What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

running slow, not-respondings, and other wonkinesses

14 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1

Greetings once again

 

I've been using  a refurb Dell 5579, win 10 home 19042.867, 8GB, Intel(R) Core(TM) i5-8250U CPU @ 1.60GHz   1.80 GHz

for a year or more.

 

Currently having symptoms of I don't know what.
Somewhat slow in responding. 
Programs that go non-responsive: Thunderbird, Free Cell, Firefox
Slow-typing-appearance: Facebook.

Problems if I have a dozen browser windows open (well….)
This n that.

 

 

 

TIA

denno


Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14-04-2021
Ran by [removed] (administrator) on MARLOWE (Dell Inc. Inspiron 5579) (16-04-2021 11:06:52)
Running from C:\Users\[removed]\Downloads
[removed] Platform: Windows 10 Home Version 20H2 19042.867 (X64) Language: English (United States)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\soffice.bin
(Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\soffice.exe
(Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\swriter.exe
(Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe
(Dell Inc -> Dell Products, LP.) C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe
(Dell Inc.) [File not signed] C:\Program Files\Dell\QuickSet\quickset.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\dptf_helper.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_ffc75848a6342fdf\jhi_service.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_3974eac8be1c963f\igfxCUIService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_3974eac8be1c963f\igfxEM.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_3974eac8be1c963f\IntelCpHDCPSvc.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_3974eac8be1c963f\IntelCpHeciSvc.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_7ed3bacbb0a8cc67\RstMwService.exe
(Intel(R) Software Development Products -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\sgx_psw.inf_amd64_62a0e7f4cd3e6c99\aesm_service.exe
(Intel(R) Trust Services -> Intel(R) Corporation) C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_75ffca5eec865b4b\lib\SocketHeciServer.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\miekro s dallallio\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_2.2103.17603.0_x64__8wekyb3d8bbwe\Cortana.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12101.1001.14.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxApp_48.76.8001.0_x64__8wekyb3d8bbwe\XboxApp.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.7-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.7-0\NisSrv.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <7>
(Pro Softnet Corporation -> ) C:\Program Files (x86)\IDriveWindows\IDrivePlugin.exe
(Pro Softnet Corporation -> Pro Softnet Corporation) C:\Program Files (x86)\IDriveWindows\IDriveE Service.exe
(Pro Softnet Corporation -> Prosoftnet) C:\Program Files (x86)\IDriveWindows\id_bglaunch.exe
(Pro Softnet Corporation -> Prosoftnet) C:\Program Files (x86)\IDriveWindows\id_service.exe
(Pro Softnet Corporation -> Prosoftnet) C:\Program Files (x86)\IDriveWindows\id_tray.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <2>
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Rivet Networks LLC -> Rivet Networks LLC) C:\Program Files\Rivet Networks\SmartByte\RAPS.exe
(Rivet Networks LLC -> Rivet Networks) C:\Program Files\Rivet Networks\SmartByte\SmartByteAnalyticsService.exe
(Rivet Networks LLC -> Rivet Networks) C:\Program Files\Rivet Networks\SmartByte\SmartByteNetworkService.exe
(Rivet Networks LLC -> Rivet Networks, LLC.) C:\Program Files\Rivet Networks\SmartByte\RAPSService.exe
(Waves Inc -> Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe
(Waves Inc -> Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\…\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [3910656 2017-05-03] (Dell Inc.) [File not signed]
HKLM\…\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9228776 2017-06-16] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\…\Run: [RtHDVBg_PushButton] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1489896 2017-06-16] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\…\Run: [DellMobileConnectWelcome] => C:\Program Files\Dell\DellMobileConnectDrivers\DellMobileConnectWelcome.exe [127480 2017-11-06] (SCREENOVATE TECHNOLOGIES LTD. -> Screenovate Technologies Ltd.)
HKLM\…\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320056 2019-12-10] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\…\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\…\Run: [WavesSvc] => C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [1189744 2017-06-27] (Waves Inc -> Waves Audio Ltd.)
HKLM\…\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3942864 2016-10-13] (Logitech -> Logitech, Inc.)
HKLM-x32\…\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133728 2017-09-12] (Wondershare Technology Co.,Ltd -> Wondershare)
HKLM-x32\…\Run: [IDrive Background process] => C:\Program Files (x86)\IDriveWindows\id_bglaunch.exe [77416 2021-01-13] (Pro Softnet Corporation -> Prosoftnet)
HKLM-x32\…\Run: [IDrive Tray] => C:\Program Files (x86)\IDriveWindows\id_tray.exe [2005096 2021-01-13] (Pro Softnet Corporation -> Prosoftnet)
HKU\S-1-5-21-1725785269-512999547-2818236412-1001\…\Run: [A2B5869FD8B8006EE9E82A907CC275E910961241._service_run] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" –type=service /prefetch:8
HKLM\…\Windows x64\Print Processors\Canon MP490 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPD9Y.DLL [28672 2010-04-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\…\Windows x64\Print Processors\Canon MX490 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDCK.DLL [30208 2014-09-10] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\…\Print\Monitors\Canon BJ FAX Language Monitor MX490 series: C:\WINDOWS\system32\CNCALCK.DLL [303104 2014-09-22] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\…\Print\Monitors\Canon BJ Language Monitor MP490 series: C:\WINDOWS\system32\CNMLM9Y.DLL [336896 2010-04-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\…\Print\Monitors\Canon BJ Language Monitor MX490 series: C:\WINDOWS\system32\CNMLMCK.DLL [406528 2014-09-10] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\89.0.4389.128\Installer\chrmstp.exe [2021-04-14] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.61\Installer\chrmstp.exe" –configure-user-settings –verbose-logging –system-level

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0138504A-9F40-43CB-B0DB-A2D418D5DE3F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.7-0\MpCmdRun.exe [566368 2021-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {1AC2274F-0D9F-423C-932E-88558188BD44} - System32\Tasks\AdobeAAMUpdater-1.0-MARLOWE-miekro s dallallio => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-06-16] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {4A60B8EF-F7EB-470D-9CB3-8716F8374B9A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.7-0\MpCmdRun.exe [566368 2021-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5FA61388-3F95-4FDB-BDDE-8CA0284581A2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-05-20] (Google LLC -> Google LLC)
Task: {900939D9-B848-44FB-9F59-6B149677FC73} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {A6DB1F9A-6F98-4B06-824F-069A948F9F55} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-05-20] (Google LLC -> Google LLC)
Task: {BA49EBC6-DA42-410D-9A6F-840938387390} - System32\Tasks\SmartByte Telemetry => C:\Program Files\Rivet Networks\SmartByte\SmartByteTelemetry.exe [95072 2020-08-14] (Rivet Networks LLC -> DELL)
Task: {BCA65B9F-F75C-4EB4-9F17-9D3DB254A1AB} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [696816 2021-03-23] (Mozilla Corporation -> Mozilla Foundation)
Task: {C57449B1-EB23-44E9-8DC3-AF9BD35B051C} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\Dell\SupportAssist\sessionchecker.exe
Task: {C5A8D4E2-C779-468F-989E-AB363C0B4121} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.7-0\MpCmdRun.exe [566368 2021-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E4359FE8-197A-4DA9-B57A-AE7C243B6E10} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.7-0\MpCmdRun.exe [566368 2021-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E92F49CE-BD0D-4076-921C-999A1066CA40} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_75ffca5eec865b4b\lib\IntelPTTEKRecertification.exe [918288 2020-04-22] (Intel(R) Trust Services -> Intel(R) Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Intel PTT EK Recertification.job => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_75ffca5eec865b4b\lib\IntelPTTEKRecertification.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.172.1
Tcpip\..\Interfaces\{70e6058b-ebbf-43b9-9b1e-faaf0fdd7bbe}: [DhcpNameServer] 192.168.172.1
Tcpip\..\Interfaces\{7842eb40-396f-465d-bf77-cba426c0a7ce}: [DhcpNameServer] 192.168.172.1 [removed] 192.168.172.1
Tcpip\..\Interfaces\{8aebe390-acab-444d-869d-6b76825314f6}: [DhcpNameServer] 192.168.172.1 [removed] 192.168.172.1
Tcpip\..\Interfaces\{bcced098-4667-4aef-be7a-f22540ed9a05}: [DhcpNameServer] [removed]

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\miekro s dallallio\AppData\Local\Microsoft\Edge\User Data\Default [2021-04-14]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\miekro s dallallio\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-04-03]
Edge HKLM-x32\…\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

FireFox:
========
FF DefaultProfile: xy80m7xl.default
FF DefaultProfile: b1fl6hgv.default
FF ProfilePath: C:\Users\miekro s dallallio\AppData\Roaming\Mozilla\Firefox\Profiles\xy80m7xl.default [2020-05-13]
FF ProfilePath: C:\Users\miekro s dallallio\AppData\Roaming\Mozilla\Firefox\Profiles\dhzs86vy.default-release [2021-04-16]
FF Homepage: Mozilla\Firefox\Profiles\dhzs86vy.default-release -> hxxps://www.google.com/
FF Notifications: Mozilla\Firefox\Profiles\dhzs86vy.default-release -> hxxps://www.space.com
FF NewTabOverride: Mozilla\Firefox\Profiles\dhzs86vy.default-release -> Enabled: [removed]
FF NewTabOverride: Mozilla\Firefox\Profiles\dhzs86vy.default-release -> Enabled: [removed]
FF NewTabOverride: Mozilla\Firefox\Profiles\dhzs86vy.default-release -> Enabled: [removed]
FF NewTabOverride: Mozilla\Firefox\Profiles\dhzs86vy.default-release -> Enabled: [removed]
FF NewTabOverride: Mozilla\Firefox\Profiles\dhzs86vy.default-release -> Enabled: [removed]
FF NewTabOverride: Mozilla\Firefox\Profiles\dhzs86vy.default-release -> Enabled: [removed]
FF NewTabOverride: Mozilla\Firefox\Profiles\dhzs86vy.default-release -> Enabled: [removed]
FF Extension: (New Tab Override) - C:\Users\miekro s dallallio\AppData\Roaming\Mozilla\Firefox\Profiles\dhzs86vy.default-release\Extensions\[removed] [2021-01-18]
FF Extension: (Worldwide Radio) - C:\Users\miekro s dallallio\AppData\Roaming\Mozilla\Firefox\Profiles\dhzs86vy.default-release\Extensions\[removed] [2021-03-01]
FF Extension: (Malwarebytes Browser Guard) - C:\Users\miekro s dallallio\AppData\Roaming\Mozilla\Firefox\Profiles\dhzs86vy.default-release\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2021-04-15]
FF ProfilePath: C:\Users\miekro s dallallio\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\b1fl6hgv.default [2020-11-17]
FF Extension: (Czech (CZ) Language Pack) - C:\Users\miekro s dallallio\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\b1fl6hgv.default\Extensions\[removed] [2020-11-16] [Legacy] [not signed]
FF Extension: (Deutsch (DE) Language Pack) - C:\Users\miekro s dallallio\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\b1fl6hgv.default\Extensions\[removed] [2020-11-16] [Legacy] [not signed]
FF Extension: (English (US) Language Pack) - C:\Users\miekro s dallallio\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\b1fl6hgv.default\Extensions\[removed] [2020-11-16] [Legacy] [not signed]
FF Extension: (Español (España) Language Pack) - C:\Users\miekro s dallallio\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\b1fl6hgv.default\Extensions\[removed] [2020-11-16] [Legacy] [not signed]
FF Extension: (Finnish Language Pack) - C:\Users\miekro s dallallio\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\b1fl6hgv.default\Extensions\[removed] [2020-11-16] [Legacy] [not signed]
FF Extension: (Français Language Pack) - C:\Users\miekro s dallallio\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\b1fl6hgv.default\Extensions\[removed] [2020-11-16] [Legacy] [not signed]
FF Extension: (Galego (España) Language Pack) - C:\Users\miekro s dallallio\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\b1fl6hgv.default\Extensions\[removed] [2020-11-16] [Legacy] [not signed]
FF Extension: (Hebrew (IL) Language Pack) - C:\Users\miekro s dallallio\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\b1fl6hgv.default\Extensions\[removed] [2020-11-16] [Legacy] [not signed]
FF Extension: (Magyar (HU) Language Pack) - C:\Users\miekro s dallallio\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\b1fl6hgv.default\Extensions\[removed] [2020-11-16] [Legacy] [not signed]
FF Extension: (Italiano (IT) Language Pack) - C:\Users\miekro s dallallio\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\b1fl6hgv.default\Extensions\[removed] [2020-11-16] [Legacy] [not signed]
FF Extension: (Japanese Language Pack) - C:\Users\miekro s dallallio\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\b1fl6hgv.default\Extensions\[removed] [2020-11-16] [Legacy] [not signed]
FF Extension: (Korean (KR) Language Pack) - C:\Users\miekro s dallallio\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\b1fl6hgv.default\Extensions\[removed] [2020-11-16] [Legacy] [not signed]
FF Extension: (Nederlands (NL) Language Pack) - C:\Users\miekro s dallallio\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\b1fl6hgv.default\Extensions\[removed] [2020-11-16] [Legacy] [not signed]
FF Extension: (Polski Language Pack) - C:\Users\miekro s dallallio\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\b1fl6hgv.default\Extensions\[removed] [2020-11-16] [Legacy] [not signed]
FF Extension: (Russian (RU) Language Pack) - C:\Users\miekro s dallallio\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\b1fl6hgv.default\Extensions\[removed] [2020-11-16] [Legacy] [not signed]
FF Extension: (Slovenski jezik Language Pack) - C:\Users\miekro s dallallio\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\b1fl6hgv.default\Extensions\[removed] [2020-11-16] [Legacy] [not signed]
FF Extension: (српски (sr) Language Pack) - C:\Users\miekro s dallallio\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\b1fl6hgv.default\Extensions\[removed] [2020-11-16] [Legacy] [not signed]
FF Extension: (Svenska (SE) Language Pack) - C:\Users\miekro s dallallio\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\b1fl6hgv.default\Extensions\[removed] [2020-11-16] [Legacy] [not signed]
FF Extension: (Chinese Simplified (zh-CN) Language Pack) - C:\Users\miekro s dallallio\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\b1fl6hgv.default\Extensions\[removed] [2020-11-16] [Legacy] [not signed]
FF Extension: (Traditional Chinese (zh-TW) Language Pack) - C:\Users\miekro s dallallio\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\b1fl6hgv.default\Extensions\[removed] [2020-11-16] [Legacy] [not signed]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-03-06] (Adobe Inc. -> Adobe Systems Inc.)

Chrome:
=======
CHR Profile: C:\Users\miekro s dallallio\AppData\Local\Google\Chrome\User Data\Default [2021-01-04]
CHR Notifications: Default -> hxxps://www.facebook.com
CHR Extension: (Slides) - C:\Users\miekro s dallallio\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-05-20]
CHR Extension: (Docs) - C:\Users\miekro s dallallio\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-05-20]
CHR Extension: (Google Drive) - C:\Users\miekro s dallallio\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-25]
CHR Extension: (YouTube) - C:\Users\miekro s dallallio\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-05-20]
CHR Extension: (Sheets) - C:\Users\miekro s dallallio\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-05-20]
CHR Extension: (Google Docs Offline) - C:\Users\miekro s dallallio\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-11-22]
CHR Extension: (Chrome Web Store Payments) - C:\Users\miekro s dallallio\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-05-20]
CHR Extension: (Gmail) - C:\Users\miekro s dallallio\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-25]
CHR Extension: (Chrome Media Router) - C:\Users\miekro s dallallio\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-12-06]
CHR HKLM-x32\…\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-17] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [38592 2021-01-19] (Dell Inc -> )
S3 iaStorAfsService; C:\WINDOWS\IAStorAfsService\iaStorAfsService.exe [2413752 2017-07-21] (Intel(R) Rapid Storage Technology -> Intel Corporation)
R2 IDriveE Service; C:\Program Files (x86)\IDriveWindows\IDriveE Service.exe [157336 2018-02-12] (Pro Softnet Corporation -> Pro Softnet Corporation)
R2 IDriveService; C:\Program Files (x86)\IDriveWindows\id_service.exe [344168 2021-01-13] (Pro Softnet Corporation -> Prosoftnet)
S3 Macromedia Licensing Service; C:\Program Files (x86)\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe [68096 2020-05-22] () [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2021-04-12] (Malwarebytes Inc -> Malwarebytes)
R2 RAPSService; C:\Program Files\Rivet Networks\SmartByte\RAPSService.exe [64848 2020-08-14] (Rivet Networks LLC -> Rivet Networks, LLC.)
S3 RNDBWM; C:\Program Files\Rivet Networks\SmartByte\RNDBWMService.exe [64856 2020-08-14] (Rivet Networks LLC -> Rivet Networks, LLC.)
R2 SmartByte Analytics Service; C:\Program Files\Rivet Networks\SmartByte\SmartByteAnalyticsService.exe [1630576 2020-08-14] (Rivet Networks LLC -> Rivet Networks)
R2 SmartByte Network Service x64; C:\Program Files\Rivet Networks\SmartByte\SmartByteNetworkService.exe [2385256 2020-08-14] (Rivet Networks LLC -> Rivet Networks)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.7-0\NisSrv.exe [2624104 2021-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.7-0\MsMpEng.exe [128376 2021-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 DellProf; C:\WINDOWS\system32\drivers\DellProf.sys [41208 2017-12-14] (Techporch Incorporated -> Dell Computer Corporation)
R2 DpmLiteDrv; c:\Program Files\Dell\QuickSet\DpmLiteDrv64.sys [15080 2014-10-16] (Wistron Corporation -> Wistron Corp.)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [199128 2021-04-12] (Malwarebytes Inc -> Malwarebytes)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [220752 2021-04-14] (Malwarebytes Inc -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2021-04-12] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [198248 2021-04-14] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [77496 2021-04-14] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-04-12] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [157944 2021-04-14] (Malwarebytes Inc -> Malwarebytes)
R3 MpKsl86dbcff8; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{9DA3F5FD-FF14-464A-826E-87463DA62B73}\MpKslDrv.sys [97528 2021-04-15] (Microsoft Windows -> Microsoft Corporation)
R0 PxHlpa64; C:\WINDOWS\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation -> Corel Corporation)
R3 SmbCoSvc; C:\WINDOWS\system32\DRIVERS\SmbCo10X64.sys [164424 2020-08-14] (Rivet Networks LLC -> Rivet Networks, LLC.)
R2 UI5IFS; C:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller 8\IFS64.sys [40520 2019-01-17] (Ashampoo GmbH & Co. KG -> )
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49560 2021-04-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [421088 2021-04-11] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [72928 2021-04-11] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-04-16 11:06 - 2021-04-16 11:10 - 000028227 _____ C:\Users\miekro s dallallio\Downloads\FRST.txt
2021-04-16 11:03 - 2021-04-16 11:08 - 000000000 ____D C:\FRST
2021-04-16 11:02 - 2021-04-16 11:02 - 002298368 _____ (Farbar) C:\Users\miekro s dallallio\Downloads\FRST64.exe
2021-04-15 14:12 - 2021-04-16 11:05 - 000001163 _____ C:\Users\miekro s dallallio\Desktop\april 15.txt
2021-04-14 17:39 - 2021-04-14 17:39 - 000077496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2021-04-14 17:38 - 2021-04-14 17:38 - 000220752 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2021-04-14 17:38 - 2021-04-14 17:38 - 000198248 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2021-04-14 17:38 - 2021-04-14 17:38 - 000157944 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2021-04-13 00:03 - 2021-04-13 00:03 - 000003386 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d71c334ea37dae
2021-04-12 12:11 - 2021-04-12 12:11 - 000000000 ____D C:\Users\miekro s dallallio\AppData\Local\mbam
2021-04-12 12:10 - 2021-04-12 12:10 - 000002041 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2021-04-12 12:10 - 2021-04-12 12:10 - 000002029 _____ C:\ProgramData\Desktop\Malwarebytes.lnk
2021-04-12 12:09 - 2021-04-12 12:09 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2021-04-12 12:09 - 2021-04-12 12:08 - 000199128 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2021-04-12 12:09 - 2021-04-12 12:08 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2021-04-12 12:08 - 2021-04-12 12:08 - 000000000 ____D C:\ProgramData\Malwarebytes
2021-04-08 15:33 - 2021-04-08 15:33 - 000003388 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1725785269-512999547-2818236412-1001
2021-04-08 15:33 - 2021-04-08 15:33 - 000002402 _____ C:\Users\miekro s dallallio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-04-07 13:43 - 2021-04-07 13:43 - 000001606 _____ C:\Users\miekro s dallallio\AppData\Local\recently-used.xbel
2021-04-05 14:12 - 2021-04-10 21:32 - 000001690 _____ C:\Users\miekro s dallallio\Desktop\immed.txt
2021-04-01 17:52 - 2021-04-01 18:32 - 000016222 _____ C:\Users\miekro s dallallio\Documents\In Your Easter Bonnet.odt
2021-03-31 19:09 - 2021-03-31 19:09 - 011321472 _____ (Tim Kosse) C:\Users\miekro s dallallio\Downloads\FileZilla_3.52.2_win64-setup.exe
2021-03-31 09:20 - 2021-04-14 15:24 - 000002491 _____ C:\Users\miekro s dallallio\Desktop\NOW list.txt
2021-03-30 11:24 - 2021-03-30 11:24 - 000000129 _____ C:\Users\miekro s dallallio\Desktop\Paper ack Swap.url
2021-03-30 09:36 - 2021-04-03 11:14 - 000001261 _____ C:\Users\miekro s dallallio\Desktop\Pretend it is Spring.txt
2021-03-30 03:43 - 2021-03-30 03:43 - 000000108 _____ C:\Users\miekro s dallallio\Desktop\GIGGING.txt
2021-03-27 16:58 - 2021-03-27 16:58 - 000000000 ____D C:\WINDOWS\system32\Tasks\Agent Activation Runtime
2021-03-26 13:24 - 2021-04-11 13:04 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2021-03-25 20:16 - 2021-03-25 20:16 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-03-25 20:06 - 2021-03-25 20:06 - 000000115 _____ C:\Users\miekro s dallallio\Desktop\Space Weather.url
2021-03-23 11:35 - 2021-03-28 19:21 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-03-20 02:55 - 2021-03-22 03:00 - 000000000 ____D C:\Users\miekro s dallallio\AppData\Local\Notepad
2021-03-18 19:39 - 2021-03-18 19:46 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2021-03-18 19:36 - 2021-03-18 19:39 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2021-03-18 19:36 - 2021-03-18 19:36 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2021-03-18 19:24 - 2021-03-18 19:24 - 000000000 ____D C:\ProgramData\ssh
2021-03-18 19:11 - 2021-03-18 19:11 - 001328400 _____ C:\WINDOWS\system32\FaceTrackerInternal.dll
2021-03-18 19:11 - 2021-03-18 19:11 - 001282560 _____ C:\WINDOWS\system32\FaceProcessor.dll
2021-03-18 19:11 - 2021-03-18 19:11 - 000512864 _____ C:\WINDOWS\system32\FaceProcessorCore.dll
2021-03-18 19:09 - 2021-03-18 19:09 - 000095744 _____ C:\WINDOWS\system32\VirtualMonitorManager.dll
2021-03-18 19:08 - 2021-03-18 19:08 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2021-03-18 19:08 - 2021-03-18 19:08 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2021-03-18 19:07 - 2021-03-18 19:07 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-03-18 19:07 - 2021-03-18 19:07 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2021-03-18 19:07 - 2021-03-18 19:07 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpg2splt.ax
2021-03-18 19:07 - 2021-03-18 19:07 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VBICodec.ax
2021-03-18 19:07 - 2021-03-18 19:07 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2021-03-18 19:07 - 2021-03-18 19:07 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-03-18 19:06 - 2021-03-18 19:06 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2021-03-18 19:06 - 2021-03-18 19:06 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2021-03-18 19:06 - 2021-03-18 19:06 - 000304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2021-03-18 19:06 - 2021-03-18 19:06 - 000266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg2splt.ax
2021-03-18 19:06 - 2021-03-18 19:06 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\VBICodec.ax
2021-03-18 19:06 - 2021-03-18 19:06 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-03-18 19:06 - 2021-03-18 19:06 - 000053760 _____ C:\WINDOWS\SysWOW64\BWContextHandler.dll
2021-03-18 19:06 - 2021-03-18 19:06 - 000045880 _____ C:\WINDOWS\system32\HvSocket.dll
2021-03-18 19:05 - 2021-03-18 19:05 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-03-18 19:05 - 2021-03-18 19:05 - 001314128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-03-18 19:05 - 2021-03-18 19:05 - 000729600 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2021-03-18 19:05 - 2021-03-18 19:05 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2021-03-18 19:05 - 2021-03-18 19:05 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2021-03-18 19:05 - 2021-03-18 19:05 - 000067072 _____ C:\WINDOWS\system32\BWContextHandler.dll
2021-03-18 19:05 - 2021-03-18 19:05 - 000011359 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-03-18 19:04 - 2021-03-18 19:04 - 003860832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpltfm.dll
2021-03-18 19:04 - 2021-03-18 19:04 - 000980320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpal.dll
2021-03-18 19:04 - 2021-03-18 19:04 - 000915296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmcodecs.dll
2021-03-18 19:04 - 2021-03-18 19:04 - 000732000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ortcengine.dll
2021-03-18 19:04 - 2021-03-18 19:04 - 000446976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2021-03-18 19:04 - 2021-03-18 19:04 - 000221184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthprops.cpl
2021-03-18 19:04 - 2021-03-18 19:04 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2021-03-18 19:04 - 2021-03-18 19:04 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\activeds.tlb
2021-03-18 19:04 - 2021-03-18 19:04 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncpa.cpl
2021-03-18 19:04 - 2021-03-18 19:04 - 000055376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmmvrortc.dll
2021-03-18 19:04 - 2021-03-18 19:04 - 000039936 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2021-03-18 19:03 - 2021-03-18 19:03 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-03-18 19:03 - 2021-03-18 19:03 - 000611952 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-03-18 19:03 - 2021-03-18 19:03 - 000455680 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2021-03-18 19:03 - 2021-03-18 19:03 - 000235520 _____ C:\WINDOWS\SysWOW64\HeatCore.dll
2021-03-18 19:03 - 2021-03-18 19:03 - 000047472 _____ C:\WINDOWS\SysWOW64\umpdc.dll
2021-03-18 19:02 - 2021-03-18 19:02 - 004898144 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpltfm.dll
2021-03-18 19:02 - 2021-03-18 19:02 - 001354080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpal.dll
2021-03-18 19:02 - 2021-03-18 19:02 - 001163776 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-03-18 19:02 - 2021-03-18 19:02 - 001091936 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmcodecs.dll
2021-03-18 19:02 - 2021-03-18 19:02 - 001032544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ortcengine.dll
2021-03-18 19:02 - 2021-03-18 19:02 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-03-18 19:02 - 2021-03-18 19:02 - 000330752 _____ C:\WINDOWS\SysWOW64\ssdm.dll
2021-03-18 19:02 - 2021-03-18 19:02 - 000266240 _____ C:\WINDOWS\SysWOW64\Windows.Internal.UI.Shell.WindowTabManager.dll
2021-03-18 19:02 - 2021-03-18 19:02 - 000240640 _____ C:\WINDOWS\SysWOW64\CoreMas.dll
2021-03-18 19:02 - 2021-03-18 19:02 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\timedate.cpl
2021-03-18 19:02 - 2021-03-18 19:02 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncpa.cpl
2021-03-18 19:02 - 2021-03-18 19:02 - 000056672 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmmvrortc.dll
2021-03-18 19:02 - 2021-03-18 19:02 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.drv
2021-03-18 19:02 - 2021-03-18 19:02 - 000010752 _____ C:\WINDOWS\SysWOW64\agentactivationruntimestarter.exe
2021-03-18 19:01 - 2021-03-18 19:01 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2021-03-18 19:01 - 2021-03-18 19:01 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-03-18 19:01 - 2021-03-18 19:01 - 000048640 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2021-03-18 19:01 - 2021-03-18 19:01 - 000001370 _____ C:\WINDOWS\system32\ThirdPartyNoticesBySHS.txt
2021-03-18 19:00 - 2021-03-18 19:00 - 002254336 _____ C:\WINDOWS\system32\dwmscene.dll
2021-03-18 19:00 - 2021-03-18 19:00 - 001822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-03-18 19:00 - 2021-03-18 19:00 - 001394024 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-03-18 19:00 - 2021-03-18 19:00 - 000544768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2021-03-18 19:00 - 2021-03-18 19:00 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl
2021-03-18 19:00 - 2021-03-18 19:00 - 000231248 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2021-03-18 19:00 - 2021-03-18 19:00 - 000190976 _____ C:\WINDOWS\system32\BthpanContextHandler.dll
2021-03-18 19:00 - 2021-03-18 19:00 - 000152064 _____ C:\WINDOWS\system32\EoAExperiences.exe
2021-03-18 19:00 - 2021-03-18 19:00 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\activeds.tlb
2021-03-18 19:00 - 2021-03-18 19:00 - 000091136 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-03-18 18:59 - 2021-03-18 18:59 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-03-18 18:59 - 2021-03-18 18:59 - 002260480 _____ (The ICU Project) C:\WINDOWS\system32\icu.dll
2021-03-18 18:59 - 2021-03-18 18:59 - 000707016 _____ C:\WINDOWS\system32\TextShaping.dll
2021-03-18 18:59 - 2021-03-18 18:59 - 000643072 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
2021-03-18 18:59 - 2021-03-18 18:59 - 000306688 _____ C:\WINDOWS\system32\HeatCore.dll
2021-03-18 18:59 - 2021-03-18 18:59 - 000029696 _____ (The ICU Project) C:\WINDOWS\system32\icuuc.dll
2021-03-18 18:59 - 2021-03-18 18:59 - 000025088 _____ (The ICU Project) C:\WINDOWS\system32\icuin.dll
2021-03-18 18:58 - 2021-03-18 18:58 - 004227116 _____ C:\WINDOWS\system32\DefaultHrtfs.bin
2021-03-18 18:58 - 2021-03-18 18:58 - 000562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-03-18 18:58 - 2021-03-18 18:58 - 000455168 _____ C:\WINDOWS\system32\ssdm.dll
2021-03-18 18:58 - 2021-03-18 18:58 - 000363520 _____ C:\WINDOWS\system32\Windows.Internal.UI.Shell.WindowTabManager.dll
2021-03-18 18:58 - 2021-03-18 18:58 - 000287232 _____ C:\WINDOWS\system32\CoreMas.dll
2021-03-18 18:58 - 2021-03-18 18:58 - 000243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2021-03-18 18:58 - 2021-03-18 18:58 - 000165888 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-03-18 18:58 - 2021-03-18 18:58 - 000089088 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.proxystub.dll
2021-03-18 18:58 - 2021-03-18 18:58 - 000074240 _____ C:\WINDOWS\system32\rdsxvmaudio.dll
2021-03-18 18:58 - 2021-03-18 18:58 - 000073216 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll
2021-03-18 18:58 - 2021-03-18 18:58 - 000064552 _____ C:\WINDOWS\system32\umpdc.dll
2021-03-18 18:58 - 2021-03-18 18:58 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.drv
2021-03-18 18:58 - 2021-03-18 18:58 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2021-03-18 18:57 - 2021-03-18 18:57 - 000197632 _____ C:\WINDOWS\system32\IHDS.dll
2021-03-18 18:29 - 2021-03-18 18:30 - 000000000 ____D C:\Users\miekro s dallallio\Downloads\Win7Games4Win10_8_81_v2(2)
2021-03-18 18:23 - 2021-03-18 18:24 - 153813141 _____ C:\Users\miekro s dallallio\Downloads\Win7Games4Win10_8_81_v2(2).zip
2021-03-18 18:18 - 2021-03-18 18:28 - 000000000 ____D C:\ProgramData\WinZip
2021-03-18 18:16 - 2021-03-18 18:16 - 000000000 ____D C:\ProgramData\UniqueId
2021-03-18 18:15 - 2021-03-18 18:15 - 000977344 _____ (WinZip Computing) C:\Users\miekro s dallallio\Downloads\winzip25-p008.exe
2021-03-18 17:45 - 2021-03-18 17:45 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2021-03-18 17:45 - 2021-03-18 17:45 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2021-03-18 17:33 - 2021-03-18 19:46 - 000000000 ____D C:\Program Files (x86)\MSBuild
2021-03-18 17:33 - 2021-03-18 17:33 - 000000000 ____D C:\Program Files\Reference Assemblies
2021-03-18 17:33 - 2021-03-18 17:33 - 000000000 ____D C:\Program Files\MSBuild
2021-03-18 17:33 - 2021-03-18 17:33 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2021-03-18 17:17 - 2021-03-18 17:17 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2021-03-18 16:53 - 2021-03-18 16:53 - 000000020 ___SH C:\Users\miekro s dallallio\ntuser.ini
2021-03-18 16:51 - 2021-04-14 17:37 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-03-18 16:51 - 2021-04-13 00:03 - 000003480 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-03-18 16:51 - 2021-03-18 16:52 - 000003346 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-03-18 16:51 - 2021-03-18 16:52 - 000003220 _____ C:\WINDOWS\system32\Tasks\Intel PTT EK Recertification
2021-03-18 16:51 - 2021-03-18 16:52 - 000002996 _____ C:\WINDOWS\system32\Tasks\PCDEventLauncherTask
2021-03-18 16:51 - 2021-03-18 16:51 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2021-03-18 16:51 - 2021-03-18 16:51 - 000003184 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-03-18 16:51 - 2021-03-18 16:51 - 000003122 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-03-18 16:51 - 2021-03-18 16:51 - 000002782 _____ C:\WINDOWS\system32\Tasks\AdobeAAMUpdater-1.0-MARLOWE-miekro s dallallio
2021-03-18 16:51 - 2021-03-18 16:51 - 000002258 _____ C:\WINDOWS\system32\Tasks\SmartByte Telemetry
2021-03-18 16:51 - 2021-03-18 16:51 - 000000000 ____D C:\WINDOWS\system32\Tasks\NCH Software
2021-03-18 16:51 - 2021-03-18 16:51 - 000000000 ____D C:\WINDOWS\system32\Tasks\Intel
2021-03-18 16:50 - 2021-03-18 16:51 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2021-03-18 16:50 - 2021-03-18 16:51 - 000007623 _____ C:\WINDOWS\diagerr.xml
2021-03-18 16:21 - 2021-03-18 16:21 - 000023460 _____ C:\WINDOWS\system32\emptyregdb.dat
2021-03-18 16:15 - 2021-04-14 17:45 - 000842414 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-03-18 16:10 - 2021-03-18 16:10 - 000000368 ____H C:\WINDOWS\Tasks\Intel PTT EK Recertification.job
2021-03-18 16:01 - 2021-04-14 17:34 - 000000000 ____D C:\Users\miekro s dallallio
2021-03-18 15:58 - 2021-03-18 15:58 - 000001117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Waves MaxxAudioPro.lnk
2021-03-18 15:58 - 2021-03-18 15:58 - 000000000 ____D C:\Program Files\Waves
2021-03-18 15:49 - 2021-04-16 10:29 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-03-18 15:49 - 2021-03-18 15:49 - 003360616 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-03-18 15:48 - 2021-04-14 17:37 - 000008192 ___SH C:\DumpStack.log.tmp
2021-03-17 13:57 - 2021-03-17 14:03 - 000000383 _____ C:\Users\miekro s dallallio\Desktop\[removed].txt

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-04-16 11:11 - 2019-12-07 05:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-04-16 10:43 - 2020-05-13 18:04 - 000000000 ____D C:\ProgramData\Mozilla
2021-04-16 10:42 - 2020-05-13 18:04 - 000000000 ____D C:\Users\miekro s dallallio\AppData\LocalLow\Mozilla
2021-04-16 10:39 - 2019-12-07 05:03 - 000000000 ____D C:\WINDOWS\servicing
2021-04-16 10:39 - 2019-12-07 05:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-04-16 10:37 - 2020-07-17 18:11 - 000002440 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-04-16 10:37 - 2019-12-07 05:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-04-16 10:37 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-04-16 03:14 - 2021-03-11 00:56 - 000000000 ___HD C:\$WinREAgent
2021-04-15 21:44 - 2020-05-14 14:55 - 000000000 ____D C:\ProgramData\IDrive
2021-04-15 19:32 - 2020-05-15 14:55 - 000000000 ____D C:\Users\miekro s dallallio\Desktop\WEBCASTS
2021-04-14 17:45 - 2019-12-07 05:13 - 000000000 ____D C:\WINDOWS\INF
2021-04-14 17:38 - 2020-05-13 17:38 - 000000000 __SHD C:\Users\miekro s dallallio\IntelGraphicsProfiles
2021-04-14 17:37 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-04-14 17:37 - 2018-02-17 02:56 - 000000000 ___HD C:\Intel
2021-04-14 17:36 - 2019-12-07 05:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2021-04-14 16:39 - 2020-05-13 18:05 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-04-14 16:33 - 2020-05-13 18:05 - 131963968 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-04-14 16:27 - 2020-05-20 22:53 - 000002303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-04-14 05:31 - 2020-08-03 20:51 - 000001327 _____ C:\Users\miekro s dallallio\Desktop\Arrears.txt
2021-04-12 12:09 - 2019-12-07 05:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-04-12 12:08 - 2021-01-12 18:19 - 000000000 ____D C:\Program Files\Malwarebytes
2021-04-12 12:04 - 2021-01-12 18:07 - 002297856 _____ (Farbar) C:\Users\miekro s dallallio\Downloads\FRSTEnglish.exe
2021-04-12 12:03 - 2021-01-12 18:06 - 011644232 _____ C:\Users\miekro s dallallio\Downloads\MB-SupportTool.exe
2021-04-12 05:41 - 2021-03-15 11:51 - 000002994 _____ C:\Users\miekro s dallallio\Desktop\TEMPLATE FOR REALITY.txt
2021-04-11 20:34 - 2020-05-14 14:55 - 000000000 ____D C:\Program Files (x86)\IDriveWindows
2021-04-11 13:04 - 2020-05-13 18:04 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-04-11 04:58 - 2020-05-13 21:29 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-04-10 21:55 - 2020-05-22 23:27 - 000000000 ____D C:\Users\miekro s dallallio\Documents\Politics
2021-04-10 19:53 - 2020-05-15 15:10 - 000000000 ____D C:\Users\miekro s dallallio\Documents\fakebook 2020
2021-04-09 17:00 - 2020-05-13 18:56 - 000001278 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2021-04-09 09:00 - 2020-05-23 03:26 - 000000000 ____D C:\Users\miekro s dallallio\Desktop\things on hand to watch and read
2021-04-08 15:33 - 2020-05-13 17:40 - 000000000 ___RD C:\Users\miekro s dallallio\OneDrive
2021-04-07 13:46 - 2020-05-21 07:34 - 000000000 ____D C:\Users\miekro s dallallio\AppData\Local\babl-0.1
2021-04-07 13:43 - 2020-05-21 07:40 - 000000000 ____D C:\Users\miekro s dallallio\AppData\Local\gtk-2.0
2021-04-07 13:05 - 2020-05-23 03:20 - 000054836 _____ C:\Users\miekro s dallallio\Desktop\Phone Numbers.txt
2021-04-03 16:50 - 2020-05-22 23:42 - 000000000 ____D C:\Users\miekro s dallallio\Documents\TECH
2021-04-02 22:57 - 2020-05-23 03:20 - 000007411 _____ C:\Users\miekro s dallallio\Desktop\boox n flix n records.txt
2021-04-02 18:06 - 2020-09-30 16:38 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-04-01 11:13 - 2020-07-22 10:58 - 000000000 ____D C:\Users\miekro s dallallio\Documents\0
2021-03-31 19:21 - 2020-05-22 19:54 - 000000000 ____D C:\Users\miekro s dallallio\AppData\Roaming\FileZilla
2021-03-31 12:23 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-03-30 17:51 - 2021-03-11 01:19 - 000000000 ___DC C:\WINDOWS\Panther
2021-03-30 09:42 - 2021-03-10 18:41 - 000000336 _____ C:\Users\miekro s dallallio\Desktop\drug naame game.txt
2021-03-29 12:26 - 2020-05-13 20:22 - 000000000 ____D C:\Users\miekro s dallallio\Documents\azzCardfile Files
2021-03-28 23:58 - 2020-05-23 03:26 - 000000000 ____D C:\Users\miekro s dallallio\Desktop\WRITE THIS
2021-03-28 16:44 - 2021-02-08 12:07 - 000000254 _____ C:\Users\miekro s dallallio\Desktop\LAS CRUCES.txt
2021-03-26 15:06 - 2020-10-10 18:34 - 000000000 ____D C:\Users\miekro s dallallio\Documents\Zoom
2021-03-25 20:16 - 2020-05-13 18:04 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-03-25 20:03 - 2021-03-13 19:41 - 000019133 _____ C:\Users\miekro s dallallio\Desktop\Winter Stretches Out.txt
2021-03-24 21:35 - 2020-07-22 09:59 - 000000000 ____D C:\Users\miekro s dallallio\Documents\2 DOGUMENTS
2021-03-24 17:14 - 2020-09-10 16:18 - 000000406 _____ C:\Users\miekro s dallallio\Desktop\HARDWARE LIST.txt
2021-03-23 01:42 - 2020-09-30 16:38 - 000470864 _____ (Microsoft Corporation) C:\WINDOWS\system32\QualityUpdateAssistant.dll
2021-03-23 01:41 - 2020-09-30 16:38 - 000734008 _____ (Microsoft Corporation) C:\WINDOWS\system32\sedplugins.dll
2021-03-22 11:44 - 2021-03-16 12:33 - 000002452 _____ C:\Users\miekro s dallallio\Desktop\Winter surplus.txt
2021-03-19 03:42 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\appcompat
2021-03-18 19:46 - 2021-02-11 12:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IDrive
2021-03-18 19:46 - 2021-01-14 08:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Video Editor 2020
2021-03-18 19:46 - 2020-11-18 21:30 - 000000000 ____D C:\WINDOWS\system32\ihvmanager
2021-03-18 19:46 - 2020-11-16 21:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueGriffon
2021-03-18 19:46 - 2020-10-13 15:13 - 000000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.7
2021-03-18 19:46 - 2020-09-08 02:42 - 000000000 ___RD C:\Program Files\Microsoft Games
2021-03-18 19:46 - 2020-08-21 20:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2021-03-18 19:46 - 2020-08-21 17:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macromedia
2021-03-18 19:46 - 2020-08-21 14:31 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2021-03-18 19:46 - 2020-08-21 13:50 - 000000000 ___HD C:\WINDOWS\system32\CanonIJ Uninstaller Information
2021-03-18 19:46 - 2020-08-21 13:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP490 series
2021-03-18 19:46 - 2020-07-25 15:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio
2021-03-18 19:46 - 2020-06-24 18:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TypingMaster
2021-03-18 19:46 - 2020-05-30 08:07 - 000000000 ____D C:\Program Files\UNP
2021-03-18 19:46 - 2020-05-20 22:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
2021-03-18 19:46 - 2020-05-16 21:12 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2021-03-18 19:46 - 2020-05-13 20:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\azzCardfile
2021-03-18 19:46 - 2019-12-07 05:18 - 000000000 ____D C:\WINDOWS\Setup
2021-03-18 19:46 - 2019-12-07 05:14 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2021-03-18 19:46 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2021-03-18 19:46 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\spool
2021-03-18 19:46 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2021-03-18 19:46 - 2019-12-07 05:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2021-03-18 19:46 - 2019-03-19 00:52 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2021-03-18 19:46 - 2018-02-17 02:56 - 000000000 ____D C:\Program Files\Realtek
2021-03-18 19:46 - 2018-02-17 02:56 - 000000000 ____D C:\Program Files\Intel
2021-03-18 19:46 - 2018-02-17 02:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell
2021-03-18 19:46 - 2018-02-17 02:42 - 000000000 ____D C:\WINDOWS\SysWOW64\sda
2021-03-18 19:46 - 2017-09-29 09:46 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2021-03-18 19:43 - 2018-02-17 02:56 - 000000000 ____D C:\WINDOWS\system32\Intel
2021-03-18 19:39 - 2021-01-22 19:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2021-03-18 19:39 - 2020-05-13 21:32 - 000000000 ____D C:\WINDOWS\Firmware
2021-03-18 19:39 - 2020-05-13 20:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2021-03-18 19:39 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\Resources
2021-03-18 19:25 - 2019-12-07 05:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2021-03-18 19:25 - 2019-12-07 05:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2021-03-18 19:25 - 2019-12-07 05:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2021-03-18 19:25 - 2019-12-07 05:14 - 000000000 ___SD C:\WINDOWS\system32\F12
2021-03-18 19:25 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2021-03-18 19:25 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-03-18 19:25 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2021-03-18 19:25 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-03-18 19:25 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2021-03-18 19:25 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Keywords
2021-03-18 19:25 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-03-18 19:25 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2021-03-18 19:25 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2021-03-18 19:25 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-03-18 19:25 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2021-03-18 19:25 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-03-18 19:25 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2021-03-18 19:25 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2021-03-18 19:25 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-03-18 19:25 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2021-03-18 19:25 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2021-03-18 19:25 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\Keywords
2021-03-18 19:24 - 2019-12-07 05:52 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2021-03-18 19:24 - 2019-12-07 05:52 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2021-03-18 19:24 - 2019-12-07 05:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2021-03-18 19:24 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2021-03-18 19:24 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-03-18 19:24 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\Com
2021-03-18 19:24 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2021-03-18 19:24 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2021-03-18 19:24 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2021-03-18 19:24 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2021-03-18 19:24 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-03-18 19:24 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-03-18 19:24 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\IME
2021-03-18 19:24 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\DiagTrack
2021-03-18 19:24 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-03-18 19:24 - 2019-12-07 05:14 - 000000000 ____D C:\Program Files\Common Files\System
2021-03-18 19:24 - 2019-12-07 05:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2021-03-18 19:22 - 2019-12-07 05:52 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2021-03-18 19:22 - 2019-12-07 05:52 - 000020908 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2021-03-18 18:31 - 2020-09-08 02:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2021-03-18 17:45 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2021-03-18 17:45 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2021-03-18 17:45 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2021-03-18 17:45 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2021-03-18 17:45 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2021-03-18 17:45 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2021-03-18 17:45 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2021-03-18 17:19 - 2020-05-13 17:38 - 000000000 ____D C:\Users\miekro s dallallio\AppData\Local\Packages
2021-03-18 17:17 - 2019-12-07 05:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-03-18 17:00 - 2020-05-13 21:24 - 000000000 ____D C:\ProgramData\Packages
2021-03-18 17:00 - 2020-05-13 17:38 - 000000000 ___RD C:\Users\miekro s dallallio\3D Objects
2021-03-18 17:00 - 2019-12-07 05:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-03-18 16:58 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-03-18 16:53 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-03-18 16:53 - 2019-12-07 05:14 - 000000000 ____D C:\WINDOWS\Registration
2021-03-18 16:53 - 2019-12-07 05:14 - 000000000 ____D C:\ProgramData\USOPrivate
2021-03-18 16:52 - 2019-12-07 05:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2021-03-18 16:51 - 2019-12-07 05:14 - 000000000 ____D C:\Program Files\Windows Defender
2021-03-18 16:04 - 2021-03-02 00:19 - 000000000 ____D C:\Users\miekro s dallallio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movavi Video Editor Plus 2021
2021-03-18 16:04 - 2020-12-29 09:58 - 000000000 ____D C:\Users\miekro s dallallio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2021-03-18 16:04 - 2020-05-28 21:44 - 000000000 ____D C:\Users\miekro s dallallio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2021-03-18 16:04 - 2020-05-14 14:57 - 000000000 ____D C:\Users\miekro s dallallio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IDrive
2021-03-18 16:04 - 2020-05-13 20:35 - 000000000 ____D C:\Users\miekro s dallallio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2021-03-18 15:58 - 2018-02-17 02:58 - 000000000 ____D C:\WINDOWS\system32\RTCOM
2021-03-18 15:58 - 2018-02-17 02:57 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2021-03-17 16:06 - 2020-05-15 19:45 - 000000000 ____D C:\Users\miekro s dallallio\AppData\Local\ElevatedDiagnostics

==================== Files in the root of some directories ========

2021-04-07 13:43 - 2021-04-07 13:43 - 000001606 _____ () C:\Users\miekro s dallallio\AppData\Local\recently-used.xbel

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

 

 

 

 

 

 

 

 

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-04-2021
Ran by [removed] (16-04-2021 11:19:33)
Running from C:\Users\[removed]\Downloads
Windows 10 Home Version 20H2 19042.867 (X64) (2021-03-18 20:53:11)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1725785269-512999547-2818236412-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1725785269-512999547-2818236412-503 - Limited - Disabled)
Guest (S-1-5-21-1725785269-512999547-2818236412-501 - Limited - Disabled)
miekro s dallallio (S-1-5-21-1725785269-512999547-2818236412-1001 - Administrator - Enabled) => C:\Users\miekro s dallallio
WDAGUtilityAccount (S-1-5-21-1725785269-512999547-2818236412-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC (HKLM-x32\…\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 21.001.20145 - Adobe Systems Incorporated)
Adobe Photoshop Elements 11 (HKLM-x32\…\Adobe Photoshop Elements 11) (Version: 11.0 - Adobe Systems Incorporated)
Adobe Premiere Elements 11 (HKLM\…\{66CF1DF9-1715-4325-89BC-76B1CA2EE3BE}) (Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Premiere Elements 11 (HKLM\…\PremElem110) (Version: 11.0 - Adobe Systems Incorporated)
Amazon Kindle (HKU\S-1-5-21-1725785269-512999547-2818236412-1001\…\Amazon Kindle) (Version: 1.28.0.57030 - Amazon)
Ashampoo Burning Studio FREE (HKLM-x32\…\{91B33C97-91F8-FFB3-581B-BC952C901685}_is1) (Version: 1.21.3 - Ashampoo GmbH & Co. KG)
Ashampoo UnInstaller 8 (HKLM-x32\…\{4209F371-D192-F401-E058-BBF7CF126AEA}_is1) (Version: 8.00.12 - Ashampoo GmbH & Co. KG)
Audacity 2.3.3 (HKLM-x32\…\Audacity_is1) (Version: 2.3.3 - Audacity Team)
azzCardfile 4.1 (HKLM-x32\…\azzCardfile_is1) (Version:  - Antanas Zdramys)
BlueGriffon version 3.1 (HKLM\…\{A9015334-10BE-4D64-A776-203336EFE806}_is1) (Version: 3.1 - Disruptive Innovations SAS)
Canon MP490 series MP Drivers (HKLM\…\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP490_series) (Version:  - Canon Inc.)
Dell Digital Delivery (HKLM-x32\…\{1B706C33-57B3-411B-BB6E-C4A2CF38AF35}) (Version: 3.4.1002.0 - Dell Products, LP)
Dell Mobile Connect Drivers (HKLM\…\{AAB336F0-6FC6-4BFE-AD7E-315FCDF20156}) (Version: 1.1.3750 - Screenovate Technologies Ltd.)
Dell Update (HKLM-x32\…\{944FB5B0-9588-45FD-ABE8-73FC879801ED}) (Version: 4.1.0 - Dell Inc.)
DSC/AA Factory Installer (HKLM\…\{F7A70D00-F283-45C8-B163-49EC365D7E27}) (Version: 2.0.6875.402 - PC-Doctor, Inc.) Hidden
Express Zip File Compression (HKLM-x32\…\ExpressZip) (Version: 7.23 - NCH Software)
FFmpeg (Windows) for Audacity version 2.2.2 (HKLM-x32\…\{9C7E31E3-017F-434C-AC40-24431A354A1E}_is1) (Version: 2.2.2 - )
FileZilla Client 3.49.1 (HKLM-x32\…\FileZilla Client) (Version: 3.49.1 - Tim Kosse)
GIMP 2.10.22 (HKLM\…\GIMP-2_is1) (Version: 2.10.22 - The GIMP Team)
Google Chrome (HKLM-x32\…\Google Chrome) (Version: 89.0.4389.128 - Google LLC)
Google Update Helper (HKLM-x32\…\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.169 - Google Inc.) Hidden
IDrive version 6.7.3.28 (HKLM-x32\…\IDrive_is1) (Version: 6.7.3.28 - Pro Softnet Corp)
Intel(R) Chipset Device Software (HKLM-x32\…\{17408817-d415-4768-a160-ae6d46d6bdb0}) (Version: 10.1.1.44 - Intel(R) Corporation) Hidden
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\…\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.3.10209.6897 - Intel Corporation)
Intel(R) HID Event Filter (HKLM-x32\…\3FB06EEC-013D-4366-9918-71B97DFB84EB) (Version: 2.2.1.377 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\…\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 1914.12.0.1255 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\…\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 17.5.9.1040 - Intel Corporation)
Intel(R) Serial IO (HKLM\…\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1943.2 - Intel Corporation)
Intel(R) Trusted Connect Service Client x86 (HKLM-x32\…\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.52.230.1 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32\…\{c6de84fd-ece7-4c2a-9f06-8cabe7ab79a0}) (Version: 1.52.230.1 - Intel Corporation) Hidden
Intel(R) Virtual Buttons (HKLM-x32\…\1992736F-C90A-481C-B21B-EE34CAD07387) (Version: 1.1.1.22 - Intel Corporation)
Intel® Integrated Sensor Solution (HKLM-x32\…\{98970ddc-844d-4ec3-b93e-52f5f693b305}) (Version: 3.10.100.3429 - Intel Corporation)
Intel® Optane™ Pinning Explorer Extensions (HKLM\…\{EEA36044-96B5-4E2A-AC59-3FC742EEDEF4}) (Version: 17.5.9.1040 - Intel Corporation)
ISS_Drivers_x64 (HKLM\…\{9315B8DE-B183-4126-A69E-150B8ABF3690}) (Version: 3.10.100.3429 - Intel Corporation) Hidden
KeyBlaze Typing Tutor (HKLM-x32\…\KeyBlaze) (Version: 3.03 - NCH Software)
Macromedia Dreamweaver MX 2004 (HKLM-x32\…\{05BB2EC5-6BEF-4DDC-9E75-BEE7B161157A}) (Version: 7.0.1 - Macromedia)
Macromedia Extension Manager (HKLM-x32\…\{A5BA14E0-7384-11D4-BAE7-00409631A2C8}) (Version: 1.5 - Macromedia)
Malwarebytes version 4.3.0.98 (HKLM\…\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.3.0.98 - Malwarebytes)
Maxx Audio Installer (x64) (HKLM\…\{307032B2-6AF2-46D7-B933-62438DEB2B9A}) (Version: 2.7.9233.1 - Waves Audio Ltd.) Hidden
Messenger 83.5.128 (HKU\S-1-5-21-1725785269-512999547-2818236412-1001\…\c1b3adcf-2068-5e8d-b25d-30ce588e3a4c) (Version: 83.5.128 - Facebook, Inc.)
Microsoft Edge (HKLM-x32\…\Microsoft Edge) (Version: 89.0.774.77 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1725785269-512999547-2818236412-1001\…\OneDriveSetup.exe) (Version: 21.052.0314.0001 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\…\{A0E1B43D-5F4A-46AF-9925-ABA3423325DC}) (Version: 2.77.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\…\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\…\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\…\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\…\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\…\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation)
Movavi Video Editor Plus 2021 (HKU\S-1-5-21-1725785269-512999547-2818236412-1001\…\Movavi Video Editor Plus 2021) (Version: 21.1.0 - Movavi)
Mozilla Firefox 87.0 (x64 en-US) (HKLM\…\Mozilla Firefox 87.0 (x64 en-US)) (Version: 87.0 - Mozilla)
Mozilla Maintenance Service (HKLM\…\MozillaMaintenanceService) (Version: 68.8.0 - Mozilla)
Mozilla Thunderbird 78.9.1 (x86 en-US) (HKLM-x32\…\Mozilla Thunderbird 78.9.1 (x86 en-US)) (Version: 78.9.1 - Mozilla)
OBS Studio (HKLM-x32\…\OBS Studio) (Version: 25.0.8 - OBS Project)
Open Broadcaster Software (HKLM-x32\…\Open Broadcaster Software) (Version:  - )
OpenOffice 4.1.7 (HKLM-x32\…\{A09D951F-4BA3-4383-97B3-D1B91835E779}) (Version: 4.17.9800 - Apache Software Foundation)
PRE11 STI 64Installer (HKLM-x32\…\{B614E5FA-6DA4-45A1-845C-52F870240A89}) (Version: 11.0 - Adobe Systems Incorporated) Hidden
PSE11 STI Installer (HKLM-x32\…\{98CE8819-87AA-4814-8167-ADDDD513485F}) (Version: 11.0 - Adobe Systems Incorporated) Hidden
Qualcomm 11ac Wireless LAN&Bluetooth; Installer (HKLM-x32\…\{E7086B15-806E-4519-A876-DBA9FDDE9A13}) (Version: 11.0.0.10480 - Qualcomm)
QuickSet64 (HKLM\…\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 11.1.40 - Dell Inc.)
Realtek Card Reader (HKLM-x32\…\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.18362.31252 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\…\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8184 - Realtek Semiconductor Corp.)
Realtek PC Camera (HKLM-x32\…\{E399A5B3-ED53-4DEA-AF04-8011E1EB1EAC}) (Version: 10.0.15063.11275 - Realtek Semiconductor Corp.)
Recuva (HKLM\…\Recuva) (Version: 1.53 - Piriform)
SmartByte Drivers and Services (HKLM\…\{9668B1BB-D0FE-4C0C-800C-B1555E069A62}) (Version: 3.1.940 - Rivet Networks)
Typing Master 10 (HKLM-x32\…\{19B5F18A-1638-4037-AD44-CF7D0EEAB875}_is1) (Version: 10.00 - Typing Innovation Group Ltd)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\…\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
Update for Windows 10 for x64-based Systems (KB4480730) (HKLM\…\{3BAE4496-6F6C-4330-A8AA-B93D3D346FA5}) (Version: 2.53.0.0 - Microsoft Corporation)
UpdateAssistant (HKLM\…\{F339C545-24DC-4870-AA32-6EB6B0500B95}) (Version: 1.24.0.0 - Microsoft Corporation) Hidden
Vulkan Run Time Libraries 1.0.42.0 (HKLM\…\VulkanRT1.0.42.0) (Version: 1.0.42.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.65.1 (HKLM\…\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
Windows 7 Games for Windows 10 and 8 (HKLM\…\Win7Games) (Version: 2.0 - hxxp://winaero.com)
Windows Video Editor 2020 (HKLM\…\{9CC29C6A-B5FE-497B-8F23-52A2557A92D9}}_is1) (Version:  - VideoWin)
Wondershare Filmora X(Build 10.1.4.7) (HKLM\…\Wondershare Filmora X_is1) (Version:  - Wondershare Software)
Wondershare Helper Compact 2.6.0 (HKLM-x32\…\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.6.0 - Wondershare)
Zoom (HKU\S-1-5-21-1725785269-512999547-2818236412-1001\…\ZoomUMX) (Version: 5.4.7 (59784.1220) - Zoom Video Communications, Inc.)

Packages:
=========
Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.56.3.0_x86__kgqvnymyfvs32 [2021-04-13] (king.com)
Canon Inkjet Print Utility -> C:\Program Files\WindowsApps\34791E63.CanonInkjetPrintUtility_3.1.0.0_neutral__6e5tt8cgb93ep [2021-02-18] (Canon Inc.)
Classic FreeCell -> C:\Program Files\WindowsApps\19789RossBor.ClassicFreeCell_3.1.5.0_x64__bckpywbq9b7yj [2021-03-25] (RossBor)
Dell Customer Connect -> C:\Program Files\WindowsApps\DellInc.DellCustomerConnect_5.2.52.0_x64__htrsf667h5kn2 [2021-04-07] (Dell Inc)
Dell Help & Support -> C:\Program Files\WindowsApps\DellInc.DellHelpSupport_3.2.1.0_x64__htrsf667h5kn2 [2020-05-13] (Dell Inc)
Dell Mobile Connect -> C:\Program Files\WindowsApps\ScreenovateTechnologies.DellMobileConnect_3.2.9771.0_x64__0vhbc3ng4wbp0 [2021-01-25] (Screenovate Technologies) [Startup Task]
Dell Product Registration -> C:\Program Files\WindowsApps\DellInc.DellProductRegistration_3.4.6.0_x64__htrsf667h5kn2 [2020-05-13] (Dell Inc)
Dropbox promotion -> C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_20.4.3.0_x64__xbfy0k16fey96 [2020-05-13] (Dropbox Inc.)
Farm Heroes Saga -> C:\Program Files\WindowsApps\king.com.FarmHeroesSaga_5.56.4.0_x86__kgqvnymyfvs32 [2021-03-30] (king.com)
HD Movie Maker - PRO -> C:\Program Files\WindowsApps\21336V3TApps.MovieMaker-PRO_3.1.3.0_x64__bzg06mxvgh4fa [2021-04-14] (V3TApps)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2021-03-18] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-03-18] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.9.1252.0_x64__8wekyb3d8bbwe [2021-03-18] (Microsoft Studios) [MS Ad]
Movie Maker 10 - FREE -> C:\Program Files\WindowsApps\21336V3TApps.MovieMaker-FREE_3.1.3.0_x64__bzg06mxvgh4fa [2021-04-14] (V3TApps)
MPEG-2 Video Extension -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.22661.0_x64__8wekyb3d8bbwe [2020-05-13] (Microsoft Corporation)
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.97.752.0_x64__mcm4njqhnhss8 [2020-07-15] (Netflix, Inc.)
Photos Add-on -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2021-03-12] (Microsoft Corporation)
Photos Media Engine Add-on -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-03-01] (Microsoft Corporation)
Sketchable -> C:\Program Files\WindowsApps\SiliconBendersLLC.Sketchable_5.0.32.0_x64__r2kxzpx527qgj [2021-04-05] (Silicon Benders LLC)
SmartByte -> C:\Program Files\WindowsApps\RivetNetworks.SmartByte_3.1.958.0_x64__rh07ty8m5nkag [2021-01-13] (Rivet Networks LLC)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0 [2021-04-01] (Spotify AB) [Startup Task]
Translator -> C:\Program Files\WindowsApps\Microsoft.BingTranslator_5.6.0.0_x64__8wekyb3d8bbwe [2020-05-13] (Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1725785269-512999547-2818236412-1001_Classes\CLSID\{a9872fee-5a55-4ecb-9b0f-b06fedcf14d1}\localserver32 -> C:\Program Files\Waves\MaxxAudio\MaxxAudioPro.exe (Waves Inc -> Waves Audio Ltd)
ShellIconOverlayIdentifiers: [          0001IDSIcon1] -> {0FA6DCC0-CF0B-427D-A8AF-97C466AB5769} => C:\Program Files (x86)\IDriveWindows\IDSyncIntIcon64.dll [2021-01-13] (Pro-Softnet Corporation, U.S.A) [File not signed]
ShellIconOverlayIdentifiers: [          0001IDSIcon2] -> {66357BBE-D2E5-453C-95FF-8102EB32419D} => C:\Program Files (x86)\IDriveWindows\IDSyncIntIcon64.dll [2021-01-13] (Pro-Softnet Corporation, U.S.A) [File not signed]
ShellIconOverlayIdentifiers: [          0001IDSIcon3] -> {904E6336-8B13-43FA-B4C3-5B62C1C91971} => C:\Program Files (x86)\IDriveWindows\IDSyncIntIcon64.dll [2021-01-13] (Pro-Softnet Corporation, U.S.A) [File not signed]
ShellIconOverlayIdentifiers: [  OptaneIconOverlay] -> {A3AF6F6C-8BED-3D93-8B5D-33427B5D38E9} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2019-12-10] (Intel(R) Rapid Storage Technology -> )
ContextMenuHandlers1: [ClsContextEx] -> {5E814CF3-3DF9-4D53-BCCC-94079E571569} => C:\Program Files (x86)\IDriveWindows\IDriveEContextMenuExt.dll -> No File
ContextMenuHandlers1: [ExpressZip] -> {8EEA165E-0B8B-4BA7-9796-50214C767171} => C:\Program Files (x86)\NCH Software\ExpressZip\ezcm64.dll [2020-07-06] () [File not signed]
ContextMenuHandlers1: [IDriveEContextMenuExt] -> {5E814CF3-3DF9-4D53-BCCC-94079E571569} => C:\Program Files (x86)\IDriveWindows\IDriveEContextMenuExt.dll -> No File
ContextMenuHandlers1: [IDriveMenu] -> {AFBFEC11-0FD5-48ED-B8AF-315197F09A82} => C:\Program Files (x86)\IDriveWindows\IDContextMenu.dll [2021-01-13] () [File not signed]
ContextMenuHandlers2: [IDriveEContextMenuExt] -> {5E814CF3-3DF9-4D53-BCCC-94079E571569} => C:\Program Files (x86)\IDriveWindows\IDriveEContextMenuExt.dll -> No File
ContextMenuHandlers2: [IDriveMenu] -> {AFBFEC11-0FD5-48ED-B8AF-315197F09A82} => C:\Program Files (x86)\IDriveWindows\IDContextMenu.dll [2021-01-13] () [File not signed]
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-04-12] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers3: [OptaneContextMenu] -> {AD7EBB13-617D-3270-8FA8-46583499C4FB} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2019-12-10] (Intel(R) Rapid Storage Technology -> )
ContextMenuHandlers4: [ClsContextEx] -> {5E814CF3-3DF9-4D53-BCCC-94079E571569} => C:\Program Files (x86)\IDriveWindows\IDriveEContextMenuExt.dll -> No File
ContextMenuHandlers4: [IDriveEContextMenuExt] -> {5E814CF3-3DF9-4D53-BCCC-94079E571569} => C:\Program Files (x86)\IDriveWindows\IDriveEContextMenuExt.dll -> No File
ContextMenuHandlers4: [IDriveMenu] -> {AFBFEC11-0FD5-48ED-B8AF-315197F09A82} => C:\Program Files (x86)\IDriveWindows\IDContextMenu.dll [2021-01-13] () [File not signed]
ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_3974eac8be1c963f\igfxDTCM.dll [2020-12-03] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [ExpressZip] -> {8EEA165E-0B8B-4BA7-9796-50214C767171} => C:\Program Files (x86)\NCH Software\ExpressZip\ezcm64.dll [2020-07-06] () [File not signed]
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-04-12] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2021-01-22 19:25 - 2016-07-21 11:54 - 000137728 _____ () [File not signed] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2021-01-22 19:25 - 2017-09-12 11:34 - 001506304 _____ () [File not signed] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2021-02-11 12:55 - 2021-01-13 17:20 - 000601600 _____ () [File not signed] C:\Program Files (x86)\IDriveWindows\IDContextMenu.dll
2021-02-11 12:55 - 2021-01-13 17:20 - 000834048 _____ () [File not signed] C:\Program Files (x86)\IDriveWindows\sqlite3.dll
2020-07-06 09:56 - 2020-07-06 09:56 - 000105984 _____ () [File not signed] C:\Program Files (x86)\NCH Software\ExpressZip\ezcm64.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 001010688 _____ () [File not signed] C:\Program Files (x86)\OpenOffice 4\program\libxml2.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000178176 _____ () [File not signed] C:\Program Files (x86)\OpenOffice 4\program\libxslt.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000770048 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\acc.DLL
2019-09-04 01:00 - 2019-09-04 01:00 - 000164352 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\apr-util.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000297472 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\avmedia.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 001143808 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\basegfx.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000596992 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\bootstrap.uno.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 001175552 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\comphelpMSC.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000487936 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\configmgr.uno.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000238080 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\cppu3.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000587776 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\cppuhelper3MSC.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000652800 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\deployment.uno.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000353792 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\deploymentgui.uno.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000151040 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\deploymentmisc.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000126464 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\dnd.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000887296 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\drawinglayer.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000047104 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\dtrans.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 001580544 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\editeng.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000160768 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\emser.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000051712 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\fileacc.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000226304 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\filterconfig1.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000091648 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\fsstorage.uno.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000055808 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ftransl.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000485888 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\fwe.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000210432 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\fwi.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 002193920 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\fwk.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000313344 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\fwl.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000187392 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\helplinker.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000070656 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\hyphen.uno.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000027136 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\i18nisolang1MSC.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000029696 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\i18npaper.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 001333760 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\i18npool.uno.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000067072 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\i18nutilMSC.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000136192 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\introspection.uno.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000107008 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\jvmfwk3.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000134144 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\libapr-1.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000099840 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\librdf.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 001257472 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\lng.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000068608 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\lnth.uno.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000024064 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\localebe1.uno.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000104448 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\localedata_en.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000038912 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\mcnttype.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000083456 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\msci_uno.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000344576 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\oleautobridge.uno.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000008704 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\onlinecheck.DLL
2019-09-04 01:00 - 2019-09-04 01:00 - 002456064 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ootk.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000369152 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\package2.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000097280 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\passwordcontainer.uno.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000028160 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\proxyfac.uno.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000286720 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\raptor.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000156160 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\rasqal.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000121344 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\reflection.uno.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000107008 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\reg3.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 001792512 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sal3.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000013824 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\salhelper3MSC.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000093184 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sax.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000168448 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sax.uno.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 002291200 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sb.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000082944 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\serf.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 003658240 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sfx.dll
2019-09-04 02:34 - 2019-09-04 02:34 - 011045376 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\soffice.bin
2019-09-04 01:00 - 2019-09-04 01:00 - 000290304 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sofficeapp.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000279040 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sot.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000183296 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\spell.uno.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000205824 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\spl.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000096768 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\stocservices.uno.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000053760 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\store3.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000901120 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\svl.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 003373056 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\svt.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 003235328 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\svx.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 006034432 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\svxcore.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 009289728 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sw.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000051200 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\swd.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000117760 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\sysdtrans.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000620544 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\tl.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000263680 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\UAccCOM.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000231936 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ucb1.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000388608 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ucbhelper4MSC.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000344576 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ucpchelp1.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000412160 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ucpdav1.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000024576 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ucpexpand1.uno.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000309248 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ucpfile1.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000162816 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\ucppkg1.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000167424 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\unordf.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000367616 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\unoxml.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000053248 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\updatefeed.uno.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000186880 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\updchk.uno.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 001104384 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\utl.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000254976 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\uui.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000085504 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\uwinapi.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 004172800 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\vcl.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000099328 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\vos3MSC.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000123904 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\winaccessibility.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000028672 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\wininetbe1.uno.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000791040 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\xcr.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000045056 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\xmlreader.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000238592 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\xmlsecurity.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 003469312 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\xo.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000396800 _____ (Apache Software Foundation) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\xstor.dll
2017-05-03 21:20 - 2017-05-03 21:20 - 000086016 _____ (Dell Inc.) [File not signed] C:\Program Files\Dell\QuickSet\dadkeyb.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 013914112 _____ (IBM Corporation and others) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\icudt40.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 001072128 _____ (IBM Corporation and others) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\icuin40.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000951808 _____ (IBM Corporation and others) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\icuuc40.dll
2021-02-11 12:55 - 2021-01-13 17:20 - 000874496 _____ (Pro-Softnet Corporation, U.S.A) [File not signed] C:\Program Files (x86)\IDriveWindows\IDSyncIntIcon64.dll
2020-08-14 21:29 - 2020-08-14 21:29 - 000122880 _____ (Rivet Networks) [File not signed] C:\Program Files\Rivet Networks\SmartByte\KillerNetworkServicePS.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000355840 _____ (The curl library, hxxps://curl.haxx.se/) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\libcurl.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 001020928 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\LIBEAY32.dll
2019-09-04 01:00 - 2019-09-04 01:00 - 000218624 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [File not signed] C:\Program Files (x86)\OpenOffice 4\program\SSLEAY32.dll
2021-01-22 19:25 - 2017-09-12 11:36 - 000708608 _____ (Wondershare) [File not signed] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSProducstInfo.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

HKU\S-1-5-21-1725785269-512999547-2818236412-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://dell17swin10.msn.com/?pc=DSJE
HKU\S-1-5-21-1725785269-512999547-2818236412-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell17swin10.msn.com/?pc=DSJE
SearchScopes: HKU\S-1-5-21-1725785269-512999547-2818236412-1001 -> DefaultScope {74F41844-25BD-4A8D-8D76-12E0485A4E10} URL =

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-09-29 09:46 - 2017-09-29 09:44 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1725785269-512999547-2818236412-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\miekro s dallallio\AppData\Roaming\Mozilla\Firefox\Desktop Background.bmp
DNS Servers: 192.168.172.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{4AF3AC15-7321-4E39-9208-45E428BFCF66}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{4E930813-6221-45D4-B0D7-FCD8857C7524}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{B1C21F74-3668-4CEA-AAA3-67711AE7C3FB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{455D9694-3710-47F8-858E-656FA502AF96}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{39DDB8B7-DBCA-4F73-8051-719608FC8E66}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.DellMobileConnect_3.2.9771.0_x64__0vhbc3ng4wbp0\app\DellMobileConnectClient.exe (SCREENOVATE TECHNOLOGIES LTD. -> Screenovate Technologies Ltd.)
FirewallRules: [{4FA292AA-B29E-4E90-8B2A-FA508475F03F}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.DellMobileConnect_3.2.9771.0_x64__0vhbc3ng4wbp0\app\DellMobileConnectClient.exe (SCREENOVATE TECHNOLOGIES LTD. -> Screenovate Technologies Ltd.)
FirewallRules: [UDP Query User{DFD50EFE-810A-4693-A44A-13CBB95CDCD9}C:\users\miekro s dallallio\appdata\local\programs\messenger\messenger.exe] => (Allow) C:\users\miekro s dallallio\appdata\local\programs\messenger\messenger.exe (Facebook, Inc. -> Facebook, Inc.)
FirewallRules: [TCP Query User{EDB48EF5-2F7D-4411-8E8F-0B22DFF452CC}C:\users\miekro s dallallio\appdata\local\programs\messenger\messenger.exe] => (Allow) C:\users\miekro s dallallio\appdata\local\programs\messenger\messenger.exe (Facebook, Inc. -> Facebook, Inc.)
FirewallRules: [{FF04AE69-A213-4049-862D-4B4611F7FCA6}] => (Allow) C:\Program Files\FileZilla FTP Client\filezilla.exe (Tim Kosse -> FileZilla Project)
FirewallRules: [{3C0935A2-E60C-4058-8138-EF3A8C4849B4}] => (Allow) C:\Program Files\FileZilla FTP Client\filezilla.exe (Tim Kosse -> FileZilla Project)
FirewallRules: [{A02A02BB-7BF2-47D4-86A0-61D89E77D609}] => (Allow) C:\Program Files\FileZilla FTP Client\filezilla.exe (Tim Kosse -> FileZilla Project)
FirewallRules: [{DC1622EE-776A-4607-9F87-D98D38690209}] => (Allow) C:\Program Files\FileZilla FTP Client\filezilla.exe (Tim Kosse -> FileZilla Project)
FirewallRules: [{F60F6DD5-DADB-470A-8B59-2C7859186C0E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{E10012F2-FD68-4D22-A071-C4A4AD188492}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{AA43B337-024A-4230-A12A-EA716F3E41E2}] => (Allow) C:\Users\miekro s dallallio\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{C0156AE5-46CA-4B67-92D1-C2A5CDEFB6CE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{18580501-D525-4C6A-886E-6D5D0B4A331F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{CBD518FD-9984-4A2B-B9B4-A1F79B6BE709}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5F3A7C60-8F1E-42B4-B2FC-D3ADC4E2FB80}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1C42C43D-D289-4E3F-B7F7-A7840DC1DB63}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{54D83BE6-9B6E-41FC-9486-5B2668ABD69F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{3791031B-20F7-40E3-AC13-6E7591B042EC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B0E60B91-5577-4D0F-989B-DB24EF1A216A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{2D82D8CC-B9CA-42A9-A696-7112EC15EAE8}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

11-04-2021 17:11:00 Scheduled Checkpoint
16-04-2021 08:54:07 Windows Modules Installer

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (04/16/2021 10:48:14 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Microsoft.Photos.exe version 2020.20120.4004.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 3764

Start Time: 01d7317ae793beca

Termination Time: 4294967295

Application Path: C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2020.20120.4004.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe

Report Id: e4b71365-0758-4595-a7b4-9e8a643634e6

Faulting package full name: Microsoft.Windows.Photos_2020.20120.4004.0_x64__8wekyb3d8bbwe

Faulting package-relative application ID: App

Hang type: Quiesce

Error: (04/14/2021 05:42:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: invcol.exe, version: 0.0.0.0, time stamp: 0x6069d067
Faulting module name: icsvc32.dll, version: 9.5.1.1, time stamp: 0x6069d065
Exception code: 0xc0000005
Fault offset: 0x0000207c
Faulting process id: 0x20a0
Faulting application start time: 0x01d731770a9a4a04
Faulting application path: C:\WINDOWS\TEMP\inv1C49_tmp\invcol.exe
Faulting module path: C:\WINDOWS\TEMP\inv1C49_tmp\icsvc32.dll
Report Id: 7bc78bde-fa22-4d26-a0a1-3a3a33d42f59
Faulting package full name:
Faulting package-relative application ID:

Error: (04/14/2021 05:42:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: invcol.exe, version: 0.0.0.0, time stamp: 0x6069d067
Faulting module name: icsvc32.dll, version: 9.5.1.1, time stamp: 0x6069d065
Exception code: 0xc0000005
Fault offset: 0x0000207c
Faulting process id: 0x3204
Faulting application start time: 0x01d7317704fe75ff
Faulting application path: C:\WINDOWS\TEMP\invF662_tmp\invcol.exe
Faulting module path: C:\WINDOWS\TEMP\invF662_tmp\icsvc32.dll
Report Id: 3d3d3c61-69cc-4969-afe8-a2a0c3744937
Faulting package full name:
Faulting package-relative application ID:

Error: (04/14/2021 05:35:39 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance.  hr = 0x8007045b, A system shutdown is in progress.
.

Error: (04/14/2021 05:35:39 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.
]

Error: (04/14/2021 05:35:39 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance.  hr = 0x8007045b, A system shutdown is in progress.
.

Error: (04/14/2021 05:35:39 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.
]

Error: (04/14/2021 05:34:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: AUDIODG.EXE, version: 10.0.19041.804, time stamp: 0x985b4154
Faulting module name: MaxxAudioRender64.dll, version: 7.5.5.0, time stamp: 0x58e5e07b
Exception code: 0xc0000005
Fault offset: 0x0000000000128076
Faulting process id: 0x353c
Faulting application start time: 0x01d72fe46b041d75
Faulting application path: C:\WINDOWS\system32\AUDIODG.EXE
Faulting module path: C:\WINDOWS\system32\MaxxAudioRender64.dll
Report Id: eee0d0ae-9265-4ec5-bb0f-01793dd49910
Faulting package full name:
Faulting package-relative application ID:


System errors:
=============
Error: (04/16/2021 08:46:24 AM) (Source: DCOM) (EventID: 10010) (User: MARLOWE)
Description: The server microsoft.windowscommunicationsapps_16005.13426.20688.0_x64__8wekyb3d8bbwe!microsoft.windowslive.calendar.AppXwkn9j84yh1kvnt49k5r8h6y1ecsv09hs.mca did not register with DCOM within the required timeout.

Error: (04/16/2021 08:46:12 AM) (Source: DCOM) (EventID: 10010) (User: MARLOWE)
Description: The server Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca did not register with DCOM within the required timeout.

Error: (04/15/2021 06:26:28 PM) (Source: DCOM) (EventID: 10010) (User: MARLOWE)
Description: The server Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca did not register with DCOM within the required timeout.

Error: (04/15/2021 11:18:46 AM) (Source: DCOM) (EventID: 10010) (User: MARLOWE)
Description: The server Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca did not register with DCOM within the required timeout.

Error: (04/14/2021 06:25:08 PM) (Source: DCOM) (EventID: 10010) (User: MARLOWE)
Description: The server Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca did not register with DCOM within the required timeout.

Error: (04/14/2021 06:07:59 PM) (Source: DCOM) (EventID: 10010) (User: MARLOWE)
Description: The server Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca did not register with DCOM within the required timeout.

Error: (04/14/2021 05:43:00 PM) (Source: DCOM) (EventID: 10010) (User: MARLOWE)
Description: The server Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca did not register with DCOM within the required timeout.

Error: (04/14/2021 05:39:27 PM) (Source: DCOM) (EventID: 10010) (User: MARLOWE)
Description: The server Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca did not register with DCOM within the required timeout.


Windows Defender:
================
Date: 2021-04-15 18:00:34
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2021-04-15 17:36:57
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2021-04-14 10:29:07
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2021-04-12 06:30:22
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2021-04-11 05:19:38
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

CodeIntegrity:
===============
Date: 2021-04-07 08:38:38
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Mozilla Firefox\firefox.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.


==================== Memory info ===========================

BIOS: Dell Inc. 1.15.0 12/29/2020
Motherboard: Dell Inc. 0T9FN2
Processor: Intel(R) Core(TM) i5-8250U CPU @ 1.60GHz
Percentage of memory in use: 88%
Total physical RAM: 8025.32 MB
Available physical RAM: 960.4 MB
Total Virtual: 14681.32 MB
Available Virtual: 1559.45 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:929.93 GB) (Free:758.57 GB) NTFS

\\?\Volume{10e1dbc6-aa4b-4b39-a845-b3bd78b45006}\ (WINRETOOLS) (Fixed) (Total:0.97 GB) (Free:0.52 GB) NTFS
\\?\Volume{38e2abf7-ef9a-4e3a-8161-27caea9242f5}\ (ESP) (Fixed) (Total:0.48 GB) (Free:0.45 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 452B79D5)

Partition: GPT.

==================== End of Addition.txt =======================

Post #2

Hi and welcome
 
One thing to point out was that you have recently had a system update
=================== Restore Points =========================

11-04-2021 17:11:00 Scheduled Checkpoint
16-04-2021 08:54:07 Windows Modules Installer
Is it possible this is at a time your system slowed down?

Other then that what we can do is to tidy up a few things and run a few simple scans.


Start Farbar Recovery Scan Tool with Administrator privileges
(Right click on the FRST icon and select Run as administrator)

highlight on the text below and select Copy.
beginning with Start:: and finishing with End::
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Highlight the entire content of the quote box below and select Copy.

 

Start::
CloseProcesses:
CreateRestorePoint:
ContextMenuHandlers1: [ClsContextEx] -> {5E814CF3-3DF9-4D53-BCCC-94079E571569} => C:\Program Files (x86)\IDriveWindows\IDriveEContextMenuExt.dll -> No File
ContextMenuHandlers1: [IDriveEContextMenuExt] -> {5E814CF3-3DF9-4D53-BCCC-94079E571569} => C:\Program Files (x86)\IDriveWindows\IDriveEContextMenuExt.dll -> No File
ContextMenuHandlers2: [IDriveEContextMenuExt] -> {5E814CF3-3DF9-4D53-BCCC-94079E571569} => C:\Program Files (x86)\IDriveWindows\IDriveEContextMenuExt.dll -> No File
ContextMenuHandlers4: [ClsContextEx] -> {5E814CF3-3DF9-4D53-BCCC-94079E571569} => C:\Program Files (x86)\IDriveWindows\IDriveEContextMenuExt.dll -> No File
ContextMenuHandlers4: [IDriveEContextMenuExt] -> {5E814CF3-3DF9-4D53-BCCC-94079E571569} => C:\Program Files (x86)\IDriveWindows\IDriveEContextMenuExt.dll -> No File
ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
EmptyTemp:
C:\Windows\Temp\*.*
End::

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Start FRST (FRST64) with Administrator privileges
Press the Fix button. FRST will process the lines copied above from the clipboard.
When finished, a log file Fixlog.txt will pop up and saved in the same location the tool was ran from.

Please copy and paste its contents in your next reply.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Download and run AdwCleaner

Download AdwCleaner from here and save it to your desktop.
you can download AdwCleaner here: https://malwarebytes.com/adwcleaner

  • run AdwCleaner by clicking on Scan Now
  • when it has finished, leave everything that was found checked, (ticked), then click on Clean and Repair
  • if it asks to reboot, allow the reboot
  • on reboot, click on View Log File; please attach the content of the log to your next reply.

============================================

Run Malwarebytes Anti-Malware

You may have Malwarebytes Anti-Malware installed but if not, you can download it from here:

  • run the program
  • click on the ‘Dashboard’ to make sure everything is up to date, (it is not necessary to upgrade to the premium version of MBAM)
  • click on the ‘Scan’ tab, (directly below the Dashboard tab)
  • select the Threat Scan option
  • slick the Scan Now button
  • Threat Scan will begin
  • when the scan has completed and if malware was found, click the Quarantine Selected button to allow MBAM to quarantine what was found
  • if prompted to restart the computer, close all other programs and click Yes to restart your computer
  • once you are back at your desktop, open MBAM once more
  • click on the ‘Reports’ tab
  • double-click on the most recent Scan Report
  • click on Export, then Copy to Clipboard

Logs to include with the next post:

Fixlog.txt
AdwCleaner log
Mbam.txt

Post #3

Hello

Think I've got a glitch.

But first, no, I believe these problems far predate the latest upgrade in Windows.
I perceive you are in Europe by the way you write your dates.  I am in upstate New York.  I suppose we'll sync up here and there.

I re-downloaded Farbar and clicked on the icon.  A choice for Administrator failed to appear.
I then copied the section of code and took a guess and pasted it into the blank box in the Farbar window.
When it had finished, there was no resultant Fixlog file, just FRST and Addition.

I'm missing something!

 

I'll wait for clarification from you before I proceed.

Thanks!

Post #4

Hello
Think I've got a glitch.
But first, no, I believe these problems far predate the latest upgrade in Windows.
I perceive you are in Europe by the way you write your dates.  I am in upstate New York.  I suppose we'll sync up here and there.

I re-downloaded Farbar and clicked on the icon.  A choice for Administrator failed to appear.
I then copied the section of code and took a guess and pasted it into the blank box in the Farbar window.
When it had finished, there was no resultant Fixlog file, just FRST and Addition.
I'm missing something!
 
I'll wait for clarification from you before I proceed.

Thanks!

I'm just a southern girl from Tennessee,  Hiya there!
 
OK.  let me see if I can re-word it to make better sense.
 
Open Farbar Recovery Scan Tool,  let it sit there don't click on anything
 
Now, go to the script I created - highlight on the text  and select Copy. (This will save it to clipboard.)
beginning with Start:: and finishing with End::

Now go back to Farbar Recovery Scan Tool and click on the FIX button no need to paste it inside the box.

When finished, a log file Fixlog.txt will pop up and saved in the same location the tool was ran from.

Post #5

Ok, then.  Thank you for more specific instructions.  People never understand how they need to spell things out for me!  This is not from total inexperience….our first computer was a Commodore 64!
I am always wishing I could be Prof. Henry Higgins, who could tell after a few words which side of which block of which street (in London) a person hailed from.  I'm not!

 

 

 

Fix result of Farbar Recovery Scan Tool (x64) Version: 17-04-2021
Ran by [removed] (18-04-2021 21:20:06) Run:1
Running from C:\Users\[removed]\Downloads
[removed] Boot Mode: Normal
==============================================

fixlist content:
*****************
CloseProcesses:
CreateRestorePoint:
ContextMenuHandlers1: [ClsContextEx] -> {5E814CF3-3DF9-4D53-BCCC-94079E571569} => C:\Program Files (x86)\IDriveWindows\IDriveEContextMenuExt.dll -> No File
ContextMenuHandlers1: [IDriveEContextMenuExt] -> {5E814CF3-3DF9-4D53-BCCC-94079E571569} => C:\Program Files (x86)\IDriveWindows\IDriveEContextMenuExt.dll -> No File
ContextMenuHandlers2: [IDriveEContextMenuExt] -> {5E814CF3-3DF9-4D53-BCCC-94079E571569} => C:\Program Files (x86)\IDriveWindows\IDriveEContextMenuExt.dll -> No File
ContextMenuHandlers4: [ClsContextEx] -> {5E814CF3-3DF9-4D53-BCCC-94079E571569} => C:\Program Files (x86)\IDriveWindows\IDriveEContextMenuExt.dll -> No File
ContextMenuHandlers4: [IDriveEContextMenuExt] -> {5E814CF3-3DF9-4D53-BCCC-94079E571569} => C:\Program Files (x86)\IDriveWindows\IDriveEContextMenuExt.dll -> No File
ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
EmptyTemp:
C:\Windows\Temp\*.*

*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ClsContextEx => removed successfully
HKLM\Software\Classes\CLSID\{5E814CF3-3DF9-4D53-BCCC-94079E571569} => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\IDriveEContextMenuExt => removed successfully
HKLM\Software\Classes\Drive\ShellEx\ContextMenuHandlers\IDriveEContextMenuExt => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\ClsContextEx => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\IDriveEContextMenuExt => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\RecuvaShellExt => removed successfully
HKLM\Software\Classes\CLSID\{435E5DF5-2510-463C-B223-BDA47006D002} => removed successfully
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully

=========== "C:\Windows\Temp\*.*" ==========

C:\Windows\Temp\.ses => moved successfully
C:\Windows\Temp\AdobeARM.log => moved successfully
C:\Windows\Temp\AdobeARM_Helper.log => moved successfully
C:\Windows\Temp\af397ef28e484961ba48646a5d38cf54.db.ses => moved successfully
C:\Windows\Temp\ArmUI.ini => moved successfully
C:\Windows\Temp\ASPNETSetup_00000.log => moved successfully
C:\Windows\Temp\ASPNETSetup_00001.log => moved successfully
C:\Windows\Temp\chrome_installer.log => moved successfully
C:\Windows\Temp\DBUtil_2_3.Sys => moved successfully
C:\Windows\Temp\FXSAPIDebugLogFile.txt => moved successfully
C:\Windows\Temp\FXSTIFFDebugLogFile.txt => moved successfully
C:\Windows\Temp\mat-debug-1084.log => moved successfully
C:\Windows\Temp\mat-debug-11144.log => moved successfully
C:\Windows\Temp\mat-debug-12180.log => moved successfully
C:\Windows\Temp\mat-debug-12936.log => moved successfully
C:\Windows\Temp\mat-debug-13884.log => moved successfully
C:\Windows\Temp\mat-debug-16528.log => moved successfully
C:\Windows\Temp\mat-debug-1940.log => moved successfully
C:\Windows\Temp\mat-debug-2688.log => moved successfully
C:\Windows\Temp\mat-debug-4688.log => moved successfully
C:\Windows\Temp\mat-debug-832.log => moved successfully
C:\Windows\Temp\mat-debug-9352.log => moved successfully
C:\Windows\Temp\MaxxAudioInstaller_2.7.9233.1_18_3_2021.log => moved successfully
C:\Windows\Temp\MaxxAudioInstaller_2.7.9233.1_18_3_2021_1.log => moved successfully
C:\Windows\Temp\mbamiservice.log => moved successfully
C:\Windows\Temp\MBAMSERVICE.LOG => moved successfully
C:\Windows\Temp\mb_errors12320.log => moved successfully
C:\Windows\Temp\mb_errors12816.log => moved successfully
C:\Windows\Temp\mb_errors5636.log => moved successfully
C:\Windows\Temp\MpCmdRun.log => moved successfully
C:\Windows\Temp\MpSigStub.log => moved successfully
C:\Windows\Temp\msedge_installer.log => moved successfully
C:\Windows\Temp\tem424.tmp => moved successfully
C:\Windows\Temp\tem8BCC.tmp => moved successfully
C:\Windows\Temp\UpdHealthTools.msi => moved successfully

========= End -> "C:\Windows\Temp\*.*" ========


=========== EmptyTemp: ==========

BITS transfer queue => 11296768 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 40164216 B
Java, Flash, Steam htmlcache => 441 B
Windows/system/drivers => 379 B
Edge => 472074 B
Chrome => 402174775 B
Firefox => 235055294 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 687149 B
systemprofile32 => 687149 B
LocalService => 687149 B
NetworkService => 771325 B
miekro s dallallio => 221992899 B

RecycleBin => 128618 B
EmptyTemp: => 871.8 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 21:28:31 ====

 

 

 

# ——————————-
# Malwarebytes AdwCleaner 8.2.0.0
# ——————————-
# Build:    03-22-2021
# Database: 2021-04-08.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# ——————————-
# Mode: Clean
# ——————————-
# Start:    04-18-2021
# Duration: 00:00:13
# OS:       Windows 10 Home
# Cleaned:  19
# Awaiting reboot:4
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted       HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\dotomi.com
Deleted       HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\dotomi.com

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

Deleted       Preinstalled.DellQuickset   Folder   C:\Program Files\DELL\QUICKSET
Deleted       Preinstalled.DellQuickset   Folder   C:\ProgramData\DELL\QUICKSET
Deleted       Preinstalled.DellQuickset   Registry   HKLM\Software\Classes\CLSID\{518741A2-FEDB-4917-934D-28BE560D45BA}
Deleted       Preinstalled.DellQuickset   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Run|QuickSet
Deleted       Preinstalled.DellQuickset   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{87CF757E-C1F1-4D22-865C-00C6950B5258}
Deleted       Preinstalled.DellSupportAssistAgent   Folder   C:\Program Files\DELL\SUPPORTASSISTAGENT
Deleted       Preinstalled.DellSupportAssistAgent   Folder   C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DELL\SUPPORTASSIST
Deleted       Preinstalled.DellUpdateforWindows10   Folder   C:\Program Files (x86)\DELL\UPDATE
Deleted       Preinstalled.DellUpdateforWindows10   Folder   C:\ProgramData\DELL\UPDATE
Deleted       Preinstalled.DellUpdateforWindows10   Folder   C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DELL\UPDATE
Deleted       Preinstalled.SmartByte   Registry   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BA49EBC6-DA42-410D-9A6F-840938387390}
Deleted       Preinstalled.SmartByte   Registry   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SmartByte Telemetry
Deleted       Preinstalled.SmartByte   Task   C:\Windows\System32\Tasks\SMARTBYTE TELEMETRY
Needs Reboot  Preinstalled.DellDigitalDelivery   Folder   C:\Program Files (x86)\DELL DIGITAL DELIVERY
Needs Reboot  Preinstalled.DellUpdateforWindows10   Folder   C:\Program Files (x86)\DELL\UPDATESERVICE
Needs Reboot  Preinstalled.DellUpdateforWindows10   Folder   C:\ProgramData\DELL\UPDATESERVICE
Needs Reboot  Preinstalled.SmartByte   Folder   C:\Program Files\RIVET NETWORKS


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

***** Reboot Required to Complete *****


***** [ Folders ] *****

Cleaning failed   C:\Program Files (x86)\DELL DIGITAL DELIVERY
Cleaning failed   C:\Program Files (x86)\DELL\UPDATESERVICE
Cleaning failed   C:\Program Files\RIVET NETWORKS
Cleaning failed   C:\ProgramData\DELL\UPDATESERVICE

*************************

AdwCleaner[S00].txt - [3454 octets] - [18/04/2021 21:46:39]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

 

 

 

Post #6

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 4/18/21
Scan Time: 10:24 PM
Log File: 5cac93ba-a0b6-11eb-9df8-9c305bd3ae4a.json

-Software Information-
Version: 4.3.0.98
Components Version: 1.0.1251
Update Package Version: 1.0.39549
License: Premium

-System Information-
OS: Windows 10 (Build 19042.928)
CPU: x64
File System: NTFS
User: Marlowe\miekro s dallallio

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 293826
Threats Detected: 0
Threats Quarantined: 0
Time Elapsed: 5 min, 54 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 0
(No malicious items detected)

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)

Post #7

Performance any  better?
Scans are actually not finding much.

ESET Online Scanner

Download ESET Online Scanner and save it to your desktop.

 

  • Right-click on esetonlinescanner_enu.exe and select Run as Administrator.
  • When the tool opens, click Get Started.
  • Read and accept the license agreement.
  • At the Welcome to ESET Online Scanner window, click Get Started.
  • Select whether you would like to send anonymous data to ESET.
  • Note: if you see the "Welcome Back to ESET Online Scanner" screen, click Computer Scan > Full Scan.
  • Click on the Full Scan option.
  • Select Enable ESET to detect and remove potentially unwanted applications, then click Start scan.
  • ESET will now begin scanning your computer. This may take some time.
  • When the scan is finished and if threats have been detected, select Save scan log. Save it to your desktop as eset.txt. Click on Continue.
  • ESET Online Scanner may ask if you'd like to turn on the Periodic Scan feature. Click on Continue.
  • On the next screen, you can leave feedback about the program if you wish. Check the box for Delete application data on closing. If you left feedback, click Submit and continue. If not, Close without feedback.
  • Open the scan log on your desktop (eset.txt) and copy and paste its contents into your next reply.

—————————

Post #8

Good morning

 

Here are a couple funky things going on.

 

A) sleep and bootup

Sometimes I come back to the computer and it has gone to sleep or whatever it is, and all I have to do is touch the spacebar.  Normally it comes up with a picture, then some big print with the date.  I hit the spacebar again and it shows me the password box.  Hit enter and it boots up to the desktop.

Sometimes, I suppose when i've been gone longer, I have to click the power button to start the process.  This model Dell has a very annoying, side-mounted, low-profile little bar.  It's hard to feel it, and I have to make sure I have the end of my fingernail on it to click it's very low travel distance.  Sometimes I am not sure whether I have clicked it or not.
Now—sometimes I click the button and nothing happens.  I tend to wait a couple of minutes and try again.  But at this point "nothing" continues to happen.  I'm locked into a cycle of nothing; finally I hold the power button down.  I can hear the machine turn off.  Then I click it again and it boots up, dumping anything I had open.

B) Facebook.

Well…FB has been really odd for months.  For instance, I now have to sign in a lot.  When I do, I click the button to sign in by stored info.  Up comes a window saying my request cannot go through due to an error and they are working to fix it as fast as they can.  I ignore this and click again and it signs me in.  Occasionally I get a different notice, in red, that my sign-in information cannot be matched with any account; locate my account and sign in, or create an account.  I ignore it and sign in a second time, successfully. 
 

When I type comments, usually to other people's posts, sometimes, not always, what I'm typing stops mid-sentence, then a couple-few seconds later appears all at once.  (I mention this because on a previous computer—I think you attempted to help me with this—EVERYTHING visual, from typing to videos, had a "beat-beat-beat-pause"  rhythm.  Never figured that one out; the computer went down some time later.)

 

Thunderbird, the mail client, also goes into not responding, ans is generally very slow in responding to actions.


None of this seems to have changed.
I looked at what starts on bootup, took out Edge, which I do not use except it seems to be the default PDF reader.  There's not a lot else, but some of them are "processes" which I know nothing of.

—————

I'll run your latest instructions and report.

denno

Post #9

I don't think we're looking at any kind of a malware related problem here.

 

From what I gather, my opinion is Internal.

 

Few suggestions:

 

run System File Checker tool and check if it helps.

System File Checker is a utility in Windows that allows users to scan for corruptions in Windows system files and restore corrupted files.
https://support.microsoft.com/en-us/windows/using-system-file-checker-in-windows-10-365e0031-36b1-6031-f804-8fd86e0ef4ca

Try this when you have a little bit of free time and don't have to use the computer because it needs to run uninterrupted.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 

 

Go to Google, type in Dell (your computer name and number) this should take you to their web site, check around the page for Updates for your brand and model.

Let's see if any driver updates are listed there.

No need to do several, several might show up and could take all day.

Just remember to check back again in the future, this might help.

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

I use a free PDF reader, Adobe Reader, they have a pro version but for what I need I didn't download that.
Make sure to locate and uncheck McAfee Security Scan Plus and McAfee Safe Connect, unless of course you want these items. (Most don't)
https://get.adobe.com/reader/

 

I still need to know if that last scan found anything?

Post #10

4/21/2021 15:53:11 PM
Files scanned: 601160
Detected files: 73
Cleaned files: 73
Total scan time 05:08:29
Scan status: Finished


C:\Users\miekro s dallallio\Documents\Documents\001 My Documents\My Sites\dennisdasaro\backup\01 My Sites\NBwater\mainwebsite_html\index.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\001 My Documents\My Sites\dennisdasaro\Notes\E-MAIL ENCRYPTION.txt    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\001 My Documents\My Sites\dennisdasaro\bandindex.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\001 My Documents\My Sites\dennisdasaro\bandindexAAA.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\001 My Documents\My Sites\dennisdasaro\CDMP3.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\001 My Documents\My Sites\dennisdasaro\CDorder.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\001 My Documents\My Sites\dennisdasaro\contact.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\001 My Documents\My Sites\dennisdasaro\mailinglist.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\001 My Documents\My Sites\dennisdasaro\shakespeareband.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\My Sites\dennisdasaro\backup\01 My Sites\NBwater\mainwebsite_html\index.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\My Sites\dennisdasaro\Notes\E-MAIL ENCRYPTION.txt    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\My Sites\dennisdasaro\bandindex.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\My Sites\dennisdasaro\bandindexAAA.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\My Sites\dennisdasaro\CDMP3.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\My Sites\dennisdasaro\CDorder.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\My Sites\dennisdasaro\contact.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\My Sites\dennisdasaro\mailinglist.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\My Sites\dennisdasaro\shakespeareband.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\WEBWORK\dennisdasaro\backup\01 My Sites\NBwater\mainwebsite_html\index.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\WEBWORK\dennisdasaro\Notes\E-MAIL ENCRYPTION.txt    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\WEBWORK\dennisdasaro\bandindex.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\WEBWORK\dennisdasaro\bandindexAAA.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\WEBWORK\dennisdasaro\CDMP3.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\WEBWORK\dennisdasaro\CDorder.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\WEBWORK\dennisdasaro\contact.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\WEBWORK\dennisdasaro\mailinglist.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\WEBWORK\dennisdasaro\shakespeareband.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\WEBWORK\S + P\house.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\WEBWORK\S + P\index.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\WEBWORK\S + P\indexQ.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\WEBWORK\S + P\libraries.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\WEBWORK\S + P\press.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\WEBWORK\S + P\pressX.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\WEBWORK\S + P\recordings.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\WEBWORK\S + P\reviews.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\WEBWORK\S + P\schedule.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\WEBWORK\S + P\theme.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\WEBWORK\S + P\weddings.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents\WEBWORK\S + P\Xlinks.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents dl\My Sites\Agency\index.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents dl\My Sites\dennisdasaro\backup\01 My Sites\NBwater\mainwebsite_html\index.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents dl\My Sites\dennisdasaro\bandindex.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents dl\My Sites\dennisdasaro\bandindexAAA.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents dl\My Sites\dennisdasaro\CDMP3.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents dl\My Sites\dennisdasaro\CDorder.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\Documents dl\My Sites\dennisdasaro\contact.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\download user\Users\john\Documents\My Sites\S&P\httpdocs\schedule.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\Agency\index.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\dennisdasaro\backup\01 My Sites\NBwater\mainwebsite_html\index.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\dennisdasaro\bandindex.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\dennisdasaro\bandindexAAA.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\dennisdasaro\CDMP3.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\dennisdasaro\CDorder.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\dennisdasaro\contact.html    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\S&P\httpdocs\agency.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\S&P\httpdocs\album.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\S&P\httpdocs\bio.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\S&P\httpdocs\booking.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\S&P\httpdocs\bookingX.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\S&P\httpdocs\house.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\S&P\httpdocs\index.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\S&P\httpdocs\indexQ.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\S&P\httpdocs\libraries.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\S&P\httpdocs\press.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\S&P\httpdocs\pressX.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\S&P\httpdocs\recordings.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\S&P\httpdocs\reviews.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\S&P\httpdocs\schedule.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\S&P\httpdocs\theme.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\S&P\httpdocs\weddings.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Documents\My Sites\S&P\httpdocs\Xlinks.htm    JS/Tivso.Gen trojan    cleaned by deleting
C:\Users\miekro s dallallio\Downloads\FileZilla_3.49.1_win64_sponsored-setup.exe    Win32/FusionCore.BH potentially unwanted application    cleaned by deleting
C:\Users\miekro s dallallio\Downloads\rcsetup153.exe    Win32/Bundled.Toolbar.Google.D potentially unsafe application    cleaned by deleting

 

Post #11

OK, can see some documents were holding on to a few things.

 

How's the computer now?

 

Also, have you tried any of the other steps I recommended?

Post #12 last edited

Hello
I don't think there is much change in behavior here.

 

Trying that command prompt thingy….

I  get as far as right-click, and "run as administrator."  Nothing in particular happens.  Nothing I can select "yes" from.
I can open it and input the command, but it tells me I need elevated permission.

I'm looking at Accounts in Settings, and do not see any indication of my own account (the only one on this computer) so I can't change it to Administrator. 
Oh—-now looking under Your Information in Accounts and see myself listed as Administrator.

Anyhow, the online instructions don't seem to match what I am seeing.  (A frequent experience!)

Post #13

See if this is easier to follow.

[external image: EndqYRa.png]System File Checker (SFC)
Follow the instructions below to run a SFC scan on your system:

  • On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select [external image: Spcusrh.png]Run as Administrator
  • On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
  • On Windows 8.1 and Windows 10, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
  • Enter the command below and press on Enter;
    sfc /scannow
    Note: There's a space between "sfc" and "/scannow";
  • Let the scan run until the end (100%), then copy/paste in your next reply the message that is returned after;
  • ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    [external image: EndqYRa.png]Check Disk (chkdsk)
    Follow the instructions below to run a CHKDSK scan on your Windows partition;
  • On Windows Vista & 7, click on the Windows Start Menu, then enter cmd in the search box, right-click on the cmd icon and select Run as Administrator
  • On Windows 8, drag your cursor in the bottom-left corner, and right-click on the metro menu preview, then select Command Prompt (Admin);
  • On Windows 8.1, right click on the Windows logo in the bottom-left corner and select Command Prompt (Admin);
  • Enter the command chkdsk /r (there's a space between "chkdsk" and "/r") and press on Enter;
  • A message will be returned, stating that the drive cannot be locked because it's already in use, and you'll be asked if you want to schedule the scan for the next restart. Enter y and press on Enter;
  • Restart your computer, and the chkdsk scan will be launched automatically;
  • Once the chkdsk scan is complete and you're back in Windows, find the log in the Event Viewer and copy/paste it in your next reply;
  • WARNING: Depending on your hard drive (specs, free space, fragmentation, etc.) this scan can be relatively long to complete. Give it all the time it needs to finish. Do not interrupt it for any reason there is, or you might be damaging your drive in the process and make your Windows unbootable. It's suggested to let this scan run overnight or when you leave the house for a few hours (when you go to work for example). If you are running this scan on a laptop, don't forget to leave it plugged in;
     

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI