MiniToolBox by Farbar Version: 17-06-2016
Ran by Justin (administrator) on 19-03-2022 at 19:32:15
Running from "E:\Downloads\fixes"
Microsoft Windows 10 Pro (X64)
Model: B450M GAMING Manufacturer: Gigabyte Technology Co., Ltd.
Boot Mode: Normal
***************************************************************************
========================= Flush DNS: ===================================
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
========================= IE Proxy Settings: ==============================
Proxy is not enabled.
No Proxy Server is set.
"Reset IE Proxy Settings": IE Proxy Settings were reset.
========================= Hosts content: =================================
========================= IP Configuration: ================================
TP-Link Wireless USB Adapter = Wi-Fi (Connected)
Realtek Gaming GbE Family Controller = Ethernet (Media disconnected)
TAP-Surfshark Windows Adapter V9 = Ethernet 2 (Media disconnected)
# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4
reset
popd
# End of IPv4 configuration
Windows IP Configuration
Host Name . . . . . . . . . . . . : DESKTOP-IALRL26
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Ethernet:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek Gaming GbE Family Controller
Physical Address. . . . . . . . . : B4-2E-99-95-AD-CF
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Ethernet adapter Ethernet 2:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : TAP-Surfshark Windows Adapter V9
Physical Address. . . . . . . . . : 00-FF-8A-26-F7-7C
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Wireless LAN adapter Wi-Fi:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : TP-Link Wireless USB Adapter
Physical Address. . . . . . . . . : D0-37-45-73-AA-A5
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::84ab:12a5:a207:3ebf%16(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.43.48(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Saturday, 19 March 2022 7:25:22 PM
Lease Expires . . . . . . . . . . : Saturday, 19 March 2022 8:25:21 PM
Default Gateway . . . . . . . . . : 192.168.43.1
DHCP Server . . . . . . . . . . . : 192.168.43.1
DHCPv6 IAID . . . . . . . . . . . : 483407685
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-29-C4-3E-6D-B4-2E-99-95-AD-CF
DNS Servers . . . . . . . . . . . : 192.168.43.1
NetBIOS over Tcpip. . . . . . . . : Enabled
Server: UnKnown
Address: 192.168.43.1
Name: google.com
Addresses: 2404:6800:4006:810::200e
142.250.66.238
Pinging google.com [142.250.66.238] with 32 bytes of data:
Reply from 142.250.66.238: bytes=32 time=33ms TTL=112
Reply from 142.250.66.238: bytes=32 time=36ms TTL=112
Ping statistics for 142.250.66.238:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 33ms, Maximum = 36ms, Average = 34ms
Server: UnKnown
Address: 192.168.43.1
Name: yahoo.com
Addresses: 2001:4998:124:1507::f000
2001:4998:124:1507::f001
2001:4998:24:120d::1:0
2001:4998:44:3507::8000
2001:4998:24:120d::1:1
2001:4998:44:3507::8001
74.6.143.26
98.137.11.164
74.6.143.25
98.137.11.163
74.6.231.20
74.6.231.21
Pinging yahoo.com [74.6.231.21] with 32 bytes of data:
Reply from 74.6.231.21: bytes=32 time=305ms TTL=41
Reply from 74.6.231.21: bytes=32 time=255ms TTL=41
Ping statistics for 74.6.231.21:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 255ms, Maximum = 305ms, Average = 280ms
Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Reply from 127.0.0.1: bytes=32 time<1ms TTL=128
Ping statistics for 127.0.0.1:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
===========================================================================
Interface List
6...b4 2e 99 95 ad cf ......Realtek Gaming GbE Family Controller
10...00 ff 8a 26 f7 7c ......TAP-Surfshark Windows Adapter V9
16...d0 37 45 73 aa a5 ......TP-Link Wireless USB Adapter
1...........................Software Loopback Interface 1
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.43.1 192.168.43.48 51
127.0.0.0 255.0.0.0 On-link 127.0.0.1 331
127.0.0.1 255.255.255.255 On-link 127.0.0.1 331
127.255.255.255 255.255.255.255 On-link 127.0.0.1 331
192.168.43.0 255.255.255.0 On-link 192.168.43.48 306
192.168.43.48 255.255.255.255 On-link 192.168.43.48 306
192.168.43.255 255.255.255.255 On-link 192.168.43.48 306
224.0.0.0 240.0.0.0 On-link 127.0.0.1 331
224.0.0.0 240.0.0.0 On-link 192.168.43.48 306
255.255.255.255 255.255.255.255 On-link 127.0.0.1 331
255.255.255.255 255.255.255.255 On-link 192.168.43.48 306
===========================================================================
Persistent Routes:
None
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 331 ::1/128 On-link
16 306 fe80::/64 On-link
16 306 fe80::84ab:12a5:a207:3ebf/128
On-link
1 331 ff00::/8 On-link
16 306 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
========================= Winsock entries =====================================
Catalog5 01 C:\WINDOWS\SysWOW64\napinsp.dll [54784] (Microsoft Corporation)
Catalog5 02 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70656] (Microsoft Corporation)
Catalog5 03 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70656] (Microsoft Corporation)
Catalog5 04 C:\WINDOWS\SysWOW64\NLAapi.dll [71168] (Microsoft Corporation)
Catalog5 05 C:\WINDOWS\SysWOW64\wshbth.dll [50688] (Microsoft Corporation)
Catalog5 06 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog5 07 C:\WINDOWS\SysWOW64\winrnr.dll [34304] (Microsoft Corporation)
Catalog9 01 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 02 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 03 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 04 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 05 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 06 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 07 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 08 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 09 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 10 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 11 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 12 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 13 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
Catalog9 14 C:\WINDOWS\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\napinsp.dll [70144] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\pnrpnsp.dll [89088] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [89088] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\NLAapi.dll [97280] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\wshbth.dll [64000] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog5 07 C:\Windows\System32\winrnr.dll [49152] (Microsoft Corporation)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 11 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 12 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 13 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
x64-Catalog9 14 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)
========================= Event log errors: ===============================
Application errors:
==================
Error: (03/19/2022 07:09:13 PM) (Source: RasClient) (User: )
Description: CoId={BF2D5834-EFB7-40B8-89C5-3874AA704DB3}: The user DESKTOP-IALRL26\Justin dialed a connection named which has failed. The error code returned on failure is 633.
Error: (03/19/2022 07:06:39 PM) (Source: RasClient) (User: )
Description: CoId={8741119E-FCFF-4C83-83A7-F72D1724B839}: The user DESKTOP-IALRL26\Justin dialed a connection named which has failed. The error code returned on failure is 633.
Error: (03/19/2022 07:04:34 PM) (Source: RasClient) (User: )
Description: CoId={A3AD0CCD-29BB-451F-9E7E-D499D75319C1}: The user DESKTOP-IALRL26\Justin dialed a connection named which has failed. The error code returned on failure is 633.
Error: (03/19/2022 02:44:52 PM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, A system shutdown is in progress.
.
Error: (03/19/2022 02:44:52 PM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.
]
Error: (03/19/2022 01:58:17 PM) (Source: MsiInstaller) (User: DESKTOP-IALRL26)
Description: Product: Windows SDK for Windows Store Apps DirectX x64 Remote -- Error 1310. Error writing to file: C:\WINDOWS\system32\DXGIDebug.dll. System error 0. Verify that you have access to that directory.
Error: (03/19/2022 09:26:49 AM) (Source: RasClient) (User: )
Description: CoId={2CED4987-3A4B-0005-2E24-EE2C4B3AD801}: The user DESKTOP-IALRL26\Justin dialed a connection named IKEv2-Surfshark Connection which has failed. The error code returned on failure is 868.
Error: (03/18/2022 07:22:01 PM) (Source: RasClient) (User: )
Description: CoId={D3D5CC89-B83D-426F-AEB5-CA8A5C14B6FB}: The user SYSTEM dialed a connection named IKEv2-Surfshark Connection which has failed. The error code returned on failure is 0.
Error: (03/18/2022 05:38:49 PM) (Source: Application Error) (User: )
Description: Faulting application name: FileZilla_3.47.2.1_win64_sponsored-setup.exe, version: 3.47.2.1, time stamp: 0x5c157f24
Faulting module name: KERNELBASE.dll, version: 10.0.19041.1415, time stamp: 0x2791d798
Exception code: 0x0eedfade
Fault offset: 0x0012b522
Faulting process id: 0x2318
Faulting application start time: 0xFileZilla_3.47.2.1_win64_sponsored-setup.exe0
Faulting application path: FileZilla_3.47.2.1_win64_sponsored-setup.exe1
Faulting module path: FileZilla_3.47.2.1_win64_sponsored-setup.exe2
Report Id: FileZilla_3.47.2.1_win64_sponsored-setup.exe3
Faulting package full name: FileZilla_3.47.2.1_win64_sponsored-setup.exe4
Faulting package-relative application ID: FileZilla_3.47.2.1_win64_sponsored-setup.exe5
Error: (03/18/2022 05:38:47 PM) (Source: Application Error) (User: )
Description: Faulting application name: FileZilla_3.47.2.1_win64_sponsored-setup.exe, version: 3.47.2.1, time stamp: 0x5c157f24
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc00001a5
Fault offset: 0x09fc6d2f
Faulting process id: 0x2318
Faulting application start time: 0xFileZilla_3.47.2.1_win64_sponsored-setup.exe0
Faulting application path: FileZilla_3.47.2.1_win64_sponsored-setup.exe1
Faulting module path: FileZilla_3.47.2.1_win64_sponsored-setup.exe2
Report Id: FileZilla_3.47.2.1_win64_sponsored-setup.exe3
Faulting package full name: FileZilla_3.47.2.1_win64_sponsored-setup.exe4
Faulting package-relative application ID: FileZilla_3.47.2.1_win64_sponsored-setup.exe5
System errors:
=============
Error: (03/19/2022 07:24:37 PM) (Source: DCOM) (User: DESKTOP-IALRL26)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Error: (03/19/2022 07:24:37 PM) (Source: DCOM) (User: DESKTOP-IALRL26)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Error: (03/19/2022 07:24:36 PM) (Source: DCOM) (User: DESKTOP-IALRL26)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Error: (03/19/2022 07:24:36 PM) (Source: DCOM) (User: DESKTOP-IALRL26)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Error: (03/19/2022 07:24:36 PM) (Source: DCOM) (User: DESKTOP-IALRL26)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Error: (03/19/2022 07:24:36 PM) (Source: DCOM) (User: DESKTOP-IALRL26)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Error: (03/19/2022 07:24:36 PM) (Source: DCOM) (User: DESKTOP-IALRL26)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Error: (03/19/2022 07:24:36 PM) (Source: DCOM) (User: DESKTOP-IALRL26)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Error: (03/19/2022 07:24:36 PM) (Source: DCOM) (User: DESKTOP-IALRL26)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Error: (03/19/2022 07:24:36 PM) (Source: DCOM) (User: DESKTOP-IALRL26)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Microsoft Office Sessions:
=========================
Error: (03/19/2022 07:09:13 PM) (Source: RasClient)(User: )
Description: {BF2D5834-EFB7-40B8-89C5-3874AA704DB3}DESKTOP-IALRL26\Justin633
Error: (03/19/2022 07:06:39 PM) (Source: RasClient)(User: )
Description: {8741119E-FCFF-4C83-83A7-F72D1724B839}DESKTOP-IALRL26\Justin633
Error: (03/19/2022 07:04:34 PM) (Source: RasClient)(User: )
Description: {A3AD0CCD-29BB-451F-9E7E-D499D75319C1}DESKTOP-IALRL26\Justin633
Error: (03/19/2022 02:44:52 PM) (Source: VSS)(User: )
Description: CoCreateInstance0x8007045b, A system shutdown is in progress.
Error: (03/19/2022 02:44:52 PM) (Source: VSS)(User: )
Description: {4e14fba2-2e22-11d1-9964-00c04fbbb345}CEventSystem0x8007045b, A system shutdown is in progress.
Error: (03/19/2022 01:58:17 PM) (Source: MsiInstaller)(User: DESKTOP-IALRL26)
Description: Product: Windows SDK for Windows Store Apps DirectX x64 Remote -- Error 1310. Error writing to file: C:\WINDOWS\system32\DXGIDebug.dll. System error 0. Verify that you have access to that directory.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (03/19/2022 09:26:49 AM) (Source: RasClient)(User: )
Description: {2CED4987-3A4B-0005-2E24-EE2C4B3AD801}DESKTOP-IALRL26\JustinIKEv2-Surfshark Connection868
Error: (03/18/2022 07:22:01 PM) (Source: RasClient)(User: )
Description: {D3D5CC89-B83D-426F-AEB5-CA8A5C14B6FB}SYSTEMIKEv2-Surfshark Connection0
Error: (03/18/2022 05:38:49 PM) (Source: Application Error)(User: )
Description: FileZilla_3.47.2.1_win64_sponsored-setup.exe3.47.2.15c157f24KERNELBASE.dll10.0.19041.14152791d7980eedfade0012b522231801d83a92cd4cec1aH:\Backups\Computer Stuff\Programs\FileZilla_3.47.2.1_win64_sponsored-setup.exeC:\WINDOWS\System32\KERNELBASE.dllf32a3692-ba0b-46c7-be6e-ed0872dd971e
Error: (03/18/2022 05:38:47 PM) (Source: Application Error)(User: )
Description: FileZilla_3.47.2.1_win64_sponsored-setup.exe3.47.2.15c157f24unknown0.0.0.000000000c00001a509fc6d2f231801d83a92cd4cec1aH:\Backups\Computer Stuff\Programs\FileZilla_3.47.2.1_win64_sponsored-setup.exeunknownf40b249f-8159-4e2b-be06-47d9885b4ef3
=========================== Installed Programs ============================
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 5.6.5.58 - Adobe Inc.)
Adobe Photoshop 2022 (HKLM-x32\...\PHSP_23_2_2) (Version: 23.2.2.325 - Adobe Inc.)
Advanced Renamer (HKLM-x32\...\Advanced Renamer_is1) (Version: 3.80 - Hulubulu Software)
AnyDVD (HKLM-x32\...\AnyDVD) (Version: 8.6.0.0 - RedFox)
Application Verifier x64 External Package (HKLM\...\{D9908CED-5ABB-FEE9-FC84-743F4D38637C}) (Version: 10.1.16299.15 - Microsoft) Hidden
Discord (HKCU\...\Discord) (Version: 1.0.9004 - Discord Inc.)
Driver Booster 9 (HKLM-x32\...\Driver Booster_is1) (Version: 9.2.0 - IObit)
Folder Size Explorer (HKLM-x32\...\{CD453A88-D560-47A2-9D4D-414134F5A73D}) (Version: 2.0.0 - Bazwise)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 99.0.4844.74 - Google LLC)
Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: 6.40.8 - Tonec Inc.)
Kits Configuration Installer (HKLM-x32\...\{86E59C8F-61D5-1782-A3CE-60AE7E4D7791}) (Version: 10.1.16299.15 - Microsoft) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 99.0.1150.46 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.155.85 - )
Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 22.033.0213.0002 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.29.30139 (HKLM-x32\...\{2c673fb6-3e65-4751-965d-33d30b68a8a6}) (Version: 14.29.30139.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.29.30139 (HKLM-x32\...\{8d5fdf81-7022-423f-bd8b-b513a1050ae1}) (Version: 14.29.30139.0 - Microsoft Corporation)
Microsoft Visual Studio Installer (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 2.11.63.5026 - Microsoft Corporation)
MSI Development Tools (HKLM-x32\...\{973CACA2-E018-065B-0580-F2784802E299}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9071.1 - Realtek Semiconductor Corp.)
SDK ARM Additions (HKLM-x32\...\{7922BB77-0B59-840A-AC80-D560A34D75C5}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
SDK ARM Redistributables (HKLM-x32\...\{C87DF65C-A672-7E08-A083-E7D48FE8DB70}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform)
Surfshark (HKLM-x32\...\{7DE31F91-EAE8-4282-A766-8808055D9CF6}) (Version: 3.4.2999 - Surfshark) Hidden
Surfshark (HKLM-x32\...\Surfshark 3.4.2999) (Version: 3.4.2999 - Surfshark)
Surfshark TAP Driver Windows (HKLM-x32\...\{89D7A33D-E328-41BA-BEA9-5A03C49DF758}) (Version: 1.0 - Surfshark)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.14.1 - Synaptics Incorporated)
Technitium MAC Address Changer v6.0 (HKLM-x32\...\TMACv6.0) (Version: 6.0 - Technitium)
Unity 2020.3.31f1 (HKLM-x32\...\Unity 2020.3.31f1) (Version: 2020.3.31f1 - Unity Technologies ApS)
Unity 2021.2.2f1 (HKLM-x32\...\Unity 2021.2.2f1) (Version: 2021.2.2f1 - Unity Technologies ApS)
Unity Hub 3.0.1 (HKLM\...\Unity Technologies - Hub) (Version: 3.0.1 - Unity Technologies Inc.)
Universal CRT Extension SDK (HKLM-x32\...\{A5FA2886-1925-133F-0D41-B9A8ECEA0A2D}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (HKLM-x32\...\{B739B4C5-EEEC-8E70-0276-38C4779AF398}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
Universal CRT Redistributable (HKLM-x32\...\{A9D6F52C-694E-3E41-7AB8-5BEB644742A5}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
Universal CRT Tools x64 (HKLM\...\{E053089E-7953-3219-814F-F485FC151C54}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
Universal CRT Tools x86 (HKLM-x32\...\{B9424F08-0617-C4F6-A798-5A9250C1A738}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (HKLM-x32\...\{D261CEA1-AB8D-9CFA-4407-BCEFC78661AC}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
UXP WebView Support (HKLM-x32\...\UXPW_1_1_0) (Version: 1.1.0 - Adobe Inc.)
vcpp_crt.redist.clickonce (HKLM-x32\...\{09184AC0-ACEE-44D5-95F2-05EE6D27A5E8}) (Version: 14.29.30139 - Microsoft Corporation) Hidden
Visual Studio Community 2019 (HKLM-x32\...\3a8540ce) (Version: 16.11.11 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.9 - VideoLAN)
VS Script Debugging Common (HKLM\...\{A4272808-82F5-410F-A5F9-1BF6F63F6B9A}) (Version: 16.0.102.0 - Microsoft Corporation) Hidden
vs_communitymsi (HKLM-x32\...\{5C127D2C-BC0B-44B8-A1A5-34E9E7A116FC}) (Version: 16.11.31911 - Microsoft Corporation) Hidden
vs_communitymsires (HKLM-x32\...\{3751D1CF-9A44-43D2-B4BB-80FA6E7925A8}) (Version: 16.10.31213 - Microsoft Corporation) Hidden
vs_devenvmsi (HKLM-x32\...\{AD0C92A4-1514-4BC1-A723-A272A8343924}) (Version: 16.0.28329 - Microsoft Corporation) Hidden
vs_filehandler_amd64 (HKLM-x32\...\{102E83BD-B6A0-4C74-AD22-7D594A3435D3}) (Version: 16.11.31503 - Microsoft Corporation) Hidden
vs_filehandler_x86 (HKLM-x32\...\{6CBDE7BE-E956-4E0E-81FB-2CB79190C924}) (Version: 16.11.31503 - Microsoft Corporation) Hidden
vs_FileTracker_Singleton (HKLM-x32\...\{05CA3463-0B45-425D-9AF2-E1964AB85CBB}) (Version: 16.10.31303 - Microsoft Corporation) Hidden
vs_minshellinteropmsi (HKLM-x32\...\{883D29E5-9A41-4C45-A192-C10B8078BF0C}) (Version: 16.10.31306 - Microsoft Corporation) Hidden
vs_minshellmsi (HKLM-x32\...\{53D1C36A-E35A-45B3-801B-F49BDD425293}) (Version: 16.11.31503 - Microsoft Corporation) Hidden
vs_minshellmsires (HKLM-x32\...\{0916C6E1-6A0A-4887-9E00-D96FD44AFACE}) (Version: 16.10.31303 - Microsoft Corporation) Hidden
vs_tipsmsi (HKLM-x32\...\{E208E682-50EE-4F2F-9860-C91B906B8A03}) (Version: 16.0.28329 - Microsoft Corporation) Hidden
WinAppDeploy (HKLM-x32\...\{9690D51C-4435-1C20-7819-66CCAB0F03F9}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
Windows SDK AddOn (HKLM-x32\...\{350F0ECD-0783-4529-8797-98F0AD33EAC0}) (Version: 10.1.0.0 - Microsoft Corporation)
Windows Software Development Kit - Windows 10.0.16299.15 (HKLM-x32\...\{6195c203-b53c-4bb7-983a-6070a902e704}) (Version: 10.1.16299.15 - Microsoft Corporation)
WinRAR 5.90 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.90.0 - win.rar GmbH)
WinRT Intellisense Desktop - en-us (HKLM-x32\...\{385A1387-A488-9E90-3635-086129610034}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{D7DD3171-DA58-52A1-95B2-4769640855AF}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (HKLM-x32\...\{7336279F-8F8F-5530-A543-3BE963846C0A}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{E414A474-0A87-4F66-C409-A4D9857CFD34}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
WinRT Intellisense Mobile - en-us (HKLM-x32\...\{CE760B86-975B-F514-5673-0ED4332B801B}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (HKLM-x32\...\{5E67F8BE-D8D2-257F-CE19-419A2D5125C7}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{A2AA063E-AF50-A1F5-8925-A06EB1556644}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (HKLM-x32\...\{7D4C7F4A-02A9-E434-6451-C8787DF28C1F}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{BC467065-9374-5345-DA3F-FCF073304A25}) (Version: 10.1.16299.15 - Microsoft Corporation) Hidden
========================= Devices: ================================
Name: Microsoft Wi-Fi Direct Virtual Adapter
Description: Microsoft Wi-Fi Direct Virtual Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vwifimp
Device ID: {5D624F94-8850-40C3-A3FA-A4FD2080BAF3}\VWIFIMP_WFD\7&32C14CA8&4&18
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
========================= Memory info: ===================================
Percentage of memory in use: 27%
Total physical RAM: 16332.48 MB
Available physical RAM: 11882.93 MB
Total Virtual: 19276.48 MB
Available Virtual: 12670.95 MB
========================= Partitions: =====================================
1 Drive c: () (Fixed) (Total:232.32 GB) (Free:160.43 GB) NTFS
2 Drive d: (She wants the ) (Fixed) (Total:931.51 GB) (Free:334.63 GB) NTFS
3 Drive e: (Media) (Fixed) (Total:931.51 GB) (Free:456.63 GB) NTFS
4 Drive f: (Fist of the North Star TV3) (CDROM) (Total:43.46 GB) (Free:0 GB) UDF
========================= Users: ========================================
User accounts for \\DESKTOP-IALRL26
Administrator DefaultAccount Guest
Justin JustinTest WDAGUtilityAccount
**** End of log ****[code]
[B][COLOR=rgb(84, 172, 210)]SecurityCheck Log[/COLOR][/B]
[spoiler] SecurityCheck by glax24 & Severnyj v.1.4.0.54 [06.12.21]
WebSite: [URL='http://www.safezone.cc']www.safezone.cc[/URL]
DateLog: 19.03.2022 19:34:01
Path starting: C:\Users\Justin\AppData\Local\Temp\SecurityCheck\SecurityCheck.exe
Log directory: C:\SecurityCheck\
IsAdmin: True
User: Justin
VersionXML: 9.58is-08.03.2022
___________________________________________________________________________
Windows 10(6.3.19042) (x64) Professional Release: 2009 Lang: English(0409)
Installation date OS: 17.03.2022 00:48:06
LicenseStatus: Windows(R), Professional edition The machine is permanently activated.
Boot Mode: Normal
Default Browser: C:\Program Files\Google\Chrome\Application\chrome.exe
SystemDrive: C: FS: [NTFS] Capacity: [232.3 Gb] Used: [71.9 Gb] Free: [160.4 Gb]
------------------------------- [ Windows ] -------------------------------
Internet Explorer 11.789.19041.0
User Account Control [B]enabled[/B] (Level 3)
Security Center (wscsvc) - The service is running
Remote Registry (RemoteRegistry) - The service has stopped
SSDP Discovery (SSDPSRV) - The service is running
Remote Desktop Services (TermService) - The service has stopped
Windows Remote Management (WS-Management) (WinRM) - The service has stopped
---------------------------- [ Antivirus_WMI ] ----------------------------
Windows Defender (enabled and up to date)
--------------------------- [ FirewallWindows ] ---------------------------
Windows Defender Firewall (mpssvc) - The service is running
------------------------------- [ Backup ] --------------------------------
Microsoft OneDrive v.22.033.0213.0002 [B][+][/B]
------------------------------ [ ArchAndFM ] ------------------------------
WinRAR 5.90 (64-bit) v.5.90.0 [COLOR=red][B]Warning! [URL='https://www.rarlab.com/download.htm']Download Update[/URL][/B][/COLOR]
-------------------------- [ IMAndCollaborate ] ---------------------------
Discord v.1.0.9004
-------------------------------- [ Media ] --------------------------------
VLC media player v.3.0.9 [COLOR=red][B]Warning! [URL='https://www.videolan.org/vlc/download-windows.html']Download Update[/URL][/B][/COLOR]
--------------------------- [ AdobeProduction ] ---------------------------
Adobe Creative Cloud v.5.6.5.58
------------------------------- [ Browser ] -------------------------------
Google Chrome v.99.0.4844.74 [B][+][/B]
Microsoft Edge v.99.0.1150.46 [B][+][/B]
------------------ [ AntivirusFirewallProcessServices ] -------------------
C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MsMpEng.exe v.4.18.2202.4
C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\NisSrv.exe v.4.18.2202.4
Microsoft Defender Antivirus Service (WinDefend) - The service is running
Microsoft Defender Antivirus Network Inspection Service (WdNisSvc) - The service is running
---------------------------- [ UnwantedApps ] -----------------------------
Driver Booster 9 v.9.2.0 [B]Warning![/B] Suspected demo version of anti-spyware, driver updater or [URL='https://support.microsoft.com/en-us/help/2563254/microsoft-support-policy-for-the-use-of-registry-cleaning-utilities']optimizer[/URL]. If this program is not familiar to you it is recommended to uninstall it and execute PC scanning using [URL='https://www.malwarebytes.org/mwb-download/']Malwarebytes Anti-Malware[/URL]. Possible you became a victim of fraud or social engineering. Computer experts no longer recommend this program.
----------------------------- [ End of Log ] ------------------------------ [/spoiler]
[B][COLOR=rgb(84, 172, 210)]HiJackThis[/COLOR][/B]
Logfile of HiJackThis Fork by Alex Dragokas v.2.10.0.16
Platform: x64 Windows 10 (Pro), 10.0.19042.1586 (ReleaseId: 2009, 20H2), Service Pack: 0
Time: 19.03.2022 - 19:36 (UTC+11:00)
Language: OS: English (0x409). Display: English (0x409). Non-Unicode: English (0x409)
Elevated: Yes
Ran by: Justin (group: Administrators) on DESKTOP-IALRL26, FirstRun: yes
Chrome: 99.0.4844.74
Internet Explorer: 11.0.19041.1566
Default: "C:\Program Files\Google\Chrome\Application\chrome.exe" --single-argument %1 (Google Chrome)
Boot mode: Normal
Running processes:
Number | Path
1 C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
1 C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
1 C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
1 C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
1 C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
1 C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler.exe
1 C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler64.exe
1 C:\Program Files (x86)\Internet Download Manager\IDMan.exe
2 C:\Program Files (x86)\Surfshark\Resources\x64\nssm.exe
1 C:\Program Files (x86)\Surfshark\Surfshark.AntivirusService.exe
1 C:\Program Files (x86)\Surfshark\Surfshark.exe
1 C:\Program Files (x86)\Surfshark\Surfshark.Service.exe
1 C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
1 C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
2 C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud Helper.exe
1 C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
2 C:\Program Files\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
1 C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\CCLibrary.exe
1 C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\libs\node.exe
14 C:\Program Files\Google\Chrome\Application\chrome.exe
1 C:\Program Files\WindowsApps\AdobeNotificationClient_2.0.1.8_x86__enpm4xejd91yc\AdobeNotificationClient.exe
1 C:\Program Files\WindowsApps\AppleInc.iTunes_12123.5.56009.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe
1 C:\Program Files\WindowsApps\microsoft.yourphone_1.22012.167.0_x64__8wekyb3d8bbwe\YourPhone.exe
1 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MsMpEng.exe
1 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\NisSrv.exe
6 C:\Users\Justin\AppData\Local\Discord\app-1.0.9004\Discord.exe
1 C:\Windows\explorer.exe
1 C:\Windows\ImmersiveControlPanel\SystemSettings.exe
1 C:\Windows\System32\ApplicationFrameHost.exe
1 C:\Windows\System32\audiodg.exe
5 C:\Windows\System32\conhost.exe
2 C:\Windows\System32\csrss.exe
1 C:\Windows\System32\ctfmon.exe
1 C:\Windows\System32\dasHost.exe
2 C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_3b12ac0f95b18b9d\Display.NvContainer\NVDisplay.Container.exe
1 C:\Windows\System32\dwm.exe
2 C:\Windows\System32\fontdrvhost.exe
1 C:\Windows\System32\lsass.exe
1 C:\Windows\System32\notepad.exe
1 C:\Windows\System32\oobe\UserOOBEBroker.exe
2 C:\Windows\System32\RtkAudUService64.exe
6 C:\Windows\System32\RuntimeBroker.exe
1 C:\Windows\System32\SearchFilterHost.exe
1 C:\Windows\System32\SearchIndexer.exe
1 C:\Windows\System32\SearchProtocolHost.exe
1 C:\Windows\System32\SecurityHealthService.exe
1 C:\Windows\System32\SecurityHealthSystray.exe
1 C:\Windows\System32\services.exe
1 C:\Windows\System32\SettingSyncHost.exe
1 C:\Windows\System32\SgrmBroker.exe
1 C:\Windows\System32\sihost.exe
1 C:\Windows\System32\smartscreen.exe
1 C:\Windows\System32\smss.exe
1 C:\Windows\System32\spoolsv.exe
75 C:\Windows\System32\svchost.exe
1 C:\Windows\System32\taskhostw.exe
2 C:\Windows\System32\wbem\WmiPrvSE.exe
1 C:\Windows\System32\wininit.exe
1 C:\Windows\System32\winlogon.exe
1 C:\Windows\System32\WUDFHost.exe
1 C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
1 C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
1 C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
1 C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
1 D:\Program Files (x86)\RedFox\AnyDVD\ADvdDiscHlp64.exe
1 D:\Program Files (x86)\RedFox\AnyDVD\AnyDVDtray.exe
1 E:\Downloads\fixes\HiJackThis\HiJackThis.exe
O2 - HKLM\..\BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll
O2-32 - HKLM\..\BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
O4 - HKCU\..\Run: [AnyDVD] = D:\Program Files (x86)\RedFox\AnyDVD\AnyDVDtray.exe
O4 - HKCU\..\Run: [Discord] = C:\Users\Justin\AppData\Local\Discord\Update.exe --processStart Discord.exe
O4 - HKCU\..\Run: [IDMan] = C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [Surfshark] = C:\Program Files (x86)\Surfshark\Surfshark.exe
O4 - HKCU\..\RunOnce: [Application Restart #0] = C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe --mode=CCDI --lbsWorkflowID={CDF74A97-41E5-4B07-8BAB-050821DA6D97} --lbsInstallerWorkflowID={AFFC8676-E006-4886-BD50-DFFB8D9E55F9} --skipCCDUpdate=true --helperBridgeName={645FB6D6-1DEA-42B0-A099-7E353E2C38A4} --appletID=AppsPanel_BL --appletVersion=1.0 --inputXmlPath="C:\Users\Justin\AppData\Local\Temp\productInfo.xml" /RestartByRestartManager:B42D06F7-E0D0-487c-99F3-1166F52EA813
O4 - HKLM\..\Run: [RtkAudUService] = C:\WINDOWS\System32\RtkAudUService64.exe -background
O4 - HKLM\..\Run: [SynTPEnh] = C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (file missing)
O4-32 - HKLM\..\Run: [Adobe CCXProcess] = C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
O4-32 - HKLM\..\Run: [Adobe Creative Cloud] = C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --showwindow=false --onOSstartup=true
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt\Download with IDM: (default) = C:\Program Files (x86)\Internet Download Manager\IEExt.htm
O17 - DHCP DNS 1: 192.168.43.1
O21 - HKLM\..\ShellIconOverlayIdentifiers\ - C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\ - C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll
O22 - BITS Job: (download) {333940FC-2A25-4EB1-8D27-54A62FB531D1} - [URL]http://redirector.gvt1.com/edgedl/release2/chrome_component/AIZk8O7Cv2UUbxc_aaUykKI_7/ALzUVHP-vRgKCzqwbtGugSE[/URL] -> C:\Users\Justin\AppData\Local\Temp\chrome_BITS_3820_1717949192\ALzUVHP-vRgKCzqwbtGugSE
O22 - BITS Job: (download) {773CE617-3D7E-4F52-93FB-3C051292914E} - [URL]https://oneclient.sfx.ms/Win/Prod/22.033.0213.0002/amd64/OneDriveSetup.exe[/URL] -> C:\Users\Justin\AppData\Local\Temp\wct3464.tmp
O22 - BITS Job: Fix all (including legit)
O22 - Task: (disabled) \Microsoft\Windows\Management\Provisioning\Retry - C:\WINDOWS\system32\ProvTool.exe /turn 5 /source ProvRetryTask (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\Management\Provisioning\RunOnReboot - C:\WINDOWS\system32\ProvTool.exe /turn 5 /source ContinueSessionTask (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\UpdateOrchestrator\Schedule Maintenance Work - C:\WINDOWS\system32\usoclient.exe StartMaintenanceWork (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\UpdateOrchestrator\Schedule Wake To Work - C:\WINDOWS\system32\usoclient.exe StartWork (Microsoft)
O22 - Task: (telemetry) \Microsoft\Windows\Application Experience\PcaPatchDbTask - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\PcaSvc.dll,PcaPatchSdbTask (Microsoft)
O22 - Task: Driver Booster SkipUAC (Justin) - C:\Program Files (x86)\IObit\Driver Booster\9.2.0\DriverBooster.exe /skipuac
O22 - Task: Driver Booster Update - C:\Program Files (x86)\IObit\Driver Booster\9.2.0\AutoUpdate.exe /auto
O22 - Task: GoogleUpdateTaskMachineCore{80DCF47E-F4D4-4A25-9C0D-A2247ACB9F16} - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
O22 - Task: GoogleUpdateTaskMachineUA{E50715B0-4234-4D43-98E2-7DEAC45B6113} - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
O22 - Task: OneDrive Reporting Task-S-1-5-21-4050284646-605892952-3495361721-1001 - C:\Users\Justin\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe /reporting
O22 - Task: OneDrive Reporting Task-S-1-5-21-4050284646-605892952-3495361721-1002 - C:\Users\Justin\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe /reporting
O22 - Task: PostponeDeviceSetupToast_S-1-5-21-4050284646-605892952-3495361721-1001_0 - {5ded83ef-1e99-48cf-bf83-676d2a6db408},PostponeDeviceSetupToast - C:\Windows\System32\oobe\UserOOBE.dll
O23 - Service R2: AdobeUpdateService - C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
O23 - Service R2: NVIDIA Display Container LS - (NVDisplay.ContainerLocalSystem) - C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_3b12ac0f95b18b9d\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_3b12ac0f95b18b9d\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
O23 - Service R2: Realtek Audio Universal Service - (RtkAudioUniversalService) - C:\WINDOWS\System32\RtkAudUService64.exe
O23 - Service R2: Surfshark Antivirus - C:\Program Files (x86)\Surfshark\Resources\x64\nssm.exe
O23 - Service R2: Surfshark Service - C:\Program Files (x86)\Surfshark\Resources\x64\nssm.exe
O23 - Service S2: Google Update Service (gupdate) - (gupdate) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc
O23 - Service S3: Google Chrome Elevation Service (GoogleChromeElevationService) - (GoogleChromeElevationService) - C:\Program Files\Google\Chrome\Application\99.0.4844.74\elevation_service.exe
O23 - Service S3: Google Update Service (gupdatem) - (gupdatem) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc
O23 - Service S3: SAMSUNG Mobile USB Connectivity Launcher - (ss_conn_launcher_service) - C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe
O23 - Service S3: Te.Service - C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\Wex.Services.exe
--
End of file - Time spent: 11.8 sec. - 21984 bytes, CRC32: FFFFFFFF. Sign: 縼ӭ
Thanks for all your help :)