Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-05-2021
Ran by Douglas Martin (16-05-2021 07:11:52)
Running from C:\Users\Douglas Martin\OneDrive\Desktop
Windows 10 Home Version 20H2 19042.985 (X64) (2021-03-14 13:49:09)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-4004721749-99239411-667192755-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4004721749-99239411-667192755-503 - Limited - Disabled)
Douglas Martin (S-1-5-21-4004721749-99239411-667192755-1001 - Administrator - Enabled) => C:\Users\Douglas Martin
Guest (S-1-5-21-4004721749-99239411-667192755-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-4004721749-99239411-667192755-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

BandLab Assistant 7.2.1 (HKU\S-1-5-21-4004721749-99239411-667192755-1001\...\9b08bea4-021c-5f9d-a74e-ac0ceb51fb28) (Version: 7.2.1 - BandLab Technologies)
Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 90.1.24.85 - Brave Software Inc)
CCleaner (HKLM\...\CCleaner) (Version: 5.79 - Piriform)
Dell SupportAssist (HKLM\...\{C5A70974-2F89-4BE0-90F7-749E62468C4D}) (Version: 3.8.1.23 - Dell Inc.)
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.101.0 - Google LLC) Hidden
Haste (HKLM\...\{772C0B56-EA5C-40FF-A5F6-046A2A48A321}) (Version: 2.26.116 - Haste) Hidden
Haste (HKLM\...\Haste 2.26.116) (Version: 2.26.116 - Haste)
Malwarebytes version 4.3.3.116 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.3.3.116 - Malwarebytes)
Microsoft 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.13929.20372 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 90.0.818.62 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 90.0.818.62 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4004721749-99239411-667192755-1001\...\OneDriveSetup.exe) (Version: 21.073.0411.0002 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{A0E1B43D-5F4A-46AF-9925-ABA3423325DC}) (Version: 2.77.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.28.29914 (HKLM-x32\...\{43d1ce82-6f55-4860-a938-20e5deb28b98}) (Version: 14.28.29914.0 - Microsoft Corporation)
NetSpot - 1  (HKU\S-1-5-21-4004721749-99239411-667192755-1001\...\8f902e8bea10afc7) (Version: 2.13.740.0 - Etwok Inc.)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.13929.20372 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.13929.20372 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.13929.20372 - Microsoft Corporation) Hidden
ProtonVPN (HKLM-x32\...\{FFAFEA09-E7DA-4710-A278-7F0506C96829}) (Version: 1.18.5 - Proton Technologies AG) Hidden
ProtonVPN (HKLM-x32\...\ProtonVPN 1.18.5) (Version: 1.18.5 - Proton Technologies AG)
ProtonVPNTap (HKLM-x32\...\{5DA710E2-1B81-4675-BFC5-76BAF63AE1F6}) (Version: 1.1.3 - Proton Technologies AG)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8777.1 - Realtek Semiconductor Corp.)
Telegram Desktop version 2.7.1 (HKU\S-1-5-21-4004721749-99239411-667192755-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 2.7.1 - Telegram FZ-LLC)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.14 - VideoLAN)

Packages:
=========
AMD Radeon Software -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m [2021-03-14] (Advanced Micro Devices Inc.) [Startup Task]
Backgammon Reloaded -> C:\Program Files\WindowsApps\3973catalinux.BackgammonReloaded_1.1.116.0_x64__61qs1d9sw9kvg [2020-10-11] (catalinux) [MS Ad]
Cribbage Classic -> C:\Program Files\WindowsApps\57472JeffCole.CribbageClassic_2.0.6.0_x64__rdk3bxwe9kqbm [2020-10-10] (Jeff Cole) [MS Ad]
Dell Customer Connect -> C:\Program Files\WindowsApps\DellInc.DellCustomerConnect_5.2.52.0_x64__htrsf667h5kn2 [2021-04-12] (Dell Inc)
McAfee® Personal Security -> C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_2.1.60.0_x64__wafk5atnkzcwy [2021-02-27] (McAfee LLC.)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2021-03-14] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-03-14] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.9.5060.0_x64__8wekyb3d8bbwe [2021-05-12] (Microsoft Studios) [MS Ad]
MPEG-2 Video Extension -> C:\Program Files\WindowsApps\microsoft.mpeg2videoextension_1.0.22661.0_x64__8wekyb3d8bbwe [2020-10-09] (Microsoft Corporation)
Music Maker Jam -> C:\Program Files\WindowsApps\MAGIX.MusicMakerJam_3.1.1.0_x64__a2t3txkz9j1jw [2021-03-05] (MAGIX)
My Dell -> C:\Program Files\WindowsApps\DellInc.MyDell_1.8.40.0_x64__htrsf667h5kn2 [2021-05-12] (Dell Inc)
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.97.752.0_x64__mcm4njqhnhss8 [2020-10-09] (Netflix, Inc.)
Network Inspector -> C:\Program Files\WindowsApps\48425ShipwreckSoftware.NetworkInspector_2.3.24.0_x64__jh2negtepkzpr [2020-10-12] (Shipwreck Software) [MS Ad]
Photos Media Engine Add-on -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-03-27] (Microsoft Corporation)
Ping -> C:\Program Files\WindowsApps\AFF540DC.Ping_1.1.6.19_x64__v7353qx4kg3sa [2020-10-12] (Jujuba Software) [MS Ad]
Solitaire Online -> C:\Program Files\WindowsApps\24528JimmyDickinson.SolitaireOnline_5.12.4.0_x64__nww69jnfa3hjr [2021-04-14] (Jimmy Dickinson)
Translator -> C:\Program Files\WindowsApps\Microsoft.BingTranslator_5.6.0.0_x64__8wekyb3d8bbwe [2021-03-14] (Microsoft Corporation)
Warplanes: WW1 Sky Aces -> C:\Program Files\WindowsApps\27017HOMENETGAMES.WarplanesWW1SkyAces_1.3.0.0_x64__6819gghxgtppr [2021-05-13] (HOME NET GAMES)
Warplanes: WW2 Dogfight -> C:\Program Files\WindowsApps\27017HOMENETGAMES.WarplanesWW2Dogfight_2.1.0.0_x64__6819gghxgtppr [2020-12-17] (HOME NET GAMES)
Waves MaxxAudio Pro for Dell 2019 -> C:\Program Files\WindowsApps\WavesAudio.MaxxAudioProforDell2019_2.0.54.0_x64__fh4rh281wavaa [2020-10-09] (Waves Audio)
WiFi Analyzer -> C:\Program Files\WindowsApps\19965MATTHAFNER.WIFIANALYZER_2.6.1.0_x64__gs5k5vmxr2ste [2020-10-12] (Matt Hafner)
World of Tanks Blitz -> C:\Program Files\WindowsApps\7458BE2C.WorldofTanksBlitz_7.9.300.0_x64__x4tje2y229k00 [2021-05-14] (Wargaming Group Limited)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-4004721749-99239411-667192755-1001_Classes\CLSID\{8fe4e5a0-6d96-4a10-b0c5-a538732b67ec}\InprocServer32 -> C:\WINDOWS\system32\dfshim.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-4004721749-99239411-667192755-1001_Classes\CLSID\{b66041ff-f214-4161-8d8c-321dcafaefa8}\InprocServer32 -> C:\WINDOWS\system32\dfshim.dll (Microsoft Windows -> Microsoft Corporation)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-05-15] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-05-15] (Malwarebytes Corporation -> Malwarebytes)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2021-03-26 12:51 - 2021-03-26 12:51 - 004046336 _____ () [File not signed] C:\Program Files\Haste\cpprest142_2_10.dll
2021-03-26 12:51 - 2021-03-26 12:51 - 000061440 _____ () [File not signed] C:\Program Files\Haste\WinDivert.dll
2020-10-09 20:33 - 2020-10-09 20:33 - 000017920 _____ () [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\libEGL.dll
2020-10-09 20:33 - 2020-10-09 20:33 - 003567616 _____ () [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\libGLESv2.dll
2020-11-28 07:26 - 2020-11-28 07:26 - 000258048 _____ () [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\WirelessVR-windesktop64.dll
2020-10-09 20:33 - 2020-10-09 20:33 - 000031744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\plugins\imageformats\qgif.dll
2020-10-09 20:33 - 2020-10-09 20:33 - 000039424 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\plugins\imageformats\qicns.dll
2020-10-09 20:33 - 2020-10-09 20:33 - 000031744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\plugins\imageformats\qico.dll
2020-10-09 20:33 - 2020-10-09 20:33 - 000413696 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\plugins\imageformats\qjpeg.dll
2020-10-09 20:33 - 2020-10-09 20:33 - 000025088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\plugins\imageformats\qsvg.dll
2020-10-09 20:33 - 2020-10-09 20:33 - 000025088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\plugins\imageformats\qtga.dll
2020-10-09 20:33 - 2020-10-09 20:33 - 000023552 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\plugins\imageformats\qwbmp.dll
2020-10-09 20:33 - 2020-10-09 20:33 - 000519168 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\plugins\imageformats\qwebp.dll
2020-10-09 20:33 - 2020-10-09 20:33 - 001431040 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\plugins\platforms\qwindows.dll
2020-10-09 20:33 - 2020-10-09 20:33 - 001180672 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\plugins\sqldrivers\qsqlite.dll
2020-10-09 20:33 - 2020-10-09 20:33 - 000135680 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\plugins\styles\qwindowsvistastyle.dll
2020-10-09 20:33 - 2020-10-09 20:33 - 006010880 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\Qt5Core.dll
2020-10-09 20:33 - 2020-10-09 20:33 - 006345216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\Qt5Gui.dll
2020-10-09 20:33 - 2020-10-09 20:33 - 001078272 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\Qt5Network.dll
2020-10-09 20:33 - 2020-10-09 20:33 - 000313856 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\Qt5Positioning.dll
2020-10-09 20:33 - 2020-10-09 20:34 - 004000256 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\Qt5Qml.dll
2020-10-09 20:33 - 2020-10-09 20:34 - 003802624 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\Qt5Quick.dll
2020-10-09 20:33 - 2020-10-09 20:34 - 000171008 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\Qt5QuickControls2.dll
2020-10-09 20:33 - 2020-10-09 20:34 - 001083904 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\Qt5QuickTemplates2.dll
2020-10-09 20:33 - 2020-10-09 20:34 - 000205312 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\Qt5Sql.dll
2020-10-09 20:33 - 2020-10-09 20:34 - 000329728 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\Qt5Svg.dll
2020-10-09 20:33 - 2020-10-09 20:34 - 000113152 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\Qt5WebChannel.dll
2020-10-09 20:33 - 2020-10-09 20:34 - 000376320 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\Qt5WebEngine.dll
2020-10-09 20:33 - 2020-10-09 20:34 - 092323328 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\Qt5WebEngineCore.dll
2020-10-09 20:33 - 2020-10-09 20:34 - 005560832 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\Qt5Widgets.dll
2020-10-09 20:33 - 2020-10-09 20:34 - 000463360 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\Qt5WinExtras.dll
2020-10-09 20:33 - 2020-10-09 20:34 - 000188416 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\Qt5Xml.dll
2020-10-09 20:33 - 2020-10-09 20:34 - 002888704 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\Qt5XmlPatterns.dll
2020-10-09 20:33 - 2020-10-09 20:34 - 000053760 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll
2020-10-09 20:33 - 2020-10-09 20:34 - 000059392 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\QtGraphicalEffects\qtgraphicaleffectsplugin.dll
2020-10-09 20:33 - 2020-10-09 20:34 - 000017408 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\QtQuick.2\qtquick2plugin.dll
2020-10-09 20:33 - 2020-10-09 20:34 - 000287232 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\QtQuick\Controls.2\qtquickcontrols2plugin.dll
2020-10-09 20:33 - 2020-10-09 20:34 - 000329216 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\QtQuick\Controls\qtquickcontrolsplugin.dll
2020-10-09 20:33 - 2020-10-09 20:34 - 000136192 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\QtQuick\Dialogs\dialogplugin.dll
2020-10-09 20:33 - 2020-10-09 20:34 - 000089088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\QtQuick\Layouts\qquicklayoutsplugin.dll
2020-10-09 20:33 - 2020-10-09 20:34 - 000312320 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\QtQuick\Templates.2\qtquicktemplates2plugin.dll
2020-10-09 20:33 - 2020-10-09 20:34 - 000017920 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\QtQuick\Window.2\windowplugin.dll
2020-10-09 20:33 - 2020-10-09 20:34 - 000085504 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.20.10027.0_x64__0a9344xs7nr4m\radeonsoftware\QtWebEngine\qtwebengineplugin.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

HKU\S-1-5-21-4004721749-99239411-667192755-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=DCTE
HKU\S-1-5-21-4004721749-99239411-667192755-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.msn.com/?pc=DCTE
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-03-05] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-05-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-05-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-05-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-05-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-05-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-05-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-05-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-05-03] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-03-18 23:49 - 2019-03-18 23:49 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-4004721749-99239411-667192755-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Douglas Martin\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\0fabe565-e4f2-4d60-8261-3e2b9f740695_2x.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKU\S-1-5-21-4004721749-99239411-667192755-1001\...\StartupApproved\Run: => "ProtonVPN"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{CA52E533-EB83-4195-9C28-4F565984A8BD}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{AABE3740-F422-41DB-9807-E44749C95ABA}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{58A2612E-F3C3-4505-AD2E-A22BE2632BE1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{3E3925E2-8367-4682-856E-DE42FDC399E3}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [TCP Query User{29D01CB2-8C36-456E-9C37-C272AC5C0B1A}C:\users\douglas martin\appdata\local\warthunder\launcher.exe] => (Allow) C:\users\douglas martin\appdata\local\warthunder\launcher.exe => No File
FirewallRules: [UDP Query User{ED48BA3E-2BD3-4BAF-AEBC-D7B23B32EA81}C:\users\douglas martin\appdata\local\warthunder\launcher.exe] => (Allow) C:\users\douglas martin\appdata\local\warthunder\launcher.exe => No File
FirewallRules: [{CFA9E6CF-3BD4-4DAB-B0CD-F9535B4800C3}] => (Block) C:\users\douglas martin\appdata\local\warthunder\launcher.exe => No File
FirewallRules: [{FEDF8128-DC4A-4F4D-A7C5-4FF383BA0C94}] => (Block) C:\users\douglas martin\appdata\local\warthunder\launcher.exe => No File
FirewallRules: [TCP Query User{57F59606-6F68-4188-9ED7-D77EA1677F9D}C:\users\douglas martin\appdata\local\warthunder\win64\aces.exe] => (Allow) C:\users\douglas martin\appdata\local\warthunder\win64\aces.exe => No File
FirewallRules: [UDP Query User{3EA4735C-B245-4714-80D4-3CF3C0CDDB5F}C:\users\douglas martin\appdata\local\warthunder\win64\aces.exe] => (Allow) C:\users\douglas martin\appdata\local\warthunder\win64\aces.exe => No File
FirewallRules: [{F0986953-6E40-4E12-9DFC-43253A2609F7}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{D5E6917A-2621-4856-A0DF-00062311E363}C:\program files\videolan\vlc\vlc.exe] => (Block) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{B70BA4F1-FEC7-4449-BCE5-08D68ED87C6A}C:\program files\videolan\vlc\vlc.exe] => (Block) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{C17499C4-ED05-4024-8526-490B7FC3040F}] => (Allow) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)
FirewallRules: [{B88103EA-788E-49D6-BBC8-553BD32CCCE3}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.62\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Restore Points =========================

ATTENTION: System Restore is disabled (Total:117.46 GB) (Free:63.04 GB) (54%)

==================== Faulty Device Manager Devices ============

Name: Dell Data Vault Control Device
Description: Dell Data Vault Control Device
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Dell Technologies
Service: DDDriver
Problem: : Windows cannot load the device driver for this hardware because a previous instance of the device driver is still in memory. (Code 38)
Resolution: The driver could not be loaded because a previous instance is still loaded.
Restart the computer.


==================== Event log errors: ========================

Application errors:
==================
Error: (05/15/2021 01:56:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: gmer.exe, version: 2.2.19882.0, time stamp: 0x56e2cdca
Faulting module name: gmer.exe, version: 2.2.19882.0, time stamp: 0x56e2cdca
Exception code: 0xc0000005
Fault offset: 0x0008de57
Faulting process id: 0x17c8
Faulting application start time: 0x01d749bbd653d22c
Faulting application path: C:\Users\Douglas Martin\AppData\Local\Temp\Temp1_gmer.zip\gmer.exe
Faulting module path: C:\Users\Douglas Martin\AppData\Local\Temp\Temp1_gmer.zip\gmer.exe
Report Id: 7dd715fd-d749-4444-a8f4-089dd4bac81b
Faulting package full name: 
Faulting package-relative application ID:

Error: (05/15/2021 01:46:35 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program gmer.exe version 2.2.19882.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 9d0

Start Time: 01d749b956375ebc

Termination Time: 250

Application Path: C:\Users\Douglas Martin\Downloads\gmer\gmer.exe

Report Id: 76e1c30a-16b8-4670-aa1f-23d5292fa405

Faulting package full name: 

Faulting package-relative application ID: 

Hang type: Unknown

Error: (05/13/2021 12:49:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: GameBarFTServer.exe, version: 5.621.4222.0, time stamp: 0x60817cf6
Faulting module name: KERNELBASE.dll, version: 10.0.19041.906, time stamp: 0x2f2f77bf
Exception code: 0xe0464645
Fault offset: 0x000000000010b2dc
Faulting process id: 0x1804
Faulting application start time: 0x01d748204b30fc03
Faulting application path: C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.621.4222.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
Report Id: 234371bf-0d3f-4f3c-8b13-1a84a29f98cc
Faulting package full name: Microsoft.XboxGamingOverlay_5.621.4222.0_x64__8wekyb3d8bbwe
Faulting package-relative application ID: App

Error: (05/13/2021 12:00:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: WindRider.exe, version: 0.0.0.0, time stamp: 0x5e5185b1
Faulting module name: UnityPlayer.dll, version: 2018.2.20.0, time stamp: 0x5c0a4fb4
Exception code: 0xc0000005
Fault offset: 0x004496aa
Faulting process id: 0x2ddc
Faulting application start time: 0x01d7481972546e9f
Faulting application path: C:\Program Files\WindowsApps\13597TappsTopGameFreeLLC.WindRider_10.5.1.0_x86__es2nrtzr0vkey\WindRider.exe
Faulting module path: C:\Program Files\WindowsApps\13597TappsTopGameFreeLLC.WindRider_10.5.1.0_x86__es2nrtzr0vkey\UnityPlayer.dll
Report Id: 211286d9-cebe-4a5b-922c-c5bdb0da9b8f
Faulting package full name: 13597TappsTopGameFreeLLC.WindRider_10.5.1.0_x86__es2nrtzr0vkey
Faulting package-relative application ID: App

Error: (05/13/2021 12:00:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: WindRider.exe, version: 0.0.0.0, time stamp: 0x5e5185b1
Faulting module name: UnityPlayer.dll, version: 2018.2.20.0, time stamp: 0x5c0a4fb4
Exception code: 0xc0000005
Fault offset: 0x004496aa
Faulting process id: 0x8ac
Faulting application start time: 0x01d7481968a8c550
Faulting application path: C:\Program Files\WindowsApps\13597TappsTopGameFreeLLC.WindRider_10.5.1.0_x86__es2nrtzr0vkey\WindRider.exe
Faulting module path: C:\Program Files\WindowsApps\13597TappsTopGameFreeLLC.WindRider_10.5.1.0_x86__es2nrtzr0vkey\UnityPlayer.dll
Report Id: 5078b37a-59c8-4fa3-ad06-f01f7fa531ac
Faulting package full name: 13597TappsTopGameFreeLLC.WindRider_10.5.1.0_x86__es2nrtzr0vkey
Faulting package-relative application ID: App

Error: (05/13/2021 11:59:17 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: WindRider.exe, version: 0.0.0.0, time stamp: 0x5e5185b1
Faulting module name: UnityPlayer.dll, version: 2018.2.20.0, time stamp: 0x5c0a4fb4
Exception code: 0xc0000005
Fault offset: 0x004496aa
Faulting process id: 0xc0c
Faulting application start time: 0x01d7481948d0599b
Faulting application path: C:\Program Files\WindowsApps\13597TappsTopGameFreeLLC.WindRider_10.5.1.0_x86__es2nrtzr0vkey\WindRider.exe
Faulting module path: C:\Program Files\WindowsApps\13597TappsTopGameFreeLLC.WindRider_10.5.1.0_x86__es2nrtzr0vkey\UnityPlayer.dll
Report Id: 4c930372-0f9e-4bc8-bf92-2a71846d8584
Faulting package full name: 13597TappsTopGameFreeLLC.WindRider_10.5.1.0_x86__es2nrtzr0vkey
Faulting package-relative application ID: App

Error: (05/13/2021 11:58:47 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: WindRider.exe, version: 0.0.0.0, time stamp: 0x5e5185b1
Faulting module name: UnityPlayer.dll, version: 2018.2.20.0, time stamp: 0x5c0a4fb4
Exception code: 0xc0000005
Fault offset: 0x004496aa
Faulting process id: 0x1398
Faulting application start time: 0x01d748193c9b8d45
Faulting application path: C:\Program Files\WindowsApps\13597TappsTopGameFreeLLC.WindRider_10.5.1.0_x86__es2nrtzr0vkey\WindRider.exe
Faulting module path: C:\Program Files\WindowsApps\13597TappsTopGameFreeLLC.WindRider_10.5.1.0_x86__es2nrtzr0vkey\UnityPlayer.dll
Report Id: bbe1fde1-b588-4130-8874-355991a989a6
Faulting package full name: 13597TappsTopGameFreeLLC.WindRider_10.5.1.0_x86__es2nrtzr0vkey
Faulting package-relative application ID: App

Error: (05/13/2021 11:58:12 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: WindRider.exe, version: 0.0.0.0, time stamp: 0x5e5185b1
Faulting module name: UnityPlayer.dll, version: 2018.2.20.0, time stamp: 0x5c0a4fb4
Exception code: 0xc0000005
Fault offset: 0x004496aa
Faulting process id: 0x27a8
Faulting application start time: 0x01d7481918aa259f
Faulting application path: C:\Program Files\WindowsApps\13597TappsTopGameFreeLLC.WindRider_10.5.1.0_x86__es2nrtzr0vkey\WindRider.exe
Faulting module path: C:\Program Files\WindowsApps\13597TappsTopGameFreeLLC.WindRider_10.5.1.0_x86__es2nrtzr0vkey\UnityPlayer.dll
Report Id: ac3b9dec-a77f-430b-8900-f1230512e9d2
Faulting package full name: 13597TappsTopGameFreeLLC.WindRider_10.5.1.0_x86__es2nrtzr0vkey
Faulting package-relative application ID: App


System errors:
=============
Error: (05/15/2021 02:07:21 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Dell Hardware Support service failed to start due to the following error: 
The system cannot find the file specified.

Error: (05/15/2021 02:04:48 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: The computer has rebooted from a bugcheck.  The bugcheck was: 0x000000d1 (0xffffbd80f4ef3010, 0x00000000000000ff, 0x0000000000000000, 0xfffff806261e8bc8). A dump was saved in: C:\WINDOWS\MEMORY.DMP. Report Id: 763053de-eba2-4193-8334-217cb070a430.

Error: (05/15/2021 02:04:36 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 1:57:22 PM on ‎5/‎15/‎2021 was unexpected.

Error: (05/14/2021 06:39:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Dell Hardware Support service failed to start due to the following error: 
The system cannot find the file specified.

Error: (05/12/2021 05:40:42 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Dell Hardware Support service failed to start due to the following error: 
The system cannot find the file specified.

Error: (05/12/2021 05:38:15 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 5:34:49 PM on ‎5/‎12/‎2021 was unexpected.

Error: (05/07/2021 10:43:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Dell Hardware Support service failed to start due to the following error: 
The system cannot find the file specified.

Error: (05/07/2021 10:41:14 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Haste Service service terminated unexpectedly.  It has done this 1 time(s).


Windows Defender:
================
Date: 2021-05-15 10:52:30
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2021-05-14 10:22:06
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2021-05-14 09:15:04
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2021-05-13 18:26:52
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2021-05-12 22:47:45
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2021-05-06 07:57:45
Description: 
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version: 1.339.26.0
Previous security intelligence Version: 1.337.661.0
Update Source: User
Security intelligence Type: AntiSpyware
Update Type: Delta
Current Engine Version: 1.1.18100.6
Previous Engine Version: 1.1.18100.5
Error code: 0x80070666
Error description: Another version of this product is already installed. Installation of this version cannot continue. To configure or remove the existing version of this product, use Add/Remove Programs on the Control Panel. 

Date: 2021-05-06 07:57:45
Description: 
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version: 1.339.26.0
Previous security intelligence Version: 1.337.661.0
Update Source: User
Security intelligence Type: AntiVirus
Update Type: Delta
Current Engine Version: 1.1.18100.6
Previous Engine Version: 1.1.18100.5
Error code: 0x80070666
Error description: Another version of this product is already installed. Installation of this version cannot continue. To configure or remove the existing version of this product, use Add/Remove Programs on the Control Panel. 

Date: 2021-05-06 07:57:45
Description: 
Microsoft Defender Antivirus has encountered an error trying to update the engine.
New Engine Version: 1.1.18100.6
Previous Engine Version: 1.1.18100.5
Error Code: 0x80070666
Error description: Another version of this product is already installed. Installation of this version cannot continue. To configure or remove the existing version of this product, use Add/Remove Programs on the Control Panel. 

Date: 2021-05-06 02:12:42
Description: 
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version: 1.339.26.0
Previous security intelligence Version: 1.337.661.0
Update Source: User
Security intelligence Type: AntiSpyware
Update Type: Delta
Current Engine Version: 1.1.18100.6
Previous Engine Version: 1.1.18100.5
Error code: 0x80070666
Error description: Another version of this product is already installed. Installation of this version cannot continue. To configure or remove the existing version of this product, use Add/Remove Programs on the Control Panel. 

Date: 2021-05-06 02:12:42
Description: 
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version: 1.339.26.0
Previous security intelligence Version: 1.337.661.0
Update Source: User
Security intelligence Type: AntiVirus
Update Type: Delta
Current Engine Version: 1.1.18100.6
Previous Engine Version: 1.1.18100.5
Error code: 0x80070666
Error description: Another version of this product is already installed. Installation of this version cannot continue. To configure or remove the existing version of this product, use Add/Remove Programs on the Control Panel. 

==================== Memory info =========================== 

BIOS: Dell Inc. 1.4.0 05/29/2019
Motherboard: Dell Inc. 0WKXJ6
Processor: AMD Ryzen 3 2200U with Radeon Vega Mobile Gfx 
Percentage of memory in use: 62%
Total physical RAM: 6037.39 MB
Available physical RAM: 2235.49 MB
Total Virtual: 9621.39 MB
Available Virtual: 3246.4 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:117.46 GB) (Free:63.04 GB) NTFS
Drive d: () (Removable) (Total:7.63 GB) (Free:6.14 GB) FAT32

\\?\Volume{c67deffd-7d7a-4aeb-83a6-b6d9efad4e51}\ (WINRETOOLS) (Fixed) (Total:0.92 GB) (Free:0.29 GB) NTFS
\\?\Volume{c91afc80-fdae-410e-b560-88d648ef1004}\ (ESP) (Fixed) (Total:0.73 GB) (Free:0.69 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: E74BFC13)

Partition: GPT.

==========================================================
Disk: 1 (Size: 7.6 GB) (Disk ID: 53C73F30)
Partition 1: (Active) - (Size=7.6 GB) - (Type=0C)

==================== End of Addition.txt =======================