2021-10-02 23:04 - 2021-10-02 23:04 - 000003858 _____ C:\Windows\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} Task: {48ae682f-228f-4e67-8aa4-854778a3a6a2} - no filepath 2021-10-02 23:04 - 2021-10-02 23:04 - 000003858 _____ C:\Windows\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} Faulting process id: 0x2d74 After you have restarted the application, it will correctly indicate that your software is up to date or retrieve and install 2021-10-02 23:44 - 2021-10-24 09:39 - 000000000 ____D C:\Users\Pepega\AppData\Local\Blizzard Entertainment Detection Source: Real-Time Protection Description: The server Microsoft.Windows.Cortana_1.13.0.18362_neutral_neutral_cw5n1h2txyewy!CortanaUI did not register with DCOM within the required timeout. 2021-10-24 21:16 - 2021-10-24 21:20 - 000025442 _____ C:\Users\Pepega\Downloads\FRST.txt Access is denied. 2021-03-09 14:00 - 2021-03-09 14:00 - 000205824 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) [File not signed] C:\Program Files (x86)\GIGABYTE\RGBFusion\yccV3.DLL \\?\Volume{66a9e99a-1cf4-4f5a-a085-9db2177d6629}\ (Recovery) (Fixed) (Total:0.52 GB) (Free:0.5 GB) NTFS WinRT Intellisense Mobile - en-us (HKLM-x32\\{443FF51E-16C3-F23B-18FC-0D1D66024B0B}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden ==================== MBR & Partition Table ==================== Task: {57F289BA-DE1C-4DD8-95F8-ED9D13AD93D0} - System32\Tasks\NahimicSvc64Run => C:\Windows\system32\NahimicSvc64.exe [1067016 2020-12-10] (A-Volute SAS -> Nahimic) Task: {e21ec10f-b0f2-4d8c-ac9d-e74491370460} - no filepath Adobe Creative Cloud (HKLM-x32\\Adobe Creative Cloud) (Version: 5.6.0.788 - Adobe Inc.) "RESOLVED" LCD SCREEN Aorus 3080 Not working RESOLVED !! Tcpip\..\Interfaces\{710b131b-0ffc-4c94-8d3e-1b075637d571}: [DhcpNameServer] 1.1.1.1 1.0.0.1 go to : C:\Program Files (x86)\GIGABYTE\AORUS LCD Panel Setting\Updater and run FWUpgrade.exe, you will see the progress and after completion, HKU\S-1-5-21-326566074-3447909417-183555969-1001\\StartupApproved\Run: => "EpicGamesLauncher" Task: {d41d49ee-176e-4547-bd74-93495b181988} - no filepath "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{78bdf1d8-0a82-4ea3-8ac6-e6a6e95fd874}" => removed successfully Python 3.9.5 Executables (64-bit symbols) (HKLM\\{62B02C0C-B9B8-49E4-BC06-ABA02223D2BA}) (Version: 3.9.5150.0 - Python Software Foundation) Hidden The following corrective action will be taken in 6000 milliseconds: Restart the service." "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0e056076-a1e1-4979-83ca-d3b97785e4bb}" => removed successfully HKU\S-1-5-21-326566074-3447909417-183555969-1001\\StartupApproved\Run: => "Windows Driver Installation Service" 2021-10-02 23:25 - 2021-10-04 18:19 - 000000000 ____D C:\Windows\system32\1036 It has done this 1 time(s). SDK ARM Redistributables (HKLM-x32\\{72DB07D6-E166-5A3F-B6E6-4664383781B8}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden 2021-09-30 14:35 - 2021-09-30 14:35 - 001988096 _____ (GIGABYTE) [File not signed] C:\Program Files (x86)\GIGABYTE\RGBFusion\AACSSD_Lib.dll SearchScopes: HKU\S-1-5-21-326566074-3447909417-183555969-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02 Task: {f746fb73-bc4d-499e-882f-e5f30abe8a2f} - no filepath Startup: C:\Users\Pepega\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Thing.bat [2021-10-24] () [File not signed] Reason:0xC004F011 ========= "%WINDIR%\SYSTEM32\lodctr.exe" /R ========= Path: file:_C:\Windows\System32\drivers\etc\hosts The tool will create a log (Fixlog.txt) please post it to your reply. Python 3.9.5 Standard Library (64-bit symbols) (HKLM\\{72FB8CF5-E7CB-4CD2-90B2-39ADC3483845}) (Version: 3.9.5150.0 - Python Software Foundation) Hidden FF Extension: (Tampermonkey) - C:\Users\Pepega\AppData\Roaming\Mozilla\Firefox\Profiles\q42kwfcc.default-release\Extensions\firefox@tampermonkey.net.xpi [2021-10-24] Virus, Trojan, Spyware, and Malware Removal Help, Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-10-2021, This is not recommended for shared computers, Apples first Rapid Security Response patch fails to install on iPhones, Extended Deal: Get Microsoft Office 2021 on sale for just $39, Best VPNs to unblock WhatsApp calling in the UAE, https://www.virustotal.com/gui/file/85aa1344d28fd7c6a911924040e5b3ae1278fb70444cd39d056bd270f147f61b, https://www.virustotal.com/gui/file/85aa1344d28fd7c6a911924040e5b3ae1278fb70444cd39d056bd270f147f61b/behavior/Microsoft%20Sysinternals, https://go.microsoft.com/fwlink/?linkid=37020&name=SettingsModifier:Win32/PossibleHostsFileHijack&threatid=14994&enterprise=0, Back to Virus, Trojan, Spyware, and Malware Removal Help. "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{a2a9bb80-76ce-4752-9e44-f43e01b26a35}" => removed successfully =========== "C:\WINDOWS\system32\*.tmp" ========== 2021-10-22 18:11 - 2021-10-22 18:11 - 000000031 _____ C:\Users\Pepega\Desktop\fn name.txt at System.Threading.ThreadHelper.ThreadStart() 2021-10-03 18:24 - 2021-10-13 10:55 - 000000000 ____D C:\Windows\system32\MRT Microsoft Update Health Tools (HKLM\\{8A6AB459-CB4B-4D09-8C1E-337FB59135C4}) (Version: 2.84.0.0 - Microsoft Corporation) icecap_collection_x64 (HKLM\\{DAAA7FCA-A80A-43F3-9B54-2810618BB512}) (Version: 17.0.31709 - Microsoft Corporation) Hidden C:\Users\Pepega\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Thing2.bat => moved successfully Task: {634166c8-f3ba-4d37-96ef-8a18d9787a4e} - no filepath Task: {19e78c37-4706-4ee6-b14f-00a377e1761c} - no filepath The file will not be moved unless listed separately.) Wi-Fi: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 2021-10-02 22:55 - 2021-10-04 18:28 - 000000000 ___RD C:\Users\Pepega\3D Objects ?\C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys [X] Severity: Medium FF Extension: (TubeBuddy) - C:\Users\Pepega\AppData\Roaming\Mozilla\Firefox\Profiles\q42kwfcc.default-release\Extensions\e389d8c2-5554-4ba2-a36e-ac7a57093130@gmail.com.xpi [2021-10-14] Task: {a68a203b-7eaa-4914-a565-5ff9759ae2a4} - no filepath 2021-10-02 23:25 - 2021-10-04 18:19 - 000000000 ____D C:\Windows\SysWOW64\1029 "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{55b76d6d-fbf6-450e-a24e-071e1db9f945}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2a965443-ec13-4b75-abf9-394d697f739d}" => removed successfully (CloudBees, Inc.) [File not signed] C:\Program Files (x86)\GIGABYTE\AORUS LCD Panel Setting\MonitorService-exec.exe Task: {00f722c3-08dc-4b10-b10e-91a3004714f3} - no filepath Drive d: () (Fixed) (Total:930.88 GB) (Free:929.97 GB) NTFS Restart the computer to complete this action. The file will not be moved.) Task: {10914230-EDDF-4324-BD6D-2A05C1496959} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-09-14] (NVIDIA Corporation -> NVIDIA Corporation) 2021-10-02 22:56 - 2021-10-02 23:03 - 000000000 ____D C:\Windows\system32\Drivers\NVIDIA Corporation 2021-10-05 15:51 - 2021-10-05 16:12 - 000000094 _____ C:\Users\Pepega\Desktop\cod filters.txt FF Extension: (Kurgzsekseta) - C:\Users\Pepega\AppData\Roaming\Mozilla\Firefox\Profiles\q42kwfcc.default-release\Extensions\{e8f3b919-d290-4270-b66f-29f3fdbb1986}.xpi [2021-10-05] ======== Task: {4596b534-45a4-4c4e-93a8-e4c01a69090e} - no filepath 2021-10-02 23:34 - 2021-10-02 23:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits Task: {53b08e97-673e-4df6-ae10-9a73f6648a6c} - no filepath 2021-10-23 13:47 - 2021-10-23 13:47 - 000058304 _____ C:\Windows\system32\Drivers\49306c4f52694d3361456431565451784e3342326455786c5531673353475634636e566a.sys Task: {aadbbd5a-88ab-4f36-b6d5-c7eaaf6ddc1d} - no filepath 2021-10-24 15:24 - 2019-03-19 15:37 - 000000000 ____D C:\Windows\CbsTemp Process Name: C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe icecap_collection_neutral (HKLM-x32\\{519060B0-9C83-4D54-97A7-32C2350583C9}) (Version: 17.0.31709 - Microsoft Corporation) Hidden HKLM-x32\\RunOnce: [SelLed] => C:\Program Files (x86)\GIGABYTE\RGBFusion\RunLed.exe [50096 2019-04-29] (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{e2e2a07e-8ce9-45bf-94db-a91755d15155}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4d4276f1-945c-486b-b48f-62cda9b73d18}" => removed successfully RGB Fusion with Digital LEDs comes with 9 new patterns and various speed settings with more to come. ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_5292bbfbf575e2d2\nvshext.dll [2021-10-07] (Nvidia Corporation -> NVIDIA Corporation) Windows Software Development Kit - Windows 10.0.19041.685 (HKLM-x32\\{4591faf1-a2db-4a3d-bfda-aa5a4ebb1587}) (Version: 10.1.19041.685 - Microsoft Corporation) 2021-10-13 16:20 - 2021-10-13 16:21 - 000000000 ____D C:\Users\Pepega\AppData\Local\Roblox Task: {f31abc37-3a79-4244-9a4b-03a808823654} - no filepath 2021-10-02 23:00 - 2021-10-02 23:00 - 000000000 ____D C:\Users\Pepega\AppData\Roaming\WinRAR ========= "C:\Windows\SYSTEM32\lodctr.exe" /R ========= Task: {098ef5b0-108d-4923-9d7d-021a97ef1fba} - no filepath 2021-10-18 20:24 - 2021-10-18 20:24 - 000003532 _____ C:\Windows\system32\Tasks\AMDAutoUpdate In bios, its not showing up all of my SSDs, but at no point is it 2021-10-02 23:25 - 2021-10-04 18:19 - 000000000 ____D C:\Windows\system32\1055 2021-10-02 23:22 - 2021-10-02 23:22 - 000000000 ____D C:\Program Files\Microsoft SQL Server Roblox Player for Pepega (HKU\S-1-5-21-326566074-3447909417-183555969-1001\\roblox-player) (Version: - Roblox Corporation) 2021-10-02 23:04 - 2021-09-14 14:39 - 000001951 _____ C:\Windows\NvContainerRecovery.bat (If an entry is included in the fixlist, it will be removed.) Category: Settings Modifier Task: {cefea723-c2e4-4ec0-b440-c45c5526fda8} - no filepath 2021-10-02 23:04 - 2021-10-02 23:04 - 000003940 _____ C:\Windows\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{e62b268c-ea0c-4217-bfa2-7bd1145ba5a0}" => removed successfully Task: {6298650e-c3bc-47e3-a571-b4eea94ac419} - no filepath ==================== Loaded Modules (Whitelisted) ============= vs_filehandler_amd64 (HKLM-x32\\{D4617896-04FC-45D7-8355-2BA21BBB314F}) (Version: 17.0.31709 - Microsoft Corporation) Hidden After this log, it shows our application Task: {4fb942bf-3d44-41ff-bc65-52cd12996f26} - no filepath 2017-10-05 15:26 - 2017-10-05 15:26 - 002247168 _____ (TODO:
Python Optional Return,
Monte Vista Elementary School Calendar,
Wisconsin State League Baseball Hall Of Fame,
Family First Life Commission,
Articles T