BSOD

[Exyztence]

Hello!
I had a thread in this forum before and Phill helped me. We did not come to any solution and the BSODs ended by themselves. After a while, they returned, but they were very sporadic, literally once a week. Unfortunately, they are quite common now. 90% of the time, BSOD occurs when I'm not using my computer and I'm idle. Every time the error is DPC_watchdog_violation. For example, today my computer restarted 4 times. A month ago I was doing a memtest for 10h because I left it overnight and there were no problems. I also know that my current RGB keyboard was flooded 3 times. Once, it didn't work for 2 days and then it started. Could the BSOD be caused by it and is it causing a short circuit? When I look at minidump in windbg it is often "usbxhci" so I don't know if it has any connection with USB port. In the attachment is minidump from today with. (with error of usbxhci)
Greetings,
Oliwer.

 

[phillpower2]

Hello again Oliwer,

I also know that my current RGB keyboard was flooded 3 times. Once, it didn't work for 2 days and then it started. Could the BSOD be caused by it and is it causing a short circuit?

Could using a faulty keyboard cause a BSOD, most unlikely, could it cause a short circuit, most definitely, a keyboard may only use a miniscule amount of charge but even just connecting or disconnecting a perfectly good USB keyboard could short out a computer if there happens to be any moisture whatsoever present.

Every time the error is DPC_watchdog_violation. For example, today my computer restarted 4 times.

There is only the one crash dmp so the computer restarting four times points towards a hardware issue, this includes something overheating or a weak PSU.

We need an up to date Speccy url to begin with so hold off on uninstalling and reinstalling any drivers until we get back to you, driver info below.

USBXHCI.sys

Wdf01000.sys

 

[Exyztence]

Hi!
Thank you for your response.
I forgot to zip 3 other minidumps, sorry. They are in the attachment. Also below is a Speccy url.
Greetings,
Oliwer.

http://speccy.piriform.com/results/DAatJagK8LgcEUDaN5hq23R

 

[phillpower2]

You have various issues going on and I`m afraid to say that the crashes above and your Speccy info show that the issues are self created which explains why things were ok but then went bad

You have incompatible RAM for your i9 9900K CPU which requires a minimum of DDR4-2666MHz, specs here you have two sticks of 2133MHz RAM fitted which is bottlenecking your unlocked processor, to resolve this you need to get rid of the slower RAM and get at least one more stick of 2666MHz capable RAM which will allow your other 8GB stick to work at the speed that it is capable of.

Three of your crashes are security related with the processes being both Discord and Steam, this is a typical example of what happens when there are multiple AV and/or Firewalls installed, Windows Defender and Firewall are perfectly adequate and by sticking with only those two you are avoiding this type of mess.

Firewall
Firewall: Enabled
Display Name: ZoneAlarm Extreme Security Firewall
Antivirus
ESET Security
Antivirus: Enabled
Company Name: ESET
Product Version: 13.2.18.0
Virus Signature Database: Up to date
ZoneAlarm Extreme Security Antivirus
Antivirus: Enabled
Virus Signature Database: Up to date
Windows Defender
Antivirus: Disabled
Virus Signature Database: Up to date

Having more than one AV or Firewall installed on your computer is bad, it will slow down the computer, cause internet connection problems and leave you with no AV protection at all if they cancel each other out as they fight for resources.

Windows 8, 8.1 and 10 come with an improved Windows Defender, it offers the same real-time anti-virus/anti-malware protection as Microsoft Security Essentials. Windows Defender also shares the same malware signature definitions as Microsoft Security Essentials, and Forefront Endpoint Protection. Technically, Microsoft Security Essentials has not been renamed Windows Defender, or combined with it in Windows 8, 8.1 and 10.

If any AV product that you have is a paid for version you should always make sure that you have a copy of the product key kept somewhere safe just in case you ever wish to reinstall it.

Power Profile
Active power scheme: Najwyższa wydajność

Change the Windows Power Plan to Balanced, High Performance is a form of overclocking that is known to cause stability and overheating issues and the setting should only be used for gaming type notebooks that have a discrete GPU that needs the extra power.

 

[Exyztence]

Hi!
Wow, literally I didn't know that info about my ram. When I was buying it, there was written it is 2666mhz but when I checked now in speccy it is 2133.
I have changed my power plan to balanced.
What should I do now? I can without any doubt buy new ram, this one would be okay?

G.SKILL 32GB (2x16GB) 3200MHz CL14 Trident Z RGB LED - PamiÄci RAM DDR4 - Sklep komputerowy - x-kom.pl

G.SKILL 32GB (2x16GB) 3200MHz CL14 Trident Z RGB LED w x-kom.pl > Odbiór za 0 zł w dowolnym salonie, błyskawiczna wysyłka. Zapewniamy inteligentny wybór.

www.x-kom.pl

Thanks for your response!

 

[phillpower2]

Hello Oliwer,

Your first concern should be to sort out your security issues as you are at risk of malware attack every time that you go online,

Reminder, if any AV product that you have is a paid for version you should always make sure that you have a copy of the product key kept somewhere safe just in case you ever wish to reinstall it.

ESET removal info here

ZoneAlarm removal info here

Once any other AVs has been correctly uninstalled, check to see if Windows Defender has auto enabled and allow it to update and carry out a full scan of your computer.

Stick to purchasing RAM that is on your MBs support list which you can find here

 

[Exyztence]

Hi.
I used to have ZoneAlarm installed because I won the ,,premium" for 365 days, but after 3 days I uninstalled the program. I don't have it installed on my pc and I don't have it in add/remove programs.
But I have uninstalled the ESET, below are logs from it.

 

[phillpower2]

Sorry but if Speccy is detecting and listing ZoneAlarm then there are at least still traces of it on your computer somewhere.

Can you post a new Speccy url for us.

 

[Exyztence]

Speccy url

http://speccy.piriform.com/results/uShIKf4kh2dyrgD3XItwFg4

 

[phillpower2]

Speccy is now showing that you have three AVs and Firewalls running + your Windows Power Plan is not set to Balanced.

Windows Defender
Windows Defender: Enabled
Firewall
Firewall: Enabled
Display Name: ZoneAlarm Extreme Security Firewall
Antivirus
ZoneAlarm Extreme Security Antivirus
Antivirus: Enabled
Virus Signature Database: Up to date
Windows Defender
Antivirus: Enabled
Virus Signature Database: Up to date
ESET Security
Antivirus: Enabled
Virus Signature Database: Up to date

Power Profile
Active power scheme: Ultimate Performance

 

[Exyztence]

Hi!
U can see that I have uninstalled ESET because of the logs which I attached in my last reply. Now I have checked my power plan and it shows its ultimate performance again. When I change to balanced and click ok, and then go to power plan again, it is still ultimate performance, it looks that I can't change it.

EDIT:
Nevermind, I have changed it to balanced.
New speccy URL: http://speccy.piriform.com/results/zsrqxqIQwiOk8RWKWf70BF5

 

[phillpower2]

One of the problems that you can have if you install multiple AV programs is that you cannot uninstall them properly and that looks to be what is going on here.

We can see CCleaner in your list of installed programs, see if you are able to find any traces of ESET or ZoneAlarm using CCleaner, if yes, delete whatever you find, restart the computer, run Speccy again to see if you have managed to get rid of anything that you may have found.

 

[Exyztence]

Hi.
It's strange because I also don't have CCleaner installed on my PC but used to have it.
I downloaded it again and used it.
Below is a speccy URL after using it.

http://speccy.piriform.com/results/0DdZzQ56rENluYyKVo3K6il

Btw, would everything work fine and I would get rid of BSODs when I buy a new ram and format my PC?
Greetings,
Oliwer.

 

[phillpower2]

Btw, would everything work fine and I would get rid of BSODs when I buy a new ram and format my PC?

Sorry but there is no way of knowing this and for now we need to make sure that we get rid of ESET and ZoneAlarm and see how that goes.

Download MiniToolBox and save the file to the Desktop.

Close the browser and run the tool, check the following options;

List last 10 Event Viewer Errors
List Installed Programs
List Devices (Only Problems)
List Users, Partitions and Memory size

Click on Go.

Post the resulting log in your next reply for us if you will.

 

[Exyztence]

MiniToolBox by Farbar Version: 17-06-2016
Ran by Oliwer (administrator) on 19-10-2020 at 16:54:09
Running from "C:\Users\Oliwer\Downloads"
Microsoft Windows 10 Pro (X64)
Model: MS-7B17 Manufacturer: Micro-Star International Co., Ltd.
Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (10/19/2020 04:21:07 PM) (Source: Microsoft-Windows-PerfNet) (User: DESKTOP-R2QR190)
Description: Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.

Error: (10/19/2020 01:45:02 PM) (Source: Application Error) (User: )
Description: Faulting application name: csgo.exe, version: 0.0.0.0, time stamp: 0x5f85dfee
Faulting module name: KERNELBASE.dll, version: 10.0.18362.1139, time stamp: 0x6a8e6b97
Exception code: 0xc06d007f
Fault offset: 0x00114662
Faulting process id: 0x2778
Faulting application start time: 0xcsgo.exe0
Faulting application path: csgo.exe1
Faulting module path: csgo.exe2
Report Id: csgo.exe3
Faulting package full name: csgo.exe4
Faulting package-relative application ID: csgo.exe5

Error: (10/19/2020 12:49:13 PM) (Source: Microsoft-Windows-PerfNet) (User: DESKTOP-R2QR190)
Description: Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.

Error: (10/19/2020 12:08:16 PM) (Source: Microsoft-Windows-PerfNet) (User: DESKTOP-R2QR190)
Description: Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.

Error: (10/19/2020 01:30:18 AM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, Trwa proces zamykania systemu.
.

Error: (10/19/2020 01:30:18 AM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, Trwa proces zamykania systemu.
]

Error: (10/19/2020 01:30:18 AM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, Trwa proces zamykania systemu.
.

Error: (10/19/2020 01:30:18 AM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, Trwa proces zamykania systemu.
]

Error: (10/19/2020 01:29:06 AM) (Source: Application Error) (User: )
Description: Faulting application name: csgo.exe, version: 0.0.0.0, time stamp: 0x5f85dfee
Faulting module name: KERNELBASE.dll, version: 10.0.18362.1139, time stamp: 0x6a8e6b97
Exception code: 0xc06d007f
Fault offset: 0x00114662
Faulting process id: 0x1b70
Faulting application start time: 0xcsgo.exe0
Faulting application path: csgo.exe1
Faulting module path: csgo.exe2
Report Id: csgo.exe3
Faulting package full name: csgo.exe4
Faulting package-relative application ID: csgo.exe5

Error: (10/18/2020 09:57:02 PM) (Source: Application Error) (User: )
Description: Faulting application name: DllHost.exe, version: 10.0.18362.1, time stamp: 0x4250d5de
Faulting module name: combase.dll, version: 10.0.18362.1139, time stamp: 0xa5418e33
Exception code: 0xc0000005
Fault offset: 0x000db35d
Faulting process id: 0x3d6c
Faulting application start time: 0xDllHost.exe0
Faulting application path: DllHost.exe1
Faulting module path: DllHost.exe2
Report Id: DllHost.exe3
Faulting package full name: DllHost.exe4
Faulting package-relative application ID: DllHost.exe5


System errors:
=============
Error: (10/19/2020 04:17:11 PM) (Source: DCOM) (User: DESKTOP-R2QR190)
Description: Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca

Error: (10/19/2020 12:45:14 PM) (Source: DCOM) (User: DESKTOP-R2QR190)
Description: Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca

Error: (10/19/2020 12:44:52 PM) (Source: Service Control Manager) (User: )
Description: The WMPNetworkSvc service terminated with the following error:
%%1008 = An attempt was made to reference a token that does not exist.


Error: (10/19/2020 12:44:51 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 12:04:14 on ‎19.‎10.‎2020 was unexpected.

Error: (10/19/2020 12:04:21 PM) (Source: DCOM) (User: DESKTOP-R2QR190)
Description: Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca

Error: (10/19/2020 01:30:12 AM) (Source: DCOM) (User: DESKTOP-R2QR190)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (10/19/2020 01:30:12 AM) (Source: DCOM) (User: DESKTOP-R2QR190)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (10/19/2020 01:30:12 AM) (Source: DCOM) (User: DESKTOP-R2QR190)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (10/19/2020 01:30:12 AM) (Source: DCOM) (User: DESKTOP-R2QR190)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (10/19/2020 01:30:12 AM) (Source: DCOM) (User: DESKTOP-R2QR190)
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}


Microsoft Office Sessions:
=========================
Error: (10/19/2020 04:21:07 PM) (Source: Microsoft-Windows-PerfNet)(User: DESKTOP-R2QR190)
Description: 3221225506

Error: (10/19/2020 01:45:02 PM) (Source: Application Error)(User: )
Description: csgo.exe0.0.0.05f85dfeeKERNELBASE.dll10.0.18362.11396a8e6b97c06d007f00114662277801d6a6061523cabeC:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exeC:\Windows\System32\KERNELBASE.dll0d1403a4-2e9c-4a77-a591-107f7b3219d0

Error: (10/19/2020 12:49:13 PM) (Source: Microsoft-Windows-PerfNet)(User: DESKTOP-R2QR190)
Description: 3221225506

Error: (10/19/2020 12:08:16 PM) (Source: Microsoft-Windows-PerfNet)(User: DESKTOP-R2QR190)
Description: 3221225506

Error: (10/19/2020 01:30:18 AM) (Source: VSS)(User: )
Description: CoCreateInstance0x8007045b, Trwa proces zamykania systemu.

Error: (10/19/2020 01:30:18 AM) (Source: VSS)(User: )
Description: {4e14fba2-2e22-11d1-9964-00c04fbbb345}CEventSystem0x8007045b, Trwa proces zamykania systemu.

Error: (10/19/2020 01:30:18 AM) (Source: VSS)(User: )
Description: CoCreateInstance0x8007045b, Trwa proces zamykania systemu.

Error: (10/19/2020 01:30:18 AM) (Source: VSS)(User: )
Description: {4e14fba2-2e22-11d1-9964-00c04fbbb345}CEventSystem0x8007045b, Trwa proces zamykania systemu.

Error: (10/19/2020 01:29:06 AM) (Source: Application Error)(User: )
Description: csgo.exe0.0.0.05f85dfeeKERNELBASE.dll10.0.18362.11396a8e6b97c06d007f001146621b7001d6a59f53ed5cfcC:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exeC:\Windows\System32\KERNELBASE.dll5c6deba5-b53c-4a6f-aad0-9b30feb924c5

Error: (10/18/2020 09:57:02 PM) (Source: Application Error)(User: )
Description: DllHost.exe10.0.18362.14250d5decombase.dll10.0.18362.1139a5418e33c0000005000db35d3d6c01d6a587dad86eb2C:\Windows\SysWOW64\DllHost.exeC:\Windows\System32\combase.dll28bd2bf1-1d83-4068-9a24-d84fb5d5e119Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5cApp


CodeIntegrity Errors:
===================================
Date: 2020-10-18 10:07:28.864
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-10-18 10:07:27.358
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-10-18 10:07:27.353
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-10-18 10:07:24.241
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-10-18 10:07:24.238
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-10-18 10:07:24.232
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-10-18 10:05:49.694
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-10-18 10:05:49.689
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-10-18 10:05:49.684
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-10-18 10:05:49.681
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


=========================== Installed Programs ============================

Among Us (HKLM\...\Steam App 945360) (Version: - Innersloth)
AnyDesk (HKLM-x32\...\AnyDesk) (Version: ad 6.0.7 - philandro Software GmbH)
Audacity 2.3.3 (HKLM-x32\...\Audacity_is1) (Version: 2.3.3 - Audacity Team)
Bloons TD 6 (HKLM\...\Steam App 960090) (Version: - Ninja Kiwi)
Camera (NVIDIA Broadcast) (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvVirtualCamera) (Version: 1.0.0.30 - NVIDIA Corporation) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.72 - Piriform)
Cheat Engine 7.0 (HKLM\...\Cheat Engine 7.0_is1) (Version: - Cheat Engine)
Cooking Simulator (HKLM\...\Steam App 641320) (Version: - Big Cheese Studio)
Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version: - Valve)
CPUID CPU-Z 1.94 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.94 - CPUID, Inc.)
CPUID HWMonitor 1.41 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.41 - CPUID, Inc.)
DiRT 3 Complete Edition (HKLM\...\Steam App 321040) (Version: - Codemasters Racing Studio)
Discord (HKCU\...\Discord) (Version: 0.0.308 - Discord Inc.)
Documentation Manager (HKLM\...\{5A87092D-1128-4C00-9495-4312AEA73AEF}) (Version: 21.120.2.1 - Intel Corporation) Hidden
Dynamic Application Loader Host Interface Service (HKLM\...\{D492644D-815B-48F6-B079-6E1FE92FCFDE}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Epic Games Launcher (HKLM-x32\...\{0EE6DDEF-E36B-45EB-9E03-5A266EC8A8F8}) (Version: 1.1.279.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
FaceRig (HKLM\...\Steam App 274920) (Version: - Holotech Studios)
FaceRig Virtual Video driver version 1.0.1.1000 (HKLM-x32\...\{7D6A1A0F-F57E-4C6B-9331-86CBC7D5C787}_is1) (Version: 1.0.1.1000 - Adoriasoft LLC)
Fall Guys (HKLM\...\Steam App 1097150) (Version: - Mediatonic)
Far Cry 5 (HKLM\...\Steam App 552520) (Version: - Ubisoft Montreal)
FiveM (HKCU\...\CitizenFX_FiveM) (Version: - The CitizenFX Collective)
GameInput Redistributable (HKLM-x32\...\{5FAD63E8-8F1C-6687-0325-3BBF64B4FD89}) (Version: 10.1.19041.3918 - Microsoft Corporation)
Garry's Mod (HKLM\...\Steam App 4000) (Version: - Facepunch Studios)
GIMP 2.8.22 (HKLM\...\GIMP-2_is1) (Version: 2.8.22 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 86.0.4240.75 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.36.31 - Google LLC) Hidden
Grand Theft Auto V (HKLM-x32\...\{5EFC6C07-6B87-43FC-9524-F9E967241741}) (Version: 1.0.1868.1 - Rockstar Games)
Hyper Scape (HKLM-x32\...\Uplay Install 11957) (Version: - Ubisoft)
Intel Driver && Support Assistant (HKLM-x32\...\{E051A413-9853-4901-AF60-176ED50E7329}) (Version: 20.10.42.5 - Intel) Hidden
Intel Processor Diagnostic Tool 64bit (HKLM-x32\...\{d23ef847-2a5d-49ad-a6b5-7ffc8f255179}) (Version: 4.1.4.36 - )
Intel(R) Computing Improvement Program (HKLM\...\{0798FE0D-0E50-488A-B0DC-07E65B2758AE}) (Version: 2.4.05982 - Intel Corporation)
Intel(R) Graphics Driver Software (HKLM-x32\...\{6ad2f601-ab5f-47d5-bd6c-ef13a37b3a62}) (Version: 3.11.1.0 - Intel) Hidden
Intel(R) Graphics Driver Software (HKLM-x32\...\{d2843be8-a475-45ad-a151-dc20a9696584}) (Version: 3.11.1.0 - Intel) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 1946.12.0.1328 - Intel Corporation)
Intel(R) Network Connections 25.0.0.0 (HKLM\...\PROSetDX) (Version: 25.0.0.0 - Intel)
Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.52.230.1 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32\...\{c6de84fd-ece7-4c2a-9f06-8cabe7ab79a0}) (Version: 1.52.230.1 - Intel Corporation) Hidden
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00000110-0210-1045-84C8-B8D95FA3C8C3}) (Version: 21.110.0.3 - Intel Corporation)
Intel® Driver & Support Assistant (HKLM-x32\...\{6f610581-f2d3-4d65-9c20-3627d30f5572}) (Version: 20.10.42.5 - Intel)
Intel® Hardware Accelerated Execution Manager (HKLM\...\{7563302D-BD6B-4153-BA7D-3E3432E7C22D}) (Version: 7.5.6 - Intel Corporation)
Intel® Optane™ Pinning Explorer Extensions (HKLM\...\{4487026C-A32C-4FF5-858E-8DB890814949}) (Version: 17.8.0.1065 - Intel Corporation)
Intel® Software Installer (HKLM-x32\...\{a6cf16a4-9aef-469b-98af-71b15f60a233}) (Version: 21.120.2.1 - Intel Corporation) Hidden
Java 8 Update 261 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180261F0}) (Version: 8.0.2610.12 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKCU\...\Riot Game league_of_legends.live) (Version: - Riot Games, Inc)
League of Legends PBE (HKCU\...\Riot Game league_of_legends.pbe) (Version: - Riot Games, Inc)
Lightshot-5.5.0.4 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.5.0.4 - Skillbrains)
Logitech Capture (HKLM\...\Capture) (Version: 2.00.226 - Logitech)
Marbles on Stream (HKLM\...\Steam App 1170970) (Version: - Pixel by Pixel Studios Inc.)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 86.0.622.43 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.135.49 - )
Microsoft Office 2010 dla Użytkowników Domowych i Małych Firm (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 20.169.0823.0006 - Microsoft Corporation)
Microsoft Teams (HKCU\...\Teams) (Version: 1.3.00.26064 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{97238E8A-4919-4A1E-965A-C6C36938F4CE}) (Version: 2.68.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{8e24fb65-31aa-446d-9c3e-35c5e11cb367}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.27.29016 (HKLM-x32\...\{40d3fee2-b257-46c2-bdc0-cb1088d97327}) (Version: 14.27.29016.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Minecraft Dungeons Launcher (HKLM-x32\...\{AA2F8964-5160-4BAF-BB0B-004230044394}) (Version: 1.0.0.0 - Mojang)
Minecraft Launcher (HKLM-x32\...\{E15F69FA-660D-45CC-B28F-6CBC4CAD2091}) (Version: 1.0.0.0 - Mojang)
Node.js (HKLM\...\{36AAFE4E-38A2-4721-86FC-4A700EEFDE08}) (Version: 12.18.1 - Node.js Foundation)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 7.8.6 - Notepad++ Team)
Npcap (HKLM-x32\...\NpcapInst) (Version: 0.9991 - Nmap Project)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.27 - NVIDIA Corporation) Hidden
NVIDIA Broadcast (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIABroadcast) (Version: 1.0.0.30 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.20.4.14 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.4.14 - NVIDIA Corporation)
NVIDIA Oprogramowanie systemu PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
NVIDIA Sterownik dźwięku HD 1.3.38.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.35 - NVIDIA Corporation)
NVIDIA Sterownik graficzny 456.71 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 456.71 - NVIDIA Corporation)
NVIDIA USBC Driver 1.45.831.832 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_USBC) (Version: 1.45.831.832 - NVIDIA Corporation)
NvModuleTracker (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvModuleTracker.Driver) (Version: 6.14.24033.38719 - NVIDIA Corporation) Hidden
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 25.0.8 - OBS Project)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Opera GX Stable 68.0.3618.112 (HKCU\...\Opera GX 68.0.3618.112) (Version: 68.0.3618.112 - Opera Software)
Oprogramowanie Intel® PROSet/Wireless (HKLM-x32\...\{a2caa706-dce2-4c91-8d46-b52a3c260b20}) (Version: 21.10.1 - Intel Corporation)
Oprogramowanie mikroukładu Intel® (HKLM-x32\...\{c4a581e8-a702-448c-80c7-4b6192985db2}) (Version: 10.1.18228.8176 - Intel(R) Corporation)
Origin (HKLM-x32\...\Origin) (Version: 10.5.83.43781 - Electronic Arts, Inc.)
Path of Exile (HKLM\...\Steam App 238960) (Version: - Grinding Gear Games)
Planet Coaster (HKLM\...\Steam App 493340) (Version: - Frontier Developments)
Plants vs Zombies Battle for Neighborville (HKLM-x32\...\{2071E3B5-A619-4F7E-B560-1769ABD91DCD}) (Version: - Electronic Arts, Inc.)
Plants vs. Zombies™: Bitwa o Neighborville (HKLM\...\Steam App 1262240) (Version: - PopCap)
Polski pakiet językowy dla narzędzi Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - PLK) (Version: 10.0.50903 - Microsoft Corporation)
Portal 2 (HKLM\...\Steam App 620) (Version: - Valve)
PuTTY release 0.73 (64-bit) (HKLM\...\{44F7642C-AB7E-4468-B028-E8D08A0CBB0E}) (Version: 0.73.0.0 - Simon Tatham)
Python 3.8.5 (32-bit) (HKCU\...\{44a59e57-34e2-4d86-93ba-a2588bfac760}) (Version: 3.8.5150.0 - Python Software Foundation)
Python 3.8.5 Add to Path (32-bit) (HKLM-x32\...\{2D01141A-8022-4100-B256-02EFB0F1830B}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 Core Interpreter (32-bit) (HKLM-x32\...\{31F7FCA7-1F15-48FD-BFB9-91FE58FC2F07}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 Development Libraries (32-bit) (HKLM-x32\...\{657AEF25-7BC3-4E93-A08C-ECD14E8A74AE}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 Documentation (32-bit) (HKLM-x32\...\{F7A293EB-21B8-45DE-85A5-8ADEB68B9EFB}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 Executables (32-bit) (HKLM-x32\...\{F6156224-C882-453A-9046-EFCD31982E68}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 pip Bootstrap (32-bit) (HKLM-x32\...\{71C0D67F-EF42-4C5C-A2AE-04FD8B38AB1C}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 Standard Library (32-bit) (HKLM-x32\...\{4D147A72-5C01-47B2-8789-1D1969F6AC32}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 Tcl/Tk Support (32-bit) (HKLM-x32\...\{653FBD26-2D1A-48C1-AAB1-0AB6F2A3749B}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 Test Suite (32-bit) (HKLM-x32\...\{DE45C740-8250-4A49-8B81-FE347C70E6BA}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 Utility Scripts (32-bit) (HKLM-x32\...\{9450D936-1E4F-44EF-A0D4-92C471229B98}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{CEEAEA02-2472-4BF6-8994-52D6783F5575}) (Version: 3.8.7140.0 - Python Software Foundation)
Razer Synapse (HKLM-x32\...\Razer Synapse) (Version: 3.5.0930.092510 - Razer Inc.)
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8911.1 - Realtek Semiconductor Corp.)
Roblox Player for Oliwer (HKCU\...\roblox-player) (Version: - Roblox Corporation)
Roblox Studio for Oliwer (HKCU\...\roblox-studio) (Version: - Roblox Corporation)
Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.23.252 - Rockstar Games)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.0.5.5 - Rockstar Games)
Samsung NVM Express Driver (HKLM-x32\...\{ff94c273-58d5-40b5-b03a-9bd41d5cff1e}) (Version: 3.3.0.2003 - Samsung Electronics)
Samsung NVM Express Driver 3.3.0.2003 (HKLM\...\{89D55DD5-FE94-497B-B5E5-91915D52DBF2}) (Version: 3.3.0.2003 - Samsung Electronics Co., Ltd) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0015-0415-1000-0000000FF1CE}_Office14.SingleImage_{A3D90824-E20D-4AC0-BAAD-E52436E8CC9A}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0016-0415-1000-0000000FF1CE}_Office14.SingleImage_{A3D90824-E20D-4AC0-BAAD-E52436E8CC9A}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0018-0415-1000-0000000FF1CE}_Office14.SingleImage_{A3D90824-E20D-4AC0-BAAD-E52436E8CC9A}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0019-0415-1000-0000000FF1CE}_Office14.SingleImage_{A3D90824-E20D-4AC0-BAAD-E52436E8CC9A}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001A-0415-1000-0000000FF1CE}_Office14.SingleImage_{A3D90824-E20D-4AC0-BAAD-E52436E8CC9A}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001B-0415-1000-0000000FF1CE}_Office14.SingleImage_{A3D90824-E20D-4AC0-BAAD-E52436E8CC9A}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001F-0407-1000-0000000FF1CE}_Office14.SingleImage_{EE3A99C9-FD8F-4923-9F82-27365DA4B873}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001F-0409-1000-0000000FF1CE}_Office14.SingleImage_{C814F7D9-CE9D-45AA-BA7C-88BDD0E1EB7C}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-001F-0415-1000-0000000FF1CE}_Office14.SingleImage_{A0E29E5C-CA3F-4371-8481-BB8176D299A0}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-002C-0415-1000-0000000FF1CE}_Office14.SingleImage_{C14975C4-C57A-4A61-93C7-12F4D8C4DDC9}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.SingleImage_{F3FAAB68-7697-4B1F-A23A-72312565AEAB}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0043-0415-1000-0000000FF1CE}_Office14.SingleImage_{371D932B-484D-47B7-BD1D-9AD00A056159}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-006E-0415-1000-0000000FF1CE}_Office14.SingleImage_{3EDF67B6-64E8-4F38-9537-B95115BE8B13}) (Version: - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-00A1-0415-1000-0000000FF1CE}_Office14.SingleImage_{A3D90824-E20D-4AC0-BAAD-E52436E8CC9A}) (Version: - Microsoft) Hidden
Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak (HKLM\...\{1F6B681F-BE0D-4C7B-A22E-80FDC93AF7CF}) (Version: 5.0.0 - TeamSpeak)
TeamSpeak 3 Client (HKCU\...\TeamSpeak 3 Client) (Version: 3.5.2 - TeamSpeak Systems GmbH)
Terraria (HKLM\...\Steam App 105600) (Version: - Re-Logic)
tModLoader (HKLM\...\Steam App 1281930) (Version: - TML Team)
Tom Clancy's The Division 2 (HKLM-x32\...\Uplay Install 4932) (Version: - Ubisoft)
UE4 Prerequisites (x64) (HKLM-x32\...\{4e242cc8-5e3c-4b08-9d55-dbc62ddd1208}) (Version: 1.0.13.0 - Epic Games, Inc.) Hidden
Uplay (HKLM-x32\...\Uplay) (Version: 50.0 - Ubisoft)
VBCABLE, The Virtual Audio Cable (HKLM\...\VB:VBCABLE {87459874-1236-4469}) (Version: - VB-Audio Software)
VEGAS Pro 17.0 (HKLM\...\{E649B5F0-B27C-11E9-B856-A5146957F833}) (Version: 17.0.284 - VEGAS)
WebM Project Directshow Filters (HKCU\...\webmdshow) (Version: - )
WinRAR 5.90 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.90.0 - win.rar GmbH)
WinSCP 5.17.5 (HKLM-x32\...\winscp3_is1) (Version: 5.17.5 - Martin Prikryl)
Wireshark 3.2.4 64-bit (HKLM-x32\...\Wireshark) (Version: 3.2.4 - The Wireshark developer community, https://www.wireshark.org)
Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)

========================= Devices: ================================

Name: Realtek(R) Audio
Description: Realtek High Definition Audio
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek
Service: IntcAzAudAddService
Device ID: HDAUDIO\FUNC_01&VEN_10EC&DEV_1168&SUBSYS_1462CB17&REV_1001\4&1F6A65C0&0&0001
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


========================= Memory info: ===================================

Percentage of memory in use: 22%
Total physical RAM: 24510.21 MB
Available physical RAM: 19052.78 MB
Total Virtual: 28094.21 MB
Available Virtual: 19692.34 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:930.95 GB) (Free:294.66 GB) NTFS

========================= Users: ========================================

User accounts for \\DESKTOP-R2QR190

Administrator Go† Konto domylne
Oliwer WDAGUtilityAccount


**** End of log ****

 

[phillpower2]

Problems with ESET for yesterday but no sign of ZoneAlarm so what Speccy is detecting looks to be orphaned files that were left behind when you did the uninstall.

Uninstall anything that we use as and when you see fit.

Post an Autoruns log for us, see here

1: Extract the Autoruns Zip file contents to a folder.

2: Double-click the "Autoruns.exe".

3: Click on the "Hide Signed Microsoft and Windows Entries” option.

4: Go to File then to Export As or Save in some versions.

5: Save AutoRuns.txt file to known location like your Desktop > when you click on File > Save you will then get the option to Save as type, click the drop down tab, change it to Text and then click the Save button.

6: Attach to your next reply.



Tutorial here

 

[Exyztence]

File in attachment

 

[phillpower2]

All clean

Last place to check is your browsers for any plug ins, you have Chrome, Edge and Opera list atm, run this to see what plug ins are found for each browser, no install necessary.

 

[Exyztence]

I also used to have opera, it is now uninstalled since, I don't know, maybe 1-2 months.
Both in chrome and edge all ,,plugins" have red circles.

 

[phillpower2]

You still have Opera on the computer as can be seen in both Autoruns and Speccy.

No sign of ESET or ZoneAlarm in either browser which is a +