Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-03-2026
Ran by aleks (administrator) on DRAGON (Dell Inc. XPS 8940) (19-03-2026 15:35:06)
Running from C:\Users\aleks\Downloads\FRST64.exe
Loaded Profiles: aleks
Platform: Microsoft Windows 11 Home Version 25H2 26200.8037 (X64) Language: English (United States)
Default browser: Edge
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Discord Inc. -> Discord Inc.) C:\Users\aleks\AppData\Local\Discord\app-1.0.9228\Discord.exe <6>
(discord-code-sign-windows-admin -> Discord Inc.) C:\Users\aleks\AppData\Local\Discord\app-1.0.9228\modules\discord_utils-1\discord_utils\DiscordSystemHelper.exe <2>
(drivers\RivetNetworks\Killer\KAPSService.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KAPS.exe
(drivers\RivetNetworks\Killer\KNDBWMService.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KNDBWM.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_e10111c1ac1fb484\igfxCUIServiceN.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_e10111c1ac1fb484\igfxEMN.exe
(DriverStore\FileRepository\u0405780.inf_amd64_f57e4d775ad4f331\B404520\atiesrxx.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0405780.inf_amd64_f57e4d775ad4f331\B404520\atieclxx.exe
(explorer.exe ->) (Dynalist Inc -> Obsidian) C:\Users\aleks\AppData\Local\Programs\Obsidian\Obsidian.exe <4>
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\perfmon.exe
(explorer.exe ->) (Vivaldi Technologies AS -> Vivaldi Technologies AS) C:\Users\aleks\AppData\Local\Vivaldi\Application\vivaldi.exe <34>
(explorer.exe ->) (Waves Inc -> Waves Audio Ltd.) C:\Windows\System32\DriverStore\FileRepository\wavesapo9de.inf_amd64_c6bfc5767fc0181c\WavesSvc64.exe
(Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2512.26.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_e10111c1ac1fb484\igfxCUIServiceN.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_8a3f88e34f6b8385\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_2ca0a47853f51398\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_cde08185192dc86d\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_c20ce9ae4ce56285\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_b966ea70c5407e74\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\piecomponent.inf_amd64_45da76e5d6aa50af\Intel_PIE_Service.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KAPSService.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_c52b34f1b30918c5\RstMwService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_987f8cede005f427\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0405780.inf_amd64_f57e4d775ad4f331\B404520\atiesrxx.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_a4555e9b35287491\RtkAudUService64.exe <3>
(services.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(services.exe ->) (Waves Inc -> Waves Audio Ltd.) C:\Windows\System32\DriverStore\FileRepository\wavesapo9de.inf_amd64_c6bfc5767fc0181c\WavesSysSvc64.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_a4555e9b35287491\RtkAudUService64.exe [1649504 2023-03-03] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [WavesSvc] => C:\WINDOWS\System32\DriverStore\FileRepository\wavesapo9de.inf_amd64_c6bfc5767fc0181c\WavesSvc64.exe [5083736 2023-02-23] (Waves Inc -> Waves Audio Ltd.)
HKU\S-1-5-21-2751916750-273589752-2588567749-1001\...\Run: [Teams] => "C:\Users\aleks\AppData\Local\Microsoft\WindowsApps\MSTeams_8wekyb3d8bbwe\ms-teams.exe" msteams:system-initiated (No File)
HKU\S-1-5-21-2751916750-273589752-2588567749-1001\...\Run: [Discord] => C:\Users\aleks\AppData\Local\Discord\Update.exe [1596344 2026-02-23] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-2751916750-273589752-2588567749-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5760152 2026-01-21] (Valve Corp. -> Valve Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [2026-03-02] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\146.0.7680.80\Installer\chrmstp.exe [2026-03-18] (Google LLC -> Google LLC)

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {C5E6FA2D-913E-401D-A4CB-637D425A0D89} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem148.0.7730.0{0B53ED5B-3013-479D-BD18-88646BE57668} => C:\Program Files (x86)\Google\GoogleUpdater\148.0.7730.0\updater.exe [8459416 2026-03-12] (Google LLC -> Google LLC)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (No File)
Task: {A824C6C4-3412-4684-8A4A-89DBEDDBD2E6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCmdRun.exe [1786528 2026-03-03] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DB400CFB-C513-4B6C-AA38-F08A5D62942F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCmdRun.exe [1786528 2026-03-03] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AA357A89-194A-454C-B2F7-655929F92F51} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCmdRun.exe [1786528 2026-03-03] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {85AC3A4B-1CD5-4A63-ACE3-9F0453C3E422} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCmdRun.exe [1786528 2026-03-03] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {07E58C37-CABE-49DF-AC54-74E1B9241C82} - System32\Tasks\VivaldiUpdateCheck-5d8aa95e0d5d3c4a => C:\Users\aleks\AppData\Local\Vivaldi\Application\update_notifier.exe [4164520 2026-03-12] (Vivaldi Technologies AS -> Vivaldi Technologies AS) -> C:\Users\aleks\AppData\Local\Vivaldi\Application\--from-scheduler

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{54bb5cce-4591-4582-b2f1-d847d95178eb}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{54bb5cce-4591-4582-b2f1-d847d95178eb}: [DhcpDomain] lan
Tcpip\..\Interfaces\{f74c7a1c-d112-416e-8f43-05de3b3d0e49}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{f74c7a1c-d112-416e-8f43-05de3b3d0e49}: [DhcpDomain] lan

Edge: 
=======
Edge Profile: C:\Users\aleks\AppData\Local\Microsoft\Edge\User Data\Default [2026-03-17]
Edge Extension: (Google Docs Offline) - C:\Users\aleks\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-03-03]
Edge Extension: (Edge relevant text changes) - C:\Users\aleks\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2026-03-03]

Chrome: 
=======
CHR Profile: C:\Users\aleks\AppData\Local\Google\Chrome\User Data\Default [2026-03-05]
CHR Extension: (Google Docs Offline) - C:\Users\aleks\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-03-03]
CHR Extension: (Chrome Web Store Payments) - C:\Users\aleks\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2026-03-03]

Vivaldi: 
=======
VIV Profile: C:\Users\aleks\AppData\Local\Vivaldi\User Data\Default [2026-03-19]
VIV Extension: (SimpleLogin by Proton: Secure Email Aliases) - C:\Users\aleks\AppData\Local\Vivaldi\User Data\Default\Extensions\dphilobhebphkdjbpfohgikllaljmgbn [2026-03-03]
VIV Extension: (Proton Pass: Free Password Manager) - C:\Users\aleks\AppData\Local\Vivaldi\User Data\Default\Extensions\ghmbeldphafepmbegfdlkpapadhbakde [2026-03-03]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 battlenet_helpersvc; C:\ProgramData\Battle.net_components\battlenet_helpersvc\AgentHelper.exe [3386064 2026-03-03] (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
S3 DiscordSystemHelper; C:\Program Files\Common Files\Discord\Discord\DiscordSystemHelper.exe [2245504 2026-03-13] (discord-code-sign-windows-admin -> Discord Inc.)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [223344 2025-11-27] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R3 KAPSService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KAPSService.exe [78088 2023-07-14] (Intel Corporation -> Intel® Corporation)
R2 Killer Analytics Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe [2480944 2023-07-14] (Intel Corporation -> Intel)
R2 Killer Network Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe [2981168 2023-07-14] (Intel Corporation -> Intel)
R3 KNDBWM; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe [78128 2023-07-14] (Intel Corporation -> Intel® Corporation)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpDefenderCoreService.exe [2067464 2026-03-03] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [767760 2026-01-30] (Oracle America, Inc. -> Oracle and/or its affiliates)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\NisSrv.exe [4435096 2026-03-03] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe [290744 2026-03-03] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdfendrmgr; C:\WINDOWS\System32\DriverStore\FileRepository\amdfendr.inf_amd64_987f8cede005f427\amdfendrmgr.sys [55672 2024-07-26] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amduw23g; C:\WINDOWS\System32\DriverStore\FileRepository\u0405780.inf_amd64_f57e4d775ad4f331\B404520\amdkmdag.sys [106138816 2024-07-26] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 CyUcmClient_Device; C:\WINDOWS\System32\drivers\CyUcmClient.sys [149864 2020-06-17] (Cypress Semiconductor Corporation -> Cypress Semiconductor Corporation)
R3 e2k68cx21x64; C:\WINDOWS\System32\DriverStore\FileRepository\e2k68cx21x64.inf_amd64_5966b201aaa328ab\e2k68cx21x64.sys [717208 2023-05-09] (Realtek Semiconductor Corp. -> Realtek)
R3 KfeCoSvc; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KfeCo11X64.sys [209200 2023-07-14] (Intel Corporation -> Rivet Networks, LLC.)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82352 2026-03-03] (Microsoft Windows -> Microsoft Corporation)
S3 MpKslc2d6e57c; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default\MpKslDrv.sys [263560 2026-03-03] (Microsoft Windows -> Microsoft Corporation)
R3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [247840 2026-01-30] (Oracle America, Inc. -> Oracle and/or its affiliates)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [258664 2026-01-30] (Oracle America, Inc. -> Oracle and/or its affiliates)
R1 VBoxSup; C:\WINDOWS\system32\DRIVERS\VBoxSup.sys [1058184 2026-01-30] (Oracle America, Inc. -> Oracle and/or its affiliates)
R1 VBoxUSBMon; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [196720 2026-01-30] (Oracle America, Inc. -> Oracle and/or its affiliates)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21888 2026-03-03] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [635272 2026-03-03] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [102832 2026-03-03] (Microsoft Windows -> Microsoft Corporation)
R3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-06-07] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-03-19 15:35 - 2026-03-19 15:35 - 000016276 _____ C:\Users\aleks\Downloads\FRST.txt
2026-03-19 15:30 - 2026-03-19 15:35 - 000000000 ____D C:\FRST
2026-03-19 15:29 - 2026-03-19 15:29 - 004604482 _____ C:\Users\aleks\OneDrive\Desktop\report20260319.html
2026-03-19 15:26 - 2026-03-19 15:26 - 002445312 _____ (Farbar) C:\Users\aleks\Downloads\FRST64.exe
2026-03-19 15:25 - 2026-03-19 15:25 - 007798225 _____ C:\Users\aleks\OneDrive\Desktop\Logs.zip
2026-03-19 02:00 - 2026-03-19 02:00 - 000012786 _____ C:\Users\aleks\Downloads\Support_Tickets.xlsx
2026-03-19 02:00 - 2026-03-19 02:00 - 000012411 _____ C:\Users\aleks\Downloads\Customer_Reviews.xlsx
2026-03-18 22:48 - 2026-03-18 22:48 - 000004036 _____ C:\WINDOWS\system32\Tasks\PostponeDeviceSetupToast_S-1-5-21-2751916750-273589752-2588567749-1001_0
2026-03-18 13:20 - 2026-03-19 03:12 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-03-18 10:36 - 2026-03-18 10:36 - 055135129 _____ C:\Users\aleks\Downloads\Final+Pipeline%2C+Release+and+Deploy+Videos.zip
2026-03-17 17:44 - 2026-03-17 17:44 - 000000000 ____D C:\Users\aleks\Downloads\Machine%20Learning%20Pipelines%20Subtitles
2026-03-17 17:43 - 2026-03-17 17:43 - 110394848 _____ C:\Users\aleks\Downloads\Machine%20Learning%20Pipelines%20Videos.zip
2026-03-17 17:43 - 2026-03-17 17:43 - 000175916 _____ C:\Users\aleks\Downloads\Machine%20Learning%20Pipelines%20Subtitles.zip
2026-03-17 17:42 - 2026-03-17 17:42 - 053546062 _____ C:\Users\aleks\Downloads\Data_Exploration_and_Preparation%20Videos.zip
2026-03-17 17:41 - 2026-03-17 17:41 - 107632622 _____ C:\Users\aleks\Downloads\Training%2C+Validation+and+Experiment+Tracking+Videos.zip
2026-03-17 17:41 - 2026-03-17 17:41 - 048220378 _____ C:\Users\aleks\Downloads\Data+Validation+Videos.zip
2026-03-17 17:30 - 2026-03-17 17:30 - 000000000 ____D C:\Users\aleks\Downloads\Introduction%20to%20Reproducible%20Model%20Workflows%20Videos
2026-03-16 22:30 - 2026-03-16 22:30 - 000007597 _____ C:\Users\aleks\AppData\Local\Resmon.ResmonCfg
2026-03-16 16:54 - 2026-03-16 16:54 - 052441645 _____ C:\Users\aleks\Downloads\Introduction%20to%20Reproducible%20Model%20Workflows%20Videos.zip
2026-03-16 16:32 - 2026-03-16 16:32 - 000000086 _____ C:\Users\aleks\OneDrive\Desktop\key.txt
2026-03-15 14:35 - 2026-03-15 14:35 - 001616455 _____ C:\Users\aleks\OneDrive\Desktop\tax2025-charleville023.pdf
2026-03-13 21:54 - 2026-03-13 21:54 - 000002264 _____ C:\Users\aleks\AppData\LocalLow\9aa4fea0ddb50cb3b9a19dd9c67532e68613d986f6c829966088256d99cbed0d
2026-03-13 12:03 - 2026-03-13 12:03 - 002304900 _____ C:\Users\aleks\Downloads\Foundations of Dynamic Analysis.pdf
2026-03-13 11:59 - 2026-03-14 19:10 - 000000000 ____D C:\Users\aleks\AppData\Roaming\obs-studio
2026-03-13 11:59 - 2026-03-13 11:59 - 000000000 ____D C:\ProgramData\obs-studio
2026-03-12 18:23 - 2026-03-12 18:23 - 000002264 _____ C:\Users\WsiAccount\AppData\LocalLow\c6fd0b40e3699e455c033fee715597271d5deb4392f8f1def83e8f83d8fc53ab
2026-03-12 18:23 - 2026-03-12 18:23 - 000000000 ____D C:\Users\WsiAccount\AppData\Roaming\Microsoft\Network
2026-03-12 18:23 - 2026-03-12 18:23 - 000000000 ____D C:\Users\WsiAccount\AppData\Local\VirtualStore
2026-03-12 18:23 - 2026-03-12 18:23 - 000000000 ____D C:\Users\WsiAccount\AppData\Local\PlaceholderTileLogoFolder
2026-03-12 18:23 - 2026-03-12 18:23 - 000000000 ____D C:\Users\WsiAccount\AppData\Local\D3DSCache
2026-03-12 18:22 - 2026-03-12 18:23 - 000000000 ____D C:\Users\WsiAccount\AppData\Roaming\Microsoft\Spelling
2026-03-12 18:22 - 2026-03-12 18:23 - 000000000 ____D C:\Users\WsiAccount\AppData\Local\Packages
2026-03-12 18:22 - 2026-03-12 18:23 - 000000000 ____D C:\Users\WsiAccount\AppData\Local\AMD
2026-03-12 18:22 - 2026-03-12 18:22 - 000000020 ___SH C:\Users\WsiAccount\ntuser.ini
2026-03-12 18:22 - 2026-03-12 18:22 - 000000000 __SHD C:\Users\WsiAccount\IntelGraphicsProfiles
2026-03-12 18:22 - 2026-03-12 18:22 - 000000000 ___SD C:\Users\WsiAccount\AppData\Roaming\Microsoft\SystemCertificates
2026-03-12 18:22 - 2026-03-12 18:22 - 000000000 ___SD C:\Users\WsiAccount\AppData\Roaming\Microsoft\Protect
2026-03-12 18:22 - 2026-03-12 18:22 - 000000000 ___SD C:\Users\WsiAccount\AppData\Roaming\Microsoft\Crypto
2026-03-12 18:22 - 2026-03-12 18:22 - 000000000 ___SD C:\Users\WsiAccount\AppData\Roaming\Microsoft\Credentials
2026-03-12 18:22 - 2026-03-12 18:22 - 000000000 ____D C:\Users\WsiAccount\AppData\Roaming\Microsoft\Windows
2026-03-12 18:22 - 2026-03-12 18:22 - 000000000 ____D C:\Users\WsiAccount\AppData\Roaming\Microsoft\Vault
2026-03-12 18:22 - 2026-03-12 18:22 - 000000000 ____D C:\Users\WsiAccount\AppData\Local\ConnectedDevicesPlatform
2026-03-12 18:22 - 2026-03-12 18:22 - 000000000 ____D C:\Users\WsiAccount
2026-03-10 14:55 - 2026-03-10 14:55 - 000083946 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-03-10 14:55 - 2026-03-10 14:55 - 000083946 _____ C:\WINDOWS\system32\ctac.json
2026-03-10 14:55 - 2026-03-10 14:55 - 000036382 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-03-10 14:55 - 2026-03-10 14:55 - 000036382 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-03-09 14:33 - 2026-03-09 14:33 - 000000000 ____D C:\Users\aleks\AppData\Roaming\EPSON
2026-03-09 14:30 - 2026-03-09 14:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2026-03-09 14:30 - 2026-03-09 14:30 - 000000000 ____D C:\Program Files (x86)\epson
2026-03-09 14:30 - 2025-11-27 17:15 - 003667752 _____ (Seiko Epson Corporation) C:\WINDOWS\system32\ESXWDT00.DLL
2026-03-09 14:30 - 2025-11-27 17:15 - 001151160 _____ (Seiko Epson Corporation) C:\WINDOWS\system32\esxw2ud.dll
2026-03-09 14:30 - 2025-11-27 17:15 - 000223344 _____ (Seiko Epson Corporation) C:\WINDOWS\system32\escsvc64.exe
2026-03-09 14:30 - 2024-05-21 15:12 - 000366128 _____ (SEIKO EPSON CORP.) C:\WINDOWS\system32\esxuina1.dll
2026-03-09 14:30 - 2024-05-21 15:12 - 000340016 _____ (SEIKO EPSON CORP.) C:\WINDOWS\SysWOW64\esinta1.dll
2026-03-09 14:29 - 2026-03-09 14:29 - 034505408 _____ C:\Users\aleks\Downloads\EPSONScan_PerV600_3933_41_Signed.exe
2026-03-05 17:18 - 2026-03-05 20:09 - 2360651776 _____ C:\Users\aleks\Downloads\ubuntu-24.04.4-desktop-amd64.iso
2026-03-04 17:15 - 2026-03-04 17:15 - 000234055 _____ C:\Users\aleks\Downloads\charleville-dataviz-fin.pdf
2026-03-04 16:32 - 2026-03-04 17:48 - 129599488 _____ C:\Users\aleks\Downloads\Maldev-Academy-Vbox-2.ova
2026-03-04 11:38 - 2026-03-04 11:38 - 000000000 ____D C:\Users\aleks\AppData\Roaming\Factorio
2026-03-04 11:23 - 2026-03-04 11:23 - 050690291 _____ C:\Users\aleks\Downloads\Design_Principles%20Videos.zip
2026-03-04 11:23 - 2026-03-04 11:23 - 033656706 _____ C:\Users\aleks\Downloads\Creating_Visualizations_in_Tableau%20Videos.zip
2026-03-04 11:23 - 2026-03-04 11:23 - 021770192 _____ C:\Users\aleks\Downloads\Telling%20Stories%20with%20Tableau%20Videos.zip
2026-03-04 11:22 - 2026-03-04 11:22 - 030316647 _____ C:\Users\aleks\Downloads\Data_Visualization_Fundamentals%20Videos.zip
2026-03-04 11:14 - 2026-03-04 11:14 - 000290625 _____ C:\Users\aleks\Downloads\charleville-dataviz.pdf
2026-03-04 10:27 - 2026-03-04 10:27 - 000002264 _____ C:\Users\aleks\AppData\LocalLow\62ee2db15dd3955797882e7600a84c9e7c1b8d4088f7d39454cdcd29c113d7b3
2026-03-03 15:16 - 2026-03-03 15:16 - 000000000 ____D C:\Users\aleks\AppData\Roaming\Tableau
2026-03-03 15:04 - 2026-03-03 15:04 - 000000000 ____D C:\Users\aleks\AppData\Local\cache
2026-03-03 14:32 - 2026-03-03 14:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo IV
2026-03-03 12:38 - 2026-03-03 12:38 - 000000000 ____D C:\Users\aleks\AppData\Roaming\Code
2026-03-03 12:38 - 2026-03-03 12:38 - 000000000 ____D C:\Users\aleks\.vscode
2026-03-03 11:03 - 2026-03-03 11:03 - 000001390 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tableau Public 2025.3.lnk
2026-03-03 11:03 - 2026-03-03 11:03 - 000000000 ____D C:\Users\aleks\OneDrive\Documents\My Tableau Repository
2026-03-03 11:03 - 2026-03-03 11:03 - 000000000 ____D C:\Users\aleks\AppData\Local\Tableau
2026-03-03 11:02 - 2026-03-03 11:02 - 000000000 ____D C:\Program Files\Tableau
2026-03-03 10:41 - 2026-03-13 14:41 - 000000000 ____D C:\Program Files (x86)\Diablo IV
2026-03-03 09:58 - 2026-03-19 01:14 - 000000000 ____D C:\Users\aleks\AppData\Roaming\obsidian
2026-03-03 09:58 - 2026-03-03 09:58 - 000002263 _____ C:\Users\aleks\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Obsidian.lnk
2026-03-03 09:58 - 2026-03-03 09:58 - 000000000 ____D C:\Users\aleks\AppData\Local\obsidian-updater
2026-03-03 09:55 - 2026-03-03 09:55 - 000001064 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio.lnk
2026-03-03 09:55 - 2026-03-03 09:55 - 000000000 ____D C:\ProgramData\obs-studio-hook
2026-03-03 09:55 - 2026-03-03 09:55 - 000000000 ____D C:\Program Files\obs-studio
2026-03-03 09:52 - 2026-03-03 09:52 - 000002325 _____ C:\Users\aleks\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Arduino IDE.lnk
2026-03-03 09:52 - 2026-03-03 09:52 - 000002323 _____ C:\Users\aleks\OneDrive\Desktop\Arduino IDE.lnk
2026-03-03 09:52 - 2026-03-03 09:52 - 000000000 ____D C:\Users\aleks\AppData\Local\arduino-ide-updater
2026-03-03 09:48 - 2026-03-18 19:20 - 000000000 ____D C:\Users\aleks\.VirtualBox
2026-03-03 09:48 - 2026-03-03 09:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VirtualBox
2026-03-03 09:48 - 2026-03-03 09:48 - 000000000 ____D C:\Program Files\Oracle
2026-03-03 09:47 - 2026-03-03 11:02 - 000000000 ____D C:\ProgramData\Package Cache
2026-03-03 09:47 - 2026-03-03 09:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio Code
2026-03-03 09:46 - 2026-03-03 09:47 - 000000000 ____D C:\Program Files\Microsoft VS Code
2026-03-03 09:32 - 2026-03-04 10:30 - 000000000 ____D C:\Users\aleks\AppData\Local\Steam
2026-03-03 09:28 - 2026-03-19 01:01 - 000000000 ____D C:\Program Files (x86)\Steam
2026-03-03 09:28 - 2026-03-03 09:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2026-03-03 08:36 - 2026-03-03 08:36 - 000000000 ____D C:\Program Files\Common Files\Discord
2026-03-03 08:35 - 2026-03-19 14:51 - 000000000 ____D C:\Users\aleks\AppData\Local\Discord
2026-03-03 08:35 - 2026-03-19 12:53 - 000000000 ____D C:\Users\aleks\AppData\Roaming\discord
2026-03-03 08:35 - 2026-03-03 08:35 - 000000000 ____D C:\Users\aleks\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2026-03-03 08:35 - 2026-03-03 08:35 - 000000000 ____D C:\Users\aleks\AppData\Local\SquirrelTemp
2026-03-03 04:37 - 2026-03-03 04:37 - 000000000 ____D C:\Users\aleks\AppData\Local\NEO
2026-03-03 04:32 - 2026-03-04 10:24 - 000000130 _____ C:\Users\aleks\AppData\LocalLow\3b89b6b95f5248ad804bf6507c637b4e684c51db66b80bcb59862d24f86e15a4
2026-03-03 04:32 - 2026-03-03 04:32 - 000000026 _____ C:\Users\aleks\AppData\LocalLow\0334f2871d159be0783df66b1f809c52edc6781105b7999d18ca137c577345ab
2026-03-03 04:32 - 2026-03-03 04:32 - 000000000 ____D C:\Users\aleks\AppData\Local\Backup
2026-03-03 04:32 - 2026-03-03 04:32 - 000000000 ____D C:\ProgramData\Propagation
2026-03-03 04:32 - 2026-03-03 04:32 - 000000000 ____D C:\ProgramData\AMD
2026-03-03 00:39 - 2026-03-15 09:14 - 000000000 ____D C:\ProgramData\Packages
2026-03-03 00:38 - 2026-03-03 00:38 - 000000000 _SHDL C:\Documents and Settings
2026-03-03 00:37 - 2026-03-19 15:22 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-03-03 00:37 - 2026-03-19 01:12 - 000012288 ___SH C:\DumpStack.log.tmp
2026-03-03 00:37 - 2026-03-19 01:12 - 000001606 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-03-03 00:37 - 2026-03-19 01:12 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-03-03 00:37 - 2026-03-17 14:02 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-03-03 00:37 - 2026-03-12 18:22 - 000001535 _____ C:\WINDOWS\system32\config\VSMIDK
2026-03-03 00:37 - 2026-03-12 18:21 - 000296888 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-03-03 00:37 - 2026-03-07 00:44 - 000003610 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{4318FBE8-165A-4250-92D8-C2686C72706E}
2026-03-03 00:37 - 2026-03-07 00:44 - 000003484 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{58ED32F1-359E-42B6-9225-04A5EDE3571E}
2026-03-03 00:37 - 2026-03-03 04:42 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-03-03 00:37 - 2026-03-03 00:37 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2026-03-03 00:37 - 2026-03-03 00:37 - 000000000 ____D C:\WINDOWS\system32\config\BFS
2026-03-03 00:37 - 2026-03-03 00:37 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2026-03-03 00:36 - 2026-03-03 00:39 - 000000000 ___DC C:\WINDOWS\Panther
2026-03-03 00:36 - 2026-03-03 00:36 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2026-03-03 00:33 - 2026-03-03 00:33 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-03-03 00:26 - 2025-07-22 22:28 - 005225400 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\Netwtw10.sys
2026-03-03 00:26 - 2025-07-22 22:28 - 001628064 _____ (Intel Corporation) C:\WINDOWS\system32\IntelIHVRouter10.dll
2026-03-03 00:25 - 2026-03-03 00:25 - 000000000 ____D C:\WINDOWS\Firmware
2026-03-03 00:21 - 2026-03-03 00:21 - 000000000 ____D C:\WINDOWS\system32\Drivers\RivetNetworks
2026-03-03 00:21 - 2026-03-03 00:21 - 000000000 ____D C:\ProgramData\RivetNetworks
2026-03-02 22:36 - 2026-03-02 22:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2026-03-02 22:31 - 2026-03-18 22:52 - 000000000 ____D C:\Program Files (x86)\World of Warcraft
2026-03-02 22:31 - 2026-03-03 07:27 - 000000000 ____D C:\ProgramData\Whesvc
2026-03-02 22:30 - 2026-03-02 22:30 - 000000000 ____D C:\ProgramData\Blizzard Entertainment
2026-03-02 22:29 - 2026-03-19 01:02 - 000000000 ____D C:\Users\aleks\AppData\Local\Battle.net
2026-03-02 22:29 - 2026-03-02 22:30 - 000000000 ____D C:\Users\aleks\AppData\Roaming\Battle.net
2026-03-02 22:29 - 2026-03-02 22:29 - 000000000 ____D C:\Users\aleks\AppData\Local\CEF
2026-03-02 22:28 - 2026-03-02 22:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2026-03-02 22:27 - 2026-03-03 14:48 - 000000000 ____D C:\Program Files (x86)\Battle.net
2026-03-02 22:27 - 2026-03-02 22:27 - 000000000 ____D C:\Users\aleks\AppData\Local\Blizzard Entertainment
2026-03-02 22:27 - 2026-03-02 22:27 - 000000000 ____D C:\ProgramData\Battle.net_components
2026-03-02 22:26 - 2026-03-02 22:26 - 000000000 ____D C:\ProgramData\Battle.net
2026-03-02 22:22 - 2026-03-02 22:22 - 000000000 ____D C:\Users\aleks\AppData\LocalLow\Intel
2026-03-02 22:22 - 2026-03-02 22:22 - 000000000 ____D C:\Users\aleks\AppData\Local\Comms
2026-03-02 22:20 - 2026-03-18 22:49 - 000000528 _____ C:\Users\aleks\.vivaldi_reporting_data
2026-03-02 22:20 - 2026-03-13 22:01 - 000000000 ____D C:\Users\aleks\AppData\Local\Vivaldi
2026-03-02 22:20 - 2026-03-13 14:24 - 000002385 _____ C:\Users\aleks\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vivaldi.lnk
2026-03-02 22:20 - 2026-03-02 22:20 - 000003822 _____ C:\WINDOWS\system32\Tasks\VivaldiUpdateCheck-5d8aa95e0d5d3c4a
2026-03-02 22:18 - 2026-03-17 20:23 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-03-02 22:18 - 2026-03-03 07:27 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleUserPEH
2026-03-02 22:18 - 2026-03-02 22:18 - 000000000 ____D C:\Users\aleks\AppData\Local\Google
2026-03-02 22:18 - 2026-03-02 22:18 - 000000000 ____D C:\Program Files\Google
2026-03-02 22:17 - 2026-03-02 22:17 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleSystem
2026-03-02 22:17 - 2026-03-02 22:17 - 000000000 ____D C:\Program Files (x86)\Google
2026-03-02 22:14 - 2026-03-02 22:24 - 000000000 ____D C:\Users\aleks\OneDrive\Documents\The Witcher 3
2026-03-02 22:14 - 2026-03-02 22:14 - 000000000 ___HD C:\OneDriveTemp
2026-03-02 22:14 - 2026-03-02 22:14 - 000000000 ____D C:\Users\aleks\OneDrive\Documents\Custom Office Templates
2026-03-02 22:14 - 2026-03-02 22:14 - 000000000 ____D C:\Users\aleks\OneDrive\Documents\Arduino
2026-03-02 22:14 - 2026-03-02 22:14 - 000000000 ____D C:\Users\aleks\AppData\Roaming\Microsoft\MMC
2026-03-02 22:13 - 2026-03-02 22:24 - 000000000 ___RD C:\Users\aleks\OneDrive
2026-03-02 22:13 - 2026-03-02 22:13 - 000002264 _____ C:\Users\aleks\AppData\LocalLow\c6fd0b40e3699e455c033fee715597271d5deb4392f8f1def83e8f83d8fc53ab
2026-03-02 22:13 - 2026-03-02 22:13 - 000001814 _____ C:\Users\aleks\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MaxxAudio Pro by Waves – Speaker and Microphone Audio Control and Nx 3D Sound.lnk
2026-03-02 22:13 - 2026-03-02 22:13 - 000000000 ____D C:\Users\aleks\AppData\LocalLow\AMD
2026-03-02 22:13 - 2026-03-02 22:13 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2026-03-02 22:12 - 2026-03-19 01:44 - 000000000 ____D C:\Users\aleks\AppData\Local\D3DSCache
2026-03-02 22:12 - 2026-03-02 22:28 - 000000000 ____D C:\Users\aleks\AppData\Local\Publishers
2026-03-02 22:12 - 2026-03-02 22:12 - 000002264 _____ C:\Users\aleks\AppData\LocalLow\fcff94bc0599e5731f60d22880d4cca5acb78996c567bc42e8d23a77023b9945
2026-03-02 22:12 - 2026-03-02 22:12 - 000002264 _____ C:\Users\aleks\AppData\LocalLow\2817f0ef11a5fe5c49e2032c112463672da779e346d0f47ec029209f9bf83fe2
2026-03-02 22:11 - 2026-03-19 01:12 - 000000000 __SHD C:\Users\aleks\IntelGraphicsProfiles
2026-03-02 22:11 - 2026-03-19 00:53 - 000000000 ____D C:\Users\aleks\AppData\Local\Packages
2026-03-02 22:11 - 2026-03-03 08:49 - 000000000 ____D C:\Users\aleks\AppData\Local\AMD
2026-03-02 22:11 - 2026-03-03 04:31 - 000000000 ____D C:\Users\aleks\AppData\Local\ConnectedDevicesPlatform
2026-03-02 22:11 - 2026-03-02 22:13 - 000000000 __RHD C:\Users\Public\AccountPictures
2026-03-02 22:11 - 2026-03-02 22:11 - 000000000 ___SD C:\Users\aleks\AppData\Roaming\Microsoft\Crypto
2026-03-02 22:11 - 2026-03-02 22:11 - 000000000 ____D C:\Users\aleks\AppData\Roaming\Microsoft\Vault
2026-03-02 22:11 - 2026-03-02 22:11 - 000000000 ____D C:\Users\aleks\AppData\Roaming\Adobe
2026-03-02 22:11 - 2026-03-02 22:11 - 000000000 ____D C:\Users\aleks\AppData\Local\VirtualStore
2026-03-02 22:10 - 2026-03-03 15:31 - 000000000 ____D C:\Users\aleks\AppData\Local\PlaceholderTileLogoFolder
2026-03-02 22:10 - 2026-03-02 22:10 - 000000000 ___SD C:\Users\aleks\AppData\Roaming\Microsoft\SystemCertificates
2026-03-02 22:10 - 2026-03-02 22:10 - 000000000 ____D C:\Users\aleks\AppData\Roaming\Microsoft\Network
2026-03-02 22:09 - 2026-03-19 01:12 - 000000000 ____D C:\Users\aleks
2026-03-02 22:09 - 2026-03-03 08:14 - 000000000 ____D C:\Users\aleks\AppData\Roaming\Microsoft\Spelling
2026-03-02 22:09 - 2026-03-02 22:12 - 000000000 ____D C:\Users\aleks\AppData\Roaming\Microsoft\Windows
2026-03-02 22:09 - 2026-03-02 22:09 - 000000020 ___SH C:\Users\aleks\ntuser.ini
2026-03-02 22:09 - 2026-03-02 22:09 - 000000000 ___SD C:\Users\aleks\AppData\Roaming\Microsoft\Protect
2026-03-02 22:09 - 2026-03-02 22:09 - 000000000 ___SD C:\Users\aleks\AppData\Roaming\Microsoft\Credentials
2026-03-02 22:08 - 2026-03-02 22:08 - 000000000 ____D C:\Program Files\Waves
2026-03-02 22:08 - 2023-03-03 02:35 - 000292096 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTHDASIO64.dll
2026-03-02 22:08 - 2023-03-03 02:35 - 000247040 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RTHDASIO.dll
2026-03-02 22:08 - 2023-03-03 02:34 - 006449048 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2026-03-02 22:04 - 2026-03-02 22:04 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-03-02 22:04 - 2026-03-02 22:04 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-03-02 22:04 - 2026-03-02 22:04 - 000000000 ____D C:\WINDOWS\system32\braille-tables
2026-03-02 21:57 - 2026-03-02 21:57 - 000001681 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-03-02 21:50 - 2026-03-02 21:50 - 000000000 ____D C:\WINDOWS\system32\AMD
2026-03-02 21:49 - 2024-07-26 03:16 - 000154384 _____ C:\WINDOWS\system32\samu_krnl_ci.sbin
2026-03-02 21:49 - 2024-07-26 03:16 - 000138832 _____ C:\WINDOWS\system32\samu_krnl_isv_ci.sbin
2026-03-02 21:49 - 2024-07-26 03:16 - 000128048 _____ C:\WINDOWS\system32\kapp_ci.sbin
2026-03-02 21:49 - 2024-07-26 03:16 - 000121168 _____ C:\WINDOWS\system32\kapp_si.sbin
2026-03-02 21:49 - 2024-07-26 03:15 - 113280240 _____ C:\WINDOWS\system32\amdxc64.so
2026-03-02 21:49 - 2024-07-26 03:15 - 009172760 _____ C:\WINDOWS\system32\hiprt02000_amd.hipfb
2026-03-02 21:49 - 2024-07-26 03:15 - 002254736 _____ C:\WINDOWS\system32\oro_compiled_kernels.hipfb
2026-03-02 21:46 - 2026-03-19 01:17 - 000791266 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-03-02 21:46 - 2026-03-19 01:12 - 000000000 ____D C:\Intel
2026-03-02 21:46 - 2026-03-02 21:46 - 000000000 ____D C:\ProgramData\Intel
2026-03-02 21:45 - 2024-09-25 00:00 - 000786928 _____ (Intel) C:\WINDOWS\system32\libvpl.dll
2026-03-02 21:45 - 2024-09-25 00:00 - 000671656 _____ (Intel) C:\WINDOWS\SysWOW64\libvpl.dll
2026-03-02 21:45 - 2024-09-24 23:59 - 000982280 _____ (Intel Corporation) C:\WINDOWS\system32\libmfxhw64.dll
2026-03-02 21:45 - 2024-09-24 23:59 - 000740872 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\libmfxhw32.dll
2026-03-02 21:45 - 2024-09-24 23:59 - 000624768 _____ (Intel Corporation) C:\WINDOWS\system32\intel_gfx_api-x64.dll
2026-03-02 21:45 - 2024-09-24 23:59 - 000483912 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\intel_gfx_api-x86.dll
2026-03-02 21:45 - 2024-09-24 23:58 - 000623400 _____ C:\WINDOWS\SysWOW64\IntelControlLib32.dll
2026-03-02 21:45 - 2024-09-24 23:57 - 027987008 _____ (Intel Corporation) C:\WINDOWS\system32\mfxplugin64_hw.dll
2026-03-02 21:45 - 2024-09-24 23:57 - 020710928 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfxplugin32_hw.dll
2026-03-02 21:45 - 2024-09-24 23:57 - 002118232 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-03-02 21:45 - 2024-09-24 23:57 - 002118232 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-03-02 21:45 - 2024-09-24 23:57 - 002041968 _____ C:\WINDOWS\system32\ze_intel_gpu_raytracing.dll
2026-03-02 21:45 - 2024-09-24 23:57 - 001676408 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-03-02 21:45 - 2024-09-24 23:57 - 001676408 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-03-02 21:45 - 2024-09-24 23:57 - 001465816 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2026-03-02 21:45 - 2024-09-24 23:57 - 001308112 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2026-03-02 21:45 - 2024-09-24 23:57 - 000798272 _____ C:\WINDOWS\system32\ze_loader.dll
2026-03-02 21:45 - 2024-09-24 23:57 - 000563560 _____ C:\WINDOWS\system32\ze_tracing_layer.dll
2026-03-02 21:45 - 2024-09-24 23:57 - 000430144 _____ C:\WINDOWS\system32\ze_validation_layer.dll
2026-03-02 21:45 - 2024-09-24 23:57 - 000290280 _____ C:\WINDOWS\SysWOW64\ControlLib32.dll
2026-03-02 21:45 - 2024-09-24 23:56 - 000348976 _____ C:\WINDOWS\system32\ControlLib.dll
2026-03-02 21:42 - 2026-03-02 22:11 - 000000000 ____D C:\Program Files (x86)\Razer
2026-03-02 21:42 - 2026-03-02 21:42 - 000000000 ____D C:\ProgramData\Razer
2026-03-02 21:42 - 2023-06-16 11:33 - 000161920 _____ (Razer Inc) C:\WINDOWS\system32\RazerS3CoinstallerEx.dll

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-03-19 15:29 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-03-19 15:28 - 2024-04-01 03:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-03-19 15:28 - 2024-04-01 03:26 - 000000000 ____D C:\PerfLogs
2026-03-19 13:11 - 2024-04-01 03:24 - 000000000 ____D C:\WINDOWS\INF
2026-03-19 01:12 - 2024-04-01 03:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-03-19 01:12 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-03-19 01:12 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-03-12 18:21 - 2024-04-01 03:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2026-03-11 05:59 - 2025-06-07 11:39 - 000000000 ____D C:\WINDOWS\InboxApps
2026-03-11 05:59 - 2024-04-01 04:08 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-03-11 05:59 - 2024-04-01 03:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-03-11 05:59 - 2024-04-01 03:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-03-11 05:59 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\UUS
2026-03-11 05:59 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-03-11 05:59 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-03-11 05:59 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-03-11 05:59 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-03-11 05:59 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-03-11 05:59 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-03-11 05:59 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-03-11 05:59 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-03-11 05:59 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-03-11 05:59 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-03-11 05:59 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-03-11 05:59 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-03-11 05:59 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-03-11 05:59 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-03-11 05:59 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-03-11 05:59 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-03-11 05:59 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-03-11 05:59 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\appcompat
2026-03-11 05:59 - 2024-04-01 03:21 - 000000000 ____D C:\WINDOWS\servicing
2026-03-10 15:00 - 2024-04-01 03:26 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2026-03-10 15:00 - 2024-04-01 03:26 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2026-03-03 04:42 - 2024-04-01 03:26 - 000000000 ___RD C:\Program Files\Windows Defender
2026-03-03 04:31 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\OCR
2026-03-03 00:36 - 2024-04-01 03:26 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2026-03-03 00:35 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2026-03-03 00:18 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2026-03-02 22:46 - 2024-04-01 03:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-03-02 22:06 - 2024-04-01 03:21 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2026-03-02 22:04 - 2024-04-01 04:09 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2026-03-02 22:04 - 2024-04-01 04:08 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ___RD C:\Program Files (x86)\Windows Defender
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\WUModels
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\SysWOW64\DDFs
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\te-IN
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\spool
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\qps-plocm
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\qps-ploc
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\or-IN
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\km-KH
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\is-IS
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\id-ID
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\hi-IN
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\et-EE
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\es-MX
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\be-BY
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\as-IN
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\am-ET
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\schemas
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\DiagTrack
2026-03-02 22:04 - 2024-04-01 03:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-03-02 22:02 - 2024-04-01 03:26 - 001416664 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-03-02 22:02 - 2024-04-01 03:26 - 001266136 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-03-02 21:40 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2026-03-02 21:39 - 2024-04-01 03:26 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase

==================== Files in the root of some directories ========

2026-03-16 22:30 - 2026-03-16 22:30 - 000007597 _____ () C:\Users\aleks\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================