Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Laptop running pretty slow [Solved]


  • This topic is locked This topic is locked

#1
Terryc250

Terryc250

    Member

  • Member
  • PipPip
  • 91 posts

Not sure why it has suddenly been running slow lately, maybe theres some malware.
 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 11.01.2024
Ran by tehke (administrator) on LAPTOP-D982FIHM (LENOVO 82N6) (16-01-2024 00:25:33)
Running from C:\Users\tehke\Desktop\FRST64.exe
Loaded Profiles: tehke
Platform: Microsoft Windows 11 Home Version 22H2 22621.3007 (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\LenovoVantage-(DeviceSettingsSystemAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\LenovoVantage-(GenericMessagingAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\LenovoVantage-(LenovoGamingSystemAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\LenovoVantage-(VantageCoreAddin).exe
(C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzAppManager
(C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzDiagnostic
(C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzIoTDeviceManager
(C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzSmartlightingDeviceManager
(C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe ->) (Razer USA Ltd. -> The CefSharp Authors) C:\Program Files (x86)\Razer\Razer Services\Razer Central\CefSharp.BrowserSubprocess.exe <5>
(C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe
(C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe ->) (Razer USA Ltd. -> ) C:\Program Files (x86)\Razer\Synapse3\UserProcess\Razer Synapse Service Process.exe
(C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe ->) (Razer USA Ltd. -> The CefSharp Authors) C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\CefSharp.BrowserSubprocess.exe <2>
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (OpenJS Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(C:\Program Files\Tobii\Tobii EyeX\Tobii.Service.exe ->) (Tobii AB -> Tobii AB) C:\Program Files\Tobii\Tobii EyeX\Tobii.EyeX.Engine.exe
(C:\Program Files\Tobii\Tobii EyeX\Tobii.Service.exe ->) (Tobii AB -> Tobii AB) C:\Program Files\Tobii\Tobii EyeX\Tobii.EyeX.Interaction.exe
(D:\Downloads\MB\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) D:\Downloads\MB\mbamtray.exe
(D:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) D:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <6>
(Discord Inc. -> Discord Inc.) C:\Users\tehke\AppData\Local\Discord\app-1.0.9030\Discord.exe <6>
(DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_f6255f9b56d06c65\LenovoUtilityService.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_f6255f9b56d06c65\FnHotkeyCapsLKNumLK.exe
(DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_f6255f9b56d06c65\LenovoUtilityService.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_f6255f9b56d06c65\FnHotkeyUtility.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <23>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <14>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msinfo32.exe
(explorer.exe ->) (Now.gg, INC -> now.gg, Inc.) C:\Users\tehke\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe <4>
(explorer.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe
(explorer.exe ->) (Ryochan7) [File not signed] G:\DS4Windows\DS4Windows.exe
(explorer.exe ->) (ShareX Team) [File not signed] D:\Program Files\ShareX\ShareX.exe
(explorer.exe ->) (Valve Corp. -> Valve Corporation) D:\Program Files (x86)\Steam\steam.exe
(Lenovo -> Lenovo) C:\ProgramData\Lenovo\Vantage\AddinData\LenovoBatteryGaugeAddin\x64\QSHelper.exe
(Nvidia Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(services.exe ->) () [File not signed] C:\Program Files\KelVPN\KelVPNService.exe
(services.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(services.exe ->) (A-Volute SAS -> Nahimic) C:\Windows\System32\NahimicService.exe
(services.exe ->) (Disc Soft Ltd -> Disc Soft Ltd) G:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(services.exe ->) (Keepsolid Inc. -> KeepSolid Inc.) D:\Program Files (x86)\VPN Unlimited\vpn-unlimited-daemon.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\System32\drivers\lenovo\UDC\Service\UDClientService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\LenovoVantageService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_f6255f9b56d06c65\LenovoUtilityService.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) D:\Downloads\MB\MBAMService.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncHelper.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Locator.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvlti.inf_amd64_cfec3e7de6520682\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Razer USA Ltd. -> Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS3\GameManagerService3.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzChromaStreamServer.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\CortexLauncherService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe
(services.exe ->) (Razer USA Ltd. -> Razer) C:\Program Files (x86)\Razer\RzUpdateEngineService\RzUpdateEngineService.exe
(services.exe ->) (Razer USA Ltd. -> Razer) C:\Windows\System32\RZTHXService.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_0e38956337e3fd2b\RtkAudUService64.exe
(services.exe ->) (Tobii AB -> Tobii AB) C:\Program Files\Tobii\Tobii EyeX\Tobii.Service.exe
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe
(svchost.exe ->) (21E1B422-257A-44A2-9C8F-379165856473 -> ) C:\Program Files\WindowsApps\A-Volute.Nahimic_1.9.22.0_x64__w2gh52qy24etm\Nahimic3.exe
(svchost.exe ->) (A-Volute SAS -> Nahimic) C:\Windows\System32\NahimicSvc64.exe
(svchost.exe ->) (A-Volute SAS -> Nahimic) C:\Windows\SysWOW64\NahimicSvc32.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> ) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_424.400.20.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe
 
==================== Registry (Whitelisted) ===================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_0e38956337e3fd2b\RtkAudUService64.exe [1625448 2022-11-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [3069768 2022-04-08] (Riot Games, Inc. -> Riot Games, Inc.)
HKLM\...\Run: [RZTHXHelper] => C:\WINDOWS\system32\RZTHXHelper.exe [385264 2020-04-26] (Razer USA Ltd. -> )
HKLM\...\Run: [BCSSync] => G:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [122427152 2021-07-14] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [AirBackupHelper] => C:\Program Files (x86)\iMobie\AnyTrans\AirBackupHelper.exe [2740872 2022-11-21] (iMobie Inc. -> iMobie Inc.)
HKLM-x32\...\Run: [RazerCortex] => C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe [543736 2023-11-21] (Razer USA Ltd. -> Razer Inc.)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> )
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2595344 2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\Run: [Discord] => C:\Users\tehke\AppData\Local\Discord\Update.exe [1512616 2022-02-17] (Discord Inc. -> GitHub)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3572488 2023-12-27] (Razer USA Ltd. -> Razer Inc.)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [4388200 2024-01-12] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\Run: [CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> )
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\Run: [Opera GX Stable] => C:\Users\tehke\AppData\Local\Programs\Opera GX\launcher.exe [2296224 2024-01-05] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\tehke\AppData\Local\Microsoft\Teams\Update.exe [2587368 2023-04-02] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\Run: [EpicGamesLauncher] => "E:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe" -silent (No File)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\Run: [Opera GX Browser Assistant] => C:\Users\tehke\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe [3291288 2021-02-01] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\Run: [MicrosoftEdgeAutoLaunch_5336C2924B55FD107B3D46AF0B1AC178] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3854272 2024-01-10] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\Run: [AirBackupHelper] => C:\Program Files (x86)\iMobie\AnyTrans\AirBackupHelper.exe [2740872 2022-11-21] (iMobie Inc. -> iMobie Inc.)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\Run: [AnyTransToolHelper] => C:\Program Files (x86)\iMobie\AnyTrans\AnyTransToolHelper.exe [576136 2022-11-21] (iMobie Inc. -> iMobie Inc.)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\Run: [LenovoVantageToolbar] => C:\ProgramData\Lenovo\Vantage\AddinData\LenovoBatteryGaugeAddin\x64\QSHelper.exe [108456 2023-09-19] (Lenovo -> Lenovo)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\Run: [electron.app.BlueStacks Services] => C:\Users\tehke\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe [162219656 2023-10-18] (Now.gg, INC -> now.gg, Inc.)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\Run: [DAEMON Tools Lite Automount] => G:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd -> Disc Soft Ltd)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\Policies\Explorer\DisallowRun: [1] irsetup.exe
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\MountPoints2: {ac8a5ee2-acb9-11ec-8aed-106fd99e34c8} - "E:\SETUP.EXE" 
HKU\S-1-5-21-3252700674-1244316876-1502611229-1004\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2595344 2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1004\...\Run: [com.squirrel.Teams.Teams] => C:\Users\terry\AppData\Local\Microsoft\Teams\Update.exe [2587368 2023-04-02] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1004\...\Run: [EpicGamesLauncher] => "E:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe" -silent (No File)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1004\...\Run: [LenovoVantageToolbar] => C:\ProgramData\Lenovo\Vantage\AddinData\LenovoBatteryGaugeAddin\x64\QSHelper.exe [108456 2023-09-19] (Lenovo -> Lenovo)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1004\...\Run: [AirBackupHelper] => C:\Program Files (x86)\iMobie\AnyTrans\AirBackupHelper.exe [2740872 2022-11-21] (iMobie Inc. -> iMobie Inc.)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1004\...\Run: [AnyTransToolHelper] => C:\Program Files (x86)\iMobie\AnyTrans\AnyTransToolHelper.exe [576136 2022-11-21] (iMobie Inc. -> iMobie Inc.)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1004\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3572488 2023-12-27] (Razer USA Ltd. -> Razer Inc.)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1004\...\Run: [RazerAxon] => C:\Program Files (x86)\Razer\Razer Axon\RazerAxon.exe [452904 2023-12-15] (Razer USA Ltd. -> Razer Inc.)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1004\...\Run: [RzAppEngine] => C:\Program Files\Razer\RzAppEngine\rzappengine.exe [1641840 2021-10-05] (Razer USA Ltd. -> Razer Inc.)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1004\...\Run: [CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> )
HKU\S-1-5-21-3252700674-1244316876-1502611229-1004\...\Run: [MicrosoftEdgeAutoLaunch_9CE861ED124B1A707734DA2D6DCB9C85] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3854272 2024-01-10] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1006\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2595344 2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1006\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3572488 2023-12-27] (Razer USA Ltd. -> Razer Inc.)
HKU\S-1-5-21-3252700674-1244316876-1502611229-1006\...\Run: [MicrosoftEdgeAutoLaunch_9E340A4B8FFE17B011AC7F2648A3CF2E] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3854272 2024-01-10] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-18\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3572488 2023-12-27] (Razer USA Ltd. -> Razer Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}] -> C:\Program Files\Razer\RzAppEngine\1.49.0.0\Installer\chrmstp.exe [2023-02-23] (Razer USA Ltd. -> Razer Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\120.0.6099.217\Installer\chrmstp.exe [2024-01-12] (Google LLC -> Google LLC)
Startup: C:\Users\tehke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DS4Windows.lnk [2023-10-05]
ShortcutTarget: DS4Windows.lnk -> G:\DS4Windows\DS4Windows.exe (Ryochan7) [File not signed]
Startup: C:\Users\tehke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ShareX.lnk [2022-04-01]
ShortcutTarget: ShareX.lnk -> D:\Program Files\ShareX\ShareX.exe (ShareX Team) [File not signed]
 
==================== Scheduled Tasks (Whitelisted) =================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {DCC5E6F8-2B3A-44BE-9B80-5860CC919A91} - System32\Tasks\BlueStacksHelper_nxt => C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe [302968 2023-08-29] (Now.gg, INC -> BlueStack Systems, Inc.)
Task: {5768F714-99B3-489E-85DD-54A7546EDBCB} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem122.0.6234.0{70508139-F4B8-4D75-B200-6150CE807181} => C:\Program Files (x86)\Google\GoogleUpdater\122.0.6234.0\updater.exe [4639520 2024-01-07] (Google LLC -> Google LLC) <==== ATTENTION
Task: {C002060A-F7AC-41D5-A686-8703DB77D121} - System32\Tasks\HidHide_Updater => C:\Program Files\Nefarius Software Solutions\HidHide\HidHide_Updater.exe [1206200 2023-05-06] (Nefarius Software Solutions e.U. -> Nefarius Software Solutions e.U.)
Task: {9B2542E6-086D-49EA-93C2-02B5352754E9} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2113024 2023-11-09] () [File not signed]
Task: {11617D12-4B3C-4AF4-8F38-A30A4BC5E5AA} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [74952 2022-11-20] (Lenovo -> Lenovo Group Ltd.)
Task: {9C49309C-2145-4677-9F0B-9EC1CC2EB47E} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => C:\WINDOWS\system32\sc.exe [98304 2022-05-06] (Microsoft Windows -> Microsoft Corporation) -> START ImControllerService
Task: {1C319FDD-C11F-4D5E-ACC2-626F2FA42656} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => C:\WINDOWS\System32\reg.exe [102400 2022-05-06] (Microsoft Windows -> Microsoft Corporation) -> add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32
Task: {F2F078D0-CE8A-4688-BF71-E3F1038A1A61} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\9416fd6f-126b-4cd0-9c0f-6df2eb97173a => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.)
Task: {32DC3A7E-9D2F-4BE0-84E2-1C68D08A152D} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\9cad9ea0-7e10-4c68-9b76-9235c1a79335 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.)
Task: {CCA474FD-CA1A-4BBC-BD81-C760B026F694} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\bde4a853-151f-42fc-95a4-8f880d8c8e3c => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.)
Task: {F2CD1064-F520-4304-8817-7A96707686CB} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\eba0c355-a995-4b13-8a57-a857209a6b0a => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.)
Task: {45D7879C-FDC7-4679-9BD1-EE1D425E5C50} - System32\Tasks\Lenovo\UDC\Lenovo UDC Idle Monitor => C:\windows\system32\drivers\Lenovo\udc\Service\UDCUserAgent.exe [90584 2023-09-23] (Lenovo -> Lenovo Group Ltd.)
Task: {05C1B9AA-A25B-4340-81E7-96BBF28AD401} - System32\Tasks\Lenovo\UDC\Lenovo UDC Monitor => C:\WINDOWS\system32\drivers\lenovo\udc\data\InfBackup\UdcInfInstaller.exe [183768 2023-09-23] (Lenovo -> Lenovo Group Ltd.)
Task: {E91CA5CE-637F-4043-A1BD-54389D1C7883} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => C:\WINDOWS\system32\sc.exe [98304 2022-05-06] (Microsoft Windows -> Microsoft Corporation) -> start LenovoVantageService
Task: {BA835612-6945-4E3E-8276-F8FE30374EAB} - System32\Tasks\Lenovo\Vantage\Schedule\BatteryGaugeAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\ScheduleEventAction.exe [30064 2023-11-16] (Lenovo -> Lenovo)
Task: {62B172AE-A7DF-4EC2-9B9B-F8B0068C227B} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\ScheduleEventAction.exe [30064 2023-11-16] (Lenovo -> Lenovo)
Task: {165C51FE-88FC-46F5-86EE-C8174ED4A1EE} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin => C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\ScheduleEventAction.exe [30064 2023-11-16] (Lenovo -> Lenovo)
Task: {D85FE556-B54E-4263-A5AB-A4E57E02FD84} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\ScheduleEventAction.exe [30064 2023-11-16] (Lenovo -> Lenovo)
Task: {924A6861-0C9E-4510-8190-2B60DDBE6692} - System32\Tasks\Lenovo\Vantage\Schedule\IdeaNotebookAddinDailyEvent => C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\ScheduleEventAction.exe [30064 2023-11-16] (Lenovo -> Lenovo)
Task: {1AE370FD-A53C-401A-9B13-334C7FEE2391} - System32\Tasks\Lenovo\Vantage\Schedule\Lenovo.Vantage.SmartPerformance.MonthlyReport => C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\ScheduleEventAction.exe [30064 2023-11-16] (Lenovo -> Lenovo)
Task: {348D9797-16EF-4393-A904-CB04D0EA1716} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoBatteryPartSalesMonthlyToast => C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\ScheduleEventAction.exe [30064 2023-11-16] (Lenovo -> Lenovo)
Task: {32A0AB69-654E-46A4-A776-32CC92D5F697} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoCompanionAppAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\ScheduleEventAction.exe [30064 2023-11-16] (Lenovo -> Lenovo)
Task: {CD9522DD-08F6-4AD1-8168-0D8B556632B1} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\ScheduleEventAction.exe [30064 2023-11-16] (Lenovo -> Lenovo)
Task: {12B8B342-EFBA-430F-AA8D-2F2C467679E1} - System32\Tasks\Lenovo\Vantage\Schedule\NotificationCenter => C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\ScheduleEventAction.exe  NotificationCenter (No File)
Task: {45FD8AE5-5B64-45A5-8939-2F84E27024A1} - System32\Tasks\Lenovo\Vantage\Schedule\SettingsWidgetAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\ScheduleEventAction.exe [30064 2023-11-16] (Lenovo -> Lenovo)
Task: {918A3CB6-62B7-4155-BBCA-ECC2D40A968B} - System32\Tasks\Lenovo\Vantage\Schedule\SmartPerformance.ExpireReminder => C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\ScheduleEventAction.exe [30064 2023-11-16] (Lenovo -> Lenovo)
Task: {84F97A57-0BB5-4FD0-A817-0FC9D7DAD362} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinWeekScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\ScheduleEventAction.exe [30064 2023-11-16] (Lenovo -> Lenovo)
Task: {F3580E28-3B60-4D31-BA14-607D3CC67094} - System32\Tasks\Lenovo\Vantage\StartupFixPlan => C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\uninstall.exe [311776 2023-11-16] (Lenovo -> Lenovo)
Task: {74752AB8-A297-4A1E-9025-936CE413D261} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21916856 2023-12-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {039CAB0D-03FF-47FB-A508-0E4B6AF082B7} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21916856 2023-12-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {5224B227-0AAB-40BD-8209-CF6F83DB14D8} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141352 2024-01-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {EE7FD852-8DEB-4B68-AC72-077D5D94FDC1} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141352 2024-01-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (No File)
Task: {AC5926B4-50DF-46B2-888C-B0B16605D564} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CD6352D4-924B-4822-9B93-B22E807C3432} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DE5BBF9A-1D1F-47A5-91CC-978BBD0B4FE2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DC71A2BD-24AB-4BD9-84E2-8F3C79903AC0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D3E59819-91B1-44FB-8266-5065662052E5} - System32\Tasks\NahimicSvc32Run => C:\Windows\SysWOW64\NahimicSvc32.exe [844400 2022-03-29] (A-Volute SAS -> Nahimic)
Task: {5F1A05D1-AEAA-4C4C-BC5B-B29E56186078} - System32\Tasks\NahimicSvc64Run => C:\Windows\system32\NahimicSvc64.exe [1105520 2022-03-29] (A-Volute SAS -> Nahimic)
Task: {BD56EE58-C8F8-4878-A334-142FBC268642} - System32\Tasks\NahimicTask32 => C:\WINDOWS\system32\..\SysWOW64\NahimicSvc32.exe [844400 ] (A-Volute SAS -> Nahimic)
Task: {EDA77F27-A4C8-419D-A335-19E007E7212A} - System32\Tasks\NahimicTask64 => C:\WINDOWS\system32\.\NahimicSvc64.exe [1105520 ] (A-Volute SAS -> Nahimic)
Task: {70886994-370A-49C3-9019-1FB383675967} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1003128 2022-03-15] (Nvidia Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {A8A31AD1-3D57-4BED-B0A0-B71B90BDD282} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3342376 2023-01-27] (Nvidia Corporation -> NVIDIA Corporation)
Task: {6075DBAE-26C7-40DD-A9B5-19A676F40142} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [649784 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3E6FFA75-B10B-41E0-B9EE-7BBA9BAC5D7B} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {8D78EDC2-C46A-454D-AE8A-5BCAB319B934} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {B03505E6-F252-4E13-9EC7-BE56256FC7A1} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {0DB6F1DB-3637-421B-B7C5-CCB7FB87CCE9} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4BD68BCD-C380-4DEB-ADE1-BED254D129E4} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4BF0C8A4-D215-4F7F-9B25-D1CC00F31E7F} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {1C9762B7-B95D-4004-889E-038B948B0574} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4130736 2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {E99C436B-F57E-4D2B-8E76-ADD70103F937} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3252700674-1244316876-1502611229-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4130736 2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {C0523EA8-5DF0-4B5C-A016-A4D6343BA63A} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3252700674-1244316876-1502611229-1004 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4130736 2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {6EDBA1BC-0B71-4A64-B3AA-BAE60375919A} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3252700674-1244316876-1502611229-1006 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4130736 2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {9A6EF20A-8FC9-4AEE-A555-45C4AD5DA42B} - System32\Tasks\Opera GX scheduled assistant Autoupdate 1652344982 => C:\Users\tehke\AppData\Local\Programs\Opera GX\launcher.exe [2296224 2024-01-05] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\tehke\AppData\Local\Programs\Opera GX\assistant" $(Arg0)
Task: {4B4BB0FB-1EB7-4173-9967-24C17B9EF7C9} - System32\Tasks\Opera GX scheduled Autoupdate 1650357760 => C:\Users\tehke\AppData\Local\Programs\Opera GX\launcher.exe [2296224 2024-01-05] (Opera Norway AS -> Opera Software)
Task: {1DB03838-AC13-4D55-AFB5-5309F3C80271} - System32\Tasks\RazerCortexScheduleClean => C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe [543736 2023-11-21] (Razer USA Ltd. -> Razer Inc.)
Task: {EE1ADD0E-6A2C-417C-BF00-C43C5B55E173} - System32\Tasks\ViGEmBus_Updater => C:\Program Files\Nefarius Software Solutions\ViGEm Bus Driver\ViGEmBus_Updater.exe [1117096 2022-09-27] (Nefarius Software Solutions e.U. -> Nefarius Software Solutions e.U.)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{07854339-6b41-4e40-b276-a3cd8ebcb50f}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{3f438854-abf6-4678-8778-405ce82b3a9f}: [DhcpNameServer] 150.208.1.3
Tcpip\..\Interfaces\{c439920d-0d92-4cbf-9a78-ff265fa201f0}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{c439920d-0d92-4cbf-9a78-ff265fa201f0}\4554C4553583445424: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{c439920d-0d92-4cbf-9a78-ff265fa201f0}\455627279791023702960586F6E656: [DhcpNameServer] 172.20.10.1
 
Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\tehke\AppData\Local\Microsoft\Edge\User Data\Default [2024-01-16]
Edge Notifications: Default -> hxxps://www.wcostream.net
Edge Extension: (uBlock Origin) - C:\Users\tehke\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2024-01-15]
Edge Extension: (Google Docs Offline) - C:\Users\tehke\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-11]
Edge Extension: (Edge relevant text changes) - C:\Users\tehke\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-09-15]
Edge Extension: (FadBlock: Friendly Adblock for Youtube™) - C:\Users\tehke\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\mdadjjfmjhfcibgfhfjbaiiljpllkbfc [2023-11-20]
Edge Extension: (AdBlock — best ad blocker) - C:\Users\tehke\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2024-01-16]
 
FireFox:
========
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> G:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> D:\Program Files\VideoLAN\VLC\npvlc.dll [2022-03-24] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.17.4 -> D:\Program Files\VideoLAN\VLC\npvlc.dll [2022-03-24] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
 
Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Default [2024-01-16]
CHR DownloadDir: D:\Downloads
CHR StartupUrls: Default -> "hxxp://google.ca/"
CHR Extension: (Scope by SellerLabs) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Default\Extensions\aifeflcmgbbjnkopdmliglhooofhgmld [2023-10-11]
CHR Extension: (BetterTTV) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2024-01-04]
CHR Extension: (MEGA) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Default\Extensions\bigefpfhnfcobdlfbedofhhaibnlghod [2024-01-12]
CHR Extension: (Ban Checker for Steam) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Default\Extensions\canbadmphamemnmdfngmcabnjmjgaiki [2023-10-03]
CHR Extension: (uBlock Origin) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2024-01-15]
CHR Extension: (Eno® from Capital One®) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Default\Extensions\clmkdohmabikagpnhjmgacbclihgmdje [2023-11-19]
CHR Extension: (Tampermonkey) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2024-01-12]
CHR Extension: (Google Docs Offline) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-01-12]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2024-01-12]
CHR Extension: (Coinbase Wallet extension) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnfanknocfeofbddgcijnmhnfnkdnaad [2024-01-11]
CHR Extension: (Similarweb - Traffic Rank & Website Analysis) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Default\Extensions\hoklmmgfnpapgjgcpechhaamimifchmp [2024-01-04]
CHR Extension: (Egrow.io Amazon Scout Extension) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Default\Extensions\ickcnpogpccagkhpcmibbkmdlnhiepda [2023-01-12]
CHR Extension: (Imagus) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Default\Extensions\immpkjjlgappgfkkfieppnmlhakdmaab [2022-03-24]
CHR Extension: (Reddit Enhancement Suite) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb [2023-04-04]
CHR Extension: (Behind The Overlay) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljipkdpcjbmhkdjjmbbaggebcednbbme [2024-01-08]
CHR Extension: (Fakespot Fake Amazon Reviews and eBay Sellers) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Default\Extensions\nakplnnackehceedgkgkokbgbmfghain [2023-12-22]
CHR Extension: (Amazon Product Finder - AMZScout PRO) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Default\Extensions\njopapoodmifmcogpingplfphojnfeea [2023-12-18]
CHR Extension: (Chrome Web Store Payments) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-03-24]
CHR Extension: (Hover Zoom+) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Default\Extensions\pccckmaobkjjboncdfnnofkonhgpceea [2023-12-22]
CHR Profile: C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Guest Profile [2022-04-07]
CHR Profile: C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Profile 1 [2022-04-02]
CHR Extension: (Slides) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2022-04-02]
CHR Extension: (Docs) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2022-04-02]
CHR Extension: (Google Drive) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2022-04-02]
CHR Extension: (YouTube) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2022-04-02]
CHR Extension: (Sheets) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2022-04-02]
CHR Extension: (Google Docs Offline) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-04-02]
CHR Extension: (Chrome Web Store Payments) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-04-02]
CHR Extension: (Gmail) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2022-04-02]
CHR Profile: C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Profile 2 [2022-04-03]
CHR Extension: (Slides) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2022-04-02]
CHR Extension: (Docs) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2022-04-02]
CHR Extension: (Google Drive) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2022-04-02]
CHR Extension: (YouTube) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2022-04-02]
CHR Extension: (Sheets) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2022-04-02]
CHR Extension: (Google Docs Offline) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-04-02]
CHR Extension: (Chrome Web Store Payments) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-04-02]
CHR Extension: (Gmail) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2022-04-02]
CHR Profile: C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Profile 3 [2024-01-05]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2024-01-05]
CHR Extension: (Google Docs Offline) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-01-05]
CHR Extension: (Chrome Web Store Payments) - C:\Users\tehke\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-01-05]
CHR Profile: C:\Users\tehke\AppData\Local\Google\Chrome\User Data\System Profile [2022-04-07]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
 
Opera: 
=======
StartMenuInternet: (HKU\S-1-5-21-3252700674-1244316876-1502611229-1001) Opera GXStable - "C:\Users\tehke\AppData\Local\Programs\Opera GX\Launcher.exe"
 
==================== Services (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [99104 2021-08-20] (Apple Inc. -> Apple Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9201848 2023-12-18] (Microsoft Corporation -> Microsoft Corporation)
R2 CortexLauncherService; C:\Program Files (x86)\Razer\Razer Cortex\CortexLauncherService.exe [588712 2023-11-21] (Razer USA Ltd. -> Razer Inc.)
R3 Disc Soft Lite Bus Service; G:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd -> Disc Soft Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [811496 2022-08-02] (EasyAntiCheat Oy -> Epic Games, Inc)
R3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncHelper.exe [3514384 2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
S2 GoogleUpdaterInternalService122.0.6234.0; C:\Program Files (x86)\Google\GoogleUpdater\122.0.6234.0\updater.exe [4639520 2024-01-07] (Google LLC -> Google LLC) <==== ATTENTION
S2 GoogleUpdaterService122.0.6234.0; C:\Program Files (x86)\Google\GoogleUpdater\122.0.6234.0\updater.exe [4639520 2024-01-07] (Google LLC -> Google LLC) <==== ATTENTION
R2 ImControllerService; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.)
R2 KelVPNService; C:\Program Files\KelVPN\KelVPNService.exe [15511552 2023-06-22] () [File not signed]
R2 LenovoFnAndFunctionKeys; C:\WINDOWS\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_f6255f9b56d06c65\LenovoUtilityService.exe [161160 2023-11-08] (Lenovo -> Lenovo)
R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\4.0.49.0\LenovoVantageService.exe [34168 2023-11-16] (Lenovo -> Lenovo)
R2 MBAMService; D:\Downloads\MB\MBAMService.exe [9405400 2024-01-06] (Malwarebytes Inc. -> Malwarebytes)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [913640 2024-01-11] (McAfee, LLC -> McAfee, LLC)
R2 NahimicService; C:\WINDOWS\system32\NahimicService.exe [1930888 2022-03-29] (A-Volute SAS -> Nahimic)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\23.246.1127.0002\OneDriveUpdaterService.exe [3851280 2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
R2 Razer Chroma SDK Server; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe [2165168 2023-11-15] (Razer USA Ltd. -> Razer Inc.)
R2 Razer Chroma SDK Service; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe [305072 2023-11-15] (Razer USA Ltd. -> Razer Inc.)
R2 Razer Chroma Stream Server; C:\Program Files (x86)\Razer Chroma SDK\bin\RzChromaStreamServer.exe [1361360 2023-03-05] (Razer USA Ltd. -> Razer Inc.)
R2 Razer Game Manager Service; C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [256264 2023-02-10] (Razer USA Ltd. -> Razer Inc)
R2 Razer Game Manager Service 3; C:\Program Files (x86)\Razer\Razer Services\GMS3\GameManagerService3.exe [362760 2023-06-14] (Razer USA Ltd. -> Razer Inc)
R2 Razer Synapse Service; C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe [297736 2023-12-26] (Razer USA Ltd. -> Razer Inc.)
R2 Razer Update Service; C:\Program Files (x86)\Razer\RzUpdateEngineService\RzUpdateEngineService.exe [408912 2020-04-01] (Razer USA Ltd. -> Razer)
R2 RzActionSvc; C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe [538424 2023-11-09] (Razer USA Ltd. -> Razer Inc.)
R2 RzThxSrv; C:\WINDOWS\system32\RZTHXService.exe [357104 2020-04-26] (Razer USA Ltd. -> Razer)
R2 Tobii Service; C:\Program Files\Tobii\Tobii EyeX\Tobii.Service.exe [223528 2021-05-05] (Tobii AB -> Tobii AB)
R2 UDCService; C:\WINDOWS\System32\drivers\Lenovo\udc\Service\UDClientService.exe [72664 2023-09-23] (Lenovo -> Lenovo Group Ltd.)
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [10569840 2022-04-08] (Riot Games, Inc. -> Riot Games, Inc.)
R2 VPNUnlimitedService; D:\Program Files (x86)\VPN Unlimited\vpn-unlimited-daemon.exe [53192 2023-10-06] (Keepsolid Inc. -> KeepSolid Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe [3174840 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe [133592 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_cfec3e7de6520682\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_cfec3e7de6520682\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
 
===================== Drivers (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [33216 2021-12-02] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [39272 2023-06-27] (Apple Inc. -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [55608 2023-06-27] (Apple Inc. -> Apple Inc.)
R2 BlueStacksDrv_nxt; C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys [310672 2023-08-29] (Microsoft Windows Hardware Compatibility Publisher -> Bluestack System Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [532480 2023-02-23] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [184320 2023-02-23] (Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [106496 2022-05-06] (Microsoft Corporation) [File not signed]
R3 csaudio; C:\WINDOWS\System32\DriverStore\FileRepository\csaudio.inf_amd64_3abbd251e5a04b6f\csaudio.sys [322984 2022-04-25] (Microsoft Windows Hardware Compatibility Publisher -> Windows ® Win 7 DDK provider)
S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2022-03-25] (Disc Soft Ltd -> Disc Soft Ltd)
R3 FBNetFilter; C:\WINDOWS\System32\drivers\FBNetFlt.sys [60784 2023-12-06] (Lenovo -> Lenovo)
R3 HidHide; C:\WINDOWS\System32\drivers\HidHide.sys [66584 2022-06-27] (Microsoft Windows Hardware Compatibility Publisher -> Nefarius Software Solutions e.U.)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [222784 2024-01-15] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2022-06-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239576 2024-01-14] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MTKBTFilterX64; C:\WINDOWS\system32\DRIVERS\mtkbtfilterx.sys [286424 2022-05-13] (MEDIATEK INC. -> MediaTek Inc.)
R3 mtkwlex; C:\WINDOWS\System32\drivers\mtkwl6ex.sys [1439976 2022-05-15] (MEDIATEK INC. -> MediaTek Inc.)
R3 NahimicBTLink; C:\WINDOWS\System32\drivers\NahimicBTLink.sys [85144 2021-09-13] (A-Volute SAS -> Windows ® Win 7 DDK provider)
R3 Nahimic_Mirroring; C:\WINDOWS\System32\drivers\Nahimic_Mirroring.sys [85144 2021-09-13] (A-Volute SAS -> Windows ® Win 7 DDK provider)
S3 Netaapl; C:\WINDOWS\System32\drivers\netaapl64.sys [32352 2017-11-28] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
R3 NvModuleTracker; C:\WINDOWS\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_0c1cc60a4b422185\NvModuleTracker.sys [45656 2023-03-08] (Nvidia Corporation -> NVIDIA Corporation)
R3 nvpcf; C:\WINDOWS\System32\drivers\nvpcf.sys [238720 2023-10-04] (NVIDIA Corporation -> NVIDIA Corporation)
S3 rspLLL; C:\WINDOWS\System32\DRIVERS\rspLLL64.sys [27744 2021-03-09] (Daniel Terhell -> Resplendence Software Projects Sp.)
R3 RzCommon; C:\WINDOWS\System32\drivers\RzCommon.sys [64168 2022-08-18] (Razer USA Ltd. -> Razer Inc)
S3 RzDev_008a; C:\WINDOWS\System32\drivers\RzDev_008a.sys [54152 2020-08-24] (Razer USA Ltd. -> Razer Inc)
R3 RzDev_0094; C:\WINDOWS\System32\drivers\RzDev_0094.sys [55376 2021-01-21] (Razer USA Ltd. -> Razer Inc)
R3 RzDev_0095; C:\WINDOWS\System32\drivers\RzDev_0095.sys [56728 2020-12-10] (Razer USA Ltd. -> Razer Inc)
R3 sRZTHXSpatial; C:\WINDOWS\System32\drivers\RZTHXSpatial.sys [172024 2020-04-25] (Razer USA Ltd. -> Windows ® Win 7 DDK provider)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [39920 2023-07-19] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
R1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [8571048 2022-04-08] (Riot Games, Inc. -> Riot Games, Inc.)
R1 ViGEmBus; C:\WINDOWS\System32\drivers\ViGEmBus.sys [249400 2022-08-29] (Microsoft Windows Hardware Compatibility Publisher -> Nefarius Software Solutions e.U.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [55856 2023-12-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
U5 WdDevFlt; C:\Windows\System32\Drivers\WdDevFlt.sys [169232 2022-05-06] (Microsoft Windows -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [594304 2023-12-06] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105856 2023-12-06] (Microsoft Windows -> Microsoft Corporation)
S3 wintun; C:\WINDOWS\system32\DRIVERS\wintun.sys [38704 2022-05-25] (WireGuard LLC -> WireGuard LLC)
S3 WireGuard; C:\WINDOWS\System32\drivers\wireguard.sys [489368 2023-10-21] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One month (created) (Whitelisted) =========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2024-01-16 00:24 - 2024-01-16 00:24 - 002389504 _____ (Farbar) C:\Users\tehke\Desktop\FRST64.exe
2024-01-16 00:24 - 2024-01-16 00:24 - 000000000 ____D C:\Users\tehke\Desktop\FRST-OlderVersion
2024-01-15 22:25 - 2024-01-15 22:25 - 000000000 ___HD C:\OneDriveTemp
2024-01-15 00:49 - 2024-01-15 00:49 - 000000000 ____D C:\Users\terry\AppData\Local\Backup
2024-01-13 21:11 - 2024-01-13 21:11 - 000000000 _____ C:\Users\tehke\Desktop\New Text Document (10).txt
2024-01-11 08:56 - 2024-01-11 08:56 - 001000687 _____ C:\Users\tehke\Downloads\Nate-Robinson-Blocks-LeBron-James.flv
2024-01-10 14:16 - 2024-01-10 14:16 - 000016720 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2024-01-08 20:38 - 2024-01-08 20:45 - 294600181 _____ C:\Users\tehke\Desktop\1128113156-1-16.mp4
2024-01-08 16:49 - 2023-06-16 07:33 - 000161920 _____ (Razer Inc) C:\WINDOWS\system32\RazerS3CoinstallerEx.dll
2024-01-07 22:48 - 2024-01-07 22:48 - 000037681 _____ C:\Users\terry\Downloads\the-brothers-grimsby-2016-english-yify-37805.zip
2024-01-07 22:47 - 2024-01-07 22:47 - 000025215 _____ C:\Users\terry\Downloads\The Brothers Grimsby (2016) [720p] [BluRay] [YTS.MX].torrent
2024-01-05 02:14 - 2024-01-05 02:14 - 000000231 _____ C:\Users\tehke\Downloads\discord_backup_codes.txt
2024-01-03 05:36 - 2024-01-03 05:48 - 904258269 _____ C:\Users\tehke\Downloads\SCMv1.72.zip
2023-12-31 02:23 - 2023-06-08 04:00 - 004487497 ____T C:\Users\tehke\Desktop\Image.jpeg
2023-12-31 02:23 - 2023-04-07 05:12 - 004345803 _____ C:\Users\tehke\Desktop\Image2.jpeg
2023-12-31 02:22 - 2023-06-08 04:00 - 004487497 ___RT C:\Users\tehke\Image - Copy.jpeg
2023-12-31 02:22 - 2023-04-07 05:12 - 004345803 ____R C:\Users\tehke\Image.jpeg
2023-12-31 02:18 - 2023-12-31 02:18 - 000043169 _____ C:\Users\tehke\Desktop\QJSooo007100840000r68F411BE176621.pdf
2023-12-31 02:17 - 2023-12-31 02:17 - 000043701 _____ C:\Users\tehke\Desktop\QJSooo008100150000r68F919FB276621.pdf
2023-12-28 13:41 - 2023-12-28 13:41 - 362813826 _____ C:\Users\tehke\Downloads\Marisa Cerett.zip
2023-12-20 07:50 - 2023-12-20 07:50 - 408604077 _____ C:\Users\tehke\Downloads\Julia McFetridge.zip
 
==================== One month (modified) ==================
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2024-01-16 00:26 - 2023-03-14 23:50 - 000055362 _____ C:\Users\tehke\Desktop\FRST.txt
2024-01-16 00:25 - 2023-03-14 23:47 - 000000000 ____D C:\FRST
2024-01-16 00:25 - 2022-03-24 13:21 - 000000000 ____D C:\Users\tehke\AppData\Local\Discord
2024-01-16 00:21 - 2022-05-06 21:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-01-16 00:11 - 2022-03-24 13:18 - 000000000 ____D C:\Users\tehke\AppData\Local\D3DSCache
2024-01-16 00:01 - 2022-05-06 21:24 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-01-15 23:45 - 2022-05-06 21:24 - 000000000 ___HD C:\Program Files\WindowsApps
2024-01-15 23:45 - 2022-05-06 21:24 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-01-15 22:27 - 2023-04-29 10:32 - 000000000 ____D C:\Users\tehke\AppData\Local\Malwarebytes
2024-01-15 22:25 - 2023-09-05 03:14 - 000000000 ____D C:\Users\tehke\AppData\Roaming\bluestacks-services
2024-01-15 22:25 - 2022-04-01 02:01 - 000000000 ____D C:\Users\tehke\Documents\ShareX
2024-01-15 22:25 - 2022-03-24 14:25 - 000000000 ____D C:\Users\tehke\.tobii
2024-01-15 22:25 - 2022-03-24 13:21 - 000000000 ____D C:\Users\tehke\AppData\Roaming\discord
2024-01-15 22:25 - 2022-03-24 13:19 - 000000000 ___RD C:\Users\tehke\OneDrive
2024-01-15 22:25 - 2022-02-14 19:16 - 000000000 ____D C:\ProgramData\NVIDIA
2024-01-15 22:22 - 2023-02-23 22:00 - 000851362 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-01-15 22:22 - 2022-05-06 21:22 - 000000000 ____D C:\WINDOWS\INF
2024-01-15 22:17 - 2022-05-09 14:47 - 000000001 _____ C:\WINDOWS\vgkbootstatus.dat
2024-01-15 22:15 - 2023-02-23 21:55 - 000003112 _____ C:\WINDOWS\system32\Tasks\NahimicTask32
2024-01-15 22:15 - 2023-02-23 21:55 - 000003092 _____ C:\WINDOWS\system32\Tasks\NahimicTask64
2024-01-15 22:14 - 2023-02-23 21:55 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-01-15 22:14 - 2022-05-06 21:24 - 000000000 ____D C:\WINDOWS\ServiceState
2024-01-15 22:14 - 2021-06-23 10:44 - 000012288 ___SH C:\DumpStack.log.tmp
2024-01-15 22:13 - 2022-08-02 06:13 - 000000000 ____D C:\Users\terry\.tobii
2024-01-15 22:13 - 2022-05-06 21:17 - 001310720 _____ C:\WINDOWS\system32\config\BBI
2024-01-15 19:15 - 2023-02-23 21:50 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-01-15 00:43 - 2022-08-02 01:39 - 000000000 ____D C:\Users\terry\AppData\Local\D3DSCache
2024-01-14 23:17 - 2023-05-01 02:41 - 000000000 ____D C:\Users\terry\AppData\Local\Malwarebytes
2024-01-14 23:16 - 2022-08-02 01:39 - 000000000 ___RD C:\Users\terry\OneDrive
2024-01-14 23:16 - 2022-07-07 18:15 - 000239576 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2024-01-14 23:15 - 2023-02-28 03:48 - 000001607 _____ C:\WINDOWS\system32\config\VSMIDK
2024-01-14 23:11 - 2023-10-31 18:11 - 000000000 ____D C:\Users\terry\Documents\Peace backup
2024-01-14 23:11 - 2023-08-23 23:13 - 000001886 _____ C:\Users\terry\Desktop\Peace.lnk
2024-01-13 06:31 - 2023-01-17 11:07 - 000002289 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2024-01-13 06:31 - 2021-06-23 10:45 - 000002451 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-01-12 23:51 - 2022-03-24 22:06 - 000000000 ____D C:\Users\tehke\AppData\Roaming\uTorrent
2024-01-12 20:39 - 2022-03-24 13:21 - 000002242 _____ C:\Users\tehke\Desktop\Discord.lnk
2024-01-12 16:50 - 2022-04-19 01:09 - 000000000 ____D C:\Program Files\Microsoft Office
2024-01-12 00:12 - 2022-05-23 23:28 - 000918944 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2024-01-12 00:12 - 2022-03-24 13:21 - 000002258 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-01-12 00:12 - 2022-03-24 13:21 - 000002217 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2024-01-11 01:43 - 2022-05-06 21:24 - 000000000 ____D C:\ProgramData\USOPrivate
2024-01-11 01:27 - 2023-02-23 21:50 - 000493968 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-01-11 01:26 - 2023-10-12 03:34 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2024-01-11 01:26 - 2022-05-06 21:24 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2024-01-11 01:26 - 2022-05-06 21:24 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2024-01-11 01:26 - 2022-05-06 21:24 - 000000000 ____D C:\WINDOWS\SystemResources
2024-01-11 01:26 - 2022-05-06 21:24 - 000000000 ____D C:\WINDOWS\ShellExperiences
2024-01-11 01:26 - 2022-05-06 21:24 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-01-10 14:21 - 2022-03-25 14:32 - 000000000 ____D C:\WINDOWS\system32\MRT
2024-01-10 14:18 - 2022-05-06 21:17 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-01-10 14:18 - 2022-03-25 14:32 - 189718008 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2024-01-10 14:16 - 2023-02-23 21:54 - 003212800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2024-01-08 18:16 - 2022-03-24 13:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
2024-01-08 18:15 - 2023-02-23 21:19 - 000000000 ____D C:\Program Files (x86)\Razer Chroma SDK
2024-01-08 18:14 - 2022-03-25 05:08 - 000000000 ____D C:\Program Files (x86)\Razer
2024-01-08 17:27 - 2022-05-06 21:24 - 000000000 ____D C:\WINDOWS\security
2024-01-08 17:27 - 2022-05-06 21:24 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2024-01-08 17:27 - 2021-06-05 04:10 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2024-01-08 16:43 - 2023-02-23 21:55 - 000004218 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled Autoupdate 1650357760
2024-01-08 16:43 - 2022-04-19 00:42 - 000001449 _____ C:\Users\tehke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera GX Browser.lnk
2024-01-08 16:31 - 2022-09-18 23:05 - 000000000 ____D C:\Users\terry\AppData\Roaming\qBittorrent
2024-01-08 00:06 - 2023-02-23 22:22 - 000003978 _____ C:\WINDOWS\system32\Tasks\RazerCortexScheduleClean
2024-01-07 23:14 - 2022-09-18 23:14 - 000000000 ____D C:\Users\terry\AppData\Roaming\vlc
2024-01-03 18:28 - 2022-05-06 21:24 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2024-01-02 03:41 - 2023-02-23 22:18 - 000001144 _____ C:\Users\Public\Desktop\Razer Axon.lnk
2024-01-02 03:41 - 2023-02-23 22:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer Axon
2023-12-31 21:58 - 2023-12-15 23:34 - 000000960 _____ C:\Users\tehke\Desktop\New Text Document (9).txt
2023-12-31 02:22 - 2023-02-23 21:51 - 000000000 ____D C:\Users\tehke
2023-12-31 02:18 - 2022-03-24 13:18 - 000000000 ____D C:\Users\tehke\AppData\Local\Packages
2023-12-31 02:18 - 2022-03-24 13:18 - 000000000 ____D C:\ProgramData\Packages
2023-12-31 02:17 - 2022-03-24 13:18 - 000000000 ____D C:\Users\tehke\AppData\Local\PlaceholderTileLogoFolder
2023-12-27 16:29 - 2022-03-24 17:47 - 000000000 ____D C:\Users\tehke\AppData\Local\CrashDumps
2023-12-26 00:53 - 2023-10-09 08:31 - 000000000 ____D C:\Users\tehke\AppData\Local\Tempb6c6c3e736d82f87e133fe9e7c4a075f
2023-12-22 01:11 - 2023-03-05 17:54 - 000000000 ____D C:\Users\terry\AppData\Local\Nahimic
2023-12-19 23:26 - 2023-09-10 01:04 - 000000000 ____D C:\Users\tehke\Documents\Peace backup
2023-12-18 13:11 - 2022-02-14 19:12 - 000000000 ____D C:\WINDOWS\TempInst
2023-12-17 08:56 - 2023-06-09 01:24 - 000000000 ____D C:\Users\tehke\AppData\Roaming\Session
 
==================== SigCheck ============================
 
(There is no automatic fix for files that do not pass verification.)
 
==================== End of FRST.txt ========================





Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11.01.2024
Ran by tehke (16-01-2024 00:26:34)
Running from C:\Users\tehke\Desktop
Microsoft Windows 11 Home Version 22H2 22621.3007 (X64) (2023-02-24 05:55:06)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
 
(If an entry is included in the fixlist, it will be removed.)
 
Administrator (S-1-5-21-3252700674-1244316876-1502611229-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3252700674-1244316876-1502611229-503 - Limited - Disabled)
Guest (S-1-5-21-3252700674-1244316876-1502611229-501 - Limited - Disabled)
tehke (S-1-5-21-3252700674-1244316876-1502611229-1001 - Administrator - Enabled) => C:\Users\tehke
terry (S-1-5-21-3252700674-1244316876-1502611229-1004 - Administrator - Enabled) => C:\Users\terry
Terryc (S-1-5-21-3252700674-1244316876-1502611229-1006 - Administrator - Enabled) => C:\Users\Terryc
terry_w2lrri1 (S-1-5-21-3252700674-1244316876-1502611229-1005 - Administrator - Enabled)
WDAGUtilityAccount (S-1-5-21-3252700674-1244316876-1502611229-504 - Limited - Disabled)
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
7-Zip 22.01 (x64) (HKLM\...\7-Zip) (Version: 22.01 - Igor Pavlov)
Adobe Photoshop (Beta) (HKLM\...\{KCF078A9-BA3F-458D-A4A0-3DBB7B169E6S}) (Version: 25.2.0 m.2357 - Adobe)
Adobe Photoshop 2020 (HKLM-x32\...\PHSP_21_0_2) (Version: 21.0.2 - Adobe Systems Incorporated)
AnyTrans (HKLM-x32\...\AnyTrans) (Version: 8.8.4.0 - iMobie Inc.)
Apple Mobile Device Support (HKLM\...\{527DD209-8A66-482F-8779-C7B3BACCA8F1}) (Version: 15.0.0.16 - Apple Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
BeamNG.drive v0.23 (HKLM-x32\...\BeamNG.drive_is1) (Version: 0.23 - BeamNG)
BlueStacks App Player (HKLM\...\BlueStacks_nxt) (Version: 5.13.0.1076 - now.gg, Inc.)
BlueStacks Services (HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\BlueStacksServices) (Version: 3.0.2 - now.gg, Inc.)
BlueStacks X (HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\BlueStacks X) (Version: 10.3.20.1003 - now.gg, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CDisplayEx 1.10.33 (HKLM\...\CDisplayEx_is1) (Version:  - Progdigy Software S.A.R.L.)
Cheat Engine 7.4 (HKLM\...\Cheat Engine_is1) (Version:  - Cheat Engine)
Core Temp 1.18 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.18 - ALCPU)
CPUID HWMonitor 1.45 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.45 - CPUID, Inc.)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.1.0.0074 - Disc Soft Ltd)
Discord (HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\Discord) (Version: 1.0.9004 - Discord Inc.)
ELDEN RING (HKLM-x32\...\ELDEN RING_is1) (Version:  - )
Epic Games Launcher (HKLM-x32\...\{FAC47927-1A6A-4C6E-AD7D-E9756794A4BC}) (Version: 1.3.23.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Equalizer APO (HKLM\...\EqualizerAPO) (Version: 1.3 - )
Final Fantasy VII Remake Intergrade (HKLM-x32\...\Final Fantasy VII Remake Intergrade_is1) (Version:  - )
GetDataBack Pro version 5.57 (HKLM\...\GetDataBack Pro Install_is1) (Version: 5.57 - Runtime Software, LLC)
Ghostwire Tokyo (HKLM-x32\...\Ghostwire Tokyo_is1) (Version: 0.0.0 - DODI-Repacks)
Glorious Model O Software (HKLM-x32\...\{0969D386-B5B4-41BD-98E3-4A1A7D32CB97}_is1) (Version: 1.0.9 - Glorious PC Gaming Race LLC.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 120.0.6099.217 - Google LLC)
GSmartControl (HKLM\...\GSmartControl) (Version: 1.1.4 - Alexander Shaduri)
HidHide (HKLM\...\{48DD38C8-443E-4474-A249-AB32389E08F6}) (Version: 1.2.128 - Nefarius Software Solutions e.U.)
KelVPN 7.6-1 (HKLM\...\KelVPN) (Version: 7.6-1 - KelVPN)
K-Lite Mega Codec Pack 17.9.4 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 17.9.4 - KLCP)
LatencyMon 7.20 (HKLM\...\LatencyMon_is1) (Version: 7.20 - Resplendence Software Projects Sp.)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Legion Arena (HKLM-x32\...\Legion Arena_is1) (Version: 1.3.1.1 - Lenovo Group Ltd.)
Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 4.0.49.0 - Lenovo Group Ltd.)
Malwarebytes version 4.6.7.301 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.6.7.301 - Malwarebytes)
Microsoft .NET Host - 5.0.16 (x64) (HKLM\...\{DAA471F4-54A9-4820-A1C5-266B5153C144}) (Version: 40.64.31117 - Microsoft Corporation) Hidden
Microsoft .NET Host - 6.0.7 (x64) (HKLM\...\{8F51A211-71F1-4858-8198-8A5A66818D16}) (Version: 48.31.44002 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 5.0.16 (x64) (HKLM\...\{29CBA832-8D09-42D0-82F4-3583EE247A5E}) (Version: 40.64.31117 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.7 (x64) (HKLM\...\{E18A98D1-DF73-4E11-AC20-FD0190628270}) (Version: 48.31.44002 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 5.0.16 (x64) (HKLM\...\{16E242C4-24A9-4381-8023-0F246750CA47}) (Version: 40.64.31117 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 5.0.16 (x64) (HKLM-x32\...\{68696b91-f423-4e8e-a58f-631366d0f77a}) (Version: 5.0.16.31117 - Microsoft Corporation)
Microsoft .NET Runtime - 6.0.7 (x64) (HKLM\...\{882F32A5-8330-4366-844A-2F3B73C3F021}) (Version: 48.31.44002 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 120.0.2210.133 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 120.0.2210.133 - Microsoft Corporation)
Microsoft Flight Simulator (HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\Microsoft Flight Simulator) (Version:  - HOODLUM)
Microsoft Office LTSC Professional Plus 2021 - en-us (HKLM\...\ProPlus2021Volume - en-us) (Version: 16.0.14332.20624 - Microsoft Corporation)
Microsoft Office Office 32-bit Components 2010 (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (HKLM\...\{90140000-001F-0409-1000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (HKLM\...\{90140000-001F-040C-1000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2010 (HKLM\...\{90140000-001F-0C0A-1000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2010 (HKLM\...\{90140000-002C-0409-1000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (English) 2010 (HKLM\...\{90140000-0043-0409-1000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2010 (HKLM\...\{90140000-006E-0409-1000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2010 (HKLM\...\{90140000-0115-0409-1000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Word 2010 (HKLM\...\{90140000-001B-0000-1000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (English) 2010 (HKLM\...\{90140000-001B-0409-1000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 23.246.1127.0002 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\Teams) (Version: 1.6.00.6754 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-3252700674-1244316876-1502611229-1004\...\Teams) (Version: 1.6.00.6754 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.36.32532 (HKLM-x32\...\{8bdfe669-9705-4184-9368-db9ce581e0e7}) (Version: 14.36.32532.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.32.31326 (HKLM-x32\...\{817e21c1-6b3a-4bc1-8c49-67e4e1887b3a}) (Version: 14.32.31326.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.36.32532 (HKLM\...\{0025DD72-A959-45B5-A0A3-7EFEB15A8050}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.36.32532 (HKLM\...\{D5D19E2F-7189-42FE-8103-92CD1FA457C2}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.32.31326 (HKLM-x32\...\{A250E750-DB3F-40C1-8460-8EF77C7582DA}) (Version: 14.32.31326 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.32.31326 (HKLM-x32\...\{46E11E7F-01E1-44D0-BB86-C67342D253DD}) (Version: 14.32.31326 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 5.0.16 (x64) (HKLM\...\{90B8150E-08C5-4225-9F94-9BBB39D82601}) (Version: 40.64.31121 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 5.0.16 (x64) (HKLM-x32\...\{c34fb08d-bd27-4d0b-a7bc-f7d5359f9518}) (Version: 5.0.16.31121 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 6.0.7 (x64) (HKLM\...\{30702F00-F514-4094-BA4A-A05B42FD1CAC}) (Version: 48.31.44003 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.7 (x64) (HKLM-x32\...\{a7dab025-ec7a-4e8a-add3-6d872f1d8aca}) (Version: 6.0.7.31422 - Microsoft Corporation)
Microsoft Word 2010 (HKLM\...\Office14.WORD) (Version: 14.0.4763.1000 - Microsoft Corporation)
NBA 2K19 (HKLM-x32\...\NBA 2K19_is1) (Version:  - )
NBA 2K22 (HKLM-x32\...\NBA 2K22_is1) (Version:  - )
Neural Filters (HKLM\...\{70F9BD38-D373-4CC8-BF4A-414DE0D0C42F}) (Version: 1.15.0.100 - Adobe)
NVIDIA FrameView SDK 1.3.8513.32290073 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.3.8513.32290073 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.27.0.112 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.27.0.112 - NVIDIA Corporation)
NVIDIA Graphics Driver 537.58 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 537.58 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.40.14 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.40.14 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)
NVIDIA USBC Driver 1.50.831.832 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_USBC) (Version: 1.50.831.832 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14332.20624 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14332.20624 - Microsoft Corporation) Hidden
Opera GX Stable 105.0.4970.76 (HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\Opera GX 105.0.4970.76) (Version: 105.0.4970.76 - Opera Software)
Peace (HKLM\...\Peace) (Version: 1.6.6.0 - P.E. Verbeek)
qBittorrent 4.4.2 (HKLM-x32\...\qBittorrent) (Version: 4.4.2 - The qBittorrent project)
Raise Data Recovery (HKLM\...\rdr) (Version: 9.14 - LLC SysDev Laboratories)
Razer Axon (HKLM\...\Razer Axon_is1) (Version: 1.2.2.0 - Razer Inc.)
Razer Cortex (HKLM-x32\...\Razer Cortex_is1) (Version: 10.10.4.0 - Razer Inc.)
Razer Synapse (HKLM-x32\...\Razer Synapse) (Version: 3.9.0108.122803 - Razer Inc.)
Razer Virtual Ring Light (HKLM-x32\...\Razer Virtual Ring Light) (Version: 2.0.0.23 - Razer Inc.)
Riot Vanguard (HKLM\...\Riot Vanguard) (Version:  - Riot Games, Inc.)
Session 1.11.0 (HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\f1339da8-b3f2-5116-b780-aafa611bc7f7) (Version: 1.11.0 - Oxen Labs)
ShareX (HKLM\...\82E6AC09-0FEF-4390-AD9F-0DD3F5561EFC_is1) (Version: 13.7.0 - ShareX Team)
StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
StepMania 5 (HKLM-x32\...\StepMania 5) (Version: 5.0.12 - StepMania)
Streamer Companion App (HKLM-x32\...\Streamer Companion App) (Version: 2.0.1.3 - Razer Inc.)
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.4.0.19572 - Microsoft Corporation)
Telegram Desktop (HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 4.14.4 - Telegram FZ-LLC)
THX Spatial Audio (HKLM-x32\...\THX Spatial Audio) (Version: 2.0.1.12 - Razer Inc.)
Tobii Experience Software For Windows (LenovoY760) (HKLM\...\{7F9E80DA-CBD7-49F5-A756-294D0FA745F4}) (Version: 4.110.0.13215 - Tobii AB)
VALORANT (HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\Riot Game valorant.live) (Version:  - Riot Games, Inc)
ViGEm Bus Driver (HKLM\...\{9C581C76-2D68-40F8-AA6F-94D3C5215C05}) (Version: 1.21.442 - Nefarius Software Solutions e.U.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.17.4 - VideoLAN)
VPN Unlimited 9.0.0 (HKLM-x32\...\{DC24521E-872B-41AF-93EA-FE477902D6FB}_is1) (Version: 9.0.0 - KeepSolid Inc.)
Wale (HKLM\...\{2C88370E-794C-482F-B9D5-CB770E48ACF6}) (Version: 0.7.5.0 - Jongtae Park (catright))
WebAdvisor by McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.859 - McAfee, LLC)
WeChat (HKLM-x32\...\WeChat) (Version: 3.9.6.33 - 腾讯科技(深圳)有限公司)
WickrMe (HKLM\...\{B49C1616-0DE8-4178-92C3-BD45602C2B8D}) (Version: 5.102.9 - Wickr Inc.)
Windows Driver Package - Razer Inc. (WinUSB) USB  (05/04/2016 6.2.9200.16385) (HKLM\...\874D6B1A2BD2AE8FF3594AB704F2A4A3F8342FB5) (Version: 05/04/2016 6.2.9200.16385 - Razer Inc.)
WinRAR 6.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.11.0 - win.rar GmbH)
X-Rite Color Assistant 2.12.0.0 (HKLM-x32\...\{6DCFB107-4604-4AA8-BEA6-CC80BCF0B3E4}_is1) (Version: 2.12.0.0 - X-Rite, Inc)
 
Packages:
=========
Dev Home -> C:\Program Files\WindowsApps\Microsoft.Windows.DevHome_0.900.374.0_x64__8wekyb3d8bbwe [2024-01-14] (Microsoft Corporation)
Disney+ -> C:\Program Files\WindowsApps\Disney.37853FC22B2CE_2023.11.13.0_neutral__6rarf9sa4v8jt [2024-01-15] (Disney)
Dolby Vision -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyVisionHDR_2.20301.388.0_x64__rz1tebttyb220 [2023-11-13] (Dolby Laboratories)
Lenovo Companion -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2312.17.0_x64__k1h2ywk1493x8 [2023-12-22] (LENOVO INC.)
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2023-09-15] (Microsoft Corp.)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_53.21027.539.0_x64__8wekyb3d8bbwe [2023-10-31] (Microsoft Corporation)
Microsoft.AV1VideoExtension -> C:\Program Files\WindowsApps\Microsoft.AV1VideoExtension_1.1.61781.0_x64__8wekyb3d8bbwe [2023-07-23] (Microsoft Corporation)
Microsoft.MPEG2VideoExtension -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.61931.0_x64__8wekyb3d8bbwe [2023-08-17] (Microsoft Corporation)
Microsoft.WindowsAppRuntime.CBS -> C:\WINDOWS\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe [2024-01-14] (Microsoft Corporation)
Nahimic -> C:\Program Files\WindowsApps\A-Volute.Nahimic_1.9.22.0_x64__w2gh52qy24etm [2023-10-20] (A-Volute)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.964.0_x64__56jybvy8sckqj [2023-10-12] (NVIDIA Corp.)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.40.286.0_x64__dt26b99r8h8gj [2023-06-23] (Realtek Semiconductor Corp)
Solitaire & Casual Games -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.18.11020.0_x64__8wekyb3d8bbwe [2024-01-10] (Microsoft Studios) [MS Ad]
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0 [2023-12-10] (Spotify AB) [Startup Task]
Tobii Experience -> C:\Program Files\WindowsApps\TobiiAB.TobiiEyeTrackingPortal_1.53.13804.0_x64__j9ea20k37yd2w [2024-01-15] (Tobii AB) [Startup Task]
TradingView -> C:\Program Files\WindowsApps\TradingView.Desktop_2.3.3.4215_x64__n534cwy3pjxzj [2023-05-04] (TradingView, Inc.) [Startup Task]
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2401.3.0_x64__cv1g1gvanyjgm [2024-01-12] (WhatsApp Inc.) [Startup Task]
Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy [2024-01-14] (Microsoft Corporation)
WinRAR -> D:\Program Files\WinRAR [2023-02-24] (win.rar GmbH)
 
==================== Custom CLSID (Whitelisted): ==============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
CustomCLSID: HKU\S-1-5-21-3252700674-1244316876-1502611229-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\tehke\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.23061.1\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3252700674-1244316876-1502611229-1001_Classes\CLSID\{80172dde-4e20-4df0-81a2-0a48553e80bb}\localserver32 -> C:\Users\tehke\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe (A-Volute SAS -> A-Volute)
ShellIconOverlayIdentifiers: [    OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [    OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [    OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [    OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [    OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [    OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [    OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [   AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-03-20] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [   AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-03-20] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [   AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-03-20] (Adobe Inc. -> )
ShellIconOverlayIdentifiers-x32: [    OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [    OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [    OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [    OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [    OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [    OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [    OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-03-20] (Adobe Inc. -> )
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => D:\Downloads\MB\mbshlext.dll [2023-03-01] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [File not signed]
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-10] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_cfec3e7de6520682\nvshext.dll [2023-10-05] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-03-20] (Adobe Inc. -> )
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => D:\Downloads\MB\mbshlext.dll [2023-03-01] (Malwarebytes Inc. -> Malwarebytes)
 
==================== Codecs (Whitelisted) ====================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Drivers32: [VIDC.X264] => C:\Windows\system32\x264vfw64.dll [3799552 2017-07-30] (x264vfw project) [File not signed]
HKLM\...\Drivers32: [VIDC.HFYU] => C:\Windows\system32\huffyuv.dll [55296 2005-01-21] () [File not signed]
HKLM\...\Drivers32: [VIDC.LAGS] => C:\Windows\system32\lagarith.dll [148992 2011-12-07] () [File not signed]
HKLM\...\Drivers32: [VIDC.XVID] => C:\Windows\system32\xvidvfw.dll [310784 2019-12-28] () [File not signed]
HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\system32\ac3acm.acm [180736 2012-07-21] (fccHandler) [File not signed]
HKLM\...\Drivers32: [VIDC.X264] => C:\Windows\SysWOW64\x264vfw.dll [3850240 2017-07-30] (x264vfw project) [File not signed]
HKLM\...\Drivers32: [VIDC.HFYU] => C:\Windows\SysWOW64\huffyuv.dll [39936 2004-05-18] (Disappearing Inc.) [File not signed]
HKLM\...\Drivers32: [VIDC.LAGS] => C:\Windows\SysWOW64\lagarith.dll [216064 2011-12-07] () [File not signed]
HKLM\...\Drivers32: [VIDC.XVID] => C:\Windows\SysWOW64\xvidvfw.dll [284160 2019-12-28] () [File not signed]
HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\SysWOW64\ac3acm.acm [122880 2012-07-21] (fccHandler) [File not signed]
HKLM\...\Drivers32: [msacm.lameacm] => C:\Windows\SysWOW64\lameACM.acm [473088 2015-02-25] (hxxp://www.mp3dev.org/) [File not signed]
HKLM\...\Drivers32: [VIDC.FFDS] => C:\Windows\SysWOW64\ff_vfw.dll [112128 2015-10-24] () [File not signed]
 
==================== Shortcuts & WMI ========================
 
(The entries could be listed to be restored or removed.)
 
ShortcutWithArgument: C:\Users\tehke\Desktop\rtc7788 - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Default"
 
==================== Loaded Modules (Whitelisted) =============
 
2023-03-01 22:55 - 2023-02-27 12:39 - 001393152 _____ () [File not signed] [File is in use] C:\Program Files (x86)\Razer\Razer Services\Razer Central\CefSharp.Core.Runtime.dll
2023-10-05 02:37 - 2022-08-07 21:02 - 000019968 _____ () [File not signed] [File is in use] G:\DS4Windows\SharpOSC.dll
2024-01-15 22:25 - 2024-01-15 22:25 - 002319872 _____ () [File not signed] \\?\C:\Users\tehke\AppData\Local\Temp\b1e881ae-6d81-439e-9e1f-4d229d56e476.tmp.node
2022-05-22 10:57 - 2022-05-22 10:57 - 000613376 _____ () [File not signed] C:\Program Files\EqualizerAPO\EqualizerAPO.dll
2016-07-30 13:42 - 2016-07-30 13:42 - 002772692 _____ () [File not signed] C:\Program Files\EqualizerAPO\libfftw3f-3.dll
2017-04-02 09:01 - 2017-04-02 09:01 - 001748992 _____ () [File not signed] C:\Program Files\EqualizerAPO\libsndfile-1.dll
2023-09-05 03:14 - 2023-10-18 22:28 - 002862080 _____ () [File not signed] C:\Users\tehke\AppData\Local\Programs\bluestacks-services\ffmpeg.dll
2023-09-05 03:14 - 2023-10-18 22:28 - 000479232 _____ () [File not signed] C:\Users\tehke\AppData\Local\Programs\bluestacks-services\libegl.dll
2023-09-05 03:14 - 2023-10-18 22:28 - 007513600 _____ () [File not signed] C:\Users\tehke\AppData\Local\Programs\bluestacks-services\libglesv2.dll
2023-09-05 03:14 - 2023-10-18 22:28 - 005209088 _____ () [File not signed] C:\Users\tehke\AppData\Local\Programs\bluestacks-services\vk_swiftshader.dll
2023-10-05 02:37 - 2022-01-17 02:30 - 000090624 _____ (Bernhard Millauer,Uwe Mayer, Konrad Mattheis) [File not signed] [File is in use] G:\DS4Windows\WPFLocalizeExtension.dll
2023-10-05 02:37 - 2022-04-05 06:57 - 001199104 _____ (DotNetProjects) [File not signed] [File is in use] G:\DS4Windows\DotNetProjects.Wpf.Extended.Toolkit.dll
2023-10-05 02:37 - 2022-02-10 18:07 - 000336896 _____ (GitHub Community) [File not signed] [File is in use] G:\DS4Windows\Microsoft.Win32.TaskScheduler.dll
2023-10-05 02:37 - 2022-11-08 11:46 - 000339456 _____ (havendv -> Lakritzator and Philipp Sumi) [File not signed] [File is in use] G:\DS4Windows\H.NotifyIcon.dll
2023-10-05 02:37 - 2022-11-08 11:47 - 000109568 _____ (havendv -> Lakritzator and Philipp Sumi) [File not signed] [File is in use] G:\DS4Windows\H.NotifyIcon.Wpf.dll
2023-10-05 02:37 - 2022-09-08 01:16 - 000017920 _____ (Michael Denny, Contributors (see GitHub repo)) [File not signed] [File is in use] G:\DS4Windows\WpfScreenHelper.dll
2023-10-05 02:37 - 2023-09-23 13:46 - 000212992 _____ (Nefarius Software Solutions e.U.) [File not signed] [File is in use] G:\DS4Windows\Nefarius.ViGEm.Client.dll
2023-02-23 22:16 - 2023-02-23 22:16 - 000174592 _____ (Nefarius Software Solutions e.U.) [File not signed] C:\Users\tehke\AppData\Local\Temp\Costura\B4046D3CFAA9590D376E0436D537BF26\64\vigemclient.dll
2023-10-05 02:37 - 2022-12-29 18:01 - 000837120 _____ (NLog) [File not signed] [File is in use] G:\DS4Windows\NLog.dll
2023-10-05 02:37 - 2023-09-30 14:00 - 004087808 _____ (Ryochan7) [File not signed] [File is in use] G:\DS4Windows\DS4Windows.dll
2023-10-05 02:37 - 2023-09-30 14:00 - 000011776 _____ (Ryochan7) [File not signed] [File is in use] G:\DS4Windows\Lang\ar\DS4Windows.resources.dll
2023-10-05 02:37 - 2023-09-30 14:00 - 000011776 _____ (Ryochan7) [File not signed] [File is in use] G:\DS4Windows\Lang\cs\DS4Windows.resources.dll
2023-10-05 02:37 - 2023-09-30 14:00 - 000019968 _____ (Ryochan7) [File not signed] [File is in use] G:\DS4Windows\Lang\de\DS4Windows.resources.dll
2023-10-05 02:37 - 2023-09-30 14:00 - 000035328 _____ (Ryochan7) [File not signed] [File is in use] G:\DS4Windows\Lang\el\DS4Windows.resources.dll
2023-10-05 02:37 - 2023-09-30 14:00 - 000010752 _____ (Ryochan7) [File not signed] [File is in use] G:\DS4Windows\Lang\es\DS4Windows.resources.dll
2023-10-05 02:37 - 2023-09-30 14:00 - 000022528 _____ (Ryochan7) [File not signed] [File is in use] G:\DS4Windows\Lang\fi\DS4Windows.resources.dll
2023-10-05 02:37 - 2023-09-30 14:00 - 000024576 _____ (Ryochan7) [File not signed] [File is in use] G:\DS4Windows\Lang\fr\DS4Windows.resources.dll
2023-10-05 02:37 - 2023-09-30 14:00 - 000011264 _____ (Ryochan7) [File not signed] [File is in use] G:\DS4Windows\Lang\he\DS4Windows.resources.dll
2023-10-05 02:37 - 2023-09-30 14:00 - 000010752 _____ (Ryochan7) [File not signed] [File is in use] G:\DS4Windows\Lang\hu-HU\DS4Windows.resources.dll
2023-10-05 02:37 - 2023-09-30 14:00 - 000021504 _____ (Ryochan7) [File not signed] [File is in use] G:\DS4Windows\Lang\it\DS4Windows.resources.dll
2023-10-05 02:37 - 2023-09-30 14:00 - 000019968 _____ (Ryochan7) [File not signed] [File is in use] G:\DS4Windows\Lang\ja\DS4Windows.resources.dll
2023-10-05 02:37 - 2023-09-30 14:00 - 000010752 _____ (Ryochan7) [File not signed] [File is in use] G:\DS4Windows\Lang\nl\DS4Windows.resources.dll
2023-10-05 02:37 - 2023-09-30 14:00 - 000010752 _____ (Ryochan7) [File not signed] [File is in use] G:\DS4Windows\Lang\pl\DS4Windows.resources.dll
2023-10-05 02:37 - 2023-09-30 14:00 - 000011264 _____ (Ryochan7) [File not signed] [File is in use] G:\DS4Windows\Lang\pt\DS4Windows.resources.dll
2023-10-05 02:37 - 2023-09-30 14:00 - 000010752 _____ (Ryochan7) [File not signed] [File is in use] G:\DS4Windows\Lang\pt-BR\DS4Windows.resources.dll
2023-10-05 02:37 - 2023-09-30 14:00 - 000791040 _____ (Ryochan7) [File not signed] [File is in use] G:\DS4Windows\Lang\ru\DS4Windows.resources.dll
2023-10-05 02:37 - 2023-09-30 14:00 - 000016896 _____ (Ryochan7) [File not signed] [File is in use] G:\DS4Windows\Lang\se\DS4Windows.resources.dll
2023-10-05 02:37 - 2023-09-30 14:00 - 000011264 _____ (Ryochan7) [File not signed] [File is in use] G:\DS4Windows\Lang\uk-UA\DS4Windows.resources.dll
2023-10-05 02:37 - 2023-09-30 14:00 - 000023552 _____ (Ryochan7) [File not signed] [File is in use] G:\DS4Windows\Lang\vi\DS4Windows.resources.dll
2023-10-05 02:37 - 2023-09-30 14:00 - 000020480 _____ (Ryochan7) [File not signed] [File is in use] G:\DS4Windows\Lang\zh-Hans\DS4Windows.resources.dll
2023-10-05 02:37 - 2023-09-30 14:00 - 000016896 _____ (Ryochan7) [File not signed] [File is in use] G:\DS4Windows\Lang\zh-Hant\DS4Windows.resources.dll
2022-04-07 22:35 - 2021-07-22 12:11 - 000076288 _____ (The c-ares library, hxxps://c-ares.haxx.se/) [File not signed] D:\Program Files (x86)\VPN Unlimited\cares.dll
2022-04-07 22:35 - 2023-07-04 08:25 - 000498688 _____ (The curl library, hxxps://curl.se/) [File not signed] D:\Program Files (x86)\VPN Unlimited\libcurl.dll
2023-10-18 18:20 - 2023-07-19 08:19 - 005149696 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [File not signed] D:\Program Files (x86)\VPN Unlimited\libcrypto-3-x64.dll
2023-10-18 18:20 - 2023-07-19 08:19 - 000777728 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [File not signed] D:\Program Files (x86)\VPN Unlimited\libssl-3-x64.dll
2022-04-07 22:35 - 2023-08-12 20:35 - 006066176 _____ (The Qt Company Ltd.) [File not signed] D:\Program Files (x86)\VPN Unlimited\Qt5Core.dll
2023-10-05 02:37 - 2022-01-17 02:12 - 000036864 _____ (Uwe Mayer,Konrad Mattheis,Bernhard Millauer) [File not signed] [File is in use] G:\DS4Windows\XAMLMarkupExtensions.dll
 
==================== Alternate Data Streams (Whitelisted) ========
 
(If an entry is included in the fixlist, only the ADS will be removed.)
 
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk:A1B76439FE [3306]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [3306]
 
==================== Safe Mode (Whitelisted) ==================
 
==================== Association (Whitelisted) =================
 
==================== Internet Explorer (Whitelisted) ==========
 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2022-07-19] (McAfee, LLC -> McAfee, LLC)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2022-07-19] (McAfee, LLC -> McAfee, LLC)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll [2008-05-23] (Microsoft Corporation) [File not signed]
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-04-19] (Microsoft Corporation -> Microsoft Corporation)
Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll [2022-05-06] (Lenovo -> Microsoft Corporation)
Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll [2022-05-06] (Lenovo -> Microsoft Corporation)
Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll [2022-05-06] (Lenovo -> Microsoft Corporation)
 
==================== Hosts content: =========================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2021-06-05 04:08 - 2022-06-22 00:56 - 000000871 _____ C:\WINDOWS\system32\drivers\etc\hosts
0.0.0.0 edf.eset.com
0.0.0.0 expire.eset.com
 
==================== Other Areas ===========================
 
(Currently there is no automatic fix for this section.)
 
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Razer Chroma SDK\bin;C:\Program Files\Razer Chroma SDK\bin;C:\Program Files (x86)\Razer\ChromaBroadcast\bin;C:\Program Files\Razer\ChromaBroadcast\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\dotnet\;C:\Users\terry\AppData\Local\Microsoft\WindowsApps;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\tehke\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\1070956.jpg
HKU\S-1-5-21-3252700674-1244316876-1502611229-1004\Control Panel\Desktop\\Wallpaper -> C:\Users\terry\Downloads\th.jfif
HKU\S-1-5-21-3252700674-1244316876-1502611229-1006\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Lenovo\LenovoWallPaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
(If an entry is included in the fixlist, it will be removed.)
 
HKLM\...\StartupApproved\Run: => "CORSAIR iCUE 4 Software"
HKLM\...\StartupApproved\Run: => "RtkAudUService"
HKLM\...\StartupApproved\Run: => "Riot Vanguard"
HKLM\...\StartupApproved\Run: => "RZTHXHelper"
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run32: => "TeamsMachineInstaller"
HKLM\...\StartupApproved\Run32: => "AirBackupHelper"
HKLM\...\StartupApproved\Run32: => "RazerCortex"
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_5336C2924B55FD107B3D46AF0B1AC178"
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\StartupApproved\Run: => "Synapse3"
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\StartupApproved\Run: => "CCXProcess"
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\StartupApproved\Run: => "LenovoVantageToolbar"
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\StartupApproved\Run: => "Opera GX Stable"
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\StartupApproved\Run: => "Opera GX Browser Assistant"
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\StartupApproved\Run: => "AirBackupHelper"
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\StartupApproved\Run: => "AnyTransToolHelper"
HKU\S-1-5-21-3252700674-1244316876-1502611229-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
HKU\S-1-5-21-3252700674-1244316876-1502611229-1004\...\StartupApproved\Run: => "AirBackupHelper"
HKU\S-1-5-21-3252700674-1244316876-1502611229-1004\...\StartupApproved\Run: => "AnyTransToolHelper"
HKU\S-1-5-21-3252700674-1244316876-1502611229-1004\...\StartupApproved\Run: => "LenovoVantageToolbar"
HKU\S-1-5-21-3252700674-1244316876-1502611229-1004\...\StartupApproved\Run: => "RzAppEngine"
HKU\S-1-5-21-3252700674-1244316876-1502611229-1004\...\StartupApproved\Run: => "Synapse3"
HKU\S-1-5-21-3252700674-1244316876-1502611229-1004\...\StartupApproved\Run: => "RazerAxon"
HKU\S-1-5-21-3252700674-1244316876-1502611229-1004\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
 
==================== FirewallRules (Whitelisted) ================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [UDP Query User{02BF276A-A2B4-472A-A1B9-045136E3548D}C:\program files (x86)\imobie\anytrans\airbackuphelper.exe] => (Allow) C:\program files (x86)\imobie\anytrans\airbackuphelper.exe (iMobie Inc. -> iMobie Inc.)
FirewallRules: [TCP Query User{3279C445-3008-4325-8EB4-1790CD109A12}C:\program files (x86)\imobie\anytrans\airbackuphelper.exe] => (Allow) C:\program files (x86)\imobie\anytrans\airbackuphelper.exe (iMobie Inc. -> iMobie Inc.)
FirewallRules: [{1FFE03ED-1DA7-4538-826D-A46A56FA0480}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{813A5889-4353-4820-B4A0-DC91B3C01A5A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{201609B0-1BDD-4744-9FB0-53FC62154D95}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{DBF99A41-C40A-4297-BE29-AC005E20D0A4}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [UDP Query User{3461D076-3186-40A0-919C-159EA3A77B5D}C:\program files (x86)\imobie\anytrans\anytrans.exe] => (Allow) C:\program files (x86)\imobie\anytrans\anytrans.exe (iMobie Inc. -> iMobie Inc.)
FirewallRules: [TCP Query User{7B7D956B-DAB0-4DB5-B406-962CACACC163}C:\program files (x86)\imobie\anytrans\anytrans.exe] => (Allow) C:\program files (x86)\imobie\anytrans\anytrans.exe (iMobie Inc. -> iMobie Inc.)
FirewallRules: [{8ADE8427-B91F-4415-B1AF-910FE044734F}] => (Allow) C:\Program Files (x86)\iMobie\AnyTrans\xldownload\download\MiniThunderPlatform.exe (ShenZhen Thunder Networking Technologies Ltd. -> 深圳市迅雷网络技术有限公司)
FirewallRules: [{796EE9EB-2F72-481A-82CA-B1C330F5B8CF}] => (Allow) C:\Program Files (x86)\iMobie\AnyTrans\xldownload\download\MiniThunderPlatform.exe (ShenZhen Thunder Networking Technologies Ltd. -> 深圳市迅雷网络技术有限公司)
FirewallRules: [UDP Query User{DF07C02D-411D-46F6-A64F-20000D982D6D}D:\program files\videolan\vlc\vlc.exe] => (Allow) D:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [TCP Query User{E2EEC09E-4D60-4FC1-83A6-9835633838D5}D:\program files\videolan\vlc\vlc.exe] => (Allow) D:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{1A3E5AC6-B5A8-44E0-A501-581539DC582A}D:\program files (x86)\starcraft ii\versions\base88500\sc2_x64.exe] => (Allow) D:\program files (x86)\starcraft ii\versions\base88500\sc2_x64.exe => No File
FirewallRules: [TCP Query User{506A7352-1E68-449F-9F9D-8A0BCCD396FA}D:\program files (x86)\starcraft ii\versions\base88500\sc2_x64.exe] => (Allow) D:\program files (x86)\starcraft ii\versions\base88500\sc2_x64.exe => No File
FirewallRules: [UDP Query User{7F8CFAF2-022E-45E5-97FD-10062BB23A24}C:\users\tehke\appdata\local\discord\app-1.0.9006\discord.exe] => (Block) C:\users\tehke\appdata\local\discord\app-1.0.9006\discord.exe => No File
FirewallRules: [TCP Query User{C9738C52-88A9-4057-B538-DB1029FC14EC}C:\users\tehke\appdata\local\discord\app-1.0.9006\discord.exe] => (Block) C:\users\tehke\appdata\local\discord\app-1.0.9006\discord.exe => No File
FirewallRules: [{8607FB6D-B4F5-4BE5-9489-C28D3E67A45C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.870.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{BF38E6A2-AA98-4E91-9CF2-6C74E19B5BC2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.870.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{B3481C4C-EB20-4EAB-970B-E3B63CB06609}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.870.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{2C54E203-A60B-4DF5-93F2-D95EEECFD8E3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.870.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{B41B4130-FD5C-4A1D-BA2B-B0A6FBB79E6B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.870.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{DD557009-79A6-40B6-9C27-A02338ED5145}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.870.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{9245A4C2-C00F-4986-806C-F0FD1DD2A6F8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.870.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{6E5C27C0-B0F0-47DF-8459-98E3672062A3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.870.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [UDP Query User{4C548F2E-FD68-4203-8FC6-293A763F8752}D:\program files\epic games\fallguys\fallguys_client_game.exe] => (Allow) D:\program files\epic games\fallguys\fallguys_client_game.exe () [File not signed]
FirewallRules: [TCP Query User{A9EDF648-C636-4527-ACB6-73B312DC5235}D:\program files\epic games\fallguys\fallguys_client_game.exe] => (Allow) D:\program files\epic games\fallguys\fallguys_client_game.exe () [File not signed]
FirewallRules: [UDP Query User{DF8CC82D-2305-4CBC-87EF-D3806428EB2A}E:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) E:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe => No File
FirewallRules: [TCP Query User{89AE0F41-FB3E-42BE-A413-EB0CCF7D2175}E:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) E:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe => No File
FirewallRules: [{5D83637E-6C07-42AB-B47F-751A57E5B3BF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.188.612.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{369BB4DB-21D1-49C0-BC49-BE8685E8520E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.188.612.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{C082DF4D-F00E-455B-8664-715D9D6D7C9A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.188.612.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{E184D41D-0E6D-4BD5-B5AB-9526BBC13FE6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.188.612.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{E587663F-DD33-4B66-B750-078B80BAF80F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.188.612.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{B3D919A0-FF41-4ECD-8784-2B7076DDC234}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.188.612.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{E6EE2708-3A1F-40BF-8524-9F07FC7EE515}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.188.612.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [{05E7A3FE-6AED-4D04-A7E2-E34B626F5D32}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.188.612.0_x86__zpdnekdrzrea0\Spotify.exe => No File
FirewallRules: [UDP Query User{A7C56748-FF1D-4B71-ACA7-526CAE9A2275}E:\games\nba 2k22\nba2k22.exe] => (Block) E:\games\nba 2k22\nba2k22.exe => No File
FirewallRules: [TCP Query User{53FCDA60-909C-4198-A241-8103012EE145}E:\games\nba 2k22\nba2k22.exe] => (Block) E:\games\nba 2k22\nba2k22.exe => No File
FirewallRules: [UDP Query User{3370FAAD-4BE6-43F6-829B-0319816A03C2}C:\users\tehke\appdata\local\programs\opera gx\opera.exe] => (Block) C:\users\tehke\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [TCP Query User{8C6C4E34-C687-4748-9AB7-A326FBACB2C3}C:\users\tehke\appdata\local\programs\opera gx\opera.exe] => (Block) C:\users\tehke\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [UDP Query User{77BAA295-67B2-41C7-B515-D44851CA66C3}E:\games\flight simulator\microsoft flight simulator\flightsimulator.exe] => (Allow) E:\games\flight simulator\microsoft flight simulator\flightsimulator.exe => No File
FirewallRules: [TCP Query User{D8B2FE13-B8B5-423D-9271-6E8A17919E5C}E:\games\flight simulator\microsoft flight simulator\flightsimulator.exe] => (Allow) E:\games\flight simulator\microsoft flight simulator\flightsimulator.exe => No File
FirewallRules: [UDP Query User{1AADE3E5-8A0F-44AD-9A1F-EBB34F70FE20}D:\program files (x86)\starcraft ii\versions\base87702\sc2_x64.exe] => (Allow) D:\program files (x86)\starcraft ii\versions\base87702\sc2_x64.exe => No File
FirewallRules: [TCP Query User{51406327-309B-4553-BBA6-ABDC6BD59097}D:\program files (x86)\starcraft ii\versions\base87702\sc2_x64.exe] => (Allow) D:\program files (x86)\starcraft ii\versions\base87702\sc2_x64.exe => No File
FirewallRules: [{CEF0907C-E653-45FF-9A7C-F89E8E7EACDF}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{624CF589-180A-43C9-B739-EB0C0B9662D2}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1F2EC377-D610-423C-8A3B-973BC2D4E4E8}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FA6F9461-B445-4597-A0E6-0F4DD671E277}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{416BE1BC-DE4C-4986-ADEB-8C1D74E9E006}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{236B3DCD-C294-4D82-9BCD-77F2CA833AE0}] => (Allow) D:\Program Files (x86)\2K Sports\NBA 2K14\nba2k14.exe (2K Sports) [File not signed]
FirewallRules: [{F5E41059-B84D-4F44-A9BF-68E829B4AB31}] => (Allow) D:\Program Files (x86)\2K Sports\NBA 2K14\nba2k14.exe (2K Sports) [File not signed]
FirewallRules: [{053F9DDC-B876-47C8-9140-8B44270FD3AB}] => (Allow) D:\Program Files\qBittorrent\qbittorrent.exe (The qBittorrent Project) [File not signed]
FirewallRules: [{EF09ABE3-EF47-483C-AADF-95CC8F2A5C1F}] => (Allow) D:\Program Files\qBittorrent\qbittorrent.exe (The qBittorrent Project) [File not signed]
FirewallRules: [{902E6672-3F5A-43F5-8528-E3A0E7E8C50A}] => (Allow) C:\Users\tehke\AppData\Roaming\uTorrent\uTorrent.exe => No File
FirewallRules: [{B89559FD-604A-4797-91C7-7B53E1995124}] => (Allow) C:\Users\tehke\AppData\Roaming\uTorrent\uTorrent.exe => No File
FirewallRules: [{C67C87BF-74BC-47ED-A5CE-84C1702A5D6B}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{FF6BC194-8D39-4399-B239-2F8900AC24BC}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{97C13D7B-B8BB-4284-9E33-B31644C942D3}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{42EB94E4-B8BD-487D-A206-EB0E8FCC74E6}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{A190F41B-F640-442E-9109-B30BBF9951B7}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe => No File
FirewallRules: [{D2F034E9-518F-4399-BA0B-DBFAB97D6BFA}] => (Allow) C:\Program Files\Razer\RzAppEngine\rzappengine.exe (Razer USA Ltd. -> Razer Inc.)
FirewallRules: [TCP Query User{9B4843FF-1899-4824-B554-2E84E07FE645}D:\program files (x86)\starcraft ii\versions\base89720\sc2_x64.exe] => (Block) D:\program files (x86)\starcraft ii\versions\base89720\sc2_x64.exe => No File
FirewallRules: [UDP Query User{C1871B4D-DF63-4190-A09F-977104BDAD02}D:\program files (x86)\starcraft ii\versions\base89720\sc2_x64.exe] => (Block) D:\program files (x86)\starcraft ii\versions\base89720\sc2_x64.exe => No File
FirewallRules: [{6899BF6A-B0F1-47A8-8675-707A6759C15F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{D9E01A53-549D-4382-98D3-78373118C6C6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{3EF70458-7853-4778-957B-971A239CD69E}D:\program files (x86)\starcraft ii\versions\base90136\sc2_x64.exe] => (Allow) D:\program files (x86)\starcraft ii\versions\base90136\sc2_x64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment, Inc.)
FirewallRules: [UDP Query User{C57AF867-3C79-4791-9486-B0E91AF495C5}D:\program files (x86)\starcraft ii\versions\base90136\sc2_x64.exe] => (Allow) D:\program files (x86)\starcraft ii\versions\base90136\sc2_x64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment, Inc.)
FirewallRules: [{60EECC99-BD04-47C2-8B6C-B68B34A4EA9C}] => (Allow) C:\Program Files\Tencent\WeChat\WeChat.exe (Tencent Technology(Shenzhen) Company Limited -> Tencent)
FirewallRules: [{26F35759-38CF-46AD-BCCA-456A61FC9FD8}] => (Allow) C:\Program Files\Tencent\WeChat\WeChatBrowser.exe => No File
FirewallRules: [{C451A51B-AE8E-4459-9CF5-7E191068290C}] => (Allow) C:\Program Files\Tencent\WeChat\WeChatPlayer.exe => No File
FirewallRules: [{5F74870A-5761-4B7A-97BD-071DD0D291AA}] => (Allow) D:\BlueStacks\BlueStacks X\BlueStacksWeb.exe (Now.gg, INC -> Bluestack Systems, Inc.)
FirewallRules: [{1ADF556A-F147-4C41-9C48-81D9AC960A87}] => (Allow) D:\BlueStacks\BlueStacks X\Cloud Game.exe (Now.gg, INC -> COMPANY NAME)
FirewallRules: [{6F873598-011D-40FD-96B1-6DADE091832F}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe (Now.gg, INC -> BlueStack Systems)
FirewallRules: [{C613D8F6-32F2-4704-9FCC-5FF5BF80B89F}] => (Allow) C:\Program Files\BlueStacks_nxt\BlueStacksAppplayerWeb.exe (Now.gg, INC -> The Qt Company Ltd.)
FirewallRules: [{320EA173-5341-4465-B4F0-7C06BA433F88}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{62EB0BC6-5CE8-439F-A24E-DCB7379BD99F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{D5B49E8B-A960-4C98-8FE0-4F91B3A15B14}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{7935E764-0F36-4B27-83D4-3E132E84CAC5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{8BA872A2-8F7B-41AF-82A4-2D058556192D}] => (Allow) D:\Program Files (x86)\VPN Unlimited\vpn-unlimited.exe (Keepsolid Inc. -> KeepSolid Inc.)
FirewallRules: [{E804A512-E56C-458A-A05E-7C35064EA3BA}] => (Allow) D:\Program Files (x86)\VPN Unlimited\vpn-unlimited.exe (Keepsolid Inc. -> KeepSolid Inc.)
FirewallRules: [{1755FE4F-17AE-40DE-8382-0BAD76924D25}] => (Allow) D:\Program Files (x86)\VPN Unlimited\openvpn.exe (The OpenVPN Project) [File not signed]
FirewallRules: [{153ADD9C-373E-40B1-A396-C77FE67F9F70}] => (Allow) D:\Program Files (x86)\VPN Unlimited\openvpn.exe (The OpenVPN Project) [File not signed]
FirewallRules: [TCP Query User{272ECFCC-1162-4CE2-8D23-C9E2959516F8}D:\games\stepmania 5\program\stepmania.exe] => (Allow) D:\games\stepmania 5\program\stepmania.exe (StepMania Team hxxp://www.stepmania.com/) [File not signed]
FirewallRules: [UDP Query User{6411800B-B934-45EA-9AEE-C0C68596FC2C}D:\games\stepmania 5\program\stepmania.exe] => (Allow) D:\games\stepmania 5\program\stepmania.exe (StepMania Team hxxp://www.stepmania.com/) [File not signed]
FirewallRules: [{456558FA-2316-4DFD-8395-58AC65B6CD0D}] => (Allow) G:\Games\Steam\steamapps\common\Undisputed\Undisputed.exe () [File not signed]
FirewallRules: [{B640A35D-83A9-493E-A12A-AA660ADF280D}] => (Allow) G:\Games\Steam\steamapps\common\Undisputed\Undisputed.exe () [File not signed]
FirewallRules: [TCP Query User{A855FABB-F41E-47EF-9A9E-2C547C249745}G:\games\nba 2k22\nba2k22.exe] => (Block) G:\games\nba 2k22\nba2k22.exe () [File not signed]
FirewallRules: [UDP Query User{BA565023-7C4D-4A60-8418-F3BFDB4700D4}G:\games\nba 2k22\nba2k22.exe] => (Block) G:\games\nba 2k22\nba2k22.exe () [File not signed]
FirewallRules: [{EAE55344-66CF-4B05-BE77-6973BDE47248}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{F2AA54A7-ACC2-424E-B0A9-E722FDE7E7B3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{0391B5E1-073F-468C-9DF3-26810A25804D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{EE7D6EFE-EE8B-46FE-BD06-98ED69B5A468}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{BD6009CC-B628-40E8-B06D-963D2990B297}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{2D081143-DE50-406C-BA4F-4191B8514BF1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{A62F37B7-F138-47A0-8D9A-8E786C802184}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{430D341C-F5D6-4D25-B53D-3DA65F792E14}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{EB8CEFE6-8A1C-4366-AA4E-188CDE67866A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{EBB90BC7-2DDF-44E2-88A9-BC0E48815CDB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{7963ADA5-739B-4EB3-A3F7-2157C1DF8F73}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_23335.205.2559.726_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2E6C50F5-D048-421F-9997-AE751DE6380D}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_23335.205.2559.726_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B986D46F-E1D6-42E0-9568-D9052B2D50CA}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{9B63D647-F8F7-40E0-8826-446F43B7D25B}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\120.0.2210.133\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
 
==================== Restore Points =========================
 
12-01-2024 07:02:56 Windows Update
 
==================== Faulty Device Manager Devices ============
 
Name: DAEMON Tools Lite Virtual SCSI Bus
Description: DAEMON Tools Lite Virtual SCSI Bus
Class Guid: {4d36e97b-e325-11ce-bfc1-08002be10318}
Manufacturer: Disc Soft Ltd
Service: dtlitescsibus
Problem: : Windows cannot load the device driver for this hardware. The driver may be corrupted or missing. (Code 39)
Resolution: Reasons for this error include a driver that is not present; a binary file that is corrupt; a file I/O problem, or a driver that references an entry point in another binary file that could not be loaded.
Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver.
 
 
==================== Event log errors: ========================
 
Application errors:
==================
Error: (01/16/2024 12:11:18 AM) (Source: Application Hang) (EventID: 1002) (User: NT AUTHORITY)
Description: The program Telegram.exe version 4.14.4.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
 
Error: (01/16/2024 12:11:13 AM) (Source: Application Hang) (EventID: 1002) (User: NT AUTHORITY)
Description: The program chrome.exe version 120.0.6099.217 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
 
Error: (01/15/2024 10:15:01 PM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: SCEP Certificate enrollment initialization for WORKGROUP\LAPTOP-D982FIHM$ via https://AMD-KeyId-52...plates/Aik/scepfailed:
 
GetCACaps
 
Method: GET(0ms)
Stage: GetCACaps
The server name or address could not be resolved 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)
 
Error: (01/15/2024 10:15:01 PM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: SCEP Certificate enrollment initialization for Local system via https://AMD-KeyId-52...plates/Aik/scepfailed:
 
GetCACaps
 
Method: GET(16ms)
Stage: GetCACaps
The server name or address could not be resolved 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)
 
Error: (01/15/2024 10:13:55 PM) (Source: Application Error) (EventID: 1000) (User: NT AUTHORITY)
Description: Faulting application name: GameManagerService3.exe, version: 3.5.0.370, time stamp: 0x622f7973
Faulting module name: KERNELBASE.dll, version: 10.0.22621.2861, time stamp: 0x9e57f18c
Exception code: 0xe0434352
Fault offset: 0x00149392
Faulting process id: 0x0x179c
Faulting application start time: 0x0x1da4782b418a892
Faulting application path: C:\Program Files (x86)\Razer\Razer Services\GMS3\GameManagerService3.exe
Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
Report Id: 740ecc41-4cc7-49ae-b683-e12d919e90c4
Faulting package full name: 
Faulting package-relative application ID:
 
Error: (01/15/2024 10:13:50 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.]
 
Error: (01/14/2024 11:50:26 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 13) (User: LAPTOP-D982FIHM)
Description: C:\Users\terry\AppData\Local\Publishers\8wekyb3d8bbwe\TeamsSharedConfigMicrosoftTeams_8wekyb3d8bbwe-2147024894
 
Error: (01/14/2024 11:16:10 PM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: SCEP Certificate enrollment initialization for WORKGROUP\LAPTOP-D982FIHM$ via https://AMD-KeyId-52...plates/Aik/scepfailed:
 
GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-52fb59e29aa83a962fb9eef0fe5b4811de6b751e.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Mon, 15 Jan 2024 07:16:10 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 2b41aa18-1d78-4dd0-84c0-852b090411d3
 
Method: GET(641ms)
Stage: GetCACaps
Not found (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)
 
 
System errors:
=============
Error: (01/15/2024 10:24:22 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-D982FIHM)
Description: The server {FD06603A-2BDF-4BB1-B7DF-5DC68F353601} did not register with DCOM within the required timeout.
 
Error: (01/15/2024 10:22:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Steam Client Service service failed to start due to the following error: 
The service did not respond to the start or control request in a timely fashion.
 
Error: (01/15/2024 10:22:02 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Steam Client Service service to connect.
 
Error: (01/14/2024 11:11:14 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-D982FIHM)
Description: The server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} did not register with DCOM within the required timeout.
 
Error: (01/12/2024 08:39:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Steam Client Service service failed to start due to the following error: 
The service did not respond to the start or control request in a timely fashion.
 
Error: (01/12/2024 08:39:40 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Steam Client Service service to connect.
 
Error: (01/12/2024 07:03:09 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80073d02: 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience.
 
Error: (01/10/2024 05:15:24 AM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: The server {8018F647-BF07-55BB-82BE-A2D7049F7CE4} did not register with DCOM within the required timeout.
 
 
Windows Defender:
================
Date: 2024-01-15 17:01:18
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
 
Date: 2024-01-15 16:36:46
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
 
Date: 2024-01-15 15:58:08
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
 
Date: 2024-01-14 19:52:02
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
 
Date: 2024-01-13 17:49:16
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Event[0]
 
Date: 2024-01-08 16:49:21
Description: 
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version: 
Previous security intelligence Version: 1.403.1841.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version: 
Previous Engine Version: 1.1.23110.2
Error code: 0x80240016
Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.  
 
Date: 2023-07-28 19:20:29
Description: 
Microsoft Defender Antivirus Real-Time Protection feature has encountered an error and failed.
Feature: On Access
Error Code: 0x80004005
Error description: Unspecified error 
Reason: The filter driver skipped scanning items and is in pass through mode. This may be due to low resource conditions. 
 
CodeIntegrity:
===============
Date: 2024-01-15 22:14:52
Description: 
Code Integrity determined that a process (System) attempted to load \Device\HarddiskVolume3\Windows\System32\drivers\dtlitescsibus.sys that is not compatible with hypervisor enforcement. Failure bitmap 0x20. Status 0xC00000BB. 
 
Date: 2024-01-14 23:50:26
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\120.0.2210.133\msedgewebview2.exe) attempted to load \Device\HarddiskVolume3\ProgramData\A-Volute\A-Volute.Nahimic\Modules\Scheduled\x64\AudioDevProps2.dll that did not meet the Microsoft signing level requirements. 
 
Date: 2024-01-10 06:42:24
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\120.0.2210.121\msedgewebview2.exe) attempted to load \Device\HarddiskVolume3\ProgramData\A-Volute\A-Volute.Nahimic\Modules\Scheduled\x64\AudioDevProps2.dll that did not meet the Microsoft signing level requirements. 
 
 
==================== Memory info =========================== 
 
BIOS: LENOVO GKCN60WW 03/07/2023
Motherboard: LENOVO LNVNB161216
Processor: AMD Ryzen 9 5900HX with Radeon Graphics 
Percentage of memory in use: 33%
Total physical RAM: 32620.06 MB
Available physical RAM: 21688.18 MB
Total Virtual: 62316.06 MB
Available Virtual: 46197.64 MB
 
==================== Drives ================================
 
Drive c: (Windows-SSD) (Fixed) (Total:952.62 GB) (Free:680.98 GB) (Model: SKHynix_HFS001TDE9X084N) NTFS
Drive d: (Data) (Fixed) (Total:953.85 GB) (Free:694.02 GB) (Model: SKHynix_HFS001TDE9X084N) NTFS
Drive g: (One Touch) (Fixed) (Total:4657.33 GB) (Free:2925 GB) (Model: Seagate One Touch HDD SCSI Disk Device) NTFS
 
\\?\Volume{0af6318f-5335-4cce-bcf1-c37154c74faa}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.23 GB) NTFS
\\?\Volume{fe006d31-1f1e-4cea-b168-9297dd4deeac}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32
\\?\Volume{3aee5421-0265-4415-be95-b778f81f5be9}\ (EFI) (Fixed) (Total:0.19 GB) (Free:0.19 GB) FAT32
 
==================== MBR & Partition Table ====================
 
==========================================================
Disk: 0 (Size: 953.9 GB) (Disk ID: 43FF248E)
 
Partition: GPT.
 
==========================================================
Disk: 1 (Size: 953.9 GB) (Disk ID: 1B25E18B)
 
Partition: GPT.
 
==========================================================
Disk: 2 (Size: 4657.5 GB) (Disk ID: A9F36CD3)
 
Partition: GPT.
 
==================== End of Addition.txt =======================

 


  • 0

Advertisements


#2
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,596 posts
  • MVP
Multiple replies are OK.  Best to post a log as you get it.
 
Get Process Explorer
 
 
Save it to your desktop then run it (Vista or Win7+ - right click and Run As Administrator).  
View and check Show Processes From All Users 
 
View, Select Column, check Verified Signer, OK
Options, Verify Image Signatures
 
 
Click twice on the CPU column header  to sort things by CPU usage with the big hitters at the top.  
 
Wait a full minute then:
 
File, Save As, Save.  Note the file name.   Open the file  on your desktop and copy and paste the text to a reply.
 
 
 
CrystalDiskInfo:
 
 
 
 
 
 
Scroll down a bit and you will see a picture of a black window with Samsung SSD in it.  Underneath the black window 
is a button that says Vista+.  That's the button you need to use to download the installer.  
Save the file then go to the download folder and right click on the file and run as admin.  
The program will install and then start up.   Once it reads the drives you just hit File then Save Text.  
Save the file to your desktop and then attach it or open it then copy and paste the text to a reply.  
 
 
Latency Monitor:
 
Go to
 
 
Scroll down to
 
System Monitoring Tools
 
and then find
 
LatencyMon 7.0 (or it may be a higher number if they update)
 
Click on Download free home edition
 
Save it then right click and Run As Admin.  It will install and then start the program.  
It will tell you to click on the Start button but there isn't one.  
Instead click on the green arrowhead (looks like a Play button).   Let it run for at least 20 seconds.  Then hit the red box to stop it. 
 
Edit, Copy Report text to Clipboard then move to a REPLY and Ctrl + v to paste the text into a reply.  
 
 
Click on the Drivers Tab.  Click on the column header for "Total execution (ms)" once or twice until the biggest numbers are at the top of the column then take a screen shot (save as type jpg) and attach it.  
Click on the Processes tab then click on the  "Hard Pagefaults" column header once or twice until the big numbers are at the top of the column.  Take a screen shot (save as type jpg) and attach it. 
 
To attach a file:
First click on More Reply Options
Then scroll down to where you see
Choose File and click on it.  Point it at the file and hit Open.
Now click on Attach this file.
 
Only files with .txt, .jpg or .zip are allowed.

  • 0

#3
Terryc250

Terryc250

    Member

  • Topic Starter
  • Member
  • PipPip
  • 91 posts

Got it.  Will be posting logs in separate replies from now on:
 

Process CPU Private Bytes Working Set PID Description Company Name Verified Signer
System Idle Process 99.30 60 K 8 K 0
Interrupts < 0.01 0 K 0 K n/a Hardware Interrupts and DPCs
WmiPrvSE.exe 0.28 28,500 K 37,584 K 5360 WMI Provider Host Microsoft Corporation (Verified) Microsoft Windows
procexp (1)64.exe 0.18 69,200 K 116,052 K 35868 Sysinternals Process Explorer Sysinternals - www.sysinternals.com (Verified) Microsoft Corporation
dwm.exe 0.18 261,708 K 117,144 K 25972 Desktop Window Manager Microsoft Corporation (Verified) Microsoft Windows
steamwebhelper.exe 0.09 464,112 K 299,820 K 19256 Steam Client WebHelper Valve Corporation (Verified) Valve Corp.
steamwebhelper.exe 0.09 289,520 K 108,132 K 22980 Steam Client WebHelper Valve Corporation (Verified) Valve Corp.
NahimicSvc32.exe 0.09 13,296 K 4,844 K 12444 Nahimic (Verified) A-Volute SAS
MsMpEng.exe 0.09 429,076 K 282,412 K 5936
GameManagerService.exe 0.09 81,948 K 91,920 K 5964 GameManagerService Razer Inc (Verified) Razer USA Ltd.
chrome.exe 0.09 274,448 K 354,944 K 29656 Google Chrome Google LLC (Verified) Google LLC
System < 0.01 64 K 2,428 K 4
Peace.exe < 0.01 52,600 K 36,704 K 19276 Peter's Equalizer APO Configuration Extension (Peace) (Verified) Petrus Verbeek
CefSharp.BrowserSubprocess.exe < 0.01 71,024 K 101,568 K 23160 CefSharp.BrowserSubprocess The CefSharp Authors (Verified) Razer USA Ltd.
steamwebhelper.exe < 0.01 54,036 K 140,548 K 13392 Steam Client WebHelper Valve Corporation (Verified) Valve Corp.
Discord.exe < 0.01 65,888 K 79,208 K 10072 Discord Discord Inc. (Verified) Discord Inc.
Razer Central.exe < 0.01 76,204 K 115,920 K 23692 Razer Central Razer Inc. (Verified) Razer USA Ltd.
BlueStacksServices.exe < 0.01 57,452 K 84,052 K 13544 BlueStacks Services now.gg, Inc. (Verified) Now.gg, INC
msedge.exe < 0.01 248,260 K 321,412 K 22108 Microsoft Edge Microsoft Corporation (Verified) Microsoft Corporation
Discord.exe < 0.01 233,284 K 194,592 K 12352 Discord Discord Inc. (Verified) Discord Inc.
Discord.exe < 0.01 92,132 K 75,480 K 13368 Discord Discord Inc. (Verified) Discord Inc.
steam.exe < 0.01 47,260 K 67,320 K 22592 Steam Valve Corporation (Verified) Valve Corp.
svchost.exe < 0.01 17,740 K 24,928 K 3808 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
NVIDIA Share.exe < 0.01 96,504 K 64,576 K 18112 NVIDIA Share NVIDIA Corporation (Verified) Nvidia Corporation
explorer.exe < 0.01 766,672 K 345,060 K 20000 Windows Explorer Microsoft Corporation (Verified) Microsoft Windows
CefSharp.BrowserSubprocess.exe < 0.01 17,412 K 27,500 K 25792 CefSharp.BrowserSubprocess The CefSharp Authors (Verified) Razer USA Ltd.
csrss.exe < 0.01 4,184 K 7,132 K 24232
Tobii.EyeX.Interaction.exe < 0.01 119,052 K 78,720 K 14736 Tobii Eye Interaction Tobii AB (Verified) Tobii AB
msedge.exe < 0.01 198,076 K 189,772 K 27760 Microsoft Edge Microsoft Corporation (Verified) Microsoft Corporation
DS4Windows.exe < 0.01 337,588 K 75,824 K 19564 DS4Windows Ryochan7 (No signature was present in the subject) Ryochan7
svchost.exe < 0.01 13,224 K 18,888 K 1596 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
LenovoVantage-(DeviceSettingsSystemAddin).exe < 0.01 37,992 K 6,700 K 17152 Lenovo (Verified) Lenovo
Tobii.EyeX.Engine.exe < 0.01 71,788 K 63,940 K 6432 Tobii Interaction Engine Tobii AB (Verified) Tobii AB
svchost.exe < 0.01 5,464 K 18,196 K 4060 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
Razer Synapse 3.exe < 0.01 162,648 K 197,908 K 24372 Razer Synapse 3 Razer Inc. (Verified) Razer USA Ltd.
Lenovo.Modern.ImController.exe < 0.01 124,332 K 126,988 K 6076 Lenovo.Modern.ImController Lenovo Group Ltd. (Verified) Lenovo
unsecapp.exe < 0.01 6,776 K 12,176 K 17876 Sink to receive asynchronous callbacks for WMI client application Microsoft Corporation (Verified) Microsoft Windows
nvsphelper64.exe < 0.01 3,032 K 13,068 K 19128 NVIDIA ShadowPlay Helper NVIDIA Corporation (Verified) NVIDIA Corporation
NVDisplay.Container.exe < 0.01 62,444 K 56,000 K 2560 NVIDIA Container NVIDIA Corporation (Verified) NVIDIA Corporation
lsass.exe < 0.01 12,624 K 23,888 K 1364 Local Security Authority Process Microsoft Corporation (Verified) Microsoft Windows Publisher
LenovoVantage-(LenovoGamingSystemAddin).exe < 0.01 38,716 K 17,284 K 20828 Lenovo (Verified) Lenovo
BlueStacksServices.exe < 0.01 70,480 K 58,712 K 11492 BlueStacks Services now.gg, Inc. (Verified) Now.gg, INC
Razer Synapse Service.exe < 0.01 130,872 K 138,644 K 9276 Razer Synapse Service Razer Inc. (Verified) Razer USA Ltd.
OneDrive.exe < 0.01 105,348 K 106,796 K 17068 Microsoft OneDrive Microsoft Corporation (Verified) Microsoft Corporation
nvcontainer.exe < 0.01 13,376 K 36,080 K 5928 NVIDIA Container NVIDIA Corporation (Verified) Nvidia Corporation
LenovoVantageService.exe < 0.01 93,812 K 71,560 K 5836 LenovoVantageService Lenovo (Verified) Lenovo
chrome.exe < 0.01 339,536 K 388,496 K 3896 Google Chrome Google LLC (Verified) Google LLC
GameManagerService3.exe < 0.01 56,620 K 79,616 K 5912 GameManagerService3 Razer Inc (Verified) Razer USA Ltd.
Memory Compression < 0.01 4,792 K 1,234,784 K 3544
servicehost.exe < 0.01 30,104 K 43,620 K 15716 McAfee WebAdvisor(service) McAfee, LLC (Verified) McAfee, LLC
chrome.exe < 0.01 441,436 K 269,708 K 16972 Google Chrome Google LLC (Verified) Google LLC
svchost.exe < 0.01 25,424 K 48,192 K 5764 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
chrome.exe < 0.01 648,084 K 299,772 K 16464 Google Chrome Google LLC (Verified) Google LLC
msedge.exe < 0.01 237,656 K 120,168 K 32192 Microsoft Edge Microsoft Corporation (Verified) Microsoft Corporation
Telegram.exe < 0.01 452,700 K 167,340 K 20052 Telegram Desktop Telegram FZ-LLC (Verified) Telegram FZ-LLC
NVIDIA Share.exe < 0.01 120,244 K 40,308 K 26324 NVIDIA Share NVIDIA Corporation (Verified) Nvidia Corporation
taskhostw.exe < 0.01 7,896 K 17,844 K 16196 Host Process for Windows Tasks Microsoft Corporation (Verified) Microsoft Windows
uihost.exe < 0.01 19,868 K 28,460 K 24936 McAfee WebAdvisor(user level process) McAfee, LLC (Verified) McAfee, LLC
NahimicSvc64.exe < 0.01 7,824 K 5,512 K 11188 Nahimic (Verified) A-Volute SAS
svchost.exe < 0.01 10,180 K 13,316 K 7732 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
services.exe < 0.01 6,336 K 9,376 K 1328
nvcontainer.exe < 0.01 8,924 K 27,904 K 17592 NVIDIA Container NVIDIA Corporation (Verified) Nvidia Corporation
Razer Synapse Service Process.exe < 0.01 37,000 K 56,780 K 11432 Razer Synapse Service Process (Verified) Razer USA Ltd.
UDClientService.exe < 0.01 28,608 K 30,044 K 5956 UDC Service Lenovo Group Ltd. (Verified) Lenovo
CortexLauncherService.exe < 0.01 3,428 K 6,124 K 5800 CortexLauncherService.exe Razer Inc. (Verified) Razer USA Ltd.
svchost.exe < 0.01 1,396 K 5,428 K 3420 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
RazerCentralService.exe < 0.01 41,780 K 73,856 K 5820 Razer Central Service Razer Inc. (Verified) Razer USA Ltd.
sihost.exe < 0.01 11,612 K 41,284 K 18008 Shell Infrastructure Host Microsoft Corporation (Verified) Microsoft Windows
RzChromaStreamServer.exe < 0.01 2,232 K 8,432 K 5864 Razer Chroma Stream Server Razer Inc. (Verified) Razer USA Ltd.
steamservice.exe < 0.01 7,892 K 11,816 K 8148 Steam Client Service Valve Corporation (Verified) Valve Corp.
mbamtray.exe < 0.01 32,884 K 47,972 K 21192 Malwarebytes Tray Application Malwarebytes (Verified) Malwarebytes Inc.
chrome.exe < 0.01 15,780 K 22,056 K 27816 Google Chrome Google LLC (Verified) Google LLC
chrome.exe < 0.01 54,852 K 64,040 K 32316 Google Chrome Google LLC (Verified) Google LLC
AppleMobileDeviceService.exe < 0.01 3,508 K 12,552 K 5736 MobileDeviceService Apple Inc. (Verified) Apple Inc.
RzSDKServer.exe < 0.01 3,016 K 10,404 K 5996 Razer Chroma SDK REST Server Razer Inc. (Verified) Razer USA Ltd.
svchost.exe < 0.01 2,684 K 11,720 K 3428 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
conhost.exe < 0.01 5,736 K 7,680 K 9444 Console Window Host Microsoft Corporation (Verified) Microsoft Windows
conhost.exe < 0.01 5,736 K 7,684 K 9584 Console Window Host Microsoft Corporation (Verified) Microsoft Windows
conhost.exe < 0.01 5,728 K 7,676 K 9576 Console Window Host Microsoft Corporation (Verified) Microsoft Windows
conhost.exe < 0.01 5,736 K 7,688 K 8288 Console Window Host Microsoft Corporation (Verified) Microsoft Windows
svchost.exe < 0.01 12,512 K 29,844 K 1472 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
CefSharp.BrowserSubprocess.exe < 0.01 16,748 K 24,940 K 17064 CefSharp.BrowserSubprocess The CefSharp Authors (Verified) Razer USA Ltd.
svchost.exe < 0.01 8,736 K 34,424 K 4204 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
Discord.exe < 0.01 17,688 K 41,460 K 25620 Discord Discord Inc. (Verified) Discord Inc.
Discord.exe < 0.01 13,928 K 62,500 K 16900 Discord Discord Inc. (Verified) Discord Inc.
svchost.exe < 0.01 3,340 K 8,608 K 1652 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe < 0.01 6,584 K 18,488 K 21728
FnHotkeyUtility.exe < 0.01 34,680 K 21,636 K 19024 This utility controls special keyboard functions like hotkeys and function keys, on your Lenovo notebook. Lenovo (Verified) Lenovo
svchost.exe < 0.01 12,472 K 19,604 K 9360 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
chrome.exe < 0.01 35,672 K 55,432 K 33220 Google Chrome Google LLC (Verified) Google LLC
chrome.exe < 0.01 66,136 K 106,612 K 36476 Google Chrome Google LLC (Verified) Google LLC
OfficeClickToRun.exe < 0.01 36,000 K 32,584 K 5880 Microsoft Office Click-to-Run (SxS) Microsoft Corporation (Verified) Microsoft Corporation
NVIDIA Web Helper.exe < 0.01 33,212 K 11,668 K 16600 NVIDIA Web Helper Service Node.js (Verified) Nvidia Corporation
chrome.exe < 0.01 75,056 K 123,208 K 24468 Google Chrome Google LLC (Verified) Google LLC
Tobii.Service.exe < 0.01 35,572 K 30,936 K 5980 Tobii.Service Tobii AB (Verified) Tobii AB
NahimicService.exe < 0.01 11,164 K 26,140 K 6068 Nahimic (Verified) A-Volute SAS
svchost.exe < 0.01 3,624 K 12,176 K 12284 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
MBAMService.exe < 0.01 29,896 K 60,252 K 6024
csrss.exe < 0.01 2,960 K 4,856 K 1156
WUDFHost.exe 1,484 K 5,296 K 1564 Windows Driver Foundation - User-mode Driver Framework Host Process Microsoft Corporation (Verified) Microsoft Windows
WUDFHost.exe 1,548 K 5,836 K 1688 Windows Driver Foundation - User-mode Driver Framework Host Process Microsoft Corporation (Verified) Microsoft Windows
WUDFHost.exe 2,372 K 8,700 K 3640 Windows Driver Foundation - User-mode Driver Framework Host Process Microsoft Corporation (Verified) Microsoft Windows
WUDFHost.exe 1,920 K 7,800 K 4500 Windows Driver Foundation - User-mode Driver Framework Host Process Microsoft Corporation (Verified) Microsoft Windows
WmiPrvSE.exe 3,308 K 10,160 K 3964 WMI Provider Host Microsoft Corporation (Verified) Microsoft Windows
WmiApSrv.exe 1,572 K 7,884 K 5084 WMI Performance Reverse Adapter Microsoft Corporation (Verified) Microsoft Windows
wlanext.exe 1,152 K 5,572 K 5144 Windows Wireless LAN 802.11 Extensibility Framework Microsoft Corporation (Verified) Microsoft Windows
winlogon.exe 2,444 K 9,696 K 10596 Windows Logon Application Microsoft Corporation (Verified) Microsoft Windows
wininit.exe 1,576 K 5,540 K 1252
WidgetService.exe 5,624 K 23,024 K 16264 (Verified) Microsoft Windows
Widgets.exe 8,692 K 32,852 K 26036 Microsoft Corporation (Verified) Microsoft Windows
vpn-unlimited-daemon.exe 2,064 K 8,292 K 5872 VPN Unlimited Service KeepSolid Inc. (Verified) Keepsolid Inc.
unsecapp.exe 1,616 K 8,044 K 9416 Sink to receive asynchronous callbacks for WMI client application Microsoft Corporation (Verified) Microsoft Windows
unsecapp.exe 1,628 K 8,136 K 3104 Sink to receive asynchronous callbacks for WMI client application Microsoft Corporation (Verified) Microsoft Windows
TextInputHost.exe 67,944 K 60,972 K 2620 Microsoft Corporation (Verified) Microsoft Windows
SystemSettingsBroker.exe 8,248 K 30,832 K 16320 System Settings Broker Microsoft Corporation (Verified) Microsoft Windows
SystemSettings.exe Suspended 171,448 K 77,024 K 17428 Settings Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 20,936 K 14,312 K 3332 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,388 K 8,844 K 8700 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 13,044 K 16,964 K 2136 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,728 K 7,664 K 4288 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,720 K 16,088 K 10812 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 10,380 K 23,304 K 17316 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 5,848 K 18,784 K 11440 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,216 K 11,456 K 2312 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,936 K 7,728 K 5584 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,628 K 6,128 K 2676 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,824 K 10,024 K 4848 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 7,632 K 15,572 K 2180 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,836 K 8,460 K 2832 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,836 K 10,696 K 2452 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 8,672 K 29,284 K 4492 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,040 K 9,652 K 12976
svchost.exe 7,752 K 18,224 K 4816 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 7,152 K 16,572 K 2248 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,284 K 12,132 K 1936 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,032 K 7,128 K 3436 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 48,300 K 41,420 K 5808 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,980 K 13,512 K 20136 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,132 K 8,496 K 17884 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,064 K 8,504 K 19696 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 16,528 K 15,800 K 5236 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 4,532 K 17,668 K 5856 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,716 K 8,448 K 6228 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,032 K 13,108 K 2748 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,184 K 9,420 K 2116 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,588 K 9,488 K 4296 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,984 K 9,760 K 4304 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,972 K 14,852 K 19468 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 45,384 K 31,212 K 4600
svchost.exe 1,204 K 5,604 K 19444 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 6,424 K 22,412 K 24556 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 4,404 K 15,644 K 5896 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,024 K 7,276 K 4448 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,680 K 12,528 K 14396 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,948 K 13,732 K 12648 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 4,308 K 13,524 K 1952 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,828 K 7,016 K 2928 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,584 K 12,076 K 12796 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 5,156 K 13,544 K 12636 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,112 K 6,828 K 8032 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,652 K 10,840 K 7664 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,728 K 11,508 K 19220
svchost.exe 2,164 K 8,788 K 5904 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,432 K 8,248 K 3608 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,780 K 7,212 K 5948 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,964 K 7,440 K 3616 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,636 K 6,864 K 4092 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,000 K 9,748 K 5828 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,292 K 5,328 K 5848 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,880 K 7,304 K 3584 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,376 K 9,048 K 2124 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 9,096 K 8,232 K 2304 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,008 K 7,248 K 1940 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,208 K 4,780 K 1904 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,132 K 5,440 K 2336 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,788 K 6,952 K 3128 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,544 K 6,076 K 3216 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,420 K 9,820 K 2108 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 7,804 K 6,968 K 2060 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,708 K 6,876 K 9532 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,824 K 8,684 K 4752 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 8,144 K 17,940 K 17164 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,384 K 18,108 K 15220 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,252 K 5,536 K 6492 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,640 K 8,604 K 26800 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,632 K 8,856 K 14324 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,548 K 14,608 K 23076 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,516 K 6,972 K 34528 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,640 K 7,564 K 36028 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
steamwebhelper.exe 303,732 K 146,668 K 17440 Steam Client WebHelper Valve Corporation (Verified) Valve Corp.
steamwebhelper.exe 8,868 K 18,908 K 29024 Steam Client WebHelper Valve Corporation (Verified) Valve Corp.
steamwebhelper.exe 16,616 K 29,716 K 10800 Steam Client WebHelper Valve Corporation (Verified) Valve Corp.
steamwebhelper.exe 8,376 K 14,192 K 21804 Steam Client WebHelper Valve Corporation (Verified) Valve Corp.
StartMenuExperienceHost.exe 99,936 K 84,324 K 13864 Windows Start Experience Host Microsoft Corporation (Verified) Microsoft Windows
spoolsv.exe 5,692 K 13,952 K 5200 Spooler SubSystem App Microsoft Corporation (Verified) Microsoft Windows
smss.exe 1,128 K 1,064 K 764
ShellExperienceHost.exe Suspended 99,512 K 126,884 K 9980 Windows Shell Experience Host Microsoft Corporation (Verified) Microsoft Windows
ShareX.exe 71,564 K 68,940 K 25284 ShareX ShareX Team (No signature was present in the subject) ShareX Team
SecurityHealthSystray.exe 2,052 K 10,176 K 20512 Windows Security notification icon Microsoft Corporation (Verified) Microsoft Windows
SecurityHealthService.exe 7,856 K 17,700 K 10872
Secure System Suspended 184 K 80,552 K 172
SearchIndexer.exe 32,864 K 31,300 K 10440 Microsoft Windows Search Indexer Microsoft Corporation (Verified) Microsoft Windows
SearchHost.exe Suspended 321,492 K 132,752 K 23616 Microsoft Corporation (Verified) Microsoft Windows
RzUpdateEngineService.exe 4,968 K 16,180 K 5888 RzUpdateEngine Razer (Verified) Razer USA Ltd.
RZTHXService.exe 1,904 K 8,076 K 5988 RzThxService Razer (Verified) Razer USA Ltd.
RzSmartlightingDeviceManager 1,220 K 5,228 K 9456 Razer Chroma SDK Service Host Razer Inc. (Verified) Razer USA Ltd.
RzSDKService.exe 9,168 K 8,656 K 5972 Razer Chroma SDK Service Razer Inc. (Verified) Razer USA Ltd.
RzIoTDeviceManager 1,212 K 5,188 K 9448 Razer Chroma SDK Service Host Razer Inc. (Verified) Razer USA Ltd.
RzDiagnostic 1,504 K 6,988 K 6048 Razer Chroma SDK Service Host Razer Inc. (Verified) Razer USA Ltd.
RzAppManager 1,732 K 6,508 K 1452 Razer Chroma SDK Service Host Razer Inc. (Verified) Razer USA Ltd.
RuntimeBroker.exe 18,472 K 48,128 K 24892 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 6,960 K 24,268 K 20308 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 9,168 K 34,260 K 19200 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 7,844 K 21,132 K 29792 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 4,468 K 17,360 K 16024 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RtkAudUService64.exe 5,096 K 12,324 K 6008 Realtek HD Audio Universal Service Realtek Semiconductor (Verified) Realtek Semiconductor Corp.
Registry 10,380 K 35,728 K 212
QSHelper.exe 3,700 K 16,188 K 15784 Lenovo Vantage - Quick Setting Helper Lenovo (Verified) Lenovo
procexp (1).exe 4,676 K 13,676 K 34900 Sysinternals Process Explorer Sysinternals - www.sysinternals.com (Verified) Microsoft Corporation
NVIDIA Share.exe 73,324 K 62,260 K 25300 NVIDIA Share NVIDIA Corporation (Verified) Nvidia Corporation
NVDisplay.Container.exe 8,248 K 19,912 K 3304 NVIDIA Container NVIDIA Corporation (Verified) NVIDIA Corporation
nvcontainer.exe 67,928 K 59,224 K 11088 NVIDIA Container NVIDIA Corporation (Verified) Nvidia Corporation
node.exe 26,324 K 50,192 K 6116 Node.js JavaScript Runtime Node.js (Verified) OpenJS Foundation
NisSrv.exe 5,448 K 11,600 K 5012
Nahimic3.exe Suspended 69,832 K 61,024 K 19480 Nahimic 3 (Verified) 21E1B422-257A-44A2-9C8F-379165856473
msinfo32.exe 3,364 K 16,032 K 22920 System Information Microsoft Corporation (Verified) Microsoft Windows
msedge.exe 572,296 K 185,484 K 26024 Microsoft Edge Microsoft Corporation (Verified) Microsoft Corporation
msedge.exe 17,856 K 27,784 K 36392 Microsoft Edge Microsoft Corporation (Verified) Microsoft Corporation
msedge.exe 26,328 K 49,220 K 7240 Microsoft Edge Microsoft Corporation (Verified) Microsoft Corporation
msedge.exe 8,156 K 19,084 K 26076 Microsoft Edge Microsoft Corporation (Verified) Microsoft Corporation
msedge.exe 92,744 K 139,952 K 17144 Microsoft Edge Microsoft Corporation (Verified) Microsoft Corporation
msedge.exe 7,820 K 21,560 K 31892 Microsoft Edge Microsoft Corporation (Verified) Microsoft Corporation
msedge.exe 49,912 K 71,756 K 1660 Microsoft Edge Microsoft Corporation (Verified) Microsoft Corporation
msedge.exe 10,396 K 18,708 K 2780 Microsoft Edge Microsoft Corporation (Verified) Microsoft Corporation
msedge.exe 2,532 K 8,504 K 25392 Microsoft Edge Microsoft Corporation (Verified) Microsoft Corporation
mqsvc.exe 8,152 K 13,072 K 6852 Message Queuing Service Microsoft Corporation (Verified) Microsoft Windows
MoUsoCoreWorker.exe 6,240 K 24,244 K 6724 MoUSO Core Worker Process Microsoft Corporation (Verified) Microsoft Windows
mDNSResponder.exe 2,124 K 6,516 K 5748 Bonjour Service Apple Inc. (Verified) Apple Inc.
LsaIso.exe 1,340 K 3,028 K 1336
Locator.exe 664 K 3,264 K 4372 Rpc Locator Microsoft Corporation (Verified) Microsoft Windows
LenovoVantage-(VantageCoreAddin).exe 45,600 K 3,560 K 8 Lenovo (Verified) Lenovo
LenovoVantage-(GenericMessagingAddin).exe 18,760 K 4,724 K 26108 Lenovo (Verified) Lenovo
LenovoUtilityService.exe 20,900 K 10,956 K 5920 Lenovo Fn and function keys service Lenovo (Verified) Lenovo
KelVPNService.exe 5,420 K 12,176 K 7816 (No signature was present in the subject) 
fontdrvhost.exe 6,548 K 14,608 K 25316 Usermode Font Driver Host Microsoft Corporation (Verified) Microsoft Windows
fontdrvhost.exe 1,688 K 3,048 K 1500 Usermode Font Driver Host Microsoft Corporation (Verified) Microsoft Windows
FnHotkeyCapsLKNumLK.exe 18,416 K 11,944 K 2008 This utility controls special keyboard functions like capslk and numlk Lenovo (Verified) Lenovo
FileSyncHelper.exe 5,188 K 20,004 K 17980 Microsoft OneDriveFileSyncHelper Microsoft Corporation (Verified) Microsoft Corporation
FileCoAuth.exe 7,356 K 24,628 K 16468 Microsoft OneDriveFile Co-Authoring Executable Microsoft Corporation (Verified) Microsoft Corporation
dllhost.exe 6,476 K 15,192 K 4968 COM Surrogate Microsoft Corporation (Verified) Microsoft Windows
DiscSoftBusService.exe 3,424 K 10,028 K 19636 Disc Soft Bus Service Disc Soft Ltd (Verified) Disc Soft Ltd
Discord.exe 13,260 K 25,636 K 12100 Discord Discord Inc. (Verified) Discord Inc.
ctfmon.exe 28,904 K 34,744 K 21420 CTF Loader Microsoft Corporation (Verified) Microsoft Windows
conhost.exe 5,376 K 1,072 K 13724 Console Window Host Microsoft Corporation (Verified) Microsoft Windows
conhost.exe 5,232 K 4,688 K 5412 Console Window Host Microsoft Corporation (Verified) Microsoft Windows
conhost.exe 5,348 K 5,664 K 3892 Console Window Host Microsoft Corporation (Verified) Microsoft Windows
chrome.exe 40,096 K 58,488 K 31356 Google Chrome Google LLC (Verified) Google LLC
chrome.exe 108,592 K 160,728 K 18500 Google Chrome Google LLC (Verified) Google LLC
chrome.exe 22,040 K 25,096 K 22576 Google Chrome Google LLC (Verified) Google LLC
chrome.exe 29,184 K 45,188 K 30736 Google Chrome Google LLC (Verified) Google LLC
chrome.exe 188,988 K 152,272 K 2716 Google Chrome Google LLC (Verified) Google LLC
chrome.exe 52,368 K 79,696 K 14116 Google Chrome Google LLC (Verified) Google LLC
chrome.exe 23,612 K 33,204 K 34104 Google Chrome Google LLC (Verified) Google LLC
chrome.exe 37,432 K 59,480 K 28172 Google Chrome Google LLC (Verified) Google LLC
chrome.exe 30,128 K 48,436 K 12656 Google Chrome Google LLC (Verified) Google LLC
chrome.exe 30,552 K 45,008 K 32032 Google Chrome Google LLC (Verified) Google LLC
chrome.exe 44,128 K 74,852 K 15092 Google Chrome Google LLC (Verified) Google LLC
chrome.exe 7,124 K 9,848 K 27184 Google Chrome Google LLC (Verified) Google LLC
CefSharp.BrowserSubprocess.exe 18,716 K 30,760 K 25144 CefSharp.BrowserSubprocess The CefSharp Authors (Verified) Razer USA Ltd.
CefSharp.BrowserSubprocess.exe 37,272 K 58,068 K 26524 CefSharp.BrowserSubprocess The CefSharp Authors (Verified) Razer USA Ltd.
CefSharp.BrowserSubprocess.exe 21,436 K 27,264 K 16132 CefSharp.BrowserSubprocess The CefSharp Authors (Verified) Razer USA Ltd.
CefSharp.BrowserSubprocess.exe 20,668 K 30,612 K 21772 CefSharp.BrowserSubprocess The CefSharp Authors (Verified) Razer USA Ltd.
CCXProcess.exe 584 K 2,796 K 9072 Creative Cloud Content Manager Adobe Inc. (Verified) Adobe Inc.
BlueStacksServices.exe 13,340 K 40,368 K 3044 BlueStacks Services now.gg, Inc. (Verified) Now.gg, INC
BlueStacksServices.exe 21,416 K 52,696 K 16412 BlueStacks Services now.gg, Inc. (Verified) Now.gg, INC
ApplicationFrameHost.exe 26,620 K 34,964 K 25588 Application Frame Host Microsoft Corporation (Verified) Microsoft Windows
amdfendrsr.exe 2,280 K 6,660 K 3340 AMD Crash Defender Service Advanced Micro Devices, Inc. (Verified) Advanced Micro Devices Inc.
AggregatorHost.exe 2,440 K 9,444 K 8708 Microsoft ® Aggregator Host Microsoft Corporation (Verified) Microsoft Windows
AdobeIPCBroker.exe 2,400 K 9,528 K 15648 Creative Cloud Interprocess Service Adobe Inc. (Verified) Adobe Inc.
 

.

Attached Files


Edited by Terryc250, 16 January 2024 - 10:59 AM.

  • 0

#4
Terryc250

Terryc250

    Member

  • Topic Starter
  • Member
  • PipPip
  • 91 posts
----------------------------------------------------------------------------
CrystalDiskInfo 9.2.2 © 2008-2024 hiyohiyo
                                Crystal Dew World: https://crystalmark.info/
----------------------------------------------------------------------------
 
    OS : Windows 11  [10.0 Build 22621] (x64)
  Date : 2024/01/16 8:48:31
 
-- Controller Map ----------------------------------------------------------
 - Standard SATA AHCI Controller [ATA]
 - Standard SATA AHCI Controller [ATA]
 - Microsoft Storage Spaces Controller [SCSI]
 + Standard NVM Express Controller [SCSI]
   - SKHynix_HFS001TDE9X084N
 + USB Attached SCSI (UAS) Mass Storage Device [SCSI]
   - Seagate One Touch HDD SCSI Disk Device
   - Generic IEEE 1667 Probe Silo
   - Microsoft TCG Storage silo
   - Generic IEEE 1667 ACT
 + Standard NVM Express Controller [SCSI]
   - SKHynix_HFS001TDE9X084N
 - DAEMON Tools Lite Virtual SCSI Bus [SCSI]
 
-- Disk List ---------------------------------------------------------------
 (01) SKHynix_HFS001TDE9X084N : 1024.2 GB [0/2/0, sq] - nv
 (02) SKHynix_HFS001TDE9X084N : 1024.2 GB [1/3/0, sq] - nv
 (03) ST5000LM000-2AN170 : 5000.9 GB [2/4/0, sa1]
 
----------------------------------------------------------------------------
 (01) SKHynix_HFS001TDE9X084N
----------------------------------------------------------------------------
           Model : SKHynix_HFS001TDE9X084N
        Firmware : 41010C22
   Serial Number : ADACN44441450CE5T
       Disk Size : 1024.2 GB
       Interface : NVM Express
        Standard : NVM Express 1.3
   Transfer Mode : PCIe 3.0 x4 | PCIe 3.0 x4
  Power On Hours : 6579 hours
  Power On Count : 2501 count
      Host Reads : 22841 GB
     Host Writes : 20630 GB
     Temperature : 44 C (111 F)
   Health Status : Good (100 %)
        Features : S.M.A.R.T., TRIM, VolatileWriteCache
    Drive Letter : C:
 
-- S.M.A.R.T. --------------------------------------------------------------
ID RawValues(6) Attribute Name
01 000000000000 Critical Warning
02 00000000013D Composite Temperature
03 000000000064 Available Spare
04 00000000000A Available Spare Threshold
05 000000000000 Percentage Used
06 000002DAEF3A Data Units Read
07 000002942D3F Data Units Written
08 000019BA43D1 Host Read Commands
09 000027DB70BC Host Write Commands
0A 00000000030A Controller Busy Time
0B 0000000009C5 Power Cycles
0C 0000000019B3 Power On Hours
0D 00000000001A Unsafe Shutdowns
0E 000000000000 Media and Data Integrity Errors
0F 000000000000 Number of Error Information Log Entries
 
-- IDENTIFY_DEVICE ---------------------------------------------------------
        0    1    2    3    4    5    6    7    8    9
000: 1C5C 1C5C 4441 4341 344E 3434 3134 3534 4330 3545
010: 2054 2020 4B53 7948 696E 5F78 4648 3053 3130 4454
020: 3945 3058 3438 204E 2020 2020 2020 2020 2020 2020
030: 2020 2020 3134 3130 4330 3232 2E03 ACE4 0600 0001
040: 0300 0001 A120 0007 8480 001E 0200 0000 0010 0000
050: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
060: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
070: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
080: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
090: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
100: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
110: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
120: 0000 0000 0000 0000 0000 0000 0000 0000 0017 0703
130: 1E16 04FF 0101 0164 0165 0000 0000 0000 0000 0000
140: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 002D 0001
160: 0000 0001 0111 0164 0002 0000 0000 0000 0000 0000
170: 0001 0000 0000 0000 0000 0000 0001 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 0000
 
-- SMART_NVME --------------------------------------------------------------
     +0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 00 3D 01 64 0A 00 00 00 00 00 00 00 00 00 00 00
010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
020: 3A EF DA 02 00 00 00 00 00 00 00 00 00 00 00 00
030: 3F 2D 94 02 00 00 00 00 00 00 00 00 00 00 00 00
040: D2 43 BA 19 00 00 00 00 00 00 00 00 00 00 00 00
050: BC 70 DB 27 00 00 00 00 00 00 00 00 00 00 00 00
060: 0A 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00
070: C5 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00
080: B3 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00
090: 1A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0C0: 00 00 00 00 00 00 00 00 36 01 3A 01 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 
----------------------------------------------------------------------------
 (02) SKHynix_HFS001TDE9X084N
----------------------------------------------------------------------------
           Model : SKHynix_HFS001TDE9X084N
        Firmware : 41010C22
   Serial Number : KDACN44291010CA21
       Disk Size : 1024.2 GB
       Interface : NVM Express
        Standard : NVM Express 1.3
   Transfer Mode : PCIe 3.0 x4 | PCIe 3.0 x4
  Power On Hours : 6565 hours
  Power On Count : 2500 count
      Host Reads : 1649 GB
     Host Writes : 1016 GB
     Temperature : 43 C (109 F)
   Health Status : Good (100 %)
        Features : S.M.A.R.T., TRIM, VolatileWriteCache
    Drive Letter : D:
 
-- S.M.A.R.T. --------------------------------------------------------------
ID RawValues(6) Attribute Name
01 000000000000 Critical Warning
02 00000000013C Composite Temperature
03 000000000064 Available Spare
04 00000000000A Available Spare Threshold
05 000000000000 Percentage Used
06 00000034C973 Data Units Read
07 00000020867E Data Units Written
08 0000017220A4 Host Read Commands
09 00000124E715 Host Write Commands
0A 000000000028 Controller Busy Time
0B 0000000009C4 Power Cycles
0C 0000000019A5 Power On Hours
0D 00000000001A Unsafe Shutdowns
0E 000000000000 Media and Data Integrity Errors
0F 000000000000 Number of Error Information Log Entries
 
-- IDENTIFY_DEVICE ---------------------------------------------------------
        0    1    2    3    4    5    6    7    8    9
000: 1C5C 1C5C 444B 4341 344E 3234 3139 3130 4330 3241
010: 2031 2020 4B53 7948 696E 5F78 4648 3053 3130 4454
020: 3945 3058 3438 204E 2020 2020 2020 2020 2020 2020
030: 2020 2020 3134 3130 4330 3232 2E03 ACE4 0600 0001
040: 0300 0001 A120 0007 8480 001E 0200 0000 0010 0000
050: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
060: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
070: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
080: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
090: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
100: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
110: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
120: 0000 0000 0000 0000 0000 0000 0000 0000 0017 0703
130: 1E16 04FF 0101 0164 0165 0000 0000 0000 0000 0000
140: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 002D 0001
160: 0000 0001 0111 0164 0002 0000 0000 0000 0000 0000
170: 0001 0000 0000 0000 0000 0000 0001 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 0000
 
-- SMART_NVME --------------------------------------------------------------
     +0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 00 3C 01 64 0A 00 00 00 00 00 00 00 00 00 00 00
010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
020: 73 C9 34 00 00 00 00 00 00 00 00 00 00 00 00 00
030: 7E 86 20 00 00 00 00 00 00 00 00 00 00 00 00 00
040: A4 20 72 01 00 00 00 00 00 00 00 00 00 00 00 00
050: 15 E7 24 01 00 00 00 00 00 00 00 00 00 00 00 00
060: 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
070: C4 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00
080: A5 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00
090: 1A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0C0: 00 00 00 00 00 00 00 00 35 01 35 01 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 
----------------------------------------------------------------------------
 (03) ST5000LM000-2AN170
----------------------------------------------------------------------------
           Model : ST5000LM000-2AN170
        Firmware : 0001
   Serial Number : WCJ46GSR
       Disk Size : 5000.9 GB (8.4/137.4/5000.9/5000.9)
     Buffer Size : Unknown
     Queue Depth : 32
    # of Sectors : 9767541168
   Rotation Rate : 5526 RPM
       Interface : UASP (Serial ATA)
   Major Version : ACS-3
   Minor Version : ACS-3 Revision 5
   Transfer Mode : SATA/300 | SATA/600
  Power On Hours : 11086 hours
  Power On Count : 1848 count
     Temperature : 21 C (69 F)
   Health Status : Good
        Features : S.M.A.R.T., APM, NCQ, GPL
       APM Level : 8080h [ON]
       AAM Level : ----
    Drive Letter : G:
 
-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 _84 _64 __6 00000E3EAAB6 Read Error Rate
03 _97 _96 __0 000000000000 Spin-Up Time
04 _93 _93 _20 000000001CE1 Start/Stop Count
05 100 100 _10 000000000000 Reallocated Sectors Count
07 _76 _60 _45 00000261D2D4 Seek Error Rate
09 _88 _88 __0 9E7100002B4E Power-On Hours
0A 100 100 _97 000000000000 Spin Retry Count
0C _99 _99 _20 000000000738 Power Cycle Count
B7 _97 _97 __0 000000000003 Vendor Specific
B8 100 100 _99 000000000000 End-to-End Error
BB 100 100 __0 000000000000 Reported Uncorrectable Errors
BC 100 __1 __0 0281028303C2 Command Timeout
BD 100 100 __0 000000000000 High Fly Writes
BE _79 _46 _40 0000260F0015 Airflow Temperature
BF 100 100 __0 000000000000 G-Sense Error Rate
C0 _98 _98 __0 0000000013FD Power-off Retract Count
C1 _84 _84 __0 0000000082E7 Load/Unload Cycle Count
C2 _21 _54 __0 000F00000015 Temperature
C3 _84 _64 __0 00000E3EAAB6 Hardware ECC recovered
C5 100 100 __0 000000000000 Current Pending Sector Count
C6 100 100 __0 000000000000 Uncorrectable Sector Count
C7 200 200 __0 000000000008 UltraDMA CRC Error Count
F0 100 253 __0 60BD0000022D Head Flying Hours
F1 100 253 __0 0001A6D856A7 Total Host Writes
F2 100 253 __0 0003A43D3FC7 Total Host Reads
FE 100 100 __0 000000000000 Free Fall Protection
 
-- IDENTIFY_DEVICE ---------------------------------------------------------
        0    1    2    3    4    5    6    7    8    9
000: 0C5A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2020 2020 2020 2020 5743 4A34 3647 5352
020: 0000 0000 0000 3030 3031 2020 2020 5354 3530 3030
030: 4C4D 3030 302D 3241 4E31 3730 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8001 4001 2F00
050: 4000 0200 0200 0007 3FFF 0010 003F FC10 00FB 0001
060: FFFF 0FFF 0000 0407 0003 0078 0078 0078 0078 0090
070: 0000 0000 0000 0000 0000 001F 850E 0004 00CC 0000
080: 07F0 006D 346B 7D69 4163 3469 BC49 4163 007F 8197
090: 0001 8080 FFFE 0000 D0D0 0000 0000 0000 0000 0000
100: D9B0 4630 0002 0000 0000 0000 6003 0000 5000 C500
110: C758 D647 0000 0000 0000 0000 0000 0000 0000 405C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0021 D9B0
130: 4630 D9B0 4630 2020 0002 0140 0100 5000 3C06 3C0A
140: 0000 003C 0000 0008 0000 0000 BDFF 0280 0000 0000
150: 0008 0000 0000 0807 0000 0002 0000 0100 A100 8000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0003 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 30A5 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 1596 0000 0000
220: 0000 0000 107F 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
240: 0000 0000 0000 4000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 37A5
 
-- SMART_READ_DATA ---------------------------------------------------------
     +0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 0A 00 01 0F 00 54 40 B6 AA 3E 0E 00 00 00 03 03
010: 00 61 60 00 00 00 00 00 00 00 04 32 00 5D 5D E1
020: 1C 00 00 00 00 00 05 33 00 64 64 00 00 00 00 00
030: 00 00 07 0F 00 4C 3C D4 D2 61 02 00 00 00 09 32
040: 00 58 58 4E 2B 00 00 71 9E 03 0A 13 00 64 64 00
050: 00 00 00 00 00 00 0C 32 00 63 63 38 07 00 00 00
060: 00 00 B7 32 00 61 61 03 00 00 00 00 00 00 B8 32
070: 00 64 64 00 00 00 00 00 00 00 BB 32 00 64 64 00
080: 00 00 00 00 00 00 BC 32 00 64 01 C2 03 83 02 81
090: 02 00 BD 3A 00 64 64 00 00 00 00 00 00 00 BE 22
0A0: 00 4F 2E 15 00 0F 26 00 00 00 BF 32 00 64 64 00
0B0: 00 00 00 00 00 00 C0 32 00 62 62 FD 13 00 00 00
0C0: 00 00 C1 32 00 54 54 E7 82 00 00 00 00 00 C2 22
0D0: 00 15 36 15 00 00 00 0F 00 00 C3 1A 00 54 40 B6
0E0: AA 3E 0E 00 00 00 C5 12 00 64 64 00 00 00 00 00
0F0: 00 00 C6 10 00 64 64 00 00 00 00 00 00 00 C7 3E
100: 00 C8 C8 08 00 00 00 00 00 00 F0 00 00 64 FD 2D
110: 02 00 00 BD 60 0C F1 00 00 64 FD A7 56 D8 A6 01
120: 00 00 F2 00 00 64 FD C7 3F 3D A4 03 00 00 FE 32
130: 00 64 64 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 73
170: 03 00 01 00 01 FF 02 2E 03 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 03 04 03 00 04 04 04 04
190: 04 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 FD 94 B3 54 4C 24 00 00
1B0: 00 00 00 00 01 00 37 00 A7 56 D8 A6 01 00 00 00
1C0: C7 3F 3D A4 03 00 00 00 00 00 00 00 00 00 00 00
1D0: 01 00 00 00 00 00 00 00 D5 1E 00 00 05 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 07
1F0: 40 00 00 00 00 00 00 00 00 00 03 1A 00 00 00 CA
 
-- SMART_READ_THRESHOLD ----------------------------------------------------
     +0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 01 00 01 06 00 00 00 00 00 00 00 00 00 00 03 00
010: 00 00 00 00 00 00 00 00 00 00 04 14 00 00 00 00
020: 00 00 00 00 00 00 05 0A 00 00 00 00 00 00 00 00
030: 00 00 07 2D 00 00 00 00 00 00 00 00 00 00 09 00
040: 00 00 00 00 00 00 00 00 00 00 0A 61 00 00 00 00
050: 00 00 00 00 00 00 0C 14 00 00 00 00 00 00 00 00
060: 00 00 B7 00 00 00 00 00 00 00 00 00 00 00 B8 63
070: 00 00 00 00 00 00 00 00 00 00 BB 00 00 00 00 00
080: 00 00 00 00 00 00 BC 00 00 00 00 00 00 00 00 00
090: 00 00 BD 00 00 00 00 00 00 00 00 00 00 00 BE 28
0A0: 00 00 00 00 00 00 00 00 00 00 BF 00 00 00 00 00
0B0: 00 00 00 00 00 00 C0 00 00 00 00 00 00 00 00 00
0C0: 00 00 C1 00 00 00 00 00 00 00 00 00 00 00 C2 00
0D0: 00 00 00 00 00 00 00 00 00 00 C3 00 00 00 00 00
0E0: 00 00 00 00 00 00 C5 00 00 00 00 00 00 00 00 00
0F0: 00 00 C6 00 00 00 00 00 00 00 00 00 00 00 C7 00
100: 00 00 00 00 00 00 00 00 00 00 F0 00 00 00 00 00
110: 00 00 00 00 00 00 F1 00 00 00 00 00 00 00 00 00
120: 00 00 F2 00 00 00 00 00 00 00 00 00 00 00 FE 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 32

Attached Files


Edited by Terryc250, 16 January 2024 - 10:59 AM.

  • 0

#5
Terryc250

Terryc250

    Member

  • Topic Starter
  • Member
  • PipPip
  • 91 posts
_________________________________________________________________________________________________________
CONCLUSION
_________________________________________________________________________________________________________
Your system appears to be suitable for handling real-time audio and other tasks without dropouts. 
LatencyMon has been analyzing your system for  0:01:24  (h:mm:ss) on all processors.
 
 
_________________________________________________________________________________________________________
SYSTEM INFORMATION
_________________________________________________________________________________________________________
Computer name:                                        LAPTOP-D982FIHM
OS version:                                           Windows 11, 10.0, version 2009, build: 22621 (x64)
Hardware:                                             82N6, LENOVO
BIOS:                                                 GKCN60WW
CPU:                                                  AuthenticAMD AMD Ryzen 9 5900HX with Radeon Graphics 
Logical processors:                                   16
Processor groups:                                     1
Processor group size:                                 16
RAM:                                                  32620 MB total
 
 
_________________________________________________________________________________________________________
CPU SPEED
_________________________________________________________________________________________________________
Reported CPU speed (WMI):                             3301 MHz
Reported CPU speed (registry):                        3294 MHz
 
Note: reported execution times may be calculated based on a fixed reported CPU speed. Disable variable speed settings like Intel Speed Step and AMD Cool N Quiet in the BIOS setup for more accurate results.
 
 
_________________________________________________________________________________________________________
MEASURED INTERRUPT TO USER PROCESS LATENCIES
_________________________________________________________________________________________________________
The interrupt to process latency reflects the measured interval that a usermode process needed to respond to a hardware request from the moment the interrupt service routine started execution. This includes the scheduling and execution of a DPC routine, the signaling of an event and the waking up of a usermode thread from an idle wait state in response to that event.
 
Highest measured interrupt to process latency (µs):   621.10
Average measured interrupt to process latency (µs):   11.896835
 
Highest measured interrupt to DPC latency (µs):       617.40
Average measured interrupt to DPC latency (µs):       6.478269
 
 
_________________________________________________________________________________________________________
 REPORTED ISRs
_________________________________________________________________________________________________________
Interrupt service routines are routines installed by the OS and device drivers that execute in response to a hardware interrupt signal.
 
Highest ISR routine execution time (µs):              69.806922
Driver with highest ISR routine execution time:       Wdf01000.sys - Kernel Mode Driver Framework Runtime, Microsoft Corporation
 
Highest reported total ISR routine time (%):          0.001363
Driver with highest ISR total time:                   Wdf01000.sys - Kernel Mode Driver Framework Runtime, Microsoft Corporation
 
Total time spent in ISRs (%)                          0.001363
 
ISR count (execution time <250 µs):                   14902
ISR count (execution time 250-500 µs):                0
ISR count (execution time 500-1000 µs):               0
ISR count (execution time 1000-2000 µs):              0
ISR count (execution time 2000-4000 µs):              0
ISR count (execution time >=4000 µs):                 0
 
 
_________________________________________________________________________________________________________
REPORTED DPCs
_________________________________________________________________________________________________________
DPC routines are part of the interrupt servicing dispatch mechanism and disable the possibility for a process to utilize the CPU while it is interrupted until the DPC has finished execution.
 
Highest DPC routine execution time (µs):              613.425319
Driver with highest DPC routine execution time:       ndis.sys - Network Driver Interface Specification (NDIS), Microsoft Corporation
 
Highest reported total DPC routine time (%):          0.068132
Driver with highest DPC total execution time:         nvlddmkm.sys - NVIDIA Windows Kernel Mode Driver, Version 537.58 , NVIDIA Corporation
 
Total time spent in DPCs (%)                          0.204679
 
DPC count (execution time <250 µs):                   164531
DPC count (execution time 250-500 µs):                0
DPC count (execution time 500-10000 µs):              44
DPC count (execution time 1000-2000 µs):              0
DPC count (execution time 2000-4000 µs):              0
DPC count (execution time >=4000 µs):                 0
 
 
_________________________________________________________________________________________________________
 REPORTED HARD PAGEFAULTS
_________________________________________________________________________________________________________
Hard pagefaults are events that get triggered by making use of virtual memory that is not resident in RAM but backed by a memory mapped file on disk. The process of resolving the hard pagefault requires reading in the memory from disk while the process is interrupted and blocked from execution.
 
NOTE: some processes were hit by hard pagefaults. If these were programs producing audio, they are likely to interrupt the audio stream resulting in dropouts, clicks and pops. Check the Processes tab to see which programs were hit.
 
Process with highest pagefault count:                 msmpeng.exe
 
Total number of hard pagefaults                       209
Hard pagefault count of hardest hit process:          100
Number of processes hit:                              24
 
 
_________________________________________________________________________________________________________
 PER CPU DATA
_________________________________________________________________________________________________________
CPU 0 Interrupt cycle time (s):                       6.781517
CPU 0 ISR highest execution time (µs):                69.806922
CPU 0 ISR total execution time (s):                   0.018351
CPU 0 ISR count:                                      14902
CPU 0 DPC highest execution time (µs):                613.425319
CPU 0 DPC total execution time (s):                   2.640059
CPU 0 DPC count:                                      152985
_________________________________________________________________________________________________________
CPU 1 Interrupt cycle time (s):                       0.273654
CPU 1 ISR highest execution time (µs):                0.0
CPU 1 ISR total execution time (s):                   0.0
CPU 1 ISR count:                                      0
CPU 1 DPC highest execution time (µs):                77.080146
CPU 1 DPC total execution time (s):                   0.001122
CPU 1 DPC count:                                      173
_________________________________________________________________________________________________________
CPU 2 Interrupt cycle time (s):                       0.447275
CPU 2 ISR highest execution time (µs):                0.0
CPU 2 ISR total execution time (s):                   0.0
CPU 2 ISR count:                                      0
CPU 2 DPC highest execution time (µs):                48.357923
CPU 2 DPC total execution time (s):                   0.004186
CPU 2 DPC count:                                      647
_________________________________________________________________________________________________________
CPU 3 Interrupt cycle time (s):                       0.327063
CPU 3 ISR highest execution time (µs):                0.0
CPU 3 ISR total execution time (s):                   0.0
CPU 3 ISR count:                                      0
CPU 3 DPC highest execution time (µs):                39.551913
CPU 3 DPC total execution time (s):                   0.001510
CPU 3 DPC count:                                      253
_________________________________________________________________________________________________________
CPU 4 Interrupt cycle time (s):                       1.203129
CPU 4 ISR highest execution time (µs):                0.0
CPU 4 ISR total execution time (s):                   0.0
CPU 4 ISR count:                                      0
CPU 4 DPC highest execution time (µs):                223.135701
CPU 4 DPC total execution time (s):                   0.069999
CPU 4 DPC count:                                      5983
_________________________________________________________________________________________________________
CPU 5 Interrupt cycle time (s):                       0.543169
CPU 5 ISR highest execution time (µs):                0.0
CPU 5 ISR total execution time (s):                   0.0
CPU 5 ISR count:                                      0
CPU 5 DPC highest execution time (µs):                59.638434
CPU 5 DPC total execution time (s):                   0.004543
CPU 5 DPC count:                                      435
_________________________________________________________________________________________________________
CPU 6 Interrupt cycle time (s):                       0.512794
CPU 6 ISR highest execution time (µs):                0.0
CPU 6 ISR total execution time (s):                   0.0
CPU 6 ISR count:                                      0
CPU 6 DPC highest execution time (µs):                49.790528
CPU 6 DPC total execution time (s):                   0.003774
CPU 6 DPC count:                                      592
_________________________________________________________________________________________________________
CPU 7 Interrupt cycle time (s):                       0.365463
CPU 7 ISR highest execution time (µs):                0.0
CPU 7 ISR total execution time (s):                   0.0
CPU 7 ISR count:                                      0
CPU 7 DPC highest execution time (µs):                73.874317
CPU 7 DPC total execution time (s):                   0.002188
CPU 7 DPC count:                                      312
_________________________________________________________________________________________________________
CPU 8 Interrupt cycle time (s):                       0.432173
CPU 8 ISR highest execution time (µs):                0.0
CPU 8 ISR total execution time (s):                   0.0
CPU 8 ISR count:                                      0
CPU 8 DPC highest execution time (µs):                48.307832
CPU 8 DPC total execution time (s):                   0.003279
CPU 8 DPC count:                                      500
_________________________________________________________________________________________________________
CPU 9 Interrupt cycle time (s):                       0.405395
CPU 9 ISR highest execution time (µs):                0.0
CPU 9 ISR total execution time (s):                   0.0
CPU 9 ISR count:                                      0
CPU 9 DPC highest execution time (µs):                49.730419
CPU 9 DPC total execution time (s):                   0.002764
CPU 9 DPC count:                                      335
_________________________________________________________________________________________________________
CPU 10 Interrupt cycle time (s):                       0.456166
CPU 10 ISR highest execution time (µs):                0.0
CPU 10 ISR total execution time (s):                   0.0
CPU 10 ISR count:                                      0
CPU 10 DPC highest execution time (µs):                56.392532
CPU 10 DPC total execution time (s):                   0.005906
CPU 10 DPC count:                                      719
_________________________________________________________________________________________________________
CPU 11 Interrupt cycle time (s):                       0.272848
CPU 11 ISR highest execution time (µs):                0.0
CPU 11 ISR total execution time (s):                   0.0
CPU 11 ISR count:                                      0
CPU 11 DPC highest execution time (µs):                77.711293
CPU 11 DPC total execution time (s):                   0.001439
CPU 11 DPC count:                                      203
_________________________________________________________________________________________________________
CPU 12 Interrupt cycle time (s):                       0.390093
CPU 12 ISR highest execution time (µs):                0.0
CPU 12 ISR total execution time (s):                   0.0
CPU 12 ISR count:                                      0
CPU 12 DPC highest execution time (µs):                61.551913
CPU 12 DPC total execution time (s):                   0.005129
CPU 12 DPC count:                                      537
_________________________________________________________________________________________________________
CPU 13 Interrupt cycle time (s):                       0.292141
CPU 13 ISR highest execution time (µs):                0.0
CPU 13 ISR total execution time (s):                   0.0
CPU 13 ISR count:                                      0
CPU 13 DPC highest execution time (µs):                41.705829
CPU 13 DPC total execution time (s):                   0.001662
CPU 13 DPC count:                                      198
_________________________________________________________________________________________________________
CPU 14 Interrupt cycle time (s):                       0.365457
CPU 14 ISR highest execution time (µs):                0.0
CPU 14 ISR total execution time (s):                   0.0
CPU 14 ISR count:                                      0
CPU 14 DPC highest execution time (µs):                51.714026
CPU 14 DPC total execution time (s):                   0.004045
CPU 14 DPC count:                                      404
_________________________________________________________________________________________________________
CPU 15 Interrupt cycle time (s):                       0.347622
CPU 15 ISR highest execution time (µs):                0.0
CPU 15 ISR total execution time (s):                   0.0
CPU 15 ISR count:                                      0
CPU 15 DPC highest execution time (µs):                62.102914
CPU 15 DPC total execution time (s):                   0.003369
CPU 15 DPC count:                                      299
_________________________________________________________________________________________________________

  • 0

#6
Terryc250

Terryc250

    Member

  • Topic Starter
  • Member
  • PipPip
  • 91 posts

HJSdv3m.png

Attached Thumbnails

  • HJSdv3m.png

Edited by Terryc250, 16 January 2024 - 11:01 AM.

  • 0

#7
Terryc250

Terryc250

    Member

  • Topic Starter
  • Member
  • PipPip
  • 91 posts

KPINHYo.png

Attached Thumbnails

  • KPINHYo.png

Edited by Terryc250, 16 January 2024 - 11:02 AM.

  • 0

#8
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,596 posts
  • MVP

Doesn't look too bad.  You might look on the Nvidia site 

https://www.nvidia.c...load/index.aspx

and see if they have a newer driver for you.  Latency Monitor shows it is a bit on the slow side.

 

Also the Seagate hard drive is showing a lot of errors.  Don't know if the errors are real or not.  Seagates always show errors.  You might try

HD Tune
 
 
 
Actual download is at:
 
 
 
 
Download, Save, right click and Run As Admin.  Run the Benchmark test and take a screenshot of the result  Ideally the graph would be flat or slightly tilted to the right.  On a bad drive you will see sharp drops.  The fewer programs running at the same time the better.  Pause your anti-virus.
 
We can check your system files and remove some deadwood with a fixlist.  Normally takes about 35 minutes but may take longer on a really slow system,  Will time out after an hour if it is super slow.
 
 
Download the attached fixlist.txt to the same location as FRST
 
Attached File  fixlist.txt   14.78KB   27 downloads
 
Run FRST and press Fix
A fix log will be generated please post that 
 
Reboot if the fix doesn't reboot it for you
 
Run FRST again but this time make sure Addition.txt is checked and hit Scan.  Post both logs.
 
Let's also run the free ESET online scan:
 
 
Click on One-Time Scan.  Download, Save and go to the Downloads folder and right click on the file and Run As Admin.  Follow the directions.  Will take an hour or more so be patient.  It will tell you if it finds anything and if you check the option to Quarantine any malware it will automatically remove anything it finds.  Did it find anything?
 
 
 
 
 
 

  • 0

#9
Terryc250

Terryc250

    Member

  • Topic Starter
  • Member
  • PipPip
  • 91 posts

Attached File  Fixlog.txt   166.07KB   23 downloads


Edited by Terryc250, 17 January 2024 - 07:16 AM.

  • 0

#10
Terryc250

Terryc250

    Member

  • Topic Starter
  • Member
  • PipPip
  • 91 posts

Attached File  FRST.txt   71.25KB   20 downloadsAttached File  Addition.txt   64.58KB   19 downloads


  • 0

Advertisements


#11
Terryc250

Terryc250

    Member

  • Topic Starter
  • Member
  • PipPip
  • 91 posts

the eset found and removed 10 malware


  • 0

#12
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,596 posts
  • MVP

Looks like ESET found a few things.  Did it help with the speed problem?

 

Currently some PCs are having trouble with a Windows Update.  It keeps trying to install and fails then tries again.  This slows things down to a crawl.  The temporary fix is to go into Settings,  Update & Security and Pause Updates for 7 days.


  • 0

#13
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,596 posts
  • MVP
Error: (01/17/2024 01:01:15 AM) (Source: Ntfs) (EventID: 55) (User: NT AUTHORITY)
Description: A corruption was discovered in the file system structure on volume G:.
 
The exact nature of the corruption is unknown.  The file system structures need to be scanned online.
 
 
Search for CMD
it will find Command Prompt.  Right click on it and Run As Admin.
 
 
Type:
 
chkdsk  /r   /x  g:

 

 

hit Enter.  Since the G: drive is not the system drive it should be able to unmount it and scan it for errors without needing a reboot.  I am assuming this is the Seagate drive which I thought might be a bit flaky.

  • 0

#14
Terryc250

Terryc250

    Member

  • Topic Starter
  • Member
  • PipPip
  • 91 posts

I think it got somewhat faster after the scan.

Here is what I get after doing the chkdsk:

cE01NYM.png


  • 0

#15
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,596 posts
  • MVP

Doesn't look good for the G: drive.  It failed step 4 saying there is not enough space but

FRST said:

Drive g: (One Touch) (Fixed) (Total:4657.33 GB) (Free:2925 GB) (Model: Seagate One Touch HDD SCSI Disk Device) NTFS

 

so it is not clear what the problem is.

 

Trying running Seagate's Seatools 5 and see what it says:

 

https://www.seagate....loads/seatools/

 

Look under Downloads and get the one for Windows.  Save the file then go to the download folder and right click on it and Run As Admin.  I can't help you with the rest since I refuse to have Seagate drives on any of my systems after I had two fail on me in 6 months.  Normally they have two tests.  A quick one and a long one.  If it fails the quick one then it needs replacing and there is no need to run the long one.  If it passes the quick test then you run the long test.  The last time I ran it was years ago but I think they have an option in the long test to try and repair the drive.  


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP