Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 05-06-2025
Ran by prikr (administrator) on NIDAIME (HP Victus by HP Gaming Laptop 15-fa0xxx) (05-06-2025 12:09:53)
Running from C:\Users\prikr\Desktop\FRST64.exe
Loaded Profiles: prikr & 
Platform: Microsoft Windows 11 Home Version 24H2 26100.4061 (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\AvastUI.exe <4>
(C:\Program Files (x86)\ExpressVPN\bootstrap\amd64\nssm.exe ->) (EXPRSVPN LLC -> ExpressVPN) C:\Program Files (x86)\ExpressVPN\expressvpnd\expressvpnd.exe
(C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(C:\Program Files\Google\Chrome\Application\chrome.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(C:\Program Files\Google\Chrome\Application\chrome.exe ->) (Zoom Video Communications, Inc. -> Zoom Communications, Inc.) C:\Users\prikr\AppData\Roaming\Zoom\bin\Zoom.exe <3>
(C:\Program Files\Google\Drive File Stream\109.0.3.0\GoogleDriveFS.exe ->) (Google LLC -> ) C:\Program Files\Google\Drive File Stream\109.0.3.0\crashpad_handler.exe
(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.1.28.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.1.28.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityHost.exe
(C:\Users\prikr\AppData\Roaming\Zoom\bin\Zoom.exe ->) (Zoom Video Communications, Inc. -> Zoom Communications, Inc.) C:\Users\prikr\AppData\Roaming\Zoom\bin\zWebview2Agent.exe
(cmd.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\browserhost.exe
(DriverStore\FileRepository\ipf_cpu.inf_amd64_fe2967a6eb0d3a7d\ipf_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_fe2967a6eb0d3a7d\ipf_helper.exe
(DriverStore\FileRepository\seapo64.inf_amd64_deaeb20891c6fa3a\SECOMN64.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Sonitude, Inc.) C:\Windows\System32\DriverStore\FileRepository\seapo64.inf_amd64_deaeb20891c6fa3a\SECOCL64.exe
(ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_3.1.28.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityBackground.exe
(ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2505.6.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\OmenCommandCenterBackground.exe
(ETDService.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDCtrl.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <62>
(explorer.exe ->) (Google LLC -> Google LLC.) C:\Program Files\Google\Drive File Stream\109.0.3.0\GoogleDriveFS.exe <7>
(EXPRSVPN LLC -> ExpressVPN) C:\Program Files (x86)\ExpressVPN\expressvpn-ui\ExpressVPNNotificationService.exe
(HP Inc. -> HP Inc.) C:\Program Files\HP\HP Media Network\HPMediaNetwork.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\MSTeams_25094.310.3616.953_x64__8wekyb3d8bbwe\ms-teams.exe <2>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Avanquest Software (7270356 Canada Inc) -> Interactive Brands Malta Limited) C:\Program Files\PDF Suite 2021\updater-ws.exe
(services.exe ->) (Avanquest Software (7270356 Canada Inc) -> Interactive Brands Malta Limited) C:\Program Files\PDF Suite 2021\ws.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswidsagent.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\afwServ.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(services.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDService.exe
(services.exe ->) (EXPRSVPN LLC -> ExpressVPN) C:\Program Files (x86)\ExpressVPN\bootstrap\amd64\nssm.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_bdc4c744cf4529f4\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f2bc3e822f15dc0b\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f2bc3e822f15dc0b\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f2bc3e822f15dc0b\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f2bc3e822f15dc0b\x64\SysInfoCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpomencustomcapcomp.inf_amd64_3c97e435117f8c16\x64\OmenCap\OmenCap.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_8a3f88e34f6b8385\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_a687edda40db3316\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_0fdf6ce291234272\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_fe2967a6eb0d3a7d\ipf_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_f1ee27a36959d31b\AS\IAS\IntelAudioService.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Sonitude, Inc.) C:\Windows\System32\DriverStore\FileRepository\seapo64.inf_amd64_deaeb20891c6fa3a\SECOMN64.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25040.2-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25040.2-0\MsMpEng.exe
(services.exe ->) (nordvpn s.a. -> nordvpn S.A.) C:\Program Files\NordUpdater\NordUpdateService.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvhm.inf_amd64_5c197d2d97068bef\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_1c5e940d4ffae802\RtkAudUService64.exe <3>
(sihost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> DesktopExtension) C:\Program Files\WindowsApps\AD2F1837.myHP_45.52519.3041.0_x64__v10z8vjag6ke6\win32\DesktopExtension.exe
(sihost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25042.38.0_x64__cw5n1h2txyewy\CrossDeviceService.exe
(svchost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_45.52519.3041.0_x64__v10z8vjag6ke6\HP.myHP.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\OmenInstallMonitor\OmenInstallMonitor.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\Overlay\OverlayHelper.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_1c5e940d4ffae802\RtkAudUService64.exe [2165080 2024-08-06] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [779000 2025-06-03] (Avast Software s.r.o. -> Gen Digital Inc.)
HKLM-x32\...\Run: [ExpressVPNNotificationService] => C:\Program Files (x86)\ExpressVPN\expressvpn-ui\ExpressVPNNotificationServiceStarter.exe [370088 2021-10-08] (EXPRSVPN LLC -> ExpressVPN)
HKU\S-1-5-19\...\Run: [HPSEU_Host_Launcher] => C:\System.sav\util\HPSEU\HpseuHostLauncher.exe [545288 2025-03-15] (HP Inc. -> HP Inc.)
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\109.0.3.0\GoogleDriveFS.exe [66710112 2025-06-04] (Google LLC -> Google LLC.)
HKU\S-1-5-19\...\RunOnce: [OMENCC_InstallationBooster] => C:\system.sav\util\OMENCC_InstallationBooster.exe [16424 2020-03-07] (HP Inc. -> )
HKU\S-1-5-20\...\Run: [HPSEU_Host_Launcher] => C:\System.sav\util\HPSEU\HpseuHostLauncher.exe [545288 2025-03-15] (HP Inc. -> HP Inc.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\109.0.3.0\GoogleDriveFS.exe [66710112 2025-06-04] (Google LLC -> Google LLC.)
HKU\S-1-5-20\...\RunOnce: [OMENCC_InstallationBooster] => C:\system.sav\util\OMENCC_InstallationBooster.exe [16424 2020-03-07] (HP Inc. -> )
HKU\S-1-5-21-110046478-510051192-1964495333-1001\...\Run: [HPSEU_Host_Launcher] => C:\System.sav\util\HPSEU\HpseuHostLauncher.exe [545288 2025-03-15] (HP Inc. -> HP Inc.)
HKU\S-1-5-21-110046478-510051192-1964495333-1001\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\109.0.3.0\GoogleDriveFS.exe [66710112 2025-06-04] (Google LLC -> Google LLC.)
HKU\S-1-5-21-110046478-510051192-1964495333-1001\...\Run: [NordVPN] => C:\Program Files\NordVPN\NordVPN.exe [263256 2023-09-25] (nordvpn s.a. -> nordvpn S.A.)
HKU\S-1-5-21-110046478-510051192-1964495333-1001\...\Run: [Wargaming.net Game Center] => C:\ProgramData\Wargaming.net\GameCenter\wgc.exe [2130776 2025-03-06] (Wargaming Group Limited -> Wargaming.net)
HKU\S-1-5-21-110046478-510051192-1964495333-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4694624 2025-04-02] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-110046478-510051192-1964495333-1001\...\Run: [Discord] => C:\Users\prikr\AppData\Local\Discord\Update.exe [1516408 2025-01-21] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-110046478-510051192-1964495333-1001\...\Run: [AvastBrowserAutoLaunch_2FC8F1F10796C730EFEB8EB59D1AB059] => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [3479216 2025-05-23] (Avast Software s.r.o. -> Gen Digital Inc.)
HKU\S-1-5-21-110046478-510051192-1964495333-1002\...\Run: [HPSEU_Host_Launcher] => C:\System.sav\util\HPSEU\HpseuHostLauncher.exe [545288 2025-03-15] (HP Inc. -> HP Inc.)
HKU\S-1-5-21-110046478-510051192-1964495333-1002\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\109.0.3.0\GoogleDriveFS.exe [66710112 2025-06-04] (Google LLC -> Google LLC.)
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\109.0.3.0\GoogleDriveFS.exe [66710112 2025-06-04] (Google LLC -> Google LLC.)
HKLM\...\Print\Monitors\PDF Suite 2021 Monitor: C:\windows\system32\spool\DRIVERS\x64\suite_pdfpmon_v.4.12.26.3.dll [932984 2022-12-28] (PDF Tools AG -> PDF Tools AG (hxxp://www.pdf-tools.com))
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\137.0.7151.56\Installer\chrmstp.exe [2025-06-02] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files\AVAST Software\Browser\Application\136.0.30453.115\Installer\chrmstp.exe [2025-05-27] (Avast Software s.r.o. -> Gen Digital Inc.)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {4961307E-560A-4A7C-8F24-6C6741057B6A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1580992 2025-03-21] (Adobe Inc. -> Adobe Inc.)
Task: {0B946FA0-2A6B-411B-9FC2-6C7731EB9750} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [3479216 2025-05-23] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {13C0FE18-8CDA-448D-9469-E1D3FBD17EF5} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [3479216 2025-05-23] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {4231B245-107F-4A8C-8BFC-02E79C5F6E68} - System32\Tasks\Avast Software\Avast Antivirus Patcher => C:\Program Files\Common Files\Avast Software\Icarus\avast-av\icarus.exe [8839472 2025-05-20] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {41BAF353-CA0A-4535-8794-D0A75855F627} - System32\Tasks\Avast Software\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [5372152 2025-06-03] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {A77C5BE5-889F-4D63-A94A-5E5BB501A267} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2564904 2025-03-20] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {83B0B1C9-25F0-4EF7-ACAB-C5E81C3E35E5} - System32\Tasks\AvastBrowserProtectS-1-5-21-110046478-510051192-1964495333-1001 => C:\Program Files\AVAST Software\Browser\Application\AvastBrowserProtect.exe [1690008 2025-03-04] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {F2171878-ED70-4153-A850-9EEDA8D0BFD8} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [193056 2025-03-20] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {D8EEFB7E-33EC-47AF-888F-F99D2DB31DC9} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [193056 2025-03-20] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {D6567931-7B08-4C8D-B7AC-B34CF90482E7} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem138.0.7194.0{35717C9F-FA2D-482E-B422-1F74410539BC} => C:\Program Files (x86)\Google\GoogleUpdater\138.0.7194.0\updater.exe [7080032 2025-05-22] (Google LLC -> Google LLC)
Task: {D7750CB4-E267-476D-85CC-C1FBBAC5A7C5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [703536 2023-08-25] (HP Inc. -> HP Inc.) -> C:\Program Files (x86)\HP\HP Support Framework\\/show
Task: {9B66197E-9569-4F58-AEAE-6E6CE2261B74} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2023-06-30] (HP Inc. -> HP Inc.)
Task: {9303BF88-215C-41B2-AC38-4686C3B1A9A9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1145896 2023-06-30] (HP Inc. -> HP Inc.)
Task: {0B981454-427F-4524-99EA-550F6332C0FD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1145896 2023-06-30] (HP Inc. -> HP Inc.)
Task: {D042B293-DDAA-46CA-9D49-EE4FFFA0A32E} - System32\Tasks\HP\Consent Manager Launcher => C:\windows\system32\sc.exe [102400 2025-04-16] (Microsoft Windows -> Microsoft Corporation) -> start hptouchpointanalyticsservice
Task: {9B21EFB8-B849-4115-B0A1-15E6558E1FB1} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [79312 2025-05-02] (HP Inc. -> HP Inc.)
Task: {82A43D07-99C5-4EE3-8DC5-59E5A3C634C6} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [79312 2025-05-02] (HP Inc. -> HP Inc.)
Task: {B488E4CA-A9AC-496A-99C8-AC4778C8C4E0} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28955376 2025-05-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {245920BC-DC78-4FBC-8F80-489ABA30CACA} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [68312 2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {FCF379AB-B4A5-4410-9309-D7CAA09B2BFB} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28955376 2025-05-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {4914F5CF-098B-42D7-BBD2-777F1CCFDEF0} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309960 2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {38C32FC2-B83E-4BC6-B4B4-AE9D555AAB65} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309960 2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {38BC503C-B3AA-4A08-BFA8-39A22075EAE6} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [225992 2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {8271553F-A402-4047-A73C-F9CDC0253418} - System32\Tasks\Microsoft\Office\Office Startup Boost => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309960 2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {4CC01924-55A5-45D4-B686-EEB539367163} - System32\Tasks\Microsoft\Office\Office Startup Boost Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309960 2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe  (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (No File)
Task: {DDDE96C1-A4C9-4E3F-BF14-2FDFF9B58F90} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-110046478-510051192-1964495333-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [695360 2025-06-02] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {87811435-5885-4D34-A6DD-C2CC26F7410E} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34880 2025-06-02] (Mozilla Corporation -> Mozilla Foundation)
Task: {A5A9AEC2-A488-4590-AE2C-45DADC037CC9} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1009872 2022-08-05] (Nvidia Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {CFF5C666-9E08-4CB9-9244-7C108A95D59F} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3339472 2022-08-05] (Nvidia Corporation -> NVIDIA Corporation)
Task: {054CE3A1-6410-4A84-BDC0-3A1422C167E5} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [647376 2022-08-05] (Nvidia Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\NvNode\--launcher=TaskScheduler
Task: {EEFB1EF5-44BD-4ECD-95F7-69EE0C66C33D} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1656320 2022-08-05] (Nvidia Corporation -> NVIDIA Corporation)
Task: {1E394057-EE7D-437F-85CB-A37819E0E690} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1656320 2022-08-05] (Nvidia Corporation -> NVIDIA Corporation)
Task: {48ABC763-CAAA-4F21-B499-5EEC61A24A85} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1656320 2022-08-05] (Nvidia Corporation -> NVIDIA Corporation)
Task: {865482CE-3401-446C-8293-2B88A780707A} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1656320 2022-08-05] (Nvidia Corporation -> NVIDIA Corporation)
Task: {ED585860-27EF-4B46-A942-324627846986} - System32\Tasks\OmenInstallMonitor => C:\Program Files\HP\OmenInstallMonitor\OmenInstallMonitor.exe [73168 2025-05-28] (HP Inc. -> HP Inc.)
Task: {E1D6D582-BC14-4BA2-976B-D4E3A5C90C1C} - System32\Tasks\OmenInstallMonitorCustomEvent => C:\Program Files\HP\OmenInstallMonitor\OmenInstallMonitor.exe [73168 2025-05-28] (HP Inc. -> HP Inc.)
Task: {B4F1E4F3-4C9B-4BA2-9789-27F095124CFC} - System32\Tasks\OmenInstallMonitorCustomEvent-sid-S-1-5-21-110046478-510051192-1964495333-1001 => C:\Program Files\HP\OmenInstallMonitor\OmenInstallMonitor.exe [73168 2025-05-28] (HP Inc. -> HP Inc.)
Task: {375FE881-830B-4CFA-8163-FF98C779400E} - System32\Tasks\OmenInstallMonitor-sid-S-1-5-21-110046478-510051192-1964495333-1001 => C:\Program Files\HP\OmenInstallMonitor\OmenInstallMonitor.exe [73168 2025-05-28] (HP Inc. -> HP Inc.)
Task: {D1116F75-8653-4F0C-8D7D-81D1F63C090F} - System32\Tasks\OmenOverlay => C:\Program Files\HP\Overlay\OverlayHelper.exe [67536 2025-05-28] (HP Inc. -> HP Inc.)
Task: {3EFC0B22-8B1E-44B8-85B5-3426A7A71600} - System32\Tasks\OmenOverlayCustomEvent => C:\Program Files\HP\Overlay\OverlayHelper.exe [67536 2025-05-28] (HP Inc. -> HP Inc.)
Task: {65C71663-A4F1-4276-A7A7-8067DC1C7BD8} - System32\Tasks\OmenOverlayCustomEvent-sid-S-1-5-21-110046478-510051192-1964495333-1001 => C:\Program Files\HP\Overlay\OverlayHelper.exe [67536 2025-05-28] (HP Inc. -> HP Inc.)
Task: {45104001-9948-42E5-A261-9B33001B6E0F} - System32\Tasks\OmenOverlay-sid-S-1-5-21-110046478-510051192-1964495333-1001 => C:\Program Files\HP\Overlay\OverlayHelper.exe [67536 2025-05-28] (HP Inc. -> HP Inc.)
Task: {E24AB5F8-EB7A-44DC-98C3-04828F9B22EC} - System32\Tasks\OneDrive Startup Task-S-1-5-21-110046478-510051192-1964495333-1001 => C:\Users\prikr\AppData\Local\Microsoft\OneDrive\25.085.0504.0002\OneDriveLauncher.exe [684856 2025-06-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {69F80FC4-5E65-4D28-910C-4FCB80A1D2CA} - System32\Tasks\ZoomUpdateTaskUser-S-1-5-21-110046478-510051192-1964495333-1001 => C:\Users\prikr\AppData\Roaming\Zoom\bin\Zoom.exe [441144 2025-05-27] (Zoom Video Communications, Inc. -> Zoom Communications, Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 170.140.1.1 170.140.2.1
Tcpip\..\Interfaces\{0618cf18-e2b1-429b-84a9-bd2480b0f7ee}: [DhcpNameServer] 170.140.1.1 170.140.2.1
Tcpip\..\Interfaces\{0618cf18-e2b1-429b-84a9-bd2480b0f7ee}: [DhcpDomain] wireless.emory.edu
Tcpip\..\Interfaces\{0618cf18-e2b1-429b-84a9-bd2480b0f7ee}\64F6275637470284F6573756: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{0618cf18-e2b1-429b-84a9-bd2480b0f7ee}\64F6275637470284F6573756: [DhcpDomain] attlocal.net
Tcpip\..\Interfaces\{0618cf18-e2b1-429b-84a9-bd2480b0f7ee}\B616479656167702779666960253: [DhcpNameServer] 75.75.75.75 75.75.76.76
Tcpip\..\Interfaces\{0618cf18-e2b1-429b-84a9-bd2480b0f7ee}\B616479656167702779666960253: [DhcpDomain] hsd1.ga.comcast.net

Edge: 
=======
Edge Profile: C:\Users\prikr\AppData\Local\Microsoft\Edge\User Data\Default [2025-06-04]
Edge Extension: (Google Docs Offline) - C:\Users\prikr\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-07-20]
Edge Extension: (Edge relevant text changes) - C:\Users\prikr\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-26]

FireFox:
========
FF DefaultProfile: p817cpuu.default
FF ProfilePath: C:\Users\prikr\AppData\Roaming\Mozilla\Firefox\Profiles\p817cpuu.default [2024-02-28]
FF ProfilePath: C:\Users\prikr\AppData\Roaming\Mozilla\Firefox\Profiles\9xxtklgj.default-release [2025-06-04]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2025-04-24] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1993.6\npAvastBrowserUpdate3.dll [2025-03-20] (Avast Software s.r.o. -> Gen Digital Inc.)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1993.6\npAvastBrowserUpdate3.dll [2025-03-20] (Avast Software s.r.o. -> Gen Digital Inc.)

Chrome: 
=======
CHR DefaultProfile: Profile 1
CHR Profile: C:\Users\prikr\AppData\Local\Google\Chrome\User Data\Default [2025-06-04]
CHR Extension: (Google Docs Offline) - C:\Users\prikr\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-12-27]
CHR Extension: (Chrome Web Store Payments) - C:\Users\prikr\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-12-27]
CHR Profile: C:\Users\prikr\AppData\Local\Google\Chrome\User Data\Guest Profile [2023-01-22]
CHR Profile: C:\Users\prikr\AppData\Local\Google\Chrome\User Data\Profile 1 [2025-06-05]
CHR DownloadDir: C:\Users\prikr\OneDrive\Desktop
CHR HomePage: Profile 1 -> hxxp://google.com/iq
CHR StartupUrls: Profile 1 -> ""
CHR DefaultSearchKeyword: Profile 1 -> google.cz__
CHR Session Restore: Profile 1 -> is enabled.
CHR Extension: (Lucidchart Diagrams) - C:\Users\prikr\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apboafhkiegglekeafbckfjldecefkhn [2022-12-27]
CHR Extension: (Timer) - C:\Users\prikr\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\edebbhkhcaafmolanelponjjanocpacd [2022-12-27]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\prikr\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2025-05-12]
CHR Extension: (Google Docs Offline) - C:\Users\prikr\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-06-02]
CHR Extension: (AdBlock — block ads across the web) - C:\Users\prikr\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2025-05-31]
CHR Extension: (Grammarly: AI Writing and Grammar Checker App) - C:\Users\prikr\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2025-06-02]
CHR Extension: (Unit Convertor) - C:\Users\prikr\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kkaklafnbnpegjnlplfgadnobkgdkinf [2022-12-27]
CHR Extension: (Application Launcher For Drive (by Google)) - C:\Users\prikr\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2023-08-31]
CHR Extension: (Grass) - C:\Users\prikr\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mmiboiefncpfjihjdedpaoammipkilla [2022-12-27]
CHR Extension: (Chrome Web Store Payments) - C:\Users\prikr\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-12-27]
CHR Extension: (Psykopaint) - C:\Users\prikr\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pgjchkcfmigkkhedgjedmffdepgmpfil [2022-12-27]
CHR Extension: (Connected Mind) - C:\Users\prikr\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pmkffmgahaepmhkhkblhopnpleeikokc [2022-12-27]
CHR Profile: C:\Users\prikr\AppData\Local\Google\Chrome\User Data\Profile 2 [2025-05-06]
CHR DefaultSearchKeyword: Profile 2 -> google.cz__
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\prikr\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-05-06]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\prikr\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2025-05-06]
CHR Extension: (Google Docs Offline) - C:\Users\prikr\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-05-06]
CHR Extension: (Application Launcher For Drive (by Google)) - C:\Users\prikr\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2025-05-06]
CHR Extension: (Chrome Web Store Payments) - C:\Users\prikr\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-05-06]
CHR Profile: C:\Users\prikr\AppData\Local\Google\Chrome\User Data\System Profile [2023-01-22]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKU\S-1-5-21-110046478-510051192-1964495333-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-110046478-510051192-1964495333-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174520 2025-03-21] (Adobe Inc. -> Adobe Inc.)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [7378736 2025-06-03] (Avast Software s.r.o. -> AVAST Software)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [193056 2025-03-20] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [1032440 2025-06-03] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 avast! Firewall; C:\Program Files\Avast Software\Avast\afwServ.exe [2569464 2025-06-03] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [1085176 2025-06-03] (Avast Software s.r.o. -> Gen Digital Inc.)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [193056 2025-03-20] (Avast Software s.r.o. -> Gen Digital Inc.)
S3 AvastSecureBrowserElevationService; C:\Program Files\AVAST Software\Browser\Application\136.0.30453.115\elevation_service.exe [2381128 2025-05-23] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2025-03-20] (Avast Software s.r.o. -> AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13724376 2025-05-28] (Microsoft Corporation -> Microsoft Corporation)
R2 ExpressVPNService; C:\Program Files (x86)\ExpressVPN\bootstrap\amd64\nssm.exe [437160 2021-10-08] (EXPRSVPN LLC -> ExpressVPN)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [891256 2020-07-31] (HP Inc. -> HP Inc.)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f2bc3e822f15dc0b\x64\AppHelperCap.exe [928888 2025-05-06] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f2bc3e822f15dc0b\x64\DiagsCap.exe [927328 2025-05-06] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f2bc3e822f15dc0b\x64\NetworkCap.exe [923256 2025-05-06] (HP Inc. -> HP Inc.)
R2 HPOmenCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpomencustomcapcomp.inf_amd64_3c97e435117f8c16\x64\OmenCap\OmenCap.exe [755248 2024-10-25] (HP Inc. -> HP Inc.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243664 2025-05-02] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_f2bc3e822f15dc0b\x64\SysInfoCap.exe [928352 2025-05-06] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_bdc4c744cf4529f4\x64\TouchpointAnalyticsClientService.exe [631448 2025-03-27] (HP Inc. -> HP Inc.)
S2 Intel(R) Platform License Manager Service; C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_fc84dfa25a6a7727\lib\PlatformLicenseManagerService.exe [741488 2023-12-14] (Intel Corporation -> Intel(R) Corporation)
R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_f1ee27a36959d31b\AS\IAS\IntelAudioService.exe [532944 2024-10-16] (Intel Corporation -> Intel)
R2 ipfsvc; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_fe2967a6eb0d3a7d\ipf_uf.exe [3084992 2024-05-21] (Intel Corporation -> Intel Corporation)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [945264 2025-05-28] (McAfee, LLC -> McAfee, LLC)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25040.2-0\MpDefenderCoreService.exe [2050904 2025-05-22] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 MuseHub Updater Service; C:\Program Files\WindowsApps\Muse.MuseHub_2.1.0.1567_x64__rb9pth70m6nz6\Muse.Updater.exe [7815248 2025-02-02] (Musecy SM Ltd. -> Muse.Updater)
R2 NordUpdaterService; C:\Program Files\NordUpdater\NordUpdateService.exe [297848 2022-11-21] (nordvpn s.a. -> nordvpn S.A.)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvhm.inf_amd64_5c197d2d97068bef\Display.NvContainer\NVDisplay.Container.exe [1275016 2024-12-12] (NVIDIA Corporation -> NVIDIA Corporation)
R3 PDF Suite 2021; C:\Program Files\PDF Suite 2021\ws.exe [2008576 2022-10-20] (Avanquest Software (7270356 Canada Inc) -> Interactive Brands Malta Limited)
S3 PDF Suite 2021 Creator; C:\Program Files\PDF Suite 2021\creator\common\creator-ws.exe [570368 2022-10-20] (Avanquest Software (7270356 Canada Inc) -> Interactive Brands Malta Limited)
R2 PDF Suite 2021 Update Service; C:\Program Files\PDF Suite 2021\updater-ws.exe [1652224 2022-10-20] (Avanquest Software (7270356 Canada Inc) -> Interactive Brands Malta Limited)
R2 SECOMNService; C:\WINDOWS\System32\DriverStore\FileRepository\seapo64.inf_amd64_deaeb20891c6fa3a\SECOMN64.exe [1087496 2024-07-08] (Microsoft Windows Hardware Compatibility Publisher -> Sonitude, Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25040.2-0\NisSrv.exe [4525976 2025-05-22] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25040.2-0\MsMpEng.exe [278304 2025-05-22] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [21088 2025-06-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [244320 2025-06-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [390744 2025-06-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [297568 2025-06-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [85088 2025-06-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [28280 2025-03-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [29792 2025-06-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [281184 2025-06-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [570976 2025-06-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [92256 2025-06-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [72288 2025-06-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [881760 2025-06-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [1272896 2025-06-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [202312 2025-06-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [392264 2025-06-03] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 expressvpnsplittunnel; C:\Program Files (x86)\ExpressVPN\splittunnel\expressvpnsplittunnel.sys [45640 2021-10-08] (ExprsVPN LLC -> ExpressVPN)
R3 expressvpntun; C:\WINDOWS\System32\drivers\expressvpn-tun.sys [46896 2021-10-08] (Express VPN International Ltd. -> ExpressVPN)
R0 fse; C:\WINDOWS\System32\drivers\fse.sys [222528 2025-04-16] (Microsoft Windows -> Microsoft Corporation)
U4 googledrivefs31626; C:\Program Files\Google\Drive File Stream\Drivers\31626\googledrivefs31626.sys [384096 2024-07-26] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
R2 googledrivefs31931; C:\Program Files\Google\Drive File Stream\Drivers\31931\googledrivefs31931.sys [386256 2025-05-14] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
S3 GSCAuxDriver; C:\WINDOWS\System32\DriverStore\FileRepository\gscauxdriver.inf_amd64_e6d306df02347bd3\GSCAuxDriverx64.sys [94736 2022-07-07] (Intel Corporation -> Intel Corporation)
S3 GSCx64; C:\WINDOWS\System32\DriverStore\FileRepository\gscheci.inf_amd64_f262f39474370927\TeeDriverGSCW8x64.sys [266224 2022-07-07] (Intel Corporation -> Intel Corporation)
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1421dec2010cc057\x64\hpcustomcapdriver.sys [18984 2024-05-07] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
R3 HPOmenCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpomencustomcapdriver.inf_amd64_7a1ef17ecb1f36ce\x64\hpomencustomcapdriver.sys [24968 2024-07-12] (HP Inc. -> HP Inc.)
R2 HpReadHWData; C:\windows\system32\drivers\HpReadHWData.sys [58952 2025-03-05] (HP Inc. -> Windows (R) Win 7 DDK provider)
R3 iaLPSS2_GPIO2_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_6f8ae740d22247ce\iaLPSS2_GPIO2_ADL.sys [141288 2024-05-16] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_563fbcd35feb69a6\iaLPSS2_I2C_ADL.sys [211432 2024-05-16] (Intel Corporation -> Intel Corporation)
S3 iaLPSS2_SPI_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_spi_adl.inf_amd64_cffe3669158cf91b\iaLPSS2_SPI_ADL.sys [160920 2021-12-24] (Intel Corporation -> Intel Corporation)
S3 iaLPSS2_UART2_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_uart2_adl.inf_amd64_a12d81aa08d530a8\iaLPSS2_UART2_ADL.sys [318616 2021-12-24] (Intel Corporation -> Intel Corporation)
R3 IntelGNA; C:\WINDOWS\System32\DriverStore\FileRepository\gna.inf_amd64_8e2f374849f1eba9\gna.sys [90304 2024-04-25] (Intel Corporation -> Intel Corporation)
S3 ipf_acpi; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_acpi.inf_amd64_709dd98a4001e271\ipf_acpi.sys [86720 2021-12-20] (Intel Corporation -> Intel Corporation)
R3 ipf_cpu; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_fe2967a6eb0d3a7d\ipf_cpu.sys [88144 2024-05-21] (Intel Corporation -> Intel Corporation)
R3 ipf_lf; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_fe2967a6eb0d3a7d\ipf_lf.sys [499392 2024-05-21] (Intel Corporation -> Intel Corporation)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [331168 2025-04-12] (Microsoft Windows -> Microsoft Corporation)
S2 l1vhlwf; C:\WINDOWS\System32\drivers\l1vhlwf.sys [144840 2025-04-16] (Microsoft Windows -> Microsoft Corporation)
R3 MTKBTFilterx64; C:\WINDOWS\System32\DriverStore\FileRepository\mtkbtfilter.inf_amd64_4e18fe2e122d5d00\mtkbtfilterx.sys [326744 2024-05-17] (MEDIATEK INC. -> MediaTek Inc.)
R3 mtkwlex; C:\WINDOWS\System32\DriverStore\FileRepository\mtkwl6ex.inf_amd64_f698a1260525f27b\mtkwl6ex.sys [1471584 2024-05-16] (MEDIATEK INC. -> MediaTek Inc.)
R2 NDivert; C:\Program Files\NordVPN\7.32.5.0\Drivers\NDivert.sys [131472 2024-10-31] (nordvpn s.a. -> Nordvpn S.A.)
R1 nordlwf; C:\WINDOWS\system32\DRIVERS\nordlwf.sys [44928 2022-02-22] (nordvpn s.a. -> TEFINCOM S.A.)
R3 nvpcf; C:\WINDOWS\System32\drivers\nvpcf.sys [246504 2024-12-12] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48552 2022-08-05] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation)
R3 ovpn-dco; C:\WINDOWS\System32\drivers\ovpn-dco.sys [92664 2024-06-05] (WDKTestCert lev,133391533294737317 -> OpenVPN, Inc)
R3 rt68cx21; C:\WINDOWS\System32\DriverStore\FileRepository\rt68cx21x64.inf_amd64_d337a2c0d97264a1\rt68cx21x64.sys [810344 2024-08-07] (Realtek Semiconductor Corp. -> Realtek)
R1 rtf64; C:\WINDOWS\system32\DRIVERS\rtf64x64.sys [67496 2022-07-29] (Realtek Semiconductor Corp. -> Realtek)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 tapexpressvpn; C:\WINDOWS\System32\drivers\tapexpressvpn.sys [61496 2021-10-08] (ExprsVPN LLC -> The OpenVPN Project)
R3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [41120 2024-08-29] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
S3 ThermalFilter; C:\WINDOWS\System32\DriverStore\FileRepository\c_thermal.inf_amd64_732a53ed1662b707\ThermalFilter.sys [75376 2025-04-16] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation)
S3 vmbusproxy; C:\WINDOWS\system32\drivers\vmbusproxy.sys [98304 2025-04-16] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [19984 2025-05-22] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [606568 2025-05-22] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [100736 2025-05-22] (Microsoft Windows -> Microsoft Corporation)
U3 aswBcc; no ImagePath
U3 Avast Business Console Client Antivirus Service; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-06-05 12:09 - 2025-06-05 12:10 - 000047383 _____ C:\Users\prikr\Desktop\FRST.txt
2025-06-05 12:09 - 2025-06-05 12:10 - 000000000 ____D C:\FRST
2025-06-05 11:56 - 2025-06-05 11:56 - 002405888 _____ (Farbar) C:\Users\prikr\Desktop\FRST64.exe
2025-06-05 11:53 - 2025-06-05 11:53 - 000033160 _____ C:\Users\prikr\AppData\Local\recently-used.xbel
2025-06-05 11:50 - 2025-06-05 11:51 - 000000000 ____D C:\Users\prikr\Desktop\ChemiDoc Images 2025-06-05_08.38.50
2025-06-05 10:28 - 2025-06-05 10:28 - 000714094 _____ C:\WINDOWS\system32\perfh005.dat
2025-06-05 10:28 - 2025-06-05 10:28 - 000163310 _____ C:\WINDOWS\system32\perfc005.dat
2025-06-05 09:50 - 2025-06-05 09:50 - 000047866 _____ C:\Users\prikr\Desktop\flavoured_beer_people.webp
2025-06-04 11:38 - 2025-06-04 11:38 - 000004019 _____ C:\Users\prikr\Desktop\Divadelnícancy_VeSpotify_všechnaobdobí.csv
2025-06-03 12:38 - 2025-06-03 12:38 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2025-06-03 12:32 - 2025-06-03 12:34 - 000000000 ____D C:\Users\prikr\Desktop\VISA paperwork
2025-06-03 12:23 - 2025-06-03 12:23 - 000320248 _____ (Gen Digital Inc.) C:\WINDOWS\system32\aswBoot.exe
2025-06-02 19:44 - 2025-06-02 19:44 - 000019146 _____ C:\Users\prikr\Desktop\il_fullxfull.1563938723_1rmr.webp
2025-06-02 11:45 - 2025-06-03 22:17 - 000000000 ____D C:\Program Files\Mozilla Firefox
2025-06-02 11:17 - 2025-06-02 11:17 - 006061689 _____ C:\Users\prikr\Desktop\HIV Protocols (purification with subtilysin).pdf
2025-05-31 08:32 - 2025-05-31 08:32 - 000010295 _____ C:\Users\prikr\Desktop\20250531-bca-ifitm3s.xlsx
2025-05-27 10:33 - 2025-05-27 10:33 - 000191367 _____ C:\Users\prikr\Desktop\AcceptableEvidenceofDoctoralDegree.pdf
2025-05-27 10:26 - 2025-05-27 10:26 - 001067572 _____ C:\Users\prikr\Desktop\prikryld_2021-02-26_12-06-15.pdf
2025-05-27 01:06 - 2025-05-27 01:06 - 000000000 ____D C:\Users\prikr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2025-05-22 13:45 - 2025-05-22 13:45 - 000055459 _____ C:\Users\prikr\Desktop\New VISITING_FELLOW_AGREEMENT Prikryl.pdf
2025-05-22 13:35 - 2025-05-22 13:35 - 000563954 _____ C:\Users\prikr\Desktop\Prikryl Confirmation of graduation.pdf
2025-05-22 13:35 - 2025-05-22 13:35 - 000174407 _____ C:\Users\prikr\Desktop\New VISITING_FELLOW_AGREEMENT.pdf
2025-05-22 10:04 - 2025-05-22 10:04 - 000594749 _____ C:\Users\prikr\Desktop\NIH829-2 Request for Visiting Program Participant Part 2 Prikryl.pdf
2025-05-19 14:48 - 2025-05-19 14:48 - 013124680 _____ C:\Users\prikr\Desktop\CSHL2025_Prikryl_v4.3.pptx
2025-05-19 14:48 - 2025-05-19 14:48 - 005737171 _____ C:\Users\prikr\Desktop\CSHL2025_Prikryl_v4.3.pdf
2025-05-19 14:46 - 2025-05-19 14:46 - 000461086 _____ C:\Users\prikr\Desktop\CatChimeras_triplicates.pzfx
2025-05-19 14:46 - 2025-05-19 14:46 - 000022875 _____ C:\Users\prikr\Desktop\Virus vsTargetCell_HIVpp_Originfile.pzfx
2025-05-18 18:11 - 2025-05-18 18:11 - 013188324 _____ C:\Users\prikr\Desktop\CSHL2025_Prikryl_v4.2.pptx
2025-05-18 18:11 - 2025-05-18 18:11 - 005738264 _____ C:\Users\prikr\Desktop\CSHL2025_Prikryl_v4.2.pdf
2025-05-18 17:47 - 2025-05-18 17:47 - 013798236 _____ C:\Users\prikr\Desktop\CSHL2025_Prikryl_v4.1(GM).pptx
2025-05-17 14:38 - 2025-05-17 14:38 - 057148517 _____ C:\Users\prikr\Desktop\ifitm ILV paper v10.7.pptx
2025-05-17 14:38 - 2025-05-17 14:38 - 015983624 _____ C:\Users\prikr\Desktop\ifitm ILV paper v10.7.pdf
2025-05-17 14:14 - 2025-05-17 14:14 - 000000000 ____D C:\Users\prikr\Desktop\temporary-20250517T181118Z-1-001
2025-05-17 14:12 - 2025-05-17 14:12 - 279711299 _____ C:\Users\prikr\Desktop\temporary-20250517T181118Z-1-001.zip
2025-05-17 13:18 - 2025-05-17 13:18 - 000180084 _____ C:\Users\prikr\Desktop\test (CsA).pptx
2025-05-17 13:14 - 2025-05-17 13:17 - 000000000 ____D C:\Users\prikr\Desktop\test
2025-05-17 13:04 - 2025-05-17 13:04 - 005344114 _____ C:\Users\prikr\Desktop\Movie S1-trimmed.avi
2025-05-17 13:03 - 2025-05-17 13:03 - 007150510 _____ C:\Users\prikr\Desktop\Movie S2-trimmed.avi
2025-05-17 12:40 - 2025-05-17 12:40 - 023469142 _____ C:\Users\prikr\Desktop\Movie S2.avi
2025-05-17 12:40 - 2025-05-17 12:40 - 018574730 _____ C:\Users\prikr\Desktop\Movie S1.avi
2025-05-17 12:27 - 2025-05-17 12:27 - 001014068 _____ C:\Users\prikr\Desktop\A549.IFITM1-C-FLAG_EGF-AF488_Dextran-AF568_FLAG-AF647_CsA-1-1.tif
2025-05-17 12:25 - 2025-05-17 12:25 - 015715117 _____ C:\Users\prikr\Desktop\ifitm ILV paper v10.6(GM).pdf
2025-05-16 17:43 - 2025-05-16 17:43 - 015764181 _____ C:\Users\prikr\Desktop\ifitm ILV paper v10.5.pdf
2025-05-14 06:06 - 2025-05-14 06:06 - 000267592 _____ C:\Users\prikr\Desktop\cells-10-01171-ag.webp
2025-05-13 18:09 - 2025-06-05 09:38 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-05-13 16:40 - 2025-05-13 16:40 - 000030998 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-05-13 16:40 - 2025-05-13 16:40 - 000030998 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2025-05-11 08:44 - 2025-05-11 08:44 - 033660629 _____ C:\Users\prikr\Desktop\ifitm ILV paper v10.2 SX.pptx
2025-05-11 08:39 - 2025-05-11 08:39 - 072725987 _____ C:\Users\prikr\Desktop\ifitm ILV paper v10.2.pptx
2025-05-11 00:48 - 2025-05-11 00:49 - 000886652 _____ C:\Users\prikr\Desktop\NIH829-1 Request for Visiting Program Participant Part 1.pdf
2025-05-11 00:22 - 2025-05-11 00:22 - 000941375 _____ C:\Users\prikr\Documents\FAES Employee Election Form-PARIS.pdf
2025-05-11 00:22 - 2025-05-11 00:22 - 000858303 _____ C:\Users\prikr\Documents\NIH829-1 Request for Visiting Program Participant Part 1.pdf
2025-05-11 00:22 - 2025-05-11 00:22 - 000046495 _____ C:\Users\prikr\Documents\ACH Enrollment Form 3881.pdf
2025-05-11 00:18 - 2025-05-11 00:18 - 000261972 _____ C:\Users\prikr\Documents\I-94 Official Website - Get Most Recent I-94 Response.pdf
2025-05-07 15:21 - 2025-05-07 15:21 - 142673951 _____ C:\Users\prikr\Desktop\GM_DataClub_04032025_finalV (1).pptx
2025-05-07 15:13 - 2025-05-07 15:14 - 029978896 _____ C:\Users\prikr\Desktop\GM_DataClub_04032025_finalV - Copy14 (1).pptx
2025-05-07 15:01 - 2025-05-07 15:02 - 290571501 _____ C:\Users\prikr\Desktop\GM_DataClub_04032025_finalV - Copy14.pptx
2025-05-07 14:58 - 2025-05-07 14:58 - 068999723 _____ C:\Users\prikr\Desktop\GM_DataClub_04032025_finalV - Copy13.pptx
2025-05-07 14:54 - 2025-05-07 14:54 - 026415674 _____ C:\Users\prikr\Desktop\GM_DataClub_04032025_finalV - Copy2.pptx
2025-05-07 14:41 - 2025-05-07 14:41 - 027206822 _____ C:\Users\prikr\Desktop\GM_DataClub_04032025_finalV - Copy1.pptx
2025-05-07 14:29 - 2025-05-07 14:30 - 403705062 _____ C:\Users\prikr\Desktop\GM_DataClub_04032025_finalV.pptx

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-06-05 12:09 - 2025-04-17 14:28 - 000003550 _____ C:\WINDOWS\system32\Tasks\OmenInstallMonitorCustomEvent-sid-S-1-5-21-110046478-510051192-1964495333-1001
2025-06-05 12:09 - 2025-04-17 14:28 - 000003490 _____ C:\WINDOWS\system32\Tasks\OmenOverlayCustomEvent-sid-S-1-5-21-110046478-510051192-1964495333-1001
2025-06-05 12:09 - 2025-04-17 14:28 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2025-06-05 12:09 - 2025-04-17 14:28 - 000003464 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-06-05 12:09 - 2025-04-17 14:28 - 000003398 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2025-06-05 12:09 - 2025-04-17 14:28 - 000003358 _____ C:\WINDOWS\system32\Tasks\ZoomUpdateTaskUser-S-1-5-21-110046478-510051192-1964495333-1001
2025-06-05 12:09 - 2025-04-17 14:28 - 000003354 _____ C:\WINDOWS\system32\Tasks\OmenInstallMonitorCustomEvent
2025-06-05 12:09 - 2025-04-17 14:28 - 000003294 _____ C:\WINDOWS\system32\Tasks\OmenOverlayCustomEvent
2025-06-05 12:09 - 2025-04-17 14:28 - 000003238 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-06-05 12:09 - 2025-04-17 14:28 - 000003152 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2025-06-05 12:09 - 2025-04-17 14:28 - 000003110 _____ C:\WINDOWS\system32\Tasks\OmenInstallMonitor-sid-S-1-5-21-110046478-510051192-1964495333-1001
2025-06-05 12:09 - 2025-04-17 14:28 - 000003084 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-110046478-510051192-1964495333-1001
2025-06-05 12:09 - 2025-04-17 14:28 - 000003058 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-110046478-510051192-1964495333-1001
2025-06-05 12:09 - 2025-04-17 14:28 - 000003050 _____ C:\WINDOWS\system32\Tasks\OmenOverlay-sid-S-1-5-21-110046478-510051192-1964495333-1001
2025-06-05 12:09 - 2025-04-17 14:28 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2025-06-05 12:09 - 2025-04-17 14:28 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2025-06-05 12:09 - 2025-04-17 14:28 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2025-06-05 12:09 - 2025-04-17 14:28 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2025-06-05 12:09 - 2025-04-17 14:28 - 000002914 _____ C:\WINDOWS\system32\Tasks\OmenInstallMonitor
2025-06-05 12:09 - 2025-04-17 14:28 - 000002914 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2025-06-05 12:09 - 2025-04-17 14:28 - 000002854 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-110046478-510051192-1964495333-1001
2025-06-05 12:09 - 2025-04-17 14:28 - 000002854 _____ C:\WINDOWS\system32\Tasks\OmenOverlay
2025-06-05 12:09 - 2025-04-17 14:28 - 000002850 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-110046478-510051192-1964495333-500
2025-06-05 12:09 - 2025-04-17 14:28 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2025-06-05 12:09 - 2024-04-01 03:24 - 000000000 ____D C:\WINDOWS\INF
2025-06-05 11:54 - 2022-12-27 12:57 - 000000000 ____D C:\Users\prikr\AppData\Local\babl-0.1
2025-06-05 11:37 - 2022-12-27 10:14 - 000000000 ___SD C:\Users\prikr\AppData\Roaming\Microsoft\Credentials
2025-06-05 11:09 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-06-05 10:28 - 2025-04-18 01:14 - 001707676 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-06-05 08:33 - 2024-04-01 03:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-06-05 08:03 - 2025-04-17 14:25 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-06-05 07:54 - 2022-12-27 10:20 - 000000000 ____D C:\Users\prikr\AppData\Local\D3DSCache
2025-06-05 07:53 - 2024-04-01 03:26 - 000000000 ___HD C:\Program Files\WindowsApps
2025-06-05 07:53 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-06-05 07:45 - 2025-02-02 06:34 - 000000000 ____D C:\Users\prikr\AppData\Roaming\audacity
2025-06-05 07:40 - 2022-12-27 14:54 - 000000000 ____D C:\Program Files\NordUpdater
2025-06-05 07:40 - 2022-12-27 10:14 - 000000000 ____D C:\Users\prikr\AppData\Local\Packages
2025-06-05 07:40 - 2022-06-30 21:01 - 000002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-06-05 07:39 - 2023-09-23 13:18 - 000000000 ____D C:\Users\prikr\AppData\Local\OGH
2025-06-04 14:23 - 2022-11-22 18:48 - 000000000 ____D C:\ProgramData\NVIDIA
2025-06-04 13:13 - 2022-12-27 13:17 - 000002180 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2025-06-04 08:48 - 2022-12-28 13:24 - 000000000 ____D C:\Users\prikr\AppData\Local\gtk-2.0
2025-06-04 08:34 - 2025-04-17 14:28 - 000000000 ____D C:\WINDOWS\system32\Tasks\Hewlett-Packard
2025-06-03 22:17 - 2025-04-17 14:28 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-06-03 22:17 - 2025-04-17 14:27 - 000001752 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2025-06-03 22:17 - 2025-04-17 14:25 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2025-06-03 22:17 - 2025-03-20 07:56 - 000000000 ____D C:\ProgramData\Avast Software
2025-06-03 22:17 - 2024-04-01 03:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2025-06-03 22:17 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\ServiceState
2025-06-03 22:17 - 2024-02-28 05:45 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2025-06-03 22:17 - 2022-06-30 21:01 - 000012288 ___SH C:\DumpStack.log.tmp
2025-06-03 17:02 - 2024-04-01 03:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-06-03 14:24 - 2025-04-17 14:28 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2025-06-03 14:24 - 2024-02-28 05:45 - 000001072 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2025-06-03 12:36 - 2022-08-13 07:09 - 000000000 ____D C:\Program Files\Microsoft Office
2025-06-03 12:23 - 2025-03-20 07:56 - 001272896 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswSP.sys
2025-06-03 12:23 - 2025-03-20 07:56 - 000881760 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswSnx.sys
2025-06-03 12:23 - 2025-03-20 07:56 - 000570976 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2025-06-03 12:23 - 2025-03-20 07:56 - 000392264 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswVmm.sys
2025-06-03 12:23 - 2025-03-20 07:56 - 000390744 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2025-06-03 12:23 - 2025-03-20 07:56 - 000297568 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2025-06-03 12:23 - 2025-03-20 07:56 - 000281184 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2025-06-03 12:23 - 2025-03-20 07:56 - 000244320 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswArPot.sys
2025-06-03 12:23 - 2025-03-20 07:56 - 000092256 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2025-06-03 12:23 - 2025-03-20 07:56 - 000085088 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2025-06-03 12:23 - 2025-03-20 07:56 - 000072288 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2025-06-03 12:23 - 2025-03-20 07:56 - 000029792 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswKbd.sys
2025-06-03 12:23 - 2025-03-20 07:56 - 000021088 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2025-06-02 19:51 - 2022-12-27 10:22 - 000002386 _____ C:\Users\prikr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-06-02 18:48 - 2022-12-27 10:24 - 000002254 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-06-02 11:20 - 2025-03-20 07:57 - 000000000 ____D C:\Users\prikr\AppData\Local\AVAST Software
2025-05-28 06:09 - 2022-12-27 10:31 - 000000000 ____D C:\Users\prikr\AppData\Roaming\Zoom
2025-05-27 10:09 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2025-05-27 10:00 - 2025-03-20 07:58 - 000002451 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2025-05-27 10:00 - 2025-03-20 07:58 - 000002416 _____ C:\Users\Public\Desktop\Avast Secure Browser.lnk
2025-05-26 10:34 - 2025-04-16 08:59 - 000000000 ____D C:\Users\prikr
2025-05-22 09:19 - 2022-06-30 21:01 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-05-18 19:26 - 2022-06-30 21:02 - 000000000 ____D C:\ProgramData\Packages
2025-05-16 22:10 - 2024-03-26 07:06 - 000000000 ____D C:\VNTI Database
2025-05-14 08:45 - 2025-04-17 14:25 - 000493432 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-05-14 08:44 - 2025-04-16 08:50 - 000000000 ____D C:\WINDOWS\InboxApps
2025-05-14 08:44 - 2024-04-01 04:08 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2025-05-14 08:44 - 2024-04-01 03:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-05-14 08:44 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\UUS
2025-05-14 08:44 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2025-05-14 08:44 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-05-14 08:44 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2025-05-14 08:44 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-05-14 08:44 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\SystemResources
2025-05-14 08:44 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\SystemApps
2025-05-14 08:44 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2025-05-14 08:44 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2025-05-14 08:44 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\setup
2025-05-14 08:44 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2025-05-14 08:44 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-05-14 08:44 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2025-05-14 08:44 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2025-05-14 08:44 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-05-14 08:44 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2025-05-14 08:44 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-05-14 08:44 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-05-14 08:44 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\Provisioning
2025-05-14 08:44 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-05-13 18:45 - 2022-12-28 01:34 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-05-13 18:27 - 2022-12-28 01:34 - 214836568 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2025-05-13 16:40 - 2025-04-17 14:29 - 003369984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-05-12 17:35 - 2022-12-27 12:58 - 000000000 ____D C:\Users\prikr\AppData\Local\CrashDumps
2025-05-11 00:34 - 2025-02-24 07:24 - 000000000 ____D C:\Users\prikr\Documents\lab
2025-05-10 06:53 - 2025-03-17 17:59 - 000000000 ____D C:\Users\prikr\Documents\pod

==================== Files in the root of some directories ========

2025-06-05 11:53 - 2025-06-05 11:53 - 000033160 _____ () C:\Users\prikr\AppData\Local\recently-used.xbel

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================