Clicked on malicious invitation which installed screen sh…

Clicked on malicious invitation which installed screen sharing software – posted in Virus, Trojan, Spyware, and Malware Removal Help: Hello Bleeping Computer team,   Yesterday I unfortunately clicked on a malicious email invitation, and unknowingly allowed th…

Fix result of Farbar Recovery Scan Tool (x64) Version: 13-02-2026 Ran by admin (13-02-2026 09:44:18) Run:1 Running from C:UsersadminDesktopTMP     TMP Loaded Profiles: admin & Thad Boot Mode: Normal ============================================== fixlist content: ***************** Start:: CreateRestorePoint: CloseProcesses: C:UsersThadAppDataLocalTempbwpa46f732c-2a6a-4b99-a711-58f4b771d22d C:UsersadminAppDataLocalMicrosoftEdgeUser DataDefaultExtensionsbdaafgjhhjkdplpffldcncdignokfkbo 2026-02-11 14:48 – 2026-02-11 14:48 – 010072064 _____ C:UsersThadDownloadsinvite-event(7).msi 2026-02-11 08:21 – 2026-02-11 08:21 – 010072064 _____ C:UsersThadDownloadsinvite-event(6).msi 2026-02-11 08:19 – 2026-02-11 08:19 – 010072064 _____ C:UsersThadDownloadsinvite-event(5).msi 2026-02-11 08:18 – 2026-02-11 08:18 – 010072064 _____ C:UsersThadDownloadsinvite-event(4).msi 2026-02-11 08:18 – 2026-02-11 08:18 – 010072064 _____ C:UsersThadDownloadsinvite-event(1).msi 2026-02-11 08:14 – 2026-02-11 08:14 – 010072064 _____ C:UsersThadDownloadsinvite-event(3).msi 2026-02-11 08:13 – 2026-02-11 08:13 – 010072064 _____ C:UsersThadDownloadsinvite-event(2).msi 2026-02-10 23:29 – 2026-02-10 23:29 – 000000000 ____D C:WINDOWSsystem32braille-tables 2026-02-10 23:00 – 2026-02-11 09:59 – 000000000 ____D C:WINDOWSCbsTemp 2026-02-10 20:29 – 2026-02-10 20:29 – 010072064 _____ C:UsersThadDownloadsinvite-event.msi 2026-01-26 15:51 – 2026-01-26 15:51 – 000002264 _____ C:UsersThadAppDataLocalLow134ed060f6a7ec988ddea01e4325f1e08acd3b56ef21336a74371bf1f97e7f7a 2026-01-26 15:51 – 2026-01-26 15:51 – 000000026 _____ C:UsersThadAppDataLocalLow11b3211fcb385ddca5428801fae398783ff21d7dfc25188ebefeb809e4a61d9a 2026-01-21 09:52 – 2026-01-21 09:52 – 000002264 _____ C:UsersadminAppDataLocalLowf58097fc152cb7bd965561affcdf7d505a2c94191c895f5ac90a3bb83509443a 2026-01-21 09:50 – 2026-02-12 10:35 – 000251668 _____ C:UsersadminAppDataLocalLow11d972faa7c2108632474d86c27cdaa6f0dc8e996f45bf058997293e55746b8c 2026-01-21 09:50 – 2026-01-21 09:50 – 000006577 _____ C:UsersadminAppDataLocalLow721b791e9002a725440251125ae2cf95aa7dcc9fd4a3b4c9d33e316cc04ce527 2026-01-21 09:50 – 2026-01-21 09:50 – 000000026 _____ C:UsersadminAppDataLocalLowcc8a401b29b9617beb999ec5a60651e0f8619542cb593ae5506edf85964b316b 2026-01-21 09:50 – 2026-01-21 09:50 – 000000026 _____ C:UsersadminAppDataLocalLow74fe0e133cff79b2800a61853ab86b62980b7789dd74d3fb24dea41f6c0de86c 2026-02-12 16:22 – 2025-08-30 14:57 – 000350853 _____ C:UsersadminAppDataLocalLow3e5be57079df60f61843bcdc5533c21c06047b025dc7579ef5297b619b20571b 2026-02-12 16:17 – 2025-11-04 10:56 – 000601490 _____ C:UsersThadAppDataLocalLow6b1e95ba59d34f72ad63ffd16580f14b7cdea99946a7f9106c9588acb3f62086 2026-02-12 16:09 – 2025-09-06 09:11 – 000554259 _____ C:UsersThadAppDataLocalLow3e5be57079df60f61843bcdc5533c21c06047b025dc7579ef5297b619b20571b 2026-02-12 15:42 – 2025-09-01 09:20 – 000113203 _____ C:UsersadminAppDataLocalLowed8b7e4b70c4b17772c3fb0ab7aa74c037b10453df3697e78a448cecf3cc1d97 2026-02-12 11:45 – 2025-11-21 09:41 – 000375189 _____ C:UsersThadAppDataLocalLow11d972faa7c2108632474d86c27cdaa6f0dc8e996f45bf058997293e55746b8c 2026-02-12 11:45 – 2025-09-06 09:09 – 000150778 _____ C:UsersThadAppDataLocalLowed8b7e4b70c4b17772c3fb0ab7aa74c037b10453df3697e78a448cecf3cc1d97 2026-02-12 10:52 – 2025-08-30 16:16 – 000002264 _____ C:UsersadminAppDataLocalLowafb64b058282f8a5327442e53c6c5f3a5792bd53c6e463d1af877bb3d60bacb7 2026-02-12 10:30 – 2025-09-01 09:20 – 000000026 _____ C:UsersadminAppDataLocalLow219e8b429a2e9a10bc2bb8ff2606bd6e99899b3a7b05345aedf13291e924313c 2026-02-12 10:10 – 2025-09-09 10:46 – 000123467 _____ C:UsersThadAppDataLocalLowa4cfd29ef26188660a9c8590c0528a8a42a1788ebe5743fabe07e27d2acf4acb 2026-02-12 09:50 – 2025-09-06 09:33 – 000019207 _____ C:UsersThadAppDataLocalLow4e2133f7caf2cce55e8cf834e79cecb1b7923cc2da5fc7c1d9998fad1c2b9cf4 2026-02-08 20:36 – 2025-09-09 15:13 – 000247634 _____ C:UsersThadAppDataLocalLow43eeb9103311de528dcac4e2efbab9caa2eecd356532b770d832856eb84b7ee8 2026-02-01 15:55 – 2025-09-13 13:05 – 000140842 _____ C:UsersThadAppDataLocalLowd81b5504d1f9ff0d1df17a0995623f1069cf8b3eb09f934589300ec05d503743 2026-02-01 15:24 – 2025-09-15 10:54 – 000319054 _____ C:UsersThadAppDataLocalLow499a8d0c16bee27fde015c170712bd9d8263f36e5185bd971abdbd02cac623dc 2026-01-28 12:40 – 2025-09-13 13:05 – 000000026 _____ C:UsersThadAppDataLocalLowec1fec5fcf09cb6a07bf20445e7a460af2c397b6f555f2ac05e6bc586c85dcff 2026-01-26 15:51 – 2025-09-09 10:46 – 000000026 _____ C:UsersThadAppDataLocalLow384e39c2976508afbb40873466bb1c1646caa360fb7c9615448bb0497156db57 2026-01-21 10:29 – 2025-09-06 09:09 – 000000026 _____ C:UsersThadAppDataLocalLow219e8b429a2e9a10bc2bb8ff2606bd6e99899b3a7b05345aedf13291e924313c 2026-01-21 10:07 – 2025-09-05 17:28 – 000019197 _____ C:UsersadminAppDataLocalLow4e2133f7caf2cce55e8cf834e79cecb1b7923cc2da5fc7c1d9998fad1c2b9cf4 2026-01-21 09:59 – 2025-08-30 14:54 – 000012630 _____ C:UsersadminAppDataLocalLow26a7f29f28baccf7885d3282f68c31b297a14f1882734fb5461717a490c45576 2026-01-21 09:56 – 2025-09-05 17:28 – 000000026 _____ C:UsersadminAppDataLocalLow777e2bdca0cde8921983a3ad68d2e40112eb0517da86035cd17ab456fa2369d9 2026-01-21 09:51 – 2025-08-30 14:57 – 000000026 _____ C:UsersadminAppDataLocalLow23badf405a2774b14138e141f928153d5f8634e90c5a51122c16414c0ab03fc3 2026-01-21 09:50 – 2025-09-25 08:03 – 000002264 _____ C:UsersadminAppDataLocalLow92190f4223b5197c5d65c851e9ae4279b9796c5886eaf531b7010a49a1a9b610 2026-01-21 09:50 – 2025-09-25 08:03 – 000000026 _____ C:UsersadminAppDataLocalLowb4ee184518f263d5e6a3aece56a3a20300879171640d0afda140870d6b54df6e 2026-01-21 09:50 – 2025-09-02 17:56 – 000002264 _____ C:UsersadminAppDataLocalLowe1406f26d06508535617c0d4475efc5504de58e6d4ded5b0f0e8425c9ab3d5ab 2026-01-21 09:50 – 2025-08-30 16:39 – 000006587 _____ C:UsersadminAppDataLocalLow57ce254a041de90960abef343341ab92340cceedfebd30cdc2d01c0eef7852a3 2026-01-21 09:50 – 2025-08-30 16:39 – 000000026 _____ C:UsersadminAppDataLocalLowe76211ab8af3fbaab4b9326ad35b0a00969d95d0a64da56eb4ac7de2ee6b0277 2026-01-21 09:50 – 2025-08-30 14:54 – 000000026 _____ C:UsersadminAppDataLocalLow6fb93dbea7be2b9e574201807dd10a4496e6bede827df0d2f24ee20e113237e0 2026-01-21 09:49 – 2025-08-30 15:27 – 000006579 _____ C:UsersadminAppDataLocalLow28d2a194259989b18fb948834bdf308597ea8a560ecff3bb26b5f92bce91a5e1 2026-01-21 09:49 – 2025-08-30 15:27 – 000000026 _____ C:UsersadminAppDataLocalLow576bf79226144da7523ab7fa90e4dc52d5ff7f052fec52952fe2e83df70d4e0b 2026-01-21 09:37 – 2025-09-13 12:47 – 000002264 _____ C:UsersThadAppDataLocalLow3d0e3071ac51596ace7c9a30e839d3b265281d832d88a2f502ca9602296f42cc 2026-01-21 09:37 – 2025-09-06 09:07 – 000012612 _____ C:UsersThadAppDataLocalLow26a7f29f28baccf7885d3282f68c31b297a14f1882734fb5461717a490c45576 2026-01-20 10:10 – 2025-09-15 10:54 – 000000026 _____ C:UsersThadAppDataLocalLow67b8c0f30ace3eafb827a1cad29dfad12466140d24d3c2f9291fbe84545dfd8f Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} – System32TasksMicrosoftWindowsUpdateOrchestratorUSO_UxBroker => %systemroot%system32MusNotification.exe  (No File)  HKUS-1-5-21-882842961-3036847200-2927150070-1002…Run: [BingWallpaperDaemon] => C:UsersThadAppDataLocalTempbwpa46f732c-2a6a-4b99-a711-58f4b771d22dUnInstDaemon.exe [61000 2026-02-03] (Microsoft Corporation -> Microsoft Corp.) <==== ATTENTION  GroupPolicyUser: Restriction ?

<==== ATTENTION  cmd: netsh winsock reset catalog cmd: netsh int ip reset resetlog.txt Reg: reg export HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessDefaultsFirewallPolicyFirewallRules C:Firewall.reg C:Firewall.reg cmd: netsh advfirewall reset cmd: netsh advfirewall set allprofiles state ON cmd: bitsadmin /reset /allusers cmd: ipconfig /flushdns Removeproxy: hosts: cmd: sfc /scannow cmd: DISM /Online /Cleanup-Image /CheckHealth Emptytemp: End:: ***************** Restore point was successfully created.

Processes closed successfully. "C:UsersThadAppDataLocalTempbwpa46f732c-2a6a-4b99-a711-58f4b771d22d" Folder move: C:UsersThadAppDataLocalTempbwpa46f732c-2a6a-4b99-a711-58f4b771d22d => moved successfully "C:UsersadminAppDataLocalMicrosoftEdgeUser DataDefaultExtensionsbdaafgjhhjkdplpffldcncdignokfkbo" Folder move: C:UsersadminAppDataLocalMicrosoftEdgeUser DataDefaultExtensionsbdaafgjhhjkdplpffldcncdignokfkbo => moved successfully C:UsersThadDownloadsinvite-event(7).msi => moved successfully C:UsersThadDownloadsinvite-event(6).msi => moved successfully C:UsersThadDownloadsinvite-event(5).msi => moved successfully C:UsersThadDownloadsinvite-event(4).msi => moved successfully C:UsersThadDownloadsinvite-event(1).msi => moved successfully C:UsersThadDownloadsinvite-event(3).msi => moved successfully C:UsersThadDownloadsinvite-event(2).msi => moved successfully "C:WINDOWSsystem32braille-tables" Folder move: C:WINDOWSsystem32braille-tables => moved successfully "C:WINDOWSCbsTemp" Folder move: C:WINDOWSCbsTemp => moved successfully C:UsersThadDownloadsinvite-event.msi => moved successfully C:UsersThadAppDataLocalLow134ed060f6a7ec988ddea01e4325f1e08acd3b56ef21336a74371bf1f97e7f7a => moved successfully C:UsersThadAppDataLocalLow11b3211fcb385ddca5428801fae398783ff21d7dfc25188ebefeb809e4a61d9a => moved successfully C:UsersadminAppDataLocalLowf58097fc152cb7bd965561affcdf7d505a2c94191c895f5ac90a3bb83509443a => moved successfully C:UsersadminAppDataLocalLow11d972faa7c2108632474d86c27cdaa6f0dc8e996f45bf058997293e55746b8c => moved successfully C:UsersadminAppDataLocalLow721b791e9002a725440251125ae2cf95aa7dcc9fd4a3b4c9d33e316cc04ce527 => moved successfully C:UsersadminAppDataLocalLowcc8a401b29b9617beb999ec5a60651e0f8619542cb593ae5506edf85964b316b => moved successfully C:UsersadminAppDataLocalLow74fe0e133cff79b2800a61853ab86b62980b7789dd74d3fb24dea41f6c0de86c => moved successfully C:UsersadminAppDataLocalLow3e5be57079df60f61843bcdc5533c21c06047b025dc7579ef5297b619b20571b => moved successfully C:UsersThadAppDataLocalLow6b1e95ba59d34f72ad63ffd16580f14b7cdea99946a7f9106c9588acb3f62086 => moved successfully C:UsersThadAppDataLocalLow3e5be57079df60f61843bcdc5533c21c06047b025dc7579ef5297b619b20571b => moved successfully C:UsersadminAppDataLocalLowed8b7e4b70c4b17772c3fb0ab7aa74c037b10453df3697e78a448cecf3cc1d97 => moved successfully C:UsersThadAppDataLocalLow11d972faa7c2108632474d86c27cdaa6f0dc8e996f45bf058997293e55746b8c => moved successfully C:UsersThadAppDataLocalLowed8b7e4b70c4b17772c3fb0ab7aa74c037b10453df3697e78a448cecf3cc1d97 => moved successfully C:UsersadminAppDataLocalLowafb64b058282f8a5327442e53c6c5f3a5792bd53c6e463d1af877bb3d60bacb7 => moved successfully C:UsersadminAppDataLocalLow219e8b429a2e9a10bc2bb8ff2606bd6e99899b3a7b05345aedf13291e924313c => moved successfully C:UsersThadAppDataLocalLowa4cfd29ef26188660a9c8590c0528a8a42a1788ebe5743fabe07e27d2acf4acb => moved successfully C:UsersThadAppDataLocalLow4e2133f7caf2cce55e8cf834e79cecb1b7923cc2da5fc7c1d9998fad1c2b9cf4 => moved successfully C:UsersThadAppDataLocalLow43eeb9103311de528dcac4e2efbab9caa2eecd356532b770d832856eb84b7ee8 => moved successfully C:UsersThadAppDataLocalLowd81b5504d1f9ff0d1df17a0995623f1069cf8b3eb09f934589300ec05d503743 => moved successfully C:UsersThadAppDataLocalLow499a8d0c16bee27fde015c170712bd9d8263f36e5185bd971abdbd02cac623dc => moved successfully C:UsersThadAppDataLocalLowec1fec5fcf09cb6a07bf20445e7a460af2c397b6f555f2ac05e6bc586c85dcff => moved successfully C:UsersThadAppDataLocalLow384e39c2976508afbb40873466bb1c1646caa360fb7c9615448bb0497156db57 => moved successfully C:UsersThadAppDataLocalLow219e8b429a2e9a10bc2bb8ff2606bd6e99899b3a7b05345aedf13291e924313c => moved successfully C:UsersadminAppDataLocalLow4e2133f7caf2cce55e8cf834e79cecb1b7923cc2da5fc7c1d9998fad1c2b9cf4 => moved successfully C:UsersadminAppDataLocalLow26a7f29f28baccf7885d3282f68c31b297a14f1882734fb5461717a490c45576 => moved successfully C:UsersadminAppDataLocalLow777e2bdca0cde8921983a3ad68d2e40112eb0517da86035cd17ab456fa2369d9 => moved successfully C:UsersadminAppDataLocalLow23badf405a2774b14138e141f928153d5f8634e90c5a51122c16414c0ab03fc3 => moved successfully C:UsersadminAppDataLocalLow92190f4223b5197c5d65c851e9ae4279b9796c5886eaf531b7010a49a1a9b610 => moved successfully C:UsersadminAppDataLocalLowb4ee184518f263d5e6a3aece56a3a20300879171640d0afda140870d6b54df6e => moved successfully C:UsersadminAppDataLocalLowe1406f26d06508535617c0d4475efc5504de58e6d4ded5b0f0e8425c9ab3d5ab => moved successfully C:UsersadminAppDataLocalLow57ce254a041de90960abef343341ab92340cceedfebd30cdc2d01c0eef7852a3 => moved successfully C:UsersadminAppDataLocalLowe76211ab8af3fbaab4b9326ad35b0a00969d95d0a64da56eb4ac7de2ee6b0277 => moved successfully C:UsersadminAppDataLocalLow6fb93dbea7be2b9e574201807dd10a4496e6bede827df0d2f24ee20e113237e0 => moved successfully C:UsersadminAppDataLocalLow28d2a194259989b18fb948834bdf308597ea8a560ecff3bb26b5f92bce91a5e1 => moved successfully C:UsersadminAppDataLocalLow576bf79226144da7523ab7fa90e4dc52d5ff7f052fec52952fe2e83df70d4e0b => moved successfully C:UsersThadAppDataLocalLow3d0e3071ac51596ace7c9a30e839d3b265281d832d88a2f502ca9602296f42cc => moved successfully C:UsersThadAppDataLocalLow26a7f29f28baccf7885d3282f68c31b297a14f1882734fb5461717a490c45576 => moved successfully C:UsersThadAppDataLocalLow67b8c0f30ace3eafb827a1cad29dfad12466140d24d3c2f9291fbe84545dfd8f => moved successfully "HKLMSoftwareMicrosoftWindows NTCurrentVersionScheduleTaskCachePlain{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully "HKLMSoftwareMicrosoftWindows NTCurrentVersionScheduleTaskCacheTasks{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully C:WINDOWSSystem32TasksMicrosoftWindowsUpdateOrchestratorUSO_UxBroker => moved successfully "HKLMSoftwareMicrosoftWindows NTCurrentVersionScheduleTaskCacheTreeMicrosoftWindowsUpdateOrchestratorUSO_UxBroker" => removed successfully "HKUS-1-5-21-882842961-3036847200-2927150070-1002SoftwareMicrosoftWindowsCurrentVersionRun\BingWallpaperDaemon" => removed successfully "C:WINDOWSsystem32GroupPolicyUser" Folder move: C:WINDOWSsystem32GroupPolicyUser => moved successfully C:WINDOWSsystem32GroupPolicyGPT.ini => moved successfully ========= netsh winsock reset catalog ========= Sucessfully reset the Winsock Catalog.

You must restart the computer in order to complete the reset. ========= End of CMD: ========= ========= netsh int ip reset resetlog.txt ========= Resetting Compartment Forwarding, OK! Resetting Compartment, OK! Resetting Control Protocol, OK! Resetting Echo Sequence Request, OK! Resetting Global, OK! Resetting Interface, OK! Resetting Anycast Address, OK! Resetting Multicast Address, OK! Resetting Unicast Address, OK!

Resetting Neighbor, OK! Resetting Path, OK! Resetting Potential, OK! Resetting Prefix Policy, OK! Resetting Proxy Neighbor, OK! Resetting Route, OK! Resetting Site Prefix, OK! Resetting Subinterface, OK! Resetting Wakeup Pattern, OK! Resetting Resolve Neighbor, OK! Resetting , OK! Resetting , OK! Resetting , OK! Resetting , OK! Resetting , failed. Access is denied. Resetting , OK! Resetting , OK! Resetting , OK!

Resetting , OK! Resetting , OK! Resetting , OK! Resetting , OK! Resetting , OK! Resetting , OK! Resetting , OK! Restart the computer to complete this action. ========= End of CMD: ========= ========= reg export HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessDefaultsFirewallPolicyFirewallRules C:Firewall.reg ========= The operation completed successfully. ========= End of Reg: ========= C:Firewall.reg => moved successfully ========= netsh advfirewall reset ========= Ok.

========= End of CMD: ========= ========= netsh advfirewall set allprofiles state ON ========= Ok. ========= End of CMD: ========= ========= bitsadmin /reset /allusers ========= BITSADMIN version 3.0 BITS administration utility. © Copyright Microsoft Corp. {F1FFE9A3-B445-4CE7-B211-EFB9E03B5E9D} canceled. {6E8421F4-3A92-464E-B901-6466C45AA290} canceled. {DE06C456-6271-411D-AB2B-5F435336DF25} canceled.

{E1025EFB-4CA7-4EFD-A325-D922534E03EE} canceled. {4216DC40-A91C-4444-AB07-7F1158514247} canceled. {FD2F0574-5400-43FF-914B-247767EEE762} canceled. {49037483-8F09-4135-B9BC-3E06643CE0E2} canceled. {F83E58B1-2DD8-45C1-A59F-857BE8491946} canceled. {97FDAF3A-BF88-47A6-8450-DD9528EBA47A} canceled. {E7A8FEFC-5B79-45F5-AFA6-14E9453F9B1B} canceled. {2130CB53-F2F4-4CDA-BCA9-72E11CD36C14} canceled. {9355C10B-89A6-4328-B0C9-E4BE97A9502A} canceled.

{60521161-A245-455A-AA06-FDC688993229} canceled. {0E4D2508-5D23-4470-909D-0049504E98B6} canceled. {B7E8BC41-774A-4878-8482-161BF29F77CE} canceled. {0910B95D-FB0A-4FA7-A714-0106521C434F} canceled. {9099D541-0C6C-4C10-A432-16700ACC639D} canceled. {6D57596C-D9D7-40C0-AE7C-3EEB794D1698} canceled. {622D0AA0-2801-4C28-91D6-8269748C282C} canceled. {608BF6E2-56E1-48F8-9184-F38CB9BB7DF9} canceled. {332429F4-816E-444E-9B62-30998602AA85} canceled.

{FA4067F5-03AF-4255-BF44-A3DE87BC6550} canceled. {3B7F0D6A-5500-4FF7-8A95-8179F1D3BF62} canceled. {5162D311-49D9-46B4-83EE-E3D961CE1D36} canceled. {9DAE38FF-633D-490B-8033-05374E362188} canceled. {1C2D940E-B97E-45D0-BD9F-D3771EFA9B7E} canceled. {EEFAF8F3-6EFA-40A2-9510-1F14961CD361} canceled. 27 out of 27 jobs canceled. ========= End of CMD: ========= ========= ipconfig /flushdns ========= Windows IP Configuration Successfully flushed the DNS Resolver Cache.

========= End of CMD: ========= ========= RemoveProxy: ========= "HKU.DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsConnections\DefaultConnectionSettings" => removed successfully "HKU.DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsConnections\SavedLegacySettings" => removed successfully "HKUS-1-5-21-882842961-3036847200-2927150070-1001SOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsConnections\DefaultConnectionSettings" => removed successfully "HKUS-1-5-21-882842961-3036847200-2927150070-1001SOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsConnections\SavedLegacySettings" => removed successfully "HKUS-1-5-21-882842961-3036847200-2927150070-1002SOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsConnections\DefaultConnectionSettings" => removed successfully "HKUS-1-5-21-882842961-3036847200-2927150070-1002SOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsConnections\SavedLegacySettings" => removed successfully ========= End of RemoveProxy: ========= C:WindowsSystem32Driversetchosts => moved successfully Hosts restored successfully.

========= sfc /scannow ========= Beginning system scan.  This process will take some time. Beginning verification phase of system scan. Verification 0% complete. Verification 1% complete. Verification 1% complete. Verification 2% complete. Verification 2% complete. Verification 3% complete. Verification 4% complete. Verification 4% complete. Verification 5% complete. Verification 5% complete. Verification 6% complete.

Verification 6% complete. Verification 7% complete. Verification 8% complete. Verification 8% complete. Verification 9% complete. Verification 9% complete. Verification 10% complete. Verification 11% complete. Verification 11% complete. Verification 12% complete. Verification 12% complete. Verification 13% complete. Verification 13% complete. Verification 14% complete. Verification 15% complete. Verification 15% complete.

Verification 16% complete. Verification 16% complete. Verification 17% complete. Verification 18% complete. Verification 18% complete. Verification 19% complete. Verification 19% complete. Verification 20% complete. Verification 20% complete. Verification 21% complete. Verification 22% complete. Verification 22% complete. Verification 23% complete. Verification 23% complete. Verification 24% complete.

Verification 25% complete. Verification 25% complete. Verification 26% complete. Verification 26% complete. Verification 27% complete. Verification 27% complete. Verification 28% complete. Verification 29% complete. Verification 29% complete. Verification 30% complete. Verification 30% complete. Verification 31% complete. Verification 31% complete. Verification 32% complete. Verification 33% complete.

Verification 33% complete. Verification 34% complete. Verification 34% complete. Verification 35% complete. Verification 36% complete. Verification 36% complete. Verification 37% complete. Verification 37% complete. Verification 38% complete. Verification 38% complete. Verification 39% complete. Verification 40% complete. Verification 40% complete. Verification 41% complete. Verification 41% complete.

Verification 42% complete. Verification 43% complete. Verification 43% complete. Verification 44% complete. Verification 44% complete. Verification 45% complete. Verification 45% complete. Verification 46% complete. Verification 47% complete. Verification 47% complete. Verification 48% complete. Verification 48% complete. Verification 49% complete. Verification 50% complete. Verification 50% complete.

Verification 51% complete. Verification 51% complete. Verification 52% complete. Verification 52% complete. Verification 53% complete. Verification 54% complete. Verification 54% complete. Verification 55% complete. Verification 55% complete. Verification 56% complete. Verification 56% complete. Verification 57% complete. Verification 58% complete. Verification 58% complete. Verification 59% complete.

Verification 59% complete. Verification 60% complete. Verification 61% complete. Verification 61% complete. Verification 62% complete. Verification 62% complete. Verification 63% complete. Verification 63% complete. Verification 64% complete. Verification 65% complete. Verification 65% complete. Verification 66% complete. Verification 66% complete. Verification 67% complete. Verification 68% complete.

Verification 68% complete. Verification 69% complete. Verification 69% complete. Verification 70% complete. Verification 70% complete. Verification 71% complete. Verification 72% complete. Verification 72% complete. Verification 73% complete. Verification 73% complete. Verification 74% complete. Verification 75% complete. Verification 75% complete. Verification 76% complete. Verification 76% complete.

Verification 77% complete. Verification 77% complete. Verification 78% complete. Verification 79% complete. Verification 79% complete. Verification 80% complete. Verification 80% complete. Verification 81% complete. Verification 82% complete. Verification 82% complete. Verification 83% complete. Verification 83% complete. Verification 84% complete. Verification 84% complete. Verification 85% complete.

Verification 86% complete. Verification 86% complete. Verification 87% complete. Verification 87% complete. Verification 88% complete. Verification 88% complete. Verification 89% complete. Verification 90% complete. Verification 90% complete. Verification 91% complete. Verification 91% complete. Verification 92% complete. Verification 93% complete. Verification 93% complete. Verification 94% complete.

Verification 94% complete. Verification 95% complete. Verification 95% complete. Verification 96% complete. Verification 97% complete. Verification 97% complete. Verification 98% complete. Verification 98% complete. Verification 99% complete. Verification 100% complete. Windows Resource Protection found corrupt files and successfully repaired them. For online repairs, details are included in the CBS log file located at windirLogsCBSCBS.log.

For example C:WindowsLogsCBSCBS.log. For offline repairs, details are included in the log file provided by the /OFFLOGFILE flag. ========= End of CMD: ========= ========= DISM /Online /Cleanup-Image /CheckHealth ========= Deployment Image Servicing and Management tool Version: 10.0.26100.5074 Image Version: 10.0.26200.7840 The component store is repairable. The operation completed successfully.

========= End of CMD: ========= =========== EmptyTemp: ========== FlushDNS => completed BITS transfer queue => 0 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 13754842 B Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B Windows/system/drivers => 1998733431 B Edge => 33842798 B Firefox => 66358566 B Opera => 0 B LocalTemp, Local*.tmp, LocalLowTemp, RoamingTemp, Roaming*.tmp , IE cache, history, cookies, recent: Default => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 0 B NetworkService => 194250 B admin => 539690963 B Thad => 281183142 B RecycleBin => 0 B EmptyTemp: => 2.7 GB temporary data Removed.

================================ The system needed a reboot. ==== End of Fixlog 09:45:28 ==== Fix result of Farbar Recovery Scan Tool (x64) Version: 13-02-2026 Ran by admin (13-02-2026 14:14:21) Run:2 Running from C:UsersadminDesktopTMP     TMP Loaded Profiles: admin Boot Mode: Normal ============================================== fixlist content: ***************** Start:: CreateRestorePoint: CloseProcesses: cmd: DISM /Online /Cleanup-Image /RestoreHealth 2026-02-11 08:13 – 2026-02-12 08:55 _____ C:WindowsSysWOW64configsystemprofileAppDataLocalScreenConnect Client (38bdc149bbcd312d) [HKEY_LOCAL_MACHINESOFTWAREWOW6432NodeMicrosoftTracingScreenConnect_RASAPI32] [HKEY_LOCAL_MACHINESOFTWAREWOW6432NodeMicrosoftTracingScreenConnect_RASMANCS] [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventLogApplicationScreenConnect] End:: ***************** Restore point was successfully created.

Processes closed successfully. ========= DISM /Online /Cleanup-Image /RestoreHealth ========= Deployment Image Servicing and Management tool Version: 10.0.26100.5074 Image Version: 10.0.26200.7840 [==                         3.8%                           ]  [==                         4.8%                           ]  [===                        5.7%                           ]  [===                        6.7%                           ]  [====                       7.7%                           ]  [=====                      8.7%                           ]  [=====                      9.7%                           ]  [======                     10.6%                          ]  [======                     11.6%                          ]  [=======                    12.6%                          ]  [=======                    13.6%                          ]  [========                   14.6%                          ]  [=========                  15.5%                          ]  [=========                  16.5%                          ]  [==========                 17.5%                          ]  [==========                 18.5%                          ]  [===========                19.5%                          ]  [===========                20.2%                          ]  [============               21.2%                          ]  [============               22.2%                          ]  [=============              23.2%                          ]  [==============             24.2%                          ]  [==============             25.1%                          ]  [===============            26.1%                          ]  [===============            27.1%                          ]  [================           28.1%                          ]  [================           28.8%                          ]  [=================          29.7%                          ]  [=================          30.7%                          ]  [==================         31.7%                          ]  [==================         32.7%                          ]  [===================        33.7%                          ]  [====================       34.6%                          ]  [====================       35.6%                          ]  [=====================      36.5%                          ]  [=====================      36.9%                          ]  [=====================      37.9%                          ]  [======================     38.6%                          ]  [======================     39.6%                          ]  [=======================    40.6%                          ]  [========================   41.6%                          ]  [========================   42.6%                          ]  [=========================  43.4%                          ]  [=========================  44.4%                          ]  [========================== 45.4%                          ]  [========================== 46.3%                          ]  [===========================47.3%                          ]  [===========================48.3%                          ]  [===========================49.3%                          ]  [===========================50.3%                          ]  [===========================51.2%                          ]  [===========================52.2%                          ]  [===========================53.2%                          ]  [===========================53.5%                          ]  [===========================53.7%                          ]  [===========================54.0%                          ]  [===========================54.1%                          ]  [===========================54.3%                          ]  [===========================54.3%                          ]  [===========================54.5%                          ]  [===========================54.6%                          ]  [===========================54.6%                          ]  [===========================54.8%                          ]  [===========================54.9%                          ]  [===========================55.0%                          ]  [===========================55.1%                          ]  [===========================55.2%                          ]  [===========================55.3%                          ]  [===========================55.5%                          ]  [===========================55.5%                          ]  [===========================55.7%                          ]  [===========================55.9%                          ]  [===========================56.1%                          ]  [===========================56.2%                          ]  [===========================56.5%                          ]  [===========================56.6%                          ]  [===========================56.7%                          ]  [===========================57.6%=                         ]  [===========================58.6%=                         ]  [===========================59.5%==                        ]  [===========================59.5%==                        ]  [===========================59.5%==                        ]  [===========================62.3%====                      ]  [===========================77.4%============              ]  [===========================84.9%=================         ]  [==========================100.0%==========================]  The restore operation completed successfully.

The operation completed successfully. ========= End of CMD: ========= "C:WindowsSysWOW64configsystemprofileAppDataLocalScreenConnect Client (38bdc149bbcd312d)" Folder move: C:WindowsSysWOW64configsystemprofileAppDataLocalScreenConnect Client (38bdc149bbcd312d) => moved successfully [HKEY_LOCAL_MACHINESOFTWAREWOW6432NodeMicrosoftTracingScreenConnect_RASAPI32] => Error: No automatic fix found for this entry.

[HKEY_LOCAL_MACHINESOFTWAREWOW6432NodeMicrosoftTracingScreenConnect_RASMANCS] => Error: No automatic fix found for this entry. [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventLogApplicationScreenConnect] => Error: No automatic fix found for this entry. The system needed a reboot. ==== End of Fixlog 14:25:16 ==== Fix result of Farbar Recovery Scan Tool (x64) Version: 13-02-2026 Ran by admin (13-02-2026 15:29:13) Run:3 Running from C:UsersadminDesktopTMP     TMP Loaded Profiles: admin Boot Mode: Normal ============================================== fixlist content: ***************** Start:: CloseProcesses: DeleteKey: HKEY_LOCAL_MACHINESOFTWAREWOW6432NodeMicrosoftTracingScreenConnect_RASAPI32 DeleteKey: HKEY_LOCAL_MACHINESOFTWAREWOW6432NodeMicrosoftTracingScreenConnect_RASMANCS DeleteKey: HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventLogApplicationScreenConnect End:: ***************** Processes closed successfully.

HKEY_LOCAL_MACHINESOFTWAREWOW6432NodeMicrosoftTracingScreenConnect_RASAPI32 => removed successfully HKEY_LOCAL_MACHINESOFTWAREWOW6432NodeMicrosoftTracingScreenConnect_RASMANCS => removed successfully HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventLogApplicationScreenConnect => removed successfully The system needed a reboot. ==== End of Fixlog 15:29:14 ====

Summary

This report covers the latest developments in samsung. The information presented highlights key changes and updates that are relevant to those following this topic.

---