Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-06-2025
Ran by prikr (05-06-2025 12:11:20)
Running from C:\Users\prikr\Desktop
Microsoft Windows 11 Home Version 24H2 26100.4061 (X64) (2025-04-18 05:08:23)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-110046478-510051192-1964495333-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-110046478-510051192-1964495333-503 - Limited - Disabled)
Guest (S-1-5-21-110046478-510051192-1964495333-501 - Limited - Disabled)
prikr (S-1-5-21-110046478-510051192-1964495333-1001 - Administrator - Enabled) => C:\Users\prikr
WDAGUtilityAccount (S-1-5-21-110046478-510051192-1964495333-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1033-1033-7760-BC15014EA700}) (Version: 25.001.20474 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601108}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Audacity 3.7.3 (HKLM\...\Audacity_is1) (Version: 3.7.3 - Audacity Team)
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 25.5.10141.2799 - Gen Digital Inc.)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 136.0.30453.115 - Gen Digital Inc.)
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1993.6 - AVAST Software) Hidden
BIG-IP Edge Client Components (All Users) (HKLM-x32\...\F5 Networks Client Components) (Version: 72.2023.1006.0843 - F5 Networks, Inc.)
Chromas version 2.6.6 (HKLM\...\{B6EF9938-F178-44C7-8B7A-AD29D4AAFF1F}_is1) (Version: 2.6.6 - Technelysium Pty Ltd)
Discord (HKU\S-1-5-21-110046478-510051192-1964495333-1001\...\Discord) (Version: 1.0.9179 - Discord Inc.)
ExpressVPN (HKLM-x32\...\{91acec93-88d2-4afe-bbc3-e3e376c03732}) (Version: 10.9.0.20 - ExpressVPN)
ExpressVPN (HKLM-x32\...\{E5B9C3E5-889C-4F22-A959-F4B8765D7845}) (Version: 10.9.0.20 - ExpressVPN) Hidden
FlowJo VX (HKLM\...\FlowJo VX) (Version: 10.0.7.2 - )
GIMP 2.10.32-1 (HKLM\...\GIMP-2_is1) (Version: 2.10.32 - The GIMP Team)
GIMP 3.0.2-1 (HKU\S-1-5-21-110046478-510051192-1964495333-1001\...\GIMP-3_is1) (Version: 3.0.2.1 - The GIMP Team)
Google Chrome (HKLM\...\{AED5E47A-CC78-3BBE-B251-AB3876C8030D}) (Version: 137.0.7151.56 - Google LLC)
Google Drive (HKLM\...\{6BBAE539-2232-434A-A4E5-9A33560C6283}) (Version: 109.0.3.0 - Google LLC)
GraphPad Prism 8.0.1.244 (HKLM\...\{1D0625E1-610F-499E-BA99-CAF230096AE1}) (Version: 8.1.244 - GraphPad Software Inc.)
HP Connection Optimizer (HKLM-x32\...\{6468C4A5-E47E-405F-B675-A70A70983EA6}) (Version: 2.0.19.0 - HP)
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
Imspector 16.3.13030-w2049-win64-BASE (HKLM-x32\...\Imspector 16.3.13030-w2049-win64-BASE) (Version: 16.3.13030-w2049-win64-BASE - Abberior Instruments GmbH)
Imspector 16.3.13030-w2049-win64-Lightbox (HKLM-x32\...\Imspector 16.3.13030-w2049-win64-Lightbox) (Version: 16.3.13030-w2049-win64-Lightbox - Abberior Instruments GmbH)
Imspector 16.3.16118-w2224-win64-Lightbox (HKLM-x32\...\Imspector 16.3.16118-w2224-win64-Lightbox) (Version: 16.3.16118-w2224-win64-Lightbox - Abberior Instruments GmbH)
MEGA11 version 11.0.13 (HKLM-x32\...\{D3D535FA-0A6E-4A2E-97D8-2BEF54485683}_is1) (Version: 11.0.13 - iGEM)
Microsoft .NET Host - 8.0.15 (x64) (HKLM\...\{4C903F19-B4C3-4D0C-8CC9-D444C511AF1C}) (Version: 64.60.31149 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.15 (x64) (HKLM\...\{11CCC9F6-77AA-4421-9EAC-BAEC36D96817}) (Version: 64.60.31149 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.15 (x64) (HKLM\...\{8731E6E3-AF96-4515-ACEC-DBFB3DF55292}) (Version: 64.60.31149 - Microsoft Corporation) Hidden
Microsoft 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.18827.20128 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 137.0.3296.62 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 136.0.3240.92 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-110046478-510051192-1964495333-1001\...\OneDriveSetup.exe) (Version: 25.085.0504.0002 - Microsoft Corporation)
Microsoft OneNote - en-us (HKLM\...\OneNoteFreeRetail - en-us) (Version: 16.0.18827.20128 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.24.19202 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.42.34438 (HKLM-x32\...\{b49c10dd-4d54-45f8-ad13-fa25704456a4}) (Version: 14.42.34438.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.42.34438 (HKLM-x32\...\{ba10fda9-f731-441f-a999-000bbb7ceec2}) (Version: 14.42.34438.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.42.34438 (HKLM\...\{E528AD94-12D7-42C4-91A3-908BE28E9BD2}) (Version: 14.42.34438 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.42.34438 (HKLM\...\{2E15F519-4FDA-4834-B4EE-7EFCE7D8D4EE}) (Version: 14.42.34438 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.42.34438 (HKLM-x32\...\{A5592FEF-F948-4BA6-A066-8BBFC2DC7EE1}) (Version: 14.42.34438 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.42.34438 (HKLM-x32\...\{5D0C4511-3CA1-4FF8-A4BA-C0E1957ABEEA}) (Version: 14.42.34438 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.15 (x64) (HKLM\...\{0E4A7820-FDA4-4250-B7AC-E7A2F7B43B64}) (Version: 64.60.31203 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.15 (x64) (HKLM-x32\...\{5625bb48-295c-4113-bc92-d6a69b19b04c}) (Version: 8.0.15.34718 - Microsoft Corporation)
Mozilla Firefox (x64 en-US) (HKLM\...\Mozilla Firefox 139.0.1 (x64 en-US)) (Version: 139.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 137.0.2 - Mozilla)
NordUpdater (HKLM\...\{6E35DB82-3D19-4DD6-B8CB-F082815FDE18}_is1) (Version: 1.4.6.971 - Nord Security)
NordVPN (HKLM\...\{19465C24-3D5D-4327-B99F-3CC0A1D38151}_is1) (Version: 7.32.5.0 - Nord Security)
NordVPN network TAP (HKLM-x32\...\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}) (Version: 1.0.1 - NordVPN)
NVIDIA FrameView SDK 1.2.7321.30900954 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.2.7321.30900954 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.25.0.84 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.25.0.84 - NVIDIA Corporation)
NVIDIA Graphics Driver 561.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 561.19 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.20.0221 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.20.0221 - NVIDIA Corporation)
Obsidian (HKU\S-1-5-21-110046478-510051192-1964495333-1001\...\bd400747-f0c1-5638-a859-982036102edf) (Version: 1.4.16 - Obsidian)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.18827.20102 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.18827.20128 - Microsoft Corporation) Hidden
PDF Suite 2021 (HKLM\...\{0CDDD683-C9C0-40F4-9BD3-AE29E581F9EF}) (Version: 19.0.31.5156 - Interactive Brands Malta Limited) Hidden
PDF Suite 2021 (HKLM-x32\...\PDF Suite 2021) (Version: 19.0.31.1888 - Avanquest Software (7270356 Canada Inc))
PDF Suite 2021 OCR TESS Module (HKLM\...\{95C5CA1D-DA10-468E-B814-AEC7D0008C28}) (Version: 19.0.31.5156 - Interactive Brands Malta Limited) Hidden
PyMOL 3.1.4.1 (Python 3.10.16 64-bit) (HKU\S-1-5-21-110046478-510051192-1964495333-1001\...\PyMOL 3.1.4.1 (Python 3.10.16 64-bit)) (Version: 3.1.4.1 - Schrodinger, Inc.)
SnapGene Viewer (HKLM-x32\...\SnapGene Viewer) (Version: 7.1.1 - GSL Biotech LLC)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Update Installer for WildTangent Games App (HKLM-x32\...\{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App) (Version:  - gamigo, Inc.) Hidden
Vacation Adventures: Park Ranger 11 Collector's Edition (HKLM-x32\...\WTA-c6a5fe5a-e6a4-4df3-8ad7-5df4616a1f69) (Version: 7.0.0.650 - WildTangent) Hidden
Vector NTI Suite 7.0.0.3 (HKLM-x32\...\{AC0D7292-6F88-4F44-B2E6-076A3FC4352F}) (Version:  - )
Wargaming.net Game Center (HKU\S-1-5-21-110046478-510051192-1964495333-1001\...\Wargaming.net Game Center) (Version: 25.0.0.8530 - Wargaming.net)
WebAdvisor by McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.1028 - McAfee, LLC)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.1.1.83 - WildTangent)
WildTangent ShortcutProvider (HKLM-x32\...\{80831F60-19D7-43B3-A60C-5CAF8C478DF6}) (Version: 7.0.0.710 - WildTangent) Hidden
WinRAR 6.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.11.0 - win.rar GmbH)
World of Tanks NA (HKU\S-1-5-21-110046478-510051192-1964495333-1001\...\740900249) (Version:  - Wargaming.net)
Zoom Workplace (HKU\S-1-5-21-110046478-510051192-1964495333-1001\...\ZoomUMX) (Version: 6.4.7 (64367) - Zoom Communications, Inc.)

Packages:
=========
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\Windows\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-05-14] (Microsoft Windows)
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Assets [2025-05-18] ()
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2024-11-09] (INTEL CORP) [Startup Task]
B＆O Audio Control -> C:\Program Files\WindowsApps\AD2F1837.BOAudioControl_1.47.308.0_x64__v10z8vjag6ke6 [2024-01-09] (HP Inc.)
Click to Do (preview) -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy [2025-05-14] (Microsoft Windows)
Disney+ -> C:\Program Files\WindowsApps\Disney.37853FC22B2CE_2024.3.211.0_neutral__6rarf9sa4v8jt [2024-10-10] (Disney)
Dropbox promotion -> C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_23.4.30.0_x64__xbfy0k16fey96 [2025-02-06] (Dropbox Inc.)
Energy Star -> C:\Program Files\WindowsApps\AD2F1837.HPInc.EnergyStar_1.2.0.0_x64__v10z8vjag6ke6 [2025-04-10] (HP Inc.)
HP PC Hardware Diagnostics Windows -> C:\Program Files\WindowsApps\AD2F1837.HPPCHardwareDiagnosticsWindows_2.7.2.0_x64__v10z8vjag6ke6 [2025-03-15] (HP Inc.)
HP Privacy Settings -> C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.3.7.0_x64__v10z8vjag6ke6 [2023-09-11] (HP Inc.)
HP QuickDrop -> C:\Program Files\WindowsApps\AD2F1837.HPQuickDrop_2.5.10921.0_x64__v10z8vjag6ke6 [2022-12-28] (HP Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_159.2.1145.0_x64__v10z8vjag6ke6 [2025-06-04] (HP Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.45.11.0_x64__v10z8vjag6ke6 [2025-06-04] (HP Inc.)
HP System Event Utility -> C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.1.28.0_x64__v10z8vjag6ke6 [2025-03-31] (HP Inc.)
Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2504.16004.0_x64__8wekyb3d8bbwe [2025-04-18] (Microsoft Corporation) [Startup Task]
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2023-10-05] (Microsoft Corp.)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_55.20331.573.0_x64__8wekyb3d8bbwe [2025-04-08] (Microsoft Corporation)
Microsoft.Edge.GameAssist -> C:\Program Files\WindowsApps\Microsoft.Edge.GameAssist_1.0.3336.0_x64__8wekyb3d8bbwe [2025-06-05] (Microsoft Corporation)
MuseHub -> C:\Program Files\WindowsApps\Muse.MuseHub_2.1.0.1567_x64__rb9pth70m6nz6 [2025-02-14] (Muse) [Startup Task]
myHP -> C:\Program Files\WindowsApps\AD2F1837.myHP_45.52519.3041.0_x64__v10z8vjag6ke6 [2025-05-21] (HP Inc.) [Startup Task]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.967.0_x64__56jybvy8sckqj [2025-04-17] (NVIDIA Corp.)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2025-06-03] ()
OMEN Gaming Hub -> C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2505.6.0_x64__v10z8vjag6ke6 [2025-05-28] (HP Inc.) [Startup Task]
Solitaire -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.3899848563C1F_1.0.137.0_x64__kx24dqmazqk8j [2023-04-02] (Random Salad Games LLC)
SpotifyAB.SpotifyMusic -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.265.255.0_x64__zpdnekdrzrea0 [2025-06-04] (Spotify AB) [Startup Task]
WinAppRuntime.Main.1.5 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe [2025-01-21] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_7000.498.2246.0_x64__8wekyb3d8bbwe [2025-06-04] (Microsoft Corp.)
Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-05-14] (Microsoft Windows)
WinRAR -> C:\Program Files\WinRAR [2022-12-27] (win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-110046478-510051192-1964495333-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-110046478-510051192-1964495333-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-110046478-510051192-1964495333-1001_Classes\CLSID\{7d043d4e-4259-f459-3630-7b434fd7752c}\localserver32 -> C:\Program Files\HP\HP Media Network\HPMediaNetwork.exe (HP Inc. -> HP Inc.)
CustomCLSID: HKU\S-1-5-21-110046478-510051192-1964495333-1001_Classes\CLSID\{eae5d8cf-53f4-11e7-6878-e6e9de9c9328}\localserver32 -> C:\Program Files\NordVPN\NordVPN.exe (nordvpn s.a. -> nordvpn S.A.)
ShellIconOverlayIdentifiers: [    GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\109.0.3.0\drivefsext.dll [2025-06-04] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [    GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\109.0.3.0\drivefsext.dll [2025-06-04] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [    GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\109.0.3.0\drivefsext.dll [2025-06-04] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [    GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\109.0.3.0\drivefsext.dll [2025-06-04] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-06-03] (Avast Software s.r.o. -> Gen Digital Inc.)
ShellIconOverlayIdentifiers-x32: [    GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\109.0.3.0\drivefsext.dll [2025-06-04] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [    GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\109.0.3.0\drivefsext.dll [2025-06-04] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [    GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\109.0.3.0\drivefsext.dll [2025-06-04] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [    GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\109.0.3.0\drivefsext.dll [2025-06-04] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-06-03] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-06-03] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers1: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\109.0.3.0\drivefsext.dll [2025-06-04] (Google LLC -> Google LLC.)
ContextMenuHandlers1: [PDFSuite2021_ManagerExt] -> {D62D69E8-B2F4-4014-AACE-F8BB8974FFAB} => C:\Program Files\PDF Suite 2021\context-menu.dll [2022-10-20] (Avanquest Software (7270356 Canada Inc) -> Interactive Brands Malta Limited)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-06-03] (Avast Software s.r.o. -> Gen Digital Inc.)
ContextMenuHandlers4: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\109.0.3.0\drivefsext.dll [2025-06-04] (Google LLC -> Google LLC.)
ContextMenuHandlers5: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\109.0.3.0\drivefsext.dll [2025-06-04] (Google LLC -> Google LLC.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvhm.inf_amd64_5c197d2d97068bef\nvshext.dll [2024-12-12] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2025-06-03] (Avast Software s.r.o. -> Gen Digital Inc.)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\prikr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PyMOL2\PyMOL2 Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> "/K" C:\Users\prikr\AppData\Local\Schrodinger\PyMOL2\Scripts\activate.bat C:\Users\prikr\AppData\Local\Schrodinger\PyMOL2
ShortcutWithArgument: C:\Users\prikr\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\David - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1"
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amazon.com.lnk -> C:\Program Files (x86)\Online Services\Amazon\WizLink.exe () -> hxxp://www.amazon.com/gp/ubp/oneButton/config/redirectHome?tagbase=hpga1-ubpl&ref=aagateway-taskbar-hp

==================== Loaded Modules (Whitelisted) =============

2025-05-14 19:49 - 2025-05-14 19:49 - 000869376 _____ (.NET Foundation) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Microsoft.T417b639d#\63aac7cf58530cfe69e9e2de5187a131\Microsoft.Toolkit.Uwp.Notifications.ni.dll
2025-04-23 08:06 - 2025-04-23 08:06 - 000440320 _____ (HP Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\LauncherSDK\a2e8e0c02a1e39f7f2ec14aeaa2192d9\LauncherSDK.ni.dll
2025-04-23 08:06 - 2025-04-23 08:06 - 000038400 _____ (HP Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Logging\7a51c610f1f2682a79a98c64f569dd84\Logging.ni.dll
2025-04-23 08:06 - 2025-04-23 08:06 - 000153600 _____ (HP Inc.) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\RpcClient\28b3c7af14b7961be7295a862f4efbef\RpcClient.ni.dll
2022-08-13 07:10 - 2022-08-13 07:10 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\Root\Office16\AppVIsvSubsystems64.dll
2022-08-13 07:10 - 2022-08-13 07:10 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\Root\Office16\c2r64.dll
2025-04-23 08:06 - 2025-04-23 08:06 - 003884544 _____ (Newtonsoft) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Newtonsoft.Json\3d338d1f2ed3ef26025c56c4ef03e89c\Newtonsoft.Json.ni.dll
2019-07-09 18:38 - 2019-07-09 18:38 - 000449536 _____ (The curl library, hxxps://curl.haxx.se/) [File not signed] C:\Program Files\PDF Suite 2021\libcurl.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) =============

BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2023-06-30] (HP Inc. -> HP Inc.)
BHO: PDF Suite 2021 Helper -> {F0D4411A-8E0B-4254-99DF-7FC49E60F385} -> C:\Program Files\PDF Suite 2021\creator\plugins\IEAddin\creator-ie-helper.dll [2022-10-20] (Avanquest Software (7270356 Canada Inc) -> Interactive Brands Malta Limited)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2023-06-30] (HP Inc. -> HP Inc.)
BHO-x32: PDF Suite 2021 Helper -> {F0D4411A-8E0B-4254-99DF-7FC49E60F385} -> C:\Program Files (x86)\PDF Suite 2021\creator\plugins\IEAddin\creator-ie-helper.dll [2022-10-20] (Avanquest Software (7270356 Canada Inc) -> Interactive Brands Malta Limited)
Toolbar: HKLM - PDF Suite 2021 Toolbar - {49B5689B-741D-46B7-8B3A-1F46EBA34C98} - C:\Program Files\PDF Suite 2021\creator\plugins\IEAddin\creator-ie-plugin.dll [2022-10-20] (Avanquest Software (7270356 Canada Inc) -> Interactive Brands Malta Limited)
Toolbar: HKLM-x32 - PDF Suite 2021 Toolbar - {49B5689B-741D-46B7-8B3A-1F46EBA34C98} - C:\Program Files (x86)\PDF Suite 2021\creator\plugins\IEAddin\creator-ie-plugin.dll [2022-10-20] (Avanquest Software (7270356 Canada Inc) -> Interactive Brands Malta Limited)
DPF: HKLM-x32 {2c8ffa64-e3f7-49ae-87c2-49018fde3aea} C:\Users\prikr\AppData\Local\Temp\F5_TMP_611472816518110119485\OesisInspector.cab
DPF: HKLM-x32 {45B69029-F3AB-4204-92DE-D5140C3E8E74} C:\Users\prikr\AppData\Local\Temp\7zS0636FCFF\InstallerControl.cab#-1,-1,-1,-1
DPF: HKLM-x32 {57C76689-F052-487B-A19F-855AFDDF28EE} C:\Users\prikr\AppData\Local\Temp\7zS0636FCFF\f5InspectionHost.cab#-1,-1,-1,-1
DPF: HKLM-x32 {A83FB16F-F96A-4724-A5B1-AC999860A218} C:\Users\prikr\AppData\Local\Temp\F5_TMP_611472816518110119485\OesisInspector.cab
DPF: HKLM-x32 {E615C9EA-AD69-4AE9-83C9-9D906A0ACA6D} C:\Users\prikr\AppData\Local\Temp\F5_TMP_2101111742432298318721\f5syschk.cab
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-06-03] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-110046478-510051192-1964495333-1001\...\emory.edu -> hxxps://vpn.emory.edu

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2022-05-07 01:24 - 2022-05-07 01:22 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-110046478-510051192-1964495333-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\prikr\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalCache\Microsoft\IrisService\18046944077720217844\133934505050013930.jpg
HKU\S-1-5-21-110046478-510051192-1964495333-1002\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
DNS Servers: 170.140.1.1 - 170.140.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

Network Binding:
=============
OpenVPN Data Channel Offload for NordVPN: OpenVPN Data Channel Offload -> ovpn-dco.sys
Ethernet: Realtek Gaming GbE Family Controller -> rt68cx21x64.sys
Local Area Connection 2: TAP-NordVPN Windows Adapter V9 -> tapnordvpn.sys
Ethernet 2: ExpressVPN TAP Adapter -> tapexpressvpn.sys
Bluetooth Network Connection: Bluetooth Device (Personal Area Network) -> bthpan.sys
Local Area Connection: ExpressVPN TUN Driver -> expressvpn-tun.sys
Wi-Fi: MediaTek MT7921 Wi-Fi 6 802.11ax PCIe Adapter -> mtkwl6ex.sys

nt_rtf64: Realtek LightWeight Filter (NDIS6.40)
vms_vsf: Hyper-V Virtual Switch Extension Filter
NordLwf: NordVPN LightWeight Firewall
ms_l1vhlwf: Nested Network Virtualization
vms_vsp: Hyper-V Virtual Switch Extension Protocol

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKU\S-1-5-21-110046478-510051192-1964495333-1001\...\StartupApproved\Run: => "NordVPN"
HKU\S-1-5-21-110046478-510051192-1964495333-1001\...\StartupApproved\Run: => "Wargaming.net Game Center"
HKU\S-1-5-21-110046478-510051192-1964495333-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-110046478-510051192-1964495333-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-110046478-510051192-1964495333-1001\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_2FC8F1F10796C730EFEB8EB59D1AB059"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [FPS-SpoolWorker-In-TCP] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [FPS-SpoolWorker-In-TCP-V2] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [FPS-SpoolWorker-In-TCP-NoScope] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{968A512F-75DD-45B6-8D20-109E6B112383}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> Gen Digital Inc.)
FirewallRules: [{3E1052C9-0551-4C57-B89B-D9613C553932}] => (Allow) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> Gen Digital Inc.)
FirewallRules: [{9DEAC30E-29BC-4667-A33E-8BADF9EE64BC}] => (Allow) C:\Program Files\WindowsApps\Muse.MuseHub_2.1.0.1567_x64__rb9pth70m6nz6\Muse.exe (Musecy SM Ltd. -> Muse)
FirewallRules: [{1A8DBC2A-EED7-4BED-81D7-040AB6454DB4}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{D8C08618-B8F6-4B9D-A08E-1EE73333336C}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{9D4DCEB0-7F71-471E-A8EC-FEB111509C15}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{210BB58D-DD37-4993-8B30-E9C4AB008AC4}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{39E57966-503D-4F80-A8A7-C397E2BA865F}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24193.1904.3031.6050_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{5943827F-95EB-443D-AFBB-80B6721FDDB8}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24193.1904.3031.6050_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{DDA2D2D9-49C7-40CB-AC5A-3030C734D2CB}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24215.1103.3051.6995_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C49C9DBF-CB5E-4307-A864-44AC5AB59877}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24215.1103.3051.6995_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{EBE540A8-0EE3-4431-8FC8-30EDB44B5768}C:\imspector\versions\16.3.13030-w2049-win64-base\bin\win64\imspector.exe] => (Block) C:\imspector\versions\16.3.13030-w2049-win64-base\bin\win64\imspector.exe (Abberior Instruments GmbH) [File not signed]
FirewallRules: [TCP Query User{9664A502-ECDE-4765-ADDC-574EE65B65AE}C:\imspector\versions\16.3.13030-w2049-win64-base\bin\win64\imspector.exe] => (Block) C:\imspector\versions\16.3.13030-w2049-win64-base\bin\win64\imspector.exe (Abberior Instruments GmbH) [File not signed]
FirewallRules: [UDP Query User{BC54BE97-C7C8-4653-A562-32929CEFCC42}C:\program files (x86)\vector nti suite 7\vector nti 7.exe] => (Allow) C:\program files (x86)\vector nti suite 7\vector nti 7.exe (InforMax, Inc.) [File not signed]
FirewallRules: [TCP Query User{394AF6D7-5205-46C9-9696-DA227D8D469D}C:\program files (x86)\vector nti suite 7\vector nti 7.exe] => (Allow) C:\program files (x86)\vector nti suite 7\vector nti 7.exe (InforMax, Inc.) [File not signed]
FirewallRules: [{57E90808-5B88-4271-96CB-65024D364B95}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{49B00461-AD83-4ECD-85BB-B3FD634D1E96}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{A8810CF1-5970-4D37-81A2-46D5A518E999}C:\games\world_of_tanks_na\win64\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_na\win64\worldoftanks.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [TCP Query User{A9984ACC-C728-4098-9433-0B331BAA62B2}C:\games\world_of_tanks_na\win64\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_na\win64\worldoftanks.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [UDP Query User{BB8516A2-4C3A-4FCE-828A-6D6551FD7A5F}C:\programdata\wargaming.net\gamecenter\wgc.exe] => (Allow) C:\programdata\wargaming.net\gamecenter\wgc.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [TCP Query User{239E77A4-0C7F-4072-894E-ED95DAA4AEF9}C:\programdata\wargaming.net\gamecenter\wgc.exe] => (Allow) C:\programdata\wargaming.net\gamecenter\wgc.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{7E38E83D-DDD6-4E89-9FCF-673F7A38BB56}] => (Allow) C:\Users\prikr\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{1AADE07F-E774-4F2A-8711-E2B8106620DD}] => (Allow) C:\Users\prikr\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{D49E90E3-8483-4A90-8210-96EBFB667F65}] => (Allow) C:\Users\prikr\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Communications, Inc.)
FirewallRules: [{F82E915D-82CD-48D7-8B5D-5868844A4307}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{A3EBD381-DB04-4D55-BB27-289782FF8E54}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{F57C6E62-C731-45A9-97C2-9C59F4F320E8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{FB649448-9D5D-40B9-B8A5-9B53A456C5C0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{4FA937A3-01A1-48F1-8AB6-93CE20117DF3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{6F493BE8-B008-45C5-B174-6444B2EC9AEF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{D81BB8EE-C1B9-4CCA-8085-479D4D0C4527}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{992FD91D-182D-49FE-9103-9432180585F6}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25094.310.3616.953_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E761FA61-68D7-47AB-9DA3-B608BE74D69F}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25094.310.3616.953_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CD9F038B-BA7C-4491-9A82-F082E69BADE7}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\136.0.3240.92\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8FA61F3D-F851-484F-9364-0DB1802D715A}] => (Allow) C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe (Avast Software s.r.o. -> Gen Digital Inc.)
FirewallRules: [{A2504C26-C37E-4F2C-80BA-DAE381B80A8F}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2505.6.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{3E5E43F4-2B07-4C20-B6BB-95A12902900C}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2505.6.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{C815D1E6-3821-4421-9FCD-894C0C00BCAE}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2505.6.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{96AE59EF-A9B6-4586-B6BD-338060D7C65A}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2505.6.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{FDAE63C8-58C6-40EA-AF34-4B9D413B5024}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2505.6.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{AD67C2A8-1510-4D08-A49B-AB7FDDF0714E}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2505.6.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{88234D81-D348-4100-A2BA-404E4E3B865A}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2505.6.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{104EFF53-6E59-4DB7-949D-394B771EE957}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2505.6.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{C6AAC6AE-E972-427E-AAF0-F77FA49D33E3}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2505.6.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{A6B94D58-7332-48A9-8763-50D90C26F6A2}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2505.6.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{CF7DF9AF-9CCD-4135-A70D-E90F73AB6717}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2505.6.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{FBA4B56E-6A14-4F7A-A601-E0FC5DE3778A}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2505.6.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{121D978D-190F-4720-AF58-3610ABA99F99}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2505.6.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{71A9927C-6943-4DFB-AD4D-9143BE78CE5B}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2505.6.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{2C0F2792-471D-425F-ABAA-3A76AD4FFDA0}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2505.6.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{BD05F2E6-28A7-460E-AB60-889F73D2BA13}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2505.6.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{E4E860D2-C702-4DF0-B402-FFA8AAA6BB69}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{2C0B9E9A-81D7-497F-BD61-74F4F1540192}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.265.255.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{CD529D1E-CD79-49C6-9C50-2B05BD78A7AD}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.265.255.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{88AFDDBE-84E3-474E-A828-AAEA5835FF72}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.265.255.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{D4125B2E-96E1-470D-AB87-0D96FF36A5A2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.265.255.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{5488CDB6-70ED-48D1-9409-BAB63781C15D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.265.255.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{7833212F-0BFF-4D64-8D47-D9ADBC60BD69}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.265.255.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{6183837C-677F-4CF4-ACD1-4195B38038CE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.265.255.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{26378488-CD8D-4284-A56B-C9E987A73A0B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.265.255.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{0A6351B2-06A5-4B1B-B8F4-44E2B75FDF74}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.265.255.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{25625FD0-2D77-4B1C-98C0-4D0C2E8ADE87}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.265.255.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

==================== Restore Points =========================

ATTENTION: System Restore is disabled (Total:475.81 GB) (Free:107.95 GB) (23%)

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:
==================
Error: (05/26/2025 01:29:49 AM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: SCEP Certificate enrollment initialization for WORKGROUP\NIDAIME$ via https://INTC-KeyId-134d03d6581dabea3bf82eb2e34bf98192826962.microsoftaik.azure.net/templates/Aik/scep failed:

GetCACaps

Method: GET(110ms)
Stage: GetCACaps
The server name or address could not be resolved 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)

Error: (05/25/2025 12:59:20 AM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
Description: SCEP Certificate enrollment initialization for WORKGROUP\NIDAIME$ via https://INTC-KeyId-134d03d6581dabea3bf82eb2e34bf98192826962.microsoftaik.azure.net/templates/Aik/scep failed:

GetCACaps

Method: GET(407ms)
Stage: GetCACaps
The server name or address could not be resolved 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)

Error: (05/12/2025 05:35:05 PM) (Source: Application Error) (EventID: 1000) (User: NIDAIME)
Description: Faulting application name: file-rawtherapee.exe, version: 0.0.0.0, time stamp: 0x00000000
Faulting module name: libgcc_s_seh-1.dll, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0x40000015
Fault offset: 0x000000000001321c
Faulting process id: 0x7bec
Faulting application start time: 0x1dbc385b9a9fbd9
Faulting application path: C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\file-rawtherapee\file-rawtherapee.exe
Faulting module path: C:\Program Files\GIMP 2\bin\libgcc_s_seh-1.dll
Report Id: d33bf710-e04b-4581-a139-ff91b040e176
Faulting package full name: 
Faulting package-relative application ID:

Error: (05/10/2025 06:23:07 PM) (Source: Application Hang) (EventID: 1002) (User: NT AUTHORITY)
Description: The program ShellExperienceHost.exe version 10.0.26100.3624 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Error: (05/09/2025 06:19:36 PM) (Source: Application Hang) (EventID: 1002) (User: NT AUTHORITY)
Description: The program OmenInstallMonitor.exe version 1101.2504.6.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Error: (04/29/2025 05:54:34 AM) (Source: Application Error) (EventID: 1000) (User: NIDAIME)
Description: Faulting application name: prism.exe, version: 8.0.1.244, time stamp: 0x5bfd7c11
Faulting module name: prism.exe, version: 8.0.1.244, time stamp: 0x5bfd7c11
Exception code: 0xc000041d
Fault offset: 0x00000000004ba878
Faulting process id: 0x228
Faulting application start time: 0x1dbb8ec9cf7ec1a
Faulting application path: C:\Program Files\GraphPad\Prism 8\prism.exe
Faulting module path: C:\Program Files\GraphPad\Prism 8\prism.exe
Report Id: b44ca006-d79a-4b5e-9339-b1f37e0ae61b
Faulting package full name: 
Faulting package-relative application ID:

Error: (04/29/2025 05:54:30 AM) (Source: Application Error) (EventID: 1000) (User: NIDAIME)
Description: Faulting application name: prism.exe, version: 8.0.1.244, time stamp: 0x5bfd7c11
Faulting module name: prism.exe, version: 8.0.1.244, time stamp: 0x5bfd7c11
Exception code: 0xc0000005
Fault offset: 0x00000000004ba878
Faulting process id: 0x228
Faulting application start time: 0x1dbb8ec9cf7ec1a
Faulting application path: C:\Program Files\GraphPad\Prism 8\prism.exe
Faulting module path: C:\Program Files\GraphPad\Prism 8\prism.exe
Report Id: 65ef0bff-8d2d-4720-a9f9-264f92732585
Faulting package full name: 
Faulting package-relative application ID:

Error: (04/29/2025 05:50:59 AM) (Source: Application Error) (EventID: 1000) (User: NIDAIME)
Description: Faulting application name: prism.exe, version: 8.0.1.244, time stamp: 0x5bfd7c11
Faulting module name: prism.exe, version: 8.0.1.244, time stamp: 0x5bfd7c11
Exception code: 0xc000041d
Fault offset: 0x00000000004ba878
Faulting process id: 0x2594
Faulting application start time: 0x1dbb8ec210c8c07
Faulting application path: C:\Program Files\GraphPad\Prism 8\prism.exe
Faulting module path: C:\Program Files\GraphPad\Prism 8\prism.exe
Report Id: b0866ee4-7904-4f51-884a-e29883229346
Faulting package full name: 
Faulting package-relative application ID:


System errors:
=============
Error: (06/05/2025 12:10:00 PM) (Source: DCOM) (EventID: 10000) (User: NIDAIME)
Description: Unable to start a DCOM Server: {94269C4E-071A-4116-90E6-52E557067E4E}. The error:
"2147942402"
Happened while starting this command:
"C:\Users\prikr\AppData\Local\Microsoft\OneDrive\25.085.0504.0002\FileCoAuth.exe" -Embedding

Error: (06/05/2025 12:10:00 PM) (Source: DCOM) (EventID: 10000) (User: NIDAIME)
Description: Unable to start a DCOM Server: {94269C4E-071A-4116-90E6-52E557067E4E}. The error:
"2147942402"
Happened while starting this command:
"C:\Users\prikr\AppData\Local\Microsoft\OneDrive\25.085.0504.0002\FileCoAuth.exe" -Embedding

Error: (06/05/2025 12:09:59 PM) (Source: DCOM) (EventID: 10000) (User: NIDAIME)
Description: Unable to start a DCOM Server: {94269C4E-071A-4116-90E6-52E557067E4E}. The error:
"2147942402"
Happened while starting this command:
"C:\Users\prikr\AppData\Local\Microsoft\OneDrive\25.085.0504.0002\FileCoAuth.exe" -Embedding

Error: (06/05/2025 12:09:59 PM) (Source: DCOM) (EventID: 10000) (User: NIDAIME)
Description: Unable to start a DCOM Server: {94269C4E-071A-4116-90E6-52E557067E4E}. The error:
"2147942402"
Happened while starting this command:
"C:\Users\prikr\AppData\Local\Microsoft\OneDrive\25.085.0504.0002\FileCoAuth.exe" -Embedding

Error: (06/05/2025 12:09:59 PM) (Source: DCOM) (EventID: 10000) (User: NIDAIME)
Description: Unable to start a DCOM Server: {94269C4E-071A-4116-90E6-52E557067E4E}. The error:
"2147942402"
Happened while starting this command:
"C:\Users\prikr\AppData\Local\Microsoft\OneDrive\25.085.0504.0002\FileCoAuth.exe" -Embedding

Error: (06/05/2025 12:09:59 PM) (Source: DCOM) (EventID: 10000) (User: NIDAIME)
Description: Unable to start a DCOM Server: {94269C4E-071A-4116-90E6-52E557067E4E}. The error:
"2147942402"
Happened while starting this command:
"C:\Users\prikr\AppData\Local\Microsoft\OneDrive\25.085.0504.0002\FileCoAuth.exe" -Embedding

Error: (06/05/2025 12:09:59 PM) (Source: DCOM) (EventID: 10000) (User: NIDAIME)
Description: Unable to start a DCOM Server: {94269C4E-071A-4116-90E6-52E557067E4E}. The error:
"2147942402"
Happened while starting this command:
"C:\Users\prikr\AppData\Local\Microsoft\OneDrive\25.085.0504.0002\FileCoAuth.exe" -Embedding

Error: (06/05/2025 12:09:59 PM) (Source: DCOM) (EventID: 10000) (User: NIDAIME)
Description: Unable to start a DCOM Server: {94269C4E-071A-4116-90E6-52E557067E4E}. The error:
"2147942402"
Happened while starting this command:
"C:\Users\prikr\AppData\Local\Microsoft\OneDrive\25.085.0504.0002\FileCoAuth.exe" -Embedding


Windows Defender:
================
Date: 2025-06-05 07:55:39
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Stop Reason: RPC connection rundown 

Date: 2025-06-02 20:25:36
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Stop Reason: RPC connection rundown 

Date: 2025-06-02 18:48:21
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Stop Reason: RPC connection rundown 

Date: 2025-06-02 11:27:56
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Stop Reason: RPC connection rundown 

Date: 2025-05-31 15:49:02
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Stop Reason: RPC connection rundown 
﻿Event[0]

Date: 2025-04-17 14:28:51
Description: 
Microsoft Defender Antivirus has encountered an error trying to update security intelligence and will attempt to revert to a previous version.
Security intelligence Attempted: Current
Error Code: 0x80070003
Error description: The system cannot find the path specified. 
Security intelligence Version: 0.0.0.0;0.0.0.0
Engine Version: 0.0.0.0 

CodeIntegrity:
===============
Date: 2025-06-04 09:02:42
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Avast Software\Avast\AvastSvc.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. 

Date: 2025-05-27 10:03:25
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\136.0.3240.92\msedgewebview2.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvspcap64.dll that did not meet the Microsoft signing level requirements. 

Date: 2025-05-18 09:54:29
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\136.0.3240.76\msedgewebview2.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\nvspcap64.dll that did not meet the Microsoft signing level requirements. 


==================== Memory info =========================== 

BIOS: AMI F.28 08/19/2024
Motherboard: HP 8A4F
Processor: 12th Gen Intel(R) Core(TM) i7-12650H
Percentage of memory in use: 74%
Total physical RAM: 16051.99 MB
Available physical RAM: 4062.22 MB
Total Virtual: 30899.99 MB
Available Virtual: 14494.92 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:475.81 GB) (Free:107.95 GB) (Model: SAMSUNG MZVL2512HCJQ-00BH1) (Protected) NTFS
Drive g: (Google Drive) (Fixed) (Total:200 GB) (Free:21.03 GB) (Model: SAMSUNG MZVL2512HCJQ-00BH1) FAT32

\\?\Volume{92159124-86f0-44b9-b87f-54a76ca34134}\ () (Fixed) (Total:0.86 GB) (Free:0.13 GB) NTFS
\\?\Volume{108cf7af-84c9-4b74-a8a8-f809ec9f85e3}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.15 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: 9F5405F4)

Partition: GPT.

==================== End of Addition.txt =======================