laptop running very slow. possible malware?

[ssmarsh]

Hello and thank you in advance for any assistance you can provide. My laptop is running very slow. Disk usage stuck at 100%. My Farbar logs are below. The laptop kept crashing while running aswMBR so I can't post that log. Happy holidays and thank you again for your assistance!




Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 25-12-2019
Ran by Evan (administrator) on LAPTOP-9KG4QFMS (TOSHIBA Satellite C55-C) (25-12-2019 10:19:09)
Running from C:\Users\Evan\Desktop
Loaded Profiles: Evan (Available Profiles: Evan)
Platform: Windows 10 Home Version 1903 18362.418 (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Conexant Systems, Inc. -> Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Conexant Systems, Inc. -> Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\79.0.3945.10\remoting_host.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\79.0.3945.10\remoting_host.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett Packard -> Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP ENVY 4500 series\Bin\HPNetworkCommunicatorCom.exe
(Hewlett Packard -> Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP ENVY 4500 series\Bin\ScanToPCActivationApp.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation -> ) C:\Windows\System32\igfxTray.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\Updates\16.0.12228.20364\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(TOSHIBA CORPORATION -> TOSHIBA Corporation) C:\Program Files\TOSHIBA\System Setting\TCrdMain_Win8.exe
(TOSHIBA CORPORATION -> Toshiba Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(TOSHIBA CORPORATION -> TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(TOSHIBA CORPORATION -> TOSHIBA) C:\Program Files (x86)\TOSHIBA\TOSHIBA System Driver\RMService.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Wondershare\drfone\Library\DriverInstaller\DriverInstall.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.4.3.237\WsAppService.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [601944 2015-08-14] (Conexant Systems, Inc. -> Conexant Systems, Inc.)
HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [180016 2015-06-08] (TOSHIBA CORPORATION -> TOSHIBA Corporation)
HKLM\...\Run: [TCrdMain] => C:\Program Files\Toshiba\System Setting\TCrdMain_Win8.exe [511280 2015-06-23] (TOSHIBA CORPORATION -> TOSHIBA Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [268680 2019-09-27] (AVAST Software s.r.o. -> AVAST Software)
HKLM\...\Run: [MRT] => C:\WINDOWS\system32\MRT.exe [127230528 2019-10-17] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830616 2014-04-10] (Conexant Systems, Inc. -> Conexant Systems, Inc.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3933496 2012-09-20] (Logitech -> Logitech, Inc.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-219441427-1511812545-325799061-1001\...\Run: [HP ENVY 4500 series (NET)] => C:\Program Files\HP\HP ENVY 4500 series\Bin\ScanToPCActivationApp.exe [3487240 2014-07-21] (Hewlett Packard -> Hewlett-Packard Development Company, LP)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.88\Installer\chrmstp.exe [2019-12-23] (Google LLC -> Google LLC)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1000F1A4-6A4D-486E-9BAB-06CFDB90939F} - System32\Tasks\Resolution+ Setting Task => C:\Program Files\Toshiba\TOSHIBA Smart View Utility\Plugins\ResolutionPlus\TosRegPermissionChg.exe
Task: {2ADCD8C2-8263-4192-8C1B-D9391FDD5221} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1373592 2019-12-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {4A9C7DE2-70C6-46CB-9487-50DF26995966} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-12-05] (Google Inc -> Google Inc.)
Task: {51563FA3-1AE9-4B8B-957B-1E24162831A5} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1873288 2019-09-27] (AVAST Software s.r.o. -> AVAST Software)
Task: {64550D90-6F01-4BE4-BFE3-A9DF7B5C924B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1240656 2019-09-10] (Adobe Inc. -> Adobe Systems)
Task: {754E16BD-3BA7-4073-8144-08DE143DBDA8} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24671608 2019-12-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {75F74B4F-D598-4C92-99FB-DFBE70F5A02D} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3933576 2019-09-27] (AVAST Software s.r.o. -> AVAST Software)
Task: {7856A58B-F9D8-4F26-B44B-91163C390519} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [112984 2019-12-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {85A32D42-EEB9-4A51-AFB0-4E95B0432D0D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-12-05] (Google Inc -> Google Inc.)
Task: {A0031712-2DC9-4842-BBDD-ED7ADF7D0127} - System32\Tasks\TOSHIBA\Service Station => C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe [700040 2014-04-03] (TOSHIBA CORPORATION -> TOSHIBA Corporation)
Task: {A0D570E1-9D43-4245-A45F-3E9C9EE61F93} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1373592 2019-12-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {B6A39BE8-0B4C-4981-9C6C-CC06580EC8F3} - System32\Tasks\BTSchedulerTask => C:\Program Files (x86)\TOSHIBA\Toshiba Bluetooth Device Profile Utility\TosBt_NotificationScheduler.exe [135504 2015-07-08] (TOSHIBA CORPORATION -> Toshiba Corporation)
Task: {B7C295CF-5154-44CC-BDE9-CAA34B5A3027} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {BE89278B-A8B7-4142-A18A-AA074DD28992} - System32\Tasks\RealDownloader Update Check => C:\Program Files (x86)\Real\RealDownloader\downloader2.exe
Task: {C141E928-EE54-416B-B75C-F304AD048002} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [112984 2019-12-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {C3BEE270-EFCC-477E-A741-2FCCB83F9F5D} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_255_pepper.exe [1453112 2019-09-28] (Adobe Inc. -> Adobe)
Task: {E0B41339-B7E6-4183-9E3B-44C04DB02732} - System32\Tasks\Microsoft\Windows\rempl\shell-usoscan => C:\Program Files\rempl\remsh.exe
Task: {E114C354-D91C-44EF-B612-3E3B99709119} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {E9F07132-A572-4F6B-B1EA-ABE4DD162C04} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24671608 2019-12-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {F8F35569-A792-48A2-BCB3-853793447E9E} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 10.0.0.1
Tcpip\..\Interfaces\{65d38424-445e-405a-a168-68ad940d6c8f}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{65d38424-445e-405a-a168-68ad940d6c8f}: [DhcpNameServer] 40.42.1.201
Tcpip\..\Interfaces\{6f041e61-5ab5-448f-a777-18db4cd52ef3}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{6f041e61-5ab5-448f-a777-18db4cd52ef3}: [DhcpNameServer] 10.0.0.1

Internet Explorer:
==================
HKU\S-1-5-21-219441427-1511812545-325799061-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://toshiba15.msn.com/?pc=TBTE
HKU\S-1-5-21-219441427-1511812545-325799061-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://start.new.toshiba.com?cid=H15C3
SearchScopes: HKU\S-1-5-21-219441427-1511812545-325799061-1001 -> DefaultScope {196494D6-F5AC-4C8C-84A0-D8F9A521DEFC} URL =
SearchScopes: HKU\S-1-5-21-219441427-1511812545-325799061-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=U270DF&PC=U270&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-219441427-1511812545-325799061-1001 -> {196494D6-F5AC-4C8C-84A0-D8F9A521DEFC} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2019-12-25] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-25] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-25] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-25] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-12-25] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF DefaultProfile: bpmb4f54.default
FF ProfilePath: C:\Users\Evan\AppData\Roaming\Mozilla\Firefox\Profiles\bpmb4f54.default [2019-09-28]
FF Homepage: Mozilla\Firefox\Profiles\bpmb4f54.default -> www.google.com
FF Extension: (Bing Search) - C:\Users\Evan\AppData\Roaming\Mozilla\Firefox\Profiles\bpmb4f54.default\Extensions\bingsearch.full@microsoft.com.xpi [2016-01-03] [Legacy]
FF Extension: (Toshiba Defaults) - C:\Users\Evan\AppData\Roaming\Mozilla\Firefox\Profiles\bpmb4f54.default\Extensions\defaults@toshiba.com [2015-12-04] [Legacy]
FF Extension: (Avast SafePrice) - C:\Users\Evan\AppData\Roaming\Mozilla\Firefox\Profiles\bpmb4f54.default\Extensions\sp@avast.com.xpi [2017-11-18] [UpdateUrl:hxxps://firefoxextension.avast.com/sp/update.json]
FF Extension: (Avast Online Security) - C:\Users\Evan\AppData\Roaming\Mozilla\Firefox\Profiles\bpmb4f54.default\Extensions\wrc@avast.com.xpi [2018-06-20]
FF SearchPlugin: C:\Users\Evan\AppData\Roaming\Mozilla\Firefox\Profiles\bpmb4f54.default\searchplugins\bing-.xml [2016-01-03]
FF Extension: (Toshiba Defaults) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\defaults@toshiba.com [2018-02-10] [Legacy]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-12-25] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-16] (Google LLC -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-16] (Google LLC -> Google LLC)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-10-11] (Adobe Inc. -> Adobe Systems Inc.)

Chrome:
=======
CHR DefaultProfile: Profile 3
CHR Profile: C:\Users\Evan\AppData\Local\Google\Chrome\User Data\Guest Profile [2019-09-27]
CHR Profile: C:\Users\Evan\AppData\Local\Google\Chrome\User Data\Profile 2 [2017-12-03]
CHR Extension: (Avast Online Security (BETA)) - C:\Users\Evan\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\daanglpcpkjjlkhcbladppjphglbigam [2017-12-03]
CHR Extension: (Adobe Acrobat) - C:\Users\Evan\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-12-03]
CHR Extension: (Avast SafePrice) - C:\Users\Evan\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-12-03]
CHR Extension: (Avast Online Security) - C:\Users\Evan\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-12-03]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Evan\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-12-02]
CHR Extension: (Chrome Media Router) - C:\Users\Evan\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-03]
CHR Profile: C:\Users\Evan\AppData\Local\Google\Chrome\User Data\Profile 3 [2019-12-25]
CHR Extension: (Adobe Acrobat) - C:\Users\Evan\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2019-10-16]
CHR Extension: (Google Docs Offline) - C:\Users\Evan\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-16]
CHR Extension: (Avast Online Security) - C:\Users\Evan\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\gomekmidlodglbbmalcneegieacbdmki [2019-12-23]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Evan\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-16]
CHR Extension: (Chrome Media Router) - C:\Users\Evan\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-12-23]
CHR Profile: C:\Users\Evan\AppData\Local\Google\Chrome\User Data\System Profile [2018-10-09]
CHR HKLM-x32\...\Chrome\Extension: [daanglpcpkjjlkhcbladppjphglbigam]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6259592 2019-12-23] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [996880 2019-09-27] (AVAST Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [57504 2019-09-27] (AVAST Software s.r.o. -> AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6971400 2018-01-30] (BattlEye Innovations e.K. -> )
R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\79.0.3945.10\remoting_host.exe [74392 2019-10-24] (Google LLC -> Google Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11345992 2019-12-02] (Microsoft Corporation -> Microsoft Corporation)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [370848 2019-05-05] (Intel Corporation -> Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel® Trusted Connect Service -> Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [223520 2015-07-11] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [287240 2018-03-28] (Synaptics Incorporated -> Synaptics Incorporated)
R2 TOSRMService; C:\Program Files (x86)\TOSHIBA\TOSHIBA System Driver\RMService.exe [326960 2015-06-24] (TOSHIBA CORPORATION -> TOSHIBA)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4098056 2019-03-18] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [113992 2019-03-18] (Microsoft Corporation -> Microsoft Corporation)
R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.237\WsAppService.exe [495720 2018-07-04] (Wondershare Technology Co.,Ltd -> Wondershare)
R2 WsDrvInst; C:\Program Files (x86)\Wondershare\drfone\Library\DriverInstaller\DriverInstall.exe [120016 2018-12-29] (Wondershare Technology Co.,Ltd -> Wondershare)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [37616 2019-09-27] (AVAST Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [204824 2019-09-27] (AVAST Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [274456 2019-09-27] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [209552 2019-09-27] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [65120 2019-09-27] (AVAST Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [16304 2019-09-27] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [276952 2019-09-27] (AVAST Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42736 2019-09-27] (AVAST Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [161544 2019-11-01] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [110320 2019-09-27] (AVAST Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [83792 2019-09-27] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [848432 2019-09-30] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [460448 2019-09-30] (AVAST Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [236024 2019-09-27] (AVAST Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [316528 2019-09-27] (AVAST Software s.r.o. -> AVAST Software)
S3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [515792 2018-12-31] (Symantec Corporation -> Symantec Corporation)
S3 ElgatoGC658Y; C:\WINDOWS\System32\Drivers\ElgatoGC658.sys [43488 2015-11-06] (Elgato Systems LLC -> UB658)
S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [153296 2019-01-09] (Symantec Corporation -> Symantec Corporation)
R3 QIOMem; C:\WINDOWS\System32\drivers\QIOMem.sys [14000 2015-05-05] (WDKTestCert 1,130752733198717037 -> TOSHIBA)
R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [301784 2015-06-01] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [895256 2015-12-12] (Realtek Semiconductor Corp -> Realtek )
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [54792 2018-03-28] (Synaptics Incorporated -> Synaptics Incorporated)
R3 Thotkey; C:\WINDOWS\System32\drivers\Thotkey.sys [45720 2015-06-13] (TOSHIBA CORPORATION -> Toshiba Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46472 2019-03-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [333784 2019-03-18] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [62432 2019-03-18] (Microsoft Windows -> Microsoft Corporation)
S3 XSplit_Dummy; C:\WINDOWS\system32\drivers\xspltspk.sys [26200 2015-05-25] (Splitmedialabs Limited -> SplitmediaLabs Limited)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-12-25 10:19 - 2019-12-25 10:22 - 000025562 _____ C:\Users\Evan\Desktop\FRST.txt
2019-12-25 10:18 - 2019-12-25 10:21 - 000000000 ____D C:\FRST
2019-12-25 10:15 - 2019-12-25 10:15 - 002271744 _____ (Farbar) C:\Users\Evan\Desktop\FRST64.exe
2019-12-25 10:13 - 2019-12-25 10:13 - 000000207 _____ C:\WINDOWS\tweaking.com-regbackup-LAPTOP-9KG4QFMS-Windows-10-Home-(64-bit).dat
2019-12-25 10:13 - 2019-12-25 10:13 - 000000000 ____D C:\RegBackup
2019-12-25 10:12 - 2019-12-25 10:12 - 000002319 _____ C:\Users\Public\Desktop\Tweaking.com - Registry Backup.lnk
2019-12-25 10:12 - 2019-12-25 10:12 - 000002319 _____ C:\ProgramData\Desktop\Tweaking.com - Registry Backup.lnk
2019-12-25 10:12 - 2019-12-25 10:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2019-12-25 10:12 - 2019-12-25 10:12 - 000000000 ____D C:\Program Files (x86)\Tweaking.com
2019-12-25 10:11 - 2019-12-25 10:12 - 000019558 _____ C:\WINDOWS\Tweaking.com - Registry Backup Setup Log.txt
2019-12-25 10:10 - 2019-12-25 10:10 - 005766144 _____ (Tweaking.com) C:\Users\Evan\Downloads\tweaking.com_registry_backup_setup (1).exe
2019-12-25 10:09 - 2019-12-25 10:09 - 005766144 _____ (Tweaking.com) C:\Users\Evan\Desktop\tweaking.com_registry_backup_setup.exe
2019-12-25 09:57 - 2019-12-25 09:57 - 000000080 ___SH C:\bootTel.dat
2019-12-23 22:18 - 2019-12-23 22:18 - 000000000 ____D C:\Users\Evan\Documents\Add-in Express
2019-12-05 01:20 - 2019-12-05 01:20 - 000000000 _____ C:\Users\Evan\AppData\Local\{0175564F-3257-48C0-B3E3-6D472A5975AC}

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-12-25 10:22 - 2019-03-18 23:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-12-25 10:20 - 2015-09-23 23:55 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2019-12-25 10:17 - 2015-12-06 20:00 - 001388432 _____ C:\Users\Public\VOIP.dat
2019-12-25 10:02 - 2019-09-27 21:37 - 000840848 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-12-25 10:02 - 2019-03-18 23:50 - 000000000 ____D C:\WINDOWS\INF
2019-12-25 10:02 - 2016-09-06 20:29 - 000000000 ____D C:\Users\Evan\AppData\Local\AVAST Software
2019-12-25 09:59 - 2017-09-18 02:04 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2019-12-25 09:59 - 2015-12-04 13:49 - 000000000 __SHD C:\Users\Evan\IntelGraphicsProfiles
2019-12-25 09:58 - 2019-09-27 22:02 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-12-25 09:56 - 2019-03-18 23:37 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2019-12-25 09:55 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-12-25 09:51 - 2019-09-27 22:02 - 000004162 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{919BFABA-C22C-4537-8F90-E95D601417AD}
2019-12-25 09:33 - 2019-09-27 21:14 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-12-24 16:24 - 2016-11-16 16:07 - 000000000 ____D C:\Users\Evan\Desktop\Roto
2019-12-24 16:20 - 2019-09-27 22:02 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2019-12-23 22:42 - 2019-01-10 23:15 - 000000000 ____D C:\Users\Evan\Desktop\Roto 2019
2019-12-23 22:19 - 2015-09-23 23:53 - 000000000 ____D C:\ProgramData\WinZip
2019-12-23 22:14 - 2016-04-28 23:02 - 000000000 ____D C:\ProgramData\Apple
2019-12-23 22:13 - 2016-02-07 13:29 - 000000000 ____D C:\Program Files\OBS
2019-12-23 22:13 - 2016-02-07 13:29 - 000000000 ____D C:\Program Files (x86)\OBS
2019-12-23 22:12 - 2016-01-11 19:57 - 000000000 ____D C:\Program Files\InterActual
2019-12-23 22:02 - 2019-09-27 21:26 - 000000000 ____D C:\Users\Evan
2019-12-23 22:01 - 2018-01-15 17:36 - 000000000 ____D C:\Users\Evan\AppData\Roaming\DVDVideoSoft
2019-12-23 21:48 - 2015-12-06 19:47 - 000000000 ____D C:\Users\Evan\Desktop\Evan's files
2019-12-23 21:38 - 2016-12-24 20:28 - 000000000 ____D C:\Program Files (x86)\iMobie
2019-12-23 21:27 - 2019-02-25 20:35 - 000000000 ____D C:\ProgramData\Wondershare
2019-12-23 21:27 - 2019-02-25 20:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2019-12-23 21:27 - 2015-09-23 23:37 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2019-12-23 21:26 - 2015-09-23 23:46 - 000000000 ____D C:\ProgramData\CyberLink
2019-12-23 21:24 - 2016-03-03 17:11 - 000000000 ____D C:\Program Files (x86)\Minecraft
2019-12-23 21:22 - 2015-12-05 17:00 - 000002312 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-12-23 21:22 - 2015-12-05 17:00 - 000002271 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-12-23 21:22 - 2015-12-05 17:00 - 000002271 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2019-12-23 20:51 - 2019-09-28 05:50 - 000185665 ____H C:\Users\Evan\AppData\Local\IconCache.db.backup
2019-12-16 21:09 - 2019-09-27 22:02 - 000003420 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2019-12-16 21:09 - 2019-09-27 22:02 - 000003296 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore

==================== Files in the root of some directories ========

2015-12-06 20:00 - 2019-12-25 10:17 - 001388432 _____ () C:\Users\Public\VOIP.dat
2019-12-05 01:20 - 2019-12-05 01:20 - 000000000 _____ () C:\Users\Evan\AppData\Local\{0175564F-3257-48C0-B3E3-6D472A5975AC}

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================





Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-12-2019
Ran by Evan (25-12-2019 10:23:16)
Running from C:\Users\Evan\Desktop
Windows 10 Home Version 1903 18362.418 (X64) (2019-09-28 03:04:35)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-219441427-1511812545-325799061-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-219441427-1511812545-325799061-503 - Limited - Disabled)
Evan (S-1-5-21-219441427-1511812545-325799061-1001 - Administrator - Enabled) => C:\Users\Evan
Guest (S-1-5-21-219441427-1511812545-325799061-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-219441427-1511812545-325799061-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 19.021.20056 - Adobe Systems Incorporated)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.255 - Adobe)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 19.8.2393 - AVAST Software)
Bluetooth(R) Link (HKLM\...\{936D21BF-3344-4B20-BC4C-3B67580C19F5}) (Version: 4.3.04 - Toshiba Corporation)
Chrome Remote Desktop Host (HKLM-x32\...\{738276A2-92E7-4313-9E4D-D090F7DA98EC}) (Version: 79.0.3945.10 - Google Inc.)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.66.43.53 - Conexant)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.5509.05 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 79.0.3945.88 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.421 - Google LLC) Hidden
HP ENVY 4500 series Basic Device Software (HKLM\...\{6915424E-704F-4F5D-9057-9C7B406B36DB}) (Version: 32.3.198.49673 - Hewlett-Packard Co.)
Intel(R) Chipset Device Software (HKLM-x32\...\{60c073df-e736-4210-9c3a-5fc2b651cef3}) (Version: 10.1.1.7 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1158 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.5070 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.5.0.1081 - Intel Corporation)
Junk Mail filter update (HKLM-x32\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Microsoft ASP.NET MVC 2 (HKLM-x32\...\{DD8FF2F3-0D97-4CF3-AF78-FA0E1B242244}) (Version: 2.0.60926.0 - Microsoft Corporation)
Microsoft Office Home and Student 2016 - en-us (HKLM\...\HomeStudentRetail - en-us) (Version: 16.0.12228.20364 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Movie Maker (HKLM-x32\...\{38F03569-A636-4CF3-BDDE-032C8C251304}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 58.0.2 (x64 en-US) (HKLM\...\Mozilla Firefox 58.0.2 (x64 en-US)) (Version: 58.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 58.0.2.6611 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.12228.20364 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.12228.20364 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.12228.20364 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.12228.20364 - Microsoft Corporation) Hidden
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10130.29089 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.1.505.2015 - Realtek)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.4.3.182 - Synaptics Incorporated)
TI Connect™ CE (HKLM-x32\...\{30258E3F-5B74-4450-8188-3221682375F4}) (Version: 5.2.0.51 - Texas Instruments Inc.)
TOSHIBA Application Installer (HKLM\...\{21A63CA3-75C0-4E56-B602-B7CD2EF6B621}) (Version: 9.0.2.8 - Toshiba Corporation)
TOSHIBA Audio Enhancement (HKLM\...\{1515F5E3-29EA-4CD1-A981-032D88880F09}) (Version: 3.0.0.9 - Toshiba Corporation)
TOSHIBA eco Utility (HKLM\...\{72EFCFA8-3923-451D-AF52-7CE9D87BC2A1}) (Version: 3.0.1.6403 - Toshiba Corporation)
TOSHIBA Password Utility (HKLM-x32\...\InstallShield_{26BB68BB-CF93-4A12-BC6D-A3B6F53AC8D9}) (Version: 8.1.1.0 - Toshiba Corporation)
TOSHIBA Service Station (HKLM\...\{0DFA8761-7735-4DE8-A0EB-2286578DCFC6}) (Version: 2.6.14 - Toshiba Corporation)
TOSHIBA System Driver (HKLM-x32\...\{1E6A96A1-2BAB-43EF-8087-30437593C66C}) (Version: 2.00.0005 - Toshiba Corporation)
TOSHIBA System Settings (HKLM\...\{B040D5C9-C9AA-430A-A44E-696656012E61}) (Version: 3.0.1.6403 - Toshiba Corporation)
TOSHIBA User's Guide (HKLM-x32\...\{3384E1D9-3F18-4A98-8655-180FEF0DFC02}) (Version: 1.00.02 - TOSHIBA)
TOSHIBARegistration (HKLM-x32\...\{5AF550B4-BB67-4E7E-82F1-2C4300279050}) (Version: 1.0.1.2 - TOSHIBA)
Tweaking.com - Registry Backup (HKLM-x32\...\Tweaking.com - Registry Backup) (Version: 3.5.3 - Tweaking.com)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
vs2015_redist x86 (HKLM-x32\...\{BD46163A-0331-4A61-B65A-7B66D7C93F8E}) (Version: 1.0.0.0 - Realnetworks) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

Packages:
=========
Amazon -> C:\Program Files\WindowsApps\Amazon.com.Amazon_2018.519.2811.0_x64__343d40qqvtj1t [2018-06-27] (Amazon.com)
AOL Video -> C:\Program Files\WindowsApps\Aol.AOLOn_1.1.28.0_neutral__95th8zv6cmbrc [2017-05-03] (AOL)
Asphalt 8: Airborne -> C:\Program Files\WindowsApps\GAMELOFTSA.Asphalt8Airborne_4.6.0.8_x86__0pp20fcewvvtj [2019-11-01] (GAMELOFT SA)
Baseball.free -> C:\Program Files\WindowsApps\45515SkyLineGames.Baseball.free_1.2.3.0_x64__zrw4chdf0m07a [2019-06-16] (SkyLine Gamez) [MS Ad]
Disney Magic Kingdoms -> C:\Program Files\WindowsApps\A278AB0D.DisneyMagicKingdoms_4.5.0.8_x86__h6adky7gbf63m [2019-11-20] (Gameloft.)
Evernote -> C:\Program Files\WindowsApps\Evernote.Evernote_6.21.8716.0_x86__q4d96b2w5wcc2 [2019-10-17] (Evernote)
Fallout Shelter -> C:\Program Files\WindowsApps\BethesdaSoftworks.FalloutShelter_1.13.156.2_x64__3275kfvn8vcwc [2018-10-24] (Bethesda Softworks)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_105.1.623.0_x64__v10z8vjag6ke6 [2019-11-20] (HP Inc.)
Hulu -> C:\Program Files\WindowsApps\HuluLLC.HuluPlus_2.5.3.0_neutral__fphbd361v8tya [2019-03-09] (Hulu.)
iHeartRadio -> C:\Program Files\WindowsApps\ClearChannelRadioDigital.iHeartRadio_6.0.44.0_x64__a76a11dkgb644 [2019-08-14] (iHeartMedia.)
INSTEON for Hub -> C:\Program Files\WindowsApps\SmartLabs.INSTEONforHub_1.2.1.18_x86__4162j3jeed9tp [2016-11-08] (SmartLabs)
Kindle -> C:\Program Files\WindowsApps\AMZNMobileLLC.KindleforWindows8_2.1.0.2_neutral__stfe6vwa9jnbp [2015-12-06] (AMZN Mobile LLC)
Mail and Calendar -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12228.20206.0_x64__8wekyb3d8bbwe [2019-11-20] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for JavaScript -> C:\Program Files\WindowsApps\Microsoft.Advertising.JavaScript_10.1809.1.0_x64__8wekyb3d8bbwe [2018-11-02] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for JavaScript -> C:\Program Files\WindowsApps\Microsoft.Advertising.JavaScript_10.1809.1.0_x86__8wekyb3d8bbwe [2018-11-02] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-02-04] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-02-04] (Microsoft Corporation) [MS Ad]
Microsoft News -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.33.13094.0_x64__8wekyb3d8bbwe [2019-11-20] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.11052.0_x64__8wekyb3d8bbwe [2019-11-20] (Microsoft Studios) [MS Ad]
Minecraft for Windows 10 -> C:\Program Files\WindowsApps\Microsoft.MinecraftUWP_1.13.105.0_x64__8wekyb3d8bbwe [2019-11-20] (Microsoft Studios)
MLB.TV -> C:\Program Files\WindowsApps\1508E719.MLB.TV_4.3.0.0_x64__9h0pwecjjphwj [2016-10-26] (MLB Advanced Media L.P.)
MSN Money -> C:\Program Files\WindowsApps\Microsoft.BingFinance_4.31.11905.0_x64__8wekyb3d8bbwe [2019-08-14] (Microsoft Corporation) [MS Ad]
MSN Sports -> C:\Program Files\WindowsApps\Microsoft.BingSports_4.31.11905.0_x64__8wekyb3d8bbwe [2019-08-14] (Microsoft Corporation) [MS Ad]
MSN Weather -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.33.13094.0_x64__8wekyb3d8bbwe [2019-11-20] (Microsoft Corporation) [MS Ad]
My Toshiba -> C:\Program Files\WindowsApps\EnnovaResearch.ToshibaPlaces_3.2.49.0_x64__3s2an63h56yee [2016-02-08] (Ennova Research)
MyMusicCloud - Toshiba -> C:\Program Files\WindowsApps\TriPlayInc.MyMusicCloud-Toshiba_1.0.50.2550_x86__rejfh65ekdhs8 [2017-01-24] (TriPlay Inc)
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.95.602.0_x64__mcm4njqhnhss8 [2019-10-25] (Netflix, Inc.)
Texture - Unlimited Magazines -> C:\Program Files\WindowsApps\NextIssue.NextIssueMagazines_1.6.1.0_x64__91pt4qm2m3xcw [2015-12-18] (NEXT ISSUE MEDIA LLC)
TripAdvisor Hotels Flights Restaurants -> C:\Program Files\WindowsApps\TripAdvisorLLC.TripAdvisorHotelsFlightsRestaurants_1.5.10.0_x64__qj0v5chwq8f2g [2016-11-17] (TripAdvisor LLC)
TruRecorder -> C:\Program Files\WindowsApps\7906AAC0.TruRecorder_2.2.39.0_x86__nvaxck9xhg5vg [2019-11-07] (Dynabook Inc.)
Twitter -> C:\Program Files\WindowsApps\9E2F88E3.Twitter_6.1.4.1000_neutral__wgeqdkkx372wm [2018-09-09] (Twitter Inc.)
Xbox 360 SmartGlass -> C:\Program Files\WindowsApps\Microsoft.XboxCompanion_1.4.3.0_x64__8wekyb3d8bbwe [2016-04-02] (Microsoft Corporation) [MS Ad]
Xbox One SmartGlass -> C:\Program Files\WindowsApps\Microsoft.XboxOneSmartGlass_2.2.1702.2004_x64__8wekyb3d8bbwe [2017-02-14] (Microsoft Corporation)
Zappos.com -> C:\Program Files\WindowsApps\ZapposIPInc.Zappos.com_1.1.0.72_neutral__5e9xhf7t0emqp [2016-03-17] (Zappos IP Inc.)
Zinio -> C:\Program Files\WindowsApps\ZinioLLC.Zinio_2.1.0.317_x64__0q6dqzpp40p2e [2015-09-23] (Zinio LLC)
ZUUS -> C:\Program Files\WindowsApps\181132B7.ZUUS_1.1.0.0_neutral__zrxb4n2dhz0mw [2015-09-24] (ZUUS Media, Inc.)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-219441427-1511812545-325799061-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Evan\AppData\Local\Microsoft\OneDrive\19.192.0926.0012\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-219441427-1511812545-325799061-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Evan\AppData\Local\Microsoft\OneDrive\19.192.0926.0012\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-219441427-1511812545-325799061-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Evan\AppData\Local\Microsoft\OneDrive\19.192.0926.0012\amd64\FileSyncShell64.dll => No File
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-09-27] (AVAST Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-09-27] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-09-27] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-09-27] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2019-05-05] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-09-27] (AVAST Software s.r.o. -> AVAST Software)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\Evan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Cut the Rope.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1" --app-id=jfbadlndcminbkfojhlimnkgaackjmdo
ShortcutWithArgument: C:\Users\Evan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\225bb61db2f318c1\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 3"

==================== Loaded Modules (Whitelisted) =============

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Public\AppData:CSM [466]

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2015-07-10 06:04 - 2019-01-04 03:51 - 000000943 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Windows Live\Shared;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-219441427-1511812545-325799061-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Evan\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\kobe.jpg
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\StartupFolder: => "FAH.lnk"
HKLM\...\StartupApproved\StartupFolder: => "WinZip Preloader.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Ear Trumpet.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Update Notifier.lnk"
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run: => "TecoResident"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run: => "Wondershare Helper Compact.exe"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKLM\...\StartupApproved\Run32: => "Dropbox"
HKU\S-1-5-21-219441427-1511812545-325799061-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-219441427-1511812545-325799061-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-219441427-1511812545-325799061-1001\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-219441427-1511812545-325799061-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-219441427-1511812545-325799061-1001\...\StartupApproved\Run: => "Selection Tools"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{114DCF7D-92A1-48BC-9722-387C9C5F2E65}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe No File
FirewallRules: [TCP Query User{27303508-BAA8-431B-95D2-8092EEB3597C}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe No File
FirewallRules: [UDP Query User{77617336-D27A-45C1-A8B3-940C9CC383C4}C:\users\evan\desktop\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\users\evan\desktop\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe No File
FirewallRules: [TCP Query User{AFE6A7F3-407B-408B-AA77-15C8AF0FA315}C:\users\evan\desktop\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\users\evan\desktop\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe No File
FirewallRules: [UDP Query User{6E347067-A118-430E-BEE5-926710294422}C:\users\evan\desktop\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\users\evan\desktop\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe No File
FirewallRules: [TCP Query User{1219A958-769B-443B-820D-9DBE48B3C2FB}C:\users\evan\desktop\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\users\evan\desktop\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe No File
FirewallRules: [UDP Query User{EF6E686F-A5D6-4498-B3F1-CA73C35CD865}C:\users\evan\desktop\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\users\evan\desktop\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe No File
FirewallRules: [TCP Query User{A45187FF-2CD0-42C6-9992-D6BA7AD0A619}C:\users\evan\desktop\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\users\evan\desktop\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe No File
FirewallRules: [UDP Query User{D4CA2698-15D0-465E-95EC-59346AE723CC}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe No File
FirewallRules: [TCP Query User{07319ABC-BA9A-4265-A4FC-214C4A7AB172}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe No File
FirewallRules: [UDP Query User{69F2A5E7-D720-481E-A6D6-0C4A78D5AF6A}C:\users\evan\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\evan\appdata\roaming\spotify\spotify.exe No File
FirewallRules: [TCP Query User{45FEF741-69D8-46E5-9309-EE4AB5312A52}C:\users\evan\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\evan\appdata\roaming\spotify\spotify.exe No File
FirewallRules: [{486E2CCF-F506-4113-BC08-9D082F878B51}] => (Allow) C:\Program Files\HP\HP ENVY 4500 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [{27281003-414F-4E2B-972C-D8F65E77979E}] => (Allow) LPort=5357
FirewallRules: [{4E0A701E-D50D-4946-B668-2ACE2A6ED835}] => (Allow) C:\Program Files\HP\HP ENVY 4500 series\Bin\DeviceSetup.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [UDP Query User{C15ED996-8E9B-4F4B-9F3F-18C82D7A171A}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe No File
FirewallRules: [TCP Query User{D86E8BC9-9B73-4462-AA04-FB78196FFB07}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe No File
FirewallRules: [{16381798-9B4E-49B2-8214-BCA7E03D2826}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\steamapps\common\Counter-Strike Global Offensive\csgo.exe No File
FirewallRules: [{AC3CB65F-0642-4236-89A1-BA3D4D3FEDF2}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\steamapps\common\Counter-Strike Global Offensive\csgo.exe No File
FirewallRules: [{1BB55A3A-BDB7-4007-A6EA-DC957A36343E}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\bin\steamwebhelper.exe No File
FirewallRules: [{8A7F04DE-1D49-4AC4-96E1-B35C7520E726}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\bin\steamwebhelper.exe No File
FirewallRules: [{0BB00C81-3B19-4784-A62F-43E156C746B6}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\Steam.exe No File
FirewallRules: [{C723E612-5F9C-4C06-8664-7F61EAD6E67B}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\Steam.exe No File
FirewallRules: [{23FFBDCB-33E2-46DC-A998-50A3F9E88499}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD Cinema\PowerDVDCinema12.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{73D61D9A-207E-4845-9BF1-0204C59B0EAB}] => (Allow) C:\Program Files (x86)\Spotify\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{CF065D4A-A0CB-45E2-B737-9C7D0A773C9D}] => (Allow) C:\Program Files (x86)\Spotify\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{943757AB-9F31-4F7A-ABE2-D02E0B6287B6}] => (Allow) C:\Program Files (x86)\Spotify\SpotifyWebHelper.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{16875DED-515F-4B66-A8D9-159F0051C93E}] => (Allow) C:\Program Files (x86)\Spotify\SpotifyWebHelper.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{27041887-BFF3-48F6-A3D8-31F683C09E8D}] => (Allow) C:\Program Files (x86)\Spotify\SpotifyCrashService.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{03DD9D65-8498-4CBC-9422-4BBDA1DDCEB2}] => (Allow) C:\Program Files (x86)\Spotify\SpotifyCrashService.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{F1B7FF55-E610-4D92-AE37-78EFED235030}] => (Allow) C:\Program Files\CyberLink\PowerDirector12\PDR10.EXE No File
FirewallRules: [{A85B9D26-3B1F-4FC1-B133-3DEA25D6187A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{E58D5E7E-782C-488E-856D-8BA8BC0C1E2B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{16D9291C-E245-4A64-9537-7DCDF53EAE86}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8BDEB011-2904-4454-B4B3-A45C272D8BDE}] => (Allow) LPort=2869
FirewallRules: [{55062301-4487-428D-AC5E-22E5DA9F51AA}] => (Allow) LPort=1900
FirewallRules: [{B7D52757-FE20-48CD-8456-0940BBDA5D06}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{1418DC7F-1C8B-4DC2-A5C3-33AC2B047D55}C:\users\evan\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\evan\appdata\roaming\spotify\spotify.exe No File
FirewallRules: [UDP Query User{FB80E8D5-452F-490B-908B-8B211416CF20}C:\users\evan\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\evan\appdata\roaming\spotify\spotify.exe No File
FirewallRules: [{D99AC034-07E5-41C3-9A8D-9E74BD3C4310}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{89173536-C8CE-477B-91B3-43A3B2484B2E}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{1A07CAAA-1FF4-459D-B696-1F75DB86B295}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{6933FAC7-AD56-431D-9C09-201F629794E8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{2A947709-3EDB-4AA6-840D-1C645DCEDDEE}] => (Allow) C:\Program Files (x86)\Google\Chrome Remote Desktop\79.0.3945.10\remoting_host.exe (Google LLC -> Google Inc.)
FirewallRules: [{D5E7354D-B581-405E-AA6B-9A82D0ACA99E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

23-12-2019 22:30:49 Before Spybot Forum Help Dec 23 2019

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (12/25/2019 10:23:00 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: backgroundTaskHost.exe, version: 10.0.18362.1, time stamp: 0x533f8404
Faulting module name: twinapi.appcore.dll, version: 10.0.18362.1, time stamp: 0x42f071ca
Exception code: 0xc000027b
Fault offset: 0x00000000000d5cc8
Faulting process id: 0x3274
Faulting application start time: 0x01d5bb372dd877a7
Faulting application path: C:\WINDOWS\system32\backgroundTaskHost.exe
Faulting module path: C:\Windows\System32\twinapi.appcore.dll
Report Id: fb824233-1637-4f9a-afae-0d80a3dbca6d
Faulting package full name: 1508E719.MLB.TV_4.3.0.0_x64__9h0pwecjjphwj
Faulting package-relative application ID: App

Error: (12/25/2019 10:22:06 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (15052,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (12/25/2019 10:20:59 AM) (Source: MsiInstaller) (EventID: 11704) (User: NT AUTHORITY)
Description: Product: Office 16 Click-to-Run Extensibility Component -- Error 1704. An installation for Adobe Acrobat Reader DC is currently suspended. You must undo the changes made by that installation to continue. Do you want to undo those changes?

Error: (12/25/2019 10:11:09 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (6556,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (12/25/2019 10:02:34 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program SystemSettings.exe version 10.0.18362.387 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Process ID: 2f64

Start Time: 01d5bb342f5c11f0

Termination Time: 4294967295

Application Path: C:\Windows\ImmersiveControlPanel\SystemSettings.exe

Report Id: 0eb7074f-3d21-43e3-8bff-1a80832743e1

Faulting package full name: windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h2txyewy

Faulting package-relative application ID: microsoft.windows.immersivecontrolpanel

Hang type: Cross-thread

Error: (12/25/2019 09:43:25 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (7528,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (12/24/2019 06:39:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: backgroundTaskHost.exe, version: 10.0.18362.1, time stamp: 0x533f8404
Faulting module name: twinapi.appcore.dll, version: 10.0.18362.1, time stamp: 0x42f071ca
Exception code: 0xc000027b
Fault offset: 0x00000000000d5cc8
Faulting process id: 0x13d4
Faulting application start time: 0x01d5bab36454958d
Faulting application path: C:\WINDOWS\system32\backgroundTaskHost.exe
Faulting module path: C:\Windows\System32\twinapi.appcore.dll
Report Id: 70601962-1307-4a78-8565-0025ccefcf03
Faulting package full name: 1508E719.MLB.TV_4.3.0.0_x64__9h0pwecjjphwj
Faulting package-relative application ID: App

Error: (12/24/2019 04:31:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: backgroundTaskHost.exe, version: 10.0.18362.1, time stamp: 0x533f8404
Faulting module name: twinapi.appcore.dll, version: 10.0.18362.1, time stamp: 0x42f071ca
Exception code: 0xc000027b
Fault offset: 0x00000000000d5cc8
Faulting process id: 0x13f0
Faulting application start time: 0x01d5baa186855a12
Faulting application path: C:\WINDOWS\system32\backgroundTaskHost.exe
Faulting module path: C:\Windows\System32\twinapi.appcore.dll
Report Id: 62ddf998-27f8-4d0c-9deb-7c7f5e495ce4
Faulting package full name: 1508E719.MLB.TV_4.3.0.0_x64__9h0pwecjjphwj
Faulting package-relative application ID: App


System errors:
=============
Error: (12/25/2019 10:14:51 AM) (Source: disk) (EventID: 7) (User: )
Description: The device, \Device\Harddisk0\DR0, has a bad block.

Error: (12/25/2019 10:14:47 AM) (Source: disk) (EventID: 7) (User: )
Description: The device, \Device\Harddisk0\DR0, has a bad block.

Error: (12/25/2019 10:14:43 AM) (Source: disk) (EventID: 7) (User: )
Description: The device, \Device\Harddisk0\DR0, has a bad block.

Error: (12/25/2019 10:14:39 AM) (Source: disk) (EventID: 7) (User: )
Description: The device, \Device\Harddisk0\DR0, has a bad block.

Error: (12/25/2019 10:14:35 AM) (Source: disk) (EventID: 7) (User: )
Description: The device, \Device\Harddisk0\DR0, has a bad block.

Error: (12/25/2019 10:14:32 AM) (Source: disk) (EventID: 7) (User: )
Description: The device, \Device\Harddisk0\DR0, has a bad block.

Error: (12/25/2019 10:14:28 AM) (Source: disk) (EventID: 7) (User: )
Description: The device, \Device\Harddisk0\DR0, has a bad block.

Error: (12/25/2019 10:14:24 AM) (Source: disk) (EventID: 7) (User: )
Description: The device, \Device\Harddisk0\DR0, has a bad block.


CodeIntegrity:
===================================

Date: 2019-12-25 10:24:15.891
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2019-12-25 10:24:15.886
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2019-12-25 10:23:56.080
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2019-12-25 10:23:56.076
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2019-12-25 10:23:14.248
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2019-12-25 10:23:14.244
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2019-12-25 10:16:33.052
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2019-12-25 10:16:33.046
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

BIOS: INSYDE Corp. 5.00 07/16/2015
Motherboard: FF50 06F2
Processor: Intel(R) Core(TM) i7-5500U CPU @ 2.40GHz
Percentage of memory in use: 43%
Total physical RAM: 8106.14 MB
Available physical RAM: 4557.7 MB
Total Virtual: 9386.14 MB
Available Virtual: 6168.21 MB

==================== Drives ================================

Drive c: (TI10716100B) (Fixed) (Total:930.29 GB) (Free:740.86 GB) NTFS

\\?\Volume{c19e0a1a-83d5-4e41-84ce-c3fc70b75f75}\ () (Fixed) (Total:0.95 GB) (Free:0.4 GB) NTFS
\\?\Volume{7c6c66e1-7d6e-4b53-88df-3d70cc5053b7}\ (ESP) (Fixed) (Total:0.25 GB) (Free:0.2 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt =======================

[Juliet]

Start Farbar Recovery Scan Tool with Administrator privileges
(Right click on the FRST icon and select Run as administrator)

highlight on the text below and select Copy.
beginning with Start:: and finishing with End::
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Highlight the entire content of the quote box below and select Copy.




Start::
CloseProcesses:
CreateRestorePoint:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {E114C354-D91C-44EF-B612-3E3B99709119} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
SearchScopes: HKU\S-1-5-21-219441427-1511812545-325799061-1001 -> DefaultScope {196494D6-F5AC-4C8C-84A0-D8F9A521DEFC} URL =
SearchScopes: HKU\S-1-5-21-219441427-1511812545-325799061-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=U270DF&PC=U270&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-219441427-1511812545-325799061-1001 -> {196494D6-F5AC-4C8C-84A0-D8F9A521DEFC} URL =
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>
CustomCLSID: HKU\S-1-5-21-219441427-1511812545-325799061-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Evan\AppData\Local\Microsoft\OneDrive\19.192.0926.0012\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-219441427-1511812545-325799061-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Evan\AppData\Local\Microsoft\OneDrive\19.192.0926.0012\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-219441427-1511812545-325799061-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Evan\AppData\Local\Microsoft\OneDrive\19.192.0926.0012\amd64\FileSyncShell64.dll => No File
ShortcutWithArgument: C:\Users\Evan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Cut the Rope.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1" --app-id=jfbadlndcminbkfojhlimnkgaackjmdo
ShortcutWithArgument: C:\Users\Evan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\225bb61db2f318c1\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 3"
AlternateDataStreams: C:\Users\Public\AppData:CSM [466]
FirewallRules: [UDP Query User{114DCF7D-92A1-48BC-9722-387C9C5F2E65}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe No File
FirewallRules: [TCP Query User{27303508-BAA8-431B-95D2-8092EEB3597C}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe No File
FirewallRules: [UDP Query User{77617336-D27A-45C1-A8B3-940C9CC383C4}C:\users\evan\desktop\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\users\evan\desktop\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe No File
FirewallRules: [TCP Query User{AFE6A7F3-407B-408B-AA77-15C8AF0FA315}C:\users\evan\desktop\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\users\evan\desktop\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe No File
FirewallRules: [UDP Query User{6E347067-A118-430E-BEE5-926710294422}C:\users\evan\desktop\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\users\evan\desktop\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe No File
FirewallRules: [TCP Query User{1219A958-769B-443B-820D-9DBE48B3C2FB}C:\users\evan\desktop\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\users\evan\desktop\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe No File
FirewallRules: [UDP Query User{EF6E686F-A5D6-4498-B3F1-CA73C35CD865}C:\users\evan\desktop\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\users\evan\desktop\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe No File
FirewallRules: [TCP Query User{A45187FF-2CD0-42C6-9992-D6BA7AD0A619}C:\users\evan\desktop\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\users\evan\desktop\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe No File
FirewallRules: [UDP Query User{D4CA2698-15D0-465E-95EC-59346AE723CC}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe No File
FirewallRules: [TCP Query User{07319ABC-BA9A-4265-A4FC-214C4A7AB172}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe No File
FirewallRules: [UDP Query User{69F2A5E7-D720-481E-A6D6-0C4A78D5AF6A}C:\users\evan\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\evan\appdata\roaming\spotify\spotify.exe No File
FirewallRules: [TCP Query User{45FEF741-69D8-46E5-9309-EE4AB5312A52}C:\users\evan\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\evan\appdata\roaming\spotify\spotify.exe No File
FirewallRules: [UDP Query User{C15ED996-8E9B-4F4B-9F3F-18C82D7A171A}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe No File
FirewallRules: [TCP Query User{D86E8BC9-9B73-4462-AA04-FB78196FFB07}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe No File
FirewallRules: [{16381798-9B4E-49B2-8214-BCA7E03D2826}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\steamapps\common\Counter-Strike Global Offensive\csgo.exe No File
FirewallRules: [{AC3CB65F-0642-4236-89A1-BA3D4D3FEDF2}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\steamapps\common\Counter-Strike Global Offensive\csgo.exe No File
FirewallRules: [{1BB55A3A-BDB7-4007-A6EA-DC957A36343E}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\bin\steamwebhelper.exe No File
FirewallRules: [{8A7F04DE-1D49-4AC4-96E1-B35C7520E726}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\bin\steamwebhelper.exe No File
FirewallRules: [{0BB00C81-3B19-4784-A62F-43E156C746B6}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\Steam.exe No File
FirewallRules: [{C723E612-5F9C-4C06-8664-7F61EAD6E67B}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\Steam.exe No File
FirewallRules: [{F1B7FF55-E610-4D92-AE37-78EFED235030}] => (Allow) C:\Program Files\CyberLink\PowerDirector12\PDR10.EXE No File
FirewallRules: [{D99AC034-07E5-41C3-9A8D-9E74BD3C4310}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{89173536-C8CE-477B-91B3-43A3B2484B2E}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\bin\cef\cef.win7\steamwebhelper.exe No File
EmptyTemp:
C:\Windows\Temp\*.*
Hosts:
End::

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Start FRST (FRST64) with Administrator privileges
Press the Fix button. FRST will process the lines copied above from the clipboard.
When finished, a log file Fixlog.txt will pop up and saved in the same location the tool was ran from.

Please copy and paste its contents in your next reply.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Also can see problems with your Hard Disk Drive, maybe a disk issue

Error: (12/25/2019 10:14:24 AM) (Source: disk) (EventID: 7) (User: )
Description: The device, \Device\Harddisk0\DR0, has a bad block.


I think we can use chkdsk to help with that, but it's possible you might have to replace the hard drive as things could get worse.

How to run CHKDSK in Windows 10
https://www.thewindowsclub.com/disk-error-checking-windows-8

Right click the Start button, left click Command Prompt (Admin).

in the command box type the following, and press Enter:

chkdsk

A scan will run. If my guess is right, after a while it will say it cannot continue, and do you want it to run on the next reboot (or something similar to that). Type Y for yes, then reboot the computer.

Once the scan runs and the system boots back up, post back on what happened please.

[ssmarsh]

Thank you for the prompt reply! The fixlog text is below. After running Farbar I ran chkdsk, it reported that there were errors, and I chose to fix them. The laptop rebooted a few times after the initial scan was complete (it didn't say it couldn't continue) and that's where we are now.




Fix result of Farbar Recovery Scan Tool (x64) Version: 26-12-2019
Ran by Evan (26-12-2019 17:08:55) Run:1
Running from C:\Users\Evan\Desktop
Loaded Profiles: Evan (Available Profiles: Evan)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CloseProcesses:
CreateRestorePoint:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {E114C354-D91C-44EF-B612-3E3B99709119} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
SearchScopes: HKU\S-1-5-21-219441427-1511812545-325799061-1001 -> DefaultScope {196494D6-F5AC-4C8C-84A0-D8F9A521DEFC} URL =
SearchScopes: HKU\S-1-5-21-219441427-1511812545-325799061-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=U270DF&PC=U270&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-219441427-1511812545-325799061-1001 -> {196494D6-F5AC-4C8C-84A0-D8F9A521DEFC} URL =
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>
CustomCLSID: HKU\S-1-5-21-219441427-1511812545-325799061-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Evan\AppData\Local\Microsoft\OneDrive\19.192.0926.0012\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-219441427-1511812545-325799061-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Evan\AppData\Local\Microsoft\OneDrive\19.192.0926.0012\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-219441427-1511812545-325799061-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Evan\AppData\Local\Microsoft\OneDrive\19.192.0926.0012\amd64\FileSyncShell64.dll => No File
ShortcutWithArgument: C:\Users\Evan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Cut the Rope.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1" --app-id=jfbadlndcminbkfojhlimnkgaackjmdo
ShortcutWithArgument: C:\Users\Evan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\225bb61db2f318c1\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 3"
AlternateDataStreams: C:\Users\Public\AppData:CSM [466]
FirewallRules: [UDP Query User{114DCF7D-92A1-48BC-9722-387C9C5F2E65}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe No File
FirewallRules: [TCP Query User{27303508-BAA8-431B-95D2-8092EEB3597C}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe No File
FirewallRules: [UDP Query User{77617336-D27A-45C1-A8B3-940C9CC383C4}C:\users\evan\desktop\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\users\evan\desktop\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe No File
FirewallRules: [TCP Query User{AFE6A7F3-407B-408B-AA77-15C8AF0FA315}C:\users\evan\desktop\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\users\evan\desktop\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe No File
FirewallRules: [UDP Query User{6E347067-A118-430E-BEE5-926710294422}C:\users\evan\desktop\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\users\evan\desktop\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe No File
FirewallRules: [TCP Query User{1219A958-769B-443B-820D-9DBE48B3C2FB}C:\users\evan\desktop\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\users\evan\desktop\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe No File
FirewallRules: [UDP Query User{EF6E686F-A5D6-4498-B3F1-CA73C35CD865}C:\users\evan\desktop\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\users\evan\desktop\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe No File
FirewallRules: [TCP Query User{A45187FF-2CD0-42C6-9992-D6BA7AD0A619}C:\users\evan\desktop\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\users\evan\desktop\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe No File
FirewallRules: [UDP Query User{D4CA2698-15D0-465E-95EC-59346AE723CC}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe No File
FirewallRules: [TCP Query User{07319ABC-BA9A-4265-A4FC-214C4A7AB172}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe No File
FirewallRules: [UDP Query User{69F2A5E7-D720-481E-A6D6-0C4A78D5AF6A}C:\users\evan\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\evan\appdata\roaming\spotify\spotify.exe No File
FirewallRules: [TCP Query User{45FEF741-69D8-46E5-9309-EE4AB5312A52}C:\users\evan\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\evan\appdata\roaming\spotify\spotify.exe No File
FirewallRules: [UDP Query User{C15ED996-8E9B-4F4B-9F3F-18C82D7A171A}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe No File
FirewallRules: [TCP Query User{D86E8BC9-9B73-4462-AA04-FB78196FFB07}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe No File
FirewallRules: [{16381798-9B4E-49B2-8214-BCA7E03D2826}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\steamapps\common\Counter-Strike Global Offensive\csgo.exe No File
FirewallRules: [{AC3CB65F-0642-4236-89A1-BA3D4D3FEDF2}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\steamapps\common\Counter-Strike Global Offensive\csgo.exe No File
FirewallRules: [{1BB55A3A-BDB7-4007-A6EA-DC957A36343E}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\bin\steamwebhelper.exe No File
FirewallRules: [{8A7F04DE-1D49-4AC4-96E1-B35C7520E726}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\bin\steamwebhelper.exe No File
FirewallRules: [{0BB00C81-3B19-4784-A62F-43E156C746B6}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\Steam.exe No File
FirewallRules: [{C723E612-5F9C-4C06-8664-7F61EAD6E67B}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\Steam.exe No File
FirewallRules: [{F1B7FF55-E610-4D92-AE37-78EFED235030}] => (Allow) C:\Program Files\CyberLink\PowerDirector12\PDR10.EXE No File
FirewallRules: [{D99AC034-07E5-41C3-9A8D-9E74BD3C4310}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\bin\cef\cef.win7\steamwebhelper.exe No File
FirewallRules: [{89173536-C8CE-477B-91B3-43A3B2484B2E}] => (Allow) C:\Users\Evan\Desktop\Evan's files\Downloads\bin\cef\cef.win7\steamwebhelper.exe No File
EmptyTemp:
C:\Windows\Temp\*.*
Hosts:

*****************

Processes closed successfully.
Restore point was successfully created.
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION => restored successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E114C354-D91C-44EF-B612-3E3B99709119}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E114C354-D91C-44EF-B612-3E3B99709119}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager" => not found
"HKU\S-1-5-21-219441427-1511812545-325799061-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
HKU\S-1-5-21-219441427-1511812545-325799061-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => removed successfully
HKU\S-1-5-21-219441427-1511812545-325799061-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{196494D6-F5AC-4C8C-84A0-D8F9A521DEFC} => removed successfully
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki => removed successfully
HKU\S-1-5-21-219441427-1511812545-325799061-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E} => removed successfully
HKU\S-1-5-21-219441427-1511812545-325799061-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C} => removed successfully
HKU\S-1-5-21-219441427-1511812545-325799061-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E} => removed successfully
C:\Users\Evan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Cut the Rope.lnk => Shortcut argument removed successfully
C:\Users\Evan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\225bb61db2f318c1\Google Chrome.lnk => Shortcut argument removed successfully
C:\Users\Public\AppData => ":CSM" ADS removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{114DCF7D-92A1-48BC-9722-387C9C5F2E65}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{27303508-BAA8-431B-95D2-8092EEB3597C}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{77617336-D27A-45C1-A8B3-940C9CC383C4}C:\users\evan\desktop\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{AFE6A7F3-407B-408B-AA77-15C8AF0FA315}C:\users\evan\desktop\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6E347067-A118-430E-BEE5-926710294422}C:\users\evan\desktop\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1219A958-769B-443B-820D-9DBE48B3C2FB}C:\users\evan\desktop\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{EF6E686F-A5D6-4498-B3F1-CA73C35CD865}C:\users\evan\desktop\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{A45187FF-2CD0-42C6-9992-D6BA7AD0A619}C:\users\evan\desktop\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D4CA2698-15D0-465E-95EC-59346AE723CC}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{07319ABC-BA9A-4265-A4FC-214C4A7AB172}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{69F2A5E7-D720-481E-A6D6-0C4A78D5AF6A}C:\users\evan\appdata\roaming\spotify\spotify.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{45FEF741-69D8-46E5-9309-EE4AB5312A52}C:\users\evan\appdata\roaming\spotify\spotify.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{C15ED996-8E9B-4F4B-9F3F-18C82D7A171A}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D86E8BC9-9B73-4462-AA04-FB78196FFB07}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{16381798-9B4E-49B2-8214-BCA7E03D2826}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AC3CB65F-0642-4236-89A1-BA3D4D3FEDF2}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1BB55A3A-BDB7-4007-A6EA-DC957A36343E}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8A7F04DE-1D49-4AC4-96E1-B35C7520E726}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0BB00C81-3B19-4784-A62F-43E156C746B6}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C723E612-5F9C-4C06-8664-7F61EAD6E67B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F1B7FF55-E610-4D92-AE37-78EFED235030}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D99AC034-07E5-41C3-9A8D-9E74BD3C4310}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{89173536-C8CE-477B-91B3-43A3B2484B2E}" => removed successfully

=========== "C:\Windows\Temp\*.*" ==========

C:\Windows\Temp\.ses => moved successfully
C:\Windows\Temp\AdobeARM.log => moved successfully
C:\Windows\Temp\Application_25EFEF77-BA03-0000-EEFA-EF2503BAD501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0000-088F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0000-105A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0000-115B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0000-1983-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0000-218E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0000-2586-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0000-4243-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0000-4686-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0000-5090-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0000-605F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0000-7479-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0000-858E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0000-9181-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0000-9450-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0000-9A5D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0000-B655-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0000-BE3E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0000-C788-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0000-EF90-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0000-FA91-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0000-FC88-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0001-014A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0001-1675-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0001-1864-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0001-2552-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0001-3173-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0001-3C60-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0001-442B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0001-5530-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0001-6167-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0001-7843-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0001-896D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0001-8A6F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0001-9144-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0001-A760-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0001-B250-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0001-BC3A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0001-D15D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0001-D738-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0001-DD4A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0001-ED6E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0001-F040-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0001-F759-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0002-0D8F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0002-1092-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0002-2375-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0002-3887-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0002-508A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0002-5D87-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0002-6D77-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0002-6E23-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0002-795A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0002-8292-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0002-8389-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0002-935D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0002-9953-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0002-9E59-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0002-BC8A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0002-BE88-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0002-C287-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0002-C88E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0002-CB8B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0002-D265-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0002-D864-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0002-E375-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0002-F48B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-0854-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-0A1D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-0B62-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-1157-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-1675-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-2A2E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-3A16-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-4333-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-434E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-4A50-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-4A73-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-5462-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-5A18-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-5A56-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-6E53-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-7152-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-A252-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-A343-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-AB71-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-B965-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-BD53-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-C36E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-CA34-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-DC0B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-EB5E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Application_3F31EF9B-B47D-0003-EF33-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Appraiser_AlternateData.cab => moved successfully
Could not move "C:\Windows\Temp\APPX.2tr0g2yh_id2ccni8d342gnmh.tmp" => Scheduled to move on reboot.
Could not move "C:\Windows\Temp\APPX.38u5mpdri7ksrv9hz80zbmo3h.tmp" => Scheduled to move on reboot.
C:\Windows\Temp\APPX.3lpvd0heqmjf3drx71xz2vvgh.tmp => moved successfully
C:\Windows\Temp\APPX.4fxll4t31w8ginuilcajepcic.tmp => moved successfully
Could not move "C:\Windows\Temp\APPX.4hejbq5kt0g1cbujm_31ba6xf.tmp" => Scheduled to move on reboot.
Could not move "C:\Windows\Temp\APPX.4hz4ntevzdtwlxjhamle9wj2g.tmp" => Scheduled to move on reboot.
C:\Windows\Temp\APPX.4nh7ur0okrmkkthjjyd1yjx0b.tmp => moved successfully
C:\Windows\Temp\APPX.682zf6q3ekzquoclbfiwqg8ie.tmp => moved successfully
Could not move "C:\Windows\Temp\APPX.6hgyetuak169ju9obkgtja35e.tmp" => Scheduled to move on reboot.
C:\Windows\Temp\APPX.asx8dn0gmooqw8glvkg4ymdte.tmp => moved successfully
Could not move "C:\Windows\Temp\APPX.cjpe3o44wysty1koan1nge3dg.tmp" => Scheduled to move on reboot.
Could not move "C:\Windows\Temp\APPX.dddkgcbfsqdnm_i62813apdge.tmp" => Scheduled to move on reboot.
Could not move "C:\Windows\Temp\APPX.eik9uifust2p1kkv5impyx90g.tmp" => Scheduled to move on reboot.
Could not move "C:\Windows\Temp\APPX.f7yotane0mz3wydgxm5gxg0fe.tmp" => Scheduled to move on reboot.
Could not move "C:\Windows\Temp\APPX.f7ys1pd220qdl8wg4dypn68_e.tmp" => Scheduled to move on reboot.
Could not move "C:\Windows\Temp\APPX.fsipzcoettmtppjuyn10xsgrg.tmp" => Scheduled to move on reboot.
C:\Windows\Temp\APPX.g82xs98_q2cseaww86ubi_vv.tmp => moved successfully
C:\Windows\Temp\APPX.ishezmdw8ok5frumu7u3yqjq.tmp => moved successfully
Could not move "C:\Windows\Temp\APPX.jcdiztx02l47s1o0d_4x5pnsb.tmp" => Scheduled to move on reboot.
Could not move "C:\Windows\Temp\APPX.jh4lfdfdwp83gltkdolt6nrzg.tmp" => Scheduled to move on reboot.
Could not move "C:\Windows\Temp\APPX.kaptnfkt5sahqdh03sqh4hq4e.tmp" => Scheduled to move on reboot.
C:\Windows\Temp\APPX.kna4c02uy42b3pwbt8h6_n0ec.tmp => moved successfully
Could not move "C:\Windows\Temp\APPX.l0hhjknudydh_0kb4_7cgqb9.tmp" => Scheduled to move on reboot.
C:\Windows\Temp\APPX.lggwrarwg00a9esmmiqq4qsye.tmp => moved successfully
C:\Windows\Temp\APPX.nzgyrvculfr966n5n4yag99if.tmp => moved successfully
Could not move "C:\Windows\Temp\APPX.ofli3b4d9a7psl0_umi_idhtb.tmp" => Scheduled to move on reboot.
C:\Windows\Temp\APPX.ojtdfk1vrs6j5bwife7elyeq.tmp => moved successfully
Could not move "C:\Windows\Temp\APPX.oyr7w4938bm01h43x7m5qi83g.tmp" => Scheduled to move on reboot.
Could not move "C:\Windows\Temp\APPX.p1f0qbyb19zf3fgptcbpfur1c.tmp" => Scheduled to move on reboot.
Could not move "C:\Windows\Temp\APPX.pce1rpitxthfxz_v14z0q0e2h.tmp" => Scheduled to move on reboot.
Could not move "C:\Windows\Temp\APPX.pe2vdw5p8_f73f6zmius6r63.tmp" => Scheduled to move on reboot.
Could not move "C:\Windows\Temp\APPX.sbd5ipbvo44lqjif8c_7ozbbe.tmp" => Scheduled to move on reboot.
Could not move "C:\Windows\Temp\APPX.ss2r5p99om737skoho924b0zd.tmp" => Scheduled to move on reboot.
Could not move "C:\Windows\Temp\APPX.tp4h5altaiabsmau76lwswvve.tmp" => Scheduled to move on reboot.
Could not move "C:\Windows\Temp\APPX.unm_rtx5agg0vcsrr0hz59j9c.tmp" => Scheduled to move on reboot.
Could not move "C:\Windows\Temp\APPX.v0heo71xf7sakvgb713en_iab.tmp" => Scheduled to move on reboot.
Could not move "C:\Windows\Temp\APPX.xe0osp6okndx6vzltijhvnxcc.tmp" => Scheduled to move on reboot.
Could not move "C:\Windows\Temp\APPX.yue85o3xbpt9qeemzu5oxrvge.tmp" => Scheduled to move on reboot.
C:\Windows\Temp\APPX.zet602brzk7ip1qhdj63eja1h.tmp => moved successfully
C:\Windows\Temp\APPX._ogcw_xiivp99ahy5bkyzpz1e.tmp => moved successfully
C:\Windows\Temp\AppxErrorReport_25EFEF77-BA03-0000-EEFA-EF2503BAD501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0000-088F-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0000-105A-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0000-115B-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0000-1983-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0000-218E-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0000-2586-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0000-4243-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0000-4686-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0000-5090-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0000-605F-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0000-7479-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0000-858E-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0000-9181-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0000-9450-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0000-9A5D-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0000-B655-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0000-BE3E-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0000-C788-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0000-EF90-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0000-FA91-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0000-FC88-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0001-014A-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0001-1675-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0001-1864-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0001-2552-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0001-3173-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0001-3C60-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0001-442B-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0001-5530-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0001-6167-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0001-7843-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0001-896D-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0001-8A6F-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0001-9144-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0001-A760-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0001-B250-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0001-BC3A-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0001-D15D-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0001-D738-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0001-DD4A-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0001-ED6E-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0001-F040-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0001-F759-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0002-0D8F-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0002-1092-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0002-2375-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0002-3887-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0002-508A-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0002-5D87-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0002-6D77-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0002-6E23-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0002-795A-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0002-8292-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0002-8389-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0002-935D-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0002-9953-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0002-9E59-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0002-BC8A-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0002-BE88-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0002-C287-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0002-C88E-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0002-CB8B-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0002-D265-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0002-D864-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0002-E375-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0002-F48B-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-0854-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-0A1D-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-0B62-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-1157-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-1278-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-1675-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-2A2E-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-3A16-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-4333-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-434E-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-4A50-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-4A73-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-5462-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-5A18-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-5A56-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-6E53-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-7152-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-A252-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-A343-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-AB71-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-B965-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-BD53-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-C36E-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-CA34-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-DC0B-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-EB5E-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\AppxErrorReport_3F31EF9B-B47D-0003-EF33-323F7DB4D501.txt => moved successfully
C:\Windows\Temp\ArmUI.ini => moved successfully
C:\Windows\Temp\battery-report.html => moved successfully
C:\Windows\Temp\battery-report.xml => moved successfully
C:\Windows\Temp\chrome_installer.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191104-2253.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191119-1903.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191119-1903a.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191119-2220.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191119-2223.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191119-2223a.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191119-2223b.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191120-0629.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191120-0630.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191120-0631.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191120-0650.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191120-0837.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191120-1733.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191120-1738.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191120-1746.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191120-1751.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191120-1801.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191120-1806.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191120-1851.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191216-2058.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191223-2101.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191223-2101a.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191223-2113.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191223-2138.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191223-2148.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191223-2155.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191223-2203.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191223-2206.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191223-2214.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191223-2243.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191224-1621.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191224-1622.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191224-1622a.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191224-1627.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191225-0958.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191225-1005.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191225-1007.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191225-1020.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191225-1020a.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191225-1020b.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191225-1031.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191225-1037.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191225-1042.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191225-1050.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191225-1055.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191225-1103.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191225-1109.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191225-1112.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191226-1702.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191226-1703.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191226-1703a.log => moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191226-1704.log => moved successfully
Could not move "C:\Windows\Temp\LAPTOP-9KG4QFMS-20191226-1709.log" => Scheduled to move on reboot.
C:\Windows\Temp\mat-debug-10024.log => moved successfully
C:\Windows\Temp\mat-debug-10256.log => moved successfully
C:\Windows\Temp\mat-debug-10388.log => moved successfully
C:\Windows\Temp\mat-debug-10452.log => moved successfully
C:\Windows\Temp\mat-debug-10604.log => moved successfully
C:\Windows\Temp\mat-debug-10668.log => moved successfully
C:\Windows\Temp\mat-debug-11196.log => moved successfully
C:\Windows\Temp\mat-debug-1132.log => moved successfully
C:\Windows\Temp\mat-debug-11524.log => moved successfully
C:\Windows\Temp\mat-debug-11704.log => moved successfully
C:\Windows\Temp\mat-debug-12076.log => moved successfully
C:\Windows\Temp\mat-debug-12404.log => moved successfully
C:\Windows\Temp\mat-debug-12464.log => moved successfully
C:\Windows\Temp\mat-debug-12504.log => moved successfully
C:\Windows\Temp\mat-debug-13228.log => moved successfully
C:\Windows\Temp\mat-debug-13256.log => moved successfully
C:\Windows\Temp\mat-debug-13516.log => moved successfully
C:\Windows\Temp\mat-debug-13580.log => moved successfully
C:\Windows\Temp\mat-debug-13624.log => moved successfully
C:\Windows\Temp\mat-debug-14216.log => moved successfully
C:\Windows\Temp\mat-debug-14444.log => moved successfully
C:\Windows\Temp\mat-debug-14616.log => moved successfully
C:\Windows\Temp\mat-debug-16188.log => moved successfully
C:\Windows\Temp\mat-debug-16312.log => moved successfully
C:\Windows\Temp\mat-debug-16396.log => moved successfully
C:\Windows\Temp\mat-debug-2192.log => moved successfully
C:\Windows\Temp\mat-debug-224.log => moved successfully
C:\Windows\Temp\mat-debug-2360.log => moved successfully
C:\Windows\Temp\mat-debug-2756.log => moved successfully
C:\Windows\Temp\mat-debug-3604.log => moved successfully
C:\Windows\Temp\mat-debug-3712.log => moved successfully
C:\Windows\Temp\mat-debug-3724.log => moved successfully
C:\Windows\Temp\mat-debug-3744.log => moved successfully
C:\Windows\Temp\mat-debug-3888.log => moved successfully
C:\Windows\Temp\mat-debug-3896.log => moved successfully
C:\Windows\Temp\mat-debug-4432.log => moved successfully
C:\Windows\Temp\mat-debug-4480.log => moved successfully
C:\Windows\Temp\mat-debug-5700.log => moved successfully
C:\Windows\Temp\mat-debug-5848.log => moved successfully
C:\Windows\Temp\mat-debug-6232.log => moved successfully
C:\Windows\Temp\mat-debug-6508.log => moved successfully
C:\Windows\Temp\mat-debug-6596.log => moved successfully
C:\Windows\Temp\mat-debug-6600.log => moved successfully
Could not move "C:\Windows\Temp\mat-debug-7180.log" => Scheduled to move on reboot.
C:\Windows\Temp\mat-debug-8024.log => moved successfully
C:\Windows\Temp\mat-debug-8172.log => moved successfully
C:\Windows\Temp\mat-debug-9044.log => moved successfully
C:\Windows\Temp\mat-debug-9208.log => moved successfully
C:\Windows\Temp\mat-debug-9280.log => moved successfully
C:\Windows\Temp\mat-debug-9588.log => moved successfully
C:\Windows\Temp\mat-debug-9864.log => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_25EFEF77-BA03-0000-EEFA-EF2503BAD501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0000-088F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0000-105A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0000-115B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0000-1983-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0000-218E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0000-2586-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0000-4243-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0000-4686-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0000-5090-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0000-605F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0000-7479-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0000-858E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0000-9181-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0000-9450-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0000-9A5D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0000-B655-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0000-BE3E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0000-C788-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0000-EF90-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0000-FA91-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0000-FC88-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0001-014A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0001-1675-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0001-1864-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0001-2552-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0001-3173-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0001-3C60-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0001-442B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0001-5530-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0001-6167-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0001-7843-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0001-896D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0001-8A6F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0001-9144-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0001-A760-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0001-B250-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0001-BC3A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0001-D15D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0001-D738-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0001-DD4A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0001-ED6E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0001-F040-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0001-F759-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0002-0D8F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0002-1092-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0002-2375-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0002-3887-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0002-508A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0002-5D87-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0002-6D77-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0002-6E23-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0002-795A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0002-8292-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0002-8389-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0002-935D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0002-9953-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0002-9E59-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0002-BC8A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0002-BE88-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0002-C287-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0002-C88E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0002-CB8B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0002-D265-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0002-D864-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0002-E375-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0002-F48B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-0854-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-0A1D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-0B62-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-1157-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-1675-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-2A2E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-3A16-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-4333-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-434E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-4A50-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-4A73-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-5462-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-5A18-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-5A56-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-6E53-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-7152-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-A252-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-A343-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-AB71-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-B965-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-BD53-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-C36E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-CA34-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-DC0B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-EB5E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Admin_3F31EF9B-B47D-0003-EF33-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_25EFEF77-BA03-0000-EEFA-EF2503BAD501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0000-088F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0000-105A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0000-115B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0000-1983-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0000-218E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0000-2586-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0000-4243-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0000-4686-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0000-5090-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0000-605F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0000-7479-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0000-858E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0000-9181-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0000-9450-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0000-9A5D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0000-B655-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0000-BE3E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0000-C788-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0000-EF90-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0000-FA91-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0000-FC88-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0001-014A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0001-1675-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0001-1864-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0001-2552-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0001-3173-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0001-3C60-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0001-442B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0001-5530-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0001-6167-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0001-7843-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0001-896D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0001-8A6F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0001-9144-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0001-A760-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0001-B250-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0001-BC3A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0001-D15D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0001-D738-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0001-DD4A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0001-ED6E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0001-F040-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0001-F759-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0002-0D8F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0002-1092-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0002-2375-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0002-3887-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0002-508A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0002-5D87-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0002-6D77-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0002-6E23-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0002-795A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0002-8292-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0002-8389-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0002-935D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0002-9953-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0002-9E59-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0002-BC8A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0002-BE88-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0002-C287-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0002-C88E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0002-CB8B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0002-D265-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0002-D864-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0002-E375-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0002-F48B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-0854-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-0A1D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-0B62-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-1157-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-1675-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-2A2E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-3A16-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-4333-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-434E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-4A50-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-4A73-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-5462-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-5A18-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-5A56-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-6E53-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-7152-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-A252-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-A343-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-AB71-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-B965-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-BD53-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-C36E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-CA34-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-DC0B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-EB5E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppReadiness_Operational_3F31EF9B-B47D-0003-EF33-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_25EFEF77-BA03-0000-EEFA-EF2503BAD501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0000-088F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0000-105A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0000-115B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0000-1983-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0000-218E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0000-2586-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0000-4243-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0000-4686-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0000-5090-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0000-605F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0000-7479-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0000-858E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0000-9181-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0000-9450-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0000-9A5D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0000-B655-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0000-BE3E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0000-C788-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0000-EF90-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0000-FA91-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0000-FC88-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0001-014A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0001-1675-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0001-1864-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0001-2552-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0001-3173-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0001-3C60-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0001-442B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0001-5530-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0001-6167-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0001-7843-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0001-896D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0001-8A6F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0001-9144-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0001-A760-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0001-B250-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0001-BC3A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0001-D15D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0001-D738-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0001-DD4A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0001-ED6E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0001-F040-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0001-F759-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0002-0D8F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0002-1092-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0002-2375-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0002-3887-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0002-508A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0002-5D87-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0002-6D77-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0002-6E23-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0002-795A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0002-8292-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0002-8389-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0002-935D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0002-9953-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0002-9E59-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0002-BC8A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0002-BE88-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0002-C287-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0002-C88E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0002-CB8B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0002-D265-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0002-D864-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0002-E375-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0002-F48B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-0854-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-0A1D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-0B62-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-1157-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-1675-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-2A2E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-3A16-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-4333-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-434E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-4A50-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-4A73-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-5462-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-5A18-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-5A56-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-6E53-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-7152-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-A252-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-A343-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-AB71-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-B965-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-BD53-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-C36E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-CA34-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-DC0B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-EB5E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXDeploymentServer_Operational_3F31EF9B-B47D-0003-EF33-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_25EFEF77-BA03-0000-EEFA-EF2503BAD501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0000-088F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0000-105A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0000-115B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0000-1983-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0000-218E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0000-2586-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0000-4243-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0000-4686-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0000-5090-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0000-605F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0000-7479-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0000-858E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0000-9181-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0000-9450-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0000-9A5D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0000-B655-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0000-BE3E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0000-C788-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0000-EF90-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0000-FA91-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0000-FC88-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0001-014A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0001-1675-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0001-1864-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0001-2552-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0001-3173-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0001-3C60-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0001-442B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0001-5530-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0001-6167-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0001-7843-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0001-896D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0001-8A6F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0001-9144-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0001-A760-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0001-B250-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0001-BC3A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0001-D15D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0001-D738-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0001-DD4A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0001-ED6E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0001-F040-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0001-F759-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0002-0D8F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0002-1092-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0002-2375-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0002-3887-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0002-508A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0002-5D87-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0002-6D77-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0002-6E23-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0002-795A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0002-8292-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0002-8389-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0002-935D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0002-9953-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0002-9E59-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0002-BC8A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0002-BE88-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0002-C287-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0002-C88E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0002-CB8B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0002-D265-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0002-D864-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0002-E375-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0002-F48B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-0854-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-0A1D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-0B62-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-1157-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-1675-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-2A2E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-3A16-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-4333-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-434E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-4A50-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-4A73-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-5462-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-5A18-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-5A56-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-6E53-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-7152-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-A252-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-A343-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-AB71-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-B965-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-BD53-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-C36E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-CA34-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-DC0B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-EB5E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-AppXPackaging_Operational_3F31EF9B-B47D-0003-EF33-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_25EFEF77-BA03-0000-EEFA-EF2503BAD501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0000-088F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0000-105A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0000-115B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0000-1983-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0000-218E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0000-2586-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0000-4243-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0000-4686-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0000-5090-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0000-605F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0000-7479-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0000-858E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0000-9181-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0000-9450-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0000-9A5D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0000-B655-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0000-BE3E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0000-C788-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0000-EF90-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0000-FA91-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0000-FC88-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0001-014A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0001-1675-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0001-1864-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0001-2552-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0001-3173-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0001-3C60-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0001-442B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0001-5530-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0001-6167-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0001-7843-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0001-896D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0001-8A6F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0001-9144-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0001-A760-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0001-B250-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0001-BC3A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0001-D15D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0001-D738-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0001-DD4A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0001-ED6E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0001-F040-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0001-F759-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0002-0D8F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0002-1092-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0002-2375-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0002-3887-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0002-508A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0002-5D87-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0002-6D77-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0002-6E23-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0002-795A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0002-8292-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0002-8389-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0002-935D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0002-9953-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0002-9E59-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0002-BC8A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0002-BE88-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0002-C287-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0002-C88E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0002-CB8B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0002-D265-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0002-D864-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0002-E375-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0002-F48B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-0854-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-0A1D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-0B62-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-1157-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-1675-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-2A2E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-3A16-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-4333-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-434E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-4A50-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-4A73-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-5462-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-5A18-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-5A56-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-6E53-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-7152-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-A252-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-A343-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-AB71-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-B965-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-BD53-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-C36E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-CA34-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-DC0B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-EB5E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Debug_3F31EF9B-B47D-0003-EF33-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_25EFEF77-BA03-0000-EEFA-EF2503BAD501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0000-088F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0000-105A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0000-115B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0000-1983-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0000-218E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0000-2586-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0000-4243-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0000-4686-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0000-5090-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0000-605F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0000-7479-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0000-858E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0000-9181-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0000-9450-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0000-9A5D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0000-B655-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0000-BE3E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0000-C788-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0000-EF90-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0000-FA91-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0000-FC88-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0001-014A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0001-1675-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0001-1864-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0001-2552-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0001-3173-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0001-3C60-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0001-442B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0001-5530-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0001-6167-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0001-7843-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0001-896D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0001-8A6F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0001-9144-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0001-A760-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0001-B250-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0001-BC3A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0001-D15D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0001-D738-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0001-DD4A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0001-ED6E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0001-F040-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0001-F759-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0002-0D8F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0002-1092-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0002-2375-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0002-3887-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0002-508A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0002-5D87-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0002-6D77-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0002-6E23-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0002-795A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0002-8292-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0002-8389-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0002-935D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0002-9953-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0002-9E59-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0002-BC8A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0002-BE88-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0002-C287-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0002-C88E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0002-CB8B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0002-D265-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0002-D864-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0002-E375-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0002-F48B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-0854-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-0A1D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-0B62-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-1157-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-1675-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-2A2E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-3A16-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-4333-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-434E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-4A50-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-4A73-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-5462-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-5A18-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-5A56-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-6E53-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-7152-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-A252-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-A343-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-AB71-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-B965-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-BD53-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-C36E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-CA34-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-DC0B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-EB5E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-SettingSync_Operational_3F31EF9B-B47D-0003-EF33-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_25EFEF77-BA03-0000-EEFA-EF2503BAD501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0000-088F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0000-105A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0000-115B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0000-1983-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0000-218E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0000-2586-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0000-4243-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0000-4686-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0000-5090-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0000-605F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0000-7479-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0000-858E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0000-9181-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0000-9450-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0000-9A5D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0000-B655-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0000-BE3E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0000-C788-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0000-EF90-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0000-FA91-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0000-FC88-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0001-014A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0001-1675-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0001-1864-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0001-2552-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0001-3173-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0001-3C60-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0001-442B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0001-5530-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0001-6167-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0001-7843-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0001-896D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0001-8A6F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0001-9144-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0001-A760-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0001-B250-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0001-BC3A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0001-D15D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0001-D738-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0001-DD4A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0001-ED6E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0001-F040-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0001-F759-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0002-0D8F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0002-1092-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0002-2375-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0002-3887-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0002-508A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0002-5D87-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0002-6D77-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0002-6E23-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0002-795A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0002-8292-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0002-8389-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0002-935D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0002-9953-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0002-9E59-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0002-BC8A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0002-BE88-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0002-C287-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0002-C88E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0002-CB8B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0002-D265-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0002-D864-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0002-E375-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0002-F48B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-0854-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-0A1D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-0B62-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-1157-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-1675-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-2A2E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-3A16-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-4333-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-434E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-4A50-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-4A73-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-5462-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-5A18-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-5A56-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-6E53-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-7152-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-A252-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-A343-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-AB71-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-B965-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-BD53-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-C36E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-CA34-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-DC0B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-EB5E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-StateRepository_Operational_3F31EF9B-B47D-0003-EF33-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_25EFEF77-BA03-0000-EEFA-EF2503BAD501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0000-088F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0000-105A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0000-115B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0000-1983-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0000-218E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0000-2586-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0000-4243-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0000-4686-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0000-5090-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0000-605F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0000-7479-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0000-858E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0000-9181-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0000-9450-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0000-9A5D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0000-B655-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0000-BE3E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0000-C788-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0000-EF90-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0000-FA91-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0000-FC88-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0001-014A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0001-1675-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0001-1864-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0001-2552-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0001-3173-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0001-3C60-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0001-442B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0001-5530-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0001-6167-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0001-7843-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0001-896D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0001-8A6F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0001-9144-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0001-A760-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0001-B250-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0001-BC3A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0001-D15D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0001-D738-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0001-DD4A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0001-ED6E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0001-F040-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0001-F759-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0002-0D8F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0002-1092-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0002-2375-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0002-3887-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0002-508A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0002-5D87-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0002-6D77-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0002-6E23-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0002-795A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0002-8292-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0002-8389-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0002-935D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0002-9953-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0002-9E59-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0002-BC8A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0002-BE88-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0002-C287-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0002-C88E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0002-CB8B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0002-D265-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0002-D864-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0002-E375-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0002-F48B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-0854-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-0A1D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-0B62-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-1157-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-1675-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-2A2E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-3A16-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-4333-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-434E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-4A50-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-4A73-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-5462-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-5A18-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-5A56-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-6E53-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-7152-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-A252-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-A343-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-AB71-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-B965-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-BD53-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-C36E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-CA34-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-DC0B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-EB5E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-Store_Operational_3F31EF9B-B47D-0003-EF33-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_25EFEF77-BA03-0000-EEFA-EF2503BAD501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0000-088F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0000-105A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0000-115B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0000-1983-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0000-218E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0000-2586-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0000-4243-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0000-4686-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0000-5090-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0000-605F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0000-7479-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0000-858E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0000-9181-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0000-9450-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0000-9A5D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0000-B655-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0000-BE3E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0000-C788-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0000-EF90-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0000-FA91-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0000-FC88-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0001-014A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0001-1675-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0001-1864-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0001-2552-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0001-3173-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0001-3C60-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0001-442B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0001-5530-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0001-6167-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0001-7843-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0001-896D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0001-8A6F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0001-9144-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0001-A760-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0001-B250-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0001-BC3A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0001-D15D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0001-D738-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0001-DD4A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0001-ED6E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0001-F040-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0001-F759-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0002-0D8F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0002-1092-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0002-2375-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0002-3887-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0002-508A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0002-5D87-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0002-6D77-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0002-6E23-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0002-795A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0002-8292-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0002-8389-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0002-935D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0002-9953-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0002-9E59-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0002-BC8A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0002-BE88-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0002-C287-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0002-C88E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0002-CB8B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0002-D265-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0002-D864-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0002-E375-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0002-F48B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-0854-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-0A1D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-0B62-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-1157-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-1675-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-2A2E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-3A16-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-4333-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-434E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-4A50-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-4A73-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-5462-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-5A18-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-5A56-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-6E53-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-7152-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-A252-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-A343-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-AB71-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-B965-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-BD53-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-C36E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-CA34-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-DC0B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-EB5E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\Microsoft-Windows-WindowsUpdateClient_Operational_3F31EF9B-B47D-0003-EF33-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\MSI56d88.LOG => moved successfully
C:\Windows\Temp\MSOXMLMF.DLL.bak => moved successfully
C:\Windows\Temp\officeclicktorun.exe_streamserver(201911192222553918).log => moved successfully
C:\Windows\Temp\officeclicktorun.exe_streamserver(201912162058211858).log => moved successfully
C:\Windows\Temp\officeclicktorun.exe_streamserver(201912251020023074).log => moved successfully
C:\Windows\Temp\officeclicktorun.exe_streamserver(201912251031211644).log => moved successfully
C:\Windows\Temp\officeclicktorun.exe_streamserver(20191225104207196C).log => moved successfully
C:\Windows\Temp\officeclicktorun.exe_streamserver(2019122510553719C8).log => moved successfully
Could not move "C:\Windows\Temp\officeclicktorun.exe_streamserver(201912261708571C0C).log" => Scheduled to move on reboot.
C:\Windows\Temp\System_25EFEF77-BA03-0000-EEFA-EF2503BAD501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0000-088F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0000-105A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0000-115B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0000-1983-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0000-218E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0000-2586-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0000-4243-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0000-4686-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0000-5090-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0000-605F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0000-7479-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0000-858E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0000-9181-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0000-9450-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0000-9A5D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0000-B655-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0000-BE3E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0000-C788-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0000-EF90-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0000-FA91-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0000-FC88-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0001-014A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0001-1675-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0001-1864-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0001-2552-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0001-3173-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0001-3C60-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0001-442B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0001-5530-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0001-6167-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0001-7843-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0001-896D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0001-8A6F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0001-9144-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0001-A760-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0001-B250-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0001-BC3A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0001-D15D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0001-D738-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0001-DD4A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0001-ED6E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0001-F040-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0001-F759-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0002-0D8F-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0002-1092-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0002-2375-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0002-3887-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0002-508A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0002-5D87-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0002-6D77-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0002-6E23-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0002-795A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0002-8292-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0002-8389-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0002-935D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0002-9953-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0002-9E59-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0002-BC8A-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0002-BE88-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0002-C287-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0002-C88E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0002-CB8B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0002-D265-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0002-D864-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0002-E375-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0002-F48B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-0854-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-0A1D-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-0B62-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-1157-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-1675-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-2A2E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-3A16-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-4333-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-434E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-4A50-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-4A73-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-5462-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-5A18-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-5A56-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-6E53-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-7152-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-A252-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-A343-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-AB71-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-B965-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-BD53-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-C36E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-CA34-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-DC0B-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-EB5E-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\System_3F31EF9B-B47D-0003-EF33-323F7DB4D501.evtx => moved successfully
C:\Windows\Temp\WER299C.tmp.WERDataCollectionStatus.txt => moved successfully
C:\Windows\Temp\WER63E9.tmp.WERDataCollectionStatus.txt => moved successfully
C:\Windows\Temp\WER9944.tmp.WERDataCollectionStatus.txt => moved successfully
C:\Windows\Temp\WERAD78.tmp.WERDataCollectionStatus.txt => moved successfully
C:\Windows\Temp\{99B23D7F-2B5A-4455-ADD2-87A8BB80FF9D} - OProcSessId.dat => moved successfully

========= End -> "C:\Windows\Temp\*.*" ========

C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 10248192 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 102594001 B
Java, Flash, Steam htmlcache => 234730301 B
Windows/system/drivers => 29797515 B
Edge => 4534714 B
Chrome => 86415085 B
Firefox => 164924030 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 59792 B
NetworkService => 61656 B
Evan => 486474265 B
defaultuser1 => 486481433 B

RecycleBin => 0 B
EmptyTemp: => 1.5 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 26-12-2019 17:16:13)

C:\Windows\Temp\APPX.2tr0g2yh_id2ccni8d342gnmh.tmp => Is moved successfully
C:\Windows\Temp\APPX.38u5mpdri7ksrv9hz80zbmo3h.tmp => Is moved successfully
C:\Windows\Temp\APPX.4hejbq5kt0g1cbujm_31ba6xf.tmp => Is moved successfully
C:\Windows\Temp\APPX.4hz4ntevzdtwlxjhamle9wj2g.tmp => Is moved successfully
C:\Windows\Temp\APPX.6hgyetuak169ju9obkgtja35e.tmp => Is moved successfully
C:\Windows\Temp\APPX.cjpe3o44wysty1koan1nge3dg.tmp => Is moved successfully
C:\Windows\Temp\APPX.dddkgcbfsqdnm_i62813apdge.tmp => Is moved successfully
C:\Windows\Temp\APPX.eik9uifust2p1kkv5impyx90g.tmp => Is moved successfully
C:\Windows\Temp\APPX.f7yotane0mz3wydgxm5gxg0fe.tmp => Is moved successfully
C:\Windows\Temp\APPX.f7ys1pd220qdl8wg4dypn68_e.tmp => Is moved successfully
C:\Windows\Temp\APPX.fsipzcoettmtppjuyn10xsgrg.tmp => Is moved successfully
C:\Windows\Temp\APPX.jcdiztx02l47s1o0d_4x5pnsb.tmp => Is moved successfully
C:\Windows\Temp\APPX.jh4lfdfdwp83gltkdolt6nrzg.tmp => Is moved successfully
C:\Windows\Temp\APPX.kaptnfkt5sahqdh03sqh4hq4e.tmp => Is moved successfully
C:\Windows\Temp\APPX.l0hhjknudydh_0kb4_7cgqb9.tmp => Is moved successfully
C:\Windows\Temp\APPX.ofli3b4d9a7psl0_umi_idhtb.tmp => Is moved successfully
C:\Windows\Temp\APPX.oyr7w4938bm01h43x7m5qi83g.tmp => Is moved successfully
C:\Windows\Temp\APPX.p1f0qbyb19zf3fgptcbpfur1c.tmp => Is moved successfully
C:\Windows\Temp\APPX.pce1rpitxthfxz_v14z0q0e2h.tmp => Is moved successfully
C:\Windows\Temp\APPX.pe2vdw5p8_f73f6zmius6r63.tmp => Is moved successfully
C:\Windows\Temp\APPX.sbd5ipbvo44lqjif8c_7ozbbe.tmp => Is moved successfully
C:\Windows\Temp\APPX.ss2r5p99om737skoho924b0zd.tmp => Is moved successfully
C:\Windows\Temp\APPX.tp4h5altaiabsmau76lwswvve.tmp => Is moved successfully
C:\Windows\Temp\APPX.unm_rtx5agg0vcsrr0hz59j9c.tmp => Is moved successfully
C:\Windows\Temp\APPX.v0heo71xf7sakvgb713en_iab.tmp => Is moved successfully
C:\Windows\Temp\APPX.xe0osp6okndx6vzltijhvnxcc.tmp => Is moved successfully
C:\Windows\Temp\APPX.yue85o3xbpt9qeemzu5oxrvge.tmp => Is moved successfully
C:\Windows\Temp\LAPTOP-9KG4QFMS-20191226-1709.log => Is moved successfully
C:\Windows\Temp\mat-debug-7180.log => Is moved successfully
C:\Windows\Temp\officeclicktorun.exe_streamserver(201912261708571C0C).log => Is moved successfully

==== End of Fixlog 17:16:14 ====

[Juliet]

I ran chkdsk, it reported that there were errors, and I chose to fix them. The laptop rebooted a few times after the initial scan was complete (it didn't say it couldn't continue) and that's where we are now.
That sounds good.

~~~~~~~~~~~~~~~~~~~~

Download AdwCleaner (https://www.malwarebytes.com/adwcleaner/) and move it to your Desktop
Right-click on AdwCleaner.exe and select http://i.imgur.com/Spcusrh.pngRun as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users)
Accept the EULA (I accept), then click on Scan Now
Let the scan complete. Once it's done, make sure that every item listed in the different tabs is checked and click on the Repair and restart button. This will kill all active processes
Once the cleaning process is complete, AdwCleaner will ask to restart your computer, do it
After the restart, a log will open when logging in. Please copy/paste the content of that log in your next reply


~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Please download the Malwarebytes Anti-Malware (https://downloads.malwarebytes.org/file/mbam) setup file to your Desktop.
OR from this location Here (https://www.bleepingcomputer.com/download/malwarebytes-anti-malware/)

Once Malwarebytes is installed, launch it and let it update his database. You might have to click on the little arrow by Scan Status in the middle right pane for it to do so
Once the database update is complete, click on the Scan tab, then select the Threat Scan button and click on Start Scan
Let the scan run, the time required to complete the scan depends of your system and computer specs
Once the scan is complete, make sure that the first checkbox at the top is checked (which will automatically check every detected item), then click on the Quarantine Selected button

If it asks you to restart your computer to complete the removal, do so

Click on Export Summary after the deletion (in the bottom-left corner) and select Copy to Clipboard. Paste the content in your next reply


~~~~~~~~~~~

Please post these 2 scans and give me an update on how the computer is now.

[ssmarsh]

Both reports are below. The first time I ran MWB it found 5 items to quarantine and needed to restart to complete that. It took very long so I let it continue after I left for work. When I returned there was no option to print a log. I re-ran MWB just now so the report below represents the 2nd time it was run (it didn't find anything and didn't need a restart). The laptop seems to be running better and the disk usage is no longer at 100%.


# -------------------------------
# Malwarebytes AdwCleaner 8.0.1.0
# -------------------------------
# Build: 12-17-2019
# Database: 2019-12-17.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 12-27-2019
# Duration: 00:00:07
# OS: Windows 10 Home
# Cleaned: 24
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Users\Public\Pokki

***** [ Files ] *****

Deleted C:\Users\defaultuser1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\AmazonAssistant.lnk
Deleted C:\Windows\rsrcs.dll

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKCU\Software\APPDATALOW\SOFTWARE\AMAZON\Amazon1ButtonApp
Deleted HKCU\Software\Classes\Software\APPDATALOW\SOFTWARE\AMAZON\Amazon1ButtonApp
Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\amazonbrowserapp.com
Deleted HKCU\Software\Microsoft\Internet Explorer\DOMStorage\analytics.app.amazonbrowserapp.com
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Bubble Dock
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|SPDriver
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Selection Tools
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|WindApp
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BD6ECB00-7C4A-4F97-B425-44117F2A7AAE}
Deleted HKCU\Software\PC
Deleted HKLM\Software\Classes\AppID\{F18AE3C4-D2AD-42AC-9282-509DCF035D06}
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|SPDriver
Deleted HKLM\Software\Wow6432Node\APPDATALOW\SOFTWARE\AMAZON\Amazon1ButtonApp
Deleted HKLM\Software\Wow6432Node\PC
Deleted HKLM\Software\Wow6432Node\\AppDataLow\Software\Amazon\AmazonAssistant
Deleted HKLM\Software\Wow6432Node\\Classes\AppID\{F18AE3C4-D2AD-42AC-9282-509DCF035D06}
Deleted HKLM\Software\Wow6432Node\\MICROSOFT\INTERNET EXPLORER\MAIN\FEATURECONTROL\FEATURE_BROWSER_EMULATION|SystemCash.exe
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564
Deleted HKLM\System\CurrentControlSet\Services\EventLog\Application\Amazon Assistant Service
Deleted HKU\.DEFAULT\Software\APPDATALOW\SOFTWARE\AMAZON\Amazon1ButtonApp
Deleted HKU\S-1-5-18\Software\APPDATALOW\SOFTWARE\AMAZON\Amazon1ButtonApp

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [6826 octets] - [27/12/2019 06:30:16]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########




Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 12/27/19
Scan Time: 4:31 PM
Log File: 316435ee-28f0-11ea-a279-2c600ce920fa.json

-Software Information-
Version: 4.0.4.49
Components Version: 1.0.785
Update Package Version: 1.0.16843
License: Free

-System Information-
OS: Windows 10 (Build 18362.535)
CPU: x64
File System: NTFS
User: LAPTOP-9KG4QFMS\Evan

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 324815
Threats Detected: 0
Threats Quarantined: 0
Time Elapsed: 8 min, 10 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 0
(No malicious items detected)

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)

[Juliet]

The laptop seems to be running better and the disk usage is no longer at 100%.
Music to my ears.

~~~


Let's check for remnants

ESET Online Scanner:

Please go here (http://download.eset.com/special/eos/esetsmartinstaller_enu.exe), download the ESET Smart Installer, and save it to your desktop.
Double-click on the https://www.bleepstatic.com/fhost/uploads/4/esetimage.png you just downloaded.
Place a checkmark next to "YES, I accept the Terms of Use" and click the https://www.bleepstatic.com/fhost/uploads/4/shieldstart.png button.
Click "Yes" to the UAC (User Account Control) warning, then ESET will download its components, register itself, and start itself.
In the new window that opens, tick the radio button next to Enable detection of potentially unwanted applications.
Then click Advanced settings, and make sure there is a checkmark next to only the following items (uncheck everything else):
Remove found threats
Scan archives
Scan for potentially unsafe applications
Enable Anti-Stealth technology
Now click on: https://www.bleepstatic.com/fhost/uploads/4/start.png
The virus signature database will begin to download. Be patient this make take some time depending on the speed of your internet connection
When the download has completed, the Online Scan will begin automatically it could take several hours to complete the scan. Please be patient
When the scan has completed, click List Found Threats (only if anything is found)
Then click Export, and save the file to your desktop using a unique name, such as ESETScan
Copy and paste the contents of this report into your next reply to me
Click Back, then click Finish to exit ESET Online Scanner

[ssmarsh]

The ESET scan report is below.


C:\AdwCleaner\Quarantine\C\Users\Evan\AppData\Local\Installer\Install_1181\PTLZ4UP38.exe.vir a variant of Win32/SpeedBit.AA potentially unwanted application cleaned by deleting
C:\AdwCleaner\Quarantine\C\Users\Evan\AppData\Local\Installer\Install_26699\PTLZ4UP38.exe.vir a variant of Win32/SpeedBit.AA potentially unwanted application cleaned by deleting
C:\Program Files\AVAST Software\Avast\setup\aswOfferTool.exe Win32/Bundled.Toolbar.Google.D potentially unsafe application error while deleting (Access denied)
C:\Program Files\AVAST Software\Avast\setup\offertool_x64_ais-959.vpx Win32/Bundled.Toolbar.Google.D potentially unsafe application error while deleting (Access denied)
C:\Users\Evan\Desktop\EN4500_198.exe Win32/Bundled.Toolbar.Google.D potentially unsafe application cleaned by deleting
C:\Windows\ServiceProfiles\LocalService\winhttp\1035750093.cache JS/ProxyChanger.BQ trojan cleaned by deleting
C:\Windows\ServiceProfiles\LocalService\winhttp\1680332991.cache JS/ProxyChanger.BQ trojan cleaned by deleting
C:\Windows\ServiceProfiles\LocalService\winhttp\2557058634.cache JS/ProxyChanger.BQ trojan cleaned by deleting
C:\Windows\ServiceProfiles\LocalService\winhttp\2886840097.cache JS/ProxyChanger.BQ trojan cleaned by deleting
C:\Windows\ServiceProfiles\LocalService\winhttp\3391817606.cache JS/ProxyChanger.BQ trojan cleaned by deleting
C:\Windows\ServiceProfiles\LocalService\winhttp\3416856146.cache JS/ProxyChanger.BQ trojan cleaned by deleting
C:\Windows\ServiceProfiles\LocalService\winhttp\3464435695.cache JS/ProxyChanger.BQ trojan cleaned by deleting
C:\Windows\ServiceProfiles\LocalService\winhttp\3633510598.cache JS/ProxyChanger.BQ trojan cleaned by deleting
C:\Windows\ServiceProfiles\LocalService\winhttp\3983293817.cache JS/ProxyChanger.BQ trojan cleaned by deleting
C:\Windows\ServiceProfiles\LocalService\winhttp\4021227055.cache JS/ProxyChanger.BQ trojan cleaned by deleting

[Juliet]

All those items found used by the below (Access denied) were installed mainly as adware/bloatware
C:\Program Files\AVAST Software
This antivirus like many others install things behind the scenes that are found as unnecessary later.

How's the computer?
Ready to remove tools and quarantine folders?

[ssmarsh]

It's running much better, thanks to you. If you have no other scans to run, then I think we're ready to remove the tools.

[Juliet]

Use this tool to remove quarantined items:

Please download KpRm (https://toolslib.net/downloads/viewdownload/951-kprm) by Kernel-panik and save to your Desktop.

Click on KpRm.exe to run the tool.


Vista/Windows 7/8/10 users right-click and select Run As Administrator (http://windows.microsoft.com/en-US/windows7/How-do-I-run-an-application-once-with-a-full-administrator-access-token).

Put a check mark next to

- Delete tools <==


Click the "Run" button.



When the tool has finished, it will create and open a log report and delete itself.

[ssmarsh]

The KpRm log is below. A few icons disappeared while it was running, but the following programs or their setup .exe files are still on the desktop/installed: eset, tweaking, aswmbr, adwcleaner, malwarebytes.



# Run at 12/29/2019 8:44:27 AM
# KpRm (Kernel-panik) version 2.5
# Website https://kernel-panik.me/tool/kprm/
# Run by Evan from C:\Users\Evan\Desktop
# Computer Name: LAPTOP-9KG4QFMS
# OS: Windows 10 X64 (18362)
# Number of passes: 1

- Checked options -

~ Delete Tools

- Delete Tools -


## AdwCleaner
[OK] C:\Users\Evan\Desktop\adwcleaner_8.0.1.exe deleted (1)

## AswMBR
[OK] C:\Users\Evan\Desktop\aswMBR.exe deleted (1)

## FRST
[OK] C:\Users\Evan\Desktop\Addition.txt deleted (1)
[OK] C:\Users\Evan\Desktop\Fixlog.txt deleted (1)
[OK] C:\Users\Evan\Desktop\FRST-OlderVersion deleted (1)
[OK] C:\Users\Evan\Desktop\FRST.txt deleted (1)
[OK] C:\Users\Evan\Desktop\FRST64.exe deleted (1)

## Malwarebytes (log)
[OK] C:\Users\Evan\Desktop\malwarebytes report.txt deleted (1)

- Other Lines -


## Quarantines keeped
~ C:\AdwCleaner (AdwCleaner)
~ C:\FRST (FRST)
~ C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\Quarantine (Malwarebytes Anti-Rootkit)

-- KPRM finished in 11.77s --

[ssmarsh]

The KpRm log is below. A few icons disappeared while it was running, but the following programs or their setup .exe files are still on the desktop/installed: eset, tweaking, aswmbr, adwcleaner, malwarebytes.

EDIT - after a restart, only eset, tweaking and MWB are still on the desktop.

[Juliet]

Most people (and its recommended) keep malwarebytes anti-malware and use it as a secondary scanner.
When first downloaded it comes in as the Premium version for 2 weeks then switches over to the free version but continues to update and scan


ESET Online Scanner

go to Add or Remove Programs (filename: APPWIZ. CPL) from the Control Panel, select ESET Online Scanner and click Remove. A restart may be required to complete the uninstallation.

If it's just the icon left on desktop, right click on that and select delete.
~~~~~~~~~~~~~~~~

The same applies to tweaking backup, check add/remove programs list, if it's just the icon right click on that and delete.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~`


Answers to common security questions - Best Practices (http://www.bleepingcomputer.com/forums/t/407147/answers-to-common-security-questions-best-practices/) by quietman7, MVP
How Malware Spreads - How did I get infected? (http://www.bleepingcomputer.com/forums/t/287710/how-malware-spreads-how-did-i-get-infected/) by quietman7, MVP
Simple and easy ways to keep your computer safe and secure on the Internet (http://www.bleepingcomputer.com/tutorials/keep-your-computer-safe-online/) by Lawrence Abrams, MVP
How to Prevent Malware (http://users.telenet.be/bluepatchy/miekiemoes/prevention.html) by miekiemoes, MVP
How to backup and restore your data using Cobian Backup (http://www.bleepingcomputer.com/tutorials/backup-and-restore-data-with-cobian-backup/) by YourHighness
Slow Computer/browser? It May Not Be Malware (http://www.bleepingcomputer.com/forums/t/87058/slow-computerbrowser-check-here-first;-it-may-not-be-malware/) by quietman7, MVP


AdBlock (https://adblockplus.org/en/firefox) is a browser add-on that blocks annoying banners, pop-ups and video ads.
http://i.imgur.com/E8I37RF.pngCryptoPrevent (https://www.foolishit.com/) places policy restrictions on loading points for ransomware (eg. CryptoWall), helping prevent the execution of malware.
http://i.imgur.com/EG85Vjt.png Malwarebytes Anti-Exploit (https://www.malwarebytes.org/antiexploit/) (MBAE) is designed to prevent zero-day malware from exploiting vulnerable software.
http://i.imgur.com/6YRrgUC.png Malwarebytes Anti-Malware Premium (https://www.malwarebytes.org/) (MBAM) works in real-time along side your Anti-Virus to prevent malware execution.
http://i.imgur.com/jv4nhMJ.png NoScript (http://noscript.net/) is a Firefox add-on that blocks the actions of malicious scripts by using whitelisting and other technology.
http://i.imgur.com/3O8r9Uq.png (http://www.sandboxie.com/) Sandboxie (http://www.sandboxie.com/) isolates programs of your choice, preventing files from being written to your HDD unless approved by you.
http://i.imgur.com/DgW1XL2.png Secunia PSI (http://secunia.com/vulnerability_scanning/personal/) will scan your computer for vulnerable software that is outdated, and automatically find the latest update for you.
http://i.imgur.com/j1OLIec.png SpywareBlaster (https://www.brightfort.com/spywareblaster.html) is a form of passive protection, designed to block the actions of malicious websites and tracking cookies.
http://i.imgur.com/sHjS79L.png Unchecky (http://unchecky.com/) automatically removes checkmarks for bundled software in programs installers; helping you avoid adware and PUPs.

[ssmarsh]

Everything has been uninstalled and the laptop is running much better than it was. Thank you again for all of your assistance and have a great New Year!!

[Juliet]

Glad we could help. http://i.imgur.com/SakDYGv.gif
Since this issue appears resolved ... this Topic is closed.