1. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28-03-2026
2. Ran by Kutnjak (administrator) on DESKTOP-BQIMNEJ (ASUSTeK COMPUTER INC. X541NA) (30-03-2026 16:54:23)
3. Running from C:\Users\Kutnjak\Desktop\FRST64.exe
4. Loaded Profiles: Kutnjak
5. Platform: Microsoft Windows 10 Home Version 22H2 19045.6466 (X64) Language: English (United Kingdom)
6. Default browser: "C:\Users\Kutnjak\AppData\Local\Programs\Opera\opera.exe" -noautoupdate -- "%1"
7. Boot Mode: Normal
8.  
9. ==================== Processes (Whitelisted) =================
10.  
11. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
12.  
13. (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
14. (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
15. (C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
16. (C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
17. (C:\Users\Kutnjak\AppData\Local\Programs\Opera\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Kutnjak\AppData\Local\Programs\Opera\128.0.5807.77\opera_crashreporter.exe
18. (DriverStore\FileRepository\igdlh64.inf_amd64_baab50003164cdd5\igfxCUIService.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_baab50003164cdd5\igfxEM.exe
19. (explorer.exe ->) (AKD d.o.o. -> AKD d.o.o.) C:\Program Files\AKD\Certilia Middleware\CertiliaSigner.exe
20. (Intel\DPTF\esif_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
21. (Opera Norway AS -> Opera Software) C:\Users\Kutnjak\AppData\Local\Programs\Opera\opera.exe <21>
22. (services.exe ->) (AKD d.o.o. -> AKD d.o.o.) C:\Program Files\AKD\Certilia Middleware\service\CertiliaDcs.exe
23. (services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
24. (services.exe ->) (CyberLink Corp. -> ) C:\Program Files\CyberLink\Shared files\RichVideo64.exe
25. (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_a55aa2cd52a3429d\LMS.exe
26. (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
27. (services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\jhi_service.exe
28. (services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_baab50003164cdd5\igfxCUIService.exe
29. (services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_baab50003164cdd5\IntelCpHDCPSvc.exe
30. (services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_baab50003164cdd5\IntelCpHeciSvc.exe
31. (services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
32. (services.exe ->) (McAfee, Inc. -> Intel Security, Inc.) C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe
33. (services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\mcafee\WebAdvisor\servicehost.exe
34. (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
35. (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
36. (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
37. (services.exe ->) (TeamViewer -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
38. (svchost.exe ->) (ASUS) [File not signed] C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
39. (svchost.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
40. (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Kutnjak\AppData\Local\Microsoft\OneDrive\26.040.0301.0001_1\FileCoAuth.exe
41. (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
42. (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
43. (svchost.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
44. (svchost.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
45.  
46. ==================== Registry (Whitelisted) ===================
47.  
48. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
49.  
50. HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
51. HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
52. HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
53. HKU\S-1-5-21-3678239628-1737219384-588507674-1001\...\Run: [Opera Browser Assistant] => [X]
54. HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [3101848 2026-03-18] (Google LLC -> Google LLC)
55. HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\146.0.7680.165\Installer\chrmstp.exe [7359128 2026-03-25] (Google LLC -> Google LLC)
56. Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Certilia Signer.lnk [2025-09-10]
57. ShortcutTarget: Certilia Signer.lnk -> C:\Program Files\AKD\Certilia Middleware\CertiliaSigner.exe (AKD d.o.o. -> AKD d.o.o.)
58.  
59. ==================== Scheduled Tasks (Whitelisted) =================
60.  
61. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
62.  
63. Task: {F8F3EAD1-E6D0-4495-A280-3E1F40D82654} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [55808 2016-10-12] (ASUS) [File not signed]
64. Task: {CDE424A2-2FA0-494A-BC61-A49DC4FF768B} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [19967504 2016-11-14] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
65. Task: {5EE08B53-5F87-4A5E-86DF-72BD5B745C05} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [1578784 2016-07-07] (ASUSTeK Computer Inc. -> ASUSTek COMPUTER INC.) [File not signed]
66. Task: {12E8D4E8-EA7F-42B1-B021-6395F5E1CF3E} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
67. Task: {3CF28C47-808E-4C36-9129-77B97AEC37B5} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
68. Task: {05C4FBBF-BCB7-4522-9CFA-118D19646FE0} - System32\Tasks\Certilia Updater => C:\Program Files\AKD\Certilia Middleware\Updater.exe [1178480 2025-09-02] (AKD d.o.o. -> Agencija za komercijalnu djelatnost)
69. Task: {A4EFF1B6-2A08-4A3A-AF06-7E7C543B1F67} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem148.0.7730.0{6F7B7E68-D9A7-4BDF-8E54-513270790497} => C:\Program Files (x86)\Google\GoogleUpdater\148.0.7730.0\updater.exe [8459416 2026-03-12] (Google LLC -> Google LLC)
70. Task: {0D20579A-3404-48FF-8918-D94E3DDFC271} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16404784 2026-03-28] (Microsoft Corporation -> Microsoft Corporation)
71. Task: {E941CD8F-D0D2-4E79-9FDD-B0CC7BD826AC} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28533568 2026-03-28] (Microsoft Corporation -> Microsoft Corporation)
72. Task: {4A8DE546-47CB-4EC7-830B-3E539E41CDB3} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [73560 2026-03-28] (Microsoft Corporation -> Microsoft Corporation)
73. Task: {F845FA03-E453-475F-9C31-6BB9C95B77BD} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28533568 2026-03-28] (Microsoft Corporation -> Microsoft Corporation)
74. Task: {42D0D570-B0AB-4001-AFB9-FCCAF80BE12F} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [426776 2026-03-28] (Microsoft Corporation -> Microsoft Corporation)
75. Task: {4DC50085-E94C-4C2E-8775-20FB4E0C9433} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [426776 2026-03-28] (Microsoft Corporation -> Microsoft Corporation)
76. Task: {F0401279-37B1-4FF9-B2DF-7A13A35712B9} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [1349920 2026-03-28] (Microsoft Corporation -> Microsoft Corporation)
77. Task: {593AE92F-0B39-47E9-85C4-9DDAC9E39975} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16404784 2026-03-28] (Microsoft Corporation -> Microsoft Corporation)
78. Task: {4BF08E7C-4C99-4D9F-9887-88E7708B59BE} - System32\Tasks\Opera scheduled assistant Autoupdate 1709214803 => C:\Users\Kutnjak\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [6391768 2026-03-16] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --installdir="C:\Users\Kutnjak\AppData\Local\Programs\Opera\assistant" --producttype=assistant
79. Task: {8D360755-9638-4256-88B0-4B1DD2E75C2C} - System32\Tasks\Opera scheduled Autoupdate 1655651544 => C:\Users\Kutnjak\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [6391768 2026-03-16] (Opera Norway AS -> Opera Software)
80. Task: {2BEED256-822A-4D70-8E31-C21DEED5E437} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1473032 2016-10-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
81. Task: {0B7B3DDE-8413-497D-BC04-42962D7819DB} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16717832 2016-10-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
82. Task: {0BDE493A-EE23-4C84-9440-0F65FC6A3D0B} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [149712 2021-10-14] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
83. Task: {E39B04FB-3166-494E-B519-06F60D7B1BBC} - System32\Tasks\WpsExternal_20161111081738 => C:\Program Files (x86)\Kingsoft\WPS Office\ksolaunch.exe [516352 2016-11-11] (Zhuhai Kingsoft Office Software Co.,Ltd -> Zhuhai Kingsoft Office Software Co.,Ltd)
84. Task: {309E3EF8-8C76-4B15-8BA2-267A6707F7A7} - System32\Tasks\WpsKtpcntrQingTask_Administrator => C:\Program Files (x86)\Kingsoft\WPS Office\10.1.0.5644\office6\ktpcntr.exe [1531136 2016-11-11] (Zhuhai Kingsoft Office Software Co.,Ltd -> Zhuhai Kingsoft Office Software Co.,Ltd) -> qing 10.1.0.5644 xxx server_url="hxxp://kdl1.cache.wps.com/ksodl/wpscfg/client/____client____html____service____bubble.html" ic_server_url="hxxp://info.kingsoftstore.com/wpsv6internet/infos.ads"
85.  
86. (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
87.  
88. Task: C:\WINDOWS\Tasks\WpsExternal_20161111081738.job => C:\Program Files (x86)\Kingsoft\WPS Office\ksolaunch.exe
89. Task: C:\WINDOWS\Tasks\WpsKtpcntrQingTask_Administrator.job => C:\Program Files (x86)\Kingsoft\WPS Office\10.1.0.5644\office6\ktpcntr.exeÃqing 10.1.0.5644 xxx server_url=hxxp:/kdl1.cache.wps.com/ksodl/wpscfg/client/____client____html____service____bubble.html ic_server_url=hxxp:/info.kingsoftstore.com/wpsv6internet/infos.ads
90.  
91. ==================== Internet (Whitelisted) ====================
92.  
93. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
94.  
95. Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
96. Tcpip\..\Interfaces\{26c08b93-a893-4715-88d4-cc9904d96408}: [DhcpNameServer] 192.168.1.1 192.168.1.1
97. Tcpip\..\Interfaces\{26c08b93-a893-4715-88d4-cc9904d96408}: [DhcpDomain] home
98. Tcpip\..\Interfaces\{26c08b93-a893-4715-88d4-cc9904d96408}\9435B4F4E4F4651434D2730333534623: [DhcpNameServer] 192.168.5.1
99. Tcpip\..\Interfaces\{26c08b93-a893-4715-88d4-cc9904d96408}\9435B4F4E4F4651434D2730333534623: [DhcpDomain] Home
100. Tcpip\..\Interfaces\{af72b94d-ca85-4203-932a-71982cb51341}: [DhcpNameServer] 192.168.1.1 192.168.1.1
101. Tcpip\..\Interfaces\{af72b94d-ca85-4203-932a-71982cb51341}: [DhcpDomain] home
102.  
103. FireFox:
104. ========
105. FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
106. FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2022-06-30] [UpdateUrl:hxxps://sadownload.mcafee.com/products/SA/Win/xpi/webadvisor/update.json]
107. FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
108. FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-01-24] (Microsoft Corporation -> Microsoft Corporation)
109. FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-12-08] (Microsoft Corporation -> Microsoft Corporation)
110.  
111. Edge:
112. =======
113. Edge DefaultProfile: Default
114. Edge Profile: C:\Users\Kutnjak\AppData\Local\Microsoft\Edge\User Data\Default [2025-09-04]
115. Edge Extension: (Google Docs Offline) - C:\Users\Kutnjak\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-05-11]
116. Edge Extension: (Edge relevant text changes) - C:\Users\Kutnjak\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
117. Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
118. Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
119.  
120. Chrome:
121. =======
122. CHR Profile: C:\Users\Kutnjak\AppData\Local\Google\Chrome\User Data\Default [2026-01-14]
123. CHR Notifications: Default -> hxxps://mail.google.com
124. CHR Session Restore: Default -> is enabled.
125. CHR Extension: (McAfee® WebAdvisor) - C:\Users\Kutnjak\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2026-01-14]
126. CHR Extension: (Stands AdBlocker) - C:\Users\Kutnjak\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh [2025-09-01]
127. CHR Extension: (Chrome Web Store Payments) - C:\Users\Kutnjak\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-06-17]
128. CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
129. CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
130. CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
131. CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
132.  
133. Opera:
134. =======
135. OPR DefaultProfile: Default
136. OPR Profile: C:\Users\Kutnjak\AppData\Roaming\Opera Software\Opera Stable [2026-03-30]
137. OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
138. OPR Extension: (Rich Hints Agent) - C:\Users\Kutnjak\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2024-02-29]
139. OPR Extension: (Opera Wallet) - C:\Users\Kutnjak\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2024-02-29]
140. OPR Extension: (Amazon Assistant Promotion) - C:\Users\Kutnjak\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2024-02-29]
141.  
142. ==================== Services (Whitelisted) ===================
143.  
144. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
145.  
146. R2 CertiliaDcs; C:\Program Files\AKD\Certilia Middleware\service\CertiliaDcs.exe [4356464 2025-09-02] (AKD d.o.o. -> AKD d.o.o.)
147. R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13233464 2026-03-28] (Microsoft Corporation -> Microsoft Corporation)
148. S3 DevActSvc; C:\Program Files (x86)\ASUS\ASUS Device Activation\DevActSvc.exe [326032 2018-06-05] (ASUSTeK Computer Inc. -> )
149. S2 Kingsoft_WPS_UpdateService; C:\Program Files (x86)\Kingsoft\WPS Office\10.1.0.5644\wtoolex\wpsupdatesvr.exe [133376 2016-11-11] (Zhuhai Kingsoft Office Software Co.,Ltd -> Zhuhai Kingsoft Office Software Co.,Ltd)
150. R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11420952 2026-03-30] (Malwarebytes Inc -> Malwarebytes)
151. S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [2788304 2026-03-30] (Malwarebytes Inc. -> Malwarebytes)
152. R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [808728 2022-06-30] (McAfee, LLC -> McAfee, LLC)
153. S2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\2.5.312.0\McCSPServiceHost.exe [2139832 2017-05-31] (McAfee, Inc. -> McAfee, Inc.)
154. S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26020.6-0\MpDefenderCoreService.exe [2088128 2026-03-26] (Microsoft Windows Publisher -> Microsoft Corporation)
155. R2 PEFService; C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe [1043864 2017-07-31] (McAfee, Inc. -> Intel Security, Inc.)
156. R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] (CyberLink Corp. -> )
157. R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7032080 2016-05-12] (TeamViewer -> TeamViewer GmbH)
158. S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26020.6-0\NisSrv.exe [4451664 2026-03-26] (Microsoft Windows Publisher -> Microsoft Corporation)
159. S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26020.6-0\MsMpEng.exe [290704 2026-03-26] (Microsoft Windows Publisher -> Microsoft Corporation)
160. S3 wpscloudsvr; C:\Program Files (x86)\Kingsoft\WPS Office\wpscloudsvr.exe [162048 2016-11-11] (Zhuhai Kingsoft Office Software Co.,Ltd -> Zhuhai Kingsoft Office Software Co.,Ltd)
161.  
162. ===================== Drivers (Whitelisted) ===================
163.  
164. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
165.  
166. R3 AiCharger; C:\WINDOWS\system32\DRIVERS\AiCharger.sys [29312 2016-11-14] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
167. R3 AsusHFilter; C:\WINDOWS\System32\drivers\AsusHFilter.sys [30200 2016-12-22] (ASUSTeK Computer Inc. -> )
168. R3 AsusPTPDrv; C:\WINDOWS\System32\drivers\AsusPTPFilter.sys [108504 2019-04-24] (ASUSTek Computer Inc. -> ASUSTek COMPUTER INC.)
169. R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
170. S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [76800 2019-12-07] (Microsoft Corporation) [File not signed]
171. S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
172. R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae.sys [159296 2026-03-30] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
173. R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-18] (ASUSTek Computer Inc. -> ASUS)
174. S3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82352 2026-02-10] (Microsoft Windows -> Microsoft Corporation)
175. R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [234600 2026-03-30] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
176. S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2026-03-30] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
177. R3 MBAMFarflt; C:\WINDOWS\System32\Drivers\farflt.sys [212584 2026-03-30] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
178. R3 MBAMProtection; C:\WINDOWS\System32\Drivers\mbam.sys [81000 2026-03-30] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
179. R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [245864 2026-03-30] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
180. R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [190096 2026-03-30] (Malwarebytes Inc -> Malwarebytes)
181. R3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [12423864 2025-08-14] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)
182. S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
183. S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [21888 2026-03-26] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
184. S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [641416 2026-03-26] (Microsoft Windows -> Microsoft Corporation)
185. S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [103816 2026-03-26] (Microsoft Windows -> Microsoft Corporation)
186. S3 MpKsl87d8971a; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6B9FA9D8-7111-4913-BCCC-50855B29640F}\MpKslDrv.sys [X]
187.  
188. ==================== NetSvcs (Whitelisted) ===================
189.  
190. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
191.  
192.  
193. ==================== One month (created) (Whitelisted) =========
194.  
195. (If an entry is included in the fixlist, the file/folder will be moved.)
196.  
197. 2026-03-30 16:54 - 2026-03-30 17:01 - 000022429 _____ C:\Users\Kutnjak\Desktop\FRST.txt
198. 2026-03-30 16:53 - 2026-03-30 16:53 - 000000000 ____D C:\Users\Kutnjak\AppData\LocalLow\IGDump
199. 2026-03-30 16:51 - 2026-03-30 16:59 - 000000000 ____D C:\FRST
200. 2026-03-30 16:48 - 2026-03-30 16:50 - 002445824 _____ (Farbar) C:\Users\Kutnjak\Desktop\FRST64.exe
201. 2026-03-30 15:35 - 2026-03-30 15:35 - 000190096 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
202. 2026-03-30 15:33 - 2026-03-30 16:49 - 000000000 ____D C:\Users\Kutnjak\AppData\Local\Malwarebytes
203. 2026-03-30 15:33 - 2026-03-30 15:33 - 000002095 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
204. 2026-03-30 15:33 - 2026-03-30 15:33 - 000002083 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
205. 2026-03-30 15:28 - 2026-03-30 15:28 - 000000000 ____D C:\ProgramData\Malwarebytes
206. 2026-03-30 15:28 - 2026-03-30 15:28 - 000000000 ____D C:\Program Files\Malwarebytes
207. 2026-03-30 15:25 - 2026-03-30 15:25 - 002848568 _____ (Malwarebytes) C:\Users\Kutnjak\Downloads\MBSetup.exe
208. 2026-03-28 23:50 - 2026-03-28 23:50 - 000315475 _____ C:\Users\Kutnjak\Downloads\Pharmacie citypharma acm isispharma mustela.pdf
209. 2026-03-28 17:42 - 2026-03-28 17:42 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
210. 2026-03-26 19:32 - 2026-03-26 19:32 - 001352991 _____ C:\Users\Kutnjak\Downloads\Shopping Cart _ STYLEVANA last.pdf
211. 2026-03-26 01:52 - 2026-03-26 01:52 - 001034543 _____ C:\Users\Kutnjak\Downloads\Shopping Cart _ STYLEVANA.pdf
212. 2026-03-25 15:42 - 2026-03-25 15:42 - 001511890 _____ C:\Users\Kutnjak\Downloads\High Waisted Shorts Lightweight UPF 50+ – Sun Smock.pdf
213. 2026-03-25 01:19 - 2026-03-25 01:19 - 001610982 _____ C:\Users\Kutnjak\Downloads\ACM Azéane Creme 15% Azelainsäure 30g kaufen in Apotheke.pdf
214. 2026-03-25 01:18 - 2026-03-25 01:18 - 001026830 _____ C:\Users\Kutnjak\Downloads\Mustela Stelatopia Intensiv-Creme 30 ml in der Apotheke erhältlich.pdf
215. 2026-03-25 01:14 - 2026-03-25 01:14 - 000590102 _____ C:\Users\Kutnjak\Downloads\Eubos Dry Skin Children Ectoin 7% Cream, 30ml.pdf
216. 2026-03-25 01:09 - 2026-03-25 01:09 - 001496761 _____ C:\Users\Kutnjak\Downloads\Azéane Creme Azelainsäure 15% Tube 30ml _ Newpharma.pdf
217. 2026-03-24 17:43 - 2026-03-24 17:44 - 001747335 _____ C:\Users\Kutnjak\Downloads\Oral Care Products _ OLIVE YOUNG Global.pdf
218. 2026-03-24 17:42 - 2026-03-24 17:42 - 012157744 _____ C:\Users\Kutnjak\Downloads\Live orals Pure Dia Teeth Whitening Set (Whitener + Toothpaste 80g) _ OLIVE YOUNG Global.pdf
219. 2026-03-24 17:40 - 2026-03-24 17:41 - 005687458 _____ C:\Users\Kutnjak\Downloads\Puredia Self Teeth Whitening Single Product 10g (2 weeks. 28 times) - Liveorals.pdf
220. 2026-03-24 17:40 - 2026-03-24 17:40 - 007960503 _____ C:\Users\Kutnjak\Downloads\Repetio Pumping Toothpaste (300g) - Liveorals.pdf
221. 2026-03-23 00:35 - 2026-03-23 00:35 - 014365509 _____ C:\Users\Kutnjak\Downloads\UVA Booster _ all-in-one day cream with SPF 30 &amp; extra UVA protection – Skingineered Cosmetics.pdf
222. 2026-03-22 22:27 - 2026-03-22 22:27 - 000054864 _____ C:\Users\Kutnjak\Downloads\Kasse _ checkout.dm.at.pdf
223. 2026-03-22 22:16 - 2026-03-22 22:16 - 000707295 _____ C:\Users\Kutnjak\Downloads\HYLO GEL® eye drops _ HYLO®.pdf
224. 2026-03-21 00:57 - 2026-03-21 00:57 - 002927137 _____ C:\Users\Kutnjak\Downloads\Lip stain that isn’t pink or red _ r_MakeupAddiction.pdf
225. 2026-03-21 00:12 - 2026-03-21 00:12 - 003675880 _____ C:\Users\Kutnjak\Downloads\how to make a collage on pinterest.pdf
226. 2026-03-19 17:48 - 2026-03-19 17:48 - 001127204 _____ C:\Users\Kutnjak\Downloads\Solis Brown _ Brown Round Titanium Glasses _ polette - Polette Europe.pdf
227. 2026-03-19 17:38 - 2026-03-19 17:38 - 000424679 _____ C:\Users\Kutnjak\Downloads\Submit to r_AusSkincare.pdf
228. 2026-03-19 15:58 - 2026-03-19 15:58 - 004803329 _____ C:\Users\Kutnjak\Downloads\Tony Moly Ceramidni tonik za lice Wonder Ceramide Mochi Toner - Toneri Kupuj online Ksisters ?_♀️.pdf
229. 2026-03-18 16:53 - 2026-03-18 16:53 - 005374986 _____ C:\Users\Kutnjak\Downloads\Peach and Lily - MiniProtein Exosome Bioactive Ampoule - Collagen Skin Repair.pdf
230. 2026-03-18 16:37 - 2026-03-18 16:38 - 000333333 _____ C:\Users\Kutnjak\Downloads\Sesderma Repaskin Defense Liposomal Serum ingredients (Explained).pdf
231. 2026-03-18 16:27 - 2026-03-18 16:28 - 011493388 _____ C:\Users\Kutnjak\Downloads\The Anomaly · Eye Matrix Concentrate · Cipher Skincare.pdf
232. 2026-03-18 16:11 - 2026-03-18 16:11 - 002644164 _____ C:\Users\Kutnjak\Downloads\Colibri skincare Antioxidant Serum.pdf
233. 2026-03-18 16:01 - 2026-03-18 16:01 - 000314824 _____ C:\Users\Kutnjak\Downloads\NIOD Survival 0 ingredients (Explained).pdf
234. 2026-03-18 15:57 - 2026-03-18 15:57 - 001274229 _____ C:\Users\Kutnjak\Downloads\Antiox Serum _ super tøday.pdf
235. 2026-03-17 20:11 - 2026-03-17 20:11 - 000286319 _____ C:\Users\Kutnjak\Downloads\NEW TetraSOD® PRODUCT_ SOD supplements - TetraSOD®.pdf
236. 2026-03-17 20:10 - 2026-03-17 20:10 - 000441198 _____ C:\Users\Kutnjak\Downloads\Superoxide Dismutase - The most powerful natural antioxidant.pdf
237. 2026-03-17 20:05 - 2026-03-17 20:05 - 014498792 _____ C:\Users\Kutnjak\Downloads\REMEDY for daily defense – Remedy Science by Dr. Muneeb Shah.pdf
238. 2026-03-15 23:50 - 2026-03-15 23:50 - 001481811 _____ C:\Users\Kutnjak\Downloads\_nalazi.pdf
239. 2026-03-15 23:21 - 2026-03-15 23:54 - 000000000 ____D C:\Users\Kutnjak\Downloads\THYROID LABS
240. 2026-03-15 17:38 - 2026-03-15 17:38 - 007829640 _____ C:\Users\Kutnjak\Downloads\The Palm Line Series Online Free Streaming - Watch HD TV Shows - HydraHD.pdf
241. 2026-03-14 23:43 - 2026-03-14 23:43 - 003045736 _____ C:\Users\Kutnjak\Downloads\Matsuda Official _ M3152 Panto Sunglasses - Hand Made in Japan.pdf
242. 2026-03-14 23:40 - 2026-03-14 23:41 - 003600572 _____ C:\Users\Kutnjak\Downloads\M3156 – Matsuda.pdf
243. 2026-03-14 23:40 - 2026-03-14 23:40 - 002928093 _____ C:\Users\Kutnjak\Downloads\Matsuda Official _ M3130 Aviator Sunglasses - Hand Made in Japan.pdf
244. 2026-03-14 23:37 - 2026-03-14 23:37 - 004008006 _____ C:\Users\Kutnjak\Downloads\New Releases – Matsuda glasses.pdf
245. 2026-03-14 15:55 - 2026-03-14 15:55 - 001769462 _____ C:\Users\Kutnjak\Downloads\Warenkorb _ Nø Cosmetics.pdf
246. 2026-03-14 15:37 - 2026-03-14 15:37 - 001743314 _____ C:\Users\Kutnjak\Downloads\Daily Skin Guard Facial Mist _ rescue tøday   hypochlorous acid spray.pdf
247. 2026-03-14 15:35 - 2026-03-14 15:35 - 039687330 _____ C:\Users\Kutnjak\Downloads\Daily Skin Guard Facial Mist ENG no cosmetics.pdf
248. 2026-03-14 01:35 - 2026-03-14 01:35 - 000554958 _____ C:\Users\Kutnjak\Downloads\Success Page.pdf
249. 2026-03-13 23:53 - 2026-03-13 23:53 - 000344452 _____ C:\Users\Kutnjak\Downloads\Foods high in hyaluronic acid - Total Body Concept.pdf
250. 2026-03-13 23:45 - 2026-03-13 23:45 - 000708512 _____ C:\Users\Kutnjak\Downloads\Hijaluronska kiselina - GymBeam _ GymBeam.hr.pdf
251. 2026-03-13 23:44 - 2026-03-13 23:44 - 006011717 _____ C:\Users\Kutnjak\Downloads\Where to find natural hyaluronic acid in the body.pdf
252. 2026-03-12 23:39 - 2026-03-12 23:39 - 000327094 _____ C:\Users\Kutnjak\Downloads\Aestura Atobarrier 365 Hydro Essence ingredients (Explained).pdf
253. 2026-03-10 15:37 - 2026-03-10 15:37 - 000479621 _____ C:\Users\Kutnjak\Downloads\Dexeryl cream - Google pretraživanje.pdf
254. 2026-03-09 23:03 - 2026-03-09 23:04 - 001546213 _____ C:\Users\Kutnjak\Downloads\needles reedle kopija.pdf
255. 2026-03-08 23:21 - 2026-03-08 23:21 - 006676864 _____ C:\Users\Kutnjak\Downloads\In honor of International Women’s Day, name your favorite quote by a woman. _ r_Fauxmoi.pdf
256. 2026-03-08 22:51 - 2026-03-08 22:51 - 000992421 _____ C:\Users\Kutnjak\Downloads\The Capture TV Show Air Dates & Track Episodes - Next Episode.pdf
257. 2026-03-08 17:16 - 2026-03-08 17:16 - 067564428 _____ C:\Users\Kutnjak\Downloads\Buy protein products and vitamins _ KoRo.pdf
258. 2026-03-08 17:07 - 2026-03-08 17:08 - 095396845 _____ C:\Users\Kutnjak\Downloads\Buy nuts_ our KoRo Classics _ KoRo wow.pdf
259. 2026-03-08 17:00 - 2026-03-08 17:00 - 016591464 _____ C:\Users\Kutnjak\Downloads\Buy organic pumpkin protein _ KoRo.pdf
260. 2026-03-08 14:45 - 2026-03-08 14:45 - 002490834 _____ C:\Users\Kutnjak\Downloads\Premium Chinese Nylon Silk Bamboo Parasol - Midnight Koi _ Brolliesgalore.pdf
261. 2026-03-06 14:36 - 2026-03-06 14:36 - 000019869 _____ C:\Users\Kutnjak\Downloads\ELSTER - Kontaktformular für nicht-steuerliche Fragen - Versandbestätigung.PDF
262. 2026-03-05 17:02 - 2026-03-05 17:02 - 000531324 _____ C:\Users\Kutnjak\Downloads\What if We Cancel the Apocalypse_ - New Lines Magazine.pdf
263. 2026-03-04 15:57 - 2026-03-04 16:22 - 000000000 ___HD C:\$WinREAgent
264. 2026-03-03 19:21 - 2026-03-03 19:21 - 003940918 _____ C:\Users\Kutnjak\Downloads\Entirely wrong order _ r_Sezane wow.pdf
265. 2026-03-03 01:09 - 2026-03-03 01:09 - 000935493 _____ C:\Users\Kutnjak\Downloads\HSN Angebote_ Unglaubliche Rabatte auf Eigenmarken - HSN.pdf
266. 2026-03-03 01:08 - 2026-03-03 01:08 - 000807528 _____ C:\Users\Kutnjak\Downloads\warenkorb hsn de ajme.pdf
267. 2026-03-02 21:26 - 2026-03-02 21:26 - 001979754 _____ C:\Users\Kutnjak\Downloads\Košarica Tvornica Zdrave Hrane.pdf
268. 2026-03-02 21:16 - 2026-03-02 21:16 - 000351451 _____ C:\Users\Kutnjak\Downloads\is hyaluronic acid in food -ai - Google pretraživanje.pdf
269. 2026-03-02 21:09 - 2026-03-02 21:09 - 002061651 _____ C:\Users\Kutnjak\Downloads\Pervistop Complemento Alimentare 20 Compresse - Top Farmacia.pdf
270. 2026-03-02 21:07 - 2026-03-02 21:08 - 001206355 _____ C:\Users\Kutnjak\Downloads\The Association of Four Natural Molecules—EGCG, Folic Acid, Vitamin B12, and HA—To Counteract HPV Cervical Lesions_ A Case Report - PMC.pdf
271. 2026-03-01 15:01 - 2026-03-01 15:01 - 008610696 _____ C:\Users\Kutnjak\Downloads\Glycerin Hydra Cleanser for Gentle Hydration _ Jorgobé.pdf
272. 2026-02-28 23:06 - 2026-02-28 23:06 - 000642220 _____ C:\Users\Kutnjak\Downloads\Acm Azeane Cream for blemishes, imperfections and redness 30 g - Easypara.pdf
273. 2026-02-28 23:04 - 2026-02-28 23:04 - 000646000 _____ C:\Users\Kutnjak\Downloads\Mustela Stelatopia Intense Atopic eczema 30ml - Easypara.pdf
274. 2026-02-28 18:13 - 2026-02-28 18:13 - 001272070 _____ C:\Users\Kutnjak\Downloads\Shopping Cart _ STYLEVANA 1.pdf
275.  
276. ==================== One month (modified) ==================
277.  
278. (If an entry is included in the fixlist, the file/folder will be moved.)
279.  
280. 2026-03-30 17:01 - 2022-07-10 01:01 - 000004208 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{01DA1AC7-0888-4923-A934-15B8A789A633}
281. 2026-03-30 16:50 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
282. 2026-03-30 16:42 - 2022-07-10 00:26 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
283. 2026-03-30 15:58 - 2017-08-07 11:14 - 000000182 _____ C:\Users\Kutnjak\AppData\Roaming\sp_data.sys
284. 2026-03-30 15:32 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
285. 2026-03-30 15:31 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
286. 2026-03-30 15:20 - 2024-02-29 15:53 - 000004518 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1709214803
287. 2026-03-30 15:20 - 2022-07-10 00:46 - 000840602 _____ C:\WINDOWS\system32\PerfStringBackup.INI
288. 2026-03-30 15:17 - 2022-07-10 01:56 - 000000000 ____D C:\WINDOWS\SystemTemp
289. 2026-03-30 15:14 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
290. 2026-03-30 15:13 - 2017-08-07 11:11 - 000000000 __SHD C:\Users\Kutnjak\IntelGraphicsProfiles
291. 2026-03-30 15:12 - 2022-07-10 00:34 - 000000000 ____D C:\Users\Kutnjak
292. 2026-03-30 15:11 - 2022-07-10 01:01 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
293. 2026-03-30 15:11 - 2022-07-10 00:26 - 000008192 ___SH C:\DumpStack.log.tmp
294. 2026-03-30 15:11 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
295. 2026-03-30 15:11 - 2017-02-03 19:10 - 000000000 ___HD C:\Intel
296. 2026-03-29 20:55 - 2025-06-03 00:21 - 000003382 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3678239628-1737219384-588507674-1001
297. 2026-03-29 20:55 - 2025-02-06 13:27 - 000003578 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3678239628-1737219384-588507674-1001
298. 2026-03-29 20:55 - 2023-08-11 09:21 - 000002387 _____ C:\Users\Kutnjak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
299. 2026-03-29 20:55 - 2022-07-10 01:01 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3678239628-1737219384-588507674-1001
300. 2026-03-29 11:51 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
301. 2026-03-28 17:40 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
302. 2026-03-28 17:40 - 2017-02-03 19:54 - 000000000 ____D C:\Program Files\Microsoft Office
303. 2026-03-28 14:00 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
304. 2026-03-27 00:23 - 2020-12-01 12:18 - 000002440 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
305. 2026-03-26 15:44 - 2018-07-23 15:26 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
306. 2026-03-25 23:24 - 2017-08-07 15:55 - 000002299 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
307. 2026-03-17 21:38 - 2026-02-16 17:10 - 000004296 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1655651544
308. 2026-03-17 21:36 - 2022-06-19 17:13 - 000001394 _____ C:\Users\Kutnjak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Preglednik Opera.lnk
309. 2026-03-11 21:02 - 2019-12-07 11:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI
310. 2026-03-08 13:03 - 2022-07-10 01:01 - 000003542 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
311. 2026-03-08 13:03 - 2022-07-10 01:01 - 000003416 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
312. 2026-03-04 16:22 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
313.  
314. ==================== Files in the root of some directories ========
315.  
316. 2017-08-07 11:14 - 2026-03-30 15:58 - 000000182 _____ () C:\Users\Kutnjak\AppData\Roaming\sp_data.sys
317. 2025-09-10 17:03 - 2025-09-10 17:04 - 000000298 _____ () C:\Users\Kutnjak\AppData\Local\config.ini
318. 2025-08-21 16:12 - 2025-09-10 17:03 - 000000000 _____ () C:\Users\Kutnjak\AppData\Local\simedit.log
319.  
320. ==================== SigCheck ============================
321.  
322. (There is no automatic fix for files that do not pass verification.)
323.  
324. ==================== End of FRST.txt ========================
325.  
326.  
327. Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-03-2026
328. Ran by Kutnjak (30-03-2026 17:05:16)
329. Running from C:\Users\Kutnjak\Desktop
330. Microsoft Windows 10 Home Version 22H2 19045.6466 (X64) (2022-07-09 23:02:34)
331. Boot Mode: Normal
332. ==========================================================
333.  
334.  
335. ==================== Accounts: =============================
336.  
337. (If an entry is included in the fixlist, it will be removed.)
338.  
339. Administrator (S-1-5-21-3678239628-1737219384-588507674-500 - Administrators - Disabled)
340. DefaultAccount (S-1-5-21-3678239628-1737219384-588507674-503 - Limited - Disabled)
341. Guest (S-1-5-21-3678239628-1737219384-588507674-501 - Limited - Disabled)
342. Kutnjak (S-1-5-21-3678239628-1737219384-588507674-1001 - Administrators - Enabled) => C:\Users\Kutnjak
343. WDAGUtilityAccount (S-1-5-21-3678239628-1737219384-588507674-504 - Limited - Disabled)
344.  
345. ==================== Security Center ========================
346.  
347. (If an entry is included in the fixlist, it will be removed.)
348.  
349. AV: Malwarebytes (Enabled - Up to date) {A537353A-1D6A-F6B5-9153-CE1CF80FBE66}
350. AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
351. AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
352. AS: McAfee VirusScan (Disabled - Up to date) {30AC4D1E-F45E-3AA6-6448-D23DAB3B5501}
353.  
354. ==================== Installed Programs ======================
355.  
356. (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
357.  
358. ASUS Device Activation (HKLM-x32\...\{9C4B0706-9F9A-47BF-B417-0A111FC52B04}) (Version: 1.0.4.0 - ASUSTeK COMPUTER INC.)
359. ASUS HiPost (HKLM-x32\...\{04768366-F421-4BA5-8423-B84F644B5249}) (Version: 1.0.8 - ASUS)
360. ASUS Input Configuration (HKLM-x32\...\{7DDF7571-64BD-4232-9729-20FF10CE6C62}) (Version: 1.0.3 - ASUS)
361. ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.6.15 - ASUSTeK COMPUTER INC.)
362. ASUS PTP Driver (HKLM-x32\...\{7618E419-9124-4E6C-9AF4-487A6DDEC1C5}) (Version: 11.0.14 - ASUS)
363. ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.19.0004 - ASUS)
364. ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.2.0 - ASUS)
365. ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0050 - ASUS)
366. AudioWizard (HKLM-x32\...\{57E770A2-2BAF-4CAA-BAA3-BD896E2254D3}) (Version: 1.0.3.16 - ICEpower a/s)
367. Certilia Middleware (HKLM\...\{3196D5AB-D17F-43A4-BC58-B1645240F5E8}) (Version: 3.9.8 - Agencija za komercijalnu djelatnost) Hidden
368. Certilia Middleware (HKLM\...\Certilia Middleware 3.9.8) (Version: 3.9.8 - Agencija za komercijalnu djelatnost)
369. Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
370. Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
371. Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
372. CyberLink PhotoDirector 5 (HKLM\...\{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.5.6515 - CyberLink Corp.) Hidden
373. CyberLink PhotoDirector 5 (HKLM-x32\...\InstallShield_{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.5.6515 - CyberLink Corp.)
374. CyberLink PowerDirector 12 (HKLM\...\{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.4010.0 - CyberLink Corp.) Hidden
375. CyberLink PowerDirector 12 (HKLM-x32\...\InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.4010.0 - CyberLink Corp.)
376. Device Setup (HKLM-x32\...\{8D6B05E0-F457-408C-9D13-549334D8FAE1}) (Version: 2.2.5 - ASUSTek COMPUTER INC.)
377. Google Chrome (HKLM-x32\...\Google Chrome) (Version: 146.0.7680.165 - Google LLC)
378. Intel Security Software Manager (HKLM\...\Intel Security Software Manager) (Version: 1.1.107.0 - Intel Security)
379. Intel(R) Chipset Device Software (HKLM\...\{81520FC5-3518-40E9-9803-70CE8A801D07}) (Version: 10.1.1.38 - Intel Corporation) Hidden
380. Intel(R) Chipset Device Software (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel(R) Corporation) Hidden
381. Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.2.11000.2996 - Intel Corporation)
382. Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1631.3 - Intel Corporation)
383. Intel(R) Serial IO (HKLM\...\{EA4CE730-9FAB-40BE-A66E-351D00A73B7D}) (Version: 30.100.1631.03 - Intel Corporation) Hidden
384. Intel(R) Trusted Execution Engine (HKLM\...\{0F708183-18F6-483E-8657-FACC5BFF9916}) (Version: 1.1.1.1 - Intel Corporation) Hidden
385. Intel(R) Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 3.0.12.1138 - Intel Corporation)
386. Intel(R) Trusted Execution Engine Driver (HKLM\...\{32F830EE-1E1D-4F7C-BD43-1E42B8B6AFE9}) (Version: 3.0.0.1115 - Intel Corporation) Hidden
387. Intel(R) TXE Storage Proxy Driver (HKLM\...\{75B20B21-0C70-46D8-8354-34382B693101}) (Version: 1.0.0.0 - Intel Corporation) Hidden
388. Intel® Trusted Connect Service Client (HKLM\...\{4C61E52C-8D3A-4B91-885B-9E7346C05197}) (Version: 1.42.682.1 - Intel Corporation) Hidden
389. Malwarebytes version 5.5.2.242 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.5.2.242 - Malwarebytes)
390. Microsoft 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.19822.20114 - Microsoft Corporation)
391. Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 146.0.3856.84 - Microsoft Corporation)
392. Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 146.0.3856.84 - Microsoft Corporation) Hidden
393. Microsoft OneDrive (HKU\S-1-5-21-3678239628-1737219384-588507674-1001\...\OneDriveSetup.exe) (Version: 26.040.0301.0001 - Microsoft Corporation)
394. Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
395. Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
396. Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
397. Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
398. Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
399. Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
400. Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
401. Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
402. Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
403. Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
404. Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
405. Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.19822.20104 - Microsoft Corporation) Hidden
406. Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.13426.20404 - Microsoft Corporation) Hidden
407. Opera Stable 128.0.5807.77 (HKU\S-1-5-21-3678239628-1737219384-588507674-1001\...\Opera 128.0.5807.77) (Version: 128.0.5807.77 - Opera Software)
408. osrss (HKLM-x32\...\{1BA1133B-1C7A-41A0-8CBF-9B993E63D296}) (Version: 1.0.0 - Microsoft Corporation) Hidden
409. Pomoćnik za ažuriranje sustava Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22532 - Microsoft Corporation)
410. Provjera stanja sustava računala za Windows (HKLM\...\{9FCBE35B-2538-429A-BD5E-53DCF5D470F1}) (Version: 3.6.2204.08001 - Microsoft Corporation)
411. REALTEK Bluetooth Filter Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AD}) (Version: 1.4.887.091316 - REALTEK Semiconductor Corp.)
412. Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.10.714.2016 - Realtek)
413. Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7960 - Realtek Semiconductor Corp.)
414. Realtek PCI-E Wireless LAN Driver (HKLM-x32\...\InstallShield_{70714FB7-4084-4202-A599-2D5935DECB67}) (Version: Drv_3.00.0008 - REALTEK Semiconductor Corp.)
415. Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.00042 - Realtek Semiconductor Corp.)
416. TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.59518 - TeamViewer)
417. TP-Link TL-WN725N Driver (HKLM-x32\...\{3C3F9CEB-2C5A-4A47-8EAA-DA76037546BA}) (Version: 2.1.0 - TP-Link)
418. Update for x64-based Windows Systems (KB5001716) (HKLM\...\{B8D93870-98D1-4980-AFCA-E26563CDFB79}) (Version: 8.94.0.0 - Microsoft Corporation)
419. UpdateAssistant (HKLM\...\{52C1DD03-104E-4AC6-9DC6-21D585721ED1}) (Version: 1.19.0.0 - Microsoft Corporation) Hidden
420. Viber (HKLM-x32\...\{1DD6FC81-0552-4E17-B2DC-1023C8FC69A5}) (Version: 8.2.0.1 - Viber Media Inc.) Hidden
421. Viber (HKU\S-1-5-21-3678239628-1737219384-588507674-1001\...\{ee6b9288-8283-46ed-be0b-0f17c1da4bd5}) (Version: 8.2.0.1 - Viber Media Inc.)
422. WebAdvisor od McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.726 - McAfee, LLC)
423. Windows Driver Package - ASUS (AsusHFilter) HIDClass  (12/19/2016 1.0.0.2) (HKLM\...\EEDD19DDF3F0CA7CFA2F4C500D442DD1FEB434F6) (Version: 12/19/2016 1.0.0.2 - ASUS)
424. Windows Driver Package - ASUS (AsusPTPDrv) HIDClass  (09/23/2016 11.0.0.14) (HKLM\...\F95583A62AB902A3FC263F668380483F9E0113CD) (Version: 09/23/2016 11.0.0.14 - ASUS)
425. Windows Setup Remediations (x64) (KB4023057) (HKLM\...\{5534e02f-0f5d-40dd-ba92-bea38d22384d}.sdb) (Version:  - )
426. WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 3.2.2 - ASUSTeK COMPUTER INC.)
427. WPS Office for ASUS (HKLM-x32\...\Kingsoft Office) (Version: 10.1.0.5644 - Kingsoft Corp.)
428. Zoom (HKU\S-1-5-21-3678239628-1737219384-588507674-1001\...\ZoomUMX) (Version: 5.12.3 (9638) - Zoom Video Communications, Inc.)
429.  
430. Packages:
431. =========
432. Autodesk SketchBook -> C:\Program Files\WindowsApps\89006A2E.AutodeskSketchBook_5.1.0.0_x64__tf1gferkr813w [2019-12-23] (Autodesk Inc.)
433. Local AI Manager for Microsoft 365 -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\AI [2026-03-28] ()
434. Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2022-07-09] (Microsoft Corporation) [MS Ad]
435. Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2022-07-09] (Microsoft Corporation) [MS Ad]
436. Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2602.23001.0_x64__8wekyb3d8bbwe [2026-03-18] (Microsoft Corporation) [Startup Task]
437. Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2026-03-28] ()
438. MyASUS-Service Center -> C:\Program Files\WindowsApps\B9ECED6F.MyASUS_3.3.11.0_x86__qmba6cd70vzyy [2018-11-06] (ASUSTeK COMPUTER INC.) [Startup Task]
439. Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_7.0.8.0_neutral__mcm4njqhnhss8 [2024-07-16] (Netflix, Inc.)
440. OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2026-03-28] ()
441. Photos Media Engine Add-on -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2022-06-26] (Microsoft Corporation)
442. Polarr Pro Photo Editor -> C:\Program Files\WindowsApps\613EBCEA.PolarrPhotoEditorAcademicEdition_5.11.11.0_x64__jb41c8remg0x2 [2025-08-20] (Polarr)
443.  
444. ==================== Custom CLSID (Whitelisted): ==============
445.  
446. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
447.  
448. CustomCLSID: HKU\S-1-5-21-3678239628-1737219384-588507674-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
449. ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-03-30] (Malwarebytes Inc -> Malwarebytes)
450. ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File
451. ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_baab50003164cdd5\igfxDTCM.dll [2020-08-12] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
452. ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-03-30] (Malwarebytes Inc -> Malwarebytes)
453.  
454. ==================== Codecs (Whitelisted) ====================
455.  
456. ==================== Shortcuts & WMI ========================
457.  
458. ==================== Loaded Modules (Whitelisted) =============
459.  
460. 2016-10-13 00:17 - 2016-10-13 00:17 - 000125440 _____ () [File not signed] C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
461. 2016-10-13 00:17 - 2016-10-13 00:17 - 000033280 _____ () [File not signed] C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
462. 2016-10-13 00:17 - 2016-10-13 00:17 - 000029184 _____ () [File not signed] C:\Program Files (x86)\ASUS\Splendid\VideoEnhance.dll
463. 2025-03-28 12:50 - 2025-03-28 12:50 - 000288796 _____ () [File not signed] C:\Program Files\AKD\Certilia Middleware\libjpeg-9__.dll
464. 2016-10-13 00:17 - 2016-10-13 00:17 - 001676288 _____ (ASUS TeK Computer Inc.) [File not signed] C:\Program Files (x86)\ASUS\Splendid\ApplyLUT.dll
465. 2016-10-13 00:17 - 2016-10-13 00:17 - 000178176 _____ (ASUS TeK Computer Inc.) [File not signed] C:\Program Files (x86)\ASUS\Splendid\GenLUT.dll
466. 2016-10-13 00:17 - 2016-10-13 00:17 - 000165888 _____ (ASUSTeK Computer Inc.) [File not signed] C:\Program Files (x86)\ASUS\Splendid\ColorU.dll
467. 2025-03-28 12:50 - 2025-03-28 12:50 - 000320512 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AKD\Certilia Middleware\imageformats\qjp2.dll
468. 2025-03-28 12:50 - 2025-03-28 12:50 - 000563200 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AKD\Certilia Middleware\imageformats\qjpeg.dll
469. 2025-03-28 12:50 - 2025-03-28 12:50 - 000886272 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AKD\Certilia Middleware\platforms\qwindows.dll
470. 2025-03-28 12:50 - 2025-03-28 12:50 - 006026240 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AKD\Certilia Middleware\Qt6Core.dll
471. 2025-03-28 12:50 - 2025-03-28 12:50 - 008886784 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AKD\Certilia Middleware\Qt6Gui.dll
472. 2025-03-28 12:50 - 2025-03-28 12:50 - 006448640 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AKD\Certilia Middleware\Qt6Widgets.dll
473. 2025-03-28 12:50 - 2025-03-28 12:50 - 000199168 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files\AKD\Certilia Middleware\styles\qmodernwindowsstyle.dll
474.  
475. ==================== Alternate Data Streams (Whitelisted) ========
476.  
477. (If an entry is included in the fixlist, only the ADS will be removed.)
478.  
479. AlternateDataStreams: C:\Users\Kutnjak\Desktop\FRST64.exe:MBAM.Zone.Identifier [225]
480.  
481. ==================== Safe Mode (Whitelisted) ==================
482.  
483. (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
484.  
485. HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
486. HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
487.  
488. ==================== Association (Whitelisted) =================
489.  
490. ==================== Internet Explorer (Whitelisted) =============
491.  
492. HKU\S-1-5-21-3678239628-1737219384-588507674-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus17win10.msn.com/?pc=ASTE
493. HKU\S-1-5-21-3678239628-1737219384-588507674-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus17win10.msn.com/?pc=ASTE
494. SearchScopes: HKU\S-1-5-21-3678239628-1737219384-588507674-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
495. BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2022-06-19] (McAfee, LLC -> McAfee, LLC)
496. BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2026-01-30] (Microsoft Corporation -> Microsoft Corporation)
497. BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2022-06-19] (McAfee, LLC -> McAfee, LLC)
498. Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-03-28] (Microsoft Corporation -> Microsoft Corporation)
499. Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-03-28] (Microsoft Corporation -> Microsoft Corporation)
500. Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-03-28] (Microsoft Corporation -> Microsoft Corporation)
501. Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-03-28] (Microsoft Corporation -> Microsoft Corporation)
502. Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-03-28] (Microsoft Corporation -> Microsoft Corporation)
503. Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-03-28] (Microsoft Corporation -> Microsoft Corporation)
504. Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-03-28] (Microsoft Corporation -> Microsoft Corporation)
505. Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-03-28] (Microsoft Corporation -> Microsoft Corporation)
506. Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll No File
507.  
508. ==================== Hosts content: =========================
509.  
510. (If needed Hosts: directive could be included in the fixlist to reset Hosts.)
511.  
512. 2016-07-16 13:47 - 2016-07-16 13:45 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
513.  
514. ==================== Network ===========================
515.  
516. (Currently there is no automatic fix for this section.)
517.  
518. DNS Servers: 192.168.1.1
519. Windows Firewall is enabled.
520.  
521. Network Binding:
522. =============
523. Bluetooth Network Connection: Bluetooth Device (Personal Area Network) -> bthpan.sys
524. Ethernet: Realtek PCIe FE Family Controller -> rt640x64.sys
525. WiFi: Realtek RTL8723BE Wireless LAN 802.11n PCI-E NIC -> rtwlane02.sys
526. Wi-Fi: Realtek RTL8188EU Wireless LAN 802.11n USB 2.0 Network Adapter -> rtwlanu.sys
527.  
528. ==================== Other Areas ===========================
529.  
530. (Currently there is no automatic fix for this section.)
531.  
532. HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\TXE Components\iCLS\;C:\Program Files\Intel\TXE Components\iCLS\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\TXE Components\DAL\;C:\Program Files (x86)\Intel\TXE Components\DAL\;C:\Program Files\Intel\TXE Components\IPT\;C:\Program Files (x86)\Intel\TXE Components\IPT\;%SYSTEMROOT%\System32\OpenSSH\
533. HKU\S-1-5-21-3678239628-1737219384-588507674-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\asus\wallpapers\asus.jpg
534. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
535. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
536. HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
537. HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
538.  
539.  
540. ==================== MSCONFIG/TASK MANAGER disabled items ==
541.  
542. ==================== FirewallRules (Whitelisted) ================
543.  
544. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
545.  
546. FirewallRules: [UDP Query User{469E4311-63EC-48E7-AC40-F6BA91D303E7}C:\users\kutnjak\appdata\local\programs\opera\opera.exe] => (Block) C:\users\kutnjak\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
547. FirewallRules: [TCP Query User{0F4AB723-79E3-4849-B3A2-EF51684DB62E}C:\users\kutnjak\appdata\local\programs\opera\opera.exe] => (Block) C:\users\kutnjak\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
548. FirewallRules: [{90839865-C252-423B-9462-8FF039173977}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer -> TeamViewer GmbH)
549. FirewallRules: [{330795B2-535F-4A6E-81A3-514B70F3AFF1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer -> TeamViewer GmbH)
550. FirewallRules: [{8354D7DE-F9E7-4178-8ADB-B3D4A7529C8D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer -> TeamViewer GmbH)
551. FirewallRules: [{B181FC74-6B2B-43A3-8C9F-5D26C2088844}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer -> TeamViewer GmbH)
552. FirewallRules: [{BA33FD88-2BDE-47B8-94A7-AC66E9033876}] => (Allow) c:\Program Files\CyberLink\PowerDirector12\PDR10.EXE => No File
553. FirewallRules: [{77FE0BBF-E17D-49E0-B3C4-BB8916E5A4EE}] => (Allow) C:\Users\Kutnjak\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
554. FirewallRules: [{C9A558FF-4BB0-4641-B5CC-D4F70825CDC6}] => (Allow) C:\Users\Kutnjak\AppData\Roaming\Zoom\bin\airhost.exe => No File
555. FirewallRules: [{0DFA9BA8-BA57-4FFC-B862-9BCCC6946A41}] => (Allow) C:\Users\Kutnjak\AppData\Roaming\Zoom\bin\airhost.exe => No File
556. FirewallRules: [TCP Query User{9DBBE54C-389F-452F-A7E3-43D829CCD813}C:\program files\akd\certilia middleware\certiliasigner.exe] => (Block) C:\program files\akd\certilia middleware\certiliasigner.exe (AKD d.o.o. -> AKD d.o.o.)
557. FirewallRules: [UDP Query User{F45F67D0-B900-4EDE-8054-D2AD50A51038}C:\program files\akd\certilia middleware\certiliasigner.exe] => (Block) C:\program files\akd\certilia middleware\certiliasigner.exe (AKD d.o.o. -> AKD d.o.o.)
558. FirewallRules: [{F611821E-007C-441F-8789-C03417E56DA4}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
559. FirewallRules: [{93B30948-EBE5-4B6E-9726-684B200202C6}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
560.  
561. ==================== Restore Points =========================
562.  
563. 29-03-2026 17:46:45 Scheduled Checkpoint
564.  
565. ==================== Faulty Device Manager Devices ============
566.  
567. ==================== Event log errors: ========================
568.  
569. Application errors:
570. ==================
571. Error: (03/30/2026 01:46:26 PM) (Source: Application Hang) (EventID: 1002) (User: )
572. Description: The program Video.UI.exe version 10.25121.1005.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
573.  
574. Process ID: 3d5c
575.  
576. Start Time: 01dcbea6e61b9b9c
577.  
578. Termination Time: 4294967295
579.  
580. Application Path: C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.25121.10051.0_x64__8wekyb3d8bbwe\Video.UI.exe
581.  
582. Report Id: b28026f2-07b8-4d2c-b9b1-ce49747d1866
583.  
584. Faulting package full name: Microsoft.ZuneVideo_10.25121.10051.0_x64__8wekyb3d8bbwe
585.  
586. Faulting package-relative application ID: Microsoft.ZuneVideo
587.  
588. Hang type: Quiesce
589.  
590. Error: (03/29/2026 11:41:36 AM) (Source: Application Hang) (EventID: 1002) (User: )
591. Description: The program LockApp.exe version 10.0.19041.6280 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
592.  
593. Process ID: 2428
594.  
595. Start Time: 01dcbf5fc4617e3b
596.  
597. Termination Time: 4294967295
598.  
599. Application Path: C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
600.  
601. Report Id: a9c67c00-ce29-4915-9697-b3085b9544e4
602.  
603. Faulting package full name: Microsoft.LockApp_10.0.19041.4239_neutral__cw5n1h2txyewy
604.  
605. Faulting package-relative application ID: WindowsDefaultLockScreen
606.  
607. Hang type: Cross-thread
608.  
609. Error: (03/28/2026 11:11:10 PM) (Source: Application Hang) (EventID: 1002) (User: )
610. Description: The program SearchApp.exe version 10.0.19041.6282 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
611.  
612. Process ID: 10a4
613.  
614. Start Time: 01dcbe2b60cba629
615.  
616. Termination Time: 4294967295
617.  
618. Application Path: C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
619.  
620. Report Id: 1f4cbbf3-185f-4fe3-bf58-d622b479d822
621.  
622. Faulting package full name: Microsoft.Windows.Search_1.14.18.19041_neutral_neutral_cw5n1h2txyewy
623.  
624. Faulting package-relative application ID: CortanaUI
625.  
626. Hang type: Quiesce
627.  
628. Error: (03/28/2026 05:34:50 PM) (Source: VSS) (EventID: 8193) (User: )
629. Description: Volume Shadow Copy Service error: Unexpected error calling routine QueryFullProcessImageNameW.  hr = 0x80070006, The handle is invalid..
630.  
631. Operation:
632.    Executing Asynchronous Operation
633.  
634. Context:
635.    Current State: DoSnapshotSet
636.  
637. Error: (03/28/2026 05:32:39 PM) (Source: VSS) (EventID: 8193) (User: )
638. Description: Volume Shadow Copy Service error: Unexpected error calling routine QueryFullProcessImageNameW.  hr = 0x80070006, The handle is invalid..
639.  
640. Operation:
641.    Executing Asynchronous Operation
642.  
643. Context:
644.    Current State: DoSnapshotSet
645.  
646. Error: (03/28/2026 05:23:57 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: DESKTOP-BQIMNEJ)
647. Description: Application or service 'Microsoft Office SDX Helper' could not be shut down.
648.  
649. Error: (03/28/2026 01:31:35 PM) (Source: Application Hang) (EventID: 1002) (User: )
650. Description: The program StartMenuExperienceHost.exe version 0.0.0.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
651.  
652. Process ID: 1e9c
653.  
654. Start Time: 01dcb3a513cc5290
655.  
656. Termination Time: 4294967295
657.  
658. Application Path: C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
659.  
660. Report Id: ebb8fe6d-f56a-4706-873b-c2ede9dca091
661.  
662. Faulting package full name: Microsoft.Windows.StartMenuExperienceHost_10.0.19041.5438_neutral_neutral_cw5n1h2txyewy
663.  
664. Faulting package-relative application ID: App
665.  
666. Hang type: Quiesce
667.  
668. Error: (03/28/2026 01:30:28 PM) (Source: Application Hang) (EventID: 1002) (User: )
669. Description: The program Video.UI.exe version 10.25121.1005.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.
670.  
671. Process ID: 1268
672.  
673. Start Time: 01dcbddca4e32a4f
674.  
675. Termination Time: 4294967295
676.  
677. Application Path: C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.25121.10051.0_x64__8wekyb3d8bbwe\Video.UI.exe
678.  
679. Report Id:
680.  
681. Faulting package full name: Microsoft.ZuneVideo_10.25121.10051.0_x64__8wekyb3d8bbwe
682.  
683. Faulting package-relative application ID: Microsoft.ZuneVideo
684.  
685. Hang type: Quiesce
686.  
687.  
688. System errors:
689. =============
690. Error: (03/30/2026 03:28:15 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-BQIMNEJ)
691. Description: The server {283EDD52-69B2-473D-BEB6-2C0B4C01FD73} did not register with DCOM within the required timeout.
692.  
693. Error: (03/30/2026 03:18:57 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
694. Description: The McAfee CSP Service service failed to start due to the following error:
695. The service did not respond to the start or control request in a timely fashion.
696.  
697. Error: (03/30/2026 03:18:57 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
698. Description: A timeout was reached (30000 milliseconds) while waiting for the McAfee CSP Service service to connect.
699.  
700. Error: (03/30/2026 03:18:56 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
701. Description: The Downloaded Maps Manager service did not respond on starting.
702.  
703. Error: (03/30/2026 03:17:09 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT AUTHORITY)
704. Description: Secure Boot CA/keys need to be updated. This device signature information is included here.
705. DeviceAttributes: BaseBoardManufacturer:ASUSTeK COMPUTER INC.;FirmwareManufacturer:American Megatrends Inc.;FirmwareVersion:X541NA.302;OEMModelBaseBoard:X541NA;OEMManufacturerName:ASUSTeK COMPUTER INC.;OSArchitecture:amd64;
706. BucketId: d5de2da15bf938f0b053f64eba65a8bfa9dece77e3491997458dc828370e86e7
707. BucketConfidenceLevel:
708. UpdateType: 0
709. HResult: 0
710.  
711. Error: (03/30/2026 03:16:45 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
712. Description: The Delivery Optimization service did not respond on starting.
713.  
714. Error: (03/30/2026 03:13:38 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
715. Description: The Windows Presentation Foundation Font Cache 3.0.0.0 service failed to start due to the following error:
716. The service did not respond to the start or control request in a timely fashion.
717.  
718. Error: (03/30/2026 03:13:38 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
719. Description: A timeout was reached (30000 milliseconds) while waiting for the Windows Presentation Foundation Font Cache 3.0.0.0 service to connect.
720.  
721.  
722. Windows Defender:
723. ================
724. Date: 2026-03-29 17:45:03
725. Description:
726. Microsoft Defender Antivirus scan has been stopped before completion.
727. Scan Type: Antimalware
728. Scan Parameters: Quick Scan
729. Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days
730.  
731. Date: 2026-03-28 17:33:43
732. Description:
733. Microsoft Defender Antivirus scan has been stopped before completion.
734. Scan Type: Antimalware
735. Scan Parameters: Quick Scan
736. Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days
737.  
738. Date: 2026-03-27 17:19:01
739. Description:
740. Microsoft Defender Antivirus scan has been stopped before completion.
741. Scan Type: Antimalware
742. Scan Parameters: Quick Scan
743. Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days
744.  
745. Date: 2026-03-26 22:17:04
746. Description:
747. Microsoft Defender Antivirus scan has been stopped before completion.
748. Scan Type: Antimalware
749. Scan Parameters: Quick Scan
750. Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days
751.  
752. Date: 2026-03-26 12:50:25
753. Description:
754. Microsoft Defender Antivirus scan has been stopped before completion.
755. Scan Type: Antimalware
756. Scan Parameters: Quick Scan
757. Stop Reason: Scheduled scan was skipped because the last successful scan was within the last 7 days
758. Event[0]:
759.  
760. Date: 2026-03-20 12:27:44
761. Description:
762. Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
763. New security intelligence Version:
764. Previous security intelligence Version: 1.445.621.0
765. Update Source: Microsoft Update Server
766. Security intelligence Type: AntiVirus
767. Update Type: Full
768. Current Engine Version:
769. Previous Engine Version: 1.1.26010.1
770. Error code: 0x80070050
771. Error description: The file exists.
772.  
773. Date: 2026-03-16 15:20:43
774. Description:
775. Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
776. New security intelligence Version:
777. Previous security intelligence Version: 1.445.548.0
778. Update Source: Microsoft Update Server
779. Security intelligence Type: AntiVirus
780. Update Type: Full
781. Current Engine Version:
782. Previous Engine Version: 1.1.26010.1
783. Error code: 0x80070102
784. Error description: The wait operation timed out.
785.  
786. Date: 2026-03-16 15:20:43
787. Description:
788. Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
789. New security intelligence Version:
790. Previous security intelligence Version: 1.445.548.0
791. Update Source: Microsoft Update Server
792. Security intelligence Type: AntiVirus
793. Update Type: Full
794. Current Engine Version:
795. Previous Engine Version: 1.1.26010.1
796. Error code: 0x80070102
797. Error description: The wait operation timed out.
798.  
799. Date: 2026-02-20 12:57:14
800. Description:
801. Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
802. New security intelligence Version:
803. Previous security intelligence Version: 1.445.137.0
804. Update Source: Microsoft Update Server
805. Security intelligence Type: AntiVirus
806. Update Type: Full
807. Current Engine Version:
808. Previous Engine Version: 1.1.26010.1
809. Error code: 0x80070102
810. Error description: The wait operation timed out.
811.  
812. Date: 2026-02-20 12:57:14
813. Description:
814. Microsoft Defender Antivirus has encountered an error trying to update security intelligence.
815. New security intelligence Version:
816. Previous security intelligence Version: 1.445.137.0
817. Update Source: Microsoft Update Server
818. Security intelligence Type: AntiVirus
819. Update Type: Full
820. Current Engine Version:
821. Previous Engine Version: 1.1.26010.1
822. Error code: 0x80070102
823. Error description: The wait operation timed out.
824.  
825. CodeIntegrity:
826. ===============
827. Date: 2025-08-29 12:09:36
828. Description:
829. Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system.
830.  
831. Date: 2025-08-29 12:09:27
832. Description:
833. Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.
834.  
835.  
836. ==================== Memory info ===========================
837.  
838. BIOS: American Megatrends Inc. X541NA.302 01/24/2017
839. Motherboard: ASUSTeK COMPUTER INC. X541NA
840. Processor: Intel(R) Celeron(R) CPU N3350 @ 1.10GHz
841. Percentage of memory in use: 84%
842. Total physical RAM: 3959.73 MB
843. Available physical RAM: 629.53 MB
844. Total Virtual: 8823.73 MB
845. Available Virtual: 2883.03 MB
846.  
847. ==================== Drives ================================
848.  
849. Drive c: (OS) (Fixed) (Total:464.66 GB) (Free:378.38 GB) (Model: ST500LT012-1DG142) NTFS ==>[system with boot components (obtained from drive)]
850. Drive e: () (Removable) (Total:59.45 GB) (Free:10.33 GB) exFAT
851.  
852. \\?\Volume{0526889d-e340-4030-a5f6-68fb42ac61bc}\ () (Fixed) (Total:0.83 GB) (Free:0.18 GB) NTFS
853. \\?\Volume{325ea695-549d-48a1-bf6f-c678cd4eac2a}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32
854.  
855. ==================== MBR & Partition Table ====================
856.  
857. ==========================================================
858. Disk: 0 (Size: 465.8 GB) (Disk ID: 45FFBFEE)
859.  
860. Partition: GPT.
861.  
862. ==========================================================
863. Disk: 1 (Protective MBR) (Size: 59.5 GB) (Disk ID: 00000000)
864.  
865. Partition: GPT.
866.  
867. ==================== End of Addition.txt =======================