WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. Join 93098 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!

Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Powershell at Startup [Solved]

Started by ChadA , Nov 02 2021 05:53 PM

powershell BAUpdater startup

This topic is locked

12 replies to this topic

#1 ChadA

Authentic Member

Authentic Member
59 posts

Posted 02 November 2021 - 05:53 PM

At Startup, multiple instances of Windows Powershell open. I checked the Startup tab in Task Manager and it's disabled. I checked the Startup folder in Windows and it isn't there. I Googled the issue and came upon Microsoft's Autoruns (https://docs.microso...nloads/autoruns) and ran the utility. It found BAUpdater is opening it. Further Googling shows BAUpdater may be malware. Someone in the house has been playing free internet games and it's possible something came in that way. Can you help? Thanks!

FRST.txt:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02-11-2021

Ran by p (administrator) on DESKTOP-GN3POCI (02-11-2021 19:39:08)

Running from C:\Users\p\Downloads

Loaded Profiles: p

: Microsoft Windows 10 Home Version 21H1 19043.1288 (X64) Language: English (United States)

Default browser: Chrome

Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <50>

(INTEL CORP) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3370.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe

(INTEL CORP) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3370.0_x64__8j3eq9eme6ctt\IGCC.exe

(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxCUIService.exe

(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxEM.exe

(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_54b736e5be5b50b2\OneApp.IGCC.WinService.exe

(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHDCPSvc.exe

(Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub.exe <4>

(Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_agent.exe

(Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_updater.exe

(Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\logi_crashpad_handler.exe <2>

(McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe

(McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Microsoft Corporation -> Sysinternals - www.sysinternals.com) C:\Users\p\Downloads\Autoruns\Autoruns.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_3.2109.6305.0_x64__8wekyb3d8bbwe\Cortana.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20544.0_x64__8wekyb3d8bbwe\HxOutlook.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20544.0_x64__8wekyb3d8bbwe\HxTsr.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe\WinStore.App.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe <2>

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe

(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MsMpEng.exe

(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe

(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\FAX Utility\FUFAXRCV.exe

(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\FAX Utility\FUFAXSTM.exe

(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe

(SEIKO EPSON Corporation -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe

(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIKEE.EXE

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3952096 2020-03-11] (Logitech -> Logitech, Inc.)

HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [109324536 2021-03-13] (Microsoft Corporation -> Microsoft Corporation)

HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058880 2013-03-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [642664 2014-05-26] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863848 2014-05-26] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706288 2021-04-09] (Oracle America, Inc. -> Oracle Corporation)

HKU\S-1-5-21-439056766-392687001-687573123-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2340224 2021-10-31] (Microsoft Corporation -> Microsoft Corporation)

HKU\S-1-5-21-439056766-392687001-687573123-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\p\AppData\Local\Microsoft\Teams\Update.exe [2453704 2021-05-17] (Microsoft 3rd Party Application Component -> Microsoft Corporation)

HKU\S-1-5-21-439056766-392687001-687573123-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIKEE.EXE [298560 2013-09-11] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)

HKU\S-1-5-21-439056766-392687001-687573123-1001\...\Run: [LGHUB] => C:\Program Files\LGHUB\lghub.exe [136443968 2021-11-02] (Logitech Inc -> Logitech, Inc.)

HKU\S-1-5-21-439056766-392687001-687573123-1001\...\Run: [BAStartup] => C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell -ExecutionPolicy bypass -c "$env:COMPLUS_version='v4.0.30319';$w="$env:APPDATA"+'\Browser Assistant\';cd $w;&powershell{[Reflection.Assembly]::Loa (the data entry has 59 more characters). <==== ATTENTION

HKLM\...\Print\Monitors\EPSON WF-3620 Series 64MonitorBE: C:\Windows\system32\E_YLMBKEE.DLL [179712 2013-10-21] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)

HKLM\...\Print\Monitors\EpsonNet Print Port: C:\Windows\system32\enppmon.dll [558592 2012-11-12] (SEIKO EPSON CORPORATION) [File not signed]

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\95.0.4638.69\Installer\chrmstp.exe [2021-11-01] (Google LLC -> Google LLC)

GroupPolicy: Restriction ? <==== ATTENTION

Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {15046FD4-12FC-44B0-856D-A72C1E8A0162} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154456 2021-05-18] (Google LLC -> Google LLC)

Task: {1A3014CE-CBFE-449D-B987-8F02E7374AED} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154456 2021-05-18] (Google LLC -> Google LLC)

Task: {1BA88B8D-44B2-42E7-94B9-D85F64A7EE84} - System32\Tasks\Startup Scheduler => C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe -WindowStyle Hidden -ExecutionPolicy bypass -c "$w="$env:APPDATA"+'\Browser Assistant\';$f='S10.dll';if(-not (Test-Path -Path $f)){$f='S.dll'}[Reflection.Assembly]::Load([System.IO.File]::ReadAllBytes($w+$f));[E.S]::A('b')"

Task: {38E15A3C-2B24-4188-9D90-A628FC219433} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MpCmdRun.exe [901056 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {751182CC-8B51-409A-A976-9D992165A14F} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [3978624 2021-10-31] (Microsoft Corporation -> Microsoft Corporation)

Task: {83C660C4-AAB5-4F80-8D64-258B033C312C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8314256 2021-11-01] (Microsoft Corporation -> Microsoft Corporation)

Task: {8777A151-B103-4A70-A13C-C8670AEAF018} - System32\Tasks\EPSON WF-3620 Series Invitation {AE600EA8-9D9E-4C49-AA0C-6CFFB71AA954} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [679488 2013-02-27] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)

Task: {8E8233BD-CEB1-4AB7-BC2B-F3A5CAC3590A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8314256 2021-11-01] (Microsoft Corporation -> Microsoft Corporation)

Task: {968D964D-4487-4049-9969-40B36F76B823} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [4190800 2021-10-22] (Microsoft Corporation -> Microsoft Corporation)

Task: {9ABFECFC-E499-4F8C-8D3F-BDB4E13732C0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MpCmdRun.exe [901056 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {AAA58524-1D87-4F60-9317-44BBF2B17934} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MpCmdRun.exe [901056 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {B11325ED-EE6E-4493-8E64-2FA262F2BC2B} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138600 2021-11-01] (Microsoft Corporation -> Microsoft Corporation)

Task: {B48717B3-4FB3-4B82-8904-E75FD6B7C38A} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22655904 2021-10-25] (Microsoft Corporation -> Microsoft Corporation)

Task: {BAD1B631-A5C0-4847-A1B3-9856614C9826} - System32\Tasks\D Edge C Scheduler => C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe -WindowStyle Hidden -ExecutionPolicy bypass -c "$p='HKCU:\Software\Microsoft\Windows\CurrentVersion\Run';$k=Get-Item $p;foreach ($i in $k.Property){if($i -like '*MicrosoftEdgeAutoLaunch*'){$v=Get-ItemPropertyValue $p -Name $i;$v=$v.Replace('.exe','1.exe');Set-ItemProperty -Path $p -Name $i -Value $v} }" -> -WindowStyle Hidden -ExecutionPolicy bypass -c "$p='HKCU:\Software\Microsoft\Windows\CurrentVersion\Run';$k=Get-Item $p;foreach ($i in $k.Property){if($i -like '*MicrosoftEdgeAutoLaunch*'){$v=Get-ItemPropertyValue $p -Name $i;$v=$v.Replace('.exe','1.exe');Set-ItemProperty -Path $p -Name $i -Value $v (the data entry has 4 more characters).

Task: {C2115283-C0AE-44C0-82B7-B55C0421B4DA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MpCmdRun.exe [901056 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {CA01A050-E3C0-48C9-8E1B-8E18D66E8283} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138600 2021-11-01] (Microsoft Corporation -> Microsoft Corporation)

Task: {DAD83966-0E08-4749-BF7A-5624EB1551A6} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22655904 2021-10-25] (Microsoft Corporation -> Microsoft Corporation)

Task: {E0ABD7DF-BCFD-48EA-8397-40057C9EFBD7} - System32\Tasks\BA Scheduler => C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe -WindowStyle Hidden -ExecutionPolicy bypass -c "$w="$env:APPDATA"+'\Browser Assistant\';$f='Updater10.dll';if(-not (Test-Path -Path $f)){$f='Updater.dll'}[Reflection.Assembly]::Load([System.IO.File]::ReadAllBytes($w+$f));$i=new-object u.U;$i.ST()" <==== ATTENTION

Task: {EE9E8554-D71B-4675-B905-5B60338E795C} - System32\Tasks\EPSON WF-3620 Series Update {AE600EA8-9D9E-4C49-AA0C-6CFFB71AA954} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE [679488 2013-02-27] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\EPSON WF-3620 Series Invitation {AE600EA8-9D9E-4C49-AA0C-6CFFB71AA954}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE

Task: C:\Windows\Tasks\EPSON WF-3620 Series Update {AE600EA8-9D9E-4C49-AA0C-6CFFB71AA954}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSKEE.EXE:/EXE:{AE600EA8-9D9E-4C49-AA0C-6CFFB71AA954} /F:UpdateWORKGROUP\DESKTOP-GN3POCI$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 209.18.47.62 209.18.47.61 192.168.68.1

Tcpip\..\Interfaces\{6a275011-32d4-4891-b99c-e209c03e6290}: [DhcpNameServer] 209.18.47.62 209.18.47.61 192.168.68.1

Edge:

=======

Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]

Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]

Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]

Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]

Edge DefaultProfile: Profile 1

Edge Profile: C:\Users\p\AppData\Local\Microsoft\Edge\User Data\Default [2021-09-29]

Edge Profile: C:\Users\p\AppData\Local\Microsoft\Edge\User Data\Guest Profile [2021-10-15]

Edge Profile: C:\Users\p\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2021-10-16]

Edge Extension: (Pacman+ games) - C:\Users\p\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\bbgkehmnkogocffeplgkkaldbmaglcac [2021-09-28]

Edge Extension: (Norton Safe Web) - C:\Users\p\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\bdaafgjhhjkdplpffldcncdignokfkbo [2021-09-28]

Edge Extension: (Translator) - C:\Users\p\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\cdkmohnpfdennnemmjekmmiibgfddako [2021-09-28]

Edge Extension: (Captain America Wallpaper HD Custom New Tab) - C:\Users\p\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\cedcpiafbnkpedpphbmmfphpemimhhmn [2021-09-28]

Edge Extension: (AKColor) - C:\Users\p\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\efeoiofidbaaelodnlphnagalplaligg [2021-09-28]

Edge Extension: (Zoom) - C:\Users\p\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\gdndpilddmlahjjcfmknlmindbklnbel [2021-09-28]

Edge Extension: (Awesome Screenshot & Screen Recorder) - C:\Users\p\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\gpmljinohlbfgmeoaeceoajachkabijo [2021-09-28]

Edge Extension: (Microsoft Editor: Spelling & Grammar Checker) - C:\Users\p\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\hokifickgkhplphjiodbggjmoafhignh [2021-10-15]

Edge Extension: (Tetris Game) - C:\Users\p\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\iefpnmfngbceeldlcfmkancbginibhno [2021-09-28]

Edge Extension: (Weather Forecast) - C:\Users\p\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\kjdinijponjcepehoejigmpkppfocbnd [2021-09-28]

Edge Extension: (Classical Pac-Man Game) - C:\Users\p\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\lhbhbmjkcaidjcamnbbjfejbehgmmpcm [2021-09-28]

Edge Extension: (Emoji Keyboard) - C:\Users\p\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\migmbeklhhfnfklhpokmmdgnlgaglemk [2021-09-28]

Edge Extension: (AdBlock — best ad blocker) - C:\Users\p\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2021-10-15]

Edge Extension: (Scratch 3 Developer Tools) - C:\Users\p\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\nfhcllbnpcpjggojjjliodclgjadggmj [2021-10-15]

FireFox:

========

FF Plugin: @java.com/DTPlugin,version=11.291.2 -> C:\Program Files\Java\jre1.8.0_291\bin\dtplugin\npDeployJava1.dll [2021-05-23] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.291.2 -> C:\Program Files\Java\jre1.8.0_291\bin\plugin2\npjp2.dll [2021-05-23] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)

Chrome:

=======

CHR DefaultProfile: Default

CHR Profile: C:\Users\p\AppData\Local\Google\Chrome\User Data\Default [2021-11-02]

CHR Extension: (Slides) - C:\Users\p\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-05-18]

CHR Extension: (Docs) - C:\Users\p\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-05-18]

CHR Extension: (Google Drive) - C:\Users\p\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-05-18]

CHR Extension: (YouTube) - C:\Users\p\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-05-18]

CHR Extension: (Sheets) - C:\Users\p\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-05-18]

CHR Extension: (Google Docs Offline) - C:\Users\p\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-11-02]

CHR Extension: (AdBlock — best ad blocker) - C:\Users\p\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2021-10-14]

CHR Extension: (Boxel Rebound) - C:\Users\p\AppData\Local\Google\Chrome\User Data\Default\Extensions\iginnfkhmmfhlkagcmpgofnjhanpmklb [2021-08-07]

CHR Extension: (Chrome Web Store Payments) - C:\Users\p\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-05-18]

CHR Extension: (Gmail) - C:\Users\p\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-05-18]

CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]

CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8901968 2021-10-04] (BattlEye Innovations e.K. -> )

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12034464 2021-10-12] (Microsoft Corporation -> Microsoft Corporation)

S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [818304 2021-10-04] (EasyAntiCheat Oy -> Epic Games, Inc)

S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [553264 2021-10-19] (EasyAntiCheat Oy -> Epic Games, Inc.)

S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [16029472 2021-10-04] (Epic Games Inc. -> Epic Games, Inc.)

R2 EpsonCustomerResearchParticipation; C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe [678328 2018-06-11] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)

R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-17] (SEIKO EPSON Corporation -> Seiko Epson Corporation)

S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\21.205.1003.0003\FileSyncHelper.exe [3253120 2021-10-31] (Microsoft Corporation -> Microsoft Corporation)

R2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [11148864 2021-11-02] (Logitech Inc -> Logitech, Inc.)

R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [973040 2021-10-20] (McAfee, LLC -> McAfee, LLC)

S3 OfficeSvcManagerAddons; C:\Windows\system32\dllhost.exe /Processid:{2CA2E202-932F-4BA2-8771-195BB86398F5} [21312 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\21.205.1003.0003\OneDriveUpdaterService.exe [3721600 2021-10-31] (Microsoft Corporation -> Microsoft Corporation)

S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\NisSrv.exe [2872024 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MsMpEng.exe [128376 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (All) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 1394ohci; C:\Windows\System32\drivers\1394ohci.sys [266240 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S0 3ware; C:\Windows\System32\drivers\3ware.sys [107320 2019-12-07] (Microsoft Windows -> LSI)

R0 ACPI; C:\Windows\System32\drivers\ACPI.sys [809288 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S3 AcpiDev; C:\Windows\System32\drivers\AcpiDev.sys [23040 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R0 acpiex; C:\Windows\System32\Drivers\acpiex.sys [139792 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 acpipagr; C:\Windows\System32\drivers\acpipagr.sys [14336 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 AcpiPmi; C:\Windows\System32\drivers\acpipmi.sys [18432 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 acpitime; C:\Windows\System32\drivers\acpitime.sys [16384 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 Acx01000; C:\Windows\System32\drivers\Acx01000.sys [415232 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [1135416 2019-12-07] (Microsoft Windows -> PMC-Sierra)

R1 AFD; C:\Windows\system32\drivers\afd.sys [654648 2021-10-08] (Microsoft Windows -> Microsoft Corporation)

R1 afunix; C:\Windows\system32\drivers\afunix.sys [41984 2021-07-16] (Microsoft Windows -> Microsoft Corporation)

R1 afunix; C:\Windows\SysWOW64\drivers\afunix.sys [29696 2021-07-16] (Microsoft Windows -> Microsoft Corporation)

R1 ahcache; C:\Windows\System32\DRIVERS\ahcache.sys [292352 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S3 amdgpio2; C:\Windows\System32\drivers\amdgpio2.sys [18432 2019-12-07] (Microsoft Windows -> Advanced Micro Devices, Inc)

S3 amdi2c; C:\Windows\System32\drivers\amdi2c.sys [45568 2019-12-07] (Microsoft Windows -> Advanced Micro Devices, Inc)

S3 AmdK8; C:\Windows\System32\drivers\amdk8.sys [207160 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S3 AmdPPM; C:\Windows\System32\drivers\amdppm.sys [211256 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S0 amdsata; C:\Windows\System32\drivers\amdsata.sys [83256 2019-12-07] (Microsoft Windows -> Advanced Micro Devices)

S0 amdsbs; C:\Windows\System32\drivers\amdsbs.sys [259384 2019-12-07] (Microsoft Windows -> AMD Technologies Inc.)

S0 amdxata; C:\Windows\System32\drivers\amdxata.sys [26936 2019-12-07] (Microsoft Windows -> Advanced Micro Devices)

S3 AppID; C:\Windows\System32\drivers\appid.sys [214840 2021-09-19] (Microsoft Windows -> Microsoft Windows)

S3 applockerfltr; C:\Windows\System32\drivers\applockerfltr.sys [18432 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

S0 arcsas; C:\Windows\System32\drivers\arcsas.sys [131896 2019-12-07] (Microsoft Windows -> PMC-Sierra, Inc.)

S3 AsyncMac; C:\Windows\System32\drivers\asyncmac.sys [31232 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S0 atapi; C:\Windows\System32\drivers\atapi.sys [30032 2021-10-15] (Microsoft Windows -> Microsoft Corporation)

S0 b06bdrv; C:\Windows\System32\drivers\bxvbda.sys [533816 2019-12-07] (Microsoft Windows -> QLogic Corporation)

R1 bam; C:\Windows\System32\drivers\bam.sys [78136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R1 BasicDisplay; C:\Windows\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_65ab9a260dbf7467\BasicDisplay.sys [68608 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R1 BasicRender; C:\Windows\System32\DriverStore\FileRepository\basicrender.inf_amd64_df49c4daa6251397\BasicRender.sys [38912 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

U5 BattC; C:\Windows\System32\Drivers\BattC.sys [41272 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [9728 2019-12-07] (Microsoft Windows -> Windows ® Win 7 DDK provider)

R1 Beep; C:\Windows\System32\Drivers\Beep.sys [10240 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R2 bindflt; C:\Windows\system32\drivers\bindflt.sys [148816 2021-10-15] (Microsoft Windows -> Microsoft Corporation)

R3 bowser; C:\Windows\System32\DRIVERS\bowser.sys [117760 2021-07-16] (Microsoft Windows -> Microsoft Corporation)

S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]

S3 BthEnum; C:\Windows\System32\drivers\BthEnum.sys [113664 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]

S3 BthLEEnum; C:\Windows\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [106496 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S3 BthMini; C:\Windows\System32\drivers\BTHMINI.sys [45568 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

S3 BTHMODEM; C:\Windows\System32\drivers\bthmodem.sys [76800 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 BTHPORT; C:\Windows\System32\drivers\BTHport.sys [1563136 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

S3 BTHUSB; C:\Windows\System32\drivers\BTHUSB.sys [110592 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

S0 bttflt; C:\Windows\System32\drivers\bttflt.sys [43832 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 buttonconverter; C:\Windows\System32\drivers\buttonconverter.sys [44032 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 CAD; C:\Windows\System32\drivers\CAD.sys [66576 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S4 cdfs; C:\Windows\System32\DRIVERS\cdfs.sys [100864 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R1 cdrom; C:\Windows\System32\drivers\cdrom.sys [175616 2021-10-08] (Microsoft Windows -> Microsoft Corporation)

S0 cht4iscsi; C:\Windows\System32\drivers\cht4sx64.sys [319800 2019-12-07] (Microsoft Windows -> Chelsio Communications)

S3 cht4vbd; C:\Windows\System32\drivers\cht4vx64.sys [1853752 2019-12-07] (Microsoft Windows -> Chelsio Communications)

R1 CimFS; C:\Windows\System32\Drivers\CimFS.sys [98304 2021-10-08] (Microsoft Windows -> )

S3 circlass; C:\Windows\System32\drivers\circlass.sys [52224 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R2 CldFlt; C:\Windows\System32\drivers\cldflt.sys [491008 2021-10-15] (Microsoft Windows -> Microsoft Corporation)

R0 CLFS; C:\Windows\System32\drivers\CLFS.sys [407864 2021-10-15] (Microsoft Windows -> Microsoft Corporation)

S3 CmBatt; C:\Windows\System32\drivers\CmBatt.sys [36864 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R0 CNG; C:\Windows\System32\Drivers\cng.sys [746912 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

S4 cnghwassist; C:\Windows\System32\DRIVERS\cnghwassist.sys [40968 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 CompositeBus; C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_7500cffa210c6946\CompositeBus.sys [41984 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 condrv; C:\Windows\System32\drivers\condrv.sys [57144 2021-07-16] (Microsoft Windows -> Microsoft Corporation)

S1 dam; C:\Windows\System32\drivers\dam.sys [97096 2021-06-18] (Microsoft Windows -> Microsoft Corporation)

R1 Dfsc; C:\Windows\System32\Drivers\dfsc.sys [152064 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R0 disk; C:\Windows\System32\drivers\disk.sys [98624 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S3 dmvsc; C:\Windows\System32\drivers\dmvsc.sys [59192 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 drmkaud; C:\Windows\System32\drivers\drmkaud.sys [16128 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R1 DXGKrnl; C:\Windows\System32\drivers\dxgkrnl.sys [3814216 2021-10-15] (Microsoft Windows -> Microsoft Corporation)

S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3418936 2019-12-07] (Microsoft Windows -> QLogic Corporation)

S0 EhStorClass; C:\Windows\System32\drivers\EhStorClass.sys [95032 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S0 EhStorTcgDrv; C:\Windows\System32\drivers\EhStorTcgDrv.sys [124728 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 ErrDev; C:\Windows\System32\drivers\errdev.sys [15872 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 exfat; C:\Windows\System32\Drivers\exfat.sys [417616 2021-10-15] (Microsoft Windows -> Microsoft Corporation)

S3 fastfat; C:\Windows\System32\Drivers\fastfat.sys [425288 2021-10-15] (Microsoft Windows -> Microsoft Corporation)

S3 fdc; C:\Windows\System32\drivers\fdc.sys [34816 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R1 FileCrypt; C:\Windows\System32\drivers\filecrypt.sys [59392 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R0 FileInfo; C:\Windows\System32\drivers\fileinfo.sys [94736 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 Filetrace; C:\Windows\System32\drivers\filetrace.sys [40448 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 flpydisk; C:\Windows\System32\drivers\flpydisk.sys [28672 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R0 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [435000 2021-08-19] (Microsoft Windows -> Microsoft Corporation)

S3 FsDepends; C:\Windows\System32\drivers\FsDepends.sys [69968 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

U0 Fs_Rec; C:\Windows\System32\Drivers\Fs_Rec.sys [33592 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R0 fvevol; C:\Windows\System32\DRIVERS\fvevol.sys [800056 2021-06-18] (Microsoft Windows -> Microsoft Corporation)

S3 gencounter; C:\Windows\System32\drivers\vmgencounter.sys [23864 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 genericusbfn; C:\Windows\System32\DriverStore\FileRepository\genericusbfn.inf_amd64_53931f0ae21d6d2c\genericusbfn.sys [23040 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 GPIOClx0101; C:\Windows\System32\Drivers\msgpioclx.sys [183112 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R1 GpuEnergyDrv; C:\Windows\System32\drivers\gpuenergydrv.sys [8704 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 HdAudAddService; C:\Windows\System32\drivers\HdAudio.sys [430080 2020-08-08] (Microsoft Windows -> Microsoft Corporation)

R3 HDAudBus; C:\Windows\System32\drivers\HDAudBus.sys [139776 2021-07-10] (Microsoft Windows -> Microsoft Corporation)

S3 HidBatt; C:\Windows\System32\drivers\HidBatt.sys [39440 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 HidBth; C:\Windows\System32\drivers\hidbth.sys [120320 2020-08-08] (Microsoft Windows -> Microsoft Corporation)

S3 hidi2c; C:\Windows\System32\drivers\hidi2c.sys [57344 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 hidinterrupt; C:\Windows\System32\drivers\hidinterrupt.sys [55824 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 HidIr; C:\Windows\System32\drivers\hidir.sys [48640 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 hidspi; C:\Windows\System32\drivers\hidspi.sys [66560 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 HidUsb; C:\Windows\System32\drivers\hidusb.sys [44032 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S0 HpSAMD; C:\Windows\System32\drivers\HpSAMD.sys [64312 2019-12-07] (Microsoft Windows -> Hewlett-Packard Company)

R3 HTTP; C:\Windows\System32\drivers\HTTP.sys [1576264 2021-10-15] (Microsoft Windows -> Microsoft Corporation)

S4 hvcrash; C:\Windows\System32\drivers\hvcrash.sys [35128 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 hvservice; C:\Windows\System32\drivers\hvservice.sys [95056 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

S3 HwNClx0101; C:\Windows\System32\Drivers\mshwnclx.sys [30208 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S0 hwpolicy; C:\Windows\System32\drivers\hwpolicy.sys [33096 2020-08-08] (Microsoft Windows -> Microsoft Corporation)

S3 hyperkbd; C:\Windows\System32\drivers\hyperkbd.sys [27448 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 HyperVideo; C:\Windows\System32\drivers\HyperVideo.sys [41784 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 i8042prt; C:\Windows\System32\drivers\i8042prt.sys [118272 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 iagpio; C:\Windows\System32\drivers\iagpio.sys [36352 2019-12-07] (Microsoft Windows -> Intel® Corporation)

S3 iai2c; C:\Windows\System32\drivers\iai2c.sys [91136 2019-12-07] (Microsoft Windows -> Intel® Corporation)

S3 iaLPSS2i_GPIO2; C:\Windows\System32\drivers\iaLPSS2i_GPIO2.sys [79360 2019-12-07] (Microsoft Windows -> Intel Corporation)

S3 iaLPSS2i_GPIO2_BXT_P; C:\Windows\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [93184 2019-12-07] (Microsoft Windows -> Intel Corporation)

S3 iaLPSS2i_GPIO2_CNL; C:\Windows\System32\drivers\iaLPSS2i_GPIO2_CNL.sys [112128 2019-12-07] (Microsoft Windows -> Intel Corporation)

S3 iaLPSS2i_GPIO2_GLK; C:\Windows\System32\drivers\iaLPSS2i_GPIO2_GLK.sys [96256 2019-12-07] (Microsoft Windows -> Intel Corporation)

S3 iaLPSS2i_I2C; C:\Windows\System32\drivers\iaLPSS2i_I2C.sys [171520 2019-12-07] (Microsoft Windows -> Intel Corporation)

S3 iaLPSS2i_I2C_BXT_P; C:\Windows\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [175104 2019-12-07] (Microsoft Windows -> Intel Corporation)

S3 iaLPSS2i_I2C_CNL; C:\Windows\System32\drivers\iaLPSS2i_I2C_CNL.sys [177152 2019-12-07] (Microsoft Windows -> Intel Corporation)

S3 iaLPSS2i_I2C_GLK; C:\Windows\System32\drivers\iaLPSS2i_I2C_GLK.sys [177664 2019-12-07] (Microsoft Windows -> Intel Corporation)

S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [38128 2019-12-07] (Intel Corporation - Client Components Group -> Intel Corporation)

S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [113152 2019-12-07] (Microsoft Windows -> Intel Corporation)

S0 iaStorAVC; C:\Windows\System32\drivers\iaStorAVC.sys [884752 2019-12-07] (Microsoft Windows -> Intel Corporation)

S0 iaStorV; C:\Windows\System32\drivers\iaStorV.sys [412176 2019-12-07] (Microsoft Windows -> Intel Corporation)

S3 ibbus; C:\Windows\System32\drivers\ibbus.sys [558904 2019-12-07] (Microsoft Windows -> Mellanox)

R3 igfx; C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\igdkmd64.sys [27076848 2020-09-11] (Intel® pGFX 2020 -> Intel Corporation)

S3 IndirectKmd; C:\Windows\System32\drivers\IndirectKmd.sys [47104 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R3 IntcDAud; C:\Windows\System32\DriverStore\FileRepository\intcdaud.inf_amd64_1b570d7b9a790b1a\IntcDAud.sys [349936 2020-09-11] (Intel® pGFX 2020 -> Intel® Corporation)

S0 intelide; C:\Windows\System32\drivers\intelide.sys [19792 2021-10-15] (Microsoft Windows -> Microsoft Corporation)

R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [418800 2021-10-08] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation)

S3 intelpmax; C:\Windows\System32\drivers\intelpmax.sys [30720 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 intelppm; C:\Windows\System32\drivers\intelppm.sys [230728 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R0 iorate; C:\Windows\System32\drivers\iorate.sys [57168 2021-06-18] (Microsoft Windows -> Microsoft Corporation)

S3 IpFilterDriver; C:\Windows\System32\DRIVERS\ipfltdrv.sys [90112 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S3 IPMIDRV; C:\Windows\System32\drivers\IPMIDrv.sys [117584 2021-06-18] (Microsoft Windows -> Microsoft Corporation)

S3 IPNAT; C:\Windows\System32\drivers\ipnat.sys [225280 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 IPT; C:\Windows\System32\drivers\ipt.sys [59704 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S0 isapnp; C:\Windows\System32\drivers\isapnp.sys [22864 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

S3 iScsiPrt; C:\Windows\System32\drivers\msiscsi.sys [293176 2021-08-19] (Microsoft Windows -> Microsoft Corporation)

S0 ItSas35i; C:\Windows\System32\drivers\ItSas35i.sys [172344 2019-12-07] (Microsoft Windows -> Avago Technologies)

R3 kbdclass; C:\Windows\System32\drivers\kbdclass.sys [71480 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 kbdhid; C:\Windows\System32\drivers\kbdhid.sys [46592 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 kdnic; C:\Windows\System32\drivers\kdnic.sys [33296 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R0 KSecDD; C:\Windows\System32\Drivers\ksecdd.sys [147256 2021-10-08] (Microsoft Windows -> Microsoft Corporation)

R0 KSecPkg; C:\Windows\System32\Drivers\ksecpkg.sys [180048 2021-10-15] (Microsoft Windows -> Microsoft Corporation)

R3 ksthunk; C:\Windows\system32\drivers\ksthunk.sys [29696 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 LGVirHid; C:\Windows\system32\drivers\LGVirHid.sys [26008 2018-10-05] (Logitech Inc -> Logitech Inc.)

R2 lltdio; C:\Windows\System32\drivers\lltdio.sys [72704 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 logi_joy_bus_enum; C:\Windows\system32\drivers\logi_joy_bus_enum.sys [37200 2021-05-23] (Logitech Inc -> Logitech)

R3 logi_joy_vir_hid; C:\Windows\system32\drivers\logi_joy_vir_hid.sys [25928 2021-05-23] (Logitech Inc -> Logitech)

R3 logi_joy_xlcore; C:\Windows\system32\drivers\logi_joy_xlcore.sys [66896 2021-05-23] (Logitech Inc -> Logitech)

S0 LSI_SAS; C:\Windows\System32\drivers\lsi_sas.sys [108856 2019-12-07] (Microsoft Windows -> LSI Corporation)

S0 LSI_SAS2i; C:\Windows\System32\drivers\lsi_sas2i.sys [124216 2019-12-07] (Microsoft Windows -> LSI Corporation)

S0 LSI_SAS3i; C:\Windows\System32\drivers\lsi_sas3i.sys [135992 2019-12-07] (Microsoft Windows -> Avago Technologies)

S0 LSI_SSS; C:\Windows\System32\drivers\lsi_sss.sys [82744 2019-12-07] (Microsoft Windows -> LSI Corporation)

R2 luafv; C:\Windows\system32\drivers\luafv.sys [140800 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S3 mausbhost; C:\Windows\System32\drivers\mausbhost.sys [537608 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 mausbip; C:\Windows\System32\drivers\mausbip.sys [64016 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 MbbCx; C:\Windows\System32\drivers\MbbCx.sys [391168 2021-07-10] (Microsoft Windows -> Microsoft Corporation)

S0 megasas; C:\Windows\System32\drivers\megasas.sys [59704 2019-12-07] (Microsoft Windows -> Avago Technologies)

S0 megasas2i; C:\Windows\System32\drivers\MegaSas2i.sys [81720 2019-12-07] (Microsoft Windows -> Avago Technologies)

S0 megasas35i; C:\Windows\System32\drivers\megasas35i.sys [105480 2019-12-07] (Microsoft Windows -> Avago Technologies)

S0 megasr; C:\Windows\System32\drivers\megasr.sys [575800 2019-12-07] (Microsoft Windows -> LSI Corporation, Inc.)

S3 Microsoft_Bluetooth_AvrcpTransport; C:\Windows\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys [65024 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 mlx4_bus; C:\Windows\System32\drivers\mlx4_bus.sys [1131320 2019-12-07] (Microsoft Windows -> Mellanox)

R2 MMCSS; C:\Windows\system32\drivers\mmcss.sys [53248 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S3 Modem; C:\Windows\System32\drivers\modem.sys [47104 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R3 monitor; C:\Windows\System32\drivers\monitor.sys [83968 2021-08-19] (Microsoft Windows -> Microsoft Corporation)

R3 mouclass; C:\Windows\System32\drivers\mouclass.sys [67600 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 mouhid; C:\Windows\System32\drivers\mouhid.sys [35328 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R0 mountmgr; C:\Windows\System32\drivers\mountmgr.sys [110392 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 mpsdrv; C:\Windows\System32\drivers\mpsdrv.sys [80896 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 MRxDAV; C:\Windows\system32\drivers\mrxdav.sys [157696 2021-10-08] (Microsoft Windows -> Microsoft Corporation)

R3 mrxsmb; C:\Windows\System32\DRIVERS\mrxsmb.sys [577872 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

R2 mrxsmb10; C:\Windows\System32\DRIVERS\mrxsmb10.sys [307712 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R3 mrxsmb20; C:\Windows\System32\DRIVERS\mrxsmb20.sys [265016 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

S3 MsBridge; C:\Windows\System32\drivers\bridge.sys [127488 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R1 Msfs; C:\Windows\System32\Drivers\Msfs.sys [44048 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 msgpiowin32; C:\Windows\System32\drivers\msgpiowin32.sys [56120 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 mshidkmdf; C:\Windows\System32\drivers\mshidkmdf.sys [8192 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 mshidumdf; C:\Windows\System32\drivers\mshidumdf.sys [12288 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R0 msisadrv; C:\Windows\System32\drivers\msisadrv.sys [20280 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

S3 MSKSSRV; C:\Windows\System32\drivers\MSKSSRV.sys [34816 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R2 MsLldp; C:\Windows\System32\drivers\mslldp.sys [78848 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 MSPCLOCK; C:\Windows\System32\drivers\MSPCLOCK.sys [11264 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 MSPQM; C:\Windows\System32\drivers\MSPQM.sys [11264 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 MsQuic; C:\Windows\System32\drivers\msquic.sys [322376 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S3 MsRPC; C:\Windows\System32\Drivers\MsRPC.sys [382800 2021-10-15] (Microsoft Windows -> Microsoft Corporation)

R1 mssmbios; C:\Windows\System32\drivers\mssmbios.sys [47928 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 MSTEE; C:\Windows\System32\drivers\MSTEE.sys [12288 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 MTConfig; C:\Windows\System32\drivers\MTConfig.sys [17920 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R0 Mup; C:\Windows\System32\Drivers\mup.sys [132920 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S0 mvumis; C:\Windows\System32\drivers\mvumis.sys [63800 2019-12-07] (Microsoft Windows -> Marvell Semiconductor, Inc.)

R3 NativeWifiP; C:\Windows\System32\DRIVERS\nwifi.sys [758272 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

S3 ndfltr; C:\Windows\System32\drivers\ndfltr.sys [146232 2019-12-07] (Microsoft Windows -> Mellanox)

R0 NDIS; C:\Windows\System32\drivers\ndis.sys [1478960 2021-08-19] (Microsoft Windows -> Microsoft Corporation)

R1 NdisCap; C:\Windows\System32\drivers\ndiscap.sys [54272 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 NdisImPlatform; C:\Windows\System32\drivers\NdisImPlatform.sys [135168 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R3 NdisTapi; C:\Windows\System32\DRIVERS\ndistapi.sys [28672 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R3 Ndisuio; C:\Windows\System32\drivers\ndisuio.sys [70656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [23040 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 NdisWan; C:\Windows\System32\drivers\ndiswan.sys [212992 2021-08-19] (Microsoft Windows -> Microsoft Corporation)

S3 ndiswanlegacy; C:\Windows\System32\DRIVERS\ndiswan.sys [212992 2021-08-19] (Microsoft Windows -> Microsoft Corporation)

S3 NDKPing; C:\Windows\System32\drivers\NDKPing.sys [72720 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 ndproxy; C:\Windows\System32\DRIVERS\NDProxy.sys [93696 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R2 Ndu; C:\Windows\System32\drivers\Ndu.sys [131584 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [208384 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

R1 NetBIOS; C:\Windows\System32\drivers\netbios.sys [64312 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R1 NetBT; C:\Windows\System32\DRIVERS\netbt.sys [341504 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S3 netvsc; C:\Windows\System32\drivers\netvsc.sys [250192 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R1 Npfs; C:\Windows\System32\Drivers\Npfs.sys [87568 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R1 npsvctrig; C:\Windows\System32\drivers\npsvctrig.sys [27648 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R1 nsiproxy; C:\Windows\System32\drivers\nsiproxy.sys [48640 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R3 Ntfs; C:\Windows\System32\Drivers\Ntfs.sys [2850616 2021-10-08] (Microsoft Windows -> Microsoft Corporation)

R1 Null; C:\Windows\System32\Drivers\Null.sys [7680 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S0 nvdimm; C:\Windows\System32\drivers\nvdimm.sys [168464 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S0 nvraid; C:\Windows\System32\drivers\nvraid.sys [150328 2019-12-07] (Microsoft Windows -> NVIDIA Corporation)

S0 nvstor; C:\Windows\System32\drivers\nvstor.sys [166200 2019-12-07] (Microsoft Windows -> NVIDIA Corporation)

R3 Parport; C:\Windows\System32\drivers\parport.sys [109056 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R0 partmgr; C:\Windows\System32\drivers\partmgr.sys [182584 2021-07-16] (Microsoft Windows -> Microsoft Corporation)

R0 pci; C:\Windows\System32\drivers\pci.sys [475976 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

S0 pciide; C:\Windows\System32\drivers\pciide.sys [16712 2021-10-15] (Microsoft Windows -> Microsoft Corporation)

S0 pcmcia; C:\Windows\System32\drivers\pcmcia.sys [127800 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R0 pcw; C:\Windows\System32\drivers\pcw.sys [57656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R0 pdc; C:\Windows\System32\drivers\pdc.sys [159056 2021-06-18] (Microsoft Windows -> Microsoft Corporation)

R2 PEAUTH; C:\Windows\System32\drivers\peauth.sys [823808 2021-10-08] (Microsoft Windows -> Microsoft Corporation)

S0 percsas2i; C:\Windows\System32\drivers\percsas2i.sys [58680 2019-12-07] (Microsoft Windows -> Avago Technologies)

S0 percsas3i; C:\Windows\System32\drivers\percsas3i.sys [68408 2019-12-07] (Microsoft Windows -> Avago Technologies)

S3 PktMon; C:\Windows\System32\drivers\PktMon.sys [129872 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S0 pmem; C:\Windows\System32\drivers\pmem.sys [138040 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 PNPMEM; C:\Windows\System32\drivers\pnpmem.sys [17408 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 portcfg; C:\Windows\System32\drivers\portcfg.sys [27136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 PptpMiniport; C:\Windows\System32\drivers\raspptp.sys [101888 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S3 Processor; C:\Windows\System32\drivers\processr.sys [216376 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R1 Psched; C:\Windows\System32\drivers\pacer.sys [161608 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S3 QWAVEdrv; C:\Windows\system32\drivers\qwavedrv.sys [53248 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S0 Ramdisk; C:\Windows\System32\DRIVERS\ramdisk.sys [42296 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 RasAcd; C:\Windows\System32\DRIVERS\rasacd.sys [20480 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R3 RasAgileVpn; C:\Windows\System32\drivers\AgileVpn.sys [113152 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R3 Rasl2tp; C:\Windows\System32\drivers\rasl2tp.sys [110080 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R3 RasPppoe; C:\Windows\System32\DRIVERS\raspppoe.sys [87552 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 RasSstp; C:\Windows\System32\drivers\rassstp.sys [86016 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R1 rdbss; C:\Windows\System32\DRIVERS\rdbss.sys [456008 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

R3 rdpbus; C:\Windows\System32\drivers\rdpbus.sys [28672 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 RDPDR; C:\Windows\System32\drivers\rdpdr.sys [169984 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S3 RdpVideoMiniport; C:\Windows\System32\drivers\rdpvideominiport.sys [31544 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R0 rdyboost; C:\Windows\System32\drivers\rdyboost.sys [297784 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [2004816 2021-10-08] (Microsoft Windows -> Microsoft Corporation)

S3 ReFSv1; C:\Windows\System32\Drivers\ReFSv1.sys [990008 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 RFCOMM; C:\Windows\System32\drivers\rfcomm.sys [213504 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 rhproxy; C:\Windows\System32\drivers\rhproxy.sys [115712 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R2 rspndr; C:\Windows\System32\drivers\rspndr.sys [89088 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [694272 2019-12-07] (Microsoft Windows -> Realtek)

R3 RtlWlanu; C:\Windows\System32\drivers\rtwlanu.sys [9893888 2019-12-07] (Microsoft Windows -> Realtek Semiconductor Corporation)

S3 s3cap; C:\Windows\System32\drivers\vms3cap.sys [18960 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S0 sbp2port; C:\Windows\System32\drivers\sbp2port.sys [118088 2021-10-15] (Microsoft Windows -> Microsoft Corporation)

S3 scfilter; C:\Windows\System32\DRIVERS\scfilter.sys [44032 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S0 scmbus; C:\Windows\System32\drivers\scmbus.sys [158736 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 sdbus; C:\Windows\System32\drivers\sdbus.sys [305472 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S3 SDFRd; C:\Windows\System32\drivers\SDFRd.sys [35128 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 sdstor; C:\Windows\System32\drivers\sdstor.sys [104264 2021-10-15] (Microsoft Windows -> Microsoft Corporation)

S3 SerCx; C:\Windows\System32\drivers\SerCx.sys [86328 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [173072 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 Serenum; C:\Windows\System32\drivers\serenum.sys [27648 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 Serial; C:\Windows\System32\drivers\serial.sys [90624 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 sermouse; C:\Windows\System32\drivers\sermouse.sys [29184 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 sfloppy; C:\Windows\System32\drivers\sfloppy.sys [19456 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R0 SgrmAgent; C:\Windows\System32\drivers\SgrmAgent.sys [88080 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S0 SiSRaid2; C:\Windows\System32\drivers\SiSRaid2.sys [44856 2019-12-07] (Microsoft Windows -> Silicon Integrated Systems Corp.)

S0 SiSRaid4; C:\Windows\System32\drivers\sisraid4.sys [81720 2019-12-07] (Microsoft Windows -> Silicon Integrated Systems)

S0 SmartSAMD; C:\Windows\System32\drivers\SmartSAMD.sys [209720 2019-12-07] (Microsoft Windows -> Microsemi Corportation)

S3 spaceparser; C:\Windows\System32\drivers\spaceparser.sys [26624 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R0 spaceport; C:\Windows\System32\drivers\spaceport.sys [679240 2021-10-15] (Microsoft Windows -> Microsoft Corporation)

S3 SpatialGraphFilter; C:\Windows\System32\drivers\SpatialGraphFilter.sys [90936 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 SpbCx; C:\Windows\System32\drivers\SpbCx.sys [87352 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 srv2; C:\Windows\System32\DRIVERS\srv2.sys [787968 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

R3 srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [315392 2021-06-18] (Microsoft Windows -> Microsoft Corporation)

S0 stexstor; C:\Windows\System32\drivers\stexstor.sys [31032 2019-12-07] (Microsoft Windows -> Promise Technology, Inc.)

R0 storahci; C:\Windows\System32\drivers\storahci.sys [186168 2021-10-15] (Microsoft Windows -> Microsoft Corporation)

S0 storflt; C:\Windows\System32\drivers\vmstorfl.sys [54080 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [158008 2021-10-08] (Microsoft Windows -> Microsoft Corporation)

R2 storqosflt; C:\Windows\System32\drivers\storqosflt.sys [92984 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S0 storufs; C:\Windows\System32\drivers\storufs.sys [61256 2021-07-10] (Microsoft Windows -> Microsoft Corporation)

S0 storvsc; C:\Windows\System32\drivers\storvsc.sys [44048 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 swenum; C:\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_16a14542b63c02af\swenum.sys [18952 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 Synth3dVsc; C:\Windows\System32\drivers\Synth3dVsc.sys [6656 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R0 Tcpip; C:\Windows\System32\drivers\tcpip.sys [2989384 2021-10-15] (Microsoft Windows -> Microsoft Corporation)

S3 Tcpip6; C:\Windows\System32\drivers\tcpip.sys [2989384 2021-10-15] (Microsoft Windows -> Microsoft Corporation)

R2 tcpipreg; C:\Windows\System32\drivers\tcpipreg.sys [54784 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R1 tdx; C:\Windows\system32\DRIVERS\tdx.sys [117584 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

R0 Telemetry; C:\Windows\System32\drivers\IntelTA.sys [26608 2021-05-22] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation)

S3 terminpt; C:\Windows\System32\drivers\terminpt.sys [41272 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 TPM; C:\Windows\System32\drivers\tpm.sys [255288 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S3 TsUsbFlt; C:\Windows\System32\drivers\tsusbflt.sys [66560 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 TsUsbGD; C:\Windows\System32\drivers\TsUsbGD.sys [37888 2021-08-19] (Microsoft Windows -> Microsoft Corporation)

S3 tunnel; C:\Windows\System32\drivers\tunnel.sys [129024 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 UASPStor; C:\Windows\System32\drivers\uaspstor.sys [79160 2021-06-05] (Microsoft Windows -> Microsoft Corporation)

S3 UcmCx0101; C:\Windows\System32\Drivers\UcmCx.sys [160256 2021-10-08] (Microsoft Windows -> Microsoft Corporation)

S3 UcmTcpciCx0101; C:\Windows\System32\Drivers\UcmTcpciCx.sys [188416 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 UcmUcsiAcpiClient; C:\Windows\System32\drivers\UcmUcsiAcpiClient.sys [36864 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 UcmUcsiCx0101; C:\Windows\System32\Drivers\UcmUcsiCx.sys [113152 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R3 Ucx01000; C:\Windows\System32\drivers\ucx01000.sys [259896 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [52736 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S4 udfs; C:\Windows\System32\DRIVERS\udfs.sys [344064 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 UEFI; C:\Windows\System32\DriverStore\FileRepository\uefi.inf_amd64_c1628ffa62c8e54c\UEFI.sys [34104 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 Ufx01000; C:\Windows\System32\drivers\ufx01000.sys [330056 2021-07-10] (Microsoft Windows -> Microsoft Corporation)

S3 UfxChipidea; C:\Windows\System32\DriverStore\FileRepository\ufxchipidea.inf_amd64_1c78775fffab6a0a\UfxChipidea.sys [110608 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 ufxsynopsys; C:\Windows\System32\drivers\ufxsynopsys.sys [168264 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R3 umbus; C:\Windows\System32\DriverStore\FileRepository\umbus.inf_amd64_b78a9c5b6fd62c27\umbus.sys [58368 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 UmPass; C:\Windows\System32\drivers\umpass.sys [15360 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 UrsChipidea; C:\Windows\System32\DriverStore\FileRepository\urschipidea.inf_amd64_78ad1c14e33df968\urschipidea.sys [32056 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 UrsCx01000; C:\Windows\System32\drivers\urscx01000.sys [76304 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 UrsSynopsys; C:\Windows\System32\DriverStore\FileRepository\urssynopsys.inf_amd64_057fa37902020500\urssynopsys.sys [29496 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 usbaudio; C:\Windows\system32\drivers\usbaudio.sys [209920 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

S3 usbaudio2; C:\Windows\System32\drivers\usbaudio2.sys [260608 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 usbccgp; C:\Windows\System32\drivers\usbccgp.sys [185664 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S3 usbcir; C:\Windows\System32\drivers\usbcir.sys [107520 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 usbehci; C:\Windows\System32\drivers\usbehci.sys [86544 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 usbhub; C:\Windows\System32\drivers\usbhub.sys [528184 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 USBHUB3; C:\Windows\System32\drivers\UsbHub3.sys [648016 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

S3 usbohci; C:\Windows\System32\drivers\usbohci.sys [30208 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 usbprint; C:\Windows\System32\drivers\usbprint.sys [37376 2021-08-19] (Microsoft Windows -> Microsoft Corporation)

S3 usbser; C:\Windows\System32\drivers\usbser.sys [81408 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

R3 USBSTOR; C:\Windows\System32\drivers\USBSTOR.SYS [136528 2021-10-15] (Microsoft Windows -> Microsoft Corporation)

S3 usbuhci; C:\Windows\System32\drivers\usbuhci.sys [39424 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 usbvideo; C:\Windows\System32\Drivers\usbvideo.sys [319800 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

R3 USBXHCI; C:\Windows\System32\drivers\USBXHCI.SYS [629560 2021-10-08] (Microsoft Windows -> Microsoft Corporation)

R0 vdrvroot; C:\Windows\System32\drivers\vdrvroot.sys [67384 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S4 VerifierExt; C:\Windows\System32\drivers\VerifierExt.sys [347448 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 vhdmp; C:\Windows\System32\drivers\vhdmp.sys [820536 2021-10-08] (Microsoft Windows -> Microsoft Corporation)

S3 vhf; C:\Windows\System32\drivers\vhf.sys [47616 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R1 Vid; C:\Windows\System32\drivers\Vid.sys [641336 2021-10-08] (Microsoft Windows -> Microsoft Corporation)

S3 VirtualRender; C:\Windows\System32\DriverStore\FileRepository\vrd.inf_amd64_81fbd405ff2470fc\vrd.sys [11264 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S0 vmbus; C:\Windows\System32\drivers\vmbus.sys [160080 2021-07-16] (Microsoft Windows -> Microsoft Corporation)

S3 VMBusHID; C:\Windows\System32\drivers\VMBusHID.sys [36664 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 vmgid; C:\Windows\System32\drivers\vmgid.sys [19768 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R0 volmgr; C:\Windows\System32\drivers\volmgr.sys [90960 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R0 volmgrx; C:\Windows\System32\drivers\volmgrx.sys [389432 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R0 volsnap; C:\Windows\System32\drivers\volsnap.sys [429880 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R0 volume; C:\Windows\System32\drivers\volume.sys [16696 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S0 vpci; C:\Windows\System32\drivers\vpci.sys [89400 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S0 vsmraid; C:\Windows\System32\drivers\vsmraid.sys [166712 2019-12-07] (Microsoft Windows -> VIA Technologies Inc.,Ltd)

S0 VSTXRAID; C:\Windows\System32\drivers\vstxraid.sys [305464 2019-12-07] (Microsoft Windows -> VIA Corporation)

R3 vwifibus; C:\Windows\System32\drivers\vwifibus.sys [29184 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R1 vwififlt; C:\Windows\System32\drivers\vwififlt.sys [77824 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

R3 vwifimp; C:\Windows\System32\drivers\vwifimp.sys [50688 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 WacomPen; C:\Windows\System32\drivers\wacompen.sys [31232 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R2 wanarp; C:\Windows\System32\DRIVERS\wanarp.sys [93184 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S3 wanarpv6; C:\Windows\System32\DRIVERS\wanarp.sys [93184 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R2 wcifs; C:\Windows\system32\drivers\wcifs.sys [202568 2021-07-16] (Microsoft Windows -> Microsoft Corporation)

S3 wcnfs; C:\Windows\system32\drivers\wcnfs.sys [93184 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [48520 2021-11-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

R0 Wdf01000; C:\Windows\System32\drivers\Wdf01000.sys [827696 2021-08-19] (Microsoft Windows -> Microsoft Corporation)

R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [435424 2021-11-02] (Microsoft Windows -> Microsoft Corporation)

R3 wdiwifi; C:\Windows\System32\DRIVERS\wdiwifi.sys [967168 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

S3 WdmCompanionFilter; C:\Windows\System32\drivers\WdmCompanionFilter.sys [23560 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [86240 2021-11-02] (Microsoft Windows -> Microsoft Corporation)

R0 WFPLWFS; C:\Windows\System32\drivers\wfplwfs.sys [180048 2021-10-08] (Microsoft Windows -> Microsoft Corporation)

S3 WIMMount; C:\Windows\System32\drivers\wimmount.sys [39760 2021-09-19] (Microsoft Windows -> Microsoft Corporation)

R0 WindowsTrustedRT; C:\Windows\System32\drivers\WindowsTrustedRT.sys [76984 2019-12-07] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation)

R0 WindowsTrustedRTProxy; C:\Windows\System32\drivers\WindowsTrustedRTProxy.sys [18920 2019-12-07] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation)

S3 WinMad; C:\Windows\System32\drivers\winmad.sys [36152 2019-12-07] (Microsoft Windows -> Mellanox)

S3 WinNat; C:\Windows\System32\drivers\winnat.sys [266240 2021-10-15] (Microsoft Windows -> Microsoft Corporation)

S3 WINUSB; C:\Windows\System32\drivers\WinUSB.SYS [107008 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 WinVerbs; C:\Windows\System32\drivers\winverbs.sys [73016 2019-12-07] (Microsoft Windows -> Mellanox)

R3 WmiAcpi; C:\Windows\System32\drivers\wmiacpi.sys [19456 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R0 Wof; C:\Windows\System32\Drivers\Wof.sys [234296 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

R3 WpdUpFltr; C:\Windows\System32\drivers\WpdUpFltr.sys [32568 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S4 ws2ifsl; C:\Windows\system32\drivers\ws2ifsl.sys [25088 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 WudfPf; C:\Windows\System32\drivers\WudfPf.sys [136192 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 WUDFRd; C:\Windows\System32\drivers\WUDFRd.sys [315392 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 WUDFWpdFs; C:\Windows\System32\drivers\WUDFRd.sys [315392 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 WUDFWpdMtp; C:\Windows\system32\DRIVERS\WUDFRd.sys [315392 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 xboxgip; C:\Windows\System32\drivers\xboxgip.sys [329216 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S3 xinputhid; C:\Windows\System32\drivers\xinputhid.sys [51712 2021-05-22] (Microsoft Windows -> Microsoft Corporation)

S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [102400 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-11-02 19:39 - 2021-11-02 19:39 - 000067397 _____ C:\Users\p\Downloads\FRST.txt

2021-11-02 19:37 - 2021-11-02 19:39 - 000000000 ____D C:\FRST

2021-11-02 19:34 - 2021-11-02 19:35 - 002311168 _____ (Farbar) C:\Users\p\Downloads\FRST64.exe

2021-11-02 19:26 - 2021-11-02 19:26 - 000000000 ____D C:\Users\p\Downloads\Autoruns

2021-11-02 19:25 - 2021-11-02 19:25 - 003850414 _____ C:\Users\p\Downloads\Autoruns.zip

2021-11-02 19:20 - 2021-11-02 19:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi

2021-10-31 16:55 - 2021-11-01 16:57 - 000000000 ____D C:\Users\p\OneDrive - Dayton Regional STEM School\Documents\Sound recordings

2021-10-31 16:55 - 2021-10-31 16:56 - 000000000 ___RD C:\Users\p\OneDrive - Dayton Regional STEM School

2021-10-31 16:55 - 2021-10-31 16:55 - 000000000 ___HD C:\OneDriveTemp

2021-10-31 16:55 - 2021-10-31 16:55 - 000000000 ____D C:\Users\p\OneDrive - Dayton Regional STEM School\Documents\Trackmania

2021-10-31 16:55 - 2021-10-31 16:55 - 000000000 ____D C:\Users\p\OneDrive - Dayton Regional STEM School\Documents\ROBLOX

2021-10-31 16:55 - 2021-10-31 16:55 - 000000000 ____D C:\Users\p\OneDrive - Dayton Regional STEM School\Documents\My Games

2021-10-31 16:55 - 2021-10-31 16:55 - 000000000 ____D C:\Users\p\OneDrive - Dayton Regional STEM School\Documents\EVE

2021-10-31 16:55 - 2021-10-31 16:55 - 000000000 ____D C:\Users\p\OneDrive - Dayton Regional STEM School\Documents\DaGammla

2021-10-31 16:55 - 2021-10-31 16:55 - 000000000 ____D C:\Users\p\OneDrive - Dayton Regional STEM School\Documents\Custom Office Templates

2021-10-24 13:39 - 2021-10-24 13:39 - 000000000 ____D C:\Users\p\AppData\Local\RogueCompany

2021-10-24 13:37 - 2021-10-24 13:37 - 000000000 ____D C:\Users\p\AppData\Local\Scavenger

2021-10-24 13:36 - 2021-10-24 13:36 - 000000000 ____D C:\Program Files (x86)\EasyAntiCheat_EOS

2021-10-19 12:55 - 2021-10-19 12:55 - 000000000 ____D C:\Program Files\Reference Assemblies

2021-10-19 12:55 - 2021-10-19 12:55 - 000000000 ____D C:\Program Files\MSBuild

2021-10-19 12:55 - 2021-10-19 12:55 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies

2021-10-19 12:55 - 2021-10-19 12:55 - 000000000 ____D C:\Program Files (x86)\MSBuild

2021-10-16 14:15 - 2021-10-16 14:15 - 000000000 ___HD C:\$WinREAgent

2021-10-15 14:41 - 2021-10-15 14:41 - 000000000 ____D C:\Users\p\AppData\Local\Sexual_Void

2021-10-15 12:23 - 2021-10-17 13:26 - 000000000 ____D C:\ProgramData\Trackmania

2021-10-15 11:36 - 2021-10-15 11:36 - 000706536 _____ C:\Windows\system32\TextShaping.dll

2021-10-15 11:36 - 2021-10-15 11:36 - 000611960 _____ C:\Windows\SysWOW64\TextShaping.dll

2021-10-15 11:36 - 2021-10-15 11:36 - 000011495 _____ C:\Windows\system32\DrtmAuthTxt.wim

2021-10-14 10:56 - 2021-10-14 10:56 - 000000000 ____D C:\Users\p\AppData\Local\CCP

2021-10-12 18:50 - 2021-10-12 18:50 - 000000000 ____D C:\ProgramData\Ubisoft

2021-10-11 16:04 - 2021-10-28 19:33 - 000000000 ____D C:\Users\p\AppData\Local\Ubisoft Game Launcher

2021-10-11 16:04 - 2021-10-12 18:50 - 000000000 ____D C:\Users\p\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft

2021-10-11 16:04 - 2021-10-11 16:04 - 000000000 ____D C:\Program Files (x86)\Ubisoft

2021-10-09 15:39 - 2021-10-09 15:39 - 000000000 ____D C:\Users\p\AppData\Local\Rocket League

2021-10-09 13:31 - 2021-10-09 13:31 - 000000000 ___SH C:\Users\Public\Shared Files

2021-10-09 13:21 - 2021-10-09 13:21 - 000000000 ____D C:\Users\p\AppData\Local\WorldOfWarships

2021-10-09 10:56 - 2021-10-09 10:56 - 000000000 ____D C:\Users\p\AppData\Local\DBG

2021-10-09 10:54 - 2021-10-09 10:54 - 000000000 ____D C:\Users\p\AppData\Local\FortniteGame

2021-10-09 10:54 - 2021-10-09 10:54 - 000000000 ____D C:\Users\p\AppData\Local\CrashReportClient

2021-10-09 10:53 - 2021-10-24 13:39 - 000000000 ____D C:\Users\p\AppData\Roaming\EasyAntiCheat

2021-10-09 10:53 - 2021-10-09 10:53 - 000000000 ____D C:\Program Files (x86)\EasyAntiCheat

2021-10-08 16:11 - 2021-10-08 16:11 - 000000000 ____D C:\Users\p\AppData\LocalLow\The Irregular Corp

2021-10-08 16:06 - 2021-10-08 16:06 - 000452096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2021-10-08 16:05 - 2021-10-08 16:05 - 000570368 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2021-10-08 16:04 - 2021-10-08 16:04 - 000288768 _____ C:\Windows\system32\Windows.Management.InprocObjects.dll

2021-10-08 16:04 - 2021-10-08 16:04 - 000098304 _____ C:\Windows\system32\Drivers\cimfs.sys

2021-10-04 16:48 - 2021-10-04 16:48 - 000000000 ____D C:\Users\p\AppData\Local\GameAnalytics

2021-10-04 16:48 - 2021-10-04 16:48 - 000000000 ____D C:\Users\p\AppData\Local\CITW

2021-10-04 16:44 - 2021-10-20 17:45 - 000000000 ____D C:\Program Files\Epic Games

2021-10-04 16:39 - 2021-10-04 16:39 - 000000000 ____D C:\Users\p\AppData\Local\EOSUserHelper

2021-10-04 16:36 - 2021-10-09 10:54 - 000000000 ____D C:\Users\p\AppData\Local\NVIDIA Corporation

2021-10-04 16:33 - 2021-10-08 16:11 - 000000000 ____D C:\Users\p\AppData\Local\Epic Games

2021-10-04 16:33 - 2021-10-04 16:33 - 000000000 ____D C:\Users\p\AppData\Local\UnrealEngineLauncher

2021-10-04 16:33 - 2021-10-04 16:33 - 000000000 ____D C:\Users\p\AppData\Local\EpicGamesLauncher

2021-10-04 16:31 - 2021-10-14 15:47 - 000000000 ____D C:\ProgramData\Epic

2021-10-04 16:31 - 2021-10-04 16:32 - 000000000 ____D C:\Program Files (x86)\Epic Games

2021-10-04 16:31 - 2021-10-04 16:31 - 000001270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk

2021-10-04 16:30 - 2021-10-04 16:31 - 157548544 _____ C:\Users\p\OneDrive - Dayton Regional STEM School\Documents\EpicInstaller-13.0.0.msi

2021-10-04 16:30 - 2021-10-04 16:30 - 000351765 _____ C:\Users\p\Downloads\October_Lunch_2021_STEM.pdf

2021-10-04 16:30 - 2021-10-04 16:30 - 000351765 _____ C:\Users\p\Downloads\October_Lunch_2021_STEM (1).pdf

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-11-02 19:34 - 2021-05-18 11:32 - 000000000 ____D C:\Program Files (x86)\Google

2021-11-02 19:30 - 2021-05-23 14:28 - 000000000 ____D C:\Users\p\AppData\Local\LGHUB

2021-11-02 19:23 - 2020-08-30 21:23 - 000840954 _____ C:\Windows\system32\PerfStringBackup.INI

2021-11-02 19:23 - 2019-12-07 05:13 - 000000000 ____D C:\Windows\INF

2021-11-02 19:20 - 2021-08-18 17:19 - 000000000 ____D C:\Program Files\LGHUB

2021-11-02 19:20 - 2021-05-23 14:28 - 000000000 ____D C:\Users\p\AppData\Roaming\LGHUB

2021-11-02 19:18 - 2021-05-17 19:46 - 000000000 __SHD C:\Users\p\IntelGraphicsProfiles

2021-11-02 19:18 - 2019-12-07 05:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2021-11-02 19:17 - 2021-09-11 14:24 - 000000000 ____D C:\Program Files\Microsoft OneDrive

2021-11-02 19:17 - 2021-05-17 19:46 - 000000000 ____D C:\Intel

2021-11-02 19:17 - 2020-08-30 21:14 - 000000006 ____H C:\Windows\Tasks\SA.DAT

2021-11-02 19:17 - 2020-08-30 21:13 - 000008192 ___SH C:\DumpStack.log.tmp

2021-11-02 19:16 - 2019-12-07 05:03 - 000524288 _____ C:\Windows\system32\config\BBI

2021-11-02 19:15 - 2020-08-30 21:13 - 000000000 ____D C:\Windows\system32\SleepStudy

2021-11-02 19:08 - 2021-05-17 18:53 - 000000000 ____D C:\Users\p\AppData\Local\D3DSCache

2021-11-02 18:56 - 2019-12-07 05:14 - 000000000 ____D C:\Windows\AppReadiness

2021-11-02 18:53 - 2020-08-30 21:14 - 000000000 ____D C:\Windows\system32\Drivers\wd

2021-11-01 17:22 - 2021-05-25 19:15 - 000000000 ____D C:\Users\p\AppData\Roaming\discord

2021-11-01 17:02 - 2021-05-17 19:55 - 000000000 ____D C:\Program Files\Microsoft Office

2021-11-01 17:00 - 2019-12-07 05:14 - 000000000 ___HD C:\Program Files\WindowsApps

2021-11-01 16:59 - 2020-08-30 21:23 - 000000000 ____D C:\Users\p\AppData\Local\Packages

2021-11-01 16:58 - 2021-06-18 17:48 - 000000000 ____D C:\Users\p\AppData\Local\Discord

2021-11-01 16:57 - 2021-05-18 11:33 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2021-11-01 16:57 - 2021-05-18 11:33 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2021-10-31 16:55 - 2020-08-30 21:26 - 000000000 ___RD C:\Users\p\OneDrive

2021-10-31 16:55 - 2020-08-30 21:22 - 000000000 ____D C:\Users\p

2021-10-31 08:26 - 2021-05-17 20:02 - 000003194 _____ C:\Windows\system32\Tasks\OneDrive Per-Machine Standalone Update Task

2021-10-31 08:26 - 2021-05-17 20:02 - 000002132 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2021-10-30 18:38 - 2021-05-17 19:42 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2021-10-30 18:38 - 2021-05-17 19:42 - 000002276 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk

2021-10-28 19:52 - 2021-05-23 15:17 - 000000000 ____D C:\Users\p\AppData\Roaming\.minecraft

2021-10-24 18:54 - 2021-07-11 12:07 - 000000000 ____D C:\Users\p\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox

2021-10-24 13:39 - 2021-06-16 17:16 - 000000000 ____D C:\Users\p\AppData\Local\UnrealEngine

2021-10-19 13:00 - 2019-12-07 05:03 - 000000000 ____D C:\Windows\CbsTemp

2021-10-15 19:34 - 2020-08-30 21:23 - 000000000 ___RD C:\Users\p\3D Objects

2021-10-15 13:40 - 2021-07-11 13:58 - 000000000 ____D C:\Users\p\AppData\LocalLow\Unity

2021-10-15 12:23 - 2021-05-17 19:40 - 000000000 ____D C:\Users\p\AppData\Local\PlaceholderTileLogoFolder

2021-10-15 12:22 - 2020-08-30 21:23 - 000000000 ____D C:\Users\p\AppData\Local\ConnectedDevicesPlatform

2021-10-15 11:48 - 2020-08-30 21:13 - 000439016 _____ C:\Windows\system32\FNTCACHE.DAT

2021-10-15 11:46 - 2019-12-07 05:14 - 000000000 ____D C:\Windows\SystemResources

2021-10-15 11:46 - 2019-12-07 05:14 - 000000000 ____D C:\Windows\bcastdvr

2021-10-15 11:12 - 2021-05-24 17:50 - 000000000 ____D C:\Windows\system32\MRT

2021-10-15 11:09 - 2021-05-24 17:50 - 139806512 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

2021-10-14 11:02 - 2021-05-23 14:25 - 000000000 ____D C:\ProgramData\Package Cache

2021-10-09 20:20 - 2021-05-17 19:41 - 000003480 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA

2021-10-09 20:20 - 2021-05-17 19:41 - 000003356 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore

2021-10-09 20:19 - 2021-05-22 11:47 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools

2021-10-09 13:31 - 2019-12-07 05:14 - 000000000 __SHD C:\Users\Public\Libraries

2021-10-08 20:08 - 2019-12-07 05:14 - 000000000 ___SD C:\Windows\system32\UNP

2021-10-08 20:08 - 2019-12-07 05:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel

2021-10-08 20:08 - 2019-12-07 05:14 - 000000000 ____D C:\Windows\SysWOW64\oobe

2021-10-08 20:08 - 2019-12-07 05:14 - 000000000 ____D C:\Windows\system32\WinBioPlugIns

2021-10-08 20:08 - 2019-12-07 05:14 - 000000000 ____D C:\Windows\system32\oobe

2021-10-08 20:08 - 2019-12-07 05:14 - 000000000 ____D C:\Windows\PolicyDefinitions

2021-10-08 20:08 - 2019-12-07 05:14 - 000000000 ____D C:\Windows\DiagTrack

==================== Files in the root of some directories ========

2021-06-18 16:42 - 2021-09-14 19:41 - 000000203 _____ () C:\Users\p\AppData\Roaming\jjv5conf.json

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Addition.txt:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-11-2021

Ran by p (02-11-2021 19:40:29)

Running from C:\Users\p\Downloads

Microsoft Windows 10 Home Version 21H1 19043.1288 (X64) (2020-08-31 01:19:14)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-439056766-392687001-687573123-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-439056766-392687001-687573123-503 - Limited - Disabled)

Guest (S-1-5-21-439056766-392687001-687573123-501 - Limited - Disabled)

p (S-1-5-21-439056766-392687001-687573123-1001 - Administrator - Enabled) => C:\Users\p

WDAGUtilityAccount (S-1-5-21-439056766-392687001-687573123-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 19.00 (HKLM-x32\...\7-Zip) (Version: 19.00 - Igor Pavlov)

Browser Assistant (HKLM-x32\...\{798EB102-7804-4348-B396-3CB0528841D4}) (Version: 1.40.3114.21749 - Realistic Media Inc.) <==== ATTENTION

Core Epic (HKLM\...\{B51E6DE5-9A25-47E6-9806-24B4C62D42A6}) (Version: 1.3.1.0 - Manticore Games)

Core Epic Installer (HKLM-x32\...\{531451dd-91d4-4b27-a171-1b9c7f325969}) (Version: 1.3.0.0 - Manticore Games) Hidden

Direct Game UNI Installer (HKLM-x32\...\{DD850D28-7C18-46B4-9312-B7B69153BC16}) (Version: 1.0.160 - GamesLOL)

Discord (HKU\S-1-5-21-439056766-392687001-687573123-1001\...\Discord) (Version: 1.0.9002 - Discord Inc.)

Epic Games Launcher (HKLM-x32\...\{209F4B4B-3DF2-4825-9906-D4D6A80EC09E}) (Version: 1.3.0.0 - Epic Games, Inc.)

Epic Online Services (HKLM-x32\...\{32C68D93-D32F-4B01-8250-61642BFC22F8}) (Version: 2.0.28.0 - Epic Games, Inc.)

Epson Customer Research Participation (HKLM\...\{B26449A6-6007-4460-B4FE-C4776115BCEA}) (Version: 1.83.0000 - Seiko Epson Corporation)

Epson Event Manager (HKLM-x32\...\{116DBCAF-9544-4592-9156-AC99F6C2D426}) (Version: 3.10.0016 - Seiko Epson Corporation)

Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.51.00 - SEIKO EPSON CORPORATION)

Epson PC-FAX Driver (HKLM-x32\...\EPSON PC-FAX Driver 2) (Version: - )

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)

EPSON Scan OCR Component (HKLM-x32\...\{563B99D8-8895-4E3E-AE8D-15BE8C05F1C1}) (Version: 2.30.00 - SEIKO EPSON Corp.)

EPSON Scan PDF Extensions (HKLM-x32\...\{F9956472-6E16-4F83-BF9A-F887EF4A45B7}) (Version: 1.03.0001 - SEIKO EPSON Corp.)

EPSON WF-3620 Series Printer Uninstall (HKLM\...\EPSON WF-3620 Series) (Version: - SEIKO EPSON Corporation)

EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 95.0.4638.69 - Google LLC)

Java 8 Update 291 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180291F0}) (Version: 8.0.2910.10 - Oracle Corporation)

JJSploit 6.1.2 (HKU\S-1-5-21-439056766-392687001-687573123-1001\...\b1e3a7e5-766b-5910-bd89-4bbe7200c627) (Version: 6.1.2 - )

Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden

Logitech G HUB (HKLM\...\{521c89be-637f-4274-a840-baaf7460c2b2}) (Version: 2021.11.8744 - Logitech)

Microsoft 365 Apps for enterprise - en-us (HKLM\...\O365ProPlusRetail - en-us) (Version: 16.0.14527.20234 - Microsoft Corporation)

Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 95.0.1020.40 - Microsoft Corporation)

Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 95.0.1020.40 - Microsoft Corporation)

Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 21.205.1003.0003 - Microsoft Corporation)

Microsoft Teams (HKU\S-1-5-21-439056766-392687001-687573123-1001\...\Teams) (Version: 1.4.00.7174 - Microsoft Corporation)

Microsoft Update Health Tools (HKLM\...\{29B15818-E79F-4AB0-8938-9410C807AD76}) (Version: 2.84.0.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.24.28127 (HKLM-x32\...\{282975d8-55fe-4991-bbbb-06a72581ce58}) (Version: 14.24.28127.4 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation)

Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14527.20234 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14527.20234 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden

Roblox Player for p (HKU\S-1-5-21-439056766-392687001-687573123-1001\...\roblox-player) (Version: - Roblox Corporation)

Roblox Studio for p (HKU\S-1-5-21-439056766-392687001-687573123-1001\...\roblox-studio) (Version: - Roblox Corporation)

Software Updater (HKLM-x32\...\{B307472F-7BD9-4040-9255-CE6D6A1196A3}) (Version: 4.3.1 - SEIKO EPSON CORPORATION)

Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.4.0.7174 - Microsoft Corporation)

Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 87.0 - Ubisoft)

UE4 Prerequisites (x64) (HKLM\...\{1729B0A9-0490-418B-A565-89B4D5BC8F2D}) (Version: 1.2.0.0 - Epic Games, Inc.) Hidden

UE4 Prerequisites (x64) (HKLM-x32\...\{4e242cc8-5e3c-4b08-9d55-dbc62ddd1208}) (Version: 1.0.13.0 - Epic Games, Inc.) Hidden

WebAdvisor by McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.641 - McAfee, LLC)

Packages:

=========

Intel® Graphics Command Center -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3370.0_x64__8j3eq9eme6ctt [2021-10-29] (INTEL CORP) [Startup Task]

Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.10.10270.0_x64__8wekyb3d8bbwe [2021-11-01] (Microsoft Studios) [MS Ad]

Photos Media Engine Add-on -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-08-29] (Microsoft Corporation)

Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.171.560.0_x86__zpdnekdrzrea0 [2021-11-01] (Spotify AB) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-439056766-392687001-687573123-1001_Classes\CLSID\{04271989-C4D2-A2EA-FD84-6F3708A21F59} -> [OneDrive - Dayton Regional STEM School] => C:\Users\p\OneDrive - Dayton Regional STEM School [2021-10-31 16:55]

CustomCLSID: HKU\S-1-5-21-439056766-392687001-687573123-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\p\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20339.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\21.205.1003.0003\FileSyncShell64.dll [2021-10-31] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\21.205.1003.0003\FileSyncShell64.dll [2021-10-31] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\21.205.1003.0003\FileSyncShell64.dll [2021-10-31] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\21.205.1003.0003\FileSyncShell64.dll [2021-10-31] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\21.205.1003.0003\FileSyncShell64.dll [2021-10-31] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\21.205.1003.0003\FileSyncShell64.dll [2021-10-31] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\21.205.1003.0003\FileSyncShell64.dll [2021-10-31] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\21.205.1003.0003\FileSyncShell64.dll [2021-10-31] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\21.205.1003.0003\FileSyncShell64.dll [2021-10-31] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\21.205.1003.0003\FileSyncShell64.dll [2021-10-31] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\21.205.1003.0003\FileSyncShell64.dll [2021-10-31] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\21.205.1003.0003\FileSyncShell64.dll [2021-10-31] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\21.205.1003.0003\FileSyncShell64.dll [2021-10-31] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\21.205.1003.0003\FileSyncShell64.dll [2021-10-31] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\21.205.1003.0003\FileSyncShell64.dll [2021-10-31] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers1-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]

ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\21.205.1003.0003\FileSyncShell64.dll [2021-10-31] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers4-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]

ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\21.205.1003.0003\FileSyncShell64.dll [2021-10-31] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers6-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\p\Desktop\Work - Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) -> --profile-directory="Default"

ShortcutWithArgument: C:\Users\p\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=agimnkijcaahngcdmfeangaknmldooml

ShortcutWithArgument: C:\Users\p\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\188f5ec9d11ded56\Profile 2 - Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) -> --profile-directory="Profile 1"

==================== Loaded Modules (Whitelisted) =============

2021-11-02 19:20 - 2021-11-02 19:19 - 000635904 _____ () [File not signed] \\?\C:\Program Files\LGHUB\resources\app.asar.unpacked\node_modules\keytar\build\Release\keytar.node

2021-07-27 11:42 - 2021-07-27 11:42 - 042803200 _____ (Intel Corporation) [File not signed] C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3370.0_x64__8j3eq9eme6ctt\IGCC.dll

2005-01-13 13:47 - 2005-01-13 13:47 - 000049152 _____ (SEIKO EPSON CORP.) [File not signed] C:\Program Files (x86)\EPSON Software\Event Manager\ESPSUTL.dll

2012-04-02 14:15 - 2012-04-02 14:15 - 000110080 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\EPSON Software\Event Manager\epnsm.dll

2009-10-21 20:39 - 2009-10-21 20:39 - 000291328 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\EPSON Software\Event Manager\LcMgr.dll

2021-05-18 17:36 - 2014-05-26 04:00 - 000095744 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\EPSON Software\FAX Utility\EbpD4Fax.dll

2021-05-18 17:36 - 2014-05-26 04:00 - 000212992 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\EPSON Software\FAX Utility\FUADRFIL.dll

2021-05-18 17:36 - 2014-05-26 04:00 - 000282624 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\EPSON Software\FAX Utility\FUFAXCFG.dll

2021-05-18 17:36 - 2014-05-26 04:00 - 000438272 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\EPSON Software\FAX Utility\FUFAXCSR.DLL

2021-05-18 17:36 - 2014-05-26 04:00 - 000385024 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\EPSON Software\FAX Utility\FUFAXLDB.dll

2021-05-18 17:36 - 2014-05-26 04:00 - 000536576 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\EPSON Software\FAX Utility\FUFAXTIF.dll

2021-05-18 17:36 - 2014-05-26 04:00 - 000421888 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\EPSON Software\FAX Utility\FUIMGCDC.dll

2021-05-18 17:36 - 2014-05-26 04:00 - 000274432 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\EPSON Software\FAX Utility\FULEPP.dll

2021-05-18 17:36 - 2014-05-26 04:00 - 000077824 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\EPSON Software\FAX Utility\FUSTMMSG.dll

2021-05-18 17:36 - 2014-05-26 04:00 - 000327680 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\EPSON Software\FAX Utility\FUSVCCLT.dll

2021-05-18 17:36 - 2014-05-26 04:00 - 000065536 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\EPSON Software\FAX Utility\FUUSBHLP.dll

2021-05-18 17:36 - 2014-05-26 04:00 - 000253952 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\EPSON Software\FAX Utility\FUVERDLG.dll

2021-05-18 17:36 - 2014-05-26 04:00 - 000069632 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\EPSON Software\FAX Utility\Library\FUDEVCOM.dll

2021-05-18 17:36 - 2014-05-26 04:00 - 000135168 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\EPSON Software\FAX Utility\Library\FUDRVUTL.dll

2021-05-18 17:36 - 2014-05-26 04:00 - 000339968 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\EPSON Software\FAX Utility\Library\FUPRBDEV.dll

2021-05-18 17:36 - 2014-05-26 04:00 - 000286720 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\EPSON Software\FAX Utility\Library\FUSNMPUT.dll

2021-05-18 17:36 - 2014-05-25 12:00 - 000081920 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\Epson Software\FAX Utility\Resource\FUCMNMSG.dll

2021-05-18 17:36 - 2014-05-25 12:00 - 000090112 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\Epson Software\FAX Utility\Resource\FUFAXCFGRes.dll

2021-05-18 17:36 - 2014-05-25 12:00 - 000241664 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\Epson Software\FAX Utility\Resource\FUFAXRCV.dll

2021-05-18 17:36 - 2014-05-25 12:00 - 000110592 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\Epson Software\FAX Utility\Resource\FUFAXSTM.dll

2021-05-18 17:36 - 2014-05-25 12:00 - 000022016 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\Epson Software\FAX Utility\Resource\FULEPPRes.dll

2021-05-18 17:36 - 2014-05-25 12:00 - 000077824 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Program Files (x86)\Epson Software\FAX Utility\Resource\FUPRBDEVRes.dll

2021-05-18 17:35 - 2012-11-12 18:15 - 000558592 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Windows\System32\enppmon.dll

2021-05-18 17:35 - 2012-10-22 20:19 - 000219648 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\Windows\System32\enpres.dll

2021-05-18 17:36 - 2014-05-26 04:00 - 000786432 _____ (SEIKO EPSON) [File not signed] C:\Program Files (x86)\EPSON Software\FAX Utility\Library\ENCM.dll

2021-05-18 17:36 - 2014-05-26 04:00 - 000278528 _____ (SEIKO EPSON) [File not signed] C:\Program Files (x86)\EPSON Software\FAX Utility\Library\ENNW.dll

2021-05-18 17:36 - 2014-05-26 04:00 - 000299008 _____ (SEIKO EPSON) [File not signed] C:\Program Files (x86)\EPSON Software\FAX Utility\Library\ENUTIL.dll

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [5724]

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_291\bin\ssv.dll [2021-05-23] (Oracle America, Inc. -> Oracle Corporation)

BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2021-10-20] (McAfee, LLC -> McAfee, LLC)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_291\bin\jp2ssv.dll [2021-05-23] (Oracle America, Inc. -> Oracle Corporation)

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2021-10-20] (McAfee, LLC -> McAfee, LLC)

Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)

Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-439056766-392687001-687573123-1001\...\sharepoint.com -> hxxps://udayton0-files.sharepoint.com

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-12-07 05:14 - 2019-12-07 05:12 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts

2021-06-06 17:26 - 2021-06-06 17:27 - 000000443 _____ C:\Windows\system32\drivers\etc\hosts.ics

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\

HKU\S-1-5-21-439056766-392687001-687573123-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\p\Pictures\Saved Pictures\background.jpg

DNS Servers: 209.18.47.62 - 209.18.47.61

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )

Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKU\S-1-5-21-439056766-392687001-687573123-1001\...\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-439056766-392687001-687573123-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"

HKU\S-1-5-21-439056766-392687001-687573123-1001\...\StartupApproved\Run: => "BAUpdater"

HKU\S-1-5-21-439056766-392687001-687573123-1001\...\StartupApproved\Run: => "BAStartup"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{CC585412-B0B1-4B40-8B1F-9DB2C97EA161}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{5D80D1EF-B4BE-4BD8-8C92-1E13BA8B2EDB}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{05ABABC6-2548-447A-9FEF-1C80FB07766B}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)

FirewallRules: [{2326F224-830C-4B49-8489-B860FEE203EB}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)

FirewallRules: [{263A41AE-97AD-4B7D-8C7D-D00E34A1944F}] => (Allow) H:\Common\EpsonNet Setup\ENEasyApp.exe => No File

FirewallRules: [{00093057-8C93-4AF4-AFA8-39CB7B512CC3}] => (Allow) H:\Common\EpsonNet Setup\ENEasyApp.exe => No File

FirewallRules: [TCP Query User{09CAA96D-35EE-4C26-810D-ABDE7A2BD1BF}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)

FirewallRules: [UDP Query User{2CD34DF3-C6E9-4C96-AA43-B8E6462188C1}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)

FirewallRules: [TCP Query User{9F5F2B20-B30A-45B5-AF67-C586A7E8BCA6}C:\users\p\mogus\among us(game)\among us.exe] => (Allow) C:\users\p\mogus\among us(game)\among us.exe => No File

FirewallRules: [UDP Query User{96F1DA62-8986-475C-BCFE-7B739C4B48F0}C:\users\p\mogus\among us(game)\among us.exe] => (Allow) C:\users\p\mogus\among us(game)\among us.exe => No File

FirewallRules: [TCP Query User{4B1E0C6F-EF30-4EF5-8CBC-A5024E9254D8}I:\minetest\minetest-5.3.0-win64\minetest-5.3.0-win64\bin\minetest.exe] => (Allow) I:\minetest\minetest-5.3.0-win64\minetest-5.3.0-win64\bin\minetest.exe => No File

FirewallRules: [UDP Query User{1031B616-73D7-4CE6-88BF-806D58A05A01}I:\minetest\minetest-5.3.0-win64\minetest-5.3.0-win64\bin\minetest.exe] => (Allow) I:\minetest\minetest-5.3.0-win64\minetest-5.3.0-win64\bin\minetest.exe => No File

FirewallRules: [TCP Query User{3C7BAD75-BDC7-4B90-940C-4C789547868A}I:\nate - 2021\mogus\among us(game)\among us.exe] => (Allow) I:\nate - 2021\mogus\among us(game)\among us.exe () [File not signed]

FirewallRules: [UDP Query User{FB200868-2B29-4319-BD89-477A2CFBC285}I:\nate - 2021\mogus\among us(game)\among us.exe] => (Allow) I:\nate - 2021\mogus\among us(game)\among us.exe () [File not signed]

FirewallRules: [TCP Query User{CDE681B4-BAC0-4CDA-80EB-02B478AC1AD7}I:\nate - 2021\minetest\minetest-5.3.0-win64\minetest-5.3.0-win64\bin\minetest.exe] => (Allow) I:\nate - 2021\minetest\minetest-5.3.0-win64\minetest-5.3.0-win64\bin\minetest.exe (Minetest community) [File not signed]

FirewallRules: [UDP Query User{7417F544-CA10-4F58-A215-473D816EDE2E}I:\nate - 2021\minetest\minetest-5.3.0-win64\minetest-5.3.0-win64\bin\minetest.exe] => (Allow) I:\nate - 2021\minetest\minetest-5.3.0-win64\minetest-5.3.0-win64\bin\minetest.exe (Minetest community) [File not signed]

FirewallRules: [TCP Query User{1F302169-9761-4797-9DEB-F63C869C3C5E}C:\program files\java\jre1.8.0_291\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_291\bin\javaw.exe

FirewallRules: [UDP Query User{D85C5512-D687-42E7-91D0-E2C701F55A10}C:\program files\java\jre1.8.0_291\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_291\bin\javaw.exe

FirewallRules: [TCP Query User{511193A0-2DA4-4C91-BA80-FF819B958EDA}C:\users\p\downloads\aimbeast.v3.1.0.9\aimbeast.v3.1.0.9\aimbeast.v3.1.0.9\aimbeast\binaries\win64\aimbeast-win64-shipping.exe] => (Allow) C:\users\p\downloads\aimbeast.v3.1.0.9\aimbeast.v3.1.0.9\aimbeast.v3.1.0.9\aimbeast\binaries\win64\aimbeast-win64-shipping.exe => No File

FirewallRules: [UDP Query User{293AF4B9-B30C-4964-8B6F-971EBB13CA0B}C:\users\p\downloads\aimbeast.v3.1.0.9\aimbeast.v3.1.0.9\aimbeast.v3.1.0.9\aimbeast\binaries\win64\aimbeast-win64-shipping.exe] => (Allow) C:\users\p\downloads\aimbeast.v3.1.0.9\aimbeast.v3.1.0.9\aimbeast.v3.1.0.9\aimbeast\binaries\win64\aimbeast-win64-shipping.exe => No File

FirewallRules: [TCP Query User{B0A571E0-CADA-4E4E-B1BE-1C2EE8BAE8CC}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe => No File

FirewallRules: [UDP Query User{6ECE6A60-C8CD-40D0-82EC-42CAC6C33BD8}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe => No File

FirewallRules: [TCP Query User{0B30BC51-EA15-4EE7-AF38-2FA31FD4F4D3}I:\skyrouge\sky.rogue.v1.3.1\sky.rogue.v1.3.1\skyrogue.exe] => (Allow) I:\skyrouge\sky.rogue.v1.3.1\sky.rogue.v1.3.1\skyrogue.exe () [File not signed]

FirewallRules: [UDP Query User{70298AAD-7C81-4D6D-895A-5B715DF7F73F}I:\skyrouge\sky.rogue.v1.3.1\sky.rogue.v1.3.1\skyrogue.exe] => (Allow) I:\skyrouge\sky.rogue.v1.3.1\sky.rogue.v1.3.1\skyrogue.exe () [File not signed]

FirewallRules: [{9CC86B92-F8E4-4023-8325-B1A649C0EC60}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [TCP Query User{E0F4F6F2-8F66-4F32-9D4D-463F658E1000}C:\users\p\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\p\appdata\local\programs\opera gx\opera.exe => No File

FirewallRules: [UDP Query User{18D6DDDD-3B59-4BA7-BE14-6E28711E392E}C:\users\p\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\p\appdata\local\programs\opera gx\opera.exe => No File

FirewallRules: [TCP Query User{6D9749E5-E4C1-4AFB-AA5B-C23140A67E22}C:\program files\epic games\core\core\platform\binaries\win64\platform-win64-shipping.exe] => (Allow) C:\program files\epic games\core\core\platform\binaries\win64\platform-win64-shipping.exe (Manticore Games, Inc.) [File not signed]

FirewallRules: [UDP Query User{5A6056D8-B850-4E65-B390-97A97ED4CD19}C:\program files\epic games\core\core\platform\binaries\win64\platform-win64-shipping.exe] => (Allow) C:\program files\epic games\core\core\platform\binaries\win64\platform-win64-shipping.exe (Manticore Games, Inc.) [File not signed]

FirewallRules: [{18522EB8-7E16-4CCF-B38F-DE490091960A}] => (Allow) C:\Program Files\Epic Games\TrackmaniaNext\trackmania.exe (NADEO SASU -> Nadeo)

FirewallRules: [{E021DD3A-1367-447D-9AF5-85963FA57B97}] => (Allow) C:\Program Files\Epic Games\TrackmaniaNext\trackmania.exe (NADEO SASU -> Nadeo)

FirewallRules: [TCP Query User{6516A2EB-0830-47DD-9921-9E8BF6BC472A}C:\program files\epic games\scavengers\scavenger\binaries\win64\scavenger-win64-shipping.exe] => (Allow) C:\program files\epic games\scavengers\scavenger\binaries\win64\scavenger-win64-shipping.exe (Midwinter Entertainment) [File not signed]

FirewallRules: [UDP Query User{17606BCF-D913-49E7-BB5B-680271EF9C8A}C:\program files\epic games\scavengers\scavenger\binaries\win64\scavenger-win64-shipping.exe] => (Allow) C:\program files\epic games\scavengers\scavenger\binaries\win64\scavenger-win64-shipping.exe (Midwinter Entertainment) [File not signed]

FirewallRules: [{F9F370D5-2C16-4B84-887B-A017FD8F3AB1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.77.97.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{20F6A70C-6A31-458A-BD34-9F38EEA46C37}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.77.97.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{EF3A1EBD-FA47-4299-B07D-F9FC2F8BC893}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.77.97.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{D62D0577-9DF7-4A74-A130-D8DD6D08635F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.77.97.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{032A0FD4-9C60-4A19-AB63-53C6455334BC}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\95.0.1020.40\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{53895C98-B66B-4EA2-8049-0DDDB1895A7B}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

FirewallRules: [{A01B47A2-D900-465A-A198-D50CEC2B7F45}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.171.560.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{21794582-BDC9-4DDE-878B-BCD13D6561DD}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.171.560.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{A2533436-E8D9-4859-8044-12D36713E9BD}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.171.560.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{E70E15D9-3658-45FE-A73B-EFC0709B5880}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.171.560.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{60B2688F-78B4-431E-B375-3C135AB15AE1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.171.560.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{18507FC9-CFA3-46AB-B13F-DA31BC7EA0E9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.171.560.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{86A0BCB8-6AE4-4BD9-A403-7AFA92B28683}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.171.560.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{37ECEC8C-7711-4E73-A273-884DF03D6F96}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.171.560.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{5F4CD321-5DD2-428A-A9E6-8757E42CF730}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{15F56B6A-E8FF-4801-89C7-469998B336DE}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Restore Points =========================

19-10-2021 12:50:37 Windows Modules Installer

==================== Faulty Device Manager Devices ============

Name: PCI Memory Controller

Description: PCI Memory Controller

Class Guid:

Manufacturer:

Service:

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: SM Bus Controller

Description: SM Bus Controller

Class Guid:

Manufacturer:

Service:

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI Simple Communications Controller

Description: PCI Simple Communications Controller

Class Guid:

Manufacturer:

Service:

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

==================== Event log errors: ========================

Application errors:

==================

Error: (11/02/2021 07:19:16 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: lghub_agent.exe, version: 2021.10.8013.0, time stamp: 0x616106bb

Faulting module name: lghub_agent.exe, version: 2021.10.8013.0, time stamp: 0x616106bb

Exception code: 0xc0000005

Fault offset: 0x000000000099cbf3

Faulting process id: 0x2684

Faulting application start time: 0x01d7d0400aac6c64

Faulting application path: C:\Program Files\LGHUB\lghub_agent.exe

Faulting module path: C:\Program Files\LGHUB\lghub_agent.exe

Report Id: f00d0ccd-a614-4572-99a3-0245f4ddfe94

Faulting package full name:

Faulting package-relative application ID:

Error: (11/02/2021 07:16:31 PM) (Source: VSS) (EventID: 8193) (User: )

Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, A system shutdown is in progress.

Error: (11/02/2021 07:16:31 PM) (Source: VSS) (EventID: 13) (User: )

Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.

]

Error: (11/02/2021 07:16:31 PM) (Source: VSS) (EventID: 8193) (User: )

Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, A system shutdown is in progress.

Error: (11/02/2021 07:16:31 PM) (Source: VSS) (EventID: 13) (User: )

]

Error: (11/01/2021 04:53:14 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 11) (User: DESKTOP-GN3POCI)

Description: Microsoft.WindowsStore_8wekyb3d8bbwe-2147023878

Error: (11/01/2021 04:53:14 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 11) (User: DESKTOP-GN3POCI)

Description: Microsoft.WindowsStore_8wekyb3d8bbwe-2147023878

Error: (11/01/2021 04:50:11 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: IntelCpHeciSvc.exe, version: 9.1.1.920, time stamp: 0x5f4f151f

Faulting module name: IntelCpHeciSvc.exe, version: 9.1.1.920, time stamp: 0x5f4f151f

Exception code: 0xc0000409

Fault offset: 0x0000000000030795

Faulting process id: 0x3520

Faulting application start time: 0x01d7cf620b878881

Faulting application path: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHeciSvc.exe

Faulting module path: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHeciSvc.exe

Report Id: 33d75823-cd0e-46f4-a39f-3723f33e58a4

Faulting package full name:

Faulting package-relative application ID:

System errors:

=============

Error: (11/02/2021 07:17:44 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: The cphs service terminated with the following error:

Unspecified error

Error: (11/02/2021 06:51:08 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: The Intel® Content Protection HECI Service service terminated with the following error:

Unspecified error

Error: (11/01/2021 04:50:08 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: The Intel® Content Protection HECI Service service terminated with the following error:

Unspecified error

Error: (10/31/2021 03:52:05 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: The Intel® Content Protection HECI Service service terminated with the following error:

Unspecified error

Error: (10/31/2021 08:07:35 AM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: The Intel® Content Protection HECI Service service terminated with the following error:

Unspecified error

Error: (10/30/2021 06:36:55 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: The Intel® Content Protection HECI Service service terminated with the following error:

Unspecified error

Error: (10/29/2021 07:26:19 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: The Intel® Content Protection HECI Service service terminated with the following error:

Unspecified error

Error: (10/28/2021 08:34:27 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: The Intel® Content Protection HECI Service service terminated with the following error:

Unspecified error

Windows Defender:

================

Date: 2021-10-29 20:11:25

Description:

Microsoft Defender Antivirus scan has been stopped before completion.

Scan Type: Antimalware

Scan Parameters: Quick Scan

Date: 2021-10-25 15:58:14

Description:

Microsoft Defender Antivirus scan has been stopped before completion.

Scan Type: Antimalware

Scan Parameters: Quick Scan

Date: 2021-10-16 17:09:16

Description:

Microsoft Defender Antivirus scan has been stopped before completion.

Scan Type: Antimalware

Scan Parameters: Quick Scan

Date: 2021-10-08 07:06:45

Description:

Microsoft Defender Antivirus scan has been stopped before completion.

Scan Type: Antimalware

Scan Parameters: Quick Scan

Date: 2021-10-03 19:31:11

Description:

Microsoft Defender Antivirus scan has been stopped before completion.

Scan Type: Antimalware

Scan Parameters: Quick Scan

Date: 2021-09-19 12:41:38

Description:

Microsoft Defender Antivirus has encountered an error trying to update security intelligence.

New security intelligence Version:

Previous security intelligence Version: 1.349.746.0

Update Source: Microsoft Malware Protection Center

Security intelligence Type: AntiVirus

Update Type: Full

Current Engine Version:

Previous Engine Version: 1.1.18500.10

Error code: 0x80072ee7

Error description: The server name or address could not be resolved

Date: 2021-09-19 12:41:38

Description:

Microsoft Defender Antivirus has encountered an error trying to update security intelligence.

New security intelligence Version:

Previous security intelligence Version: 1.349.746.0

Update Source: Microsoft Malware Protection Center

Security intelligence Type: AntiSpyware

Update Type: Full

Current Engine Version:

Previous Engine Version: 1.1.18500.10

Error code: 0x80072ee7

Error description: The server name or address could not be resolved

Date: 2021-09-19 12:41:38

Description:

Microsoft Defender Antivirus has encountered an error trying to update security intelligence.

New security intelligence Version:

Previous security intelligence Version: 1.349.746.0

Update Source: Microsoft Malware Protection Center

Security intelligence Type: AntiVirus

Update Type: Full

Current Engine Version:

Previous Engine Version: 1.1.18500.10

Error code: 0x80072ee7

Error description: The server name or address could not be resolved

Date: 2021-09-19 12:41:38

Description:

Microsoft Defender Antivirus has encountered an error trying to update security intelligence.

New security intelligence Version:

Previous security intelligence Version: 1.349.746.0

Update Source: Microsoft Malware Protection Center

Security intelligence Type: AntiVirus

Update Type: Full

Current Engine Version:

Previous Engine Version: 1.1.18500.10

Error code: 0x80072ee7

Error description: The server name or address could not be resolved

Date: 2021-09-19 12:41:38

Description:

Microsoft Defender Antivirus has encountered an error trying to update security intelligence.

New security intelligence Version:

Previous security intelligence Version: 1.349.746.0

Update Source: Microsoft Malware Protection Center

Security intelligence Type: AntiSpyware

Update Type: Full

Current Engine Version:

Previous Engine Version: 1.1.18500.10

Error code: 0x80072ee7

Error description: The server name or address could not be resolved

==================== Memory info ===========================

BIOS: American Megatrends Inc. 3016 12/27/2016

Motherboard: ASUSTeK COMPUTER INC. H110M-C

Processor: Intel® Core™ i3-7100 CPU @ 3.90GHz

Percentage of memory in use: 35%

Total physical RAM: 16255.39 MB

Available physical RAM: 10405.39 MB

Total Virtual: 18687.39 MB

Available Virtual: 12746.48 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:930.97 GB) (Free:682.33 GB) NTFS

Drive i: (Nate's SSD) (Fixed) (Total:111.79 GB) (Free:92.19 GB) NTFS

\\?\Volume{85c0608f-0000-0000-0000-100000000000}\ (System Reserved) (Fixed) (Total:0.05 GB) (Free:0.02 GB) NTFS

\\?\Volume{85c0608f-0000-0000-0000-20c1e8000000}\ () (Fixed) (Total:0.49 GB) (Free:0.08 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================

Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 85C0608F)

Partition 1: (Active) - (Size=50 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=505 MB) - (Type=27)

==========================================================

Disk: 5 (MBR Code: Windows 7 or Vista) (Size: 111.8 GB) (Disk ID: 4BF3251B)

Partition 1: (Not Active) - (Size=111.8 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================

Advertisements

Register to Remove

#2 Tomk

Beguilement Monitor

Global Moderator
20,451 posts

Posted 09 November 2021 - 12:49 AM

Hi there ChadA,

You've got alot going on on that computer. Not necessarily bad, but just alot. I'm not a gamer so there are many things I don't recognize. That doesn't mean they are a problem...just that I'm old. It sounds like you are not the only user of this system and I agree - someone has been downloading alot of online games

Speaking of old...you are running a version of Java that is many years old. It's a 2014 version. Most people don't really need Java on their computers anymore and it does introduce a bit of security risk to your system. I suggest you consider removing everything related to Java and see if it causes any problems. If you do need it, you can install the current version which is Java 17. (You have Java 8).

Now let's see if we can clean things up. You are correct that your main trouble seems to be caused by a program called Browser Assistant. Typically I see it brought on board by a downloader, but I don't see it in your log. However it got there, we'll remove it.

Start Farbar Recovery Scan Tool with Administrator privileges
(Right click on the FRST icon and select Run as administrator)

highlight on the text below and select Copy.
beginning with Start:: and finishing with End::
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Highlight the entire content of the quote box below and select Copy.

Quote

Start::
CloseProcesses:
CreateRestorePoint:
HKU\S-1-5-21-439056766-392687001-687573123-1001\...\Run: [BAStartup] => C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell -ExecutionPolicy bypass -c "$env:COMPLUS_version='v4.0.30319';$w="$env:APPDATA"+'\Browser Assistant\';cd $w;&powershell{[Reflection.Assembly]::Loa (the data entry has 59 more characters). <==== ATTENTION
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
Task: {1BA88B8D-44B2-42E7-94B9-D85F64A7EE84} - System32\Tasks\Startup Scheduler => C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe -WindowStyle Hidden -ExecutionPolicy bypass -c "$w="$env:APPDATA"+'\Browser Assistant\';$f='S10.dll';if(-not (Test-Path -Path $f)){$f='S.dll'}[Reflection.Assembly]::Load([System.IO.File]::ReadAllBytes($w+$f));[E.S]::A('b')"
Task: {BAD1B631-A5C0-4847-A1B3-9856614C9826} - System32\Tasks\D Edge C Scheduler => C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe -WindowStyle Hidden -ExecutionPolicy bypass -c "$p='HKCU:\Software\Microsoft\Windows\CurrentVersion\Run';$k=Get-Item $p;foreach ($i in $k.Property){if($i -like '*MicrosoftEdgeAutoLaunch*'){$v=Get-ItemPropertyValue $p -Name $i;$v=$v.Replace('.exe','1.exe');Set-ItemProperty -Path $p -Name $i -Value $v} }" -> -WindowStyle Hidden -ExecutionPolicy bypass -c "$p='HKCU:\Software\Microsoft\Windows\CurrentVersion\Run';$k=Get-Item $p;foreach ($i in $k.Property){if($i -like '*MicrosoftEdgeAutoLaunch*'){$v=Get-ItemPropertyValue $p -Name $i;$v=$v.Replace('.exe','1.exe');Set-ItemProperty -Path $p -Name $i -Value $v (the data entry has 4 more characters).
Task: {E0ABD7DF-BCFD-48EA-8397-40057C9EFBD7} - System32\Tasks\BA Scheduler => C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe -WindowStyle Hidden -ExecutionPolicy bypass -c "$w="$env:APPDATA"+'\Browser Assistant\';$f='Updater10.dll';if(-not (Test-Path -Path $f)){$f='Updater.dll'}[Reflection.Assembly]::Load([System.IO.File]::ReadAllBytes($w+$f));$i=new-object u.U;$i.ST()" <==== ATTENTION
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Browser Assistant (HKLM-x32\...\{798EB102-7804-4348-B396-3CB0528841D4}) (Version: 1.40.3114.21749 - Realistic Media Inc.) <==== ATTENTION
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [5724]
HKU\S-1-5-21-439056766-392687001-687573123-1001\...\StartupApproved\Run: => "BAUpdater"
HKU\S-1-5-21-439056766-392687001-687573123-1001\...\StartupApproved\Run: => "BAStartup"
EmptyTemp:
C:\Windows\Temp\*.*
End::

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Start FRST (FRST64) with Administrator privileges
Press the Fix button. FRST will process the lines copied above from the clipboard.
When finished, a log file Fixlog.txt will pop up and saved in the same location the tool was ran from.

Please copy and paste its contents in your next reply.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Run Malwarebytes Anti-Malware

You may have Malwarebytes Anti-Malware installed but if not, you can download it from here:

run the program
click on the ‘Dashboard’ to make sure everything is up to date, (it is not necessary to upgrade to the premium version of MBAM)
click on the ‘Scan’ tab, (directly below the Dashboard tab)
select the Threat Scan option
slick the Scan Now button
Threat Scan will begin
when the scan has completed and if malware was found, click the Quarantine Selected button to allow MBAM to quarantine what was found
if prompted to restart the computer, close all other programs and click Yes to restart your computer
once you are back at your desktop, open MBAM once more
click on the ‘Reports’ tab
double-click on the most recent Scan Report
click on Export, then Copy to Clipboard

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~`

Download and run AdwCleaner

Download AdwCleaner from here and save it to your desktop.
you can download AdwCleaner here: https://malwarebytes.com/adwcleaner

run AdwCleaner by clicking on Scan Now
when it has finished, leave everything that was found checked, (ticked), then click on Clean and Repair
if it asks to reboot, allow the reboot
on reboot, click on View Log File; please attach the content of the log to your next reply.

============================================

Please post these 3 logs when finished.

Tomk
------------------------------------------------------------
Microsoft MVP 2010-2014

#3 ChadA

Authentic Member

Authentic Member
59 posts

Posted 10 November 2021 - 05:04 PM

FRST Fixlog

***********************************

Fix result of Farbar Recovery Scan Tool (x64) Version: 09-11-2021

Ran by p (10-11-2021 17:38:22) Run:1

Running from C:\Users\p\Downloads

Loaded Profiles: p

Boot Mode: Normal

==============================================

fixlist content:

*****************

CloseProcesses:

CreateRestorePoint: