Publicité
Publicité
Format du document : text/plain
Prévisualisation
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-09-2024
Ran by Admin (24-09-2024 19:13:13)
Running from D:\
Microsoft Windows 11 Pro Version 23H2 22631.4169 (X64) (2024-02-24 05:28:40)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Admin (S-1-5-21-2246425733-1572341141-2263144653-1001 - Administrator - Enabled) => C:\Users\Admin
Administrator (S-1-5-21-2246425733-1572341141-2263144653-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2246425733-1572341141-2263144653-503 - Limited - Disabled)
Guest (S-1-5-21-2246425733-1572341141-2263144653-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-2246425733-1572341141-2263144653-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Malwarebytes (Enabled - Up to date) {0D452135-A081-B000-D6B6-132E52638543}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Ableton Live 12 Suite (HKLM\...\{E107EAC0-8655-4161-8582-8494EC0590A6}) (Version: 12.0.0.0 - Ableton) Hidden
Ableton Live 12 Suite (HKLM-x32\...\{14a63b0f-986f-479c-98b3-725e24892b0c}) (Version: 12.0.0.0 - Ableton)
Ableton Push Driver v5.57.0 (HKLM\...\{2143CAA3-2BA4-4073-93D1-E440A65F42CD}) (Version: 5.57.0 - Ableton) Hidden
Acid V 1.1.1 (HKLM-x32\...\Acid V_is1) (Version: 1.1.1 - Arturia)
Amazon.com Fire_Devices (HKLM\...\Fire_Devices Drivers) (Version: 2 - Amazon.com)
Analog Lab V 5.10.1 (HKLM-x32\...\Analog Lab V_is1) (Version: 5.10.1 - Arturia)
Ankama Launcher 3.12.10 (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\410fcd79-1be8-5bf1-986e-ea09c55f7edf) (Version: 3.12.10 - Ankama)
Antares Auto-Tune Pro (HKLM\...\Antares Auto-Tune Pro_is1) (Version: 10.3.1 - Antares & Team V.R)
AOMEI Partition Assistant 10.4.0 (HKLM-x32\...\{04F850ED-FD0F-4ED1-AE1B-4498165BF3D2}_is1) (Version: 10.4.0 - AOMEI International Network Limited.)
ARP 2600 V3 3.13.0 (HKLM-x32\...\ARP 2600 V3_is1) (Version: 3.13.0 - Arturia)
Arturia MiniFuse Audio Driver v1.1.1 (HKLM-x32\...\Software_Arturia_arturiaminifuseusbaudio_Setup) (Version: 1.1.1 - Arturia)
Arturia Software Center 2.7.2 (HKLM-x32\...\Arturia Software Center_is1) (Version: 2.7.2 - Arturia)
AudioFuse Control Center 2.2.1 (HKLM\...\AudioFuse Control Center_is1) (Version: 2.2.1 - Arturia)
AudioFuse USB Audio Driver v2.0.0 (HKLM\...\{EF081BD3-4190-426A-8459-6132085AE14F}) (Version: 2.0.0 - Arturia)
Augmented BRASS 1.1.0 (HKLM-x32\...\Augmented BRASS_is1) (Version: 1.1.0 - Arturia)
Augmented GRAND PIANO 1.6.0 (HKLM-x32\...\Augmented GRAND PIANO_is1) (Version: 1.6.0 - Arturia)
Augmented STRINGS 1.6.0 (HKLM-x32\...\Augmented STRINGS_is1) (Version: 1.6.0 - Arturia)
Augmented VOICES 1.6.0 (HKLM-x32\...\Augmented VOICES_is1) (Version: 1.6.0 - Arturia)
Augmented WOODWINDS 1.0.0 (HKLM-x32\...\Augmented WOODWINDS_is1) (Version: 1.0.0 - Arturia)
AutoHotkey (HKLM\...\AutoHotkey) (Version: 2.0.11 - AutoHotkey Foundation LLC)
B-3 V2 2.9.1 (HKLM-x32\...\B-3 V2_is1) (Version: 2.9.1 - Arturia)
Battery Calibration (HKLM-x32\...\InstallShield_{634AC01E-49DB-4AD2-B87C-90D4DCC6AFA1}) (Version: 1.0.1609.1901 - Micro-Star International Co., Ltd.)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield⢠V (HKLM-x32\...\{e26b382f-e945-4f70-9318-121b683f1d61}) (Version: 1.0.77.34058 - Electronic Arts)
Buchla Easel V 1.13.0 (HKLM-x32\...\Buchla Easel V_is1) (Version: 1.13.0 - Arturia)
Bus FORCE 1.3.0 (HKLM-x32\...\Bus FORCE_is1) (Version: 1.3.0 - Arturia)
CapCut (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\CapCut) (Version: 3.8.0.1431 - Bytedance Pte. Ltd.)
Cheat Engine 7.5 (HKLM\...\Cheat Engine_is1) (Version: - Cheat Engine)
Chorus DIMENSION-D 1.4.0 (HKLM-x32\...\Chorus DIMENSION-D_is1) (Version: 1.4.0 - Arturia)
Chorus JUN-6 1.4.0 (HKLM-x32\...\Chorus JUN-6_is1) (Version: 1.4.0 - Arturia)
Clavinet V 1.13.0 (HKLM-x32\...\Clavinet V_is1) (Version: 1.13.0 - Arturia)
CMI V 1.13.0 (HKLM-x32\...\CMI V_is1) (Version: 1.13.0 - Arturia)
Comp DIODE-609 1.3.0 (HKLM-x32\...\Comp DIODE-609_is1) (Version: 1.3.0 - Arturia)
Comp FET-76 1.6.0 (HKLM-x32\...\Comp FET-76_is1) (Version: 1.6.0 - Arturia)
Comp TUBE-STA 1.6.0 (HKLM-x32\...\Comp TUBE-STA_is1) (Version: 1.6.0 - Arturia)
Comp VCA-65 1.6.0 (HKLM-x32\...\Comp VCA-65_is1) (Version: 1.6.0 - Arturia)
CP-70 V 1.0.0 (HKLM-x32\...\CP-70 V_is1) (Version: 1.0.0 - Arturia)
CS-80 V4 4.3.0 (HKLM-x32\...\CS-80 V4_is1) (Version: 4.3.0 - Arturia)
CyberLink PowerDirector 365 (HKLM-x32\...\{678184FC-3343-4125-8098-01B6032F8BB2}) (Version: 22.3.2808.0 - CyberLink Corp.)
CZ V 1.9.0 (HKLM-x32\...\CZ V_is1) (Version: 1.9.0 - Arturia)
Delay BRIGADE 1.6.0 (HKLM-x32\...\Delay BRIGADE_is1) (Version: 1.6.0 - Arturia)
Delay ETERNITY 1.6.0 (HKLM-x32\...\Delay ETERNITY_is1) (Version: 1.6.0 - Arturia)
Delay TAPE-201 1.6.0 (HKLM-x32\...\Delay TAPE-201_is1) (Version: 1.6.0 - Arturia)
Discord (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\Discord) (Version: 1.0.9034 - Discord Inc.)
Disk Drill 5.5.900.0 (HKLM-x32\...\{bf17c798-887e-4516-8036-35d6e0649a36}) (Version: 5.5.900.0 - CleverFiles)
Disk Drill 5.5.900.0 (x64) (HKLM\...\{4E4DB27B-ACF9-4F10-8D53-9A0463612025}) (Version: 5.5.900.0 - CleverFiles) Hidden
Dist COLDFIRE 1.1.0 (HKLM-x32\...\Dist COLDFIRE_is1) (Version: 1.1.0 - Arturia)
Dist OPAMP-21 1.1.0 (HKLM-x32\...\Dist OPAMP-21_is1) (Version: 1.1.0 - Arturia)
Dist TUBE-CULTURE 1.1.1 (HKLM-x32\...\Dist TUBE-CULTURE_is1) (Version: 1.1.1 - Arturia)
Dokan Library 1.5.1.1000 (x64) (HKLM\...\{65A3A964-3DC3-0105-0001-211126123627}) (Version: 1.5.1.1000 - Dokany Project) Hidden
Dokan Library 1.5.1.1000 Bundle (HKLM-x32\...\{05c046de-f751-48c8-b8d3-77259ea88eb7}) (Version: 1.5.1.1000 - Dokany Project)
DownloadHelper CoApp (HKLM-x32\...\DownloadHelper CoApp) (Version: 2.0.19.0 - ACLAP)
Dragon Center (HKLM-x32\...\InstallShield_{C65B26BC-5A6F-4135-9678-55A877655471}) (Version: 2.6.2005.0601 - Micro-Star International Co., Ltd.)
DX7 V 1.13.0 (HKLM-x32\...\DX7 V_is1) (Version: 1.13.0 - Arturia)
EA app (HKLM\...\{C2622085-ABD2-49E5-8AB9-D3D6A642C091}) (Version: 13.297.0.5810 - Electronic Arts) Hidden
EA app (HKLM-x32\...\{c91d427c-5fb4-4c67-be46-7168c5b05eec}) (Version: 13.297.0.5810 - Electronic Arts)
Efx FRAGMENTS 1.2.0 (HKLM-x32\...\Efx FRAGMENTS_is1) (Version: 1.2.0 - Arturia)
Efx REFRACT 1.0.0 (HKLM-x32\...\Efx REFRACT_is1) (Version: 1.0.0 - Arturia)
Emulator II V 1.6.0 (HKLM-x32\...\Emulator II V_is1) (Version: 1.6.0 - Arturia)
Epic Games Launcher (HKLM-x32\...\{B85FAA6E-A9AA-4655-9029-E1A4EDC05E1A}) (Version: 1.3.93.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{57A956AB-4BCC-45C6-9B40-957E4E125568}) (Version: 2.0.44.0 - Epic Games, Inc.)
EQ SITRAL-295 1.3.0 (HKLM-x32\...\EQ SITRAL-295_is1) (Version: 1.3.0 - Arturia)
Eraser 6.2.0.2993 (HKLM\...\{82602EDA-27BE-4358-AB3A-BD09EA51A1E6}) (Version: 6.2.2993 - The Eraser Project)
f.lux (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\Flux) (Version: 4.134 - f.lux Software LLC)
FabFilter Total Bundle (HKLM\...\FabFilter Total Bundle_is1) (Version: 2024.02.05 - FabFilter)
Farfisa V 1.13.0 (HKLM-x32\...\Farfisa V_is1) (Version: 1.13.0 - Arturia)
Filter M12 1.7.0 (HKLM-x32\...\Filter M12_is1) (Version: 1.7.0 - Arturia)
Filter MINI 1.8.0 (HKLM-x32\...\Filter MINI_is1) (Version: 1.8.0 - Arturia)
Filter MS-20 1.1.0 (HKLM-x32\...\Filter MS-20_is1) (Version: 1.1.0 - Arturia)
Filter SEM 1.7.0 (HKLM-x32\...\Filter SEM_is1) (Version: 1.7.0 - Arturia)
Fire Toolbox V33.1 version � (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\{A6CD7E8F-BACC-42D5-A36D-D40D6EAC5E87}_is1) (Version: � - Datastream)
Flanger BL-20 1.4.0 (HKLM-x32\...\Flanger BL-20_is1) (Version: 1.4.0 - Arturia)
Folder Size (64-bit) (HKLM\...\{F24FF688-7138-4CCF-A83F-71E9FB01170E}) (Version: 2.6 - Brio)
FormatFactory 5.17.0.0 (HKLM-x32\...\FormatFactory) (Version: 5.17.0.0 - Free Time)
GIMP 2.10.38 (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\GIMP-2_is1) (Version: 2.10.38 - The GIMP Team)
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Help Desk (HKLM-x32\...\InstallShield_{7E8181AF-9679-49B3-B133-C265709B6927}) (Version: 1.0.1802.0501 - Micro-Star International Co., Ltd.)
IK Multimedia AmpliTube 5 (HKLM\...\IK Multimedia AmpliTube 5_is1) (Version: 5.7.0 - IK Multimedia)
iZotope Meter Tap 3 (HKLM\...\Meter Tap 3_is1) (Version: 1.0.4 - iZotope)
iZotope Ozone Pro (HKLM\...\iZotope Ozone Pro_is1) (Version: 10.4.0 - iZotope)
Jun-6 V 1.6.1 (HKLM-x32\...\Jun-6 V_is1) (Version: 1.6.1 - Arturia)
Jup-8 V4 4.6.0 (HKLM-x32\...\Jup-8 V4_is1) (Version: 4.6.0 - Arturia)
KORG MS-20 V 1.3.0 (HKLM-x32\...\KORG MS-20 V_is1) (Version: 1.3.0 - Arturia)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
LibreOffice 24.2.0.3 (HKLM\...\{5A433714-C509-4707-BF0C-410D3FBCE8B3}) (Version: 24.2.0.3 - The Document Foundation)
Malwarebytes version 5.1.7.121 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.1.7.121 - Malwarebytes)
Matrix-12 V2 2.13.0 (HKLM-x32\...\Matrix-12 V2_is1) (Version: 2.13.0 - Arturia)
Mellotron V 1.9.1 (HKLM-x32\...\Mellotron V_is1) (Version: 1.9.1 - Arturia)
Messenger (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\c1b3adcf-2068-5e8d-b25d-30ce588e3a4c) (Version: 215.3.624227262 - Facebook, Inc.)
Microsoft .NET Host - 6.0.32 (x64) (HKLM\...\{A09F8381-88C3-44C4-9DAB-AC44F4F4DB4B}) (Version: 48.128.16743 - Microsoft Corporation) Hidden
Microsoft .NET Host - 7.0.16 (x64) (HKLM\...\{9F51D16B-42E8-4A4A-8228-75045541A2AE}) (Version: 56.64.8781 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.7 (x64) (HKLM\...\{E424D6A6-FA28-41E2-8356-B59519A84BB0}) (Version: 64.28.16731 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.32 (x64) (HKLM\...\{667CB653-70E1-4E2B-9C8E-6A02A6CF88B9}) (Version: 48.128.16743 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 7.0.16 (x64) (HKLM\...\{1B690A4C-381A-40D4-BA4A-3F8ACD5CE797}) (Version: 56.64.8781 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.7 (x64) (HKLM\...\{3E3E3302-0CAD-4D0D-B6C0-206B30773468}) (Version: 64.28.16731 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.32 (x64) (HKLM\...\{3FDCF0A2-7C1F-41C7-9749-0D91EC216AED}) (Version: 48.128.16743 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 7.0.16 (x64) (HKLM\...\{CE4D7AE0-FCBA-486F-A58F-DBA3626FBE4B}) (Version: 56.64.8781 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.7 (x64) (HKLM\...\{CA4FE2DB-2E1C-453B-B8C9-960AB929E5B4}) (Version: 64.28.16731 - Microsoft Corporation) Hidden
Microsoft 365 Apps for enterprise - fr-fr (HKLM\...\O365ProPlusRetail - fr-fr) (Version: 16.0.17928.20156 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 128.0.2739.79 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 128.0.2739.79 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 24.166.0818.0003 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.38.33135 (HKLM-x32\...\{c649ede4-f16a-4486-a117-dcc2f2a35165}) (Version: 14.38.33135.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.36.32532 (HKLM-x32\...\{410c0ee1-00bb-41b6-9772-e12c2828b02f}) (Version: 14.36.32532.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.38.33135 (HKLM\...\{19AFE054-CA83-45D5-A9DB-4108EF4BD391}) (Version: 14.38.33135 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.38.33135 (HKLM\...\{AA0C8AB5-7297-4D46-A0D9-08096FE59E46}) (Version: 14.38.33135 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.36.32532 (HKLM-x32\...\{C2C59CAB-8766-4ABD-A8EF-1151A36C41E5}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.36.32532 (HKLM-x32\...\{73F77E4E-5A17-46E5-A5FC-8A061047725F}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.32 (x64) (HKLM\...\{885F1CFB-4EAC-4C60-97B8-394BD65ED91E}) (Version: 48.128.16742 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.32 (x64) (HKLM-x32\...\{1bb295e8-8251-4404-96f1-c437da87fce0}) (Version: 6.0.32.33814 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 7.0.16 (x64) (HKLM\...\{01B2627D-8443-41C0-97F0-9F72AC2FD6A0}) (Version: 56.64.8804 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 7.0.16 (x64) (HKLM-x32\...\{ef5af41f-d68c-48f7-bfb0-5055718601fc}) (Version: 7.0.16.33318 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.7 (x64) (HKLM\...\{F6FBF64F-D459-4F03-BF3B-C0A36A0596A2}) (Version: 64.28.16739 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.7 (x64) (HKLM-x32\...\{754bcfb5-42ac-4c12-8f12-b818943a1365}) (Version: 8.0.7.33814 - Microsoft Corporation)
Mini V3 3.12.0 (HKLM-x32\...\Mini V3_is1) (Version: 3.12.0 - Arturia)
Mini V4 4.0.0 (HKLM-x32\...\Mini V4_is1) (Version: 4.0.0 - Arturia)
MiniBrute V 1.0.0 (HKLM-x32\...\MiniBrute V_is1) (Version: 1.0.0 - Arturia)
MiniFreak V 2.0.0 (HKLM-x32\...\MiniFreak V_is1) (Version: 2.0.0 - Arturia)
MiniFuse Control Center 1.1.1 (HKLM\...\MiniFuse Control Center_is1) (Version: 1.1.1 - Arturia)
Modular V3 3.13.0 (HKLM-x32\...\Modular V3_is1) (Version: 3.13.0 - Arturia)
Mouse Controller version 1.11.3.0 (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\{558409e4-71ad-4b5f-9db7-15e987d0e3aa}_is1) (Version: 1.11.3.0 - MuGiRi Software Development)
Mozilla Firefox (x64 en-US) (HKLM\...\Mozilla Firefox 130.0 (x64 en-US)) (Version: 130.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 129.0.1 - Mozilla)
Mozilla Thunderbird (x64 fr) (HKLM\...\Mozilla Thunderbird 115.8.1 (x64 fr)) (Version: 115.8.1 - Mozilla)
Mozilla Thunderbird (x64 fr) (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\Mozilla Thunderbird 115.13.0 (x64 fr)) (Version: 115.13.0 - Mozilla)
Mozilla VPN (HKLM\...\{2F491215-D718-4713-9071-87C571248738}) (Version: 2.22.1.0 - Mozilla Corporation)
MSI Afterburner 4.6.5 (HKLM-x32\...\Afterburner) (Version: 4.6.5 - MSI Co., LTD)
Muramasa Electrum (HKLM\...\Muramasa Electrum_is1) (Version: 2.0 - Muramasa)
MuseScore 4 (HKLM\...\{649E6B31-1D3A-4D0C-935B-5CC90F29BEC3}) (Version: 4.2.1.240230937 - MuseScore BVBA and Others)
Native Instruments Kontakt 7 (HKLM-x32\...\Native Instruments Kontakt 7) (Version: 7.10.1.0 - Native Instruments)
NVIDIA FrameView SDK 1.3.8513.32290073 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.3.8513.32290073 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.28.0.417 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.28.0.417 - NVIDIA Corporation)
NVIDIA Graphics Driver 551.76 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 551.76 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.17928.20156 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.17928.20156 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-040C-1000-0000000FF1CE}) (Version: 16.0.17928.20156 - Microsoft Corporation) Hidden
OP Auto Clicker (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\OP Auto Clicker_is1) (Version: V4.0 - OP Auto Clicker)
OpenShot Video Editor 3.1.1 (HKLM\...\{4BB0DCDC-BC24-49EC-8937-72956C33A470}_is1) (Version: 3.1.1 - OpenShot Studios, LLC)
OP-Xa V 1.7.0 (HKLM-x32\...\OP-Xa V_is1) (Version: 1.7.0 - Arturia)
Phaser BI-TRON 1.4.0 (HKLM-x32\...\Phaser BI-TRON_is1) (Version: 1.4.0 - Arturia)
Piano V3 3.3.0 (HKLM-x32\...\Piano V3_is1) (Version: 3.3.0 - Arturia)
Pigments 5.0.2 (HKLM-x32\...\Pigments_is1) (Version: 5.0.2 - Arturia)
Pre 1973 1.7.0 (HKLM-x32\...\Pre 1973_is1) (Version: 1.7.0 - Arturia)
Pre TridA 1.7.0 (HKLM-x32\...\Pre TridA_is1) (Version: 1.7.0 - Arturia)
Pre V76 1.7.0 (HKLM-x32\...\Pre V76_is1) (Version: 1.7.0 - Arturia)
Prophet-5 V 1.3.0 (HKLM-x32\...\Prophet-5 V_is1) (Version: 1.3.0 - Arturia)
Prophet-VS V 1.3.0 (HKLM-x32\...\Prophet-VS V_is1) (Version: 1.3.0 - Arturia)
Proton Drive (HKLM\...\{EF09DE4F-015C-435F-B51D-E3FD62C70F8B}) (Version: 1.6.2 - Proton AG) Hidden
Proton Drive (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\{B6F53ED2-348F-4CF0-910F-A17E69E9ED97}) (Version: 1.6.2 - Proton AG)
Proton VPN (HKLM\...\Proton VPN_is1) (Version: 3.2.12 - Proton AG)
qBittorrent (HKLM-x32\...\qBittorrent) (Version: 4.6.5 - The qBittorrent project)
Quick Photo Finder (HKLM\...\{3505B943-A3D0-4374-8D36-DD91A3CACD4A}_is1) (Version: 1.0.0.4 - Digital Protection Services S.R.L)
REAPER (x64) (HKLM\...\REAPER) (Version: 7.18 - Cockos Incorporated)
Rev INTENSITY 1.5.0 (HKLM-x32\...\Rev INTENSITY_is1) (Version: 1.5.0 - Arturia)
Rev PLATE-140 1.6.0 (HKLM-x32\...\Rev PLATE-140_is1) (Version: 1.6.0 - Arturia)
Rev SPRING-636 1.5.0 (HKLM-x32\...\Rev SPRING-636_is1) (Version: 1.5.0 - Arturia)
RivaTuner Statistics Server 7.3.4 (HKLM-x32\...\RTSS) (Version: 7.3.4 - Unwinder)
Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.85.1858 - Rockstar Games)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.2.7.3 - Rockstar Games)
SEM V2 2.13.0 (HKLM-x32\...\SEM V2_is1) (Version: 2.13.0 - Arturia)
Shotcut (HKLM\...\Shotcut_is1) (Version: 24.02.29 - Meltytech)
Signal 7.24.1 (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\7d96caee-06e6-597c-9f2f-c7bb2e0948b4) (Version: 7.24.1 - Signal Messenger, LLC)
Solina V2 2.13.0 (HKLM-x32\...\Solina V2_is1) (Version: 2.13.0 - Arturia)
Spitfire Audio version 3.4.10 (HKLM-x32\...\{ABC5F486-25BD-4BAA-9FA1-A84152CBB563}_is1) (Version: 3.4.10 - Spitfire Audio Holdings Ltd)
SQ80 V 1.6.0 (HKLM-x32\...\SQ80 V_is1) (Version: 1.6.0 - Arturia)
Stage-73 V2 2.6.1 (HKLM-x32\...\Stage-73 V2_is1) (Version: 2.6.1 - Arturia)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Stremio (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\Stremio) (Version: 4.4.168 - Smart Code Ltd)
Synclavier V 2.13.0 (HKLM-x32\...\Synclavier V_is1) (Version: 2.13.0 - Arturia)
Synthi V 1.9.0 (HKLM-x32\...\Synthi V_is1) (Version: 1.9.0 - Arturia)
Tape MELLO-FI 1.3.0 (HKLM-x32\...\Tape MELLO-FI_is1) (Version: 1.3.0 - Arturia)
VeraCrypt (HKLM-x32\...\VeraCrypt) (Version: 1.26.7 - IDRIX)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.20 - VideoLAN)
Vocoder V 1.6.0 (HKLM-x32\...\Vocoder V_is1) (Version: 1.6.0 - Arturia)
Vortex (HKLM\...\57979c68-f490-55b8-8fed-8b017a5af2fe) (Version: 1.12.0 - Black Tree Gaming Ltd.)
VOX Continental V2 2.13.0 (HKLM-x32\...\VOX Continental V2_is1) (Version: 2.13.0 - Arturia)
Vysor (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\vysor) (Version: 5.0.7 - Vysor Inc.)
WeMod (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\WeMod) (Version: 9.8.0 - WeMod)
Wildlander Launcher 2.19.0 (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\fac0cdda-b581-5a1a-ac45-70ba9218df05) (Version: 2.19.0 - Wildlander)
Windows Driver Package - Amazon.com (WinUSB) FireDevicesUsbDeviceClass (10/27/2014 1.4.0000.00000) (HKLM\...\34134A59F616767F2CEC57DC0849834538166E22) (Version: 10/27/2014 1.4.0000.00000 - Amazon.com)
WinRAR 6.24 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.24.0 - win.rar GmbH)
Wise Duplicate Finder (HKLM-x32\...\Wise Duplicate Finder_is1) (Version: 2.1.1 - Lespeed Technology Co., Ltd.)
Wondershare Filmora 13(Build 13.0.25.4414) (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\Wondershare Filmora 13_is1) (Version: - Wondershare Software)
Wondershare Helper Compact 2.6.0 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.6.0 - Wondershare)
Wondershare NativePush(Build 1.0.1.0) (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\Wondershare NativePush_is1) (Version: - Wondershare Software)
Wurli V2 2.12.0 (HKLM-x32\...\Wurli V2_is1) (Version: 2.12.0 - Arturia)
Wurli V3 3.0.0 (HKLM-x32\...\Wurli V3_is1) (Version: 3.0.0 - Arturia)
Xfer Records Serum 1.35b1 (HKLM\...\Xfer Records Serum 1.35b1-r4e_is1) (Version: 1.35b1 - Xfer Records)
XLN Audio Addictive Drums 2 (HKLM\...\Addictive Drums 2_is1) (Version: 2.2.5.6 - XLN Audio)
Packages:
=========
Alarm Clock HD -> C:\Program Files\WindowsApps\AntaraSoftware.AlarmClockHD_7.0.0.0_x64__7jhd16s0b93qm [2024-08-31] (ANTARA SOFTWARE and CONSULTING PRIVATE LIMITED)
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5635.0_x64__8j3eq9eme6ctt [2024-09-17] (INTEL CORP) [Startup Task]
Microsoft Teams (work or school) -> C:\Program Files\WindowsApps\MSTeams_24004.1309.2689.2246_x64__8wekyb3d8bbwe [2024-03-12] (Microsoft) [Startup Task]
Microsoft.BingSearch -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.0.95.0_x64__8wekyb3d8bbwe [2024-07-23] (Microsoft Corporation)
Microsoft.StartExperiencesApp -> C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.144.0_x64__8wekyb3d8bbwe [2024-09-10] (Microsoft Corporation) [Startup Task]
MicrosoftWindows.CrossDevice -> C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.24081.55.0_x64__cw5n1h2txyewy [2024-09-05] (Microsoft Windows) [Startup Task]
Move Mouse -> C:\Program Files\WindowsApps\1258EllAbi.MoveMouse_4.18.2.0_x64__hjfwaxvfbwh7t [2024-06-18] (ellabi) [Startup Task]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.966.0_x64__56jybvy8sckqj [2024-04-28] (NVIDIA Corp.)
Photos -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2024.11070.31001.0_x64__8wekyb3d8bbwe [2024-08-02] (Microsoft Corporation) [Startup Task]
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.51.327.0_x64__dt26b99r8h8gj [2024-09-17] (Realtek Semiconductor Corp)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2435.4.0_x64__cv1g1gvanyjgm [2024-09-10] (WhatsApp Inc.) [Startup Task]
Widgets Platform Runtime -> C:\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.4.0.0_x64__8wekyb3d8bbwe [2024-09-06] (Microsoft Corporation)
WinAppRuntime.Main.1.5 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.5_5001.214.1843.0_x64__8wekyb3d8bbwe [2024-08-18] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_6000.242.101.0_x64__8wekyb3d8bbwe [2024-09-06] (Microsoft Corp.)
Windows Feature Experience Pack -> C:\Windows\SystemApps\LKG\MicrosoftWindows.LKG.AccountsService_cw5n1h2txyewy [2024-09-11] (Microsoft Windows)
Windows Feature Experience Pack -> C:\Windows\SystemApps\LKG\MicrosoftWindows.LKG.DesktopSpotlight_cw5n1h2txyewy [2024-09-11] (Microsoft Windows)
Windows Feature Experience Pack -> C:\Windows\SystemApps\LKG\MicrosoftWindows.LKG.IrisService_cw5n1h2txyewy [2024-09-11] (Microsoft Windows)
WinRAR -> C:\Program Files\WinRAR [2024-03-15] (win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2246425733-1572341141-2263144653-1001_Classes\CLSID\{04271989-C4D2-F93F-6589-6297B5AF6FEB} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}
CustomCLSID: HKU\S-1-5-21-2246425733-1572341141-2263144653-1001_Classes\CLSID\{14100442-9664-1407-2647-000000000000}\localserver32 -> C:\Users\Admin\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
CustomCLSID: HKU\S-1-5-21-2246425733-1572341141-2263144653-1001_Classes\CLSID\{1dcb280c-9699-aefe-803c-2007c35cbb5a}\localserver32 -> C:\Users\Admin\AppData\Local\Programs\Proton\Drive\ProtonDrive.exe (Proton AG -> Proton AG)
CustomCLSID: HKU\S-1-5-21-2246425733-1572341141-2263144653-1001_Classes\CLSID\{50726f74-6f6e-2e56-504e-000000000000}\localserver32 -> C:\Program Files\Proton\VPN\v3.2.12\ProtonVPN.exe (Proton AG -> )
CustomCLSID: HKU\S-1-5-21-2246425733-1572341141-2263144653-1001_Classes\CLSID\{6b4aeb40-3ff6-4d02-9571-8caac87567ac}\InprocServer32 -> D:\Programmes\Thunderbird\notificationserver.dll => No File
CustomCLSID: HKU\S-1-5-21-2246425733-1572341141-2263144653-1001_Classes\CLSID\{C4DB226C-69DA-41D4-BA44-EA2454B7F66E} -> [Proton Drive] => C:\Users\Admin\Proton Drive\alexandre.bonin [2024-07-29 19:07]
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [Eraser] -> {BC9B776A-90D7-4476-A791-79D835F30650} => C:\Program Files\Eraser\Eraser.Shell.dll [2021-09-25] (Heidi Computers Ltd -> The Eraser Project)
ContextMenuHandlers1: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => D:\Programmes\Format Factory\ShellEx_108.dll -> No File
ContextMenuHandlers2: [Eraser] -> {BC9B776A-90D7-4476-A791-79D835F30650} => C:\Program Files\Eraser\Eraser.Shell.dll [2021-09-25] (Heidi Computers Ltd -> The Eraser Project)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => D:\Programmes\Malwarebytes\mbshlext.dll -> No File
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [Eraser] -> {BC9B776A-90D7-4476-A791-79D835F30650} => C:\Program Files\Eraser\Eraser.Shell.dll [2021-09-25] (Heidi Computers Ltd -> The Eraser Project)
ContextMenuHandlers4: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => D:\Programmes\Format Factory\ShellEx_108.dll -> No File
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [Eraser] -> {BC9B776A-90D7-4476-A791-79D835F30650} => C:\Program Files\Eraser\Eraser.Shell.dll [2021-09-25] (Heidi Computers Ltd -> The Eraser Project)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_3594fcc1d16e3924\nvshext.dll [2024-03-02] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [Eraser] -> {BC9B776A-90D7-4476-A791-79D835F30650} => C:\Program Files\Eraser\Eraser.Shell.dll [2021-09-25] (Heidi Computers Ltd -> The Eraser Project)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => D:\Programmes\Malwarebytes\mbshlext.dll -> No File
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32: [VIDC.RTV1] => C:\Windows\system32\rtvcvfw64.dll [246272 2012-09-28] () [File not signed]
HKLM\...\Drivers32: [VIDC.RTV1] => C:\Windows\SysWOW64\rtvcvfw32.dll [247296 2012-09-28] () [File not signed]
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2018-11-23 05:01 - 2018-11-23 05:01 - 000438784 _____ (A-Volute) [File not signed] C:\Program Files (x86)\MSI\Dragon Center\YooMixCOM.dll
2016-08-10 18:34 - 2016-08-10 18:34 - 000047816 _____ (MICRO-STAR INTERNATIONAL CO., LTD -> www.internals.com) [File not signed] C:\Program Files (x86)\MSI\Dragon Center\MSIAPP_Service\WinIo64.dll
2015-06-11 17:35 - 2015-06-11 17:35 - 000047816 _____ (MICRO-STAR INTERNATIONAL CO., LTD -> www.internals.com) [File not signed] C:\Program Files (x86)\MSI\Dragon Center\WinIo64.dll
2018-08-01 07:54 - 2018-08-01 07:54 - 000014632 _____ (Micro-Star International CO., LTD. -> ) [File not signed] C:\Program Files (x86)\MSI\Dragon Center\UEFIVaribleDll.dll
2024-09-13 09:53 - 2024-09-13 09:53 - 002849280 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [File not signed] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\libcrypto-1_1-x64.dll
2024-09-13 09:53 - 2024-09-13 09:53 - 000685056 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [File not signed] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\libssl-1_1-x64.dll
2024-09-13 09:53 - 2024-09-13 09:53 - 000046592 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\bearer\qgenericbearer.dll
2024-09-13 09:53 - 2024-09-13 09:53 - 006270976 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\Qt5Core.dll
2024-09-13 09:53 - 2024-09-13 09:53 - 001389568 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\Qt5Network.dll
2024-09-13 09:53 - 2024-09-13 09:53 - 000157184 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\Qt5WebSockets.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\Admin\Downloads\MozillaVPN.msi:MBAM.Zone.Identifier [148]
AlternateDataStreams: C:\Users\Admin\Downloads\qbittorrent_4.6.3_x64_setup.exe:MBAM.Zone.Identifier [345]
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2024-08-07] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-08-31] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-31] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-31] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-31] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-31] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-31] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-31] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-31] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-31] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\sharepoint.com -> hxxps://univtoursfr-files.sharepoint.com
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2024-05-31 20:53 - 2024-08-16 12:55 - 000000768 _____ C:\Windows\system32\drivers\etc\hosts
0.0.0.0 www.aomeitech.com
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\Control Panel\Desktop\\Wallpaper -> D:\Documents\maxresdefault.jpg
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
Network Binding:
=============
Wi-Fi: Intel(R) Wireless-AC 9560 160MHz -> Netwtw08.sys
Ethernet: Realtek PCIe GbE Family Controller -> rtcx21x64.sys
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run: => "Wondershare Helper Compact.exe"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_5EFC0ECB77A7585FE9DCDD0B2E946A2B"
HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\StartupApproved\Run: => "Steam"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [TCP Query User{49C761E0-F886-4606-B7E2-9258A31F0519}C:\users\admin\appdata\local\wondershare\wondershare nativepush\wstoastnotification.exe] => (Block) C:\users\admin\appdata\local\wondershare\wondershare nativepush\wstoastnotification.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
FirewallRules: [UDP Query User{71A5A942-0169-4321-BC0E-513E6B0235E3}C:\users\admin\appdata\local\wondershare\wondershare nativepush\wstoastnotification.exe] => (Block) C:\users\admin\appdata\local\wondershare\wondershare nativepush\wstoastnotification.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
FirewallRules: [TCP Query User{F78BCBE9-BB62-44FD-B3D0-F93B56776DD5}D:\programmes\ea\battlefield v\bfv.exe] => (Allow) D:\programmes\ea\battlefield v\bfv.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [UDP Query User{00C641B0-11C4-4CA7-BAA4-6083B9449B0E}D:\programmes\ea\battlefield v\bfv.exe] => (Allow) D:\programmes\ea\battlefield v\bfv.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [TCP Query User{80FF300F-15F9-4DDF-94E3-FBD62793E8FD}D:\platform-tools-latest-windows\platform-tools\adb.exe] => (Allow) D:\platform-tools-latest-windows\platform-tools\adb.exe (Google LLC -> )
FirewallRules: [UDP Query User{F2A584D9-0F65-4E2C-A1F2-CD36B344DA46}D:\platform-tools-latest-windows\platform-tools\adb.exe] => (Allow) D:\platform-tools-latest-windows\platform-tools\adb.exe (Google LLC -> )
FirewallRules: [{F5CCB806-1FE6-4B18-8B61-92E716768B1A}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F0E2CF03-2936-4EA7-B563-EFD0C9DC5F44}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C87789A2-B50F-450A-9165-5C3A8485CD8D}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{72810D74-E669-4059-975C-A84B1FFC1ECD}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{345BEF79-9143-4A64-B674-6B92501C4751}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3E8A95CF-B756-4588-A834-79297566A8FE}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{E1437917-D703-4353-9635-DF15420AD0CE}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{2B5FABFD-4BD5-4EA9-A006-99E14B704D32}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAConnect_microsoft.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{474DEECA-AFB1-4000-A968-4EF2E7DAFA66}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAConnect_microsoft.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{8509F184-0B75-4F0F-A82C-8499085A1F55}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{314C4627-6718-4E4D-A836-F0D433A56277}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{AF2326F6-C258-470F-A00C-2DE46E9FE99B}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAGEP.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{8053831D-22B2-4D06-BC2B-7B8D6241B08A}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAGEP.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{D0F64FC1-B119-430B-ACBA-FABC2DE2E488}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALocalHostSvc.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{B65875FC-0C13-4090-A6CB-B08D1AEB5144}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALocalHostSvc.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{D77E764F-9B93-4E18-85A4-FFAFF1BB3805}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALaunchHelper.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{D788964D-542C-4186-9155-7C6460C967C7}] => (Allow) D:\Programmes\Steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{9AB4A86B-7534-43E7-856D-99C6871DDB07}] => (Allow) D:\Programmes\Steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{2C915F78-8AD8-4045-9C56-113FA94DC677}] => (Allow) D:\Programmes\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{5E0A6CBB-1DAD-40DB-A5D6-A3C160489B69}] => (Allow) D:\Programmes\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{E6518E27-B1CC-4EC9-B736-9CC81B4B861F}] => (Allow) D:\Programmes\Steam\steamapps\common\AoE2DE\AoE2DE_s.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{419AE51A-9526-4C51-A7CD-1AEA8A135A68}] => (Allow) D:\Programmes\Steam\steamapps\common\AoE2DE\AoE2DE_s.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BF1D2270-291E-4E0E-9749-D55DD7791E5C}] => (Allow) D:\Programmes\Steam\steamapps\common\AoE2DE\BattleServer\BattleServer.exe (Microsoft Corporation -> )
FirewallRules: [{B4537D8B-6463-48A9-BBB8-B4241A505FC2}] => (Allow) D:\Programmes\Steam\steamapps\common\AoE2DE\BattleServer\BattleServer.exe (Microsoft Corporation -> )
FirewallRules: [{D64A5540-6280-424F-97B2-15D579639364}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\129.0.2792.52\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Restore Points =========================
ATTENTION: System Restore is disabled (Total:118.38 GB) (Free:11.65 GB) (10%)
==================== Faulty Device Manager Devices ============
Name: Android ADB Interface
Description: Android ADB Interface
Class Guid: {3f966bd9-fa04-4ec5-991c-d326973b5128}
Manufacturer: Google, Inc.
Service: WinUSB
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: PCI Device
Description: PCI Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: PCI Data Acquisition and Signal Processing Controller
Description: PCI Data Acquisition and Signal Processing Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: SM Bus Controller
Description: SM Bus Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: ========================
Application errors:
==================
Error: (09/17/2024 09:18:14 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT AUTHORITY)
Description: Windows cannot load the extensible counter DLL "C:\Windows\system32\sysmain.dll" (Win32 error code 126).
Error: (09/11/2024 07:15:12 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT AUTHORITY)
Description: Windows cannot load the extensible counter DLL "C:\Windows\system32\sysmain.dll" (Win32 error code 126).
Error: (09/10/2024 09:10:24 PM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )
Description: Event-ID 5
Error: (09/06/2024 09:08:54 AM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT AUTHORITY)
Description: Windows cannot load the extensible counter DLL "C:\Windows\system32\sysmain.dll" (Win32 error code 126).
Error: (09/03/2024 10:14:36 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT AUTHORITY)
Description: Windows cannot load the extensible counter DLL "C:\Windows\system32\sysmain.dll" (Win32 error code 126).
Error: (08/31/2024 11:26:00 AM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )
Description: Event-ID 5
Error: (08/21/2024 09:34:34 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT AUTHORITY)
Description: Windows cannot load the extensible counter DLL "C:\Windows\system32\sysmain.dll" (Win32 error code 126).
Error: (08/19/2024 05:08:38 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, A system shutdown is in progress..
System errors:
=============
Error: (09/24/2024 07:13:58 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80073d02: 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience.
Error: (09/24/2024 07:13:05 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80073d02: 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice.
Error: (09/24/2024 07:11:39 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT AUTHORITY)
Description: The Secure Boot update failed to update a Secure Boot variable with error -2147020471. For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931
Error: (09/18/2024 06:00:01 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT AUTHORITY)
Description: The Secure Boot update failed to update a Secure Boot variable with error -2147020471. For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931
Error: (09/18/2024 05:34:23 PM) (Source: Netwtw08) (EventID: 5005) (User: )
Description: Intel(R) Wireless-AC 9560 160MHz : Has encountered an internal error and has failed.
5005 - Driver internal error
Error: (09/18/2024 05:34:23 PM) (Source: Netwtw08) (EventID: 5055) (User: )
Description: 5055 - HW error
Error: (09/18/2024 05:34:22 PM) (Source: Netwtw08) (EventID: 5005) (User: )
Description: Intel(R) Wireless-AC 9560 160MHz : Has encountered an internal error and has failed.
5005 - Driver internal error
Error: (09/18/2024 05:34:22 PM) (Source: Netwtw08) (EventID: 5007) (User: )
Description: 5007 - TX/CMD timeout (TfdQueue hanged)
Windows Defender:
================
Date: 2024-09-18 19:17:55
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2024-09-18 17:18:21
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2024-09-17 20:51:35
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2024-09-16 13:58:01
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2024-09-14 13:01:21
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Event[0]
Date: 2024-08-12 12:08:27
Description:
Microsoft Defender Antivirus Real-Time Protection feature has encountered an error and failed.
Feature: On Access
Error Code: 0x8007043c
Error description: This service cannot be started in Safe Mode
Reason: Antimalware security intelligence has stopped functioning for an unknown reason. In some instances, restarting the service may resolve the problem.
Date: 2024-08-10 20:50:35
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence and will attempt to revert to a previous version.
Security intelligence Attempted: Backup
Error Code: 0x80004004
Error description: Operation aborted
Security intelligence Version: 1.415.455.0;1.415.455.0
Engine Version: 1.1.24060.5
Date: 2024-08-10 20:50:34
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence and will attempt to revert to a previous version.
Security intelligence Attempted: Current
Error Code: 0x80501102
Error description: An unexpected problem occurred. Install any available updates, and then try to start the program again. For information on installing updates, see Help and Support.
Security intelligence Version: 1.415.455.0;1.415.455.0
Engine Version: 1.1.24060.5
Date: 2024-08-10 17:45:59
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.415.455.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.24060.5
Error code: 0x80240017
Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
Date: 2024-08-10 17:42:50
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence and will attempt to revert to a previous version.
Security intelligence Attempted: Backup
Error Code: 0x80004004
Error description: Operation aborted
Security intelligence Version: 1.415.455.0;1.415.455.0
Engine Version: 1.1.24060.5
CodeIntegrity:
===============
Date: 2024-09-18 17:02:37
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Users\Admin\AppData\Local\Programs\signal-desktop\Signal.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\nvspcap64.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. E16R3IMS.108 03/26/2020
Motherboard: Micro-Star International Co., Ltd. MS-16R3
Processor: Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz
Percentage of memory in use: 56%
Total physical RAM: 16228.02 MB
Available physical RAM: 7061.01 MB
Total Virtual: 56228.02 MB
Available Virtual: 44919.91 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:118.38 GB) (Free:11.65 GB) (Model: SAMSUNG MZVLW128HEGR-00000) NTFS
Drive d: (New Volume) (Fixed) (Total:931.5 GB) (Free:647.41 GB) (Model: CT1000MX500SSD1) NTFS
\\?\Volume{fb64c188-eff3-4b18-b5de-8f930b6df035}\ () (Fixed) (Total:0.75 GB) (Free:0.06 GB) NTFS
\\?\Volume{9d93c5fc-4826-46a4-9ef6-5c969dcca456}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 1 (Size: 119.2 GB) (Disk ID: 0C95A92A)
Partition: GPT.
==================== End of Addition.txt =======================
Ran by Admin (24-09-2024 19:13:13)
Running from D:\
Microsoft Windows 11 Pro Version 23H2 22631.4169 (X64) (2024-02-24 05:28:40)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Admin (S-1-5-21-2246425733-1572341141-2263144653-1001 - Administrator - Enabled) => C:\Users\Admin
Administrator (S-1-5-21-2246425733-1572341141-2263144653-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2246425733-1572341141-2263144653-503 - Limited - Disabled)
Guest (S-1-5-21-2246425733-1572341141-2263144653-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-2246425733-1572341141-2263144653-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Malwarebytes (Enabled - Up to date) {0D452135-A081-B000-D6B6-132E52638543}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Ableton Live 12 Suite (HKLM\...\{E107EAC0-8655-4161-8582-8494EC0590A6}) (Version: 12.0.0.0 - Ableton) Hidden
Ableton Live 12 Suite (HKLM-x32\...\{14a63b0f-986f-479c-98b3-725e24892b0c}) (Version: 12.0.0.0 - Ableton)
Ableton Push Driver v5.57.0 (HKLM\...\{2143CAA3-2BA4-4073-93D1-E440A65F42CD}) (Version: 5.57.0 - Ableton) Hidden
Acid V 1.1.1 (HKLM-x32\...\Acid V_is1) (Version: 1.1.1 - Arturia)
Amazon.com Fire_Devices (HKLM\...\Fire_Devices Drivers) (Version: 2 - Amazon.com)
Analog Lab V 5.10.1 (HKLM-x32\...\Analog Lab V_is1) (Version: 5.10.1 - Arturia)
Ankama Launcher 3.12.10 (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\410fcd79-1be8-5bf1-986e-ea09c55f7edf) (Version: 3.12.10 - Ankama)
Antares Auto-Tune Pro (HKLM\...\Antares Auto-Tune Pro_is1) (Version: 10.3.1 - Antares & Team V.R)
AOMEI Partition Assistant 10.4.0 (HKLM-x32\...\{04F850ED-FD0F-4ED1-AE1B-4498165BF3D2}_is1) (Version: 10.4.0 - AOMEI International Network Limited.)
ARP 2600 V3 3.13.0 (HKLM-x32\...\ARP 2600 V3_is1) (Version: 3.13.0 - Arturia)
Arturia MiniFuse Audio Driver v1.1.1 (HKLM-x32\...\Software_Arturia_arturiaminifuseusbaudio_Setup) (Version: 1.1.1 - Arturia)
Arturia Software Center 2.7.2 (HKLM-x32\...\Arturia Software Center_is1) (Version: 2.7.2 - Arturia)
AudioFuse Control Center 2.2.1 (HKLM\...\AudioFuse Control Center_is1) (Version: 2.2.1 - Arturia)
AudioFuse USB Audio Driver v2.0.0 (HKLM\...\{EF081BD3-4190-426A-8459-6132085AE14F}) (Version: 2.0.0 - Arturia)
Augmented BRASS 1.1.0 (HKLM-x32\...\Augmented BRASS_is1) (Version: 1.1.0 - Arturia)
Augmented GRAND PIANO 1.6.0 (HKLM-x32\...\Augmented GRAND PIANO_is1) (Version: 1.6.0 - Arturia)
Augmented STRINGS 1.6.0 (HKLM-x32\...\Augmented STRINGS_is1) (Version: 1.6.0 - Arturia)
Augmented VOICES 1.6.0 (HKLM-x32\...\Augmented VOICES_is1) (Version: 1.6.0 - Arturia)
Augmented WOODWINDS 1.0.0 (HKLM-x32\...\Augmented WOODWINDS_is1) (Version: 1.0.0 - Arturia)
AutoHotkey (HKLM\...\AutoHotkey) (Version: 2.0.11 - AutoHotkey Foundation LLC)
B-3 V2 2.9.1 (HKLM-x32\...\B-3 V2_is1) (Version: 2.9.1 - Arturia)
Battery Calibration (HKLM-x32\...\InstallShield_{634AC01E-49DB-4AD2-B87C-90D4DCC6AFA1}) (Version: 1.0.1609.1901 - Micro-Star International Co., Ltd.)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield⢠V (HKLM-x32\...\{e26b382f-e945-4f70-9318-121b683f1d61}) (Version: 1.0.77.34058 - Electronic Arts)
Buchla Easel V 1.13.0 (HKLM-x32\...\Buchla Easel V_is1) (Version: 1.13.0 - Arturia)
Bus FORCE 1.3.0 (HKLM-x32\...\Bus FORCE_is1) (Version: 1.3.0 - Arturia)
CapCut (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\CapCut) (Version: 3.8.0.1431 - Bytedance Pte. Ltd.)
Cheat Engine 7.5 (HKLM\...\Cheat Engine_is1) (Version: - Cheat Engine)
Chorus DIMENSION-D 1.4.0 (HKLM-x32\...\Chorus DIMENSION-D_is1) (Version: 1.4.0 - Arturia)
Chorus JUN-6 1.4.0 (HKLM-x32\...\Chorus JUN-6_is1) (Version: 1.4.0 - Arturia)
Clavinet V 1.13.0 (HKLM-x32\...\Clavinet V_is1) (Version: 1.13.0 - Arturia)
CMI V 1.13.0 (HKLM-x32\...\CMI V_is1) (Version: 1.13.0 - Arturia)
Comp DIODE-609 1.3.0 (HKLM-x32\...\Comp DIODE-609_is1) (Version: 1.3.0 - Arturia)
Comp FET-76 1.6.0 (HKLM-x32\...\Comp FET-76_is1) (Version: 1.6.0 - Arturia)
Comp TUBE-STA 1.6.0 (HKLM-x32\...\Comp TUBE-STA_is1) (Version: 1.6.0 - Arturia)
Comp VCA-65 1.6.0 (HKLM-x32\...\Comp VCA-65_is1) (Version: 1.6.0 - Arturia)
CP-70 V 1.0.0 (HKLM-x32\...\CP-70 V_is1) (Version: 1.0.0 - Arturia)
CS-80 V4 4.3.0 (HKLM-x32\...\CS-80 V4_is1) (Version: 4.3.0 - Arturia)
CyberLink PowerDirector 365 (HKLM-x32\...\{678184FC-3343-4125-8098-01B6032F8BB2}) (Version: 22.3.2808.0 - CyberLink Corp.)
CZ V 1.9.0 (HKLM-x32\...\CZ V_is1) (Version: 1.9.0 - Arturia)
Delay BRIGADE 1.6.0 (HKLM-x32\...\Delay BRIGADE_is1) (Version: 1.6.0 - Arturia)
Delay ETERNITY 1.6.0 (HKLM-x32\...\Delay ETERNITY_is1) (Version: 1.6.0 - Arturia)
Delay TAPE-201 1.6.0 (HKLM-x32\...\Delay TAPE-201_is1) (Version: 1.6.0 - Arturia)
Discord (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\Discord) (Version: 1.0.9034 - Discord Inc.)
Disk Drill 5.5.900.0 (HKLM-x32\...\{bf17c798-887e-4516-8036-35d6e0649a36}) (Version: 5.5.900.0 - CleverFiles)
Disk Drill 5.5.900.0 (x64) (HKLM\...\{4E4DB27B-ACF9-4F10-8D53-9A0463612025}) (Version: 5.5.900.0 - CleverFiles) Hidden
Dist COLDFIRE 1.1.0 (HKLM-x32\...\Dist COLDFIRE_is1) (Version: 1.1.0 - Arturia)
Dist OPAMP-21 1.1.0 (HKLM-x32\...\Dist OPAMP-21_is1) (Version: 1.1.0 - Arturia)
Dist TUBE-CULTURE 1.1.1 (HKLM-x32\...\Dist TUBE-CULTURE_is1) (Version: 1.1.1 - Arturia)
Dokan Library 1.5.1.1000 (x64) (HKLM\...\{65A3A964-3DC3-0105-0001-211126123627}) (Version: 1.5.1.1000 - Dokany Project) Hidden
Dokan Library 1.5.1.1000 Bundle (HKLM-x32\...\{05c046de-f751-48c8-b8d3-77259ea88eb7}) (Version: 1.5.1.1000 - Dokany Project)
DownloadHelper CoApp (HKLM-x32\...\DownloadHelper CoApp) (Version: 2.0.19.0 - ACLAP)
Dragon Center (HKLM-x32\...\InstallShield_{C65B26BC-5A6F-4135-9678-55A877655471}) (Version: 2.6.2005.0601 - Micro-Star International Co., Ltd.)
DX7 V 1.13.0 (HKLM-x32\...\DX7 V_is1) (Version: 1.13.0 - Arturia)
EA app (HKLM\...\{C2622085-ABD2-49E5-8AB9-D3D6A642C091}) (Version: 13.297.0.5810 - Electronic Arts) Hidden
EA app (HKLM-x32\...\{c91d427c-5fb4-4c67-be46-7168c5b05eec}) (Version: 13.297.0.5810 - Electronic Arts)
Efx FRAGMENTS 1.2.0 (HKLM-x32\...\Efx FRAGMENTS_is1) (Version: 1.2.0 - Arturia)
Efx REFRACT 1.0.0 (HKLM-x32\...\Efx REFRACT_is1) (Version: 1.0.0 - Arturia)
Emulator II V 1.6.0 (HKLM-x32\...\Emulator II V_is1) (Version: 1.6.0 - Arturia)
Epic Games Launcher (HKLM-x32\...\{B85FAA6E-A9AA-4655-9029-E1A4EDC05E1A}) (Version: 1.3.93.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{57A956AB-4BCC-45C6-9B40-957E4E125568}) (Version: 2.0.44.0 - Epic Games, Inc.)
EQ SITRAL-295 1.3.0 (HKLM-x32\...\EQ SITRAL-295_is1) (Version: 1.3.0 - Arturia)
Eraser 6.2.0.2993 (HKLM\...\{82602EDA-27BE-4358-AB3A-BD09EA51A1E6}) (Version: 6.2.2993 - The Eraser Project)
f.lux (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\Flux) (Version: 4.134 - f.lux Software LLC)
FabFilter Total Bundle (HKLM\...\FabFilter Total Bundle_is1) (Version: 2024.02.05 - FabFilter)
Farfisa V 1.13.0 (HKLM-x32\...\Farfisa V_is1) (Version: 1.13.0 - Arturia)
Filter M12 1.7.0 (HKLM-x32\...\Filter M12_is1) (Version: 1.7.0 - Arturia)
Filter MINI 1.8.0 (HKLM-x32\...\Filter MINI_is1) (Version: 1.8.0 - Arturia)
Filter MS-20 1.1.0 (HKLM-x32\...\Filter MS-20_is1) (Version: 1.1.0 - Arturia)
Filter SEM 1.7.0 (HKLM-x32\...\Filter SEM_is1) (Version: 1.7.0 - Arturia)
Fire Toolbox V33.1 version � (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\{A6CD7E8F-BACC-42D5-A36D-D40D6EAC5E87}_is1) (Version: � - Datastream)
Flanger BL-20 1.4.0 (HKLM-x32\...\Flanger BL-20_is1) (Version: 1.4.0 - Arturia)
Folder Size (64-bit) (HKLM\...\{F24FF688-7138-4CCF-A83F-71E9FB01170E}) (Version: 2.6 - Brio)
FormatFactory 5.17.0.0 (HKLM-x32\...\FormatFactory) (Version: 5.17.0.0 - Free Time)
GIMP 2.10.38 (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\GIMP-2_is1) (Version: 2.10.38 - The GIMP Team)
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Help Desk (HKLM-x32\...\InstallShield_{7E8181AF-9679-49B3-B133-C265709B6927}) (Version: 1.0.1802.0501 - Micro-Star International Co., Ltd.)
IK Multimedia AmpliTube 5 (HKLM\...\IK Multimedia AmpliTube 5_is1) (Version: 5.7.0 - IK Multimedia)
iZotope Meter Tap 3 (HKLM\...\Meter Tap 3_is1) (Version: 1.0.4 - iZotope)
iZotope Ozone Pro (HKLM\...\iZotope Ozone Pro_is1) (Version: 10.4.0 - iZotope)
Jun-6 V 1.6.1 (HKLM-x32\...\Jun-6 V_is1) (Version: 1.6.1 - Arturia)
Jup-8 V4 4.6.0 (HKLM-x32\...\Jup-8 V4_is1) (Version: 4.6.0 - Arturia)
KORG MS-20 V 1.3.0 (HKLM-x32\...\KORG MS-20 V_is1) (Version: 1.3.0 - Arturia)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
LibreOffice 24.2.0.3 (HKLM\...\{5A433714-C509-4707-BF0C-410D3FBCE8B3}) (Version: 24.2.0.3 - The Document Foundation)
Malwarebytes version 5.1.7.121 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.1.7.121 - Malwarebytes)
Matrix-12 V2 2.13.0 (HKLM-x32\...\Matrix-12 V2_is1) (Version: 2.13.0 - Arturia)
Mellotron V 1.9.1 (HKLM-x32\...\Mellotron V_is1) (Version: 1.9.1 - Arturia)
Messenger (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\c1b3adcf-2068-5e8d-b25d-30ce588e3a4c) (Version: 215.3.624227262 - Facebook, Inc.)
Microsoft .NET Host - 6.0.32 (x64) (HKLM\...\{A09F8381-88C3-44C4-9DAB-AC44F4F4DB4B}) (Version: 48.128.16743 - Microsoft Corporation) Hidden
Microsoft .NET Host - 7.0.16 (x64) (HKLM\...\{9F51D16B-42E8-4A4A-8228-75045541A2AE}) (Version: 56.64.8781 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.7 (x64) (HKLM\...\{E424D6A6-FA28-41E2-8356-B59519A84BB0}) (Version: 64.28.16731 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.32 (x64) (HKLM\...\{667CB653-70E1-4E2B-9C8E-6A02A6CF88B9}) (Version: 48.128.16743 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 7.0.16 (x64) (HKLM\...\{1B690A4C-381A-40D4-BA4A-3F8ACD5CE797}) (Version: 56.64.8781 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.7 (x64) (HKLM\...\{3E3E3302-0CAD-4D0D-B6C0-206B30773468}) (Version: 64.28.16731 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.32 (x64) (HKLM\...\{3FDCF0A2-7C1F-41C7-9749-0D91EC216AED}) (Version: 48.128.16743 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 7.0.16 (x64) (HKLM\...\{CE4D7AE0-FCBA-486F-A58F-DBA3626FBE4B}) (Version: 56.64.8781 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.7 (x64) (HKLM\...\{CA4FE2DB-2E1C-453B-B8C9-960AB929E5B4}) (Version: 64.28.16731 - Microsoft Corporation) Hidden
Microsoft 365 Apps for enterprise - fr-fr (HKLM\...\O365ProPlusRetail - fr-fr) (Version: 16.0.17928.20156 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 128.0.2739.79 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 128.0.2739.79 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 24.166.0818.0003 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.38.33135 (HKLM-x32\...\{c649ede4-f16a-4486-a117-dcc2f2a35165}) (Version: 14.38.33135.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.36.32532 (HKLM-x32\...\{410c0ee1-00bb-41b6-9772-e12c2828b02f}) (Version: 14.36.32532.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.38.33135 (HKLM\...\{19AFE054-CA83-45D5-A9DB-4108EF4BD391}) (Version: 14.38.33135 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.38.33135 (HKLM\...\{AA0C8AB5-7297-4D46-A0D9-08096FE59E46}) (Version: 14.38.33135 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.36.32532 (HKLM-x32\...\{C2C59CAB-8766-4ABD-A8EF-1151A36C41E5}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.36.32532 (HKLM-x32\...\{73F77E4E-5A17-46E5-A5FC-8A061047725F}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.32 (x64) (HKLM\...\{885F1CFB-4EAC-4C60-97B8-394BD65ED91E}) (Version: 48.128.16742 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.32 (x64) (HKLM-x32\...\{1bb295e8-8251-4404-96f1-c437da87fce0}) (Version: 6.0.32.33814 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 7.0.16 (x64) (HKLM\...\{01B2627D-8443-41C0-97F0-9F72AC2FD6A0}) (Version: 56.64.8804 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 7.0.16 (x64) (HKLM-x32\...\{ef5af41f-d68c-48f7-bfb0-5055718601fc}) (Version: 7.0.16.33318 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.7 (x64) (HKLM\...\{F6FBF64F-D459-4F03-BF3B-C0A36A0596A2}) (Version: 64.28.16739 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.7 (x64) (HKLM-x32\...\{754bcfb5-42ac-4c12-8f12-b818943a1365}) (Version: 8.0.7.33814 - Microsoft Corporation)
Mini V3 3.12.0 (HKLM-x32\...\Mini V3_is1) (Version: 3.12.0 - Arturia)
Mini V4 4.0.0 (HKLM-x32\...\Mini V4_is1) (Version: 4.0.0 - Arturia)
MiniBrute V 1.0.0 (HKLM-x32\...\MiniBrute V_is1) (Version: 1.0.0 - Arturia)
MiniFreak V 2.0.0 (HKLM-x32\...\MiniFreak V_is1) (Version: 2.0.0 - Arturia)
MiniFuse Control Center 1.1.1 (HKLM\...\MiniFuse Control Center_is1) (Version: 1.1.1 - Arturia)
Modular V3 3.13.0 (HKLM-x32\...\Modular V3_is1) (Version: 3.13.0 - Arturia)
Mouse Controller version 1.11.3.0 (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\{558409e4-71ad-4b5f-9db7-15e987d0e3aa}_is1) (Version: 1.11.3.0 - MuGiRi Software Development)
Mozilla Firefox (x64 en-US) (HKLM\...\Mozilla Firefox 130.0 (x64 en-US)) (Version: 130.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 129.0.1 - Mozilla)
Mozilla Thunderbird (x64 fr) (HKLM\...\Mozilla Thunderbird 115.8.1 (x64 fr)) (Version: 115.8.1 - Mozilla)
Mozilla Thunderbird (x64 fr) (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\Mozilla Thunderbird 115.13.0 (x64 fr)) (Version: 115.13.0 - Mozilla)
Mozilla VPN (HKLM\...\{2F491215-D718-4713-9071-87C571248738}) (Version: 2.22.1.0 - Mozilla Corporation)
MSI Afterburner 4.6.5 (HKLM-x32\...\Afterburner) (Version: 4.6.5 - MSI Co., LTD)
Muramasa Electrum (HKLM\...\Muramasa Electrum_is1) (Version: 2.0 - Muramasa)
MuseScore 4 (HKLM\...\{649E6B31-1D3A-4D0C-935B-5CC90F29BEC3}) (Version: 4.2.1.240230937 - MuseScore BVBA and Others)
Native Instruments Kontakt 7 (HKLM-x32\...\Native Instruments Kontakt 7) (Version: 7.10.1.0 - Native Instruments)
NVIDIA FrameView SDK 1.3.8513.32290073 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.3.8513.32290073 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.28.0.417 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.28.0.417 - NVIDIA Corporation)
NVIDIA Graphics Driver 551.76 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 551.76 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.17928.20156 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.17928.20156 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-040C-1000-0000000FF1CE}) (Version: 16.0.17928.20156 - Microsoft Corporation) Hidden
OP Auto Clicker (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\OP Auto Clicker_is1) (Version: V4.0 - OP Auto Clicker)
OpenShot Video Editor 3.1.1 (HKLM\...\{4BB0DCDC-BC24-49EC-8937-72956C33A470}_is1) (Version: 3.1.1 - OpenShot Studios, LLC)
OP-Xa V 1.7.0 (HKLM-x32\...\OP-Xa V_is1) (Version: 1.7.0 - Arturia)
Phaser BI-TRON 1.4.0 (HKLM-x32\...\Phaser BI-TRON_is1) (Version: 1.4.0 - Arturia)
Piano V3 3.3.0 (HKLM-x32\...\Piano V3_is1) (Version: 3.3.0 - Arturia)
Pigments 5.0.2 (HKLM-x32\...\Pigments_is1) (Version: 5.0.2 - Arturia)
Pre 1973 1.7.0 (HKLM-x32\...\Pre 1973_is1) (Version: 1.7.0 - Arturia)
Pre TridA 1.7.0 (HKLM-x32\...\Pre TridA_is1) (Version: 1.7.0 - Arturia)
Pre V76 1.7.0 (HKLM-x32\...\Pre V76_is1) (Version: 1.7.0 - Arturia)
Prophet-5 V 1.3.0 (HKLM-x32\...\Prophet-5 V_is1) (Version: 1.3.0 - Arturia)
Prophet-VS V 1.3.0 (HKLM-x32\...\Prophet-VS V_is1) (Version: 1.3.0 - Arturia)
Proton Drive (HKLM\...\{EF09DE4F-015C-435F-B51D-E3FD62C70F8B}) (Version: 1.6.2 - Proton AG) Hidden
Proton Drive (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\{B6F53ED2-348F-4CF0-910F-A17E69E9ED97}) (Version: 1.6.2 - Proton AG)
Proton VPN (HKLM\...\Proton VPN_is1) (Version: 3.2.12 - Proton AG)
qBittorrent (HKLM-x32\...\qBittorrent) (Version: 4.6.5 - The qBittorrent project)
Quick Photo Finder (HKLM\...\{3505B943-A3D0-4374-8D36-DD91A3CACD4A}_is1) (Version: 1.0.0.4 - Digital Protection Services S.R.L)
REAPER (x64) (HKLM\...\REAPER) (Version: 7.18 - Cockos Incorporated)
Rev INTENSITY 1.5.0 (HKLM-x32\...\Rev INTENSITY_is1) (Version: 1.5.0 - Arturia)
Rev PLATE-140 1.6.0 (HKLM-x32\...\Rev PLATE-140_is1) (Version: 1.6.0 - Arturia)
Rev SPRING-636 1.5.0 (HKLM-x32\...\Rev SPRING-636_is1) (Version: 1.5.0 - Arturia)
RivaTuner Statistics Server 7.3.4 (HKLM-x32\...\RTSS) (Version: 7.3.4 - Unwinder)
Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.85.1858 - Rockstar Games)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.2.7.3 - Rockstar Games)
SEM V2 2.13.0 (HKLM-x32\...\SEM V2_is1) (Version: 2.13.0 - Arturia)
Shotcut (HKLM\...\Shotcut_is1) (Version: 24.02.29 - Meltytech)
Signal 7.24.1 (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\7d96caee-06e6-597c-9f2f-c7bb2e0948b4) (Version: 7.24.1 - Signal Messenger, LLC)
Solina V2 2.13.0 (HKLM-x32\...\Solina V2_is1) (Version: 2.13.0 - Arturia)
Spitfire Audio version 3.4.10 (HKLM-x32\...\{ABC5F486-25BD-4BAA-9FA1-A84152CBB563}_is1) (Version: 3.4.10 - Spitfire Audio Holdings Ltd)
SQ80 V 1.6.0 (HKLM-x32\...\SQ80 V_is1) (Version: 1.6.0 - Arturia)
Stage-73 V2 2.6.1 (HKLM-x32\...\Stage-73 V2_is1) (Version: 2.6.1 - Arturia)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Stremio (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\Stremio) (Version: 4.4.168 - Smart Code Ltd)
Synclavier V 2.13.0 (HKLM-x32\...\Synclavier V_is1) (Version: 2.13.0 - Arturia)
Synthi V 1.9.0 (HKLM-x32\...\Synthi V_is1) (Version: 1.9.0 - Arturia)
Tape MELLO-FI 1.3.0 (HKLM-x32\...\Tape MELLO-FI_is1) (Version: 1.3.0 - Arturia)
VeraCrypt (HKLM-x32\...\VeraCrypt) (Version: 1.26.7 - IDRIX)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.20 - VideoLAN)
Vocoder V 1.6.0 (HKLM-x32\...\Vocoder V_is1) (Version: 1.6.0 - Arturia)
Vortex (HKLM\...\57979c68-f490-55b8-8fed-8b017a5af2fe) (Version: 1.12.0 - Black Tree Gaming Ltd.)
VOX Continental V2 2.13.0 (HKLM-x32\...\VOX Continental V2_is1) (Version: 2.13.0 - Arturia)
Vysor (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\vysor) (Version: 5.0.7 - Vysor Inc.)
WeMod (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\WeMod) (Version: 9.8.0 - WeMod)
Wildlander Launcher 2.19.0 (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\fac0cdda-b581-5a1a-ac45-70ba9218df05) (Version: 2.19.0 - Wildlander)
Windows Driver Package - Amazon.com (WinUSB) FireDevicesUsbDeviceClass (10/27/2014 1.4.0000.00000) (HKLM\...\34134A59F616767F2CEC57DC0849834538166E22) (Version: 10/27/2014 1.4.0000.00000 - Amazon.com)
WinRAR 6.24 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.24.0 - win.rar GmbH)
Wise Duplicate Finder (HKLM-x32\...\Wise Duplicate Finder_is1) (Version: 2.1.1 - Lespeed Technology Co., Ltd.)
Wondershare Filmora 13(Build 13.0.25.4414) (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\Wondershare Filmora 13_is1) (Version: - Wondershare Software)
Wondershare Helper Compact 2.6.0 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.6.0 - Wondershare)
Wondershare NativePush(Build 1.0.1.0) (HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\Wondershare NativePush_is1) (Version: - Wondershare Software)
Wurli V2 2.12.0 (HKLM-x32\...\Wurli V2_is1) (Version: 2.12.0 - Arturia)
Wurli V3 3.0.0 (HKLM-x32\...\Wurli V3_is1) (Version: 3.0.0 - Arturia)
Xfer Records Serum 1.35b1 (HKLM\...\Xfer Records Serum 1.35b1-r4e_is1) (Version: 1.35b1 - Xfer Records)
XLN Audio Addictive Drums 2 (HKLM\...\Addictive Drums 2_is1) (Version: 2.2.5.6 - XLN Audio)
Packages:
=========
Alarm Clock HD -> C:\Program Files\WindowsApps\AntaraSoftware.AlarmClockHD_7.0.0.0_x64__7jhd16s0b93qm [2024-08-31] (ANTARA SOFTWARE and CONSULTING PRIVATE LIMITED)
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5635.0_x64__8j3eq9eme6ctt [2024-09-17] (INTEL CORP) [Startup Task]
Microsoft Teams (work or school) -> C:\Program Files\WindowsApps\MSTeams_24004.1309.2689.2246_x64__8wekyb3d8bbwe [2024-03-12] (Microsoft) [Startup Task]
Microsoft.BingSearch -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.0.95.0_x64__8wekyb3d8bbwe [2024-07-23] (Microsoft Corporation)
Microsoft.StartExperiencesApp -> C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.144.0_x64__8wekyb3d8bbwe [2024-09-10] (Microsoft Corporation) [Startup Task]
MicrosoftWindows.CrossDevice -> C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.24081.55.0_x64__cw5n1h2txyewy [2024-09-05] (Microsoft Windows) [Startup Task]
Move Mouse -> C:\Program Files\WindowsApps\1258EllAbi.MoveMouse_4.18.2.0_x64__hjfwaxvfbwh7t [2024-06-18] (ellabi) [Startup Task]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.966.0_x64__56jybvy8sckqj [2024-04-28] (NVIDIA Corp.)
Photos -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2024.11070.31001.0_x64__8wekyb3d8bbwe [2024-08-02] (Microsoft Corporation) [Startup Task]
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.51.327.0_x64__dt26b99r8h8gj [2024-09-17] (Realtek Semiconductor Corp)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2435.4.0_x64__cv1g1gvanyjgm [2024-09-10] (WhatsApp Inc.) [Startup Task]
Widgets Platform Runtime -> C:\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.4.0.0_x64__8wekyb3d8bbwe [2024-09-06] (Microsoft Corporation)
WinAppRuntime.Main.1.5 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.5_5001.214.1843.0_x64__8wekyb3d8bbwe [2024-08-18] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_6000.242.101.0_x64__8wekyb3d8bbwe [2024-09-06] (Microsoft Corp.)
Windows Feature Experience Pack -> C:\Windows\SystemApps\LKG\MicrosoftWindows.LKG.AccountsService_cw5n1h2txyewy [2024-09-11] (Microsoft Windows)
Windows Feature Experience Pack -> C:\Windows\SystemApps\LKG\MicrosoftWindows.LKG.DesktopSpotlight_cw5n1h2txyewy [2024-09-11] (Microsoft Windows)
Windows Feature Experience Pack -> C:\Windows\SystemApps\LKG\MicrosoftWindows.LKG.IrisService_cw5n1h2txyewy [2024-09-11] (Microsoft Windows)
WinRAR -> C:\Program Files\WinRAR [2024-03-15] (win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2246425733-1572341141-2263144653-1001_Classes\CLSID\{04271989-C4D2-F93F-6589-6297B5AF6FEB} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}
CustomCLSID: HKU\S-1-5-21-2246425733-1572341141-2263144653-1001_Classes\CLSID\{14100442-9664-1407-2647-000000000000}\localserver32 -> C:\Users\Admin\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
CustomCLSID: HKU\S-1-5-21-2246425733-1572341141-2263144653-1001_Classes\CLSID\{1dcb280c-9699-aefe-803c-2007c35cbb5a}\localserver32 -> C:\Users\Admin\AppData\Local\Programs\Proton\Drive\ProtonDrive.exe (Proton AG -> Proton AG)
CustomCLSID: HKU\S-1-5-21-2246425733-1572341141-2263144653-1001_Classes\CLSID\{50726f74-6f6e-2e56-504e-000000000000}\localserver32 -> C:\Program Files\Proton\VPN\v3.2.12\ProtonVPN.exe (Proton AG -> )
CustomCLSID: HKU\S-1-5-21-2246425733-1572341141-2263144653-1001_Classes\CLSID\{6b4aeb40-3ff6-4d02-9571-8caac87567ac}\InprocServer32 -> D:\Programmes\Thunderbird\notificationserver.dll => No File
CustomCLSID: HKU\S-1-5-21-2246425733-1572341141-2263144653-1001_Classes\CLSID\{C4DB226C-69DA-41D4-BA44-EA2454B7F66E} -> [Proton Drive] => C:\Users\Admin\Proton Drive\alexandre.bonin [2024-07-29 19:07]
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [Eraser] -> {BC9B776A-90D7-4476-A791-79D835F30650} => C:\Program Files\Eraser\Eraser.Shell.dll [2021-09-25] (Heidi Computers Ltd -> The Eraser Project)
ContextMenuHandlers1: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => D:\Programmes\Format Factory\ShellEx_108.dll -> No File
ContextMenuHandlers2: [Eraser] -> {BC9B776A-90D7-4476-A791-79D835F30650} => C:\Program Files\Eraser\Eraser.Shell.dll [2021-09-25] (Heidi Computers Ltd -> The Eraser Project)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => D:\Programmes\Malwarebytes\mbshlext.dll -> No File
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [Eraser] -> {BC9B776A-90D7-4476-A791-79D835F30650} => C:\Program Files\Eraser\Eraser.Shell.dll [2021-09-25] (Heidi Computers Ltd -> The Eraser Project)
ContextMenuHandlers4: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => D:\Programmes\Format Factory\ShellEx_108.dll -> No File
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.166.0818.0003\FileSyncShell64.dll [2024-09-11] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [Eraser] -> {BC9B776A-90D7-4476-A791-79D835F30650} => C:\Program Files\Eraser\Eraser.Shell.dll [2021-09-25] (Heidi Computers Ltd -> The Eraser Project)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_3594fcc1d16e3924\nvshext.dll [2024-03-02] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [Eraser] -> {BC9B776A-90D7-4476-A791-79D835F30650} => C:\Program Files\Eraser\Eraser.Shell.dll [2021-09-25] (Heidi Computers Ltd -> The Eraser Project)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => D:\Programmes\Malwarebytes\mbshlext.dll -> No File
==================== Codecs (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Drivers32: [VIDC.RTV1] => C:\Windows\system32\rtvcvfw64.dll [246272 2012-09-28] () [File not signed]
HKLM\...\Drivers32: [VIDC.RTV1] => C:\Windows\SysWOW64\rtvcvfw32.dll [247296 2012-09-28] () [File not signed]
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2018-11-23 05:01 - 2018-11-23 05:01 - 000438784 _____ (A-Volute) [File not signed] C:\Program Files (x86)\MSI\Dragon Center\YooMixCOM.dll
2016-08-10 18:34 - 2016-08-10 18:34 - 000047816 _____ (MICRO-STAR INTERNATIONAL CO., LTD -> www.internals.com) [File not signed] C:\Program Files (x86)\MSI\Dragon Center\MSIAPP_Service\WinIo64.dll
2015-06-11 17:35 - 2015-06-11 17:35 - 000047816 _____ (MICRO-STAR INTERNATIONAL CO., LTD -> www.internals.com) [File not signed] C:\Program Files (x86)\MSI\Dragon Center\WinIo64.dll
2018-08-01 07:54 - 2018-08-01 07:54 - 000014632 _____ (Micro-Star International CO., LTD. -> ) [File not signed] C:\Program Files (x86)\MSI\Dragon Center\UEFIVaribleDll.dll
2024-09-13 09:53 - 2024-09-13 09:53 - 002849280 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [File not signed] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\libcrypto-1_1-x64.dll
2024-09-13 09:53 - 2024-09-13 09:53 - 000685056 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [File not signed] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\libssl-1_1-x64.dll
2024-09-13 09:53 - 2024-09-13 09:53 - 000046592 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\bearer\qgenericbearer.dll
2024-09-13 09:53 - 2024-09-13 09:53 - 006270976 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\Qt5Core.dll
2024-09-13 09:53 - 2024-09-13 09:53 - 001389568 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\Qt5Network.dll
2024-09-13 09:53 - 2024-09-13 09:53 - 000157184 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\Qt5WebSockets.dll
==================== Alternate Data Streams (Whitelisted) ========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\Admin\Downloads\MozillaVPN.msi:MBAM.Zone.Identifier [148]
AlternateDataStreams: C:\Users\Admin\Downloads\qbittorrent_4.6.3_x64_setup.exe:MBAM.Zone.Identifier [345]
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) =============
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2024-08-07] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-08-31] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-31] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-31] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-31] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-31] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-31] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-31] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-31] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-31] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\sharepoint.com -> hxxps://univtoursfr-files.sharepoint.com
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2024-05-31 20:53 - 2024-08-16 12:55 - 000000768 _____ C:\Windows\system32\drivers\etc\hosts
0.0.0.0 www.aomeitech.com
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\Control Panel\Desktop\\Wallpaper -> D:\Documents\maxresdefault.jpg
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
Network Binding:
=============
Wi-Fi: Intel(R) Wireless-AC 9560 160MHz -> Netwtw08.sys
Ethernet: Realtek PCIe GbE Family Controller -> rtcx21x64.sys
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run: => "Wondershare Helper Compact.exe"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_5EFC0ECB77A7585FE9DCDD0B2E946A2B"
HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2246425733-1572341141-2263144653-1001\...\StartupApproved\Run: => "Steam"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [TCP Query User{49C761E0-F886-4606-B7E2-9258A31F0519}C:\users\admin\appdata\local\wondershare\wondershare nativepush\wstoastnotification.exe] => (Block) C:\users\admin\appdata\local\wondershare\wondershare nativepush\wstoastnotification.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
FirewallRules: [UDP Query User{71A5A942-0169-4321-BC0E-513E6B0235E3}C:\users\admin\appdata\local\wondershare\wondershare nativepush\wstoastnotification.exe] => (Block) C:\users\admin\appdata\local\wondershare\wondershare nativepush\wstoastnotification.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
FirewallRules: [TCP Query User{F78BCBE9-BB62-44FD-B3D0-F93B56776DD5}D:\programmes\ea\battlefield v\bfv.exe] => (Allow) D:\programmes\ea\battlefield v\bfv.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [UDP Query User{00C641B0-11C4-4CA7-BAA4-6083B9449B0E}D:\programmes\ea\battlefield v\bfv.exe] => (Allow) D:\programmes\ea\battlefield v\bfv.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [TCP Query User{80FF300F-15F9-4DDF-94E3-FBD62793E8FD}D:\platform-tools-latest-windows\platform-tools\adb.exe] => (Allow) D:\platform-tools-latest-windows\platform-tools\adb.exe (Google LLC -> )
FirewallRules: [UDP Query User{F2A584D9-0F65-4E2C-A1F2-CD36B344DA46}D:\platform-tools-latest-windows\platform-tools\adb.exe] => (Allow) D:\platform-tools-latest-windows\platform-tools\adb.exe (Google LLC -> )
FirewallRules: [{F5CCB806-1FE6-4B18-8B61-92E716768B1A}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F0E2CF03-2936-4EA7-B563-EFD0C9DC5F44}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C87789A2-B50F-450A-9165-5C3A8485CD8D}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{72810D74-E669-4059-975C-A84B1FFC1ECD}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{345BEF79-9143-4A64-B674-6B92501C4751}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3E8A95CF-B756-4588-A834-79297566A8FE}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{E1437917-D703-4353-9635-DF15420AD0CE}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{2B5FABFD-4BD5-4EA9-A006-99E14B704D32}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAConnect_microsoft.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{474DEECA-AFB1-4000-A968-4EF2E7DAFA66}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAConnect_microsoft.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{8509F184-0B75-4F0F-A82C-8499085A1F55}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{314C4627-6718-4E4D-A836-F0D433A56277}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{AF2326F6-C258-470F-A00C-2DE46E9FE99B}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAGEP.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{8053831D-22B2-4D06-BC2B-7B8D6241B08A}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAGEP.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{D0F64FC1-B119-430B-ACBA-FABC2DE2E488}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALocalHostSvc.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{B65875FC-0C13-4090-A6CB-B08D1AEB5144}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALocalHostSvc.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{D77E764F-9B93-4E18-85A4-FFAFF1BB3805}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALaunchHelper.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{D788964D-542C-4186-9155-7C6460C967C7}] => (Allow) D:\Programmes\Steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{9AB4A86B-7534-43E7-856D-99C6871DDB07}] => (Allow) D:\Programmes\Steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{2C915F78-8AD8-4045-9C56-113FA94DC677}] => (Allow) D:\Programmes\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{5E0A6CBB-1DAD-40DB-A5D6-A3C160489B69}] => (Allow) D:\Programmes\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{E6518E27-B1CC-4EC9-B736-9CC81B4B861F}] => (Allow) D:\Programmes\Steam\steamapps\common\AoE2DE\AoE2DE_s.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{419AE51A-9526-4C51-A7CD-1AEA8A135A68}] => (Allow) D:\Programmes\Steam\steamapps\common\AoE2DE\AoE2DE_s.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BF1D2270-291E-4E0E-9749-D55DD7791E5C}] => (Allow) D:\Programmes\Steam\steamapps\common\AoE2DE\BattleServer\BattleServer.exe (Microsoft Corporation -> )
FirewallRules: [{B4537D8B-6463-48A9-BBB8-B4241A505FC2}] => (Allow) D:\Programmes\Steam\steamapps\common\AoE2DE\BattleServer\BattleServer.exe (Microsoft Corporation -> )
FirewallRules: [{D64A5540-6280-424F-97B2-15D579639364}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\129.0.2792.52\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Restore Points =========================
ATTENTION: System Restore is disabled (Total:118.38 GB) (Free:11.65 GB) (10%)
==================== Faulty Device Manager Devices ============
Name: Android ADB Interface
Description: Android ADB Interface
Class Guid: {3f966bd9-fa04-4ec5-991c-d326973b5128}
Manufacturer: Google, Inc.
Service: WinUSB
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: PCI Device
Description: PCI Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: PCI Data Acquisition and Signal Processing Controller
Description: PCI Data Acquisition and Signal Processing Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: SM Bus Controller
Description: SM Bus Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: ========================
Application errors:
==================
Error: (09/17/2024 09:18:14 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT AUTHORITY)
Description: Windows cannot load the extensible counter DLL "C:\Windows\system32\sysmain.dll" (Win32 error code 126).
Error: (09/11/2024 07:15:12 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT AUTHORITY)
Description: Windows cannot load the extensible counter DLL "C:\Windows\system32\sysmain.dll" (Win32 error code 126).
Error: (09/10/2024 09:10:24 PM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )
Description: Event-ID 5
Error: (09/06/2024 09:08:54 AM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT AUTHORITY)
Description: Windows cannot load the extensible counter DLL "C:\Windows\system32\sysmain.dll" (Win32 error code 126).
Error: (09/03/2024 10:14:36 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT AUTHORITY)
Description: Windows cannot load the extensible counter DLL "C:\Windows\system32\sysmain.dll" (Win32 error code 126).
Error: (08/31/2024 11:26:00 AM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )
Description: Event-ID 5
Error: (08/21/2024 09:34:34 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT AUTHORITY)
Description: Windows cannot load the extensible counter DLL "C:\Windows\system32\sysmain.dll" (Win32 error code 126).
Error: (08/19/2024 05:08:38 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, A system shutdown is in progress..
System errors:
=============
Error: (09/24/2024 07:13:58 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80073d02: 9MSSGKG348SP-MicrosoftWindows.Client.WebExperience.
Error: (09/24/2024 07:13:05 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80073d02: 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice.
Error: (09/24/2024 07:11:39 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT AUTHORITY)
Description: The Secure Boot update failed to update a Secure Boot variable with error -2147020471. For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931
Error: (09/18/2024 06:00:01 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT AUTHORITY)
Description: The Secure Boot update failed to update a Secure Boot variable with error -2147020471. For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931
Error: (09/18/2024 05:34:23 PM) (Source: Netwtw08) (EventID: 5005) (User: )
Description: Intel(R) Wireless-AC 9560 160MHz : Has encountered an internal error and has failed.
5005 - Driver internal error
Error: (09/18/2024 05:34:23 PM) (Source: Netwtw08) (EventID: 5055) (User: )
Description: 5055 - HW error
Error: (09/18/2024 05:34:22 PM) (Source: Netwtw08) (EventID: 5005) (User: )
Description: Intel(R) Wireless-AC 9560 160MHz : Has encountered an internal error and has failed.
5005 - Driver internal error
Error: (09/18/2024 05:34:22 PM) (Source: Netwtw08) (EventID: 5007) (User: )
Description: 5007 - TX/CMD timeout (TfdQueue hanged)
Windows Defender:
================
Date: 2024-09-18 19:17:55
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2024-09-18 17:18:21
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2024-09-17 20:51:35
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2024-09-16 13:58:01
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Date: 2024-09-14 13:01:21
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Event[0]
Date: 2024-08-12 12:08:27
Description:
Microsoft Defender Antivirus Real-Time Protection feature has encountered an error and failed.
Feature: On Access
Error Code: 0x8007043c
Error description: This service cannot be started in Safe Mode
Reason: Antimalware security intelligence has stopped functioning for an unknown reason. In some instances, restarting the service may resolve the problem.
Date: 2024-08-10 20:50:35
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence and will attempt to revert to a previous version.
Security intelligence Attempted: Backup
Error Code: 0x80004004
Error description: Operation aborted
Security intelligence Version: 1.415.455.0;1.415.455.0
Engine Version: 1.1.24060.5
Date: 2024-08-10 20:50:34
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence and will attempt to revert to a previous version.
Security intelligence Attempted: Current
Error Code: 0x80501102
Error description: An unexpected problem occurred. Install any available updates, and then try to start the program again. For information on installing updates, see Help and Support.
Security intelligence Version: 1.415.455.0;1.415.455.0
Engine Version: 1.1.24060.5
Date: 2024-08-10 17:45:59
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
New security intelligence Version:
Previous security intelligence Version: 1.415.455.0
Update Source: Microsoft Update Server
Security intelligence Type: AntiVirus
Update Type: Full
Current Engine Version:
Previous Engine Version: 1.1.24060.5
Error code: 0x80240017
Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
Date: 2024-08-10 17:42:50
Description:
Microsoft Defender Antivirus has encountered an error trying to update security intelligence and will attempt to revert to a previous version.
Security intelligence Attempted: Backup
Error Code: 0x80004004
Error description: Operation aborted
Security intelligence Version: 1.415.455.0;1.415.455.0
Engine Version: 1.1.24060.5
CodeIntegrity:
===============
Date: 2024-09-18 17:02:37
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Users\Admin\AppData\Local\Programs\signal-desktop\Signal.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\nvspcap64.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
BIOS: American Megatrends Inc. E16R3IMS.108 03/26/2020
Motherboard: Micro-Star International Co., Ltd. MS-16R3
Processor: Intel(R) Core(TM) i5-9300H CPU @ 2.40GHz
Percentage of memory in use: 56%
Total physical RAM: 16228.02 MB
Available physical RAM: 7061.01 MB
Total Virtual: 56228.02 MB
Available Virtual: 44919.91 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:118.38 GB) (Free:11.65 GB) (Model: SAMSUNG MZVLW128HEGR-00000) NTFS
Drive d: (New Volume) (Fixed) (Total:931.5 GB) (Free:647.41 GB) (Model: CT1000MX500SSD1) NTFS
\\?\Volume{fb64c188-eff3-4b18-b5de-8f930b6df035}\ () (Fixed) (Total:0.75 GB) (Free:0.06 GB) NTFS
\\?\Volume{9d93c5fc-4826-46a4-9ef6-5c969dcca456}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 1 (Size: 119.2 GB) (Disk ID: 0C95A92A)
Partition: GPT.
==================== End of Addition.txt =======================