Fix result of Farbar Recovery Scan Tool (x64) Version: 18-10-2026 01 Ran by Dovel (19-10-2026 15:39:10) Run:1 Running from C:\Users\Dovel\Downloads\frst Loaded Profiles: Dovel Boot Mode: Normal ============================================== fixlist content: ***************** CreateRestorePoint: HOSTS: HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION Task: {997A2EAC-0E5D-4E7A-B06D-63E7D7D59083} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (No File) Task: {4D13C275-D10A-4781-A8DD-C2AB2CF1259B} - System32\Tasks\Meta\Messenger-SL-Helper-S-1-5-21-1853337303-587913857-1021407215-1001 => C:\Users\Dovel\AppData\Local\Programs\Messenger\MessengerHelper.exe --lassie (No File) Task: {BD436162-584D-4CA0-B6B4-533F6C7C6A74} - System32\Tasks\Meta\Messenger-WSP-Helper-S-1-5-21-1853337303-587913857-1021407215-1001 => MessengerHelper.exe --lassie (No File) Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File) Task: {0BB36A32-0D9E-4297-AFD7-6BD7B5DB4C9B} - System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => %windir%\System32\UNP\UpdateNotificationMgr.exe (No File) Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File) Task: {D3A1224A-8C60-490F-B5C4-1639337FD17F} - System32\Tasks\NortonLifeLock Trial Agent V2 => "C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NLOKTrialAgentV2.exe" /scheduled (No File) Task: {94C9FFEC-5710-47E0-B7D4-EA0649EFFFC0} - System32\Tasks\Opera scheduled Autoupdate 1689605662 => C:\Users\Dovel\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --bypasslauncher $(Arg0) (No File) Task: {9FEC1888-673D-4FF2-9141-CA5AA877E320} - System32\Tasks\Opera scheduled Autoupdate 1749568157 => C:\Users\Dovel\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask $(Arg0) (No File) File: C:\Users\Dovel\AppData\Local\yzsx_zsync_1726072685\zbrain_desktop.exe File: C:\Program Files (x86)\Microsoft Visual Studio\Common\Tools\VS-Ent98\Vanalyzr\varpc.exe S3 Reason.SnowService.f4f801e4; "C:\Program Files\ReasonLabs\EPP\Reason.Snow.exe" svc f4f801e4 terminate rsEngineSvc (No File) S3 phantomtap; C:\WINDOWS\System32\drivers\phantomtap.sys [50248 2020-07-06] (Avira Operations GmbH & Co. KG -> The OpenVPN Project) S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (The OpenVPN Project) [File not signed] S3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [49744 2023-02-20] (nordvpn s.a. -> The OpenVPN Project) StartBatch: md C:\DrvStore2 PnpUtil /export-driver * C:\DrvStore2 rundll32.exe c:\windows\system32\pnpclean.dll,RunDLL_PnpClean /DRIVERS /MAXCLEAN rundll32.exe c:\windows\system32\pnpclean.dll,RunDLL_PnpClean /DEVICES /MAXCLEAN DISM /online /get-drivers /format:table fltmc reg query "HKLM\SYSTEM\CurrentControlSet\Control\Class" /f *erfilters* /s pnputil /enum-devices /problem /ids c:\windows\system32\wbem\wmic.exe bios get /format:list EndBatch: StartPowerShell: Get-MpPreference | select Exclusion*, ThreatID*, Control* $Paths=(Get-MpPreference).ExclusionPath foreach ($Path in $Paths) { Remove-MpPreference -ExclusionPath $Path -Verbose} $Extensions=(Get-MpPreference).ExclusionExtension foreach ($Extension in $Extensions) { Remove-MpPreference -ExclusionExtension $Extension -Verbose} $Processes=(Get-MpPreference).ExclusionProcess foreach ($Process in $Processes) { Remove-MpPreference -ExclusionProcess $Process -Verbose} $ThreatIds = (Get-MpPreference).ThreatIDDefaultAction_Ids Foreach ($ThreatId in $ThreatIds) { Remove-MpPreference -ThreatIDDefaultAction_Ids $ThreatId -Verbose } Get-MpPreference Get-MpComputerStatus EndPowerShell: CustomCLSID: HKU\S-1-5-21-1853337303-587913857-1021407215-1001_Classes\CLSID\{4e6f7264-5650-4e00-0000-000000000000}\localserver32 -> "C:\Program Files\NordVPN\NordVPN.exe" -ToastActivated => No File CustomCLSID: HKU\S-1-5-21-1853337303-587913857-1021407215-1001_Classes\CLSID\{6a27a1a9-7be8-1491-04ca-ee68a211c258}\localserver32 -> "C:\Program Files\Google\Play Games\current\service\Service.exe" -ToastActivated => No File CustomCLSID: HKU\S-1-5-21-1853337303-587913857-1021407215-1001_Classes\CLSID\{89b2b650-c4dd-d68b-46e7-3176f1973c8b}\localserver32 -> "C:\Program Files\Voicemod Desktop\VoicemodDesktop.exe" -ToastActivated => No File ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => -> No File AlternateDataStreams: C:\WINDOWS\system32\$Acer$.cmd:48CE61F693 [5994] AlternateDataStreams: C:\ProgramData\mntemp:8EAD8B3507 [2134] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk:A1B76439FE [2134] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk:1069064143 [2134] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk:9185529B88 [2134] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\App Explorer.lnk:4C32B9D343 [2134] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [2134] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk:B96E9B8455 [2134] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Forge of Empires.url:1368113D25 [2134] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk:60EC9648C0 [2134] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook (classic).lnk:5465085A2F [2134] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook (classic).lnk:BE800952D3 [2134] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Parblo Tablet Setting.lnk:D057A1F6D7 [2134] FirewallRules: [UDP Query User{D512C723-02C0-4677-BCAA-86F60C821370}C:\users\dovel\downloads\sdi_r2601\sdi_r2601.exe] => (Allow) C:\users\dovel\downloads\sdi_r2601\sdi_r2601.exe => No File FirewallRules: [TCP Query User{1515FC31-F43E-44D2-811A-166A4997AF4B}C:\users\dovel\downloads\sdi_r2601\sdi_r2601.exe] => (Allow) C:\users\dovel\downloads\sdi_r2601\sdi_r2601.exe => No File FirewallRules: [UDP Query User{A6CC8153-68AF-428E-B7A5-E5AD27CA9646}C:\users\dovel\downloads\sdi_r2601\sdi_x64_r2601.exe] => (Block) C:\users\dovel\downloads\sdi_r2601\sdi_x64_r2601.exe => No File FirewallRules: [TCP Query User{C193F1DE-1E8C-41D1-82C4-A8D3E900DAB5}C:\users\dovel\downloads\sdi_r2601\sdi_x64_r2601.exe] => (Block) C:\users\dovel\downloads\sdi_r2601\sdi_x64_r2601.exe => No File FirewallRules: [UDP Query User{C773CAF8-F54B-46E6-8B58-020AAC3C7BDA}C:\users\dovel\appdata\local\programs\opera gx\opera.exe] => (Block) C:\users\dovel\appdata\local\programs\opera gx\opera.exe => No File FirewallRules: [TCP Query User{87FB9EAF-0C96-4888-90A0-4F9401207720}C:\users\dovel\appdata\local\programs\opera gx\opera.exe] => (Block) C:\users\dovel\appdata\local\programs\opera gx\opera.exe => No File FirewallRules: [UDP Query User{CD4672D4-F3BA-4BDF-8710-CCFFD21E6F38}C:\programdata\dovel\discord\app-1.0.9260\discord.exe] => (Block) C:\programdata\dovel\discord\app-1.0.9260\discord.exe => No File FirewallRules: [TCP Query User{F9FCC487-B6DD-4CA4-8DCD-BDB023C7A2E3}C:\programdata\dovel\discord\app-1.0.9260\discord.exe] => (Block) C:\programdata\dovel\discord\app-1.0.9260\discord.exe => No File FirewallRules: [{A31CC34C-40DC-49C3-B868-E7E0A101190E}] => (Allow) C:\Users\Dovel\AppData\Local\Programs\Opera\opera.exe => No File FirewallRules: [{65B3EBE6-C712-4F77-9125-B17079A9C8FF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PlateUp\PlateUp\PlateUp.exe => No File FirewallRules: [{A10BEFE4-869E-4496-B512-BA0F7C687287}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PlateUp\PlateUp\PlateUp.exe => No File FirewallRules: [{A2BEF700-DB9F-4934-9F0C-39449CAA059A}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File FirewallRules: [{D303B7E0-94F9-425C-AB8B-82018CD5B32B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => No File FirewallRules: [TCP Query User{965FBF5D-0243-4214-B0A8-0600322B24B5}C:\program files\windowsapps\spotifyab.spotifymusic_1.253.438.0_x64__zpdnekdrzrea0\spotify.exe] => (Allow) C:\program files\windowsapps\spotifyab.spotifymusic_1.253.438.0_x64__zpdnekdrzrea0\spotify.exe => No File FirewallRules: [UDP Query User{9C552F22-F7D1-499B-AB51-FC1C2A4D2ADC}C:\program files\windowsapps\spotifyab.spotifymusic_1.253.438.0_x64__zpdnekdrzrea0\spotify.exe] => (Allow) C:\program files\windowsapps\spotifyab.spotifymusic_1.253.438.0_x64__zpdnekdrzrea0\spotify.exe => No File FirewallRules: [{42BE7F16-01C1-4093-AB56-197B5BE111A4}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\mscopilot.exe => No File Reboot: ***************** CreateRestorePoint: Error(1=3%) -> Failed to create a restore point. C:\Windows\System32\Drivers\etc\hosts => moved successfully Hosts restored successfully. HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => could not remove, key could be protected HKLM\SOFTWARE\Policies\Mozilla => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{997A2EAC-0E5D-4E7A-B06D-63E7D7D59083}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{997A2EAC-0E5D-4E7A-B06D-63E7D7D59083}" => removed successfully C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task => moved successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Acrobat Update Task" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4D13C275-D10A-4781-A8DD-C2AB2CF1259B}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4D13C275-D10A-4781-A8DD-C2AB2CF1259B}" => removed successfully C:\WINDOWS\System32\Tasks\Meta\Messenger-SL-Helper-S-1-5-21-1853337303-587913857-1021407215-1001 => moved successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Meta\Messenger-SL-Helper-S-1-5-21-1853337303-587913857-1021407215-1001" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BD436162-584D-4CA0-B6B4-533F6C7C6A74}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BD436162-584D-4CA0-B6B4-533F6C7C6A74}" => removed successfully C:\WINDOWS\System32\Tasks\Meta\Messenger-WSP-Helper-S-1-5-21-1853337303-587913857-1021407215-1001 => moved successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Meta\Messenger-WSP-Helper-S-1-5-21-1853337303-587913857-1021407215-1001" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => removed successfully C:\WINDOWS\System32\Tasks\Microsoft\Windows\Location\Notifications => moved successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Location\Notifications" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0BB36A32-0D9E-4297-AFD7-6BD7B5DB4C9B}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0BB36A32-0D9E-4297-AFD7-6BD7B5DB4C9B}" => removed successfully C:\WINDOWS\System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => moved successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunUpdateNotificationMgr" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D3A1224A-8C60-490F-B5C4-1639337FD17F}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D3A1224A-8C60-490F-B5C4-1639337FD17F}" => removed successfully C:\WINDOWS\System32\Tasks\NortonLifeLock Trial Agent V2 => moved successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\NortonLifeLock Trial Agent V2" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{94C9FFEC-5710-47E0-B7D4-EA0649EFFFC0}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{94C9FFEC-5710-47E0-B7D4-EA0649EFFFC0}" => removed successfully C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1689605662 => moved successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Opera scheduled Autoupdate 1689605662" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9FEC1888-673D-4FF2-9141-CA5AA877E320}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9FEC1888-673D-4FF2-9141-CA5AA877E320}" => removed successfully C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1749568157 => moved successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Opera scheduled Autoupdate 1749568157" => removed successfully ========================= File: C:\Users\Dovel\AppData\Local\yzsx_zsync_1726072685\zbrain_desktop.exe ======================== "C:\Users\Dovel\AppData\Local\yzsx_zsync_1726072685\zbrain_desktop.exe" => not found ====== End of File: ====== ========================= File: C:\Program Files (x86)\Microsoft Visual Studio\Common\Tools\VS-Ent98\Vanalyzr\varpc.exe ======================== C:\Program Files (x86)\Microsoft Visual Studio\Common\Tools\VS-Ent98\Vanalyzr\varpc.exe File not signed MD5: B5BA71EADEED0773D2E0978F962E1BF3 Creation and modification date: 1998-06-06 00:00 - 1998-06-06 00:00 Size: 000034036 Attributes: ----A Company Name: Microsoft Corporation Internal Name: VSARPC Original Name: VSARPC.EXE Product: Microsoft (R) Developer Studio Description: Microsoft (R) Visual Studio VSA RPC Event Creator File Version: 6.00.8159 Product Version: 6.00.8159 Copyright: Copyright (C) Microsoft Corp. 1996-1998 Virusscan: https://virusscan.jotti.org/filescanjob/fk1d4ddldy ====== End of File: ====== HKLM\System\CurrentControlSet\Services\Reason.SnowService.f4f801e4 => removed successfully Reason.SnowService.f4f801e4 => service removed successfully HKLM\System\CurrentControlSet\Services\phantomtap => removed successfully phantomtap => service removed successfully HKLM\System\CurrentControlSet\Services\tap0901 => removed successfully tap0901 => service removed successfully HKLM\System\CurrentControlSet\Services\tapnordvpn => removed successfully tapnordvpn => service removed successfully ========= Batch: ========= 0 Microsoft PnP Utility Exporting driver package: oem88.inf (acerairplanemodecontroller.inf) Driver package exported successfully. Exporting driver package: oem68.inf (acerairplanemodecontroller.inf) Driver package exported successfully. Exporting driver package: oem65.inf (amdacpafdext.inf) Driver package exported successfully. Exporting driver package: oem71.inf (amdacpbtscoext.inf) Driver package exported successfully. Exporting driver package: oem59.inf (amdacpbus.inf) Driver package exported successfully. Exporting driver package: oem92.inf (amdacpbus.inf) Driver package exported successfully. Exporting driver package: oem66.inf (amdacpbusext.inf) Driver package exported successfully. Exporting driver package: oem45.inf (amdacpbusext.inf) Driver package exported successfully. Exporting driver package: oem70.inf (amdafd.inf) Driver package exported successfully. Exporting driver package: oem62.inf (amdafd.inf) Driver package exported successfully. Exporting driver package: oem100.inf (amdfendr.inf) Driver package exported successfully. Exporting driver package: oem96.inf (amdfendr.inf) Driver package exported successfully. Exporting driver package: oem52.inf (amdgpio2.inf) Driver package exported successfully. Exporting driver package: oem91.inf (amdgpio2.inf) Driver package exported successfully. Exporting driver package: oem60.inf (amdi2c.inf) Driver package exported successfully. Exporting driver package: oem83.inf (amdi2c.inf) Driver package exported successfully. Exporting driver package: oem76.inf (amdmicropep.inf) Driver package exported successfully. Exporting driver package: oem57.inf (amdmicropep.inf) Driver package exported successfully. Exporting driver package: oem61.inf (amdpcibridgeextension.inf) Driver package exported successfully. Exporting driver package: oem51.inf (amdpmf.inf) Driver package exported successfully. Exporting driver package: oem56.inf (amdpmf.inf) Driver package exported successfully. Exporting driver package: oem58.inf (amdppkg.inf) Driver package exported successfully. Exporting driver package: oem82.inf (amdppkg.inf) Driver package exported successfully. Exporting driver package: oem69.inf (amdpsp.inf) Driver package exported successfully. Exporting driver package: oem90.inf (amdpsp.inf) Driver package exported successfully. Exporting driver package: oem74.inf (amdsdwc.inf) Driver package exported successfully. Exporting driver package: oem73.inf (amdsdwc.inf) Driver package exported successfully. Exporting driver package: oem79.inf (amdsdwc.inf) Driver package exported successfully. Exporting driver package: oem49.inf (amdsdwsext.inf) Driver package exported successfully. Exporting driver package: oem87.inf (amdwddme.inf) Driver package exported successfully. Exporting driver package: oem47.inf (amdxe.inf) Driver package exported successfully. Exporting driver package: oem55.inf (bios_1.17.inf) Driver package exported successfully. Exporting driver package: oem78.inf (bios_1.19.inf) Driver package exported successfully. Exporting driver package: oem99.inf (dtsapo4acerextensionpkg.inf) Driver package exported successfully. Exporting driver package: oem75.inf (dxp_metadata_universal_driver_x64_extension.inf) Driver package exported successfully. Exporting driver package: oem72.inf (etdi2c.inf) Driver package exported successfully. Exporting driver package: oem95.inf (hdx_acerext_apot_2-66.inf) Driver package exported successfully. Exporting driver package: oem46.inf (hdx_acerext_apot_2-66.inf) Driver package exported successfully. Exporting driver package: oem98.inf (hdx_acerext_apot_ad98_c.inf) Driver package exported successfully. Exporting driver package: oem85.inf (hdx_acerext_apot_ad98_g.inf) Driver package exported successfully. Exporting driver package: oem81.inf (hdx_acerext_spdllt_2-66.inf) Driver package exported successfully. Exporting driver package: oem77.inf (hdx_acerext_xperi4_rtk_gen4.inf) Driver package exported successfully. Exporting driver package: oem89.inf (hpreststub.inf) Driver package exported successfully. Exporting driver package: oem64.inf (hpreststub.inf) Driver package exported successfully. Exporting driver package: oem40.inf (hpreststub.inf) Driver package exported successfully. Exporting driver package: oem33.inf (hpwinusbstub.inf) Driver package exported successfully. Exporting driver package: oem86.inf (hpwinusbstub.inf) Driver package exported successfully. Exporting driver package: oem42.inf (httptousbbridge.inf) Driver package exported successfully. Exporting driver package: oem67.inf (killernetworkextension.inf) Driver package exported successfully. Exporting driver package: oem7.inf (nvppc.inf) Driver package exported successfully. Exporting driver package: oem93.inf (nvvhci.inf) Driver package exported successfully. Exporting driver package: oem34.inf (paycgwinusb.inf) Driver package exported successfully. Exporting driver package: oem44.inf (pieextension.inf) Driver package exported successfully. Exporting driver package: oem30.inf (scantopcactivation.inf) Driver package exported successfully. Exporting driver package: oem48.inf (smbusamd.inf) Driver package exported successfully. Exporting driver package: oem54.inf (smbusamd.inf) Driver package exported successfully. Exporting driver package: oem43.inf (ssudbus.inf) Driver package exported successfully. Exporting driver package: oem50.inf (steamxbox.inf) Driver package exported successfully. Exporting driver package: oem84.inf (steamxbox.inf) Driver package exported successfully. Exporting driver package: oem80.inf (synrmihid.inf) Driver package exported successfully. Exporting driver package: oem0.inf (unusedscanstub.inf) Driver package exported successfully. Exporting driver package: oem20.inf (unusedscanstub.inf) Driver package exported successfully. Exporting driver package: oem53.inf (unusedscanstub.inf) Driver package exported successfully. Exporting driver package: oem63.inf (vpdhid_2edb.inf) Driver package exported successfully. Exporting driver package: oem94.inf (vpdhid_2edb_moufiltr.inf) Driver package exported successfully. Exporting driver package: oem97.inf (xvdd.inf) Driver package exported successfully. Exporting driver package: oem14.inf (acerpurifiedvoicehsa.inf) Driver package exported successfully. Exporting driver package: oem110.inf (adobepdf.inf) Driver package exported successfully. Exporting driver package: oem120.inf (amdacpafd.inf) Driver package exported successfully. Exporting driver package: oem121.inf (amdacpafdcomp.inf) Driver package exported successfully. Exporting driver package: oem123.inf (amdacpbt.inf) Driver package exported successfully. Exporting driver package: oem124.inf (amdacpusb.inf) Driver package exported successfully. Exporting driver package: oem32.inf (amdfdans.inf) Driver package exported successfully. Exporting driver package: oem115.inf (amdfdans.inf) Driver package exported successfully. Exporting driver package: oem116.inf (amdocl.inf) Driver package exported successfully. Exporting driver package: oem119.inf (amdsafd.inf) Driver package exported successfully. Exporting driver package: oem122.inf (amdsdws.inf) Driver package exported successfully. Exporting driver package: oem117.inf (amdwin-u0203303.inf) Driver package exported successfully. Exporting driver package: oem118.inf (atihdwt6.inf) Driver package exported successfully. Exporting driver package: oem22.inf (atihdwt6.inf) Driver package exported successfully. Exporting driver package: oem1.inf (bangolufsenaudiocontrolhsa.inf) Driver package exported successfully. Exporting driver package: oem9.inf (boaudiocontrolhsa.inf) Driver package exported successfully. Exporting driver package: oem37.inf (dtsapo4x64.inf) Driver package exported successfully. Exporting driver package: oem113.inf (dtsapo4xservice.inf) Driver package exported successfully. Exporting driver package: oem24.inf (dtsapo4xultrahsa.inf) Driver package exported successfully. Exporting driver package: oem29.inf (e2kw10x64.inf) Driver package exported successfully. Exporting driver package: oem109.inf (e_wf1yxe.inf) Driver package exported successfully. Exporting driver package: oem107.inf (gameflt.inf) Driver package exported successfully. Exporting driver package: oem112.inf (hdxacpacer.inf) Driver package exported successfully. Exporting driver package: oem16.inf (hpaudiocenterhsa.inf) Driver package exported successfully. Exporting driver package: oem13.inf (hpaudiocontrolhsa.inf) Driver package exported successfully. Exporting driver package: oem28.inf (hpesclscan.inf) Driver package exported successfully. Exporting driver package: oem17.inf (hpesclscan.inf) Driver package exported successfully. Exporting driver package: oem105.inf (hponedriver_spd_v4_x64.inf) Driver package exported successfully. Exporting driver package: oem106.inf (hpygid31_v4.inf) Driver package exported successfully. Exporting driver package: oem41.inf (hpygid31_win10s.inf) Driver package exported successfully. Exporting driver package: oem36.inf (killernetworkcomponent.inf) Driver package exported successfully. Exporting driver package: oem31.inf (mtkbtfilter.inf) Driver package exported successfully. Exporting driver package: oem26.inf (mtkwl6ex.inf) Driver package exported successfully. Exporting driver package: oem21.inf (nullscan.inf) Driver package exported successfully. Exporting driver package: oem4.inf (nvacegpu.inf) Driver package exported successfully. Exporting driver package: oem126.inf (nvaci.inf) Driver package exported successfully. Exporting driver package: oem5.inf (nvhda.inf) Driver package exported successfully. Exporting driver package: oem127.inf (nvhda.inf) Driver package exported successfully. Exporting driver package: oem6.inf (nvpcf.inf) Driver package exported successfully. Exporting driver package: oem128.inf (nvpcf.inf) Driver package exported successfully. Exporting driver package: oem125.inf (nvvad.inf) Driver package exported successfully. Exporting driver package: oem3.inf (omenaudiocontrolhsa.inf) Driver package exported successfully. Exporting driver package: oem38.inf (ovwrap2.inf) Driver package exported successfully. Exporting driver package: oem103.inf (piecomponent.inf) Driver package exported successfully. Exporting driver package: oem108.inf (prnbrcl1.inf) Driver package exported successfully. Exporting driver package: oem27.inf (prnepcl2.inf) Driver package exported successfully. Exporting driver package: oem102.inf (prnms001.inf) Driver package exported successfully. Exporting driver package: oem104.inf (prnms006.inf) Driver package exported successfully. Exporting driver package: oem101.inf (prnms009.inf) Driver package exported successfully. Exporting driver package: oem15.inf (realtekapo.inf) Driver package exported successfully. Exporting driver package: oem10.inf (realtekasio.inf) Driver package exported successfully. Exporting driver package: oem25.inf (realtekhsa.inf) Driver package exported successfully. Exporting driver package: oem11.inf (realtekintapo.inf) Driver package exported successfully. Exporting driver package: oem23.inf (realtekservice.inf) Driver package exported successfully. Exporting driver package: oem8.inf (realteksstppdll.inf) Driver package exported successfully. Exporting driver package: oem19.inf (realteksstppdll2.inf) Driver package exported successfully. Exporting driver package: oem18.inf (realtekuapo2.inf) Driver package exported successfully. Exporting driver package: oem2.inf (realtekwov.inf) Driver package exported successfully. Exporting driver package: oem114.inf (u0203303.inf) Driver package exported successfully. Exporting driver package: oem35.inf (u0382200.inf) Driver package exported successfully. Exporting driver package: oem39.inf (u0382202.inf) Driver package exported successfully. Exporting driver package: oem111.inf (uwppair.inf) Driver package exported successfully. Exporting driver package: oem12.inf (voiceclarityep_audio_component.inf) Driver package exported successfully. Total driver packages: 129 Exported driver packages: 129 0 0 Deployment Image Servicing and Management tool Version: 10.0.26100.9549 Image Version: 10.0.26300.9711 Obtaining list of 3rd party drivers from the driver store... Driver packages listing: -------------- | ----------------------------------------------- | ----- | --------------------- | ---------------------------- | ---------- | --------------- Published Name | Original File Name | Inbox | Class Name | Provider Name | Date | Version -------------- | ----------------------------------------------- | ----- | --------------------- | ---------------------------- | ---------- | --------------- oem101.inf | prnms009.inf | No | Printer | Microsoft | 6/21/2006 | 10.0.26100.4484 oem102.inf | prnms001.inf | No | Printer | Microsoft | 6/21/2006 | 10.0.26100.1 oem104.inf | prnms006.inf | No | Printer | Microsoft | 11/29/2016 | 16.0.7629.4000 oem105.inf | hponedriver_spd_v4_x64.inf | No | Printer | HP | 1/5/2026 | 6.1.1.3905 oem106.inf | hpygid31_v4.inf | No | Printer | HP | 6/15/2022 | 31.1.2001.9295 oem107.inf | gameflt.inf | No | HSM | Xbox | 8/6/2026 | 10.0.22021.3 oem108.inf | prnbrcl1.inf | No | Printer | Brother | 4/22/2009 | 10.0.17119.1 oem109.inf | e_wf1yxe.inf | No | Printer | EPSON | 6/28/2025 | 3.80.0.0 oem110.inf | adobepdf.inf | No | Printer | Adobe | 11/25/2019 | 19.3.0.0 oem111.inf | uwppair.inf | No | SoftwareComponent | Advanced Micro Devices, Inc. | 3/21/2022 | 31.2220.0.0 oem112.inf | hdxacpacer.inf | No | MEDIA | Realtek Semiconductor Corp. | 5/10/2022 | 6.0.9350.1 oem113.inf | dtsapo4xservice.inf | No | SoftwareComponent | DTS | 8/25/2022 | 1.10.16.1 oem114.inf | u0203303.inf | No | Display | Advanced Micro Devices, Inc. | 8/17/2026 | 32.0.21045.5002 oem115.inf | amdfdans.inf | No | SoftwareComponent | Advanced Micro Devices, Inc. | 3/4/2026 | 1.4.40.0 oem116.inf | amdocl.inf | No | SoftwareComponent | Advanced Micro Devices, Inc. | 8/17/2026 | 32.0.21045.5002 oem117.inf | amdwin-u0203303.inf | No | SoftwareComponent | Advanced Micro Devices, Inc. | 8/17/2026 | 32.0.21045.5002 oem118.inf | atihdwt6.inf | No | MEDIA | Advanced Micro Devices | 11/4/2025 | 10.0.1.42 oem119.inf | amdsafd.inf | No | MEDIA | AMD | 6/5/2024 | 1.0.0.14 oem12.inf | voiceclarityep_audio_component.inf | No | AudioProcessingObject | Microsoft Corporation | 6/16/2026 | 1.0.4.7057 oem125.inf | nvvad.inf | No | MEDIA | NVIDIA | 8/4/2026 | 4.92.0.0 oem126.inf | nvaci.inf | No | Display | NVIDIA | 9/30/2026 | 32.0.16.1742 oem127.inf | nvhda.inf | No | MEDIA | NVIDIA Corporation | 7/23/2026 | 1.4.6.3 oem128.inf | nvpcf.inf | No | SoftwareDevice | NVIDIA | 5/20/2026 | 32.0.16.1534 oem14.inf | acerpurifiedvoicehsa.inf | No | SoftwareComponent | Realtek | 11/2/2022 | 11.0.6000.1 oem17.inf | hpesclscan.inf | No | Image | HP | 4/2/2026 | 63.8.7466.0 oem18.inf | realtekuapo2.inf | No | SoftwareComponent | Realtek | 5/9/2023 | 12.150.1105.140 oem23.inf | realtekservice.inf | No | SoftwareComponent | Realtek | 5/9/2023 | 1.0.616.0 oem24.inf | dtsapo4xultrahsa.inf | No | SoftwareComponent | DTS | 8/12/2022 | 1.11.3.0 oem25.inf | realtekhsa.inf | No | SoftwareComponent | Realtek | 5/9/2023 | 11.0.6000.294 oem26.inf | mtkwl6ex.inf | No | Net | MediaTek, Inc. | 9/22/2025 | 3.5.0.1349 oem27.inf | prnepcl2.inf | No | Printer | EPSON | 4/22/2009 | 10.0.17119.1 oem29.inf | e2kw10x64.inf | No | Net | Killer | 4/21/2023 | 10.65.421.2023 oem31.inf | mtkbtfilter.inf | No | Bluetooth | Mediatek Inc. | 1/19/2023 | 1.930.0.287 oem36.inf | killernetworkcomponent.inf | No | SoftwareComponent | Intel Corporation | 7/12/2023 | 3.1423.712.2 oem37.inf | dtsapo4x64.inf | No | AudioProcessingObject | DTS | 8/25/2022 | 1.10.19.1 oem38.inf | ovwrap2.inf | No | SoftwareComponent | Realtek | 3/16/2023 | 11.0.6000.30 oem45.inf | amdacpbusext.inf | No | Extension | AMD | 8/9/2022 | 6.0.4.10 oem47.inf | amdxe.inf | No | System | AMD | 9/23/2025 | 25.10.0.1 oem51.inf | amdpmf.inf | No | System | Advanced Micro Devices, Inc. | 8/21/2025 | 25.0.7.0 oem52.inf | amdgpio2.inf | No | System | Advanced Micro Devices, Inc | 3/22/2026 | 2.2.0.137 oem54.inf | smbusamd.inf | No | System | Advanced Micro Devices, Inc | 9/9/2025 | 5.12.0.44 oem58.inf | amdppkg.inf | No | System | Advanced Micro Devices, Inc. | 7/23/2026 | 8.0.0.65 oem60.inf | amdi2c.inf | No | System | Advanced Micro Devices, Inc. | 6/28/2026 | 1.2.0.131 oem62.inf | amdafd.inf | No | System | AMD | 8/21/2025 | 25.30.0.1 oem63.inf | vpdhid_2edb.inf | No | HIDClass | Parblo | 6/27/2023 | 1.3.0.0 oem67.inf | killernetworkextension.inf | No | Extension | Intel Corporation | 7/12/2023 | 3.1423.712.2 oem69.inf | amdpsp.inf | No | SecurityDevices | Advanced Micro Devices Inc. | 6/4/2026 | 5.46.0.0 oem71.inf | amdacpbtscoext.inf | No | Extension | Advanced Micro Devices, Inc. | 2/15/2022 | 2.0.0.453 oem75.inf | dxp_metadata_universal_driver_x64_extension.inf | No | Extension | HP Inc. | 9/4/2024 | 1.0.0.5 oem76.inf | amdmicropep.inf | No | System | Advanced Micro Devices, Inc. | 12/17/2025 | 1.0.47.1 oem77.inf | hdx_acerext_xperi4_rtk_gen4.inf | No | Extension | Realtek Semiconductor Corp. | 5/9/2023 | 6.0.9514.1 oem78.inf | bios_1.19.inf | No | Firmware | Insyde Software | 5/27/2026 | 5.42.1.19 oem80.inf | synrmihid.inf | No | HIDClass | Synaptics | 8/23/2021 | 19.0.25.11 oem81.inf | hdx_acerext_spdllt_2-66.inf | No | Extension | Realtek | 5/10/2022 | 6.0.9350.1 oem84.inf | steamxbox.inf | No | System | Valve Corporation | 6/2/2026 | 1.0.0.17 oem87.inf | amdwddme.inf | No | Extension | Advanced Micro Devices, Inc. | 8/30/2022 | 31.0.12028.2 oem88.inf | acerairplanemodecontroller.inf | No | HIDClass | Acer Incorporated | 6/2/2024 | 1.0.0.12 oem92.inf | amdacpbus.inf | No | System | AMD | 12/23/2025 | 6.0.2.118 oem94.inf | vpdhid_2edb_moufiltr.inf | No | Mouse | Parblo | 6/27/2023 | 1.3.0.0 oem95.inf | hdx_acerext_apot_2-66.inf | No | Extension | Realtek Semiconductor Corp. | 5/9/2023 | 6.0.9514.1 oem96.inf | amdfendr.inf | No | System | Advanced Micro Devices, Inc. | 2/6/2026 | 25.10.0.7 oem97.inf | xvdd.inf | No | SCSIAdapter | Xbox | 7/16/2026 | 10.0.22029.3 oem98.inf | hdx_acerext_apot_ad98_c.inf | No | Extension | Realtek Semiconductor Corp. | 5/9/2023 | 6.0.9514.1 oem99.inf | dtsapo4acerextensionpkg.inf | No | Extension | DTS | 1/11/2022 | 1.10.13.0 The operation completed successfully. Filter Name Num Instances Altitude Frame ------------------------------ ------------- ------------ ----- bindflt 1 409800 0 UCPD 5 385250.5 0 WdFilter 5 328010 0 storqosflt 0 244000 0 wcifs 0 189900 0 gameflt 2 189850 0 CldFlt 2 180451 0 bfs 7 150000 0 FileCrypt 0 141100 0 luafv 1 135000 0 UnionFS 0 130850 0 npsvctrig 1 46000 0 Wof 3 40700 0 FileInfo 5 40500 0 WinSetupMon 1 40300 0 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4d36e967-e325-11ce-bfc1-08002be10318} UpperFilters REG_MULTI_SZ partmgr LowerFilters REG_MULTI_SZ EhStorClass HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4d36e96b-e325-11ce-bfc1-08002be10318} UpperFilters REG_MULTI_SZ kbdclass HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4d36e96c-e325-11ce-bfc1-08002be10318} UpperFilters REG_MULTI_SZ ksthunk HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4d36e96f-e325-11ce-bfc1-08002be10318} UpperFilters REG_MULTI_SZ mouclass HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{50dd5230-ba8a-11d1-bf5d-0000f805f530} UpperFilters REG_MULTI_SZ scfilter HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{53487c23-680f-4585-acc3-1f10d6777e82} UpperFilters REG_MULTI_SZ partmgr HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{53966cb1-4d46-4166-bf23-c522403cd495} UpperFilters REG_MULTI_SZ partmgr HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{6bdd1fc6-810f-11d0-bec7-08002be2092f} UpperFilters REG_MULTI_SZ ksthunk HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{71a27cdd-812a-11d0-bec7-08002be2092f} LowerFilters REG_MULTI_SZ fvevol\0iorate\0rdyboost UpperFilters REG_MULTI_SZ volsnap HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{75416e63-5912-4dfa-ae8f-3efaccaffb14} UpperFilters REG_MULTI_SZ partmgr LowerFilters REG_MULTI_SZ EhStorClass HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{ca3e7ab9-b4c3-4ae6-8251-579ef933890f} UpperFilters REG_MULTI_SZ ksthunk HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{eec5ad98-8080-425f-922a-dabf3de3f69a} UpperFilters REG_MULTI_SZ WpdUpFltr End of search: 15 match(es) found. Microsoft PnP Utility Instance ID: ROOT\NET\0000 Device Description: Unknown Class Name: Unknown Class GUID: Unknown Manufacturer Name: Unknown Status: Problem Problem Code: 28 (0x1C) [CM_PROB_FAILED_INSTALL] Problem Status: 0xC0000490 Hardware IDs: phantomtap Instance ID: ROOT\UNNAMED_DEVICE\0000 Device Description: Unknown Class Name: Unknown Class GUID: Unknown Manufacturer Name: Unknown Status: Problem Problem Code: 28 (0x1C) [CM_PROB_FAILED_INSTALL] Problem Status: 0xC0000490 Hardware IDs: USB\VID_0956&PID_9001 Instance ID: ROOT\MEDIA\0000 Device Description: Unknown Class Name: Unknown Class GUID: Unknown Manufacturer Name: Unknown Status: Problem Problem Code: 28 (0x1C) [CM_PROB_FAILED_INSTALL] Problem Status: 0xC0000490 Hardware IDs: *VMDriver 'c:\windows\system32\wbem\wmic.exe' is not recognized as an internal or external command, operable program or batch file. ========= End of Batch: ========= ========= Powershell: ========= ExclusionExtension : ExclusionIpAddress : ExclusionPath : {C:\Games, C:\Users\Dovel\AppData\Local, C:\Users\Dovel\AppData\Local\Spotify, C:\Users\Dovel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk...} ExclusionProcess : {C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe} ThreatIDDefaultAction_Actions : ThreatIDDefaultAction_Ids : ControlledFolderAccessAllowedApplications : {C:\Program Files (x86)\Acer\Care Center\ACCStd.exe, C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrobat.exe, C:\Program Files (x86)\DODI-Repacks\Hogwarts Legacy\Phoenix\Binaries\Win64\HogwartsLegacy.exe, C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin64\dontstarve_steam_x64.exe...} ControlledFolderAccessDefaultProtectedFolders : {C:\Users\Dovel\OneDrive\Documents, C:\Users\Public\Documents, C:\Users\Dovel\OneDrive\Pictures, C:\Users\Public\Pictures...} ControlledFolderAccessProtectedFolders : VERBOSE: Performing operation 'Update MSFT_MpPreference' on Target 'ProtectionManagement'. VERBOSE: Performing operation 'Update MSFT_MpPreference' on Target 'ProtectionManagement'. VERBOSE: Performing operation 'Update MSFT_MpPreference' on Target 'ProtectionManagement'. VERBOSE: Performing operation 'Update MSFT_MpPreference' on Target 'ProtectionManagement'. VERBOSE: Performing operation 'Update MSFT_MpPreference' on Target 'ProtectionManagement'. VERBOSE: Performing operation 'Update MSFT_MpPreference' on Target 'ProtectionManagement'. VERBOSE: Performing operation 'Update MSFT_MpPreference' on Target 'ProtectionManagement'. VERBOSE: Performing operation 'Update MSFT_MpPreference' on Target 'ProtectionManagement'. VERBOSE: Performing operation 'Update MSFT_MpPreference' on Target 'ProtectionManagement'. VERBOSE: Performing operation 'Update MSFT_MpPreference' on Target 'ProtectionManagement'. VERBOSE: Performing operation 'Update MSFT_MpPreference' on Target 'ProtectionManagement'. AiAgentNetworkInspection : 0 AiAgentProtection : 0 AllowDatagramProcessingOnWinServer : False AllowNetworkProtectionDownLevel : False AllowNetworkProtectionOnWinServer : False AllowSwitchToAsyncInspection : True ApplyDisableNetworkScanningToIOAV : False AttackSurfaceReductionOnlyExclusions : AttackSurfaceReductionRules_Actions : AttackSurfaceReductionRules_Ids : AttackSurfaceReductionRules_RuleSpecificExclusions : AttackSurfaceReductionRules_RuleSpecificExclusions_Id : BruteForceProtectionAggressiveness : 0 BruteForceProtectionConfiguredState : 0 BruteForceProtectionExclusions : BruteForceProtectionLocalNetworkBlocking : False BruteForceProtectionMaxBlockTime : 0 BruteForceProtectionSkipLearningPeriod : False CheckForSignaturesBeforeRunningScan : False CloudBlockLevel : 0 CloudExtendedTimeout : 0 ComputerID : 697EC2E9-A668-4321-B4B1-4862DED29B03 ControlledFolderAccessAllowedApplications : {C:\Program Files (x86)\Acer\Care Center\ACCStd.exe, C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrobat.exe, C:\Program Files (x86)\DODI-Repacks\Hogwarts Legacy\Phoenix\Binaries\Win64\HogwartsLegacy.exe, C:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin64\dontstarve_steam_x64.exe...} ControlledFolderAccessDefaultProtectedFolders : {C:\Users\Dovel\OneDrive\Documents, C:\Users\Public\Documents, C:\Users\Dovel\OneDrive\Pictures, C:\Users\Public\Pictures...} ControlledFolderAccessProtectedFolders : DefinitionUpdatesChannel : 0 DeploymentChannel : 0 DisableArchiveScanning : False DisableAutoExclusions : False DisableBehaviorMonitoring : False DisableBlockAtFirstSeen : False DisableCacheMaintenance : False DisableCatchupFullScan : True DisableCatchupQuickScan : True DisableCoreServiceECSIntegration : False DisableCoreServiceTelemetry : False DisableCpuThrottleOnIdleScans : True DisableDatagramProcessing : False DisableDnsOverTcpParsing : False DisableDnsParsing : False DisableEmailScanning : True DisableFtpParsing : False DisableGradualRelease : False DisableHttpParsing : False DisableInboundConnectionFiltering : False DisableIOAVProtection : False DisableNetworkProtectionPerfTelemetry : False DisablePrivacyMode : False DisableQuicParsing : True DisableRdpParsing : False DisableRealtimeMonitoring : False DisableRemovableDriveScanning : True DisableRestorePoint : True DisableScanningMappedNetworkDrivesForFullScan : True DisableScanningNetworkFiles : False DisableScriptScanning : False DisableSmtpParsing : False DisableSshParsing : False DisableTamperProtection : False DisableTlsParsing : False EnableControlledFolderAccess : 1 EnableConvertWarnToBlock : False EnableDnsSinkhole : True EnableFileHashComputation : False EnableFullScanOnBatteryPower : False EnableLowCpuPriority : False EnableNetworkProtection : 0 EnablePackageInspection : 0 EnableUdpReceiveOffload : False EnableUdpSegmentationOffload : False EngineUpdatesChannel : 0 ExclusionExtension : ExclusionIpAddress : ExclusionPath : ExclusionProcess : ForceUseProxyOnly : False HideExclusionsFromLocalUsers : True HighThreatDefaultAction : 0 IntelTDTEnabled : False LowThreatDefaultAction : 0 MAPSReporting : 2 MeteredConnectionUpdates : False ModerateThreatDefaultAction : 0 NetworkProtectionReputationMode : 0 OobeEnableRtpAndSigUpdate : False PerformanceModeStatus : 1 PlatformUpdatesChannel : 0 ProxyBypass : ProxyPacUrl : ProxyServer : PUAProtection : 1 QuarantinePurgeItemsAfterDelay : 90 QuickScanIncludeExclusions : 0 RandomizeScheduleTaskTimes : True RealTimeScanDirection : 0 RemediationScheduleDay : 0 RemediationScheduleTime : 02:00:00 RemoteEncryptionProtectionAggressiveness : 0 RemoteEncryptionProtectionConfiguredState : 0 RemoteEncryptionProtectionExclusions : RemoteEncryptionProtectionMaxBlockTime : 0 RemoveScanningThreadPoolCap : False ReportDynamicSignatureDroppedEvent : False ReportingAdditionalActionTimeOut : 10080 ReportingCriticalFailureTimeOut : 10080 ReportingNonCriticalTimeOut : 1440 ScanAvgCPULoadFactor : 50 ScanOnlyIfIdleEnabled : True ScanParameters : 1 ScanPurgeItemsAfterDelay : 15 ScanScheduleDay : 0 ScanScheduleOffset : 120 ScanScheduleQuickScanTime : 00:00:00 ScanScheduleTime : 02:00:00 SchedulerRandomizationTime : 4 ServiceHealthReportInterval : 60 SevereThreatDefaultAction : 0 SharedSignaturesPath : SharedSignaturesPathUpdateAtScheduledTimeOnly : False SignatureAuGracePeriod : 0 SignatureBlobFileSharesSources : SignatureBlobUpdateInterval : 60 SignatureDefinitionUpdateFileSharesSources : SignatureDisableUpdateOnStartupWithoutEngine : False SignatureFallbackOrder : MicrosoftUpdateServer|MMPC SignatureFirstAuGracePeriod : 120 SignatureScheduleDay : 8 SignatureScheduleTime : 01:45:00 SignatureUpdateCatchupInterval : 1 SignatureUpdateInterval : 0 SubmitSamplesConsent : 1 ThreatIDDefaultAction_Actions : ThreatIDDefaultAction_Ids : ThrottleForScheduledScanOnly : True TrustLabelProtectionStatus : 0 UILockdown : False UnknownThreatDefaultAction : 0 PSComputerName : AMEngineVersion : 1.1.26090.9 AMProductVersion : 4.18.26090.9 AMRunningMode : Normal AMServiceEnabled : True AMServiceVersion : 4.18.26090.9 AntispywareEnabled : True AntispywareSignatureAge : 0 AntispywareSignatureLastUpdated : 10/19/2026 8:24:54 AM AntispywareSignatureVersion : 1.461.100.0 AntivirusEnabled : True AntivirusSignatureAge : 0 AntivirusSignatureLastUpdated : 10/19/2026 8:24:54 AM AntivirusSignatureVersion : 1.461.100.0 BehaviorMonitorEnabled : True ComputerID : 697EC2E9-A668-4321-B4B1-4862DED29B03 ComputerState : 0 ConfigurationProtection : 0 DefenderSignaturesOutOfDate : False DeviceControlDefaultEnforcement : DeviceControlPoliciesLastUpdated : 3/28/2023 3:34:47 PM DeviceControlState : Disabled FullScanAge : 1295 FullScanEndTime : 4/2/2023 6:56:25 PM FullScanOverdue : False FullScanRequired : False FullScanSignatureVersion : 1.385.1790.0 FullScanStartTime : 4/2/2023 6:42:13 PM InitializationProgress : ServiceStartedSuccessfully IoavProtectionEnabled : True IsTamperProtected : True IsVirtualMachine : False LastFullScanSource : 1 LastQuickScanSource : 2 NISEnabled : True NISEngineVersion : 1.1.26090.9 NISSignatureAge : 0 NISSignatureLastUpdated : 10/19/2026 8:24:54 AM NISSignatureVersion : 1.461.100.0 OnAccessProtectionEnabled : True ProductStatus : 524288 QuickScanAge : 1 QuickScanEndTime : 10/18/2026 3:40:50 PM QuickScanOverdue : False QuickScanSignatureVersion : 1.461.81.0 QuickScanStartTime : 10/18/2026 3:39:51 PM RealTimeProtectionEnabled : True RealTimeScanDirection : 0 RebootRequired : False SmartAppControlExpiration : SmartAppControlState : Off TamperProtectionSource : UI TroubleShootingDailyMaxQuota : TroubleShootingDailyQuotaLeft : TroubleShootingEndTime : TroubleShootingExpirationLeft : TroubleShootingMode : TroubleShootingModeSource : TroubleShootingQuotaResetTime : TroubleShootingStartTime : PSComputerName : ========= End of Powershell: ========= HKU\S-1-5-21-1853337303-587913857-1021407215-1001_Classes\CLSID\{4e6f7264-5650-4e00-0000-000000000000} => removed successfully HKU\S-1-5-21-1853337303-587913857-1021407215-1001_Classes\CLSID\{6a27a1a9-7be8-1491-04ca-ee68a211c258} => removed successfully HKU\S-1-5-21-1853337303-587913857-1021407215-1001_Classes\CLSID\{89b2b650-c4dd-d68b-46e7-3176f1973c8b} => removed successfully HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\ACE => not found C:\WINDOWS\system32\$Acer$.cmd => ":48CE61F693" ADS removed successfully C:\ProgramData\mntemp => ":8EAD8B3507" ADS removed successfully C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk => ":A1B76439FE" ADS removed successfully C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk => ":1069064143" ADS removed successfully C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk => ":9185529B88" ADS removed successfully C:\ProgramData\Microsoft\Windows\Start Menu\Programs\App Explorer.lnk => ":4C32B9D343" ADS removed successfully C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk => ":BE32D07BC5" ADS removed successfully C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk => ":B96E9B8455" ADS removed successfully C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Forge of Empires.url => ":1368113D25" ADS removed successfully C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk => ":60EC9648C0" ADS removed successfully C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook (classic).lnk => ":5465085A2F" ADS removed successfully C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook (classic).lnk => ":BE800952D3" ADS removed successfully C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Parblo Tablet Setting.lnk => ":D057A1F6D7" ADS removed successfully "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D512C723-02C0-4677-BCAA-86F60C821370}C:\users\dovel\downloads\sdi_r2601\sdi_r2601.exe" => removed successfully "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1515FC31-F43E-44D2-811A-166A4997AF4B}C:\users\dovel\downloads\sdi_r2601\sdi_r2601.exe" => removed successfully "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A6CC8153-68AF-428E-B7A5-E5AD27CA9646}C:\users\dovel\downloads\sdi_r2601\sdi_x64_r2601.exe" => removed successfully "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{C193F1DE-1E8C-41D1-82C4-A8D3E900DAB5}C:\users\dovel\downloads\sdi_r2601\sdi_x64_r2601.exe" => removed successfully "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{C773CAF8-F54B-46E6-8B58-020AAC3C7BDA}C:\users\dovel\appdata\local\programs\opera gx\opera.exe" => removed successfully "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{87FB9EAF-0C96-4888-90A0-4F9401207720}C:\users\dovel\appdata\local\programs\opera gx\opera.exe" => removed successfully "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{CD4672D4-F3BA-4BDF-8710-CCFFD21E6F38}C:\programdata\dovel\discord\app-1.0.9260\discord.exe" => removed successfully "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F9FCC487-B6DD-4CA4-8DCD-BDB023C7A2E3}C:\programdata\dovel\discord\app-1.0.9260\discord.exe" => removed successfully "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A31CC34C-40DC-49C3-B868-E7E0A101190E}" => removed successfully "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{65B3EBE6-C712-4F77-9125-B17079A9C8FF}" => removed successfully "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A10BEFE4-869E-4496-B512-BA0F7C687287}" => removed successfully "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A2BEF700-DB9F-4934-9F0C-39449CAA059A}" => removed successfully "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D303B7E0-94F9-425C-AB8B-82018CD5B32B}" => removed successfully "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{965FBF5D-0243-4214-B0A8-0600322B24B5}C:\program files\windowsapps\spotifyab.spotifymusic_1.253.438.0_x64__zpdnekdrzrea0\spotify.exe" => removed successfully "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{9C552F22-F7D1-499B-AB51-FC1C2A4D2ADC}C:\program files\windowsapps\spotifyab.spotifymusic_1.253.438.0_x64__zpdnekdrzrea0\spotify.exe" => removed successfully "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{42BE7F16-01C1-4093-AB56-197B5BE111A4}" => removed successfully Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 19-10-2026 15:46:54) Result of scheduled keys to remove after reboot: HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully ==== End of Fixlog 15:46:54 ====