|
Zdravo forumasi,
Pojavio mi se problem svaki put kad igram igricu ili upalim kompjuter iskoci mi error MFResident.exe -System Error Exception Processing Message 0xc0000006 - Unexpected.
Ja sam brisao viruse cistio komp za sad nema virusa ali volio bih ipak da se provjeri ima vodje iskusnih kolega sa foruma.Unaprijed hvala 
Evo izvjestaja
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 10-04-2023
Ran by Anunnaki (administrator) on DESKTOP-GAQ1LPE (Micro-Star International Co., Ltd. MS-7B22) (10-04-2023 22:41:02)
Running from C:\Users\Anunnaki\Desktop
Loaded Profiles: Anunnaki
Platform: Microsoft Windows 10 Pro Version 22H2 19045.2788 (X64) Language: English (United States)
Default browser: Brave
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
(C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe ->) (Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.133\BraveCrashHandler.exe
(C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe ->) (Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.133\BraveCrashHandler64.exe
(C:\Program Files (x86)\Common Files\iMyFone\Components\Resident\LocalService.exe ->) () [File not signed] C:\Program Files (x86)\Common Files\iMyFone\Components\Resident\MFResident.exe
(C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe ->) (The qBittorrent Project) [File not signed] D:\Program Files (x86)\qBittorrent\qbittorrent.exe
(explorer.exe ->) (Brave Software, Inc. -> Brave Software, Inc.) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe <16>
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_9ac57e7353edf293\RstMwService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_fddb643595e0b8d0\LMS.exe
(services.exe ->) (ND_Apps -> Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_50916785244854f2\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_1e9988599adb3e80\RtkAudUService64.exe <2>
(services.exe ->) (Shenzhen iMyFone Technology Co., Ltd -> ) C:\Program Files (x86)\Common Files\iMyFone\Components\Resident\LocalService.exe
(svchost.exe ->) (Bitsum Technologies (Bitsum LLC) -> Bitsum LLC) C:\Program Files\ParkControl\ParkControl.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> ) C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_1e9988599adb3e80\RtkAudUService64.exe [1622896 2022-11-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Policies\Explorer: [SettingsPageVisibility] hide:quiethours;tabletmode;project;crossdevice;remotedesktop;mobile-devices;network-cellular;network-wificalling;network-airplanemode;nfctransactions;maps;sync;speech;easeofaccess-magnifier;easeofacce (the data entry has 360 more characters).
HKLM\...\Policies\Explorer: [NoAutorun] 1
HKLM\...\Policies\Explorer: [NoStartMenuMFUprogramsList] 1
HKLM\...\Policies\Explorer: [AllowOnlineTips] 0
HKLM\...\Policies\Explorer: [HideSCAMeetNow] 1
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center: Restriction <==== ATTENTION
HKLM\Software\Policies\...\system: [PublishUserActivities] 0
HKLM\Software\Policies\...\system: [UploadUserActivities] 0
HKLM\Software\Policies\...\system: [DisableAcrylicBackgroundOnLogon] 1
HKLM\Software\Policies\...\system: [EnableActivityFeed] 0
HKLM\Software\Policies\...\system: [EnableSmartScreen] 0
HKLM\Software\Policies\...\system: [EnableCdp] 0
HKU\S-1-5-19\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (No File)
HKU\S-1-5-20\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (No File)
HKU\S-1-5-21-1272827238-3697549477-474237605-1001\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-21-1272827238-3697549477-474237605-1001\...\Policies\Explorer: [NoInstrumentation] 1
HKU\S-1-5-21-1272827238-3697549477-474237605-1001\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-21-1272827238-3697549477-474237605-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-1272827238-3697549477-474237605-1001\...\Policies\Explorer: [NoRecentDocsHistory] 1
HKU\S-1-5-21-1272827238-3697549477-474237605-1001\...\Policies\Explorer: [NoResolveSearch] 1
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\112.1.50.114\Installer\chrmstp.exe [2023-04-06] (Brave Software, Inc. -> Brave Software, Inc.)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {118151EB-1566-45F3-82A0-102ACA33B765} - System32\Tasks\ParkControl => C:\Program Files\ParkControl\ParkControl.exe [565240 2022-09-06] (Bitsum Technologies (Bitsum LLC) -> Bitsum LLC)
Task: {3A21A49A-5902-4945-9617-7CB870B1203C} - System32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{464F3073-E096-4A1F-BE38-1388F3F33FC3} => C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe /ua /installsource scheduler (No File)
Task: {3B41604B-C99B-42F5-A6C0-D329E177970F} - System32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{49FA18B4-059A-473A-96AD-BF6B802EEF49} => C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe /c (No File)
Task: {584CBFD9-91B3-4AEC-9806-47BD554BBE9A} - System32\Tasks\Agent Activation Runtime\S-1-5-21-1272827238-3697549477-474237605-1001 => C:\WINDOWS\System32\AgentActivationRuntimeStarter.exe (No File)
Task: {6424F5A8-E8B3-43DA-AB5C-47DB9E04D448} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [804408 2021-12-03] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll => No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{71d88227-7ddb-455d-93b9-02f878168ec2}: [DhcpNameServer] 192.168.1.254
HKU\S-1-5-21-1272827238-3697549477-474237605-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
Brave:
=======
BRA DefaultProfile: Default
BRA Profile: C:\Users\Anunnaki\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2023-04-10]
BRA HomePage: Default -> hxxp://www.google.com/
BRA StartupUrls: Default -> "hxxp://www.google.com/"
BRA DefaultSearchKeyword: Default -> :g
BRA Extension: (Return YouTube Dislike) - C:\Users\Anunnaki\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\gebbhagfogifgggkldgodflihgfeippi [2023-02-20]
BRA Extension: (FACEIT Enhancer) - C:\Users\Anunnaki\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\mokknliiomknodkdmpcellamkopbdmao [2023-03-31]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\Anunnaki\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2023-04-06]
BRA Extension: (Brave NTP background images) - C:\Users\Anunnaki\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2022-10-26]
BRA Extension: (Brave Ad Block Updater (Fanboy's Mobile Notifications List (plaintext))) - C:\Users\Anunnaki\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2023-04-10]
BRA Extension: (Wallet Data Files Updater) - C:\Users\Anunnaki\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2023-04-03]
BRA Extension: (Brave Ad Block Updater (Default)) - C:\Users\Anunnaki\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2022-12-02]
BRA Extension: (Brave NTP sponsored images) - C:\Users\Anunnaki\AppData\Local\BraveSoftware\Brave-Browser\User Data\gccbbckogglekeggclmmekihdgdpdgoe [2023-04-10]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\Anunnaki\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2023-04-04]
BRA Extension: (Brave Ad Block Updater (Default (plaintext))) - C:\Users\Anunnaki\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2023-04-10]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\Anunnaki\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2023-03-19]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\Anunnaki\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2023-04-04]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AarSvc; C:\WINDOWS\system32\svchost.exe [55320 2022-09-08] (Microsoft Windows Publisher -> Microsoft Corporation) <==== ATTENTION (no ServiceDLL)
S3 AarSvc; C:\WINDOWS\SysWOW64\svchost.exe [46504 2022-09-08] (Microsoft Windows Publisher -> Microsoft Corporation) <==== ATTENTION (no ServiceDLL)
S4 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [103264 2023-03-01] (Apple Inc. -> Apple Inc.)
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [174968 2022-10-26] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [174968 2022-10-26] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 BraveVpnService; C:\Program Files\BraveSoftware\Brave-Browser\Application\112.1.50.114\brave_vpn_helper.exe [3018032 2023-04-05] (Brave Software, Inc. -> Brave Software, Inc.)
S3 EAAntiCheatService; C:\Program Files\EA\AC\eaanticheat.gameservice.exe [48410632 2023-03-13] (Electronic Arts, Inc. -> )
S3 FACEITService; C:\Program Files\FACEIT AC\faceitservice.exe [56645000 2023-02-06] (FACE IT LIMITED -> )
S3 MessagingService; C:\WINDOWS\system32\svchost.exe [55320 2022-09-08] (Microsoft Windows Publisher -> Microsoft Corporation) <==== ATTENTION (no ServiceDLL)
S3 MessagingService; C:\WINDOWS\SysWOW64\svchost.exe [46504 2022-09-08] (Microsoft Windows Publisher -> Microsoft Corporation) <==== ATTENTION (no ServiceDLL)
R4 MFLocalService; C:\Program Files (x86)\Common Files\iMyFone\Components\Resident\LocalService.exe [56128 2022-06-30] (Shenzhen iMyFone Technology Co., Ltd -> )
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2572096 2023-03-29] (Electronic Arts, Inc. -> Electronic Arts)
S4 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3491144 2023-03-29] (Electronic Arts, Inc. -> Electronic Arts)
S3 SteelSeriesUpdateService; C:\Program Files\SteelSeries\GG\SteelSeriesUpdateService.exe [35200 2022-10-14] (SteelSeries ApS -> )
S4 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [16552248 2023-01-18] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
S3 BraveElevationService; "C:\Program Files\BraveSoftware\Brave-Browser\Application\112.1.50.114\elevation_service.exe" [X]
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_50916785244854f2\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_50916785244854f2\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
S4 uhssvc; "C:\Program Files\Microsoft Update Health Tools\uhssvc.exe" [X]
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 atvi-randgrid_sr; D:\SteamLibrary\steamapps\common\Call of Duty HQ\randgrid.sys [3311416 2023-04-03] (Activision Publishing Inc -> Activision Blizzard, Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R1 FACEIT; C:\Program Files\FACEIT AC\FACEIT.sys [17088528 2023-02-01] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 libusbK; C:\WINDOWS\System32\drivers\libusbK.sys [47928 2022-04-19] (Travis Lee Robinson -> hxxp://libusb-win32.sourceforge.net)
S3 Netaapl; C:\WINDOWS\System32\drivers\netaapl64.sys [23040 2022-10-08] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
S3 Revoflt; C:\WINDOWS\System32\DRIVERS\revoflt.sys [38400 2021-11-17] (Microsoft Windows Hardware Compatibility Publisher -> VS Revo Group)
R3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [36824 2020-07-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [42912 2022-07-06] (Microsoft Windows Hardware Compatibility Publisher -> SteelSeries ApS)
R3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [43960 2022-08-18] (Microsoft Windows Hardware Compatibility Publisher -> SteelSeries ApS)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 SteelSeries_Sonar_VAD; C:\WINDOWS\System32\DriverStore\FileRepository\steelseries-sonar-vad.inf_amd64_5f23057de8eba7db\SteelSeries-Sonar-VAD.sys [92856 2022-09-21] (SteelSeries ApS -> Windows (R) Win 7 DDK provider)
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2022-10-08] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
R3 UsbDk; C:\WINDOWS\System32\Drivers\UsbDk.sys [103128 2020-03-13] (Red Hat, Inc. -> Red Hat Inc.)
S3 EAAntiCheat; system32\drivers\eaanticheat.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2023-04-10 22:41 - 2023-04-10 22:41 - 000015893 _____ C:\Users\Anunnaki\Desktop\FRST.txt
2023-04-10 22:40 - 2023-04-10 22:41 - 000000000 ____D C:\FRST
2023-04-10 22:35 - 2023-04-10 22:35 - 002379776 _____ (Farbar) C:\Users\Anunnaki\Desktop\FRST64.exe
2023-04-09 23:14 - 2023-04-09 23:14 - 000003148 _____ C:\WINDOWS\system32\Tasks\MSIAfterburner
2023-04-09 12:27 - 2023-04-09 12:27 - 000000000 ____D C:\Users\Anunnaki\Downloads\TCP Optimizer
2023-04-09 12:25 - 2023-04-09 12:25 - 000285293 _____ C:\Users\Anunnaki\Downloads\TCP Optimizer.zip
2023-04-06 21:13 - 2023-04-06 21:13 - 000000000 ____D C:\Users\Anunnaki\Documents\Rockstar Games
2023-04-06 21:13 - 2023-04-06 21:13 - 000000000 ____D C:\Users\Anunnaki\AppData\Roaming\Goldberg SocialClub Emu Saves
2023-04-06 21:13 - 2023-04-06 21:13 - 000000000 ____D C:\Users\Anunnaki\AppData\Local\Rockstar Games
2023-04-06 21:12 - 2023-04-06 21:12 - 000000000 ____D C:\Users\Anunnaki\AppData\Roaming\EMPRESS
2023-04-06 14:51 - 2023-04-06 14:51 - 000000000 ____D C:\ProgramData\BraveSoftware
2023-04-05 20:21 - 2023-04-05 20:21 - 000000583 _____ C:\Users\Public\Desktop\Red Dead Redemption 2.lnk
2023-04-05 20:21 - 2023-04-05 20:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2023-04-05 16:02 - 2023-04-05 16:02 - 000000000 ____D C:\Users\Anunnaki\Desktop\PROGRAMS FOR WINDOWS
2023-04-03 10:53 - 2023-04-03 10:53 - 000000740 __RSH C:\ProgramData\ntuser.pol
2023-04-03 10:52 - 2023-04-01 08:54 - 000000496 _____ C:\WINDOWS\StartMenuLayout.xml
2023-04-03 10:42 - 2023-04-03 10:42 - 000000000 ____D C:\Users\Anunnaki\AppData\Local\NuGet
2023-04-03 10:40 - 2023-04-03 10:42 - 000000000 ____D C:\ProgramData\chocolatey
2023-04-03 10:39 - 2023-04-01 08:54 - 000000000 ____D C:\WINDOWS\AtlasModules
2023-04-03 10:39 - 2023-04-01 08:54 - 000000000 ____D C:\Users\Default\Desktop\Atlas
2023-04-03 10:39 - 2023-04-01 08:54 - 000000000 ____D C:\Users\Anunnaki\Desktop\Atlas
2023-04-03 10:37 - 2023-04-03 10:39 - 000000000 ____D C:\ProgramData\AME
2023-04-02 14:44 - 2023-04-02 14:44 - 000000000 ____D C:\Users\Anunnaki\AppData\Local\NVIDIA Corporation
2023-03-30 22:01 - 2023-03-30 22:01 - 000000000 _____ C:\WINDOWS\system32\dir
2023-03-30 21:50 - 2023-03-30 21:50 - 000000000 ____D C:\Users\Anunnaki\AppData\Local\mbam
2023-03-30 21:18 - 2023-03-30 21:18 - 000000000 ____D C:\Users\Anunnaki\AppData\Local\Apple Computer
2023-03-30 21:18 - 2023-03-30 21:18 - 000000000 ____D C:\ProgramData\3u
2023-03-30 21:16 - 2023-03-30 21:16 - 000000000 ____D C:\Program Files\Common Files\Apple
2023-03-29 14:53 - 2023-03-29 14:53 - 000000000 ____D C:\WINDOWS\system32\lxss
2023-03-29 14:53 - 2023-03-29 14:53 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2023-03-29 14:19 - 2023-03-17 18:38 - 002172456 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2023-03-29 14:19 - 2023-03-17 18:38 - 002172456 _____ C:\WINDOWS\system32\vulkaninfo.exe
2023-03-29 14:19 - 2023-03-17 18:38 - 001607720 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2023-03-29 14:19 - 2023-03-17 18:38 - 001607720 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2023-03-29 14:19 - 2023-03-17 18:38 - 001487368 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2023-03-29 14:19 - 2023-03-17 18:38 - 001479248 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2023-03-29 14:19 - 2023-03-17 18:38 - 001479248 _____ C:\WINDOWS\system32\vulkan-1.dll
2023-03-29 14:19 - 2023-03-17 18:38 - 001211432 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2023-03-29 14:19 - 2023-03-17 18:38 - 001211432 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2023-03-29 14:19 - 2023-03-17 18:34 - 001535984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2023-03-29 14:19 - 2023-03-17 18:34 - 001194520 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2023-03-29 14:19 - 2023-03-17 18:34 - 000851472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2023-03-29 14:19 - 2023-03-17 18:34 - 000671768 _____ C:\WINDOWS\system32\nvofapi64.dll
2023-03-29 14:19 - 2023-03-17 18:34 - 000506376 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2023-03-29 14:19 - 2023-03-17 18:33 - 000741920 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2023-03-29 14:19 - 2023-03-17 18:32 - 002165768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2023-03-29 14:19 - 2023-03-17 18:32 - 001621000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2023-03-29 14:19 - 2023-03-17 18:32 - 000979464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2023-03-29 14:19 - 2023-03-17 18:32 - 000759840 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2023-03-29 14:19 - 2023-03-17 18:30 - 013767176 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2023-03-29 14:19 - 2023-03-17 18:30 - 011647472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2023-03-29 14:19 - 2023-03-17 18:30 - 006083552 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2023-03-29 14:19 - 2023-03-17 18:30 - 005911536 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2023-03-29 14:19 - 2023-03-17 18:30 - 003429896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2023-03-29 14:19 - 2023-03-17 18:30 - 000457696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2023-03-29 14:19 - 2023-03-17 18:29 - 005834760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2023-03-29 14:19 - 2023-03-17 18:28 - 007932992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2023-03-29 14:19 - 2023-03-17 18:28 - 000852960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2023-03-29 14:19 - 2023-03-17 18:27 - 006796224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2023-03-29 14:19 - 2023-03-17 10:32 - 000104369 _____ C:\WINDOWS\system32\nvinfo.pb
2023-03-29 13:19 - 2022-08-23 23:22 - 000052208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhdap64.dll
2023-03-29 12:53 - 2023-04-06 21:13 - 000000000 ____D C:\Users\Anunnaki\AppData\Local\NVIDIA
2023-03-29 12:52 - 2023-03-17 10:32 - 000121880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2023-03-29 12:17 - 2023-03-29 12:17 - 000000000 ____D C:\WINDOWS\system32\Drivers\mde
2023-03-29 12:10 - 2023-03-29 12:10 - 000000000 ___HD C:\$WinREAgent
2023-03-29 11:23 - 2023-03-29 11:23 - 000000000 ____D C:\Program Files\chrome_url_fetcher_3440_876997146
2023-03-29 02:09 - 2023-03-29 02:09 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_UsbDk_01011.Wdf
2023-03-29 02:09 - 2023-03-29 02:09 - 000000000 ____D C:\Program Files\UsbDk Runtime Library
2023-03-29 02:09 - 2020-03-13 04:34 - 000103128 _____ (Red Hat Inc.) C:\WINDOWS\system32\Drivers\UsbDk.sys
2023-03-29 02:08 - 2022-04-19 12:49 - 000100352 _____ (hxxp://libusb-win32.sourceforge.net) C:\WINDOWS\system32\libusbK.dll
2023-03-29 02:08 - 2022-04-19 12:49 - 000083968 _____ (hxxp://libusb-win32.sourceforge.net) C:\WINDOWS\SysWOW64\libusbK.dll
2023-03-29 02:08 - 2022-04-19 12:49 - 000076384 _____ (hxxp://libusb-win32.sourceforge.net) C:\WINDOWS\system32\libusb0.dll
2023-03-29 02:08 - 2022-04-19 12:49 - 000047928 _____ (hxxp://libusb-win32.sourceforge.net) C:\WINDOWS\system32\Drivers\libusbK.sys
2023-03-29 02:08 - 2022-04-19 12:49 - 000046592 _____ (hxxp://libusb-win32.sourceforge.net) C:\WINDOWS\SysWOW64\libusb0.dll
2023-03-28 19:17 - 2023-03-28 19:17 - 000000000 ____D C:\Users\Anunnaki\AppData\Local\ProductData
2023-03-28 18:45 - 2023-03-28 19:08 - 000000000 ____D C:\Users\Anunnaki\AppData\Roaming\balena-etcher
2023-03-28 14:03 - 2023-03-28 14:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2023-03-28 14:03 - 2023-03-28 14:03 - 000000000 ____D C:\Program Files\7-Zip
2023-03-28 13:02 - 2023-03-28 13:02 - 000000000 ____D C:\Users\Anunnaki\AppData\Local\pangu
2023-03-28 11:35 - 2023-03-28 11:35 - 000000000 ____D C:\Users\Anunnaki\AppData\Local\Yandex
2023-03-28 11:26 - 2023-03-28 18:07 - 000017408 _____ C:\Users\Anunnaki\AppData\Local\WebpageIcons.db
2023-03-28 11:20 - 2023-03-28 11:20 - 000001222 _____ C:\Users\Public\Desktop\3uTools.lnk
2023-03-28 11:19 - 2023-03-30 21:39 - 000000000 ____D C:\Program Files (x86)\3uTools
2023-03-28 11:19 - 2023-03-28 11:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\3uTools
2023-03-28 09:35 - 2023-03-28 09:35 - 000000000 ____D C:\Users\Anunnaki\Downloads\trackerslist-master
2023-03-25 18:36 - 2023-03-28 19:17 - 000000000 ____D C:\Program Files\DIFX
2023-03-25 10:21 - 2023-03-29 11:24 - 000000000 ____D C:\Users\Anunnaki\AppData\Roaming\TSMonitor
2023-03-25 07:34 - 2023-03-29 02:47 - 000000128 _____ C:\Users\Anunnaki\AppData\Local\PUTTY.RND
2023-03-25 07:31 - 2023-03-28 14:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iMobie
2023-03-25 00:43 - 2023-03-28 14:43 - 000000000 ____D C:\Users\Anunnaki\AppData\Roaming\iMobie
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2023-04-10 22:34 - 2022-10-27 20:32 - 000000000 ____D C:\Users\Anunnaki\AppData\Roaming\qBittorrent
2023-04-10 22:27 - 2022-10-26 17:59 - 000000000 ____D C:\Program Files (x86)\Steam
2023-04-10 21:19 - 2022-10-26 17:37 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-04-10 12:16 - 2022-10-26 18:27 - 000000000 ____D C:\WINDOWS\INF
2023-04-10 12:16 - 2022-10-26 17:44 - 000771064 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-04-10 12:10 - 2023-01-31 13:21 - 000000000 ____D C:\ProgramData\NVIDIA
2023-04-10 12:10 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-04-10 12:10 - 2022-10-26 18:28 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-04-10 12:09 - 2022-10-26 17:37 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-04-09 23:14 - 2022-10-26 18:24 - 000262144 _____ C:\WINDOWS\system32\config\BBI
2023-04-09 13:01 - 2022-10-26 18:25 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-04-09 12:17 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\Web
2023-04-09 12:17 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\SystemApps
2023-04-08 17:47 - 2022-11-17 17:02 - 000000000 ____D C:\Program Files (x86)\MSI Afterburner
2023-04-06 21:13 - 2023-01-31 13:47 - 000000000 ____D C:\Users\Anunnaki\AppData\Local\D3DSCache
2023-04-06 14:51 - 2022-10-26 17:49 - 000002722 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2023-04-05 23:44 - 2022-11-17 17:02 - 000000000 ____D C:\WINDOWS\SysWOW64\directx
2023-04-03 10:53 - 2022-10-26 17:37 - 000257824 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-04-03 10:52 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\system32\setup
2023-04-03 10:51 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2023-04-03 10:51 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-04-03 10:51 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\schemas
2023-04-03 10:51 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2023-04-03 10:51 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\L2Schemas
2023-04-03 10:50 - 2022-10-26 18:29 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2023-04-03 10:50 - 2022-10-26 18:29 - 000000000 ____D C:\WINDOWS\system32\winrm
2023-04-03 10:50 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\SystemResources
2023-04-03 10:50 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\system32\DDFs
2023-04-03 10:50 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\ShellComponents
2023-04-03 10:50 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\Help
2023-04-03 10:50 - 2022-10-26 18:28 - 000000000 ____D C:\Program Files\Common Files\System
2023-04-03 10:46 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\system32\PointOfService
2023-04-03 10:46 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\ServiceState
2023-04-03 10:45 - 2022-10-26 18:28 - 000000000 ___HD C:\Program Files\WindowsApps
2023-04-03 10:45 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2023-04-03 10:45 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\system32\migwiz
2023-04-03 10:45 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\ShellExperiences
2023-04-03 10:45 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\Globalization
2023-04-03 10:45 - 2022-10-26 17:41 - 000000000 ____D C:\Users\Anunnaki\AppData\Local\Packages
2023-04-03 10:45 - 2022-10-26 17:41 - 000000000 ____D C:\ProgramData\Packages
2023-04-03 10:41 - 2022-10-26 18:28 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2023-04-03 10:41 - 2022-10-26 17:56 - 000000000 ____D C:\ProgramData\Package Cache
2023-04-03 10:40 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2023-04-03 10:40 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2023-04-03 10:40 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2023-04-03 10:40 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2023-04-03 10:40 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2023-04-03 10:40 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2023-04-03 10:40 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\system32\et-EE
2023-04-03 10:40 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\system32\es-MX
2023-04-03 10:39 - 2022-10-26 17:37 - 000008192 ___SH C:\DumpStack.log.tmp
2023-04-03 10:39 - 2019-12-07 11:10 - 000383488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2023-04-03 10:39 - 2019-12-07 11:10 - 000215552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2023-04-03 10:39 - 2019-12-07 11:10 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2023-04-03 10:39 - 2019-12-07 11:10 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2023-04-03 10:39 - 2019-12-07 11:10 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2023-04-03 10:39 - 2019-12-07 11:10 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2023-04-03 10:39 - 2019-12-07 11:10 - 000020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2023-04-03 10:39 - 2019-12-07 11:10 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2023-04-03 10:39 - 2019-12-07 11:10 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2023-04-03 10:39 - 2019-12-07 11:10 - 000005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll
2023-04-03 10:39 - 2019-12-07 11:10 - 000005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll
2023-04-03 10:39 - 2019-12-07 11:09 - 000494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2023-04-03 10:39 - 2019-12-07 11:09 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2023-04-03 10:39 - 2019-12-07 11:09 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2023-04-03 10:39 - 2019-12-07 11:09 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2023-04-03 10:39 - 2019-12-07 11:09 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2023-04-03 10:39 - 2019-12-07 11:09 - 000006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll
2023-04-03 10:39 - 2019-12-07 11:09 - 000006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll
2023-04-02 20:11 - 2022-12-01 16:12 - 000000000 ____D C:\ProgramData\Naughty Dog
2023-04-01 09:05 - 2022-12-01 16:12 - 000000000 ____D C:\Users\Anunnaki\AppData\Roaming\Goldberg SteamEmu Saves
2023-03-30 21:18 - 2022-12-05 00:23 - 000000000 ____D C:\ProgramData\Apple Computer
2023-03-30 21:03 - 2022-10-29 16:26 - 000000000 ____D C:\Users\Anunnaki\AppData\Local\CrashDumps
2023-03-29 16:38 - 2022-10-27 10:58 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-03-29 14:54 - 2023-01-31 13:21 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2023-03-29 14:54 - 2023-01-31 13:21 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2023-03-29 14:52 - 2023-01-31 13:20 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2023-03-29 12:23 - 2022-10-27 11:00 - 000000000 ____D C:\WINDOWS\system32\SteelSeries
2023-03-29 12:23 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2023-03-29 12:18 - 2022-10-26 21:11 - 000000000 ____D C:\ProgramData\Origin
2023-03-29 12:17 - 2022-11-01 20:32 - 000000000 ____D C:\Program Files\TeamViewer
2023-03-29 12:17 - 2022-10-26 18:28 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-03-29 12:17 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2023-03-29 12:17 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2023-03-29 12:17 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2023-03-29 12:17 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\system32\Dism
2023-03-29 12:17 - 2022-10-26 18:28 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-03-29 12:14 - 2022-10-26 17:40 - 003015680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-03-29 11:42 - 2022-12-02 17:17 - 000000000 ____D C:\Program Files (x86)\Origin
2023-03-29 11:42 - 2022-10-26 20:43 - 000000000 ____D C:\Users\Anunnaki\AppData\Local\Origin
2023-03-29 11:36 - 2022-12-02 17:19 - 000000000 ____D C:\Program Files (x86)\Origin Games
2023-03-29 11:36 - 2022-12-02 17:13 - 000000000 ____D C:\Users\Anunnaki\AppData\Roaming\Origin
2023-03-25 18:42 - 2022-10-26 20:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2023-03-25 18:39 - 2022-12-05 00:23 - 000000000 ____D C:\Users\Anunnaki\AppData\Roaming\Apple Computer
2023-03-25 07:31 - 2022-12-05 00:24 - 000000000 ____D C:\Users\Anunnaki\AppData\Local\iMobie_Inc
2023-03-24 19:41 - 2022-12-01 22:19 - 000000000 ____D C:\Program Files\EA
2023-03-24 16:24 - 2022-11-17 17:02 - 000001155 _____ C:\Users\Anunnaki\Desktop\MSI Afterburner.lnk
2023-03-24 09:03 - 2022-10-26 18:31 - 000000000 ____D C:\Users\Anunnaki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2023-03-21 19:40 - 2022-11-11 12:43 - 000003612 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{464F3073-E096-4A1F-BE38-1388F3F33FC3}
2023-03-21 19:40 - 2022-11-11 12:43 - 000003488 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{49FA18B4-059A-473A-96AD-BF6B802EEF49}
2023-03-19 03:55 - 2022-10-26 17:41 - 000000000 ____D C:\Users\Anunnaki
==================== Files in the root of some directories ========
2022-10-27 10:55 - 2022-10-27 10:55 - 000000073 _____ () C:\Users\Anunnaki\AppData\Roaming\settings.conf
2023-03-25 07:34 - 2023-03-29 02:47 - 000000128 _____ () C:\Users\Anunnaki\AppData\Local\PUTTY.RND
2022-12-02 13:40 - 2022-12-02 13:41 - 000000041 _____ () C:\Users\Anunnaki\AppData\Local\rtb.json
2023-03-28 11:26 - 2023-03-28 18:07 - 000017408 _____ () C:\Users\Anunnaki\AppData\Local\WebpageIcons.db
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
https://www.mycity.rs/must-login.png
|
