FF Extension: (Privacy Badger) - C:\Users\Tyson\AppData\Roaming\Mozilla\Firefox\Profiles\xnc3cpuf.default-release\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2022-05-13] Tcpip\..\Interfaces\{219cb33e-0f8a-4084-a685-e83afae8e96c}: [DhcpNameServer] 192.168.0.1 S3 SNAC; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.3.7393.4000.105\Bin64\snac64.exe [215648 2022-02-25] (Symantec Corporation -> Broadcom) AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [7410] R2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [11523704 2022-06-09] (Logitech Inc -> Logitech, Inc.) 2022-09-13 07:02 - 2022-05-24 21:19 - 000000000 ____D C:\Program Files\Adobe 2022-08-24 16:24 - 2022-08-24 16:24 - 000000000 ____D C:\ProgramData\Battlestate Games 2022-09-18 23:33 - 2022-04-05 15:06 - 000000000 ____D C:\windows\system32\Tasks\Symantec Endpoint Protection 2022-09-13 07:02 - 2022-05-24 21:19 - 000000000 ____D C:\Program Files\Adobe HKU\S-1-5-21-479614032-2295716511-2174497491-1002\\RunOnce: [Uninstall 22.065.0412.0004_1] => C:\windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Tyson\AppData\Local\Microsoft\OneDrive\22.065.0412.0004_1" (No File) 2022-09-13 06:37 - 2022-09-13 06:37 - 000000000 ___HD C:\$WinREAgent 2022-08-30 07:22 - 2022-01-10 21:49 - 000000000 ____D C:\ProgramData\Package Cache ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe (Firebit OU -> Rainmeter) Origin (HKLM-x32\\Origin) (Version: 10.5.113.50894 - Electronic Arts, Inc.) R3 MBAMSwissArmy; C:\windows\System32\Drivers\mbamswissarmy.sys [239544 2022-08-02] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca keeps me and my friends online for hours. Acrobat Notification Client -> C:\Program Files\WindowsApps\AcrobatNotificationClient_1.0.4.0_x86__e1rzdqpraam7r [2022-08-19] (Adobe Systems Incorporated) ==================== SigCheck ============================ (services.exe ->) (Oculus VR, LLC -> Facebook Technologies, LLC) C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe ==================== Drives ================================ 2022-08-25 16:41 - 2021-06-05 22:10 - 000000000 ____D C:\windows\system32\NDF Resolution: In Device Manager, click "Action", and then click "Enable Device". FirewallRules: [{7A701A64-DD53-4D45-A7DF-E8D461165756}] => (Allow) C:\Program Files\Oculus\Support\oculus-worlds\Home2.exe (Epic Games, Inc.) [File not signed] FirewallRules: [{FFF84693-22B9-4E99-A116-CF0BDB3B98F9}] => (Allow) C:\Program Files\Oculus\Support\oculus-dash\dash\bin\OculusDash.exe (Oculus VR, LLC -> ) HKU\S-1-5-21-479614032-2295716511-2174497491-1002\\Run: [Medal] => C:\Users\Tyson\AppData\Local\Medal\update.exe [1974192 2022-07-28] (Ferox Games B.V. -> ) 2022-09-13 06:56 - 2021-06-05 22:10 - 000000000 ____D C:\windows\system32\SecureBootUpdates Total physical RAM: 32541.47 MB 2022-09-13 06:48 - 2022-09-13 06:48 - 000041472 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll 2022-09-13 06:56 - 2021-06-05 22:10 - 000000000 ____D C:\windows\Provisioning FirewallRules: [TCP Query User{D022303E-78DE-4FBD-8EE1-9D144739CF3C}C:\users\tyson\appdata\local\medal\app-4.1000.0\medal.exe] => (Allow) C:\users\tyson\appdata\local\medal\app-4.1000.0\medal.exe (Ferox Games B.V. -> Medal B.V.) (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_0797c0ea8580ae89\IntelCpHDCPSvc.exe Maxon Cinema 4D 25 (HKLM\\Maxon Cinema 4D R25) (Version: R25 - Maxon) (services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msiexec.exe FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-04-05] (Microsoft Corporation -> Microsoft Corporation) FolderExtensions: [] -> {117E3954-5034-453A-A18B-7B79493646E6} => C:\Program Files\StartAllBack\StartAllBackLoaderX64.dll [2022-04-07] (Stanislav Zinukhov -> ) 2022-08-31 01:24 - 2022-05-25 01:10 - 000003496 _____ C:\windows\system32\Tasks\GoogleUpdateTaskMachineUA{52819A4A-6F97-4F51-A9DF-F8722C17E431} Folder Size (64-bit) (HKLM\\{F24FF688-7138-4CCF-A83F-71E9FB01170E}) (Version: 2.6 - Brio) =============== FirewallRules: [{CF85FB9F-ED01-4253-89EB-A807F9E13088}] => (Allow) D:\Steam\SteamApps\common\DRAGON BALL FighterZ\DBFighterZ.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd) 2022-09-07 20:43 - 2022-09-07 20:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID FirewallRules: [TCP Query User{B74EA116-49AA-4ADE-A880-3B544A114EDE}C:\users\tyson\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_fxdk_b2545_gameruntime.exe] => (Allow) C:\users\tyson\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_fxdk_b2545_gameruntime.exe => No File Just to clarify, is there anything else wrong with my pc? Guest (S-1-5-21-479614032-2295716511-2174497491-501 - Limited - Disabled) FirewallRules: [TCP Query User{2F29BC3A-D5D6-447D-BDFC-4B124ACDD023}C:\users\tyson\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\tyson\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd) Microsoft Windows Desktop Runtime - 6.0.6 (x64) (HKLM-x32\\{aad3b888-fde2-48c0-95c2-2f7a729283fb}) (Version: 6.0.6.31318 - Microsoft Corporation) FirewallRules: [{F9B6DB0C-2A5E-4C65-8C00-B130B56A31E3}] => (Allow) C:\Program Files\Oculus\Support\oculus-client\OculusClient.exe (Oculus VR, LLC) [File not signed] Date: 2022-09-18 23:41:17 2022-08-24 15:03 - 2022-08-24 15:03 - 000000000 ____D C:\Users\Tyson\AppData\Local\GameAnalytics You can either enter the link into your browser's address bar by copying and pasting the above link, or else simply click on the link, and it'll bring you to their 404 page. Battlestate Games Launcher 12.12.2.1944 (HKLM-x32\\{B0FDA062-7581-4D67-B085-C4E7C358037F}_is1) (Version: 12.12.2.1944 - Battlestate Games) (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.) C:\Windows\System32\CorsairGamingAudioCfgService64.exe 2022-08-28 00:46 - 2022-08-28 00:46 - 000000000 ____D C:\Users\Tyson\.ms-ad U4 dmwappushservice; no ImagePath Voicemod (HKLM\\{8435A407-F778-4647-9CDB-46E5EC50BAD0}_is1) (Version: 2.29.1.0 - Voicemod S.L.) R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [923656 2022-08-02] (Adobe Inc. -> Adobe Inc.) R3 MBAMSwissArmy; C:\windows\System32\Drivers\mbamswissarmy.sys [239544 2022-08-02] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) Without any context my friend sent me the file after it was sent to him by someone else. IFEO\osppsvc.exe: [VerifierDlls] SppExtComObjHook.dll IFEO\Windows10Upgrade.exe: [Debugger] / Task: {56640CC7-1B14-4DE5-A992-AEE87C843206} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-05-05] (Nvidia Corporation -> NVIDIA Corporation) FirewallRules: [{9A674005-76ED-49FE-B5D9-BD89D27E7EAA}] => (Allow) D:\Steam\SteamApps\common\Aim Lab\AimLab_tb.exe () [File not signed] R3 logi_joy_bus_enum; C:\windows\system32\drivers\logi_joy_bus_enum.sys [33528 2022-05-13] (WDKTestCert builder,132743893872553407 -> Logitech) (C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.CpuIdRemote64.exe S3 WdFilter; C:\windows\system32\drivers\wd\WdFilter.sys [435432 2022-01-03] (Microsoft Windows -> Microsoft Corporation) To find the easter egg, a user had to click their username in the bottom left corner prior to Stable 162224 (e1ec9ed) of the client or in the account profile popout in later versions. Other top scores include: Read: are there termites in mn - second place: Daniel Cimbalista, with a score of 530,760; - third place: Michael Qureshi, with a score of 512 3. FirewallRules: [UDP Query User{AFE879DE-7BE8-4727-908C-8E9ECCA63D43}C:\users\tyson\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2612_gtaprocess.exe] => (Allow) C:\users\tyson\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2612_gtaprocess.exe => No File FirewallRules: [{B6E257CC-AF55-45B4-AD9D-7193915F34CB}] => (Block) D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.) All reviews are moderated by Top.gg moderators. 2022-06-27 00:22 - 2022-06-27 00:22 - 001611264 _____ (The Qt Company Ltd) [File not signed] C:\Program Files (x86)\Origin\platforms\qwindows.dll S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934368 2022-03-03] (Epic Games Inc. -> Epic Games, Inc.) Print both variables during the game, where self.score += 1 when the snake eats a snack, and self.high_score stays constant throughout the game. HKU\S-1-5-21-479614032-2295716511-2174497491-1002\Control Panel\Desktop\\Wallpaper -> C:\windows\web\wallpaper\Windows\img19.jpg Adobe Refresh Manager (HKLM-x32\\{AC76BA86-0804-1033-1959-018244601013}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden Username: Fancy1. 2022-09-19 00:27 - 2022-09-19 00:27 - 000000000 ____D C:\Program Files (x86)\VulkanRT 2022-09-21 08:31 - 2022-05-13 18:02 - 000000000 ____D C:\Users\Tyson FirewallRules: [UDP Query User{ABD0FEC5-FD03-416C-8BE7-242C0CB68220}D:\steam\steamapps\common\naruto to boruto\naruto\binaries\win64\naruto-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\naruto to boruto\naruto\binaries\win64\naruto-win64-shipping.exe => No File High scores are saved, with global leaderboards making it possible for servers to compete for records. FirewallRules: [{CC83CFDA-11EF-408C-A403-34F509C339E6}] => (Allow) D:\Steam\SteamApps\common\VRChat\launch.exe () [File not signed] Startup: C:\Users\Tyson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2022-06-11] R3 iFiHDUSBAudioks; C:\windows\System32\drivers\iFiHDUSBAudioks_x64.sys [56056 2016-02-04] (Abbingdon Global Limited -> ) -> ) Clicking on the sign with a snake in the bottom right of the image will launch the game. 2022-08-28 02:33 - 2022-08-28 02:33 - 000000000 ____D C:\Users\Tyson\.insomniac "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca 2022-09-13 06:55 - 2021-06-05 22:10 - 000000000 ____D C:\windows\system32\SecurityHealth Intel Chipset Device Software (HKLM\\{C6A1126A-6ED6-4231-BA48-4DA77986FA1C}) (Version: 10.1.18950.8298 - Intel Corporation) Hidden 2022-09-21 08:33 - 2022-08-02 16:27 - 000091304 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\windows\system32\GigabyteDownloadAssistant.exe Resetting Path, OK! 2022-09-18 22:47 - 2022-05-13 20:40 - 000000000 ____D C:\Users\Tyson\AppData\Local\Discord ContextMenuHandlers6: [LDVPMenu] -> {8BEEE74D-455E-4616-A97A-F6E86C317F32} => C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.3.7393.4000.105\Bin64\vpshell2.dll [2022-02-25] (Symantec Corporation -> Broadcom) FirewallRules: [{3CDE2819-7F84-4B7C-87EC-69A6E8D260DB}] => (Allow) D:\Steam\SteamApps\common\GarrysMod\hl2.exe () [File not signed] FirewallRules: [{ED945FD2-D281-4946-9D2B-FC738F5DF249}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation) R3 VOICEMOD_Driver; C:\windows\system32\drivers\vmdrv.sys [48136 2022-03-08] (Voicemod Sociedad Limitada -> Windows Win 7 DDK provider) It has done this 1 time(s). CHR Extension: (Chrome Web Store Payments) - C:\Users\Tyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-05-13] from curses import KEY_RIGHT, KEY_LEFT, KEY_UP, KEY_DOWN. C:\windows\system32\GroupPolicy\GPT.ini => moved successfully Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) SearchScopes: HKU\S-1-5-21-479614032-2295716511-2174497491-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = FirewallRules: [{81322ABC-5F78-49D7-99DF-F779ADEE847A}] => (Allow) D:\Steam\SteamApps\common\Phasmophobia\Phasmophobia.exe () [File not signed] (C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.CpuIdRemote64.exe CHR Extension: (Dark Reader) - C:\Users\Tyson\AppData\Local\Google\Chrome\User Data\Default\Extensions\eimadpbcbfnmbkopoojfekhnkhdbieeh [2022-08-24] discord snake high score. UXP WebView Support (HKLM-x32\\UXPW_1_1_0) (Version: 1.1.0 - Adobe Inc.) Fully custom design, with high quality models included to enhance realism and customer satisfaction. FirewallRules: [{CF85FB9F-ED01-4253-89EB-A807F9E13088}] => (Allow) D:\Steam\SteamApps\common\DRAGON BALL FighterZ\DBFighterZ.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd) IFEO\upfc.exe: [Debugger] / FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-09-08] (Adobe Inc. -> Adobe Systems Inc.) 2022-09-19 00:36 - 2022-09-19 00:36 - 000000000 ____D C:\Users\Tyson\AppData\LocalLow\Oculus (If an entry is included in the fixlist, the registry item will be restored to default or removed. CustomCLSID: HKU\S-1-5-21-479614032-2295716511-2174497491-1002_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Inc. -> Adobe Systems) Description: The server {9BA05972-F6A8-11CF-A442-00A0C90A8F39} did not register with DCOM within the required timeout. DefaultAccount (S-1-5-21-479614032-2295716511-2174497491-503 - Limited - Disabled) Google Snake is a classic game that was once popular on Nokia phones. 2022-09-13 06:56 - 2021-06-05 22:10 - 000000000 ____D C:\windows\SysWOW64\et-EE ==================== Drives ================================ 2022-08-19 00:58 - 2022-01-04 13:44 - 000000000 ____D C:\ProgramData\Packages Make sure that your device volume is turned on. Task: {8B25E595-94B3-455C-A6D1-4938F6A5B6E4} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1003128 2022-05-05] (Nvidia Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log 2022-09-13 06:56 - 2021-06-05 22:10 - 000000000 ____D C:\windows\system32\oobe Different items will get you different points, depending on what they are. 2022-09-21 08:32 - 2022-08-02 16:26 - 000882856 _____ C:\windows\system32\wpbbin.exe