Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 31-07-2025

Ran by ninch (administrator) on DESKTOP-9CD1UOS (LENOVO 10132) (07-08-2025

[Link])
Running from C:\Users\ninch\OneDrive\Desktop\[Link]
Loaded Profiles: ninch
Platform: Microsoft Windows 10 專業版 Version 22H2 19045.6093 (X64) Language: 英文 (美國)
-> 繁體中文 (台灣)
Default browser: Edge
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will
not be moved.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud Experience\
[Link]
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative
[Link]
(Autodesk, Inc. -> Autodesk) C:\ProgramData\Autodesk\Genuine Service\x64\
[Link]
(Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files\Autodesk\AdskIdentityManager\
[Link]\[Link]
(Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files\Common Files\Autodesk\
AdpDesktopSDK\bin\[Link]
(C:\Program Files (x86)\Canon\Quick Menu\[Link] ->) (Canon Inc. -> CANON
INC.) C:\Program Files (x86)\Canon\Quick Menu\[Link]
(C:\Program Files (x86)\Canon\Quick Menu\[Link] ->) (Microsoft Windows ->
Microsoft Corporation) C:\Windows\[Link]
(C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop
[Link] ->) (Adobe Inc. -> ) C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\
[Link]
(C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop
[Link] ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\
Adobe\Adobe Desktop Common\ADS\Adobe Crash [Link]
(C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop
[Link] ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative
Cloud\ACC\Creative Cloud [Link]
(C:\Program Files (x86)\Common Files\Autodesk Shared\Network License Manager\
[Link] ->) (Autodesk, Inc. -> Autodesk, Inc.) [File not signed] C:\Program Files
(x86)\Common Files\Autodesk Shared\Network License Manager\[Link]
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\[Link] ->) (OpenJS
Foundation -> [Link]) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\
[Link]
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\[Link] ->) (Adobe
Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\
IPCBox\[Link]
(C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative [Link] ->) (Adobe Inc.
-> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\
Adobe Desktop [Link]
(C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative [Link] ->) (Adobe Inc.
-> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud UI
[Link] <5>
(C:\Program Files\Autodesk\AdODIS\V1\Access\[Link] ->) (Autodesk, Inc.
-> Autodesk, Inc.) C:\Program Files\Autodesk\AdODIS\V1\Setup\ui-launcher\
[Link] <4>
(C:\Program Files\Autodesk\AdskIdentityManager\[Link]\[Link] -
>) (Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files\Autodesk\Autodesk AdSSO\
[Link]
(C:\Program Files\Chaos\UnifiedLogin\[Link] ->) (Chaos) [File not
signed] C:\Program Files\Chaos\UnifiedLogin\[Link]
(Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\[Link]
(ChaosGroup) [File not signed] C:\Program Files\Chaos Group\Chaos Cosmos\
[Link] <2>
([Link] ->) (Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files\Autodesk\
AdODIS\V1\Access\[Link]
([Link] ->) (Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files\Autodesk\
AdODIS\V1\Setup\[Link]
([Link] ->) (Beijing Duyou Science and Technology Co.,Ltd. -> [Link],
Inc.) C:\Users\ninch\AppData\Roaming\baidu\BaiduNetdisk\[Link]
([Link] ->) (Chaos) [File not signed] C:\Program Files\Chaos\UnifiedLogin\
[Link]
([Link] ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\
Application\[Link] <12>
([Link] ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program
Files\Realtek\Audio\HDA\[Link]
([Link] ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program
Files\Realtek\Audio\HDA\[Link]
([Link] ->) (Shanghai Comet Network Technology -> [Link]) C:\
Program Files (x86)\BitComet\[Link]
(Microsoft Corporation -> ) C:\Program Files\WindowsApps\
Microsoft.DesktopAppInstaller_1.26.430.0_x64__8wekyb3d8bbwe\
[Link]
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\
Edge\Application\[Link] <7>
(Microsoft Corporation -> Microsoft Corporation) C:\Users\ninch\AppData\Local\
Microsoft\OneDrive\25.130.0706.0004\[Link]
([Link] ->) () [File not signed] C:\Program Files (x86)\Transoft Solutions\
License Server\[Link]
([Link] ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\
Adobe\Adobe Desktop Common\ElevationManager\[Link]
([Link] ->) (Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files\Autodesk\
AdODIS\V1\Setup\[Link]
([Link] ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files
(x86)\TotalAV\Endpoint Protection SDK\[Link]
([Link] ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\[Link]
([Link] ->) (Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\IJ Scan
Utility\[Link]
([Link] ->) (Chaos Software Ltd. -> ) C:\Program Files\Chaos Group\
VRLService\OLS\[Link]
([Link] ->) (Flexera Software LLC -> Flexera) C:\Program Files (x86)\Common
Files\Autodesk Shared\Network License Manager\[Link] <2>
([Link] ->) (Flexera Software LLC -> Flexera) C:\Program Files (x86)\Common
Files\Macrovision Shared\FlexNet Publisher\[Link]
([Link] ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program
Files\Common Files\microsoft shared\ClickToRun\[Link]
([Link] ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program
Files\Microsoft SQL Server\90\Shared\[Link]
([Link] ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\
ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\
[Link]
([Link] ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\
ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\[Link]
([Link] ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\
ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\[Link]
([Link] ->) (Nitro PDF Software -> ) C:\Program Files\Nitro\Pro 9\
Nitro_UpdateService.exe
([Link] ->) (Nitro PDF Software -> Nitro PDF Software) C:\Program Files\
Nitro\Pro 9\[Link]
([Link] ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\
NVIDIA Corporation\[Link]\[Link] <2>
([Link] ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\
WindowsApps\Microsoft.WindowsCalculator_11.2502.2.0_x64__8wekyb3d8bbwe\
[Link]
([Link] ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\
Microsoft.ZuneMusic_11.2505.2.0_x64__8wekyb3d8bbwe\[Link]
([Link] ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\
Common Files\microsoft shared\ClickToRun\[Link]
([Link] ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\
[Link]
([Link] ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\
InputMethod\CHT\[Link]
([Link] ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\
[Link]

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to
default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\[Link]

[16412952 2015-12-30] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\
[Link] [1413384 2015-12-30] (Realtek Semiconductor Corp -> Realtek
Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\
OOBE\PDApp\UWA\[Link] [446392 2012-04-03] (Adobe Systems
Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [Autodesk Access] => C:\Program Files\Autodesk\AdODIS\V1\Access\
[Link] [21229344 2024-04-16] (Autodesk, Inc. -> Autodesk, Inc.)
HKLM\...\Run: [Autodesk Access Service] => C:\Program Files\Autodesk\AdODIS\V1\
Setup\[Link] [18170648 2025-06-07] (Autodesk, Inc. -> Autodesk,
Inc.)
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [Autodesk Genuine Service ] => C:\ProgramData\Autodesk\Genuine
Service\x64\[Link] [3738160 2022-06-28] (Autodesk, Inc. -> Autodesk)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\
SwitchBoard\[Link] [517096 2010-02-19] (Test Signing Certificate -> Adobe
Systems Incorporated) [File not signed]
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\
Adobe\CS6ServiceManager\[Link] [1073312 2012-03-09] (Adobe Systems
Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative
Cloud Experience\[Link] [133128 2024-05-11] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\
[Link] [1313408 2017-07-05] (Canon Inc. -> CANON INC.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative
Cloud\ACC\Creative [Link] [2511784 2025-06-25] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\MRT: Restriction <==== ATTENTION
HKLM\Software\Policies\...\system: [DisableResetToFactoryDefault] 1
HKU\S-1-5-21-3306758732-1654482619-1516084779-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3306758732-1654482619-1516084779-1001\...\Run: [BitComet] => C:\
Program Files (x86)\BitComet\[Link] [2940664 2009-12-28] (Shanghai Comet
Network Technology -> [Link])
HKU\S-1-5-21-3306758732-1654482619-1516084779-1001\...\Run:
[MicrosoftEdgeAutoLaunch_ED891A415B4BB17A4BA222298553821C] => "C:\Program Files
(x86)\Microsoft\Edge\Application\[Link]" --no-startup-window --win-session-
start [4113464 2025-07-31] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3306758732-1654482619-1516084779-1001\...\Run: [BaiduYunDetect] => C:\
Users\ninch\AppData\Roaming\baidu\BaiduNetdisk\[Link] [3728368 2025-
07-05] (Beijing Duyou Science and Technology Co.,Ltd. -> [Link], Inc.)
HKU\S-1-5-21-3306758732-1654482619-1516084779-1001\...\Run:
[MicrosoftEdgeAutoLaunch_CA2A7CD5C72D8A29D8977FCD745FE60F] => "C:\Program Files
(x86)\Microsoft\Edge\Application\[Link]" --no-startup-window --win-session-
start [4113464 2025-07-31] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3306758732-1654482619-1516084779-1001\...\Run: [] => [X]
HKU\S-1-5-21-3306758732-1654482619-1516084779-1001\...\Policies\Explorer: []
HKLM\...\Windows x64\Print Processors\Canon TS5000 series Print Processor: C:\
Windows\System32\spool\prtprocs\x64\[Link] [30720 2017-12-17] (Microsoft
Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS5000 series: C:\WINDOWS\
system32\[Link] [485376 2017-12-17] (Microsoft Windows Hardware Compatibility
Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Nitro PDF Port Monitor: C:\WINDOWS\system32\
[Link] [29704 2014-05-19] (Nitro PDF Software -> Nitro PDF Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-
AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\138.0.7204.184\
Installer\[Link] [2025-08-05] (Google LLC -> Google LLC)
Startup: C:\Users\ninch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\
Startup\[Link] [2022-11-05]
ShortcutTarget: [Link] -> C:\Users\ninch\Autodesk\Genuine Service\
[Link] (No File)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
[Link] [2022-11-06]
ShortcutTarget: [Link] -> C:\Program Files\Chaos Group\Chaos Cosmos\
[Link] (ChaosGroup) [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
[Link] [2022-11-06]
ShortcutTarget: [Link] -> C:\Program Files\Chaos\UnifiedLogin\
[Link] (Chaos) [File not signed]

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The
file will not be moved unless listed separately.)

Task: {1DF33B51-234D-4642-B628-863CD704C241} - System32\Tasks\det => C:\

ProgramData\WD\[Link] (No File) <==== ATTENTION
Task: {06E86C56-F02A-4B2F-878E-896571F62031} - System32\Tasks\GoogleSystem\
GoogleUpdater\GoogleUpdaterTaskSystem140.0.7273.0{3E125D79-EBB2-45C7-A49C-
C1491E5FE398} => C:\Program Files (x86)\Google\GoogleUpdater\140.0.7273.0\
[Link] [6836832 2025-07-02] (Google LLC -> Google LLC)
Task: {42D2D115-3731-4196-A4F4-9EE94C064633} - System32\Tasks\Microsoft\Office\
Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\
ClickToRun\[Link] [28610600 2025-07-02] (Microsoft Corporation ->
Microsoft Corporation)
Task: {7DA183A6-CF6A-4E41-AB6C-3C5E4304DD9F} - System32\Tasks\Microsoft\Office\
Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft
Shared\ClickToRun\[Link] [28610600 2025-07-02] (Microsoft Corporation
-> Microsoft Corporation)
Task: {287EBC62-0D96-49D9-B251-9EFD2489FD11} - System32\Tasks\Microsoft\Office\
Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\
[Link] [313288 2025-07-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {BA7B1DC8-0963-4AAE-AD83-DB57E4D262A0} - System32\Tasks\Microsoft\Office\
Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\
[Link] [313288 2025-07-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {7C9AE44D-49F2-4300-B339-CD92484CF119} - System32\Tasks\Microsoft\Office\
Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\
ProgramFilesCommonX64\Microsoft Shared\Office16\[Link] [187024 2024-10-11]
(Microsoft Corporation -> Microsoft Corporation)
Task: {279F9ECB-ABEA-4448-A7C5-8866AF8C488D} - System32\Tasks\Microsoft\Windows\
WaaSMedic\MaintenanceWork => {72566E27-1ABB-4EB3-B4F0-EB431CB1CB32}
Task: {B5AF9CD3-56BE-44B6-8840-15C076E4026C} - System32\Tasks\Microsoft\Windows\
WaaSMedic\PerformRemediation => {72566E27-1ABB-4EB3-B4F0-EB431CB1CB32}
Task: {D84B898A-DFDB-4DF7-B7DE-FFEC8CA812DF} - System32\Tasks\Microsoft\Windows\
Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\
Windows Defender\Platform\4.18.25060.7-0\[Link] [1778224 2025-07-27]
(Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7D0623A3-AEFC-4F1A-9142-D074079C0566} - System32\Tasks\Microsoft\Windows\
Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows
Defender\Platform\4.18.25060.7-0\[Link] [1778224 2025-07-27] (Microsoft
Windows Publisher -> Microsoft Corporation)
Task: {7E81FDE1-6432-4657-A495-8BFD3C17D8D2} - System32\Tasks\Microsoft\Windows\
Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\
Windows Defender\Platform\4.18.25060.7-0\[Link] [1778224 2025-07-27]
(Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A5F57ECF-002B-4F3B-9D0D-338E4ADBFDAD} - System32\Tasks\Microsoft\Windows\
Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows
Defender\Platform\4.18.25060.7-0\[Link] [1778224 2025-07-27] (Microsoft
Windows Publisher -> Microsoft Corporation)
Task: {1B2A6F3B-22E7-41D8-8464-7B6A2F2C8EA9} - System32\Tasks\
MicrosoftEdgeUpdateTaskMachineCore64 => C:\ProgramData\Microsoft\WinMSIPS.
{208D2C60-3AEA-1069-A2D7-08002B30309D}\[Link] (No File) <==== ATTENTION
Task: {0C83B1BD-FF0D-4E66-8362-7822556238E1} - System32\Tasks\OneDrive Startup
Task-S-1-5-21-3306758732-1654482619-1516084779-1001 => C:\Users\ninch\AppData\
Local\Microsoft\OneDrive\25.130.0706.0004\[Link] [685432 2025-08-05]
(Microsoft Corporation -> Microsoft Corporation)
Task: {920D81F7-6BE5-4C2F-A4C7-525A04DAB540} - System32\Tasks\OneDrive Startup
Task-S-2-5-25 => C:\Users\ninch\AppData\Roaming\Microsoft\oobe.{D20EA4E1-3957-11D2-
A40B-0C5020524153}\[Link] (No File)
Task: {FA571975-4EDA-4D93-9484-E36F54F5F441} - System32\Tasks\WD => C:\ProgramData\
WD\[Link] (No File) <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The
file which is running by the task will not be moved.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed

or restored to default.)

Tcpip\Parameters: [DhcpNameServer] [Link] [Link]

Tcpip\..\Interfaces\{6c3bd32b-76bf-49c8-af04-606d77a999ae}: [DhcpNameServer]
[Link] [Link]
Tcpip\..\Interfaces\{ab5fab15-9f26-441b-8313-a324801a2e4b}: [DhcpNameServer]
[Link] [Link]

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\ninch\AppData\Local\Microsoft\Edge\User Data\Default [2025-
08-07]
Edge HomePage: Default -> hxxp://[Link]
Edge Extension: (Avast Online Security & Privacy) - C:\Users\ninch\AppData\Local\
Microsoft\Edge\User Data\Default\Extensions\fdgpikaaheckgdijjmepmdjjkbceakif [2025-
03-27]
Edge Extension: (Google 文件離線版) - C:\Users\ninch\AppData\Local\Microsoft\Edge\User
Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-07-26]
Edge Extension: (Edge relevant text changes) - C:\Users\ninch\AppData\Local\
Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-
02-04]

FireFox:
========
FF Plugin: @[Link]/SharePoint,version=14.0 -> C:\Program Files\Microsoft
Office\root\Office16\[Link] [2024-10-11] (Microsoft Corporation -> Microsoft
Corporation)
FF Plugin: [Link]/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative
Cloud\Utils\[Link] [2025-06-25] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @[Link]/YunWebDetectPlugin -> C:\Users\ninch\AppData\Roaming\
baidu\BaiduNetdisk\[Link] [2025-07-05] (Beijing Duyou Science and
Technology Co.,Ltd. -> [Link], Inc.)
FF Plugin-x32: @[Link]/EPPEX -> C:\Program Files\Canon\Easy-PhotoPrint EX\
[Link] [2016-04-13] (CANON INC.) [File not signed]
FF Plugin-x32: @[Link]/SharePoint,version=14.0 -> C:\Program Files\Microsoft
Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\[Link] [2024-10-11]
(Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @[Link]/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 9\
[Link] [2014-05-19] (Nitro PDF Software -> Nitro PDF)
FF Plugin-x32: [Link]/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe
Creative Cloud\Utils\[Link] [2025-06-25] (Adobe Inc. -> Adobe
Systems)

Chrome:
=======
CHR DefaultProfile: Profile 1
CHR Profile: C:\Users\ninch\AppData\Local\Google\Chrome\User Data\Default [2025-08-
07]
CHR Notifications: Default -> hxxps://[Link]; hxxps://[Link];
hxxps://[Link]; hxxps://[Link]
CHR Extension: (Chrome 線上應用程式商店付款系統) - C:\Users\ninch\AppData\Local\Google\Chrome\
User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-11-05]
CHR Profile: C:\Users\ninch\AppData\Local\Google\Chrome\User Data\Guest Profile
[2023-11-11]
CHR Profile: C:\Users\ninch\AppData\Local\Google\Chrome\User Data\Profile 1 [2025-
08-07]
CHR DownloadDir: E:\
CHR Notifications: Profile 1 -> hxxps://[Link];
hxxps://[Link]; hxxps://[Link];
hxxps://[Link]
CHR Extension: (「Google 文件」離線版) - C:\Users\ninch\AppData\Local\Google\Chrome\User
Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-07-20]
CHR Extension: (Chrome 線上應用程式商店付款系統) - C:\Users\ninch\AppData\Local\Google\Chrome\
User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-10-26]
CHR Profile: C:\Users\ninch\AppData\Local\Google\Chrome\User Data\System Profile
[2025-08-07]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The
file will not be moved unless listed separately.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop

Common\ElevationManager\[Link] [944040 2025-06-25] (Adobe Inc. ->
Adobe Inc.)
S2 AdskLicensingService; C:\Program Files (x86)\Common Files\Autodesk Shared\
AdskLicensing\Current\AdskLicensingService\[Link] [16939312 2019-
01-09] (Autodesk, Inc. -> Autodesk)
R2 AdskNLM; C:\Program Files (x86)\Common Files\Autodesk Shared\Network License
Manager\[Link] [1201488 2021-02-24] (Flexera Software LLC -> Flexera)
R2 Autodesk Access Service Host; C:\Program Files\Autodesk\AdODIS\V1\Setup\
[Link] [19981080 2025-06-07] (Autodesk, Inc. -> Autodesk, Inc.)
S3 BaiduNetdiskUtility; C:\Users\ninch\AppData\Roaming\baidu\BaiduNetdisk\
[Link] [113136 2025-06-26] (Beijing Duyou Science and Technology
Co.,Ltd. -> [Link], Inc.)
R2 CIJSRegister; C:\Program Files (x86)\Canon\IJ Scan Utility\[Link] [153736
2016-06-02] (Canon Inc. -> CANON INC.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\
[Link] [14045704 2025-07-02] (Microsoft Corporation -> Microsoft
Corporation)
R2 EndpointProtectionService; C:\Program Files (x86)\TotalAV\Endpoint Protection
SDK\[Link] [12688224 2025-05-14] (Avira Operations GmbH -> Avira
Operations GmbH) <==== ATTENTION
S3 EndpointProtectionService2; C:\Program Files (x86)\TotalAV\Endpoint Protection
SDK\[Link] [12688224 2025-05-14] (Avira Operations GmbH -> Avira
Operations GmbH) <==== ATTENTION
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\[Link] [446360 2022-04-27]
(Canon Inc. -> )
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\
[Link] [2042672 2025-07-27] (Microsoft Windows Publisher ->
Microsoft Corporation)
R2 NitroDriverReadSpool9; C:\Program Files\Nitro\Pro 9\
[Link] [230920 2014-05-19] (Nitro PDF Software -> Nitro PDF
Software)
R2 NitroUpdateService; C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe [417800
2014-05-19] (Nitro PDF Software -> )
S2 nlsX86cc; C:\WINDOWS\SysWOW64\[Link] [69640 2014-05-19] (Nitro PDF
Software -> Nalpeiron Ltd.)
S3 pure; C:\WINDOWS\System32\[Link] [434176 2025-07-13] (Microsoft
Windows -> Microsoft Corporation) <==== ATTENTION
S2 SecurityService; C:\Program Files (x86)\TotalAV\[Link] [225912
2025-07-14] (Total Security Limited -> TotalAV) <==== ATTENTION
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\[Link]
[917440 2025-06-12] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 slump; C:\WINDOWS\system32\[Link] [583168 2025-05-29] (Microsoft Windows ->
Microsoft Corporation) <==== ATTENTION
S4 swell; C:\WINDOWS\system32\[Link] [3441152 2025-07-13] (Microsoft Windows -
> Microsoft Corporation) <==== ATTENTION
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\
[Link] [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems
Incorporated) [File not signed]
R2 Transoft Solutions License Server V1.8; C:\Program Files (x86)\Transoft
Solutions\License Server\[Link] [835584 2014-11-07] () [File not signed]
R2 VRLService; C:\Program Files\Chaos Group\VRLService\OLS\[Link] [20310472 2022-
11-05] (Chaos Software Ltd. -> )
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\
[Link] [4546688 2025-07-27] (Microsoft Windows Publisher -> Microsoft
Corporation)
S2 wellwellwell; C:\WINDOWS\system32\[Link] [1534976 2025-07-13] (Microsoft
Windows -> Microsoft Corporation) <==== ATTENTION
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\
[Link] [282464 2025-07-27] (Microsoft Windows Publisher -> Microsoft
Corporation)
S2 FlexNet Licensing Service 64; "C:\Program Files\Common Files\Macrovision Shared\
FlexNet Publisher\[Link]" [X]

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The
file will not be moved unless listed separately.)

R3 bcmsmbsp; C:\WINDOWS\System32\drivers\[Link] [54048 2015-12-30] (Broadcom

Corporation -> Broadcom Corporation.)
R0 BdNet; C:\WINDOWS\System32\DRIVERS\[Link] [179768 2025-04-28] (Microsoft
Windows Hardware Compatibility Publisher -> Avira Operations GmbH)
R1 BdSentry; C:\WINDOWS\System32\DRIVERS\[Link] [223296 2025-05-07]
(Microsoft Windows Hardware Compatibility Publisher -> Avira Operations GmbH)
S3 BthA2dp; C:\WINDOWS\System32\drivers\[Link] [280064 2022-10-18] (Microsoft
Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\[Link] [147968 2022-04-15]
(Microsoft Corporation) [File not signed]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\[Link] [76800 2019-12-07] (Microsoft
Corporation) [File not signed]
R3 KslD; C:\WINDOWS\System32\drivers\wd\[Link] [330112 2025-06-28] (Microsoft
Windows -> Microsoft Corporation)
S3 netprotection_network_filter; C:\WINDOWS\System32\drivers\
netprotection_network_filter.sys [119656 2025-04-28] (Avira Operations GmbH ->
Avira Operations GmbH)
R1 rtp1; C:\WINDOWS\System32\DRIVERS\[Link] [444600 2025-05-05] (Avira Operations
GmbH -> Avira Operations GmbH)
R1 rtp2; C:\WINDOWS\System32\DRIVERS\[Link] [444608 2025-05-05] (Avira Operations
GmbH -> Avira Operations GmbH)
S0 rtp_elam; C:\WINDOWS\System32\DRIVERS\rtp_elam.sys [28792 2025-05-05] (Microsoft
Windows Early Launch Anti-malware Publisher -> Avira Operations GmbH)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\[Link] [20888 2025-07-27] (Microsoft
Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\[Link] [26880 2015-11-12]
(WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\[Link] [623008 2025-07-27]
(Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\[Link] [101792 2025-07-27]
(Microsoft Windows -> Microsoft Corporation)
S3 Wibukey2_64; C:\WINDOWS\system32\drivers\wibukey2_64.sys [21376 2016-01-01]
(WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG)
S3 netprotection_network_filter2; System32\drivers\
netprotection_network_filter2.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The
file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-08-07 20:42 - 2025-08-07 20:45 - 000027733 ____C C:\Users\ninch\OneDrive\

Desktop\[Link]
2025-08-07 08:13 - 2025-08-07 07:49 - 002409472 ____C (Farbar) C:\Users\ninch\
OneDrive\Desktop\[Link]
2025-08-07 08:00 - 2025-08-07 08:00 - 000000000 ___DC C:\WINDOWS\system32\
SleepStudy
2025-08-07 07:52 - 2025-08-07 20:44 - 000000000 ___DC C:\FRST
2025-08-07 06:44 - 2025-08-07 07:59 - 000225488 ____C C:\WINDOWS\system32\[Link]
2025-08-07 06:44 - 2025-04-28 09:59 - 000119656 ____C (Avira Operations GmbH) C:\
WINDOWS\system32\Drivers\netprotection_network_filter.sys
2025-08-07 06:41 - 2025-05-06 06:02 - 000444608 ____C (Avira Operations GmbH) C:\
WINDOWS\system32\Drivers\[Link]
2025-08-07 06:41 - 2025-05-06 06:02 - 000444600 ____C (Avira Operations GmbH) C:\
WINDOWS\system32\Drivers\[Link]
2025-08-07 06:38 - 2025-08-07 06:48 - 000000000 ___DC C:\ProgramData\TotalAV
2025-08-07 06:37 - 2025-08-07 06:41 - 000000000 ___DC C:\Program Files (x86)\
TotalAV
2025-08-07 06:37 - 2025-08-07 06:37 - 000001077 ____C C:\ProgramData\Microsoft\
Windows\Start Menu\Programs\[Link]
2025-08-06 22:30 - 2025-08-06 22:30 - 000000398 ____C C:\Users\ninch\OneDrive\
Desktop\Wi-Fi - 捷徑.lnk
2025-08-06 21:49 - 2025-08-06 21:49 - 000003330 ____C C:\WINDOWS\system32\Tasks\
MicrosoftEdgeUpdateTaskMachineCore64
2025-08-06 21:38 - 2025-08-07 06:51 - 000000000 ___DC C:\Users\ninch\AppData\
Roaming\Microsoft\oobe.{D20EA4E1-3957-11D2-A40B-0C5020524153}
2025-08-06 21:38 - 2025-08-06 21:38 - 000003730 ____C C:\WINDOWS\system32\Tasks\
OneDrive Startup Task-S-2-5-25
2025-08-06 20:53 - 2025-08-06 20:59 - 000000000 ___DC C:\Users\ninch\AppData\
Roaming\TradingView-Installer
2025-08-06 20:53 - 2025-08-06 20:53 - 000000000 ___DC C:\Users\ninch\AppData\Local\
tradingview-installer-updater
2025-08-05 15:49 - 2025-08-05 15:50 - 000271414 ____C C:\Users\ninch\Downloads\
Formica Compact and ColorCore2 Compact Technical [Link]
2025-08-01 10:08 - 2025-08-01 10:08 - 000781436 ____C C:\Users\ninch\OneDrive\
Desktop\[Link]
2025-07-30 21:42 - 2025-07-30 21:42 - 000000000 ___DC C:\Users\ninch\AppData\Local\
ElevatedDiagnostics
2025-07-27 13:35 - 2025-07-27 15:13 - 000050411 ____C C:\Users\ninch\OneDrive\
Desktop\[Link]
2025-07-27 06:55 - 2025-07-27 16:00 - 000036687 ____C C:\Users\ninch\OneDrive\
Desktop\[Link]
2025-07-27 06:51 - 2025-07-27 06:51 - 003394934 ____C C:\Users\ninch\Downloads\
20250727 Intangible Cultural Heritage [Link]
2025-07-27 06:50 - 2025-07-27 06:51 - 000887706 ____C C:\Users\ninch\OneDrive\
Desktop\[Link]
2025-07-27 00:50 - 2025-07-27 00:50 - 010168797 ____C C:\Users\ninch\Downloads\
AdvArray - Modifier for 3ds max (2020-2021-2020) [FileCR].zip
2025-07-27 00:50 - 2025-07-27 00:50 - 000000000 ___DC C:\Users\ninch\Downloads\
AdvArray - Modifier for 3ds max (2020-2021-2020) [FileCR]
2025-07-27 00:34 - 2025-07-27 00:35 - 005754368 ____C C:\Users\ninch\Downloads\
[Link]
2025-07-27 00:09 - 2025-07-27 00:09 - 000107344 ____C C:\Users\ninch\Downloads\
array_modifier_v0.[Link]
2025-07-27 00:09 - 2025-07-27 00:09 - 000106392 ____C C:\Users\ninch\Downloads\
array_modifier_v0.[Link]
2025-07-27 00:09 - 2025-07-27 00:09 - 000000000 ___DC C:\Users\ninch\Downloads\
array3d_v0.83
2025-07-27 00:09 - 2025-07-27 00:09 - 000000000 ___DC C:\Users\ninch\Downloads\
array_modifier_v0.825
2025-07-27 00:08 - 2025-07-27 00:08 - 000029094 ____C C:\Users\ninch\Downloads\
array3d_v0.[Link]
2025-07-27 00:05 - 2025-07-27 00:05 - 000003568 ____C C:\Users\ninch\Downloads\
csArrayMaker_1_1.zip
2025-07-27 00:05 - 2025-07-27 00:05 - 000000000 ___DC C:\Users\ninch\Downloads\
csArrayMaker_1_1
2025-07-26 23:14 - 2025-07-27 07:00 - 000913795 ____C C:\Users\ninch\OneDrive\
Desktop\[Link]
2025-07-20 21:50 - 2025-07-20 21:50 - 002576213 ____C C:\Users\ninch\OneDrive\
Desktop\Chan Hing Nin Cover Letter_2.pdf
2025-07-18 20:22 - 2025-07-18 20:23 - 135533201 ____C C:\Users\ninch\Downloads\
[Link]
2025-07-13 18:37 - 2025-07-13 18:37 - 000023172 ____C C:\WINDOWS\SysWOW64\
[Link]
2025-07-13 18:36 - 2025-07-13 18:36 - 000023172 ____C C:\WINDOWS\system32\
[Link]
2025-07-13 12:48 - 2025-07-13 12:52 - 000000000 __HDC C:\$WinREAgent

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-08-07 20:36 - 2023-04-29 23:33 - 000004168 ____C C:\WINDOWS\system32\Tasks\

User_Feed_Synchronization-{7D2EB3E9-B4BD-4C2C-9128-80A74E0D0E6D}
2025-08-07 20:36 - 2022-11-06 12:51 - 000000000 ___DC C:\ProgramData\regid.1991-
[Link]
2025-08-07 20:33 - 2022-11-06 00:12 - 000000000 ___DC C:\Users\ninch\OneDrive\文件\
Chaos Cosmos
2025-08-07 20:32 - 2023-06-29 10:22 - 000000000 ___DC C:\ProgramData\
boost_interprocess
2025-08-07 08:16 - 2022-11-06 12:25 - 000000000 ___DC C:\ProgramData\NVIDIA
2025-08-07 08:00 - 2022-11-06 12:51 - 000000000 ___DC C:\WINDOWS\SystemTemp
2025-08-07 08:00 - 2022-11-06 12:22 - 000008192 ___SH C:\[Link]
2025-08-07 08:00 - 2022-11-06 12:22 - 000000006 ___HC C:\WINDOWS\Tasks\[Link]
2025-08-07 07:59 - 2022-11-06 12:39 - 000524288 _____ C:\WINDOWS\system32\config\
BBI
2025-08-07 06:58 - 2022-11-06 13:10 - 000000000 ___DC C:\WINDOWS\Panther
2025-08-07 06:58 - 2022-11-06 12:50 - 000000000 ___DC C:\WINDOWS\INF
2025-08-07 06:44 - 2022-11-12 19:03 - 000000000 ___DC C:\ProgramData\WD
2025-08-07 06:41 - 2022-11-06 12:51 - 000000000 __HDC C:\WINDOWS\ELAMBKUP
2025-08-07 06:30 - 2022-11-06 12:51 - 000000000 ___DC C:\WINDOWS\LiveKernelReports
2025-08-06 23:45 - 2022-11-05 21:43 - 000000000 ___DC C:\Users\ninch
2025-08-06 23:35 - 2024-01-21 09:27 - 000000000 ___DC C:\WINDOWS\Minidump
2025-08-06 22:32 - 2022-11-06 12:51 - 000000000 __HDC C:\Program Files\WindowsApps
2025-08-06 22:32 - 2022-11-05 21:46 - 000000000 ___DC C:\Users\ninch\AppData\Local\
Packages
2025-08-06 22:31 - 2022-11-06 12:51 - 000000000 ___DC C:\WINDOWS\AppReadiness
2025-08-06 22:30 - 2022-11-05 21:50 - 000000000 ___DC C:\Users\ninch\AppData\Local\
D3DSCache
2025-08-05 22:04 - 2022-11-06 12:25 - 000002439 ____C C:\ProgramData\Microsoft\
Windows\Start Menu\Programs\Microsoft [Link]
2025-08-05 21:56 - 2022-11-06 12:24 - 000003536 ____C C:\WINDOWS\system32\Tasks\
MicrosoftEdgeUpdateTaskMachineUA
2025-08-05 21:56 - 2022-11-06 12:24 - 000003410 ____C C:\WINDOWS\system32\Tasks\
MicrosoftEdgeUpdateTaskMachineCore
2025-08-05 20:53 - 2022-11-05 22:04 - 000000000 ___DC C:\Users\ninch\AppData\Local\
Comms
2025-08-05 15:50 - 2022-11-05 22:06 - 000002222 ____C C:\ProgramData\Microsoft\
Windows\Start Menu\Programs\Google [Link]
2025-08-05 15:40 - 2025-06-26 07:14 - 000000000 ___DC C:\Users\ninch\AppData\
Roaming\baidunetdisk
2025-08-05 13:41 - 2025-03-09 15:49 - 000003576 ____C C:\WINDOWS\system32\Tasks\
OneDrive Startup Task-S-1-5-21-3306758732-1654482619-1516084779-1001
2025-08-05 13:41 - 2022-11-05 21:50 - 000003592 ____C C:\WINDOWS\system32\Tasks\
OneDrive Reporting Task-S-1-5-21-3306758732-1654482619-1516084779-1001
2025-08-05 13:41 - 2022-11-05 21:49 - 000003380 ____C C:\WINDOWS\system32\Tasks\
OneDrive Standalone Update Task-S-1-5-21-3306758732-1654482619-1516084779-1001
2025-08-05 13:41 - 2022-11-05 21:43 - 000002298 ____C C:\Users\ninch\AppData\
Roaming\Microsoft\Windows\Start Menu\Programs\[Link]
2025-08-05 11:54 - 2024-10-10 07:44 - 000000000 ___DC C:\Users\ninch\AppData\
Roaming\PLogs
2025-08-01 10:29 - 2022-11-27 15:37 - 000000000 ___DC C:\ProgramData\CanonIJPLM
2025-07-29 21:50 - 2022-11-20 15:58 - 000000000 ___DC C:\Program Files\RUXIM
2025-07-28 21:21 - 2022-11-11 02:33 - 000439450 ____C C:\WINDOWS\system32\
[Link]
2025-07-28 21:21 - 2022-11-11 02:33 - 000133282 ____C C:\WINDOWS\system32\
[Link]
2025-07-28 21:21 - 2022-11-05 21:38 - 001404168 ____C C:\WINDOWS\system32\
[Link]
2025-07-28 21:17 - 2022-11-05 21:47 - 000000000 ___DC C:\ProgramData\Packages
2025-07-27 23:26 - 2022-11-06 12:22 - 005277032 ____C C:\WINDOWS\system32\
[Link]
2025-07-27 23:23 - 2022-11-06 12:51 - 000000000 __RDC C:\WINDOWS\PrintDialog
2025-07-27 23:23 - 2022-11-06 12:51 - 000000000 __RDC C:\WINDOWS\
ImmersiveControlPanel
2025-07-27 23:23 - 2022-11-06 12:51 - 000000000 ___DC C:\WINDOWS\SysWOW64\setup
2025-07-27 23:23 - 2022-11-06 12:51 - 000000000 ___DC C:\WINDOWS\SysWOW64\Dism
2025-07-27 23:23 - 2022-11-06 12:51 - 000000000 ___DC C:\WINDOWS\SystemResources
2025-07-27 23:23 - 2022-11-06 12:51 - 000000000 ___DC C:\WINDOWS\system32\
ShellExperiences
2025-07-27 23:23 - 2022-11-06 12:51 - 000000000 ___DC C:\WINDOWS\system32\setup
2025-07-27 23:23 - 2022-11-06 12:51 - 000000000 ___DC C:\WINDOWS\system32\
SecureBootUpdates
2025-07-27 23:23 - 2022-11-06 12:51 - 000000000 ___DC C:\WINDOWS\system32\
PerceptionSimulation
2025-07-27 23:23 - 2022-11-06 12:51 - 000000000 ___DC C:\WINDOWS\system32\oobe
2025-07-27 23:23 - 2022-11-06 12:51 - 000000000 ___DC C:\WINDOWS\system32\migwiz
2025-07-27 23:23 - 2022-11-06 12:51 - 000000000 ___DC C:\WINDOWS\system32\Dism
2025-07-27 23:23 - 2022-11-06 12:51 - 000000000 ___DC C:\WINDOWS\ShellExperiences
2025-07-27 23:23 - 2022-11-06 12:51 - 000000000 ___DC C:\WINDOWS\ShellComponents
2025-07-27 23:23 - 2022-11-06 12:51 - 000000000 ___DC C:\WINDOWS\bcastdvr
2025-07-27 23:23 - 2022-11-06 12:39 - 000000000 ___DC C:\WINDOWS\servicing
2025-07-27 23:10 - 2022-11-05 23:59 - 000000000 ___DC C:\Users\ninch\OneDrive\文件\
3ds Max 2020
2025-07-27 11:53 - 2022-11-06 12:23 - 000000000 ___DC C:\WINDOWS\system32\Drivers\
wd
2025-07-27 01:25 - 2025-07-01 17:20 - 000000000 ___DC C:\Users\ninch\OneDrive\
Desktop\1
2025-07-20 21:36 - 2022-11-12 19:34 - 000000000 ___DC C:\Users\ninch\AppData\
Roaming\Microsoft\Word
2025-07-13 21:50 - 2024-10-10 07:44 - 000000000 ___DC C:\Users\ninch\AppData\
Roaming\BaiduYunGuanjia
2025-07-13 18:43 - 2022-11-06 12:45 - 000000000 ___DC C:\WINDOWS\CbsTemp
2025-07-13 18:36 - 2022-11-06 12:25 - 003016192 ____C (Microsoft Corporation) C:\
WINDOWS\SysWOW64\[Link]
2025-07-12 07:21 - 2022-11-12 19:09 - 000000000 ___DC C:\Program Files\Microsoft
Office

==================== Files in the root of some directories ========

2023-11-26 17:51 - 2023-11-26 17:51 - 000001456 ____C () C:\Users\ninch\AppData\
Local\Adobe Save for Web 13.0 Prefs

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

BCD (recoveryenabled=No -> recoveryenabled=Yes) <==== restored successfully

==================== End of [Link] ========================