vs_minshellx64msi (HKLM\\{5F5AAF1B-FD08-4AEB-A170-600545D57EF5}) (Version: 17.0.31709 - Microsoft Corporation) Hidden (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_5292bbfbf575e2d2\Display.NvContainer\NVDisplay.Container.exe <2> "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{b8ce6039-5202-4c0c-b706-9d55226ab086}" => removed successfully FirewallRules: [{AEEC18B9-7BBC-4B9F-930A-C90FBE4F9195}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) The file will not be moved unless listed separately.) 2021-10-03 15:48 - 2019-03-19 15:52 - 000000000 ___RD C:\Windows\ImmersiveControlPanel ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2021-09-15] (Adobe Inc. -> ) Faulting module path: C:\Windows\System32\KERNELBASE.dll Task: {960b6a6a-dc34-4565-96a7-4db5fb5b3ff9} - no filepath "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{f99694c5-bf64-4109-a138-067cb4c7d2e7}" => removed successfully Exception code: 0xe0434352 "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{b086bb79-9ed7-4043-ab6c-148342fcf383}" => removed successfully Report Id: 64ecc47b-71e8-4c87-b20e-bc86d1653042 Kits Configuration Installer (HKLM-x32\\{E75A9998-E979-760B-6AEB-49763F279EDD}) (Version: 10.1.19041.685 - Microsoft) Hidden at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9787f435-46f9-458d-9737-9ba0cb4bc234}" => removed successfully Task: {9787f435-46f9-458d-9737-9ba0cb4bc234} - no filepath at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) 3>restart. Fusion 2.0 working for Aorus Xtreme 3080 working Resetting , OK! Task: {7d4dac2b-fbf4-45de-adae-6a9396b9ca9c} - no filepath Faulting application start time: 0x01d7c8b2547f9944 Description: The AORUS LCD Panel Service service terminated unexpectedly. Anyone know how to fix Event ID 7031? - Windows 10 Forums It has done this 1 time(s). Task: {b30dbf6f-75b4-422c-82ed-f93cae0f7dec} - no filepath Task: {4204c90d-5097-480b-ab90-0cff3c443b89} - no filepath "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4972aadd-d0db-4681-984f-17b847488bc9}" => removed successfully Error: Unable to rebuild performance counter setting from system backup store, error code is 2 " The NVIDIA LocalSystem Container service terminated with the following *" ======== HKU\S-1-5-21-326566074-3447909417-183555969-1001\\StartupApproved\Run: => "Steam" 0.0.0.0 telemetry.appex.bing.net Task: {4204c90d-5097-480b-ab90-0cff3c443b89} - no filepath Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000) 2021-10-22 12:31 - 2021-10-22 12:31 - 000000000 ____D C:\Users\Pepega\AppData\Local\VALORANT (If an entry is included in the fixlist, the process will be closed. C:\Windows\Temp\ASPNETSetup_00001.log => moved successfully FirewallRules: [{E1D43D4F-5765-4B23-A804-FDD364EFF570}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) Detection Origin: Local machine CustomCLSID: HKU\S-1-5-21-326566074-3447909417-183555969-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-558F93368B4C} -> [Creative Cloud Files] => C:\Users\Pepega\Creative Cloud Files [2021-10-16 20:42] \\?\Volume{66a9e99a-1cf4-4f5a-a085-9db2177d6629}\ (Recovery) (Fixed) (Total:0.52 GB) (Free:0.5 GB) NTFS 2021-10-02 23:21 - 2021-10-24 14:31 - 000000000 ____D C:\Program Files (x86)\MSBuild ==================== Custom CLSID (Whitelisted): ============== Task: {e21ec10f-b0f2-4d8c-ac9d-e74491370460} - no filepath \\?\Volume{7551d85d-c70c-448e-b08c-13d1c138506d}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32 WinRT Intellisense UAP - en-us (HKLM-x32\\{0AF3B821-474B-1885-473A-6E3FB4F1CF71}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden 2021-10-09 21:21 - 2021-10-09 21:21 - 000058304 _____ (Intel Corporation ) C:\Windows\system32\Drivers\49306c4f52694d3265464132623078796254466e4e6d52774d324e545a315a7664556830.sys ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_5292bbfbf575e2d2\nvshext.dll [2021-10-07] (Nvidia Corporation -> NVIDIA Corporation) reinstall aorus engine (1.92) and nvidia driver (457.09, full installation) from gigabyte official site. go to : C:\Program Files (x86)\GIGABYTE\AORUS LCD Panel Setting\Updater and run FWUpgrade.exe, you will see the progress and after completion, it will ask you to shutdown, click yes and the turn on the pc again. Task: {ca0fb10b-e917-4aa5-9e3a-f6a019682f3f} - no filepath "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{f0e86eb7-a641-47fc-9528-df32545b183d}" => removed successfully Task: {013418b8-2dc1-4fb4-9c18-21dcfcb620cb} - no filepath HKU\S-1-5-21-326566074-3447909417-183555969-1001\\Run: [Discord] => C:\Users\Pepega\AppData\Local\Discord\Update.exe [1512608 2021-09-22] (Discord Inc. -> GitHub) Python 3.9.5 Tcl/Tk Support (64-bit symbols) (HKLM\\{9F0D0DF1-B4D0-4760-A174-0CFF5C09D758}) (Version: 3.9.5150.0 - Python Software Foundation) Hidden For more information please see the following:https://go.microsoft.com/fwlink/?linkid=37020&name=SettingsModifier:Win32/PossibleHostsFileHijack&threatid=14994&enterprise=0 FF Extension: (Kurgzsekseta) - C:\Users\Pepega\AppData\Roaming\Mozilla\Firefox\Profiles\q42kwfcc.default-release\Extensions\{e8f3b919-d290-4270-b66f-29f3fdbb1986}.xpi [2021-10-05], Startup: C:\Users\Pepega\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Thing2.bat [2021-10-24] () [File not signed]. 2021-10-02 23:25 - 2021-10-04 18:19 - 000000000 ____D C:\Windows\SysWOW64\1036 2021-10-02 23:17 - 2021-10-02 23:18 - 000000000 ____D C:\Windows\SysWOW64\directx Task: {977e0d72-710d-4264-bfbf-105f17f81aa3} - no filepath 2021-10-03 19:33 - 2021-10-03 19:34 - 000000000 ____D C:\Program Files (x86)\EasyAntiCheat HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" Task: {C6B4432E-BB97-4CBA-9DFC-158E3B8F51BE} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [680888 2021-10-07] (Mozilla Corporation -> Mozilla Foundation) Task: {53b08e97-673e-4df6-ae10-9a73f6648a6c} - no filepath ClickOnce Bootstrapper Package for Microsoft .NET Framework (HKLM-x32\\{5A260D5A-95D3-4956-8E0A-E182CC4144ED}) (Version: 4.8.04162 - Microsoft Corporation) Hidden 2021-10-02 22:56 - 2021-10-24 14:29 - 000000000 ____D C:\Program Files\NVIDIA Corporation 2021-10-04 18:42 - 2021-10-04 18:42 - 000000020 ___SH C:\Users\Pepega\ntuser.ini Task: {66f5635a-5bb6-4432-8d29-d7d2f625b98a} - no filepath Description: Faulting application name: SinEx 4.2.0 BETA Woofer [All Winver].exe, version: 0.0.0.0, time stamp: 0x616e2119 "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{634166c8-f3ba-4d37-96ef-8a18d9787a4e}" => removed successfully the aorus lcd panel service service terminated unexpectedly my solution: dont install any gpu tools like: aorus engine / msi aftburner or other. Tcpip\..\Interfaces\{710b131b-0ffc-4c94-8d3e-1b075637d571}: [DhcpNameServer] 1.1.1.1 1.0.0.1 "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{e6857042-80d9-4422-85b4-1c5dc0aae451}" => removed successfully 2021-10-24 13:24 - 2021-10-24 15:28 - 000000000 ____D C:\Users\Pepega\Desktop\resources Task: {29ad0c16-34a9-49f9-a1d8-81f44fff082d} - no filepath Task: {b2522ebf-6a65-406b-9bc7-1ce57d2a2c7c} - no filepath 2021-10-22 11:43 - 2021-10-22 12:31 - 000000000 ____D C:\Users\Pepega\AppData\Local\Riot Games (If an entry is included in the fixlist, the file/folder will be moved.) The Corsair Service service terminated unexpectedly. ==================== Alternate Data Streams (Whitelisted) ======== ========= "%WINDIR%\SysWOW64\lodctr.exe" /R ========= at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) 2021-10-02 22:56 - 2021-10-02 23:03 - 000000000 ____D C:\Windows\system32\Drivers\NVIDIA Corporation 2021-10-05 09:55 - 2021-10-24 19:37 - 000000000 ____D C:\ProgramData\Mozilla For more information please see the following:https://go.microsoft.com/fwlink/?linkid=37020&name=SettingsModifier:Win32/PossibleHostsFileHijack&threatid=14994&enterprise=0 2021-10-13 22:14 - 2021-10-07 19:28 - 000676480 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll (If an entry is included in the fixlist, it will be removed.) Python Launcher (HKLM-x32\\{B6EF11B6-0882-43B1-AA75-4D3BD32A144A}) (Version: 3.9.7427.0 - Python Software Foundation) HKU\S-1-5-21-326566074-3447909417-183555969-1001\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{358ba298-e9a3-4572-a1cd-6ec4e7b85984}" => removed successfully Task: {134fdbcd-c972-40e5-a39b-91c169e4c9bf} - no filepath Microsoft Update Health Tools (HKLM\\{8A6AB459-CB4B-4D09-8C1E-337FB59135C4}) (Version: 2.84.0.0 - Microsoft Corporation) Task: {9BB503F1-5151-4934-BC8F-F3BE719FB619} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [645488 2021-09-14] (NVIDIA Corporation -> NVIDIA Corporation) Now my pc wont boot into unto windows and stays on the aorus symbol screen. Task: {55b76d6d-fbf6-450e-a24e-071e1db9f945} - no filepath ==================== Installed Programs ====================== Packages: 0.0.0.0 oca.telemetry.microsoft.com.nsatc.net 2021-10-03 16:47 - 2019-03-19 15:49 - 000028672 _____ C:\Windows\system32\config\BCD-Template S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [10165360 2021-10-21] (Riot Games, Inc. -> Riot Games, Inc.) Task: {df1c3fe3-3222-4a5e-b520-95a4768a5710} - no filepath Faulting package full name: 2021-10-15 11:58 - 2021-10-15 11:58 - 000000000 ____D C:\Users\Pepega\Documents\XuanZhi S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8901968 2021-10-12] (BattlEye Innovations e.K. 2021-10-13 22:14 - 2021-10-07 19:28 - 000707712 _____ (NVIDIA Corporation) C:\Windows\system32\nvidia-smi.exe 2021-10-12 19:23 - 2021-10-12 19:23 - 000000000 ____D C:\Program Files\Epic Games ========= ipconfig /flushDNS ========= 0.0.0.0 vortex-win.data.microsoft.com The following corrective action will be taken in 6000 milliseconds: "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2d5dd02e-d989-436b-a3d0-b2283ce2c942}" => removed successfully I just updated my BIOS on my gigabyte aorus elite x570. SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&FORM=IE8SRC Task: {d6cfa018-c9cc-40f6-8ae8-0b452b7908aa} - no filepath Available physical RAM: 26345.08 MB Task: {b086bb79-9ed7-4043-ab6c-148342fcf383} - no filepath HKU\S-1-5-21-326566074-3447909417-183555969-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C} => removed successfully WebMake the most of your membership enjoy games, invite friends, earn points, get rewards, and more. 2021-10-15 11:55 - 2021-10-15 11:55 - 000000000 ____D C:\Users\Pepega\AppData\Local\BlueStacksSetup Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 25-10-2021 08:47:26) Description: The rules engine failed to evaluate the rules. 2021-10-02 23:03 - 2021-09-14 14:39 - 000069856 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2021-10-13 16:20 - 2021-10-13 16:20 - 000000000 ____D C:\Users\Pepega\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox Dell Digital Delivery Services Crashes - Dell Community RTX 3070 Aorus Master 8GB LCD Not Working : Process Name: C:\Users\Pepega\AppData\Local\Discord\app-1.0.9003\Discord.exe 2021-10-13 22:14 - 2021-10-07 19:32 - 001874648 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe Task: {4972aadd-d0db-4681-984f-17b847488bc9} - no filepath Task: {fc60ad33-5948-48d9-9f11-c6ca25373a9c} - no filepath "HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\mpcmdrun.exe" => not found Task: {57F289BA-DE1C-4DD8-95F8-ED9D13AD93D0} - System32\Tasks\NahimicSvc64Run => C:\Windows\system32\NahimicSvc64.exe [1067016 2020-12-10] (A-Volute SAS -> Nahimic) Resetting , OK! 2021-10-24 14:31 - 2021-10-24 14:31 - 000000000 ____D C:\Program Files\Reference Assemblies Severity: Medium Task: {e2e2a07e-8ce9-45bf-94db-a91755d15155} - no filepath Task: {c4718da2-1857-4507-932c-28593e4e8294} - no filepath Description: Task: {92ec50a0-247a-4611-885a-d70f21f03e46} - no filepath 2021-10-24 09:40 - 2021-10-24 09:40 - 000000000 ____D C:\Users\Pepega\Documents\Call of Duty Modern Warfare 2021-10-18 19:35 - 2021-10-24 14:56 - 000003152 _____ C:\Windows\system32\Tasks\NahimicSvc32Run - Right Click on Network Neighborhood -> left click on Properties -> left click on the Protocols tab -> double click on TCP/IP Protocol -> left click on DNS tab and enter a domain name in the "Domain:" field. VS Immersive Activate Helper (HKLM-x32\\{C0ACF658-B4DC-4CBB-B8F2-9E667D69919A}) (Version: 17.0.114.0 - Microsoft Corporation) Hidden "RESOLVED" LCD SCREEN Aorus 3080 Not working : If you are successful, start the Dell Digital Delivery application again. HKU\S-1-5-21-326566074-3447909417-183555969-1001\\Run: [Print driver host for applications] => C:\Program Files (x86)\Print driver host for applications\Print driver host for applications.exe [74752 2021-10-24] (Microsoft Corporation) [File not signed] HKLM\\Run: [RtkAudUService] => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_df67044ddd98b524\RtkAudUService64.exe [1273712 2021-07-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor) Task: {e6857042-80d9-4422-85b4-1c5dc0aae451} - no filepath Task: {65f6d357-0576-4835-8e37-d12ac62b76e0} - no filepath Resetting , OK! Task: {19e78c37-4706-4ee6-b14f-00a377e1761c} - no filepath The system cannot find the path specified. 2021-10-24 20:41 - 2021-10-24 21:08 - 000000020 _____ C:\Windows\system32\Drivers\SMR540.dat 2021-10-02 23:25 - 2021-10-02 23:26 - 000000000 ____D C:\Windows\system32\1042 VS Script Debugging Common (HKLM\\{9EC852BD-33D2-457C-99BB-ED3099B8176F}) (Version: 17.0.114.0 - Microsoft Corporation) Hidden "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8c4fdb45-99dd-42f3-8984-07e5f8dff7f4}" => removed successfully Task: {78bdf1d8-0a82-4ea3-8ac6-e6a6e95fd874} - no filepath vs_clickoncesigntoolmsi (HKLM-x32\\{B00D9AE3-D2B9-4C16-AF48-B3AF4B46E67A}) (Version: 17.0.31703 - Microsoft Corporation) Hidden Task: {55b76d6d-fbf6-450e-a24e-071e1db9f945} - no filepath 2021-10-02 23:25 - 2021-10-04 18:19 - 000000000 ____D C:\Windows\system32\1045 Faulting application start time: 0x01d7c8b23e4aead7 "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{481404b2-cd19-4388-9998-80f99056dcfd}" => removed successfully Task: {48ae682f-228f-4e67-8aa4-854778a3a6a2} - no filepath Default browser: FF The location is listed in the 3rd line of the Farbar log you have submitted. Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) 2021-10-13 22:14 - 2021-10-07 19:27 - 005703288 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll ==================== Hosts content: ========================= HKU\S-1-5-21-326566074-3447909417-183555969-1001\\StartupApproved\Run: => "EpicGamesLauncher" Resetting , OK! "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{bd098352-5f63-4d2b-8e01-ba6a347a2975}" => removed successfully Security intelligence Version: AV: 1.351.958.0, AS: 1.351.958.0, NIS: 1.351.958.0 Drive d: () (Fixed) (Total:930.88 GB) (Free:929.97 GB) NTFS "C:\Users\Pepega\AppData\Local\Update.exe" => not found 2021-10-24 11:46 - 2021-10-24 11:46 - 000000000 ____D C:\Program Files\Process Hacker 2 Task: {2C3E54F2-A4EE-472C-97AA-1BE4BC6F53B4} - System32\Tasks\Microsoft\Windows\WindowsUpdate\RUXIM\RUXIMSync => C:\Program Files\ruxim\ruximics.exe [477512 2021-06-30] (Microsoft Windows -> Microsoft Corporation) Python 3.9.5 Development Libraries (64-bit) (HKLM\\{AEE58901-97A1-422A-B964-4FD9BF3327B8}) (Version: 3.9.5150.0 - Python Software Foundation) Hidden ==================== One month (created) (Whitelisted) ========= C:\WINDOWS\syswow64\*.tmp 2021-10-02 23:25 - 2021-10-04 18:19 - 000000000 ____D C:\Windows\system32\1046 FirewallRules: [{2540FA7E-7920-4CF1-AA60-C80399BB4776}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Apex Legends\EasyAntiCheat_launcher.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd) Task: {cf65bcb3-58fb-4f8a-ad70-57403d1f5d1f} - no filepath Task: {bb2029d9-cbf0-4ee3-aa1b-fbafda7b399a} - no filepath 2021-10-02 23:25 - 2021-10-04 18:19 - 000000000 ____D C:\Windows\SysWOW64\1049 Task: {1a105416-49db-4c94-a1d7-5a3597878e9a} - no filepath Microsoft Defender Antivirus has detected malware or other potentially unwanted software. ***************** "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7d4dac2b-fbf4-45de-adae-6a9396b9ca9c}" => removed successfully Resetting Subinterface, OK! The file will not be moved unless listed separately.) "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{55b76d6d-fbf6-450e-a24e-071e1db9f945}" => removed successfully HKLM\SOFTWARE\Policies\Microsoft\Edge => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6d29bb8b-f135-47e9-9ff9-392b06a68bf3}" => removed successfully CreateRestorePoint: Task: {960b6a6a-dc34-4565-96a7-4db5fb5b3ff9} - no filepath WinRT Intellisense IoT - en-us (HKLM-x32\\{3335615C-ABEB-960E-2226-4274CD28E046}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden Task: {ab7dbf26-2e26-445a-a7dd-f60ac12f19a6} - no filepath ==================== SigCheck ============================ start Task: {b3eb79cd-689d-4158-bea3-8771c38a327c} - no filepath Python 3.9.5 Executables (64-bit) (HKLM\\{843C07B6-040E-4E83-B244-5383247D70AB}) (Version: 3.9.5150.0 - Python Software Foundation) Hidden Error: (10/24/2021 07:36:20 PM) (Source: .NET Runtime) (EventID: 1026) (User: ) S4 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2109.6-0\NisSrv.exe [2855512 2021-10-24] (Microsoft Windows Publisher -> Microsoft Corporation) 2021-10-03 15:49 - 2021-10-03 15:49 - 000000000 _SHDL C:\Documents and Settings "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4d4276f1-945c-486b-b48f-62cda9b73d18}" => removed successfully not found 2021-10-24 13:24 - 2021-10-24 13:24 - 000000000 ____D C:\Users\Pepega\Desktop\tron ============= HKLM\\StartupApproved\Run32: => "Adobe Creative Cloud" 0.0.0.0 sqm.df.telemetry.microsoft.com 2021-10-12 19:20 - 2021-10-12 19:20 - 000000000 ____D C:\Users\Pepega\AppData\Local\EOSUserHelper 2021-10-18 19:35 - 2021-10-24 14:56 - 000003152 _____ C:\Windows\system32\Tasks\NahimicSvc64Run icecap_collectionresourcesx64 (HKLM-x32\\{D7CA7EBC-6382-4CDB-BE73-9057ABE6DBA5}) (Version: 17.0.31709 - Microsoft Corporation) Hidden 2021-10-03 15:48 - 2021-10-24 14:37 - 000000000 ____D C:\Windows\system32\Drivers\wd Tcpip\..\Interfaces\{0b906b63-14f9-4205-87bd-1b6b0fc3f4de}: [DhcpNameServer] 1.1.1.1 1.0.0.1 The following corrective action will be taken in 60000 milliseconds: Restart the Description: Application: Windows Driver Installation Service.exe FirewallRules: [UDP Query User{0A8BBE95-3686-4B16-8A84-FCFD22173BE9}C:\program files (x86)\call of duty modern warfare\modernwarfare.exe] => (Allow) C:\program files (x86)\call of duty modern warfare\modernwarfare.exe (Activision Publishing Inc -> Activision) FirewallRules: [{F7197523-B9AE-42F6-9BCD-3487235CDA82}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe => No File Detection Type: Concrete 2021-10-02 23:04 - 2021-10-02 23:04 - 000003858 _____ C:\Windows\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} C:\Users\Pepega\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Thing.bat => moved successfully SearchScopes: HKU\S-1-5-21-326566074-3447909417-183555969-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02 Task: {0ffde93b-8785-42a8-8c6c-2672d544280d} - no filepath 2021-10-02 23:02 - 2021-01-08 13:21 - 001147352 _____ (Realtek ) C:\Windows\system32\Drivers\rt640x64.sys (Wen Jia Liu -> wj32) C:\Program Files\Process Hacker 2\ProcessHacker.exe Task: {bc549475-73a3-47b9-8e8c-cce95c3b76c2} - no filepath ==================== Other Areas =========================== Resetting Multicast Address, OK! Task: {f0e86eb7-a641-47fc-9528-df32545b183d} - no filepath Task: {df1c3fe3-3222-4a5e-b520-95a4768a5710} - no filepath Task: {8f7674a6-0b05-416d-8dc8-bba2f61cad8c} - no filepath Date: 2021-10-24 13:02:27.034 FirewallRules: [{D2BE48F9-4A26-495F-A434-C4289999EADD}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) Reason:0xC004F011 2021-10-18 19:33 - 2021-10-18 19:33 - 000000000 ____D C:\Windows\system32\A-Volute 2021-10-24 13:01 - 2021-10-24 17:56 - 000000410 __RSH C:\ProgramData\ntuser.pol 2021-10-13 22:14 - 2021-10-07 19:28 - 002114672 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll The "AlternateShell" will be restored.) FF Extension: (TubeBuddy) - C:\Users\Pepega\AppData\Roaming\Mozilla\Firefox\Profiles\q42kwfcc.default-release\Extensions\e389d8c2-5554-4ba2-a36e-ac7a57093130@gmail.com.xpi [2021-10-14] 2021-10-15 11:40 - 2021-10-15 11:40 - 000006877 _____ C:\Users\Pepega\-1.14-windows.xml 0.0.0.0 reports.wes.df.telemetry.microsoft.com AMD Suggests Possible Fixes for Ryzen USB Connectivity Issues 2021-10-02 23:07 - 2021-10-04 18:19 - 000000000 ____D C:\Users\Pepega\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc Task: {a68a203b-7eaa-4914-a565-5ff9759ae2a4} - no filepath Task: {d4928d07-631c-4754-af4f-3f5f19729138} - no filepath Task: {481404b2-cd19-4388-9998-80f99056dcfd} - no filepath FirewallRules: [{F7197523-B9AE-42F6-9BCD-3487235CDA82}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe => No File 2021-10-18 19:33 - 2021-10-18 19:33 - 000002385 _____ C:\Users\Pepega\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nahimic Companion.lnk ==================== Services (Whitelisted) =================== 2021-10-03 23:13 - 2021-10-03 23:14 - 000008192 ___SH C:\DumpStack.log.tmp (CloudBees, Inc.) [File not signed] C:\Program Files (x86)\GIGABYTE\AORUS LCD Panel Setting\MonitorService-exec.exe Microsoft Edge (HKLM-x32\\Microsoft Edge) (Version: 95.0.1020.30 - Microsoft Corporation) Aorus Engine was working fine and then just stopped after a day or two. HKU\S-1-5-21-326566074-3447909417-183555969-1001\\StartupApproved\Run: => "Windows Driver Installation Service" 2021-10-02 23:01 - 2021-10-24 12:21 - 000000000 ____D C:\ProgramData\Package Cache "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{57f92185-4f7e-4549-bf72-8ded737637ee}" => removed successfully R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [844528 2021-10-16] (Adobe Inc. -> Adobe Inc.) The following corrective action will be taken in 3 milliseconds: Restart the service. Motherboard: Micro-Star International Co., Ltd. MEG X570 UNIFY (MS-7C35) ==================== Accounts: ============================= Task: {d7495c49-8426-461c-8455-350522fba9cb} - no filepath Entity Framework 6.2.0 Tools for Visual Studio 2022 (HKLM-x32\\{3A21F37E-9707-4E7F-94EB-2937A1C931FA}) (Version: 6.2.0.0 - Microsoft Corporation) Hidden HKU\S-1-5-21-326566074-3447909417-183555969-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp//go.microsoft.com/fwlink/?LinkId=54896 Windows Software Development Kit - Windows 10.0.19041.685 (HKLM-x32\\{4591faf1-a2db-4a3d-bfda-aa5a4ebb1587}) (Version: 10.1.19041.685 - Microsoft Corporation) 0.0.0.0 telemetry.microsoft.com 2021-10-05 09:55 - 2021-10-05 09:55 - 000000000 ____D C:\Users\Pepega\AppData\Roaming\Mozilla 2021-10-02 23:07 - 2021-10-24 21:18 - 000000000 ____D C:\Users\Pepega\AppData\Roaming\discord Faulting package-relative application ID: 2021-10-03 09:05 - 2019-03-19 15:52 - 000000000 ____D C:\Windows\appcompat I assume this one is for the gpu mining as my gpu is also being used on 100%, but i am not able to see which app is using 100%, as the miner has a script where it immediately stops mining when process hacker or task manager is opened, the only way i was able to tell that the gpu was being used at 100% was because of an app that the gpu manufacturer has provided Close the Dell Digital Delivery application. WinRT Intellisense Desktop - Other Languages (HKLM-x32\\{B42BF427-AFDB-C00F-DB60-6F51395D74A1}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{e21ec10f-b0f2-4d8c-ac9d-e74491370460}" => removed successfully [File not signed] C:\Program Files (x86)\GIGABYTE\AORUS LCD Panel Setting\GVDisplay.dll Task: {ca0fb10b-e917-4aa5-9e3a-f6a019682f3f} - no filepath "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{53092fd3-455c-4d74-9110-8a5211ddb6c2}" => removed successfully Running from C:\Users\Pepega\Downloads (If an entry is included in the fixlist, it will be removed from the registry.

Doctor Ludwig Bessner, Shadow Mountain High School Athletics, Tennessee Basketball Recruiting, Is 72k A Good Salary In California, Salvadoran Soccer Players In Europe, Articles T