This topic is locked
Someone clicked on a link in an email, apparently, at which point the computer started blinking an X and making a lot of noises (I wasn't there.) They called the hackers to get instructions on getting the noise to stop, and followed them. The computer seems to be running ok, actually.
The first time I ran Farbar, Bitdefender found a trojan, subsequent times it hasn't, also it had a messsage about not updating properly or something? This scan is the first I ran, before running an antivirus scan, only turned up one issue and had protected password stuff? Let me know if you need an updated scan.
I believe it's been getting hacked, previously, so there could be other issues
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 21.03.2024
Ran by Weber (administrator) on WEBER-PC (LENOVO 2958) (21-03-2024 18:10:51)
Running from C:\Users\Weber\Downloads\FRST64.exe
Loaded Profiles: Weber
Platform: Microsoft Windows 10 Pro Version 22H2 19045.4046 (X64) Language: English (United States)
Default browser: Edge
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files\Bitdefender Agent\ProductAgentService.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\27.0.1.266\DiscoverySrv.exe
(C:\Program Files\Bitdefender\Bitdefender Security App\bdservicehost.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security App\bdagent.exe
(C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdntwrk.exe
(C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe ->) (S.C. BITDEFENDER S.R.L. -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\wsccommunicator.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe <40>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\redline\bdredline.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security App\bdservicehost.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security App\safepay\bdservicehost.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe <3>
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe <2>
(services.exe ->) (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender Security App\bdagent.exe [1067296 2024-02-21] (Bitdefender SRL -> Bitdefender)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328 2010-10-12] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [642664 2013-12-24] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863848 2013-12-24] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-3296664383-3654566077-1846858350-1001\...\Run: [MicrosoftEdgeAutoLaunch_B6B68E08E4B04146192FBC846279B27E] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [4060608 2024-03-07] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Print\Monitors\EPSON WorkForce 545 Series 64MonitorBA: C:\windows\system32\E_YLMHWA.DLL [120320 2011-04-20] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\122.0.6261.112\Installer\chrmstp.exe [2024-03-08] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {1A8FADF9-EE4D-4B8A-8760-B49A75D2E77C} - System32\Tasks\{3828ED39-DDD8-4913-804A-E188D75149B9} => C:\Windows\system32\pcalua.exe [53760 2023-11-20] (Microsoft Windows -> Microsoft Corporation) -> -a C:\Temp\Raw-CodecV1L100-Eng.exe -d C:\Temp
Task: {DDF8B621-96DC-4E5A-9C9A-4B35A1D559C2} - System32\Tasks\{D6B07279-D6D6-4BCA-80F3-E3F74428ECAE} => C:\Windows\system32\pcalua.exe [53760 2023-11-20] (Microsoft Windows -> Microsoft Corporation) -> -a C:\Users\Weber\Downloads\Raw-CodecV1L100-Eng.exe -d C:\Users\Weber\Downloads
Task: {FAC22FD8-7698-4BC6-BE4C-7025B05B0BDA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1547208 2024-01-31] (Adobe Inc. -> Adobe Inc.)
Task: {8423D968-04F0-4A3A-8823-C6873B93F63D} - System32\Tasks\avfree.migration => C:\Program Files\Bitdefender Antivirus Free\migration_tool\avfree.migration.exe /run (No File)
Task: {D728942C-D805-49A7-802C-DB44FBD70199} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\27.0.1.266\WatchDog.exe [1111184 2023-12-12] (Bitdefender SRL -> Bitdefender)
Task: {DFF8F27B-5105-47F3-AE5E-E631B4D3A5AF} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem124.0.6342.2{1A25F653-4652-4222-8232-8CAED7C92AF9} => C:\Program Files (x86)\Google\GoogleUpdater\124.0.6342.2\updater.exe [4721952 2024-03-06] (Google LLC -> Google LLC)
Task: {410FA456-E501-4CC1-AFC5-834DC4AF2210} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch (No File)
Task: {A87773AB-B418-45DD-ABA0-6224932AEFEB} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService (No File)
Task: {CFAD77BB-9A34-46A7-B175-4E10680CA121} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0) (No File)
Task: {0D6171AB-3050-463F-97C8-8E29E128C709} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => %SystemRoot%\ehome\ehPrivJob.exe /DRMInit (No File)
Task: {2E479F94-A855-464E-A05E-8207D088499D} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0) (No File)
Task: {435F248E-AD71-4E81-885B-D2C2F94AF259} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => %SystemRoot%\ehome\mcupdate $(Arg0) (No File)
Task: {3FCDB626-5646-4578-A54D-E72E9CF6F092} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => %SystemRoot%\ehome\mcupdate -crl -hms -pscn 15 (No File)
Task: {CF1B3007-261B-4887-BF0D-816B4B97035F} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask (No File)
Task: {551CF27F-78A7-4C1A-8ADA-358C055AFE5B} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask (No File)
Task: {D54CB4FA-868B-469A-A6FE-7C5DF974FF35} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate (No File)
Task: {A09A4F02-6DEB-4C5D-A4B5-35F521E328FE} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0) (No File)
Task: {E37F4BC2-64E5-4194-9FD8-4382C5BFD232} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery (No File)
Task: {C0B7AEF4-A681-40A5-98C4-DE17B9A57C05} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery (No File)
Task: {AEBCE758-D72B-4D17-9DD9-9206F159902F} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery (No File)
Task: {9B496CDF-0EFD-426F-ACD7-969331BAFD1D} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => %windir%\ehome\MCUpdate.exe -pscn 0 (No File)
Task: {EB0220B0-012F-49F9-96AD-1CE26BF83454} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask (No File)
Task: {42AC62A8-D6DB-4A7C-8F48-F39A1825D08D} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => %SystemRoot%\ehome\mcupdate.exe -PvrSchedule (No File)
Task: {9E4E41A3-060A-4ACC-99D7-1BB3F96D61CD} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => %SystemRoot%\ehome\ehrec /RestartRecording (No File)
Task: {A5347E0F-D01A-46FE-9A75-BA663E0E1CFB} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0) (No File)
Task: {1E74FB9E-ED82-4E19-B499-0E524CEAD5F9} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot (No File)
Task: {8EC1650E-0671-4124-983E-28B87899AA54} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask (No File)
Task: {AA7C8BBE-9FAA-4546-8847-BD1523CE0E77} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => %SystemRoot%\ehome\ehrec /StartRecording (No File)
Task: {C7BEFDFD-1828-40CC-B3F1-073CBC408AC3} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0) (No File)
Task: {A97F30EA-C487-4A64-971C-AA915B7B8B9E} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47C2-B62A-B7C4CED925CB}
Task: {25BF0A8F-7381-49DC-9FC3-30F126E2A433} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {2F81C636-57B4-4070-A88F-332056C37AF5} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {4543906D-2500-4F83-BC00-69C2565EAD45} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {CDFAF690-AC83-476D-92F0-4B15777E11A9} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {BA2563A7-E750-45EE-A8AF-90A6CEBFD452} - System32\Tasks\Mozilla\Firefox Background Update E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\firefox.exe [671648 2024-03-05] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {C40973CC-E94C-46BC-A815-058BD6C1CEF4} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3296664383-3654566077-1846858350-1001 E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\firefox.exe [671648 2024-03-05] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {310FDD52-8397-44E8-BEAC-3240AAEADADF} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [34720 2024-03-05] (Mozilla Corporation -> Mozilla Foundation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{9FA23B82-FA79-4C27-877B-783092F623BA}: [DhcpNameServer] 192.168.254.1
Tcpip\..\Interfaces\{E3C1B595-45FF-40B7-B7B9-4C8434399015}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{E3C1B595-45FF-40B7-B7B9-4C8434399015}\3405550245543484: [DhcpNameServer] 192.168.10.1
Tcpip\..\Interfaces\{E3C1B595-45FF-40B7-B7B9-4C8434399015}\340555026425F4E445: [DhcpNameServer] 192.168.100.1
Tcpip\..\Interfaces\{E3C1B595-45FF-40B7-B7B9-4C8434399015}\65562796A7F6E6D22534430303C4D23403: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{E3C1B595-45FF-40B7-B7B9-4C8434399015}\D475D27596D26496: [DhcpNameServer] 192.168.55.50
Edge:
=======
Edge Profile: C:\Users\Weber\AppData\Local\Microsoft\Edge\User Data\Default [2024-03-21]
Edge Extension: (Google Docs Offline) - C:\Users\Weber\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-03-05]
Edge Extension: (Edge relevant text changes) - C:\Users\Weber\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-23]
FireFox:
========
FF DefaultProfile: wjzuakeu.default-1614217960833
FF ProfilePath: C:\Users\Weber\AppData\Roaming\Mozilla\Firefox\Profiles\wjzuakeu.default-1614217960833 [2024-03-21]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security App\bdtbext
FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender Security App\bdtbext [2023-10-22] [Legacy] [not signed]
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security App\bdtbext
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2024-02-22] (Adobe Inc. -> Adobe Systems Inc.)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\bd_js_config.js [2020-04-08] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\bd_config.cfg [2020-04-08] <==== ATTENTION
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Weber\AppData\Local\Google\Chrome\User Data\Default [2024-03-11]
CHR Notifications: Default -> hxxps://mg.mail.yahoo.com; hxxps://nichesurveyer.com; hxxps://thetruescoop.com; hxxps://www.learning.facs.org
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Weber\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-02-26]
CHR Extension: (Google Docs Offline) - C:\Users\Weber\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-03-08]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Weber\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-03]
CHR HKU\S-1-5-21-3296664383-3654566077-1846858350-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-01-31] (Adobe Inc. -> Adobe Inc.)
R2 BDAppSrv; C:\Program Files\Bitdefender\Bitdefender Security App\bdservicehost.exe [849328 2024-02-21] (Bitdefender SRL -> Bitdefender)
R2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [849328 2024-02-21] (Bitdefender SRL -> Bitdefender)
R2 BDProtSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [849328 2024-02-21] (Bitdefender SRL -> Bitdefender)
R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2946088 2023-10-19] (Bitdefender SRL -> Bitdefender)
R2 bdredline_agent; C:\Program Files\Bitdefender Agent\redline\bdredline.exe [2574864 2023-07-20] (Bitdefender SRL -> Bitdefender)
R2 BDSafepaySrv; C:\Program Files\Bitdefender\Bitdefender Security App\Safepay\bdservicehost.exe [849328 2024-02-21] (Bitdefender SRL -> Bitdefender)
S2 GoogleUpdaterInternalService124.0.6342.2; C:\Program Files (x86)\Google\GoogleUpdater\124.0.6342.2\updater.exe [4721952 2024-03-06] (Google LLC -> Google LLC)
S2 GoogleUpdaterService124.0.6342.2; C:\Program Files (x86)\Google\GoogleUpdater\124.0.6342.2\updater.exe [4721952 2024-03-06] (Google LLC -> Google LLC)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [686032 2023-12-12] (Bitdefender SRL -> Bitdefender)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [534472 2023-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [282728 2024-02-21] (Bitdefender SRL -> Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [849328 2024-02-21] (Bitdefender SRL -> Bitdefender)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2007.8-0\NisSrv.exe [2169568 2020-08-19] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2007.8-0\MsMpEng.exe [128376 2020-08-19] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 atc; C:\windows\System32\DRIVERS\atc.sys [6611008 2024-01-31] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender S.R.L. Bucharest, ROMANIA)
R3 BCM43XX; C:\windows\System32\drivers\bcmwl63al.sys [5170176 2019-12-07] (Microsoft Windows -> Broadcom Corporation)
R2 BdDci; C:\windows\system32\DRIVERS\bddci.sys [800168 2023-11-19] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
S0 bdelam; C:\windows\System32\drivers\bdelam.sys [24568 2023-11-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Bitdefender)
S3 bdprivmon; C:\windows\System32\DRIVERS\bdprivmon.sys [49200 2023-10-19] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender SRL)
S3 bduefiscan; C:\windows\system32\DRIVERS\bduefiscan.sys [39840 2023-03-02] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
S3 BthA2dp; C:\windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed]
R1 Gemma; C:\windows\System32\DRIVERS\gemma.sys [1347496 2023-10-19] (Microsoft Windows Hardware Compatibility Publisher -> BitDefender S.R.L. Bucharest, ROMANIA)
S3 Ignisv2; C:\windows\system32\DRIVERS\ignisv2.sys [165312 2023-10-19] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
R2 trufos; C:\windows\System32\DRIVERS\trufos.sys [629184 2023-11-19] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
R0 vlflt; C:\windows\System32\DRIVERS\vlflt.sys [520144 2024-01-31] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
S3 WdBoot; C:\windows\system32\drivers\wd\WdBoot.sys [78216 2020-08-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\windows\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\windows\system32\drivers\wd\WdFilter.sys [430320 2020-08-19] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\windows\System32\drivers\wd\WdNisDrv.sys [98520 2020-08-19] (Microsoft Windows -> Microsoft Corporation)
U3 idsvc; no ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2024-03-21 18:04 - 2024-03-21 18:05 - 002391040 _____ (Farbar) C:\Users\Weber\Downloads\FRST64.exe
2024-03-21 18:04 - 2024-03-21 18:05 - 002391040 _____ (Farbar) C:\Users\Weber\Downloads\FRST64(1).exe
2024-03-21 17:54 - 2024-03-11 13:10 - 000000559 _____ C:\windows\SysWOW64\user.config
2024-03-08 17:14 - 2024-03-08 17:14 - 000000000 ____D C:\Users\Weber\Documents\ConnectWiseControl
2024-03-08 13:41 - 2024-03-08 13:41 - 000000558 _____ C:\windows\system32\user.config
2024-03-08 13:40 - 2024-03-08 13:40 - 000000000 ____D C:\Users\Weber\AppData\Local\Deployment
2024-03-08 13:40 - 2024-03-08 13:40 - 000000000 ____D C:\Users\Weber\AppData\Local\Apps\2.0
2024-03-08 13:33 - 2024-03-08 13:33 - 000086304 _____ C:\Users\Weber\Downloads\ScreenConnect.Client.exe
2024-03-05 22:09 - 2024-03-21 17:53 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2024-03-05 21:21 - 2024-03-05 21:21 - 000016717 _____ C:\Users\Weber\AppData\Local\recently-used.xbel
2024-03-01 10:42 - 2024-03-01 10:42 - 000084314 _____ C:\Users\Weber\Downloads\Michael Weber- March Calendar 2024.pdf
2024-02-29 11:08 - 2024-02-29 11:08 - 000051582 _____ C:\Users\Weber\Downloads\PayDocdee71b80-7e33-4e60-b18c-688b912a8f8d.PDF
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2024-03-21 18:12 - 2019-04-22 11:42 - 000021755 _____ C:\Users\Weber\Downloads\FRST.txt
2024-03-21 18:12 - 2015-10-25 14:48 - 000000000 ____D C:\FRST
2024-03-21 18:09 - 2020-12-20 13:46 - 000935246 _____ C:\windows\system32\PerfStringBackup.INI
2024-03-21 18:09 - 2019-12-07 04:13 - 000000000 ____D C:\windows\INF
2024-03-21 18:00 - 2022-02-10 16:18 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2024-03-21 17:54 - 2019-12-07 04:14 - 000000000 ____D C:\windows\AppReadiness
2024-03-21 17:54 - 2019-12-07 04:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-03-21 17:54 - 2019-12-07 04:03 - 000131072 _____ C:\windows\system32\config\ELAM
2024-03-21 17:53 - 2020-12-20 14:11 - 000000006 ____H C:\windows\Tasks\SA.DAT
2024-03-21 17:53 - 2020-12-20 13:33 - 000000000 ____D C:\Users\Weber
2024-03-21 17:53 - 2020-12-20 13:27 - 000000000 ____D C:\windows\system32\SleepStudy
2024-03-21 17:53 - 2020-12-20 13:26 - 000008192 ___SH C:\DumpStack.log.tmp
2024-03-21 17:53 - 2014-06-02 21:19 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-03-11 13:11 - 2019-12-07 04:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-03-11 09:27 - 2020-07-13 21:15 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-03-11 09:27 - 2020-07-13 21:15 - 000002276 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2024-03-08 14:07 - 2019-12-07 04:51 - 000000000 ____D C:\windows\system32\FxsTmp
2024-03-08 13:14 - 2021-12-26 22:15 - 000000000 ____D C:\windows\SystemTemp
2024-03-08 12:10 - 2014-06-02 21:21 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-03-08 12:10 - 2014-06-02 21:21 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2024-03-07 12:16 - 2022-12-19 17:03 - 000002421 _____ C:\Users\Weber\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-03-07 12:16 - 2021-12-12 13:41 - 000003592 _____ C:\windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3296664383-3654566077-1846858350-1001
2024-03-07 12:16 - 2021-05-17 08:24 - 000003366 _____ C:\windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3296664383-3654566077-1846858350-1001
2024-03-05 22:19 - 2014-06-02 21:19 - 000001163 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-03-05 21:21 - 2021-09-30 21:10 - 000000000 ____D C:\photos_III
2024-03-05 21:21 - 2016-12-12 18:36 - 000000000 ____D C:\Users\Weber\AppData\Local\gtk-2.0
2024-03-05 21:21 - 2016-12-12 18:32 - 000000000 ____D C:\Users\Weber\.gimp-2.8
2024-03-05 09:18 - 2020-12-20 14:11 - 000003536 _____ C:\windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-03-05 09:18 - 2020-12-20 14:11 - 000003412 _____ C:\windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-02-26 20:40 - 2015-11-06 12:36 - 000000000 ____D C:\windows\system32\MRT
2024-02-25 13:24 - 2022-10-26 04:52 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader.lnk
2024-02-20 21:43 - 2021-10-15 21:49 - 000000000 ____D C:\windows\system32\Tasks\Mozilla
==================== Files in the root of some directories ========
2024-03-05 21:21 - 2024-03-05 21:21 - 000016717 _____ () C:\Users\Weber\AppData\Local\recently-used.xbel
==================== FLock ==============================
2017-10-24 09:14 C:\Users\Weber\Downloads\firefox-patch.js
2017-10-24 08:28 C:\Users\Weber\Downloads\firefox-patch.js.216668.gzquar
2017-10-24 09:14 C:\Users\Weber\Downloads\firefox-update(2).js
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21.03.2024
Ran by Weber (21-03-2024 18:16:21)
Running from C:\Users\Weber\Downloads
Microsoft Windows 10 Pro Version 22H2 19045.4046 (X64) (2020-12-20 19:15:22)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-3296664383-3654566077-1846858350-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3296664383-3654566077-1846858350-503 - Limited - Disabled)
Guest (S-1-5-21-3296664383-3654566077-1846858350-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3296664383-3654566077-1846858350-1002 - Limited - Enabled)
WDAGUtilityAccount (S-1-5-21-3296664383-3654566077-1846858350-504 - Limited - Disabled)
Weber (S-1-5-21-3296664383-3654566077-1846858350-1001 - Administrator - Enabled) => C:\Users\Weber
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Bitdefender Antivirus (Enabled - Out of date) {0F59B032-EA77-E3A8-2382-74A4346E5522}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Acrobat Reader (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 23.008.20555 - Adobe Systems Incorporated)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601067}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 27.0.1.266 - Bitdefender)
Bitdefender Antivirus Free (HKLM\...\Bitdefender) (Version: 26.0.28.94 - Bitdefender)
Canon RAW Image Task for ZoomBrowser EX (HKLM-x32\...\RAW Image Task) (Version: 3.2.0.10 - Canon Inc.)
Canon Utilities CameraWindow (HKLM-x32\...\CameraWindowLauncher) (Version: 7.1.0.2 - Canon Inc.)
Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX (HKLM-x32\...\CameraWindowDVC6) (Version: 6.4.2.16 - Canon Inc.)
Canon Utilities Digital Photo Professional (HKLM-x32\...\Digital Photo Professional) (Version: 3.15.0.0 - Canon Inc.)
Canon Utilities Digital Photo Professional 4 (HKLM-x32\...\Digital Photo Professional 4 (x64)) (Version: 4.8.30.0 - Canon Inc.)
Canon Utilities EOS Lens Registration Tool (HKLM-x32\...\EOS Lens Registration Tool) (Version: 1.10.20.0 - Canon Inc.)
Canon Utilities EOS Utility 2 (HKLM-x32\...\EOS Utility 2) (Version: 2.14.20.0 - Canon Inc.)
Canon Utilities EOS Utility 3 (HKLM-x32\...\EOS Utility 3) (Version: 3.10.20.0 - Canon Inc.)
Canon Utilities EOS Web Service Registration Tool (HKLM-x32\...\EOS Web Service Registration Tool) (Version: 1.8.0.0 - Canon Inc.)
Canon Utilities MyCamera (HKLM-x32\...\MyCamera) (Version: 6.4.0.5 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.23.47 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.15.30.0 - Canon Inc.)
Canon Utilities RemoteCapture Task for ZoomBrowser EX (HKLM-x32\...\RemoteCaptureTask) (Version: 1.7.1.9 - Canon Inc.)
Canon Utilities WFT-E1/E2/E3 Utility (HKLM-x32\...\WFTK) (Version: 3.2.1.1 - Canon Inc.)
Canon Utilities ZoomBrowser EX (HKLM-x32\...\ZoomBrowser EX) (Version: 6.1.1.21 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (HKLM-x32\...\ZoomBrowser EX Memory Card Utility) (Version: 1.1.0.8 - Canon Inc.)
CrystalDiskInfo 8.3.2 (HKLM\...\CrystalDiskInfo_is1) (Version: 8.3.2 - Crystal Dew World)
darktable (HKLM\...\darktable) (Version: 2.4.0rc0 - the darktable project)
Data Lifeguard Diagnostic for Windows 1.31 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version: - Western Digital Corporation)
DxO Optics Pro 9 (HKLM\...\{CD5F5030-44C8-4432-9F61-209BA3F2F4BA}) (Version: 9.5.2 - DxO Labs)
Epson Customer Participation (HKLM\...\{814FA673-A085-403C-9545-747FC1495069}) (Version: 1.0.0.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{FA9D303D-0FB2-49C7-9397-8E6B11EA892D}) (Version: 2.50.0001 - SEIKO EPSON CORPORATION)
Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.46.00 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EPSON WorkForce 545 Series Printer Uninstall (HKLM\...\EPSON WorkForce 545 Series) (Version: - SEIKO EPSON Corporation)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
GIMP 2.8.18 (HKLM\...\GIMP-2_is1) (Version: 2.8.18 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 122.0.6261.112 - Google LLC)
IrfanView 4.53 (64-bit) (HKLM\...\IrfanView64) (Version: 4.53 - Irfan Skiljan)
Microsoft .NET Framework 4.7.2 (HKLM\...\{09CCBE8E-B964-30EF-AE84-6537AB4197F9}) (Version: 4.7.03062 - Microsoft Corporation) Hidden
Microsoft Camera Codec Pack (HKLM\...\{D553E8CC-5C56-4B06-AC1A-A443DFF31092}) (Version: 6.3.9723.0 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 122.0.2365.80 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 122.0.2365.80 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3296664383-3654566077-1846858350-1001\...\OneDriveSetup.exe) (Version: 24.025.0204.0003 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 en-US) (HKLM\...\Mozilla Firefox 123.0.1 (x64 en-US)) (Version: 123.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 123.0.1.8829 - Mozilla)
Neat Image v8.1.2 Demo Standalone (HKLM\...\Neat Image v8 Standalone_is1) (Version: - Neat Image team, ABSoft)
Nik Collection (HKLM-x32\...\Nik Collection) (Version: 1.2.11 - Google)
OpenOffice 4.1.0 (HKLM-x32\...\{C87EF11D-36E9-479D-9898-7541EA1E8A6A}) (Version: 4.10.9764 - Apache Software Foundation)
RawTherapee version 5.0-r1-gtk3 (HKLM\...\RawTherapee5.0-r1-gtk3_is1) (Version: 5.0-r1-gtk3 - rawtherapee.com)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
SILKYPIX Developer Studio 3.1 SE (HKLM-x32\...\InstallShield_{0A04086B-0B71-43C3-95EF-FDFC4C18D161}) (Version: 3 - Ichikawa Soft Laboratory)
SILKYPIX Developer Studio 4.4 SE (HKLM-x32\...\{73506320-CCDD-46FF-AE91-1032FAAD56F7}) (Version: 4 - Ichikawa Soft Laboratory)
Software Updater (HKLM-x32\...\{6DFBE8A2-CDBF-453E-B34C-32F202FCEE4C}) (Version: 4.2.1 - SEIKO EPSON CORPORATION)
UFRaw 0.19.2 (HKLM-x32\...\UFRaw_is1) (Version: - Udi Fuchs)
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{7B63012A-4AC6-40C6-B6AF-B24A84359DD5}) (Version: 8.93.0.0 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.8 - VideoLAN)
Windows PC Health Check (HKLM\...\{6798C408-2636-448C-8AC6-F4E341102D27}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Packages:
=========
Adobe Acrobat Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC [2024-02-15] ()
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-01-10] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-01-10] (Microsoft Corporation) [MS Ad]
Photos Media Engine Add-on -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-09-12] (Microsoft Corporation)
Solitaire & Casual Games -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.19.1262.0_x64__8wekyb3d8bbwe [2024-02-02] (Microsoft Studios) [MS Ad]
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2017-09-15 13:33 - 2013-12-23 11:00 - 000040448 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\windows\system32\spool\DRIVERS\x64\3\EFXGI09A.DLL
2017-09-15 13:33 - 2013-12-23 11:00 - 000181760 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\windows\system32\spool\DRIVERS\x64\3\EFXMI09A.dll
2017-09-15 13:33 - 2013-12-23 11:00 - 000235008 _____ (SEIKO EPSON CORPORATION) [File not signed] C:\windows\system32\spool\DRIVERS\x64\3\EFXUI09A.DLL
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\Weber\Downloads\avast_free_antivirus_setup_online.exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\avast_free_antivirus_setup_online_b2i.exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\DriverUpdate (1).exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\DriverUpdate.exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\DxO_OpticsPro9_Setup(1).exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\DxO_OpticsPro9_Setup.exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\epson14500(1).exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\epson14500.exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\epson14911.exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\epson17851.exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\Firefox Installer (1).exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\Firefox Installer (2).exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\Firefox Installer(1).exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\Firefox Installer.exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\FreePDFReading(1).exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\FreePDFReading(2).exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\FreePDFReading(3).exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\FreePDFReading(4).exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\FreePDFReading(5).exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\FreePDFReading(6).exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\FreePDFReading.exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\FRST64(1).exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\FRST64.exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\gimp-2.8.18-setup(1).exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\gimp-2.8.18-setup.exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\Luminance-HDR-x64-SETUP-v2.4.0(1).exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\Luminance-HDR-x64-SETUP-v2.4.0.exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\NeatSLSetupDemo32.exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\NeatSLSetupDemo64 (1).exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\NeatSLSetupDemo64 (2).exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\NeatSLSetupDemo64.exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\nikcollection-full-1.2.11.exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\Raw-CodecV1L100-Eng(1).exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\readerdc_en_ga_install.exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\ScreenConnect.Client.exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\weekly(1).exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\weekly.exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\WindowsServer2003-KB955704-ia64-ENU.exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\WindowsServer2003-KB955704-x86-ENU.exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\WindowsServer2003.WindowsXP-KB955704-x64-ENU (1).exe:BDU [0]
AlternateDataStreams: C:\Users\Weber\Downloads\WindowsServer2003.WindowsXP-KB955704-x64-ENU.exe:BDU [0]
==================== Safe Mode (Whitelisted) ==================
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3296664383-3654566077-1846858350-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 21:34 - 2018-10-19 17:30 - 000000825 _____ C:\windows\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-3296664383-3654566077-1846858350-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "Bdagent"
HKLM\...\StartupApproved\Run32: => "EEventManager"
HKLM\...\StartupApproved\Run32: => "FUFAXRCV"
HKLM\...\StartupApproved\Run32: => "FUFAXSTM"
HKU\S-1-5-21-3296664383-3654566077-1846858350-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_B6B68E08E4B04146192FBC846279B27E"
HKU\S-1-5-21-3296664383-3654566077-1846858350-1001\...\StartupApproved\Run: => "OneDrive"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{15298B73-E23A-4D35-B7A8-D6BEAA37443A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{A36512A3-3872-47B4-BC80-9D7EC99BAA5C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{3201F7FF-4698-44CB-A2EE-7469A8140001}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{33EA4386-91D3-4A29-8C9B-DD7DC489E2D2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{381D1E31-4B4C-4AC0-A372-E7D823856C4E}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
FirewallRules: [UDP Query User{A8F4D76C-1B0F-4BE8-9B16-43799C353265}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
FirewallRules: [TCP Query User{683843F4-5E21-44AE-A851-B211B0A8BAF8}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
FirewallRules: [UDP Query User{E32617E5-90E8-4858-942B-244F3B1717C2}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
FirewallRules: [{786E1C77-9ACF-45AF-9A69-3C7E7DB0FA54}] => (Allow) C:\Program Files\Bitdefender\Bitdefender Security\bdntwrk.exe (Bitdefender SRL -> Bitdefender)
FirewallRules: [{69C03150-D8AB-46D3-8DAB-DCC5924259ED}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.113.3210.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{324BACDB-5DC6-4495-A87D-48216DB72BC4}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.113.3210.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{EF628F54-A9D0-4D2C-AF79-93FA34AEBF42}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.113.3210.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{888AA02C-DEA8-4D84-A976-3246F585D33C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.113.3210.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{EABDAD4B-9899-4E0D-80C0-EEC3C21BCD3F}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{5F5FF72E-26BB-4564-A068-A5FCB81FEC70}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.80\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Restore Points =========================
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (03/21/2024 06:16:57 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program SearchApp.exe version 10.0.19041.3996 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: 3258
Start Time: 01da7be43348f805
Termination Time: 4294967295
Application Path: C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
Report Id: 85970806-6f35-4a89-9f8e-cc0e9760e57f
Faulting package full name: Microsoft.Windows.Search_1.14.12.19041_neutral_neutral_cw5n1h2txyewy
Faulting package-relative application ID: ShellFeedsUI
Hang type: Quiesce
Error: (03/11/2024 01:24:45 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program SearchApp.exe version 10.0.19041.3996 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: 3dac
Start Time: 01da73e0c1d71b48
Termination Time: 4294967295
Application Path: C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
Report Id: c0024a0e-fcc9-4fc0-b2b1-a87320e0c111
Faulting package full name: Microsoft.Windows.Search_1.14.12.19041_neutral_neutral_cw5n1h2txyewy
Faulting package-relative application ID: ShellFeedsUI
Hang type: Quiesce
Error: (03/11/2024 01:19:34 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program SearchApp.exe version 10.0.19041.3996 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: 2118
Start Time: 01da717f35a2a98b
Termination Time: 4294967295
Application Path: C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
Report Id: aeb2ab12-e7bf-4233-b3ff-550da64eba33
Faulting package full name: Microsoft.Windows.Search_1.14.12.19041_neutral_neutral_cw5n1h2txyewy
Faulting package-relative application ID: ShellFeedsUI
Hang type: Quiesce
Error: (03/08/2024 12:31:35 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program SearchApp.exe version 10.0.19041.3996 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: 2760
Start Time: 01da717d1f3e2b43
Termination Time: 4294967295
Application Path: C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
Report Id: b6bd0fbe-6c44-429d-8310-cbd11c42faa1
Faulting package full name: Microsoft.Windows.Search_1.14.12.19041_neutral_neutral_cw5n1h2txyewy
Faulting package-relative application ID: ShellFeedsUI
Hang type: Quiesce
Error: (03/08/2024 12:18:16 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program SearchApp.exe version 10.0.19041.3996 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: 38ac
Start Time: 01da717c8a0400ee
Termination Time: 4294967295
Application Path: C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
Report Id: 44e9b3a2-aef6-4f92-a72e-4004197162dc
Faulting package full name: Microsoft.Windows.Search_1.14.12.19041_neutral_neutral_cw5n1h2txyewy
Faulting package-relative application ID: ShellFeedsUI
Hang type: Quiesce
Error: (03/08/2024 12:13:57 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program SearchApp.exe version 10.0.19041.3996 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: 2248
Start Time: 01da717be8a076f3
Termination Time: 4294967295
Application Path: C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
Report Id: 6e3b27e6-c30d-4f8d-a55a-c31f2dc10d76
Faulting package full name: Microsoft.Windows.Search_1.14.12.19041_neutral_neutral_cw5n1h2txyewy
Faulting package-relative application ID: ShellFeedsUI
Hang type: Quiesce
Error: (03/07/2024 12:40:43 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Failed to create restore point (Process = C:\windows\system32\srtasks.exe ExecuteScheduledSPPCreation; Description = Scheduled Checkpoint; Error = 0x80070422).
Error: (03/07/2024 12:19:26 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program SearchApp.exe version 10.0.19041.3996 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: 29cc
Start Time: 01da6ac051783ee7
Termination Time: 4294967295
Application Path: C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
Report Id: 57acc58a-d4f4-4a06-af87-d74dcdf95a91
Faulting package full name: Microsoft.Windows.Search_1.14.12.19041_neutral_neutral_cw5n1h2txyewy
Faulting package-relative application ID: ShellFeedsUI
Hang type: Quiesce
System errors:
=============
Error: (03/21/2024 06:08:00 PM) (Source: Tcpip) (EventID: 4199) (User: )
Description: The system detected an address conflict for IP address 2600:100c:b232:c49c:1465:91e4:349f:2751 with the system
having network hardware address 86-A3-98-E6-C4-64. Network operations on this system may
be disrupted as a result.
Error: (03/21/2024 05:53:52 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 1:10:52 PM on 3/11/2024 was unexpected.
Error: (03/11/2024 01:14:47 PM) (Source: DCOM) (EventID: 10029) (User: Weber-PC)
Description: The activation of the CLSID Windows.Media.Capture.AppCaptureManager timed out waiting for the service BcastDVRUserService_613ac6 to stop.
Error: (03/11/2024 01:10:55 PM) (Source: Tcpip) (EventID: 4199) (User: )
Description: The system detected an address conflict for IP address 2600:100c:b2f5:aaf9:82c3:2e34:e4b:707e with the system
having network hardware address 16-0B-B2-70-71-62. Network operations on this system may
be disrupted as a result.
Error: (03/11/2024 09:37:36 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4
Error: (03/11/2024 09:21:10 AM) (Source: Tcpip) (EventID: 4199) (User: )
Description: The system detected an address conflict for IP address 2600:100c:b238:eabc:8e3f:d9c0:99a:89dd with the system
having network hardware address BA-C2-98-52-0A-26. Network operations on this system may
be disrupted as a result.
Error: (03/09/2024 04:32:53 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4
Error: (03/09/2024 02:29:54 AM) (Source: DCOM) (EventID: 10010) (User: Weber-PC)
Description: The server microsoft.windowscommunicationsapps_16005.14326.21830.0_x64__8wekyb3d8bbwe!microsoft.windowslive.calendar.AppXwkn9j84yh1kvnt49k5r8h6y1ecsv09hs.mca did not register with DCOM within the required timeout.
Windows Defender:
================
Date: 2022-09-23 00:46:39
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2022-08-15 00:27:13
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2022-03-10 22:41:46
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2022-01-19 00:29:38
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2021-10-07 09:45:47
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Event[0]:
Date: 2022-10-18 22:30:07
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.339.1495.0
Update Source: Microsoft Malware Protection Center
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.18100.6
Error code: 0x80070102
Error description: The wait operation timed out.
Date: 2022-10-18 22:22:04
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.339.1495.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.18100.6
Error code: 0x80070643
Error description: Fatal error during installation.
Date: 2022-10-18 22:21:53
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version: 1.377.456.0
Previous security intelligence Version: 1.339.1495.0
Update Source: User
Security intelligence Type: AntiSpyware
Update Type: Delta
Current Engine Version: 1.1.18100.6
Previous Engine Version: 1.1.18100.6
Error code: 0x80070666
Error description: Another version of this product is already installed. Installation of this version cannot continue. To configure or remove the existing version of this product, use Add/Remove Programs on the Control Panel.
Date: 2022-10-18 22:21:53
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version: 1.377.456.0
Previous security intelligence Version: 1.339.1495.0
Update Source: User
Security intelligence Type: AntiVirus
Update Type: Delta
Current Engine Version: 1.1.18100.6
Previous Engine Version: 1.1.18100.6
Error code: 0x80070666
Error description: Another version of this product is already installed. Installation of this version cannot continue. To configure or remove the existing version of this product, use Add/Remove Programs on the Control Panel.
Date: 2022-09-30 09:17:23
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version: 1.375.1243.0
Previous security intelligence Version: 1.339.1495.0
Update Source: User
Security intelligence Type: AntiSpyware
Update Type: Full
Current Engine Version: 1.1.19600.3
Previous Engine Version: 1.1.18100.6
Error code: 0x80509004
Error description: An unexpected problem occurred. Install any available updates, and then try to start the program again. For information on installing updates, see Help and Support.
CodeIntegrity:
===============
Date: 2022-12-08 21:24:44
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Mozilla Firefox\firefox.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Mozilla Firefox\mozavcodec.dll that did not meet the Microsoft signing level requirements.
Date: 2022-12-08 21:24:44
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Mozilla Firefox\firefox.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Mozilla Firefox\mozavutil.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
BIOS: LENOVO 18CN42WW(V2.51) 01/18/2010
Motherboard: LENOVO NITU1
Processor: Pentium® Dual-Core CPU T4500 @ 2.30GHz
Percentage of memory in use: 71%
Total physical RAM: 4028.6 MB
Available physical RAM: 1143.95 MB
Total Virtual: 6972.6 MB
Available Virtual: 1153.39 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:446.5 GB) (Free:309.25 GB) (Model: CT480BX500SSD1) NTFS
\\?\Volume{7994dbef-0000-0000-0000-100000000000}\ () (Fixed) (Total:0.09 GB) (Free:0.05 GB) FAT32
\\?\Volume{7994dbef-0000-0000-0000-00a66f000000}\ () (Fixed) (Total:0.54 GB) (Free:0.12 GB) NTFS
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 447.1 GB) (Disk ID: 7994DBEF)
Partition 1: (Active) - (Size=100 MB) - (Type=FAT32)
Partition 2: (Not Active) - (Size=446.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=549 MB) - (Type=27)
==================== End of Addition.txt =======================
Back to top
