Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19-07-2021 01 ([color=red]ATTENTION: ====> FRST version is 34 days old and could be outdated[/color]) Ran by Tom (administrator) on DESKTOP-RKFO3T9 (22-08-2021 20:48:30) Running from D:\ Loaded Profiles: Tom Platform: Windows 10 Pro Version 21H1 19043.928 (X64) Language: slovenščina (Slovenija) Default browser: Edge Boot Mode: Normal ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe (Microsoft Corporation -> Microsoft Corporation) C:\Users\Tom\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11910.1002.5.0_x64__8wekyb3d8bbwe\WinStore.App.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe ==================== Registry (Whitelisted) =================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKU\S-1-5-21-1367117104-1112946741-3264167154-1001\...\MountPoints2: {4403e113-02ab-11ec-a160-806e6f6e6963} - "E:\LaunchU3.exe" -a ==================== Scheduled Tasks (Whitelisted) ============ (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Edge: ======= Edge Profile: C:\Users\Tom\AppData\Local\Microsoft\Edge\User Data\Default [2021-08-21] ==================== Services (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5361256 2021-04-09] (Microsoft Windows Publisher -> Microsoft Corporation) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation) ===================== Drivers (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 BCM43XX; C:\Windows\System32\drivers\bcmwl63al.sys [5170176 2019-12-07] (Microsoft Windows -> Broadcom Corporation) S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed] S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One month (created) (Whitelisted) ========= (If an entry is included in the fixlist, the file/folder will be moved.) 2021-08-22 13:02 - 2021-08-22 13:02 - 000000000 ____D C:\Windows\pss 2021-08-22 12:53 - 2021-08-22 12:53 - 000000000 ____D C:\Users\Tom\AppData\Local\D3DSCache 2021-08-22 12:49 - 2021-08-22 12:49 - 000000000 ____D C:\Users\Tom\AppData\Local\Comms 2021-08-21 22:20 - 2021-08-22 20:48 - 000000000 ____D C:\FRST 2021-08-21 22:17 - 2021-08-21 22:17 - 000000000 _____ C:\Recovery.txt 2021-08-21 20:11 - 2021-08-21 19:14 - 000000000 ____D C:\Windows\Panther 2021-08-21 19:25 - 2021-08-21 19:25 - 000003376 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1367117104-1112946741-3264167154-1001 2021-08-21 19:25 - 2021-08-21 19:25 - 000000000 ___RD C:\Users\Tom\OneDrive 2021-08-21 19:20 - 2021-08-21 19:20 - 000000000 ____D C:\ProgramData\Microsoft OneDrive 2021-08-21 19:19 - 2021-08-22 13:22 - 000795738 _____ C:\Windows\system32\PerfStringBackup.INI 2021-08-21 19:19 - 2021-08-21 19:24 - 000000000 ____D C:\Users\Tom\AppData\Local\Packages 2021-08-21 19:19 - 2021-08-21 19:24 - 000000000 ____D C:\ProgramData\Packages 2021-08-21 19:19 - 2021-08-21 19:19 - 000002356 _____ C:\Users\Tom\Desktop\Microsoft Edge.lnk 2021-08-21 19:19 - 2021-08-21 19:19 - 000000000 __RHD C:\Users\Public\AccountPictures 2021-08-21 19:19 - 2021-08-21 19:19 - 000000000 ___RD C:\Users\Tom\3D Objects 2021-08-21 19:19 - 2021-08-21 19:19 - 000000000 ____D C:\Users\Tom\AppData\Roaming\Adobe 2021-08-21 19:19 - 2021-08-21 19:19 - 000000000 ____D C:\Users\Tom\AppData\Local\VirtualStore 2021-08-21 19:19 - 2021-08-21 19:19 - 000000000 ____D C:\Users\Tom\AppData\Local\Publishers 2021-08-21 19:19 - 2021-08-21 19:19 - 000000000 ____D C:\Users\Tom\AppData\Local\ConnectedDevicesPlatform 2021-08-21 19:17 - 2021-08-21 19:25 - 000002371 _____ C:\Users\Tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2021-08-21 19:17 - 2021-08-21 19:25 - 000000000 ____D C:\Users\Tom 2021-08-21 19:17 - 2021-08-21 19:17 - 000000020 ___SH C:\Users\Tom\ntuser.ini 2021-08-21 19:16 - 2021-08-21 19:16 - 000000000 ____D C:\Windows\CSC 2021-08-21 19:14 - 2021-08-21 19:14 - 000000000 _SHDL C:\Documents and Settings 2021-08-21 19:12 - 2021-08-22 20:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2021-08-21 19:12 - 2021-08-22 20:45 - 000000000 ____D C:\Windows\system32\SleepStudy 2021-08-21 19:12 - 2021-08-21 19:12 - 000003622 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2021-08-21 19:12 - 2021-08-21 19:12 - 000003498 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2021-08-21 19:12 - 2021-08-21 19:12 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2021-08-21 19:12 - 2021-08-21 19:12 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2021-08-21 19:12 - 2021-08-21 19:12 - 000000000 ____D C:\Windows\system32\Drivers\wd 2021-08-21 19:12 - 2021-08-21 19:12 - 000000000 ____D C:\Windows\ServiceProfiles 2021-08-21 19:11 - 2021-08-22 20:45 - 000008192 ___SH C:\DumpStack.log.tmp 2021-08-21 19:11 - 2021-08-21 19:12 - 000258136 _____ C:\Windows\system32\FNTCACHE.DAT ==================== One month (modified) ================== (If an entry is included in the fixlist, the file/folder will be moved.) 2021-08-22 20:45 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2021-08-22 17:54 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF 2021-08-22 13:04 - 2019-12-07 11:03 - 000262144 _____ C:\Windows\system32\config\BBI 2021-08-22 12:48 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\PrintDialog 2021-08-22 12:48 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness 2021-08-21 20:11 - 2019-12-07 11:14 - 000028672 _____ C:\Windows\system32\config\BCD-Template 2021-08-21 19:26 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\USOPrivate 2021-08-21 19:24 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps 2021-08-21 19:24 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ServiceState 2021-08-21 19:23 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinBioDatabase 2021-08-21 19:23 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp 2021-08-21 19:19 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel 2021-08-21 19:16 - 2019-12-07 16:49 - 000000000 ____D C:\Windows\system32\FxsTmp 2021-08-21 19:16 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\spool 2021-08-21 19:12 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\appcompat 2021-08-21 19:12 - 2019-12-07 11:03 - 000032768 _____ C:\Windows\system32\config\ELAM ==================== SigCheck ============================ (There is no automatic fix for files that do not pass verification.) ==================== End of FRST.txt ========================