Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-10-2026 Ran by o0the (16-10-2026 01:48:40) Running from C:\Users\o0the\Downloads Microsoft Windows 11 家庭版 中文版 Version 26H2 26300.9711 (X64) (2025-08-18 15:29:52) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= (If an entry is included in the fixlist, it will be removed.) Administrator (S-1-5-21-2339272927-596407228-3174859544-500 - Administrators - Disabled) DefaultAccount (S-1-5-21-2339272927-596407228-3174859544-503 - Limited - Disabled) Guest (S-1-5-21-2339272927-596407228-3174859544-501 - Limited - Disabled) o0the (DisplayName: -XwX- TheHb) (S-1-5-21-2339272927-596407228-3174859544-1001 - Administrators - Enabled) [MS Account] => C:\Users\o0the WDAGUtilityAccount (S-1-5-21-2339272927-596407228-3174859544-504 - Limited - Disabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Kaspersky (Enabled - Up to date) {A03EE001-4276-7D6F-4B4A-400EB933F7F3} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky (Enabled) {98056124-0819-7C37-6015-E93B47E0B088} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-2339272927-596407228-3174859544-1001\...\uTorrent) (Version: 3.6.0.47390 - BitTorrent Limited) 7-Zip 25.01 (x64) (HKLM\...\7-Zip) (Version: 25.01 - Igor Pavlov) Adobe Photoshop 2025 (HKLM-x32\...\PHSP_26_9) (Version: 26.9.0.15 - Adobe Inc.) Adobe Substance 3D Painter (HKLM-x32\...\SBSTP_12_0_3) (Version: 12.0.3 - Adobe Inc.) Battlestate Games Launcher 15.0.0.4595 (HKLM-x32\...\{B0FDA062-7581-4D67-B085-C4E7C358037F}_is1) (Version: 15.0.0.4595 - Battlestate Games) Cheat Engine 7.6 (HKLM\...\Cheat Engine_is1) (Version: - Cheat Engine) Chrome64 (HKLM-x32\...\{UT2KQ1X5-21MU-UY9Q-PIVE-QB17VKSZO2WD}) (Version: 1.9.199.3 - MonKeyDu) Copilot (HKLM-x32\...\Microsoft Copilot) (Version: 155.0.4283.45 - Microsoft Corporation) DirectOutput (HKLM\...\{CD56BF03-87F9-47C7-95C4-7794CC603C27}) (Version: 8.0.213.0 - Logitech) Discord (HKU\S-1-5-21-2339272927-596407228-3174859544-1001\...\Discord) (Version: 1.0.9262 - Discord Inc.) Escape from Tarkov (HKLM-x32\...\EscapeFromTarkov) (Version: 1.1.5.0.47242 - Battlestate Games) Escape from Tarkov: Arena (HKLM-x32\...\EscapeFromTarkovArena_live) (Version: 0.5.2.2.46222 - Battlestate Games) FlClash 版本 0.8.72+202501101 (HKLM\...\728B3532-C74B-4870-9068-BE70FE12A3E6_is1) (Version: 0.8.72+202501101 - ) GameRanger (HKU\S-1-5-21-2339272927-596407228-3174859544-1001\...\GameRanger) (Version: - GameRanger Technologies) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 155.0.8059.41 - Google LLC) HuionTablet (HKLM-x32\...\HuionTablet) (Version: 20.1.1.106 - Huion) Logicool G HUB (HKLM\...\{521c89be-637f-4274-a840-baaf7460c2b2}) (Version: 2026.6.981214 - Logicool) Microsoft .NET Host - 6.0.23 (x64) (HKLM\...\{1870DD0E-1583-44FF-8265-A9D1692CD89C}) (Version: 48.92.2594 - Microsoft Corporation) Hidden Microsoft .NET Host - 8.0.2 (x64) (HKLM\...\{2BB73336-4F69-4141-9797-E9BD6FE3980A}) (Version: 64.8.8795 - Microsoft Corporation) Hidden Microsoft .NET Host - 8.0.20 (x86) (HKLM-x32\...\{8EA18843-2557-42A9-8541-27FCCBB02C26}) (Version: 64.80.39230 - Microsoft Corporation) Hidden Microsoft .NET Host - 9.0.9 (x64) (HKLM\...\{81D5EAF4-76C4-4121-A408-4BAFB206DE2B}) (Version: 72.36.39216 - Microsoft Corporation) Hidden Microsoft .NET Host FX Resolver - 6.0.23 (x64) (HKLM\...\{995CC82C-E3E8-4BB5-9AB8-2B95C611D59D}) (Version: 48.92.2594 - Microsoft Corporation) Hidden Microsoft .NET Host FX Resolver - 8.0.2 (x64) (HKLM\...\{BCC2FB07-8CF0-4542-B10C-61BCEF04AFF2}) (Version: 64.8.8795 - Microsoft Corporation) Hidden Microsoft .NET Host FX Resolver - 8.0.20 (x86) (HKLM-x32\...\{4D4A5EE5-BAEC-4745-BAE8-91870660199B}) (Version: 64.80.39230 - Microsoft Corporation) Hidden Microsoft .NET Host FX Resolver - 9.0.9 (x64) (HKLM\...\{76699793-91D6-4C61-8D4B-F3EC2DAEA97A}) (Version: 72.36.39216 - Microsoft Corporation) Hidden Microsoft .NET Runtime - 6.0.23 (x64) (HKLM\...\{7C0437DA-6703-47F1-A116-CD138B0768AD}) (Version: 48.92.2594 - Microsoft Corporation) Hidden Microsoft .NET Runtime - 8.0.2 (x64) (HKLM\...\{C7B73281-AB0A-4DAD-A09F-5C30D40679AC}) (Version: 64.8.8795 - Microsoft Corporation) Hidden Microsoft .NET Runtime - 8.0.20 (x86) (HKLM-x32\...\{A45EE2FF-1A57-48EE-9D23-73C33A915D3B}) (Version: 64.80.39230 - Microsoft Corporation) Hidden Microsoft .NET Runtime - 9.0.9 (x64) (HKLM\...\{FE41F1B2-B25E-46DA-9AE7-46AA354A0A91}) (Version: 72.36.39216 - Microsoft Corporation) Hidden Microsoft 365 - zh-cn (HKLM\...\O365HomePremRetail - zh-cn) (Version: 16.0.20430.20146 - Microsoft Corporation) Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 155.0.4283.45 - Microsoft Corporation) Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 155.0.4283.45 - Microsoft Corporation) Hidden Microsoft GameInput (HKLM\...\{C7B6BB76-07B4-48D4-B257-4511AB9E002A}) (Version: 3.5.270.0 - Microsoft Corporation) Microsoft Office 小型企业版 2021 - zh-cn (HKLM\...\HomeBusiness2021Retail - zh-cn) (Version: 16.0.20430.20146 - Microsoft Corporation) Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 26.178.0913.0007 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation) Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X64 Additional Runtime - 14.51.36247 (HKLM\...\{6FA797CF-6B76-4B6D-87EE-768F92008720}) (Version: 14.51.36247 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.51.36247 (HKLM\...\{931A2CF0-2404-45EA-82F5-345735AE6A90}) (Version: 14.51.36247 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Additional Runtime - 14.51.36247 (HKLM-x32\...\{582BA719-E6F1-4651-A873-049E6A0DDDAF}) (Version: 14.51.36247 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.51.36247 (HKLM-x32\...\{4BF7CE18-E151-449F-9190-6CDBED0BB4A2}) (Version: 14.51.36247 - Microsoft Corporation) Hidden Microsoft Visual C++ v14 Redistributable (x64) - 14.51.36247 (HKLM-x32\...\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}) (Version: 14.51.36247.0 - Microsoft Corporation) Microsoft Visual C++ v14 Redistributable (x86) - 14.51.36247 (HKLM-x32\...\{9a6ce18d-11c0-4452-aa35-9f2b8437c686}) (Version: 14.51.36247.0 - Microsoft Corporation) Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - ) Microsoft Windows Desktop Runtime - 6.0.23 (x64) (HKLM\...\{AA393199-374C-4AD1-9245-6CBB254D8146}) (Version: 48.92.2594 - Microsoft Corporation) Hidden Microsoft Windows Desktop Runtime - 6.0.23 (x64) (HKLM-x32\...\{fbe8ac13-7063-40e6-81dd-7ddcc3781ecd}) (Version: 6.0.23.32930 - Microsoft Corporation) Microsoft Windows Desktop Runtime - 8.0.2 (x64) (HKLM\...\{D46F1FD9-2FE8-4D05-B2AC-011C23B69B24}) (Version: 64.8.8806 - Microsoft Corporation) Hidden Microsoft Windows Desktop Runtime - 8.0.2 (x64) (HKLM-x32\...\{63880b41-04fc-4f9b-92c4-4455c255eb8c}) (Version: 8.0.2.33318 - Microsoft Corporation) Microsoft Windows Desktop Runtime - 8.0.20 (x86) (HKLM-x32\...\{1B2D5C9A-BEA5-4AF2-892E-7E9BE0B8EF3B}) (Version: 64.80.39251 - Microsoft Corporation) Hidden Microsoft Windows Desktop Runtime - 8.0.20 (x86) (HKLM-x32\...\{8173f945-64eb-4aaa-b3a6-cd0137ef08c7}) (Version: 8.0.20.35221 - Microsoft Corporation) Microsoft Windows Desktop Runtime - 9.0.9 (x64) (HKLM\...\{74A3ED70-360C-45CE-8032-568ADA78352E}) (Version: 72.36.39253 - Microsoft Corporation) Hidden Microsoft Windows Desktop Runtime - 9.0.9 (x64) (HKLM-x32\...\{8a3ef2f1-574d-44d8-9783-42a9a6f0a8ac}) (Version: 9.0.9.35221 - Microsoft Corporation) MSI Center SDK (HKLM-x32\...\{15289038-41BE-48F8-B8B9-0B1021D3089E}}_is1) (Version: 3.2026.0911.01 - MSI) MSI NBFoundation Service (HKLM-x32\...\{640EFA76-B899-476B-B2DF-D0CCF11D6083}}_is1) (Version: 2.0.2609.1001 - MSI) NaturalPoint USB Drivers x64 (HKLM\...\{533773B8-9AC1-4C0F-A2BF-57466A45C6F5}) (Version: 2.70.0000 - NaturalPoint) Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.9.6.4 - Notepad++ Team) NVIDIA App 11.0.9.251 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.9.251 - NVIDIA Corporation) NVIDIA FrameView SDK 1.9.12728.38614306 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.9.12728.38614306 - NVIDIA Corporation) NVIDIA HD 音频驱动程序 1.4.6.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.6.3 - NVIDIA Corporation) NVIDIA PhysX 系统软件 9.26.0703 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.26.0703 - NVIDIA Corporation) NVIDIA Texture Tools for Adobe Photoshop (HKLM-x32\...\NVIDIA Texture Tools for Adobe Photoshop) (Version: 2024.1.1 - NVIDIA Corporation) NVIDIA USBC Driver 1.52.831.832 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_USBC) (Version: 1.52.831.832 - NVIDIA Corporation) NVIDIA 图形驱动程序 616.92 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 616.92 - NVIDIA Corporation) Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.20430.20092 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0804-1000-0000000FF1CE}) (Version: 16.0.20430.20146 - Microsoft Corporation) Hidden Paradox Launcher v2 (HKLM\...\{BCBAAF27-1C19-48A5-8DEF-258E46D93FE0}) (Version: 2.4.0 - Paradox Interactive) Paradox Launcher v2 (HKU\S-1-5-21-2339272927-596407228-3174859544-1001\...\{aa7d156e-58ec-4866-878d-917e121563b0}) (Version: 1.0.0.0 - Paradox Interactive) Process Lasso (HKLM-x32\...\ProcessLasso) (Version: 17.1.0.50 - Bitsum) QQ (HKLM-x32\...\QQ) (Version: 9.9.20.37625 - 腾讯科技(深圳)有限公司) RawTherapee バージョン 5.12 (HKLM\...\RawTherapee5.12_is1) (Version: 5.12 - rawtherapee.com) Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9802.1 - Realtek Semiconductor Corp.) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.26100.21378 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 11.22.1118.2024 - Realtek) REDlauncher (HKLM\...\{5FAC19AE-9120-4D9B-AB70-EE91A5750A9D}) (Version: 4.2.0.4 - CD Projekt RED) Hidden Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.108.2970 - Rockstar Games) Rockstar Games SDK (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.4.0.216 - Rockstar Games) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Tablet Service Helper (HKLM-x32\...\{97E2EC7B-9DF3-491D-A0DD-A177AF1264C9}) (Version: 2.7 - Wacom Technology Corp.) Tencent QQMail Plugin (HKLM-x32\...\QQMailPlugin) (Version: - ) Thunderbolt™ Share (HKLM\...\Thunderbolt Share) (Version: 1.0.55.36 - Intel Corporation) TouchPad Helper (HKLM-x32\...\{C4913FF7-2ED8-4268-85F0-D69270B8E0D4}) (Version: 2.9 - Synaptics Incorporated) TrackIR (HKLM-x32\...\{B8793D4E-B2C7-475A-BA2D-14099BBDC95F}) (Version: 5.5.3.317 - OptiTrack) TrackIR 5 (HKLM-x32\...\{84234F8F-74EF-42E6-A35C-CAC758645015}) (Version: 5.5.3 - OptiTrack) Hidden UCP3-GUI (HKU\S-1-5-21-2339272927-596407228-3174859544-1001\...\UCP3-GUI) (Version: 1.0.15 - ucp-team) UE Prerequisites (x64) (HKLM\...\{C4175120-313E-467B-AAA7-825979CBAEE7}) (Version: 1.0.20.0 - Epic Games, Inc.) Hidden UE Prerequisites (x64) (HKLM-x32\...\{b24cae82-bb64-4ad2-820a-dc2c4031c914}) (Version: 1.0.20.0 - Epic Games, Inc.) Hidden UU加速器 (HKLM-x32\...\NeteaseGacc) (Version: 6.19.0.48 - 网易公司) UXP WebView Support (HKLM-x32\...\UXPW_1_3_0) (Version: 1.3.0 - Adobe Inc.) VEGAS Pro 23.0 (Add-Ons) (HKLM-x32\...\MAGIX_GlobalContent.VEGAS_Pro_23_Content) (Version: 1.0.0.0 - VEGAS) VEGAS Pro 23.0 (HKLM\...\{B5135DB3-1651-44C7-835B-BA8F5EAA8A01}) (Version: 23.0.302.0 - VEGAS) Hidden VEGAS Pro 23.0 (HKLM\...\MX.{B5135DB3-1651-44C7-835B-BA8F5EAA8A01}) (Version: 23.0.302.0 - VEGAS) VEGAS Pro 23.0 Capture (HKLM\...\{6DF33F0F-7472-4FC5-91AC-35EEFD29898E}) (Version: 1.0.4.292 - VEGAS) Hidden WebM Project Directshow Filters (HKU\S-1-5-21-2339272927-596407228-3174859544-1001\...\webmdshow) (Version: - ) X56 H.O.T.A.S. (HKLM\...\{FC411B84-E868-404E-BBDB-783DD7FC9276}) (Version: 8.0.213.0 - Logitech) Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org) カスペルスキー (HKLM-x32\...\{16CC2349-A571-39B5-A2A9-50F985F49B62}) (Version: 21.27.6.532 - カスペルスキー) Hidden カスペルスキー (HKLM-x32\...\InstallWIX_{16CC2349-A571-39B5-A2A9-50F985F49B62}) (Version: 21.27.6.532 - カスペルスキー) 火绒安全软件 (HKLM\...\HuorongSysdiag) (Version: 6.0.12.1 - 北京火绒网络科技有限公司) 守望先锋 (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment) 迅雷专业版 (HKLM-x32\...\{BC830D26-0CF5-4B58-96FE-E65DD26DAE13}_is1) (Version: - 深圳市迅雷网络技术有限公司) 微软OfficePLUS (HKLM\...\MSOfficePLUS) (Version: 3.16.0.46159 - Microsoft Corporation) 百度网盘 (HKLM-x32\...\百度云管家) (Version: 7.61.5 - 北京度友科技有限公司) 暴雪战网 (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) 夸克 (HKU\S-1-5-21-2339272927-596407228-3174859544-1001\...\{FB7670C2-7F99-426D-B687-21BB585A5C73}_is1) (Version: 7.3.5.1009 - 广州市动悦信息技术有限公司) 哔哩哔哩直播姬 (HKLM\...\{06BB8CDE-F4AC-4B22-A680-0F3699CB9912}_is1) (Version: 7.62.0.10754 - 上海幻电信息科技有限公司) 风暴英雄 (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment) Packages: ========= AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2025-08-18] (INTEL CORP) [Startup Task] BaiduNetdiskService -> C:\Program Files\WindowsApps\3AD8A913.49937325EFC59_1.0.18.0_x64__j4r74wbqry4cc [2026-04-16] (北京度友科技有限公司) Dolby Digital Plus decoder for PC OEMs -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyDigitalPlusDecoderOEM_1.2.591.0_x64__rz1tebttyb220 [2026-08-26] (Dolby Laboratories) DTS Sound Unbound -> C:\Program Files\WindowsApps\DTSInc.DTSSoundUnbound_2026.3.31.0_x64__t5j2fzbtdg37r [2026-10-10] (DTS, Inc.) HRContextMenu -> C:\Program Files\Huorong\Sysdiag\bin\hrCtxMenu [2026-10-09] (北京火绒网络科技有限公司) Ink.Handwriting.ja-JP.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.ja-JP.1.0_0.1377.316.0_x64__8wekyb3d8bbwe [2026-10-12] (Microsoft Corporation) Ink.Handwriting.ja-JP.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.ja-JP.1.0_0.1377.316.0_x86__8wekyb3d8bbwe [2026-10-12] (Microsoft Corporation) Ink.Handwriting.zh-Hans.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.zh-Hans.1.0_0.1377.316.0_x64__8wekyb3d8bbwe [2026-10-12] (Microsoft Corporation) Ink.Handwriting.zh-Hans.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.zh-Hans.1.0_0.1377.316.0_x86__8wekyb3d8bbwe [2026-10-12] (Microsoft Corporation) Intel® Rapid Storage Technology Application -> C:\Program Files\WindowsApps\AppUp.IntelOptaneMemoryandStorageManagement_20.0.1024.0_x64__8j3eq9eme6ctt [2026-01-18] (INTEL CORP) Local AI Manager for Microsoft 365 -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\AI [2026-10-10] () Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2025-08-19] (Microsoft Corp.) Microsoft Ink Handwriting Recognition (ja-JP) -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.Main.ja-JP.1.0_0.1377.316.0_x64__8wekyb3d8bbwe [2026-10-13] (Microsoft Corporation) Microsoft Ink Handwriting Recognition (zh-Hans) -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.Main.zh-Hans.1.0_0.1377.316.0_x64__8wekyb3d8bbwe [2026-10-13] (Microsoft Corporation) Microsoft Teams -> C:\Program Files\WindowsApps\MSTeams_1.0.0.0_x64__8wekyb3d8bbwe [2024-06-04] (Microsoft Corporation) Microsoft.MicrosoftPCManager -> C:\Program Files\WindowsApps\Microsoft.MicrosoftPCManager_3.3.15.0_x64__8wekyb3d8bbwe [2024-06-04] (Microsoft Corporation) [Startup Task] Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2026-10-10] () MSI Center -> C:\Program Files\WindowsApps\9426MICRO-STARINTERNATION.MSICenter_2.0.74.0_x64__kzh8wxbdkxb8p [2026-09-29] (MICRO-STAR INTERNATIONAL CO., LTD) [Startup Task] MSI Game Bar -> C:\Program Files\WindowsApps\9426MICRO-STARINTERNATION.MSIGameBar_3.0.36.0_x64__kzh8wxbdkxb8p [2026-08-26] (MICRO-STAR INTERNATIONAL CO., LTD) MyCrosshair -> C:\Program Files\WindowsApps\HaiMFeng.53858DDF745AD_1.0.2.0_x64__2bkkk4j8bb8z6 [2025-12-26] (HaiMFeng) Nahimic -> C:\Program Files\WindowsApps\A-Volute.Nahimic_1.10.15.0_x64__w2gh52qy24etm [2026-09-10] (A-Volute) Notepad++ -> D:\Other\Notepad++\contextMenu [2026-07-04] (Notepad++) NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-11-07] (NVIDIA Corp.) OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2026-10-10] () OneNote Virtual Printer -> C:\Program Files\WindowsApps\Microsoft.Office.OneNoteVirtualPrinter_1.0.0.0_x64__8wekyb3d8bbwe [2025-08-18] (Microsoft Corporation) PDFToolExtension -> C:\Program Files\WindowsApps\PDFShellExt_4.0.0.0_x64__8wekyb3d8bbwe [2025-08-19] (Microsoft) QQExtension -> D:\QQ\extension [2025-08-20] () Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.54.398.0_x64__dt26b99r8h8gj [2026-08-29] (Realtek Semiconductor Corp) ShellEx Package -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.27\x64 [2026-10-15] (ShellEx Package) SpotifyAB.SpotifyMusic -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.304.258.0_x64__zpdnekdrzrea0 [2026-10-10] (Spotify AB) [Startup Task] WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.5.1.0_x64__8wekyb3d8bbwe [2026-09-28] (Microsoft Corp.) 百度网盘 -> D:\Other\BaiduNetdisk\sysres [2025-11-20] (北京度友科技有限公司) 翻訳 -> C:\Program Files\WindowsApps\Microsoft.BingTranslator_5.6.0.0_x64__8wekyb3d8bbwe [2025-08-19] (Microsoft Corporation) ==================== Custom CLSID (Whitelisted): ============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-2339272927-596407228-3174859544-1001_Classes\CLSID\{43DC55E6-ED2C-434B-BF97-F8EE267D58FE}\localserver32 -> C:\Users\o0the\AppData\Local\QuarkUpdater\QuarkUpdater\1.0.0.21\updater.exe (ALIBABA (CHINA) NETWORK TECHNOLOGY CO.,LTD. -> The Chromium Authors) CustomCLSID: HKU\S-1-5-21-2339272927-596407228-3174859544-1001_Classes\CLSID\{679F137C-3162-45da-BE3C-2F9C3D093F64}\Shell\Open\Command -> D:\other\baidunetdisk\BaiduNetdisk.exe (Beijing Duyou Science and Technology Co.,Ltd. -> Baidu.com, Inc.) CustomCLSID: HKU\S-1-5-21-2339272927-596407228-3174859544-1001_Classes\CLSID\{679F137C-3162-45da-BE3C-2F9C3D093F64} -> [百度网盘] => D:\other\baidunetdisk\ [2026-9-9 20:55] CustomCLSID: HKU\S-1-5-21-2339272927-596407228-3174859544-1001_Classes\CLSID\{67EDF60B-AF47-5981-BA29-54366F91C34B}\localserver32 -> C:\Users\o0the\AppData\Local\QuarkUpdater\QuarkUpdater\1.0.0.21\updater.exe (ALIBABA (CHINA) NETWORK TECHNOLOGY CO.,LTD. -> The Chromium Authors) CustomCLSID: HKU\S-1-5-21-2339272927-596407228-3174859544-1001_Classes\CLSID\{80172dde-4e20-4df0-81a2-0a48553e80bb}\localserver32 -> C:\Users\o0the\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe (SteelSeries France SASU -> A-Volute) CustomCLSID: HKU\S-1-5-21-2339272927-596407228-3174859544-1001_Classes\CLSID\{99D4E39A-EA7F-453E-9488-58C56BBF7B98}\InprocServer32 -> C:\Users\o0the\AppData\Local\Programs\Common\Quark\quarkshellext_20260924164245.dll (ALIBABA (CHINA) NETWORK TECHNOLOGY CO.,LTD. -> ) CustomCLSID: HKU\S-1-5-21-2339272927-596407228-3174859544-1001_Classes\CLSID\{AAFE3A0E-952F-5312-9E85-35F2130387A7}\localserver32 -> C:\Users\o0the\AppData\Local\QuarkUpdater\QuarkUpdater\1.0.0.21\updater.exe (ALIBABA (CHINA) NETWORK TECHNOLOGY CO.,LTD. -> The Chromium Authors) CustomCLSID: HKU\S-1-5-21-2339272927-596407228-3174859544-1001_Classes\CLSID\{AE6A220D-5A4C-4799-B07D-0A3AE4BBC02D}\localserver32 -> C:\Users\o0the\AppData\Local\Discord\app-1.0.9262\Discord.exe (Discord Inc. -> Discord Inc.) CustomCLSID: HKU\S-1-5-21-2339272927-596407228-3174859544-1001_Classes\CLSID\{CA0408F4-7585-4A96-96CA-E8F3EE6B5F58}\localserver32 -> C:\Users\o0the\AppData\Local\QuarkUpdater\QuarkUpdater\1.0.0.21\updater.exe (ALIBABA (CHINA) NETWORK TECHNOLOGY CO.,LTD. -> The Chromium Authors) CustomCLSID: HKU\S-1-5-21-2339272927-596407228-3174859544-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC) CustomCLSID: HKU\S-1-5-21-2339272927-596407228-3174859544-1001_Classes\CLSID\{fb10f7d7-5374-d4e5-9687-dc17ff5a7324}\localserver32 -> C:\Program Files (x86)\MSI\MSI_Center_Updater\OneDC_Updater.exe (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.) ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.178.0913.0007\FileSyncShell64.dll [2026-10-10] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.178.0913.0007\FileSyncShell64.dll [2026-10-10] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.178.0913.0007\FileSyncShell64.dll [2026-10-10] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.178.0913.0007\FileSyncShell64.dll [2026-10-10] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.178.0913.0007\FileSyncShell64.dll [2026-10-10] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.178.0913.0007\FileSyncShell64.dll [2026-10-10] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.178.0913.0007\FileSyncShell64.dll [2026-10-10] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ .WorkspaceExt0] -> {C568C78A-652C-425B-8E6B-FFA73043302D} => -> No File ShellIconOverlayIdentifiers: [ .WorkspaceExt1] -> {2A6FE247-5DA3-4732-9626-77820518FD77} => -> No File ShellIconOverlayIdentifiers: [ .WorkspaceExt2] -> {FF895810-293B-464A-93F2-82D11E07EEC8} => -> No File ShellIconOverlayIdentifiers: [ .WorkspaceExt3] -> {D8BE1E70-244A-46F0-BC5B-077D5F29EED8} => D:\Other\BaiduNetdisk\YunShellExtV164.dll [2025-10-27] (Beijing Duyou Science and Technology Co.,Ltd. -> ) ShellIconOverlayIdentifiers: [ .WorkspaceExt4] -> {7FAAC51E-19C2-4E2D-B598-A8D32E45BA48} => D:\Other\BaiduNetdisk\YunShellExtV164.dll [2025-10-27] (Beijing Duyou Science and Technology Co.,Ltd. -> ) ShellIconOverlayIdentifiers: [ .WorkspaceExt5] -> {2433C980-3DAB-43CA-99EB-01D5771054D0} => D:\Other\BaiduNetdisk\YunShellExtV164.dll [2025-10-27] (Beijing Duyou Science and Technology Co.,Ltd. -> ) ShellIconOverlayIdentifiers: [ .WorkspaceExt6] -> {AA931BEA-7353-4F4C-821F-6DC922AA3C77} => D:\Other\BaiduNetdisk\YunShellExtV164.dll [2025-10-27] (Beijing Duyou Science and Technology Co.,Ltd. -> ) ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.178.0913.0007\FileSyncShell64.dll [2026-10-10] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.178.0913.0007\FileSyncShell64.dll [2026-10-10] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.178.0913.0007\FileSyncShell64.dll [2026-10-10] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.178.0913.0007\FileSyncShell64.dll [2026-10-10] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.178.0913.0007\FileSyncShell64.dll [2026-10-10] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.178.0913.0007\FileSyncShell64.dll [2026-10-10] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.178.0913.0007\FileSyncShell64.dll [2026-10-10] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ .WorkspaceExt0] -> {C568C78A-652C-425B-8E6B-FFA73043302D} => -> No File ShellIconOverlayIdentifiers-x32: [ .WorkspaceExt1] -> {2A6FE247-5DA3-4732-9626-77820518FD77} => -> No File ShellIconOverlayIdentifiers-x32: [ .WorkspaceExt2] -> {FF895810-293B-464A-93F2-82D11E07EEC8} => -> No File ShellIconOverlayIdentifiers-x32: [ .WorkspaceExt3] -> {D8BE1E70-244A-46F0-BC5B-077D5F29EED8} => D:\Other\BaiduNetdisk\YunShellExtV164.dll [2025-10-27] (Beijing Duyou Science and Technology Co.,Ltd. -> ) ShellIconOverlayIdentifiers-x32: [ .WorkspaceExt4] -> {7FAAC51E-19C2-4E2D-B598-A8D32E45BA48} => D:\Other\BaiduNetdisk\YunShellExtV164.dll [2025-10-27] (Beijing Duyou Science and Technology Co.,Ltd. -> ) ShellIconOverlayIdentifiers-x32: [ .WorkspaceExt5] -> {2433C980-3DAB-43CA-99EB-01D5771054D0} => D:\Other\BaiduNetdisk\YunShellExtV164.dll [2025-10-27] (Beijing Duyou Science and Technology Co.,Ltd. -> ) ShellIconOverlayIdentifiers-x32: [ .WorkspaceExt6] -> {AA931BEA-7353-4F4C-821F-6DC922AA3C77} => D:\Other\BaiduNetdisk\YunShellExtV164.dll [2025-10-27] (Beijing Duyou Science and Technology Co.,Ltd. -> ) ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.178.0913.0007\FileSyncShell64.dll [2026-10-10] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2025-08-03] (Igor Pavlov) [File not signed] ContextMenuHandlers1: [カスペルスキー プラス 21.27] -> {ABCBD422-1F54-413D-A029-34F8F817B308} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.27\x64\shellex.dll [2026-10-15] (AO Kaspersky Lab -> AO Kaspersky Lab) ContextMenuHandlers2: [カスペルスキー プラス 21.27] -> {ABCBD422-1F54-413D-A029-34F8F817B308} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.27\x64\shellex.dll [2026-10-15] (AO Kaspersky Lab -> AO Kaspersky Lab) ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.178.0913.0007\FileSyncShell64.dll [2026-10-10] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2025-08-03] (Igor Pavlov) [File not signed] ContextMenuHandlers4: [カスペルスキー プラス 21.27] -> {ABCBD422-1F54-413D-A029-34F8F817B308} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.27\x64\shellex.dll [2026-10-15] (AO Kaspersky Lab -> AO Kaspersky Lab) ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.178.0913.0007\FileSyncShell64.dll [2026-10-10] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers5: [NvAppDesktopContext] -> {F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => C:\Program Files\NVIDIA Corporation\NVIDIA App\NvCpl\nvui.dll [2026-08-31] (NVIDIA Corporation -> NVIDIA Corporation) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_7251a3c076e80d80\nvshext.dll [2026-09-06] (NVIDIA Corporation -> NVIDIA Corporation) ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2025-08-03] (Igor Pavlov) [File not signed] ContextMenuHandlers6: [カスペルスキー プラス 21.27] -> {ABCBD422-1F54-413D-A029-34F8F817B308} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.27\x64\shellex.dll [2026-10-15] (AO Kaspersky Lab -> AO Kaspersky Lab) ContextMenuHandlers1_S-1-5-21-2339272927-596407228-3174859544-1001: [QuarkAI.ContextMenu] -> {99D4E39A-EA7F-453E-9488-58C56BBF7B98-} => -> No File ContextMenuHandlers4_S-1-5-21-2339272927-596407228-3174859544-1001: [QuarkAI.ContextMenu] -> {99D4E39A-EA7F-453E-9488-58C56BBF7B98-} => -> No File ==================== Codecs (Whitelisted) ==================== ==================== Shortcuts & WMI ======================== ==================== Loaded Modules (Whitelisted) ============= 2018-09-04 07:21 - 2018-09-04 07:21 - 000144896 _____ () [File not signed] C:\Program Files\Logitech\X56\laclient\libssh2.dll 2018-09-04 07:21 - 2018-09-04 07:21 - 000077824 _____ () [File not signed] C:\Program Files\Logitech\X56\laclient\zlib.dll 2026-07-12 03:05 - 2026-07-12 03:05 - 000179200 _____ () [File not signed] D:\SteamLibrary\steamapps\common\VTube Studio\VTube Studio_Data\Install_Webcam\VTSVirtualWebcam64.dll 2024-06-04 22:09 - 2024-06-04 22:09 - 000000000 ____L () [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\root\Office16\AppVIsvSubsystems64.dll 2024-06-04 22:09 - 2024-06-04 22:09 - 000000000 ____L () [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\root\Office16\c2r64.dll 2026-09-06 01:03 - 2026-09-06 01:03 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\PlugIns\NVIDIA App\MessageBusRouter.dll] C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\plugins\NVIDIA Overlay\MessageBusRouter.dll 2025-04-01 17:12 - 2026-09-06 01:03 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\MessageBus\NvMessageBusBroadcast.dll] C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\NvMessageBusBroadcast.dll 2018-09-04 07:21 - 2018-09-04 07:21 - 000355840 _____ (The cURL library, hxxp://curl.haxx.se/) [File not signed] C:\Program Files\Logitech\X56\laclient\LIBCURL.dll 2018-09-04 07:21 - 2018-09-04 07:21 - 002286747 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files\Logitech\X56\laclient\LIBEAY32.dll 2018-09-04 07:21 - 2018-09-04 07:21 - 000416627 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files\Logitech\X56\laclient\SSLEAY32.dll ==================== Alternate Data Streams (Whitelisted) ======== ==================== Safe Mode (Whitelisted) ================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\HipsDaemon => ""="Service" ==================== Association (Whitelisted) ================= ==================== Internet Explorer (Whitelisted) ============= BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2026-10-02] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-10-02] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-10-02] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-10-02] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-10-02] (Microsoft Corporation -> Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-10-02] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-10-02] (Microsoft Corporation -> Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-10-02] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-10-02] (Microsoft Corporation -> Microsoft Corporation) (If an entry is included in the fixlist, it will be removed from the registry.) IE trusted site: HKU\.DEFAULT\...\officeplus.cn -> hxxps://content-prod.officeplus.cn IE trusted site: HKU\S-1-5-19\...\officeplus.cn -> hxxps://content-prod.officeplus.cn IE trusted site: HKU\S-1-5-20\...\officeplus.cn -> hxxps://content-prod.officeplus.cn IE trusted site: HKU\S-1-5-21-2339272927-596407228-3174859544-1001\...\officeplus.cn -> hxxps://content-prod.officeplus.cn ==================== Hosts content: ========================= (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2025-08-19 14:53 - 2026-10-10 22:05 - 000006295 _____ C:\Windows\system32\drivers\etc\hosts ==================== Network =========================== (Currently there is no automatic fix for this section.) DNS Servers: 8.8.8.8 - 8.8.4.4 Windows Firewall is disabled. Network Binding: ============= WLAN: Intel(R) Wi-Fi 6E AX211 160MHz -> Netwtw14.sys 以太网: Realtek Gaming 2.5GbE Family Controller -> rt25cx21x64.sys 蓝牙网络连接: Bluetooth Device (Personal Area Network) -> bthpan.sys 以太网 2: TAP-Windows Adapter V9 -> tap0901.sys vms_vsf: Hyper-V 虚拟交换机扩展筛选器 KL_KLIM6: Kaspersky Anti-Virus NDIS 6 Filter hrndis6: Huorong NDIS Filter Driver ms_l1vhlwf: 嵌套网络虚拟化 vms_vsp: Hyper-V 虚拟交换机扩展协议 ==================== Other Areas =========================== (Currently there is no automatic fix for this section.) HKU\S-1-5-21-2339272927-596407228-3174859544-1001\Control Panel\Desktop\\Wallpaper -> c:\users\o0the\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\localstate\photosappbackground\fqtgyiqaaamb8gw.jpg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5) HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0) HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|F:\Photoshop.2025 HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|D:\Other\Adobe Photoshop 2025 HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|E:\SteamLibrary HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Program Files (x86)\FLiNGTrainer HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\ProgramData\Kaspersky Lab\AVP21.27\Data\webview2 ==================== MSCONFIG/TASK MANAGER disabled items == (If an entry is included in the fixlist, it will be removed.) HKLM\...\StartupApproved\Run: => "RZSurroundHelper" HKU\S-1-5-21-2339272927-596407228-3174859544-1001\...\StartupApproved\Run: => "MyApplication" ==================== FirewallRules (Whitelisted) ================ (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{E818AC65-B39F-4CEC-B3D3-5646FF75C1D6}] => (Allow) C:\Program Files (x86)\BlueStacks X_msi5_cn\BlueStacksWeb.exe (Now.gg, INC -> Bluestack Systems, Inc.) FirewallRules: [{1674BA79-FEEA-4B22-A1ED-F4F44A186AB6}] => (Allow) C:\Program Files (x86)\BlueStacks X_msi5_cn\Cloud Game.exe (Now.gg, INC -> COMPANY NAME) FirewallRules: [{72A5477A-DA33-4FB8-B826-A1937BFA0822}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{0D4865D7-581D-4D43-B978-DD1B5517206C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{3524FC0B-57CF-47C8-A9D0-08895D0335F8}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{50EC1982-C398-4B7B-8757-4952BA15E496}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{D751CE19-F4D0-4A0F-A18B-DB198F330CB6}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\135\tencentdl.exe (Tencent Technology(Shenzhen) Company Limited -> Tencent) FirewallRules: [{034EC76E-13DA-459B-919D-F0929128F9C7}] => (Allow) C:\Program Files (x86)\Tencent\QzoneMusic\QzoneMusic.exe (Tencent Technology(Shenzhen) Company Limited -> Tencent) FirewallRules: [{EFD20637-3A5A-41AF-83A5-D72685525919}] => (Allow) C:\Program Files (x86)\Tencent\QzoneMusic\QzoneMusic.exe (Tencent Technology(Shenzhen) Company Limited -> Tencent) FirewallRules: [{95A37554-FE2A-45C1-8BEC-A1515898DCA9}] => (Allow) D:\SteamLibrary\steamapps\common\Crusader Kings III\launcher\dowser.exe (Paradox Interactive AB (publ) -> ) FirewallRules: [{333AF1F6-E23E-4982-9904-310B8932117D}] => (Allow) D:\SteamLibrary\steamapps\common\Crusader Kings III\launcher\dowser.exe (Paradox Interactive AB (publ) -> ) FirewallRules: [{29555197-6DBF-4DB4-B1AA-962FFEA09F81}] => (Allow) E:\SteamLibrary\steamapps\common\Helldivers 2\bin\helldivers2.exe (Arrowhead Game Studios AB -> Arrowhead Game Studios AB) FirewallRules: [{AEF17E56-1B6D-4F02-A92F-6432DE25B144}] => (Allow) E:\SteamLibrary\steamapps\common\Helldivers 2\bin\helldivers2.exe (Arrowhead Game Studios AB -> Arrowhead Game Studios AB) FirewallRules: [{B11C510F-EF3A-4488-8056-D6D374388A01}] => (Allow) D:\SteamLibrary\steamapps\common\wallpaper_engine\launcher.exe (Skutta Software GmbH -> Skutta Software GmbH) FirewallRules: [{769F1E6D-590F-4AD2-BD1E-C3F7A70E871D}] => (Allow) D:\SteamLibrary\steamapps\common\wallpaper_engine\launcher.exe (Skutta Software GmbH -> Skutta Software GmbH) FirewallRules: [{0C48B08C-DB21-4CEF-ABF9-934752A305A5}] => (Allow) D:\SteamLibrary\steamapps\common\Miss Neko 2\Miss Neko 2.exe () [File not signed] FirewallRules: [{C14CA986-BDA6-4E9D-B242-3088740902E0}] => (Allow) D:\SteamLibrary\steamapps\common\Miss Neko 2\Miss Neko 2.exe () [File not signed] FirewallRules: [{CE0762D0-81B4-41FF-BB92-681B3639FE6C}] => (Allow) D:\QQ\QQ.exe (Tencent Technology (Shenzhen) Company Limited -> Tencent) FirewallRules: [{A0CEC969-80E8-4238-AAB2-80F8EB731BFE}] => (Allow) D:\QQ\QQEX.exe (Tencent Technology (Shenzhen) Company Limited -> Tencent) FirewallRules: [{BDC367B4-A61B-4A28-A117-64C5A24E2CBF}] => (Allow) E:\SteamLibrary\steamapps\common\Red Dead Redemption 2\PlayRDR2.exe (Rockstar Games, Inc. -> Rockstar Games) FirewallRules: [{23FCAB99-B7A2-46B7-83D6-28A01EFCE172}] => (Allow) E:\SteamLibrary\steamapps\common\Red Dead Redemption 2\PlayRDR2.exe (Rockstar Games, Inc. -> Rockstar Games) FirewallRules: [TCP Query User{059CEB9C-E0A3-4CA8-B93A-4AEA75EF64E7}D:\overwatch\_retail_\overwatch.exe] => (Allow) D:\overwatch\_retail_\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment) FirewallRules: [UDP Query User{9CD330D6-4700-4E10-B427-1000EA4380B4}D:\overwatch\_retail_\overwatch.exe] => (Allow) D:\overwatch\_retail_\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment) FirewallRules: [{80520D24-5186-4217-9E1A-4C5695BAF427}] => (Allow) E:\SteamLibrary\steamapps\common\DCSWorld\bin\DCS.exe (Eagle Dynamics SA -> Eagle Dynamics SA) FirewallRules: [{932596DC-15C9-401B-A242-B86CDADBED41}] => (Allow) E:\SteamLibrary\steamapps\common\DCSWorld\bin\DCS.exe (Eagle Dynamics SA -> Eagle Dynamics SA) FirewallRules: [{DD0D8618-6FCD-49D8-BB5D-C96EB0C803B3}] => (Allow) C:\Users\o0the\AppData\Roaming\uTorrent\uTorrent.exe (RainCo HK Limited -> BitTorrent Limited) FirewallRules: [{56FEF17D-A616-49BF-9C18-2CA0695C63A5}] => (Allow) C:\Users\o0the\AppData\Roaming\uTorrent\uTorrent.exe (RainCo HK Limited -> BitTorrent Limited) FirewallRules: [{1AA921E8-32BF-47D9-926D-E5C995ABCBD6}] => (Allow) E:\SteamLibrary\steamapps\common\Cities_Skylines\dowser.exe (Paradox Interactive AB (publ) -> ) FirewallRules: [{3B23E7C2-DB58-4EF0-93CE-6208E9B37727}] => (Allow) E:\SteamLibrary\steamapps\common\Cities_Skylines\dowser.exe (Paradox Interactive AB (publ) -> ) FirewallRules: [TCP Query User{F9B5C075-F28C-4567-9C1E-5142FD1213A3}E:\steamlibrary\steamapps\common\red dead redemption 2\rdr2.exe] => (Allow) E:\steamlibrary\steamapps\common\red dead redemption 2\rdr2.exe (Rockstar Games, Inc. -> Rockstar Games) FirewallRules: [UDP Query User{055B86ED-908A-4E9C-8622-78E2B7AB8DDC}E:\steamlibrary\steamapps\common\red dead redemption 2\rdr2.exe] => (Allow) E:\steamlibrary\steamapps\common\red dead redemption 2\rdr2.exe (Rockstar Games, Inc. -> Rockstar Games) FirewallRules: [{9CB26395-CCF9-4840-983D-E282E3F0D259}] => (Allow) E:\SteamLibrary\steamapps\common\Cyberpunk 2077\REDprelauncher.exe (CD PROJEKT S.A. -> CD Projekt RED) FirewallRules: [{DD37CFDA-0F50-4E92-89A1-233BA3FBAD65}] => (Allow) E:\SteamLibrary\steamapps\common\Cyberpunk 2077\REDprelauncher.exe (CD PROJEKT S.A. -> CD Projekt RED) FirewallRules: [TCP Query User{69F76F21-347D-4C1D-AC13-7CCBFA20026B}E:\steamlibrary\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe] => (Allow) E:\steamlibrary\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe (CD PROJEKT S.A. -> CD PROJEKT S.A.) FirewallRules: [UDP Query User{E0F82476-4436-446F-B563-7C15A01D1890}E:\steamlibrary\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe] => (Allow) E:\steamlibrary\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe (CD PROJEKT S.A. -> CD PROJEKT S.A.) FirewallRules: [{61264F91-3872-497E-8639-8A92D5121DB0}] => (Allow) E:\SteamLibrary\steamapps\common\Grand Theft Auto V Enhanced\PlayGTAV.exe (Rockstar Games, Inc. -> Rockstar Games) FirewallRules: [{6CE670A5-7F73-4F47-9A0A-69762DAEF57E}] => (Allow) E:\SteamLibrary\steamapps\common\Grand Theft Auto V Enhanced\PlayGTAV.exe (Rockstar Games, Inc. -> Rockstar Games) FirewallRules: [{6A068562-A1CF-460A-BE21-9DFFF0863DA8}] => (Allow) D:\SteamLibrary\steamapps\common\Mosaique Neko Waifus 4\Mosaique Neko Waifus 4.exe () [File not signed] FirewallRules: [{099A67BD-AB05-44AA-813F-170EC26C5B34}] => (Allow) D:\SteamLibrary\steamapps\common\Mosaique Neko Waifus 4\Mosaique Neko Waifus 4.exe () [File not signed] FirewallRules: [TCP Query User{F671A1F1-13C1-4E79-AE9A-BBBD867A7787}E:\steamlibrary\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe] => (Allow) E:\steamlibrary\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe (CD PROJEKT S.A. -> CD PROJEKT S.A.) FirewallRules: [UDP Query User{9F873093-0356-4CCA-89A7-8BE0C4CCBA0C}E:\steamlibrary\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe] => (Allow) E:\steamlibrary\steamapps\common\cyberpunk 2077\bin\x64\cyberpunk2077.exe (CD PROJEKT S.A. -> CD PROJEKT S.A.) FirewallRules: [TCP Query User{2A3F4DCC-BC4C-4C8C-A4D1-8A020B114801}D:\other\dcs srs\dcs-simpleradio-standalone\client\sr-clientradio.exe] => (Allow) D:\other\dcs srs\dcs-simpleradio-standalone\client\sr-clientradio.exe (Open Source Developer, Ciaran Fisher -> Ciribob - GitHub.com/Ciribob) FirewallRules: [UDP Query User{0D768ABB-48D3-487E-A2D4-2E22012D8BC6}D:\other\dcs srs\dcs-simpleradio-standalone\client\sr-clientradio.exe] => (Allow) D:\other\dcs srs\dcs-simpleradio-standalone\client\sr-clientradio.exe (Open Source Developer, Ciaran Fisher -> Ciribob - GitHub.com/Ciribob) FirewallRules: [{E11354A9-508F-41B4-AA74-8BFF030C0E35}] => (Allow) D:\SteamLibrary\steamapps\common\Hentai Mosaique Fix-IT Shoppe\Hentai Mosaique Fix IT Shoppe.exe () [File not signed] FirewallRules: [{F64AD810-E6A9-483E-A7FE-AC8F2CF5A66F}] => (Allow) D:\SteamLibrary\steamapps\common\Hentai Mosaique Fix-IT Shoppe\Hentai Mosaique Fix IT Shoppe.exe () [File not signed] FirewallRules: [TCP Query User{7138D80B-AFC7-43EB-B8C2-12F02E43F88F}C:\program files\nvidia corporation\nvidia app\cef\nvidia overlay.exe] => (Allow) C:\program files\nvidia corporation\nvidia app\cef\nvidia overlay.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [UDP Query User{F2BC2DEE-2A8A-4DFD-BA25-21224434FB4B}C:\program files\nvidia corporation\nvidia app\cef\nvidia overlay.exe] => (Allow) C:\program files\nvidia corporation\nvidia app\cef\nvidia overlay.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{8EE73FB1-50B5-4531-9458-0888EA8C99C2}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{195D908A-8B4D-4422-BFF8-A51ADD6C907E}] => (Allow) E:\SteamLibrary\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI_DX12.exe (2K Games, Inc. -> Firaxis Games) FirewallRules: [{21CB964E-B786-4E4C-B54A-D651162D32BE}] => (Allow) E:\SteamLibrary\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI_DX12.exe (2K Games, Inc. -> Firaxis Games) FirewallRules: [{BE3FDF46-FBD2-42F1-A31F-84F721C4DEFF}] => (Allow) E:\SteamLibrary\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI.exe (2K Games, Inc. -> Firaxis Games) FirewallRules: [{4B09ACDE-B0F7-40D0-A4CB-2B414A91611E}] => (Allow) E:\SteamLibrary\steamapps\common\Sid Meier's Civilization VI\Base\Binaries\Win64Steam\CivilizationVI.exe (2K Games, Inc. -> Firaxis Games) FirewallRules: [{24CF4EEF-92B6-446F-9515-BDCE8A5EE1B8}] => (Allow) E:\SteamLibrary\steamapps\common\Ready Or Not\ReadyOrNot.exe (Epic Games, Inc.) [File not signed] FirewallRules: [{8E6EA83E-E594-45F4-8D92-BAB1B1C153A5}] => (Allow) E:\SteamLibrary\steamapps\common\Ready Or Not\ReadyOrNot.exe (Epic Games, Inc.) [File not signed] FirewallRules: [{9D2A1925-82AB-410E-8608-154E5F66AC5E}] => (Allow) E:\SteamLibrary\steamapps\common\Ready Or Not\Engine\Binaries\Win64\CrashReporter.exe () [File not signed] FirewallRules: [{CB099F54-A593-474C-933F-6F5A437538A7}] => (Allow) E:\SteamLibrary\steamapps\common\Ready Or Not\Engine\Binaries\Win64\CrashReporter.exe () [File not signed] FirewallRules: [{12952822-CB4E-442A-BB4D-F7EA03491958}] => (Allow) E:\SteamLibrary\steamapps\common\SovietRepublic\SETUPAPPLICATION SOVIET.exe (3DIVISION) [File not signed] FirewallRules: [{BFC08B38-3C88-4781-9278-6DBE31D14677}] => (Allow) E:\SteamLibrary\steamapps\common\SovietRepublic\SETUPAPPLICATION SOVIET.exe (3DIVISION) [File not signed] FirewallRules: [{41217361-11AC-431C-8A94-D496AE28009B}] => (Allow) D:\SteamLibrary\steamapps\common\Zuma Deluxe\Zuma.exe (PopCap Games -> ) FirewallRules: [{47A4326C-BD45-4D67-A3CC-F565E268DA93}] => (Allow) D:\SteamLibrary\steamapps\common\Zuma Deluxe\Zuma.exe (PopCap Games -> ) FirewallRules: [{DDF9E027-4DCC-4869-87D6-ACDFCE51A4B5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{64C598A1-AC3E-490F-858F-4A363CC6B60D}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{4BAD667B-E05C-480D-937E-C247A46A3C2D}] => (Allow) D:\SteamLibrary\steamapps\common\Mosaique Neko Waifus 5\Mosaique Neko Waifus 5.exe () [File not signed] FirewallRules: [{F3B7CA89-B5B9-4B31-B17E-41A1BE5B8AEB}] => (Allow) D:\SteamLibrary\steamapps\common\Mosaique Neko Waifus 5\Mosaique Neko Waifus 5.exe () [File not signed] FirewallRules: [{27C57472-5623-494D-A794-336D86556A2D}] => (Allow) E:\SteamLibrary\steamapps\common\Stellaris\dowser.exe (Paradox Interactive AB (publ) -> ) FirewallRules: [{C15EDD92-F5C8-48D9-A9D9-49A93CC744A0}] => (Allow) E:\SteamLibrary\steamapps\common\Stellaris\dowser.exe (Paradox Interactive AB (publ) -> ) FirewallRules: [TCP Query User{C834C142-9A4D-4B8F-B9CF-3ACA220F50B6}C:\program files\flclash\flclashcore.exe] => (Allow) C:\program files\flclash\flclashcore.exe () [File not signed] FirewallRules: [UDP Query User{C39AE1C2-FFAC-4174-B2AC-07D6B3A8B3CA}C:\program files\flclash\flclashcore.exe] => (Allow) C:\program files\flclash\flclashcore.exe () [File not signed] FirewallRules: [{9DF0B8A3-FB8A-4545-9B60-14C426658CE8}] => (Allow) E:\SteamLibrary\steamapps\common\Escape from Duckov\Duckov.exe () [File not signed] FirewallRules: [{03BE7998-7BE2-4553-AF39-A60621ED99A6}] => (Allow) E:\SteamLibrary\steamapps\common\Escape from Duckov\Duckov.exe () [File not signed] FirewallRules: [TCP Query User{8D293C9B-2975-4B1F-A756-5571F85B0708}C:\program files\dotnet\dotnet.exe] => (Allow) C:\program files\dotnet\dotnet.exe (.NET -> Microsoft Corporation) FirewallRules: [UDP Query User{F1D6B57C-4594-454C-922C-0D5C20332F9E}C:\program files\dotnet\dotnet.exe] => (Allow) C:\program files\dotnet\dotnet.exe (.NET -> Microsoft Corporation) FirewallRules: [{3B385FFA-5AE1-4C0C-817F-D1816E14E341}] => (Allow) E:\SteamLibrary\steamapps\common\Stronghold Crusader Extreme\Stronghold Crusader.exe () [File not signed] FirewallRules: [{DA547C60-5149-4212-92ED-05E327FECD4B}] => (Allow) E:\SteamLibrary\steamapps\common\Stronghold Crusader Extreme\Stronghold Crusader.exe () [File not signed] FirewallRules: [{EB052A0F-2CF6-4E1F-9AB4-30357DA082A6}] => (Allow) E:\SteamLibrary\steamapps\common\Draw & Guess\beta\Draw&Guess.exe () [File not signed] FirewallRules: [{D92EFDD2-4829-4392-B886-35DF629408C6}] => (Allow) E:\SteamLibrary\steamapps\common\Draw & Guess\beta\Draw&Guess.exe () [File not signed] FirewallRules: [{6120C688-C205-4A90-AFE9-D9D4C68235C1}] => (Allow) E:\SteamLibrary\steamapps\common\Draw & Guess\legacy\Draw&Guess.exe () [File not signed] FirewallRules: [{AE11F0C4-5643-444B-A051-2E40E2BDC8FE}] => (Allow) E:\SteamLibrary\steamapps\common\Draw & Guess\legacy\Draw&Guess.exe () [File not signed] FirewallRules: [{08C84D46-90E3-4590-A266-36D15A2BA829}] => (Allow) E:\SteamLibrary\steamapps\common\Cities Skylines II\Launcher\dowser.exe (Paradox Interactive AB (publ) -> ) FirewallRules: [{AA40876A-92A4-4BB9-BAFE-068831ED8C4A}] => (Allow) E:\SteamLibrary\steamapps\common\Cities Skylines II\Launcher\dowser.exe (Paradox Interactive AB (publ) -> ) FirewallRules: [TCP Query User{AF0887BF-C8A5-4451-968C-9F27AF200C4A}E:\steamlibrary\steamapps\common\stellaris\stellaris.exe] => (Allow) E:\steamlibrary\steamapps\common\stellaris\stellaris.exe (Paradox Interactive AB (publ) -> Paradox Interactive) FirewallRules: [UDP Query User{A737FDF2-EB57-4E1B-BDEC-5E86F88C7556}E:\steamlibrary\steamapps\common\stellaris\stellaris.exe] => (Allow) E:\steamlibrary\steamapps\common\stellaris\stellaris.exe (Paradox Interactive AB (publ) -> Paradox Interactive) FirewallRules: [{3EF02BD3-11EE-47DA-92BB-508183B19644}] => (Allow) D:\SteamLibrary\steamapps\common\For The King II\For The King II.exe () [File not signed] FirewallRules: [{CD78C86F-6897-481F-A45E-520E22351467}] => (Allow) D:\SteamLibrary\steamapps\common\For The King II\For The King II.exe () [File not signed] FirewallRules: [TCP Query User{43E36569-6A42-419B-B7F1-9E6CE9778DE8}E:\steamlibrary\steamapps\common\grand theft auto v enhanced\gta5_enhanced.exe] => (Allow) E:\steamlibrary\steamapps\common\grand theft auto v enhanced\gta5_enhanced.exe (Rockstar Games, Inc. -> Rockstar Games) FirewallRules: [UDP Query User{3586CF46-ECCB-48FB-B024-B8CB021188AF}E:\steamlibrary\steamapps\common\grand theft auto v enhanced\gta5_enhanced.exe] => (Allow) E:\steamlibrary\steamapps\common\grand theft auto v enhanced\gta5_enhanced.exe (Rockstar Games, Inc. -> Rockstar Games) FirewallRules: [{C0E9E777-1B2B-433C-8CEE-D47B2BAE3FC6}] => (Allow) E:\SteamLibrary\steamapps\common\DARK SOULS III\Game\DarkSoulsIII.exe (FromSoftware,Inc. -> BANDAI NAMCO Entertainment Inc.) FirewallRules: [{641D2DE8-DC2F-401E-898C-FACE4A693D7D}] => (Allow) E:\SteamLibrary\steamapps\common\DARK SOULS III\Game\DarkSoulsIII.exe (FromSoftware,Inc. -> BANDAI NAMCO Entertainment Inc.) FirewallRules: [{708541B7-1E48-496E-B734-E63DECC702DF}] => (Allow) E:\SteamLibrary\steamapps\common\DCSWorld\bin-mt\DCS.exe (Eagle Dynamics SA -> Eagle Dynamics SA) FirewallRules: [{2751D0B6-AC53-4D74-8811-0D1DF3C7B2F0}] => (Allow) E:\SteamLibrary\steamapps\common\DCSWorld\bin-mt\DCS.exe (Eagle Dynamics SA -> Eagle Dynamics SA) FirewallRules: [{6E7653FD-E0CA-48F4-9BA8-4459AE15B2CC}] => (Allow) E:\SteamLibrary\steamapps\common\DCSWorld\bin-mt\DCS.exe (Eagle Dynamics SA -> Eagle Dynamics SA) FirewallRules: [{26E5AA0F-E7D4-4C2D-AAB6-7E4C83991EE4}] => (Allow) E:\SteamLibrary\steamapps\common\DCSWorld\bin-mt\DCS.exe (Eagle Dynamics SA -> Eagle Dynamics SA) FirewallRules: [{35055C5D-4B43-44D1-815C-AF7E946D45BA}] => (Allow) E:\SteamLibrary\steamapps\common\Outer Wilds\OuterWilds.exe () [File not signed] FirewallRules: [{7B3DC742-7B24-43D4-9832-45ED81D085CA}] => (Allow) E:\SteamLibrary\steamapps\common\Outer Wilds\OuterWilds.exe () [File not signed] FirewallRules: [{4A538634-A902-4BF0-AA3E-C6B2AB4B5618}] => (Allow) E:\SteamLibrary\steamapps\common\Mosaique Neko Waifus 3\Mosaique Neko Waifus 3.exe () [File not signed] FirewallRules: [{5E1D2342-E050-4C20-9BFF-30D3BDEF59D1}] => (Allow) E:\SteamLibrary\steamapps\common\Mosaique Neko Waifus 3\Mosaique Neko Waifus 3.exe () [File not signed] FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\Windows\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [TCP Query User{0250D886-86CE-4149-86D8-E07E89034589}C:\windows\syswow64\dplaysvr.exe] => (Block) C:\windows\syswow64\dplaysvr.exe (Microsoft Windows -> Microsoft Corporation) FirewallRules: [UDP Query User{81A5681B-7CE1-4F59-9CB8-5450B63B8ED2}C:\windows\syswow64\dplaysvr.exe] => (Block) C:\windows\syswow64\dplaysvr.exe (Microsoft Windows -> Microsoft Corporation) FirewallRules: [{DE8300D5-5440-4218-A232-ED630E40CCD4}] => (Allow) C:\Users\o0the\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies -> GameRanger Pty Ltd) FirewallRules: [{9B1EF9FB-7ACA-4940-A314-85361256DC01}] => (Allow) C:\Users\o0the\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies -> GameRanger Pty Ltd) FirewallRules: [{A3CAE3F8-98CF-4C03-85A6-B6A37EBABD71}] => (Allow) C:\Users\o0the\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies -> GameRanger Pty Ltd) FirewallRules: [{88BD7F72-54CD-40A0-9D18-31D6E4D7E26B}] => (Allow) C:\Users\o0the\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies -> GameRanger Pty Ltd) FirewallRules: [{98E9EC5A-846E-45B2-BF7A-EEB7373BEA06}] => (Allow) E:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\sw.exe (General Arcade) [File not signed] FirewallRules: [{171EE780-C3BB-4660-AB66-581419E6E666}] => (Allow) E:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\sw.exe (General Arcade) [File not signed] FirewallRules: [{7275D656-0900-4E55-A2DD-46311A16C2C0}] => (Allow) E:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\dosbox\DOSBox.exe (DOSBox Team) [File not signed] FirewallRules: [{32BD01E4-FF58-4716-AA92-290C57353F7B}] => (Allow) E:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\dosbox\DOSBox.exe (DOSBox Team) [File not signed] FirewallRules: [{B42EF371-A6D7-4E68-9E09-7D58340DF77F}] => (Allow) E:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\build.exe () [File not signed] FirewallRules: [{707D9793-0AE0-4251-9EC8-04BD3D20E944}] => (Allow) E:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\build.exe () [File not signed] FirewallRules: [{8C0C9ECF-F5FD-4775-9DAC-41D959D45EFD}] => (Allow) D:\Battlestate Games\BsgLauncher\BsgLauncher.exe (BATTLESTATE GAMES LIMITED -> Battlestate Games) FirewallRules: [{99500546-3A34-4959-8CAC-88493141DEFF}] => (Allow) D:\Battlestate Games\BsgLauncher\BsgLauncher.exe (BATTLESTATE GAMES LIMITED -> Battlestate Games) FirewallRules: [{15137AF0-2B31-4465-8953-90AA406BD05F}] => (Allow) E:\SteamLibrary\steamapps\common\KingdomComeDeliverance2\Bin\Win64MasterMasterSteamPGO\KingdomCome.exe (Warhorse Studios sro) [File not signed] FirewallRules: [{11B0A757-1C0F-472C-A75B-D460E6BA3EDA}] => (Allow) E:\SteamLibrary\steamapps\common\KingdomComeDeliverance2\Bin\Win64MasterMasterSteamPGO\KingdomCome.exe (Warhorse Studios sro) [File not signed] FirewallRules: [{3688D091-3661-48DF-9652-0C9C22BC7B3C}] => (Allow) D:\SteamLibrary\steamapps\common\OBS Studio\bin\64bit\obs64.exe (OBS Project, LLC -> OBS) FirewallRules: [{73A8A386-58E6-4345-B2BC-9164A8CB2EF2}] => (Allow) D:\SteamLibrary\steamapps\common\OBS Studio\bin\64bit\obs64.exe (OBS Project, LLC -> OBS) FirewallRules: [{3E55F91A-CCE2-4B27-85F0-AA3113FAA1E9}] => (Allow) D:\Other\livehime\7.62.0.10754\livehime.exe (上海幻电信息科技有限公司 -> 上海幻电信息科技有限公司) FirewallRules: [{5818AA24-0E07-4B83-9C12-5E2601CA879A}] => (Allow) D:\Other\livehime\livehime.exe (上海幻电信息科技有限公司 -> 上海幻电信息科技有限公司) FirewallRules: [{7E6411C7-4235-4346-8560-0F126AF9987F}] => (Allow) D:\SteamLibrary\steamapps\common\VTube Studio\VTube Studio.exe () [File not signed] FirewallRules: [{12730E9D-7E85-4682-AA43-2B6B012008D4}] => (Allow) D:\SteamLibrary\steamapps\common\VTube Studio\VTube Studio.exe () [File not signed] FirewallRules: [{65E17DBF-784A-456B-861D-16202A9E6534}] => (Allow) D:\SteamLibrary\steamapps\common\FaceRig\Bin\Launcher.exe (Holotech Studios SRL -> ) FirewallRules: [{3F37138E-B37B-44E8-92EF-DFD32CA0B45C}] => (Allow) D:\SteamLibrary\steamapps\common\FaceRig\Bin\Launcher.exe (Holotech Studios SRL -> ) FirewallRules: [{D17DB55B-23D1-4CF1-826F-06129E7BCDA5}] => (Allow) D:\SteamLibrary\steamapps\common\FaceRig\Bin\FaceRig.exe (Holotech Studios SRL -> ) FirewallRules: [{244D3478-9053-4C03-AF23-4BBDC95B7476}] => (Allow) D:\SteamLibrary\steamapps\common\FaceRig\Bin\FaceRig.exe (Holotech Studios SRL -> ) FirewallRules: [{38C6C45C-2A8D-4758-A184-F851457FFA4D}] => (Allow) D:\Battlestate Games\BsgLauncher\BsgLauncher.exe (BATTLESTATE GAMES LIMITED -> Battlestate Games) FirewallRules: [{ECCC2B1A-2EDF-490E-94D6-7A07616572EE}] => (Allow) D:\Battlestate Games\BsgLauncher\BsgLauncher.exe (BATTLESTATE GAMES LIMITED -> Battlestate Games) FirewallRules: [{772CB982-E164-4F01-A6DD-6021BACA43C4}] => (Allow) C:\Program Files\VEGAS\VEGAS Pro 23.0\vegas230.exe (MAGIX Software GmbH -> MAGIX Computer Products Intl. Co.) FirewallRules: [{4D84F9A9-3B24-4DCC-BDC7-DDF84F5A42D6}] => (Allow) C:\Program Files\VEGAS\VEGAS Pro 23.0\vegas230.exe (MAGIX Software GmbH -> MAGIX Computer Products Intl. Co.) FirewallRules: [{E5EA441A-D391-4116-90AB-1960418A53D4}] => (Allow) C:\Program Files\VEGAS\VEGAS Pro 23.0\vegas230.exe (MAGIX Software GmbH -> MAGIX Computer Products Intl. Co.) FirewallRules: [{6C5590E0-7B48-4382-B44A-9B4C774CC8EB}] => (Allow) C:\Program Files\VEGAS\VEGAS Pro 23.0\vegas230.exe (MAGIX Software GmbH -> MAGIX Computer Products Intl. Co.) FirewallRules: [{176C0478-9626-4545-A1F7-8E79A9CA528F}] => (Allow) D:\Battlestate Games\Escape from Tarkov\escapefromtarkov_data\plugins\x86_64\vuplexwebviewchromium\vuplex webview.vuplex (BATTLESTATE GAMES LIMITED -> Vuplex) FirewallRules: [{BE6AF969-7208-4D98-8394-491E416C3A5F}] => (Allow) E:\SteamLibrary\steamapps\common\Command & Conquer Red Alert II\Ra2.exe (Electronic Arts, Inc. -> ) FirewallRules: [{C98A96F0-CDC2-4153-842E-D3876CDBE488}] => (Allow) E:\SteamLibrary\steamapps\common\Command & Conquer Red Alert II\Ra2.exe (Electronic Arts, Inc. -> ) FirewallRules: [{9BD4433A-2CC6-4610-A7A6-5C311A9B3574}] => (Allow) E:\SteamLibrary\steamapps\common\Command & Conquer Red Alert II\RA2MD.exe (Electronic Arts, Inc. -> ) FirewallRules: [{9B63FD92-29DA-4D97-8CE2-8CDABC007207}] => (Allow) E:\SteamLibrary\steamapps\common\Command & Conquer Red Alert II\RA2MD.exe (Electronic Arts, Inc. -> ) FirewallRules: [{C5D4FC85-B128-4CCA-ABFC-EA8D95B76067}] => (Allow) E:\SteamLibrary\steamapps\common\Command & Conquer Red Alert II\FinalAlert2\FinalAlert2YR.exe (Electronic Arts, Inc. -> Electronic Arts, Inc.) FirewallRules: [{1E497126-D8EF-4A74-8616-5504CB9AFA85}] => (Allow) E:\SteamLibrary\steamapps\common\Command & Conquer Red Alert II\FinalAlert2\FinalAlert2YR.exe (Electronic Arts, Inc. -> Electronic Arts, Inc.) FirewallRules: [{B3522698-61E4-4BC4-837F-51C04B5B7176}] => (Allow) E:\SteamLibrary\steamapps\common\Command & Conquer Red Alert II\game.exe (Electronic Arts, Inc. -> Westwood Studios) FirewallRules: [{97A0C2CA-63C0-445C-B76D-FF455BD967D2}] => (Allow) E:\SteamLibrary\steamapps\common\Command & Conquer Red Alert II\game.exe (Electronic Arts, Inc. -> Westwood Studios) FirewallRules: [{047C97BB-26B4-4B68-95A0-DEA6B2B1ACA5}] => (Allow) E:\SteamLibrary\steamapps\common\Command & Conquer Red Alert II\gamemd.exe (Electronic Arts, Inc. -> Westwood Studios) FirewallRules: [{058E74B3-16D1-407C-90A4-86920F70A6FE}] => (Allow) E:\SteamLibrary\steamapps\common\Command & Conquer Red Alert II\gamemd.exe (Electronic Arts, Inc. -> Westwood Studios) FirewallRules: [{4A802F21-2886-4A72-8264-17394A1C7804}] => (Allow) E:\SteamLibrary\steamapps\common\ACE COMBAT 8\start_protected_game.exe (EasyAntiCheat Oy -> Epic Games, Inc.) FirewallRules: [{FB9C6110-01D2-4EF1-8B4D-7F8CBEB2B88A}] => (Allow) E:\SteamLibrary\steamapps\common\ACE COMBAT 8\start_protected_game.exe (EasyAntiCheat Oy -> Epic Games, Inc.) FirewallRules: [{55798C9D-7BBE-409A-A300-DB077DE2BC68}] => (Allow) LPort=10308 FirewallRules: [{9F02EDC2-06BE-4728-B70C-0A9A8E98CC32}] => (Allow) LPort=10308 FirewallRules: [{B273C01D-BCE4-4ACF-858A-0BE1D7372A01}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\copilotapp.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{474384BF-B802-4CF6-BEA9-BE29EA428146}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File FirewallRules: [{9DCC4575-5333-44B8-8154-CF749B21B216}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File FirewallRules: [{F5EA8787-F5E8-47E4-A8BE-DB578D5F689B}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File FirewallRules: [{22222E76-F003-4E93-8B73-5AB41BE47240}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\M365Copilot.exe => No File FirewallRules: [{0D28BAE5-27B3-4F9E-A8A4-FA28B9EEFAA4}] => (Allow) LPort=50833 FirewallRules: [{E781AA72-B648-44EA-99C1-C29C67B23145}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.304.258.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{C696BDE4-4CE4-4EDF-9DC0-19F0A5180873}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.304.258.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{49507FF2-393B-40EA-B0AD-CD9C4B32307A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.304.258.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{D26D109F-6BDD-4C1C-8612-CE6A3898E09C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.304.258.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{26F5D75F-A7A1-482D-85E3-EED57F827A51}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.304.258.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{4916EC6F-9544-4928-B2EA-BFD5B08686AC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.304.258.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{448C3F1D-643C-4F45-8644-66721B940848}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.304.258.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{1B899994-AAB7-4960-9085-39984BF7B255}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.304.258.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{C99C96D2-1B91-4313-82E5-551B1B625615}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.304.258.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{9ECBB507-EE21-4344-89E5-3A251DAFBE43}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.304.258.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{0C9B922B-570D-4C5D-8083-B190F8F34F0C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.304.258.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{B2C75657-5084-4C4E-89E7-168193D45C31}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.304.258.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{AA8AE6A1-B6FD-4073-AEB8-C58DB54BA14B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.304.258.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{23C0F25A-3E41-4E72-AECE-CB7DB1E295C9}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [{A162DFA5-E912-4C20-B097-9C1012DB067E}] => (Allow) C:\ProgramData\Kaspersky Lab\AVP21.27\Data\webview2\Win10\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{E604D5D7-7B7B-45FE-93F6-6F68D6E59347}] => (Allow) LPort=32683 FirewallRules: [{43715E18-16D1-4143-87E9-08B4D0F54AE8}] => (Allow) LPort=33683 FirewallRules: [{84CB3492-6367-40E9-85C4-1FBDCAE6D403}] => (Allow) LPort=26822 ==================== Restore Points ========================= ATTENTION: System Restore is disabled (Total:250 GB) (Free:79.33 GB) (32%) ==================== Faulty Device Manager Devices ============ ==================== Event log errors: ======================== Application errors: ================== Error: (10/16/2026 01:03:12 AM) (Source: .NET Runtime) (EventID: 1025) (User: ) Description: Application: avpui.exe CoreCLR Version: 8.0.3126.47701 .NET Version: 8.0.31-kl.7.9.1127.0 Description: The application requested process termination through System.Environment.FailFast. Message: Terminate on shutting down of the current session Description: The process was terminated due to an unhandled exception.System.ArgumentException: Value does not fall within the expected range. Stack: at System.Environment.FailFast(System.String, System.Exception) at KasperskyLab.UI.Core.ExceptionPolicy.ProcessFirstChanceException(System.Object, System.Runtime.ExceptionServices.FirstChanceExceptionEventArgs) at MS.Win32.Penimc.IPimcManager3.GetTablet(UInt32, MS.Win32.Penimc.IPimcTablet3 ByRef) at System.Windows.Input.PenThreadWorker+WorkerOperationGetTabletInfo.OnDoWork() at System.Windows.Input.PenThreadWorker+WorkerOperation.DoWork() at System.Windows.Input.PenThreadWorker.ThreadProc() at System.Threading.Thread+StartHelper.Callback(System.Object) at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) at System.Threading.Thread.StartCallback() Error: (10/16/2026 01:03:12 AM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: 应用程序: Gamebar_Connect.exe Framework 版本: v4.0.30319 说明: 由于未经处理的异常，进程终止。 异常信息: System.Net.Sockets.SocketException 在 System.Net.Sockets.Socket.Accept() 在 Gamebar_Connect.MainWindow.StartServer() 在 System.Threading.ThreadHelper.ThreadStart_Context(System.Object) 在 System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) 在 System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) 在 System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) 在 System.Threading.ThreadHelper.ThreadStart() Error: (10/16/2026 12:58:02 AM) (Source: .NET Runtime) (EventID: 1025) (User: ) Description: Application: avpui.exe CoreCLR Version: 8.0.3126.47701 .NET Version: 8.0.31-kl.7.9.1127.0 Description: The application requested process termination through System.Environment.FailFast. Message: Terminate on shutting down of the current session Description: The process was terminated due to an unhandled exception.System.ArgumentException: Value does not fall within the expected range. Stack: at System.Environment.FailFast(System.String, System.Exception) at KasperskyLab.UI.Core.ExceptionPolicy.ProcessFirstChanceException(System.Object, System.Runtime.ExceptionServices.FirstChanceExceptionEventArgs) at MS.Win32.Penimc.IPimcManager3.GetTablet(UInt32, MS.Win32.Penimc.IPimcTablet3 ByRef) at System.Windows.Input.PenThreadWorker+WorkerOperationGetTabletInfo.OnDoWork() at System.Windows.Input.PenThreadWorker+WorkerOperation.DoWork() at System.Windows.Input.PenThreadWorker.ThreadProc() at System.Threading.Thread+StartHelper.Callback(System.Object) at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) at System.Threading.Thread.StartCallback() Error: (10/16/2026 12:58:01 AM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: 应用程序: Gamebar_Connect.exe Framework 版本: v4.0.30319 说明: 由于未经处理的异常，进程终止。 异常信息: System.Net.Sockets.SocketException 在 System.Net.Sockets.Socket.Accept() 在 Gamebar_Connect.MainWindow.StartServer() 在 System.Threading.ThreadHelper.ThreadStart_Context(System.Object) 在 System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) 在 System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) 在 System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) 在 System.Threading.ThreadHelper.ThreadStart() Error: (10/16/2026 12:45:28 AM) (Source: .NET Runtime) (EventID: 1022) (User: ) Description: .NET Runtime version 4.0.30319.0 - 在初始化分析 API 附加基础结构时发生错误。此进程不允许附加探查器。HRESULT: 0x80004005。 进程 ID (十进制): 34596。消息 ID: [0x2509]。 Error: (10/16/2026 12:27:00 AM) (Source: SideBySide) (EventID: 78) (User: ) Description: 生成“D:\Other\Microsoft Autoruns\Autoruns.exe”的激活上下文失败。在指令清单或策略文件“”的第 行中出现错误。 应用程序所需的组件版本与已处于活动状态的另一个组件版本冲突。 冲突的组件包括: 组件 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.9711_none_85b4ef87f7b1112b.manifest。 组件 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.9711_none_3e07b8b0e334e825.manifest。 Error: (10/16/2026 12:17:04 AM) (Source: SideBySide) (EventID: 78) (User: ) Description: 生成“D:\Other\Microsoft Autoruns\Autoruns.exe”的激活上下文失败。在指令清单或策略文件“”的第 行中出现错误。 应用程序所需的组件版本与已处于活动状态的另一个组件版本冲突。 冲突的组件包括: 组件 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.9711_none_85b4ef87f7b1112b.manifest。 组件 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.9711_none_3e07b8b0e334e825.manifest。 Error: (10/16/2026 12:17:02 AM) (Source: SideBySide) (EventID: 78) (User: ) Description: 生成“D:\Other\Microsoft Autoruns\Autoruns.exe”的激活上下文失败。在指令清单或策略文件“”的第 行中出现错误。 应用程序所需的组件版本与已处于活动状态的另一个组件版本冲突。 冲突的组件包括: 组件 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.9711_none_85b4ef87f7b1112b.manifest。 组件 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.9711_none_3e07b8b0e334e825.manifest。 System errors: ============= Error: (10/16/2026 01:30:42 AM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY) Description: DCOM 在尝试使用参数“不可用”启动服务 GamingServices 以运行服务器: {D529741A-1BF1-4D1E-9976-35089622E758} 时遇到错误“87” Error: (10/16/2026 01:30:42 AM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY) Description: DCOM 在尝试使用参数“不可用”启动服务 GamingServices 以运行服务器: {3E8C9ABE-9226-4609-BF5B-60288A391DEE} 时遇到错误“87” Error: (10/16/2026 01:16:46 AM) (Source: DCOM) (EventID: 10010) (User: -THB-DOZER) Description: 服务器 {583C0B7A-E536-4020-9F62-002DA58A5B81} 没有在要求的超时时间内向 DCOM 注册。 Error: (10/16/2026 01:14:10 AM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24641) (User: NT AUTHORITY) Description: 重新启动期间尝试检索 BitLocker 卷主密钥时出现意外错误。 Error: (10/16/2026 01:14:10 AM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24641) (User: NT AUTHORITY) Description: 重新启动期间尝试检索 BitLocker 卷主密钥时出现意外错误。 Error: (10/16/2026 01:14:10 AM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24641) (User: NT AUTHORITY) Description: 重新启动期间尝试检索 BitLocker 卷主密钥时出现意外错误。 Error: (10/16/2026 01:13:51 AM) (Source: DCOM) (EventID: 10005) (User: -THB-DOZER) Description: DCOM 在尝试使用参数“不可用”启动服务 ShellHWDetection 以运行服务器: {DD522ACC-F821-461A-A407-50B198B896DC} 时遇到错误“1084” Error: (10/16/2026 01:13:47 AM) (Source: DCOM) (EventID: 10005) (User: -THB-DOZER) Description: DCOM 在尝试使用参数“不可用”启动服务 TokenBroker 以运行服务器: Windows.Internal.Security.Authentication.Web.TokenBrokerInternal 时遇到错误“1084” Error: (09/28/2026 12:09:26 AM) (Source: disk) (EventID: 11) (User: ) Description: 驱动程序在 \Device\Harddisk2\DR2 上检测到控制器错误。 Error: (09/28/2026 12:09:25 AM) (Source: disk) (EventID: 11) (User: ) Description: 驱动程序在 \Device\Harddisk2\DR2 上检测到控制器错误。 Error: (09/28/2026 12:09:24 AM) (Source: disk) (EventID: 11) (User: ) Description: 驱动程序在 \Device\Harddisk2\DR2 上检测到控制器错误。 Windows Defender: ================ TimeCreated : 2026/10/09 22:21:41 Message : Microsoft Defender 防病毒 has encountered an error trying to update security intelligence. New security intelligence Version: Previous security intelligence Version: 1.459.576.0 Update Source: Microsoft 更新服务器 Security intelligence Type: 防病毒 Update Type: 完全 User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.26080.3 Error code: 0x8024001e Error description: 在检查更新时出现意外问题。有关更新的安装和疑难解答的信息，请参阅“帮助和支持”。 TimeCreated : 2026/10/08 22:23:39 Message : Microsoft Defender 防病毒 has detected malware or other potentially unwanted software. For more information please see the following: https://go.microsoft.com/fwlink/?linkid=37020&name=VirTool:Win32/DefenderTamperingRestore&threatid=214774 1622&enterprise=0 Name: VirTool:Win32/DefenderTamperingRestore ID: 2147741622 Severity: 严重 Category: 工具 Path: regkeyvalue:_hklm\software\microsoft\windows defender\\DisableAntiSpyware Detection Origin: 未知 Detection Type: 实际 Detection Source: 系统 User: NT AUTHORITY\SYSTEM Process Name: Unknown Security intelligence Version: AV: 1.459.576.0, AS: 1.459.576.0, NIS: 1.459.576.0 Engine Version: AM: 1.1.26080.3, NIS: 1.1.26080.3 TimeCreated : 2026/10/08 22:23:28 Message : Microsoft Defender 防病毒 has detected malware or other potentially unwanted software. For more information please see the following: https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win64/Mikey!pz&threatid=2147909988&enterprise=0 Name: Trojan:Win64/Mikey!pz ID: 2147909988 Severity: 严重 Category: 特洛伊木马 Path: file:_D:\Other\Quark Download\DLC 解锁(1)\【密码：juij.fun】[v1.5.2f1] [2025-12-05] 都市 天际线 2 [DLC 解锁] [S team & PC Game Pass] [Windows & SteamOS]\DLC 解锁补丁\全自动解锁方案\Steam 平台\Windows 系统 - 备用方案\version.dll; file:_D :\Other\Quark Download\DLC 解锁(1)\【密码：juij.fun】[v1.5.2f1] [2025-12-05] 都市 天际线 2 [DLC 解锁] [Steam & PC Game Pass] [Windows & SteamOS]\DLC 解锁补丁\全自动解锁方案\Steam 平台\Windows 系统 - 备用方案\winmm.dll; file:_D:\Other\Quark Dow nload\【密码：juij.fun】[v1.19.03] [2026-04-23] 王国风云 3 [DLC 解锁] [Steam & Xbox] [Windows & SteamOS & macOS]\DLC 解锁补丁\全自动解锁方案\Steam 平台\Windows & SteamOS 系统 - 备用方案「SteamOS 需强制使用兼容层」\version.dll; file:_D:\Other\Quark Do wnload\【密码：juij.fun】[v1.19.03] [2026-04-23] 王国风云 3 [DLC 解锁] [Steam & Xbox] [Windows & SteamOS & macOS]\DL C 解锁补丁\全自动解锁方案\Steam 平台\Windows & SteamOS 系统 - 备用方案「SteamOS 需强制使用兼容层」\winmm.dll Detection Origin: 本地计算机 Detection Type: 实际 Detection Source: 系统 User: NT AUTHORITY\SYSTEM Process Name: Unknown Security intelligence Version: AV: 1.459.576.0, AS: 1.459.576.0, NIS: 1.459.576.0 Engine Version: AM: 1.1.26080.3, NIS: 1.1.26080.3 TimeCreated : 2026/10/08 19:18:11 Message : Microsoft Defender 防病毒 scan has been stopped before completion. Scan ID: {6475C42C-2519-4616-BE6C-3E26F468A187} Scan Type: 反恶意软件 Scan Parameters: 自定义扫描 User: -THB-DOZER\o0the Stop Reason: 亊孱亊孱Unknown TimeCreated : 2026/10/08 19:10:31 Message : Microsoft Defender 防病毒 has detected malware or other potentially unwanted software. For more information please see the following: https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win64/Mikey.KAB!MTB&threatid=2147952419&enterpr ise=0 Name: Trojan:Win64/Mikey.KAB!MTB ID: 2147952419 Severity: 严重 Category: 特洛伊木马 Path: file:_D:\Other\Quark Download\DLC 解锁(1)\【密码：juij.fun】[v1.5.2f1] [2025-12-05] 都市 天际线 2 [DLC 解锁] [S team & PC Game Pass] [Windows & SteamOS]\DLC 解锁补丁\全自动解锁方案\Steam 平台\Windows 系统 - 备用方案\version.dll; file:_D :\Other\Quark Download\DLC 解锁(1)\【密码：juij.fun】[v1.5.2f1] [2025-12-05] 都市 天际线 2 [DLC 解锁] [Steam & PC Game Pass] [Windows & SteamOS]\DLC 解锁补丁\全自动解锁方案\Steam 平台\Windows 系统 - 备用方案\winmm.dll; file:_D:\Other\Quark Dow nload\【密码：juij.fun】[v1.19.03] [2026-04-23] 王国风云 3 [DLC 解锁] [Steam & Xbox] [Windows & SteamOS & macOS]\DLC 解锁补丁\全自动解锁方案\Steam 平台\Windows & SteamOS 系统 - 备用方案「SteamOS 需强制使用兼容层」\version.dll; file:_D:\Other\Quark Do wnload\【密码：juij.fun】[v1.19.03] [2026-04-23] 王国风云 3 [DLC 解锁] [Steam & Xbox] [Windows & SteamOS & macOS]\DL C 解锁补丁\全自动解锁方案\Steam 平台\Windows & SteamOS 系统 - 备用方案「SteamOS 需强制使用兼容层」\winmm.dll Detection Origin: 本地计算机 Detection Type: 实际 Detection Source: 用户 User: -THB-DOZER\o0the Process Name: Unknown Security intelligence Version: AV: 1.459.576.0, AS: 1.459.576.0, NIS: 1.459.576.0 Engine Version: AM: 1.1.26080.3, NIS: 1.1.26080.3 TimeCreated : 2026/10/04 22:08:29 Message : Microsoft Defender 防病毒 scan has been stopped before completion. Scan ID: {E0C0572C-425C-4319-B7A9-7AE4EC48A10D} Scan Type: 反恶意软件 Scan Parameters: 快速扫描 User: NT AUTHORITY\SYSTEM Stop Reason: 彐府亐唱Scheduled scan was skipped because the last successful scan was within the last 7 days TimeCreated : 2026/09/27 18:09:37 Message : Microsoft Defender 防病毒 has detected potentially unwanted application(PUA). For more information please see the following: https://go.microsoft.com/fwlink/?linkid=37020&name=PUADlManager:Win32/OfferCore&threatid=311999&enterpris e=0 Name: PUADlManager:Win32/OfferCore ID: 311999 Severity: 低 Category: 潜在的垃圾软件 Path: file:_C:\Users\o0the\Downloads\CheatEngine76.exe Detection Origin: 本地计算机 Detection Type: 实际 Detection Source: 实时保护 User: -THB-DOZER\o0the Process Name: C:\Windows\explorer.exe Security intelligence Version: AV: 1.459.424.0, AS: 1.459.424.0, NIS: 1.459.424.0 Engine Version: AM: 1.1.26080.3, NIS: 1.1.26080.3 TimeCreated : 2026/09/27 18:09:37 Message : Microsoft Defender 防病毒 has detected potentially unwanted application(PUA). For more information please see the following: https://go.microsoft.com/fwlink/?linkid=37020&name=PUADlManager:Win32/OfferCore&threatid=311999&enterpris e=0 Name: PUADlManager:Win32/OfferCore ID: 311999 Severity: 低 Category: 潜在的垃圾软件 Path: file:_C:\Users\o0the\Downloads\CheatEngine76.exe Detection Origin: 本地计算机 Detection Type: 实际 Detection Source: 实时保护 User: -THB-DOZER\o0the Process Name: C:\Windows\explorer.exe Security intelligence Version: AV: 1.459.424.0, AS: 1.459.424.0, NIS: 1.459.424.0 Engine Version: AM: 1.1.26080.3, NIS: 1.1.26080.3 CodeIntegrity: =============== Date: 2026-10-16 01:31:59 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky 21.27\x64\com_antivirus.dll that did not meet the Windows signing level requirements. ==================== Memory info =========================== BIOS: American Megatrends International, LLC. E15M3IMS.108 03/17/2025 Motherboard: Micro-Star International Co., Ltd. MS-15M3 Processor: Intel(R) Core(TM) Ultra 7 255HX Percentage of memory in use: 31% Total physical RAM: 64943.34 MB Available physical RAM: 44402.57 MB Total Virtual: 71855.34 MB Available Virtual: 48590.53 MB ==================== Drives ================================ Disk 0 - Drive c: (Windows) (Fixed) (Total:250 GB) (Free:79.31 GB) (Model: NVMe SAMSUNG MZVL81T0HFLB-00BTW) (Protected) NTFS Disk 0 - Drive d: (Other) (Fixed) (Total:680 GB) (Free:171.62 GB) (Model: NVMe SAMSUNG MZVL81T0HFLB-00BTW) (Protected) NTFS Disk 1 - Drive e: (Gaming Shit) (Fixed) (Total:1863 GB) (Free:192.97 GB) (Model: NVMe WD_BLACK SN7100 2TB) (Protected) NTFS Disk 0 - \\?\Volume{3f1ccb88-a974-4207-bdda-3e5c9a028111}\ (WinRE tools) (Fixed) (Total:900 MB) (Free:58.19 MB) NTFS Disk 0 - \\?\Volume{b23e1eb3-8577-4a1a-a993-7ef3a5530807}\ (BIOS_RVY) (Fixed) (Total:20.68 GB) (Free:747.23 MB) NTFS Disk 0 - \\?\Volume{bbc003f7-f71f-449a-a055-e8a4f45c2f0b}\ (SYSTEM) (Fixed) (Total:296 MB) (Free:261.21 MB) FAT32 ==================== MBR & Partition Table ==================== ============================================================ Disk: 0 (Size: 953.87 GB) (Disk ID: CBCCA17D) Partitions: =========== Partition Style : GPT Partition Count : 6 Disk ID : {1B6DFF30-0D1B-4C03-91F0-3C8D5CC137D7} Usable Offset : 0.02 MB Usable Length : 953.87 GB Max Partitions : 128 Partition 1 Type : EFI System Partition Size : 300 MB Offset : 1 MB Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B} Partition GUID : {BBC003F7-F71F-449A-A055-E8A4F45C2F0B} GPT Name : EFI system partition Attributes : 0x0000000000000000 Attribute Flags : None Hidden : Yes Platform Required: No ------------------------------------------------------------ Partition 2 Type : Microsoft Reserved (MSR) Size : 128 MB Offset : 301 MB Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE} Partition GUID : {66466B62-B074-4C97-ADF9-F7F6BFAFD93E} GPT Name : Microsoft reserved partition Attributes : 0x0000000000000000 Attribute Flags : None Hidden : Yes Platform Required: No ------------------------------------------------------------ Partition 3 Type : Basic Data Partition Size : 250 GB Offset : 429 MB Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7} Partition GUID : {3336F239-89A3-4926-B865-1850BEDAFCB1} GPT Name : Basic data partition Attributes : 0x0000000000000000 Attribute Flags : None Hidden : No Platform Required: No ------------------------------------------------------------ Partition 4 Type : Basic Data Partition Size : 680 GB Offset : 256429 MB Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7} Partition GUID : {A8413109-B82F-41F2-9E3E-B17760ACAE77} GPT Name : Basic data partition Attributes : 0x0000000000000000 Attribute Flags : None Hidden : No Platform Required: No ------------------------------------------------------------ Partition 5 Type : Windows Recovery Size : 900 MB Offset : 954683 MB Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC} Partition GUID : {3F1CCB88-A974-4207-BDDA-3E5C9A028111} GPT Name : Basic data partition Attributes : 0x8000000000000001 Attribute Flags : Platform Required, No Default Drive Letter Hidden : Yes Platform Required: Yes ------------------------------------------------------------ Partition 6 Type : Windows Recovery Size : 20.68 GB Offset : 955583 MB Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC} Partition GUID : {B23E1EB3-8577-4A1A-A993-7EF3A5530807} GPT Name : Basic data partition Attributes : 0x8000000000000001 Attribute Flags : Platform Required, No Default Drive Letter Hidden : Yes Platform Required: Yes ------------------------------------------------------------ ============================================================ Disk: 1 (Protective MBR) (Size: 1863.02 GB) Partitions: =========== Partition Style : GPT Partition Count : 2 Disk ID : {120874B5-8A90-461C-BFF4-E709200EC589} Usable Offset : 0.02 MB Usable Length : 1863.02 GB Max Partitions : 128 Partition 1 Type : Microsoft Reserved (MSR) Size : 15.98 MB Offset : 0.02 MB Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE} Partition GUID : {47082857-20D3-4D1F-89C5-5B0247234AA2} GPT Name : Microsoft reserved partition Attributes : 0x0000000000000000 Attribute Flags : None Hidden : Yes Platform Required: No ------------------------------------------------------------ Partition 2 Type : Basic Data Partition Size : 1863 GB Offset : 16 MB Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7} Partition GUID : {FB3D9159-F435-4E5F-B15E-55B516C3D504} GPT Name : Basic data partition Attributes : 0x0000000000000000 Attribute Flags : None Hidden : No Platform Required: No ------------------------------------------------------------ ============================================================ ==================== End of Addition.txt =======================