Start:: CreateRestorePoint: CloseProcesses: GroupPolicy: Restriction ? <==== ATTENTION Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION AV: Kaspersky Total Security (Disabled - Up to date) {4F76F112-43EB-40E8-11D8-F7BD1853EA23} FW: Kaspersky Total Security (Disabled) {774D7037-0984-41B0-3A87-5E88E680AD58} 2026-05-28 17:55 - 2023-03-16 22:31 - 000000000 ____D C:\ProgramData\Kaspersky Lab Setup Files 2026-05-28 17:51 - 2025-05-25 11:01 - 000000000 ____D C:\ProgramData\Kaspersky Lab File: C:\Users\AlexP\AppData\Roaming\msregsvv.dll C:\Users\AlexP\AppData\Roaming\msregsvv.dll 2026-05-28 17:46 - 2026-05-28 17:47 - 1742068142 _____ C:\Users\AlexP\Downloads\01-Forza.Horizon.6.Update.v354.221.to.v364.933.AiO-OFME.rar HKU\S-1-5-21-3557846377-4158077332-3984773567-1000\...\Run: [Reference 4 Systemwide] => C:\Program Files\Sonarworks\Reference 4\Systemwide\Reference 4 Systemwide.exe --hide-systemwide --enable-media-stream=1 (No File) HKU\S-1-5-21-3557846377-4158077332-3984773567-1000\...\Run: [SoundID Reference.exe] => C:\Program Files\Sonarworks\SoundID Reference\Systemwide\SoundID Reference.exe --hide-systemwide (No File) HKU\S-1-5-21-3557846377-4158077332-3984773567-1000\...\Run: [RiotClient] => E:\Riot Games\Riot Client\RiotClientServices.exe --launch-background-mode (No File) HKU\S-1-5-21-3557846377-4158077332-3984773567-1000\...\Run: [Sideloadly Daemon] => C:\Users\AlexP\AppData\Local\Sideloadly\sideloadlydaemon.exe (No File) Task: {B1815D58-C757-4536-830C-1A7A4770B4DF} - System32\Tasks\C__Program Files_HeidiSQL_heidisql.exe => C:\Program Files\HeidiSQL\heidisql.exe --runfrom=scheduler (No File) Task: {2C09511C-D897-44B3-9588-F0953FA804D3} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem132.0.6833.0{7642B126-86F5-49B0-BE9D-40B628FCABB2} => "C:\Program Files (x86)\Google\GoogleUpdater\132.0.6833.0\updater.exe" --wake --system (No File) Task: {7C26C89B-FF68-433D-9317-CACA6164CA58} - System32\Tasks\GPU Tweak III => C:\Program Files (x86)\ASUS\GPUTweakIII\GPU Tweak III.exe (No File) S2 GoogleUpdaterInternalService132.0.6833.0; "C:\Program Files (x86)\Google\GoogleUpdater\132.0.6833.0\updater.exe" --system --windows-service --service=update-internal (No File) S2 OCButtonService; "C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\OcButtonService.exe" (No File) S3 cpuz154; \??\C:\Windows\temp\cpuz154\cpuz154_x64.sys (No File) <==== ATTENTION S3 EAAntiCheat; system32\drivers\eaanticheat.sys (No File) S3 GPUZ-v2; \??\C:\Users\AlexP\AppData\Local\Temp\GPUZ-v2.sys (No File) <==== ATTENTION S4 NvModuleTracker; \SystemRoot\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_ea6cec41fc5b2a8b\NvModuleTracker.sys (No File) 2025-12-01 21:27 - 2025-12-01 21:27 - 000000048 ____R () C:\Users\AlexP\AppData\Local\0ECBC183361978D21F69DDA02ED59705 2025-01-04 01:37 - 2025-01-04 01:37 - 000000048 ____R () C:\Users\AlexP\AppData\Local\7749B1966E9A0B2DFB04CF06EC5C12CA 2024-06-05 19:19 - 2024-06-05 19:19 - 000007142 _____ () C:\Users\AlexP\AppData\Local\94024352710 CustomCLSID: HKU\S-1-5-21-3557846377-4158077332-3984773567-1000_Classes\CLSID\{5C4D8D77-5B87-40CA-884E-F56858227E5C}\localserver32 -> C:\Program Files\TeamSpeak\notification_helper.exe => No File AlternateDataStreams: C:\Windows\system.ini:3722303095 [64] AlternateDataStreams: C:\Windows\SysWOW64\dssec.dat:1272194539 [64] AlternateDataStreams: C:\Users\AlexP\Application Data:00e481b5e22dbe1f649fcddd505d3eb7 [394] AlternateDataStreams: C:\Users\AlexP\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [394] AlternateDataStreams: C:\ProgramData\ntuser.dat:D4F6BC83AF [4298] AlternateDataStreams: C:\ProgramData\ntuser.dat.LOG1:94949E25BC [4298] AlternateDataStreams: C:\ProgramData\ntuser.dat.LOG2:CCE2DBB696 [4298] AlternateDataStreams: C:\ProgramData\ntuser.dat{9e3002cd-dae7-11ed-9398-6245b50ea4ff}.TM.blf:3A9E9BE701 [4298] AlternateDataStreams: C:\ProgramData\ntuser.dat{9e3002cd-dae7-11ed-9398-6245b50ea4ff}.TMContainer00000000000000000001.regtrans-ms:A865694508 [4298] AlternateDataStreams: C:\ProgramData\ntuser.dat{9e3002cd-dae7-11ed-9398-6245b50ea4ff}.TMContainer00000000000000000002.regtrans-ms:5A67898CEF [4298] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini:B1DA6C571C [4298] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Gameforge Client.url:F2CF60045E [4298] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoHotkey Dash.lnk:B4B3884CBE [4298] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoHotkey Window Spy.lnk:88F1223DAF [4298] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Counter-Strike WaRzOnE.lnk:17D621BEAD [4298] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [4298] AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [4348] FirewallRules: [{277242AC-DD8B-49C4-B3B2-10E442A6DC98}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File FirewallRules: [{853C19AE-3D70-46E6-A7B9-021B4E57012B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File FirewallRules: [TCP Query User{ABDF1281-F824-44CA-B837-5E5981BCE520}F:\tekken 7\tekkengame\binaries\win64\tekkengame-win64-shipping_cdx_cracked.exe] => (Allow) F:\tekken 7\tekkengame\binaries\win64\tekkengame-win64-shipping_cdx_cracked.exe => No File FirewallRules: [UDP Query User{A9E6F4EF-9881-4160-9940-CE8BB21F74BF}F:\tekken 7\tekkengame\binaries\win64\tekkengame-win64-shipping_cdx_cracked.exe] => (Allow) F:\tekken 7\tekkengame\binaries\win64\tekkengame-win64-shipping_cdx_cracked.exe => No File FirewallRules: [{E58CFD45-C9E3-48EE-8EC1-BE124D95E6EA}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\RainbowSix_BE.exe => No File FirewallRules: [{73B89DB1-05FE-488C-A296-63B86E99DBD2}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\RainbowSix_BE.exe => No File FirewallRules: [{B4130558-5835-459C-9672-AAA997B4394D}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\RainbowSix.exe => No File FirewallRules: [{5564A1C5-EC6C-4E74-9EA9-AFA35A21C6FE}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\RainbowSix.exe => No File FirewallRules: [TCP Query User{D111CA77-B703-4289-BD38-FD5C7BBA35CC}D:\fifa19\fifa19.exe] => (Block) D:\fifa19\fifa19.exe => No File FirewallRules: [UDP Query User{D444FAAB-917C-4F68-A8DE-67EF27EC93F2}D:\fifa19\fifa19.exe] => (Block) D:\fifa19\fifa19.exe => No File FirewallRules: [TCP Query User{856E8408-26A9-4F3A-80E7-2A0DB29F8730}E:\steamlibrary\steamapps\common\assettocorsa\acs.exe] => (Allow) E:\steamlibrary\steamapps\common\assettocorsa\acs.exe => No File FirewallRules: [UDP Query User{E05DBC07-9B83-4F19-8F49-570B9F77F638}E:\steamlibrary\steamapps\common\assettocorsa\acs.exe] => (Allow) E:\steamlibrary\steamapps\common\assettocorsa\acs.exe => No File FirewallRules: [{4FD8A0FC-6C81-4150-A601-28B535AB9B1A}] => (Allow) E:\SteamLibrary\steamapps\common\3DMark\bin\x64\3DMark.exe => No File FirewallRules: [{6829414D-7E40-4C7E-A965-606E33537681}] => (Allow) E:\SteamLibrary\steamapps\common\3DMark\bin\x64\3DMark.exe => No File FirewallRules: [{DD23AE74-DC44-4CF2-8666-B03356CD6A5A}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe => No File FirewallRules: [{9668082D-0EFF-43C0-A216-4336B5F1D45C}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\gcupd.exe => No File FirewallRules: [{BD903827-56A7-454E-A919-681FCDDDF83E}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe => No File FirewallRules: [{6ECFFBE4-4364-4D80-BAFD-7EC42BF74173}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\gcupd.exe => No File FirewallRules: [TCP Query User{125AEDAF-CA84-4002-BE5B-84A1346842D6}E:\big.ambitions.build.1714\big ambitions\big ambitions.exe] => (Allow) E:\big.ambitions.build.1714\big ambitions\big ambitions.exe => No File FirewallRules: [UDP Query User{4DD42B6A-D171-4AD7-BABD-B185D9D6C66B}E:\big.ambitions.build.1714\big ambitions\big ambitions.exe] => (Allow) E:\big.ambitions.build.1714\big ambitions\big ambitions.exe => No File FirewallRules: [TCP Query User{702242B2-4641-4245-A9D0-E11053016AB1}F:\grand theft auto v\gta5.exe] => (Allow) F:\grand theft auto v\gta5.exe => No File FirewallRules: [UDP Query User{A39B77BC-2328-464F-B073-5D91F5316623}F:\grand theft auto v\gta5.exe] => (Allow) F:\grand theft auto v\gta5.exe => No File FirewallRules: [TCP Query User{F087A13E-35DC-431A-91A0-86BAAC385AFD}D:\forhonor\forhonor.exe] => (Allow) D:\forhonor\forhonor.exe => No File FirewallRules: [UDP Query User{35C24489-34E5-4FD8-A4E2-274BBF2CC5C7}D:\forhonor\forhonor.exe] => (Allow) D:\forhonor\forhonor.exe => No File FirewallRules: [TCP Query User{4DEF5C7B-300A-4C5D-B78E-84139B06A029}C:\users\alexp\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_chromebrowser] => (Allow) C:\users\alexp\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_chromebrowser => No File FirewallRules: [UDP Query User{D14B3737-C7B3-4EAB-80EB-D5B32BD13B26}C:\users\alexp\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_chromebrowser] => (Allow) C:\users\alexp\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_chromebrowser => No File FirewallRules: [TCP Query User{5DACF4D9-FF50-4C05-82B4-1CC7F34A6702}C:\users\alexp\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2189_gtaprocess.exe] => (Allow) C:\users\alexp\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2189_gtaprocess.exe => No File FirewallRules: [UDP Query User{63F2C04C-42C5-4C3D-AE96-8EE23A18A5EA}C:\users\alexp\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2189_gtaprocess.exe] => (Allow) C:\users\alexp\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2189_gtaprocess.exe => No File FirewallRules: [TCP Query User{04E45225-83DD-4ADB-8555-7A0E0FE080C8}C:\program files\badlion client\badlion client.exe] => (Allow) C:\program files\badlion client\badlion client.exe => No File FirewallRules: [UDP Query User{737656B1-BBD7-4825-A755-F5593D366558}C:\program files\badlion client\badlion client.exe] => (Allow) C:\program files\badlion client\badlion client.exe => No File FirewallRules: [TCP Query User{C7866403-AE8D-4C91-8120-3A106B152CC4}C:\program files\java\jre1.8.0_351\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_351\bin\javaw.exe => No File FirewallRules: [UDP Query User{EDA38F5B-5164-42C2-B112-801E995B0E3E}C:\program files\java\jre1.8.0_351\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_351\bin\javaw.exe => No File FirewallRules: [{642E97B0-9D52-487B-AC37-EED87503FE6F}] => (Allow) C:\Program Files\Badlion Client\Badlion Client.exe => No File FirewallRules: [TCP Query User{66D56D9C-0DF3-4AE8-909D-311D85567D45}F:0\steamlibrary\steamapps\common\arma 3\arma3_x64.exe] => (Allow) F:0\steamlibrary\steamapps\common\arma 3\arma3_x64.exe => No File FirewallRules: [UDP Query User{323810D2-48B5-4D2E-B62A-685235D0236A}F:0\steamlibrary\steamapps\common\arma 3\arma3_x64.exe] => (Allow) F:0\steamlibrary\steamapps\common\arma 3\arma3_x64.exe => No File FirewallRules: [{B962C5AC-22EB-4F47-9993-EFB1A723DFDD}] => (Block) F:0\steamlibrary\steamapps\common\arma 3\arma3_x64.exe => No File FirewallRules: [{ADF7DAAE-CAF6-4C30-9052-092FEB9E4E6E}] => (Block) F:0\steamlibrary\steamapps\common\arma 3\arma3_x64.exe => No File FirewallRules: [TCP Query User{3617CB4B-80B8-4F13-A1F4-4464D2C1893A}F:1\steamlibrary\steamapps\common\arma 3\arma3_x64.exe] => (Allow) F:1\steamlibrary\steamapps\common\arma 3\arma3_x64.exe => No File FirewallRules: [UDP Query User{1CD69503-4602-4ED6-9300-E807B28730DC}F:1\steamlibrary\steamapps\common\arma 3\arma3_x64.exe] => (Allow) F:1\steamlibrary\steamapps\common\arma 3\arma3_x64.exe => No File FirewallRules: [{03D42E41-EBA5-44DF-A3EF-167BDAAD7EEC}] => (Block) F:1\steamlibrary\steamapps\common\arma 3\arma3_x64.exe => No File FirewallRules: [{B172603F-6121-46D4-9D69-AE02484EF956}] => (Block) F:1\steamlibrary\steamapps\common\arma 3\arma3_x64.exe => No File FirewallRules: [TCP Query User{78A4E216-1AB2-4659-A2C1-5A6B67658DDE}G:\steamlibrary\steamapps\common\arma 3\arma3_x64.exe] => (Allow) G:\steamlibrary\steamapps\common\arma 3\arma3_x64.exe => No File FirewallRules: [UDP Query User{FF1981DB-441C-497E-AF23-00142310A033}G:\steamlibrary\steamapps\common\arma 3\arma3_x64.exe] => (Allow) G:\steamlibrary\steamapps\common\arma 3\arma3_x64.exe => No File FirewallRules: [{73EDA554-1282-4B56-B03D-A8C0DD589814}] => (Block) G:\steamlibrary\steamapps\common\arma 3\arma3_x64.exe => No File FirewallRules: [{A871D9F8-BD4E-43E9-A8DB-D8C68012C5FC}] => (Block) G:\steamlibrary\steamapps\common\arma 3\arma3_x64.exe => No File FirewallRules: [{AEB9E8D8-0ACF-437C-9860-C65C9CEAA89A}] => (Allow) G:\Keep Talking and Nobody Explodes\steam_api.exe => No File FirewallRules: [{B66C19AC-1BAF-4751-BB35-E2B8AE62F65C}] => (Allow) G:\Keep Talking and Nobody Explodes\steam_api.exe => No File FirewallRules: [{3CD7299B-6EFA-4430-A033-F0506F636C69}] => (Allow) G:\SteamLibrary\steamapps\common\Arma 3\arma3_x64.exe => No File FirewallRules: [TCP Query User{C569C9F6-842F-4DDC-9B40-CBA0CE3F7766}E:\ready or not\readyornot\binaries\win64\readyornot-win64-shipping.exe] => (Allow) E:\ready or not\readyornot\binaries\win64\readyornot-win64-shipping.exe => No File FirewallRules: [UDP Query User{A56B7284-62F0-434D-810C-2EB89266F153}E:\ready or not\readyornot\binaries\win64\readyornot-win64-shipping.exe] => (Allow) E:\ready or not\readyornot\binaries\win64\readyornot-win64-shipping.exe => No File FirewallRules: [{41EB1A59-4147-4BC5-AEBE-205A6B02FF78}] => (Block) E:\ready or not\readyornot\binaries\win64\readyornot-win64-shipping.exe => No File FirewallRules: [{B275B5DD-812F-450D-837C-F20711CFB8C0}] => (Block) E:\ready or not\readyornot\binaries\win64\readyornot-win64-shipping.exe => No File FirewallRules: [TCP Query User{ACB1C779-F71E-430D-B923-29FC17A7B43F}F:3\steamlibrary\steamapps\common\arma 3\arma3_x64.exe] => (Allow) F:3\steamlibrary\steamapps\common\arma 3\arma3_x64.exe => No File FirewallRules: [UDP Query User{9AD59BD0-AFCF-4BBE-891F-5DFED3497A24}F:3\steamlibrary\steamapps\common\arma 3\arma3_x64.exe] => (Allow) F:3\steamlibrary\steamapps\common\arma 3\arma3_x64.exe => No File FirewallRules: [{EFAA2728-07F1-462E-A700-AC3D65E42780}] => (Block) F:3\steamlibrary\steamapps\common\arma 3\arma3_x64.exe => No File FirewallRules: [{69E6072C-4A35-4897-978B-27DC4AF1766C}] => (Block) F:3\steamlibrary\steamapps\common\arma 3\arma3_x64.exe => No File FirewallRules: [TCP Query User{0CC90E07-2E19-4C2C-8EE1-6B0C11D4CDEF}F:4\gta iii definitive edition\gameface\binaries\win64\libertycity.exe] => (Allow) F:4\gta iii definitive edition\gameface\binaries\win64\libertycity.exe => No File FirewallRules: [UDP Query User{8ABBE1CF-8DA5-4DA1-B523-23F41AFC971F}F:4\gta iii definitive edition\gameface\binaries\win64\libertycity.exe] => (Allow) F:4\gta iii definitive edition\gameface\binaries\win64\libertycity.exe => No File FirewallRules: [{B18EA360-3C03-4538-AB1E-19E703950391}] => (Block) F:4\gta iii definitive edition\gameface\binaries\win64\libertycity.exe => No File FirewallRules: [{925DEF87-EEE1-4400-BE27-B6B1E8D38AEC}] => (Block) F:4\gta iii definitive edition\gameface\binaries\win64\libertycity.exe => No File FirewallRules: [TCP Query User{FB8A29B8-7305-4E08-801A-A745A81ADBBA}F:4\prototype 2\prototype2.exe] => (Allow) F:4\prototype 2\prototype2.exe => No File FirewallRules: [UDP Query User{B9FDFB9D-6E8D-45E2-827F-D4F9BE6C6067}F:4\prototype 2\prototype2.exe] => (Allow) F:4\prototype 2\prototype2.exe => No File FirewallRules: [{3453B9F2-99F2-44C3-B62F-D0F70B195A35}] => (Block) F:4\prototype 2\prototype2.exe => No File FirewallRules: [{1993BD3F-E6FE-4CB1-A4A1-64E1FA5B9B85}] => (Block) F:4\prototype 2\prototype2.exe => No File FirewallRules: [TCP Query User{9DD087E2-E5FE-4FD4-8CD1-152E6E47CA85}F:5\prototype 2\prototype2.exe] => (Allow) F:5\prototype 2\prototype2.exe => No File FirewallRules: [UDP Query User{FE4BAC1B-80B2-49F4-9DB6-850D21C59059}F:5\prototype 2\prototype2.exe] => (Allow) F:5\prototype 2\prototype2.exe => No File FirewallRules: [{4448EEF7-40A7-463D-B116-70BDA9708A71}] => (Block) F:5\prototype 2\prototype2.exe => No File FirewallRules: [{8E8B3AD2-273D-4898-A0D0-DE55CD5602B1}] => (Block) F:5\prototype 2\prototype2.exe => No File FirewallRules: [TCP Query User{4FD78854-D74F-4FAF-8FB7-A703BFFE610C}F:5\gta san andreas definitive edition\gameface\binaries\win64\sanandreas.exe] => (Block) F:5\gta san andreas definitive edition\gameface\binaries\win64\sanandreas.exe => No File FirewallRules: [UDP Query User{957EDAA3-3F02-4B64-9E37-4C1DC0397C61}F:5\gta san andreas definitive edition\gameface\binaries\win64\sanandreas.exe] => (Block) F:5\gta san andreas definitive edition\gameface\binaries\win64\sanandreas.exe => No File FirewallRules: [TCP Query User{06565BA8-2CFB-406A-91C0-93D00903EDF6}F:6\gta san andreas definitive edition\gameface\binaries\win64\sanandreas.exe] => (Allow) F:6\gta san andreas definitive edition\gameface\binaries\win64\sanandreas.exe => No File FirewallRules: [UDP Query User{9CF599CA-A67E-46D3-B8F5-6D661C7477FB}F:6\gta san andreas definitive edition\gameface\binaries\win64\sanandreas.exe] => (Allow) F:6\gta san andreas definitive edition\gameface\binaries\win64\sanandreas.exe => No File FirewallRules: [{0FF98FE0-FC40-4894-8653-F40002DEC31B}] => (Block) F:6\gta san andreas definitive edition\gameface\binaries\win64\sanandreas.exe => No File FirewallRules: [{14904FC6-A7CF-4B70-A706-EDE70A136C61}] => (Block) F:6\gta san andreas definitive edition\gameface\binaries\win64\sanandreas.exe => No File FirewallRules: [TCP Query User{E57F7F1E-031D-4DF5-9C81-42A8A45F189A}G:\gta san andreas definitive edition\gameface\binaries\win64\sanandreas.exe] => (Allow) G:\gta san andreas definitive edition\gameface\binaries\win64\sanandreas.exe => No File FirewallRules: [UDP Query User{F18A46CA-8FE6-4A0B-9E60-0A3A9A8DB524}G:\gta san andreas definitive edition\gameface\binaries\win64\sanandreas.exe] => (Allow) G:\gta san andreas definitive edition\gameface\binaries\win64\sanandreas.exe => No File FirewallRules: [{631DD40A-7DB1-46A3-91A8-119D959E04C3}] => (Block) G:\gta san andreas definitive edition\gameface\binaries\win64\sanandreas.exe => No File FirewallRules: [{73520697-E844-4531-A448-C7DE75FB2677}] => (Block) G:\gta san andreas definitive edition\gameface\binaries\win64\sanandreas.exe => No File FirewallRules: [TCP Query User{B9B636D0-ADE5-4116-A63A-198730644122}F:0\gta san andreas definitive edition\gameface\binaries\win64\sanandreas.exe] => (Allow) F:0\gta san andreas definitive edition\gameface\binaries\win64\sanandreas.exe => No File FirewallRules: [UDP Query User{66F833DD-2C4D-418A-A635-66007B2B6A44}F:0\gta san andreas definitive edition\gameface\binaries\win64\sanandreas.exe] => (Allow) F:0\gta san andreas definitive edition\gameface\binaries\win64\sanandreas.exe => No File FirewallRules: [{FCD17945-A724-4E0C-A42C-1714EFF08B3F}] => (Block) F:0\gta san andreas definitive edition\gameface\binaries\win64\sanandreas.exe => No File FirewallRules: [{FBAB1C19-F4DF-42B1-851B-F649F2C6E916}] => (Block) F:0\gta san andreas definitive edition\gameface\binaries\win64\sanandreas.exe => No File FirewallRules: [TCP Query User{C972249E-F4B3-4446-A8C8-D068344263CE}G:\prototype 2\prototype2.exe] => (Block) G:\prototype 2\prototype2.exe => No File FirewallRules: [UDP Query User{ABC92994-C1DE-430D-8775-2B1C4A3F411A}G:\prototype 2\prototype2.exe] => (Block) G:\prototype 2\prototype2.exe => No File FirewallRules: [{EF52730F-FC1B-4816-B511-01F6D14B80D8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Steam Engine Simulator\bin\atg-steam-engine-demo.exe => No File FirewallRules: [{23B47539-3F6B-4816-9E23-A0D1E7C2A825}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Steam Engine Simulator\bin\atg-steam-engine-demo.exe => No File FirewallRules: [{FAAB8DE8-89A0-485A-89B1-526BA04775FF}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe => No File FirewallRules: [{44BC0D96-6A11-4BA5-8197-D191B3E52A58}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe => No File FirewallRules: [{0E73D4F0-2BDA-4EC1-A6D2-B211B91734C1}] => (Allow) E:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File FirewallRules: [{1111CA3F-D9E4-4A0F-B215-8C8F6AC882B2}] => (Allow) E:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe => No File FirewallRules: [TCP Query User{6260AFBC-E5EF-40EE-A3EC-DD633018D079}G:\worldbox v0.21.0\worldbox\worldbox.exe] => (Allow) G:\worldbox v0.21.0\worldbox\worldbox.exe => No File FirewallRules: [UDP Query User{279875F5-2C07-4B91-A45F-A1019BFB9041}G:\worldbox v0.21.0\worldbox\worldbox.exe] => (Allow) G:\worldbox v0.21.0\worldbox\worldbox.exe => No File FirewallRules: [{47CA1630-D12B-4DEB-A933-D39D3CF42B4D}] => (Block) G:\worldbox v0.21.0\worldbox\worldbox.exe => No File FirewallRules: [{2244F082-9009-480D-BCF3-EB261F2FA5AE}] => (Block) G:\worldbox v0.21.0\worldbox\worldbox.exe => No File FirewallRules: [TCP Query User{499473CB-201A-4CD4-AFB0-02CE4F5F1582}D:\red dead redemption 2\rdr2.exe] => (Allow) D:\red dead redemption 2\rdr2.exe => No File FirewallRules: [UDP Query User{8EE59493-0A1E-4800-B380-2DFC1038C77C}D:\red dead redemption 2\rdr2.exe] => (Allow) D:\red dead redemption 2\rdr2.exe => No File FirewallRules: [{5E11FAA3-E6C2-4989-BE58-40AF90D79346}] => (Block) D:\red dead redemption 2\rdr2.exe => No File FirewallRules: [{10534AD2-DB9A-458A-94D4-77B8CFCA6C4E}] => (Block) D:\red dead redemption 2\rdr2.exe => No File FirewallRules: [TCP Query User{9FA05273-86EA-4CDE-A130-552381B8D202}F:\cities - skylines ii\cities2.exe] => (Allow) F:\cities - skylines ii\cities2.exe => No File FirewallRules: [UDP Query User{E27C86D5-6780-492D-B562-329C9ED0448E}F:\cities - skylines ii\cities2.exe] => (Allow) F:\cities - skylines ii\cities2.exe => No File FirewallRules: [{E8A96623-F8F7-4115-8390-E2F2DA6C2962}] => (Block) F:\cities - skylines ii\cities2.exe => No File FirewallRules: [{B44CFEC4-489C-4D2E-AC95-101539ED629F}] => (Block) F:\cities - skylines ii\cities2.exe => No File FirewallRules: [{A1EB858A-5B1F-499A-B51D-7F822A68DADE}] => (Allow) E:\SteamLibrary\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe => No File FirewallRules: [{EB54F9B8-A22D-4FA6-B931-79CF2C1156B6}] => (Allow) E:\SteamLibrary\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe => No File FirewallRules: [{22D5DF78-9BA8-4B2B-ADDA-0B9CF2B3E73F}] => (Allow) E:\SteamLibrary\steamapps\common\Steam Engine Simulator\bin\atg-steam-engine-demo.exe => No File FirewallRules: [{D0716EED-7D15-4337-B7DC-1E25DDC44EB2}] => (Allow) E:\SteamLibrary\steamapps\common\Steam Engine Simulator\bin\atg-steam-engine-demo.exe => No File FirewallRules: [{3FE2AC9C-9885-40B8-80F5-2FB222A6947B}] => (Allow) E:\SteamLibrary\steamapps\common\Project Cumberland - Closed Alpha\launcher\launcher.exe => No File FirewallRules: [{D8675891-8AB2-46F1-92BA-B36186659706}] => (Allow) E:\SteamLibrary\steamapps\common\Project Cumberland - Closed Alpha\launcher\launcher.exe => No File FirewallRules: [{6CD7B949-5EB2-4FA8-A5B1-1B0A29035D42}] => (Allow) E:\Counter-Strike WaRzOnE\hl.exe => No File FirewallRules: [{14E5C4B8-31B5-423A-B7AD-F7C868C88F36}] => (Allow) E:\Counter-Strike WaRzOnE\hl.exe => No File FirewallRules: [TCP Query User{0C330A33-55CF-43C4-B93F-131534B45F6C}F:\xbox\forza horizon 5\content\forzahorizon5.exe] => (Allow) F:\xbox\forza horizon 5\content\forzahorizon5.exe => No File FirewallRules: [UDP Query User{754548B0-905C-4EB8-890F-268A99768E43}F:\xbox\forza horizon 5\content\forzahorizon5.exe] => (Allow) F:\xbox\forza horizon 5\content\forzahorizon5.exe => No File FirewallRules: [{1B6A4092-DA9C-4DCE-A3A8-78672BE430A6}] => (Block) F:\xbox\forza horizon 5\content\forzahorizon5.exe => No File FirewallRules: [{F7678DAF-17E8-4A5A-A5F0-CFA44CC3BB87}] => (Block) F:\xbox\forza horizon 5\content\forzahorizon5.exe => No File FirewallRules: [{68173CFE-F5A4-47BE-B144-2225720E2C41}] => (Allow) E:\SteamLibrary\steamapps\common\Supermarket Together\Supermarket Together.exe => No File FirewallRules: [{0A383DBA-E0EF-408F-AC04-8B8A00FB085F}] => (Allow) E:\SteamLibrary\steamapps\common\Supermarket Together\Supermarket Together.exe => No File FirewallRules: [{DA6171A1-BF85-4BF5-B61C-8BDD84A12D06}] => (Allow) E:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe => No File FirewallRules: [{A37D1FAB-2297-4628-9398-B0686AD18ED4}] => (Allow) E:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe => No File FirewallRules: [{A73B5BCF-B1CA-485E-BAF2-1D4BE3351058}] => (Allow) E:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe => No File FirewallRules: [{5DA01B18-FE3B-4ED5-9E71-75364856D664}] => (Allow) E:\SteamLibrary\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe => No File FirewallRules: [{AFA87B23-9333-49A2-ABB4-9233F0B82B71}] => (Allow) F:\SteamLibrary\steamapps\common\HITMAN 3\Launcher.exe => No File FirewallRules: [{B70879CC-0445-403B-BF6B-C0448C498F5F}] => (Allow) F:\SteamLibrary\steamapps\common\HITMAN 3\Launcher.exe => No File FirewallRules: [{B6648894-C78C-4EEE-A797-01DCCA641A5C}] => (Allow) E:\SteamLibrary\steamapps\common\Half Sword Playtest\VersionTest54.exe => No File FirewallRules: [{2B4A7BDB-371E-485A-AB2E-F44C1939798B}] => (Allow) E:\SteamLibrary\steamapps\common\Half Sword Playtest\VersionTest54.exe => No File FirewallRules: [{CC3A0FD1-0223-448A-876D-182D20C7DE27}] => (Allow) E:\SteamLibrary\steamapps\common\Hearts of Iron IV\dowser.exe => No File FirewallRules: [{96F2FD39-D131-4B0E-B8AF-CBE7F0A647B1}] => (Allow) E:\SteamLibrary\steamapps\common\Hearts of Iron IV\dowser.exe => No File FirewallRules: [{0F56CBB9-C54E-4CEE-9668-8F2CF639F12C}] => (Allow) E:\SteamLibrary\steamapps\common\Hearts of Iron IV\hoi4.exe => No File FirewallRules: [{922DFBB4-D2CD-4CEC-9406-1B638F7C9239}] => (Allow) E:\SteamLibrary\steamapps\common\Hearts of Iron IV\hoi4.exe => No File FirewallRules: [{F42003F0-E6BC-4B9E-85FA-A3D2A6C94B1D}] => (Allow) E:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\game\bin\win64\cs2.exe => No File FirewallRules: [{DD9A5621-0F5C-4A30-B2B4-BB19A3E60888}] => (Allow) E:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\game\bin\win64\cs2.exe => No File FirewallRules: [TCP Query User{60F03B70-2809-4012-BE42-819822CA4CFA}E:\steamlibrary\steamapps\common\ea sports fc 25\fc25.exe] => (Allow) E:\steamlibrary\steamapps\common\ea sports fc 25\fc25.exe => No File FirewallRules: [UDP Query User{779CAAAF-AC03-4F9A-8E64-3DB023417BB2}E:\steamlibrary\steamapps\common\ea sports fc 25\fc25.exe] => (Allow) E:\steamlibrary\steamapps\common\ea sports fc 25\fc25.exe => No File FirewallRules: [{E23687CA-1F1B-4B8D-BEC3-0572D5CC516E}] => (Block) E:\steamlibrary\steamapps\common\ea sports fc 25\fc25.exe => No File FirewallRules: [{DC2EBF7C-4577-42DA-A8E2-2B81613E65F7}] => (Block) E:\steamlibrary\steamapps\common\ea sports fc 25\fc25.exe => No File FirewallRules: [{5EF3F27D-496D-4FEF-9E62-8CCE6C917CB9}] => (Allow) E:\SteamLibrary\steamapps\common\Barista Simulator\Barista Simulator.exe => No File FirewallRules: [{EE01B886-39BD-46AA-A2DE-5564DD7AA13B}] => (Allow) E:\SteamLibrary\steamapps\common\Barista Simulator\Barista Simulator.exe => No File FirewallRules: [{032044BE-9209-46EB-ACC4-8046EDBAA749}] => (Allow) E:\SteamLibrary\steamapps\common\Rust\Rust.exe => No File FirewallRules: [{275E7A84-56DE-4E20-AB2C-AB7507C87225}] => (Allow) E:\SteamLibrary\steamapps\common\Rust\Rust.exe => No File FirewallRules: [TCP Query User{B85C16E5-90F2-4BE9-9AB4-31A751CB3DA9}D:\steamlibrary\steamapps\common\arma 3\arma3_x64.exe] => (Allow) D:\steamlibrary\steamapps\common\arma 3\arma3_x64.exe => No File FirewallRules: [UDP Query User{57D10297-2932-4C47-816F-B3C3BDAF524C}D:\steamlibrary\steamapps\common\arma 3\arma3_x64.exe] => (Allow) D:\steamlibrary\steamapps\common\arma 3\arma3_x64.exe => No File FirewallRules: [{BBB7CAF0-AD75-4561-AF9A-586933127C26}] => (Block) D:\steamlibrary\steamapps\common\arma 3\arma3_x64.exe => No File FirewallRules: [{0D033EC3-21A5-421E-AE7C-91A12C2763F1}] => (Block) D:\steamlibrary\steamapps\common\arma 3\arma3_x64.exe => No File FirewallRules: [{0D2F9006-BAB6-4886-B171-41705B3EA64A}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\RainbowSix_BE.exe => No File FirewallRules: [{E2C27295-6288-4363-AE71-BB590C2CB2EA}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\RainbowSix_BE.exe => No File FirewallRules: [{088A0A6F-C440-4489-A648-63F4B39E5A36}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\RainbowSix.exe => No File FirewallRules: [{D62962C6-C3F8-42E8-A978-F4F060CDEA54}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\RainbowSix.exe => No File FirewallRules: [TCP Query User{0EC6C1DD-338C-4C33-8D34-448296466BB4}D:\steamlibrary\steamapps\common\ea sports fc 25\fc25.exe] => (Allow) D:\steamlibrary\steamapps\common\ea sports fc 25\fc25.exe => No File FirewallRules: [UDP Query User{EA427047-7912-4689-B0AF-F9BF6A1BF397}D:\steamlibrary\steamapps\common\ea sports fc 25\fc25.exe] => (Allow) D:\steamlibrary\steamapps\common\ea sports fc 25\fc25.exe => No File FirewallRules: [{471223E1-45A7-4C0E-9B07-AB43901DC0AD}] => (Block) D:\steamlibrary\steamapps\common\ea sports fc 25\fc25.exe => No File FirewallRules: [{38E64B1A-DBB0-474F-A525-710437442387}] => (Block) D:\steamlibrary\steamapps\common\ea sports fc 25\fc25.exe => No File FirewallRules: [TCP Query User{F9805CD6-186A-41C4-9035-6F0B7427E9D2}C:\users\alexp\desktop\balatro.v1.0.1o.build.17459173\balatro\balatro.exe] => (Allow) C:\users\alexp\desktop\balatro.v1.0.1o.build.17459173\balatro\balatro.exe => No File FirewallRules: [UDP Query User{EADB1987-99AC-4305-80AB-5ED7ECA200E4}C:\users\alexp\desktop\balatro.v1.0.1o.build.17459173\balatro\balatro.exe] => (Allow) C:\users\alexp\desktop\balatro.v1.0.1o.build.17459173\balatro\balatro.exe => No File FirewallRules: [{12153447-D059-4430-88CB-0C90475930DD}] => (Block) C:\users\alexp\desktop\balatro.v1.0.1o.build.17459173\balatro\balatro.exe => No File FirewallRules: [{6633D08C-246B-4D0F-ADEA-D576ADB58D1E}] => (Block) C:\users\alexp\desktop\balatro.v1.0.1o.build.17459173\balatro\balatro.exe => No File FirewallRules: [{8B0A24E4-8ECD-4EB8-9592-58A20D288601}] => (Allow) D:\SteamLibrary\steamapps\common\Steam Engine Simulator\bin\atg-steam-engine-demo.exe => No File FirewallRules: [{1CF1E9DE-C36B-47B4-A3D9-C282A7AAA660}] => (Allow) D:\SteamLibrary\steamapps\common\Steam Engine Simulator\bin\atg-steam-engine-demo.exe => No File FirewallRules: [TCP Query User{02096715-97D0-4441-9108-CEEA9B90A253}D:\hogwarts legacy\phoenix\binaries\win64\hogwartslegacy.exe] => (Allow) D:\hogwarts legacy\phoenix\binaries\win64\hogwartslegacy.exe => No File FirewallRules: [UDP Query User{C20E9CE7-C321-471F-A23A-FE07DB281983}D:\hogwarts legacy\phoenix\binaries\win64\hogwartslegacy.exe] => (Allow) D:\hogwarts legacy\phoenix\binaries\win64\hogwartslegacy.exe => No File FirewallRules: [{BCF26368-395F-431C-A371-7DADBB443633}] => (Block) D:\hogwarts legacy\phoenix\binaries\win64\hogwartslegacy.exe => No File FirewallRules: [{B90C35C4-ADA2-41C0-996E-EC9776B52C13}] => (Block) D:\hogwarts legacy\phoenix\binaries\win64\hogwartslegacy.exe => No File FirewallRules: [TCP Query User{66D3FE54-72F8-45B0-A6A6-BE33326D09A9}D:\prison architect\prison architect64.exe] => (Allow) D:\prison architect\prison architect64.exe => No File FirewallRules: [UDP Query User{AB6A4A54-3CAF-464C-960E-C257D6121082}D:\prison architect\prison architect64.exe] => (Allow) D:\prison architect\prison architect64.exe => No File FirewallRules: [{A0379E11-6561-4977-BEDC-B51B4239DAD4}] => (Block) D:\prison architect\prison architect64.exe => No File FirewallRules: [{DAC1EBA9-7AAA-4F9B-973F-132F581FFCC5}] => (Block) D:\prison architect\prison architect64.exe => No File FirewallRules: [TCP Query User{ADF5DC18-9BD4-44F6-9B6B-300E5B31C1AF}C:\program files\native instruments\creator tools\creator tools.exe] => (Block) C:\program files\native instruments\creator tools\creator tools.exe => No File FirewallRules: [UDP Query User{1C88369E-8EDD-4BDB-BE2D-76F0CAD6471F}C:\program files\native instruments\creator tools\creator tools.exe] => (Block) C:\program files\native instruments\creator tools\creator tools.exe => No File FirewallRules: [TCP Query User{D397FB42-D24A-4011-8641-58AEC0E18470}F:\steamlibrary\steamapps\common\tmodloader\dotnet\dotnet.exe] => (Allow) F:\steamlibrary\steamapps\common\tmodloader\dotnet\dotnet.exe => No File FirewallRules: [UDP Query User{3B11C42B-E1F4-4A21-9B19-E787AD75AD45}F:\steamlibrary\steamapps\common\tmodloader\dotnet\dotnet.exe] => (Allow) F:\steamlibrary\steamapps\common\tmodloader\dotnet\dotnet.exe => No File FirewallRules: [{CB937CC1-9E8B-45FF-8B6F-A1DC7241B4FC}] => (Block) F:\steamlibrary\steamapps\common\tmodloader\dotnet\dotnet.exe => No File FirewallRules: [{837CF895-64B1-421F-91D7-8A369FAE8CE0}] => (Block) F:\steamlibrary\steamapps\common\tmodloader\dotnet\dotnet.exe => No File FirewallRules: [TCP Query User{329C25E9-08C2-479F-82F3-FCD5881AD5ED}D:\dying light the beast\ph_ft\work\bin\x64\dyinglightgame_thebeast_x64_rwdi.exe] => (Allow) D:\dying light the beast\ph_ft\work\bin\x64\dyinglightgame_thebeast_x64_rwdi.exe => No File FirewallRules: [UDP Query User{F5E7834E-F075-4462-A333-899C8ED76BE6}D:\dying light the beast\ph_ft\work\bin\x64\dyinglightgame_thebeast_x64_rwdi.exe] => (Allow) D:\dying light the beast\ph_ft\work\bin\x64\dyinglightgame_thebeast_x64_rwdi.exe => No File FirewallRules: [{BFC3877C-12A3-4F5C-81ED-20311ED0CDE9}] => (Block) D:\dying light the beast\ph_ft\work\bin\x64\dyinglightgame_thebeast_x64_rwdi.exe => No File FirewallRules: [{25EC03DF-148E-4C59-A4AF-9D4D8573BD0A}] => (Block) D:\dying light the beast\ph_ft\work\bin\x64\dyinglightgame_thebeast_x64_rwdi.exe => No File FirewallRules: [TCP Query User{C089FD1C-AFCF-4FF5-857E-DDCB6484E691}C:\users\alexp\downloads\lets_take_a_bath_with_purin_2_v1.01b2\let's take a bath with purin 2 v1.01b2\let's take a bath with purin 2.exe] => (Block) C:\users\alexp\downloads\lets_take_a_bath_with_purin_2_v1.01b2\let's take a bath with purin 2 v1.01b2\let's take a bath with purin 2.exe => No File FirewallRules: [UDP Query User{DEFFD5E0-2470-44C5-8059-10A6A6B8A493}C:\users\alexp\downloads\lets_take_a_bath_with_purin_2_v1.01b2\let's take a bath with purin 2 v1.01b2\let's take a bath with purin 2.exe] => (Block) C:\users\alexp\downloads\lets_take_a_bath_with_purin_2_v1.01b2\let's take a bath with purin 2 v1.01b2\let's take a bath with purin 2.exe => No File FirewallRules: [TCP Query User{BCC40017-EDA4-48B0-9BE3-196DA6E97DD6}D:\farming simulator 25\x64\farmingsimulator2025game.exe] => (Allow) D:\farming simulator 25\x64\farmingsimulator2025game.exe => No File FirewallRules: [UDP Query User{32B142C3-F36B-47B9-AC1A-5F34CD0B4303}D:\farming simulator 25\x64\farmingsimulator2025game.exe] => (Allow) D:\farming simulator 25\x64\farmingsimulator2025game.exe => No File FirewallRules: [{532C5261-FCD1-4441-A51F-957149F92E21}] => (Block) D:\farming simulator 25\x64\farmingsimulator2025game.exe => No File FirewallRules: [{342DCCC1-BE92-48F9-9B08-7631A68EF036}] => (Block) D:\farming simulator 25\x64\farmingsimulator2025game.exe => No File FirewallRules: [{9912A573-032C-4F1A-AFA4-0A8633452FDA}] => (Allow) C:\Program Files (x86)\SimHub\SimHubWPF.exe => No File FirewallRules: [{9574C80C-642A-49D0-8F96-A904573A4690}] => (Allow) C:\Program Files (x86)\SimHub\SimHub.PackageManager.Standalone.exe => No File FirewallRules: [TCP Query User{62B2D5D5-C0E4-4924-8D9F-C054BC2C6416}D:\steamlibrary\steamapps\common\assettocorsa\acs.exe] => (Allow) D:\steamlibrary\steamapps\common\assettocorsa\acs.exe => No File FirewallRules: [UDP Query User{8D5E3BA6-D326-44BB-BC66-CDC1883CA0B1}D:\steamlibrary\steamapps\common\assettocorsa\acs.exe] => (Allow) D:\steamlibrary\steamapps\common\assettocorsa\acs.exe => No File FirewallRules: [{6E77E3DF-DC76-4DBA-BBA7-9A27EA79CB8D}] => (Block) D:\steamlibrary\steamapps\common\assettocorsa\acs.exe => No File FirewallRules: [{1ABAC862-A7CD-4445-A1EA-87A0BE149F8B}] => (Block) D:\steamlibrary\steamapps\common\assettocorsa\acs.exe => No File FirewallRules: [TCP Query User{113DF3AE-9C68-4330-8349-F6CD2B6A7958}D:\cyberpunk 2077\bin\x64\cyberpunk2077.exe] => (Allow) D:\cyberpunk 2077\bin\x64\cyberpunk2077.exe => No File FirewallRules: [UDP Query User{0BAF40AC-CBAA-40E8-9FBC-86E1A81EFA82}D:\cyberpunk 2077\bin\x64\cyberpunk2077.exe] => (Allow) D:\cyberpunk 2077\bin\x64\cyberpunk2077.exe => No File FirewallRules: [{C687E555-AB51-4560-93B6-CF2CF9A11A89}] => (Block) D:\cyberpunk 2077\bin\x64\cyberpunk2077.exe => No File FirewallRules: [{F5DBBC0D-2319-42E9-B861-6361B7CC9D3E}] => (Block) D:\cyberpunk 2077\bin\x64\cyberpunk2077.exe => No File FirewallRules: [{E33C3967-7347-4A49-B985-2B8B8EEC2453}] => (Allow) D:\SteamLibrary\steamapps\common\Crusader Kings III\launcher\dowser.exe => No File FirewallRules: [{3AB2DEA8-2D52-4738-B991-76052E978C4E}] => (Allow) D:\SteamLibrary\steamapps\common\Crusader Kings III\launcher\dowser.exe => No File FirewallRules: [TCP Query User{B34BCA0C-3614-40DB-800C-24EF7F412A20}D:\remnantfromtheashes\remnant\binaries\win64\remnant-win64-shipping.exe] => (Allow) D:\remnantfromtheashes\remnant\binaries\win64\remnant-win64-shipping.exe => No File FirewallRules: [UDP Query User{9CA427B2-14FA-4C89-907A-331C9FAFB048}D:\remnantfromtheashes\remnant\binaries\win64\remnant-win64-shipping.exe] => (Allow) D:\remnantfromtheashes\remnant\binaries\win64\remnant-win64-shipping.exe => No File FirewallRules: [{D82DE1CC-D554-4538-8472-35F4B1603D17}] => (Block) D:\remnantfromtheashes\remnant\binaries\win64\remnant-win64-shipping.exe => No File FirewallRules: [{871487A2-E1C2-447F-8910-28B03DD83F58}] => (Block) D:\remnantfromtheashes\remnant\binaries\win64\remnant-win64-shipping.exe => No File FirewallRules: [TCP Query User{4A14860E-354F-4CAC-A3E6-84B2713D622A}C:\programdata\steelseries\gg\apps\threedat\3daimtrainer\3dat.exe] => (Allow) C:\programdata\steelseries\gg\apps\threedat\3daimtrainer\3dat.exe => No File FirewallRules: [UDP Query User{7E3FC7CE-E3EB-429E-911F-59CF5F941570}C:\programdata\steelseries\gg\apps\threedat\3daimtrainer\3dat.exe] => (Allow) C:\programdata\steelseries\gg\apps\threedat\3daimtrainer\3dat.exe => No File FirewallRules: [{1ECD55C8-CFB0-44F2-9D19-04BFE52027ED}] => (Block) C:\programdata\steelseries\gg\apps\threedat\3daimtrainer\3dat.exe => No File FirewallRules: [{22733C1E-1743-434E-8DAA-D50C8B51534D}] => (Block) C:\programdata\steelseries\gg\apps\threedat\3daimtrainer\3dat.exe => No File FirewallRules: [TCP Query User{542C2AB8-109E-4A85-A2D1-39BCF875AD57}C:\users\alexp\appdata\local\discord\app-1.0.9217\discord.exe] => (Allow) C:\users\alexp\appdata\local\discord\app-1.0.9217\discord.exe => No File FirewallRules: [UDP Query User{4ED9559C-9A88-4E3E-BE38-5754FBB22B30}C:\users\alexp\appdata\local\discord\app-1.0.9217\discord.exe] => (Allow) C:\users\alexp\appdata\local\discord\app-1.0.9217\discord.exe => No File FirewallRules: [{826DE1A0-5CA0-4365-ABA2-29B676557F4E}] => (Block) C:\users\alexp\appdata\local\discord\app-1.0.9217\discord.exe => No File FirewallRules: [{C5F33CA8-4772-4918-BBE4-D2D94805073A}] => (Block) C:\users\alexp\appdata\local\discord\app-1.0.9217\discord.exe => No File FirewallRules: [TCP Query User{FB59184D-F0BE-4D58-B3A5-73A6315786BD}D:\sons of the forest\sonsoftheforest.exe] => (Allow) D:\sons of the forest\sonsoftheforest.exe => No File FirewallRules: [UDP Query User{6356955E-D224-49E3-A6C4-785C89C4B064}D:\sons of the forest\sonsoftheforest.exe] => (Allow) D:\sons of the forest\sonsoftheforest.exe => No File FirewallRules: [{3595F767-BEA3-4766-A0E8-7A8D8C1DAC03}] => (Block) D:\sons of the forest\sonsoftheforest.exe => No File FirewallRules: [{AEDA68AE-7B0E-49B7-9898-337FF6FC1ABF}] => (Block) D:\sons of the forest\sonsoftheforest.exe => No File FirewallRules: [TCP Query User{7143CBBE-655C-4FC0-B69E-62550F5938D6}D:\grand theft auto v enhanced\gta5_enhanced.exe] => (Allow) D:\grand theft auto v enhanced\gta5_enhanced.exe => No File FirewallRules: [UDP Query User{588FCA7B-D0E2-4AEB-A67A-9A50A08EFD31}D:\grand theft auto v enhanced\gta5_enhanced.exe] => (Allow) D:\grand theft auto v enhanced\gta5_enhanced.exe => No File FirewallRules: [{216A889D-8632-41BC-821F-A8E520AE402C}] => (Block) D:\grand theft auto v enhanced\gta5_enhanced.exe => No File FirewallRules: [{316A274D-C4AB-4930-B660-7DE2065E4EC5}] => (Block) D:\grand theft auto v enhanced\gta5_enhanced.exe => No File FirewallRules: [TCP Query User{EF6966AD-B3F9-46C8-80DA-BDB4EED3F216}D:\games\red dead redemption 2\rdr2.exe] => (Allow) D:\games\red dead redemption 2\rdr2.exe => No File FirewallRules: [UDP Query User{C9DAAE46-A104-449E-A5AF-986AA5532E1B}D:\games\red dead redemption 2\rdr2.exe] => (Allow) D:\games\red dead redemption 2\rdr2.exe => No File FirewallRules: [{61B76D6F-561A-48D9-9221-D395A8973151}] => (Block) D:\games\red dead redemption 2\rdr2.exe => No File FirewallRules: [{829C497E-48EA-422F-A566-EF8CBD39A7B2}] => (Block) D:\games\red dead redemption 2\rdr2.exe => No File FirewallRules: [TCP Query User{F1A8195F-F176-4E7C-AEED-C2955EC3F080}C:\program files\windowsapps\xmcl_0.53.3.1252_x64__wbnnev551gwxy\app\x minecraft launcher.exe] => (Allow) C:\program files\windowsapps\xmcl_0.53.3.1252_x64__wbnnev551gwxy\app\x minecraft launcher.exe => No File FirewallRules: [UDP Query User{25D27D8B-A85C-4732-857D-CEFE224E2A9C}C:\program files\windowsapps\xmcl_0.53.3.1252_x64__wbnnev551gwxy\app\x minecraft launcher.exe] => (Allow) C:\program files\windowsapps\xmcl_0.53.3.1252_x64__wbnnev551gwxy\app\x minecraft launcher.exe => No File FirewallRules: [{4DC87944-284F-46C0-BF27-E06309C9ADD1}] => (Block) C:\program files\windowsapps\xmcl_0.53.3.1252_x64__wbnnev551gwxy\app\x minecraft launcher.exe => No File FirewallRules: [{B069BD68-6D05-4D31-9BCE-2AD087824908}] => (Block) C:\program files\windowsapps\xmcl_0.53.3.1252_x64__wbnnev551gwxy\app\x minecraft launcher.exe => No File FirewallRules: [TCP Query User{F647F511-C0E2-4933-A09F-90A253F6073C}C:\program files\windowsapps\xmcl_0.54.0.1260_x64__wbnnev551gwxy\app\x minecraft launcher.exe] => (Allow) C:\program files\windowsapps\xmcl_0.54.0.1260_x64__wbnnev551gwxy\app\x minecraft launcher.exe => No File FirewallRules: [UDP Query User{7B99935E-5FFD-4B20-8501-560674F1A7D0}C:\program files\windowsapps\xmcl_0.54.0.1260_x64__wbnnev551gwxy\app\x minecraft launcher.exe] => (Allow) C:\program files\windowsapps\xmcl_0.54.0.1260_x64__wbnnev551gwxy\app\x minecraft launcher.exe => No File FirewallRules: [{6B7D87FE-9212-40E0-B541-10FC56E595F2}] => (Block) C:\program files\windowsapps\xmcl_0.54.0.1260_x64__wbnnev551gwxy\app\x minecraft launcher.exe => No File FirewallRules: [{058E0472-A63A-4F9E-814C-D3B5C46B22E0}] => (Block) C:\program files\windowsapps\xmcl_0.54.0.1260_x64__wbnnev551gwxy\app\x minecraft launcher.exe => No File FirewallRules: [TCP Query User{07D755F5-8CC9-40B6-85C8-4F1514A07D22}C:\program files\blackmagic design\davinci resolve\resolve.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\resolve.exe => No File FirewallRules: [UDP Query User{48570E4E-AA81-4494-A2E9-B2D82A1C2C40}C:\program files\blackmagic design\davinci resolve\resolve.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\resolve.exe => No File FirewallRules: [TCP Query User{8206665B-3E02-42BC-B218-A867F2CB2B58}C:\program files\blackmagic design\davinci resolve\fuscript.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\fuscript.exe => No File FirewallRules: [UDP Query User{45B17014-4FAA-434E-829C-47ABB53CAC17}C:\program files\blackmagic design\davinci resolve\fuscript.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\fuscript.exe => No File FirewallRules: [{3C5CAF4E-E9CA-455A-95EB-1393B483F602}] => (Allow) D:\SteamLibrary\steamapps\common\Ultimate Custom Night\Ultimate Custom Night.exe => No File FirewallRules: [{C2A22367-868D-44B5-BEB7-BF855C89511B}] => (Allow) D:\SteamLibrary\steamapps\common\Ultimate Custom Night\Ultimate Custom Night.exe => No File FirewallRules: [{F4361ACF-B3F8-4A64-BF37-0B6691B81841}] => (Allow) D:\SteamLibrary\steamapps\common\Grand Theft Auto IV\GTAIV\PlayGTAIV.exe => No File FirewallRules: [{28816132-084F-4401-944E-0B94B4522209}] => (Allow) D:\SteamLibrary\steamapps\common\Grand Theft Auto IV\GTAIV\PlayGTAIV.exe => No File FirewallRules: [TCP Query User{7C00FA0D-CB4F-40CD-AAC1-72E995E35CE7}D:\blade.and.sorcery.v1.0.0\blade & sorcery\bladeandsorcery.exe] => (Allow) D:\blade.and.sorcery.v1.0.0\blade & sorcery\bladeandsorcery.exe => No File FirewallRules: [UDP Query User{5076AE07-B195-432F-9A40-3A219B63F74B}D:\blade.and.sorcery.v1.0.0\blade & sorcery\bladeandsorcery.exe] => (Allow) D:\blade.and.sorcery.v1.0.0\blade & sorcery\bladeandsorcery.exe => No File FirewallRules: [TCP Query User{F1F600C8-F6F3-4A93-9CA7-A7110B0B75E9}D:\beat.saber.v1.19.0\beat saber\beat saber.exe] => (Allow) D:\beat.saber.v1.19.0\beat saber\beat saber.exe => No File FirewallRules: [UDP Query User{26C44DEA-15DA-4BD3-8293-F6D38C86F3EC}D:\beat.saber.v1.19.0\beat saber\beat saber.exe] => (Allow) D:\beat.saber.v1.19.0\beat saber\beat saber.exe => No File FirewallRules: [TCP Query User{220A4E8D-40ED-46C3-A50C-49FA183E5ED3}D:\pcvr\games\real vr fishing\realvrfishing.exe] => (Allow) D:\pcvr\games\real vr fishing\realvrfishing.exe => No File FirewallRules: [UDP Query User{5D8CC749-BA89-4999-BB3D-CB30EFBF6841}D:\pcvr\games\real vr fishing\realvrfishing.exe] => (Allow) D:\pcvr\games\real vr fishing\realvrfishing.exe => No File FirewallRules: [TCP Query User{EBD27B78-9EF8-478B-AE27-C7378AA2A995}C:\users\alexp\downloads\endorphin.vice.v2026.01.31\game\endorphinvice\binaries\win64\endorphinvice-win64-shipping.exe] => (Block) C:\users\alexp\downloads\endorphin.vice.v2026.01.31\game\endorphinvice\binaries\win64\endorphinvice-win64-shipping.exe => No File FirewallRules: [UDP Query User{8D720998-FA0D-4148-85AE-8EBF16BD72F2}C:\users\alexp\downloads\endorphin.vice.v2026.01.31\game\endorphinvice\binaries\win64\endorphinvice-win64-shipping.exe] => (Block) C:\users\alexp\downloads\endorphin.vice.v2026.01.31\game\endorphinvice\binaries\win64\endorphinvice-win64-shipping.exe => No File FirewallRules: [{4FB8A0E8-6585-402D-8BA0-B471015BB748}] => (Allow) D:\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe => No File FirewallRules: [TCP Query User{076F23B4-6B8C-47E6-BD89-69A10B9DA878}C:\users\alexp\desktop\cockherov003.1_patreonexclusivebuild\cockhero\binaries\win64\cockhero.exe] => (Allow) C:\users\alexp\desktop\cockherov003.1_patreonexclusivebuild\cockhero\binaries\win64\cockhero.exe => No File FirewallRules: [UDP Query User{06AD6414-8C75-422F-9A42-1964947485CB}C:\users\alexp\desktop\cockherov003.1_patreonexclusivebuild\cockhero\binaries\win64\cockhero.exe] => (Allow) C:\users\alexp\desktop\cockherov003.1_patreonexclusivebuild\cockhero\binaries\win64\cockhero.exe => No File FirewallRules: [TCP Query User{B07F3284-13D0-4C12-A330-BC922532BEB3}D:\balatro.v1.0.1o.build.17459173\balatro\balatro.exe] => (Allow) D:\balatro.v1.0.1o.build.17459173\balatro\balatro.exe => No File FirewallRules: [UDP Query User{FB0868F2-938B-440F-8A77-2C8021A8308E}D:\balatro.v1.0.1o.build.17459173\balatro\balatro.exe] => (Allow) D:\balatro.v1.0.1o.build.17459173\balatro\balatro.exe => No File FirewallRules: [TCP Query User{2CF4F4FD-1C87-4DC3-848E-69BFC10AADEC}C:\users\alexp\appdata\local\temp\scoped_dir4080_776907450\platform-tools\adb.exe] => (Allow) C:\users\alexp\appdata\local\temp\scoped_dir4080_776907450\platform-tools\adb.exe => No File FirewallRules: [UDP Query User{451667A0-8092-40B5-B3C5-930C1F0BDB70}C:\users\alexp\appdata\local\temp\scoped_dir4080_776907450\platform-tools\adb.exe] => (Allow) C:\users\alexp\appdata\local\temp\scoped_dir4080_776907450\platform-tools\adb.exe => No File FirewallRules: [TCP Query User{CF9222B9-22BB-44CA-A0EB-C776E62A6740}C:\users\alexp\downloads\faplife2_build1\windows\flife2\binaries\win64\flife2-win64-shipping.exe] => (Allow) C:\users\alexp\downloads\faplife2_build1\windows\flife2\binaries\win64\flife2-win64-shipping.exe => No File FirewallRules: [UDP Query User{E13DD052-5EE3-4778-94BB-2F39769F0D28}C:\users\alexp\downloads\faplife2_build1\windows\flife2\binaries\win64\flife2-win64-shipping.exe] => (Allow) C:\users\alexp\downloads\faplife2_build1\windows\flife2\binaries\win64\flife2-win64-shipping.exe => No File FirewallRules: [TCP Query User{0665CF69-4E88-473C-8796-F74FEDB4B7D5}C:\users\alexp\downloads\modernluxury_v0.4.5.0\modernluxury\binaries\win64\modernluxury-win64-shipping.exe] => (Block) C:\users\alexp\downloads\modernluxury_v0.4.5.0\modernluxury\binaries\win64\modernluxury-win64-shipping.exe => No File FirewallRules: [UDP Query User{4FD684DE-29F0-477C-A280-08C81D658B8E}C:\users\alexp\downloads\modernluxury_v0.4.5.0\modernluxury\binaries\win64\modernluxury-win64-shipping.exe] => (Block) C:\users\alexp\downloads\modernluxury_v0.4.5.0\modernluxury\binaries\win64\modernluxury-win64-shipping.exe => No File FirewallRules: [TCP Query User{D6AA4456-1A1B-49B9-BE4C-E07340720461}D:\steamlibrary\steamapps\common\balatro\platform-tools\platform-tools\adb.exe] => (Allow) D:\steamlibrary\steamapps\common\balatro\platform-tools\platform-tools\adb.exe => No File FirewallRules: [UDP Query User{839B77B2-6D70-4F3E-AF32-A92457F2E9EE}D:\steamlibrary\steamapps\common\balatro\platform-tools\platform-tools\adb.exe] => (Allow) D:\steamlibrary\steamapps\common\balatro\platform-tools\platform-tools\adb.exe => No File FirewallRules: [TCP Query User{85C34C9D-9DB6-475B-A492-32CF3E33B610}D:\steamlibrary\steamapps\common\nmrih2\nmrih2\binaries\win64\nmrih2-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\nmrih2\nmrih2\binaries\win64\nmrih2-win64-shipping.exe => No File FirewallRules: [UDP Query User{95C8F66D-E80D-4BAE-B334-28758BE67D45}D:\steamlibrary\steamapps\common\nmrih2\nmrih2\binaries\win64\nmrih2-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\nmrih2\nmrih2\binaries\win64\nmrih2-win64-shipping.exe => No File FirewallRules: [{9825027D-A87C-4029-A873-BE3E6859C4FC}] => (Allow) C:\Program Files (x86)\Overwolf\0.296.3.3\OverwolfBrowser.exe => No File FirewallRules: [{A0BEA46C-2B50-411B-BDC4-F3D551426661}] => (Allow) C:\Program Files (x86)\Overwolf\0.296.3.3\OverwolfBrowser.exe => No File FirewallRules: [{5AF786EE-1468-4958-95FC-35A2F9752893}] => (Block) C:\Program Files (x86)\Overwolf\0.296.3.3\OverwolfBrowser.exe => No File FirewallRules: [{F3503A77-F086-47B4-8719-5AADF8C26002}] => (Block) C:\Program Files (x86)\Overwolf\0.296.3.3\OverwolfBrowser.exe => No File Powershell: @("$env:APPDATA","$env:LOCALAPPDATA") | ForEach-Object { Get-ChildItem $_ -Recurse -Filter "index.js" -ErrorAction SilentlyContinue } | Where-Object { $_.FullName -match "discord_desktop_core" } | ForEach-Object { Write-Host "--- $($_.FullName) ---"; (Get-Content $_.FullName -Raw).Substring(0,[Math]::Min(2000,(Get-Content $_.FullName -Raw).Length)) } StartPowerShell: # Downloads newest AdwCleaner version directly from Malwarebytes, performs an update, scans, cleans and writes the log in console # Does not clean preinstalled objects, only PUP/Adware # If you would like to delete preinstalled objects, add an argument /preinstalled to the /clean argument # If you would like to only scan with it, change the argument from /clean to /scan # NOTE: For the sake of users from Asia (primarily China), do not use the clean option. It will very likely remove a lot of their important software. New-Item -ItemType Directory -Force -Path "$env:SystemDrive\AdwCleaner" | Out-Null Invoke-WebRequest -Uri "https://adwcleaner.malwarebytes.com/adwcleaner?channel=release" -OutFile "$env:SystemDrive\AdwCleaner\AdwCleanerFRST.exe" Start-Process -FilePath "$env:SystemDrive\AdwCleaner\AdwCleanerFRST.exe" -ArgumentList "/eula" -Wait -WindowStyle Hidden $logFile = "$env:SystemDrive\AdwCleaner\AdwCleanerOutputFRST.txt" Start-Process -FilePath "$env:SystemDrive\AdwCleaner\AdwCleanerFRST.exe" -ArgumentList "/noreboot /clean" -Wait -WindowStyle Hidden -RedirectStandardOutput $logFile Get-Content $logFile -Encoding Unicode Remove-Item -Path $logFile -Force -ErrorAction SilentlyContinue EndPowerShell: StartPowershell: # Replace /scanonly with /clean if you also want to delete items -- however, this will activate a trial license on the system, I do not recommend it $hmpExe = "$env:TEMP\HitmanPro_x64.exe" $logFile = "$env:TEMP\HitmanPro_ScanLog.txt" Invoke-WebRequest -Uri "https://dl.surfright.nl/HitmanPro_x64.exe" -OutFile $hmpExe -UseBasicParsing $proc = Start-Process $hmpExe -ArgumentList "/ews","/scanonly","/noinstall","/log=`"$logFile`"","/logtype=txt" -Wait -PassThru if (!(Test-Path $logFile)) { Write-Host "Scan failed (exit $($proc.ExitCode))"; exit 1 } Get-Content $logFile -Encoding Unicode EndPowershell: C:\Windows\System32\GroupPolicyUsers C:\Windows\System32\GroupPolicy C:\Windows\System32\config\systemprofile\AppData\Local\*.tmp C:\WINDOWS\system32\*.tmp C:\WINDOWS\syswow64\*.tmp C:\Users\CurrentUserName\AppData\Local\Temp\* C:\Windows\Temp\* C:\Windows\SystemTemp\* StartPowershell: Set-MpPreference -DisableAutoExclusions $true -Force Set-MpPreference -OnAccessProtectionEnabled $True Set-MpPreference -RealTimeProtectionEnabled $True Set-MpPreference -AMRunningMode $Normal Set-MpPreference -PUAProtection Enabled Set-MpPreference -DisableRealtimeMonitoring $false Set-MpPreference -DisableBehaviorMonitoring $false Set-MpPreference -CloudBlockLevel 2 Set-MpPreference -MAPSReporting 2 Set-MpPreference -DisableBlockAtFirstSeen $false Set-MpPreference -DisableArchiveScanning $false Set-MpPreference -DisableRemovableDriveScanning $false Set-MpPreference -DisableScanningNetworkFiles $false Set-MpPreference -CheckForSignaturesBeforeRunningScan $true Set-MpPreference -CloudExtendedTimeout 30 Set-MpPreference -DisableIOAVProtection $false Set-MpPreference -DisableScriptScanning $false Set-MpPreference -DisableAutoExclusions 1 Set-MpPreference -DisableScanningMappedNetworkDrivesForFullScan 0 Set-MpPreference -DisableEmailScanning 0 Set-MpPreference -EnableDnsSinkhole $true Set-MpPreference -SignatureUpdateInterval 12 Set-MpPreference -HighThreatDefaultAction Quarantine Set-MpPreference -SevereThreatDefaultAction Quarantine Update-MpSignature Get-MpPreference EndPowershell: C:\Windows\SoftwareDistribution\Download\* C:\Windows\SoftwareDistribution\DataStore\* CMD: netsh int ip reset CMD: netsh int ipv6 reset CMD: ipconfig /flushDNS CMD: netsh winsock reset catalog CMD: "%WINDIR%\SYSTEM32\lodctr.exe" /R CMD: "%WINDIR%\SysWOW64\lodctr.exe" /R CMD: "C:\Windows\SYSTEM32\lodctr.exe" /R CMD: "C:\Windows\SysWOW64\lodctr.exe" /R CMD: bitsadmin /reset /allusers CMD: Winmgmt /resetrepository CMD: winmgmt /resyncperf CMD: DISM.exe /Online /Cleanup-Image /RestoreHealth CMD: SFC /ScanNow CMD: DISM.exe /Online /Cleanup-Image /StartComponentCleanup /ResetBase EmptyTemp: End::