fbpx

Task: {d9c6b67e-9dbb-4ba4-ad4b-5aecb6889d08} - no filepath 2021-10-03 18:24 - 2021-10-13 10:55 - 000000000 ____D C:\Windows\system32\MRT (Discord Inc. -> Discord Inc.) C:\Users\Pepega\AppData\Local\Discord\app-1.0.9003\Discord.exe <6> "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8a8c9b4d-3ba3-4f5f-8da4-8714c002e24f}" => removed successfully not found Description: The server Microsoft.Windows.Cortana_1.13.0.18362_neutral_neutral_cw5n1h2txyewy!CortanaUI did not register with DCOM within the required timeout. Default browser: FF "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6902881d-a9ea-4ce3-9977-eac42438e59f}" => removed successfully 2021-10-02 23:26 - 2021-10-02 23:26 - 000000000 ____D C:\Users\Pepega\AppData\Local\Package Cache ========= End of CMD: ========= Task: {134fdbcd-c972-40e5-a39b-91c169e4c9bf} - no filepath 2021-10-18 19:32 - 2019-12-19 18:07 - 002877104 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{cf65bcb3-58fb-4f8a-ad70-57403d1f5d1f}" => removed successfully HKU\S-1-5-21-326566074-3447909417-183555969-1001_Classes\CLSID\{917E8742-AA3B-7318-FA12-10485FB322A2} => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{a4a7b095-aaa9-401c-a9d7-8abe8ea301af}" => removed successfully Task: {560963e7-8fb3-45a5-b560-b69102dfab6a} - no filepath (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe however because i have other Task: {19e78c37-4706-4ee6-b14f-00a377e1761c} - no filepath HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp//go.microsoft.com/fwlink/p/?LinkId=255141 "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9787f435-46f9-458d-9737-9ba0cb4bc234}" => removed successfully In bios, its not showing up all of my SSDs, but at no point is it 2021-10-13 16:20 - 2021-10-13 16:20 - 000000000 ____D C:\Users\Pepega\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox Resetting Unicast Address, OK! Hey, i managed to get my computer built with a Ryzen 5 5600X and an NVIDIA GeForce Aorus Xtreme RTX 3080 - 10GB GDDR6X. vs_filehandler_amd64 (HKLM-x32\\{D4617896-04FC-45D7-8355-2BA21BBB314F}) (Version: 17.0.31709 - Microsoft Corporation) Hidden Task: {2d5dd02e-d989-436b-a3d0-b2283ce2c942} - no filepath 2021-10-02 23:25 - 2021-10-02 23:25 - 000000000 ____D C:\Program Files (x86)\NuGet "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4de67c63-be14-4dd1-af32-f53029177ebc}" => removed successfully 2021-09-30 14:35 - 2021-09-30 14:35 - 001988096 _____ (GIGABYTE) [File not signed] C:\Program Files (x86)\GIGABYTE\RGBFusion\AACSSD_Lib.dll FF Extension: (uBlock Origin) - C:\Users\Pepega\AppData\Roaming\Mozilla\Firefox\Profiles\q42kwfcc.default-release\Extensions\uBlock0@raymondhill.net.xpi [2021-10-24] And if the question was in general wich LCD Panel we mean. The Aorus Master 370 and 3080 have a LCD Panel on the site to show of GPU Stats and Gifs. THANK YOU! ==================== End of FRST.txt ========================, Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-10-2021 "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{134fdbcd-c972-40e5-a39b-91c169e4c9bf}" => removed successfully Available physical RAM: 26345.08 MB Resetting Wakeup Pattern, OK! CustomCLSID: HKU\S-1-5-21-326566074-3447909417-183555969-1001_Classes\CLSID\{917E8742-AA3B-7318-FA12-10485FB322A2}\localserver32 -> "C:\Users\Pepega\AppData\Local\Microsoft\OneDrive\21.170.0822.0002\Microsoft.SharePoint.exe" => No File at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) 2021-10-02 23:18 - 2021-10-02 23:18 - 000001429 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio Installer.lnk vs_CoreEditorFonts (HKLM-x32\\{E247EDC7-CB46-45AD-9F59-C5C339A006D9}) (Version: 17.0.31716 - Microsoft Corporation) Hidden Task: {C6B4432E-BB97-4CBA-9DFC-158E3B8F51BE} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [680888 2021-10-07] (Mozilla Corporation -> Mozilla Foundation) 2021-09-30 14:33 - 2021-09-30 14:33 - 001993216 _____ (GIGABYTE) [File not signed] C:\Program Files (x86)\GIGABYTE\RGBFusion\AACPCIeSSD_Lib.dll Boot Mode: Normal 2021-10-24 13:01 - 2021-10-24 17:56 - 000000258 __RSH C:\Users\Pepega\ntuser.pol "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{00f722c3-08dc-4b10-b10e-91a3004714f3}" => removed successfully ==================== Association (Whitelisted) ================= But again, it could be just a temporary solution, and the miner would re-appear again. CustomCLSID: HKU\S-1-5-21-326566074-3447909417-183555969-1001_Classes\CLSID\{20894375-46AE-46E2-BAFD-CB38975CDCE6}\InprocServer32 -> C:\Users\Pepega\AppData\Local\Microsoft\OneDrive\21.170.0822.0002\amd64\FileSyncShell64.dll => No File 2021-10-13 22:14 - 2021-10-07 19:27 - 004938872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll DNS Servers: 1.1.1.1 - 1.0.0.1 ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2021-09-15] (Adobe Inc. -> ) Task: {b3eb79cd-689d-4158-bea3-8771c38a327c} - no filepath 2021-10-02 23:25 - 2021-10-02 23:26 - 000000000 ____D C:\Windows\system32\1028 2021-10-02 22:55 - 2021-10-04 18:28 - 000000000 ___RD C:\Users\Pepega\3D Objects Task: {60deadb4-207d-4623-826b-8aef456e994f} - no filepath Exception code: 0xe0434352 2021-10-03 13:32 - 2021-10-04 18:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call of Duty Modern Warfare (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. ==================== Files in the root of some directories ======== HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2021-10-16] (Adobe Inc. -> Adobe Systems) FirewallRules: [{1DB27EF3-0A3A-43EF-9C4F-1D81886FCC39}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation) Task: {95d6d4ae-89c2-47b7-947d-0a2c92579474} - no filepath Click OK twice and restart the computer. Faulting application start time: 0x01d7c8b2547f9944 Task: {7758a3fe-bd22-4403-acda-05ae12b2505a} - no filepath S2 BlueStacksDrv_nxt; \? 2021-10-02 23:05 - 2021-10-24 13:00 - 000000000 ____D C:\Users\Pepega\AppData\Local\KeePassXC 0.0.0.0 watson.telemetry.microsoft.com.nsatc.net Task: {9787f435-46f9-458d-9737-9ba0cb4bc234} - no filepath Task: {bb2029d9-cbf0-4ee3-aa1b-fbafda7b399a} - no filepath 2021-10-14 10:50 - 2021-10-14 17:35 - 000001229 ____H C:\Users\Pepega\AppData\Local\d89b27a4d89b27a4d89b Task: {0e056076-a1e1-4979-83ca-d3b97785e4bb} - no filepath VS Script Debugging Common (HKLM\\{9EC852BD-33D2-457C-99BB-ED3099B8176F}) (Version: 17.0.114.0 - Microsoft Corporation) Hidden Report Id: d2eb9388-b443-4837-a4b1-e1f77a6d3d1d ==================== MBR & Partition Table ==================== Task: {df1c3fe3-3222-4a5e-b520-95a4768a5710} - no filepath FirewallRules: [{7AD4F43C-4369-433E-B2EC-A10468B9A5B1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve Corp. -> ) Anyway, here is the fixlog, I have no idea what anything in this means, and I dont know if it did what it was supposed to do or not. (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <13> HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION Task: {5ea271ce-e48a-4ade-9079-2a5bece10d83} - no filepath FirewallRules: [{A73419CB-E557-4602-83F3-EED8A5A67B9A}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation) vs_minshellmsires (HKLM-x32\\{6BEA577E-EB1B-47A4-A0EF-05D5FAC0861E}) (Version: 17.0.31709 - Microsoft Corporation) Hidden Task: {c4718da2-1857-4507-932c-28593e4e8294} - no filepath The system cannot find the file specified. Task: {e21ec10f-b0f2-4d8c-ac9d-e74491370460} - no filepath R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_5292bbfbf575e2d2\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_5292bbfbf575e2d2\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem Please copy the entire contents of the code box below to the a new file. (Currently there is no automatic fix for this section.) R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [844528 2021-10-16] (Adobe Inc. -> Adobe Inc.) R1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [8234256 2021-10-21] (Riot Games, Inc. -> Riot Games, Inc.) ==================== Shortcuts & WMI ======================== "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{b7e27570-3f72-4ac2-b2ec-fd92b54c3a60}" => removed successfully 2021-10-02 23:26 - 2021-10-04 18:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python 3.9 Task: {ab7dbf26-2e26-445a-a7dd-f60ac12f19a6} - no filepath 2021-10-02 23:24 - 2021-10-04 18:19 - 000000000 ____D C:\Program Files\IIS ==================== Memory info =========================== Task: {51006d50-cfd3-4b5a-af95-e596678bbea8} - no filepath (NVIDIA Corporation -> NVIDIA) C:\Program Files\NVIDIA Corporation\FrameViewSDK\bin\PresentMon_x64.exe <2> Task: {23df4797-0507-44e3-9c41-f5d1be966072} - no filepath ==================== SigCheck ============================ 2021-10-24 19:36 - 2019-03-19 15:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) 2021-10-02 23:01 - 2021-10-24 12:21 - 000000000 ____D C:\ProgramData\Package Cache 2021-10-02 23:44 - 2021-10-23 09:53 - 000000000 ____D C:\Program Files (x86)\Battle.net Task: {8457ad0b-1c75-431d-a5ae-ee1aed76a239} - no filepath "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{a1c5790b-b106-45b9-9d9c-0442f6ab1b08}" => removed successfully Task: {73931e1e-d4e0-4d8f-9b0c-c332b70c4204} - no filepath Engine Version: AM: 1.1.18600.4, NIS: 1.1.18600.4 Universal CRT Redistributable (HKLM-x32\\{0460C87B-7F4C-3170-FAC9-B7A6AE5CE4E9}) (Version: 10.0.26624 - Microsoft Corporation) Hidden (If an entry is included in the fixlist, it will be removed from the registry. Resetting Proxy Neighbor, OK! 2021-10-15 11:40 - 2021-10-15 11:40 - 000003938 _____ C:\Windows\system32\Tasks\BlueStacksHelper_nxt (NortonLifeLock Inc. -> NortonLifeLock Inc.) C:\Users\Pepega\Downloads\NPE.exe FirewallRules: [{E2EA9D77-F4B6-46E6-94CF-DAE772492424}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve Corp. -> ) 2021-10-02 23:36 - 2021-10-24 17:28 - 000000000 ____D C:\Users\Pepega\AppData\Local\.IdentityService Resetting Echo Sequence Request, OK! "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{358ba298-e9a3-4572-a1cd-6ec4e7b85984}" => removed successfully 2021-10-02 22:56 - 2021-10-24 14:29 - 000000000 ____D C:\Program Files\NVIDIA Corporation "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{e62b268c-ea0c-4217-bfa2-7bd1145ba5a0}" => removed successfully Task: {1a105416-49db-4c94-a1d7-5a3597878e9a} - no filepath S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [48520 2021-10-24] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) ========= ipconfig /flushDNS ========= 2021-10-02 23:04 - 2021-10-02 23:04 - 000003858 _____ C:\Windows\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} (If an entry is included in the fixlist, it will be removed.) icecap_collection_x64 (HKLM\\{DAAA7FCA-A80A-43F3-9B54-2810618BB512}) (Version: 17.0.31709 - Microsoft Corporation) Hidden Description: The BlueStacksDrv_nxt service failed to start due to the following error: WinRAR 6.02 (64-bit) (HKLM\\WinRAR archiver) (Version: 6.02.0 - win.rar GmbH) 2021-10-16 20:39 - 2021-10-16 20:41 - 000000000 ____D C:\Program Files (x86)\Adobe FirewallRules: [{F7197523-B9AE-42F6-9BCD-3487235CDA82}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe => No File HKU\S-1-5-21-326566074-3447909417-183555969-1001\\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [33435616 2021-10-12] (Epic Games Inc. -> Epic Games, Inc.) 2021-10-02 23:07 - 2021-10-02 23:07 - 000000000 ____D C:\Users\Pepega\AppData\Local\tmp5qvbpq15.lck ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2021-09-15] (Adobe Inc. -> ) Task: {80442d75-04ca-4d81-8c53-a52f6d4b32b0} - no filepath 2021-10-13 22:14 - 2021-10-07 19:28 - 001597584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll *" ========== Task: {0c664c7f-7430-46ad-86a6-f5c0223c7fc4} - no filepath "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{57f92185-4f7e-4549-bf72-8ded737637ee}" => removed successfully Task: {cd558596-f4ee-4e6a-a00e-029783722e00} - no filepath 0.0.0.0 watson.telemetry.microsoft.com Faulting application path: D:\Cheetos\Woofing\Cinx Archieves\SinEx 4.2.0 [BETA]\SinEx 4.2.0 BETA Woofer [All Winver].exe Name: SettingsModifier:Win32/PossibleHostsFileHijack Microsoft Defender Antivirus has detected malware or other potentially unwanted software. Task: {410813e0-851c-472e-9a03-ef8f43a11e2b} - no filepath Process Hacker 2.39 (r124) (HKLM\\Process_Hacker2_is1) (Version: 2.39.0.124 - wj32) 2021-10-24 13:24 - 2021-10-24 13:24 - 000000000 ____D C:\Users\Pepega\Desktop\tron 2021-10-03 15:48 - 2021-10-24 19:36 - 000000006 ____H C:\Windows\Tasks\SA.DAT "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4fb942bf-3d44-41ff-bc65-52cd12996f26}" => removed successfully Task: {82a0b077-3637-4350-9431-56dbbbb4d5c1} - no filepath Resetting Compartment Forwarding, OK! Task: {82a0b077-3637-4350-9431-56dbbbb4d5c1} - no filepath Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000) Task: {e0ba60f1-d26f-4185-8bb0-04b05678ff5a} - no filepath ClickOnce Bootstrapper Package for Microsoft .NET Framework (HKLM-x32\\{5A260D5A-95D3-4956-8E0A-E182CC4144ED}) (Version: 4.8.04162 - Microsoft Corporation) Hidden FirewallRules: [{E1D43D4F-5765-4B23-A804-FDD364EFF570}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) Task: {46ee8f94-e240-420c-a5e8-0660f5c5f9e1} - no filepath Path: file:_C:\Windows\System32\drivers\etc\hosts 2021-10-02 23:02 - 2021-10-18 19:32 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information Description: The WinRing0_1_2_0 service failed to start due to the following error: *" ======== SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&FORM=IE8SRC 2021-10-14 11:40 - 2021-10-14 11:40 - 000058304 _____ C:\Windows\system32\Drivers\49306c4f52694d334e5535714e6e6f30524534354d6a597a61564631576d56464f585a33.sys "HKU\S-1-5-21-326566074-3447909417-183555969-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Windows Driver Installation Service" => not found Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Task: {44e64ec2-07de-480c-b391-0e70d56ee3de} - no filepath Task: {7a44f97c-3b59-4a4b-a061-3e52f050d32e} - no filepath 2021-10-13 16:20 - 2021-10-13 16:38 - 000000254 _____ C:\Users\Pepega\AppData\LocalLow\rbxcsettings.rbx 2021-10-02 23:25 - 2021-10-04 18:19 - 000000000 ____D C:\Windows\system32\1029 (There is no automatic fix for files that do not pass verification.) It is the time when you shutdown not Task: {b30dbf6f-75b4-422c-82ed-f93cae0f7dec} - no filepath ==================== Registry (Whitelisted) =================== 2021-10-13 22:14 - 2021-10-07 19:32 - 001464976 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4bc5b754-7072-4f40-a1b7-dd43c20ebdf6}" => removed successfully Microsoft Windows Desktop Runtime - 5.0.11 (x86) (HKLM-x32\\{7ce2617d-0a0a-4f61-8e5a-96f7bfca6fdd}) (Version: 5.0.11.30524 - Microsoft Corporation) Task: {358ba298-e9a3-4572-a1cd-6ec4e7b85984} - no filepath Task: {cf65bcb3-58fb-4f8a-ad70-57403d1f5d1f} - no filepath \\?\Volume{66a9e99a-1cf4-4f5a-a085-9db2177d6629}\ (Recovery) (Fixed) (Total:0.52 GB) (Free:0.5 GB) NTFS (If an entry is included in the fixlist, it will be removed from the registry. Faulting application path: C:\Users\Pepega\AppData\Local\Update.exe "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{51f29cff-5f75-43a6-8c78-2970cd2f96ac}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{11dec036-7e8b-4b5b-906d-51876287d3d1}" => removed successfully Task: {646144d0-0d5f-463c-aedc-cbc190d10525} - no filepath 2021-10-02 23:04 - 2021-10-04 18:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePassXC HKLM\System\CurrentControlSet\Services\npcap_wifi => removed successfully Task: {b7e27570-3f72-4ac2-b2ec-fd92b54c3a60} - no filepath 2021-10-18 20:24 - 2021-10-20 14:48 - 000000000 ____D C:\Users\Pepega\AppData\Local\Downloaded Installations Drive c: () (Fixed) (Total:1863.02 GB) (Free:1519.33 GB) NTFS NVIDIA GeForce Experience 3.23.0.74 (HKLM\\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.23.0.74 - NVIDIA Corporation) 2021-10-02 22:55 - 2021-10-24 14:56 - 000000000 ____D C:\Users\Pepega\AppData\Local\Packages HKU\S-1-5-21-326566074-3447909417-183555969-1001_Classes\CLSID\{20894375-46AE-46E2-BAFD-CB38975CDCE6} => removed successfully CustomCLSID: HKU\S-1-5-21-326566074-3447909417-183555969-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Pepega\AppData\Local\Microsoft\OneDrive\21.170.0822.0002\amd64\FileSyncShell64.dll => No File - Right Click on Network Neighborhood -> left click on Properties -> left click on the Protocols tab -> double click on TCP/IP Protocol -> left click on DNS tab and enter a domain name in the "Domain:" field. 2021-10-15 11:40 - 2021-10-15 11:40 - 000000000 ____D C:\ProgramData\BlueStacks_nxt The following corrective action will be taken in 6000 milliseconds: Restart the service." Running from C:\Users\Pepega\Downloads 2021-10-19 13:07 - 2021-10-19 13:07 - 000058304 _____ C:\Windows\system32\Drivers\49306c4f52694d335248524c513067795a6a467a6448704765585a4e516d68714f565a57.sys vs_filehandler_x86 (HKLM-x32\\{84E8F6CC-49D4-45C4-8AD6-18F123873643}) (Version: 17.0.31709 - Microsoft Corporation) Hidden 2021-10-02 22:49 - 2021-10-24 14:30 - 000000000 ____D C:\Windows\minidump 2021-10-13 22:14 - 2021-10-07 19:27 - 002850432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll Total physical RAM: 32689.05 MB 2021-10-16 20:42 - 2021-10-17 14:37 - 000000000 ___RD C:\Users\Pepega\Creative Cloud Files MonitorService.exe located in :Program Files (x86)\GIGABYTE\AORUS LCD Panel Setting This controls the LCD panel on the 3080 Aurorus series cards on startup. FF Extension: (TubeBuddy) - C:\Users\Pepega\AppData\Roaming\Mozilla\Firefox\Profiles\q42kwfcc.default-release\Extensions\e389d8c2-5554-4ba2-a36e-ac7a57093130@gmail.com.xpi [2021-10-14] (If needed Hosts: directive could be included in the fixlist to reset Hosts.) Task: {7ef13d49-f1cb-4454-af1c-a7a9e880a031} - no filepath 2021-08-23 15:07 - 2021-08-23 15:07 - 000423936 _____ (TODO: ) [File not signed] C:\Program Files (x86)\GIGABYTE\RGBFusion\GvLedLib.dll 2021-10-20 14:50 - 2020-11-23 13:38 - 000475648 _____ (GIGABYTE Technology Co.,Ltd.) 2021-10-02 23:25 - 2021-10-04 18:19 - 000000000 ____D C:\Windows\SysWOW64\1033 Task: {00f722c3-08dc-4b10-b10e-91a3004714f3} - no filepath "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{90b432e7-5c87-425c-9dd5-33099e0e41c9}" => removed successfully Windows Defender: ==================== Internet (Whitelisted) ==================== Task: {481404b2-cd19-4388-9998-80f99056dcfd} - no filepath "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{481404b2-cd19-4388-9998-80f99056dcfd}" => removed successfully 2021-10-24 20:41 - 2021-10-24 20:41 - 013884680 _____ (NortonLifeLock Inc.) C:\Users\Pepega\Downloads\NPE.exe 2021-10-04 09:41 - 2021-10-04 09:41 - 000000000 ____D C:\Users\Pepega\AppData\Local\PeerDistRepub Task: {57f92185-4f7e-4549-bf72-8ded737637ee} - no filepath 2021-10-03 09:11 - 2021-10-03 09:12 - 000000000 ____D C:\Users\Pepega\Documents\Visual Studio 2022 2021-10-13 22:14 - 2021-10-07 19:28 - 001172608 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll Restart the computer to complete this action. Framework Version: v4.0.30319 Python 3.9.5 Development Libraries (64-bit) (HKLM\\{AEE58901-97A1-422A-B964-4FD9BF3327B8}) (Version: 3.9.5150.0 - Python Software Foundation) Hidden Detection Origin: Local machine 2021-10-02 23:11 - 2021-10-18 21:04 - 000000000 ____D C:\ProgramData\Packages Resetting Compartment, OK! Task: {c4718da2-1857-4507-932c-28593e4e8294} - no filepath It has done this 1 time(s). Task: {bc549475-73a3-47b9-8e8c-cce95c3b76c2} - no filepath 2021-10-02 23:25 - 2021-10-02 23:26 - 000000000 ____D C:\Windows\SysWOW64\1042 Visual Studio Community 2022 Preview (HKLM-x32\\8cca2edf) (Version: 17.0.0 Preview 4.1 - Microsoft Corporation) LDPlayer (HKLM-x32\\LDPlayer4) (Version: 4.0.66 - XUANZHI INTERNATIONAL CO., LIMITED) CreateRestorePoint: (Wen Jia Liu -> wj32) C:\Program Files\Process Hacker 2\ProcessHacker.exe 2021-10-02 23:25 - 2021-10-02 23:26 - 000000000 ____D C:\Windows\system32\1041 3>restart. Error - The Alienware Client Management Service service failed to start due to the following error: Error - The application has failed to start because its side-by-side configuration is incorrect. (NVIDIA Corporation -> NVIDIA) C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe 2021-10-04 18:19 - 2019-03-19 15:52 - 000000000 ____D C:\Windows\ShellExperiences Task: {68912dca-04b7-43b9-b125-ab2888148ebb} - no filepath Task: {132c3361-2a8c-4a3a-a81d-208c0f31a908} - no filepath The file will not be moved.) 2021-10-02 23:25 - 2021-10-04 18:19 - 000000000 ____D C:\Windows\SysWOW64\1040 ==================== Hosts content: ========================= The Client License Service (ClipSVC) service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. Mozilla Maintenance Service (HKLM\\MozillaMaintenanceService) (Version: 92.0.1 - Mozilla) 2021-10-04 18:28 - 2021-10-04 18:28 - 000103648 _____ C:\Windows\productkey.bat "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0ed742eb-771d-447f-a4e4-64c6fd2882f4}" => removed successfully vs_communitysharedmsi (HKLM-x32\\{5E09B4C5-4E18-411F-BEF1-33F15E2906CF}) (Version: 17.0.31709 - Microsoft Corporation) Hidden Adobe Creative Cloud (HKLM-x32\\Adobe Creative Cloud) (Version: 5.6.0.788 - Adobe Inc.) Report Id: 64ecc47b-71e8-4c87-b20e-bc86d1653042 Fault offset: 0x000000000003a839 Task: {bc549475-73a3-47b9-8e8c-cce95c3b76c2} - no filepath Task: {4bc5b754-7072-4f40-a1b7-dd43c20ebdf6} - no filepath 2021-10-02 23:25 - 2021-10-02 23:26 - 000000000 ____D C:\Windows\system32\2052 I assume this app is the cpu miner, it has a script that utilizes .net framework to mine, the exe that it uses to mine is RegAsm.exe, and mines at only 50% cpu, i was only able to see that it was using 50% cpu in process explorer. 0.0.0.0 services.wes.df.telemetry.microsoft.com Task: {53b08e97-673e-4df6-ae10-9a73f6648a6c} - no filepath 2021-10-03 18:05 - 2021-10-03 18:05 - 000000000 ____D C:\Users\Pepega\AppData\Local\Apple Computer Task: {4fb942bf-3d44-41ff-bc65-52cd12996f26} - no filepath Task: {43f54ace-856e-4b50-9808-1588b79b7c18} - no filepath 2021-10-02 22:56 - 2021-10-24 19:38 - 000000000 ____D C:\ProgramData\NVIDIA WinRT Intellisense IoT - en-us (HKLM-x32\\{3335615C-ABEB-960E-2226-4274CD28E046}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden 2021-10-05 09:55 - 2021-10-24 19:37 - 000000000 ____D C:\ProgramData\Mozilla vcpp_crt.redist.clickonce (HKLM-x32\\{97772BFC-16F3-41B9-B13E-35B278085A1F}) (Version: 14.30.30528 - Microsoft Corporation) Hidden

Priscilla Shirer Elijah Answer Key Pdf, Ktiv Sports Director, John Mccarthy And Anna Ottewill, Mark Richt Family Adoption, Articles T

Abrir chat
😀 ¿Podemos Ayudarte?
Hola! 👋