Fixlog did not attach. Please try again. to attach it.
Also the
Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!
Fixlog did not attach. Please try again. to attach it.
Also the
Fixlog attached
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 24-06-2022 01
Ran by ttbcs (administrator) on LAPTOP-TRAVIS (HP HP Pavilion Laptop 15-ck0xx) (28-06-2022 17:25:26)
Running from C:\Users\ttbcs\OneDrive\Desktop
Loaded Profiles: ttbcs
Platform: Microsoft Windows 11 Home Version 21H2 22000.778 (X64) Language: English (United States)
Default browser: Edge
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe ->) (McAfee, Inc. -> McAfee LLC.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe ->) (McAfee, Inc. -> McAfee, LLC) C:\Windows\System32\mfevtps.exe
(C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHOST.exe
(C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\Common Files\McAfee\ModuleCore\ProtectedModuleHost.exe
(C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\MfeAV\MfeAVSvc.exe
(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\MSC\MfeBrowserHost.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\browserhost.exe
(C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_421.20070.425.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\103.0.1264.37\msedgewebview2.exe <6>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler64.exe
(Intel® pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki126950.inf_amd64_fa7f56314967630d\igfxEM.exe
(Intel\DPTF\esif_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\dptf_helper.exe
(McAfee, LLC -> McAfee, LLC) C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <10>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (HP Inc. -> HP) C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
(services.exe ->) (HP Inc. -> HP) C:\Windows\System32\hpservice.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_fddb643595e0b8d0\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(services.exe ->) (Intel® Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Intel® pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki126950.inf_amd64_fa7f56314967630d\igfxCUIService.exe
(services.exe ->) (Intel® pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki126950.inf_amd64_fa7f56314967630d\IntelCpHDCPSvc.exe
(services.exe ->) (Intel® pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki126950.inf_amd64_fa7f56314967630d\IntelCpHeciSvc.exe
(services.exe ->) (Intel® Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Intel® Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Intel® Wireless Connectivity Solutions -> Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe ->) (Intel® Wireless Connectivity Solutions -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel® Wireless Connectivity Solutions -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe ->) (McAfee, Inc. -> McAfee, LLC) C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\Common Files\McAfee\CSP\5.0.112.0\McCSPServiceHost.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe <3>
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\Common Files\McAfee\PEF\CORE\PEFService.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\Common Files\McAfee\VSCore_21_9\mcapexe.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(services.exe ->) (WildTangent, Inc. -> ) C:\Program Files (x86)\WildTangent Games\Integration\WildTangentHelperService.exe
(svchost.exe ->) (HP Inc. -> ) C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe
(svchost.exe ->) (HP Inc. -> HP Development Company, L.P.) C:\Program Files (x86)\HP\HP CoolSense\CoolSense.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_421.20070.425.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe
(svchost.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [701984 2017-07-13] (HP Inc. -> HP Inc.)
HKLM-x32\...\Run: [HPRadioMgr] => C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe [324600 2017-04-25] (HP Inc. -> HP)
HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [103032624 2021-03-12] (Microsoft Corporation -> Microsoft Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-19\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2632072 2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2632072 2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-337212924-4266545201-662137970-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2632072 2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-337212924-4266545201-662137970-1001\...\Run: [MicrosoftEdgeAutoLaunch_DB75890BB2C6219E955F6B80A91E685F] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3601824 2022-06-22] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-337212924-4266545201-662137970-1002\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2632072 2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-337212924-4266545201-662137970-1002\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [7202072 2022-06-04] (Adobe Inc. -> Adobe Systems Incorporated)
HKLM\...\Windows x64\Print Processors\Canon TR8500 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDDL.DLL [482816 2019-01-10] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ FAX Language Monitor TR8500 series: CNCALDL.DLL
HKLM\...\Print\Monitors\Canon BJ Language Monitor TR8500 series: C:\WINDOWS\system32\CNMLMDL.DLL [1302016 2019-01-10] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\102.0.5005.115\Installer\chrmstp.exe [2022-06-14] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {013176EB-AE42-492E-812E-B910443B7FD2} - System32\Tasks\HPEA3JOBS => C:\Program [Argument = Files\HP\HP ePrint\hpeprint.exe /CheckJobs]
Task: {104F4244-1DF3-4ABD-BBD1-0F1F5A8785D3} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23246768 2022-06-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {12D91D6A-C8C9-4065-9929-4AD7E19862EC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154456 2021-08-04] (Google LLC -> Google LLC)
Task: {17777C60-E9CB-4CAF-AEBB-0251373F9665} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115624 2022-06-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {17D867CA-B98E-45FC-90EB-882368593357} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-337212924-4266545201-662137970-1002 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4214152 2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {18B08C0D-A867-43A9-B2C4-9BC37447E3F3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154456 2021-08-04] (Google LLC -> Google LLC)
Task: {36F90AEB-2128-4075-AF24-B40D0E6DEF27} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-337212924-4266545201-662137970-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4214152 2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {3A370D7E-E583-49B1-A69A-E7E23C456DAD} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [198696 2017-04-07] (HP Inc. -> HP Inc.)
Task: {4B4F7DC3-6C03-4E74-BDE5-A328C7785FC5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1080168 2017-04-07] (HP Inc. -> HP Inc.)
Task: {4F010BC0-A0FA-4093-B13D-DBD97C8C23ED} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [107368 2017-04-07] (HP Inc. -> HP Inc.)
Task: {5149CB27-897F-4FBA-9976-47A23F3DE188} - System32\Tasks\HPCeeScheduleForTanya => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [99208 2016-06-24] (Hewlett-Packard Company -> HP Inc.)
Task: {53779D08-CDB7-419A-8D00-DE67E8097A17} - System32\Tasks\McAfee\McAfee Idle Detection Task => {ABCDCA3B-DE6B-5A7C-B132-6D7CBA63E5C5} C:\Program Files\Common Files\McAfee\TaskScheduler\McAMTaskAgent.exe [1074608 2022-01-11] (McAfee, LLC -> McAfee, LLC)
Task: {548D43B4-E608-4B33-8C5A-F367FE72E5C7} - System32\Tasks\HPJumpStartLaunch => C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe [459680 2017-09-12] (HP Inc. -> )
Task: {66AC8383-083B-4268-A72A-5F27934A8B64} - System32\Tasks\HP\HP CoolSense\HP CoolSense Start at Logon => C:\Program Files (x86)\HP\HP CoolSense\CoolSense.exe [1362464 2017-03-13] (HP Inc. -> HP Development Company, L.P.)
Task: {6BA16330-12C1-4306-A493-6B9B743D5ABF} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [6470640 2022-06-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {6D632E8E-4CB4-4735-A0D1-CB29AD7CCF63} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [208744 2017-04-07] (HP Inc. -> HP Inc.)
Task: {75A31524-25C5-4057-8841-10C78DE39F54} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {76136C7C-A4D4-4AF7-A1CA-E88BD8C6BF92} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1487392 2017-04-07] (HP Inc. -> HP Inc.)
Task: {7C47A020-A5EF-452F-A68F-14136D9E22B8} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [688560 2022-06-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {7DD34EAB-60F8-4462-8F5F-B125C45BC6D0} - System32\Tasks\McAfee Remediation (Prepare) => C:\Program Files\Common Files\AV\McAfee VirusScan\upgrade.exe [4724096 2022-01-06] (McAfee, LLC -> McAfee, LLC)
Task: {7F73E3B6-609B-4AA4-A0C6-492E7F9626CE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1487392 2017-04-07] (HP Inc. -> HP Inc.)
Task: {8D7C9A8C-E3FC-48FA-86A6-65681479C1D2} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115624 2022-06-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {91A048DF-1E15-47A1-B8CD-A3ADE20B55E5} - System32\Tasks\McAfeeLogon => C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe [758352 2022-01-19] (McAfee, LLC -> McAfee, LLC)
Task: {931F3792-F176-4446-867F-D86D1A2446A2} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1080168 2017-04-07] (HP Inc. -> HP Inc.)
Task: {965B8D79-6CC2-4F70-8EAE-230CF22103B3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [6470640 2022-06-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {9F034951-009B-422F-B80A-4E19D2769355} - System32\Tasks\McAfee\DAD.Execute.Updates => C:\Program Files\Common Files\McAfee\DynamicAppDownloader\1.7.104\DADUpdater.exe [4089168 2022-02-08] (McAfee, LLC -> McAfee, LLC)
Task: {A161D7E6-0E67-43B4-A6BC-A6D22AF0C7A1} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_TH1AF2R2M7 => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1080168 2017-04-07] (HP Inc. -> HP Inc.)
Task: {A221A482-5031-4077-B48A-23586BE20F6A} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {AC866CF1-D83B-4EB5-8A9C-FA6B02B5B007} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [42144 2022-05-03] (HP Inc. -> HP Inc.)
Task: {BD66A002-AE44-4F4B-9A4C-AC1F67B2C6FD} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23246768 2022-06-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {C0FC9877-85FB-4B81-9404-792F97CB00A8} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-337212924-4266545201-662137970-1004 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4214152 2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {C3FA3CBD-74D0-434F-A1CB-6975EE3B47DD} - System32\Tasks\HPCeeScheduleForttbcs => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [99208 2016-06-24] (Hewlett-Packard Company -> HP Inc.)
Task: {C8BCBBF9-70EE-43AC-80F3-0602821DA1C6} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-18] (Adobe Inc. -> Adobe Inc.)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (No File)
Task: {CD660808-C3AE-4C23-B8AB-C076B734A7ED} - System32\Tasks\McAfee\McAfee Auto Maintenance Task Agent => {ABCECA3B-EA5A-496B-A021-5C6BAB365E5C} C:\Program Files\Common Files\McAfee\TaskScheduler\McAMTaskAgent.exe [1074608 2022-01-11] (McAfee, LLC -> McAfee, LLC)
Task: {CEB2F4B3-EE58-40E7-9D6E-8B153FDB458A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [625512 2017-04-06] (HP Inc. -> HP Inc.)
Task: {D3FE27A7-F189-405D-9849-3A68FD8F92FA} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [42144 2022-05-03] (HP Inc. -> HP Inc.)
Task: {EAC37244-69B5-43AB-B20F-E5E94CE34593} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4214152 2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {F307EE6B-7D1E-4E6F-9F5B-8134FD6E588D} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9269296 2018-10-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {FDE141E2-85E9-450B-ABA6-F1AFBB3C9EE4} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [26968 2021-10-06] (Garmin International, Inc. -> )
Task: {FE4B675E-C37B-422E-A83D-3DF64F512E3D} - System32\Tasks\HPAudioSwitch => C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe [1644960 2017-02-02] (HP Inc. -> HP Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\HPCeeScheduleForTanya.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForttbcs.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{e1f5879b-723a-4aeb-ac15-a3264a5d820f}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\ttbcs\AppData\Local\Microsoft\Edge\User Data\Default [2022-06-27]
Edge Extension: (Google Translate) - C:\Users\ttbcs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2022-04-02]
Edge Extension: (Audio Equalizer) - C:\Users\ttbcs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ahikmoihohidpfjdmmdodfhnmjipmpci [2022-01-29]
Edge Extension: (DuckDuckGo) - C:\Users\ttbcs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\caoacbimdbbljakfhgikoodekdnlcgpk [2022-06-27]
Edge Extension: (Ghostery – Privacy Ad Blocker) - C:\Users\ttbcs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fclbdkbhjlgkbpfldjodgjncejkkjcme [2022-06-27]
Edge Extension: (McAfee® WebAdvisor) - C:\Users\ttbcs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fdhgeoginicibhagdmblfikbgbkahibd [2022-06-27]
Edge Extension: (Hope Chest) - C:\Users\ttbcs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gjneklbanpnnjdeddbnkkgeljkhpblhp [2022-01-29]
Edge Extension: (Cisco Webex Extension) - C:\Users\ttbcs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ikdddppdhmjcdfgilpnbkdeggoiicjgo [2022-01-29]
Edge Extension: (Bitwarden - Free Password Manager) - C:\Users\ttbcs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jbkfoedolllekgbhcbcoahefnbanhhlh [2022-06-27]
Edge Extension: (McAfee® Web Boost) - C:\Users\ttbcs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\lamehkegphbbfdailghaeeleoajilfho [2022-01-29]
Edge Extension: (Okta Browser Plugin) - C:\Users\ttbcs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ncoafaeidnkeafiehpkfoeklhajkpgij [2022-06-27]
Edge Extension: (AdBlock — best ad blocker) - C:\Users\ttbcs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2022-05-17]
Edge Extension: (uBlock Origin) - C:\Users\ttbcs\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\odfafepnkmbhccpbejgmiehpchacaeak [2022-05-17]
FireFox:
========
FF DefaultProfile: 2p08clz4.default
FF ProfilePath: C:\Users\ttbcs\AppData\Roaming\Mozilla\Firefox\Profiles\2p08clz4.default [2021-12-08]
FF ProfilePath: C:\Users\ttbcs\AppData\Roaming\Mozilla\Firefox\Profiles\g0yh7lll.default-release [2022-06-28]
FF Extension: (Facebook Container) - C:\Users\ttbcs\AppData\Roaming\Mozilla\Firefox\Profiles\g0yh7lll.default-release\Extensions\@contain-facebook.xpi [2022-04-02]
FF Extension: (Firefox Multi-Account Containers) - C:\Users\ttbcs\AppData\Roaming\Mozilla\Firefox\Profiles\g0yh7lll.default-release\Extensions\@testpilot-containers.xpi [2022-05-11]
FF Extension: (Cookie AutoDelete) - C:\Users\ttbcs\AppData\Roaming\Mozilla\Firefox\Profiles\g0yh7lll.default-release\Extensions\[email protected] [2022-06-24]
FF Extension: (Open in Reader View) - C:\Users\ttbcs\AppData\Roaming\Mozilla\Firefox\Profiles\g0yh7lll.default-release\Extensions\[email protected] [2021-08-09]
FF Extension: (Privacy Badger) - C:\Users\ttbcs\AppData\Roaming\Mozilla\Firefox\Profiles\g0yh7lll.default-release\Extensions\[email protected] [2021-12-04]
FF Extension: (DuckDuckGo Privacy Essentials) - C:\Users\ttbcs\AppData\Roaming\Mozilla\Firefox\Profiles\g0yh7lll.default-release\Extensions\[email protected] [2022-06-24]
FF Extension: (Bitwarden - Free Password Manager) - C:\Users\ttbcs\AppData\Roaming\Mozilla\Firefox\Profiles\g0yh7lll.default-release\Extensions\{446900e4-71c2-419f-a6a7-df9c091e268b}.xpi [2022-06-24]
FF Extension: (Eno® from Capital One®) - C:\Users\ttbcs\AppData\Roaming\Mozilla\Firefox\Profiles\g0yh7lll.default-release\Extensions\{4d5b7a5e-5232-9e45-97f4-f8e1ca2626e5}.xpi [2022-05-11]
FF Extension: (McAfee® WebAdvisor) - C:\Users\ttbcs\AppData\Roaming\Mozilla\Firefox\Profiles\g0yh7lll.default-release\Extensions\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}.xpi [2022-06-24] [UpdateUrl:hxxps://sadownload.mcafee.com/products/SA/Win/xpi/webadvisor/update.json]
FF Extension: (Audio Equalizer) - C:\Users\ttbcs\AppData\Roaming\Mozilla\Firefox\Profiles\g0yh7lll.default-release\Extensions\{63d150c4-394c-4275-bc32-c464e76a891c}.xpi [2022-01-26]
FF Extension: (gray leaf) - C:\Users\ttbcs\AppData\Roaming\Mozilla\Firefox\Profiles\g0yh7lll.default-release\Extensions\{979aae3a-31db-479d-b7d5-95054b5a33ff}.xpi [2021-08-09]
FF Extension: (User-Agent Switcher and Manager) - C:\Users\ttbcs\AppData\Roaming\Mozilla\Firefox\Profiles\g0yh7lll.default-release\Extensions\{a6c4a591-f1b2-4f03-b3ff-767e5bedf4e7}.xpi [2022-06-24]
FF Extension: (Delete browsing data directly from the browser toolbar. Clear cookies, history and cache with a single click.) - C:\Users\ttbcs\AppData\Roaming\Mozilla\Firefox\Profiles\g0yh7lll.default-release\Extensions\{ce9f4b1f-24b8-4e9a-9051-b9e472b1b2f2}.xpi [2021-08-09]
FF Extension: (DownThemAll!) - C:\Users\ttbcs\AppData\Roaming\Mozilla\Firefox\Profiles\g0yh7lll.default-release\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2022-06-24]
FF Extension: (Linen Grey) - C:\Users\ttbcs\AppData\Roaming\Mozilla\Firefox\Profiles\g0yh7lll.default-release\Extensions\{f9435bf9-8040-465e-9b72-3eb1fe0f8409}.xpi [2021-08-09]
FF Plugin: @mcafee.com/MSC,version=10 -> C:\Program Files\McAfee\MSC\npMcSnFFPl64.dll [2022-01-26] (McAfee, LLC -> )
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-06-04] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> C:\Program Files (x86)\McAfee\MSC\npMcSnFFPl.dll [2022-01-26] (McAfee, LLC -> )
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2022-03-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-03-08] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR Profile: C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default [2022-06-27]
CHR HomePage: Default -> hxxps://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Extension: (Google Translate) - C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2022-04-02]
CHR Extension: (Slides) - C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-08-07]
CHR Extension: (Audio Equalizer) - C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahikmoihohidpfjdmmdodfhnmjipmpci [2022-01-26]
CHR Extension: (Duolingo on the Web) - C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiahmijlpehemcpleichkcokhegllfjl [2021-08-07]
CHR Extension: (Docs) - C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-08-07]
CHR Extension: (Google Drive) - C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-08-07]
CHR Extension: (YouTube) - C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-08-07]
CHR Extension: (Color Picker) - C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default\Extensions\cbapocmbjilkikplhmkhhjjhmmlohffe [2022-04-02]
CHR Extension: (Google News) - C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default\Extensions\dllkocilcinkggkchnjgegijklcililc [2021-08-07]
CHR Extension: (Sheets) - C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-08-07]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2022-06-07]
CHR Extension: (Google Docs Offline) - C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-04-02]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2022-06-07]
CHR Extension: (Hope Chest) - C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjneklbanpnnjdeddbnkkgeljkhpblhp [2021-10-22]
CHR Extension: (Okta Browser Plugin) - C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default\Extensions\glnpjglilkicbckjpbgcfkogebgllemb [2022-06-07]
CHR Extension: (Cisco Webex Extension) - C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlhmfgmfgeifomenelglieieghnjghma [2022-01-26]
CHR Extension: (McAfee® Web Boost) - C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default\Extensions\klekeajafkkpokaofllcadenjdckhinm [2022-01-22]
CHR Extension: (Ghostery – Privacy Ad Blocker) - C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2022-06-07]
CHR Extension: (Chrome Web Store Payments) - C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-08-07]
CHR Extension: (Bitwarden - Free Password Manager) - C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default\Extensions\nngceckbapebfimnlniiiahkandclblb [2022-06-07]
CHR Extension: (TypingClub) - C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default\Extensions\obdbgibnhfcjmmpfijkpcihjieedpfah [2021-08-07]
CHR Extension: (Weather Underground) - C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjejbgheonogbpfkkjigbmahaljipoej [2021-08-07]
CHR Extension: (Gmail) - C:\Users\ttbcs\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-08-07]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM\...\Chrome\Extension: [klekeajafkkpokaofllcadenjdckhinm]
CHR HKU\S-1-5-21-337212924-4266545201-662137970-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [klekeajafkkpokaofllcadenjdckhinm]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-18] (Adobe Inc. -> Adobe Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11988384 2022-06-19] (Microsoft Corporation -> Microsoft Corporation)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncHelper.exe [3374472 2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
R2 HPJumpStartBridge; c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [472576 2017-09-12] (HP Inc. -> HP Inc.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [223904 2022-05-03] (HP Inc. -> HP Inc.)
R3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1077752 2016-09-28] (HP Inc. -> HP)
R2 hpsrv; C:\windows\system32\Hpservice.exe [38752 2016-09-26] (HP Inc. -> HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [33640 2017-04-07] (HP Inc. -> HP Inc.)
R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [628768 2017-07-13] (HP Inc. -> HP Inc.)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [808728 2022-06-23] (McAfee, LLC -> McAfee, LLC)
R2 McAPExe; C:\Program Files\Common Files\McAfee\VSCore_21_9\McApExe.exe [791664 2022-01-19] (McAfee, LLC -> McAfee, LLC)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\5.0.112.0\\McCSPServiceHost.exe [2671464 2022-01-12] (McAfee, LLC -> McAfee, LLC)
S3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe [1242112 2021-09-24] (McAfee, Inc. -> McAfee, LLC)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe [1242112 2021-09-24] (McAfee, Inc. -> McAfee, LLC)
R3 mfevtp; C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe [1242112 2021-09-24] (McAfee, Inc. -> McAfee, LLC)
R2 ModuleCoreService; C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe [1676304 2022-01-18] (McAfee, LLC -> McAfee, LLC)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\22.121.0605.0002\OneDriveUpdaterService.exe [3812744 2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
R2 PEFService; C:\Program Files\Common Files\McAfee\PEF\CORE\PEFService.exe [4310552 2022-01-18] (McAfee, LLC -> McAfee, LLC)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\NisSrv.exe [2909208 2022-02-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WildTangentHelper; C:\Program Files (x86)\WildTangent Games\Integration\WildTangentHelperService.exe [1689984 2022-03-29] (WildTangent, Inc. -> )
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2201.10-0\MsMpEng.exe [128376 2022-02-11] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
R3 cfwids; C:\WINDOWS\System32\drivers\cfwids.sys [74752 2021-09-28] (McAfee, Inc. -> McAfee, LLC)
S3 DSI_SiUSBXp_3_1; C:\WINDOWS\system32\drivers\DSI_SiUSBXp_3_1.sys [16384 2007-09-06] (Microsoft Windows Hardware Compatibility Publisher -> Silicon Laboratories)
S3 Hsp; C:\WINDOWS\System32\drivers\Hsp.sys [111960 2022-05-12] (Microsoft Windows -> Microsoft Corporation)
R3 mfeaack; C:\WINDOWS\System32\drivers\mfeaack.sys [574464 2021-09-28] (McAfee, Inc. -> McAfee, LLC)
R3 mfeavfk; C:\WINDOWS\System32\drivers\mfeavfk.sys [390656 2021-09-28] (McAfee, Inc. -> McAfee, LLC)
S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [90048 2021-09-28] (Microsoft Windows Early Launch Anti-malware Publisher -> McAfee, LLC)
R3 mfefirek; C:\WINDOWS\System32\drivers\mfefirek.sys [526336 2021-09-28] (McAfee, Inc. -> McAfee, LLC)
R0 mfehidk; C:\WINDOWS\System32\drivers\mfehidk.sys [1088512 2021-09-28] (McAfee, Inc. -> McAfee, LLC)
R3 mfencbdc; C:\WINDOWS\System32\DRIVERS\mfencbdc.sys [638464 2021-09-16] (McAfee, Inc. -> McAfee LLC.)
S3 mfencrk; C:\WINDOWS\System32\DRIVERS\mfencrk.sys [110080 2021-09-16] (McAfee, Inc. -> McAfee LLC.)
R3 mfeplk; C:\WINDOWS\System32\drivers\mfeplk.sys [118784 2021-09-28] (McAfee, Inc. -> McAfee, LLC)
R0 mfewfpk; C:\WINDOWS\System32\drivers\mfewfpk.sys [256512 2021-09-28] (McAfee, Inc. -> McAfee, LLC)
S3 rspLLL; C:\WINDOWS\System32\DRIVERS\rspLLL64.sys [27744 2021-03-09] (Daniel Terhell -> Resplendence Software Projects Sp.)
S3 usbscan; C:\WINDOWS\System32\drivers\usbscan.sys [77824 2021-06-05] (Microsoft Corporation) [File not signed]
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [48536 2022-02-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [438520 2022-02-11] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [90360 2022-02-11] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [37280 2021-11-23] (HP Inc. -> HP)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2022-06-27 21:13 - 2022-06-27 21:13 - 010064648 _____ (HP Inc.) C:\Users\ttbcs\Downloads\sp133177.exe
2022-06-25 15:48 - 2022-06-25 17:11 - 000000151 _____ C:\WINDOWS\restoro.ini
2022-06-25 15:48 - 2022-06-25 15:48 - 000932808 _____ (Restoro) C:\Users\ttbcs\Downloads\Restoro.exe
2022-06-25 15:46 - 2022-06-25 15:46 - 042696144 _____ (Intel Corporation) C:\Users\ttbcs\Downloads\WiFi-22.140.0-Driver64-Win10-Win11.exe
2022-06-25 12:58 - 2022-06-25 12:58 - 000000000 ____D C:\Users\ttbcs\AppData\Local\DBG
2022-06-25 12:58 - 2022-06-25 12:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LatencyMon
2022-06-25 12:58 - 2022-06-25 12:58 - 000000000 ____D C:\Program Files\LatencyMon
2022-06-25 12:58 - 2021-03-09 15:07 - 000027744 _____ (Resplendence Software Projects Sp.) C:\WINDOWS\system32\Drivers\rspLLL64.sys
2022-06-25 12:51 - 2022-06-25 12:51 - 000000844 _____ C:\Users\Public\Desktop\Speccy.lnk
2022-06-25 12:51 - 2022-06-25 12:51 - 000000000 ____D C:\Program Files\Speccy
2022-06-25 12:48 - 2022-06-27 20:59 - 000017498 _____ C:\junk.txt
2022-06-25 12:30 - 2022-06-25 12:30 - 000036208 _____ (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCEXP152.SYS
2022-06-24 16:08 - 2022-06-24 16:08 - 000015024 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-06-24 16:06 - 2022-06-24 16:06 - 000335872 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-06-24 15:49 - 2022-06-24 15:49 - 000000000 ___HD C:\$WinREAgent
2022-06-24 13:01 - 2022-06-28 17:26 - 000000000 ____D C:\FRST
2022-06-24 08:23 - 2022-06-24 08:24 - 000228423 _____ C:\Users\Tanya\Downloads\Dec Tanya Houston.pdf
2022-06-24 08:23 - 2022-06-24 08:24 - 000227002 _____ C:\Users\Tanya\Downloads\062322 Opposition to Petition.pdf
2022-06-19 19:11 - 2022-06-28 17:20 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-06-19 17:28 - 2022-06-19 17:28 - 000557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2022-06-19 17:28 - 2022-06-19 17:28 - 000485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2022-06-19 17:27 - 2022-06-19 17:27 - 000299008 _____ C:\WINDOWS\system32\EsclScan.dll
2022-06-19 17:27 - 2022-06-19 17:27 - 000180224 _____ C:\WINDOWS\system32\EsclProtocol.dll
2022-06-19 17:21 - 2022-06-19 17:21 - 000614400 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2022-06-13 20:49 - 2022-06-13 20:49 - 000000000 ____H C:\Users\Tanya\BITE3B4.tmp
2022-06-07 21:16 - 2022-06-07 21:16 - 001648640 _____ C:\Users\Tanya\OneDrive\Documents\Publication4.pub
2022-06-07 21:15 - 2022-06-07 21:15 - 000365568 _____ C:\Users\Tanya\OneDrive\Documents\Publication3.pub
2022-06-07 16:52 - 2022-06-07 16:52 - 029789466 _____ C:\Users\Tanya\Downloads\jettemplate_OZ815327.zip
2022-06-07 16:43 - 2022-06-07 16:43 - 001090701 _____ C:\Users\Tanya\Downloads\jettemplate_GB855378.pdf
2022-06-07 16:43 - 2022-06-07 16:43 - 001088958 _____ C:\Users\Tanya\Downloads\jettemplate_GB855378.zip
2022-06-06 13:42 - 2022-06-06 13:42 - 014911869 _____ C:\Users\Tanya\Downloads\jettemplate_WS806123 (1).zip
2022-06-06 13:31 - 2022-06-06 13:32 - 009296965 _____ C:\Users\Tanya\Downloads\jettemplate_DK707974.zip
2022-06-06 13:08 - 2022-06-06 13:08 - 004714777 _____ C:\Users\Tanya\Downloads\safari-favor-tags-2_629e5eb26b2245_72401996.pdf
2022-06-06 13:07 - 2022-06-06 13:07 - 003922921 _____ C:\Users\Tanya\Downloads\safari-favor-tags-2_629e5e81c15d83_00095621.pdf
2022-06-05 20:18 - 2022-06-05 20:18 - 002708043 _____ C:\Users\Tanya\Downloads\1PLEASEREAD.pdf
2022-06-05 20:16 - 2022-06-05 20:16 - 014914722 _____ C:\Users\Tanya\Downloads\jettemplate_WS806123.pdf
2022-06-05 20:11 - 2022-06-05 20:11 - 014911883 _____ C:\Users\Tanya\Downloads\jettemplate_WS806123.zip
2022-06-01 18:29 - 2022-06-01 18:29 - 000269089 _____ C:\Users\Tanya\Downloads\DownloadandPleaseRead-Corjl.pdf
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2022-06-28 17:28 - 2021-08-04 09:07 - 000000000 ____D C:\Program Files (x86)\Google
2022-06-28 17:21 - 2022-02-24 11:04 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-06-28 17:21 - 2021-06-05 05:10 - 000000000 ___HD C:\Program Files\WindowsApps
2022-06-28 17:21 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-06-28 17:20 - 2018-02-19 16:57 - 000000000 ____D C:\Users\ttbcs\AppData\LocalLow\Mozilla
2022-06-28 17:19 - 2021-08-04 08:49 - 000000000 ____D C:\Users\Tanya\AppData\Local\Packages
2022-06-28 17:19 - 2021-08-04 08:05 - 000000000 ____D C:\Users\ttbcs\AppData\Local\Packages
2022-06-28 17:16 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\SystemTemp
2022-06-28 17:15 - 2022-03-03 19:47 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2022-06-28 17:15 - 2022-03-03 19:45 - 000002080 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2022-06-28 17:15 - 2022-03-03 19:45 - 000002068 _____ C:\Users\Public\Desktop\Adobe Acrobat DC.lnk
2022-06-28 17:12 - 2021-12-07 06:45 - 000919394 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-06-28 17:12 - 2021-06-05 05:09 - 000000000 ____D C:\WINDOWS\INF
2022-06-28 17:09 - 2018-02-19 22:00 - 000000000 ___RD C:\Users\Tanya\OneDrive
2022-06-28 17:09 - 2018-02-19 14:47 - 000000000 ___RD C:\Users\ttbcs\OneDrive
2022-06-28 17:07 - 2018-02-19 21:52 - 000000000 __SHD C:\Users\Tanya\IntelGraphicsProfiles
2022-06-28 17:06 - 2021-06-05 05:10 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-06-28 17:06 - 2018-02-19 14:43 - 000000000 __SHD C:\Users\ttbcs\IntelGraphicsProfiles
2022-06-28 17:05 - 2021-12-07 07:13 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-06-28 17:05 - 2021-12-07 06:38 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-06-28 17:05 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\ServiceState
2022-06-28 17:05 - 2020-11-20 08:21 - 000012288 ___SH C:\DumpStack.log.tmp
2022-06-27 21:15 - 2021-06-05 05:01 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2022-06-27 21:13 - 2017-08-17 10:18 - 000000000 ____D C:\SWSetup
2022-06-27 20:28 - 2021-06-05 05:01 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-06-27 19:48 - 2021-12-07 07:13 - 000000000 ____D C:\WINDOWS\system32\Tasks\McAfee
2022-06-26 15:58 - 2021-08-03 23:14 - 000002283 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2022-06-26 15:58 - 2020-07-05 11:44 - 000002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-06-25 17:15 - 2021-09-29 17:55 - 000000000 ____D C:\Users\ttbcs\AppData\Local\D3DSCache
2022-06-25 15:47 - 2017-08-17 09:37 - 000000000 ____D C:\ProgramData\Package Cache
2022-06-25 11:55 - 2017-08-17 09:39 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2022-06-25 11:40 - 2021-12-07 06:38 - 000292696 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-06-24 20:46 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2022-06-24 20:46 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-06-24 20:46 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\SystemResources
2022-06-24 20:46 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-06-24 20:46 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2022-06-24 20:46 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-06-24 20:46 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\system32\appraiser
2022-06-24 20:45 - 2022-01-11 17:19 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-337212924-4266545201-662137970-1004
2022-06-24 20:45 - 2021-12-29 10:24 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-337212924-4266545201-662137970-1001
2022-06-24 20:45 - 2021-12-12 12:15 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-337212924-4266545201-662137970-1002
2022-06-24 20:45 - 2021-12-07 07:13 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2022-06-24 20:45 - 2021-09-29 19:00 - 000002139 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-06-24 20:45 - 2021-09-29 19:00 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2022-06-24 20:45 - 2021-06-05 05:10 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-06-24 20:45 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\ShellExperiences
2022-06-24 20:45 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\Provisioning
2022-06-24 20:45 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2022-06-24 20:45 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-06-24 16:06 - 2021-12-07 06:44 - 003101184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-06-24 12:40 - 2021-10-20 19:30 - 000000000 ____D C:\Users\ttbcs\AppData\Roaming\MuseScore
2022-06-24 08:39 - 2021-09-14 20:00 - 000000000 ____D C:\Users\Tanya\AppData\Local\D3DSCache
2022-06-23 17:34 - 2021-06-05 05:01 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2022-06-20 19:38 - 2021-08-09 17:41 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-06-20 10:42 - 2021-12-07 07:13 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-06-20 10:42 - 2021-08-09 17:41 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-06-19 18:29 - 2021-08-07 12:56 - 000000000 ____D C:\Program Files (x86)\McAfee
2022-06-19 18:28 - 2022-02-25 11:56 - 000000360 _____ C:\WINDOWS\Tasks\HPCeeScheduleForTanya.job
2022-06-19 18:28 - 2022-01-28 11:09 - 000000360 _____ C:\WINDOWS\Tasks\HPCeeScheduleForttbcs.job
2022-06-19 18:23 - 2021-06-05 06:17 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2022-06-19 18:23 - 2021-06-05 06:17 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2022-06-19 18:23 - 2021-06-05 05:10 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2022-06-19 18:23 - 2021-06-05 05:10 - 000000000 ___SD C:\WINDOWS\system32\F12
2022-06-19 18:23 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2022-06-19 18:23 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2022-06-19 18:23 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2022-06-19 18:23 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2022-06-19 18:23 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2022-06-19 18:23 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2022-06-19 18:23 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2022-06-19 18:23 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2022-06-19 18:23 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2022-06-19 18:23 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2022-06-19 18:23 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2022-06-19 18:23 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2022-06-19 18:23 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\system32\id-ID
2022-06-19 18:23 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2022-06-19 18:23 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\system32\et-EE
2022-06-19 18:23 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-06-19 18:23 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\system32\DDFs
2022-06-19 18:23 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2022-06-19 18:23 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\ShellComponents
2022-06-19 16:23 - 2021-08-09 17:40 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-06-19 16:17 - 2021-08-09 17:39 - 145918784 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-06-19 16:09 - 2022-01-28 11:09 - 000003252 _____ C:\WINDOWS\system32\Tasks\HPCeeScheduleForttbcs
2022-06-19 16:05 - 2017-08-17 09:42 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2022-06-19 15:51 - 2021-12-12 10:59 - 000003442 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d7eb71e786f83b
2022-06-19 15:51 - 2021-12-07 07:13 - 000003536 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-06-14 15:06 - 2021-08-04 09:07 - 000002254 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-06-14 15:06 - 2021-08-04 09:07 - 000002213 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2022-06-14 13:11 - 2021-06-05 05:10 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2022-06-13 20:58 - 2022-05-25 11:11 - 000000000 ___RD C:\Users\Tanya\OneDrive\Documents\Scanned Documents
2022-06-13 20:49 - 2022-02-25 11:56 - 000003252 _____ C:\WINDOWS\system32\Tasks\HPCeeScheduleForTanya
2022-06-13 20:49 - 2021-12-07 00:06 - 000000000 ____D C:\Users\Tanya
2022-06-09 21:22 - 2021-08-04 08:05 - 000000000 ____D C:\ProgramData\Packages
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-06-2022 01
Ran by ttbcs (28-06-2022 17:29:38)
Running from C:\Users\ttbcs\OneDrive\Desktop
Microsoft Windows 11 Home Version 21H2 22000.778 (X64) (2021-12-07 14:16:56)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
(If an entry is included in the fixlist, it will be removed.)
Administrator (S-1-5-21-337212924-4266545201-662137970-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-337212924-4266545201-662137970-503 - Limited - Disabled)
defaultuser1 (S-1-5-21-337212924-4266545201-662137970-1004 - Limited - Enabled) => C:\Users\defaultuser1.LAPTOP-QG2MJM8O
Guest (S-1-5-21-337212924-4266545201-662137970-501 - Limited - Disabled)
Tanya (S-1-5-21-337212924-4266545201-662137970-1002 - Administrator - Enabled) => C:\Users\Tanya
ttbcs (S-1-5-21-337212924-4266545201-662137970-1001 - Administrator - Enabled) => C:\Users\ttbcs
WDAGUtilityAccount (S-1-5-21-337212924-4266545201-662137970-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee VirusScan (Enabled - Up to date) {9D4501E6-72F6-2877-C789-89AF6F535B2C}
AV: McAfee VirusScan (Enabled - Up to date) {FE987762-0FB6-6BB6-1BF1-73F8ED8566FA}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Enabled) {C6A3F647-45D9-6AEE-30AE-DACD13562181}
FW: McAfee Firewall (Enabled) {A57E80C3-3899-292F-ECD6-209A91801C57}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov)
Adobe Acrobat DC (64-bit) (HKLM\...\{AC76BA86-1033-1033-7760-BC15014EA700}) (Version: 22.001.20142 - Adobe)
ANT Drivers Installer x64 (HKLM\...\{A894FC56-6753-44E0-AC2E-D7BEFC8E7B24}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Documentation Manager (HKLM\...\{2E843C78-FE5B-446C-A2AC-DE311FE1D78A}) (Version: 22.140.0.3 - Intel Corporation) Hidden
Elevated Installer (HKLM-x32\...\{6D8B91FF-05DE-4BB6-A293-D6B29A58D9AF}) (Version: 7.9.1.0 - Garmin Ltd or its subsidiaries) Hidden
Energy Star (HKLM\...\{5CB22648-35F8-41BC-9C35-1E41FE6E12A5}) (Version: 1.1.1 - HP Inc.)
Garmin Express (HKLM-x32\...\{71FC830C-545C-4F34-AE68-4F3073D6AF8C}) (Version: 7.9.1.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express (HKLM-x32\...\{cb52ee1f-2988-4cef-bc1c-1daa567cdf88}) (Version: 7.9.1.0 - Garmin Ltd or its subsidiaries)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 102.0.5005.115 - Google LLC)
HP 3D DriveGuard (HKLM-x32\...\{8F183B2E-D21D-4070-8132-DD39C3CBFA5C}) (Version: 6.0.41.1 - HP)
HP Audio Switch (HKLM-x32\...\{BC852AA8-58F6-4F07-ACB1-7377E52CA4F3}) (Version: 1.0.150.0 - HP Inc.)
HP CoolSense (HKLM-x32\...\{AC154691-D9B6-4CD9-BB9B-ACDAF61367E5}) (Version: 2.22.1 - HP Inc.)
HP Customer Experience Enhancements (HKLM-x32\...\{9720A595-3D2D-440E-9523-0B6F970745DD}) (Version: 6.0.11.1 - HP Inc.) Hidden
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
HP ePrint SW (HKLM\...\{20185BDA-D396-4C93-95C7-ECD0FB397FF7}) (Version: 5.3.22034 - HP Inc.) Hidden
HP ePrint SW (HKLM\...\{5BBB44D5-3CC0-4434-AA0C-5883B975E45E}) (Version: 5.3.22034 - HP Inc.) Hidden
HP ePrint SW (HKLM\...\{6884D818-9E0E-4984-A6CA-B17757DCB8FA}) (Version: 5.3.22034 - HP Inc.) Hidden
HP ePrint SW (HKLM\...\{F7E8A494-97B6-4786-9E2C-A42A082483EB}) (Version: 5.3.22034 - HP Inc.) Hidden
HP ePrint SW (HKLM-x32\...\{2889C948-F002-4992-815F-DBE0AFB5DC6E}) (Version: 5.3.22034 - HP Inc.) Hidden
HP ePrint SW (HKLM-x32\...\{54da9769-2364-4bd3-8139-6400500778b3}) (Version: 5.3.22034 - HP Inc.)
HP ePrint SW (HKLM-x32\...\{98AA8BB0-0C0A-411A-BB43-1265CA769155}) (Version: 5.3.22034 - HP Inc.) Hidden
HP JumpStart Apps (HKLM-x32\...\HP JumpStart Apps) (Version: 7.0.32 - HP Inc.)
HP JumpStart Bridge (HKLM-x32\...\{EB0912FF-C311-4E0F-A6B1-420FDD3C295E}) (Version: 1.3.0.407 - HP Inc.)
HP JumpStart Launch (HKLM-x32\...\{6A139049-EBB9-4076-8664-B468888E55A3}) (Version: 1.3.392.0 - HP Inc.)
HP Recovery Manager (HKLM-x32\...\{64BAA990-F1FC-4145-A7B1-E41FBBC9DA47}) (Version: 1.2.1510 - HP) Hidden
HP Registration Service (HKLM-x32\...\{EBF2C31B-E9A1-4929-BE35-6EBECF286110}) (Version: 1.0.0.30 - HP Inc.) Hidden
HP Support Assistant (HKLM-x32\...\{05F81C27-62A5-4A0C-8519-60CB66CF87C6}) (Version: 8.4.14.41 - HP Inc.)
HP Support Solutions Framework (HKLM-x32\...\{183BD477-774B-4700-B40B-EE43886E74D2}) (Version: 12.6.14.19 - HP Inc.)
HP System Event Utility (HKLM-x32\...\{ABE95EB9-5EA1-42A3-8009-BA7602127ED6}) (Version: 1.4.25 - HP Inc.)
HP Wireless Button Driver (HKLM-x32\...\{F5852AA8-30EA-495B-84B4-C2403C935D6F}) (Version: 1.1.19.1 - HP)
Intel® Chipset Device Software (HKLM\...\{94E05108-3E4E-4F2E-AC5F-33A1B22B779C}) (Version: 10.1.1.44 - Intel Corporation) Hidden
Intel® Chipset Device Software (HKLM-x32\...\{17408817-d415-4768-a160-ae6d46d6bdb0}) (Version: 10.1.1.44 - Intel® Corporation) Hidden
Intel® Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.3.10203.4295 - Intel Corporation)
Intel® Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1035 - Intel Corporation)
Intel® Management Engine Components (HKLM\...\{27FC885E-2456-434E-ACE8-46569962CB04}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel® Management Engine Components (HKLM\...\{ACCD589F-4082-473C-B5A6-2E0022D0DE61}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel® ME UninstallLegacy (HKLM\...\{E9B9A1A5-6398-4C99-8FDE-10794F6505C5}) (Version: 1.0.1.0 - Intel Corporation) Hidden
Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 22.20.16.4708 - Intel Corporation)
Intel® Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 15.7.0.1014 - Intel Corporation)
Intel® Rapid Storage Technology (HKLM\...\{ABDC630D-DC10-4991-9965-D683C8F4885D}) (Version: 15.7.0.1014 - Intel Corporation) Hidden
Intel® Trusted Connect Service Client (HKLM\...\{F6AA7E43-41A4-4304-BA96-A495C5788231}) (Version: 1.45.447.1 - Intel Corporation) Hidden
Intel® Wireless Bluetooth® (HKLM-x32\...\{559FA847-377D-4926-80A3-ED9E014D363A}) (Version: 19.60.0 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{ed5cef80-a339-45bd-8c06-514eaf785ca8}) (Version: 19.71.0 - Intel Corporation)
Intel® PROSet/Wireless WiFi Software (HKLM\...\{5E952F21-EFE4-47D8-9C8E-29AE9A2D75B7}) (Version: 19.71.0.1071 - Intel Corporation) Hidden
Intel® Software Installer (HKLM-x32\...\{b3bbf46b-6ffd-4f54-8d1f-26206cfe1739}) (Version: 22.140.0.3 - Intel Corporation) Hidden
IrfanView 4.58 (64-bit) (HKLM\...\IrfanView64) (Version: 4.58 - Irfan Skiljan)
LatencyMon 7.20 (HKLM\...\LatencyMon_is1) (Version: 7.20 - Resplendence Software Projects Sp.)
McAfee Multi Access - Total Protection (PC) (HKLM-x32\...\MSC) (Version: 16.0 R43 - McAfee, LLC)
Microsoft 365 Apps for enterprise - en-us (HKLM\...\O365ProPlusRetail - en-us) (Version: 16.0.15225.20288 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 103.0.1264.37 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 103.0.1264.37 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 22.121.0605.0002 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-337212924-4266545201-662137970-1001\...\Teams) (Version: 1.4.00.19572 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-337212924-4266545201-662137970-1002\...\Teams) (Version: 1.5.00.11163 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{6A2A8076-135F-4F55-BB02-DED67C8C6934}) (Version: 4.67.0.0 - Microsoft Corporation)
Microsoft VC++ redistributables repacked. (HKLM\...\{B00A8074-C8C0-48C9-B872-8CDC0ABEA33C}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft VC++ redistributables repacked. (HKLM-x32\...\{BA5D4378-D3B5-4D4A-BFB8-ABFBAF483465}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24123 (HKLM-x32\...\{2cbcedbb-f38c-48a3-a3e1-6c6fd821a7f4}) (Version: 14.0.24123.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 x64 Additional Runtime - 14.0.24123 (HKLM\...\{21134089-9B59-34C8-BE11-929D26AD5207}) (Version: 14.0.24123 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015 x64 Minimum Runtime - 14.0.24123 (HKLM\...\{FDBE9DB4-7A91-3A28-B27E-705EF7CFAE57}) (Version: 14.0.24123 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\...\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation)
Microsoft Visual C++ 2019 X86 Additional Runtime - 14.23.27820 (HKLM-x32\...\{86BE78D9-65A1-4E69-86F8-C1F5281F8553}) (Version: 14.23.27820 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.23.27820 (HKLM-x32\...\{00AC3934-26B4-406E-807C-1692AC7329EC}) (Version: 14.23.27820 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 en-US) (HKLM\...\Mozilla Firefox 101.0.1 (x64 en-US)) (Version: 101.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 90.0.2 - Mozilla)
MuseScore 3 (HKLM\...\{FF67E071-104C-4C42-9301-184442745671}) (Version: 3.6.2.548021803 - Werner Schweer and Others)
Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 8.1.4 - Notepad++ Team)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.15225.20150 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.15128.20178 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.15225.20288 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.12527.21986 - Microsoft Corporation) Hidden
Printer Registration (HKLM-x32\...\Canon EISRegistration) (Version: 1.8.0 - Canon Inc.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.370.154 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.16.323.2017 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8554 - Realtek Semiconductor Corp.)
Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform)
Synaptics ClickPad Driver (HKLM\...\SynTPDeinstKey) (Version: 19.5.10.75 - Synaptics Incorporated)
Teams Machine-Wide Installer (HKLM-x32\...\{39AF0813-FA7B-4860-ADBE-93B9B214B914}) (Version: 1.4.0.7174 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.16 - VideoLAN)
Vulkan Run Time Libraries 1.0.42.0 (HKLM\...\VulkanRT1.0.42.0) (Version: 1.0.42.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1-2) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
WebAdvisor by McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.725 - McAfee, LLC)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.1.1.17 - WildTangent)
WildTangent Helper (HKLM-x32\...\{A39303AB-4898-4F12-BAA0-0B8630F86DB4}) (Version: 5.0.0.305 - WildTangent) Hidden
Windows Driver Package - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Windows Driver Package - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
Windows PC Health Check (HKLM\...\{B1E7D0FD-7CFE-4E0C-A5DA-0F676499DB91}) (Version: 3.2.2110.14001 - Microsoft Corporation)
Zoom (HKU\S-1-5-21-337212924-4266545201-662137970-1001\...\ZoomUMX) (Version: 5.9.3 (3169) - Zoom Video Communications, Inc.)
Packages:
=========
Amazon -> C:\Program Files\WindowsApps\Amazon.com.Amazon_2018.519.2815.0_x64__343d40qqvtj1t [2021-08-04] (Amazon.com)
Bitwarden -> C:\Program Files\WindowsApps\8bitSolutionsLLC.bitwardendesktop_2022.5.1.0_x86__h4e712dmw3xyy [2022-06-19] (8bit Solutions LLC)
HP JumpStart -> C:\Program Files\WindowsApps\AD2F1837.HPJumpStart_1.3.407.0_x86__v10z8vjag6ke6 [2021-08-04] (HP Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_136.1.269.0_x64__v10z8vjag6ke6 [2022-05-11] (HP Inc.)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.13.5310.0_x64__8wekyb3d8bbwe [2022-06-19] (Microsoft Studios) [MS Ad]
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.98.1805.0_x64__mcm4njqhnhss8 [2022-02-23] (Netflix, Inc.)
Simple Solitaire -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.SimpleSolitaire_7.4.4.0_x64__kx24dqmazqk8j [2021-09-29] (Random Salad Games LLC)
Smartfriend by HP Care -> C:\Program Files\WindowsApps\AD2F1837.SmartfriendbyHPCare_1.1.13.0_x64__v10z8vjag6ke6 [2021-08-04] (HP Inc.)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.188.612.0_x86__zpdnekdrzrea0 [2022-06-23] (Spotify AB) [Startup Task]
WildTangent Games -> C:\Program Files\WindowsApps\WildTangentGames.63435CFB65F55_2.0.84.0_x64__qt5r5pa5dyg8m [2021-08-04] (WildTangent Games)
==================== Custom CLSID (Whitelisted): ==============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-337212924-4266545201-662137970-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\ttbcs\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.21105.1\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2021-08-21] (Notepad++ -> )
ContextMenuHandlers1: [McCtxMenuFrmWrk] -> {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} => C:\Program Files\McAfee\MSC\McCtxMenuFrmWrk.dll [2022-01-26] (McAfee, LLC -> McAfee, LLC)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-24] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\ki126950.inf_amd64_fa7f56314967630d\igfxDTCM.dll [2018-03-07] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [McCtxMenuFrmWrk] -> {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} => C:\Program Files\McAfee\MSC\McCtxMenuFrmWrk.dll [2022-01-26] (McAfee, LLC -> McAfee, LLC)
==================== Codecs (Whitelisted) ====================
==================== Shortcuts & WMI ========================
==================== Loaded Modules (Whitelisted) =============
2020-02-21 10:52 - 2020-02-21 10:52 - 008726016 _____ () [File not signed] C:\Program Files\WindowsApps\Amazon.com.Amazon_2018.519.2815.0_x64__343d40qqvtj1t\WindowsShoppingApp.dll
2022-06-19 18:45 - 2022-06-19 18:45 - 000160256 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\BRIDGECommon\c053aed297b95b2b5477724c30f3f835\BRIDGECommon.ni.dll
2022-06-19 18:47 - 2022-06-19 18:47 - 000120832 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\BridgeExtension\da884604f3abb1c40fd1e4bbebacc078\BridgeExtension.ni.dll
2022-06-19 18:47 - 2022-06-19 18:47 - 000370688 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\CleanStartController\e3b731c4bb498a6574bcbc7a26b30440\CleanStartController.ni.dll
2022-06-19 18:48 - 2022-06-19 18:48 - 000138240 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.IWs06dcaa36#\68d37933a82300fc7d9b4dde89cc0ccf\Interop.IWshRuntimeLibrary.ni.dll
2022-06-19 18:47 - 2022-06-19 18:47 - 000072704 _____ () [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\NativeInterop\9c61f962704c97d8be41484436a7c18b\NativeInterop.ni.dll
2022-06-19 18:48 - 2022-06-19 18:48 - 000134656 _____ (hardcodet.net) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Hardcodet.W6cab32f3#\3e9e7f37047b8d29c9cdcbcc64c6153a\Hardcodet.Wpf.TaskbarNotification.ni.dll
2021-08-07 13:13 - 2019-02-21 09:00 - 000078336 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll
2022-06-19 18:48 - 2022-06-19 18:48 - 001585664 _____ (Mark Heath) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\NAudio\48f11fe26d6d968501dd11d41d079301\NAudio.ni.dll
2022-06-19 18:46 - 2022-06-19 18:46 - 002306560 _____ (Newtonsoft) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Newtonsoft.Json\a57e88046e7a4d8108c8e9bc5655973c\Newtonsoft.Json.ni.dll
2022-06-19 18:48 - 2022-06-19 18:48 - 000792064 _____ (The Apache Software Foundation) [File not signed] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\log4net\a81497f61a9531caaa5246802e6607b5\log4net.ni.dll
==================== Alternate Data Streams (Whitelisted) ========
==================== Safe Mode (Whitelisted) ==================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ModuleCoreService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcapexe => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfemms => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeplk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeplk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ModuleCoreService => ""="Service"
==================== Association (Whitelisted) =================
==================== Internet Explorer (Whitelisted) ==========
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-337212924-4266545201-662137970-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-337212924-4266545201-662137970-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-337212924-4266545201-662137970-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-337212924-4266545201-662137970-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
SearchScopes: HKLM -> {FD8715C2-4BAA-45C2-B605-17DA681835BA} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {FD8715C2-4BAA-45C2-B605-17DA681835BA} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2022-04-05] (Microsoft Corporation -> Microsoft Corporation)
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2022-06-19] (McAfee, LLC -> McAfee, LLC)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2017-04-07] (HP Inc. -> HP Inc.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2022-03-08] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2022-06-19] (McAfee, LLC -> McAfee, LLC)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2017-04-07] (HP Inc. -> HP Inc.)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-26] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-26] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-26] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-26] (Microsoft Corporation -> Microsoft Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\McAfee\MSC\McSnIePl64.dll [2022-01-26] (McAfee, LLC -> McAfee, LLC)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\MSC\McSnIePl.dll [2022-01-26] (McAfee, LLC -> McAfee, LLC)
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-337212924-4266545201-662137970-1001\...\sharepoint.com -> hxxps://ccsd-files.sharepoint.com
==================== Hosts content: =========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2017-03-18 14:03 - 2022-05-11 18:13 - 000000828 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Other Areas ===========================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL;C:\Program Files\Intel\Intel® Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT;C:\Program Files\Intel\Intel® Management Engine Components\IPT;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-337212924-4266545201-662137970-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Theme1\img1.jpg
HKU\S-1-5-21-337212924-4266545201-662137970-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Tanya\Downloads\158547264_1078523462629313_4207099470797269292_n.jpg
HKU\S-1-5-21-337212924-4266545201-662137970-1004\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
BITS: {04AD388A-75A3-4A7A-9CF1-E74CF2457BA1} - (HPCeeConnect) -> [NotifyCmdLine: C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe "C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe" HPCeeConnect (null)] [files:http://ceement.rssx....entWA/index.jsp-> C:\Users\Tanya\hpTemp.txt]
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(If an entry is included in the fixlist, it will be removed.)
HKLM\...\StartupApproved\Run32: => "HPMessageService"
HKLM\...\StartupApproved\Run32: => "IJNetworkScannerSelectorEX2"
HKLM\...\StartupApproved\Run32: => "CanonQuickMenu"
HKLM\...\StartupApproved\Run32: => "HPRadioMgr"
HKLM\...\StartupApproved\Run32: => "TeamsMachineInstaller"
HKU\S-1-5-21-337212924-4266545201-662137970-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_DB75890BB2C6219E955F6B80A91E685F"
==================== FirewallRules (Whitelisted) ================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{B81C98C8-6ED8-4FA9-BFA9-25D0A9B37C60}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{4D9033D1-C7F7-4549-A721-7F6391BF3596}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{257ED799-7BCF-4444-803F-1E5443B5A746}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe => No File
FirewallRules: [{36EF266F-9F6E-4F07-87C5-DB0E1DA0C9D2}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe (McAfee, LLC -> McAfee, LLC)
FirewallRules: [{D4695A09-7058-4FC6-835E-12C82C9BEC6F}] => (Allow) C:\Program Files (x86)\Common Files\McAfee\MMSSHost\MMSSHost.exe (McAfee, LLC -> McAfee, LLC)
FirewallRules: [{03379514-ED1C-4E98-A5AA-CD518429F92E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe => No File
FirewallRules: [{04FD68D0-5A6B-47DB-9DB7-31F263CAB551}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe => No File
FirewallRules: [{BC628495-DBA0-46F7-ADFC-2274315BBF04}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe => No File
FirewallRules: [{65E80305-F23D-443C-8EB4-0AEF04105CAB}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe => No File
FirewallRules: [{01839C2A-6400-47C1-863B-19207E6D5A91}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel® Wireless Connectivity Solutions -> )
FirewallRules: [{5F6B805B-B4F4-4D4D-8764-9BFB1E72BCF7}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_21323.200.1078.109_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7B090B33-DC5B-4492-812F-7DAB709C89BA}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_21323.200.1078.109_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{902D1CC6-7CF0-4C04-B915-AF4B14CF9C0B}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CD597EE5-88A4-4EAB-AA83-28274AA9ADF8}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{57D8FC27-E4FC-435E-8BF3-E2EBD4A2D651}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{DEC535E8-FB0B-4A1F-AA48-52C24183CF26}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9AA95560-BFE6-42EB-A5AC-D6A41E26F8E4}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E34C28BC-BB0E-4EBC-AE74-16170B519A19}] => (Allow) C:\Users\ttbcs\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{FEFFC333-DF3A-4EBC-A567-23962A30CD49}] => (Allow) C:\Users\ttbcs\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{D504E697-CBC1-4390-8A13-9E9362BC5264}] => (Allow) C:\Users\ttbcs\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{B1AB74C1-6B9F-4FC8-8C29-4FB7C039FA12}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{F6299831-28BF-44FD-BFE2-046128D2D48D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.188.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{390934C1-777A-4FB3-95C2-6E5B27EE6A2D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.188.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{D25B718C-53DF-43FB-B21B-01526CF122DB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.188.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{63030E09-9427-4032-AB9D-742CF1D8EE70}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.188.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5EBD51DF-FD33-451D-9EF8-13FA331B2981}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.188.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{7896596D-B1FE-4C56-8B64-61F7999E39F7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.188.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{DF03A5CA-8E1A-41B6-8AFD-441BB8493F23}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.188.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{0A12E809-31C8-4E97-A7ED-2626F9B50CDA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.188.612.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{04793D4A-0062-4523-851D-A03629954076}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22147.303.1400.1220_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{81CA4DE7-6026-45EC-9248-5B63C69E7B3C}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22147.303.1400.1220_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C4A4B18A-C6B0-4AC4-9571-8851BB82EACA}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\103.0.1264.37\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E72FDC8D-5AAA-42C2-8F71-57BED0962A5B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{2BDE9A80-943A-4096-AFC7-EB1CF4CE7E0A}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{41DFC893-5850-44DB-840A-211D382AA0C9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{1D88F7C3-4F92-4E90-B38E-CA2E939A2ABF}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
==================== Restore Points =========================
09-06-2022 21:57:18 Scheduled Checkpoint
19-06-2022 16:14:55 Windows Modules Installer
24-06-2022 13:48:56 Windows Modules Installer
==================== Faulty Device Manager Devices ============
==================== Event log errors: ========================
Application errors:
==================
Error: (06/28/2022 05:11:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: AcroCEF.exe, version: 22.1.20117.0, time stamp: 0x624e742a
Faulting module name: AcroCEF.exe, version: 22.1.20117.0, time stamp: 0x624e742a
Exception code: 0x80000003
Fault offset: 0x000000000001055d
Faulting process id: 0x46dc
Faulting application start time: 0x01d88b4cd08866f6
Faulting application path: C:\Program Files\Adobe\Acrobat DC\Acrobat\AcroCEF\AcroCEF.exe
Faulting module path: C:\Program Files\Adobe\Acrobat DC\Acrobat\AcroCEF\AcroCEF.exe
Report Id: f191de91-108c-4d53-81f7-eb53ba7112df
Faulting package full name:
Faulting package-relative application ID:
Error: (06/28/2022 05:10:17 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Cortana.exe version 4.2204.13303.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
Process ID: 3bcc
Start Time: 01d88b4c648223c8
Termination Time: 4294967295
Application Path: C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Cortana.exe
Report Id: 336e1a6d-394b-42c6-b3a6-07f0f6558140
Faulting package full name: Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe
Faulting package-relative application ID: App
Hang type: Quiesce
Error: (06/27/2022 08:54:09 PM) (Source: Universal Print) (EventID: 1) (User: )
Description: Failed to get auth header with 0x8086000cmcpmanagementservice.dll
Error: (06/27/2022 08:54:09 PM) (Source: Universal Print) (EventID: 1) (User: )
Description: User Interaction Required while trying to get a token silently. ErrorCode: 0xcaa10001, Error: Need user interaction to continue.mcpmanagementservice.dll
Error: (06/27/2022 08:54:05 PM) (Source: Universal Print) (EventID: 1) (User: )
Description: Failed to get auth header with 0x8086000cmcpmanagementservice.dll
Error: (06/27/2022 08:54:05 PM) (Source: Universal Print) (EventID: 1) (User: )
Description: User Interaction Required while trying to get a token silently. ErrorCode: 0xcaa10001, Error: Need user interaction to continue.mcpmanagementservice.dll
Error: (06/27/2022 08:54:01 PM) (Source: Universal Print) (EventID: 1) (User: )
Description: Failed to get auth header with 0x8086000cmcpmanagementservice.dll
Error: (06/27/2022 08:54:01 PM) (Source: Universal Print) (EventID: 1) (User: )
Description: User Interaction Required while trying to get a token silently. ErrorCode: 0xcaa10001, Error: Need user interaction to continue.mcpmanagementservice.dll
System errors:
=============
Error: (06/28/2022 05:10:08 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The Downloaded Maps Manager service terminated unexpectedly. It has done this 1 time(s).
Error: (06/28/2022 05:09:56 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: The Background Intelligent Transfer Service service hung on starting.
Error: (06/28/2022 05:05:51 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The XTU3SERVICE service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
Error: (06/28/2022 05:05:51 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (45000 milliseconds) while waiting for the XTU3SERVICE service to connect.
Error: (06/28/2022 05:05:13 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 9:21:20 PM on 6/27/2022 was unexpected.
Error: (06/28/2022 05:04:21 PM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY)
Description: 3221226513A fatal error occurred processing the restoration data.
Error: (06/27/2022 09:21:21 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (45000 milliseconds) while waiting for the Intel® TPM Provisioning Service service to connect.
Error: (06/27/2022 09:21:21 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The cphs service terminated with the following error:
Unspecified error
CodeIntegrity:
===============
Date: 2022-06-28 17:12:08
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume3\Program Files\McAfee\MfeAV\AMSIExt.dll that did not meet the Microsoft signing level requirements.
Date: 2022-06-28 17:11:24
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\McAfee.com\Agent\WSCLLCGlobalSign.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\McAfee\Platform\Core\vtploader.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
BIOS: Insyde F.15 08/09/2021
Motherboard: HP 841B
Processor: Intel® Core i5-8250U CPU @ 1.60GHz
Percentage of memory in use: 55%
Total physical RAM: 8078.22 MB
Available physical RAM: 3587.05 MB
Total Virtual: 13198.22 MB
Available Virtual: 8175.57 MB
==================== Drives ================================
Drive c: (Windows) (Fixed) (Total:916.79 GB) (Free:837.75 GB) (Model: ST1000LM035-1RK172) NTFS
Drive d: (RECOVERY) (Fixed) (Total:13.49 GB) (Free:1.63 GB) (Model: ST1000LM035-1RK172) NTFS ==>[system with boot components (obtained from drive)]
\\?\Volume{c330ec84-e98a-4554-ad22-b976eea7ee24}\ () (Fixed) (Total:0.96 GB) (Free:0.35 GB) NTFS
\\?\Volume{06d48b26-b3c6-4ec8-86a4-31f688dea7a2}\ () (Fixed) (Total:0.25 GB) (Free:0.18 GB) FAT32
==================== MBR & Partition Table ====================
==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: D3A88384)
Partition: GPT.
==================== End of Addition.txt =======================
_________________________________________________________________________________________________________
CONCLUSION
_________________________________________________________________________________________________________
Your system seems to be having difficulty handling real-time audio and other tasks. You may experience drop outs, clicks or pops due to buffer underruns. One problem may be related to power management, disable CPU throttling settings in Control Panel and BIOS setup. Check for BIOS updates.
LatencyMon has been analyzing your system for 0:00:58 (h:mm:ss) on all processors.
_________________________________________________________________________________________________________
SYSTEM INFORMATION
_________________________________________________________________________________________________________
Computer name: LAPTOP-TRAVIS
OS version: Windows 11, 10.0, version 2009, build: 22000 (x64)
Hardware: HP Pavilion Laptop 15-ck0xx, HP
BIOS: F.15
CPU: GenuineIntel Intel® Core i5-8250U CPU @ 1.60GHz
Logical processors: 8
Processor groups: 1
Processor group size: 8
RAM: 8078 MB total
_________________________________________________________________________________________________________
CPU SPEED
_________________________________________________________________________________________________________
Reported CPU speed (WMI): 160 MHz
Reported CPU speed (registry): 180 MHz
Note: reported execution times may be calculated based on a fixed reported CPU speed. Disable variable speed settings like Intel Speed Step and AMD Cool N Quiet in the BIOS setup for more accurate results.
_________________________________________________________________________________________________________
MEASURED INTERRUPT TO USER PROCESS LATENCIES
_________________________________________________________________________________________________________
The interrupt to process latency reflects the measured interval that a usermode process needed to respond to a hardware request from the moment the interrupt service routine started execution. This includes the scheduling and execution of a DPC routine, the signaling of an event and the waking up of a usermode thread from an idle wait state in response to that event.
Highest measured interrupt to process latency (µs): 1143.70
Average measured interrupt to process latency (µs): 19.143646
Highest measured interrupt to DPC latency (µs): 1139.20
Average measured interrupt to DPC latency (µs): 5.639425
_________________________________________________________________________________________________________
REPORTED ISRs
_________________________________________________________________________________________________________
Interrupt service routines are routines installed by the OS and device drivers that execute in response to a hardware interrupt signal.
Highest ISR routine execution time (µs): 129.120556
Driver with highest ISR routine execution time: ACPI.sys - ACPI Driver for NT, Microsoft Corporation
Highest reported total ISR routine time (%): 0.001885
Driver with highest ISR total time: ACPI.sys - ACPI Driver for NT, Microsoft Corporation
Total time spent in ISRs (%) 0.001961
ISR count (execution time <250 µs): 248
ISR count (execution time 250-500 µs): 0
ISR count (execution time 500-1000 µs): 0
ISR count (execution time 1000-2000 µs): 0
ISR count (execution time 2000-4000 µs): 0
ISR count (execution time >=4000 µs): 0
_________________________________________________________________________________________________________
REPORTED DPCs
_________________________________________________________________________________________________________
DPC routines are part of the interrupt servicing dispatch mechanism and disable the possibility for a process to utilize the CPU while it is interrupted until the DPC has finished execution.
Highest DPC routine execution time (µs): 900.272778
Driver with highest DPC routine execution time: ACPI.sys - ACPI Driver for NT, Microsoft Corporation
Highest reported total DPC routine time (%): 0.027540
Driver with highest DPC total execution time: rspLLL64.sys - Resplendence Latency Monitoring and Auxiliary Kernel Library, Resplendence Software Projects Sp.
Total time spent in DPCs (%) 0.065387
DPC count (execution time <250 µs): 25214
DPC count (execution time 250-500 µs): 0
DPC count (execution time 500-10000 µs): 37
DPC count (execution time 1000-2000 µs): 0
DPC count (execution time 2000-4000 µs): 0
DPC count (execution time >=4000 µs): 0
_________________________________________________________________________________________________________
REPORTED HARD PAGEFAULTS
_________________________________________________________________________________________________________
Hard pagefaults are events that get triggered by making use of virtual memory that is not resident in RAM but backed by a memory mapped file on disk. The process of resolving the hard pagefault requires reading in the memory from disk while the process is interrupted and blocked from execution.
NOTE: some processes were hit by hard pagefaults. If these were programs producing audio, they are likely to interrupt the audio stream resulting in dropouts, clicks and pops. Check the Processes tab to see which programs were hit.
Process with highest pagefault count: mccspservicehost.exe
Total number of hard pagefaults 95
Hard pagefault count of hardest hit process: 20
Number of processes hit: 15
_________________________________________________________________________________________________________
PER CPU DATA
_________________________________________________________________________________________________________
CPU 0 Interrupt cycle time (s): 1.112799
CPU 0 ISR highest execution time (µs): 129.120556
CPU 0 ISR total execution time (s): 0.009128
CPU 0 ISR count: 221
CPU 0 DPC highest execution time (µs): 900.272778
CPU 0 DPC total execution time (s): 0.285297
CPU 0 DPC count: 24540
_________________________________________________________________________________________________________
CPU 1 Interrupt cycle time (s): 0.295333
CPU 1 ISR highest execution time (µs): 0.0
CPU 1 ISR total execution time (s): 0.0
CPU 1 ISR count: 0
CPU 1 DPC highest execution time (µs): 6.8650
CPU 1 DPC total execution time (s): 0.000020
CPU 1 DPC count: 6
_________________________________________________________________________________________________________
CPU 2 Interrupt cycle time (s): 0.546565
CPU 2 ISR highest execution time (µs): 3.052778
CPU 2 ISR total execution time (s): 0.000017
CPU 2 ISR count: 19
CPU 2 DPC highest execution time (µs): 96.948333
CPU 2 DPC total execution time (s): 0.001104
CPU 2 DPC count: 77
_________________________________________________________________________________________________________
CPU 3 Interrupt cycle time (s): 0.523968
CPU 3 ISR highest execution time (µs): 3.867222
CPU 3 ISR total execution time (s): 0.000006
CPU 3 ISR count: 4
CPU 3 DPC highest execution time (µs): 128.255556
CPU 3 DPC total execution time (s): 0.000852
CPU 3 DPC count: 35
_________________________________________________________________________________________________________
CPU 4 Interrupt cycle time (s): 1.432548
CPU 4 ISR highest execution time (µs): 1.121667
CPU 4 ISR total execution time (s): 0.000002
CPU 4 ISR count: 2
CPU 4 DPC highest execution time (µs): 86.0150
CPU 4 DPC total execution time (s): 0.000619
CPU 4 DPC count: 46
_________________________________________________________________________________________________________
CPU 5 Interrupt cycle time (s): 1.254555
CPU 5 ISR highest execution time (µs): 0.0
CPU 5 ISR total execution time (s): 0.0
CPU 5 ISR count: 0
CPU 5 DPC highest execution time (µs): 75.706111
CPU 5 DPC total execution time (s): 0.014295
CPU 5 DPC count: 410
_________________________________________________________________________________________________________
CPU 6 Interrupt cycle time (s): 0.376216
CPU 6 ISR highest execution time (µs): 0.788333
CPU 6 ISR total execution time (s): 0.000001
CPU 6 ISR count: 1
CPU 6 DPC highest execution time (µs): 104.9850
CPU 6 DPC total execution time (s): 0.000463
CPU 6 DPC count: 23
_________________________________________________________________________________________________________
CPU 7 Interrupt cycle time (s): 0.407198
CPU 7 ISR highest execution time (µs): 3.662222
CPU 7 ISR total execution time (s): 0.000004
CPU 7 ISR count: 1
CPU 7 DPC highest execution time (µs): 113.943889
CPU 7 DPC total execution time (s): 0.002704
CPU 7 DPC count: 114
_________________________________________________________________________________________________________
Image Name PID Services
========================= ======== ============================================
System Idle Process 0 N/A
System 4 N/A
Registry 160 N/A
smss.exe 568 N/A
csrss.exe 860 N/A
wininit.exe 944 N/A
csrss.exe 952 N/A
services.exe 1016 N/A
lsass.exe 300 KeyIso, SamSs, VaultSvc
svchost.exe 764 BrokerInfrastructure, DcomLaunch, PlugPlay,
Power, SystemEventsBroker
fontdrvhost.exe 836 N/A
WUDFHost.exe 1060 N/A
svchost.exe 1108 RpcEptMapper, RpcSs
svchost.exe 1152 LSM
winlogon.exe 1248 N/A
fontdrvhost.exe 1300 N/A
dwm.exe 1372 N/A
svchost.exe 1460 CoreMessagingRegistrar
svchost.exe 1596 Schedule
svchost.exe 1604 NcbService
svchost.exe 1612 ProfSvc
svchost.exe 1620 TimeBrokerSvc
svchost.exe 1752 DisplayEnhancementService
svchost.exe 1760 UserManager
svchost.exe 1816 hidserv
svchost.exe 1860 nsi
svchost.exe 1988 DispBrokerDesktopSvc
svchost.exe 2016 TabletInputService
svchost.exe 1440 camsvc
svchost.exe 1884 netprofm
svchost.exe 2264 EventLog
svchost.exe 2328 Themes
svchost.exe 2332 EventSystem
svchost.exe 2348 SysMain
Memory Compression 2504 N/A
svchost.exe 2556 Dnscache
svchost.exe 2564 SENS
igfxCUIService.exe 2616 igfxCUIService2.0.0.0
svchost.exe 2672 AudioEndpointBuilder
svchost.exe 2680 FontCache
svchost.exe 2824 Audiosrv
hpservice.exe 2848 hpsrv
svchost.exe 2916 DusmSvc
svchost.exe 2924 Dhcp
svchost.exe 2932 Wcmsvc
svchost.exe 2964 StateRepository
svchost.exe 2180 WinHttpAutoProxySvc
svchost.exe 3104 WlanSvc
svchost.exe 3132 ShellHWDetection
spoolsv.exe 3200 Spooler
svchost.exe 3256 BFE, mpssvc
svchost.exe 3316 LanmanWorkstation
IntelCpHDCPSvc.exe 3612 cplspcon
EvtEng.exe 3620 EvtEng
svchost.exe 3628 DPS
svchost.exe 3636 DiagTrack
esif_uf.exe 3644 esifsvc
HPPrintScanDoctorService. 3652 HPPrintScanDoctorService
OfficeClickToRun.exe 3668 ClickToRunSvc
HPWMISVC.exe 3676 HPWMISVC
svchost.exe 3684 CryptSvc
ibtsiva.exe 3692 ibtsiva
svchost.exe 3760 IKEEXT
svchost.exe 3808 iphlpsvc
LMS.exe 3840 LMS
mfemms.exe 3876 mfemms, mfevtp
svchost.exe 3884 LanmanServer
ModuleCoreService.exe 3912 ModuleCoreService
PEFService.exe 3928 PEFService
svchost.exe 3972 PolicyAgent
svchost.exe 3988 SstpSvc
svchost.exe 4044 TrkWks
RegSrvc.exe 4052 RegSrvc
svchost.exe 4060 StiSvc
WildTangentHelperService. 4068 WildTangentHelper
SynTPEnhService.exe 4076 SynTPEnhService
svchost.exe 4088 Winmgmt
svchost.exe 3368 WpnService
ZeroConfigService.exe 3304 ZeroConfigService
IntelCpHeciSvc.exe 4208 cphs
svchost.exe 4296 TapiSrv
jhi_service.exe 4408 jhi_service
svchost.exe 4976 DeviceAssociationService
dasHost.exe 5040 N/A
svchost.exe 5056 RasMan
dasHost.exe 5288 N/A
mfevtps.exe 5532 N/A
ProtectedModuleHost.exe 5568 N/A
AggregatorHost.exe 5716 N/A
svchost.exe 4368 lmhosts
svchost.exe 6332 NcdAutoSetup
svchost.exe 6340 fdPHost
svchost.exe 6516 FDResPub
svchost.exe 6656 SSDPSRV
dllhost.exe 6700 N/A
sihost.exe 6816 N/A
svchost.exe 5548 CDPUserSvc_6b2b0
svchost.exe 1640 WpnUserService_6b2b0
taskhostw.exe 7028 N/A
svchost.exe 2092 TokenBroker
HPJumpStartLaunch.exe 1324 N/A
svchost.exe 7356 CDPSvc
PresentationFontCache.exe 7484 FontCache3.0.0.0
WmiPrvSE.exe 7808 N/A
unsecapp.exe 7848 N/A
svchost.exe 7876 RmSvc
svchost.exe 8084 NgcSvc
svchost.exe 8116 NgcCtnrSvc
SynTPEnh.exe 7572 N/A
explorer.exe 6852 N/A
WmiPrvSE.exe 2312 N/A
ModuleCoreService.exe 4712 N/A
svchost.exe 8236 Appinfo
conhost.exe 8328 N/A
SynTPHelper.exe 8480 N/A
svchost.exe 8492 PcaSvc
MMSSHOST.exe 8548 N/A
McCSPServiceHost.exe 8888 mccspsvc
igfxEM.exe 8896 N/A
CoolSense.exe 8952 N/A
servicehost.exe 2980 McAfee WebAdvisor
ModuleCoreService.exe 8824 N/A
svchost.exe 4020 WdiSystemHost
conhost.exe 4852 N/A
mcapexe.exe 6416 McAPExe
uihost.exe 9252 N/A
MfeAVSvc.exe 9764 N/A
ctfmon.exe 9792 N/A
TabTip.exe 9804 N/A
HPAudioSwitch.exe 9928 N/A
mcshield.exe 9584 N/A
svchost.exe 1648 cbdhsvc_6b2b0
McUICnt.exe 10308 N/A
StartMenuExperienceHost.e 9572 N/A
RuntimeBroker.exe 1316 N/A
svchost.exe 4760 LicenseManager
svchost.exe 6988 OneSyncSvc_6b2b0,
PimIndexMaintenanceSvc_6b2b0,
UnistoreSvc_6b2b0, UserDataSvc_6b2b0
YourPhone.exe 12292 N/A
RtkNGUI64.exe 12308 N/A
svchost.exe 12984 BITS
SecurityHealthSystray.exe 14376 N/A
OneDrive.exe 14448 N/A
SecurityHealthService.exe 14464 SecurityHealthService
svchost.exe 15368 NPSMSvc_6b2b0
svchost.exe 15376 AarSvc_6b2b0
svchost.exe 15548 BthAvctpSvc
svchost.exe 16472 Netman
svchost.exe 10348 InstallService
svchost.exe 16976 DoSvc
RuntimeBroker.exe 13100 N/A
svchost.exe 12448 StorSvc
GoogleCrashHandler.exe 17520 N/A
HPJumpStartBridge.exe 17536 HPJumpStartBridge
GoogleCrashHandler64.exe 17624 N/A
HPSupportSolutionsFramewo 17728 HPSupportSolutionsFrameworkService
IAStorDataMgrSvc.exe 17912 IAStorDataMgrSvc
SgrmBroker.exe 18068 SgrmBroker
svchost.exe 18232 UsoSvc
hpqwmiex.exe 17724 hpqcaslwmiex
svchost.exe 12380 wscsvc
backgroundTaskHost.exe 18336 N/A
backgroundTaskHost.exe 18136 N/A
RuntimeBroker.exe 17332 N/A
RuntimeBroker.exe 15640 N/A
armsvc.exe 8404 AdobeARMservice
SearchIndexer.exe 19356 WSearch
dllhost.exe 18848 N/A
dptf_helper.exe 13088 N/A
SearchHost.exe 15984 N/A
TextInputHost.exe 10668 N/A
firefox.exe 15512 N/A
firefox.exe 13880 N/A
firefox.exe 14084 N/A
firefox.exe 18540 N/A
firefox.exe 17284 N/A
firefox.exe 12924 N/A
browserhost.exe 4784 N/A
MfeBrowserHost.exe 15900 N/A
conhost.exe 8972 N/A
conhost.exe 16592 N/A
firefox.exe 14780 N/A
firefox.exe 8060 N/A
firefox.exe 18840 N/A
firefox.exe 5628 N/A
FileCoAuth.exe 18400 N/A
Widgets.exe 10828 N/A
svchost.exe 15088 lfsvc
msedgewebview2.exe 18116 N/A
msedgewebview2.exe 16084 N/A
msedgewebview2.exe 12672 N/A
msedgewebview2.exe 14036 N/A
msedgewebview2.exe 18164 N/A
msedgewebview2.exe 5196 N/A
ApplicationFrameHost.exe 9376 N/A
SystemSettings.exe 8324 N/A
UserOOBEBroker.exe 17176 N/A
smartscreen.exe 14800 N/A
svchost.exe 18948 AppXSvc
svchost.exe 18184 wlidsvc
svchost.exe 14624 UdkUserSvc_6b2b0
audiodg.exe 12908 N/A
LatMon.exe 11872 N/A
cmd.exe 18588 N/A
conhost.exe 19424 N/A
SearchProtocolHost.exe 2280 N/A
tasklist.exe 6972 N/A
I need a screenshot of the Processes tab so I can see what processes are causing page faults.
Also right click on the clock and select Task Manager
(More Details)
Performance
Performance Monitor
Disk
Click on the arrows to expand Processes with Disk Activity and also for Disk Activity. Click on the column headers Total(B/sec) once or twice to sort things with the biggest numbers at the top. Do this for both sections. Also make sure you have it Full Screen and then
Wait a minute then take a screenshot and post it. Should look like this:
(I have adjusted some of the column widths to show more of the File info)
Resource Monitor
_________________________________________________________________________________________________________
CONCLUSION
_________________________________________________________________________________________________________
Your system appears to be having trouble handling real-time audio and other tasks. You are likely to experience buffer underruns appearing as drop outs, clicks or pops. One or more DPC routines that belong to a driver running in your system appear to be executing for too long. At least one detected problem appears to be network related. In case you are using a WLAN adapter, try disabling it to get better results. One problem may be related to power management, disable CPU throttling settings in Control Panel and BIOS setup. Check for BIOS updates.
LatencyMon has been analyzing your system for 0:01:08 (h:mm:ss) on all processors.
_________________________________________________________________________________________________________
SYSTEM INFORMATION
_________________________________________________________________________________________________________
Computer name: LAPTOP-TRAVIS
OS version: Windows 11, 10.0, version 2009, build: 22000 (x64)
Hardware: HP Pavilion Laptop 15-ck0xx, HP
BIOS: F.15
CPU: GenuineIntel Intel® Core i5-8250U CPU @ 1.60GHz
Logical processors: 8
Processor groups: 1
Processor group size: 8
RAM: 8078 MB total
_________________________________________________________________________________________________________
CPU SPEED
_________________________________________________________________________________________________________
Reported CPU speed (WMI): 160 MHz
Reported CPU speed (registry): 180 MHz
Note: reported execution times may be calculated based on a fixed reported CPU speed. Disable variable speed settings like Intel Speed Step and AMD Cool N Quiet in the BIOS setup for more accurate results.
_________________________________________________________________________________________________________
MEASURED INTERRUPT TO USER PROCESS LATENCIES
_________________________________________________________________________________________________________
The interrupt to process latency reflects the measured interval that a usermode process needed to respond to a hardware request from the moment the interrupt service routine started execution. This includes the scheduling and execution of a DPC routine, the signaling of an event and the waking up of a usermode thread from an idle wait state in response to that event.
Highest measured interrupt to process latency (µs): 2581.50
Average measured interrupt to process latency (µs): 9.437865
Highest measured interrupt to DPC latency (µs): 2542.50
Average measured interrupt to DPC latency (µs): 2.755601
_________________________________________________________________________________________________________
REPORTED ISRs
_________________________________________________________________________________________________________
Interrupt service routines are routines installed by the OS and device drivers that execute in response to a hardware interrupt signal.
Highest ISR routine execution time (µs): 125.587778
Driver with highest ISR routine execution time: ACPI.sys - ACPI Driver for NT, Microsoft Corporation
Highest reported total ISR routine time (%): 0.001922
Driver with highest ISR total time: ACPI.sys - ACPI Driver for NT, Microsoft Corporation
Total time spent in ISRs (%) 0.002929
ISR count (execution time <250 µs): 1384
ISR count (execution time 250-500 µs): 0
ISR count (execution time 500-1000 µs): 0
ISR count (execution time 1000-2000 µs): 0
ISR count (execution time 2000-4000 µs): 0
ISR count (execution time >=4000 µs): 0
_________________________________________________________________________________________________________
REPORTED DPCs
_________________________________________________________________________________________________________
DPC routines are part of the interrupt servicing dispatch mechanism and disable the possibility for a process to utilize the CPU while it is interrupted until the DPC has finished execution.
Highest DPC routine execution time (µs): 2556.890
Driver with highest DPC routine execution time: tcpip.sys - TCP/IP Driver, Microsoft Corporation
Highest reported total DPC routine time (%): 0.029978
Driver with highest DPC total execution time: storport.sys - Microsoft Storage Port Driver, Microsoft Corporation
Total time spent in DPCs (%) 0.096165
DPC count (execution time <250 µs): 58187
DPC count (execution time 250-500 µs): 0
DPC count (execution time 500-10000 µs): 52
DPC count (execution time 1000-2000 µs): 0
DPC count (execution time 2000-4000 µs): 1
DPC count (execution time >=4000 µs): 0
_________________________________________________________________________________________________________
REPORTED HARD PAGEFAULTS
_________________________________________________________________________________________________________
Hard pagefaults are events that get triggered by making use of virtual memory that is not resident in RAM but backed by a memory mapped file on disk. The process of resolving the hard pagefault requires reading in the memory from disk while the process is interrupted and blocked from execution.
NOTE: some processes were hit by hard pagefaults. If these were programs producing audio, they are likely to interrupt the audio stream resulting in dropouts, clicks and pops. Check the Processes tab to see which programs were hit.
Process with highest pagefault count: system
Total number of hard pagefaults 4974
Hard pagefault count of hardest hit process: 1260
Number of processes hit: 58
_________________________________________________________________________________________________________
PER CPU DATA
_________________________________________________________________________________________________________
CPU 0 Interrupt cycle time (s): 1.504053
CPU 0 ISR highest execution time (µs): 125.587778
CPU 0 ISR total execution time (s): 0.015999
CPU 0 ISR count: 1360
CPU 0 DPC highest execution time (µs): 896.732222
CPU 0 DPC total execution time (s): 0.485846
CPU 0 DPC count: 52823
_________________________________________________________________________________________________________
CPU 1 Interrupt cycle time (s): 0.534584
CPU 1 ISR highest execution time (µs): 3.807778
CPU 1 ISR total execution time (s): 0.000017
CPU 1 ISR count: 6
CPU 1 DPC highest execution time (µs): 138.897222
CPU 1 DPC total execution time (s): 0.001393
CPU 1 DPC count: 244
_________________________________________________________________________________________________________
CPU 2 Interrupt cycle time (s): 0.786111
CPU 2 ISR highest execution time (µs): 4.267222
CPU 2 ISR total execution time (s): 0.000007
CPU 2 ISR count: 2
CPU 2 DPC highest execution time (µs): 144.316111
CPU 2 DPC total execution time (s): 0.010543
CPU 2 DPC count: 1908
_________________________________________________________________________________________________________
CPU 3 Interrupt cycle time (s): 0.512489
CPU 3 ISR highest execution time (µs): 1.077222
CPU 3 ISR total execution time (s): 0.000006
CPU 3 ISR count: 8
CPU 3 DPC highest execution time (µs): 361.090
CPU 3 DPC total execution time (s): 0.005091
CPU 3 DPC count: 519
_________________________________________________________________________________________________________
CPU 4 Interrupt cycle time (s): 1.275806
CPU 4 ISR highest execution time (µs): 0.663333
CPU 4 ISR total execution time (s): 0.000002
CPU 4 ISR count: 4
CPU 4 DPC highest execution time (µs): 89.314444
CPU 4 DPC total execution time (s): 0.003028
CPU 4 DPC count: 575
_________________________________________________________________________________________________________
CPU 5 Interrupt cycle time (s): 0.859720
CPU 5 ISR highest execution time (µs): 0.660
CPU 5 ISR total execution time (s): 0.000002
CPU 5 ISR count: 3
CPU 5 DPC highest execution time (µs): 2556.890
CPU 5 DPC total execution time (s): 0.014176
CPU 5 DPC count: 1299
_________________________________________________________________________________________________________
CPU 6 Interrupt cycle time (s): 0.513067
CPU 6 ISR highest execution time (µs): 0.0
CPU 6 ISR total execution time (s): 0.0
CPU 6 ISR count: 0
CPU 6 DPC highest execution time (µs): 59.828889
CPU 6 DPC total execution time (s): 0.002591
CPU 6 DPC count: 401
_________________________________________________________________________________________________________
CPU 7 Interrupt cycle time (s): 0.617157
CPU 7 ISR highest execution time (µs): 0.861667
CPU 7 ISR total execution time (s): 0.000001
CPU 7 ISR count: 1
CPU 7 DPC highest execution time (µs): 126.354444
CPU 7 DPC total execution time (s): 0.003717
CPU 7 DPC count: 471
_________________________________________________________________________________________________________
Uninstall:
HP Support Assistant
HP Support Solutions Framework
You can always get them again if you really think you need them but if the PC is more than 2 years old HP tends to forget about it.
Also try Latency Monitor with all browsers closed.
_________________________________________________________________________________________________________
CONCLUSION
_________________________________________________________________________________________________________
Your system appears to be having trouble handling real-time audio and other tasks. You are likely to experience buffer underruns appearing as drop outs, clicks or pops. One or more DPC routines that belong to a driver running in your system appear to be executing for too long. At least one detected problem appears to be network related. In case you are using a WLAN adapter, try disabling it to get better results. One problem may be related to power management, disable CPU throttling settings in Control Panel and BIOS setup. Check for BIOS updates.
LatencyMon has been analyzing your system for 0:01:00 (h:mm:ss) on all processors.
_________________________________________________________________________________________________________
SYSTEM INFORMATION
_________________________________________________________________________________________________________
Computer name: LAPTOP-TRAVIS
OS version: Windows 11, 10.0, version 2009, build: 22000 (x64)
Hardware: HP Pavilion Laptop 15-ck0xx, HP
BIOS: F.15
CPU: GenuineIntel Intel® Core i5-8250U CPU @ 1.60GHz
Logical processors: 8
Processor groups: 1
Processor group size: 8
RAM: 8078 MB total
_________________________________________________________________________________________________________
CPU SPEED
_________________________________________________________________________________________________________
Reported CPU speed (WMI): 160 MHz
Reported CPU speed (registry): 180 MHz
Note: reported execution times may be calculated based on a fixed reported CPU speed. Disable variable speed settings like Intel Speed Step and AMD Cool N Quiet in the BIOS setup for more accurate results.
_________________________________________________________________________________________________________
MEASURED INTERRUPT TO USER PROCESS LATENCIES
_________________________________________________________________________________________________________
The interrupt to process latency reflects the measured interval that a usermode process needed to respond to a hardware request from the moment the interrupt service routine started execution. This includes the scheduling and execution of a DPC routine, the signaling of an event and the waking up of a usermode thread from an idle wait state in response to that event.
Highest measured interrupt to process latency (µs): 1352.0
Average measured interrupt to process latency (µs): 25.074811
Highest measured interrupt to DPC latency (µs): 1290.50
Average measured interrupt to DPC latency (µs): 5.334948
_________________________________________________________________________________________________________
REPORTED ISRs
_________________________________________________________________________________________________________
Interrupt service routines are routines installed by the OS and device drivers that execute in response to a hardware interrupt signal.
Highest ISR routine execution time (µs): 125.224444
Driver with highest ISR routine execution time: ACPI.sys - ACPI Driver for NT, Microsoft Corporation
Highest reported total ISR routine time (%): 0.001451
Driver with highest ISR total time: ACPI.sys - ACPI Driver for NT, Microsoft Corporation
Total time spent in ISRs (%) 0.001559
ISR count (execution time <250 µs): 235
ISR count (execution time 250-500 µs): 0
ISR count (execution time 500-1000 µs): 0
ISR count (execution time 1000-2000 µs): 0
ISR count (execution time 2000-4000 µs): 0
ISR count (execution time >=4000 µs): 0
_________________________________________________________________________________________________________
REPORTED DPCs
_________________________________________________________________________________________________________
DPC routines are part of the interrupt servicing dispatch mechanism and disable the possibility for a process to utilize the CPU while it is interrupted until the DPC has finished execution.
Highest DPC routine execution time (µs): 2612.758889
Driver with highest DPC routine execution time: tcpip.sys - TCP/IP Driver, Microsoft Corporation
Highest reported total DPC routine time (%): 0.023088
Driver with highest DPC total execution time: rspLLL64.sys - Resplendence Latency Monitoring and Auxiliary Kernel Library, Resplendence Software Projects Sp.
Total time spent in DPCs (%) 0.065651
DPC count (execution time <250 µs): 26555
DPC count (execution time 250-500 µs): 0
DPC count (execution time 500-10000 µs): 32
DPC count (execution time 1000-2000 µs): 1
DPC count (execution time 2000-4000 µs): 1
DPC count (execution time >=4000 µs): 0
_________________________________________________________________________________________________________
REPORTED HARD PAGEFAULTS
_________________________________________________________________________________________________________
Hard pagefaults are events that get triggered by making use of virtual memory that is not resident in RAM but backed by a memory mapped file on disk. The process of resolving the hard pagefault requires reading in the memory from disk while the process is interrupted and blocked from execution.
NOTE: some processes were hit by hard pagefaults. If these were programs producing audio, they are likely to interrupt the audio stream resulting in dropouts, clicks and pops. Check the Processes tab to see which programs were hit.
Process with highest pagefault count: explorer.exe
Total number of hard pagefaults 358
Hard pagefault count of hardest hit process: 289
Number of processes hit: 13
_________________________________________________________________________________________________________
PER CPU DATA
_________________________________________________________________________________________________________
CPU 0 Interrupt cycle time (s): 1.000124
CPU 0 ISR highest execution time (µs): 125.224444
CPU 0 ISR total execution time (s): 0.007566
CPU 0 ISR count: 227
CPU 0 DPC highest execution time (µs): 971.131667
CPU 0 DPC total execution time (s): 0.296291
CPU 0 DPC count: 24322
_________________________________________________________________________________________________________
CPU 1 Interrupt cycle time (s): 0.270623
CPU 1 ISR highest execution time (µs): 0.0
CPU 1 ISR total execution time (s): 0.0
CPU 1 ISR count: 0
CPU 1 DPC highest execution time (µs): 7.848889
CPU 1 DPC total execution time (s): 0.000158
CPU 1 DPC count: 109
_________________________________________________________________________________________________________
CPU 2 Interrupt cycle time (s): 0.554359
CPU 2 ISR highest execution time (µs): 2.896667
CPU 2 ISR total execution time (s): 0.000006
CPU 2 ISR count: 3
CPU 2 DPC highest execution time (µs): 2612.758889
CPU 2 DPC total execution time (s): 0.004841
CPU 2 DPC count: 471
_________________________________________________________________________________________________________
CPU 3 Interrupt cycle time (s): 0.309452
CPU 3 ISR highest execution time (µs): 0.791667
CPU 3 ISR total execution time (s): 0.000001
CPU 3 ISR count: 1
CPU 3 DPC highest execution time (µs): 47.596667
CPU 3 DPC total execution time (s): 0.001258
CPU 3 DPC count: 259
_________________________________________________________________________________________________________
CPU 4 Interrupt cycle time (s): 1.353506
CPU 4 ISR highest execution time (µs): 2.223333
CPU 4 ISR total execution time (s): 0.000003
CPU 4 ISR count: 2
CPU 4 DPC highest execution time (µs): 1896.691111
CPU 4 DPC total execution time (s): 0.003412
CPU 4 DPC count: 436
_________________________________________________________________________________________________________
CPU 5 Interrupt cycle time (s): 1.230649
CPU 5 ISR highest execution time (µs): 0.726111
CPU 5 ISR total execution time (s): 0.000001
CPU 5 ISR count: 1
CPU 5 DPC highest execution time (µs): 192.601111
CPU 5 DPC total execution time (s): 0.007377
CPU 5 DPC count: 376
_________________________________________________________________________________________________________
CPU 6 Interrupt cycle time (s): 0.427552
CPU 6 ISR highest execution time (µs): 2.621667
CPU 6 ISR total execution time (s): 0.000003
CPU 6 ISR count: 1
CPU 6 DPC highest execution time (µs): 34.862222
CPU 6 DPC total execution time (s): 0.000621
CPU 6 DPC count: 163
_________________________________________________________________________________________________________
CPU 7 Interrupt cycle time (s): 0.409632
CPU 7 ISR highest execution time (µs): 0.0
CPU 7 ISR total execution time (s): 0.0
CPU 7 ISR count: 0
CPU 7 DPC highest execution time (µs): 274.2950
CPU 7 DPC total execution time (s): 0.005274
CPU 7 DPC count: 453
_________________________________________________________________________________________________________
0 members, 1 guests, 0 anonymous users
Community Forum Software by IP.Board
Licensed to: Geeks to Go, Inc.