Task: {b2522ebf-6a65-406b-9bc7-1ce57d2a2c7c} - no filepath "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8457ad0b-1c75-431d-a5ae-ee1aed76a239}" => removed successfully 2021-10-09 19:30 - 2021-10-09 19:30 - 000058304 _____ C:\Windows\system32\Drivers\49306c4f52694e4555486333655846434e586f3256576c6e5a334e784f4535614e585674.sys Task: {378659c1-e595-42d5-9357-395cbc08c53b} - no filepath "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{16be7f3f-fa2f-44f1-b9e0-bb9be341d6ea}" => removed successfully FirewallRules: [{59D80DED-9B17-4C87-8B07-0F6E3D494323}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) Task: {8a370bc5-d53d-4130-9a86-55745d7884c5} - no filepath 2021-10-03 09:11 - 2021-10-03 09:11 - 000000000 ____D C:\Users\Pepega\AppData\Local\ServiceHub 2021-10-12 19:18 - 2021-10-12 19:18 - 000000000 ____D C:\Program Files (x86)\Epic Games Task: {960b6a6a-dc34-4565-96a7-4db5fb5b3ff9} - no filepath 2021-10-02 22:56 - 2021-10-24 19:38 - 000000000 ____D C:\ProgramData\NVIDIA FirewallRules: [TCP Query User{CF0A0468-41A2-4CF4-BDA6-1586AE73104D}C:\windows\microsoft.net\framework64\v4.0.30319\vbc.exe] => (Allow) C:\windows\microsoft.net\framework64\v4.0.30319\vbc.exe (Microsoft Corporation -> Microsoft Corporation) Task: {F30C20EC-C71A-406B-A23E-8B958ACE878E} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3339120 2021-09-14] (NVIDIA Corporation -> NVIDIA Corporation) VALORANT (HKU\S-1-5-21-326566074-3447909417-183555969-1001\\Riot Game valorant.live) (Version: - Riot Games, Inc) "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{977e0d72-710d-4264-bfbf-105f17f81aa3}" => removed successfully Task: {2d5dd02e-d989-436b-a3d0-b2283ce2c942} - no filepath Resetting Control Protocol, OK! Task: {60deadb4-207d-4623-826b-8aef456e994f} - no filepath - Right Click on Network Neighborhood -> left click on Properties -> left click on the Protocols tab -> double click on TCP/IP Protocol -> left click on DNS tab and enter a domain name in the "Domain:" field. "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6c61cc2f-6bf1-4d13-9cc0-dd2cf2ba3087}" => removed successfully Process Name: C:\Users\Pepega\AppData\Local\Discord\app-1.0.9003\Discord.exe "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{43f54ace-856e-4b50-9808-1588b79b7c18}" => removed successfully 2021-10-03 18:24 - 2021-10-03 18:24 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools FirewallRules: [{c3fd991f-853b-41ba-b492-a58509655958}] => (Allow) C:\Program Files\ldplayerbox\LdVBoxHeadless.exe (Shanghai Changzhi Network Technology Co., Ltd. -> Oracle Corporation) 2021-10-18 20:24 - 2021-10-18 20:24 - 000000000 ____D C:\ProgramData\AMD AutoUpdate 2021-10-13 22:14 - 2021-10-07 19:27 - 007843456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{519e0c96-0a46-4c15-840e-41ed3cda1aef}" => removed successfully 2021-10-18 19:35 - 2021-10-24 14:56 - 000003152 _____ C:\Windows\system32\Tasks\NahimicSvc64Run Process Name: Unknown <==== ATTENTION Solution: Close the Dell Digital Delivery application, launch Internet Explorer and attempt to navigate to any website. Category: Settings Modifier Task: {b7e27570-3f72-4ac2-b2ec-fd92b54c3a60} - no filepath Task: {f72e227f-a82a-46d0-b517-0dcc9c2c1947} - no filepath 2021-10-02 23:01 - 2021-10-02 23:01 - 000000000 ____D C:\Users\Pepega\AppData\Local\setup Task: {d2d2fbec-f7b4-41b4-9251-9cfdc41d781f} - no filepath ========= End of CMD: ========= 2021-10-21 09:11 - 2021-10-21 09:11 - 000058304 _____ C:\Windows\system32\Drivers\49306c4f52694e45546d63335a55524c4d56517854575651566c6c4d64334a474f565268.sys ?\C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys [X] Task: {86c0c79f-566b-48c2-a517-d270146f5782} - no filepath Exception code: 0xe0434352 2021-10-02 22:55 - 2021-10-24 14:56 - 000000000 ____D C:\Users\Pepega\AppData\Local\Packages 2021-10-02 23:02 - 2021-01-08 13:21 - 001147352 _____ (Realtek ) C:\Windows\system32\Drivers\rt640x64.sys 2021-10-24 20:37 - 2021-10-24 20:37 - 000000000 ____D C:\Users\Pepega\AppData\Local\D3DSCache "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1a105416-49db-4c94-a1d7-5a3597878e9a}" => removed successfully Faulting module name: KERNELBASE.dll, version: 10.0.18362.418, time stamp: 0xfba22159 IntelliTraceProfilerProxy (HKLM-x32\\{C8891AD2-C223-45CD-A9BE-617A68923B61}) (Version: 15.0.21225.01 - Microsoft Corporation) Hidden 2021-10-16 20:39 - 2021-10-16 20:46 - 000000000 ____D C:\Program Files\Common Files\Adobe Task: {ca0fb10b-e917-4aa5-9e3a-f6a019682f3f} - no filepath 2019-03-19 15:49 - 2021-10-24 15:25 - 000002820 _____ C:\Windows\system32\drivers\etc\hosts Task: {3b6b25a5-1bf5-48bb-81f3-5e306db688ba} - no filepath Date: 2021-10-24 15:35:27.734 "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{e6857042-80d9-4422-85b4-1c5dc0aae451}" => removed successfully 2021-10-02 23:02 - 2021-10-07 19:28 - 000792208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2021-10-02 22:51 - 2021-10-10 13:03 - 000003480 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2021-10-02 22:55 - 2021-10-24 19:42 - 000049844 _____ C:\Windows\system32\PerfStringBackup.INI Task: {68703689-47bd-47ee-9cf2-e91abb43a182} - no filepath (Microsoft Windows Operating System) [File not signed] C:\Users\Pepega\AppData\Local\Update.exe 2021-10-14 11:40 - 2021-10-14 11:40 - 000058304 _____ C:\Windows\system32\Drivers\49306c4f52694d334e5535714e6e6f30524534354d6a597a61564631576d56464f585a33.sys 2021-10-24 18:02 - 2021-10-24 20:25 - 000072704 _____ (Microsoft Windows Operating System) C:\Users\Pepega\AppData\Local\Update.exe Task: {5ea271ce-e48a-4ade-9079-2a5bece10d83} - no filepath Task: {55b76d6d-fbf6-450e-a24e-071e1db9f945} - no filepath Hey, i managed to get my computer built with a Ryzen 5 5600X and an NVIDIA GeForce Aorus Xtreme RTX 3080 - 10GB GDDR6X. FirewallRules: [{5AF388CA-1BB6-4F79-AF2B-FDE241706ADB}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation) I have just completed what you have told me to do, and it seems to be working. ==================== Faulty Device Manager Devices ============ 0.0.0.0 watson.live.com right now the only solution i have is to run task manager or processhacker in the background of my pc as the miners have a script to stop mining whenever those exes are open Task: {a2a9bb80-76ce-4752-9e44-f43e01b26a35} - no filepath ========= netsh int ip reset ========= HKU\S-1-5-21-326566074-3447909417-183555969-1001\\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4267928 2021-10-14] (Valve -> Valve Corporation) 0.0.0.0 sqm.telemetry.microsoft.com "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9ab420ae-8543-428c-9838-410f79c8d585}" => removed successfully 2021-10-02 23:01 - 2021-10-02 23:01 - 000000000 ____D C:\Users\Pepega\AppData\Local\cache I disabled it and now everything runs fine. Task: {bd098352-5f63-4d2b-8e01-ba6a347a2975} - no filepath FirewallRules: [{7AD4F43C-4369-433E-B2EC-A10468B9A5B1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve Corp. -> ) Task: {bc549475-73a3-47b9-8e8c-cce95c3b76c2} - no filepath Task: {b086bb79-9ed7-4043-ab6c-148342fcf383} - no filepath 2021-10-16 20:46 - 2021-10-16 20:46 - 000001130 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Premiere Pro 2021.lnk 2021-10-13 22:14 - 2021-10-07 19:29 - 000800384 _____ C:\Windows\system32\nvofapi64.dll "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{414df2f8-cc7c-49b6-a90f-8e407ed62e02}" => removed successfully Restart the computer to complete this action. 2021-10-15 11:56 - 2021-10-15 12:04 - 000000000 ____D C:\Users\Pepega\AppData\Roaming\ChangZhi2 Task: {E2F1A91A-7C7E-4500-92A5-65707C268116} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-09-14] (NVIDIA Corporation -> NVIDIA Corporation) 2021-10-02 23:25 - 2021-10-04 18:19 - 000000000 ____D C:\Windows\system32\1033 (If an entry is included in the fixlist, the registry item will be restored to default or removed. Task: {53092fd3-455c-4d74-9110-8a5211ddb6c2} - no filepath Task: {634166c8-f3ba-4d37-96ef-8a18d9787a4e} - no filepath R1 npcap; C:\Windows\system32\DRIVERS\npcap.sys [74744 2021-04-22] (Insecure.Com LLC -> Insecure.Com LLC.) Desktop PC Gaming Peripherals Premium Components Gaming Motherboards Premium Graphics Cards Gaming Laptops 2021-10-05 15:51 - 2021-10-05 16:12 - 000000094 _____ C:\Users\Pepega\Desktop\cod filters.txt Faulting application start time: 0x01d7c8b2547f9944 2021-10-02 23:18 - 2021-10-02 23:18 - 000000000 ____D C:\Users\Pepega\AppData\Roaming\Visual Studio Setup ===================== Drivers (Whitelisted) =================== \\?\Volume{7551d85d-c70c-448e-b08c-13d1c138506d}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32 Exception code: 0xe0434352 2021-10-02 23:25 - 2021-10-04 18:19 - 000000000 ____D C:\Windows\SysWOW64\1029 *" ======== the miner is called 'Update.exe' and is located in appdata. Report Id: d2eb9388-b443-4837-a4b1-e1f77a6d3d1d "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{dfa6b7fe-8965-4d4f-9d9a-7abe5c5ee553}" => removed successfully BIOS: American Megatrends International, LLC. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. vs_minshellinteropx64msi (HKLM\\{A7A6A240-932C-4296-931C-41ADE118B13F}) (Version: 17.0.31703 - Microsoft Corporation) Hidden =========== "C:\Windows\Temp\*. vs_Graphics_Singletonx64 (HKLM\\{FB70BB0F-04E2-48FE-B4A8-41FA0ABD59C1}) (Version: 17.0.31709 - Microsoft Corporation) Hidden (If an entry is included in the fixlist, it will be removed from the registry. "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{378659c1-e595-42d5-9357-395cbc08c53b}" => removed successfully The adware programs should be uninstalled manually.) Task: {b1fed2a8-3200-4219-af34-0fd05172af37} - no filepath 0.0.0.0 watson.telemetry.microsoft.com.nsatc.net "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{48ae682f-228f-4e67-8aa4-854778a3a6a2}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{73931e1e-d4e0-4d8f-9b0c-c332b70c4204}" => removed successfully [File not signed] C:\Program Files (x86)\GIGABYTE\RGBFusion\GVDisplay.dll 2021-10-13 16:20 - 2021-10-13 16:38 - 000000254 _____ C:\Users\Pepega\AppData\LocalLow\rbxcsettings.rbx 2021-10-02 23:04 - 2021-10-02 23:04 - 000003858 _____ C:\Windows\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20-10-2021 Task: {b086bb79-9ed7-4043-ab6c-148342fcf383} - no filepath Task: {4bc5b754-7072-4f40-a1b7-dd43c20ebdf6} - no filepath Task: {a68a203b-7eaa-4914-a565-5ff9759ae2a4} - no filepath 2021-10-02 23:03 - 2021-10-02 23:04 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2021-10-02 23:04 - 2021-10-02 23:04 - 000004308 _____ C:\Windows\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} CustomCLSID: HKU\S-1-5-21-326566074-3447909417-183555969-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Pepega\AppData\Local\Microsoft\OneDrive\21.170.0822.0002\amd64\FileSyncShell64.dll => No File "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4bc5b754-7072-4f40-a1b7-dd43c20ebdf6}" => removed successfully Task: {0c664c7f-7430-46ad-86a6-f5c0223c7fc4} - no filepath 2021-10-04 18:19 - 2019-03-19 15:52 - 000000000 ____D C:\Windows\system32\MsDtc Task: {481404b2-cd19-4388-9998-80f99056dcfd} - no filepath Additional Data: HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp//go.microsoft.com/fwlink/?LinkId=54896 Task: {204d0e3a-f218-488d-b696-4b0f49357ce1} - no filepath "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ca0fb10b-e917-4aa5-9e3a-f6a019682f3f}" => removed successfully Severity: Medium Task: {e62b268c-ea0c-4217-bfa2-7bd1145ba5a0} - no filepath Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) 2021-10-04 18:09 - 2021-10-04 18:09 - 000008192 _____ C:\Windows\system32\config\userdiff 2021-10-13 16:39 - 2021-10-24 14:30 - 000000000 ____D C:\Program Files\Npcap BlueStacksDrv_nxt => service removed successfully 2021-10-02 23:25 - 2021-10-04 18:19 - 000000000 ____D C:\Windows\SysWOW64\1046 0.0.0.0 redir.metaservices.microsoft.com "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6ee54cdc-f0d4-4cad-be32-be99498e56b8}" => removed successfully Task: {4fb942bf-3d44-41ff-bc65-52cd12996f26} - no filepath Task: {3b6b25a5-1bf5-48bb-81f3-5e306db688ba} - no filepath Task: {43f54ace-856e-4b50-9808-1588b79b7c18} - no filepath 0.0.0.0 telecommand.telemetry.microsoft.com FF ProfilePath: C:\Users\Pepega\AppData\Roaming\Mozilla\Firefox\Profiles\h4od9c6l.default [2021-10-05] "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8a8c9b4d-3ba3-4f5f-8da4-8714c002e24f}" => removed successfully 2021-10-08 09:32 - 2021-10-08 09:32 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla Resetting , OK! ==================== Event log errors: ======================== "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{65f6d357-0576-4835-8e37-d12ac62b76e0}" => removed successfully FirewallRules: [UDP Query User{019D75AB-C81F-411D-9974-8F4883C85907}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.) 2021-10-15 11:58 - 2021-10-15 11:58 - 000000828 _____ C:\Users\Pepega\Desktop\LDMultiPlayer4.lnk Task: {8f7674a6-0b05-416d-8dc8-bba2f61cad8c} - no filepath ========= End of CMD: ========= Task: {964fea64-405c-411f-8d7c-f9b886d45580} - no filepath Resetting , OK! R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_5292bbfbf575e2d2\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_5292bbfbf575e2d2\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem MSI Development Tools (HKLM-x32\\{7AAC93B0-F3D7-6B24-6B37-9E74980C1C81}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden Security intelligence Version: AV: 1.351.958.0, AS: 1.351.958.0, NIS: 1.351.958.0 Task: {ed48b1d9-cb70-4ae5-8deb-ce6ddd63422a} - no filepath Task: {a68a203b-7eaa-4914-a565-5ff9759ae2a4} - no filepath VS Script Debugging Common (HKLM\\{9EC852BD-33D2-457C-99BB-ED3099B8176F}) (Version: 17.0.114.0 - Microsoft Corporation) Hidden The file will not be moved unless listed separately.) Task: {65f6d357-0576-4835-8e37-d12ac62b76e0} - no filepath 2021-10-02 23:25 - 2021-10-04 18:19 - 000000000 ____D C:\Windows\system32\1046 at System.Windows.Forms.Clipboard.GetDataObject(Int32, Int32) HKU\S-1-5-21-326566074-3447909417-183555969-1001\\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [33435616 2021-10-12] (Epic Games Inc. -> Epic Games, Inc.) Description: Faulting package full name: The following corrective action will be taken in 10 milliseconds: Restart the service. Policies: C:\Users\Pepega\NTUSER.pol: Restriction <==== ATTENTION Ran by Pepega (24-10-2021 21:20:16) Task: {78bdf1d8-0a82-4ea3-8ac6-e6a6e95fd874} - no filepath however the RGB Fusion software is notoriously glitchy. vs_communitysharedmsi (HKLM-x32\\{5E09B4C5-4E18-411F-BEF1-33F15E2906CF}) (Version: 17.0.31709 - Microsoft Corporation) Hidden "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{f31abc37-3a79-4244-9a4b-03a808823654}" => removed successfully Call of Duty Modern Warfare (HKLM-x32\\Call of Duty Modern Warfare) (Version: - Blizzard Entertainment) (Currently there is no automatic fix for this section.) 2021-10-19 13:07 - 2021-10-19 13:07 - 000058304 _____ C:\Windows\system32\Drivers\49306c4f52694d335248524c513067795a6a467a6448704765585a4e516d68714f565a57.sys 2021-10-02 23:25 - 2021-10-02 23:26 - 000000000 ____D C:\Windows\SysWOW64\1041 C:\Users\Pepega\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Thing.bat => moved successfully icecap_collectionresources (HKLM-x32\\{D71337CA-4452-43D2-9583-45670FF77185}) (Version: 17.0.31709 - Microsoft Corporation) Hidden Web- Request warranty service online - Request and check RMA status Business Support - Check warranty status by SN - Request and check RMA status Warranty Terms 3 years Service Center G.B.T., Inc. ========= "C:\Windows\SYSTEM32\lodctr.exe" /R ========= ========= ipconfig /flushDNS ========= 2021-10-18 20:24 - 2021-10-18 20:24 - 000003532 _____ C:\Windows\system32\Tasks\AMDAutoUpdate Task: {4972aadd-d0db-4681-984f-17b847488bc9} - no filepath HKU\S-1-5-21-326566074-3447909417-183555969-1001\SOFTWARE\Policies\Microsoft\Edge => removed successfully 2021-10-13 22:15 - 2021-10-07 11:58 - 000038016 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhdap64.dll Task: {A8BA0F77-0928-4197-AD98-116E198D6501} - System32\Tasks\Microsoft\Windows\WindowsUpdate\RUXIM\RUXIMDisplay => C:\Program Files\ruxim\ruximics.exe [477512 2021-06-30] (Microsoft Windows -> Microsoft Corporation) (If an entry is included in the fixlist, it will be removed from the registry. Additional Data: Task: {46ee8f94-e240-420c-a5e8-0660f5c5f9e1} - no filepath Packages: It has done this 2 time(s). R1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [8234256 2021-10-21] (Riot Games, Inc. -> Riot Games, Inc.) The following corrective action will be taken in 6000 milliseconds: Restart the service." "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{960b6a6a-dc34-4565-96a7-4db5fb5b3ff9}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1539d558-2bfa-453d-a38e-aa8bbec05194}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{358ba298-e9a3-4572-a1cd-6ec4e7b85984}" => removed successfully 2021-10-02 23:04 - 2021-09-14 14:39 - 000001951 _____ C:\Windows\NvContainerRecovery.bat "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{b19f8042-93dc-47e1-87f7-7ad8cb0032d9}" => removed successfully 2021-10-13 22:14 - 2021-10-07 19:27 - 000452224 _____ (NVIDIA Corporation) C:\Windows\system32\nvdebugdump.exe C:\Windows\Temp\MpCopyAccelerator.log => moved successfully Task: {68C28E6F-4B49-4B54-9323-54ABA9FD7C63} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-09-14] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log Task: {10914230-EDDF-4324-BD6D-2A05C1496959} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-09-14] (NVIDIA Corporation -> NVIDIA Corporation) 2021-10-15 11:58 - 2021-10-15 11:58 - 000000827 _____ C:\Users\Pepega\AppData\Roaming\Microsoft\Windows\Start Menu\LDPlayer4.lnk 2021-10-02 23:34 - 2021-10-02 23:34 - 000000000 ____D C:\ProgramData\Windows App Certification Kit Universal CRT Tools x64 (HKLM\\{CD06199B-41C1-AE6D-7567-984CC68792C3}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden Pepega (S-1-5-21-326566074-3447909417-183555969-1001 - Administrator - Enabled) => C:\Users\Pepega Python Launcher (HKLM-x32\\{B6EF11B6-0882-43B1-AA75-4D3BD32A144A}) (Version: 3.9.7427.0 - Python Software Foundation) Mozilla Maintenance Service (HKLM\\MozillaMaintenanceService) (Version: 92.0.1 - Mozilla) Task: {b1fed2a8-3200-4219-af34-0fd05172af37} - no filepath Error: Unable to rebuild performance counter setting from system backup store, error code is 2 Task: {a4a7b095-aaa9-401c-a9d7-8abe8ea301af} - no filepath Application Verifier x64 External Package (HKLM\\{8A4CD158-E6B3-6D91-D7DE-10098BC980E2}) (Version: 10.1.19041.685 - Microsoft) Hidden 2021-10-13 22:14 - 2021-10-07 19:28 - 000676480 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 'Thing.bat' and 'Thing2.bat' are batch files that i wrote to try and kill 'Update.exe' and 'Windows Driver Installation Service.exe' on startup, but as said in my post, the apps have a delayed start so my batch files are pretty much useless. "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{d41d49ee-176e-4547-bd74-93495b181988}" => removed successfully (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) C:\Program Files (x86)\GIGABYTE\RGBFusion\RGBFusion.exe FF Extension: (Kurgzsekseta) - C:\Users\Pepega\AppData\Roaming\Mozilla\Firefox\Profiles\q42kwfcc.default-release\Extensions\{e8f3b919-d290-4270-b66f-29f3fdbb1986}.xpi [2021-10-05] Python 3.9.5 Development Libraries (64-bit) (HKLM\\{AEE58901-97A1-422A-B964-4FD9BF3327B8}) (Version: 3.9.5150.0 - Python Software Foundation) Hidden Task: {098ef5b0-108d-4923-9d7d-021a97ef1fba} - no filepath Resetting , OK! at System.Windows.Forms.Clipboard.ThrowIfFailed(Int32) 2021-10-24 13:24 - 2021-10-24 15:28 - 000000000 ____D C:\Users\Pepega\Desktop\resources FirewallRules: [{E1D43D4F-5765-4B23-A804-FDD364EFF570}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) Microsoft Update Health Tools (HKLM\\{8A6AB459-CB4B-4D09-8C1E-337FB59135C4}) (Version: 2.84.0.0 - Microsoft Corporation) (There is no automatic fix for files that do not pass verification.) "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{d2d2fbec-f7b4-41b4-9251-9cfdc41d781f}" => removed successfully WebA Customers may purchase an AORUS Extended Warranty at the time of registration for eligible product. Task: {964fea64-405c-411f-8d7c-f9b886d45580} - no filepath Path: file:_C:\Windows\System32\drivers\etc\hosts FF Extension: (Decentraleyes) - C:\Users\Pepega\AppData\Roaming\Mozilla\Firefox\Profiles\q42kwfcc.default-release\Extensions\jid1-BoFifL9Vbdl2zQ@jetpack.xpi [2021-10-05] "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{e21ec10f-b0f2-4d8c-ac9d-e74491370460}" => removed successfully Task: {c68b5818-129c-4160-9e29-1a8feeb737d8} - no filepath Stage:GATHER_RULES_FROM_LICENSES 2021-10-13 22:14 - 2021-10-07 19:27 - 008722576 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll R1 SMR540; C:\Windows\System32\drivers\SMR540.SYS [119048 2021-10-24] (NortonLifeLock Inc. -> Symantec Corporation) ==================== Safe Mode (Whitelisted) ================== HKLM\\StartupApproved\Run: => "Riot Vanguard" "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{55b76d6d-fbf6-450e-a24e-071e1db9f945}" => removed successfully 2021-10-02 23:11 - 2021-10-18 21:04 - 000000000 ____D C:\ProgramData\Packages 2021-10-02 23:04 - 2021-09-14 14:39 - 001293680 _____ (NVIDIA Corporation) C:\Windows\system32\NvRtmpStreamer64.dll AMD_Chipset_Drivers (HKLM-x32\\{c370a4bd-5e86-489d-b1a5-54ceee532d20}) (Version: 2.15.07.2229 - Advanced Micro Devices, Inc.) Hidden 2021-10-03 16:47 - 2021-10-07 11:42 - 000000000 ____D C:\Windows\Panther (Microsoft Corporation) [File not signed] C:\Program Files (x86)\Print driver host for applications\Print driver host for applications.exe "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{f0e86eb7-a641-47fc-9528-df32545b183d}" => removed successfully Python 3.9.5 Executables (64-bit) (HKLM\\{843C07B6-040E-4E83-B244-5383247D70AB}) (Version: 3.9.5150.0 - Python Software Foundation) Hidden Python 3.9.5 Documentation (64-bit) (HKLM\\{4EFE695B-F377-4CB0-90E3-6AEEE22DEFEB}) (Version: 3.9.5150.0 - Python Software Foundation) Hidden reinstall aorus engine (1.92) and nvidia driver (457.09, full installation) from gigabyte official site. go to : C:\Program Files (x86)\GIGABYTE\AORUS LCD Panel Setting\Updater and run FWUpgrade.exe, you will see the progress and after completion, it will ask you to shutdown, click yes and the turn on the pc again.

Brewster Oyster Farms, When He Confides In Another Woman, Articles T