[jlk69]

I downloaded and attempted to install the Pure video game from Oceanofgames.com. The install read me:

 

Please Follow Below Guide Carefully and Do not Skip any Step.

 

 

- Turn off All Options of Windows Defender Properly.

- Turn off any other antivirus [if you have]

- Run file "wrar591.exe" to Install WinRAR.

- Right click on "Step 0 - AVENGERS_AIO_v2.5.0.rar" and Choose "Extract Here".

- Right click on "Step 0 - AVENGERS_AIO_v2.5.0.exe" and Choose "Run as Administrator". Wait for Installation to be Completed.

- Right click on "Step 1 - Disable Defender.rar" and Click "Extract Here". Password: 123

- Right click on "Step 1 - Disable Defender.exe" and Choose "Run as Administrator".

- Click the Button "Disable Windows Defender". Wait for few Seconds. Now You can now Close the "Defender Control".

- Now Right Click on "Step 2 - Extract Setup.rar" and Choose "Extract Here". Password: 123

- Right Click on "Step 3 - Setup_Install_Game.exe" and Choose "Run as Administrator".

- Now Right Click on .ISO File and Click on "Mount" Option. If you dont see Mount Option, then install UltraISO.exe Setup. It is already in the Folder.

  After Installation of UltraISO you can easily Mount ISO file and Start Installation.

 

Done.

 

[NOTE]: Make sure to ALWAYS Choose "Extract Here" option when Right Clicking all .rar files. Otherwise Installation will Fail.

DONT Double Click RAR file and DONT run from Inside rar.

ALWAYS RIGHT CLICK on rar file and Choose "Extract Here". [This is Important]

If you still face any issue, Make Sure to Follow Video Guide.

This Setup is 100% Tested and Working.

 

====================================================================================================

 

After following these instructions the game did not work and Microsoft defender was missing as well as the Security Service.

 

I DL Malware bytes and ran the Free scan and followed the instructions after the scan deleting the files specified.

 

Also I now get a message that my copy of Windows needs an updated product key.

 

I tried to use System Restore but that did not help.

 

Here is the FRST logs

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 13-12-2023

Ran by Jon Kunkel (administrator) on DESKTOP-8AAJV2M (Micro-Star International Co., Ltd. MS-7B79) (14-12-2023 15:19:01)

Running from C:\Users\Jon Kunkel\OneDrive\Desktop\FRST64.exe

Loaded Profiles: Jon Kunkel

Platform: Microsoft Windows 10 Pro Version 22H2 19045.2965 (X64) Language: English (United States)

Default browser: Chrome

Boot Mode: Normal

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

(Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe

(A-Volute SAS -> A-Volute) C:\Windows\System32\NhNotifSys.exe

(C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\EyeRest.exe

(C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\NahimicMonitor.exe

(C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\TriggerModeMonitor.exe

(C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\VideoCardMonitorII.exe

(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe

(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

(C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe ->) (A-Volute -> ) C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2Svc32.exe

(C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe ->) (A-Volute -> ) C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2Svc64.exe

(C:\Users\Jon Kunkel\AppData\Local\Programs\Opera GX\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Jon Kunkel\AppData\Local\Programs\Opera GX\104.0.4944.60\opera_crashreporter.exe

(DriverStore\FileRepository\u0397033.inf_amd64_bf2b1fc18ba7195d\B396953\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0397033.inf_amd64_bf2b1fc18ba7195d\B396953\atieclxx.exe

(explorer.exe ->) (A-Volute -> A-Volute) C:\Program Files\Nahimic\Nahimic VR\Foundation\NahimicVRSvc32.exe

(explorer.exe ->) (A-Volute -> A-Volute) C:\Program Files\Nahimic\Nahimic VR\Foundation\x64\NahimicVRSvc64.exe

(explorer.exe ->) (A-Volute -> Nahimic) C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe

(explorer.exe ->) (Conners Systems Limited -> johnsadventures.com) C:\Program Files (x86)\johnsadventures.com\John's Background Switcher\BackgroundSwitcher.exe

(explorer.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Jon Kunkel\AppData\Local\Programs\Opera GX\opera.exe <28>

(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>

(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\APP Manager\AppManager.exe

(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI X Boost\X_Boost.exe

(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe

(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0397033.inf_amd64_bf2b1fc18ba7195d\B396953\atiesrxx.exe

(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(services.exe ->) (A-Volute SAS -> Nahimic) C:\Windows\System32\NahimicService.exe

(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe

(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe

(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\RAMDisk\MSI_RAMDisk_Service.exe

(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\APP Manager\AppManager_Service.exe

(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe

(svchost.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\CPUMetricsServer.exe

(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Jon Kunkel\AppData\Local\Microsoft\OneDrive\23.246.1127.0002\FileCoAuth.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI Toast Server\MSIToastServer.exe

 

==================== Registry (Whitelisted) ===================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9268680 2018-02-28] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

HKLM\...\Run: [Nahimic2UILauncher] => C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe [734256 2018-02-05] (A-Volute -> Nahimic)

HKLM\...\Run: [NahimicVRSvc32] => C:\Program Files\Nahimic\Nahimic VR\Foundation\NahimicVRSvc32.exe [990256 2018-02-05] (A-Volute -> A-Volute)

HKLM\...\Run: [NahimicVRSvc64] => C:\Program Files\Nahimic\Nahimic VR\Foundation\x64\NahimicVRSvc64.exe [1142320 2018-02-05] (A-Volute -> A-Volute)

HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2726728 2010-03-24] (Canon Inc. -> CANON INC.)

HKLM-x32\...\Run: [APP Manager] => C:\Program Files (x86)\MSI\APP Manager\AppManager.exe [3705520 2019-05-20] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)

HKLM-x32\...\Run: [Super Charger] => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [1028280 2017-11-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)

HKLM-x32\...\Run: [X_Boost] => C:\Program Files (x86)\MSI\MSI X Boost\X_Boost.exe [4261024 2018-02-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [748624 2023-10-04] (Oracle America, Inc. -> Oracle Corporation)

HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION

HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center: Restriction <==== ATTENTION

HKLM\Software\Policies\...\system: [EnableSmartScreen] 0

HKU\S-1-5-21-2128159834-528020214-2662902997-1002\...\Run: [BackgroundSwitcher] => C:\Program Files (x86)\johnsadventures.com\John's Background Switcher\BackgroundSwitcher.exe [129400 2023-10-01] (Conners Systems Limited -> johnsadventures.com)

HKU\S-1-5-21-2128159834-528020214-2662902997-1002\...\Run: [MicrosoftEdgeAutoLaunch_5811716BEDC94190CCAC370117413651] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [3788736 2023-12-06] (Microsoft Corporation -> Microsoft Corporation)

HKU\S-1-5-21-2128159834-528020214-2662902997-1002\...\Run: [Opera GX Stable] => C:\Users\Jon Kunkel\AppData\Local\Programs\Opera GX\launcher.exe [2587040 2023-11-10] (Opera Norway AS -> Opera Software)

HKU\S-1-5-21-2128159834-528020214-2662902997-1002\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Jon Kunkel\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" [65858576 2023-12-14] (Microsoft Corporation -> Microsoft Corporation)

HKU\S-1-5-21-2128159834-528020214-2662902997-1002\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Jon Kunkel\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File)

HKU\S-1-5-21-2128159834-528020214-2662902997-1002\...\RunOnce: [Uninstall 23.226.1031.0003] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Jon Kunkel\AppData\Local\Microsoft\OneDrive\23.226.1031.0003" [0 2023-12-14] () <==== ATTENTION [zero byte File/Folder]

HKLM\...\Windows x64\Print Processors\Canon MG5200 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDAE.DLL [30208 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)

HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5200 series XPS: C:\WINDOWS\system32\CNMXLMAE.DLL [361472 2010-04-01] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)

HKLM\...\Print\Monitors\Canon BJNP Port: C:\WINDOWS\system32\CNMN6PPM.DLL [359936 2012-06-14] (CANON INC.) [File not signed]

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\120.0.6099.72\Installer\chrmstp.exe [2023-12-13] (Google LLC -> Google LLC)

GroupPolicy: Restriction ? <==== ATTENTION

Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION

 

==================== Scheduled Tasks (Whitelisted) =================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

Task: {EDACF6DF-EDB2-4890-A449-C793A47B8889} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2023-10-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

Task: {12C3DE55-7E4B-4457-ADBA-D25136EDDB8E} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2023-10-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

Task: {552BB83C-E103-4F21-A002-B6F25EACA2BB} - System32\Tasks\AMDRyzenMasterSDKTask => C:\Program Files\AMD\CNext\CNext\cpumetricsserver.exe [183736 2023-10-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

Task: {975CB1F3-81FC-499D-9A59-47F7493F0013} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2023-07-14] (Google Inc -> Google Inc.)

Task: {4F93A71A-DF93-492B-991E-85C8A72E6227} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2023-07-14] (Google Inc -> Google Inc.)

Task: {813A2E5D-A50E-4C1D-9EE0-BEC8871EDF76} - System32\Tasks\Microsoft\Windows\CloudRestore\Backup => {722D0F89-B69C-4700-AE8C-4A44350E4876}

Task: {F62FA6D3-0659-4BEC-B510-7B2274DA8365} - System32\Tasks\Microsoft\Windows\ConsentUX\UnifiedConsent\UnifiedConsentSyncTask => {82AA0895-198A-4C1B-B2D1-C16894218AFB}

Task: {F4771EB8-2121-4105-A7BF-22EE721CAAAA} - System32\Tasks\Microsoft\Windows\CUAssistant\CULauncher => %ProgramFiles%\CUAssistant\culauncher.exe  (No File)

Task: {C6C258A2-F4A7-4443-971B-D83B32B809ED} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Refresh Group Policy Cache => {07369A67-07A6-4608-ABEA-379491CB7C46} C:\Windows\System32\UpdatePolicy.dll [229888 2023-05-05] (Microsoft Windows -> Microsoft Corporation)

Task: {E5D8CE31-B3D9-41CB-A521-3A396143CA20} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2023-10-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

Task: {B8C0D3F4-1C0D-4043-9F07-CEE6C8403208} - System32\Tasks\MSI_Toast_Server => C:\Program Files (x86)\MSI\MSI Toast Server\MSIToastServer.exe [30648 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)

Task: {3BE8BD71-F77B-4A98-94C4-2737CA7577DD} - System32\Tasks\Nahimic2Svc32Run => C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2Svc32.exe [4412464 2018-02-05] (A-Volute -> )

Task: {73BC340E-A9AF-4723-BF88-599E8980D650} - System32\Tasks\Nahimic2Svc64Run => C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2Svc64.exe [520752 2018-02-05] (A-Volute -> )

Task: {09B09E46-C164-4F69-A394-4D5369995BCF} - System32\Tasks\Nahimic2UILauncherRun => C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe [734256 2018-02-05] (A-Volute -> Nahimic)

Task: {E9AE049F-8163-4BBC-A643-FF29C5FBE11C} - System32\Tasks\NahimicVRSvc32Run => C:\Program Files\Nahimic\Nahimic VR\Foundation\NahimicVRSvc32.exe [990256 2018-02-05] (A-Volute -> A-Volute)

Task: {0ACFF5E5-2CA1-4D30-AA4A-F4D4F2B10AEE} - System32\Tasks\NahimicVRSvc64Run => C:\Program Files\Nahimic\Nahimic VR\Foundation\x64\NahimicVRSvc64.exe [1142320 2018-02-05] (A-Volute -> A-Volute)

Task: {32DDA989-488F-437E-A150-C890F3285C35} - System32\Tasks\Opera GX scheduled Autoupdate 1699905995 => C:\Users\Jon Kunkel\AppData\Local\Programs\Opera GX\launcher.exe [2587040 2023-11-10] (Opera Norway AS -> Opera Software)

Task: {DED58491-E164-49C3-ADD7-4FECA34E8A88} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [60344 2023-10-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

Task: {D7D75F40-42B1-47D2-9F8A-854588C9A073} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [324024 2023-10-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

Task: {5D33235A-FFAE-4760-A7EA-34311AEAAE72} - System32\Tasks\Window Update => C:\Users\Jon Kunkel\AppData\Local\Updates\Run.vbs [1015 2022-05-09] () [File not signed] <==== ATTENTION

 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

 

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{319e217a-ff86-4004-81fa-7a50a5ce1031}: [DhcpNameServer] 192.168.1.1

 

Edge: 

=======

Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]

Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]

Edge DefaultProfile: Default

Edge Profile: C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default [2023-12-14]

Edge Notifications: Default -> hxxps://www.facebook.com

Edge HomePage: Default -> hxxps://www.rcgroups.com/forums/usercp.php

Edge Extension: (LogMeOnce) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ahknoflpikaolmchfkipgjkgccjckpag [2023-12-10] [UpdateUrl:hxxps://logmeonce.s3.amazonaws.com/download/firefox/updates.json] <==== ATTENTION

Edge Extension: (PayPal Honey: Automatic Coupons & Cash Back) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\amnbcmdbanbkjhnfoeceemmmdiepnbpp [2023-12-14]

Edge Extension: (Double-click Image Downloader) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bkijmpolkanhdehnlnabfooghjdokakc [2023-12-10]

Edge Extension: (Video Downloader Plus) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cjljdgfhkjbdbkcdkfojleidpldagmao [2023-12-10]

Edge Extension: (Video Downloader Professional) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2023-12-10]

Edge Extension: (Bulk Image Downloader) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\facoldpeadablbngjnohbmgaehknhcaj [2023-12-10]

Edge Extension: (Google Docs Offline) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-05]

Edge Extension: (Safe Browsing) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\glapegacofapoeglkpofkgbdljlppgpe [2023-12-10]

Edge Extension: (Video Downloader Plus) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hkdmdpdhfaamhgaojpelccmeehpfljgf [2023-12-10]

Edge Extension: (Video Downloader Free) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\igngiaemkdeoanddlkhjhkfpmajpnkch [2023-10-19]

Edge Extension: (Mix) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jffkbfhhjokopidblbjfkippklbhegoj [2023-12-10]

Edge Extension: (Edge relevant text changes) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-12-10]

Edge Extension: (Capital One Shopping: Save Now) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\kiiaghlmeikbpmeabhilfphikfcefljn [2023-12-11]

Edge Extension: (All Video Downloader professional) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\mbpnbnogejaolbhfpfgagldkeahefbhd [2023-12-10]

Edge Extension: (video downloader - CocoCut) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\npdhgjfiikhgncaacnnodpfchmelnchm [2023-12-10]

Edge Extension: (Coupert - Automatic Coupon Finder & Cashback) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\pefhciejnkgdgoahgfeklebcbpmhnhhd [2023-12-14]

Edge Extension: (Speedtest by Ookla) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\pgjjikdiikihdfpoppgaidccahalehjh [2023-12-10]

 

FireFox:

========

FF Plugin: @java.com/DTPlugin,version=11.391.2 -> C:\Program Files\Java\jre-1.8\bin\dtplugin\npDeployJava1.dll [2023-10-04] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.391.2 -> C:\Program Files\Java\jre-1.8\bin\plugin2\npjp2.dll [2023-10-04] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)

FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2010-04-14] (CANON INC.) [File not signed]

FF Plugin-x32: @java.com/DTPlugin,version=11.391.2 -> C:\Program Files (x86)\Java\jre-1.8\bin\dtplugin\npDeployJava1.dll [2023-10-04] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.391.2 -> C:\Program Files (x86)\Java\jre-1.8\bin\plugin2\npjp2.dll [2023-10-04] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)

 

Chrome: 

=======

CHR DefaultProfile: Default

CHR Profile: C:\Users\Jon Kunkel\AppData\Local\Google\Chrome\User Data\Default [2023-12-11]

CHR Notifications: Default -> hxxps://www.messenger.com; hxxps://www.youtube.com

CHR HomePage: Default -> hxxps://www.rcgroups.com/forums/usercp.php

CHR Extension: (Video Downloader Professional) - C:\Users\Jon Kunkel\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2023-07-14]

CHR Extension: (Google Docs Offline) - C:\Users\Jon Kunkel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-17]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Jon Kunkel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-07-14]

 

Opera: 

=======

StartMenuInternet: (HKU\S-1-5-21-2128159834-528020214-2662902997-1002) Opera GXStable - "C:\Users\Jon Kunkel\AppData\Local\Programs\Opera GX\Launcher.exe"

 

==================== Services (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9405400 2023-12-10] (Malwarebytes Inc. -> Malwarebytes)

R2 MSI_ActiveX_Service; C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe [83104 2018-02-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)

R2 MSI_AppManager_Service; C:\Program Files (x86)\MSI\APP Manager\AppManager_Service.exe [2055352 2019-01-04] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)

R2 MSI_RAMDisk_Service; C:\Program Files (x86)\MSI\RAMDisk\MSI_RAMDisk_Service.exe [71864 2018-02-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)

R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [183992 2017-12-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)

R2 NahimicService; C:\WINDOWS\system32\NahimicService.exe [1888424 2021-10-08] (A-Volute SAS -> Nahimic)

 

===================== Drivers (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [36736 2023-05-05] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

R2 AMDRyzenMasterDriverV20; C:\WINDOWS\system32\AMDRyzenMasterDriver.sys [48328 2023-10-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices)

R3 AMDSAFD; C:\WINDOWS\System32\DriverStore\FileRepository\amdsafd.inf_amd64_66a9fa5d80327844\amdsafd.sys [113080 2022-06-23] (Advanced Micro Devices Inc. -> Advanced Micro Devices)

R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0397033.inf_amd64_bf2b1fc18ba7195d\B396953\amdkmdag.sys [106378272 2023-10-26] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [61888 2023-05-24] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]

S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]

R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [222784 2023-12-11] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2023-12-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)

R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239576 2023-12-10] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

R3 Nahimic_Mirroring; C:\WINDOWS\System32\drivers\Nahimic_Mirroring.sys [85616 2021-08-13] (A-Volute -> Windows ® Win 7 DDK provider)

 

==================== NetSvcs (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

 

==================== One month (created) (Whitelisted) =========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2023-12-14 15:19 - 2023-12-14 15:20 - 000023922 _____ C:\Users\Jon Kunkel\OneDrive\Desktop\FRST.txt

2023-12-14 15:18 - 2023-12-14 15:19 - 000000000 ____D C:\FRST

2023-12-14 15:18 - 2023-12-14 15:18 - 000000000 ____D C:\Users\Jon Kunkel\OneDrive\Desktop\FRST-OlderVersion

2023-12-14 15:16 - 2023-12-14 15:18 - 002386432 _____ (Farbar) C:\Users\Jon Kunkel\OneDrive\Desktop\FRST64.exe

2023-12-14 14:22 - 2023-12-14 14:22 - 000000000 ___HD C:\$WinREAgent

2023-12-11 19:52 - 2023-12-11 19:52 - 000001370 _____ C:\Users\Jon Kunkel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk

2023-12-11 19:52 - 2023-12-11 19:52 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Local\PCHealthCheck

2023-12-11 14:35 - 2023-12-11 14:35 - 000000410 __RSH C:\ProgramData\ntuser.pol

2023-12-10 18:24 - 2023-12-10 18:24 - 000000000 ____D C:\ProgramData\Microsoft OneDrive

2023-12-10 18:21 - 2023-12-10 18:21 - 000000020 ___SH C:\Users\Jon Kunkel\ntuser.ini

2023-12-10 18:19 - 2023-12-14 14:26 - 000003128 _____ C:\WINDOWS\system32\Tasks\AMDInstallLauncher

2023-12-10 18:19 - 2023-12-14 14:26 - 000003120 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate

2023-12-10 18:19 - 2023-12-14 14:22 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2128159834-528020214-2662902997-1002

2023-12-10 18:19 - 2023-12-14 14:22 - 000003388 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2128159834-528020214-2662902997-1002

2023-12-10 18:19 - 2023-12-11 20:33 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2023-12-10 18:19 - 2023-12-10 18:20 - 000003538 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{16112ECA-FFD0-449A-9879-E78122F255C0}

2023-12-10 18:19 - 2023-12-10 18:20 - 000002380 _____ C:\WINDOWS\system32\Tasks\NahimicVRSvc32Run

2023-12-10 18:19 - 2023-12-10 18:19 - 000003554 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled Autoupdate 1699905995

2023-12-10 18:19 - 2023-12-10 18:19 - 000003356 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA

2023-12-10 18:19 - 2023-12-10 18:19 - 000003314 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{CEA8E38B-A4DC-4315-916D-AF561B094318}

2023-12-10 18:19 - 2023-12-10 18:19 - 000003132 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore

2023-12-10 18:19 - 2023-12-10 18:19 - 000002672 _____ C:\WINDOWS\system32\Tasks\ModifyLinkUpdate

2023-12-10 18:19 - 2023-12-10 18:19 - 000002652 _____ C:\WINDOWS\system32\Tasks\Window Update

2023-12-10 18:19 - 2023-12-10 18:19 - 000002412 _____ C:\WINDOWS\system32\Tasks\MSI_Toast_Server

2023-12-10 18:19 - 2023-12-10 18:19 - 000002402 _____ C:\WINDOWS\system32\Tasks\AMDRyzenMasterSDKTask

2023-12-10 18:19 - 2023-12-10 18:19 - 000002396 _____ C:\WINDOWS\system32\Tasks\Nahimic2UILauncherRun

2023-12-10 18:19 - 2023-12-10 18:19 - 000002388 _____ C:\WINDOWS\system32\Tasks\NahimicVRSvc64Run

2023-12-10 18:19 - 2023-12-10 18:19 - 000002384 _____ C:\WINDOWS\system32\Tasks\Nahimic2Svc64Run

2023-12-10 18:19 - 2023-12-10 18:19 - 000002376 _____ C:\WINDOWS\system32\Tasks\Nahimic2Svc32Run

2023-12-10 18:19 - 2023-12-10 18:19 - 000002202 _____ C:\WINDOWS\system32\Tasks\StartCN

2023-12-10 18:19 - 2023-12-10 18:19 - 000002122 _____ C:\WINDOWS\system32\Tasks\StartDVR

2023-12-10 18:18 - 2023-12-10 18:19 - 000007623 _____ C:\WINDOWS\diagwrn.xml

2023-12-10 18:18 - 2023-12-10 18:19 - 000007623 _____ C:\WINDOWS\diagerr.xml

2023-12-10 18:14 - 2023-12-11 20:40 - 000840598 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2023-12-10 18:10 - 2023-12-10 18:10 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\Microsoft\SystemCertificates

2023-12-10 18:10 - 2023-12-10 18:10 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\Microsoft\Network

2023-12-10 18:09 - 2023-12-10 18:09 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\Microsoft\Crypto

2023-12-10 18:09 - 2023-12-10 18:09 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Network

2023-12-10 18:02 - 2023-12-14 14:22 - 000002394 _____ C:\Users\Jon Kunkel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2023-12-10 18:02 - 2023-12-10 18:22 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\Microsoft\Windows

2023-12-10 18:02 - 2023-12-10 18:21 - 000000000 ____D C:\Users\Jon Kunkel

2023-12-10 17:57 - 2023-12-14 14:59 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2023-12-10 17:57 - 2023-12-10 17:58 - 000257824 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2023-12-10 17:56 - 2023-12-10 18:20 - 000000000 ____D C:\Windows.old

2023-12-10 17:52 - 2023-12-10 17:56 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate

2023-12-10 17:51 - 2023-12-10 17:52 - 000000000 ____D C:\WINDOWS\ServiceProfiles

2023-12-10 17:51 - 2023-12-10 17:51 - 000008192 _____ C:\WINDOWS\system32\config\userdiff

2023-12-10 17:47 - 2023-12-10 17:47 - 000000000 ____D C:\Program Files\Reference Assemblies

2023-12-10 17:47 - 2023-12-10 17:47 - 000000000 ____D C:\Program Files\MSBuild

2023-12-10 17:47 - 2023-12-10 17:47 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies

2023-12-10 17:47 - 2023-12-10 17:47 - 000000000 ____D C:\Program Files (x86)\MSBuild

2023-12-10 17:19 - 2023-12-10 18:21 - 000000000 ___DC C:\WINDOWS\Panther

2023-12-10 17:15 - 2023-12-10 17:19 - 000000000 ____D C:\ESD

2023-12-10 17:14 - 2023-12-10 17:14 - 000000000 ___HD C:\$Windows.~WS

2023-12-10 17:12 - 2023-12-10 17:12 - 000000000 ____D C:\Program Files (x86)\WindowsInstallationAssistant

2023-12-10 17:01 - 2023-12-14 03:42 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Local\Malwarebytes

2023-12-10 17:01 - 2023-12-10 17:01 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk

2023-12-10 17:00 - 2023-12-10 17:00 - 000000000 ____D C:\ProgramData\Malwarebytes

2023-12-10 17:00 - 2023-12-10 17:00 - 000000000 ____D C:\Program Files\Malwarebytes

2023-12-10 16:38 - 2023-12-10 16:38 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Local\ElevatedDiagnostics

2023-12-10 15:59 - 2023-12-10 17:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2023-12-10 15:59 - 2023-12-10 15:59 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\Sun

2023-12-10 15:59 - 2023-12-10 15:59 - 000000000 ____D C:\Program Files\Java

2023-12-10 15:59 - 2023-10-04 08:31 - 000170624 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll

2023-12-10 15:59 - 2023-10-04 08:25 - 000200320 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll

2023-12-10 15:57 - 2023-12-10 15:57 - 000000000 ____D C:\Program Files (x86)\Java

2023-12-10 15:11 - 2023-12-10 15:11 - 000000000 ___HD C:\$SysReset

2023-12-09 21:54 - 2023-12-11 20:50 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Local\Updates

2023-12-09 21:54 - 2023-12-09 21:54 - 000014544 _____ (OpenLibSys.org) C:\WINDOWS\system32\WinRing0x64.sys

2023-12-09 21:54 - 2023-12-09 21:54 - 000000000 ____D C:\Program Files (x86)\OceanofGames.ccom

2023-12-09 21:51 - 2023-12-09 21:51 - 000010842 _____ C:\WINDOWS\unins000.dat

2023-12-09 21:51 - 2023-12-09 21:51 - 000001823 _____ C:\AiOLog.txt

2023-12-09 21:51 - 2023-12-09 21:50 - 001207319 _____ C:\WINDOWS\unins000.exe

2023-12-09 21:51 - 2017-04-01 20:44 - 003450616 _____ (Red Hat) C:\WINDOWS\system32\cygwin1.dll

2023-12-09 21:51 - 2017-01-26 07:25 - 001265664 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\libeay32.dll

2023-12-09 21:51 - 2017-01-26 07:25 - 000274944 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\ssleay32.dll

2023-12-09 21:51 - 2017-01-26 07:25 - 000274944 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\libssl32.dll

2023-12-09 21:51 - 2015-07-10 11:51 - 000456008 _____ (AutoIt Team) C:\WINDOWS\system32\autoitx3.dll

2023-12-09 21:51 - 2014-01-31 03:14 - 001055676 _____ (Free Software Foundation) C:\WINDOWS\system32\libiconv2.dll

2023-12-09 21:51 - 2014-01-25 14:30 - 000131072 _____ (Sereby Corporation) C:\WINDOWS\system32\AiORuntimes.dll

2023-12-09 21:51 - 2012-06-14 15:36 - 000107520 _____ C:\WINDOWS\system32\zlib1.dll

2023-12-09 21:51 - 2012-04-03 17:11 - 000138752 _____ C:\WINDOWS\system32\libpng15.dll

2023-12-09 21:51 - 2011-10-12 04:09 - 004033440 _____ (Intel Corporation) C:\WINDOWS\system32\libmmd.dll

2023-12-09 21:51 - 2011-10-01 09:16 - 000445016 _____ (Creative Labs) C:\WINDOWS\system32\wrap_oal.dll

2023-12-09 21:51 - 2011-10-01 09:16 - 000109144 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\system32\openal32.dll

2023-12-09 21:51 - 2011-01-12 14:36 - 001054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71u.dll

2023-12-09 21:51 - 2011-01-12 14:25 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71DEU.dll

2023-12-09 21:51 - 2011-01-12 14:25 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ITA.dll

2023-12-09 21:51 - 2011-01-12 14:25 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71FRA.dll

2023-12-09 21:51 - 2011-01-12 14:25 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ESP.dll

2023-12-09 21:51 - 2011-01-12 14:25 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ENU.dll

2023-12-09 21:51 - 2011-01-12 14:25 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71KOR.dll

2023-12-09 21:51 - 2011-01-12 14:25 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71JPN.dll

2023-12-09 21:51 - 2011-01-12 14:25 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71CHT.dll

2023-12-09 21:51 - 2011-01-12 14:25 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71CHS.dll

2023-12-09 21:51 - 2011-01-12 14:19 - 001060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71.dll

2023-12-09 21:51 - 2011-01-12 13:53 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl71.dll

2023-12-09 21:51 - 2008-08-26 07:40 - 000162304 _____ C:\WINDOWS\system32\libpng13.dll

2023-12-09 21:51 - 2007-02-01 23:13 - 000503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp71.dll

2023-12-09 21:51 - 2007-02-01 20:11 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr71.dll

2023-12-09 21:51 - 2007-01-30 23:04 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr70.dll

2023-12-09 21:51 - 2006-08-26 01:28 - 001017344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70u.dll

2023-12-09 21:51 - 2006-08-26 01:15 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ITA.dll

2023-12-09 21:51 - 2006-08-26 01:15 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70FRA.dll

2023-12-09 21:51 - 2006-08-26 01:15 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ESP.dll

2023-12-09 21:51 - 2006-08-26 01:15 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70DEU.dll

2023-12-09 21:51 - 2006-08-26 01:15 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ENU.dll

2023-12-09 21:51 - 2006-08-26 01:15 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70KOR.dll

2023-12-09 21:51 - 2006-08-26 01:15 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70JPN.dll

2023-12-09 21:51 - 2006-08-26 01:15 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70CHT.dll

2023-12-09 21:51 - 2006-08-26 01:15 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70CHS.dll

2023-12-09 21:51 - 2006-08-26 01:07 - 001024000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70.dll

2023-12-09 21:51 - 2006-08-26 00:17 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl70.dll

2023-12-09 21:51 - 2005-05-06 14:52 - 000103424 _____ (GNU <www.gnu.org>) C:\WINDOWS\system32\libintl3.dll

2023-12-09 21:51 - 2005-01-20 20:25 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvci70.dll

2023-12-09 21:51 - 2002-01-05 06:40 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp70.dll

2023-12-09 21:51 - 1996-01-12 04:00 - 000722192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vb40032.dll

2023-12-09 21:50 - 2023-12-10 17:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2023-12-09 21:50 - 2023-12-09 21:50 - 000000000 ____D C:\Program Files\Microsoft Silverlight

2023-12-09 21:50 - 2023-12-09 21:50 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2023-12-08 14:52 - 2023-12-08 14:55 - 038956186 _____ C:\Users\Jon Kunkel\Downloads\_Solvettube.com_Pure.mp4

2023-12-04 11:13 - 2023-12-10 18:05 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenTX Companion 2.3

2023-12-04 11:13 - 2023-12-04 11:13 - 000000000 ____D C:\Users\Jon Kunkel\OneDrive\Documents\OpenTX

2023-11-27 11:39 - 2023-11-27 11:39 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Local\YTD

2023-11-14 17:59 - 2023-11-14 17:59 - 000278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\UnifiedConsent.dll

2023-11-14 17:54 - 2023-11-14 17:54 - 000096256 _____ C:\WINDOWS\system32\CloudExperienceHostRedirection.dll

2023-11-14 17:53 - 2023-11-14 17:53 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\HidSpiCx.sys

2023-11-14 17:52 - 2023-11-14 17:52 - 000741376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccount.TokenProvider.Core.dll

2023-11-14 17:52 - 2023-11-14 17:52 - 000212480 _____ C:\WINDOWS\system32\CloudIdWxhExtension.dll

2023-11-14 17:51 - 2023-11-14 17:51 - 000613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudRestoreLauncher.dll

 

==================== One month (modified) ==================

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2023-12-14 15:00 - 2019-12-07 01:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2023-12-14 14:54 - 2019-12-07 01:03 - 000000000 ____D C:\WINDOWS\CbsTemp

2023-12-14 14:50 - 2019-12-07 01:13 - 000000000 ____D C:\WINDOWS\INF

2023-12-14 14:49 - 2023-07-14 08:48 - 000000000 ____D C:\Program Files (x86)\Google

2023-12-14 14:49 - 2023-05-05 04:27 - 000000000 ____D C:\WINDOWS\SystemTemp

2023-12-14 14:41 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\AppReadiness

2023-12-14 14:40 - 2019-12-07 01:14 - 000000000 ___HD C:\Program Files\WindowsApps

2023-12-14 14:23 - 2023-07-13 19:10 - 000000000 ___RD C:\Users\Jon Kunkel\OneDrive

2023-12-13 16:52 - 2023-09-09 20:57 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2023-12-11 20:52 - 2019-01-12 20:54 - 000000000 ____D C:\Private Movies

2023-12-11 20:32 - 2023-07-13 19:07 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin

2023-12-11 20:32 - 2019-12-07 01:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI

2023-12-11 14:45 - 2023-07-15 13:50 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Local\D3DSCache

2023-12-11 14:31 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV

2023-12-11 14:31 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT

2023-12-11 14:31 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE

2023-12-11 14:31 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX

2023-12-11 14:31 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV

2023-12-11 14:31 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT

2023-12-11 14:31 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\system32\et-EE

2023-12-11 14:31 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\system32\es-MX

2023-12-11 14:31 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions

2023-12-11 14:31 - 2019-12-07 01:14 - 000000000 ____D C:\Program Files\Windows Defender

2023-12-11 13:07 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\appcompat

2023-12-10 21:38 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports

2023-12-10 18:38 - 2019-12-07 01:14 - 000000000 ___RD C:\WINDOWS\PrintDialog

2023-12-10 18:21 - 2023-07-13 19:05 - 000000000 ___RD C:\Users\Jon Kunkel\3D Objects

2023-12-10 18:21 - 2019-12-07 01:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2023-12-10 18:21 - 2017-11-27 19:47 - 000000000 __RHD C:\Users\Public\AccountPictures

2023-12-10 18:20 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\system32\oobe

2023-12-10 18:11 - 2019-12-07 01:14 - 000000000 __RSD C:\WINDOWS\Media

2023-12-10 18:05 - 2023-10-04 21:34 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\johnsadventures.com

2023-12-10 18:05 - 2023-07-14 12:02 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter

2023-12-10 18:04 - 2023-07-27 03:26 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MusicBee

2023-12-10 18:03 - 2023-07-13 19:05 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Local\Packages

2023-12-10 18:03 - 2019-12-07 01:14 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows

2023-12-10 18:00 - 2023-07-15 14:59 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM

2023-12-10 18:00 - 2023-07-14 09:29 - 000000000 ____D C:\WINDOWS\system32\DAX3

2023-12-10 18:00 - 2023-07-14 09:29 - 000000000 ____D C:\WINDOWS\system32\DAX2

2023-12-10 17:56 - 2023-11-02 14:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Software꞉ Adrenalin Edition

2023-12-10 17:56 - 2023-11-02 14:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Bug Report Tool

2023-12-10 17:56 - 2023-11-02 14:40 - 000000000 ____D C:\WINDOWS\system32\AMD

2023-12-10 17:56 - 2023-08-09 14:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5200 series User Registration

2023-12-10 17:56 - 2023-08-09 14:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5200 series

2023-12-10 17:56 - 2023-08-09 14:00 - 000000000 ____D C:\WINDOWS\system32\STRING

2023-12-10 17:56 - 2023-08-09 13:53 - 000000000 ___HD C:\WINDOWS\system32\CanonIJ Uninstaller Information

2023-12-10 17:56 - 2023-07-26 16:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dupeGuru

2023-12-10 17:56 - 2023-07-25 16:45 - 000000000 ____D C:\WINDOWS\system32\appmgmt

2023-12-10 17:56 - 2023-07-20 21:20 - 000000000 ____D C:\WINDOWS\system32\MpEngineStore

2023-12-10 17:56 - 2023-07-20 06:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader

2023-12-10 17:56 - 2023-07-17 12:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent

2023-12-10 17:56 - 2023-07-15 15:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nahimic 2+ Audio Driver

2023-12-10 17:56 - 2023-07-14 14:03 - 000000000 ____D C:\WINDOWS\system32\A-Volute

2023-12-10 17:56 - 2023-07-14 12:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow

2023-12-10 17:56 - 2023-07-14 12:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AC3Filter

2023-12-10 17:56 - 2023-07-14 12:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters

2023-12-10 17:56 - 2023-07-14 12:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zoom Player

2023-12-10 17:56 - 2023-07-14 09:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip

2023-12-10 17:56 - 2023-07-14 08:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive

2023-12-10 17:56 - 2019-12-07 01:18 - 000000000 ____D C:\WINDOWS\Setup

2023-12-10 17:56 - 2019-12-07 01:14 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 __RHD C:\Users\Public\Libraries

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ___SD C:\WINDOWS\system32\UNP

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ___SD C:\WINDOWS\system32\F12

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\system32\spool

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\System

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\ShellExperiences

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\ServiceState

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\schemas

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ____D C:\ProgramData\USOPrivate

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared

2023-12-10 17:56 - 2017-09-29 06:42 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB

2023-12-10 17:56 - 2017-09-29 06:42 - 000000000 ____D C:\WINDOWS\system32\gd-GB

2023-12-10 17:56 - 2017-09-29 05:46 - 000000000 ____D C:\WINDOWS\system32\MsDtc

2023-12-10 17:56 - 2017-09-29 05:46 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy

2023-12-10 17:54 - 2017-09-29 05:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed

2023-12-10 17:54 - 2017-09-29 05:46 - 000000000 ____D C:\WINDOWS\system32\Macromed

2023-12-10 17:53 - 2023-10-23 20:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eagle Tree Systems

2023-12-10 17:53 - 2023-08-09 14:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities

2023-12-10 17:53 - 2023-07-15 14:59 - 000000000 ____D C:\Program Files\Realtek

2023-12-10 17:53 - 2023-07-14 08:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI

2023-12-10 17:53 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\Resources

2023-12-10 17:05 - 2023-10-18 19:20 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Local\CrashDumps

2023-12-10 15:27 - 2023-07-17 10:30 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\Microsoft\MMC

2023-12-10 03:27 - 2020-11-22 10:02 - 000008192 ___SH C:\DumpStack.log.tmp

2023-12-09 22:16 - 2023-07-17 12:19 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\qBittorrent

2023-12-09 21:49 - 2023-07-13 19:08 - 000000000 ____D C:\ProgramData\Package Cache

2023-12-09 21:41 - 2023-07-17 12:17 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\WinRAR

2023-12-08 22:55 - 2023-07-14 12:00 - 000000000 ____D C:\ProgramData\Zoom Player

2023-12-08 22:23 - 2023-07-27 03:26 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\MusicBee

2023-12-08 14:21 - 2023-07-14 11:48 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2023-11-30 14:57 - 2023-11-02 14:55 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Local\AMD_Common

2023-11-28 20:10 - 2023-07-14 14:05 - 000000000 ____D C:\ProgramData\Packages

2023-11-28 20:10 - 2023-07-13 19:06 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Local\Publishers

2023-11-28 20:09 - 2023-07-14 08:15 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Local\PlaceholderTileLogoFolder

2023-11-27 11:39 - 2023-07-20 06:42 - 000000000 ____D C:\ProgramData\YTD Video Downloader

2023-11-14 17:16 - 2023-07-14 10:13 - 000000000 ____D C:\WINDOWS\system32\MRT

2023-11-14 17:11 - 2023-07-14 10:13 - 182871392 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

 

==================== SigCheck ============================

 

(There is no automatic fix for files that do not pass verification.)

 

==================== End of FRST.txt ========================

 

Addition Log

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-12-2023

Ran by Jon Kunkel (14-12-2023 15:21:43)

Running from C:\Users\Jon Kunkel\OneDrive\Desktop

Microsoft Windows 10 Pro Version 22H2 19045.2965 (X64) (2023-12-11 02:20:45)

Boot Mode: Normal

==========================================================

 

 

==================== Accounts: =============================

 

 

(If an entry is included in the fixlist, it will be removed.)

 

Administrator (S-1-5-21-2128159834-528020214-2662902997-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-2128159834-528020214-2662902997-503 - Limited - Disabled)

Guest (S-1-5-21-2128159834-528020214-2662902997-501 - Limited - Disabled)

Jon Kunkel (S-1-5-21-2128159834-528020214-2662902997-1002 - Administrator - Enabled) => C:\Users\Jon Kunkel

WDAGUtilityAccount (S-1-5-21-2128159834-528020214-2662902997-504 - Limited - Disabled)

 

==================== Security Center ========================

 

(If an entry is included in the fixlist, it will be removed.)

 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 

==================== Installed Programs ======================

 

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

7-Zip 16.04 (HKLM-x32\...\7-Zip) (Version: 16.04 - Igor Pavlov)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

AC3Filter 2.6.0b (HKLM-x32\...\AC3Filter_is1) (Version: 2.6.0b - Alexander Vigovsky)

Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.5.1 - Sereby Corporation)

AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 23.11.1 - Advanced Micro Devices, Inc.)

APOInstallerMSISetup (HKLM\...\{6D8108E5-FBDD-4547-9C04-B052336E4046}) (Version: 1.0.19 - Nahimic) Hidden

Asmedia USB Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.47.2 - Asmedia Technology)

AudioDeviceFXPluginSampleUIMSISetup (HKLM\...\{A6A8AE0B-30CC-4641-8BE4-8A70E44A2448}) (Version: 1.0.1901 - Nahimic) Hidden

Bass Audio Decoder (remove only) (HKLM-x32\...\Bass Audio Decoder) (Version:  - )

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Branding64 (HKLM\...\{492AEFBE-1B81-4C20-A111-E6974BB98EC5}) (Version: 1.00.0009 - Advanced Micro Devices, Inc.) Hidden

Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )

Canon MG5200 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5200_series) (Version:  - Canon Inc.)

Canon MG5200 series User Registration (HKLM-x32\...\Canon MG5200 series User Registration) (Version:  - )

Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )

DCoder Image Source (remove only) (HKLM-x32\...\DCoder Image Source) (Version:  - )

DirectVobSub (remove only) (HKLM-x32\...\DirectVobSub) (Version:  - )

dupeGuru 4.3.1 (HKLM\...\dupeGuru) (Version: 4.3.1 - Hardcoded Software)

EndpointMonitoring Install MSISetup (HKLM\...\{F1F90F23-6FFC-481E-B72A-B2D51C6DA257}) (Version: 1.0.1901 - Nahimic) Hidden

Ethos Suite 1.4.11 (HKLM\...\234726f7-d84e-569e-899e-e9f080f161a7) (Version: 1.4.11 - FrSky RC)

ffdshow v1.3.4533 [2014-09-29] (HKLM-x32\...\ffdshow_is1) (Version: 1.3.4533.0 - )

FFMPEG Core Files (remove only) (HKLM-x32\...\FFMPEG Core Files) (Version:  - )

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 120.0.6099.72 - Google LLC)

Google Drive (HKLM-x32\...\{459CE109-4E46-4340-92BC-054642BC3BC2}) (Version: 1.31.2873.2758 - Google, Inc.)

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.31.5 - Google Inc.) Hidden

Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version:  - )

Java 8 Update 391 (64-bit) (HKLM\...\{71324AE4-039E-4CA4-87B4-2F64180391F0}) (Version: 8.0.3910.13 - Oracle Corporation)

Java 8 Update 391 (HKLM-x32\...\{71324AE4-039E-4CA4-87B4-2F32180391F0}) (Version: 8.0.3910.13 - Oracle Corporation)

John's Background Switcher 5.6 (HKLM-x32\...\{DD3DAD13-289E-440E-A5D3-3EFB25305018}_is1) (Version: 5.6 - johnsadventures.com)

LauncherSetup Install (HKLM\...\{321FD73D-DE84-4305-8D39-FDF9809E8C07}) (Version: 2.5.2701 - Nahimic) Hidden

LAV Filters 0.77.2 (HKLM-x32\...\lavfilters_is1) (Version: 0.77.2 - Hendrik Leppkes)

MadVR (remove only) (HKLM-x32\...\MadVR) (Version:  - )

Malwarebytes version 4.6.7.301 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.6.7.301 - Malwarebytes)

Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 120.0.2210.61 - Microsoft Corporation)

Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 120.0.2210.61 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-2128159834-528020214-2662902997-1002\...\OneDriveSetup.exe) (Version: 23.246.1127.0002 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)

Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61135 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61135 - Microsoft Corporation)

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61135 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61135 - Microsoft Corporation)

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61135 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61135 - Microsoft Corporation)

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61135 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61135 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{4ffaf7b8-a84a-4813-840c-8b1f1343ae54}) (Version: 12.0.40664.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{dd1e9bde-2ad6-4e92-8c07-7d4723eab8b8}) (Version: 12.0.40664.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.29.30133 (HKLM-x32\...\{295d1583-fdb9-414b-a4c8-da539362a26b}) (Version: 14.29.30133.0 - Microsoft Corporation)

Microsoft Visual C++ 2019 X64 Additional Runtime - 14.29.30133 (HKLM\...\{E699E009-1C3C-4E50-9B57-2B39F0954C7F}) (Version: 14.29.30133 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.29.30133 (HKLM\...\{6CD9E9ED-906D-4196-8DC3-F987D2F6615F}) (Version: 14.29.30133 - Microsoft Corporation) Hidden

Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version:  - Microsoft Corporation)

MPC Audio Filters (remove only) (HKLM-x32\...\MPC Audio Filters) (Version:  - )

MSI APP Manager (HKLM-x32\...\{00F47104-12BA-4E58-A7E6-F456C1BA338E}}_is1) (Version: 1.0.0.32 - MSI)

MSI RAMDisk (HKLM-x32\...\{F29CF050-7278-4CDB-9EF8-2DC6DAA87453}}_is1) (Version: 1.0.0.31 - MSI)

MSI Smart Tool (HKLM-x32\...\{DDCCA038-DAB1-4D09-B85C-848020AA75D6}}_is1) (Version: 1.0.0.32 - MSI)

MSI Super Charger (HKLM-x32\...\{7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1) (Version: 1.3.0.22 - MSI)

MSI X Boost (HKLM-x32\...\{515143BB-7A11-4D85-B941-D520AAAA099C}_is1) (Version: 1.0.0.41 - MSI)

MusicBee 3.4.8033 (HKLM-x32\...\MusicBee) (Version: 3.4.8033 - Steven Mayall)

Nahimic 2+ Audio Driver (HKLM\...\{5730B02A-C7CD-4AA2-A153-E7B3B43730D6}) (Version: 2.5.2701 - Nahimic) Hidden

Nahimic 2+ Audio Driver (HKLM-x32\...\{7acff911-8114-44bf-8400-0d29c4c3841c}) (Version: 2.5.27 - Nahimic)

Nahimic VR (HKLM-x32\...\{3d84610f-4cfb-4165-aa15-bb859bd0f0e3}) (Version: 1.0.19 - Nahimic)

Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 8.5.4 - Notepad++ Team)

OEM Application Profile (HKLM-x32\...\{7F5DCD33-1039-C3B2-9538-B645B65BBA63}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)

OpenTX Companion 2.3 (HKLM-x32\...\OpenTX Companion 2.3) (Version: 2.3.15 - OpenTX)

Opera GX Stable 104.0.4944.60 (HKU\S-1-5-21-2128159834-528020214-2662902997-1002\...\Opera GX 104.0.4944.60) (Version: 104.0.4944.60 - Opera Software)

ProductDaemon Install Setup (HKLM\...\{32D62D40-F8F6-408E-8F8C-6A6593E3ACE9}) (Version: 1.0.1901 - Nahimic) Hidden

ProductDaemonSetup Install (HKLM\...\{8B4E59C4-412D-4136-B3D9-05CEA4FC6433}) (Version: 2.5.2701 - Nahimic) Hidden

qBittorrent 3.3.7 (HKLM-x32\...\qBittorrent) (Version: 3.3.7 - The qBittorrent project)

R/C Data Recorder v10.72 (BETA Version - MAY BE UNSTABLE!) (HKLM-x32\...\{77EE018F-2E8E-4AA7-99D5-E05205598DCC}) (Version: 10.72.00 - Eagle Tree Systems, LLC)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.23.1003.2017 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8382 - Realtek Semiconductor Corp.)

RyzenMasterSDK (HKLM\...\{24B4654A-0460-497E-9940-292C3E0054DC}) (Version: 1.2.3.5 - Advanced Micro Devices, Inc.) Hidden

Silicon Laboratories CP210x USB to UART Bridge (Driver Removal) (HKLM-x32\...\SLABCOMM&10C4&EA60) (Version:  - Silicon Laboratories)

Silicon Laboratories CP210x VCP Drivers for Windows XP/2003 Server/Vista/7 (HKLM-x32\...\{A21BF298-C8E9-469D-B7A3-8FF5787C2391}) (Version: 6.5.3 - Silicon Laboratories, Inc.)

SSAudioDaemon Install MSISetup (HKLM\...\{F77EA0C2-B0EB-47C7-990D-EACA981D75E8}) (Version: 1.0.19 - Nahimic) Hidden

UIInstallUpgrade (HKLM\...\{12E7AD3D-5F2D-4D79-8618-C97DF2DD8896}) (Version: 2.5.2701 - Nahimic) Hidden

Update for Windows 10 for x64-based Systems (KB4480730) (HKLM\...\{0746492E-47B6-4251-940C-44462DFD74BB}) (Version: 2.55.0.0 - Microsoft Corporation)

Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{7B63012A-4AC6-40C6-B6AF-B24A84359DD5}) (Version: 8.93.0.0 - Microsoft Corporation)

Windows 10 Update Assistant (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.19041.2183 - Microsoft Corporation)

Windows Driver Package - Silicon Laboratories Inc. (silabser) Ports  (05/23/2018 10.1.3.2130) (HKLM\...\47974EDC781C5B49C74F733E14FC298A782DA59E) (Version: 05/23/2018 10.1.3.2130 - Silicon Laboratories Inc.)

Windows PC Health Check (HKLM\...\{804A0628-543B-4984-896C-F58BF6A54832}) (Version: 3.7.2204.15001 - Microsoft Corporation)

YTD Video Downloader 7.6.2.1 (HKLM\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 7.6.2.1 - Azureus Software, Inc.) <==== ATTENTION

Zoom Player (remove only) (HKLM-x32\...\ZoomPlayer) (Version: 16 - Inmatrix LTD)

 

Packages:

=========

Canon Inkjet Print Utility -> C:\Program Files\WindowsApps\34791E63.CanonInkjetPrintUtility_3.1.0.0_neutral__6e5tt8cgb93ep [2023-12-10] (Canon Inc.)

HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_150.1.1140.0_x64__v10z8vjag6ke6 [2023-12-10] (HP Inc.)

Solitaire & Casual Games -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.18.11020.0_x64__8wekyb3d8bbwe [2023-12-10] (Microsoft Studios) [MS Ad]

Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0 [2023-12-10] (Spotify AB) [Startup Task]

 

==================== Custom CLSID (Whitelisted): ==============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google Inc -> Google)

ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google Inc -> Google)

ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google Inc -> Google)

ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) [File not signed]

ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2016-07-29] (Google Inc -> Google)

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-12-10] (Malwarebytes Inc. -> Malwarebytes)

ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) [File not signed]

ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2016-07-29] (Google Inc -> Google)

ContextMenuHandlers4: [ZPShellExt] -> {ABE00001-0123-ABED-1248-0248ADFA1909} => C:\Program Files (x86)\Zoom Player\zpshlext64.dll [2017-07-04] (Inmatrix LTD -> )

ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2023-10-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) [File not signed]

ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-12-10] (Malwarebytes Inc. -> Malwarebytes)

 

==================== Codecs (Whitelisted) ====================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Drivers32: [VIDC.FFDS] => C:\Windows\SysWOW64\ff_vfw.dll [112640 2014-09-29] () [File not signed]

 

==================== Shortcuts & WMI ========================

 

(The entries could be listed to be restored or removed.)

 

ShortcutWithArgument: C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Pinned Sites\MSEdge._pin_adnlfjpnmiaohpidplnoimahfh\YouTube.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) ->  --pin-url=hxxps://www.youtube.com/ --profile-directory=Default

ShortcutWithArgument: C:\Users\Jon Kunkel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\YouTube.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) ->  --pin-url=hxxps://www.youtube.com/ --profile-directory=Default

 

==================== Loaded Modules (Whitelisted) =============

 

2023-07-14 09:19 - 2005-07-18 12:43 - 000160256 _____ () [File not signed] C:\Program Files (x86)\MSI\APP Manager\unrar.dll

2023-07-15 15:03 - 2016-04-20 13:12 - 000772608 _____ () [File not signed] C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\Lib\USB_DLL.dll

2018-02-05 17:12 - 2018-02-05 17:12 - 000172544 _____ () [File not signed] C:\Program Files\Nahimic\Nahimic VR\AnalogDriver\EndpointMonitoring.dll

2023-08-09 14:00 - 2012-06-14 16:18 - 000359936 _____ (CANON INC.) [File not signed] C:\WINDOWS\System32\CNMN6PPM.DLL

2010-11-18 20:08 - 2010-11-18 20:08 - 000086016 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll

 

==================== Alternate Data Streams (Whitelisted) ========

 

==================== Safe Mode (Whitelisted) ==================

 

==================== Association (Whitelisted) =================

 

==================== Internet Explorer (Whitelisted) ==========

 

SearchScopes: HKU\S-1-5-21-2128159834-528020214-2662902997-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre-1.8\bin\ssv.dll [2023-10-04] (Oracle America, Inc. -> Oracle Corporation)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre-1.8\bin\jp2ssv.dll [2023-10-04] (Oracle America, Inc. -> Oracle Corporation)

BHO-x32: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre-1.8\bin\ssv.dll [2023-10-04] (Oracle America, Inc. -> Oracle Corporation)

BHO-x32: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre-1.8\bin\jp2ssv.dll [2023-10-04] (Oracle America, Inc. -> Oracle Corporation)

 

==================== Hosts content: =========================

 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2017-09-29 05:46 - 2017-09-29 05:44 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

 

==================== Other Areas ===========================

 

(Currently there is no automatic fix for this section.)

 

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\

HKU\S-1-5-21-2128159834-528020214-2662902997-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Jon Kunkel\AppData\Roaming\johnsadventures.com\Background Switcher\ActiveBackground.jpg

DNS Servers: 192.168.1.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost => (EnableWebContentEvaluation: 1)

Windows Firewall is enabled.

 

==================== MSCONFIG/TASK MANAGER disabled items ==

 

==================== FirewallRules (Whitelisted) ================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

FirewallRules: [UDP Query User{42BB3F91-C6D8-4987-991E-3E362A170B1A}C:\users\jon kunkel\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\jon kunkel\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)

FirewallRules: [TCP Query User{361AB277-F1D1-462A-AE97-71E378586873}C:\users\jon kunkel\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\jon kunkel\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)

FirewallRules: [{8F92CED7-D633-4429-A878-87430A66111F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{756E9C77-2F5C-40D7-BFE4-F93B5DF0A981}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{6FA53E42-18D0-4B03-B58F-59EB318B8A78}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{08B5B52A-15FE-40C7-A06C-B6BE6AAC54AE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{7F3B1806-37CD-4C87-863D-E36A34C260F8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{8E2E6B26-5971-4DC0-9716-4C0BF92401C2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{C0FF5FA1-5B84-4EFF-8D41-D7F137407CBE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{3D919A95-BB3A-45E6-BA11-0F57B5A45D28}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{82295B20-A1A2-4F51-9F7A-EC4A79820D6F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{CB9A1898-9C9C-450F-8D6E-920E2BC68A4F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [TCP Query User{2F25D75F-661B-464E-A04B-5C8AF8FAD8F1}C:\users\jon kunkel\appdata\local\programs\opera gx\opera.exe] => (Block) C:\users\jon kunkel\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)

FirewallRules: [UDP Query User{66009E4B-CA46-401C-B58B-219CF7036AC3}C:\users\jon kunkel\appdata\local\programs\opera gx\opera.exe] => (Block) C:\users\jon kunkel\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)

FirewallRules: [{4A71C01F-AA24-4254-B042-4E7EED62BC4B}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

FirewallRules: [{DA9EA9E0-C511-4616-B96D-86FA5184D438}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.110.3218.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{69095E96-7C80-42F7-87FE-389A156675E6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.110.3218.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{151D6DD5-0CFE-4CC8-8849-B534C817BECA}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.110.3218.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{F3C5086C-B307-4E5C-ABB5-9A15FAC4751D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.110.3218.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

 

==================== Restore Points =========================

 

10-12-2023 18:29:15 Windows Modules Installer

11-12-2023 19:49:40 Windows Modules Installer

12-12-2023 21:37:48 Windows Modules Installer

14-12-2023 14:23:50 Windows Modules Installer

 

==================== Faulty Device Manager Devices ============

 

 

==================== Event log errors: ========================

 

Application errors:

==================

Error: (12/14/2023 02:22:29 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )

Description: License Activation (slui.exe) failed with the following error code:

hr=0x8007007B

Command-line arguments:

RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

 

Error: (12/14/2023 02:20:27 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: The program SearchApp.exe version 10.0.19041.2913 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

 

Process ID: 2c18

 

Start Time: 01da2d6eb044581a

 

Termination Time: 4294967295

 

Application Path: C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe

 

Report Id: d5a746e7-22ab-4195-84a1-7d6f4dee4876

 

Faulting package full name: Microsoft.Windows.Search_1.14.9.19041_neutral_neutral_cw5n1h2txyewy

 

Faulting package-relative application ID: CortanaUI

 

Hang type: Quiesce

 

Error: (12/14/2023 03:45:40 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )

Description: License Activation (slui.exe) failed with the following error code:

hr=0x8007007B

Command-line arguments:

RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

 

Error: (12/13/2023 04:23:03 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )

Description: License Activation (slui.exe) failed with the following error code:

hr=0x8007007B

Command-line arguments:

RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

 

Error: (12/13/2023 03:41:47 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )

Description: License Activation (slui.exe) failed with the following error code:

hr=0x8007007B

Command-line arguments:

RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

 

Error: (12/12/2023 07:33:18 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )

Description: License Activation (slui.exe) failed with the following error code:

hr=0x8007007B

Command-line arguments:

RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

 

Error: (12/12/2023 06:48:02 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )

Description: License Activation (slui.exe) failed with the following error code:

hr=0x8007007B

Command-line arguments:

RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

 

Error: (12/12/2023 02:28:16 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )

Description: License Activation (slui.exe) failed with the following error code:

hr=0x8007007B

Command-line arguments:

RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

 

 

System errors:

=============

Error: (12/14/2023 02:54:38 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x800f081f: 2023-12 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5033372).

 

Error: (12/14/2023 02:40:42 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x80073d02: 9NMPJ99VJBWV-Microsoft.YourPhone.

 

Error: (12/13/2023 04:48:51 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x800f081f: 2023-12 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5033372).

 

Error: (12/12/2023 10:00:03 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x800f081f: 2023-12 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5033372).

 

Error: (12/12/2023 07:07:56 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x800f081f: 2023-12 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5033372).

 

Error: (12/11/2023 09:04:42 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x800f081f: 2023-11 Cumulative Update Preview for Windows 10 Version 22H2 for x64-based Systems (KB5032278).

 

Error: (12/11/2023 08:37:29 PM) (Source: Service Control Manager) (EventID: 7022) (User: )

Description: The Downloaded Maps Manager service hung on starting.

 

Error: (12/11/2023 08:33:04 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The luafv service failed to start due to the following error: 

This driver has been blocked from loading

 

 

CodeIntegrity:

===============

Date: 2023-12-11 20:42:18

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

 

 

==================== Memory info =========================== 

 

BIOS: American Megatrends Inc. A.40 06/28/2018

Motherboard: Micro-Star International Co., Ltd. X470 GAMING PLUS (MS-7B79)

Processor: AMD Ryzen 5 2600 Six-Core Processor 

Percentage of memory in use: 62%

Total physical RAM: 8140.28 MB

Available physical RAM: 3023.25 MB

Total Virtual: 16844.28 MB

Available Virtual: 7531.19 MB

 

==================== Drives ================================

 

Drive c: () (Fixed) (Total:930.89 GB) (Free:11.28 GB) (Model: ST1000DM010-2EP102) NTFS

Drive d: () (Fixed) (Total:465.25 GB) (Free:48.03 GB) (Model: Samsung SSD 860 EVO 500GB) NTFS ==>[system with boot components (obtained from drive)]

Drive e: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.07 GB) (Model: ST1000DM010-2EP102) NTFS ==>[system with boot components (obtained from drive)]

Drive f: () (Fixed) (Total:103.41 GB) (Free:4.18 GB) (Model: ST3120213AS) NTFS

Drive g: (TOSHIBA EXT) (Fixed) (Total:931.51 GB) (Free:13.3 GB) (Model: TOSHIBA External USB 3.0 USB Device) NTFS

Drive h: (Crucial X8) (Fixed) (Total:931.48 GB) (Free:748.21 GB) (Model: Micron Crucial X8 SSD SCSI Disk Device) exFAT

Drive i: (Hard Drive) (Fixed) (Total:298.09 GB) (Free:4.54 GB) (Model: WDC WD3200AAKS-75SBA0) NTFS

 

\\?\Volume{7e916ec2-0000-0000-0000-205074000000}\ () (Fixed) (Total:0.51 GB) (Free:0.08 GB) NTFS

\\?\Volume{7e916efa-0000-0000-0000-20bfe8000000}\ () (Fixed) (Total:0.52 GB) (Free:0.08 GB) NTFS

 

==================== MBR & Partition Table ====================

 

==========================================================

Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 7E916EC2)

Partition 1: (Active) - (Size=465.3 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=520 MB) - (Type=27)

 

==========================================================

Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 7E916EFA)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=930.9 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=537 MB) - (Type=27)

 

==========================================================

Disk: 2 (MBR Code: Windows XP) (Size: 298.1 GB) (Disk ID: 28000000)

Partition 1: (Active) - (Size=298.1 GB) - (Type=07 NTFS)

 

==========================================================

Disk: 3 (MBR Code: Windows XP) (Size: 111.8 GB) (Disk ID: 1549F232)

Partition 1: (Active) - (Size=103.4 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=8.4 GB) - (Type=0F Extended)

 

==========================================================

Disk: 4 (MBR Code: Windows 7 or Vista) (Size: 931.5 GB) (Disk ID: 0BB5AF8D)

Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

 

==========================================================

Disk: 5 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)

 

Partition: GPT.

 

==================== End of Addition.txt =======================

 

[Advertisements]

Uninstall Malwarebytes for now.  You can reinstall later if you want.

 

Download the attached Fixlist.txt file to the same folder where FRST64 lives. 

 

 fixlist.txt   2.25KB   53 downloads

 

Right click on FRST64 and select Run As Admin.

Hit the Fix button.  FRST should run and will take at least 30 minutes to complete as it  will not only remove some policies which block Defender and a Cryptominer but will also check and repair your system files.  Be patient.  Worst case the program will time out in an hour.  System will reboot when done.  Please post the fixlog.txt file that will be generated (found in the same folder as FRST64 if you don't see it after the reboot).

 

Right click on FRST64 and select Run As Admin.  Hit SCAN and post both logs.  (If nothing happens when you try to bring up FRST, pause Windows Defender.)

 

Go to https://www.eset.com...online-scanner/

 

Scroll to the bottom and select One-time Scan.  It should download a file.  Go to the download folder and right click on the file and Run As Admin.  Follow the prompts.  Will take a while so be patient.  When it finishes it will tell you if it found anything.  Did it?

 

 

[RKinner]

Uninstall Malwarebytes for now.  You can reinstall later if you want.

 

Download the attached Fixlist.txt file to the same folder where FRST64 lives. 

 

 fixlist.txt   2.25KB   53 downloads

 

Right click on FRST64 and select Run As Admin.

Hit the Fix button.  FRST should run and will take at least 30 minutes to complete as it  will not only remove some policies which block Defender and a Cryptominer but will also check and repair your system files.  Be patient.  Worst case the program will time out in an hour.  System will reboot when done.  Please post the fixlog.txt file that will be generated (found in the same folder as FRST64 if you don't see it after the reboot).

 

Right click on FRST64 and select Run As Admin.  Hit SCAN and post both logs.  (If nothing happens when you try to bring up FRST, pause Windows Defender.)

 

Go to https://www.eset.com...online-scanner/

 

Scroll to the bottom and select One-time Scan.  It should download a file.  Go to the download folder and right click on the file and Run As Admin.  Follow the prompts.  Will take a while so be patient.  When it finishes it will tell you if it found anything.  Did it?

 

 

[jlk69]

The Fix log file:

 

Fix result of Farbar Recovery Scan Tool (x64) Version: 13-12-2023

Ran by Jon Kunkel (15-12-2023 10:59:19) Run:1

Running from C:\Users\Jon Kunkel\OneDrive\Desktop

Loaded Profiles: Jon Kunkel

Boot Mode: Normal

==============================================

 

fixlist content:

*****************

HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION

HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center: Restriction <==== ATTENTION

HKU\S-1-5-21-2128159834-528020214-2662902997-1002\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Jon Kunkel\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File)

HKU\S-1-5-21-2128159834-528020214-2662902997-1002\...\RunOnce: [Uninstall 23.226.1031.0003] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Jon Kunkel\AppData\Local\Microsoft\OneDrive\23.226.1031.0003" [0 2023-12-14] () <==== ATTENTION [zero byte File/Folder]

CMD: type "C:\Users\Jon Kunkel\AppData\Local\Updates\Run.vbs"

Task: {5D33235A-FFAE-4760-A7EA-34311AEAAE72} - System32\Tasks\Window Update => C:\Users\Jon Kunkel\AppData\Local\Updates\Run.vbs [1015 2022-05-09] () [File not signed] <==== ATTENTION

CMD: DISM /Online /Cleanup-Image /RestoreHealth

CMD: SFC /scannow

CMD: findstr  /c:"[SR]"  \windows\logs\cbs\cbs.log

CMD: FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i"

Reboot:

 

 

*****************

 

HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully

HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center => removed successfully

"HKU\S-1-5-21-2128159834-528020214-2662902997-1002\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Delete Cached Standalone Update Binary" => removed successfully

"HKU\S-1-5-21-2128159834-528020214-2662902997-1002\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Uninstall 23.226.1031.0003" => removed successfully

 

========= type "C:\Users\Jon Kunkel\AppData\Local\Updates\Run.vbs" =========

 

If WScript.Arguments.length =0 Then

Set objShell = CreateObject("Shell.Application")

 

objShell.ShellExecute "wscript.exe", Chr(34) & _

WScript.ScriptFullName & Chr(34) & " uac", "", "runas", 1

Else

 

 

Set objShell = CreateObject( "WScript.Shell" )

appDataLocation=objShell.ExpandEnvironmentStrings("%LOCALAPPDATA%")

SourcePath = appDataLocation & "\Updates"

 

Dim oFSO

Set oFSO = CreateObject("Scripting.FileSystemObject")

strFile = "Windows"

strRename = "Windows.bat"

 

 

 

 

 

 

If oFSO.FileExists(oFSO.BuildPath(SourcePath, strRename)) Then

oFSO.DeleteFile oFSO.BuildPath(SourcePath, strRename)

End If

 

If oFSO.FileExists(oFSO.BuildPath(SourcePath, strFile)) Then

     oFSO.CopyFile oFSO.BuildPath(SourcePath, strFile), oFSO.BuildPath(SourcePath, strRename)

End If

 

objShell.Run Chr(34) & oFSO.BuildPath(SourcePath, strRename) & Chr(34),0,True

 

If oFSO.FileExists(oFSO.BuildPath(SourcePath, strRename)) Then

     oFSO.DeleteFile oFSO.BuildPath(SourcePath, strRename)

End If 

 

End If

 

========= End of CMD: =========

 

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5D33235A-FFAE-4760-A7EA-34311AEAAE72}" => removed successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5D33235A-FFAE-4760-A7EA-34311AEAAE72}" => removed successfully

C:\WINDOWS\System32\Tasks\Window Update => moved successfully

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Window Update" => removed successfully

 

========= DISM /Online /Cleanup-Image /RestoreHealth =========

 

 

Deployment Image Servicing and Management tool

Version: 10.0.19041.844

 

Image Version: 10.0.19045.2965

 

 

[==                         3.8%                           ] 

 

[==                         3.8%                           ] 

 

[==                         3.9%                           ] 

 

[==                         4.1%                           ] 

 

[==                         4.3%                           ] 

 

[==                         4.5%                           ] 

 

[==                         4.6%                           ] 

 

[==                         4.7%                           ] 

 

[==                         4.9%                           ] 

 

[==                         5.1%                           ] 

 

[===                        5.4%                           ] 

 

[===                        5.5%                           ] 

 

[===                        5.7%                           ] 

 

[===                        6.0%                           ] 

 

[===                        6.1%                           ] 

 

[===                        6.3%                           ] 

 

[===                        6.5%                           ] 

 

[===                        6.6%                           ] 

 

[===                        6.7%                           ] 

 

[===                        6.9%                           ] 

 

[====                       7.1%                           ] 

 

[====                       7.3%                           ] 

 

[====                       7.5%                           ] 

 

[====                       7.6%                           ] 

 

[====                       7.8%                           ] 

 

[====                       8.0%                           ] 

 

[====                       8.3%                           ] 

 

[====                       8.5%                           ] 

 

[=====                      8.7%                           ] 

 

[=====                      8.9%                           ] 

 

[=====                      9.0%                           ] 

 

[=====                      9.1%                           ] 

 

[=====                      9.3%                           ] 

 

[=====                      9.5%                           ] 

 

[=====                      9.7%                           ] 

 

[=====                      9.9%                           ] 

 

[=====                      10.0%                          ] 

 

[=====                      10.3%                          ] 

 

[======                     10.4%                          ] 

 

[======                     10.6%                          ] 

 

[======                     10.9%                          ] 

 

[======                     11.1%                          ] 

 

[======                     11.2%                          ] 

 

[======                     11.5%                          ] 

 

[======                     11.8%                          ] 

 

[======                     12.0%                          ] 

 

[=======                    12.4%                          ] 

 

[=======                    12.6%                          ] 

 

[=======                    13.0%                          ] 

 

[=======                    13.0%                          ] 

 

[=======                    13.1%                          ] 

 

[=======                    13.4%                          ] 

 

[=======                    13.5%                          ] 

 

[=======                    13.6%                          ] 

 

[=======                    13.7%                          ] 

 

[========                   13.9%                          ] 

 

[========                   14.1%                          ] 

 

[========                   14.3%                          ] 

 

[========                   14.5%                          ] 

 

[========                   14.8%                          ] 

 

[========                   15.1%                          ] 

 

[========                   15.3%                          ] 

 

[=========                  15.6%                          ] 

 

[=========                  15.8%                          ] 

 

[=========                  16.1%                          ] 

 

[=========                  16.3%                          ] 

 

[=========                  16.5%                          ] 

 

[=========                  16.7%                          ] 

 

[=========                  16.8%                          ] 

 

[=========                  16.9%                          ] 

 

[=========                  17.1%                          ] 

 

[==========                 17.3%                          ] 

 

[==========                 17.6%                          ] 

 

[==========                 18.0%                          ] 

 

[==========                 18.1%                          ] 

 

[==========                 18.4%                          ] 

 

[==========                 18.6%                          ] 

 

[==========                 18.8%                          ] 

 

[===========                19.0%                          ] 

 

[===========                19.3%                          ] 

 

[===========                19.5%                          ] 

 

[===========                19.8%                          ] 

 

[===========                20.1%                          ] 

 

[===========                20.4%                          ] 

 

[===========                20.7%                          ] 

 

[============               20.8%                          ] 

 

[============               20.9%                          ] 

 

[============               20.9%                          ] 

 

[============               20.9%                          ] 

 

[============               21.0%                          ] 

 

[============               21.3%                          ] 

 

[============               21.5%                          ] 

 

[============               21.9%                          ] 

 

[============               22.3%                          ] 

 

[=============              23.3%                          ] 

 

[==============             24.3%                          ] 

 

[==============             24.7%                          ] 

 

[==============             25.1%                          ] 

 

[==============             25.6%                          ] 

 

[===============            26.0%                          ] 

 

[===============            26.3%                          ] 

 

[===============            26.9%                          ] 

 

[================           27.6%                          ] 

 

[================           28.0%                          ] 

 

[================           28.6%                          ] 

 

[================           29.2%                          ] 

 

[=================          29.6%                          ] 

 

[=================          29.8%                          ] 

 

[=================          30.1%                          ] 

 

[=================          30.5%                          ] 

 

[=================          30.7%                          ] 

 

[=================          31.0%                          ] 

 

[==================         31.4%                          ] 

 

[==================         31.7%                          ] 

 

[==================         31.9%                          ] 

 

[==================         32.1%                          ] 

 

[==================         32.2%                          ] 

 

[==================         32.2%                          ] 

 

[==================         32.2%                          ] 

 

[==================         32.3%                          ] 

 

[==================         32.5%                          ] 

 

[==================         32.7%                          ] 

 

[===================        33.0%                          ] 

 

[===================        33.2%                          ] 

 

[===================        33.6%                          ] 

 

[===================        33.8%                          ] 

 

[===================        34.2%                          ] 

 

[====================       34.6%                          ] 

 

[====================       34.9%                          ] 

 

[====================       35.2%                          ] 

 

[====================       35.5%                          ] 

 

[====================       35.9%                          ] 

 

[=====================      36.2%                          ] 

 

[=====================      36.4%                          ] 

 

[=====================      36.6%                          ] 

 

[=====================      36.7%                          ] 

 

[=====================      36.8%                          ] 

 

[=====================      37.2%                          ] 

 

[=====================      37.4%                          ] 

 

[=====================      37.7%                          ] 

 

[======================     38.0%                          ] 

 

[======================     38.2%                          ] 

 

[======================     38.4%                          ] 

 

[======================     38.6%                          ] 

 

[======================     38.8%                          ] 

 

[======================     39.2%                          ] 

 

[======================     39.5%                          ] 

 

[======================     39.6%                          ] 

 

[=======================    39.8%                          ] 

 

[=======================    39.9%                          ] 

 

[=======================    40.2%                          ] 

 

[=======================    40.2%                          ] 

 

[=======================    40.3%                          ] 

 

[=======================    40.5%                          ] 

 

[=======================    40.7%                          ] 

 

[=======================    40.8%                          ] 

 

[=======================    41.1%                          ] 

 

[=======================    41.2%                          ] 

 

[========================   41.4%                          ] 

 

[========================   41.7%                          ] 

 

[========================   41.7%                          ] 

 

[========================   41.8%                          ] 

 

[========================   42.0%                          ] 

 

[========================   42.0%                          ] 

 

[========================   42.0%                          ] 

 

[========================   42.1%                          ] 

 

[========================   42.3%                          ] 

 

[========================   42.4%                          ] 

 

[========================   42.8%                          ] 

 

[========================   42.9%                          ] 

 

[========================   42.9%                          ] 

 

[========================   43.0%                          ] 

 

[========================   43.1%                          ] 

 

[========================   43.1%                          ] 

 

[=========================  43.2%                          ] 

 

[=========================  43.2%                          ] 

 

[=========================  43.2%                          ] 

 

[=========================  43.4%                          ] 

 

[=========================  43.5%                          ] 

 

[=========================  43.6%                          ] 

 

[=========================  43.7%                          ] 

 

[=========================  43.8%                          ] 

 

[=========================  43.8%                          ] 

 

[=========================  43.8%                          ] 

 

[=========================  43.9%                          ] 

 

[=========================  44.0%                          ] 

 

[=========================  44.2%                          ] 

 

[=========================  44.2%                          ] 

 

[=========================  44.3%                          ] 

 

[=========================  44.4%                          ] 

 

[=========================  44.5%                          ] 

 

[=========================  44.7%                          ] 

 

[========================== 44.8%                          ] 

 

[========================== 44.9%                          ] 

 

[========================== 45.0%                          ] 

 

[========================== 45.1%                          ] 

 

[========================== 45.3%                          ] 

 

[========================== 45.5%                          ] 

 

[========================== 45.5%                          ] 

 

[========================== 45.5%                          ] 

 

[========================== 45.6%                          ] 

 

[========================== 45.7%                          ] 

 

[========================== 45.7%                          ] 

 

[========================== 46.0%                          ] 

 

[========================== 46.1%                          ] 

 

[========================== 46.1%                          ] 

 

[========================== 46.2%                          ] 

 

[========================== 46.3%                          ] 

 

[========================== 46.3%                          ] 

 

[========================== 46.3%                          ] 

 

[========================== 46.4%                          ] 

 

[========================== 46.5%                          ] 

 

[========================== 46.5%                          ] 

 

[===========================46.6%                          ] 

 

[===========================46.6%                          ] 

 

[===========================46.6%                          ] 

 

[===========================46.7%                          ] 

 

[===========================46.7%                          ] 

 

[===========================46.7%                          ] 

 

[===========================46.8%                          ] 

 

[===========================46.9%                          ] 

 

[===========================46.9%                          ] 

 

[===========================46.9%                          ] 

 

[===========================46.9%                          ] 

 

[===========================47.0%                          ] 

 

[===========================47.0%                          ] 

 

[===========================47.1%                          ] 

 

[===========================47.1%                          ] 

 

[===========================47.2%                          ] 

 

[===========================47.2%                          ] 

 

[===========================47.3%                          ] 

 

[===========================47.3%                          ] 

 

[===========================47.4%                          ] 

 

[===========================47.5%                          ] 

 

[===========================47.6%                          ] 

 

[===========================47.6%                          ] 

 

[===========================47.6%                          ] 

 

[===========================47.8%                          ] 

 

[===========================47.8%                          ] 

 

[===========================47.9%                          ] 

 

[===========================47.9%                          ] 

 

[===========================48.2%                          ] 

 

[===========================48.2%                          ] 

 

[===========================48.2%                          ] 

 

[===========================48.4%                          ] 

 

[===========================48.6%                          ] 

 

[===========================48.8%                          ] 

 

[===========================48.8%                          ] 

 

[===========================49.1%                          ] 

 

[===========================49.1%                          ] 

 

[===========================49.1%                          ] 

 

[===========================49.1%                          ] 

 

[===========================49.2%                          ] 

 

[===========================49.3%                          ] 

 

[===========================49.4%                          ] 

 

[===========================49.5%                          ] 

 

[===========================49.7%                          ] 

 

[===========================49.8%                          ] 

 

[===========================49.8%                          ] 

 

[===========================50.0%                          ] 

 

[===========================50.0%                          ] 

 

[===========================50.0%                          ] 

 

[===========================50.3%                          ] 

 

[===========================50.6%                          ] 

 

[===========================50.8%                          ] 

 

[===========================51.0%                          ] 

 

[===========================51.2%                          ] 

 

[===========================51.4%                          ] 

 

[===========================51.5%                          ] 

 

[===========================51.8%                          ] 

 

[===========================52.0%                          ] 

 

[===========================52.2%                          ] 

 

[===========================52.2%                          ] 

 

[===========================52.5%                          ] 

 

[===========================52.5%                          ] 

 

[===========================52.9%                          ] 

 

[===========================53.4%                          ] 

 

[===========================53.8%                          ] 

 

[===========================54.1%                          ] 

 

[===========================54.6%                          ] 

 

[===========================54.7%                          ] 

 

[===========================54.9%                          ] 

 

[===========================55.1%                          ] 

 

[===========================55.2%                          ] 

 

[===========================55.6%                          ] 

 

[===========================55.6%                          ] 

 

[===========================55.6%                          ] 

 

[===========================55.6%                          ] 

 

[===========================55.7%                          ] 

 

[===========================55.7%                          ] 

 

[===========================55.7%                          ] 

 

[===========================55.8%                          ] 

 

[===========================55.8%                          ] 

 

[===========================55.8%                          ] 

 

[===========================55.8%                          ] 

 

[===========================55.8%                          ] 

 

[===========================55.8%                          ] 

 

[===========================55.9%                          ] 

 

[===========================55.9%                          ] 

 

[===========================55.9%                          ] 

 

[===========================56.0%                          ] 

 

[===========================56.0%                          ] 

 

[===========================56.0%                          ] 

 

[===========================56.1%                          ] 

 

[===========================56.1%                          ] 

 

[===========================56.1%                          ] 

 

[===========================56.2%                          ] 

 

[===========================56.2%                          ] 

 

[===========================56.2%                          ] 

 

[===========================56.2%                          ] 

 

[===========================56.2%                          ] 

 

[===========================56.2%                          ] 

 

[===========================56.3%                          ] 

 

[===========================56.3%                          ] 

 

[===========================56.3%                          ] 

 

[===========================56.4%                          ] 

 

[===========================56.4%                          ] 

 

[===========================56.4%                          ] 

 

[===========================56.5%                          ] 

 

[===========================56.5%                          ] 

 

[===========================56.5%                          ] 

 

[===========================56.5%                          ] 

 

[===========================56.5%                          ] 

 

[===========================56.5%                          ] 

 

[===========================56.6%                          ] 

 

[===========================56.6%                          ] 

 

[===========================56.6%                          ] 

 

[===========================56.6%                          ] 

 

[===========================56.7%                          ] 

 

[===========================56.7%                          ] 

 

[===========================56.8%                          ] 

 

[===========================56.8%                          ] 

 

[===========================56.8%                          ] 

 

[===========================56.8%                          ] 

 

[===========================56.8%                          ] 

 

[===========================56.8%                          ] 

 

[===========================56.9%=                         ] 

 

[===========================56.9%=                         ] 

 

[===========================56.9%=                         ] 

 

[===========================57.0%=                         ] 

 

[===========================57.0%=                         ] 

 

[===========================57.1%=                         ] 

 

[===========================57.1%=                         ] 

 

[===========================57.1%=                         ] 

 

[===========================57.1%=                         ] 

 

[===========================57.1%=                         ] 

 

[===========================57.1%=                         ] 

 

[===========================57.1%=                         ] 

 

[===========================57.3%=                         ] 

 

[===========================57.3%=                         ] 

 

[===========================57.3%=                         ] 

 

[===========================57.3%=                         ] 

 

[===========================57.7%=                         ] 

 

[===========================57.8%=                         ] 

 

[===========================58.0%=                         ] 

 

[===========================58.0%=                         ] 

 

[===========================58.1%=                         ] 

 

[===========================58.1%=                         ] 

 

[===========================58.2%=                         ] 

 

[===========================58.6%=                         ] 

 

[===========================58.6%==                        ] 

 

[===========================58.6%==                        ] 

 

[===========================58.7%==                        ] 

 

[===========================59.7%==                        ] 

 

[===========================59.8%==                        ] 

 

[===========================60.0%==                        ] 

 

[===========================60.1%==                        ] 

 

[===========================62.3%====                      ] 

 

[===========================84.9%=================         ] 

 

[==========================100.0%==========================] 

The restore operation completed successfully.

The operation completed successfully.

 

 

========= End of CMD: =========

 

 

========= SFC /scannow =========

 

 

 

Beginning system scan.  This process will take some time.

 

 

 

Beginning verification phase of system scan.

 

 

Verification 0% complete.

Verification 1% complete.

Verification 1% complete.

Verification 2% complete.

Verification 2% complete.

Verification 3% complete.

Verification 4% complete.

Verification 4% complete.

Verification 5% complete.

Verification 5% complete.

Verification 6% complete.

Verification 7% complete.

Verification 7% complete.

Verification 8% complete.

Verification 8% complete.

Verification 9% complete.

Verification 10% complete.

Verification 10% complete.

Verification 11% complete.

Verification 11% complete.

Verification 12% complete.

Verification 13% complete.

Verification 13% complete.

Verification 14% complete.

Verification 14% complete.

Verification 15% complete.

Verification 16% complete.

Verification 16% complete.

Verification 17% complete.

Verification 17% complete.

Verification 18% complete.

Verification 18% complete.

Verification 19% complete.

Verification 20% complete.

Verification 20% complete.

Verification 21% complete.

Verification 21% complete.

Verification 22% complete.

Verification 23% complete.

Verification 23% complete.

Verification 24% complete.

Verification 24% complete.

Verification 25% complete.

Verification 26% complete.

Verification 26% complete.

Verification 27% complete.

Verification 27% complete.

Verification 28% complete.

Verification 29% complete.

Verification 29% complete.

Verification 30% complete.

Verification 30% complete.

Verification 31% complete.

Verification 32% complete.

Verification 32% complete.

Verification 33% complete.

Verification 33% complete.

Verification 34% complete.

Verification 35% complete.

Verification 35% complete.

Verification 36% complete.

Verification 36% complete.

Verification 37% complete.

Verification 37% complete.

Verification 38% complete.

Verification 39% complete.

Verification 39% complete.

Verification 40% complete.

Verification 40% complete.

Verification 41% complete.

Verification 42% complete.

Verification 42% complete.

Verification 43% complete.

Verification 43% complete.

Verification 44% complete.

Verification 45% complete.

Verification 45% complete.

Verification 46% complete.

Verification 46% complete.

Verification 47% complete.

Verification 48% complete.

Verification 48% complete.

Verification 49% complete.

Verification 49% complete.

Verification 50% complete.

Verification 51% complete.

Verification 51% complete.

Verification 52% complete.

Verification 52% complete.

Verification 53% complete.

Verification 53% complete.

Verification 54% complete.

Verification 55% complete.

Verification 55% complete.

Verification 56% complete.

Verification 56% complete.

Verification 57% complete.

Verification 58% complete.

Verification 58% complete.

Verification 59% complete.

Verification 59% complete.

Verification 60% complete.

Verification 61% complete.

Verification 61% complete.

Verification 62% complete.

Verification 62% complete.

Verification 63% complete.

Verification 64% complete.

Verification 64% complete.

Verification 65% complete.

Verification 65% complete.

Verification 66% complete.

Verification 67% complete.

Verification 67% complete.

Verification 68% complete.

Verification 68% complete.

Verification 69% complete.

Verification 70% complete.

Verification 70% complete.

Verification 71% complete.

Verification 71% complete.

Verification 72% complete.

Verification 72% complete.

Verification 73% complete.

Verification 74% complete.

Verification 74% complete.

Verification 75% complete.

Verification 75% complete.

Verification 76% complete.

Verification 77% complete.

Verification 77% complete.

Verification 78% complete.

Verification 78% complete.

Verification 79% complete.

Verification 80% complete.

Verification 80% complete.

Verification 81% complete.

Verification 81% complete.

Verification 82% complete.

Verification 83% complete.

Verification 83% complete.

Verification 84% complete.

Verification 84% complete.

Verification 85% complete.

Verification 86% complete.

Verification 86% complete.

Verification 87% complete.

Verification 87% complete.

Verification 88% complete.

Verification 89% complete.

Verification 89% complete.

Verification 90% complete.

Verification 90% complete.

Verification 91% complete.

Verification 91% complete.

Verification 92% complete.

Verification 93% complete.

Verification 93% complete.

Verification 94% complete.

Verification 94% complete.

Verification 95% complete.

Verification 96% complete.

Verification 96% complete.

Verification 97% complete.

Verification 97% complete.

Verification 98% complete.

Verification 99% complete.

Verification 99% complete.

Verification 100% complete.

 

 

Windows Resource Protection found corrupt files and successfully repaired them.

 

For online repairs, details are included in the CBS log file located at

 

windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log. For offline

 

repairs, details are included in the log file provided by the /OFFLOGFILE flag.

 

 

 

========= End of CMD: =========

 

 

========= findstr  /c:"[SR]"  \windows\logs\cbs\cbs.log =========

 

2023-12-15 11:22:21, Info                  CSI    00000011 [SR] Verifying 100 components

2023-12-15 11:22:21, Info                  CSI    00000012 [SR] Beginning Verify and Repair transaction

2023-12-15 11:22:21, Info                  CSI    00000013 [SR] Verify complete

2023-12-15 11:22:21, Info                  CSI    00000014 [SR] Verifying 100 components

2023-12-15 11:22:21, Info                  CSI    00000015 [SR] Beginning Verify and Repair transaction

2023-12-15 11:22:21, Info                  CSI    00000016 [SR] Verify complete

2023-12-15 11:22:21, Info                  CSI    00000017 [SR] Verifying 100 components

2023-12-15 11:22:21, Info                  CSI    00000018 [SR] Beginning Verify and Repair transaction

2023-12-15 11:22:22, Info                  CSI    00000019 [SR] Verify complete

2023-12-15 11:22:22, Info                  CSI    0000001a [SR] Verifying 100 components

2023-12-15 11:22:22, Info                  CSI    0000001b [SR] Beginning Verify and Repair transaction

2023-12-15 11:22:22, Info                  CSI    0000001c [SR] Verify complete

2023-12-15 11:22:22, Info                  CSI    0000001d [SR] Verifying 100 components

2023-12-15 11:22:22, Info                  CSI    0000001e [SR] Beginning Verify and Repair transaction

2023-12-15 11:22:22, Info                  CSI    0000001f [SR] Verify complete

2023-12-15 11:22:22, Info                  CSI    00000020 [SR] Verifying 100 components

2023-12-15 11:22:22, Info                  CSI    00000021 [SR] Beginning Verify and Repair transaction

2023-12-15 11:22:23, Info                  CSI    00000022 [SR] Verify complete

2023-12-15 11:22:23, Info                  CSI    00000023 [SR] Verifying 100 components

2023-12-15 11:22:23, Info                  CSI    00000024 [SR] Beginning Verify and Repair transaction

2023-12-15 11:22:23, Info                  CSI    00000025 [SR] Verify complete

2023-12-15 11:22:23, Info                  CSI    00000026 [SR] Verifying 100 components

2023-12-15 11:22:23, Info                  CSI    00000027 [SR] Beginning Verify and Repair transaction

2023-12-15 11:22:23, Info                  CSI    00000028 [SR] Verify complete

2023-12-15 11:22:23, Info                  CSI    00000029 [SR] Verifying 100 components

2023-12-15 11:22:23, Info                  CSI    0000002a [SR] Beginning Verify and Repair transaction

2023-12-15 11:22:24, Info                  CSI    0000002b [SR] Verify complete

2023-12-15 11:22:24, Info                  CSI    0000002c [SR] Verifying 100 components

2023-12-15 11:22:24, Info                  CSI    0000002d [SR] Beginning Verify and Repair transaction

2023-12-15 11:22:26, Info                  CSI    0000002e [SR] Verify complete

2023-12-15 11:22:26, Info                  CSI    0000002f [SR] Verifying 100 components

2023-12-15 11:22:26, Info                  CSI    00000030 [SR] Beginning Verify and Repair transaction

2023-12-15 11:22:29, Info                  CSI    00000031 [SR] Verify complete

2023-12-15 11:22:29, Info                  CSI    00000032 [SR] Verifying 100 components

2023-12-15 11:22:29, Info                  CSI    00000033 [SR] Beginning Verify and Repair transaction

2023-12-15 11:22:32, Info                  CSI    00000034 [SR] Verify complete

2023-12-15 11:22:32, Info                  CSI    00000035 [SR] Verifying 100 components

2023-12-15 11:22:32, Info                  CSI    00000036 [SR] Beginning Verify and Repair transaction

2023-12-15 11:22:36, Info                  CSI    00000037 [SR] Verify complete

2023-12-15 11:22:36, Info                  CSI    00000038 [SR] Verifying 100 components

2023-12-15 11:22:36, Info                  CSI    00000039 [SR] Beginning Verify and Repair transaction

2023-12-15 11:22:45, Info                  CSI    0000003a [SR] Verify complete

2023-12-15 11:22:45, Info                  CSI    0000003b [SR] Verifying 100 components

2023-12-15 11:22:45, Info                  CSI    0000003c [SR] Beginning Verify and Repair transaction

2023-12-15 11:22:49, Info                  CSI    0000003d [SR] Verify complete

2023-12-15 11:22:49, Info                  CSI    0000003e [SR] Verifying 100 components

2023-12-15 11:22:49, Info                  CSI    0000003f [SR] Beginning Verify and Repair transaction

2023-12-15 11:22:51, Info                  CSI    00000040 [SR] Verify complete

2023-12-15 11:22:51, Info                  CSI    00000041 [SR] Verifying 100 components

2023-12-15 11:22:51, Info                  CSI    00000042 [SR] Beginning Verify and Repair transaction

2023-12-15 11:22:52, Info                  CSI    00000043 [SR] Verify complete

2023-12-15 11:22:52, Info                  CSI    00000044 [SR] Verifying 100 components

2023-12-15 11:22:52, Info                  CSI    00000045 [SR] Beginning Verify and Repair transaction

2023-12-15 11:22:54, Info                  CSI    00000046 [SR] Verify complete

2023-12-15 11:22:54, Info                  CSI    00000047 [SR] Verifying 100 components

2023-12-15 11:22:54, Info                  CSI    00000048 [SR] Beginning Verify and Repair transaction

2023-12-15 11:22:56, Info                  CSI    00000049 [SR] Verify complete

2023-12-15 11:22:56, Info                  CSI    0000004a [SR] Verifying 100 components

2023-12-15 11:22:56, Info                  CSI    0000004b [SR] Beginning Verify and Repair transaction

2023-12-15 11:22:57, Info                  CSI    0000004c [SR] Verify complete

2023-12-15 11:22:57, Info                  CSI    0000004d [SR] Verifying 100 components

2023-12-15 11:22:57, Info                  CSI    0000004e [SR] Beginning Verify and Repair transaction

2023-12-15 11:22:59, Info                  CSI    0000004f [SR] Verify complete

2023-12-15 11:22:59, Info                  CSI    00000050 [SR] Verifying 100 components

2023-12-15 11:22:59, Info                  CSI    00000051 [SR] Beginning Verify and Repair transaction

2023-12-15 11:23:01, Info                  CSI    00000052 [SR] Verify complete

2023-12-15 11:23:01, Info                  CSI    00000053 [SR] Verifying 100 components

2023-12-15 11:23:01, Info                  CSI    00000054 [SR] Beginning Verify and Repair transaction

2023-12-15 11:23:05, Info                  CSI    00000055 [SR] Verify complete

2023-12-15 11:23:05, Info                  CSI    00000056 [SR] Verifying 100 components

2023-12-15 11:23:05, Info                  CSI    00000057 [SR] Beginning Verify and Repair transaction

2023-12-15 11:23:08, Info                  CSI    00000058 [SR] Verify complete

2023-12-15 11:23:08, Info                  CSI    00000059 [SR] Verifying 100 components

2023-12-15 11:23:08, Info                  CSI    0000005a [SR] Beginning Verify and Repair transaction

2023-12-15 11:23:11, Info                  CSI    0000005b [SR] Verify complete

2023-12-15 11:23:11, Info                  CSI    0000005c [SR] Verifying 100 components

2023-12-15 11:23:11, Info                  CSI    0000005d [SR] Beginning Verify and Repair transaction

2023-12-15 11:23:15, Info                  CSI    0000005e [SR] Verify complete

2023-12-15 11:23:15, Info                  CSI    0000005f [SR] Verifying 100 components

2023-12-15 11:23:15, Info                  CSI    00000060 [SR] Beginning Verify and Repair transaction

2023-12-15 11:23:18, Info                  CSI    00000061 [SR] Verify complete

2023-12-15 11:23:18, Info                  CSI    00000062 [SR] Verifying 100 components

2023-12-15 11:23:18, Info                  CSI    00000063 [SR] Beginning Verify and Repair transaction

2023-12-15 11:23:21, Info                  CSI    00000066 [SR] Verify complete

2023-12-15 11:23:21, Info                  CSI    00000067 [SR] Verifying 100 components

2023-12-15 11:23:21, Info                  CSI    00000068 [SR] Beginning Verify and Repair transaction

2023-12-15 11:23:27, Info                  CSI    0000006a [SR] Verify complete

2023-12-15 11:23:27, Info                  CSI    0000006b [SR] Verifying 100 components

2023-12-15 11:23:27, Info                  CSI    0000006c [SR] Beginning Verify and Repair transaction

2023-12-15 11:23:29, Info                  CSI    0000006d [SR] Verify complete

2023-12-15 11:23:29, Info                  CSI    0000006e [SR] Verifying 100 components

2023-12-15 11:23:29, Info                  CSI    0000006f [SR] Beginning Verify and Repair transaction

2023-12-15 11:23:31, Info                  CSI    00000070 [SR] Verify complete

2023-12-15 11:23:31, Info                  CSI    00000071 [SR] Verifying 100 components

2023-12-15 11:23:31, Info                  CSI    00000072 [SR] Beginning Verify and Repair transaction

2023-12-15 11:23:33, Info                  CSI    00000073 [SR] Verify complete

2023-12-15 11:23:33, Info                  CSI    00000074 [SR] Verifying 100 components

2023-12-15 11:23:33, Info                  CSI    00000075 [SR] Beginning Verify and Repair transaction

2023-12-15 11:23:35, Info                  CSI    00000076 [SR] Verify complete

2023-12-15 11:23:35, Info                  CSI    00000077 [SR] Verifying 100 components

2023-12-15 11:23:35, Info                  CSI    00000078 [SR] Beginning Verify and Repair transaction

2023-12-15 11:23:37, Info                  CSI    00000079 [SR] Verify complete

2023-12-15 11:23:37, Info                  CSI    0000007a [SR] Verifying 100 components

2023-12-15 11:23:37, Info                  CSI    0000007b [SR] Beginning Verify and Repair transaction

2023-12-15 11:23:39, Info                  CSI    0000007c [SR] Verify complete

2023-12-15 11:23:39, Info                  CSI    0000007d [SR] Verifying 100 components

2023-12-15 11:23:39, Info                  CSI    0000007e [SR] Beginning Verify and Repair transaction

2023-12-15 11:23:40, Info                  CSI    0000007f [SR] Verify complete

2023-12-15 11:23:40, Info                  CSI    00000080 [SR] Verifying 100 components

2023-12-15 11:23:40, Info                  CSI    00000081 [SR] Beginning Verify and Repair transaction

2023-12-15 11:23:41, Info                  CSI    00000082 [SR] Verify complete

2023-12-15 11:23:41, Info                  CSI    00000083 [SR] Verifying 100 components

2023-12-15 11:23:41, Info                  CSI    00000084 [SR] Beginning Verify and Repair transaction

2023-12-15 11:23:44, Info                  CSI    00000085 [SR] Verify complete

2023-12-15 11:23:44, Info                  CSI    00000086 [SR] Verifying 100 components

2023-12-15 11:23:44, Info                  CSI    00000087 [SR] Beginning Verify and Repair transaction

2023-12-15 11:23:45, Info                  CSI    00000088 [SR] Verify complete

2023-12-15 11:23:46, Info                  CSI    00000089 [SR] Verifying 100 components

2023-12-15 11:23:46, Info                  CSI    0000008a [SR] Beginning Verify and Repair transaction

2023-12-15 11:23:48, Info                  CSI    0000008b [SR] Verify complete

2023-12-15 11:23:48, Info                  CSI    0000008c [SR] Verifying 100 components

2023-12-15 11:23:48, Info                  CSI    0000008d [SR] Beginning Verify and Repair transaction

2023-12-15 11:23:50, Info                  CSI    0000008e [SR] Verify complete

2023-12-15 11:23:50, Info                  CSI    0000008f [SR] Verifying 100 components

2023-12-15 11:23:50, Info                  CSI    00000090 [SR] Beginning Verify and Repair transaction

2023-12-15 11:23:53, Info                  CSI    00000092 [SR] Verify complete

2023-12-15 11:23:53, Info                  CSI    00000093 [SR] Verifying 100 components

2023-12-15 11:23:53, Info                  CSI    00000094 [SR] Beginning Verify and Repair transaction

2023-12-15 11:23:55, Info                  CSI    00000095 [SR] Verify complete

2023-12-15 11:23:55, Info                  CSI    00000096 [SR] Verifying 100 components

2023-12-15 11:23:55, Info                  CSI    00000097 [SR] Beginning Verify and Repair transaction

2023-12-15 11:24:00, Info                  CSI    00000098 [SR] Verify complete

2023-12-15 11:24:00, Info                  CSI    00000099 [SR] Verifying 100 components

2023-12-15 11:24:00, Info                  CSI    0000009a [SR] Beginning Verify and Repair transaction

2023-12-15 11:24:04, Info                  CSI    0000009f [SR] Verify complete

2023-12-15 11:24:04, Info                  CSI    000000a0 [SR] Verifying 100 components

2023-12-15 11:24:04, Info                  CSI    000000a1 [SR] Beginning Verify and Repair transaction

2023-12-15 11:24:09, Info                  CSI    000000a2 [SR] Verify complete

2023-12-15 11:24:09, Info                  CSI    000000a3 [SR] Verifying 100 components

2023-12-15 11:24:09, Info                  CSI    000000a4 [SR] Beginning Verify and Repair transaction

2023-12-15 11:24:13, Info                  CSI    000000a5 [SR] Verify complete

2023-12-15 11:24:13, Info                  CSI    000000a6 [SR] Verifying 100 components

2023-12-15 11:24:13, Info                  CSI    000000a7 [SR] Beginning Verify and Repair transaction

2023-12-15 11:24:15, Info                  CSI    000000a8 [SR] Verify complete

2023-12-15 11:24:16, Info                  CSI    000000a9 [SR] Verifying 100 components

2023-12-15 11:24:16, Info                  CSI    000000aa [SR] Beginning Verify and Repair transaction

2023-12-15 11:24:18, Info                  CSI    000000ab [SR] Verify complete

2023-12-15 11:24:18, Info                  CSI    000000ac [SR] Verifying 100 components

2023-12-15 11:24:18, Info                  CSI    000000ad [SR] Beginning Verify and Repair transaction

2023-12-15 11:24:25, Info                  CSI    000000ae [SR] Verify complete

2023-12-15 11:24:25, Info                  CSI    000000af [SR] Verifying 100 components

2023-12-15 11:24:25, Info                  CSI    000000b0 [SR] Beginning Verify and Repair transaction

2023-12-15 11:24:27, Info                  CSI    000000b1 [SR] Verify complete

2023-12-15 11:24:27, Info                  CSI    000000b2 [SR] Verifying 100 components

2023-12-15 11:24:27, Info                  CSI    000000b3 [SR] Beginning Verify and Repair transaction

2023-12-15 11:24:29, Info                  CSI    000000b4 [SR] Verify complete

2023-12-15 11:24:29, Info                  CSI    000000b5 [SR] Verifying 100 components

2023-12-15 11:24:29, Info                  CSI    000000b6 [SR] Beginning Verify and Repair transaction

2023-12-15 11:24:32, Info                  CSI    000000b7 [SR] Verify complete

2023-12-15 11:24:32, Info                  CSI    000000b8 [SR] Verifying 100 components

2023-12-15 11:24:32, Info                  CSI    000000b9 [SR] Beginning Verify and Repair transaction

2023-12-15 11:24:36, Info                  CSI    000000ba [SR] Verify complete

2023-12-15 11:24:36, Info                  CSI    000000bb [SR] Verifying 100 components

2023-12-15 11:24:36, Info                  CSI    000000bc [SR] Beginning Verify and Repair transaction

2023-12-15 11:24:41, Info                  CSI    000000be [SR] Verify complete

2023-12-15 11:24:41, Info                  CSI    000000bf [SR] Verifying 100 components

2023-12-15 11:24:41, Info                  CSI    000000c0 [SR] Beginning Verify and Repair transaction

2023-12-15 11:24:43, Info                  CSI    000000c2 [SR] Verify complete

2023-12-15 11:24:43, Info                  CSI    000000c3 [SR] Verifying 100 components

2023-12-15 11:24:43, Info                  CSI    000000c4 [SR] Beginning Verify and Repair transaction

2023-12-15 11:24:47, Info                  CSI    000000c6 [SR] Verify complete

2023-12-15 11:24:47, Info                  CSI    000000c7 [SR] Verifying 100 components

2023-12-15 11:24:47, Info                  CSI    000000c8 [SR] Beginning Verify and Repair transaction

2023-12-15 11:24:48, Info                  CSI    000000c9 [SR] Verify complete

2023-12-15 11:24:48, Info                  CSI    000000ca [SR] Verifying 100 components

2023-12-15 11:24:48, Info                  CSI    000000cb [SR] Beginning Verify and Repair transaction

2023-12-15 11:24:52, Info                  CSI    000000cc [SR] Verify complete

2023-12-15 11:24:52, Info                  CSI    000000cd [SR] Verifying 100 components

2023-12-15 11:24:52, Info                  CSI    000000ce [SR] Beginning Verify and Repair transaction

2023-12-15 11:25:00, Info                  CSI    000000d0 [SR] Verify complete

2023-12-15 11:25:00, Info                  CSI    000000d1 [SR] Verifying 100 components

2023-12-15 11:25:00, Info                  CSI    000000d2 [SR] Beginning Verify and Repair transaction

2023-12-15 11:25:04, Info                  CSI    000000d3 [SR] Verify complete

2023-12-15 11:25:04, Info                  CSI    000000d4 [SR] Verifying 100 components

2023-12-15 11:25:04, Info                  CSI    000000d5 [SR] Beginning Verify and Repair transaction

2023-12-15 11:25:07, Info                  CSI    000000d6 [SR] Verify complete

2023-12-15 11:25:07, Info                  CSI    000000d7 [SR] Verifying 100 components

2023-12-15 11:25:07, Info                  CSI    000000d8 [SR] Beginning Verify and Repair transaction

2023-12-15 11:25:10, Info                  CSI    000000d9 [SR] Verify complete

2023-12-15 11:25:10, Info                  CSI    000000da [SR] Verifying 100 components

2023-12-15 11:25:10, Info                  CSI    000000db [SR] Beginning Verify and Repair transaction

2023-12-15 11:25:12, Info                  CSI    000000dc [SR] Verify complete

2023-12-15 11:25:12, Info                  CSI    000000dd [SR] Verifying 100 components

2023-12-15 11:25:12, Info                  CSI    000000de [SR] Beginning Verify and Repair transaction

2023-12-15 11:25:15, Info                  CSI    000000df [SR] Verify complete

2023-12-15 11:25:15, Info                  CSI    000000e0 [SR] Verifying 100 components

2023-12-15 11:25:15, Info                  CSI    000000e1 [SR] Beginning Verify and Repair transaction

2023-12-15 11:25:18, Info                  CSI    000000e3 [SR] Verify complete

2023-12-15 11:25:19, Info                  CSI    000000e4 [SR] Verifying 100 components

2023-12-15 11:25:19, Info                  CSI    000000e5 [SR] Beginning Verify and Repair transaction

2023-12-15 11:25:23, Info                  CSI    000000e6 [SR] Verify complete

2023-12-15 11:25:23, Info                  CSI    000000e7 [SR] Verifying 100 components

2023-12-15 11:25:23, Info                  CSI    000000e8 [SR] Beginning Verify and Repair transaction

2023-12-15 11:25:26, Info                  CSI    000000e9 [SR] Verify complete

2023-12-15 11:25:26, Info                  CSI    000000ea [SR] Verifying 100 components

2023-12-15 11:25:26, Info                  CSI    000000eb [SR] Beginning Verify and Repair transaction

2023-12-15 11:25:29, Info                  CSI    000000ec [SR] Verify complete

2023-12-15 11:25:29, Info                  CSI    000000ed [SR] Verifying 100 components

2023-12-15 11:25:29, Info                  CSI    000000ee [SR] Beginning Verify and Repair transaction

2023-12-15 11:25:32, Info                  CSI    000000ef [SR] Verify complete

2023-12-15 11:25:32, Info                  CSI    000000f0 [SR] Verifying 100 components

2023-12-15 11:25:32, Info                  CSI    000000f1 [SR] Beginning Verify and Repair transaction

2023-12-15 11:25:34, Info                  CSI    000000f2 [SR] Verify complete

2023-12-15 11:25:35, Info                  CSI    000000f3 [SR] Verifying 100 components

2023-12-15 11:25:35, Info                  CSI    000000f4 [SR] Beginning Verify and Repair transaction

2023-12-15 11:25:37, Info                  CSI    000000f5 [SR] Verify complete

2023-12-15 11:25:38, Info                  CSI    000000f6 [SR] Verifying 100 components

2023-12-15 11:25:38, Info                  CSI    000000f7 [SR] Beginning Verify and Repair transaction

2023-12-15 11:25:41, Info                  CSI    000000f8 [SR] Verify complete

2023-12-15 11:25:41, Info                  CSI    000000f9 [SR] Verifying 100 components

2023-12-15 11:25:41, Info                  CSI    000000fa [SR] Beginning Verify and Repair transaction

2023-12-15 11:25:43, Info                  CSI    000000fb [SR] Verify complete

2023-12-15 11:25:43, Info                  CSI    000000fc [SR] Verifying 100 components

2023-12-15 11:25:43, Info                  CSI    000000fd [SR] Beginning Verify and Repair transaction

2023-12-15 11:25:45, Info                  CSI    000000ff [SR] Verify complete

2023-12-15 11:25:46, Info                  CSI    00000100 [SR] Verifying 100 components

2023-12-15 11:25:46, Info                  CSI    00000101 [SR] Beginning Verify and Repair transaction

2023-12-15 11:25:48, Info                  CSI    00000102 [SR] Verify complete

2023-12-15 11:25:48, Info                  CSI    00000103 [SR] Verifying 100 components

2023-12-15 11:25:48, Info                  CSI    00000104 [SR] Beginning Verify and Repair transaction

2023-12-15 11:25:53, Info                  CSI    00000105 [SR] Verify complete

2023-12-15 11:25:53, Info                  CSI    00000106 [SR] Verifying 100 components

2023-12-15 11:25:53, Info                  CSI    00000107 [SR] Beginning Verify and Repair transaction

2023-12-15 11:25:56, Info                  CSI    00000108 [SR] Verify complete

2023-12-15 11:25:56, Info                  CSI    00000109 [SR] Verifying 100 components

2023-12-15 11:25:56, Info                  CSI    0000010a [SR] Beginning Verify and Repair transaction

2023-12-15 11:26:00, Info                  CSI    0000010b [SR] Verify complete

2023-12-15 11:26:01, Info                  CSI    0000010c [SR] Verifying 100 components

2023-12-15 11:26:01, Info                  CSI    0000010d [SR] Beginning Verify and Repair transaction

2023-12-15 11:26:04, Info                  CSI    0000010e [SR] Verify complete

2023-12-15 11:26:04, Info                  CSI    0000010f [SR] Verifying 100 components

2023-12-15 11:26:04, Info                  CSI    00000110 [SR] Beginning Verify and Repair transaction

2023-12-15 11:26:07, Info                  CSI    00000111 [SR] Verify complete

2023-12-15 11:26:07, Info                  CSI    00000112 [SR] Verifying 100 components

2023-12-15 11:26:07, Info                  CSI    00000113 [SR] Beginning Verify and Repair transaction

2023-12-15 11:26:11, Info                  CSI    00000115 [SR] Verify complete

2023-12-15 11:26:11, Info                  CSI    00000116 [SR] Verifying 100 components

2023-12-15 11:26:11, Info                  CSI    00000117 [SR] Beginning Verify and Repair transaction

2023-12-15 11:26:21, Info                  CSI    00000118 [SR] Repairing file \??\C:\WINDOWS\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\Assets\Fonts\\SetMDL2.ttf from store

2023-12-15 11:26:21, Info                  CSI    00000119 [SR] Repairing file \??\C:\WINDOWS\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\Assets\Fonts\\WDefMDL2.ttf from store

2023-12-15 11:26:21, Info                  CSI    0000011b [SR] Verify complete

2023-12-15 11:26:22, Info                  CSI    0000011c [SR] Verifying 100 components

2023-12-15 11:26:22, Info                  CSI    0000011d [SR] Beginning Verify and Repair transaction

2023-12-15 11:26:26, Info                  CSI    0000011e [SR] Verify complete

2023-12-15 11:26:26, Info                  CSI    0000011f [SR] Verifying 100 components

2023-12-15 11:26:26, Info                  CSI    00000120 [SR] Beginning Verify and Repair transaction

2023-12-15 11:26:32, Info                  CSI    00000125 [SR] Verify complete

2023-12-15 11:26:33, Info                  CSI    00000126 [SR] Verifying 100 components

2023-12-15 11:26:33, Info                  CSI    00000127 [SR] Beginning Verify and Repair transaction

2023-12-15 11:26:37, Info                  CSI    00000128 [SR] Verify complete

2023-12-15 11:26:37, Info                  CSI    00000129 [SR] Verifying 100 components

2023-12-15 11:26:37, Info                  CSI    0000012a [SR] Beginning Verify and Repair transaction

2023-12-15 11:26:40, Info                  CSI    0000012b [SR] Verify complete

2023-12-15 11:26:40, Info                  CSI    0000012c [SR] Verifying 100 components

2023-12-15 11:26:40, Info                  CSI    0000012d [SR] Beginning Verify and Repair transaction

2023-12-15 11:26:43, Info                  CSI    0000012e [SR] Verify complete

2023-12-15 11:26:43, Info                  CSI    0000012f [SR] Verifying 100 components

2023-12-15 11:26:43, Info                  CSI    00000130 [SR] Beginning Verify and Repair transaction

2023-12-15 11:26:47, Info                  CSI    00000131 [SR] Verify complete

2023-12-15 11:26:47, Info                  CSI    00000132 [SR] Verifying 100 components

2023-12-15 11:26:47, Info                  CSI    00000133 [SR] Beginning Verify and Repair transaction

2023-12-15 11:26:52, Info                  CSI    00000134 [SR] Verify complete

2023-12-15 11:26:53, Info                  CSI    00000135 [SR] Verifying 100 components

2023-12-15 11:26:53, Info                  CSI    00000136 [SR] Beginning Verify and Repair transaction

2023-12-15 11:26:55, Info                  CSI    00000137 [SR] Verify complete

2023-12-15 11:26:55, Info                  CSI    00000138 [SR] Verifying 100 components

2023-12-15 11:26:55, Info                  CSI    00000139 [SR] Beginning Verify and Repair transaction

2023-12-15 11:26:58, Info                  CSI    0000013a [SR] Verify complete

2023-12-15 11:26:58, Info                  CSI    0000013b [SR] Verifying 100 components

2023-12-15 11:26:58, Info                  CSI    0000013c [SR] Beginning Verify and Repair transaction

2023-12-15 11:27:03, Info                  CSI    0000013e [SR] Verify complete

2023-12-15 11:27:03, Info                  CSI    0000013f [SR] Verifying 100 components

2023-12-15 11:27:03, Info                  CSI    00000140 [SR] Beginning Verify and Repair transaction

2023-12-15 11:27:07, Info                  CSI    00000142 [SR] Verify complete

2023-12-15 11:27:07, Info                  CSI    00000143 [SR] Verifying 100 components

2023-12-15 11:27:07, Info                  CSI    00000144 [SR] Beginning Verify and Repair transaction

2023-12-15 11:27:10, Info                  CSI    00000145 [SR] Verify complete

2023-12-15 11:27:10, Info                  CSI    00000146 [SR] Verifying 100 components

2023-12-15 11:27:10, Info                  CSI    00000147 [SR] Beginning Verify and Repair transaction

2023-12-15 11:27:12, Info                  CSI    00000148 [SR] Verify complete

2023-12-15 11:27:12, Info                  CSI    00000149 [SR] Verifying 100 components

2023-12-15 11:27:12, Info                  CSI    0000014a [SR] Beginning Verify and Repair transaction

2023-12-15 11:27:13, Info                  CSI    0000014b [SR] Verify complete

2023-12-15 11:27:14, Info                  CSI    0000014c [SR] Verifying 100 components

2023-12-15 11:27:14, Info                  CSI    0000014d [SR] Beginning Verify and Repair transaction

2023-12-15 11:27:16, Info                  CSI    0000014e [SR] Verify complete

2023-12-15 11:27:16, Info                  CSI    0000014f [SR] Verifying 100 components

2023-12-15 11:27:16, Info                  CSI    00000150 [SR] Beginning Verify and Repair transaction

2023-12-15 11:27:19, Info                  CSI    00000151 [SR] Verify complete

2023-12-15 11:27:19, Info                  CSI    00000152 [SR] Verifying 100 components

2023-12-15 11:27:19, Info                  CSI    00000153 [SR] Beginning Verify and Repair transaction

2023-12-15 11:27:24, Info                  CSI    00000154 [SR] Verify complete

2023-12-15 11:27:24, Info                  CSI    00000155 [SR] Verifying 100 components

2023-12-15 11:27:24, Info                  CSI    00000156 [SR] Beginning Verify and Repair transaction

2023-12-15 11:27:27, Info                  CSI    00000157 [SR] Verify complete

2023-12-15 11:27:27, Info                  CSI    00000158 [SR] Verifying 100 components

2023-12-15 11:27:27, Info                  CSI    00000159 [SR] Beginning Verify and Repair transaction

2023-12-15 11:27:31, Info                  CSI    0000015b [SR] Verify complete

2023-12-15 11:27:31, Info                  CSI    0000015c [SR] Verifying 100 components

2023-12-15 11:27:31, Info                  CSI    0000015d [SR] Beginning Verify and Repair transaction

2023-12-15 11:27:34, Info                  CSI    0000015e [SR] Verify complete

2023-12-15 11:27:34, Info                  CSI    0000015f [SR] Verifying 100 components

2023-12-15 11:27:34, Info                  CSI    00000160 [SR] Beginning Verify and Repair transaction

2023-12-15 11:27:37, Info                  CSI    00000161 [SR] Verify complete

2023-12-15 11:27:37, Info                  CSI    00000162 [SR] Verifying 100 components

2023-12-15 11:27:37, Info                  CSI    00000163 [SR] Beginning Verify and Repair transaction

2023-12-15 11:27:39, Info                  CSI    00000164 [SR] Verify complete

2023-12-15 11:27:39, Info                  CSI    00000165 [SR] Verifying 100 components

2023-12-15 11:27:39, Info                  CSI    00000166 [SR] Beginning Verify and Repair transaction

2023-12-15 11:27:41, Info                  CSI    00000167 [SR] Verify complete

2023-12-15 11:27:41, Info                  CSI    00000168 [SR] Verifying 100 components

2023-12-15 11:27:41, Info                  CSI    00000169 [SR] Beginning Verify and Repair transaction

2023-12-15 11:27:44, Info                  CSI    0000016a [SR] Verify complete

2023-12-15 11:27:44, Info                  CSI    0000016b [SR] Verifying 100 components

2023-12-15 11:27:44, Info                  CSI    0000016c [SR] Beginning Verify and Repair transaction

2023-12-15 11:27:46, Info                  CSI    0000016d [SR] Verify complete

2023-12-15 11:27:46, Info                  CSI    0000016e [SR] Verifying 100 components

2023-12-15 11:27:46, Info                  CSI    0000016f [SR] Beginning Verify and Repair transaction

2023-12-15 11:27:48, Info                  CSI    00000170 [SR] Verify complete

2023-12-15 11:27:48, Info                  CSI    00000171 [SR] Verifying 100 components

2023-12-15 11:27:48, Info                  CSI    00000172 [SR] Beginning Verify and Repair transaction

2023-12-15 11:27:50, Info                  CSI    00000173 [SR] Verify complete

2023-12-15 11:27:50, Info                  CSI    00000174 [SR] Verifying 100 components

2023-12-15 11:27:50, Info                  CSI    00000175 [SR] Beginning Verify and Repair transaction

2023-12-15 11:27:52, Info                  CSI    00000176 [SR] Verify complete

2023-12-15 11:27:52, Info                  CSI    00000177 [SR] Verifying 100 components

2023-12-15 11:27:52, Info                  CSI    00000178 [SR] Beginning Verify and Repair transaction

2023-12-15 11:27:54, Info                  CSI    00000179 [SR] Verify complete

2023-12-15 11:27:54, Info                  CSI    0000017a [SR] Verifying 100 components

2023-12-15 11:27:54, Info                  CSI    0000017b [SR] Beginning Verify and Repair transaction

2023-12-15 11:27:55, Info                  CSI    0000017d [SR] Verify complete

2023-12-15 11:27:56, Info                  CSI    0000017e [SR] Verifying 100 components

2023-12-15 11:27:56, Info                  CSI    0000017f [SR] Beginning Verify and Repair transaction

2023-12-15 11:27:57, Info                  CSI    00000180 [SR] Verify complete

2023-12-15 11:27:57, Info                  CSI    00000181 [SR] Verifying 100 components

2023-12-15 11:27:57, Info                  CSI    00000182 [SR] Beginning Verify and Repair transaction

2023-12-15 11:27:58, Info                  CSI    00000183 [SR] Verify complete

2023-12-15 11:27:59, Info                  CSI    00000184 [SR] Verifying 100 components

2023-12-15 11:27:59, Info                  CSI    00000185 [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:00, Info                  CSI    00000186 [SR] Verify complete

2023-12-15 11:28:01, Info                  CSI    00000187 [SR] Verifying 100 components

2023-12-15 11:28:01, Info                  CSI    00000188 [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:02, Info                  CSI    00000189 [SR] Verify complete

2023-12-15 11:28:02, Info                  CSI    0000018a [SR] Verifying 100 components

2023-12-15 11:28:02, Info                  CSI    0000018b [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:04, Info                  CSI    0000018c [SR] Verify complete

2023-12-15 11:28:05, Info                  CSI    0000018d [SR] Verifying 100 components

2023-12-15 11:28:05, Info                  CSI    0000018e [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:06, Info                  CSI    0000018f [SR] Verify complete

2023-12-15 11:28:06, Info                  CSI    00000190 [SR] Verifying 100 components

2023-12-15 11:28:06, Info                  CSI    00000191 [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:08, Info                  CSI    00000192 [SR] Verify complete

2023-12-15 11:28:08, Info                  CSI    00000193 [SR] Verifying 100 components

2023-12-15 11:28:08, Info                  CSI    00000194 [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:10, Info                  CSI    00000195 [SR] Verify complete

2023-12-15 11:28:10, Info                  CSI    00000196 [SR] Verifying 100 components

2023-12-15 11:28:10, Info                  CSI    00000197 [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:12, Info                  CSI    00000198 [SR] Verify complete

2023-12-15 11:28:12, Info                  CSI    00000199 [SR] Verifying 100 components

2023-12-15 11:28:12, Info                  CSI    0000019a [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:14, Info                  CSI    0000019c [SR] Verify complete

2023-12-15 11:28:14, Info                  CSI    0000019d [SR] Verifying 100 components

2023-12-15 11:28:14, Info                  CSI    0000019e [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:17, Info                  CSI    0000019f [SR] Verify complete

2023-12-15 11:28:17, Info                  CSI    000001a0 [SR] Verifying 100 components

2023-12-15 11:28:17, Info                  CSI    000001a1 [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:20, Info                  CSI    000001a2 [SR] Verify complete

2023-12-15 11:28:20, Info                  CSI    000001a3 [SR] Verifying 100 components

2023-12-15 11:28:20, Info                  CSI    000001a4 [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:23, Info                  CSI    000001a6 [SR] Verify complete

2023-12-15 11:28:23, Info                  CSI    000001a7 [SR] Verifying 100 components

2023-12-15 11:28:23, Info                  CSI    000001a8 [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:26, Info                  CSI    000001aa [SR] Verify complete

2023-12-15 11:28:26, Info                  CSI    000001ab [SR] Verifying 100 components

2023-12-15 11:28:26, Info                  CSI    000001ac [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:28, Info                  CSI    000001ad [SR] Verify complete

2023-12-15 11:28:29, Info                  CSI    000001ae [SR] Verifying 100 components

2023-12-15 11:28:29, Info                  CSI    000001af [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:31, Info                  CSI    000001b0 [SR] Verify complete

2023-12-15 11:28:31, Info                  CSI    000001b1 [SR] Verifying 100 components

2023-12-15 11:28:31, Info                  CSI    000001b2 [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:33, Info                  CSI    000001b3 [SR] Verify complete

2023-12-15 11:28:33, Info                  CSI    000001b4 [SR] Verifying 100 components

2023-12-15 11:28:33, Info                  CSI    000001b5 [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:36, Info                  CSI    000001b7 [SR] Verify complete

2023-12-15 11:28:36, Info                  CSI    000001b8 [SR] Verifying 100 components

2023-12-15 11:28:36, Info                  CSI    000001b9 [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:39, Info                  CSI    000001be [SR] Verify complete

2023-12-15 11:28:39, Info                  CSI    000001bf [SR] Verifying 100 components

2023-12-15 11:28:39, Info                  CSI    000001c0 [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:41, Info                  CSI    000001c1 [SR] Verify complete

2023-12-15 11:28:41, Info                  CSI    000001c2 [SR] Verifying 100 components

2023-12-15 11:28:41, Info                  CSI    000001c3 [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:43, Info                  CSI    000001c4 [SR] Verify complete

2023-12-15 11:28:43, Info                  CSI    000001c5 [SR] Verifying 100 components

2023-12-15 11:28:43, Info                  CSI    000001c6 [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:44, Info                  CSI    000001c7 [SR] Verify complete

2023-12-15 11:28:44, Info                  CSI    000001c8 [SR] Verifying 100 components

2023-12-15 11:28:44, Info                  CSI    000001c9 [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:45, Info                  CSI    000001ca [SR] Verify complete

2023-12-15 11:28:45, Info                  CSI    000001cb [SR] Verifying 100 components

2023-12-15 11:28:45, Info                  CSI    000001cc [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:49, Info                  CSI    000001cd [SR] Verify complete

2023-12-15 11:28:49, Info                  CSI    000001ce [SR] Verifying 100 components

2023-12-15 11:28:49, Info                  CSI    000001cf [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:51, Info                  CSI    000001d0 [SR] Verify complete

2023-12-15 11:28:51, Info                  CSI    000001d1 [SR] Verifying 100 components

2023-12-15 11:28:51, Info                  CSI    000001d2 [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:53, Info                  CSI    000001d3 [SR] Verify complete

2023-12-15 11:28:53, Info                  CSI    000001d4 [SR] Verifying 100 components

2023-12-15 11:28:53, Info                  CSI    000001d5 [SR] Beginning Verify and Repair transaction

2023-12-15 11:28:55, Info                  CSI    000001d6 [SR] Verify complete

2023-12-15 11:28:55, Info                  CSI    000001d7 [SR] Verifying 100 components

2023-12-15 11:28:55, Info                  CSI    000001d8 [SR] Beginning Verify and Repair transaction

2023-12-15 11:29:00, Info                  CSI    000001d9 [SR] Verify complete

2023-12-15 11:29:00, Info                  CSI    000001da [SR] Verifying 100 components

2023-12-15 11:29:00, Info                  CSI    000001db [SR] Beginning Verify and Repair transaction

2023-12-15 11:29:07, Info                  CSI    000001dc [SR] Verify complete

2023-12-15 11:29:07, Info                  CSI    000001dd [SR] Verifying 100 components

2023-12-15 11:29:07, Info                  CSI    000001de [SR] Beginning Verify and Repair transaction

2023-12-15 11:29:10, Info                  CSI    000001df [SR] Repairing file \??\C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\\OneDrive.lnk from store

2023-12-15 11:29:10, Info                  CSI    000001e0 [SR] Verify complete

2023-12-15 11:29:10, Info                  CSI    000001e1 [SR] Verifying 100 components

2023-12-15 11:29:10, Info                  CSI    000001e2 [SR] Beginning Verify and Repair transaction

2023-12-15 11:29:12, Info                  CSI    000001e3 [SR] Verify complete

2023-12-15 11:29:12, Info                  CSI    000001e4 [SR] Verifying 100 components

2023-12-15 11:29:12, Info                  CSI    000001e5 [SR] Beginning Verify and Repair transaction

2023-12-15 11:29:16, Info                  CSI    000001e6 [SR] Verify complete

2023-12-15 11:29:16, Info                  CSI    000001e7 [SR] Verifying 100 components

2023-12-15 11:29:16, Info                  CSI    000001e8 [SR] Beginning Verify and Repair transaction

2023-12-15 11:29:19, Info                  CSI    000001e9 [SR] Verify complete

2023-12-15 11:29:19, Info                  CSI    000001ea [SR] Verifying 100 components

2023-12-15 11:29:19, Info                  CSI    000001eb [SR] Beginning Verify and Repair transaction

2023-12-15 11:29:21, Info                  CSI    000001ec [SR] Verify complete

2023-12-15 11:29:21, Info                  CSI    000001ed [SR] Verifying 100 components

2023-12-15 11:29:21, Info                  CSI    000001ee [SR] Beginning Verify and Repair transaction

2023-12-15 11:29:24, Info                  CSI    000001ef [SR] Verify complete

2023-12-15 11:29:24, Info                  CSI    000001f0 [SR] Verifying 100 components

2023-12-15 11:29:24, Info                  CSI    000001f1 [SR] Beginning Verify and Repair transaction

2023-12-15 11:29:26, Info                  CSI    000001f6 [SR] Verify complete

2023-12-15 11:29:26, Info                  CSI    000001f7 [SR] Verifying 100 components

2023-12-15 11:29:26, Info                  CSI    000001f8 [SR] Beginning Verify and Repair transaction

2023-12-15 11:29:29, Info                  CSI    000001f9 [SR] Verify complete

2023-12-15 11:29:29, Info                  CSI    000001fa [SR] Verifying 100 components

2023-12-15 11:29:29, Info                  CSI    000001fb [SR] Beginning Verify and Repair transaction

2023-12-15 11:29:31, Info                  CSI    000001fc [SR] Verify complete

2023-12-15 11:29:32, Info                  CSI    000001fd [SR] Verifying 100 components

2023-12-15 11:29:32, Info                  CSI    000001fe [SR] Beginning Verify and Repair transaction

2023-12-15 11:29:38, Info                  CSI    000001ff [SR] Verify complete

2023-12-15 11:29:38, Info                  CSI    00000200 [SR] Verifying 100 components

2023-12-15 11:29:38, Info                  CSI    00000201 [SR] Beginning Verify and Repair transaction

2023-12-15 11:29:41, Info                  CSI    00000202 [SR] Verify complete

2023-12-15 11:29:41, Info                  CSI    00000203 [SR] Verifying 100 components

2023-12-15 11:29:41, Info                  CSI    00000204 [SR] Beginning Verify and Repair transaction

2023-12-15 11:29:43, Info                  CSI    00000205 [SR] Verify complete

2023-12-15 11:29:43, Info                  CSI    00000206 [SR] Verifying 100 components

2023-12-15 11:29:43, Info                  CSI    00000207 [SR] Beginning Verify and Repair transaction

2023-12-15 11:29:46, Info                  CSI    00000208 [SR] Verify complete

2023-12-15 11:29:46, Info                  CSI    00000209 [SR] Verifying 100 components

2023-12-15 11:29:46, Info                  CSI    0000020a [SR] Beginning Verify and Repair transaction

2023-12-15 11:29:48, Info                  CSI    0000020b [SR] Verify complete

2023-12-15 11:29:48, Info                  CSI    0000020c [SR] Verifying 100 components

2023-12-15 11:29:48, Info                  CSI    0000020d [SR] Beginning Verify and Repair transaction

2023-12-15 11:29:56, Info                  CSI    0000020f [SR] Verify complete

2023-12-15 11:29:56, Info                  CSI    00000210 [SR] Verifying 100 components

2023-12-15 11:29:56, Info                  CSI    00000211 [SR] Beginning Verify and Repair transaction

2023-12-15 11:29:59, Info                  CSI    00000212 [SR] Verify complete

2023-12-15 11:30:00, Info                  CSI    00000213 [SR] Verifying 100 components

2023-12-15 11:30:00, Info                  CSI    00000214 [SR] Beginning Verify and Repair transaction

2023-12-15 11:30:02, Info                  CSI    00000215 [SR] Verify complete

2023-12-15 11:30:02, Info                  CSI    00000216 [SR] Verifying 100 components

2023-12-15 11:30:02, Info                  CSI    00000217 [SR] Beginning Verify and Repair transaction

2023-12-15 11:30:04, Info                  CSI    00000218 [SR] Verify complete

2023-12-15 11:30:04, Info                  CSI    00000219 [SR] Verifying 100 components

2023-12-15 11:30:04, Info                  CSI    0000021a [SR] Beginning Verify and Repair transaction

2023-12-15 11:30:09, Info                  CSI    0000021c [SR] Verify complete

2023-12-15 11:30:09, Info                  CSI    0000021d [SR] Verifying 100 components

2023-12-15 11:30:09, Info                  CSI    0000021e [SR] Beginning Verify and Repair transaction

2023-12-15 11:30:13, Info                  CSI    0000021f [SR] Verify complete

2023-12-15 11:30:13, Info                  CSI    00000220 [SR] Verifying 100 components

2023-12-15 11:30:13, Info                  CSI    00000221 [SR] Beginning Verify and Repair transaction

2023-12-15 11:30:15, Info                  CSI    00000222 [SR] Verify complete

2023-12-15 11:30:15, Info                  CSI    00000223 [SR] Verifying 100 components

2023-12-15 11:30:15, Info                  CSI    00000224 [SR] Beginning Verify and Repair transaction

2023-12-15 11:30:17, Info                  CSI    00000226 [SR] Repairing file \??\C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\\mscormmc.dll from store

2023-12-15 11:30:17, Info                  CSI    00000227 [SR] Verify complete

2023-12-15 11:30:17, Info                  CSI    00000228 [SR] Verifying 100 components

2023-12-15 11:30:17, Info                  CSI    00000229 [SR] Beginning Verify and Repair transaction

2023-12-15 11:30:19, Info                  CSI    0000022a [SR] Verify complete

2023-12-15 11:30:19, Info                  CSI    0000022b [SR] Verifying 100 components

2023-12-15 11:30:19, Info                  CSI    0000022c [SR] Beginning Verify and Repair transaction

2023-12-15 11:30:21, Info                  CSI    0000022d [SR] Verify complete

2023-12-15 11:30:21, Info                  CSI    0000022e [SR] Verifying 100 components

2023-12-15 11:30:21, Info                  CSI    0000022f [SR] Beginning Verify and Repair transaction

2023-12-15 11:30:23, Info                  CSI    00000230 [SR] Verify complete

2023-12-15 11:30:23, Info                  CSI    00000231 [SR] Verifying 100 components

2023-12-15 11:30:23, Info                  CSI    00000232 [SR] Beginning Verify and Repair transaction

2023-12-15 11:30:25, Info                  CSI    00000233 [SR] Verify complete

2023-12-15 11:30:25, Info                  CSI    00000234 [SR] Verifying 52 components

2023-12-15 11:30:25, Info                  CSI    00000235 [SR] Beginning Verify and Repair transaction

2023-12-15 11:30:26, Info                  CSI    00000236 [SR] Verify complete

2023-12-15 11:30:26, Info                  CSI    00000237 [SR] Repairing 3 components

2023-12-15 11:30:26, Info                  CSI    00000238 [SR] Beginning Verify and Repair transaction

2023-12-15 11:30:27, Info                  CSI    00000239 [SR] Repairing file \??\C:\WINDOWS\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\Assets\Fonts\\SetMDL2.ttf from store

2023-12-15 11:30:27, Info                  CSI    0000023a [SR] Repairing file \??\C:\WINDOWS\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\Assets\Fonts\\WDefMDL2.ttf from store

2023-12-15 11:30:27, Info                  CSI    0000023c [SR] Repairing file \??\C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\\mscormmc.dll from store

2023-12-15 11:30:27, Info                  CSI    0000023d [SR] Repairing file \??\C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\\OneDrive.lnk from store

2023-12-15 11:30:27, Info                  CSI    0000023e [SR] Repair complete

2023-12-15 11:30:27, Info                  CSI    0000023f [SR] Committing transaction

2023-12-15 11:30:28, Info                  CSI    00000246 [SR] Verify and Repair Transaction completed. All files and registry keys listed in this transaction  have been successfully repaired

 

 

========= End of CMD: =========

 

 

========= FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i" =========

 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "AMSI/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "AMSI/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Application" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "DirectShowFilterGraph" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "DirectShowPluginControl" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Els_Hyphenation/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "EndpointMapper" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "FirstUXPerf-Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "ForwardedEvents" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "HardwareEvents" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "IHM_DebugChannel" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Intel-iaLPSS-GPIO/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Intel-iaLPSS-I2C/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Intel-iaLPSS2-GPIO2/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Intel-iaLPSS2-GPIO2/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Intel-iaLPSS2-I2C/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Intel-iaLPSS2-I2C/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Internet Explorer" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Key Management Service" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "MF_MediaFoundationDeviceMFT" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "MF_MediaFoundationDeviceProxy" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "MF_MediaFoundationFrameServer" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "MedaFoundationVideoProc" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "MedaFoundationVideoProcD3D" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "MediaFoundationAsyncWrapper" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "MediaFoundationContentProtection" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "MediaFoundationDS" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "MediaFoundationDeviceProxy" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "MediaFoundationMP4" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "MediaFoundationMediaEngine" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "MediaFoundationPerformance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "MediaFoundationPerformanceCore" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "MediaFoundationPipeline" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "MediaFoundationPlatform" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "MediaFoundationSrcPrefetch" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-AppV-Client-Streamingux/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-AppV-Client/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-AppV-Client/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-AppV-Client/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-AppV-Client/Virtual Applications" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-AppV-SharedPerformance/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Client-License-Flexible-Platform/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Client-License-Flexible-Platform/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Client-License-Flexible-Platform/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Client-Licensing-Platform/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Client-Licensing-Platform/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Client-Licensing-Platform/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-IE/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-IEFRAME/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-JSDumpHeap/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-OneCore-Setup/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-PerfTrack-IEFRAME/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-PerfTrack-MSHTML/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-User Experience Virtualization-Admin/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-User Experience Virtualization-Agent Driver/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-User Experience Virtualization-Agent Driver/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-User Experience Virtualization-App Agent/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-User Experience Virtualization-App Agent/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-User Experience Virtualization-App Agent/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-User Experience Virtualization-IPC/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-User Experience Virtualization-SQM Uploader/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-User Experience Virtualization-SQM Uploader/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-User Experience Virtualization-SQM Uploader/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AAD/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AAD/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ADSI/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ASN1/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ATAPort/General" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ATAPort/SATA-LPM" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ActionQueue/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-All-User-Install-Agent/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AllJoyn/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AllJoyn/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppHost/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppHost/ApplicationTracing" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppHost/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppHost/Internal" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppID/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppLocker/EXE and DLL" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppLocker/MSI and Script" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppLocker/Packaged app-Deployment" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppLocker/Packaged app-Execution" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppModel-Runtime/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppModel-Runtime/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppModel-Runtime/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppModel-Runtime/Diagnostics" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppModel-State/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppModel-State/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppReadiness/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppReadiness/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppReadiness/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppSruProv" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppXDeployment/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppXDeployment/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppXDeploymentServer/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppXDeploymentServer/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppXDeploymentServer/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppXDeploymentServer/Restricted" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ApplicabilityEngine/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ApplicabilityEngine/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Application Server-Applications/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Application Server-Applications/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Application Server-Applications/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Application Server-Applications/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Application-Experience/Compatibility-Infrastructure-Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Trace" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Application-Experience/Program-Compatibility-Troubleshooter" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Application-Experience/Program-Inventory" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Application-Experience/Program-Telemetry" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Application-Experience/Steps-Recorder" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ApplicationResourceManagementSystem/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ApplicationResourceManagementSystem/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppxPackaging/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppxPackaging/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AppxPackaging/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AssignedAccess/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AssignedAccess/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AssignedAccessBroker/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AssignedAccessBroker/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AsynchronousCausality/Causality" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Audio/CaptureMonitor" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Audio/GlitchDetection" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Audio/Informational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Audio/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Audio/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Audio/PlaybackManager" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Audit/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Authentication User Interface/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Authentication/AuthenticationPolicyFailures-DomainController" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Authentication/ProtectedUser-Client" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Authentication/ProtectedUserFailures-DomainController" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Authentication/ProtectedUserSuccesses-DomainController" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-AxInstallService/Log" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-BTH-BTHPORT/HCI" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-BTH-BTHPORT/L2CAP" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-BTH-BTHUSB/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-BTH-BTHUSB/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-BackgroundTaskInfrastructure/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-BackgroundTaskInfrastructure/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-BackgroundTransfer-ContentPrefetcher/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Backup" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Base-Filtering-Engine-Connections/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Base-Filtering-Engine-Resource-Flows/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Battery/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Biometrics/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Biometrics/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Bits-Client/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Bits-Client/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Bluetooth-BthLEPrepairing/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Bluetooth-Bthmini/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Bluetooth-MTPEnum/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Bluetooth-Policy/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-BranchCache/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-BranchCacheClientEventProvider/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-BranchCacheEventProvider/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-BranchCacheMonitoring/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-BranchCacheSMB/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-BranchCacheSMB/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CAPI2/Catalog Database Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CAPI2/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CDROM/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-COM/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-COM/ApartmentInitialize" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-COM/ApartmentUninitialize" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-COM/Call" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-COM/CreateInstance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-COM/ExtensionCatalog" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-COM/FreeUnusedLibrary" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-COM/RundownInstrumentation" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-COMRuntime/Activations" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-COMRuntime/MessageProcessing" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-COMRuntime/Tracing" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CertPoleEng/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CertificateServicesClient-CredentialRoaming/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CertificateServicesClient-Lifecycle-System/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CertificateServicesClient-Lifecycle-User/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Cleanmgr/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ClearTypeTextTuner/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CloudRestoreLauncher/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CloudStorageWizard/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CloudStorageWizard/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CloudStore/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CloudStore/Initialization" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CloudStore/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CmiSetup/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CodeIntegrity/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CodeIntegrity/Verbose" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ComDlg32/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ComDlg32/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Compat-Appraiser/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Compat-Appraiser/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Containers-BindFlt/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Containers-BindFlt/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Containers-Wcifs/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Containers-Wcifs/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Containers-Wcnfs/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Containers-Wcnfs/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CoreApplication/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CoreApplication/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CoreApplication/Tracing" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CoreSystem-SmsRouter-Events/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CoreSystem-SmsRouter-Events/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CoreWindow/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CoreWindow/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CorruptedFileRecovery-Client/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CorruptedFileRecovery-Server/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Crashdump/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-CredUI/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Crypto-BCRYPT/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Crypto-CNG/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Crypto-DPAPI/BackUpKeySvc" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Crypto-DPAPI/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Crypto-DPAPI/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Crypto-DSSEnh/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Crypto-NCrypt/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Crypto-RNG/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Crypto-RSAEnh/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-D3D10Level9/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-D3D10Level9/PerfTiming" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DAL-Provider/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DAL-Provider/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DAMM/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DCLocator/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DDisplay/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DDisplay/Logging" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DLNA-Namespace/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DNS-Client/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DSC/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DSC/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DSC/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DSC/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DUI/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DUSER/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DXGI/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DXGI/Logging" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DXP/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Data-Pdf/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DataIntegrityScan/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DataIntegrityScan/CrashRecovery" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DateTimeControlPanel/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DateTimeControlPanel/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DateTimeControlPanel/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Deduplication/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Deduplication/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Deduplication/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Deduplication/Scrubbing" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Defrag-Core/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Deplorch/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DesktopActivityModerator/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DesktopWindowManager-Diag/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DeviceAssociationService/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DeviceConfidence/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DeviceGuard/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DeviceGuard/Verbose" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DeviceSetupManager/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DeviceSetupManager/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DeviceSetupManager/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DeviceSetupManager/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DeviceSync/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DeviceSync/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DeviceUpdateAgent/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DeviceUx/Informational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DeviceUx/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Devices-Background/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Dhcp-Client/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Dhcp-Client/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Dhcpv6-Client/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Dhcpv6-Client/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DiagCpl/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnosis-AdvancedTaskManager/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnosis-DPS/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnosis-DPS/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnosis-DPS/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnosis-MSDE/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnosis-PCW/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnosis-PCW/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnosis-PCW/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnosis-PLA/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnosis-PLA/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnosis-Perfhost/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnosis-Scheduled/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnosis-Scripted/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnosis-Scripted/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnosis-Scripted/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnosis-Scripted/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnosis-WDC/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnosis-WDI/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnostics-Networking/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnostics-Networking/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnostics-PerfTrack-Counters/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnostics-PerfTrack/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnostics-Performance/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnostics-Performance/Diagnostic/Loopback" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Diagnostics-Performance/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Direct3D10/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Direct3D10_1/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Direct3D11/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Direct3D11/Logging" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Direct3D11/PerfTiming" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Direct3D12/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Direct3D12/Logging" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Direct3D12/PerfTiming" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Direct3D9/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Direct3DShaderCache/Default" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DirectComposition/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DirectManipulation/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DirectShow-KernelSupport/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DirectSound/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Disk/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DiskDiagnostic/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DiskDiagnosticDataCollector/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DiskDiagnosticResolver/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Dism-Api/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Dism-Api/ExternalAnalytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Dism-Api/InternalAnalytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Dism-Cli/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DisplayColorCalibration/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DisplayColorCalibration/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DisplaySwitch/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Documents/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Dot3MM/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DriverFrameworks-UserMode/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DucUpdateAgent/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Dwm-API/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Dwm-Core/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Dwm-Dwm/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Dwm-Redir/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Dwm-Udwm/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DxgKrnl-Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DxgKrnl-Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DxgKrnl/Contention" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DxgKrnl/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DxgKrnl/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DxgKrnl/Power" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-DxpTaskSyncProvider/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-EDP-Application-Learning/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-EDP-Audit-Regular/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-EDP-Audit-TCB/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-EFS/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ESE/IODiagnose" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ESE/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-EapHost/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-EapHost/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-EapHost/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-EapMethods-RasChap/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-EapMethods-RasTls/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-EapMethods-Sim/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-EapMethods-Ttls/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-EaseOfAccess/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Energy-Estimation-Engine/EventLog" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Energy-Estimation-Engine/Trace" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-EnhancedStorage-EhStorTcgDrv/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-EventCollector/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-EventCollector/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-EventLog-WMIProvider/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-EventLog/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-EventLog/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FMS/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FMS/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FMS/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FailoverClustering-Client/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Fault-Tolerant-Heap/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FeatureConfiguration/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FeatureConfiguration/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FileHistory-Catalog/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FileHistory-Catalog/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FileHistory-ConfigManager/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FileHistory-ConfigManager/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FileHistory-Core/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FileHistory-Core/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FileHistory-Core/WHC" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FileHistory-Engine/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FileHistory-Engine/BackupLog" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FileHistory-Engine/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FileHistory-EventListener/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FileHistory-EventListener/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FileHistory-Service/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FileHistory-Service/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FileHistory-UI-Events/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FileHistory-UI-Events/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FileInfoMinifilter/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Firewall-CPL/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Folder Redirection/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-FontGroups/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Forwarding/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Forwarding/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-GPIO-ClassExtension/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-GenericRoaming/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-GroupPolicy/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-HAL/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-HealthCenter/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-HealthCenter/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-HealthCenterCPL/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-HelloForBusiness/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Help/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-HomeGroup Control Panel Performance/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-HomeGroup Control Panel/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-HomeGroup Listener Service/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-HomeGroup Provider Service Performance/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-HomeGroup Provider Service/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-HomeGroup-ListenerService" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-HotspotAuth/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-HotspotAuth/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-HttpService/Log" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-HttpService/Trace" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Hyper-V-Guest-Drivers/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Hyper-V-Guest-Drivers/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Hyper-V-Guest-Drivers/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Hyper-V-Guest-Drivers/Diagnose" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Hyper-V-Guest-Drivers/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Hyper-V-Hypervisor-Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Hyper-V-Hypervisor-Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Hyper-V-Hypervisor-Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Hyper-V-NETVSC/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Hyper-V-VID-Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Hyper-V-VID-Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IE-SmartScreen" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IKE/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IKEDBG/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IME-Broker/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IME-CandidateUI/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IME-CustomerFeedbackManager/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IME-CustomerFeedbackManagerUI/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IME-JPAPI/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IME-JPLMP/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IME-JPPRED/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IME-JPSetting/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IME-JPTIP/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IME-KRAPI/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IME-KRTIP/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IME-OEDCompiler/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IME-TCCORE/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IME-TCTIP/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IME-TIP/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IPNAT/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IPSEC-SRV/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IPxlatCfg/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IPxlatCfg/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IdCtrls/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IdCtrls/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-IndirectDisplays-ClassExtension-Events/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Input-HIDCLASS-Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-InputSwitch/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-International-RegionalOptionsControlPanel/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-International/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Iphlpsvc/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Iphlpsvc/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Iphlpsvc/Trace" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-KdsSvc/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kerberos/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-Acpi/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-AppCompat/General" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-AppCompat/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-ApphelpCache/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-ApphelpCache/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-ApphelpCache/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-Boot/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-Boot/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-BootDiagnostics/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-Disk/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-EventTracing/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-EventTracing/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-File/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-IO/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-Interrupt-Steering/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-IoTrace/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-LiveDump/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-LiveDump/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-Memory/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-Network/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-Pdc/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-Pep/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-PnP/Boot Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-PnP/Configuration" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-PnP/Configuration Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-PnP/Device Enumeration Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-PnP/Driver Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-PnP/Driver Watchdog" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-Power/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-Power/Thermal-Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-Power/Thermal-Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-Prefetch/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-Process/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-Processor-Power/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-Registry/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-Registry/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-ShimEngine/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-ShimEngine/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-ShimEngine/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-StoreMgr/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-StoreMgr/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-WDI/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-WDI/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-WDI/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-WHEA/Errors" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-WHEA/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Kernel-XDV/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-KeyboardFilter/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-KeyboardFilter/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-KeyboardFilter/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Known Folders API Service" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-L2NA/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-LAPS/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-LDAP-Client/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-LSA/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-LSA/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-LSA/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-LUA-ConsentUI/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-LanguagePackSetup/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-LanguagePackSetup/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-LanguagePackSetup/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-LanguageProfile/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-LimitsManagement/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-LinkLayerDiscoveryProtocol/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-LinkLayerDiscoveryProtocol/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-LiveId/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-LiveId/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-MPEG2-Video-Encoder-MFT_Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-MPS-CLNT/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-MPS-DRV/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-MPS-SRV/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-MSFTEDIT/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-MSPaint/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-MSPaint/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-MSPaint/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-MUI/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-MUI/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-MUI/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-MUI/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Media-Streaming/DMC" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Media-Streaming/DMR" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Media-Streaming/MDE" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-MediaFoundation-MFCaptureEngine/MFCaptureEngine" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-MediaFoundation-MFReadWrite/SinkWriter" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-MediaFoundation-MFReadWrite/SourceReader" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-MediaFoundation-MFReadWrite/Transform" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-MediaFoundation-Performance/SARStreamResource" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-MediaFoundation-PlayAPI/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-MemoryDiagnostics-Results/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Minstore/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Minstore/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Mobile-Broadband-Experience-Api-Internal/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Mobile-Broadband-Experience-Api/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Mobile-Broadband-Experience-Parser-Task/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Mobile-Broadband-Experience-Parser-Task/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Mobile-Broadband-Experience-SmsApi/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Mobile-Broadband-Experience-SmsRouter/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Mobile-Broadband-Experience-SmsRouter/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-MobilityCenter/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ModernDeployment-Diagnostics-Provider/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ModernDeployment-Diagnostics-Provider/Autopilot" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ModernDeployment-Diagnostics-Provider/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ModernDeployment-Diagnostics-Provider/Diagnostics" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ModernDeployment-Diagnostics-Provider/ManagementService" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Mprddm/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NCSI/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NCSI/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NDF-HelperClassDiscovery/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NDIS-PacketCapture/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NDIS/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NDIS/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NFC-Class-Extension/Analytical" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NTLM/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NWiFi/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Narrator/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Ncasvc/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NcdAutoSetup/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NcdAutoSetup/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NdisImPlatform/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Ndu/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NetShell/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Network-Connection-Broker" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Network-DataUsage/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Network-Setup/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Network-and-Sharing-Center/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NetworkBridge/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NetworkLocationWizard/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NetworkProfile/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NetworkProfile/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NetworkProvider/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NetworkProvisioning/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NetworkProvisioning/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NetworkSecurity/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NetworkStatus/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Networking-Correlation/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Networking-RealTimeCommunication/Tracing" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NlaSvc/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-NlaSvc/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Ntfs/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Ntfs/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Ntfs/WHC" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-OLE/Clipboard-Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-OLEACC/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-OLEACC/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-OOBE-FirstLogonAnim/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-OOBE-Machine-Core/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-OOBE-Machine-DUI/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-OOBE-Machine-DUI/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-OOBE-Machine-Plugins-Wireless/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-OcpUpdateAgent/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-OfflineFiles/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-OfflineFiles/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-OfflineFiles/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-OfflineFiles/SyncLog" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-OneBackup/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-OneX/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-OneX/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-OobeLdr/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-OtpCredentialProvider/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PCI/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PackageStateRoaming/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PackageStateRoaming/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PackageStateRoaming/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ParentalControls/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Partition/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Partition/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PeerToPeerDrtEventProvider/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PerceptionRuntime/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PerceptionSensorDataService/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PersistentMemory-INvdimm/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PersistentMemory-INvdimm/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PersistentMemory-INvdimm/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PersistentMemory-Nvdimm/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PersistentMemory-Nvdimm/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PersistentMemory-Nvdimm/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PersistentMemory-NvdimmN/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PersistentMemory-NvdimmN/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PersistentMemory-NvdimmN/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PersistentMemory-PmemDisk/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PersistentMemory-PmemDisk/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PersistentMemory-PmemDisk/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PersistentMemory-ScmBus/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PersistentMemory-ScmBus/Certification" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PersistentMemory-ScmBus/Diagnose" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PersistentMemory-ScmBus/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PersistentMemory-VirtualNvdimm/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PersistentMemory-VirtualNvdimm/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PersistentMemory-VirtualNvdimm/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PhotoAcq/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PlayToManager/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Policy/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Policy/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PortableDeviceStatusProvider/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PortableDeviceSyncProvider/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Power-Meter-Polling/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PowerCfg/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PowerCpl/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PowerEfficiencyDiagnostics/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PowerShell-DesiredStateConfiguration-FileDownloadManager/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PowerShell-DesiredStateConfiguration-FileDownloadManager/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PowerShell-DesiredStateConfiguration-FileDownloadManager/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PowerShell/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PowerShell/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PowerShell/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PowerShell/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PriResources-Deployment/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PriResources-Deployment/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PrimaryNetworkIcon/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PrintBRM/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PrintDialogs/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PrintService-USBMon/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PrintService/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PrintService/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PrintService/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Privacy-Auditing/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ProcessStateManager/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Program-Compatibility-Assistant/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Program-Compatibility-Assistant/CompatAfterUpgrade" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Provisioning-Diagnostics-Provider/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Provisioning-Diagnostics-Provider/AutoPilot" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Provisioning-Diagnostics-Provider/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Provisioning-Diagnostics-Provider/ManagementService" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Proximity-Common/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Proximity-Common/Informational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Proximity-Common/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PushNotification-Developer/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PushNotification-InProc/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PushNotification-Platform/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PushNotification-Platform/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-PushNotification-Platform/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-QoS-Pacer/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-QoS-qWAVE/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-RPC-Proxy/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-RPC/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-RPC/EEInfo" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-RRAS/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-RRAS/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-RadioManager/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Ras-NdisWanPacketCapture/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-RasAgileVpn/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-RasAgileVpn/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ReFS/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ReadyBoost/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ReadyBoost/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ReadyBoostDriver/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ReadyBoostDriver/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Regsvr32/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-RemoteApp and Desktop Connections/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-RemoteApp and Desktop Connections/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-RemoteAssistance/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-RemoteAssistance/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-RemoteAssistance/Tracing" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-RemoteDesktopServices-RemoteFX-Synth3dvsc/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-RemoteDesktopServices-RemoteFX-VM-Kernel-Mode-Transport/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-RemoteDesktopServices-RemoteFX-VM-User-Mode-Transport/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-RemoteDesktopServices-SessionServices/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Remotefs-Rdbss/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Remotefs-Rdbss/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ResetEng-Trace/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Resource-Exhaustion-Detector/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Resource-Exhaustion-Resolver/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ResourcePublication/Tracing" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-RestartManager/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-RetailDemo/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-RetailDemo/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Runtime-Graphics/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Runtime-Networking-BackgroundTransfer/Tracing" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Runtime-Networking/Tracing" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Runtime-Web-Http/Tracing" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Runtime-WebAPI/Tracing" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Runtime-Windows-Media/WinRTAdaptiveMediaSource" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Runtime-Windows-Media/WinRTCaptureEngine" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Runtime-Windows-Media/WinRTMediaStreamSource" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Runtime-Windows-Media/WinRTTranscode" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Runtime/CreateInstance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Runtime/Error" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SMBClient/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SMBClient/HelperClassDiagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SMBClient/ObjectStateDiagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SMBClient/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SMBDirect/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SMBDirect/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SMBDirect/Netmon" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SMBServer/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SMBServer/Audit" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SMBServer/Connectivity" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SMBServer/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SMBServer/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SMBServer/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SMBServer/Security" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SMBWitnessClient/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SMBWitnessClient/Informational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SPB-ClassExtension/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SPB-HIDI2C/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Schannel-Events/Perf" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Sdbus/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Sdbus/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Sdstor/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Search-Core/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Search-ProtocolHandlers/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SearchUI/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SearchUI/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SecureAssessment/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Security-Adminless/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Security-Audit-Configuration-Client/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Security-Audit-Configuration-Client/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Security-EnterpriseData-FileRevocationManager/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Security-ExchangeActiveSyncProvisioning/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Security-ExchangeActiveSyncProvisioning/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Security-IdentityListener/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Security-IdentityStore/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Security-LessPrivilegedAppContainer/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Security-Mitigations/KernelMode" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Security-Mitigations/UserMode" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Security-Netlogon/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Security-SPP-UX-GC/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Security-SPP-UX-GenuineCenter-Logging/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Security-SPP-UX-Notifications/ActionCenter" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Security-SPP-UX/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Security-SPP/Perf" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Security-UserConsentVerifier/Audit" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Security-Vault/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SecurityMitigationsBroker/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SecurityMitigationsBroker/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SecurityMitigationsBroker/Perf" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SendTo/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Sens/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Sensors/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Sensors/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Serial-ClassExtension-V2/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Serial-ClassExtension/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ServiceReportingApi/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Services-Svchost/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Services/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Servicing/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SettingSync-Azure/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SettingSync-Azure/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SettingSync-OneDrive/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SettingSync-OneDrive/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SettingSync-OneDrive/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SettingSync/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SettingSync/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SettingSync/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SettingSync/VerboseDebug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Setup/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SetupCl/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SetupPlatform/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SetupQueue/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SetupUGC/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ShareMedia-ControlPanel/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Shell-AppWizCpl/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Shell-AuthUI-BootAnim/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Shell-AuthUI-Common/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Shell-AuthUI-CredUI/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Shell-AuthUI-CredentialProviderUser/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Shell-AuthUI-Logon/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Shell-AuthUI-LogonUI/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Shell-AuthUI-Shutdown/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Shell-ConnectedAccountState/ActionCenter" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Shell-Core/ActionCenter" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Shell-Core/AppDefaults" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Shell-Core/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Shell-Core/LogonTasksChannel" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Shell-Core/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Shell-DefaultPrograms/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Shell-LockScreenContent/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Shell-OpenWith/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Shell-Search-UriHandler" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Shell-Shwebsvc" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Shell-ZipFolder/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Shsvcs/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SleepStudy/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SmartCard-Audit/Authentication" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SmartCard-DeviceEnum/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SmartCard-TPM-VCard-Module/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SmartCard-TPM-VCard-Module/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SmartScreen/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SmbClient/Audit" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SmbClient/Connectivity" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SmbClient/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SmbClient/Security" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Speech-UserExperience/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Spell-Checking/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SpellChecker/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Spellchecking-Host/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SruMon/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SrumTelemetry" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-StateRepository/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-StateRepository/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-StateRepository/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-StateRepository/Restricted" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-StorDiag/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-StorPort/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storage-ATAPort/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storage-ATAPort/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storage-ATAPort/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storage-ATAPort/Diagnose" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storage-ATAPort/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storage-ClassPnP/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storage-ClassPnP/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storage-ClassPnP/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storage-ClassPnP/Diagnose" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storage-ClassPnP/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storage-Disk/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storage-Disk/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storage-Disk/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storage-Disk/Diagnose" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storage-Disk/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storage-Storport/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storage-Storport/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storage-Storport/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storage-Storport/Diagnose" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storage-Storport/Health" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storage-Storport/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storage-Tiering-IoHeat/Heat" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storage-Tiering/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-StorageManagement/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-StorageManagement/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-StorageSettings/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-StorageSpaces-Driver/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-StorageSpaces-Driver/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-StorageSpaces-Driver/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-StorageSpaces-ManagementAgent/WHC" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-StorageSpaces-SpaceManager/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-StorageSpaces-SpaceManager/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Store/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Storsvc/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Subsys-Csr/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Subsys-SMSS/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Superfetch/Main" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Superfetch/PfApLog" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Superfetch/StoreLog" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Sysprep/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-System-Profile-HardwareId/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SystemSettingsHandlers/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SystemSettingsThreshold/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SystemSettingsThreshold/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-SystemSettingsThreshold/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TCPIP/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TCPIP/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TSF-msctf/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TSF-msctf/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TSF-msutb/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TSF-msutb/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TTS/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TWinAPI/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TWinUI/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TWinUI/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TZSync/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TZSync/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TZUtil/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TaskScheduler/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TaskScheduler/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TaskScheduler/Maintenance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TaskScheduler/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TaskbarCPL/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TenantRestrictions/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-ClientUSBDevices/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-ClientUSBDevices/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-ClientUSBDevices/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-ClientUSBDevices/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-LocalSessionManager/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-LocalSessionManager/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-LocalSessionManager/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-LocalSessionManager/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-MediaRedirection/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-PnPDevices/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-PnPDevices/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-PnPDevices/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-PnPDevices/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-Printers/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-Printers/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-Printers/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-Printers/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-RDPClient/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-RDPClient/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-RDPClient/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-RdpSoundDriver/Capture" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-RdpSoundDriver/Playback" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-RemoteConnectionManager/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-RemoteConnectionManager/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-RemoteConnectionManager/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-ServerUSBDevices/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-ServerUSBDevices/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-ServerUSBDevices/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TerminalServices-ServerUSBDevices/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Tethering-Manager/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Tethering-Station/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ThemeCPL/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ThemeUI/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Threat-Intelligence/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Time-Service-PTP-Provider/PTP-Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Time-Service/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Troubleshooting-Recommended/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Troubleshooting-Recommended/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-TunnelDriver" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-UAC-FileVirtualization/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-UAC/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-UI-Shell/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-UIAnimation/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-UIAutomationCore/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-UIAutomationCore/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-UIAutomationCore/Perf" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-UIRibbon/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-USB-MAUSBHOST-Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-USB-UCX-Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-USB-USBHUB/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-USB-USBHUB3-Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-USB-USBPORT/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-USB-USBXHCI-Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-USB-USBXHCI-Trustlet-Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-UniversalTelemetryClient/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-User Control Panel Performance/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-User Control Panel Usage/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-User Control Panel/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-User Control Panel/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-User Device Registration/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-User Device Registration/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-User Profile Service/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-User Profile Service/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-User-Loader/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-User-Loader/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-UserAccountControl/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-UserModePowerService/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-UserPnp/ActionCenter" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-UserPnp/DeviceInstall" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-UserPnp/DeviceMetadata/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-UserPnp/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-UserPnp/SchedulerOperations" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-UserSettingsBackup-BackupUnitProcessor/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-UserSettingsBackup-Orchestrator/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-UxInit/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-UxTheme/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-VAN/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-VDRVROOT/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-VHDMP-Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-VHDMP-Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-VIRTDISK-Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-VPN-Client/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-VPN/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-VWiFi/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-VerifyHardwareSecurity/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-VerifyHardwareSecurity/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Volume/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-VolumeControl/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-VolumeSnapshot-Driver/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-VolumeSnapshot-Driver/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WABSyncProvider/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WCN-Config-Registrar/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WCNWiz/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WDAG-Service/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WDAG-Service/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WEPHOSTSVC/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WER-PayloadHealth/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WFP/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WFP/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WLAN-AutoConfig/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WLAN-Autoconfig/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WLAN-Driver/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WLAN-MediaManager/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WLANConnectionFlow/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WMI-Activity/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WMI-Activity/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WMI-Activity/Trace" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WMPDMCUI/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WMPNSS-PublicAPI/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WMPNSS-Service/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WMPNSS-Service/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WMPNSSUI/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WPD-API/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WPD-ClassInstaller/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WPD-ClassInstaller/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WPD-CompositeClassDriver/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WPD-CompositeClassDriver/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WPD-MTPBT/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WPD-MTPClassDriver/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WPD-MTPClassDriver/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WPD-MTPIP/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WPD-MTPUS/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WSC-SRV/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WUSA/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WWAN-CFE/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WWAN-MM-Events/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WWAN-MediaManager/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WWAN-NDISUIO-EVENTS/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WWAN-SVC-Events/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WWAN-SVC-Events/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Wcmsvc/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Wcmsvc/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WebAuth/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WebAuthN/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WebIO-NDF/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WebIO/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WebPlatStorage-Server" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WebServices/Tracing" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WebcamProvider/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Websocket-Protocol-Component/Tracing" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WiFiDisplay/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Win32k/Concurrency" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Win32k/Contention" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Win32k/Messages" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Win32k/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Win32k/Power" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Win32k/Render" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Win32k/Tracing" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Win32k/UIPI" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WinHTTP-NDF/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WinHttp-Pca" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WinHttp/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WinHttp/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WinINet-Capture/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WinINet-Config/ProxyConfigChanged" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WinINet/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WinINet/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WinINet/Pca" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WinINet/UsageLog" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WinINet/WebSocket" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WinMDE/MDE" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WinML/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WinNat/Oper" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WinNat/Trace" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WinRM/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WinRM/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WinRM/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WinURLMon/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Windeploy/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurity" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurityVerbose" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Windows Firewall With Advanced Security/Firewall" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Windows Firewall With Advanced Security/FirewallDiagnostics" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Windows Firewall With Advanced Security/FirewallVerbose" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WindowsBackup/ActionCenter" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WindowsColorSystem/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WindowsColorSystem/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WindowsSystemAssessmentTool/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WindowsSystemAssessmentTool/Tracing" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WindowsUIImmersive/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WindowsUIImmersive/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WindowsUpdateClient/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WindowsUpdateClient/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Wininit/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Winlogon/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Winlogon/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Winsock-AFD/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Winsock-NameResolution/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Winsock-WS2HELP/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Winsrv/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Wired-AutoConfig/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Wired-AutoConfig/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WlanDlg/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Wordpad/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Wordpad/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Wordpad/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WorkFolders/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WorkFolders/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WorkFolders/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-WorkFolders/WHC" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-Workplace Join/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-XAML-Diagnostics/Default" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-XAML/Default" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-XAudio2/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-XAudio2/Performance" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-glcnd/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-glcnd/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-glcnd/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-mobsync/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ntshrui" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-ntshrui-perf" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-osk/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-stobject/Diagnostic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-wmbclass/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-Windows-wmbclass/Trace" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-WindowsPhone-Connectivity-WiFiConnSvc-Channel" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-WindowsPhone-LocationServiceProvider/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-WindowsPhone-Net-Cellcore-CellManager/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Microsoft-WindowsPhone-Net-Cellcore-CellularAPI/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Navigator" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Network Isolation Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "OSK_SoftKeyboard_Channel" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "OpenSSH/Admin" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "OpenSSH/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "OpenSSH/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Physical_Keyboard_Manager_Channel" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "PlayReadyPerformanceChannel" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "RTWorkQueueExtended" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "RTWorkQueueTheading" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "SMSApi" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Security" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Setup" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "SmbWmiAnalytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "System" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "SystemEventsBroker" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "TabletPC_InputPanel_Channel" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "TabletPC_InputPanel_Channel/IHM" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "TimeBroker" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "UIManager_Channel" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Uac/Debug" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "WINDOWS_KS_CHANNEL" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "WINDOWS_MFH264Enc_CHANNEL" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "WINDOWS_MP4SDECD_CHANNEL" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "WINDOWS_MSMPEG2ADEC_CHANNEL" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "WINDOWS_MSMPEG2VDEC_CHANNEL" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "WINDOWS_VC1ENC_CHANNEL" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "WINDOWS_WMPHOTO_CHANNEL" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "WINDOWS_wmvdecod_CHANNEL" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "WMPSetup" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "WMPSyncEngine" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Windows Networking Vpn Plugin Platform/Operational" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Windows Networking Vpn Plugin Platform/OperationalVerbose" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Windows PowerShell" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "Windows.Globalization/Analytic" 

 

C:\Users\Jon Kunkel\OneDrive\Desktop>wevtutil cl "muxencode" 

 

 

========= End of CMD: =========

 

 

 

The system needed a reboot.

 

==== End of Fixlog 11:31:22 ====

 

The Scan log file:

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 13-12-2023Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 13-12-2023

Ran by Jon Kunkel (administrator) on DESKTOP-8AAJV2M (Micro-Star International Co., Ltd. MS-7B79) (15-12-2023 22:07:51)

Running from C:\Users\Jon Kunkel\OneDrive\Desktop\FRST64.exe

Loaded Profiles: Jon Kunkel

Platform: Microsoft Windows 10 Pro Version 22H2 19045.2965 (X64) Language: English (United States)

Default browser: Chrome

Boot Mode: Normal

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

() <==== ATTENTION [zero byte? (Error=2)] C:\Users\Jon Kunkel\AppData\Local\Temp\.opera\429F89CDA81E\installer.exe

(Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe

(A-Volute SAS -> A-Volute) C:\Windows\System32\NhNotifSys.exe

(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\120.0.2210.77\identity_helper.exe

(C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\EyeRest.exe

(C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\NahimicMonitor.exe

(C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\TriggerModeMonitor.exe

(C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\VideoCardMonitorII.exe

(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe

(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe

(C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe ->) (A-Volute -> ) C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2Svc32.exe

(C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe ->) (A-Volute -> ) C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2Svc64.exe

(C:\Users\Jon Kunkel\AppData\Local\Programs\Opera GX\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Jon Kunkel\AppData\Local\Programs\Opera GX\104.0.4944.60\opera_crashreporter.exe

(cmd.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe

(DriverStore\FileRepositoryΗ033.inf_amd64_bf2b1fc18ba7195d\B396953\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepositoryΗ033.inf_amd64_bf2b1fc18ba7195d\B396953\atieclxx.exe

(explorer.exe ->) (A-Volute -> A-Volute) C:\Program Files\Nahimic\Nahimic VR\Foundation\NahimicVRSvc32.exe

(explorer.exe ->) (A-Volute -> A-Volute) C:\Program Files\Nahimic\Nahimic VR\Foundation\x64\NahimicVRSvc64.exe

(explorer.exe ->) (A-Volute -> Nahimic) C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe

(explorer.exe ->) (Conners Systems Limited -> johnsadventures.com) C:\Program Files (x86)\johnsadventures.com\John's Background Switcher\BackgroundSwitcher.exe

(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <16>

(explorer.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Jon Kunkel\AppData\Local\Programs\Opera GX\opera.exe <24>

(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.352\GoogleCrashHandler.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.352\GoogleCrashHandler64.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SppExtComObj.Exe

(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\APP Manager\AppManager.exe

(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI X Boost\X_Boost.exe

(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe

(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepositoryΗ033.inf_amd64_bf2b1fc18ba7195d\B396953\atiesrxx.exe

(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(services.exe ->) (A-Volute SAS -> Nahimic) C:\Windows\System32\NahimicService.exe

(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe

(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe

(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\RAMDisk\MSI_RAMDisk_Service.exe

(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\APP Manager\AppManager_Service.exe

(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe

(svchost.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\CPUMetricsServer.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\ruxim\PLUGScheduler.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.3745_none_7ded3f327ca60a41\TiWorker.exe

(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI Toast Server\MSIToastServer.exe

(svchost.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Jon Kunkel\AppData\Local\Programs\Opera GX\launcher.exe

 

==================== Registry (Whitelisted) ===================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9268680 2018-02-28] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

HKLM\...\Run: [Nahimic2UILauncher] => C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe [734256 2018-02-05] (A-Volute -> Nahimic)

HKLM\...\Run: [NahimicVRSvc32] => C:\Program Files\Nahimic\Nahimic VR\Foundation\NahimicVRSvc32.exe [990256 2018-02-05] (A-Volute -> A-Volute)

HKLM\...\Run: [NahimicVRSvc64] => C:\Program Files\Nahimic\Nahimic VR\Foundation\x64\NahimicVRSvc64.exe [1142320 2018-02-05] (A-Volute -> A-Volute)

HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2726728 2010-03-24] (Canon Inc. -> CANON INC.)

HKLM-x32\...\Run: [APP Manager] => C:\Program Files (x86)\MSI\APP Manager\AppManager.exe [3705520 2019-05-20] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)

HKLM-x32\...\Run: [Super Charger] => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [1028280 2017-11-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)

HKLM-x32\...\Run: [X_Boost] => C:\Program Files (x86)\MSI\MSI X Boost\X_Boost.exe [4261024 2018-02-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [748624 2023-10-04] (Oracle America, Inc. -> Oracle Corporation)

HKLM\Software\Policies\...\system: [EnableSmartScreen] 0

HKU\S-1-5-21-2128159834-528020214-2662902997-1002\...\Run: [BackgroundSwitcher] => C:\Program Files (x86)\johnsadventures.com\John's Background Switcher\BackgroundSwitcher.exe [129400 2023-10-01] (Conners Systems Limited -> johnsadventures.com)

HKU\S-1-5-21-2128159834-528020214-2662902997-1002\...\Run: [MicrosoftEdgeAutoLaunch_5811716BEDC94190CCAC370117413651] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [3854376 2023-12-14] (Microsoft Corporation -> Microsoft Corporation)

HKU\S-1-5-21-2128159834-528020214-2662902997-1002\...\Run: [Opera GX Stable] => C:\Users\Jon Kunkel\AppData\Local\Programs\Opera GX\launcher.exe [2587040 2023-11-10] (Opera Norway AS -> Opera Software)

HKLM\...\Windows x64\Print Processors\Canon MG5200 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDAE.DLL [30208 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)

HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5200 series XPS: C:\WINDOWS\system32\CNMXLMAE.DLL [361472 2010-04-01] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)

HKLM\...\Print\Monitors\Canon BJNP Port: C:\WINDOWS\system32\CNMN6PPM.DLL [359936 2012-06-14] (CANON INC.) [File not signed]

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\120.0.6099.72\Installer\chrmstp.exe [2023-12-13] (Google LLC -> Google LLC)

GroupPolicy: Restriction ? <==== ATTENTION

Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION

 

==================== Scheduled Tasks (Whitelisted) =================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

Task: {98E94A5D-1ACD-4886-941D-D1879889B520} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2023-10-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

Task: {31B5D7C2-1CE8-4EDF-8450-5439C09E0780} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2023-10-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

Task: {552BB83C-E103-4F21-A002-B6F25EACA2BB} - System32\Tasks\AMDRyzenMasterSDKTask => C:\Program Files\AMD\CNext\CNext\cpumetricsserver.exe [183736 2023-10-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

Task: {975CB1F3-81FC-499D-9A59-47F7493F0013} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2023-07-14] (Google Inc -> Google Inc.)

Task: {4F93A71A-DF93-492B-991E-85C8A72E6227} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2023-07-14] (Google Inc -> Google Inc.)

Task: {813A2E5D-A50E-4C1D-9EE0-BEC8871EDF76} - System32\Tasks\Microsoft\Windows\CloudRestore\Backup => {722D0F89-B69C-4700-AE8C-4A44350E4876}

Task: {F62FA6D3-0659-4BEC-B510-7B2274DA8365} - System32\Tasks\Microsoft\Windows\ConsentUX\UnifiedConsent\UnifiedConsentSyncTask => {82AA0895-198A-4C1B-B2D1-C16894218AFB}

Task: {F4771EB8-2121-4105-A7BF-22EE721CAAAA} - System32\Tasks\Microsoft\Windows\CUAssistant\CULauncher => %ProgramFiles%\CUAssistant\culauncher.exe  (No File)

Task: {C6C258A2-F4A7-4443-971B-D83B32B809ED} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Refresh Group Policy Cache => {07369A67-07A6-4608-ABEA-379491CB7C46} C:\Windows\System32\UpdatePolicy.dll [229888 2023-05-05] (Microsoft Windows -> Microsoft Corporation)

Task: {E5D8CE31-B3D9-41CB-A521-3A396143CA20} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2023-10-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

Task: {B8C0D3F4-1C0D-4043-9F07-CEE6C8403208} - System32\Tasks\MSI_Toast_Server => C:\Program Files (x86)\MSI\MSI Toast Server\MSIToastServer.exe [30648 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)

Task: {3BE8BD71-F77B-4A98-94C4-2737CA7577DD} - System32\Tasks\Nahimic2Svc32Run => C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2Svc32.exe [4412464 2018-02-05] (A-Volute -> )

Task: {73BC340E-A9AF-4723-BF88-599E8980D650} - System32\Tasks\Nahimic2Svc64Run => C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2Svc64.exe [520752 2018-02-05] (A-Volute -> )

Task: {09B09E46-C164-4F69-A394-4D5369995BCF} - System32\Tasks\Nahimic2UILauncherRun => C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe [734256 2018-02-05] (A-Volute -> Nahimic)

Task: {E9AE049F-8163-4BBC-A643-FF29C5FBE11C} - System32\Tasks\NahimicVRSvc32Run => C:\Program Files\Nahimic\Nahimic VR\Foundation\NahimicVRSvc32.exe [990256 2018-02-05] (A-Volute -> A-Volute)

Task: {0ACFF5E5-2CA1-4D30-AA4A-F4D4F2B10AEE} - System32\Tasks\NahimicVRSvc64Run => C:\Program Files\Nahimic\Nahimic VR\Foundation\x64\NahimicVRSvc64.exe [1142320 2018-02-05] (A-Volute -> A-Volute)

Task: {32DDA989-488F-437E-A150-C890F3285C35} - System32\Tasks\Opera GX scheduled Autoupdate 1699905995 => C:\Users\Jon Kunkel\AppData\Local\Programs\Opera GX\launcher.exe [2587040 2023-11-10] (Opera Norway AS -> Opera Software)

Task: {DED58491-E164-49C3-ADD7-4FECA34E8A88} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [60344 2023-10-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

Task: {D7D75F40-42B1-47D2-9F8A-854588C9A073} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [324024 2023-10-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

 

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{319e217a-ff86-4004-81fa-7a50a5ce1031}: [DhcpNameServer] 192.168.1.1

 

Edge: 

=======

Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]

Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]

Edge DefaultProfile: Default

Edge Profile: C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default [2023-12-15]

Edge Notifications: Default -> hxxps://www.facebook.com

Edge HomePage: Default -> hxxps://www.rcgroups.com/forums/usercp.php

Edge Extension: (LogMeOnce) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ahknoflpikaolmchfkipgjkgccjckpag [2023-12-10] [UpdateUrl:hxxps://logmeonce.s3.amazonaws.com/download/firefox/updates.json] <==== ATTENTION

Edge Extension: (PayPal Honey: Automatic Coupons & Cash Back) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\amnbcmdbanbkjhnfoeceemmmdiepnbpp [2023-12-14]

Edge Extension: (Double-click Image Downloader) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bkijmpolkanhdehnlnabfooghjdokakc [2023-12-10]

Edge Extension: (Video Downloader Plus) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cjljdgfhkjbdbkcdkfojleidpldagmao [2023-12-10]

Edge Extension: (Video Downloader Professional) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2023-12-10]

Edge Extension: (Bulk Image Downloader) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\facoldpeadablbngjnohbmgaehknhcaj [2023-12-10]

Edge Extension: (Google Docs Offline) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-05]

Edge Extension: (Safe Browsing) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\glapegacofapoeglkpofkgbdljlppgpe [2023-12-10]

Edge Extension: (Video Downloader Plus) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hkdmdpdhfaamhgaojpelccmeehpfljgf [2023-12-10]

Edge Extension: (Video Downloader Free) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\igngiaemkdeoanddlkhjhkfpmajpnkch [2023-10-19]

Edge Extension: (Mix) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jffkbfhhjokopidblbjfkippklbhegoj [2023-12-10]

Edge Extension: (Edge relevant text changes) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-12-10]

Edge Extension: (Capital One Shopping: Save Now) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\kiiaghlmeikbpmeabhilfphikfcefljn [2023-12-11]

Edge Extension: (All Video Downloader professional) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\mbpnbnogejaolbhfpfgagldkeahefbhd [2023-12-10]

Edge Extension: (video downloader - CocoCut) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\npdhgjfiikhgncaacnnodpfchmelnchm [2023-12-10]

Edge Extension: (Coupert - Automatic Coupon Finder & Cashback) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\pefhciejnkgdgoahgfeklebcbpmhnhhd [2023-12-14]

Edge Extension: (Speedtest by Ookla) - C:\Users\Jon Kunkel\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\pgjjikdiikihdfpoppgaidccahalehjh [2023-12-10]

 

FireFox:

========

FF Plugin: @java.com/DTPlugin,version=11.391.2 -> C:\Program Files\Java\jre-1.8\bin\dtplugin\npDeployJava1.dll [2023-10-04] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.391.2 -> C:\Program Files\Java\jre-1.8\bin\plugin2\npjp2.dll [2023-10-04] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)

FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2010-04-14] (CANON INC.) [File not signed]

FF Plugin-x32: @java.com/DTPlugin,version=11.391.2 -> C:\Program Files (x86)\Java\jre-1.8\bin\dtplugin\npDeployJava1.dll [2023-10-04] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.391.2 -> C:\Program Files (x86)\Java\jre-1.8\bin\plugin2\npjp2.dll [2023-10-04] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)

 

Chrome: 

=======

CHR DefaultProfile: Default

CHR Profile: C:\Users\Jon Kunkel\AppData\Local\Google\Chrome\User Data\Default [2023-12-15]

CHR Notifications: Default -> hxxps://www.messenger.com; hxxps://www.youtube.com

CHR HomePage: Default -> hxxps://www.rcgroups.com/forums/usercp.php

CHR Extension: (Video Downloader Professional) - C:\Users\Jon Kunkel\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2023-07-14]

CHR Extension: (Google Docs Offline) - C:\Users\Jon Kunkel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-17]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Jon Kunkel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-07-14]

 

Opera: 

=======

StartMenuInternet: (HKU\S-1-5-21-2128159834-528020214-2662902997-1002) Opera GXStable - "C:\Users\Jon Kunkel\AppData\Local\Programs\Opera GX\Launcher.exe"

 

==================== Services (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 MSI_ActiveX_Service; C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe [83104 2018-02-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)

R2 MSI_AppManager_Service; C:\Program Files (x86)\MSI\APP Manager\AppManager_Service.exe [2055352 2019-01-04] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)

R2 MSI_RAMDisk_Service; C:\Program Files (x86)\MSI\RAMDisk\MSI_RAMDisk_Service.exe [71864 2018-02-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)

R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [183992 2017-12-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)

R2 NahimicService; C:\WINDOWS\system32\NahimicService.exe [1888424 2021-10-08] (A-Volute SAS -> Nahimic)

 

===================== Drivers (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [36736 2023-05-05] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

R2 AMDRyzenMasterDriverV20; C:\WINDOWS\system32\AMDRyzenMasterDriver.sys [48328 2023-10-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices)

R3 AMDSAFD; C:\WINDOWS\System32\DriverStore\FileRepository\amdsafd.inf_amd64_66a9fa5d80327844\amdsafd.sys [113080 2022-06-23] (Advanced Micro Devices Inc. -> Advanced Micro Devices)

R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepositoryΗ033.inf_amd64_bf2b1fc18ba7195d\B396953\amdkmdag.sys [106378272 2023-10-26] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [61888 2023-05-24] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

R3 Nahimic_Mirroring; C:\WINDOWS\System32\drivers\Nahimic_Mirroring.sys [85616 2021-08-13] (A-Volute -> Windows ® Win 7 DDK provider)

 

==================== NetSvcs (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

 

==================== One month (created) (Whitelisted) =========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2023-12-15 22:06 - 2023-12-15 22:06 - 000000000 ___HD C:\$WinREAgent

2023-12-15 10:59 - 2023-12-15 11:31 - 000197416 _____ C:\Users\Jon Kunkel\OneDrive\Desktop\Fixlog.txt

2023-12-14 15:21 - 2023-12-14 15:24 - 000033477 _____ C:\Users\Jon Kunkel\OneDrive\Desktop\Addition.txt

2023-12-14 15:19 - 2023-12-15 22:10 - 000022982 _____ C:\Users\Jon Kunkel\OneDrive\Desktop\FRST.txt

2023-12-14 15:18 - 2023-12-15 22:09 - 000000000 ____D C:\FRST

2023-12-14 15:18 - 2023-12-14 15:18 - 000000000 ____D C:\Users\Jon Kunkel\OneDrive\Desktop\FRST-OlderVersion

2023-12-14 15:16 - 2023-12-14 15:18 - 002386432 _____ (Farbar) C:\Users\Jon Kunkel\OneDrive\Desktop\FRST64.exe

2023-12-11 19:52 - 2023-12-11 19:52 - 000001370 _____ C:\Users\Jon Kunkel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk

2023-12-11 19:52 - 2023-12-11 19:52 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Local\PCHealthCheck

2023-12-11 14:35 - 2023-12-11 14:35 - 000000410 __RSH C:\ProgramData\ntuser.pol

2023-12-10 18:24 - 2023-12-10 18:24 - 000000000 ____D C:\ProgramData\Microsoft OneDrive

2023-12-10 18:21 - 2023-12-10 18:21 - 000000020 ___SH C:\Users\Jon Kunkel\ntuser.ini

2023-12-10 18:19 - 2023-12-15 22:04 - 000003128 _____ C:\WINDOWS\system32\Tasks\AMDInstallLauncher

2023-12-10 18:19 - 2023-12-15 22:04 - 000003120 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate

2023-12-10 18:19 - 2023-12-15 22:03 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2023-12-10 18:19 - 2023-12-14 14:22 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2128159834-528020214-2662902997-1002

2023-12-10 18:19 - 2023-12-14 14:22 - 000003388 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2128159834-528020214-2662902997-1002

2023-12-10 18:19 - 2023-12-10 18:20 - 000003538 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{16112ECA-FFD0-449A-9879-E78122F255C0}

2023-12-10 18:19 - 2023-12-10 18:20 - 000002380 _____ C:\WINDOWS\system32\Tasks\NahimicVRSvc32Run

2023-12-10 18:19 - 2023-12-10 18:19 - 000003554 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled Autoupdate 1699905995

2023-12-10 18:19 - 2023-12-10 18:19 - 000003356 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA

2023-12-10 18:19 - 2023-12-10 18:19 - 000003314 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{CEA8E38B-A4DC-4315-916D-AF561B094318}

2023-12-10 18:19 - 2023-12-10 18:19 - 000003132 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore

2023-12-10 18:19 - 2023-12-10 18:19 - 000002672 _____ C:\WINDOWS\system32\Tasks\ModifyLinkUpdate

2023-12-10 18:19 - 2023-12-10 18:19 - 000002412 _____ C:\WINDOWS\system32\Tasks\MSI_Toast_Server

2023-12-10 18:19 - 2023-12-10 18:19 - 000002402 _____ C:\WINDOWS\system32\Tasks\AMDRyzenMasterSDKTask

2023-12-10 18:19 - 2023-12-10 18:19 - 000002396 _____ C:\WINDOWS\system32\Tasks\Nahimic2UILauncherRun

2023-12-10 18:19 - 2023-12-10 18:19 - 000002388 _____ C:\WINDOWS\system32\Tasks\NahimicVRSvc64Run

2023-12-10 18:19 - 2023-12-10 18:19 - 000002384 _____ C:\WINDOWS\system32\Tasks\Nahimic2Svc64Run

2023-12-10 18:19 - 2023-12-10 18:19 - 000002376 _____ C:\WINDOWS\system32\Tasks\Nahimic2Svc32Run

2023-12-10 18:19 - 2023-12-10 18:19 - 000002202 _____ C:\WINDOWS\system32\Tasks\StartCN

2023-12-10 18:19 - 2023-12-10 18:19 - 000002122 _____ C:\WINDOWS\system32\Tasks\StartDVR

2023-12-10 18:18 - 2023-12-10 18:19 - 000007623 _____ C:\WINDOWS\diagwrn.xml

2023-12-10 18:18 - 2023-12-10 18:19 - 000007623 _____ C:\WINDOWS\diagerr.xml

2023-12-10 18:14 - 2023-12-15 22:10 - 000840598 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2023-12-10 18:10 - 2023-12-10 18:10 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\Microsoft\SystemCertificates

2023-12-10 18:10 - 2023-12-10 18:10 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\Microsoft\Network

2023-12-10 18:09 - 2023-12-10 18:09 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\Microsoft\Crypto

2023-12-10 18:09 - 2023-12-10 18:09 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Network

2023-12-10 18:02 - 2023-12-14 14:22 - 000002394 _____ C:\Users\Jon Kunkel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2023-12-10 18:02 - 2023-12-10 18:22 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\Microsoft\Windows

2023-12-10 18:02 - 2023-12-10 18:21 - 000000000 ____D C:\Users\Jon Kunkel

2023-12-10 17:57 - 2023-12-15 21:57 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2023-12-10 17:57 - 2023-12-10 17:58 - 000257824 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2023-12-10 17:56 - 2023-12-10 18:20 - 000000000 ____D C:\Windows.old

2023-12-10 17:52 - 2023-12-10 17:56 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate

2023-12-10 17:51 - 2023-12-10 17:52 - 000000000 ____D C:\WINDOWS\ServiceProfiles

2023-12-10 17:51 - 2023-12-10 17:51 - 000008192 _____ C:\WINDOWS\system32\config\userdiff

2023-12-10 17:47 - 2023-12-10 17:47 - 000000000 ____D C:\Program Files\Reference Assemblies

2023-12-10 17:47 - 2023-12-10 17:47 - 000000000 ____D C:\Program Files\MSBuild

2023-12-10 17:47 - 2023-12-10 17:47 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies

2023-12-10 17:47 - 2023-12-10 17:47 - 000000000 ____D C:\Program Files (x86)\MSBuild

2023-12-10 17:19 - 2023-12-10 18:21 - 000000000 ___DC C:\WINDOWS\Panther

2023-12-10 17:15 - 2023-12-10 17:19 - 000000000 ____D C:\ESD

2023-12-10 17:14 - 2023-12-10 17:14 - 000000000 ___HD C:\$Windows.~WS

2023-12-10 17:12 - 2023-12-10 17:12 - 000000000 ____D C:\Program Files (x86)\WindowsInstallationAssistant

2023-12-10 16:38 - 2023-12-10 16:38 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Local\ElevatedDiagnostics

2023-12-10 15:59 - 2023-12-10 17:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2023-12-10 15:59 - 2023-12-10 15:59 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\Sun

2023-12-10 15:59 - 2023-12-10 15:59 - 000000000 ____D C:\Program Files\Java

2023-12-10 15:59 - 2023-10-04 08:31 - 000170624 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll

2023-12-10 15:59 - 2023-10-04 08:25 - 000200320 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll

2023-12-10 15:57 - 2023-12-10 15:57 - 000000000 ____D C:\Program Files (x86)\Java

2023-12-10 15:11 - 2023-12-10 15:11 - 000000000 ___HD C:\$SysReset

2023-12-09 21:54 - 2023-12-11 20:50 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Local\Updates

2023-12-09 21:54 - 2023-12-09 21:54 - 000014544 _____ (OpenLibSys.org) C:\WINDOWS\system32\WinRing0x64.sys

2023-12-09 21:54 - 2023-12-09 21:54 - 000000000 ____D C:\Program Files (x86)\OceanofGames.ccom

2023-12-09 21:51 - 2023-12-09 21:51 - 000010842 _____ C:\WINDOWS\unins000.dat

2023-12-09 21:51 - 2023-12-09 21:51 - 000001823 _____ C:\AiOLog.txt

2023-12-09 21:51 - 2023-12-09 21:50 - 001207319 _____ C:\WINDOWS\unins000.exe

2023-12-09 21:51 - 2017-04-01 20:44 - 003450616 _____ (Red Hat) C:\WINDOWS\system32\cygwin1.dll

2023-12-09 21:51 - 2017-01-26 07:25 - 001265664 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\libeay32.dll

2023-12-09 21:51 - 2017-01-26 07:25 - 000274944 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\ssleay32.dll

2023-12-09 21:51 - 2017-01-26 07:25 - 000274944 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\libssl32.dll

2023-12-09 21:51 - 2015-07-10 11:51 - 000456008 _____ (AutoIt Team) C:\WINDOWS\system32\autoitx3.dll

2023-12-09 21:51 - 2014-01-31 03:14 - 001055676 _____ (Free Software Foundation) C:\WINDOWS\system32\libiconv2.dll

2023-12-09 21:51 - 2014-01-25 14:30 - 000131072 _____ (Sereby Corporation) C:\WINDOWS\system32\AiORuntimes.dll

2023-12-09 21:51 - 2012-06-14 15:36 - 000107520 _____ C:\WINDOWS\system32\zlib1.dll

2023-12-09 21:51 - 2012-04-03 17:11 - 000138752 _____ C:\WINDOWS\system32\libpng15.dll

2023-12-09 21:51 - 2011-10-12 04:09 - 004033440 _____ (Intel Corporation) C:\WINDOWS\system32\libmmd.dll

2023-12-09 21:51 - 2011-10-01 09:16 - 000445016 _____ (Creative Labs) C:\WINDOWS\system32\wrap_oal.dll

2023-12-09 21:51 - 2011-10-01 09:16 - 000109144 _____ (Portions © Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\system32\openal32.dll

2023-12-09 21:51 - 2011-01-12 14:36 - 001054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71u.dll

2023-12-09 21:51 - 2011-01-12 14:25 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71DEU.dll

2023-12-09 21:51 - 2011-01-12 14:25 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ITA.dll

2023-12-09 21:51 - 2011-01-12 14:25 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71FRA.dll

2023-12-09 21:51 - 2011-01-12 14:25 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ESP.dll

2023-12-09 21:51 - 2011-01-12 14:25 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ENU.dll

2023-12-09 21:51 - 2011-01-12 14:25 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71KOR.dll

2023-12-09 21:51 - 2011-01-12 14:25 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71JPN.dll

2023-12-09 21:51 - 2011-01-12 14:25 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71CHT.dll

2023-12-09 21:51 - 2011-01-12 14:25 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71CHS.dll

2023-12-09 21:51 - 2011-01-12 14:19 - 001060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71.dll

2023-12-09 21:51 - 2011-01-12 13:53 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl71.dll

2023-12-09 21:51 - 2008-08-26 07:40 - 000162304 _____ C:\WINDOWS\system32\libpng13.dll

2023-12-09 21:51 - 2007-02-01 23:13 - 000503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp71.dll

2023-12-09 21:51 - 2007-02-01 20:11 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr71.dll

2023-12-09 21:51 - 2007-01-30 23:04 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr70.dll

2023-12-09 21:51 - 2006-08-26 01:28 - 001017344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70u.dll

2023-12-09 21:51 - 2006-08-26 01:15 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ITA.dll

2023-12-09 21:51 - 2006-08-26 01:15 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70FRA.dll

2023-12-09 21:51 - 2006-08-26 01:15 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ESP.dll

2023-12-09 21:51 - 2006-08-26 01:15 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70DEU.dll

2023-12-09 21:51 - 2006-08-26 01:15 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ENU.dll

2023-12-09 21:51 - 2006-08-26 01:15 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70KOR.dll

2023-12-09 21:51 - 2006-08-26 01:15 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70JPN.dll

2023-12-09 21:51 - 2006-08-26 01:15 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70CHT.dll

2023-12-09 21:51 - 2006-08-26 01:15 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70CHS.dll

2023-12-09 21:51 - 2006-08-26 01:07 - 001024000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70.dll

2023-12-09 21:51 - 2006-08-26 00:17 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl70.dll

2023-12-09 21:51 - 2005-05-06 14:52 - 000103424 _____ (GNU <www.gnu.org>) C:\WINDOWS\system32\libintl3.dll

2023-12-09 21:51 - 2005-01-20 20:25 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvci70.dll

2023-12-09 21:51 - 2002-01-05 06:40 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp70.dll

2023-12-09 21:51 - 1996-01-12 04:00 - 000722192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vb40032.dll

2023-12-09 21:50 - 2023-12-10 17:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2023-12-09 21:50 - 2023-12-09 21:50 - 000000000 ____D C:\Program Files\Microsoft Silverlight

2023-12-09 21:50 - 2023-12-09 21:50 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2023-12-08 14:52 - 2023-12-08 14:55 - 038956186 _____ C:\Users\Jon Kunkel\Downloads\_Solvettube.com_Pure.mp4

2023-12-04 11:13 - 2023-12-10 18:05 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenTX Companion 2.3

2023-12-04 11:13 - 2023-12-04 11:13 - 000000000 ____D C:\Users\Jon Kunkel\OneDrive\Documents\OpenTX

2023-11-27 11:39 - 2023-11-27 11:39 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Local\YTD

 

==================== One month (modified) ==================

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2023-12-15 22:11 - 2023-05-05 04:27 - 000000000 ____D C:\WINDOWS\SystemTemp

2023-12-15 22:10 - 2019-12-07 01:13 - 000000000 ____D C:\WINDOWS\INF

2023-12-15 22:08 - 2019-12-07 01:03 - 000000000 ____D C:\WINDOWS\CbsTemp

2023-12-15 22:06 - 2023-07-13 19:10 - 000000000 ___RD C:\Users\Jon Kunkel\OneDrive

2023-12-15 22:05 - 2023-07-14 08:48 - 000000000 ____D C:\Program Files (x86)\Google

2023-12-15 22:05 - 2019-12-07 01:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2023-12-15 22:01 - 2023-07-13 19:07 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin

2023-12-15 22:01 - 2019-12-07 01:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI

2023-12-15 19:45 - 2019-12-07 01:14 - 000000000 ___HD C:\Program Files\WindowsApps

2023-12-15 19:45 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\AppReadiness

2023-12-15 19:03 - 2023-07-15 13:50 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Local\D3DSCache

2023-12-15 18:50 - 2023-07-14 11:48 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2023-12-14 16:52 - 2023-07-14 12:00 - 000000000 ____D C:\ProgramData\Zoom Player

2023-12-13 16:52 - 2023-09-09 20:57 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2023-12-11 20:52 - 2019-01-12 20:54 - 000000000 ____D C:\Private Movies

2023-12-11 14:31 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV

2023-12-11 14:31 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT

2023-12-11 14:31 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE

2023-12-11 14:31 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX

2023-12-11 14:31 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV

2023-12-11 14:31 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT

2023-12-11 14:31 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\system32\et-EE

2023-12-11 14:31 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\system32\es-MX

2023-12-11 14:31 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions

2023-12-11 14:31 - 2019-12-07 01:14 - 000000000 ____D C:\Program Files\Windows Defender

2023-12-11 13:07 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\appcompat

2023-12-10 21:38 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports

2023-12-10 18:38 - 2019-12-07 01:14 - 000000000 ___RD C:\WINDOWS\PrintDialog

2023-12-10 18:21 - 2023-07-13 19:05 - 000000000 ___RD C:\Users\Jon Kunkel\3D Objects

2023-12-10 18:21 - 2019-12-07 01:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2023-12-10 18:21 - 2017-11-27 19:47 - 000000000 __RHD C:\Users\Public\AccountPictures

2023-12-10 18:20 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\system32\oobe

2023-12-10 18:11 - 2019-12-07 01:14 - 000000000 __RSD C:\WINDOWS\Media

2023-12-10 18:05 - 2023-10-04 21:34 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\johnsadventures.com

2023-12-10 18:05 - 2023-07-14 12:02 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter

2023-12-10 18:04 - 2023-07-27 03:26 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MusicBee

2023-12-10 18:03 - 2023-07-13 19:05 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Local\Packages

2023-12-10 18:03 - 2019-12-07 01:14 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows

2023-12-10 18:00 - 2023-07-15 14:59 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM

2023-12-10 18:00 - 2023-07-14 09:29 - 000000000 ____D C:\WINDOWS\system32\DAX3

2023-12-10 18:00 - 2023-07-14 09:29 - 000000000 ____D C:\WINDOWS\system32\DAX2

2023-12-10 17:56 - 2023-11-02 14:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Software꞉ Adrenalin Edition

2023-12-10 17:56 - 2023-11-02 14:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Bug Report Tool

2023-12-10 17:56 - 2023-11-02 14:40 - 000000000 ____D C:\WINDOWS\system32\AMD

2023-12-10 17:56 - 2023-08-09 14:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5200 series User Registration

2023-12-10 17:56 - 2023-08-09 14:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5200 series

2023-12-10 17:56 - 2023-08-09 14:00 - 000000000 ____D C:\WINDOWS\system32\STRING

2023-12-10 17:56 - 2023-08-09 13:53 - 000000000 ___HD C:\WINDOWS\system32\CanonIJ Uninstaller Information

2023-12-10 17:56 - 2023-07-26 16:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dupeGuru

2023-12-10 17:56 - 2023-07-25 16:45 - 000000000 ____D C:\WINDOWS\system32\appmgmt

2023-12-10 17:56 - 2023-07-20 21:20 - 000000000 ____D C:\WINDOWS\system32\MpEngineStore

2023-12-10 17:56 - 2023-07-20 06:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader

2023-12-10 17:56 - 2023-07-17 12:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent

2023-12-10 17:56 - 2023-07-15 15:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nahimic 2+ Audio Driver

2023-12-10 17:56 - 2023-07-14 14:03 - 000000000 ____D C:\WINDOWS\system32\A-Volute

2023-12-10 17:56 - 2023-07-14 12:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow

2023-12-10 17:56 - 2023-07-14 12:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AC3Filter

2023-12-10 17:56 - 2023-07-14 12:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters

2023-12-10 17:56 - 2023-07-14 12:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zoom Player

2023-12-10 17:56 - 2023-07-14 09:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip

2023-12-10 17:56 - 2023-07-14 08:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive

2023-12-10 17:56 - 2019-12-07 01:18 - 000000000 ____D C:\WINDOWS\Setup

2023-12-10 17:56 - 2019-12-07 01:14 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 __RHD C:\Users\Public\Libraries

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ___SD C:\WINDOWS\system32\UNP

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ___SD C:\WINDOWS\system32\F12

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\system32\spool

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\System

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\ShellExperiences

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\ServiceState

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\schemas

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ____D C:\ProgramData\USOPrivate

2023-12-10 17:56 - 2019-12-07 01:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared

2023-12-10 17:56 - 2017-09-29 06:42 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB

2023-12-10 17:56 - 2017-09-29 06:42 - 000000000 ____D C:\WINDOWS\system32\gd-GB

2023-12-10 17:56 - 2017-09-29 05:46 - 000000000 ____D C:\WINDOWS\system32\MsDtc

2023-12-10 17:56 - 2017-09-29 05:46 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy

2023-12-10 17:54 - 2017-09-29 05:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed

2023-12-10 17:54 - 2017-09-29 05:46 - 000000000 ____D C:\WINDOWS\system32\Macromed

2023-12-10 17:53 - 2023-10-23 20:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eagle Tree Systems

2023-12-10 17:53 - 2023-08-09 14:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities

2023-12-10 17:53 - 2023-07-15 14:59 - 000000000 ____D C:\Program Files\Realtek

2023-12-10 17:53 - 2023-07-14 08:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI

2023-12-10 17:53 - 2019-12-07 01:14 - 000000000 ____D C:\WINDOWS\Resources

2023-12-10 17:05 - 2023-10-18 19:20 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Local\CrashDumps

2023-12-10 15:27 - 2023-07-17 10:30 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\Microsoft\MMC

2023-12-10 03:27 - 2020-11-22 10:02 - 000008192 ___SH C:\DumpStack.log.tmp

2023-12-09 22:16 - 2023-07-17 12:19 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\qBittorrent

2023-12-09 21:49 - 2023-07-13 19:08 - 000000000 ____D C:\ProgramData\Package Cache

2023-12-09 21:41 - 2023-07-17 12:17 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\WinRAR

2023-12-08 22:23 - 2023-07-27 03:26 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Roaming\MusicBee

2023-11-30 14:57 - 2023-11-02 14:55 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Local\AMD_Common

2023-11-28 20:10 - 2023-07-14 14:05 - 000000000 ____D C:\ProgramData\Packages

2023-11-28 20:10 - 2023-07-13 19:06 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Local\Publishers

2023-11-28 20:09 - 2023-07-14 08:15 - 000000000 ____D C:\Users\Jon Kunkel\AppData\Local\PlaceholderTileLogoFolder

2023-11-27 11:39 - 2023-07-20 06:42 - 000000000 ____D C:\ProgramData\YTD Video Downloader

 

==================== SigCheck ============================

 

(There is no automatic fix for files that do not pass verification.)

 

==================== End of FRST.txt ========================

Edited by jlk69, 16 December 2023 - 12:27 AM.

[jlk69]

Windows Virus & Threat protection is still broken. Unable to perform a scan. When I try to run any scan the estimated time remaining shows: 00:00:00 and 0 files scanned

[jlk69]

Thank you for your help.

 

Can I expect any help to restore Windows Virus & Threat protection?

 

Should I reinstall Windows?

[DR M]

Hello.

 

Since you didn't receive a reply yet, I am sure that RKinner didn't receive a notification of your reply. Unfortunately, there is an error with server's email, and as a result we are not getting email notifications when there is a reply in a topic we follow.

 

Wondering if you solved your issue with Defender.