Hello Ron, Thank you for your PM, results of the tests below!
I appreciate your giving your time to this, please dont give it any priority, whenever oyu have amoment will be fine, thanks.
Best regards,
Roger
FRST Report:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14-07-2021
Ran by User (administrator) on DESKTOP-AOS346J (16-07-2021 11:05:01)
Running from C:\Users\User\Downloads
Loaded Profiles: User
Platform: Windows 10 Home Version 20H2 19042.1083 (X64) Language: English (United States)
Default browser: Edge
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\afwServ.exe
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\aswEngSrv.exe
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGSvc.exe
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\avgToolsSvc.exe
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGUI.exe <4>
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\wsc_proxy.exe
(Beiley Software -> Beiley Software Inc.) C:\Program Files (x86)\Handy Address Book\habook.exe
(Beiley Software, Inc. -> Beiley Software Inc.) C:\Program Files (x86)\Remind-Me\RemindMe.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler64.exe
(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxCUIService.exe
(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxEM.exe
(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_54b736e5be5b50b2\OneApp.IGCC.WinService.exe
(Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHDCPSvc.exe
(LAVASOFT SOFTWARE CANADA INC -> ) C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe
(LAVASOFT SOFTWARE CANADA INC -> Lavasoft) C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Users\User\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12105.1001.23.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(nordvpn s.a. -> ) C:\Users\User\AppData\Local\Programs\nordpass\resources\nordpass-background-app.exe
(nordvpn s.a. -> NordPass Team) C:\Users\User\AppData\Local\Programs\nordpass\NordPass.exe <3>
(TEFINCOM S.A. -> TEFINCOM S.A.) C:\Program Files\NordVPN\NordVPN.exe
(TEFINCOM S.A. -> TEFINCOM S.A.) C:\Program Files\NordVPN\nordvpn-service.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM\...\Run: [WSVCUUpdateHelper.exe] => C:\Program Files\Wondershare\UniConverter\WSVCUUpdateHelper.exe [33960 2021-01-09] (Wondershare Technology Co.,Ltd -> )
HKLM\...\Run: [AVGUI.exe] => C:\Program Files\AVG\Antivirus\AvLaunch.exe [171320 2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133216 2017-03-23] (Wondershare Technology Co.,Ltd -> Wondershare)
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Video Converter Ultimate\DelayPluginI.exe
HKU\S-1-5-21-2759736083-2625989169-3022962864-1001\...\Run: [NordVPN] => C:\Program Files\NordVPN\NordVPN.exe [277688 2021-06-09] (TEFINCOM S.A. -> TEFINCOM S.A.)
HKU\S-1-5-21-2759736083-2625989169-3022962864-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [8520168 2021-07-07] (LAVASOFT SOFTWARE CANADA INC -> Lavasoft)
HKU\S-1-5-21-2759736083-2625989169-3022962864-1001\...\Run: [electron.app.NordPass] => C:\Users\User\AppData\Local\Programs\nordpass\NordPass.exe [109776864 2021-07-13] (nordvpn s.a. -> NordPass Team)
HKLM\...\Windows x64\Print Processors\Canon MG3600 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDCT.DLL [30208 2015-03-12] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG3600 series: C:\Windows\system32\CNMLMCT.DLL [406528 2015-03-12] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\91.0.4472.124\Installer\chrmstp.exe [2021-07-06] (Google LLC -> Google LLC)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Handy Address Book.lnk [2021-07-12]
ShortcutTarget: Handy Address Book.lnk -> C:\Program Files (x86)\Handy Address Book\habook.exe (Beiley Software -> Beiley Software Inc.)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RemindMe.lnk [2021-07-07]
ShortcutTarget: RemindMe.lnk -> C:\Program Files (x86)\Remind-Me\RemindMe.exe (Beiley Software, Inc. -> Beiley Software Inc.)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {1501C103-40E4-4029-BD8B-C562A6846391} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [1821968 2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies)
Task: {D07E74D5-1B5E-4DAE-B5E7-AD8343DB4232} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154456 2021-07-06] (Google LLC -> Google LLC)
Task: {E73B9100-248B-4D07-8FDC-6948DFC5441B} - System32\Tasks\Antivirus Emergency Update => C:\Program Files\AVG\Antivirus\AvEmUpdate.exe [4950840 2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
Task: {F37B4EBB-B7B1-4617-B9E0-2E2D11745779} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154456 2021-07-06] (Google LLC -> Google LLC)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{5d7c2cd5-9a75-1ac5-6245-118f1c411193}: [NameServer] 103.86.96.100,103.86.99.100
Tcpip\..\Interfaces\{c5578e93-b331-40af-82cc-4429dd9c0c86}: [DhcpNameServer] 192.168.0.1
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default [2021-07-16]
FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\ProgramData\Wondershare\Video Converter Ultimate\[email protected]_xpi => not found
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-19] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2021-07-16]
CHR DefaultSearchURL: Default -> hxxps://www.bing.com/search?q={searchTerms}&pc=COS2&ptag=D070721-N0640AF30FAE38D3&form=CONBDF&conlogo=CT3334466
CHR DefaultSearchKeyword: Default -> bing®
CHR DefaultNewTabURL: Default -> hxxps://www.bing.com/chrome/newtab?pc=COS2&ptag=D070721-N0630AF30FAE38D3&form=CONMHP&conlogo=CT3334466
CHR DefaultSuggestURL: Default -> hxxp://api.bing.com/osjson.aspx?query={searchTerms}
CHR Extension: (Slides) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-07-06]
CHR Extension: (Sheets) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-07-06]
CHR Extension: (Google Docs Offline) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-07-06]
CHR Extension: (Chrome Web Store Payments) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-07-06]
CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-07-06]
CHR HKLM-x32\...\Chrome\Extension: [mfhcmdonhekjhfbjmeacdjbhlfgpjabp]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [625976 2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R2 AVG Firewall; C:\Program Files\AVG\Antivirus\afwServ.exe [1381688 2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R2 AVG Tools; C:\Program Files\AVG\Antivirus\avgToolsSvc.exe [374072 2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 avgbIDSAgent; C:\Program Files\AVG\Antivirus\aswidsagent.exe [8297584 2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R2 AvgWscReporter; C:\Program Files\AVG\Antivirus\wsc_proxy.exe [109480 2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R2 nordvpn-service; C:\Program Files\NordVPN\nordvpn-service.exe [277688 2021-06-09] (TEFINCOM S.A. -> TEFINCOM S.A.)
R2 WCAssistantService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe [28136 2021-07-07] (LAVASOFT SOFTWARE CANADA INC -> )
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\NisSrv.exe [2665432 2021-07-10] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\MsMpEng.exe [136640 2021-07-10] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 avgArPot; C:\Windows\System32\drivers\avgArPot.sys [217056 2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgbidsdriver; C:\Windows\System32\drivers\avgbidsdriver.sys [366704 2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R0 avgbidsh; C:\Windows\System32\drivers\avgbidsh.sys [250464 2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R0 avgbuniv; C:\Windows\System32\drivers\avgbuniv.sys [99440 2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R0 avgElam; C:\Windows\System32\drivers\avgElam.sys [17344 2021-07-14] (Microsoft Windows Early Launch Anti-malware Publisher -> AVG Technologies CZ, s.r.o.)
R1 avgKbd; C:\Windows\System32\drivers\avgKbd.sys [41488 2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgMonFlt; C:\Windows\System32\drivers\avgMonFlt.sys [182736 2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgNetHub; C:\Windows\System32\drivers\avgNetHub.sys [524568 2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgRdr; C:\Windows\System32\drivers\avgRdr2.sys [108000 2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R0 avgRvrt; C:\Windows\System32\drivers\avgRvrt.sys [83056 2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgSnx; C:\Windows\System32\drivers\avgSnx.sys [851344 2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgSP; C:\Windows\System32\drivers\avgSP.sys [472064 2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S2 avgStm; C:\Windows\System32\drivers\avgStm.sys [215536 2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R0 avgVmm; C:\Windows\System32\drivers\avgVmm.sys [327696 2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R2 NDivert; C:\Windows\System32\drivers\NDivert.sys [105184 2021-06-10] (TEFINCOM S.A. -> )
R3 nlwt; C:\Windows\system32\DRIVERS\nlwt.sys [39360 2021-07-07] (TEFINCOM S.A. -> WireGuard LLC)
R1 nordlwf; C:\Windows\system32\DRIVERS\nordlwf.sys [38608 2020-12-14] (TEFINCOM S.A. -> TEFINCOM S.A.)
R3 tapnordvpn; C:\Windows\System32\drivers\tapnordvpn.sys [44896 2020-06-09] (TEFINCOM S.A. -> The OpenVPN Project)
R3 TotRec8; C:\Windows\system32\drivers\TotRec8.sys [125568 2015-10-20] (High Criteria Inc -> High Criteria inc.)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [49560 2021-07-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [425192 2021-07-10] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [76008 2021-07-10] (Microsoft Windows -> Microsoft Corporation)
S3 MpKsldb52d56e; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{42DF4E21-1994-4E9E-A0E7-9413F97B27C3}\MpKslDrv.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-07-16 11:05 - 2021-07-16 11:05 - 000015325 _____ C:\Users\User\Downloads\FRST.txt
2021-07-16 11:04 - 2021-07-16 11:05 - 000000000 ____D C:\FRST
2021-07-16 11:04 - 2021-07-16 11:04 - 002300416 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2021-07-16 11:04 - 2021-07-16 11:04 - 000000000 ____D C:\Users\User\Downloads\FRST-OlderVersion
2021-07-16 10:48 - 2021-07-16 10:48 - 000141282 _____ C:\Users\User\Desktop\DESKTOP-AOS346J.txt
2021-07-16 10:46 - 2021-07-16 10:47 - 000000837 _____ C:\Users\Public\Desktop\Speccy.lnk
2021-07-16 10:46 - 2021-07-16 10:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2021-07-16 10:46 - 2021-07-16 10:46 - 000000000 ____D C:\Program Files\Speccy
2021-07-16 10:44 - 2021-07-16 10:44 - 008234296 _____ (Piriform Software Ltd) C:\Users\User\Downloads\spsetup132.exe
2021-07-16 10:19 - 2021-07-16 10:20 - 008474901 _____ (UserBenchmark.com) C:\Users\User\Downloads\UserBenchMark.exe
2021-07-14 17:56 - 2021-07-14 17:57 - 000000000 ____D C:\Windows\system32\Tasks\AVAST Software
2021-07-14 16:37 - 2021-07-14 16:37 - 000002075 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Internet Security.lnk
2021-07-14 16:37 - 2021-07-14 16:37 - 000002063 _____ C:\Users\Public\Desktop\AVG Internet Security.lnk
2021-07-14 16:37 - 2021-07-14 16:37 - 000000000 ____D C:\Users\User\AppData\Roaming\AVG
2021-07-14 16:37 - 2021-07-14 16:37 - 000000000 ____D C:\Users\User\AppData\Local\CEF
2021-07-14 16:37 - 2021-07-14 16:37 - 000000000 ____D C:\Users\User\AppData\Local\AVG
2021-07-14 16:36 - 2021-07-14 17:57 - 000003044 _____ C:\Windows\system32\Tasks\Antivirus Emergency Update
2021-07-14 16:36 - 2021-07-14 16:36 - 000851344 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSnx.sys
2021-07-14 16:36 - 2021-07-14 16:36 - 000524568 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgNetHub.sys
2021-07-14 16:36 - 2021-07-14 16:36 - 000472064 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSP.sys
2021-07-14 16:36 - 2021-07-14 16:36 - 000366704 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidsdriver.sys
2021-07-14 16:36 - 2021-07-14 16:36 - 000340280 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\avgBoot.exe
2021-07-14 16:36 - 2021-07-14 16:36 - 000327696 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgVmm.sys
2021-07-14 16:36 - 2021-07-14 16:36 - 000250464 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidsh.sys
2021-07-14 16:36 - 2021-07-14 16:36 - 000217056 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgArPot.sys
2021-07-14 16:36 - 2021-07-14 16:36 - 000215536 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgStm.sys
2021-07-14 16:36 - 2021-07-14 16:36 - 000182736 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgMonFlt.sys
2021-07-14 16:36 - 2021-07-14 16:36 - 000108000 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRdr2.sys
2021-07-14 16:36 - 2021-07-14 16:36 - 000099440 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbuniv.sys
2021-07-14 16:36 - 2021-07-14 16:36 - 000083056 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRvrt.sys
2021-07-14 16:36 - 2021-07-14 16:36 - 000041488 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgKbd.sys
2021-07-14 16:36 - 2021-07-14 16:36 - 000017344 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgElam.sys
2021-07-14 16:36 - 2021-07-14 16:36 - 000000000 ____D C:\Windows\system32\Tasks\AVG
2021-07-14 16:36 - 2021-07-14 16:36 - 000000000 ____D C:\Program Files\Common Files\AVG
2021-07-14 16:35 - 2021-07-14 16:36 - 000000000 ____D C:\ProgramData\AVG
2021-07-14 16:35 - 2021-07-14 16:35 - 000000000 ____D C:\Program Files\AVG
2021-07-14 16:34 - 2021-07-14 16:34 - 000262712 _____ (AVG Technologies CZ, s.r.o.) C:\Users\User\Downloads\avg_internet_security_setup.exe
2021-07-14 12:19 - 2021-07-14 16:52 - 000000000 ____D C:\Users\User\Documents\Steves action camera
2021-07-14 12:19 - 2021-07-14 16:49 - 000000000 ____D C:\Users\User\Documents\HOME LOAN files
2021-07-14 12:19 - 2021-07-14 16:47 - 000000000 ____D C:\Users\User\Documents\AVG Files
2021-07-14 12:19 - 2021-07-14 12:19 - 000000000 ____D C:\Users\User\Documents\Items from desktop
2021-07-14 12:19 - 2021-07-04 15:02 - 000013976 _____ C:\Users\User\Documents\PENSION PAYMENTS 2021.xlsx
2021-07-14 12:19 - 2021-07-03 17:27 - 000593809 _____ C:\Users\User\Documents\Calendar backup July 2021.bdy
2021-07-14 12:19 - 2021-07-03 15:26 - 000013472 _____ C:\Users\User\Documents\Medications Calendar.xlsx
2021-07-14 12:19 - 2021-05-31 09:54 - 000018191 _____ C:\Users\User\Documents\Book List - Phred.xlsx
2021-07-14 12:19 - 2021-03-08 16:02 - 000094645 _____ C:\Users\User\Documents\Passwords.xlsx
2021-07-14 12:19 - 2020-12-29 16:50 - 000065133 _____ C:\Users\User\Documents\Roger medical history Dec 2020.xlsx
2021-07-14 12:19 - 2020-09-27 09:42 - 000306930 _____ C:\Users\User\Documents\Rogers calendar 27th Sept.bdy
2021-07-14 12:19 - 2020-08-18 16:39 - 000094305 _____ C:\Users\User\Documents\Passwords x.xlsx
2021-07-14 12:19 - 2020-07-29 11:56 - 000013054 _____ C:\Users\User\Documents\Absences from home June 2020.xlsx
2021-07-14 12:19 - 2020-07-03 15:52 - 001331589 _____ C:\Users\User\Documents\Forums Feb 2020 2.xlsx
2021-07-14 12:19 - 2020-07-03 15:52 - 000013370 _____ C:\Users\User\Documents\for phred.xlsx
2021-07-14 12:19 - 2020-03-29 18:36 - 000700747 _____ C:\Users\User\Documents\Backup of Forums March 2020.xlsx
2021-07-14 12:19 - 2020-03-28 19:58 - 001329990 _____ C:\Users\User\Documents\Backup of Backup of Forums March 2020.xlk
2021-07-14 12:19 - 2020-03-10 14:24 - 054118646 _____ C:\Users\User\Documents\OPPO_Smartphone_ColorOS_6.0_User_Guide.pdf
2021-07-14 12:19 - 2019-12-11 13:11 - 000187791 _____ C:\Users\User\Documents\Mens Shed Members List.pdf
2021-07-14 12:19 - 2019-10-02 18:41 - 150535638 _____ C:\Users\User\Documents\Amelie's first bike ride.mp4
2021-07-14 12:19 - 2019-05-30 09:58 - 006378317 _____ C:\Users\User\Documents\Phreds camera manual.pdf
2021-07-14 12:19 - 2019-01-08 19:09 - 004903847 _____ C:\Users\User\Documents\Amazing video.MP4
2021-07-14 12:19 - 2018-10-24 19:21 - 000011849 _____ C:\Users\User\Documents\Overseas trips 2020.xlsx
2021-07-14 12:19 - 2017-12-23 13:24 - 000025219 _____ C:\Users\User\Documents\Christmas place names.xlsx
2021-07-14 12:19 - 2017-07-29 11:18 - 000015701 _____ C:\Users\User\Documents\heart diary.xlsx
2021-07-14 12:19 - 2016-04-26 17:35 - 000014934 _____ C:\Users\User\Documents\Software Purchases.xlsx
2021-07-14 12:19 - 2008-08-31 11:18 - 119611392 _____ C:\Users\User\Documents\Environment Arguments a la Boston Legal.mpg
2021-07-14 12:19 - 2004-05-01 12:20 - 066029488 _____ C:\Users\User\Documents\sandstorm.mpg
2021-07-14 12:18 - 2020-06-30 17:43 - 000262608 _____ C:\Users\User\Documents\Jayco log 30 June 2020.xlsx
2021-07-14 12:18 - 2019-06-05 13:58 - 000009097 _____ C:\Users\User\Documents\Important dates.xlsx
2021-07-14 12:18 - 2015-11-04 03:51 - 219549696 _____ C:\Users\User\Documents\Jungle Book.mpg
2021-07-14 12:18 - 2013-12-14 08:35 - 000636944 _____ C:\Users\User\Documents\inventory.xlsx
2021-07-14 09:41 - 2021-07-14 09:41 - 000000000 ____D C:\Users\User\AppData\Roaming\AVS4YOU
2021-07-14 09:40 - 2021-07-14 09:40 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU
2021-07-14 09:38 - 2021-07-14 09:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU
2021-07-14 09:38 - 2021-07-14 09:40 - 000000000 ____D C:\Program Files (x86)\AVS4YOU
2021-07-14 09:38 - 2021-07-14 09:39 - 000000000 ____D C:\ProgramData\AVS4YOU
2021-07-14 09:38 - 2017-12-18 16:35 - 001006064 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\SysWOW64\libeay32.dll
2021-07-14 09:29 - 2021-07-14 09:30 - 284497752 _____ (Online Media Technologies Ltd. ) C:\Users\User\Downloads\AVSInstallPack_(1).exe
2021-07-13 21:00 - 2021-07-13 21:00 - 000001367 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\filezilla.lnk
2021-07-12 21:45 - 2021-07-12 21:45 - 000125224 _____ C:\Users\User\Documents\BIKES 2021 7 July.xlsx
2021-07-12 18:38 - 2021-07-12 18:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Handy Address Book
2021-07-12 18:38 - 2021-07-12 18:38 - 000000000 ____D C:\Program Files (x86)\Handy Address Book
2021-07-12 17:34 - 2021-07-12 17:35 - 000799384 _____ C:\Users\User\Downloads\addrbk80.exe
2021-07-12 17:29 - 2021-07-12 17:29 - 000000595 _____ C:\Users\User\Downloads\license.txt
2021-07-11 22:22 - 2021-07-12 18:42 - 000000000 ____D C:\Users\User\Documents\Handy Address Book
2021-07-11 09:35 - 2021-07-11 09:35 - 000000000 ____D C:\Users\User\AppData\Roaming\TotalRecorder
2021-07-11 09:33 - 2021-07-11 09:33 - 005108560 _____ C:\Users\User\Downloads\tr86se.exe
2021-07-11 09:33 - 2021-07-11 09:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Recorder
2021-07-11 09:33 - 2021-07-11 09:33 - 000000000 ____D C:\Program Files (x86)\HighCriteria
2021-07-11 09:33 - 2015-10-20 20:57 - 000125568 _____ (High Criteria inc.) C:\Windows\system32\Drivers\TotRec8.sys
2021-07-11 09:27 - 2021-07-11 09:27 - 000000000 ____D C:\Users\User\AppData\Roaming\GoldWave
2021-07-11 09:27 - 2021-07-11 09:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoldWave
2021-07-11 09:27 - 2021-07-11 09:27 - 000000000 ____D C:\Program Files\GoldWave
2021-07-11 09:26 - 2021-07-11 09:26 - 016979504 _____ (GoldWave Inc.) C:\Users\User\Downloads\InstallGoldWave655.exe
2021-07-10 15:20 - 2021-07-10 15:20 - 000000000 ____D C:\ProgramData\temp
2021-07-09 13:41 - 2021-07-16 10:41 - 000000000 ____D C:\Users\User\AppData\Local\CrashDumps
2021-07-08 17:52 - 2021-07-08 17:57 - 000000000 ____D C:\Users\User\Documents\ConvertXToDVD
2021-07-08 17:44 - 2021-07-16 09:46 - 000001059 _____ C:\Users\User\AppData\Roaming\vso_ts_preview.xml
2021-07-08 17:44 - 2012-11-21 20:16 - 000626688 _____ (On2.com) C:\Windows\SysWOW64\vp7vfw.dll
2021-07-08 17:44 - 2012-11-21 20:16 - 000273408 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\Pncrt.dll
2021-07-08 17:44 - 2012-11-21 20:16 - 000217127 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\drv43260.dll
2021-07-08 17:44 - 2012-11-21 20:16 - 000208935 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\drv33260.dll
2021-07-08 17:44 - 2012-11-21 20:16 - 000176165 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\drv23260.dll
2021-07-08 17:44 - 2012-11-21 20:16 - 000102439 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\sipr3260.dll
2021-07-08 17:44 - 2012-11-21 20:16 - 000065602 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\cook3260.dll
2021-07-08 17:43 - 2021-07-08 17:43 - 019946624 _____ (VSO-Software ) C:\Users\User\Downloads\vsoConvertXtoDVD4_setup-avangate_588.exe
2021-07-08 17:37 - 2021-07-08 17:37 - 000000000 ____D C:\Users\User\AppData\Roaming\CRL
2021-07-08 16:46 - 2021-07-08 17:47 - 000000000 ____D C:\Users\User\Documents\ConvertXtoDVD_Resources
2021-07-08 16:45 - 2021-07-16 09:46 - 000000000 ____D C:\Users\User\AppData\Roaming\VSO
2021-07-08 16:45 - 2021-07-08 17:51 - 000099384 _____ C:\Users\User\AppData\Roaming\inst.exe
2021-07-08 16:45 - 2021-07-08 17:51 - 000082816 _____ (VSO Software) C:\Users\User\AppData\Roaming\pcouffin.sys
2021-07-08 16:45 - 2021-07-08 17:51 - 000007859 _____ C:\Users\User\AppData\Roaming\pcouffin.cat
2021-07-08 16:45 - 2021-07-08 17:51 - 000000000 ____D C:\ProgramData\VSO
2021-07-08 16:45 - 2021-07-08 17:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VSO
2021-07-08 16:45 - 2021-07-08 17:51 - 000000000 ____D C:\Program Files (x86)\VSO
2021-07-08 16:44 - 2021-07-08 16:44 - 038112216 _____ (VSO Software ) C:\Users\User\Downloads\vsoConvertXtoDVD7_setup.exe
2021-07-08 15:04 - 2021-07-08 15:04 - 000001067 _____ C:\Users\User\Desktop\Downloaded UniConverter.lnk
2021-07-08 14:39 - 2021-07-14 10:22 - 000000000 ____D C:\Wondershare UniConverter
2021-07-08 14:39 - 2021-07-08 14:39 - 000000000 ____D C:\Program Files (x86)\WondershareUpdate
2021-07-08 14:38 - 2021-07-08 14:38 - 000000949 _____ C:\Users\Public\Desktop\Wondershare UniConverter.lnk
2021-07-08 14:38 - 2021-07-08 14:38 - 000000000 ____D C:\Users\User\AppData\Roaming\TransferSupport
2021-07-08 14:38 - 2021-07-08 14:38 - 000000000 ____D C:\Program Files\Wondershare
2021-07-08 14:37 - 2021-07-08 14:38 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2021-07-08 14:36 - 2021-07-08 14:36 - 001137952 _____ C:\Users\User\Downloads\video-converter-ultimate_setup_full975.exe
2021-07-08 14:33 - 2021-07-08 14:33 - 000000000 ____D C:\Users\User\.cache
2021-07-08 12:31 - 2021-07-08 14:38 - 000000000 ____D C:\Users\User\AppData\Roaming\Wondershare
2021-07-08 12:31 - 2021-07-08 12:31 - 000000000 ____D C:\Wondershare Video Converter Pro
2021-07-08 12:31 - 2021-07-08 12:31 - 000000000 ____D C:\ProgramData\GraphicsType
2021-07-08 12:29 - 2021-07-16 10:03 - 000000000 ____D C:\Users\User\AppData\Local\D3DSCache
2021-07-08 12:29 - 2021-07-08 12:29 - 000000000 ____D C:\Users\User\Documents\Wondershare Video Converter Pro
2021-07-08 12:29 - 2021-07-08 12:29 - 000000000 ____D C:\Users\User\AppData\Roaming\Wondershare Video Converter Pro
2021-07-08 12:28 - 2021-07-14 10:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2021-07-08 12:28 - 2021-07-14 10:19 - 000000000 ____D C:\Program Files (x86)\Wondershare
2021-07-08 12:28 - 2021-07-08 14:38 - 000000000 ____D C:\Users\User\AppData\Local\Wondershare
2021-07-08 12:28 - 2021-07-08 14:38 - 000000000 ____D C:\ProgramData\Wondershare
2021-07-08 12:28 - 2021-07-08 12:31 - 000000000 ____D C:\ProgramData\Wondershare Video Converter Pro
2021-07-08 12:28 - 2021-07-08 12:28 - 000000000 ____D C:\Users\User\Documents\Wondershare MediaServer
2021-07-08 12:28 - 2015-02-27 14:38 - 000721263 _____ () C:\Windows\SysWOW64\WSCM64.dll
2021-07-08 12:28 - 2015-02-27 14:38 - 000214528 _____ () C:\Windows\SysWOW64\WSCM32.dll
2021-07-08 12:27 - 2021-07-08 12:28 - 058497488 _____ (Wondershare Software ) C:\Users\User\Downloads\video-converter-pro_full50.exe
2021-07-08 12:23 - 2021-07-08 12:23 - 001113256 _____ C:\Users\User\Downloads\filmora-idco_setup_full1901 (1).exe
2021-07-08 12:22 - 2021-07-08 12:22 - 001113256 _____ C:\Users\User\Downloads\filmora-idco_setup_full1901.exe
2021-07-08 08:53 - 2021-07-08 08:53 - 000011351 _____ C:\Windows\system32\DrtmAuthTxt.wim
2021-07-07 18:40 - 2021-07-07 18:40 - 000002209 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belarc Advisor.lnk
2021-07-07 18:40 - 2021-07-07 18:40 - 000000000 ____D C:\Program Files (x86)\Belarc
2021-07-07 18:39 - 2021-07-07 18:39 - 003832112 _____ C:\Users\User\Downloads\advisorinstaller.exe
2021-07-07 10:20 - 2011-02-17 13:37 - 000974848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70.dll
2021-07-07 10:20 - 2011-02-17 13:37 - 000487424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp70.dll
2021-07-07 10:20 - 2011-02-17 13:37 - 000344064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr70.dll
2021-07-07 10:20 - 2010-05-11 13:17 - 000024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3a.dll
2021-07-07 10:09 - 2021-07-13 21:10 - 000000000 ____D C:\Users\User\AppData\Roaming\FileZilla
2021-07-07 10:09 - 2021-07-13 21:03 - 000000000 ____D C:\Users\User\AppData\Local\FileZilla
2021-07-07 10:08 - 2021-07-07 10:08 - 000000000 ____D C:\Program Files\FileZilla FTP Client
2021-07-07 10:02 - 2021-07-07 10:02 - 000000000 ____D C:\Users\User\AppData\Roaming\Lavasoft
2021-07-07 10:02 - 2021-07-07 10:02 - 000000000 ____D C:\Users\User\AppData\Local\Lavasoft
2021-07-07 10:02 - 2021-07-07 10:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2021-07-07 10:02 - 2021-07-07 10:02 - 000000000 ____D C:\ProgramData\Lavasoft
2021-07-07 10:02 - 2021-07-07 10:02 - 000000000 ____D C:\Program Files (x86)\Lavasoft
2021-07-07 10:00 - 2021-07-07 10:01 - 011402200 _____ (Tim Kosse) C:\Users\User\Downloads\FileZilla_3.54.1_win64_sponsored-setup.exe
2021-07-07 09:38 - 2021-07-16 10:38 - 000000000 ____D C:\Users\User\AppData\Roaming\NordPass
2021-07-07 09:38 - 2021-07-08 08:39 - 000000000 ____D C:\Users\User\AppData\Local\nordpass-updater
2021-07-07 09:38 - 2021-07-07 10:21 - 000000000 ____D C:\ProgramData\Package Cache
2021-07-07 09:38 - 2021-07-07 09:43 - 000000000 ____D C:\Users\User\AppData\Local\NordVPN
2021-07-07 09:38 - 2021-07-07 09:38 - 000039360 _____ (WireGuard LLC) C:\Windows\system32\Drivers\nlwt.sys
2021-07-07 09:38 - 2021-07-07 09:38 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NordSec
2021-07-07 09:38 - 2021-07-07 09:38 - 000000000 ____D C:\ProgramData\NordVPN
2021-07-07 09:38 - 2021-07-07 09:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NordSec
2021-07-07 09:38 - 2021-07-07 09:38 - 000000000 ____D C:\Program Files\NordVPN network TUN
2021-07-07 09:38 - 2021-07-07 09:38 - 000000000 ____D C:\Program Files\NordVPN
2021-07-07 09:38 - 2021-07-07 09:38 - 000000000 ____D C:\Program Files (x86)\NordVPN network TAP
2021-07-07 09:38 - 2021-06-10 12:10 - 000105184 _____ C:\Windows\system32\Drivers\NDivert.sys
2021-07-07 09:38 - 2020-12-14 11:21 - 000038608 _____ (TEFINCOM S.A.) C:\Windows\system32\Drivers\nordlwf.sys
2021-07-07 09:37 - 2021-07-07 09:37 - 023910520 _____ (TEFINCOM S.A. ) C:\Users\User\Downloads\NordVPNSetup.exe
2021-07-07 09:25 - 2021-07-07 10:35 - 000000000 ____D C:\Users\User\AppData\Roaming\Remind-Me
2021-07-07 09:24 - 2021-07-07 09:24 - 002505896 _____ C:\Users\User\Downloads\rmndme_gsync91.exe
2021-07-07 09:24 - 2021-07-07 09:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remind-Me
2021-07-07 09:24 - 2021-07-07 09:24 - 000000000 ____D C:\Program Files (x86)\Remind-Me
2021-07-07 09:21 - 2021-07-07 09:21 - 001033192 _____ C:\Users\User\Downloads\addrbk_gsync80.exe
2021-07-07 09:20 - 2021-07-12 18:42 - 000000000 ____D C:\Users\User\AppData\Roaming\Handy Address Book
2021-07-07 09:20 - 2021-07-08 08:38 - 000000000 ____D C:\ProgramData\GrebleSoft
2021-07-07 09:18 - 2021-07-07 09:18 - 000000000 ____D C:\Program Files\Reference Assemblies
2021-07-07 09:18 - 2021-07-07 09:18 - 000000000 ____D C:\Program Files\MSBuild
2021-07-07 09:18 - 2021-07-07 09:18 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2021-07-07 09:18 - 2021-07-07 09:18 - 000000000 ____D C:\Program Files (x86)\MSBuild
2021-07-06 18:16 - 2021-07-13 07:32 - 000426816 _____ C:\UkLog.dat
2021-07-06 17:28 - 2021-07-06 17:32 - 000000000 ___RD C:\Users\User\Documents\Address Book
2021-07-06 16:50 - 2021-07-06 16:50 - 000000000 ___HD C:\ProgramData\CanonBJ
2021-07-06 16:50 - 2015-03-12 05:00 - 000406528 _____ (CANON INC.) C:\Windows\system32\CNMLMCT.DLL
2021-07-06 16:32 - 2021-07-06 16:32 - 000000751 _____ C:\Users\User\Desktop\Documents.lnk
2021-07-06 12:10 - 2021-07-06 12:10 - 000000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2021-07-06 12:04 - 2021-07-13 21:04 - 000000000 ____D C:\Users\User\AppData\Roaming\vlc
2021-07-06 12:04 - 2021-07-06 12:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2021-07-06 12:04 - 2021-07-06 12:04 - 000000000 ____D C:\Program Files\VideoLAN
2021-07-06 12:03 - 2021-07-06 12:03 - 042762464 _____ C:\Users\User\Downloads\vlc-3.0.16-win64.exe
2021-07-06 12:02 - 2021-07-14 17:57 - 000003346 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2021-07-06 12:02 - 2021-07-14 17:57 - 000003122 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2021-07-06 12:02 - 2021-07-06 12:02 - 000002323 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-07-06 12:02 - 2021-07-06 12:02 - 000000000 ____D C:\Program Files\Google
2021-07-06 12:02 - 2021-07-06 12:02 - 000000000 ____D C:\Program Files (x86)\Google
2021-07-06 12:01 - 2021-07-06 17:34 - 000000000 ____D C:\Users\User\AppData\Local\Google
2021-07-06 12:01 - 2021-07-06 12:01 - 001310832 _____ (Google LLC) C:\Users\User\Downloads\ChromeSetup.exe
2021-07-06 12:01 - 2021-07-06 12:01 - 000002752 _____ C:\Users\User\Desktop\Microsoft Word 2010.lnk
2021-07-06 12:01 - 2021-07-06 12:01 - 000002714 _____ C:\Users\User\Desktop\Microsoft Excel 2010.lnk
2021-07-06 11:55 - 2021-07-06 11:55 - 000000000 ____D C:\Windows\PCHEALTH
2021-07-06 11:55 - 2021-07-06 11:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2021-07-06 11:54 - 2021-07-06 11:55 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2021-07-06 11:54 - 2021-07-06 11:54 - 000000000 __RHD C:\MSOCache
2021-07-06 11:54 - 2021-07-06 11:54 - 000000000 ____D C:\Windows\system32\Tasks\OfficeSoftwareProtectionPlatform
2021-07-06 11:54 - 2021-07-06 11:54 - 000000000 ____D C:\Windows\SHELLNEW
2021-07-06 11:54 - 2021-07-06 11:54 - 000000000 ____D C:\Users\User\AppData\Local\Microsoft Help
2021-07-06 11:54 - 2021-07-06 11:54 - 000000000 ____D C:\Program Files\Microsoft Office
2021-07-06 11:54 - 2021-07-06 11:54 - 000000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2021-07-04 09:33 - 2021-07-06 15:44 - 000000000 ____D C:\Windows\Panther
2021-07-03 16:32 - 2021-07-03 16:32 - 002371072 _____ C:\Windows\system32\rdpnano.dll
2021-07-03 16:32 - 2021-07-03 16:32 - 002260992 _____ C:\Windows\system32\TextInputMethodFormatter.dll
2021-07-03 16:32 - 2021-07-03 16:32 - 001823304 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2021-07-03 16:32 - 2021-07-03 16:32 - 001393504 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2021-07-03 16:32 - 2021-07-03 16:32 - 001314128 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2021-07-03 16:32 - 2021-07-03 16:32 - 000570880 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2021-07-03 16:32 - 2021-07-03 16:32 - 000452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2021-07-03 16:32 - 2021-07-03 16:32 - 000097792 _____ C:\Windows\system32\Drivers\cimfs.sys
2021-07-03 16:32 - 2021-07-03 16:32 - 000084992 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2021-07-03 16:32 - 2021-07-03 16:32 - 000067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscui.cpl
2021-07-03 16:32 - 2021-07-03 16:32 - 000060928 _____ C:\Windows\system32\runexehelper.exe
2021-07-03 16:23 - 2021-07-03 16:23 - 000000000 ____D C:\ProgramData\Intel
2021-07-03 16:13 - 2021-07-03 16:13 - 002755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2021-07-03 16:13 - 2021-07-03 16:13 - 002755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2021-07-03 16:13 - 2021-07-03 16:13 - 001864192 _____ (The ICU Project) C:\Windows\SysWOW64\icu.dll
2021-07-03 16:13 - 2021-07-03 16:13 - 001687040 _____ C:\Windows\system32\libcrypto.dll
2021-07-03 16:13 - 2021-07-03 16:13 - 001333760 _____ C:\Windows\SysWOW64\TextInputMethodFormatter.dll
2021-07-03 16:13 - 2021-07-03 16:13 - 000729600 _____ (Microsoft Corporation) C:\Windows\system32\hhctrl.ocx
2021-07-03 16:13 - 2021-07-03 16:13 - 000700928 _____ C:\Windows\system32\FsNVSDeviceSource.dll
2021-07-03 16:13 - 2021-07-03 16:13 - 000595968 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl
2021-07-03 16:13 - 2021-07-03 16:13 - 000581120 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr
2021-07-03 16:13 - 2021-07-03 16:13 - 000575488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hhctrl.ocx
2021-07-03 16:13 - 2021-07-03 16:13 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoScreensaver.scr
2021-07-03 16:13 - 2021-07-03 16:13 - 000469504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appwiz.cpl
2021-07-03 16:13 - 2021-07-03 16:13 - 000468440 _____ C:\Windows\SysWOW64\WindowManagementAPI.dll
2021-07-03 16:13 - 2021-07-03 16:13 - 000446976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmsys.cpl
2021-07-03 16:13 - 2021-07-03 16:13 - 000304128 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2021-07-03 16:13 - 2021-07-03 16:13 - 000234496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax
2021-07-03 16:13 - 2021-07-03 16:13 - 000178688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\intl.cpl
2021-07-03 16:13 - 2021-07-03 16:13 - 000170496 _____ (Microsoft Corporation) C:\Windows\system32\VBICodec.ax
2021-07-03 16:13 - 2021-07-03 16:13 - 000135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VBICodec.ax
2021-07-03 16:13 - 2021-07-03 16:13 - 000100864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncpa.cpl
2021-07-03 16:13 - 2021-07-03 16:13 - 000095744 _____ C:\Windows\system32\VirtualMonitorManager.dll
2021-07-03 16:13 - 2021-07-03 16:13 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2021-07-03 16:13 - 2021-07-03 16:13 - 000072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2021-07-03 16:13 - 2021-07-03 16:13 - 000067072 _____ C:\Windows\system32\BWContextHandler.dll
2021-07-03 16:13 - 2021-07-03 16:13 - 000053760 _____ C:\Windows\SysWOW64\BWContextHandler.dll
2021-07-03 16:13 - 2021-07-03 16:13 - 000039936 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2021-07-03 16:12 - 2021-07-03 16:12 - 002260480 _____ (The ICU Project) C:\Windows\system32\icu.dll
2021-07-03 16:12 - 2021-07-03 16:12 - 002254336 _____ C:\Windows\system32\dwmscene.dll
2021-07-03 16:12 - 2021-07-03 16:12 - 001163776 _____ C:\Windows\system32\MBR2GPT.EXE
2021-07-03 16:12 - 2021-07-03 16:12 - 000707016 _____ C:\Windows\system32\TextShaping.dll
2021-07-03 16:12 - 2021-07-03 16:12 - 000657464 _____ C:\Windows\system32\WindowManagementAPI.dll
2021-07-03 16:12 - 2021-07-03 16:12 - 000611952 _____ C:\Windows\SysWOW64\TextShaping.dll
2021-07-03 16:12 - 2021-07-03 16:12 - 000563712 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2021-07-03 16:12 - 2021-07-03 16:12 - 000544768 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl
2021-07-03 16:12 - 2021-07-03 16:12 - 000455168 _____ C:\Windows\system32\ssdm.dll
2021-07-03 16:12 - 2021-07-03 16:12 - 000423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2021-07-03 16:12 - 2021-07-03 16:12 - 000363520 _____ C:\Windows\system32\Windows.Internal.UI.Shell.WindowTabManager.dll
2021-07-03 16:12 - 2021-07-03 16:12 - 000330752 _____ C:\Windows\SysWOW64\ssdm.dll
2021-07-03 16:12 - 2021-07-03 16:12 - 000306688 _____ C:\Windows\system32\HeatCore.dll
2021-07-03 16:12 - 2021-07-03 16:12 - 000287232 _____ C:\Windows\system32\CoreMas.dll
2021-07-03 16:12 - 2021-07-03 16:12 - 000272384 _____ C:\Windows\system32\TpmTool.exe
2021-07-03 16:12 - 2021-07-03 16:12 - 000266240 _____ C:\Windows\SysWOW64\Windows.Internal.UI.Shell.WindowTabManager.dll
2021-07-03 16:12 - 2021-07-03 16:12 - 000243200 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2021-07-03 16:12 - 2021-07-03 16:12 - 000240640 _____ C:\Windows\SysWOW64\CoreMas.dll
2021-07-03 16:12 - 2021-07-03 16:12 - 000238592 _____ (Microsoft Corporation) C:\Windows\system32\intl.cpl
2021-07-03 16:12 - 2021-07-03 16:12 - 000235520 _____ C:\Windows\SysWOW64\HeatCore.dll
2021-07-03 16:12 - 2021-07-03 16:12 - 000231248 _____ C:\Windows\system32\containerdevicemanagement.dll
2021-07-03 16:12 - 2021-07-03 16:12 - 000223744 _____ C:\Windows\SysWOW64\TpmTool.exe
2021-07-03 16:12 - 2021-07-03 16:12 - 000190976 _____ C:\Windows\system32\BthpanContextHandler.dll
2021-07-03 16:12 - 2021-07-03 16:12 - 000182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2021-07-03 16:12 - 2021-07-03 16:12 - 000165888 _____ C:\Windows\system32\DataStoreCacheDumpTool.exe
2021-07-03 16:12 - 2021-07-03 16:12 - 000152064 _____ C:\Windows\system32\EoAExperiences.exe
2021-07-03 16:12 - 2021-07-03 16:12 - 000102912 _____ (Microsoft Corporation) C:\Windows\system32\ncpa.cpl
2021-07-03 16:12 - 2021-07-03 16:12 - 000089088 _____ C:\Windows\system32\windows.applicationmodel.conversationalagent.proxystub.dll
2021-07-03 16:12 - 2021-07-03 16:12 - 000074240 _____ C:\Windows\system32\rdsxvmaudio.dll
2021-07-03 16:12 - 2021-07-03 16:12 - 000073216 _____ C:\Windows\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll
2021-07-03 16:12 - 2021-07-03 16:12 - 000048640 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2021-07-03 16:12 - 2021-07-03 16:12 - 000013312 _____ C:\Windows\system32\agentactivationruntimestarter.exe
2021-07-03 16:12 - 2021-07-03 16:12 - 000010752 _____ C:\Windows\SysWOW64\agentactivationruntimestarter.exe
2021-07-03 16:12 - 2021-07-03 16:12 - 000001370 _____ C:\Windows\system32\ThirdPartyNoticesBySHS.txt
2021-07-03 16:07 - 2021-07-03 16:07 - 000000000 ____D C:\Users\User\AppData\Local\Comms
2021-07-03 16:06 - 2021-07-16 10:36 - 000000000 __SHD C:\Users\User\IntelGraphicsProfiles
2021-07-03 16:06 - 2021-07-16 10:36 - 000000000 ____D C:\Intel
2021-07-03 16:06 - 2021-07-03 16:07 - 000000000 ____D C:\Users\User\AppData\Local\Intel
2021-07-03 16:06 - 2021-07-03 16:06 - 000000000 ____D C:\Users\User\AppData\LocalLow\Intel
2021-07-03 16:06 - 2021-07-03 16:06 - 000000000 _____ C:\Windows\system32\GfxValDisplayLog.bin
2021-07-03 16:05 - 2021-07-13 21:07 - 000000000 ____D C:\Users\User\AppData\Local\PlaceholderTileLogoFolder
2021-07-03 16:05 - 2021-07-03 16:05 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-07-03 16:05 - 2020-09-11 11:36 - 000305992 _____ C:\Windows\system32\libmfxhw64.dll
2021-07-03 16:05 - 2020-09-11 11:36 - 000254520 _____ C:\Windows\SysWOW64\libmfxhw32.dll
2021-07-03 16:05 - 2020-09-11 11:36 - 000171472 _____ (Intel Corporation) C:\Windows\system32\intel_gfx_api-x64.dll
2021-07-03 16:05 - 2020-09-11 11:36 - 000146752 _____ (Intel Corporation) C:\Windows\SysWOW64\intel_gfx_api-x86.dll
2021-07-03 16:05 - 2020-09-11 11:35 - 026676016 _____ (Intel Corporation) C:\Windows\system32\mfxplugin64_hw.dll
2021-07-03 16:05 - 2020-09-11 11:35 - 013519664 _____ (Intel Corporation) C:\Windows\SysWOW64\mfxplugin32_hw.dll
2021-07-03 16:05 - 2020-09-11 11:35 - 001790192 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe
2021-07-03 16:05 - 2020-09-11 11:35 - 001790192 _____ C:\Windows\system32\vulkaninfo.exe
2021-07-03 16:05 - 2020-09-11 11:35 - 001386224 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2021-07-03 16:05 - 2020-09-11 11:35 - 001386224 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2021-07-03 16:05 - 2020-09-11 11:35 - 001096800 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll
2021-07-03 16:05 - 2020-09-11 11:35 - 001096800 _____ C:\Windows\system32\vulkan-1.dll
2021-07-03 16:05 - 2020-09-11 11:35 - 000949856 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll
2021-07-03 16:05 - 2020-09-11 11:35 - 000949856 _____ C:\Windows\SysWOW64\vulkan-1.dll
2021-07-03 16:05 - 2020-09-11 11:35 - 000507696 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2021-07-03 16:05 - 2020-09-11 11:35 - 000462640 _____ C:\Windows\system32\ze_loader.dll
2021-07-03 16:05 - 2020-09-11 11:35 - 000370480 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2021-07-03 16:05 - 2020-09-11 11:35 - 000148784 _____ C:\Windows\system32\ze_validation_layer.dll
2021-07-03 16:04 - 2021-07-14 17:57 - 000002862 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2759736083-2625989169-3022962864-1001
2021-07-03 16:04 - 2021-07-13 16:14 - 000000000 ___RD C:\Users\User\OneDrive
2021-07-03 16:03 - 2021-07-03 16:04 - 000000000 ____D C:\Windows\system32\MRT
2021-07-03 16:03 - 2021-07-03 16:03 - 000000000 ___HD C:\$WinREAgent
2021-07-03 16:00 - 2021-07-13 21:07 - 000000000 ____D C:\Users\User\AppData\Local\Packages
2021-07-03 16:00 - 2021-07-13 16:14 - 000002380 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-07-03 16:00 - 2021-07-11 09:43 - 000000000 ____D C:\Users\User\AppData\Local\VirtualStore
2021-07-03 16:00 - 2021-07-03 16:07 - 000000000 ____D C:\Users\User\AppData\Local\Publishers
2021-07-03 16:00 - 2021-07-03 16:00 - 000000020 ___SH C:\Users\User\ntuser.ini
2021-07-03 16:00 - 2021-07-03 16:00 - 000000000 ___RD C:\Users\User\3D Objects
2021-07-03 16:00 - 2021-07-03 16:00 - 000000000 ____D C:\Users\User\AppData\Roaming\Adobe
2021-07-03 16:00 - 2021-07-03 16:00 - 000000000 ____D C:\Users\User\AppData\Local\ConnectedDevicesPlatform
2021-07-03 15:39 - 2021-07-16 10:41 - 000840954 _____ C:\Windows\system32\PerfStringBackup.INI
2021-07-03 15:35 - 2021-07-03 15:35 - 000000000 _SHDL C:\Documents and Settings
2021-07-03 15:33 - 2021-07-16 10:36 - 000008192 ___SH C:\DumpStack.log.tmp
2021-07-03 15:33 - 2021-07-14 17:57 - 000002858 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2759736083-2625989169-3022962864-500
2021-07-03 15:33 - 2021-07-03 15:33 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-07-16 10:41 - 2019-12-07 19:13 - 000000000 ____D C:\Windows\INF
2021-07-16 10:38 - 2019-12-07 19:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-07-16 10:36 - 2020-11-19 17:30 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2021-07-16 10:36 - 2020-11-19 17:30 - 000000000 ____D C:\Windows\system32\SleepStudy
2021-07-16 10:03 - 2019-12-07 19:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-07-16 10:03 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\AppReadiness
2021-07-14 17:57 - 2020-11-19 17:32 - 000003408 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-07-14 17:57 - 2020-11-19 17:32 - 000003184 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-07-14 16:36 - 2019-12-07 19:14 - 000000000 ___HD C:\Windows\ELAMBKUP
2021-07-14 09:34 - 2019-12-07 19:03 - 000524288 _____ C:\Windows\system32\config\BBI
2021-07-10 19:55 - 2020-11-19 17:30 - 000395272 _____ C:\Windows\system32\FNTCACHE.DAT
2021-07-10 09:19 - 2020-11-19 17:30 - 000000000 ____D C:\Windows\system32\Drivers\wd
2021-07-10 09:16 - 2020-11-19 17:32 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-07-08 12:20 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\bcastdvr
2021-07-08 08:55 - 2019-12-07 19:03 - 000000000 ____D C:\Windows\CbsTemp
2021-07-06 16:03 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\system32\NDF
2021-07-06 12:15 - 2019-12-07 19:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2021-07-04 10:10 - 2019-12-07 19:14 - 000000000 ____D C:\Program Files\Windows Defender
2021-07-04 10:09 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\appcompat
2021-07-04 10:04 - 2020-11-19 17:33 - 000000000 ____D C:\ProgramData\Packages
2021-07-04 09:32 - 2019-12-07 19:14 - 000028672 _____ C:\Windows\system32\config\BCD-Template
2021-07-03 19:10 - 2019-12-07 19:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2021-07-03 19:10 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\SysWOW64\setup
2021-07-03 19:10 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\SysWOW64\oobe
2021-07-03 19:10 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2021-07-03 19:10 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\SystemResources
2021-07-03 19:10 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\system32\setup
2021-07-03 19:10 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\system32\oobe
2021-07-03 19:10 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\system32\Dism
2021-07-03 19:10 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\Provisioning
2021-07-03 16:22 - 2019-12-07 19:52 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2021-07-03 16:22 - 2019-12-07 19:52 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2021-07-03 16:22 - 2019-12-07 19:51 - 000000000 ____D C:\Windows\OCR
2021-07-03 16:22 - 2019-12-07 19:50 - 000000000 ____D C:\Windows\system32\OpenSSH
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ___SD C:\Windows\SysWOW64\F12
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ___SD C:\Windows\SysWOW64\DiagSvcs
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ___SD C:\Windows\system32\UNP
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ___SD C:\Windows\system32\F12
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ___SD C:\Windows\system32\DiagSvcs
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ___RD C:\Windows\PrintDialog
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\SysWOW64\PerceptionSimulation
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\SysWOW64\lv-LV
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\SysWOW64\lt-LT
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\SysWOW64\Keywords
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\SysWOW64\et-EE
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\SysWOW64\Com
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\SysWOW64\AdvancedInstallers
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\system32\WinMetadata
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\system32\Sysprep
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\system32\PerceptionSimulation
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\system32\migwiz
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\system32\lv-LV
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\system32\lt-LT
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\system32\Keywords
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\system32\et-EE
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\system32\es-MX
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\system32\Com
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\system32\AdvancedInstallers
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\ShellExperiences
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\ShellComponents
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\PolicyDefinitions
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\IME
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\DiagTrack
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Program Files\Common Files\System
2021-07-03 16:22 - 2019-12-07 19:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2021-07-03 16:22 - 2019-12-07 19:03 - 000000000 ____D C:\Windows\servicing
2021-07-03 16:15 - 2019-12-07 19:52 - 000023552 _____ (Microsoft Corporation) C:\Windows\system32\OEMDefaultAssociations.dll
2021-07-03 16:12 - 2020-11-19 17:32 - 002877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2021-07-03 16:00 - 2020-11-19 17:33 - 000000000 __RHD C:\Users\Public\AccountPictures
2021-07-03 15:38 - 2019-12-07 19:14 - 000000000 ____D C:\ProgramData\USOPrivate
2021-07-03 15:37 - 2019-12-07 19:50 - 000000000 ____D C:\Windows\system32\FxsTmp
2021-07-03 15:35 - 2019-12-07 19:14 - 000000000 ____D C:\Windows\ServiceState
==================== Files in the root of some directories ========
2021-07-08 16:45 - 2021-07-08 17:51 - 000099384 _____ () C:\Users\User\AppData\Roaming\inst.exe
2021-07-08 16:45 - 2021-07-08 17:51 - 000007859 _____ () C:\Users\User\AppData\Roaming\pcouffin.cat
2021-07-08 16:45 - 2021-07-08 17:51 - 000001167 _____ () C:\Users\User\AppData\Roaming\pcouffin.inf
2021-07-08 16:45 - 2021-07-08 17:51 - 000000055 _____ () C:\Users\User\AppData\Roaming\pcouffin.log
2021-07-08 16:45 - 2021-07-08 17:51 - 000082816 _____ (VSO Software) C:\Users\User\AppData\Roaming\pcouffin.sys
2021-07-08 17:44 - 2021-07-16 09:46 - 000001059 _____ () C:\Users\User\AppData\Roaming\vso_ts_preview.xml
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Addition.txt file:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-07-2021
Ran by User (16-07-2021 11:06:46)
Running from C:\Users\User\Downloads
Windows 10 Home Version 20H2 19042.1083 (X64) (2021-07-03 05:35:17)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-2759736083-2625989169-3022962864-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2759736083-2625989169-3022962864-503 - Limited - Disabled)
Guest (S-1-5-21-2759736083-2625989169-3022962864-501 - Limited - Disabled)
User (S-1-5-21-2759736083-2625989169-3022962864-1001 - Administrator - Enabled) => C:\Users\User
WDAGUtilityAccount (S-1-5-21-2759736083-2625989169-3022962864-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: AVG Antivirus (Disabled - Up to date) {18A975F9-A60C-37D8-E30B-4BEF31AD3411}
FW: AVG Antivirus (Disabled) {2092F4DC-EC63-3680-C854-E2DACF7E736A}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
AVG Internet Security (HKLM-x32\...\AVG Antivirus) (Version: 21.5.3185 - AVG Technologies)
AVS Audio Converter 9.0.1 (HKLM-x32\...\AVS Audio Converter_is1) (Version: 9.0.1.590 - Online Media Technologies Ltd.)
AVS Audio Editor 9.0.1 (HKLM-x32\...\AVS Audio Editor_is1) (Version: 9.0.1.530 - Online Media Technologies Ltd.)
AVS Disc Creator 6.1.3 (HKLM-x32\...\AVS Disc Creator_is1) (Version: 6.1.3.553 - Online Media Technologies Ltd.)
AVS Document Converter 4.2.1 (HKLM-x32\...\AVS Document Converter_is1) (Version: 4.2.1.266 - Online Media Technologies Ltd.)
AVS Image Converter 5.2.1 (HKLM-x32\...\AVS Image Converter_is1) (Version: 5.2.1.300 - Online Media Technologies Ltd.)
AVS Media Player 5.0.1 (HKLM-x32\...\AVS Media Player_is1) (Version: 5.0.1.130 - Online Media Technologies Ltd.)
AVS Photo Editor 3.2.1 (HKLM-x32\...\AVS Photo Editor_is1) (Version: 3.2.1.165 - Online Media Technologies Ltd.)
AVS Registry Cleaner 4.1.2 (HKLM-x32\...\AVS Registry Cleaner_is1) (Version: 4.1.2.288 - Online Media Technologies Ltd.)
AVS Video Converter 11.0.1 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version: 11.0.1.632 - Online Media Technologies Ltd.)
AVS Video Editor 9.0.1 (HKLM-x32\...\AVS Video Editor_is1) (Version: 9.0.1.328 - Online Media Technologies Ltd.)
AVS Video ReMaker 6.2.1 (HKLM-x32\...\AVS Video ReMaker_is1) (Version: 6.2.1.225 - Online Media Technologies Ltd.)
Belarc Advisor 9.7 (HKLM-x32\...\Belarc Advisor) (Version: 9.7.0.0 - Belarc Inc.)
ConvertXtoDVD 4.2.0.0 (HKLM-x32\...\{DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1) (Version: 4.2.0.0 - )
FileZilla Client 3.54.1 (HKLM-x32\...\FileZilla Client) (Version: 3.54.1 - Tim Kosse)
GoldWave v6.55 (HKLM\...\GoldWave v6.55) (Version: 6.55 - GoldWave Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 91.0.4472.124 - Google LLC)
Handy Address Book (HKLM-x32\...\Handy Address Book) (Version: - Beiley Software)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 91.0.864.67 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2759736083-2625989169-3022962864-1001\...\OneDriveSetup.exe) (Version: 21.129.0627.0002 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{E5A95BC5-81DF-4F0C-B910-B59DD012F037}) (Version: 2.81.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.29.30037 (HKLM-x32\...\{4b2f3795-f407-415e-88d5-8c8ab322909d}) (Version: 14.29.30037.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
NordPass (HKU\S-1-5-21-2759736083-2625989169-3022962864-1001\...\f7c32559-6c31-590a-9972-0bea54b04213) (Version: 4.6.14 - NordPass Team)
NordVPN (HKLM\...\{19465C24-3D5D-4327-B99F-3CC0A1D38151}_is1) (Version: 6.37.5.0 - TEFINCOM S.A.)
NordVPN network TAP (HKLM-x32\...\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}) (Version: 1.0.1 - NordVPN)
NordVPN network TUN (HKLM\...\{BD0E4F38-D3F6-452D-A32E-B14D721839AC}) (Version: 1.0.1 - NordVPN)
Remind-Me (HKLM-x32\...\Remind-Me) (Version: - Beiley Software)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform)
Total Recorder 8.6 Standard Edition (HKLM-x32\...\TotalRecorder) (Version: - )
VLC media player (HKLM\...\VLC media player) (Version: 3.0.16 - VideoLAN)
Web Companion (HKLM-x32\...\{ab22bd13-3e12-4b21-8430-92b4737695f3}) (Version: 7.0.2417.4248 - Lavasoft)
Wondershare Helper Compact 2.5.3 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.3 - Wondershare)
Wondershare UniConverter(Build 12.5.3.1) (HKLM\...\UniConverter_is1) (Version: 12.5.3.1 - Wondershare Software)
Packages:
=========
Intel® Graphics Command Center -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3325.0_x64__8j3eq9eme6ctt [2021-07-03] (INTEL CORP) [Startup Task]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.9.6151.0_x64__8wekyb3d8bbwe [2021-07-03] (Microsoft Studios) [MS Ad]
MPEG-2 Video Extension -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.22661.0_x64__8wekyb3d8bbwe [2021-07-13] (Microsoft Corporation)
Photos Media Engine Add-on -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-07-08] (Microsoft Corporation)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.163.568.0_x86__zpdnekdrzrea0 [2021-07-13] (Spotify AB) [Startup Task]
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellIconOverlayIdentifiers: [00avg] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
ShellIconOverlayIdentifiers-x32: [00avg] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
ContextMenuHandlers1: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
ContextMenuHandlers1: [ShellConverter] -> {30A4E07E-068A-4d91-8F05-691283A1336B} => C:\Program Files (x86)\Common Files\AVSMedia\ActiveX\AVSShellConverter64.dll [2017-12-18] (Online Media Technologies Ltd. -> Online Media Technologies Ltd.) [File not signed]
ContextMenuHandlers1: [WondershareVideoConverterFileOpreation] -> {FEB746CA-95C2-485F-B386-C30D4E56D22E} => C:\Windows\SysWOW64\WSCM64.dll [2015-02-27] () [File not signed]
ContextMenuHandlers3: [00avg] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
ContextMenuHandlers6: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2021-07-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2021-07-08 12:28 - 2016-07-21 10:54 - 000137728 _____ () [File not signed] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2021-07-08 12:28 - 2017-03-23 09:49 - 001506304 _____ () [File not signed] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2021-07-16 09:59 - 2021-07-13 23:29 - 000117760 _____ () [File not signed] C:\Users\User\AppData\Local\Programs\nordpass\resources\app.asar.unpacked\dist\desktop\main\keytar.node
2021-07-08 12:28 - 2015-02-27 14:38 - 000721263 _____ () [File not signed] C:\Windows\SysWOW64\WSCM64.dll
2021-07-08 12:28 - 2017-03-23 09:52 - 000708608 _____ (Wondershare) [File not signed] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSProducstInfo.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\avgSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\avgSP.sys => ""="Driver"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Wondershare Video Converter Ultimate 7.1.0 -> {451C804F-C205-4F03-B48E-537EC94937BF} -> C:\PROGRA~3\WONDER~1\VIDEOC~1\WSBROW~1.DLL => No File
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll [2020-10-15] (Belarc, Inc. -> Belarc, Inc.)
Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 - No File
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-2759736083-2625989169-3022962864-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-2759736083-2625989169-3022962864-1001\...\webcompanion.com -> hxxp://webcompanion.com
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-12-07 19:14 - 2019-12-07 19:12 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2759736083-2625989169-3022962864-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
Network Binding:
=============
Ethernet: NordVPN LightWeight Firewall -> NordLwf (enabled)
Ethernet 2: NordVPN LightWeight Firewall -> NordLwf (enabled)
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{39A71D5A-F687-4F29-B370-B81D16900338}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{6580C862-E45B-4B2D-B811-6FFAF9ED723E}C:\users\user\appdata\local\programs\nordpass\nordpass.exe] => (Allow) C:\users\user\appdata\local\programs\nordpass\nordpass.exe (nordvpn s.a. -> NordPass Team)
FirewallRules: [UDP Query User{259D821A-EDD1-4E26-A0E4-577E16A8E81B}C:\users\user\appdata\local\programs\nordpass\nordpass.exe] => (Allow) C:\users\user\appdata\local\programs\nordpass\nordpass.exe (nordvpn s.a. -> NordPass Team)
FirewallRules: [{8F7A9221-6303-4F21-AF84-2DA07AA602C5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.163.568.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{CA996CBE-AD91-4C83-AF9A-BA3B7DC5AC58}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.163.568.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{BCBA2BE9-47A6-41D0-A2AA-CF03F1A1138B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.163.568.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{46DA94C1-5DA0-4FD7-B8BB-E6E399C2D141}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.163.568.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B8839F82-FB08-4B9E-BA7B-B2891FB642F8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.163.568.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{CD918EE4-AA69-4A5D-90E7-0394980567A6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.163.568.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{51DA472D-4BCE-4B27-B5F6-0B2A52206724}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.163.568.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{79FA43A3-AB34-4324-A41B-CB4E0475BE17}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.163.568.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{D1C79E03-79BB-49E1-A916-11D20464C5BC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{7FA38113-58D8-47C6-8309-F74D0788B956}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{E3952F65-23AB-4F81-8958-BA88BF9AB605}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{4A6E08B9-13AB-4145-B490-457FF107B846}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.73.124.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
==================== Restore Points =========================
06-07-2021 16:50:43 Windows Update
08-07-2021 08:50:54 Windows Modules Installer
==================== Faulty Device Manager Devices ============
Name: PCI Memory Controller
Description: PCI Memory Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: SM Bus Controller
Description: SM Bus Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: PCI Simple Communications Controller
Description: PCI Simple Communications Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: ========================
Application errors:
==================
Error: (07/16/2021 10:41:01 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: RTAGS.exe, version: 0.0.0.0, time stamp: 0x60c93e25
Faulting module name: igc32.dll, version: 27.20.100.8681, time stamp: 0x5f53516b
Exception code: 0xc0000005
Fault offset: 0x000a8165
Faulting process id: 0x30c8
Faulting application start time: 0x01d779db3dc60855
Faulting application path: C:\Users\User\AppData\Local\Temp\UserBenchMarkTemp\RTAGS.exe
Faulting module path: C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\igc32.dll
Report Id: a4cfc4a9-86d3-4648-9433-c686026f32e0
Faulting package full name:
Faulting package-relative application ID:
Error: (07/14/2021 05:53:53 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program explorer.exe version 10.0.19041.1081 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: 112c
Start Time: 01d7786cb6877875
Termination Time: 0
Application Path: C:\Windows\explorer.exe
Report Id: f16b5249-ef78-4337-a532-16fdfc03868e
Faulting package full name:
Faulting package-relative application ID:
Hang type: Cross-process
Error: (07/14/2021 05:26:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: WsPushHelper.exe, version: 1.0.0.0, time stamp: 0x5ff96897
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x00007ffb48e050ff
Faulting process id: 0x2620
Faulting application start time: 0x01d77870da3d7862
Faulting application path: C:\Program Files\Wondershare\UniConverter\WsPushHelper.exe
Faulting module path: unknown
Report Id: 6de5425f-60f0-4d53-b6ec-efb1e4541b89
Faulting package full name:
Faulting package-relative application ID:
Error: (07/14/2021 05:26:54 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: WsPushHelper.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.NullReferenceException
Error: (07/12/2021 05:01:26 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: The storage optimizer couldn't complete retrim on ESD-USB (D:) because: This operation is not supported on this filesystem. (0x89000020)
Error: (07/11/2021 03:38:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: WsPushHelper.exe, version: 1.0.0.0, time stamp: 0x5ff96897
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x00007ffadc1c50ff
Faulting process id: 0x2604
Faulting application start time: 0x01d776063fc25963
Faulting application path: C:\Program Files\Wondershare\UniConverter\WsPushHelper.exe
Faulting module path: unknown
Report Id: 95c6bea7-6f00-4306-b2bc-faeadb336ba9
Faulting package full name:
Faulting package-relative application ID:
Error: (07/11/2021 03:38:47 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: WsPushHelper.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.NullReferenceException
Error: (07/10/2021 02:48:17 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: WsPushHelper.exe, version: 1.0.0.0, time stamp: 0x5ff96897
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x00007ffb35d750ff
Faulting process id: 0x2058
Faulting application start time: 0x01d7751d9f84f6be
Faulting application path: C:\Program Files\Wondershare\UniConverter\WsPushHelper.exe
Faulting module path: unknown
Report Id: 5e1ee6f2-68af-43f4-9546-fe05f4478972
Faulting package full name:
Faulting package-relative application ID:
System errors:
=============
Error: (07/16/2021 10:36:49 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The cphs service terminated with the following error:
Unspecified error
Error: (07/16/2021 10:36:49 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 10:30:06 AM on 16/07/2021 was unexpected.
Error: (07/16/2021 10:36:41 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)
Description: 3221225684A fatal error occurred processing the restoration data.
Error: (07/14/2021 02:57:10 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The cphs service terminated with the following error:
Unspecified error
Error: (07/14/2021 02:57:10 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 12:28:20 PM on 14/07/2021 was unexpected.
Error: (07/14/2021 02:57:03 PM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)
Description: 3221225684A fatal error occurred processing the restoration data.
Error: (07/14/2021 09:34:35 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The cphs service terminated with the following error:
Unspecified error
Error: (07/14/2021 09:18:52 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The cphs service terminated with the following error:
Unspecified error
Windows Defender:
================
Date: 2021-07-09 19:30:44
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2021-07-09 15:12:24
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2021-07-06 17:14:09
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2021-07-06 16:57:50
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2021-07-05 09:18:13
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
CodeIntegrity:
===============
Date: 2021-07-16 10:39:04
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Windows signing level requirements.
Date: 2021-07-16 10:38:03
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. 3805 05/07/2018
Motherboard: ASUSTeK COMPUTER INC. H110M-E
Processor: Intel® Core™ i3-6100 CPU @ 3.70GHz
Percentage of memory in use: 56%
Total physical RAM: 8063.39 MB
Available physical RAM: 3492.58 MB
Total Virtual: 9791.39 MB
Available Virtual: 5377.63 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:446.53 GB) (Free:362.06 GB) NTFS
\\?\Volume{41a95bc9-6a00-48df-94c5-b5f780d653fc}\ () (Fixed) (Total:0.49 GB) (Free:0.08 GB) NTFS
\\?\Volume{c57cdf19-b3f4-43e1-bd64-0528eed1beb9}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 447.1 GB) (Disk ID: 49B26332)
Partition: GPT.
==================== End of Addition.txt =======================
Benchmark url:
Speccy Report follows in a second post, this one proved to be too long! 
Roger
Sign In
Create Account
