2021-10-04 18:19 - 2019-03-19 15:52 - 000000000 ____D C:\Windows\ServiceState Boot Mode: Normal Faulting process id: 0x2ee4 Microsoft Visual Studio Installer (HKLM\\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 3.0.3444.25014 - Microsoft Corporation) 0.0.0.0 df.telemetry.microsoft.com Security intelligence Version: AV: 1.351.958.0, AS: 1.351.958.0, NIS: 1.351.958.0 FirewallRules: [{F7197523-B9AE-42F6-9BCD-3487235CDA82}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe => No File HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION BlueStacksDrv_nxt => service removed successfully 2021-10-18 19:33 - 2021-10-18 19:33 - 000000000 ____D C:\Users\Pepega\AppData\Local\NhNotifSys ==================== Registry (Whitelisted) =================== 2021-10-22 22:53 - 2019-03-19 15:52 - 000000000 ____D C:\Windows\system32\NDF Resetting , failed. 2021-10-24 14:56 - 2019-03-19 15:52 - 000000000 ___HD C:\Program Files\WindowsApps ==================== Restore Points ========================= 2021-10-13 16:41 - 2021-10-13 17:14 - 000000000 ____D C:\Users\Pepega\AppData\Roaming\Wireshark 2021-10-02 23:18 - 2021-10-02 23:18 - 000000000 ____D C:\Users\Pepega\AppData\Roaming\Visual Studio Setup 2021-10-02 23:24 - 2021-10-04 18:19 - 000000000 ____D C:\Program Files\IIS 2021-10-02 23:25 - 2021-10-02 23:26 - 000000000 ____D C:\Windows\system32\2052 R1 SMR540; C:\Windows\System32\drivers\SMR540.SYS [119048 2021-10-24] (NortonLifeLock Inc. -> Symantec Corporation) Path: file:_C:\Windows\System32\drivers\etc\hosts Faulting process id: 0x2d74 2021-10-13 16:39 - 2021-10-24 14:30 - 000000000 ____D C:\Program Files\Npcap 2021-10-19 13:07 - 2021-10-19 13:07 - 000058304 _____ C:\Windows\system32\Drivers\49306c4f52694d335248524c513067795a6a467a6448704765585a4e516d68714f565a57.sys Microsoft Defender Antivirus has detected malware or other potentially unwanted software. "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6298650e-c3bc-47e3-a571-b4eea94ac419}" => removed successfully Resetting , OK! When i clicked on properties, it said that its original name was 'Update.exe.' C:\ProgramData\NTUSER.pol => moved successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{a1c5790b-b106-45b9-9d9c-0442f6ab1b08}" => removed successfully ========= "C:\Windows\SYSTEM32\lodctr.exe" /R ========= WinRT Intellisense UAP - en-us (HKLM-x32\\{0AF3B821-474B-1885-473A-6E3FB4F1CF71}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden 2018-12-08 08:22 - 2018-12-08 08:22 - 002059264 _____ (TODO: ) [File not signed] C:\Program Files (x86)\GIGABYTE\RGBFusion\GHidApi.dll 2021-10-04 10:59 - 2021-10-04 10:59 - 000000000 ____D C:\Tor Browser 2021-10-02 23:25 - 2021-10-02 23:26 - 000000000 ____D C:\Windows\SysWOW64\1028 2021-10-14 11:40 - 2021-10-14 11:40 - 000058304 _____ C:\Windows\system32\Drivers\49306c4f52694d334e5535714e6e6f30524534354d6a597a61564631576d56464f585a33.sys Error: (10/24/2021 06:01:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) ^rinse and repeat. at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{cefea723-c2e4-4ec0-b440-c45c5526fda8}" => removed successfully The system cannot find the file specified. Task: {ca0fb10b-e917-4aa5-9e3a-f6a019682f3f} - no filepath 2021-10-02 23:02 - 2021-10-18 19:32 - 000000000 ____D C:\Program Files (x86)\Realtek Task: {00f722c3-08dc-4b10-b10e-91a3004714f3} - no filepath 2021-10-12 19:20 - 2021-10-12 19:20 - 000000000 ____D C:\Users\Pepega\AppData\Local\EOSUserHelper 2021-10-13 16:20 - 2021-10-13 16:20 - 000000000 ____D C:\Users\Pepega\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox VS Immersive Activate Helper (HKLM-x32\\{C0ACF658-B4DC-4CBB-B8F2-9E667D69919A}) (Version: 17.0.114.0 - Microsoft Corporation) Hidden Description: The AORUS LCD Panel Service service terminated unexpectedly. CustomCLSID: HKU\S-1-5-21-326566074-3447909417-183555969-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Pepega\AppData\Local\Microsoft\OneDrive\21.170.0822.0002\amd64\FileSyncShell64.dll => No File Task: {6d29bb8b-f135-47e9-9ff9-392b06a68bf3} - no filepath Packages: 2021-10-02 22:56 - 2021-10-02 23:03 - 000000000 ____D C:\Windows\system32\Drivers\NVIDIA Corporation "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{53092fd3-455c-4d74-9110-8a5211ddb6c2}" => removed successfully Task: {4596b534-45a4-4c4e-93a8-e4c01a69090e} - no filepath Task: {9b1a2e00-1c51-45d5-b5e4-9257d58cc2fe} - no filepath Task: {19e78c37-4706-4ee6-b14f-00a377e1761c} - no filepath (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_5292bbfbf575e2d2\Display.NvContainer\NVDisplay.Container.exe <2> Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation) "RESOLVED" LCD SCREEN Aorus 3080 Not working RESOLVED !! 2021-10-13 16:20 - 2021-10-13 16:20 - 000001422 _____ C:\Users\Pepega\Desktop\Roblox Player.lnk 2021-10-24 20:41 - 2021-10-24 20:41 - 000000000 ____D C:\Users\Pepega\AppData\Local\NPE 2021-10-02 23:04 - 2021-10-04 18:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePassXC (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <13> Task: {44e64ec2-07de-480c-b391-0e70d56ee3de} - no filepath (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe Fix result of Farbar Recovery Scan Tool (x64) Version: 20-10-2021 2021-10-02 22:55 - 2021-10-24 19:39 - 000000000 ____D C:\Users\Pepega\AppData\Local\ConnectedDevicesPlatform 0.0.0.0 telemetry.urs.microsoft.com "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F7197523-B9AE-42F6-9BCD-3487235CDA82}" => removed successfully 2021-10-03 19:33 - 2021-10-03 19:34 - 000000000 ____D C:\Program Files (x86)\EasyAntiCheat Task: {964fea64-405c-411f-8d7c-f9b886d45580} - no filepath ========= End -> "C:\Windows\Temp\*. Network Binding: Python 3.9.5 Documentation (64-bit) (HKLM\\{4EFE695B-F377-4CB0-90E3-6AEEE22DEFEB}) (Version: 3.9.5150.0 - Python Software Foundation) Hidden (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_df67044ddd98b524\RtkAudUService64.exe <2> Task: {ed48b1d9-cb70-4ae5-8deb-ce6ddd63422a} - no filepath Task: {1e6a4e2b-eca4-4162-8baf-5e2cbc56f0a8} - no filepath 2021-10-02 22:52 - 2021-10-23 10:08 - 000002421 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk Error: (10/24/2021 08:19:57 PM) (Source: Application Error) (EventID: 1000) (User: ) "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{57f92185-4f7e-4549-bf72-8ded737637ee}" => removed successfully Name: SettingsModifier:Win32/PossibleHostsFileHijack vs_communitysharedmsi (HKLM-x32\\{5E09B4C5-4E18-411F-BEF1-33F15E2906CF}) (Version: 17.0.31709 - Microsoft Corporation) Hidden Task: {0DBCA93D-0FE2-4CED-B180-4ED80B676444} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe /NOUACCHECK (A-Volute SAS -> Nahimic) C:\Windows\System32\NahimicService.exe (If an entry is included in the fixlist, it will be removed from the registry. Task: {14B4F718-04DD-467B-A775-E906F62BB732} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-09-14] (NVIDIA Corporation -> NVIDIA Corporation) HKU\S-1-5-21-326566074-3447909417-183555969-1001\\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4267928 2021-10-14] (Valve -> Valve Corporation) (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. 2021-10-24 21:15 - 2021-10-24 21:15 - 002310656 _____ (Farbar) C:\Users\Pepega\Downloads\FRST64.exe ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2021-09-15] (Adobe Inc. -> ) Description: icecap_collectionresourcesx64 (HKLM-x32\\{D7CA7EBC-6382-4CDB-BE73-9057ABE6DBA5}) (Version: 17.0.31709 - Microsoft Corporation) Hidden ========= "%WINDIR%\SysWOW64\lodctr.exe" /R ========= Task: {8c4fdb45-99dd-42f3-8984-07e5f8dff7f4} - no filepath Resetting , OK! Process Name: C:\Users\Pepega\AppData\Local\Discord\app-1.0.9003\Discord.exe Task: {b44de6b6-1303-474b-bd1f-0c3e771de5d9} - no filepath *" ======== \\?\Volume{7551d85d-c70c-448e-b08c-13d1c138506d}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32 2021-10-03 15:48 - 2019-03-19 15:52 - 000000000 ___RD C:\Windows\PrintDialog Task: {6902881d-a9ea-4ce3-9977-eac42438e59f} - no filepath "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{634166c8-f3ba-4d37-96ef-8a18d9787a4e}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{73931e1e-d4e0-4d8f-9b0c-c332b70c4204}" => removed successfully (If an entry is included in the fixlist, it will be removed.) Task: {a2a9bb80-76ce-4752-9e44-f43e01b26a35} - no filepath 2021-10-03 18:24 - 2021-10-03 18:24 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools 2021-10-02 23:07 - 2021-10-02 23:07 - 000000000 ____D C:\Users\Pepega\AppData\Local\SquirrelTemp \\?\Volume{66a9e99a-1cf4-4f5a-a085-9db2177d6629}\ (Recovery) (Fixed) (Total:0.52 GB) (Free:0.5 GB) NTFS Task: {ed48b1d9-cb70-4ae5-8deb-ce6ddd63422a} - no filepath 2021-10-23 13:47 - 2021-10-23 13:47 - 000058304 _____ C:\Windows\system32\Drivers\49306c4f52694d3361456431565451784e3342326455786c5531673353475634636e566a.sys 0.0.0.0 telemetry.microsoft.com Stage:GATHER_RULES_FROM_LICENSES HKU\S-1-5-21-326566074-3447909417-183555969-1001\\Run: [Windows Driver Installation Service] => C:\Windows\SysWOW64\Windows Driver Installation Service\Windows Driver Installation Service.exe WinRT Intellisense IoT - en-us (HKLM-x32\\{3335615C-ABEB-960E-2226-4274CD28E046}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden Task: {d6cfa018-c9cc-40f6-8ae8-0b452b7908aa} - no filepath Task: {b1fed2a8-3200-4219-af34-0fd05172af37} - no filepath "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{38c61830-b1df-4717-ae92-954fefd27747}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{f31abc37-3a79-4244-9a4b-03a808823654}" => removed successfully Description: The server Microsoft.Windows.Cortana_1.13.0.18362_neutral_neutral_cw5n1h2txyewy!CortanaUI did not register with DCOM within the required timeout. 2021-10-24 14:03 - 2021-10-24 14:03 - 000058304 _____ C:\Windows\system32\Drivers\49306c4f52694d3361565a36626b5a525132647563586434536a6c474d586f3054584670.sys Task: {0D800AA5-1B39-4310-BE91-74EBCFD0DB76} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-09-14] (NVIDIA Corporation -> NVIDIA Corporation) 10,510. at Miner.Clipboard+<>c__DisplayClass0_0.b__0() ========= End -> "C:\WINDOWS\system32\*.tmp" ======== Universal CRT Redistributable (HKLM-x32\\{0460C87B-7F4C-3170-FAC9-B7A6AE5CE4E9}) (Version: 10.0.26624 - Microsoft Corporation) Hidden It has done this 1 time(s). Stage:GATHER_RULES_FROM_LICENSES Task: {cefea723-c2e4-4ec0-b440-c45c5526fda8} - no filepath 2021-10-24 14:58 - 2021-10-24 14:58 - 000000000 ____D C:\ProgramData\Sophos Description: I assume this one is for the gpu mining as my gpu is also being used on 100%, but i am not able to see which app is using 100%, as the miner has a script where it immediately stops mining when process hacker or task manager is opened, the only way i was able to tell that the gpu was being used at 100% was because of an app that the gpu manufacturer has provided HKLM-x32\\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> ) Engine Version: AM: 1.1.18600.4, NIS: 1.1.18600.4 2021-10-02 23:07 - 2021-10-04 18:19 - 000000000 ____D C:\Users\Pepega\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc 2021-10-14 10:50 - 2021-10-14 17:35 - 000001229 ____H () C:\Users\Pepega\AppData\Local\d89b27a4d89b27a4d89b 2021-10-16 20:37 - 2021-10-16 20:42 - 000000000 ____D C:\Users\Pepega\AppData\Local\Adobe 2021-10-15 11:58 - 2021-10-15 11:58 - 000000000 ____D C:\Program Files\ldplayerbox 2021-10-24 21:16 - 2021-10-24 21:20 - 000025442 _____ C:\Users\Pepega\Downloads\FRST.txt 1) windows task manager process tab sorted by memory (most at the top), Must contain, memory, disk, network, GPU, GPU engine columns 2) Blue iris status (lighting bolt graph,upper left corner) clip storage tab 3) blue Iris status cameras tab Now my pc wont boot into unto windows and stays on the aorus symbol screen. 2021-10-18 20:24 - 2021-10-18 20:24 - 000000000 ____D C:\ProgramData\AMD AutoUpdate Edge: "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6902881d-a9ea-4ce3-9977-eac42438e59f}" => removed successfully Task: {f746fb73-bc4d-499e-882f-e5f30abe8a2f} - no filepath 2021-10-04 18:19 - 2019-03-19 15:52 - 000000000 ____D C:\Program Files\Common Files\microsoft shared (If an entry is included in the fixlist, the file/folder will be moved.) Several functions may not work. "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{d7495c49-8426-461c-8455-350522fba9cb}" => removed successfully 2021-10-02 23:34 - 2021-10-02 23:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits WebKey Warranty Conditions. Python 3.9.5 Core Interpreter (64-bit) (HKLM\\{FBB6299D-CB58-4177-B6A0-63BFB1C8C3AE}) (Version: 3.9.5150.0 - Python Software Foundation) Hidden 2021-10-02 23:03 - 2021-09-14 14:39 - 000144240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll ==================== Installed Programs ====================== "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{b7e27570-3f72-4ac2-b2ec-fd92b54c3a60}" => removed successfully Task: {4204c90d-5097-480b-ab90-0cff3c443b89} - no filepath Description: The process was terminated due to an unhandled exception. Task: {ab7dbf26-2e26-445a-a7dd-f60ac12f19a6} - no filepath SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&FORM=IE8SRC The adware programs should be uninstalled manually.) 2021-10-22 11:44 - 2021-10-22 11:44 - 000000000 ____D C:\Program Files\Riot Vanguard 0.0.0.0 telemetry.appex.bing.net 2021-10-18 19:35 - 2021-10-24 14:56 - 000003152 _____ C:\Windows\system32\Tasks\NahimicSvc64Run Detection Origin: Local machine Task: {2d5dd02e-d989-436b-a3d0-b2283ce2c942} - no filepath Restarting the service or rebooting the VM did not solved the problem. 0.0.0.0 watson.live.com Get 5 AORUS Points immediately by using my Invite Code when you sign up! 2021-10-02 23:07 - 2021-10-02 23:07 - 000000000 ____D C:\Users\Pepega\AppData\Local\tmp5qvbpq15.lck It has done this 1 time(s). 2021-10-02 23:25 - 2021-10-04 18:19 - 000000000 ____D C:\Windows\system32\3082 Click OK twice and restart the computer. 2021-10-16 20:42 - 2021-10-17 14:37 - 000000000 ___RD C:\Users\Pepega\Creative Cloud Files 2021-10-24 20:41 - 2021-10-24 21:08 - 000119048 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SMR540.SYS 2021-10-13 22:14 - 2021-10-07 19:32 - 001874648 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe Mozilla Maintenance Service (HKLM\\MozillaMaintenanceService) (Version: 92.0.1 - Mozilla) 2021-10-20 14:50 - 2021-10-20 14:50 - 000000000 ____D C:\Program Files\ENE "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{481404b2-cd19-4388-9998-80f99056dcfd}" => removed successfully Process Name: C:\Users\Pepega\AppData\Local\Discord\app-1.0.9003\Discord.exe Task: {43f54ace-856e-4b50-9808-1588b79b7c18} - no filepath Task: {a4a7b095-aaa9-401c-a9d7-8abe8ea301af} - no filepath Resetting Neighbor, OK! "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{f0e86eb7-a641-47fc-9528-df32545b183d}" => removed successfully 2021-10-03 15:48 - 2021-10-03 15:48 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf Task: {55b76d6d-fbf6-450e-a24e-071e1db9f945} - no filepath Bluetooth Network Connection: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) HKU\S-1-5-21-326566074-3447909417-183555969-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp//go.microsoft.com/fwlink/p/?LinkId=255141 2021-10-24 17:43 - 2021-10-24 20:56 - 000002087 _____ C:\Users\Pepega\Desktop\help.txt 0.0.0.0 vortex-bn2.metron.live.com.nsatc.net "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4d4276f1-945c-486b-b48f-62cda9b73d18}" => removed successfully 2021-10-02 23:25 - 2021-10-04 18:19 - 000000000 ____D C:\Windows\system32\1046 "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{572eb39c-ac47-4eda-a21b-d776650fa302}" => removed successfully C:\Users\Pepega\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Thing2.bat => moved successfully C:\Windows\Temp\ASPNETSetup_00000.log => moved successfully FireFox: 0.0.0.0 redir.metaservices.microsoft.com 2021-10-24 20:41 - 2021-10-24 20:41 - 013884680 _____ (NortonLifeLock Inc.) C:\Users\Pepega\Downloads\NPE.exe Task: {e3f16153-689d-41be-bf13-59cd11df70d5} - no filepath RGB Fusion with Digital LEDs comes with 9 new patterns and various speed settings with more to come. HKLM\\StartupApproved\Run32: => "Adobe CCXProcess" Task: {b2522ebf-6a65-406b-9bc7-1ce57d2a2c7c} - no filepath C:\Windows\Temp\MpCmdRun.log => moved successfully Detection Source: System "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{29ad0c16-34a9-49f9-a1d8-81f44fff082d}" => removed successfully however because i have other "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{b2522ebf-6a65-406b-9bc7-1ce57d2a2c7c}" => removed successfully Task: {68703689-47bd-47ee-9cf2-e91abb43a182} - no filepath Task: {a1c5790b-b106-45b9-9d9c-0442f6ab1b08} - no filepath 2021-10-24 13:24 - 2021-07-24 06:02 - 000040684 _____ C:\Users\Pepega\Desktop\tron.bat Resetting Path, OK! Faulting application path: C:\Users\Pepega\AppData\Local\Update.exe Task: {11dec036-7e8b-4b5b-906d-51876287d3d1} - no filepath ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2021-06-11] (win.rar GmbH -> Alexander Roshal) Python 3.9.5 Tcl/Tk Support (64-bit) (HKLM\\{351016A7-AED4-4824-8D2E-2F9ED497CF77}) (Version: 3.9.5150.0 - Python Software Foundation) Hidden vcpp_crt.redist.clickonce (HKLM-x32\\{97772BFC-16F3-41B9-B13E-35B278085A1F}) (Version: 14.30.30528 - Microsoft Corporation) Hidden 2021-10-03 15:47 - 2021-10-03 15:47 - 000000000 ____D C:\Windows\ServiceProfiles (If an entry is included in the fixlist, it will be removed from the registry. Loaded Profiles: Pepega Microsoft Windows 10 Pro Version 1909 18363.418 (X64) (1970-01-01 06:34:12) CustomCLSID: HKU\S-1-5-21-326566074-3447909417-183555969-1001_Classes\CLSID\{47E6DCAF-41F8-441C-BD0E-A50D5FE6C4D1}\localserver32 -> "C:\Users\Pepega\AppData\Local\Microsoft\OneDrive\21.170.0822.0002\Microsoft.SharePoint.exe" => No File ==================== Other Areas =========================== 2021-10-02 23:35 - 2021-10-02 23:35 - 000001738 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blend for Visual Studio 2022 Preview.lnk FirewallRules: [{199C16F6-0269-4609-BF27-31826F152D00}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) 0.0.0.0 oca.telemetry.microsoft.com.nsatc.net Task: {0ed742eb-771d-447f-a4e4-64c6fd2882f4} - no filepath S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [48520 2021-10-24] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) - Right Click on Network Neighborhood -> left click on Properties -> left click on the Protocols tab -> double click on TCP/IP Protocol -> left click on DNS tab and enter a domain name in the "Domain:" field. ==================== Accounts: ============================= Task: {6d29bb8b-f135-47e9-9ff9-392b06a68bf3} - no filepath Successfully flushed the DNS Resolver Cache. HKU\S-1-5-21-326566074-3447909417-183555969-1001\\Run: [Windows Driver Installation Service] => C:\Windows\SysWOW64\Windows Driver Installation Service\Windows Driver Installation Service.exe Framework Version: v4.0.30319 HKLM\\StartupApproved\Run: => "WindowsDefender" Task: {b19f8042-93dc-47e1-87f7-7ad8cb0032d9} - no filepath Task: {634166c8-f3ba-4d37-96ef-8a18d9787a4e} - no filepath "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2d5dd02e-d989-436b-a3d0-b2283ce2c942}" => removed successfully

200g Carbs In One Meal, Twinkle Toes Avatar Deutsch, Kpop Idols Who Were Abused, Articles T