Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 08-10-2026 Ran by AUROBINDO (administrator) on SAVITRI (Dell Inc. Inspiron 3505) (12-10-2026 18:10:24) Running from D:\Setup\FRST\FRST64.exe Loaded Profiles: AUROBINDO Platform: Microsoft Windows 11 Home Single Language Version 25H2 26200.9457 (X64) Language: English (United States) Default browser: Brave Boot Mode: Normal ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler.exe (Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler64.exe (C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.UserProcess.exe (C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> ) C:\Program Files (x86)\Dell\UpdateService\DCF\Dell.Update.SubAgent.exe (C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell) C:\Program Files\Dell\MyDell\Manager\Dell.UCA.Manager.exe (C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell) C:\Program Files\Dell\TechHub\Dell.CoreServices.Client.exe (C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\AnalyticsSubAgent\Dell.TechHub.Analytics.SubAgent.exe (C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\DataManagerSubAgent\Dell.TechHub.DataManager.SubAgent.exe (C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe (C:\Program Files\Rivet Networks\SmartByte\RAPSService.exe ->) (Rivet Networks LLC) [File not signed] C:\Program Files\Rivet Networks\SmartByte\RAPS.exe (C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\DefenderAiPlatformHost.exe (C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\DefenderSessionHelper.exe (C:\Users\AUROBINDO\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\AUROBINDO\AppData\Local\PowerToys\KeyboardManagerEngine\PowerToys.KeyboardManagerEngine.exe (C:\Users\AUROBINDO\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\AUROBINDO\AppData\Local\PowerToys\WinUI3Apps\PowerToys.QuickAccess.exe (DriverStore\FileRepository\u0419126.inf_amd64_a532da6b289314a1\B418735\atiesrxx.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0419126.inf_amd64_a532da6b289314a1\B418735\atieclxx.exe (explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\AUROBINDO\AppData\Local\PowerToys\PowerToys.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\154.0.4258.62\msedgewebview2.exe <5> (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\26.173.0906.0008\OneDrive.Sync.Service.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\MoNotificationUx.exe (services.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0419126.inf_amd64_a532da6b289314a1\B418735\atiesrxx.exe (services.exe ->) (Dell Inc -> Dell Inc.) C:\Program Files\Dell\Fusion\FusionService.exe (services.exe ->) (Dell Technologies Inc. -> ) C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe (services.exe ->) (Dell Technologies Inc. -> ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe (services.exe ->) (Dell Technologies Inc. -> Dell) C:\Program Files\Dell\TechHub\Dell.TechHub.exe (services.exe ->) (Glarysoft Ltd -> Glarysoft Ltd) C:\Program Files (x86)\Common Files\Glarysoft\StartupManager\1.0\GUBootService.exe (services.exe ->) (Glarysoft Ltd -> Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities\x64\MemfilesService.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpDefenderCoreService.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MsMpEng.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\NisSrv.exe (services.exe ->) (Qualcomm Atheros, Inc. -> ) C:\Windows\System32\drivers\QcomWlanSrvx64.exe (services.exe ->) (Rivet Networks) [File not signed] C:\Program Files\Rivet Networks\SmartByte\SmartByteAnalyticsService.exe (services.exe ->) (Rivet Networks) [File not signed] C:\Program Files\Rivet Networks\SmartByte\SmartByteNetworkService.exe (services.exe ->) (Rivet Networks, LLC.) [File not signed] C:\Program Files\Rivet Networks\SmartByte\RAPSService.exe (svchost.exe ->) (DELL) [File not signed] C:\Program Files\Rivet Networks\SmartByte\SmartByteTelemetry.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\SDXHelper.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\26.173.0906.0008\FileCoAuth.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.380.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\MoUsoCoreWorker.exe ==================== Registry (Whitelisted) =================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKU\S-1-5-19\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4723048 2026-10-10] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-20\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4723048 2026-10-10] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-2252253667-2345452436-384743395-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4723048 2026-10-10] (Microsoft Corporation -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\Installer\chrmstp.exe [7684176 2026-10-09] (Brave Software, Inc. -> Brave Software, Inc.) HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] -> Startup: C:\Users\AUROBINDO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2026-07-24] ShortcutTarget: Send to OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation) ==================== Scheduled Tasks (Whitelisted) ================= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {E85791C8-F555-41E7-B679-29447B24F682} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{E6816D63-EA91-402C-9B5F-18118B73A814} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-05-12] (Brave Software, Inc. -> BraveSoftware Inc.) Task: {E499CB98-9B57-4437-A69F-4778F37479C7} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{81CE5960-3D2F-40E6-862B-E3B6AD9B7517} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-05-12] (Brave Software, Inc. -> BraveSoftware Inc.) Task: {097B815D-0832-48B7-983B-FEDEC3A4894F} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [11423616 2026-09-16] (Microsoft Corporation -> Microsoft Corporation) Task: {D5E68247-6532-48BB-A35D-DD0D2082E659} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29079368 2026-09-06] (Microsoft Corporation -> Microsoft Corporation) Task: {37921776-5CAB-4BA8-9472-098E60BA2CF2} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\opushutil.exe [61360 2026-09-16] (Microsoft Corporation -> Microsoft Corporation) Task: {3C9ACE9D-E48A-4461-ACC4-C511E4918763} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29079368 2026-09-06] (Microsoft Corporation -> Microsoft Corporation) Task: {D1BCF79F-77FD-477A-B95E-B13FBD5FF9C1} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [224544 2026-09-16] (Microsoft Corporation -> Microsoft Corporation) Task: {CDB7E2A8-89B9-46C1-BB3E-68297E39532F} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [224544 2026-09-16] (Microsoft Corporation -> Microsoft Corporation) Task: {DEC81F7B-D5AC-4DC6-88C4-71A677279F3F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpCmdRun.exe [1952424 2026-10-07] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {E2D1280B-BC84-43BF-9138-A0836631E14A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpCmdRun.exe [1952424 2026-10-07] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {74AA6F4B-1B3C-4D5C-B134-7C1BA7AB73A6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpCmdRun.exe [1952424 2026-10-07] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {27A58AE0-6E4B-4FD5-A146-79DD2537E29A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpCmdRun.exe [1952424 2026-10-07] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {794760A5-400C-4796-B0A3-DAA9BBC61216} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4409704 2026-10-10] (Microsoft Corporation -> Microsoft Corporation) Task: {A433EAB6-1577-44B0-8081-DF32A312A990} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2252253667-2345452436-384743395-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4409704 2026-10-10] (Microsoft Corporation -> Microsoft Corporation) Task: {0CB3781D-D82D-48D3-963B-BF5C9666683B} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2252253667-2345452436-384743395-1001 => C:\Program Files\Microsoft OneDrive\26.173.0906.0008\OneDriveLauncher.exe [867688 2026-10-10] (Microsoft Corporation -> Microsoft Corporation) Task: {9D033929-38BE-4405-9DAA-A8EFB7985A77} - System32\Tasks\SmartByte Telemetry => C:\Program Files\Rivet Networks\SmartByte\SmartByteTelemetry.exe [87040 2022-07-27] (DELL) [File not signed] Task: {440EA7C0-5D0E-4872-9CFB-535F512D3C9A} - System32\Tasks\ZoomUpdateTaskUser-S-1-5-21-2252253667-2345452436-384743395-1001 => C:\Users\AUROBINDO\AppData\Roaming\Zoom\bin\Zoom.exe [500168 2026-09-25] (Zoom Communications, Inc. -> Zoom Communications, Inc.) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 172.22.79.129 Tcpip\..\Interfaces\{100b8ad7-48b2-4b45-812f-4c9086881f8b}: [DhcpNameServer] 172.22.79.129 Tcpip\..\Interfaces\{100b8ad7-48b2-4b45-812f-4c9086881f8b}: [DhcpDomain] Home FireFox: ======== FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-09-16] (Microsoft Corporation -> Microsoft Corporation) Edge: ======= Edge DefaultProfile: Default Edge Profile: C:\Users\AUROBINDO\AppData\Local\Microsoft\Edge\User Data\Default [2026-10-10] Edge Extension: (Google Docs Offline) - C:\Users\AUROBINDO\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-09-15] Edge Extension: (Malwarebytes Browser Guard) - C:\Users\AUROBINDO\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2026-09-20] Edge Extension: (Edge relevant text changes) - C:\Users\AUROBINDO\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-05-07] Edge Extension: (AdGuard AdBlocker) - C:\Users\AUROBINDO\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\pdffkfellgipmhklpdmokmckkkfcopbh [2026-09-20] Chrome: ======= CHR DefaultProfile: Profile 1 CHR Profile: C:\Users\AUROBINDO\AppData\Local\Google\Chrome\User Data\Profile 1 [2026-09-19] CHR Profile: C:\Users\AUROBINDO\AppData\Local\Google\Chrome\User Data\System Profile [2026-06-12] Brave: ======= BRA DefaultProfile: Default BRA Profile: C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2026-10-12] BRA DefaultSearchURL: Default -> hxxps://search.brave.com/search?q={searchTerms}&source=desktop BRA DefaultSearchKeyword: Default -> :br BRA DefaultSuggestURL: Default -> hxxps://search.brave.com/api/suggest?q={searchTerms}&rich=true&rich_verticals=true&source=desktop BRA Extension: (Free Download Manager) - C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\ahmpjcflkgiildlgicmcieglgoilbfdp [2026-08-08] BRA Extension: (AdGuard AdBlocker) - C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2026-10-12] BRA Extension: (Malwarebytes Browser Guard) - C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2026-10-09] BRA Profile: C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\Profile 1 [2026-09-19] BRA HomePage: Profile 1 -> hxxp://google.com/ BRA Profile: C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\System Profile [2026-10-12] BRA Extension: (Brave Ad Block Updater (Brave First Party Adblock Filters (plaintext))) - C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2026-10-12] BRA Extension: (Brave Local Data Files Updater) - C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2026-10-12] BRA Extension: (Brave NTP background images) - C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2026-09-22] BRA Extension: (Brave Ad Block Updater (Mobile app promo blocker (plaintext))) - C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2026-10-04] BRA Extension: (Brave Ad Block Updater (Cookie notice blocker (plaintext))) - C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2026-10-12] BRA Extension: (Query Filter) - C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\cemdlagocoimleflkfkjoihojfainiho [2026-10-12] BRA Extension: (Brave NTP sponsored images) - C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\ckcgdbohephpcbegllbicpadgbifppfo [2026-09-24] BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2026-08-25] BRA Extension: (Brave Ad Block Updater (Allow X/Twitter Embeds (plaintext))) - C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\dkpggglmbjhgjhachikgmohmecomjndo [2026-08-01] BRA Extension: (Brave WebMCP Tool Scripts) - C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\eingdhelnaolbpcdkgddekhifcjfkalf [2026-09-12] BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2026-09-02] BRA Extension: (Brave Ad Block Updater (Brave Default Adblock Filters (plaintext))) - C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2026-10-12] BRA Extension: (Brave Ad Block Updater (Allow Facebook Embeds (plaintext))) - C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\jmfhneobcdckobmonkfjkbknnjjnegoh [2026-08-01] BRA Extension: (Brave Ads Resources) - C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\kdkakecfnmlfifkhlekmfkmmkpgeckcl [2026-05-12] BRA Extension: (Brave Ad Block Updater (Brave Default Privacy Filters (plaintext))) - C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\kihnoaefogbkmblfimmibknnmkllbhlf [2026-10-12] BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2026-09-18] BRA Extension: (Brave User Agent) - C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\nlpaeekllejnmhoonlpcefpfnpbajbpe [2026-10-12] BRA Extension: (P3A Configuration) - C:\Users\AUROBINDO\AppData\Local\BraveSoftware\Brave-Browser\User Data\P3AConfig [2026-05-12] ==================== Services (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-05-12] (Brave Software, Inc. -> BraveSoftware Inc.) S3 BraveElevationService; C:\Program Files\BraveSoftware\Brave-Browser\Application\155.1.97.56\elevation_service.exe [5167696 2026-10-07] (Brave Software, Inc. -> Brave Software, Inc.) S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167504 2026-05-12] (Brave Software, Inc. -> BraveSoftware Inc.) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13301568 2026-09-06] (Microsoft Corporation -> Microsoft Corporation) S3 dcpm-notify; C:\Program Files\Dell\CommandPowerManager\NotifyService.exe [329920 2023-03-22] (Dell Inc -> Dell Inc.) R2 Dell Digital Delivery Services; C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe [59160 2025-08-29] (Dell Technologies Inc. -> ) S3 Dell.CommandPowerManager.Service; C:\Windows\system32\dllhost.exe /Processid:{3E8CC5DB-3ADE-487D-BD79-774CD0C7133C} [83448 2026-09-01] (Microsoft Windows -> Microsoft Corporation) R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [50464 2026-04-24] (Dell Technologies Inc. -> ) R2 DellTechHub; C:\Program Files\Dell\TechHub\Dell.TechHub.exe [149704 2026-03-27] (Dell Technologies Inc. -> Dell) S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\26.173.0906.0008\FileSyncHelper.exe [3800424 2026-10-10] (Microsoft Corporation -> Microsoft Corporation) R2 FusionService; C:\Program Files\Dell\Fusion\FusionService.exe [26792 2023-02-12] (Dell Inc -> Dell Inc.) R2 GUBootService; C:\Program Files (x86)\Common Files\Glarysoft\StartupManager\1.0\GUBootService.exe [888208 2025-06-07] (Glarysoft Ltd -> Glarysoft Ltd) R2 GUMemfilesService; C:\Program Files (x86)\Glary Utilities\x64\MemfilesService.exe [414096 2025-06-07] (Glarysoft Ltd -> Glarysoft Ltd) S3 GUPMService; C:\Program Files (x86)\Glary Utilities\GUPMService.exe [76688 2025-06-07] (Glarysoft Ltd -> Glarysoft Ltd) S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11529224 2026-08-11] (Malwarebytes Inc -> Malwarebytes) S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [4291576 2026-08-11] (Malwarebytes Inc -> Malwarebytes) R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpDefenderCoreService.exe [2398680 2026-10-07] (Microsoft Windows Publisher -> Microsoft Corporation) S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\26.173.0906.0008\OneDriveUpdaterService.exe [4104552 2026-10-10] (Microsoft Corporation -> Microsoft Corporation) R2 QcomWlanSrv; C:\WINDOWS\System32\drivers\QcomWlanSrvx64.exe [197336 2021-06-14] (Qualcomm Atheros, Inc. -> ) R2 RAPSService; C:\Program Files\Rivet Networks\SmartByte\RAPSService.exe [56832 2022-07-27] (Rivet Networks, LLC.) [File not signed] S3 RNDBWM; C:\Program Files\Rivet Networks\SmartByte\RNDBWMService.exe [56832 2022-07-27] (Rivet Networks, LLC.) [File not signed] R2 SmartByte Analytics Service; C:\Program Files\Rivet Networks\SmartByte\SmartByteAnalyticsService.exe [1623552 2022-07-27] (Rivet Networks) [File not signed] R2 SmartByte Network Service x64; C:\Program Files\Rivet Networks\SmartByte\SmartByteNetworkService.exe [2381824 2022-07-27] (Rivet Networks) [File not signed] R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\NisSrv.exe [5555528 2026-10-07] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MsMpEng.exe [378168 2026-10-07] (Microsoft Windows Publisher -> Microsoft Corporation) ===================== Drivers (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [36736 2023-05-05] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0419126.inf_amd64_a532da6b289314a1\B418735\amdkmdag.sys [106596328 2025-09-10] (Advanced Micro Devices -> Advanced Micro Devices, Inc.) R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [61888 2023-05-24] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) R3 CirrusLFD; C:\WINDOWS\System32\DriverStore\FileRepository\cshda.inf_amd64_973dd943afdf23fb\CSLFD.sys [134768 2022-01-14] (Cirrus Logic, Inc -> Cirrus Logic, Inc.) R3 CirrusUFD; C:\WINDOWS\System32\DriverStore\FileRepository\cshda.inf_amd64_973dd943afdf23fb\CSUFD.sys [23840 2022-01-14] (WDKTestCert driver dev,131877739977077075 -> Cirrus Logic, Inc.) R3 DellInstrumentation; C:\WINDOWS\System32\drivers\DellInstrumentation.sys [33336 2025-11-14] (Microsoft Windows Hardware Compatibility Publisher -> Dell) R3 DellRbtn; C:\WINDOWS\System32\drivers\DellRbtn.sys [35792 2020-05-12] (Dell Inc -> OSR Open Systems Resources, Inc.) R1 GUBootStartup; \??\C:\Windows\System32\drivers\GUBootStartup.sys [23232 2025-06-21] (Microsoft Windows Hardware Compatibility Publisher -> ) R3 imgdrive; C:\WINDOWS\System32\drivers\imgdrive.sys [124504 2026-09-20] (Microsoft Windows Hardware Compatibility Publisher -> Yubsoft) R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82968 2026-10-07] (Microsoft Windows -> Microsoft Corporation) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2026-08-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [246376 2026-08-11] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) R3 SmbCoSvc; C:\WINDOWS\system32\DRIVERS\SmbCo10X64.sys [167080 2022-07-27] (Intel Corporation -> Rivet Networks, LLC.) S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-10-07] (Microsoft Windows -> Microsoft Corporation) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21632 2026-10-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [669712 2026-10-07] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [138264 2026-10-07] (Microsoft Windows -> Microsoft Corporation) ==================== SvcHost (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One month (created) (Whitelisted) ========= (If an entry is included in the fixlist, the file/folder will be moved.) 2026-10-10 20:58 - 2026-10-10 20:58 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task 2026-10-10 20:58 - 2026-10-10 20:58 - 000002023 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2026-10-10 19:42 - 2026-10-10 19:42 - 000000000 ____D C:\Users\AUROBINDO\AppData\Local\VIA 2026-10-10 19:42 - 2026-10-10 19:42 - 000000000 ____D C:\Users\AUROBINDO\AppData\Local\Renesas 2026-10-03 20:11 - 2026-10-03 20:11 - 000000000 ____D C:\Users\AUROBINDO\AppData\LocalLow\Exkee 2026-10-03 20:11 - 2026-10-03 20:11 - 000000000 ____D C:\Users\AUROBINDO\AppData\Local\SKIDROW 2026-10-03 20:09 - 2026-10-03 20:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Exkee 2026-09-25 19:20 - 2026-09-25 19:20 - 000004256 _____ C:\WINDOWS\system32\Tasks\ZoomUpdateTaskUser-S-1-5-21-2252253667-2345452436-384743395-1001 2026-09-25 19:20 - 2026-09-25 19:20 - 000000000 ____D C:\Users\AUROBINDO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom 2026-09-24 19:20 - 2026-09-24 19:20 - 000164752 _____ C:\Users\AUROBINDO\Downloads\Indeed_interview invite from DCG Data-Core Systems (India) Pvt. Ltd..pdf 2026-09-22 15:46 - 2026-09-22 15:49 - 000117319 _____ C:\Users\AUROBINDO\Downloads\CV_Anirban Goswami.pdf 2026-09-22 15:42 - 2026-09-22 15:42 - 000117282 _____ C:\Users\AUROBINDO\Downloads\Résumé.pdf 2026-09-20 13:24 - 2026-10-03 20:09 - 000001676 _____ C:\WINDOWS\system32\InstallMonitorLog.csv 2026-09-19 20:02 - 2026-09-19 20:03 - 000125278 _____ C:\Users\AUROBINDO\OneDrive\Documents\CV_Anirban Goswami.pdf 2026-09-19 17:59 - 2026-10-12 17:55 - 000000000 ____D C:\WINDOWS\SystemTemp 2026-09-18 17:54 - 2026-10-12 18:10 - 000000000 ____D C:\FRST 2026-09-15 20:25 - 2026-09-15 20:26 - 000075328 _____ C:\Users\AUROBINDO\OneDrive\Documents\Class eight mid term 2026-27 English marking scheme.pdf 2026-09-15 20:13 - 2026-09-15 20:14 - 000095017 _____ C:\Users\AUROBINDO\OneDrive\Documents\Class XI Midterm 2026-27 English Core Marking Scheme.pdf 2026-09-15 18:50 - 2026-10-12 17:26 - 000000000 ____D C:\WINDOWS\CbsTemp ==================== One month (modified) ================== (If an entry is included in the fixlist, the file/folder will be moved.) 2026-10-12 18:07 - 2026-08-11 18:49 - 000000000 ____D C:\Users\AUROBINDO\AppData\Local\Malwarebytes 2026-10-12 18:07 - 2024-04-01 12:56 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2026-10-12 17:35 - 2024-04-01 12:56 - 000000000 ____D C:\WINDOWS\AppReadiness 2026-10-12 17:20 - 2025-09-04 20:55 - 000003536 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2026-10-12 17:20 - 2025-09-04 20:55 - 000003464 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2026-10-12 17:19 - 2025-05-22 21:28 - 000000000 ____D C:\Program Files (x86)\Dell Digital Delivery Services 2026-10-11 16:46 - 2025-06-04 20:18 - 000000131 _____ C:\Users\AUROBINDO\OneDrive\Documents\temp.txt 2026-10-10 20:58 - 2025-09-04 20:55 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2252253667-2345452436-384743395-1001 2026-10-10 20:58 - 2025-09-04 20:55 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-2252253667-2345452436-384743395-1001 2026-10-10 20:58 - 2025-05-18 18:18 - 000000000 ____D C:\Program Files\Microsoft OneDrive 2026-10-10 20:58 - 2024-04-01 12:56 - 000000000 ___HD C:\Program Files\WindowsApps 2026-10-10 20:57 - 2025-09-04 20:53 - 000010074 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2 2026-10-10 20:52 - 2025-09-04 20:56 - 000833866 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2026-10-10 20:52 - 2024-04-01 12:54 - 000000000 ____D C:\WINDOWS\INF 2026-10-10 20:48 - 2026-08-07 21:08 - 000012288 ___SH C:\DumpStack.log.tmp 2026-10-10 20:48 - 2025-09-06 21:27 - 000001607 _____ C:\WINDOWS\system32\config\VSMIDK 2026-10-10 20:48 - 2025-09-04 20:55 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2026-10-10 20:48 - 2024-04-01 12:56 - 000000000 ____D C:\WINDOWS\ServiceState 2026-10-10 20:47 - 2024-04-01 12:51 - 000786432 _____ C:\WINDOWS\system32\config\BBI 2026-10-10 19:45 - 2025-09-04 20:24 - 000000000 ____D C:\Users\AUROBINDO\AppData\Roaming\Microsoft\Crypto 2026-10-10 19:45 - 2025-05-06 17:15 - 000000000 ___SD C:\Users\AUROBINDO\AppData\Roaming\Microsoft\Protect 2026-10-10 16:30 - 2020-09-27 20:23 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2026-10-09 12:33 - 2026-05-12 21:11 - 000002374 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk 2026-10-07 20:08 - 2020-09-27 20:21 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2026-10-06 17:12 - 2026-08-15 20:46 - 000000000 ____D C:\Users\AUROBINDO\AppData\Local\CrashDumps 2026-10-03 18:21 - 2025-05-06 18:43 - 000000000 ____D C:\Users\AUROBINDO\AppData\Roaming\Microsoft\Word 2026-10-03 18:19 - 2025-05-06 17:15 - 000000000 ____D C:\Users\AUROBINDO\AppData\Local\Packages 2026-10-03 18:19 - 2020-09-27 20:24 - 000000000 ____D C:\ProgramData\Packages 2026-09-26 18:37 - 2025-07-06 15:12 - 000000000 ____D C:\Users\AUROBINDO\AppData\Roaming\Zoom 2026-09-22 16:19 - 2025-05-06 17:18 - 000000000 ___RD C:\Users\AUROBINDO\OneDrive 2026-09-20 13:11 - 2025-05-06 17:42 - 000000000 ____D C:\Users\AUROBINDO\AppData\Local\D3DSCache 2026-09-19 17:45 - 2026-05-12 21:10 - 000000000 ____D C:\Program Files (x86)\BraveSoftware 2026-09-19 17:45 - 2025-09-04 20:20 - 000000000 ____D C:\Users\AUROBINDO\AppData\Roaming\Microsoft\Windows 2026-09-19 17:41 - 2024-04-01 12:56 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows 2026-09-19 17:37 - 2025-10-18 21:12 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleUserPEH 2026-09-17 18:51 - 2025-06-21 20:44 - 000000000 ____D C:\Program Files (x86)\Glary Utilities 2026-09-17 18:44 - 2025-09-04 20:50 - 000483912 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2026-09-17 18:04 - 2025-05-06 17:24 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2026-09-16 16:37 - 2024-04-01 12:56 - 000000000 ____D C:\ProgramData\USOPrivate 2026-09-15 20:29 - 2024-04-01 12:56 - 000000000 ____D C:\WINDOWS\bcastdvr 2026-09-15 18:48 - 2025-09-04 20:54 - 003381760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll ==================== Files in the root of some directories ======== 2025-05-06 17:32 - 2025-05-06 17:32 - 000051335 _____ () C:\Program Files\chrome_installer.log 2026-09-19 17:50 - 2026-09-19 17:51 - 000001324 _____ () C:\Program Files\chromium_installer.log 2026-09-02 19:59 - 2026-09-02 19:59 - 000007635 _____ () C:\Users\AUROBINDO\AppData\Local\Resmon.ResmonCfg ==================== SigCheck ============================ (There is no automatic fix for files that do not pass verification.) ==================== End of FRST.txt ========================