Firefox window with at startup

Hello, I have noticed a strange firefox window whenever I start my computer. It is very suspicious and I don’t know what to do. Looks like this:

As per rules, I have attached FRST logs here. Thanks for the help!
 
(In case this is needed, I have Windows 11)

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02-11-2021
Ran by stefd (administrator) on DESKTOP-78SRSJV (LENOVO 81T3) (05-11-2021 14:11:45)
Running from C:UsersstefdDownloads
Loaded Profiles: stefd
: Microsoft Windows 11 Education Version 21H2 22000.282 (X64) Language: English (United States)
Default browser: Edge
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Dolby Laboratories, Inc. -> ) C:Program FilesCommon FilesDolbyDAX3RADARHOSTDSRHost.exe
(Dolby Laboratories, Inc. -> ) C:WindowsSystem32dolbyaposvcDAX3API.exe <2>
(Intel Corporation -> Intel Corporation) C:WindowsSystem32DriverStoreFileRepositorydptf_cpu.inf_amd64_9196e89091d8bdbbesif_uf.exe
(Intel® Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:WindowsSystem32DriverStoreFileRepositorydal.inf_amd64_0b214be229a13e84jhi_service.exe
(Intel® pGFX 2020 -> Intel Corporation) C:WindowsSystem32DriverStoreFileRepositorycui_dch.inf_amd64_0d8dab4470c5524bigfxCUIService.exe
(Intel® pGFX 2020 -> Intel Corporation) C:WindowsSystem32DriverStoreFileRepositorycui_dch.inf_amd64_0d8dab4470c5524bigfxEM.exe
(Intel® pGFX 2020 -> Intel Corporation) C:WindowsSystem32DriverStoreFileRepositoryigcc_dch.inf_amd64_a9a2dde7124f013fOneApp.IGCC.WinService.exe
(Intel® pGFX 2020 -> Intel Corporation) C:WindowsSystem32DriverStoreFileRepositoryiigd_dch.inf_amd64_5d54dd32fa1ef4d4IntelCpHDCPSvc.exe
(Intel® pGFX 2020 -> Intel Corporation) C:WindowsSystem32DriverStoreFileRepositoryiigd_dch.inf_amd64_5d54dd32fa1ef4d4IntelCpHeciSvc.exe
(Intel® Rapid Storage Technology -> Intel Corporation) C:WindowsSystem32DriverStoreFileRepositoryiaahcic.inf_amd64_120314e52c04567cRstMwService.exe
(Microsoft Corporation -> ) C:Program Files (x86)MicrosoftEdgeApplication95.0.1020.40identity_helper.exe
(Microsoft Corporation -> Microsoft Corporation) C:Program Files (x86)MicrosoftEdgeApplicationmsedge.exe <17>
(Microsoft Corporation -> Microsoft Corporation) C:Program Files (x86)MicrosoftEdgeWebViewApplication95.0.1020.40msedgewebview2.exe <6>
(Microsoft Corporation -> Microsoft Corporation) C:Program FilesCommon Filesmicrosoft sharedClickToRunOfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:UsersstefdAppDataLocalMicrosoftTeamscurrentTeams.exe <9>
(Microsoft Corporation) C:Program FilesWindowsAppsMicrosoft.549981C3F5F10_2.2106.2807.0_x64__8wekyb3d8bbweCortana.exe
(Microsoft Corporation) C:Program FilesWindowsAppsMicrosoft.XboxGamingOverlay_5.621.4222.0_x64__8wekyb3d8bbweGameBar.exe
(Microsoft Corporation) C:Program FilesWindowsAppsMicrosoft.XboxGamingOverlay_5.621.4222.0_x64__8wekyb3d8bbweGameBarFTServer.exe
(Microsoft Windows -> Microsoft Corporation) C:WindowsImmersiveControlPanelSystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:WindowsSystem32dllhost.exe <3>
(Microsoft Windows -> Microsoft Corporation) C:WindowsSystem32smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:WindowsSystem32wlanext.exe
(Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:WindowsSystem32FMService64.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:ProgramDataMicrosoftWindows DefenderPlatform4.18.2110.6-0MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:ProgramDataMicrosoftWindows DefenderPlatform4.18.2110.6-0NisSrv.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:ProgramDataMicrosoftWindows DefenderScansMsMpEngCP.exe
(Microsoft Windows) C:Program FilesWindowsAppsMicrosoftWindows.Client.WebExperience_421.20034.345.0_x64__cw5n1h2txyewyDashboardWidgets.exe
(Mozilla Corporation -> Mozilla Corporation) C:Program Files (x86)Common FilesManageMINTupdate.exe
(NVIDIA Corporation -> Node.js) C:Program Files (x86)NVIDIA CorporationNvNodeNVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:Program FilesNVIDIA CorporationNVIDIA GeForce ExperienceNVIDIA Share.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:Program FilesNVIDIA CorporationShadowPlaynvsphelper64.exe
(Nvidia Corporation -> NVIDIA Corporation) C:WindowsSystem32DriverStoreFileRepositorynvlti.inf_amd64_af22935532babf10Display.NvContainerNVDisplay.Container.exe <2>
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:WindowsSystem32RtkAudUService64.exe <2>
(Skype) C:Program FilesWindowsAppsMicrosoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5cSkypeApp.exe
(Skype) C:Program FilesWindowsAppsMicrosoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5cSkypeBackgroundHost.exe
(Skype) C:Program FilesWindowsAppsMicrosoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5cSkypeBridgeSkypeBridge.exe
(WhatsApp Inc.) C:Program FilesWindowsApps5319275A.WhatsAppDesktop_2.2140.12.0_x64__cv1g1gvanyjgmappWhatsApp.exe <7>

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM…Run: [RtkAudUService] => C:WINDOWSSystem32RtkAudUService64.exe [1076728 2020-03-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32…Run: [TeamsMachineInstaller] => C:Program Files (x86)Teams InstallerTeams.exe [124599048 2021-08-18] (Microsoft Corporation -> Microsoft Corporation)
HKLM…RunOnce: [msedge_cleanup_{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}] => C:Program Files (x86)MicrosoftEdgeWebViewApplication95.0.1020.40Installersetup.exe [2846096 2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
HKUS-1-5-21-298159420-2852300768-613573049-1001…Run: [MicrosoftEdgeAutoLaunch_2C14AE861FD194DFA01A2AB6F17B2FC1] => “C:Program Files (x86)MicrosoftEdgeApplicationmsedge.exe” –no-startup-window –win-session-start /prefetch:5
HKUS-1-5-21-298159420-2852300768-613573049-1001…Run: [firefox] => C:Program Files (x86)Common FilesManageMINTupdate.exe [910296 2010-03-31] (Mozilla Corporation -> Mozilla Corporation) <==== ATTENTION
HKLMSoftware…AuthenticationCredential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0FFB4C0F-BC41-4CDF-8E2B-EA00896BFB9D} – System32TasksMicrosoftOfficeOffice Feature Updates => C:Program FilesMicrosoft OfficerootOffice16sdxhelper.exe [138600 2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {21EB8B67-2056-4816-8274-BD50F2EA03DF} – System32TasksNvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:Program Files (x86)NVIDIA CorporationNvNodenvnodejslauncher.exe [645488 2021-10-21] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {32D8F943-EED5-477B-A982-3B3AAF1BEC0B} – System32TasksMicrosoftWindowsWindows DefenderWindows Defender Cache Maintenance => C:ProgramDataMicrosoftWindows Defenderplatform4.18.2110.6-0MpCmdRun.exe [901056 2021-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {392D6FC6-E382-4528-A7D4-8C4A0C4F6E3B} – System32TasksMicrosoftWindowsWindows DefenderWindows Defender Cleanup => C:ProgramDataMicrosoftWindows Defenderplatform4.18.2110.6-0MpCmdRun.exe [901056 2021-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3E4480F3-9D47-4D67-A282-AA99F63670AE} – System32TasksMicrosoftOfficeOffice ClickToRun Service Monitor => C:Program FilesCommon FilesMicrosoft SharedClickToRunOfficeC2RClient.exe [22655904 2021-10-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {49ABFB65-8504-4014-9D39-DDD1D4FF9742} – System32TasksNvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:Program FilesNVIDIA CorporationNvBackendNvTmRep.exe [1261424 2021-10-21] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {55AAAE2A-624F-45FE-8ACF-C4B89CBE1B22} – System32TasksNvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:Program FilesNVIDIA CorporationUpdate CoreNvProfileUpdater64.exe [905072 2021-10-21] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5AF6D7D9-8A72-4E69-BCC1-EDAA183471D2} – System32TasksMicrosoftWindowsWindows DefenderWindows Defender Verification => C:ProgramDataMicrosoftWindows Defenderplatform4.18.2110.6-0MpCmdRun.exe [901056 2021-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5EA81677-40FA-4F92-B15C-ADAE72750F5C} – System32TasksMicrosoftOfficeOfficeTelemetryAgentLogOn2016 => C:Program FilesMicrosoft OfficerootOffice16msoia.exe [8314256 2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {86C48A57-A20B-439F-8B49-632DED858BF9} – System32TasksNVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:Program FilesNVIDIA CorporationNVIDIA GeForce ExperienceNVIDIA GeForce Experience.exe [3339120 2021-10-21] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {899121F8-3F27-4EB6-963B-1DA76B7B4D7E} – System32TasksNvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:Program FilesNVIDIA CorporationNvBackendNvTmRep.exe [1261424 2021-10-21] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {969D4EE2-490E-4D62-AEE0-4EBDD1505547} – System32TasksMicrosoftWindowsWindows DefenderWindows Defender Scheduled Scan => C:ProgramDataMicrosoftWindows Defenderplatform4.18.2110.6-0MpCmdRun.exe [901056 2021-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {97616F57-1E68-4573-9626-6ADF6E22E4E1} – System32TasksNvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:Program FilesNVIDIA CorporationNvBackendNvTmRep.exe [1261424 2021-10-21] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {9BA371BE-9EC3-48AB-BBB5-0613BA2ECEF9} – System32TasksNvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe [903024 2021-10-21] (NVIDIA Corporation -> NVIDIA Corporation) -> -d “C:Program FilesNVIDIA CorporationNvBackendNvBatteryBoostCheck” -l 3 -f C:ProgramDataNVIDIANvContainerBatteryBoostCheck.log
Task: {9E3A99E3-3C72-45D2-9655-657E8E5C6A77} – System32TasksMicrosoftOfficeOfficeTelemetryAgentFallBack2016 => C:Program FilesMicrosoft OfficerootOffice16msoia.exe [8314256 2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {A7866423-B634-4CE6-8D40-964EB7BFF68A} – System32TasksNvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:Program FilesNVIDIA CorporationNvBackendNvTmRep.exe [1261424 2021-10-21] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {AAC1C1E4-215A-4E91-A2CD-92CF562807B5} – System32TasksNvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:Program FilesNVIDIA CorporationUpdate CoreNvProfileUpdater64.exe [905072 2021-10-21] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C0CD8AC3-19E7-4261-A936-291AAEB47C54} – System32TasksMicrosoftWindowsWindowsUpdateRUXIMRUXIMDisplay => C:Program Filesruximruximics.exe [477512 2021-05-19] (Microsoft Windows -> Microsoft Corporation)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} – System32TasksMicrosoftWindowsMobile Broadband AccountsMNO Metadata Parser => C:WINDOWSSystem32MbaeParserTask.exe
Task: {D38C1A98-8275-4CDF-B2D5-34792B50D95C} – System32TasksMATLAB R2020a Startup Accelerator => C:Program FilesPolyspaceR2020abinwin64MATLABStartupAccelerator.exe [53760 2020-01-22] () [File not signed]
Task: {E64E3788-19F7-4828-8EC8-CC1B807C9FBF} – System32TasksMicrosoftWindowsWindowsUpdateRUXIMRUXIMSync => C:Program Filesruximruximics.exe [477512 2021-05-19] (Microsoft Windows -> Microsoft Corporation)
Task: {E688B510-4A24-496F-A4DE-61A87B79A448} – System32TasksNvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe [903024 2021-10-21] (NVIDIA Corporation -> NVIDIA Corporation) -> -d “C:Program FilesNVIDIA CorporationNvDriverUpdateCheck” -l 3 -f C:ProgramDataNVIDIANvContainerDriverUpdateCheck.log
Task: {F86916E4-674A-4013-82BD-775152545A80} – System32TasksMicrosoftOfficeOffice Feature Updates Logon => C:Program FilesMicrosoft OfficerootOffice16sdxhelper.exe [138600 2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {FDD2561A-9F18-4BC9-9713-73A4E48D52FD} – System32TasksMicrosoftOfficeOffice Automatic Updates 2.0 => C:Program FilesCommon FilesMicrosoft SharedClickToRunOfficeC2RClient.exe [22655904 2021-10-25] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:WINDOWSTasksMATLAB R2020a Startup Accelerator.job => C:Program FilesPolyspaceR2020abinwin64MATLABStartupAccelerator.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

TcpipParameters: [DhcpNameServer] 193.231.252.1 213.154.124.1 8.8.8.8 192.168.1.1
Tcpip..Interfaces{0f56ed4e-fe77-4265-96fe-c082999463d9}: [DhcpNameServer] 193.231.252.1 213.154.124.1 8.8.8.8 192.168.1.1

Edge:
=======
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:WindowsSystemAppsMicrosoft.MicrosoftEdge_8wekyb3d8bbweAssetsHostExtensionsAutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:WindowsSystemAppsMicrosoft.MicrosoftEdge_8wekyb3d8bbweAssetsBookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:WindowsSystemAppsMicrosoft.MicrosoftEdge_8wekyb3d8bbweAssetsHostExtensionsLearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:WindowsSystemAppsMicrosoft.MicrosoftEdge_8wekyb3d8bbweAssetsHostExtensionsPinJSAPI [not found]
Edge DefaultProfile: Default
Edge Profile: C:UsersstefdAppDataLocalMicrosoftEdgeUser DataDefault [2021-11-05]
Edge HomePage: Default -> hxxp://www.google.ro/
Edge Extension: (Adblock for Youtube™) – C:UsersstefdAppDataLocalMicrosoftEdgeUser DataDefaultExtensionscmedhionkhpnakcndndgjdbohmhepckk [2021-11-04]
Edge Extension: (AdBlock — best ad blocker) – C:UsersstefdAppDataLocalMicrosoftEdgeUser DataDefaultExtensionsndcileolkflehcjpmjnfbnaibdcgglog [2021-11-04]
Edge Extension: (Privacy Badger) – C:UsersstefdAppDataLocalMicrosoftEdgeUser DataDefaultExtensionspkehgijcmpdhfbdbbnkijodmdjhbjlgp [2021-11-04]

FireFox:
========
FF ProfilePath: C:UsersstefdAppDataRoamingAMozillaAFirefoxProfilesjh09scf2.default [2021-11-05] <==== ATTENTION
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:Program FilesMicrosoft OfficerootOffice16NPSPWRAP.DLL [2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:Program FilesMicrosoft OfficerootVFSProgramFilesX86Mozilla Firefoxpluginsnpmeetingjoinpluginoc.dll [2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:Program FilesMicrosoft OfficerootVFSProgramFilesX86Microsoft OfficeOffice16NPSPWRAP.DLL [2021-11-04] (Microsoft Corporation -> Microsoft Corporation)

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 brlapi; C:WINDOWSbrlttybinbrltty.exe [847886 2021-06-01] (Microsoft Windows -> )
R2 ClickToRunSvc; C:Program FilesCommon FilesMicrosoft SharedClickToRunOfficeClickToRun.exe [12034464 2021-10-12] (Microsoft Corporation -> Microsoft Corporation)
R2 DolbyDAXAPI; C:WINDOWSsystem32dolbyaposvcDAX3API.exe [1926600 2019-09-02] (Dolby Laboratories, Inc. -> )
R2 FMAPOService; C:WINDOWSSystem32FMService64.exe [359808 2019-08-16] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
S3 Sense; C:Program FilesWindows Defender Advanced Threat ProtectionMsSense.exe [5549648 2021-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:ProgramDataMicrosoftWindows DefenderPlatform4.18.2110.6-0NisSrv.exe [2872024 2021-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:ProgramDataMicrosoftWindows DefenderPlatform4.18.2110.6-0MsMpEng.exe [128376 2021-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:WINDOWSSystem32DriverStoreFileRepositorynvlti.inf_amd64_af22935532babf10Display.NvContainerNVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%NVIDIANVDisplay.ContainerLocalSystem.log -l 3 -d C:WINDOWSSystem32DriverStoreFileRepositorynvlti.inf_amd64_af22935532babf10Display.NvContainerpluginsLocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystemLocalSystem

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 fse; C:WINDOWSSystem32driversfse.sys [192824 2021-11-04] (Microsoft Windows -> Microsoft Corporation)
S3 vmbusproxy; C:WINDOWSsystem32driversvmbusproxy.sys [90112 2021-11-04] (Microsoft Windows -> )
S0 WdBoot; C:WINDOWSSystem32driverswdWdBoot.sys [48520 2021-11-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:WINDOWSSystem32driverswdWdFilter.sys [435424 2021-11-04] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:WINDOWSSystem32driverswdWdNisDrv.sys [86240 2021-11-04] (Microsoft Windows -> Microsoft Corporation)
S1 WinSetupMon; system32DRIVERSWinSetupMon.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-11-05 14:11 – 2021-11-05 14:12 – 000018497 _____ C:UsersstefdDownloadsFRST.txt
2021-11-05 14:11 – 2021-11-05 14:12 – 000000000 ____D C:FRST
2021-11-05 13:58 – 2021-11-05 13:58 – 002311168 _____ (Farbar) C:UsersstefdDownloadsFRST64.exe
2021-11-05 13:57 – 2021-11-05 13:57 – 000000000 ___HD C:$WinREAgent
2021-11-05 04:46 – 2021-11-05 04:46 – 000000000 ____D C:WINDOWSsystem32braille-tables
2021-11-05 04:46 – 2021-11-05 04:46 – 000000000 ____D C:WINDOWSbrltty
2021-11-05 04:46 – 2021-06-01 14:24 – 000823680 _____ C:WINDOWSsystem32liblouis.dll
2021-11-05 04:46 – 2021-06-01 14:24 – 000770936 _____ C:WINDOWSsystem32brlapi.dll
2021-11-05 04:46 – 2021-06-01 14:24 – 000026248 _____ C:WINDOWSsystem32Third Party Notices-Braille.txt
2021-11-05 04:39 – 2021-11-05 04:39 – 000000000 ____D C:UsersstefdDocumentsCustom Office Templates
2021-11-05 04:39 – 2021-11-05 04:39 – 000000000 ____D C:UsersstefdAppDataLocalOneDrive
2021-11-05 02:14 – 2021-11-05 04:02 – 000000000 ____D C:UsersstefdAppDataRoamingvlc
2021-11-05 02:13 – 2021-11-05 02:13 – 000000916 _____ C:UsersPublicDesktopVLC media player.lnk
2021-11-05 02:13 – 2021-11-05 02:13 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsVideoLAN
2021-11-05 02:13 – 2021-11-05 02:13 – 000000000 ____D C:Program FilesVideoLAN
2021-11-04 20:29 – 2021-11-04 20:29 – 000001414 _____ C:UsersstefdDesktopVisual Studio Code.lnk
2021-11-04 19:30 – 2021-11-04 19:32 – 000000000 ____D C:UsersstefdDownloadsJojo`s Bizarre Adventure [2012]
2021-11-04 19:06 – 2021-11-04 19:06 – 000000000 ____D C:UsersstefdDocumentsMATLAB
2021-11-04 19:05 – 2021-11-04 19:05 – 000001447 _____ C:UsersstefdDesktopMatlab.lnk
2021-11-04 19:05 – 2021-11-04 19:05 – 000000000 ____D C:UsersstefdAppDataRoamingMathWorks
2021-11-04 19:05 – 2021-11-04 19:05 – 000000000 ____D C:UsersstefdAppDataLocalMathWorks
2021-11-04 19:02 – 2021-11-04 19:02 – 000003860 _____ C:WINDOWSsystem32TasksMATLAB R2020a Startup Accelerator
2021-11-04 19:02 – 2021-11-04 19:02 – 000000590 _____ C:WINDOWSTasksMATLAB R2020a Startup Accelerator.job
2021-11-04 19:02 – 2021-11-04 19:02 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsPolyspace R2020a
2021-11-04 19:02 – 2021-11-04 19:02 – 000000000 ____D C:ProgramDataMathWorks
2021-11-04 18:59 – 2021-11-04 18:59 – 000000000 ____D C:Program FilesPolyspace
2021-11-04 18:58 – 2021-11-04 18:58 – 000000000 ____D C:ProgramDataOracle
2021-11-04 18:53 – 2021-11-04 18:53 – 000000000 ____D C:UsersstefdDesktopMATERIE FACULTATE ANUL I SEM I
2021-11-04 18:52 – 2021-11-04 18:53 – 000000000 ____D C:UsersstefdDesktopMATERIE FACULTATE ANUL I SEM II
2021-11-04 18:23 – 2021-11-04 18:23 – 000004216 _____ C:UsersstefdAppDataRoamingLTspiceXVII.ini
2021-11-04 18:21 – 2021-11-04 18:21 – 000001045 _____ C:UsersstefdAppDataRoamingMicrosoftWindowsStart MenuLTspice XVII.lnk
2021-11-04 18:21 – 2021-11-04 18:21 – 000001021 _____ C:UsersstefdDesktopLTspice XVII.lnk
2021-11-04 18:21 – 2021-11-04 18:21 – 000000000 ____D C:UsersstefdDocumentsLTspiceXVII
2021-11-04 18:20 – 2021-11-04 18:20 – 000000000 ____D C:Program FilesLTC
2021-11-04 18:18 – 2021-11-04 19:05 – 000000000 ____D C:UsersstefdDownloadsMathWorks.MATLAB.R2020a.v9.8.0.1323502
2021-11-04 18:17 – 2021-11-05 04:38 – 000000000 ____D C:UsersstefdAppDataLocaltransmission
2021-11-04 18:17 – 2021-11-05 04:38 – 000000000 ____D C:ProgramDataTransmission
2021-11-04 18:16 – 2021-11-04 18:16 – 000002471 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsTransmission Qt Client.lnk
2021-11-04 18:16 – 2021-11-04 18:16 – 000002459 _____ C:UsersPublicDesktopTransmission Qt Client.lnk
2021-11-04 18:16 – 2021-11-04 18:16 – 000000000 ____D C:Program FilesTransmission
2021-11-04 18:13 – 2021-11-04 18:13 – 000000000 ____D C:UsersstefdAppDataRoaminguTorrent
2021-11-04 18:13 – 2021-11-04 18:13 – 000000000 ____D C:UsersstefdAppDataRoamingOutput
2021-11-04 18:13 – 2021-11-04 18:13 – 000000000 ____D C:UsersstefdAppDataRoamingMozilla
2021-11-04 18:13 – 2021-11-04 18:13 – 000000000 ____D C:UsersstefdAppDataRoamingff2
2021-11-04 18:13 – 2021-11-04 18:13 – 000000000 ____D C:UsersstefdAppDataRoamingAMozilla
2021-11-04 18:13 – 2021-11-04 18:13 – 000000000 ____D C:UsersstefdAppDataLocalAMozilla
2021-11-04 18:13 – 2021-11-04 18:13 – 000000000 _____ C:WINDOWSnsreg.dat
2021-11-04 18:13 – 2018-08-07 01:30 – 000399224 _____ (BitTorrent, Inc.) C:UsersstefdAppDataRoamingutorrent_2.2.1.exe
2021-11-04 18:11 – 2021-11-04 18:42 – 000000176 _____ C:Usersstefd.packettracer
2021-11-04 18:11 – 2021-11-04 18:12 – 000000000 ____D C:UsersstefdCisco Packet Tracer 8.0.1
2021-11-04 18:11 – 2021-11-04 18:11 – 000001088 _____ C:UsersstefdDesktopCisco Packet Tracer.lnk
2021-11-04 18:11 – 2021-11-04 18:11 – 000000000 ____D C:UsersstefdAppDataLocalCisco Packet Tracer
2021-11-04 18:11 – 2021-11-04 18:11 – 000000000 ____D C:UsersstefdAppDataLocalcache
2021-11-04 18:11 – 2021-11-04 18:11 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsCisco Packet Tracer
2021-11-04 18:11 – 2021-11-04 18:11 – 000000000 ____D C:Program FilesCisco Packet Tracer 8.0.1
2021-11-04 18:02 – 2021-11-04 18:41 – 000000000 ____D C:UsersstefdAppDataLocalNVIDIA Corporation
2021-11-04 18:02 – 2021-11-04 18:02 – 000001443 _____ C:UsersPublicDesktopGeForce Experience.lnk
2021-11-04 18:02 – 2021-11-04 18:02 – 000000000 ____D C:UsersstefdAppDataLocalNVIDIA
2021-11-04 18:02 – 2021-11-04 18:02 – 000000000 ____D C:UsersstefdAppDataLocalCEF
2021-11-04 18:02 – 2021-11-04 18:02 – 000000000 ____D C:Usersstefdansel
2021-11-04 18:01 – 2021-11-05 14:02 – 000000000 ____D C:ProgramDataNVIDIA
2021-11-04 18:01 – 2021-11-04 18:01 – 000004308 _____ C:WINDOWSsystem32TasksNvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-11-04 18:01 – 2021-11-04 18:01 – 000004106 _____ C:WINDOWSsystem32TasksNvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-11-04 18:01 – 2021-11-04 18:01 – 000003976 _____ C:WINDOWSsystem32TasksNVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-11-04 18:01 – 2021-11-04 18:01 – 000003940 _____ C:WINDOWSsystem32TasksNvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-11-04 18:01 – 2021-11-04 18:01 – 000003894 _____ C:WINDOWSsystem32TasksNvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-11-04 18:01 – 2021-11-04 18:01 – 000003858 _____ C:WINDOWSsystem32TasksNvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-11-04 18:01 – 2021-11-04 18:01 – 000003858 _____ C:WINDOWSsystem32TasksNvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-11-04 18:01 – 2021-11-04 18:01 – 000003858 _____ C:WINDOWSsystem32TasksNvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-11-04 18:01 – 2021-11-04 18:01 – 000003858 _____ C:WINDOWSsystem32TasksNvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-11-04 18:01 – 2021-11-04 18:01 – 000003654 _____ C:WINDOWSsystem32TasksNvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-11-04 18:01 – 2021-11-04 18:01 – 000000000 ____D C:ProgramDataPackage Cache
2021-11-04 18:01 – 2021-11-04 18:01 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsNVIDIA Corporation
2021-11-04 18:01 – 2021-11-04 18:01 – 000000000 ____D C:Program Files (x86)NVIDIA Corporation
2021-11-04 18:01 – 2021-10-21 02:48 – 002838384 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvspcap64.dll
2021-11-04 18:01 – 2021-10-21 02:48 – 002186608 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvspcap.dll
2021-11-04 18:01 – 2021-10-21 02:48 – 001293680 _____ (NVIDIA Corporation) C:WINDOWSsystem32NvRtmpStreamer64.dll
2021-11-04 18:01 – 2021-10-21 02:48 – 000168304 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvaudcap64v.dll
2021-11-04 18:01 – 2021-10-21 02:48 – 000144240 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvaudcap32v.dll
2021-11-04 18:01 – 2021-10-21 02:48 – 000078192 _____ C:WINDOWSsystem32FvSDK_x64.dll
2021-11-04 18:01 – 2021-10-21 02:48 – 000067952 _____ C:WINDOWSSysWOW64FvSDK_x86.dll
2021-11-04 18:01 – 2021-10-21 02:48 – 000001951 _____ C:WINDOWSNvContainerRecovery.bat
2021-11-04 17:59 – 2021-10-21 02:48 – 000069856 _____ (NVIDIA Corporation) C:WINDOWSsystem32Driversnvvad64v.sys
2021-11-04 17:59 – 2021-10-21 02:48 – 000067464 _____ (NVIDIA Corporation) C:WINDOWSsystem32Driversnvvhci.sys
2021-11-04 17:59 – 2021-10-21 02:48 – 000043408 _____ (NVIDIA Corporation) C:WINDOWSsystem32DriversNvModuleTracker.sys
2021-11-04 17:59 – 2021-10-21 02:48 – 000038016 _____ (NVIDIA Corporation) C:WINDOWSsystem32Driversnvhdap64.dll
2021-11-04 17:58 – 2021-10-21 19:49 – 001874648 _____ C:WINDOWSsystem32vulkaninfo-1-999-0-0-0.exe
2021-11-04 17:58 – 2021-10-21 19:49 – 001874648 _____ C:WINDOWSsystem32vulkaninfo.exe
2021-11-04 17:58 – 2021-10-21 19:49 – 001464952 _____ (Khronos Group) C:WINDOWSsystem32OpenCL.dll
2021-11-04 17:58 – 2021-10-21 19:49 – 001450232 _____ C:WINDOWSSysWOW64vulkaninfo-1-999-0-0-0.exe
2021-11-04 17:58 – 2021-10-21 19:49 – 001450232 _____ C:WINDOWSSysWOW64vulkaninfo.exe
2021-11-04 17:58 – 2021-10-21 19:49 – 001206384 _____ (Khronos Group) C:WINDOWSSysWOW64OpenCL.dll
2021-11-04 17:58 – 2021-10-21 19:49 – 001111256 _____ C:WINDOWSsystem32vulkan-1-999-0-0-0.dll
2021-11-04 17:58 – 2021-10-21 19:49 – 001111256 _____ C:WINDOWSsystem32vulkan-1.dll
2021-11-04 17:58 – 2021-10-21 19:49 – 000965336 _____ C:WINDOWSSysWOW64vulkan-1-999-0-0-0.dll
2021-11-04 17:58 – 2021-10-21 19:49 – 000965336 _____ C:WINDOWSSysWOW64vulkan-1.dll
2021-11-04 17:58 – 2021-10-21 19:45 – 001523336 _____ (NVIDIA Corporation) C:WINDOWSsystem32NvIFR64.dll
2021-11-04 17:58 – 2021-10-21 19:45 – 001172608 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64NvIFR.dll
2021-11-04 17:58 – 2021-10-21 19:45 – 000800368 _____ C:WINDOWSsystem32nvofapi64.dll
2021-11-04 17:58 – 2021-10-21 19:45 – 000707728 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvidia-smi.exe
2021-11-04 17:58 – 2021-10-21 19:45 – 000676480 _____ (NVIDIA Corporation) C:WINDOWSsystem32NvIFROpenGL.dll
2021-11-04 17:58 – 2021-10-21 19:45 – 000656512 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvml.dll
2021-11-04 17:58 – 2021-10-21 19:45 – 000635000 _____ C:WINDOWSSysWOW64nvofapi.dll
2021-11-04 17:58 – 2021-10-21 19:45 – 000564352 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64NvIFROpenGL.dll
2021-11-04 17:58 – 2021-10-21 19:44 – 008724080 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvcuvid.dll
2021-11-04 17:58 – 2021-10-21 19:44 – 007843984 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvcuvid.dll
2021-11-04 17:58 – 2021-10-21 19:44 – 004938896 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvcuda.dll
2021-11-04 17:58 – 2021-10-21 19:44 – 002850416 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvcuda.dll
2021-11-04 17:58 – 2021-10-21 19:44 – 002114688 _____ (NVIDIA Corporation) C:WINDOWSsystem32NvFBC64.dll
2021-11-04 17:58 – 2021-10-21 19:44 – 001597584 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64NvFBC.dll
2021-11-04 17:58 – 2021-10-21 19:44 – 000981112 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvEncodeAPI64.dll
2021-11-04 17:58 – 2021-10-21 19:44 – 000452216 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvdebugdump.exe
2021-11-04 17:58 – 2021-10-21 19:43 – 005727376 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvcpl.dll
2021-11-04 17:58 – 2021-10-21 19:43 – 000849016 _____ (NVIDIA Corporation) C:WINDOWSsystem32MCU.exe
2021-11-04 17:58 – 2021-10-21 19:39 – 006430824 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvapi.dll
2021-11-04 17:58 – 2021-10-21 02:48 – 000085748 _____ C:WINDOWSsystem32nvinfo.pb
2021-11-04 17:19 – 2021-11-04 17:19 – 000000000 ____D C:UsersstefdAppDataRoamingMicrosoftWindowsStart MenuProgramsUbuntu
2021-11-04 17:18 – 2021-11-04 17:18 – 000000442 _____ C:WINDOWSsystem32Driversetchosts.ics
2021-11-04 17:17 – 2021-11-05 01:22 – 000001607 _____ C:WINDOWSsystem32configVSMIDK
2021-11-04 17:10 – 2021-11-04 17:11 – 000000000 ____D C:UsersstefdAppDataRoamingCode
2021-11-04 17:10 – 2021-11-04 17:10 – 000000000 ____D C:UsersstefdAppDataRoamingMicrosoftWindowsStart MenuProgramsVisual Studio Code
2021-11-04 17:10 – 2021-11-04 17:10 – 000000000 ____D C:Usersstefd.vscode
2021-11-04 17:03 – 2021-11-04 17:03 – 000000000 ____D C:UsersstefdAppDataLocalPeerDistRepub
2021-11-04 17:02 – 2021-11-05 04:54 – 000000000 ____D C:UsersstefdAppDataRoamingdiscord
2021-11-04 17:02 – 2021-11-05 04:21 – 000000000 ____D C:UsersstefdAppDataLocalDiscord
2021-11-04 17:02 – 2021-11-04 17:02 – 000002227 _____ C:UsersstefdDesktopDiscord.lnk
2021-11-04 17:02 – 2021-11-04 17:02 – 000000000 ____D C:UsersstefdAppDataRoamingMicrosoftWindowsStart MenuProgramsDiscord Inc
2021-11-04 16:55 – 2021-11-05 04:45 – 000000000 ____D C:Program Files (x86)Microsoft OneDrive
2021-11-04 16:55 – 2021-11-04 16:55 – 000000000 ___RD C:UsersDefaultOneDrive
2021-11-04 16:55 – 2021-11-04 16:55 – 000000000 ____D C:Program FilesCommon FilesDESIGNER
2021-11-04 16:55 – 2021-11-04 16:55 – 000000000 ____D C:Program Files (x86)Teams Installer
2021-11-04 16:54 – 2021-11-04 16:54 – 000002456 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsSkype for Business.lnk
2021-11-04 16:54 – 2021-11-04 16:54 – 000002451 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsWord.lnk
2021-11-04 16:54 – 2021-11-04 16:54 – 000002450 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsPowerPoint.lnk
2021-11-04 16:54 – 2021-11-04 16:54 – 000002414 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsAccess.lnk
2021-11-04 16:54 – 2021-11-04 16:54 – 000002413 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsExcel.lnk
2021-11-04 16:54 – 2021-11-04 16:54 – 000002407 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsOutlook.lnk
2021-11-04 16:54 – 2021-11-04 16:54 – 000002401 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsPublisher.lnk
2021-11-04 16:54 – 2021-11-04 16:54 – 000002393 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsOneNote.lnk
2021-11-04 16:54 – 2021-11-04 16:54 – 000000000 ____D C:ProgramDataMicrosoftWindowsStart MenuProgramsMicrosoft Office Tools
2021-11-04 16:51 – 2021-11-04 16:54 – 000000000 ____D C:Program FilesMicrosoft Office
2021-11-04 16:51 – 2021-11-04 16:51 – 000000000 ____D C:Program FilesMicrosoft Office 15
2021-11-04 16:49 – 2021-11-04 17:02 – 000000000 ____D C:UsersstefdAppDataLocalSquirrelTemp
2021-11-04 16:49 – 2021-11-04 16:49 – 000002364 _____ C:UsersstefdAppDataRoamingMicrosoftWindowsStart MenuProgramsMicrosoft Teams.lnk
2021-11-04 16:49 – 2021-11-04 16:49 – 000002356 _____ C:UsersstefdDesktopMicrosoft Teams.lnk
2021-11-04 16:49 – 2021-11-04 16:49 – 000000000 ____D C:UsersstefdAppDataRoamingTeams
2021-11-04 16:35 – 2021-11-04 16:35 – 000121344 _____ C:WINDOWSSysWOW64TpmTool.exe
2021-11-04 16:35 – 2021-11-04 16:35 – 000032768 _____ C:WINDOWSsystem32hnsproxy.dll
2021-11-04 16:35 – 2021-11-04 16:35 – 000024576 _____ C:WINDOWSsystem32nrtapi.dll
2021-11-04 16:35 – 2021-11-04 16:35 – 000014610 _____ C:WINDOWSsystem32DrtmAuthTxt.wim
2021-11-04 16:35 – 2021-11-04 16:35 – 000006656 _____ C:WINDOWSSysWOW64nrtapi.dll
2021-11-04 16:34 – 2021-11-04 16:34 – 000258048 _____ C:WINDOWSsystem32CoreMas.dll
2021-11-04 16:34 – 2021-11-04 16:34 – 000215552 _____ C:WINDOWSsystem32CloudIdWxhExtension.dll
2021-11-04 16:34 – 2021-11-04 16:34 – 000208896 _____ C:WINDOWSsystem32IHDS.dll
2021-11-04 16:34 – 2021-11-04 16:34 – 000167936 _____ C:WINDOWSsystem32TpmTool.exe
2021-11-04 16:10 – 2021-11-05 01:29 – 000803404 _____ C:WINDOWSsystem32PerfStringBackup.INI
2021-11-04 16:09 – 2021-11-04 16:09 – 000000000 ____D C:WINDOWSsystem32TasksAgent Activation Runtime
2021-11-04 16:09 – 2021-11-04 16:09 – 000000000 ____D C:ProgramDataMicrosoft OneDrive
2021-11-04 16:07 – 2021-11-05 01:22 – 000000006 ____H C:WINDOWSTasksSA.DAT
2021-11-04 16:07 – 2021-11-04 16:07 – 000011433 _____ C:WINDOWSdiagwrn.xml
2021-11-04 16:07 – 2021-11-04 16:07 – 000011433 _____ C:WINDOWSdiagerr.xml
2021-11-04 16:07 – 2021-11-04 16:07 – 000003408 _____ C:WINDOWSsystem32TasksMicrosoftEdgeUpdateTaskMachineUA
2021-11-04 16:07 – 2021-11-04 16:07 – 000003184 _____ C:WINDOWSsystem32TasksMicrosoftEdgeUpdateTaskMachineCore
2021-11-04 16:07 – 2021-11-04 16:07 – 000000020 ___SH C:Usersstefdntuser.ini
2021-11-04 16:04 – 2021-11-05 01:22 – 000000000 ____D C:WINDOWSsystem32SleepStudy
2021-11-04 16:04 – 2021-11-04 17:18 – 000472216 _____ C:WINDOWSsystem32FNTCACHE.DAT
2021-11-04 16:04 – 2021-11-04 16:07 – 000000000 ____D C:Windows.old
2021-11-04 15:59 – 2021-11-04 16:04 – 000000000 ____D C:WINDOWSsystem32configbbimigrate
2021-11-04 15:58 – 2021-11-04 18:11 – 000000000 ____D C:Usersstefd
2021-11-04 15:58 – 2021-11-04 15:59 – 000000000 ____D C:WINDOWSServiceProfiles
2021-11-04 15:58 – 2021-11-04 15:58 – 000000000 ____D C:WINDOWSsystem32dolbyaposvc
2021-11-04 15:58 – 2021-06-05 14:04 – 000001281 _____ C:UsersstefdAppDataRoamingMicrosoftWindowsStart MenuProgramsAdministrative Tools.lnk
2021-11-04 15:58 – 2021-06-05 14:04 – 000000407 _____ C:UsersstefdAppDataRoamingMicrosoftWindowsStart MenuProgramsFile Explorer.lnk
2021-11-04 15:49 – 2021-11-04 15:49 – 000008192 _____ C:WINDOWSsystem32configuserdiff
2021-11-04 15:43 – 2021-11-04 16:07 – 000000000 ___DC C:WINDOWSPanther
2021-11-04 15:42 – 2021-11-04 15:43 – 000000036 _____ C:WINDOWSprogress.ini
2021-11-04 15:33 – 2021-11-04 16:07 – 000000000 ___HD C:$GetCurrent
2021-11-04 15:33 – 2021-11-04 15:42 – 000000000 ____D C:Program Files (x86)WindowsInstallationAssistant
2021-11-04 15:24 – 2021-11-04 15:24 – 000000000 ____D C:UsersstefdAppDataLocalElevatedDiagnostics
2021-11-04 15:18 – 2021-11-04 15:18 – 000001345 _____ C:UsersstefdAppDataRoamingMicrosoftWindowsStart MenuProgramsPC Health Check.lnk
2021-11-04 15:18 – 2021-11-04 15:18 – 000000000 ____D C:UsersstefdAppDataLocalPCHealthCheck
2021-11-04 15:00 – 2020-10-15 01:14 – 000462632 _____ C:WINDOWSsystem32ze_loader.dll
2021-11-04 15:00 – 2020-10-15 01:14 – 000305984 _____ C:WINDOWSsystem32libmfxhw64.dll
2021-11-04 15:00 – 2020-10-15 01:14 – 000254512 _____ C:WINDOWSSysWOW64libmfxhw32.dll
2021-11-04 15:00 – 2020-10-15 01:14 – 000171464 _____ (Intel Corporation) C:WINDOWSsystem32intel_gfx_api-x64.dll
2021-11-04 15:00 – 2020-10-15 01:14 – 000148784 _____ C:WINDOWSsystem32ze_validation_layer.dll
2021-11-04 15:00 – 2020-10-15 01:14 – 000146744 _____ (Intel Corporation) C:WINDOWSSysWOW64intel_gfx_api-x86.dll
2021-11-04 15:00 – 2020-10-15 01:13 – 026677032 _____ (Intel Corporation) C:WINDOWSsystem32mfxplugin64_hw.dll
2021-11-04 15:00 – 2020-10-15 01:13 – 013520184 _____ (Intel Corporation) C:WINDOWSSysWOW64mfxplugin32_hw.dll
2021-11-04 14:59 – 2020-03-27 02:03 – 005422024 _____ (Realtek Semiconductor Corp.) C:WINDOWSsystem32RsDMFT64.dll
2021-11-04 14:59 – 2019-05-22 23:18 – 000305760 _____ (Intel Corporation) C:WINDOWSsystem32DriversiaLPSS2_UART2.sys
2021-11-04 14:59 – 2019-05-22 23:18 – 000128608 _____ (Intel Corporation) C:WINDOWSsystem32DriversiaLPSS2_GPIO2.sys
2021-11-04 14:53 – 2021-11-05 01:22 – 000012288 ___SH C:DumpStack.log.tmp
2021-11-04 14:33 – 2021-11-05 01:51 – 000000000 ____D C:UsersstefdAppDataLocalD3DSCache
2021-11-04 14:29 – 2021-11-04 14:29 – 000000000 ____H C:$WINRE_BACKUP_PARTITION.MARKER
2021-11-04 13:43 – 2021-11-04 16:04 – 000002438 _____ C:ProgramDataMicrosoftWindowsStart MenuProgramsMicrosoft Edge.lnk
2021-11-04 13:43 – 2021-11-04 16:04 – 000002276 _____ C:UsersPublicDesktopMicrosoft Edge.lnk
2021-11-04 13:27 – 2021-11-04 13:27 – 000000000 ____D C:UsersstefdAppDataLocalComms
2021-11-04 13:26 – 2021-11-04 13:26 – 000000000 ____D C:ProgramDataIntel
2021-11-04 13:24 – 2021-11-04 18:04 – 000000000 ____D C:ProgramDataPackages
2021-11-04 13:22 – 2021-11-04 18:01 – 000000000 ____D C:Program FilesNVIDIA Corporation
2021-11-04 13:21 – 2021-11-05 01:22 – 000000134 _____ C:WINDOWSsystem32regtest.txt
2021-11-04 13:21 – 2021-11-04 14:59 – 000000000 ____D C:Program FilesMicrosoft Update Health Tools
2021-11-04 13:21 – 2021-11-04 13:21 – 000000000 ____D C:Program FilesCommon FilesDolby
2021-11-04 13:20 – 2021-11-04 13:29 – 000000000 ____D C:Program Filesruxim
2021-11-04 13:20 – 2021-11-04 13:20 – 000000000 ____D C:WINDOWSsystem32MRT
2021-11-04 13:18 – 2019-03-05 19:56 – 000000852 _____ C:WINDOWSsystem32DriversRTKHDRC.dat
2021-11-04 13:18 – 2019-03-05 19:56 – 000000712 _____ C:WINDOWSsystem32DriversRTEQEX0.dat
2021-11-04 13:17 – 2021-11-04 20:01 – 000000000 ____D C:ProgramDataNVIDIA Corporation
2021-11-04 13:17 – 2021-11-04 16:05 – 000000000 ____D C:WINDOWSsystem32DriversNVIDIA Corporation
2021-11-04 13:16 – 2021-11-04 13:16 – 000000000 ___HD C:OneDriveTemp
2021-11-04 13:15 – 2021-11-05 04:45 – 000000000 ___RD C:UsersstefdOneDrive
2021-11-04 13:15 – 2021-11-04 18:04 – 000000000 ____D C:UsersstefdAppDataLocalPlaceholderTileLogoFolder
2021-11-04 13:14 – 2021-11-04 13:14 – 000000000 ___HD C:UsersstefdMicrosoftEdgeBackups
2021-11-04 13:13 – 2021-11-05 13:56 – 000000000 __SHD C:UsersstefdIntelGraphicsProfiles
2021-11-04 13:13 – 2021-11-05 01:22 – 000000000 ____D C:Intel
2021-11-04 13:13 – 2021-11-04 18:19 – 000000000 ____D C:UsersstefdAppDataLocalPackages
2021-11-04 13:13 – 2021-11-04 16:26 – 000000000 ____D C:UsersstefdAppDataLocalConnectedDevicesPlatform
2021-11-04 13:13 – 2021-11-04 16:07 – 000000000 __RHD C:UsersPublicAccountPictures
2021-11-04 13:13 – 2021-11-04 14:57 – 000000000 ___RD C:Usersstefd3D Objects
2021-11-04 13:13 – 2021-11-04 13:24 – 000000000 ____D C:UsersstefdAppDataLocalPublishers
2021-11-04 13:13 – 2021-11-04 13:14 – 000000000 ____D C:UsersstefdAppDataLocalMicrosoftEdge
2021-11-04 13:13 – 2021-11-04 13:14 – 000000000 ____D C:UsersstefdAppDataLocalIntel
2021-11-04 13:13 – 2021-11-04 13:13 – 000000000 ____D C:UsersstefdAppDataRoamingAdobe
2021-11-04 13:13 – 2021-11-04 13:13 – 000000000 ____D C:UsersstefdAppDataLocalLowIntel
2021-11-04 13:13 – 2021-11-04 13:13 – 000000000 ____D C:UsersstefdAppDataLocalVirtualStore
2021-11-04 13:13 – 2021-11-04 13:13 – 000000000 _____ C:WINDOWSsystem32GfxValDisplayLog.bin
2021-11-04 13:09 – 2021-11-04 13:09 – 000000000 ____D C:WINDOWSCSC
2021-11-04 11:08 – 2021-11-04 11:08 – 000000000 _SHDL C:Documents and Settings
2021-11-04 11:04 – 2021-11-04 13:24 – 000000000 ____D C:WINDOWSsystem32Driverswd
2021-11-04 11:04 – 2021-11-04 11:04 – 000000000 ____H C:WINDOWSsystem32DriversMsft_User_WpdFs_01_11_00.Wdf
2021-10-07 20:56 – 2021-06-05 14:06 – 000024395 _____ C:WINDOWSEducation.xml
2021-10-07 20:53 – 2021-06-05 14:06 – 000024395 _____ C:WINDOWSProfessionalWorkstation.xml
2021-10-07 20:51 – 2021-06-05 14:06 – 000024395 _____ C:WINDOWSProfessionalEducation.xml
2021-10-07 20:49 – 2021-06-05 14:06 – 000024395 _____ C:WINDOWSCloudEdition.xml
2021-10-07 20:33 – 2021-11-04 17:13 – 000352576 _____ C:WINDOWSsystem32vp9fs.dll
2021-10-07 20:33 – 2021-10-07 20:33 – 000491008 _____ (Microsoft Corporation) C:WINDOWSSysWOW64appwiz.cpl
2021-10-07 20:33 – 2021-10-07 20:33 – 000009522 _____ C:WINDOWSsystem32ResPriUHMImageList
2021-10-07 20:33 – 2021-10-07 20:33 – 000009522 _____ C:WINDOWSsystem32ResPriImageList
2021-10-07 20:33 – 2021-10-07 20:33 – 000009522 _____ C:WINDOWSsystem32ResPriHMImageList
2021-10-07 20:33 – 2021-10-07 20:33 – 000009402 _____ C:WINDOWSsystem32ResPriHMImageListLowCost
2021-10-07 20:33 – 2021-10-07 20:33 – 000008964 _____ C:WINDOWSsystem32ResPriLMImageList
2021-10-07 20:33 – 2021-10-07 20:33 – 000008870 _____ C:WINDOWSsystem32ResPriImageListLowCost
2021-10-07 20:32 – 2021-10-07 20:32 – 000727576 _____ C:WINDOWSsystem32TextShaping.dll
2021-10-07 20:32 – 2021-10-07 20:32 – 000659456 _____ (Microsoft Corporation) C:WINDOWSsystem32appwiz.cpl
2021-10-07 20:32 – 2021-10-07 20:32 – 000617648 _____ C:WINDOWSSysWOW64TextShaping.dll
2021-10-07 20:32 – 2021-10-07 20:32 – 000614400 _____ C:WINDOWSsystem32TextInputMethodFormatter.dll
2021-10-07 20:32 – 2021-10-07 20:32 – 000425984 _____ C:WINDOWSSysWOW64TextInputMethodFormatter.dll
2021-10-07 20:32 – 2021-10-07 20:32 – 000360448 _____ C:WINDOWSsystem32Windows.Internal.UI.Shell.WindowTabManager.dll
2021-10-07 20:32 – 2021-10-07 20:32 – 000335872 _____ C:WINDOWSsystem32Windows.Internal.UI.Dialogs.dll
2021-10-07 20:32 – 2021-10-07 20:32 – 000267264 _____ C:WINDOWSSysWOW64Windows.Internal.UI.Dialogs.dll
2021-10-07 20:32 – 2021-10-07 20:32 – 000253952 _____ (Microsoft Corporation) C:WINDOWSsystem32ssText3d.scr
2021-10-07 20:32 – 2021-10-07 20:32 – 000221184 _____ C:WINDOWSSysWOW64Microsoft.Internal.FrameworkUdk.System.dll
2021-10-07 20:32 – 2021-10-07 20:32 – 000180224 _____ C:WINDOWSsystem32CloudExperienceHostRedirection.dll
2021-10-07 20:32 – 2021-10-07 20:32 – 000099560 _____ C:WINDOWSsystem32wow64con.dll
2021-10-07 20:32 – 2021-10-07 20:32 – 000077824 _____ C:WINDOWSsystem32runexehelper.exe
2021-10-07 20:32 – 2021-10-07 20:32 – 000041594 _____ C:WINDOWSSysWOW64ctac.json
2021-10-07 20:32 – 2021-10-07 20:32 – 000036864 _____ C:WINDOWSsystem32umpodev.dll
2021-10-07 20:32 – 2021-10-07 20:32 – 000003366 _____ C:WINDOWSSysWOW64AppxProvisioning.xml
2021-10-07 20:32 – 2021-10-07 20:32 – 000003366 _____ C:WINDOWSsystem32AppxProvisioning.xml
2021-10-07 20:31 – 2021-10-07 20:31 – 000311296 _____ C:WINDOWSsystem32Microsoft.Internal.FrameworkUdk.System.dll
2021-10-07 20:31 – 2021-10-07 20:31 – 000172032 _____ C:WINDOWSsystem32DataStoreCacheDumpTool.exe
2021-10-07 20:31 – 2021-10-07 20:31 – 000041594 _____ C:WINDOWSsystem32ctac.json

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-11-05 14:03 – 2021-06-05 14:10 – 000000000 ____D C:ProgramDataregid.1991-06.com.microsoft
2021-11-05 04:47 – 2021-06-05 14:01 – 000000000 ____D C:WINDOWSCbsTemp
2021-11-05 01:34 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSAppReadiness
2021-11-05 01:29 – 2021-06-05 14:09 – 000000000 ____D C:WINDOWSINF
2021-11-05 01:22 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSSystemTemp
2021-11-05 01:22 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSServiceState
2021-11-04 18:41 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSappcompat
2021-11-04 18:03 – 2021-06-05 14:10 – 000000000 ___HD C:Program FilesWindowsApps
2021-11-04 17:17 – 2021-06-05 14:10 – 000000000 ___SD C:WINDOWSSysWOW64lxss
2021-11-04 17:17 – 2021-06-05 14:10 – 000000000 ___SD C:WINDOWSsystem32lxss
2021-11-04 17:17 – 2021-06-05 14:01 – 000524288 _____ C:WINDOWSsystem32configBBI
2021-11-04 17:13 – 2021-06-05 14:21 – 000143672 _____ (Microsoft Corporation) C:WINDOWSsystem32rdp4vs.dll
2021-11-04 17:13 – 2021-06-05 14:20 – 000065864 _____ (Microsoft Corporation) C:WINDOWSsystem32NvAgent.dll
2021-11-04 17:13 – 2021-06-05 14:19 – 001126728 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverslxcore.sys
2021-11-04 17:13 – 2021-06-05 14:19 – 000504144 _____ (Microsoft Corporation) C:WINDOWSsystem32NetMgmtIF.dll
2021-11-04 17:13 – 2021-06-05 14:19 – 000139600 _____ C:WINDOWSsystem32nmscrub.exe
2021-11-04 17:13 – 2021-06-05 14:19 – 000122880 _____ (Microsoft Corporation) C:WINDOWSsystem32wslconfig.exe
2021-11-04 17:13 – 2021-06-05 14:19 – 000122880 _____ (Microsoft Corporation) C:WINDOWSsystem32bash.exe
2021-11-04 17:13 – 2021-06-05 14:19 – 000119120 _____ (Microsoft Corporation) C:WINDOWSsystem32nmbind.exe
2021-11-04 17:13 – 2021-06-05 14:19 – 000082248 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversl2bridge.sys
2021-11-04 17:13 – 2021-06-05 14:19 – 000049488 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershnswfpdriver.sys
2021-11-04 17:13 – 2021-06-05 14:19 – 000049464 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverslxss.sys
2021-11-04 17:13 – 2021-06-05 14:18 – 000401736 _____ (Microsoft Corporation) C:WINDOWSsystem32VmSynthNic.dll
2021-11-04 17:13 – 2021-06-05 14:18 – 000360784 _____ (Microsoft Corporation) C:WINDOWSsystem32vmiccore.dll
2021-11-04 17:13 – 2021-06-05 14:18 – 000356680 _____ (Microsoft Corporation) C:WINDOWSsystem32hcsdiag.exe
2021-11-04 17:13 – 2021-06-05 14:18 – 000327992 _____ (Microsoft Corporation) C:WINDOWSsystem32vmsif.dll
2021-11-04 17:13 – 2021-06-05 14:18 – 000311616 _____ (Microsoft Corporation) C:WINDOWSsystem32vmflexio.dll
2021-11-04 17:13 – 2021-06-05 14:18 – 000258384 _____ (Microsoft Corporation) C:WINDOWSsystem32vmbusvdev.dll
2021-11-04 17:13 – 2021-06-05 14:18 – 000250184 _____ (Microsoft Corporation) C:WINDOWSsystem32gpupvdev.dll
2021-11-04 17:13 – 2021-06-05 14:18 – 000233808 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversvpcivsp.sys
2021-11-04 17:13 – 2021-06-05 14:18 – 000229688 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversstorvsp.sys
2021-11-04 17:13 – 2021-06-05 14:18 – 000209232 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversvmsvcext.sys
2021-11-04 17:13 – 2021-06-05 14:18 – 000172360 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversvmbkmclr.sys
2021-11-04 17:13 – 2021-06-05 14:18 – 000164176 _____ (Microsoft Corporation) C:WINDOWSsystem32vmvirtio.dll
2021-11-04 17:13 – 2021-06-05 14:18 – 000143672 _____ (Microsoft Corporation) C:WINDOWSsystem32vmsifcore.dll
2021-11-04 17:13 – 2021-06-05 14:18 – 000123208 _____ (Microsoft Corporation) C:WINDOWSsystem32vmwpevents.dll
2021-11-04 17:13 – 2021-06-05 14:18 – 000122880 _____ C:WINDOWSsystem32vmhbmgmt.dll
2021-11-04 17:13 – 2021-06-05 14:18 – 000119104 _____ (Microsoft Corporation) C:WINDOWSsystem32vmwpctrl.dll
2021-11-04 17:13 – 2021-06-05 14:18 – 000090440 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspvhdparser.sys
2021-11-04 17:13 – 2021-06-05 14:18 – 000090112 _____ C:WINDOWSsystem32Driversvmbusproxy.sys
2021-11-04 17:13 – 2021-06-05 14:18 – 000078144 _____ (Microsoft Corporation) C:WINDOWSsystem32Driversvhdparser.sys
2021-11-04 17:13 – 2021-06-05 14:18 – 000069968 _____ (Microsoft Corporation) C:WINDOWSsystem32Driverspassthruparser.sys
2021-11-04 17:13 – 2021-06-05 14:18 – 000061776 _____ (Microsoft Corporation) C:WINDOWSsystem32Drivershvsocketcontrol.sys
2021-11-04 17:13 – 2021-06-05 14:18 – 000049480 _____ (Microsoft Corporation) C:WINDOWSsystem32VrdUmed.dll
2021-11-04 17:13 – 2021-06-05 14:18 – 000049464 _____ (Microsoft Corporation) C:WINDOWSsystem32vmsifproxystub.dll
2021-11-04 17:13 – 2021-06-05 14:18 – 000045840 _____ (Microsoft Corporation) C:WINDOWSsystem32sbresources.dll
2021-11-04 17:13 – 2021-06-05 14:18 – 000041288 _____ (Microsoft Corporation) C:WINDOWSsystem32vmcomputeeventlog.dll
2021-11-04 17:13 – 2021-06-05 14:18 – 000024904 _____ (Microsoft Corporation) C:WINDOWSsystem32f989b52d-f928-44a3-9bf1-bf0c1da6a0d6_HyperV-DeviceVirtualization.dll
2021-11-04 17:13 – 2021-06-05 14:18 – 000024904 _____ (Microsoft Corporation) C:WINDOWSsystem32f1db7d81-95be-4911-935a-8ab71629112a_HyperV-IsolatedVM.dll
2021-11-04 17:13 – 2021-06-05 14:18 – 000024904 _____ (Microsoft Corporation) C:WINDOWSsystem32c4d66f00-b6f0-4439-ac9b-c5ea13fe54d7_HyperV-ComputeCore.dll
2021-11-04 17:13 – 2021-06-05 14:18 – 000024896 _____ (Microsoft Corporation) C:WINDOWSsystem32d4d78066-e6db-44b7-b5cd-2eb82dce620c_HyperV-ComputeLegacy.dll
2021-11-04 17:13 – 2021-06-05 14:18 – 000006658 _____ C:WINDOWSsystem32VmFirmware Third-Party Notices.txt
2021-11-04 16:55 – 2021-06-05 14:10 – 000000000 ____D C:Program FilesCommon Filesmicrosoft shared
2021-11-04 16:37 – 2021-06-05 16:30 – 000000000 ___SD C:WINDOWSsystem32AppV
2021-11-04 16:37 – 2021-06-05 16:30 – 000000000 ____D C:Program FilesWindows Defender Advanced Threat Protection
2021-11-04 16:37 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSSystemResources
2021-11-04 16:37 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSsystem32oobe
2021-11-04 16:37 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSsystem32appraiser
2021-11-04 16:37 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSShellComponents
2021-11-04 16:37 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSPolicyDefinitions
2021-11-04 16:37 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSbcastdvr
2021-11-04 16:37 – 2021-06-05 14:01 – 000000000 ____D C:WINDOWSservicing
2021-11-04 16:24 – 2021-06-05 14:10 – 000000000 ___RD C:WINDOWSPrintDialog
2021-11-04 16:07 – 2021-06-05 14:10 – 000000000 ___RD C:WINDOWSImmersiveControlPanel
2021-11-04 16:07 – 2021-06-05 14:10 – 000000000 ____D C:Program FilesWindows Defender
2021-11-04 16:07 – 2021-06-05 14:01 – 000032768 _____ C:WINDOWSsystem32configELAM
2021-11-04 16:04 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSsystem32WinBioDatabase
2021-11-04 16:04 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSsystem32spool
2021-11-04 16:04 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSsystem32DriversDriverData
2021-11-04 16:04 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSLiveKernelReports
2021-11-04 16:04 – 2021-06-05 14:08 – 000028672 _____ C:WINDOWSsystem32configBCD-Template
2021-11-04 16:04 – 2019-12-07 11:14 – 000000000 ____D C:WINDOWSsystem32Tasks_Migrated
2021-11-04 16:04 – 2018-09-15 09:33 – 000000000 ____D C:WINDOWSsystem32MsDtc
2021-11-04 16:00 – 2021-06-05 14:10 – 000000000 __RHD C:UsersPublicLibraries
2021-11-04 16:00 – 2021-06-05 14:10 – 000000000 ____D C:ProgramDataUSOPrivate
2021-11-04 15:58 – 2021-06-05 14:14 – 000000000 ____D C:WINDOWSSetup
2021-11-04 13:41 – 2018-09-15 09:33 – 000000000 ____D C:WINDOWSTextInput
2021-10-21 19:44 – 2021-08-31 17:54 – 000792208 _____ (NVIDIA Corporation) C:WINDOWSSysWOW64nvEncodeAPI.dll
2021-10-21 19:39 – 2021-08-31 17:52 – 007578560 _____ (NVIDIA Corporation) C:WINDOWSsystem32nvapi64.dll
2021-10-21 02:48 – 2021-08-31 17:54 – 000125568 _____ (NVIDIA Corporation) C:WINDOWSsystem32Driversnvhda64v.sys
2021-10-07 20:42 – 2021-06-05 16:30 – 000032768 _____ (Microsoft Corporation) C:WINDOWSsystem32OEMDefaultAssociations.dll
2021-10-07 20:42 – 2021-06-05 16:30 – 000021047 _____ C:WINDOWSsystem32OEMDefaultAssociations.xml
2021-10-07 20:42 – 2021-06-05 16:30 – 000000000 ____D C:Program FilesWindows Photo Viewer
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ___SD C:WINDOWSsystem32F12
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSSysWOW64WinMetadata
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSSysWOW64vi-VN
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSSysWOW64oobe
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSSysWOW64lv-LV
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSSysWOW64lt-LT
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSSysWOW64id-ID
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSSysWOW64gl-ES
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSSysWOW64eu-ES
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSSysWOW64et-EE
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSSysWOW64es-MX
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSSysWOW64Dism
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSSysWOW64ca-ES
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSsystem32WinMetadata
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSsystem32WinBioPlugIns
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSsystem32vi-VN
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSsystem32ShellExperiences
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSsystem32PerceptionSimulation
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSsystem32lv-LV
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSsystem32lt-LT
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSsystem32id-ID
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSsystem32gl-ES
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSsystem32eu-ES
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSsystem32et-EE
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSsystem32es-MX
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSsystem32Dism
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSsystem32ca-ES
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSShellExperiences
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSProvisioning
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:WINDOWSDiagTrack
2021-10-07 20:42 – 2021-06-05 14:10 – 000000000 ____D C:Program FilesCommon FilesSystem

==================== Files in the root of some directories ========

2021-11-04 18:23 – 2021-11-04 18:23 – 000004216 _____ () C:UsersstefdAppDataRoamingLTspiceXVII.ini
2021-11-04 18:13 – 2018-08-07 01:30 – 000399224 _____ (BitTorrent, Inc.) C:UsersstefdAppDataRoamingutorrent_2.2.1.exe

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-11-2021
Ran by stefd (05-11-2021 14:13:24)
Running from C:UsersstefdDownloads
Microsoft Windows 11 Education Version 21H2 22000.282 (X64) (2021-11-04 14:07:33)
Boot Mode: Normal
==========================================================

==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-298159420-2852300768-613573049-500 – Administrator – Disabled)
DefaultAccount (S-1-5-21-298159420-2852300768-613573049-503 – Limited – Disabled)
Guest (S-1-5-21-298159420-2852300768-613573049-501 – Limited – Disabled)
stefd (S-1-5-21-298159420-2852300768-613573049-1001 – Administrator – Enabled) => C:Usersstefd
WDAGUtilityAccount (S-1-5-21-298159420-2852300768-613573049-504 – Limited – Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled – Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled – Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with “Hidden” flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

2.1.2.3 (HKLM-x32…Setup_is1) (Version: – )
Cisco Packet Tracer 8.0.1 64Bit (HKLM…Cisco Packet Tracer 8.0.1 64Bit_is1) (Version: – Cisco Systems, Inc.)
Discord (HKUS-1-5-21-298159420-2852300768-613573049-1001…Discord) (Version: 1.0.9003 – Discord Inc.)
LTspice XVII (HKLM…LTspice XVII) (Version: – Linear Technology Corporation)
MATLAB R2020a (HKLM…Matlab R2020a) (Version: 9.8 – MathWorks)
Microsoft 365 Apps for enterprise – en-us (HKLM…O365ProPlusRetail – en-us) (Version: 16.0.14527.20234 – Microsoft Corporation)
Microsoft Edge (HKLM-x32…Microsoft Edge) (Version: 95.0.1020.40 – Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32…Microsoft EdgeWebView) (Version: 95.0.1020.40 – Microsoft Corporation)
Microsoft Teams (HKUS-1-5-21-298159420-2852300768-613573049-1001…Teams) (Version: 1.4.00.26376 – Microsoft Corporation)
Microsoft Update Health Tools (HKLM…{29B15818-E79F-4AB0-8938-9410C807AD76}) (Version: 2.84.0.0 – Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) – 14.22.27821 (HKLM-x32…{6361b579-2795-4886-b2a8-53d5239b6452}) (Version: 14.22.27821.0 – Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) – 14.22.27821 (HKLM-x32…{5bfc1380-fd35-4b85-9715-7351535d077e}) (Version: 14.22.27821.0 – Microsoft Corporation)
Microsoft Visual Studio Code (User) (HKUS-1-5-21-298159420-2852300768-613573049-1001…{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.61.2 – Microsoft Corporation)
NVIDIA FrameView SDK 1.1.4923.29968894 (HKLM…{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29968894 – NVIDIA Corporation)
NVIDIA GeForce Experience 3.23.0.74 (HKLM…{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.23.0.74 – NVIDIA Corporation)
NVIDIA Graphics Driver 496.49 (HKLM…{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 496.49 – NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.38.92 (HKLM…{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.92 – NVIDIA Corporation)
NVIDIA PhysX System Software 9.21.0713 (HKLM…{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 – NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM…{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14527.20234 – Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM…{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14527.20234 – Microsoft Corporation) Hidden
Teams Machine-Wide Installer (HKLM-x32…{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.4.0.22976 – Microsoft Corporation)
Transmission 3.00 (bb6b5a062e) (x64) (HKLM…{B206C51C-27D2-4251-95E2-B4B28DE80633}) (Version: 3.00.0 – Transmission Project)
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM…{3800CCFC-4006-4B30-A103-416AF26A885C}) (Version: 2.71.0.0 – Microsoft Corporation)
VLC media player (HKLM…VLC media player) (Version: 3.0.16 – VideoLAN)
Windows 11 Installation Assistant (HKLM-x32…{115DF11E-4B4C-4EA9-9A79-00DB0C7EF02D}) (Version: 1.4.19041.1341 – Microsoft Corporation)
Windows PC Health Check (HKLM…{77ACFAF7-E5AB-410D-BA14-BBEBF89422DE}) (Version: 3.1.2109.29003 – Microsoft Corporation)
Windows Subsystem for Linux Update (HKLM…{36EF257E-21D5-44F7-8451-07923A8C465E}) (Version: 5.10.16 – Microsoft Corporation)
Windows Subsystem for Linux WSLg Preview (HKLM…{E04B0005-A349-4BCC-9662-CA0132007E14}) (Version: 1.0.26 – Microsoft Corporation)

Packages:
=========
Dolby Atmos for Gaming -> C:Program FilesWindowsAppsDolbyLaboratories.DolbyAtmosforGaming_3.20500.501.0_x64__rz1tebttyb220 [2021-11-04] (Dolby Laboratories)
Intel® Graphics Command Center -> C:Program FilesWindowsAppsAppUp.IntelGraphicsExperience_1.100.3370.0_x64__8j3eq9eme6ctt [2021-11-04] (INTEL CORP) [Startup Task]
Microsoft Solitaire Collection -> C:Program FilesWindowsAppsMicrosoft.MicrosoftSolitaireCollection_4.10.10270.0_x64__8wekyb3d8bbwe [2021-11-04] (Microsoft Studios) [MS Ad]
NVIDIA Control Panel -> C:Program FilesWindowsAppsNVIDIACorp.NVIDIAControlPanel_8.1.961.0_x64__56jybvy8sckqj [2021-11-04] (NVIDIA Corp.)
Realtek Audio Control -> C:Program FilesWindowsAppsRealtekSemiconductorCorp.RealtekAudioControl_1.10.216.0_x64__dt26b99r8h8gj [2021-11-04] (Realtek Semiconductor Corp)
Skype -> C:Program FilesWindowsAppsMicrosoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c [2021-11-04] (Skype)
Spotify Music -> C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.171.560.0_x86__zpdnekdrzrea0 [2021-11-04] (Spotify AB) [Startup Task]
Ubuntu -> C:Program FilesWindowsAppsCanonicalGroupLimited.UbuntuonWindows_2004.2020.424.0_x64__79rhkp1fndgsc [2021-11-04] (Canonical Group Limited)
WhatsApp Desktop -> C:Program FilesWindowsApps5319275A.WhatsAppDesktop_2.2140.12.0_x64__cv1g1gvanyjgm [2021-11-04] (WhatsApp Inc.)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKUS-1-5-21-298159420-2852300768-613573049-1001_ClassesCLSID{19A6E644-14E6-4A60-B8D7-DD20610A871D}InprocServer32 -> C:UsersstefdAppDataLocalMicrosoftTeamsMeetingAddin1.0.21161.4x64Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:WINDOWSSystem32DriverStoreFileRepositorynvlti.inf_amd64_af22935532babf10nvshext.dll [2021-10-21] (Nvidia Corporation -> NVIDIA Corporation)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2021-11-04 18:03 – 2021-11-04 18:04 – 000269824 _____ () [File not signed] \?C:Program FilesWindowsApps5319275A.WhatsAppDesktop_2.2140.12.0_x64__cv1g1gvanyjgmappresourcesapp.asar.unpackednode_moduleselectron-panel-windowbuildReleaseNativeExtension.node
2021-11-04 18:03 – 2021-11-04 18:04 – 000149504 _____ () [File not signed] \?C:Program FilesWindowsApps5319275A.WhatsAppDesktop_2.2140.12.0_x64__cv1g1gvanyjgmappresourcesapp.asar.unpackednode_moduleskeytarbuildReleasekeytar.node
2021-11-04 18:03 – 2021-11-04 18:04 – 000268288 _____ () [File not signed] \?C:Program FilesWindowsApps5319275A.WhatsAppDesktop_2.2140.12.0_x64__cv1g1gvanyjgmappresourcesapp.asar.unpackednode_modulesnode-shared-membuildReleasenode_shared_mem.node
2021-11-04 18:03 – 2021-11-04 18:04 – 004262400 _____ () [File not signed] \?C:Program FilesWindowsApps5319275A.WhatsAppDesktop_2.2140.12.0_x64__cv1g1gvanyjgmappresourcesapp.asar.unpackednode_moduleswavoipbuildReleasebinding.node
2021-11-04 18:03 – 2021-11-04 18:04 – 000150528 _____ () [File not signed] \?C:Program FilesWindowsApps5319275A.WhatsAppDesktop_2.2140.12.0_x64__cv1g1gvanyjgmappresourcesapp.asar.unpackednode_moduleswindows-focus-assistbuildReleasefocus-assist.node
2021-11-04 18:03 – 2021-11-04 18:04 – 000097792 _____ () [File not signed] \?C:Program FilesWindowsApps5319275A.WhatsAppDesktop_2.2140.12.0_x64__cv1g1gvanyjgmappresourcesapp.asar.unpackednode_moduleswindows-notification-statebuildReleasenotificationstate.node
2021-11-04 18:03 – 2021-11-04 18:04 – 000101376 _____ () [File not signed] \?C:Program FilesWindowsApps5319275A.WhatsAppDesktop_2.2140.12.0_x64__cv1g1gvanyjgmappresourcesapp.asar.unpackednode_moduleswindows-quiet-hoursbuildReleasequiethours.node
2021-11-04 18:03 – 2021-11-04 18:03 – 002772480 _____ () [File not signed] C:Program FilesWindowsApps5319275A.WhatsAppDesktop_2.2140.12.0_x64__cv1g1gvanyjgmappffmpeg.dll
2021-11-04 18:03 – 2021-11-04 18:03 – 000379904 _____ () [File not signed] C:Program FilesWindowsApps5319275A.WhatsAppDesktop_2.2140.12.0_x64__cv1g1gvanyjgmapplibegl.dll
2021-11-04 18:03 – 2021-11-04 18:03 – 007863296 _____ () [File not signed] C:Program FilesWindowsApps5319275A.WhatsAppDesktop_2.2140.12.0_x64__cv1g1gvanyjgmapplibglesv2.dll
2017-03-02 15:19 – 2017-03-02 15:19 – 000310272 ____N (easyhook.codeplex.com) [File not signed] C:Program FilesCommon FilesDolbyDAX3RADARHOSTEasyHook64.dll
2021-11-04 16:23 – 2021-11-04 16:23 – 000137152 _____ (Microsoft Windows -> Microsoft Corporation) [File not signed] C:Program FilesWindowsAppsMicrosoftWindows.Client.WebExperience_421.20034.345.0_x64__cw5n1h2txyewyDashboardWebView2Loader.dll
2021-11-04 18:13 – 2010-03-31 04:56 – 000249856 _____ (Mozilla Foundation) [File not signed] C:Program Files (x86)Common FilesManageMINTfreebl3.dll
2021-11-04 18:13 – 2010-03-31 04:56 – 000098304 _____ (Mozilla Foundation) [File not signed] C:Program Files (x86)Common FilesManageMINTnssdbm3.dll
2021-11-04 18:13 – 2010-03-31 04:56 – 000155648 _____ (Mozilla Foundation) [File not signed] C:Program Files (x86)Common FilesManageMINTsoftokn3.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:Program FilesMicrosoft OfficerootOffice16OCHelper.dll [2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:Program FilesMicrosoft OfficerootVFSProgramFilesX86Microsoft OfficeOffice16OCHelper.dll [2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 – {83C25742-A9F7-49FB-9138-434302C88D07} – C:Program FilesMicrosoft OfficerootOffice16MSOSB.DLL [2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 – {83C25742-A9F7-49FB-9138-434302C88D07} – C:Program FilesMicrosoft OfficerootVFSProgramFilesX86Microsoft OfficeOffice16MSOSB.DLL [2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 – {42089D2D-912D-4018-9087-2B87803E93FB} – C:Program FilesMicrosoft OfficerootOffice16MSOSB.DLL [2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 – {42089D2D-912D-4018-9087-2B87803E93FB} – C:Program FilesMicrosoft OfficerootVFSProgramFilesX86Microsoft OfficeOffice16MSOSB.DLL [2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 – {42089D2D-912D-4018-9087-2B87803E93FB} – C:Program FilesMicrosoft OfficerootOffice16MSOSB.DLL [2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 – {42089D2D-912D-4018-9087-2B87803E93FB} – C:Program FilesMicrosoft OfficerootVFSProgramFilesX86Microsoft OfficeOffice16MSOSB.DLL [2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 – {5504BE45-A83B-4808-900A-3A5C36E7F77A} – C:Program FilesMicrosoft OfficerootOffice16MSOSB.DLL [2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 – {5504BE45-A83B-4808-900A-3A5C36E7F77A} – C:Program FilesMicrosoft OfficerootVFSProgramFilesX86Microsoft OfficeOffice16MSOSB.DLL [2021-11-04] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKUS-1-5-21-298159420-2852300768-613573049-1001…sharepoint.com -> hxxps://ctipub-files.sharepoint.com

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2018-09-15 09:31 – 2018-09-15 09:31 – 000000824 _____ C:WINDOWSsystem32driversetchosts

2021-11-04 17:18 – 2021-11-04 17:18 – 000000442 _____ C:WINDOWSsystem32driversetchosts.ics
172.24.176.1 DESKTOP-78SRSJV.mshome.net # 2026 11 2 3 15 18 48 114

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKUS-1-5-21-298159420-2852300768-613573049-1001Control PanelDesktop\Wallpaper -> C:WINDOWSwebwallpaperWindowsimg19.jpg
DNS Servers: 193.231.252.1 – 213.154.124.1
HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{3754B62E-2176-4FBB-B2DA-860A8F772BD1}] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.171.560.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{AA6B6E76-F042-4161-94DA-CFDCD92A95E6}] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.171.560.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{DD0537CE-94B3-4284-B302-10EBD63317FF}] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.171.560.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{EC96C9B2-4A5F-47CB-BBFF-ADF159F906D5}] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.171.560.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{887BC8C9-BF0F-453F-803E-AEC14021B480}] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.171.560.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{DF56BB69-733C-4361-AB7D-BAB491E7EE26}] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.171.560.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{01F8C1DA-71D6-4F01-986B-81B3B6622F92}] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.171.560.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{DBFAC939-AC88-4AD7-B10C-BF288F88715C}] => (Allow) C:Program FilesWindowsAppsSpotifyAB.SpotifyMusic_1.171.560.0_x86__zpdnekdrzrea0Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{BF37C1FE-6001-43B3-8A26-4A15C5484621}] => (Allow) C:Program FilesWindowsAppsMicrosoftTeams_21253.510.996.1465_x64__8wekyb3d8bbwemsteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2CD692C5-AC5D-4C50-BAAC-A4F6EB29CA35}] => (Allow) C:Program FilesWindowsAppsMicrosoftTeams_21253.510.996.1465_x64__8wekyb3d8bbwemsteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E7E75BB6-DF93-48AA-94D0-6E4BDBDD272B}] => (Allow) C:Program FilesMicrosoft OfficerootOffice16outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D09A65B6-623C-4454-918E-250D083EFD6D}] => (Allow) C:Program FilesMicrosoft OfficerootOffice16Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{913635EF-DB9B-4EC1-A9EC-9287391FA6B8}] => (Allow) C:Program FilesMicrosoft OfficerootOffice16Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7A484BE8-0893-401C-8998-6525EE974FC7}] => (Allow) C:Program FilesMicrosoft OfficerootOffice16UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7B6A32DB-19CF-402C-91FF-9BCA11EE4894}] => (Allow) C:Program FilesMicrosoft OfficerootOffice16UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BBEC4F78-934F-4943-B4A3-ED20013A9C20}] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{2ECFC05B-4741-4D34-AF2F-0DA051FECD14}] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{ECBDBD98-9967-49D9-A626-4C2288BE7F0A}] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{B1691DAD-D60B-4FF2-B67D-93692EA02647}] => (Allow) C:Program FilesNVIDIA CorporationNvContainernvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{B6B5E025-FA58-4C29-8A26-51FEE21DB079}] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{A1BD97D0-3DD2-4AB8-9591-0386B94B71FA}] => (Allow) C:Program FilesNVIDIA CorporationNvStreamSrvnvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{BE804EC8-EA25-4796-9F13-5570D7D4F73E}C:program filescisco packet tracer 8.0.1binpackettracer.exe] => (Allow) C:program filescisco packet tracer 8.0.1binpackettracer.exe (CISCO SYSTEMS, INC. -> Cisco Systems, Inc)
FirewallRules: [UDP Query User{6DEAE645-29F5-432B-817F-61C3EA063130}C:program filescisco packet tracer 8.0.1binpackettracer.exe] => (Allow) C:program filescisco packet tracer 8.0.1binpackettracer.exe (CISCO SYSTEMS, INC. -> Cisco Systems, Inc)
FirewallRules: [{91A97F03-3696-4F94-B854-D15ACCE90C71}] => (Block) C:program filescisco packet tracer 8.0.1binpackettracer.exe (CISCO SYSTEMS, INC. -> Cisco Systems, Inc)
FirewallRules: [{5D401655-FC4A-484D-899C-DAED5B3FED26}] => (Block) C:program filescisco packet tracer 8.0.1binpackettracer.exe (CISCO SYSTEMS, INC. -> Cisco Systems, Inc)
FirewallRules: [TCP Query User{74371B92-764D-4231-9D85-B74ED38882AA}C:program filestransmissiontransmission-qt.exe] => (Allow) C:program filestransmissiontransmission-qt.exe (SignPath Foundation -> Transmission Project)
FirewallRules: [UDP Query User{CFC5CB16-E1A8-441B-B312-FA082E975E4F}C:program filestransmissiontransmission-qt.exe] => (Allow) C:program filestransmissiontransmission-qt.exe (SignPath Foundation -> Transmission Project)
FirewallRules: [{9284C212-83C2-4059-823C-8DC6254ED9B4}] => (Block) C:program filestransmissiontransmission-qt.exe (SignPath Foundation -> Transmission Project)
FirewallRules: [{A879061B-9C90-4025-86FD-C8E1735CCA0D}] => (Block) C:program filestransmissiontransmission-qt.exe (SignPath Foundation -> Transmission Project)
FirewallRules: [TCP Query User{7C2D78D2-C54F-4BF8-9BE5-05687CEF5929}E:binwin64setup.exe] => (Block) E:binwin64setup.exe => No File
FirewallRules: [UDP Query User{A1921691-DF99-47B2-BD56-04627FD77C78}E:binwin64setup.exe] => (Block) E:binwin64setup.exe => No File
FirewallRules: [{25421733-A080-48C1-85BF-A344F68EEA36}] => (Allow) C:Program Files (x86)MicrosoftEdgeWebViewApplication95.0.1020.40msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{B5C94E85-E05D-4B43-B15D-ECEDEF658ACE}C:usersstefdappdatalocalmicrosoftteamscurrentteams.exe] => (Allow) C:usersstefdappdatalocalmicrosoftteamscurrentteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{F333B1ED-B090-4ECA-9C77-CEA2F505683A}C:usersstefdappdatalocalmicrosoftteamscurrentteams.exe] => (Allow) C:usersstefdappdatalocalmicrosoftteamscurrentteams.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Restore Points =========================

04-11-2021 16:28:20 Windows Modules Installer

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (11/04/2021 05:17:36 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, A system shutdown is in progress.
.

Error: (11/04/2021 05:17:36 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.
]

Error: (11/04/2021 04:43:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: msteams.exe, version: 21253.510.996.1465, time stamp: 0x614b9cda
Faulting module name: ucrtbase.dll, version: 10.0.22000.1, time stamp: 0x00e78ce9
Exception code: 0xc0000409
Fault offset: 0x000000000007dd7e
Faulting process id: 0x3248
Faulting application start time: 0x01d7d18a574a45ae
Faulting application path: C:Program FilesWindowsAppsMicrosoftTeams_21253.510.996.1465_x64__8wekyb3d8bbwemsteams.exe
Faulting module path: C:WINDOWSSystem32ucrtbase.dll
Report Id: e8be34ff-e055-43f3-9e25-18755e55b8fe
Faulting package full name: MicrosoftTeams_21253.510.996.1465_x64__8wekyb3d8bbwe
Faulting package-relative application ID: MicrosoftTeams

Error: (11/04/2021 04:37:53 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, A system shutdown is in progress.
.

Error: (11/04/2021 04:37:53 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.
]

Error: (11/04/2021 04:31:36 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.
]

Error: (11/04/2021 04:31:36 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x8007045b, A system shutdown is in progress.
.

Error: (11/04/2021 04:31:36 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volume Shadow Copy Service information: The COM Server with CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be started. [0x8007045b, A system shutdown is in progress.
]

System errors:
=============
Error: (11/05/2021 01:56:48 PM) (Source: Server) (EventID: 2505) (User: )
Description: The server could not bind to the transport DeviceNetBT_Tcpip_{0F56ED4E-FE77-4265-96FE-C082999463D9} because another computer on the network has the same name. The server could not start.

Error: (11/05/2021 01:22:18 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 8:38:00 PM on ‎11/‎4/‎2021 was unexpected.

Error: (11/05/2021 01:22:07 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)
Description: 3221225684A fatal error occurred processing the restoration data.

Error: (11/04/2021 06:38:23 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-78SRSJV)
Description: Unable to start a DCOM Server: MicrosoftWindows.Client.CBS_1000.22000.282.0_x64__cw5n1h2txyewy!ScreenClipping as Unavailable/Unavailable. The error:
“2147958023”
Happened while starting this command:
“C:WINDOWSSystemAppsMicrosoftWindows.Client.CBS_cw5n1h2txyewyScreenClippingHost.exe” -ServerName:ScreenClipping.AppX6726kd2wrry6c6n8nc57a1zn08dmzmbt.mca

Error: (11/04/2021 06:38:21 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-78SRSJV)
Description: Unable to start a DCOM Server: MicrosoftWindows.Client.CBS_1000.22000.282.0_x64__cw5n1h2txyewy!ScreenClipping as Unavailable/Unavailable. The error:
“2147958023”
Happened while starting this command:
“C:WINDOWSSystemAppsMicrosoftWindows.Client.CBS_cw5n1h2txyewyScreenClippingHost.exe” -ServerName:ScreenClipping.AppX6726kd2wrry6c6n8nc57a1zn08dmzmbt.mca

Error: (11/04/2021 06:30:29 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-78SRSJV)
Description: Unable to start a DCOM Server: MicrosoftWindows.Client.CBS_1000.22000.282.0_x64__cw5n1h2txyewy!ScreenClipping.AppX4qm9f5mxaxadptn1dx5ecnnw9b9tddbz.mca as Unavailable/Unavailable. The error:
“2147958023”
Happened while starting this command:
“C:WINDOWSSystemAppsMicrosoftWindows.Client.CBS_cw5n1h2txyewyScreenClippingHost.exe” -ServerName:ScreenClipping.AppX6726kd2wrry6c6n8nc57a1zn08dmzmbt.mca

Error: (11/04/2021 06:30:23 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-78SRSJV)
Description: Unable to start a DCOM Server: MicrosoftWindows.Client.CBS_1000.22000.282.0_x64__cw5n1h2txyewy!ScreenClipping as Unavailable/Unavailable. The error:
“2147958023”
Happened while starting this command:
“C:WINDOWSSystemAppsMicrosoftWindows.Client.CBS_cw5n1h2txyewyScreenClippingHost.exe” -ServerName:ScreenClipping.AppX6726kd2wrry6c6n8nc57a1zn08dmzmbt.mca

Error: (11/04/2021 06:30:20 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-78SRSJV)
Description: Unable to start a DCOM Server: MicrosoftWindows.Client.CBS_1000.22000.282.0_x64__cw5n1h2txyewy!ScreenClipping as Unavailable/Unavailable. The error:
“2147958023”
Happened while starting this command:
“C:WINDOWSSystemAppsMicrosoftWindows.Client.CBS_cw5n1h2txyewyScreenClippingHost.exe” -ServerName:ScreenClipping.AppX6726kd2wrry6c6n8nc57a1zn08dmzmbt.mca

CodeIntegrity:
===============
Date: 2021-11-04 18:38:23
Description:
Code Integrity determined that a process (DeviceHarddiskVolume4WindowsSystem32svchost.exe) attempted to load DeviceHarddiskVolume4WindowsSystemAppsMicrosoftWindows.Client.CBS_cw5n1h2txyewyScreenClippingHost.exe that did not meet the Microsoft signing level requirements. ਍

==================== Memory info ===========================

BIOS: LENOVO BHCN41WW 11/30/2020
Motherboard: LENOVO LNVNB161216
Processor: Intel® Core™ i5-9300H CPU @ 2.40GHz
Percentage of memory in use: 43%
Total physical RAM: 16264.24 MB
Available physical RAM: 9140.86 MB
Total Virtual: 19208.24 MB
Available Virtual: 9102.29 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:475.73 GB) (Free:337.31 GB) NTFS

\?Volume{09af06d6-22e0-443c-82bc-1b65a58a8e8d} (Recovery) (Fixed) (Total:0.49 GB) (Free:0.47 GB) NTFS
\?Volume{20c590db-84c5-44c1-94f2-37ee607f17d9} () (Fixed) (Total:0.6 GB) (Free:0.08 GB) NTFS
\?Volume{0be29d94-93e6-4c36-a20b-21285d744634} () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Protective MBR) (Size: 476.9 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt =======================

Edited by Oh My!, 05 November 2021 – 08:00 AM.


https://www.bleepingcomputer.com/forums/t/761123/firefox-window-with-at-startup/

Erlando F Rasatro

Next Post

How to Speed up Your Internet on Windows 11

Sat Jan 29 , 2022
No one likes slow internet, especially if you have important tasks that require a good internet connection. Fortunately, there are ways that you can speed up your connection. This tutorial will address the issue of slow connections and will show you how to speed up your internet on Windows 11. […]