EA6AFCF28F4E}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows IoT Extension SDK Contracts (HKLM-x32\...\{3CEE8EB6-538E-DDA2-51A5-842ECE6CE1E8}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows IoT Extension SDK Contracts (HKLM-x32\...\{8D92043C-84C1-368A-885F-5FD8B92200EC}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows Mobile Extension SDK (HKLM-x32\...\{30AD20A4-1FFF-2632-4555-EFAF9D8A32CD}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows Mobile Extension SDK (HKLM-x32\...\{A3D0A593-20CD-83E6-83DE-6068053F2BDF}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows Mobile Extension SDK Contracts (HKLM-x32\...\{01E7E930-A0F4-5340-5E2D-92EFC9D5821D}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows Mobile Extension SDK Contracts (HKLM-x32\...\{154EEEB2-18D9-4FD5-EDE1-6D0B318FAC53}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows SDK (HKLM-x32\...\{2DF27D5D-478A-CC3F-EF64-E461BC3B3580}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK AddOn (HKLM-x32\...\{F1E37C98-16B7-421F-BA33-6C5B5400012A}) (Version: 10.1.0.0 - Microsoft Corporation)

Windows SDK ARM Desktop Tools (HKLM-x32\...\{20C00582-BD18-B599-CF98-61011567D747}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows SDK ARM Desktop Tools (HKLM-x32\...\{963BD0BD-2098-D21C-AA37-39876C732819}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK Desktop Headers arm (HKLM-x32\...\{31D517CE-04EE-F508-87C6-A503372B02A1}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK Desktop Headers arm (HKLM-x32\...\{3DC4086C-B365-3DE4-878B-659DEB72904E}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows SDK Desktop Headers arm64 (HKLM-x32\...\{452ABC9E-731E-71B2-8824-C5B2595370AF}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows SDK Desktop Headers arm64 (HKLM-x32\...\{A69CD06B-FED5-81AD-3D62-38B325BAD254}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK Desktop Headers x64 (HKLM-x32\...\{3A928615-B22E-42B6-A30A-CB7B1135F1CF}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK Desktop Headers x64 (HKLM-x32\...\{6A96DEED-D0D8-6DD0-21BD-7D8F60714854}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows SDK Desktop Headers x86 (HKLM-x32\...\{86ADBBAE-77AE-FA26-7C17-802AE28AC316}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows SDK Desktop Headers x86 (HKLM-x32\...\{F50E3BAF-A09C-0730-319C-56221E12B747}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK Desktop Libs arm (HKLM-x32\...\{2F5EB743-8C97-930F-F41E-2EC8D5D5565B}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK Desktop Libs arm (HKLM-x32\...\{995DDD4F-928C-4EBA-9702-E7CD3F6A7A9D}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows SDK Desktop Libs arm64 (HKLM-x32\...\{166BCCDD-48C1-8103-A7E7-0F3DE471223D}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows SDK Desktop Libs arm64 (HKLM-x32\...\{87CB1714-C57F-13EA-8982-8F720B44BCF3}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK Desktop Libs x64 (HKLM-x32\...\{54140689-B7DB-B9CF-537D-8FEB279410F9}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows SDK Desktop Libs x64 (HKLM-x32\...\{838DC63C-34E9-9DBB-3A07-AEFC7768DC2A}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK Desktop Libs x86 (HKLM-x32\...\{238F56B7-7D14-F8EB-3F4D-8CFF18C19E2B}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows SDK Desktop Libs x86 (HKLM-x32\...\{24DAC073-46EA-ED5D-860A-845E8A27F426}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK Desktop Tools arm64 (HKLM-x32\...\{2E6C6299-BF5F-379D-55F2-8FD3367F5918}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows SDK Desktop Tools arm64 (HKLM-x32\...\{A4634E74-BFEE-CF6C-BF53-8D5E252FC574}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK Desktop Tools x64 (HKLM-x32\...\{795E8F11-37DE-611E-921E-7D70BE09BF7B}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows SDK Desktop Tools x64 (HKLM-x32\...\{BED088F5-660E-C8E2-9FF4-F652445CC5FA}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK Desktop Tools x86 (HKLM-x32\...\{540ADDB0-7A37-9B99-3568-FD1EA33D3B38}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows SDK Desktop Tools x86 (HKLM-x32\...\{CACD4EBA-F620-A294-1B60-3CEB0954FE02}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK DirectX x64 Remote (HKLM\...\{7E23CCDF-D8BD-36F8-CB1F-1DDE0D2B3F07}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK DirectX x86 Remote (HKLM-x32\...\{8122ABB9-0148-144D-F136-C3AFF4B985DB}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK EULA (HKLM-x32\...\{5F56BF12-0818-B58A-5862-939784E12F8B}) (Version: 10.1.18362.1 - Microsoft Corporations) Hidden

Windows SDK EULA (HKLM-x32\...\{E473E2C8-92A5-BA58-31B1-D24F923D927B}) (Version: 10.1.22621.3233 - Microsoft Corporations) Hidden

Windows SDK Facade Windows WinMD Versioned (HKLM-x32\...\{7741665B-2D3B-7E24-1014-56B62296CD88}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK Facade Windows WinMD Versioned (HKLM-x32\...\{A5EF45C5-FA27-7E8F-1AE8-E3D39BAC779E}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows SDK for Windows Store Apps (HKLM-x32\...\{6136B5FC-9FAD-B577-C5EA-AF2D266B7293}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK for Windows Store Apps Contracts (HKLM-x32\...\{5F1CD2CB-9C4E-BF51-9C82-DE916CA5E4AE}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK for Windows Store Apps Contracts (HKLM-x32\...\{C13D21F1-E9A3-FB93-18C4-B905FB47F122}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows SDK for Windows Store Apps DirectX x86 Remote (HKLM-x32\...\{5E5BB524-BA91-E7DE-4A85-11EC531AA622}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK for Windows Store Apps DirectX x86 Remote (HKLM-x32\...\{8F21D4CD-9CB4-2648-EECC-60147DE7B32D}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows SDK for Windows Store Apps Headers (HKLM-x32\...\{65E9398F-77A0-8681-026C-8CF092A71F11}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows SDK for Windows Store Apps Headers (HKLM-x32\...\{76749279-BE8A-20AF-F257-0A79E080CF7E}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK for Windows Store Apps Libs (HKLM-x32\...\{217E19C8-ACC0-C7ED-AB69-A30F3F96C625}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows SDK for Windows Store Apps Libs (HKLM-x32\...\{CE1B7747-A39C-46B8-EB6F-01E5262B1289}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK for Windows Store Apps Metadata (HKLM-x32\...\{4A130AF9-EC97-7D26-1FB0-03A0E5CC672B}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK for Windows Store Apps Metadata (HKLM-x32\...\{5FAF2ED2-CA24-0313-8CAF-C28DEE421200}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows SDK for Windows Store Apps Tools (HKLM-x32\...\{35552522-5930-E1A1-B1E9-FF78918E1543}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK for Windows Store Apps Tools (HKLM-x32\...\{A5174AE6-3704-EE0A-BEFF-21BC5275BA02}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows SDK for Windows Store Managed Apps Libs (HKLM-x32\...\{0374E0D0-98AE-0078-841E-DE9F70EDCB90}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK for Windows Store Managed Apps Libs (HKLM-x32\...\{CEDD7BE6-97B5-9AE8-57C0-B390E0C4328F}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows SDK Modern Non-Versioned Developer Tools (HKLM-x32\...\{76D32574-2D58-5B25-A3D7-8B2CB4873306}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK Modern Versioned Developer Tools (HKLM-x32\...\{21514D7D-4124-E52E-8483-727380B855D7}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows SDK Modern Versioned Developer Tools (HKLM-x32\...\{C65278B7-2A3B-2D88-1489-991195ECF5F2}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK Redistributables (HKLM-x32\...\{417DF3A3-09A1-3EAE-9F6C-5EB8DB4AD0F2}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows SDK Signing Tools (HKLM-x32\...\{4CA7ABF1-DB68-0F9E-5AD9-58550198D0AC}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows SDK Signing Tools (HKLM-x32\...\{56E349AC-F849-A151-269B-8CFF2D14BB14}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows Software Development Kit - Windows 10.0.18362.1 (HKLM-x32\...\{126dedf0-cc0e-4b48-9ece-806b0e437195}) (Version: 10.1.18362.1 - Microsoft Corporation)

Windows Software Development Kit - Windows 10.0.22621.3233 (HKLM-x32\...\{71684ad3-afc2-4a65-9d45-92ef58510f18}) (Version: 10.1.22621.3233 - Microsoft Corporation)

Windows Team Extension SDK (HKLM-x32\...\{6EEDDD9D-BF7B-8229-92B4-89DFCF7481ED}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows Team Extension SDK (HKLM-x32\...\{908BD5F8-E6C6-D2F6-AC09-C9F36EBC1A5F}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

Windows Team Extension SDK Contracts (HKLM-x32\...\{5D60A4EF-6EDF-AAF4-F0F0-49FDD40176B8}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

Windows Team Extension SDK Contracts (HKLM-x32\...\{FAA6B22E-702C-2AC7-05B1-197CD7CEA21D}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

WinRAR 7.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 7.11.0 - win.rar GmbH)

WinRT Intellisense Desktop - en-us (HKLM-x32\...\{B3CFDD53-69FB-E652-4F3D-D3781CF7F66E}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

WinRT Intellisense Desktop - en-us (HKLM-x32\...\{E67F1F03-FB4A-3D61-8999-E6A4C4B26F34}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{538E91F2-5231-E289-051F-DB55DE88CF56}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{7EF010FF-7800-28BA-FF49-2D219EC7BA82}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

WinRT Intellisense IoT - en-us (HKLM-x32\...\{36AE12FB-4349-6EAA-B6E4-5F4E06FA8AE8}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

WinRT Intellisense IoT - en-us (HKLM-x32\...\{44E4AFD9-74E0-9631-4CE0-E7C779624FE2}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{6430F847-9A5F-B3B8-7EEE-355F9F1CCD47}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{6B03A6A4-643C-57CE-CA6F-4E19BF47497A}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

WinRT Intellisense Mobile - en-us (HKLM-x32\...\{7E99A93A-8345-8BB6-EADB-10461E81BE0F}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

WinRT Intellisense Mobile - en-us (HKLM-x32\...\{918A448F-59E8-FBF5-B087-D3F07160C7E0}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

WinRT Intellisense PPI - en-us (HKLM-x32\...\{66483041-F590-EC46-4AF0-EE39C62FB680}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

WinRT Intellisense PPI - en-us (HKLM-x32\...\{C5BEF528-FEAA-9607-907E-0972D86AD06F}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{5EBB309A-2974-F721-42A9-0212E54B3693}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{9C61E6D2-C43E-6746-B519-6185558C4A24}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

WinRT Intellisense UAP - en-us (HKLM-x32\...\{6B37CC5B-78DF-5050-2215-68479716A587}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

WinRT Intellisense UAP - en-us (HKLM-x32\...\{94DE555A-B513-762F-D7C6-2B2922940641}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{250D5341-0879-4016-399C-BBCD87B80E95}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden

WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{3C25B44A-1D95-9E5E-57E3-19D9AE3C3BC1}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden

World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

WPT Redistributables (HKLM-x32\...\{A8E21603-6CBA-D168-ADF7-108A1DA16DB5}) (Version: 10.1.22621.3233 - Microsoft) Hidden

WPTx64 (DesktopEditions) (HKLM-x32\...\{DBD97598-BDA1-233D-708C-14FE85D60F3B}) (Version: 10.1.22621.3233 - Microsoft) Hidden

WPTx64 (OnecoreUAP) (HKLM-x32\...\{1D1FEDA5-D45A-C685-9947-A127B647407C}) (Version: 10.1.22621.3233 - Microsoft) Hidden

Xfer Records Serum 2 (HKLM-x32\...\Serum2) (Version: 2.0.17 - Xfer Records)

ドラゴンクエストX 5000年の旅路 遥かなる故郷へ オンライン (HKLM-x32\...\{B6A99A93-03DB-49EB-8F04-78AA22D571EC}) (Version: 4.0.2.0 - SQUARE ENIX CO., LTD.)

ドラゴンクエストX いにしえの竜の伝承 オンライン (HKLM-x32\...\{1D79B85A-17B7-40E0-94ED-791572CB082E}) (Version: 3.0.2.0 - SQUARE ENIX CO., LTD.)

ドラゴンクエストX オンライン (HKLM-x32\...\{300DCC8E-BE61-4FB5-B9D8-FDA19E3AAA38}) (Version: 1.0.4.0 - SQUARE ENIX CO., LTD.)

ドラゴンクエストX 眠れる勇者と導きの盟友 オンライン (HKLM-x32\...\{4FD779A0-9CAE-4A36-A33E-EB01DA36537E}) (Version: 2.0.2.0 - SQUARE ENIX CO., LTD.)

Packages:

=========

Minecraft for Windows -> C:\Program Files\WindowsApps\Microsoft.MinecraftUWP_1.26.4403.0_x64__8wekyb3d8bbwe [2026-08-15] (Microsoft Studios)

Minecraft Launcher -> C:\Program Files\WindowsApps\Microsoft.4297127D64EC6_2.6.2.0_x64__8wekyb3d8bbwe [2026-05-08] (Microsoft Studios)

MSI Center -> C:\Program Files\WindowsApps\9426MICRO-STARINTERNATION.MSICenter_2.0.71.0_x64__kzh8wxbdkxb8p [2026-07-16] (MICRO-STAR INTERNATIONAL CO., LTD) [Startup Task]

NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-11-06] (NVIDIA Corp.)

Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.51.353.0_x64__dt26b99r8h8gj [2025-04-06] (Realtek Semiconductor Corp)

WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.3.1.0_x64__8wekyb3d8bbwe [2026-08-06] (Microsoft Corp.)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{03B29243-35DA-4858-920E-B70A007DF5AA}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.217.3\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{0982FB18-B2DC-43DF-9DA3-A54C41F699EA}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.233.3\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{1A6B3BB8-4423-46A3-8848-CA56F15EDB9C}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.255.5\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{1C67DF85-7959-43C0-92F8-2CAD0314C31C}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.201.11\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{22D49062-B8D3-4DD5-B9C2-A044EA04D5CD}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.223.11\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{2B49DB21-41C5-44C0-8358-CA4C76205AE1}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.209.9\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{2E1C6470-986B-46B5-B238-4B0AA6D46629}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.257.13\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{2F2D16C4-81C2-4DF6-AD4E-E6FB18F48503}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.249.3\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{41B09861-5409-4D44-8CA4-D49FBFAA2E6F}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.195.49\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{448DD314-7FBB-429C-9DAA-C05A00D235A8}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.215.9\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{5247F326-2FF0-4920-998E-12AA35F0883C}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.213.7\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{5A96AC40-172E-45CB-823C-1BC933E771EC}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.251.23\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{5E9DEE2B-5F44-4C87-84B8-D2E7B11D7017}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.229.3\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{5EA43877-C6D8-4885-B77A-C0BB27E94372}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.263.3\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{6282d2e9-5906-bbf9-4b71-0c2869c6a835}\localserver32 -> C:\Program Files\Google\Play Games\current\service\Service.exe (Google LLC -> Google LLC)

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{674CB023-C9D4-4286-B1FF-A1FF76AD4B27}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.227.11\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{682D84E1-25A0-4741-9EA9-E57BA894B8C3}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.251.5\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{6A012BDE-3690-4747-9C3E-5E4FC354304A}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.241.13\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{6a27a1a9-7be8-1491-04ca-ee68a211c258}\localserver32 -> C:\Program Files\Google\Play Games\current\service\Service.exe (Google LLC -> Google LLC)

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{6A49690B-7DB6-424B-81CE-F51078F2A58D}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.203.13\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{79F05C14-E714-4C12-9924-93C812894CB0}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.195.57\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{7EE9863F-34ED-427C-B03E-3853C66D5CBE}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.259.11\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{7EFB4924-4B93-4C43-9832-9C3D05E85214}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.195.59\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{81093D63-7825-417B-BFC8-ADC63FA4E53D}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.263.3\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{8DC94452-5748-435A-B24F-B0F57718821E}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.225.7\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{9C391760-8CB8-4F1E-AB7D-0C9915EFB004}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.211.7\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{A462C645-A9C7-48CD-BE27-1461C1679067}\localserver32 -> C:\Users\Gustavo\AppData\Local\Discord\app-1.0.9253\Discord.exe (Discord Inc. -> Discord Inc.)

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{A78355B5-2A4D-486B-B97A-43448FC8C34D}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.207.5\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{B12A60CF-E572-4314-8F54-4E96C6660780}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.237.7\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{B314A279-F12F-4B54-A0AC-148FA68207CF}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.241.15\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{BB04C6F8-598E-4733-ABB4-07489C863436}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.205.9\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{BCF99248-58CE-4562-B227-14D1E171B49D}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.221.3\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{C88B3957-621C-415B-8EE5-B688FC7EF924}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.195.61\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{D2188EEC-2B0F-488C-8ECA-5285E8ECD87D}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.195.69\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{D610770A-6AE5-45D7-8ECD-4D130A66EF51}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.251.21\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{D6EDECA7-CB7A-485F-A3FF-FCA4DFEC563C}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.263.3\psuser_64.dll (Microsoft Corporation -> Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{D8599F80-3D26-46D2-8CF1-0AD21B0ECF31}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.195.65\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems Incorporated -> Adobe Systems)

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{ECCE2756-C45D-4E13-BC2D-EC9F138997E6}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.199.11\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{F27202C7-F5F7-4671-B2DA-24B5DC6B3B6E}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.261.11\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{F46A78BD-06FC-442C-88DF-0500F08F2379}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.195.45\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-4073064550-936356533-3332422256-1001_Classes\CLSID\{F583F9E9-8B95-4D88-BC72-AE190E9B71F9}\InprocServer32 -> C:\Users\Gustavo\AppData\Local\Microsoft\EdgeUpdate\1.3.239.19\psuser_64.dll => No File

ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )

ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )

ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )

ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\Program Files\7-Zip\7-zip.dll -> No File

ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2025-03-20] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2025-03-20] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\Program Files\7-Zip\7-zip.dll -> No File

ContextMenuHandlers5: [NvAppDesktopContext] -> {F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => C:\Program Files\NVIDIA Corporation\NVIDIA App\NvCpl\nvui.dll [2026-07-02] (NVIDIA Corporation -> NVIDIA Corporation)

ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b26cc1edfbb8f4d0\nvshext.dll [2026-07-03] (NVIDIA Corporation -> NVIDIA Corporation)

ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\Program Files\7-Zip\7-zip.dll -> No File

ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2017-09-26] (Adobe Systems Incorporated -> )

ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2025-03-20] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2025-03-20] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2011-03-15 11:29 - 2011-03-15 11:29 - 006391296 _____ () [File not signed] C:\Program Files (x86)\Adobe\Adobe Flash CS6\Common\Configuration\authplay.dll

2012-03-30 15:20 - 2012-03-30 15:20 - 000254464 _____ () [File not signed] C:\Program Files (x86)\Adobe\Adobe Flash CS6\Common\Configuration\External Libraries\EnvBrush.dll

2012-03-30 15:20 - 2012-03-30 15:20 - 000375296 _____ () [File not signed] C:\Program Files (x86)\Adobe\Adobe Flash CS6\Common\Configuration\External Libraries\EnvCollision.dll

2012-03-30 15:20 - 2012-03-30 15:20 - 000074752 _____ () [File not signed] C:\Program Files (x86)\Adobe\Adobe Flash CS6\Common\Configuration\External Libraries\EnvPointGrid.dll

2012-03-30 15:20 - 2012-03-30 15:20 - 000915456 _____ () [File not signed] C:\Program Files (x86)\Adobe\Adobe Flash CS6\Common\Configuration\External Libraries\EnvStroke.dll

2026-01-20 20:33 - 2026-08-06 13:32 - 239983616 _____ () [File not signed] C:\Program Files (x86)\Epic Games\Epic Online Services\managedArtifacts\98bc04bc842e4906993fd6d6644ffb8d\Win64\libcef.dll

2026-01-20 20:33 - 2026-08-06 13:32 - 000526336 _____ () [File not signed] C:\Program Files (x86)\Epic Games\Epic Online Services\managedArtifacts\98bc04bc842e4906993fd6d6644ffb8d\Win64\libEGL.dll

2026-01-20 20:33 - 2026-08-06 13:32 - 008949248 _____ () [File not signed] C:\Program Files (x86)\Epic Games\Epic Online Services\managedArtifacts\98bc04bc842e4906993fd6d6644ffb8d\Win64\libGLESv2.dll

2026-01-20 20:33 - 2026-08-06 13:32 - 005561856 _____ () [File not signed] C:\Program Files (x86)\Epic Games\Epic Online Services\managedArtifacts\98bc04bc842e4906993fd6d6644ffb8d\Win64\vk_swiftshader.dll

2025-04-07 13:53 - 2026-06-16 05:55 - 000118272 _____ () [File not signed] C:\Program Files (x86)\Gyazo\GyazoVideo\MFVideoEncoder.dll

2025-03-10 16:58 - 2025-03-10 16:58 - 079301632 _____ () [File not signed] C:\Program Files\Elgato\4KCaptureUtility\opencv_world346.dll

2025-03-10 16:59 - 2025-03-10 16:59 - 000185856 _____ () [File not signed] C:\Program Files\Elgato\4KCaptureUtility\RTICE_SDK_x64.dll

2025-03-10 16:59 - 2025-03-10 16:59 - 005622272 _____ () [File not signed] C:\Program Files\Elgato\4KCaptureUtility\RTK_IO_x64.dll

2026-08-22 20:45 - 2026-08-22 20:45 - 000969728 _____ () [File not signed] C:\Users\Gustavo\AppData\Local\Temp\sqlite-3.45.3.0-51b39504-d0a8-4ea4-86a2-e3f4edcb7644-sqlitejdbc.dll

2025-09-29 05:31 - 2025-09-29 05:31 - 000066560 _____ () [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\4KCaptureUt2e1d5dfe#\196b98e976c13f7ca391b3dd6aa9d975\4KCaptureUtility.XmlSerializers.ni.dll

2026-07-18 20:08 - 2026-07-18 20:08 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\PlugIns\NVIDIA App\MessageBusRouter.dll] C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\plugins\NVIDIA Overlay\MessageBusRouter.dll

2025-04-04 15:39 - 2026-07-18 20:08 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\MessageBus\NvMessageBusBroadcast.dll] C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\NvMessageBusBroadcast.dll

2012-03-30 15:12 - 2025-04-04 16:15 - 001793672 _____ (Adobe Systems Incorporated -> Adobe Systems, Incorporated) [File not signed] C:\Program Files (x86)\Adobe\Adobe Flash CS6\amtlib.dll

2012-03-30 15:19 - 2012-03-30 15:19 - 000277504 _____ (Adobe Systems Incorporated) [File not signed] C:\Program Files (x86)\Adobe\Adobe Flash CS6\Common\Configuration\External Libraries\FLBridge.dll

2012-03-30 15:19 - 2012-03-30 15:19 - 000062464 _____ (Adobe Systems Incorporated) [File not signed] C:\Program Files (x86)\Adobe\Adobe Flash CS6\Common\Configuration\External Libraries\FLfile.dll

2025-10-16 07:12 - 2025-10-16 07:12 - 002301952 _____ (deniszykov) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\deniszykov.615d72e4#\28a429c507507671a8efbfb516c74769\deniszykov.WebSocketListener.ni.dll

2025-03-10 16:58 - 2025-03-10 16:58 - 062532608 _____ (FFmpeg Project) [File not signed] C:\Program Files\Elgato\4KCaptureUtility\avcodec-61.dll

2025-03-10 16:58 - 2025-03-10 16:58 - 002799104 _____ (FFmpeg Project) [File not signed] C:\Program Files\Elgato\4KCaptureUtility\avutil-59.dll

2025-03-10 16:58 - 2025-03-10 16:58 - 000658432 _____ (FFmpeg Project) [File not signed] C:\Program Files\Elgato\4KCaptureUtility\swresample-5.dll

2025-03-10 16:58 - 2025-03-10 16:58 - 000702976 _____ (FFmpeg Project) [File not signed] C:\Program Files\Elgato\4KCaptureUtility\swscale-8.dll

2026-08-22 20:45 - 2026-08-22 20:45 - 000254464 ____N (Java™ Native Access (JNA)) [File not signed] C:\Users\Gustavo\AppData\Local\Temp\jna-2047620235\jna12567545817677992668.dll

2025-03-10 16:58 - 2025-03-10 16:58 - 000146944 _____ (Microsoft Corporation) [File not signed] [File is in use] C:\Program Files\Elgato\4KCaptureUtility\Microsoft.Wpf.Interop.DirectX.dll

2012-03-30 16:20 - 2012-03-30 16:20 - 000348160 _____ (Microsoft Corporation) [File not signed] C:\Program Files (x86)\Common Files\Adobe\Adobe Flash CS6\jre\bin\MSVCR71.dll

2026-01-20 20:33 - 2026-08-06 13:32 - 020807680 _____ (Microsoft® Corporation) [File not signed] C:\Program Files (x86)\Epic Games\Epic Online Services\managedArtifacts\98bc04bc842e4906993fd6d6644ffb8d\Win64\dxcompiler.dll

2025-10-16 07:06 - 2025-10-16 07:06 - 003109376 _____ (Newtonsoft) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_32\Newtonsoft.Json\9f65abf2a5e70a931977a858909ecd44\Newtonsoft.Json.ni.dll

2025-10-16 07:12 - 2025-10-16 07:12 - 003884544 _____ (Newtonsoft) [File not signed] C:\Windows\assembly\NativeImages_v4.0.30319_64\Newtonsoft.Json\404fe9fd96b1b14634dcafe213cec563\Newtonsoft.Json.ni.dll

2025-03-10 16:58 - 2025-03-10 16:58 - 000555520 _____ (NVIDIA Corporation) [File not signed] C:\Program Files\Elgato\4KCaptureUtility\cudart64_12.dll

2012-03-30 16:20 - 2012-03-30 16:20 - 002732032 _____ (Sun Microsystems, Inc.) [File not signed] C:\Program Files (x86)\Common Files\Adobe\Adobe Flash CS6\jre\bin\client\jvm.dll

2012-03-30 16:20 - 2012-03-30 16:20 - 000126976 _____ (Sun Microsystems, Inc.) [File not signed] C:\Program Files (x86)\Common Files\Adobe\Adobe Flash CS6\jre\bin\java.dll

2012-03-30 16:20 - 2012-03-30 16:20 - 000031744 _____ (Sun Microsystems, Inc.) [File not signed] C:\Program Files (x86)\Common Files\Adobe\Adobe Flash CS6\jre\bin\verify.dll

2012-03-30 16:20 - 2012-03-30 16:20 - 000046592 _____ (Sun Microsystems, Inc.) [File not signed] C:\Program Files (x86)\Common Files\Adobe\Adobe Flash CS6\jre\bin\zip.dll

2026-01-20 20:33 - 2026-08-06 13:32 - 001360384 _____ (The Chromium Authors) [File not signed] C:\Program Files (x86)\Epic Games\Epic Online Services\managedArtifacts\98bc04bc842e4906993fd6d6644ffb8d\Win64\chrome_elf.dll

2025-04-04 19:49 - 2024-12-05 16:32 - 001224704 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files\XPPen\LIBEAY32.dll

2025-04-04 19:49 - 2024-12-05 16:32 - 000279040 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files\XPPen\SSLEAY32.dll

2025-04-04 19:49 - 2023-07-28 15:48 - 000036352 _____ (The Qt Company Ltd) [File not signed] C:\Program Files\XPPen\imageformats\qdds.dll

2025-04-04 19:49 - 2024-12-05 16:32 - 000026112 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\XPPen\imageformats\qgif.dll

2025-04-04 19:49 - 2024-12-05 16:32 - 000033280 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\XPPen\imageformats\qicns.dll

2025-04-04 19:49 - 2024-12-05 16:32 - 000027648 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\XPPen\imageformats\qico.dll

2025-04-04 19:49 - 2024-12-05 16:32 - 000243712 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\XPPen\imageformats\qjpeg.dll

2025-04-04 19:49 - 2024-12-05 16:32 - 000021504 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\XPPen\imageformats\qsvg.dll

2025-04-04 19:49 - 2024-12-05 16:32 - 000020992 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\XPPen\imageformats\qtga.dll

2025-04-04 19:49 - 2024-12-05 16:32 - 000333824 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\XPPen\imageformats\qtiff.dll

2025-04-04 19:49 - 2024-12-05 16:32 - 000019968 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\XPPen\imageformats\qwbmp.dll

2025-04-04 19:49 - 2024-12-05 16:32 - 000415232 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\XPPen\imageformats\qwebp.dll

2025-04-04 19:49 - 2024-12-05 16:32 - 001064960 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\XPPen\platforms\qwindows.dll

2025-04-04 19:49 - 2024-12-05 16:32 - 004814336 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\XPPen\Qt5Core.dll

2025-04-04 19:49 - 2024-12-05 16:32 - 004965376 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\XPPen\Qt5Gui.dll

2025-04-04 19:49 - 2024-12-05 16:32 - 000930304 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\XPPen\Qt5Network.dll

2025-04-04 19:49 - 2024-12-05 16:32 - 000264704 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\XPPen\Qt5Svg.dll

2025-04-04 19:49 - 2024-12-05 16:32 - 004464640 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\XPPen\Qt5Widgets.dll

2025-04-04 19:49 - 2024-12-05 16:32 - 000149504 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\XPPen\Qt5Xml.dll

2025-04-04 19:49 - 2023-09-19 17:03 - 000146944 _____ (TODO: <公司名>) [File not signed] C:\Windows\system32\wintab32.dll

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Gustavo\AppData\Local\Temp:$DATA​ [16]

AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [5576]

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_441\bin\ssv.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_441\bin\jp2ssv.dll [2024-12-04] (Oracle America, Inc. -> Oracle Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-12-07 05:14 - 2026-06-01 23:07 - 000000850 _____ C:\Windows\system32\drivers\etc\hosts

0.0.0.0 www.quikquak.com

==================== Network ===========================

(Currently there is no automatic fix for this section.)

DNS Servers: Media is not connected to internet.

Windows Firewall is enabled.

Network Binding:

=============

Ethernet: Realtek Gaming 2.5GbE Family Controller -> rt640x64.sys

Wi-Fi: RZ608 Wi-Fi 6E 80MHz -> mtkwl6ex.sys

Bluetooth Network Connection 3: Bluetooth Device (Personal Area Network) #3 -> bthpan.sys

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Python311-32\Scripts\;C:\Program Files (x86)\Python311-32\;C:\Program Files (x86)\Common Files\Intel\Shared Libraries\redist\intel64\compiler;C:\Program Files (x86)\Common Files\Oracle\Java\java8path;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA app\NvDLISR;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\CMake\bin;C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\;C:\HaxeToolkit\haxe;C:\HaxeToolkit\neko;C:\Program Files\dotnet\;C:\Program Files\Git\cmd

HKU\S-1-5-21-4073064550-936356533-3332422256-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Gustavo\Desktop\VSYABO-LOADING.png

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)

HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{4E02C289-FE7B-48D9-81C0-EC67CFFD1AFA}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [{004F0E1C-934E-49A8-80A0-BA07C4898128}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [{9DFAFF14-D2D4-464F-B9CF-C0B05546D3FB}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File

FirewallRules: [{4F7BB6E7-4D85-404F-89E2-2AD2AF591D3E}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File

FirewallRules: [{F9466A85-ACD7-4D4B-A33E-6497270DBA30}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Schedule I\Schedule I.exe () [File not signed]

FirewallRules: [{EEB0F4F1-413F-442A-997D-0568678B5F41}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Schedule I\Schedule I.exe () [File not signed]

FirewallRules: [TCP Query User{448CBB0B-8212-414F-A25A-D4F4955D63F1}C:\program files (x86)\overwatch\_retail_\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\_retail_\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)

FirewallRules: [UDP Query User{7301E630-20EE-43BE-B38C-D69933966BC5}C:\program files (x86)\overwatch\_retail_\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\_retail_\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)

FirewallRules: [{7DC25279-43D9-47D2-9260-3A7B29055396}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Whos Your Daddy\Remake\WhosYourDaddy.exe => No File

FirewallRules: [{DEF6CE02-66BD-4565-B4AE-0A4DBADFB735}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Whos Your Daddy\Remake\WhosYourDaddy.exe => No File

FirewallRules: [{E50BD170-4D05-4862-8964-1417B77C68D1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Terraria\Terraria.exe (Re-Logic) [File not signed]

FirewallRules: [{89BB7715-F457-4EBE-BEEC-221899DA41FC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Terraria\Terraria.exe (Re-Logic) [File not signed]

FirewallRules: [{9834F094-EE1C-4E7A-B556-FC550A081B01}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ENA Dream BBQ\ENA-4-DreamBBQ.exe () [File not signed]

FirewallRules: [{3E74FF51-F88A-412B-954A-80781C49CE03}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ENA Dream BBQ\ENA-4-DreamBBQ.exe () [File not signed]

FirewallRules: [TCP Query User{D9EA42E7-CE02-4327-A93B-BE556D210944}C:\users\gustavo\appdata\roaming\modrinthapp\meta\java_versions\zulu17.56.15-ca-jre17.0.14-win_x64\bin\javaw.exe] => (Allow) C:\users\gustavo\appdata\roaming\modrinthapp\meta\java_versions\zulu17.56.15-ca-jre17.0.14-win_x64\bin\javaw.exe

FirewallRules: [UDP Query User{79A3A6EF-15F0-476F-B4F8-C54A5F41B601}C:\users\gustavo\appdata\roaming\modrinthapp\meta\java_versions\zulu17.56.15-ca-jre17.0.14-win_x64\bin\javaw.exe] => (Allow) C:\users\gustavo\appdata\roaming\modrinthapp\meta\java_versions\zulu17.56.15-ca-jre17.0.14-win_x64\bin\javaw.exe

FirewallRules: [TCP Query User{5EEC978A-904A-4EB7-B26B-3A93CB55FBA5}C:\program files (x86)\overwatch\_retail_\blizzardbrowser\blizzardbrowser.exe] => (Allow) C:\program files (x86)\overwatch\_retail_\blizzardbrowser\blizzardbrowser.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment Inc.)

FirewallRules: [UDP Query User{861E88ED-0F09-420B-8196-AA06F1224B4D}C:\program files (x86)\overwatch\_retail_\blizzardbrowser\blizzardbrowser.exe] => (Allow) C:\program files (x86)\overwatch\_retail_\blizzardbrowser\blizzardbrowser.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment Inc.)

FirewallRules: [TCP Query User{CC22B8AE-D6B9-4BD5-A935-CCE2DB949A91}C:\users\gustavo\appdata\local\programs\blockbench\blockbench.exe] => (Allow) C:\users\gustavo\appdata\local\programs\blockbench\blockbench.exe (Jannis Tobias Petersen -> JannisX11)

FirewallRules: [UDP Query User{23A4E933-F165-477A-B162-991370B0CCAC}C:\users\gustavo\appdata\local\programs\blockbench\blockbench.exe] => (Allow) C:\users\gustavo\appdata\local\programs\blockbench\blockbench.exe (Jannis Tobias Petersen -> JannisX11)

FirewallRules: [{C027784A-49F7-43F0-BBF8-5E475F4CBFD6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Madness Project Nexus 2\Madness Project Nexus.exe () [File not signed]

FirewallRules: [{66EC1128-8523-4D78-A7FE-BC1B57643EC1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Madness Project Nexus 2\Madness Project Nexus.exe () [File not signed]

FirewallRules: [TCP Query User{B90DE6EB-CBA6-494B-ABE3-DE9C515C8786}C:\users\gustavo\appdata\local\discord\app-1.0.9189\discord.exe] => (Allow) C:\users\gustavo\appdata\local\discord\app-1.0.9189\discord.exe => No File

FirewallRules: [UDP Query User{D1900409-BC3C-450C-A154-946FCC5EE2F2}C:\users\gustavo\appdata\local\discord\app-1.0.9189\discord.exe] => (Allow) C:\users\gustavo\appdata\local\discord\app-1.0.9189\discord.exe => No File

FirewallRules: [{04441A69-2BC2-4F14-868D-5EBA23AB0BA9}] => (Allow) C:\Program Files\Elgato\4KCaptureUtility\4KCaptureUtility.exe (Corsair Memory, Inc. -> Elgato Systems)

FirewallRules: [{50FBE047-DE63-4FFF-A103-8463A520AAE7}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [{5E65F8CD-3B11-47BB-972E-DD1A4BC3C5FE}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [{6A18AF9E-0DCD-4E55-8F7F-BA4A4F17E561}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [{76F3EBC2-21FF-49C7-BBA9-6E2314ADC50C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [TCP Query User{1C2FB37E-3E67-462A-86A3-53B2A95D1BA3}C:\users\gustavo\downloads\citra-windows-msvc-20240303-0ff3440_nightly\citra-windows-msvc-20240303-0ff3440\citra-qt.exe] => (Allow) C:\users\gustavo\downloads\citra-windows-msvc-20240303-0ff3440_nightly\citra-windows-msvc-20240303-0ff3440\citra-qt.exe () [File not signed]

FirewallRules: [UDP Query User{6D2D7FA9-DAF2-4CD4-A8D8-F961A12A91C7}C:\users\gustavo\downloads\citra-windows-msvc-20240303-0ff3440_nightly\citra-windows-msvc-20240303-0ff3440\citra-qt.exe] => (Allow) C:\users\gustavo\downloads\citra-windows-msvc-20240303-0ff3440_nightly\citra-windows-msvc-20240303-0ff3440\citra-qt.exe () [File not signed]

FirewallRules: [{EC24B686-711F-4DAA-BD54-665309D677D0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Among Us\Among Us.exe () [File not signed]

FirewallRules: [{E6C81C53-8B4B-43E4-91CB-D189C53ACD6E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Among Us\Among Us.exe () [File not signed]

FirewallRules: [{14C7D2DB-A7EA-41D5-88F5-04B5AC0C8E5A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Gang Beasts\Gang Beasts.exe () [File not signed]

FirewallRules: [{DB6C0EE6-A9EC-4496-8BC5-3032AFFE7F14}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Gang Beasts\Gang Beasts.exe () [File not signed]

FirewallRules: [{882491D3-C855-4CF8-8131-EEF0CB7F3199}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MINDWAVE Demo\MINDWAVE.exe (HoloHammer) [File not signed]

FirewallRules: [{45023723-BF3D-4D5F-AC1B-2FAE40ED3D33}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MINDWAVE Demo\MINDWAVE.exe (HoloHammer) [File not signed]

FirewallRules: [{80393397-A827-441C-B94A-9A911F12EC3E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ELDEN RING\Game\start_protected_game.exe (EasyAntiCheat Oy -> Epic Games, Inc.)

FirewallRules: [{D5167B4C-F007-4832-92B2-76B347E4A325}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ELDEN RING\Game\start_protected_game.exe (EasyAntiCheat Oy -> Epic Games, Inc.)

FirewallRules: [{94BEA1B9-E2CB-445D-89DA-ACFC6B9C2E13}] => (Allow) C:\Program Files (x86)\Iriun Webcam\IriunWebcam.exe (IriunWebcam) [File not signed]

FirewallRules: [{71A6490D-8727-443C-AE93-B0F8F28AC98B}] => (Allow) C:\Program Files\Parsec\parsecd.exe (Unity Technologies SF -> Parsec)

FirewallRules: [{95BE3670-9F98-416A-818A-1D7D32DB3499}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\gmod.exe (Facepunch Studios Ltd -> Facepunch Studios Ltd)

FirewallRules: [{A31E325D-0A11-4CF3-9C48-5BB175F6404E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\gmod.exe (Facepunch Studios Ltd -> Facepunch Studios Ltd)

FirewallRules: [{0B21A1F0-45E4-49DD-8D86-32F2E768A4C6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DELTARUNEdemo\DELTARUNE.exe () [File not signed]

FirewallRules: [{9C1381EF-36FC-4783-9A11-C9F1BB310571}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DELTARUNEdemo\DELTARUNE.exe () [File not signed]

FirewallRules: [TCP Query User{7D8464E8-21EF-4BC3-A664-312F54BA1C27}C:\program files\modrinth app\modrinth app.exe] => (Allow) C:\program files\modrinth app\modrinth app.exe => No File

FirewallRules: [UDP Query User{7A417E4C-B9F0-4ECA-ACE8-B9CCA3317D0C}C:\program files\modrinth app\modrinth app.exe] => (Allow) C:\program files\modrinth app\modrinth app.exe => No File

FirewallRules: [TCP Query User{8D713B59-FF9B-4D1A-BA4D-6448AAF81824}C:\users\gustavo\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe] => (Allow) C:\users\gustavo\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe

FirewallRules: [UDP Query User{7A01F553-9AEB-43C0-A86A-229E132A4B81}C:\users\gustavo\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe] => (Allow) C:\users\gustavo\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe

FirewallRules: [{872D138A-9895-44D0-B119-6E77A6A02492}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BombRushCyberfunk\Bomb Rush Cyberfunk.exe () [File not signed]

FirewallRules: [{01482410-6F27-4CA8-8807-9D736A44936C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BombRushCyberfunk\Bomb Rush Cyberfunk.exe () [File not signed]

FirewallRules: [{9CF57AFC-5A01-4661-AAA7-284716790158}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe (ConcernedApe) [File not signed]

FirewallRules: [{0B9898FC-38E6-4486-9C3F-1A0A2A0EDA66}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe (ConcernedApe) [File not signed]

FirewallRules: [{95B4C180-4666-4334-A747-32F255833B5A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sonic Adventure 2\Launcher.exe () [File not signed]

FirewallRules: [{8DB38B38-D7DA-438E-9443-4271AA2A0DE2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sonic Adventure 2\Launcher.exe () [File not signed]

FirewallRules: [{668F993C-C0B1-424F-AA6A-DBA070F04E4E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DELTARUNE\DELTARUNE.exe () [File not signed]

FirewallRules: [{C0736BFB-FBE8-4D2F-90B7-9E065123D13C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DELTARUNE\DELTARUNE.exe () [File not signed]

FirewallRules: [{C7A997CB-6150-4A83-A83C-4472D9201B8B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Five Nights at Freddy's Sister Location\SisterLocation.exe () [File not signed]

FirewallRules: [{BA6F7D65-40E5-400D-9BC8-4A2AB9642377}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Five Nights at Freddy's Sister Location\SisterLocation.exe () [File not signed]

FirewallRules: [TCP Query User{61A5B67D-B70E-4BDE-94F3-FC6431C45F4B}C:\users\gustavo\appdata\local\discord\app-1.0.9195\discord.exe] => (Allow) C:\users\gustavo\appdata\local\discord\app-1.0.9195\discord.exe => No File

FirewallRules: [UDP Query User{CDCA7408-1051-4261-A0F7-182B15370737}C:\users\gustavo\appdata\local\discord\app-1.0.9195\discord.exe] => (Allow) C:\users\gustavo\appdata\local\discord\app-1.0.9195\discord.exe => No File

FirewallRules: [{F4E0768C-9631-4E76-A3DA-210432EA7C09}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Brawlhalla\Brawlhalla.exe (UBISOFT ENTERTAINMENT INC. -> )

FirewallRules: [{EBB8C778-81D4-4428-920C-A39E7C789466}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Brawlhalla\Brawlhalla.exe (UBISOFT ENTERTAINMENT INC. -> )

FirewallRules: [TCP Query User{6366AE5E-44C5-4013-AA00-A6D567C08A91}C:\users\gustavo\downloads\ussd_0021\boltgame\binaries\win64\boltgame-win64-shipping.exe] => (Allow) C:\users\gustavo\downloads\ussd_0021\boltgame\binaries\win64\boltgame-win64-shipping.exe (ArcForged) [File not signed]

FirewallRules: [UDP Query User{EAB238D6-766A-4510-86DA-E3750976303A}C:\users\gustavo\downloads\ussd_0021\boltgame\binaries\win64\boltgame-win64-shipping.exe] => (Allow) C:\users\gustavo\downloads\ussd_0021\boltgame\binaries\win64\boltgame-win64-shipping.exe (ArcForged) [File not signed]

FirewallRules: [TCP Query User{2E278F0F-2E26-43A6-95D2-82CBC07E9CFB}C:\users\gustavo\desktop\ps3\the damn emulator\rpcs3.exe] => (Allow) C:\users\gustavo\desktop\ps3\the damn emulator\rpcs3.exe () [File not signed]

FirewallRules: [UDP Query User{160DA9D1-8B41-48EF-9D44-21F6D2E414B4}C:\users\gustavo\desktop\ps3\the damn emulator\rpcs3.exe] => (Allow) C:\users\gustavo\desktop\ps3\the damn emulator\rpcs3.exe () [File not signed]

FirewallRules: [TCP Query User{9356A0FE-78BE-4CA5-B476-E19BB4EAC747}C:\users\gustavo\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\gustavo\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)

FirewallRules: [UDP Query User{A03FC18E-85F1-4488-AC63-1A16F87026E4}C:\users\gustavo\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\gustavo\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)

FirewallRules: [{78ECEF0D-7D31-44DC-A516-4627EE795589}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PEAK\PEAK.exe () [File not signed]

FirewallRules: [{9A146991-EE80-4CEE-9293-8D94F75C0061}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PEAK\PEAK.exe () [File not signed]

FirewallRules: [{D4514F89-88AC-4CFA-89C8-A7C5DD97FA27}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ULTRAKILL\ULTRAKILL.exe () [File not signed]

FirewallRules: [{ABBD107C-A153-4CC0-B0E8-26FFCF04372F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ULTRAKILL\ULTRAKILL.exe () [File not signed]

FirewallRules: [{6363B00B-6827-4479-AA0D-01CC25127490}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\CastleCrashers\castle.exe () [File not signed]

FirewallRules: [{C25533FC-3627-46D4-A5E3-D82EB7EBAB41}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\CastleCrashers\castle.exe () [File not signed]

FirewallRules: [TCP Query User{2B71ECF9-1D98-4220-8B07-CCE877BAF721}C:\users\gustavo\desktop\tomodachi life\tomodachi life2\head-mingw\citra-qt.exe] => (Allow) C:\users\gustavo\desktop\tomodachi life\tomodachi life2\head-mingw\citra-qt.exe () [File not signed]

FirewallRules: [UDP Query User{F53E4E49-55AB-4569-AB8D-9E874315FBF2}C:\users\gustavo\desktop\tomodachi life\tomodachi life2\head-mingw\citra-qt.exe] => (Allow) C:\users\gustavo\desktop\tomodachi life\tomodachi life2\head-mingw\citra-qt.exe () [File not signed]

FirewallRules: [{FD2D9F14-33AA-4D3D-BF5E-FED75FD6BBE7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Scott Pilgrim vs The World\Scott.exe (UBISOFT ENTERTAINMENT INC. -> )

FirewallRules: [{AE652526-475D-4BE1-B2A8-B10CF18EEF49}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Scott Pilgrim vs The World\Scott.exe (UBISOFT ENTERTAINMENT INC. -> )

FirewallRules: [TCP Query User{F46BDF6D-A770-43AF-9503-8C35D7D7F774}C:\program files (x86)\steam\steamapps\common\tmodloader\dotnet\dotnet.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tmodloader\dotnet\dotnet.exe (.NET -> Microsoft Corporation)

FirewallRules: [UDP Query User{C87FDAE0-D15D-46C5-8FE6-EE602985C523}C:\program files (x86)\steam\steamapps\common\tmodloader\dotnet\dotnet.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tmodloader\dotnet\dotnet.exe (.NET -> Microsoft Corporation)

FirewallRules: [{F5EBB824-9B4E-434B-8DAC-D329C6CBBA60}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ATLYSS\ATLYSS.exe () [File not signed]

FirewallRules: [{67B8A7E7-B4E6-4347-BABA-9B7CF0E27561}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ATLYSS\ATLYSS.exe () [File not signed]

FirewallRules: [TCP Query User{61960D9B-F0BD-46B7-8903-042E21D99886}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)

FirewallRules: [UDP Query User{3DCF6EDE-B99A-4FAD-B46B-4D58DB639ACF}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)

FirewallRules: [{4A173572-E4E3-4FAC-83B5-CC7028686901}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DRAGON BALL FighterZ\DBFighterZ.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)

FirewallRules: [{F9D479EE-3E26-4122-9A8A-97D6F1A89A00}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DRAGON BALL FighterZ\DBFighterZ.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)

FirewallRules: [TCP Query User{116EF8F4-6BBC-4D04-A077-F8277875F1B7}C:\users\gustavo\appdata\local\programs\microsoft vs code\code.exe] => (Allow) C:\users\gustavo\appdata\local\programs\microsoft vs code\code.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [UDP Query User{6732B780-F20B-4B42-AA19-C2D69E4439A6}C:\users\gustavo\appdata\local\programs\microsoft vs code\code.exe] => (Allow) C:\users\gustavo\appdata\local\programs\microsoft vs code\code.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{AADDC911-B547-4988-8FF4-4242F6D0886F}] => (Allow) C:\Program Files (x86)\EaseUS\VoiceWave\bin\easeus.voicewave.exe => No File

FirewallRules: [{8554AD87-8FD6-447F-9242-D976B7D8FD64}] => (Allow) C:\Program Files (x86)\EaseUS\VoiceWave\bin\easeus.evw.vchanger.exe => No File

FirewallRules: [{4C246105-E137-4FF9-B3F6-25114DE9C1B3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hollow Knight\hollow_knight.exe () [File not signed]

FirewallRules: [{7191B297-8376-43E1-8A01-0F05A11FDF29}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hollow Knight\hollow_knight.exe () [File not signed]

FirewallRules: [TCP Query User{76E95768-47C7-4C43-B3E2-D45497B6C68F}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)

FirewallRules: [UDP Query User{98B3A8E2-F82D-41BB-BADD-783D5DF223D8}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)

FirewallRules: [{375D1456-A424-4DB3-A7A9-13FAEB7534C6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\WaterPark Simulator\WaterparkSimulator.exe () [File not signed]

FirewallRules: [{82372F42-8DF3-48BA-962B-AC433603E225}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\WaterPark Simulator\WaterparkSimulator.exe () [File not signed]

FirewallRules: [TCP Query User{D2730B5F-017C-4416-889B-36EC07B7A528}C:\program files\pkmncc launcher\lilithport.exe] => (Allow) C:\program files\pkmncc launcher\lilithport.exe () [File not signed]

FirewallRules: [UDP Query User{9F1B4B4F-44D8-4069-8E37-6983139CF37B}C:\program files\pkmncc launcher\lilithport.exe] => (Allow) C:\program files\pkmncc launcher\lilithport.exe () [File not signed]

FirewallRules: [TCP Query User{88F495B8-C364-4B1C-9E97-05837BD98A24}C:\users\gustavo\appdata\local\modrinth app\modrinth app.exe] => (Allow) C:\users\gustavo\appdata\local\modrinth app\modrinth app.exe (Rinth, Inc. -> ModrinthApp)

FirewallRules: [UDP Query User{294BF8B6-D1FE-423B-B02A-0661B1C40B13}C:\users\gustavo\appdata\local\modrinth app\modrinth app.exe] => (Allow) C:\users\gustavo\appdata\local\modrinth app\modrinth app.exe (Rinth, Inc. -> ModrinthApp)

FirewallRules: [TCP Query User{A5DED753-5F95-4940-8E12-E83C65B7C735}C:\program files\deluge\deluge.exe] => (Allow) C:\program files\deluge\deluge.exe () [File not signed]

FirewallRules: [UDP Query User{13AACDE6-5AF7-4969-923A-AD9E1CBBFF33}C:\program files\deluge\deluge.exe] => (Allow) C:\program files\deluge\deluge.exe () [File not signed]

FirewallRules: [{4302B992-A3B7-4315-BF9B-B015491BFF19}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BattleBlock Theater\BattleBlockTheater.exe () [File not signed]

FirewallRules: [{3E355662-01AE-42A1-8DAA-0982712FF13E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BattleBlock Theater\BattleBlockTheater.exe () [File not signed]

FirewallRules: [{F89FE7C4-C556-4E48-A5AF-77F76EEFBB82}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Undertale\UNDERTALE.exe (Toby Fox) [File not signed]

FirewallRules: [{A3E6EE5C-8D15-430B-9E73-71C0B89F3C06}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Undertale\UNDERTALE.exe (Toby Fox) [File not signed]

FirewallRules: [TCP Query User{259B4EBF-FD6C-45E3-BB9A-949AD344B141}C:\users\gustavo\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-delta\windows-x64\java-runtime-delta\bin\javaw.exe] => (Allow) C:\users\gustavo\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-delta\windows-x64\java-runtime-delta\bin\javaw.exe

FirewallRules: [UDP Query User{5790C354-BD54-406D-963B-509E48BF1E69}C:\users\gustavo\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-delta\windows-x64\java-runtime-delta\bin\javaw.exe] => (Allow) C:\users\gustavo\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-delta\windows-x64\java-runtime-delta\bin\javaw.exe

FirewallRules: [TCP Query User{6A23EF6F-8BFF-46A6-8EE5-D9A329D1DC6A}C:\users\gustavo\appdata\local\programs\lnv\stremio-4\stremio-runtime.exe] => (Allow) C:\users\gustavo\appdata\local\programs\lnv\stremio-4\stremio-runtime.exe (Smart Code OOD -> Node.js)

FirewallRules: [UDP Query User{93AD1EB4-7ACD-49E1-84F1-65155DE1F830}C:\users\gustavo\appdata\local\programs\lnv\stremio-4\stremio-runtime.exe] => (Allow) C:\users\gustavo\appdata\local\programs\lnv\stremio-4\stremio-runtime.exe (Smart Code OOD -> Node.js)

FirewallRules: [{286BD932-60AB-4475-BF5B-0C59DADC22D5}] => (Allow) D:\Steam\steamapps\common\Grand Theft Auto V Enhanced\PlayGTAV.exe => No File

FirewallRules: [{E20517B1-00FF-4269-BB50-8438E5EB2589}] => (Allow) D:\Steam\steamapps\common\Grand Theft Auto V Enhanced\PlayGTAV.exe => No File

FirewallRules: [TCP Query User{1B97A624-8F0B-47E4-AA0B-2E415664993D}D:\steam\steamapps\common\grand theft auto v enhanced\gta5_enhanced.exe] => (Allow) D:\steam\steamapps\common\grand theft auto v enhanced\gta5_enhanced.exe => No File

FirewallRules: [UDP Query User{85167F13-0D4B-49B6-8CCE-8613F272C677}D:\steam\steamapps\common\grand theft auto v enhanced\gta5_enhanced.exe] => (Allow) D:\steam\steamapps\common\grand theft auto v enhanced\gta5_enhanced.exe => No File

FirewallRules: [{F2693DEC-A410-4264-834E-A2DEA2E2379A}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [{F277C751-4B6F-4D72-B5F9-E8AE97F80FB3}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [TCP Query User{872CFE12-6D6E-40BD-A3AC-7B26202CD48C}C:\users\gustavo\desktop\mario64coop\sm64coopdx.exe] => (Allow) C:\users\gustavo\desktop\mario64coop\sm64coopdx.exe () [File not signed]

FirewallRules: [UDP Query User{49A1F7A0-8EFD-4E82-A247-458B5D59F1A2}C:\users\gustavo\desktop\mario64coop\sm64coopdx.exe] => (Allow) C:\users\gustavo\desktop\mario64coop\sm64coopdx.exe () [File not signed]

FirewallRules: [TCP Query User{3EB8BFF5-DB53-4AD4-870C-045C868DE087}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe (Re-Logic) [File not signed]

FirewallRules: [UDP Query User{F33C0E69-3D3C-4F1C-83E1-356E3C45753C}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe (Re-Logic) [File not signed]

FirewallRules: [{10C6DDF8-00E0-422E-97F0-3527BFF70278}] => (Allow) D:\Steam\steamapps\common\DRAGON BALL Z KAKAROT\AT.exe => No File

FirewallRules: [{B4A2F5D3-2803-476E-A81D-372DA75E03A6}] => (Allow) D:\Steam\steamapps\common\DRAGON BALL Z KAKAROT\AT.exe => No File

FirewallRules: [{C8F07856-5648-4825-B7BF-210B226C69BA}] => (Allow) D:\Steam\steamapps\common\DRAGON BALL Z KAKAROT\dlc\Remaster\AT.exe => No File

FirewallRules: [{466DC29E-CAB7-44C1-9C2F-D912B8FEA601}] => (Allow) D:\Steam\steamapps\common\DRAGON BALL Z KAKAROT\dlc\Remaster\AT.exe => No File

FirewallRules: [{2B531099-8A33-44A9-8CA0-896626DE4A59}] => (Allow) C:\Program Files (x86)\SquareEnix\DRAGON QUEST X\Game\DQXGame.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)

FirewallRules: [{0393CDF7-D4D5-4B60-ADCB-FD5038F41E9A}] => (Allow) C:\Program Files (x86)\SquareEnix\DRAGON QUEST X\Game\DQXGame.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)

FirewallRules: [{9956924D-4110-4DEA-B3D4-FFA71B1588A7}] => (Allow) C:\Program Files (x86)\SquareEnix\DRAGON QUEST X\Game\DQXOffline.exe => No File

FirewallRules: [{92C03BA6-40A7-4E53-B59E-F0E045B8B4FF}] => (Allow) C:\Program Files (x86)\SquareEnix\DRAGON QUEST X\Game\DQXOffline.exe => No File

FirewallRules: [{B731F82D-7850-4751-A405-F724B7B974B8}] => (Allow) C:\Program Files (x86)\SquareEnix\DRAGON QUEST X\Boot\DQXBoot.exe (SQUARE ENIX CO., LTD. -> )

FirewallRules: [{6D05F532-E296-4BBB-B361-FE9B37D42E23}] => (Allow) C:\Program Files (x86)\SquareEnix\DRAGON QUEST X\Boot\DQXBoot.exe (SQUARE ENIX CO., LTD. -> )

FirewallRules: [{965F26CD-186F-4001-80BD-9F7CF296B557}] => (Allow) C:\Program Files (x86)\SquareEnix\DRAGON QUEST X\Boot\DQXLauncher.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)

FirewallRules: [{EE0AD437-FF36-42D7-8DDF-6D0E3365E7ED}] => (Allow) C:\Program Files (x86)\SquareEnix\DRAGON QUEST X\Boot\DQXLauncher.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)

FirewallRules: [{1D146EDD-C188-402C-946D-17AAB0A1E0F0}] => (Allow) C:\Program Files (x86)\SquareEnix\DRAGON QUEST X\Boot\DQXUpdater.exe (SQUARE ENIX CO., LTD. -> )

FirewallRules: [{20D9B41A-1409-4D52-A610-C21BD559FCB1}] => (Allow) C:\Program Files (x86)\SquareEnix\DRAGON QUEST X\Boot\DQXUpdater.exe (SQUARE ENIX CO., LTD. -> )

FirewallRules: [{ADBD34FD-8194-437A-B593-4B9499148E45}] => (Allow) C:\Program Files (x86)\SquareEnix\DRAGON QUEST X\Game\DQXConfig.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)

FirewallRules: [{F6934AFD-6D2C-419B-8215-14C6E2CF1D8B}] => (Allow) C:\Program Files (x86)\SquareEnix\DRAGON QUEST X\Game\DQXConfig.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)

FirewallRules: [{AB737B24-63BD-494D-8727-23803524878B}] => (Allow) C:\Program Files (x86)\SquareEnix\DRAGON QUEST X\Boot\DQXTitle.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)

FirewallRules: [{F1D081E4-3297-4882-A67E-DFC9BDE99F39}] => (Allow) C:\Program Files (x86)\SquareEnix\DRAGON QUEST X\Boot\DQXTitle.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)

FirewallRules: [TCP Query User{CCEEBCD8-48E1-4093-9FA9-E9FA478D3664}C:\users\gustavo\appdata\roaming\modrinthapp\meta\java_versions\zulu21.42.19-ca-jre21.0.7-win_x64\bin\javaw.exe] => (Allow) C:\users\gustavo\appdata\roaming\modrinthapp\meta\java_versions\zulu21.42.19-ca-jre21.0.7-win_x64\bin\javaw.exe

FirewallRules: [UDP Query User{DEA8905C-D0D6-4D57-A959-8A0C9BDAE783}C:\users\gustavo\appdata\roaming\modrinthapp\meta\java_versions\zulu21.42.19-ca-jre21.0.7-win_x64\bin\javaw.exe] => (Allow) C:\users\gustavo\appdata\roaming\modrinthapp\meta\java_versions\zulu21.42.19-ca-jre21.0.7-win_x64\bin\javaw.exe

FirewallRules: [{CCD2B319-F330-448A-BAB3-DE7E10AAF364}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rivals of Aether\RivalsofAether.exe (Dan Fornace) [File not signed]

FirewallRules: [{41DA2846-6362-4BCC-BB47-647E93AA29A6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rivals of Aether\RivalsofAether.exe (Dan Fornace) [File not signed]

FirewallRules: [{2D3F0B82-4301-4E00-ACA1-B1062D4DB19B}] => (Allow) D:\Steam\steamapps\common\Scott Pilgrim EX Demo\Game.exe => No File

FirewallRules: [{799F5AAA-E14E-4512-989C-E438BD5067DE}] => (Allow) D:\Steam\steamapps\common\Scott Pilgrim EX Demo\Game.exe => No File

FirewallRules: [TCP Query User{E1F563FF-A9A4-43BA-AB99-7345BD691735}C:\program files\image-line\fl studio 2025\fl64.exe] => (Allow) C:\program files\image-line\fl studio 2025\fl64.exe (Image Line -> Image-Line)

FirewallRules: [UDP Query User{F11BF8E8-8A2C-4789-A1E8-9E52A196BF51}C:\program files\image-line\fl studio 2025\fl64.exe] => (Allow) C:\program files\image-line\fl studio 2025\fl64.exe (Image Line -> Image-Line)

FirewallRules: [TCP Query User{1F149216-180E-49BE-85C2-F11B58FE72A6}C:\program files (x86)\deluge\deluge.exe] => (Allow) C:\program files (x86)\deluge\deluge.exe () [File not signed]

FirewallRules: [UDP Query User{1EE65555-C49E-43D8-978B-398AD8856425}C:\program files (x86)\deluge\deluge.exe] => (Allow) C:\program files (x86)\deluge\deluge.exe () [File not signed]

FirewallRules: [{490F3CC6-E1E9-4602-BC25-BA1FD0BAA2C9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ScottPilgrimEX\Game.exe (Tribute Games) [File not signed]

FirewallRules: [{91E2E907-6F0E-4220-BF18-93901AF18462}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ScottPilgrimEX\Game.exe (Tribute Games) [File not signed]

FirewallRules: [{4DB847EA-4C2A-40AD-963E-1E70C620186F}] => (Allow) D:\Steam\steamapps\common\DRAGON BALL GEKISHIN SQUADRA\game.exe => No File

FirewallRules: [{3A182493-756D-4ECC-9A11-71223F38FED4}] => (Allow) D:\Steam\steamapps\common\DRAGON BALL GEKISHIN SQUADRA\game.exe => No File

FirewallRules: [TCP Query User{2874C547-188E-4683-B236-272ED96FEC2E}D:\rex release 0 hotfix 1\rex release 0 hotfix 1\dolphin.exe] => (Allow) D:\rex release 0 hotfix 1\rex release 0 hotfix 1\dolphin.exe => No File

FirewallRules: [UDP Query User{EB1D92D9-53AF-4EE8-AE54-0E80133468F0}D:\rex release 0 hotfix 1\rex release 0 hotfix 1\dolphin.exe] => (Allow) D:\rex release 0 hotfix 1\rex release 0 hotfix 1\dolphin.exe => No File

FirewallRules: [TCP Query User{92FD55D5-1847-4788-895E-2C57BE64DD89}C:\users\gustavo\appdata\local\discord\app-1.0.9233\discord.exe] => (Allow) C:\users\gustavo\appdata\local\discord\app-1.0.9233\discord.exe => No File

FirewallRules: [UDP Query User{8A4D24DE-335E-4A9A-97D6-CFAD5E326061}C:\users\gustavo\appdata\local\discord\app-1.0.9233\discord.exe] => (Allow) C:\users\gustavo\appdata\local\discord\app-1.0.9233\discord.exe => No File

FirewallRules: [{8DF4844D-51D7-4F6F-8B69-15A6646CC174}] => (Allow) D:\Steam\steamapps\common\Geometry Dash\GeometryDash.exe => No File

FirewallRules: [{518CCD4A-FD3D-4744-9346-774557A0D820}] => (Allow) D:\Steam\steamapps\common\Geometry Dash\GeometryDash.exe => No File

FirewallRules: [TCP Query User{5335DD39-6F8B-4DA4-9402-DFED1242216B}C:\users\gustavo\appdata\local\discord\app-1.0.9235\discord.exe] => (Allow) C:\users\gustavo\appdata\local\discord\app-1.0.9235\discord.exe => No File

FirewallRules: [UDP Query User{E7F31147-AAA5-4BDF-8F47-C24A7EE1CD80}C:\users\gustavo\appdata\local\discord\app-1.0.9235\discord.exe] => (Allow) C:\users\gustavo\appdata\local\discord\app-1.0.9235\discord.exe => No File

FirewallRules: [{BE920464-EC07-411A-B2E6-85F76413D827}] => (Allow) D:\Steam\steamapps\common\Sonic Adventure DX\AppLauncher.exe => No File

FirewallRules: [{8F349A91-B784-4B3E-A0A2-57AE24EE2662}] => (Allow) D:\Steam\steamapps\common\Sonic Adventure DX\AppLauncher.exe => No File

FirewallRules: [{24057406-F433-40C9-9E13-25420112BC17}] => (Allow) D:\Steam\steamapps\common\MarvelRivals\MarvelRivals_Launcher.exe => No File

FirewallRules: [{F110683A-ADE8-451D-9C2B-F909EE8FF49F}] => (Allow) D:\Steam\steamapps\common\MarvelRivals\MarvelRivals_Launcher.exe => No File

FirewallRules: [{48BBDC44-8968-4FF3-B580-A2B65556ACAE}] => (Allow) D:\Steam\steamapps\common\Destiny 2\destiny2launcher.exe => No File

FirewallRules: [{7A885B4D-99A5-43CC-B48D-A93781A7A953}] => (Allow) D:\Steam\steamapps\common\Destiny 2\destiny2launcher.exe => No File

FirewallRules: [TCP Query User{806BA55E-F8D2-4365-A2D7-620C57F9B236}D:\steam\steamapps\common\destiny 2\destiny2.exe] => (Allow) D:\steam\steamapps\common\destiny 2\destiny2.exe => No File

FirewallRules: [UDP Query User{E810238A-80F1-4A3A-8C47-36912389C89B}D:\steam\steamapps\common\destiny 2\destiny2.exe] => (Allow) D:\steam\steamapps\common\destiny 2\destiny2.exe => No File

FirewallRules: [TCP Query User{6931FECF-A11C-47A3-8E6C-CAA23875C314}C:\users\gustavo\appdata\local\discord\app-1.0.9245\discord.exe] => (Allow) C:\users\gustavo\appdata\local\discord\app-1.0.9245\discord.exe => No File

FirewallRules: [UDP Query User{F5E7F853-04B5-48FB-8964-030F2129041A}C:\users\gustavo\appdata\local\discord\app-1.0.9245\discord.exe] => (Allow) C:\users\gustavo\appdata\local\discord\app-1.0.9245\discord.exe => No File

FirewallRules: [{F89448E6-7BD9-4987-A92F-A38B49FA3DC3}] => (Allow) C:\Program Files (x86)\Overwolf\0.304.1.1\OverwolfBrowser.exe => No File

FirewallRules: [{8523CC0A-357F-42C3-B878-DAC98273B4FA}] => (Allow) C:\Program Files (x86)\Overwolf\0.304.1.1\OverwolfBrowser.exe => No File

FirewallRules: [{D7A8633C-55C2-43B4-9579-214B99B51A48}] => (Block) C:\Program Files (x86)\Overwolf\0.304.1.1\OverwolfBrowser.exe => No File

FirewallRules: [{27B1807B-0077-4F4A-9939-E1CC00754823}] => (Block) C:\Program Files (x86)\Overwolf\0.304.1.1\OverwolfBrowser.exe => No File

FirewallRules: [{CF5C17C6-7AEC-4144-A875-E4B10E461542}] => (Allow) C:\Program Files (x86)\Overwolf\0.305.0.9\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)

FirewallRules: [{C3EAE391-F768-48E8-BE2A-1C2053D91F2E}] => (Allow) C:\Program Files (x86)\Overwolf\0.305.0.9\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)

FirewallRules: [TCP Query User{A0F85926-B58D-413A-BC48-07136C2265DA}C:\users\gustavo\appdata\local\discord\app-1.0.9248\discord.exe] => (Allow) C:\users\gustavo\appdata\local\discord\app-1.0.9248\discord.exe => No File

FirewallRules: [UDP Query User{7AE45D81-DAD3-4D89-BA68-0609E77B1EBC}C:\users\gustavo\appdata\local\discord\app-1.0.9248\discord.exe] => (Allow) C:\users\gustavo\appdata\local\discord\app-1.0.9248\discord.exe => No File

FirewallRules: [{67839C63-1E47-4CFE-AC9F-19B94DA95AAB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DRAGON BALL GEKISHIN SQUADRA\game.exe (Bandai Namco Entertainment.Inc) [File not signed]

FirewallRules: [{ABE9B07B-1B44-491E-9509-3F1ECD838BFD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DRAGON BALL GEKISHIN SQUADRA\game.exe (Bandai Namco Entertainment.Inc) [File not signed]

FirewallRules: [{8FB96E61-2C54-446E-924B-B81486D1E36A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MECCHA CHAMELEON\PenguinHotel.exe (Epic Games, Inc.) [File not signed]

FirewallRules: [{95902368-A102-4E96-823B-3C3961DAC9BF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MECCHA CHAMELEON\PenguinHotel.exe (Epic Games, Inc.) [File not signed]

FirewallRules: [TCP Query User{B66DEE10-9745-410C-B899-4AD9A7F8B089}C:\program files (x86)\steam\steamapps\common\meccha chameleon\chameleon\binaries\win64\penguinhotel-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\meccha chameleon\chameleon\binaries\win64\penguinhotel-win64-shipping.exe (Epic Games, Inc.) [File not signed]

FirewallRules: [UDP Query User{9113B17D-74B7-4108-B00D-2EF297D4EB1A}C:\program files (x86)\steam\steamapps\common\meccha chameleon\chameleon\binaries\win64\penguinhotel-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\meccha chameleon\chameleon\binaries\win64\penguinhotel-win64-shipping.exe (Epic Games, Inc.) [File not signed]

FirewallRules: [{E98FF428-8003-427E-919B-CBFF337ADE62}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Endacopia\Windows\Endacopia.exe (AndyL4nd) [File not signed]

FirewallRules: [{49E91E17-61D8-4457-9E0D-8F9A3BDD7A1B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Endacopia\Windows\Endacopia.exe (AndyL4nd) [File not signed]

FirewallRules: [{A853D052-93B8-45B6-BCC8-A14A538F3F86}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Endacopia\Windows\winsetup.exe (Chris Jones) [File not signed]

FirewallRules: [{274F4221-3C2A-4FFD-9D37-AA3EBC5EDDBA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Endacopia\Windows\winsetup.exe (Chris Jones) [File not signed]

FirewallRules: [{322201B3-A866-4A55-A086-6D086A22641F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Big Walk\Big Walk.exe () [File not signed]

FirewallRules: [{6D7F34F0-3E5D-42DF-9C8D-003CAD1F9FCD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Big Walk\Big Walk.exe () [File not signed]

FirewallRules: [{BEF039EC-B928-422C-92D1-A96912B25674}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MarvelRivals\MarvelRivals_Launcher.exe (NetEase (Hangzhou) Network Co., Ltd -> )

FirewallRules: [{09AE772F-AF7C-4D4E-990E-7C163524C205}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MarvelRivals\MarvelRivals_Launcher.exe (NetEase (Hangzhou) Network Co., Ltd -> )

FirewallRules: [{D58C3411-6309-4EE0-B6E0-B6C2DA1E2945}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Uno\UNO.exe (UBISOFT ENTERTAINMENT INC. -> )

FirewallRules: [{3F55CADF-91C6-4548-B66A-AA8B198AC20E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Uno\UNO.exe (UBISOFT ENTERTAINMENT INC. -> )

FirewallRules: [{F5668AF7-A2B3-4D9A-A6B1-654808D67E8F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Lethal Company\Lethal Company.exe () [File not signed]

FirewallRules: [{9CDFEA7D-9811-4D65-AA68-3F0CECB2029F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Lethal Company\Lethal Company.exe () [File not signed]

FirewallRules: [TCP Query User{D613EAA4-2A77-4035-84AA-9C5B9D0808C3}C:\users\gustavo\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\bin\javaw.exe] => (Allow) C:\users\gustavo\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\bin\javaw.exe

FirewallRules: [UDP Query User{F4641F38-43DB-4403-B46B-F7CD35D7153E}C:\users\gustavo\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\bin\javaw.exe] => (Allow) C:\users\gustavo\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\bin\javaw.exe

FirewallRules: [TCP Query User{94EC62FD-6467-4C09-BF78-AF49B11E0545}C:\users\gustavo\appdata\roaming\modrinthapp\meta\java_versions\zulu25.36.15-ca-jre25.0.4-win_x64\bin\javaw.exe] => (Allow) C:\users\gustavo\appdata\roaming\modrinthapp\meta\java_versions\zulu25.36.15-ca-jre25.0.4-win_x64\bin\javaw.exe

FirewallRules: [UDP Query User{49C4F4EC-BB89-4810-8C73-2F0232819F55}C:\users\gustavo\appdata\roaming\modrinthapp\meta\java_versions\zulu25.36.15-ca-jre25.0.4-win_x64\bin\javaw.exe] => (Allow) C:\users\gustavo\appdata\roaming\modrinthapp\meta\java_versions\zulu25.36.15-ca-jre25.0.4-win_x64\bin\javaw.exe

FirewallRules: [{BEEC4088-67C6-44D4-A3D2-1D943C6A180F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.41021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{C3B03946-107C-46C0-8AB6-4AB68E43DB91}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.41021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{DD21BD8A-A82C-4EA5-A3B9-7B78AA352CF4}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.41021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{E5FA43EC-3B88-42CC-8CAD-614D5AD4B25A}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2608.41021.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{CF9D4B98-E691-411B-ADD6-1E137937E273}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\mscopilot.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{D6B177F4-591C-4A78-B90A-8274DE6D3A18}] => (Allow) LPort=32683

FirewallRules: [{3E800125-791D-4984-A823-351F0BBC5293}] => (Allow) LPort=33683

FirewallRules: [{086300B1-44E1-4B0E-B571-61B5560901A7}] => (Allow) LPort=26822

FirewallRules: [{9B0AC633-4DAB-431E-9E3F-9B3CDC70D7F9}] => (Allow) C:\Program Files\Razer\RazerAppEngine\app-4.0.699\RazerAppEngine.exe (Razer USA Ltd. -> Razer Inc.)

FirewallRules: [{494106C7-27E2-4458-8517-BDEEA3265048}] => (Allow) C:\Program Files\Razer\RazerAppEngine\app-4.0.698\RazerAppEngine.exe (Razer USA Ltd. -> Razer Inc.)

FirewallRules: [{FFF3DBA7-2C99-4BAA-A086-E9078AD38642}] => (Allow) C:\Program Files\Google\Play Games\current\emulator\crosvm.exe (Google LLC -> )

FirewallRules: [{5FDECD6C-DE16-4FAA-AD13-44DFEE837DB7}] => (Allow) C:\Program Files\Google\Play Games\current\emulator\crosvm.exe (Google LLC -> )

FirewallRules: [{3092B247-97CD-4BEB-9562-9CC085F25062}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

FirewallRules: [TCP Query User{90BBDD5D-E7EB-4BA7-9F5A-A500A9E5EC7E}C:\program files\epic games\fortnite\engine\binaries\win64\epicwebhelper.exe] => (Allow) C:\program files\epic games\fortnite\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)

FirewallRules: [UDP Query User{5C55A6E9-C565-4A89-8B19-C01C72131410}C:\program files\epic games\fortnite\engine\binaries\win64\epicwebhelper.exe] => (Allow) C:\program files\epic games\fortnite\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)

==================== Restore Points =========================

21-08-2026 04:52:56 Scheduled Checkpoint

==================== Faulty Device Manager Devices ============

Name: RZ608 Wi-Fi 6E 80MHz

Description: RZ608 Wi-Fi 6E 80MHz

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: MediaTek, Inc.

Service: mtkwlex

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

==================== Event log errors: ========================

Application errors:

==================

Error: (08/19/2026 04:47:28 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: MsMpEng.exe, version: 4.18.26070.9, time stamp: 0x9a78fc05

Faulting module name: mpengine.dll, version: 1.1.26070.7, time stamp: 0xa09e75a9

Exception code: 0xc0000005

Fault offset: 0x000000000092e48b

Faulting process id: 0x11b8

Faulting application start time: 0x01dd2f529d35b9db

Faulting application path: C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MsMpEng.exe

Faulting module path: C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2B510A9F-83F9-4BAA-B42C-824EED038604}\mpengine.dll

Report Id: b3b7605a-9aa3-4610-ae2b-d6f35273f87c

Faulting package full name: 

Faulting package-relative application ID:

Error: (08/18/2026 04:47:27 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-NKGAUSP)

Description: Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.

Error: (08/18/2026 04:47:26 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-NKGAUSP)

Description: Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.

Error: (08/18/2026 04:47:26 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-NKGAUSP)

Description: Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.

Error: (08/18/2026 04:47:25 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-NKGAUSP)

Description: Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.

Error: (08/18/2026 04:47:24 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-NKGAUSP)

Description: Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.

Error: (08/18/2026 04:47:24 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-NKGAUSP)

Description: Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.

Error: (08/18/2026 04:47:22 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-NKGAUSP)

Description: Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.

System errors:

=============

Error: (08/22/2026 10:45:27 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-NKGAUSP)

Description: Unable to start a DCOM Server: {ED215C26-C810-49CE-929E-31D7E83A82E9} as Unavailable/Unavailable. The error:

"2147942852"

Happened while starting this command:

"C:\Program Files (x86)\Microsoft\Copilot\Application\mscopilot_proxy.exe" -Embedding

Error: (08/22/2026 10:45:27 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-NKGAUSP)

Description: Unable to start a DCOM Server: {ED215C26-C810-49CE-929E-31D7E83A82E9} as Unavailable/Unavailable. The error:

"2147942852"

Happened while starting this command:

"C:\Program Files (x86)\Microsoft\Copilot\Application\mscopilot_proxy.exe" -Embedding

Error: (08/22/2026 10:45:27 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-NKGAUSP)

Description: Unable to start a DCOM Server: {ED215C26-C810-49CE-929E-31D7E83A82E9} as Unavailable/Unavailable. The error:

"2147942852"

Happened while starting this command:

"C:\Program Files (x86)\Microsoft\Copilot\Application\mscopilot_proxy.exe" -Embedding

Error: (08/22/2026 10:45:27 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-NKGAUSP)

Description: Unable to start a DCOM Server: {ED215C26-C810-49CE-929E-31D7E83A82E9} as Unavailable/Unavailable. The error:

"2147942852"

Happened while starting this command:

"C:\Program Files (x86)\Microsoft\Copilot\Application\mscopilot_proxy.exe" -Embedding

Error: (08/22/2026 10:44:27 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-NKGAUSP)

Description: Unable to start a DCOM Server: {ED215C26-C810-49CE-929E-31D7E83A82E9} as Unavailable/Unavailable. The error:

"2147942852"

Happened while starting this command:

"C:\Program Files (x86)\Microsoft\Copilot\Application\mscopilot_proxy.exe" -Embedding

Error: (08/22/2026 10:44:27 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-NKGAUSP)

Description: Unable to start a DCOM Server: {ED215C26-C810-49CE-929E-31D7E83A82E9} as Unavailable/Unavailable. The error:

"2147942852"

Happened while starting this command:

"C:\Program Files (x86)\Microsoft\Copilot\Application\mscopilot_proxy.exe" -Embedding

Error: (08/22/2026 10:44:27 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-NKGAUSP)

Description: Unable to start a DCOM Server: {ED215C26-C810-49CE-929E-31D7E83A82E9} as Unavailable/Unavailable. The error:

"2147942852"

Happened while starting this command:

"C:\Program Files (x86)\Microsoft\Copilot\Application\mscopilot_proxy.exe" -Embedding

Error: (08/22/2026 10:44:27 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-NKGAUSP)

Description: Unable to start a DCOM Server: {ED215C26-C810-49CE-929E-31D7E83A82E9} as Unavailable/Unavailable. The error:

"2147942852"

Happened while starting this command:

"C:\Program Files (x86)\Microsoft\Copilot\Application\mscopilot_proxy.exe" -Embedding

Windows Defender:

================

TimeCreated : 8/22/2026 4:52:29 AM

(Message     : Microsoft Defender Antivirus scan has been stopped before completion.) (Scan Type: Antimalware) (Scan Parameters: Quick Scan) (Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days) 

TimeCreated : 8/21/2026 4:51:52 AM

(Message     : Microsoft Defender Antivirus scan has been stopped before completion.) (Scan Type: Antimalware) (Scan Parameters: Quick Scan) (Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days) 

TimeCreated : 8/19/2026 4:47:31 AM

(Message     : Microsoft Defender Antivirus engine has been terminated due to an unexpected error.) (Failure Type: Unexpected Crash) (Exception code: 0xc0000005) (Resource: Unknown) (Engine Code: 9626763) 

TimeCreated : 8/19/2026 4:47:28 AM

(Message     : Microsoft Defender Antivirus Real-Time Protection feature has encountered an error and failed.) (Feature: Network Inspection System) (Error Code: 0x80070006) (Error description: The handle is invalid. ) (Reason: The filter driver was unloaded unexpectedly.) 

TimeCreated : 8/19/2026 4:47:28 AM

(Message     : Microsoft Defender Antivirus Real-Time Protection feature has encountered an error and failed.) (Feature: Behavior Monitoring) (Error Code: 0x80070006) (Error description: The handle is invalid. ) (Reason: The filter driver was unloaded unexpectedly.) 

TimeCreated : 8/19/2026 4:47:28 AM

(Message     : Microsoft Defender Antivirus Real-Time Protection feature has encountered an error and failed.) (Feature: On Access) (Error Code: 0x80070006) (Error description: The handle is invalid. ) (Reason: The filter driver was unloaded unexpectedly.) 

TimeCreated : 8/19/2026 4:47:27 AM

(Message     : Microsoft Defender Antivirus engine has been terminated due to an unexpected error.) (Failure Type: Crash) (Exception code: 0xc0000005) (Resource: boot://\\.\E:\) (Engine Code: 16422) 

TimeCreated : 8/18/2026 5:32:55 AM

(Message     : Microsoft Defender Antivirus scan has been stopped before completion.) (Scan Type: Antimalware) (Scan Parameters: Quick Scan) (Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days) 

CodeIntegrity:

===============

Date: 2026-08-22 22:44:44

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpDefenderCoreService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Memory info =========================== 

BIOS: American Megatrends International, LLC. 1.J0 03/13/2025

Motherboard: Micro-Star International Co., Ltd. B650 GAMING PLUS WIFI (MS-7E26)

Processor: AMD Ryzen 5 7500F 6-Core Processor 

Percentage of memory in use: 51%

Total physical RAM: 32361.99 MB

Available physical RAM: 15680.88 MB

Total Virtual: 39285.66 MB

Available Virtual: 13013.24 MB

==================== Drives ================================

Disk 0 - Drive c: () (Fixed) (Total:1862.37 GB) (Free:174.07 GB) (Model: KLEVV CRAS C910 M.2 NVMe SSD 2TB) NTFS

Disk 2 - Drive d: (ESD-USB) (Removable) (Total:7.44 GB) (Free:2.88 GB) FAT32

Disk 1 - Drive e: (X31) (Fixed) (Total:953.85 GB) (Free:10.99 GB) (Model: Hynix PSSD X31 SCSI Disk Device) exFAT

Disk 0 - \\?\Volume{31a6ac0b-0234-4303-bf77-0582d0d0c63b}\ () (Fixed) (Total:0.53 GB) (Free:0.08 GB) NTFS

Disk 0 - \\?\Volume{720cb695-68f7-4a94-b22a-fd285bcd565b}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================

Disk: 0 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================

Disk: 1 (MBR Code: Windows 7/8/10) (Size: 953.9 GB) (Disk ID: 38455EAB)

Partition 1: (Not Active) - (Size=953.9 GB) - (Type=07 NTFS)

==========================================================

Disk: 2 (MBR Code: Windows 7/8/10) (Size: 7.5 GB) (Disk ID: B22A8CCC)

Partition 1: (Active) - (Size=7.5 GB) - (Type=FAT32)

==================== End of Addition.txt =======================

Read the original on bleepingcomputer.com

Comments

Nothing yet. Say the first thing.

    Sign in to join the conversation.