Here is a new puzzle I've never seen before.
A couple months ago, I replaced my laptop HDD with a 1TB SSD and reinstalled Windows 10 on a partition and Pop OS on another partition. I'm primarily a Linux user.
I booted into Windows after a month or more of not using it and installed some dev and music software I've used on my other systems for years. Because I'm a disk hawk, I checked my used capacity using the properties window. If I open it and let it sit, I can go back to it and click in it again and the number of bytes used is climbing steadily upward. Nothing is being downloaded, and I'm not installing any software. I would estimate that 'Used space' is being increased by about 1MB every 30 seconds or so. Disk i/o isn't maxed out and the network activity is idle. I even checked to see if Windows was downloading an update in the background to rule that out.
See attached images to see what I mean.
Thanks in advance for checking in.
Ran by [removed] (administrator) on DESKTOP-6SK4I74 (Dell Inc. Inspiron 5570) (03-03-2021 19:16:52)
[removed]
Platform: Windows 10 Home Version 20H2 19042.804 (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\DiscoverySrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\bdagent.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\bdredline.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\vsserv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <3>
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Dropbox, Inc -> The Qt Company Ltd.) C:\Program Files (x86)\Dropbox\Client\116.4.368\QtWebEngineProcess.exe <3>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler64.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <19>
(Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\dptf_helper.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_ffc75848a6342fdf\jhi_service.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxCUIService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxEM.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_54b736e5be5b50b2\OneApp.IGCC.WinService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHDCPSvc.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHeciSvc.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_f881c4be237ce854\RstMwService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\coffe\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.2009.5.0_x64__8wekyb3d8bbwe\Time.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2101.10.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12011.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(MongoDB, Inc) [File not signed] C:\Program Files\MongoDB\Server\4.4\bin\mongod.exe
(Oracle America, Inc. -> ) C:\Program Files\MySQL\MySQL Server 8.0\bin\mysqld.exe <2>
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <2>
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Waves Inc -> Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe
(Waves Inc -> Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\…\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9269328 2019-01-28] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\…\Run: [RtHDVBg_PushButton] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506384 2019-01-28] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\…\Run: [WavesSvc] => C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [1213736 2018-11-04] (Waves Inc -> Waves Audio Ltd.)
HKLM\…\Run: [Fences] => C:\Program Files (x86)\Stardock\Fences\Fences.exe [4854200 2018-05-25] (Stardock Corporation -> Stardock Corporation)
HKLM-x32\…\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [7992336 2021-02-13] (Dropbox, Inc -> Dropbox, Inc.)
HKU\S-1-5-21-1509965680-1495129612-1392153016-1001\…\Run: [Fences] => c:\program files (x86)\stardock\fences\Fences.exe [4854200 2018-05-25] (Stardock Corporation -> Stardock Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\88.0.4324.190\Installer\chrmstp.exe [2021-02-24] (Google LLC -> Google LLC)
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {2861F34C-83EB-41B2-970D-BA6EF8F38744} - System32\Tasks\Intel PTT EK Recertification => C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_75ffca5eec865b4b\lib\IntelPTTEKRecertification.exe [918288 2020-04-22] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {2A22294C-F367-422E-9420-4B965255EC57} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2020-12-24] (Google LLC -> Google LLC)
Task: {79605DBB-664B-43F2-90BC-7F956DA8B746} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2020-12-24] (Dropbox, Inc -> Dropbox, Inc.)
Task: {8ED8CCF0-6B1C-4175-987B-D01BD8ABC12E} - System32\Tasks\Microsoft\VisualStudio\Updates\BackgroundDownload => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\BackgroundDownload.exe [64936 2020-12-29] (Microsoft Corporation -> Microsoft)
Task: {A87115F6-A513-4F8A-A600-EC3F5023BCDE} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2020-12-24] (Dropbox, Inc -> Dropbox, Inc.)
Task: {B02A1F41-2E37-4678-AF0D-9136A7A28CE3} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {C891E379-7B6D-4414-B4A9-86E98940943D} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [888232 2021-01-29] (Bitdefender SRL -> Bitdefender)
Task: {DEF62E5B-DEBA-4818-A2BC-07DBB36C74D0} - System32\Tasks\MySQL\Installer\ManifestUpdate => C:\Program Files (x86)\MySQL\MySQL Installer for Windows\MySQLInstallerConsole.exe [72328 2020-11-12] (Oracle America, Inc. -> Oracle Corporation)
Task: {EC4DD0E0-FBF9-497F-8658-F0B32EAE1C34} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2020-12-24] (Google LLC -> Google LLC)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{d1278b44-2bcf-431e-8662-06a5e5839ed5}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Profile: C:\Users\coffe\AppData\Local\Microsoft\Edge\User Data\Default [2021-03-03]
FireFox:
========
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-02-24] (Adobe Inc. -> Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\coffe\AppData\Local\Google\Chrome\User Data\Default [2021-03-03]
CHR Extension: (Slides) - C:\Users\coffe\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-12-24]
CHR Extension: (Docs) - C:\Users\coffe\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-12-24]
CHR Extension: (Google Drive) - C:\Users\coffe\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-12-24]
CHR Extension: (YouTube) - C:\Users\coffe\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-12-24]
CHR Extension: (Augury) - C:\Users\coffe\AppData\Local\Google\Chrome\User Data\Default\Extensions\elgalmkoelokbchhkhacckoklkejnhcd [2020-12-24]
CHR Extension: (Sheets) - C:\Users\coffe\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-12-24]
CHR Extension: (Google Docs Offline) - C:\Users\coffe\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-03-03]
CHR Extension: (Page Ruler Redux) - C:\Users\coffe\AppData\Local\Google\Chrome\User Data\Default\Extensions\giejhjebcalaheckengmchjekofhhmal [2020-12-24]
CHR Extension: (GNOME Shell integration) - C:\Users\coffe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gphhapmejobijbbhgpjhcjognlahblep [2021-02-24]
CHR Extension: (Wappalyzer) - C:\Users\coffe\AppData\Local\Google\Chrome\User Data\Default\Extensions\gppongmhjkpfnbhagpmjfkannfbllamg [2021-02-24]
CHR Extension: (Redux DevTools) - C:\Users\coffe\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmhkpmbekcpmknklioeibfkpmmfibljd [2020-12-24]
CHR Extension: (JSON Formatter) - C:\Users\coffe\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhimpmpmffogbmmkmajibklelopddmjf [2020-12-24]
CHR Extension: (Screencastify - Screen Video Recorder) - C:\Users\coffe\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmeijimgabbpbgpdklnllpncmdofkcpn [2021-03-03]
CHR Extension: (Chrome Web Store Payments) - C:\Users\coffe\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-24]
CHR Extension: (GitHub Dark Theme) - C:\Users\coffe\AppData\Local\Google\Chrome\User Data\Default\Extensions\odkdlljoangmamjilkamahebpkgpeacp [2021-02-24]
CHR Extension: (Gmail) - C:\Users\coffe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-12-24]
CHR Extension: (Chrome Media Router) - C:\Users\coffe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-02-24]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
R2 bdredline; C:\Program Files\Bitdefender Antivirus Free\bdredline.exe [2500144 2019-03-27] (Bitdefender SRL -> Bitdefender)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2020-12-24] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2020-12-24] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [44064 2021-02-13] (Dropbox, Inc -> Dropbox, Inc.)
R2 MongoDB; C:\Program Files\MongoDB\Server\4.4\bin\mongod.exe [38284288 2020-11-16] (MongoDB, Inc) [File not signed]
R2 MySQL80; C:\Program Files\MySQL\MySQL Server 8.0\bin\mysqld.exe [49981544 2020-09-23] (Oracle America, Inc. -> )
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1358248 2021-01-29] (Bitdefender SRL -> Bitdefender)
R2 updatesrv; C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe [242024 2020-11-26] (Bitdefender SRL -> Bitdefender)
R2 vsserv; C:\Program Files\Bitdefender Antivirus Free\vsserv.exe [570208 2021-01-19] (Bitdefender SRL -> Bitdefender)
R2 vsservppl; C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe [242024 2020-11-26] (Bitdefender SRL -> Bitdefender)
S3 VSStandardCollectorService150; C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe [147392 2019-04-30] (Microsoft Corporation -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\NisSrv.exe [2483624 2021-02-24] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\MsMpEng.exe [128392 2021-02-24] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 atc; C:\Windows\System32\DRIVERS\atc.sys [2718744 2021-02-09] (Bitdefender SRL -> Bitdefender S.R.L. Bucharest, ROMANIA)
R2 BdDci; C:\Windows\system32\DRIVERS\bddci.sys [802976 2020-12-04] (Bitdefender SRL -> Bitdefender)
S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [22960 2019-03-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Bitdefender)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 edrsensor; C:\Windows\System32\DRIVERS\edrsensor.sys [309120 2020-02-03] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA)
R1 Gemma; C:\Windows\System32\DRIVERS\gemma.sys [488592 2021-02-16] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA)
R2 trufos; C:\Windows\System32\drivers\trufos.sys [640760 2020-06-09] (Bitdefender SRL -> Bitdefender)
R0 vlflt; C:\Windows\System32\DRIVERS\vlflt.sys [386800 2020-10-20] (Bitdefender SRL -> Bitdefender)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [49544 2021-02-24] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [420088 2021-02-24] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [72952 2021-02-24] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-03-03 19:16 - 2021-03-03 19:17 - 000000000 ____D C:\FRST
2021-03-03 19:14 - 2021-03-03 19:16 - 000000000 ____D C:\Users\coffe\Desktop\mal
2021-03-03 15:44 - 2021-03-03 15:44 - 000000112 ___SH C:\bootTel.dat
2021-03-03 15:21 - 2021-03-03 15:21 - 000087652 _____ C:\ProgramData\agent.update.1614802895.bdinstall.v2.bin
2021-03-03 15:20 - 2021-03-03 15:20 - 000001196 _____ C:\Users\coffe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bitdefender Antivirus Free.lnk
2021-03-03 15:20 - 2021-03-03 15:20 - 000000000 ____D C:\ProgramData\48C4687D-9760-4F5B-BAB3-60351B0841E4
2021-03-03 15:15 - 2021-03-03 15:15 - 000003802 _____ C:\Windows\system32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2021-03-03 15:15 - 2021-03-03 15:15 - 000001211 _____ C:\ProgramData\Desktop\Bitdefender Antivirus Free.lnk
2021-03-03 15:15 - 2021-03-03 15:15 - 000000000 ____D C:\ProgramData\Bitdefender
2021-03-03 15:15 - 2020-06-09 16:13 - 000640760 _____ (Bitdefender) C:\Windows\system32\Drivers\trufos.sys
2021-03-03 15:15 - 2019-03-20 23:12 - 000022960 _____ (Bitdefender) C:\Windows\system32\Drivers\bdelam.sys
2021-03-03 15:14 - 2021-03-03 19:18 - 000000000 ____D C:\Program Files\Bitdefender Antivirus Free
2021-03-03 15:14 - 2021-02-16 14:31 - 000488592 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\Windows\system32\Drivers\gemma.sys
2021-03-03 15:14 - 2021-02-09 14:59 - 002718744 _____ (Bitdefender S.R.L. Bucharest, ROMANIA) C:\Windows\system32\Drivers\atc.sys
2021-03-03 15:14 - 2020-12-04 15:15 - 000802976 _____ (Bitdefender) C:\Windows\system32\Drivers\bddci.sys
2021-03-03 15:14 - 2020-10-20 12:18 - 000386800 _____ (Bitdefender) C:\Windows\system32\Drivers\vlflt.sys
2021-03-03 15:14 - 2020-02-03 15:53 - 000309120 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\Windows\system32\Drivers\edrsensor.sys
2021-03-03 15:13 - 2021-03-03 15:21 - 000000000 ____D C:\Program Files\Bitdefender Agent
2021-03-03 15:13 - 2021-03-03 15:13 - 000115844 _____ C:\ProgramData\agent.1614802389.bdinstall.v2.bin
2021-03-03 15:13 - 2021-03-03 15:13 - 000000000 ____D C:\ProgramData\Bitdefender Agent
2021-03-03 15:12 - 2021-03-03 15:12 - 013543384 _____ C:\Users\coffe\Downloads\bitdefender_online.exe
2021-03-03 10:10 - 2021-03-03 10:10 - 000000890 _____ C:\Users\coffe\Downloads\SB53932424656 (1).bin
2021-03-03 09:57 - 2021-03-03 09:57 - 000000890 _____ C:\Users\coffe\Downloads\SB53932424656.bin
2021-03-03 09:45 - 2021-03-03 09:45 - 000000604 ____H C:\Program Files (x86)\_Z2
2021-03-03 09:45 - 2021-03-03 09:45 - 000000000 ____D C:\ProgramData\Pinnacle
2021-03-03 09:44 - 2021-03-03 09:44 - 000000970 _____ C:\ProgramData\Desktop\Sibelius 7.lnk
2021-03-03 09:44 - 2021-03-03 09:44 - 000000000 ____D C:\Users\coffe\AppData\Local\Downloaded Installations
2021-03-03 09:44 - 2021-03-03 09:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avid
2021-03-03 09:44 - 2021-03-03 09:44 - 000000000 ____D C:\Program Files\Common Files\Propellerhead Software
2021-03-03 09:43 - 2021-03-03 09:57 - 000000000 ____D C:\Users\coffe\AppData\Roaming\Avid
2021-03-03 09:43 - 2021-03-03 09:44 - 000000000 ____D C:\ProgramData\Avid
2021-03-03 09:43 - 2021-03-03 09:44 - 000000000 ____D C:\Program Files (x86)\Avid
2021-03-03 09:43 - 2021-03-03 09:43 - 000000000 ____D C:\ProgramData\Documents\Sibelius Example Scores
2021-03-03 09:43 - 2021-03-03 09:43 - 000000000 ____D C:\Program Files\Avid
2021-03-03 09:36 - 2021-03-03 09:36 - 000000608 ____H C:\ProgramData\T2
2021-03-03 09:36 - 2021-03-03 09:36 - 000000604 ____H C:\Windows\T4
2021-03-03 09:36 - 2021-03-03 09:36 - 000000604 ____H C:\Windows\SysWOW64\T3
2021-03-03 09:36 - 2021-03-03 09:36 - 000000604 ____H C:\Program Files (x86)\STLL Notifier
2021-03-03 09:36 - 2021-03-03 09:36 - 000000000 ____D C:\ProgramData\Sibelius Software
2021-03-03 09:35 - 2021-03-03 09:37 - 000000000 ____D C:\Users\coffe\AppData\Roaming\Sibelius Software
2021-03-03 09:24 - 2021-03-03 09:44 - 000000000 ____D C:\Users\coffe\Documents\Scores
2021-03-03 09:24 - 2021-03-03 09:24 - 000002162 _____ C:\ProgramData\Desktop\Sibelius 5.lnk
2021-03-03 09:24 - 2021-03-03 09:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sibelius Software
2021-03-03 09:24 - 2021-03-03 09:24 - 000000000 ____D C:\Program Files (x86)\Sibelius Software
2021-03-03 09:19 - 2021-03-03 09:19 - 000000000 ____D C:\Program Files\Reference Assemblies
2021-03-03 09:19 - 2021-03-03 09:19 - 000000000 ____D C:\Program Files\MSBuild
2021-03-03 06:55 - 2021-03-03 06:55 - 000000000 ____D C:\Users\coffe\Desktop\bon-air-quilt
2021-03-03 06:54 - 2021-03-03 06:54 - 000000000 ____D C:\Users\coffe\Desktop\baq
2021-03-03 06:51 - 2021-03-03 06:54 - 000000000 ____D C:\Users\coffe\Desktop\cmc
2021-03-03 04:42 - 2021-03-03 04:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Frescobaldi
2021-03-03 04:42 - 2021-03-03 04:42 - 000000000 ____D C:\Program Files (x86)\Frescobaldi
2021-03-03 04:27 - 2021-03-03 04:27 - 000000000 ____D C:\Users\coffe\AppData\Local\pip
2021-03-03 04:07 - 2021-03-03 04:08 - 000000000 ____D C:\Users\coffe\.lilypond-fonts.cache-2
2021-03-03 04:06 - 2021-03-03 04:23 - 000000000 ____D C:\Users\coffe\Desktop\scores
2021-03-03 03:38 - 2021-03-03 03:38 - 000002198 _____ C:\ProgramData\Desktop\LilyPond.lnk
2021-03-03 03:38 - 2021-03-03 03:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LilyPond
2021-03-03 03:38 - 2021-03-03 03:38 - 000000000 ____D C:\Program Files (x86)\LilyPond
2021-03-02 17:54 - 2021-03-03 06:06 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2021-02-28 19:45 - 2021-02-28 19:45 - 000000780 _____ C:\Users\coffe\AppData\Local\recently-used.xbel
2021-02-28 17:53 - 2021-02-28 17:53 - 000000000 ____D C:\Users\coffe\.cache
2021-02-28 17:48 - 2021-02-28 19:45 - 000000000 ____D C:\Users\coffe\AppData\Roaming\GnuCash
2021-02-26 15:04 - 2021-02-26 15:04 - 000000209 _____ C:\Users\coffe\Desktop\coffee-metal-test-heather-sysadmin-credentials.csv
2021-02-26 15:02 - 2021-02-26 15:02 - 000000207 _____ C:\Users\coffe\Desktop\coffee-metal-test-david-sysadmin-credentials.csv
2021-02-26 13:04 - 2021-02-26 13:04 - 000012530 _____ C:\Users\coffe\Downloads\Stardock Invoice 4241627.pdf
2021-02-25 18:10 - 2021-02-25 18:52 - 000001111 _____ C:\Users\coffe\Desktop\Transcribe!.lnk
2021-02-25 18:10 - 2021-02-25 18:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Transcribe!
2021-02-25 18:10 - 2021-02-25 18:10 - 000000000 ____D C:\Program Files (x86)\Transcribe!
2021-02-25 00:43 - 2021-03-03 03:29 - 000000000 ____D C:\Users\coffe\AppData\Roaming\npm-cache
2021-02-25 00:43 - 2021-02-25 00:43 - 000000000 ____D C:\Users\coffe\.config
2021-02-25 00:41 - 2021-02-25 00:41 - 000000000 ___DL C:\Program Files\nodejs
2021-02-25 00:31 - 2021-02-25 00:38 - 000000000 ____D C:\Users\coffe\AppData\Roaming\nvm
2021-02-25 00:31 - 2021-02-25 00:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVM for Windows
2021-02-24 21:40 - 2021-02-24 21:40 - 000000000 ____D C:\Users\coffe\.idlerc
2021-02-24 20:54 - 2021-02-24 20:54 - 020598784 _____ C:\Users\coffe\Downloads\python-2.7.18.amd64.msi
2021-02-24 20:30 - 2021-02-25 01:13 - 000000718 _____ C:\Users\coffe\.bashrc
2021-02-24 19:35 - 2021-02-24 19:35 - 000000089 _____ C:\Users\coffe\.gitconfig
2021-02-24 09:56 - 2021-02-24 09:56 - 000000000 ____D C:\Users\coffe\.m2
2021-02-24 09:52 - 2021-02-24 09:52 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-02-24 09:51 - 2021-03-03 05:46 - 000000000 ____D C:\Users\coffe\AppData\Roaming\Postman
2021-02-24 09:51 - 2021-02-24 09:51 - 000002169 _____ C:\Users\coffe\Desktop\Postman.lnk
2021-02-24 09:51 - 2021-02-24 09:51 - 000000000 ____D C:\Users\coffe\Postman
2021-02-24 09:51 - 2021-02-24 09:51 - 000000000 ____D C:\Users\coffe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Postman
2021-02-24 09:51 - 2021-02-24 09:51 - 000000000 ____D C:\Users\coffe\AppData\Local\Postman
2021-02-24 09:50 - 2021-02-24 09:50 - 002755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2021-02-24 09:50 - 2021-02-24 09:50 - 000581120 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr
2021-02-24 09:50 - 2021-02-24 09:50 - 000575488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hhctrl.ocx
2021-02-24 09:50 - 2021-02-24 09:50 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoScreensaver.scr
2021-02-24 09:50 - 2021-02-24 09:50 - 000469504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appwiz.cpl
2021-02-24 09:50 - 2021-02-24 09:50 - 000234496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2021-02-24 09:50 - 2021-02-24 09:50 - 000135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VBICodec.ax
2021-02-24 09:50 - 2021-02-24 09:50 - 000095744 _____ C:\Windows\system32\VirtualMonitorManager.dll
2021-02-24 09:50 - 2021-02-24 09:50 - 000072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2021-02-24 09:50 - 2021-02-24 09:50 - 000067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscui.cpl
2021-02-24 09:50 - 2021-02-24 09:50 - 000053760 _____ C:\Windows\SysWOW64\BWContextHandler.dll
2021-02-24 09:49 - 2021-02-24 09:49 - 002755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2021-02-24 09:49 - 2021-02-24 09:49 - 002260992 _____ C:\Windows\system32\TextInputMethodFormatter.dll
2021-02-24 09:49 - 2021-02-24 09:49 - 002254336 _____ C:\Windows\system32\dwmscene.dll
2021-02-24 09:49 - 2021-02-24 09:49 - 001333760 _____ C:\Windows\SysWOW64\TextInputMethodFormatter.dll
2021-02-24 09:49 - 2021-02-24 09:49 - 001314112 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2021-02-24 09:49 - 2021-02-24 09:49 - 001162240 _____ C:\Windows\system32\MBR2GPT.EXE
2021-02-24 09:49 - 2021-02-24 09:49 - 000729600 _____ (Microsoft Corporation) C:\Windows\system32\hhctrl.ocx
2021-02-24 09:49 - 2021-02-24 09:49 - 000643072 _____ C:\Windows\system32\WindowManagementAPI.dll
2021-02-24 09:49 - 2021-02-24 09:49 - 000595968 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl
2021-02-24 09:49 - 2021-02-24 09:49 - 000544768 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl
2021-02-24 09:49 - 2021-02-24 09:49 - 000455680 _____ C:\Windows\SysWOW64\WindowManagementAPI.dll
2021-02-24 09:49 - 2021-02-24 09:49 - 000446976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmsys.cpl
2021-02-24 09:49 - 2021-02-24 09:49 - 000422912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2021-02-24 09:49 - 2021-02-24 09:49 - 000374072 _____ C:\Windows\system32\vp9fs.dll
2021-02-24 09:49 - 2021-02-24 09:49 - 000330752 _____ C:\Windows\SysWOW64\ssdm.dll
2021-02-24 09:49 - 2021-02-24 09:49 - 000306688 _____ C:\Windows\system32\HeatCore.dll
2021-02-24 09:49 - 2021-02-24 09:49 - 000304128 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2021-02-24 09:49 - 2021-02-24 09:49 - 000238592 _____ (Microsoft Corporation) C:\Windows\system32\intl.cpl
2021-02-24 09:49 - 2021-02-24 09:49 - 000235520 _____ C:\Windows\SysWOW64\HeatCore.dll
2021-02-24 09:49 - 2021-02-24 09:49 - 000231232 _____ C:\Windows\system32\containerdevicemanagement.dll
2021-02-24 09:49 - 2021-02-24 09:49 - 000190976 _____ C:\Windows\system32\BthpanContextHandler.dll
2021-02-24 09:49 - 2021-02-24 09:49 - 000182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2021-02-24 09:49 - 2021-02-24 09:49 - 000178688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\intl.cpl
2021-02-24 09:49 - 2021-02-24 09:49 - 000170496 _____ (Microsoft Corporation) C:\Windows\system32\VBICodec.ax
2021-02-24 09:49 - 2021-02-24 09:49 - 000152064 _____ C:\Windows\system32\EoAExperiences.exe
2021-02-24 09:49 - 2021-02-24 09:49 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2021-02-24 09:49 - 2021-02-24 09:49 - 000084992 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2021-02-24 09:49 - 2021-02-24 09:49 - 000067072 _____ C:\Windows\system32\BWContextHandler.dll
2021-02-24 09:49 - 2021-02-24 09:49 - 000010892 _____ C:\Windows\system32\DrtmAuthTxt.wim
2021-02-24 09:48 - 2021-02-24 09:48 - 000562688 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2021-02-24 09:48 - 2021-02-24 09:48 - 000455168 _____ C:\Windows\system32\ssdm.dll
2021-02-24 09:48 - 2021-02-24 09:48 - 000243200 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2021-02-24 09:48 - 2021-02-24 09:48 - 000165888 _____ C:\Windows\system32\DataStoreCacheDumpTool.exe
2021-02-24 09:48 - 2021-02-24 09:48 - 000074240 _____ C:\Windows\system32\rdsxvmaudio.dll
2021-02-24 09:44 - 2021-02-25 01:13 - 000000000 ____D C:\Users\coffe\.ssh
2021-02-19 17:38 - 2021-02-19 17:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2021-02-13 22:12 - 2021-02-13 22:12 - 000047600 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
2021-02-13 22:12 - 2021-02-13 22:12 - 000047600 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
2021-02-13 22:12 - 2021-02-13 22:12 - 000047600 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
2021-02-13 22:12 - 2021-02-13 22:12 - 000044064 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-03-03 19:13 - 2020-11-19 02:30 - 000000000 ____D C:\Windows\system32\SleepStudy
2021-03-03 16:26 - 2020-12-24 14:17 - 000000000 ____D C:\Users\coffe\AppData\Local\PlaceholderTileLogoFolder
2021-03-03 16:21 - 2019-12-07 04:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-03-03 15:52 - 2020-12-24 14:17 - 000842014 _____ C:\Windows\system32\PerfStringBackup.INI
2021-03-03 15:52 - 2019-12-07 04:13 - 000000000 ____D C:\Windows\INF
2021-03-03 15:50 - 2019-12-07 04:03 - 000032768 _____ C:\Windows\system32\config\ELAM
2021-03-03 15:45 - 2020-12-24 22:09 - 000008192 ___SH C:\DumpStack.log.tmp
2021-03-03 15:45 - 2020-12-24 14:17 - 000000000 __SHD C:\Users\coffe\IntelGraphicsProfiles
2021-03-03 15:45 - 2020-12-24 14:17 - 000000000 ___RD C:\Users\coffe\OneDrive
2021-03-03 15:45 - 2020-12-24 14:17 - 000000000 ____D C:\Intel
2021-03-03 15:45 - 2020-11-19 02:30 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2021-03-03 15:45 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\ServiceState
2021-03-03 15:43 - 2019-12-07 04:03 - 000524288 _____ C:\Windows\system32\config\BBI
2021-03-03 15:34 - 2020-12-24 19:57 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-03-03 15:34 - 2020-11-19 02:30 - 000586040 _____ C:\Windows\system32\FNTCACHE.DAT
2021-03-03 15:33 - 2020-12-29 15:50 - 000001570 ____H C:\Users\coffe\.bash_history
2021-03-03 15:20 - 2019-12-07 04:14 - 000000000 ___HD C:\Windows\ELAMBKUP
2021-03-03 15:19 - 2020-12-24 19:57 - 000000000 ____D C:\Users\coffe\AppData\LocalLow\Mozilla
2021-03-03 14:26 - 2020-12-24 19:43 - 000000445 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2021-03-03 09:44 - 2019-12-07 04:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2021-03-03 09:20 - 2019-12-07 04:03 - 000000000 ____D C:\Windows\CbsTemp
2021-03-03 09:19 - 2020-12-29 08:07 - 000000000 ____D C:\Program Files (x86)\MSBuild
2021-03-03 06:53 - 2020-12-26 02:25 - 000000000 ____D C:\Users\coffe\AppData\Roaming\Code
2021-03-03 06:06 - 2020-12-24 19:57 - 000001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2021-03-03 05:57 - 2019-12-07 04:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-03-03 05:57 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\AppReadiness
2021-03-03 04:26 - 2020-12-29 07:57 - 000000000 ____D C:\Users\coffe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.9
2021-03-03 04:07 - 2020-12-24 14:14 - 000000000 ____D C:\Users\coffe
2021-02-28 19:17 - 2020-12-24 14:15 - 000000000 ____D C:\Users\coffe\AppData\Local\Packages
2021-02-28 06:35 - 2020-12-29 11:56 - 000000000 ___HD C:\Users\coffe\.dbus-keyrings
2021-02-28 06:02 - 2020-12-29 11:56 - 000000000 ____D C:\Users\coffe\AppData\Roaming\inkscape
2021-02-27 14:44 - 2020-12-28 16:21 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-02-27 12:45 - 2020-12-24 16:18 - 000000000 ___RD C:\Users\coffe\Dropbox
2021-02-27 06:42 - 2020-11-19 02:32 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-02-26 12:57 - 2020-12-26 02:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio Code
2021-02-26 12:57 - 2020-12-26 02:25 - 000000000 ____D C:\Program Files\Microsoft VS Code
2021-02-25 19:04 - 2020-12-29 08:16 - 000000000 ____D C:\Users\coffe\AppData\LocalLow\Adobe
2021-02-25 14:39 - 2020-12-24 14:17 - 000003380 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1509965680-1495129612-1392153016-1001
2021-02-25 14:39 - 2020-12-24 14:14 - 000002367 _____ C:\Users\coffe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-02-25 01:50 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\LiveKernelReports
2021-02-24 21:42 - 2020-12-24 15:37 - 000000000 ____D C:\Users\coffe\AppData\Local\D3DSCache
2021-02-24 21:41 - 2020-12-24 20:11 - 000000000 ___SD C:\Windows\system32\lxss
2021-02-24 21:41 - 2019-12-07 04:52 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2021-02-24 21:41 - 2019-12-07 04:52 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ___SD C:\Windows\SysWOW64\F12
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ___SD C:\Windows\SysWOW64\DiagSvcs
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ___SD C:\Windows\system32\UNP
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ___SD C:\Windows\system32\F12
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ___SD C:\Windows\system32\DiagSvcs
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ___RD C:\Windows\PrintDialog
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\setup
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\PerceptionSimulation
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\oobe
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\Keywords
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\Com
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\AdvancedInstallers
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SystemResources
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\Sysprep
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\setup
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\PerceptionSimulation
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\oobe
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\Keywords
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\es-MX
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\Dism
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\Com
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\AdvancedInstallers
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\ShellExperiences
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\ShellComponents
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\Provisioning
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\PolicyDefinitions
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\IME
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\bcastdvr
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Program Files\Windows Defender
2021-02-24 21:41 - 2019-12-07 04:14 - 000000000 ____D C:\Program Files\Common Files\System
2021-02-24 21:41 - 2019-12-07 04:03 - 000000000 ____D C:\Windows\servicing
2021-02-24 19:42 - 2020-12-24 19:50 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-02-24 14:39 - 2020-12-24 16:29 - 130141752 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2021-02-24 09:52 - 2020-12-29 15:24 - 000000000 ____D C:\Users\coffe\AppData\Local\SquirrelTemp
2021-02-24 09:49 - 2020-11-19 02:30 - 000000000 ____D C:\Windows\system32\Drivers\wd
2021-02-24 09:48 - 2020-11-19 02:32 - 002877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2021-02-24 09:45 - 2020-12-28 16:21 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2021-02-24 09:43 - 2020-12-24 19:53 - 000000000 ___HD C:\$WinREAgent
2021-02-24 09:41 - 2020-12-26 02:34 - 000000000 ____D C:\Users\coffe\Projects
2021-02-24 09:41 - 2020-12-24 16:29 - 000000000 ____D C:\Windows\system32\MRT
2021-02-19 17:41 - 2020-12-24 16:15 - 000000938 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2021-02-19 17:41 - 2020-12-24 16:15 - 000000934 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2021-02-19 17:39 - 2020-12-24 16:15 - 000000000 ____D C:\Program Files (x86)\Dropbox
2021-02-19 17:37 - 2020-12-24 19:50 - 000003418 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2021-02-19 17:37 - 2020-12-24 19:50 - 000003294 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2021-02-19 17:36 - 2020-12-24 19:55 - 000799104 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2021-02-19 17:36 - 2020-12-24 16:15 - 000003998 _____ C:\Windows\system32\Tasks\DropboxUpdateTaskMachineUA
2021-02-19 17:36 - 2020-12-24 16:15 - 000003766 _____ C:\Windows\system32\Tasks\DropboxUpdateTaskMachineCore
2021-02-19 17:36 - 2020-11-19 02:32 - 000003480 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-02-19 17:36 - 2020-11-19 02:32 - 000003356 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
==================== Files in the root of some directories ========
2021-03-03 09:36 - 2021-03-03 09:36 - 000000604 ____H () C:\Program Files (x86)\STLL Notifier
2021-03-03 09:45 - 2021-03-03 09:45 - 000000604 ____H () C:\Program Files (x86)\_Z2
2021-03-03 09:44 - 2021-03-03 09:44 - 000230176 _____ () C:\Users\coffe\AppData\Roaming\AvidLicenseControl_Install.log
2021-02-28 19:45 - 2021-02-28 19:45 - 000000780 _____ () C:\Users\coffe\AppData\Local\recently-used.xbel
2020-12-26 02:27 - 2020-12-26 02:27 - 000007602 _____ () C:\Users\coffe\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Addition.txt
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-02-2021
Ran by [removed] (03-03-2021 19:19:10)
Running from C:\Users\[removed]\Desktop\mal
Windows 10 Home Version 20H2 19042.804 (X64) (2020-12-25 03:11:23)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1509965680-1495129612-1392153016-500 - Administrator - Disabled)
coffe (S-1-5-21-1509965680-1495129612-1392153016-1001 - Administrator - Enabled) => C:\Users\coffe
DefaultAccount (S-1-5-21-1509965680-1495129612-1392153016-503 - Limited - Disabled)
Guest (S-1-5-21-1509965680-1495129612-1392153016-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-1509965680-1495129612-1392153016-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Bitdefender Antivirus Free Antimalware (Enabled - Up to date) {EA21BCE8-A461-99C3-3A0D-4C964E75494E}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Active Directory Authentication Library for SQL Server (HKLM\…\{6BF11ECE-3CE8-4FBA-991A-1F55AA6BE5BF}) (Version: 15.0.1300.359 - Microsoft Corporation) Hidden
Adobe Acrobat Reader DC (HKLM-x32\…\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 21.001.20142 - Adobe Systems Incorporated)
Avid License Control (HKLM-x32\…\{F187D064-F101-4E95-8D05-4027809AA0F8}) (Version: 3.0.0 - Avid Technology, Inc.)
Bitdefender Agent (HKLM\…\Bitdefender Agent) (Version: 25.0.1.177 - Bitdefender)
Bitdefender Antivirus Free (HKLM\…\{1FCCF41D-5F00-4FE2-9653-162D0486C8B4}) (Version: 1.0.21.225 - Bitdefender)
ClickOnce Bootstrapper Package for Microsoft .NET Framework (HKLM-x32\…\{0243F145-076D-423A-8F77-218DC8840261}) (Version: 4.8.04119 - Microsoft Corporation) Hidden
DiagnosticsHub_CollectionService (HKLM\…\{1F3C3AAC-9F7A-47DA-A082-0ACE770041BE}) (Version: 16.1.28901 - Microsoft Corporation) Hidden
Dropbox (HKLM-x32\…\Dropbox) (Version: 116.4.368 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\…\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.415.1 - Dropbox, Inc.) Hidden
Frescobaldi 3.1.3 (HKLM-x32\…\Frescobaldi_is1) (Version: 3.1.3 - Wilbert Berendsen)
GIMP 2.10.22 (HKLM\…\GIMP-2_is1) (Version: 2.10.22 - The GIMP Team)
Git version 2.30.0 (HKLM\…\Git_is1) (Version: 2.30.0 - The Git Development Community)
GnuCash 4.2 (HKLM-x32\…\GnuCash_is1) (Version: - GnuCash Development Team)
Google Chrome (HKLM-x32\…\Google Chrome) (Version: 88.0.4324.190 - Google LLC)
icecap_collection_neutral (HKLM-x32\…\{7C703135-98AC-4EB9-86C0-0C3169C99649}) (Version: 16.8.30509 - Microsoft Corporation) Hidden
icecap_collection_x64 (HKLM\…\{7C914878-C64B-4CA6-8E41-91308877A586}) (Version: 16.8.30509 - Microsoft Corporation) Hidden
icecap_collectionresources (HKLM-x32\…\{CDD0EC5B-EBEE-4822-B994-78AD30D90874}) (Version: 16.8.30607 - Microsoft Corporation) Hidden
icecap_collectionresourcesx64 (HKLM-x32\…\{8A64881A-8735-4C75-91BE-BCE0A45BCDB0}) (Version: 16.8.30530 - Microsoft Corporation) Hidden
IIS 10.0 Express (HKLM\…\{0307C98E-AE82-4A4F-A950-A72FBD805338}) (Version: 10.0.04403 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\…\{08274920-8908-45c2-9258-8ad67ff77b09}.sdb) (Version: - ) Hidden
IIS Express Application Compatibility Database for x86 (HKLM\…\{ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb) (Version: - ) Hidden
Inkscape (HKLM\…\{776C087E-B714-4153-9414-79592EC61B4A}) (Version: 1.0.1 - Inkscape)
IntelliJ IDEA Community Edition 2020.3 (HKLM-x32\…\IntelliJ IDEA Community Edition 2020.3) (Version: 203.5981.155 - JetBrains s.r.o.)
IntelliTraceProfilerProxy (HKLM-x32\…\{7D94CF67-6666-4111-B027-D7AB7F189F70}) (Version: 15.0.18198.01 - Microsoft Corporation) Hidden
Java(TM) SE Development Kit 11.0.9 (64-bit) (HKLM\…\{AE945515-AAE4-56A9-91AA-9300C0D3DC87}) (Version: 11.0.9.0 - Oracle Corporation)
LibreOffice 6.4 Help Pack (English (United States)) (HKLM\…\{B70CB577-081B-4EC9-9F7B-2361A7CE7F71}) (Version: 6.4.7.2 - The Document Foundation)
LibreOffice 6.4.7.2 (HKLM\…\{19B8BD60-CB65-49E8-8CDC-4596799C4DA7}) (Version: 6.4.7.2 - The Document Foundation)
LilyPond (HKLM-x32\…\LilyPond) (Version: - )
Maxx Audio Installer (x64) (HKLM\…\{307032B2-6AF2-46D7-B933-62438DEB2B9A}) (Version: 2.7.9669.4 - Waves Audio Ltd.) Hidden
Microsoft .NET SDK 5.0.101 (x64) from Visual Studio (HKLM\…\{D623A466-38A7-4E39-9D69-7B07951D3406}) (Version: 5.1.120.60105 - Microsoft Corporation)
Microsoft Azure Authoring Tools - v2.9.6 (HKLM\…\{EDADFA19-7F96-4075-A4AB-2209910626C5}) (Version: 2.9.8899.26 - Microsoft Corporation)
Microsoft Azure Compute Emulator - v2.9.6 (HKLM\…\Microsoft Azure Compute Emulator - v2.9.6) (Version: 2.9.8899.26 - Microsoft Corporation)
Microsoft Azure Libraries for .NET – v2.9 (HKLM\…\{C5C91AA6-3E83-430E-8B7A-6B790083F28D}) (Version: 3.0.0127.060 - Microsoft Corporation)
Microsoft Azure Storage Emulator - v5.10 (HKLM-x32\…\Microsoft Azure Storage Emulator - v5.10) (Version: 5.10.19227.2113 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\…\Microsoft Edge) (Version: 88.0.705.81 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\…\Microsoft Edge Update) (Version: 1.3.141.59 - )
Microsoft ODBC Driver 17 for SQL Server (HKLM\…\{8D98AC2C-FC5C-440D-A2D3-6C9655F957D8}) (Version: 17.2.0.1 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1509965680-1495129612-1392153016-1001\…\OneDriveSetup.exe) (Version: 21.016.0124.0003 - Microsoft Corporation)
Microsoft SQL Server 2016 LocalDB (HKLM\…\{9097BF1A-13A0-4A4A-A1F8-473E2A669863}) (Version: 13.1.4001.0 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2019 CTP2.2 (HKLM\…\{8D7CE3B0-5379-46FE-9F4B-A65D9F4CC1F1}) (Version: 15.0.1200.24 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2019 CTP2.2 (HKLM-x32\…\{725CC962-98BD-42C7-87D8-51C680FB1779}) (Version: 15.0.1200.24 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\…\{99FAF70F-9B61-4AB0-9EC0-B31F98FFDC4A}) (Version: 2.75.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\…\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\…\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\…\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\…\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\…\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.28.29325 (HKLM-x32\…\{33628a12-6787-4b9f-95a1-92449f69fae0}) (Version: 14.28.29325.2 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29334 (HKLM-x32\…\{b2d0f752-adc5-496e-8f70-8669de01f746}) (Version: 14.28.29334.0 - Microsoft Corporation)
Microsoft Visual Studio Code (HKLM\…\{EA457B21-F73E-494C-ACAB-524FDE069978}_is1) (Version: 1.53.2 - Microsoft Corporation)
Microsoft Visual Studio Installer (HKLM\…\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 2.8.3074.1022 - Microsoft Corporation)
Microsoft Web Deploy 4.0 (HKLM\…\{2EC26D34-FB67-4C58-AC20-235697551222}) (Version: 10.0.3802 - Microsoft Corporation)
MongoDB 4.4.2 2008R2Plus SSL (64 bit) (HKLM\…\{14A7B678-339A-4ACE-B479-91F9D11AB352}) (Version: 4.4.2 - MongoDB Inc.)
MongoDB Compass (HKU\S-1-5-21-1509965680-1495129612-1392153016-1001\…\MongoDBCompass) (Version: 1.24.6 - MongoDB Inc)
Mozilla Maintenance Service (HKLM\…\MozillaMaintenanceService) (Version: 78.6.0 - Mozilla)
Mozilla Thunderbird 78.8.0 (x86 en-US) (HKLM-x32\…\Mozilla Thunderbird 78.8.0 (x86 en-US)) (Version: 78.8.0 - Mozilla)
MySQL Connector C++ 8.0 (HKLM\…\{BD5809AD-DCBB-4C07-8AB8-E23571E9AE2F}) (Version: 8.0.22 - Oracle Corporation)
MySQL Connector J (HKLM-x32\…\{74385B8B-D685-4A5E-8E8F-1B37C800E75B}) (Version: 8.0.22 - Oracle Corporation)
MySQL Connector Net 8.0.22 (HKLM-x32\…\{F7CB561A-E6E8-4B53-887B-DE2215BCA4C4}) (Version: 8.0.22 - Oracle)
MySQL Connector Python v8.0.22 (HKLM\…\{D00820D0-8600-45E8-BB5C-94D8ADF5D196}) (Version: 8.0.22 - Oracle)
MySQL Connector/ODBC 8.0 (HKLM\…\{93726A76-F841-4376-8E3F-1444990DF014}) (Version: 8.0.22 - Oracle Corporation)
MySQL Documents 8.0 (HKLM-x32\…\{BAF3789D-0809-42CE-A3C5-24366A40A5E5}) (Version: 8.0.22 - Oracle Corporation)
MySQL Examples and Samples 8.0 (HKLM-x32\…\{F849023E-BC96-472F-9F6C-ED7E1A88EBAD}) (Version: 8.0.22 - Oracle Corporation)
MySQL for Visual Studio 1.2.9 (HKLM-x32\…\{3BB59421-6F62-406C-B79A-AD9B8DD14EF1}) (Version: 1.2.9 - Oracle)
MySQL Installer for Windows - Community (HKLM-x32\…\{6779C6D9-6405-4F84-837B-B30BF9471570}) (Version: 1.4.36.0 - Oracle Corporation)
MySQL Router 8.0 (HKLM\…\{1D611233-8051-45FD-A6DF-C384D64CC114}) (Version: 8.0.22 - Oracle Corporation)
MySQL Server 8.0 (HKLM\…\{3476AEF8-4E53-40FE-90C4-5179DF0DFA3F}) (Version: 8.0.22 - Oracle Corporation)
MySQL Shell 8.0.22 (HKLM\…\{D16597A4-4CE5-47A4-8415-B8E8DBD75FA9}) (Version: 8.0.22 - Oracle and/or its affiliates)
MySQL Workbench 8.0 CE (HKLM\…\{90AB709E-8C47-4765-B654-5005B3739938}) (Version: 8.0.22 - Oracle Corporation)
NVM for Windows 1.1.7 (HKLM\…\40078385-F676-4C61-9A9C-F9028599D6D3_is1) (Version: 1.1.7 - Ecor Ventures LLC)
Postman-win64-8.0.6 (HKU\S-1-5-21-1509965680-1495129612-1392153016-1001\…\Postman) (Version: 8.0.6 - Postman)
Python 3.7.8 (64-bit) (HKU\S-1-5-21-1509965680-1495129612-1392153016-1001\…\{886f7e19-ca0e-4f00-9cb5-14f6506fea86}) (Version: 3.7.8150.0 - Python Software Foundation)
Python 3.7.8 Core Interpreter (64-bit symbols) (HKLM\…\{D5C2F5B5-AE03-4897-B7EB-88EDEB52E55F}) (Version: 3.7.8150.0 - Python Software Foundation) Hidden
Python 3.7.8 Core Interpreter (64-bit) (HKLM\…\{8DE1D24F-C0EA-42D5-87D0-7F3071932A15}) (Version: 3.7.8150.0 - Python Software Foundation) Hidden
Python 3.7.8 Development Libraries (64-bit) (HKLM\…\{BB556C96-3906-453B-B068-E17C1F13C814}) (Version: 3.7.8150.0 - Python Software Foundation) Hidden
Python 3.7.8 Documentation (64-bit) (HKLM\…\{A90E9216-6C61-4A2B-A18E-85EF9DF6A2C0}) (Version: 3.7.8150.0 - Python Software Foundation) Hidden
Python 3.7.8 Executables (64-bit symbols) (HKLM\…\{FAF0840F-75F4-4331-819A-C5B88251F402}) (Version: 3.7.8150.0 - Python Software Foundation) Hidden
Python 3.7.8 Executables (64-bit) (HKLM\…\{0EEFE4AC-ED52-4F6F-A726-A9030991B75D}) (Version: 3.7.8150.0 - Python Software Foundation) Hidden
Python 3.7.8 pip Bootstrap (64-bit) (HKLM\…\{AD820C10-4106-47D5-B6BD-4B3CEA93E429}) (Version: 3.7.8150.0 - Python Software Foundation) Hidden
Python 3.7.8 Standard Library (64-bit symbols) (HKLM\…\{F7B2245C-D3F3-4CCC-A558-702AB2069D57}) (Version: 3.7.8150.0 - Python Software Foundation) Hidden
Python 3.7.8 Standard Library (64-bit) (HKLM\…\{68A406B0-F664-4882-8035-4015C78DDC93}) (Version: 3.7.8150.0 - Python Software Foundation) Hidden
Python 3.7.8 Tcl/Tk Support (64-bit symbols) (HKLM\…\{833EA197-6356-48B6-9E90-AE2D2CCC5479}) (Version: 3.7.8150.0 - Python Software Foundation) Hidden
Python 3.7.8 Tcl/Tk Support (64-bit) (HKLM\…\{223ADA3A-F506-428A-9244-C3EA445AD42A}) (Version: 3.7.8150.0 - Python Software Foundation) Hidden
Python 3.7.8 Test Suite (64-bit symbols) (HKLM\…\{F0759285-644B-4AAF-BB09-CA4592C12B89}) (Version: 3.7.8150.0 - Python Software Foundation) Hidden
Python 3.7.8 Test Suite (64-bit) (HKLM\…\{FE029834-AD26-45F1-B622-8DE59A8B1048}) (Version: 3.7.8150.0 - Python Software Foundation) Hidden
Python 3.7.8 Utility Scripts (64-bit) (HKLM\…\{3BDFA237-E962-435F-A556-A2BE2EE1464C}) (Version: 3.7.8150.0 - Python Software Foundation) Hidden
Python 3.9.1 (64-bit) (HKU\S-1-5-21-1509965680-1495129612-1392153016-1001\…\{b2be55ad-3177-42aa-a6c2-53004684e4ea}) (Version: 3.9.1150.0 - Python Software Foundation)
Python 3.9.1 Add to Path (64-bit) (HKLM\…\{5AD5ED9C-14D1-4CFA-B4B1-A02CE8916D9F}) (Version: 3.9.1150.0 - Python Software Foundation) Hidden
Python 3.9.1 Core Interpreter (64-bit) (HKLM\…\{1C00F581-D5BF-491E-B1BB-72AA3A2250E5}) (Version: 3.9.1150.0 - Python Software Foundation) Hidden
Python 3.9.1 Development Libraries (64-bit) (HKLM\…\{27AD952D-DD9D-4AAC-B486-8AA601BFA064}) (Version: 3.9.1150.0 - Python Software Foundation) Hidden
Python 3.9.1 Documentation (64-bit) (HKLM\…\{5CB3AEED-BB03-47E2-BFF1-0CA58C236895}) (Version: 3.9.1150.0 - Python Software Foundation) Hidden
Python 3.9.1 Executables (64-bit) (HKLM\…\{71A9F41D-A865-46D4-A650-B210150DEF2A}) (Version: 3.9.1150.0 - Python Software Foundation) Hidden
Python 3.9.1 pip Bootstrap (64-bit) (HKLM\…\{EF2B9385-6453-4702-9584-21BA8288D157}) (Version: 3.9.1150.0 - Python Software Foundation) Hidden
Python 3.9.1 Standard Library (64-bit) (HKLM\…\{5DD5C023-790B-4F1B-9B1B-8D1BC48F3057}) (Version: 3.9.1150.0 - Python Software Foundation) Hidden
Python 3.9.1 Tcl/Tk Support (64-bit) (HKLM\…\{414B5372-24FD-4302-8090-B9CE5564A6DD}) (Version: 3.9.1150.0 - Python Software Foundation) Hidden
Python 3.9.1 Test Suite (64-bit) (HKLM\…\{A7EC4DEB-8ABD-471D-BB5B-E579EBC9B043}) (Version: 3.9.1150.0 - Python Software Foundation) Hidden
Python 3.9.1 Utility Scripts (64-bit) (HKLM\…\{47A9647A-A576-4751-9C37-D32EB70285A3}) (Version: 3.9.1150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\…\{FFC95928-6A14-4FB3-8D73-7A62382F66AC}) (Version: 3.9.7280.0 - Python Software Foundation)
Realtek High Definition Audio Driver (HKLM-x32\…\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8622 - Realtek Semiconductor Corp.)
Scribus 1.5.6.1 (64bit) (HKLM\…\Scribus 1.5.6.1) (Version: 1.5.6.1 - The Scribus Team)
Sibelius 5 (HKLM-x32\…\{C23B8C30-E05E-4CB5-8188-F27CC3B2DD3E}) (Version: 5.2.0 - Sibelius Software)
Sibelius 7 OpenType Fonts (HKLM-x32\…\{623C2BD8-1B28-4F98-B578-E9D139827269}) (Version: 7.1.3 - Avid)
Sibelius 7.1.3.77 (HKLM\…\Sibelius 7.0.0.23_is1) (Version: 7.1.3.77 - Avid)
Stardock Fences 3 (HKLM-x32\…\Stardock Fences 3) (Version: 3.09 - Stardock Software, Inc.)
Transcribe! 8.80.1 (HKLM-x32\…\com.seventhstring.Transcribe_is1) (Version: 8.80 - Seventh String Software)
TypeScript SDK (HKLM-x32\…\{873B2737-D587-4FC9-993D-086DBF507461}) (Version: 4.0.3.0 - Microsoft Corporation) Hidden
Update for (KB2504637) (HKLM-x32\…\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
vcpp_crt.redist.clickonce (HKLM-x32\…\{10D9FDCA-0D16-4C80-91DD-EDDA62A0F29D}) (Version: 14.28.29334 - Microsoft Corporation) Hidden
Visual Studio Community 2019 (HKLM-x32\…\5b8441b1) (Version: 16.8.30804.86 - Microsoft Corporation)
VS Script Debugging Common (HKLM\…\{A4272808-82F5-410F-A5F9-1BF6F63F6B9A}) (Version: 16.0.102.0 - Microsoft Corporation) Hidden
vs_clickoncebootstrappermsi (HKLM-x32\…\{78696386-A4B6-4F69-B558-2667CD3A579D}) (Version: 16.8.30530 - Microsoft Corporation) Hidden
vs_clickoncebootstrappermsires (HKLM-x32\…\{271F1F42-B547-4498-825F-590DBB1774F7}) (Version: 16.0.28329 - Microsoft Corporation) Hidden
vs_clickoncesigntoolmsi (HKLM-x32\…\{30D97A69-3C0F-4552-9A72-60E591B210C7}) (Version: 16.0.28329 - Microsoft Corporation) Hidden
vs_communitymsi (HKLM-x32\…\{DEB11EB7-B61A-4883-8CB0-99013A4873AB}) (Version: 16.8.30608 - Microsoft Corporation) Hidden
vs_communitymsires (HKLM-x32\…\{95E79BBC-97FD-4FEB-91B5-CC0231324812}) (Version: 16.0.28329 - Microsoft Corporation) Hidden
vs_devenvmsi (HKLM-x32\…\{AD0C92A4-1514-4BC1-A723-A272A8343924}) (Version: 16.0.28329 - Microsoft Corporation) Hidden
vs_filehandler_amd64 (HKLM-x32\…\{E9439DB7-BF01-4820-8CB1-80957150AB86}) (Version: 16.8.30530 - Microsoft Corporation) Hidden
vs_filehandler_x86 (HKLM-x32\…\{8990F1B6-F880-4E73-A2D9-7A611F4C38A1}) (Version: 16.8.30530 - Microsoft Corporation) Hidden
vs_FileTracker_Singleton (HKLM-x32\…\{3C4B2ED3-2296-4203-A420-AC042BE8484D}) (Version: 16.8.30509 - Microsoft Corporation) Hidden
vs_minshellinteropmsi (HKLM-x32\…\{27B16914-BC5D-4018-8074-071262A27F6D}) (Version: 16.2.28917 - Microsoft Corporation) Hidden
vs_minshellmsi (HKLM-x32\…\{08AF5DA9-F3BD-4B59-8D99-C47CC4D53CAD}) (Version: 16.8.30530 - Microsoft Corporation) Hidden
vs_minshellmsires (HKLM-x32\…\{DE982ACB-A44E-44A5-BEA5-F0816490312C}) (Version: 16.8.30530 - Microsoft Corporation) Hidden
vs_SQLClickOnceBootstrappermsi (HKLM-x32\…\{E1FD1D9D-0611-4DE5-826F-37FAC17706AC}) (Version: 16.8.30615 - Microsoft Corporation) Hidden
vs_tipsmsi (HKLM-x32\…\{E208E682-50EE-4F2F-9860-C91B906B8A03}) (Version: 16.0.28329 - Microsoft Corporation) Hidden
vs_vswebprotocolselectormsi (HKLM-x32\…\{BEEB2E56-91DB-4AFB-AC88-8E98B18DD889}) (Version: 16.8.30509 - Microsoft Corporation) Hidden
Windows Subsystem for Linux Update (HKLM\…\{18E72D39-392C-419D-9B86-C4C633B4CED9}) (Version: 4.19.128 - Microsoft Corporation)
Packages:
=========
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_122.3.838.0_x64__v10z8vjag6ke6 [2021-03-02] (HP Inc.)
Intel® Graphics Command Center -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3282.0_x64__8j3eq9eme6ctt [2021-02-24] (INTEL CORP) [Startup Task]
Microsoft Midi gm.dls -> C:\Program Files\WindowsApps\Microsoft.Midi.GmDls_1.0.1.0_neutral__8wekyb3d8bbwe [2021-02-28] (Microsoft Platform Extensions)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.9.1252.0_x64__8wekyb3d8bbwe [2021-02-24] (Microsoft Studios) [MS Ad]
PDF Document Scanner -> C:\Program Files\WindowsApps\61083ApeApps.PDFDocumentScanner_4.33.0.0_x64__d2yynfvsn01f4 [2021-02-28] (Ape Apps)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.153.608.0_x86__zpdnekdrzrea0 [2021-02-24] (Spotify AB) [Startup Task]
Ubuntu 20.04 LTS -> C:\Program Files\WindowsApps\CanonicalGroupLimited.Ubuntu20.04onWindows_2004.2021.222.0_x64__79rhkp1fndgsc [2021-02-24] (Canonical Group Limited)
Windows Terminal -> C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.6.10571.0_x64__8wekyb3d8bbwe [2021-03-02] (Microsoft Corporation) [Startup Task]
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1509965680-1495129612-1392153016-1001_Classes\CLSID\{a9872fee-5a55-4ecb-9b0f-b06fedcf14d1}\localserver32 -> C:\Program Files\Waves\MaxxAudio\MaxxAudioPro.exe (Waves Inc -> Waves Audio Ltd)
CustomCLSID: HKU\S-1-5-21-1509965680-1495129612-1392153016-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\coffe\Dropbox [2020-12-24 16:18]
ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [FencesShellExt] -> {1984DD45-52CF-49cd-AB77-18F378FEA264} => C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll [2018-05-25] (Stardock Corporation -> Stardock)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers4: [FencesShellExt] -> {1984DD45-52CF-49cd-AB77-18F378FEA264} => C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll [2018-05-25] (Stardock Corporation -> Stardock)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5: [FencesShellExt] -> {1984DD45-52CF-49cd-AB77-18F378FEA264} => C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll [2018-05-25] (Stardock Corporation -> Stardock)
ContextMenuHandlers6: [FencesShellExt] -> {1984DD45-52CF-49cd-AB77-18F378FEA264} => C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll [2018-05-25] (Stardock Corporation -> Stardock)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2020-09-23 15:07 - 2020-09-23 15:07 - 000553472 _____ (Google Inc.) [File not signed] C:\Program Files\MySQL\MySQL Server 8.0\bin\libprotobuf-lite.dll
2020-07-22 21:07 - 2020-07-22 21:07 - 003422720 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [File not signed] C:\Program Files\MySQL\MySQL Server 8.0\bin\libcrypto-1_1-x64.dll
2020-07-22 21:07 - 2020-07-22 21:07 - 000686592 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [File not signed] C:\Program Files\MySQL\MySQL Server 8.0\bin\libssl-1_1-x64.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\coffe\Desktop\bon-air-quilt:com.dropbox.attrs [54]
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
HKU\S-1-5-21-1509965680-1495129612-1392153016-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://my.proforma.com/
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-12-07 04:14 - 2019-12-07 04:12 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
2020-12-24 19:43 - 2021-03-03 14:26 - 000000445 _____ C:\Windows\system32\drivers\etc\hosts.ics
172.29.240.1 DESKTOP-6SK4I74.mshome.net # 2026 3 1 2 19 26 20 578
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\Microsoft VS Code\bin;C:\Program Files\dotnet\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\;C:\Program Files\Git\cmd;%NVM_HOME%;%NVM_SYMLINK%
HKU\S-1-5-21-1509965680-1495129612-1392153016-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\coffe\Dropbox\desktop backgrounds\tzZK4cw.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{C9893930-5F84-4DC4-B292-B542F643AEAB}] => (Allow) LPort=3306
FirewallRules: [{46BC2421-1AFE-44B7-949D-FD95B957D828}] => (Allow) LPort=33060
FirewallRules: [{95CD424F-1D21-49F0-86B5-DD28DF61C871}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{9904041B-A9C0-4622-99C3-983CC20E856B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{EDFAE9EA-0F6E-43B1-AE2A-CE5C697E096B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{0FF47A17-AE62-4358-B1DE-EFDA2C9D7DB4}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{A7877690-EF21-44B1-849A-8CE03E9BC830}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{9C9C11BD-46B4-4A7D-B763-B72D476AD4AB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.153.608.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8A8EA7BE-EBF8-4CF4-B116-0F2A53F368D7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.153.608.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{096F6BC9-A35D-4116-98AD-E2AF4B704D4C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.153.608.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{459A3165-298E-479D-A71C-544758038EC1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.153.608.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{CD958349-6B16-415E-A1CB-8E8BB9BDA17E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.153.608.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{664A8DA7-3CFE-48A4-8A7D-2FF77AFD9F0C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.153.608.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{CAD438D8-DFDB-47BE-AA8B-020B251A04C5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.153.608.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{57240342-58C7-4086-B48E-BE216F23BEE6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.153.608.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{9987383D-715E-4D01-902A-2C2C4E036763}C:\program files\java\jdk-11.0.9\bin\java.exe] => (Allow) C:\program files\java\jdk-11.0.9\bin\java.exe
FirewallRules: [UDP Query User{74DD619F-E7B1-4C10-87A0-316B5B198847}C:\program files\java\jdk-11.0.9\bin\java.exe] => (Allow) C:\program files\java\jdk-11.0.9\bin\java.exe
FirewallRules: [{ECB4D291-3B92-4097-867A-B8B3A5831C93}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{7B0C59CE-B631-4B68-AE39-E9640F0CAAAA}C:\users\coffe\appdata\roaming\nvm\v12.21.0\node.exe] => (Allow) C:\users\coffe\appdata\roaming\nvm\v12.21.0\node.exe (OpenJS Foundation -> Node.js)
FirewallRules: [UDP Query User{0750B881-925F-40D7-92F5-65C11F33FFBA}C:\users\coffe\appdata\roaming\nvm\v12.21.0\node.exe] => (Allow) C:\users\coffe\appdata\roaming\nvm\v12.21.0\node.exe (OpenJS Foundation -> Node.js)
FirewallRules: [TCP Query User{49439D1D-7513-4B6C-81F8-23772D0BE0FC}C:\program files\microsoft vs code\code.exe] => (Allow) C:\program files\microsoft vs code\code.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{1945E310-BF9B-4C6E-BDA4-689466B8C358}C:\program files\microsoft vs code\code.exe] => (Allow) C:\program files\microsoft vs code\code.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Restore Points =========================
01-03-2021 08:59:56 Windows Modules Installer
03-03-2021 03:58:04 Removed Python 2.7.18 (64-bit)
==================== Faulty Device Manager Devices ============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: ========================
Application errors:
==================
Error: (03/03/2021 03:38:27 PM) (Source: ssh-agent) (EventID: 0) (User: DESKTOP-6SK4I74)
Description: Event-ID 0
Error: (03/03/2021 03:20:23 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Error while updating status to SECURITY_PRODUCT_STATE_SNOOZED.
Error: (03/03/2021 09:12:01 AM) (Source: MsiInstaller) (EventID: 10005) (User: DESKTOP-6SK4I74)
Description: Product: Sibelius 5 – The Microsoft .NET Framework must be installed for Sibelius 5 to run correctly.
Error: (02/28/2021 07:39:10 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 13) (User: DESKTOP-6SK4I74)
Description: C:\Users\coffe\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalCacheMicrosoft.MicrosoftOfficeHub_8wekyb3d8bbwe-2147024809
Error: (02/28/2021 07:20:21 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 13) (User: DESKTOP-6SK4I74)
Description: C:\Users\coffe\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalCacheMicrosoft.MicrosoftOfficeHub_8wekyb3d8bbwe-2147024809
Error: (02/28/2021 07:05:20 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 13) (User: DESKTOP-6SK4I74)
Description: C:\Users\coffe\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalCacheMicrosoft.MicrosoftOfficeHub_8wekyb3d8bbwe-2147024809
Error: (02/28/2021 06:50:21 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 13) (User: DESKTOP-6SK4I74)
Description: C:\Users\coffe\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\LocalCacheMicrosoft.MicrosoftOfficeHub_8wekyb3d8bbwe-2147024809
Error: (02/24/2021 09:41:28 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, A system shutdown is in progress.
.
System errors:
=============
Error: (03/03/2021 03:43:39 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-6SK4I74)
Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout.
Error: (03/03/2021 03:43:39 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-6SK4I74)
Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout.
Error: (03/03/2021 03:43:39 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-6SK4I74)
Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout.
Error: (03/03/2021 03:43:39 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-6SK4I74)
Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout.
Error: (03/03/2021 03:43:39 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-6SK4I74)
Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout.
Error: (03/03/2021 03:43:39 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-6SK4I74)
Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout.
Error: (03/03/2021 02:52:34 PM) (Source: disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR1.
Error: (03/03/2021 09:42:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The ListOpenedFileDrv service failed to start due to the following error:
Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Windows Defender:
================
Date: 2021-03-02 18:02:41
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2021-03-01 23:45:33
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2021-02-28 17:10:58
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2021-02-27 10:10:25
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2021-02-26 11:28:38
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
CodeIntegrity:
===============
Date: 2021-03-03 15:48:22
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender Antivirus Free\bdamsi\265133313309600000\antimalware_provider64.dll that did not meet the Microsoft signing level requirements.
Date: 2021-03-03 15:47:30
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender Antivirus Free\bdamsi\265133313309600000\antimalware_provider64.dll that did not meet the Windows signing level requirements.
==================== Memory info ===========================
BIOS: Dell Inc. 1.2.3 05/15/2019
Motherboard: Dell Inc. 0D65FD
Processor: Intel(R) Core(TM) i7-8550U CPU @ 1.80GHz
Percentage of memory in use: 28%
Total physical RAM: 24473.83 MB
Available physical RAM: 17517.92 MB
Total Virtual: 28057.83 MB
Available Virtual: 20607.91 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:435.47 GB) (Free:348.58 GB) NTFS
\\?\Volume{8ab7bcc5-57f1-4b22-829c-278ebdcc864e}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
\\?\Volume{8affc105-0883-43d8-b577-255c9f177f5c}\ () (Fixed) (Total:0.48 GB) (Free:0.28 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)
Partition: GPT.
==================== End of Addition.txt =======================