Avast AV program intruding on Windows 10 Office

Wolverine, yes, I uninstalled Avast, didn't notice any differemnce in the performaance. Still kinda sluggish. A week or so ago, a friend told me about Windows 'De-Blaoter' and I ran that. It changed a feature of the opening Windows background (it no longer asks me if I like it and promising to send more etc.) which I didn't mind, and it knocked out the 'Bing' browser's automatically taking over the search (I HATE Bing) but as far as improving performance, no difference.

here's the MTB log...

MiniToolBox by Farbar Version: 17-06-2016

Ran by pc (administrator) on 02-07-2021 at 06:41:36

Running from "C:\Users\pc\Desktop"

Microsoft Windows 10 Pro (X64)

Model: To Be Filled By O.E.M. Manufacturer: To Be Filled By O.E.M.

Boot Mode: Normal

***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.

No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================

"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================

========================= IP Configuration: ================================

D-Link DWA-123 Wireless N 150 USB Adapter(rev.D) = Wi-Fi (Connected)

Realtek PCIe GbE Family Controller = Ethernet (Media disconnected)

# ----------------------------------

# IPv4 Configuration

# ----------------------------------

pushd interface ipv4

reset

set global

set interface interface="Ethernet (Kernel Debugger)" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled

set interface interface="Ethernet" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled

set interface interface="Wi-Fi" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled

set interface interface="Local Area Connection* 1" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled

set interface interface="Local Area Connection* 10" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled

popd

# End of IPv4 configuration

Windows IP Configuration

Host Name . . . . . . . . . . . . : DESKTOP-MQNS21R

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Hybrid

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Ethernet:

Media State . . . . . . . . . . . : Media disconnected

Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Realtek PCIe GbE Family Controller

Physical Address. . . . . . . . . : D0-50-99-59-A7-5C

DHCP Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Local Area Connection* 1:

Media State . . . . . . . . . . . : Media disconnected

Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter

Physical Address. . . . . . . . . : E6-6F-13-A6-0C-B7

DHCP Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Local Area Connection* 10:

Media State . . . . . . . . . . . : Media disconnected

Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter #2

Physical Address. . . . . . . . . : E4-6F-13-A6-0C-B7

DHCP Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Wi-Fi:

Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : D-Link DWA-123 Wireless N 150 USB Adapter(rev.D)

Physical Address. . . . . . . . . : E4-6F-13-A6-0C-B7

DHCP Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IPv6 Address. . . . . . . . . . . : 2405:9800:ba31:256a:e1d2:9cb:cc87:20a6(Preferred)

Temporary IPv6 Address. . . . . . : 2405:9800:ba31:256a:4a9:dae4:5272:3bdc(Deprecated)

Temporary IPv6 Address. . . . . . : 2405:9800:ba31:256a:d85e:bc97:27ad:f2ad(Preferred)

Temporary IPv6 Address. . . . . . : 2405:9800:ba31:256a:ed15:c99f:5430:e8fc(Deprecated)

Link-local IPv6 Address . . . . . : fe80::e1d2:9cb:cc87:20a6%7(Preferred)

IPv4 Address. . . . . . . . . . . : 192.168.1.102(Preferred)

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Lease Obtained. . . . . . . . . . : Tuesday, June 29, 2021 4:24:37 PM

Lease Expires . . . . . . . . . . : Saturday, July 3, 2021 6:35:38 AM

Default Gateway . . . . . . . . . : fe80::3a14:4eff:fe9d:8085%7

192.168.1.1

DHCP Server . . . . . . . . . . . : 192.168.1.1

DHCPv6 IAID . . . . . . . . . . . : 182742803

DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-27-AF-5E-19-D0-50-99-59-A7-5C

DNS Servers . . . . . . . . . . . : 2405:9800:a:1::10

2405:9800:a:2::26

192.168.1.1

NetBIOS over Tcpip. . . . . . . . : Enabled

Server: nsc01.awn.co.th

Address: 2405:9800:a:1::10

Name: google.com

Addresses: 2404:6800:4001:806::200e

216.58.196.14

Pinging google.com [2404:6800:4001:806::200e] with 32 bytes of data:

Reply from 2404:6800:4001:806::200e: time=41ms

Reply from 2404:6800:4001:806::200e: time=40ms

Ping statistics for 2404:6800:4001:806::200e:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 40ms, Maximum = 41ms, Average = 40ms

Server: nsc01.awn.co.th

Address: 2405:9800:a:1::10

Name: yahoo.com

Addresses: 2001:4998:44:3507::8000

2001:4998:44:3507::8001

2001:4998:24:120d::1:0

2001:4998:124:1507::f001

2001:4998:24:120d::1:1

2001:4998:124:1507::f000

74.6.143.25

98.137.11.163

74.6.231.21

74.6.143.26

98.137.11.164

74.6.231.20

Pinging yahoo.com [2001:4998:124:1507::f000] with 32 bytes of data:

Reply from 2001:4998:124:1507::f000: time=279ms

Reply from 2001:4998:124:1507::f000: time=278ms

Ping statistics for 2001:4998:124:1507::f000:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 278ms, Maximum = 279ms, Average = 278ms

Pinging 127.0.0.1 with 32 bytes of data:

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms

===========================================================================

Interface List

8...d0 50 99 59 a7 5c ......Realtek PCIe GbE Family Controller

3...e6 6f 13 a6 0c b7 ......Microsoft Wi-Fi Direct Virtual Adapter

5...e4 6f 13 a6 0c b7 ......Microsoft Wi-Fi Direct Virtual Adapter #2

7...e4 6f 13 a6 0c b7 ......D-Link DWA-123 Wireless N 150 USB Adapter(rev.D)

1...........................Software Loopback Interface 1

===========================================================================

IPv4 Route Table

===========================================================================

Active Routes:

Network Destination Netmask Gateway Interface Metric

0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.102 55

127.0.0.0 255.0.0.0 On-link 127.0.0.1 331

127.0.0.1 255.255.255.255 On-link 127.0.0.1 331

127.255.255.255 255.255.255.255 On-link 127.0.0.1 331

192.168.1.0 255.255.255.0 On-link 192.168.1.102 311

192.168.1.102 255.255.255.255 On-link 192.168.1.102 311

192.168.1.255 255.255.255.255 On-link 192.168.1.102 311

224.0.0.0 240.0.0.0 On-link 127.0.0.1 331

224.0.0.0 240.0.0.0 On-link 192.168.1.102 311

255.255.255.255 255.255.255.255 On-link 127.0.0.1 331

255.255.255.255 255.255.255.255 On-link 192.168.1.102 311

===========================================================================

Persistent Routes:

None

IPv6 Route Table

===========================================================================

Active Routes:

If Metric Network Destination Gateway

7 311 ::/0 fe80::3a14:4eff:fe9d:8085

1 331 ::1/128 On-link

7 311 2405:9800:ba31:256a::/64 On-link

7 311 2405:9800:ba31:256a:4a9:dae4:5272:3bdc/128

On-link

7 311 2405:9800:ba31:256a:d85e:bc97:27ad:f2ad/128

On-link

7 311 2405:9800:ba31:256a:e1d2:9cb:cc87:20a6/128

On-link

7 311 2405:9800:ba31:256a:ed15:c99f:5430:e8fc/128

On-link

7 311 fe80::/64 On-link

7 311 fe80::e1d2:9cb:cc87:20a6/128

On-link

1 331 ff00::/8 On-link

7 311 ff00::/8 On-link

===========================================================================

Persistent Routes:

None

========================= Winsock entries =====================================

Catalog5 01 C:\Windows\SysWOW64\napinsp.dll [54784] (Microsoft Corporation)

Catalog5 02 C:\Windows\SysWOW64\pnrpnsp.dll [70656] (Microsoft Corporation)

Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [70656] (Microsoft Corporation)

Catalog5 04 C:\Windows\SysWOW64\wshbth.dll [50688] (Microsoft Corporation)

Catalog5 05 C:\Windows\SysWOW64\NLAapi.dll [71168] (Microsoft Corporation)

Catalog5 06 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)

Catalog5 07 C:\Windows\SysWOW64\winrnr.dll [34304] (Microsoft Corporation)

Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)

Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)

Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)

Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)

Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)

Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)

Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)

Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)

Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)

Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)

Catalog9 11 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)

Catalog9 12 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)

Catalog9 13 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)

Catalog9 14 C:\Windows\SysWOW64\mswsock.dll [324416] (Microsoft Corporation)

x64-Catalog5 01 C:\Windows\System32\napinsp.dll [70144] (Microsoft Corporation)

x64-Catalog5 02 C:\Windows\System32\pnrpnsp.dll [89088] (Microsoft Corporation)

x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [89088] (Microsoft Corporation)

x64-Catalog5 04 C:\Windows\System32\wshbth.dll [64000] (Microsoft Corporation)

x64-Catalog5 05 C:\Windows\System32\NLAapi.dll [97280] (Microsoft Corporation)

x64-Catalog5 06 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)

x64-Catalog5 07 C:\Windows\System32\winrnr.dll [49152] (Microsoft Corporation)

x64-Catalog9 01 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)

x64-Catalog9 02 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)

x64-Catalog9 03 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)

x64-Catalog9 04 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)

x64-Catalog9 05 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)

x64-Catalog9 06 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)

x64-Catalog9 07 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)

x64-Catalog9 08 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)

x64-Catalog9 09 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)

x64-Catalog9 10 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)

x64-Catalog9 11 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)

x64-Catalog9 12 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)

x64-Catalog9 13 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)

x64-Catalog9 14 C:\Windows\System32\mswsock.dll [418416] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:

==================

Error: (07/01/2021 08:13:24 AM) (Source: Application Error) (User: )

Description: Faulting application name: sppsvc.exe, version: 10.0.19041.1052, time stamp: 0x88ed34f1

Faulting module name: ntdll.dll, version: 10.0.19041.1023, time stamp: 0x7977b9de

Exception code: 0xc0000005

Fault offset: 0x0000000000025bb6

Faulting process id: 0x1208

Faulting application start time: 0xsppsvc.exe0

Faulting application path: sppsvc.exe1

Faulting module path: sppsvc.exe2

Report Id: sppsvc.exe3

Faulting package full name: sppsvc.exe4

Faulting package-relative application ID: sppsvc.exe5

Error: (06/29/2021 05:48:20 PM) (Source: Software Protection Platform Service) (User: )

Description: Acquisition of End User License failed. hr=0xC004C060

Sku Id=5f472f1e-eb0a-4170-98e2-fb9e7f6ff535

Error: (06/29/2021 05:48:20 PM) (Source: Software Protection Platform Service) (User: )

Description: License acquisition failure details.

hr=0xC004C060

Error: (06/29/2021 05:48:17 PM) (Source: Software Protection Platform Service) (User: )

Description: Acquisition of End User License failed. hr=0xC004C060

Sku Id=5f472f1e-eb0a-4170-98e2-fb9e7f6ff535

Error: (06/29/2021 05:48:17 PM) (Source: Software Protection Platform Service) (User: )

Description: License acquisition failure details.

hr=0xC004C060

Error: (06/28/2021 04:11:47 PM) (Source: SecurityCenter) (User: )

Description: Security Center failed to validate caller with error %1.

Error: (06/28/2021 03:36:50 PM) (Source: Application Error) (User: )

Description: Faulting application name: svchost.exe_AppXSvc, version: 10.0.19041.546, time stamp: 0x058e175a

Faulting module name: msxml6.dll, version: 6.30.19041.1023, time stamp: 0x17588164

Exception code: 0xc0000005

Fault offset: 0x0000000000038fc7

Faulting process id: 0x23f8

Faulting application start time: 0xsvchost.exe_AppXSvc0

Faulting application path: svchost.exe_AppXSvc1

Faulting module path: svchost.exe_AppXSvc2

Report Id: svchost.exe_AppXSvc3

Faulting package full name: svchost.exe_AppXSvc4

Faulting package-relative application ID: svchost.exe_AppXSvc5

Error: (06/26/2021 08:57:33 PM) (Source: Microsoft-Windows-Defrag) (User: )

Description: The storage optimizer couldn't complete retrim on New Volume (D:) because: The operation requested is not supported by the hardware backing the volume. (0x8900002A)

Error: (06/26/2021 08:57:15 PM) (Source: Microsoft-Windows-Defrag) (User: )

Description: The storage optimizer couldn't complete retrim on (C:) because: The operation requested is not supported by the hardware backing the volume. (0x8900002A)

Error: (06/26/2021 07:36:49 PM) (Source: Application Error) (User: )

Description: Faulting application name: sppsvc.exe, version: 10.0.19041.1052, time stamp: 0x88ed34f1

Faulting module name: sppsvc.exe, version: 10.0.19041.1052, time stamp: 0x88ed34f1

Exception code: 0xc0000005

Fault offset: 0x0000000000183dad

Faulting process id: 0x14d0

Faulting application start time: 0xsppsvc.exe0

Faulting application path: sppsvc.exe1

Faulting module path: sppsvc.exe2

Report Id: sppsvc.exe3

Faulting package full name: sppsvc.exe4

Faulting package-relative application ID: sppsvc.exe5

System errors:

=============

Error: (07/01/2021 08:13:26 AM) (Source: Service Control Manager) (User: )

Description: The Software Protection service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.

Error: (06/30/2021 09:42:47 AM) (Source: Microsoft-Windows-Kernel-General) (User: DESKTOP-MQNS21R)

Description: 0x8000002a41\??\C:\Windows\System32\config\components

Error: (06/30/2021 07:43:00 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT AUTHORITY)

Description: Installation Failure: Windows failed to install the following update with error 0x8024200b: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.343.25.0).

Error: (06/29/2021 04:28:18 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT AUTHORITY)

Error: (06/28/2021 04:35:58 PM) (Source: Service Control Manager) (User: )

Description: The KMS-R@1n service terminated unexpectedly. It has done this 1 time(s).

Error: (06/28/2021 04:14:09 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT AUTHORITY)

Error: (06/28/2021 04:08:40 PM) (Source: DCOM) (User: DESKTOP-MQNS21R)

Description: 1084WSearchUnavailable{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

Error: (06/28/2021 04:08:37 PM) (Source: DCOM) (User: DESKTOP-MQNS21R)

Description: 1084ShellHWDetectionUnavailable{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (06/28/2021 04:08:37 PM) (Source: DCOM) (User: DESKTOP-MQNS21R)

Description: 1084netprofmUnavailable{A47979D2-C419-11D9-A5B4-001185AD2B89}

Error: (06/28/2021 04:08:00 PM) (Source: DCOM) (User: DESKTOP-MQNS21R)

Description: 1084netprofmUnavailable{A47979D2-C419-11D9-A5B4-001185AD2B89}

Microsoft Office Sessions:

=========================

Error: (07/01/2021 08:13:24 AM) (Source: Application Error)(User: )

Description: sppsvc.exe10.0.19041.105288ed34f1ntdll.dll10.0.19041.10237977b9dec00000050000000000025bb6120801d76e161844bbe6C:\Windows\system32\sppsvc.exeC:\Windows\SYSTEM32\ntdll.dll303953ab-8e29-4236-9f2d-c7e55619d7f7

Error: (06/29/2021 05:48:20 PM) (Source: Software Protection Platform Service)(User: )

Description: hr=0xC004C0605f472f1e-eb0a-4170-98e2-fb9e7f6ff535

Error: (06/29/2021 05:48:20 PM) (Source: Software Protection Platform Service)(User: )

Description: hr=0xC004C06000010001(0x00000000, 17:48:19:589 - https://activation.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=o14)

00020001(0x00000000, 17:48:19:589)

00030001(0x00000000, 17:48:19:589 - https://activation.sls.microsoft.com)

00030002(0x00000000, 17:48:19:589 - 0)

00040001(0x00000000, 17:48:19:589 - https://activation.sls.microsoft.com)

00040002(0x00000000, 17:48:19:605 - 1, <NULL>, <NULL>, <NULL>)

00050002(0x80072F94, 17:48:19:605 - 0, 1)

00040006(0x00000001, 17:48:19:605 - 0, https://activation.sls.microsoft.com, <N/A>, <N/A>)

00020005(0x00000000, 17:48:19:605 - 0)

0002000C(0x00000000, 17:48:20:624 - 500)

00010002(0x8004FC01, 17:48:20:624 - <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><soap:Body><soap:Fault><faultcode>soap:Server</faultcode><faultstring>SoapException</faultstring><detail><HRESULT>0xC004C060</HRESULT><Messages><Message>213 (Activation) - [Maximum Override Limit Reached for ROT Activation ---> ROT Activation Override Limit Reached]</Message></Messages></detail></soap:Fault></soap:Body></soap:Envelope>)

00010003(0x8004FC01, 17:48:20:624)

Error: (06/29/2021 05:48:17 PM) (Source: Software Protection Platform Service)(User: )

Description: hr=0xC004C0605f472f1e-eb0a-4170-98e2-fb9e7f6ff535

Error: (06/29/2021 05:48:17 PM) (Source: Software Protection Platform Service)(User: )

Description: hr=0xC004C06000010001(0x00000000, 17:48:16:283 - https://activation.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=o14)

00020001(0x00000000, 17:48:16:283)

00030001(0x00000000, 17:48:16:283 - https://activation.sls.microsoft.com)

00030002(0x00000000, 17:48:16:283 - 0)

00040001(0x00000000, 17:48:16:283 - https://activation.sls.microsoft.com)

00040002(0x00000000, 17:48:16:298 - 1, <NULL>, <NULL>, <NULL>)

00050002(0x80072F94, 17:48:16:298 - 0, 1)

00040006(0x00000001, 17:48:16:298 - 0, https://activation.sls.microsoft.com, <N/A>, <N/A>)

00020005(0x00000000, 17:48:16:298 - 0)

0002000C(0x00000000, 17:48:17:577 - 500)

00010002(0x8004FC01, 17:48:17:577 - <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><soap:Body><soap:Fault><faultcode>soap:Server</faultcode><faultstring>SoapException</faultstring><detail><HRESULT>0xC004C060</HRESULT><Messages><Message>213 (Activation) - [Maximum Override Limit Reached for ROT Activation ---> ROT Activation Override Limit Reached]</Message></Messages></detail></soap:Fault></soap:Body></soap:Envelope>)

00010003(0x8004FC01, 17:48:17:577)

Error: (06/28/2021 04:11:47 PM) (Source: SecurityCenter)(User: )

Description:

Error: (06/28/2021 03:36:50 PM) (Source: Application Error)(User: )

Description: svchost.exe_AppXSvc10.0.19041.546058e175amsxml6.dll6.30.19041.102317588164c00000050000000000038fc723f801d76b56520c2bd9C:\Windows\System32\svchost.exeC:\Windows\System32\msxml6.dll9575fa5c-7a7a-4fef-aec2-dd295d2aee77

Error: (06/26/2021 08:57:33 PM) (Source: Microsoft-Windows-Defrag)(User: )

Description: retrimNew Volume (D:)The operation requested is not supported by the hardware backing the volume. (0x8900002A)

Error: (06/26/2021 08:57:15 PM) (Source: Microsoft-Windows-Defrag)(User: )

Description: retrim(C:)The operation requested is not supported by the hardware backing the volume. (0x8900002A)

Error: (06/26/2021 07:36:49 PM) (Source: Application Error)(User: )

Description: sppsvc.exe10.0.19041.105288ed34f1sppsvc.exe10.0.19041.105288ed34f1c00000050000000000183dad14d001d76a87d1ed1184C:\Windows\system32\sppsvc.exeC:\Windows\system32\sppsvc.exe557d5a23-1920-4eef-b4c0-508ed530eace

CodeIntegrity Errors:

===================================

Date: 2021-07-01 08:13:25.0470000Z

Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.

Date: 2021-07-01 08:13:24.8830000Z

Date: 2021-07-01 07:19:49.2780000Z

Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll that did not meet the Microsoft signing level requirements.

Date: 2021-07-01 07:19:32.4620000Z

Date: 2021-07-01 07:19:31.3870000Z

Date: 2021-07-01 07:19:28.9620000Z

Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll that did not meet the Microsoft signing level requirements.

Date: 2021-07-01 07:19:07.1710000Z

Date: 2021-07-01 07:19:06.1930000Z

Date: 2021-06-30 09:43:27.9790000Z

Date: 2021-06-30 09:43:25.7790000Z

=========================== Installed Programs ============================

µTorrent (HKCU\...\uTorrent) (Version: 3.5.5.46010 - BitTorrent Inc.)

GOM Player (HKLM-x32\...\GOM Player) (Version: 2.3.38.5300 - GOM & Company)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 91.0.4472.124 - Google LLC)

Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4531 - Intel Corporation)

K-Lite Codec Pack 13.7.5 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 13.7.5 - KLCP)

LINE (HKCU\...\LINE) (Version: 7.0.0.2546 - LINE Corporation)

Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 91.0.864.59 - Microsoft Corporation)

Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.145.49 - )

Microsoft Office Professional Plus 2019 - en-us (HKLM\...\ProPlus2019Retail - en-us) (Version: 16.0.14026.20308 - Microsoft Corporation)

Microsoft Office Professional Plus 2019 - th-th (HKLM\...\ProPlus2019Retail - th-th) (Version: 16.0.14026.20308 - Microsoft Corporation)

Microsoft Update Health Tools (HKLM\...\{E5A95BC5-81DF-4F0C-B910-B59DD012F037}) (Version: 2.81.0.0 - Microsoft Corporation)

Mozilla Firefox 89.0.2 (x64 en-US) (HKLM\...\Mozilla Firefox 89.0.2 (x64 en-US)) (Version: 89.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 85.0.1 - Mozilla)

Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14026.20308 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14026.20308 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.14026.20246 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-041E-1000-0000000FF1CE}) (Version: 16.0.14026.20246 - Microsoft Corporation) Hidden

VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.12 - VideoLAN)

WinRAR 5.91 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.91.0 - win.rar GmbH)

========================= Devices: ================================

Name: DeskJet 3630 series

Description: DeskJet 3630 series

Class Guid:

Manufacturer:

Service:

Device ID: USB\VID_03F0&PID_E311&MI_03\6&2A9CF031&0&0003

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: SM Bus Controller

Description: SM Bus Controller

Class Guid:

Manufacturer:

Service:

Device ID: PCI\VEN_8086&DEV_8C22&SUBSYS_8C221849&REV_05\3&11583659&0&FB

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

========================= Memory info: ===================================

Percentage of memory in use: 48%

Total physical RAM: 3769.82 MB

Available physical RAM: 1943.98 MB

Total Virtual: 6329.82 MB

Available Virtual: 4606.73 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:250.91 GB) (Free:207.84 GB) NTFS

2 Drive d: (New Volume) (Fixed) (Total:680 GB) (Free:275.27 GB) NTFS

4 Drive g: (AIR) (Removable) (Total:28.88 GB) (Free:10.26 GB) FAT32

========================= Users: ========================================

User accounts for \\DESKTOP-MQNS21R

Administrator DefaultAccount Guest

pc WDAGUtilityAccount

========================= Minidump Files ==================================

C:\Windows\Minidump\042421-79906-01.dmp

C:\Windows\Minidump\042721-41875-01.dmp

C:\Windows\Minidump\043021-48140-01.dmp

C:\Windows\Minidump\051321-44906-01.dmp

C:\Windows\Minidump\060421-56296-01.dmp

========================= Restore Points ==================================

26-06-2021 05:11:31 Scheduled Checkpoint

**** End of log ****

Thanks

David S

Edited by PGHinBKK, 01 July 2021 - 06:56 PM.

Avast AV program intruding on Windows 10 Office - Windows 10 Support (2024)