Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 05-12-2023
Ran by Lin (administrator) on DESKTOP-TB9AP1R (Dell Inc. OptiPlex 790) (06-12-2023 13:59:28)
Running from C:\Users\Lin\Desktop\FRST64.exe
Loaded Profiles: Lin
Platform: Microsoft Windows 10 Home Version 22H2 19045.3758 (X64) Language: English (United States)
Default browser: Edge
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
(explorer.exe ->) (Canon Inc. -> CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(explorer.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(explorer.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(explorer.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxtray.exe
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe <9>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <10>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\LocationNotificationWindows.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
(services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21752.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21752.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Lin\AppData\Local\Microsoft\OneDrive\23.226.1031.0003\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2779024 2011-03-14] (Canon Inc. -> CANON INC.)
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1612920 2011-08-04] (Canon Inc. -> CANON INC.)
HKU\S-1-5-21-1976587878-1381545113-1953759822-1003\...\Run: [MicrosoftEdgeAutoLaunch_2A9AA68EC7A79356B9193EA1B23153EB] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3896768 2023-11-29] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1976587878-1381545113-1953759822-1003\...\MountPoints2: {379f5904-6e44-11ec-8bc0-18037334bed0} - "J:\LaunchU3.exe" -a
HKLM\...\Windows x64\Print Processors\Canon MG2100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDAQ.DLL [30208 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG2100 series: C:\Windows\system32\CNMLMAQ.DLL [385024 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG2100 series XPS: C:\Windows\system32\CNMXLMAQ.DLL [385536 2011-05-23] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
Startup: C:\Users\Lin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1rbbpxua1so.lnk [2023-11-22] <==== ATTENTION
ShortcutTarget: 1rbbpxua1so.lnk -> C:\Users\Lin\AppData\Roaming\4jdssrxmart.jesp3sezani () <==== ATTENTION [zero byte File/Folder] <==== ATTENTION
Startup: C:\Users\Lin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\23urk41kcq3.lnk [2023-11-22] <==== ATTENTION
ShortcutTarget: 23urk41kcq3.lnk -> C:\Users\Lin\AppData\Roaming\2fugt50fm2v.nepsbmwrmva () <==== ATTENTION [zero byte File/Folder] <==== ATTENTION
Startup: C:\Users\Lin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\454anxo3zs4.lnk [2023-11-22] <==== ATTENTION
ShortcutTarget: 454anxo3zs4.lnk -> C:\Users\Lin\AppData\Roaming\agjrvwdmgju.w0iiciae4y5 () <==== ATTENTION [zero byte File/Folder] <==== ATTENTION
Startup: C:\Users\Lin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fy03yvfx4js.lnk [2023-11-22] <==== ATTENTION
ShortcutTarget: fy03yvfx4js.lnk -> C:\Users\Lin\AppData\Roaming\qrwrm1e3ctm.1xvgaifxcpg () <==== ATTENTION [zero byte File/Folder] <==== ATTENTION
Startup: C:\Users\Lin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\nexdzsmtige.lnk [2023-11-22] <==== ATTENTION
ShortcutTarget: nexdzsmtige.lnk -> C:\Users\Lin\AppData\Roaming\bs0rttvrjv3.hdt5t1vd1bx () <==== ATTENTION [zero byte File/Folder] <==== ATTENTION
Startup: C:\Users\Lin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\p02kspk5miu.lnk [2023-11-22] <==== ATTENTION
ShortcutTarget: p02kspk5miu.lnk -> C:\Users\Lin\AppData\Roaming\jaauutkoqqw.2jednkntrjj () <==== ATTENTION [zero byte File/Folder] <==== ATTENTION
Startup: C:\Users\Lin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qpankyg5qrs.lnk [2023-11-22] <==== ATTENTION
ShortcutTarget: qpankyg5qrs.lnk -> C:\Users\Lin\AppData\Roaming\nkdbw5xeoxb.e4idopyldds () <==== ATTENTION [zero byte File/Folder] <==== ATTENTION
Startup: C:\Users\Lin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\syirve3ptmu.lnk [2023-11-22] <==== ATTENTION
ShortcutTarget: syirve3ptmu.lnk -> C:\Users\Lin\AppData\Roaming\fxcojpk0ods.cxr5mylbpcz () <==== ATTENTION [zero byte File/Folder] <==== ATTENTION
Startup: C:\Users\Lin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wxaw0rbu5jj.lnk [2023-11-22] <==== ATTENTION
ShortcutTarget: wxaw0rbu5jj.lnk -> C:\Users\Lin\AppData\Roaming\emdorsisnmw.tx1i5yt5beg () <==== ATTENTION [zero byte File/Folder] <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {CA9B30E4-D250-41F5-8104-BA83FDC6E850} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {925DE938-A2D8-4569-B40E-F661F32EB836} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F709E379-B428-4EF5-A806-D2F1792C28E9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CF7D5113-493F-4C1A-A5E4-A3EB9833A7B2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {42C24B5D-993A-45F9-AD76-77B0B846AD17} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Refresh Group Policy Cache => {07369A67-07A6-4608-ABEA-379491CB7C46} C:\Windows\System32\UpdatePolicy.dll [256512 2023-12-06] (Microsoft Windows -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76
Tcpip\..\Interfaces\{93de2c58-ffe8-42f6-9b9d-302fb1219e53}: [DhcpNameServer] 75.75.75.75 75.75.76.76
Tcpip\..\Interfaces\{e5f92500-5178-4e85-a38d-e9d831f827d5}: [DhcpNameServer] 209.18.47.62 4.2.2.6 208.67.222.222
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Lin\AppData\Local\Microsoft\Edge\User Data\Default [2023-12-06]
Edge Extension: (Google Docs Offline) - C:\Users\Lin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-12-04]
Edge Extension: (Edge relevant text changes) - C:\Users\Lin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-12-06]

FireFox:
========
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2011-04-20] (CANON INC.) [File not signed]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 GameInputSvc; C:\Windows\System32\GameInputSvc.exe [50168 2023-12-06] (Microsoft Corporation -> Microsoft Corporation)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] (Canon Inc. -> )
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe [3174840 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe [133592 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AppleLowerFilter; C:\Windows\System32\drivers\AppleLowerFilter.sys [55608 2023-06-27] (Apple Inc. -> Apple Inc.)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
S4 UCPD; C:\Windows\System32\drivers\UCPD.sys [29184 2023-12-06] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [55856 2023-12-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [594304 2023-12-06] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105856 2023-12-06] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2023-12-06 14:00 - 2023-12-06 14:00 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_5804_579025368
2023-12-06 13:59 - 2023-12-06 14:01 - 000012133 _____ C:\Users\Lin\Desktop\FRST.txt
2023-12-06 13:59 - 2023-12-06 14:00 - 003292909 _____ C:\Users\Lin\AppData\Local\Temp\77fc2557-14ad-44d9-ba2c-6f1eaf844384.tmp
2023-12-06 13:59 - 2023-12-06 13:59 - 000000000 _____ C:\Users\Lin\AppData\Local\Temp\1da98045-b7b4-4c62-b8e6-000dd5f44823.tmp
2023-12-06 13:55 - 2023-12-06 13:55 - 000000000 ____D C:\Users\Lin\Downloads\FRST-OlderVersion
2023-12-06 13:54 - 2023-12-06 14:00 - 000000000 ____D C:\FRST
2023-12-06 13:54 - 2023-12-06 13:55 - 002384384 _____ (Farbar) C:\Users\Lin\Desktop\FRST64.exe
2023-12-06 12:47 - 2023-12-06 12:47 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\21458D1F-8756-48ED-A428-271F1894CD8B
2023-12-06 12:05 - 2023-12-06 12:05 - 000075809 _____ C:\Users\Lin\AppData\Local\Temp\wct3BCE.tmp
2023-12-06 11:45 - 2023-12-06 11:45 - 000000000 _____ C:\Users\Lin\AppData\Local\Temp\tmp697.tmp
2023-12-06 11:40 - 2023-12-06 11:40 - 000075809 _____ C:\Users\Lin\AppData\Local\Temp\wct3BB3.tmp
2023-12-06 11:40 - 2023-12-06 11:40 - 000075809 _____ C:\Users\Lin\AppData\Local\Temp\wct16E5.tmp
2023-12-06 11:40 - 2023-12-06 11:40 - 000000000 _____ C:\Users\Lin\AppData\Local\Temp\tmpBE8.tmp
2023-12-06 11:38 - 2023-12-06 11:38 - 000000000 _____ C:\Users\Lin\AppData\Local\Temp\tmpDC16.tmp
2023-12-06 11:32 - 2023-12-06 11:32 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_47824_906340562
2023-12-06 11:04 - 2023-12-06 11:05 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_53752_1119748633
2023-12-06 10:55 - 2023-12-06 10:55 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_12244_1289419322
2023-12-06 10:47 - 2023-12-06 10:47 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_57224_956304915
2023-12-06 10:20 - 2023-12-06 10:20 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_7536_1582334949
2023-12-06 10:13 - 2023-12-06 10:13 - 000000000 ____D C:\Windows\InboxApps
2023-12-06 10:05 - 2023-12-06 10:05 - 000075809 _____ C:\Users\Lin\AppData\Local\Temp\wctC1EC.tmp
2023-12-06 10:03 - 2023-12-06 10:03 - 000016707 _____ C:\Windows\system32\IntegratedServicesRegionPolicySet.json
2023-12-06 09:51 - 2023-12-06 09:52 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_22808_1116859124
2023-12-06 09:45 - 2023-12-06 09:45 - 000075809 _____ C:\Users\Lin\AppData\Local\Temp\wctFBC3.tmp
2023-12-06 09:44 - 2023-12-06 09:45 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_6292_1238224034
2023-12-06 09:42 - 2023-12-06 09:42 - 000000000 ___HD C:\$WinREAgent
2023-12-06 09:34 - 2023-12-06 09:36 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_28060_526463545
2023-12-06 09:17 - 2023-12-06 09:18 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_73956_1385136201
2023-12-06 09:08 - 2023-12-06 09:08 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_58144_714344962
2023-12-06 09:05 - 2023-12-06 09:05 - 000327680 _____ C:\Users\Lin\AppData\Local\Temp\99F2C717-F399-4EB8-ADFA-88CFAB0BC0AD.Diagnose.0.etl
2023-12-06 08:57 - 2023-12-06 08:57 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_11060_642239799
2023-12-06 08:57 - 2023-12-06 08:57 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_11060_375127488
2023-12-06 04:03 - 2023-12-06 04:03 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_37172_500348827
2023-12-05 16:36 - 2023-12-05 16:36 - 000001779 _____ C:\Users\Lin\AppData\Local\Temp\wctDC14.tmp
2023-12-05 16:36 - 2023-12-05 16:36 - 000001779 _____ C:\Users\Lin\AppData\Local\Temp\wctD2A4.tmp
2023-12-05 13:58 - 2023-12-05 13:59 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_76264_1767925549
2023-12-05 13:58 - 2023-12-05 13:59 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_12836_1931354212
2023-12-05 13:57 - 2023-12-05 13:57 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\scoped_dir5900_537179420
2023-12-05 13:56 - 2023-12-05 13:56 - 000010987 _____ C:\Users\Lin\AppData\Local\Temp\ffca240a-00c1-4089-8487-41edf20c9e50.tmp
2023-12-05 13:35 - 2023-12-05 13:35 - 000075804 _____ C:\Users\Lin\AppData\Local\Temp\wct6460.tmp
2023-12-05 13:35 - 2023-12-05 13:35 - 000075804 _____ C:\Users\Lin\AppData\Local\Temp\wct3C66.tmp
2023-12-05 12:35 - 2023-12-05 12:35 - 000075804 _____ C:\Users\Lin\AppData\Local\Temp\wctD90D.tmp
2023-12-05 10:46 - 2023-12-05 10:46 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_65364_1450354508
2023-12-05 10:42 - 2023-12-05 10:43 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_54688_980510645
2023-12-05 10:40 - 2023-12-05 10:40 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_52736_1673578945
2023-12-05 10:38 - 2023-12-05 10:39 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_80044_323604853
2023-12-05 10:05 - 2023-12-05 10:05 - 000075804 _____ C:\Users\Lin\AppData\Local\Temp\wctECAE.tmp
2023-12-05 07:46 - 2023-12-05 07:46 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_49000_1938387955
2023-12-05 07:30 - 2023-12-05 07:30 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_30888_240525524
2023-12-05 07:29 - 2023-12-05 07:30 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_30888_621290032
2023-12-05 07:09 - 2023-12-05 07:09 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_1644_968811107
2023-12-05 07:09 - 2023-12-05 07:09 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_1644_2124951848
2023-12-05 00:39 - 2023-12-05 00:39 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_26668_1708565398
2023-12-05 00:39 - 2023-12-05 00:39 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_1644_122652798
2023-12-04 17:32 - 2023-12-04 17:32 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_26668_1139038494
2023-12-04 16:05 - 2023-12-04 16:05 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_19332_526368189
2023-12-04 15:31 - 2023-12-04 15:32 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_1644_838438047
2023-12-04 15:31 - 2023-12-04 15:31 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_24688_1979017405
2023-12-04 14:40 - 2023-12-04 14:40 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_16728_2145018615
2023-12-04 14:38 - 2023-12-04 14:38 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_64916_605397589
2023-12-04 13:05 - 2023-12-04 13:05 - 000075759 _____ C:\Users\Lin\AppData\Local\Temp\wctEC1B.tmp
2023-12-04 13:05 - 2023-12-04 13:05 - 000075759 _____ C:\Users\Lin\AppData\Local\Temp\wct182C.tmp
2023-12-04 12:35 - 2023-12-04 12:35 - 000075759 _____ C:\Users\Lin\AppData\Local\Temp\wct8309.tmp
2023-12-04 10:10 - 2023-12-04 10:10 - 000075754 _____ C:\Users\Lin\AppData\Local\Temp\wctC1F8.tmp
2023-12-04 10:10 - 2023-12-04 10:10 - 000075754 _____ C:\Users\Lin\AppData\Local\Temp\wctC1F7.tmp
2023-12-04 10:10 - 2023-12-04 10:10 - 000075754 _____ C:\Users\Lin\AppData\Local\Temp\wctA5.tmp
2023-12-04 10:10 - 2023-12-04 10:10 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_56412_602689217
2023-12-04 10:09 - 2023-12-04 10:09 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_56412_1906451267
2023-12-04 10:09 - 2023-12-04 10:09 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_34852_416890713
2023-12-04 10:09 - 2023-12-04 10:09 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\edge_BITS_34852_1198036217
2023-12-04 10:05 - 2023-12-04 10:05 - 000075754 _____ C:\Users\Lin\AppData\Local\Temp\wct404A.tmp
2023-12-01 14:25 - 2023-12-01 14:25 - 000075754 _____ C:\Users\Lin\AppData\Local\Temp\wct5BC8.tmp
2023-12-01 14:25 - 2023-12-01 14:25 - 000075754 _____ C:\Users\Lin\AppData\Local\Temp\wct39F8.tmp
2023-12-01 14:17 - 2023-12-01 14:17 - 000355203 _____ C:\Users\Lin\Downloads\[No Subject].zip
2023-12-01 14:16 - 2023-12-01 14:17 - 000513399 _____ C:\Users\Lin\Downloads\mail.eml
2023-12-01 12:35 - 2023-12-01 12:35 - 000075754 _____ C:\Users\Lin\AppData\Local\Temp\wct6F09.tmp
2023-12-01 12:25 - 2023-12-01 12:25 - 000075754 _____ C:\Users\Lin\AppData\Local\Temp\wct240B.tmp
2023-12-01 10:16 - 2023-12-01 10:16 - 000000000 _____ C:\Users\Lin\AppData\Local\Temp\Twunk002.MTX
2023-11-30 14:26 - 2023-11-30 14:26 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\msedge_url_fetcher_34852_752529303
2023-11-30 12:35 - 2023-11-30 12:35 - 000075754 _____ C:\Users\Lin\AppData\Local\Temp\wctC23.tmp
2023-11-30 12:25 - 2023-11-30 12:25 - 000075754 _____ C:\Users\Lin\AppData\Local\Temp\wctC7C4.tmp
2023-11-30 12:25 - 2023-11-30 12:25 - 000075754 _____ C:\Users\Lin\AppData\Local\Temp\wct925C.tmp
2023-11-30 12:25 - 2023-11-30 12:25 - 000075754 _____ C:\Users\Lin\AppData\Local\Temp\wct8ACF.tmp
2023-11-29 14:30 - 2023-11-29 14:30 - 000075727 _____ C:\Users\Lin\AppData\Local\Temp\wct8F62.tmp
2023-11-29 14:30 - 2023-11-29 14:30 - 000075727 _____ C:\Users\Lin\AppData\Local\Temp\wct6B11.tmp
2023-11-29 12:35 - 2023-11-29 12:35 - 000075722 _____ C:\Users\Lin\AppData\Local\Temp\wctA6AD.tmp
2023-11-29 11:35 - 2023-11-29 11:35 - 000075722 _____ C:\Users\Lin\AppData\Local\Temp\wctCC0B.tmp
2023-11-28 12:35 - 2023-11-28 12:35 - 000075665 _____ C:\Users\Lin\AppData\Local\Temp\wct97F8.tmp
2023-11-28 11:45 - 2023-11-28 11:45 - 000075665 _____ C:\Users\Lin\AppData\Local\Temp\wct7C27.tmp
2023-11-28 10:30 - 2023-11-28 10:30 - 000075665 _____ C:\Users\Lin\AppData\Local\Temp\wct821D.tmp
2023-11-28 10:09 - 2023-11-28 10:09 - 000000000 _____ C:\Users\Lin\AppData\Local\Temp\782e2b84-6538-436e-8bca-b850c908c41c.tmp
2023-11-23 11:49 - 2023-12-06 10:47 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\2622797849
2023-11-22 13:48 - 2023-11-29 11:38 - 000000074 ____T C:\Users\Lin\AppData\Local\Temp\bd7f6aa8.dat
2023-11-22 12:09 - 2023-11-22 12:09 - 000000000 _____ C:\Users\Lin\AppData\Roaming\nkdbw5xeoxb.e4idopyldds
2023-11-22 12:09 - 2023-11-22 12:09 - 000000000 _____ C:\Users\Lin\AppData\Roaming\bs0rttvrjv3.hdt5t1vd1bx
2023-11-22 12:08 - 2023-11-22 12:08 - 000000000 _____ C:\Users\Lin\AppData\Roaming\emdorsisnmw.tx1i5yt5beg
2023-11-22 12:07 - 2023-11-22 12:07 - 000000000 _____ C:\Users\Lin\AppData\Roaming\agjrvwdmgju.w0iiciae4y5
2023-11-22 12:06 - 2023-11-22 12:06 - 000000000 _____ C:\Users\Lin\AppData\Roaming\4jdssrxmart.jesp3sezani
2023-11-22 12:04 - 2023-11-22 12:04 - 000000093 _____ C:\Users\Lin\AppData\Roaming\7EcHqckoSNxx1XM84RCbez0QNT8PTctu9tGchKfyqeUR1840HXGlRaNT5HQamI7H
2023-11-22 12:04 - 2023-11-22 12:04 - 000000000 _____ C:\Users\Lin\AppData\Roaming\qrwrm1e3ctm.1xvgaifxcpg
2023-11-22 12:04 - 2023-11-22 12:04 - 000000000 _____ C:\Users\Lin\AppData\Roaming\jaauutkoqqw.2jednkntrjj
2023-11-22 12:04 - 2023-11-22 12:04 - 000000000 _____ C:\Users\Lin\AppData\Roaming\fxcojpk0ods.cxr5mylbpcz
2023-11-22 12:04 - 2023-11-22 12:04 - 000000000 _____ C:\Users\Lin\AppData\Roaming\2fugt50fm2v.nepsbmwrmva
2023-11-22 11:55 - 2023-11-22 11:56 - 000000000 _____ C:\Users\Lin\Downloads\PrivacyPolicy.pdf
2023-11-22 11:54 - 2023-11-22 11:55 - 331856456 _____ (P3P3 Studio Toolset) C:\Users\Lin\Downloads\Kurt-Power-Drawbar-Manual.exe
2023-11-22 11:30 - 2023-12-06 09:07 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\msdt
2023-11-21 13:36 - 2023-11-29 15:21 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\353D728B-EFB5-4F63-813D-0398820FC59C
2023-11-21 13:09 - 2023-11-21 13:09 - 000841678 _____ C:\Users\Lin\Downloads\Used Sold 17″ x 45″ Clausing Metosa EL-1745CS CNC Tool Room Lathe W_Fagor 800T CNC Control at Mac....html
2023-11-21 13:09 - 2023-11-21 13:09 - 000000000 ____D C:\Users\Lin\Downloads\Used Sold 17″ x 45″ Clausing Metosa EL-1745CS CNC Tool Room Lathe W_Fagor 800T CNC Control at Mac..._files
2023-11-20 11:02 - 2023-11-20 11:02 - 000000899 _____ C:\Users\Lin\AppData\Local\Temp\wctF0C0.tmp
2023-11-20 11:02 - 2023-11-20 11:02 - 000000899 _____ C:\Users\Lin\AppData\Local\Temp\wctCFD3.tmp
2023-11-20 11:02 - 2023-11-20 11:02 - 000000899 _____ C:\Users\Lin\AppData\Local\Temp\wctA039.tmp
2023-11-20 11:02 - 2023-11-20 11:02 - 000000899 _____ C:\Users\Lin\AppData\Local\Temp\wct91BA.tmp
2023-11-20 11:02 - 2023-11-20 11:02 - 000000899 _____ C:\Users\Lin\AppData\Local\Temp\wct6F4A.tmp
2023-11-20 11:02 - 2023-11-20 11:02 - 000000899 _____ C:\Users\Lin\AppData\Local\Temp\wct40BD.tmp
2023-11-20 11:02 - 2023-11-20 11:02 - 000000899 _____ C:\Users\Lin\AppData\Local\Temp\wct3DF2.tmp
2023-11-20 11:02 - 2023-11-20 11:02 - 000000899 _____ C:\Users\Lin\AppData\Local\Temp\wct1F25.tmp
2023-11-17 19:58 - 2023-11-17 19:58 - 000000899 ____N C:\Users\Lin\AppData\Local\Temp\wctCC0C.tmp
2023-11-17 19:58 - 2023-11-17 19:58 - 000000899 ____N C:\Users\Lin\AppData\Local\Temp\wct8AD0.tmp
2023-11-17 19:58 - 2023-11-17 19:58 - 000000899 ____N C:\Users\Lin\AppData\Local\Temp\wct4049.tmp
2023-11-17 19:58 - 2023-11-17 19:58 - 000000899 ____N C:\Users\Lin\AppData\Local\Temp\wct3CBC.tmp
2023-11-17 19:58 - 2023-11-17 19:58 - 000000899 ____N C:\Users\Lin\AppData\Local\Temp\wct240A.tmp
2023-11-17 19:58 - 2023-11-17 19:58 - 000000899 _____ C:\Users\Lin\AppData\Local\Temp\wctECAF.tmp
2023-11-14 13:24 - 2023-11-21 14:50 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\1C2EAA93-1B0B-418F-A09A-6186A431C7CB
2023-11-13 12:35 - 2023-11-13 12:35 - 004445075 _____ C:\Users\Lin\Downloads\Bridgeport-Vertical-Mill-Manual.pdf
2023-11-13 11:17 - 2023-12-05 07:35 - 000000022 _____ C:\Users\Lin\Downloads\MS532-18N.zip
2023-11-10 14:38 - 2023-11-20 11:35 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\CF5BC000-21E4-423C-B9FC-5ABDE534F9CE
2023-11-07 12:28 - 2023-11-07 12:28 - 001602084 _____ C:\Users\Lin\Downloads\dp700 manual 023-81380-uk-2.pdf
2023-11-07 11:42 - 2023-11-14 13:29 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\533604BB-939C-4B0F-8D48-C0116546AE1D
2023-11-06 13:02 - 2023-11-14 13:29 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\5E561C6B-782F-4D63-8320-178876A758E0

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2023-12-06 14:00 - 2021-10-27 08:02 - 000000053 _____ C:\Users\Lin\AppData\Local\Temp\.ses
2023-12-06 13:24 - 2019-12-07 04:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-12-06 11:35 - 2019-12-07 04:13 - 000000000 ____D C:\Windows\INF
2023-12-06 10:44 - 2022-09-22 11:15 - 000004164 _____ C:\Windows\system32\Tasks\User_Feed_Synchronization-{74CF8895-A983-4CB3-AD47-5387A8A57C41}
2023-12-06 10:22 - 2021-10-21 06:26 - 000795738 _____ C:\Windows\system32\PerfStringBackup.INI
2023-12-06 10:20 - 2021-10-27 08:04 - 000000000 ___RD C:\Users\Lin\OneDrive
2023-12-06 10:19 - 2021-10-31 13:31 - 000000156 _____ C:\Users\Lin\AppData\Local\Temp\Twunk001.MTX
2023-12-06 10:19 - 2021-10-31 13:31 - 000000005 _____ C:\Users\Lin\AppData\Local\Temp\Twain001.Mtx
2023-12-06 10:19 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\AppReadiness
2023-12-06 10:15 - 2021-10-21 06:15 - 000268824 _____ C:\Windows\system32\FNTCACHE.DAT
2023-12-06 10:14 - 2021-10-21 06:16 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2023-12-06 10:14 - 2021-10-21 06:15 - 000008192 ___SH C:\DumpStack.log.tmp
2023-12-06 10:14 - 2019-12-07 04:03 - 000786432 _____ C:\Windows\system32\config\BBI
2023-12-06 10:13 - 2019-12-07 04:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2023-12-06 10:13 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
2023-12-06 10:13 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\lv-LV
2023-12-06 10:13 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\lt-LT
2023-12-06 10:13 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\et-EE
2023-12-06 10:13 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\es-MX
2023-12-06 10:13 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2023-12-06 10:13 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SystemResources
2023-12-06 10:13 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\WinMetadata
2023-12-06 10:13 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\oobe
2023-12-06 10:13 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\lv-LV
2023-12-06 10:13 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\lt-LT
2023-12-06 10:13 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\et-EE
2023-12-06 10:13 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\es-MX
2023-12-06 10:13 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\Dism
2023-12-06 10:13 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\ShellExperiences
2023-12-06 10:13 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\Provisioning
2023-12-06 10:13 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\PolicyDefinitions
2023-12-06 10:13 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\bcastdvr
2023-12-06 10:13 - 2019-12-07 04:03 - 000000000 ____D C:\Windows\servicing
2023-12-06 10:12 - 2019-12-07 04:03 - 000000000 ____D C:\Windows\CbsTemp
2023-12-06 10:11 - 2019-12-07 04:52 - 000023040 _____ (Microsoft Corporation) C:\Windows\system32\OEMDefaultAssociations.dll
2023-12-06 10:11 - 2019-12-07 04:52 - 000020827 _____ C:\Windows\system32\OEMDefaultAssociations.xml
2023-12-06 10:02 - 2019-12-07 04:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-12-06 09:39 - 2021-10-27 07:58 - 000000000 ____D C:\Users\Lin
2023-12-06 09:38 - 2021-10-31 13:06 - 000000000 ____D C:\ProgramData\CanonIJPLM
2023-12-06 09:22 - 2021-10-21 06:16 - 000000000 ____D C:\Windows\system32\Drivers\wd
2023-12-06 09:05 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\NDF
2023-12-06 08:56 - 2021-10-21 06:15 - 000000000 ____D C:\Windows\system32\SleepStudy
2023-12-05 00:39 - 2021-10-21 06:17 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-12-05 00:39 - 2021-10-21 06:17 - 000002276 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2023-11-23 12:13 - 2022-09-22 11:18 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\EUF7C9.tmp
2023-11-23 12:13 - 2022-09-22 11:18 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\EUA57.tmp
2023-11-23 11:53 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\LiveKernelReports
2023-11-20 11:38 - 2021-12-11 06:23 - 000003592 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1976587878-1381545113-1953759822-1003
2023-11-20 11:38 - 2021-10-27 08:04 - 000003376 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1976587878-1381545113-1953759822-1003
2023-11-20 11:38 - 2021-10-27 08:04 - 000002377 _____ C:\Users\Lin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-11-20 11:35 - 2023-09-28 09:16 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\DA56319A-FB90-4962-85F7-6C960C5C4448
2023-11-20 11:35 - 2023-09-14 09:31 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\F0C9B465-2669-40B1-96D4-96BFCE768B2F
2023-11-20 11:35 - 2023-08-15 09:40 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\4AEBC065-1648-4466-805D-374CE2607D7A
2023-11-20 11:35 - 2023-08-08 08:06 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\C5593428-EE63-44B8-A698-9B9211759E71
2023-11-16 18:58 - 2019-12-07 04:14 - 000000000 ___SD C:\Windows\SysWOW64\F12
2023-11-16 18:58 - 2019-12-07 04:14 - 000000000 ___SD C:\Windows\SysWOW64\DiagSvcs
2023-11-16 18:58 - 2019-12-07 04:14 - 000000000 ___SD C:\Windows\system32\UNP
2023-11-16 18:58 - 2019-12-07 04:14 - 000000000 ___SD C:\Windows\system32\F12
2023-11-16 18:58 - 2019-12-07 04:14 - 000000000 ___SD C:\Windows\system32\DiagSvcs
2023-11-16 18:58 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\setup
2023-11-16 18:58 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\PerceptionSimulation
2023-11-16 18:58 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\oobe
2023-11-16 18:58 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\migwiz
2023-11-16 18:58 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\Com
2023-11-16 18:58 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\SysWOW64\AdvancedInstallers
2023-11-16 18:58 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2023-11-16 18:58 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
2023-11-16 18:58 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\Sysprep
2023-11-16 18:58 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\ShellExperiences
2023-11-16 18:58 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\setup
2023-11-16 18:58 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\PerceptionSimulation
2023-11-16 18:58 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\migwiz
2023-11-16 18:58 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\Com
2023-11-16 18:58 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\appraiser
2023-11-16 18:58 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\system32\AdvancedInstallers
2023-11-16 18:57 - 2019-12-07 04:52 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2023-11-16 18:57 - 2019-12-07 04:52 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2023-11-16 18:57 - 2019-12-07 04:14 - 000000000 ___RD C:\Windows\PrintDialog
2023-11-16 18:57 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\ShellComponents
2023-11-16 18:57 - 2019-12-07 04:14 - 000000000 ____D C:\Windows\IME
2023-11-16 18:57 - 2019-12-07 04:14 - 000000000 ____D C:\Program Files\Windows Defender
2023-11-16 18:57 - 2019-12-07 04:14 - 000000000 ____D C:\Program Files\Common Files\System
2023-11-16 18:57 - 2019-12-07 04:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2023-11-16 14:31 - 2019-12-07 04:15 - 000208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msclmd.dll
2023-11-16 14:31 - 2019-12-07 04:14 - 000232448 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll
2023-11-16 14:06 - 2021-10-21 06:18 - 003016192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2023-11-16 11:52 - 2021-10-27 19:38 - 000000000 ____D C:\Windows\system32\MRT
2023-11-16 11:48 - 2021-10-27 19:38 - 182871392 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2023-11-09 13:09 - 2023-11-01 13:01 - 000000000 ____D C:\Users\Lin\AppData\Local\Temp\6442C90C-64A6-45C9-9862-5BEED61C8D5E

==================== Files in the root of some directories ========

2023-11-22 12:04 - 2023-11-22 12:04 - 000000000 _____ () C:\Users\Lin\AppData\Roaming\2fugt50fm2v.nepsbmwrmva
2023-11-22 12:06 - 2023-11-22 12:06 - 000000000 _____ () C:\Users\Lin\AppData\Roaming\4jdssrxmart.jesp3sezani
2023-11-22 12:04 - 2023-11-22 12:04 - 000000093 _____ () C:\Users\Lin\AppData\Roaming\7EcHqckoSNxx1XM84RCbez0QNT8PTctu9tGchKfyqeUR1840HXGlRaNT5HQamI7H
2023-11-22 12:07 - 2023-11-22 12:07 - 000000000 _____ () C:\Users\Lin\AppData\Roaming\agjrvwdmgju.w0iiciae4y5
2023-11-22 12:09 - 2023-11-22 12:09 - 000000000 _____ () C:\Users\Lin\AppData\Roaming\bs0rttvrjv3.hdt5t1vd1bx
2023-11-22 12:08 - 2023-11-22 12:08 - 000000000 _____ () C:\Users\Lin\AppData\Roaming\emdorsisnmw.tx1i5yt5beg
2023-11-22 12:04 - 2023-11-22 12:04 - 000000000 _____ () C:\Users\Lin\AppData\Roaming\fxcojpk0ods.cxr5mylbpcz
2023-11-22 12:04 - 2023-11-22 12:04 - 000000000 _____ () C:\Users\Lin\AppData\Roaming\jaauutkoqqw.2jednkntrjj
2023-11-22 12:09 - 2023-11-22 12:09 - 000000000 _____ () C:\Users\Lin\AppData\Roaming\nkdbw5xeoxb.e4idopyldds
2023-11-22 12:04 - 2023-11-22 12:04 - 000000000 _____ () C:\Users\Lin\AppData\Roaming\qrwrm1e3ctm.1xvgaifxcpg
2023-06-11 11:27 - 2023-06-11 11:27 - 000007606 _____ () C:\Users\Lin\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================