What’s new in Macrium Reflect 7.2?

I just ran a new backup of Win7.

&#;

I see in africanamericanchildrenbooks.com it says Bitdefender Andivirus and Antispyware (Disabled)&#;

Bitdefender shows that it is enabled.

&#;

I found in africanamericanchildrenbooks.com that EMCO Remote Installer was installed.&#; I have uninstlled it.

&#;

I see in africanamericanchildrenbooks.com "Faulty Device Manager Devices"&#; Please help me fix these.

) AV: Bitdefender Antivirus (Disabled - Up to date) {0E17DB7D-A20FCE-B95BDB0CDFE} AS: Bitdefender Antispyware (Disabled - Up to date) {BADEB-2CAA9A5} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) &#;Torrent (HKU\S\\uTorrent) (Version: - BitTorrent Inc.) 32 Bit HP CIO Components Installer (HKLM\\{B20ADDBED84BEF59}) (Version: - Hewlett-Packard) Hidden 7-Zip (HKLM\\7-Zip) (Version: - Igor Pavlov) AboutTime (HKLM\\AboutTime_is1) (Version: - ) ActivePerl Build (HKLM\\{1DF73CAEC-ABC90A1A}) (Version: - ActiveState) Adobe Acrobat XI Pro (HKLM\\{AC76BAFFFF}) (Version: - Adobe Systems) Adobe AIR (HKLM\\Adobe AIR) (Version: - Adobe Systems Incorporated) Adobe Flash Player 32 ActiveX (HKLM\\Adobe Flash Player ActiveX) (Version: - Adobe Systems Incorporated) Adobe Flash Player 32 NPAPI (HKLM\\Adobe Flash Player NPAPI) (Version: - Adobe) Adobe Shockwave Player (HKLM\\{3BDFAB7-B9BBE07C9AA}) (Version: - Adobe Systems, Inc) Adobe Shockwave Player (HKLM\\Adobe Shockwave Player) (Version: - Adobe Systems, Inc.) Advanced Port Scanner (HKLM\\{1FF5-CAABFBE7C49B}) (Version: - Famatech) ALLDATA Repair (HKLM\\{A5A-E0CE0B-AEA5}) (Version: - ALLDATA Corporation) Altap Salamander (x86) (HKLM\\Altap Salamander (x86)) (Version: - ALTAP) Angry IP Scanner (HKLM\\Angry IP Scanner) (Version: - Angry IP Scanner) AnyDesk (HKLM\\AnyDesk) (Version: ad - philandro Software GmbH) AnyTime Organizer (HKLM\\AnyTime Organizer) (Version: - Individual Software, Inc) Assessments on Client (HKLM\\{C1CAAE9D-A3ABCA}) (Version: - Microsoft) Hidden Authy Desktop (HKU\S\\authy-electron) (Version: - Twilio Inc.) AutoIt Debugger (HKLM\\AutoIt Debugger) (Version: - Essential Software) AutoIt v (HKLM\\AutoItv3) (Version: - AutoIt Team) BCL easyConverter SDK 3 (Word Version) (HKLM\\{AABFB-1ACFBFBCABE}) (Version: - BCL Technologies) Beyond Compare (HKLM\\BeyondCompare4_is1) (Version: - Scooter Software) Bit Che (HKLM\\{D9DA5CFF-B5EE8}_is1) (Version: build 50 - Convivea Inc.) Bitdefender Agent (HKLM\\Bitdefender Agent) (Version: - Bitdefender) Bitdefender Antivirus Plus (HKLM\\Bitdefender) (Version: - Bitdefender) Bitvise SSH Client - FlowSshNet (x86) (HKLM\\{79EEBEAFEFFDD4A}) (Version: - Bitvise Limited) Hidden Bitvise SSH Client (remove only) (HKLM\\BvSshClient) (Version: - Bitvise Limited) Bonjour (HKLM\\{DAADC1-BCDDB9D1A}) (Version: - Apple Inc.) bpd_scan (HKLM\\{0E52A52C-EC-AA1BBBEE}) (Version: - Hewlett-Packard) Hidden CCleaner (HKLM\\CCleaner) (Version: - Piriform) ClipX (HKLM\\ClipX) (Version: - ) Compatibility Pack for the Office system (HKLM\\{FF1CE}) (Version: - Microsoft Corporation) Corel Update Manager (HKLM\\{FEEDDF33D62C6A5}) (Version: - Corel corporation) Hidden DAZzle (HKLM\\DAZzle) (Version: - ) DB Browser for SQLite (HKLM\\SqliteBrowser3) (Version: - oldsch00l) DebugBar v for Internet Explorer (remove only) (HKLM\\DebugBar) (Version: - Core Services) Debut Video Capture Software (HKLM\\Debut) (Version: - NCH Software) Dolby Advanced Audio v2 (HKLM\\{B9E70C7A-9FAA4A3-BFA3C3BF}) (Version: - Dolby Laboratories Inc) DuckCapture Standard (HKLM\\DuckCapture_is1) (Version: - DuckLink) Duplicate File Detective 6 (HKLM\\{9BDBADFBEB78B3EC4}) (Version: - Key Metric Software) DYMO Printable Postage (HKLM\\Printable africanamericanchildrenbooks.com) (Version: - Endicia Internet Postage) EasyBCD (HKLM\\EasyBCD) (Version: - NeoSmart Technologies) EMCO Remote Installer Free (HKLM\\{3DFAB8BE6D-A49CDCB22F40}) (Version: - EMCO Software) Epson Customer Participation (HKLM\\{FAACFC}) (Version: - SEIKO EPSON CORPORATION) Epson Event Manager (HKLM\\{9FEEA92A-DF3F6CB}) (Version: - Seiko Epson Corporation) Epson ReadyInk Agent (A) (HKLM\\{A9BF-A29EEB4AF2AF8}) (Version: - Seiko Epson Corporation) Epson Scan 2 (HKLM\\Epson Scan 2) (Version: - Seiko Epson Corporation) EPSON Scan OCR Component (HKLM\\{B99DE3E-AE8DBE8C05F1C1}) (Version: - SEIKO EPSON Corp.) Epson Software Updater (HKLM\\{60A3CB9FC7A-AACC4FE}) (Version: - Seiko Epson Corporation) EPSON XP Series Printer Uninstall (HKLM\\EPSON XP Series) (Version: - Seiko Epson Corporation) EpsonNet Print (HKLM\\{96ED1DCFEE-CC67F}) (Version: - SEIKO EPSON Corporation) ERUNT j (HKLM\\ERUNT_is1) (Version: - Lars Hederer) Event Log Explorer (HKLM\\Event Log Explorer_is1) (Version: - FSPro Labs) Family Tree Maker (HKLM\\{39EF38DFCAFD3B87BA3AE9}) (Version: - africanamericanchildrenbooks.com, Inc.) Hidden Family Tree Maker (HKLM\\Family Tree Maker ) (Version: - africanamericanchildrenbooks.com, Inc.) FileHippo App Manager (HKLM\\africanamericanchildrenbooks.com) (Version: - africanamericanchildrenbooks.com) FNC 11 Installer (HKLM\\{0FEDFA7-AEFF3A60F4E00}) (Version: - Acresso Software) Hidden Font Validator (HKLM\\{AA-FDFD}) (Version: - Microsoft) Font Viewer (HKLM\\Font Viewer_is1) (Version: - Thinking BIG Information Technology Inc.) FontDoctor (HKLM\\{CED50DE-9FD8DD9C}) (Version: - Extensis Inc.) Foxit PhantomPDF (HKLM\\{CD7A-1CFE9-AAEACBF2A5}) (Version: - Foxit Software Inc.) FreePortScanner (HKLM\\FreePortScanner_is1) (Version: - Nsasoft LLC.) FreeUndelete (HKLM\\{0F5ADA2F-C0BADFFDFA9D6B4CBA}) (Version: - Recoveronix) FYZip (HKLM\\FYZip) (Version: - TightRope Interactive) Giotto (HKLM\\{5DB6FDBDEFD1B3B6}) (Version: - AutoEnginuity) Google Chrome (HKLM\\Google Chrome) (Version: - Google Inc.) Google Update Helper (HKLM\\{60ECA-BDACB6-AB07AB4CA}) (Version: - Google LLC) Hidden GoTo Opener (HKLM\\{2CCFD0-BF93AC5E}) (Version: - LogMeIn, Inc.) HD Tune Pro (HKLM\\HD Tune Pro_is1) (Version: - EFD Software) HDS PC Ver (HKLM\\{0ADD6DFEF17F28A07}) (Version: - ) HFL (HFT) Control Unit Update (HKLM\\{FACDAE-4CAF-BCD6A9AB31}) (Version: - Johnson Controls Inc) HotKeyBind (HKLM\\HotKeyBind_is1) (Version: - Marco Barisione) HP FWUpdateEDO2 (HKLM\\{FA9AD-DAABEBDC90}) (Version: - Hewlett-Packard) HP LaserJet Enterprise M, M & M printer series (HKLM\\{59CC9AFB-B09E-4EABF40C3C3B42}) (Version: - Hewlett-Packard) HP Officejet En-z Basic Device Software (HKLM\\{BFFE5-FBAAA4DBAC80A}) (Version: - Hewlett-Packard Co.) HP Officejet En-z Help (HKLM\\{EFEE-F45CE08C7}) (Version: - Hewlett Packard) HP Officejet Pro Basic Device Software (HKLM\\{B6EDEDA3A}) (Version: - Hewlett-Packard Co.) HP Photo Creations (HKLM\\HP Photo Creations) (Version: - HP) HP Update (HKLM\\{2EFA4E4C-7B5FF7-A1CAAB7A9C3}) (Version: - Hewlett-Packard) HPDiagnosticAlert (HKLM\\{BABEBADCB4BDDC10B0D}) (Version: - Microsoft) Hidden HPDXP (HKLM\\{1C2D54AC-BBDCAB-BCE7E7DD4}) (Version: - HP) Hidden HPLaserJetEnterpriseMMM_HelpLearnCenter (HKLM\\{E6D9A-7CCD-4DFB2}) (Version: - Hewlett-Packard) Hidden HWiNFO32 Version (HKLM\\HWiNFO32_is1) (Version: - Martin Mal&#;k - REALiX) IBM System i Access for Windows V6R1M0 (HKLM\\{EBEADCEEA3}) (Version: - IBM) IconSaver (HKLM\\IconSaver) (Version: - ) IDA Pro Free v (HKLM\\IDA Pro Free_is1) (Version: - Hex-Rays SA) ILEditor (HKU\S\\b52feffeba4a) (Version: - Works Of Barry) Image Resizer for Windows (HKLM\\{69df40aa7f85b}) (Version: - Brice Lambson) Image Resizer for Windows (HKLM\\{BDFCBC-B69EEACBFFE}) (Version: - Brice Lambson) Hidden Image Resizer for Windows (HKLM\\{cf5dae-4ccb-9cebc5ef0a6b9}) (Version: - Brice Lambson) ImgBurn (HKLM\\ImgBurn) (Version: - LIGHTNING UK!) Inst (HKLM\\{51FF39DBDA-4B9E-ABDEC75F1}) (Version: - Softex Inc.) Hidden Integrated Camera (HKLM\\{EA5B3-EDDEA-AFE1EB1EAC}) (Version: - Realtek Semiconductor Corp.) Intel(R) Management Engine Components (HKLM\\{1CEAC85DF-8DE5E91F}) (Version: - Intel Corporation) Intel(R) Network Connections Drivers (HKLM\\PROSet) (Version: - Intel) Intel(R) Processor Graphics (HKLM\\{F0E3ADBBDCB9AC9AEA}) (Version: - Intel Corporation) Intel(R) Update Manager (HKLM\\{AA8BCE96EF-CB44CC7D7D07}) (Version: - Intel Corporation) Intel(R) USB eXtensible Host Controller Driver (HKLM\\{C3DDD-C5EDFDCF2}) (Version: - Intel Corporation) Intel(R) Wireless Bluetooth(R) (HKLM\\{FDF3DCC}) (Version: - Intel Corporation) Intel&#; Driver Update Utility (HKLM\\{c4fad37db4fb48b}) (Version: - Intel) Intel&#; PROSet/Wireless Software (HKLM\\{42b6a45bde-abda9cfad}) (Version: - Intel Corporation) Intel&#; SSD Toolbox (HKLM\\{06DCFBAf0CEED}) (Version: - Intel Corporation) Internet Explorer (Enable DEP) (HKLM\\{aa7afe-ac6daed7a}.sdb) (Version: - ) IPTInstaller (HKLM\\{D-4ABBBF0AD1BB70}) (Version: - HTC) IPVanish (HKLM\\{DFFFCCFD2-BF0E0A1DEC33F}) (Version: - IPVanish) Hidden IPVanish (HKLM\\IPVanish ) (Version: - IPVanish) iReboot (HKLM\\iReboot) (Version: - NeoSmart Technologies) IrfanView (bit) (HKLM\\IrfanView) (Version: - Irfan Skiljan) ISSE version (HKLM\\{BAEC-6EC5BABDD9ACFB}_is1) (Version: - CCRMA, Stanford University) Java 8 Update (HKLM\\{26A24AED-4CABFF0}) (Version: - Oracle Corporation) JBidwatcher pre5 (HKLM\\JBidwatcher_0) (Version: pre5 - CyberFOX Software, Inc) jv16 PowerTools (HKLM\\jv16 PowerTools) (Version: - Macecraft Software) KC Softwares KCleaner (HKLM\\KC Softwares KCleaner_is1) (Version: - KC Softwares) KC Softwares VideoInspector (HKLM\\KC Softwares VideoInspector_is1) (Version: - KC Softwares) Kits Configuration Installer (HKLM\\{B74E65FD-CCCBA3FD}) (Version: - Microsoft) Hidden K-Lite Codec Pack Full (HKLM\\KLiteCodecPack_is1) (Version: - KLCP) Lenovo Auto Scroll Utility (HKLM\\LenovoAutoScrollUtility) (Version: - Lenovo) Lenovo Fingerprint Manager Pro (HKLM\\{F4E57FBCF2-B0ACABDF7E}) (Version: - Lenovo) Lenovo On Screen Display (HKLM\\OnScreenDisplay) (Version: - Lenovo) Lenovo Patch Utility (HKLM\\{24E92E7AA3EA-3AACBE52}) (Version: - ) Lenovo Power Management Driver (HKLM\\Power Management Driver) (Version: - Lenovo) Lenovo QuickDisplay (HKLM\\{CEC0-ED9A-AEC4-FCEB}) (Version: - Lenovo Group Limited) Lenovo Service Bridge (HKU\S\\{2CD-EFFF5-BE46A31E26B7}_is1) (Version: - Lenovo) Lenovo System Interface Driver (HKLM\\africanamericanchildrenbooks.com) (Version: - ) LibreOffice (HKLM\\{4D5DDAC5-AEDA3EA9}) (Version: - The Document Foundation) Link Shell Extension (HKLM\\HardlinkShellExt) (Version: - Hermann Schinagl) LinkChecker (HKLM\\LinkChecker_is1) (Version: - ) LJDXPHelperUI (HKLM\\{EAECD0D7-F27D-4FA9C0B5C5F1B7}) (Version: - HP) Hidden Logitech SetPoint (HKLM\\sp6) (Version: - Logitech) LookDisk version (HKLM\\{9F2FBEADE0C-ACBBA5D83BF}_is1) (Version: - Vincenzo Iuorno) Macrium Reflect Free Edition (HKLM\\{F1FAAC-A9CE-F2CEC33C}) (Version: - Paramount Software (UK) Ltd.) Hidden Macrium Reflect Free Edition (HKLM\\MacriumReflect) (Version: - Paramount Software (UK) Ltd.) magicJack (HKU\S\\magicJack) (Version: - magicJack L.P.) Malwarebytes version (HKLM\\{FBBA-BFFFF2E0CD}_is1) (Version: - Malwarebytes) Metric Collection SDK (HKLM\\{DDAAFEEA-ADBB11BF26}) (Version: - Lenovo Group Limited) Hidden Microsoft .NET Framework (HKLM\\{92FB6CEAD-9BCADF4CABA} - ) (Version: - Microsoft Corporation) Microsoft Network Monitor (HKLM\\{A2F2C44AE-4CCEC-E22B1CC91F06}) (Version: - Microsoft Corporation) Microsoft Network Monitor: NetworkMonitor Parsers (HKLM\\{5A1A9ABFD-A67D-7CDFF5EEB}) (Version: - Microsoft Corporation) Microsoft Silverlight (HKLM\\{89FD-6CABDBE5A4BB71E00}) (Version: - Microsoft Corporation) Microsoft Visual C++ Redistributable (HKLM\\{F4C1C-CCCCBFC89A1A2}) (Version: - ) Microsoft Visual C++ Redistributable (HKLM\\{bafda5dd}) (Version: - Microsoft Corporation) Microsoft Visual C++ Redistributable (HKLM\\{b34ecc-8f6a-2b0f04ec}) (Version: - Microsoft Corporation) Microsoft Visual C++ Redistributable (HKLM\\{A49FF-0CFDF-BE8E76B7}) (Version: - Microsoft Corporation) Microsoft Visual C++ Redistributable - x86 (HKLM\\{FF66E9FEA3E-AFDE9AA6A4}) (Version: - Microsoft Corporation) Microsoft Visual C++ Redistributable - x86 (HKLM\\{9ADCD9-BD6FE6EC}) (Version: - ) Microsoft Visual C++ Redistributable - x86 (HKLM\\{1F1C2DFC-2DEBCBADF}) (Version: - ) Microsoft Visual C++ Redistributable - x86 (HKLM\\{9BEE6-ECCAECF}) (Version: - ) Microsoft Visual C++ x86 Redistributable - (HKLM\\{BB40DDBBEFC77A11A1E}) (Version: - Microsoft Corporation) Microsoft Visual C++ x86 Redistributable - (HKLM\\{F0C3E5DADEEEF0DEA5}) (Version: - Microsoft Corporation) Microsoft Visual C++ Redistributable (x86) - (HKLM\\{fabbbfbf}) (Version: - Microsoft Corporation) Microsoft Visual C++ Redistributable (x86) - (HKLM\\{33d1fdabce33d9c2d6f}) (Version: - Microsoft Corporation) Microsoft Visual C++ Redistributable (x86) - (HKLM\\{f65dbaffa-0daabb1}) (Version: - Microsoft Corporation) Microsoft Visual C++ Redistributable (x86) - (HKLM\\{aaccd-1fa22cc64f36}) (Version: - Microsoft Corporation) Microsoft Visual C++ Redistributable (x86) - (HKLM\\{56e11dcca5-a4ffc4d84d}) (Version: - Microsoft Corporation) MiniTool Partition Wizard (HKLM\\{05DFA-ADCB-4DBA3C-A7CA8FAC6}_is1) (Version: - MiniTool Solution Ltd.) MiniTool Partition Wizard Professional Edition (HKLM\\{ADECAE8B02A67C0}_is1) (Version: - MiniTool Solution Ltd.) Mobile Broadband Drivers (HKLM\\{EABEEB53BBF1A5A09}) (Version: - Ericsson AB) Mobile Net Switch (HKLM\\{DDDAAEB}) (Version: - RH Computing) Moffsoft Calculator 2 (HKLM\\MoffCalc2_is1) (Version: - Moffsoft) Mozilla Firefox (x86 en-US) (HKLM\\Mozilla Firefox (x86 en-US)) (Version: - Mozilla) Mozilla Maintenance Service (HKLM\\MozillaMaintenanceService) (Version: - Mozilla) MPC-HC (HKLM\\{BEB1-B0FD8CB45F7}_is1) (Version: - MPC-HC Team) MSI to redistribute MS VS CRT libraries (HKLM\\{A8DF7FDCC3DA}) (Version: - ) MSXML SP2 (KB) (HKLM\\{ADDD-4B8E-BDC5DCDC52A71}) (Version: - ) MSXML SP2 (KB) (HKLM\\{FA8E6-F4DCAE-8C11FBDEC}) (Version: - Microsoft Corporation) MyBackupPC from Rerware, LLC (HKLM\\MyBackupPC) (Version: - ) MySQL Installer - Community (HKLM\\{E5DFA-4CF1-AEBA}) (Version: - Oracle Corporation) NirSoft BlueScreenView (HKLM\\NirSoft BlueScreenView) (Version: - ) Nmap (HKLM\\Nmap) (Version: - Nmap Project) Notepad++ (bit x86) (HKLM\\Notepad++) (Version: - Notepad++ Team) NoteTab Light 7 (Remove only) (HKLM\\NoteTab Light 7_is1) (Version: - Fookes Holding Ltd) Npcap r2 (HKLM\\NpcapInst) (Version: r2 - Nmap Project) Oracle VM VirtualBox (HKLM\\{DDFE3D-BFDF-8DE2E}) (Version: - Oracle Corporation) PdaNet+ for Android (HKLM\\PdaNet_is1) (Version: - June Fabrics Technology Inc) pdfFactory Pro (5.x) (HKLM\\pdfFactory Pro (5.x)) (Version: - FinePrint Software, LLC) pdfFactory Pro (HKLM\\pdfFactory Pro) (Version: - FinePrint Software, LLC) PDQ Deploy (HKLM\\{FBBEE}) (Version: - africanamericanchildrenbooks.com) PDQ Inventory (HKLM\\{7ABD3-BBE5BC}) (Version: - africanamericanchildrenbooks.com) Pegasus Mail (HKLM\\Pegasus Mail) (Version: - David Harris) Pegasus Mail HTML Renderer (HKLM\\{A9F5E1EBCF8E6AF83CE}_is1) (Version: - Micha's Midnight Manufacture) Pegasus Mail v (HKLM\\{E-6DFEC9DFAFCED54}_is1) (Version: - David Harris) Port Detective (HKLM\\Port_Detective_) (Version: - ) Port Forward Network Utilities (HKLM\\{4CFEDFF-4FAD0E-FFDC7}) (Version: - Portforward, LLC) Power Manager (HKLM\\{DAC01CEE-5BAEDFC-BE84E}) (Version: - Lenovo Group Limited) ProSafe Plus Utility (HKLM\\{AA42EDB4-A4FA0BD-3CF8C3B71BF2}) (Version: - NetGear) Hidden ProSafe Plus Utility (HKLM\\InstallShield_{AA42EDB4-A4FA0BD-3CF8C3B71BF2}) (Version: - NetGear) PTDD Partition Table Doctor (HKLM\\{A35F88E5-AC-ABF5F5CDD2EC}) (Version: - PTDD Group) Python rc1 (bit) (HKU\S\\{cefedeeff02f}) (Version: - Python Software Foundation) Python rc1 Add to Path (bit) (HKLM\\{FDCCBBAC62CDD0}) (Version: - Python Software Foundation) Hidden Python rc1 Core Interpreter (bit) (HKLM\\{62A3EF8FBFEAEA09D1}) (Version: - Python Software Foundation) Hidden Python rc1 Development Libraries (bit) (HKLM\\{A6C70CD2-B95FEF54D5}) (Version: - Python Software Foundation) Hidden Python rc1 Documentation (bit) (HKLM\\{7F9FDA-4BBDF3BE6}) (Version: - Python Software Foundation) Hidden Python rc1 Executables (bit) (HKLM\\{E1BFDBF6-AD9AD9E9C9CC}) (Version: - Python Software Foundation) Hidden Python rc1 pip Bootstrap (bit) (HKLM\\{70ABFCBF0-C9B73C67E64B}) (Version: - Python Software Foundation) Hidden Python rc1 Standard Library (bit) (HKLM\\{AEEA-9B2E-1AAEB}) (Version: - Python Software Foundation) Hidden Python rc1 Tcl/Tk Support (bit) (HKLM\\{9B40DBAAAB30A}) (Version: - Python Software Foundation) Hidden Python rc1 Test Suite (bit) (HKLM\\{C0AAF-C07F-4C0D-BF37E77F9E}) (Version: - Python Software Foundation) Hidden Python rc1 Utility Scripts (bit) (HKLM\\{1B78AF6F-3CCE3-A98DBB21}) (Version: - Python Software Foundation) Hidden Python Launcher (HKLM\\{F37EEDA-ACCFE49DE5F}) (Version: - Python Software Foundation) Qlock Free (HKU\S\\Qlock) (Version: - Vitei inc) QuickBooks (HKLM\\{B52E01F1-D34EBDFF3C0B}) (Version: - Intuit Inc.) Hidden QuickBooks Desktop File Doctor (HKLM\\{5B0DD8AFEADBE0E8}) (Version: - Intuit Inc.) QuickBooks Premier: Accountant Edition (HKLM\\{A68AADDCFACB}) (Version: - Intuit Inc.) Realtek Card Reader (HKLM\\{5BC2B5ABDE-4EB8CFD0A}) (Version: - Realtek Semiconductor Corp.) Realtek High Definition Audio Driver (HKLM\\{FAF7F-7BCA-4EDE-8A7CFE7DBC}) (Version: - Realtek Semiconductor Corp.) Recuva (HKLM\\Recuva) (Version: - Piriform) Registrar Registry Manager (HKLM\\RegistrarHome_is1) (Version: - Resplendence Software Projects Sp.) Registry Trash Keys Finder (Freeware) (HKLM\\Registry Trash Keys Finder) (Version: - SNC) Remark Office OMR (HKLM\\{CCAD3-E83EADBD60B2B}) (Version: - Gravic, Inc.) Hidden Remark Office OMR (HKLM\\InstallShield_{CCAD3-E83EADBD60B2B}) (Version: - Gravic, Inc.) Remind-Me (HKLM\\Remind-Me) (Version: - Beiley Software) Renesas Electronics USB Host Controller Driver (HKLM\\{DABEBAEA}) (Version: - Renesas Electronics Corporation) Hidden Renesas Electronics USB Host Controller Driver (HKLM\\InstallShield_{DABEBAEA}) (Version: - Renesas Electronics Corporation) Resource Hacker Version (HKLM\\ResourceHacker_is1) (Version: - ) Retrospect Client (HKLM\\{EFE4F-8EDD2EF23DA23E}) (Version: - Retrospect, Inc.) RMPrepUSB (HKLM\\RMPrepUSB) (Version: - ) SAMSUNG USB Driver for Mobile Phones (HKLM\\{DBCDA-4aAB9E-6E92DE44}) (Version: - SAMSUNG Electronics Co., Ltd.) Sandboxie (bit) (HKLM\\Sandboxie) (Version: - Sandboxie Holdings, LLC) ScanTool (HKLM\\{BD4CDAFAF6E-6EEA6E60A}) (Version: - ) SciTE4AutoIt3 (HKLM\\SciTE4AutoIt3) (Version: - Jos van der Zande) SeaTools for Windows (HKLM\\SeaTools for Windows) (Version: - Seagate Technology) SecureZIP for Windows (HKLM\\{FBFD-FCACB6-CEEB5}) (Version: - PKWARE, Inc) Skype version (HKLM\\Skype_is1) (Version: - Skype Technologies S.A.) Smart Switch (HKLM\\{74FACE2AD-D9ECCCBA7}) (Version: - Samsung Electronics Co., Ltd.) Hidden Smart Switch (HKLM\\InstallShield_{74FACE2AD-D9ECCCBA7}) (Version: - Samsung Electronics Co., Ltd.) SoftPerfect Network Scanner version (HKLM\\{C3D9-FFA-BCF55F25E2D4B}_is1) (Version: - SoftPerfect Pty Ltd) SoftPerfect RAM Disk version (HKLM\\{33A14EDBEDB-B95BC}_is1) (Version: - SoftPerfect) Speccy (HKLM\\Speccy) (Version: - Piriform) Spell Catcher Plus a9 Build # (HKLM\\Spell Catcher Plus) (Version: a9 Build # - Rainmaker Research) SpyTheSpy (HKLM\\SpyTheSpy_is1) (Version: - Mediachance) STM TPM Driver - 64 bits (HKLM\\{BC0AC}_is1) (Version: - STMicroelectronics) swMSM (HKLM\\{C34CEDB5C-0FDD}) (Version: - ) Synaptics Pointing Device Driver (HKLM\\SynTPDeinstKey) (Version: - Synaptics Incorporated) Syncios (HKLM\\Syncios) (Version: - Anvsoft) Take Command (HKLM\\{53BACCBECABF4}) (Version: - JP Software) Take Command 20 (HKLM\\{46CFABCCF}) (Version: - JP Software) TeamViewer 14 (HKLM\\TeamViewer) (Version: - TeamViewer) Telerik Fiddler (HKLM\\Fiddler2) (Version: - Telerik) Textify v (HKU\S\\Textify) (Version: - RaMMicHaeL) The Font Thing (HKLM\\The Font Thing) (Version: - ) ThinkVantage Active Protection System (HKLM\\{46AECFC-7E76E9F8A2ED}) (Version: - Lenovo) TN33 PCSC Driver Stack (HKLM\\TN33PCSCDriver_is1) (Version: - TOPPAN FORMS CO.,LTD.) Toolkit Documentation (HKLM\\{6CBFFFC-8C3B-DDBBF3F92}) (Version: - Microsoft) Hidden Total Uninstall (HKLM\\Total Uninstall 6_is1) (Version: - Gavrila Martau) TreeSize Free V (HKLM\\TreeSize Free_is1) (Version: - JAM Software) TreeSize Professional V (HKLM\\{B99C5BAAFFF-7A4DD5A8FE89}) (Version: - JAM Software) Trillian (HKLM\\{0E1DDFECABEF-B33FA}) (Version: - Cerulean Studios, LLC) Trillian (HKLM\\Trillian) (Version: - Cerulean Studios, LLC) Ubiquiti UniFi (remove only) (HKLM\\Ubiquiti UniFi) (Version: - ) UltraCompare (HKLM\\{CB87D-4CB8-A9D9-A9D66F27B88E}) (Version: - IDM Computer Solutions, Inc.) UltraEdit (HKLM\\{3EFBDCDC3F8BA}) (Version: - IDM Computer Solutions, Inc.) UltraVnc (HKLM\\Ultravnc2_is1) (Version: - uvnc bvba) Unlocker (HKLM\\Unlocker) (Version: - Cedrick Collomb) Vimicro USB PC Camera(VC) (HKLM\\{BCA-FCEE6F1FD}) (Version: - Vimicro) Visual BCD (HKLM\\{D50FF-8FAFDD-A9CB52AF57}) (Version: - BoYans) VLC media player (HKLM\\VLC media player) (Version: - VideoLAN) VuePrint (HKLM\\VuePrint) (Version: - ) VueScan x32 (HKLM\\VueScan x32) (Version: - Hamrick Software) Vulkan Run Time Libraries (HKLM\\VulkanRT) (Version: - LunarG, Inc.) Hidden WavePad Sound Editor (HKLM\\WavePad) (Version: - NCH Software) WebClient (HKLM\\WebClient) (Version: - ) Win32DiskImager version (HKLM\\{DCEA-4AD3-A0BFD9D01F17}_is1) (Version: - ImageWriter Developers) Win32DiskImager version (HKLM\\{3DFFADF2C-4BEBDCE1}}_is1) (Version: - ImageWriter Developers) WinCheat (HKLM\\{6D4ECEF-9EF8DA77}) (Version: - Alin Constantin) Window Detective (HKLM\\Window Detective_is1) (Version: - ) Windows 7 Upgrade Advisor (HKLM\\{AB05F2C8-FbE1-FD8ADFACD31E}) (Version: - Microsoft Corporation) Windows 7 USB/DVD Download Tool (HKLM\\{CCFAF-9CEBBE98A}) (Version: - Microsoft Corporation) Windows Assessment and Deployment Kit for Windows (HKLM\\{e9eab-b35f-d9beb94dc06d}) (Version: - Microsoft Corporation) Windows Automated Installation Kit (HKLM\\{31E8FEFD-BAFF1}) (Version: - Microsoft Corporation) Windows Driver Package - Cambridge Silicon Radio Ltd. (CSRBC) USB (04/21/ ) (HKLM\\BEA7BC19B9CBBFD6B9CC52B0CD8) (Version: 04/21/ - Cambridge Silicon Radio Ltd.) WinGrub (HKLM\\WinGrub) (Version: - ) WinID (HKLM\\WinID) (Version: - africanamericanchildrenbooks.com) WinMerge (HKLM\\WinMerge_is1) (Version: - Thingamahoochie Software) WinPcap (HKLM\\WinPcapInst) (Version: - Riverbed Technology, Inc.) WinSnap (HKLM\\WinSnap) (Version: - NTWind Software) Winspector (HKLM\\Winspector - Ultimate Windows Spy Utility_is1) (Version: - africanamericanchildrenbooks.com) WinToUSB version (HKLM\\WinToUSB_is1) (Version: - Hasleo Software.) Wireshark bit (HKLM\\Wireshark) (Version: - The Wireshark developer community, hxxps://africanamericanchildrenbooks.com) Wise Plugin Manager (HKLM\\Wise Plugin Manager_is1) (Version: - africanamericanchildrenbooks.com, Inc.) WOL Magic Packet Sender (HKLM\\{EADBD-AAEDF-EA0F83F7E00B}) (Version: - ) WordPerfect Office IFilter bit (HKLM\\{1DF03ECE-6AFE-BCFA9A2}) (Version: - Corel Corporation) WordPerfect Office X9 - Common Files (HKLM\\{DC7E-4A3EBEA6C8D}) (Version: - Corel Corporation) Hidden WordPerfect Office X9 - Common Files English (HKLM\\{97DCB4CD-9DC6-FEA1C98C}) (Version: - Corel Corporation) Hidden WordPerfect Office X9 - IPM (HKLM\\{AF93DEFAB-B1DA9DACF8}) (Version: - Corel Corporation) Hidden WordPerfect Office X9 - IPM Content (HKLM\\{3F93AE-BDE8-EFF0A1FF2}) (Version: - Corel Corporation) Hidden WordPerfect Office X9 - Lightning Files (HKLM\\{5D00EF5DB2-A60AFA4C7B93}) (Version: - Corel Corporation) Hidden WordPerfect Office X9 - Lightning Files English (HKLM\\{BBE2CAF-A24D-BB66FB78F}) (Version: - Corel Corporation) Hidden WordPerfect Office X9 - Oxford (HKLM\\{9B32CBCEEAD6E56DD}) (Version: - Corel Corporation) Hidden WordPerfect Office X9 - Presentations Files (HKLM\\{6CD8-AAEBCDA8BB7F01C}) (Version: - Corel Corporation) Hidden WordPerfect Office X9 - Presentations Files English (HKLM\\{C55FBDACAF-9EBA-EB23AD0}) (Version: - Corel Corporation) Hidden WordPerfect Office X9 - Quattro Pro Files (HKLM\\{BCA3CB-BE4F8ABEF}) (Version: - Corel Corporation) Hidden WordPerfect Office X9 - Quattro Pro Files English (HKLM\\{BFA2-B40B-CDAB}) (Version: - Corel Corporation) Hidden WordPerfect Office X9 - Redists (HKLM\\{CEEF-BEC}) (Version: - Corel Corporation) Hidden WordPerfect Office X9 - Setup Files (HKLM\\{FFBCEF-A7CFD}) (Version: - Corel Corporation) Hidden WordPerfect Office X9 - WordPerfect Files (HKLM\\{55D49A6A-BCBEAA9E-1AEC5FCAC}) (Version: - Corel Corporation) Hidden WordPerfect Office X9 - WordPerfect Files English (HKLM\\{D-0BAACE7CE0CB}) (Version: - Corel Corporation) Hidden WordPerfect Office X9 - Writing Tools Files (HKLM\\{BFFB46A-D6C3AFA}) (Version: - Corel Corporation) Hidden WordPerfect Office X9 (HKLM\\_{FFBCEF-A7CFD}) (Version: - Corel Corporation) WordPerfect Office X9 (HKLM\\{CEFECAE4FE90CC5}) (Version: - Corel Corporation) Hidden WPT Redistributables (HKLM\\{64F3FB9AB2DBBEAEE8}) (Version: - Microsoft) Hidden WPTx86 (HKLM\\{95B10B5AEE-CE3BCE7DDE6}) (Version: - Microsoft) Hidden XChat 2 (remove only) (HKLM\\xchat) (Version: - ) XWinSpector version (HKLM\\{A0CA64DAAC-BD6C-ABC2A}_is1) (Version: - Tricolici) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S_Classes\CLSID\{05EC5CDCCBF0D6}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{0ADF9CD5E-4BDD-BE17}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{FAF7F-3FBB8F-ADDA}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{37A2FCA3-AF1A8BB54}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{37A2FCA3-AF1A8BB54}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{45bb16ac9-abbbdc80}\localserver32 -> C:\Programs\QuickBooks \qbwexe (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{D3CEDB-4D2ACD}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{F3FAC4-BB3BAA}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{49BBAA3C-CECE9C15}\InprocServer32 -> C:\Program Files\HP\Common\africanamericanchildrenbooks.com (Hewlett Packard -> Hewlett-Packard Co.) CustomCLSID: HKU\S_Classes\CLSID\{4A56F19E-9FFCE44AA83A9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{4E5E74BEBAEED}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{C8FAEBB0-CC3CE2AB}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{57DFEBCEAE4AE19D30A1}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{DC9DCCB81BA}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{5ED8ACB2DED-8EEA-EB2FCB}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{63B5BA4FBF}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{F1CD-A55B-4B7CAEB4E9E}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{7DBFAD-4D1BAB87BF}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{ECFBCCDA7D}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{82CC31BBA4EB4FA6C8}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{DDF2C-8BB8-EBB94}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{8ED1-B70BF29CD16}\localserver32 -> C:\Programs\QuickBooks \qbwexe (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{8FEDEABCDEAB2}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{9D9B61FE2BAB3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{9D9B61FE2BAB3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{9D9B61FE2BAB3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{9D9B61FE2BAB3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{9D9B61FE2BAB3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{9D9B61FE2BAB3-AA5A1CCFBC3A}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{A63E42DCB5-ABFCEC}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{A63E42DCB5-ABFCEC}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{AF5E0ACEABCEDE82CD1BF3F}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{B10BFAC3-EFFD9-ADA0-BEBEC24CA}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{b5eedee0-c06ecf-8c}\InprocServer32 -> C:\Programs\UltraEdit\africanamericanchildrenbooks.com (IDM Computer Solutions, Inc. -> ) CustomCLSID: HKU\S_Classes\CLSID\{B66F2BFEBCEAE4AE19D30A1}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{CBEF1FBFF-4BB0FFBC}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{D14FD6BA9FB}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{D4A12AAF-E15EB-A6BF91F}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{D9B9CDEBD2BE34}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit, Inc.) CustomCLSID: HKU\S_Classes\CLSID\{D9BC6FA54BD4-ADAD}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit, Inc.) CustomCLSID: HKU\S_Classes\CLSID\{D9BC6FA54BD4-ADAD}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit, Inc.) CustomCLSID: HKU\S_Classes\CLSID\{D9BC6FA54BD4-ADAD}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit, Inc.) CustomCLSID: HKU\S_Classes\CLSID\{D9BC6FA1-A54BD4-ADAD}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit, Inc.) CustomCLSID: HKU\S_Classes\CLSID\{D9BC6FA6-A54BD4-ADAD}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit, Inc.) CustomCLSID: HKU\S_Classes\CLSID\{D9BC6FB2-A54BD4-ADAD}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit, Inc.) CustomCLSID: HKU\S_Classes\CLSID\{DCB2BEFFF6-BEE}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{DFD0AFB86C-4AF3-BDE}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{EC0DC-CA0BEAF}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{E1AE1-DC3E-AA3DB}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{E1AE3-DC3E-AA3DB}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{EADAE-5BEADF87}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{EAEFD-5BEADF87}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{F2CCCBFDD4DD}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{FAC93DFFCdDEBC7A08EBA}\localserver32 -> C:\Programs\QuickBooks \qbwexe (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{FBFDACC5EEE9}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) CustomCLSID: HKU\S_Classes\CLSID\{FBC2AADF1B-BCA7CDE7}\InprocServer32 -> C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) ShellIconOverlayIdentifiers: [HardLinkMenu] -> {0ABCd3-AACAA} => C:\Programs\LinkShellExtension\africanamericanchildrenbooks.com [] (Hermann Schinagl -> Hermann Schinagl) [File not signed] ShellIconOverlayIdentifiers: [IconOverlayHardLink] -> {0ABCd3-AACDD} => C:\Programs\LinkShellExtension\africanamericanchildrenbooks.com [] (Hermann Schinagl -> Hermann Schinagl) [File not signed] ShellIconOverlayIdentifiers: [IconOverlaySymbolicLink] -> {0ABCd3-AACEE} => C:\Programs\LinkShellExtension\africanamericanchildrenbooks.com [] (Hermann Schinagl -> Hermann Schinagl) [File not signed] ContextMenuHandlers1: [7-Zip] -> {FCA} => C:\Program Files\7-Zip\africanamericanchildrenbooks.com [] (Igor Pavlov) [File not signed] ContextMenuHandlers1: [ANotepad++] -> {00F3C2EC-A6EEDE-A03A-EF8F55D} => C:\Programs\Notepad++\NppShell_dll [] (Notepad++ -> ) ContextMenuHandlers1: [CirrusShellEx] -> {57FA2DD22DAA-5CB48E84F12A} => C:\Programs\Beyond Compare\africanamericanchildrenbooks.com [] (Scooter Software Inc -> Scooter Software) ContextMenuHandlers1: [Foxit_ConvertToPDF] -> {CAA4BBF9FC63A5F} => C:\Programs\Foxit Software\Foxit PhantomPDF\plugins\ConvertToPDFShellExtension_xdll [] (Foxit Software Incorporated -> Foxit Software Inc.) ContextMenuHandlers1: [Image Resizer] -> {51B4D7EB4BBFB3CA69} => C:\Program Files\Image Resizer for Windows\africanamericanchildrenbooks.com [] (Open Source Developer, Brice Lambson -> Brice Lambson) ContextMenuHandlers1: [PKZIP Shell Extension] -> {ADBACFB-0C1B70C04F0D} => C:\Program Files\Common Files\PKWARE\PKZIP7\PKCOMdll [] (PKWARE, Inc. -> PKWARE, Inc.) ContextMenuHandlers1: [ReflectShellExt] -> {DEBB9BB3DDFE5C-EABAB} => C:\Programs\Macrium\Reflect\africanamericanchildrenbooks.com [] (Paramount Software UK Ltd -> Paramount Software UK Ltd) ContextMenuHandlers1: [WinMerge] -> {4EAACBD68BBA81E9C2} => C:\Programs\WinMerge\africanamericanchildrenbooks.com [] (hxxp://africanamericanchildrenbooks.com) [File not signed] ContextMenuHandlers1: [WorkFolders] -> -{E61BFEBEFB1A4FDE0E3} => -> No File ContextMenuHandlers2: [QuickFinderMenu] -> {0cbeb8bebb} => c:\Programs\WordPerfect Office X9\Programs\PFSEDLL [] (Corel Corporation -> Corel Corporation) ContextMenuHandlers2: [ReflectShellExt] -> {DEBB9BB3DDFE5C-EABAB} => C:\Programs\Macrium\Reflect\africanamericanchildrenbooks.com [] (Paramount Software UK Ltd -> Paramount Software UK Ltd) ContextMenuHandlers2: [WinMerge] -> {4EAACBD68BBA81E9C2} => C:\Programs\WinMerge\africanamericanchildrenbooks.com [] (hxxp://africanamericanchildrenbooks.com) [File not signed] ContextMenuHandlers3: [MBAMShlExt] -> {57CEA-0CBCAC90A0B3} => C:\Programs\Malwarebytes\Anti-Malware\africanamericanchildrenbooks.com [] (Malwarebytes Corporation -> Malwarebytes) ContextMenuHandlers3: [UnlockerShellExtension] -> {DDE4BEEB-DDEfd-8EBCF83} => C:\Programs\Unlocker\africanamericanchildrenbooks.com [] () [File not signed] ContextMenuHandlers4: [7-Zip] -> {FCA} => C:\Program Files\7-Zip\africanamericanchildrenbooks.com [] (Igor Pavlov) [File not signed] ContextMenuHandlers4: [CirrusShellEx] -> {57FA2DD22DAA-5CB48E84F12A} => C:\Programs\Beyond Compare\africanamericanchildrenbooks.com [] (Scooter Software Inc -> Scooter Software) ContextMenuHandlers4: [MSSE] -> {FE2C-FACBFC39FB75C49} => -> No File ContextMenuHandlers4: [QuickFinderMenu] -> {0cbeb8bebb} => c:\Programs\WordPerfect Office X9\Programs\PFSEDLL [] (Corel Corporation -> Corel Corporation) ContextMenuHandlers4: [WinMerge] -> {4EAACBD68BBA81E9C2} => C:\Programs\WinMerge\africanamericanchildrenbooks.com [] (hxxp://africanamericanchildrenbooks.com) [File not signed] ContextMenuHandlers5: [HardLinkMenu] -> {0ABCd3-AACAA} => C:\Programs\LinkShellExtension\africanamericanchildrenbooks.com [] (Hermann Schinagl -> Hermann Schinagl) [File not signed] ContextMenuHandlers5: [igfxcui] -> {3ABA-CCFFDBA0C93CB1F4} => -> No File ContextMenuHandlers5: [igfxDTCM] -> {9B5FABA-E81BCB8D93FC} => C:\Windows\system32\africanamericanchildrenbooks.com [] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) ContextMenuHandlers5: [NvCplDesktopContext] -> {3DAFCf8e-ABE0E08FA86A9} => C:\Windows\system32\africanamericanchildrenbooks.com [] (NVIDIA Corporation -> NVIDIA Corporation) ContextMenuHandlers5: [WinMerge] -> {4EAACBD68BBA81E9C2} => C:\Programs\WinMerge\africanamericanchildrenbooks.com [] (hxxp://africanamericanchildrenbooks.com) [File not signed] ContextMenuHandlers6: [7-Zip] -> {FCA} => C:\Program Files\7-Zip\africanamericanchildrenbooks.com [] (Igor Pavlov) [File not signed] ContextMenuHandlers6: [CirrusShellEx] -> {57FA2DD22DAA-5CB48E84F12A} => C:\Programs\Beyond Compare\africanamericanchildrenbooks.com [] (Scooter Software Inc -> Scooter Software) ContextMenuHandlers6: [DFDShellExt] -> {AFE-3EAEAF-DBB8C} => C:\Programs\Duplicate File Detective 6\africanamericanchildrenbooks.com [] (Key Metric Software -> TODO: <Company name>) ContextMenuHandlers6: [Foxit_ConvertToPDF] -> {CAA4BBF9FC63A5F} => C:\Programs\Foxit Software\Foxit PhantomPDF\plugins\ConvertToPDFShellExtension_xdll [] (Foxit Software Incorporated -> Foxit Software Inc.) ContextMenuHandlers6: [IconLayout] -> {19FEcf-B63DBC03} => C:\Windows\system32\africanamericanchildrenbooks.com [] (Microsoft) [File not signed] ContextMenuHandlers6: [MBAMShlExt] -> {57CEA-0CBCAC90A0B3} => C:\Programs\Malwarebytes\Anti-Malware\africanamericanchildrenbooks.com [] (Malwarebytes Corporation -> Malwarebytes) ContextMenuHandlers6: [PKZIP Shell Extension] -> {ADBACFB-0C1B70C04F0D} => C:\Program Files\Common Files\PKWARE\PKZIP7\PKCOMdll [] (PKWARE, Inc. -> PKWARE, Inc.) ContextMenuHandlers1_S [UltraEdit] -> {b5eedee0-c06ecf-8c} => C:\Programs\UltraEdit\africanamericanchildrenbooks.com [] (IDM Computer Solutions, Inc. -> ) ContextMenuHandlers6_S [UltraEdit] -> {b5eedee0-c06ecf-8c} => C:\Programs\UltraEdit\africanamericanchildrenbooks.com [] (IDM Computer Solutions, Inc. -> ) ==================== Shortcuts & WMI ======================== (The entries could be listed to be restored or removed.) Shortcut: C:\Users\Gary\Desktop\africanamericanchildrenbooks.com -> C:\Batch\africanamericanchildrenbooks.com () Shortcut: C:\Users\Gary\Desktop\africanamericanchildrenbooks.com -> C:\Batch\africanamericanchildrenbooks.com () Shortcut: C:\Users\Gary\Desktop\africanamericanchildrenbooks.com -> C:\Batch\africanamericanchildrenbooks.com () Shortcut: C:\Users\Gary\Desktop\africanamericanchildrenbooks.com -> C:\Dnload\9xAddons\africanamericanchildrenbooks.com () Shortcut: C:\Users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qlock\africanamericanchildrenbooks.com -> hxxp://africanamericanchildrenbooks.com ShortcutWithArgument: C:\Users\Gary\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ruby p\Start Command Prompt with africanamericanchildrenbooks.com -> C:\Windows\System32\africanamericanchildrenbooks.com (Microsoft Corporation) -> /E:ON /K C:\Users\Gary\eee\africanamericanchildrenbooks.com2\Ruby23\bin\africanamericanchildrenbooks.com ==================== Loaded Modules (Whitelisted) ============== - - _____ () [File not signed] C:\Program Files\Microsoft\Skype for Desktop\africanamericanchildrenbooks.com - - _____ () [File not signed] C:\Program Files\Microsoft\Skype for Desktop\africanamericanchildrenbooks.com - - _____ () [File not signed] C:\Program Files\ThinkPad\Utilities\US\africanamericanchildrenbooks.com - - _____ () [File not signed] C:\Programs\ClipX\africanamericanchildrenbooks.com - - _____ () [File not signed] C:\Programs\IconSaver\IconSaver africanamericanchildrenbooks.com - - _____ () [File not signed] C:\Programs\IconSaver\africanamericanchildrenbooks.com - - _____ () [File not signed] C:\Programs\IconSaver\africanamericanchildrenbooks.com - - _____ () [File not signed] C:\Programs\LinkShellExtension\africanamericanchildrenbooks.com - - _____ () [File not signed] C:\Programs\Unlocker\africanamericanchildrenbooks.com - - _____ () [File not signed] C:\Programs\Unlocker\africanamericanchildrenbooks.com - - _____ () [File not signed] C:\Windows\system32\africanamericanchildrenbooks.com - - _____ (ALTAP) [File not signed] C:\Programs\Salamander\lang\africanamericanchildrenbooks.com - - _____ (ALTAP) [File not signed] C:\Programs\Salamander\africanamericanchildrenbooks.com - - _____ (Hermann Schinagl -> Hermann Schinagl) [File not signed] C:\Programs\LinkShellExtension\africanamericanchildrenbooks.com - - _____ (Hewlett Packard) [File not signed] C:\Windows\System32\africanamericanchildrenbooks.com - - _____ (Hewlett Packard) [File not signed] C:\Windows\System32\africanamericanchildrenbooks.com - - _____ (Hewlett Packard) [File not signed] C:\Windows\System32\hpzjrddll - - _____ (Hewlett-Packard Company) [File not signed] C:\Windows\System32\africanamericanchildrenbooks.com - - _____ (Hewlett-Packard Corporation) [File not signed] C:\Windows\system32\spool\PRTPROCS\W32X86\hpcppdll - - _____ (Hewlett-Packard Corporation) [File not signed] C:\Windows\system32\spool\PRTPROCS\W32X86\africanamericanchildrenbooks.com - - _____ (Hewlett-Packard) [File not signed] c:\windows\system32\hpzinwdll - - _____ (Hewlett-Packard) [File not signed] c:\windows\system32\hpzipmdll - - _____ (Microsoft Corporation) [File not signed] C:\Windows\System32\africanamericanchildrenbooks.com - - _____ (Microsoft Corporation) [File not signed] C:\Windows\WinSxS\x86_africanamericanchildrenbooks.com_1fc8b3b9a1e18e3b__none_f2ebcb7eb57\msvcmdll - - _____ (africanamericanchildrenbooks.com) [File not signed] C:\Program Files\Microsoft\Skype for Desktop\africanamericanchildrenbooks.com - - _____ (Peas Inc.) [File not signed] C:\Programs\DeeEnEs\africanamericanchildrenbooks.com - - _____ (Protexis Inc. -> ) [File not signed] C:\Windows\system32\africanamericanchildrenbooks.com - - _____ (Protexis Inc. -> Protexis Inc.) [File not signed] C:\Windows\system32\africanamericanchildrenbooks.com - - _____ (Rainmaker Research, Inc.) [File not signed] C:\Programs\Spell Catcher Plus\africanamericanchildrenbooks.com - - _____ (Rainmaker Research, Inc.) [File not signed] C:\Programs\Spell Catcher Plus\africanamericanchildrenbooks.com ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE trusted site: HKU\S\\africanamericanchildrenbooks.com -> hxxps://africanamericanchildrenbooks.com IE trusted site: HKU\S\\localhost -> localhost IE trusted site: HKU\S\\africanamericanchildrenbooks.com -> hxxps://africanamericanchildrenbooks.com IE trusted site: HKU\S\\africanamericanchildrenbooks.com -> hxxps://africanamericanchildrenbooks.com ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) - - _____ C:\Windows\system32\drivers\etc\hosts localhost ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Programs\cygwin\usr\local\bin\perl\site\bin;C:\Programs\cygwin\usr\local\bin\perl\bin;C:\Program Files\Common Files\Oracle\Java\javapath;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SystemRoot%\System32\WindowsPowerShell\v;C:\Program Files\ThinkPad\Bluetooth Software;C:\Program Files\Lenovo\Fingerprint Manager Pro;C:\Program Files\Intel\WiFi\bin;C:\Programs\Intel Management Engine Components\DAL;C:\Programs\Intel Management Engine Components\IPT;%SystemRoot%\System32\WindowsPowerShell\v\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon;C:\Programs\Bitvise SSH Client;C:\Programs\Network Monitor 3\;C:\Program Files\HP\Digital Imaging\bin\Qt\Qt ;C:\Programs\UltraEdit;C:\Programs\AudacitySoundConversionsox;%SystemRoot%\System32\WindowsPowerShell\v\;C:\Programs\Client Access\Emulator;C:\Programs\Client Access\Shared;C:\Programs\Client Access\;C:\Program Files\Windows Imaging\;C:\Program Files\Windows Kits\\Windows Performance Toolkit\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files\Admin Arsenal\PDQ Deploy\;C:\Programs\PDQ Inventory\;C:\Program Files\Intel\UCRT\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\ HKU\S\Control Panel\Desktop\\Wallpaper -> C:\Users\Gary\AppData\Roaming\Microsoft\Windows\Themes\africanamericanchildrenbooks.com DNS Servers: - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0) Windows Firewall is disabled. ==================== MSCONFIG/TASK MANAGER disabled items == If an entry is included in the fixlist, it will be removed. MSCONFIG\Services: IswSvc => 2 MSCONFIG\Services: LBTServ => 3 MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^africanamericanchildrenbooks.com => C:\Windows\pss\africanamericanchildrenbooks.comStartup MSCONFIG\startupfolder: C:^Users^Gary^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^africanamericanchildrenbooks.com => C:\Windows\pss\africanamericanchildrenbooks.comp MSCONFIG\startupreg: EvtMgr6 => ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{6DD7BBEEAA2DC6FE2}] => (Allow) C:\Windows\africanamericanchildrenbooks.com\Framework\v\africanamericanchildrenbooks.com (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{31DDE3DF-B85C-6DBB8FEC9}] => (Allow) C:\Users\Gary\AppData\Roaming\uTorrent\africanamericanchildrenbooks.com (BitTorrent Inc -> BitTorrent Inc.) FirewallRules: [{B3CC4DD}] => (Allow) C:\Users\Gary\AppData\Roaming\uTorrent\africanamericanchildrenbooks.com (BitTorrent Inc -> BitTorrent Inc.) FirewallRules: [TCP Query User{ACFAC-BAA8AD7F}C:\program files\hp\hp officejet en-z\bin\africanamericanchildrenbooks.com] => (Allow) C:\program files\hp\hp officejet en-z\bin\africanamericanchildrenbooks.com (Hewlett Packard -> Hewlett-Packard Co.) FirewallRules: [UDP Query User{CF3D-4DFF-BFFF}C:\program files\hp\hp officejet en-z\bin\africanamericanchildrenbooks.com] => (Allow) C:\program files\hp\hp officejet en-z\bin\africanamericanchildrenbooks.com (Hewlett Packard -> Hewlett-Packard Co.) FirewallRules: [{CB-DAFF53F8B2}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Huadu Tech Ltd) [File not signed] FirewallRules: [{AF25EADFC-AD20AEBBA05AC}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Huadu Tech Ltd) [File not signed] FirewallRules: [{0FFCE-CCBDBECCAEE6D4}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{56DAE-3EFF7-B88D-AF09FC9}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{6F0AADDAFBDB6CC6EE}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{73AE1-EAB9B-9B3E-8BEC20CD}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{17F36ADEECD7A-DDD0D29C}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{59C1C74DFB-9DAE-BAC6B86D}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{4C19F8CB-AEF-A93FEA42AF}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{AA4EDEB-8B6DE6F5FD}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{B5D5ADACDFA0FC4C0CF}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{A3ACBEDADD8D2F0F2F}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{CD7ADC-8CDA46D}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{DCD3-ADDE-C6D1E81E5ADD}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{FDEC52FAF-AFE9-BFE3BE93}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{EBFEFAC1A25E8FB73}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{2A1FB-EDFE-7CEBC3F3E}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{2FAE0-A7EF-9E9BFB7B4}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{8ADCECC9ADCA32}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{8D85EEDCC-AB1D99F}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{B3BFDD-4FBADD}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{31BC18B8-CFCEB-9BBEF3DAF}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{BBDA3D3F4ADCFEC}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{E9BEBCBB6-BBAE}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{4CBB9CFDB19DEF8D6ED9}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{C59CF-BDDF5FAE9}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{AD5DCFC-BEDEC}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{03ED06A8-C58FDADFFDF44}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{DA1BE84CFA-B7CD7FA7}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{A9F9-BDD-AEC8A8F14CB}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{6E0BBFDBAC-A1AA}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{CFBE-AEECC6C0}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{AEA0A8CEDAD-BAB1-CC0CDB3}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{F52C3CEA-8FC-AECF}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{B5CCFD-CEB84}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com () [File not signed] FirewallRules: [{FDC6B6B77B3CF}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com () [File not signed] FirewallRules: [{D55EAFC4FC-4AC6-BAFDAC7D}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{EC8E8BFF-4E5C-9BC8-B6BE9A99A}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{FAEDBA1-AFF7-DA96FDFF7C36}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Huadu Tech Ltd) [File not signed] FirewallRules: [{2CDF-7D1B-4DFB-9EC26C4A0F6CBD}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Huadu Tech Ltd) [File not signed] FirewallRules: [{99AD-4DED3A-4E79C20EF9E6}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{FB-C62EC-8BC}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{58FDDFDFF6BFD2E1E5}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{ABFF92FAEBF8FE02}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{7FC14DACACCBC6}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{5B6C4BBECF-BD5A-A73ACBAE1}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{09FE6BDC-A6EFAF1D4AD4}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{CBCCDDCAF37EF}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{D6FB8DFA-F3DAAAD7-DAF9B82CC}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{DDAB7-DB2CECE0-E1F1DC63}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{EEDFDA-AAF6-CD06F1}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{DDFCBBA5-A0D2B3BCB}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{C64FB-CFAA-4FBBE-3ABEC61A10D2}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{AFFECD0-BAFCBCBCAF}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{B2A-2D9DEAEAA93EF22AE}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{EBA-4AED-8C5A-9CA6A72D1B37}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{CC22CEED0-CFBEDB6A}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{DF1C-A4FB7C-9FBA2}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{DDD7FDE-B4EBF4B3AEE4A5}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{1AA4F9AC-3DBCA2ECCDAE76A17}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{0EFE6C1D-6BCA-4DBF82BBF8F75C9}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{BBFADA6A}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{E9FE-B0CBEC-ADB9C}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{DDBAEF6A0}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{A4A88A8F-AA5CFC1CBE}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{B-8DABFC-BCD9C1D88F}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{4D54CD7E-DDAD5EBA72BDD2}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{D3CCAB68C49E51}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{4C9FF-4D6C-9ACBF4C7FCC}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{F4BDDAB3D18AA}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{A09DDED7-DFAA5F00A48}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{0BC3-ACEA70}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{81FE6BEEBEF5A6CD64BD7}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com () [File not signed] FirewallRules: [{4FFCFDDD}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com () [File not signed] FirewallRules: [{80CB54ED-E8CAFBECDB97F1AE9E}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{16F7EEF33C-4DB55FFF3F2C94E}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{B3ACFE-4AACFD-9EBBF}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Huadu Tech Ltd) [File not signed] FirewallRules: [{DDBBFA8-A3F2B}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Huadu Tech Ltd) [File not signed] FirewallRules: [{C5CF7AD5-BF22A08F34AF}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{8B5D1EF0CC-A09C-FB8ED86DADD7}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{5D33E89F-A91B-4CDC-BDBF-2AEFC9EBB}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{ABAFEFF8AD59}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{1DAADEEBD91DF9C6A6}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{2F9ABDBE-6B8EDDBA-4BFA9BC49}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{ABFA-A78EE-BAA9EB3A5F}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{CAFEFFBAEA8}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (Teradyne Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{2AB0A-2AFE-4DEB-ABCDBD16AE}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{85F1C41FB-9DBEABE22FFCA2}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{E2AB02BA55C6EBD08}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{9EB9B-BC8BFD-B1EAECA4}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{55A93FED3ED-9EF7FA7B0}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{EFDCEBC16EAB}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{FFAC-FCAFBB}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{B08AABDABBC4A}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{D29EA1BF7-BEFF0A}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{2AAA8E-4EBFFD6B6C}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{3EDCFFDC}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{AEA14D-D7C52F9EF4E6}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{9FE67EB97EB-BDBEC4}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{C5CDFBFACF-CB2C3D9}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{DBEA-D9D2E5CBBB49}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{F16D-3C5D-4BB7BD6A7BC6}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{D19ABEECC9B}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{EF-8AEAB14CF51}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{6FB30DBB4C-4DECFBECDFF7}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{27AA0F0B-A2DAD65DBD5D2BF}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{EE8F-5AEBECAC}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{7DDBDDBF5FB59D4F71A}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{DC9F-BFE-9BBD}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{E82FF1AB4BBF2B}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{B1FCFDA}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com () [File not signed] FirewallRules: [{77B53ADB-4DAF2AA1BD8C}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com () [File not signed] FirewallRules: [{C9B-9CEDA5-B1BE4E50FAC}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{9CEBEFAFB9EBB1}] => (Allow) C:\GenRad\DiagSystem\Runtime\africanamericanchildrenbooks.com (SPX Diagnostic Solutions Ltd) [File not signed] FirewallRules: [{0C5ECBADB2AD-FBAA37E0}] => (Block) C:\program files\hp\hp officejet en-z\bin\africanamericanchildrenbooks.com (Hewlett Packard -> Hewlett-Packard Co.) FirewallRules: [{C8F67ACFBF5-BBDD7F3F}] => (Block) C:\program files\hp\hp officejet en-z\bin\africanamericanchildrenbooks.com (Hewlett Packard -> Hewlett-Packard Co.) FirewallRules: [TCP Query User{5DD7-FFF-EF8AF}C:\programs\salamander\africanamericanchildrenbooks.com] => (Allow) C:\programs\salamander\africanamericanchildrenbooks.com (ALTAP, spol. s r.o. -> ALTAP) FirewallRules: [UDP Query User{ABDDBC7-A6AB-D8ED81EA0}C:\programs\salamander\africanamericanchildrenbooks.com] => (Allow) C:\programs\salamander\africanamericanchildrenbooks.com (ALTAP, spol. s r.o. -> ALTAP) FirewallRules: [{BED-BDEE7CDB2}] => (Allow) LPort= FirewallRules: [{F1D5EDFFDAB7F-D95AD2E}] => (Allow) LPort=21 FirewallRules: [{5CFD3F-8DCABBF95}] => (Allow) LPort= FirewallRules: [{A4BA-C4DB-0AA9ADB02}] => (Allow) LPort= FirewallRules: [{F3F1E8B7-A4FD1E-0C21B67AC}] => (Allow) C:\Programs\QuickBooks \africanamericanchildrenbooks.com (Intuit, Inc. -> SAP AG or an SAP affiliate company) FirewallRules: [{EA97D-4EFC-8B8B-8DF18A}] => (Allow) C:\Programs\QuickBooks \africanamericanchildrenbooks.com (Intuit, Inc. -> SAP AG or an SAP affiliate company) FirewallRules: [{CCBBCFCE4B16}] => (Allow) C:\Programs\QuickBooks \qbwexe (Intuit, Inc. -> Intuit Inc.) FirewallRules: [{A66DCEFDAC2AAF1AE}] => (Allow) C:\Programs\QuickBooks \qbwexe (Intuit, Inc. -> Intuit Inc.) FirewallRules: [{2DEDAEA-4CFCCCC96D31}] => (Allow) C:\Programs\QuickBooks \africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) FirewallRules: [{C5C75ECBFCC-A6C6-DDEFE}] => (Allow) C:\Programs\QuickBooks \africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) FirewallRules: [{CF-B2EDEDC-5E0CAB73FF25}] => (Allow) C:\Programs\QuickBooks \africanamericanchildrenbooks.com (Intuit, Inc. -> ) FirewallRules: [{AACCBEA2-ED7E3CA8C}] => (Allow) C:\Programs\QuickBooks \africanamericanchildrenbooks.com (Intuit, Inc. -> ) FirewallRules: [{FCFEBDDEF8AA}] => (Allow) C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit) FirewallRules: [{CCE-DED7-B8DCCCF}] => (Allow) C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit) FirewallRules: [{99A4BFBAEAC}] => (Allow) C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) FirewallRules: [{6EBDBECF-ABC50C8BBE}] => (Allow) C:\Program Files\Common Files\Intuit\QuickBooks\africanamericanchildrenbooks.com (Intuit, Inc. -> Intuit Inc.) FirewallRules: [{86E9A39D-1F8FF}] => (Allow) LPort= FirewallRules: [{5C6EBDDFB-4EF-D1AA7A}] => (Allow) LPort= FirewallRules: [{B3D36BE8-D3DCA5ECA}] => (Allow) C:\Programs\UltraVNC\africanamericanchildrenbooks.com (uvnc bvba -> UltraVNC) FirewallRules: [{E1DDEC-BEB96D2AB6}] => (Allow) C:\Programs\UltraVNC\africanamericanchildrenbooks.com (uvnc bvba -> UltraVNC) FirewallRules: [{C13EBFACCE3E}] => (Allow) C:\Programs\UltraVNC\africanamericanchildrenbooks.com (uvnc bvba -> UltraVNC) FirewallRules: [{BCEBA34A-7CDFF}] => (Allow) C:\Programs\UltraVNC\africanamericanchildrenbooks.com (uvnc bvba -> UltraVNC) FirewallRules: [{44DFA79C-A0AC-4CBBF2-C46DA42FB2CC}] => (Allow) C:\Programs\Firefox\africanamericanchildrenbooks.com (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{F63BE-FFCEB2D36E}] => (Allow) C:\Programs\Firefox\africanamericanchildrenbooks.com (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [TCP Query User{3BBBD8-B88D-CFC01F}C:\programs\firefox\africanamericanchildrenbooks.com] => (Allow) C:\programs\firefox\africanamericanchildrenbooks.com (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [UDP Query User{E2A4A1BEDBFF1E1B30B89}C:\programs\firefox\africanamericanchildrenbooks.com] => (Allow) C:\programs\firefox\africanamericanchildrenbooks.com (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{38AADADE5A-A04E3E09A}] => (Allow) C:\Programs\Firefox\africanamericanchildrenbooks.com (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{DCA9F-EDBF-4CB8EDCA}] => (Allow) C:\Programs\Firefox\africanamericanchildrenbooks.com (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{1B1DE-A0DCC-BED3FDD}] => (Allow) C:\Program Files\VueScan\africanamericanchildrenbooks.com (Hamrick Software -> Hamrick Software) FirewallRules: [{CBDBBD6-BBF7D}] => (Allow) C:\Program Files\VueScan\africanamericanchildrenbooks.com (Hamrick Software -> Hamrick Software) FirewallRules: [{9EBCECCCD1-C7FEA6CCF02B}] => (Allow) C:\Program Files\HP\HP Officejet Pro \bin\africanamericanchildrenbooks.com (Hewlett Packard -> Hewlett-Packard Development Company, LP) FirewallRules: [{C4CDC-BDAAA-8D7EFA27}] => (Allow) C:\Program Files\HP\HP Officejet Pro \bin\africanamericanchildrenbooks.com (Hewlett Packard -> Hewlett-Packard Development Company, LP) FirewallRules: [{AE3C-4CCCA8}] => (Allow) C:\Program Files\HP\HP Officejet Pro \bin\africanamericanchildrenbooks.com (Hewlett Packard -> Hewlett-Packard Development Company, LP) FirewallRules: [{CCE7EFEAAE8F2D}] => (Allow) C:\Program Files\HP\HP Officejet Pro \Bin\africanamericanchildrenbooks.com (Hewlett Packard -> Hewlett-Packard Development Company, LP) FirewallRules: [{FDBEFEFA-0CAB9A1}] => (Allow) LPort= FirewallRules: [{8A08AFD6AAC1BD}] => (Allow) C:\Program Files\HP\HP Officejet Pro \Bin\africanamericanchildrenbooks.com (Hewlett Packard -> Hewlett-Packard Development Company, LP) FirewallRules: [{31DCFEEA56E84AD}] => (Allow) C:\Program Files\Retrospect\Retrospect Client\africanamericanchildrenbooks.com (Retrospect, Inc. -> Retrospect, Inc) FirewallRules: [{F6FF3FBBACC-A05D-9EB6CC}] => (Allow) C:\Program Files\Retrospect\Retrospect Client\africanamericanchildrenbooks.com (Retrospect, Inc. -> Retrospect, Inc) FirewallRules: [TCP Query User{1C19CEAFEAE7C12D3A59}C:\program files\epson software\event manager\africanamericanchildrenbooks.com] => (Allow) C:\program files\epson software\event manager\africanamericanchildrenbooks.com (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) FirewallRules: [UDP Query User{CFDCDBC3EB43C}C:\program files\epson software\event manager\africanamericanchildrenbooks.com] => (Allow) C:\program files\epson software\event manager\africanamericanchildrenbooks.com (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) FirewallRules: [{EF3-D4ED9F-B07EDB7A52B}] => (Allow) C:\Program Files\CCleaner\africanamericanchildrenbooks.com (Piriform Ltd -> Piriform Ltd) FirewallRules: [{1CACFE2ED-BDC}] => (Allow) C:\Program Files\CCleaner\africanamericanchildrenbooks.com (Piriform Ltd -> Piriform Ltd) FirewallRules: [TCP Query User{E6ADB68E-7BDDB-AECCC4EC26}C:\program files\epson software\event manager\africanamericanchildrenbooks.com] => (Allow) C:\program files\epson software\event manager\africanamericanchildrenbooks.com (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) FirewallRules: [UDP Query User{F2DADFBBAD-BCD74B12E7F6C5}C:\program files\epson software\event manager\africanamericanchildrenbooks.com] => (Allow) C:\program files\epson software\event manager\africanamericanchildrenbooks.com (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) FirewallRules: [{FC0F6EAFA3BD5FBC}] => (Allow) LPort= FirewallRules: [{4C1F6BA50F-4EE-2D21A88B7A9B}] => (Allow) LPort= FirewallRules: [{F1EA2FCCB-9F8D-1A5ADA4F4C01}] => (Allow) C:\Programs\UltraVNC\africanamericanchildrenbooks.com (uvnc bvba -> UltraVNC) FirewallRules: [{CCD-4B9DC40DD6B}] => (Allow) C:\Programs\UltraVNC\africanamericanchildrenbooks.com (uvnc bvba -> UltraVNC) FirewallRules: [{9F8DE2D1-D25DDBBFFEED22D}] => (Allow) C:\Programs\UltraVNC\africanamericanchildrenbooks.com (uvnc bvba -> UltraVNC) FirewallRules: [{D8EC-4BCE-ABDFE61C05BA8D}] => (Allow) C:\Programs\UltraVNC\africanamericanchildrenbooks.com (uvnc bvba -> UltraVNC) FirewallRules: [{A4A1-A48DBAAB1E2BE72E5}] => (Allow) C:\Programs\CCleaner\africanamericanchildrenbooks.com (Piriform Software Ltd -> Piriform Software Ltd) FirewallRules: [{BADA1AF-DED5B67C}] => (Allow) C:\Programs\CCleaner\africanamericanchildrenbooks.com (Piriform Software Ltd -> Piriform Software Ltd) FirewallRules: [{EE-1C2CEEDC3AA6}] => (Allow) C:\Users\Gary\Ubiquiti UniFi\bin\africanamericanchildrenbooks.com () [File not signed] FirewallRules: [{1FBC4B-B0A2-FEEA0F83B}] => (Allow) C:\Users\Gary\Ubiquiti UniFi\bin\africanamericanchildrenbooks.com () [File not signed] FirewallRules: [{CF7-FDED-9DDFBDCA}] => (Block) %SystemDrive%\Programs\UltraEdit\ueditexe (IDM Computer Solutions, Inc. -> IDM Computer Solutions, Inc.) FirewallRules: [TCP Query User{4FAC5-FFADBFABDC64E}C:\programs\abouttime\africanamericanchildrenbooks.com] => (Allow) C:\programs\abouttime\africanamericanchildrenbooks.com () [File not signed] FirewallRules: [UDP Query User{D2ECDDB-9AA60CDC97E04}C:\programs\abouttime\africanamericanchildrenbooks.com] => (Allow) C:\programs\abouttime\africanamericanchildrenbooks.com () [File not signed] FirewallRules: [TCP Query User{81A8DD6D-A30EBFFCAC0A}C:\programs\iperfwin32\africanamericanchildrenbooks.com] => (Allow) C:\programs\iperfwin32\africanamericanchildrenbooks.com () [File not signed] FirewallRules: [UDP Query User{CFF7B-4CBAD87A3CE}C:\programs\iperfwin32\africanamericanchildrenbooks.com] => (Allow) C:\programs\iperfwin32\africanamericanchildrenbooks.com () [File not signed] FirewallRules: [{FE-4BF4-ACD47FC08ADF0}] => (Allow) C:\Programs\UltraEdit\ueditexe (IDM Computer Solutions, Inc. -> IDM Computer Solutions, Inc.) FirewallRules: [{9BEBB51CADC8D74BA}] => (Allow) C:\Programs\UltraEdit\ueditexe (IDM Computer Solutions, Inc. -> IDM Computer Solutions, Inc.) FirewallRules: [{CCA9FA7DF-5C6FB5F37C44}] => (Block) C:\Programs\UltraEdit\ueditexe (IDM Computer Solutions, Inc. -> IDM Computer Solutions, Inc.) FirewallRules: [{9B3E0AA3BA-A1CD-AAED}] => (Allow) C:\Program Files\Intel\WiFi\bin\africanamericanchildrenbooks.com (Intel Corporation -> ) FirewallRules: [{1B2F54FAFBC4E-8C64A3F5E2B2}] => (Allow) LPort=69 FirewallRules: [{BBEB-8E8E-E9B1BA8BAA9B}] => (Allow) C:\Programs\CCleaner\africanamericanchildrenbooks.com (Piriform Software Ltd -> Piriform Software Ltd) FirewallRules: [{3D51BAEAFBDAEDF}] => (Allow) C:\Programs\CCleaner\africanamericanchildrenbooks.com (Piriform Software Ltd -> Piriform Software Ltd) FirewallRules: [{58E08BCDCDB8BFAC39A}] => (Allow) R:\Temp\7zS\africanamericanchildrenbooks.com No File FirewallRules: [{E61BCFEFED2D-CFBCFEAA}] => (Allow) R:\Temp\7zS\africanamericanchildrenbooks.com No File FirewallRules: [{49FBB-EC6BC-A1D4-A77BC67CE}] => (Allow) C:\Dnload\9xAddons\africanamericanchildrenbooks.com (philandro Software GmbH -> ) FirewallRules: [{A-CDCEE-8BEC-C7A2AB7D3}] => (Allow) C:\Dnload\9xAddons\africanamericanchildrenbooks.com (philandro Software GmbH -> ) FirewallRules: [{D11BA-BC0BC-BFE9-EFBAD6BA7FA0}] => (Allow) C:\Dnload\9xAddons\africanamericanchildrenbooks.com (philandro Software GmbH -> ) FirewallRules: [{2DF89C-4FEEFFF19A77}] => (Allow) C:\Dnload\9xAddons\africanamericanchildrenbooks.com (philandro Software GmbH -> ) FirewallRules: [{8FBCB-1D3BAFC-9CD14F1}] => (Allow) C:\Program Files\Google\Chrome\Application\africanamericanchildrenbooks.com (Google LLC -> Google Inc.) FirewallRules: [{8E1D24AF-DEAFD3BF58}] => (Allow) C:\Program Files\Anvsoft\Syncios\pdt_africanamericanchildrenbooks.com No File FirewallRules: [{E88FBFDB8ED4DDE}] => (Allow) C:\Program Files\TeamViewer\africanamericanchildrenbooks.com (TeamViewer GmbH -> TeamViewer GmbH) FirewallRules: [{3FC0EE9D-4EC8-A7AFB3E47E}] => (Allow) C:\Program Files\TeamViewer\africanamericanchildrenbooks.com (TeamViewer GmbH -> TeamViewer GmbH) FirewallRules: [{52CBCADDCB-F06CFC1}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_africanamericanchildrenbooks.com (TeamViewer GmbH -> TeamViewer GmbH) FirewallRules: [{AC5AAD8-ABBC-8BE47CAE}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_africanamericanchildrenbooks.com (TeamViewer GmbH -> TeamViewer GmbH) FirewallRules: [{F5F12BDCDCBA82}] => (Allow) C:\Program Files\Microsoft\Skype for Desktop\africanamericanchildrenbooks.com (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{66CBB35BAEAA9BBFCA16E21}] => (Allow) C:\Program Files\Microsoft\Skype for Desktop\africanamericanchildrenbooks.com (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{84AAA63D-ABA}] => (Allow) C:\Programs\AnyDesk\africanamericanchildrenbooks.com (philandro Software GmbH -> ) FirewallRules: [{D3BEDBFCE08CD}] => (Allow) C:\Programs\AnyDesk\africanamericanchildrenbooks.com (philandro Software GmbH -> ) FirewallRules: [{BE5DEBDCFFAE}] => (Allow) C:\Programs\AnyDesk\africanamericanchildrenbooks.com (philandro Software GmbH -> ) FirewallRules: [{FF12CDDBEDD-ADEEBA}] => (Allow) C:\Programs\AnyDesk\africanamericanchildrenbooks.com (philandro Software GmbH -> ) FirewallRules: [{9CA2EE2B-C1BCED-ADC}] => (Allow) C:\Programs\AnyDesk\africanamericanchildrenbooks.com (philandro Software GmbH -> ) FirewallRules: [{4F1FDCAB-BCE7D6B}] => (Allow) C:\Programs\AnyDesk\africanamericanchildrenbooks.com (philandro Software GmbH -> ) FirewallRules: [{BADADCD-D0DBB1D2}] => (Allow) C:\Program Files\Google\Chrome\Application\africanamericanchildrenbooks.com (Google LLC -> Google Inc.) StandardProfile\AuthorizedApplications: [C:\Programs\xchat\africanamericanchildrenbooks.com] => Enabled:XChat IRC Client ==================== Restore Points ========================= Scheduled Checkpoint ==================== Faulty Device Manager Devices ============= Name: hardlock Description: hardlock Class Guid: {8ECCDFD1-AFED1} Manufacturer: Service: hardlock Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error africanamericanchildrenbooks.com the device, and this error should be resolved. Name: Mobile 5th Generation Intel(R) Core(TM) PCI Express Root Port #5 - 9C98 Description: Mobile 5th Generation Intel(R) Core(TM) PCI Express Root Port #5 - 9C98 Class Guid: {4d36e97d-ece-bfcbe} Manufacturer: INTEL Service: pci Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19) Resolution: A registry problem was detected. This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options: On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver. Name: RamDisk virtual bus device (SuperSpeed LLC) Description: RamDisk virtual bus device (SuperSpeed LLC) Class Guid: {4d36e97d-ece-bfcbe} Manufacturer: RamDisk bus driver Service: SscRdBus Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver Name: Intel(R) Dual Band Wireless-AC Description: Intel(R) Dual Band Wireless-AC Class Guid: {4d36eece-bfcbe} Manufacturer: Intel Corporation Service: NETwNs32 Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Bluetooth Device (Personal Area Network) Description: Bluetooth Device (Personal Area Network) Class Guid: {4d36eece-bfcbe} Manufacturer: Microsoft Service: BthPan Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: IPVanish Adapter Description: IPVanish Adapter Class Guid: {4d36eece-bfcbe} Manufacturer: IPVANISH Service: tapipvanish Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: TAP-Windows Adapter V9 Description: TAP-Windows Adapter V9 Class Guid: {4d36eece-bfcbe} Manufacturer: TAP-Windows Provider V9 Service: tap Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Npcap Loopback Adapter Description: Microsoft Loopback Adapter Class Guid: {4d36eece-bfcbe} Manufacturer: Microsoft Service: msloop Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: PdaNet Broadband Adapter Description: PdaNet Broadband Adapter Class Guid: {4d36eece-bfcbe} Manufacturer: June Fabrics Technology Inc. Service: pneteth Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (05/24/ AM) (Source: PDQ Deploy) (EventID: ) (User: ) Description: Error starting PDQ Deploy Service CLR Version : Date : TZ Entry : C:\Program Files\Admin Arsenal\PDQ Deploy\africanamericanchildrenbooks.com Error : The type initializer for 'africanamericanchildrenbooks.comtServer' threw an exception. Error Type : africanamericanchildrenbooks.comitializationException HResult : 0x (19) License Mode : Free Mode Manufacturer : LENOVO (20E2CTO1WW) Memory : 2 GB ( MB free) Product : PDQ Deploy RaygunEnabled : True Service Mode : Local Version : Windows : Microsoft Windows 7 Ultimate () Could not find a part of the path 'R:\Temp\PDQDeployService\'. africanamericanchildrenbooks.comoryNotFoundException HResult: 0x (7) at africanamericanchildrenbooks.com__africanamericanchildrenbooks.comrror(Int32 errorCode, String maybeFullPath) at africanamericanchildrenbooks.comalCreateDirectory(String fullPath, String path, Object dirSecurityObj, Boolean checkHost) at africanamericanchildrenbooks.comalCreateDirectoryHelper(String path, Boolean checkHost) at africanamericanchildrenbooks.comDirectory(String path) at africanamericanchildrenbooks.com() at africanamericanchildrenbooks.com() OUTER EXCEPTION The type initializer for 'africanamericanchildrenbooks.comth' threw an exception. africanamericanchildrenbooks.comitializationException HResult: 0x (19) at africanamericanchildrenbooks.com() OUTER EXCEPTION The type initializer for 'africanamericanchildrenbooks.comtServer' threw an exception. africanamericanchildrenbooks.comitializationException HResult: 0x (19) at africanamericanchildrenbooks.com(Boolean wait) at africanamericanchildrenbooks.comt(String[] args) Error: (05/24/ AM) (Source: Microsoft-Windows-EapHost) (EventID: ) (User: NT AUTHORITY) Description: Skipping: Eap method DLL path name validation failed. Error: typeId=43, authorId=9, vendorId=0, vendorType=0 Error: (05/24/ AM) (Source: Microsoft-Windows-EapHost) (EventID: ) (User: NT AUTHORITY) Description: Skipping: Eap method DLL path name validation failed. Error: typeId=25, authorId=9, vendorId=0, vendorType=0 Error: (05/24/ AM) (Source: Microsoft-Windows-EapHost) (EventID: ) (User: NT AUTHORITY) Description: Skipping: Eap method DLL path name validation failed. Error: typeId=17, authorId=9, vendorId=0, vendorType=0 Error: (05/07/ PM) (Source: Microsoft-Windows-EapHost) (EventID: ) (User: NT AUTHORITY) Description: Skipping: Eap method DLL path name validation failed. Error: typeId=43, authorId=9, vendorId=0, vendorType=0 Error: (05/07/ PM) (Source: Microsoft-Windows-EapHost) (EventID: ) (User: NT AUTHORITY) Description: Skipping: Eap method DLL path name validation failed. Error: typeId=25, authorId=9, vendorId=0, vendorType=0 Error: (05/07/ PM) (Source: Microsoft-Windows-EapHost) (EventID: ) (User: NT AUTHORITY) Description: Skipping: Eap method DLL path name validation failed. Error: typeId=17, authorId=9, vendorId=0, vendorType=0 Error: (05/07/ PM) (Source: Microsoft-Windows-EapHost) (EventID: ) (User: NT AUTHORITY) Description: Skipping: Eap method DLL path name validation failed. Error: typeId=43, authorId=9, vendorId=0, vendorType=0 System errors: ============= Error: (05/24/ AM) (Source: HTTP) (EventID: ) (User: ) Description: Owner of the log file or directory \SystemRoot\System32\LogFiles\HTTPERR\africanamericanchildrenbooks.com is invalid. This could be because another user has already created the log file or the directory. Error: (05/24/ AM) (Source: Service Control Manager) (EventID: ) (User: ) Description: The World Wide Web Publishing Service service depends on the Windows Process Activation Service service which failed to start because of the following error: The system cannot find the path specified. Error: (05/24/ AM) (Source: Service Control Manager) (EventID: ) (User: ) Description: The Windows Process Activation Service service terminated with the following error: The system cannot find the path specified. Error: (05/24/ AM) (Source: WAS) (EventID: ) (User: ) Description: Windows Process Activation Service (WAS) is stopping because it encountered an error. The data field contains the error number. Error: (05/24/ AM) (Source: WAS) (EventID: ) (User: ) Description: The directory specified for the temporary application pool config files is either missing or is not accessible by the Windows Process Activation Service. Please specify an existing directory and/or ensure that it has proper access flags. The data field contains the error number. Error: (05/24/ AM) (Source: Service Control Manager) (EventID: ) (User: ) Description: The hardlock service failed to start due to the following error: The system cannot find the file specified. Error: (05/24/ AM) (Source: APPHOSTSVC) (EventID: ) (User: ) Description: The Application Host Helper Service encountered an error trying to access the root history directory 'C:\inetpub\history'. The directory either doesn't exist or the permissions on it don't allow the history service to access it. The config history feature is disabled for now and will be re-enabled after the issue is resolved. To resolve this issue, please ensure that the directory exists and that the Administrators group have read and write access to it. The data field contains the error number. Error: (05/24/ AM) (Source: SscRdBus) (EventID: ) (User: ) Description: Driver data's FDO count is already one. Check Device Manager for spurious bus devices. Windows Defender: =================================== Date: Description: Windows Defender has detected spyware or other potentially unwanted software. For more information please see the following: http://africanamericanchildrenbooks.com?linkid=&name=Program:Win32/Hadsruda!bit&threatid= Name:Program:Win32/Hadsruda!bit ID Severity:Medium Category:Potentially Unwanted Software Path Found:file:C:\Sandbox\Gary\DefaultBox\drive\R\Temp\nsetmp\africanamericanchildrenbooks.com Detection Type:Concrete Detection Source:System Status:Unknown Process Name: Date: Description: Windows Defender has detected spyware or other potentially unwanted software. For more information please see the following: http://africanamericanchildrenbooks.com?linkid=&name=Program:Win32/Hadsruda!bit&threatid= Name:Program:Win32/Hadsruda!bit ID Severity:Medium Category:Potentially Unwanted Software Path Found:file:C:\Sandbox\Gary\DefaultBox\drive\R\Temp\nsetmp\africanamericanchildrenbooks.com Detection Type:Concrete Detection Source:System Status:Unknown Process Name: Date: Description: Windows Defender has detected spyware or other potentially unwanted software. For more information please see the following: http://africanamericanchildrenbooks.com?linkid=&name=Program:Win32/Hadsruda!bit&threatid= Name:Program:Win32/Hadsruda!bit ID Severity:Medium Category:Potentially Unwanted Software Path Found:file:C:\Sandbox\Gary\DefaultBox\drive\R\Temp\nsetmp\africanamericanchildrenbooks.com Detection Type:Concrete Detection Source:System Status:Unknown Process Name: Date: Description: Windows Defender has detected spyware or other potentially unwanted software. For more information please see the following: http://africanamericanchildrenbooks.com?linkid=&name=Program:Win32/Hadsruda!bit&threatid= Name:Program:Win32/Hadsruda!bit ID Severity:Medium Category:Potentially Unwanted Software Path Found:file:C:\Sandbox\Gary\DefaultBox\drive\R\Temp\nsetmp\africanamericanchildrenbooks.com Detection Type:Concrete Detection Source:System Status:Unknown Process Name: Date: Description: Windows Defender has detected spyware or other potentially unwanted software. For more information please see the following: http://africanamericanchildrenbooks.com?linkid=&name=Program:Win32/Hadsruda!bit&threatid= Name:Program:Win32/Hadsruda!bit ID Severity:Medium Category:Potentially Unwanted Software Path Found:file:C:\Sandbox\Gary\DefaultBox\drive\R\Temp\nsetmp\africanamericanchildrenbooks.com Detection Type:Concrete Detection Source:System Status:Unknown Process Name: Date: Description: Windows Defender has encountered an error when taking action on spyware or other potentially unwanted software. For more information please see the following: http://africanamericanchildrenbooks.com?linkid=&name=Program:Win32/Hadsruda!bit&threatid= Name:Program:Win32/Hadsruda!bit ID Severity:Medium Category:Potentially Unwanted Software Path: Action:Remove Error Code:0x Error description:The program could not find the spyware and other potentially unwanted software on this computer. Status: Date: Description: Windows Defender has encountered an error trying to load signatures and will attempt reverting back to a known-good set of signatures. Signatures Attempted:Current Error Code:0x Error description:The system cannot find the file specified. Signature version Engine version CodeIntegrity: =================================== Date: Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\msimgdll because the set of per-page image hashes could not be found on the system. Date: Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\msimgdll because the set of per-page image hashes could not be found on the system. Date: Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\msimgdll because the set of per-page image hashes could not be found on the system. Date: Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\msimgdll because the set of per-page image hashes could not be found on the system. Date: Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\msimgdll because the set of per-page image hashes could not be found on the system. Date: Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\msimgdll because the set of per-page image hashes could not be found on the system. Date: Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\msimgdll because the set of per-page image hashes could not be found on the system. Date: Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\msimgdll because the set of per-page image hashes could not be found on the system. ==================== Memory info =========================== BIOS: LENOVO N11ET48W ( ) 03/20/ Motherboard: LENOVO 20E2CTO1WW Processor: Intel(R) Core(TM) iU CPU @ GHz Percentage of memory in use: 84% Total physical RAM: MB Available physical RAM: MB Total Virtual: MB Available Virtual: MB ==================== Drives ================================ Drive c: (Windows 7) (Fixed) (Total GB) (Free GB) NTFS ==>[system with boot components (obtained from drive)] Drive d: (Windows 10) (Fixed) (Total GB) (Free GB) NTFS ==>[system with boot components (obtained from drive)] Drive e: (Backup) (Fixed) (Total GB) (Free GB) NTFS Drive f: (MULTIBOOT) (Removable) (Total GB) (Free GB) FAT32 Drive n: (NASDrive) (Network) (Total GB) (Free GB) NTFS Drive r: (RAMDisk) (Fixed) (Total GB) (Free GB) NTFS \\?\Volume{cbabddae8-be6f6e}\ () (Fixed) (Total GB) (Free GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7/8/10) (Size: GB) (Disk ID: 5BC53D8B) Partition 1: (Active) - (Size= GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size= MB) - (Type=27) Partition 3: (Not Active) - (Size= GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size= GB) - (Type=0F Extended) ======================================================== Disk: 1 (Size: GB) (Disk ID: BC4AB5E2) ======================================================== Disk: 2 (MBR Code: Windows 7/8/10) (Size: GB) (Disk ID: FBAA7) Partition 1: (Not Active) - (Size= GB) - (Type=07 NTFS) ======================================================== Disk: 3 (MBR Code: Windows 7/8/10) (Size: MB) (Disk ID: C13) Partition 1: (Active) - (Size= MB) - (Type=0C) Partition 4: (Not Active) - (Size=21 MB) - (Type=00) ==================== End of africanamericanchildrenbooks.com ============================