Fix result of Farbar Recovery Scan Tool (x64) Version: 11-10-2025
Ran by Li Yice (22-10-2025 13:12:52) Run:6
Running from L:\桌面转移过来的\快捷方式们\系统相关\win11安装前重装的驱动与扫描工具
Loaded Profiles: Li Yice
Boot Mode: Safe Mode (minimal)
==============================================

fixlist content:
*****************
CloseProcesses:
SystemRestore: On
CreateRestorePoint:
R2 vlmcsd; C:\Windows\System32\kms-server.exe [39936 2020-03-28] () [File not signed]
R1 HyperVM; C:\Windows\system32\drivers\hvm.sys [41784 2015-06-13] (Beijing Rising Information Technology Corporation Limited -> Beijing Rising Information Technology Co., Ltd.)
R2 PassGuard; C:\WINDOWS\system32\drivers\PassGuard_x64.sys [111416 2016-02-05] (北京微通新成网络科技有限公司 -> )
R2 PECKbdProtector; C:\WINDOWS\system32\drivers\PECKP_x64.SYS [53088 2016-02-05] (Client Server International. Inc. Beijing Branch -> CSII)
S3 pelmouse; C:\Windows\system32\DRIVERS\pelmouse.sys [26880 2016-07-11] (WDKTestCert idd,131110062695071623 -> TPMX Electronics Ltd.)
S3 pelusblf; C:\Windows\system32\DRIVERS\pelusblf.sys [32544 2017-03-29] (WDKTestCert primax,131147703563436555 -> )
S3 pelvendr; C:\Windows\system32\DRIVERS\pelvendr.sys [15032 2016-07-11] (WDKTestCert idd,131110062695071623 -> TPMX Electronics Ltd.)
R0 ProxyDrvA0; C:\WINDOWS\ProxyDrvA0.sys [110192 2021-03-08] (武汉奇妙科技有限公司 -> 武汉奇妙科技有限公司)
R2 QQProtectX64; C:\WINDOWS\system32\drivers\QQProtectX64.sys [121344 2020-03-23] (Tencent Technology (Shenzhen) Company Limited -> Tencent)
S3 TesSafe; C:\WINDOWS\system32\TesSafe.sys [1143400 2019-07-16] (Tencent Technology(Shenzhen) Company Limited -> TENCENT)
S3 TweakCubeVD; C:\Windows\System32\drivers\TweakCubeVD.sys [271136 2016-10-03] (Qingdao Ruanmei Network Technology Co.,Ltd. -> 青岛软媒网络科技有限公司)
S3 VSPerfDrv100; l:\VisualStudio2010\Team Tools\Performance Tools\x64\VSPerfDrv100.sys [68440 2010-03-17] (Microsoft Corporation -> Microsoft Corporation)
R1 XLGuard; C:\Windows\System32\drivers\XLGuard.sys [58640 2019-08-08] (ShenZhen Thunder Networking Technologies Ltd. -> 深圳市迅雷网络技术有限公司)
R2 XLWFP; C:\Windows\System32\drivers\xlwfp.sys [78064 2019-08-08] (ShenZhen Thunder Networking Technologies Ltd. -> 深圳市迅雷网络技术有限公司)
cmd: rundll32.exe c:\windows\system32\pnpclean.dll,RunDLL_PnpClean /DRIVERS /MAXCLEAN
Reboot:
*****************

Processes closed successfully.
SystemRestore: On => Error
Error: Restore point can only be created in normal mode.
vlmcsd => service not found.
HKLM\System\CurrentControlSet\Services\HyperVM => removed successfully
HyperVM => service removed successfully
HKLM\System\CurrentControlSet\Services\PassGuard => removed successfully
PassGuard => service removed successfully
HKLM\System\CurrentControlSet\Services\PECKbdProtector => removed successfully
PECKbdProtector => service removed successfully
pelmouse => service not found.
pelusblf => service not found.
pelvendr => service not found.
ProxyDrvA0 => Service stopped successfully.
HKLM\System\CurrentControlSet\Services\ProxyDrvA0 => removed successfully
ProxyDrvA0 => service removed successfully
HKLM\System\CurrentControlSet\Services\QQProtectX64 => removed successfully
QQProtectX64 => service removed successfully
HKLM\System\CurrentControlSet\Services\TesSafe => removed successfully
TesSafe => service removed successfully
HKLM\System\CurrentControlSet\Services\TweakCubeVD => removed successfully
TweakCubeVD => service removed successfully
VSPerfDrv100 => service not found.
HKLM\System\CurrentControlSet\Services\XLGuard => removed successfully
XLGuard => service removed successfully
HKLM\System\CurrentControlSet\Services\XLWFP => removed successfully
XLWFP => service removed successfully

========= rundll32.exe c:\windows\system32\pnpclean.dll,RunDLL_PnpClean /DRIVERS /MAXCLEAN =========

0

========= End of CMD: =========



The system needed a reboot.

==== End of Fixlog 13:12:54 ====