Hi. PC has started to hit 100% constantly (even for browsing internet) leading to freezing up

**Malnutrition** · 03-11-2022, 10:48 AM

@Bruce @Evan Omo @PeterOz @phillpower2

Please download MiniToolBox and save it to your desktop.
Run the program by right clicking on it and selecting Run as administrator.
When the program opens select the following boxes:

Flush DNS
Report IE Proxy Settings
Reset IE Proxy Settings
Report FF Proxy Settings
Reset FF Proxy Settings
List content of Hosts
List IP Configuration
List Winsock Entries
List last 10 Event Viewer Errors
List Installed Programs
List Devices (Only Problems)
List Users, Partitions and Memory size

Please post the log in your next reply

Security Check Scan.

[ul]
[li]Download Security Check to your desktop.[/li][li]Right click it run as administrator.[/li][li]When the program completes, the tool will automatically open a log file.[/li][li]Please post that log here in your next post[/li][/ul]

HijackThis.

1- Please click HERE to download HijackThis.
2- Run the program.
3- Click on the Main Menu button if not already there.
4- Select Do a system scan and save a logfile.
5- Copy paste the log here.

**BobD** · 03-11-2022, 10:07 PM

Hi thanks for responding.

Code:

MTB
MiniToolBox by Farbar Version: 17-06-2016
Ran by moonc (administrator) on 11-03-2022 at 19:34:14
Running from “C:\Users\moonc\OneDrive\Desktop\pc”
Microsoft Windows 10 Home (X64)
Model: System Product Name Manufacturer: System manufacturer
Boot Mode: Normal
[HR][/HR]
========================= Flush DNS: ===================================
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
========================= IE Proxy Settings: ==============================
Proxy is not enabled.
No Proxy Server is set.
“Reset IE Proxy Settings”: IE Proxy Settings were reset.
========================= FF Proxy Settings: ==============================
“Reset FF Proxy Settings”: Firefox Proxy settings were reset.
========================= Hosts content: =================================
========================= IP Configuration: ================================
Intel(R) 82579V Gigabit Network Connection = Ethernet (Connected)
TAP-NordVPN Windows Adapter V9 = Ethernet 2 (Media disconnected)
Bluetooth Device (Personal Area Network) = Bluetooth Network Connection (Media disconnected)
[HEADING=1]----------------------------------[/HEADING]
[HEADING=1]IPv4 Configuration[/HEADING]
[HEADING=1]----------------------------------[/HEADING]
pushd interface ipv4
reset
set global icmpredirects=enabled taskoffload=disabled
add route prefix=0.0.0.0/0 interface=“Ethernet 2” nexthop=192.168.0.1 publish=Yes
set interface interface=“Ethernet (Kernel Debugger)” forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface=“Ethernet 2” forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface=“NordLynx” forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface=“Bluetooth Network Connection” forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface=“Ethernet” forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
popd
[HEADING=1]End of IPv4 configuration[/HEADING]
[HEADING=1]Windows IP Configuration
Host Name . . . . . . . . . . . . : DESKTOP-T1IPIDK
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : Home
Ethernet adapter Ethernet:
Connection-specific DNS Suffix . : Home
Description . . . . . . . . . . . : Intel(R) 82579V Gigabit Network Connection
Physical Address. . . . . . . . . : 10-BF-48-E1-53-09
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : fd92:b075:51b:0:489b:5877:43a3:5189(Preferred)
Temporary IPv6 Address. . . . . . : fd92:b075:51b:0:889f:450a:64c7:14c7(Preferred)
Link-local IPv6 Address . . . . . : fe80::489b:5877:43a3:5189%10(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.0.2(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : 11 March 2022 07:04:13
Lease Expires . . . . . . . . . . : 12 March 2022 17:20:47
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DHCPv6 IAID . . . . . . . . . . . : 521191240
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-26-11-A5-F7-10-BF-48-E1-53-09
DNS Servers . . . . . . . . . . . : fd92:b075:51b:0:a2bd:cdff:fee5:5640
192.168.0.1
fd92:b075:51b:0:a2bd:cdff:fee5:5640
NetBIOS over Tcpip. . . . . . . . : Enabled
Ethernet adapter Ethernet 2:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : TAP-NordVPN Windows Adapter V9
Physical Address. . . . . . . . . : 00-FF-37-DD-6E-A2
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Ethernet adapter Bluetooth Network Connection:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Bluetooth Device (Personal Area Network)
Physical Address. . . . . . . . . : 00-02-5B-C1-2D-A5
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Server: UnKnown
Address: fd92:b075:51b:0:a2bd:cdff:fee5:5640
Name: google.com
Addresses: 2a00:1450:4009:823::200e
142.250.200.46
Pinging google.com [142.250.200.46] with 32 bytes of data:
Reply from 142.250.200.46: bytes=32 time=28ms TTL=119
Reply from 142.250.200.46: bytes=32 time=31ms TTL=119
Ping statistics for 142.250.200.46:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 28ms, Maximum = 31ms, Average = 29ms
Server: UnKnown
Address: fd92:b075:51b:0:a2bd:cdff:fee5:5640
Name: yahoo.com
Addresses: 2001:4998:44:3507::8001
2001:4998:44:3507::8000
2001:4998:124:1507::f001
2001:4998:124:1507::f000
2001:4998:24:120d::1:1
2001:4998:24:120d::1:0
98.137.11.163
74.6.231.21
74.6.231.20
74.6.143.26
74.6.143.25
98.137.11.164
Pinging yahoo.com [98.137.11.164] with 32 bytes of data:
Reply from 98.137.11.164: bytes=32 time=169ms TTL=51
Reply from 98.137.11.164: bytes=32 time=169ms TTL=51
Ping statistics for 98.137.11.164:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 169ms, Maximum = 169ms, Average = 169ms
Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Ping statistics for 127.0.0.1:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms[/HEADING]
[HEADING=1]Interface List
10…10 bf 48 e1 53 09 …Intel(R) 82579V Gigabit Network Connection
6…00 ff 37 dd 6e a2 …TAP-NordVPN Windows Adapter V9
16…00 02 5b c1 2d a5 …Bluetooth Device (Personal Area Network)
1…Software Loopback Interface 1[/HEADING]
[HEADING=1]IPv4 Route Table[/HEADING]
[HEADING=1]Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.0.1 192.168.0.2 25
127.0.0.0 255.0.0.0 On-link 127.0.0.1 331
127.0.0.1 255.255.255.255 On-link 127.0.0.1 331
127.255.255.255 255.255.255.255 On-link 127.0.0.1 331
192.168.0.0 255.255.255.0 On-link 192.168.0.2 281
192.168.0.2 255.255.255.255 On-link 192.168.0.2 281
192.168.0.255 255.255.255.255 On-link 192.168.0.2 281
224.0.0.0 240.0.0.0 On-link 127.0.0.1 331
224.0.0.0 240.0.0.0 On-link 192.168.0.2 281
255.255.255.255 255.255.255.255 On-link 127.0.0.1 331
255.255.255.255 255.255.255.255 On-link 192.168.0.2 281[/HEADING]
[HEADING=1]Persistent Routes:
Network Address Netmask Gateway Address Metric
0.0.0.0 0.0.0.0 192.168.0.1 Default[/HEADING]
[HEADING=1]IPv6 Route Table[/HEADING]
[HEADING=1]Active Routes:
If Metric Network Destination Gateway
1 331 ::1/128 On-link
10 281 fd92:b075:51b::/64 On-link
10 281 fd92:b075:51b:0:489b:5877:43a3:5189/128
On-link
10 281 fd92:b075:51b:0:889f:450a:64c7:14c7/128
On-link
10 281 fe80::/64 On-link
10 281 fe80::489b:5877:43a3:5189/128
On-link
1 331 ff00::/8 On-link
10 281 ff00::/8 On-link[/HEADING]
[HEADING=1]Persistent Routes:
None
========================= Winsock entries =====================================
Catalog5 01 C:\WINDOWS\SysWOW64\napinsp.dll [54784] (Microsoft Corporation)
Catalog5 02 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70656] (Microsoft Corporation)
Catalog5 03 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70656] (Microsoft Corporation)
Catalog5 04 C:\WINDOWS\SysWOW64\wshbth.dll [50688] (Microsoft Corporation)
Catalog5 05 C:\WINDOWS\SysWOW64\NLAapi.dll [71168] (Microsoft Corporation)
Catalog5 06 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog5 07 C:\WINDOWS\SysWOW64\winrnr.dll [34304] (Microsoft Corporation)
Catalog9 01 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 02 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 03 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 04 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 05 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 06 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 07 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 08 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 09 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 10 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 11 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 12 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 13 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 14 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\napinsp.dll [70144] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\pnrpnsp.dll [89088] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [89088] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\wshbth.dll [64000] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\NLAapi.dll [97280] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog5 07 C:\Windows\System32\winrnr.dll [49152] (Microsoft Corporation)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 11 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 12 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 13 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 14 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
========================= Event log errors: ===============================
Application errors:[/HEADING]
[HEADING=1]Error: (03/11/2022 05:21:12 PM) (Source: Application Error) (User: )
Description: Faulting application name: DipAwayMode.exe, version: 0.0.0.0, time stamp: 0x00000000
Faulting module name: KERNELBASE.dll, version: 10.0.19041.1526, time stamp: 0xd9a6be6b
Exception code: 0xc0000409
Fault offset: 0x0012b812
Faulting process id: 0x24ac
Faulting application start time: 0xDipAwayMode.exe0
Faulting application path: DipAwayMode.exe1
Faulting module path: DipAwayMode.exe2
Report Id: DipAwayMode.exe3
Faulting package full name: DipAwayMode.exe4
Faulting package-relative application ID: DipAwayMode.exe5
Error: (03/11/2022 07:06:08 AM) (Source: Application Error) (User: )
Description: Faulting application name: DipAwayMode.exe, version: 0.0.0.0, time stamp: 0x00000000
Faulting module name: KERNELBASE.dll, version: 10.0.19041.1526, time stamp: 0xd9a6be6b
Exception code: 0xc0000409
Fault offset: 0x0012b812
Faulting process id: 0x16b0
Faulting application start time: 0xDipAwayMode.exe0
Faulting application path: DipAwayMode.exe1
Faulting module path: DipAwayMode.exe2
Report Id: DipAwayMode.exe3
Faulting package full name: DipAwayMode.exe4
Faulting package-relative application ID: DipAwayMode.exe5
Error: (03/11/2022 05:14:08 AM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, A system shutdown is in progress.
.
Error: (03/11/2022 05:14:08 AM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.
]
Error: (03/11/2022 02:33:57 AM) (Source: Application Error) (User: )
Description: Faulting application name: DipAwayMode.exe, version: 0.0.0.0, time stamp: 0x00000000
Faulting module name: KERNELBASE.dll, version: 10.0.19041.1526, time stamp: 0xd9a6be6b
Exception code: 0xc0000409
Fault offset: 0x0012b812
Faulting process id: 0x44
Faulting application start time: 0xDipAwayMode.exe0
Faulting application path: DipAwayMode.exe1
Faulting module path: DipAwayMode.exe2
Report Id: DipAwayMode.exe3
Faulting package full name: DipAwayMode.exe4
Faulting package-relative application ID: DipAwayMode.exe5
Error: (03/11/2022 12:28:28 AM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, A system shutdown is in progress.
.
Error: (03/11/2022 12:28:28 AM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.
]
Error: (03/11/2022 12:28:28 AM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, A system shutdown is in progress.
.
Error: (03/11/2022 12:28:28 AM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.
]
Error: (03/10/2022 05:58:54 PM) (Source: Application Error) (User: )
Description: Faulting application name: DipAwayMode.exe, version: 0.0.0.0, time stamp: 0x00000000
Faulting module name: KERNELBASE.dll, version: 10.0.19041.1526, time stamp: 0xd9a6be6b
Exception code: 0xc0000409
Fault offset: 0x0012b812
Faulting process id: 0xb74
Faulting application start time: 0xDipAwayMode.exe0
Faulting application path: DipAwayMode.exe1
Faulting module path: DipAwayMode.exe2
Report Id: DipAwayMode.exe3
Faulting package full name: DipAwayMode.exe4
Faulting package-relative application ID: DipAwayMode.exe5
System errors:[/HEADING]
[HEADING=1]Error: (03/11/2022 10:56:11 AM) (Source: DCOM) (User: DESKTOP-T1IPIDK)
Description: {5F7F3F7B-1177-4D4B-B1DB-BC6F671B8F25}
Error: (03/11/2022 07:39:00 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80073d02: ApplicationSet-9PB2MZ1ZMB1S-AppleInc.iTunes.
Error: (03/07/2022 10:55:11 PM) (Source: Service Control Manager) (User: )
Description: The Mozilla Maintenance Service service terminated with the following error:
%%1 = Incorrect function.
Error: (03/07/2022 10:55:08 PM) (Source: Service Control Manager) (User: )
Description: The Mozilla Maintenance Service service terminated with the following error:
%%1 = Incorrect function.
Error: (03/05/2022 08:04:03 PM) (Source: Service Control Manager) (User: )
Description: The Steam Client Service service failed to start due to the following error:
%%1053 = The service did not respond to the start or control request in a timely fashion.
Error: (03/05/2022 08:04:03 PM) (Source: Service Control Manager) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Steam Client Service service to connect.
Error: (03/04/2022 05:11:12 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80073d02: 9NFFX4SZZ23L-Microsoft.549981C3F5F10.
Error: (02/25/2022 10:26:10 PM) (Source: DCOM) (User: DESKTOP-T1IPIDK)
Description: 87GamingServicesUnavailable{3E8C9ABE-9226-4609-BF5B-60288A391DEE}
Error: (02/25/2022 10:26:10 PM) (Source: DCOM) (User: DESKTOP-T1IPIDK)
Description: 87GamingServicesUnavailable{3E8C9ABE-9226-4609-BF5B-60288A391DEE}
Error: (02/25/2022 10:26:05 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80073d02: 9MWPM2CQNLHN-Microsoft.GamingServices.
Microsoft Office Sessions:[/HEADING]
[HEADING=1]Error: (03/11/2022 05:21:12 PM) (Source: Application Error)(User: )
Description: DipAwayMode.exe0.0.0.000000000KERNELBASE.dll10.0.19041.1526d9a6be6bc00004090012b81224ac01d8356c62dcf5a2C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exeC:\WINDOWS\System32\KERNELBASE.dll39670742-122c-4331-a963-f84a28bcdbf3
Error: (03/11/2022 07:06:08 AM) (Source: Application Error)(User: )
Description: DipAwayMode.exe0.0.0.000000000KERNELBASE.dll10.0.19041.1526d9a6be6bc00004090012b81216b001d8351677244371C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exeC:\WINDOWS\System32\KERNELBASE.dll029973bd-bd79-4c43-94c8-43e64826d70b
Error: (03/11/2022 05:14:08 AM) (Source: VSS)(User: )
Description: CoCreateInstance0x8007045b, A system shutdown is in progress.
Error: (03/11/2022 05:14:08 AM) (Source: VSS)(User: )
Description: {4e14fba2-2e22-11d1-9964-00c04fbbb345}CEventSystem0x8007045b, A system shutdown is in progress.
Error: (03/11/2022 02:33:57 AM) (Source: Application Error)(User: )
Description: DipAwayMode.exe0.0.0.000000000KERNELBASE.dll10.0.19041.1526d9a6be6bc00004090012b8124401d834f070cd6b62C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exeC:\WINDOWS\System32\KERNELBASE.dll8e2f0698-5d60-4819-8480-3bcf3f4d3bad
Error: (03/11/2022 12:28:28 AM) (Source: VSS)(User: )
Description: CoCreateInstance0x8007045b, A system shutdown is in progress.
Error: (03/11/2022 12:28:28 AM) (Source: VSS)(User: )
Description: {4e14fba2-2e22-11d1-9964-00c04fbbb345}CEventSystem0x8007045b, A system shutdown is in progress.
Error: (03/11/2022 12:28:28 AM) (Source: VSS)(User: )
Description: CoCreateInstance0x8007045b, A system shutdown is in progress.
Error: (03/11/2022 12:28:28 AM) (Source: VSS)(User: )
Description: {4e14fba2-2e22-11d1-9964-00c04fbbb345}CEventSystem0x8007045b, A system shutdown is in progress.
Error: (03/10/2022 05:58:54 PM) (Source: Application Error)(User: )
Description: DipAwayMode.exe0.0.0.000000000KERNELBASE.dll10.0.19041.1526d9a6be6bc00004090012b812b7401d834a8713b2960C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exeC:\WINDOWS\System32\KERNELBASE.dlla86d075e-d658-4180-9924-0d8eb33beeb2
CodeIntegrity Errors:[/HEADING]
Date: 2022-03-11 07:06:29.5870000Z
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2022-03-11 07:06:25.2990000Z
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2022-03-11 07:06:25.2850000Z
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2022-03-11 07:06:24.9780000Z
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2022-03-11 07:06:24.8870000Z
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2022-03-11 07:06:20.5050000Z
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2022-03-11 07:06:20.4950000Z
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2022-03-11 07:06:20.4690000Z
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2022-03-11 05:14:04.7330000Z
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2022-03-11 02:34:10.7070000Z
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
=========================== Installed Programs ============================
7-Zip 19.00 (x64) (HKLM...\7-Zip) (Version: 19.00 - Igor Pavlov)
Adobe Flash Player 32 NPAPI (HKLM-x32...\Adobe Flash Player NPAPI) (Version: 32.0.0.344 - Adobe)
AI Suite 3 (HKLM-x32...{D46DA5F0-25AD-4B77-98DA-6DD6AF39FBD9}) (Version: 1.00.56 - ASUSTeK Computer Inc.)
Anarcute (HKLM...\Steam App 390720) (Version: - Anarteam)
Antstream (HKLM-x32...{692A25B5-DAB0-48FD-B25D-0C40D1E9376A}) (Version: 2.1.2533.0 - Antstream Ltd) Hidden
Antstream (HKLM-x32...{d11bb827-20dc-4c73-9e85-d4417c783fcc}) (Version: 2.1.2533.0 - Antstream Ltd)
Arcade Classics Anniversary Collection (HKLM...\Steam App 1018000) (Version: - Konami Digital Entertainment)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32...{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.12.0 - Asmedia Technology)
Assault Android Cactus (HKLM...\Steam App 250110) (Version: - Witch Beam)
AutoHotkey 1.1.33.02 (HKLM...\AutoHotkey) (Version: 1.1.33.02 - Lexikos)
Axiom Verge (HKLM...\Steam App 332200) (Version: - Thomas Happ Games LLC)
Battle.net (HKLM-x32...\Battle.net) (Version: - Blizzard Entertainment)
Blood Harvest 3 (HKLM...\Steam App 851180) (Version: - BekkerDev Studio)
Bridge Constructor Medieval (HKLM...\Steam App 319850) (Version: - ClockStone)
Call of Duty Modern Warfare (HKLM-x32...\Call of Duty Modern Warfare) (Version: - Blizzard Entertainment)
Cecconoid (HKLM...\Steam App 683310) (Version: - Triple Eh? Ltd)
Children of Morta (HKLM...\Steam App 330020) (Version: - Dead Mage)
Chronicon (HKLM...\Steam App 375480) (Version: - Subworld)
Clownfish Voice Changer (HKLM...\ClownfishVoiceChanger) (Version: - )
Contra Anniversary Collection (HKLM...\Steam App 1018020) (Version: - Konami Digital Entertainment)
CPUID HWMonitor 1.45 (HKLM...\CPUID HWMonitor_is1) (Version: 1.45 - CPUID, Inc.)
Creepy Tale (HKLM...\Steam App 1224020) (Version: - Creepy Brothers)
Crimzon Clover WORLD IGNITION (HKLM...\Steam App 285440) (Version: - YOTSUBANE)
DARIUSBURST Chronicle Saviours (HKLM...\Steam App 377870) (Version: - Pyramid)
Dead Cells (HKLM...\Steam App 588650) (Version: - Motion Twin)
Death Road to Canada (HKLM...\Steam App 252610) (Version: - Rocketcat Games)
Descenders (HKLM...\Steam App 681280) (Version: - RageSquid)
Desert Child (HKLM...\Steam App 844050) (Version: - Oscar Brittain)
Discord (HKCU...\Discord) (Version: 0.0.309 - Discord Inc.)
Drones, The Human Condition (HKLM...\Steam App 556130) (Version: - Blunt Games)
Duke Nukem 3D: Megaton Edition (HKLM...\Steam App 225140) (Version: - 3D Realms)
Dust: An Elysian Tail (HKLM...\Steam App 236090) (Version: - Humble Hearts LLC)
Dying Light (HKLM...\Steam App 239140) (Version: - Techland)
Enter the Gungeon (HKLM...\Steam App 311690) (Version: - Dodge Roll)
ESET Security (HKLM...{4DC9121F-BA9A-4A87-A6CA-E53B4FBACB5A}) (Version: 15.0.23.0 - ESET, spol. s r.o.)
Everything 1.4.1.988 (x64) (HKLM...\Everything) (Version: 1.4.1.988 - David Carpenter)
f.lux (HKCU...\Flux) (Version: - f.lux Software LLC)
FlashBack Pro 5 (HKLM-x32...\FlashBack Pro 5) (Version: 5.45.0.4591 - Blueberry Software (UK) Ltd.)
Full Pipe (HKLM...\Steam App 4600) (Version: - PipeStudio)
Gachi Revenge (HKLM...\Steam App 1202070) (Version: - Take Toad)
GALAK-Z (HKLM...\Steam App 300580) (Version: - 17-BIT)
Gato Roboto (HKLM...\Steam App 916730) (Version: - doinksoft)
Going Under (HKLM...\Steam App 1154810) (Version: - Aggro Crab)
Google Chrome (HKLM-x32...\Google Chrome) (Version: 99.0.4844.51 - Google LLC)
Hell is Other Demons (HKLM...\Steam App 595790) (Version: - Cuddle Monster Games)
Hexcells (HKLM...\Steam App 265890) (Version: - Matthew Brown)
Hook (HKLM...\Steam App 367580) (Version: - Maciej Targoni)
Horace (HKLM...\Steam App 629090) (Version: - Paul Helman)
Huntdown (HKLM...\Steam App 598550) (Version: - Easy Trigger Games)
HWiNFO64 Version 6.24 (HKLM...\HWiNFO64_is1) (Version: 6.24 - Martin Malik - REALiX)
HxD Hex Editor version 1.7.7.0 (HKLM-x32...\HxD Hex Editor_is1) (Version: 1.7.7.0 - Maël Hörz)
Imbroglio (HKLM...\Steam App 1175420) (Version: - Rostislav Pogosian)
ISLANDERS (HKLM...\Steam App 1046030) (Version: - GrizzlyGames)
KAMUI (HKLM...\Steam App 283820) (Version: - SITER SKAIN)
Knightin’+ (HKLM...\Steam App 922710) (Version: - Muzt Die Studios)
Leap of Fate (HKLM...\Steam App 363420) (Version: - Clever Plays)
LibreOffice 7.0.0.3 (HKLM...{7C7F19DA-6107-4284-9263-EC5C4792C8C7}) (Version: 7.0.0.3 - The Document Foundation)
Lightworks (HKLM-x32...{E94DD4E4-7746-472c-AA7B-1242FED0CFC8}) (Version: 14.6.0.0 - EditShare)
Little Nightmares (HKLM...\Steam App 424840) (Version: - Tarsier Studios)
Madrobot X (HKLM...\Steam App 513610) (Version: - NetoX)
Malwarebytes version 4.5.5.175 (HKLM...{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.5.5.175 - Malwarebytes)
Microsoft Edge (HKLM-x32...\Microsoft Edge) (Version: 99.0.1150.36 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32...\Microsoft Edge Update) (Version: 1.3.155.85 - )
Microsoft Edge WebView2 Runtime (HKLM-x32...\Microsoft EdgeWebView) (Version: 99.0.1150.36 - Microsoft Corporation)
Microsoft OneDrive (HKLM...\OneDriveSetup.exe) (Version: 22.022.0130.0001 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM...{16E50919-B07A-4B4E-994A-476D4773F5BF}) (Version: 3.65.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32...{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM...{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM...{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32...{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM...{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32...{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32...{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32...{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32...{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32...{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.28.29334 (HKLM-x32...{a9cfe9c7-e54f-46cd-9c5c-542ff8e3e8c4}) (Version: 14.28.29334.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29334 (HKLM-x32...{b2d0f752-adc5-496e-8f70-8669de01f746}) (Version: 14.28.29334.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32...{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Firefox (x64 en-GB) (HKLM...\Mozilla Firefox 98.0 (x64 en-GB)) (Version: 98.0 - Mozilla)
Mozilla Maintenance Service (HKLM...\MozillaMaintenanceService) (Version: 74.0 - Mozilla)
Nazi Labs (HKLM...\Steam App 1284430) (Version: - Sinned Games)
Nightmare Puppeteer (HKLM...\Steam App 1355310) (Version: - imaginationrabbit)
NordUpdater (HKLM...{6E35DB82-3D19-4DD6-B8CB-F082815FDE18}_is1) (Version: 1.2.0.30 - TEFINCOM S.A.)
NordVPN (HKLM...{19465C24-3D5D-4327-B99F-3CC0A1D38151}_is1) (Version: 6.44.5.0 - TEFINCOM S.A.)
NordVPN network TAP (HKLM-x32...{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}) (Version: 1.0.1 - NordVPN)
NordVPN network TUN (HKLM...{BD0E4F38-D3F6-452D-A32E-B14D721839AC}) (Version: 1.0.1 - NordVPN)
NVIDIA FrameView SDK 1.2.7321.30900954 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.2.7321.30900954 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.25.0.84 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.25.0.84 - NVIDIA Corporation)
NVIDIA Graphics Driver 511.79 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 511.79 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.39.3 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.39.3 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.21.0713 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)
NvModuleTracker (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvModuleTracker.Driver) (Version: 6.14.24370.22713 - NVIDIA Corporation) Hidden
OBS Studio (HKLM-x32...\OBS Studio) (Version: 25.0.8 - OBS Project)
Odysseus Kosmos and his Robot Quest: Adventure Game (HKLM...\Steam App 645820) (Version: - Pavel Kostin)
Off-Peak (HKLM...\Steam App 467360) (Version: - Cosmo D)
OneShot (HKLM...\Steam App 420530) (Version: - Future Cat LLC)
OpenAL (HKLM-x32...\OpenAL) (Version: - )
Ori and the Blind Forest: Definitive Edition (HKLM...\Steam App 387290) (Version: - Moon Studios GmbH)
Origin (HKLM-x32...\Origin) (Version: 10.5.108.49699 - Electronic Arts, Inc.)
Pilgrims (HKLM...\Steam App 1049280) (Version: - Amanita Design)
Pool 2D - Poolians (HKLM...\Steam App 891040) (Version: - Poolians.com)
POSTAL 2 (HKLM...\Steam App 223470) (Version: - Running With Scissors)
Rain World (HKLM...\Steam App 312520) (Version: - Videocult)
REMOTE LIFE (HKLM...\Steam App 1126420) (Version: - Next Game Level)
Reventure (HKLM...\Steam App 900270) (Version: - Pixelatto)
REVOLVER360 RE:ACTOR (HKLM...\Steam App 313400) (Version: - Cross Eaglet)
Rogue Bit (HKLM...\Steam App 949790) (Version: - Bigosaur)
R-Type Dimensions EX (HKLM...\Steam App 928390) (Version: - Tozai Games, Inc.)
Samorost 1 (HKLM...\Steam App 1580970) (Version: - Amanita Design)
Seen (HKLM...\Steam App 1069740) (Version: - Seen Games)
Shank (HKLM...\Steam App 6120) (Version: - Klei Entertainment)
SIMULACRA (HKLM...\Steam App 712730) (Version: - Kaigan Games OÜ)
Sonic Mania (HKLM...\Steam App 584400) (Version: - Christian Whitehead)
Space Redemption (HKLM...\Steam App 1250960) (Version: - SamDee)
Space Robinson (HKLM...\Steam App 953870) (Version: - Luxorix Games)
Spaceguy (HKLM...\Steam App 796440) (Version: - Light Soft)
Speccy (HKLM...\Speccy) (Version: 1.32 - Piriform)
Spirits Abyss (HKLM...\Steam App 1078200) (Version: - Anthony Case)
Spotify (HKCU...\Spotify) (Version: 1.1.80.699.gc3dac750 - Spotify AB)
Steam (HKLM-x32...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Straima (HKLM...\Steam App 399140) (Version: - Anthony Case)
Streets Of Kamurocho (HKLM...\Steam App 1368430) (Version: - Empty Clip Studios)
Streets of Rogue (HKLM...\Steam App 512900) (Version: - Matt Dabrowski)
Super Arcade Racing (HKLM...\Steam App 1103770) (Version: - OutOfTheBit Ltd)
Super Blood Hockey (HKLM...\Steam App 532190) (Version: - Loren Lemcke)
Super Cyborg (HKLM...\Steam App 341550) (Version: - Artur Games)
Superflight (HKLM...\Steam App 732430) (Version: - GrizzlyGames)
Swords and Soldiers HD (HKLM...\Steam App 63500) (Version: - Ronimo Games)
The Dream Machine (HKLM...\Steam App 94300) (Version: - Cockroach Inc.)
The Golf Club™ 2019 Featuring PGA TOUR (HKLM...\Steam App 695290) (Version: - HB Studios Multimedia Ltd.)
The Hurricane of the Varstray -Collateral hazard- (HKLM...\Steam App 416380) (Version: - Studio SiestA)
The Tower of Beatrice (HKLM...\Steam App 775960) (Version: - Fairy Forest)
Thunderflash (HKLM...\Steam App 1206280) (Version: - SEEP)
Trash Squad (HKLM...\Steam App 676440) (Version: - Enitvare)
Ultimate Racing 2D (HKLM...\Steam App 808080) (Version: - Applimazing)
Unavowed (HKLM...\Steam App 336140) (Version: - Wadjet Eye Games)
Vermitron (HKLM...\Steam App 1359020) (Version: - FobTi interactive)
VOI (HKLM...\Steam App 545690) (Version: - Yunus Ayyildiz)
Whispers of a Machine (HKLM...\Steam App 631570) (Version: - Clifftop Games)
Windows PC Health Check (HKLM...{B1E7D0FD-7CFE-4E0C-A5DA-0F676499DB91}) (Version: 3.2.2110.14001 - Microsoft Corporation)
Wuppo - Definitive Edition (HKLM...\Steam App 400630) (Version: - Knuist & Perzik)
========================= Devices: ================================
========================= Memory info: ===================================
Percentage of memory in use: 30%
Total physical RAM: 16326.07 MB
Available physical RAM: 11372.24 MB
Total Virtual: 20038.07 MB
Available Virtual: 13394.18 MB
========================= Partitions: =====================================
1 Drive c: () (Fixed) (Total:930.95 GB) (Free:652.05 GB) NTFS
2 Drive d: (New Volume) (Fixed) (Total:1862.89 GB) (Free:526.71 GB) NTFS
3 Drive e: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS
4 Drive f: () (Fixed) (Total:488.18 GB) (Free:91.66 GB) NTFS
5 Drive g: () (Fixed) (Total:443.23 GB) (Free:77.88 GB) NTFS
========================= Users: ========================================
User accounts for \DESKTOP-T1IPIDK
Administrator DefaultAccount Funkbob
Guest moonc WDAGUtilityAccount
**** End of log ****

[spoiler]

Security checks
SecurityCheck by glax24 & Severnyj v.1.4.0.54 [06.12.21]
WebSite: www.safezone.cc
DateLog: 11.03.2022 19:43:13
Path starting: C:\Users\moonc\AppData\Local\Temp\SecurityCheck\Se curityCheck.exe
Log directory: C:\SecurityCheck
IsAdmin: True
User: moonc
VersionXML: 9.58is-08.03.2022

Windows 10(6.3.19043) (x64) Core Release: 2009 Lang: English(0409)
Installation date OS: 26.07.2020 21:06:19
LicenseStatus: Windows(R), Core edition The machine is permanently activated.
Boot Mode: Normal
Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe
SystemDrive: C: FS: [NTFS] Capacity: [930.9 Gb] Used: [278.8 Gb] Free: [652.1 Gb]
------------------------------- [ Windows ] -------------------------------
Internet Explorer 11.789.19041.0
User Account Control enabled (Level 3)
Security Center (wscsvc) - The service is running
Remote Registry (RemoteRegistry) - The service has stopped
SSDP Discovery (SSDPSRV) - The service is running
Remote Desktop Services (TermService) - The service has stopped
Windows Remote Management (WS-Management) (WinRM) - The service has stopped
---------------------------- [ Antivirus_WMI ] ----------------------------
ESET Security (enabled and up to date)
Windows Defender (disabled and up to date)
Malwarebytes (enabled and up to date)
ESET Security (enabled and up to date)
--------------------------- [ FirewallWindows ] ---------------------------
Windows Defender Firewall (mpssvc) - The service is running
---------------------- [ AntiVirusFirewallInstall ] -----------------------
Malwarebytes version 4.5.5.175 v.4.5.5.175
ESET Security v.15.0.23.0
--------------------------- [ OtherUtilities ] ----------------------------
LibreOffice 7.0.0.3 v.7.0.0.3 Warning! Download Update
NVIDIA GeForce Experience 3.25.0.84 v.3.25.0.84
Steam v.2.10.91.91
------------------------------- [ Backup ] --------------------------------
Microsoft OneDrive v.22.022.0130.0001
------------------------------ [ ArchAndFM ] ------------------------------
7-Zip 19.00 (x64) v.19.00 Warning! Download Update
Uninstall old version and install new one.
-------------------------- [ IMAndCollaborate ] ---------------------------
Discord v.0.0.309 Warning! Download Update
---------------------------- [ ProxyAndVPNs ] -----------------------------
NordVPN v.6.44.5.0
-------------------------------- [ Media ] --------------------------------
Spotify v.1.1.80.699.gc3dac750
--------------------------- [ AdobeProduction ] ---------------------------
Adobe Flash Player 32 NPAPI v.32.0.0.344 Warning! This software is no longer supported. Please uninstall it.
------------------------------- [ Browser ] -------------------------------
Mozilla Firefox (x64 en-GB) v.98.0
Google Chrome v.99.0.4844.51
Microsoft Edge v.99.0.1150.36
------------------ [ AntivirusFirewallProcessServices ] -------------------
C:\Program Files\ESET\ESET Security\eguiProxy.exe v.10.24.20.0
ESET Service (ekrn) - The service is running
C:\Program Files\ESET\ESET Security\ekrn.exe v.10.24.20.0
ESET Firewall Helper (ekrnEpfw) - The service is running
C:\Program Files\ESET\ESET Security\ekrn.exe v.10.24.20.0
C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe v.4.0.0.1283
Malwarebytes Service (MBAMService) - The service is running
C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe v.3.2.0.1039
Microsoft Defender Antivirus Service (WinDefend) - The service has stopped
Microsoft Defender Antivirus Network Inspection Service (WdNisSvc) - The service has stopped
----------------------------- [ End of Log ] ------------------------------

Hijack this
Logfile of HiJackThis Fork by Alex Dragokas v.2.10.0.16

Platform: x64 Windows 10 (Home), 10.0.19043.1526 (ReleaseId: 2009, 21H1), Service Pack: 0
Time: 11.03.2022 - 19:50 (UTC+00:00)
Language: OS: English (0x409). Display: English (0x409). Non-Unicode: English (0x409)
Elevated: Yes
Ran by: moonc (group: Administrators) on DESKTOP-T1IPIDK, FirstRun: yes

Chrome: 99.0.4844.51
Firefox: 98.0.0.8098
Internet Explorer: 11.0.19041.1202
Default: “C:\Program Files\Mozilla Firefox\firefox.exe” -osint -url “%1” (Firefox)

Boot mode: Normal

Running processes:
Number | Path
1 C:\Program Files (x86)\ASUS\AAHM\1.00.16\aaHMSvc.exe
1 C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe
1 C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
1 C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\EPUShortCut.exe
1 C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe
1 C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr64.exe
1 C:\Program Files (x86)\ASUS\AsusFanControlService\1.04.01\AsusFanCo ntrolService.exe
1 C:\Program Files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe
20 C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
1 C:\Program Files (x86)\InstallShield Installation Information{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
1 C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
1 C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
1 C:\Program Files (x86)\Origin\OriginWebHelperService.exe
1 C:\Program Files\ESET\ESET Security\eguiProxy.exe
1 C:\Program Files\ESET\ESET Security\ekrn.exe
1 C:\Program Files\Everything\Everything.exe
1 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
1 C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
1 C:\Program Files\NordUpdater\NordUpdateService.exe
1 C:\Program Files\NordVPN\nordvpn-service.exe
2 C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
1 C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_ x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess .exe
1 C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_3.2202.1 0603.0_x64__8wekyb3d8bbwe\Win32Bridge.Server.exe
1 C:\Program Files\WindowsApps\Microsoft.GamingServices_3.62.18 001.0_x64__8wekyb3d8bbwe\gamingservices.exe
1 C:\Program Files\WindowsApps\Microsoft.GamingServices_3.62.18 001.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe
1 C:\Users\moonc\AppData\Local\FluxSoftware\Flux\flu x.exe
1 C:\Users\moonc\OneDrive\Desktop\pc\HiJackThis\HiJa ckThis.exe
1 C:\Windows\explorer.exe
1 C:\Windows\ImmersiveControlPanel\SystemSettings.ex e
1 C:\Windows\System32\ApplicationFrameHost.exe
1 C:\Windows\System32\audiodg.exe
1 C:\Windows\System32\conhost.exe
2 C:\Windows\System32\csrss.exe
1 C:\Windows\System32\ctfmon.exe
1 C:\Windows\System32\dllhost.exe
2 C:\Windows\System32\DriverStore\FileRepository\nv_ dispig.inf_amd64_3b12ac0f95b18b9d\Display.NvContai ner\NVDisplay.Container.exe
1 C:\Windows\System32\dwm.exe
2 C:\Windows\System32\fontdrvhost.exe
1 C:\Windows\System32\lsass.exe
1 C:\Windows\System32\MoUsoCoreWorker.exe
1 C:\Windows\System32\oobe\UserOOBEBroker.exe
3 C:\Windows\System32\RuntimeBroker.exe
1 C:\Windows\System32\SearchFilterHost.exe
1 C:\Windows\System32\SearchIndexer.exe
1 C:\Windows\System32\SearchProtocolHost.exe
1 C:\Windows\System32\SecurityHealthService.exe
1 C:\Windows\System32\SecurityHealthSystray.exe
1 C:\Windows\System32\services.exe
1 C:\Windows\System32\SettingSyncHost.exe
1 C:\Windows\System32\SgrmBroker.exe
1 C:\Windows\System32\sihost.exe
1 C:\Windows\System32\smartscreen.exe
1 C:\Windows\System32\smss.exe
1 C:\Windows\System32\spoolsv.exe
80 C:\Windows\System32\svchost.exe
1 C:\Windows\System32\taskhostw.exe
1 C:\Windows\System32\wbem\WmiPrvSE.exe
1 C:\Windows\System32\wininit.exe
1 C:\Windows\System32\winlogon.exe
1 C:\Windows\System32\WWAHost.exe
1 C:\Windows\SystemApps\Microsoft.Windows.Search_cw5 n1h2txyewy\SearchApp.exe
1 C:\Windows\SystemApps\Microsoft.Windows.StartMenuE xperienceHost_cw5n1h2txyewy\StartMenuExperienceHos t.exe
1 C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_ cw5n1h2txyewy\TextInputHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main: [Start Page] = http://www.bing.com/
O4 - HKCU..\Run: [Discord] = C:\Users\moonc\AppData\Local\Discord\Update.exe --processStart Discord.exe
O4 - HKCU..\Run: [f.lux] = C:\Users\moonc\AppData\Local\FluxSoftware\Flux\flu x.exe /noshow
O4 - HKCU..\Run: [Spotify] = C:\Users\moonc\AppData\Roaming\Spotify\Spotify.exe --autostart --minimized
O4 - HKCU..\RunOnce: [Application Restart #2] = C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe “C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe” “C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe” “C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe” -Embedding (file missing)
O4 - HKCU..\RunOnce: [Application Restart #4] = C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --flag-switches-begin --flag-switches-end --enable-audio-service-sandbox --restore-last-session – microsoft-edge:[&asid=d9dd4c3b28084171bc3d6040cdb3c3a1&poptin=&oem name=SYSTEM%20MANUFACTURER&oemid=SYSTEM%20MANUFACT URER&devfam=WINDOWS.DESKTOP&devosver=10.0.19041.38 8&ossku=CORE&arch=X64&cdmver=10.0.19041.1&fosver=1 8363&prevosver=18363&isu=0&tl=2&msa=&disphorzres=1 920&dispvertres=1080&nettype=ETHERNET&metered=FALS E&moid=&topt=&localid=&auid=&lo=173004&tsu=0&flsid =&osbuild=&waasring=&sc-sigimg=&OCID=ems.display.welcomeexperience&CCID=B7 85B5526946491B8385C40000367F33’]https://www.msn.com/spartan/dhpwinfre?country=us&locale=en-us&imgh=170&imgw=300&bcnt=3&templatetype=1.1&place ment=353689&useIris=1&tcContentId=d9dd4c3b28084171 bc3d6040cdb3c3a1&tcContentPath=//item[0]&asid=d9dd4c3b28084171bc3d6040cdb3c3a1&poptin=&oem name=SYSTEM MANUFACTURER&oemid=SYSTEM MANUFACTURER&devfam=WINDOWS.DESKTOP&devosver=10.0. 19041.388&ossku=CORE&arch=X64&cdmver=10.0.19041.1& fosver=18363&prevosver=18363&isu=0&tl=2&msa=&disph orzres=1920&dispvertres=1080&nettype=ETHERNET&mete red=FALSE&moid=&topt=&localid=&auid=&lo=173004&tsu =0&flsid=&osbuild=&waasring=&sc-sigimg=&OCID=ems.display.welcomeexperience&CCID=B7 85B5526946491B8385C40000367F33]('https://www.msn.com/spartan/dhpwinfr...entPath=//item[0)
O4 - HKCU..\RunOnce: [Application Restart #5] = C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --flag-switches-begin --flag-switches-end --enable-audio-service-sandbox --restore-last-session --flag-switches-begin --flag-switches-end --enable-audio-service-sandbox --flag-switches-begin --flag-switches-end --enable-audio-service-sandbox
O4 - HKCU..\StartupApproved\Run: [NordVPN] = C:\Program Files\NordVPN\NordVPN.exe (2020/07/11)
O4 - HKCU..\StartupApproved\Run: [Steam] = C:\Program Files (x86)\Steam\steam.exe -silent (2021/02/06)
O4 - HKLM..\Run: [egui] = C:\Program Files\ESET\ESET Security\ecmds.exe /run /hide /proxy
O4 - HKLM..\StartupApproved\Run32: [X3] = C:\Program Files (x86)\EVGA\EVGA Unleash_Mouse Tuning Utility\TORQ\Device\X3\X3HID.exe (2020/04/04)
O4 - HKLM..\StartupApproved\Run32: [X3L] = C:\Program Files (x86)\EVGA\EVGA Unleash_Mouse Tuning Utility\TORQ\Device\X3L\X3LHID.exe (2020/04/04)
O4 - HKLM..\StartupApproved\Run32: [X5] = C:\Program Files (x86)\EVGA\EVGA Unleash_Mouse Tuning Utility\TORQ\Device\X5\X5HID.exe (2020/04/04)
O4 - HKLM..\StartupApproved\Run32: [X5L] = C:\Program Files (x86)\EVGA\EVGA Unleash_Mouse Tuning Utility\TORQ\Device\X5L\X5LHID.exe (2020/04/04)
O4 - HKU\S-1-5-18..\Run: [Synapse3] = C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe /StartMinimized (file missing) (User ‘LocalSystem’)
O4 - HKU\S-1-5-18..\RunOnce: [Application Restart #0] = C:\Windows\System32\osk.exe (User ‘LocalSystem’)
O4 - HKU\S-1-5-19..\RunOnce: [OneDrive] = C:\Program Files (x86)\Microsoft OneDrive\OneDrive.exe /background /setautostart (file missing) (User ‘Local service’)
O4 - HKU\S-1-5-19..\RunOnce: [WAB Migrate] = C:\Program Files\Windows Mail\wab.exe /Upgrade (User ‘Local service’)
O4 - HKU\S-1-5-20..\RunOnce: [OneDrive] = C:\Program Files (x86)\Microsoft OneDrive\OneDrive.exe /background /setautostart (file missing) (User ‘Network service’)
O4 - HKU\S-1-5-20..\RunOnce: [WAB Migrate] = C:\Program Files\Windows Mail\wab.exe /Upgrade (User ‘Network service’)
O4-32 - HKLM..\Run: [ASUS AiChargerPlus Execute] = C:\Program Files (x86)\InstallShield Installation Information{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
O7 - KnownFolder: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\Shell Folders, {374DE290-123F-4565-9164-39C4925E467B} = G:\Media\2 Sort\Downloads
O7 - KnownFolder: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\User Shell Folders, {374DE290-123F-4565-9164-39C4925E467B} = G:\Media\2 Sort\Downloads
O17 - DHCP DNS 1: 192.168.0.1
O22 - BITS Job: (download) {0BF2EBE1-6A8A-4054-BFD4-8A352337211A} - https://msftspeechmodelsprod.azureed...lsmetadata.xml → C:\ProgramData\Microsoft\Speech_OneCore\SR\SV10-EV100\en-US-N\MV101\naspmodelsmetadata.xml
O22 - BITS Job: Fix all (including legit)
O22 - Task: (disabled) \Agent Activation Runtime\S-1-5-21-1967272310-2130758927-3087818923-1001 - C:\WINDOWS\System32\AgentActivationRuntimeStarter. exe
O22 - Task: (disabled) \Microsoft\Windows\Management\Provisioning\Retry - C:\WINDOWS\system32\ProvTool.exe /turn 5 /source ProvRetryTask (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\Management\Provisioning\RunOnRe boot - C:\WINDOWS\system32\ProvTool.exe /turn 5 /source ContinueSessionTask (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\UpdateOrchestrator\Schedule Maintenance Work - C:\WINDOWS\system32\usoclient.exe StartMaintenanceWork (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\UpdateOrchestrator\Schedule Wake To Work - C:\WINDOWS\system32\usoclient.exe StartWork (Microsoft)
O22 - Task: (telemetry) \Microsoft\Windows\Application Experience\PcaPatchDbTask - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\PcaSvc.dll,PcaPatchSdbTask (Microsoft)
O22 - Task: (telemetry) NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe
O22 - Task: (telemetry) NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe
O22 - Task: (telemetry) NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe
O22 - Task: (telemetry) NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe
O22 - Task: \ASUS\ASUS AISuiteIII - C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe
O22 - Task: \ASUS\ASUS DIPAwayMode - C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
O22 - Task: \ASUS\ASUS Network iControl Help Execute - C:\Program Files (x86)\ASUS\AI Suite III\Network iControl\NetSvcHelp\NetSvcHelpEntry.exe -delay
O22 - Task: \ASUS\Ez Update - C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe -onlytray
O22 - Task: \ASUS\USB 3.0 Boost Service - C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr.exe
O22 - Task: \Mozilla\Firefox Background Update 308046B0AF4A39CB - C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump :5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundup date.moz_log --backgroundtask backgroundupdate
O22 - Task: \Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB - C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task “308046B0AF4A39CB”
O22 - Task: Adobe Flash Player NPAPI Notifier - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_ 0_0_344_Plugin.exe -check plugin
O22 - Task: GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
O22 - Task: GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
O22 - Task: NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -d “C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck” -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck .log
O22 - Task: NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe
O22 - Task: NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe --launcher=TaskScheduler
O22 - Task: NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
O22 - Task: NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
O22 - Task: OneDrive Per-Machine Standalone Update Task - C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe
O22 - Task: OneDrive Reporting Task-S-1-5-21-1967272310-2130758927-3087818923-1001 - C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe /reporting
O22 - Task: OneDrive Reporting Task-S-1-5-21-1967272310-2130758927-3087818923-1003 - C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe /reporting
O23 - Service R2: ASUS Com Service - (asComSvc) - C:\Program Files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe
O23 - Service R2: ASUS HM Com Service - (asHmComSvc) - C:\Program Files (x86)\ASUS\AAHM\1.00.16\aaHMSvc.exe
O23 - Service R2: AsusFanControlService - C:\Program Files (x86)\ASUS\AsusFanControlService\1.04.01\AsusFanCo ntrolService.exe
O23 - Service R2: ESET Service - (ekrn) - C:\Program Files\ESET\ESET Security\ekrn.exe
O23 - Service R2: Everything - C:\Program Files\Everything\Everything.exe -svc
O23 - Service R2: Gaming Services - (GamingServices) - C:\Program Files\WindowsApps\Microsoft.GamingServices_3.62.18 001.0_x64__8wekyb3d8bbwe\GamingServices.exe
O23 - Service R2: Gaming Services - (GamingServicesNet) - C:\Program Files\WindowsApps\Microsoft.GamingServices_3.62.18 001.0_x64__8wekyb3d8bbwe\GamingServicesNet.exe
O23 - Service R2: Malwarebytes Service - (MBAMService) - C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
O23 - Service R2: NordSec Update Service - (NordUpdaterService) - C:\Program Files\NordUpdater\NordUpdateService.exe
O23 - Service R2: nordvpn-service - C:\Program Files\NordVPN\nordvpn-service.exe
O23 - Service R2: NVIDIA Display Container LS - (NVDisplay.ContainerLocalSystem) - C:\WINDOWS\System32\DriverStore\FileRepository\nv_ dispig.inf_amd64_3b12ac0f95b18b9d\Display.NvContai ner\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSyst em.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_ dispig.inf_amd64_3b12ac0f95b18b9d\Display.NvContai ner\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
O23 - Service R2: NVIDIA LocalSystem Container - (NvContainerLocalSystem) - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -s NvContainerLocalSystem -a -f “C:\ProgramData\NVIDIA\NvContainerLocalSystem.log” -l 3 -d “C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem” -r -p 30000 -st “C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dl l”
O23 - Service R2: Origin Web Helper Service - C:\Program Files (x86)\Origin\OriginWebHelperService.exe
O23 - Service R3: ESET Firewall Helper - (ekrnEpfw) - C:\Program Files\ESET\ESET Security\ekrn.exe
O23 - Service R3: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS - (ICCS) - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service S2: Google Update Service (gupdate) - (gupdate) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc
O23 - Service S3: FileSyncHelper - C:\Program Files\Microsoft OneDrive\22.022.0130.0001\FileSyncHelper.exe
O23 - Service S3: Google Chrome Elevation Service (GoogleChromeElevationService) - (GoogleChromeElevationService) - C:\Program Files (x86)\Google\Chrome\Application\99.0.4844.51\eleva tion_service.exe
O23 - Service S3: Google Update Service (gupdatem) - (gupdatem) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc
O23 - Service S3: Mozilla Maintenance Service - (MozillaMaintenance) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service S3: NVIDIA FrameView SDK service - (FvSvc) - C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe -service
O23 - Service S3: OneDrive Updater Service - C:\Program Files\Microsoft OneDrive\22.022.0130.0001\OneDriveUpdaterService.e xe
O23 - Service S3: Origin Client Service - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service S3: Printer Extensions and Notifications - (PrintNotify) - C:\WINDOWS\system32\svchost.exe -k print; “ServiceDll” = C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfi g.dll
O23 - Service S3: Steam Client Service - C:\Program Files (x86)\Common Files\Steam\SteamService.exe /RunAsService

–
End of file - Time spent: 41.6 sec. - 34452 bytes, CRC32: FFFFFFFF. Sign: ⴂ[/spoiler]

**Malnutrition** · 03-12-2022, 02:13 AM

Download adwarecleaner
Save it to the desktop run as admin.
Go to setting tab and make sure these are all on.

==========================================

Turn on the following.

Delete IFEO Keys.
Delete Tracing Keys.
Delete Prefetch Files.
Reset Proxy.
Reset Chrome Policies.
Reset TCP/IP
Reset Hosts Files.
Reset Winsock
Reset IE Policies
Reset IPsec

Now go back to the dashboard, make a scan then when complete make certain everything is ticked.
Then click on Clean.
Then your machine should reboot.
Check the issue after the machine restarts.

================================================== ====================
Then tidy up the machine…

[ol]
[li]Download CCleaner from here.[/li][li]After installing click options.[/li][li]Go to monitoring.[/li][li]Uncheck all monitoring items.[/li][li]Go to advanced tab – Click close program after cleaning.[/li][li]Go to settings – Click run Ccleaner when the computer starts.[/li][li]Now that you have Ccleaner installed and set-up:[/li][li]Open the program.[/li][li]Go to Tools[/li][li]Go to Startup[/li][li]Now double click each item. To Disable.[/li][li]Leave only your antivirus enabled & the programs mentioned before.[/li][li]Then disable All items in your Scheduled Task as well.[/li][li]Unless they are related to Windows Defender – Or your Antivirus.[/li][/ol]

**PeterOz** · 03-12-2022, 08:41 PM

You have a problem with updates.
A lot of updates have failed and you have updates in progress.
The in progress updates could be causing issues as it is trying to update whilst you are gaming.

For testing can you uninstall your anti virus - Can be reinstalled later and turn of windows defender.
Go to updates in control panel and is if it will let you manually install updates. If it comes up with a troubleshooter, click on that
to run it.

**PeterOz** · 03-12-2022, 08:51 PM

Also your GPU updated the driver.
Can you roll back the driver?

**BobD** · 03-13-2022, 11:48 AM

Hi all.

I’ve followed the above instructions by Malnurished. My machine now idles (looking at performance monitor (PM)) at a lower level, between 0 and 10 %processor time. If i don’t touch the mouse the graph plotted in PM stays between 0 and 10 pretty much. However as soon as i start to do anything it still shoots up pretty fast i.e. i accidently hit f11 then f12 on this webpage and it shot up to 65. Anything i do causes the % processor power to spike!

I’ll try to rolling back the driver and uninstalling the nod32. I did initially uninstall some windows updates as thought that might be the issue but sadly i couldn’t roll back to far.

do you guys think it’s a software issue or do you think it could be a hardware issue? i know its only an educated guess as you are not actually on my machine.
I’ve made a donation as regardless if you manage to help nail the problem putting you’ve endevoured to give up free time to help me which is appriciated.

**Malnutrition** · 03-13-2022, 03:54 PM

Was there a lot of trash removed by the Adware Cleaner tool?

Depending what is found by this tool I can move this thread and clean up your machine a bit more, if you want.

ZHP Scan.
Please download Zhp Cleaner to your desktop. Right Click the icon and select run as administrator.
Once you have started the program, you will need to click the scanner button.
The program will close all open browsers!
Once the scan is completed, the you will want to click the Repair button.
At the end of the process you may be asked to reboot your machine.
After you reboot a report will open on your desktop.
Attach the report here in your next reply.

**Malnutrition** · 03-13-2022, 04:49 PM

Originally posted by BobD

uninstalling the nod32

Have you also run the ESET Removal Tool.?

**BobD** · 03-13-2022, 05:35 PM

I’ve not uninstalled nod yet, i will do though but if i end process nod the problem doesn’t go away. Its not just browsers that slow and freeze my machine, its any program i use on the pc. zhp file attached. to my untrained eye all looks ok i think. I have a 1tb ssd as my c drive, i only have a home version of win 10 but i could partition the drive and install 10 on it so the drive is a dual boot (of microsoft let me) then see if thats running ok?

**Malnutrition** · 03-13-2022, 05:40 PM

Try and remove Eset, ending the process will not totally cure the issue if it is caused by eset, drivers for the AV will still be loaded etc.

**BobD** · 03-14-2022, 08:47 PM

Hi.

I used the eset removal tool and removed nod. Sadly the problem still persists. I am guessing there’s prob not much else to try. Its an odd problem. When the computer is freezing in browsers the top of the browser quickly flashes white regularly, the thickness of to the bottom of a tab for a webpage but right along the top of the browser. And sometimes when i’m in any program say calc or any app with an exit button it sometimes flashes red like my mouse is hovering over it. I can sometimes see in task manager task suspended briefly (milliseconds) pops up on programs.

**Malnutrition** · 03-14-2022, 09:41 PM

There is a couple other things we can do, I’ll make a detailed reply when I get home.

**PeterOz** · 03-14-2022, 10:17 PM

After Malnutrition is finished if still problems.
Try a clean boot How to perform a clean boot in Windows - Microsoft Support

**Malnutrition** · 03-15-2022, 12:24 AM

Only as a test…

Block windows update.

Windows Update Blocker v1.8

https://www.sordum.org/9470/windows-update-blocker-v1-7/

In Windows There is no option to turn off Windows Updates. Windows Update Blocker is a tool that helps you to disable or enable Updates.

Then clean install your Graphics driver with DDU
Grab a fresh version of your graphics driver here.

Let me know how this goes.

Hi. PC has started to hit 100% constantly (even for browsing internet) leading to freezing up

Hi. PC has started to hit 100% constantly (even for browsing internet) leading to freezing up

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment