Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Computer acting weird

Started by Jade227 , Oct 11 2021 04:20 AM

Please log in to reply

#1
Jade227

Posted 11 October 2021 - 04:20 AM

Member

Member
13 posts

My computer acts weird, just restarting randomly, or just freezing. Sometimes it takes forever to perform a task. The main worry for me is if I have a virus or some form of malware that is making it restart all the time. I have scanned with ESET Antivirus, but it doesn't pick anything up.

Please could you advise if you able to help. Unfortunately I am not very good at checking for virusses.

I see the instructions say I must run your program and past the results in replies. I have done that for you below.

Thank you

Regards

Jade

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 10-10-2021

Ran by user (administrator) on JADE-PC (11-10-2021 11:30:53)

Running from C:\Users\user\Desktop

Loaded Profiles: user

Platform: Microsoft Windows 10 Pro Version 21H1 19043.1237 (X64) Language: English (United Kingdom)

Default browser: Chrome

Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

(Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe

(Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe

(Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe

(Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe

(Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0369924.inf_amd64_5f5f03b299704d08\B369889\atieclxx.exe

(Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0369924.inf_amd64_5f5f03b299704d08\B369889\atiesrxx.exe

(Advanced Micro Devices, Inc.) [File not signed] C:\Program Files\AMD\CNext\CNext\cpumetricsserver.exe

(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe

(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <11>

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler64.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe\WinStore.App.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe

(Realtek Semiconductor Corp -> ) C:\Windows\runSW.exe

(Realtek Semiconductor Corp -> Realtek) C:\Program Files (x86)\Tenda\TeWlanCuRt\RtlService.exe

(Realtek Semiconductor Corp. -> Realtek) C:\Windows\SwUSB.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [165928 2021-08-18] (ESET, spol. s r.o. -> ESET)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1160408 2017-03-28] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [646776 2020-03-12] (Oracle America, Inc. -> Oracle Corporation)

HKLM\...\Policies\Explorer: [HideSCAHealth] 1

HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION

HKU\S-1-5-21-230040752-2165402550-693070872-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4110568 2021-07-21] (Valve -> Valve Corporation)

HKU\S-1-5-21-230040752-2165402550-693070872-1001\...\Run: [Spotify] => C:\Users\user\AppData\Roaming\Spotify\Spotify.exe [24276096 2021-08-28] (Spotify AB -> Spotify Ltd)

HKU\S-1-5-21-230040752-2165402550-693070872-1001\...\Run: [Discord] => C:\Users\user\AppData\Local\Discord\Update.exe [1512608 2021-09-21] (Discord Inc. -> GitHub)

HKU\S-1-5-21-230040752-2165402550-693070872-1001\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\user\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"

HKU\S-1-5-21-230040752-2165402550-693070872-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\user\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe"

HKU\S-1-5-21-230040752-2165402550-693070872-1001\...\RunOnce: [Uninstall 21.170.0822.0002] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\user\AppData\Local\Microsoft\OneDrive\21.170.0822.0002"

HKU\S-1-5-21-230040752-2165402550-693070872-1003\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\jadey\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"

HKU\S-1-5-21-230040752-2165402550-693070872-1003\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\jadey\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe"

HKU\S-1-5-21-230040752-2165402550-693070872-1003\...\RunOnce: [Uninstall 21.073.0411.0002\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\jadey\AppData\Local\Microsoft\OneDrive\21.073.0411.0002\amd64"

HKU\S-1-5-21-230040752-2165402550-693070872-1003\...\RunOnce: [Uninstall 21.073.0411.0002] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\jadey\AppData\Local\Microsoft\OneDrive\21.073.0411.0002"

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\94.0.4606.71\Installer\chrmstp.exe [2021-10-11] (Google LLC -> Google LLC)

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0576375C-3329-4E9E-9F81-23D68CC90A69} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [63960 2021-07-22] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

Task: {1DAA178D-3ED3-47E4-A4CE-174FA8DA9A8A} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [134504 2021-10-01] (Microsoft Corporation -> Microsoft Corporation)

Task: {264B7985-B78E-40DA-80FD-793F04762D2D} - System32\Tasks\AMD ThankingURL => C:\Program Files\AMD\CIM\Bin64\Setup.exe [1126872 2021-07-22] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

Task: {4C2C869C-87CE-444F-B259-8F98509EF613} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-07-15] (Google Inc -> Google Inc.)

Task: {6B07CB99-D003-436E-B5F9-0B3746922D0C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-07-15] (Google Inc -> Google Inc.)

Task: {6E8DAD47-B16A-4BE0-9589-F461A833380D} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\user\Downloads\esetonlinescanner.exe

Task: {71BE2FF9-1EE5-4B7E-BD18-A6D97600AE4B} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [134504 2021-10-01] (Microsoft Corporation -> Microsoft Corporation)

Task: {7DCD85FC-ECEB-4B28-A608-63F843604B3A} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21976976 2021-09-24] (Microsoft Corporation -> Microsoft Corporation)

Task: {8D684629-BC33-4043-BD70-CE0A942CD6E5} - System32\Tasks\AMDRyzenMasterSDKTask => C:\Program Files\AMD\CNext\CNext\cpumetricsserver.exe [47104 2021-07-22] (Advanced Micro Devices, Inc.) [File not signed]

Task: {9EAFF4C0-882E-4B39-A0CB-9DACDACCCF5A} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\user\Downloads\esetonlinescanner.exe

Task: {9FD7CD42-E30E-4480-B0BE-179B2C3942BF} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [269272 2021-07-22] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

Task: {A792B3B6-DC96-4D2B-9C52-97F53F7454A5} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1715672 2021-07-22] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

Task: {AE16DABC-1258-48C1-8122-E5E370DAF969} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21976976 2021-09-24] (Microsoft Corporation -> Microsoft Corporation)

Task: {B60F657E-075A-473B-983E-4A7BEB64A735} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1715672 2021-07-22] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

Task: {BC9D73D3-11D4-4D9F-B4F8-8B4D7CB1988F} - System32\Tasks\Microsoft\Windows\WaaSMedic\MaintenanceWork => {72566E27-1ABB-4EB3-B4F0-EB431CB1CB32}

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{840b87ce-1b45-46c7-9640-2977d1333b17}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{8544096f-ca81-4a05-94b9-ada7fa94ea4e}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{8d012cf6-eeec-43da-bc74-373a6b9c980c}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{f616238a-5b8f-40d0-bd80-b48a5b4bb3a6}: [DhcpNameServer] 192.168.1.1

Edge:

=======

Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]

Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]

Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]

Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]

Edge DefaultProfile: Default

Edge Profile: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default [2021-10-04]

FireFox:

========

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-08-18] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\dtplugin\npDeployJava1.dll [2020-07-08] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\plugin2\npjp2.dll [2020-07-08] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-08-18] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-07-31] (VideoLAN) [File not signed]

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2017-03-28] (Adobe Systems, Incorporated -> Adobe Systems Inc.)

Chrome:

=======

CHR DefaultProfile: Default

CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default [2021-10-11]

CHR Notifications: Default -> hxxps://www.reddit.com

CHR Extension: (Docs) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-07-15]

CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-25]

CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-07-15]

CHR Extension: (Google Docs Offline) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-10-11]

CHR Extension: (Chrome Web Store Payments) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-31]

CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-25]

CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Guest Profile [2021-10-11]

CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1 [2021-09-05]

CHR Extension: (Slides) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-08-19]

CHR Extension: (Docs) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2021-08-19]

CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-08-19]

CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-08-19]

CHR Extension: (Sheets) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-08-19]

CHR Extension: (Google Docs Offline) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-08-19]

CHR Extension: (Chrome Web Store Payments) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-08-19]

CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-08-19]

CHR Extension: (Chrome Media Router) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-08-19]

CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 3 [2021-10-11]

CHR Extension: (Slides) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-08-22]

CHR Extension: (Docs) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aohghmighlieiainnegkcijnfilokake [2021-08-22]

CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-08-22]

CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-08-22]

CHR Extension: (Sheets) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-08-22]

CHR Extension: (Google Docs Offline) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-10-11]

CHR Extension: (Chrome Web Store Payments) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-08-22]

CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-08-22]

CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 4 [2021-09-19]

CHR Extension: (Slides) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-09-19]

CHR Extension: (Docs) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\aohghmighlieiainnegkcijnfilokake [2021-09-19]

CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-09-19]

CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-09-19]

CHR Extension: (Sheets) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-09-19]

CHR Extension: (Google Docs Offline) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-09-19]

CHR Extension: (Chrome Web Store Payments) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-09-19]

CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-09-19]

CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\System Profile [2021-10-11]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [82640 2017-03-28] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9250696 2021-09-24] (Microsoft Corporation -> Microsoft Corporation)

R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [3079464 2021-08-18] (ESET, spol. s r.o. -> ESET)

R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [3079464 2021-08-18] (ESET, spol. s r.o. -> ESET)

R2 RealtekWlanU; C:\Program Files (x86)\Tenda\TeWlanCuRt\RtlService.exe [48856 2016-08-23] (Realtek Semiconductor Corp -> Realtek)

S2 RTLDHCPService; C:\Program Files (x86)\Tenda\TeWlanCuRt\RTLDHCP.exe [262360 2016-08-23] (Realtek Semiconductor Corp -> Realtek)

R2 RunSwUSB; C:\Windows\runSW.exe [44760 2017-01-06] (Realtek Semiconductor Corp -> )

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5394872 2021-09-17] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 TwitchService; C:\Program Files\Common Files\Twitch\TwitchService.exe [317144 2021-08-28] (Twitch Interactive, Inc. -> )

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [41536 2021-07-07] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

R3 AMDSAFD; C:\WINDOWS\System32\DriverStore\FileRepository\amdsafd.inf_amd64_8e2568524f674315\amdsafd.sys [100768 2021-03-29] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)

R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0369924.inf_amd64_5f5f03b299704d08\B369889\amdkmdag.sys [81601040 2021-07-27] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [56792 2021-07-14] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

S3 AsrSetupDrv103; C:\Windows\SysWOW64\Drivers\AsrSetupDrv103.sys [34568 2019-07-15] (ASROCK Incorporation -> RW-Everything) [File not signed]

S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2020-09-10] (Microsoft Corporation) [File not signed]

S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]

R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [169424 2021-08-18] (ESET, spol. s r.o. -> ESET)

R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [123472 2021-08-18] (ESET, spol. s r.o. -> ESET)

S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15824 2021-03-15] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)

R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [194776 2021-08-18] (ESET, spol. s r.o. -> ESET)

R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [43904 2021-08-18] (ESET, spol. s r.o. -> ESET)

R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [70232 2021-08-18] (ESET, spol. s r.o. -> ESET)

R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [107456 2021-08-18] (ESET, spol. s r.o. -> ESET)

R3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [5733920 2016-12-13] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)

S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-10-11 11:30 - 2021-10-11 11:32 - 000021362 _____ C:\Users\user\Desktop\FRST.txt

2021-10-11 11:30 - 2021-10-11 11:30 - 000000000 ____D C:\Users\user\Desktop\FRST-OlderVersion

2021-10-11 11:29 - 2021-10-11 11:30 - 002310144 _____ (Farbar) C:\Users\user\Desktop\FRST64.exe

2021-10-11 10:48 - 2021-10-11 10:49 - 000000000 ____D C:\AdwCleaner

2021-10-11 10:46 - 2021-10-11 10:47 - 008553680 _____ (Malwarebytes) C:\Users\user\Desktop\AdwCleaner.exe

2021-10-11 10:11 - 2021-10-11 10:11 - 000003076 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate

2021-09-26 18:04 - 2021-10-04 14:42 - 000000000 ____D C:\Users\user\AppData\Roaming\discord

2021-09-26 18:04 - 2021-10-04 14:25 - 000000000 ____D C:\Users\user\AppData\Local\Discord

2021-09-26 18:04 - 2021-09-26 18:04 - 000002222 _____ C:\Users\user\Desktop\Discord.lnk

2021-09-26 18:04 - 2021-09-26 18:04 - 000000000 ____D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc

2021-09-26 18:04 - 2021-09-26 18:04 - 000000000 ____D C:\Users\user\AppData\Local\SquirrelTemp

2021-09-26 18:03 - 2021-09-26 18:04 - 082973864 _____ (Discord Inc.) C:\Users\user\Downloads\DiscordSetup.exe

2021-09-17 11:56 - 2021-09-17 11:56 - 000672768 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll

2021-09-17 11:56 - 2021-09-17 11:56 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2021-09-17 11:56 - 2021-09-17 11:56 - 000170496 _____ C:\WINDOWS\system32\DeviceUpdateCenterCsp.dll

2021-09-17 11:55 - 2021-09-17 11:55 - 002111488 _____ (Digimarc) C:\WINDOWS\SysWOW64\DMRCDecoder.dll

2021-09-17 11:55 - 2021-09-17 11:55 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll

2021-09-17 11:55 - 2021-09-17 11:55 - 001313608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi

2021-09-17 11:55 - 2021-09-17 11:55 - 001164288 _____ C:\WINDOWS\system32\MBR2GPT.EXE

2021-09-17 11:55 - 2021-09-17 11:55 - 000570368 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2021-09-17 11:55 - 2021-09-17 11:55 - 000426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv

2021-09-17 11:55 - 2021-09-17 11:55 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe

2021-09-17 11:55 - 2021-09-17 11:55 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx

2021-09-17 11:55 - 2021-09-17 11:55 - 000011355 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim

2021-09-17 11:54 - 2021-09-17 11:54 - 001823304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2021-09-17 11:54 - 2021-09-17 11:54 - 001393480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi

2021-09-17 11:54 - 2021-09-17 11:54 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx

2021-09-17 11:53 - 2021-09-17 11:53 - 002295296 _____ (Digimarc) C:\WINDOWS\system32\DMRCDecoder.dll

2021-09-17 11:53 - 2021-09-17 11:53 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll

2021-09-17 11:53 - 2021-09-17 11:53 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv

2021-09-17 11:53 - 2021-09-17 11:53 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe

2021-09-17 11:53 - 2021-09-17 11:53 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe

2021-09-17 11:53 - 2021-09-17 11:53 - 000098816 _____ C:\WINDOWS\system32\Drivers\cimfs.sys

2021-09-17 11:20 - 2021-09-17 11:20 - 000000000 ___HD C:\$WinREAgent

2021-09-13 15:18 - 2021-09-13 15:19 - 000000000 ____D C:\Users\jadey\AppData\Roaming\.minecraft

2021-09-13 15:18 - 2021-09-13 15:18 - 000000000 ____D C:\Users\jadey\AppData\Local\CEF

2021-09-13 15:00 - 2021-09-13 15:00 - 000000000 ____D C:\Program Files (x86)\Realtek

2021-09-13 15:00 - 2021-08-12 15:19 - 001151992 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys

2021-09-13 14:51 - 2021-09-13 14:51 - 000000000 ____D C:\Jade_Shared

2021-09-13 14:50 - 2021-09-13 14:54 - 004982207 _____ C:\Users\user\Downloads\Install_Win10_10050_09012021.zip

2021-09-12 12:04 - 2021-09-12 12:04 - 001110921 _____ C:\Users\user\Downloads\fabric-api-0.40.1+1.17.jar

2021-09-12 12:03 - 2021-09-12 12:03 - 000132959 _____ C:\Users\user\Downloads\fabric-installer-0.7.4.jar

2021-09-12 11:30 - 2021-09-12 11:30 - 001796228 _____ C:\Users\user\Downloads\winged-1.17.1-3.0.0.jar

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-10-11 11:31 - 2020-04-21 14:32 - 000000000 ____D C:\FRST

2021-10-11 11:26 - 2020-09-10 19:46 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2021-10-11 11:22 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2021-10-11 11:18 - 2019-07-15 11:15 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2021-10-11 11:18 - 2019-07-15 11:14 - 000000000 ____D C:\Program Files (x86)\Google

2021-10-11 11:17 - 2020-09-10 20:06 - 000003480 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA

2021-10-11 11:17 - 2020-09-10 20:06 - 000003356 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore

2021-10-11 11:06 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps

2021-10-11 11:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness

2021-10-11 10:46 - 2020-09-10 20:06 - 000003358 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-230040752-2165402550-693070872-1001

2021-10-11 10:46 - 2020-09-10 19:14 - 000002376 _____ C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2021-10-11 10:44 - 2020-09-10 20:06 - 000004162 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{A2DF6450-EFA8-446F-BDC3-13BB92C1A2D4}

2021-10-11 10:10 - 2020-09-10 20:06 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2021-10-11 10:10 - 2020-09-10 19:46 - 000008192 ___SH C:\DumpStack.log.tmp

2021-10-04 14:44 - 2021-08-30 16:19 - 000000000 ____D C:\Users\user\AppData\Roaming\.minecraft

2021-10-04 14:39 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI

2021-10-03 17:10 - 2020-05-11 18:06 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2021-10-01 13:44 - 2020-05-11 15:39 - 000000000 ____D C:\Program Files\Microsoft Office

2021-10-01 13:34 - 2021-02-23 17:52 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools

2021-09-30 20:12 - 2020-09-10 20:06 - 000003420 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA

2021-09-30 20:12 - 2020-09-10 20:06 - 000003296 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore

2021-09-29 18:26 - 2021-08-28 18:05 - 000000000 ____D C:\Users\user\AppData\Roaming\Twitch Studio

2021-09-28 17:02 - 2021-08-30 16:19 - 000000000 ____D C:\Program Files (x86)\Minecraft Launcher

2021-09-27 17:10 - 2021-01-20 20:42 - 000000000 ____D C:\Users\user\AppData\Local\AMD_Common

2021-09-26 21:06 - 2020-09-28 17:50 - 000000000 ____D C:\Program Files (x86)\Steam

2021-09-26 19:20 - 2019-07-15 13:59 - 000000000 ____D C:\Users\user\AppData\Local\D3DSCache

2021-09-18 17:45 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF

2021-09-17 12:28 - 2020-09-10 19:56 - 000795738 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2021-09-17 12:24 - 2020-09-10 19:46 - 000435384 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2021-09-17 12:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata

2021-09-17 12:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe

2021-09-17 12:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism

2021-09-17 12:20 - 2019-12-07 16:49 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection

2021-09-17 12:20 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2021-09-17 12:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources

2021-09-17 12:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata

2021-09-17 12:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2021-09-17 12:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe

2021-09-17 12:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz

2021-09-17 12:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism

2021-09-17 12:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\DDFs

2021-09-17 12:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser

2021-09-17 12:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents

2021-09-17 12:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning

2021-09-17 12:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions

2021-09-17 12:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr

2021-09-17 12:20 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing

2021-09-17 12:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\AppLocker

2021-09-17 12:04 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp

2021-09-17 11:16 - 2019-08-22 17:33 - 000000000 ____D C:\WINDOWS\system32\MRT

2021-09-17 11:10 - 2019-08-22 17:33 - 135637312 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2021-09-13 15:19 - 2020-05-14 17:53 - 000000000 ____D C:\Users\jadey\AppData\Local\Packages

2021-09-13 15:17 - 2020-07-12 19:37 - 000000000 ____D C:\Users\user\AppData\Local\Bluestacks

2021-09-13 15:16 - 2020-09-10 20:06 - 000003360 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-230040752-2165402550-693070872-1003

2021-09-13 15:16 - 2020-09-10 19:14 - 000002379 _____ C:\Users\jadey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2021-09-13 15:16 - 2020-05-14 17:55 - 000000000 ___RD C:\Users\jadey\OneDrive

2021-09-13 15:13 - 2020-05-14 17:53 - 000002348 _____ C:\Users\jadey\Desktop\Microsoft Edge.lnk

2021-09-13 15:13 - 2020-05-14 17:53 - 000002332 _____ C:\Users\jadey\Desktop\Google Chrome.lnk

2021-09-13 15:00 - 2020-10-07 18:42 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

==================== Files in the root of some directories ========

2019-08-22 21:14 - 2021-02-20 16:45 - 000007605 _____ () C:\Users\user\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-10-2021

Ran by user (11-10-2021 11:35:04)

Running from C:\Users\user\Desktop

Microsoft Windows 10 Pro Version 21H1 19043.1237 (X64) (2020-09-10 18:07:06)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-230040752-2165402550-693070872-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-230040752-2165402550-693070872-503 - Limited - Disabled)

doggi (S-1-5-21-230040752-2165402550-693070872-1004 - Limited - Enabled)

Guest (S-1-5-21-230040752-2165402550-693070872-501 - Limited - Disabled)

jadey (S-1-5-21-230040752-2165402550-693070872-1003 - Limited - Enabled) => C:\Users\jadey

karen (S-1-5-21-230040752-2165402550-693070872-1005 - Limited - Enabled)

rodge (S-1-5-21-230040752-2165402550-693070872-1002 - Limited - Enabled)

user (S-1-5-21-230040752-2165402550-693070872-1001 - Administrator - Enabled) => C:\Users\user

WDAGUtilityAccount (S-1-5-21-230040752-2165402550-693070872-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET Security (Enabled - Up to date) {89B55CC4-3881-78B2-11E2-479AE0371896}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: ESET Security (Enabled - Up to date) {885D845F-AF19-0124-FECE-FFF49D00F440}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: ESET Firewall (Enabled) {B066057A-E576-007C-D591-56C163D3B33B}

FW: ESET Firewall (Disabled) {B18EDDE1-72EE-79EA-3ABD-EEAF1EE45FED}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Reader XI (11.0.20) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.20 - Adobe Systems Incorporated)

AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 21.7.2 - Advanced Micro Devices, Inc.)

Branding64 (HKLM\...\{C871FC62-0186-40ED-BAEA-7C65BE367755}) (Version: 1.00.0006 - Advanced Micro Devices, Inc.) Hidden

Discord (HKU\S-1-5-21-230040752-2165402550-693070872-1001\...\Discord) (Version: 1.0.9003 - Discord Inc.)

ESET Security (HKLM\...\{0C3F76CB-98AA-49B1-9B72-CD040E3E17E8}) (Version: 14.2.24.0 - ESET, spol. s r.o.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 94.0.4606.71 - Google LLC)

Java 8 Update 251 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180251F0}) (Version: 8.0.2510.8 - Oracle Corporation)

K-Lite Codec Pack 9.7.5 (Full) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 9.7.5 - )

Microsoft 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.14430.20234 - Microsoft Corporation)

Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 94.0.992.38 - Microsoft Corporation)

Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 94.0.992.31 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-230040752-2165402550-693070872-1001\...\OneDriveSetup.exe) (Version: 21.180.0905.0007 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-230040752-2165402550-693070872-1003\...\OneDriveSetup.exe) (Version: 21.160.0808.0002 - Microsoft Corporation)

Microsoft Update Health Tools (HKLM\...\{29B15818-E79F-4AB0-8938-9410C807AD76}) (Version: 2.84.0.0 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{CA8A885F-E95B-3FC6-BB91-F4D9377C7686}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.28.29913 (HKLM-x32\...\{855e31d2-9031-46e1-b06d-c9d7777deefb}) (Version: 14.28.29913.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29334 (HKLM-x32\...\{b2d0f752-adc5-496e-8f70-8669de01f746}) (Version: 14.28.29334.0 - Microsoft Corporation)

Minecraft Launcher (HKLM-x32\...\{733C3ACB-432D-4880-B0E1-660000D7974D}) (Version: 1.0.0.0 - Mojang)

OBS Studio (HKLM-x32\...\OBS Studio) (Version: 27.0.1 - OBS Project)

Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14430.20234 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14430.20234 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.13801.20274 - Microsoft Corporation) Hidden

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.050.0511.2021 - Realtek)

Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6650 - Realtek Semiconductor Corp.)

RyzenMasterSDK (HKLM\...\{9F16B6C2-A059-42EC-8640-96821B0B6B24}) (Version: 1.2.3.5 - Advanced Micro Devices, Inc.) Hidden

Spotify (HKU\S-1-5-21-230040752-2165402550-693070872-1001\...\Spotify) (Version: 1.1.64.561.g71bd09eb - Spotify AB)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Tenda Wireless Utility (HKLM-x32\...\{198CC6BB-29D8-43DB-AF60-CEEF9DDF9F18}) (Version: 1.0.0.8 - Tenda)

The Sims 4 Seasons (HKLM\...\The Sims 4 Seasons_is1) (Version: 1.46.18.1020 - )

TP-LINK TL-WN823N (HKLM-x32\...\{CE194A8D-C8DF-47EB-AB04-5A54CDC1C5BD}) (Version: 1.0.0 - TP-Link)

Tux Typing (remove only) (HKLM-x32\...\TuxType) (Version: - )

Twitch Studio (HKU\S-1-5-21-230040752-2165402550-693070872-1001\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF372B0}) (Version: 8.0.0 - Twitch Interactive, Inc.)

VLC media player 2.0.8 (HKLM-x32\...\VLC media player) (Version: 2.0.8 - VideoLAN)

Windows 10 Update Assistant (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.23258 - Microsoft Corporation)

WinRAR archiver (HKLM-x32\...\WinRAR archiver) (Version: - )

Packages:

=========

Amazing Run -> C:\Program Files\WindowsApps\28627PremiumFreeEpisodeGa.StarWarRun_10.9.0.0_x64__haf3134me8dd2 [2020-04-21] (Premium Free Episode Games PC Ltd.) [MS Ad]

Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.66.4.0_x86__kgqvnymyfvs32 [2021-10-11] (king.com)

Candy Crush Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.2120.1.0_x86__kgqvnymyfvs32 [2021-10-02] (king.com)

Clients for Twitch -> C:\Program Files\WindowsApps\54242MicroJLSoftware.ClientsforTwitch_1.0.3.0_x64__0hksrhj5ws75r [2021-08-28] (MicroJL Software)

Cooking Chef - Restaurant Fever -> C:\Program Files\WindowsApps\42444BestFriendsMultiplay.CookingChef-RestaurantFe_7.9.0.0_x64__y853g5sshg164 [2020-02-08] (Best Friends Multiplayer Games) [MS Ad]

Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.10.183.0_x64__rz1tebttyb220 [2021-10-01] (Dolby Laboratories)

Fancy Fashion Salon -> C:\Program Files\WindowsApps\53001.FancyFashionSalon_1.1.2.0_x86__zca8h67ayrj6t [2019-09-05] (IO Games) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-08-22] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-08-22] (Microsoft Corporation) [MS Ad]

Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.10.9220.0_x64__8wekyb3d8bbwe [2021-10-11] (Microsoft Studios) [MS Ad]

Minecraft for Windows 10 -> C:\Program Files\WindowsApps\Microsoft.MinecraftUWP_1.17.3402.0_x64__8wekyb3d8bbwe [2021-10-11] (Microsoft Studios)

Mr. Bean Art Games -> C:\Program Files\WindowsApps\23268AppolloPaint.Mr.BeanPaint_1.3.11.0_x64__skgegchsa453w [2020-07-05] (Paint) [MS Ad]

Photo Editor | Polarr -> C:\Program Files\WindowsApps\613EBCEA.PolarrPhotoEditorAcademicEdition_5.10.220.0_x64__jb41c8remg0x2 [2021-09-03] (Polarr)

Roblox -> C:\Program Files\WindowsApps\ROBLOXCORPORATION.ROBLOX_2.498.396.0_x86__55nm5eh3cm0pr [2021-10-11] (ROBLOX Corporation)

Vacation Adventures: Park Ranger -> C:\Program Files\WindowsApps\C881FC4B.VacationAdventuresParkRanger_1.0.484.0_x86__gv7gkxn7zbbh4 [2019-09-05] (Filematch Ltd.)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2021-08-18] (ESET, spol. s r.o. -> ESET)

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2005-06-07] () [File not signed]

ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2021-08-18] (ESET, spol. s r.o. -> ESET)

ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2005-06-07] () [File not signed]

ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\WINDOWS\System32\atiacm64.dll [2021-07-27] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2021-08-18] (ESET, spol. s r.o. -> ESET)

ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2005-06-07] () [File not signed]

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2020-08-17 11:48 - 2020-08-17 11:48 - 000017920 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libEGL.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 003567616 _____ () [File not signed] C:\Program Files\AMD\CNext\CNext\libGLESv2.dll

2021-07-07 06:37 - 2021-07-07 06:37 - 000562688 _____ (Advanced Micro Devices) [File not signed] C:\Program Files\AMD\CNext\CNext\Device.dll

2021-07-07 06:37 - 2021-07-07 06:37 - 000058880 _____ (Advanced Micro Devices) [File not signed] C:\Program Files\AMD\CNext\CNext\Platform.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000031744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qgif.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000039424 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qicns.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000031744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qico.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000414720 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qjpeg.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000025088 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qsvg.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000024576 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qtga.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000023552 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qwbmp.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000532992 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qwebp.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 001441792 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\platforms\qwindows.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 001189888 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\sqldrivers\qsqlite.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000134656 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\plugins\styles\qwindowsvistastyle.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 006184448 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Core.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 006867456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Gui.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000735232 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Multimedia.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000120832 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5MultimediaQuick.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 001104896 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Network.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000325120 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Positioning.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 003668480 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Qml.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000517120 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5QmlModels.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000051712 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5QmlWorkerScript.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 004228608 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Quick.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000171008 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5QuickControls2.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 001085440 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5QuickTemplates2.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000480256 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5RemoteObjects.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000205824 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Sql.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000329728 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Svg.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000127488 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebChannel.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000390656 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngine.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 095598080 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WebEngineCore.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 005587968 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Widgets.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000462848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5WinExtras.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000188928 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5Xml.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 002878464 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\Qt5XmlPatterns.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000055808 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000059392 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\qtgraphicaleffectsplugin.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000262144 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtMultimedia\declarative_multimedia.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000017920 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQml\qmlplugin.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000017920 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000284160 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Controls.2\qtquickcontrols2plugin.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000333824 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000136704 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Dialogs\dialogplugin.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000090112 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000313856 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Templates.2\qtquicktemplates2plugin.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000017920 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll

2020-08-17 11:48 - 2020-08-17 11:48 - 000091648 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AMD\CNext\CNext\QtWebEngine\qtwebengineplugin.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-10-01] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\ssv.dll [2020-07-08] (Oracle America, Inc. -> Oracle Corporation)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\jp2ssv.dll [2020-07-08] (Oracle America, Inc. -> Oracle Corporation)

Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-10-01] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-10-01] (Microsoft Corporation -> Microsoft Corporation)

Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-10-01] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-10-01] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-10-01] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-10-01] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-10-01] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-10-01] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2018-09-15 09:31 - 2018-09-15 09:31 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\

HKU\S-1-5-21-230040752-2165402550-693070872-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\user\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper

HKU\S-1-5-21-230040752-2165402550-693070872-1003\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg

DNS Servers: 192.168.1.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )

Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "SecurityHealth"

HKLM\...\StartupApproved\Run32: => "Adobe ARM"

HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"

HKU\S-1-5-21-230040752-2165402550-693070872-1001\...\StartupApproved\StartupFolder: => "OpenOffice.org 3.4.1.lnk"

HKU\S-1-5-21-230040752-2165402550-693070872-1001\...\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-230040752-2165402550-693070872-1001\...\StartupApproved\Run: => "Steam"

HKU\S-1-5-21-230040752-2165402550-693070872-1001\...\StartupApproved\Run: => "Spotify"

HKU\S-1-5-21-230040752-2165402550-693070872-1001\...\StartupApproved\Run: => "Discord"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [TCP Query User{029E09C9-B68D-442A-ADF0-520E83F9D462}C:\games\the sims 4 seasons\game\bin\ts4_x64.exe] => (Block) C:\games\the sims 4 seasons\game\bin\ts4_x64.exe (Electronic Arts Inc.) [File not signed]

FirewallRules: [UDP Query User{B966D525-FFDD-4CA5-B072-DE597EDB0ED4}C:\games\the sims 4 seasons\game\bin\ts4_x64.exe] => (Block) C:\games\the sims 4 seasons\game\bin\ts4_x64.exe (Electronic Arts Inc.) [File not signed]

FirewallRules: [{1FA4FC50-1320-484A-9C71-76E91B071C1F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)

FirewallRules: [{41AA6AC8-F832-45BF-ABA8-6BB65E04BDF8}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)

FirewallRules: [{AC146A47-4B9F-4134-8ECE-4CD876684345}] => (Allow) C:\Program Files\BlueStacks\HD-Player.exe => No File

FirewallRules: [{E4A5E2B7-9D79-4BD6-848F-5480BFBCB8E9}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)

FirewallRules: [{9F361A94-012B-4899-8F84-FD8FA88C9063}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)

FirewallRules: [{691DEB0F-3FEF-4564-82A9-4CA050BD0E54}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Among Us\Among Us.exe () [File not signed]

FirewallRules: [{2346CC57-47F7-4E1A-AE5B-44FDAC0C8403}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Among Us\Among Us.exe () [File not signed]

FirewallRules: [{4CD69579-D20C-4FFD-95C4-7EF281D27B18}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)

FirewallRules: [{90FF914B-74C4-44FC-93ED-FAB28D9677F1}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)

FirewallRules: [{E3553A77-4E41-488B-861E-9CF3771CD1F6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.75.140.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{9B79D4C0-3D5D-4D34-824D-46C369B306DC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.75.140.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{3BFB14A0-45C7-4A5D-8A95-4E61E052949A}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.75.140.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{F89AAFEC-6CF6-4780-ACFC-9FA133A74E1F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.75.140.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{4CA23D32-7AB8-488E-BA34-B2CA3C04389F}] => (Allow) LPort=1542

FirewallRules: [{7DCA20CD-2D26-4F1F-A3C7-200AD9FA4499}] => (Allow) LPort=1542

FirewallRules: [{C484F9DD-5657-42F7-89E3-F79E1804C794}] => (Allow) LPort=53

FirewallRules: [{EB1D1D9D-15DE-4416-BA01-E53A22E61143}] => (Allow) C:\Program Files (x86)\Tenda\TeWlanCuRt\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)

FirewallRules: [{03CCADC4-611A-481C-BFCD-5AE61FCCE455}] => (Allow) C:\Program Files (x86)\Tenda\TeWlanCuRt\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)

FirewallRules: [{0F6F8D0B-E8BF-465B-B2D1-D9D916FD7F74}] => (Allow) C:\Program Files (x86)\Tenda\TeWlanCuRt\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)

FirewallRules: [{7A25C28A-A701-4F32-A14A-E7ADD8B6DF26}] => (Allow) LPort=53

FirewallRules: [{A71DBE68-3B5F-4D53-BFD7-FF71EE714A62}] => (Allow) C:\Program Files (x86)\Tenda\TeWlanCuRt\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)

FirewallRules: [{7C22D261-DE88-440D-834C-63B698A3B270}] => (Allow) C:\Program Files (x86)\Tenda\TeWlanCuRt\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)

FirewallRules: [{52312E32-147C-41F2-A75A-5F5DA7E337CE}] => (Allow) C:\Program Files (x86)\Tenda\TeWlanCuRt\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)

FirewallRules: [{E13F79F1-6A52-4A75-BD1A-5EF3AA01B59E}] => (Allow) C:\Program Files (x86)\Tenda\TeWlanCuRt\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)

FirewallRules: [TCP Query User{9CCC7F99-C7E6-470C-9D12-EA06A4D50CD3}C:\program files (x86)\minecraft launcher\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft launcher\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe

FirewallRules: [UDP Query User{6271361C-164B-4B39-B44F-6F217BB05704}C:\program files (x86)\minecraft launcher\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft launcher\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe

FirewallRules: [TCP Query User{E93D9171-22E7-4A99-8512-98CB0F3A8BB6}C:\program files (x86)\minecraft launcher\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft launcher\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe

FirewallRules: [UDP Query User{0D4BC8B8-8F49-41C3-933D-7096AB95FF3E}C:\program files (x86)\minecraft launcher\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft launcher\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe

FirewallRules: [TCP Query User{FEBD0D70-EACD-41BA-ACF2-4BF1029DE9A1}C:\users\user\appdata\roaming\twitch studio\bin\twitchstudioagent.exe] => (Block) C:\users\user\appdata\roaming\twitch studio\bin\twitchstudioagent.exe (Twitch Interactive, Inc. -> )

FirewallRules: [UDP Query User{49FCDE6B-66EA-494A-A937-52A7A464B4A7}C:\users\user\appdata\roaming\twitch studio\bin\twitchstudioagent.exe] => (Block) C:\users\user\appdata\roaming\twitch studio\bin\twitchstudioagent.exe (Twitch Interactive, Inc. -> )

FirewallRules: [{4F04C7F4-0C6B-420C-A41B-84E1A44395D3}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\94.0.992.31\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [TCP Query User{0ACA0CB1-E520-436F-AA27-2EA9DECC84B4}C:\users\user\appdata\roaming\twitch studio\bin\twitchstudioagent.exe] => (Allow) C:\users\user\appdata\roaming\twitch studio\bin\twitchstudioagent.exe (Twitch Interactive, Inc. -> )

FirewallRules: [UDP Query User{BD50483F-8A6E-40EE-AA13-EC1329A149F1}C:\users\user\appdata\roaming\twitch studio\bin\twitchstudioagent.exe] => (Allow) C:\users\user\appdata\roaming\twitch studio\bin\twitchstudioagent.exe (Twitch Interactive, Inc. -> )

FirewallRules: [{32E96D00-2D69-4D99-A8E0-1681E3627A47}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{9566C036-98A8-4EB2-98A2-BA3DD467FA26}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

25-09-2021 20:31:23 Scheduled Checkpoint

11-10-2021 10:36:42 Scheduled Checkpoint

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:

==================

Error: (10/04/2021 02:13:59 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: The program explorer.exe version 10.0.19041.1202 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 238c

Start Time: 01d7b919103e40bc

Termination Time: 0

Application Path: C:\Windows\explorer.exe

Report Id: fe676645-1a59-4d15-90e6-68fbaf9fba4d

Faulting package full name:

Faulting package-relative application ID:

Hang type: Unknown

Error: (10/04/2021 02:13:59 PM) (Source: Application Hang) (EventID: 1002) (User: )

Process ID: 19c0

Start Time: 01d7b91888de4d39

Termination Time: 0

Application Path: C:\Windows\explorer.exe

Report Id: 1ebd427f-ee84-4dd6-a960-d86ab9260554

Faulting package full name:

Faulting package-relative application ID:

Hang type: Unknown

Error: (09/28/2021 09:03:49 PM) (Source: VSS) (EventID: 8193) (User: )

Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, A system shutdown is in progress.

Error: (09/28/2021 09:03:49 PM) (Source: VSS) (EventID: 13) (User: )

Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.

]

Error: (09/28/2021 09:03:49 PM) (Source: VSS) (EventID: 8193) (User: )

Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, A system shutdown is in progress.

Error: (09/28/2021 09:03:49 PM) (Source: VSS) (EventID: 13) (User: )

]

Error: (09/27/2021 05:28:59 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: MinecraftLauncher.exe, version: 1.0.1.0, time stamp: 0x60915fc9

Faulting module name: launcher.dll, version: 0.0.0.0, time stamp: 0x61005393

Exception code: 0xc0000409

Fault offset: 0x00437b2a

Faulting process ID: 0x1004

Faulting application start time: 0x01d7b3b43f45bb8a

Faulting application path: C:\Program Files (x86)\Minecraft Launcher\MinecraftLauncher.exe

Faulting module path: C:\Program Files (x86)\Minecraft Launcher\game\launcher.dll

Report ID: d8cec191-7358-478e-ae29-813fe57da94e

Faulting package full name:

Faulting package-relative application ID:

Error: (09/25/2021 12:06:33 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )

Description: The storage optimiser couldn't complete re-trim on (C:) because: The operation requested is not supported by the hardware backing the volume. (0x8900002A)

System errors:

=============

Error: (10/11/2021 10:10:54 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Realtek DHCP Service service terminated unexpectedly. It has done this 1 time(s).

Error: (10/11/2021 10:10:48 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY)

Description: WLAN Extensibility Module has failed to start.

Module Path: C:\WINDOWS\system32\Rtlihvs.dll

Error Code: 126

Error: (10/11/2021 10:10:45 AM) (Source: EventLog) (EventID: 6008) (User: )

Description: The previous system shutdown at 16:07:35 on ‎2021/‎10/‎04 was unexpected.

Error: (10/04/2021 03:28:07 PM) (Source: DCOM) (EventID: 10010) (User: JADE-PC)

Description: The server Microsoft.ZuneVideo_10.21061.10121.0_x64__8wekyb3d8bbwe!Microsoft.ZuneVideo.AppXjgy0dfr6tssa93yj5px65cbv2gsc8r39.mca did not register with DCOM within the required timeout.

Error: (10/04/2021 02:40:55 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: The Realtek DHCP Service service terminated unexpectedly. It has done this 1 time(s).

Error: (10/04/2021 02:40:53 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT AUTHORITY)

Description: WLAN Extensibility Module has failed to start.

Module Path: C:\WINDOWS\system32\Rtlihvs.dll

Error Code: 126

Error: (10/04/2021 02:36:25 PM) (Source: Schannel) (EventID: 4103) (User: NT AUTHORITY)

Description: A fatal error occurred while creating a TLS client credential. The internal error state is 10013.

Error: (10/04/2021 02:36:25 PM) (Source: Schannel) (EventID: 4103) (User: NT AUTHORITY)

Description: A fatal error occurred while creating a TLS client credential. The internal error state is 10013.

CodeIntegrity:

===============

Date: 2021-10-11 10:46:55

Description:

Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

==================== Memory info ===========================

BIOS: American Megatrends Inc. P2.20 03/04/2019

Motherboard: ASRock B450M-HDV R4.0

Processor: AMD Ryzen 3 2200G with Radeon Vega Graphics

Percentage of memory in use: 59%

Total physical RAM: 6072.68 MB

Available physical RAM: 2485.18 MB

Total Virtual: 10424.68 MB

Available Virtual: 5372.25 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:930.36 GB) (Free:803.06 GB) NTFS

\\?\Volume{68871a05-7977-4c94-a3f3-37da59f5369f}\ (Recovery) (Fixed) (Total:0.49 GB) (Free:0.47 GB) NTFS

\\?\Volume{b36cb93f-7661-49f4-9cae-eb219434bf18}\ () (Fixed) (Total:0.55 GB) (Free:0.12 GB) NTFS

\\?\Volume{315fb178-6d3f-4f87-b4f2-738f38077e5d}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: 45491304)

Partition: GPT.

==================== End of Addition.txt =======================

#2
RKinner

Posted 11 October 2021 - 05:18 AM

Malware Expert

Expert
24,700 posts

Make and model of the PC? Service tag if HP.

Multiple replies are OK. Best to post a log as you get it.

Get Process Explorer

https://live.sysinte...com/procexp.exe

Save it to your desktop then run it (Vista or Win7+ - right click and Run As Administrator).
View and check Show Processes From All Users

View, Select Column, check Verified Signer, OK
Options, Verify Image Signatures

Click twice on the CPU column header to sort things by CPU usage with the big hitters at the top.

Wait a full minute then:

File, Save As, Save. Note the file name.   Open the file on your desktop and copy and paste the text to a reply.

Get the free version of Speccy:

http://www.filehippo...ownload_speccy/

(Look in the upper right for the Download
Latest Version button - Do NOT press the large Start Download button on the upper left!)
Download, Save and Install it. Tell it you do not need CCLEANER.    Run Speccy. When it finishes (the little icon in the bottom left will stop moving),
File, Save as Text File, (to your desktop) note the name it gives. OK. Open the file in notepad and delete the line that gives the serial number of your Operating System.
(It will be near the top, 10-20 lines down.) Save the file. Attach the file to your next post. Attaching the log is the best option as it is too big for the forum. Attaching is a multi step process.

First click on More Reply Options
Then scroll down to where you see
Choose File and click on it. Point it at the file and hit Open.
Now click on Attach this file.

Latency Monitor:

Go to

http://www.resplendence.com/downloads

Scroll down to

System Monitoring Tools

and then find

LatencyMon 7.0 (or it may be a higher number if they update)

Click on Download free home edition

Save it then right click and Run As Admin. It will install and then start the program.
It will tell you to click on the Start button but there isn't one.
Instead click on the green arrowhead (looks like a Play button).   Let it run for at least 20 seconds. Then hit the red box to stop it.

Edit, Copy Report text to Clipboard then move to a REPLY and Ctrl + v to paste the text into a reply.

Click on the Drivers Tab. Click on the column header for "Total execution (ms)" once or twice until the biggest numbers are at the top of the column then take a screen shot (save as type jpg) and attach it.
Click on the Processes tab then click on the "Hard Pagefaults" column header once or twice until the big numbers are at the top of the column. Take a screen shot (save as type jpg) and attach it.

#3
Jade227

Posted 11 October 2021 - 09:41 AM

Member

Topic Starter
Member
13 posts

Thank you for helping me. I don't know what make this computer is, they made it for me at the computer shop. I know it has an AMD Ryzen graphics card.

I'll post the information in different replies as asked.

Thanks

Jade

#4
Jade227

Posted 11 October 2021 - 09:41 AM

Member

Topic Starter
Member
13 posts

Process CPU Private Bytes Working Set PID Description Company Name Verified Signer

System Idle Process 93.78 60 K 8 K 0

procexp64.exe 4.86 31,600 K 67,848 K 2560 Sysinternals Process Explorer Sysinternals - www.sysinternals.com (Verified) Microsoft Corporation

Interrupts 0.69 0 K 0 K n/a Hardware Interrupts and DPCs

System 0.35 196 K 780 K 4

dwm.exe 0.35 46,068 K 63,360 K 1128

csrss.exe < 0.01 9,736 K 5,504 K 776

atieclxx.exe < 0.01 2,820 K 12,508 K 2104

ekrn.exe < 0.01 57,596 K 177,532 K 1704 ESET Service ESET (Verified) ESET, spol. s r.o.

chrome.exe < 0.01 81,940 K 255,552 K 7100 Google Chrome Google LLC (Verified) Google LLC

svchost.exe < 0.01 6,160 K 17,504 K 1344 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe < 0.01 13,392 K 22,560 K 3152 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

explorer.exe < 0.01 91,588 K 154,004 K 5908 Windows Explorer Microsoft Corporation (Verified) Microsoft Windows

SwUSB.exe < 0.01 2,136 K 10,448 K 4332

svchost.exe < 0.01 3,064 K 8,272 K 2524 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

chrome.exe < 0.01 17,368 K 167,252 K 4208 Google Chrome Google LLC (Verified) Google LLC

svchost.exe < 0.01 3,520 K 20,668 K 4892 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe < 0.01 2,164 K 7,700 K 2300 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

chrome.exe < 0.01 172,224 K 136,876 K 4240 Google Chrome Google LLC (Verified) Google LLC

StartMenuExperienceHost.exe < 0.01 29,968 K 74,336 K 1076 (Verified) Microsoft Windows

OfficeClickToRun.exe < 0.01 14,688 K 36,824 K 3328 Microsoft Office Click-to-Run (SxS) Microsoft Corporation (Verified) Microsoft Corporation

svchost.exe < 0.01 3,104 K 9,764 K 2484 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

eguiProxy.exe < 0.01 5,120 K 15,852 K 8132 ESET Proxy GUI ESET (Verified) ESET, spol. s r.o.

svchost.exe < 0.01 1,444 K 6,148 K 1260 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe < 0.01 72,984 K 82,316 K 2088 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe < 0.01 2,932 K 8,276 K 3384 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

taskhostw.exe < 0.01 7,404 K 16,616 K 5300 Host Process for Windows Tasks Microsoft Corporation (Verified) Microsoft Windows

svchost.exe < 0.01 6,088 K 19,380 K 2892 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe < 0.01 4,528 K 12,552 K 2356 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe < 0.01 4,660 K 8,784 K 2260 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

YourPhone.exe Suspended 28,896 K 55,352 K 1276 YourPhone Microsoft Corporation (No signature was present in the subject) Microsoft Corporation

WmiPrvSE.exe 2,476 K 9,712 K 5468

WinStore.App.exe Suspended 31,664 K 1,632 K 6600 Store Microsoft Corporation (No signature was present in the subject) Microsoft Corporation

winlogon.exe 2,768 K 11,840 K 864

wininit.exe 1,440 K 7,096 K 768

UserOOBEBroker.exe 2,012 K 9,336 K 2252 User OOBE Broker Microsoft Corporation (Verified) Microsoft Windows

TextInputHost.exe 12,808 K 44,664 K 4216 Microsoft Corporation (Verified) Microsoft Windows

SystemSettings.exe Suspended 24,708 K 1,848 K 4540 Settings Microsoft Corporation (Verified) Microsoft Windows

svchost.exe 8,408 K 18,752 K 3364 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 10,788 K 27,980 K 8 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 8,812 K 32,144 K 2700 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 4,896 K 18,028 K 5948 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 6,780 K 14,468 K 956 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,064 K 7,592 K 2748 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,024 K 8,308 K 3180 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,700 K 10,316 K 2504 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 4,428 K 14,504 K 3312 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,988 K 10,952 K 3408 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,384 K 8,756 K 4772 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 19,716 K 39,500 K 3348 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,420 K 10,516 K 1304 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 4,628 K 21,544 K 3532 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 3,460 K 12,956 K 3992 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,796 K 9,652 K 6148 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,304 K 7,872 K 4176 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 8,304 K 16,712 K 5356 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,568 K 7,276 K 2832 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,332 K 9,156 K 2376 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,332 K 8,356 K 1064 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,364 K 9,252 K 3712 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,944 K 14,996 K 1688 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,744 K 9,952 K 8452 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,524 K 7,344 K 8256 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,132 K 12,112 K 1324 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 4,024 K 21,788 K 5204 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 6,900 K 17,188 K 1996 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,272 K 5,600 K 4104 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,692 K 7,168 K 9704 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 4,032 K 15,884 K 3744 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 3,080 K 11,060 K 7820 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,900 K 8,584 K 8248 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 13,696 K 21,556 K 2756 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,300 K 5,544 K 3880 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 6,332 K 15,752 K 1360 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,292 K 5,848 K 3524 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,652 K 6,532 K 1432 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,820 K 11,972 K 1448 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 16,208 K 19,668 K 1512 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,960 K 7,868 K 1932 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,920 K 7,888 K 2036 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,384 K 7,264 K 1580 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,252 K 5,888 K 2080 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,860 K 8,456 K 2096 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,840 K 7,916 K 2164 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,692 K 6,844 K 2512 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,380 K 12,792 K 2972 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,332 K 6,460 K 3320 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,572 K 6,856 K 3456 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,788 K 7,388 K 3088 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 8,692 K 36,000 K 2828 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,844 K 8,168 K 5580 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 3,256 K 16,012 K 5768 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,120 K 10,296 K 7160 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,264 K 6,172 K 7016 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 4,004 K 9,720 K 7344 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,952 K 16,188 K 7900 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,592 K 11,452 K 5260 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,220 K 8,708 K 8056 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 5,580 K 21,076 K 8124 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 1,344 K 5,844 K 9852 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

svchost.exe 2,732 K 11,716 K 3824 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher

spoolsv.exe 5,380 K 15,668 K 2936 Spooler SubSystem App Microsoft Corporation (Verified) Microsoft Windows

smss.exe 1,060 K 1,208 K 452

smartscreen.exe 9,044 K 26,004 K 2160 Windows Defender SmartScreen Microsoft Corporation (Verified) Microsoft Windows

sihost.exe 6,276 K 27,112 K 3132 Shell Infrastructure Host Microsoft Corporation (Verified) Microsoft Windows

ShellExperienceHost.exe Suspended 16,376 K 57,260 K 6204 Windows Shell Experience Host Microsoft Corporation (Verified) Microsoft Windows

SgrmBroker.exe 5,360 K 7,792 K 3588 System Guard Runtime Monitor Broker Service Microsoft Corporation (Verified) Microsoft Windows Publisher

SettingSyncHost.exe 5,476 K 7,056 K 1620 Host Process for Setting Synchronization Microsoft Corporation (Verified) Microsoft Windows

services.exe 5,036 K 10,220 K 912

SecurityHealthService.exe 3,020 K 12,960 K 6132 Windows Security Health Service Microsoft Corporation (Verified) Microsoft Windows Publisher

SearchIndexer.exe 22,920 K 29,600 K 6196 Microsoft Windows Search Indexer Microsoft Corporation (Verified) Microsoft Windows

SearchApp.exe Suspended 84,124 K 149,988 K 6684 Search application Microsoft Corporation (Verified) Microsoft Windows

RuntimeBroker.exe 7,932 K 28,576 K 6920 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows

RuntimeBroker.exe 3,596 K 15,056 K 4148 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows

RuntimeBroker.exe 3,228 K 16,360 K 7904 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows

RuntimeBroker.exe 2,336 K 10,228 K 3612 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows

RuntimeBroker.exe 4,284 K 19,160 K 1176 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows

RuntimeBroker.exe 6,104 K 26,372 K 6512 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows

runSW.exe 1,120 K 6,308 K 3488 (Verified) Realtek Semiconductor Corp

RtlService.exe 1,204 K 6,364 K 3464 RtlService MFC Application Realtek (Verified) Realtek Semiconductor Corp

Registry 8,708 K 88,648 K 108

RadeonSoftware.exe 178,388 K 66,280 K 7632 Radeon Software: Host Application Advanced Micro Devices, Inc. (Verified) Advanced Micro Devices Inc.

procexp.exe 4,252 K 11,128 K 6084 Sysinternals Process Explorer Sysinternals - www.sysinternals.com (Verified) Microsoft Corporation

Memory Compression 124 K 3,308 K 2172

lsass.exe 7,544 K 21,352 K 932 Local Security Authority Process Microsoft Corporation (Verified) Microsoft Windows Publisher

GoogleCrashHandler64.exe 1,860 K 204 K 7868

GoogleCrashHandler.exe 1,804 K 232 K 7844

fontdrvhost.exe 5,648 K 11,368 K 572

fontdrvhost.exe 1,448 K 3,508 K 504

dllhost.exe 3,220 K 11,012 K 3440

dllhost.exe 1,420 K 6,976 K 6280 COM Surrogate Microsoft Corporation (Verified) Microsoft Windows

dasHost.exe 3,580 K 13,228 K 3976

ctfmon.exe 4,816 K 23,328 K 5612

csrss.exe 1,936 K 5,500 K 628

cpumetricsserver.exe 2,500 K 4,180 K 6996

cncmd.exe 1,416 K 412 K 4644 Radeon Software: Command Line Interface Advanced Micro Devices, Inc. (Verified) Advanced Micro Devices Inc.

chrome.exe 42,512 K 88,772 K 10152 Google Chrome Google LLC (Verified) Google LLC

chrome.exe 15,648 K 43,448 K 1164 Google Chrome Google LLC (Verified) Google LLC

chrome.exe 135,796 K 185,380 K 9440 Google Chrome Google LLC (Verified) Google LLC

chrome.exe 35,768 K 74,080 K 9684 Google Chrome Google LLC (Verified) Google LLC

chrome.exe 13,080 K 25,444 K 4528 Google Chrome Google LLC (Verified) Google LLC

chrome.exe 15,872 K 43,584 K 5284 Google Chrome Google LLC (Verified) Google LLC

chrome.exe 8,288 K 17,524 K 8848 Google Chrome Google LLC (Verified) Google LLC

chrome.exe 6,916 K 16,700 K 9940 Google Chrome Google LLC (Verified) Google LLC

chrome.exe 2,076 K 7,444 K 8288 Google Chrome Google LLC (Verified) Google LLC

atiesrxx.exe 1,396 K 6,516 K 1832 AMD External Events Service Module AMD (Verified) Advanced Micro Devices Inc.

armsvc.exe 1,244 K 6,504 K 3396 Adobe Acrobat Update Service Adobe Systems Incorporated (Verified) Adobe Systems, Incorporated

ApplicationFrameHost.exe 15,176 K 30,804 K 2544 Application Frame Host Microsoft Corporation (Verified) Microsoft Windows

AMDRSSrcExt.exe 42,008 K 48,028 K 8896 Radeon Settings: Source Extension Advanced Micro Devices, Inc. (Verified) Advanced Micro Devices Inc.

AMDRSServ.exe 5,580 K 89,548 K 7612

amdfendrsr.exe 2,136 K 7,512 K 1824 AMD Crash Defender Service Advanced Micro Devices, Inc. (Verified) Microsoft Windows Hardware Compatibility Publisher

#5
Jade227

Posted 11 October 2021 - 09:48 AM

Member

Topic Starter
Member
13 posts

Summary

Operating System

Windows 10 Pro 64-bit

CPU

AMD Ryzen 3 2200G 39 °C

Raven Ridge 14nm Technology

RAM

8.00GB Single-Channel Unknown @ 1330MHz (16-19-19-44)

Motherboard

ASRock B450M-HDV R4.0 (AM4) 32 °C

Graphics

KA220HQ (1920x1080@60Hz)

2048MB ATI AMD Radeon Vega 8 Graphics (ATI)

Storage

931GB Seagate ST1000DM010-2EP102 (SATA ) 31 °C

Optical Drives

No optical disk drives detected

Audio

AMD High Definition Audio Device

Operating System

Windows 10 Pro 64-bit

Computer type: Desktop

Installation Date: 9/10/2020 8:07:06 PM

Windows Security Center

User Account Control (UAC) Enabled

Notify level 2 - Default

Windows Update

AutoUpdate Not configured

Windows Defender

Windows Defender Disabled

Firewall

Firewall Enabled

Display Name ESET Firewall

Antivirus

ESET Security

Antivirus Enabled

Company Name ESET

Product Version 14.2.24.0

Virus Signature Database Up to date

Windows Defender

Antivirus Disabled

Virus Signature Database Up to date

.NET Frameworks installed

v4.8 Full

v4.8 Client

Internet Explorer

Version 11.789.19041.0

PowerShell

Version 5.1.19041.1

Java

Java Runtime Environment

Path C:\Program Files (x86)\Java\jre1.8.0_251\bin\java.exe

Version 8.0

Update 251

Build 08

Environment Variables

USERPROFILE C:\Users\user

SystemRoot C:\WINDOWS

User Variables

OneDrive C:\Users\user\OneDrive

Path C:\Users\user\AppData\Local\Microsoft\WindowsApps

TEMP C:\Users\user\AppData\Local\Temp

TMP C:\Users\user\AppData\Local\Temp

Machine Variables

ComSpec C:\WINDOWS\system32\cmd.exe

DriverData C:\Windows\System32\Drivers\DriverData

ESET_OPTIONS

NUMBER_OF_PROCESSORS 4

OS Windows_NT

Path C:\Program Files (x86)\Common Files\Oracle\Java\javapath

C:\WINDOWS\system32

C:\WINDOWS

C:\WINDOWS\System32\Wbem

C:\WINDOWS\System32\WindowsPowerShell\v1.0\

C:\WINDOWS\System32\OpenSSH\

PATHEXT .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC

PROCESSOR_ARCHITECTURE AMD64

PROCESSOR_IDENTIFIER AMD64 Family 23 Model 17 Stepping 0, AuthenticAMD

PROCESSOR_LEVEL 23

PROCESSOR_REVISION 1100

PSModulePath %ProgramFiles%\WindowsPowerShell\Modules

C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules

TEMP C:\WINDOWS\TEMP

TMP C:\WINDOWS\TEMP

USERNAME SYSTEM

VBOX_HWVIRTEX_IGNORE_SVM_IN_USE 1

windir C:\WINDOWS

Power Profile

Active power scheme High performance

Hibernation Disabled

Turn Off Monitor after: (On AC Power) 15 min

Turn Off Hard Disk after: (On AC Power) 20 min

Suspend after: (On AC Power) 30 min

Screen saver Disabled

Uptime

Current Session

Current Time 10/11/2021 5:44:55 PM

Current Uptime 1,199 sec (0 d, 00 h, 19 m, 59 s)

Last Boot Time 10/11/2021 5:24:56 PM

Services

Running Adobe Acrobat Update Service

Running AMD Crash Defender Service

Running AMD External Events Utility

Running Application Identity

Running Application Information

Running AppX Deployment Service (AppXSVC)

Running Background Tasks Infrastructure Service

Running Base Filtering Engine

Running Capability Access Manager Service

Running Clipboard User Service_45fbc

Running CNG Key Isolation

Running COM+ Event System

Running Connected Devices Platform Service

Running Connected Devices Platform User Service_45fbc

Running Connected User Experiences and Telemetry

Running Contact Data_45fbc

Running CoreMessaging

Running Credential Manager

Running Cryptographic Services

Running Data Usage

Running DCOM Server Process Launcher

Running Delivery Optimization

Running Device Association Service

Running DHCP Client

Running Diagnostic Policy Service

Running Diagnostic Service Host

Running Diagnostic System Host

Running Display Policy Service

Running Distributed Link Tracking Client

Running DNS Client

Running ESET Firewall Helper

Running ESET Service

Running Function Discovery Provider Host

Running Function Discovery Resource Publication

Running Geolocation Service

Running Group Policy Client

Running Human Interface Device Service

Running IKE and AuthIP IPsec Keying Modules

Running IP Helper

Running IPsec Policy Agent

Running Local Session Manager

Running Microsoft Account Sign-in Assistant

Running Microsoft Office Click-to-Run Service

Running Microsoft Store Install Service

Running Network Connected Devices Auto-Setup

Running Network Connection Broker

Running Network List Service

Running Network Location Awareness

Running Network Setup Service

Running Network Store Interface Service

Running Peer Networking Identity Manager

Running Plug and Play

Running Power

Running Print Spooler

Running Program Compatibility Assistant Service

Running Radio Management Service

Running RealtekWlanU

Running Remote Access Connection Manager

Running Remote Procedure Call (RPC)

Running RPC Endpoint Mapper

Running RunSwUSB

Running Secure Socket Tunneling Protocol Service

Running Security Accounts Manager

Running Security Center

Running Server

Running Shell Hardware Detection

Running SSDP Discovery

Running State Repository Service

Running Storage Service

Running Sync Host_45fbc

Running SysMain

Running System Event Notification Service

Running System Events Broker

Running System Guard Runtime Monitor Broker

Running Task Scheduler

Running TCP/IP NetBIOS Helper

Running Themes

Running Time Broker

Running Touch Keyboard and Handwriting Panel Service

Running Update Orchestrator Service

Running User Data Access_45fbc

Running User Data Storage_45fbc

Running User Manager

Running User Profile Service

Running Web Account Manager

Running Windows Audio

Running Windows Audio Endpoint Builder

Running Windows Connection Manager

Running Windows Defender Firewall

Running Windows Event Log

Running Windows Font Cache Service

Running Windows License Manager Service

Running Windows Management Instrumentation

Running Windows Modules Installer

Running Windows Push Notifications System Service

Running Windows Push Notifications User Service_45fbc

Running Windows Search

Running Windows Security Service

Running Windows Update

Running WinHTTP Web Proxy Auto-Discovery Service

Running WLAN AutoConfig

Running Workstation

Running Xbox Live Auth Manager

Stopped ActiveX Installer (AxInstSV)

Stopped Agent Activation Runtime_45fbc

Stopped AllJoyn Router Service

Stopped App Readiness

Stopped Application Layer Gateway Service

Stopped Application Management

Stopped AssignedAccessManager Service

Stopped Auto Time Zone Updater

Stopped AVCTP service

Stopped Background Intelligent Transfer Service

Stopped BitLocker Drive Encryption Service

Stopped Block Level Backup Engine Service

Stopped Bluetooth Audio Gateway Service

Stopped Bluetooth Support Service

Stopped Bluetooth User Support Service_45fbc

Stopped BranchCache

Stopped CaptureService_45fbc

Stopped Cellular Time

Stopped Certificate Propagation

Stopped Client License Service (ClipSVC)

Stopped COM+ System Application

Stopped ConsentUX_45fbc

Stopped CredentialEnrollmentManagerUserSvc_45fbc

Stopped Data Sharing Service

Stopped Device Install Service

Stopped Device Management Enrollment Service

Stopped Device Management Wireless Application Protocol (WAP) Push message Routing Service

Stopped Device Setup Manager

Stopped DeviceAssociationBroker_45fbc

Stopped DevicePicker_45fbc

Stopped DevicesFlow_45fbc

Stopped DevQuery Background Discovery Broker

Stopped Diagnostic Execution Service

Stopped DialogBlockingService

Stopped Display Enhancement Service

Stopped Distributed Transaction Coordinator

Stopped Downloaded Maps Manager

Stopped Embedded Mode

Stopped Encrypting File System (EFS)

Stopped Enterprise App Management Service

Stopped Extensible Authentication Protocol

Stopped Fax

Stopped File History Service

Stopped GameDVR and Broadcast User Service_45fbc

Stopped Google Chrome Elevation Service (GoogleChromeElevationService)

Stopped Google Update Service (gupdate)

Stopped Google Update Service (gupdatem)

Stopped GraphicsPerfSvc

Stopped HV Host Service

Stopped Hyper-V Data Exchange Service

Stopped Hyper-V Guest Service Interface

Stopped Hyper-V Guest Shutdown Service

Stopped Hyper-V Heartbeat Service

Stopped Hyper-V PowerShell Direct Service

Stopped Hyper-V Remote Desktop Virtualization Service

Stopped Hyper-V Time Synchronization Service

Stopped Hyper-V Volume Shadow Copy Requestor

Stopped Internet Connection Sharing (ICS)

Stopped IP Translation Configuration Service

Stopped KtmRm for Distributed Transaction Coordinator

Stopped Language Experience Service

Stopped Link-Layer Topology Discovery Mapper

Stopped Local Profile Assistant Service

Stopped MessagingService_45fbc

Stopped Microsoft Diagnostics Hub Standard Collector Service

Stopped Microsoft App-V Client

Stopped Microsoft Defender Antivirus Network Inspection Service

Stopped Microsoft Defender Antivirus Service

Stopped Microsoft Edge Elevation Service (MicrosoftEdgeElevationService)

Stopped Microsoft Edge Update Service (edgeupdate)

Stopped Microsoft Edge Update Service (edgeupdatem)

Stopped Microsoft iSCSI Initiator Service

Stopped Microsoft Keyboard Filter

Stopped Microsoft Passport

Stopped Microsoft Passport Container

Stopped Microsoft Software Shadow Copy Provider

Stopped Microsoft Storage Spaces SMP

Stopped Microsoft Update Health Service

Stopped Microsoft Windows SMS Router Service.

Stopped Natural Authentication

Stopped Net.Tcp Port Sharing Service

Stopped Netlogon

Stopped Network Connections

Stopped Network Connectivity Assistant

Stopped Office 64 Source Engine

Stopped Offline Files

Stopped OpenSSH Authentication Agent

Stopped Optimise drives

Stopped Parental Controls

Stopped Payments and NFC/SE Manager

Stopped Peer Name Resolution Protocol

Stopped Peer Networking Grouping

Stopped Performance Counter DLL Host

Stopped Performance Logs & Alerts

Stopped Phone Service

Stopped PNRP Machine Name Publication Service

Stopped Portable Device Enumerator Service

Stopped Printer Extensions and Notifications

Stopped PrintWorkflow_45fbc

Stopped Problem Reports Control Panel Support

Stopped Quality Windows Audio Video Experience

Stopped Realtek DHCP Service

Stopped Recommended Troubleshooting Service

Stopped Remote Access Auto Connection Manager

Stopped Remote Desktop Configuration

Stopped Remote Desktop Services

Stopped Remote Desktop Services UserMode Port Redirector

Stopped Remote Procedure Call (RPC) Locator

Stopped Remote Registry

Stopped Retail Demo Service

Stopped Routing and Remote Access

Stopped Secondary Log-on

Stopped Sensor Data Service

Stopped Sensor Monitoring Service

Stopped Sensor Service

Stopped Shared PC Account Manager

Stopped Smart Card

Stopped Smart Card Device Enumeration Service

Stopped Smart Card Removal Policy

Stopped SNMP Trap

Stopped Software Protection

Stopped Spatial Data Service

Stopped Spot Verifier

Stopped Steam Client Service

Stopped Still Image Acquisition Events

Stopped Storage Tiers Management

Stopped Telephony

Stopped Twitch Service

Stopped Udk User Service_45fbc

Stopped UPnP Device Host

Stopped User Experience Virtualization Service

Stopped Virtual Disk

Stopped Volume Shadow Copy

Stopped Volumetric Audio Compositor Service

Stopped WalletService

Stopped WarpJITSvc

Stopped WebClient

Stopped Wi-Fi Direct Services Connection Manager Service

Stopped Windows Backup

Stopped Windows Biometric Service

Stopped Windows Camera Frame Server

Stopped Windows Connect Now - Config Registrar

Stopped Windows Defender Advanced Threat Protection Service

Stopped Windows Encryption Provider Host Service

Stopped Windows Error Reporting Service

Stopped Windows Event Collector

Stopped Windows Image Acquisition (WIA)

Stopped Windows Insider Service

Stopped Windows Installer

Stopped Windows Management Service

Stopped Windows Media Player Network Sharing Service

Stopped Windows Mixed Reality OpenXR Service

Stopped Windows Mobile Hotspot Service

Stopped Windows Perception Service

Stopped Windows Perception Simulation Service

Stopped Windows PushToInstall Service

Stopped Windows Remote Management (WS-Management)

Stopped Windows Time

Stopped Windows Update Medic Service

Stopped Wired AutoConfig

Stopped WMI Performance Adapter

Stopped Work Folders

Stopped WWAN AutoConfig

Stopped Xbox Accessory Management Service

Stopped Xbox Live Game Save

Stopped Xbox Live Networking Service

TimeZone

TimeZone GMT +2:00 Hours

Language English (United Kingdom)

Location South Africa

Format English (United States)

Currency $

Date Format M/d/yyyy

Time Format h:mm:ss tt

Scheduler

10/11/2021 6:17 PM; GoogleUpdateTaskMachineUA

10/11/2021 6:22 PM; MicrosoftEdgeUpdateTaskMachineUA

10/11/2021 8:17 PM; GoogleUpdateTaskMachineCore

10/12/2021 11:52 AM; MicrosoftEdgeUpdateTaskMachineCore

10/12/2021 1:34 PM; OneDrive Standalone Update Task-S-1-5-21-230040752-2165402550-693070872-1001

10/12/2021 5:28 PM; OneDrive Standalone Update Task-S-1-5-21-230040752-2165402550-693070872-1003

AMD ThankingURL

AMDRyzenMasterSDKTask

EOSv3 Scheduler onLogOn

EOSv3 Scheduler onTime

StartCN

StartDVR

Hotfixes

Installed

9/17/2021 2021-09 Cumulative Update for Windows 10 Version 21H1 for x64-based Systems (KB5005565)

Install this update to resolve issues in Windows. For a complete

listing of the issues that are included in this update, see the

associated Microsoft Knowledge Base article for more information.

After you install this item, you may have to restart your computer.

9/17/2021 Windows Malicious Software Removal Tool x64 - v5.93 (KB890830)

After the download, this tool runs one time to check your computer

for infection by specific, prevalent malicious software (including

Blaster, Sasser, and Mydoom) and helps remove any infection that

is found. If an infection is found, the tool will display a status

report the next time that you start your computer. A new version

of the tool will be offered every month. If you want to manually

run the tool on your computer, you can download a copy from the

Microsoft Download Center, or you can run an online version from

microsoft.com. This tool is not a replacement for an antivirus

product. To help protect your computer, you should use an antivirus

product.

8/24/2021 Security Update for Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package (KB2538243)

A security issue has been identified leading to MFC application

vulnerability in DLL planting due to MFC not specifying the full

path to system/localization DLLs. You can protect your computer

by installing this update from Microsoft. After you install this

item, you may have to restart your computer.

8/18/2021 Advanced Micro Devices Inc. - SecurityDevices - 5.17.0.0

Advanced Micro Devices Inc. SecurityDevices driver update released

in June 2021

8/17/2021 Windows Malicious Software Removal Tool x64 - v5.92 (KB890830)