Hi Geeks to go,
Working on my daughter's laptop and seeing the following symptoms:
- single click on start button then typing, does not recognize (I typically search this way on my pc)
- bring up file explorer, search bar does not allow cursor or typing within the field.
- Windows update has two pending updates but fails on install with error 0x80070026
- popups appear in right margin somewhat randomly. PC has Avast installed
- sfc /scannow finished with a message that said some corrupt files could not be fixed.
- windows troubleshoot option appears to be missing. I could reach the troubleshoot window but saw no button to press.
I ran CCleaner, it deleted some stuff but that's about it. My efforts have been focused on trying to get the windows updates completed.
Any help you could provide would be greatly appreciated and I'd be happy to donate some $$ if I get this thing cleaned up. FRST and Addition logs pasted below.
FRST:
______________________________
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 27-10-2022
Ran by kgwal (administrator) on LAPTOP-IC9ME3DV (HP HP Laptop 15t-dy100) (28-10-2022 08:11:20)
Running from C:\Users\kgwal\OneDrive\Desktop
Loaded Profiles: kgwal
Platform: Microsoft Windows 10 Home Version 21H1 19043.1586 (X64) Language: English (United States)
Default browser not detected!
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastUI.exe <4>
(C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_dc2a57d591329a30\igfxCUIServiceN.exe ->) (Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_dc2a57d591329a30\igfxEMN.exe
(DriverStore\FileRepository\hpanalyticscomp.inf_amd64_970b3aa928c32e35\x64\TouchpointAnalyticsClientService.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_970b3aa928c32e35\x64\TouchpointGpuInfo.exe
(DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f0454c515430e99a\x64\SysInfoCap.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f0454c515430e99a\x64\BridgeCommunication.exe
(ETDService.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDCtrl.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <12>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64.exe
(HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.3.2.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityHost.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\afwServ.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswidsagent.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(services.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_970b3aa928c32e35\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f0454c515430e99a\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f0454c515430e99a\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f0454c515430e99a\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f0454c515430e99a\x64\SysInfoCap.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_21306a77b30fd6e0\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_ba273d0ffb93e225\RstMwService.exe
(services.exe ->) (Intel® Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_31a8dbbf39dcdc3b\jhi_service.exe
(services.exe ->) (Intel® Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_3ef70b9d5cc0699f\LMS.exe
(services.exe ->) (Intel® pGFX 2020 -> ) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_dc7a0fe3ada1cbf5\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_dc2a57d591329a30\igfxCUIServiceN.exe
(services.exe ->) (Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_ada2367baaae74c0\IntelCpHDCPSvc.exe
(services.exe ->) (Intel® Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(services.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(services.exe ->) (WildTangent, Inc. -> ) C:\Program Files (x86)\WildTangent Games\Integration\WildTangentHelperService.exe
(svchost.exe ->) (HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPJumpStarts_1.10.1627.0_x64__v10z8vjag6ke6\HP.JumpStarts.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22082.119.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\backgroundTaskHost.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1138976 2020-08-13] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [212192 2022-10-05] (Avast Software s.r.o. -> AVAST Software)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-691941065-2667957141-2909907241-1001\...\Run: [HPSEU_Host_Launcher] => C:\System.sav\util\HpseuHostLauncher.exe [536152 2022-08-15] (HP Inc. -> HP Inc.)
HKU\S-1-5-21-691941065-2667957141-2909907241-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\kgwal\AppData\Local\Microsoft\Teams\Update.exe [2508480 2022-07-23] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-691941065-2667957141-2909907241-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4234088 2022-10-07] (Valve Corp. -> Valve Corporation)
HKLM\...\Print\Monitors\HP CE11 Status Monitor: C:\WINDOWS\system32\hpinkstsCE11LM.dll [393352 2017-03-20] (Hewlett Packard -> HP Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\106.0.5249.119\Installer\chrmstp.exe [2022-10-11] (Google LLC -> Google LLC)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {00363246-B848-4D2A-8A9F-22BBAA75A159} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\480AB3E9-B775-4A63-887C-4EFBD04B7CB9\PushUpgrade => C:\WINDOWS\system32\deviceenroller.exe [448512 2022-02-11] (Microsoft Windows -> Microsoft Corporation)
Task: {1B592313-99B2-4818-AA0F-059A7B498B26} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2250576 2022-05-24] (Avast Software s.r.o. -> Avast Software)
Task: {1B657F4A-CD60-47B0-8BB0-2D91F1B405CA} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\480AB3E9-B775-4A63-887C-4EFBD04B7CB9\Schedule to run OMADMClient by client => C:\WINDOWS\system32\omadmclient.exe [432128 2022-03-08] (Microsoft Windows -> Microsoft Corporation)
Task: {3263B49A-661E-485F-98C3-0B9B54999A26} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [143232 2022-10-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {32DEBA87-47CF-46ED-80E9-EACF548DD83E} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\480AB3E9-B775-4A63-887C-4EFBD04B7CB9\OS Edition Upgrade event listener created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [448512 2022-02-11] (Microsoft Windows -> Microsoft Corporation)
Task: {3C6332A6-C4AD-4A69-8DC5-D825292AD995} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1149512 2022-08-17] (HP Inc. -> HP Inc.)
Task: {4B17CCAE-E97B-471E-A67B-0EEFC68B7516} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\480AB3E9-B775-4A63-887C-4EFBD04B7CB9\Schedule #2 created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [448512 2022-02-11] (Microsoft Windows -> Microsoft Corporation)
Task: {4BC57174-ABDE-4022-9D58-504D5CF56073} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\480AB3E9-B775-4A63-887C-4EFBD04B7CB9\PushLaunch => C:\WINDOWS\system32\deviceenroller.exe [448512 2022-02-11] (Microsoft Windows -> Microsoft Corporation)
Task: {558D1641-F070-49DD-927D-0738C02F930F} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\480AB3E9-B775-4A63-887C-4EFBD04B7CB9\Schedule #3 created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [448512 2022-02-11] (Microsoft Windows -> Microsoft Corporation)
Task: {5FEEE856-A8B7-409F-B627-896FDA15C453} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\480AB3E9-B775-4A63-887C-4EFBD04B7CB9\PushRenewal => C:\WINDOWS\system32\deviceenroller.exe [448512 2022-02-11] (Microsoft Windows -> Microsoft Corporation)
Task: {602CCC8F-6434-4E62-BD8A-094F0AEB2C1A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1149512 2022-08-17] (HP Inc. -> HP Inc.)
Task: {66FB8E86-9DE3-4838-8867-B82BE3B6E26D} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\480AB3E9-B775-4A63-887C-4EFBD04B7CB9\Passport for Work alert created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [448512 2022-02-11] (Microsoft Windows -> Microsoft Corporation)
Task: {677DC127-4C02-421F-B607-428B9DB4E671} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\480AB3E9-B775-4A63-887C-4EFBD04B7CB9\Win10 S Mode event listener created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [448512 2022-02-11] (Microsoft Windows -> Microsoft Corporation)
Task: {6BFC7E93-4447-44ED-92B5-2C67A25BF7DE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [847392 2022-08-17] (HP Inc. -> HP Inc.)
Task: {6C3F1E6E-AB2F-4BE8-95DE-98D26133ADBC} - System32\Tasks\HPAudioSwitch => C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe [1644472 2019-06-21] (HP Inc. -> HP Inc.)
Task: {705EE3A2-CC78-4B5F-AE4D-F4444177E764} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPPrinterLowInk => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPPrinterLowInk\HPPrinterLowInk.exe [221328 2022-08-17] (HP Inc. -> )
Task: {88AAA980-CACC-4778-9332-584BB8A4C6C7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_TH61M2R0Y2 => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1149512 2022-08-17] (HP Inc. -> HP Inc.)
Task: {8BBF1844-EFC6-4E1C-83C3-C7DD2FEB1D15} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8502776 2022-09-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {8E817364-C4A6-400E-A113-499097C9ADED} - System32\Tasks\HP\Consent Manager Launcher => sc start hptouchpointanalyticsservice
Task: {9A913D65-912D-41E2-B07D-EC47C1CB21C7} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26165176 2022-10-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {A7AF0A96-782A-4527-91DF-5B97F6AEA148} - System32\Tasks\Microsoft\Windows\WaaSMedic\MaintenanceWork => {72566E27-1ABB-4EB3-B4F0-EB431CB1CB32}
Task: {B4EF8A5D-40BB-46A0-8AC1-CFA933D42EE9} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\480AB3E9-B775-4A63-887C-4EFBD04B7CB9\Provisioning initiated session => C:\WINDOWS\system32\deviceenroller.exe [448512 2022-02-11] (Microsoft Windows -> Microsoft Corporation)
Task: {B8C25D93-7C34-4AD2-9A41-A18361AB6845} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-03-18] (Piriform Software Ltd -> Piriform)
Task: {B96FA9FF-4B15-47B8-A63B-896D1A289584} - System32\Tasks\Samsung_PSSD_Registration => C:\ProgramData\Samsung Apps\Portable SSD\SamsungPortableSSDMon.exe [497752 2021-04-02] (Samsung Electronics Co., Ltd. -> Samsung Electronics)
Task: {C53463A5-6379-4380-A1FF-7BA3CD9B768B} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\480AB3E9-B775-4A63-887C-4EFBD04B7CB9\Wsc Startup event listener created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [448512 2022-02-11] (Microsoft Windows -> Microsoft Corporation)
Task: {C81CCE0B-5B04-47FE-9E45-ECE8774878A7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-06-29] (Google LLC -> Google LLC)
Task: {CABD8EBA-E11C-428C-BFF9-BBC4ECB3091B} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\480AB3E9-B775-4A63-887C-4EFBD04B7CB9\Schedule #1 created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [448512 2022-02-11] (Microsoft Windows -> Microsoft Corporation)
Task: {CCA8D1E1-B24A-4C82-B031-449451EA5082} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2022-08-17] (HP Inc. -> HP Inc.)
Task: {D2945AF5-2D23-457E-B840-8D6667B6E488} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8502776 2022-09-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {D32CCD7E-9280-4B49-8421-78CB10309F54} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {D9999316-08B7-4146-BC35-13458B6322B9} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [4946144 2022-10-05] (Avast Software s.r.o. -> AVAST Software)
Task: {DA694A39-A1DD-4D90-8399-8681B23BA9BE} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [65448 2022-09-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {E5C6D7E0-1D0A-4122-B1A5-93F48AD6BB82} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [27616328 2021-03-18] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {ECE4D2CC-C095-42A6-AD78-8A83842011E9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-06-29] (Google LLC -> Google LLC)
Task: {F7287EEB-AB00-4FC7-8F0F-0E8103E2FC0B} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26165176 2022-10-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {F7714060-49AF-48FB-8B4E-5E173AC4BC1B} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [143232 2022-10-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {FC54F41E-EFBA-412B-9319-7A166EBE6BBE} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\480AB3E9-B775-4A63-887C-4EFBD04B7CB9\Schedule created by enrollment client for renewal of certificate warning => C:\WINDOWS\system32\deviceenroller.exe [448512 2022-02-11] (Microsoft Windows -> Microsoft Corporation)
Task: {FD3EE8D5-DA0E-481B-9C2D-EE36F6F77FF1} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\480AB3E9-B775-4A63-887C-4EFBD04B7CB9\Schedule to run OMADMClient by server => C:\WINDOWS\system32\omadmclient.exe [432128 2022-03-08] (Microsoft Windows -> Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76
Tcpip\..\Interfaces\{e244c7d2-d1b5-4a75-a2c0-4db499b2115f}: [DhcpNameServer] 75.75.75.75 75.75.76.76
Edge:
=======
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge DefaultProfile: Default
Edge Profile: C:\Users\kgwal\AppData\Local\Microsoft\Edge\User Data\Default [2022-10-27]
FireFox:
========
FF DefaultProfile: 1ix7idxp.default
FF ProfilePath: C:\Users\kgwal\AppData\Roaming\Mozilla\Firefox\Profiles\1ix7idxp.default [2020-08-26]
FF ProfilePath: C:\Users\kgwal\AppData\Roaming\Mozilla\Firefox\Profiles\jfxn6zxt.default-release [2022-10-27]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-07-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2022-03-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-07-08] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Profile 2
CHR Profile: C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Default [2022-10-27]
CHR Notifications: Default -> hxxps://chat.google.com; hxxps://meet.google.com; hxxps://pushwelcome.com; hxxps://www.netflix.com; hxxps://www.pinterest.com
CHR Extension: (Google Docs Offline) - C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-07-01]
CHR Extension: (Chrome Web Store Payments) - C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-28]
CHR Profile: C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Guest Profile [2022-10-28]
CHR Profile: C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 1 [2022-10-27]
CHR Extension: (Google Docs Offline) - C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-07-20]
CHR Extension: (Extension Toggle for Chrome™) - C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\igfgceofdhhgnpbnokpgnmgejaddnjla [2022-06-15]
CHR Extension: (Fire Shield Overview) - C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ndajnaaobjaganokllcgbapngenfbgkc [2022-06-15]
CHR Extension: (Chrome Web Store Payments) - C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-08-01]
CHR Profile: C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 2 [2022-10-28]
CHR Notifications: Profile 2 -> hxxps://www.netflix.com
CHR Extension: (Google Docs Offline) - C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-08-31]
CHR Extension: (Chrome Web Store Payments) - C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-09-12]
CHR Profile: C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 5 [2022-10-27]
CHR Extension: (OneNote Online) - C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ciniambnphakdoflgeamacamhfllbkmo [2022-07-09]
CHR Extension: (Word Online) - C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\fiombgjlkfpdpkbhfioofeeinbehmajg [2022-07-09]
CHR Extension: (Google Docs Offline) - C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-08-04]
CHR Extension: (Zoom) - C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\hmbjbjdpkobdjplfobhljndfdfdipjhg [2022-07-09]
CHR Extension: (Excel Online) - C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\iljnkagajgfdmfnnidjijobijlfjfgnb [2022-07-09]
CHR Extension: (PowerPoint Online) - C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\mdafamggmaaaginooondinjgkgcbpnhp [2022-07-09]
CHR Extension: (Office) - C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ndjpnladcallmjemlbaebfadecfhkepb [2022-07-09]
CHR Extension: (OneDrive) - C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nffchahhjecejoiigmnhhicpoabngedk [2022-07-09]
CHR Extension: (Chrome Web Store Payments) - C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-07-09]
CHR Profile: C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 6 [2022-10-27]
CHR Extension: (Google Docs Offline) - C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-07-14]
CHR Extension: (Chrome Web Store Payments) - C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-07-14]
CHR Profile: C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 7 [2022-10-27]
CHR Extension: (Proctorio) - C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\fpmapakogndmenjcfoajifaaonnkpkei [2022-10-22]
CHR Extension: (Google Docs Offline) - C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-09-05]
CHR Extension: (Loom – Free Screen Recorder & Screen Capture) - C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\liecbddmkiiihnedobmlmillhodjkdmb [2022-10-20]
CHR Extension: (Chrome Web Store Payments) - C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-07-27]
CHR Profile: C:\Users\kgwal\AppData\Local\Google\Chrome\User Data\System Profile [2022-10-28]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [8513552 2022-10-05] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [592608 2022-10-05] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Firewall; C:\Program Files\Avast Software\Avast\afwServ.exe [2018528 2022-10-27] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [592096 2022-10-05] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2021-06-04] (Avast Software s.r.o. -> AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12477344 2022-10-14] (Microsoft Corporation -> Microsoft Corporation)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [905080 2020-03-18] (HP Inc. -> HP Inc.)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f0454c515430e99a\x64\AppHelperCap.exe [786888 2022-09-28] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f0454c515430e99a\x64\DiagsCap.exe [785896 2022-09-28] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f0454c515430e99a\x64\NetworkCap.exe [782296 2022-09-28] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f0454c515430e99a\x64\SysInfoCap.exe [786392 2022-09-28] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_970b3aa928c32e35\x64\TouchpointAnalyticsClientService.exe [493680 2022-09-28] (HP Inc. -> HP Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2008.9-0\NisSrv.exe [2343112 2020-09-02] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WildTangentHelper; C:\Program Files (x86)\WildTangent Games\Integration\WildTangentHelperService.exe [1689984 2022-03-29] (WildTangent, Inc. -> )
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2008.9-0\MsMpEng.exe [128360 2020-09-02] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AmUStor; C:\WINDOWS\system32\drivers\AmUStorU.sys [127936 2019-07-02] (Alcorlink Corp. -> )
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [238128 2022-10-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [390096 2022-10-05] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [258496 2022-10-05] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [105920 2022-10-05] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [25576 2022-10-13] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [48488 2022-10-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [276496 2022-10-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [558536 2022-10-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [114488 2022-10-05] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [90000 2022-10-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [862960 2022-10-05] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [671712 2022-10-05] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [221976 2022-10-05] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [327904 2022-10-05] (Avast Software s.r.o. -> AVAST Software)
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_a955fa431e522f5e\x64\hpcustomcapdriver.sys [25592 2021-09-15] (HP Inc. -> HP Inc.)
R3 iaLPSS2_I2C_ICL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_icl.inf_amd64_c8c0638291b9b209\iaLPSS2_I2C_ICL.sys [200456 2020-04-27] (Intel Corporation -> Intel Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [48520 2020-09-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [428256 2020-09-02] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [69856 2020-09-02] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [40104 2022-06-17] (HP Inc. -> HP)
R3 WirelessKeyboardFilter; C:\WINDOWS\System32\drivers\WirelessKeyboardFilter.sys [49336 2018-03-11] (Microsoft Corporation -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2022-10-28 08:11 - 2022-10-28 08:11 - 000000000 ____D C:\FRST
2022-10-28 07:49 - 2022-10-28 07:49 - 000000000 ___HD C:\$WinREAgent
2022-10-27 22:27 - 2022-10-27 22:27 - 000000000 ____D C:\Users\kgwal\AppData\Local\ElevatedDiagnostics
2022-10-27 22:23 - 2022-10-27 22:23 - 000000000 ___HD C:\$WINDOWS.~BT
2022-10-27 21:32 - 2022-10-27 21:32 - 000000000 ____D C:\Users\kgwal\AppData\Roaming\WildTangent
2022-10-27 21:31 - 2022-10-27 21:31 - 000000000 ____D C:\ProgramData\WildTangent
2022-10-27 19:02 - 2022-10-27 19:02 - 000002095 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Premium Security.lnk
2022-10-27 19:02 - 2022-10-27 19:02 - 000002083 _____ C:\Users\Public\Desktop\Avast Premium Security.lnk
2022-10-27 19:01 - 2022-10-05 22:42 - 000270560 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2022-10-26 17:18 - 2022-10-26 17:18 - 006213120 _____ C:\Users\kgwal\Downloads\Urea Cycle.ppt
2022-10-26 10:20 - 2022-10-26 10:20 - 004389343 _____ C:\Users\kgwal\Downloads\CH13 Diagnosing infections Week 8.pptx
2022-10-25 21:40 - 2022-10-25 21:41 - 004343808 _____ C:\Users\kgwal\Downloads\Chpt07-QuantTheoryElectrStuctAtoms.ppt
2022-10-23 21:55 - 2022-10-23 21:55 - 004381961 _____ C:\Users\kgwal\Downloads\2022-10-23 20-28.pdf
2022-10-21 17:15 - 2022-10-21 17:15 - 007762432 _____ C:\Users\kgwal\Downloads\Glycogen Metabolism.ppt
2022-10-21 11:33 - 2022-10-21 11:33 - 000975117 _____ C:\Users\kgwal\Downloads\Chapter 7 Worksheet.pdf
2022-10-21 11:31 - 2022-10-21 11:31 - 000975117 _____ C:\Users\kgwal\Downloads\2022-10-21 11-28.pdf
2022-10-21 11:13 - 2022-10-21 11:13 - 001113719 _____ C:\Users\kgwal\Downloads\Week 7 Calculations Extra Practice PPT Only.pptx
2022-10-19 09:31 - 2022-10-19 09:31 - 005383241 _____ C:\Users\kgwal\Downloads\CH03 (1).pptx
2022-10-19 09:30 - 2022-10-19 09:30 - 013753512 _____ C:\Users\kgwal\Downloads\CH07 (1).pptx
2022-10-19 09:30 - 2022-10-19 09:30 - 006596056 _____ C:\Users\kgwal\Downloads\CH08 (1).pptx
2022-10-19 09:29 - 2022-10-19 09:29 - 014285588 _____ C:\Users\kgwal\Downloads\Prokaryotes (2).pptx
2022-10-19 09:29 - 2022-10-19 09:29 - 014285588 _____ C:\Users\kgwal\Downloads\Prokaryotes (1).pptx
2022-10-19 09:28 - 2022-10-19 09:28 - 022145806 _____ C:\Users\kgwal\Downloads\Eukaryotes (1).pptx
2022-10-16 23:25 - 2022-10-16 23:25 - 005228381 _____ C:\Users\kgwal\Downloads\2022-10-16 23-24.pdf
2022-10-13 13:57 - 2022-10-13 13:57 - 000025576 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswElam.sys
2022-10-09 19:59 - 2022-10-09 19:59 - 005258696 _____ C:\Users\kgwal\Downloads\2022-10-09 19-58.pdf
2022-10-09 16:24 - 2022-10-09 16:24 - 000909824 _____ C:\Users\kgwal\Downloads\Week 5 Written Assignment.pdf
2022-10-09 16:23 - 2022-10-09 16:23 - 000909824 _____ C:\Users\kgwal\Downloads\2022-10-09 16-22.pdf
2022-10-07 16:08 - 2022-10-07 21:58 - 007422976 _____ C:\Users\kgwal\Downloads\The Electron Transport Chain Oxidative Phosphorylation.ppt
2022-10-05 22:42 - 2022-10-05 22:42 - 000221976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2022-10-05 20:21 - 2022-10-05 20:21 - 000000165 ____H C:\Users\kgwal\Downloads\~$CH13 complete.pptx
2022-10-05 14:42 - 2022-10-05 14:42 - 010422265 _____ C:\Users\kgwal\Downloads\CH13 complete.pptx
2022-10-02 14:42 - 2022-10-02 14:42 - 004273202 _____ C:\Users\kgwal\Downloads\2022-10-02 14-41.pdf
2022-10-02 14:14 - 2022-10-02 14:14 - 018599424 _____ C:\Users\kgwal\Downloads\fremgen_ch03_dl_wcrs.ppt
2022-10-02 14:14 - 2022-10-02 14:14 - 015406592 _____ C:\Users\kgwal\Downloads\fremgen_ch04_dl_wcrs 2.ppt
2022-10-02 09:41 - 2022-10-02 09:41 - 000048640 _____ C:\Users\kgwal\Downloads\Food Log Excel (2) (1).xls
2022-09-30 16:20 - 2022-09-30 16:20 - 003377664 _____ C:\Users\kgwal\Downloads\The Citric Acid Cycle.ppt
2022-09-28 18:56 - 2022-09-28 18:57 - 003283245 _____ C:\Users\kgwal\Downloads\CH13.3 Microscopic methods Biol 231 Summer 2022 Week 4.pptx
2022-09-28 16:26 - 2022-09-28 16:26 - 000646906 _____ C:\Users\kgwal\Downloads\2022-09-27 22-00.pdf
2022-09-28 10:21 - 2022-09-28 10:21 - 005383241 _____ C:\Users\kgwal\Downloads\CH03.pptx
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2022-10-28 08:07 - 2021-03-15 01:03 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-10-28 08:05 - 2019-12-07 04:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-10-28 07:57 - 2021-09-06 12:53 - 000000000 ____D C:\Users\kgwal\AppData\Local\D3DSCache
2022-10-28 07:57 - 2020-06-29 10:56 - 000000000 ____D C:\Program Files (x86)\Google
2022-10-28 07:54 - 2021-03-15 01:09 - 000849772 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-10-28 07:54 - 2019-12-07 04:13 - 000000000 ____D C:\WINDOWS\INF
2022-10-28 07:53 - 2019-12-07 04:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-10-28 07:48 - 2022-04-18 18:58 - 000000000 ____D C:\Program Files (x86)\Steam
2022-10-28 07:46 - 2021-03-15 01:08 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-10-28 07:46 - 2021-03-15 01:03 - 000008192 ___SH C:\DumpStack.log.tmp
2022-10-28 07:46 - 2020-09-17 16:15 - 000000000 ____D C:\ProgramData\Avast Software
2022-10-28 07:46 - 2020-06-29 10:14 - 000000000 __SHD C:\Users\kgwal\IntelGraphicsProfiles
2022-10-28 07:46 - 2019-12-07 04:14 - 000000000 ____D C:\WINDOWS\ServiceState
2022-10-28 07:46 - 2019-12-07 04:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-10-27 23:03 - 2019-12-07 04:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2022-10-27 22:49 - 2021-02-26 10:23 - 000000000 ___DC C:\WINDOWS\Panther
2022-10-27 22:45 - 2020-06-30 00:08 - 000000000 ____D C:\WINDOWS\Firmware
2022-10-27 22:44 - 2019-12-07 04:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-10-27 22:43 - 2021-04-10 20:46 - 000000000 ____D C:\Program Files\CCleaner
2022-10-27 21:54 - 2021-10-27 22:23 - 000000000 ____D C:\WINDOWS\Minidump
2022-10-27 21:54 - 2020-09-22 17:25 - 000000000 ____D C:\Users\kgwal\AppData\Local\CrashDumps
2022-10-27 21:54 - 2019-12-07 04:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2022-10-27 21:06 - 2020-06-29 10:11 - 000000000 ____D C:\Users\kgwal\AppData\Local\Packages
2022-10-27 21:05 - 2021-10-20 14:38 - 000000000 ____D C:\Users\kgwal\AppData\Local\Bluestacks
2022-10-27 21:05 - 2020-06-20 22:35 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WildTangent Games
2022-10-27 21:05 - 2020-06-20 22:35 - 000000000 ____D C:\Program Files (x86)\WildTangent Games
2022-10-27 21:04 - 2021-04-26 14:00 - 000000000 ____D C:\Users\kgwal\AppData\Roaming\Slack
2022-10-27 21:04 - 2021-04-26 13:59 - 000000000 ____D C:\Users\kgwal\AppData\Local\slack
2022-10-27 21:04 - 2021-03-15 01:04 - 000000000 ____D C:\Users\kgwal
2022-10-27 21:01 - 2021-06-26 23:52 - 000000000 ____D C:\Users\kgwal\AppData\Local\Avast Software
2022-10-27 19:01 - 2021-03-15 01:08 - 000003990 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2022-10-27 19:01 - 2019-12-07 04:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2022-10-26 22:33 - 2022-09-09 15:56 - 000000000 ____D C:\Users\kgwal\OneDrive\Documents\Biochemistry
2022-10-26 22:31 - 2021-03-15 01:08 - 000003464 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-10-26 22:31 - 2021-03-15 01:08 - 000003348 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-10-26 22:31 - 2021-03-15 01:08 - 000003240 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-10-26 22:31 - 2021-03-15 01:08 - 000003124 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2022-10-26 22:31 - 2021-03-15 01:08 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2022-10-26 10:38 - 2022-09-06 19:59 - 000000000 ____D C:\Users\kgwal\OneDrive\Documents\Microbiology
2022-10-23 21:55 - 2022-09-09 12:59 - 000000000 ____D C:\Users\kgwal\OneDrive\Documents\Medical Terminology
2022-10-21 21:07 - 2020-07-18 00:18 - 000002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-10-21 21:07 - 2020-07-18 00:18 - 000002283 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2022-10-21 11:32 - 2022-09-07 11:50 - 000000000 ____D C:\Users\kgwal\OneDrive\Documents\Basic Nutrition
2022-10-15 11:02 - 2020-08-09 12:45 - 000000000 ____D C:\Users\kgwal\OneDrive\Documents\My Kindle Content
2022-10-14 21:36 - 2019-11-28 11:16 - 000000000 ____D C:\Program Files\Microsoft Office
2022-10-13 20:21 - 2020-06-30 00:06 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-10-13 14:13 - 2020-06-30 00:06 - 147398024 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-10-11 20:34 - 2020-06-29 10:56 - 000002308 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-10-11 20:34 - 2020-06-29 10:56 - 000002267 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2022-10-07 09:29 - 2021-03-15 01:08 - 000000000 ____D C:\WINDOWS\system32\Tasks\Hewlett-Packard
2022-10-05 22:42 - 2021-08-25 08:00 - 000558536 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2022-10-05 22:42 - 2020-10-27 11:27 - 000276496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2022-10-05 22:42 - 2020-09-17 16:17 - 000862960 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2022-10-05 22:42 - 2020-09-17 16:17 - 000671712 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2022-10-05 22:42 - 2020-09-17 16:17 - 000390096 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2022-10-05 22:42 - 2020-09-17 16:17 - 000327904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2022-10-05 22:42 - 2020-09-17 16:17 - 000258496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2022-10-05 22:42 - 2020-09-17 16:17 - 000238128 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2022-10-05 22:42 - 2020-09-17 16:17 - 000114488 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2022-10-05 22:42 - 2020-09-17 16:17 - 000105920 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2022-10-05 22:42 - 2020-09-17 16:17 - 000090000 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2022-10-05 22:42 - 2020-09-17 16:17 - 000048488 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2022-10-05 22:39 - 2021-08-25 16:12 - 000000000 ____D C:\Program Files (x86)\SafeConnect
2022-09-28 16:27 - 2022-09-07 08:56 - 000000000 ____D C:\Users\kgwal\OneDrive\Documents\National
==================== Files in the root of some directories ========
2022-02-07 16:39 - 2022-10-20 22:41 - 000037828 _____ () C:\Users\kgwal\AppData\Local\CDXLExtendedShim.log
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Addition:
_____________________
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-10-2022
Ran by kgwal (28-10-2022 08:16:35)
Running from C:\Users\kgwal\OneDrive\Desktop
Microsoft Windows 10 Home Version 21H1 19043.1586 (X64) (2021-03-15 06:08:50)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-691941065-2667957141-2909907241-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-691941065-2667957141-2909907241-503 - Limited - Disabled)
Guest (S-1-5-21-691941065-2667957141-2909907241-501 - Limited - Disabled)
kgwal (S-1-5-21-691941065-2667957141-2909907241-1001 - Administrator - Enabled) => C:\Users\kgwal
WDAGUtilityAccount (S-1-5-21-691941065-2667957141-2909907241-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee VirusScan (Enabled - Up to date) {F682A51C-4EAD-6A3A-F460-B9C1D4A2DB09}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}
FW: McAfee Firewall (Enabled) {CEB92439-04C2-6B62-DF3F-10F42A719C72}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Digital Editions 4.5 (HKLM-x32\...\Adobe Digital Editions 4.5) (Version: 4.5.11 - Adobe Systems Incorporated)
Amazon Kindle (HKU\S-1-5-21-691941065-2667957141-2909907241-1001\...\Amazon Kindle) (Version: 1.38.0.65290 - Amazon)
Avast Premium Security (HKLM\...\Avast Antivirus) (Version: 22.9.6034 - Avast Software)
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1206.2 - AVAST Software) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.78 - Piriform)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 106.0.5249.119 - Google LLC)
HP Audio Switch (HKLM-x32\...\{3A5141D4-47DB-4302-9B1C-272BE585BC8A}) (Version: 1.0.179.0 - HP Inc.)
HP Connection Optimizer (HKLM-x32\...\{6468C4A5-E47E-405F-B675-A70A70983EA6}) (Version: 2.0.17.0 - HP Inc.)
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
Microsoft 365 Apps for enterprise - en-us (HKLM\...\O365ProPlusRetail - en-us) (Version: 16.0.15629.20208 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 106.0.1370.52 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 106.0.1370.52 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-691941065-2667957141-2909907241-1001\...\OneDriveSetup.exe) (Version: 22.055.0313.0001 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-691941065-2667957141-2909907241-1001\...\Teams) (Version: 1.5.00.17656 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{7B1FCD52-8F6B-4F12-A143-361EA39F5E7C}) (Version: 3.67.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.25.28508 (HKLM-x32\...\{6913e92a-b64e-41c9-a5e6-cef39207fe89}) (Version: 14.25.28508.3 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 (HKLM-x32\...\{65e650ff-30be-469d-b63a-418d71ea1765}) (Version: 14.25.28508.3 - Microsoft Corporation)
Microsoft Visual C++ 2019 X64 Additional Runtime - 14.25.28508 (HKLM\...\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}) (Version: 14.25.28508 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.25.28508 (HKLM\...\{EEA66967-97E2-4561-A999-5C22E3CDE428}) (Version: 14.25.28508 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 (HKLM-x32\...\{0FA68574-690B-4B00-89AA-B28946231449}) (Version: 14.25.28508 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 (HKLM-x32\...\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}) (Version: 14.25.28508 - Microsoft Corporation) Hidden
Minecraft Launcher (HKLM-x32\...\{F6678473-0198-46D0-A88F-2A247E6FA03C}) (Version: 1.0.0.0 - Mojang)
Mozilla Firefox (x64 en-US) (HKLM\...\Mozilla Firefox 94.0.1 (x64 en-US)) (Version: 94.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 80.0 - Mozilla)
Notion 2.0.15 (HKU\S-1-5-21-691941065-2667957141-2909907241-1001\...\fcdf0d7f-424b-5f10-a1c7-a8f643f21adf) (Version: 2.0.15 - Notion Labs, Incorporated)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.15629.20118 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.15629.20156 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
PerkinElmer ChemOffice 64-bit Support 20.1.1 (HKLM\...\{A69909C4-C2E9-4B43-9DEB-190A682A6082}) (Version: 20.1.1 - PerkinElmer Informatics, Inc.)
PerkinElmer ChemOffice Suite 2020 20.1.1 (HKLM-x32\...\{9CF299C0-AC30-43EC-A5AE-1498AFCF0292}) (Version: 20.1.1 - PerkinElmer Informatics, Inc.)
PerkinElmer ChemScript 20.1.1 x64 (HKLM\...\{9A44EC94-4060-4C2E-A393-900536D22B2C}) (Version: 20.1.1 - PerkinElmer Informatics, Inc.)
Python 3.2.2 (64-bit) (HKLM\...\{4CDE3168-D060-4b7c-BC74-4D8F9BB01AFe}) (Version: 3.2.2150 - Python Software Foundation)
Snood 4 (HKLM-x32\...\Snood 4_is1) (Version: - Word of Mouse Games)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.3.0.21759 - Microsoft Corporation)
Windows PC Health Check (HKLM\...\{6798C408-2636-448C-8AC6-F4E341102D27}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Zoom (HKU\S-1-5-21-691941065-2667957141-2909907241-1001\...\ZoomUMX) (Version: 5.10.4 (5035) - Zoom Video Communications, Inc.)
Packages:
=========
Amazon -> C:\Program Files\WindowsApps\Amazon.com.Amazon_2018.519.2815.0_x64__343d40qqvtj1t [2022-08-07] (Amazon.com)
Dropbox promotion -> C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_22.4.18.0_x64__xbfy0k16fey96 [2022-09-09] (Dropbox Inc.)
HP Audio Center -> C:\Program Files\WindowsApps\AD2F1837.HPAudioCenter_1.7.197.0_x64__v10z8vjag6ke6 [2020-10-10] (HP Inc.)
HP JumpStarts -> C:\Program Files\WindowsApps\AD2F1837.HPJumpStarts_1.10.1627.0_x64__v10z8vjag6ke6 [2022-08-07] (HP Inc.)
HP PC Hardware Diagnostics Windows -> C:\Program Files\WindowsApps\AD2F1837.HPPCHardwareDiagnosticsWindows_1.8.3.0_x64__v10z8vjag6ke6 [2022-10-07] (HP Inc.)
HP Privacy Settings -> C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.1.54.0_x64__v10z8vjag6ke6 [2022-10-21] (HP Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_139.2.289.0_x64__v10z8vjag6ke6 [2022-10-07] (HP Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.20.22.0_x64__v10z8vjag6ke6 [2022-08-28] (HP Inc.)
HP System Event Utility -> C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.3.2.0_x64__v10z8vjag6ke6 [2022-08-15] (HP Inc.)
Intel® Graphics Command Center -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3408.0_x64__8j3eq9eme6ctt [2022-08-07] (INTEL CORP) [Startup Task]
Intel® Optane™ Memory and Storage Management -> C:\Program Files\WindowsApps\AppUp.IntelOptaneMemoryandStorageManagement_18.1.1037.0_x64__8j3eq9eme6ctt [2022-10-16] (INTEL CORP)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2021-03-15] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-03-15] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.14.9130.0_x64__8wekyb3d8bbwe [2022-10-07] (Microsoft Studios) [MS Ad]
Minecraft for Windows 10 -> C:\Program Files\WindowsApps\Microsoft.MinecraftUWP_1.19.4002.0_x64__8wekyb3d8bbwe [2022-10-26] (Microsoft Studios)
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.98.1805.0_x64__mcm4njqhnhss8 [2022-02-17] (Netflix, Inc.)
Photos Add-on -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2021-03-15] (Microsoft Corporation)
Photos Media Engine Add-on -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-08-25] (Microsoft Corporation)
Simple Solitaire -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.SimpleSolitaire_7.4.14.0_x64__kx24dqmazqk8j [2022-10-21] (Random Salad Games LLC)
Smart Tools: Study Timetable -> C:\Program Files\WindowsApps\20152IcyS.SmartToolsStudyTimetable_2016.8.26.0_x64__r1j7p77eahf2y [2020-07-19] (PresentC)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.197.962.0_x86__zpdnekdrzrea0 [2022-10-27] (Spotify AB) [Startup Task]
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-691941065-2667957141-2909907241-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\kgwal\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.22147.1\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-691941065-2667957141-2909907241-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\kgwal\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll => No File
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-10-05] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-10-05] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-10-05] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-10-05] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2022-10-05] (Avast Software s.r.o. -> AVAST Software)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\kgwal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Zoom.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory="Profile 5" --app-id=hmbjbjdpkobdjplfobhljndfdfdipjhg
ShortcutWithArgument: C:\Users\kgwal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\b42be1c9c51179ef\Kaley (student.nuhs.edu) - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 7"
ShortcutWithArgument: C:\Users\kgwal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\KALEY (aquinas.edu) - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1"
==================== Loaded Modules (Whitelisted) =============
2020-06-29 23:59 - 2020-06-29 23:59 - 000014336 _____ (HP Inc.) [File not signed] C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.3.2.0_x64__v10z8vjag6ke6\SystemEventUtility\NativeRpcClient.DLL
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
SearchScopes: HKLM -> {4E6A9EDE-FBDF-4B97-B3A2-6FE3DE6474E2} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {4E6A9EDE-FBDF-4B97-B3A2-6FE3DE6474E2} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-691941065-2667957141-2909907241-1001 -> {4E6A9EDE-FBDF-4B97-B3A2-6FE3DE6474E2} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2022-08-08] (Microsoft Corporation -> Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2022-08-17] (HP Inc. -> HP Inc.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2022-08-08] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2022-08-17] (HP Inc. -> HP Inc.)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-09-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-09-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-09-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-09-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-09-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-09-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-09-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-09-29] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-691941065-2667957141-2909907241-1001\...\sharepoint.com -> hxxps://aquinasedu-files.sharepoint.com
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2019-03-18 23:49 - 2019-03-18 23:49 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files\PerkinElmerInformatics\ChemOffice2020\ChemScript\Lib;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-691941065-2667957141-2909907241-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\kgwal\OneDrive\Pictures\College Pics 2021\IMG-6015 - Copy.jpg
DNS Servers: 75.75.75.75 - 75.75.76.76
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\StartupFolder: => "SafeConnect.lnk"
HKLM\...\StartupApproved\Run: => "RtkAudUService"
HKU\S-1-5-21-691941065-2667957141-2909907241-1001\...\StartupApproved\Run: => "HPSEU_Host_Launcher"
HKU\S-1-5-21-691941065-2667957141-2909907241-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-691941065-2667957141-2909907241-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{07CE6F76-707B-45E3-8E28-8737CEFC6878}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{77F10E1E-538B-41AC-B92C-2C5D6477BBCF}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{62BCB978-C7A1-4541-8DF8-225BA243562D}] => (Allow) C:\Users\kgwal\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{0CF47512-4B30-4FD5-9898-DD09FF55B5D6}] => (Allow) C:\Users\kgwal\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{048EE7C0-3718-4FB8-925A-294D882D2014}] => (Allow) C:\Users\kgwal\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{4536649B-1CCB-4D01-81AD-27271E2F37AA}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0A37CD32-EE43-4198-82F9-443A8F9AF218}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CCC07BA0-498C-411F-AFEB-16D200850664}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{8FDF9FBA-AE6E-4B69-891D-A91717CD7F9A}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{AB0A6E6F-06D4-41BA-8260-F1EE05A12A6D}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{618479F3-7E1E-4E7F-9B28-A31EDFD55585}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{75676D8F-BC99-4A27-80CE-A361804776AC}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe => No File
FirewallRules: [{96708B59-1EB5-4709-8854-2F81072D44EC}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{B5F5C852-623B-4F54-941F-A5B4D2D0297C}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{30F754AD-92FF-4F4B-8856-06A4F41E7681}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{824942F9-6C89-4174-B524-DE82AE6C1E00}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{3AADB9F4-059B-4C58-A23F-E5DFCA0752FB}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{024CF771-BE20-4778-B220-16D85A0C0665}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{75276329-8B35-471D-869D-E0BAAC25ED46}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{609CA912-3AA0-4146-9486-312FA1883CDB}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{D0D9ABB5-E9EC-45C1-B280-3C692E995E54}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{5CECA628-5D9A-4AA5-8502-EB062DC3E01E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{573ED151-F531-491F-BD14-263EDCCE3FA4}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{95FD3C4C-2968-4BE2-A795-070ACDF81DCD}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{51BAF7B0-7AB9-4FEC-B4A0-4B9BBC482F7D}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{1E330740-7918-47B6-9B86-268DD09D4B0A}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{E32444CE-E0C7-46D0-832C-363F202AF89A}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{4F8177FC-4839-481C-9D39-B4B715B34790}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{CC853593-1A59-4641-8C35-D8E5569A344B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{4C264612-B1AD-4CF5-89C8-0666426FFA5A}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{20D5017B-6FE5-43B8-8080-EA0A35E36D3B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{FB451389-B164-40D3-93AE-3DCD2415620F}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{5B47B06E-1704-40D6-8EA2-8F144D7CCA77}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{1CB79987-6446-4BC1-B8B0-3425E7E7AC5A}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{B953A894-3743-4842-884B-978BBE61DFDF}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [TCP Query User{2B1ABDD3-FF4E-4103-98B1-03B222D887DC}C:\users\kgwal\wavesor software\wavebrowser\wavebrowser.exe] => (Block) C:\users\kgwal\wavesor software\wavebrowser\wavebrowser.exe => No File
FirewallRules: [UDP Query User{06AF8A8E-7427-48B9-85FB-D571DDC8C61A}C:\users\kgwal\wavesor software\wavebrowser\wavebrowser.exe] => (Block) C:\users\kgwal\wavesor software\wavebrowser\wavebrowser.exe => No File
FirewallRules: [TCP Query User{8E65785E-932B-4485-A7E3-2A22E5543597}C:\users\kgwal\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\kgwal\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{B3118D8E-09E7-452C-BF3B-1B567ADF2201}C:\users\kgwal\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\kgwal\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2B59D8C0-F4A8-484C-9090-94C43C498F74}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{A9FB997B-B19D-4862-B781-795E8038DD4C}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{E42B30CC-8B53-4931-83D5-844CF45B8828}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{3A18EEEA-F45D-4FC2-8C78-FAF367DE8C65}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [TCP Query User{01522DEE-8D1A-4FBB-BE6B-7CD5678CB7B8}C:\users\kgwal\wavesor software\wavebrowser\wavebrowser.exe] => (Allow) C:\users\kgwal\wavesor software\wavebrowser\wavebrowser.exe => No File
FirewallRules: [UDP Query User{81FE70F8-8813-4048-BEFD-8CEF6C5BEEA1}C:\users\kgwal\wavesor software\wavebrowser\wavebrowser.exe] => (Allow) C:\users\kgwal\wavesor software\wavebrowser\wavebrowser.exe => No File
FirewallRules: [{2EE52675-3F28-4A8D-9859-75D60B54CC54}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{EA2A96A3-FB9E-43B5-A4FF-5B323A78C420}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{BD9CC5A5-1653-474D-93EC-6906E47A7A9E}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{F66607B5-0DDE-40C1-9EB3-2706C656DA15}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{DF23D1F0-2EE7-40C9-82F2-A19586E225E5}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{7E0D826A-1A52-480F-AB5F-D972F91715F9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.89.3403.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{47825049-C1FC-4E96-B4A7-EF6F1FB96493}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.89.3403.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{BE59C172-15A8-4506-AECF-19BAEB314A13}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.89.3403.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{BACB90F0-342E-44E1-89A7-AEB5C3F55548}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.89.3403.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{97DE7EF2-FBBD-447E-B245-D98F139EED33}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\106.0.1370.52\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2AE8FCB4-61C7-4DB6-972F-A0A887A360CE}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{8141FE6F-A020-4578-AFB5-81B6CE13E189}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{101EFE8A-5750-4573-AA45-F79270C5513D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.197.962.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{9047C05A-7B14-4679-B6C2-9C151D571609}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.197.962.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{AE8C7089-AE98-4220-94F8-6CF7A1A6ABAF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.197.962.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{9AC63298-D5AB-4CC8-9659-755FF2852B21}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.197.962.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{9D2D1199-4503-42C9-8817-EE0769E3EB3F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.197.962.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{690F7C0F-299D-4C54-818C-566632FC2B18}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.197.962.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{DB713CA6-A171-4D02-8347-C778A5E39F62}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.197.962.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{EF149076-B95A-4363-8C50-3930F8ACA4CD}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.197.962.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
==================== Restore Points =========================
27-10-2022 21:59:41 Windows Modules Installer
27-10-2022 22:00:30 Windows Modules Installer
27-10-2022 22:45:43 Windows Modules Installer
28-10-2022 07:49:40 Windows Modules Installer
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (10/27/2022 11:03:45 PM) (Source: igccservice) (EventID: 0) (User: )
Description: Service cannot be started. A system shutdown is in progress
Error: (10/27/2022 10:59:05 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, A system shutdown is in progress.
.
Error: (10/27/2022 10:59:05 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.
]
Error: (10/27/2022 10:59:05 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, A system shutdown is in progress.
.
Error: (10/27/2022 10:59:05 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.
]
Error: (10/27/2022 10:44:17 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "C:\Users\kgwal\AppData\Roaming\Zoom\bin\Zoom.exe".Error in manifest or policy file "" on line .
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_a8625c1886757984.manifest.
Component 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e.manifest.
Error: (10/27/2022 09:32:06 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT AUTHORITY)
Description: User hive is loaded by another process (Registry Lock) Process name: C:\Program Files\Avast Software\Avast\aswToolsSvc.exe, PID: 4304, ProfSvc PID: 2808.
Error: (10/27/2022 09:18:24 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: wuauclt.exe, version: 10.0.19041.1503, time stamp: 0x17884906
Faulting module name: ntdll.dll, version: 10.0.19041.1566, time stamp: 0x1be73aa8
Exception code: 0xc0000005
Fault offset: 0x0000000000063416
Faulting process id: 0x3d8c
Faulting application start time: 0x01d8ea7246533034
Faulting application path: C:\WINDOWS\system32\wuauclt.exe
Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll
Report Id: e8fcf6f8-e895-4957-b814-7e45333123b6
Faulting package full name:
Faulting package-relative application ID:
System errors:
=============
Error: (10/28/2022 07:53:49 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80070026: 2022-10 Cumulative Update for Windows 10 Version 21H1 for x64-based Systems (KB5018410).
Error: (10/27/2022 11:03:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The ClickToRunSvc service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
Error: (10/27/2022 11:03:46 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The AppXSvc service depends on the StateRepository service which failed to start because of the following error:
The operation completed successfully.
Error: (10/27/2022 11:03:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The WildTangentHelper service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
Error: (10/27/2022 11:03:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The LMS service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
Error: (10/27/2022 11:03:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The igccservice service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
Error: (10/27/2022 11:03:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The SECOMNService service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
Error: (10/27/2022 11:03:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The RstMwService service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
CodeIntegrity:
===============
Date: 2022-10-28 07:48:39
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.
Date: 2022-10-28 07:47:44
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume3\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
BIOS: AMI F.26 06/17/2022
Motherboard: HP 86C9
Processor: Intel® Core™ i5-1035G1 CPU @ 1.00GHz
Percentage of memory in use: 34%
Total physical RAM: 16072.83 MB
Available physical RAM: 10557.42 MB
Total Virtual: 18504.83 MB
Available Virtual: 13302.28 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:476.16 GB) (Free:371.66 GB) (Model: INTEL SSDPEKNW512G8H) NTFS
\\?\Volume{c6211cad-dd5e-4fd6-ba1b-c0a9fa408499}\ () (Fixed) (Total:0.5 GB) (Free:0.03 GB) NTFS
\\?\Volume{5b0b409f-1bf2-4369-acb1-61cd37163e39}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.17 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: DE3B1A5A)
Partition: GPT.
==================== End of Addition.txt =======================
Sign In
Create Account
