Fix result of Farbar Recovery Scan Tool (x64) Version: 19.04.2024 01 Ran by Lucas (04-05-2024 18:25:45) Run:1 Running from C:\Users\Lucas\Desktop Loaded Profiles: Lucas Boot Mode: Normal ============================================== fixlist content: ***************** Start:: SystemRestore: On CreateRestorePoint: VirusScan: D:\Stuff\Others\Books\Kindle Previewer 3\KPR_NCD.exe; C:\Program Files (x86)\Common Files\ProperServices\QlaytrVlip\TAHI3pFevxjtDiag.dll Folder: C:\Program Files (x86)\Common Files\ProperServices Unlock: C:\Program Files (x86)\Common Files\ProperServices\QlaytrVlip\TAHI3pFevxjtDiag.dll HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center: Restriction <==== ATTENTION HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION Task: {D1ED898A-D0EB-41A5-87DF-9CE3D8C5C664} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem126.0.6425.0{3431EAD7-1B0F-46C1-908D-57DB548C26CB} => "C:\Program Files (x86)\Google\GoogleUpdater\126.0.6425.0\updater.exe" --wake --system --enable-logging --vmodule=*/components/winhttp/*=1,*/components/update_client/*=2,*/chrome/updater/*=2 (No File) Task: {AA6245B8-DD1A-475F-9F99-93153D9B20F3} - System32\Tasks\Microsoft\OneCore\Nkpkhjlocl => C:\Windows\system32\rundll32.exe [71680 2023-05-05] (Microsoft Windows -> Microsoft Corporation) -> C:\Program Files (x86)\Common Files\ProperServices\QlaytrVlip\"C:\Program Files (x86)\Common Files\ProperServices\QlaytrVlip\TAHI3pFevxjtDiag.dll",SeartCabdSimuionWv3z6 C:\Program Files (x86)\Common Files\ProperServices\QlaytrVlip\TAHI3pFevxjtDiag.dll C:\Program Files (x86)\Common Files\ProperServices S2 GoogleUpdaterInternalService126.0.6425.0; "C:\Program Files (x86)\Google\GoogleUpdater\126.0.6425.0\updater.exe" --system --windows-service --service=update-internal --enable-logging --vmodule=*/components/winhttp/*=1,*/components/update_client/*=2,*/chrome/updater/*=2 [X] C:\Program Files (x86)\Google\GoogleUpdater\126.0.6425.0 S3 cpuz154; \??\C:\Windows\temp\cpuz154\cpuz154_x64.sys [X] <==== ATTENTION S3 cpuz155; \??\C:\Windows\temp\cpuz155\cpuz155_x64.sys [X] <==== ATTENTION CMD: DISM /Online /Cleanup-image /Restorehealth CMD: sfc /scannow CMD: ipconfig /flushdns CMD: ipconfig /renew CMD: bitsadmin /reset /allusers CMD: netsh winsock reset CMD: netsh advfirewall reset CMD: netsh advfirewall set allprofiles state ON CMD: netsh int ipv4 reset CMD: netsh int ipv6 reset RemoveProxy: EmptyTemp: Hosts: End:: ***************** SystemRestore: On => completed Restore point was successfully created. Virusscan: D:\Stuff\Others\Books\Kindle Previewer 3\KPR_NCD.exe => https://virusscan.jotti.org/filescanjob/vmu8zpzhz1 Virusscan: C:\Program Files (x86)\Common Files\ProperServices\QlaytrVlip\TAHI3pFevxjtDiag.dll => https://virusscan.jotti.org/filescanjob/kmspp5tvoe ========================= Folder: C:\Program Files (x86)\Common Files\ProperServices ======================== 2021-05-26 11:18 - 2021-05-26 11:18 - 002597318 ____A [D9EE492BE86690F6D6731FFB369AFD15] () C:\Program Files (x86)\Common Files\ProperServices\1086939.msi 2021-05-26 11:18 - 2021-05-26 11:18 - 000132885 ____A [16B46E220995F18923B1D3A6EBF5C233] () C:\Program Files (x86)\Common Files\ProperServices\110ea.msi 2021-05-26 11:18 - 2021-05-26 11:18 - 001916928 ____A [84BA5EB680B9310FA2F656731F1A702D] () C:\Program Files (x86)\Common Files\ProperServices\14e395c.msi 2021-05-26 11:18 - 2021-05-26 11:18 - 002603522 ____A [BE7FFB0260FD834471BBD1691F9D11E2] () C:\Program Files (x86)\Common Files\ProperServices\14e3974.msi 2021-05-26 11:18 - 2021-05-26 11:18 - 002053704 ____A [A6EDFB194B5A99E8D2941C245FA4B0A9] () C:\Program Files (x86)\Common Files\ProperServices\14e397a.msi 2021-05-26 11:18 - 2021-05-26 11:18 - 001301386 ____A [28C26D2797DE73C018E892A607DE2730] () C:\Program Files (x86)\Common Files\ProperServices\1b97fb.msi 2021-05-26 11:18 - 2021-05-26 11:18 - 001457339 ____A [7A3BB04962DFAE916E3D990C52F26FCF] () C:\Program Files (x86)\Common Files\ProperServices\1b9849.msi 2021-05-26 11:18 - 2021-05-26 11:18 - 001033990 ____A [48E0179FF102C7BD7360CBD8DF9F0EAF] () C:\Program Files (x86)\Common Files\ProperServices\293a57.msi 2021-05-26 11:18 - 2021-05-26 11:18 - 001064960 ____A [B3BD8C8FF8558449D8D562C9C8D44343] () C:\Program Files (x86)\Common Files\ProperServices\2ac4409.msi 2021-05-26 11:18 - 2021-05-26 11:18 - 000868243 ____A [0DA3977B3F56EA609D44AB93E3E38448] () C:\Program Files (x86)\Common Files\ProperServices\6d678e.msi 2021-05-26 11:18 - 2021-05-26 11:18 - 001521942 ____A [4D9997165D04024F50EC6E38324D9615] () C:\Program Files (x86)\Common Files\ProperServices\a36de.msi 2021-05-26 11:18 - 2021-05-26 11:18 - 001190728 ____A [F68A600510C98699A5DA17090C67E724] () C:\Program Files (x86)\Common Files\ProperServices\a36e4.msi 2021-05-26 11:18 - 2021-05-26 11:18 - 001065730 ____A [B0B53AA38AB0A4FCF32284E3283820F6] () C:\Program Files (x86)\Common Files\ProperServices\a36f0.msi 2021-05-26 11:18 - 2021-05-26 11:18 - 000327680 ____A [7DFB5666C6AEBEDD91859C13F1F0C90E] () C:\Program Files (x86)\Common Files\ProperServices\a3702.msi 2021-05-26 11:18 - 2021-05-26 11:18 - 001517020 ____A [5CC954F34871A50C532778B1FCFD2DF3] () C:\Program Files (x86)\Common Files\ProperServices\corperfmonsymbols.ini 2021-05-26 11:18 - 2021-05-26 11:18 - 001381628 ____A [44025553089436DF40D85757E065A880] () C:\Program Files (x86)\Common Files\ProperServices\DirectXApps_FOD.sdb 2021-05-26 11:18 - 2021-05-26 11:18 - 000104246 ____A [2527D3A415D6FDFA6A605705821D79ED] () C:\Program Files (x86)\Common Files\ProperServices\msimain.sdb 2021-05-26 11:18 - 2021-05-26 11:18 - 001821153 ____A [56208DD8EAD380787F23F5BD428E25F8] () C:\Program Files (x86)\Common Files\ProperServices\SortWindows61.nls 2021-05-26 11:18 - 2021-05-26 11:18 - 000015249 ____A [56AB6D7435A115B2281E9D95CCAE1AE0] () C:\Program Files (x86)\Common Files\ProperServices\SortWindows64.nls 2021-05-26 11:18 - 2021-05-26 11:18 - 002690289 ____A [6A6D20249B3468E6AD1ABE124158F374] () C:\Program Files (x86)\Common Files\ProperServices\sysmain.sdb 2021-05-26 11:18 - 2021-05-26 11:18 - 000356516 ____A [491EFB74F2DDFCBD1C9CCF00E3B39AF7] () [File not signed] C:\Program Files (x86)\Common Files\ProperServices\SystemSettings.dll 2021-05-26 11:18 - 2021-05-26 11:18 - 001039404 ____A [82ABB26D4DEBEA5EADED136326612537] () C:\Program Files (x86)\Common Files\ProperServices\WindowsDefenderApplicationGuard.wim 2021-05-26 11:18 - 2024-04-26 15:11 - 000000000 ____D [00000000000000000000000000000000] C:\Program Files (x86)\Common Files\ProperServices\QlaytrVlip ====== End of Folder: ====== "C:\Program Files (x86)\Common Files\ProperServices\QlaytrVlip\TAHI3pFevxjtDiag.dll" => was unlocked HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => could not remove, key could be protected HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate => removed successfully HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center => removed successfully HKLM\SOFTWARE\Policies\Microsoft\Edge => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D1ED898A-D0EB-41A5-87DF-9CE3D8C5C664}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1ED898A-D0EB-41A5-87DF-9CE3D8C5C664}" => removed successfully C:\Windows\System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem126.0.6425.0{3431EAD7-1B0F-46C1-908D-57DB548C26CB} => moved successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem126.0.6425.0{3431EAD7-1B0F-46C1-908D-57DB548C26CB}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{AA6245B8-DD1A-475F-9F99-93153D9B20F3}" => removed successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AA6245B8-DD1A-475F-9F99-93153D9B20F3}" => removed successfully C:\Windows\System32\Tasks\Microsoft\OneCore\Nkpkhjlocl => moved successfully "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\OneCore\Nkpkhjlocl" => removed successfully C:\Program Files (x86)\Common Files\ProperServices\QlaytrVlip\TAHI3pFevxjtDiag.dll => moved successfully "C:\Program Files (x86)\Common Files\ProperServices" Folder move: Could not move "C:\Program Files (x86)\Common Files\ProperServices" => Scheduled to move on reboot. HKLM\System\CurrentControlSet\Services\GoogleUpdaterInternalService126.0.6425.0 => removed successfully GoogleUpdaterInternalService126.0.6425.0 => service removed successfully "C:\Program Files (x86)\Google\GoogleUpdater\126.0.6425.0" Folder move: C:\Program Files (x86)\Google\GoogleUpdater\126.0.6425.0 => moved successfully HKLM\System\CurrentControlSet\Services\cpuz154 => removed successfully cpuz154 => service removed successfully HKLM\System\CurrentControlSet\Services\cpuz155 => removed successfully cpuz155 => service removed successfully ========= DISM /Online /Cleanup-image /Restorehealth ========= Deployment Image Servicing and Management tool Version: 10.0.19041.844 Image Version: 10.0.19045.2965 [== 3.8% ] [== 4.8% ] [=== 5.7% ] [=== 6.7% ] [==== 7.7% ] [===== 8.7% ] [===== 9.7% ] [====== 10.6% ] [====== 11.6% ] [======= 12.6% ] [======= 13.6% ] [======== 14.6% ] [========= 15.5% ] [========= 16.5% ] [========== 17.5% ] [========== 18.5% ] [=========== 19.5% ] [=========== 20.5% ] [============ 21.4% ] [============ 21.8% ] [============ 21.9% ] [============= 22.9% ] [============= 23.8% ] [============== 24.8% ] [============== 25.8% ] [=============== 26.8% ] [================ 27.8% ] [================ 28.8% ] [================= 29.7% ] [================= 30.7% ] [================== 31.7% ] [================== 32.2% ] [=================== 33.0% ] [=================== 33.2% ] [=================== 34.2% ] [==================== 35.2% ] [==================== 36.2% ] [===================== 37.1% ] [====================== 38.1% ] [====================== 39.1% ] [======================= 40.1% ] [======================= 41.1% ] [======================== 42.0% ] [======================== 42.5% ] [======================== 43.0% ] [========================= 43.8% ] [========================= 44.2% ] [========================= 44.5% ] [========================== 45.1% ] [========================== 45.3% ] [========================== 46.3% ] [===========================47.2% ] [===========================48.2% ] [===========================49.2% ] [===========================50.2% ] [===========================51.2% ] [===========================52.2% ] [===========================53.1% ] [===========================54.1% ] [===========================54.4% ] [===========================54.5% ] [===========================54.6% ] [===========================54.6% ] [===========================54.7% ] [===========================54.8% ] [===========================54.9% ] [===========================54.9% ] [===========================54.9% ] [===========================55.1% ] [===========================55.2% ] [===========================55.2% ] [===========================55.2% ] [===========================55.3% ] [===========================55.4% ] [===========================55.4% ] [===========================55.5% ] [===========================55.5% ] [===========================55.5% ] [===========================55.6% ] [===========================55.8% ] [===========================55.8% ] [===========================56.1% ] [===========================56.2% ] [===========================56.4% ] [===========================56.5% ] [===========================57.4%= ] [===========================58.4%= ] [===========================59.4%== ] [===========================60.4%=== ] [===========================62.3%==== ] [===========================84.9%================= ] [===========================92.5%===================== ] [==========================100.0%==========================] The restore operation completed successfully. The operation completed successfully. ========= End of CMD: ========= ========= sfc /scannow ========= Beginning system scan. This process will take some time. Beginning verification phase of system scan. Verification 0% complete. Verification 1% complete. Verification 1% complete. Verification 2% complete. Verification 2% complete. Verification 3% complete. Verification 3% complete. Verification 4% complete. Verification 4% complete. Verification 5% complete. Verification 5% complete. Verification 6% complete. Verification 6% complete. Verification 7% complete. Verification 7% complete. Verification 8% complete. Verification 9% complete. Verification 9% complete. Verification 10% complete. Verification 10% complete. Verification 11% complete. Verification 11% complete. Verification 12% complete. Verification 12% complete. Verification 13% complete. Verification 13% complete. Verification 14% complete. Verification 14% complete. Verification 15% complete. Verification 15% complete. Verification 16% complete. Verification 16% complete. Verification 17% complete. Verification 18% complete. Verification 18% complete. Verification 19% complete. Verification 19% complete. Verification 20% complete. Verification 20% complete. Verification 21% complete. Verification 21% complete. Verification 22% complete. Verification 22% complete. Verification 23% complete. Verification 23% complete. Verification 24% complete. Verification 24% complete. Verification 25% complete. Verification 25% complete. Verification 26% complete. Verification 27% complete. Verification 27% complete. Verification 28% complete. Verification 28% complete. Verification 29% complete. Verification 29% complete. Verification 30% complete. Verification 30% complete. Verification 31% complete. Verification 31% complete. Verification 32% complete. Verification 32% complete. Verification 33% complete. Verification 33% complete. Verification 34% complete. Verification 34% complete. Verification 35% complete. Verification 36% complete. Verification 36% complete. Verification 37% complete. Verification 37% complete. Verification 38% complete. Verification 38% complete. Verification 39% complete. Verification 39% complete. Verification 40% complete. Verification 40% complete. Verification 41% complete. Verification 41% complete. Verification 42% complete. Verification 42% complete. Verification 43% complete. Verification 43% complete. Verification 44% complete. Verification 45% complete. Verification 45% complete. Verification 46% complete. Verification 46% complete. Verification 47% complete. Verification 47% complete. Verification 48% complete. Verification 48% complete. Verification 49% complete. Verification 49% complete. Verification 50% complete. Verification 50% complete. Verification 51% complete. Verification 51% complete. Verification 52% complete. Verification 52% complete. Verification 53% complete. Verification 54% complete. Verification 54% complete. Verification 55% complete. Verification 55% complete. Verification 56% complete. Verification 56% complete. Verification 57% complete. Verification 57% complete. Verification 58% complete. Verification 58% complete. Verification 59% complete. Verification 59% complete. Verification 60% complete. Verification 60% complete. Verification 61% complete. Verification 62% complete. Verification 62% complete. Verification 63% complete. Verification 63% complete. Verification 64% complete. Verification 64% complete. Verification 65% complete. Verification 65% complete. Verification 66% complete. Verification 66% complete. Verification 67% complete. Verification 67% complete. Verification 68% complete. Verification 68% complete. Verification 69% complete. Verification 69% complete. Verification 70% complete. Verification 71% complete. Verification 71% complete. Verification 72% complete. Verification 72% complete. Verification 73% complete. Verification 73% complete. Verification 74% complete. Verification 74% complete. Verification 75% complete. Verification 75% complete. Verification 76% complete. Verification 76% complete. Verification 77% complete. Verification 77% complete. Verification 78% complete. Verification 78% complete. Verification 79% complete. Verification 80% complete. Verification 80% complete. Verification 81% complete. Verification 81% complete. Verification 82% complete. Verification 82% complete. Verification 83% complete. Verification 83% complete. Verification 84% complete. Verification 84% complete. Verification 85% complete. Verification 85% complete. Verification 86% complete. Verification 86% complete. Verification 87% complete. Verification 87% complete. Verification 88% complete. Verification 89% complete. Verification 89% complete. Verification 90% complete. Verification 90% complete. Verification 91% complete. Verification 91% complete. Verification 92% complete. Verification 92% complete. Verification 93% complete. Verification 93% complete. Verification 94% complete. Verification 94% complete. Verification 95% complete. Verification 95% complete. Verification 96% complete. Verification 96% complete. Verification 97% complete. Verification 98% complete. Verification 98% complete. Verification 99% complete. Verification 99% complete. Verification 100% complete. Windows Resource Protection did not find any integrity violations. ========= End of CMD: ========= ========= ipconfig /flushdns ========= Windows IP Configuration Successfully flushed the DNS Resolver Cache. ========= End of CMD: ========= ========= ipconfig /renew ========= Windows IP Configuration No operation can be performed on Ethernet while it has its media disconnected. No operation can be performed on Local Area Connection* 13 while it has its media disconnected. No operation can be performed on Local Area Connection* 14 while it has its media disconnected. No operation can be performed on Bluetooth Network Connection while it has its media disconnected. Ethernet adapter Ethernet: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Wireless LAN adapter Local Area Connection* 13: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Wireless LAN adapter Local Area Connection* 14: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Wireless LAN adapter Wi-Fi: Connection-specific DNS Suffix . : home IPv6 Address. . . . . . . . . . . : 2800:810:549:2a7:32f:d404:d94:27c2 IPv6 Address. . . . . . . . . . . : 2800:810:549:2a7:4c5b:42e8:cc49:c070 IPv6 Address. . . . . . . . . . . : fdaa:bbcc:ddee:0:e341:4474:7cb9:4289 Temporary IPv6 Address. . . . . . : 2800:810:549:2a7:618f:7b8f:a9d:8d5d Temporary IPv6 Address. . . . . . : fdaa:bbcc:ddee:0:618f:7b8f:a9d:8d5d Link-local IPv6 Address . . . . . : fe80::1e9e:be43:2a50:7cd8%21 IPv4 Address. . . . . . . . . . . : 192.168.0.32 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : fe80::ce58:30ff:fe8c:8c5f%21 192.168.0.1 Ethernet adapter Bluetooth Network Connection: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : ========= End of CMD: ========= ========= bitsadmin /reset /allusers ========= BITSADMIN version 3.0 BITS administration utility. (C) Copyright Microsoft Corp. 0 out of 0 jobs canceled. ========= End of CMD: ========= ========= netsh winsock reset ========= Sucessfully reset the Winsock Catalog. You must restart the computer in order to complete the reset. ========= End of CMD: ========= ========= netsh advfirewall reset ========= Ok. ========= End of CMD: ========= ========= netsh advfirewall set allprofiles state ON ========= Ok. ========= End of CMD: ========= ========= netsh int ipv4 reset ========= Resetting Compartment Forwarding, OK! Resetting Compartment, OK! Resetting Control Protocol, OK! Resetting Echo Sequence Request, OK! Resetting Global, OK! Resetting Interface, OK! Resetting Anycast Address, OK! Resetting Multicast Address, OK! Resetting Unicast Address, OK! Resetting Neighbor, OK! Resetting Path, OK! Resetting Potential, OK! Resetting Prefix Policy, OK! Resetting Proxy Neighbor, OK! Resetting Route, OK! Resetting Site Prefix, OK! Resetting Subinterface, OK! Resetting Wakeup Pattern, OK! Resetting Resolve Neighbor, OK! Resetting , OK! Resetting , OK! Resetting , OK! Resetting , OK! Resetting , failed. Access is denied. Resetting , OK! Resetting , OK! Resetting , OK! Resetting , OK! Resetting , OK! Resetting , OK! Resetting , OK! Resetting , OK! Restart the computer to complete this action. ========= End of CMD: ========= ========= netsh int ipv6 reset ========= Resetting Compartment Forwarding, OK! Resetting Compartment, OK! Resetting Control Protocol, OK! Resetting Echo Sequence Request, OK! Resetting Global, OK! Resetting Interface, OK! Resetting Anycast Address, OK! Resetting Multicast Address, OK! Resetting Unicast Address, OK! Resetting Neighbor, OK! Resetting Path, OK! Resetting Potential, OK! Resetting Prefix Policy, OK! Resetting Proxy Neighbor, OK! Resetting Route, OK! Resetting Site Prefix, OK! Resetting Subinterface, OK! Resetting Wakeup Pattern, OK! Resetting Resolve Neighbor, OK! Resetting , OK! Resetting , OK! Resetting , OK! Resetting , OK! Resetting , failed. Access is denied. Resetting , OK! Resetting , OK! Resetting , OK! Resetting , OK! Resetting , OK! Resetting , OK! Resetting , OK! Resetting , OK! Restart the computer to complete this action. ========= End of CMD: ========= ========= RemoveProxy: ========= "HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully "HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => removed successfully "HKU\S-1-5-21-861575871-2511360012-2767995932-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully "HKU\S-1-5-21-861575871-2511360012-2767995932-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => removed successfully ========= End of RemoveProxy: ========= C:\Windows\System32\Drivers\etc\hosts => moved successfully Hosts restored successfully. =========== EmptyTemp: ========== FlushDNS => completed BITS transfer queue => 0 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 546087595 B Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 356285618 B Windows/system/drivers => 70625804 B Edge => 0 B Chrome => 917843712 B Firefox => 0 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 35394 B NetworkService => 43702 B Lucas => 137220941 B RecycleBin => 10569720 B EmptyTemp: => 1.9 GB temporary data Removed. ================================ Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 04-05-2024 18:43:22) C:\Program Files (x86)\Common Files\ProperServices => Could not move Result of scheduled keys to remove after reboot: HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => could not remove, key could be protected ==== End of Fixlog 18:43:22 ====