SOLVED Windows Security Center does not work

Discussion in 'Malware Removal Assistance For Windows' started by jmz2d, Sep 6, 2017.

Need Malware Removal Help?

We offer free malware removal assistance to our members. Sign Up now, and get free malware removal support.

  1. jmz2d

    jmz2d New Member

    Sep 6, 2017
    11
    0
    Gallifrey
    Windows 10
    Malwarebytes
    Operating System:
    Windows 10
    Are you using a 32-bit or 64-bit operating system?:
    64-bit (x64)
    Infection date and initial symptoms:
    my security center does not work for 2 months and i couldnt fix it, i think problem started after a windows update
    Current issues and symptoms:
    i can not enable my security center by using services.msc and my security center registries are set to 1 (AntiVirusDisableNotify, 1 / FirewallDisableNotify, 1 / UpdatesDisableNotify, 1), i couldnt update windows defender and action center is disabled as well.
    Steps taken in order to remove the infection:
    i tried to fix it by using malwarebytes, starting security center from services.msc or changing reg keys manually but it always resets to what it was before and i could not change anything
    Logs added to help request:
    • FRST.txt
    • Addition.txt
    • I've also uploaded logs from other scans that I've performed
    Windows security center does not work, action center is disabled as well (added a screenshot about it) and i could not update my windows defender, i dont have any weird symptoms that look like a virus caused this problem so i am not sure what the problem is. I added my malwarebytes scanlog as well.
     

    Attached Files:

  2. TwinHeadedEagle

    TwinHeadedEagle Removal Expert
    Staff Member

    Mar 8, 2013
    21,195
    2,608
    Malware Removal, Gaming
    Windows 7
    ESET
    Hello,


    [​IMG] Fix with Farbar Recovery Scan Tool

    [​IMG] This fix was created for this user for use on that particular machine. [​IMG]
    [​IMG] Running it on another one may cause damage and render the system unstable. [​IMG]

    Download attached fixlist.txt file and save it to the Desktop:

    Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

    • Right-click on [​IMG] icon and select [​IMG] Run as Administrator to start the tool.
      (XP users click run after receipt of Windows Security Warning - Open File).
    • Press the Fix button just once and wait.
    • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
    • When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

    Please attach it to your reply.
     

    Attached Files:

  3. jmz2d

    jmz2d New Member

    Sep 6, 2017
    11
    0
    Gallifrey
    Windows 10
    Malwarebytes
    Here you go, thanks for the fast reply btw
     

    Attached Files:

  4. TwinHeadedEagle

    TwinHeadedEagle Removal Expert
    Staff Member

    Mar 8, 2013
    21,195
    2,608
    Malware Removal, Gaming
    Windows 7
    ESET
    Sorry for delay. One more seach:

    [​IMG] FRST search

    Once again we shall use FRST for additional checks. Re-run FRST/FRST64 by double-clicking:
    • Copy {AC04A8C4-4F3A-438B-A98B-4AD6952CD8E5} into the Search: field in FRST then click the Search Registry button.
    • FRST will search your computer for files and when finished it will produce a log Search.txt in the same directory the tool is run.
    • Please attach it to your reply.
     
  5. jmz2d

    jmz2d New Member

    Sep 6, 2017
    11
    0
    Gallifrey
    Windows 10
    Malwarebytes
    i tried to clean-up c://zec file while waiting for your reply, i deleted everything in that file by using cmd and i deleted WePrint stuff from Windows Firewall with Advanced Security but something is still wrong since i still cant activate windows defender but security center seems working and doesnt stop in services.msc now, wanted to let you know.
     
  6. jmz2d

    jmz2d New Member

    Sep 6, 2017
    11
    0
    Gallifrey
    Windows 10
    Malwarebytes
    i couldnt see the upload file button somehow so im copying the txt:

    Farbar Recovery Scan Tool (x64) Version: 10-09-2017
    Ran by jmz (10-09-2017 22:20:04)
    Running from C:\murat\malwarehelp
    Boot Mode: Normal

    ================== Search Files: "{AC04A8C4-4F3A-438B-A98B-4AD6952CD8E5}" =============

    ====== End of Search ======​
     
  7. TwinHeadedEagle

    TwinHeadedEagle Removal Expert
    Staff Member

    Mar 8, 2013
    21,195
    2,608
    Malware Removal, Gaming
    Windows 7
    ESET
    I told you to click Search Registry button. And upload the document as file.
     
  8. jmz2d

    jmz2d New Member

    Sep 6, 2017
    11
    0
    Gallifrey
    Windows 10
    Malwarebytes
    i know, i copied {AC04A8C4-4F3A-438B-A98B-4AD6952CD8E5} to Search: field and this is what writes in the Search.txt, i cant see upload a file button somehow so i copied what writes inside it:
    Farbar Recovery Scan Tool (x64) Version: 11-09-2017
    Ran by jmz (11-09-2017 02:13:51)
    Running from C:\Users\MURAT\Desktop
    Boot Mode: Normal

    ================== Search Registry: "{AC04A8C4-4F3A-438B-A98B-4AD6952CD8E5}" ===========


    ====== End of Search ======​
    it doesnt find anything i dont know what im missing.
     
  9. jmz2d

    jmz2d New Member

    Sep 6, 2017
    11
    0
    Gallifrey
    Windows 10
    Malwarebytes
    it does make a search for about 8-10 mins and this is always what i get.
     
  10. TwinHeadedEagle

    TwinHeadedEagle Removal Expert
    Staff Member

    Mar 8, 2013
    21,195
    2,608
    Malware Removal, Gaming
    Windows 7
    ESET
    Okay, thanks.

    [​IMG] Scan with Farbar Recovery Scan Tool

    Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.
    • Right-click on [​IMG] icon and select [​IMG] Run as Administrator to start the tool.
      (XP users click run after receipt of Windows Security Warning - Open File).
    • Make sure that Addition.txt option is checked.

      [​IMG]
    • Press Scan button and wait.
    • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.
    Please attach report into your next reply.
     
  11. jmz2d

    jmz2d New Member

    Sep 6, 2017
    11
    0
    Gallifrey
    Windows 10
    Malwarebytes
    I could see attach a report/upload a file button before but i can not now so im copying these txt files again:
    Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 11-09-2017
    Ran by jmz (administrator) on JMZ (11-09-2017 14:13:42)
    Running from C:\Users\MURAT\Desktop
    Loaded Profiles: jmz (Available Profiles: jmz)
    Platform: Windows 10 Home Single Language Version 1703 (X64) Language: Türkçe (Türkiye)
    Internet Explorer Version 11 (Default browser: Chrome)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
    (Intel Corporation) C:\Windows\System32\igfxCUIService.exe
    (Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
    (Apple Inc.) C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe
    (Intel Corporation) C:\Windows\System32\ibtsiva.exe
    (LENOVO INCORPORATED.) C:\Program Files\lenovo\iMController\SystemAgentService.exe
    (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
    (Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
    (Lenovo(beijing) Limited) C:\Windows\System32\LenovoWiFiHotspotSvr.exe
    (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
    (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
    (IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
    (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
    (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
    (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.TEST\MSSQL\Binn\sqlservr.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
    () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
    (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
    (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
    (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.TEST\MSSQL\Binn\fdlauncher.exe
    (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.TEST\MSSQL\Binn\fdhost.exe
    (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
    (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
    (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
    (Intel Corporation) C:\Windows\System32\igfxEM.exe
    (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
    (Intel Corporation) C:\Windows\System32\igfxHK.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Realtek semiconductor) C:\Windows\RTFTrack.exe
    (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
    () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
    (Lenovo) C:\Program Files\lenovo\Onekey Theater\OnekeyStudio.exe
    (Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
    (Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
    (Nico Mak Computing) C:\Program Files\File Association Helper\FAHWindow.exe
    (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
    (© 2015 Microsoft Corporation) C:\Users\MURAT\AppData\Local\Microsoft\BingSvc\BingSvc.exe
    (SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe
    (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
    (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
    (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
    (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
    (CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
    (none) C:\murat\WLan\WLAN Optimizer.exe
    () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35063.13610.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
    (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe
    (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
    (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
    (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
    (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
    (Microsoft Corporation) C:\Windows\System32\smartscreen.exe

    ==================== Registry (Whitelisted) ====================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
    HKLM\...\Run: [RtsFT] => C:\windows\RTFTrack.exe [5060864 2015-06-16] (Realtek semiconductor)
    HKLM\...\Run: [IgfxTray] => C:\windows\system32\igfxtray.exe [401848 2017-06-12] ()
    HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-08] (Intel Corporation)
    HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [907480 2013-09-05] (Conexant Systems, Inc.)
    HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
    HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
    HKLM\...\Run: [OnekeyStudio] => C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-09-15] (Lenovo)
    HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [15813616 2014-09-16] (Lenovo(beijing) Limited)
    HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [80880 2014-09-16] (Lenovo(beijing) Limited)
    HKLM\...\Run: [FAHConsole] => C:\Program Files\File Association Helper\FAHConsole.exe [729272 2014-01-28] (Nico Mak Computing)
    HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508240 2015-08-05] (Adobe Systems Incorporated)
    HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [16293496 2016-09-30] (Logitech Inc.)
    HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
    HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [214312 2011-12-07] (CyberLink Corp.)
    HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
    HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-17] (Apple Inc.)
    HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation)
    HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2016-07-11] ()
    HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
    HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4471536 2015-05-21] (Disc Soft Ltd)
    HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\...\Run: [BingSvc] => C:\Users\MURAT\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-12] (© 2015 Microsoft Corporation)
    HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3071776 2017-09-07] (Valve Corporation)
    HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9832152 2017-08-03] (Piriform Ltd)
    HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\...\Run: [Discord] => C:\Users\MURAT\AppData\Local\Discord\app-0.0.298\Discord.exe [57477112 2017-08-08] (Discord Inc.)
    HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27219928 2016-11-03] (Skype Technologies S.A.)
    HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\...\RunOnce: [FlashPlayerUpdate] => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_26_0_0_137_pepper.exe [1281024 2017-07-11] (Adobe Systems Incorporated)
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackUpdateChecker.lnk [2015-01-09]
    ShortcutTarget: CodecPackUpdateChecker.lnk -> C:\Windows\SysWOW64\C2MP\UpdateChecker.exe ()
    Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2017-06-28]
    ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS)
    CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    ProxyServer: [S-1-5-21-1369535705-3180996973-1344369311-1002] => http=127.0.0.1:8896;https=127.0.0.1:8896
    Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
    Tcpip\..\Interfaces\{06d94800-74fb-4dc1-9b73-d0dbaa80cb7b}: [NameServer] 8.8.8.8,8.8.4.4
    Tcpip\..\Interfaces\{06d94800-74fb-4dc1-9b73-d0dbaa80cb7b}: [DhcpNameServer] 192.168.1.1
    Tcpip\..\Interfaces\{be16cd11-9ea3-458e-bea1-1f3d02e278b3}: [DhcpNameServer] 7.254.254.254
    Tcpip\..\Interfaces\{eaaabf1b-b5eb-401b-b9b7-6960eaaff5e5}: [NameServer] 8.8.8.8,8.8.4.4
    Tcpip\..\Interfaces\{eaaabf1b-b5eb-401b-b9b7-6960eaaff5e5}: [DhcpNameServer] 178.233.140.110 46.196.235.90 176.240.150.250

    Internet Explorer:
    ==================
    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131354589711227546&GUID=A0F6BAAF-3EEC-45A4-B0B3-7BFB2D82C523
    HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
    HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131354589711239839&GUID=A0F6BAAF-3EEC-45A4-B0B3-7BFB2D82C523
    HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
    SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    SearchScopes: HKU\S-1-5-21-1369535705-3180996973-1344369311-1002 -> DefaultScope {8C3078A0-9AAB-4371-85D1-656CA8E46EE8} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
    SearchScopes: HKU\S-1-5-21-1369535705-3180996973-1344369311-1002 -> 37B2E986A7C49C614282CBB00A67777F URL = hxxp://gorsel.yandex.com.tr/yandsearch?win=160&clid=2083124&text={searchTerms}
    SearchScopes: HKU\S-1-5-21-1369535705-3180996973-1344369311-1002 -> A8743C42BF303D0794F58CC80983B1DE URL = hxxp://video.yandex.com.tr/#search?win=160&clid=2083124&text={searchTerms}
    SearchScopes: HKU\S-1-5-21-1369535705-3180996973-1344369311-1002 -> EB57C9901C249E83B1DAABB89A17D035 URL = hxxp://haber.yandex.com.tr/yandsearch?rpt=nnews2&grhow=clutop&win=160&clid=2083124&text={searchTerms}
    SearchScopes: HKU\S-1-5-21-1369535705-3180996973-1344369311-1002 -> {8C3078A0-9AAB-4371-85D1-656CA8E46EE8} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
    BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2017-07-20] (Microsoft Corporation)
    BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-12-14] (Oracle Corporation)
    BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-07-20] (Microsoft Corporation)
    BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-14] (Oracle Corporation)
    BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2017-06-28] (Microsoft Corporation)
    BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-12-14] (Oracle Corporation)
    BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2017-07-20] (Microsoft Corporation)
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-14] (Oracle Corporation)
    BHO-x32: Microsoft Web Test Recorder 10.0 Helper -> {DDA57003-0068-4ed2-9D32-4D1EC707D94D} -> c:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2010-03-19] (Microsoft Corporation)
    Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-20] (Microsoft Corporation)
    Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-07-20] (Microsoft Corporation)
    Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-20] (Microsoft Corporation)
    Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-07-20] (Microsoft Corporation)
    Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-20] (Microsoft Corporation)
    Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-07-20] (Microsoft Corporation)
    Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-20] (Microsoft Corporation)
    Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-07-20] (Microsoft Corporation)

    FireFox:
    ========
    FF ProfilePath: C:\Users\MURAT\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default [2017-08-06]
    FF user.js: detected! => C:\Users\MURAT\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\user.js [2016-03-06]
    FF DefaultSearchEngine: Mozilla\Firefox\Profiles\nahd6ha2.default -> Yandex
    FF SelectedSearchEngine: Mozilla\Firefox\Profiles\nahd6ha2.default -> Yandex
    FF Homepage: Mozilla\Firefox\Profiles\nahd6ha2.default -> hxxp://www.yandex.com.tr/?win=160&clid=2083123
    FF SearchPlugin: C:\Users\MURAT\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\gorsel.yandex.com.tr-145713.xml [2015-01-22]
    FF SearchPlugin: C:\Users\MURAT\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\haber.yandex.com.tr-145713.xml [2015-01-22]
    FF SearchPlugin: C:\Users\MURAT\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\video.yandex.com.tr-145713.xml [2015-01-22]
    FF SearchPlugin: C:\Users\MURAT\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\yandex.com.tr-145713.xml [2015-01-22]
    FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_26_0_0_137.dll [2017-07-11] ()
    FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-12-14] (Oracle Corporation)
    FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-12-14] (Oracle Corporation)
    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
    FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-06-28] (Microsoft Corporation)
    FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-08-06] (Adobe Systems)
    FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_137.dll [2017-07-11] ()
    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
    FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-12-14] (Oracle Corporation)
    FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-12-14] (Oracle Corporation)
    FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-06-28] (Microsoft Corporation)
    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2017-06-28] (Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
    FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-08-06] (Adobe Systems)
    FF Plugin HKU\S-1-5-21-1369535705-3180996973-1344369311-1002: jpl.nasa.gov/NASAEyes -> C:\Users\MURAT\AppData\Roaming\JPL-NASA-Caltech\NASA's Eyes\npNASAEyes.dll [2017-08-23] (Jet Propulsion Laboratory)

    Chrome:
    =======
    CHR DefaultProfile: Default
    CHR HomePage: Default -> hxxp://www.msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=tr-tr
    CHR StartupUrls: Default -> "hxxps://www.google.com.tr/"
    CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC=__PARAM__&q={searchTerms}
    CHR DefaultSearchKeyword: Default -> bing.com
    CHR Profile: C:\Users\MURAT\AppData\Local\Google\Chrome\User Data\Default [2017-09-11]
    CHR Extension: (BetterTTV) - C:\Users\MURAT\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2017-04-21]
    CHR Extension: (Social Video Downloader - Save Facebook Video) - C:\Users\MURAT\AppData\Local\Google\Chrome\User Data\Default\Extensions\amjcoehkcacocffpmhnefgoeanepjfkf [2017-08-23]
    CHR Extension: (Bitmoji) - C:\Users\MURAT\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfgdeiadkckfbkeigkoncpdieiiefpig [2017-07-06]
    CHR Extension: (Steam Inventory Helper) - C:\Users\MURAT\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2017-08-29]
    CHR Extension: (FrankerFaceZ) - C:\Users\MURAT\AppData\Local\Google\Chrome\User Data\Default\Extensions\fadndhdgpmmaapbmfcknlfgcflmmmieb [2017-05-05]
    CHR Extension: (AdBlock) - C:\Users\MURAT\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-08-10]
    CHR Extension: (TwitchAlerts Stream Labels) - C:\Users\MURAT\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgmggmdngboajiakmbpdknfpdelbjbcg [2017-02-07]
    CHR Extension: (DotVPN — VPN'den daha iyi.) - C:\Users\MURAT\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpiecbcckbofpmkkkdibbllpinceiihk [2017-05-29]
    CHR Extension: (Chrome Web Mağazası Ödemeleri) - C:\Users\MURAT\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
    CHR Extension: (ThemeBeta.com) - C:\Users\MURAT\AppData\Local\Google\Chrome\User Data\Default\Extensions\onghcfjakljnchnjocajgcdphaoahkef [2017-03-31]
    CHR Extension: (Chrome Media Router) - C:\Users\MURAT\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-08]
    CHR Profile: C:\Users\MURAT\AppData\Local\Google\Chrome\User Data\System Profile [2017-09-07]
    CHR HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bmkckgpgekmanipelfidlhmkfcjicion] - hxxps://clients2.google.com/service/update2/crx
    CHR HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fkkcgfbgohboipdhliafmacjnhjbhmim] - hxxps://clients2.google.com/service/update2/crx
    CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx

    Opera:
    =======
    OPR StartupUrls: "hxxp://www.yandex.com.tr/?win=160&clid=2083123"

    ==================== Services (Whitelisted) ====================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
    S3 ALG; C:\WINDOWS\System32\alg.exe [92672 2017-03-18] (Microsoft Corporation)
    S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1522184 2017-03-05] ()
    R2 Bonjour Service; C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe [394752 2015-07-15] (Apple Inc.) [File not signed]
    R2 CDPUserSvc_74e5e55; C:\WINDOWS\system32\svchost.exe [47664 2017-03-18] (Microsoft Corporation)
    R2 CDPUserSvc_74e5e55; C:\WINDOWS\SysWOW64\svchost.exe [40904 2017-03-18] (Microsoft Corporation)
    R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [4424384 2017-07-07] (Microsoft Corporation)
    S3 DevicesFlowUserSvc_74e5e55; C:\WINDOWS\system32\svchost.exe [47664 2017-03-18] (Microsoft Corporation) <==== ATTENTION (no ServiceDLL)
    S3 DevicesFlowUserSvc_74e5e55; C:\WINDOWS\SysWOW64\svchost.exe [40904 2017-03-18] (Microsoft Corporation) <==== ATTENTION (no ServiceDLL)
    S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272560 2015-05-21] (Disc Soft Ltd)
    S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [383016 2017-04-26] (EasyAntiCheat Ltd)
    S3 Fax; C:\WINDOWS\system32\fxssvc.exe [637440 2017-03-19] (Microsoft Corporation)
    U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-12-09] (Hi-Rez Studios) [File not signed]
    R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-08] (Intel Corporation)
    R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [373688 2017-06-12] (Intel Corporation)
    R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-28] (Intel(R) Corporation) [File not signed]
    S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-28] (Intel(R) Corporation)
    R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [21184 2016-07-28] (Microsoft Corporation)
    R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
    S3 Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [533760 2014-06-03] (Lenovo)
    R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584960 2014-05-22] (LENOVO INCORPORATED.)
    R2 LenovoWiFiHotspotSvr; C:\Windows\System32\LenovoWiFiHotspotSvr.exe [198192 2014-09-16] (Lenovo(beijing) Limited)
    R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2945312 2016-01-14] (IObit)
    R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193656 2016-09-30] (Logitech Inc.)
    S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
    S3 MessagingService_74e5e55; C:\WINDOWS\system32\svchost.exe [47664 2017-03-18] (Microsoft Corporation) <==== ATTENTION (no ServiceDLL)
    S3 MessagingService_74e5e55; C:\WINDOWS\SysWOW64\svchost.exe [40904 2017-03-18] (Microsoft Corporation) <==== ATTENTION (no ServiceDLL)
    S3 MSDTC; C:\WINDOWS\System32\msdtc.exe [147456 2017-03-18] (Microsoft Corporation)
    S3 msiserver; C:\WINDOWS\System32\msiexec.exe [66048 2017-03-18] (Microsoft Corporation)
    S3 msiserver; C:\WINDOWS\SysWOW64\msiexec.exe [59392 2017-03-18] (Microsoft Corporation)
    R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
    R2 MSSQL$TEST; C:\Program Files\Microsoft SQL Server\MSSQL10_50.TEST\MSSQL\Binn\sqlservr.exe [61913952 2010-04-03] (Microsoft Corporation)
    R3 MSSQLFDLauncher$TEST; C:\Program Files\Microsoft SQL Server\MSSQL10_50.TEST\MSSQL\Binn\fdlauncher.exe [32096 2010-04-03] (Microsoft Corporation)
    S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-01-18] (Hewlett-Packard) [File not signed]
    R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [513144 2017-08-22] (NVIDIA Corporation)
    S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [513144 2017-08-22] (NVIDIA Corporation)
    R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462784 2017-08-22] (NVIDIA Corporation)
    R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [450168 2017-08-22] (NVIDIA Corporation)
    R2 OneSyncSvc_74e5e55; C:\WINDOWS\system32\svchost.exe [47664 2017-03-18] (Microsoft Corporation)
    R2 OneSyncSvc_74e5e55; C:\WINDOWS\SysWOW64\svchost.exe [40904 2017-03-18] (Microsoft Corporation)
    R3 PimIndexMaintenanceSvc_74e5e55; C:\WINDOWS\system32\svchost.exe [47664 2017-03-18] (Microsoft Corporation)
    R3 PimIndexMaintenanceSvc_74e5e55; C:\WINDOWS\SysWOW64\svchost.exe [40904 2017-03-18] (Microsoft Corporation)
    S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-01-18] (Hewlett-Packard) [File not signed]
    R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] ()
    S3 RpcLocator; C:\WINDOWS\system32\locator.exe [11264 2017-03-18] (Microsoft Corporation)
    R2 SamSs; C:\WINDOWS\system32\lsass.exe [58488 2017-07-07] (Microsoft Corporation)
    R2 SecurityHealthService; C:\WINDOWS\system32\SecurityHealthService.exe [336320 2017-07-07] (Microsoft Corporation)
    S3 SensorDataService; C:\WINDOWS\System32\SensorDataService.exe [1284608 2017-03-18] (Microsoft Corporation)
    S3 SNMPTRAP; C:\WINDOWS\System32\snmptrap.exe [15872 2017-05-31] (Microsoft Corporation)
    S3 spectrum; C:\WINDOWS\system32\spectrum.exe [891904 2017-03-18] (Microsoft Corporation)
    R2 Spooler; C:\WINDOWS\System32\spoolsv.exe [757760 2017-03-18] (Microsoft Corporation)
    S2 sppsvc; C:\WINDOWS\system32\sppsvc.exe [4574192 2017-03-18] (Microsoft Corporation)
    S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
    S4 SQLAgent$TEST; C:\Program Files\Microsoft SQL Server\MSSQL10_50.TEST\MSSQL\Binn\SQLAGENT.EXE [428384 2010-04-03] (Microsoft Corporation)
    S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
    R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [255608 2016-06-01] (Synaptics Incorporated)
    S3 Te.Service; C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\Wex.Services.exe [139264 2016-07-27] (Microsoft Corporation) [File not signed]
    S3 TieringEngineService; C:\WINDOWS\system32\TieringEngineService.exe [302592 2017-03-18] (Microsoft Corporation)
    S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [838128 2016-12-15] (Tunngle.net GmbH)
    S3 UI0Detect; C:\WINDOWS\system32\UI0Detect.exe [43008 2017-03-18] (Microsoft Corporation)
    R3 UnistoreSvc_74e5e55; C:\WINDOWS\System32\svchost.exe [47664 2017-03-18] (Microsoft Corporation)
    R3 UnistoreSvc_74e5e55; C:\WINDOWS\SysWOW64\svchost.exe [40904 2017-03-18] (Microsoft Corporation)
    R3 UserDataSvc_74e5e55; C:\WINDOWS\system32\svchost.exe [47664 2017-03-18] (Microsoft Corporation)
    R3 UserDataSvc_74e5e55; C:\WINDOWS\SysWOW64\svchost.exe [40904 2017-03-18] (Microsoft Corporation)
    S3 vds; C:\WINDOWS\System32\vds.exe [643072 2017-03-18] (Microsoft Corporation)
    R3 VSS; C:\WINDOWS\system32\vssvc.exe [1550848 2017-03-18] (Microsoft Corporation)
    S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [108776 2016-09-06] (Microsoft Corporation)
    S3 wampapache64; c:\wamp\bin\apache\apache2.4.9\bin\httpd.exe [24576 2014-05-01] (Apache Software Foundation) [File not signed]
    S3 wampmysqld64; c:\wamp\bin\mysql\mysql5.6.17\bin\mysqld.exe [12942848 2014-05-01] () [File not signed]
    S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
    S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [2136480 2017-06-20] (Microsoft Corporation)
    R2 WpnUserService_74e5e55; C:\WINDOWS\system32\svchost.exe [47664 2017-03-18] (Microsoft Corporation)
    R2 WpnUserService_74e5e55; C:\WINDOWS\SysWOW64\svchost.exe [40904 2017-03-18] (Microsoft Corporation)
    R2 WSearch; C:\WINDOWS\system32\SearchIndexer.exe [933376 2017-06-03] (Microsoft Corporation)
    R2 WSearch; C:\WINDOWS\SysWOW64\SearchIndexer.exe [797184 2017-06-03] (Microsoft Corporation)
    R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]

    ===================== Drivers (Whitelisted) ======================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    S3 busenum; C:\WINDOWS\System32\drivers\SteelBus64.sys [146944 2014-05-29] (SteelSeries Corporation) [File not signed]
    S3 CM_VENDER_CMD; C:\Program Files\Common Files\Logitech\G430Install\CMVC64.sys [17104 2014-07-31] (Windows (R) Win 7 DDK provider)
    S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
    R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2015-06-05] (Disc Soft Ltd)
    R1 FACEIT; C:\WINDOWS\System32\Drivers\FACEIT.sys [7976416 2017-06-21] ()
    R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [230656 2016-12-12] (Intel Corporation)
    S3 ladfGSS; C:\WINDOWS\system32\drivers\ladfGSS.sys [45208 2016-09-29] (Logitech Inc.)
    R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
    R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2016-09-30] (Logitech Inc.)
    S3 LGSHidFilt; C:\WINDOWS\system32\DRIVERS\LGSHidFilt.Sys [64280 2016-09-30] (Logitech Inc.)
    S3 MBAMProtector; C:\WINDOWS\system32\drivers\Malwarebytes Anti-Malware.sys [27008 2016-03-10] (Malwarebytes)
    S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
    R3 NETwNb64; C:\WINDOWS\System32\drivers\Netwbw02.sys [3485696 2017-03-18] (Intel Corporation)
    R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_fbb126b6a28109b9\nvlddmkm.sys [15600248 2017-08-22] (NVIDIA Corporation)
    S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30328 2017-08-22] (NVIDIA Corporation)
    R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48064 2017-07-26] (NVIDIA Corporation)
    R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57976 2017-08-22] (NVIDIA Corporation)
    R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [895256 2015-06-18] (Realtek )
    R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [413912 2015-12-22] (Realsil Semiconductor Corporation)
    R3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [3068160 2015-06-16] (Realtek Semiconductor Corp.)
    S3 SAlphamHid; C:\WINDOWS\System32\drivers\SAlpham64.sys [39168 2014-05-27] (SteelSeries Corporation) [File not signed]
    S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
    R3 SensorsSimulatorDriver; C:\WINDOWS\System32\drivers\WUDFRd.sys [220672 2017-03-18] (Microsoft Corporation)
    R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [42600 2016-01-14] (Synaptics Incorporated)
    R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [46408 2017-06-02] (SteelSeries ApS)
    S3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [45904 2017-06-19] (SteelSeries ApS)
    S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
    R3 tap0901t; C:\WINDOWS\System32\drivers\tap0901t.sys [48824 2016-04-26] (Tunngle.net GmbH)
    S2 vcs; C:\Program Files (x86)\Common Files\Avnex\vcs64.sys [4096 2016-11-14] () [File not signed]
    S3 VCSVADHWSer; C:\WINDOWS\system32\DRIVERS\vcsvad.sys [29320 2015-10-01] (AVSOFT Corp.)
    S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
    S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
    S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
    S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)

    ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2017-09-11 14:13 - 2017-09-11 14:14 - 000037572 _____ C:\Users\MURAT\Desktop\FRST.txt
    2017-09-11 14:08 - 2017-09-11 01:18 - 002396672 _____ (Farbar) C:\Users\MURAT\Desktop\FRST64.exe
    2017-09-11 14:08 - 2017-09-07 09:35 - 000000712 _____ C:\Users\MURAT\Desktop\Fixlog.txt
    2017-09-10 18:38 - 2017-09-10 18:38 - 000195346 _____ C:\Users\MURAT\Downloads\wu170509.diagcab
    2017-09-09 22:29 - 2017-09-11 02:00 - 000000000 ___HD C:\Users\Public\Documents\AdobeGC
    2017-09-08 11:22 - 2017-09-08 11:23 - 145457432 _____ (Microsoft Corporation) C:\Users\MURAT\Downloads\mpam-fe.exe
    2017-09-08 10:50 - 2017-09-08 10:50 - 000000000 ____D C:\Users\MURAT\AppData\Local\TempOfficeC2R944A08A2-46BE-4C39-8AFE-DD9393F07D14
    2017-09-08 09:28 - 2017-09-08 09:28 - 000000000 ____D C:\Users\MURAT\AppData\Local\TempOfficeC2R5D25C63D-7C84-4C63-AD19-A73F1359F4F5
    2017-09-07 17:44 - 2017-09-07 17:44 - 000000000 ____D C:\Users\MURAT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Moo0
    2017-09-07 16:20 - 2017-09-07 17:44 - 000003332 _____ C:\WINDOWS\System32\Tasks\RunAsStdUser Task
    2017-09-07 16:20 - 2017-09-07 17:43 - 000000000 ____D C:\Program Files (x86)\Moo0
    2017-09-07 16:14 - 2017-09-07 16:18 - 000000000 ____D C:\Program Files (x86)\MyVideoConverter
    2017-09-07 16:14 - 2017-09-07 16:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Drivers\mycodec
    2017-09-07 16:03 - 2017-09-07 16:06 - 000000000 ____D C:\Program Files (x86)\Total Video Converter
    2017-09-07 09:37 - 2017-09-07 09:37 - 000000000 ____D C:\Users\MURAT\AppData\Local\TempOfficeC2R3207B9EA-080D-4683-9EFC-FEC0C2E6A300
    2017-09-06 10:57 - 2017-09-11 14:13 - 000000000 ____D C:\FRST
    2017-09-05 17:28 - 2017-09-05 17:28 - 000000000 ____D C:\Users\MURAT\source
    2017-09-05 17:25 - 2017-09-05 17:27 - 000000000 ____D C:\Users\MURAT\AppData\Local\.IdentityService
    2017-09-05 17:02 - 2017-09-05 17:02 - 000000000 ____D C:\Users\MURAT\AppData\LocalLow\Jet Propulsion Laboratory
    2017-09-05 17:01 - 2017-09-05 17:01 - 000000000 ____D C:\Users\MURAT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NASA's Eyes
    2017-09-05 17:01 - 2017-09-05 17:01 - 000000000 ____D C:\Users\MURAT\AppData\Roaming\JPL-NASA-Caltech
    2017-09-05 14:22 - 2017-09-05 17:40 - 000000000 ____D C:\Users\MURAT\Documents\Visual Studio 2017
    2017-09-05 14:22 - 2017-09-05 14:22 - 000000000 ____D C:\Users\MURAT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2017 Tools for Unity
    2017-09-05 14:18 - 2017-09-05 14:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2017
    2017-09-05 14:16 - 2017-09-05 14:16 - 000001499 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2017.lnk
    2017-09-05 14:15 - 2017-09-05 14:23 - 000000000 ____D C:\Users\MURAT\AppData\Roaming\Visual Studio Setup
    2017-09-05 14:15 - 2017-09-05 14:16 - 000000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
    2017-09-05 14:15 - 2017-09-05 14:15 - 000001370 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio Installer.lnk
    2017-09-05 14:15 - 2017-09-05 14:15 - 000000000 ____D C:\Users\MURAT\AppData\Roaming\vstelemetry
    2017-09-05 14:15 - 2017-09-05 14:15 - 000000000 ____D C:\Users\MURAT\AppData\Local\ServiceHub
    2017-09-05 14:03 - 2017-09-05 14:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unity 2017.1.1f1 (64-bit)
    2017-09-02 13:43 - 2017-09-02 13:43 - 000000000 ____D C:\Users\MURAT\AppData\Local\TempOfficeC2RBA69CF24-8574-451D-AF01-8DE279FA02AB
    2017-09-01 20:58 - 2017-08-22 04:01 - 040240248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 035924600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 035314112 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 029019072 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 023132184 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 018849456 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 013782904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 012225984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 011692344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 010072768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 004162496 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 003590592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 001988216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438541.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 001597888 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438541.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 001292096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 001068152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 001008816 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 001004992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 000972736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 000924280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 000781544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 000690320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 000617232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 000609728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 000578056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 000499320 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
    2017-09-01 20:58 - 2017-08-22 04:01 - 000000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json
    2017-09-01 20:58 - 2017-08-22 04:01 - 000000669 _____ C:\WINDOWS\system32\nv-vk64.json
    2017-09-01 20:30 - 2017-09-01 20:30 - 000000000 ____D C:\Users\MURAT\AppData\Local\TempOfficeC2R3935B218-0AFF-465B-9E4B-33EE4AB5C4E2
    2017-08-26 21:32 - 2017-08-26 21:34 - 000000000 ____D C:\Users\MURAT\AppData\Local\Celavimus3
    2017-08-25 11:40 - 2017-08-25 11:40 - 000004849 _____ C:\Users\MURAT\AppData\Local\recently-used.xbel
    2017-08-25 10:36 - 2017-08-25 10:36 - 000000000 ____D C:\Users\MURAT\AppData\Local\pip
    2017-08-25 09:26 - 2017-08-25 09:26 - 000000000 ____D C:\Users\MURAT\AppData\Local\TempOfficeC2R9E85005E-667B-45D6-B561-06AB8CFBF0EA
    2017-08-24 15:55 - 2017-08-24 15:55 - 000000000 ____D C:\Users\MURAT\AnacondaProjects
    2017-08-24 15:54 - 2017-08-24 15:54 - 000000000 ____D C:\Users\MURAT\.jupyter
    2017-08-24 09:58 - 2017-08-24 09:58 - 000000000 ____D C:\Users\MURAT\AppData\Local\TempOfficeC2R74C36CE2-F6E8-471B-96DA-D216C21D4239
    2017-08-22 09:45 - 2017-08-22 09:45 - 000000000 ____D C:\Users\MURAT\AppData\Local\TempOfficeC2RF411A19D-8C00-4666-9605-69C1FF6862D2
    2017-08-22 04:44 - 2017-08-22 04:44 - 000000000 ____D C:\Users\MURAT\AppData\Local\TempOfficeC2R71E88B32-570A-4D59-9983-7869466B7F9D
    2017-08-21 00:43 - 2017-08-21 00:43 - 000000000 ____D C:\Users\MURAT\Documents\League of Legends
    2017-08-20 23:54 - 2017-08-20 23:54 - 000000000 ____D C:\ProgramData\Riot Games
    2017-08-20 23:53 - 2008-07-12 08:18 - 003851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
    2017-08-20 23:53 - 2008-07-12 08:18 - 001493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
    2017-08-20 23:53 - 2008-07-12 08:18 - 000467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
    2017-08-20 23:51 - 2017-09-01 19:12 - 000000000 ____D C:\Program Files (x86)\Riot Games
    2017-08-20 23:50 - 2017-08-20 23:53 - 000000000 ____D C:\Users\MURAT\AppData\Roaming\Riot Games
    2017-08-18 10:23 - 2017-08-18 10:23 - 000000032 _____ C:\Users\MURAT\.defaults-0.1.0.ini
    2017-08-18 10:07 - 2017-08-18 10:07 - 000000000 ____D C:\Users\MURAT\Documents\FeedbackHub
    2017-08-17 16:26 - 2017-09-03 02:20 - 000000000 ____D C:\Users\MURAT\.spyder
    2017-08-17 16:00 - 2017-08-17 16:00 - 000000000 ____D C:\Users\MURAT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Anaconda2 (64-bit)
    2017-08-17 15:55 - 2017-08-17 16:00 - 000000000 ____D C:\Users\MURAT\Anaconda2
    2017-08-17 14:58 - 2017-08-17 14:58 - 000000000 ____D C:\Users\MURAT\AppData\Roaming\jupyter
    2017-08-17 14:58 - 2017-08-17 14:58 - 000000000 ____D C:\Users\MURAT\.ipython
    2017-08-17 14:57 - 2017-09-03 02:20 - 000000000 ____D C:\Users\MURAT\.matplotlib
    2017-08-17 14:57 - 2017-08-24 15:54 - 000000043 _____ C:\Users\MURAT\.condarc
    2017-08-17 14:57 - 2017-08-17 15:36 - 000000000 ____D C:\Users\MURAT\.spyder-py3
    2017-08-17 14:57 - 2017-08-17 14:57 - 000000000 ____D C:\Users\MURAT\AppData\Roaming\Jedi
    2017-08-17 14:56 - 2017-08-24 15:55 - 000000000 ____D C:\Users\MURAT\.conda
    2017-08-17 14:56 - 2017-08-17 14:56 - 000000000 ____D C:\Users\MURAT\AppData\Local\conda
    2017-08-17 14:56 - 2017-08-17 14:56 - 000000000 ____D C:\Users\MURAT\.anaconda
    2017-08-17 14:54 - 2017-08-25 16:45 - 000000000 ____D C:\Users\MURAT\Documents\Python Scripts
    2017-08-17 14:28 - 2017-08-17 14:28 - 000000000 ____D C:\Users\MURAT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.6
    2017-08-17 14:28 - 2017-08-17 14:28 - 000000000 ____D C:\Users\MURAT\AppData\Local\Package Cache
    2017-08-16 09:22 - 2017-08-16 09:22 - 000000000 ____D C:\Users\MURAT\AppData\Local\TempOfficeC2R121C8B4D-0BDA-4349-B2B2-63E524F949B0
    2017-08-15 23:55 - 2017-08-10 03:34 - 001988216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438528.dll
    2017-08-15 23:55 - 2017-08-10 03:34 - 001598072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438528.dll
    2017-08-15 23:01 - 2017-08-15 23:01 - 000000000 ____D C:\Users\MURAT\AppData\Local\TempOfficeC2R6F526ED0-363B-4576-8084-CD3EA542A241
    2017-08-14 17:12 - 2017-08-14 17:12 - 000000000 ____D C:\Users\MURAT\AppData\Roaming\DYA_VPPVDWTJFSDDMUTMB
    2017-08-14 17:12 - 2017-08-14 17:12 - 000000000 ____D C:\ProgramData\DYA_VPPVDWTJFSDDMUTMB
    2017-08-13 23:45 - 2017-08-13 23:45 - 000000000 ____D C:\Users\MURAT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2017-09-11 14:04 - 2016-01-18 21:00 - 000000000 ____D C:\Users\MURAT\AppData\Local\CrashDumps
    2017-09-11 13:28 - 2017-05-31 04:57 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
    2017-09-11 12:25 - 2017-05-31 05:02 - 000000000 ____D C:\ProgramData\NVIDIA
    2017-09-11 10:54 - 2015-09-22 03:05 - 000000000 ____D C:\Program Files (x86)\Steam
    2017-09-11 09:35 - 2017-05-31 06:08 - 000003808 _____ C:\WINDOWS\System32\Tasks\AutoKMS
    2017-09-11 09:34 - 2017-05-31 05:02 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
    2017-09-11 02:22 - 2017-05-31 05:05 - 000000000 ____D C:\Users\MURAT
    2017-09-11 02:05 - 2014-12-21 12:47 - 000000000 ____D C:\Users\MURAT\AppData\Local\Adobe
    2017-09-11 00:08 - 2016-06-24 10:18 - 000737320 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys
    2017-09-10 22:16 - 2017-05-31 06:08 - 000004186 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B2FC2BD6-817C-4036-B10D-BDF010B0A5D4}
    2017-09-10 14:07 - 2016-12-14 02:53 - 000000000 ____D C:\Users\MURAT\AppData\Roaming\steelseries-engine-3-client
    2017-09-10 13:57 - 2017-05-31 05:03 - 003437436 _____ C:\WINDOWS\system32\PerfStringBackup.INI
    2017-09-10 13:57 - 2017-03-20 07:02 - 001510216 _____ C:\WINDOWS\system32\perfh01F.dat
    2017-09-10 13:57 - 2017-03-20 07:02 - 000401600 _____ C:\WINDOWS\system32\perfc01F.dat
    2017-09-09 22:30 - 2017-06-30 17:23 - 000003350 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1369535705-3180996973-1344369311-1002
    2017-09-09 22:30 - 2015-07-30 01:12 - 000002386 _____ C:\Users\MURAT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
    2017-09-09 22:30 - 2015-03-03 00:52 - 000000000 ___RD C:\Users\MURAT\OneDrive
    2017-09-09 22:26 - 2014-12-23 21:24 - 000192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
    2017-09-09 22:25 - 2017-03-19 00:01 - 000000000 ____D C:\WINDOWS\INF
    2017-09-08 17:42 - 2017-01-18 08:45 - 000000000 ____D C:\Program Files (x86)\Hi-Rez Studios
    2017-09-08 17:41 - 2017-05-31 06:08 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
    2017-09-08 17:41 - 2017-03-18 14:40 - 001572864 _____ C:\WINDOWS\system32\config\BBI
    2017-09-08 15:16 - 2014-12-21 18:01 - 000000000 ___RD C:\murat
    2017-09-08 15:16 - 2014-12-21 07:07 - 000000000 ____D C:\Users\MURAT\AppData\Local\Packages
    2017-09-08 12:52 - 2017-03-18 23:51 - 000000000 ____D C:\WINDOWS\CbsTemp
    2017-09-08 11:11 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\system32\NDF
    2017-09-08 11:09 - 2017-07-06 09:31 - 000000000 __SHD C:\zec
    2017-09-08 10:25 - 2017-05-31 04:57 - 005352544 _____ C:\WINDOWS\system32\FNTCACHE.DAT
    2017-09-08 09:56 - 2017-07-06 09:31 - 000003572 _____ C:\WINDOWS\System32\Tasks\Google Update
    2017-09-08 09:56 - 2017-07-06 09:31 - 000003570 _____ C:\WINDOWS\System32\Tasks\GoogleUpdate
    2017-09-07 15:47 - 2015-07-25 02:08 - 000000000 ____D C:\Users\MURAT\AppData\Roaming\MPC-HC
    2017-09-06 16:32 - 2016-11-01 02:43 - 000000000 ____D C:\Users\MURAT\Documents\Visual Studio 2015
    2017-09-05 15:19 - 2016-11-08 17:07 - 000000000 ____D C:\Users\MURAT\AppData\LocalLow\Unity
    2017-09-05 15:11 - 2016-11-08 17:07 - 000000000 ____D C:\ProgramData\Unity
    2017-09-05 14:22 - 2016-11-08 16:31 - 000000000 ____D C:\Program Files (x86)\Microsoft Visual Studio Tools for Unity
    2017-09-05 14:21 - 2014-09-16 00:28 - 000000000 ____D C:\ProgramData\Package Cache
    2017-09-05 14:18 - 2017-05-31 04:36 - 000000000 ____D C:\Program Files (x86)\MSBuild
    2017-09-05 14:05 - 2016-11-08 16:06 - 000000000 ____D C:\Program Files\Unity
    2017-09-05 11:41 - 2015-07-09 11:41 - 000000132 _____ C:\Users\MURAT\AppData\Roaming\Adobe PNG Format CS6 Prefs
    2017-09-05 09:51 - 2015-01-22 15:26 - 000000000 ____D C:\Users\MURAT\AppData\Local\ElevatedDiagnostics
    2017-09-05 09:45 - 2017-07-13 16:33 - 000002259 _____ C:\WINDOWS\epplauncher.mif
    2017-09-05 08:59 - 2016-03-06 21:43 - 000000000 ____D C:\ProgramData\ProductData
    2017-09-03 00:43 - 2017-02-07 13:33 - 000000000 ____D C:\Users\MURAT\AppData\Roaming\obs-studio
    2017-09-02 13:26 - 2014-09-16 01:11 - 000000000 ____D C:\ProgramData\Energy Manager
    2017-09-01 21:03 - 2017-05-31 05:02 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
    2017-09-01 21:02 - 2017-06-15 23:36 - 000004000 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
    2017-09-01 21:02 - 2017-05-31 06:08 - 000004308 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
    2017-09-01 21:02 - 2017-05-31 06:08 - 000003994 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
    2017-09-01 21:01 - 2017-05-31 06:08 - 000003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
    2017-09-01 21:01 - 2017-05-31 06:08 - 000003866 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
    2017-09-01 21:01 - 2017-05-31 06:08 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
    2017-09-01 21:01 - 2017-05-31 06:08 - 000003696 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
    2017-09-01 21:01 - 2017-05-31 06:08 - 000003654 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
    2017-09-01 21:01 - 2017-05-31 05:02 - 000000000 ____D C:\Program Files\NVIDIA Corporation
    2017-09-01 21:01 - 2017-05-31 05:02 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
    2017-09-01 21:01 - 2016-03-12 01:28 - 000000000 ____D C:\Program Files (x86)\VulkanRT
    2017-08-29 09:20 - 2015-07-30 10:03 - 000002279 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
    2017-08-25 16:13 - 2015-03-21 03:00 - 000000000 ____D C:\Users\MURAT\AppData\Roaming\Skype
    2017-08-25 11:42 - 2017-06-19 14:02 - 000000000 ____D C:\Users\MURAT\.gimp-2.8
    2017-08-25 00:46 - 2016-01-01 19:33 - 000018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
    2017-08-22 04:01 - 2017-07-30 07:19 - 000046453 _____ C:\WINDOWS\system32\nvinfo.pb
    2017-08-22 04:01 - 2017-06-28 10:01 - 000179320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
    2017-08-22 04:01 - 2017-06-28 10:01 - 000146552 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
    2017-08-22 04:01 - 2017-05-31 05:02 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat
    2017-08-22 04:01 - 2017-05-11 11:20 - 004210360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
    2017-08-22 04:01 - 2017-05-11 11:20 - 003712024 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
    2017-08-22 04:01 - 2017-05-11 11:20 - 000057976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys
    2017-08-22 04:01 - 2017-04-09 23:42 - 001923192 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
    2017-08-22 04:01 - 2017-04-09 23:42 - 001755256 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
    2017-08-22 04:01 - 2017-04-09 23:42 - 001505912 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
    2017-08-22 04:01 - 2017-04-09 23:42 - 001317496 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
    2017-08-22 04:01 - 2017-04-09 23:42 - 000121464 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
    2017-08-22 04:01 - 2017-04-09 23:41 - 000001951 _____ C:\WINDOWS\NvTelemetryContainerRecovery.bat
    2017-08-22 02:10 - 2017-05-31 05:02 - 006463424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
    2017-08-22 02:10 - 2017-05-31 05:02 - 002479224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
    2017-08-22 02:10 - 2017-05-31 05:02 - 001762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
    2017-08-22 02:10 - 2017-05-31 05:02 - 000549312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
    2017-08-22 02:10 - 2017-05-31 05:02 - 000392312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
    2017-08-22 02:10 - 2017-05-31 05:02 - 000147576 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\oemdspif.dll
    2017-08-22 02:10 - 2017-05-31 05:02 - 000082040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
    2017-08-22 02:10 - 2017-05-31 05:02 - 000069752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
    2017-08-19 22:35 - 2014-12-30 03:08 - 000000000 ____D C:\Users\MURAT\Documents\Max Payne 2 Savegames
    2017-08-19 10:10 - 2017-05-31 05:02 - 008142301 _____ C:\WINDOWS\system32\nvcoproc.bin
    2017-08-19 00:22 - 2015-01-06 14:28 - 000000000 ____D C:\Users\MURAT\AppData\Local\NVIDIA Corporation
    2017-08-17 09:23 - 2015-06-29 16:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
    2017-08-15 23:13 - 2015-06-14 09:41 - 000000000 ____D C:\Program Files (x86)\Rockstar Games
    2017-08-15 23:12 - 2015-06-14 09:41 - 000000000 ____D C:\Program Files\Rockstar Games
    2017-08-15 14:54 - 2017-01-16 00:45 - 000000000 ____D C:\Users\MURAT\.chatty
    2017-08-15 10:01 - 2014-12-21 15:45 - 000000000 ____D C:\Users\MURAT\Documents\Visual Studio 2010
    2017-08-14 11:25 - 2017-03-19 00:03 - 000000000 ____D C:\WINDOWS\Branding
    2017-08-13 23:45 - 2016-04-18 21:58 - 000000000 ____D C:\Users\MURAT\AppData\Roaming\discord
    2017-08-13 23:45 - 2016-04-18 21:58 - 000000000 ____D C:\Users\MURAT\AppData\Local\Discord
    2017-08-13 00:00 - 2017-03-29 15:58 - 000002432 _____ C:\Users\MURAT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StreamLabels.lnk
    2017-08-12 22:55 - 2014-12-21 16:38 - 000000000 ____D C:\Users\MURAT\AppData\Roaming\TS3Client

    ==================== Files in the root of some directories =======

    2016-08-06 15:56 - 2016-08-06 16:23 - 000000132 _____ () C:\Users\MURAT\AppData\Roaming\Adobe BMP Format CS6 Prefs
    2015-07-09 11:41 - 2017-09-05 11:41 - 000000132 _____ () C:\Users\MURAT\AppData\Roaming\Adobe PNG Format CS6 Prefs
    2017-08-25 11:40 - 2017-08-25 11:40 - 000004849 _____ () C:\Users\MURAT\AppData\Local\recently-used.xbel
    2015-04-01 14:58 - 2015-04-01 14:58 - 000007609 _____ () C:\Users\MURAT\AppData\Local\Resmon.ResmonCfg
    2016-08-31 10:57 - 2016-08-31 10:57 - 000000003 _____ () C:\Users\MURAT\AppData\Local\updater.log
    2016-08-31 10:57 - 2016-08-31 10:57 - 000000424 _____ () C:\Users\MURAT\AppData\Local\UserProducts.xml
    2017-05-31 05:02 - 2017-05-31 05:02 - 000000000 ____H () C:\ProgramData\DP45977C.lfl
    2016-12-16 16:19 - 2017-01-10 23:20 - 000015106 _____ () C:\ProgramData\NvTelemetryContainer.log
    2016-12-16 16:19 - 2017-01-05 01:44 - 000033432 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1

    ==================== Bamital & volsnap ======================

    (There is no automatic fix for files that do not pass verification.)

    C:\WINDOWS\system32\winlogon.exe => File is digitally signed
    C:\WINDOWS\system32\wininit.exe => File is digitally signed
    C:\WINDOWS\explorer.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
    C:\WINDOWS\system32\svchost.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
    C:\WINDOWS\system32\services.exe => File is digitally signed
    C:\WINDOWS\system32\User32.dll => File is digitally signed
    C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
    C:\WINDOWS\system32\userinit.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
    C:\WINDOWS\system32\rpcss.dll => File is digitally signed
    C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
    C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
    C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

    LastRegBack: 2017-09-06 10:42

    ==================== End of FRST.txt ============================
     
  12. jmz2d

    jmz2d New Member

    Sep 6, 2017
    11
    0
    Gallifrey
    Windows 10
    Malwarebytes
    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-09-2017
    Ran by jmz (11-09-2017 14:14:20)
    Running from C:\Users\MURAT\Desktop
    Windows 10 Home Single Language Version 1703 (X64) (2017-05-31 03:21:37)
    Boot Mode: Normal
    ==========================================================


    ==================== Accounts: =============================

    Administrator (S-1-5-21-1369535705-3180996973-1344369311-500 - Administrator - Disabled)
    Guest (S-1-5-21-1369535705-3180996973-1344369311-501 - Limited - Disabled)
    jmz (S-1-5-21-1369535705-3180996973-1344369311-1002 - Administrator - Enabled) => C:\Users\MURAT
    VarsayılanHesap (S-1-5-21-1369535705-3180996973-1344369311-503 - Limited - Disabled)

    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    ==================== Installed Programs ======================

    (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    64 Bit HP CIO Components Installer (HKLM\...\{C788B026-20BD-4E96-B698-533F1D6C5013}) (Version: 7.2.4 - Hewlett-Packard) Hidden
    Active Directory Authentication Library for SQL Server (HKLM\...\{32C0D7B2-1046-43AC-98AD-B748E1910916}) (Version: 13.0.1601.5 - Microsoft Corporation) Hidden
    Active Directory Authentication Library for SQL Server (x86) (HKLM-x32\...\{F40FA676-46B1-4609-85EF-D2F1F79E0C0E}) (Version: 13.0.1601.5 - Microsoft Corporation) Hidden
    Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated)
    Adobe Flash Player 26 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 26.0.0.137 - Adobe Systems Incorporated)
    Adobe Flash Player 26 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 26.0.0.137 - Adobe Systems Incorporated)
    Adobe Illustrator CS6 (HKLM-x32\...\{4869414E-7AEA-4C8E-BE1C-8D40977FD517}) (Version: 16.0 - Adobe Systems Incorporated)
    Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
    Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version: - Hidden Path Entertainment, Ensemble Studios)
    Alan Wake (HKLM\...\Steam App 108710) (Version: - Remedy Entertainment)
    Android SDK Tools (HKLM-x32\...\Android SDK Tools) (Version: 1.16 - Google Inc.)
    Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 385.41 - NVIDIA Corporation) Hidden
    AoE II HD Compatibility Patch version 4.0->1.0c (HKLM-x32\...\AoE II HD Compatibility Patch_is1) (Version: 4.0->1.0c - )
    Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
    Application Insights Tools for Visual Studio 2015 (HKLM-x32\...\{0E4C791E-B78E-477D-BD5A-CDD0985BA6EC}) (Version: 7.0.20622.1 - Microsoft Corporation)
    Application Verifier x64 External Package (HKLM\...\{7346C35D-942D-3CCE-94CB-7008BA8D63CB}) (Version: 8.59.29722 - Microsoft) Hidden
    Azure AD Authentication Connected Service (HKLM-x32\...\{8A1AD070-269F-4A15-AAB5-76AB896EF195}) (Version: 14.0.25420 - Microsoft Corporation) Hidden
    AzureTools.Notifications (HKLM-x32\...\{1E5CA362-39B6-4BD0-B9C0-69CF15F0FEA2}) (Version: 2.7.30611.1601 - Microsoft Corporation) Hidden
    Bandicam (HKLM-x32\...\Bandicam) (Version: 1.9.2.455 - Bandisoft.com)
    Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandisoft.com)
    Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
    Behaviors SDK (Windows Phone) for Visual Studio 2013 (HKLM-x32\...\{C1609E6E-10B5-46F4-A48C-AC57045D0B88}) (Version: 12.0.51210.80 - Microsoft Corporation) Hidden
    Behaviors SDK (Windows) for Visual Studio 2013 (HKLM-x32\...\{B2429EA1-767E-4947-A458-F2204A2AA1BB}) (Version: 12.0.51210.80 - Microsoft Corporation) Hidden
    Blend for Visual Studio SDK for .NET 4.5 (HKLM-x32\...\{37E53780-3944-4A6A-842F-727128E8616E}) (Version: 3.0.40218.0 - Microsoft Corporation) Hidden
    Blend for Visual Studio SDK for Silverlight 5 (HKLM-x32\...\{0C03A66F-1FF0-45F9-8D67-0D806EBFFBA1}) (Version: 3.0.40218.0 - Microsoft Corporation) Hidden
    Blend for Visual Studio SDK for Windows Phone 8.0 (HKLM-x32\...\{403759F5-1D77-49F4-812D-AF43196E8C74}) (Version: 3.0.30924.0 - Microsoft Corporation) Hidden
    Build Tools - amd64 (HKLM\...\{03DE1AEE-D3FA-4BF3-9150-28F54815E888}) (Version: 12.0.31010 - Microsoft Corporation) Hidden
    Build Tools - x86 (HKLM-x32\...\{235CCCE6-3CB9-4E09-9D8E-0F212644C668}) (Version: 12.0.31010 - Microsoft Corporation) Hidden
    Build Tools for Windows 10 - ENU (HKLM-x32\...\{E5C9A6AC-6AB9-455C-B8AF-FAC95908D0DF}) (Version: 14.0.25527 - Microsoft Corporation) Hidden
    Build Tools for Windows 10 (HKLM-x32\...\{3DF885A3-8834-49EB-8390-15DCD84DC5FB}) (Version: 14.0.25527 - Microsoft Corporation) Hidden
    Build Tools Language Resources - amd64 (HKLM\...\{6618DB5E-8788-46E1-94F4-9F1C0FC075BD}) (Version: 12.0.31010 - Microsoft Corporation) Hidden
    Build Tools Language Resources - x86 (HKLM-x32\...\{772590BC-E61B-4080-B9D5-A71497612F36}) (Version: 12.0.31010 - Microsoft Corporation) Hidden
    Call of Duty(R) - World at War(TM) (HKLM-x32\...\{D80A6A73-E58A-4673-AFF5-F12D7110661F}) (Version: 1.0 - Activision) Hidden
    Call of Duty(R) - World at War(TM) (HKLM-x32\...\InstallShield_{D80A6A73-E58A-4673-AFF5-F12D7110661F}) (Version: 1.7 - Activision)
    Call of Duty(R) - World at War(TM) 1.2 Patch (HKLM-x32\...\{2BF0AE92-C3BC-4112-9066-1546342B1FAE}) (Version: 1.2 - Activision) Hidden
    Call of Duty(R) - World at War(TM) 1.2 Patch (HKLM-x32\...\InstallShield_{2BF0AE92-C3BC-4112-9066-1546342B1FAE}) (Version: - ) Hidden
    Call of Duty(R) - World at War(TM) 1.4 Patch (HKLM-x32\...\{9F01A67B-7D67-482F-9D4F-D5980A440FD4}) (Version: 1.4 - Activision) Hidden
    Call of Duty(R) - World at War(TM) 1.4 Patch (HKLM-x32\...\InstallShield_{9F01A67B-7D67-482F-9D4F-D5980A440FD4}) (Version: - ) Hidden
    Call of Duty(R) - World at War(TM) 1.5 Patch (HKLM-x32\...\{C3DC2DF5-EFAC-4055-9010-31F7C545DD9E}) (Version: 1.5 - Activision) Hidden
    Call of Duty(R) - World at War(TM) 1.5 Patch (HKLM-x32\...\InstallShield_{C3DC2DF5-EFAC-4055-9010-31F7C545DD9E}) (Version: - ) Hidden
    Call of Duty(R) - World at War(TM) 1.6 Patch (HKLM-x32\...\{064DC64E-7A2F-4FDF-B598-E3C0747BBB9C}) (Version: 1.6 - Activision) Hidden
    Call of Duty(R) - World at War(TM) 1.6 Patch (HKLM-x32\...\InstallShield_{064DC64E-7A2F-4FDF-B598-E3C0747BBB9C}) (Version: - ) Hidden
    Call of Duty(R) - World at War(TM) 1.7 Patch (HKLM-x32\...\{750C87B8-AF19-4C3C-B791-50D9C83AE572}) (Version: 1.7 - Activision) Hidden
    Call of Duty(R) - World at War(TM) 1.7 Patch (HKLM-x32\...\InstallShield_{750C87B8-AF19-4C3C-B791-50D9C83AE572}) (Version: - ) Hidden
    Call of Duty(R) 4 - Modern Warfare(TM) (HKLM-x32\...\{E48469CC-635E-4FD5-A122-1497C286D217}) (Version: 1.00.0000 - Activision) Hidden
    Call of Duty(R) 4 - Modern Warfare(TM) (HKLM-x32\...\InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}) (Version: 1.7 - Activision)
    Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (HKLM-x32\...\{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}) (Version: 1.6 - Activision) Hidden
    Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (HKLM-x32\...\InstallShield_{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}) (Version: - ) Hidden
    Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (HKLM-x32\...\{931C37FC-594D-43A9-B10F-A2F2B1F03498}) (Version: 1.7 - Activision) Hidden
    Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (HKLM-x32\...\InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}) (Version: - ) Hidden
    Castle Crashers (HKLM\...\Steam App 204360) (Version: - The Behemoth)
    CCleaner (HKLM\...\CCleaner) (Version: 5.33 - Piriform)
    CEVO CS:GO Client Beta version 2.0 (HKLM-x32\...\CEVO CS:GO Client Beta_is1) (Version: 2.0 - )
    Clang with Microsoft CodeGen (HKLM-x32\...\{D1065428-0EDB-3B41-9563-A5E49F98A496}) (Version: 14.0.25516 - Microsoft Corporation) Hidden
    Clang with Microsoft CodeGen (HKLM-x32\...\{F6F4C76B-0D67-3B2C-81E2-5B9299E99EDE}) (Version: 14.0.25516 - Microsoft Corporation) Hidden
    Clang with Microsoft CodeGen for Microsoft Visual Studio 2015 (HKLM-x32\...\{da78a187-c216-4b8f-b2ff-f6f254e2e26e}) (Version: 14.0.25516.0 - Microsoft Corporation)
    CodedUITest81 (HKLM-x32\...\{3AF80693-9047-3BAA-9554-22AB6C428AB4}) (Version: 14.0.23107 - Microsoft Corporation) Hidden
    CodedUITestUAP (HKLM-x32\...\{0AB83CFE-A321-364C-8F78-A79084EC90D4}) (Version: 14.0.25527 - Microsoft Corporation) Hidden
    Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.65.55.62 - Conexant)
    Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
    Crystal Reports for Visual Studio (HKLM-x32\...\{AC41D924-8C68-4BD5-A7A1-0AE4176C31A6}) (Version: 12.51.0.240 - SAP) Hidden
    CyberLink MediaStory (HKLM-x32\...\InstallShield_{55762F9A-FCE3-45d5-817B-051218658423}) (Version: 1.0.1314 - CyberLink Corp.)
    CyberLink PowerDirector 10 (HKLM\...\{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.2810 - CyberLink Corp.) Hidden
    CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.2810 - CyberLink Corp.)
    D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
    DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.0.0.0054 - Disc Soft Ltd)
    DB Browser for SQLite (HKLM-x32\...\SqliteBrowser3) (Version: 3.6.0 - oldsch00l)
    Dead by Daylight (HKLM\...\Steam App 381210) (Version: - Behaviour Digital Inc.)
    Dependency Package Update (HKLM\...\{0788641D-D31A-478D-BB34-C41564AE9F93}) (Version: 1.6.38.00 - Lenovo Inc.) Hidden
    Dependency Package Update (HKLM\...\{5252431C-288E-409D-ADCF-24407E0E6F70}) (Version: 1.6.25.00 - Lenovo Inc.) Hidden
    Dependency Package Update (HKLM\...\{FFED38DF-94DC-4FF9-96C1-A6990EDA6B03}) (Version: 1.6.29.00 - Lenovo Inc.) Hidden
    DiRT 3 Complete Edition (HKLM\...\Steam App 321040) (Version: - Codemasters Racing Studio)
    Discord (HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\...\Discord) (Version: 0.0.298 - Discord Inc.)
    Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.5.1.1 - Dolby Laboratories Inc)
    Don't Starve Together (HKLM\...\Steam App 322330) (Version: - Klei Entertainment)
    Dotfuscator and Analytics Community Edition 5.22.0 (HKLM-x32\...\{60018889-9E0F-43E8-9B89-29E8C828B40A}) (Version: 5.22.0.3788 - PreEmptive Solutions) Hidden
    Dotfuscator Software Services - Community Edition (HKLM-x32\...\{1AA5BD63-6614-44B2-88A7-605191EDB835}) (Version: 5.0.2500.0 - PreEmptive Solutions)
    emgucv-windesktop 3.2.0.2682 (HKLM-x32\...\emgucv-windesktop 3.2.0.2682) (Version: 3.2.0.2682 - Emgu Corporation)
    emu8086 microprocessor emulator (HKLM-x32\...\emu8086 microprocessor emulator_is1) (Version: - emu8086)
    Energy Manager (HKLM-x32\...\{AC768037-7079-4658-AC24-2897650E0ABE}) (Version: 1.0.0.35 - Lenovo) Hidden
    Energy Manager (HKLM-x32\...\InstallShield_{AC768037-7079-4658-AC24-2897650E0ABE}) (Version: 1.0.0.35 - Lenovo)
    Entity Framework 6.1.3 Tools for Visual Studio 2015 Update 1 (HKLM-x32\...\{2A56910C-69C8-495D-8ED8-9080F0A14E58}) (Version: 14.0.41103.0 - Microsoft Corporation)
    ESEA (HKLM\...\Steam App 479130) (Version: - ESEA)
    ESEA Client (HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\...\ESEA) (Version: 5.0.0.0 - E-Sports Entertainment LLC)
    FACEIT Client version 1.0 (HKLM\...\{1419E44C-0EF4-4822-9194-9F1A4D43973D}_is1) (Version: 1.0 - FACEIT LTD)
    File Association Helper (HKLM\...\{C168639F-5810-4EC8-B1E8-0251AA8A771C}) (Version: 1.2.225.65451 - WinZip Computing International, LLC)
    Fotoğraf Galerisi (HKLM-x32\...\{B743ABDD-E681-4B32-A33E-6E7F3F845AEA}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
    GIMP 2.8.22 (HKLM\...\GIMP-2_is1) (Version: 2.8.22 - The GIMP Team)
    Git version 2.9.2 (HKLM\...\Git_is1) (Version: 2.9.2 - The Git Development Community)
    Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.113 - Google Inc.)
    Google Drive (HKLM-x32\...\{A90339B3-2C3F-492E-B3A7-0BDFC691E526}) (Version: 2.34.6425.2548 - Google, Inc.)
    Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
    Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
    Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version: - Rockstar North)
    Gtk# for .Net 2.12.26 (HKLM-x32\...\{BC25B808-A11C-4C9F-9C0A-6682E47AAB83}) (Version: 2.12.26 - Xamarin, Inc.)
    Hightail for Lenovo (HKLM\...\{2F10E937-F6D7-4174-8AB9-B299E8FC5CEC}) (Version: 2.4.97.2857 - Hightail, Inc.)
    Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
    IDE Tools for Windows 10 - ENU (HKLM-x32\...\{5FAE69D5-D9A7-469A-A021-2EB40F4FE0AB}) (Version: 14.0.25527 - Microsoft Corporation) Hidden
    IDE Tools for Windows 10 (HKLM-x32\...\{F255D538-8ECB-4ED1-9670-E195D403BCCF}) (Version: 14.0.25527 - Microsoft Corporation) Hidden
    IIS 10.0 Express (HKLM\...\{13FD7E30-D2F1-498D-ABC2-A4242DB6610E}) (Version: 10.0.1736 - Microsoft Corporation)
    IIS Express Application Compatibility Database for x64 (HKLM\...\{08274920-8908-45c2-9258-8ad67ff77b09}.sdb) (Version: - )
    IIS Express Application Compatibility Database for x86 (HKLM\...\{ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb) (Version: - )
    INSIDE (HKLM\...\Steam App 304430) (Version: - Playdead)
    Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
    Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4531 - Intel Corporation)
    Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 3.0.1342.2) (HKLM\...\{302600C1-6BDF-4FD1-1311-148929CC1385}) (Version: 3.1.1311.0402 - Intel Corporation)
    Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
    Intel® PROSet/Wireless Software (HKLM-x32\...\{eff1d9d1-41fa-49ef-a986-082bfe49c293}) (Version: 16.8.0 - Intel Corporation)
    Intel® RealSense™ SDK Çalışma Zamanı (HKLM-x32\...\ARP_for_prd_rs_sdk_runtime_10.0.26.0396) (Version: 10.0.26.0396 - Intel Corporation)
    Intel® RealSense™ SDK Runtime Gold (x86): Core (HKLM-x32\...\{4BAB7070-1D73-11E6-8844-2C44FD873B55}) (Version: 10.0.26.396 - Intel Corporation) Hidden
    Intel® RealSense™ SDK Runtime Gold (x86): Core: Calibration (HKLM-x32\...\{676C639E-1D73-11E6-BF2F-2C44FD873B55}) (Version: 10.0.26.396 - Intel Corporation) Hidden
    Intel® RealSense™ SDK Runtime Gold (x86): User Segmentation (HKLM-x32\...\{51040000-1D73-11E6-A45D-2C44FD873B55}) (Version: 10.0.26.396 - Intel Corporation) Hidden
    Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version: - Intel Corporation)
    Intellisense Lang Pack Mobile Extension SDK 10.0.14393.0 (HKLM-x32\...\{26D23C60-AC47-46E5-8EDF-D19F41CAB666}) (Version: 10.1.14393.33 - Microsoft Corporation) Hidden
    Java 7 Update 80 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417080FF}) (Version: 7.0.800 - Oracle)
    Java 8 Update 66 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418066F0}) (Version: 8.0.660.18 - Oracle Corporation)
    Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
    Java SE Development Kit 7 Update 55 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0170550}) (Version: 1.7.0.550 - Oracle)
    Java SE Development Kit 7 Update 79 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170790}) (Version: 1.7.0.790 - Oracle)
    Java SE Development Kit 7 Update 80 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170800}) (Version: 1.7.0.800 - Oracle)
    Java SE Development Kit 8 Update 31 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180310}) (Version: 8.0.310.13 - Oracle Corporation)
    Kits Configuration Installer (HKLM-x32\...\{0275DC52-C83E-3142-D2EF-70877F885663}) (Version: 10.0.26624 - Microsoft) Hidden
    Kits Configuration Installer (HKLM-x32\...\{E14DDED2-919B-FCCB-84AC-5ABB6D182D46}) (Version: 8.59.25584 - Microsoft) Hidden
    K-Lite Codec Pack 10.9.0 Standard (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.9.0 - )
    League of Legends (HKLM-x32\...\{50D6FC64-F1D9-4D0E-98DC-32E24FE3239D}) (Version: 4.2.0 - Riot Games) Hidden
    League of Legends (HKLM-x32\...\League of Legends 4.2.0) (Version: 4.2.0 - Riot Games)
    Left 4 Dead 2 (HKLM\...\Steam App 550) (Version: - Valve)
    Lenovo Dependency Package (HKLM\...\Lenovo Dependency Package_is1) (Version: 1.6.25.00 - Lenovo Group Limited)
    Lenovo EasyCamera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10249 - Realtek Semiconductor Corp.)
    Lenovo EasyCamera (HKLM-x32\...\{E399A5B3-ED53-4DEA-AF04-8011E1EB1EAC}) (Version: 6.3.9600.11105 - Realtek Semiconductor Corp.)
    Lenovo FusionEngine (HKLM-x32\...\Lenovo FusionEngine) (Version: 1.0.13.0 - Lenovo, Inc.)
    Lenovo Mobile Phone Wireless Import (HKLM-x32\...\{DFB2E0D6-8DDE-49A4-B8F7-03C14DACCBA6}) (Version: 1.1.1.9 - Lenovo) Hidden
    Lenovo Mobile Phone Wireless Import (HKLM-x32\...\InstallShield_{DFB2E0D6-8DDE-49A4-B8F7-03C14DACCBA6}) (Version: 1.1.1.9 - Lenovo)
    Lenovo OneKey Recovery (HKLM\...\{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.2105 - CyberLink Corp.) Hidden
    Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.2105 - CyberLink Corp.)
    Lenovo Photo Master (HKLM-x32\...\{BC94C56A-3649-420C-8756-2ADEBE399D33}) (Version: 1.0.1823.01 - CyberLink Corp.) Hidden
    Lenovo Photo Master (HKLM-x32\...\InstallShield_{BC94C56A-3649-420C-8756-2ADEBE399D33}) (Version: 1.0.1823.01 - CyberLink Corp.)
    Lenovo PowerDVD10 (HKLM-x32\...\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5630.52 - CyberLink Corp.) Hidden
    Lenovo PowerDVD10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5630.52 - CyberLink Corp.)
    Lenovo SHAREit (HKLM-x32\...\Lenovo SHAREit_is1) (Version: 2.0.5.0 - Lenovo Group Limited)
    Lenovo Web Start (HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\...\Pokki_04bb6df446330549a2cb8d67fbd1a745025b7bd1) (Version: 1.0.2.53457 - Pokki)
    Life Is Strange™ (HKLM\...\Steam App 319630) (Version: - DONTNOD Entertainment)
    Lightshot-5.4.0.1 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.1 - Skillbrains)
    LIMBO (HKLM\...\Steam App 48000) (Version: - Playdead)
    LocalESPC (HKLM-x32\...\{62910715-63E3-0AB0-0B29-99140DE1C15E}) (Version: 8.59.29989 - Microsoft Corporation) Hidden
    LocalESPCui for en-us (HKLM-x32\...\{326A5052-061C-F656-31E3-3B73842ABD46}) (Version: 8.59.29989 - Microsoft) Hidden
    Logitech G430 Driver (HKLM-x32\...\G430_Driver) (Version: 8.53.0.2 - Logitech)
    Logitech Gaming Software 8.88 (HKLM\...\Logitech Gaming Software) (Version: 8.88.30 - Logitech Inc.)
    Malwarebytes Anti-Malware 2.2.1.1043 sürümü (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
    Max Payne 2: The Fall of Max Payne (HKLM\...\Steam App 12150) (Version: - Remedy Entertainment)
    Metric Collection SDK 35 (HKLM-x32\...\{C2B5B5B0-2545-4E94-B4BA-548D4BF0B196}) (Version: 1.2.0001.00 - Lenovo Group Limited) Hidden
    Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
    Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
    Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (ENU) (HKLM-x32\...\{290FC320-2F5A-329E-8840-C4193BD7A9EE}) (Version: 4.5.51209 - Microsoft Corporation)
    Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{19E8AE59-4D4A-3534-B567-6CC08FA4102E}) (Version: 4.5.51651 - Microsoft Corporation)
    Microsoft .NET Framework 4.6 SDK (HKLM-x32\...\{B5915D37-0637-4A26-A3AA-C5DC9F856370}) (Version: 4.6.00081 - Microsoft Corporation)
    Microsoft .NET Framework 4.6 Targeting Pack (ENU) (HKLM-x32\...\{034547E9-D8FA-49E7-8B9C-4C9861FB9146}) (Version: 4.6.00127 - Microsoft Corporation)
    Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation)
    Microsoft .NET Framework 4.6.1 SDK (HKLM-x32\...\{2F0ECC80-B9E4-4485-8083-CD32F22ABD92}) (Version: 4.6.01055 - Microsoft Corporation)
    Microsoft .NET Framework 4.6.1 SDK (Türkçe) (HKLM-x32\...\{0AD6A050-7796-425B-B5D4-3770F1D9FF1C}) (Version: 4.6.01055 - Microsoft Corporation)
    Microsoft .NET Framework 4.6.1 Targeting Pack (ENU) (HKLM-x32\...\{8EEB28EE-5141-411C-9CF0-9952264FE4AF}) (Version: 4.6.01055 - Microsoft Corporation)
    Microsoft .NET Framework 4.6.1 Targeting Pack (HKLM-x32\...\{8BC3EEC9-090F-4C53-A8DA-1BEC913040F9}) (Version: 4.6.01055 - Microsoft Corporation)
    Microsoft .NET Framework 4.6.1 Targeting Pack (Türkçe) (HKLM-x32\...\{EBABF25B-62B0-4581-B714-2BF647FDC763}) (Version: 4.6.01055 - Microsoft Corporation)
    Microsoft .NET Version Manager (x64) 1.0.0-beta5 (HKLM\...\{c5a4aba3-1aba-3ef8-b2d5-c3fa37f59738}) (Version: 1.0.10609.0 - Microsoft Corporation)
    Microsoft ASP.NET MVC 2 - Visual Studio 2010 Tools (HKLM-x32\...\{40416836-56CC-4C0E-A6AF-5C34BADCE483}) (Version: 2.0.50217.0 - Microsoft Corporation)
    Microsoft ASP.NET MVC 2 (HKLM-x32\...\{DD8FF2F3-0D97-4CF3-AF78-FA0E1B242244}) (Version: 2.0.60926.0 - Microsoft Corporation)
    Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
    Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
    Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
    Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)
    Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.25420 - Microsoft Corporation)
    Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
    Microsoft Office 2003 Web Components (HKLM-x32\...\{90120000-00A4-0409-0000-0000000FF1CE}) (Version: 12.0.6213.1000 - Microsoft Corporation)
    Microsoft Office Professional Plus 2016 - en-us (HKLM\...\ProplusRetail - en-us) (Version: 16.0.8326.2033 - Microsoft Corporation)
    Microsoft OneDrive (HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\...\OneDriveSetup.exe) (Version: 17.3.6998.0830 - Microsoft Corporation)
    Microsoft Project Professional 2016 - en-us (HKLM\...\ProjectProRetail - en-us) (Version: 16.0.8326.2033 - Microsoft Corporation)
    Microsoft Report Viewer Redistributable 2008 SP1 (HKLM-x32\...\Microsoft Report Viewer Redistributable 2008 (KB971119)) (Version: - Microsoft Corporation)
    Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
    Microsoft Silverlight 3 SDK (HKLM-x32\...\{2012098D-EEE9-4769-8DD3-B038050854D4}) (Version: 3.0.40818.0 - Microsoft Corporation)
    Microsoft Silverlight 4 SDK (HKLM-x32\...\{05855322-BE43-41FE-B583-D3AE0C326D58}) (Version: 4.0.50826.0 - Microsoft Corporation)
    Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation)
    Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
    Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version: - Microsoft Corporation)
    Microsoft SQL Server 2008 R2 (64-bit) (HKLM\...\Microsoft SQL Server 2008 R2) (Version: - Microsoft Corporation)
    Microsoft SQL Server 2008 R2 Data-Tier Application Framework (HKLM-x32\...\{BC537AE0-88AF-47ED-B762-33B0D62B5188}) (Version: 10.50.1750.9 - Microsoft Corporation)
    Microsoft SQL Server 2008 R2 Data-Tier Application Project (HKLM-x32\...\{7A56D81D-6406-40E7-9184-8AC1769C4D69}) (Version: 10.50.1750.9 - Microsoft Corporation)
    Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{77F1F8AD-51B8-4490-AEEC-BF480073E0FC}) (Version: 10.50.1750.9 - Microsoft Corporation)
    Microsoft SQL Server 2008 R2 Management Objects (x64) (HKLM\...\{EAEBF166-B06A-4D7F-BAF7-6615303D5C7C}) (Version: 10.50.1750.9 - Microsoft Corporation)
    Microsoft SQL Server 2008 R2 Native Client (HKLM\...\{2180B33F-3225-423E-BBC1-7798CFD3CD1F}) (Version: 10.50.1600.1 - Microsoft Corporation)
    Microsoft SQL Server 2008 R2 Policies (HKLM-x32\...\{D21BC5B2-CBAC-48FA-A701-B5A63C1CA7B8}) (Version: 10.50.1600.1 - Microsoft Corporation)
    Microsoft SQL Server 2008 R2 Setup (English) (HKLM\...\{6D10FB2C-82A9-40F2-91D0-7BE64CF0DAF2}) (Version: 10.50.1600.1 - Microsoft Corporation)
    Microsoft SQL Server 2008 R2 Transact-SQL Language Service (HKLM-x32\...\{09C52940-A4D1-4409-A7CC-1AAE630CF578}) (Version: 10.50.1750.9 - Microsoft Corporation)
    Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{B40EE88B-400A-4266-A17B-E3DE64E94431}) (Version: 10.1.2731.0 - Microsoft Corporation)
    Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation)
    Microsoft SQL Server 2012 Native Client (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)
    Microsoft SQL Server 2014 Express LocalDB (HKLM\...\{AB8DE9BA-19E1-446A-BCFA-6B3DA9751E21}) (Version: 12.0.2000.8 - Microsoft Corporation)
    Microsoft SQL Server 2014 Management Objects (HKLM-x32\...\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation)
    Microsoft SQL Server 2014 Management Objects (x64) (HKLM\...\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}) (Version: 12.0.2000.8 - Microsoft Corporation)
    Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\...\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation)
    Microsoft SQL Server 2014 T-SQL Language Service (HKLM-x32\...\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation)
    Microsoft SQL Server 2016 LocalDB (HKLM\...\{E359515A-92E6-4FA3-A2C9-E1BA02D8DE6E}) (Version: 13.0.1601.5 - Microsoft Corporation)
    Microsoft SQL Server 2016 Management Objects (HKLM-x32\...\{0F1C8E2F-199A-4946-B3BF-0906DACFD032}) (Version: 13.0.1601.5 - Microsoft Corporation)
    Microsoft SQL Server 2016 Management Objects (x64) (HKLM\...\{20EA85AA-2A1D-4F11-B09F-4BA2BF3C8989}) (Version: 13.0.1601.5 - Microsoft Corporation)
    Microsoft SQL Server 2016 T-SQL Language Service (HKLM-x32\...\{8BFDE775-C5B8-46DB-84EF-43FFC8A2E8AD}) (Version: 13.0.14500.10 - Microsoft Corporation)
    Microsoft SQL Server 2016 T-SQL ScriptDom (HKLM\...\{D091DE8C-EA0F-49AF-8DE3-BD6C79737C6E}) (Version: 13.0.1601.5 - Microsoft Corporation)
    Microsoft SQL Server Browser (HKLM-x32\...\{BF9BF038-FE03-429D-9B26-2FA0FD756052}) (Version: 10.50.1600.1 - Microsoft Corporation)
    Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
    Microsoft SQL Server Compact 3.5 SP2 Query Tools ENU (HKLM-x32\...\{DDFD8348-058C-4F4B-85E5-6D740D4AB3FE}) (Version: 3.5.8080.0 - Microsoft Corporation)
    Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
    Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
    Microsoft SQL Server Data Tools - enu (14.0.60519.0) (HKLM-x32\...\{4E27B0EF-7BAB-432A-AF3D-3FC8F3F7353F}) (Version: 14.0.60519.0 - Microsoft Corporation)
    Microsoft SQL Server Database Publishing Wizard 1.4 (HKLM-x32\...\{ACE28263-76A4-4BF5-B6F4-8BD719595969}) (Version: 10.1.2512.8 - Microsoft Corporation)
    Microsoft SQL Server System CLR Types (HKLM-x32\...\{877B76B2-F83F-4F5A-B28D-3F398641ADB6}) (Version: 10.50.1750.9 - Microsoft Corporation)
    Microsoft SQL Server System CLR Types (x64) (HKLM\...\{1E6ED082-E32D-4B2B-8B6A-70B094815135}) (Version: 10.50.1750.9 - Microsoft Corporation)
    Microsoft SQL Server VSS Writer (HKLM\...\{288D79EE-A2D1-42AF-9597-B0ADCC23A8ED}) (Version: 10.50.1600.1 - Microsoft Corporation)
    Microsoft Sync Framework Runtime v1.0 SP1 (x64) (HKLM\...\{8438EC02-B8A9-462D-AC72-1B521349C001}) (Version: 1.0.3010.0 - Microsoft Corporation)
    Microsoft Sync Framework SDK v1.0 SP1 (HKLM-x32\...\{0E3DFC64-CC49-4BE2-8C9C-58EF129675DB}) (Version: 1.0.3010.0 - Microsoft Corporation)
    Microsoft Sync Framework Services v1.0 SP1 (x64) (HKLM\...\{034106B5-54B7-467F-B477-5B7DBB492624}) (Version: 1.0.3010.0 - Microsoft Corporation)
    Microsoft Sync Services for ADO.NET v2.0 SP1 (x64) (HKLM\...\{1D1CEEF8-3741-45BD-8E77-963E1DEBDDD3}) (Version: 2.0.3010.0 - Microsoft Corporation)
    Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{FC3BB979-AA54-4B60-BBA3-2C4DA6E08D80}) (Version: 12.0.2402.29 - Microsoft Corporation)
    Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\...\{091CE6AA-2753-4F6E-AD1C-0E875744EB54}) (Version: 12.0.2402.29 - Microsoft Corporation)
    Microsoft System CLR Types for SQL Server 2016 (HKLM\...\{96EB5054-C775-4BEF-B7B9-AA96A295EDCD}) (Version: 13.0.1601.5 - Microsoft Corporation)
    Microsoft System CLR Types for SQL Server 2016 (HKLM-x32\...\{84C23ECA-FE4D-494F-9247-3EBAD57E7F0C}) (Version: 13.0.1601.5 - Microsoft Corporation)
    Microsoft Team Foundation Server 2010 Object Model - ENU (HKLM\...\Microsoft Team Foundation Server 2010 Object Model - ENU) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visio Professional 2016 - en-us (HKLM\...\VisioProRetail - en-us) (Version: 16.0.8326.2033 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x64 Designtime - 10.0.30319 (HKLM\...\{F5079164-1DB9-3BDA-853B-F78AF67CE071}) (Version: 10.0.30319 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40649 (HKLM-x32\...\{5d0723d3-cff7-4e07-8d0b-ada737deb5e6}) (Version: 12.0.40649.5 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
    Microsoft Visual C++ 2017 Redistributable (x64) - 14.11.25325 (HKLM-x32\...\{6c6356fe-cbfa-4944-9bed-a9e99f45cb7a}) (Version: 14.11.25325.0 - Microsoft Corporation)
    Microsoft Visual C++ 2017 Redistributable (x86) - 14.11.25325 (HKLM-x32\...\{404c9c27-8377-4fd1-b607-7ca635db4e49}) (Version: 14.11.25325.0 - Microsoft Corporation)
    Microsoft Visual F# 2.0 Runtime (HKLM-x32\...\{85467CBC-7A39-33C9-8940-D72D9269B84F}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual Studio 2008 Shell (integrated mode) - ENU (HKLM-x32\...\{BA0C9AAF-1327-3F06-B49C-349B4BE8F740}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{14DD7530-CCD2-3798-B37D-3839ED6A441C}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual Studio 2010 IntelliTrace Collection (x64) (HKLM\...\{88BAE373-00F4-3E33-828F-96E89E5E0CB9}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
    Microsoft Visual Studio 2010 Ultimate - ENU (HKLM-x32\...\Microsoft Visual Studio 2010 Ultimate - ENU) (Version: 10.0.30319 - Microsoft Corporation)
    Microsoft Visual Studio 2015 Tools for Unity (HKLM-x32\...\{5359C5C6-F83D-4E74-9170-F9A68BE1C57F}) (Version: 2.3.0.0 - Microsoft Corporation)
    Microsoft Visual Studio 2017 (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 1.11.33287.817 - Microsoft Corporation)
    Microsoft Visual Studio Community 2015 with Updates (HKLM-x32\...\{79b486b9-c5f0-4096-a00c-8351f59587c2}) (Version: 14.0.25420.1 - Microsoft Corporation)
    Microsoft Visual Studio Macro Tools (HKLM-x32\...\Microsoft Visual Studio Macro Tools) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual Studio Tools for Apache Cordova (HKLM-x32\...\{29b63284-2755-4dde-82a3-32ba7245febe}) (Version: 14.0.60527.5 - Microsoft Corporation)
    Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{4ECF4BDC-8387-329A-ABE9-CF5798F84BB2}) (Version: 9.0.35191 - Microsoft Corporation)
    Microsoft Web Deploy 3.6 (HKLM\...\{94E1227C-08A9-4962-B388-1F05D89AEA75}) (Version: 3.1238.1962 - Microsoft Corporation)
    Moo0 Video Minimizer 1.14 (HKLM-x32\...\Moo0 VideoMinimizer) (Version: - )
    Mortal Kombat Komplete Edition (HKLM\...\Steam App 237110) (Version: - NetherRealm Studios)
    Movie Maker (HKLM-x32\...\{5B3D4718-9146-45CB-8989-C4E87B239B3A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
    Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
    MSBuild/NuGet Integration 14.0 (x86) (HKLM-x32\...\{128C1654-3B9E-4959-8BFB-CE6F09C0A01D}) (Version: 14.0.25420 - Microsoft Corporation) Hidden
    Multi-Device Hybrid Apps using C# - Templates - ENU (HKLM-x32\...\{12D99739-FFD3-3761-8AA6-F929E0FE407E}) (Version: 14.0.23107 - Microsoft Corporation) Hidden
    Node.js (HKLM-x32\...\{69735668-F8BC-4E9A-839A-4006FDFDD5AC}) (Version: 0.12.2 - Joyent, Inc. and other Node contributors)
    Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8 - Notepad++ Team)
    NVIDIA GeForce Experience 3.9.0.61 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.9.0.61 - NVIDIA Corporation)
    NVIDIA Grafik Sürücüsü 385.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 385.41 - NVIDIA Corporation)
    NVIDIA PhysX Sistem Yazılımı 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
    OBS Studio (HKLM-x32\...\OBS Studio) (Version: 18.0.1 - OBS Project)
    Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.8326.2033 - Microsoft Corporation) Hidden
    Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.8326.2033 - Microsoft Corporation) Hidden
    Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.8229.2056 - Microsoft Corporation) Hidden
    Onekey Theater (HKLM-x32\...\{91CC5BAE-A098-40D3-A43B-C0DC7CE263FE}) (Version: 3.0.1.2 - Lenovo)
    OpenAL (HKLM-x32\...\OpenAL) (Version: - )
    Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
    PDF Settings CS6 (HKLM-x32\...\{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}) (Version: 11.0 - Adobe Systems Incorporated) Hidden
    PLAYERUNKNOWN'S BATTLEGROUNDS (Beta) (HKLM\...\Steam App 459430) (Version: - )
    PLAYERUNKNOWN'S BATTLEGROUNDS (HKLM\...\Steam App 578080) (Version: - Bluehole, Inc.)
    Power2Go (HKLM-x32\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 5.6.0.10525 - CyberLink Corp.)
    PreEmptive Analytics Visual Studio Components (HKLM-x32\...\{436A18DD-5F2C-4B3C-985E-AD3C13B0CC25}) (Version: 1.2.5134.1 - PreEmptive Solutions) Hidden
    Prerequisites for SSDT (HKLM-x32\...\{21373064-AD95-48DB-A32E-0D9E08EF7355}) (Version: 12.0.2000.8 - Microsoft Corporation)
    Prerequisites for SSDT (HKLM-x32\...\{B7E94916-7AE6-4F7F-A377-7A410A42BA19}) (Version: 13.0.1601.5 - Microsoft Corporation)
    Prezi (HKLM-x32\...\{63B8F931-2BF3-4D5D-9C28-E2EF88D83DFD}) (Version: 5.2.8 - Prezi.com)
    Project and Item Templates for Visual Studio Community 2015 - ENU (HKLM-x32\...\{85619B33-76D7-4FF8-A04D-6E568B0CF29A}) (Version: 14.0.23107 - Microsoft Corporation) Hidden
    Project and Item Templates for Visual Studio Express 2015 for Windows 10 - ENU (HKLM-x32\...\{31F41F21-21C1-4A52-AFA7-B7D7F6B181AF}) (Version: 14.0.25527 - Microsoft Corporation) Hidden
    Project and Item Templates for Visual Studio Professionald 2015 - ENU (HKLM-x32\...\{35BD3B44-C9E4-457D-8260-41566E8BEFE2}) (Version: 14.0.25527 - Microsoft Corporation) Hidden
    PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.)
    Python 2.7.13 (Anaconda2 4.4.0 64-bit) (HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\...\Python 2.7.13 (Anaconda2 4.4.0 64-bit)) (Version: 4.4.0 - Continuum Analytics, Inc.)
    Python 3.6.2 (32-bit) (HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\...\{8388fa07-1617-4b8d-8ad8-6a940ad8052c}) (Version: 3.6.2150.0 - Python Software Foundation)
    Python 3.6.2 Core Interpreter (32-bit) (HKLM-x32\...\{4542573C-6216-4584-BA90-72BAF7954404}) (Version: 3.6.2150.0 - Python Software Foundation) Hidden
    Python 3.6.2 Development Libraries (32-bit) (HKLM-x32\...\{69E3E4A6-2A0F-4A32-9C2D-591EEC107289}) (Version: 3.6.2150.0 - Python Software Foundation) Hidden
    Python 3.6.2 Documentation (32-bit) (HKLM-x32\...\{796410A7-1669-4FE4-8332-F684B61269E2}) (Version: 3.6.2150.0 - Python Software Foundation) Hidden
    Python 3.6.2 Executables (32-bit) (HKLM-x32\...\{348C0EFF-60B1-4E68-88B8-33D7DF70DFCF}) (Version: 3.6.2150.0 - Python Software Foundation) Hidden
    Python 3.6.2 pip Bootstrap (32-bit) (HKLM-x32\...\{6B2D61BA-C42D-4324-B23F-1D7B5A2808EF}) (Version: 3.6.2150.0 - Python Software Foundation) Hidden
    Python 3.6.2 Standard Library (32-bit) (HKLM-x32\...\{79B4337D-166F-4BC0-B67A-F73806CC730E}) (Version: 3.6.2150.0 - Python Software Foundation) Hidden
    Python 3.6.2 Tcl/Tk Support (32-bit) (HKLM-x32\...\{DF24AFFD-23AB-4A7D-A0E0-6410CE3B6B9D}) (Version: 3.6.2150.0 - Python Software Foundation) Hidden
    Python 3.6.2 Test Suite (32-bit) (HKLM-x32\...\{433FD2E2-839C-4211-88B7-45C90F738842}) (Version: 3.6.2150.0 - Python Software Foundation) Hidden
    Python 3.6.2 Utility Scripts (32-bit) (HKLM-x32\...\{9B79DE7E-E864-4758-8DFC-85DA43B19671}) (Version: 3.6.2150.0 - Python Software Foundation) Hidden
    Python Launcher (HKLM-x32\...\{2636F1E4-2BC5-4B19-BFFD-A08F72598309}) (Version: 3.6.6032.0 - Python Software Foundation)
    Python Tools 2.2.5 for Visual Studio 2015 (HKLM-x32\...\{615045D1-CEF9-482C-AD74-6432A0ACE9E5}) (Version: 2.2.40825.00 - Microsoft Corporation)
    QuickTime 7 (HKLM-x32\...\{627FFC10-CE0A-497F-BA2B-208CAC638010}) (Version: 7.77.80.95 - Apple Inc.)
    Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10586.31222 - Realtek Semiconduct Corp.)
    Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)
    Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
    Refunct (HKLM\...\Steam App 406150) (Version: - Dominique Grieshofer)
    Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.1.9 - Rockstar Games)
    Roslyn Language Services - x86 (HKLM-x32\...\{6970C7E1-F99D-388D-8903-DF8FCE677FED}) (Version: 14.0.25431 - Microsoft Corporation) Hidden
    Roslyn Language Services - x86 (HKLM-x32\...\{6C1985E7-E1C5-3A95-86EF-2C62465F15C3}) (Version: 14.0.23107 - Microsoft Corporation) Hidden
    SDK Debuggers (HKLM-x32\...\{E63A3353-003C-E4C2-230B-F155212D1479}) (Version: 8.59.29746 - Microsoft Corporation) Hidden
    Secure Download Manager (HKLM-x32\...\{E040B65B-8683-4228-8C33-D44A141E40EA}) (Version: 3.1.60 - Kivuto Solutions Inc.)
    Service Pack 1 for SQL Server 2008 (KB968369) (64-bit) (HKLM\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation)
    Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
    Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.103 - Skype Technologies S.A.)
    SQL Server 2008 R2 BI Development Studio (HKLM\...\{1330309E-64D3-43F4-AA18-BC856182B5DB}) (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
    SQL Server 2008 R2 BI Development Studio (HKLM\...\{312E8540-0799-45D5-A02E-DFB8FCA93CCA}) (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
    SQL Server 2008 R2 Common Files (HKLM\...\{234F6B0D-10AE-4BB7-B2F3-E48D4861952D}) (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
    SQL Server 2008 R2 Common Files (HKLM\...\{36F70DEE-1EBF-4707-AFA2-E035EEAEBAA1}) (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
    SQL Server 2008 R2 Database Engine Services (HKLM\...\{5318020E-E32C-4A33-BC8D-EEF5CC2F6CA1}) (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
    SQL Server 2008 R2 Database Engine Services (HKLM\...\{9FFAE13C-6160-4DD0-A67A-DAC5994F81BD}) (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
    SQL Server 2008 R2 Database Engine Shared (HKLM\...\{A2122A9C-A699-4365-ADF8-68FEAC125D61}) (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
    SQL Server 2008 R2 Database Engine Shared (HKLM\...\{C942A025-A840-4BF2-8987-849C0DD44574}) (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
    SQL Server 2008 R2 Full text search (HKLM\...\{A7E4E7DD-2099-4D58-AE31-6E0F663066DD}) (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
    SQL Server 2008 R2 Management Studio (HKLM\...\{51E5BC99-A087-4CFF-8D93-462903EA7E12}) (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
    SQL Server 2008 R2 Management Studio (HKLM\...\{72AB7E6F-BC24-481E-8C45-1AB5B3DD795D}) (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
    SQL Server 2008 R2 Reporting Services (HKLM\...\{0C270C59-8706-42B8-A2AD-6E5EE18BC90B}) (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
    SQL Server 2008 R2 Reporting Services (HKLM\...\{2453DBC8-ACC4-4711-BD03-0C15353AA3D8}) (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
    Sql Server Customer Experience Improvement Program (HKLM\...\{F31183CF-E10F-4DE1-BB59-6C0FF38E481E}) (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
    Start Menu (HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\...\Pokki_Start_Menu) (Version: 0.269.5.339 - Pokki)
    Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
    SteelSeries Engine 3.10.8 (HKLM\...\SteelSeries Engine 3) (Version: 3.10.8 - SteelSeries ApS)
    StreamLabels 0.2.5 (only current user) (HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\...\8000d50a-fcb7-5b38-8a3b-a02a0ec79daa) (Version: 0.2.5 - Streamlabs)
    swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
    Team Explorer for Microsoft Visual Studio 2015 Update 3.1 (HKLM-x32\...\{7A95671A-759E-3B83-B763-4289D1D24D73}) (Version: 14.102.25619 - Microsoft) Hidden
    TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
    Test Tools for Microsoft Visual Studio 2015 (HKLM-x32\...\{9EABBFE1-7EED-47D9-8FB8-21D7E4808057}) (Version: 14.0.23107 - Microsoft Corporation) Hidden
    Tunngle (HKLM-x32\...\Tunngle_is1) (Version: 5.8.8 - Tunngle.net GmbH)
    TypeScript Power Tool (HKLM-x32\...\{465ACA24-B8D6-4FEC-A42D-9EFCB92CD560}) (Version: 1.8.34.0 - Microsoft Corporation) Hidden
    TypeScript Tools for Microsoft Visual Studio 2015 (HKLM-x32\...\{BA5762C7-D35F-4725-A4BD-525854127018}) (Version: 1.8.36.0 - Microsoft Corporation) Hidden
    Unity (HKLM-x32\...\Unity) (Version: 2017.1.1f1 - Unity Technologies ApS)
    Universal CRT Extension SDK (HKLM-x32\...\{1FBCBC17-4527-2340-0832-B1D49C41FF67}) (Version: 10.0.26624 - Microsoft Corporation) Hidden
    Universal CRT Extension SDK (HKLM-x32\...\{284FA9A0-CEDD-81D3-5A19-5858E95FD0C4}) (Version: 10.0.10150 - Microsoft Corporation) Hidden
    Universal CRT Extension SDK (HKLM-x32\...\{315BBDA9-CE84-D465-59F8-B9C765D953AC}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
    Universal CRT Extension SDK (HKLM-x32\...\{F6483AD1-9703-F95E-B07B-6BB7A3DA7B71}) (Version: 10.1.14393.33 - Microsoft Corporation) Hidden
    Universal CRT Headers Libraries and Sources (HKLM-x32\...\{8BFBEC30-33CC-13B4-849F-3B036F27466A}) (Version: 10.0.26624 - Microsoft Corporation) Hidden
    Universal CRT Headers Libraries and Sources (HKLM-x32\...\{96FB0EE4-8F7E-595E-B5CF-BFCC6BF26014}) (Version: 10.1.14393.33 - Microsoft Corporation) Hidden
    Universal CRT Headers Libraries and Sources (HKLM-x32\...\{ABD37F71-FC3F-F525-C7B3-BDD95F684C51}) (Version: 10.0.10150 - Microsoft Corporation) Hidden
    Universal CRT Headers Libraries and Sources (HKLM-x32\...\{F4E7226B-6A1C-F4D6-1109-6E1CD5B3E633}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
    Universal CRT Redistributable (HKLM-x32\...\{302A9B8D-5111-6C51-BB99-FF394C4A4255}) (Version: 10.1.14393.33 - Microsoft Corporation) Hidden
    Universal CRT Tools x64 (HKLM\...\{2D359C7E-59C8-79A9-5157-FE9E189F5E8A}) (Version: 10.1.14393.33 - Microsoft Corporation) Hidden
    Universal CRT Tools x86 (HKLM-x32\...\{71436CD5-3E63-CEE9-FC00-5124A5C9A931}) (Version: 10.1.14393.33 - Microsoft Corporation) Hidden
    Universal General MIDI DLS Extension SDK (HKLM-x32\...\{6AFD985C-21B7-8F2D-86B2-19A0563A1195}) (Version: 10.0.26624 - Microsoft Corporation) Hidden
    Universal General MIDI DLS Extension SDK (HKLM-x32\...\{87F42CC0-5403-3698-87D9-3C2A04E476E1}) (Version: 10.1.14393.33 - Microsoft Corporation) Hidden
    Universal General MIDI DLS Extension SDK (HKLM-x32\...\{AF5B9C51-F99A-59CC-70F5-214E9B535EE3}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
    User Manuals (HKLM-x32\...\{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 3.0.0.3 - Lenovo) Hidden
    User Manuals (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 3.0.0.3 - Lenovo)
    Visual C++ for Mobile Development (Android support) (HKLM-x32\...\{11f23290-022a-4ed3-a39b-ba3eee3fefa2}) (Version: 14.0.25401.0 - Microsoft Corporation)
    Visual C++ for Mobile Development (iOS support) (HKLM-x32\...\{6aa67741-cbea-4763-a744-e612ed2e6294}) (Version: 14.0.25401.0 - Microsoft Corporation)
    Visual Studio 2010 Prerequisites - English (HKLM\...\{662014D2-0450-37ED-ABAE-157C88127BEB}) (Version: 10.0.40219 - Microsoft Corporation)
    Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{112C23F2-C036-4D40-BED4-0CB47BF5555C}) (Version: 4.0.8080.0 - Microsoft Corporation)
    Visual Studio 2015 Update 3 (KB3022398) (HKLM-x32\...\{7a68448b-9cf2-4049-bd73-5875f1aa7ba2}) (Version: 14.0.25420 - Microsoft Corporation)
    VS Update core components (HKLM-x32\...\{B2918D01-1D89-34D3-87EF-A28121BC6EB7}) (Version: 14.0.25431 - Microsoft Corporation) Hidden
    vs_communitymsi (HKLM-x32\...\{52100697-9C66-44F3-BA20-68F8148CDF9B}) (Version: 15.0.26711 - Microsoft Corporation) Hidden
    vs_communitymsires (HKLM-x32\...\{C1A2852D-7FED-42BC-BE13-402E6D4942E5}) (Version: 15.0.26621 - Microsoft Corporation) Hidden
    vs_devenvmsi (HKLM-x32\...\{BFFA2FFB-1095-4ADD-A352-368806D2412B}) (Version: 15.0.26621 - Microsoft Corporation) Hidden
    vs_filehandler_amd64 (HKLM-x32\...\{DDEF2BD0-F728-4D04-A085-B5ACC9ADC311}) (Version: 15.0.26711 - Microsoft Corporation) Hidden
    vs_filehandler_x86 (HKLM-x32\...\{2512A3CE-E1E4-46D5-8B40-28DA3AE2261E}) (Version: 15.0.26711 - Microsoft Corporation) Hidden
    vs_FileTracker_Singleton (HKLM-x32\...\{384F31FB-B99D-48A7-9D72-E1FEBEC2201A}) (Version: 15.0.26621 - Microsoft Corporation) Hidden
    vs_minshellinteropmsi (HKLM-x32\...\{D0772A03-7FC2-4B20-AC1F-B278299AA9C7}) (Version: 15.0.26621 - Microsoft Corporation) Hidden
    vs_minshellmsi (HKLM-x32\...\{0F2742A7-6A64-46A2-94AE-22F19808BE2F}) (Version: 15.0.26711 - Microsoft Corporation) Hidden
    vs_minshellmsires (HKLM-x32\...\{284D88E1-21B6-4FA2-A606-4E49412F74E8}) (Version: 15.0.26621 - Microsoft Corporation) Hidden
    vs_update3notification (HKLM-x32\...\{AB3DF932-C990-34D4-BF43-970F760DA3CD}) (Version: 14.0.25431 - Microsoft Corporation) Hidden
    Vulkan Run Time Libraries 1.0.51.0 (HKLM\...\VulkanRT1.0.51.0) (Version: 1.0.51.0 - LunarG, Inc.)
    WampServer 2.5 (HKLM-x32\...\WampServer 2_is1) (Version: - Hervé Leclerc (HeL))
    WCF Data Services 5.6.4 Runtime (HKLM-x32\...\{DB85E7BD-B2DD-43D4-B3C0-23D7B527B597}) (Version: 5.6.62175.4 - Microsoft Corporation) Hidden
    WCF Data Services Tools for Microsoft Visual Studio 2015 (HKLM-x32\...\{0A3B508E-5638-4471-BCC9-954E1868CB86}) (Version: 5.6.62175.4 - Microsoft Corporation) Hidden
    WCF RIA Services V1.0 SP2 (HKLM-x32\...\{5D8DD6A8-C4D7-4554-93F9-F1CC28C72600}) (Version: 4.1.62812.0 - Microsoft Corporation)
    Web Deployment Tool (HKLM\...\{0F37D969-1260-419E-B308-EF7D29ABDE20}) (Version: 1.1.0618 - Microsoft Corporation)
    Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
    WinAppDeploy (HKLM-x32\...\{1182888E-EDC9-05C5-33BD-B61DA5B1F916}) (Version: 10.1.14393.33 - Microsoft Corporation) Hidden
    Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation)
    Windows 8 Codec Pack 2.0.2 (HKLM-x32\...\Windows 8 - Codec Pack) (Version: 2.0.2 - Windows 8 Codec Pack)
    Windows Driver Package - Lenovo (ACPIVPC) System (02/17/2013 9.52.0.776) (HKLM\...\35DD26BE48DAF4A9F35F969F3CB1E3E1435E661E) (Version: 02/17/2013 9.52.0.776 - Lenovo)
    Windows Driver Package - Lenovo (WUDFRd) LenovoVhid (07/25/2013 10.30.0.288) (HKLM\...\6BCA401E9CBEED970D75F55FA5320F60D11984E9) (Version: 07/25/2013 10.30.0.288 - Lenovo)
    Windows Live Temel Parçalar (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
    Windows SDK AddOn (HKLM-x32\...\{45D392D2-5956-4646-9CA6-83CBF67507B6}) (Version: 10.1.0.0 - Microsoft Corporation)
    Windows Software Development Kit - Windows 10.0.10586.212 (HKLM-x32\...\{43d9f43d-c90b-4fdf-9dfe-ecf9990bfa2a}) (Version: 10.1.10586.212 - Microsoft Corporation)
    Windows Software Development Kit - Windows 10.0.14393.33 (HKLM-x32\...\{f23f94c5-8bba-4202-85ad-c83d4402cdc1}) (Version: 10.1.14393.33 - Microsoft Corporation)
    Windows Software Development Kit - Windows 10.0.26624 (HKLM-x32\...\{e7a0c8b6-b0e9-41e2-8a0a-a6784f88d1d4}) (Version: 10.0.26624 - Microsoft Corporation)
    Windows Software Development Kit (HKLM-x32\...\{363a2c1e-637f-45ce-933b-5a5463efd945}) (Version: 8.59.29750 - Microsoft Corporation)
    WinRAR 5.21 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
    WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
    WinRT Intellisense Desktop - en-us (HKLM-x32\...\{01F53182-F1C8-8A72-5C86-B6612BDD4815}) (Version: 10.1.14393.33 - Microsoft Corporation) Hidden
    WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{2AC000E5-E5E6-75B7-7FC2-9ECA8C57CA98}) (Version: 10.1.14393.33 - Microsoft Corporation) Hidden
    WinRT Intellisense IoT - en-us (HKLM-x32\...\{6DF5B5E1-A8A0-B617-AADB-31C3709A3C41}) (Version: 10.1.14393.33 - Microsoft Corporation) Hidden
    WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{1AAB8359-4433-FF39-D420-0AD429993AD7}) (Version: 10.1.14393.33 - Microsoft Corporation) Hidden
    WinRT Intellisense PPI - en-us (HKLM-x32\...\{CB7AC790-0E8B-D6C9-CE1E-655793E7D541}) (Version: 10.1.14393.33 - Microsoft Corporation) Hidden
    WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{87775501-5259-6A7C-51A6-71C832DB7ABA}) (Version: 10.1.14393.33 - Microsoft Corporation) Hidden
    WinRT Intellisense UAP - en-us (HKLM-x32\...\{CFD0294B-945D-62E4-7959-9B22A160496F}) (Version: 10.1.14393.33 - Microsoft Corporation) Hidden
    WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{F75FD5E5-1F33-AE2B-715A-F829F8A8F51D}) (Version: 10.1.14393.33 - Microsoft Corporation) Hidden
    WinRT Intellisense Xbox Live Extension SDK - en-us (HKLM-x32\...\{74B9E6F9-1793-4E90-22A1-A42254D04453}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
    WinRT Intellisense Xbox Live Extension SDK - Other Languages (HKLM-x32\...\{1EE3550B-B5FB-B866-C153-1C609FBC1E89}) (Version: 10.1.10586.212 - Microsoft Corporation) Hidden
    WinZip 19.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240E5}) (Version: 19.0.11293 - WinZip Computing, S.L. )
    WPT Redistributables (HKLM-x32\...\{A5D42D71-4036-5F88-5085-657C9DF9F1DD}) (Version: 8.59.29750 - Microsoft) Hidden
    WPTx64 (HKLM-x32\...\{986EABFC-92F6-CECD-9E5A-B13CAC40BB1D}) (Version: 8.59.29722 - Microsoft) Hidden
    Xamarin (HKLM-x32\...\{35F76181-C965-4AAD-97A5-8313554759F8}) (Version: 4.1.1.3 - Xamarin)

    ==================== Custom CLSID (Whitelisted): ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-04] (Google)
    ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-04] (Google)
    ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-04] (Google)
    ShellIconOverlayIdentifiers: [00001LenovoSyncComplete] -> {1E9CED2C-E7B4-4C47-B07A-25416393B67B} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
    ShellIconOverlayIdentifiers: [00002LenovoSyncActive] -> {C1285F4D-918F-4EF2-BC94-CAD5B118C835} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
    ShellIconOverlayIdentifiers: [00003LenovoSyncError] -> {CE5633DA-1488-4D1D-9A9B-B500297D4A8C} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
    ShellIconOverlayIdentifiers: [00004LenovoLocalOnly] -> {C7362DA9-D3AC-4C17-B2F5-2F1823FA04C3} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
    ShellIconOverlayIdentifiers-x32: [00001LenovoSyncComplete] -> {1E9CED2C-E7B4-4C47-B07A-25416393B67B} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
    ShellIconOverlayIdentifiers-x32: [00002LenovoSyncActive] -> {C1285F4D-918F-4EF2-BC94-CAD5B118C835} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
    ShellIconOverlayIdentifiers-x32: [00003LenovoSyncError] -> {CE5633DA-1488-4D1D-9A9B-B500297D4A8C} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
    ShellIconOverlayIdentifiers-x32: [00004LenovoLocalOnly] -> {C7362DA9-D3AC-4C17-B2F5-2F1823FA04C3} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
    ContextMenuHandlers1: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => -> No File
    ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2015-04-15] ()
    ContextMenuHandlers1: [FileAssociationHelper] -> {D5CF14A2-B3CA-49DC-8E3E-0BB233B26D09} => C:\Program Files\File Association Helper\FAHDll.dll [2014-01-28] (Nico Mak Computing)
    ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-08-04] (Google)
    ContextMenuHandlers1: [SHAREit.FileContextMenuExt] -> {430BD134-576D-4E75-87CD-0F5C6221A82B} => C:\Program Files (x86)\Lenovo\SHAREit\ShellEx\ShellExt64.dll [2014-04-24] (Lenovo)
    ContextMenuHandlers1: [TVCShellExt] -> {4E33A7F5-8083-4C08-9D45-C5CED88F5C04} => C:\Program Files (x86)\Total Video Converter\TVCShellExtx64.dll [2010-07-29] ()
    ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2015-02-15] (Alexander Roshal)
    ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2015-02-15] (Alexander Roshal)
    ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamext.dll [2016-03-10] (Malwarebytes)
    ContextMenuHandlers4: [000LenovoFoldersContextMenu] -> {D2DB7BAA-9E12-4640-825C-B1EB36A3809A} => C:\Program Files\Hightail\Hightail for Lenovo\YSINSE64.dll [2014-06-23] (Hightail Inc.)
    ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-08-04] (Google)
    ContextMenuHandlers4: [SHAREit.FileContextMenuExt] -> {430BD134-576D-4E75-87CD-0F5C6221A82B} => C:\Program Files (x86)\Lenovo\SHAREit\ShellEx\ShellExt64.dll [2014-04-24] (Lenovo)
    ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
    ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2017-06-12] (Intel Corporation)
    ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-08-22] (NVIDIA Corporation)
    ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamext.dll [2016-03-10] (Malwarebytes)
    ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2015-02-15] (Alexander Roshal)
    ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2015-02-15] (Alexander Roshal)

    ==================== Scheduled Tasks (Whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    Task: {0B3DF25C-2C84-4B95-A809-546951FE248C} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
    Task: {15F2CFF9-D3AD-481B-8F6C-360E709DC159} - System32\Tasks\GoogleUpdateTaskMachineCore1d092ecb9ca893 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
    Task: {21A92236-B4FA-4571-9349-E356C611D232} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
    Task: {2CE335EE-73EE-4638-BE1C-12A4789E3B71} - System32\Tasks\{EC48837D-EEF7-4BFD-B5DF-1447D9D30198} => C:\windows\system32\pcalua.exe -a "C:\Program Files (x86)\Faster Light\FasterLightuninstall.exe"
    Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
    Task: {361E7F78-C7F1-4F3E-9F18-02841E073F03} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-08-22] (NVIDIA Corporation)
    Task: {387F9925-29E6-4292-B759-01C4FC95B678} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-06-28] ()
    Task: {4027BCD5-8A89-40DB-A02A-8315C4F00056} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
    Task: {402B74D2-3891-43F1-BCE0-6F55B9CC9713} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
    Task: {49B7043A-028D-4EA8-A557-A515B8C33FDE} - System32\Tasks\GoogleUpdate => nircmd.exe <==== ATTENTION
    Task: {4A53CAAB-F115-4F6F-B537-D74911907D9A} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [2014-05-30] (Lenovo)
    Task: {4FD07DB7-DE18-4CCC-AA51-89568FC51F02} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
    Task: {52B8F1B8-43F0-4CFC-B08F-B00678BE75B6} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
    Task: {53603A36-8A0D-47F4-B30B-857E5EE18488} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
    Task: {54E0FA93-EC13-46C3-9590-381E5B888E1C} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
    Task: {56C31474-A0F4-4D8A-A9CF-2D614083BD7B} - System32\Tasks\GoogleUpdateTaskMachineUA1d08dcfa0b169c7 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
    Task: {5DC8A758-7F72-4714-8C45-227FBA8321AA} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-08-22] (NVIDIA Corporation)
    Task: {68A14238-2107-4AAD-99B6-9698ABE747D1} - \WPD\SqmUpload_S-1-5-21-1369535705-3180996973-1344369311-1002 -> No File <==== ATTENTION
    Task: {772DB716-10AA-4859-82E8-68B6C74D8169} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
    Task: {7BC8F984-3384-47D2-9918-68C310346142} - System32\Tasks\{DA8A087A-74BA-4ABC-BA5F-2A3C31ECF629} => C:\WINDOWS\system32\pcalua.exe -a "C:\murat\Games\max payne 2\Max Payne 2\MaxPayne2.exe" -d "C:\murat\Games\max payne 2\Max Payne 2" -c -developer
    Task: {81324717-C7B6-4DD3-93C1-BB0604E0D539} - System32\Tasks\RunAsStdUser Task => C:\Program Files (x86)\Moo0\VideoMinimizer 1.14\VideoMinimizer.exe [2013-05-27] (Moo0)
    Task: {85DAA7D9-D4D4-4124-B700-8C4D56DB472E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-07-07] (Microsoft Corporation)
    Task: {86837325-ED0E-4918-BC99-B1D101AA87EB} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft)
    Task: {8927CA2C-BB25-4D1F-8CE6-70B53C855799} - System32\Tasks\PDVDServ Task => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.EXE [2013-03-09] (CyberLink Corp.)
    Task: {930BA4ED-B9CE-4A1D-BA57-512589ACBABA} - System32\Tasks\Google Update => nircmd.exe <==== ATTENTION
    Task: {96942FE7-E74E-44BE-9B8C-48E4BB16C7D6} - System32\Tasks\DAWFORW => C:\Users\MURAT\AppData\Roaming\DAWFORW.exe <==== ATTENTION
    Task: {9834B9D1-FD2B-4B9E-B2F2-9DC34327B85C} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-07-07] (Microsoft Corporation)
    Task: {9E055724-951D-4346-B6D5-45E598FFF34F} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
    Task: {9F73C308-B408-425D-9D0C-24999B67179E} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
    Task: {A4FF4551-E936-4E33-936B-8FE65B1447BE} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
    Task: {A6A41542-7309-4AC2-ACF9-A9B77E650E1B} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_26_0_0_137_pepper.exe [2017-07-11] (Adobe Systems Incorporated)
    Task: {A75AB120-0353-4E7E-B08A-322F1398E66D} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-08-22] (NVIDIA Corporation)
    Task: {AB7500E5-B5A0-49C2-BF76-6DCA75A5B89C} - System32\Tasks\GoogleUpdateTaskMachineCore1d036a61208c28e => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
    Task: {AC011323-09C2-4A2E-B38F-6595C53E6319} - System32\Tasks\AutoKMS => C:\WINDOWS\AutoKMS\AutoKMS.exe [2017-04-05] ()
    Task: {AEA3603C-2CE5-4C7C-BDE1-0C30EF00B3AA} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-08-22] (NVIDIA Corporation)
    Task: {B780583C-A526-43C8-A7BF-2AE6BCFE3E8E} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
    Task: {BC9F307E-5B55-42FE-99E4-A7D89F77A802} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
    Task: {BEB81780-71AB-4553-AAC2-4F0F625A4659} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2016-06-01] (Synaptics Incorporated)
    Task: {BF361CD6-77D9-47F3-A14D-136D221D906B} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-06-28] ()
    Task: {C1AFAAB0-E50B-4D8F-864E-084E26007D01} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-08-03] (Piriform Ltd)
    Task: {C442288A-A5BD-490D-8AB0-B5F519F5C329} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
    Task: {C9F490D2-89BA-4375-9266-FDDA5D673845} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2017-07-20] (Microsoft Corporation)
    Task: {CA3943D4-1C5C-439B-8DBB-5649DA5A6AB4} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2017-04-12] (TODO: <Company name>)
    Task: {CDFC20E4-224F-4E1E-9152-F7010218D855} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
    Task: {CE3F34CB-B3D1-4AD9-ABB9-180BCBA6F9A6} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-07-11] (Adobe Systems Incorporated)
    Task: {CEED14AB-F96F-435A-8722-0B40FB893312} - System32\Tasks\Lenovo\Dependency Package Auto Update => C:\Program Files\Lenovo\iMController\AutoUpdate.exe [2014-05-22] ()
    Task: {D7E2635B-D8AC-4B81-8775-6D01E3DD46B4} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2014-12-12] ()
    Task: {D8538984-EE52-47BE-AE99-36B0A5BACA13} - System32\Tasks\Microsoft\VisualStudio\VSIX Auto Update 14 => C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\VSIXAutoUpdate.exe [2016-06-20] (Microsoft Corporation)
    Task: {DC8BE370-05DD-4BD3-A1A3-5F77352F63B0} - System32\Tasks\{18EA737D-01A2-4733-B8FA-21FE00FC0D0A} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\BandiMPEG1\uninstall.exe"
    Task: {E3359997-9778-419A-A5F7-88A5973C3F42} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-08-22] (NVIDIA Corporation)
    Task: {EA995C40-76E8-4A64-8799-5DB09A73DC5E} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-08-22] (NVIDIA Corporation)
    Task: {F15A8073-748E-4AA1-BCEC-889A09F9DF7F} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-08-22] (NVIDIA Corporation)
    Task: {F509BBEC-7997-4498-98FA-37209226F9BB} - System32\Tasks\AdobeAAMUpdater-1.0-JMZ-jmz => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-08-05] (Adobe Systems Incorporated)
    Task: {F58104EF-813B-47B2-8E3C-F42B5D24DA9B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2017-07-20] (Microsoft Corporation)
    Task: {F58608D9-8CEC-4049-96C6-45F5CB03D492} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
    Task: {FD306803-A87A-472F-A395-C7EAD3DB84AD} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-08-22] (NVIDIA Corporation)
    Task: {FD638F6D-0A54-4768-984C-EFCD9A82CC93} - System32\Tasks\{C1024673-12B9-4425-8ACB-A7FC223EE513} => C:\WINDOWS\system32\pcalua.exe -a C:\murat\Games\cs2d\cs2d\Launcher.exe -d C:\murat\Games\cs2d\cs2d

    (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

    Task: C:\WINDOWS\Tasks\DAWFORW.job => C:\Users\MURAT\AppData\Roaming\DAWFORW.exe <==== ATTENTION
    Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1d036a61208c28e.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\WINDOWS\Tasks\update-S-1-5-21-1369535705-3180996973-1344369311-1002.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
    Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

    ==================== Shortcuts & WMI ========================

    (The entries could be listed to be restored or removed.)


    ShortcutWithArgument: C:\Users\MURAT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Node.js\Node.js command prompt.lnk -> C:\Windows\SysWOW64\cmd.exe (Microsoft Corporation) -> /k "C:\Program Files (x86)\nodejs\nodevars.bat"
    ShortcutWithArgument: C:\Users\MURAT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Uygulamaları\TwitchAlerts Stream Labels.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=kgmggmdngboajiakmbpdknfpdelbjbcg
    ShortcutWithArgument: C:\Users\MURAT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Anaconda2 (64-bit)\Anaconda Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> "/K" C:\Users\MURAT\Anaconda2\Scripts\activate.bat C:\Users\MURAT\Anaconda2

    ==================== Loaded Modules (Whitelisted) ==============

    2017-04-09 23:41 - 2017-08-22 04:01 - 001267320 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
    2014-09-16 01:04 - 2012-04-24 13:43 - 000390632 ____N () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
    2017-05-31 05:02 - 2017-08-22 02:10 - 000133752 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
    2017-03-18 23:58 - 2017-03-18 23:58 - 000138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
    2017-07-20 09:33 - 2017-07-20 09:33 - 008929472 _____ () C:\Program Files\Microsoft Office\root\Office16\1033\GrooveIntlResource.dll
    2017-09-07 16:03 - 2010-07-29 18:19 - 000293888 _____ () C:\Program Files (x86)\Total Video Converter\TVCShellExtx64.dll
    2017-03-18 23:59 - 2017-03-20 07:04 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
    2017-08-29 09:20 - 2017-08-23 11:48 - 003824472 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.113\libglesv2.dll
    2017-08-29 09:20 - 2017-08-23 11:48 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.113\libegl.dll
    2014-09-16 00:25 - 2010-10-26 07:40 - 000049056 _____ () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
    2015-03-07 03:07 - 2015-03-07 03:07 - 000908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
    2016-09-30 00:13 - 2016-09-30 00:13 - 001096824 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
    2015-03-07 03:07 - 2015-03-07 03:07 - 000060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
    2016-09-30 00:13 - 2016-09-30 00:13 - 000241784 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
    2017-08-06 23:17 - 2017-08-06 23:20 - 000019968 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35063.13610.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
    2017-08-06 23:17 - 2017-08-06 23:20 - 028986880 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35063.13610.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
    2017-08-06 23:17 - 2017-08-06 23:20 - 000428032 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35063.13610.0_x64__8wekyb3d8bbwe\Microsoft.Photos.AGM.Native.Windows.dll
    2017-08-06 23:17 - 2017-08-06 23:20 - 020510208 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35063.13610.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll
    2017-08-06 23:17 - 2017-08-06 23:20 - 002339328 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35063.13610.0_x64__8wekyb3d8bbwe\MediaEngine.dll
    2017-08-06 23:17 - 2017-08-06 23:20 - 003041792 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35063.13610.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll
    2017-05-31 23:42 - 2017-05-31 23:42 - 003139496 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35063.13610.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
    2017-06-16 00:42 - 2017-06-16 00:45 - 000046080 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35063.13610.0_x64__8wekyb3d8bbwe\Microsoft.Photos.Edit.Services.dll
    2017-08-06 23:17 - 2017-08-06 23:20 - 001361920 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35063.13610.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll
    2016-03-06 21:43 - 2015-12-23 18:17 - 000625440 _____ () C:\Program Files (x86)\IObit\LiveUpdate\ProductStatistics.dll
    2014-09-16 00:19 - 2013-09-16 22:20 - 001242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
    2017-04-09 23:42 - 2017-08-22 04:01 - 069807736 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
    2017-04-09 23:41 - 2017-08-22 04:01 - 001040504 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
    2015-09-22 03:08 - 2017-08-05 00:19 - 000678176 _____ () C:\Program Files (x86)\Steam\SDL2.dll
    2015-09-22 03:08 - 2016-09-01 04:02 - 004969248 _____ () C:\Program Files (x86)\Steam\v8.dll
    2015-09-22 03:08 - 2016-09-01 04:02 - 001195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
    2015-09-22 03:08 - 2016-09-01 04:02 - 001563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
    2015-09-22 03:08 - 2017-09-07 07:51 - 002505504 _____ () C:\Program Files (x86)\Steam\video.dll
    2015-09-22 03:08 - 2016-01-27 10:49 - 000491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
    2015-09-22 03:08 - 2016-01-27 10:49 - 002549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
    2015-09-22 03:08 - 2016-01-27 10:49 - 000442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
    2015-09-22 03:08 - 2016-01-27 10:49 - 000332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
    2015-09-22 03:08 - 2016-01-27 10:49 - 000485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
    2015-09-22 03:08 - 2017-09-07 07:51 - 000885024 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
    2016-03-09 03:31 - 2016-07-05 01:17 - 000266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
    2016-12-12 23:02 - 2017-07-18 01:50 - 073115424 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
    2017-06-08 23:33 - 2017-05-17 04:54 - 000678176 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\SDL2.dll
    2015-09-22 03:08 - 2015-09-25 02:52 - 000119208 _____ () C:\Program Files (x86)\Steam\winh264.dll

    ==================== Alternate Data Streams (Whitelisted) =========

    (If an entry is included in the fixlist, only the ADS will be removed.)

    AlternateDataStreams: C:\ProgramData:$SS_DESCRIPTOR_SBXNV9VVGV1BFSBGTJNH6LBYWJSBYTX606GBYNVFSVF7VB4VP4GV [971]
    AlternateDataStreams: C:\Users\All Users:$SS_DESCRIPTOR_SBXNV9VVGV1BFSBGTJNH6LBYWJSBYTX606GBYNVFSVF7VB4VP4GV [971]
    AlternateDataStreams: C:\ProgramData\Application Data:$SS_DESCRIPTOR_SBXNV9VVGV1BFSBGTJNH6LBYWJSBYTX606GBYNVFSVF7VB4VP4GV [971]

    ==================== Safe Mode (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


    ==================== Association (Whitelisted) ===============

    (If an entry is included in the fixlist, the registry item will be restored to default or removed.)


    ==================== Internet Explorer trusted/restricted ===============

    (If an entry is included in the fixlist, it will be removed from the registry.)


    ==================== Hosts content: ===============================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2013-08-22 16:25 - 2015-08-18 12:34 - 000000851 _____ C:\WINDOWS\system32\Drivers\etc\hosts

    127.0.0.1 localhost

    ==================== Other Areas ============================

    (Currently there is no automatic fix for this section.)

    HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\Control Panel\Desktop\\Wallpaper -> C:\murat\Pictures\16948_the_lord_of_the_rings.jpg
    DNS Servers: 8.8.8.8 - 8.8.4.4
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Prompt)
    Windows Firewall is enabled.

    ==================== MSCONFIG/TASK MANAGER disabled items ==

    HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
    HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
    HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager"
    HKLM\...\StartupApproved\Run32: => "Lightshot"
    HKLM\...\StartupApproved\Run32: => "RazerCortex"
    HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\...\StartupApproved\Run: => "DAEMON Tools Lite"
    HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\...\StartupApproved\Run: => "Skype"
    HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
    HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\...\StartupApproved\Run: => "Steam"
    HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\...\StartupApproved\Run: => "Discord"
    HKU\S-1-5-21-1369535705-3180996973-1344369311-1002\...\StartupApproved\Run: => "Voobly"

    ==================== FirewallRules (Whitelisted) ===============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    FirewallRules: [{FC80623B-5CD9-45F3-8127-C3252915F6EF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{DE6BBE5B-472F-4173-9B6F-277E422EF1A6}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
    FirewallRules: [{424C50C4-C08B-4B97-ABAC-1D201363E762}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
    FirewallRules: [{BE3D91E5-7D59-4026-8765-6351B07664F9}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
    FirewallRules: [TCP Query User{E7793E56-311E-4B78-873C-55F71B86E2D2}C:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe
    FirewallRules: [UDP Query User{E81CB370-5D23-44BB-AC32-562ABD9CDCD6}C:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe
    FirewallRules: [TCP Query User{663D23DC-46C0-437E-B9AA-2A996C8339EF}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
    FirewallRules: [UDP Query User{52812015-F4ED-4B27-B1FD-EB58F21B48B9}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
    FirewallRules: [TCP Query User{01561D79-CF2A-418C-8213-22252476FFE4}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
    FirewallRules: [UDP Query User{CB6B81CE-5A4F-424F-B19D-A1830CA664EF}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
    FirewallRules: [TCP Query User{3AC5BA2E-C314-4B8C-90F0-57B17886DBC6}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
    FirewallRules: [UDP Query User{7B8236C5-CE61-4A4E-BDA6-0CACA3D3D707}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
    FirewallRules: [TCP Query User{A6555956-F100-40EB-877E-F2AA8AFBB56B}C:\program files (x86)\google\chrome\application\chrome.exe] => (Block) C:\program files (x86)\google\chrome\application\chrome.exe
    FirewallRules: [UDP Query User{7D9F8CFD-0C73-49E0-86BC-2D297CA73205}C:\program files (x86)\google\chrome\application\chrome.exe] => (Block) C:\program files (x86)\google\chrome\application\chrome.exe
    FirewallRules: [TCP Query User{D8FFB266-E423-4BC8-932E-1E192B413307}C:\users\murat\anaconda2\pythonw.exe] => (Allow) C:\users\murat\anaconda2\pythonw.exe
    FirewallRules: [UDP Query User{BE3E8BCA-3786-4C85-86CB-914AF96E8930}C:\users\murat\anaconda2\pythonw.exe] => (Allow) C:\users\murat\anaconda2\pythonw.exe
    FirewallRules: [TCP Query User{A0DD0300-BDBE-4D90-82C8-73AD8C2B2C9A}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe
    FirewallRules: [UDP Query User{EC312780-063B-4683-8A6D-5A73FF37F98C}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe
    FirewallRules: [{36B1969F-24DC-4CCC-A5D8-99A44ED7D2FC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dead by Daylight\DeadByDaylight.exe
    FirewallRules: [{C68D56BC-C396-4793-B751-9DECB4F624A5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dead by Daylight\DeadByDaylight.exe
    FirewallRules: [{1670FDC3-4C7A-418F-8D3C-1E8E56CC183D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
    FirewallRules: [{70552DE3-13F3-4BFF-AA3B-F7C7090EA671}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
    FirewallRules: [TCP Query User{54177559-C694-46B5-8221-F8542A169847}C:\users\murat\anaconda2\python.exe] => (Allow) C:\users\murat\anaconda2\python.exe
    FirewallRules: [UDP Query User{619093C8-0BAB-4AED-B899-26BA1860A1E8}C:\users\murat\anaconda2\python.exe] => (Allow) C:\users\murat\anaconda2\python.exe
    FirewallRules: [TCP Query User{54E91E80-767E-46CB-81AA-07BA0238F84A}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
    FirewallRules: [UDP Query User{E32ED6ED-CFC1-4758-AF90-8A26AAD68739}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
    FirewallRules: [{D367D2E9-8753-4B2F-96C9-596F99A8CA8C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
    FirewallRules: [{6DD355AE-65BA-459B-A6A5-A6C3EB12F9F1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
    FirewallRules: [{2160A132-7020-4D60-B8B2-FEBC487E07C2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
    FirewallRules: [{9BA25AF3-71BB-49E3-B615-A8ED18F483CF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
    FirewallRules: [{83218537-4379-4C17-BBDF-6C300884EC24}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    FirewallRules: [TCP Query User{5097DCCD-3E30-46E8-AF9F-F975630E14FD}C:\murat\games\cs2d\cs2d\cs2d.exe] => (Allow) C:\murat\games\cs2d\cs2d\cs2d.exe
    FirewallRules: [UDP Query User{AE862E68-CBB7-451E-AA02-08CBD7910C0C}C:\murat\games\cs2d\cs2d\cs2d.exe] => (Allow) C:\murat\games\cs2d\cs2d\cs2d.exe
    FirewallRules: [TCP Query User{A482A2EC-7FE5-4ABA-B15D-0E5969741FE3}C:\program files (x86)\steam\steamapps\common\life is strange\binaries\win32\lifeisstrange.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\life is strange\binaries\win32\lifeisstrange.exe
    FirewallRules: [UDP Query User{DDC7E202-BE48-47A0-8348-ADDDADA4EA9A}C:\program files (x86)\steam\steamapps\common\life is strange\binaries\win32\lifeisstrange.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\life is strange\binaries\win32\lifeisstrange.exe
    FirewallRules: [{64189BFA-57E8-41AB-BFB2-BB71CC4EE58E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
    FirewallRules: [TCP Query User{7B929729-0803-426F-B2D3-9E6CB99AD2E0}C:\users\murat\anaconda2\pythonw.exe] => (Allow) C:\users\murat\anaconda2\pythonw.exe
    FirewallRules: [UDP Query User{8854D1C0-F451-49BD-A45E-12CF6EFF418B}C:\users\murat\anaconda2\pythonw.exe] => (Allow) C:\users\murat\anaconda2\pythonw.exe
    FirewallRules: [TCP Query User{091ACD08-FB95-41F5-BE9C-F56741F935EF}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
    FirewallRules: [UDP Query User{CC67E552-72F7-40A8-BBC3-EAA2BFE23866}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
    FirewallRules: [TCP Query User{64080E26-7521-4CB7-ACF5-CC27B43FF3E0}C:\program files\unity\editor\unity.exe] => (Allow) C:\program files\unity\editor\unity.exe
    FirewallRules: [TCP Query User{DA847E79-39AC-45E3-991A-7E2A766CE545}C:\program files (x86)\microsoft visual studio 14.0\common7\ide\devenv.exe] => (Allow) C:\program files (x86)\microsoft visual studio 14.0\common7\ide\devenv.exe
    FirewallRules: [UDP Query User{4C41DD1D-F67D-4290-938B-0907947C27CD}C:\program files (x86)\microsoft visual studio 14.0\common7\ide\devenv.exe] => (Allow) C:\program files (x86)\microsoft visual studio 14.0\common7\ide\devenv.exe
    FirewallRules: [{07692340-5E45-4277-BAB7-8035CCE37264}] => (Allow) C:\program files\unity\editor\unity.exe
    FirewallRules: [{C29D4D7D-B576-4A9E-B930-3E741EFF460E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
    FirewallRules: [{8CD42DF5-69B9-4737-B79C-C2BFD475A367}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe

    ==================== Restore Points =========================

    28-08-2017 13:24:10 Zamanlanmış Denetim Noktası
    05-09-2017 14:04:17 Windows Modül Yükleyicisi

    ==================== Faulty Device Manager Devices =============


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (09/11/2017 02:04:30 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Hatalı uygulama adı: BSvcProcessor.exe, sürüm: 1.0.6.0, zaman damgası: 0x563b2359
    Hatalı modül adı: BSvcProcessor.exe, sürüm: 1.0.6.0, zaman damgası: 0x563b2359
    Özel durum kodu: 0xc0000005
    Hata uzaklığı 0x00007b80
    Hatalı işlem kimliği: 0x3278
    Uygulama başlangıç zamanı: 0x01d32aedb9f5fc13
    Hatalı uygulama yolu: C:\Users\MURAT\AppData\Local\Microsoft\BingSvc\BSvcProcessor.exe
    Hatalı modül yolu: C:\Users\MURAT\AppData\Local\Microsoft\BingSvc\BSvcProcessor.exe
    Rapor kimliği: a2ccbfce-b932-427e-88e5-1611e3f39d56
    Hatalı paket tam adı:
    Hatalı paketle ilgili uygulama kimliği:

    Error: (09/11/2017 01:54:30 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Hatalı uygulama adı: BSvcProcessor.exe, sürüm: 1.0.6.0, zaman damgası: 0x563b2359
    Hatalı modül adı: BSvcProcessor.exe, sürüm: 1.0.6.0, zaman damgası: 0x563b2359
    Özel durum kodu: 0xc0000005
    Hata uzaklığı 0x00007b80
    Hatalı işlem kimliği: 0x1728
    Uygulama başlangıç zamanı: 0x01d32aec544b2937
    Hatalı uygulama yolu: C:\Users\MURAT\AppData\Local\Microsoft\BingSvc\BSvcProcessor.exe
    Hatalı modül yolu: C:\Users\MURAT\AppData\Local\Microsoft\BingSvc\BSvcProcessor.exe
    Rapor kimliği: ff2eeadb-ec46-4fbf-99c3-01d8b28bf97d
    Hatalı paket tam adı:
    Hatalı paketle ilgili uygulama kimliği:

    Error: (09/11/2017 01:44:30 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Hatalı uygulama adı: BSvcProcessor.exe, sürüm: 1.0.6.0, zaman damgası: 0x563b2359
    Hatalı modül adı: BSvcProcessor.exe, sürüm: 1.0.6.0, zaman damgası: 0x563b2359
    Özel durum kodu: 0xc0000005
    Hata uzaklığı 0x00007b80
    Hatalı işlem kimliği: 0x3e90
    Uygulama başlangıç zamanı: 0x01d32aeaee9f9012
    Hatalı uygulama yolu: C:\Users\MURAT\AppData\Local\Microsoft\BingSvc\BSvcProcessor.exe
    Hatalı modül yolu: C:\Users\MURAT\AppData\Local\Microsoft\BingSvc\BSvcProcessor.exe
    Rapor kimliği: 0f6e6a36-d364-4deb-a8b3-1909bfedf457
    Hatalı paket tam adı:
    Hatalı paketle ilgili uygulama kimliği:

    Error: (09/11/2017 01:34:30 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Hatalı uygulama adı: BSvcProcessor.exe, sürüm: 1.0.6.0, zaman damgası: 0x563b2359
    Hatalı modül adı: BSvcProcessor.exe, sürüm: 1.0.6.0, zaman damgası: 0x563b2359
    Özel durum kodu: 0xc0000005
    Hata uzaklığı 0x00007b80
    Hatalı işlem kimliği: 0x33cc
    Uygulama başlangıç zamanı: 0x01d32ae988f4b25b
    Hatalı uygulama yolu: C:\Users\MURAT\AppData\Local\Microsoft\BingSvc\BSvcProcessor.exe
    Hatalı modül yolu: C:\Users\MURAT\AppData\Local\Microsoft\BingSvc\BSvcProcessor.exe
    Rapor kimliği: 3111443d-f785-48d7-9ef5-6ee10e4b94ef
    Hatalı paket tam adı:
    Hatalı paketle ilgili uygulama kimliği:

    Error: (09/11/2017 01:24:29 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Hatalı uygulama adı: BSvcProcessor.exe, sürüm: 1.0.6.0, zaman damgası: 0x563b2359
    Hatalı modül adı: BSvcProcessor.exe, sürüm: 1.0.6.0, zaman damgası: 0x563b2359
    Özel durum kodu: 0xc0000005
    Hata uzaklığı 0x00007b80
    Hatalı işlem kimliği: 0x3d48
    Uygulama başlangıç zamanı: 0x01d32ae8234772bb
    Hatalı uygulama yolu: C:\Users\MURAT\AppData\Local\Microsoft\BingSvc\BSvcProcessor.exe
    Hatalı modül yolu: C:\Users\MURAT\AppData\Local\Microsoft\BingSvc\BSvcProcessor.exe
    Rapor kimliği: 7a29ffcd-49de-413a-88ae-6908ab464243
    Hatalı paket tam adı:
    Hatalı paketle ilgili uygulama kimliği:

    Error: (09/11/2017 01:14:29 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Hatalı uygulama adı: BSvcProcessor.exe, sürüm: 1.0.6.0, zaman damgası: 0x563b2359
    Hatalı modül adı: BSvcProcessor.exe, sürüm: 1.0.6.0, zaman damgası: 0x563b2359
    Özel durum kodu: 0xc0000005
    Hata uzaklığı 0x00007b80
    Hatalı işlem kimliği: 0x4240
    Uygulama başlangıç zamanı: 0x01d32ae6bd9a0aee
    Hatalı uygulama yolu: C:\Users\MURAT\AppData\Local\Microsoft\BingSvc\BSvcProcessor.exe
    Hatalı modül yolu: C:\Users\MURAT\AppData\Local\Microsoft\BingSvc\BSvcProcessor.exe
    Rapor kimliği: 9ef040b8-9703-4d49-80d5-e0cc149b7fa0
    Hatalı paket tam adı:
    Hatalı paketle ilgili uygulama kimliği:

    Error: (09/11/2017 01:04:29 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Hatalı uygulama adı: BSvcProcessor.exe, sürüm: 1.0.6.0, zaman damgası: 0x563b2359
    Hatalı modül adı: BSvcProcessor.exe, sürüm: 1.0.6.0, zaman damgası: 0x563b2359
    Özel durum kodu: 0xc0000005
    Hata uzaklığı 0x00007b80
    Hatalı işlem kimliği: 0x26c4
    Uygulama başlangıç zamanı: 0x01d32ae557ec9b55
    Hatalı uygulama yolu: C:\Users\MURAT\AppData\Local\Microsoft\BingSvc\BSvcProcessor.exe
    Hatalı modül yolu: C:\Users\MURAT\AppData\Local\Microsoft\BingSvc\BSvcProcessor.exe
    Rapor kimliği: 9b89dd5e-65f0-4e07-8055-c2691d31a696
    Hatalı paket tam adı:
    Hatalı paketle ilgili uygulama kimliği:

    Error: (09/11/2017 12:54:29 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Hatalı uygulama adı: BSvcProcessor.exe, sürüm: 1.0.6.0, zaman damgası: 0x563b2359
    Hatalı modül adı: BSvcProcessor.exe, sürüm: 1.0.6.0, zaman damgası: 0x563b2359
    Özel durum kodu: 0xc0000005
    Hata uzaklığı 0x00007b80
    Hatalı işlem kimliği: 0x29f8
    Uygulama başlangıç zamanı: 0x01d32ae3f23f4979
    Hatalı uygulama yolu: C:\Users\MURAT\AppData\Local\Microsoft\BingSvc\BSvcProcessor.exe
    Hatalı modül yolu: C:\Users\MURAT\AppData\Local\Microsoft\BingSvc\BSvcProcessor.exe
    Rapor kimliği: cc65bd1e-07a5-44f5-8061-ee91285e1107
    Hatalı paket tam adı:
    Hatalı paketle ilgili uygulama kimliği:

    Error: (09/11/2017 12:44:29 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Hatalı uygulama adı: BSvcProcessor.exe, sürüm: 1.0.6.0, zaman damgası: 0x563b2359
    Hatalı modül adı: BSvcProcessor.exe, sürüm: 1.0.6.0, zaman damgası: 0x563b2359
    Özel durum kodu: 0xc0000005
    Hata uzaklığı 0x00007b80
    Hatalı işlem kimliği: 0x4098
    Uygulama başlangıç zamanı: 0x01d32ae28c91b739
    Hatalı uygulama yolu: C:\Users\MURAT\AppData\Local\Microsoft\BingSvc\BSvcProcessor.exe
    Hatalı modül yolu: C:\Users\MURAT\AppData\Local\Microsoft\BingSvc\BSvcProcessor.exe
    Rapor kimliği: 14589ca5-dbb8-449f-bdd8-3a2ccda6db4c
    Hatalı paket tam adı:
    Hatalı paketle ilgili uygulama kimliği:

    Error: (09/11/2017 12:34:29 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Hatalı uygulama adı: BSvcProcessor.exe, sürüm: 1.0.6.0, zaman damgası: 0x563b2359
    Hatalı modül adı: BSvcProcessor.exe, sürüm: 1.0.6.0, zaman damgası: 0x563b2359
    Özel durum kodu: 0xc0000005
    Hata uzaklığı 0x00007b80
    Hatalı işlem kimliği: 0x289c
    Uygulama başlangıç zamanı: 0x01d32ae126e4538f
    Hatalı uygulama yolu: C:\Users\MURAT\AppData\Local\Microsoft\BingSvc\BSvcProcessor.exe
    Hatalı modül yolu: C:\Users\MURAT\AppData\Local\Microsoft\BingSvc\BSvcProcessor.exe
    Rapor kimliği: c3f1549f-5a3f-47d3-9667-d276296851da
    Hatalı paket tam adı:
    Hatalı paketle ilgili uygulama kimliği:


    System errors:
    =============
    Error: (09/11/2017 02:14:03 PM) (Source: DCOM) (EventID: 10010) (User: JMZ)
    Description: {DABF28BE-F6B4-4E40-8F40-C4FB26F3116C} sunucusu belirtilen zaman aşımı süresi içinde DCOM'a kayıt yaptıramadı.

    Error: (09/11/2017 02:09:46 PM) (Source: DCOM) (EventID: 10010) (User: JMZ)
    Description: {DABF28BE-F6B4-4E40-8F40-C4FB26F3116C} sunucusu belirtilen zaman aşımı süresi içinde DCOM'a kayıt yaptıramadı.

    Error: (09/11/2017 02:09:16 PM) (Source: DCOM) (EventID: 10010) (User: JMZ)
    Description: {DABF28BE-F6B4-4E40-8F40-C4FB26F3116C} sunucusu belirtilen zaman aşımı süresi içinde DCOM'a kayıt yaptıramadı.

    Error: (09/11/2017 01:28:55 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
    Description: uygulamaya özgü izin ayarları
    {D63B10C5-BB46-4990-A94F-E40B9D520160}
    CLSID'sine ve
    {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
    APPID'sine sahip COM Sunucu uygulaması için, Yok SID (Yok) uygulama kapsayıcısında çalışan LocalHost (LRPC Kullanan) adresindeki SID değeri (S-1-5-18) olan NT AUTHORITY\SYSTEM kullanıcısına Yerel Etkinleştirme izni vermiyor. Bu güvenlik izni, Bileşen Hizmetleri yönetim aracı kullanılarak değiştirilebilir.

    Error: (09/11/2017 12:05:58 PM) (Source: DCOM) (EventID: 10010) (User: JMZ)
    Description: {DABF28BE-F6B4-4E40-8F40-C4FB26F3116C} sunucusu belirtilen zaman aşımı süresi içinde DCOM'a kayıt yaptıramadı.

    Error: (09/11/2017 09:46:51 AM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
    Description: {F3B4E234-7A68-4E43-B813-E4BA55A065F6} sunucusu belirtilen zaman aşımı süresi içinde DCOM'a kayıt yaptıramadı.

    Error: (09/11/2017 09:37:02 AM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
    Description: {784E29F4-5EBE-4279-9948-1E8FE941646D} sunucusu belirtilen zaman aşımı süresi içinde DCOM'a kayıt yaptıramadı.

    Error: (09/11/2017 02:08:53 AM) (Source: DCOM) (EventID: 10010) (User: JMZ)
    Description: {DABF28BE-F6B4-4E40-8F40-C4FB26F3116C} sunucusu belirtilen zaman aşımı süresi içinde DCOM'a kayıt yaptıramadı.

    Error: (09/11/2017 01:19:01 AM) (Source: DCOM) (EventID: 10010) (User: JMZ)
    Description: {DABF28BE-F6B4-4E40-8F40-C4FB26F3116C} sunucusu belirtilen zaman aşımı süresi içinde DCOM'a kayıt yaptıramadı.

    Error: (09/10/2017 11:14:22 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: Microsoft Office Click-to-Run Service hizmeti beklenmeyen bir şekilde sonlandırıldı. Bu durum 6 defa oluştu.


    CodeIntegrity:
    ===================================
    Date: 2017-09-08 17:41:54.525
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Program Files (x86)\Common Files\Avnex\vcs64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2017-09-08 11:14:47.642
    Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume5\Program Files\Windows Defender\NisSrv.exe that did not meet the Custom 3 / Antimalware signing level requirements.

    Date: 2017-09-08 11:02:33.396
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Program Files (x86)\Common Files\Avnex\vcs64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2017-09-08 10:23:32.321
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Program Files (x86)\Common Files\Avnex\vcs64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2017-08-25 22:03:49.533
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Program Files (x86)\Common Files\Avnex\vcs64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2017-08-14 11:26:34.058
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Program Files (x86)\Common Files\Avnex\vcs64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2017-08-06 23:33:24.510
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Program Files (x86)\Common Files\Avnex\vcs64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2017-07-16 00:28:05.369
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Program Files (x86)\Common Files\Avnex\vcs64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2017-07-14 15:45:53.517
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Program Files (x86)\Common Files\Avnex\vcs64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

    Date: 2017-07-13 16:12:43.103
    Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Program Files (x86)\Common Files\Avnex\vcs64.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


    ==================== Memory info ===========================

    Processor: Intel(R) Core(TM) i7-4510U CPU @ 2.00GHz
    Percentage of memory in use: 46%
    Total physical RAM: 8084.27 MB
    Available physical RAM: 4320.82 MB
    Total Virtual: 16163.27 MB
    Available Virtual: 11343.28 MB

    ==================== Drives ================================

    Drive c: (Windows8_OS) (Fixed) (Total:889.66 GB) (Free:343.48 GB) NTFS ==>[system with boot components (obtained from drive)]
    Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:16.22 GB) NTFS

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (Size: 931.5 GB) (Disk ID: B24CA18F)

    Partition: GPT.

    ==================== End of Addition.txt ============================
     
  13. TwinHeadedEagle

    TwinHeadedEagle Removal Expert
    Staff Member

    Mar 8, 2013
    21,195
    2,608
    Malware Removal, Gaming
    Windows 7
    ESET
    [​IMG] Fix with Farbar Recovery Scan Tool

    [​IMG] This fix was created for this user for use on that particular machine. [​IMG]
    [​IMG] Running it on another one may cause damage and render the system unstable. [​IMG]

    Download attached fixlist.txt file and save it to the Desktop:

    Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

    • Right-click on [​IMG] icon and select [​IMG] Run as Administrator to start the tool.
      (XP users click run after receipt of Windows Security Warning - Open File).
    • Press the Fix button just once and wait.
    • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
    • When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

    Please attach it to your reply.
     

    Attached Files:

  14. jmz2d

    jmz2d New Member

    Sep 6, 2017
    11
    0
    Gallifrey
    Windows 10
    Malwarebytes
    I can finally see upload a file button -hurray- Here it is:
     

    Attached Files:

  15. TwinHeadedEagle

    TwinHeadedEagle Removal Expert
    Staff Member

    Mar 8, 2013
    21,195
    2,608
    Malware Removal, Gaming
    Windows 7
    ESET
    How is your computer behaving now?
     
  16. jmz2d

    jmz2d New Member

    Sep 6, 2017
    11
    0
    Gallifrey
    Windows 10
    Malwarebytes
    i still cant start windows defender, Error Code: 0x8007041d
     
  17. TwinHeadedEagle

    TwinHeadedEagle Removal Expert
    Staff Member

    Mar 8, 2013
    21,195
    2,608
    Malware Removal, Gaming
    Windows 7
    ESET
  18. jmz2d

    jmz2d New Member

    Sep 6, 2017
    11
    0
    Gallifrey
    Windows 10
    Malwarebytes
    Everything looks much better now after using tweaking repair tool, thanks a lot.
     
Loading...
Similar Threads Forum Date
Unable to use Windows Defender Security Center after installing COMODO Firewall Comodo Aug 14, 2017
Windows Security Center can't be started Malware Removal Assistance For Windows Jun 24, 2017
SOLVED Windows Security Center Starting Problem Malware Removal Assistance For Windows May 15, 2017